http://blogs.sackheads.org/jpayne Just another Blogs.sackheads.org weblog Tue, 03 Jan 2012 21:05:09 +0000 http://backend.userland.com/rss092 en I'm fed up of the spam comments that sneak past Akismet. I've switched to requiring authentication and closing comments after 14 days. Not that there's been much content on this site recently. http://blogs.sackheads.org/jpayne/2012/01/03/disabling-comments It's that time of year again, when I realize how little I've posted on the blog. I'm walking again for the Jimmy Fund Walk. My 2011 donation page is here: http://www.jimmyfundwalk.org/2011/jcapayne Please see: Last year's post where I outlined my reasons for walking. http://blogs.sackheads.org/jpayne/2011/07/14/2011-jimmy-fund-walk Its a sad truth that everyone gets touched by cancer.  I've lost family members, and both my mother and mother-in-law are survivors.  In my team at work, we have 2 survivors.  One of those, is my manager Joe. Early last year, my wife and I celebrated the birth of our first ... http://blogs.sackheads.org/jpayne/2010/08/15/2010-jimmy-fund http://blogs.sackheads.org/jpayne/2009/04/28/did-i-mention If the world were just, I wouldn't feel the need to write this. After almost 2 years of subtle hints from my wife and much less subtle nagging from my parents whenever they saw pictures or caught a glimpse on a video chat or just thought about it, I finally relented ... http://blogs.sackheads.org/jpayne/2009/04/28/insane-customer-service Wow.  It's been more than 6 years since I reported (and provided a patch) a bug in Net::Patricia, and I'm still getting requests for the patch. It occurred to me that rather than search my email every time I get the request, why not just post it here? I ... http://blogs.sackheads.org/jpayne/2009/01/16/6-years-and-counting-my-netpatricia-patch I'm getting quite irritated by the complete lack of useful information on securing wired networks via 802.1X.   I think it's worth sharing some of the issues and solutions or work-arounds for a multi-vendor environment, which I'll do over a series of posts. Plenty of security vendors will describe how to ... http://blogs.sackheads.org/jpayne/2008/12/10/wired-network-security Whilst I feel that TACACS+ is a much better AAA solution for administrative access, it seems harder and harder to find documentation on how to do things, particularly on the server side. For instance, with Juniper's screenos when they added TACACS+ support, they documented how to add the config to ... http://blogs.sackheads.org/jpayne/2008/11/03/announcing-tacacsorg-collecting-tacacs-clue This snippet is tested against "recent" Shrubbery tac_plus daemons as of the date of the post. Searching for ACE and TACACS or similar gets confusing because of the RSA ACE server.  Good job Cisco :) Cisco Application Control Engine modules are really separate devices from the "mother" switch, only suckling power and ... http://blogs.sackheads.org/jpayne/2008/10/16/managing-cisco-ace-application-control-engine-modules-with-tacacs This snippet is tested against "recent" Shrubbery tac_plus daemons as of the date of the post.   ScreenOS 6.0+ users may have noticed that you can now configure TACACS+ servers to authenticate admin users. I'll skip over the details, except to say that as of 6.1.0r3, failover isn't working to either ... http://blogs.sackheads.org/jpayne/2008/10/16/managing-screenos-firewalls-with-tacacs