My iPad keeps spitting out the error:
"A connection could not be established to the PPP server."
I am trying to connect it to a VPN I set up with Windows 7 as an incoming connection.
On the iPad, I went into the VPN settings, added a new PPTP VPN with the following information
Server: Windows 7 Computer's IP RSA SecurID: OFF
Account: Account Username
Password: Account Password
Encryption Level: Auto
Send All Traffic: ON
Proxy: Off
Now I know that it is making some connection to the Windows 7 Computer because whenever I intentionally put in the wrong VPN password on the iPad, it makes me put in the correct one before trying to connect again.
All the ports are forwarded on my router for PPTP, and my Windows 7 Firewall is even off to try to get this to work. Any help would be greatly appreciated, thanks.
In trying to debug various strange issues on a machine, I found something strange - when I go to C:\Users\administrator and get properties, security tab, it lists the users (the local admin account, system, and 'administrator' which is the domain administrator account).
It all looks fine in terms of permissions (full control, etc.) compared to other machines. The one difference is there is a small red circle with an X to the left of the user icon/name.
Additionally, there are various folders where it says access denied under there - for example, my documents!
Even logged in as the local machine administrator account (which is not named administrator), I am unable to change the permissions - it says access denied.
Any ideas what this means and how to fix it? I even tried re-joining the machine to the domain.
I'm the admin of a handful of domains on Office 365. The thing is some of my clients would like to manage their mailboxes by themselves. So I started looking into it and the closest I got was this page:
http://community.office365.com/en-us/forums/158/p/20912/98083.aspx
I created a Group Role with a Write Scope according to that post. I also assigned the Reset Password, Recipiants Creation, Mail Recipients and Distribution Groups rolls. But unfortunately that just doesnt work. The user in question is still unable to manage anything.
Any suggestions?
I need to secure a dedicated server for intranet use, the server is managed so will have software based security, but what other security should be considered for enterprise level security?
The intranet is a host for an ECM (Alfresco) managing and storing sensitive documents. As the information is sensitive we are trying to make it as secure as reasonably possible (requirement in UK law). We plan to encrypt the data on the database. It will be connected to via SSL encryption. Should we consider Hardware firewall, Private lan between the application server and database server?
Recently I was thinking about how websites like gmail and amazon use HTTPS during the login process when accessing your account. This makes sense, obviously, since you're typing in your account username and password and you would want that to be secure. However, on Facebook, among countless other websites, their logins are done with simple HTTP. Doesn't that mean that my login name and password are completely unencrypted? Which, even worse, means that all those people who login to their facebooks (or similar sites) at a wifi hotspot in public are susceptible to anyone getting their credentials using a simple packet sniffer (or something similar)? Is it really that easy? Or am I misunderstanding internet security?
I'm a software engineer working on some web related stuff, and although at the current time I'm not too involved with the security aspect of our software, I knew I should probably know the answer to this question, since it's extremely fundamental to website security.
Thanks!
I am very new in server management thing. I want to make email accounts like [email protected].
I know something to do with Sendmail thing , but dunno what ?
I am on Ubuntu 10 server.
I have a classified website which uses MySQL, PHP, Solr (java) etc etc...
I wonder where I should start after purchasing a VPS package from my provider.
There are first of all several packages, I am going with Linux because as far as I know it is the most stable system.
But I have never used Linux before!
What is Ubuntu, and which version of it should I get?
Whats 64bit Ubuntu then?
How do I install php, javascript, mysql, java and all that?
What is debian, do I need it?
What is apache, do I need that?
And most importantly, what applications do I need, that I must have?
(I mean applications which a beginner would never know was needed, what do you recommend?)
After getting the vps, how do I even access it? Do I type in some kind of IP into the browser? Or is it by ftp program?
How do I access the so called "terminal"?
Please guide me, I am completely new to Linux and VPS!
Thanks
i am beginner with centos - Linux
i have dedicated server . my root username is bnroot . now i am taking ssh using this user.
i want to disable ssh for bnroot. i have created user user name welcome i want take ssh login by welcome user then i ll use su - bnroot to get root privileges.
i have set PermitRootLogin no , AllowUsers welcome IN /etc/sshd_config and after restarting sshd service . i take ssh login by welcome use then it is ok. but when i use
su bnroot its prompt to password and i enter right passowrd it show su: incorrect password
, i dont know where i am wrong . please help me here.
changes i done -
/etc/ssh/sshd_confid
PermitRootLogin no
AllowUsers welcome
/etc/sudoers
welcome ALL=(ALL) ALL
getting error in /var/log/secure
unix_chkpwd[666]: password check failed for user (bnroot)
su: pam_unix(su:auth): authentication failure; logname=ewalletssh uid=503 euid=500 tty=pts/1 ruser=ewalletssh rhost= user=bnroot
please let me know where i am wrong
I have developed a WPF application which communicates with a set of self hosted WCF services which are under same domain and I use the following setup in the config files.
