Securing your remote connection information.
Hello folks,
Recently I had a security break in which a trojan virus uploaded malicious software to all of the sites I have hosted along with viruses to some sites I do not host, but had ftp connection information stored within both Cute FTP Pro and Dreamweaver CS4. This was one hell of a mess to clean up, bascially giving all of my hosting accounts new passwords, deleting all files currently online and re-uploading them to ensure the virus was eliminated completely. Upon researching this further, and discussing it with my hosting reseller technical support, they informed me that usually this type of trojan infects a local machineand transmits the virus by stealing the ftp login information from an ftp enabled program, downloading the file to be infected from the site, modifying it and re-uploading it to the site.
I have decided that storing my ftp login information within these programs is probably not safe and have resorted to just inputting the information (or just the password at the least) each time that I need to make changes to the site.
I guess what I am asking is what should I be doing to ensure that this sort of thing does not happen again?
wiL
Hi,
Thank you for posting in Windows Server Forum.
From your description it seems you have check every possible solution for this case. For here suggest you to recheck whether there is proper network connectivity without any packet loss.
Apart, when you are using RDP file before that edit the RDP file with notepad and add following line under it.
enablecredsspsupport:i:0
http://technet.microsoft.com/en-us/library/ff393699(WS.10).aspx
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support
Similar Messages
-
NI Server remote connection security
Hi,
I searched all the NI site and all the Labview help but couldn't find answers. My intention is to run one or more VI Server on an unsecure TCP/IP network. I would like to allow remote access using Open Application Reference node. We have Academic Site License so I have access to most recent version of almost all NI software. Related to this I have the three following questions:
1) I'd like to limit the access to certain VIs and certain VI servers (if there will be more than one server) on user level. The IP address level access rights are not enough since multiple users may have the same IP address. There is a feature in Labview 8.0 called Domain Account Manager with which I can create domains and create users and user groups. Can I use this information to limit access to VIs running on a VI server? There seems to be a NI Security: Get Access Rights Method which is more or less undocumented. Where can this be used?
2) How is the connection created by Open Application Reference and used in remote VI calls secured? Is the connection encrypted or can it be made encrypted using strong cryptography? How is the user information passed to the VI server when user logs in to a Domain Account Manager account? How is the user identity secured after the login during the session when user accesses security controlled resources?
3) What is the NI Labview related roadmap for authentication, access control, accounting and security of remote connections? I would really appreciate if the roadmap would include features that would allow secure remote access to any labview resources with user level dynamically controllable access control. I also would like to see some kind of session management so that passive users could be automatically logged out. I would also appreciate if each instance of re-entrant VI (or class objects in the future) could have different access rights that could be defined when VI (object) reference is opened. Now anybody who has access to a certain VI can access the dataspace of any reentrant instance of that VI.
Tomi MailaIt seems nobody knows... I assume no answer means no security at all. I suppose I have to write my own API for remote application calls then.
I guess the following solution may work for user level security on remote VI calls. Put VI server behind a VPN capable firewall. This firewall is taking the responsibility of access control. Allow only VPN connections to pass trough the firewall. Allocate a unique IP-address for each VPN connection. Now each user has a separate dynamic IP-address. Since open application reference calls can be allowed/denied on the IP-address basis, this functions as a user level access control. However this is really overkill solution. Does anybody come up with anything simpler? Of course some other secure certificate based connection can be used instead of IP-sec based VPN.
Tomi
Message Edited by Tomi M on 06-05-2006 04:15 PM
Tomi Maila -
Just had cellular data plan added to my iPad 2. How do I wep secure my wifi connection?
How can I secure my cellular data wifi network on my iPad 2? I want to ensure others are not drawing against my data plan.
You can set up a password to secure your WiFi connection from your router. A very smart thing to do given a recent news story about a guy in Florida who didn't secure his WiFi network and was raided by the polce, who later discovered his signal was being used by another dude for illegal purposes..
As to your 3G cellular data plan, I don't believe it turns your iPad into a WiFi hotspot that others can use.
I can be paranoid, so I tend to turn on airplane mode when I'm not using my iPad, and especially overnight when I'm asleep. -
If your remote will not connect, read this, it will most likely help you.
If your remote is not connecting, I can almost guarantee it is because you need to forward the ports on your router necessary to control it. I've suggested it to MANY people, and it has helped 100% of them. You need to forward ports TCP 3689 and UDP 5353.
If you don't know how to do this go to the website www.portforward.com, and click "Guides". Then, under Port Forwarding", click "Port Forwarding Guides by Router".
It doesn't matter if you're using a PC (which I am), or a Mac (which many of you are), this is more than likely what you need to do.
And for those of you who have had no problem whatsoever: I'd make sure your security is enabled. If it's not, yer in for a world of hurt if someone finds that out.
Please reply if this helped you, or if you need some more information. I will check back at 9:00PM Central when I get off work.
Message was edited by: dylanfowlesThis is the exact same problem i am experiencing, wired pc, into router that also provides the wireless connection for my iphone. I get no device popping up in itunes when trying to add a library in remote.
I have added the port forwards to my router with no joy, disabled any and all software firewall/av, no joy.
