Yearly Archives: 2013

How do I analyze log files off Polycom phones?

We have a boatload of Polycom CX600 phones for our Lync deployment and recently came across one device that would not connect up to the network. In doing so, I tried to pull the log files off the device, but as you have probably found, there is no web management gui for the phones at all. Additionally, if you have figured out how to pull the files off the phone, you are probably wondering how you analyze the files as the log files are in a weird format.

Find the IP address of the phone
1. Press the middle button on the phone, select System Information, and you should see the IP address.
Navigate to ftp://xxx.xxx.xxx.xxx where the x's is the IP address of the phone
Copy the clg* files from the phone over to your desktop
Download a copy of readlog.zip (contains readlog.exe)
1. Please thank user NeedsCoffee over on the technet forum for providing this! 🙂
  http://social.technet.microsoft.com/Forums/lync/en-US/762fd63a-0813-4474-aa2f-8e633d669362/download-readlogexe-to-review-log-files-from-lync-phone-edition-devices#bd3c9cd0-aff5-4473-b616-07fc751a12fe
2. Please thank John from my comments below for providing another copy
3. Note: I scanned the version of readfile John provided in the comments below with http://virustotal.com and uploaded it to my site so we don't have to worry about the free upload sites expiring the download. If you are the original author of this file and do not wish for it to be distributed, please let me know and I will remove the link. Here are the virustotal results: https://www.virustotal.com/en/file/2a081b552f0d5678122f00ed796e1aeff376d7feb5033adf99149403a0296d61/analysis/1391885100/
Execute the following command to covert the clg file to text
1. readlog.exe "system[1].clg1" "system[1].txt"
Open up the text file in notepad
1. Here you can see some info about the phone trying to pull the certificate from the lync provisioning service.

That should do it! The log file contains a lot of debugging information that Polycom can use to figure out what is going on, or every once in awhile you will luck out and see if the phone is having a tough time finding the certificate server, time server, etc.

Enabling TLS 1.2 on IIS 7.5 for 256-bit cipher strength

8 Replies

So strangely enough, I always thought submitting a 2048bit CSR to my CA and receiving a 256-bit SSL cert would automatically force connections to use a 256-bit cipher strength over the established SSL connection, however it turns out that most connections will stay at 128-bit unless you tell your server to utilize TLS 1.2. In this tutorial, we will go over how to enable TLS v1.2 for IIS to increase the cipher strength to 256-bits.

Here is what a certificate's connection info looked like before the tutorial

Here is what a certificate's connection info looks like after the tutorial

Execute the following commands via an elevated PowerShell command prompt to enable TLS v1.2:
1. # Create keys in registry (not created by Windows out of the box) md "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2" md "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" md "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" # Enable TLS 1.2 for client and server SCHANNEL communications new-itemproperty -path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" -name "Enabled" -value 1 -PropertyType "DWord" new-itemproperty -path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server" -name "DisabledByDefault" -value 0 -PropertyType "DWord" new-itemproperty -path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" -name "Enabled" -value 1 -PropertyType "DWord" new-itemproperty -path "HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client" -name "DisabledByDefault" -value 0 -PropertyType "DWord"
2. Registry before powershell commands
3. Registry after powershell commands
Next, we need to edit the server to default the use of the 256-bit ciphers
1. Click Start->gpedit.msc
2. Expand Computer Configuration -> Administrative Templates -> Network and select SSL Configuration Settings
3. Double click SSL Cipher Suite Order and check Enabled
4. Copy the text from the SSL Cipher Suites and paste it into notepad.
5. Move the following to the beginning of the text document: TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA (Note: here you could remove lower strength ciphers from the order to prevent the server from accepting those connections).
6. Paste the Cipher Suites back into the SSL Cipher Suites box in Group Policy and click OK
7. Restart the server for the changes to take effect

References:

Changing the order of the Cipher Strengths:
http://social.technet.microsoft.com/Forums/forefront/en-US/ec033ff6-091d-441d-8ad3-7ea411100009/ssl-with-256bit-strength

Original source I found for the quick powershell commands to enable TLS v1.2:
http://www.derekseaman.com/2010/06/enable-tls-12-aes-256-and-sha-256-in.html

Where did FOPE go in the Office 365 Admin Portal?

