Bob's Blog

virtuallyGhetto: How to Send vCenter Alarm Notification to Growl

2011-08-15T12:33:00.000-07:00

virtuallyGhetto: How to Send vCenter Alarm Notification to Growl: "- Sent using Google Toolbar"

2011-07-13T07:23:00.001-07:00

http://arstechnica.com/apple/guides/2011/07/making-a-clean-start-with-lion-migrating-without-assistance.ars?utm_source=rss&utm_medium=rss&utm_campaign=rss

ActiveDirectoryWinbindHowto

2011-06-03T10:41:00.001-07:00

http://wiki.samba.org/index.php/Samba_%26_Active_Directory
https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto

Pedro Sauer Sit up sweep Technique

2011-05-26T22:26:00.000-07:00

http://youtu.be/rY5eGjpGxAk

Epoch Converter - Unix Timestamp Converter

2011-04-11T12:20:00.001-07:00

Epoch Converter - Unix Timestamp Converter: "- Sent using Google Toolbar"

Python Excel

2011-04-11T12:20:00.000-07:00

Python Excel: "- Sent using Google Toolbar"

2011-04-07T00:03:00.000-07:00

import json

class Subscriber(object):
    firstname = None
    lastname = None


class Post(object):
    author = None
    title = None


def decode_from_dict(cls,vals):
    obj = cls()
    for key, val in vals.items():
        setattr(obj, key, val)
    return obj


SERIALIZABLE_CLASSES = {'Subscriber': Subscriber,
                        'Post': Post}

def decode_object(d):
    for field in d:
        if field in SERIALIZABLE_CLASSES:
            cls = SERIALIZABLE_CLASSES[field]
            return decode_from_dict(cls, d[field])
    return d


results = '''[{"Subscriber": {"firstname": "Neal", "lastname": "Walters"}},
              {"Post": {"author": {"Subscriber": {"firstname": "Neal",
                                                  "lastname": "Walters"}}},
                        "title": "Decoding JSON Objects"}]'''

HOW TO: Configuring authentication against Windows Domain - Ubuntu Forums

2011-04-01T15:29:00.000-07:00

HOW TO: Configuring authentication against Windows Domain - Ubuntu Forums: "- Sent using Google Toolbar"

2011-04-01T15:24:00.001-07:00

ActiveDirectoryWinbindHowto

https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto

The Absolute Minimum Every Software Developer Absolutely, Positively Must Know About Unicode and Character Sets (No Excuses!) - Joel on Software

2011-03-30T23:02:00.000-07:00

The Absolute Minimum Every Software Developer Absolutely, Positively Must Know About Unicode and Character Sets (No Excuses!) - Joel on Software: "- Sent using Google Toolbar"

2011-03-17T11:45:00.000-07:00

How do I reset the ReadyNAS to factory default?

Resetting the ReadyNAS back to factory default will wipe out all configuration and data. Please understand this before continuing. If you choose to continue, here are the steps:

Power down the ReadyNAS.
Locate the reset pinhole.

ReadyNAS 600/X6: the pinhole is on the back in the lower left corner.
ReadyNAS 1000S/1100: the pinhole is in the front.
ReadyNAS NV/NV+/Duo: the pinhole is next to the USB port in the back.

Get a straightened paper clip and depress the hidden switch in the pinhole while the power is off, and then power on the ReadyNAS, keeping the switch depressed for about 30 secs.
You will see the drive LEDs in the front blink once at about 5 secs and again at about 30 secs. Release the switch at the 2nd blink.

VMware KB: Installing VMware Update Manager 4.1 fails with the error: Error 25085

2011-03-14T16:05:00.000-07:00

VMware KB: Installing VMware Update Manager 4.1 fails with the error: Error 25085: "Installing VMware Update Manager 4.1 fails with the error: Error 25085

- Sent using Google Toolbar"

Chapter 38. The Samba Checklist

2011-03-02T20:24:00.000-08:00

Chapter 38. The Samba Checklist: "Chapter 38. The Samba Checklist

- Sent using Google Toolbar"

Ubuntu Bloke: HOWTO: SAMBA + LDAP on 10.04 Lucid

2011-03-01T00:06:00.000-08:00

Ubuntu Bloke: HOWTO: SAMBA + LDAP on 10.04 Lucid: "- Sent using Google Toolbar"

Looks like the blog this was on is no longer available so I'm putting the contents here.

Wow, it has taken me weeks to get this to the point that it seems to be working. The official documentation is horribly broken, but I have finally got what i think is a working solution. I will probably need to tweak this guide as time goes on (see the end of the post for revision history)

PLATFORM:
* Ubuntu Server 10.04 LTS (Lucid)

PREREQUISITES:
* A standard vanilla Ubuntu 10.04 server install.
* An NFS server exporting the users home directorys

Network overview;
* domain name: tuxnetworks.com
* ldap-server 10.1.1.5

Install The Packages

We want to install the OpenLDAP server daemon slapd and ldap-utils, a package containing LDAP management utilities. While we are at it we will also install samba related packages:

sudo apt-get install slapd ldap-utils samba samba-doc libpam-smbpass smbclient smbldap-tools

Notes:
By default slapd is configured with minimal options needed to run the slapd daemon.

The configuration tuxnetworks in the following sections will match the domain name of the server. For tuxnetworks, if the machine's Fully Qualified Domain Name (FQDN) is ldap.tuxnetworks.com, the default suffix will be dc=tuxnetworks,dc=com.

Populating the server

Notes:
OpenLDAP uses a separate directory which contains the cn=config Directory Information Tree (DIT). The cn=config DIT is used to dynamically configure the slapd daemon, allowing the modification of schema definitions, indexes, ACLs, etc without stopping the service.

The backend cn=config directory has only a minimal configuration and will need additional configuration options in order to populate the frontend directory. The frontend will be populated with a "classical" scheme that will be compatible with address book applications and with Unix Posix accounts. Posix accounts will allow authentication to various applications, such as web applications, email Mail Transfer Agent (MTA) applications, etc.

* For external applications to authenticate using LDAP they will each need to be specifically configured to do so. Refer to the individual application documentation for details.

* Remember to change dc=tuxnetworks,dc=com in the following examples to match your LDAP configuration.

First, some additional schema files need to be loaded. In a terminal enter:

sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif
sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif
sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif

Next, create an LDIF file

vi ~/backend.ldif

With the following contents;

# Load dynamic backend modules
dn: cn=module,cn=config
objectClass: olcModuleList
cn: module
olcModulepath: /usr/lib/ldap
olcModuleload: back_hdb

# Database settings
dn: olcDatabase=hdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {1}hdb
olcSuffix: dc=tuxnetworks,dc=com
olcDbDirectory: /var/lib/ldap
olcRootDN: cn=admin,dc=tuxnetworks,dc=com
olcRootPW: mypassword
olcDbConfig: set_cachesize 0 2097152 0
olcDbConfig: set_lk_max_objects 1500
olcDbConfig: set_lk_max_locks 1500
olcDbConfig: set_lk_max_lockers 1500
olcDbIndex: objectClass eq
olcLastMod: TRUE
olcDbCheckpoint: 512 30
olcAccess: to attrs=userPassword by dn="cn=admin,dc=tuxnetworks,dc=com" write by anonymous auth by self write by * none
olcAccess: to attrs=shadowLastChange by self write by * read
olcAccess: to dn.base="" by * read
olcAccess: to * by dn="cn=admin,dc=tuxnetworks,dc=com" write by * read

* Don't forget to change dc=tuxnetworks,dc=com and olcrootPW to suit your own domain details.