Its quite frustrating as i can get to my laptop's library just fine (laptop is wireless), i've even tried at work and can get over wireless via an access point onto the network and my pc there is wired in.
I can only guess it is my router doing something stupid, or because it is running as a gateway and router, or something.
Any other info would be great -
I have a web page that contains a ReportViewer control. I am trying to display a report, which is an .rdl file located on the SSRS server, in this ReportViewer control. I have set the ReportPath and ReportServerUrl correctly. I am
getting an error message.
Am I suppose to use an .rdlc file rather than a .rdl file? Does the web server configuration need to use a certain account?
I am getting the following error message:
The attempt to connect to the report server failed. Check your connection information and that the report server is a compatible version.
The request failed with HTTP status 404: Not Found.Hi bucaroov,
The error "The request failed with HTTP status 404: Not Found." means the ReportServerURL configured in the ReportViewer control is invalid.
Please follow these steps to solve the issue:
Logon the Report Server machine.
Open the Reporting Services Configuration Manager.
Copy the Report Server URL from 'Web Services URL'.
Logon the application server(in this case, it is the server that host the web page), check if we can use the URL we got from step 3 to access the Report Server. If so, please replace the ReportServerURL in the ReportViewer control with this URL. If it is
not available, could you please post the error message.
Additionaly, we don't need to provide the extension for a server report. The ReportPath should be like: /<reports folder>/<report name>
For more information, please see:
Walkthrough: Using the ReportViewer Control in Remote Mode:
http://msdn.microsoft.com/en-us/library/ms251669(VS.80).aspx
If you have any more questions, please feel free to ask.
Thanks,
Jin Chen
Jin Chen - MSFT -
Contribute cannot verify your connection information... Please notify your administrator."
After a initial network error last night, The Shared Settings
file was zapped. Contribute decided I was no longer the Admin, and
the Editor's connection also disappered.
I found the note that's pasted here, in the Contribute
Forums.
"connect to your server (using 3rd party ftp client) and
delete the _mm folder located on the root of the website - recreate
your connections and that should solve the issue"
I deleted the _mm folder. When I tried creating the
connection anew, contribute said, "Contribute cannot verify your
connection information... home/justandpeacefu/html/. Please notify
your administrator." Now it's the same error every time. I am
unable to make the new _mm folder.
Contribute Tech support sent me an email which didn't help.
It's at the very bottom.
Items 1-4 in the email are not the problem.
I am able to connect to the server, after the tech support
person reset something there.
I can make folders, and pages in FTP application;
there are no special characters;
permissions are fine;
Item 5 did not have any effect. I turned off Apple's personal
firewall, quit contribute, and tried again. Unsuccessful. Same
error.
ANY SUGGESTIONS, ANYONE?
Text from Tech Support:
As we have discussed on the phone earlier today, here are
common causes of getting a "cannot verify connection information"
when creating a connection in Contribute:
1. Not enough permissions on the root of the website - Make
sure you have enough permissions on the root of the website. Using
third party FTP software, verify that you are able to create
folders, upload and rename files, and delete files on the root of
the website.
2. There are special characters on the folder name of the
folder you are trying to connect to - Avoid special characters as
Contribute is not so compatible with them.
3. Incompatible FTP connection settings: When you are asked
to enter your FTP account information in the connection wizard,
click the advanced button. Make sure that the only options selected
are: "Choose FTP Server Settings Manually" and "Use Passive FTP to
connect to the server".
4. Verify that the FTP server is pointing to your web server.
Example: upload any temporary HTML file on the root of your
website; when you visit the URL:
http://[your_server
you should see the page render; You should not get a "Page cannot
be found".
5. Turn off any software firewall / antivirus running on the
background to isolate possibly conflicting processes.I'm having the same problem as andres in the original post,
the message comes up when trying to Continue out of the "Remote
Path Info" box. I am able to browse to the location so Contribute
does know its there. This is with Contribute 4 on Mac OS X
connecting to a Linux server.
I manually ran the FTP connection tests via command line:
http://store1.adobe.com/cfusion/knowledgebase/index.cfm?id=tn_19496
and all tests passed successfully
I also downloaded and ran FTP Connection Checker (on my
Windows machine) at:
http://store1.adobe.com/cfusion/knowledgebase/index.cfm?id=tn_19012
and passed all tests successfully.
The wording with these tests imply that they are the same
tests run by Contribute, i doubt that to be the case since these
pass but Contribute fails.
I have tried this with the site root and _mm folder set to
permissions of 777 with no luck. I am able to connect and edit
successfully with Dreamweaver and FTP with Transmit (Mac OS X).
I'm about out of things to try and my deadline to train the
client is coming up. Any further insight on this would sure be
appreciated! -
Where is the connection information stored for Mac Remote Desktop?
I want to restore Mac Remote Desktop connection information from a Time Machine backup to a new Mac. On the new Mac, I've installed Remote Desktop from the App Store and installed all the files found in
~/Library/Containers/com.microsoft.rdc.mac from
a Time Machine backup. But I don't see my old connections. I also don't see any connection information in my Time Machine backup here
~/Documents/RDC Connections.
