Problem : Error when running backup on Exchange Server (Symantec Backup Agent).
Study Case :
1. There are 3 server on this company, Domain Controller, Exchange Server and Application Server.
2. Symantec Backup Exec is installed on Domain Controller server.
3. Symantec Agent is installed on Exchange server and Application Server.
Resolution :
1. Make sure the license is correct, check license compatibility.
2. Make sure Symantec Agent is successfully and can running on the Exchange Server
3. Install Exchange Management Tools on Domain Controller (Symantec Backup Exec server) server to perform GRT backup and restore exchange mail box .
Wednesday, July 31, 2013
Tuesday, July 30, 2013
Generating a Certificate Signing Request (CSR) using Apache (with mod_ssl) & OpenSSL
Generating a Certificate Signing Request (CSR) using Apache (with mod_ssl) & OpenSSL
To generate your CSR, you will need to log in to your server and use the OpenSSL software to generate a CSR and private key.
- Log in to your server, and enter the following command:
openssl req -nodes -newkey rsa:2048 -keyout myserver.key -out server.csr
This will generate two files: a CSR called 'server.csr' and a 2048-bit private key called 'myserver.key'.
- You will be prompted to enter some information for your CSR:
Country Name (2 letter code) [AU]: GB
State or Province Name (full name) [Some-State]: Yorks
Locality Name (eg, city) []: York
Organization Name (eg, company) [Internet Widgits Pty Ltd]: MyCompany Ltd
Organizational Unit Name (eg, section) []: IT
Common Name (eg, YOUR name) []: mysubdomain.mydomain.com
Email Address []:
Please enter the following 'extra' attributes to be sent with your certificate request
A challenge password []:
An optional company name []:
An optional company name []:
The
'CN' field (Common Name) is where you should enter the fully qualified
domain name of the website you require the certificate for.
Note: for wildcard certificates, the Common Name should be in the format: *.mydomain.com
Note: for wildcard certificates, the Common Name should be in the format: *.mydomain.com
- Your CSR is now generated. Open the 'server.csr' file with a text-editor and copy and paste the contents into the enrollment form when requested.
The 'myserver.key' file should be kept secure (e.g. readable only by root on linux systems).
Removing the '-nodes' option from the openssl command will request a password and encrypt the private key. This can increase security, but note that the password will be required each time Apache is restarted.
EV certificates require a minimum of a 1024-bit keysize if valid before 2011, and 2048-bit if they are valid into 2011. We recommend that a 2048-bit keysize is the minimum used for all certificates.
The two-letter 'Country Name' field must be the ISO-3166 standard country code. Please note that 'GB' is correct for Great Britain, not 'UK'. A complete list can be found here: http://www.iso.org/iso/country_codes.htm
Thursday, July 25, 2013
Exchange 2010 can send email from POP 3 using anonymous account without password
To prevent the spam or anonymous using your domain email :
1.Open the Exchange Management Console and go to Server Configuration - Hub Transport and create a new Receive Connector.
2. Right click and go to properties on your new Receive Connector. Go to Network tab and change the IP address with 0.0.0.0/32 or 0.0.0.0-255.255.255.255 and add your exchange IP Address,
3. Go to Authentication tab and tick Transport Layer Security (TLS) and Externally Secured.
4. Go to Persmission Group tab and tick Exchange servers only and then click Apply and Ok.
1.Open the Exchange Management Console and go to Server Configuration - Hub Transport and create a new Receive Connector.
2. Right click and go to properties on your new Receive Connector. Go to Network tab and change the IP address with 0.0.0.0/32 or 0.0.0.0-255.255.255.255 and add your exchange IP Address,
3. Go to Authentication tab and tick Transport Layer Security (TLS) and Externally Secured.
4. Go to Persmission Group tab and tick Exchange servers only and then click Apply and Ok.
Error when installing Microsoft Office Home & Business 2013
Error Messages :
Resolution :
1. Delete the existing folder for Microsoft Office which is located on :
C:\Program Files\Microsoft Office.
C:\Program Files\Microsoft Office 15
2. Start - run - type regedit and press enter, find the below registry and delete it (please backup your registry before you change anything on it) :
HKEY_CURRENT_USER-Software-Microsoft-Office (delete "Office" Folder only)
HKEY_LOCAL_MACHINE-Software-Microsoft-Office (delete "Office" Folder only)
3. Restart the computer and try to run the installation again.
Resolution :
1. Delete the existing folder for Microsoft Office which is located on :
C:\Program Files\Microsoft Office.
