# active directory Published articles for active directory. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## How Does CockroachDB Automate SQL User Lifecycle Management? DevFeed: [How Does CockroachDB Automate SQL User Lifecycle Management?]() Original publisher: [Read original article]() Author: Pritesh Lahoti,Biplav Saraf,Sourav Sarangi Published: 2026-08-28T00:00:00Z Content type: tutorial Language: en Sources: [Cockroach Labs]() Topics: [CockroachDB](), [IAM](), [identity and access management](), [active directory](), [Entra ID](), [okta](), [Microsoft]() Tags: [active-directory](), [cockroachdb](), [entra-id](), [iam](), [identity-and-access-management](), [microsoft](), [okta]() ### AI overview The article addresses how CockroachDB automates SQL user lifecycle management and notes that large enterprises commonly rely on identity provider and identity and access management platforms such as Okta, Microsoft Entra ID, Microsoft Active Directory, and Ory. ### Source excerpt Fortune 1000 enterprises widely rely on major Identity Provider (IdP) and Identity and Access Management (IAM) platforms like Okta, Microsoft Entra ID, Microsoft Active Directory, and Ory. ## What SPIFFE Answers for Workload Identity and What It Doesn't DevFeed: [What SPIFFE Answers for Workload Identity and What It Doesn't]() Original publisher: [Read original article]() Author: info@goteleport.com (Rob Cobbins) Published: 2026-05-29T00:00:00Z Content type: opinion Language: en Sources: [Teleport]() Topics: [SPIFFE](), [Authorization](), [active directory](), [AWS IAM](), [passwd](), [OpenID connect (OIDC)](), [saml]() Tags: [active-directory](), [authorization](), [aws](), [identity](), [ldap](), [oidc](), [passwd](), [permissions](), [saml](), [spiffe]() ### AI overview This article examines what SPIFFE provides for workload identity and where it falls short. It argues that SPIFFE offers a sound way for machines to prove their identities without shared secrets, but does not define authorization and leaves workload registration largely to implementations. ### Source excerpt Learn about the workload identity questions SPIFFE can't answer and considerations for filling gaps in the spec. ## Native Windows automation without Docker, WSL, or workarounds DevFeed: [Native Windows automation without Docker, WSL, or workarounds]() Original publisher: [Read original article]() Author: Alex Petric Published: 2026-04-29T00:00:00Z Content type: article Language: en Sources: [Windmill Blog]() Topics: [Windows](), [Automation](), [PowerShell](), [active directory](), [Databases](), [C#](), [servers]() Tags: [active-directory](), [ai](), [automation](), [c-sharp](), [database](), [enterprise](), [powershell](), [servers](), [windows](), [windows-enterprise-powershell-ai]() ### AI overview This article explains how Windmill automates Windows servers as a native Windows service. It covers PowerShell, C#, SQL and MSSQL Kerberos authentication, Active Directory access, mixed Windows/Linux workers, approval workflows, and audit trails without requiring Docker or WSL2. ### Source excerpt How do I automate Windows servers without Docker? Windmill runs natively on Windows as a service with PowerShell, C#, MSSQL Kerberos auth, and Teams integration. ## Кто выпустил гончую. Ищем следы коллекторов BloodHound в логах Windows DevFeed: [Кто выпустил гончую. Ищем следы коллекторов BloodHound в логах Windows]() Original publisher: [Read original article]() Author: StepVolg ("Лаборатория Касперского") Published: 2026-04-24T12:37:53Z Content type: tutorial Language: ru Sources: ["Лаборатория Касперского" RU]() Topics: [Endpoint Security & XDR](), [Windows](), [SOC]() Tags: [active-directory](), [bloodhound](), [enumerate](), [red-teaming](), [sharphound](), [siem](), [soc](), [windows](), [windows-1ad1db2b7e3a]() ### AI overview The article examines traces left by BloodHound collectors in Windows logs and discusses detecting Active Directory reconnaissance activity. ### Source excerpt Служба каталогов Active Directory остается одной из самых популярных целей как среди злоумышленников, так и среди специалистов по Red Teaming и пентестеров. С выходом новых версий операционных систем семейства Windows