<security mode="Transport">
<transport clientCredentialType="Windows" protectionLevel="EncryptAndSign" />
<message clientCredentialType="Windows" />
</security>
I hosted the services on a server in different domain .I can achieve the communication by setting the security mode to "None" which is not ideal.
Is there any other setting i can user for cross domain communication or i have to do with some trusted certificates ? I would be glad if some one can guide me because all the searches on google directed me to silverlight applications +Crossdomain.xml+WCF but i have't seen any combination of WPF on crossdomain environment.
I have 3 pages that I want to make secure on my website using .htaccess
-login.php
-checkout.php
-account.php
I know how to make just one work page at a time using .htaccess
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteCond %{REQUEST_URI} /login.php
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L]
I and trying to figure out how to include the other 2 specific pages to make them also secure and used the expression below but it didn't work
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteCond %{REQUEST_URI} /login.php
RewriteCond %{REQUEST_URI} /checkout.php
RewriteCond %{REQUEST_URI} /account.php
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L]
Can someone help me the right expression that will work with multiple pages?
The second part of the code is that, if https is already on and a user move to a page that Is not any of the pages i specified about, I want that it should get back to http. how should I write the statement for it to redirect back to http if its not any of the pages above?
I have my statement like this but its not working
RewriteCond %{HTTPS} on
RewriteRule !(checkout|login|account|payment)\.php http://%{HTTP_HOST}%{REQUEST_URI} [L,R]
Any thoughts?
I am trying to edit the file java.security but it opens as read only. I am running as root user but I think this is happening because the java process is currently using the file.
How can I temporarily close the process and edit the file and then start java up again? I am using Fedora.
Hi,
I am using a transparent proxy (other box). When I try to do an 'apt-get update' I get these warnings (in german):
...
W: Fehlschlag beim Holen von http://security.ubuntu.com/ubuntu/dists/maverick-security/restricted/source/Sources.gz 503 Service Unavailable
W: Fehlschlag beim Holen von http://security.ubuntu.com/ubuntu/dists/maverick-security/universe/source/Sources.gz 503 Service Unavailable
W: Fehlschlag beim Holen von http://security.ubuntu.com/ubuntu/dists/maverick-security/multiverse/source/Sources.gz 503 Service Unavailable
W: Fehlschlag beim Holen von http://security.ubuntu.com/ubuntu/dists/maverick-security/main/binary-i386/Packages.gz 503 Service Unavailable
W: Fehlschlag beim Holen von http://security.ubuntu.com/ubuntu/dists/maverick-security/restricted/binary-i386/Packages.gz 503 Service Unavailable
W: Fehlschlag beim Holen von http://security.ubuntu.com/ubuntu/dists/maverick-security/universe/binary-i386/Packages.gz 503 Service Unavailable
E: Einige Indexdateien konnten nicht heruntergeladen werden, sie wurden ignoriert oder alte an ihrer Stelle benutzt.
I changed ~.bashrc:
http_proxy=http://192.168.120.199:8080
https_proxy=https://192.168.120:8080
export http_proxy
export https_proxy
I wrote on commandline:
export http_proxy=http://proxyusername:proxypassword@proxyaddress:proxyport
sudo apt-get update
And I edited /etc/apt/apt.conf:
Acquire::http::proxy "http://192.168.120.199:8080/";
Acquire::ftp::proxy "http://192.168.120.199:8080/";
Nothing has worked.
Does anyone knows how to make apt-get working through a transparent proxy?
Regards,
ubuntu2man
Oracle is pleased to
announce that the Oracle Solaris 11.1 operating system has achieved a Common
Criteria certification at Evaluation Assurance Level (EAL) 4 augmented by Flaw
Remediation under the Canadian Communications Security Establishment’s (CSEC) Canadian Common Criteria Scheme (CCCS).
EAL4 is the highest level achievable for commercial software, and is the
highest level mutually recognized by 26 countries under the current Common
Criteria Recognition Arrangement (CCRA).
Oracle Solaris 11.1 is
conformant to the BSI Operating System Protection Profile v2.0 with
the following four extended packages. (1) Advanced Management, (2) Extended
Identification and Authentication, (3) Labeled Security, and (4)
Virtualization.
Common Criteria is an
international framework (ISO/IEC 15408) which defines a common approach for
evaluating security features and capabilities of Information Technology
security products.
A certified product is
one that a recognized Certification Body asserts as having been evaluated by a
qualified, accredited, and independent evaluation laboratory competent in the
field of IT security evaluation to the requirements of the Common Criteria and
Common Methodology for Information Technology Security Evaluation.
