Dan's Blog

Smoke

2011-12-20T18:56:00.002+02:00

More smoke photos here: http://danbordeanu.ro/?p=992

Good morning Prague

2011-12-03T00:30:00.001+02:00

The rest of images here: here and download full size images from : here

Toys used to take this image : Canon 7d, 17-40mm F/4 USM

F/22, ISO:100, Exposure time 1/50

2011-10-12T12:01:00.000+03:00

Photo session with Eva in Cibulka forest.More photos here

2011-10-12T11:09:00.005+03:00

Blastwave Blastwave Blastwave

[..]

The Blastwave® Software Stack for Solaris™ and OpenSolaris™

blastwave

Painting in some restaurant in Prague

2011-04-07T21:12:00.000+03:00

Prague

2011-03-31T12:22:00.000+03:00

Rose

2010-11-23T12:09:00.000+02:00

More photos here

Masca Theater - Performances in the Bucharest subway

2010-11-14T20:29:00.000+02:00

More photos here

Enjoy ! :)

BitDefender Free Antispam for Mail Servers

2010-11-10T17:18:00.000+02:00

Hello to all you network administrators out there who fight against spam emails! Here, at BitDefender, we have some of the best antispam engines in terms of detection rate and speed. You might ask yourself: says who? Well, us ofcourse, and the VBSpam team who periodically tests our spam detection rate.

In the latest test from this September, BitDefender won the first place, ahead of Symantec, Sophos and Fortinet. Even better, BitDefender is the only company in the world that won nine consecutive VBSpam awards.

You can read more here

Andreea

2010-11-01T10:44:00.000+02:00

More photos with Andreea here

Autumn

2010-10-25T12:42:00.000+03:00

More photos here

Sculpture

2010-10-10T18:21:00.000+03:00

My first studio photoshoot

2010-09-15T12:46:00.002+03:00

Sicily in black and white

2010-08-07T13:01:00.031+03:00

Sicily is the largest island in the Mediterranean Sea, comprising an autonomous region of Italy and one of the most beautiful place I ever been.

So, why b/w photos?

Simple, Sicily is a place of contradictions, between the static and dynamic, new and old on the same spot...

Enjoy :)

- Catania city view, piazza duomo

- Catania city view, nearby Ursino castle

- Ursino castle view

- Night view of Etna

- Prayer of a woman

- Motorbike speed

- Fish market view, 1

- Fish market view, 2

- Fish market view, 3

- Fish market view, 4

- Fish market view, 5

- Fish market view, 6

- Fish market view, 7

- Fish market view, 8

- Fish market view, 9

- Fish market view, 10

- Fish market view, 11

- Fish market view, 12

- Fish market view, basta :)

- Fish market view, 13

- Fish market view, 14

- Fish market view, 15

- Scuter nearby fish market

- Erotic bar in Castelmola ( http://www.barturrisi.com/ )

- Piazza Duomo in Castelmola, view from the last floor of the turrisi bar

- Taormina, greek theatre view

- Nightlife in Catania, nearby Bellini theater

- Wine

- More wine:

- Boat in Lipari islands

- Lipari island harbour view

- Church view in Lipari island, 1

- Church view in Lipari island, 2

- Catania view, Benedictine Monastery tower

- Via dei Crociferi

- Catania, piazza duomo view

- Old door in Siracusa

- Siracusa street view

- Siracusa, Ortigia view

- View from catacombs of St. Lucy

- Ghosts in catacombs of St. Lucy

- The Cathedral of Siracusa, 1

- The Cathedral of Siracusa, 2

- The Cathedral of Siracusa, 3

- Ortigia street view

- Siracusa Piazza Archimede

- Etna view

- Etna old lava flow eruption from 2008-2009

- Church in Catania

- Old house in Catania, 1

- Old house in Catania, 2

- Vespa with flowers prep for a wedding

- Sicilian puppets

- Art in Taormina

- Inside of Benedictine Monastery, 1

Inside of Benedictine Monastery, 2

- Stret view, motorbikes nearby fish market

sunset collection

2010-07-09T23:10:00.006+03:00

old playground

2010-06-26T19:41:00.005+03:00

Photo portofolio

2010-01-09T15:50:00.004+02:00

Some of my best photos:

- Portrait

- Nature

- Places

- Wildlife

sendmail in opensolaris

2009-10-03T22:48:00.004+03:00

...by default is accepting connections only from localhost.
Not very useful if you want to have a functional mail server.
To allow connections from everywhere svccfg is the way to do it:

#svccfg -s sendmail setprop config/local_only=false

Don't forget to : #svcadm refresh sendmail and restart the sendmail server: #svcadm restart sendmail

To check if it is ok, run:

#svcprop sendmail
[...]
config/local_only boolean false
[...]

and telnet your_host 25 from outside.

More info about svcprop and svccfg.

Linux in the Bucharest subway

2009-10-03T22:35:00.004+03:00

The subway scheduling system is running linux.
Don't know what distro, but it is linux.
Here is the proof, two photos (sorry for the low resolution) of the system boot sequence

Fall

2009-09-21T14:12:00.005+03:00

September

2009-09-05T14:03:00.005+03:00

ProFTPD pakage for opensolaris

2009-05-10T11:07:00.014+03:00

In opensolaris there is no proftpd package, so I decide to build it and to make a pkg

First, you must decide how many packages you will need and what will be their names

the distributables names have the form:
<$PKG>-<$VERSION>--<$ARCH>-local[.tgz]

where local means that the package is installable on /opt or /usr/local
According to the solaris filesystem (man filesystem), add-on software could install files only on:
/opt/
/etc/opt/
/var/opt/
/var/svc/manifest
/var/tmp
/usr/local is not an SVR4 approved directory: /usr is availble only for Solaris bundled software; exceptionally, /usr/local could be a softlink to /opt/local
the usernames are limited to 8 characters.

In opensolaris the pkg have the name format XXXyyy, where XXX is the name of the of company and tge yyy is the name of the software.For example, SUNWpostgr-83-libs

So, let's start work on the proftpd pkg file.

Setup the directory structure in your home directory somethinglike this: ~/pkg/build/$PKG/{ControlFiles,Objects}

- $PKG is TSTproftpd

Copy the proftpd files structure in Objects directory

#pwd
#/root/pkg/build/TSTproftpd/Objects
root@freya:~/pkg/build/TSTproftpd/Objects# ls
_EXTRAS FAKE_ROOT

- FAKE_ROOT

-- contain the TSTproftpd directory (here are the files of the proftpd server).This will have a structure bin include lib libexec sbin share usr var.You will notice no etc directory (etc of proftpd will be located in /etc/opt/TSTSproftpd

-- in FAKE_ROOT/etc/opt/TSTproftpd are the conf files, proftpd.conf, proftpd.key/pem etc.

-- in FAKE_ROOT/var/opt/TSTproftpd directory will contain the pid file and the delay file

FAKE_ROOT is the proftpd directory structure after the install of the pkg file.

- _EXTRAS

Here we have the smf method file, sysV init script and the xml manifest file

#~/pkg/build/TSTproftpd/Objects/_EXTRAS# pwd
/root/pkg/build/TSTproftpd/Objects/_EXTRAS
#~/pkg/build/TSTproftpd/Objects/_EXTRAS# ls
etc TSTproftpd var

The structure of the _EXTRAS dir:

#~/pkg/build/TSTproftpd/Objects/_EXTRAS# ls -R
.:
etc TSTproftpd var

./etc:
init.d

./etc/init.d:
proftpd

./TSTproftpd:
lib

./TSTproftpd/lib:
svc

./TSTproftpd/lib/svc:
method

./TSTproftpd/lib/svc/method:
proftpd

./var:
opt svc

./var/opt:
TSTproftpd

./var/opt/TSTproftpd:
proftpd

./var/opt/TSTproftpd/proftpd:
proftpd.delay

./var/svc:
manifest

./var/svc/manifest:
network

./var/svc/manifest/network:
proftpd.xml

The second and the most and difficult step is to create the ControlFiles directory and the files from it.

create ControlFiles/copyright
(optional) create ControlFiles/space
(optional) create ControlFiles/compver
(optional) create ControlFiles/depend
(optional) create ControlFiles/checkinstall script
(optional) create ControlFiles/{preinstall, postinstall, preremove, postremove} procedure scripts
(optional) create ControlFiles/{i., r.} class action scripts
(optional) create ControlFiles/request user interaction script

