2011 on Details...

AIX - loopmount

Mon, 19 Dec 2011 04:10:49 +0000

Finally on aix 6.1 ibm have introduced mounting of iso directly without raw copy on lv:

Check if necessary loopback device is available

# lsdev -C | grep loop

if nothing returned, run:

# mkdev -c loopback -s node -t loopback
loop0 Available

If the device is not present on system you get this error:

1320-003 loopmount: Specified loopback device is not found in ODM

Now for mount:

# loopmount -i /iso/dvd.iso -l loop0 -o "-V cdrfs -o ro" -m /mnt/dvd

And umount:

VIO - iso virtual DVD

Mon, 19 Dec 2011 03:48:50 +0000

Example of PowerVM virtual dvd setup:

 login: padmin
 padmin's Password:
 1 unsuccessful login attempt since last login.
 Last unsuccessful login: Mon Jan 31 18:51:28 CST 2011 on /dev/vty0
 Last login: Mon Jan 31 18:28:29 CST 2011 on /dev/vty0
 $
 $ mkrep -sp rootvg -size 10G
 Virtual Media Repository Created
 Repository created within "VMLibrary" logical volume
 $ mkvopt -name 6_1_6osp.iso -dev cd0 -ro
 $
 $ mkvdev -vadapter vhost1 -fbo -dev vcd1
 vcd0 Available
 $ loadopt -vtd vcd0 -disk 6_1_6osp.iso
 $ unloadopt -vtd vcd0

Linux - IBM LinTape driver

Mon, 19 Dec 2011 03:41:43 +0000

If you need to user ibm lto tape drive inside IBM, Adic, Dell tapelibrary, with Tivoli Storage Manager is necessary to use

Download latest driver from IBM Fixcentral: Storage Systems => Tape Systems => Tape device drivers and software => Linux

Get two two RPMs (my system is an RHEL 5 on 32bit hardware) : lin_tape-1.61.0-1.src.rpm <== Kernel module lin_taped-1.61.0-rhel5.i386.rpm <== Binary services

First step, rebuild the source:

# rpmbuild --rebuild lin_tape-1.61.0-1.src.rpm` `
 Installing lin_tape-1.61.0-1.src.rpm
 Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.625
 + umask 022
 + cd /usr/src/redhat/BUILD
 + cd /usr/src/redhat/BUILD
 + rm -rf lin_tape-1.61.0
 + /bin/gzip -dc /usr/src/redhat/SOURCES/lin_tape-1.61.0.tgz
 [cut]
 Wrote: /usr/src/redhat/RPMS/i386/lin_tape-1.61.0-1.i386.rpm
 Executing(%clean): /bin/sh -e /var/tmp/rpm-tmp.18792
 + umask 022
 + cd /usr/src/redhat/BUILD
 + cd lin_tape-1.61.0
 + rm -rf /var/tmp/lin_tape-1.61.0-1-root-root
 + exit 0
 Executing(--clean): /bin/sh -e /var/tmp/rpm-tmp.18792
 + umask 022
 + cd /usr/src/redhat/BUILD
 + rm -rf lin_tape-1.61.0
 + exit 0

Second step, install all:

AIX - lpp incosistent

Mon, 19 Dec 2011 03:17:28 +0000

# lppchk –v

lppchk: The following filesets need to be installed or corrected to bring the system to a consistent state: 9a33182fe26f1beae04e59e5cb6d3cdb 0.0.0.0 (COMMITTED)

# lslpp -L

Backup the ODM using the following command:

# tar -cvf /tmp/odm.tar ./etc/objrepos ./usr/lib/objrepos
# export ODMDIR=/usr/lib/objrepos
# odmget -q name= lpp
# odmdelete -q name= -o lpp
# odmdelete -q lpp_name= -o product
# odmdelete -q lpp_id= -o history
# odmdelete -q lpp_id= -o inventory
# export ODMDIR=/etc/objrepos
# odmdelete -q name= -o lpp
# odmdelete -q lpp_name= -o product
# odmdelete -q lpp_id= -o history
# odmdelete -q lpp_id= -o inventory
# export ODMDIR=/etc/objrepos

Check lppchk -v again to see if those entries are gone from ODM

AIX - Warning, savebase failed

Mon, 19 Dec 2011 03:05:23 +0000

0516-1734 extendlv: Warning, savebase failed. Please manually run 'savebase' before rebooting.

If you run savebase -v and you get “non-bootable LV name given” try reconstucting your /dev/ipldevice file.

