Bryan Payne's Blog

Using sudo with WinSCP

2020-03-19T11:03:00.000-07:00

This was specifically for HP-UX, so kornshell (KSH), but can be used for Linux with bash when you don't want users to login directly using a service account. You will also need to give sudo rights in the sudoers file like normal, but many people don't realize that you can use sudo with WinSCP as shown below.

I think you may also need to adjust an SSH setting related to requiring a TTY if it doesn't work for you.

It would need to be changed to

Defaults !requiretty

sudo notes:

dparker         ALL = (ALL)ALL, !SU
HELPDESK        ALL = ALL, !SU

The first ALL represents the users allowed to run the command (this can be an individual or group)
The second ALL represents the hosts
The third ALL is the target (who you are when running the command)
The last ALL is the group of commands allowed

RFC 2307 Unix to AD attributes Legend

2018-06-25T12:29:00.003-07:00

What Active Directory Attributes did the Unix Attribute tabs expose in the Active Directory Users and Computers MMC snap-in prior to Windows Server 2016?

The following Active Directory Attributes were configurable from the Unix Attributes tabs in Active Directory Users and Computers prior to Windows Server 2016. This table is provided as a reference and with Windows Server 2016 all of these attributes can be modified... see here for more details:
https://blogs.technet.microsoft.com/activedirectoryua/2016/02/09/identity-management-for-unix-idmu-is-deprecated-in-windows-server/

Dialog name	AD Attribute	RFC2307 attribute	Example	User object	Group object	Computer object
UID	uidNumber	X	1000	X
Login Shell	Loginshell	X	/bin/bash	X
Home Directory	unixHomeDirectory	X	/home/username	X
Primary Group name/GID	gidNumber	X	10002	X	X
Members	MemberUid	X	Administrator		X
iphostnumber	ipHostNumber	X	10.2.2.2			X
NIS Domain	maSFU30NisDomain		“example”	X	X	X
Members	msSFU30PosixMember		CN=Group,CN=Schema, CN=Configuration, DC=Woodgrove,DC=Local		X
Name	msSFU30Name		“Server123” or “Administrator” or “unix group”	X	X	X
Computer Aliases	msSFU30Aliases		Alias1; alias2			X

unetbootin with ubuntu 17.10

2018-02-21T21:31:00.004-08:00

Error message when trying to run unetbootin after install:
No protocol specified
unetbootin: cannot connect to X server :0

The following worked for me to resolve the issue:
xhost local:root
non-network local connections being added to access control list
sudo QT_X11_NO_MITSHM=1 /usr/bin/unetbootin

QuadStor VTL Setup Notes

2017-06-12T09:45:00.000-07:00

https://www.quadstor.com/vtl-extended-edition-downloads.html
https://www.quadstor.com/virtual-tape-library.html

The following are the minimum system requirements

Multicore/MultiCPU Intel/AMD Processor system
8 GB RAM. 64 GB or more recommended for data deduplication
RHEL/Centos 6.x/7.x, SLES 13 SP3 or Debian 7/8 for x86_64/AMD64 architecture
QLogic 4Gb/s or above HBA(s) for Fiber Channel connectivity
1/10 Gb Ethernet ports for iSCSI connectivity

ip addr add 192.168.1.75/24 dev enp0s3
ip route add default via 192.168.1.1 dev enp0s3
# yum update
# yum install dkms gcc make kernel-devel bzip2 binutils patch libgomp glibc-headers glibc-devel kernel-headers
# mkdir -p /media/cdrom
# mount /dev/cdrom /media/cdrom
# sh /media/cdrom/VBoxLinuxAdditions.run
rpm -q kernel
rpm -q kernel-devel
Make sure they are the same version. Remote to start using the newest version.
Confirm you are using newest version using uname -a.
Then rpm -e the old kernel version.
yum install httpd
yum install sg3_utils
yum install policycoreutils-python
gcc, perl kernel-devel were already installed.
/sbin/chkconfig --add httpd (RHEL/CentOS)
sudo systemctl enable httpd.service
sudo systemctl restart httpd.service

yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-common samba-common-tools krb5-workstation openldap-clients policycoreutils-python -y
/usr/sbin/setsebool -P httpd_enable_cgi 1
/usr/sbin/semanage permissive -a httpd_t
sudo firewall-cmd --add-service=http --permanent && sudo firewall-cmd --add-service=https --permanent
sudo systemctl restart firewalld
/etc/init.d/quadstorvtl start

Redhat 7 root password recovery

2017-05-26T15:24:00.002-07:00

This is really a note for myself... since it is so terse with no pictures, but may be helpful to someone else. At the boot menu press "e" to edit the boot option find the vmlinuz line and after the root= entry find the ro entry and prior to this enter rw init=sysroot/bin/sh Press Control X and after it boots in single user mode... type chroot /sysroot passwd root passwd mount -o remount / touch /.autorelabel

HPUX NTP setup

2017-03-22T11:56:00.001-07:00

/etc/hosts
192.168.1.4. ntp1
192.168.1.5 ntp2

/etc/ntp.conf
server 127.127.1.0 #Local clock
fudge 127.127.1.0 stratum 10

server ntp1 prefer
server ntp2

/etc/rc.config.d/netdaemons
export NTPDATE_SERVER=ntp1
export XNTPD=1
export XNTPD_ARGS="-l /var/adm/xntpd.log"

NTP Pool as alternate external NTP if ports are open: north-america.pool.ntp.org

My recommendation is for NTP entries to be in DNS as cname records and then just reference the cname records in your configuration files... so if you ever need to change the NTP server you do not have to edit hundreds of client NTP client files. Just update the DNS entries for NTP1 NTP2 etc.

