Introducing iLandClearing: Land Clearing and Property Management Services

We’re proud to announce iLandClearing, the latest addition to the Matavesi International family of companies.

What iLandClearing Does

iLandClearing helps with property and landscape management jobs big or small, from demolition to pasture management:

  • Land clearing and demolition
  • Pasture management
  • Building and maintaining trails across your property, for fun or function
  • Desert restoration and erosion control

Our Equipment

We run a 75-horsepower Kubota track steer that can work in any climate, with these attachments:

  • Rotary disk mulcher: takes down trees up to 8 inches and mows heavy grass.
  • Hydraulic auger: digs holes 8 to 12 inches in diameter and up to 8 feet deep.
  • Tree stump digger: pulls stubborn roots and pushes trees over.
  • Grapple: bundles brush and vegetation or tears down a building.
  • 74″ flat blade: general grading, moving material, or cutting a pathway.
  • Trencher: a 60″ x 6″ blade for trenches for water, sewer, electrical and data lines.
  • 74″ box blade: ripping and leveling land, great for pathways and food plots.

Schedule a Consultation

Head over to ilandclearing.com to schedule your consultation today, and see our work on the iLandClearing YouTube channel. Storm damage? Read storm cleanup season is here.

Jenkins PowerShell Build Script for NuGet Packages (dotnet pack and push)

Here is a PowerShell build script for creating NuGet packages on a Jenkins server. It restores and builds a .NET solution, packs the project with dotnet pack, and pushes the package to your NuGet server.

I recently had to rewrite my build scripts when moving Jenkins from one server to another, and this time I went all out with variables. The script reads the Jenkins WORKSPACE and JOB_NAME environment variables plus VERSION and SLN_NAME job parameters. Replace the NuGet path, server URL and API key placeholders with your own. See also multi-project build scripts for Jenkins.



Write-Host "This Script is for Compiling Nuget Packages"

# Print environment details
Write-Host "VERSION                : $env:VERSION"
Write-Host "WORK SPACE PATH        : $ENV:WORKSPACE"
$version = "$env:VERSION"

# Define solutionName, solutionDir, projectDir, and projectName
$solutionName = $env:SLN_NAME
Write-Host "SOLUTION NAME          : $solutionName"
$solutionDir = $ENV:WORKSPACE
Write-Host "SOLUTION DIRECTORY     : $solutionDir"
$projectDir = "$ENV:WORKSPACE\$ENV:JOB_NAME"
Write-Host "PROJECT DIRECTORY      : $projectDir"
$projectName = $ENV:JOB_NAME
Write-Host "PROJECT NAME           : $ENV:JOB_NAME"

# Define flags for nuget operations (not currently utilized properly except for display)
$nugetPack = $true
Write-Host "NUGET PACK             : $nugetPack"
$nugetDeploy = $true
Write-Host "NUGET DEPLOY           : $nugetDeploy"

# Target framework (only utilized for display)
$framework = "net8.0"
Write-Host "TARGET FRAMEWORK       : $framework"

# Change to the $ENV:Workspace (ensure that we are in the workspace directory)
cd $ENV:Workspace
Write-Host "CURRENT DIRECTORY           : $ENV:Workspace"

# Define NUGET paths, csproject name and directory, and NUGET Server URL and API Key
$nugetEXE = D:\build_tools\"your nuget location"\nuget.exe
$csprojectPath = "$projectDir\$ENV:JOB_NAME.csproj"
Write-Host "PROJECT PATH           : $csprojectPath"
$nugetPackageDir = "$solutionDir\nupkgs"
Write-Host "NUGET PACKAGE DIRECTORY: $nugetPackageDir"
$nugetPublishDir = "$solutionDir\publish"
Write-Host "NUGET PUBLISH DIRECTORY: $nugetPublishDir"
$NugetServer = "https://"your nuget package server"/nuget"
Write-Host "NUGET SERVER URL       : $NugetServer"
$NugetServerKey = "your nuget server key"
Write-Host "NUGET SERVER KEY       : $NugetServerKey"

# Clean and Create necessary directories
if (Test-Path $nugetPackageDir) {
    Write-Host "DOTNET BUILD: Delete Directory $nugetPackageDir"
    Remove-Item -Path $nugetPackageDir -Recurse -Force
}

