Technology and troubleshooting.

Wednesday, November 11, 2020

Cisco Any Connect VPN installation failed : Rolling Back Windows. There is a problem with the windows installer package....

Many of us might have noticed the below error message while installing Cisco Any Connect VPN on Windows computers.

Error Message: There is a problem with the windows installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor.

Cisco Any Connect VPN installation failed : Rolling Back Windows. There is a problem with the windows installer package....

 Reason: There could be an issue with Signature Verification of the Package.

Below is the screenshot of the error message, post this error the installation status will be " Rolling Back" and the installation gets failed.

Cisco Any Connect VPN installation failed : Rolling Back Windows. There is a problem with the windows installer package....

When you contact your system admins, they might say there could be an issue with the Operating System files.

Of course, we have to do basic checks on Anti Virus software which may block such installation.

After doing a little bit of research we had found the actual issue. To overcome this issue, follow the below procedures:

*    On your Windows computer go to Advanced Boot Options by pressing F8 (or based on the manufacturer) while rebooting the computer.

*     For the older version of Windows the Advanced Boot Options will be shown as below.

Cisco Any Connect VPN installation failed : Rolling Back Windows. There is a problem with the windows installer package....

*    To get into the Advanced boot options page for Windows 10, hold the Shift key and click restart. Once restarted you will see the options as in the below screenshot.


Cisco Any Connect VPN installation failed : Rolling Back Windows. There is a problem with the windows installer package....

Follow these steps to disable the signature verification, Click Troubleshoot > Startup setting > 

Restart. Now you will get Startup Setting Options (refer below image), on this screen click F7 to Disable the " Driver Signature Environment"

After this, your system will get restarted and the Cisco Anyconnect VPN installation will not be an issue :-)

Cisco Any Connect VPN installation failed : Rolling Back Windows. There is a problem with the windows installer package....

Share:

Thursday, February 27, 2020

tshark: The file to which the capture would be saved ("xxxx.pcap") could not be opened: Permission denied.

tshark: The file to which the capture would be saved ("xxxx.pcap") could not be opened: Permission denied.

This tutorial describes how to fix tshark: The file to which the capture would be saved ("xxxx.pcap") could not be opened: Permission denied. I doing some research with tshark on Linux. While starting my research i get stuck with error Permission denied unable to redirect the wireshark output into file.

tshark: The file to which the capture would be saved ("xxxx.pcap") could not be opened: Permission denied.


I was running tshark in root. It is the most privileged account in Linux even though i got the same error message  tshark: The file to which the capture would be saved ("xxxx.pcap") could not be opened: Permission denied.

Error:-

  tshark: The file to which the capture would be saved ("xxxx.pcap") could not be opened: Permission denied.

Solution:-

Redirect the output other than / root. What i did, I just create a folder called capture on /home/.

[root@syslog ~]# mkdir -p /home/capture
Run the capture again capture the packet on different path.

[root@syslog ~]# sudo tshark -i ens192 -w /home/capture/mycapt.pcap  Running as user "root" and group "root". This could be dangerous.
Capturing on 'ens192'
96 ^C
[root@syslog ~]# ls -alFh /home/capture/
total 16K
drwxr-xr-x. 2 root root  25 Nov 12 12:58 ./
drwxr-xr-x. 5 root root  53 Nov 12 12:58 ../
-rw-------. 1 root root 13K Nov 12 12:59 mycapt.pcap

tshark: The file to which the capture would be saved ("xxxx.pcap") could not be opened: Permission denied.

 


Share:

Saturday, November 4, 2017

MS PowerPoint: server application, source file, or item can't be found, or returned an unknown error. You may need to reinstall the server application

MS PowerPoint: server application, source file, or item can't be found, or returned an unknown error. You may need to reinstall the server application

This tutorial describes how to fix server application, source file, or item can't be found, or returned an unknown error. You may need to reinstall the server application in MS PowerPoint. Today Morning I received a call from the customer. They unable to insert the PDF object into the Microsoft PowerPoint 2010. I Just look into that machine and resolved the reported problem.
Unable to insert PDF file in Microsoft PowerPoint
Error:-
server application, source file, or item can't be found, or returned an unknown error. You may need to reinstall the server application.png
Solution:- These are the steps followed to resolve this issue.