продолжают появляться новые векторы атак на AD, например атаки на Delegated Managed Service Accounts (dMSA) в 2025-м. В ходе каждой атаки есть этап сбора информации, обнаружение которого является более сложной задачей, чем кажется на первый взгляд. Согласно аналитическому отчету нашего сервиса MDR за 2025 год в целом обнаружение данного этапа атак затруднено из-за большого количества ложных срабатываний, что снижает качество обнаружения и уменьшает вероятность предотвращения атаки, особенно в больших инфраструктурах с тысячами активов. Меня зовут Степан Ляхов, я работаю старшим инженером SOC в "Лаборатории Касперского". В этой статье я хочу рассмотреть один из самых популярных инструментов для сбора информации о домене Active Directory, разобрать, какие следы он оставляет в журналах и как обнаружить его активность. Читать далее ## Meet Keycloak at FOSDEM on Jan 30/Feb 01! DevFeed: [Meet Keycloak at FOSDEM on Jan 30/Feb 01!]() Original publisher: [Read original article]() Author: Alexander Schwartz Published: 2026-01-26T00:00:00Z Content type: news Language: en Sources: [Keycloak Blog]() Topics: [FOSDEM](), [Keycloak](), [identity and access management](), [Open Source](), [Authentication]() Tags: [2026](), [active-directory](), [authentication](), [fosdem](), [idm](), [kerberos](), [keycloak](), [ldap](), [oauth](), [oauth-2-0](), [open-source](), [openid](), [openid-connect](), [saml](), [sso]() ### AI overview Keycloak will participate in FOSDEM 2026 in Brussels through a co-hosted Sovereign Identity stand and related identity and access management talks. The article provides event, stand, and schedule details. ### Source excerpt FOSDEM is a free event for software developers to meet, share ideas and collaborate. Every year, thousands of developers of free and open source software from all over the world gather at the event. Several Keycloak related talks happen at FOSDEM in Brussels on January 31st and February 1st, and meet us and help out at the stand. To get the latest updates, subscribe to our discussion on GitHub. Meet the community at the Sovereign Identity stand On Saturday, January 31st 2026, the Keycloak project will co-host the "Sovereign Identity for server, desktop, and a cloud" stand together with the FreeIPA, SSSD and OpenWallet project. We'll be open from 1000 in the morning until around 1800 in the early evening. We will be at K building on level 1 in group C. Visit this stand to interact with the teams of several popular solutions in this space. Keycloak Extensible self-hosted Single-Sign-On for your applications. Supporting Passkeys, OpenID Connect, OAuth 2.0, SAML 2.0 and Kerberos. Integrating with other Identity Providers through brokerage via SAML or OpenID Connect, or via LDAP. FreeIPA Manage Linux users and client hosts in your realm from one central location, define Kerberos authentication and authorization policies for your identities, create mutual trust with other Identity Management systems. Issue certificates to your users and services. SSSD Open Source Client for Enterprise Identity Management. Enroll your Linux machine into an Active Directory, FreeIPA or LDAP domain. Use remote identities, policies and various authentication and authorization mechanisms to access your computer. OpenWallet Foundation We drive global adoption of open, secure and interoperable digital wallet solutions. We set best practices for digital wallet technology through collaboration on standards-based OSS components that issuers, wallet providers and relying parties can use to bootstrap implementations that preserve user choice, security and privacy. Talks about Keycloak and related top ## Kerberoasting DevFeed: [Kerberoasting]() Original publisher: [Read original article]() Author: Matthew Green Published: 2025-09-10T12:00:00Z Content type: opinion Language: en Sources: [Matthew Green]() Topics: [Vulnerabilities](), [active directory](), [Authentication](), [Windows](), [ransomware](), [Cybercrime]() Tags: [active-directory](), [attacks](), [authentication](), [computer](), [microsoft](), [passwords](), [ransomware](), [vulnerabilities](), [windows]() ### AI overview This article explains Kerberoasting, a long-standing attack against environments