hyder no blog

[ubuntu] Edit fstab in recovery root-shell

2012-04-02T01:13:00.000-07:00

在 Ubuntu 11.04 遇到了 fstab 設定錯誤以致於無法 mount 磁碟機，
可在開機選單選擇 Recovery Mode 進入修復模式，
在修復模式選單中可選擇使用 Root Shell 進入系統。

但此時系統為唯讀狀態，
無法修改任何 /etc/ 底下的設定檔，
紛紛會吐給你 Read-Only System 的訊息。
此時輸入：
# mount -o remount,rw /dev/sda1 / 即可重新 remount 磁碟機，並允許修改檔案。

Removing the 'Invalid Credentials... ' message from Bing Maps on WP7

2012-03-15T19:51:00.000-07:00

How to remove the overlay message you can get when using the Bing Maps control on WP7. Now I've only ever seen this appear for two scenarios - invalid credentials or when in flight mode. It just so happens the control uses the same set of controls to display these messages, example shown below:

Now obviously they don't want you to hide\remove this message :)

The obvious way to remove the 'Invalid credentials...' message is to actual supply valid credentials, but what about if you want to remove the 'Unable to contact server.Please try again' when using the map control in flight mode.

Matt found a previous post that had done this, not sure how this guy was achieving this as the current build for the map control is sealed and access to the RootLayer property is not allowed...

This didn't stop me :)

So XAML is all about composition - everything is built as layers of UI controls, known as the 'visual tree'. This means you can use extension methods to re-curse the visual tree. I used Colin Eberhardt's linq-to-visual-tree extension methods, available here (LinqToVisualTree.cs).

Here you go...

public partial class MainPage : PhoneApplicationPage
{
    bool removed;
        
    public MainPage()
    {
        InitializeComponent();

        map.ZoomLevel = 8;
        map.Center = new GeoCoordinate(49.109838, -5.976562);
        map.LayoutUpdated += (sender, args) =>
        {
            if (!removed)
            {
                RemoveOverlayTextBlock();
            }
        };
    }

    private void RemoveOverlayTextBlock()
    {
        var textBlock = map.DescendantsAndSelf()
                           .OfType<TextBlock>()
                           .SingleOrDefault(d => d.Text.Contains("Invalid Credentials") ||
                                                 d.Text.Contains("Unable to contact Server"));

        if (textBlock != null)
        {
            var parentBorder = textBlock.Parent as Border;
            if (parentBorder != null)
            {
                parentBorder.Visibility = Visibility.Collapsed;
            }

            removed = true;
        }
    }
}

And you get the following:

Making WPConnect Easier to Use

2012-03-08T00:11:00.000-08:00

If you are building a Windows Phone application and you are using your phone to debug AND you are using the Photo Chooser or or the Camera Launcher task you may have found out that it will not let you access the camera or pictures while you are connected to Zune.

But, you have to be connected to Zune to debug on the phone. Well, kind of. The Windows Phone Team put out a tool called WPConnect.exe that allows you to dubug on the phone without having Zune open.

Here are the steps.

Connect your phone
Make sure Zune launches and connects to your phone.
Shut down Zune
Using a Dos Prompt, Navigate to
1. (for 64 bit machines) C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v7.1\Tools\WPConnect\x64
2. (for 32 Bit machines) C:\Program Files\Microsoft SDKs\Windows Phone\v7.1\Tools\WPConnect\x86
Type WPConnect.exe

It will then tell you that you are good to go.

NOW FOR THE EASY WAY

I got tired of having to navigate using a command prompt (Too may keystrokes) and I use this often enough to matter, so I created a shortcut for the Dos Prompt that takes me right to my designated spot in one click. Here is how you do it.

1. Right-click in the open space of your desktop and click New > Shortcut.

2. For the location, type or copy and paste the following:

%windir%\system32\cmd.exe /k

3. Click Next.

4. For the name, type something descriptive, like “Command Prompt for WPConnect” then click Finish.

5. Right-click on the new shortcut and choose Properties.

6. Change the “Start In” field to whatever directory you want the command prompt to start in.In my case, I want it to start in the 64 bit folder we talked about above:

"C:\Program Files (x86)\Microsoft SDKs\Windows Phone\v7.1\Tools\WPConnect\x64"

Be sure to include the quotation marks, and of course you would need to customize this file path to your own system (32 or 64).

Now when I want to use WPConnect. I just use the pined shortcut

and Type WPConnect.exe

How to use Google Static Maps data in mobile applications

2012-01-30T02:00:00.000-08:00

This article explains how to use Google Maps data in a mobile application.
Google Maps offers REST services that allow accessing its data with simple HTTP requests, so they can be easily integrated into mobile applications.

Sign up for a Google Maps API key

NOTE: Usage of this code with the free Google Maps API Key breaks Google's Terms and Conditions (section 10.8). You should purchase an Enterprise License if you wish to use the Google Maps API as shown in this example.

First you need to sign up on this page:
http://code.google.com/apis/maps/signup.html
Once you have signed up, you get a key (a simple string) that you can use for all your queries to Google Maps services.

Google Static Maps API no longer requires a Maps API key

For updated information on Google Static Maps API, please visit http://code.google.com/apis/maps/documentation/staticmaps/

Static maps

Standard Google Maps code is suitable for Web applications. However, it includes a lot of Ajax functionalities that are not really useful if you are building a mobile application. The solution is to use the static maps service that allows retrieving single images that can easily be used in mobile applications.

The static maps service supports different image formats (png32, GIF, JPG) and customizable image size, so you can get perfect images for all purposes. For example, if you want to retrieve the location at:

latitude: 41.867878
longitude: 12.471516

You can simply retrieve this URL with an HTTP GET request:

http://maps.google.com/staticmap?center=41.867878,12.471516&format=png32&zoom=8&size=240x320&key=<API_KEY>

This way you will get a PNG32 image with a width of 240 pixels and a height of 320 pixels, centered at point (41.867878,12.471516), and with a zoom level of 8 (the zoom range is from 0 to a maximum level of 19)

Geocode an address

From Google Maps docs:
Geocoding is the process of converting addresses (such as "1600 Amphitheatre Parkway, Mountain View, CA") into geographic coordinates (like latitude 37.423021 and longitude -122.083739)

The following example describes building an application that displays the address typed by the end user. First you need to geocode its address into geographic coordinates.
To do this, Google Maps offers another REST service that can easily be accessed with simple HTTP requests.

If you want to geocode this address
Leicester Square, London
Request this URL from your code

http://maps.google.com/maps/geo?q=Leicester%20Square,%20London&output=csv&key=<API_KEY>

and you will get this output:

200,6,51.510605,-0.130728

Where:

The first number is a code, which in this case (200) means that geocoding has been successfull (for a full list of status codes see: [1])
The second number gives a measure of the geocoding accuracy (from 0 to 9 - maximum accuracy)
The 3rd and 4th numbers represent latitude and longitude of the geocoded address, so these are the coordinates used to retrieve the map through the static map service.

As you can see, there is an 'output' parameter in the geocode request. This means that you can choose the output format you prefer. The supported formats are:

xml
kml (same as xml, but with different Content-Type)
json (not really useful for mobile apps)
csv (comma-separated values)

Proxy server, usage limits

Since your Google Maps API key is bound to a specific URL, in order to access map services you need to setup a proxy server that will receive HTTP requests from the mobile application and forward them to Google Maps REST URLs, returning Google responses to mobile clients. (as pointed out in the Comment page, this is not a fully clear point yet)

Also, be aware that there is a limit to the number of requests, both for static maps and geocode service, you can do each day. For personal uses they are more than enough, but you need to keep this issue in mind if you plan to develop commercial services.

Sample application

A sample J2ME application, using the approach described here, is available on this page: Google Maps J2ME Test
Google Maps J2ME API source code used in this example is also available here: J2ME Google Maps API

Reference To: http://www.developer.nokia.com/Community/Wiki/How_to_use_Google_Maps_data_in_mobile_applications

SETTING VISIBILITY BASED ON WP7 THEMES

2012-01-30T00:38:00.000-08:00

INTRO

The Technical Certification Requirements for Windows Phone 7 applications state the following:

5.5.2 – Content and Themes

Application content, such as text and visual elements, must be visible and legible regardless of the phone theme. For example, if the phone theme changes from black background to white background, the text and visual elements of your application must be visible or legible.

This means that everything in you application, including images, should be well visible in the dark and light theming of the phone. Handling dark/light support is very easy.

DARK AND LIGHT

Often companies have a special version of their logos for different situations (Bing for example). For this demo I’ve created two logos, a black and a white one. The white logo should be used when the theme is set to dark, the other when a light theme has been selected.

I’ve dropped these images into Expression Blend and grouped them together in a Grid control (Ctrl+G ). This grid is placed in the title panel, which resulted in the following XAML:

<StackPanel x:Name="TitlePanel" Grid.Row="0">
    <Grid>
        <Image Source="Logo-Black.png" />
        <Image Source="Logo-White.png" />
    </Grid>
</StackPanel> 

To get the white logo to be only visible when the dark theme is set, select the image of the white logo. With the image selected click on the “Advanced options”-peg:

Now, go to “System Resource” and select the “PhoneDarkThemeVisibility” resource.

At this point a green rectangle is placed around the visibility property of the images letting you know a resource is set on that property.

To get the same results for the dark logo, repeat the process on that images. But select the “PhoneLightThemeVisibility” instead.

TESTING

To test the results right in Expression Blend, got to the “Device” tab. On this tab you can set different device settings, including the Accent Color and the Light or Dark themes.

