Weird 802.1x EAP-TLS Behavior with Windows XP SP3

I'm currently busy with several 802.1x implementations in corporate networks, and in one of those environment I get the strangest behavior in regards to the authentication process.

In this particular case I use a Microsoft 2008 Active Directory. Mandatory for distributing the wired network adapter settings in regards to 802.1x. The clients are a mix of Windows XP (SP1 and SP3) clients and some newer and/or exotic operating systems. The authentication mechanism of choice is EAP-TLS with dynamic VLAN assignment. The RADIUS server used is the Cisco Secure ACS v5.x appliance.

During the authentication process of the XP SP3 PC's I saw that the first authentication attempt was made with the PEAP mechanism. Since PEAP isn't allowed, the authentication mechanism failed. About a minute and twenty seconds later the PC started another dot1x authentication sequence. This time using EAP-TLS, and the PC got access to the network.

Click to read more ...

802.1x: Machine Access Restriction 'Vulnerability'

Today we ran into a feature of the Machine Authentication Restrictions (MAR) option in the Cisco Secure ACS Radius server. It seems that when you're using the ACS for 802.1x authentication, you have the option of demanding that the authenticating users can only be authenticated when the computer is already authenticated. This way, you make sure that no user can access the network without a legitimate PC.

Click to read more ...

Geotagging Nikon P7000 RAW files (NRW)

PhotoLinkerI tend to geotag most of my photos. This way I have location information with the photo for future reference. It's also a neat feature that you might exploit when creating photo albums with e.g. iPhoto. The GPS coordinates in the images creates the option to create maps in iPhoto albums.

I use geotagging in two different ways. I use the jf Geocoding plugin in Lightroom and the PhotoLinker application. Both have their (dis)advantages. Something I won't go into in this post.

Click to read more ...

Nikon P7000 Review

Nikon Coolpix P7000Some of the readers may know that I used the Panasonic Lumix LX3 as a backup/compact camera for the times a dSLR isn't welcome (or practical). One of the places where a dSLR isn't welcome is your average (pop)concert. The Lumix LX3 was (and still is) an excellent compact camera with astonishing low-light capabilities. The only problem I had with the camera was that the zoom function only went to 60mm (35mm equivalent), and 60mm is a bit short when you're not standing directly in front of the podium....

Click to read more ...

Triggerfinger in Paradiso

Last night we went to a concert/CD-release of the Belgium rockband Triggerfinger. This was also the first time I brought my new Nikon P7000. The following photos and video were shot with this new Nikon Coolpix Perfomance series compact camera.

The concert was great. Great enough to get their latest CD in the lobby. I hope we're gonna hear more of them.

Click to read more ...

My Blackberry is not working!!!

Just watch...

Don't you just love the British for their sense of humor :-)

OSX CardDAV Server

After the challenges with the iCalDAV server in OSX, I gave up on getting the Addressbook server up-and-running. Somehow, the clients couldn't wouldn't connect. No matter what configuration parameters I tried.

This week I tried to get it up-and-running again. Mainly because I can't concentrate for longer than two hours for my Cisco exams next week. Sometimes you need to clear your head.

For some reason I found the solution within the hour. No idea what the original problem was exactly.

Click to read more ...

Dell U2711 27" Monitor Review

Dell U2711 MonitorThanks to some fortunate circumstances I've been able to get a new 27 inch monitor; The Dell U2711 Ultrasharp PremiumColor.

I was in need of a new monitor, since my old 24" Dell 2407WFP has some problems generating proper colors. Something which is quite important when fooling around with photographs on a computer. Another reason is that my the screen wouldn't work 'properly' with my new 27" iMac.

The 27"-er has a whopping resolution of 2560 x 1440 (WQHD), which is 'slightly more' than your average monitor. This monitor has an IPS panel, which is much better in rendering true colors than the old TN display.

The desktop real-estate is enormous (the same as the 27" iMac). Only problem so far is that my mobile devices aren't capable of using the full capacity of this display. Both my MacBook and Windows 7 Dell E6500 (work laptop) only go as high as 1920 x 1200. So I either have have some black borders, or I have to settle for a stretched screen. In both cases; the image is still extremely good. The display will be used as a second display on my 27" iMac.

Click to read more ...

iMac 1TB Disk Went Missing in Action

Updated on Wednesday, December 15, 2010 at 19:54 by Willem

Updated on Monday, December 20, 2010 at 12:44 by Willem

Updated on Tuesday, December 21, 2010 at 14:35 by Willem

Updated on Saturday, December 25, 2010 at 11:41 by Willem

It's been three weeks exactly (well, almost), and my new iMac i7 27" went to the repair shop.. (*sniff*).

The iMac booted normally this morning, but after a couple of minutes, the fans started kicking in. A new sensation for me. I have never heard a fan in this, or my other (i)Macs. At first I thought that my external drive (Drobo) started making the noise, but the Drobo was silent.

Turned out the fans in my iMac started blowing (hard), and the airflow was relatively warm. Too warm for a Mac which has been switched on for about 10 minutes with no real CPU intensive tasks running.

First I checked the Activity Monitor and 'Top' in the Terminal app to see if there was some program that consumed too many CPU cycles. Nothing there. On average, the CPU was 3% busy.
Next thing to do was resetting the PRAM/NVRAM by holding the Option-Command-R-P combination during a power-on of the iMac. This also made no difference (booting went a bit faster though).

Click to read more ...

Microsoft Office 2008:Mac - Office did not install correctly

Come on.... it isn't even Monday. It's Friday for crying out loud.

What happened you ask? Well.....

I got an e-mail with a XLS file attached (I know.. shit happens). So I tried to open it, but I got a reminder that I hadn't (re)installed Office 2008 on my new iMac. But not to worry. I have the official Microsoft Office 2008 DMG (with matching serial number) on my Drobo, so the installation was done in a matter of minutes.

This is when it happened. Starting office resulted in this error: "Office did not install correctly". It even had a link to a Microsoft article explaining I needed an update. But the update wouldn't install since it was for OSX 10.4 (or something). Installing the latest update didn't solve it either.

Well, remove Office and reinstall it then... That didn't work either. Still the same error.

Searching the Interwebs resulted in a suggestion to remove everything Microsoft from the Mac.... And so I did. Especially the locations like:

/Library/Preferences/
~/Library/Preferences/

should be free of everything Microsoft. After trashing the Trash I reinstalled Office 2008. This time I was asked to enter my name and serial number. Something that didn't happen the first times. Then it occurred to me; I had copied my preferences (and other settings) when I migrated from my old to my new iMac. I guess that Microsoft doesn't support that.

It would have been nice if they had an option in the Removal Tool (which they generously supply) to remove EVERYTHING. I think that they didn't forget it. I think that this is by design. Just to screw with us Mac user.