Geeking in technology since 1985, with IBM Development, focused upon Docker and Kubernetes on the IBM Z LinuxONE platform In the words of Dr Cathy Ryan, "If you don't write it down, it never happened". To paraphrase one of my clients, "Every day is a school day". I do, I learn, I share. The postings on this site are my own and don’t necessarily represent IBM’s positions, strategies or opinions. Remember, YMMV https://infosec.exchange/@davehay
Thursday 29 December 2011
Mounting an Apple OSX HFS+ drive under CentOS Linux
This is sometimes a pain when I need to share files with colleagues using Microsoft Windows, but c'est la vie - it's their choice for using such an obscure OS :-)
More importantly, I was somewhat dismayed to find that the CentOS distribution that I've just started to play with does NOT include HFS+ support out-of-the-box.
This compares to Ubuntu, which ( afaik ) has had HFS+ support for some time now.
However, it was an easy problem to solve - after a quick(ish) Google search, I found this thread on the www.centos.org site, which recommends adding the elrepo.org repository to CentOS: -
$ rpm --import http://elrepo.org/RPM-GPG-KEY-elrepo.org
before downloading the required RPM file: -
$ rpm -Uvh http://elrepo.org/elrepo-release-6-4.el6.elrepo.noarch.rpm
and installing the HFS+ drivers: -
$ yum install kmod-hfsplus
As ever, job done - thanks, Internet, we love you :-)
Creating a bootable USB key under Apple Mac OSX
#: TYPE NAME SIZE IDENTIFIER
0: GUID_partition_scheme *320.1 GB disk0
1: EFI 209.7 MB disk0s1
2: Apple_HFS Hard Disk 319.2 GB disk0s2
3: Apple_Boot Recovery HD 650.0 MB disk0s3
/dev/disk1
#: TYPE NAME SIZE IDENTIFIER
0: FDisk_partition_scheme *8.3 GB disk1
1: DOS_FAT_32 DISK_IMG 8.3 GB disk1s1
/dev/disk2
#: TYPE NAME SIZE IDENTIFIER
0: CentOS-6.2-x86_6 *731.9 MB disk2
$ dd if=/dev/disk2 of=/dev/disk1 bs=1m
$ diskutil unmountDisk /dev/disk2
$ dd if=/dev/disk2 of=/dev/disk1 bs=1m
698+0 records out
731906048 bytes transferred in 206.409147 secs (3545899 bytes/sec)
Lightweight Third Party Authentication (LTPA) FAQs
Wednesday 28 December 2011
IBM Tivoli Directory Integrator - Which Version is Which ?
-rw-r--r-- 1 hayd hayd 68001502 2010-09-22 08:32 7.0.0-TIV-TDI-FP0005.zip
-rw-r--r-- 1 hayd hayd 403947520 2010-10-04 13:50 C1IU1ML.tar
-rw-r--r-- 1 hayd hayd 405719040 2010-09-22 08:12 C1IU2ML.tar
Now I'm trying to install TDI on a 32-bit Linux distribution ( Ubuntu 11.10 ), so which of the two TAR files do I use ?
I'm sure it's obvious .....
The trick was to expand one of the two files: -
tar xvf /tmp/C1IU1ML.tar
which included: -
linux_x86/
linux_x86/install_tdiv70_linux_x86.bin
linux_x86/install_tdiv70_setup.jar
This gives me a clue :-)
Therefore, I'm going to take a bet that: -
C1IU1ML / C1IU1ML.tar == 32-bit
C1IU2ML / C1IU2ML.tar == 64-bit
Make sense ?