The reason you update /etc/ntp.conf as well as ntpdate in the netdaemons file... is that ntpdate is intended for a single use on boot up... then from that point on... it gets updated from xntpd running from the /etc/ntp.conf configuration. The reason for this is that xntpd will refuse to start if the local clock is off by more than 1000 seconds off from the NTP server you wish you get time from and if this happens the xntpd won't start and time will be way off until someone notices... manually runs ntpdate and then starts xntpd again. Be careful not to cause your clock to go backwards or jump ahead after a database or application is running if it is sensitive to time. Be sure to read about setting the options to SLEW the clock if you have things like a database running when you need to affect a large time change.

Remove Nvidia Proprietary Driver to avoid crashing

2016-12-06T07:27:00.001-08:00

Ug... best not to purchase one of these in the first place. Buy a different card if you can. Nvidia is the worst.

Symptom: Running Ubuntu 16.04 and after loading the proprietary Nvidia driver and rebooting login would fail and loop back to the login screen again.

Removed using the following:

Ctrl+Alt+F1 so you can get to a tty prompt

sudo apt-get remove --purge nvidia*
sudo apt-get install ubuntu-desktop
sudo apt-get autoremove
sudo rm /etc/X11/xorg.conf
echo "nouveau" | sudo tee -a /etc/modules
sudo reboot

sudo add-apt-repository --remove ppa:graphics-drivers/ppa
sudo apt-get autoremove
sudo apt-get autoclean

Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan

+Bryan Payne add me on Google Plus

Mounting 64 GB SDCard on Linux

2016-05-19T15:56:00.001-07:00

64 gig cards are likely to use the exfat file system which is not natively supported on Linux.

UPDATED: Add the Universe repository and then run the following:
sudo apt-get install exfat-fuse exfat-utils

OLD Info:

I'm running Ubuntu so I ran the following:

sudo add-apt-repository ppa:relan/exfat
sudo apt-get update
sudo apt-get install fuse fuse-exfat exfat-utils

mkdir /media/sdcard

mount -t exfat -o uhelper=udisks2,nodev,nosuid,uid=1003,gid=1003,iocharset=utf8,namecase=0,errors=remount-ro,umask-0077 /dev/sde1 /media/sdcard

Initial Error Message:
Error mounting /dev/sde1 at /media/sdcard: Command-line `mount -t "exfat" -o "uhelper=udisks2,nodev,nosuid,uid=1003,gid=1003,iocharset=utf8,namecase=0,errors=remount-ro,umask=0077" "/dev/sde1" "/media/sdcard"' exited with non-zero exit status 32: mount: unknown filesystem type 'exfat'

Using Ekiga Softphone with Google Hangout on Linux or Windows

2015-07-01T23:51:00.003-07:00

In Ekiga... go to "Edit Accounts" or use Ctrl-E.
Then under "Accounts" in the pulldown menu... (There are no options to add an account in the popup window... you have to find them in the pulldown menu (Unity on Ubuntu). Some people even think you can't use Ekiga with non Ekiga SIP accounts since they can't get past this step and even rated it low based on this, but the software is good. I have not used their pay service yet, but since they are generous enough to offer free accounts, and free software it might be worth giving them a look and buying some VOIP minutes if you need to call landlines.

Name: Google Hangout (Whatever you want to call it)
User: <YourEmailAddress@gmail.com>
Server: talk.google.com
Port: 5222
Resource: Ekiga
Password: <YourPassword>

Once finished under the accounts tab you should see a status of "connected".

http://www.Ekiga.net

How to Determine if an HP-UX Account is Locked

2015-06-11T18:17:00.000-07:00

/usr/lbin/getprpw -l <account>
/usr/lbin/modprpw -k <account>

You need to know if accounts are locked
System may be a "trusted" system which means that it has higher security
enabled.
On a non-trusted system the /etc/passwd file will contain the information:
man passwd:
-s name Display some password attributes associated with the
specified name. Superuser privilege and non-trusted
mode is required if the files repository is specified.
The format of the display will be:
name status mm/dd/yy min max warn

or, if password aging information is not present
(#### e.g. that info is held in tcb directories ###)
name status
where status means: PS =passworded; LK =locked; and NP=no password.
passwd -s -a:
PS =passworded; LK =locked; and NP=no password
on a trusted system the /tcb directory structure holds the lock info;
man getprpw:
lockout returns the reason for a lockout in a "bit" valued string, where 0 = condition not present, 1 is present.

The position, left to right represents:

Google Voice and Video Chat Installer for Google Hangouts "The Installer encountered error 1625: This installation is forbidden by system policy. Contact your system administrator".

1 past password lifetime
2 past last login time (inactive account)
3 past absolute account lifetime
4 exceeded unsuccessful login attempts
5 password required and a null password
6 admin lock
7 password is a *
(If the user is NOT locked, all bits will be 0)

getprpw:
for USER in `awk -F: '{print $1}' /etc/passwd`
do
printf $USER
printf " "
/usr/lbin/getprpw -m lockout,alock $USER
done

Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan

+Bryan Payne add me on Google Plus

SOLVED: Kickstart (system-config-kickstart) - Could not read video driver database

2015-06-11T17:56:00.000-07:00

After I updated to Ubuntu 14.04 I tried to launch the Kickstart Configurator GUI and it wouldn't load.

