Shalawat Ya Laqalbin

كتاب مولد سمط الدرار

حبيب على بن محمد بن حسين بن الحبشى

يَا لَقَلبٍ سُرُو رُهُ قَد تَوَا لى     بِحَبِيبٍ عَمَّ الاَنَا مَ نَوَالاَ

ya laqolbin suruuruhu qod tawala             bihabibin ‘ammal anaa ma nawaala

جَلَّ مَن شَرَّفَ الوُجُودَ بِنورِ     غَمَرَ الكَونَ بَهجَةً وَجَمَالاَ

jalla man syarrofal wujuuda binuri              ghomarol kauna bahjatawwa jamaala

قَد تَرَقَّ فِى الحُسنِ اَعلى مَقَامِ     وَتَنَا هى فِى مَجدِهِ وَتَعَالى

qod taroqqo fil husni a’ala maqoomi           wa tana ha fi majdihi wa ta’aala

لاَحَظَتهُ العيُونُ فِيمَا اجتَلَتهُ      بَشَرًا كاَ مِلاً يُزِيحُ الضَّلاَلاَ

la hadzothul ‘uyunu fimajtalathu                    ba syaron kamilayyuzi hudhdholala

وَهوَ مِن فَوقِ عِلمِ مَا قَد رَاَتهُ     رِفعَةً فِى شُؤُو نِهِ وَكَمَالاَ

wahwa min fauqi ‘ilmi ma qod roathu            rif’atan fi syu’uunihi wa kamala

Artinya:

Dari kitab maulid simtuddurar habib ali bin muhammad bin husain al habsyi

“bahagia dan sukaria berdatangan merasuki kalbu

menyambut datangnya kekasih Allah pembawa anugerah bagi seluruh manusia

Maha Agung Dia yang telah memuliakan wujud ini dengan nur berkilauan

meliputi semuanya dengan kerianan dan kecantikan

mencapai tingkat keindahan tertinggi

menjulang mengangkasa dengan kemuliaanya

mata memandang penuh damba

bentuk insan sempurna pengikis segala yang sesat

meskisesungguhnya keluhurandan kesempurnaannya

melampaui segala yang bisa dicapai pengetahuan yang manapun jua”

Lirik Sholatun Bis Salaam ( صَلاَةٌ بِالسَّلاَم)

صَلاَةٌ بِالسَّلاَم

صَلاَةٌ بِالسَّلاَمِ المُبِينِ     لِنُقطَةِ التَّعيِينِ يَاغَرَامِى

Sholatum bissalamil mubiini      linuqtotitta’yiini ya ghoromi

نَبِيٌّ كَانَ الصلَ التَّكوِينِ     مِن عَهدِ كُن فَيَكُون يَاغَرَامِي

Nabiyyun kana ashlattakwiini            min ‘ahdikun fayakun ya ghoromi

اَيَّامَن جَاءَنَا حَقًّا نَذِيرِ     مُغِيثًامُسبِلا سُبُلَ الرَّشَادِ

Ayyaman ja ana haqqon nadziri       mughiitsam musbilan subularrosyaadi

رَسُولُ اللهِ يَاضَاوِي الجَبِينِ     وَيَامَن جَاءَ بِالحَقِّ المُبِينِ

Rasulullahiya dhowil jabiini      wa ya man ja a bil haqqil mubiini

صَلاَةُ لَم تَزَل تُتلى عَلَيكَ     كَمِعطَارِ النِّسِيمِ تُهدى الَيك

sholatullamtazal tutla alaika         kami’thorinnasiimi tuhda ilaika

Transparent Data Encryption in SQL Server 2008

Problem
Pada saat melakukan backup database SQL Server, sebenarnya file backup tersebut masih berupa plain text, dimana kalau dibuka di wordpad atau sejenisnya, masih akan terlihat data record aslinya. Nah, kebutuhannya adalah bagaimana agar file hasil backup tersebut aman tidak bisa dibuka sembarangan, dan yang lebih penting lagi adalah tidak bisa direstore di sembarang server.

Solusi

Kini SQL Server 2008 dilengkapi teknologi yang disebut "Transparent data Encryption" (TDE). TDE ini akan mengaktifkan enkripsi di SQL Server dengan menggunakan algoritma Enkripsi seperti AES dan RSA dengan teknik asymmetric key.

Disebut transparent karena begitu database telah dienkripsi dengan menginstall certificate di database tersebut, maka data yang tersimpan di database, backup file, tempdb dan seterusnya otomatis ter-enkripsi dengan aman.