using Microsoft Active Directory. It describes how the technique relates to service accounts, centralized authentication, and RC4, and connects it to the May 2024 ransomware attack on Ascension Health based on a letter from Senator Wyden to Microsoft. ### Source excerpt I learn about cryptographic vulnerabilities all the time, and they generally fill me with some combination of jealousy ("oh, why didn't I think of that") or else they impress me with the brilliance of their inventors. But there's also another class of vulnerabilities: these are the ones that can't possibly exist in important production software, ... Continue reading Kerberoasting -> ## Keycloak 26.0.5 released DevFeed: [Keycloak 26.0.5 released]() Original publisher: [Read original article]() Author: Keycloak Team Published: 2024-11-01T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [LDAP](), [active directory](), [Microsoft]() Tags: [active-directory](), [idm](), [kerberos](), [keycloak](), [keycloak-release](), [ldap](), [microsoft](), [openid-connect](), [release](), [resolved](), [saml](), [sso]() ### AI overview Keycloak 26.0.5 is released with a change that creates LDAP users as enabled by default when using Microsoft Active Directory through the administrative interfaces. The release also includes resolved issues affecting the admin UI, login layout, documentation, identity provider migration, and AD entry updates. ### Source excerpt To download the release go to Keycloak downloads. Highlights LDAP users are created as enabled by default when using Microsoft Active Directory If you are using Microsoft AD and creating users through the administrative interfaces, the user will created as enabled by default. In previous versions, it was only possible to update the user status after setting a (non-temporary) password to the user. This behavior was not consistent with other built-in user storages as well as not consistent with others LDAP vendors supported by the LDAP provider. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Bugs #31415 Selection list does not close after outside click admin/ui #33607 Fix v2 login layout login/ui #33618 No message for `policyGroupsHelp` admin/ui #33640 Customizable footer (Keycloak 26) not displaying in keycloak.v2 login theme login/ui #34301 Remove inaccurate statement about master realm imports docs #34450 [26.0.2] Migration from 25.0.1 Identity Provider Errors identity-brokering #34467 Do not rely on the `pwdLastSet` attribute when updating AD entries ldap ## What is SAML? A practical guide to the authentication protocol DevFeed: [What is SAML? A practical guide to the authentication protocol]() Original publisher: [Read original article]() Author: Kang Ming Tay Published: 2024-01-17T07:00:00Z Content type: tutorial Language: en Sources: [Supabase Blog]() Topics: [Authentication](), [Protocol (disambiguation)](), [Single sign-on (SSO)](), [XML](), [Authorization](), [Provisioning](), [Security](), [OAuth]() Tags: [active-directory](), [authentication](), [authorization](), [guide](), [oauth](), [openid](), [openid-connect](), [protocol](), [provisioning](), [saml](), [sso](), [xml]() ### AI overview This practical guide explains SAML authentication and how SAML enables single sign-on between identity providers and service providers. It covers employee provisioning, XML-based SAML assertions, X.509 certificate exchange, and the distinction between SAML and broader SSO approaches such as OAuth and OpenID Connect. ### Source excerpt Learn what is SAML authentication, how it differentiates from SSO, SAML with Postgres, and more. ## Teleport 12 DevFeed: [Teleport 12]() Original publisher: [Read original article]() Author: kenneth.dumez@goteleport.com (Kenneth DuMez) Published: 2023-03-03T00:00:00Z Content type: release Language: en Sources: [Teleport]() Topics: [Device Trust](), [Kubernetes](), [Windows](), [active directory](), [Authentication]() Tags: [active-directory](), [authentication](), [device-trust](), [kubernetes](), [preview](), [release](), [windows]() ### AI overview Teleport 12 introduces Device Trust in preview, allowing administrators to require access from authenticated and trusted devices and integrate device authorization