Switching from dark to light and back should result in the images below.

WRAP-UP

Setting the visibility like this can be done on every element in your XAML. And whenever you need to use the visibility for other purposes, there’s a similar resource for the Opacity.

Reference To: http://www.timmykokke.com/2012/01/setting-visibility-based-on-wp7-themes/#.Tx3BK5wBfT0.twitter

[Windows Phone 7.5] Run multiple instances of the emulator

2012-01-30T00:07:00.000-08:00

Hello everyone!

Today I bring you a little trick that can be very useful. It's being able to run multiple instances of the emulator for Windows Phone on the same PC.

This will tremendously help us if we are developing applications that interact between users, and may have 2 or 3 emulators in your PC with the launched application or if you want to take a long test of an application while working in another.

As we get it? The first thing we have to do is go to the Inbox AddOns from the Phone Tools we can find in the following path:

C:\ProgramData\Microsoft\Phone Tools\CoreCon\10.0\addons

Once there we will find a file called ImageConfig.en-US.xsl.If edit you with a text editor will see that you it's an XML with the data for the implementation of the emulator. Within this XML have to change three properties: the name of the emulator, the GUID for the emulator and the VMID GUID.

The first two will find them at the beginning of the file:

< DEVICE Protected = "true" Name = "Windows Phone Emulator" ID = "5E7661DF-D928-40ff-B747-A4B1957194F9" >

We need to generate a GUID, for example with the tool that includes Visual Studio Tools > Create GUID, it is important to write the GUID without the keys generated by the tool!

We also have to give it a unique name, for example "Windows Phone Emulator 2". The following key to modify the VMID, we can perform a search to locate it:

< PROPERTY ID = "VMID" Protected = "false" >
{DF24EFAA-0FD3-44D1-8837-55E386D2905E}
< /PROPERTY >

Here we have to copy another GUID, this time including the keys. Once done, if we open Visual Studio and load a Windows Phone project, we can see the different instances that run our application:

They also will be available in the application of deployment:

With this little trick can have several emulators on the same computer, in my tests have worked me extremely well up to a maximum of 3 emulators. With the 4th starting team has become unstable until block fully and I had to do a reset. It is very possible that this is due to that has not been able to gain control of a core by VT. Also, with 3 emulators initiates had been the same effect to answer a Skype voice call. However with 2 emulators I have not had any impact.Consumption is very low on memory, about 100 Mb per emulator, so do not think that the problem comes from memory, I think that more is a question of processor resources. My PC is a Core i7 with 4 cores / 8 threads and 8 Gb of RAM.

With this setting, having 3 initiated emulators not significantly affects the performance of the team.

hash map "Alias0": missing map file /etc/mail/aliases.db in FreeBSD jail

2012-01-29T18:38:00.000-08:00

Problem:
Jan 30 18:11:22 hyder-home sm-mta[90213]: qJHNnr429401: SYSERR(root): hash map "Alias0": missing map file /etc/mail/aliases.db: No such file or directory

Solution:
# sendmail -bi
# ls -l /etc/mail/aliases.db

Reference To: http://gala4th.blogspot.com/2012/01/hash-map-alias0-missing-map-file.html

Install Jails on FreeBSD 8.2

2012-01-29T18:34:00.000-08:00

Install Jails on FreeBSD 8.2

Jails, sometimes referred to as an enhanced replacement of chroot environments, are a very powerful tool for system administrators, but their basic usage can also be useful for advanced users.

Setting up the Host Environment

First, you will want to set up your real system's environment to be "jail-friendly".

For consistency, we will refer to the parent box as the "host environment", and to the jailed virtual machine as the "jail environment". Since jail is implemented using IP aliases, one of the first things to do is to disable IP services on the host system that listen on all local IP addresses for a service. If a network service is present in the host environment that binds all available IP addresses rather than specific IP addresses, it may service requests sent to jail IP addresses if the jail did not bind the port. This means changing inetd(8) to only listen on the appropriate IP address, and so forth. Add the following to /etc/rc.conf in the host environment:

sendmail_enable="NO"
inetd_flags="-wW -a 192.168.0.1"
rpcbind_enable="NO"

man inetd for more information.

192.168.0.1 is the native IP address for the host system, in this example. Daemons that run out of inetd(8) can be easily set to use only the specified host IP address. Other daemons will need to be manually configured for some this is possible through the rc.conf(5) flags entries; for others it is necessary to modify per-application configuration files, or to recompile the applications. The following frequently deployed services must have their individual configuration files modified to limit the application to listening to a specific IP address:

To configure sshd(8), it is necessary to modify /etc/ssh/sshd_config.

To configure sendmail(8), it is necessary to modify

/etc/mail/sendmail.cf.

For named(8), it is necessary to modify /etc/namedb/named.conf.

In addition, a number of services must be recompiled in order to run them in the host environment. This includes most applications providing services using rpc(3), such as rpcbind(8), nfsd(8), and mountd(8). In general, applications for which it is not possible to specify which IP address to bind should not be run in the host environment unless they should also service requests sent to jail IP addresses. Attempting to serve NFS from the host environment may also cause confusion, and cannot be easily reconfigured to use only specific IPs, as some NFS services are hosted directly from the kernel. Any third-party network software running in the host environment should also be checked and configured so that it does not bind all IP addresses, which would result in those services' also appearing to be offered by the jail environments.

Once these daemons have been disabled or fixed in the host environment, it is best to reboot so that all daemons are in a known state, to reduce the potential for confusion later (such as finding that when you send mail to a jail, and its sendmail is down, the mail is delivered to the host, etc.).

Getting services to not listen to *

First off, we should make sure we get the system so that we have nothing listening on *, to check what what we need to modify issue this command

# sockstat | grep "\*:[0-9]"

This should give you a synopsys of all the processes and ports you need to trim down. Here are some hints with your ipv4 addr being 10.0.0.1 and your ipv6 addr being 2002::7ea9

# vi /etc/rc.conf
sendmail_enable="NO"
inetd_flags="-wW -a 192.168.0.1"
rpcbind_enable="NO"

sshd:
# vim /etc/ssh/sshd_config

change ListenAddress derivative

ListenAddress 192.168.0.1
ListenAddress 192.168.0.111
ListenAddress 2002::7ea9

syslogd:

# vim /etc/rc.conf
### enable syslogd, no network socket will be opened for syslogd
syslogd_enable="YES"
syslogd_flags="-s -s"

rsyncd:
# vim /usr/local/etc/rsyncd.conf
address = 192.168.0.1

MySQL:

# vim /etc/my.cnf
bind-address=10.0.0.1

Samba: (this will get you most of the way there)
edit /usr/local/etc/smb.conf
change the following:
interfaces = 10.0.0.242/24 127.0.0.1
socket address = 10.0.0.242

bind interfaces only = yes
note: if you don't need wins lookups and netbios name translation
you can safely disable nmbd. There doesn't seem to be a way
for nmb to not listen to *:138 anyhow.

To disable nmb go to /etc/rc.conf and replace samba_enable="YES" with smbd_enable="YES"

open ntpd (xntpd listens on all and cannot be changed)

# vim /usr/local/etc/ntpd.conf
listen on 10.0.0.1
listen on 2002::7ea9

bind
edit your named.conf (may be in /var/named/etc/named.conf)
In the options section:
listen-on { 10.0.0.242; };
listen-on-v6 port 53 { 2002:d8fe:10f1:6:202:b3ff:fea9:7ea9; };
query-source address 10.0.0.242 port *;
query-source-v6 address 2002:d8fe:10f1:6:202:b3ff:fea9:7ea9 port *;

The file system layout is described in the following list:

- Each jail will be mounted under the /home/jail/THE_JAIL_NAME directory.

- /home/jail/read-only/root # is the template for each jail and the read-only partition for all of the jails.

- A blank directory will be created for each jail under the /home/jail directory.

- Each jail shall have its own read-write system that is based upon /home/jail/read-only/skel.

- Each jailspace (read-write portion of each jail) shall be created in /home/jail/read-write/THE_JAIL_NAME.

- Each jail will have a /s directory, that will be linked to the read-write portion of the system.

Creating the Template
This section will describe the steps needed to create the master template that will be the read-only portion for the jails to use.

It is always a good idea to update the FreeBSD system to the latest -RELEASE branch. Check the corresponding Handbook Chapter to accomplish this task. In the case the update is not feasible, the buildworld will be required in order to be able to proceed. Additionally, the sysutils/cpdup package will be required. We will use the portsnap(8) utility to download the FreeBSD Ports Collection. The Handbook Portsnap Chapter is always good reading for newcomers.

Install cpdup

# cd /usr/ports/sysutils/cpdup ; make install clean

Create directories

# mkdir /home/jail
# mkdir /home/jail/read-only
# mkdir /home/jail/read-write

Create a directory structure for the read-only file system which will contain the FreeBSD binaries for our jails:

# mkdir /home/jail/read-only/root

Change directory to the FreeBSD source tree and install the read-only file system to the jail template:

# cd /usr/src

If you have already rebuilt your userland using make world or make buildworld, you can skip following step and install your existing userland into the new jail.

# make buildworld

This command will populate the directory subtree chosen as jail's physical location on the file system with the necessary binaries, libraries, manual pages and so on.

# make installworld DESTDIR=/home/jail/read-only/root

The distribution target for make installs every needed configuration file. In simple words, it installs every installable file of /usr/src/etc/ to the /etc directory of the jail environment: /home/jail/THE_JAIL_NAME/etc/.