Now add the LDIF to the directory:

sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.ldif

Download this samba config file;

wget http://www.tuxnetworks.com/configs/smb.conf

Edit it to suit your network and then copy the new smb.conf file into place;

sudo cp smb.conf /etc/samba/

Samba needs us to tell it the LDAP admin password

sudo smbpasswd -W

And finally, we restart samba;

sudo service smbd restart

You can test that samba works by using the samba-client (when it asks for roots password just press Enter);

sudo smbclient -L localhost

You should see something like this;

operator@callisto:~$ sudo smbclient -L localhost
Enter root's password:
Anonymous login successful
Domain=[SAMBA] OS=[Unix] Server=[Samba 3.4.7]

Sharename       Type      Comment
---------       ----      -------
print$          Disk      Printer Drivers Share
shared          Disk     
archive         Disk     
IPC$            IPC       IPC Service (Samba 3.4.7)
Anonymous login successful
Domain=[SAMBA] OS=[Unix] Server=[Samba 3.4.7]

Server               Comment
---------            -------
CALLISTO             Samba 3.4.7

Workgroup            Master
---------            -------
SAMBA                CALLISTO

Our samba users require profile and netlogon directories, let's create them now;

sudo mkdir -v -m 777 /var/lib/samba/profiles
sudo mkdir -v -p -m 777 /var/lib/samba/netlogon

Next we must add the samba schemas to the LDAP server. These schemas are part of the samba-doc package that we installed earlier.

sudo cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz /etc/ldap/schema/
sudo gzip -d /etc/ldap/schema/samba.schema.gz

These schemas must be converted to the "ldif" format before we can use them.

Create a file called schema_convert.conf

vi ~/schema_convert.conf

and paste in the following lines;

include /etc/ldap/schema/core.schema
include /etc/ldap/schema/collective.schema
include /etc/ldap/schema/corba.schema
include /etc/ldap/schema/cosine.schema
include /etc/ldap/schema/duaconf.schema
include /etc/ldap/schema/dyngroup.schema
include /etc/ldap/schema/inetorgperson.schema
include /etc/ldap/schema/java.schema
include /etc/ldap/schema/misc.schema
include /etc/ldap/schema/nis.schema
include /etc/ldap/schema/openldap.schema
include /etc/ldap/schema/ppolicy.schema
include /etc/ldap/schema/samba.schema

Next, use slapcat to convert the schemas;

slapcat -f ~/schema_convert.conf -F ~ -n0 -s "cn={12}samba,cn=schema,cn=config" > ~/cn=samba.ldif

slapcat will generate a file "~/cn\=samba.ldif". Edit this file;

vi ~/cn\=samba.ldif

and change the following attributes:

dn: cn={12}samba,cn=schema,cn=config
...
cn: {12}samba

dn: cn=samba,cn=schema,cn=config
...
cn: samba

Also, remove all these lines at the bottom of the file.

structuralObjectClass: olcSchemaConfig
entryUUID: 99e797a8-07cb-102f-8c5c-739a8467e607
creatorsName: cn=config
createTimestamp: 20100609043122Z
entryCSN: 20100609043122.188753Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20100609043122Z

Add the schema to the server;

sudo ldapadd -Y EXTERNAL -H ldapi:/// -f ~/cn\=samba.ldif

This should return the following lines with no errors.

adding new entry "cn=samba,cn=schema,cn=config"

Let's check how things are going with the following query;

sudo ldapsearch -Y EXTERNAL -H ldapi:/// -D cn=admin,cn=config -b cn=config -W olcDatabase={1}hdb

You should see a metric shedload of output with this at the end;

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

If you see output like above then your LDAP server is working, but we still need to finish configuring samba.

Unpack the samba-ldap-tools (we downloaded this earlier)

sudo gzip -d /usr/share/doc/smbldap-tools/configure.pl.gz

Now we are going to execute a perl script which will set up samba for us. For almost every prompt you should just press Enter. There are a few of exceptions however.
When asked for "logon home" and "logon path" enter a "." (fullstop) and nothing else. When asked for a password (ldap master/slave bind password) use the password for the "admin" account that you entered earlier. Remember, leave the default value for everything else!

Run the script;

sudo perl /usr/share/doc/smbldap-tools/configure.pl

Now that the script has created our configuration, we can use it to populate the server;

sudo smbldap-populate

The final touches;

sudo /etc/init.d/slapd stop
sudo slapindex
sudo chown openldap:openldap /var/lib/ldap/*
sudo /etc/init.d/slapd start

Make "root" the domain adminstrator;

sudo smbldap-groupmod -m 'root' 'Administrators'

If this returns adding user root to group Administrators with no errors then you are looking good!

Now, we need to allow clients to authenticate via LDAP. To do this we need to install a package.

sudo apt-get --yes install ldap-auth-client

We also need to tell PAM and the Name Service Switch service to use LDAP for auth;

sudo auth-client-config -t nss -p lac_ldap
sudo pam-auth-update ldap

If all has gone well, you should now be able to add a user to the database;

sudo smbldap-useradd -a -m -P brettg

You can check your new user by issuing this command;

ldapsearch -xLLL -b "dc=tuxnetworks,dc=com" uid=brettg

Next, you should go ahead and install phpLDAPadmin or configure a client

Revisions:
13/7/2010- Karan Pratap Singh pointed me to another howto which does some things in a better way than mine did. I have merged the parts that I like into my document (see comments)

VMware Communities: Troubleshooting Performance Related Problems in vSphere 4.1 Environments

2011-02-28T16:36:00.000-08:00

VMware Communities: Troubleshooting Performance Related Problems in vSphere 4.1 Environments: "Troubleshooting Performance Related Problems in vSphere 4.1 Environments

The troubleshooting guide for vSphere 4.0 can be found at: http://communities.vmware.com/docs/DOC-10352

- Sent using Google Toolbar"

[ubuntu] Where is add-apt-repository? - Ubuntu Forums

2011-02-28T16:07:00.000-08:00

[ubuntu] Where is add-apt-repository? - Ubuntu Forums: "Where is add-apt-repository?

Interesting...try this:

Code:

sudo apt-get install --reinstall python-software-properties && sudo dpkg-reconfigure python-software-properties

- Sent using Google Toolbar"

VMware KB: Installing VMware Converter 4.2 fails with the error: Error 29454 Setup failed to register VMware vCenter Converter extension

2011-02-28T15:18:00.000-08:00

VMware KB: Installing VMware Converter 4.2 fails with the error: Error 29454 Setup failed to register VMware vCenter Converter extension: "Installing VMware Converter 4.2 fails with the error: Error 29454 Setup failed to register VMware vCenter Converter extension

- Sent using Google Toolbar"

How to: Attach a Database (SQL Server Management Studio)

2011-02-25T15:55:00.000-08:00

How to: Attach a Database (SQL Server Management Studio)

SQL Server 2008 R2

Other Versions

Attaching a database places it in exactly the same state that it was in when it was detached.

This topic contains the following sections:

Security

File access permissions are set during a number of database operations, including detaching or attaching a database. For information about file permissions that are set whenever a database is detached and attached, see Securing Data and Log Files.

We recommend that you do not attach or restore databases from unknown or untrusted sources. Such databases could contain malicious code that might execute unintended Transact-SQL code or cause errors by modifying the schema or the physical database structure. Before you use a database from an unknown or untrusted source, run DBCC CHECKDB on the database on a nonproduction server and also examine the code, such as stored procedures or other user-defined code, in the database.

Important
For more information about attaching databases and information about changes that are made to metadata when you attach a database, see Detaching and Attaching Databases.

Permissions

For information about the permissions required for attaching a database, see CREATE DATABASE (Transact-SQL).

[Top]

Procedure (SQL Server Management Studio)

To attach a database

In SQL Server Management Studio Object Explorer, connect to an instance of the Microsoft SQL Server Database Engine, and then expand that instance.
Right-click Databases and click Attach.

In the Attach Databases dialog box, to specify the database to be attached, click Add; and in the Locate Database Files dialog box, select the disk drive where the database resides and expand the directory tree to find and select the .mdf file of the database; for example:

C:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\DATA\AdventureWorks2008R2_Data.mdf

Important
Trying to select a database that is already attached generates an error.

Optionally, to specify a different name for the database to attach as, enter the name in the Attach as column of the Attach Databases dialog box.
Optionally, change the owner of the database by selecting a different entry in the Owner column.

When you are ready to attach the database, click OK.

Note
A newly attached database is not displayed in the Databases node of Object Explorer until the view is refreshed. To refresh the view at any time, click in Object Explorer, and then click Refresh on the View menu.