C:\Program Files\Microsoft Office 15
2. Start - run - type regedit and press enter, find the below registry and delete it (please backup your registry before you change anything on it) :
HKEY_CURRENT_USER-Software-Microsoft-Office (delete "Office" Folder only)
HKEY_LOCAL_MACHINE-Software-Microsoft-Office (delete "Office" Folder only)
3. Restart the computer and try to run the installation again.
Monday, July 8, 2013
Exchange Server 2010 : EMC Initialization failure No Exchange Servers are available
Error Message :
No Exchange servers are available in any Active Directory sites. You can't connect to remote Powershell on a computer that only has the Management Tools role installed. It was running the command 'Discover-ExchangeServer -UseWIA $true -SuppressError $true -CurrentVersion 'Version 14.1 (Build 218.15)".
Resolution :
No Exchange servers are available in any Active Directory sites. You can't connect to remote Powershell on a computer that only has the Management Tools role installed. It was running the command 'Discover-ExchangeServer -UseWIA $true -SuppressError $true -CurrentVersion 'Version 14.1 (Build 218.15)".
Resolution :
1. Please make sure the account you logged in is a domain account.
2. Restart Exchange 2010 to resolve any potential issues.
3. On exchange server, run DCDIAG to check your Active Directory and Domain Controllers and check if there is any error.
Thursday, June 27, 2013
Exchange 2010 Error : The user "domain\username" isn’t assigned to any management roles.
Try to use Active Directory and Computers.
1. Open the OU Microsoft Exchange Security Groups.
2. In that OU, you'll find Organization Management.
3. Add your user to that group.
1. Open the OU Microsoft Exchange Security Groups.
2. In that OU, you'll find Organization Management.
3. Add your user to that group.
Thursday, March 14, 2013
Limitasi Mikrotik port SMTP dan POP3 pada jaringan lokal
Limitasi Mikrotik port SMTP dan POP3 pada jaringan lokal. Di bawah ini configurasi port SMTP(25) dan POP3(110) pada mikrotik.
1. Buat mangle untuk SMTP dan POP3
SMTP:
ip firewall mangle add action=mark-packet chain=prerouting dst-port=25 protocol=tcp new-packet-mark=smtp_pack passthrough=yes comment=Limitasi_SMTP
POP3:
ip firewall mangle add action=mark-packet chain=prerouting dst-port=110 protocol=tcp new-packet-mark=pop3_pack passthrough=yes comment=Limitasi_POP3
2. Buat limitasi menggunakan "Queue Tree"
SMTP:
queue tree add name=smtp-q parent=global-out packet-mark=smtp_pack queue=default priority=8 max-limit=256000
POP3:
queue tree add name=pop3-q parent=global-out packet-mark=pop3_pack queue=default priority=8 max-limit=256000
Pada configurasi diatas dibatasi untuk SMTP dan POP 256kb bandwidth.
Dengan demikian limitasi port SMTP dan POP3 selesai.
End.
1. Buat mangle untuk SMTP dan POP3
SMTP:
ip firewall mangle add action=mark-packet chain=prerouting dst-port=25 protocol=tcp new-packet-mark=smtp_pack passthrough=yes comment=Limitasi_SMTP
POP3:
ip firewall mangle add action=mark-packet chain=prerouting dst-port=110 protocol=tcp new-packet-mark=pop3_pack passthrough=yes comment=Limitasi_POP3
2. Buat limitasi menggunakan "Queue Tree"
SMTP:
queue tree add name=smtp-q parent=global-out packet-mark=smtp_pack queue=default priority=8 max-limit=256000
POP3:
queue tree add name=pop3-q parent=global-out packet-mark=pop3_pack queue=default priority=8 max-limit=256000
Pada configurasi diatas dibatasi untuk SMTP dan POP 256kb bandwidth.
Dengan demikian limitasi port SMTP dan POP3 selesai.
End.
How to perform a Cisco router password recovery without losing your configuration.
How to perform a Cisco router password recovery without losing your configuration.
First, hook up the DB9 end of the standard light blue serial cable to your serial port. The other end of the cable should plug into the port labeled “Console” on the back of the Cisco router. If you do not have a serial port, then you'll need to go purchase a USB-to-serial adapter cable and install it on your computer.
Now that your hardware is connected, establish a serial connection with the router.
The settings you need are:
Baud: 9600
Data bits: 8
Parity: No
Stop bits: 1
Flow Control: None
On Windows, I use putty for this connection. Yes, putty can be used to make serial connections as well as telnet/ssh. Hyperterminal works great as well. On Linux, I use minicom and on FreeBSD/OpenBSD, I use cu (cu -s 9600 -l /dev/cuad0).
Reboot the router and press the Break key to interrupt the boot sequence.