with Teleport RBAC. The release also previews passwordless certificate-based access for local Windows users without Active Directory and adds per-pod RBAC for Kubernetes access. ### Source excerpt An overview of all of the new features added to Teleport 12. Device Trust, Passwordless Windows Access for Local Users and more. ## Active Directory Security DevFeed: [Active Directory Security]() Original publisher: [Read original article]() Author: info@goteleport.com (Anish Devasia) Published: 2022-11-30T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [active directory](), [Security](), [Authorization](), [Authentication](), [Vulnerabilities](), [Windows]() Tags: [access-control](), [active-directory](), [authentication](), [authorization](), [guide](), [hardening](), [legacy](), [malware](), [permissions](), [security](), [vulnerabilities](), [windows]() ### AI overview An introductory guide to securing Microsoft Active Directory Domain Services (AD DS). It explains AD DS as a directory service for identity management, authentication, authorization, centralized account management, security policies, and permissions, then introduces its security risks and hardening practices. ### Source excerpt An introductory guide for how to secure and protect Active Directory Security (AD DS). ## My first weeks at Acer Europe DevFeed: [My first weeks at Acer Europe]() Original publisher: [Read original article]() Published: 2022-10-16T00:00:00Z Content type: opinion Language: en Sources: [Mutt0-ds Notes]() Topics: [Azure](), [dashboards](), [Databases](), [etl](), [DevOps](), [Purview](), [active directory](), [data-governance]() Tags: [active-directory](), [azure](), [dashboards](), [data-governance](), [databases](), [developer](), [devops](), [etl](), [purview]() ### AI overview A Business Intelligence Developer reflects on their first weeks at Acer Europe, describing the transition from a small company to a large IT organization. The post covers the scale of its data, reporting, ETL, Azure services, and cross-team work, along with the information overload and learning challenges of the first week. ### Source excerpt This is a post for my future self when I will be asking myself: "How were my first days at Acer like?". Note: I'm working at Acer EMEA HQ,... ## How to Connect to Microsoft SQL Server Remotely Using Teleport DevFeed: [How to Connect to Microsoft SQL Server Remotely Using Teleport]() Original publisher: [Read original article]() Author: travis.rodgers@goteleport.com (Travis Rodgers) Published: 2022-09-20T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [sql-server](), [active directory](), [audit](), [Authentication](), [Security](), [Firewall](), [VPC]() Tags: [active-directory](), [audit](), [authentication](), [firewall](), [how-to](), [security](), [sql-server](), [vpc]() ### AI overview This tutorial explains how to connect to Microsoft SQL Server remotely using Teleport and Active Directory authentication. It recommends Windows authentication, limiting public exposure through network isolation, and enabling auditing for logins, sessions, and SQL queries. ### Source excerpt In this blog post, we'll look at how to connect to Microsoft SQL Server remotely using Teleport and Active Directory Authentication. ## Removing Calendar Invites using PowerShell + Azure CLI DevFeed: [Removing Calendar Invites using PowerShell + Azure CLI]() Original publisher: [Read original article]() Author: dustin@dustn.dev (Dustin Summers) Published: 2021-12-20T10:26:38Z Content type: tutorial Language: en Sources: [Dustin Summers]() Topics: [PowerShell](), [Command-line interface](), [openssl](), [active directory](), [Cloud]() Tags: [active-directory](), [azure](), [cli](), [commands](), [it-management-services-powershell-microsoft-azure-azure-active-directory](), [openssl](), [powershell]() ### AI overview The article describes removing calendar invitations created by a departing employee while retaining the employee's account temporarily. It discusses PowerShell access problems on updated Macs caused by differing OpenSSL versions and presents Azure CLI as an alternative for managing the Azure environment. ### Source excerpt Apart from my day job, I moonlight helping small-to-medium size companies' install and manage secure IT infrastructures, along with building and creating applications for them. I offer these services (and more) through my company, Attica, LLC. It is a passion of mine to help companies that are starting out have a solid IT/Cyber infrastructure that can scale with their company as these businesses are vulnerable and common targets of ransomware and phishing attacks. ## Identity-based, passwordless access to Windows hosts across all computing environments. DevFeed: [Identity-based, passwordless access to Windows hosts across all computing environments.]