How to: Detach a Database (SQL Server Management Studio)

2011-02-25T15:54:00.000-08:00

To detach a database

In SQL Server Management Studio Object Explorer, connect to the instance of the SQL Server Database Engine and then expand the instance.
Expand Databases, and select the name of the user database you want to detach.
Detaching a database requires exclusive access to the database. If the database is in use, restrict access to a single user:
- Right-click the database name and point to Properties.
- In the Select a page pane, select Options.
- In the Other options pane, scroll down to the State options.
- Select the Restrict Access option, and in its drop-down list, select Single.
- Click OK.
  A message box appears to inform you that this action will close all connections to the database. To proceed, click OK.
Right-click the database name, point to Tasks, and then click Detach. The Detach Database dialog box appears.
The Databases to detach grid displays the name of the selected database in the Database Name column. Verify that this is the database you want to detach.
By default, the detach operation retains any out-of-date optimization statistics when detaching the database; to update the existing optimization statistics, click the Update Statistics check box.
By default, the detach operation keeps any full-text catalogs that are associated with the database. To remove them, clear the Keep Full-Text Catalogs check box.
The Status column displays the current database state (either Ready or Not Ready).
If the status is Not Ready, the Message column displays hyperlinked information about the database. When a database is involved with replication, the Message column displays Database replicated. When a database has one or more active connections, the Message column displays Active connections; for example, 1 Active connection(s). Before you can detach the database, you must disconnect any active connections by selecting the Drop Connections check box.
To obtain more information about a message, click the hyperlink.
When you are ready to detach the database, click OK.

How to: Detach a Database (SQL Server Management Studio): "- Sent using Google Toolbar"

vmware vcenter converter how to start it - Virtualization Team

2011-02-23T14:39:00.000-08:00

Where can I find vmware vCenter converter in VMware vCenter 4?

Unfortunately, unlike most other VMware feature the VMware vCenter Converter does not have any obvious shortcut in vCenter. To start vCenter converter in Virtual Center you will need to follow the below steps:

Make sure you are in host & clusters view.
Choose one of your hosts or clusters in vCenter
From the top drop down menu choose one of the following paths depend on if you have chosen a host or cluster in step 2.

Inventory ==> Host ==> Import Machine

Inventory ==> Cluster ==> Import Machine

The image below demonstrate the above steps:

vmware vcenter converter how to start it - Virtualization Team: "- Sent using Google Toolbar"

how to chroot, simple and fast [Archive] - Ubuntu Forums

2011-02-18T00:06:00.000-08:00

Pick up a liveCD, version doesn't matter, you could use any distro, as long as it ables you to enter to console.

# means run with root or sudo

1. Create a mountpoint
# mkdir /mount/point

2. Mount /proc /sys /dev to chroot
# mount -o bind /proc /mount/point/proc
# mount -o bind /dev /mount/point/dev
# mount -o bind /dev/pts /mount/point/dev/pts
# mount -o bind /sys /mount/point/sys

3. Copy resolv.conf to networking
# cp /etc/resolv.conf /mount/point/etc/resolv.conf

4.Open bash in chroot
# chroot /mount/point /bin/bash

5. Do what you have to do and then exit chroot
exit

there may be more elegant way of achieving this, but this one has stuck to me.

Hope this helps someone, this is probably posted on multiple sites, but what the heck, now no need to search around ;)

how to chroot, simple and fast [Archive] - Ubuntu Forums: "- Sent using Google Toolbar"

» Proxy Auto-Detect (IE and Firefox) -> Pavlov Scope

2011-02-16T14:39:00.000-08:00

» Proxy Auto-Detect (IE and Firefox) -> Pavlov Scope: "- Sent using Google Toolbar"

Recently, my organization had the need to provide web proxy service to internal users, while not clobbering hotel, home, remote office, coffee shoppe, etc. type access while users were roaming outside of our divisions’ walls. The purpose is to apply content filtering rules to outbound Web traffic based on our organization’s security policy (i.e. no external webmail, personal web storage sites, etc.). I did some research and testing on this side and have come up with a solution that seems to work well across the board for our clients.

Using Internet Explorer’s capability to Automatically detect proxy server settings, IE uses the proxy when the proxy server is reachable, and connects directly when it is not. I have tested this with success (after a lot of initial troubles and debugging ;-)

The components involved in the proposed and tested solution:

Proxy Auto-configuration file (PAC)

Web Proxy Automatic Discovery (WPAD)

Related DHCP and DNS settings

Internal Web server

Group Policies in Active Directory (GPO)

PAC file:

The first step is to configure the Proxy Auto-configuration file (or PAC for short). This is a JavaScript-like file that has a set of predetermined variables and functions for use in making decisions defining the browser’s behavior at runtime. See below for references.

This file can be hard coded in the browser, or preferably delivered using WPAD (see next).

I have built the following sample file using the PAC spec standards which tests for exception sites first (should be accessed directly by the browser) – things like internal sites, private addresses, etc.

Then, the file will test against the client’s IP address (to determine network location). If the IP address is within our internal subnet ranges , it sets the proxy server(s) to use.

The file ends with an else statement that catches all other conditions and sets the browser to use direct access (for when the computer is located outside corporate-controlled facilities).

I have successfully tested this file format with both IE and Firefox. It is provided below as an example for you to utilize, but I make no warranties or claims of fitness-to-purpose. There are many additional testing conditions that might be more relevant to another environment or set of business policies (e.g. Time-of-day, day-of-week, DNS information, etc.).

Sample file:

function FindProxyForURL(url, host)
{
if (
isInNet(host, "10.0.0.0", "255.0.0.0") ||
isInNet(host, "172.16.0.0", "255.240.0.0") ||
isInNet(host, "192.168.0.0", "255.255.0.0") ||
isPlainHostName(host) ||
localHostOrDomainIs(host, "127.0.0.1") ||
dnsDomainIs(host, ".company.local")
)

return "DIRECT";

else if (
isInNet(myIpAddress(), "10.1.0.0", "255.255.0.0") ||
isInNet(myIpAddress(), "10.2.0.0", "255.255.0.0") ||
isInNet(myIpAddress(), "10.3.0.0", "255.255.0.0") ||
isInNet(myIpAddress(), "10.4.0.0", "255.255.0.0") ||
isInNet(myIpAddress(), "10.7.0.0", "255.255.0.0") ||
isInNet(myIpAddress(), "10.9.0.0", "255.255.0.0") ||
isInNet(myIpAddress(), "10.10.0.0", "255.255.0.0") ||
isInNet(myIpAddress(), "169.254.0.0", "255.255.0.0") ||
isInNet(myIpAddress(), "172.16.199.0", "255.255.255.0")
)

return "PROXY prx0.us.company.local:8080;" +
"PROXY prx1.us.company.local:8080";

else return "DIRECT";
}

Note: Thanks to Jay Kulsh for pointing out RFC1918 compliance in above network tests.

WPAD

Second came the challenge of getting the clients to use that file without hard-setting it (hardcoding almost always an undesirable option if it can be avoided). The mechanism used for this is WPAD, which allows the browser to "discover" where the above configuration file is stored, allowing it to then dynamically pull it down and apply the function code therein during operation. There are several mechanisms available to WPAD, but they center on DHCP and DNS. I have opted to implement both the required elements of the standard (DHCP option and DNS "well known alias" methods), and have left alone the optional requirements as they are redundant for my purposes and remain unused if the required elements exist – if the required elements are unavailable (in my environment), it would be equivalent to a network outage at which point we have bigger problems to solve than WPAD not functioning.

The first step to configure WPAD is to put the PAC file onto a web server for all users to access. Depending on the web server platform and version chosen to host the file, this might require defining additional MIME types to allow the server to properly serve the file (see standard). As a reference point, Win2K’s IIS server generally hosts whatever files you make available, whereas Win2K3 (2003 Server) IIS requires the additional MIME definitions – otherwise you will receive 403 errors, and the browser will transparently fail to pickup the PAC file without displaying an error message (by design).

The recommendation is to place the PAC file on the same server that hosts the proxy. The rationale is that if it is unavailable, implicitly so is the proxy and as such, should not be utilized. However, one might opt to locate the PAC file on a neutral / different server (independent of the proxy) to allow for more robust proxy fail-over (since the PAC standard allows for multiple proxies to be defined for fail-over).

DHCP: The second step is to configure a custom vendor option on the DHCP server. The reserved vendor option for WPAD is 252, and must be created on the DHCP Server config first. Then you can configure scopes (either via a server-wide setting or per-scope setting, relevant to your environment, with the proper URL string which tells the browser where to get the PAC file. However, the DHCP piece is not fully functional for PAC file location until the AutoDetect option is enabled in the web browser. In Firefox, this is the "auto-detect proxy" setting under Tools-Options-Connections – In IE, one can deploy the setting via GPO (see below). The value of the 252 WPAD option is the full URL to the PAC file, including FQDN of the web server (e.g. http://websrv.us.company.local/wpad.dat). This is the first component tried by WPAD for PAC file location, and is a required component of the standard.

