Stephen's Space on the Web – Page 7 – This is my space on the internet. I got tired of writing scripts and/or code and then losing them. The code may be 100% mine or I might have found it on the internet.

Imail Web Administration Page SSO.

In my opinion Imail’s Active Directory integration is rudimentary at best. They took the all or nothing approach. The following code is something I wrote to let users logon with their Active Directory account to manage their Distribution Lists. It generates a random password in Imail and then automatically logs them in to the system. The user never knows their Imail password and they think its all connected.

Its also a simple example of HTML form automation with javascript.

‘imail glue, ‘stephen ‘The password is ROT13 encrypted. Its not secure but does the job. ‘The user must exists in Imail before they can logon. Set WshShell = CreateObject( “WScript.Shell” ) ‘our imail domain in the registry, this is so we can see if the user exists imailDomain = “your.domain.com” ‘the imail adduser utility. imailAddUser = “C:\Program Files\Ipswitch\IMail\adduser.exe” ‘get the logon username and remove the domain name from it username = replace(request.servervariables(“LOGON_USER”), “NTDomain\”,””,1,1,1) ‘generate a random password password = generatePassword(15) ‘check to see if they have an imail account if AccountExists(username) then ‘change password WshShell.exec imailAddUser & ” -mod -u ” & username & ” -p ” & password ‘write the html frames webpage, We use frames so we can use the onload event. writeframes() else ‘The error message could be better but it does the job. response.write “Your account does not exists” end if ‘*** Functions function AccountExists(username) ‘check to see if the user exists in the imail registry. on error resume next registrykey = WshShell.RegRead( “HKLM\SOFTWARE\Ipswitch\IMail\Domains\” & imailDomain & “\Users\” & username & “\MailAddr”) if err.number <> 0 then AccountExists = false else AccountExists = true end if end function Function generatePassword(passwordLength) ‘some asp function i found on the net to generate a random password. sDefaultChars=”abcdefghijklmnopqrstuvxyzABCDEFGHIJKLMNOPQRSTUVXYZ0123456789!#${}” iPasswordLength=passwordLength iDefaultCharactersLength = Len(sDefaultChars) Randomize’initialize the random number generator ‘Loop for the number of characters password is to have For iCounter = 1 To iPasswordLength ‘Next pick a number from 1 to length of character set iPickedChar = Int((iDefaultCharactersLength * Rnd) + 1) ‘Next pick a character from the character set using the random number iPickedChar ‘and Mid function sMyPassword = sMyPassword & Mid(sDefaultChars,iPickedChar,1) Next generatePassword = sMyPassword End Function Function rot13(rot13text) ‘some asp function i found on the net to generate a rot13 encrption rot13text_rotated = “” ‘ the function will return this string For i = 1 to Len(rot13text) j = Mid(rot13text, i, 1) ‘ take the next character in the string k = Asc(j) ‘ find out the character code if k >= 97 and k =< 109 then k = k + 13 ‘ a … m inclusive become n … z elseif k >= 110 and k =< 122 then k = k – 13 ‘ n … z inclusive become a … m elseif k >= 65 and k =< 77 then k = k + 13 ‘ A … m inclusive become n … z elseif k >= 78 and k =< 90 then k = k – 13 ‘ N … Z inclusive become A … M end if ‘add the current character to the string returned by the function rot13text_rotated = rot13text_rotated & Chr(k) Next rot13 = rot13text_rotated End Function sub writeFrames() ‘write the html frames and javascript to automate the imail form %> <html> <head> <title> Imail LS Glue </title> <script language=”javascript”> String.prototype.enc = function(){ return this.replace(/[a-zA-Z]/g, function(c){ return String.fromCharCode((c <= “Z” ? 90 : 122) >= (c = c.charCodeAt(0) + 13) ? c : c – 26); }); }; function logon() { var s = “<%=rot13(password)%>”; parent.imail.document.form1.txtUserName.value='<%=username%>’; parent.imail.document.form1.txtPassword.value=s.enc(); parent.imail.document.form1.btnLogin.click(); } </script> </head> <frameset rows=”0%,100%” border=”0″ onLoad=”logon();”> <frame src=”blank.html” name=”manager” noresize> <frame src=”/iadmin/login.aspx” name=”imail” noresize> </frameset> </html> <% end sub

Export Exchange 2003 email to PST

You can use the Migration Wizard in Exchange 2003 to export email to a pst on a single server.