() Original publisher: [Read original article]() Author: ben@goteleport.com (Ben Arent) Published: 2021-12-15T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Windows](), [passwords](), [active directory](), [Authentication](), [remote access](), [Security](), [servers]() Tags: [active-directory](), [authentication](), [password](), [rdp](), [remote-access](), [security](), [servers](), [windows]() ### AI overview The article introduces Teleport Desktop Access for Windows hosts, extending Teleport's passwordless, certificate-based access model from Linux to Windows. It discusses RDP, Active Directory, remote access, and security risks associated with password-based access and privileged directory services. ### Source excerpt An overview Teleport Desktop Access providing securing access to Windows Fleets. ## How SAML Authentication Works? DevFeed: [How SAML Authentication Works?]() Original publisher: [Read original article]() Author: info@goteleport.com (Russell Jones) Published: 2021-04-13T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [saml](), [Authentication](), [Single sign-on (SSO)](), [Authorization](), [Security]() Tags: [active-directory](), [auth0](), [authentication](), [authorization](), [saml](), [security](), [sso]() ### AI overview This tutorial explains how SAML 2.0 exchanges authentication and authorization information between services, focusing on its use in enterprise single sign-on. It introduces the security benefits of centralized identity and consistent authentication, along with key terminology such as principal and identity provider. ### Source excerpt At its core, Security Assertion Markup Language (SAML) 2.0 is a means to exchange authorization and authentication information between services. Learn how saml works. ## Attacking Smart Card Based Active Directory Networks DevFeed: [Attacking Smart Card Based Active Directory Networks]() Original publisher: [Read original article]() Author: CCob Published: 2020-10-04T19:31:42Z Content type: tutorial Language: en Sources: [Ethical Chaos]() Topics: [active directory](), [Authentication](), [certificates](), [private key](), [Cryptography](), [kerberos](), [public key]() Tags: [active-directory](), [attacks](), [authentication](), [certificates](), [cobalt-strike](), [hooking](), [kerberos](), [pin](), [pinswipe](), [pki](), [private-key](), [public-key](), [rubeus](), [smart-card](), [swipe](), [weaponize]() ### AI overview This article examines attacks against smart-card-enforced Active Directory networks. It explains that a physical smart card is not necessarily required for smart-card logon when the corresponding private key is available, describes certificate requirements and policy-related certificate abuse, and introduces PKINIT as public-key support for Kerberos pre-authentication. ### Source excerpt Introduction Recently I was involved in an engagement where I was attacking smart card based Active Directory networks. The fact is though, you don't need a physical smart card at all to authenticate to Active Directory that enforces smart card logon. The attributes of the certificate determine if it can be used for smart card [...] The post Attacking Smart Card Based Active Directory Networks appeared first on Ethical Chaos. ## Teleport Demo and Overview Video - Modern SSH DevFeed: [Teleport Demo and Overview Video - Modern SSH]() Original publisher: [Read original article]() Author: ev@goteleport.com (Ev Kontsevoy) Published: 2020-07-16T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [ssh](), [OpenSSH](), [Single sign-on (SSO)](), [active