Where is the connection information stored?The path is correct. You could try to get an console log during application launch. This log might give you information why the information is missing.
-
"Contribute cannot verify your connection information"
Please can somebody help a non-techie from England (New Forest) who has hit a brick wall when using Contribute 3?
I have a community (voluntary and not-for-profit) website as a sub-domain on my business website. Don't ask me how I managed it, but I created the community website entirely on the Contribute software. For unknown reasons, it would not allow me to edit and upload pages etc., even though I have been doing this for some time. I uninstalled the program, re-installed it and starting again tried to make a connection.
I got the error message "contribute cannot verify your connection information. The path given does not match the provided website's homepage; or there may be a permission problem. Please contact your administrator for assistance".
Well, obviously I can't administer the site yet because I cannot get a connection! I have asked my web-hosting company to verify the information I need and he tells me that he is able to get into the site with no problem using the same information - he is using contribute CS4.
This is killing me with frustration because I so need to get some vital information out to our 34k residents which is time-critical (by 3rd Dec latest). I have put so much work into this without moaning, but am now at the end of my patience and feel like throwing the towel in. The site is onevoice.officeoverload.com if you would like to see what I mean.
Thanks for reading this - apologies that it is long. If anyone out there can help I would be so very grateful to hear from you
Best wishes
SueSue,
Maybe I can help you as I just solved my own connection problem after trying to get help from Adobe online support, phone support, and this forum for over a month.
You will need to have access to your Contribute Server installation. If you are using a MS Windows based pc and it was installed using the defaults it should be located here: C:\Program Files\Macromedia\Contribute Publishing Server. Under the CPS folder there will be a number of folders but you only need to open the database folder. Inside that folder will be a folder(s) with it's name being a number [1,2,3 - depending on the number of sites that you connect to]
Inside each of the site folders there will be a groups folder and user folder and a file named connection_key.stc.
I moved all of my site folders to another folder I created off the root folder [C:/contribute database backup].
That has the same effect as deleting the folders, but gives you the option to restore them if you need too.
Then I open the Contribute Client and it allowed me access and I deleted the existing folders and drafts.
Then I went to the site that I wanted to connect to and recreated the connection using the prompts. I had to recreate all of the users and assign their roles for the each site.
I did have a problem recreating one of my sites because it gave me the message that there were "drafts that needed to be deleted or exported", but it wouldn't let me do either of those things. I did a seach of my computer for the word "draft" and it found two files buried in some hidden file. I deleted those files and then I was able to recreate that web site connection.
I think the connection_key.stc file is the important file that needs to be removed as it contains an encrypted string of data.
In fact I also copied the connection_key.stc from one site folder to another and then I was able to get into the site, delete its connection (it was connecting to the wrong site of course) and then recreate the connection.
I hope this helps.
Jim -
ODBC (RDO) Connection Information : DataBase Server ID Greyed out
Post Author: Eany
CA Forum: Data Connectivity and SQL
When I select the refresh option (Crystal XI) for a report which previously worked fine, I get sent to the ODBC (RDO) connection Information screen.
The first box for Server ID is greyed out.
When I go to enter the password, I get
Login Failed
HY000 General Error : Invalid file dsn Database Vendor Error 556.
But If I then create a new report, selecting the same dsn as was used for the report above, there is no problem.Hi Thib,
It won't work, WEB servers do not allow you to "Browse" their folder structures directly. You could how ever create a WEB Service to do this, it does the querying for you and then passes the data back. You'll have to search the WEB for more info on how to create a WEB Service and then check with your security guys if this is something you want to do.
Bottom line is ODBC or native or OLE DB is not going to work. And if you do open it up so you could it would be a major security hole for anyone to get to.
Other options are to create a VPN server so you can remotely connect to the server and get direct access to the table.
There are other options also, what you want to do is not doable.
You did not say why you want to do this? Add more info and someone may have a suggestion for you.
Major DB's like Oracle, MS SQL Server and others allow this to work through their clients so you may want to look at that option also.
Thank you
Don -
How to Configure Remote Connections To SQL Server 2008 R2 Express
Post written June 10, 2010 and pertains to:
SQL Server 2008 R2 Express on both my server and local machines: SQLX_SRV,
SQLX_LOC
SQL Server 2008 R2 Management Studio on both my server and local machines:
MS_SRV, MS_LOC
Windows Server 2008 R2 Enterprise installed on a Hyper-V VPS: WS
SQL Server Configuration Manager on both my server and local machines:
CMGR_SRV, CMGR_LOC
Server Manager: SMGR
I am connecting to my hosting server via Remote Desktop Connection: RDC
I installed SQLX_SRV and MS_SRV on my hosting server and SQLX_LOC and MS_LOC on my local development machine. I am able to use MS_LOC to connect to SQLX_LOC and to use MS_SRV to connect to SQLX_SRV. However I am not able to use MS_LOC to connect
with SQLX_SRV. Here's what I have done so far:
SMGR -> Configuration -> Windows Firewall to turn off the Windows Firewall for Domain, Private and Public profiles. Obviously I'll change this later, but until I can connect I want to remove as many variables as possible.
