Finding Domain Kerberos Delegations
nice powershell script here https://blog.netwrix.com/2021/11/30/what-is-kerberos-delegation-an-overview-of-kerberos-delegation/
Month: March 2022
HowTo Test a Mail server BEFORE going live
Use the Wormly website to test email deliver either before going live with at new mail service or if there are problems. https://www.wormly.com/test-smtp-server If you are setting up a non-profit using Microsoft Office 365 non-profit free service, you need to “Purchase” the licenses for $0 and assign them to users before you can deliver any …
HP Printer prints every other page garbled
The default printer driver for HP M402 and maybe others come by default set to double sided printing, even if the printer is single sided only. UNCHECK double sided and the printer prints correctly. source https://community.adobe.com/t5/acrobat-discussions/every-other-page-prints-garbled-images-with-lines-vertically-on-the-image/td-p/9650212
The Problem with Security
If you do security well nobody notices. If you do security badly the world explodes.
Firefox HSTS blocking local servers
Disable HSTS thusly https://campus.barracuda.com/product/ContentShield/doc/73699516/how-to-clear-the-hsts-cache-or-disable-hsts-for-firefox/
Adventures in Home Assistant
How to setup Wifi here https://pimylifeup.com/home-assistant-raspberry-pi/ when documentation refers to going to Supervisor, usually they mean going to Configuration, Devices and Services, under Supervisor click Conifgure, top right click System tab. Here you can restart the Supervisor or the whole System. If you have TOGGLE style light switches, they have a lever that sticks out …
MTU Testing
Background: When packets get transported they are cut into manageable chunks because routers & switches only have a limited amount of RAM. Normally each chunk is 1500 bytes BUT when packets get encapsulated in PPPoE or VPN a header gets added to the packet which takes up a few bytes. Now the packet is 1515 …
Security Report Card
Backups: Automated backups & tested +1, offsite +1, encrypted +1 versioned controlled OR immutable +1, our data in cloud services is also backed up +1 Hardware: support contract OR spare in stock +1, redundant power supplies +1, redundant/trunked uplinks +1, config backed up automatically +1, monitored by an alerting server +1, config changes result in …
Time to Upgrade your Samsung S9 or older
Samsung has made a boo-boo in their secure enclave that stores encryption certificates. Samsung has promised a fix for S10 and newer phones. very dry details here
Home Assistant on ESXi
Home Assistant is some powerful automation software that integrates with a lot of IoT devices. The .vmdk that is made available on their website is created using VmWare Workstation, which uses the older format of .vmdk so it needs to be converted before you can run it on ESXi. Turn on SSH: Host, Manage, Services …