Geeking in technology since 1985, with IBM Development, focused upon Docker and Kubernetes on the IBM Z LinuxONE platform In the words of Dr Cathy Ryan, "If you don't write it down, it never happened". To paraphrase one of my clients, "Every day is a school day". I do, I learn, I share. The postings on this site are my own and don’t necessarily represent IBM’s positions, strategies or opinions. Remember, YMMV https://infosec.exchange/@davehay
Thursday, 29 December 2011
Mounting an Apple OSX HFS+ drive under CentOS Linux
This is sometimes a pain when I need to share files with colleagues using Microsoft Windows, but c'est la vie - it's their choice for using such an obscure OS :-)
More importantly, I was somewhat dismayed to find that the CentOS distribution that I've just started to play with does NOT include HFS+ support out-of-the-box.
This compares to Ubuntu, which ( afaik ) has had HFS+ support for some time now.
However, it was an easy problem to solve - after a quick(ish) Google search, I found this thread on the www.centos.org site, which recommends adding the elrepo.org repository to CentOS: -
$ rpm --import http://elrepo.org/RPM-GPG-KEY-elrepo.org
before downloading the required RPM file: -
$ rpm -Uvh http://elrepo.org/elrepo-release-6-4.el6.elrepo.noarch.rpm
and installing the HFS+ drivers: -
$ yum install kmod-hfsplus
As ever, job done - thanks, Internet, we love you :-)
Creating a bootable USB key under Apple Mac OSX
#: TYPE NAME SIZE IDENTIFIER
0: GUID_partition_scheme *320.1 GB disk0
1: EFI 209.7 MB disk0s1
2: Apple_HFS Hard Disk 319.2 GB disk0s2
3: Apple_Boot Recovery HD 650.0 MB disk0s3
/dev/disk1
#: TYPE NAME SIZE IDENTIFIER
0: FDisk_partition_scheme *8.3 GB disk1
1: DOS_FAT_32 DISK_IMG 8.3 GB disk1s1
/dev/disk2
#: TYPE NAME SIZE IDENTIFIER
0: CentOS-6.2-x86_6 *731.9 MB disk2
$ dd if=/dev/disk2 of=/dev/disk1 bs=1m
$ diskutil unmountDisk /dev/disk2
$ dd if=/dev/disk2 of=/dev/disk1 bs=1m
698+0 records out
731906048 bytes transferred in 206.409147 secs (3545899 bytes/sec)
Lightweight Third Party Authentication (LTPA) FAQs
Wednesday, 28 December 2011
IBM Tivoli Directory Integrator - Which Version is Which ?
-rw-r--r-- 1 hayd hayd 68001502 2010-09-22 08:32 7.0.0-TIV-TDI-FP0005.zip
-rw-r--r-- 1 hayd hayd 403947520 2010-10-04 13:50 C1IU1ML.tar
-rw-r--r-- 1 hayd hayd 405719040 2010-09-22 08:12 C1IU2ML.tar
Now I'm trying to install TDI on a 32-bit Linux distribution ( Ubuntu 11.10 ), so which of the two TAR files do I use ?
I'm sure it's obvious .....
The trick was to expand one of the two files: -
tar xvf /tmp/C1IU1ML.tar
which included: -
linux_x86/
linux_x86/install_tdiv70_linux_x86.bin
linux_x86/install_tdiv70_setup.jar
This gives me a clue :-)
Therefore, I'm going to take a bet that: -
C1IU1ML / C1IU1ML.tar == 32-bit
C1IU2ML / C1IU2ML.tar == 64-bit
Make sense ?
Printing from the iPad 2
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
<service-group>
<name>My Printer</name>
<service>
<type>_ipp._tcp</type>
<subtype>_universal._sub._ipp._tcp</subtype>
<port>631</port>
<txt-record>txtver=1</txt-record>
<txt-record>qtotal=1</txt-record>
<txt-record>rp=printers/My-Printer-CUPS-Name</txt-record>
<txt-record>ty=My Printer</txt-record>
<txt-record>adminurl=http://198.168.1.4:631/printers/My-Printer-CUPS-Name</txt-record>
<txt-record>note=My Printer</txt-record>
<txt-record>priority=0</txt-record>
<txt-record>product=virtual Printer</txt-record>
<txt-record>printer-state=3</txt-record>
<txt-record>printer-type=0x801046</txt-record>
<txt-record>Transparent=T</txt-record>
<txt-record>Binary=T</txt-record>
<txt-record>Fax=F</txt-record>
<txt-record>Color=T</txt-record>
<txt-record>Duplex=T</txt-record>
<txt-record>Staple=F</txt-record>
<txt-record>Copies=T</txt-record>
<txt-record>Collate=F</txt-record>
<txt-record>Punch=F</txt-record>
<txt-record>Bind=F</txt-record>
<txt-record>Sort=F</txt-record>
<txt-record>Scan=F</txt-record>
<txt-record>pdl=application/octet-stream,application/pdf,application/postscript,image/jpeg,image/png,image/urf</txt-record>
<txt-record>URF=W8,SRGB24,CP1,RS600</txt-record>
</service>
</service-group>
Back in the game … if at first you don't succeed, read your own blog :-)
Idle - "An unexpected error occurred. Check for problems at the printer and resubmit the job (100003)"
when printing, having manually added the printer.
