Tag Archives: Active Directory

Computers

Dropbox for Business launches, offering single sign-on

Leave a comment

Cloud-storage provider Dropbox announced today the introduction of Dropbox for Business, a team-oriented version of the service with a particularly IT-friendly feature: single sign-on (SSO).

Dropbox, of course, allows users to archive, share, and access files across multiple devices: desktops, laptops, smartphones, tablets, and so on. Over the years it has grown synonymous with online file storage, arguably beating out every other service for mind-share, if not actual number of users.

The new Dropbox for Business is actually a rebranded Dropbox for Teams, which launched in 2011. Pricing continues to start at $795 annually for up to five users, though you now get “as much storage as you need” rather than a fixed amount.

Back in February, the company unveiled a new admin console and sharing controls for the service. But the marquee feature accompanying the new launch is SSO, which, as described by Dropbox’s Anand Subramani, “works behind the scenes to let users sign in just once to a central identity provider, like Active Directory, and securely access all their business apps, like Dropbox. With SSO, companies can put their existing trusted identity provider in charge of the authentication process.”

To read this article in full or to leave a comment, please click here

Source: FULL ARTICLE at PCWorld

Computers

Patch Tuesday leaves Internet Explorer zero day untouched

Leave a comment

It’s Patch Tuesday time again. This month Microsoft has unleashed nine new security bulletins. Nine is a reasonably high number of updates, however, only two of them are rated as Critical. So, it’s actually a little more laid back than most months, but there’s still cause for concern.

There are seven security bulletins rated as Important, which affect a range of platforms and services including Active Directory, the Windows antimalware client, and the Windows Kernel. The two Critical security bulletins apply to Internet Explorer and Remote Desktop. Be prepared—most of the patches require a reboot.

Wolfgang Kandek, CTO of Qualys, suggests that IT admins focus on Internet Explorer first. “This month, the most important bulletin to apply to your infrastructure is MS13-028, which contains a new release of Internet Explorer (IE) covering all versions of the browser starting with IE6 going to IE10, and also including Windows RT, the operating system for mobile devices and tablets.”

Andrew Storms, director of security operations for nCircle (a Tripwire company), agrees that Internet Explorer deserves attention, but adds that Internet Explorer lacks its usual “patch immediately” urgency. Microsoft has assigned the underlying IE flaws with an exploit index rating of two, which indicates that Microsoft believes they are exceptionally difficult to exploit, and there’s not likely to be a successful exploit in the next 30 days.

To read this article in full or to leave a comment, please click here

…read more

Source: FULL ARTICLE at PCWorld

Linux

Debug help

Leave a comment

By Scourge-

Hello, I was looking at kernel log’s and found some parts what was “interesting”

I previously started looking what has been going on in my computer because I had hacker attacks on my machine.

Installed Avira & Little Snitch – softwares

Previously my computer opened few folders what I have not opened my self so some script from internet obviously is installed at some point.

This does not mean “a lot” – mostly security threat of my computer (which does not contain any secret / harmful material at all) but still I keep wondering about few things and decided to post an comment to here to get some debugging help from more experienced people.

Thanks for your notice / interest.

2013-03-28 16:11:44.418 EET – opendirectoryd (build 172.17) launched…
2013-03-28 16:11:44.419 EET – Logging level limit changed to ‘error’
2013-03-28 16:11:52.873 EET – Initialize trigger support
2013-03-28 16:11:52.874 EET – Registered node with name ‘/Active Directory‘ as hidden
2013-03-28 16:11:52.874 EET – Registered node with name ‘/Configure’ as hidden
2013-03-28 16:11:52.875 EET – Discovered configuration for node name ‘/Contacts’ at path ‘/Library/Preferences/OpenDirectory/Configurations//Contacts.plist’
2013-03-28 16:11:52.875 EET – Registered node with name ‘/Contacts’
2013-03-28 16:11:52.875 EET – Registered node with name ‘/LDAPv3’ as hidden
2013-03-28 16:11:52.877 EET – Registered node with name ‘/Local’ as hidden
2013-03-28 16:11:52.878 EET – Registered node with name ‘/NIS‘ as hidden
2013-03-28 16:11:52.879 EET – Discovered configuration for node name ‘/Search’ at path ‘/Library/Preferences/OpenDirectory/Configurations//Search.plist’
2013-03-28 16:11:52.879 EET – Registered node with name ‘/Search’
2013-03-28 16:11:52.880 EET – Loaded bundle at path ‘/System/Library/OpenDirectory/Modules/legacy.bundle’
2013-03-28 16:11:52.882 EET – Loaded bundle at path ‘/System/Library/OpenDirectory/Modules/search.bundle’
2013-03-28 16:11:53.884 EET – ‘/Search’ has registered, loading additional services
2013-03-28 16:11:53.884 EET – Initialize augmentation support
2013-03-28 16:11:53.887 EET – Loaded bundle at path ‘/System/Library/OpenDirectory/Modules/SystemCache.bundle’
2013-03-28 16:11:53.891 EET – Successfully registered for Kernel identity service requests
2013-03-28 16:11:53.896 EET – Loaded bundle at path ‘/System/Library/OpenDirectory/Modules/PlistFile.bundle’
2013-03-28 16:11:53.897 EET – Loaded bundle at path ‘/System/Library/OpenDirectory/Modules/FDESupport.bundle’
2013-03-28 16:11:53.910 EET – Loaded bundle at path ‘/System/Library/OpenDirectory/Modules/ConfigurationProfiles.bundle’
2013-03-28 16:11:53.910 EET – Registered subnode with name ‘/Local/Default’
2013-03-28 16:12:10.289 EET – Loaded bundle at path ‘/System/Library/OpenDirectory/Modules/ldap.bundle’

…read more
Source: FULL ARTICLE at The UNIX and Linux Forums

Linux

Configure Solaris to accept Active Directory user logins

Leave a comment

By BG_JrAdmin

Is it possible to configure a Solaris server to authenticate users against an Active Directory server when logging in via ssh?