directory](), [audit](), [Authentication](), [Kubernetes](), [certificates](), [Linux](), [Raspberry Pi](), [Google]() Tags: [active-directory](), [audit](), [authentication](), [certificates](), [github](), [google](), [guide](), [k8s](), [linux](), [openssh](), [raspberry-pi](), [ssh](), [sso](), [video]() ### AI overview This video demonstrates how Teleport implements SSH best practices, including SSH certificates, single sign-on, browser and command-line access, centralized session auditing, Kubernetes access, and connections to edge devices such as a Raspberry Pi. ### Source excerpt Teleport allows easy implementation of SSH best practices. Here is a video that takes a deep dive into how Teleport works. ## How to Setup MS AD FS 3.0 as Brokered Identity Provider in Keycloak DevFeed: [How to Setup MS AD FS 3.0 as Brokered Identity Provider in Keycloak]() Original publisher: [Read original article]() Author: Hynek Mlnařík Published: 2017-03-23T00:00:00Z Content type: tutorial Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [active directory](), [saml](), [Authentication](), [certificates](), [TLS (Transport Layer Security)](), [Windows]() Tags: [active-directory](), [authentication](), [certificates](), [idm](), [installation](), [kerberos](), [keycloak](), [ldap](), [openid-connect](), [saml](), [sso](), [tls](), [windows]() ### AI overview A setup guide for configuring Microsoft Active Directory Federation Services 3.0 as a brokered SAML identity provider in Keycloak. It covers SSL/TLS prerequisites, certificate trust configuration, metadata import, signature settings, mapper configuration, and AD FS relying-party trust setup. ### Source excerpt This document guides you through initial setup of Microsoft Active Directory Federation Services 3.0 as a brokered identity provider Keycloak. Prerequisites Two server hosts: Microsoft Windows Server 2012 with Active Directory Federation Services (AD FS) installed. The AD domain will be named DOMAIN.NAME in this post. Keycloak server. This can be generally placed anywhere but here it is expected to be running on separate host DNS setup: The Windows host name will be fs.domain.name in this post The Keycloak host name will be kc.domain.name in this post Setup Keycloak Server Keycloak server has configured for SSL/TLS transport - this is mandatory for AD FS to communicate with it. This comprises two steps: Setup keycloak for incoming HTTPS connections - steps are provided in Server Installation guide. Export AD FS certificate into a Java truststore to enable outgoing HTTPS connections: In the AD FS management console, go to Service -> Certificates node in the tree and export the Service communications certificate. Import the certificate into a Java truststore (JKS format) using Java keytool utility. Setup the truststore in Keycloak as described in Server Installation guide. Setup Identity Provider in Keycloak Setup Basic Properties of Brokered Identity Provider In the Identity Providers, create a new SAML v2.0 identity provider. In this post, the identity provider will be known under alias adfs-idp-alias. Now scroll to the bottom and enter the AD FS descriptor URL into Import from URL field. For AD FS 3.0, this URL is https://fs.domain.name/FederationMetadata/2007-06/FederationMetadata.xml. Once you click "Import", check the settings. Usually, you would at least enable Validate signature option. If the authentication requests sent to the AD FS instance are expected to be signed, which is also usually the case, you have to enable Want AuthnRequests Signed option. Importantly, then the SAML Signature Key Name field that shows after enabling the Want AuthnRequests Signed o ## Change default WSUS port from 8530 to 80 on Windows Server 2012 DevFeed: [Change default WSUS port from 8530 to 80 on Windows Server 2012]() Original publisher: [Read original article]() Author: Tom Published: 2014-01-24T00:00:00Z Content type: tutorial Language: en Sources: [Tomasz Gągor]() Topics: [Windows](), [configuration](), [Server]() Tags: [active-directory](), [active-directory-wsus](), [change-wsus-port](), [command-line](), [compatibility](), [configuration](), [gpo](), [ipv6](), [port](), [windows](), [windows-server-2012-wsus](), [wsus](), [wsus-configuration](), [wsus-ipv6-issue](), [wsus-port-80]() ### AI