Have a view?

Mine Mine Mine

This is my Blog that consist of my very opinionated views of my little world as I see it. I publish this site for my convenience and unless I have given you my site address directly you are a mere visitor to my personal blog site.

Feel free to read and comment positively but remember you are solely responsible for determining the suitability of this information. Content can change depending on my whims.

© Ray    

PS. I copy stuff from other web sites for my convenience and it is published in the public domain by virtue of this being a blog. Where possible I will list the original web site and kudos to the original author. I do this because some web content is important to me and bitter personal experience has taught me that important web sites can disappear or be changed for the worse and that annoys me. If you feel done in then send me a mail and I will remove your content but please do get a life!

07/06/2009

Fighting Foundations - Installing Applications

QuickImage Category :
0
The IBM Lotus Foundation server has no applications installed or available for an install.
A picture named M2
Lets copy some applications to the server. Use SMB to copy files to the autoinstall directory
A picture named M3
smb://lfdemo/autoinstall or net use x: \\lfdemo\autoinstall
A picture named M4
Copy all the relevant *.pkg files
A picture named M5
For completeness I also copy all the VMWare images I use, after all, this is simply a file server. Once the files are copied they will appear in the web admin screen.

A picture named M6

A picture named M7
Telnet into the box and enter nvs:

A picture named M8

I am a little depressed and disappointed at the moment. A valuable source of information has always been the kb.nitix.com web site. This has now been withdrawn and replaced with the worst, sorry defacto, IBM web site. It is useless and pointless and extremely frustrating. This url will allow you to search for information but good luck. Better to use google's cache while it is still available. I have wasted so much of my Sunday trying to find stuff that I know was available on the kb.nitix site. sigh

Changes to Support Systems Tuesday, May 26, 2009
Dear Partners,
....
Additionally, kb.nitix.com will be retired on May 28th 2009. The contents of the knowledgebase have been transferred to http://www.ibm.com/software/lotus/foundations/support/.

OK, so it is now 9pm and I have a live demo tomorrow. Shall I do a full backup, zot the disk, zap the config and do a full restore? Will it work this time? Ah what the hell here goes nothing!
 

06/06/2009

Fighting Foundations - Clean Start

Category :
0
After many many demos it is time to clear the disks and start again. Here is how:

Telnet to the server and signon as an admin
disk-zot

A picture named M2
A picture named M3
A picture named M4
A picture named M5
Don't reboot
zap

A picture named M6

If you simply want to remove all backups try this although it did not work for me.
Telnet into the Nitix server and log in as an an admin.
Mount the idb disk:
wd idb-mount

Erase all the backups:
ls -l /tmp/idb/home/backups/Files
rm -rf /tmp/idb/home/backups/Files/*

Unmount the idb disk. This command is required or the idb disk will be permanently mounted.
wd idb-unmount

Your server will delete all backup sets from the idb disk while maintaining disk partition details.

Now reconnect to the new server.


A picture named M7A picture named M8
As we do not have a proper certificate installed you must accept the exception. Set the password and your domain and if so lucky, lucky, lucky, add your serial number although this can be done later.

A picture named M9

Create the disks the way you would like.

A picture named M10
Say ok!

A picture named M11
Wait and then wait a bit more but not too long.
A picture named M12
Set the machine name and you are good to go! Altogether 18 minutes. Not bad.

The debug console in case. This is the same as logging in the initial telnet screen or if you connect a screen to the console.
telnet localhost 4242
auth (ROOT) (PASSWORD)
debug 9
quit

06/06/2009

Fighting Foundations - Start again

Category :
0
Clearing all disks:

Telnet into the Nitix server and log in as an an admin.
Mount the idb disk:
wd idb-mount
Erase all the backups:
ls -l /tmp/idb/home/backups/Files
rm -rf /tmp/backups/*
Unmount the idb disk. This command is required or the idb disk will be permanently mounted.
wd idb-unmount
Your server will delete all backup sets from the idb disk while maintaining disk partition details.

telnet localhost 4242
auth (ROOT) (PASSWORD)
debug 9
quit

Telnet

disk-zot

05/06/2009

F1 British Grand Prix

QuickImage Category :
0
Just to rub it in for those without tickets. I will be unavailable on Friday, Saturday and Sunday as I will be camping at Silverstone for the last F1 GP.