#:~/pkg/build/TSTproftpd/ControlFiles# pwd
/root/pkg/build/TSTproftpd/ControlFiles
#:~/pkg/build/TSTproftpd/ControlFiles# ls
checkinstall compver copyright depend i.init i.smf pkginfo postinstall preremove prototype space

- pkginfo -

PKG=TSTproftpd
NAME=ProFTPD server and utilities
ARCH=i386
VERSION=1.3.2
CATEGORY=daemon
DESC=Professional grade GPL-licensed FTP server software; see www.proftpd.org
BASEDIR=/opt
CLASSES=none

- checkinstall -

# proftpd - checkinstall script
#
trap `exit 3` 15

# Assign Solaris release class to install release specific files
smf=no
if [ -f /usr/sbin/svccfg -a -f /usr/sbin/svcadm ] ; then smf=yes ; fi
if [ $smf = yes ]; then
CLASSES='none smf'
else
CLASSES='none init'
fi
# Make env variables available to other packaging scripts
cat >$1 <CLASSES='$CLASSES'
!
exit 0

- compver -

1.3.1, 2009.02.01
1.2.2
1.0.1

- copyright -

#Copyright (c) 1999 company_name
#All Rights Reserved.
#THIS PACKAGE CONTAINS UNPUBLISHED PROPRIETARY SOURCE CODE OF
#company_name.
#The copyright notice above does not evidence any
#actual or intended publication of such source code

- depend -

P SUNWpostgr-83-libs PostgreSQL client libraries

!!!! my proftpd server is using pgsql for storing users and quota.

- i.init -

# proftpd - i.init script
#
# Copy the SysV specific files to the base directory.
# These are:
# /etc/init.d/proftpd
# /etc/rc0.d/K10proftpd=/etc/init.d/proftpd
# /etc/rc1.d/K10proftpd=/etc/init.d/proftpd
# /etc/rc2.d/K10proftpd=/etc/init.d/proftpd
# /etc/rc3.d/S70proftpd=/etc/init.d/proftpd
#
while read src dest; do
/usr/bin/cp $src $dest || exit 2
echo $dest
done
exit 0

- i.smf -

# proftpd - i.smf script
#
# Copy the SMF specific files to the base directory.
# The files specific to SMF are:
# TSTproftpd/lib/svc
# TSTproftpd/lib/svc/method
# TSTproftpd/lib/svc/method/proftpd
# /var/svc
# /var/svc/manifest
# /var/svc/manifest/network
# /var/svc/manifest/network/proftpd.xml
#
while read src dest; do
/usr/bin/cp $src $dest || exit 2
echo $dest
done
exit 0

- postinstall -

# proftpd - postinstall script
# 2009/04/23 - add SMF capabilities
#

# Set variable smf depending on the availability of SMF binaries
smf=no
if [ -f /usr/sbin/svccfg -a -f /usr/sbin/svcadm ]; then
smf=yes
fi
# If needed, configure SMF
if [ $smf = yes ]; then
# registering with SMF
/usr/sbin/svccfg import /var/svc/manifest/network/proftpd.xml >/dev/null 2>&1
echo "ProFTPD is using SMF; the FMRI is:"
echo " svc:/network/proftpd"
# disable the service, by default
/usr/sbin/svcadm disable -s network/proftpd
echo "The service is disabled by default!"
else
echo "ProFTPD is using the SysVinit style"
fi
exit 0

- preremove -

# proftpd - preremove script
# 2009/04/23 - add SMF functionality
#
# Set variable smf depending on the availability of SMF binaries
smf=no
if [ -f /usr/sbin/svccfg -a -f /usr/sbin/svcadm ]; then
smf=yes
fi
if [ $smf = yes ]; then
# disable the service
echo "Disabling the service (if running)"
/usr/sbin/svcadm disable -s network/proftpd >/dev/null 2>&1
# remove the service hook from SMF
echo "Unregistering the SMF service"
/usr/sbin/svccfg delete network/proftpd >/dev/null 2>&1
fi
exit 0

- space -

#empty file, nothing here

Finaly the prototype file must be created, this is the difficult part ;)

# cd ~/pkg/build/TSTproftpd
# pkgproto Objects/ > ControlFiles/prototype

This will create a file, containing the pkg structure.Anyway, some modifications must be done.

i pkginfo
i copyright
i compver
i depend
i space
i checkinstall
i i.smf
i i.init
i postinstall
i preremove

edit the paths for the relocatable objects
add the {e, v, x} entries
modify the (user, group) owner for the entries
modify the file permissions for the entries
(optional) add the classes entries, other than 'none'
build the package:

The file should be like this:

i pkginfo
i copyright
i compver
i depend
i space
i checkinstall
i i.smf
i i.init
i postinstall
i preremove
d none /etc/opt/TSTproftpd 0755 root root
f none /etc/opt/TSTproftpd/proftpd.conf 0440 root bin
f none /etc/opt/TSTproftpd/proftpd.key.pem 0444 root bin
f none /etc/opt/TSTproftpd/proftpd.conf.orig 0444 root bin
f none /etc/opt/TSTproftpd/proftpd.cert.pem 0444 root bin
d none TSTproftpd 0755 root root
d none TSTproftpd/share 0555 root bin
d none TSTproftpd/share/locale 0555 root bin
d none TSTproftpd/share/man 0555 root bin
d none TSTproftpd/share/man/man5 0555 root bin
f none TSTproftpd/share/man/man5/xferlog.5 0444 root bin
d none TSTproftpd/share/man/man8 0555 root bin
f none TSTproftpd/share/man/man8/ftpshut.8 0444 root bin
f none TSTproftpd/share/man/man8/proftpd.8 0444 root bin
f none TSTproftpd/share/man/man8/ftpdctl.8 0444 root bin
d none TSTproftpd/share/man/man1 0555 root bin
f none TSTproftpd/share/man/man1/ftpwho.1 0444 root bin
f none TSTproftpd/share/man/man1/ftpcount.1 0444 root bin
f none TSTproftpd/share/man/man1/ftptop.1 0444 root bin
d none TSTproftpd/lib 0555 root bin
d none TSTproftpd/lib/pkgconfig 0555 root bin
f none TSTproftpd/lib/pkgconfig/proftpd.pc 0444 root bin
d none TSTproftpd/lib/proftpd 0555 root bin
d none TSTproftpd/include 0555 root bin
d none TSTproftpd/include/proftpd 0555 root bin
f none TSTproftpd/include/proftpd/response.h 0444 root bin
f none TSTproftpd/include/proftpd/compat.h 0444 root bin
f none TSTproftpd/include/proftpd/regexp.h 0444 root bin
f none TSTproftpd/include/proftpd/timers.h 0444 root bin
f none TSTproftpd/include/proftpd/conf.h 0444 root bin
f none TSTproftpd/include/proftpd/str.h 0444 root bin
f none TSTproftpd/include/proftpd/help.h 0444 root bin
f none TSTproftpd/include/proftpd/modules.h 0444 root bin
f none TSTproftpd/include/proftpd/netio.h 0444 root bin
f none TSTproftpd/include/proftpd/sets.h 0444 root bin
f none TSTproftpd/include/proftpd/config.h 0444 root bin
f none TSTproftpd/include/proftpd/default_paths.h 0444 root bin
f none TSTproftpd/include/proftpd/ctrls.h 0444 root bin
f none TSTproftpd/include/proftpd/trace.h 0444 root bin
f none TSTproftpd/include/proftpd/child.h 0444 root bin
f none TSTproftpd/include/proftpd/xferlog.h 0444 root bin
f none TSTproftpd/include/proftpd/throttle.h 0444 root bin
f none TSTproftpd/include/proftpd/bindings.h 0444 root bin
f none TSTproftpd/include/proftpd/event.h 0444 root bin
f none TSTproftpd/include/proftpd/proftpd.h 0444 root bin
f none TSTproftpd/include/proftpd/display.h 0444 root bin
f none TSTproftpd/include/proftpd/ftp.h 0444 root bin
f none TSTproftpd/include/proftpd/log.h 0444 root bin
f none TSTproftpd/include/proftpd/fsio.h 0444 root bin
f none TSTproftpd/include/proftpd/mkhome.h 0444 root bin
f none TSTproftpd/include/proftpd/mod_ctrls.h 0444 root bin
f none TSTproftpd/include/proftpd/pr-syslog.h 0444 root bin
f none TSTproftpd/include/proftpd/env.h 0444 root bin
f none TSTproftpd/include/proftpd/data.h 0444 root bin
f none TSTproftpd/include/proftpd/var.h 0444 root bin
f none TSTproftpd/include/proftpd/class.h 0444 root bin
f none TSTproftpd/include/proftpd/options.h 0444 root bin
f none TSTproftpd/include/proftpd/version.h 0444 root bin
f none TSTproftpd/include/proftpd/mod_sql.h 0444 root bin
f none TSTproftpd/include/proftpd/glibc-glob.h 0444 root bin
f none TSTproftpd/include/proftpd/netaddr.h 0444 root bin
f none TSTproftpd/include/proftpd/netacl.h 0444 root bin
f none TSTproftpd/include/proftpd/mod_quotatab.h 0444 root bin
f none TSTproftpd/include/proftpd/expr.h 0444 root bin
f none TSTproftpd/include/proftpd/scoreboard.h 0444 root bin
f none TSTproftpd/include/proftpd/inet.h 0444 root bin
f none TSTproftpd/include/proftpd/parser.h 0444 root bin
f none TSTproftpd/include/proftpd/libsupp.h 0444 root bin
f none TSTproftpd/include/proftpd/buildstamp.h 0444 root bin
f none TSTproftpd/include/proftpd/encode.h 0444 root bin
f none TSTproftpd/include/proftpd/dirtree.h 0444 root bin
f none TSTproftpd/include/proftpd/table.h 0444 root bin
f none TSTproftpd/include/proftpd/auth.h 0444 root bin
f none TSTproftpd/include/proftpd/support.h 0444 root bin
f none TSTproftpd/include/proftpd/pool.h 0444 root bin
f none TSTproftpd/include/proftpd/pidfile.h 0444 root bin
d none TSTproftpd/bin 0555 root bin
f none TSTproftpd/bin/ftptop 0555 root bin
f none TSTproftpd/bin/prxs 0555 root bin
f none TSTproftpd/bin/ftpdctl 0555 root bin
f none TSTproftpd/bin/ftpcount 0555 root bin
f none TSTproftpd/bin/ftpwho 0555 root bin
d none TSTproftpd/usr 0755 root sys
d none TSTproftpd/usr/proftpd-1.3.2 0755 root sys
d none TSTproftpd/usr/proftpd-1.3.2/include 0755 root sys
d none TSTproftpd/usr/proftpd-1.3.2/include/proftpd 0755 root sys
f none TSTproftpd/usr/proftpd-1.3.2/include/proftpd/privs.h 0444 root bin
f none TSTproftpd/usr/proftpd-1.3.2/include/proftpd/proctitle.h 0444 root bin
f none TSTproftpd/usr/proftpd-1.3.2/include/proftpd/feat.h 0444 root bin
d none TSTproftpd/sbin 0555 root bin
f none TSTproftpd/sbin/proftpd 0555 root bin
s none TSTproftpd/sbin/in.proftpd=proftpd
f none TSTproftpd/sbin/ftpshut 0555 root bin
d none TSTproftpd/libexec 0555 root bin
f none TSTproftpd/libexec/mod_sql.so 0555 root bin
f none TSTproftpd/libexec/mod_sql_postgres.a 0644 root root
f none TSTproftpd/libexec/mod_quotatab.a 0444 root bin
f none TSTproftpd/libexec/mod_sql_postgres.so 0755 root root
f none TSTproftpd/libexec/mod_quotatab.la 0555 root bin
f none TSTproftpd/libexec/mod_quotatab.so 0555 root bin
f none TSTproftpd/libexec/mod_sql_postgres.la 0644 root root
f none TSTproftpd/libexec/mod_quotatab_file.a 0444 root bin
f none TSTproftpd/libexec/mod_sql.la 0555 root bin
f none TSTproftpd/libexec/mod_sql.a 0444 root bin
f none TSTproftpd/libexec/mod_quotatab_file.so 0555 root bin
f none TSTproftpd/libexec/mod_quotatab_sql.so 0555 root bin
f none TSTproftpd/libexec/mod_quotatab_file.la 0555 root bin
f none TSTproftpd/libexec/mod_quotatab_sql.a 0444 root bin
f none TSTproftpd/libexec/mod_quotatab_sql.la 0555 root bin
d none TSTproftpd/var 0555 root bin
d none TSTproftpd/var/proftpd 0555 root bin
#d none /var/opt 0755 root root
d none /var/opt/TSTproftpd 0755 root root
d none /var/opt/TSTproftpd/proftpd 0755 root root
v none /var/opt/TSTproftpd/proftpd/proftpd.delay 0644 root bin

#
# the smf class files
#
d smf TSTproftpd/lib/svc 0755 root bin
d smf TSTproftpd/lib/svc/method 0755 root bin
f smf TSTproftpd/lib/svc/method/proftpd 0755 root bin
f smf /var/svc/manifest/network/proftpd.xml 0444 root sys

# the init class files
#
f init /etc/init.d/proftpd 0744 root sys
s init /etc/rc0.d/K10proftpd=/etc/init.d/proftpd
s init /etc/rc1.d/K10proftpd=/etc/init.d/proftpd
s init /etc/rc2.d/K10proftpd=/etc/init.d/proftpd
s init /etc/rc3.d/S70proftpd=/etc/init.d/proftpd

The proftpd will be installed in /opt/TSTproftpd directory.The conf file in /etc/opt/TSTproftpd directory, the svc method in /opt/TSTproftpd/lib/svc/method.The xml manifest will be in /var/svc/manifest/network.For more info about filesystem organization in opensolaris system, read man filesystem

Now it's time to build the pkg file.By default, the package in filesystem format will be generated on the 'spool' device: /var/spool/pkg/. For other destinations, see the '-d' option of pkgmk.

# pkgmk -o -f ControlFiles/prototype -r Objects/FAKE_ROOT,Objects/_EXTRAS

!!!! No errors are allowed. !!!!

# cd /var/spool/pkg

Translate the package to the datastream format, suitable for distribution:

# pkgtrans -s `pwd` /tmp/TSTproftpd.pkg

The following packages are available:
1 TSTproftpd ProFTPD server and utilities
(i386) 1.3.2

Select package(s) you wish to process (or 'all' to process
all packages). (default: all) [?,??,q]:all
Transferring package instance

To install the TSTproftpd server, type # pkgadd -d TSTproftpd

By default, proftpd is disabled at start up

To enable it, type svcadmin enable network/TSTproftpd

The end :)

If you want to test the pkg file and to take a look at the ControlFiles take a look here:
http://idea-soft.sci-office.com/~dan/down/TSTproftpd/

More useful links:
http://www.sunfreeware.com/pkgadd.html
http://www.opencsw.org/standards/smf

May 1

2009-05-03T22:14:00.005+03:00

May 1 holiday

ProFTPD manifest xml for opensolaris

2009-03-18T12:07:00.010+02:00

In order to start/stop/refresh proftpd using SMF method, you need two files, the manifest xml file and the start/stop/refresh proftpd script.