# make distribution DESTDIR=/home/jail/read-only/root

Next, prepare a FreeBSD Ports Collection for the jails as well as a FreeBSD source tree, which is required for mergemaster:

# mkdir /home/jail/read-only/root/usr/ports
# portsnap -p /home/jail/read-only/root/usr/ports fetch extract
# portsnap -p /home/jail/read-only/root/usr/ports fetch update
# cpdup /usr/src /home/jail/read-only/root/usr/src

Setup for Drupal:

# cd /home/jail/read-only/root
# mkdir www
# cd www
# fetch http://ftp.drupal.org/files/projects/drupal-6.22.tar.gz
# tar zxvf drupal-6.22.tar.gz
# mv drupal-6.22 drupal6
# chown -R root:wheel drupal6

Create a skeleton for the read-write portion of the system:

# mkdir /home/jail/read-only/skel
# mkdir /home/jail/read-only/skel/home
# mkdir /home/jail/read-only/skel/usr-X11R6
# mkdir /home/jail/read-only/skel/distfiles

??? # mkdir /home/jail/read-only/skel/drupal-sites
??? # mkdir /home/jail/read-only/skel/drupal-files

# cd /home/jail/read-only/root
# mv etc /home/jail/read-only/skel
# mv usr/local /home/jail/read-only/skel/usr-local
# mv tmp /home/jail/read-only/skel
# mv var /home/jail/read-only/skel
# mv root /home/jail/read-only/skel

# mv www/drupal6/sites /home/jail/read-only/skel/drupal-sites

Use mergemaster to install missing configuration files. Then get rid of the extra directories that mergemaster creates:

# mergemaster -t /home/jail/read-only/skel/var/tmp/temproot -D /home/jail/read-only/skel -i
How should I handle ./.cshrc? [Leave it to install later] enter
How should I handle ./.profile? [Leave it to install later] enter
...
keep pressing space until you see end : q

*** You installed a login.conf file, so make sure that you run
'/usr/bin/cap_mkdb /home/jail/read-only/skel/etc/login.conf'
to rebuild your login.conf database

Would you like to run it now? y or n [n] y

*** You installed a services file, so make sure that you run
'/usr/sbin/services_mkdb -q -o /home/jail/read-only/skel/var/db/services.db /home/jail/read-only/skel/etc/services'
to rebuild your services database

Would you like to run it now? y or n [n] y

*** You installed a new master.passwd file, so make sure that you run
'/usr/sbin/pwd_mkdb -d /home/jail/read-only/skel/etc -p /home/jail/read-only/skel/etc/master.passwd'
to rebuild your password files

Would you like to run it now? y or n [n] y

# cd /home/jail/read-only/skel
# rm -R bin boot lib libexec mnt proc rescue sbin sys usr dev

Now, symlink the read-write file system to the read-only file system. Please make sure that the symlinks are created in the correct s/ locations. Real directories or the creation of directories in the wrong locations will cause the installation to fail.

# cd /home/jail/read-only/root
# mkdir s
# ln -s s/etc etc
# ln -s s/home home
# ln -s s/root root
# ln -s ../s/usr-local usr/local
# ln -s ../s/usr-X11R6 usr/X11R6
# ln -s ../../s/distfiles usr/ports/distfiles
# ln -s s/tmp tmp
# ln -s s/var var

# ln -s s/home/cwn_www/nginx www
# ln -s s/home/cwn_www/scripts scripts

??? # ln -s ../../s/drupal-sites www/drupal6/sites
??? # ln -s ../../../../s/drupal-files www/drupal6/sites/default/files

??? Changing the directory permission
??? # find /home/jail -type d -print0 | xargs -0 -I @ sh -c 'chmod 700 @ ; chown root:wheel @'

As a last step, create a generic /home/jail/read-only/skel/etc/make.conf with its contents as shown below:

# echo 'WRKDIRPREFIX?= /s/portbuild' >> /home/jail/read-only/skel/etc/make.conf

Having WRKDIRPREFIX set up this way will make it possible to compile FreeBSD ports inside each jail. Remember that the ports directory is part of the read-only system. The custom path for WRKDIRPREFIX allows builds to be done in the read-write portion of every jail.

Creating Jails:

Now that we have a complete FreeBSD jail template, we can setup and configure the jails in /etc/rc.conf. This example demonstrates the creation of 3 jails: "NS", "MAIL" and "WWW".

Put the following lines into the /etc/fstab file, so that the read-only template for the jails and the read-write space will be available in the respective jails:

# vim /etc/fstab
### read-only partitions
/home/jail/read-only/root /home/jail/read-only/ns nullfs ro 0 0
/home/jail/read-only/root /home/jail/read-only/mail nullfs ro 0 0
/home/jail/read-only/root /home/jail/read-only/www nullfs ro 0 0

### read-write partitions
/home/jail/read-write/ns /home/jail/read-only/ns/s nullfs rw 0 0
/home/jail/read-write/mail /home/jail/read-only/mail/s nullfs rw 0 0
/home/jail/read-write/www /home/jail/read-only/www/s nullfs rw 0 0

Note: Partitions marked with a 0 pass number are not checked by fsck(8) during boot, and partitions marked with a 0 dump number are not backed up by dump(8). We do not want fsck to check nullfs mounts or dump to back up the read-only nullfs mounts of the jails. This is why they are marked with "0 0" in the last two columns of each fstab entry above.

# vim /etc/rc.conf

### for jail host
ifconfig_re0="inet 192.168.0.1  netmask 255.255.255.0"

### for jail guests
ifconfig_re0_alias0="inet 192.168.0.2 netmask 255.255.255.255"
ifconfig_re0_alias1="inet 192.168.0.3 netmask 255.255.255.255"
ifconfig_re0_alias2="inet 192.168.0.4 netmask 255.255.255.255"

### jail settings
jail_enable="YES"                   # Set to NO to disable starting of any jails
jail_set_hostname_allow="NO"        # Allow root user in a jail to change its hostname
#jail_socket_unixiproute_only="YES" # Route only TCP/IP within a jail
jail_list="ns mail www"             # Space separated list of names of jails
                                    # Note: Jail names in jail_list should contain alphanumeric characters only.

### j-ns
jail_ns_hostname="j-ns.local"                  # jail's hostname
jail_ns_ip="192.168.0.2"                 # jail's IP address
jail_ns_rootdir="/home/jail/read-only/ns" # jail's root directory
jail_ns_devfs_enable="YES"               # mount devfs in the jail
jail_ns_devfs_ruleset="ns_ruleset"       # devfs ruleset to apply to jail

### j-mail
jail_mail_hostname="j-mail.local"                  # jail's hostname
jail_mail_ip="192.168.0.3"                   # jail's IP address
jail_mail_rootdir="/home/jail/read-only/mail" # jail's root directory
jail_mail_devfs_enable="YES"                 # mount devfs in the jail
jail_mail_devfs_ruleset="mail_ruleset"       # devfs ruleset to apply to jail

### j-www
jail_www_hostname="j-www.local"                  # jail's hostname
jail_www_ip="192.168.0.4"                  # jail's IP address
jail_www_rootdir="/home/jail/read-only/www" # jail's root directory
jail_www_devfs_enable="YES"                # mount devfs in the jail
jail_www_devfs_ruleset="www_ruleset"       # devfs ruleset to apply to jail

Note: The jail_name_rootdir variable must not be set to a path which includes a symbolic link, otherwise the jails will refuse to start. Use the realpath(1) utility to determine a value which should be set to this variable. Please see the FreeBSD-SA-07:01.jail Security Advisory for more information.

Note: for devfs ruleset, cat /etc/defaults/devfs.rules.

Make sure your jail host has all the IP addresses for jail guests:
# /etc/rc.d/netif restart && /etc/rc.d/routing restart
# ifconfig

Create the required mount points for the read-only file system of each jail:

# cd /home/jail/read-only
# mkdir ns mail www
??? # chmod 700 ns mail www
??? # chown root:wheel ns mail www

Install the read-write template into each jail. Note the use of sysutils/cpdup, which helps to ensure that a correct copy is done of each directory:

# cpdup /home/jail/read-only/skel /home/jail/read-write/ns
# cpdup /home/jail/read-only/skel /home/jail/read-write/mail
# cpdup /home/jail/read-only/skel /home/jail/read-write/www

In this phase, the jails are built and prepared to run. First, mount the required file systems for each jail, and then start them using the /etc/rc.d/jail script:

# mount -a
# df -h

Start a specific jail:
# /etc/rc.d/jail start ns
# /etc/rc.d/jail start mail
# /etc/rc.d/jail start www

Start all jails:
# /etc/rc.d/jail start

Stop a specific jail:
# /etc/rc.d/jail stop www

A clean way to shut down a jail(8) is not available at the moment. This is because commands normally used to accomplish a clean system shutdown cannot be used inside a jail. The best way to shut down a jail is to run the following command from within the jail itself or using the jexec(8) utility from outside the jail:

j-www # sh /etc/rc.shutdown
or
# jexec 2 shutdown -p now

The jails should be running now. To check if they have started correctly, use the jls(8) command. Its output should be similar to the following:

# jls
JID IP Address Hostname Path
7 192.168.0.2 j-ns /home/jail/read-only/ns
8 192.168.0.3 j-mail /home/jail/read-only/mail
9 192.168.0.4 j-www /home/jail/read-only/www

At this point, it should be possible to log onto each jail, add new users or configure daemons. The JID column indicates the jail identification number of each running jail. Use the following command in order to perform administrative tasks in the jail whose JID is 9:

# jexec 9 tcsh

Use google's public DNS server as a DNS resolver:

j-www # vi /etc/resolv.conf
nameserver 8.8.8.8
nameserver 8.8.4.4

Modify /etc/rc.conf:
j-www # vi /etc/rc.conf
### enable syslogd, no network socket will be opened for syslogd
syslogd_enable="YES"
syslogd_flags="-s -s"

### SendMail
sendmail_enable="NO"

Modify /etc/hosts:
j-www # vim /etc/hosts
::1 localhost localhost.j-www.local
127.0.0.1 localhost localhost.j-www.local

192.168.100.34 j-www.local j-www

To fix this error "hash map "Alias0": missing map file /etc/mail/aliases.db in FreeBSD jail":
# sendmail -bi
# ls -l /etc/mail/aliases.db

Note: you must edit /etc/hosts before running sendmail -bi command.