Write-Host "DOTNET BUILD: Create Directory $nugetPackageDir"
New-Item -ItemType Directory -Force -Path $nugetPackageDir

if (Test-Path $nugetPublishDir) {
    Write-Host "DOTNET BUILD: Delete Directory $nugetPublishDir"
    Remove-Item -Path $nugetPublishDir -Recurse -Force
}

Write-Host "DOTNET BUILD: Create Directory $nugetPublishDir"
New-Item -ItemType Directory -Force -Path $nugetPublishDir

# Define the Solution location
$slnPath = "$solutionDir\$solutionName.sln"
Write-Host "Solution Path         : $slnPath"
# Run dotnet restore
Write-Host "DOTNET BUILD: dotnet restore $slnPath"
dotnet restore $slnPath -v q

# Run dotnet build
Write-Host "DOTNET BUILD: dotnet build $csprojectPath -c Release --version-suffix $version --verbosity quiet"
dotnet build $csprojectPath -c Release --version-suffix $version --verbosity quiet

# Change to the $projectDir (ensure that we are in the project directory)
cd $projectDir
Write-Host "CURRENT DIRECTORY           : $projectDir"

# Run nuget pack
Write-Host "DOTNET BUILD: dotnet pack -c Release --no-restore -o $nugetPackageDir --version-suffix $version --verbosity quiet"
dotnet pack -c Release --no-restore -o $nugetPackageDir --version-suffix $version --verbosity quiet

# Display completed tasks
Write-Host "DOTNET BUILD: Completed Tasks"

# Define the NuGet Package Name
$NugetPackageName = "$ENV:JOB_NAME.$version.nupkg"
Write-Host "NUGET: Nuget Package Name: $NugetPackageName"

#Change to the $nugetPackageDir (ensure that we are in the NUPKG directory)
cd $nugetPackageDir
Write-Host "CURRENT PATH           : $nugetPackageDir"
  
# Push the package to the NuGet server
Write-Host "NUGET: Push "$NugetPackageName" -k $NugetServerKey -s $NugetServer"
dotnet nuget push "$NugetPackageName" -k $NugetServerKey -s $NugetServer


# Display completed tasks
Write-Host "NUGET: Completed Tasks"

Stay in Terlingua, Texas: Our Favorite Ghost Town Rental Near Big Bend

We love to visit the West Texas Desert and stay with our friends in Terlingua, Texas at The Terlingua Ghostown Rentals. Right at the entrance to the Ghosttown, you’ll see https://terlinguaghosttownrentals.com/ — the staff is friendly and you’ll be close to everything the desert has to offer!

A Quick History of Terlingua

Terlingua’s name is thought to come from the Spanish phrase for “three tongues,” a nod to the mix of Native American, Spanish, and English speakers who once passed through the area. The settlement got its start as a small village along Terlingua Creek, but everything changed in the 1880s when prospectors discovered cinnabar, the mineral used to produce mercury (also known as quicksilver).

Chicago businessman Howard Perry recognized the value of the deposits and founded the Chisos Mining Company in 1903, turning Terlingua into the largest mercury-producing district in Texas. At its peak, the town supported a population in the thousands, complete with a company store, a school, and the Terlingua Cemetery that still draws visitors today. But mercury demand faded after World War II, the mine went bankrupt, and by the late 1940s most residents had moved on, leaving the town to earn its “ghost town” name.

Terlingua didn’t stay quiet forever. Starting in the 1960s and 70s, river guides, artists, and other desert-loving transplants began moving into the old ruins, restoring buildings and breathing new life into the community. Today it’s a small, tight-knit outpost known for its chili cook-offs, star parties, and a laid-back frontier spirit that still echoes its mining-camp roots.

Big Bend National Park, Just Down the Road

Terlingua sits right at the doorstep of Big Bend National Park, one of the most remote and least-visited parks in the country — and that’s part of the appeal. Established in 1944, Big Bend was the first national park in Texas and remains the only one in the country to contain an entire mountain range within its boundaries, the Chisos Mountains.

The park spans over 800,000 acres of Chihuahuan Desert along the Rio Grande, which forms the border with Mexico and has carved dramatic canyons like Santa Elena, Mariscal, and Boquillas over millions of years. Elevations swing from around 1,850 feet near the river up to over 7,800 feet at Emory Peak, which makes for wildly different landscapes and temperatures depending on where you’re standing. It’s also one of the best places in the country for stargazing, thanks to an International Dark Sky designation and some of the darkest night skies left in the lower 48.