GPO to Disable IP6 on Vista and 2008

Quick ADMX GPO policy to disable IP6 on your network according to MS KB 929852

IP6_disable.admx
<policyDefinitions xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" revision="1.0" schemaVersion="1.0" xmlns="http://www.microsoft.com/GroupPolicy/PolicyDefinitions" >   <policyNamespaces > <target prefix="IP6_Disable" namespace="Sysprosoft.ADM_Editor.IP6_Disable" /> <using prefix="windows" namespace="Microsoft.Policies.Windows" /> </policyNamespaces> <resources minRequiredRevision="1.0" fallbackCulture="en-us" /> <supportedOn > <definitions > <definition name="SupportedOn_5" displayName="$(string.String_SupportedOn_Undefined_6)" /> </definitions> </supportedOn> <policies > <policy name="Policy_Settings_12" class="Machine" displayName="$(string.String_Policy_Settings_13)" explainText="$(string.String_Explain_14)" key="SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" presentation="$(presentation.Policy_Settings_12)" > <parentCategory ref="windows:Network" /> <supportedOn ref="SupportedOn_5" /> <elements > <enum id="Policy_DropList_Element_Settings_15" valueName="DisabledComponents" key="SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" > <item displayName="$(string.String_Policy_DropList_Select_Settings_New_Selection_16)" > <value > <decimal value="0" /> </value> </item> <item displayName="$(string.String_Policy_DropList_Select_Settings_0xFFFFFFFF_17)" > <value > <decimal value="4294967295" /> </value> </item> <item displayName="$(string.String_Policy_DropList_Select_Settings_0x20_18)" > <value > <decimal value="32" /> </value> </item> <item displayName="$(string.String_Policy_DropList_Select_Settings_0x10_19)" > <value > <decimal value="16" /> </value> </item> <item displayName="$(string.String_Policy_DropList_Select_Settings_0x01_20)" > <value > <decimal value="1" /> </value> </item> <item displayName="$(string.String_Policy_DropList_Select_Settings_0x11_21)" > <value > <decimal value="17" /> </value> </item> </enum> </elements> </policy> </policies> </policyDefinitions> 
IP6_disable.adml
<policyDefinitionResources xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" revision="1.0" schemaVersion="1.0" xmlns="http://www.microsoft.com/GroupPolicy/PolicyDefinitions" >   <displayName >Enter Description here</displayName> <description >Enter Description here</description> <resources > <stringTable > <string id="String_SupportedOn_Undefined_6" >Undefined</string> <string id="String_Policy_Settings_13" >Disable TCPIP6</string> <string id="String_Explain_14" >1. Type 0 to enable all IPv6 components. Note The value "0" is the default setting. 2. Type 0xffffffff to disable all IPv6 components, except the IPv6 loopback interface. This value also configures Windows Vista to use Internet Protocol version 4 (IPv4) instead of IPv6 in prefix policies. 3. Type 0x20 to use IPv4 instead of IPv6 in prefix policies. 4. Type 0x10 to disable native IPv6 interfaces. 5. Type 0x01 to disable all tunnel IPv6 interfaces. 6. Type 0x11 to disable all IPv6 interfaces except for the IPv6 loopback interface. http://support.microsoft.com/kb/929852</string> <string id="String_Policy_DropList_Select_Settings_New_Selection_16" >0x0</string> <string id="String_Policy_DropList_Select_Settings_0xFFFFFFFF_17" >0xFFFFFFFF</string> <string id="String_Policy_DropList_Select_Settings_0x20_18" >0x20</string> <string id="String_Policy_DropList_Select_Settings_0x10_19" >0x10</string> <string id="String_Policy_DropList_Select_Settings_0x01_20" >0x01</string> <string id="String_Policy_DropList_Select_Settings_0x11_21" >0x11</string> </stringTable> <presentationTable > <presentation id="Policy_Settings_12" > <dropdownList refId="Policy_DropList_Element_Settings_15" >DisabledComponents</dropdownList> </presentation> </presentationTable> </resources> </policyDefinitionResources>

A.D.A.M or AD LDS

Here is my AdamSync config using the ProxyUser class. It took me a while to get everything going right but it works and after a full sync the incremental syncs take less than 30 seconds.

We do not sync our entire AD partition only a subset. After alot of reading objectCategory is better then objectClass because objectCategory is indexed in AD.

 <?xml version="1.0"?> <doc> <configuration> <description>Adam-Sync</description> <security-mode>object</security-mode><source-ad-name>my.domain</source-ad-name><source-ad-partition>dc=my,dc=domain</source-ad-partition><source-ad-account>user_account</source-ad-account> <account-domain>my.domain</account-domain> <target-dn>dc=my,dc=domain</target-dn> <query> <base-dn>ou=SubOU,dc=my,dc=domain</base-dn> <object-filter>(|(objectCategory=person)(objectCategory=group)(objectCategory=organizationalUnit))</object-filter> <attributes> <include>objectSID</include> <include>mail</include> <exclude></exclude> </attributes> </query> <user-proxy><source-object-class>user</source-object-class> <target-object-class>userProxy</target-object-class> </user-proxy> <schedule> <aging> <frequency>0</frequency> <num-objects>0</num-objects> </aging> <schtasks-cmd></schtasks-cmd> </schedule> </configuration> <synchronizer-state> <dirsync-cookie></dirsync-cookie> <status></status> <authoritative-adam-instance></authoritative-adam-instance> <configuration-file-guid></configuration-file-guid> <last-sync-attempt-time></last-sync-attempt-time> <last-sync-success-time></last-sync-success-time> <last-sync-error-time></last-sync-error-time> <last-sync-error-string></last-sync-error-string> <consecutive-sync-failures></consecutive-sync-failures> <user-credentials></user-credentials> <runs-since-last-object-update></runs-since-last-object-update> <runs-since-last-full-sync></runs-since-last-full-sync> </synchronizer-state> </doc>

Cross-Platform Message Box

I needed a cross-platform message box for Windows and Mac. I tried wxperl because its native on the mac but their is a bug with their MessageBox code on the mac.

