Blogpro IT » Uncategorized

Fedora: ajouter un programme au démarrage

Minus — Tue, 31 Mar 2009 18:24:00 +0000

1.) make a new file in the /etc/init.d/ directory
2.) add your script to this file with the following lines at the top
#!/bin/bash
# chkconfig: 345 85 15
# description: of your file
3.) enter this in the shell
chkconfig --add startup_filename

AD CS: Nouveaute Windows Server 2008 Active Directory Certificate Services (AD CS)

Minus — Wed, 16 Jan 2008 16:52:00 +0000

Avec Windows Server 2008, les PKI ont été totalement revu.

On voit apparaitre AD CS (Active Directory Certificate Services) qui englobe de nombreux services autour du PKI

Online Certificate Status Protocol (OCSP)

Online Responder basé sur le protocole OCSP permet de remplacer la publication, souvent fastidieuse, de la CRL (Certificate Revocation Lists), indispensable pour une bonne gestion de certificats généré par les CAs (Certificate Authorities)

Pour une plus grande disponibilité, il est possible de couplé plusieur serveur Online Responder afin de créer une Online Responder Array.

Network Device Enrollment Service (NDES)

NDES fonctionne comme un filtre ISAPI (Internet Server Application Programming Interface) utilisé par IIS qui gére :

- l’authentification “authomatique” à travers les navigateur
- l’enrollment des requêtres SCEP (Simple Certificate Enrollment Protocol) utilisé par les passerelles VPN IPSec (Cisco avec certificat X509)

NDES s’applique aux entreprises ayant un PKI géré par un/des CA sous Windows Server 2008 et voulant améliorer la sécurité en utilisant l’IPsec avec les éléments réseau (routeurs et switchs)

Restricted Enrollment Agent

Une nouvelle notion apparait avec la gestion des droits des Agent d’enrollment sur les PKI.
Cela permet de désigner l’étendu des actions possible de chaque Agent sur le PKI.

Enterprise PKI (PKIView)

PKIView, appelé auparavant PKI Health tool sur Windows Server 2003 (outil présent dans le Ressource Kit), est présenté sous la forme d’une MMC.
Elle permet de monitorer l’état de CAs sur l’ensemble de l’entreprise.

WDS: Windows Deployment Services Role, le RIS remanie a la sauce Windows Server 2008

Minus — Wed, 16 Jan 2008 15:06:00 +0000

Windows Deployment Services Role

Server components. These components include a Pre-Boot Execution Environment (PXE) server and Trivial File Transfer Protocol (TFTP) server for network booting a client to load and install an operating system. Also included is a shared folder and image repository that contains boot images, install images, and files that you need specifically for network boot. There is also a networking layer, a multicast component, and a diagnostics component.
•	Client components. These components include a graphical user interface that runs within the Windows Pre-Installation Environment (Windows PE). When a user selects an operating system image, the client components communicate with the server components to install the image.
•	Management components. These components are a set of tools that you use to manage the server, operating system images, and client computer accounts.

Changes from RIS

Changes from Windows Deployment Services on Windows Server 2003

•	Ability to deploy Windows Vista and Windows Server 2008.
•	Windows PE is the boot operating system.
•	Image based installation using Windows image (.wim) files.
•	Ability to transmit data and images using multicast.
•	Ability to transmit data and images using multicast on a standalone server (when you install Transport Server
•	An extensible and higher-performing PXE server.
•	A new boot menu format for selecting boot images.
•	A new graphical user interface that you can use to select and deploy images and to manage Windows Deployment Services servers and clients.

•	Ability to transmit data and images using multicast.
•	Ability to transmit data and images using multicast on a standalone server (when you install Transport Server
•	Does not support RISETUP images or OSChooser screens.
•	Enhanced TFTP server.
•	Ability to network boot x64-based computers with Extensible Firmware Interface (EFI).
•	Metric reporting for installations.

Ldifde : Modification de masse de l’AD

Minus — Fri, 14 Dec 2007 16:18:00 +0000

Dn: cn= dan dinicolo, cn=users, dc=win2000trainer, dc=com
DisplayName: Dan DiNicolo
ObjectClass: user
SAMAccountName: dinicolo
UserPrincipalName: dan@2000trainers.com
TelephoneNumber: 416-555-5555

Dn: cn= jown doe, cn=users, dc=2000trainers, dc=com
DisplayName: John Doe
ObjectClass: user
SAMAccountName: doe
UserPrincipalName: doe@2000trainers.com
TelephoneNumber: 416-555-5556

Lot Parser:

http://www.microsoft.com/technet/scriptcenter/tools/logparser/default.mspx

exemple de template.tpl :

dn: CN=%FIELD_2% %FIELD_1%,OU=Americas,DC=Corp,DC=Net
changetype: add
add: userPrincipalName
userPrincipalName: %FIELD_4%
-

type c:\output.csv | logparser “SELECT * FROM STDIN” -i:CSV -o:tpl -tpl:c:\template.tpl -q:on -stats:off >c:\output.ldf

Importation dans AD: ldifde -i -f c:output.ldf

http://technet.microsoft.com/en-us/library/aa997520.aspx

http://www.networksappers.com/nuke/