First, the xml file:


<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
<service_bundle type="manifest" name="proftpd-server">
 <service 
 name="network/proftpd-server" 
     type="service" 
     version="1">
     <create_default_instance enabled="false">
            <single_instance> 
     <dependency name='net-loopback'
                grouping='require_all'
                restart_on='none'
                type='service'>
                <service_fmri value="'svc:/network/loopback'">
         </dependency>
         <dependency name='net-physical'
                grouping='require_all'
                restart_on='none'
                type='service'>
                <service_fmri value="'svc:/network/physical'">
         </dependency>
            <exec_method 
  type="method" 
  name="start" 
  exec="/lib/svc/method/proftpd start" 
  timeout_seconds="60">
     </exec_method>
     <exec_method 
  type="method" name="stop" 
  exec="/lib/svc/method/proftpd stop" 
  timeout_seconds="60">
     </exec_method>
    <exec_method
                type="method"
                name="refresh"
                exec="/lib/svc/method/proftpd restart"
                timeout_seconds="60">
     </exec_method>
  <stability value="Unstable">    
 <template>
            <common_name>
                <loctext lang="C">
  PROFTPD server
  </loctext>
            </common_name>
     <documentation>
                <manpage title='in.proftpd' 
  section='1M'
                manpath='/usr/proftpd-1.3.2/share/man' />
             </documentation>
        </template>
        </service>
</service_bundle>

Copy this file in /var/svc/manifest/network/proftpd.xml

To import this file type as root:

svccfg import /var/svc/manifest/network/proftpd.xml

Second file, the proftpd start up script:

#!/sbin/sh
#
#proftpd start up script
# ident "%Z%%M% %I% %E% SMI"

. /lib/svc/share/smf_include.sh

PROFTPDIR=/usr/proftpd-1.3.2/
PROFTPCONF=/usr/proftpd-1.3.2/etc/proftpd.conf
PIDFILE=/usr/proftpd-1.3.2/var/proftpd.pid

if [ ! -d $PROFTPDIR ]; then
echo "Error: proftpd dir not found"
exit $SMF_EXIT_ERR_CONFIG
fi

if [ ! -f $PROFTPCONF ]; then
echo "Error: proftpd conf file not found"
exit $SMF_EXIT_ERR_CONFIG
fi

# This script is being used for two purposes: as part of an SMF
# start/stop/refresh method, and as a sysidconfig(1M)/sys-unconfig(1M)
# application.
#
# Both, the SMF methods and sysidconfig/sys-unconfig use different
# arguments..

case $1 in

'start')
$PROFTPDIR/sbin/proftpd -c $PROFTPCONF 2> /dev/null
;;
'stop')
if [ -f "$PIDFILE" ]; then
kill -9 `/usr/bin/cat $PIDFILE`
rm -f $PIDFILE 2>/dev/null
else
pkill proftpd 2>/dev/null
rm -f $PIDFILE 2>/dev/null
fi
;;
'restart')
if [ -f "$PIDFILE" ]; then
/usr/bin/kill -HUP `/usr/bin/cat $PIDFILE`
fi
;;

*)
echo "Usage: $0 { start | stop | restart }"
exit 1
;;
esac

exit $?

Copy this file in /lib/svc/method/

In order to start up the proftpd server (read more about how to compile proftpd on opensolari here) type:

svcadm enable proftpd-server

To check if the proftpd server is running type:

svcs -p proftpd-server

The output will something like that

root@opensolaris:/var/lib# svcs -p proftpd-server
STATE STIME FMRI
online 12:07:06 svc:/network/proftpd-server:default
11:56:03 276 proftpd

To stop the proftpd server type:

svcadm disable proftpd-server

Same for refresh/restart method

svcadm refresh proftpd-server

The script and the xml file are self explained, and if you installed the proftpd in a different path, do not forget to change the PROFTPDIR, PROFTPCONF and PIDFILE variables from proftpd script acording to your proftpd prefix.

Troubleshooting Tips

If you have problems with the proftpd manifest check the /var/svc/log/network-proftpd-server\:default.log file.

To see if the proftpd is running:

svcs -xv proftpd-server

The output is something like this:

svc:/network/proftpd-server:default (PROFTPD server)
State: online since Wed Mar 18 12:35:33 2009
See: man -M /usr/proftpd-1.3.2/share/man -s 1M in.proftpd
See: /var/svc/log/network-proftpd-server:default.log
Impact: None.

Up

2009-03-15T23:08:00.003+02:00

We have only one place to go, and that’s up.

ProFTPD in opensolaris

2009-03-13T15:27:00.010+02:00

"Highly configurable GPL-licensed FTP server software", but in opensolaris the provided package from blastwave lacks in support of postgresql connectivity.

So, the solution is to download the tar.gz from here and compile it.

Here we go :

root@freya:~/work/proftpd# ls
proftpd-1.3.2.tar.gz
root@freya:~/work/proftpd# tar -xvf proftpd-1.3.2.tar.gz
[...]

After unpacking type in the proftpd dir:

./configure
--prefix=/usr/proftpd-1.3.2
--enable-dso --with-modules=mod_tls
--with-shared=mod_sql:mod_sql_postgres:mod_quotatab:mod_quotatab_file:mod_quotatab_sql
--with-includes=/usr/postgres/8.3/include/ --with-libraries=/usr/postgres/8.3/lib/

!!!!! the order of shared modules is important, mod_sql, must be in front of mod_sql_postgres, or else your proftpd server will not start !!!!

If everything is ok, run make & make install

This will install proftpd in /usr/proftpd-1.3.2 dir (you can change the prefix)

Also, in order to have postgresql connectivity from proftpd, you need to have postgresql installed(at least the include and libs files in your system) (read more about this topic here http://www.sun.com/bigadmin/features/articles/postgresql_opensolaris.jsp), and do not forget to add in proftpd.conf file the following lines:

LoadModule mod_sql.c
LoadModule mod_sql_postgres.c
LoadModule mod_quotatab.c
LoadModule mod_quotatab_sql.c

To configure proftpd to work with postgresql and how to make the db tables, read the proftpd manual :)

In the next post i will write about proftpd manifest on opensolaris and howto make IPS for proftpd.

Howto install crossbow in opensolaris

2009-02-28T00:10:00.003+02:00

"Crossbow provides the building blocks for network virtualization and resource control by virtualizing the stack and NIC around any service (HTTP, HTTPS, FTP, NFS, etc.), protocol or Virtual machine."

More info about crossbow project here

First, you need to install BFU.

Download it from here here

root@opensolarais:~/work# tar xfv SUNWonbld-20060828.i386.tar.bz2
root@opensolarais:~/work# cd onbld

If you have an old version of BFU uninstall it first

root@opensolarais:~/work# pkgrm SUNWonbld

If not just, install it in your system using pkgadd command.

root@opensolarais:~/work# pkgadd -d . SUNWonbld

If everything is ok, you should have in opt the following:

root@opensolaris:/opt/onbld# pwd
/opt/onbld
root@opensolaris:/opt/onbld# ls
bin env etc gk lib man

Anyway, the bfu command is not in your path, so you must add the following lines in your .profile file

root@opensolaris:~# vi .profile

[..]

export PATH=/opt/onbld/bin:/opt/onbld/bin/i386:
export FASTFS=/opt/onbld/bin/i386/fastfs
export BFULD=/opt/onbld/bin/i386/bfuld
export GZIPBIN=/usr/bin/gzip

logout, login, and that is all.You can now upgrade your system

The next step is to install crossbow

But before that,if you don't want to work for nothing, check if your NICs are to work with IP instances (read more here )

Download the latest snapshot from here

root@opensolaris:~/work# ls
nightly-nd-bins-20081209.i386.tar.bz2

root@opensolaris:~/work# tar xvf nightly-nd-bins-20081209.i386.tar.bz2
nightly-nd/
[...]

root@opensolaris:~# bfu /root/work/crossbow/nightly-nd/
Copying /opt/onbld/bin/bfu to /tmp/bfu.1733
Executing /tmp/bfu.1733 /root/work/crossbow/nightly-nd/
[...]
a lot of stuff scrolling down
[...]

(the shell is changed in 'ksh')

Do not forget to run '/opt/onbld/bin/acr'

After this(if everything is ok) reboot your machine.

You will notice a new entry in your grub list

After login you will see

Sun Microsystems Inc. SunOS 5.11 net-virt xb_45 snv_103 120808 Near Future
bfu'ed from /root/work/crossbow/nightly-nd/ on 2009-02-24

Now you can play with dladm to create vnics(read more about vnics and zones here here
or this pdf file)

ex:

root@opensolaris:~# dladm create-etherstub etherstub1
root@opensolaris:~# dladm create-vnic -l etherstub1 vnic1

root@opensolaris:~# dladm show-vnic
LINK OVER SPEED MACADDRESS MACADDRTYPE VID
vnic1 etherstub1 0 2:8:20:c8:18:74 random 0

NAT in opensolaris

2009-02-15T13:13:00.006+02:00

Firt, you must enable ip forwarding in your opensolaris box.

