Friday, November 30, 2007

Exchange 2007 SP1 Officially Released

SP1 is available by download at:http://go.microsoft.com/fwlink/?LinkId=104387

View a list of new features at:http://go.microsoft.com/?linkid=7844544

CISCO DHCP configurations - sample

Username: cisco
Password:
CFN3>en
Password:
CFN3#config t
Enter configuration commands, one per line. End with CNTL/Z.
CFN3(config)#service dhcp
CFN3(config)#ip dhcp pool Mypool(can asssign any name you like)
CFN3(dhcp-config)#network 192.168.0.0 255.255.255.0 (your Network ID)
CFN3(dhcp-config)#dns-server 202.124.160.2 (your ISPs DNS servers)
CFN3(dhcp-config)#default-router 192.168.0.1
CFN3(dhcp-config)#lease 0 4 0
CFN3(dhcp-config)#ip dhcp excluded-address 192.168.0.10 192.168.0.20 (optional; if you want to exclude a range of IPs)
ARC3(config)#exit
ARC3#copy run startup-config ( write the changes you have made on the router)

Exchange 2007 autodiscover problem, outlook gives a certificate error

Your issue is that the cert name is stuck on the internal fqdn, while the ol2k7 client is looking at the https name, eg; mail.mydomain.com not server.insidedomain.net. There are several fixes, some dealing with SAN naming on the certs. Do a search on this in this forum. I posted serveral times how to fix this. As well, there are MSKB articles. Shudnow.net has a fix - which is the same one I posted here. NM, here it is again. Not my material, but fixed it for me. Outlook 2007 Certificate Error? When importing a new certificate into Exchange 2007, you might encounter a certificate error in Outlook 2007. I have included a screenshot of the error I encountered today:Your issue is that the cert name is stuck on the internal fqdn, while the ol2k7 client is looking at the https name, eg; mail.mydomain.com not server.insidedomain.net. There are several fixes, some dealing with SAN naming on the certs. Do a search on this in this forum. I posted serveral times how to fix this. As well, there are MSKB articles. Shudnow.net has a fix - which is the same one I posted here. NM, here it is again. Not my material, but fixed it for me.Outlook 2007 Certificate Error? When importing a new certificate into Exchange 2007, you might encounter a certificate error in Outlook 2007. I have included a screenshot of the error I encountered today:






When you choose the View Certificate button, it brings up another window that shows you what certificate is in error. In this case, the certificate name is “mail.shudnow.net.”



So the million dollar question? Why the error?



Well, when we install a new certificate, there are a few tasks we want to do. Obviously, we install the certificate for a purpose. This purpose is till allow us to use Exchange services securely. So how do we enable Exchange to use these services? If you are planning to do a very simple configuration and do not care about external Autodiscover access, you do not need to use a Unified Communication Certificate. You can read more about these certificates in one of my other articles here.

So let’s say we have a simple regular common certificate. A certificate with a Common Name (CN) of mail.shudnow.net We install this certificate onto our Exchange box with its’ private key. In our case we were migrating so we did not have to request a certificate via IIS. We just exported it with its’ private key and imported onto the new box. We then assigned this certificate to IIS. Now I went to the Exchange Management Shell and enabled Exchange services to use this certificate. In order to do this, you must run the following commands:



Get-ExchangeCertificate



Thumbprint Services Subject

———- ——– ——-

BCF9F2C3D245E2588AB5895C37D8D914503D162E9 SIP.W CN=mail.shudnow.net.com



What I did was go ahead and enable all new services to use every available service by using the following command:



Enable-exchangecertificate -services IMAP, POP, UM, IIS, SMTP -Thumbprint BCF9F2C3D245E2588AB5895C37D8D914503D162E9



The next step would be to ensure the AutodiscoverInternalURI is pointed to the CAS that will be your primary CAS for Autodiscover servicing.



