1
Non-Mitel Chatter / Re: No Overtime for IT Wokers
« on: December 28, 2011, 10:20:35 AM »
Many systems Engineers, Network Engineers, and Systems Administrators are already classed as "exempt" and aren't eligible for overtime.
News:
Welcome to Mitel Forums. The Mitel resource - by techies, for techies...
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
Mitel Software Applications / Re: MBG - how to update
« on: November 30, 2011, 10:02:41 AM »
You could be right; I have no idea. You're dealing with an engineer who has inherited a network and is still trying to absorb the details of his new environment.
Having said that, I'd imagine that supported or not, the vulnerability would remain - unless the physical MBGs get different software and the Apache version is 2.3.21 or greater (which is a very recent release) they're still vulnerable to ApacheKiller, Metaspl0it, etc.
Having said that, I'd imagine that supported or not, the vulnerability would remain - unless the physical MBGs get different software and the Apache version is 2.3.21 or greater (which is a very recent release) they're still vulnerable to ApacheKiller, Metaspl0it, etc.
3
Mitel Software Applications / Re: MBG - how to update
« on: November 30, 2011, 09:16:00 AM »
Thank you Ralph. Rather than update Apache, I just added a line to the SME Linux template that controls /etc/httpd/conf/httpd.conf that turns off the legacy feature designed to support IE 3 and Netscape 3(!!!) and that negates the vulnerability without risking having the Mitel package updater break during the next update cycle, etc.
For any other admin out there that is interested in securing thier MBG (and by extension the VMware host if you're using a virtual appliance) against script-kiddies wielding ApacheKiller:
You can't edit the config file directly or it will just get overwritten at next boot. Google about how SME linux uses templates to create these config files and how to modify the template. All you're trying to do is get the following line added anywhere into the httpd.conf file:
RequestHeader unset Request-Range
For any other admin out there that is interested in securing thier MBG (and by extension the VMware host if you're using a virtual appliance) against script-kiddies wielding ApacheKiller:
You can't edit the config file directly or it will just get overwritten at next boot. Google about how SME linux uses templates to create these config files and how to modify the template. All you're trying to do is get the following line added anywhere into the httpd.conf file:
RequestHeader unset Request-Range
4
Mitel Software Applications / Re: How to deploy .Net 4.0 using Active Directory
« on: November 29, 2011, 05:12:31 PM »
@dutch_tuga: If you have questiong about deploying .NET, you should always look at Aaron Stebner's blog. He's part of the Windows installer team at Microsoft, and always has good info about deploying .NET. In your case, I think you'd find this blog entry valuable:
http://blogs.msdn.com/b/astebner/archive/2010/06/04/10020299.aspx
@akuhn: You are dabbling with the Deep Magic. What you want is to learn about Windows Installer logging, and how to create Windows Installer transforms and a nifty little tool called ORCA that you'd use to view the contents an MSI and create transforms (MST files.) The Orca tool is part of the Windows Installer Platform SDK which is available as a free download from Microsoft. Chances are, the solution to your problem will go like this:
1. Log the manual installation
2. View the log and find the name of the property or properties that is set that controls the server name
3. Open the MSI in orca, choose to generate a transform that modifies that property to the desired value.
4. Feed both the MSI and the MST into the GPO (you have to choose advanced when adding the MSI to the GPO to have the option to apply a transform.)
I know I didn't provide much detail, but if you found your way here, you obviously have a fair amount of brainpower.
http://blogs.msdn.com/b/astebner/archive/2010/06/04/10020299.aspx
@akuhn: You are dabbling with the Deep Magic. What you want is to learn about Windows Installer logging, and how to create Windows Installer transforms and a nifty little tool called ORCA that you'd use to view the contents an MSI and create transforms (MST files.) The Orca tool is part of the Windows Installer Platform SDK which is available as a free download from Microsoft. Chances are, the solution to your problem will go like this:
1. Log the manual installation
2. View the log and find the name of the property or properties that is set that controls the server name
3. Open the MSI in orca, choose to generate a transform that modifies that property to the desired value.
4. Feed both the MSI and the MST into the GPO (you have to choose advanced when adding the MSI to the GPO to have the option to apply a transform.)
I know I didn't provide much detail, but if you found your way here, you obviously have a fair amount of brainpower.
5
Mitel Software Applications / Re: MBG - how to update
« on: November 29, 2011, 12:45:59 PM »
I updated the MBG successfully, but even after installing the latest available updates, the purpose of the update is unresolved. The MBG VMware virtual appliance uses an older (2.2.3 - released late 2010) version of Apache that is vulnerable to a DoS attack that can overload the CPU.
Having said that, apache has a workaround that involves modifying it's configuration file, which SME Linux supports. The question is will making a mod to a config file render the MBG unsupported?
The server is running Mitel Standard Linux 9.3.8.0 and V7.0.12.0 of the MBG application.
Any thoughts/help on this?
Having said that, apache has a workaround that involves modifying it's configuration file, which SME Linux supports. The question is will making a mod to a config file render the MBG unsupported?
The server is running Mitel Standard Linux 9.3.8.0 and V7.0.12.0 of the MBG application.
Any thoughts/help on this?
6
Mitel Software Applications / Re: MBG - how to update
« on: November 23, 2011, 05:42:28 PM »
I never looked under blades. Very non-intuitive interface decision by Mitel there. Found the updates section. That was what was needed! Thank you very much!
7
Mitel Software Applications / MBG - how to update
« on: November 22, 2011, 04:53:27 PM »
So I have an old MBG VM that needs to be updated. I've searched the forum, but I'm not finding anything, I can't find any setting in the web interface, and the package manager (YUM) isn't configured with any repositories.
What is the procedure for updating one of these?
Thanks for your time!
What is the procedure for updating one of these?
Thanks for your time!
Pages: [1]