Comment out adjkerntz in crontab:
j-www # vim /etc/crontab
#1,31 0-5 * * * root adjkerntz -a

SVN server setup
# cd /usr/ports/devel/subversion
# make install clean

Make sure you DO uncheck this option:
[] BDB=off "db4 repository backend"

# mv /usr/local/bin/svn /usr/local/bin/svn.orig

# vi /usr/local/bin/svn


#!/bin/sh

### initialize
svnarg=""

### use encoding utf-8 as default if run "svn ci" or "svn commit".
if [ "$1" != "help" ]; then
  for myarg in "$@"; do
    if [ "${myarg}" = "commit" ] || [ "${myarg}" = "ci" ]; then
      svnarg="--encoding utf-8"
      break
    fi
  done
fi

### wrapper script to set umask to 027 on subversion binaries
### Note: the meaning of each umask:
### umask 002 // File permission 644. Owner can read/write. Group and Others can only read.
### umask 007 // File permission 660. Owner and Group can read/write. Others can not read or write.
### umask 027 // File permission 640. Owner can read/write. Group can read. Others can not read or write.
umask 027

### svn command
/usr/local/bin/svn.orig ${svnarg} "$@"

Don't forget to make your wrapper script executable:

# chmod +x /usr/local/bin/svn

# mkdir /home/jail/svn-rep
# cd /home/jail/svn-rep
# svnadmin create ns
# svnadmin create mail
# svnadmin create www

# vi www/conf/svnserve.conf
[general]
anon-access = none
auth-access = write
password-db = passwd

# vi www/conf/passwd
[users]
danny = mypassword

Start SVN server as a stand-alone daemon
# /usr/local/bin/svnserve -d --listen-port=3690 --listen-host=0.0.0.0 -r /home/jail/svn-rep

# vi /etc/rc.conf
### SVN
svnserve_enable="YES"
svnserve_flags="-d --listen-port=3690 --listen-host=0.0.0.0"
svnserve_data="/home/jail/svn-rep"
svnserve_user="root"
svnserve_group="wheel"

# svn import /home/jail/read-only/skel/drupal-sites/all file:///home/jail/svn-rep/www -m "initial import"

SVN client setup
# rm -r /www/drupal6/sites/all/*
# svn checkout svn://192.168.0.1/www /www/drupal6/sites/all

sending mail through sendmail inside a jail:
# cat mail.php
<?php
mail('test@example.com', 'My Subject', 'my msg');
?>

# php mail.php
collect: Cannot write ./dfpA4NVE5H097195 (bfcommit, uid=25, gid=25): Permission denied
queueup: cannot create queue file ./qfpA4NVE5H097195, euid=25, fd=-1, fp=0x0: Permission denied

# chown smmsp:smmsp /var/spool/clientmqueue
# chmod 770 /var/spool/clientmqueue

Fine Tuning and Administration
There are several options which can be set for any jail, and various ways of combining a host FreeBSD system with jails, to produce higher level applications. This section presents:

Some of the options available for tuning the behavior and security restrictions implemented by a jail installation.

Some of the high-level applications for jail management, which are available through the FreeBSD Ports Collection, and can be used to implement overall jail-based solutions.

Fine tuning of a jail's configuration is mostly done by setting sysctl(8) variables. A special subtree of sysctl exists as a basis for organizing all the relevant options: the security.jail.* hierarchy of FreeBSD kernel options. Here is a list of the main jail-related sysctls, complete with their default value. Names should be self-explanatory, but for more information about them, please refer to the jail(8) and sysctl(8) manual pages.

security.jail.set_hostname_allowed: 1

security.jail.socket_unixiproute_only: 1

security.jail.sysvipc_allowed: 0

security.jail.enforce_statfs: 2

security.jail.allow_raw_sockets: 0

security.jail.chflags_allowed: 0

security.jail.jailed: 0

These variables can be used by the system administrator of the host system to add or remove some of the limitations imposed by default on the root user. Note that there are some limitations which cannot be removed. The root user is not allowed to mount or unmount file systems from within a jail(8). The root inside a jail may not load or unload devfs(8) rulesets, set firewall rules, or do many other administrative tasks which require modifications of in-kernel data, such as setting the securelevel of the kernel.

Ping from jail not permitted error

ICMP is disallowed by defaut for jails, see the sysctl :

# echo security.jail.allow_raw_sockets=1 >> /etc/sysctl.conf

Now restart your jails and the problem should be fixed.

There are good reasons for this default, so if you test remember to set it back when you are done.

Also, on a point of style, jails in their current form (see VIMAGE) do not get a network stack of their own so they don't have a firewall but share the hosts' network and firewall, etc.

Cannot remove files inside a jail directory
override r-sr-xr-x root/wheel schg for j/mroot/bin/rcp? y
rm: j/mroot/bin/rcp: Operation not permitted
rm: j/mroot/bin: Directory not empty
override r--r--r-- root/wheel schg for j/mroot/lib/libc.so.7? y
rm: j/mroot/lib/libc.so.7: Operation not permitted

# chflags -R noschg /home/jail/read-write/ns
# rm -r /home/jail/read-write/ns

High-level administrative tools in FreeBSD Ports Collection

# cd /usr/ports/sysutils/jailutils ; make install clean

# cd /usr/ports/sysutils/ezjail ; make install clean

Reference To: http://gala4th.blogspot.com/2012/01/install-jails-on-freebsd-82.html

Install Samba on FreeBSD 8.2

2012-01-15T21:08:00.000-08:00

root@bmw0 [/root] # cd /usr/ports/net/samba36; make install clean

Edit smb.conf

root@bmw0 [/root] # vi /usr/local/etc/smb.conf
security = user
hosts allow = 192.168.100. 192.168.200.168 127.

[syncdb]
comment = hmm
path = /usr/local/www/apache22/data/syncdb
valid users = sambauser
public = no
writable = yes
printable = no
create mask = 0640
; write list = @staff

Add a user called "sambauser"
root@bmw0 [/root] # adduser

Adding users to samba
root@bmw0 [/root] # smbpasswd –a
or
root@bmw0 [/root] # /usr/local/bin/pdbedit -a username

Start Samba
root@bmw0 [/root] # /usr/local/etc/rc.d/samba start

Check to see if samba is running
root@bmw0 [/root] # ps -auwxx | egrep '[sn]mbd'

Test samba using smbclient
root@bmw0 [/root] # /usr/local/bin/smbclient -U username \\\\localhost\\username
or
root@bmw0 [/root] # /usr/local/bin/smbclient -U username //localhost/username

Edit rc.conf
root@bmw0 [/root] # vi /etc/rc.conf
### Samba
samba_enable="YES"
nmbd_enable="YES"
smbd_enable="YES"

Edit ipfw.rules
root@bmw0 [/root] # vi /usr/local/etc/ipfw.rules
### samba
$IPF 260 allow tcp from 192.168.100.0/24 to any 139 in

Refernce To:http://gala4th.blogspot.com/2012/01/install-samba-on-freebsd-82.html

Install Nginx, PHP-FPM and Varnish on FreeBSD 8.2

2012-01-10T21:00:00.000-08:00

Install Nginx, PHP-FPM and Varnish on FreeBSD 8.2

# cd /usr/ports/www/nginx

# make install clean

Note: make sure you select important option such as:
HTTP_REWRITE_MODULE=on
HTTP_SSL_MODULE=on

and others as per your requirements.