Run savebase -v again and if you get the same error, try follow procedure:

# bosboot -ad /dev/hdiskX (a disk that has hd5 on it)
# bosboot -ad /dev/hdiskY (a disk that has hd5 on it)
# ipl_varyon -i

[You’ll get a return on every physical disk on the system]

You will then get a return similar to this:

savebase -v

saving to '/dev/hd5'
99 CuDv objects to be saved
240 CuAt objects to be saved
44 CuDep objects to be saved
51 CuVPD objects to be saved
407 CuDvDr objects to be saved
5 CuPath objects to be saved
0 CuPathAt objects to be saved
0 CuData objects to be saved
0 CuAtDef objects to be saved
Number of bytes of data to save = 49587
Compressing data
Compressed data size is = 12069
 bi_start = 0x3600
 bi_size = 0x1820000
 bd_size = 0x1800000
 ram FS start = 0x8d6ca0
 ram FS size = 0xea34cf
 sba_start = 0x1803600
 sba_size = 0x20000
 sbd_size = 0x2f29
Checking boot image size:
 new save base byte cnt = 0x2f29
Wrote 12073 bytes
Successful completion

AIX - lslpp

Mon, 19 Dec 2011 02:28:15 +0000

Memo: lslpp

List the package that owns a file

# lslpp -w

List the files in a package

# lslpp -f

List all packages installed

# lslpp -L

NetworkManager modifies /etc/hosts

Sat, 26 Nov 2011 22:09:05 +0000

There is an annoying bug (or feature depends on point of view) every restart/reconnect managed by NetworkManager, restore the original /etc/hosts loaded on startup. I’ve made a 3 line script inspired by visudo to manual edit the hosts file and prevent the other unexpected modifies:

File like (with +x attribute): /usr/sbin/vihosts

#!/bin/sh
sudo chattr -i /etc/hosts
sudo vim /etc/hosts
sudo chattr +i /etc/hosts

Citrix - ICAClient issue on Linux REHL6

Thu, 24 Nov 2011 06:05:51 +0000

Another stupid Citrix ICAClient issue on Redhat linux:

[leo@thinkleo2 ~]$ /usr/lib/ICAClient/wfcmgr -icaroot /usr/lib/ICAClient
Warning: Missing charsets in String to FontSet conversion
Warning: Missing charsets in String to FontSet conversion
Warning: Unable to load any usable fontset
Error: Aborting: no fontset found

Solution 1 force language C (my favourite for any lang problems):

[leo@thinkleo2 ~]$ export LANG=C

Solution 2 remove charset cjkuni:

[leo@thinkleo2 ~]$ sudo yum remove cjkuni*
Loaded plugins: priorities, product-id, refresh-packagekit, rhnplugin, subscription-manager
Updating Red Hat repositories.
Setting up Remove Process
Resolving Dependencies
--> Running transaction check
---> Package cjkuni-fonts-common.noarch 0:0.2.20080216.1-34.el6 will be erased
---> Package cjkuni-fonts-ghostscript.noarch 0:0.2.20080216.1-34.el6 will be erased
---> Package cjkuni-ukai-fonts.noarch 0:0.2.20080216.1-34.el6 will be erased
---> Package cjkuni-uming-fonts.noarch 0:0.2.20080216.1-34.el6 will be erased
--> Finished Dependency Resolution
Dependencies Resolved
=============================================================================================================================
 Package                    Arch     Version                   Repository                                               Size
=============================================================================================================================
Removing:
 cjkuni-fonts-common        noarch   0.2.20080216.1-34.el6     @anaconda-RedHatEnterpriseLinux-201105101829.i386/6.1   0.0
 cjkuni-fonts-ghostscript   noarch   0.2.20080216.1-34.el6     @rhel-i386-workstation-6                                6.2 k
 cjkuni-ukai-fonts          noarch   0.2.20080216.1-34.el6     @rhel-i386-workstation-6                                 17 M
 cjkuni-uming-fonts         noarch   0.2.20080216.1-34.el6     @anaconda-RedHatEnterpriseLinux-201105101829.i386/6.1    21 M
Transaction Summary
=============================================================================================================================
Remove        4 Package(s)
Installed size: 37 M
Is this ok [y/N]: y
Downloading Packages:
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Erasing    : cjkuni-fonts-ghostscript-0.2.20080216.1-34.el6.noarch                                                     1/4
  Erasing    : cjkuni-ukai-fonts-0.2.20080216.1-34.el6.noarch                                                            2/4
  Erasing    : cjkuni-uming-fonts-0.2.20080216.1-34.el6.noarch                                                           3/4
  Erasing    : cjkuni-fonts-common-0.2.20080216.1-34.el6.noarch                                                          4/4
duration: 336(ms)
Installed products updated.
Removed:
  cjkuni-fonts-common.noarch 0:0.2.20080216.1-34.el6         cjkuni-fonts-ghostscript.noarch 0:0.2.20080216.1-34.el6
  cjkuni-ukai-fonts.noarch 0:0.2.20080216.1-34.el6           cjkuni-uming-fonts.noarch 0:0.2.20080216.1-34.el6
Complete!
[leo@thinkleo2 ~]$