Step#1 Install the DDL:- regsvr32 %systemroot%\system32\ole32.dll
                              DLL installation
Step#2 Disable Protected Mode by going to Edit > Preferences > General  [Deselecting or Uncheck the Radio Button] Enable Protected Mode at startup.
                              
Step#3 Restart Reader and the PowerPoint.
I hope this information is useful for you. Please forgive any typos or incomplete sentences.
Share:

Monday, October 2, 2017

A Free and Simple Network Device Configuration Change Management Solution in CLI using puTTY.

Have you had trouble tracking changes to devices in you infrastructure.?
Do you not have budget to spend a pretty penny on log management software

I faced the same issue some time ago and it had me thinking.
What is the best way to keep track of the changes made while also reducing the effort it takes to document, validate and rollback the changes if necessary, without having to spend on costly and/or complicated software.

Without further ado, let us get to the crux of the solution by explaining how it works first and then giving you the method i used to implement it.
A Free and Simple Network Device Configuration Change Management Solution in CLI using puTTY.

There maybe better ways to go about this. If you have any, please highlight it in the comments below.

_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

The Command Line Interface is most often used to make configuration changes to network devices and Linux systems with the help of a terminal emulator using SSH or Telnet.

We make use of one of the most famous terminal emulator puTTY.

Putty is a small but versatile emulator with a wide variety of features and functions.

The feature we would be using would be the session logging feature.

What we do is, create a custom profile in putty with a predestined location and save a time-stamped log file to that location every time putty is invoked.

It would be best to have the latest version of puTTY for this to work, but it may work in earlier versions as well.

-----------------

I went about accomplishing this in a windows system by tweaking the registry settings for putty, under [HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\

Under that create a new custom profile that stores the log files in a centralized location. This is invoked every time putty is opened with a batch script.

Here's an example to the reg file and batch script, which you can modify and use according to your needs.

Modify and save the following as a .reg file.


--------------------------------------------------------------------------------------------------------
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\check]
"LogFileName"="\\\\<Share Location>\\Network Change Log\\&Y-&M-&D-&T.log"
"LogType"=dword:00000001

---------------------------------------------------------------------------------------------------------
I have saved it as Netmon.reg and I have named the custom puTTY profile as check.

I have written the script in such a way that the reg file is imported automatically, even if it is not present, in case the script is started in a new machine.

-----------------------------------------_________________________-----------------------------------
@ECHO off

net use L: /d
net use L: \\<Share Location>
reg query HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\check

if %ERRORLEVEL% EQU 1 goto INSTALL
REM if %ERRORLEVEL% is true reg is not installed.
start putty.exe -t -l "check" REM Starts a putty session with check profile loaded
pause...
EXIT /B

:INSTALL
pause...
xcopy "\\<Share>\Network Change Log\Setup\Netmon.reg" %TEMP% /Y REM copy the reg file to REM temp folder
reg import %TEMP%\Netmon.reg
pause...
start putty.exe -t -l "check"

---------------------------------------------_________________________--------------------------------------

We can also convert the above batch script to exe, using a simple batch script to exe converter and customize further to suit individual needs and requirements.

Hope this will be simple way for you to keep track of changes.


Share:

Monday, February 20, 2017

Configure Static IP Address and enable SSH for root a/c in kali linux

How to Configure Static IP Add and enable SSH for root a/c in kali linux and fix ifdown: interface eth0 not configured in kali linux
Configure Static IP Address and enable SSH for root ac in kali linux
step@1

Configure Static IP Address
#vi /etc/network/interfaces
iface eth0 inet static
address 192.168.46.128 [Your Linux machine IP]
netmask 255.255.255.0 [Your Netmask address]
broadcast 192.168.46.255 [Your Broadcast address]
gateway 192.168.46.1 [Your Gateway address]
Write the changes using :wq!

Step@2

Fix ifdown: interface eth0 not configured Error
#vi /run/network/ifstate
eth0=eth0
Write the changes using :wq!
#ifdown eth0
#ifup eth0


Step@3

Enable SSH for root a/c in kali linux
#vi /etc/ssh/sshd_config
# Authentication section
change from "PermitRootLogin without-password" to PermitRootLogin yes
 PermitRootLogin yes
Write the changes using :wq!