DNS: The third configuration change I made was to place a DNS entry (can be an A or CNAME record) which includes a "well-known alias" for the service discovery – in my case – "wpad" without the quotes, which points to the proxy server. I opted for a CNAME record to alias the proxy itself since that is where my PAC file was located and maintaining multiple autonomous A records for the same host is problematic in this case.

The DNS option appears to be the one favored by Firefox, although secondary by IE based on my test results, so I implemented both to cover both browsers more effectively. (Note: In my corporate environment, the Proxy server in use uses proprietary auth mechanisms that Opera does not support, thereby preventing Opera from functioning with my organization’s proxy. This is why no mention of the Opera browser in this Windows-centric platform discussion).

GPO

The setting to have IE use Auto Detection for its Proxy settings is configured in the same place in Group Policy as if one was hard-coding the proxy (Internet Explorer Maintenance) – it is just a different option. This affects only IE at this time, since Firefox is not natively GPO-aware (author note: Efforts are underway to allow Firefox GPO administration, but not covered here – will cover in an upcoming entry) .

In the Internet Explorer Maintenance area:

User Configuration – Windows Settings – Internet Explorer Maintenance

"Automatically detect configuration settings"- Enabled

"Automatic Browser Configuration" – Not configured

This sets IE to use WPAD to discover the PAC file.

Additionally, in the Computer Configuration area, the following settings should be changed to maintain consistency and compliance of the browser’s settings:

Computer Configuration – Administrative Templates – System/Group Policy

"Internet Explorer Maintenance policy processing" – Enabled

"Allow processing across a slow network connection" – Enabled

"Do not apply during periodic background processing"- Disabled

"Process even if the Group Policy objects have not changed"- Enabled

These computer-level GPO settings set and renew the settings continually, even across slow connections, so that if a user has tampered with the IE proxy settings, they will be changed back (although I know this has worked with other configs, I have not had the time to fully test – i.e. tried to break – this setting yet, so I’m not certain how effective it is in overriding, for example, a proxy the user has defined themselves. Obviously, the best practice would be to hide the Connections tab (and perhaps other areas) from the UI to prevent tampering. Additionally, users should not have Admin rights to their machine if an effective policy is to be maintained with any consistency.

Firefox

The methods described in the above sections, when implemented together, support both IE and Firefox. The main hurdle is centrally deploying the Auto-Detect setting to both browser platforms consistently. Additionally, unrelated, anyone using Firefox should upgrade to 1.5.0.1 if they have not already, for security reasons.

Although many organizations do not officially advocate the use of Firefox (since there are still some management/administration hurdles for corporate deployment), I felt that it was important to find a workable solution that fit for both browsers since use of Firefox has become much more prevalent in the past year. Some organizations might choose to limit the use of Firefox altogether for other reasons (such as application standards, etc.), but I wanted to make the solution as browser-agnostic (cross platform) as possible.

I found that Firefox had some unexpected (by me) behavior in the way that it searched for the PAC file. Specifically, the Auto-Discover mechanism seems to always query the configured web server for the filename wpad.dat (instead of proxy.pac as I originally had the 252 DHCP WPAD option configured). IE obeyed my configuration, but Firefox insisted otherwise. Workaround, and the standard generally used by Windows shops anyway, was to make the name the file wpad.dat, update the 252 option accordingly, and then both browsers could automatically discover the file appropriately.

Also, on an unrelated note, I have had some odd, almost random, occurrences of Firefox interoperability problems with the Computer Associates (CA) SCM (Secure Content Manager) Proxy service. In some cases, the user is prompted for an ID, when – in fact – this authentication should be transparent (based on internal domain ID). The same behavior is not exhibited in IE thusfar.

Further research and "development watching" I am taking from this include the emerging capability for Firefox to be administered via GPO as well as an initiative inside the Firefox open-source development community to support MSI installers for corporate deployment and easy updates (that is, from the Mozilla side). There are third parties that have made great gains in both GPO and MSI for Firefox, but as I stated – that is something I’ll get into in an upcoming post.

Conclusion

From the testing I have done so far, both browsers appear to behave as expected once AutoDetection is setup as above. If the PAC file is not reachable using the "AutoDetect" WPAD mechanism, both browsers automatically default to direct, which gets around the issue of hard-coded proxy settings in hotels, WiFi hotspots, etc. Additionally, once the user connects to the VPN, they receive an internal IP address which matches on the PAC rules, and WPAD finds the PAC file to utilize (via the DNS mechanism of WPAD) and begins using the proxy for connections to the Web – thereby applying our corporate policies.

This system of configurations represents a "best effort" to provide technical compliance with our corporate policies with regard to web content filtering. There still exist some unavoidable loopholes, but those should be addressed through policy education to the user community (i.e. they are not allowed to browse the web in remote locations – home, hotel, airport, coffeeshoppes, etc. – without first connecting to the VPN). Adherence to that policy can be assured with monitoring, logging, and other tools.

References

For more technical information about the PAC and WPAD components of this proposed solution, please reference the following links:

PAC – This file’s format (along with some samples) is described here: http://wp.netscape.com/eng/mozilla/2.0/relnotes/demo/proxy-live.html

WPAD – IETF spec for Web Proxy Automatic Discovery – http://www.wrec.org/Drafts/draft-cooper-webi-wpad-00.txt

I hope this was helpful or informative to some of you out there! Good luck and if you have any questions or comments, please use the comment area or email me directly.

log_file_analysis | DansGuardian Documentation Wiki

2011-02-15T09:34:00.000-08:00

If you nevertheless find it necessary to analyze the Squid stub logs, the first issue that will occupy your attention will probably be that everything in the Squid log appears to originate from the same address, 127.0.0.1 (“localhost” or “loopback”). This makes sense as in this environment all requests to Squid come from DansGuardian. You may desire to instead have the Squid logs point at the “real” originating IP rather than at DansGuardian.

To do this, you'll need to both 1) have DansGuardian forward the information to Squid (which would otherwise not even have the information and so of course not be able to display it), and 2) have Squid include the information in its logs.

To make 1) happen, set forwardedfor = on in dansguardian.conf. This will cause DansGuardian to add an X-Forwarded-For: header containing the IP address of the real originator to every web request it passes to Squid.

To make 2) happen is different for different releases of Squid, and will usually (but not always) happen by default. For Squid 2.5 and before, you must apply a source code patch and rebuild Squid. The source code patch is available on the DansGuardian website by clicking on “Extras and Add-Ons” and under the “3rd Party plugins and patches for squid” heading fetching “Patch for squid that makes it log the X-Forwarded-For IP”. For Squid 2.6 and 2.7, set log_uses_indirect_client on (which in turn requires something like follow_x_forwarded_for allow localhost) in squid.conf. (This is the default Squid configuration, so it may work without explicit settings.) For Squid 3.0, set forwarded_for on in squid.conf. (This is the default Squid configuration, so it may work without explicit settings.)

Note that as a side effect of these settings, in many cases Squid will send the X-Forwarded-For: header on to the actual website, thus exposing some of your internal IP addresses and possibly allowing websites to disentangle individual users. (You can prevent this in Squid 3.1 and later by specifying forwarded_for delete.) You may or may not decide that having the “real” origin IP address in the Squid logs is so important that it overrides any possible security and privacy concerns.

log_file_analysis | DansGuardian Documentation Wiki: "- Sent using Google Toolbar"

Obtaining Your pbuilder Build Environment

2011-01-30T17:55:00.000-08:00

Obtaining Your pbuilder Build Environment: "Archive: stable Component: main Origin: pbuilder Label: pbuilder Architecture: i386

- Sent using Google Toolbar"

Secure File Transfer - FTP - Secure File Sharing - Online Storage - Web Storage | ShareFile

2011-01-28T06:51:00.000-08:00

Secure File Transfer - FTP - Secure File Sharing - Online Storage - Web Storage | ShareFile: "- Sent using Google Toolbar"

Screencasting Software – ScreenFlow Demos – Telestream

2011-01-20T08:08:00.000-08:00

Screencasting Software – ScreenFlow Demos – Telestream: "- Sent using Google Toolbar"

How to Remove a License Key on Microsoft Office 2007 | eHow.com

2011-01-12T20:30:00.000-08:00

How to Remove a License Key on Microsoft Office 2007 | eHow.com: "How to Remove a License Key on Microsoft Office 2007

- Sent using Google Toolbar"

Cut or copy lines without counting the lines - Vim Tips Wiki

2011-01-04T12:25:00.000-08:00

Cut or copy lines without counting the lines - Vim Tips Wiki: "If you ever need to cut/copy/delete/paste lines without knowing the actual number of lines, here is what you should do.