Postfix - Auth Dovecot Backend

Thu, 27 Oct 2011 22:21:56 +0000

main.cf file Postfix related parametes:

smtpd_sasl_authenticated_header = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth

dovecot.conf file Dovecot related parameters:

 auth default {
  mechanisms = plain login

[…removed irrelevance parameters…]

 socket listen {
    client {
      path = /var/spool/postfix/private/auth
      mode = 0660
      user = postfix
      group = postfix
    }
  }
}

Linux - Multicast DVB-S router for EUMETCast

Mon, 10 Oct 2011 04:19:11 +0000

This simple script transform a linux box into a DVB-S Satellite router to receive data from Eurobird 9E used by EUMETSAT to redistribute weather satellite image.

REQUIRE: DVB Tools SMCroute PCI Card supported by Linux/DVB Tools (ex. Skystar 2)

#!/bin/bash
####################################################################
#								   #
# Leonardo Rizzi 						   #
# Late night 24/04/2010						   #
# Revision 1.0							   #
# Tune DVB-S pci card for Eurobird 9E shifted from 13E Hotbird     #
# Tune, set net PID, Enable multicasting ecc. ecc. blah blah buuuu #
#								   #
####################################################################

#Globalvar
DTUNE="/usr/bin/dvbtune"
DNET="/usr/bin/dvbnet"
MROUTE="/usr/sbin/smcroute"
IFCONFIG="/sbin/ifconfig"

SERVICE="eumetsat"

#Set dvbcard 0-3
INT="0"

#Set multicast forwarding interface and ip (by default TelliCast bind on 192.168.238.238)
MINT="eth1"
MIP="192.168.238.238"

#Set absolute frequency in Hz
FREQ=11977000

#Set polarization
POL=H

#Set symbol rate
SYR=27500

#Set PID one space for value separation
PID="100 300 301 302 500 509 510 511"

#Begin start!!

case "$1" in
  start)
  	# Pre-Start check

  	test -x $DTUNE || { echo "$DTUNE not installed or not configured properly";
        if [ "$1" = "stop" ]; then exit 0;
        else exit 5; fi; }

        test -x $DNET || { echo "$DNET not installed or not configured properly";
        if [ "$1" = "stop" ]; then exit 0;
        else exit 5; fi; }

        test -x $MROUTE || { echo "$MROUTE not installed or not configured properly";
        if [ "$1" = "stop" ]; then exit 0;
        else exit 5; fi; }

        test -x $IFCONFIG || { echo "$IFCONFIG not installed or not configured properly";
        if [ "$1" = "stop" ]; then exit 0;
        else exit 5; fi; }

        test -d /dev/dvb/adapter$INT || { echo "DVB$INT device not installed or not configured properly";
        if [ "$1" = "stop" ]; then exit 0;
        else exit 5; fi; }

	# Tuning the dvb frequency
	echo ""
	echo "Tune the satellite donwlink on interface ${INT}"
	${DTUNE} -c ${INT} -f ${FREQ} -p ${POL} -s ${SYR} -m >/dev/null 2>&1 &

	# Set address on local forwarding interface and bring it up
	echo ""
	echo "Set multicast forwarding interface ${MINT}"
	${IFCONFIG} ${MINT} ${MIP} multicast up

	# Set PID on active dvb interface
	echo ""
	echo "Set net interface for listed PID:"
	for i in ${PID}
	do
	echo "Bring up PID $i"
	${DNET} -a ${INT} -p $i>/dev/null 2>&1
	done

	# Set address on dvbs interfaces and bring it up
	echo ""
	echo "Set net interface up:"
	for ii in {0..7}
	do
	echo "Bring up dvb net interface $ii"
	${IFCONFIG} dvb${INT}_$ii 192.168.22$ii.238 up >/dev/null 2>&1
	done