_remote_admin=0
_remote_any=0
_remote_printers=1
_share_printers=0
_user_cancel_any=0
BrowseLocalProtocols=
BrowseRemoteProtocols=DefaultAuthType=Basic
JobPrivateAccess=default
JobPrivateValues=default
SubscriptionPrivateAccess=default
SubscriptionPrivateValues=default
SystemGroup=admin
SystemGroupAuthKey=system.print.admin
WebInterface=Yes
_remote_admin=0
_remote_any=0
_remote_printers=1
_share_printers=0
_user_cancel_any=0
BrowseLocalProtocols=
BrowseRemoteProtocols=CUPS
DefaultAuthType=Basic
JobPrivateAccess=default
JobPrivateValues=default
SubscriptionPrivateAccess=default
SubscriptionPrivateValues=default
SystemGroup=admin
SystemGroupAuthKey=system.print.admin
WebInterface=Yes
Tuesday, 27 December 2011
Installing IBM HTTP Server 7 on CentOS Linux 6.2
</snip>
Package Arch Version Repository Size
================================================================================
Installing:
glibc i686 2.12-1.47.el6 base 4.3 M
Installing for dependencies:
nss-softokn-freebl i686 3.12.9-11.el6 base 116 k
Transaction Summary
================================================================================
Install 2 Package(s)
Usage:
htpasswd [-cmdpsD] passwordfile username
htpasswd -b[cmdpsD] passwordfile username password
htpasswd -n[mdps] username
htpasswd -nb[mdps] username password
-c Create a new file.
-n Don't update file; display results on stdout.
-m Force MD5 encryption of the password.
-d Force CRYPT encryption of the password (default).
-p Do not encrypt the password (plaintext).
-s Force SHA encryption of the password.
-b Use the password from the command line rather than prompting for it.
-D Delete the specified user.
On Windows, NetWare and TPF systems the '-m' flag is used by default.
On all other systems, the '-p' flag will probably not work.
Chrome
*UPDATE* Testing an edit, again from Chrome ...
Monday, 26 December 2011
IBM i 7.1 Technical Overview
Many of the new and enhanced functions are described such as: -
Thursday, 22 December 2011
Build Large-scale Performing Enterprise Solutions for IBM Lotus Connections 3.0.x
Wednesday, 21 December 2011
IBM Connections - What version do I have ?
Writing it down in case I forget it … #2
*UPDATE* Doh ! Doh ! Doh ! - last time I blogged this here and I still forgot it :-)
Writing it down in case I forget it …. #1
IBM Lotus Notes and Citrix XenApp Together
Tuesday, 20 December 2011
Download Lotus Notes and Domino 8.5.3 Upgrade Pack 1 - XPages goes mobile ….
Using wsadmin and Jython to monitor WebSphere Application Server performance
Slow performance or hang in HostName lookup due to high DNS traffic
Symptom
There are 2 symptoms you might see:
- Calls to the method java.net.InetAddress.getLocalHost takes a long time or the Java™ Virtual Machine (JVM) hangs.
- Slow response from the administrative console or from wsadmin command/script.
Cause
There are 2 possible causes:
- Cause 1:
Starting with Java™ 1.4.1, the IP address is not cached by default. This can cause delays and performance degradation if the application relies on this caching mechanism, since a lookup is now performed each time.
The WebSphere Application Server runtime code calls the InetAddress.getLocalHost() method in several places which then causes the DNS lookup requests. Applications making outbound calls would also trigger DNS lookup requests
- OR -
- Cause 2:
The problem could be lookup issues between IPv6 versus IPv4 in releases of the Java 2 SDK 1.4. The problem may be that the JVM performs both IPv6 and IPv4 queries. If the Domain Name System (DNS) server is not configured to handle IPv6 queries, the application might issue an unknown host exception. If the DNS is not configured to handle IPv6 queries properly, the application must wait for the IPv6 query to time out.