# echo '### Nginx' << /etc/rc.conf
# echo 'nginx_enable="YES"' << /etc/rc.conf

# vim /usr/local/etc/nginx/nginx.conf

gzip on;
    gzip_min_length 1000;
    gzip_proxied expired no-cache no-store private auth;
    gzip_disable "MSIE [1-6]\.";
    gzip_types text/plain text/css application/x-javascript text/xml application/xml application/xml+rss text/javascript;

    server {
            server_name mydomain1.com mydomain2.com mydomain3.com;
            root /usr/local/www/nginx/drupal7; ## <-- Your only path reference.

            client_max_body_size 20M; # Maximum allowed size for uploaded files

            location = /favicon.ico {
                    log_not_found off;
                    access_log off;
            }

            location = /robots.txt {
                    allow all;
                    log_not_found off;
                    access_log off;
            }

            # This matters if you use drush
            location = /backup {
                    deny all;
            }

            # Very rarely should these ever be accessed outside of your lan
            location ~* \.(txt|log)$ {
                    allow 192.168.0.0/16;
                    deny all;
            }

            location ~ \..*/.*\.php$ {
                    return 403;
            }

            location / {
                    # This is cool because no php is touched for static content
                    try_files $uri @rewrite;
            }

            location @rewrite {
                    # Some modules enforce no slash (/) at the end of the URL
                    # Else this rewrite block wouldn't be needed (GlobalRedirect)
                    rewrite ^/(.*)$ /index.php?q=$1;
            }

            location ~ \.php$ {
                    fastcgi_split_path_info ^(.+\.php)(/.+)$;
                    ### NOTE: You should have "cgi.fix_pathinfo = 0" in php.ini
                    include fastcgi_params;
                    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                    fastcgi_intercept_errors on;
      #fastcgi_pass 127.0.0.1:9000;  #pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
                    fastcgi_pass unix:/tmp/php-fpm.sock;
            }

            # Fighting with ImageCache? This little gem is amazing.
            location ~ ^/sites/.*/files/imagecache/ {
                    try_files $uri @rewrite;
            }
            # Catch image styles for D7 too.
            location ~ ^/sites/.*/files/styles/ {
                    try_files $uri @rewrite;
            }

            location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
                    expires max;
                    log_not_found off;
            }

            # nginx status
            location /NginxStatus {
              stub_status on;
              access_log on;
              auth_basic NginxStatus;
              auth_basic_user_file conf/htpasswd;
            }
    }

# /usr/local/etc/rc.d/nginx start

Change this line for nginx:

# vim /usr/local/etc/php.ini
cgi.fix_pathinfo = 0

Install php and php-fpm:

// For PHP5.3
# cd /usr/ports/lang/php5 ; make install

// For PHP5.2
# cd /usr/ports/lang/php52 ; make install

===< The following configuration options are available for php5-5.3.8:
CLI=on "Build CLI version"
CGI=on "Build CGI version"
FPM=on "Build FPM version (experimental)"
APACHE=off "Build Apache module"
AP2FILTER=off " Use Apache 2.x filter interface (experimental)"
DEBUG=off "Enable debug"
SUHOSIN=on "Enable Suhosin protection system"
MULTIBYTE=on "Enable zend multibyte support"
IPV6=off "Enable ipv6 support"
MAILHEAD=on "Enable mail header patch"
LINKTHR=on "Link thread lib (for threaded extensions)"
===< Use 'make config' to modify these settings

// For PHP5.3
# cp /usr/local/etc/php.ini-production /usr/local/etc/php.ini

// For PHP5.2
# cp /usr/local/etc/php.ini-recommended /usr/local/etc/php.ini

Install PHP Extensions
// For PHP5.3
# cd /usr/ports/lang/php5-extensions ; make install

// For PHP5.2
# cd /usr/ports/lang/php52-extensions ; make install

Edit php-fpm.conf:
# vim /usr/local/etc/php-fpm.conf
; comment out following line and add the line below.
;listen = 127.0.0.1:9000
listen = /tmp/php-fpm.sock

request_terminate_timeout=30s

Edit rc.conf
# vim /etc/rc.conf
### php-fpm
php_fpm_enable="YES"

Change this line for nginx

# vim /usr/local/etc/php.ini
cgi.fix_pathinfo = 0

# /usr/local/etc/rc.d/php-fpm start

# tail /var/log/nginx-error.log

# tail /var/log/php-fpm.log

# tail /var/log/messages

Install Varnish

# cd /usr/ports/www/varnish ; make install clean

Reconfigure your web server to listen on localhost:8080

# echo 'varnishd_enable="YES"' << /etc/rc.conf
# echo 'varnishd_flags="-s malloc,1G -a 127.0.0.1:80 -b 127.0.0.1:8080"' << /etc/rc.conf
# echo 'varnishlog_enable="YES"' << /etc/rc.conf

# /usr/local/etc/rc.d/varnishd start

# /usr/local/etc/rc.d/varnishncsa onestart

# tail /var/log/varnishncsa.log

# /usr/local/bin/varnishtest

# /usr/local/bin/varnishstat

# ls -lh /usr/local/varnish/`hostname`

Install webbench
# cd /usr/ports/benchmarks/webbench ; make install clean

# webbench -c 3000 -t 60 http://test.local/index.php

Refernce To: http://gala4th.blogspot.com/2012/01/install-nginx-php-fpm-and-varnish-on.html

Finding the Unique Device ID in Windows Phone 7 (And Device Manufacturer And Anonymous Windows Live ID)

2011-12-21T21:19:00.000-08:00

Here’s Nick Harris with a handy set of static methods for getting the following unique IDs:

Device Manufacturer ID
- DeviceExtendedProperties.TryGetValue(“DeviceManufacturer”, out someObject);
- example: “HTC”
Device ID
- DeviceExtendedProperties.TryGetValue(“DeviceUniqueId”, out someObject);
- requires ID_CAP_IDENTITY_DEVICE in the app manifest which will trigger a warning to users when they install the app
- a byte[], converter to a string will looks like
  “12345678901234567890123456789012345678901234567890123”
Anonymous Windows Live ID
- A 32 character subset at offset 2 of the results of
  “UserExtendedProperties.TryGetValue(“ANID”, out someObject)
- requires ID_CAP_IDENTITY_USER in the app manifest which will trigger a warning to users when they install the app
- looks like “00FF00FF00FF00FF00FF00FF00FF00FF”

However, if you just need any unique identifier (not necessarily a device ID), you can always set and store a new global unique identifier using:

Guid.NewGuid();

which will return a 128-bit integer that will look something like this:

“e81644f1-46b6-4994-2903-1d1f1440c130″

This will not cause warnings to appear when the app is downloaded because it isn’t a constant identifier to that specific device.

Reference To:

http://www.designersilverlight.com/2011/12/20/finding-the-unique-device-id-in-windows-phone-7-and-device-manufacturer-and-anonymous-windows-live-id/

SQLite on WP7

2011-12-21T21:17:00.000-08:00

“C# Sqlite Port for Windows phone 7 and possibly Silverlight 3, 4. The core engine was slightly modified to be used with IsolatedStorage and SqliteClient were ported by using missing codes from Mono project in order to maximize usability and portability from desktop.”

Although sterling works great, it is essentially an object-based database (NoSql-like)… If you truly need a relational database or if your application currently uses SQLite and you want to port it to Windows Phone 7, this might just be the answer!

Let’s get started… As with traditional ADO.NET, we first need to create a connection:

Collapse | Copy Code

using (SqliteConnection conn = 
 new SqliteConnection("Version=3,uri=file:Super14Database.db"))
{
    conn.Open();
    // Use the connection here...
}

And now we can start using the database with “normal” SQL statements… Let’s create a table.

Collapse | Copy Code

using (SqliteCommand cmd = conn.CreateCommand())
{
    cmd.CommandText = "CREATE TABLE matches ( [id] INTEGER PRIMARY KEY, _
 [team1] TEXT, [score1] INTEGER, [team2] TEXT, [score2] TEXT, [date] TEXT)";
    cmd.ExecuteNonQuery();
}

And to insert data:

Collapse | Copy Code

cmd.Transaction = conn.BeginTransaction();
cmd.CommandText = "INSERT INTO matches(score1, team1, 
 score2, team2, date) VALUES(@score1, @team1, @score2, @team2, @date);";

cmd.Parameters.Add("@score1",  null);
cmd.Parameters.Add("@team1", null);
cmd.Parameters.Add("@score2",  null);
cmd.Parameters.Add("@team2",  null);
cmd.Parameters.Add("@date",  null);

cmd.Parameters["@score1"].Value = 20;
cmd.Parameters["@team1"].Value =  "Blues";
cmd.Parameters["@score2"].Value =  34;
cmd.Parameters["@team2"].Value =  "Hurricanes";
cmd.Parameters["@date"].Value =  "12/02/10";
cmd.ExecuteNonQuery();


cmd.Parameters["@score1"].Value =  15;
cmd.Parameters["@team1"].Value =  "W Force";
cmd.Parameters["@score2"].Value =  24;
cmd.Parameters["@team2"].Value =  "Brumbies";
cmd.Parameters["@date"].Value =  "12/02/10";
cmd.ExecuteNonQuery();

cmd.Parameters["@score1"].Value =  34;
cmd.Parameters["@team1"].Value =  "Cheetahs";
cmd.Parameters["@score2"].Value =  51;
cmd.Parameters["@team2"].Value =  "Bulls";
cmd.Parameters["@date"].Value =  "12/02/10";
cmd.ExecuteNonQuery();

cmd.Parameters["@score1"].Value =  32;
cmd.Parameters["@team1"].Value =  "Crusaders";
cmd.Parameters["@score2"].Value =  17;
cmd.Parameters["@team2"].Value =  "highlanders";
cmd.Parameters["@date"].Value =  "12/02/10";
cmd.ExecuteNonQuery();

cmd.Parameters["@score1"].Value =  28;
cmd.Parameters["@team1"].Value =  "Reds";
cmd.Parameters["@score2"].Value =  30;
cmd.Parameters["@team2"].Value =  "Waratahs";
cmd.Parameters["@date"].Value =  "12/02/10";
cmd.ExecuteNonQuery();

cmd.Parameters["@score1"].Value =  13;
cmd.Parameters["@team1"].Value =  "Lions";
cmd.Parameters["@score1"].Value =  26;
cmd.Parameters["@team2"].Value =  "Stomers";
cmd.Parameters["@date"].Value =  "12/02/10";
cmd.ExecuteNonQuery();

cmd.Parameters["@score1"].Value =  18;
cmd.Parameters["@team1"].Value =  "Sharks";
cmd.Parameters["@score2"].Value =  19;
cmd.Parameters["@team2"].Value =  "Chiefs";
cmd.Parameters["@date"].Value =  "12/02/10";
cmd.ExecuteNonQuery();
                    
cmd.Transaction.Commit();

NOTE: Notice the transaction support build in!