For break key sequences, refer to this Cisco link: http://www.cisco.com/en/US/products/hw/routers/ps133/products_tech_note0...
Type confreg 0x2142. This tells the router to bypass NVRAM during bootup. In other words, your existing configuration won't be loaded. The good news is that it won't be deleted either.
Type reset to reboot the router. Answer No when prompted to run setup.
Type copy start run. This loads your startup configuration into memory. Now, if you type a show run config, you'll see the router configuration. Also, you should notice that your router name is now in the prompt instead of the default “Router”.
Change the enable secret - “enable secret new_password”
Change the register back to 0x2102:
config-register 0x2102
When the router reboots it will load the old configuration with the new password.
Save the password so that it will be persistent during reboots, type copy run start
Reboot the router by typing reload at the enable prompt.
Friday, September 14, 2012
Reset Configurasi pada Cisco Switch
Untuk menghapus semua configurasi pada cisco switch.
Switch>en
Switch#write erase --------> menghapus semua configurasi
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete
%SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram
Switch#write --------> save configurasi
Switch#reload --------> restart switch
Switch>en
Switch#write erase --------> menghapus semua configurasi
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete
%SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram
Switch#write --------> save configurasi
Switch#reload --------> restart switch
Cisco Switch Password Reset
1. Turn off the switch and Plug in your console cable from your computer to the switch
2. Turn on the switch and hold the "MODE" button (should on the front panel of the switch)
3. On the screen you should see this text : "switch :"
4. Here we go for the code :
switch:init_flash -----------------> to initialize your Cisco Flash.
Initializing Flash...
The flash is already initialized.
switch:load_helper ----------------> To run boot helper image
switch:dir flash: --------------------> To see the files on the flash directory
Directory of flash:/
2 -rwx 5 private-config.text
3 -rwx 110 info
4 -rwx 976 vlan.dat
6 -rwx 286 env_vars
26 -rwx 1592 config.text
8 drwx 1088 html
4393472 bytes available (3347968 bytes used)
switch:rename flash:config.text flash:config.old----------------> (So that the it will boot a new config without password).
switch: boot ------------> Reboot the switch
Note : The switch will create a new config file without a passport. The below config is to create a new password and set back the old config file.
switch:en
switch#sh flash:
Directory of flash:/
2 -rwx 2995584 Jan 01 1970 00:24:14 c3550-i9q3l2-mz.121-11.EA1.bin
3 -rwx 0 Jan 01 1970 00:24:36 system_env_vars
4 -rwx 1036 Mar 08 1993 14:03:45 vlan.dat
5 -rwx 0 Jan 01 1970 00:24:36 env_vars
6 -rwx 5 Mar 01 1993 01:07:50 private-config.text
8 -rwx 4715 Mar 01 1993 01:07:50 config.old
switch#rename flash:config.old flash:config.text -------> Set back the config file.
switch#copy running-config flash: ----->To set the boot loader.
switch#write -------------> Save all your configuration.
switch#boot
2. Turn on the switch and hold the "MODE" button (should on the front panel of the switch)
3. On the screen you should see this text : "switch :"
4. Here we go for the code :
switch:init_flash -----------------> to initialize your Cisco Flash.
Initializing Flash...
The flash is already initialized.
switch:load_helper ----------------> To run boot helper image
switch:dir flash: --------------------> To see the files on the flash directory
Directory of flash:/
2 -rwx 5
3 -rwx 110
4 -rwx 976
6 -rwx 286
26 -rwx 1592
8 drwx 1088
4393472 bytes available (3347968 bytes used)
switch:rename flash:config.text flash:config.old----------------> (So that the it will boot a new config without password).
switch: boot ------------> Reboot the switch
Note : The switch will create a new config file without a passport. The below config is to create a new password and set back the old config file.
switch:en
switch#sh flash:
Directory of flash:/
2 -rwx 2995584 Jan 01 1970 00:24:14 c3550-i9q3l2-mz.121-11.EA1.bin
3 -rwx 0 Jan 01 1970 00:24:36 system_env_vars
4 -rwx 1036 Mar 08 1993 14:03:45 vlan.dat
5 -rwx 0 Jan 01 1970 00:24:36 env_vars
6 -rwx 5 Mar 01 1993 01:07:50 private-config.text
8 -rwx 4715 Mar 01 1993 01:07:50 config.old
switch#rename flash:config.old flash:config.text -------> Set back the config file.
switch#copy running-config flash: ----->To set the boot loader.
switch#write -------------> Save all your configuration.
switch#boot
Subscribe to:
Posts (Atom)