That's all :)
I hope this information is useful for you. Please forgive any typos or incomplete sentences.

Share:

Wednesday, January 11, 2017

Set download limit for yum

This tutorial describes how to set download limit for yum. By default there is no throttle limit for yum update, install and upgrade. yum updates consumes all the bandwidth in a network while downloading the yum updates. Overcome this we need to set throttle to limit the download speed for yum.
Set download limit for yum

[Redhat/Centos/Fedora] has an option which allows you to limit the download rate.
Step #1: Open the Linux terminal and travel to /etc/yum.conf using favourite editor.
[root@localhost ~]# vim /etc/yum.conf
add the following line at the end of the yum.conf
throttle=250k

Example:- To set throttle for yum
[main]
cachedir=/var/cache/yum/$basearch/$releasever
keepcache=0
debuglevel=2
logfile=/var/log/yum.log
exactarch=1
obsoletes=1
gpgcheck=1
plugins=1
installonly_limit=5
bugtracker_url=http://bugs.centos.org/set_project.php?project_id=23&ref=http://bugs.centos.org/bug_report_page.php?category=yum
distroverpkg=centos-release
#This entry will limit the download rate to 250 kilobytes per second
throttle=250k 
That's it..
I hope this information is useful for you. Please forgive any typos or incomplete sentences.
Share:

Friday, November 11, 2016

Determining if ip address is already in use for device eth0 Centos

This tutorial describes how to fix determining if ip address is already in use for device eth0 while configuring the networking and do a network restart this error may occurred.



root@techlanda ~# service network restart Shutting down interface eth0: [ OK ] Shutting down loopback interface: [ OK ] Bringing up loopback interface: [ OK ] Bringing up interface eth0: Determining if ip address 10.26.112.35 is already in use for device eth0... Determining if ip address 10.26.112.35 is already in use for device eth0... Determining if ip address 10.26.112.35 is already in use for device eth0... root@techlanda ~#


Solution:- Something on the network is replaying that difference MAC address that one cause this error message Determining if ip address is already in use for device eth0. 
Just add this to your interface eth0 file.
ARPCHECK=no

root@techlanda ~# find /etc/sysconfig/network-scripts/ -name ifcfg-eth0\* -type f -exec sh -c 'echo ARPCHECK=no >> $1' -- {} \; root@techlanda ~# cat /etc/sysconfig/network-scripts/ifcfg-eth0 DEVICE=eth0 BOOTPROTO=none NM_CONTROLLED=no ONBOOT=yes TYPE=ethernet NETWORK=10.26.112.0 NETMASK=255.255.255.0 IPADDR=10.26.112.35 ARPCACHE=no root@techlanda ~# service network restart
Shutting down interface eth0: [ OK ]
Shutting down loopback interface: [ OK ] Bringing up loopback interface: [ OK ]
Bringing up interface eth0: [ OK ]
root@techlanda ~#

I hope this information is useful for you. Please forgive any typos or incomplete sentences.

Share:

Tuesday, November 8, 2016

How to fix Excel PasteSpecial grayed out

This tutorial describes how to fix Paste Special, Cut, Copy grayed out issue. This type issue may occurred while open the incompatible excel file which contions marco or working with ITR related excel sheet.


Excel PasteSpecial grayed out
Solution:-
Step #1
Right Click the Sheet1->Open View Code-> Microsoft visual basic wizard will open
View Code
Step #2 
Paste the below the code in the code editor and HIT Enter



Public Sub Menu_Reset()
    CommandBars("column").Reset
    CommandBars("row").Reset
    CommandBars("Cell").Reset
 End Sub

code editor
That's all above code will reset to excel configuration to default.

I hope this information is useful for you. Please forgive any typos or incomplete sentences.
Share:

Monday, October 17, 2016

How to Enable SSH Root Login in Debian 8

This tutorial describes how to enable ssh root login in debian 8 jessie. Why by default root login is not enabled in debian based operating system answer is simple Security reason. If the ssh is enabled for root users your system will be easily compromised by brute force attack

!!!Warning:- Enabling SSH root login is not recommended in production Environment.
Enable SSH root login on Debian Linux Server
My Scenario:-  There are some particular instances root login comes handy one such situation i faced was when convert the Physical Debian box into Virtual Environment.