To fetch data from the database:

Collapse | Copy Code

cmd.CommandText = "SELECT * FROM matches";
using (SqliteDataReader reader = cmd.ExecuteReader())
{
    while (reader.Read())
    {
        var team1 = reader.GetValue(1);
        var score1 = reader.GetValue(2);
        var team2 = reader.GetValue(3);
        var score2 = reader.GetValue(4);
        var date = reader.GetValue(5);
    }
}

And that’s it! It is more verbose but it does work great and the translation from a normal desktop application that used SQLite should be simple!

Reference To:

http://www.codeproject.com/Articles/151179/SQLite-on-WP7

Windows Phone 7 Emulator Skin Switcher 1.0 Beta

2011-12-21T21:15:00.000-08:00

In the last few weeks several people started creating their own skins for the Windows Phone 7 Emulator. Switching between different skins was a lot of work by copying files manually to the emulator directory every time you wanted to switch. From now on this is not needed anymore because you can use the Windows Phone 7 Emulator Skin Switcher application I’ve created.

You can download the application here: Download

This version is the first beta release with my first set of skins. I added 2 skins from Georg Kalus: the Blue Nokia Lumia 800 and the White/Pink Nokia Lumia 710. I’ve also included the Black Nokia Lumia 800 skin from Pedro Lamas

The complete list of skins included in the application now are:

Default skin – Microsoft
Nokia Lumia 710 Black Blue – Geert van der Cruijsen
Nokia Lumia 710 Black Yellow – Geert van der Cruijsen
Nokia Lumia 710 White Black – Geert van der Cruijsen
Nokia Lumia 710 White Blue – Geert van der Cruijsen
Nokia Lumia 710 White Pink – Georg Kalus
Nokia Lumia 800 Black – Pedro Lamas
Nokia Lumia 800 Blue – Georg Kalus
Nokia Lumia 800 Pink – Geert van der Cruijsen

I’m planning on adding more skins in the near future but didn’t have time for it yet. If you have skins I can use please let me know by comment or on twitter

Hopefully this will make your Windows Phone 7 projects even more fun to test!

Refernce To: http://vdcruijsen.net/2011/12/windows-phone-7-emulator-skin-switcher-1-0-beta/

How To Change Your Windows Phone Emulator？

2011-12-19T19:14:00.000-08:00

Today, I discovered that Pedro Lamas had released a skin for the Windows Phone emulator that allowed it to look like the Nokia Lumia 800. (You can see it here.)

This inspired me to create another new skin for my current phone, the HTC Arrive. (Click here to download the HTC Arrive Windows Phone Emulator skin.) To use either of them, you simply need to copy the contents of the zip file to a specific folder on your computer (make sure to save a copy of the original files):

C:\Program Files (x86)\Microsoft XDE\1.0\

Once you’ve done that, your emulator can look like one of the images below!

Reference To：http://www.jeffblankenburg.com/2011/12/17/want-to-change-your-windows-phone-emulator/

HowTo - 在 Windows 7 、Vista 忘記 Administrator 密碼

2011-11-29T23:15:00.001-08:00

To reset a forgotten administrator password, follow these steps:

Boot from Windows PE or Windows RE and access the command prompt.
Find the drive letter of the partition where Windows is installed. In Vista and Windows XP, it is usually C:, in Windows 7, it is D: in most cases because the first partition contains Startup Repair. To find the drive letter, type C: (or D:, respectively) and search for the Windows folder. Note that Windows PE (RE) usually resides on X:.
Type the following command (replace “c:” with the correct drive letter if Windows is not located on C:):
copy c:\windows\system32\sethc.exe c:\
This creates a copy of sethc.exe to restore later.
Type this command to replace sethc.exe with cmd.exe:
copy /y c:\windows\system32\cmd.exe c:\windows\system32\sethc.exeReboot your computer and start the Windows installation where you forgot the administrator password.
After you see the logon screen, press the SHIFT key five times.
You should see a command prompt where you can enter the following command to reset the Windows password (see screenshot above):
net user your_user_name new_password
If you don’t know your user name, just type net user to list the available user names.
You can now log on with the new password.

I recommend that you replace sethc.exe with the copy you stored in the root folder of your system drive in step 3. For this, you have to boot up again with Windows PE or RE because you can’t replace system files while the Windows installation is online. Then you have to enter this command:

copy /y c:\sethc.exe c:\windows\system32\sethc.exe

Reference To：http://4sysops.com/archives/forgot-the-administrator-password-the-sticky-keys-trick/

把瀏覽器當虛擬平台？

2011-10-27T23:10:00.001-07:00

每次要跑虛擬機時，都要有一個Hypervisor，不管是原生或寄居架構，但不管是哪一種架構，總要有一個硬體平台吧？總要分配CPU、記憶體或磁碟空間吧？下面這個Linux，卻是真正把VM的層次拉高到最上層：瀏覽器。這是一個用Javascript重寫的Linux核心，而Javascript的執行平台正是瀏覽器！曾經有人懷疑這只是一個模擬Linux的介面而已，但現在已證實是真正的Linux核心了。

Fabrice Bellard是誰應該不用介紹了，是ffmpeg、QEMU的原創人，高中時就開發出LZEXE這個壓縮軟體，不但是有名的電腦工程師，也是有名的數學家，這邊可以看到Fabrice Bellard的維基介紹。

這個用Javascript寫出來的Linux不但可以執行，更可以用來學習Linux的指令，如vi等。大家就到

http://bellard.org/

到這邊來玩玩吧！

Reference:
http://vaemon.com/article/1363.html
http://www.softwarequalityconnection.com/2011/03/fabrice-bellard-portrait-of-a-superproductive-programmer/

2011-10-27T18:51:00.000-07:00

不得不說，WP7開發的資料真的是太少了，國內有句話叫「天下文章一大抄」，查Application.GetResourceStream的用法，找遍了整個網絡，無非就那一兩篇，而且寫得還不完整，包括微軟官方的例子。在花了近半天的時間後，終於解決問題。

我們可以預先把程序中用到的資源，如圖片，音樂等放入項目中，打包進XAP文檔，需要的時候再從中取用。下面就說說具體實現方法。

第一步，把資料存進項目。
1、右鍵點擊項目名稱－新增－新建資料夾，這裡文件夾名以 Images 為例，把需要的圖片拖進來，當然你也可以不建，直接把圖片拖到根目錄底下。
2、選中剛剛拖進去的圖片，看右下角的屬性標籤，如果沒有，右鍵點圖片，選屬性，確認圖片屬性中的建置動作為 Resource。

第二步，程式呼叫。

1	System.IO.Stream src = Application.GetResourceStream(new Uri("/PhoneAppX;component/Images/abc.png", UriKind.Relative)).Stream;

關鍵在 Uri 的格式，PhoneAppX 是項目名稱，component 是固定路徑，Images/abc.jpg 才是圖片資源相對路徑，得到的是 Stream，在微軟官方的例子中，使用下面的方法來轉換成圖片：

            BitmapImage bi = new BitmapImage();
            bi.SetSource(src);
            Image img = new Image();
            img.Source = bi;

網路上的文章基本上都沒寫第一步，常常就卡在這裡，新增圖片還好，但是屬性的建置動作沒設好或改成其他屬性，導致程式在 Run 的時候常常丟出 Exception！

Reference To: http://www.pocketdigi.com/20110925/498.html

「sudo」 for Windows PowerShell

2011-09-12T22:25:00.000-07:00

相信有許多 Unix-like 的愛用者，
對於 sudo 帶來的便利性及安全性，
都有很高的依賴性及倚靠性，
在 Windows 的世界，雖然有個「以系統管理員身分執行」的玩意兒，
但是在習慣使用文字介面如 cmd, vim, PowerShell 的人們來說，
倘若遇到需要系統管理員權限的設定檔或文字檔，
往往就是一句「XXX」之後，還要到開始功能表尋找到 cmd 或 PowerShell，
然後再用滑鼠點右鍵選擇「以系統管理員身分執行」，然後再 cd 到剛剛的資料夾，再用編輯器開啟、編輯、blah blah....