CMGR_SRV -> SQL Server Services to confirm that both SQL Server (SQLEXPRESS) and SQL Server Browser services were running.
CMGR_SRV -> SQL Server Network Configuration -> Protocols for SQLEXPRESS to ENABLE the Shared Memory, Named Pipes, and TCP/IP protocols and DISABLE the deprecated VIA protocol.
CMGR_SRV -> SQL Server Network Configuration -> Protocols for SQLEXPRESS -> double click TCP/IP to open the TCP/IP properties dialogue. On the Protocol tab Enabled: Yes, Keep Alive: 30000, changed Listen All to No. I've tried it both
ways, but I've got six IP addresses on my server and I wanted to configure SQLEXPRESS to listen to only the first and primary IP. On the IP Addresses tab went to IPALL and cleared the TCP Dynamic Ports field and entered 1433 in the TCP Port field.
For my first and primary IP Address I made sure that Enabled was Yes, I cleared the TCP Dynamic Ports field, and entered 1433 in the TCP Port field. For all other IP Addresses Enabled was set to No and I cleared both the TCP Dynamic Ports and TCP Port
fields.
CMGR_SRV -> SQL Server Services -> SQL Server (SQLEXPRESS) right click and Restart. This of course stopped and restarted my instance of SQLX_SRV enabling the TCP/IP configuration in the previous step to take effect.
On my server, SQLX_SRV is the only instance of SQL Server running and so it's easy to hard wire it to the default port 1433.
The instance name for both SQLX_SRV and SQLX_LOC is the default "SQLEXPRESS". My server machine name is "SERVER1" on the EnglishBrains.com domain. So the proper local name (local within the context of my remote server as connected via RDC) for
my instance of SQLX_SRV would be:
SERVER1\SQLEXPRESS
Note the use of a backslash NOT a forward slash.
Of course to connect remotely from my development machine, which is not on the same domain as my hosting server, I would need to specify the domain as well, so the SQL Server name becomes:
SERVER1.EnglishBrains.com\SQLEXPRESS
I must also use SQL Server Authentication. Before I can use such a remote connection, however, there are still several configuration steps required. So on my server (connected via RDC) I used MS_SRV to connect to SQLX_SRV using SERVER1\SQLEXPRESS
for the server name and Windows Authentication. Once connected I performed the following steps:
MS_SRV -> right click the connected parent SERVER1\SQLEXPRESS instance node at the top -> Properties -> Security -> Server authentication: select "SQL Server and Windows Authentication mode". This will enable connections using either type
of authentication.
Next, leaving the Server Properties dialogue open, Connections -> check "Allow remote connections to this server" box.
Click OK to save these changes and close the Server Properties dialogue.
MS_SRV -> Security -> right click Logins and select "New Login...", the Login - New dialogue opens.
On the General page Enter a name for your new login
Select SQL Server Authorization
Enter and confirm a password
Uncheck Enforce password expiration
Select the default Database and Language
On the ServerRoles page Public will be checked, also check SysAdmin. This is probably not a good idea and I'll uncheck this as soon as I can connect to the SQLX_SRV.
On the User Mapping page select the databases you want your new Login to access and enter the Default Schema of "dbo".
At the bottom of the User Mapping page you'll see the Database Roles table. Public will be selected by default. Also select db_Owner. Again this is probably not a good idea, and I'll refine this once I can connect.
On the Status page confirm that "Grant" is checked under "Permission to connect to database engine" and "Enable" is checked under "Login".
Click OK to save all changes and close the Login - New dialogue.
With these steps completed you should now be able to use MS_SRV to connect to SQLX_SRV using SQL Server Authentication by supplying the name and password for your new Login. I tried this and it worked fine. Next I tried to use this same login
remotely, that is I went to my local development machine and used MS_LOC to try and connect to SQLX_SRV by using
SERVER1.EnglishBrains.com\SQLEXPRESS
and opting for SQL Server Authentication and supplying the name and password of my new login.
THIS DID NOT WORK?? Instead I get the following error message:
Cannot connect to SERVER1.EnglishBrains.com\SQLEXPRESS.
A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider:
SQL Network Interfaces, error: 26 - Error Locating Server/Instance Specified) (Microsoft SQL Server, Error: -1)
For help, click:
http://www.microsoft.com/products/ee/transform.aspx?ProdName=Microsoft+SQL+Server&EvtSrc=MSSQLServer&EvtID=-1
If you follow the suggested help link, you are told:
The SQL Server client cannot connect to the server. This error could be caused by one of the following reasons:
A specified SQL Server instance name is not valid.
The TCP, or named pipes protocols are not enabled.
The firewall on the server has refused the connection.
The SQL Server Browser service (sqlbrowser) is not started.
WRONG on all 4 counts! The instance name IS valid. Both TCP/IP and Named Pipes protocols are enabled. The firewall has been shut down, so it is not relevant. Finally the SQL Server Browser IS started.
The next thing I tried was to circumvent discovery by the SQL Browser service by using the following syntax to specify the IP address and port directly when specifying the SQL Server name.
tcp:68.71.134.186,1433
Using this in the Server Name field I was able to use MS_SRV to successfully connect to SQLX_SRV (using SQL Server Authentication of course) with or without the SQL Browser service running.