Langkah-langkah konfigurasi:

- Bikin master key di database master

USE master
go
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'my_Pa$$w0rd'

- Kemudian membuat server-base certificate yang digunakan untuk enkripsi database

CREATE CERTIFICATE NorthwindCert
WITH SUBJECT =' Certificate untuk Northwind Database'

- Selanjutnya, masuk ke database yang akan dienkripsi

USE Northwind
GO
CREATE DATABASE ENCRYPTION KEY
WITH ALGORITHM = AES_128
ENCRYPTION BY SERVER CERTIFICATE NorthwindCert
GO

- Kemudian mengaktifkan enkripsi di database Northwind

ALTER DATABASE Northwind
SET ENCRYPTION ON

- Test dengan melakukan backup database

BACKUP DATABAE Northwind
TO DISK='C:\Northwind_encrypted.bak'
WITH INIT, STATS=10

- Lakukan restore Backup tersebut ke Server Lain, hasilnya .......
Tra..da... anda akan mendapat pesan sebagai berikut :
"Restore failed for Server XXX (Microsoft.SqlServer.SmoExtended)
Additional Information :
System.Data.SqlClient.SqlError : cannot find server certificate with thumprint bla..bla.."

Error diatas muncul karena pada saat restore, system akan mencari Certificate yang sebelumnya sudah ditanam di Database Northwind yang otomatis juga akan ikut di file backup.

Solusinya

Jika mendapatkan Error seperti di atas, lakukan backup Certificate terlebih dahulu di server sebelumnya yang diinstal certificate untuk database Northwind

USE master
GO
BACKUP CERTIFICATE NorthwindCert
TO FILE='C:\NorthwindCert_File.cer'
WITH PRIVATE KEY (FILE = 'C:\NortwindCert_Key.pvk',
ENCRYPTION BY PASSWORD = 'my_Pa$$w0rd'

Kemudian di server Tujuan yang akan digunakan untuk Restore Database, lakukan


USE MASTER
GO
CREATE MASTER KEY ENCRYPTION BY PASSWORD='EnKrypt3d_Pa$$w0rd'
GO

- Lakukan import Certificate

CREATE CERTIFICATE NorthwindCert
FROM FILE ='c:\NorthwindCert_File.cer'
WITH PRIVATE KEY (FILE= 'C:\NorthwindCert_Key.pvk',
DECRYPTION BY PASSWORD='my_Pa$$w0rd'
GO

- Kemudian lakukan Restore Database, dan hasilnya... tentunya harus berhasil, kalau tidak berarti ada step yang kelewat..

Securing Wireless Network with Windows Server 2008

This Article from Mat's Techblog (http://techblog.mirabito.net.au/)

In this post I’m going to go through the process of securing your wireless network using Windows Server 2008 and the NPS (Network Policy Services) role from start to finish.
Previously, I was using Windows Server 2003 with IAS (Internet Authentication Services) to secure my wireless network, until I recently upgraded all of my servers to Windows Server 2008 – By the way, NPS is the new version and name for IAS.
Here is the TechNet guide which I followed – http://technet.microsoft.com/en-us/library/cc771455.aspx - I will be applying these guidelines to the following environment…

• A Windows Server 2008 machine running AD DS (Active Directory Domain Services)
• A Windows Server 2008 machine running NPS (Network Protection Services) and AD CS (Active Directory Certificate Services)
• A Linksys WAP54G (an entry level wireless access point – you can use any wireless access point that supports RADIUS)

You can run NPS, AD DS and AD CS on the same machine if you want to, but I wouldn’t recommend it (personally, I prefer to keep my domain controllers running only AD DS).
I’m not going to go through the process of installing AD DS as it’s a little out of scope for this post, so we’ll start from having an established domain, and a clean install of Windows Server 2008 on which we will install AD CS and NPS.
The first step is installing AD CS and NPS on your clean Windows Server 2008 install…

1. First, you’ll need to join the server to your existing domain and then restart;
2. After the server restarts, open Server Manager;
3. Click on the Roles node;
4. Click on the Add Roles;
5. On the Server Roles screen, select Active Directory Certificate Services and Network Policy and Access Services;
6. Follow the wizard, selecting Network Policy Server when configuring the Network Policy and Access Services role and leaving the default Certification Authority role service selected for AD CS;
7. Select Enterprise for the setup type for AD CS;
8. Choose Root CA for the CA Type (remember we’re assuming that this is the first Certification Authority in your environment, so if it’s not you either don’t need to install this role, or if you choose you can configure this server as a Subordinate CA instead);
9. Run through the rest of the wizard, making any changes you may wish to, otherwise just leave the defaults as they are appropriate (I changed the CA Common Name to the name of the server, as I think it’s cleaner) – Note that there is a warning at the end of the wizard, stating that the name of this server cannot be changed after installing the AD CS role.

