Active Directory, for reasons best known to itself, stores many boolean attributes (such as userAccountControl or msExchELCMailboxFlags) together in an aggregate integer rather than separating them … Read more
Author: foo
Unexpected access denied issues on Webfarm
Summary An issue has been discovered in the implementation of Access Control Lists (ACLs) over Network File System (NFS) on the infrastructure now supporting the … Read more
How we do Office365 authentication
I understand that our way of getting users signed into Office365 via Shibboleth is considered a little… scary. In the interest of transparency and community … Read more
Grabbing mailbox usage statistics from Office365 regularly
Office365 now exposes a number of reports which will hopefully be useful for measuring usage and engagement of mailbox users. One such report is the … Read more
FIM LDAP MA stopped-parsing-errors error
A few days ago we noticed that our Oracle (née Sun, née iPlanet, née Netscape…) Directory Server Connector for FIM (née Management Agent [MA]) was, … Read more
Generating SSL certificates with SANs with JANET
Some notes on generating Certificate Signing Requests (CSRs) with Subject Alternate Names (SANs) using JANET’s certificate service (https://certificates.ja.net/jcs/) CSR generation Create csr.dat as: [ req … Read more
Changing ulimit for running processes
I’ve been trying to work out how to alter the coredump limits for a running processes (well, batch of processes, really) without needing GDB and … Read more
Segmenting our SAML2 infrastructure
Following a few questions around how and why we’ve set up our SAML2 (Shibboleth and other) infrastructure I thought I’d write a proper post about … Read more
Office365 & Shibboleth (2)
Something I forgot to mention in my earlier post about getting Shibboleth working with Office365 was our need to tweak the config a bit beyond … Read more
Networkshop41 talk on Office365 and Shibboleth
A couple of weeks ago I gave a presentation at Networkshop41 about our experience of using Office365 with Shibboleth instead of ADFS. I’ve finally got … Read more