Error Message: "Could not read video driver database"

# system-config-kickstart

(system-config-kickstart.py:18686): IBUS-WARNING **: The owner of /home/user/.config/ibus/bus is not root!
Traceback (most recent call last):
  File "/usr/share/system-config-kickstart/system-config-kickstart.py", line 92, in <module>
    kickstartGui.kickstartGui(file)
  File "/usr/share/system-config-kickstart/kickstartGui.py", line 131, in __init__
    self.X_class = xconfig.xconfig(xml, self.kickstartData)
  File "/usr/share/system-config-kickstart/xconfig.py", line 80, in __init__
    self.fill_driver_list()
  File "/usr/share/system-config-kickstart/xconfig.py", line 115, in fill_driver_list
    raise RuntimeError, (_("Could not read video driver database"))
RuntimeError: Could not read video driver database
#

This resolved my issue:

# apt-get remove hwdata
# wget ftp://mirror.ovh.net/mirrors/ftp.debian.org/debian/pool/main/h/hwdata/hwdata_0.234-1_all.deb
# dpkg -i hwdata_0.267-1_all.deb
# apt-get install system-config-kickstart

Hope this helps you.

Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan

+Bryan Payne add me on Google Plus

MSL6000 Service password

2015-04-20T18:38:00.001-07:00

The default service password is 5566.
Default Factory password is 56789.
If you have lost the level 1 or level 2 passwords the factory password can be used to reset them.

If the password is no longer set to the defaults... you can discover the current password by using the MSLUTIL.exe via a serial connection. There is no need to know the serial settings as the utility will autodiscover them. The current configuration does not have to be reset and the password will be displayed in plain text. You will need the correct serial cable.

More information can be obtained here:
http://h200003.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=es&cc=es&taskId=115&prodSeriesId=254838&prodTypeId=12169&objectID=c00023637

Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan

+Bryan Payne add me on Google Plus

After upgrade to Ubuntu 14.04 Totem unable to play flv files in firefox.

2014-12-14T00:12:00.002-08:00

To fix... ran:
sudo apt-get install gstreamer1.0-plugins-bad-videoparsers

Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan

+Bryan Payne add me on Google Plus

Office Communicator via Pidgin for Ubuntu 12.04 LTS

2014-02-17T15:04:00.002-08:00

Installed Pidgin from repository on Ubuntu 12.04...

Added SIPE plugin from here:
https://launchpad.net/ubuntu/quantal/amd64/pidgin-sipe/1.11.2-1ubuntu1

Project screen shots are here:
http://sipe.sourceforge.net/screens/

I was running a live DVD so even though newer versions were available it complicated the dependencies and I was in a hurry... so I loaded this version.

Under Basic Tab:
Listed SIP account as the username.
Login: Used my AD account and PW

Under Advanced I changed email address if different from login name to match my actual email address.

How to fix libnss3 error on Ubuntu 12.04

2014-02-17T12:53:00.003-08:00

google-chrome-stable_current_amd64.deb

Answer was to satisfy the dependencies by running:

sudo apt-get update
sudo apt-get install libgconf2-4 libnss3-1d libxss1

then:

download chrome for linux from here:

https://www.google.com/chrome?brand=CHMO#eula

then:

sudo dpkg -i google-chrome-stable_current_amd64.deb

HP-UX: HOW TO BOOT FROM TAPE EFI ITANIUM

2013-05-10T12:26:00.001-07:00

Keep in mind that some servers do not support booting from tape, or may require a firmware update to support booting from tape.

Exit from the boot menu to the EFI Shell

fs0:\> reconnect -r

Broadcom NetXtreme Gigabit Ethernet (BCM5704) is detected (PCI-X)
Broadcom NetXtreme Gigabit Ethernet (BCM5704) is detected (PCI-X)
HP 2Port 2Gb Fibre Channel Adapter (driver 1.42, firmware 3.03.150)
Broadcom NetXtreme Gigabit Ethernet (BCM5703) is detected (PCI-X)
HP 2Gb Fibre Channel Combo Adapter (driver 1.30, firmware 3.03.171)
Broadcom NetXtreme Gigabit Ethernet (BCM5703) is detected (PCI-X)
Scsi(Pun0,Lun0) HP MSL6000 Series 0520 ( 20 MBytes/sec)
Scsi(Pun1,Lun0) HP Ultrium 3-SCSI G63W (320 MBytes/sec)
ReconnectController(0,0,0) : Status = Success

From this we gather that the Ultrium 3 Tape Drive is Pun1, Lun0.

At this point exit from the shell... returning you to the boot menu. At this point enter the boot configuration menu and boot from a file if you want a one time boot and look for result of your reconnect -r output... in my case it was Pun1, Lun0.