A picture named M2

03/06/2009

Encryption is fun fun fun :-(

QuickImage Category :
0
The unthinkable happened to me last week. I was on a very pleasant flight with colleagues coming back from presenting at LCTY in Edinburgh, and Lewis of course. As the plane rolled on to the stand I was keen to move from seat 9a to Lewis who was in Business class as usual. I grabbed my hand luggage and we had a brisk walk towards baggage reclaim where I needed to pick up the huge Lotus foundation server.. All was pleasant and then it hit me. I left my laptop under the seat on the plane because I was so busy socialising. I manage to convince a very nice baggage handler to pick it up for me and he made it just as the plane was about to close down for the night.

So why is encryption important? Well although my Ubuntu workstation conforms to IBM security guidelines I know that if I had to pick up someone's laptop with Ubuntu I will have a field day with the data. The more I use Linux the more I know and I know a lot, well not as much as some but more than others!

Reason 2 is of course over zealous idiots working for HMG where rank quickly goes to the head and pumps up the ego up. I saw a program on BBC2 the other night on who is watching you and it made me cringe how unprofessional and idiotic some law enforcement officers are. I am not a conformists as you can tell. In one scene a private investigator was pursued for making a blaging call to get information for a customer about an employee defrauding a company. How much was this information worth? 250 pounds. For that the blues and two's, a whole squad of them, broke down the door humiliated all and then confiscated all servers. So, encryption will ensure that the idiots can not do anything with the data if the server is at recoverable at all as I would assume the SOP is to simply pull the power as they would not know how to shut down or access a linux server anyway. I am of course assuming that you are innocent until proven guilty.

I have thought long and hard about this and have tried every method I could find and I have now settled on a highly secure method that is a good compromise as well. The method is called Two Form Factor Encryption and is very very secure.

It works like door keys really and is in addition to any other security you may have. Firstly you encrypt a USB stick with 256 bit EAS encryption. This locks any data securely on the key. You then generate a random key on the USB stick. Those are the keys to the new system.

Once complete you create the disk partitioning that suits you. The only requirement is a small boot partition of around a 100 MB that should be left unencrypted for convenience sake. The main partition or root partition is created as normal and then a special block device is created within partition  that is then encrypted using the key generated on the USB stick.
cryptsetup luksFormat --hash=sha512 --cipher=aes-cbc-essiv:sha256 --key-size=256 /dev/sdd
cryptsetup luksOpen /dev/sdd cryptkeys
mkfs.ext2 /dev/mapper/cryptkeys
mount /dev/mapper/cryptkeys /mnt
dd if=/dev/random of=/mnt/mykey bs=1 count=256

At boot time a script will start that will check whether the USB key is encrypted as a prerequisite and then prompt the user for a secure password 3 times. If the wrong password is given the Initial Ram File System (Initramfs) will be booted with a very limited operating system. If the password is correct the USB stick will be securely mounted and the keyfile used to unencrypted the primary partition and then promptly unmount itself. This allows you to remove the USB key, as you would do with a set of keys and continue to use the system. The USB Stick is not required for a suspend or hibernate action but will be required if you restart the system

The main problem with a Two Form Factor Encryption is data recovery on both the USB stick and Primary drive. Lots of what if questions to be answered. It is actually very easy to mount an encrypted drive if you have the key handy and you are running Linux. It requires command line use and I can almost hear Brendan go Tut Tut now, he he he.

Here is how you do it:
cryptsetup luksOpen --key-file mykey /dev/sdb3 320gb
mkdir /media/320gb
chown rayd:rayd /media/320gb
mount /dev/mapper/320gb /media/320gb

Encryption ............ Done.

You can now copy and paste files or do a backup or use DD or what ever you want.

You can use the same method as above to mount the USB stick and then use DD to create a duplicate.

You can also assign multiple passwords to a key using this method. Just in case you forgot your password!