	# Start multicast router
	echo ""
	echo "Enable Multicast Router"
	${MROUTE} -d

	#PID 100 multicast forward
	echo "Set multicast for PID 100"
	${MROUTE} -a dvb0_0 192.168.1.1 224.223.222.34 ${MINT}
	${MROUTE} -a dvb0_0 192.168.1.1 224.223.222.36 ${MINT}
	${MROUTE} -a dvb0_0 192.168.1.1 224.223.222.40 ${MINT}
	${MROUTE} -a dvb0_0 192.168.1.1 224.223.222.223 ${MINT}

	#PID 300 multicast forward
	echo "Set multicast for PID 300"
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.21 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.31 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.32 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.37 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.226 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.252 ${MINT}
	${MROUTE} -a dvb0_1 192.168.1.1 224.223.222.253 ${MINT}

	#PID 301 multicast forward
	echo "Set multicast for PID 301"
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.23 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.33 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.38 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.39 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.35 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.227 ${MINT}
	${MROUTE} -a dvb0_2 192.168.1.1 224.223.222.251 ${MINT}

	#PID 302 multicast forward
	echo "Set multicast for PID 302"
	${MROUTE} -a dvb0_3 192.168.1.1 224.223.222.25 ${MINT}

	#PID 500 multicast forward
	echo "Set multicast for PID 500"
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.1 ${MINT}
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.22 ${MINT}
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.28 ${MINT}
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.27 ${MINT}
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.29 ${MINT}
	${MROUTE} -a dvb0_4 192.168.1.1 224.223.222.30 ${MINT}

	#PID 509 multicast forward
	echo "Set multicast for PID 509"
	${MROUTE} -a dvb0_5 192.168.1.1 224.223.222.248 ${MINT}
	${MROUTE} -a dvb0_5 192.168.1.1 224.223.222.249 ${MINT}
	${MROUTE} -a dvb0_5 192.168.1.1 224.223.222.250 ${MINT}

	#PID 510 multicast forward
	echo "Set multicast for PID 510"
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.231 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.232 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.233 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.234 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.235 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.236 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.237 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.239 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.240 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.242 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.243 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.244 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.245 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.246 ${MINT}
	${MROUTE} -a dvb0_6 192.168.1.1 224.223.222.247 ${MINT}

	sleep 5
	;;

  stop)
	# Stopping the dvb card
	echo ""
	echo "Stopping Satellite Downlink"
	killall dvbtune >/dev/null 2>&1

	echo ""
	echo "Stopping Multicast Routing"
	# Stopping Multicast Router
	${MROUTE} -k

	# Disable dvbs interfaces and remove active PID
	echo ""
	echo "Shutting down DVB-S interfaces"
	for iii in {0..7}
	do
	/sbin/ifconfig dvb0_$iii down >/dev/null 2>&1
	${DNET} -d $iii >/dev/null 2>&1
	done

	# Remove and disable multicasting forwarding interface
	echo ""
	echo "Shutting down multicasting forwarding interface"
	${IFCONFIG} ${MINT} del ${MIP} multicast
	${IFCONFIG} ${MINT} down

	;;

  restart)

	$0 stop
	$0 start
	;;

  status)

  	PID1='pidof dvbtune'
  	echo ""
  	echo "Tuning subsystem running at pid" $PID1

  	PID2='pidof smcroute'
  	echo ""
  	echo "Mulicast router running at pid" $PID2

	;;

  multicast)

  	echo "Multicasting Routing table:"
  	ip mroute show
	;;

  *)
	echo "Usage: $0 [start|stop|restart|status|multicast]"
	;;
esac

exit;s

The Windows Installer Service could not be accessed.

Sun, 09 Oct 2011 03:07:57 +0000

The Windows Installer Service could not be accessed. This can occur if you are running Windows in safe mode, or if the Windows Installer is not correctly installed. Contact your support personnel for assistance.

kb315353

To resolve this issue, follow these steps:

Log on to your computer as an administrator.
Click Start, and then click Run.
In the Open box, type cmd, and then click OK.
At the command prompt, typemsiexec.exe /unregister, and then press ENTER.
Type msiexec /regserver, and then press ENTER.
Verify that the SYSTEM account has full control access permissions to the HKEY_CLASSES_ROOT hive in the Windows registry. In some cases, you may also have to add Administrator accounts. To do so:Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base: 322756 (http://support.microsoft.com/kb/322756/ ) How to back up and restore the registry in Windows
Click Start, click Run, type regedit in the Open box, and then click OK.
Click the following registry hive: HKEY_CLASSES_ROOT
On the Edit menu, click Permissions.
If SYSTEM is not listed in the Group or user names list, click Add, make sure that the local computer name appears in the From this location box, type system in the Enter the object names to select box, click Check Names, and then click OK.
Click SYSTEM in the Group or user names list, and then select the Full Control check box under Allow in the Permissions for SYSTEM box.
Click Apply, click OK, and then quit Registry Editor.
Restart the computer. If the problem is not resolved, repair Windows XP. For more information about how to repair Windows XP, click the following article number to view the article in the Microsoft Knowledge Base: 315341 (http://support.microsoft.com/kb/315341/ ) How to perform an in-place upgrade (reinstallation) of Windows XP

AIX - DLPAR connection lost to HMC

Wed, 21 Sep 2011 02:23:30 +0000

Sometime during AIX migration/alt_clone or HMC upgrade, it can happen that RMC ID get lost or duplicated, the the rsct process is unable to re stabilize the connection.

You can reset the key and restart that service as follows:

Reset RMC unique ID:

# /usr/sbin/rsct/install/bin/recfgct
# /usr/sbin/rsct/bin/rmcctrl -z
# /usr/sbin/rsct/bin/rmcctrl -A

Then you can check the rmc status:

# /usr/sbin/rsct/bin/rmcdomainstatus -s ctrmc

AS/400 - Change IP remote printer

Sat, 02 Jul 2011 14:06:51 +0000

For a network attached printer:

WRKWTR and do a #4 to End the writer
WRKCFGSTS *DEV *PRT and use #2 to vary off the device, then #8 to Work with description then #2 to change, then page/roll and change the IP
Vary the device on
WRKWTR and start the print writer

AIX - ODM Object Classes

Sat, 02 Jul 2011 14:00:15 +0000

AIX - ODM Device Configuration Object Classes

A list of the ODM Device Configuration Object Classes follows:

PdDv Predefined Devices

PdCn Predefined Connection

PdAt Predefined Attribute

Config_Rules Configuration Rules

CuDv Customized Devices

CuDep Customized Dependency

CuAt Customized Attribute

CuDvDr Customized Device Driver

CuVPD Customized Vital Product Data

Juniper - Netscreen upgrade via TFTP

Mon, 20 Jun 2011 01:49:00 +0000

fw01-> save software from tftp 10.255.4.210 ns50ns25.5.4.0r21.0 to flash
Load software from TFTP 10.255.4.210 (file: ns50ns25.5.4.0r21.0).
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
tftp received octets = 5994268
tftp success!
TFTP Succeeded
Save to flash. It may take a few minutes ...platform = 14, cpu = 10, version = 18
update new flash image (01e97ddc,5994268)
platform = 14, cpu = 10, version = 18
offset = 20, address = 3060000, size = 5994189
date = 4062f3e0, sw_version = 4062f3e4, cksum = f7522c46
Program flash (5994268 bytes) ...
sec_size :131072 align_support 1 , mode 96028
++++++++++++++++++++++++++++++++++++++++++++++done
Done
fw01-> reset
System reset, are you sure? y/[n] y
In reset ...

OpenVMS - SCSSYSTEMID

Sun, 03 Apr 2011 02:12:16 +0000

SCSSYSTEMID (G) Specifies a number that identifies the computer. This parameter is not dynamic. SCSSYSTEMID is the low-order 32 bits of the 48-bit system identification number.

If the computer is in an OpenVMS Cluster, specify a value that is unique within the cluster. Do not use zero as the value.

If the computer is running DECnet for OpenVMS, calculate the value from the DECnet address using the following formula:

SCSSYSTEMID = ((DECnet area number) \* 1024) + (DECnet node number)

Example: If the DECnet address is 2.211, calculate the value as follows:

SCSSYSTEMID = (2 \* 1024) + 211 = 2259

AIX - Mounting ISO images

Sun, 03 Apr 2011 01:10:08 +0000

There is a known problem with mounting ISO images on the AIX platform. To workaround the problem, complete the following instructions:

Obtain the size of the image, then identify the nearest multiple of 128 MB that will provide enough space for the image. For example, the image of CD-ROM is approximately 650/700 MB, so use 768 MB as an image size.

Make a logical volume of this size. Ensure that there is enough space on the physical volume. For example, hdisk0.

# mklv -y cdlv -s n -L /dev/cdlv rootvg 768M hdisk0

If the command fails, increase the volume size by a multiple of 128.