Let's suppose thet we have two network adapters, one is elxl0(80.xxx.xxx.xxx), this is connect to the internet, and the second one is e1000g0 connected to the intranet (172.16.16.1)

ipnat.conf file can be located anyware on the system, in /etc/ipnat.rules,
/usr/local/etc/ipnat.rules, or /etc/opt/ipf/ipnat.rules

In opensolaris, /network/ipv4-forwarding service is using /etc/ipf/ipnat.conf file

cd /etc/ipf

echo >> ipnat.conf (if it's missing)

Insert in ipnat.conf file this line map elxl0 172.16.16.0/24 -> 0/32

The easiest way to load a NAT rule set is:
ipnat -CF -f /etc/ipnat.conf

To test if the rules from ipnat.rules are loaded, type from root account:

ipnat -l

The output look like this

root@freya:/etc/ipf# ipnat -l
List of active MAP/Redirect filters:
map elxl0 172.16.16.0/24 -> 0.0.0.0/32
[...]

List of active sessions:
MAP 172.16.16.2 12769 <- -> 80.xxx.xxx.xxx 12769 [86.xxx.21.xxx 53]

Finally, try to ping from your intranet, yahoo.com.If it's ok, you are good to go online :)

To see the ipnat in action type ipmon -o N

You will see a lot of "stuff" scrolling

[...]

15/02/2009 13:32:54.941834 @3 NAT:RDR 172.16.16.2,80 <- -> 80.xxx.xxx.xxx,80 [81.yy.yy.21,61501]
15/02/2009 13:32:55.082321 @3 NAT:RDR 172.16.16.2,80 <- -> 80.xxx.xxx.xxx,80 [87.xx.86.yy,61663]
15/02/2009 13:32:55.085297 @3 NAT:RDR 172.16.16.2,80 <- -> 80.xxx.xxx.xxx,80 [89.vv.vv.20,59811]
15/02/2009 13:32:58.030023 @3 NAT:EXPIRE 172.16.16.2,80 <- -> 80.xxx.xxx.xxx,80 [89.121.210.2,2787] Pkts 8/5 Bytes 1340/1499

!!! Do not forget to enable ip-forwarding and ipfilter if you want your rules to be loaded at startup

Freya

2009-02-14T00:15:00.005+02:00

Like I said in an old post, my old server is dead.

So I bought a new one, and it's running opensolaris(SunOS 5.11) for about 8 days now.

Stay tuned for some new posts about network, nat, portforwarding and other interesting stuff from opensolaris

loki is dead

2009-01-25T17:41:00.003+02:00

After serving me for more then 8 years(it was my desktop during school), and working non stop for the last 400 days, loki, my gateway server, is dead.
I don't know why, maybe the cpu, the motherboard, or the ram.

I'm thinking to revive it, but this time it will run opensolaris.This will be fun!!!

RIP:)

UPDATE: How to run Opensolaris in Virtualbox

2008-12-31T17:03:00.005+02:00

Well, my last article about virtualbox and opensolaris is
outdated.why?because the new vbox(2.1.0) version replace TUN/TAP on
Linux.
What does that mean?
You don't need anymore a tun/tap interface.
You can attach to a real interface as eth0, eth0:1, br0, or another
"real" interface.
So, my bash script is useless now.
Anyway, to update your virtual opensolaris, run this command:

VBoxManage modifyvm "opensolaris" -nic1 hostif -hostifdev1 eth1

More info about virtualbox 2.1.0 here

That is all :)

Old lady

2008-12-30T16:24:00.008+02:00

97 years old lady

How to run opensolaris in virtualbox

2008-12-11T16:57:00.004+02:00

Opensolaris in virtualbox, short how to

0 - what do I need to run virtualbox
1 - creating the image
2 - disk management
3 - vm management(start stop), delete vm, monitoring
4 - snapshot
5 - short_how_how

0 - to run opensolaris you need:

- linux, duhhh:)
- virtualbox Version 2.0.6
- tunctl (uml-utilities)
- brctl (bridge-utils)

and this script (run it from root account)

#!/bin/bash
PATH=/sbin:/usr/bin:/bin:/usr/bin
USER=dbordeanu
IPTABLES="/sbin/iptables"
/usr/sbin/brctl addbr br0
#tap 1 for opensolaris
#ip 10.1.1.2
/usr/sbin/tunctl -t tap1 -u $USER
ip link set up dev tap1
/usr/sbin/brctl addif br0 tap1
#start br0
ip link set up dev br0
ip addr add 10.1.1.1/24 dev br0
ip route add 10.1.1.0/24 dev br0
chmod 0666 /dev/net/tun

1 - Creating the opensolaris image
- creating the image:

VBoxManage createvm -name "opensolaris" -register

- specify the ram, boot order, and the net interface

VBoxManage modifyvm "opensolaris" -memory "512MB" -acpi on -boot1 dvd
-nic1 hostif -hostifdev1 tap1

!!! You must have tap interface up&running. Without it, your
opensolaris image won't run.

-creating the hardisk for the opensolaris image

VBoxManage createvdi -filename "opensolaris.vdi" -size 20000 -register

The hdd will be 20GB size.

-adding the disk to the vm

VBoxManage modifyvm "opensolaris" -hda "opensolaris.vdi"

-adding the iso file, from this image the vm will boot

VBoxManage registerimage dvd os.iso

VBoxManage modifyvm "opensolaris" -dvd os.iso

Don't forget to remove the iso image after the install.If not, your vm
will boot from the dvd, not from the first hdd

To do this type:

VBoxManage modifyvm "opensolaris" -dvd none

VBoxManage unregisterimage dvd os.iso

VBoxManage modifyvm "opensolaris" -boot1 hda

Starting the opensolaris vm

VBoxHeadless -startvm "opensolaris" &

the ouput of this command will be:

VirtualBox Headless Interface 1.6.2
(C) 2008 Sun Microsystems, Inc.
All rights reserved

Listening on port 3389

to connect to opnesolaris vm, run from the client rdesktop host (where
the host is the machine where the vm is running)

It is possible to start the vm without vrdp

VBoxHeadless -startvm "opensolaris" -vrdp=off &

Another way to start your vm is

VBoxVRDP -startvm "pensolaris" -vrdpport 12345 &

VBoxManage startvm "opensolaris" -type vrdp

2 - Disk management

To see what disk are registered type

VBoxManage list hdds

the output

UUID: c78d9cb1-e56b-49ef-8b85-709f66cae3e5
Storage type: Virtual Disk Image
Path: /media/sda2/vms/.VirtualBox/VDI/opensolaris.vdi
Accessible: yes
Usage: opensolaris (UUID: 392c279f-1a9a-4889-8569-1b3508198ebb)

If you want to add another disk:

VBoxManage createvdi -filename "opensolaris_raid_1.vdi" -size 1000 -register

This will create a disk of 1gb size

To add this disk to your vm type:

VBoxManage modifyvm "opensolaris" -hdb "opensolaris_raid_1.vdi"

If the vm runs out of space, this is the way you add more hardisk, and
then ZFSis your friend (just add the new hdd in your zfz pool, more
info on opensolaris wiki)

To delete a disk, you must unregister the vdi first

VBoxManage unregisterimage disk "opensolaris_raid_1.vdi"

VBoxManage modifyvm "opensolaris" -hdb none

3 - VM management(start stop), monitoring

To start the vms

VBoxHeadless -startvm "opensolaris" -vrdp=off &

How to stop a vms

To list running vms type

VBoxManage list runningvms
VirtualBox Command Line Management Interface Version 2.0.6
(C) 2005-2008 Sun Microsystems, Inc.
All rights reserved.