Firstly unmount the crypted disk

# umount 320gb
# cryptsetup luksClose sdb2

# cryptsetup luksAddKey /dev/sdb2
Enter any LUKS passphrase:
key slot 1 unlocked.
Enter new passphrase for key slot:
Verify passphrase:
Command successful.
And test the password:
# cryptsetup luksOpen /dev/sdb2 320gb
Enter LUKS passphrase:
key slot 1 unlocked.
Command successful.

Useful commands:
# cryptsetup isLuks /dev/sda1
/dev/sda1 is not a LUKS partition
A LUKS drive will return nothing, ie silent.

cryptsetup luksDump /dev/sdb3
LUKS header information for /dev/sdb3

Version:               1
Cipher name:           aes
Cipher mode:           cbc-essiv:sha256
Hash spec:             sha1
Payload offset:        2056
MK bits:               256
MK digest:             fd f5 92 a4 8c cc 1f 8d 17 7c b7 39 f4 c9 51 54 4c d1 d1 32
MK salt:               fd d5 69 7c 83 5b dd d8 38 75 10 05 ae 9c 41 82
                      58 0d 15 77 ab 44 0d d9 42 08 94 8a 2a 21 9d 49
MK iterations:         10
UUID:                  5897dddb-86e2-40fb-93cc-80331df2d482


Easy Peasy!

31/05/2009

Son of Hibachi

QuickImage Category :
0
I recently saw Andre and thought I might just impress him with my portable braai but as usual he had the upper hand. He showed me his Son of Hibachi portable braai and I just had to get one. So far I am very impressed with the Son of Hibachi so I thought I would post my thoughts on my blog while watching the(awsome) Google Wave Developer Preview.

I bought my bbq from Ebay and it arrived really quickly and is worth every penny. The trick is that the braai acts like a chimney so it gets going quickly with minimum smoke. When finished just close it for 30 minutes and place it into the fireproof bag. This will be perfect while camping at Silverstone for the F1 race this year. Did I mention I have a full weekend pass for F1 at Silverstone?

A picture named M2 

Add some briquets one layer deep.
 
A picture named M3A picture named M4

Light the fuel you have placed in the bottom draw.

A picture named M5A picture named M6

Add some boerewors on the fire! The best boerewors can be found at Bizzi B's. Say hi to Andrew or Lee and please let them know I sent you!

A picture named M7
Hmmmmmmmm! Boerewors for one, there will be NO sharing!

15/05/2009

BT2700HGV router and BT Business Broadband

QuickImage Category :
0
A picture named M2
For any one following my illustrious blog site I have to apologise as it has been up and down lately and is causing me considerable headaches.

The root cause, apart from operator error of course, has been my BT2700HGV router. I have a BT Business account and BT broadband has been very stable over the last few years and the router has not been to bad either. The issue with the router is that it tries to be too intelligent and makes assumptions and we all know about assumptions mother. The specific issue is alias network addresses where you have one physical ethernet card with multiple static address configured. The router can only (seem to) associate one MAC address with one static address and this leads to very interesting but complex scenarios. In addition multiple cards on one server confuses the hell out of the router as well. All other routers I have had previously simply use IP Addresses to do port forward and that works brilliantly. Since BT upgraded to 6.1.1.48-enh it has been terrible. The issue seems to be inconsistency in identifying devices accurately.

What happens is that you assign services to an IP Address and the router then decides (assumption!) that it should be on hostname x. When you restart hostname x the second ip address suddenly but not always becomes the primary address and therefore port forwarding is screwed. On Tuesday I reinstalled an old Red Hat 5 server with Ubuntu 9.04 and suddenly all port redirections where magically transferred and thus no more web server or other services! Arghhhhhh is the best way to describe this. I have been reading a few forums about this issue and was about to go and buy a Draytek Vigor 2820Vn VOIP & Wireless ADSL/ADSL2+ Router but decided to take one last look at the issue. It seems that my issue has been identified (kinda) by a few people on the Tripod forum --> http://bt2700hgv.tripod.com/ir1002700HGV.htm#Using%20a%202700HGV%20as%20a%20wireless%20ethernet%20bridge/WAP

I have included an extract to remind me of the issues. Simon suggested what seems like an easy fix and that is to simply activate the OpenZone feature. This does make sense as the router will now have to check MAC and IP Addresses carefully as only 13 users are allowed. If this works then my services will be back to normal and if not I will be the proud owner of a new Vigor router even though I know it will cause me support issues with BT but then I could simple ask for my MAC code and make like a tree and leave!