Error:- 
login as: root
root@192.168.20.101's password:
Access denied
root@192.168.20.101's password:
Access denied
root@192.168.20.101's password:
Access denied
root@192.168.20.101's password:

Step #1
Login into Debain system using user account you had created earlier and switch to root user using "su".
superuser@GNS3-Test:~$ su
Password:[Your root password]

Step #2
root@GNS3-Test:/home/superuser# vi /etc/gdm3/daemon.conf
How to Enable SSH Root Login in Debian 8

Under security add “AllowRoot=true”. So your security section in the file should look like this:[security]

AllowRoot=true 
Once it looks like this save the file then exit the window.
Step #3 

root@GNS3-Test:/home/superuser# vi /etc/pam.d/gdm-password
comment this line "auth required pam_succeed_if.so user != root quiet_success"
#auth required pam_succeed_if.so user != root quiet_success
Step #4
root@GNS3-Test:/home/superuser#service ssh restart
â ssh.service - OpenBSD Secure Shell server
   Loaded: loaded (/lib/systemd/system/ssh.service; enabled)
   Active: active (running) since Mon 2016-10-17 16:25:04 IST; 11s ago
  Process: 896 ExecReload=/bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS)
 Main PID: 1431 (sshd)
   CGroup: /system.slice/ssh.service
           Ã¢Ã¢1431 /usr/sbin/sshd -D

Oct 17 16:25:04 GNS3-Test systemd[1]: Started OpenBSD Secure Shell server.
Oct 17 16:25:04 GNS3-Test sshd[1431]: Server listening on 0.0.0.0 port 22.

Oct 17 16:25:04 GNS3-Test sshd[1431]: Server listening on :: port 22.

Now you should able to login root account through ssh 

I hope this information is useful for you. Please forgive any typos or incomplete sentences.

Share:

Tuesday, September 13, 2016

Rename local Administrator account via GPO

This tutorial describes how to rename the local administrator account via GPO. Why we need to rename the Built-in administrator account?
The Built-in Administrator account is one of the most targeted account easily guessed by anonymous person that are attempting to access your computer with full privileges.

Rename local Administrator account via GPO

Let's move on to the tutorial.
All the screenshots are taken from Windows 2012R2 and Windows 8.1 Client.

Step#1 Open the gpmc.msc 
how to open gpmc.msc
Step#2 Group Policy Management console Create a new policy and its named as Rename local Administrator Account for future reference.
[Your Domain]==>Group Policy Objects==>Right click New==>Name[Name for your Policy]

Create a new policy for rename local administrator account
Right click and Edit the newly created policy Rename Local Administrator Account.
Edit a new policy for rename local administrator account
 In Group Policy Management Editor Elapse==>Computer Configuration==>Policies==>Windows Settings==>Security Settings==>Local Policies==>Security Options==>Accounts: Rename administrator account==>Right Click Properties==>Check Define this Policy Settings checkbox==>Rename local Administrator name"Poweruser"
Edit a new policy for rename local administrator account
Step#3 Link a rename administrator account policy to Computer OU
link rename local administrator account for Computer OU
Step#4 Update the group policy in client computer.
RUN==>gpupdate /force refresh the lusrmgr.msc changes.
renamed local administrator account
I hope this information is useful for you. Please forgive any typos or incomplete sentences.
Share:

Monday, September 12, 2016

How to fix WAMP is not working on IIS installed machine

This tutorial describes How to fix WAMP is not working on IIS installed machine.

My Scenario:- My teammate informed me can you please check why WAMP service is not started?  I found the issue is caused by recently Installed IIS Web service on WAMP Server installed machine.

Troubleshooting:-
I logon the WMAP the sever type localhost on the browser it navigate to IIS default page.

IIS Default Page
Issue identified, IIS and WAMP Service are listing the same port (Port 80) to run Web Service. So i decided to change the listing port for WAMP Service in order to run WMAP service. 