Whether you’re here for the mining history, the hiking and canyons, or just the quiet of the desert at night, staying in Terlingua puts you close to all of it. Come visit us at Terlingua Ghostown Rentals!

Fix Schannel Fatal Alert 40 and 70 Errors (FipsAlgorithmPolicy)

Windows was logging Schannel fatal alert 40 and fatal alert 70 errors. This turned out to be related to the System cryptography: Use FIPS compliant algorithms Group Policy setting, even though that policy was disabled.

The Cause

Microsoft’s documentation says this GPO controls the registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy

On the affected machine, that value was still set to 1 (FIPS mode on), despite the policy being disabled.

The Fix

I created a GPO at the workstation level with a registry preference (action: Update/Replace) on HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa that sets FipsAlgorithmPolicy to 0. After the next reboot, the machine stopped generating the Schannel errors.

Related: disabling SSL 3.0 in the SCHANNEL registry settings on IIS.

Default Usernames and Passwords for SAN, Storage and Virtualization Gear (EMC, VMware, Cisco, HP, Pure)

Here is a reference list of factory default usernames and passwords for SAN, storage, server and virtualization products from EMC, HP, Cisco, Pure Storage, VMware, Trend Micro, IBM, Citrix and others. These are the vendor-documented defaults for first login. Change them as soon as a device or appliance is deployed.

EMC Secure Remote Support (ESRS) Axeda Policy Manager Server:

Username: admin
Password: EMCPMAdm7n
EMC VNXe Unisphere (EMC VNXe Series Quick Start Guide, step 4):

Username: admin
Password: Password123#
EMC vVNX Unisphere:

Username: admin
Password: Password123#
NB You must change the administrator password during this first login.
EMC CloudArray Appliance:

Username: admin
Password: password
NB Upon first login you are prompted to change the password.
EMC CloudBoost Virtual Appliance:
https://:4444

Username: local\admin
Password: password
NB You must immediately change the admin password.
$ password
EMC Ionix Unified Infrastructure Manager/Provisioning (UIM/P):

Username: sysadmin
Password: sysadmin
EMC VNX Monitoring and Reporting:

Username: admin
Password: changeme
EMC RecoverPoint:

Username: admin
Password: admin
Username: boxmgmt
Password: boxmgmt
Username: security-admin
Password: security-admin
EMC XtremIO:

XtremIO Management Server (XMS)

Username: xmsadmin
password: 123456 (prior to v2.4)
password: Xtrem10 (v2.4+)
XtremIO Management Secure Upload

Username: xmsupload
Password: xmsupload
XtremIO Management Command Line Interface (XMCLI)

Username: tech
password: 123456 (prior to v2.4)
password: X10Tech! (v2.4+)
XtremIO Management Command Line Interface (XMCLI)

Username: admin
password: 123456 (prior to v2.4)
password: Xtrem10 (v2.4+)
XtremIO Graphical User Interface (XtremIO GUI)

Username: tech
password: 123456 (prior to v2.4)
password: X10Tech! (v2.4+)
XtremIO Graphical User Interface (XtremIO GUI)

Username: admin
password: 123456 (prior to v2.4)
password: Xtrem10 (v2.4+)
XtremIO Easy Installation Wizard (on storage controllers / nodes)

Username: xinstall
Password: xiofast1
XtremIO Easy Installation Wizard (on XMS)

Username: xinstall
Password: xiofast1
Basic Input/Output System (BIOS) for storage controllers / nodes

Password: emcbios
Basic Input/Output System (BIOS) for XMS

Password: emcbios
EMC ViPR Controller :
http://ViPR_virtual_ip (the ViPR public virtual IP address, also known as the network.vip)

Username: root
Password: ChangeMe
EMC ViPR Controller Reporting vApp:
http://:58080/APG/

Username: admin
Password: changeme
EMC Solutions Integration Service:
https://:5480

Username: root
Password: emc
EMC VSI for VMware vSphere Web Client:
https://:8443/vsi_usm/

Username: admin
Password: ChangeMe

Note:
After the Solutions Integration Service password is changed, it cannot be modified.
If the password is lost, you must redeploy the Solutions Integration Service and use the default login ID and password to log in.

