Categories
Tech

Setting up Duo Security with Ubuntu Server for 2FA

In this article I will go through the steps required to install and configure Duo Security with Ubuntu Server for two factor authentication. This can be adapted to apply to SSH log-ons, sudo access, etc. The Linux PAM (pluggable authentication modules) make this easy to implement and customise.

I currently have this implemented on my Ubuntu 14.04 x64 LTS Server and it works really well.

Categories
Tech

Packet Capture on a Palo Alto Management Interface

In this quick how-to I will show you how you can very easily and quickly run a packet capture on a Palo Alto management interface.
Some reasons why you may want to capture packets on the management interface is to capture traffic such as RADIUS and Syslog which is processed via the management plane. Management traffic cannot be captured using the ‘packet capture’ feature on the GUI so we need to do it using the CLI.

Categories
Tech

Session Negotiation Failed – Horizon View 6.2

If you’re upgrading from an earlier version of VMware Horizon View to version 6.2 then you may see clients fail to log-in with error messages that follow similar verbage:
SSL session negotiation failed or The Zero Client may not be compatible with the host session negotiation cipher setting.

Categories
Tech

Installing mod_cloudflare on Ubuntu 14.04 for Apache Server

In this article I will briefly go through instructions on installing mod_cloudflare on an Ubuntu 14.04 server running Apache 2.4.

The reason we need the mod_cloudflare module is because Cloudflare acts as a reverse proxy meaning that visitor IP addresses in your access logs (/var/log/apache2/access.log) will appear to come from any one of Cloudflare’s IP addresses; all of which they make available here.

Categories
Tech

Remove Extra Registry Settings from GPO

In this guide I will walk through how you can quickly and easily remove Extra Registry Settings from your group policies objects when you don’t have access to the custom .ADM to ‘unconfigure’ them or they don’t show up in the GPO editor for what ever reason.