itsecureadmin.com

Category: Open Source Software

  • Finally, some common sense password research.

    This is a start, an article from Microsoft on password expiration: https://blogs.technet.microsoft.com/secguide/2019/05/23/security-baseline-final-for-windows-10-v1903-and-windows-server-v1903/ Security needs to set a good password policy, and provide users with the tools they need to manage their passwords! Too many users are not using password safes and have to manage their secrets in text files, email, or post-it notes.

  • MySQL Upgrade Table Failure After Upgrading to MySQL Server 8

    I upgraded to MySQL 8 (from 5.7) on my laptop and was running into an error restoring a database table with a large varchar(2048) column: ERROR 1071 (42000): Specified key was too long; max key length is 3072 bytes The default character set in MySQL 8 is utf8mb4, which includes this restriction. Changing the table…

  • Trouble installing mysql2 gem on OSX 10.14

    I was running a bundle install on a rails application and was receiving a failure when attempting to install mysql2: make “DESTDIR=” compiling client.c compiling infile.c compiling mysql2_ext.c compiling result.c compiling statement.c linking shared-object mysql2/mysql2.bundle ld: library not found for -lssl clang: error: linker command failed with exit code 1 (use -v to see invocation)…

  • AWS Access Keys in S3 Bucket Policies

    I’ve seen what appeared to be AWS Access Keys in S3 bucket policies as an AWS principal in the past. I could never figure out why this was happening and nobody appeared to be adding them. The Access Key never showed up as a valid user Access Key in a search of IAM objects either.…

  • Apache Airflow 1.10.2– Active Directory Authentication (via LDAP[s])

    This basic guide assumes a functional airflow deployment, albeit without authentication, or perhaps, with LDAP authentication under the legacy UI scheme. This guide also assumes apache airflow 1.10.2, installed via pip using MySQL and Redis. The guide also assumes Amazon Linux on an EC2 instance. Pre-requisites: An Active Directory service account to use as the…

  • ACM Certificate Not Visible in ELB Listener Drop-down

    When using an imported SSL certificate with AWS Certificate Manager, the certificate will not be available for use if the RSA key is not 1024 or 2048 bits in size.  If the certificate needs to be larger than 2048, upload/import to IAM instead, and use it from there.

  • Retrieve Windows 8 Product Key

    Easy way to retrieve the Windows 8, 8.1, and possibly 10 Windows Product Key using powershell: (Get-WmiObject -query ‘select * from SoftwareLicensingService’).OA3xOriginalProductKey Seems to work well.

  • SSH in a for loop is a solution…

    I just read an article by Jay Valentine on LinkedIn where he talks about Puppet and how they were not profitable, and also noted that Chef is not, and has never been, profitable. That got me to thinking, why are IT professionals investing in these technologies (time, knowledge, effort…). As an IT pro, it’s tempting…

  • Standalone puppet with hiera 5 error…

    With puppet moving more and more away from supporting a standalone model, it’s somewhat difficult to get puppet standalone working. I recently got bit by a hiera update that caused my puppet standalone deployments to stop interacting with hiera the way that I had deployed it. Affected versions: puppet 4.10.10 hiera 3.4.3 The error that…

  • Basic .screenrc

    For new system setup, it’s good to publish a .screenrc: defscrollback 15000 hardstatus alwayslastline hardstatus string ‘%{= kG}[ %{G}%H %{g}][%= %{=kw}%?%-Lw%?%{r}(%{W}%n*%f%t%?(%u)%?%{r})%{w}%?%+Lw%?%?%= %{g}][%{B}%Y-%m-%d %{W}%c %{g}]’ # Default screens screen -t aux0 0 screen -t aux1 1 screen -t aux2 2 startup_message off