EMC Avamar Backup Service

username: admin
password: changeme
openSSH key
ssh-agent bash
ssh-add ~admin/.ssh/admin_key
Password: P3t3rPan

Pure Storage Arrays

Username: pureuser
Password: pureuser
Cisco Integrated Management Controller (IMC) / CIMC / BMC:

Username: admin
Password: password
Cisco UCS Director:

Username: admin
Password: admin
Username: shelladmin
Password: changeme
Hewlett Packard P2000 StorageWorks MSA Array Systems:

Username: admin
Password: !admin (exclamation mark ! before admin)
Username: manage
Password: !manage (exclamation mark ! before manage)
IBM Security Access Manager Virtual Appliance:
Username: admin
Password: admin
VCE Vision:

Username: admin
Password: 7j@m4Qd+1L
Username: root
Password: V1rtu@1c3!
VMware vSphere Management Assistant (vMA):

Username: vi-admin
Password: vmware
VMware Data Recovery (VDR):

Username: root
Password: vmw@re (make sure you enter @ as Shift-2 as in US keyboard layout)
VMware vCenter Hyperic Server:
https://Server_Name_or_IP:5480/

Username: root
Password: hqadmin
https://Server_Name_or_IP:7080/

Username: hqadmin
Password: hqadmin
VMware vCenter Chargeback:
https://Server_Name_or_IP:8080/cbmui

Username: root
Password: vmware
VMware vCenter Server Appliance (VCSA) 5.5:
https://Server_Name_or_IP:5480

Username: root
Password: vmware
VMware vCenter Operations Manager (vCOPS):

Console access:

Username: root
Password: vmware
Manager:
https://Server_Name_or_IP

Username: admin
Password: admin
Administrator Panel:
https://Server_Name_or_IP/admin

Username: admin
Password: admin
Custom UI User Interface:
https://Server_Name_or_IP/vcops-custom

Username: admin
Password: admin
VMware vCenter Support Assistant:
http://Server_Name_or_IP

Username: root
Password: vmware
VMware vCenter / vRealize Infrastructure Navigator:
https://Server_Name_or_IP:5480

Username: root
Password: specified during OVA deployment
VMware ThinApp Factory:

Username: admin
Password: blank (no password)
VMware vSphere vCloud Director Appliance:

Username: root
Password: vmware
VMware vCenter Orchestrator :
https://Server_Name_or_IP:8281/vco – VMware vCenter Orchestrator
https://Server_Name_or_IP:8283 – VMware vCenter Orchestrator Configuration

Username: vmware
Password: vmware
VMware vCloud Connector Server (VCC) / Node (VCN):
https://Server_Name_or_IP:5480

Username: admin
Password: vmware
Username: root
Password: vmware
VMware vSphere Data Protection Appliance:

Username: root
Password: changeme
VMware HealthAnalyzer:

Username: root
Password: vmware
VMware vShield Manager:
https://Server_Name_or_IP

Username: admin
Password: default
type enable to enter Privileged Mode, password is ‘default’ as well
Teradici PCoIP Management Console:

The default password is blank
Trend Micro Deep Security Virtual Appliance (DS VA):

Login: dsva
password: dsva
Citrix Merchandising Server Administrator Console:

User name: root
password: C1trix321
VMTurbo Operations Manager:

User name: administrator
password: administrator
If DHCP is not enabled, configure a static address by logging in with these credentials:
User name: ipsetup
password: ipsetup
Console access:
User name: root
password: vmturbo

How to Install the Check_MK Agent on Red Hat / CentOS 6 Linux

Here are the simple steps to install the Check_MK agent on a Red Hat (or CentOS) 6.x Linux server. Replace %checkmkurl% with the address of your Check_MK server.

1. Install xinetd and Add the Agent Service

Save the Check_MK xinetd config file as /tmp/xinetd.conf, then:

yum -y install xinetd
cd /tmp
cp xinetd.conf /etc/xinetd.d/check_mk

2. Download and Install the Agent

wget http://%checkmkurl%/check_mk/agents/check_mk_agent.linux
cp check_mk_agent.linux check_mk_agent
chmod 776 check_mk_agent
cp /tmp/check_mk_agent /usr/bin/check_mk_agent

3. Add the Inventory Plugin

mkdir /usr/lib/check_mk_agent
mkdir /usr/lib/check_mk_agent/plugins
cd /usr/lib/check_mk_agent/plugins
wget http://%checkmkurl%/check_mk/agents/plugins/mk_inventory.linux
cp mk_inventory.linux mk_inventory.sh
chmod 776 mk_inventory.sh

4. Restart xinetd

/etc/init.d/xinetd restart

Running Debian? See installing the Check_MK agent on Debian Linux.