This is pretty simple code, but uses each O/S’s native message box API to display a dialog. If you have Yes/No buttons and click yes it will perform the item in action. Which for us opens a webpage. You only need a standard perl installation for this code.

#!perl $message = “My Popup Message”; #icons Types (stop, note, caution) $icon = ‘note’; #button types (ok, yesno) $buttons = ‘yesno’; #action $action = ‘http://www.google.com’; if ($^O eq “darwin”) { #mac &macPopup; } elsif($^O eq “MSWin32”) { #windows &winPopup; } else { print “Unknown OS”; exit; } sub winPopup { if($icon eq ‘stop’) { $ic = ’16’; } elsif($icon eq ‘note’) { $ic = ’32’; } elsif($icon eq ‘caution’) { $ic = ’48’; } if($buttons eq ‘ok’) { $bu = ‘0’; } elsif($buttons eq ‘yesno’) { $bu = ‘4’; } #work around because win32 is not on a mac, but the mac will throw an error eval{require Win32; }; $result = Win32::MsgBox($message, $ic + $bu); if(($result == 6) && ($buttons eq ‘yesno’)) { #do action system(‘start ‘ . $action); } } sub macPopup { if($icon eq ‘stop’) { $ic = ‘0’; } elsif($icon eq ‘note’) { $ic = ‘1’; } elsif($icon eq ‘caution’) { $ic = ‘2’; } if($buttons eq ‘ok’) { $bu = ‘{“OK”}’; } elsif($buttons eq ‘yesno’) { $bu = ‘{“YES”,”NO”}’; } #mac way $result = `/usr/bin/osascript <<-EOF tell application "System Events" activate display dialog "$message" buttons $bu with icon $ic end tell EOF`; chomp($result); if (($buttons eq 'yesno') && ($result eq 'button returned:YES')) { system('open ' . $action); } }

IIS ASP Redirect

This is a small asp script that will let you have alias in IIS with out having to make them in IIS. You can put this in a custom 404 page.

so in my site, if you go to http://www.stephenjc.com/google it will redirect you to google’s site.

<% 'Stephen set lookup=Server.CreateObject("Scripting.Dictionary") lookup.add "google","http://www.google.com" 'Dont edit below this line for each itm in Lookup redirurl = Request.ServerVariables("Query_String") redirurl = lCase(Mid(redirurl, InStrRev(redirurl, "/") + 1, Len(redirurl))) if strcomp(redirurl,itm,1) = 0 then response.redirect lookup.item(itm) end if next %>

WHS Bliss

I just finished upgrading my DNS-323 NAS to a Acer H340 Windows Home Server NAS.

I am also running Ahsay Off-Site backup software on the unit to backup my Macintosh laptops and a couple of friends computer.

So far no complaints. The media streaming to the Xbox 360 is great also.

Poor Man’s TS Universal Print Driver

All the terminal services print drivers I found were too expensive for a 2 user TS environment that I was maintaining.

On the client download and install this open source pdf print driver for windows http://www.pdfforge.org/.
Setup the pdf printer to automatically print to the client printer and to auto save.
On the server install the open source pdf print driver and delete the printer it creates so now you have the drivers on the server.

From the client connect to the terminal server and print a test page, you should get a print pop up asking to confirm the print settings.

The reason this works is that the pdfforge will send the PS document to the client computer to be processed. The best benefit is that its all free.

Blackberry Multiple ReplyTo Addresses

This is how i have multiple reply to addresses from a single account on BIS. For my example i am going to use gmail, this can easily be adapted to other mail providers.

If you try to add another email account to BIS that points to the same mailbox you will get an error message that the email account already exists. The trick is to use a different server name for each account even though they point to the same mailbox.

For my primary gmail account i use imap.gmail.com, for my secondary accounts i use pop.gmail.com, gpop1.mysecureservice.com gpop2.mysecureservice.com.

The gpop1 and gpop2 are just cnames to pop.gmail.com to trick BIS. You can either create your own cname records if you own a domain name or use mine.

Make sure you can already send and receive from the other email accounts that you want to use in gmail.
In BIS you need to be able to manually setup your account so in the system i usually use [email protected] and any password to get by the first screen and get into the custom setup.
Now when you are setting up your alternate account be sure not to use the same server names but use the same username and password for your primary account.
Set the email address to the address that you would like the From address to be in your email.
After the account is added make sure you change the filter to only forward email on filter match. Since you have no filters no mail will be sent. This is to avoid duplicates.