However when I tried to connect from MS_LOC to SQLX_SRV using this same login (WITH SQL Browser service running just for good measure) it does not work?? I get the following error message:
Cannot connect to tcp:68.71.134.186,1433.
A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider:
TCP Provider, error: 0 - A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.) (Microsoft SQL Server, Error: 10060)
For help, click:
http://go.microsoft.com/fwlink?ProdName=Microsoft+SQL+Server&EvtSrc=MSSQLServer&EvtID=10060&LinkId=20476
If you follow the help link you are told:
"The SQL Server client cannot connect to the server. This error could occur because either the firewall on the server has refused the connection or the server is not configured to accept remote connections."
However, the firewall has been shut down and the server HAS been configured to accept remote connections!
I confirmed that i could indeed Ping to 68.71.134.186 and running NetStat -a |find /i "listening" on the server shows that the server is indeed listening at 68.71.134.186 Port 1433 -- which is why I was able to connect to SQLX_SRV using MS_SRV with
tcp:68.71.134.186,1433 .
IN SUMMARY: Even though I can connect to my SQLEXPRESS instance multiple ways from the server itself, I cannot connect remotely from my development machine!
If anyone can help me figure out why I would be very, very grateful!My two cents to help you out on c# code example to configure the remote sql server express.
Hope it helps. It works, but you have to be extra carefull to read it all and setup the server configuration and netsh commands; also the port fowarding on the router.
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Data.SqlClient;
namespace sqlremoteconnection
class Program
static void Main(string[] args)
// this is the local sql server connection
// 192.168.1.101\SQLEXPRESS
// now, the configuration for remote access:
// activate SQL SERVER BROWSER - set it to start "automatic"; then START UP
// SQL Server Configuration Manager
// --> SQL SERVER BROWSER -> properties -> Service -> Start Mode -> automatic -> apply
// --> Log On -> Start -> Ok
// netsh firewall set portopening protocol = TCP port = 1433 name = SQLPort mode = ENABLE scope = all profile = CURRENT
// netsh firewall set portopening protocol = UDP port = 1434 name = SQLPort mode = ENABLE scope = all profile = CURRENT
// netsh advfirewall firewall add rule name = SQLPort dir = in protocol = tcp action = allow localport = 1433 remoteip = any profile = PUBLIC
// netsh advfirewall firewall add rule name = SQLPort dir = in protocol = udp action = allow localport = 1434 remoteip = any profile = PUBLIC
// VERY IMPORTANT FOR REMOTE ACCESS: you have to add the rules on port fowarding
// on the router!!!
// TCP: 1433
// UDP: 1434
// or just a personal port like TCP 31433/UDP 31434
// read carefully the netsh commands above
// server name: 123.132.24.177\SQLEXPRESS
// server name: anyurl.myftp.org\SQLEXPRESS,1433 <<-- regular port
// server name: anyurl.myftp.org\SQLEXPRESS
// server name: anyurl.myftp.org\SQLEXPRESS,31433 <<-- WOW different PORT here!!!
SqlConnection myConnection = new SqlConnection(
"user id=sa;" +
"password=password_goes_here!;" +
"server=anyurl.myftp.org\\SQLEXPRESS,31433;" +
//"Trusted_Connection=no;" +
"database=database_name_here; " +
"connection timeout=30");
try
myConnection.Open();
catch (Exception e)
Console.WriteLine(e.ToString());
try
SqlDataReader myReader = null;
SqlCommand myCommand = new SqlCommand("select * from mytable", myConnection);
myReader = myCommand.ExecuteReader();
while (myReader.Read())
Console.WriteLine(myReader["tab01_name"].ToString());
Console.WriteLine(myReader["tab01_age"].ToString());
catch (Exception e)
Console.WriteLine(e.ToString());
try
myConnection.Close();
catch (Exception e)
Console.WriteLine(e.ToString());
Adelino Araujo -
Network-related or Instance-specfic error when attempting remote connection from SSMS
Hello,
I have installed SQL Server express on a Win7 desktop and want to connect to it via SSMS on a laptop. I have set up a SQL login on the desktop so I can login, but when I try to connect to the instance from the laptop via SSMS I get the error 26 with saying
there is a network related or instance specific issue and that there is an error locating the Server/Instance specified.
I am trying to connect to a named instance on the SQL Server on the win desktop. Remote connections are enabled and TCP 1433 and UPD 1434 ports are open in Windows Firewall. Antything else I should watch for?
ThanksHi MrDAndersen,
According to your description, you come across the errors of pre-login handshake and wait operation timing out. Please help to post the full error log for further analysis.
Based on my research, this issue could occur when .NET Framework 4.5 and non-IFS BSP/LSP are installed on the machine, and non-IFS BSP/LSP interferes with the call to Winsock.
To work around the issue, you could use one of the two methods below.