You might also notice that getting the wsadmin command prompt takes a long time or sometimes fails because of the preceding problem.
In addition, there is a known problem in Linux on OS/390 with IPv6 that will lead to a JVM crash. For more details, review the Related information section at the bottom of this technote.
Monday, 19 December 2011
It’s so easy to access IBM Connections from XPages
I've used the XPages Social Enabler which comes with great functionality to handle the authentication including SSO and functionality to invoke REST services easily and parse XML. I also used the documentation of the Connections REST services. If I have time I document later more how I've done it. For now you can read the source code on OpenNTF. I want to thank my colleague Yun Zhi Lin whose code I used as starting point.
On the XSnippet page there is a new icon now to share on Connections.
Friday, 16 December 2011
WebSphere and Open Authorization
Web Content Authoring within a Virtual Portal
IBM Connections and Desktop Single Sign-On using Microsoft Active Directory, Kerberos and SPNEGO
- Understand how to integrate IBM Connections with Active Directory
- Understand how to implement desktop single sign-on with IBM Connections
- Describe the integration possibilities with Microsoft SharePoint
Wednesday, 14 December 2011
Social Scheduling Now in IBM Connections
OnTime also allows you to work with group calendars even when you are on the go by providing mobile access from your favorite mobile device.
Saturday, 10 December 2011
Social Connections II - My observations
This is the second time that I've attended this event, the inaugural meeting being kindly hosted by The Salvation Army back in July. This time around, Cardiff University were kind enough to host us, including the rather lovely Simon Vaughan, who is definitely a man to watch :-)
The event was well-attended, by customers, Business Partners, and IBMers, with a good 50:50 mix of business and technical.
The presentations were very social, as one might expect, and predominantly focused on the business and social benefits of IBM's collaboration solution, IBM Connections, with a few more technical sessions ( including one by Yours Truly ). The speaker list is here and the sessions listing is here.
Stuart McIntyre was the MC of the event, ably assisted by Sharon "Social Shazza" Bellamy and Lisa "Where's Darren?" Duke.
The event was live-streamed, thanks to the sterling efforts of Mark Calleran , Gaz Rose and the Salvation Army team.
Stuart has promised to upload the presentations to http://socialconnections.info/
The event was rounded off by an absolutely wonderful reception and dinner at Cardiff Castle, including a tour of three of the most gorgeous rooms in the place.
The entire day went smoothly, thanks to the hosts, the organisers and the genuine good nature of all of those attending. It was truly the perfect place to establish "Social Connections" :-)
So, with two excellent events delivered during 2011, in London and Cardiff respectively, I'm looking forward to 2012 - who knows which other UK capital cities are on the agenda, but I know that there's a bloomin' good castle in Edinburgh :-)
Ooops, nearly forgot to mention - if you want to know more about what went on during the day, check out the hashtag #soccnx on Twitter; you don't have to join the site to follow the Tweets from the audience, speakers, sponsors and web-watchers.
Troubleshooting: Node agent monitoring WebSphere Application Servers
Friday, 9 December 2011
A pearl of wisdom from George Bernard Shaw here at Social Connections Ii
"If you have an apple and I have an apple and we exchange these apples then you and I will still each have one apple. But if you have an idea and I have an idea and we exchange these ideas, then each of us will have two ideas."
Thanks to Louis Richardson for sharing
Thursday, 8 December 2011
Searching Profiles programmatically
Mikkel Heisterberg Tweeted about this earlier, and it's a subject close to my heart, having done a lot of work with IBM Connections Profiles in the past few months, mainly via IBM Tivoli Directory Integrator and the ProfilesService.UpdateUser() command. As part of IBM Connections you will find a big REST API that allows you to work with almost every part of Connections such as searching for profiles, managing files and working with communities. As part of our new product (see my previous post) I'm doing a lot with this API. Right now one of my favorite wiki documents is "Searching Profiles programmatically". |
Demo of the IBM Content Templates Catalog
Cody Burleson posted this on Twitter earlier today, and I thought it was definitely worth a look - especially as I'd been talking about the Content Templates Catalog ( aka CTC ) to a colleague earlier this week. |
Demo of the IBM Content Templates Catalog: youtube.com/IBMXWebX
Using Trust Association Interceptors with WebSphere Application Server to support OAuth tokens
An example of a consumer might be a company that wants to aggregate all of its customers' photos onto a single web page. Rather than asking every user to enter the username/password for each of their photo sharing accounts, the company can act as a consumer and each of the photo sharing web sites can act as service providers and exchange OAuth tokens. This gives the photo aggregator company access to a user's photos without the user potentially compromising the security of their account by giving out username/password information.
