Michael Shimmins's questions

We have run a Cisco WiFi network that uses 802.1x to authentication logins against Active Directory.

Employees login using their UPN prefix, and all works well.

For various reasons we'd like users to be able to log in with their email address (stored in the mail attribute) instead. This doesn't map to the full UPN (the suffix is different, and our users are from a number of different email domains).

Rather than logging in as they currently do using firstname.lastname (which matches the UPN of [email protected] we want them to use [email protected] or whatever their email address actually is.

We use Microsoft NPS for this currently, and have our Cisco WLC configured to use it as the RADIUS authentication sever.

Is there a way to change NPS to authentication users based on a different AD/LDAP attribute rather than only sAMAccountName/UPN?

We've got a Cisco ASA 5510 that sits on our edge and acts as the PPPoE endpoint for a fibre connection.

The fibre connection came with a static IP, which is assigned via PPPoE, and gets picked up by the ASA. All works fine, NAT works, outbound connections from inside route correctly out over fibre etc.

We subsequently ordered a second block of IPs (/28) from the same ISP, who have done their bit. Unfortunately I can't get any traffic flowing over the newly assigned IPs.

From everything I've read the ASA shouldn't need anything special configured in order to be able to use these new IPs, if I create NAT/ACL rules I should be able to accept incoming connections on the new range, however it appears they aren't hitting the ASA at all.

Packet filter shows the NAT/ACL is setup correctly.

I've read that the second subnet should be routed at their end so that it goes via the existing /30, however the ISP is unable to set this up. They've advised the new block's gateway is the first usable address in the range.

I created a static route on the ASA to route this network via the first usable, hoping that was the issue, however it didn't solve the issue.

It sounds similar to this question - Cisco ASA: How to route PPPoE-assigned subnet? - however ours is a second subnet, not a single subnet.

The ISP has proposed ditching the existing /30 entirely and using only the /28 (which is fine if that solves the problem, we don't use the existing /30 for any incoming connections yet).

Essentially - can the ASA using PPPoE manage multiple subnets on the one interface and am I just missing something incredibly obvious, or is this something that isn't supported on the ASA and I need a router in front of it?

We have active directory syncronization setup between our on-premises AD server and Microsoft hosted Exchange (business productivity online services).

I've started getting a daily error report, which details an error for a specific AD user, however it references it by GUID. I can't find any info on how to translate that object guid into something meaningful so I can find and fix the problem.

The error is reported as:

Error 005: Unable to set the alias for this object in Microsoft Online Services because either the primary SMTP address, the e-mail nickname, or the SAM account name in the local Active Directory contains an invalid character.

in reference to the Object GUID:

CN={8443cbb4-5199-49f0-9529-ce965430dca6}

How can I translate that object guid into a friendly object name?

After some help diagnosing why Exchange 2010 Enterprise stops responding to SMTP events.

I can't find a pattern to it. It doesn't appear to be an actual timeout, as the server responds immediately with the error. To reproduce it I telnet into the server on port 25 and issue a EHLO. The server immediately replies with the 421:

421 4.4.1 Connection timed out

Once this starts happening I've found restarting the exchange box is the only reliable way to get it flowing again. Sometimes restarting the Transport service or the mailbox attendant service seems to fix it, but this could be coincidental as it often has no effect.

I'm trying to install the SP1 update to an RTM Exchange 2010 box. The Client Access Role Prerequisites are failing, complaining that KB979744 isn't installed.

I downloaded the update and tried to install it, however it will not install complaining that 'The update does not apply to your system'.

A discussion on TechNet indicates that I need .NET 2.0 or 3.5 installed (both are). Aside from that I've been unable to find anything helpful.

Hopefully someone has encountered this and knows how to get around it, don't really want to use up a support call on this.

Edit:

This is on a 64-bit edition of Windows Server 2008 Datacenter (without Hyper-V) SP2.