Get-ClientAccessServer -Identity CASServer FL



AutoDiscoverServiceInternalUri : https://casnetbiosname/Autodiscover/Autodiscover.xml



See the issue here? We are not using a UC certificate that contains the names, “casnetbiosname, casnetbiosname.shudnow.net, mail.shudnow.net, and autodiscover.shudnow.net” Since the Autodiscover directory in IIS will be requring SSL encryption, the url specified in the AutoDiscoverServiceInternalURI must match what is specified in your certificate. You must also ensure there is a DNS record that allows mail.shudnow.net to resolve to your CAS. We should re-configure the AutoDiscoverServiceInternalURI by using the following command:



Set-ClientAccessServer -Identity CASServer -AutoDiscoverServiceInternalUri https://mail.shudnow.net/Autodiscover/Autodiscover.xml



We now need to go configure all the InternalURLs for each web distributed service. Here is the reason why we were receiving the certificate errors. Your InternalURLs most likely are not using mail.shudnow.net. Your InternalURLs are most likely pointed to something such as https://casnetbiosname/ServiceURL which will fail since this is not the CN of your simple certificate.



You can run the following commands to fix your internalURLs so your Outlook 2007 client can successfully take advantage of your web distribution services.



Set-WebServicesVirtualDirectory -Identity “CASServer\EWS (Default Web Site)” -InternalURL https://mail.shudnow.net/EWS/Exchange.asmx -BasicAuthentication:$true



Set-OABVirtualDirectory -Identity “CASServer\OAB (Default Web Site)” -InternalURL https://mail.shudnow.net/OAB -BasicAuthentication:$true



Enable-OutlookAnywhere -Server CASServer -ExternalHostname “mail.shudnow.net” -ExternalAuthenticationMethod “Basic”-SSLOffloading:$False



Set-ActiveSyncVirtualDirectory -Identity “CASServer\Microsoft-Server-ActiveSync (Default Web Site)” -ExternalURL https://mail.shudnow.net/Microsoft-Server-Activesync



Set-UMVirtualDirectory -Identity “CASServer\UnifiedMessaging (Default Web Site)” -InternalURL https://mail.shudnow.net/UnifiedMessaging -BasicAuthentication:$true

401 Error when attempting Test-OutlookWebServices (MS Exchange 2007)

Some users have been recieving 401 Error when attempting to run Test-OutlookWebServices from the CAS server. The below articles talks about why IIS returns this error.
http://support.microsoft.com/?id=896861


You can test this by attemtping to access the server in the following way:
https://netbiosname/Autodiscover/Autodiscover.xml :It will prompt for credentials. After prompting a couple of times we get the following error:Error: Access is Denied.-


Use https://localhost/Autodiscover/Autodiscover.xml :It will work fine and give an output.
DisableLoopbackCheck can be disabled but then the system is left open to an attack and I would not recommend disabling this function unless you will enable once testing is completed.
: Disable the loopback checkFollow these steps:




1.Click Start, click Run, type regedit, and then click OK.


2.In Registry Editor, locate and then click the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa



3.Right-click Lsa, point to New, and then click DWORD Value.


4.Type DisableLoopbackCheck, and then press ENTER.


5.Right-click DisableLoopbackCheck, and then click Modify.


6.In the Value data box, type 1, and then click OK.


7.Quit Registry Editor, and then restart your computer.

Thursday, November 29, 2007

Iphone Unlock Software Downlaod (method 2)

YouTube is not working in Ipone

YouTube is not working


If YouTube does not work ("You must first connect to iTunes..."), try to install YouTube activation which is found in the Unlocking tools-category after you have added my repository (see previous question)


How to "Virginize" an unlocked phone

How to "Virginize" an unlocked phone before update to 1.1.1

Ignore all long and complex tutorials - I have set up a fully automatic script that will repair the phone so that you can upgrade it.

1.)Set Settings → General → Auto Lock → Never

2.) Make sure Modem firmware is 03.14.08_G. Check this in Settings → General → About.

3.) Start Installer and update it if it asks. Tap on Sources, Edit, and Add http://i.unlock.no/ as a repository.

4.) Make sure you have BSD Subsystem installed, if not, go to System category and install it.

5.) Now, install The Virginizer found in the Unlocking Tools category. This will take about 3-5 minutes to complete.

Only use if you never updated to 1.1.1 before! (that means, only use if your Modem firmware is 03.14.08_G. Check this in Settings → General → About).