1. In normal mode, go to the beginning of the section that you want to yank.
2. Type mk to mark this spot as k.
3. Go to the end of the section you want to yank using whatever movement commands you like.
4. Type: y'k (, , k) To yank from the mark to the current location.
5. You can paste those lines wherever you want with p

Similarly, d'k will cut/delte the lines from the current location to the mark.

- Sent using Google Toolbar"

Failover with ISC DHCP

2011-01-04T12:11:00.000-08:00

Failover with ISC DHCP: "failover peer 'dhcp-failover';

- Sent using Google Toolbar"

IBM Cluster information center

2011-01-04T12:06:00.000-08:00

IBM Cluster information center: "- Sent using Google Toolbar"

Setting up Linux DHCP server failover

Auctioneer/FAQ - Norganna's AddOns

2010-12-20T19:24:00.000-08:00

Auctioneer/FAQ - Norganna's AddOns: "If you do want to start fresh, you can now do this from in-game. Simply type '/auc cleardata ALL' to clear all data from all servers and factions. Replace 'ALL' with 'server' or 'faction' to clear data only for the current server or faction, instead.

- Sent using Google Toolbar"

Cuberick: Merge Bazaar Repositories With No Common Ancestor

2010-12-17T12:30:00.000-08:00

Cuberick: Merge Bazaar Repositories With No Common Ancestor: "But what about merging branches with no common ancestor?

Turns out this is pretty easy... In bazaar you can simply do the following:

Change directory to the destination working copy.

Execute the following command

bzr merge /path/to/source-working-copy -r0..-1

Note the -r0..-1 part of the command. This tells bazaar to merge a range of revisions from the first revision to the most current.
Now review and commit the changes. Notice that bazaar gives you an indication that all history is preserved by displaying a list of checkin comments. Nice.

- Sent using Google Toolbar"

Renaming a network connection with netsh - Mike Wilbur's Blog - Site Home - MSDN Blogs

2010-12-15T13:37:00.000-08:00

Renaming a network connection with netsh - Mike Wilbur's Blog - Site Home - MSDN Blogs: "netsh interface set interface name='Local Area Connection' newname='ExampleLan'

- Sent using Google Toolbar"

PyMOTW: hmac - O'Reilly ONLamp Blog

2010-11-29T21:47:00.000-08:00

PyMOTW: hmac - O'Reilly ONLamp Blog: "import hmac
import hashlib

digest_maker = hmac.new('secret-shared-key-goes-here', '', hashlib.sha1)

f = open('hmac_sha.py', 'rb')
try:
while True:
block = f.read(1024)
if not block:
break
digest_maker.update(block)
finally:
f.close()

digest = digest_maker.hexdigest()
print digest

- Sent using Google Toolbar"

WorkingWithTime - PythonInfo Wiki

2010-11-29T21:28:00.000-08:00

WorkingWithTime - PythonInfo Wiki: "Working with Time

Notably missing from this page are the capabilities of the Python datetime module, which was introduced in 2.3 and is very powerful.

This page gives some basics of working with time in Python. More detail can be found in the time Module Documentation.

Formats

There are several ways to work with time:

format

Python

seconds since the 'Epoch'

time.time()

tuple

time.gmtime()

string

time.ctime()

The Epoch is January 1st, 1970, midnight, on UNIX systems. On other systems, look at the results of time.gmtime(0) to discover the date of the Epoch.

Measuring time in seconds since the Epoch is convenient for storage and comparing dates, because you only have a single number to consider.

The tuple contains several values, arranged the following way: year, month 1-12, day 1-31, hour 0-23, minutes 0-59, seconds 0-61, day 0-6 (Mon-Sun), day 1-366, and DST -1,0,+1. 'DST' means 'daylight savings time.' For more information, see time Module Documentation.

Using a tuple is convenient, because you can access particular numbers by index, and because you can easily compare dates. Remember that Python compares tuple data from front to back. The data is indexed so that comparing tuple times is intuitive.

The string format reads something like 'Mon Feb 16 16:04:25 2004'. You can't really compare these usefully, but they're what you need to display things to the user.

- Sent using Google Toolbar"

1.2 Installing ZenPacks - Open Source Network Monitoring and Systems Management

2010-11-29T13:03:00.000-08:00

1.2 Installing ZenPacks - Open Source Network Monitoring and Systems Management: "#2. Installing ZenPacks

ZenPacks are distributed as .egg files. Zenoss also supports .zip files.

You can install ZenPacks from the command line on the Zenoss server, or from the Zenoss user interface.
#2.1. Installing from the Command Line

The following ZenPack command can be used from the command line to install ZenPack files. After installing or updating ZenPacks you need to restart Zenoss:

zenpack --install
zenoss restart

If you have the source code for the ZenPack you can install directly from that rather than from a .egg or .zip file. The command is the same, you just specify the directory containing the source code. This copies the source code into either $ZENHOME/ZenPacks (for newer egg ZenPacks) or $ZENHOME/Products (for older style ZenPacks.)

zenpack --install
zenoss restart

If you are developing a ZenPack you usually will want to maintain your source code outside of $ZENHOME/ZenPacks or $ZENHOME/Products. This is advisable for two reasons. First, if you issue a zenpack --remove command it will delete your code from either of those two locations and you would lose your files unless you had them backed up elsewhere. Second, if you are maintaining your source code in a version control system it is frequently more convenient to have the files reside elsewhere on the file system. Using the --link option you can install the ZenPack but have Zenoss use your code from its current location. Instead of installing your code in $ZENHOME/ZenPacks or $ZENHOME/Products Zenoss will create a link in one of those locations that points to your source code directory.

zenpack --link --install
zenoss restart

- Sent using Google Toolbar"

TurboGears "offline" processes (crons, command-line commands, etc) - Plumbing Life's Depths

2010-11-23T22:21:00.000-08:00

TurboGears "offline" processes (crons, command-line commands, etc) - Plumbing Life's Depths: "TurboGears 'offline' processes (crons, command-line commands, etc)

TurboGears uses the Paste commands system to create command-line entry points that, for example, set up your database or start your server. When you get to larger projects, however, you will often have other things you need to do 'in the context of your application' from the command line, such as periodic imports of data, or cron'd database management tasks.

Paste's command system is well documented, but it can take quite a bit of poking around to find out how to get SQLAlchemy, and TurboGears configured so that code that looks in tg.config gets the right values, and SQLAlchemy has access to your models.

This little module (tgcommand.py) is my hacked-together attempt to make it easier to create new TG command-line commands. The idea is that for each application you will create a BaseCommand class like this:

from adminhack.commands import tgcommand
class BaseCommand( tgcommand.TGCommand ):
def import_model( self ):
from adminhack import model
return model

This command-class would then serve as the base command for each of your 'real' commands. For example, a command that iterates through all users showing their user_name property:

class Hello(BaseCommand):
def db_command( self, engine ):
from adminhack.model import User,Group, DBSession
for user in DBSession.query( User ):
print 'User',user.user_name

As with regular Paste commands you have to register your TGCommands in your application's setup.py (in the setup() call), like so:

entry_points='''
[paste.paster_command]
hellocommand = adminhack.commands.hello:Hello
''',

(you will need to re-run setup.py develop to get the command to be available). I can't claim that this is the perfect way to set up these commands, but it should work :-) .

[Update] I've done a bit of clean-up work on the base tgcommand module. The updated version is now linked above.

[Update2] A few more tweaks, one of which changes the interface so that you receive an engine pointer, rather than a DBSession pointer in db_command. This allows for the flag 'with_session' to be set on the class to create a command that can do its own DB session management (useful for database-modification and the like).

