User info
First name | Seppe |
Last name | Dejonckheere |
DevOps Program
Acquired rank |
Enabler
|
Points progress |
4233
DevOps Points
|
Here are a few tips to level up your DevOps game and unlock an arsenal of perks and benefits. | |
DevOps attestation | Request your attestation ID and expiry date |
Achievements
|
Questions asked
Answers given
Hi, I think this is related to some Windows/Windows defender setting. Could you verify the 'Check apps and files' setting in Windows Security -> App & Browser control? If this settings is set to...
View QuestionHi, I think your question can be extended to the more general question 'how to securely use secrets in automation scripts' and I think this has somewhat been answered in this thread. The conclusion from...
View QuestionHi, For http: this 'System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 127.0.0.1:80' is usually seen when the firewall does not allow inbound...
View QuestionHi Andrew, The reason cube cannot connect to the DMA is because the (self-signed) certificate you configured is not trusted by your client machine. That's also why you see the security warning in the...
View QuestionHi Daniel, I think the reason the embeded site does work on Firefox but not on Chrome is because of a difference in the default value for the 'SameSite' property of a cookie. In Chrome, if the 'SameSite'...
View QuestionHi, A quick test makes me believe that only lowercase alphanumerical characters (a-z, 0-9) are allowed.
View QuestionHi Rajesh, I believe this is possible by changing the connectionsettings.txt file on the DMA. Cube will retrieve this information to determine how it should connect to the DMA. You can find there necessary...
View QuestionHi, The process of resetting the password differs a bit depending on how the user signs in. We allow users to sign in with their Microsoft, Google, Amazon or LinkedIn account, so the user should reset...
View QuestionHi, Currently, this is not supported. We do have a project on our backlog to map out which services can be moved away from running as Local System in the future, but at the moment it is to early to tell...
View QuestionHi, To answer your first question: It is not possible to specify a custom port for the communication between the CloudGateway and dataminer.services. This communication is HTTPS and WSS based, so we chose...
View QuestionHi, Which DataMiner version are you running? MSV C++ 2005 and 2010 can be uninstalled after upgrading to DataMiner v10.3.9. For .NET, it depends on the DataMiner version, but also on the DxMs that are...
View QuestionHi, We do follow Microsoft's support lifecycles, which means that for all supported DataMiner versions, we support all OS versions that Microsoft supports. So, there are no different OS requirements for...
View QuestionHi, A DMZ network is a network that is isolated form the public internet via a firewall and from the corporate network, also via a firewall. In theory this can be the same firewall with different sets...
View QuestionHi Jochen, I believe DOM data is stored in the elasticsearch/opensearch database (if you're not using StaaS). I would not advise to store credentials/keys in there because that data is not encrypted at...
View QuestionHi Leander, The content of web components is sanitized to prevent the injection of dangerous javascript (cross site scripting). Inline CSS will be sanitized as well because this can potentially be malicous...
View QuestionHi Tiago, If you are running a version of DataMiner that only requires .NET 8 (which you can check here) and if all the DxMs you have installed are up to date you can delete all the older .NET programs....
View QuestionHi, Different .NET versions are not compatible with each other. This means that it's not possible to simply replace .NET 5 or 6 by .NET 8. Instead, we first have to make changes to the software and release...
View QuestionHi, It looks like the cloudgateway is not able to set up a connection to the dataminer.services endpoints because the connection is getting blocked. Could it be that there is a firewall in the network...
View QuestionHi Koen, You are correct that this backdoor does not affect DataMiner. The backdoor specifically targets sshd for linux. This does mean that customers with Cassadra & Opensearch installations might...
View QuestionHi Koen, you are correct that DataMiner doens't use any of the components. ElasticSearch doesn't use ActiveMQ since it's not listed on their dependencies list nor did they release a securit advisory....
View QuestionHi Alberto, .NET Remoting is still the default method of communication for all DataMiner versions which are currently supported. However, we recommend switching to gRPC when running DataMiner 10.3.6/10.3.0...
View QuestionHi, DataMiner requires you to install .NET using the .NET hosting bundle installer. This should install both the .NET and ASP.NET runtime as well as the IIS component, so I would recommend to run that...
