Friday 12 December 2008

Configuring Kerberos Authentication

Configuring Kerberos Authentication (requires registration) but a very good article

http://www.sqlservercentral.com/articles/Security/65169/#

The query to check connections on SQL server (including their authentication type) is


   1:  SELECT
   2:  s.session_id
   3:  , c.connect_time
   4:  , s.login_time
   5:  , s.login_name
   6:  , c.protocol_type
   7:  , c.auth_scheme
   8:  , s.HOST_NAME
   9:  , s.program_name
  10:  FROM sys.dm_exec_sessions s
  11:  JOIN sys.dm_exec_connections c
  12:  ON s.session_id = c.session_id


Kerberos is configured usually using an Active Directory admin account and the utility SETSPN to set the service principle names required for proper operation.

Tuesday 9 December 2008

Microsoft Application Verifier

"Application Verifier is a runtime verification tool for unmanaged code that assists in quickly finding subtle programming errors that can be extremely difficult to identify with normal application testing.

Application Verifier is designed specifically to detect and help debug memory corruptions and critical security vulnerabilities. It makes it easier to create reliable applications by monitoring an application's interaction with the Windows operating system, profiling its use of objects, the registry, the file system, and Win32 APIs (including heaps, handles, locks, and more). It also includes checks to predict how well the application will perform under Least-privileged User Account operation, compatibility tests to be used in logoing, and print tests to verify your usage of the print subsystem.

Running Application Verifier is easy; simply turn on the tool then run your project and go through your normal testing scenarios with a debugger attached. When your tests are completed, view the Application Verifier logs for any errors that may have been detected."


http://www.microsoft.com/downloads/details.aspx?FamilyID=D2DD7EE0-AAA2-402A-821D-43795D6CF139&displaylang=en

MDAC Utility: Component Checker

"The Component Checker tool is designed to help you determine installed version information and diagnose installation issues with the Microsoft Data Access Components (MDAC). MDAC is installed with numerous Microsoft products and can also be redistributed using the redistribution program (mdac_typ.exe) that you can download from the MSDN Data Access and Storage Developer Center. Windows XP SP2 or later versions of Windows also installs MDAC as an ‘out of box’ system component of the Windows operating system. Since MDAC in Windows XP SP2 or later is newer than the version (MDAC 2.8 SP1) in the last MDAC redistribution program, mdac_typ.exe no longer installs MDAC on Windows XP SP2 and later version. For more information about MDAC history and supportability please visit Data Access Technologies Road Map

Component Checker performs the following tasks:

  • Identifies the current MDAC installation on a computer.
  • Creates a series of reports about the files identified for the current MDAC installation."


http://www.microsoft.com/downloads/details.aspx?FamilyID=8F0A8DF6-4A21-4B43-BF53-14332EF092C9&displaylang=en

Tuesday 2 December 2008

.NET books list

from a poster in amazon...

My top recommended books:
1. "Accelerated C#" by Trey Nash
2. "Programming .NET Components" by Juval Lowy
3. "Test Driven Development in Microsoft .NET"
4. "Head First Design Patterns" [in Java but good]
5. "CLR Via C#" by Jeffrey Richter
6. "Code Complete" [Steve McConnell]
7. "Pro C# 2008 and the .NET 3.5 Platform" [Excellent]
8. "Framework Design Guidelines"
9. "WCF" by Juvy Lowy [Advanced stuff, but excellent]
10. "Pro LINQ Language Integrated Query in C# 2008"