$acl = get-acl thefile $sddl_orig = $acl.sddl $new_sddl = $sddl_orig -replace 'S-1-oldsid' 'S-1-newsid' $acl.SetSecurityDescriptorSddlForm($new_sddl) $acl | set-aclYes, this can be condensed to a single line, but as far as I can google, nobody has it:
gci | get-acl | foreach { $_.setsecuritydescriptorsddlform($_.sddl.replace('S-1-oldsid','S-1-newsid'))} | set-acl
# Systemd unit file for an SSH Tunnel service # [Service] Type=simple User=tunnel ExecStart=/usr/bin/ssh -F /home/tunnel/ssh-config-for-tunnel -vN tunnel.%i # On failure, wait 10 seconds to restart Restart=always RestartSec=10 # 20 failures within a 10 minute window marks this service as failed. StartLimitInterval=600 StartLimitBurst=20 [Unit] Description="SSH Tunnel to %i" Requires=network-online.target [Install] WantedBy=multi-user.target
ssh-keygen -t ed25519and configure the ssh-config-for-tunnel file:
# Configuration of the SSH tunnel from here to there
# Requirements:
# This file in /home/tunnel/ssh-config-for-tunnel
# Service /etc/systemd/system/ssh-tunnel@.service enabled and started
#
# Additional tunnels can be enabled as ssh-tunnel@elsewhere.service
# Special defaults for tunnels
Host *
ControlMaster no
ExitOnForwardFailure yes
IdentitiesOnly yes
#####################################################################
# Configure Tunnel:
#####################################################################
Host tunnel.myservice
### Connection:
# Private IP of ultimate destination
HostName 172.31.92.114
# Identity on the CB master
IdentityFile ~/.ssh/id_master
# Public IP of Jump 1 bastion
ProxyJump 192.168.100.142
### Tunnels:
# Take near port :18443 and send it to master's listener
LocalForward 8444 localhost:8443
# Take far port :6100 and bring it back to local listener
RemoteForward 6100 161.134.130.247:6100
# Jump configurations
Host 192.168.100.142
# Configuration for the bastion system
IdentityFile ~/.ssh/id_ed25519
ProxyJump 10.192.107.33
Host 10.192.107.33
IdentityFile ~/.ssh/id_ed25519
@echo off
REM newkernel.bat - create a python virtualenv and register it as a
REM Jupyter kernel
REM
SET /P _envname="Name of environment:"
if "%_envname%x" NEQ "x" goto :got_name
@REM else
set _envname=py-%USERNAME%-%RANDOM%
@REM fi
:got_name
C:\tools\Anaconda3\python.exe -m venv %_envname%.venv
set /P _envkern="Kernel name:"
if "%_envkern%x" NEQ "x" goto :got_kern
@REM else
set _envkern=py-%_envname%
@REM fi
:got_kern
set /P _envdesc="Kernel Description:"
if "%_envdesc%x" NEQ "x" goto :got_desc
@REM else
set _envdesc="Python (%_envname%)"
@REM fi
:got_desc
%_envname%.venv\scripts\pip install ipykernel
%_envname%.venv\scripts\python -m ipykernel install --name %_envkern% --display-name "%_envdesc%"
C:\> "\Program Files\Dell\SysMgt\rac5\racadm.exe" -r dracname.dom.ain -u root -p redacted sslcsrgen -g -f dracname.dom.ain.csr
Security Alert: Certificate is invalid - Name on Certificate is invalid or does not match site name
Continuing execution. Use -S option for racadm to stop execution on certificate-related errors.
CSR generated and downloaded from RAC successfully
C:\> certreq -submit -attrib "san:dns=dracname.dom.ain\nCertificateTemplate: WebServer" dracname.dom.ain.csr dracname.dom.ain.crt
Active Directory Enrollment Policy
{BFF41397-4CCE-41B5-AD8E-A029B2C2353B}
ldap:
RequestId: 104238
RequestId: "104238"
Certificate retrieved(Issued) Issued The certificate validity period will be shorter than the WebServer Certificate Tem
plate specifies, because the template validity period is longer than the maximum certificate validity period allowed by
the CA. Consider renewing the CA certificate, reducing the template validity period, or increasing the registry validit
y period.
C:\> "\Program Files\Dell\SysMgt\rac5\racadm.exe" -r dracname.dom.ain -u root -p redacted sslcertupload -t 1 -f dracname.dom.ain.crt
Security Alert: Certificate is invalid - Name on Certificate is invalid or does not match site name
Continuing execution. Use -S option for racadm to stop execution on certificate-related errors.
Certificate successfully uploaded to the RAC. The RAC will now
reset to enable the new certificate and may be offline temporarily.
C:\> "\Program Files\Dell\SysMgt\rac5\racadm.exe" -r dracname.dom.ain -u root -p redacted sslcertview -t 1
Serial Number : redacted
Subject Information:
Country Code (CC) : AU
State (S) : Some-State
Locality (L) : MyTown
Organization (O) : Internet Widgits Pty Ltd
Organizational Unit (OU) : World Wide Web Pty Ltd
Common Name (CN) : *.dom.ain
Issuer Information:
Common Name (CN) : AD DOM.AIN Root Trust CA
Valid From : Mar 6 16:01:02 2018 GMT
Valid To : Nov 6 15:13:19 2019 GMT