Resolution:- How to change WMAP Listing Port:- 
Step#1 Travel to "C:\WAMP\bin\apache\Apache2.2.21\conf" directory.
WAMP Directory

Step#2  Open the httpd.config using text editor.
Step#3 Find the line Listen 80 in the httpd.conf file and change it to  "Listen 8080" (or assign any port which is not in use).


change wamp port Listen 8080

Step#4 Start the WAMP Service it will start working using Port 8080.
start wamp service

I hope this information is useful for you. Please forgive any typos or incomplete sentences.
Share:

Sunday, September 11, 2016

How to fix metasploit failed to connect to the database

This tutorial describes How to fix metasploit failed to connect to the database in Kali Linux2.0 Sana .

My scenario:- Today i did some experimental with Kali Linux Sana. I tired to connect metasploit database with postgresql it failed to connect database these is the error i got during experimental.
Error:-
root@kali:~# service postgresql start
root@kali:~# service postgresql status
postgresql.service - PostgreSQL RDBMS
   Loaded: loaded (/lib/systemd/system/postgresql.service; disabled)
   Active: active (exited) since Sun 2016-09-11 16:44:35 IST; 48min ago
  Process: 6448 ExecStart=/bin/true (code=exited, status=0/SUCCESS)
 Main PID: 6448 (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/postgresql.service
root@kali:~# service metasploit start
Failed to start metasploit.service: Unit metasploit.service failed to load: No such file or directory.


  root@kali:~# msfconsole
                                                  ole.../
# cowsay++
 ____________
< metasploit >
 ------------
       \   ,__,
        \  (oo)____
           (__)    )\
              ||--|| *



Save 45% of your time on large engagements with Metasploit Pro
Learn more on http://rapid7.com/metasploit

       =[ metasploit v4.11.4-2015071403                   ]
+ -- --=[ 1467 exploits - 840 auxiliary - 232 post        ]
+ -- --=[ 432 payloads - 37 encoders - 8 nops             ]
+ -- --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ]

msf > db_status
[*] postgresql selected, no connection


Solution:-
Here is the solution to fix metasploit failed to connect to the database.
root@kali:~# /usr/bin/msfconsole
msf > msfdb init
[*] exec: msfdb init
msf > msfconsole
[*] exec: msfconsole
msf > db_status
[*] postgresql connected to msf
              [OR]
root@kali:~# /usr/bin/msfconsole start
msf > db_status
[*] postgresql connected to msf
I hope this information is useful for you. Please forgive any typos or incomplete sentences.
Share:

Saturday, September 10, 2016

Configure IE11 Proxy Settings Via Group Policy in Windows 2012 R2

This tutorial describes How to Configure Proxy Settings in Internet Explorer 11 via group policy.

My Scenario:-
I've recently updated IE9 to IE11 to users. One day our proxy server went down. So i changed the redundant proxy server IP Address from group policy in Windows 2008R2 but proxy settings are not applied to IE11 Users. I google and found IE11 proxy settings will not applied from Internet Explorer Maintenance (IEM) anymore.
Solution:-
Screenshot are taken from the LAB environment using windows 2012R2 for Security reason.
Step#1  Run==>gpmc.msc

Step#2 Create a new policy for IE11


Step#3 Edit the newly created IE11 policy using group policy management editor


User Configuration==>Policies==>Windows Settings==>Registry (Edit Registry)

Add new Registry

Add the following registry's

1#ProxyEnable
Keypath:Software\Microsoft\Windows\CurrentVersion\Internet Settings
Default:ProxyEnable
Value type: REG_DWORD
Value_Data: 00000001
Base: Hexadecimal

2#ProxyServer
Keypath:Software\Microsoft\Windows\CurrentVersion\Internet Settings
Default:ProxyServer
Value type: REG_SZ
Value_Data: 172.19.120.12:3128

3#ProxyOverride
Keypath:Software\Microsoft\Windows\CurrentVersion\Internet Settings
Default:ProxyOverride
Value type: REG_SZ
Value_Data: hrms;172.19.120.11<local>

4# Gray out Proxy, User can not change proxy settings
Keypath:Software\Policies\Microsoft\Internet Explorer\Control Panel\
Default:Proxy
Value type: REG_DWORD
Value_Data: 1
Base: Decimal
Step#4 Now Link our IE11 Policy into respective OU


Step#5 Logoff and logon Clients or Update group policy in client machine using Run==>gpupdate /force

I hope you this information is useful for you. Please forgive any typos or incomplete sentences.
Share:

Contributors

Popular Posts