Now that you have a Root CA and an NPS server on your domain, we can start configuring it…

1. Open an MMC console, and go to File -> Add/Remove Snap-in…
2. Add the Certificates snap-in, selecting Computer account for the local computer;
3. Expand Certificates (Local Computers) -> Personal, right click on Certificates and choose Request new certificate;
4. Follow the wizard, choosing Computer for the certificate type and then click the Enroll button, then close MMC;
5. Open the Network Policy Server administrative console from Administrative Tools;
6. Right click on the parent node, NPS (Local) and click Register server in Active Directory – Click OK on the two informational popups;
7. With the NPS (Local) node still selected, choose RADIUS server for 802.1X Wireless or Wired Connections and then click on the Configure 802.1X button;
8. Under Type of 802.1X connections, select Secure Wireless Connections and provide an appropriate name for the policies which will be created as part of this wizard;
9. In the next step, you’ll need to configure a RADIUS client (by the way, RADIUS stands for Remote Authentication Dial In User Service), so click on the Add button;
10. The RADIUS client will be your wireless access point, so for the friendly name type in something to identify the access point (for example, AP01), then provide the IP address or DNS entry for the access point;
11. Click on the Generate radio button, and then click on the Generate button to generate a shared secret – Copy the shared secret to a notepad document, and click OK – Note that on my particular access point, a character limit of 22 characters exists for shared secrets so I had to cut the string down to the acceptable limit, so I would suggest checking for this limitation on your own hardware;
12. Click Next, and then choose Microsoft: Protected EAP (PEAP) and then click on the Configure button (if you get an error message, you probably didn’t follow steps 1 -> 4 correctly);
13. Ensure that the Certificate issued drop down box has the certificate you enrolled in step 4;
14. Click Next, and then click on the Add button to use an Active Directory group to secure your wireless (you should add both the machine accounts and user accounts to this group to allow the machine to authenticate on the wireless before the user logs in);
15. On the next step of the wizard, you can configure VLAN information, otherwise just accept defaults to complete;
16. Restart the Network Policy Server service.

If you expand the Policies node now, you’ll see that the wizard has created a Connection Request Policy and a Network Policy containing the appropriate settings to authenticate your wireless connection – These individual policies can obviously be created manually, but the wizard is an easier method.
You can also remove the less secure authentication method options, and increase the encryption methods in the network policy if you wish (I have configured mine this way)…

1. Under the Network Policies node, bring up the properties of the newly created policy;
2. On the Constraints tab, uncheck all of the checkboxes under Less secure authentication methods;
3. On the Settings tab, click on Encryption and uncheck all boxes except Strongest encryption (MPPE 128-bit);
4. Save the policy and then restart the Network Policy Server service.

With the NPS server configured to accept requests from your wireless access point, you’ll now need to configure the access point to communicate with the NPS servers – These instructions are for my Linksys WAP54G, but will be similar to most access points which support RADIUS…

1. In the web interface for the access point, click on the Wireless tab and assign an appropriate SSID;
2. Click on the Security sub-tab, and set the Security Mode to WPA-Enterprise (if your access point supports WPA2-Enterprise, use this instead);
3. Set the Encryption to AES, and then provide the NPS server IP as the RADIUS Server and the Shared Secret that you saved in step 11 above;
4. Save your settings and restart the access point.

Now your access point should be configured to talk to your NPS server, so all that is left is to configure your clients to connect – The recommended way of doing this, would be to use Group Policy, but the instructions below are for configuring a Windows Vista client – You can easily replicate these actions in a Group Policy under the Security node.
To configure a Windows Vista client which is joined to the domain…

1. Open up the Network and Sharing Center;
2. Click on Connect to a network;
3. Locate the network you have just secured (it should say Security-enabled network next to it) and click the Connect button;
4. It will take a short while to set up the profile and then connect successfully.

You can also configure a few extra settings to speed up the time it takes to connect (it won’t improve the overall speed, only the time it takes to initially connect to the wireless network)…

1. In the Network and Sharing Center, click on Manage wireless networks and then double click the network you set up above;
2. Click the Security tab, and then the Settings button below;
3. The Validate server certificate checkbox should already be selected by default, but you should also select the CA that you set up earlier under the Trusted Root Certification Authorities to speed up the certificate verification process;
4. You can also check the box Do not prompt user to authorize new servers or trusted certification authorities in order to improve the user’s experience.

Some suggestions recommendations…

• Use a security group with the appropriate machine and user accounts as members to secure your network;
• Group Policy is by far the best way to deploy the client side settings, but will obviously require an established domain connection in order to push these settings down to the clients;
• While disabling the SSID of your access point sounds like an increased security measure, it can be a security risk if you are configuring your workstations to actively look for the SSID name – Potential session hijackers could intercept this traffic and set up an SSID for the requested name, unknowingly to the user which would then connect to a potentially malicious network;
• You can vary the encryption type from AES to TKIP if your devices don’t all support AES, although AES is the preferred encryption algorithm;
• If you’re having trouble with your connection, there are a few places you can look to troubleshoot, namely – Local client event logs, the NPS log file which lives in C:WindowsSystem32logfiles and most importantly the Security event logs of the NPS server which contains detailed information about access successes and failures.