Boot menu showed the device as follows:
Device Path Acpi(HWP0002,PNP0A03,700)/Pci(1|1)/Scsi(Pun1,Lun0)

Other helpful commands would be:
devtree, devices, map
Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan

+Bryan Payne add me on Google Plus

Updating PERL CPAN on HP-UX

2013-05-05T20:50:00.005-07:00

grep pass /etc/ossim/ossim_setup.conf | cut -f 2 -d "="
10.11.10.162
unconfigured

hpsrv-11.23 root sources/modules # cpan

cpan shell -- CPAN exploration and modules installation (v1.7601)
ReadLine support enabled

cpan> o conf
CPAN::Config options from /opt/perl_32/lib/5.8.3/CPAN/Config.pm:
    commit             Commit changes to disk
    defaults           Reload defaults from disk
    init               Interactive setting of all options

    build_cache        10
    build_dir          /root/.cpan/build
    cache_metadata     1
    cpan_home          /root/.cpan
    dontload_hash
    ftp                /usr/bin/ftp
    ftp_proxy
    getcwd             cwd
    gpg                /usr/bin/gpg
    gzip               /usr/contrib/bin/gzip
    histfile           /root/.cpan/histfile
    histsize           100
    http_proxy
    inactivity_timeout 0
    index_expire       1
    inhibit_startup_message 0
    keep_source_where /root/.cpan/sources
    lynx
    make               /usr/bin/make
    make_arg
    make_install_arg
    makepl_arg
    ncftp
    ncftpget
    no_proxy
    pager              /usr/bin/more
    prerequisites_policy ask
    scan_cache         atstart
    shell              /sbin/sh
    tar                /usr/bin/tar
    term_is_latin      1
    unzip              /usr/local/bin/unzip
    urllist
    wget

cpan> o conf init

/opt/perl_32/lib/5.8.3/CPAN/Config.pm initialized.

CPAN is the world-wide archive of perl resources. It consists of about
100 sites that all replicate the same contents all around the globe.
Many countries have at least one CPAN site already. The resources
found on CPAN are easily accessible with the CPAN.pm module. If you
want to use CPAN.pm, you have to configure it properly.

If you do not want to enter a dialog now, you can answer 'no' to this
question and I'll try to autoconfigure. (Note: you can revisit this
dialog anytime later by typing 'o conf init' at the cpan prompt.)

Are you ready for manual configuration? [yes] yes

The following questions are intended to help you with the
configuration. The CPAN module needs a directory of its own to cache
important index files and maybe keep a temporary mirror of CPAN files.
This may be a site-wide directory or a personal directory.

I see you already have a directory
    /root/.cpan
Shall we use it as the general CPAN build and cache directory?

CPAN build and cache directory? [/root/.cpan]

If you want, I can keep the source files after a build in the cpan
home directory. If you choose so then future builds will take the
files from there. If you don't want to keep them, answer 0 to the
next question.

How big should the disk cache be for keeping the build directories
with all the intermediate files?

Cache size for build directory (in MB)? [10] 100

By default, each time the CPAN module is started, cache scanning
is performed to keep the cache size in sync. To prevent from this,
disable the cache scanning with 'never'.

Perform cache scanning (atstart or never)? [atstart]

To considerably speed up the initial CPAN shell startup, it is
possible to use Storable to create a cache of metadata. If Storable
is not available, the normal index mechanism will be used.

Cache metadata (yes/no)? [yes]

The next option deals with the charset your terminal supports. In
general CPAN is English speaking territory, thus the charset does not
matter much, but some of the aliens out there who upload their
software to CPAN bear names that are outside the ASCII range. If your
terminal supports UTF-8, you say no to the next question, if it
supports ISO-8859-1 (also known as LATIN1) then you say yes, and if it
supports neither nor, your answer does not matter, you will not be
able to read the names of some authors anyway. If you answer no, names
will be output in UTF-8.

Your terminal expects ISO-8859-1 (yes/no)? [yes]

If you have one of the readline packages (Term::ReadLine::Perl,
Term::ReadLine::Gnu, possibly others) installed, the interactive CPAN
shell will have history support. The next two questions deal with the
filename of the history file and with its size. If you do not want to
set this variable, please hit SPACE RETURN to the following question.

File to save your history? [/root/.cpan/histfile]
Number of lines to save? [100]

The CPAN module can detect when a module that which you are trying to
build depends on prerequisites. If this happens, it can build the
prerequisites for you automatically ('follow'), ask you for
confirmation ('ask'), or just ignore them ('ignore'). Please set your
policy to one of the three values.

Policy on building prerequisites (follow, ask or ignore)? [ask]

The CPAN module will need a few external programs to work properly.
Please correct me, if I guess the wrong path for a program. Don't
panic if you do not have some of them, just press ENTER for those. To
disable the use of a download program, you can type a space followed
by ENTER.

Where is your gzip program? [/usr/contrib/bin/gzip]
Where is your tar program? [/usr/bin/tar]
Where is your unzip program? [/usr/local/bin/unzip]
Where is your make program? [/usr/bin/make]
Warning: lynx not found in PATH
Where is your lynx program? []
Warning: wget not found in PATH
Where is your wget program? []
Warning: ncftpget not found in PATH
Where is your ncftpget program? []
Warning: ncftp not found in PATH
Where is your ncftp program? []
Where is your ftp program? [/usr/bin/ftp]
Where is your gpg program? [/usr/bin/gpg]
What is your favorite pager program? [/usr/bin/more]
What is your favorite shell? [/sbin/sh]

Every Makefile.PL is run by perl in a separate process. Likewise we
run 'make' and 'make install' in processes. If you have any
parameters (e.g. PREFIX, LIB, UNINST or the like) you want to pass
to the calls, please specify them here.

If you don't understand this question, just press ENTER.