Printing from the iPad 2
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
<service-group>
<name>My Printer</name>
<service>
<type>_ipp._tcp</type>
<subtype>_universal._sub._ipp._tcp</subtype>
<port>631</port>
<txt-record>txtver=1</txt-record>
<txt-record>qtotal=1</txt-record>
<txt-record>rp=printers/My-Printer-CUPS-Name</txt-record>
<txt-record>ty=My Printer</txt-record>
<txt-record>adminurl=http://198.168.1.4:631/printers/My-Printer-CUPS-Name</txt-record>
<txt-record>note=My Printer</txt-record>
<txt-record>priority=0</txt-record>
<txt-record>product=virtual Printer</txt-record>
<txt-record>printer-state=3</txt-record>
<txt-record>printer-type=0x801046</txt-record>
<txt-record>Transparent=T</txt-record>
<txt-record>Binary=T</txt-record>
<txt-record>Fax=F</txt-record>
<txt-record>Color=T</txt-record>
<txt-record>Duplex=T</txt-record>
<txt-record>Staple=F</txt-record>
<txt-record>Copies=T</txt-record>
<txt-record>Collate=F</txt-record>
<txt-record>Punch=F</txt-record>
<txt-record>Bind=F</txt-record>
<txt-record>Sort=F</txt-record>
<txt-record>Scan=F</txt-record>
<txt-record>pdl=application/octet-stream,application/pdf,application/postscript,image/jpeg,image/png,image/urf</txt-record>
<txt-record>URF=W8,SRGB24,CP1,RS600</txt-record>
</service>
</service-group>
Back in the game … if at first you don't succeed, read your own blog :-)
Idle - "An unexpected error occurred. Check for problems at the printer and resubmit the job (100003)"
when printing, having manually added the printer.
_remote_admin=0
_remote_any=0
_remote_printers=1
_share_printers=0
_user_cancel_any=0
BrowseLocalProtocols=
BrowseRemoteProtocols=DefaultAuthType=Basic
JobPrivateAccess=default
JobPrivateValues=default
SubscriptionPrivateAccess=default
SubscriptionPrivateValues=default
SystemGroup=admin
SystemGroupAuthKey=system.print.admin
WebInterface=Yes
_remote_admin=0
_remote_any=0
_remote_printers=1
_share_printers=0
_user_cancel_any=0
BrowseLocalProtocols=
BrowseRemoteProtocols=CUPS
DefaultAuthType=Basic
JobPrivateAccess=default
JobPrivateValues=default
SubscriptionPrivateAccess=default
SubscriptionPrivateValues=default
SystemGroup=admin
SystemGroupAuthKey=system.print.admin
WebInterface=Yes
Tuesday 27 December 2011
Installing IBM HTTP Server 7 on CentOS Linux 6.2
</snip>
Package Arch Version Repository Size
================================================================================
Installing:
glibc i686 2.12-1.47.el6 base 4.3 M
Installing for dependencies:
nss-softokn-freebl i686 3.12.9-11.el6 base 116 k
Transaction Summary
================================================================================
Install 2 Package(s)
Usage:
htpasswd [-cmdpsD] passwordfile username
htpasswd -b[cmdpsD] passwordfile username password
htpasswd -n[mdps] username
htpasswd -nb[mdps] username password
-c Create a new file.
-n Don't update file; display results on stdout.
-m Force MD5 encryption of the password.
-d Force CRYPT encryption of the password (default).
-p Do not encrypt the password (plaintext).
-s Force SHA encryption of the password.
-b Use the password from the command line rather than prompting for it.
-D Delete the specified user.
On Windows, NetWare and TPF systems the '-m' flag is used by default.
On all other systems, the '-p' flag will probably not work.
Chrome
*UPDATE* Testing an edit, again from Chrome ...
Monday 26 December 2011
IBM i 7.1 Technical Overview
Many of the new and enhanced functions are described such as: -
Thursday 22 December 2011
Build Large-scale Performing Enterprise Solutions for IBM Lotus Connections 3.0.x
Wednesday 21 December 2011
IBM Connections - What version do I have ?
Writing it down in case I forget it … #2
*UPDATE* Doh ! Doh ! Doh ! - last time I blogged this here and I still forgot it :-)
Writing it down in case I forget it …. #1
IBM Lotus Notes and Citrix XenApp Together
Tuesday 20 December 2011
Download Lotus Notes and Domino 8.5.3 Upgrade Pack 1 - XPages goes mobile ….