Here is an extract of what the forum members said:
http://bt2700hgv.tripod.com/ir1002700HGV.htm#Using%20a%202700HGV%20as%20a%20wireless%20ethernet%20bridge/WAP


Inaccurate Local Network Devices List

This is a bug which has crept into the v6 firmware.  If your working hub was upgraded from v5 to v6 by BT, then you probably will not encounter the issue.  However, if you subsequently enable and disable OpenZone functionality, or have a need to perform a factory reset of your v6 hub, you will encounter the issue described below.

A number of  readers (Simon, Ian, 'Vader') have witnessed the problem where the Local Network Devices List does not accurately display the exact status of ethernet and wireless devices connected to the hub.  My view is it seems like the server process/daemon on the hub which discovers devices on the network and updates the v6 GUI is basically broken - it looks like it is purely cosmetic and hub Firewall and Access Control operations are not affected based on my own observations and tests.

A picture named M3            A picture named M4

When a brand new device (usually using DHCP) is introduced and connects to the hub for the very first time, the new device will appear as an 'active' device initially.  Within a short period of time, the status will suddenly change to 'inactive' status (ie. greyed out).  The hub also no longer displays the correct number of active and inactive devices too.

If the device is subsequently switched off and switched back on later, the hub continues to show the device as being 'inactive'.  However, the device works perfectly normally through the hub.

Simon also reports if a device joins the Fusion wireless network, it is permanently displayed as 'active' even when the device is switched off.

If the device has a static IP address, it may not appear on the Local Network Devices List at all based on my own early observations of the problem.

Fortunately, as far as the Firewall is concerned, it is still possible to manage the devices regardless of the device's status.  The hub maintains a separate database of ALL devices that have ever connected to it in the past and present.   ie. a device may not be visible on the Local Network Devices List on the 'Home' page, but it is still visible in the Firewall and Access Control menus so can continue to be managed. (Warning: Using the 'Clear List' button in the Settings > LAN > Statistics menu or within the Resets menu will delete the devices database, and break all device associations defined in the Firewall and Access Control menus)

Unfortunately devices with static IP addresses do not show up in the the Firewall administration menus, but fortunately, you can create new rules for devices with static IP addresses to get around this problem.

For devices that appear to be 'inactive' (greyed out), I can confirm the firewall rules I have set up for said devices appear to function correctly.

However it is a different matter for Enhanced Services such as 'Content Screening' and 'Time of Day Access control'.  DHCP-ed Devices can be managed just like with the Firewall, but unlike the Firewall,  it is not possible to manage devices with static IP addresses as they are not visible, and you cannot define your own Access Control rules for static IP devices.

I can also confirm that Access Control rules continue to work for devices which are incorrectly reported as 'inactive' in the Local Network Devices List on the 'home' page.

How to fix it?  

Thanks to Simon, he has observed if you enable OpenZone functionality, the Local Network Devices List suddenly starts behaving correctly.   The Local Network Devices List will even be populated with devices configured with static IP addresses.  (Warning: it can occasionally take up to a day or two to enable or disable Openzone in my own experience contrary to the 30 minutes maximum wait time which BT quote)

This is not an ideal solution at all given many hub owners will not want OpenZone hotspot functionality enabled.

13/05/2009

My new role models!

QuickImage Category :
0
For Google!
Wally Dabbles in Crime:

Wally: A lot of people think crime is a bad thing.

Wally: But it all depends on how you pick your role models.

Wally: I lean towards Governors, Bankers, Athletes and Sith Lords.

