adfs: update relying party trust via metadata file

from the ADFS management console it doesn’t appear that there is a method to use a metadata file to update an existing relying party trust. i had to resort to deleting the old trust and recreating a new one with the new metadata file. of course this means that claim rules have to be recreated […]

Posted in: IT by resinblade Comments Off on adfs: update relying party trust via metadata file

vcenter: heartbleed vulnerability resolution

info here regarding vcenter 5.5 update 1a: http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2076692

Posted in: IT by resinblade Comments Off on vcenter: heartbleed vulnerability resolution

windows: set apps to force-close on reboot

set the registry value AutoEndTasks to 1 under HKEY_USERS\.DEFAULT\Control Panel\Desktop source: http://geeksaresexy.blogspot.com/2006/05/forcing-unresponsive-applications-to.html

Posted in: IT by resinblade Comments Off on windows: set apps to force-close on reboot

exchange 2007: GAL updates

GAL changes are immediately visible from OWA, however the offline address book (OAB) won’t reflect the change until the next OAB update interval. the interval is configured from the EMC->Organization Configuration->Mailbox->Offline Address Book. there’s also an option to right-click the OAB and select Update (i haven’t tried this yet). to get the latest copy of […]

Posted in: IT by resinblade Comments Off on exchange 2007: GAL updates

sysaid: use UPN as login

change the following… Name attribute = userPrincipalName User filter = (userPrincipalName={0}) Login (DN)s add “{1}”, the default is “{0}\{1}” where {0} is netbios domain name and {1} is username

Posted in: IT by resinblade Comments Off on sysaid: use UPN as login

ubuntu 14.04

i upgraded to ubuntu 14.04 not too long ago. after booting up 14.04 for the first time and starting a gnome flashback session, i was immediately perplexed as to why i was seeing the unity launcher. it’s most likely because i use the flashback session with effects enabled (compiz) enabled, but still it was strange […]

Posted in: IT by resinblade Comments Off on ubuntu 14.04

active directory: decommission a certificate authority

i have done this once with no apparent consequences… http://support.microsoft.com/kb/889250 update 4/21/2014: the utility pkiview.msc that comes with the windows server 2003 resource kit can be used to determine the health of a CA.

Posted in: IT by resinblade Comments Off on active directory: decommission a certificate authority

office365 notes (2014 edition)

had an issue with my test ADFS instance and office365, where federated logins were redirecting to the public URL for the production ADFS farm. to resolve: Get-MsolFederationProperty -DomainName [federated domain] – this displays the current federation info for ADFS & office365 Update-MsolFederatedDomain -DomainName [federated domain] – run this if the above info is outdated/incorrect ^may […]

Posted in: IT by resinblade Comments Off on office365 notes (2014 edition)

ubuntu: unknown filesystem type ‘exfat’

a couple of days ago i tried to mount a pre-formatted SD card on my laptop running the latest ubuntu release. the SD card attempted to auto-mount, but then presented an error “…mount: unknown filesystem type ‘exfat’”. the solution was thankfully very simple. install the packages exfat-utils and exfat-fuse. no reboot required. source: http://askubuntu.com/questions/364270/mount-unknown-filesystem-exfat

Posted in: IT by resinblade Comments Off on ubuntu: unknown filesystem type ‘exfat’

adfs 3.0: updating certificates

steps: create new token signing cert on primary ADFS server by running… Add-PSSnapin Microsoft.Adfs.Powershell Update-ADFSCertificate -CertificateType Token-Signing (or Token-Decrypting) (this creates a secondary certificate that should be auto-rolledover to when the primary certificate expires) check ADFS settings with the powershell cmdlet Get-ADFSProperties check value of AutoCertificateRollover property (should be true or false) to update the […]

Posted in: IT by resinblade Comments Off on adfs 3.0: updating certificates