http://blogs.sackheads.org/jpayne Just another Blogs.sackheads.org weblog Tue, 28 Apr 2009 23:35:52 +0000 http://backend.userland.com/rss092 en http://blogs.sackheads.org/jpayne/2009/04/28/did-i-mention If the world were just, I wouldn't feel the need to write this. After almost 2 years of subtle hints from my wife and much less subtle nagging from my parents whenever they saw pictures or caught a glimpse on a video chat or just thought about it, I finally relented ... http://blogs.sackheads.org/jpayne/2009/04/28/insane-customer-service Wow.  It's been more than 6 years since I reported (and provided a patch) a bug in Net::Patricia, and I'm still getting requests for the patch. It occurred to me that rather than search my email every time I get the request, why not just post it here? I ... http://blogs.sackheads.org/jpayne/2009/01/16/6-years-and-counting-my-netpatricia-patch I'm getting quite irritated by the complete lack of useful information on securing wired networks via 802.1X.   I think it's worth sharing some of the issues and solutions or work-arounds for a multi-vendor environment, which I'll do over a series of posts. Plenty of security vendors will describe how to ... http://blogs.sackheads.org/jpayne/2008/12/10/wired-network-security Whilst I feel that TACACS+ is a much better AAA solution for administrative access, it seems harder and harder to find documentation on how to do things, particularly on the server side. For instance, with Juniper's screenos when they added TACACS+ support, they documented how to add the config to ... http://blogs.sackheads.org/jpayne/2008/11/03/announcing-tacacsorg-collecting-tacacs-clue This snippet is tested against "recent" Shrubbery tac_plus daemons as of the date of the post. Searching for ACE and TACACS or similar gets confusing because of the RSA ACE server.  Good job Cisco :) Cisco Application Control Engine modules are really separate devices from the "mother" switch, only suckling power and ... http://blogs.sackheads.org/jpayne/2008/10/16/managing-cisco-ace-application-control-engine-modules-with-tacacs This snippet is tested against "recent" Shrubbery tac_plus daemons as of the date of the post.   ScreenOS 6.0+ users may have noticed that you can now configure TACACS+ servers to authenticate admin users. I'll skip over the details, except to say that as of 6.1.0r3, failover isn't working to either ... http://blogs.sackheads.org/jpayne/2008/10/16/managing-screenos-firewalls-with-tacacs More than just valentines day.   http://blogs.sackheads.org/jpayne/2008/08/20/feb-14th-2009 Melissa and I are headed back to Cardiff Feb 15th - 25th.  Definitely going to be spending time at the Pantmawr Inn and other local pubs.  Not sure what we'll be able to fit in around visiting family... but if we can get even half way to Portsmouth, I'll update here. http://blogs.sackheads.org/jpayne/2008/01/28/2008-uk-trip The year. No really. Digg the year.read more | digg story http://blogs.sackheads.org/jpayne/2008/01/02/2008