[[Mathias Chauvin]] - IT stuff

Access Based Enumeration allows Windows Admins to prevent every network shares to be displayed while browsing the network in Windows.
If a user browse the network, he will only be displayed the folder he has access to.
The tool name to set this is abeui

The “how to set abeui” question gets more complicated when it has to be set on a MS Cluster.
Hopefully, there is a good article there: http://blogs.technet.com/windowsserver/archive/2005/07/06/407385.aspx:

1. Install ABE tool from the MS download location and install it on each of the nodes in the cluster.

2. From the cluster administrator, for each share in the cluster, create a resource of type application. In the command to execute for this resource (under parameters), the following command should be entered
cmd /k abecmd /enable <sharename>.
Additionally, if you don’t want that cmd.exe will appear on the desktop, ensure that the option Allow interaction with the desktopi sn’t checked.

3. Make this resource depend on the share resource. (Make sure that both the application resource and the share resource are part of the same group)

4. Take the group offline and back online to ensure that the shares that need to be ABE enabled are actually so.

The title should have been more explicit. This post deals with a way to provide a Windows XP virtual machine to a user, without giving him access to the underlying layer of virtualization. This way, the user cannot create/modify any virtual machine. He can just use the one that is presented to him.
Note that this post won’t cover the creation of the virtual machine itself.
Then it will be considered that a virtual machine disk exists, and is stored on the server in /mnt/vbox/ie6machine.vdi

Given a Debian GNU/Linux server, VirtualBox (official packages from virtualbox) is installed on this server.
Here below some hints on how to install VirtualBox on debian:

vboxserver:~# vi /etc/apt/sources.list
[...]
# VirtualBox packages
deb http://download.virtualbox.org/virtualbox/debian lenny non-free

vboxserver:~# apt-get update
vboxserver:~# wget -q \
http://download.virtualbox.org/virtualbox/debian/sun_vbox.asc \
 -O- | apt-key add -
vboxserver:~# apt-get install virtualbox-2.0

A user is created, which will be used to run VirtualBox. A Windows XP virtual machine is created in the VirtualBox environment.

vboxserver:~# adduser ie6user
Adding user `ie6user' ...
Adding new group `ie6user' (1002) ...
Adding new user `ie6user' (1002) with group `ie6user' ...
Creating home directory `/home/ie6user' ...
Copying files from `/etc/skel' ...
Enter new UNIX password: 
Retype new UNIX password: 
passwd: password updated successfully
Changing the user information for ie6user
Enter the new value, or press ENTER for the default
        Full Name []: IE6 User
        Room Number []: 
        Work Phone []: 
        Home Phone []: 
        Other []: 
Is the information correct? [Y/n] 
vboxserver:~# 

Note: At this point, the ie6machine VM is created by running VirtualBox as ie6user, as each Unix user has its own VirtualBox preferences…

It is then possible to run directly a virtual machine without having access to the VirtualBox configuration windows.
This is done by adding some parameters to VirtualBox:

VirtualBox -startvm ie6machine

Read more »

To add a persistent static route,

root@sunserver:~# route -p add ip_dest ip_interface

The file that stores the static routes is:

/etc/inet/static_routes

Note: I’ve used this on Solaris 10 u4 and later

pkgchk -lp /path/to/specific/file

Today, Nov 3rd, South East of France has “powered down” during about 2 hours, due to an incident on a high-voltage line linking Marseille and Nice.

This is why the site has been down on Nov 3rd, my UPS maintaining the server for only 15 min