Dilbert: I feel a coldness. (Starts shaking)

Forward link: http://dilbert.com/forward_email/?eid=eyJVc2VySUQiOiI4MTY0OCIsIkV2ZW50SUQiOiIxOCIsIkRhdGVTdHJpcCI6IjIwMDktMDUtMTMifQ==

A picture named M2

05/05/2009

Fighting Foundations - Resources

QuickImage Category :
0
Would you like to know more about IBM Lotus Foundations?

Information is everywhere so I have decided to create a "portal" page to get to the info. This page will improve with time!

Snapshot Link Comment
A picture named M2 Trial: IBM Lotus Foundations Start Download a free 30-day trial of IBM Lotus Foundations Start 1.1, an on-premise software appliance and a complete solution for businesses with 5-500 employees who have limited or no in-house technical resources.
A picture named M3 Lotus Foundations wiki Where do I find it? Online Resources
A picture named M4 www.lotusfoundations.com Small business is still big business. Every company needs the ability to do e-mail, create, share and centrally manage documents and files and ensure that all their information is backed up and protected.
A picture named M5 http://www-10.lotus.com/ldd/lfndswiki.nsf/dx/roadmap.htm Lotus Foundations Start Learning Roadmap-updated March 2009
A picture named M6 https://www.lotusfoundations.com/partner/ Partner portal - Valid userid required.
A picture named M7 Welcome to the Nitix & Lotus Foundations Knowledgebase A valuable resource
A picture named M8 IBM Lotus Foundations Start page The primary IBM launch page for IBM Lotus Foundations
A picture named M9 Campaign designer For IBM Business Partners
       
A picture named M10 IBM Smart Business Developers Kit Requires a valid Partnerworld ID




Please click here to read More. ..

02/05/2009

Fighting Foundations - Hardware

QuickImage Category :
0
  A picture named M2Here are my thoughts as I go through the motions with Lotus Foundations. I am simply documenting my experiences with this product and my views should not be taken out of context. My overall view is that Lotus Foundations will be an amazing product for two reasons. Firstly, IBM bought this proven technology from Net Integration and secondly it is an autonomic Linux appliance with multiple patents (IDB and SystemER) and immense future potential.
 
The Hardware:

Prepare to be under-whelmed when looking at the initial entry version. If I had to rate the box in comparison to what is available in the market today the best I can give it is a 3 out of 10. That said, it is a stable well put together package that will serve its purpose. It is like a top of the line Proton, looks like a BMW, smells like a BMW but it most certainly is not a BMW and will get you from A to Z but without experiencing the drive of your life.   It is a HUGE and heavy box full of unoccupied space. At startup the primary fans revs up to an earth shattering top speed and then calms down and spins at a nice quiet and sedate 1000 RPM.

Overview:

The server I am playing with is an entry IBM Lotus Foundations Server  Machine Type 9234CNU with an IBM BIOS Version 1.03 GUEN03AUS-1.03 with the FSB running at 1066MHZ. The single Intel Core2 Duo CPU E7200 2.53GHz CPU, that retails for a 100 Pounds has an L2 cache of 3072KB.

Dev 0 / Sata 0 503 MB MicroFlash MagicRam disk
Dev 1 / Sata 1 250 GB WDC WD2502ABYS-2 ATA - 244.2 GB disk:1:sdb
Dev 5 / Sata 5 500 GB ST3500630NS ATA - 488.4 GB disk:2:sdc

To get to the specifics I had to remove the 500 MB SSD Memory disk and boot from a Ubuntu USB Drive as there was no way to install dmidecode. Actually, I was able to install the source files into an NVS partition but could not compile using make as it is not installed by default but a quick check on the KB showed me how although it seems yum is not installed. Will investigate later.