Leave a reply

Today a coworker logged into one of our Office 365 Admin Portals and noticed that the Forefront Online Protection for Exchange (FOPE) link was removed to manage mail flow rules. After searching the entire admin panel, turns out Microsoft removed access to FOPE and has instead integrated a new "mail flow" area to manage the Exchange rules. While this is all good and fine, would have been nice to get an email saying the changes to the portal were going to be done.

Any who, here is where you can now begin to create/edit/delete your mailflow rules (note, all previous rules were automatically migrated from Forefront Online Protection for Exchange (FOPE) to what is now called Exchange Online Protection (EOP).

Login to Office 365 Admin Portal
Click on Admin -> Exchange
Select the mail flow link on the left
On the rules tab, you can now manage all of the mail rules as you would have done in FOPE.
1. In the picture below, you can see some of the rules that were automatically moved from FOPE over to Microsoft's new system (Migrated FOPE Policy Rule ID: xxxxxx).

Notes: It looks like Microsoft has released one official knowledge base article regarding this, which can be found here: http://technet.microsoft.com/en-us/library/dn308542%28v=exchg.150%29.aspx

Code 80243004 - Windows Update encountered an unknown error.

122 Replies

When trying to install Windows Updates, you receive the following error:

Code 80243004 - Windows Update encountered an unknown error.

This used to be a documented issue by Microsoft prior to them replacing the page with a fixit installer. The solution is a super weird workaround. Please follow the steps below for updates to continue installing.

Right click on the taskbar and select Properties.
Click the Customize... button on the Taskbar and Start Menu Properties window.
On the Notification Area Icons window, make sure Always show all icons and notifications on the taskbar is checked and click OK.
At this point, try running Windows Update again and the updates should begin to install properly.

Not sure why this fixes the issue, but it worked for me on a couple of virtual machines running in a VMware environment. An additional thing I noticed is you can see the tray has "null icons", where they are blanks of open applications; once you hover over them, they disappear/close. Not sure if this is a bug with Windows and VMware VMs, but just thought it was a weird coincidence. If you have had this same issue, could you please drop a comment below stating whether or not you received the same issue in a virtual environment?

Set static IP on CentOS 6 via command line

3 Replies

Here is how to configure a static IP on CentOS 6 via command line.

Determine which interface you want to configure--in this example, I will be using eth0
1. ifconfig -a
Edit the interface you wish to configure (I'll use nano as vi requires some knowledge for beginner Linux users)
1. nano /etc/sysconfig/network-scripts/ifcfg-eth0
Use the following settings and then use Control+O to Save and Control+X to Exit
1. nano /etc/sysconfig/network-scripts/ifcfg-eth0
2. DHCPCLASS=
  IPADDR=192.168.1.100
  NETMASK=255.255.255.0
  ONBOOT=yes
  BOOTPROTO=STATIC
Next, let's configure the hostname and default gateway. We will use nano again to edit the file.
1. nano /etc/sysconfig/network
2. Ensure GATEWAY=192.168.1.1 has been set
Next, let's configure our DNS servers to resolve domain names (in this case, I will set mine to use Google's DNS servers)
1. nano /etc/resolv.conf
2. nameserver 8.8.8.8
  nameserver 8.8.4.4
Restart the networking service for the changes to take effect
1. /etc/init.d/network restart

sh: /usr/bin/vmware-config-tools.pl: Permission denied VMware Tools Linux

7 Replies

Symptom: You see the following permissions error when trying to install VMware Tools on a Linux OS regardless if you are running as su or root:

[root@localhost vmware-tools-distrib]# ./vmware-install.pl Creating a new VMware Tools installer database using the tar4 format.

Installing VMware Tools.