Parameters for the 'perl Makefile.PL' command?
Typical frequently used settings:

    PREFIX=~/perl       non-root users (please see manual for more hints)

Your choice: []
Parameters for the 'make' command?
Typical frequently used setting:

    -j3              dual processor system

Your choice: []
Parameters for the 'make install' command?
Typical frequently used setting:

    UNINST=1         to always uninstall potentially conflicting files

Your choice: []

Sometimes you may wish to leave the processes run by CPAN alone
without caring about them. As sometimes the Makefile.PL contains
question you're expected to answer, you can set a timer that will
kill a 'perl Makefile.PL' process after the specified time in seconds.

If you set this value to 0, these processes will wait forever. This is
the default and recommended setting.

Timeout for inactivity during Makefile.PL? [0]

If you're accessing the net via proxies, you can specify them in the
CPAN configuration or via environment variables. The variable in
the $CPAN::Config takes precedence.

Your ftp_proxy?
Your http_proxy?
Your no_proxy?
You have no /root/.cpan/sources/MIRRORED.BY
I'm trying to fetch one
CPAN: LWP::UserAgent loaded ok
Fetching with LWP:
ftp://ftp.perl.org/pub/CPAN/MIRRORED.BY
Fetching with LWP:
ftp://ftp.perl.org/pub/CPAN/MIRRORED.BY.gz
Fetching with Net::FTP:
ftp://ftp.perl.org/pub/CPAN/MIRRORED.BY
Couldn't fetch MIRRORED.BY from ftp.perl.org
Fetching with Net::FTP
ftp://ftp.perl.org/pub/CPAN/MIRRORED.BY.gz
Couldn't fetch MIRRORED.BY.gz from ftp.perl.org
Your ~/.netrc neither contains ftp.perl.org
nor does it have a default entry
Issuing "/usr/bin/ftp -n"
Local directory now /root/.cpan/sources
Timeout (900 seconds): closing control connection.
Bad luck... Still failed!
Can't access URL ftp://ftp.perl.org/pub/CPAN/MIRRORED.BY.

Please check, if the URLs I found in your configuration file () are valid.
The urllist can be edited. E.g. with 'o conf urllist push ftp://myurl/'

Could not fetch MIRRORED.BY
CPAN.pm needs at least one URL where it can fetch CPAN files from.

Please enter your CPAN site: [] ftp://mirror.cc.columbia.edu/pub/software/cpan/
Enter another URL or RETURN to quit: []
New set of picks:
ftp://mirror.cc.columbia.edu/pub/software/cpan/
http://cpan.mirror.clemson.edu/

commit: wrote /opt/perl_32/lib/5.8.3/CPAN/Config.pm

cpan> reload index

cpan> install Bundle::CPAN
cpan> reload cpan

Changed perms on Cwd.sl to include execute
hpsrv-11.23 root /root # cd /opt/perl_32/lib/5.8.3/PA->
hpsrv-11.23 root auto/Cwd # ls -l
total 48
dr-xr-xr-x   2 bin        bin             96 Oct 29 2009 .
dr-xr-xr-x 39 bin        bin           8192 Nov 1 16:17 ..
-r--r--r--   1 bin        bin              0 Jan 19 2006 Cwd.bs
-rw-rw-rw-   1 bin        bin          16384 Jan 19 2006 Cwd.sl
hpsrv-11.23 root auto/Cwd # chmod +x Cwd.sl
hpsrv-11.23 root auto/Cwd # pwd
/opt/perl_32/lib/5.8.3/PA-RISC1.1-thread-multi/auto/Cwd
hpsrv-11.23 root auto/Cwd # ls -l Cwd.sl
-rwxrwxrwx   1 bin        bin          16384 Jan 19 2006 Cwd.sl

    * Crypt::DES is not installed
    * Crypt::Rijndael is not installed
    * Socket6 is not installed

Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan

+Bryan Payne add me on Google Plus

BEST HEADSET FOR ALTIGEN IP710 PHONE

2013-04-12T09:40:00.000-07:00

Altigen IP710 Phone Manual is here:
http://www.altigen.com/system_manuals/50a/ip710_admin.pdf

This phone supports both RJ9 and 2.5mm headsets. Below you see the RJ9 option.

HW261N


	26716-01 Quick Connect Cable

HOW TO ADD STREAMING MUSIC TO CARS WITHOUT AN AUX JACK

2013-04-10T14:32:00.002-07:00

If you need Bluetooth Phone and Streaming Music/Audio (A2DP), and a solution that works even if you do not have an auxiliary input jack, you can purchase a nice Belkin device that streams both via your car radio's FM band. You simply tune your radio to the same frequency as your Belkin is transmitting on. This Belkin device is nice because it gives you the charger with a USB connector slot so you can use this to power two devices from the same cigarette lighter power receptacle rather than only powering the Belkin device.

This Jabra device is a pricier option, but adds some additional features and Jabra is widely known for their phone accessories.

Please feel free to comment if you have any feedback or questions about this article.

HOW TO ADD STREAMING MUSIC TO YOUR CAR

2013-04-10T14:23:00.001-07:00

If your car is equipped with an Auxiliary audio input jack this solution will work for you. My car actually supports Bluetooth phone use, but did not support the A2DP Bluetooth Profile required to stream Audio. All that is required is that you have an aux input jack. You then change your car radio's input source to the aux jack, power up the Aluratek AIS01F, use your phones Bluetooth menu to connect to the Aluratek device, and then start enjoying your streaming audio or music from your cell phone. You could use it to stream any application accessible on your cell phone... like Pandora, YouTube, Navigation directions from Google Maps, or Mapquest, or just enjoy your MP3 collection on your phone via your car speakers. I use this in my Buick Regal to stream music and android trapster or google navigation information. It works great!