- Sent using Google Toolbar"

How to setup Client Scripting in OpenVPN Access Server

2010-11-21T11:18:00.000-08:00

How to setup Client Scripting in OpenVPN Access Server: "How to setup Client Scripting in OpenVPN Access Server

Sample Python Scripts
---------------------

Launch a URL:

#!/usr/bin/env python
# On VPN connection initiation, launch a URL in the default browser.
# Works on all client platforms (Windows, Mac, Linux).
# Environmental Variables:
# LAUNCH_URL -- URL to launch
import os, webbrowser
if os.environ['N_RECONNECTS'] == '0':
webbrowser.open_new(os.environ['LAUNCH_URL'])

Download and install an application on Windows:

#!/usr/bin/env python
# Download and install an MSI-based application on Windows. Leave a marker
# file behind, so that we only install the application once per local user.
# Environmental Variables:
# MSI_URL -- URL of MSI file
# MSI_HASH -- sha1 hash of MSI file, for security verification
# MSI_OPT (optional) -- extra MSI arguments, such as /q for quiet install
import os, urllib, scripthelper as sh
url = os.environ['MSI_URL']
local = os.path.basename(url)
hash = os.environ['MSI_HASH']
if not os.path.exists(hash):
urllib.urlretrieve(url, local)
if sh.digest_file(local, 'sha1') != hash:
raise ValueError("downloaded file has incorrect hash")
os.system("msiexec /i %s %s /l* msi.log" % (local, os.environ.get('MSI_OPT', '')))
file(hash, 'w').write('')

- Sent using Google Toolbar"

You incorrectly receive an error message when you join a computer that is running Windows 7 or Windows Server 2008 R2 to a Samba 3-based domain

2010-11-17T19:57:00.000-08:00

You incorrectly receive an error message when you join a computer that is running Windows 7 or Windows Server 2008 R2 to a Samba 3-based domain: "You incorrectly receive an error message when you join a computer that is running Windows 7 or Windows Server 2008 R2 to a Samba 3-based domain

- Sent using Google Toolbar"

Custom Filters - Zimbra :: Forums

2010-11-12T00:08:00.000-08:00

Custom Filters - Zimbra :: Forums: "sieve - you can even convert from procmail:/forums/users/7239-any-way-add-message-filters-command-line.html

very simply it's kinda like:
zmprov modifyAccount user@domain.com zimbraMailSieveScript 'require ['fileinto', 'reject', 'tag', 'flag']

or there's always:
zmmailbox -z -m user@domain.com addFilterRule 'tag special' active any header 'subject' contains 'special' tag 'special' stop
-this should also add it into the user's list of rules to manage from the web interface

- Sent using Google Toolbar"

SQLite Frequently Asked Questions

2010-11-05T23:30:00.000-07:00

SQLite Frequently Asked Questions: "(11) How do I add or delete columns from an existing table in SQLite.

SQLite has limited ALTER TABLE support that you can use to add a column to the end of a table or to change the name of a table. If you want to make more complex changes in the structure of a table, you will have to recreate the table. You can save existing data to a temporary table, drop the old table, create the new table, then copy the data back in from the temporary table.

For example, suppose you have a table named 't1' with columns names 'a', 'b', and 'c' and that you want to delete column 'c' from this table. The following steps illustrate how this could be done:

BEGIN TRANSACTION;
CREATE TEMPORARY TABLE t1_backup(a,b);
INSERT INTO t1_backup SELECT a,b FROM t1;
DROP TABLE t1;
CREATE TABLE t1(a,b);
INSERT INTO t1 SELECT a,b FROM t1_backup;
DROP TABLE t1_backup;
COMMIT;

- Sent using Google Toolbar"

How-to: Convert mysql to sqlite | JBipNet

2010-11-03T17:34:00.000-07:00

How-to: Convert mysql to sqlite | JBipNet: "--compatible=ansi --skip-opt generator > dumpfile

- Sent using Google Toolbar"

Old Nabble - Turbogears General - how to return csv data?

2010-10-31T15:46:00.000-07:00

Old Nabble - Turbogears General - how to return csv data?: "e.g. like this

@expose(content_type='text/csv')
def csv(self):
stream = StringIO()
writer = csv.writer(stream, dialect='excel')
writer.writerow(['Spam'] * 5 + ['Baked Beans'])
writer.writerow(['Spam', 'Lovely Spam', 'Wonderful Spam'])
output = stream.getvalue()
stream.close()
return output

For creating real Excel files you can use this:

http://www.python-excel.org

- Sent using Google Toolbar"

Cleaning up your Contacts with Contact Cleaner » Zimbra :: Blog

2010-10-29T10:27:00.000-07:00

Cleaning up your Contacts with Contact Cleaner » Zimbra :: Blog: "- Sent using Google Toolbar"

How can I access Time Machine backup data for other computers? :: Free Tech Support :: Ask Dave Taylor!®

2010-10-26T14:07:00.000-07:00

How can I access Time Machine backup data for other computers? :: Free Tech Support :: Ask Dave Taylor!®: "- Sent using Google Toolbar"

linsec.ca - DansGuardian: A Content Filtering System

2010-10-26T14:06:00.000-07:00

linsec.ca - DansGuardian: A Content Filtering System: "- Sent using Google Toolbar"

Good list of files and what the represent.

Python: Getting TurboMail to work with TurboGears 2.0 | 5dollarwhitebox.org

2010-10-26T14:02:00.000-07:00

Python: Getting TurboMail to work with TurboGears 2.0 | 5dollarwhitebox.org: "http://www.python-turbomail.org/

- Sent using Google Toolbar"

Good start to getting TG2 and TurboMail3 working. With TG-2.1 and TurboMail-3.0.3 in pypi everything is really easy now.

HOWTO patch Nexenta (open source)

2010-10-19T10:00:00.000-07:00

> I like the built in patcher in the Openfiler GUI. I’m not sure how Nexenta does patching.

Just run “$ setup appliance upgrade nms” to upgrade the Web UI or “$ setup appliance upgrade” to upgrade the base OS software in Nexenta Community Edition. Both commands should be run as ‘root’.

$ setup appliance upgrade nms

$ setup appliance upgrade

http://greg.porter.name/wordpress/?p=590

TurboGears 2.1 Standard Installation

2010-10-12T16:52:00.001-07:00

$ virtualenv --no-site-packages -p python2.6 tg2env
$ cd tg2env/
$ source bin/activate
(tg2env)$ easy_install -i http://www.turbogears.org/2.1/downloads/current/index tg.devtools
(tg2env)$ paster quickstart example
(tg2env)$ cd example/
(tg2env)$ python setup.py develop
(tg2env)$ nosetests
(tg2env)$ paster setup-app development.ini
(tg2env)$ paster serve development.ini
(tg2env)$ deactivate

Upgrading TurboGears

easy_install -U -i http://www.turbogears.org/2.1/downloads/current/index tg.devtools

Logging to a Database with Rsyslog

2010-10-07T14:47:00.001-07:00

rsyslog and postgres

in reference to:

"Logging to a Database with Rsyslog"
- Logging to a Database with Rsyslog LG #172 (view on Google Sidewiki)

WoW Armory request throttle

2010-09-28T20:36:00.001-07:00

http://bit.ly/cSKHWd

in reference to: Breaking News: Blizzard Implements New Armory Throttling Policy? - Tard Factor (view on Google Sidewiki)

Verifying ESX virtual machine file integrity

2010-09-28T19:49:00.001-07:00

vmware

http://bit.ly/aTziTg

in reference to: VMware KB: Verifying ESX virtual machine file integrity (view on Google Sidewiki)

Recreating a missing virtual machine disk (VMDK) descriptor file

2010-09-28T19:48:00.001-07:00

vmware

http://bit.ly/9rCdDR

in reference to: VMware KB: Recreating a missing virtual machine disk (VMDK) descriptor file (view on Google Sidewiki)

Zimbra Briefcase URL's not using HTTPS

2010-09-23T14:10:00.001-07:00

http://bit.ly/b27jfx

in reference to:

"Briefcase URL's not using HTTPS"
- [SOLVED] Briefcase URL's not using HTTPS - Zimbra :: Forums (view on Google Sidewiki)

http://www.elitistarmory.com/ down?