一來一往，往往費神又費時，
今天介紹在 PowerShell 使用時，
可以輸入 Unix-like 中的 sudo (或使用者自己取)
後面再帶 vim 或 notepad 指令，接著被修改的設定檔或文字檔，
便可以系統管理員權限開啟該設定檔或文字檔，以便進行編修！

一、首先「以系統管理員身分執行」開啟 PowerShell，
預設沒錯的話，您會在您的家目錄，如：C:\Users\XXXXXXX

二、輸入指令以便新增 scripts 資料夾：

New-Item -ItemType directory $HOME\Documents\Scripts

三、使用編輯器如 vim 或 notepad 開啟 PowerShell 之 Profile 檔：
(預設為 WindowsPowerShell\Microsoft.PowerShell_profile.ps1)

notepad.exe $PROFILE

四、新增如下文字於該檔中：

New-PSDrive -name script -PSProvider FileSystem -Root $HOME\Documents\Scripts

五、存檔並離開。

六、重啟你的 PowerShell ，你將發現上面所新增的資料夾被 mount 起來，可以繼續進行：

cd script:

七、進入 script 槽後，用慣用的編輯器開啟新增 sudo.ps1 script檔：

notepad.exe sudo.ps1

八、加入 sudo script 如下：


param(

        [switch]$ps,            # Switch for running args as powershell script

        [string]$file,             # Script/Program to run

        [string]$arguments = $args # Arguments to program/script

     )



# Find our powershell full path

$powershell = (get-command powershell).definition



# Get current directory

$dir = get-location



#If we're running this as a elevated powershell script

if ($ps){



        # Script verification

        if([System.IO.File]::Exists("$(get-location)\$file")) {



                # Set the $script to full path of the ps script

                $script = (get-childitem $file).fullname

        }



        # Create a powershell process

        $psi = new-object System.Diagnostics.ProcessStartInfo $powershell



        $psi.WorkingDirectory = Get-Location



        # Combine the script and its arguments

        $sArgs = $script + " " + $arguments



        # Set the arguments to be the ps script and it's arguments

        $psi.Arguments = "-noexit -command set-location $dir; $sArgs"



        # Magic to run as elevated

        $psi.Verb = "runas";

}



# We're running something other than a powershells script

else {



        # File verification

        if([System.IO.File]::Exists("$(get-location)\$file")) {



                # Get full path

                $file = (get-childitem $file).fullname

        }



        # Same as above, create proccess/working directory/arguments/runas

        $psi = new-object System.Diagnostics.ProcessStartInfo $file

        $psi.Arguments = $arguments

        $psi.Verb = "runas"

}



# Start the process

[System.Diagnostics.Process]::Start($psi)

九、存檔並離開！

十、再次開啟 PowerShell 的 Profile 設定檔：

notepad.exe $PROFILE

十一、新增關聯指令：

New-Alias -Name sudo 'script:\sudo.ps1'

注意這裡的紅色字 sudo 可以改成任何你想要的字，只要不跟內建指令撞名即可！

十二、重啟 PowerShell，你可以使用：

sudo notepad C:\Windows\System32\drivers\etc\hosts

或

sudo vim $PROFILE

就會以系統管理員權限開啟，當然 Windows 的 UAC 會開啟並問你是或否，此時按「是」，
便會開啟具有系統管理員權限的視窗了！

Reference To: http://techha.us/2010/05/sudo-for-powershell/
http://www.ainotenshi.org/710/%E2%80%98sudo%E2%80%99-for-powershell-sorta

Visual Studio 2010 授權修改

2011-09-06T18:51:00.001-07:00

參見以下步驟：

32位的系統中，修改以下登錄表鍵值

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VisualStudio\10.0\Registration\UserName

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\
RegisteredOrganization

64位系統，修改以下登錄表鍵值

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\
VisualStudio\10.0\Registration\UserName

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\
Windows NT\CurrentVersion\RegisteredOrganization

改到此步，在 Visual Studio 的關於窗口中，授權給的信息已經更改，但是 Splash Screen的畫面還是沒有改，還需接下來操作

執行 devenv.exe /setup

Installing PostgreSQL 9.0 on Ubuntu (11.04) using PPA

2011-08-24T19:27:00.001-07:00

The version of default PostgreSQL in the latest Ubuntu (11.04) is still 8.4.8.
So I decided to install 9.0 version when I found there is a PPA (Personal Package Archives) for it. (I have no previous version of PostgreSQL in this Ubuntu PC.)

1. Resources.
PostgreSQL PPA: https://launchpad.net/~pitti/+archive/postgresql

2. Add PPA repository to my Ubuntu.



$ sudo add-apt-repository ppa:pitti/postgresql

3. Install PostgreSQL 9.0



$ sudo apt-get update

$ sudo apt-get install postgresql

4. Check the installation [updated 2011-07-24]



$ locate postgresql  # check the locations of postgresql files

...

/etc/init.d/postgresql                      # server daemon

/etc/logrotate.d/postgresql-common

/etc/postgresql/9.0

/etc/postgresql/9.0/main                    # directory for config files

/etc/postgresql/9.0/main/environment

/etc/postgresql/9.0/main/pg_ctl.conf

/etc/postgresql/9.0/main/pg_hba.conf

/etc/postgresql/9.0/main/pg_ident.conf

/etc/postgresql/9.0/main/postgresql.conf

/etc/postgresql/9.0/main/start.conf

...

/usr/lib/postgresql                          # server apps

/usr/lib/postgresql/9.0

/usr/lib/postgresql/9.0/bin

/usr/lib/postgresql/9.0/lib

...

/var/lib/postgresql                          # home directory for root user postgres

/var/lib/postgresql/9.0

/var/lib/postgresql/9.0/main                 # I will create error log directory (pg_log) here

/var/lib/update-rc.d/postgresql

/var/log/postgresql

/var/log/postgresql/postgresql-9.0-main.log

/var/log/postgresql/postgresql-9.0-main.log.1

...



$ psql -V             # check psql version

psql (PostgreSQL) 9.0.4



$ finger postgres     # check if user postgres is created

Login: postgres          Name: PostgreSQL administrator

Directory: /var/lib/postgresql       Shell: /bin/bash

Never logged in.

No mail.

No Plan.



$ su postgres          # switch user to postgres

$ psql                 # launch psql as postgres and check the server version

psql (9.0.4)



postgres=# select version();

-----------------------------------------------------------------------------------------------------

PostgreSQL 9.0.4 on i686-pc-linux-gnu, compiled by GCC gcc-4.5.real (Ubuntu/Linaro 4.5.2-8ubuntu4) 4.5.2, 32-bit

5. Setup Root User 'posrgres'
The installer has created a unix user postgres without a password. So first I give a (unix) password to this special user. The user postgress is a root user (database administrator) of PostgreSQL Server but without a (PostgreSQL) password. So I give it one here as well.



$ sudo passwd postgres # give the postgres user a (unix) password

$ su postgres           # switch to the user postgres

$ psql                   # launch psql to give postgres PostgreSQL passord

postgres=# alter user postgres with password 'secret';  # new password for postgres 

ALTER ROLE

postgres=# \q            # quit psql

$ exit                   # exit from user 'postgres'

exit

6.Configure PostgreSQL Server
I want to make some changes to server config.

Make backup copies of config files.



$ su postgres    # switch to the user postgres

$ cd /etc/postgresql/9.0/main

$ ls -la

...

-rw-r----- 1 postgres postgres  4108 2011-07-02 19:54 pg_hba.conf

-rw-r--r-- 1 postgres postgres 18064 2011-07-02 19:54 postgresql.conf

...



postgres@ubuntu-pc:/etc/postgresql/9.0/main$ cp pg_hba.conf pg_hba.conf.bak.original

postgres@ubuntu-pc:/etc/postgresql/9.0/main$ cp postgresql.conf postgresql.conf.bak.original



postgres@ubuntu-pc:/etc/postgresql/9.0/main$ ls -la

...

-rw-r----- 1 postgres postgres  4108 2011-07-02 19:54 pg_hba.conf

-r-r----- 1 postgres postgres  4108 2011-07-03 18:33 pg_hba.conf.bak.original

-rw-r--r-- 1 postgres postgres 18064 2011-07-02 19:54 postgresql.conf

-rw-r--r-- 1 postgres postgres 18064 2011-07-03 18:33 postgresql.conf.bak.original

...

Make changes to pg_hba.config (authetification methods).
host all all 127.0.0.1/32 trust # md5 -> trust

Make changes to postgresql.conf for error log.



#------------------------------------------------------------------------------

# ERROR REPORTING AND LOGGING

#------------------------------------------------------------------------------

log_destination = 'stderr'  # 2011.07.04 - enabled

logging_collector = on   # 2011.07.04 - enabled and turned on

log_directory = 'pg_log'  # 2011.07.04 - enabled. I will create this folder (see below).

log_filename = 'postgresql-%Y-%m-%d_%H%M%S.log' # 2011.07.04 - enabled

log_truncate_on_rotation = off  # 2011.07.04 - enabled and keep it off

log_rotation_age = 1d   # 2011.07.04 - enabled

log_rotation_size = 10MB  # 2011.07.04 - enabled

Create a log directory as specified in the config above.[updated on 2011-07-24]



$ su postgres         # switch to postgres user

$ cd ~/9.0/main/      # /var/postgresql/9.0/main

$ mkdir pg_log        # create a new log directory as specified in the config file above

$ ls -F               # confirm the new directory 'pg_log'

PG_VERSION  pg_log/ ...

$ exit

7. Restart the server [new]
I have to restart the server to use new configurations.



$ sudo /etc/init.d/postgresql restart

* Restarting PostgreSQL 9.0 database server 

$ sudo /etc/init.d/postgresql status

Running clusters: 9.0/main

8. Check the new log. [new]
Now I should have a new log generated.



$ sudo ls /var/lib/postgresql/9.0/main/pg_log

postgresql-2011-07-23_135126.log

9. Finally Install pgAdmin III (GUI tool for PostgreSQL) [new]
Since the same PPA repository (ppa:pitti/postgresql) also contains the latest pgAdmin III, I can install it with a simple apt-get command.



$ sudo apt-get install pgadmin3   # install the latest pgAdminIII

$ pgadmin3                        # launch it

It is version 1.12.2.