The output is the uuid of the vms

392c279f-1a9a-4889-8569-1b3508198ebb

To stop this vms type

VboxManage controlvm \a147opensolaris" poweroff

Anyway, the best way is to connect via ssh to the vms and poweroff from there

To delete the vm:

VBoxManage modifyvm "opensolaris" -dvd none

VBoxManage modifyvm "opensolaris" -hda none

VBoxManage unregistervm "opensolaris" -delete

Measuring the performance of the vm

To activate the monitoring tool:

VBoxManage metrics setup -period 10 -samples 5 "opensolaris"
CPU/Load/User, RAM/Usage/Used

To see the date collected :

VBoxManage metrics query \a147opensolaris" CPU/Load/User, RAM/Usage/Used

Object Metric Values
opensolaris CPU/Load/User 166.66%, 56.21%, 250.00%, 55.55%, 333.33%
opensolaris RAM/Usage/Used 569600 kB, 569600 kB, 569600 kB,
569600 kB, 569600 kB

4 - Snapshots

To take a snapshot of the opensolaris,

VBoxManage snapshot "opensolaris" take snap1-stable-system

If you fuck the running vms, you can revert to this "stable" snapshot.

To do this, first power off the VM with

VBoxManage controlvm "opensolaris" poweroff, then revert to last snapshot with
VBoxManage snapshot "opensolaris" discardcurrent -state

If you have multiple snapshots, you can revert to the last but one
snapshot with the -all switch instead of -state

5 – short_how_how

Short story

VBoxManage createvm -name "opensolaris" -register
BVBoxManage modifyvm "opensolaris" -memory "512MB" -acpi on -boot1 dvd
-nic1 hostif -hostifdev1 tap1
VBoxManage createvdi -filename "opensolaris .vdi" -size 10000 -register
VBoxManage modifyvm "opensolaris" -hda "opensolaris .vdi"
VBoxManage registerimage dvd os.iso
VBoxManage modifyvm "opensolaris" -dvd os.iso

You are good to go :)

How to enable ip forward in opensolaris

2008-12-09T13:07:00.004+02:00

Well, you think this task is simple, like in linux, where you type in
a console "echo "1" > /proc/sys/net/ipv4/ip_forward"

In opensolaris this task is more complicated.
Why?because, they can :)

root@opensolaris:/net# uname -a
SunOS opensolaris 5.11 snv_101b i86pc i386 i86pc Solaris

to check if the ip forward is enabled type:

root@opensolaris:/net# svcs -a | grep forward
disabled 10:24:40 svc:/network/ipv6-forwarding:default
disabled 12:46:49 svc:/network/ipv4-forwarding:default

in this case, it is disabled (by default)

To enable it, you can do:

- root@opensolaris:~# ifconfig pcn0 router

for ipv6:

root@opensolaris:~# ifconfig pcn0 inet6 router

- root@opensolaris:~# ndd -set /dev/ip ip_forwarding 1

for ipv6:

root@opensolaris:~# ndd -set /dev/ip ip6_forwarding 1
- In the previous Solaris releases

root@opensolaris:~# routeadm -e ipv4-forwarding

for ipv6:

root@opensolaris:~# routeadm -e ipv6-forwarding

To disable ip forward

root@opensolaris:~# ifconfig pcn0 -router
root@opensolaris:~# ifconfig pcn0 inet6 -router

root@opensolaris:~# ndd -set /dev/ip ip_forwarding 0
root@opensolaris:~# ndd -set /dev/ip ip6_forwarding 0

root@opensolaris:~# routeadm -d ipv4-forwarding
root@opensolaris:~# routeadm -d ipv6-forwarding

After this you must start the ip_forward service.To do this type:

root@opensolaris:~# svcadm enable network/ipv4-forwarding

To stop this service type root@opensolaris:~# svcadm disable
network/ipv4-forwarding

To test if the ip forward is enabled type:

root@opensolaris:~# svcs -a | grep forward
disabled 10:24:40 svc:/network/ipv6-forwarding:default
online 13:01:32 svc:/network/ipv4-forwarding:default

In my case only the ipv4 was enabled.

Also you cat check by running routeadm

root@opensolaris:~# routeadm
Configuration Current Current
Option Configuration System State
---------------------------------------------------------------
IPv4 routing disabled disabled
IPv6 routing disabled disabled
IPv4 forwarding enabled enabled
IPv6 forwarding disabled disabled

Routing services "route:default ripng:default"
[...]

That is all.Enjoy :)

Anyway, to have a working server, ipfilter/ipnat is your friend.
More to come about this issue later ;)

Update: more about NAT here

Autumn

2008-10-10T16:01:00.004+03:00

Hello :)

I've just discovered a new tool.Adobe Photoshop Lightroom.It's working like a charm in my virtual Xp machine, and the result is, well, take a look.

Enjoy.

Player

2008-10-04T22:32:00.005+03:00

Click for full view

bash script to check left space on device

2008-09-22T15:20:00.002+03:00

This is a very simple bash script intended to be used for checking the
space on every partition from your hardisk

#!/bin/bash

PROG_NAME="space_usage"
#Set usage
USED_SPACE="95"
#log file if you want to use log file
LOG_FILE="space.txt"
#email address
EMAIL="user@localhost"
SEND_EMAIL="N"

#crontab every night at 12
#0 0 * * * root space.sh

function log()
{
/usr/bin/logger -i -p kern.crit -t ${PROG_NAME} "UPSS: ${i[5]} has
used more than $USED_SPACE % space"
echo "UPSS: ${i[5]} has used more than $USED_SPACE % space" >> $LOG_FILE
#send email
if [ $SEND_EMAIL == 'Y' ]
then
mail -s "no more space on ${i[5]} " $EMAIL
fi
}

#grep mounted partitions
df -k -P --sync |grep -v "Mounted" | while read i; do i=( ${i} )
#echo mounted partitions
#echo ${i[5]}
USED=`df ${i[5]} | awk '{print $5}' |grep -v "Use%" | cut -f1 -d%`
#echo $USED
#IS GREATEAR OR EQUAL
if [ "$USED" -ge $USED_SPACE ]
then
#this is for debugging
echo "no more space on: " ${i[5]}
#log message in /var/log/messages
log ${i[5]}
#go to spaceless partition
cd ${i[5]}
#rm all log files
#rm -rf *.log
echo "removed all *.log files from partition(s)" ${i[5]}
else
echo "ok" ${i[5]}
fi

done

exit $?

BitDefender RescueCD

2008-09-17T11:43:00.001+03:00

The BitDefender Unices team is re-mastering a rescue cd based on
Knoppix Live CD. The re-mastered CD will be capable of scanning and
disinfecting all your existing hard drives (including NTFS partitions)
before your OS boots. To use this RescueCD, you need to be familiar
with a few basic notions, such as: what is a partition and what type
of internet connection you have. Another condition would be that you
should not be afraid to use the console to type commands and read the
manual.
The new CD will provide a few tools for data rescue, partition size
changes and basic forensic networking. Its main feature is that after
the boot, all detected and mounted partitions on your hard drive will
be automatically scanned by our antimalware scanner, bdgui. Bdgui is a
frontend for bdscan and it was designed to make the disinfection
procedure easier for the common user. Plus it looks cool :-).

More info here: http://unices.bitdefender.com/?p=12

If you want to download the iso go here :
http://download.bitdefender.com/rescue_cd/

if you have problems with this iso, you can write me an email at :
dbordeanu@bitdefender.com

Enjoy :)

How to disable Talk in Mediawiki

2008-09-11T16:43:00.003+03:00

MediaWiki is a free software wiki package originally written for Wikipedia.
I'm using mediawiki to document my projects.
Anyway, if you want to disable Talk in media wiki follow the next steps.

cd your_mediawiki_dir/include

cp SkinTemplate.php SkinTemplate.back (just in case)

mcedit/vi SkinTemplate.php

search for <strong>$content_actions['talk']</strong>

uncomment this line

/* $content_actions['talk'] = $this->tabAction(
$talkpage,
'talk',
$this->mTitle->isTalkPage() &&
!$prevent_active_tabs,
'',
true);
*/

The end :)

50mm

2008-08-28T21:49:00.008+03:00

Today was a god day for me.
Why?Because of my new toy.
My new toy is a Canon EF 50mm f/1.8 lens.
What can I say more about this lens
It's very cheap for a canon lens.This lens feels more like a toy than a piece of optics. It utilizes plastic contruction right down to the lens mount.
Autofocus is driven by a micro motor not USM:(
Focus speed is very slow and very loud(is one of Canon's louder lenses).
The Canon EF 50mm f/1.8 lens strongest quality is its sharpness.
Sharpness performance wide open (f/1.8) is decent, but the Canon 50 f/1.8 is very sharp at f/2.8 and beyond.
The Canon EF 50mm f/1.8 is a good low-light indoor photography lens.
It works very well in a bar for example. Aside from having mediocre bokeh, the 50 f/1.8 makes a good focal length for full-body portraits.

