henriksen's questions

We've got a FreeRADIUS 2 deamon installed on a CentOS 5.7 server.

We'd like to use a pre-written Python module to do authorization but there's a problem: The Python module we've got requires Python 2.6 or more but the Python that comes installed with CentOS is Python 2.4.

Now, the server admin have installed Python 2.6 in a separate folder /usr/lib/Python2.6 so we can run Python 2.6 from there. However, /usr/bin/python is still Python 2.4. Apparently, replacing the default Python 2.4 will cause all kinds of problems.

Is there any way I can force FreeRADIUS to use /usr/lib/Python2.6 instead of the default 2.4 to locate and run modules?

I've written a custom password filter for Windows Domain Controllers (a passfilt.dll) and registered it according to the instructions (put it in the system32 folder and updated the registry key)

But there are no signs of the DLL even being called. None.

I've set up auditing of system events and I'm getting 4614 events ("A notification package has been loaded by the Security Account Manager.") for scecli and rassfm, both listed in "HKEY_LOCAL_MACHINE.SYSTEM.CurrentControlSet.Control.Lsa.Notification Packages". If I remove them from "Notification Packages", they're not read. As expected. But the DLL that I've put into "Notification Packages" is not loaded. Nor is the logged a failed audit. Or any other event. The DLL is not loaded since I can delete it without a lock.

The OS is Windows 2008 R2 x64 and I'm using an 64 bit version of my DLL.

Does anyone have an idea on how I should proceed to solve this problem? At least find an error message or something...

I was recently told that if your UAC level is anything less than the maximum (always notify) then malicious programs can programatically lower your UAC settings, thereby rendering UAC useless.

Now, I remember this being an issue in the Windows 7 beta, but that is was fixed in the RC:

With this feedback and a lot more we are going to deliver two changes to the Release Candidate that we’ll all see. First, the UAC control panel will run in a high integrity process, which requires elevation. That was already in the works before this discussion and doing this prevents all the mechanics around SendKeys and the like from working. Second, changing the level of the UAC will also prompt for confirmation. (source)

So, which one of us is outdated? Is it me that haven't caught the new rootkits available or is it the other guy that didn't pay attention to things being fixed in the RC?

Is there a working way to lower UAC levels without the UAC prompt?

I've installed TFS 2008 and along with that came WSS (Sharepoint) 3.0. The server is located in a DMZ and has a hostname of "SVTFS". When the clients access it from the outside they use the fully qualified name "tfs.example.com".

Now, http://tfs.example.com/ is for the front page of the WSS server and it redirects to http://SVTFS/default.aspx. The SVTFS name is of course not accessible from outside the DMZ.

If I type http://tfs.example.com/default.aspx it loads just fine.

It's the same problem with project sites: http://tfs.example.com/sites/MyProject/ redirects to http://svtfs/sites/MyProject/default.aspx giving the user a DNS error.

Also, reports in the project pages tries to find the reporting server on http://svtfs/.

Anyone know how I can make WSS redirect to and use the fully qualified name instead of the local hostname?