Whatsapp Bro.........!

Whatsapp, akhir-akhir ini sering terdengar orang menyebut nama ini. Ya, whatsapp adalah aplikasi messenger yang lagi populer saat ini. Whatsapp berjalan di smartphone dengan basic mirip Blackberry Messenger.
Namun keunggulannya, whatsapp dapat digunakan lintas platform yang memungkinkan bertukar pesan tanpa membayar alias betul-betul Gratis, karena Whatsapp menggunakan data internet yang dapat terhubung lewat Wifi gratisan (di hotspot kantor, cafe dan lainnya) atau koneksi data yang lain seperti 3G (baca: tidak perlu harus langganan dulu).

Awalnya, Whatsapp dibuat untuk pengguna Iphone, kemudian seiring dengan perkembangannya, aplikasi Whatsapp  tersedia juga untuk versi Android, Blackberry dan Symbian.
Sampai pada Novemebr 2010, Whatsapp menduduki posisi peringkat ke 3, aplikasi yang paling laris diunduh melalui Ovi Store Nokia, setelah Swype dan NHL game center premium.

Instalasi dan Pendaftaran
Pertama, download aplikasi Whatsapp melalui website www.whatsapp.com atau langsung melalui market di Iphone, Android, Symbian dan Blackberry.

Kemudian install aplikasi tersebut dan daftarkan nomor telepon dengan tanpa 0 karena menggunakan format internasional.
Yang perlu diingat, nomor telepon yang didaftarkan adalah yang digunakan adalah nomor telepon yang saat itu digunakan di smartphone yang diinstal aplikasi Whatsapp tersebut. Selanjutnya Whatsapp akan mengirimkan kode konfirmasi via SMS dan otomatis akan mengkonfirmasi kode tersebut.

Berikutnya, ini yang menarik, aplikasi Whatsapp akan secara otomatis mendata phonebook untuk menunjukkan siapa-siapa saja yang sudah menggunakan Whatsapp. Jadi berbeda dengan Blackberry Messenger yang menggunakan PIN unik untuk menambahkan daftar teman, Whatsapp cukup menggunakan nomor telepon dan diisikan di Phonebook Handphone. Jadi tanpa add Buddy, tanpa menanyakan ID atau PIN, semua teman yang nomor teleponnya telah terdaftar di phonebook dan telah mendaftar Whatsapp otomatis akan masuk ke dalam Contact Whatsapp.

Penggunaan

Whatsapp dapat digunakan untuk pengguna Iphone, Android, Blackberry dan Symbian (Nokia). Aplikasi ini  menggunakan nomor telepon ponsel sebagai ID Whatsapp. Eksklusifitas yang menjadi alasan orang memakai
Blackberry Messenger karena menggunakan nomor PIN, juga dapat dirasakan di Whatsapp ini. Karena whatsapp hanya dapat digunakan di satu Smartphone untuk satu Nomor Handphone. Sehingga tidak mungkin
menggunakan ID  (nomor Handphone) yang sama di Smartphone yang lain berbarengan.
Begitu sekali diinstall di suatu Smartphone, Whatsapp akan otomatis berjalan tanpa Login atau Loggoff.

Bagaimana kalau ganti Handphone, atau mau ganti ID (nomor Handphone) untuk Whatsapp ini? Caranya adalah uninstall Whatsapp ini, kemudian install lagi aplikasi Whatsapp di handphone yang berbeda atau dengan registrasi nomor telepon yang baru.

Fitur

Whatsapp adalah messenger yang dapat berkirim teks, gambar, video, audio, GPS location, contact, broadcast message, send to Group dan emoticons.

Whatsapp juga dilengkapi dengan tanda pesan terkirim dan sudah dibaca. Tanda Centang 1x artinya terkirim, Centang 2x artinya sudah dibaca. Apabila tidak ada koneksi internet, akan muncul tanda jam yang artinya pengiriman pesan tertunda.

Whatsapp menggunakan teknik push, sehingga aplikasi dapat dimatikan dan hanya aktif jika ada pesan masuk, sehingga menghemat baterai. Karena terintegrasi dengan sistem, Whatsapp tidak butuh login dan loading contact, sehingga transaksi data makin irit.

Akhirnya, siapkah anda berkata "Whatsapp Bro, klo ada yang Asli Hemat, mengapa pilih yang sepertinya Hemat"