This unit includes a rechargeable battery so you can use it for portable applications... you can essentially plug this device into any speaker that has an input jack and make any speaker Bluetooth accessible. Personally I combined this unit with a USB car charger like the Energizer car charger you see above. Alternatively you could purchase or utilize a USB wall charger for your house, and use the built in rechargeable battery to supply your power when using it in your car.

NOTE: If you need Bluetooth Phone and Streaming Music/Audio (A2DP), and a solution that works even if you do not have an auxiliary input jack... click here.

Please leave me feedback if you have any questions or comments about this article.

SOLVED: Samsung Kies not connecting

2013-04-09T10:50:00.001-07:00

If you receive the message "Please connect a device."... while trying to use Samsung Kies from your PC, then this may help you solve your connection problem.

First you need to know that their are two types of USB cables, and interfaces... some support both sync and charging and some just support charging. To connect to Kies you need to ensure you are using a sync cable. If you are certain you are using a sync cable... then make sure you are not using something like a battery case that only supports charging. I have a Samsung Galaxy S® II Skyrocket™ (Black) and was using the PowerSkin battery case and wasn't able to connect until I removed the PowerSkin Battery case.

Another issue that may give you a connection problem is that there are different generations of Kies versions, and some phones are only supported on older versions of Kies.

To download the latest version of Kies for your PC go here:
http://www.samsung.com/kies

An alternative would be to use Kies on your phone to transfer files over wifi.
To update the version of Kies on your android phone go to the Google Play Store:
https://play.google.com/store/apps/details?id=com.samsung.swift.app.kiesair&hl=en

Privacy note:
Please keep in mind that when connecting from your PC to the android version of Kies... it will do so via a secure browser window, but it will display the contents of your phone on the screen including photos, media, and other personal information that you may not want to expose to just anyone who can view your screen.

If you need to check for firmware updates, or install firmware updates... you will need to use Samsung Kies for your PC.

Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan

+Bryan Payne add me on Google Plus

Manually Configuring a Lan interface using ifconfig under HP-UX

2013-04-04T16:02:00.000-07:00

You would like to add an ephemeral or temporary IP perhaps to troubleshoot a problem involving a Network Interface Card.

NOTE: Keep in mind you may lose network connectivity... be sure to be connected to the network console or MP (management port), or via another network card on the system other than the one you are configuring. Be sure to check if you are using NFS shares or other things that rely on network connectivity before making changes that may impact it's availability.

For temporary changes which will persist until changed again, or a reboot
occurs:
ifconfig lan0 down
ifconfig lan0 unplumb
ifconfig lan0 plumb
ifconfig lan0 172.16.0.121 up netmask 255.255.255.0
you can confirm by using:
netstat -in
If you need to configure a default route you can use the following:
1) View the current routes by using netstat -nr
You may have to remove the default route and the syntax would be:
route delete default 172.16.0.1
2) add the route as follows:
Note: "default route" route add default netmask 255.255.255.0 172.16.0.1 1
Note: "host route" route add host 136.128.103.16 10.12.3.102 1
Note: "net route" route add net 172.16.0.0 netmask 255.255.0.0
192.168.70.11 1
Keep in mind the changes are temporary and are not persistent across a reboot. At boot time the /etc/rc.config.d/netconf file is used as well as other configuration files that vary depending on the NIC and it's associated driver.

Example Routes in /etc/rc.config.d/netconf file (Take effect on reboot or "/sbin/init.d/net stop" "/sbin/init.d/net start" see note on connectivity below:

ROUTE_DESTINATION[2]="host 136.128.103.16"
ROUTE_GATEWAY[2]="10.2.15.35"
ROUTE_COUNT[2]="1"

ROUTE_DESTINATION[1]="net 172.16.0.0"
SUBNET_MASK[1]="255.255.0.0"
ROUTE_GATEWAY[1]="192.168.70.11"
ROUTE_COUNT[1]="1"

Default route in /etc/rc.config.d/netconf:
ROUTE_DESTINATION[0]=default
ROUTE_MASK[0]=255.255.255.0
ROUTE_GATEWAY[0]=172.16.0.1
ROUTE_COUNT[0]="1"
ROUTE_ARGS[0]=""
ROUTE_SOURCE[0]=""

Sample Interface entry in /etc/rc.config.d/netconf for lan0:
INTERFACE_NAME[1]="lan0"
IP_ADDRESS[1]="172.16.0.121"
SUBNET_MASK[1]="255.255.255.0"
BROADCAST_ADDRESS[1]="172.16.0.255"
INTERFACE_STATE[1]="up"
DHCP_ENABLE[1]="0"
INTERFACE_MODULES[1]=""

If you see an entry like lan900 and above... that pertains to Auto Port Aggregation (APA), which on other platforms is sometimes referred to NIC teaming or bonding.
You can actually add an alias IP or stack IP's on the same interface by using the following syntax. For example lan0 is actually lan0:0 so an additional IP could be added to lan0:1... lan0:2 etc. This is actually how service guard works... it takes advantage of these alias IP address and they are assigned to an application and then move between nodes in the serviceguard cluster.

Additional Commands
To try to determine which lan card is in which physical slot/location... use
ioscan -funC lan
then look at slot information with "olrad -q", or "rad -q" depending on your HP-UX OS version.