overview A tutorial explains how to change the default WSUS port from 8530 to port 80 on Windows Server 2012. It addresses an IPv6-only configuration and compatibility with older configurations. ### Source excerpt Learn how to change the default WSUS port from 8530 to 80 on Windows Server 2012, ensuring compatibility with older configurations and resolving IPv6-only issues. ## Manage Windows 8.1 and Windows Server 2012 R2 in WSUS 3.0 DevFeed: [Manage Windows 8.1 and Windows Server 2012 R2 in WSUS 3.0]() Original publisher: [Read original article]() Author: Tom Published: 2014-01-16T00:00:00Z Content type: tutorial Language: en Sources: [Tomasz Gągor]() Topics: [Windows](), [Microsoft](), [Databases]() Tags: [active-directory](), [database](), [domain](), [install](), [run](), [update](), [updates](), [windows](), [wsus](), [x86]() ### AI overview A practical guide to making Windows 8.1 clients work with WSUS 3.0 on Windows Server 2008. It describes installing two Microsoft updates, reindexing the WSUS database, and running the Server Cleanup Wizard so clients can report and receive updates. ### Source excerpt After connecting few computers with Windows 8.1 to domain we found that these computers are not recognized or recognized as Windows 6.3 (which is true) on WSUS 3.0 running on Windows Server 2008. The bad thing was that they can't properly report to WSUS and get updates from it. I found that there are two updates that have to be installed (but they're not working without additional steps): http://support.microsoft.com/kb/2720211 external link http://support.microsoft.com/kb/2734608 external link After installation of second update there are two additional steps that have to be performed to get WSUS working: ## DFS - sprawdzanie statusu replikacji DevFeed: [DFS - sprawdzanie statusu replikacji]() Original publisher: [Read original article]() Author: Tom Published: 2013-09-04T00:00:00Z Content type: tutorial Language: pl Sources: [Tomasz Gągor]() Topics: [Server](), [Windows](), [GUI]() Tags: [active-directory](), [gui](), [server](), [windows]() ### AI overview This Polish developer article explains how to check the replication status of DFS on Windows Server using the `dfsrdiag ReplicationState /member:nazwaservera` shell command. The command does not show percentage progress but can indicate whether synchronization is still occurring and whether errors are present. ### Source excerpt Ostatnio zbyt dużo grzebię przy "windach" - ale cóż, czasem trzeba. Ostatnio ustawiałem DFS'a z replikacją dla dwóch sporych zasobów i jedna z rzeczy, o którą się rozbiłem to brak jakiegokolwiek podglądu tej synchronizacji z GUI. Ale znalazłem jedno polecenie, które działa w shellu (choć to się chyba batch tutaj nazywa) od Windows Server 2008 R2: dfsrdiag ReplicationState /member:nazwaservera Polecenie co prawda nie podaje postępu procentowego ale można zobaczyć "czy coś jeszcze się synchronizuje" i czy nie ma żadnych błędów. Jeżeli to polecenie to za mało to można spróbować bardziej gadatliwej wersji: ## GPO: Instalacja GIMP'a 2.8 DevFeed: [GPO: Instalacja GIMP'a 2.8]() Original publisher: [Read original article]() Author: Tom Published: 2013-08-06T00:00:00Z Content type: tutorial Language: pl Sources: [Tomasz Gągor]() Topics: [Batch file](), [active directory](), [enterprise deployment](), [Script](), [Windows](), [configuration](), [App]() Tags: [active-directory](), [code](), [gpo](), [install](), [installation](), [policies](), [startup](), [windows]() ### AI overview A Polish tutorial explains how to deploy GIMP 2.8 through an Active Directory Group Policy startup script on Windows. The batch script checks whether GIMP is installed, silently removes an earlier manually installed version, and installs GIMP 2.8 from a network share. ### Source excerpt Raz na jakiś czas trzeba coś niestandardowego wrzucić do instalacji w Active Directory a że nie wszystkie aplikacje mają dostępne paczki MSI to trzeba się nieco natrudzić. Poniżej wrzucam skrypt, który instaluje GIMP'a 2.8 z domyślnego instalatora (wersja InnoSetup) przy okazji odinstalowując wcześniejsze wersje zainstalowane ręcznie. Zapisujemy