Wednesday, 7 December 2011
WebSphere Portal and IBM Web Content Manager - Search
2 Search services
3 Best practices
4 Conclusion
5 Resources
6 About the author
Monday, 5 December 2011
Resolution – 404 errors accessing WCM content through the POC Servlet (/wps/mypoc/…)
*UPDATE 03/01/2013 - Since I wrote this article in late 2011, Cody has removed the post from his blog. However, I've found what may be a new solution, and have blogged about it here: -
More on 404 errors accessing WCM content through the POC Servlet (/wps/mypoc/…)
A surfeit of VMware and Linux goodies … including running VMware ESXi from a USB Key :-)
Michael Sampson - Collaboration Roadmap: You've Got the Technology — Now What?
Collaboration Roadmap answers both questions.
- Foreword - by Ed Brill (IBM Corporation)
- Chapter 1. Setting the Scene
- Chapter 2. Really Understand the Technology
- Chapter 3. Outline the Vision
- Chapter 4. Accept Technology is a Small Factor in Success
- Chapter 5. Determine Your Governance Approach
- Chapter 6. Make Every Effort to Engage the Business
- Chapter 7. Apply Intentional Energy to Adoption
- Chapter 8. Pursue Increasing Value
- Chapter 9. Your Collaboration Journey
- Appendix 1. Collaboration Theory
Collaboration Roadmap packs 15 years of experience into 320 pages.
Using packet trace tools iptrace, snoop, tcpdump, wireshark, and nettl
Friday, 25 November 2011
I Lotus on my iPhone :-)
Thursday, 24 November 2011
Understanding IBM Tivoli Directory Integrator for IBM Lotus Connections 3.0: A getting started guide
Monday, 21 November 2011
Understanding HTTP plug-in failover in a clustered environment
After setting up the HTTP plug-in for load balancing in a clustered IBM® WebSphere® environment, the HTTP plug-in is not performing failover in a timely manner or at all when a cluster member becomes unavailable.
Cause
In most cases, the preceding behavior is observed because of a misunderstanding of how HTTP plug-in failover works or might be due to an improper configuration. Also, the type of Web server (multi-threaded versus single threaded) being used can affect this behaviour.
Lotus Symphony Viewer up in the Android Market
Connect a projector dongle to your phone or tablet to use the viewer as your presentation source
Wednesday, 16 November 2011
Customizing IBM Lotus Connections 3.0 email digests and notifications
WebSEAL and WebSphere Portal - An Integration Pattern
In reality, the integration pattern is one of the simpler patterns to adopt. I say simple, but as Niall alluded to when asking me to provide my thoughts on the issue he quite rightly stated that there are at least two approaches to the problem - the LTPA approach and the TAI approach.
IBM Web Experience Factory - My First Time Out
Monday, 14 November 2011
Lotus Traveler workshop. Dublin 6th December
The Lotus Traveler deep dive workshop will be held in the Conrad Hotel in Dublin on the 6th December. Details here. Register here.
Wednesday, 9 November 2011
New backup & restore tool for IBM Connections Communities
IBM Connections community backup and restore is an easy way to back up and restore Connections communities.
Features:
Tuesday, 8 November 2011
IBM Connections – Incorrect Global Moderation Alerts
In this scenario pre-moderation (content approval) is disabled but post-moderation (content flagging) is enabled and Blog owners (both Community and standalone) are allowed to moderate comments on their blogs.
If a Blog owner enables moderation on comments then they will receive a notification asking them to approve (or not) comments when they are submitted. The problem is that the Global Moderators also receive this notification which they shouldn't (as pre-moderation is disabled).
Integrating Lotus Connections V3 with WebSphere Portal Search V7
Monday, 7 November 2011
Cateye HL-EL530 Cycle Light
Sunday, 6 November 2011
Import pictures from Domino database into IBM Connections
I do believe this would work for all kinds of domino databases, either if you are using the names.nsf or some other picture DB. You just have to find the correct fields in the domino db you are using.
In this scenario, the Iterator is a standalone pictures DB, called pictures.nsf. The field "bc_mapping" contains an email-address of the user. This is used as the link-criteria when doing a lookup to the employee table. The Employee table then gives us the "PROF_KEY" value for that profile/employee, which I then use in the link criteria in the Photo table.