Check this photo here on full size.

Need to travel light? Mount the Canon EF 50mm f/1.8 Lens on a small DSLR and you have one of the smallest, lightest and least expensive low-light combinations available.

Bugs

2008-08-26T20:57:00.004+03:00

Take a look at my latest bug :)

See more bugs here

Enjoy :)

About Bucharest

2008-08-02T16:09:00.016+03:00

This morning I was out in the city, in the old part of the city.
Well, Bucharest is ugly :(
What can I say. UGLY
Bucharest's historic main street is a mess.
There should be streets for "promenade", nice caffee shops, it should be clean and nice.
Instead you can find, "graffiti", heavy construction sites, and my "favorite" a lot of gypsy people and dogs.
Take a look:

I don't remember to see this kind of stuff in Prague, for example.
But here in Bucharest, everithing is possible.
It's the city off all the possibilities.You can see beauty near uglyness.

No wonder why turists from Europe prefers Budapest or Prague instead of Bucharest.
Sometimes you can see turists, and i can't stop asking myself, "what the f*uck are they doing here??There is nothing the see".
Don't tell me that "Casa poporului" is nice building.It's ugly.
One century ago i'm sure that Bucharest was a nice city, "petit Paris des Balkans".But now....

If you want to make a trip to Romania please for god's sake, do not consider Bucharest a turistic city, try to go here

p.s

here more photos of bucharest

enjoy, NOT

bad blocks on my hard drive

2008-07-30T18:37:00.004+03:00

Not a good day for science.

One hard drive from my data server is not working right.Sometimes the system stops responding.

Well, to check for badblocks just use smartctl, ofcourse your hdd must know about smartctl.To check use hdparm

[...]

hdparm -I /dev/hda

[...]
Commands/features:
Enabled Supported:
* SMART feature set

[...]

To see if Checking blocks 0 to 78150744
Checking for bad blocks (read-only test): 23267840/ 78150744

23489984/ 78150744
done
Pass completed, 0 bad blocks foundthe hdd is ok run:

smartctl -t long /dev/hda

In order to check for badblocks run:

badblocks -sv /dev/hda

If you get something link this:

Checking blocks 0 to 78150744
Checking for bad blocks (read-only test): 23267840/ 78150744

23489984/ 78150744
done
Pass completed, 0 bad blocks found.

...you are lucky, if not, well...bad day for you :(

When your favorite wireless app is not working

2008-07-20T16:00:00.007+03:00

Nowdays, all laptops have wifi cards, and if you have an old laptop you can buy a pcmpcia card,or you can try a USB wifi card ( TL-WN321G)

In linux, you have a lot of wifi manager apps.You can read more about them here

But sometimes none of them are working and it's impossible to connect to a free public AP.So, back to the console :)

1- Free AP

- to scan for wireless AP

in my case, ath0 is the wifi card (i'm using a smc card with atheros chipset, Atheros Communications, Inc. AR5212 802.11abg NIC)

iwlist ath0 scanning

the result of wifi scanning myust be something like this :

ath0 Scan completed :
Cell 01 - Address: 00:00:00:00:00:00
ESSID:"free host spot"
Mode:Master
Frequency:2.437 GHz (Channel 6)
Quality=45/70 Signal level=-50 dBm Noise level=-95 dBm

to connect to this hot spot type : iwconfig ethX essid "free hot spot"

In order to check if you are connected to the "free hot spot" ap run: iwconfig ath0

The result must be like this:
ath0 IEEE 802.11g ESSID:"free hot spot" Nickname:""
Mode:Managed Frequency:2.437 GHz Access Point: 00:00:00:00:00:00
Bit Rate=54 Mb/s Tx-Power:11 dBm Sensitivity=1/1
Retry:off RTS thr:off Fragment thr:off

[...]

if the output is something like this, you are ok to go online.

To optain the ip, run: dhclient ath0

And that's all.

2- Encrypted AP.

iwlist ath0 scanning will output something like this:

ath0 Scan completed :
Cell 01 - Address: 00:00:00:00:00:00
ESSID:"free host spot"
Mode:Master
Frequency:2.437 GHz (Channel 6)
Quality=44/70 Signal level=-51 dBm Noise level=-95 dBm
Encryption key:on
Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s; 6 Mb/s
12 Mb/s; 24 Mb/s; 36 Mb/s; 9 Mb/s; 18 Mb/s
48 Mb/s; 54 Mb/s
Extra:bcn_int=100
IE: WPA Version 1
Group Cipher : TKIP
Pairwise Ciphers (1) : TKIP
Authentication Suites (1) : PSK
Extra:ath_ie=dd0900016f0201001dff7f

If the AP on wich you are connected is using WPA/PSK, then you must use wpa_supplicant

And If you have the key ;)

wpa_passphrase "free hot spot" password

this will output something like this:

network={
ssid="free hot spot"
#psk="password"
psk=ae818df577977c6fd073040812f949efe89919c52062fb18f6731227423d7bb0
}

After this create a file named, wpa_supplicant.conf

echo >> wpa_supplicant.conf

ctrl_interface=/var/run/wpa_supplicant # wpa_supplicant keep its
process ID number here
ctrl_interface_group=your_user_name
network={
ssid="free hot spot"
#psk="password"
key_mgmt=WPA-PSK
proto=WPA
psk=ae818df577977c6fd073040812f949efe89919c52062fb18f6731227423d7bb0
}

to connect to the AP, type from root account

wpa_supplicant -B w -D madwifi -i
ath0 -c wpa_supplicant.conf

Change the -D madwifi according to your wifi card driver.For more info read the man page of wpa_supplicant.

[...]

drivers:
hostap = Host AP driver (Intersil Prism2/2.5/3)
dscape = Devicescape driver
prism54 = Prism54.org driver (Intersil Prism GT/Duette/Indigo)
madwifi = MADWIFI 802.11 support (Atheros, etc.)
atmel = ATMEL AT76C5XXx (USB, PCMCIA)
wext = Linux wireless extensions (generic)
ndiswrapper = Linux ndiswrapper
wired = wpa_supplicant wired Ethernet driver

[...]

Ofcourse, dhclient ath0

Happy browsing :)

Bzzzz

2008-07-06T00:33:00.004+03:00

This is just for fun.
Here i'm testing a samsung nv7 digital photo camera

What i like at this camera:
- it is small
- very nice design
- very easy to set, the controls are great.
- you don't need to buy rechargeable batteryes because the camera allready have internel battery
- the lens system is ok for a compact camera.
- good zoom for a compact camera
- Image Stabilization

What i don't like at this camera:
- short battery live.
- sometimes a lot of noise on the pictures.
- when making a movie, and if you are using the zoom, the sound is not recorded
- you can't set the focus zone, no multiple focus points, but wait this is a compact camera :)
- The Image Stabilization system is not so smart and it is using a lot of power :(

What can i say, this is a nice camera, it is ok to use it, if you are not a professional photo shooter :)

Take a look at this macro photo

How to compile php5 with oracle instant client 11

2008-07-06T00:00:00.014+03:00

Well, this is very easy.

First you need to download apache web server ,the latest php 5.2.6 from www.php.net and the instantclient11 from oracle download (you need an accont for this one)

Unpack your apache archive in your work dir and then type

./configure --enable-so
--with-mpm=prefork --enable-ssl=static --with-ssl=/usr/include/openssl/

If all is ok, type make, and after this make install

This will install the http server in /usr/local/apache2 dir

If you want to have php with oracle instantclient11, unpack the php archive on your disk and type:

'./configure' '--with-apxs2=/usr/local/apache2/bin/apxs' '--with-pgsql' '--with-gd' '--with-zlib' '--with-oci8=instantclient,/opt/instantclient_11' '--enable-bcmath' '--with-sqlite' '--with-mysql' '--with-mysql-sock=/var/lib/mysql/mysql.sock' '--enable-mbstring' '--with-mcrypt'

Offcourse, you must unpack the oracle instantclient11 zip file in /opt/instantclient_11

This will give you, postgreSql support, mysql support, gd, zlib, mcrypt and offcourse instantclient11 for accesing your oracle server.