Using wsadmin and Jython to monitor WebSphere Application Server performance
Slow performance or hang in HostName lookup due to high DNS traffic
Symptom
There are 2 symptoms you might see:
- Calls to the method java.net.InetAddress.getLocalHost takes a long time or the Java™ Virtual Machine (JVM) hangs.
- Slow response from the administrative console or from wsadmin command/script.
Cause
There are 2 possible causes:
- Cause 1:
Starting with Java™ 1.4.1, the IP address is not cached by default. This can cause delays and performance degradation if the application relies on this caching mechanism, since a lookup is now performed each time.
The WebSphere Application Server runtime code calls the InetAddress.getLocalHost() method in several places which then causes the DNS lookup requests. Applications making outbound calls would also trigger DNS lookup requests
- OR -
- Cause 2:
The problem could be lookup issues between IPv6 versus IPv4 in releases of the Java 2 SDK 1.4. The problem may be that the JVM performs both IPv6 and IPv4 queries. If the Domain Name System (DNS) server is not configured to handle IPv6 queries, the application might issue an unknown host exception. If the DNS is not configured to handle IPv6 queries properly, the application must wait for the IPv6 query to time out.
You might also notice that getting the wsadmin command prompt takes a long time or sometimes fails because of the preceding problem.
In addition, there is a known problem in Linux on OS/390 with IPv6 that will lead to a JVM crash. For more details, review the Related information section at the bottom of this technote.
Monday 19 December 2011
It’s so easy to access IBM Connections from XPages
I've used the XPages Social Enabler which comes with great functionality to handle the authentication including SSO and functionality to invoke REST services easily and parse XML. I also used the documentation of the Connections REST services. If I have time I document later more how I've done it. For now you can read the source code on OpenNTF. I want to thank my colleague Yun Zhi Lin whose code I used as starting point.
On the XSnippet page there is a new icon now to share on Connections.
Friday 16 December 2011
WebSphere and Open Authorization
Web Content Authoring within a Virtual Portal
IBM Connections and Desktop Single Sign-On using Microsoft Active Directory, Kerberos and SPNEGO
- Understand how to integrate IBM Connections with Active Directory
- Understand how to implement desktop single sign-on with IBM Connections
- Describe the integration possibilities with Microsoft SharePoint
Wednesday 14 December 2011
Social Scheduling Now in IBM Connections
OnTime also allows you to work with group calendars even when you are on the go by providing mobile access from your favorite mobile device.
Saturday 10 December 2011
Social Connections II - My observations
This is the second time that I've attended this event, the inaugural meeting being kindly hosted by The Salvation Army back in July. This time around, Cardiff University were kind enough to host us, including the rather lovely Simon Vaughan, who is definitely a man to watch :-)
The event was well-attended, by customers, Business Partners, and IBMers, with a good 50:50 mix of business and technical.
The presentations were very social, as one might expect, and predominantly focused on the business and social benefits of IBM's collaboration solution, IBM Connections, with a few more technical sessions ( including one by Yours Truly ). The speaker list is here and the sessions listing is here.
Stuart McIntyre was the MC of the event, ably assisted by Sharon "Social Shazza" Bellamy and Lisa "Where's Darren?" Duke.
The event was live-streamed, thanks to the sterling efforts of Mark Calleran , Gaz Rose and the Salvation Army team.
Stuart has promised to upload the presentations to http://socialconnections.info/
The event was rounded off by an absolutely wonderful reception and dinner at Cardiff Castle, including a tour of three of the most gorgeous rooms in the place.
The entire day went smoothly, thanks to the hosts, the organisers and the genuine good nature of all of those attending. It was truly the perfect place to establish "Social Connections" :-)
So, with two excellent events delivered during 2011, in London and Cardiff respectively, I'm looking forward to 2012 - who knows which other UK capital cities are on the agenda, but I know that there's a bloomin' good castle in Edinburgh :-)
Ooops, nearly forgot to mention - if you want to know more about what went on during the day, check out the hashtag #soccnx on Twitter; you don't have to join the site to follow the Tweets from the audience, speakers, sponsors and web-watchers.