Check_MK Agent xinetd Configuration File (/etc/xinetd.d/check_mk)

This is the xinetd configuration for the Check_MK Linux agent. Save it as /etc/xinetd.d/check_mk. It runs the agent on TCP port 6556 whenever your monitoring server connects. Before you use it, replace %YOUR IP ADDRESSES HERE!!!% on the only_from line with the IP address(es) of your monitoring server, so no one else can query the agent.

For the full install steps, see installing the Check_MK agent on Red Hat Linux.

# This file is part of Check_MK (GNU General Public License v2).
# Copyright Mathias Kettner 2014. The official homepage is at http://mathias-kettner.de/check_mk.

service check_mk
{
type = UNLISTED
port = 6556
socket_type = stream
protocol = tcp
wait = no
user = root
server = /usr/bin/check_mk_agent

# If you use fully redundant monitoring and poll the client
# from more then one monitoring servers in parallel you might
# want to use the agent cache wrapper:
#server = /usr/bin/check_mk_caching_agent

# configure the IP address(es) of your Nagios server here:
only_from = 127.0.0.1 %YOUR IP ADDRESSES HERE!!!%

# Don't be too verbose. Don't log every check. This might be
# commented out for debugging. If this option is commented out
# the default options will be used for this service.
log_on_success =

disable = no
}

Microsoft IIS: How to Disable SSL 3.0 (POODLE) in the Registry

SSL 3.0 is insecure and should be turned off on any IIS web server. Here’s how to disable it through the registry on Windows Server 2008 R2 or 2012. For background, see the SSL 3.0 information disclosure vulnerability.

Step-by-Step

  1. Open the Registry Editor as administrator: on the Start screen type regedit.exe, right-click it, and click Run as administrator.
  2. Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols.
    SCHANNEL Protocols key in the Registry Editor
  3. Right-click Protocols and click New > Key. Name the key SSL 3.0.
    Creating the SSL 3.0 key
  4. Right-click the new SSL 3.0 key, click New > Key, and name it Client.
    Creating the Client key under SSL 3.0
  5. Right-click SSL 3.0 again, click New > Key, and name it Server.
    Creating the Server key under SSL 3.0
  6. Under SSL 3.0, right-click Client, click New > DWORD (32-bit) Value, and name it DisabledByDefault.
    Adding the DisabledByDefault DWORD
  7. Double-click DisabledByDefault, set Value data to 1, and click OK.
    Setting DisabledByDefault to 1
  8. Under SSL 3.0, right-click Server, click New > DWORD (32-bit) Value, and name it Enabled.
    Adding the Enabled DWORD under Server
  9. Double-click Enabled, leave Value data at 0, and click OK.
    Enabled left at 0
  10. Restart the server.

SSL 3.0 is now disabled. To confirm it, see this quick way to test for SSLv3.

Forgot Your RSA SecurID Super Admin Password? Reset It with rsautil restore-admin

If you’ve forgotten the password for the super admin account on an RSA SecurID Authentication Manager appliance, you can recover by creating a temporary super admin account (for example, tempAdmin) from the command line, then using it to reset the original account’s password.

Create a Temporary Super Admin

Run the super admin restoration utility from the CLI or a serial console:

  1. Log in with the emcsrv account and enter its password when prompted.
  2. Switch to root, entering the password when prompted.
  3. Change to the directory that holds the restoration utility and create the temporary account.
% sudo su
% cd /usr/opt/rsa/am/utils
% ./rsautil restore-admin -u [tempadmin_name] -p [password]

Enter Master Password: **********
A temporary admin will be created with the user ID 'tempAdmin'.
Are you sure you want to continue (Y/N): Y
Admin created successfully.
  • [tempadmin_name] is the temporary super admin account to create.
  • [password] is the password for that temporary account.

Reset the Original Password

  1. Log into the Security Console with the temporary account.
  2. Go to Identity > Users > Manage Existing and search for the super admin account whose password needs resetting.
  3. From the context menu, select Edit and scroll to the Password section.
  4. Enter the new password for the super admin account and click Save.

Note: The temporary super admin account expires after 24 hours.