If everything is ok, and no error messages displayed, type make, and after this make install

This will make libphp5.2.6.so in /usr/local/apache2/modules dir.

Php scripts will add in your httpd.conf file this line LoadModule php5_module modules/libphp5.so
This will make apache load the php lib file at runtime, and it will execute php script file, but i'm sure that you allready know this issue :)

To test your php just make a simple php script like this.

$server="127.0.0.1";
$port=1521;
$SID="XE";
$user="oracle_user";
$password="oracle_password";
$db_connect =OCIlogon("$user", "$password", "//$server:$port/$SID");
if (!$db_connect)
{ echo "i made buba :";
echo $error = ocierror();

}

else {
echo "good to go";
}

?>

It is very simple to add more tests, like insert into a table, create a tabel, remove, etc.

Virtuoso

2008-07-05T23:44:00.004+03:00

This is a gipsy singer at a traditional wedding.I was very surprised of his virtuosity.
His virtuosity and involvement were thrilling:)

See the full image here

Why sometimes oracle 10g XE sucks big time

2008-06-25T16:34:00.003+03:00

A few days ago, one of my web application that use as backend oracle (i'm running oracle-xe-10.2.0.1-0.1) hangs and refuse to work.
I was very surprised of this, because i was more than sure that i did not made any modifications on my web server.
First thing i look into it was the apache web server.I try to restart the web server, check the php lib file to see if it is corrupted or missing, check the ORA_HOME enviroment, check it the DMZ server where the oracle 10XE is running respond to my pings and telnets in 1521.Every thing was working as espected, except my web application.I was very frustrated and disappointed.
After a while, it hit me, why not check the sqlplus client from ORA_HOME path.
Tannnnaaaa...this was the problem.The sqlclient refuse to work or connect to the oracle server.

This is the output of the strace that i did on sqlplus

\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 256) = 256
13100 lseek(6, 512, SEEK_SET) = 512
13100 read(6, "\337y
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 512) = 512
13100 lseek(6, 1024, SEEK_SET) = 1024
13100 read(6, "\25\7\'\0072\7>\7j\7\276\17$\'\6K5S\24TfT\307T(VsV
\222"..., 86) = 86
13100 brk(0x80af000) = 0x80af000
13100 times(NULL) = -2058704771
13100 times(NULL) = -2058704771
13100 times(NULL) = -2058704771
13100 times(NULL) = -2058704771
13100 times(NULL) = -2058704771
13100 times(NULL) = -2058704771

That is sqlplus process calls only "times" system call in a loop (in
fact, infinite loop)

After a little bit of google, i found where is the problem.

..in fact, after ~ 200 days uptime of your server. the oracle 10XE client sqlplus hangs in an infinite loop

This is oracle known bug 4612267

This is the most stupid bug i ever found in a commercial or non-commercial linux software.
Because ot this stupid bug(i am more than sure that is not so stupid, i will explain later) i have to rebuild my php5 lib file.

To fix this issue you have 3 sollutions

1- restart the web server, this is big NO NO NO
2- upgrade to oracle 11XE, this is another NO NO NO way, because 11G is not free.
3- use sqlplus from instantclient_11, rebuild the php lib to use the sqlplus form instantclient_11
4- applying the patch 4612267 to the oracle 10XE install.

First i tried sollutin number 4.For this i used the OPATCH software from oracle.I have not succeed to install this patch, because the patch was build for another oracle server version.This is very strange because on the oracle home page, from where i downloaded this patch, i've selected my oracle version.

Hehe, this is not a stupid bug ;)

The only sollution that worked for me was number 3.Downloaded instantclient11 from oracle download page (you need an account to perform this task) and recompile the php lib file

'./configure' '--with-apxs2=/usr/local/apache2/bin/apxs' '--with-pgsql' '--with-gd' '--with-zlib' '--with-oci8=instantclient,/opt/instantclient_11' '--enable-bcmath' '--with-sqlite' '--with-mysql' '--with-mysql-sock=/var/lib/mysql/mysql.sock' '--enable-mbstring' '--with-mcrypt'

--with-oci8=instantclient,/opt/instantclient_11, this is the sollution that worked for me.
Before this, i used to compile the php lib file, with the sqlplus from ORA_HOME (/usr/lib/oracle/xe/app/oracle/product/10.2.0/server)

Now, let me tell you why this bug is not so stupid ;)

The evil logic is, if you have server uptime more then 200 days, this is sure to be an production database server, not a home computer.So, the oracle developers(or project managers) decide to include this kinki not stupid bug, to force you to upgrade your oracle 10XE server, to buy a new version, to give them money :)Another thing, why thet patch refuse to work?It's make me wonder.

Until i reach "the" 4GB data limit of 10XE, i'll stick with it, for a while :)

postfix with bitdefender-scanner

2008-06-19T22:43:00.009+03:00

In this post i'll describe to you, how to scan emails using postfix and BitDefender-scanner.

This will help you scan and clean all incoming email traffic to your server for viruses.

Nevertheless, this sollution is not a fast one(and it will scan only the incoming mail), because for each and every mail, the procmail filter will send the eml to the bitdefender-scanner.

In order to increase speed, i recommand to use BitDefender for mail servers
, and integrate it with postfix or other favorite mta.

Bitdefender-scanner it is very easy to install.The package will cam as, rpm, deb and tar.
Just type in your console sh -x BitDefender-scanner.rpm/deb/tar.run and follow the install procedure.

After the install, I recommend to update your scanner.To do this, go to /opt/BitDefender-scanner/bin, and type ./bdscan --update

If you LDA in postfix is procmail, then you don't need to make any modifications to your main.cf file.If not just add this line in /etc/postfix/main.cf

mailbox_command = /usr/bin/procmail -a "$EXTENSION"

In order to delivery emails in ~/Maildir add this line in main.cf

home_mailbox = Maildir/

After this, restart postfix server.

In your home directory, edit .procmailrc file (if is not there, echo > .procmailrc).Offcourse you can enable procmailrc system wide (write this file in /etc)

Add the following lines in .procmailrc

$ cat .procmailrc
PATH=/usr/local/bin:/usr/bin:/bin
MAILDIR=$HOME/Maildir/
DEFAULT=$MAILDIR
LOGFILE=$MAILDIR/procmail.log
FILE=`mktemp`

:0 fw
|cat > $FILE; if bdscan $FILE &>/dev/null; then formail -a "X-BDScan:
clean" <$FILE; else formail -a "X-BDScan: infected" <$FILE; fi; rm -f $FILE

Offcourse, you must modify MAILDIR variable and bdscan must be in your path.

This will add in your email, a header that contain X-BDScan:infected/clean acording to the bdscan result.

If you want the infected mail to be deleted just add in .procmailrc the following line

:0
* ^X-BDScan: infected
/dev/null

Or else, if you want to move infected files to an local directory add in .procmailrc

:0
* ^X-BDScan: infected
Maildir/infected

If your postfix server is using another LDA, but it is using .forward files, a sollutins per user, not system wide is to add a .forward file in your home dir just like this

$ cat .forward
|/usr/bin/procmail

Well, this is it :)

Enjoy a free virus email.

Thanks to the BitDefender team for making this possible

O.M.D onlinemedical software database

2008-06-17T00:11:00.006+03:00

- OMD

What is OMD

"Online medical data base it is an online managemt tool for medical purposes..."

Click here for wiki page.

For a quick demo press here

Enjoy :)

Drug weblist

2008-06-17T00:00:00.011+03:00

This is related with OMD project.

This simple application contain the commercial drug list from romanian market.

It contain a search module that can perform search with a specified criteria(name, country etc).

Here it is

Photos

2008-06-16T23:58:00.003+03:00

Hello
Take a look at some of my pictures on DA

v.a.p.e.s

2007-09-29T16:44:00.000+03:00

I am proud to present to you, virtual admin interface for postfix mta server.

What is V.A.P.E.S ?

well...

Web interface for postfix administration.This interface is for configuring, administration of virtual domains in postfix with pgsql backend.It can configure domains(add,delete,modify), virtual emails(add,modify,delete) and email forwards(maps).

For more info click here

If you wanna take a tour click here

Enjoy you all sys admins :)