1. Determine whether a non-IFS BSP or LSP is installed. You could use the "netsh WinSock Show Catalog" command and examine every Winsock Catalog Provider Entry item that is returned. If the 0x20000 bit is clear (not set), it is a non-IFS BSP or
LSP and remove the installed non-IFS Winsock LSPs. For more information about the process, please refer to the article:
http://support.microsoft.com/kb/2568167
2. Download and apply .NET Framework 4.5.2:
http://www.microsoft.com/en-us/download/details.aspx?id=42643
There are two connect items for your reference.
https://connect.microsoft.com/VisualStudio/feedback/details/745004/
https://connect.microsoft.com/VisualStudio/feedback/details/729323
Best regards,
Michelle Li -
Remote Connecting to a PC from my Mac
Hi, I am wondering how I can essentially "screen share" with my friend using a pc. By this I mean they share their screen. I've been looking on the internet for answers and I have found multiple hits for connecting from PC to Mac but not the other way around. In addition, from what I have read, nothing was vert step-by-step. I heard about TightVNC so I told my friend to download it and that I would be able to remote connect to them using what I have in Leopard. However, it's at this point that I am completely clueless on how to actually establish that connection.
I would like to know what the PC user needs to do and secondly what I would need to know/type in in order to connect to their pc and control their screen.
ThanksWhen it says "computer:________" Connect. I put in the PC's ip address (I'm pretty sure it's the right one, I will ask again if not).
Do they have a home router between their ISP connection and their PC? If so, their router needs to forward port 3389 from the Internet to their PC. And the IP address you need is the IP address assigned to the router by the ISP. They could access a web site such as <http://whatismyip.com> to find out their public IP address.
1. Who's user name and Password? The PC User's or My account name and my password? If theirs, they don't have a name or password, they turn on the computer and the desktop is there, without having to log in. Do they need to have one (an account or w/e).
The PC's Username and Password. And yes they do have a username and password. They may not remember what they setup, since they have it set to auto login. I do NOT know how to find out this information, as I am a Mac and/or Unix kind of guy
2. Domain. This is optional is it not? Can the IP go in here?
This is the Windows account domain, and nothing to do with IP addresses nor DNS. Mostly they have WORKGROUP or MSHOME as their domain. If it is optional, then ignore it.
Here are some alternative approaches. Sign-up for a free LogMeIn.com account <http://logmein.com>. Have them install the LogMeIn.com server and associate it with the LogMeIn.com account you created. Now you can use your web browser (Safari) to login to the LogMeIn.com account, and from there connect to their PC's LogMeIn.com server.
The current version of Skype allows screen sharing, however, I think it is a view ONLY connection. That is to say, you can watch their screen, but you can not control their keyboard, nor their mouse. <http://skype.com>
Another choice might be a purchased copy of GoToMyPC (there are both Mac and PC versions).
There is also TimBukTu from <http://www.netopia.com> which is also cross platform.
VNC has also been mentioned. Again, VNC needs router port forwarding, only VNC needs port 5900 forwarded. TightVNC, UltraVNC, RealVNC are possible Window's VNC servers. JollysFastVNC (highly recommended), Chicken of the VNC, or Mac OS X built-in Screen Sharing (Finder -> Go -> Connect to Server -> vnc://ip.addr.of.pc). I only recommend the built-in Mac OS X Screen Shring if the other system is on the same high speed network, or if connecting to another Mac OS X system. -
ERROR 14614 on Front End when testing with Remote Connectivity Analyzer
Hello forum
Does the Lync Remote Connectivity Analyzer not support 128 encryption?
Reason im asking is the following:
When I test my Lync edge server. I get the following error on the RCA result page: RegisterException.
After this error on the RCA, the event 14614 is logged on my Standard Edition Front end server.
INFO:
User authentication with NTLM protocol failed with error SEC_E_UNSUPPORTED_FUNCTION. This indicates a potential mismatch between security policy settings on the client and server computers.
Cause: This error can occur if the settings in "Network security: Minimum session security for NTLM SSP based (including secure RPC) clients" policy on the client computer are not the same as the settings in the "Network security: Minimum
session security for NTLM SSP based (including secure RPC) servers" policy on this server. By default, the "Require 128-bit encryption" setting is disabled for computers running Windows Server 2008, Windows Vista, Windows Server 2003,
Windows 2000 Server, or Windows XP. For computers running Windows 7 or Windows Server 2008 R2, this setting enabled by default.
Resolution:
Ensure that the "Network security: Minimum session security for NTLM SSP based (including secure RPC) clients" policy settings on the computers from which users log on are the same as "Network security: Minimum session security for NTLM SSP based
(including secure RPC) servers" policy settings on this server.
All of our Lync servers are running on Windows 2012 R2. So why this error from the RCA?Please check your settings on the client and on the server.
I know, this is a old blog info, but it discribed the problem.
http://blogs.technet.com/b/rogulati/archive/2011/04/30/lync-2010-ntlm-sec-policy-mismatch-error-cannot-sign-from-xp-clients.aspx
http://blog.ucomsgeek.com/2011/01/lync-2010-ntlm-client-authentication.html
regards Holger Technical Specialist UC
Thanks for the answer, but in this case the "Client" is the Remote Connectivity Analyzer. So my question was, why is it not working with that? Does the RCA not support 128 bit? -
Solution manager Remote Connection issues
Hi
I'm currently in the process of setting up Solution Manager 7.1 on windows Server 2008r2 using central system.