Friday, 4 November 2011
Enabling and Disabling SSL Redirection in IBM WebSphere Portal
Thursday, 3 November 2011
IBM Sametime Standard 8.5.2 - Port allocations for NAT traversal
Ephemeral ports are allocated on clients and are assigned by the client's operating system. Ephemeral ports are usually in the range of 1024-5000 and are dynamically re-allocated by the operating system as needed. Proper function of the Sametime NAT traversal feature requires open access to UDP ports on both the TURN server and the Media Manager's Packet Switcher.
Note: UDP is the preferred protocol; TCP should be used only if UDP is not available (for example, due to company policy).
Introduction to IBM Lotus Domino 8.5 XPages - Available on OpenCourseWare on the IBM Lotus Greenhouse
IBM Connections Widgets - JustNudge are up to their tricks again ;-)
For a limited time, Just Nudge is releasing this widget to the IBM Connections community free of charge. To get the widget see our Twitter widget product page. If you require any further information please contact us via email at sales@justnudge.com.
Tuesday, 1 November 2011
Apple Macintosh OSX and Keyboard Shortcuts
*UPDATE* 02/11/2011 - One of my US colleagues, Mike Alexander, also came up with Dashkards (sic) as another good source of keyboard shortcut goodness
Monday, 31 October 2011
IBM Connections iPad app is now available!
• Universal app - new native iPad interface
• Ability to upload documents to the IBM Connections server from other apps that support the "Open In..." feature of iOS
- Upload email attachments directly to the IBM Connections server
- Enables round trip editing of documents. Allows you to download a document from the IBM Connections server, open it in another editor app, then upload the updated document back to the IBM Connections server
• iOS 5 Compatible
• Fixed an issue with getting "Cannot Verify Server Identity" prompt for servers certificates from a valid certificate authority
Friday, 28 October 2011
ScribeFire - Blogging from a browser ...
So far, so good.
I'm told that it supports off-line mode ( I normally use Apple Mail for this! ), and that it'll post directly to IBM Connections. Will test the latter out after the weekend, once IBM's W3 service is upgraded to the latest 3.0.1.X release.
Some Connections-related ScribeFire tips are here and here.
Life is good :-)
Want to know more about using ScribeFire and IBM Connections ? Let me know ...
Use IBM Symphony ? Satisfied ? Not ? Let IBM know ...
Aide Memoires - Maintenance Pages and Cookie Size in IBM HTTP Server / WebSphere Application Server
Request to IBM HTTP Server fails with Response code 400.
Symptom
Response from the browser could be shown like this:
Bad Request
Your browser sent a request that this server could not understand.
Size of a request header field exceeds server limit.
IBM HTTP Server Error.log shows the following message:
Cause
This is normally caused by having a very large Cookie, so a request header field exceeded the limit set for Web Server.
Thursday, 27 October 2011
CLFRQ0415E when accessing the Homepage feature of IBM Connections 3.0.1
java.lang.NullPointerException
C:\IBM\SQLLIB\bin\db2cmd -c -w -i db2 -tvf connections.sql\homepage\db2\appGrants.sql
C:\IBM\SQLLIB\bin\db2cmd -c -w -i db2 -tvf connections.sql\homepage\db2\initData.sql
C:\IBM\SQLLIB\bin\db2cmd -c -w -i db2 -tvf connections.sql\homepage\db2\reorg.sql
C:\IBM\SQLLIB\bin\db2cmd -c -w -i db2 -tvf connections.sql\homepage\db2\updateStats.sql
Hope this helps.
Quick Tip - Keyboard Shortcuts for OSX Lion
Reminder - installing podman and skopeo on Ubuntu 22.04
This follows on from: - Lest I forget - how to install pip on Ubuntu I had reason to install podman and skopeo on an Ubuntu box: - lsb_rel...
-
Why oh why do I forget this ? Running this command : - ldapsearch -h ad2012.uk.ibm.com -p 389 -D CN=bpmbind,CN=Users,DC=uk,DC=ibm,DC=com -w...
-
Error "ldap_sasl_interactive_bind_s: Unknown authentication method (-6)" on a LDAPSearch command ...Whilst building my mega Connections / Domino / Portal / Quickr / Sametime / WCM environment recently, I was using the LDAPSearch command tha...
-
Whilst building a new "vanilla" Kubernetes 1.25.4 cluster, I'd started the kubelet service via: - systemctl start kubelet.se...