segunda-feira, 10 de outubro de 2016

Erro: what(): locale::facet::_S_create_c_locale name not valid

Após instalar o Driver de SQL para Linux no Debian 8.3 fui testar a conexão ODBC e me deparei com o erro abaixo:

# sqlcmd -S localhost
terminate called after throwing an instance of 'std::runtime_error'
  what():  locale::facet::_S_create_c_locale name not valid
Abortado



Mesmo adicionando o pt_br no locales não funcionou, pesquisando encontrei que é um falha e a condição está setada pra EN.



# locale-gen pt_BR pt_BR.UTF-8 en_US en_US.UTF-8
Generating locales (this might take a while)...
  en_US.ISO-8859-1... done
  pt_BR.ISO-8859-1... done
  pt_BR.UTF-8... done
Generation complete.
 


# dpkg-reconfigure locales
//Coloque EN_US.UTF-8 como padrão
Generating locales (this might take a while)...
  en_US.ISO-8859-1... done
  en_US.UTF-8... done
  pt_BR.ISO-8859-1... done
  pt_BR.UTF-8... done
Generation complete.




Execute o teste novamente e agora irá conseguir conexão validar.
 

#sqlcmd -S localhost
Sqlcmd: Error: Microsoft ODBC Driver 13 for SQL Server : Login timeout expired.
Sqlcmd: Error: Microsoft ODBC Driver 13 for SQL Server : TCP Provider: Error code 0x274D.
Sqlcmd: Error: Microsoft ODBC Driver 13 for SQL Server : A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible. Check if instance name is correct and if SQL Server is configured to allow remote connections. For more information see SQL Server Books Online..



quarta-feira, 20 de julho de 2016

FortiGate - VPN IPSec x Client IPSec no Linux ( Debian )

Fortinet não fornece o Forticlient para Linux, procurando na internet encontrei algumas alternativas, porém nenhuma foi estável.

Durante a procura sobre algo que funcione legal, encontrei o projeto Shrew https://www.shrew.net/home

Instalação das dependências:

sudo apt-get install cmake libqt4-core libqt4-dev libqt4-gui libedit-dev libssl-dev checkinstall flex bison

Download da última versão:
 
wget https://www.shrew.net/download/ike/ike-2.2.1-release.tbz2

Extraindo

tar xvfvj ike-2.2.1-release.tbz2

Acesse a pasta e execute o cmake, no README.TXT sobre o procedimento.

cd ike
cmake -DCMAKE_INSTALL_PREFIX=/usr -DQTGUI=YES -DETCDIR=/etc -DNATT=YES 

checkinstall -y

make

sudo make install

cd /source/iked/

mv iked.conf.samp /etc/iked.conf


Execute o shrew 

# iked

ii : created ike socket 0.0.0.0:500
ii : created natt socket 0.0.0.0:4500
## : IKE Daemon, ver 2.2.1
## : Copyright 2013 Shrew Soft Inc.
## : This product linked OpenSSL 1.0.1t  3 May 2016





Execute a interface gráfica do Shrew
# qikea

Para conseguir acessar a VPN IPSec do FortiGate entre com as seguintes informações.

Clique em ADD

Guia General

Remote Host

Host Name or IP Address = IP do FortiGate

Port = 500
Auto Configuration = Ike config pull

Local Host

Address Method = Use a Virtual adapter and assigned address
Marque a caixa de seleção = Obtain Automatically

Guia Client

Firewall Options

Nat Traversal = enable
Nat Traversal Port = 4500
Keep-Alive Packet Rate = 15 secs
IKE Fragmentation = disable


Other Options

Marque as 3 caixas de seleção
Enable Dead Peer Detection
Enable IKSAMP Failure Notifications
Enable Client Login Banner


Guia Name Resolution

Marque
Enable DNS
Obtain Automatically


Guia Authentication

Autentication Method = Mutual PSK + XAuth

Local Identity

Identification Type = Fully Qualified Domain Name

Remote Identity = Any

Credentials - Pre Shared Key = Inserir a Senha Compartilhada


Guia Phase 1

Proposal Parameters 

Exchange Type = Aggressive
DH Exchange =group 5
Cipher Algorithm = aes
Cipher Key Length = 128 bits
Hash Algorithm = sha1
Key Life Time Limit = 86400 Secs
Key Life Data Limit = 0 Kbs


Guia Phase 2 

Proposal Parameters

Transform Algorithm = auto
HMAC Algorithm = sha1
PFS Exchange group 5
Compression  Algorithm = deflate
Key Life Time Limit = 43200 Secs
Key Life Data Limite = 5120 KBs


Guia Policy

IPsec Policy Configuration

Policy Generation Level = Auto

Marque - Obtain Topology Automatically or Tunnel All

Clique em Save.

Execute a conexão e entre com o usuário e senha.