随笔分类 - Network
.NET默认一个客户端对同一个服务器地址同时只能建立2个TCP连接
摘要:做一个客户端的测试小程序测试web service的并发处理。开始用async task做,不管创建多少个task,用netstat看同时只有两个tcp连接。以为是async task的问题,改用BackgroundWorker和多线程都是同样的问题,经google得知原来是.NET默认一个客户端对
阅读全文
homekit2mqtt on DietPi
摘要:Followed official install instruction and got: dns_sd.DNSServiceRegister(self.serviceRef, flags, ifaceIdx, name,^ Error: dns service error: unknown Tu
阅读全文
Minimum setup for Apache+AD SSO
摘要:参照: http://www.grolmsnet.de/kerbtut/ https://docs.typo3.org/typo3cms/extensions/ig_ldap_sso_auth/2.1.1/AdministratorManual/ConfigureApacheKerberos.htm
阅读全文
Minimum configuration for openldap to proxy multiple AD into a single search base
摘要:[root@localhost ~]# cd /etc/openldap[root@localhost openldap]# cat slapd.confloglevel 0x900include /etc/openldap/schema/core.schemapidfile /var/run/op
阅读全文
ASDM through site to site VPN
摘要:网上大部分文档只提到两个地方需要设置:在6.2版本确实可以。但在7.2版本上只有用vpn client或anyconnect client连上的客户端可以用ASDM连上ASA,而通过site to site VPN的还不行。7.2上还有一个地方要设置:
阅读全文
PHP, LDAPS and Apache
摘要:要PHP可以连接到用self-signed certificate的ldaps服务器,需要在/etc/ldap.conf中添加一行:TLS_REQCERT never要PHP在Apache中连接到用self-signed certificate的ldaps服务器,需要在httpd.conf中添加...
阅读全文
DFS security warning and use group policy to set up internet security zones
摘要:Opening a file from a DFS domain share shows a security warning while openning from the server share directly doesn't.To solve this problem, add "*.do...
阅读全文
Fix network adapter not present problem in cloned CentOS
摘要:(You can find a lot of articles on this from the internet. I just put it here for my own record.)It's because the cloned system has the original mac a...
阅读全文
NX 8.5 License Server Firewall Setting
摘要:Reference:http://eng-tips.com/viewthread.cfm?qid=284511The FLEXNet Server(lmgrd) listens to 28000 by default and opens a dynamic port for vendor daemo...
阅读全文
Cisco ASA intra-interface routing
摘要:LAN1和LAN2的默认路由指向各自的ASA,各ASA中设置对方LAN的静态路由指向ROUTER,打开ASA的intra-interface traffic,关闭LAN1和LAN2地址互相访问的NAT,这时LAN1和LAN2互相可以ping,但TCP连接失败,原因请看:http://www.cisc...
阅读全文
How to configure windows machine to allow file sharing with dns alias (CNAME)
摘要:Source:http://serverfault.com/questions/23823/how-to-configure-windows-machine-to-allow-file-sharing-with-dns-aliasAllowing other machines to use file...
阅读全文
Install unifi controller on CentOS
摘要:http://loeric9.blogspot.ca/2013/11/unifi-controller-on-centos.html
阅读全文
Windows 7 防火墙对Virtualbox guest的影响
摘要:今天测试ASA的public servers配置,在自己的Win7手提用Virtualbox装了个Linux作为测试服务器,网络设置为bridged。从外网可以ping通测试服务器,也可以连80端口,但别的端口如ssh、pop3等都连不上。搞了半天,才发现这些端口只能从我的手提电脑(也就是Virtualbox的host)连上,内部网别的机器都连不上,把host的防火墙关掉就好了。以前一直以为host的网络跟guest的网络是互相独立的,vmware从没出现过这种问题,以前用Virtualbox也没有发现这个问题。进一步搜索发现还有别人遇到类似的情况:https://forums.virtual
阅读全文
windows7 自带l2tp/ipsec VPN客户端连接Cisco ASA
摘要:搞了半天,最后发现其实很简单,在ASA默认配置的基础上,把所有crypto ipsec ikev1 transform-set 加上mode transport,然后把tunnel-group DefaultRAGroup的pre-shared-key输入到Windows L2TP/IPSec VPN设置的Advanced Settings里就行了。不过会影响Cisco VPN Client的连接,因为它不能用mode transport。如果都要用,就要保留原来的tranform-set,新建tranform-set,设置mode transport,然后加入到dynamic-map里。详情
阅读全文
立即更新Global Address List and Offline Address Book
摘要:进入Exchange Management Shell,运行:Get-GlobalAddressList | Update-GlobalAddressListGet-OfflineAddressBook | Update-OfflineAddressBookGet-ClientAccessServer | Update-FileDistributionService然后在outlook重新下载Offline Address Book。原文:http://jeffwouters.nl/index.php/2012/09/powershell-howto-update-the-gal-and-oa
阅读全文
SELinux and authorized_keys
摘要:经常出现一个问题,很多linux默认安装是激活selinux的,这时root的~/.ssh/authorized_keys可能不起作用。运行一下:restorecon -R -v /root/.ssh就好了。原文:http://www.pyrosoft.co.uk/blog/2013/01/12/setting-up-ssh-authorized_keys-with-selinux-enabled/
阅读全文
在dhcpd.conf中配置静态路由
摘要:option ms-classless-static-routes code 249 = array of unsigned integer 8;option rfc3442-classless-static-routes code 121 = array of unsigned integer 8;subnet 192.168.1.0 netmask 255.255.255.0 { option routers 192.168.1.1; option ms-classless-static-routes 24,192,168,2,192,168...
阅读全文
IPhone4与Exchange 2010同步失败
摘要:今天拿到IPhone4,设置与Exchange 2010同步,帐号建立成功,同步时出错:“cannot get mail the connection to the server failed”。別的同事的帐号都没问题。google之,原来是因为我的帐号是管理员。解决办法是在帐号的属性->Security->Advanced中选中"Include inheritable permissions from this object's parent",然后马上同步Exchange。一小时内这个选项会被自动还原。具体原因参照:http://retrohack.
阅读全文
trixbox中对某一条电话线选择特殊铃声
摘要:新增一个inbound route,在zaptel channel中填入中继编号,如“1” ,在Alert info中输入“<http://>;info=alert-group”。其中“alert-group”可换成“alert-internal”或“alert-external...
阅读全文
让Sendmail和Dovecot使用AD进行用户认证
摘要:如果AD认证不通过则使用linux系统认证。/etc/ldap.conf:host 192.168.1.1base dc=mycompany,dc=localbinddn ldap@mycompany.localbindpw Thisisaveryhardpasswordldap_version 3port 389pam_filter objectclass=Userpam_login_attri...
阅读全文
浙公网安备 33010602011771号