KEEP IN MIND IFCONFIG IS TEMPORARY. IF YOU NEED TO CHANGE THE IP ADDRESS PERMANANTLY IT WILL NEED TO BE DONE IN THE /etc/rc.config.d/netconf FILE. If you are an advanced user you can edit this file directly and then re-run the /sbin/init.d/net stop and /sbin/init.d/net start or altertively reboot your server. If you do not plan to reboot you should be connected to the console either via a webconsole... actual console, or an ILO connection.

NOTE ON CONNECTIVITY:
(YOU MAY LOSE NETWORK CONNECTIVITY AND MAY EVEN HANG YOUR SYSTEM) Remember to keep in mind other services that rely on network services like NFS that may even affect another server. The safest thing is to edit the netconf file and then reboot during a maintenance window. You can also use the set_parms command to change the IP address if you dont want to edit the files manually or use "sam", or "smh" on newer systems.
Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan

+Bryan Payne

If you found this information helpful... and you see an advertisement for which you have legitimate interest... every click helps. Thanks!

Creating a Depot file from a Depot Directory

2013-04-04T15:57:00.000-07:00

There are two types of depot's... either a depot directory or a depot file (also called a tape depot).
apa_J4240AA_11.11.depot is a depot file, which is essentially a glorified tar file. A depot directory is a directory that can contain products, bundles or patches and resides in a directory that has been "registered" and is known to HP-UX's Software Distributor for Unix (SD-UX).

A depot directory is created or has additional items added to it via the swcopy command. The benefit of a depot directory is that SD-UX allows for only one source "depot" to be specified... so if you want to install multiple kernel patches (that require reboots)... multiple reboots would be required if all you had were individual depot files (one for each patch). This is where a depot directory is essential. Another advantage is that if you have registered a depot it is accessible not only locally, but also over the network to be used as a source depot for other servers. To see what depot directories you have...

swlist -l depot (Assumes local system)
or
swlist -l depot @ <hostname> (remote system referenced by hostname).

Once you have created a depot directory... you can use this to create a depot file. To create a depot file from a directory style depot:

For our example lets say you have a directory depot /var/spool/sw where there is a product called
J4240AA (Auto Port Aggregation) and you want to create a single file depot (also known as a Tape depot).
swpackage -x media_type=tape -s /var/spool/sw J4240AA @
/tmp/apa_J4240AA_11.11.depot

You will find the depot file in /tmp called apa_J4240AA_11.11.depot.

Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan

+Bryan Payne

If you found this information helpful... and you see an advertisement for which you have legitimate interest... every click helps. Thanks!

BEST HEADSET FOR CISCO IP PHONE (7941/7942) or CISCO UNIFIED PRESENSE CLIENT

2013-04-03T14:36:00.000-07:00

PHONE TUTORIAL:

Flash Based Tutorial for the 7941/7942/7945

http://www.cisco.com/comm/applications/CCNP/qlm/7941/index.htm

MANUALS:
Quick Reference Guide: http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7962g_7961g_7961g-ge_7942g_7941g_7941g-ge/8_5/english/quick_reference/7962qrcrd85.pdf

User Guide: http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7962g_7961g_7961g-ge_7942g_7941g_7941g-ge/8_5/english/user_guide/7962enu85.pdf

HEADSET OPTIONS:

In an effort to keep costs low and to avoid wasting money on headsets that perform poorly I have put together a guide to help you choose headsets that will work with the Cisco 7941, or Cisco 7942 phones. If you have a legacy headset with an amplifier... the amplifier is not necessary for this phone.

The costs should be very similar to what I have outlined below… or you are over paying for your solution.

1) CISCO IP PHONE OPTIONS) If you need a headset for your standard desk phone (Cisco 7941/7942 or similar):

Plantronics HW251N SupraPlus NC Headset or Plantronics HW261N (HW261N is the binaural version) Approximately $60-$100

NOTE: You do not need an external amplifier with this setup, but you will need a quick disconnect cable so you can plug it into the headset jack on the back of your phone. If you already have a quick disconnect cable then there is no need to purchase another one.

Cost Guideline… the cable should be less than $30, and you may already have one that you can use (see the photo below left).

So Quick Disconnect + Plantronics HW251N (Monaural) Noise Cancelling Headset OR Plantronics HW261N (Binaural)

+OR

Several people report that this works great for their Desk Phone (Cisco 7942) with this Headset combination. Here is the part number for the quick disconnect cable:

26716-01 M12 Amplifier Cable / Cisco IP Phone Cable

2) SOFTPHONE/COMPUTER USB OPTIONS) If you need a headset for your Cisco Unified Presence or IP Communicator (Softphone) on your PC:
NOTE: If you have an older PC or very low bandwidth connection, or typically run lots of intensive applications (virus scanning, Hard disk defrags, Solitaire <ha ha>)… then a softphone may not work well for you and you should instead consider a headset for your standard phone. If you feel OK to proceed please consider the models listed below. The Plantronics models that say DSP are preferred as these provide Digital Signal Processing with active electronics to block noise and echo. They also provide audio in the WideBand spectrum so it is better than standard telephone quality and more like having and in person converstaion.

2-1)Plantronics Audio 646 DSP It has noise cancellation, Echo Cancellation, Super WideBand Audio and inline mute and volume controls and is extremely economical. The Plantronics Audio 626 DSP is a very similar headset with the same features. The 646 is a behind the head type headset you see pictured below on the left and the 626 is more the traditional headset you see pictured below right. Both have USB connections and are plug and play (no software to install). The driver loads automatically when you connect the headset for the first time. Pros: When you push the mute button you have a visual red indicator to confirm that it is muted and the softphone also reflects the mute status on the display.