Use the dd command to create a pseudo-device. Ensure that the partition has enough space for the pseudo-device. In the following example command, the pseudo-device is /dev/cdlv.

# dd if=/opt/iso/cd.iso of=/dev/cdlv

Note that this command may take a long time and will create two dd processes.

Mount the device like a CD-ROM in AIX. Ensure that the mount point exists.

# mount -v cdrfs -o ro /dev/cdlv /mnt/iso

eToken PASS in open environment

Sun, 23 Jan 2011 21:00:23 +0000

I bought promo pack of 5 Aladdin eToken PASS units, the tokens comes with serial number in this format: XXXX-XXXX-XXXX-XXXX activated for free on the website of the manufacturer only one time of course, then used token purchased from ebay usually are unusable.

The activation consists in a zip containing two ldif format dat files, you can extract the token key parsing the text from “importAlpine.dat” file:

sccAuthenticatorId: (means token serial number) sccKey= (means token key)

eToken PASS are event based tokens, I’ve tested successfully using otptool, part of mod-authn-otp.

AIX LPAR - CDROM device relase

Sun, 23 Jan 2011 20:17:32 +0000

When AIX will not release /dev/cd0 device (after umount any associted filesystems), and you get busy device error on dlpar operations, use this command to kill all processes that take busy resource:

# fuser -k -x -u -c /dev/cd0

Usually in pSeries hardware configuration is connected to a scsi controller by scsi-to-ide/sas/sata or other terrible solution bridge.

To made all this operation faster you can identify pci parent adapter and remove recursively all device.

Identify:

# lsdev -l cd0 -F parent
 scsi0
# lsdev -l scsi0 -F parent
 sisscsia0
# lsdev -l sisscsia0 -F parent
 pci10

Remove:

# rmdev -Rdl pci10
cd0 deleted
ses0 deleted
scsi0 deleted
sisscsia0 deleted
pci10 deleted

Then you can move the controller from HMC to another LPAR

Omikey Cardman 4040 - Linux FC14

Sun, 23 Jan 2011 18:53:21 +0000

In this post I describe how to get works OMNIKEY Cardman 4040, a pcmcia smartcard reader/writer under Linux Ferdora 14 using manufacturer PC/SC driver.

Install the required packages:

[root@thinkleo1 ~]# yum install pcsc-lite openct opensc

Configure OpenSC

With PC/SC cardbus access OpenCT is useless but without that daemon, on every smartcard operational commad you get lot of this erros:

Error: can't open /var/run/openct/status: No such file or directory

Then to avoid (openct/opensc/pcscd) conflicts I prefer to disable openct framework like this:

Substitute into /etc/opensc.conf :

reader_drivers = openct, pcsc, ctapi;

With (if is not present, add this under “app default” context):

reader_drivers = pcsc, ctapi;

Stop OpenCT daemon:

[root@thinkleo1 ~]# /etc/init.d/openct stop

Install PC/SC driver

Download PC/SC driver for Linux form:

http://www.hidglobal.com/

Actual release is “ifdok_cm4040_lnx-2.0.0.tar.gz” this file contains a nice installer, but doesn’t work under fedora, then proceed manually:

[root@thinkleo1 ~]# tar -xvf ifdok_cm4040_lnx-2.0.0.tar.gz
[root@thinkleo1 ~]# cd ifdok_cm4040_lnx-2.0.0
[root@thinkleo1 ifdok_cm4040_lnx-2.0.0]# cp ifdok_cm4040_lnx-2.0.0.so /usr/lib/pcsc/drivers/

Create file: /etc/reader.conf.d/cardman4040.conf

With this content (adjust that if you have more that one pcmcia slot) :

 #
 # Configuration file for CardMan 4040 smartcard reader.
 #
 FRIENDLYNAME            "OMNIKEY CardMan 4040 Socket 0"
 DEVICENAME              /dev/cmx0
 LIBPATH                 /usr/lib/pcsc/drivers/ifdok_cm4040_lnx-2.0.0.so
 CHANNELID               0

Now insert the smartcard reader into pcmcia slot and restart pcscd:

[root@thinkleo1 ~]# /etc/init.d/pcscd restart

Test the reader:

If all works fine you can get this output:

[root@thinkleo1 ~]# opensc-tool -l
  Readers known about:
  Nr.    Driver     Name
  0      pcsc       OMNIKEY CardMan 4040 Socket 0 00 00
[root@thinkleo1 ~]#

Now the reader is ready to use.