I’ve seen some docs out there, I’ve followed their instructions, but it does not work. And I’m beginning to wonder if it is possible or even supported by Oracle. The dics I saw seemed to be making the solaris server be an AD client to access shares but i want to get ssh logins working.

Has anyone successfully done this?

…read more
Source: FULL ARTICLE at The UNIX and Linux Forums

Linux

Trouble with Kerberos/LDAP and AIX 6.1

Leave a comment

By jgeiger

The KRB5ALDAP compound load module is giving me fits. Everything looks like it should be working, but no.

Goal: Integrate AIX host with Active Directory using a KRB5ALDAP compound load module so that users can be created in AD and used in AIX, with unix attributes (registry values) being pulled from AD. Eliminate the need to manage user accounts on a per-server basis.

Issue: User attributes are visible with lsuser and returned with ldapsearch. Kerberos authentication shows successful at the domain controller, but a “permission denied” or “invalid login or password” message is displayed. Files can be chown-ed to the user accounts, but SU fails.

I attached a doc with the pertinent configs and troubleshooting steps. Since making that doc, I have also chased the enctype (switched to solely RC4) and the KVNO (tried 2, 3, 4). But no love.

Any help would be greatly appreciated.

Source: FULL ARTICLE at The UNIX and Linux Forums

Linux

UNIX authentication strategy – LDAP or AD

Leave a comment

By x96riley3

We are looking at using Tivoli Directory Server (LDAP) or Active Directory 2003 for authentication. I wanted to get some feedback from the community. Our goal is to do it the simplest, easiest, and cheapest way that allows for centralized user authentication. We are mainly an AIX environment with some Red Hat and Suze mixed in.

All advice greatly appreciated.

Source: FULL ARTICLE at The UNIX and Linux Forums

Linux

How to Map AD groups to Samba share?

Leave a comment

By sunnysthakur

I am setup a samba share server which is authenticating from Active Directory.

I am able to access the share with AD user but not able to access when group defined in “valid users” parameters.

below are the steps i performed.

In smb.conf

[global]
workgroup = QASLABS
password server = WIN-60I6H2BG237.qaslabs.net
realm = QASLABS.NET
preferred master = no
security = ADS
idmap backend = ad
idmap uid = 100-20000000
idmap gid = 100-20000000
winbind separator = +
template shell = /bin/bash
winbind use default domain = true
winbind offline logon = false
preferred master = no
server string = Linux Test Machine
encrypt passwords = yes
log level = 3
log file = /var/log/samba/%m
max log size = 50
printcap name = cups
printing = cups
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
winbind nested groups = yes
netbios name = smbad
hosts allow = 127.0.0.1 192.16.17.0/24
passdb backend = tdbsam
template homedir = /home/%U
winbind nss info = rfc2307

[Data]
comment = Directory for storing Data
path= /opt/data
valid users = @NETWORK+itadmin NETWORK+testadmin
#valid users = @”QASLABS.NET\itadmin”
writeable = yes
browseable=yes
create mask = 775
directory mask = 775
hosts allow = 127.0.0.1 192.16.17.0/24

In /etc/nsswitch.conf

passwd: files winbind
shadow: files winbind
group: files winbind
hosts: files dns wins
bootparams: nisplus [NOTFOUND=return] files
ethers: db files
netmasks: files
networks: files
protocols: db files
rpc: files
services: files
netgroup: files
publickey: nisplus
automount: files
aliases: files nisplus

On executing the wbinfo -u i am getting the user list from AD

[root@smbad ~]# wbinfo -u
administrator
guest
krbtgt
testdev
testadmin
testhr
testqa
testit
testcmt
testsupp
testituser

On executing the wbinfo -u i am getting the user list from AD. But groups i created on AD is not displaying in this list [i.e itadmin]

[root@smbad ~]# wbinfo -g
BUILTIN+administrators
BUILTIN+users
SMBAD+itadmin
domain computers
domain controllers
domain admins
domain users
domain guests
group policy creator owners
read-only domain controllers
dnsupdateproxy
cert publishers
ras and ias servers
allowed rodc password replication group
denied rodc password replication group
dnsadmins
schema admins
enterprise admins
enterprise read-only domain controllers

Please help on how to map AD group to samba so that group permissions can be setup on samba

Source: FULL ARTICLE at The UNIX and Linux Forums

Linux

Samba with password server

Leave a comment

By batasHi guys,

I have also here a Sol-10 with samba configured all is working out but just want to know if i set a password server pointing to a windows domain with Active Directory… do i still have to create a samba user on my Sol-10 or all username/pass authentication will be done on the windows domain? and if i want a new user to use the samba share ill just create his account on the windows domain?
Source: The UNIX and Linux Forums