In which directory do you want to install the binary files?
[/usr/bin]

What is the directory that contains the init directories (rc0.d/ to rc6.d/)?
[/etc/rc.d]

What is the directory that contains the init scripts?
[/etc/rc.d/init.d]

In which directory do you want to install the daemon files?
[/usr/sbin]

In which directory do you want to install the library files?
[/usr/lib/vmware-tools]

The path "/usr/lib/vmware-tools" does not exist currently. This program is
going to create it, including needed parent directories. Is this what you want?
[yes]

In which directory do you want to install the documentation files?
[/usr/share/doc/vmware-tools]
The path "/usr/share/doc/vmware-tools" does not exist currently. This program
is going to create it, including needed parent directories. Is this what you
want? [yes]

The installation of VMware Tools 9.0.5 build-1137270 for Linux completed
successfully. You can decide to remove this software from your system at any
time by invoking the following command: "/usr/bin/vmware-uninstall-tools.pl".

Can't exec "/usr/lib/vmware-tools/bin/configure-gtk.sh": Permission denied at ./vmware-install.pl line 3955.
Before running VMware Tools for the first time, you need to configure it by
invoking the following command: "/usr/bin/vmware-config-tools.pl". Do you want
this program to invoke the command for you now? [yes]

sh: /usr/bin/vmware-config-tools.pl: Permission denied
/sbin/restorecon: Warning no default label for /tmp/vmware-block-restore0/tmp_file
[root@localhost vmware-tools-distrib]#

Solution: You need to extract the files from the tarball when installing the guest tools via the tar command rather than the build in Archive Manager installed with the OS.

Mount the VMware Tools to the VM
Copy the VMware Tools tarball to the desktop of the Linux OS
Execute the following command to extract the tar's contents
1. tar -zxvf VMwareTools-9.0.5-1137270.tar.gz
Change directories to the vmware-tools-distrib that was just extracted from the tarball and execute the following commands to begin the installation
1. cd vmware-tools-distrib
2. ./vmware-install.pl

Setting up Java Runtime Environment 7 (JRE7) on Ubuntu 12.04 via Command Line

Leave a reply

Need Java to run an application on your Linux workstation/server? Follow the steps below via the terminal to install the latest version of Java.

Head over to http://www.java.com/en/download/manual.jsp to find the latest Linux download from your client machine.
Look at the link for the latest Java release for Linux. Since we are using Ubuntu we do not need the RPM release. In this case, I will be downloading Java 1.7.0_25-b15 for Linux x64.
1. The download url is http://javadl.sun.com/webapps/download/AutoDL?BundleId=78697
Head over to the Linux terminal on the machine you want to install Java on, and execute the following command to download the files from Java's website
1. wget http://javadl.sun.com/webapps/download/AutoDL?BundleId=78697
Extract the tarball. Since wget cannot pull the filename like a modern webrbowser, you will have to reference the weird filename AutoDL?BundleId=78697
1. tar -xvzf AutoDL?BundleId=78697
Find out what the name of the folder is of the java files you extracted by listing the files in the current directory. At the time of writing this, the extracted folder I had was jre1.7.0_25, so I will continue to reference that moving forward.
1. ls
Create a folder in the usr folder for Java to reside.
1. sudo mkdir /usr/java/
Move the files we extracted Java files to the java folder
1. sudo mv jre1.7.0_25/ /usr/java/
Execute the following to enable the Java Runtime Environment
1. sudo update-alternatives --install /usr/bin/java java /usr/java/jre1.7.0_25/bin/java 1
Execute the following command to set the default Java to use
1. sudo update-alternatives --config java
Execute the following command to verify that the latest version of java is installed
1. java -version
Remove the tarball we downloaded from Java's website to free up some space
1. rm ~/AutoDL?BundleId=78697

Lync - Manually set a Lync user's PIN via powershell

Leave a reply

If you would like to manually assign a PIN number to a user in Lync, please follow the steps below:

Login to your Lync Front End Server
Open up the Lync Server Management Shell
Execute the following command
1. Set-CsClientPin -Identity "DOMAIN\user" -Pin 123456

The technet article defining all the parameters of this command can be found here: http://technet.microsoft.com/en-us/library/gg398929.aspx

Find listing of open ports on Windows

Leave a reply

Want to see what ports are currently listening for connections on your machine?

