Required ports for proper Active Directory Operation

IC196825

Needed open ports on your firewall for proper Active Directory Operation.

  • TCP 464, UDP 464, UDP Port 88 for Kerberos
  • UDP and TCP Port 135 for DC to DC, DC to client communications.
  • TCP Port 139 and UDP 138, TCP & UDP 445 for FRS.
  • UDP Port 389 for LDAP.
  • TCP Port 3268 and 3269 for GC.
  • TCP and UDP Port 53 for DNS.

Encountering duplicate names in Kerberos

IC196825

if you find this on your event logs on your Active Directory Domain Controller:

Event ID: 11, Source: Kerberos-Key-Distribution-Center

The KDC encountered duplicate names while processing a Kerberos authentication request. The duplicate name is host/hostname.domain.local (of type DS_SERVICE_PRINCIPAL_NAME). This may result in authentication failures or downgrades to NTLM. In order to prevent this from occuring remove the duplicate entries for host/name.domain.local in Active Directory.

you have a host entry on your Computers Container that have the same service principal name

to check which computers/host have the duplicate principal names run

ldifde -f duplicateSPN.txt -t 3268 -d “” -l servicePrincipalName -r “(servicePrincipalName=HOST/host.domain.local*)” -p subtree

replace HOST/host.domain.local with the name on the event log, duplicateSPN.txt can be any name as well, the output of ldifde will be saved here so you can parse it easier on notepad or any text editor later.

once you have opened this file you will be presented with something like

dn: CN=host.domain.local,CN=Computers,DC=domain,DC=local
changetype: add
servicePrincipalName: HOST/host
servicePrincipalName: HOST/host.domain.local

dn: CN=host2,CN=Computers,DC=domain,DC=local
changetype: add
servicePrincipalName: HOST/host.domain.local
servicePrincipalName: HOST/host2.domain.local

or more entries will show up that have the same service principal name, if you know which of these hosts are no longer active, you can safely delete it.

Freenas 8.0.4 Released

freenas

Freenas 8.0.4 has now been released, it seems this year has proven to be quite a haste of development for the freenas team. there are quite some changes, but I’m still honestly waiting for the release where they incorporate the new FreeBSD kernel that supports the new version of ZFS; I’m excited for DeDuplication on ZFS :)

http://www.freenas.org/

Changes since 8.0.4-RC1:

Enhancements

GUI

  • Rename ‘loaders’ to ‘tunables’ to target the FreeBSD concept under inspection (kernel tunables) (SF r10235, r10236).

Bugfixes

OS/Third party

  • Remove sane caps for minimum ZFS requirements for lower spec’ed home user machines added in 8.0.4-BETA1. A better solution will be devised in 8.2.0 with automatic system tuning, similar to legacy’s zfskerntune (SF r10271).

CIFS

  • Correct guest parameter setting in the GUI as it’s a global option, not a per-share option (SF r10296).
  • Allow Guest Only parameter only makes sense when Allow Guest is specified (SF r10300).
  • Validate guest setting prior to accepting POST to ensure that the value set for Guest is sane.

Changes since 8.0.4-BETA2:

Enhancements

Build

  • Remove Full_Install from the compressed disk image name to avoid potential confusion when looking at the disk image vs the GUI upgrade image (SF r10154).

Middleware

  • Do not restart collectd (reporting backend) when deleting snapshots in the GUI (SF r10139).

Tools

  • Add arcstat.py and arc_summary.py tools originally contributed by jhell (FreeBSD contributor), ported by jhixson to FreeNAS 8.x.

Bugfixes

GUI

  • Correct window title for snapshot deletion GUI (SF r10138).

Middleware

  • Catch ZFS snapshot errors when snapshots are done via the GUI instead of failing silently (SF r10152).
  • Work around interoperability issues with user / group population in the GUI by failing silently in certain cases if AD/LDAP users cannot be retrieved (SF r10140).
  • Fix case where local and remote paths passed to rsync in Rsync tasks weren’t quoted, so paths with spaces in them would not work (FN 1285).

Changes since 8.0.4-BETA1:

Enhancements

OS/Third party

  • Update transmission to 2.42 (SF r10093).
  • Add MegaCLI tool (SF r10072, r10073).
  • Disable periodic tasks in the base system that would negatively impact system performance on NAS boxes with large directory structures (SF r10113).

Bugfixes

Middleware

  • Fix handling for ‘every day’ SMART tasks created in the GUI (SF r10088).
  • Add in several robustness fixes to reduce potential for filesystem corruption on root / boot device. In some scenarios this would also improve performance when fetching data from the root device as well (SF r10095, r10109, r10129).

CIFS

  • Fix vfs objects modules ordering so shadow copy (aka previous versions) support functions again (FN 935, FN 1186, FN 1275).
  • Update samba to 3.6.3 to resolve several bugs (both security and non-security related) (SF r10127).

iSCSI

  • Network field from iSCSI initiator could contain multiple IP addresses, CIDR addresses, or ANY keyword (SF r10082).
  • Generate istgt.conf properly if and when multiple initiators were specified (SF r10081).

http://www.freenas.org/

Windows 8 Consumer Preview Now Available

screenshot_startscreen_web

Microsoft has finally made available The New Windows 8 Consumer Preview (Windows 8 Beta)

http://windows.microsoft.com/en-GB/windows-8/

Microsoft extends Windows 7 and Vista Support

big-windows-logo-wallpaper

In a suprise move Microsoft has quietly extended support for Windows 7 and Vista, not sure why, since Windows 8 is just a few months from release now, might be a move to avoid some legal battle, Im really not sure.

http://www.zdnet.com/blog/bott/microsoft-quietly-extends-consumer-support-for-windows-7-vista/4529?tag=content;selector-blogs