Joning Active Directory in Ubuntu 14.04 or 15.04 Vivid Velvet with realmd

http://www.mylesgray.com/infrastructure/utilising-kerberosad-auth-ubuntu-14-04-realmd/

Install Squid 3.4 with ssl bump on Debian 8 (Jessie)

sudo apt-get install dpkg-dev
sudo apt-get build-dep squid3
sudo apt-get build-dep openssh
sudo apt-get install libssl-dev libcrypto++-dev
sudo apt-get build-dep openssl
sudo apt-get source squid3
sudo apt-get install devscripts build-essential fakeroot

sudo apt-get install squid-langpack apache2

cd squid3-3.4.8

vi debian/rules

# add the lines
#                --enable-ssl \
#                --enable-ssl-crtd \

./configure

fakeroot debian/rules binary


# install
cd ..
dpkg -i *.deb


/usr/lib/squid3/ssl_crtd -c -s /var/lib/ssl_db/
chown -R proxy /var/lib/ssl_db

#create ca certificate
openssl req -new -newkey rsa:2048 -sha256 -days 365 -nodes -x509 -keyout myCA.pem  -out myCA.pem

#copy the public part of pem file and create a der file
cp myCA.pem myCApublic.pem
# remove the private part of myCApublic.pem
openssl x509 -in myCApublic.pem -outform DER -out myCApublic.der


# make sure these lines are present in squid.conf
http_port 3128 ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/home/proxy/ssl_cert/myCA.pem
http_port 3129  transparent
http_port 3130 transparent ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/home/proxy/ssl_cert/myCA.pem

acl bump_sites dstdomain .youtube.com .youtube.com.mx
ssl_bump none localhost
ssl_bump server-first bump_sites
ssl_bump none all
sslproxy_cert_error allow all
sslproxy_flags DONT_VERIFY_PEER
always_direct allow all

#change firewall to redirect port 80 to 3129, port 443 to 3130

Keep http_proxy environment variable when using sudo

Add this in visudo

Defaults env_keep +="http_proxy"
Defaults env_keep +="https_proxy"

Defaults env_keep +="ftp_proxy"

Adding a proxy to maven3

Create the file ~/.m2/settings.xml with the contents


<settings>
  <proxies>
   <proxy>
      <active>true</active>
      <protocol>http</protocol>
      <host>fw1</host>
      <port>3128</port>
    </proxy>
  </proxies>
</settings>

Use synapse to search in Lubuntu

First install Synapse


sudo add-apt-repository ppa:synapse-core/ppa
sudo apt-get update
sudo apt-get install synapse


Now bind Synapse to the Super_L key alone

First remove any super key bindings e.g. <super>+p is a common one for screen settings

Then close Synapse

In ~/.config/hotkeys/synapse.hotkeys

change

Signature=<Control>space

to

Signature=Super_L

Relaunch Synapse

Fix the tilde not working on MacBookAir 6,2 model on Ubuntu 14.04

Just add the following to /etc/rc.local and reboot

echo 0 > /sys/module/hid_apple/parameters/iso_layout

likewise-open (pbis open, power broker) install samba interop

Using the

net -U <username> ads join

will break PowerBrokers connection to AD. For example, you may find that your AD accounts may longer be able to SUDO.

The proper way to link SAMBA to AD via PowerBroker is this:

samba-interop-install --install

Follow the official documentation from

http://download1.beyondtrust.com/Technical-Support/Downloads/files/pbise/Manuals/PBIS_Samba_Integration_Guide_V8.0.pdf