Categories
Tech

Palo Alto RADIUS Authentication with Windows NPS

In this article I will go through the steps required to implement RADIUS authentication using Windows NPS (Network Policy Server) so that firewall administrators can log-on using domain credentials.

Categories
Tech

Setting up a RTSP Relay with Live555 Proxy

In this brief how-to, I will show you how you can set up a RTSP relay/proxy server using the Live555 Proxy.

Essentially what the Live555 proxy server allows you to do is to connect to a backend video feed and relay it to your RTSP clients via unicast. The number of clients you can relay to depends on the hardware of your proxy server as well as the network. Bandwidth usage can easily be calculated by multiplying the backend feed in KB/s by the number of clients connected to your relay server.

Categories
Tech

WordPress 4.4.1 Redirect Loop

You notice you receive one of the following errors whilst trying to browse to the home page of one of your WordPress sites after updating to 4.4.1:

ERR_TOO_MANY_REDIRECTS

This webpage has a redirect loop

This page isn’t redirecting properly

I saw this on one of the WordPress sites I manage for a local takeaway. The problem occurred after the update to 4.4.1 and had me stumped.

All other pages would load but not the static homepage. Changing the permalink structure to plain (post-id) fixed the problem but changing it back to postname made the problem reappear.

Interestingly, if I browsed http://homepage/index.php or http://homepage// (yes, a double slash) the home page would load up just fine. Weird. I’m sure a .htaccess rule would fix this but I didn’t delve in to this.

The solution?

Simple. Check your WordPress address and Site Address in Settings –> General.

Ensure they’re both lower cased and not mixed. Don’t ask me why or how this works because I have no idea.

Categories
Tech

Setting up Duo Security with Ubuntu Server for 2FA

In this article I will go through the steps required to install and configure Duo Security with Ubuntu Server for two factor authentication. This can be adapted to apply to SSH log-ons, sudo access, etc. The Linux PAM (pluggable authentication modules) make this easy to implement and customise.

I currently have this implemented on my Ubuntu 14.04 x64 LTS Server and it works really well.

Categories
Tech

Packet Capture on a Palo Alto Management Interface

In this quick how-to I will show you how you can very easily and quickly run a packet capture on a Palo Alto management interface.
Some reasons why you may want to capture packets on the management interface is to capture traffic such as RADIUS and Syslog which is processed via the management plane. Management traffic cannot be captured using the ‘packet capture’ feature on the GUI so we need to do it using the CLI.