вторник, 30 сентября 2014 г.

сертификат для Kaspersky Security 8.0 (самоподписанный)

ключ .klmsui.key
запрос
openssl req -new -key .klmsui.key -out klmsui.csr
сертификат
openssl x509 -req -days 365 -in klmsui.csr -signkey .klmsui.key -out .klmsui.crt

service httpd restart

Удаление хранилища

/opt/kaspersky/klms/bin/klms-control --backup --query --mass-remove

/opt/kaspersky/klms/bin/klms-control -b --query --mass-remove --limit 6000

/opt/kaspersky/klms/bin/klms-control --backup --statistics
/opt/kaspersky/klms/bin/klms-control --backup –-remove --rule-id 3

среда, 18 июня 2014 г.

Opportunistic Locking and Read Caching on Microsoft Windows Networks


Disabling Oplocks on Windows Client PCs
To disable oplocks on a Windows client PC (a Windows PC that accesses an embedded database table hosted on another PC), change or add the following Registry values:
  • HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MRXSmb\Parameters OplocksDisabled = 1

Disabling Oplocks on Windows Servers
To disable oplocks on a Windows server (a Windows PC that hosts an embedded database table accessed from another PC), change or add the following Registry values:
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters EnableOplocks = 0

Disabling Oplocks on SMB2 and SMB3
Oplocks cannot be turned off for SMB2 and SMB3. You can disable SMB2 and SMB3 themselves, how to do so is documented by Microsoft in Knowledge Base article 2696547.
According to that article, SMB2 and SMB3 can be disabled on Windows operating systems that support these.
To disable SMB2 and SMB3 on a Windows Vista, 7, 8, Server 2008 or Server 2012 PC hosting embedded database tables, change or add the following Registry value:
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters SMB2 = 0
Once SMB2 and SMB3 are disabled, SMB1 should be re-enabled to be used again and the methods described above applied to disable oplocks for SMB1.
To re-enable SMB1 on a Windows Vista, 7, 8, Server 2008 or Server 2012 PC hosting embedded database tables, change or add the following Registry value:
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters SMB1 = 1


источник

На клиенте
So, for troubleshooting purposes, mostly in an environment that has mixes operating systems, you might want to consider disabling SMB 2.0. You need to do so on both the “client” and the “server” operating systems. To disable SMB 2.0 for Windows Vista or Windows Server 2008 systems that are the “client” systems run the following commands:
Note there’s an extra ” ” (space) after the “=” sign.
To enable back SMB 2.0 for Windows Vista or Windows Server 2008 systems that are the “client” systems run the following commands:
Again, note there’s an extra ” ” (space) after the “=” sign.

источник

четверг, 3 апреля 2014 г.

Включить и Выключить Интерфейс на CISCO

Простые примеры того, как поднимать и тушить интерфейсы на устройствах CISCO с помощью команд shutdown и no shutdown.

Включить Интерфейс на CISCO

Выполните следующие команды для включения интерфейса на свиче или роутере CISCO :


# enable
# configure terminal
(config)# interface FastEthernet 0/1
(config-subif)# no shutdown
(config-subif)# end
# write

Для отображения статуса интерфейса, выполните 'show interfaces status' :
# show interfaces FastEthernet 0/1 status
Port Name Status Vlan Duplex Speed Type
Fa0/1 connected 15 full 100 10/100BaseTX

Выключить Интерфейс на CISCO

Выполните следующие команды для выключения интерфейса на свиче или роутере CISCO :
# enable
# configure terminal
(config)# interface FastEthernet 0/1
(config-subif)# shutdown
(config-subif)# end
# write

Для отображения статуса интерфейса, выполните 'show interfaces status' :
# show interfaces FastEthernet 0/1 status
Port Name Status Vlan Duplex Speed Type
Fa0/1 disabled 15 full 100 10/100BaseTX

воскресенье, 19 января 2014 г.

KeePass

VMWARE vCenter 5.1 просрочен пароль admin@System-Domain


Cause:


 This issue occurs when the Admin@system-domain password has expired, the default is 365 days.


Подключится к базе через  SQL Server Management Studio Express

To connect to the vCenter Server database using SQL Server Management Studio Express:
  1. Start  SQL Server Management Studio Express.
  2. If the Connect to Server dialog does not appear, click File > Connect Object Explorer.
  3. Enter .\VIM_SQLEXP in the Server Name field.

    Note: The default instance name is VIM_SQLEXP .

  4. Click Connect.
 

Resolution:


To resolve this issue, increase the MAX_LIFE_SEC column in the dbo.IMS_AUTHN_PASSWORD_POLICY table.
To increase the MAX_LIFE_SEC column:.
  1. Stop the SSO service.
  2. Login to SQL Management Studio.
  3. Go to the RSA database.
  4.  Expand the Tables and highlight the dbo.IMS_AUTHN_PASSWORD_POLICY table.
  5. Right click and choose Edit Top 200 Rows.
  6. Scroll over to the MAX_LIFE_SEC column. The default setting is 31536000seconds (365 days).
  7. Increase this value (for example, 32400000, this equals 375 days).
  8. Restart the SSO service.
  9. Once the service has started login to the Web Client with admin@system-domain:
  10. Navigate to Administration > Configuration.
  11. Click the Policies tab.
  12. Click Edit.
  13. Change maximum lifetime to 0 (never expire) or increase the value (in days) if required.



Reference: Logging in to the Web Client using admin@system-domain fails with the error: associated users password is expired.