How to "Virginize" if you already upgraded and have 04.01.13_G.

You would want to do this if you upgraded to 1.1.1, and now have 0049xxx IMEI, and Modem version 04.01.13_G. Check this in Settings → General → About.

1.) Set Settings → General → Auto Lock → Never

2.) Install BSD SubSystem found in System Category.

3.) Go to Sources and tap edit and add http://i.unlock.no/ (if you haven't already).

4.) Now install "Virginize 04.x" found in Unlocking Tools category. This will take almost 10 minutes.

5.) When done, restore your phone to get 1.1.1 firmware reinstalled.

When phone have been restored, you can Activate and unlock as normal.

Unlock your IPHONE firmware version 1.1.1 (Method 1)

This tutorial assumes that your iPhone is brand new, and have firmware version 1.1.1. If you are unsure, here is how to check: On the emergency dial screen dial *3001#12345#* and tap Versions. Firware version should be 04.01.13_G. If it's 03.14.08_G you have v1.0.2 and need to update it to 11.1 first.

I have another method for 1.1.1 and a seperate method of 1.1.2 firmware, i will post it later when i have time

Where can i find the iPhone firmware files?

1.0.0:
iPhone1,1_1.0_1A543a_Restore.ipsw
1.0.1:
iPhone1,1_1.0.1_1C25_Restore.ipsw
1.0.2:
iPhone1,1_1.0.2_1C28_Restore.ipsw
1.1.1:
iPhone1,1_1.1.1_3A109a_Restore.ipsw
1.1.2:
iPhone1,1_1.1.2_3B48b_Restore.ipsw


This phone is unlocked to and used with the Dialog network in Sri Lanka



Tips and tricks
Some of these tricks require computer skills। Don't ask me for help। :)

Bypass activation and prepare phone for software installation

1.) Make sure you have a SIM-card with PIN turned off, and power on your phone (the supplied AT&T card works fine).

2.) On the activation screen, slide to emergency and dial: *#301# to make the phone call itself. (If the incoming call dialog quickly disappears but it keeps ringing, just dial 0 (remove *#301# first), and it will call itself)

3.) Answer the call, and tap on Hold

4.) Phone will call it self again, tap Decline। You will now be returned to the normal dialer.

5.) Tap on contacts, and tap the + icon to add a new. The only info you are going to add to this contact are two URL's. To add a URL, tap Add new URL. The first URL is prefs followed by a colon: prefs: and the second is jailbreakme.com. Tap Save.

6.) Your contact now has two "web pages" - tap on the first one (prefs:). This will take you to the settings dialog. The reason you want this, is because you need to connect to a Wi-Fi network, so tap on Wi-Fi, and get connected to a network, and make sure the icon on top of the screen is indicating that you are connected. While you are in the settings dialog, you should also set: General → Auto-Lock → Never.

7.) Now, press the home button, and again, slide to emergency dial 0, Answer the call, Hold and Decline the new call so that you get to the contacts। Tap on your contact (No Name), and this time tap on the other home page, jailbreakme.com

8.) Safari will launch and show you a webpage. Read through the text, before you Install AppSnapp

9.) Phone will return to activation screen, but don't panic, just wait।

10.) Phone should automaticly restart after almost a minute If it does not restart withing 2 minutes, click here.

11.) When the phone starts again, it should no longer say Slide to emergency, but rather Slide to unlock It means it was successfull! Activation is now bypassed, and phone prepared for software installation! (If you are going to use an AT&T SIM, you won't need to do the next step.)

Unlock the SIM-lock
1.) Open installer, and install the update if prompted.

2.) Go to sources and tap Edit and Add

3.) Add this URL:
http://i.unlock.no

4.) Tap Done and then Refresh

5.) Go to Install (at bottom) and scroll down to the Unlocking Tools category and install AnySIM

6.) When installed you can press the home button, and you will find a new AnySIM icon on your home screen. Launch it and follow the instructions.

7.) The unlocking process will take about 5-10 minutes, in the end it should say it was successful!

8.) To clean up your phone, launch Installer and uninstall AnySIM. Then go to Settings → General → Auto-Lock and set it to a prefered value.

Thats IT Enjoy your new IPHONE