To quickly find a list of open ports listening for connections, execute the following netstat command (this will show the Protocol, Local Address (source port), Foreign Address, State, and Process ID):

netstat -ano |find /i "listening"

To quickly ifnd a list of ports with established connections, enter the following command (this will show the Protocol, Local Address, Foreign Address, State, and Process ID):

netstat -an |find /i "established"

Here is a complete listing all of the netstat switches

Displays protocol statistics and current TCP/IP network connections.

NETSTAT [-a] [-b] [-e] [-f] [-n] [-o] [-p proto] [-r] [-s] [-t] [interval]

-a Displays all connections and listening ports.
-b Displays the executable involved in creating each connection or listening port. In some cases well-known executables host multiple independent components, and in these cases the sequence of components involved in creating the connection or listening port is displayed. In this case the executable name is in [] at the bottom, on top is the component it called, and so forth until TCP/IP was reached. Note that this option can be time-consuming and will fail unless you have sufficient permissions.
-e Displays Ethernet statistics. This may be combined with the -s option.
-f Displays Fully Qualified Domain Names (FQDN) for foreign addresses.
-n Displays addresses and port numbers in numerical form.
-o Displays the owning process ID associated with each connection.
-p proto Shows connections for the protocol specified by proto; proto may be any of: TCP, UDP, TCPv6, or UDPv6. If used with the -s option to display per-protocol statistics, proto may be any of: IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, or UDPv6.
-r Displays the routing table.
-s Displays per-protocol statistics. By default, statistics are shown for IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, and UDPv6; the -p option may be used to specify a subset of the default.
-t Displays the current connection offload state.
interval Redisplays selected statistics, pausing interval seconds between each display. Press CTRL+C to stop redisplaying statistics. If omitted, netstat will print the current configuration information once.

Notes: Here is a great resource with more in-depth details on the command: http://www.petri.co.il/quickly_find_local_open_ports.htm

Lync - Filter failed to return unique result error

4 Replies

Symptom: You receive the following error when trying to assign an Enterprise Voice number to a new user via powershell or the Lync Admin Web GUI (CSCP):

Filter failed to return unique result, "[SipAddress : sip:[email protected]] [LineURI : tel:+15555555555] [PrivateLine : tel:+15555555555] "

Solution: Execute the following commands below to see what the number is currently assigned to.

This command will check all users for the requested number.

Get-CsUser | where {$_.LineURI -eq "tel:+15555555555" -or $_.PrivateLine -eq "tel:+15555555555"} | Sort-Object LineURI | Select-Object Displayname, LineURI, PrivateLine

This command will check all common area phones for the requested number:

Get-CsCommonAreaPhone | where {$_.LineURI -eq "tel:+15555555555"} | Sort-Object LineURI | Select-Object Identity, LineURI, DisplayNumber, DisplayName, Description

This command will check all response groups for the requested number:

Get-CsRgsWorkflow | where {$_.LineURI -eq "tel:+15555555555"} | Sort-Object LineURI | Select-Object Name, Identity, LineURI, DisplayNumber, Description

This command will check all exchange contacts for unified messaging:

Get-CsExUmContact | where {$_.LineURI -eq "tel:+15555555555"} | Sort-Object LineURI | Select-Object identity, LineURI

Notes: I stumbled across these powershell commands from "The Regular IT Guy"; please check out his site here http://onlize.wordpress.com/2013/07/01/lync-add-user-error-filter-failed-to-return-unique-result/

Jack Stromberg

A site about stuff

Yearly Archives: 2013

How do I analyze log files off Polycom phones?

Enabling TLS 1.2 on IIS 7.5 for 256-bit cipher strength

Where did FOPE go in the Office 365 Admin Portal?

Code 80243004 - Windows Update encountered an unknown error.

Set static IP on CentOS 6 via command line

sh: /usr/bin/vmware-config-tools.pl: Permission denied VMware Tools Linux

Setting up Java Runtime Environment 7 (JRE7) on Ubuntu 12.04 via Command Line

Lync - Manually set a Lync user's PIN via powershell

Find listing of open ports on Windows

Here is a complete listing all of the netstat switches

Lync - Filter failed to return unique result error