2010-09-13T17:12:00.001-07:00

Can't find any info on why http://www.elitistarmory.com/ is down. Google search shows nothing. No response from the domain owners. 10 pages of Google search results doesn't show any more information. Posting this blog so Google picks it up and maybe someone can enlighten us?

http://ressme.wordpress.com/2010/03/02/elitist-armory/#comment-19

SYSPRO6 SRSPRTWN.int Error when printing

2010-09-01T18:06:00.000-07:00

This is he solution from the Syspro support zone.

Basically, replace the file in:

*C:\Program Files\Common Files\Business Objects\3.0\bin\usp10.dll
or
*C:\Program Files(x86)\Common Files\Business Objects\3.0\bin\usp10.dll
(Depending on which OS you're using)

With the one from :

C:\Windows\System32\usp10.dll
or
C:\Windows\SysWow64\usp10.dll
(Dependng on which OS you're using)

Print from Mac OS X Snow Leopard to a Windows 7 Shared Printer [RSS Feed] 1/23/2010 10:08:23 AM Print from Mac OS X Snow Leopard to a Windows 7 Shared Printer Permalink

2010-09-01T16:08:00.001-07:00

http://bit.ly/95VG0x

in reference to: Print from Mac OS X Snow Leopard to a Windows 7 Shared Printer (view on Google Sidewiki)

OSX Flush DNS Cache

2010-08-31T11:58:00.001-07:00

dscacheutil -flushcache

http://bit.ly/9KRuIH

in reference to: 10.5: Flush DNS cache - Mac OS X Hints (view on Google Sidewiki)

How to disable iptables modification by Access Server

2010-08-19T14:46:00.001-07:00

http://bit.ly/beIvvY

in reference to: How to disable iptables modification by Access Server (view on Google Sidewiki)

./confdba --mod --key=iptables.vpn.disable.nat --value=False --prof=Default
./confdba --mod --key=iptables.vpn.disable.filter --value=False --prof=Default
./confdba --mod --key=iptables.vpn.disable.nat --value=False --prof=Default

How to rebrand the OpenVPN Access Server Web UI

2010-08-18T15:04:00.001-07:00

http://bit.ly/8WYY9u

in reference to: How to rebrand the OpenVPN Access Server Web UI (view on Google Sidewiki)

Merge bazaar repo with no common ancestor

2010-08-10T15:23:00.001-07:00

http://bit.ly/bDGBjZ

in reference to: Cuberick: Merge Bazaar Repositories With No Common Ancestor (view on Google Sidewiki)

Windows XP How to Disable File Synchronization

2010-07-28T14:37:00.001-07:00

http://bit.ly/ab3F0w

in reference to:

"Windows XP How to Disable File Synchronization"
- Windows XP How to Disable File Synchronization (view on Google Sidewiki)

Extending the System Disk in Windows Server 2008

2010-07-20T18:33:00.001-07:00

http://bit.ly/cfLZOi

in reference to: Extending the System Disk in Windows Server 2008 @ Jonathan Medd's Blog (view on Google Sidewiki)

Expanding a drive within a VMWare image

2010-07-20T18:26:00.001-07:00

http://bit.ly/3khFA7

in reference to: Expanding a drive within a VMWare image at Sean Deasy (view on Google Sidewiki)

Active@ Disk Image 4.0

2010-07-18T13:30:00.001-07:00

http://www.disk-image.net/

Looks like it has the same functionality as Acronis but a lot cheaper.

in reference to:

"Active@ Disk Image 4.0"
- Active@ Disk Image. Windows & Servers Backup Software. Win XP, 7, 2003, 2008, Vista. (view on Google Sidewiki)

ReadyNAS Pro & NVX – Boot/Diagnostics Menu

2010-06-24T15:09:00.001-07:00

If you really brick your ReadNAS here's how to recover.

http://goo.gl/uw3G

in reference to:

"ReadyNAS Pro & NVX – Boot/Diagnostics Menu"
- ReadyNAS Pro & NVX – Boot/Diagnostics Menu | The Bott Blog (view on Google Sidewiki)

ReadyNAS default login and password

2010-06-24T11:48:00.001-07:00

Prior to RAIDiator 4.0, the default login and password is 'admin' and 'infrant1'. Starting with RAIDiator 4.0, login and password is 'admin' and 'netgear1'. Please make sure you change the admin password after doing a factory default.

http://goo.gl/Na7L

in reference to:

"Prior to RAIDiator 4.0, the default login and password is 'admin' and 'infrant1'. Starting with RAIDiator 4.0, login and password is 'admin' and 'netgear1'. Please make sure you change the admin password after doing a factory default."
- NETGEAR ReadyNAS • Frequently Asked Questions (view on Google Sidewiki)

ReadyNAS NV+ Squid plug-in

2010-06-17T16:58:00.001-07:00

http://goo.gl/phSb

http://github.com/mnot/squid-readynas/downloads

in reference to:

"http://github.com/mnot/squid-readynas/downloads"
- NETGEAR ReadyNAS • View topic - Squid plug-in (view on Google Sidewiki)

ReadyNAS and Squid Proxy-Cache

2010-06-17T16:39:00.001-07:00

http://goo.gl/r8Nb

http://www.readynas.com/contributed/super-poussin/PRO-Squid_1.2.bin

in reference to:

"Squid Proxy-Cache"
- NETGEAR ReadyNAS • View topic - Squid Proxy-Cache (view on Google Sidewiki)

The suck that is Microsoft: You may experience performance problems when you are working with items in a large .pst file or in a large .ost file in Outlook 2007

2010-06-16T10:55:00.001-07:00

http://goo.gl/xQZt

in reference to:

"You may experience performance problems when you are working with items in a large .pst file or in a large .ost file in Outlook 2007"
- You may experience performance problems when you are working with items in a large .pst file or in a large .ost file in Outlook 2007 (view on Google Sidewiki)

Zimbra ZCS Connector for Outlook Performance

2010-06-16T10:08:00.001-07:00

http://goo.gl/16ME

in reference to:

"ZCS Connector for Outlook Performance"
- ZCS Connector for Outlook Performance - Zimbra :: Wiki (view on Google Sidewiki)

The suck of Microsoft:Windows Server 2008 Password Complexity Requirements

2010-06-14T14:33:00.001-07:00

* Passwords cannot contain the user’s account name or parts of the user’s full name that exceed two consecutive characters.
* Passwords must be at least six characters in length.
* Passwords must contain characters from three of the following four categories:

1.
English uppercase characters (A through Z).
2.
English lowercase characters (a through z).
3.
Base 10 digits (0 through 9).
4.
Non-alphabetic characters (for example, !, $, #, %).

in reference to:

"Passwords cannot contain the user’s account name or parts of the user’s full name that exceed two consecutive characters. Passwords must be at least six characters in length. Passwords must contain characters from three of the following four categories: English uppercase characters (A through Z). English lowercase characters (a through z). Base 10 digits (0 through 9). Non-alphabetic characters (for example, !, $, #, %)."
- Windows Server 2008 Password Complexity Requirements « the back room tech (view on Google Sidewiki)

Zimbra Outlook Troubleshooting Options

2010-06-14T13:12:00.001-07:00

http://goo.gl/AyFx

ZCOLogCtl.exe is installed when ZCS Connector for Outlook is installed. This logging control tool is in the \Program files\common files\system\msmapi\1036

in reference to:

"ZCOLogCtl.exe is installed when ZCS Connector for Outlook is installed. This logging control tool is in the \Program files\common files\system\msmapi\1036"
- Outlook Troubleshooting Options - Zimbra :: Wiki (view on Google Sidewiki)

The suck that is Microsoft: How to audit user access of files, folders, and printers in Windows XP

2010-06-11T16:07:00.001-07:00

http://goo.gl/yB4J

in reference to:

"How to audit user access of files, folders, and printers in Windows XP"
- How to audit user access of files, folders, and printers in Windows XP (view on Google Sidewiki)

Microsoft is the suck: .NET Patch Breaks vSphere Client

2010-06-10T22:17:00.001-07:00

Read this thread if your vSphere client is busted:

http://communities.vmware.com/message/1549559#1549559

in reference to: VMware Communities: .NET Patch Breaks vSphere Client ... (view on Google Sidewiki)

zimbra Managing Domains

2010-06-09T19:22:00.001-07:00

Domain Masquerading

http://goo.gl/JR9O

in reference to:

"Domain Masquerading"
- Managing Domains - Zimbra :: Wiki (view on Google Sidewiki)

CLI zmschedulebackup Network Edition only

2010-06-09T16:20:00.001-07:00

zmschedulebackup -R f "0 1 * * 6" i "0 1 * * 0-5" d 8d "0 0 * * *"

/opt/zimbra/bin/zmbackup -del 8d

http://goo.gl/e9zm

in reference to:

"CLI zmschedulebackup Network Edition only"
- CLI zmschedulebackup Network Edition only - Zimbra :: Wiki (view on Google Sidewiki)

Give Your Older .pst File New Life in Outlook 2007

2010-06-02T13:06:00.001-07:00

http://goo.gl/sBdg

in reference to:

"Give Your Older .pst File New Life in Outlook 2007"
- Microsoft Outlook 2007: 10 Top Tips - PCWorld (view on Google Sidewiki)

Google Chart Tools

2010-05-30T13:20:00.001-07:00

Good stuff. Time strip out the internally maintained chart code and replace it with this!

in reference to:

"Google Chart Tools"
- Google Chart Tools - Google Code (view on Google Sidewiki)

SID list

2010-05-28T21:17:00.001-07:00

http://support.microsoft.com/kb/243330

Your certificate was not installed due to the error : invalid request: missing required element: keysize

2010-05-25T17:26:00.001-07:00

http://goo.gl/W5bw fixes the problem. Look at Krishopper's reponse at http://goo.gl/d0OT

in reference to: [SOLVED] Can't install my commercial certificate - Zimbra :: Forums (view on Google Sidewiki)

IE8 not working with WPAD?

2010-05-20T22:01:00.001-07:00

1. Tools->Internet Options->Advanced->Reset
2. Closed IE and re-opened it

in reference to:

"Tools->Internet Options->Advanced->Reset Closed IE and re-opened it"
- Internet Explorer isn't auto-discovering http://wpad/wpad.dat auto-config - Server Fault (view on Google Sidewiki)

Whacked zimbra perms? The fix!

2010-05-20T11:43:00.001-07:00

/opt/zimbra/libexec/zmfixperms

in reference to:

"/opt/zimbra/libexec/zmfixperms"
- Zimbra file permissions - Zimbra :: Forums (view on Google Sidewiki)

Activate Instant Messaging (IM) in Zimbra

2010-05-19T20:28:00.001-07:00

su - zimbra
zmprov mc default zimbraFeatureIMEnabled TRUE

in reference to:

"su - zimbra zmprov mc default zimbraFeatureIMEnabled TRUE"
- Instant Messenger Protocol? - Zimbra :: Forums (view on Google Sidewiki)

Admin Password Reset

2010-05-19T17:59:00.001-07:00

su - zimbra
zmprov sp

in reference to:

"su - zimbra zmprov sp <admin email address> <new password>"
- Admin Password Reset - Zimbra :: Wiki (view on Google Sidewiki)

Small Office Networking

2010-05-19T13:26:00.001-07:00

# Map Windows Domain Groups to UNIX groups
net groupmap add ntgroup="Domain Admins" unixgroup=root type=d
net groupmap add ntgroup="Domain Users" unixgroup=users type=d
net groupmap add ntgroup="Domain Guests" unixgroup=nobody type=d

in reference to:

"# Map Windows Domain Groups to UNIX groups net groupmap add ntgroup="Domain Admins" unixgroup=root type=d net groupmap add ntgroup="Domain Users" unixgroup=users type=d net groupmap add ntgroup="Domain Guests" unixgroup=nobody type=d"
- Chapter 2. Small Office Networking (view on Google Sidewiki)

How to change IP address of your ESX Server

2010-05-19T09:50:00.001-07:00

There is a time when you need to change the IP adress your ESX host. You can’t do it in the VI client Graphical User Interface. The only thing you can do is to go to the

in reference to:

"There is a time when you need to change the IP adress your ESX host. You can’t do it in the VI client Graphical User Interface. The only thing you can do is to go to the"
- How to change IP address of your ESX Server | ESX Virtualization (view on Google Sidewiki)

Windows 7 Shutdown Command Line Switches

2010-05-18T21:01:00.001-07:00

Full List of Windows 7 Shutdown Switches

in reference to: Windows 7 Shutdown Command Line Switches (view on Google Sidewiki)

Karmic drops vol_id, superceded by blkid

2010-05-17T09:07:00.001-07:00

Important stuff to know.

in reference to: Karmic drops vol_id, superceded by blkid | Rebel Zero (view on Google Sidewiki)

export HISTTIMEFORMAT="%F %T "

2010-05-13T15:16:00.001-07:00

Good bash stuff.

in reference to:

export HISTTIMEFORMAT="%F %T "

- Time-stamp your bash history « Varyable’s Blog (view on Google Sidewiki)

CrashPlanPRO Client CLI commands

2010-05-01T08:42:00.001-07:00

http://goo.gl/Av1A

in reference to: PRO Client Commands [CrashPlan PRO Support Site] (view on Google Sidewiki)

CrashPlan File System Layout

2010-05-01T08:41:00.001-07:00

http://goo.gl/UHj9

in reference to: File System Layout [CrashPlan PRO Support Site] (view on Google Sidewiki)

Microsoft Downloads & Info

2010-04-06T12:03:00.001-07:00

http://goo.gl/2nNC

in reference to:

"Microsoft Downloads & Info"
- Microsoft Downloads Links (view on Google Sidewiki)

Zimbra Documents and HTTP ERROR 500

2010-04-02T20:27:00.001-07:00

http://goo.gl/o0xN

in reference to: Error in NoteBook. system failure: wiki formatter failure - Zimbra - Forums (view on Google Sidewiki)

Steps to change the Zimbra server's hostname using zmsetservername

2010-04-02T11:35:00.001-07:00

http://goo.gl/PsJI

in reference to:

"Steps to change the Zimbra server's hostname using zmsetservername"
- ZmSetServerName - Zimbra :: Wiki (view on Google Sidewiki)

ERROR: service.INVALID_REQUEST (invalid request: can only be used with "zmprov -l/--ldap")

2010-04-01T13:01:00.001-07:00

http://goo.gl/KxAm

zmprov -l gaa

in reference to:

"zmprov -l gaa"
- [SOLVED] 'zmprov gaa' fails - Zimbra - Forums (view on Google Sidewiki)

Connect to a Headless CrashPlan Desktop

2010-03-29T13:52:00.001-07:00

http://goo.gl/ejeo

Works like a charm

in reference to:

"Connect to a Headless CrashPlan Desktop"
- Connect to a Headless CrashPlan Desktop [CrashPlan Support Site] (view on Google Sidewiki)

Maximum IMAP Message Size Limit not just MTA Size Limit

2010-03-25T19:27:00.001-07:00

Increase the MaxSize on IMAP

zmprov mcf zimbraFileUploadMaxSize

http://goo.gl/cHrW

in reference to:

"Maximum IMAP Message Size Limit not just MTA Size Limit"
- Zimbra Email Size Limit - Zimbra - Forums (view on Google Sidewiki)

Using DFS Shares in Leopard

2010-03-25T17:05:00.001-07:00

Well, same problem under snow leopard. Could not figure out why DFS shares aren't work.

http://goo.gl/Xlvw

Having endured for years the nuisance of having to check my Windows machine’s obtuse property dialog boxes to manually resolve pathnames such as \\domain\fs\share into something like \\server\hidden$\share that I could actually mount on my Mac (as smb://server/hidden$/share, of course), I eventually decided to do something about it.

in reference to:

"Having endured for years the nuisance of having to check my Windows machine’s obtuse property dialog boxes to manually resolve pathnames such as \\domain\fs\share into something like \\server\hidden$\share that I could actually mount on my Mac (as smb://server/hidden$/share, of course), I eventually decided to do something about it."
- Using DFS Shares in Leopard - Tao of Mac (view on Google Sidewiki)

FAQ for imapsync

2010-03-25T08:47:00.001-07:00

http://goo.gl/nV92

in reference to:

"FAQ for imapsync"
- http://www.linux-france.org/prj/imapsync/FAQ (view on Google Sidewiki)