I did the prerequisite check & the Solman installation and i'm actuallly working on the post-installation steps.
I'm experiencing difficulty with the step : "Configure Remote Connection to SAP".
I followed the informations provided on : http://service.sap.com/remoteconnection
In the technical prerequesite you have to set up a connection to sap support.
So i have to choose a connection type : I selected Internet connection so my first question is : do we need "VPN with SNC" or "VPN OR SNC" ?
I personnaly understood VPN or SNC.
So from here i decided to use SNC.
The first step was to set up & configure the SAProuter. I decided to do it on an another computer on the same domain ( not on the same computer where Solution Manager is installed ) but i'm not sure it is necesary
I assume I can install Saprouter on the same location as the Solution manager? do you recommend it ?
The Basic Functions testing with niping is working.
The next step is : "establish Internet Connections"
So now i can choose between SNC or VPN : my goal is to establish the connection as fast as possible.
I actually don't have a switch available ( i can get one if necesary but time is running ... ) so i'm opting for the SNC solution.
I tryed to get the certificate for the saprouter but i don't have a register SAProuter, but when i opened a customer messager for component XX-SER-NET, SAP answered about the impossibility to access SAP service Backbone with an SNC , saying that i will need to register a VPN site to site connection to SAP => i don't get it .... Can someone explain it to me ?
So please can one of you guru's tell me how to set this remote connection :
-which materials ( server / switch / firewalls ) ?
-where to get the right documentation ?
-What about DMZ ?
-I have a single IP Address is that enough ? ( setting up nat for port 3299 )
- do i have to contact a service provider ?
My idea was initially to set up the SAProuter on the same computer as the SOLMAN setup & use SNC communication to communicate with SAP but it doesn't seems that easy. Do i need separate installation for Saprouter <=> Solution Manager. ?
What's the minimal infrastructure to establish this connection ?
In addition to that, after configuring the SAProuter, i had trouble with the SAPMMC : on my system , on the instance 0 , the process disp+work.EXE won't run ( yellow light )and i can't find where i made a mistake if you have suggestions ...
Really need your help, i'm on a short deadline ... Any help, even incomplete, would be appreciated.
Thanks a lot.Thx for the answer.
I actually managed to register my saprouter with SAP and was granted with CN/OU & connection informations.
I followed this guide : http://service.sap.com/saprouter-sncdoc with the addition of this guide : http://wiki.sdn.sap.com/wiki/display/Basis/SAProuterviaSNC.
My first issue : I'm running with a Windows server 2008 r2 enterprise edition 64 bits with a processor Intel Xeon 2.4ghz ( dualcore). so i decided to use the crypto folder "nt-x86_64"
For the environment variable i set as System variables SECUDIR = C:\usr\sap\saprouter and SNC_LIB = C:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll
The generation/install of the certificate is alright ( sapgenpse get_my_name -v -n Issuer is OK )
using the command :saprouter -r -K "p:CN=mycn, OU=myOUnbr, OU=SAProuter, O=SAP, C=DE" i have
I get the following message : trc file dev_rout
no ligging active
Its strange cause it looks like its running but when i check the services running on windows saprouter isn't started .... How to know if SAProuter is running right ?
If i folow the SAP procedure : Step 3 : test of the ip connection by the customer : SAP Remote Services : technical preparation ( see SAP Note 812386 ) : it's ask in the note to implement note 766505 via SNOTE : i get the following error msg : Error in remote connection to destination SAPOSS : Error when opening an RFC connection ( LB: Hostname or service of the message server unknown#DEST = SA
What's wrong ?
If i use T oss1 in parameter => technical setting => i set my saprouter info in SAProuter 1 ( at customer site ) with instance no. 99 and if SAProuter and SAPNet Message Server at SAP i put the following : Name : sapserv2 / IP Address 194.39.131.34 intance no. 99 and message server name oss001/ DB Name 001/ Instance no.01.
When trying to "Logon to SAPNet" i have an error Unable to connect to SAPNet message server ( default connection will be used ... )
and followed by the error screen : "partner '80.15.173.168:sapdp99' not reached WSAECONNREFUSED : Connection refused. do you want to see the detailed error description ? "
Details : module nixxi.cpp / line 3286 / Method : NipConnect2:80.15.173.168:3299 / Return code : -10 / System call : connect / Error No : 10061 / Error Text WSAECONNREFUSED: Connection refused / Counter : 10
Any idea ?
when doing niping.exe -c -H /H/mylocalSR/H/194.39.131.34/H/194/39.131.34 i obtain :
Wed Dec 07 21:20:09 2011
connect to server o.k
Wed Dec 07 21:20:09 2011
send and receive 10 messages (len 1000)
times -
avg 122.148 ms
max 193.731 ms
min 81.564 ms
tr 15.990 kB/s
excluding max and min :
av2 118.273 ms
tr2 16.514 kB/s
Is it the expected output ?