Highlights:
Socket Designation: LGA 775, Family: Xeon, Signature: Type 0, Family 6, Model 23, Stepping 6, Version: Intel Core2 Duo CPU E7200  @ 2.53GHz, Voltage: 1.2 V, External Clock: 266 MHz, Max Speed: 3300 MHz, Current Speed: 2530 MHz

Physical Memory Array
Error Correction Type: Multi-bit ECC, Maximum Capacity: 8 GB, Number Of Devices: 4, Size: 1024 MB, Form Factor: DIMM, Type: DDR2, type Detail: Synchronous, Speed: 800 MHz (1.2 ns), Manufacturer: Elpida

Summary:
Intel E7200 Core 2 Duo 2.53 GHz Dual Core Processor / Intel X3330 XeonTM 2.66 GHz Quad Core Processor
2 x 1GB memory; max 4GB (4 x 1GB) / 2 x 2GB memory; max 8 GB (4 x 2GB)
250 GB SimpleSwap SATA main hard drive / 500 GB Simple Swap SATA main hard drive
500 GB Hot swappable Intelligent Disk Backup drive / 1 TB Hot swappable Intelligent Disk Backup
3 x 10/100/1000 Ethernet ports
6 USB 2.0 ports for printer and UPS support
1 Parallel and 2 Serial ports
LCD display /control panel for easy setup
401W power supply

Getting deeper and deeper:

All but the most rudimentary commands are available when using telnet. Once Nitix Virtual Server is installed you get a more pliable version of SUSE to play with but alas it has no compiler installed so options are limited. To get a better idea of the hardware installed I installed webmin 1.470. As I said you need NVS 2.0 to do this but once installed you telnet to the box using a non root account with admin privileges and then type in nvs. Once launched pick NVS 2.0 from the menu. You are then active on the NVS Susbsystem and can install some applications. To install Webmin do the following:  
wget http://voxel.dl.sourceforge.net/sourceforge/webadmin/webmin-1.470-1.noarch.rpm
sudo rpm -Uhv webmin-1.470-1.noarch.rpm
/etc/init.d/webmin start

The USB Panel:

A picture named M3A picture named M4

The front panel from Crystalfontz is far from intuitive. In fact it is so damn annoying most recalls would be to fix this silly feature as users smash it up. My advice is to make sure you have a monitor and USB keyboard ready at install time. Setting the ip address is simple. Getting Foundations to use this address is near impossible if it has been active on another network. The cable MUST be in Eth0 and once set the box must be rebooted. You then have about a minute to signon before the firewall becomes self aware and block all ports. Arghhhhhh. The best feature is the netscan feature that reconfigures all learned routes and networks. Keep in mind that once you select netscan the box will reboot without further prompts. This option is of course NOT available from the panel! The Crystlafontz USB device does have an example cli script I will look at later and see how it is used in Lotus Foundations.
Linux 2.6.16.54-0.2.5-smp (uklfdemo) (1)
login: rayd
Password:
Weaver Ready.

BusyBox v1.1.0 (2009.04.07-19:29+0000) Built-in shell (ash)
Enter 'help' for a list of built-in commands.
Enter 'nvs' to enter a running Lotus Foundations Virtual Server.
uklfdemo:~#setup

A picture named M5

One more thang! If you are using Vista you must go and activate telnet. Start --> Control Panel --> Programs --> Turn on ... I am using the foundations server on Ubuntu, XP and Vista and in different locations in the house while writing this entry and just so happen to be at my Vista client ripping music to iTunes but soon I will be back on Ubuntu while watching the Star Trek special on Virgin 1.

A picture named M6

In Summary:
Lots of good stuff here and some mediocre stuff as well. Lorrie Barber has written up a pretty good step one install guide to help newbies. The LCD panel is a real let down and why is there no PS2 mouse and keyboard port? The server is most certainly not rack friendly and will never win an ergonomics competition and that is a shame, could do better is the best way to describe the hardware. I did a quick check on alternative hardware and for the price Lotus Foundations retails at you can get some amazing alternative hardware that includes much faster processors and SAS drives with a raid array. Lotus Foundations simply use dmraid and logical volumes as a softraid or fakeraid option. This is an entry server and far be it for me to say it should be cheaper as it pays my salary so I think it is priced perfectly

Sean Burgess at ASND designs has some great Lotus Foundation articles
Graham Dodge runs a blog discussing  Lotus Foundations
More references to follow:


Please click here to read More. ..

Stuff

Add to favourites Ray is a member of Dogbert's New Ruling CLass
Enter a long URL to make tiny:
Locations of visitors to this page

IdeaJam