Oracle Solaris is the
industry’s most widely deployed UNIXtm operating system,
delivers mission critical cloud infrastructure with built-in virtualization,
simplified software lifecycle management, cloud scale data management, and
advanced protection for public, private, and hybrid cloud environments. It
provides a suite of technologies and applications that create an operating
system with optimal performance. Oracle Solaris 11.1 includes key technologies
such as Trusted Extensions, the Oracle Solaris Cryptographic Framework, Zones,
the ZFS File System, Image Packaging System (IPS), and multiple boot
environments.
The Oracle Solaris 11.1
Certification Report and Security Target can be viewed on the Communications Security Establishment Canada (CSEC)
site and on the Common Criteria Portal.
For more information on
Oracle’s participation in the Common Criteria program, please visit the main
Common Criteria information page here:
(http://www.oracle.com/technetwork/topics/security/oracle-common-criteria-095703.html)
For a complete list of
Oracle products with Common Criteria certifications and FIPS 140-2 validations,
please see the Security Evaluations website here:
(http://www.oracle.com/technetwork/topics/security/security-evaluations-099357.html).
I have recently upgraded my cluster from 11.10 to 12.04. After the upgrade, I am having trouble running apt-get on the cluster nodes. I can ssh between the nodes (client-to-client; client-to-head; client-to-external etc.). However, sudo apt-get update produces the following errors:
Ign http://us.archive.ubuntu.com precise InRelease
Ign http://security.ubuntu.com precise-security InRelease
Ign http://www.openfoam.org maverick InRelease
Ign http://us.archive.ubuntu.com precise-updates InRelease
Err http://security.ubuntu.com precise-security Release.gpg
Something wicked happened resolving 'security.ubuntu.com:http' (-5 - No address associated with hostname)
Err http://www.openfoam.org maverick Release.gpg
Something wicked happened resolving 'www.openfoam.org:http' (-5 - No address associated with hostname)
Ign http://us.archive.ubuntu.com precise-backports InRelease
Ign http://www.openfoam.org maverick Release
Ign http://security.ubuntu.com precise-security Release
Err http://us.archive.ubuntu.com precise Release.gpg
Something wicked happened resolving 'us.archive.ubuntu.com:http' (-5 - No address associated with hostname)
Ign http://security.ubuntu.com precise-security/main Sources/DiffIndex
Err http://us.archive.ubuntu.com precise-updates Release.gpg
Something wicked happened resolving 'us.archive.ubuntu.com:http' (-5 - No address associated with hostname)
Ign http://security.ubuntu.com precise-security/restricted Sources/DiffIndex
15% [Connecting to us.archive.ubuntu.com] [Connecting to security.ubuntu.com] [Connecting to www.openfoam.org]
On the headnode, I have in /etc/network/iterfaces:
auto eth0
iface eth0 inet static
address 192.168.0.1/24
On the client nodes, I have /etc/network/iterfaces:
auto eth0
iface eth0 inet static
address 192.168.0.101
netmask 255.255.255.0
gateway 192.168.0.1
Please advise.
I'm attempting to determine whether a user is a member of a given group using System.DirectoryServices.AccountManagment.
I'm doing this inside a SharePoint WebPart in SharePoint 2007 on a 64-bit system.
Project targets .NET 3.5
Impersonation is enabled in the web.config.
The IIS Site in question is using an IIS App Pool with a domain user configured as the identity.
I am able to instantiate a PrincipalContext as such:
PrincipalContext pc = new PrincipalContext(ContextType.Domain)
Next, I try to grab a principal:
using (PrincipalContext pc = new PrincipalContext(ContextType.Domain))
{
GroupPrincipal group = GroupPrincipal.FindByIdentity(pc, "MYDOMAIN\somegroup");
// snip: exception thrown by line above.
}
Both the above and UserPrincipal.FindByIdentity with a user SAM throw a DirectoryServicesCOMException: "Logon failure: Unknown user name or bad password"
I've tried passing in a complete SAMAccountName to either FindByIdentity (in the form of MYDOMAIN\username) or just the username with no change in behavior. I've tried executing the code with other credentials using both the HostingEnvironment.Impersonate and SPSecurity.RunWithElevatedPrivileges approaches and also experience the same result.
I've also tried instantiating my context with the domain name in place:
Principal Context pc = new PrincipalContext(ContextType.Domain, "MYDOMAIN");
This throws a PrincipalServerDownException: "The server could not be contacted."
I'm working on a reasonably hardened server. I did not lock the system down so I am unsure exactly what has been done to it. If there are credentials I need to allocate to my pool identity's user or in the domain security policy in order for these to work, I can configure the domain accordingly. Are there any settings that would be preventing my code from running? Am I missing something in the code itself? Is this just not possible in a SharePoint web?