Reference To:http://socrateos.blogspot.com/2011/07/installing-postgresql-90-on-ubuntu-1104.html

Install GUI in Ubuntu Server

2011-08-24T19:19:00.000-07:00

If you are a new user and not familiar with command prompt you can install GUI for your ubuntu LAMP server using the 2 options

1) Install desktop Environment

2) Install Webmin

1) Install desktop Environment

First you nee to make sure you have enabled Universe and multiverse repositories in /etc/apt/sources.list file once you have enable you need to use the following command to install GUI

sudo apt-get update

sudo apt-get install ubuntu-desktop

The above command will install GNOME desktop

If you wan to install a graphical desktop manager without some of the desktop addons like Evolution and OpenOffice, but continue to use the server flavor kernel use the following command

sudo aptitude install --without-recommends ubuntu-desktop

If you want to install light weight desktop install xfce using the following command

sudo apt-get install xubuntu-desktop

If you want to install KDE desktop use the following command

sudo apt-get install kubuntu-desktop

2) Install Webmin in Ubuntu

Webmin is a web-based interface for system administration for Unix. Using any modern web browser, you can setup user accounts, Apache, DNS, file sharing and much more. Webmin removes the need to manually edit Unix configuration files like /etc/passwd, and lets you manage a system from the console or remotely.Currently There is no Webmin package in the Ubuntu repositories.This tutorial will explain how to Install Webmin in Ubuntu Jaunty

You can install webmin for your server web interface to configure apache2,mysql,FTp servers and many more.Now we will see how to install webmin in Ubuntu 9.04

Preparing your system

First you need to install the following packages

sudo aptitude install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl

Now download the latest webmin using the following command or from here

wget http://prdownloads.sourceforge.net/webadmin/webmin_1.470_all.deb

Now we have webmin_1.470_all.deb package install this package using the following command

sudo dpkg -i webmin_1.470_all.deb

This will complete the installation.

Using the Webmin APT repository

If you like to install and update Webmin via APT, edit the /etc/apt/sources.list file on your system

sudo vi /etc/apt/sources.list

add the line

deb http://download.webmin.com/download/repository sarge contrib

Save and exit the file

You should also fetch and install my GPG key with which the repository is signed, with the commands : cd /root

wget http://www.webmin.com/jcameron-key.asc

sudo apt-key add jcameron-key.asc

You will now be able to install with the commands

sudo apt-get update

sudo apt-get install webmin

All dependencies should be resolved automatically.

Ubuntu in particular don’t allow logins by the root user by default. However, the user created at system installation time can use sudo to switch to root. Webmin will allow any user who has this sudo capability to login with full root privileges.

Now you need to open your web browser and enter the following

https://your-server-ip:10000/

Now you should see similar to the following Screen

After login if you want to configure Apache,Mysql server you need to click on Servers on your lefthand side you should many servers are ready to configure

This is very Easy to configure most of the servers and Enjoy your new Ubuntu Jaunty LAMP Server.

Reference To:http://www.ubuntugeek.com/install-gui-in-ubuntu-server.html

設定 Npgsql .Net Data Provider

2011-08-24T00:24:00.000-07:00

Npgsql Design time support preview available for download!

UPDATE2: For some reason, Blogger lost the original post. I had to republish it.

UPDATE: Jerónimo told me that you must use the Npgsql version which is inside the zip file in order to make it work.

After so much time (more than I wanted it to take) Npgsql finally has a initial design time support for Visual Studio!

This work was done by Jerónimo Milea. Jerónimo let me know he was working on DDEX support on this thread after I said I was working on DDEX support for Npgsql.

He sent me his working copy and I started to play with it. Note that as a preview version many things may not work ok and we wanted you to provide us feedback so we can fix any bugs.

You can download the project file from our downloads page.

Design time support is provided as a zip file containing support code as well as a copy of Npgsql project file. So, everything you need to start working with design time support is already packaged for you.

When you unzip the file, you will have three folders and a project file. Open up this project file in Visual Studio 2010.

There are three projects. The Npgsql.Provider project is there for historical reasons, Jerónimo told me. We will clean it up in another release. The main project is the Npgsql.Provider2. Set it up as your startup project. Right Click -> Set up as Startup Project.

After that, tell Visual Studio to build all projects. After everything is compiled ok, there are still some other steps to be done:

Install Npgsql.dll and Mono.Security.dll to GAC.
Add Npgsql as a provider factory in machine.config

Install Npgsql.dll and Mono.Security.dll to GAC

Go to the Npgsql2\bin\debug4\ folder and add Npgsql.dll and Mono.Security.dll to GAC:

  gacutil -i Npgsql.dll
  gacutil -i Mono.Security.dll

Note that you will need to start a Visual Studio Command Prompt so command line tools are available to you. This shortcut is inside Visual Studio 2010 programs folder in the Visual Studio Tools subfolder.

Add Npgsql as a provider factory in machine.config

In the machine.config file, located at C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config you have to add following line:

This line goes inside the DbProviderFactories section.

Playing with Design Time support project

After config Npgsql in gac and machine.config, it's time to run the project.

As this project will work inside VS.Net, you will need to debug VS.Net itself in order to have the project running inside it. In order to do that, you have to specify VS.net as the debug target. To do that, open Npgsql.Designer2 project properties and in the Debug tab, check the value of "Start external program" edit text. It is set to the path of devenv.exe. Note that it is the path of (x86) Program Files folder. This is ok if you are using a 64-bits windows installation. If you are using a 32-bits install (as I do), you just have to remove the (x86) from the path and you are set.

After setting everything up, you can hit F5 to start the project ( you specified Npgsql.Designer2 as your startup project, right?). A new VS.Net will show up and your first VS.Net will be attached to it in debug mode. Now, comes a very important step you have to make: Inside Npgsql.Designer2 folder, there is a file called NpgsqlProvider.gen.reg. You have to merge this file to your registry every time you start VS.Net to debug the project. This is needed because VS.Net as it is started by the project, has a command line option which makes it use an alternate registry tree which is cleaned up every time this VS.net is started. This reg file has the settings to register Npgsql.Designer inside VS.Net.
Reference To: http://fxjr.blogspot.com/2011/05/npgsql-design-time-support-preview.html

PostgreSQL 初始後建立 User

2011-08-23T19:50:00.000-07:00

登入
su – postgres

切換至 template1
psql template1

建立USER
create user 帳號 with password '密碼' createdb createuser;

如此就已新增一個USER並擁有新增DB及USER的權限...

如需修改USER密碼的話：
alter user 使用者 with password '密碼';

phpPgAdmin 預設是不允許 postgres Login ...
所以最好先 create 一個 user 再 Login，方式請參考以上

如想要允許使用 postgres Login，務必先修改 postgres 的密碼 ( postgres 密碼不得為空 )

再修改
vi phpPgAdmin/conf/config.inc.php

Find...
$conf['extra_login_security'] = true;

Edit...
$conf['extra_login_security'] = false;

如此便可用 postgres Login !!!

如需匯入資料請用下列指令

登入
su – postgres

如無DB，請先新增DB以便匯入
createdb SOMENEWDB

匯入格式
psql -h {connected-server} -U {Username} -W -e {DB_Name} < {DB_dump_file}

EX：
psql –U admin –e SOMENEWDB <>

請先將 xxx.sql 複製到 PostgreSQL 所在目錄下 (/usr/local/pgsql)，以便快速讀取
輸入以上指令後，便可將資料匯入指定的DB中...

如欲使用 pgAdmin III 工具連線，請修改

/usr/local/pgsql/postgresql.conf

將 tcpip_socket=false 設成 true

模擬 TOP 在 Windows 的 Powershell

2011-08-22T20:03:00.000-07:00

Unix-like 系列大家耳熟能詳的 TOP command，
到了 Windows Powershell 存在嗎？

當然是不存在，不然幹嘛模擬XD
跟馬蓋先一樣，就 Powershell 現有的相關指令：Get-Process，來作延伸。

Get-Process，顧名思義，就是要 Get 目前的 Processes，
為了滿足從 Unix-like 過來的捧油們，也可以打 ps 來呼叫之！

直接來一下模擬 TOP Command：













while (1) { ps | sort -desc cpu | select -first 30; sleep -seconds 2; cls }

首先，while 就不用提了，就是迴圈，
然後裡頭呼叫了 ps 再透過 sort 指令依照 CPU 用量排序，所以這邊除了 CPU，也可以任君修改成需要的排序；再來透過 select 指令挑選頭 30 個 Processes，好比 Unix-like 的 head 用法；而後就是 sleep 指令，讓其 2 秒更新一次，最後再把螢幕清掉。

收工

Windows 7「此電腦上的安全性原則已設定為顯示有關最後一個互動式登入的資訊。Windows 無法抓取此資訊。請連絡您的網路系統管理員，以取得協助。」解決方法

2011-08-22T00:47:00.000-07:00

通常會發生這種狀況可能是您的 Windows 7 螢幕保護程式啟動後自動鎖定電腦，或使用者自行鎖定電腦( by Win+L 或開始選單→關機→鎖定 )後，欲輸入帳號密碼已解除工作站鎖定時，發生「此電腦上的安全性原則已設定為顯示有關最後一個互動式登入的資訊。Windows 無法抓取此資訊。請連絡您的網路系統管理員，以取得協助。」的殘念狀態。

首先，請先確認您的 Windows 7 是否有加入網域(廢話！沒加入網域哪會遇到這種鬼事)，再來請確認貴公司或貴單位之網域是否為 Windows Server 2008 等級，倘若不是，請開啟您的控制台，並於右上方搜尋「原則」，做人不能沒原則，做電腦更是要有原則，進入「編輯群組原則」後，依序進入：

電腦設定→系統管理範本→Windows 元件→Windows 登入選項→於使用者登入期間顯示有關上次登入的資訊

不管它是尚未設定還是已啟用，給他關掉！

事後再鎖定貴電腦，您應該就可以看得到藍天了XD