I've maintained system data in service.sap.com/system-data ( selecting the sap router ) then i tryed to use the SAP service connection, downloaded the .exe but i can't find the stfk.oez. I realized that in my maintain connection screen i have no space for entering any routestring. Seems wrong ?
Do i have to use the SAO?
i've made nat redirection from my router as this : from my public ip to my lan ip ( 192.168.x.x) what should i enter in the routestring : /H/public or lan or hostname ?/S/3299 ?
Hoping you can help me ! ( the goal of all this is to set up RFC connection for postinst step of Solution manager ).
Edited by: BLANCHARD Guillaume on Dec 7, 2011 10:47 PM -
SQL Server Express 2008 no longer accepting remote connections
Last night our SQL Server Express 2008 (running on Windows 2003 server) stopped accepting remote connections.
1. We restarted the SQL Server -- no resolution.
2. We rebooted the host Windows 2003 server - no resolution.
3. telnet localhost 1433: says Could not open connection to the host on port 1433... connection failed.
4. netstat -an indicates that the server is not listening on port 1433
5. SQL Server Network Configuration -> Protocols for SQLEXPRESS2008A -> (properties) -> TCP-IP (enabled), Listen All (yes)
6. SQL Native Client 10.0 Configuration -> Client Protocols -> (properties) TCP-IP (enabled), Default port (1433)
Fragment from the server error log:
2014-03-26 08:50:41.09 Server A self-generated certificate was successfully loaded for encryption.
2014-03-26 08:50:41.11 Server Server is listening on [ 'any' <ipv4> 1026].
2014-03-26 08:50:41.11 Server Server local connection provider is ready to accept connection on [ \\.\pipe\SQLLocal\SQLEXPRESS2008A ].
2014-03-26 08:50:41.11 Server Server named pipe provider is ready to accept connection on [ \\.\pipe\MSSQL$SQLEXPRESS2008A\sql\query ].
2014-03-26 08:50:41.11 Server Dedicated administrator connection support was not started because it is disabled on this edition of SQL Server. If you want to use a dedicated administrator connection, restart SQL Server using the
trace flag 7806. This is an informational message only. No user action is required.
2014-03-26 08:50:41.11 Server The SQL Server Network Interface library could not register the Service Principal Name (SPN) for the SQL Server service. Error: 0x54b, state: 3. Failure to register an SPN may cause integrated authentication
to fall back to NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies.
2014-03-26 08:50:41.11 Server SQL Server is now ready for client connections. This is an informational message; no user action is required.
2014-03-26 08:50:41.29 spid10s Clearing tempdb database.
2014-03-26 08:50:41.89 spid10s Starting up database 'tempdb'.
2014-03-26 08:50:42.09 spid13s The Service Broker protocol transport is disabled or not configured.
2014-03-26 08:50:42.09 spid13s The Database Mirroring protocol transport is disabled or not configured.
2014-03-26 08:50:42.14 spid13s Service Broker manager has started.
2014-03-26 08:50:42.14 spid7s Recovery is complete. This is an informational message only. No user action is required.
2014-03-26 08:50:53.48 spid51 Attempting to load library 'xpstar.dll' into memory. This is an informational message only. No user action is required.
2014-03-26 08:50:53.48 spid51 Using 'xpstar.dll' version '2007.100.1600' to execute extended stored procedure 'xp_enumerrorlogs'. This is an informational message only; no user action is required.
2014-03-26 08:51:35.68 spid54 Starting up database 'Web TimeSheet2'.
2014-03-26 08:51:38.47 spid54 Recovery is writing a checkpoint in database 'Web TimeSheet2' (6). This is an informational message only. No user action is required.
Note: the lines referring to xpstar.dll is new after this porblem. Previous logs do not have this,Any help will be appreciated.Hi,
>>Server is listening on [ 'any' <ipv4> 1026].
Your sql server is not listening on default port 1433 but on 1026.When you connect to instance like hostname\instancename you should specify post no also.
like hostname\instancename ,1026
Can you try this.Makes sure TCP/IP and named pipes protocol is enabled
Please mark this reply as the answer or vote as helpful, as appropriate, to make it useful for other readers
Maybe you are looking for
-
Hello I'm a Dreamweaver newbie and building our first site. I'm having 2 problems, only with Internet Explorer. - The first is making the background central in IE 7 or 8 (but I saw a recent thread that pretty much suggested it's impossible). - the
-
With the new update of iTunes I can't sync the iPhone, it doesn't appear anywhere, how can I solve this?
-
Creating variables using set()
Does the set() function for dynamically creating variables have a substitute in AS3? This is a generic example written in AS2:
-
802.1x with ACS and Windows AD
Hi Im trying to setup 802.1x with ACS 5.2 but am struggling as its very differnet to ACS 4.2. I have setup the ACS to be the domain and think i have setup up the External Idnetity Store, however when i try to authenticate a pc using authentication Me
-
Polling the master detail table and to update the LAST_UPDATED with SYSDATE
Hi The requirement is polling the master detail table where read_flag is null and has to update the LAST_UPDATED with SYSDATE in both tables. Refered the MasterDetail and PollingPureSQLSysdateLogicalDelete samples of SOASuite. Used the delete polling