View QuestionHi, The HTTP timeout exception means that Cube was not able to retrieve the connectionsettings.txt file. Since you made some configuration changes in IIS, would it be possible to share which bindings...
View QuestionHi, Depending on where you have the Cassandra instance installed, different versions can be used. If you are running Cassandra on Windows, it's not possible to update to Cassandra 4.0 or newer. If you...
View QuestionHi Francisco, If the element on which the actions are performed is determined by user input, could it be that the user running the script has permissions on some elements but lacks them on others, causing...
View QuestionHi Jonas, The grid component allows some html tags for markup purposes. It seems to me like the xml tags are being interpreted as html tags here, so they don't show up as raw text (and they probably don't...
View QuestionHi, My guess is that the device you're trying to connect to, does not accept TLS 1.0 and TLS 1.2. Would it be possible to verify which TLS versions the device does accept? Since the other Agent, running...
View QuestionHi Ryan, My guess is that the ConnectionTester is telling you that it's connecting to the cloudgateway at <IP> over NATS (port 5100) in order to validate whether that cloudgateway has a connection...
View QuestionHi I tested which settings get applied when a User is in multiple groups. It seems like the settings that get applied depend on the order in which the User became member of a group. The first group where...
View QuestionHi, I don't know if there is some 'catch-all' option, but I have achieved a similar thing in the past by using an inverted logic like this: Kr,
View QuestionHi, As far as I'm aware, DataMiner does not rely on ICMP 13 and 14, as time synchronization across the cluster should be done by NTP.
View QuestionHi Oscar, I remember investigating this behaviour a while back for a similar dojo question. Does the answer for that question provide give you sufficient information? Kind regards,
View QuestionHi, I don't know if DataMiner 9.6 can handle Element polling through HTTPS, but I think it is possible to gain more insight by using Wireshark and looking at the network traffic that is generated. If...
View QuestionHi James, I had a look at how the BPA checks for the redirection and it does so by making an http call to http://127.0.0.1 and verifying the returned http status code. This does not work in your case,...
View QuestionHi Catarina, I believe that the webpages only make use of GET, POST and HEAD methods. However, future modules (DataAPI, Scripted Connectors, ...) exposing a REST API might require the use of PUT and DELETE...
View QuestionHi, Hi, this error message indicates that Cube somehow cannot connect towards DataMiner. Can you verify whether you can ping the DMA? When connecting over https, this error is shown when Cube fails to...
View QuestionAfter investigating wireshark traces, it looks like the Master server does not support TLSv1.1 or any of the ciphers the client (DMA) supports because the Master server immediately sends a TCP reset message...
View QuestionSomething like this would be possible by using custom HTML in the web component with the following content: <form action="https://www.w3docs.com/" method="get" target="_blank" rel="noopener noreferrer">...
View QuestionHi, I'm assuming you are using the powershell version of the script because you have to provide the paths to the keytool and openssl. I had a look at the script and noticed it was not properly formatting...
View QuestionHi, This exception can have multiple root causes so would it be possible to share more of the logging? If cube is configured to only attempt HTTPS, the lack of HTTPS configuration on DataMiner side could...
View QuestionHi, If the CN and the SANs are different in the new certificate compared to the self-signed one, you might need to change some configuration in DataMiner (maintenancesettings.xml) and IIS (the binding)....
View QuestionHi, Towards the end user, it may look like the DMS has a single webpage, but actually, every agent has it's own standalone webpage. So, every time the DNS cache expires and a new DNS query is executed,...
View QuestionHi, I can't help you with the question about a DMA in a different network behind a NAT, but I can help you with your question about encrypting all communication in a DMS. I will start by recommending...
View QuestionHi Alberto, Windows NT 6.2 refers to both Windows 8 and Windows Server 2012. Windows 8 is already end of life. Windows Server 2012 will go end of life in October. DataMiner follows Microsoft's lifecycle...
View QuestionHi, After setting or changing environment variables (as done in step 16), you should open a new PowerShell prompt in step 17 for the changes to take effect. This was not really clear in the documentation,...
View QuestionHi Zean, To access the Dashboards and Monitoring app via dataminer.services you have to be logged in to dataminer.services. For Cube, I'm assuming you mean the remote cube access as anounced here. This...
View Question