EDIT:
Given further testing, my code functions correctly when tested in a Console application targeting .NET 4.0. I targeted a different framework because I didn't have AccountManagement available to me in the console app when targeting .NET 3.5 for some reason.
using (PrincipalContext pc = new PrincipalContext(ContextType.Domain))
using (UserPrincipal adUser = UserPrincipal.FindByIdentity(pc, "MYDOMAIN\joe.user"))
using (GroupPrincipal adGroup = GroupPrincipal.FindByIdentity(pc, "MYDOMAIN\user group"))
{
if (adUser.IsMemberOf(adGroup))
{
Console.WriteLine("User is a member!");
}
else
{
Console.WriteLine("User is NOT a member.");
}
}
What varies in my SharePoint environment that might prohibit this function from executing?
I am trying to migrate an .hta application to a C# executable. Of course, since it's an .hta the code is all HTML and Jscript, with calls to local ActiveX objects.
I created a C# executable project and am just using the WebBrowser control to display the HTML content. Simply renamed the .hta to an .html and took out the HTA declarations.
Everything works great, except that when I make calls to the ActiveX objects, I get a security popup warning of running an ActiveX control on the page.
I understand why this is happening since the WebBrowser control is essentially IE and uses the Internet Options security settings, but is there any way to get the WebBrowser control to bypass security popups, or a way to register the executable or DLLs as being trusted without having to change settings in Internet Options? Even a way to do on a deployment package would work as well.
I'm using the HTTPService object in actionscript to send some data to a php file on another server which then inserts the data to a database. I set up the crossdomain.xml file in the root of the directory that contains the php file to get around any security issues.
Everything works fine on Firfox 3.5 (on mac and pc) and on IE 7 & 8. When testing on Safari 4 I get an error which would be expected when a crossdomain.xml doesn't exist.
[RPC Fault faultString="Security error
accessing url"
faultCode="Channel.Security.Error"
faultDetail="Destination:
DefaultHTTP"] at
mx.rpc::AbstractInvoker/http://www.adobe.com/2006/flex/mx/internal::faultHandler()
at mx.rpc::Responder/fault() at
mx.rpc::AsyncRequest/fault() at
DirectHTTPMessageResponder/securityErrorHandler()
at
flash.events::EventDispatcher/dispatchEventFunction()
at
flash.events::EventDispatcher/dispatchEvent()
at
flash.net::URLLoader/redirectEvent()
Any ideas on how to get this to work on Safari? It's seems as if Safari isn't accessing the crossdomain.xml file.
I am using Silverlight 3 on my website. I have a Login Page for role based authentication, that routes users with different privileges to different parts of the website. I want to use something analogous to the Session Variables available in standard ASP.Net applications.
I intend to use Isolated Storage to achieve this. But I am skeptical about security in this option, as the Isolated Storage exists on the client side, and can be manipulated on client side. I am new to the Isolated Storage concept and don't know about the security options provided by it in terms of Encryption and server-side validation etc. If any of you have used it or are aware of the security provided in this case, could you please shed some light on the same.
Thanks
I am trying to migrate an .hta application to a C# executable. Of course, since it's an .hta the code is all HTML and Jscript, with calls to local ActiveX objects.
I created a C# executable project and am just using the WebBrowser control to display the HTML content. Simply renamed the .hta to an .html and took out the HTA declarations.
Everything works great, except that when I make calls to the ActiveX objects, I get a security popup warning of running an ActiveX control on the page.
I understand why this is happening since the WebBrowser control is essentially IE and uses the Internet Options security settings, but is there any way to get the WebBrowser control to bypass security popups, or a way to register the executable or DLLs as being trusted without having to change settings in Internet Options? Even a way to do on a deployment package would work as well.
I've got an ASP.NET WebForms app that I've written, which uses the ASP.NET AJAX Toolkit. I've put the MultiView control onto the web form, and it worked fine, when I had it under Vista. Well, I had to replace my machine (HD failed) and I went to Windows 7 Ultimate. I tried copying the ASP.NET app from the system (before it finally failed for good) and put it onto the Windows 7 machine. I can bring up the app fine, go to all pages, but the one with these controls on it. When I do I get the following error:
Security Exception
Description: The application attempted to perform an operation not allowed by the
security policy. To grant this application the required permission please contact your
system administrator or change the application's trust level in the configuration file.
Exception Details: System.Security.SecurityException: Request for the permission of
type 'System.Web.AspNetHostingPermission, System, Version=2.0.0.0, Culture=neutral,
PublicKeyToken=b77a5c561934e089' failed.
What's going on? How do I fix it?