Category Archives: Operating Systems

Generating Events 8004 and 8005 in Windows Logs

On DC with IP address 192.168.0.123:

wevtutil sl Microsoft-Windows-NTLM/Operational /e:true
wevtutil qe Microsoft-Windows-NTLM/Operational /q:"*[System[(EventID=8004 or EventID=8005)]]" /f:text
net share
Share name   Resource                        Remark

-------------------------------------------------------------------------------
C$           C:\                             Default share
IPC$                                         Remote IPC
ADMIN$       C:\Windows                      Remote Admin
NETLOGON     C:\Windows\SYSVOL\sysvol\my.local\SCRIPTS
                                             Logon server share
SYSVOL       C:\Windows\SYSVOL\sysvol        Logon server share
The command completed successfully.
(more…)

Installing LDAPS certificate on Windows 10

I realized that my LDAPS certificate is not trusted with the following command in PowerShell:

certutil -verify ldap.crt
(more…)

Experimentations with LDAP/SASL on Ubuntu

SASL

I configured Kerberos on Ubuntu 24.04 WSL and was able to run the following command:

export KRB5_TRACE=/dev/stderr
ldapsearch -H ldap://myserver.my.local -Y GSSAPI

that produced the following output:

(more…)

Fixed ERR_PROXY_CONNECTION_FAILED in Google Chrome

By disabling this proxy:

(more…)

Increasing image size in WordPress

I updated my Ubuntu 24.04 and my WordPress stopped loading images of size 1.3MB and higher.

I fixed this by adding the following:

client_max_body_size 32M;

to Nginx configuration.

(more…)

Checking LDAPS logs on a domain controller

Directory Service logs

I set Verbose level:

(Get-ItemProperty "HKLM:\SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics")."16 LDAP Interface Events"
0
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics" -Name "16 LDAP Interface Events" -Value 5
(more…)

How to remove terribly annoying English/Russian keyboard layout

(more…)

Nginx TCP proxy with SSL Termination

Obtaining the certificates

Obtain private and public keys from exported pfx file:

openssl pkcs12 -in ldaps.pfx -nocerts -nodes -out ldap.key
openssl pkcs12 -in ldaps.pfx -clcerts -nokeys -out ldap.crt
(more…)

Enabling LDAP over SSL

Add Certificate Manager role

Enable probably something like Certificate Manager role on DC:

(more…)

Increasing MaxConcurrentApi Kerboros parameter on a Domain Controller

I increased MaxConcurrentApi value of type DWORD in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters:

(more…)