poniższy kod jako np. gimp-install.cmd @echo off REM Installs GIMP cls echo ---------------------------------------------------- echo . echo . echo . Installing/Updating GIMP - Please Wait echo . echo . echo ---------------------------------------------------- REM Test if actual IF exist "%ProgramFiles%\GIMP\bin\gimp-2.8.exe" GOTO SkipInstall REM Exit the application taskkill.exe /F /FI "IMAGENAME eq gimp-2.8.exe" >nul REM Uninstall existing GIMP version, delete folder if exist "%ProgramFiles%\GIMP 2\uninst\unins000.exe" "%ProgramFiles%\GIMP 2\uninst\unins000.exe" /VERYSILENT :: Wait for 20 seconds ping -n 40 127.0.0.1 > NUL if exist "%ProgramFiles%\GIMP 2\" rd "%ProgramFiles%\GIMP 2\" /Q /S REM Install new version "\\serwerplikow.local\Instalki\GIMP\gimp-2.8.4-setup.exe" /VERYSILENT /NORESTART /DIR="%PROGRAMFILES%\GIMP 2.8" REM Skip installation if acctuall :SkipInstall REM Return exit code to SCCM exit /B %EXIT_CODE% Tworzymy nową regułkę GPO i zmierzamy do: Computer Configuration\Policies\Windows Settings\Scripts\Startup W nowym okienku wybieramy Show Files... Wklejamy plik skryptu do tego folderu i teraz możemy dodać go w tym samym oknie (Add...) - dzięki wrzuceniu skryptu w tym miejscu będzie się on automatycznie replikować na inne kontrolery. Skrypt będzie co prawda uruchamiany przy każdym starcie komputera ale pierwszy warunek będzie sprawdzać czy aplikacja jest zainstalowana więc nie spowolni to znacznie startu. ## Fortigate - VPN IPSec PSK XAuth z Android'a 4.x DevFeed: [Fortigate - VPN IPSec PSK XAuth z Android'a 4.x]() Original publisher: [Read original article]() Author: Tom Published: 2013-03-30T00:00:00Z Content type: tutorial Language: pl Sources: [Tomasz Gągor]() Topics: [Virtual Private Network](), [Android](), [Command-line interface](), [active directory](), [iOS]() Tags: [active-directory](), [android](), [cli](), [fortigate](), [fortios](), [ios](), [ipad](), [ldap](), [os](), [security](), [vpn]() ### AI overview A tutorial on configuring a Fortigate IPsec XAuth PSK VPN for Android 4.x phones and tablets to access an intranet. It covers CLI-based VPN setup, firewall rules, DNS access, and optional routing to external services, with notes about iOS compatibility. ### Source excerpt Do niedawna na moim telefonie VPN'ami były: PPTP lub L2TP - oba niespecjalnie mi się podobały. Ale od wersji 4-tej pojawiły się dwa nowe tryby: IPSec Xauth PSK i IPSec Xauth RSA. W pierwszym autoryzacja wykorzystuje login i hasło, w drugim certyfikaty. Tryb IPSec Xauth PSK jest bardzo wygodny bo łatwo można połączyć go z zewnętrznymi mechanizmami uwierzytelniającymi np. LDAP, Active Directory, itp. Pokażę jak skonfigurować swojego Fortigate'a by umożliwić połączenie z telefonów i tabletów na Androidzie 4.x do "Intranetu"1. Większość konfiguracji można przeprowadzić tylko w trybie CLI - zakładam że wiesz jak to zrobić. To co wygodniej można zrobić w trybie WWW to głównie tworzenie reguł dostępu na zaporze. ## Apache: mod\_authnz\_ldap z Active Directory DevFeed: [Apache: mod\_authnz\_ldap z Active Directory]() Original publisher: [Read original article]() Author: Tom Published: 2012-12-14T00:00:00Z Content type: tutorial Language: pl Sources: [Tomasz Gągor]() Topics: [active directory](), [Caching]() Tags: [active-directory](), [apache](), [cache](), [ldap](), [linux]() ### AI overview A Polish tutorial explains how to configure Apache authentication against Active Directory using LDAP and mod_authnz_ldap, including module activation, LDAP caching, virtual host settings, bind credentials, and access requirements. ### Source excerpt Gdy już się dorobi systemu Active Directory wygodnie jest wykorzystać jego bazę użytkowników do autoryzacji w różnych miejscach, np. do pewnych "tajnych i tajniejszych" stron w Apache. Najprościej można to zrobić z wykorzystaniem LDAP. Warto sprawdzić czy i jak możemy dostać się do kontrolerów. Gdy już mamy wszystkie potrzebne parametry konfigurujemy Apachego - na początek aktywujemy moduły: a2enmod ldap a2enmod authnz_ldap Teraz możemy edytujemy globalny plik konfiguracyjny mod_ldap'a by ustawić nieco cache'y (bardzo przydatne). Wartości można dostosować do potrzeb ale przykładowe powinny wystarczyć na początku: [Next page]()