Troubleshooting: Node agent monitoring WebSphere Application Servers
Friday 9 December 2011
A pearl of wisdom from George Bernard Shaw here at Social Connections Ii
"If you have an apple and I have an apple and we exchange these apples then you and I will still each have one apple. But if you have an idea and I have an idea and we exchange these ideas, then each of us will have two ideas."
Thanks to Louis Richardson for sharing
Thursday 8 December 2011
Searching Profiles programmatically
Mikkel Heisterberg Tweeted about this earlier, and it's a subject close to my heart, having done a lot of work with IBM Connections Profiles in the past few months, mainly via IBM Tivoli Directory Integrator and the ProfilesService.UpdateUser() command. As part of IBM Connections you will find a big REST API that allows you to work with almost every part of Connections such as searching for profiles, managing files and working with communities. As part of our new product (see my previous post) I'm doing a lot with this API. Right now one of my favorite wiki documents is "Searching Profiles programmatically". |
Demo of the IBM Content Templates Catalog
Cody Burleson posted this on Twitter earlier today, and I thought it was definitely worth a look - especially as I'd been talking about the Content Templates Catalog ( aka CTC ) to a colleague earlier this week. |
Demo of the IBM Content Templates Catalog: youtube.com/IBMXWebX
Using Trust Association Interceptors with WebSphere Application Server to support OAuth tokens
An example of a consumer might be a company that wants to aggregate all of its customers' photos onto a single web page. Rather than asking every user to enter the username/password for each of their photo sharing accounts, the company can act as a consumer and each of the photo sharing web sites can act as service providers and exchange OAuth tokens. This gives the photo aggregator company access to a user's photos without the user potentially compromising the security of their account by giving out username/password information.
Wednesday 7 December 2011
WebSphere Portal and IBM Web Content Manager - Search
2 Search services
3 Best practices
4 Conclusion
5 Resources
6 About the author
Monday 5 December 2011
Resolution – 404 errors accessing WCM content through the POC Servlet (/wps/mypoc/…)
*UPDATE 03/01/2013 - Since I wrote this article in late 2011, Cody has removed the post from his blog. However, I've found what may be a new solution, and have blogged about it here: -
More on 404 errors accessing WCM content through the POC Servlet (/wps/mypoc/…)
A surfeit of VMware and Linux goodies … including running VMware ESXi from a USB Key :-)
Michael Sampson - Collaboration Roadmap: You've Got the Technology — Now What?
Collaboration Roadmap answers both questions.
- Foreword - by Ed Brill (IBM Corporation)
- Chapter 1. Setting the Scene
- Chapter 2. Really Understand the Technology
- Chapter 3. Outline the Vision
- Chapter 4. Accept Technology is a Small Factor in Success
- Chapter 5. Determine Your Governance Approach
- Chapter 6. Make Every Effort to Engage the Business
- Chapter 7. Apply Intentional Energy to Adoption
- Chapter 8. Pursue Increasing Value
- Chapter 9. Your Collaboration Journey
- Appendix 1. Collaboration Theory
Collaboration Roadmap packs 15 years of experience into 320 pages.
Using packet trace tools iptrace, snoop, tcpdump, wireshark, and nettl
Note to self - use kubectl to query images in a pod or deployment
In both cases, we use JSON ... For a deployment, we can do this: - kubectl get deployment foobar --namespace snafu --output jsonpath="{...
-
Why oh why do I forget this ? Running this command : - ldapsearch -h ad2012.uk.ibm.com -p 389 -D CN=bpmbind,CN=Users,DC=uk,DC=ibm,DC=com -w...
-
Whilst building a new "vanilla" Kubernetes 1.25.4 cluster, I'd started the kubelet service via: - systemctl start kubelet.se...
-
Error "ldap_sasl_interactive_bind_s: Unknown authentication method (-6)" on a LDAPSearch command ...Whilst building my mega Connections / Domino / Portal / Quickr / Sametime / WCM environment recently, I was using the LDAPSearch command tha...