Cost Guideline… these can be purchased for around $29 - $39 from places like Amazon, Fry’s or Bestbuy (Price Match to fry’s if a best buy is closer to you to get the lower price, or just order on line).

2-2)Plantronics Audio 655 DSP (Make sure it says DSP).
This headset has all the features of the other DSP headsets minus the inline controller. The mute is integrated into the boom mic (You simply retract it back to the headset to engage the mute. However, It does not have a visual indication that it is muted and it does not illuminate the mute button on the softphone). The volume control is on the left headset. The plus for this headset is in the cushioned earpads. This provides not only comfort, but also isolation if you are working in a noisy office environment.

/var File System is Full

2013-03-05T10:07:00.001-08:00

Do the following:

1) Check for large files over 5 meg in the file system in our case (var):
find /var -type f -xdev -size +5000000c -exec ls -ld {} \;|sort -k 5n

The xdev option tells it not to cross mount points. Since var is the affected file system you wouldn't want to know about large files that may be in /var/spool/sw if you had created a /var/spool/sw file system since it wouldn't be relevant to filling up /var. This is necessary when looking at any file system, like a root file system that is full for the same reason... a large file in var in this case wouldn't be relevant.

The exec option instructs the find command to issue an ls -ld against any file that meets our criteria. The resulting matches are substituted inside the {}, and then executed.

Then the results of the ls -ld output is sent to the sort and sorted based on the 5th column which is the size column. The result is that the larger files are listed at the end.

2) Look at the output and decide if any of the resulting files can be safely removed.

Core Files: Core files result when applications terminate unexpectedly. They create a core file so that a programmer can analyze them to determine the cause of the abrupt or unexpected termination. These files can be safely removed once verified that they are indeed core files of this nature. They can be quite large in size. Use the unix "file" command to determine if the file is a "valid" core. Example:

file /var/core
/var/core: core file from 'swinstall' - received SIGSEGV

Note: Keep in mind that not all valid core files will generate the above output, but if you see this type of output you can be sure it is a core file that can safely be removed. Users and programmers should not create files or directories named core, but both sometimes incorrectly will do
just this. I mention this so you do not accidentally remove a valid user or program file. Core files can be controlled with the ulimit command. Do a man on ksh and search with /ulimit to jump to the ulimit section.

This is an example of a valid core file which can be removed. You can see that the core file resulted from the swinstall command having received a kill signal of SIGSEGV. Additional information can be obtained from running the what command against the core file:

what /var/core

I will not go into the analysis of the output here because it is a separate topic, but mention it in case you were not aware of this.

Logfiles... see item 3

Patches
If patches seem to be consuming a large amount of space in /var then consider running the cleanup command. I would first install any SD-UX (Software Distributor for Unix) cumulative patches or SD tools patches.
cleanup -c 2

Note: Keep in mind that once the cleanup command has ran removing the patch uninstall information you can not remove the patch. However, it is typically safe to remove a patch that has been superseded twice.

3) Next check for a large number of smaller files that may have passed under the radar of our find command.

Typical reasons for /var to fill up would be:
Print jobs:
lpstat -t
Solution: cancel

syslog.log large (please read the note below before running):
cd /var/adm/syslog ; ls -ld *
> syslog.log

Note: This will remove syslog and mail log info. It may be advised to copy this elsewhere in case you are having another problem. For example the syslog filling up may be due to a hardware problem, or a correctable software configuration issue. cat the file rather than using vi as this will attempt to open it in /var (which in our case is already full)

mail.log large (please read the note below before running):
cd /var/adm/syslog; ls -ld *
> mail.log

If mailq reports numerous mail files, then check the mail log with the mtail command. The mailq is located in /var/spool/mqueue. Correct any issue with mail delivery.

Note: Please read the mail.log prior to removing it. It may indicate a problem that needs to be corrected first. You can use the mtail command to view it, and mailq to see what is queued. cat the file rather than using vi as this will attempt to open it in /var (which in our case is already full)

3) The file may have been removed while a process had the file open. This would remove the file, but not release the space. In this case I would recommend downloading the lsof (LiSt of Open Files) command. It is not installed by default, but can be obtained from the purdue site.

ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/binaries/hpux

I recommend placing this in the /usr/contrib/bin/ directory. Be sure to select the one for your OS, and kernel width. getconf KERNEL_BITS will tell you your OS Kernel width.

The man page will be lsof.8 Place this file in /usr/contrib/man/man8
The man8 directory will need to be created.

lsof /var |sort -k 7n

The second column will give the PID. For example if you see a /dev/vg00/lvol8 listed in the last column and PID reflects that it is
syslogd, then someone tried to do an rm against the syslog.log file while the syslogd daemon still had the file open. To release the space they should have ran:

cat /dev/null > /var/adm/syslog/syslog.log
Or
> /var/adm/syslog/syslog.log

You could use rm, but only if you stopped the syslogd daemon first.

To recover the space... run /sbin/init.d/syslogd stop

If the process is an oracle log file, and someone removed it while it was open, then you would have to stop/start the oracle process to release the desired space. If the process is an essential process you may not want to stop/start it. In this case focus on other means... like removing large syslog, and mail.log or running the cleanup until which time the critical process can be restarted.