The Sehmer Blog

IIS7 Add .Net 4.0 App Script

2013-02-12T11:02:00.003-06:00

We have many IIS7 web applications. Typically, these applications are distributed over many load balanced nodes including AWS EC2. We also have different environments for each node such as dev, alpha, beta and production. So the consistent setup and elimination of variability for each server is important.

Below is an example of a simple IIS7 .Net 4.0 framework web application setup script that we use to enforce consistency. It also saves time.

Do not use the script as is, it is provided as an example only.

-----------------------iisAddSite.cmd

set path=%path%;%windir%\SysWOW64\inetsrv
set varIISApp=MyWebSiteName
set varIISId=4
appcmd add apppool /name:%varIISApp% /managedRuntimeVersion:v4.0 /managedPipelineMode:Integrated
appcmd set config /section:applicationPools /[name='%varIISApp%'].processModel.identityType:LocalService
appcmd set config /section:applicationPools /[name='%varIISApp%'].processModel.maxProcesses:2
appcmd add site /name:"%varIISApp%" /id:%varIISId% /bindings:http/*:80: /physicalPath:"C:\Program Files\Terso Solutions\%varIISApp%"
appcmd set app %varIISApp%/ /applicationPool:%varIISApp%
appcmd start sites %varIISApp%

UPDATE: Amazon EC2 Daily Snapshot Scripts for Windows

2013-02-12T09:00:00.002-06:00

NOTE: This is an update to an original post that I made April 2011 which separates snap deletes from snapping due to an improper exit errorlevel in the the AWS shell commands.

Amazon has great shell command support for all Amazon Web Services including EC2. Unfortunately, all the good documented examples are for Linux only. Below are Windows command (batch) script I created that will create a snapshot of all available volumes and delete/purge previous snapshots from the same day of week. Prerequisites are the EC2 command tools from Amazon and Java runtime.

The purge script should be executed before the snapshot script to remove the snapshots from the previous week. Executing the scripts in the reverse order will purge the snapshots you just made.

----------------------------awsPurgeSnaps.cmd

@echo off

:: Java home dorectory just under the bin for java.exe
set JAVA_HOME="C:\Program Files\Java\jre6"

:: Path for AWS home directory
set AWS_HOME=E:\AWS

:: Path to Primary Key and Certificate retrieved from AWS
set EC2_PRIVATE_KEY=%AWS_HOME%\(pk file).pem
set EC2_CERT=%AWS_HOME%\(cer file).pem

:: Path to EC2 API, subfolders of bin and lib
set EC2_HOME=%AWS_HOME%\ec2-api
set PATH=%PATH%;%EC2_HOME%\bin

:: Path to ELB API, subfolders of bin and lib
set AWS_ELB_HOME=%AWS_HOME%\elb-api
set PATH=%PATH%;%AWS_ELB_HOME%\bin

:: Set today's day of week parameter
for /F "tokens=1 delims=/ " %%a in ('DATE/T') do set dateDOW=%%a

:: Create a file with all scheduled snapshots
:: ec2-describe-snapshots|find /i "%dateDOW%: Weekly Backup for">%AWS_HOME%\Working\SnapshotsDOW.txt

:: Delete snapshots for older backups
for /F "tokens=2" %%i in (%AWS_HOME%\Working\SnapshotsDOW.txt) do ec2-delete-snapshot %%i

----------------------------awsSnapshots.cmd

@echo off

:: Java home dorectory just under the bin for java.exe
set JAVA_HOME="C:\Program Files\Java\jre6"

:: Path for AWS home directory
set AWS_HOME=E:\AWS

:: Path to Primary Key and Certificate retrieved from AWS
set EC2_PRIVATE_KEY=%AWS_HOME%\(pk file).pem
set EC2_CERT=%AWS_HOME%\(cer file).pem

:: Path to EC2 API, subfolders of bin and lib
set EC2_HOME=%AWS_HOME%\ec2-api
set PATH=%PATH%;%EC2_HOME%\bin

:: Path to ELB API, subfolders of bin and lib
set AWS_ELB_HOME=%AWS_HOME%\elb-api
set PATH=%PATH%;%AWS_ELB_HOME%\bin

:: Set today's day of week parameter
for /F "tokens=1 delims=/ " %%a in ('DATE/T') do set dateDOW=%%a

:: Create a file with all attached volumes
ec2-describe-volumes|find /i "attached">%AWS_HOME%\Working\ActiveVolumes.txt

:: Create a file with all instances
ec2-describe-instances|find /i "TAG"|find /i "Name">%AWS_HOME%\Working\InstanceNames.txt

:: Create a file with all scheduled snapshots
ec2-describe-snapshots|find /i "%dateDOW%: Weekly Backup for">%AWS_HOME%\Working\SnapshotsDOW.txt

:: Create snapshots of all attached volumes
for /F "tokens=2,3 delims= " %%d IN (%AWS_HOME%\Working\ActiveVolumes.txt) do for /F "tokens=3,5* delims= " %%a IN (%AWS_HOME%\Working\InstanceNames.txt) do if %%a EQU %%e ec2-create-snapshot %%d -d "%dateDOW%: Weekly Backup for %%b (VolID:%%d InstID:%%e)"

Jetstream RFID

2013-02-12T08:28:00.000-06:00

After two years of private operation, Terso Solutions launched their RFID API ReST based web service platform publicly. If you are a developer and need to add RFID to your software, check out Jetstream.

Black Viper Windows Service Script

2012-07-16T17:42:00.001-05:00

We have many Windows servers at AWS that are not members of a domain. To reduce resources and improve security, we disable every non-essential service. An old but reliable resource to determine what you need and what you don't need is Black Viper (http://www.blackviper.com). Below is a script that we use to disable non-essential Windows services on AWS for Windows 2008 R2 based on Black Viper's recommendation:

sc config DPS start= disabled
sc config iphlpsvc start= disabled
sc config RemoteRegistry start= disabled
sc config WdiServiceHost start= disabled
sc config wercplsupport start= disabled
sc config RpcLocator start= disabled
sc config SCardSvr start= disabled
sc config SCPolicySvc start= disabled
sc config TBS start= disabled
sc config WcsPlugInService start= disabled
sc config WerSvc start= disabled
sc config FontCache start= disabled
sc config WdiSystemHost start= disabled
sc config cdrom start= demand

Amazon EC2 Daily Snapshot Script for Windows

2011-04-20T09:18:00.003-05:00

Amazon has great shell command support for all Amazon Web Services including EC2. Unfortunately, all the good documented examples are for Linux only. Below is a Windows command (batch) script I created that will create a snapshot of all available volumes and delete/purge previous snapshots from the same day of week. Prerequisites are the EC2 command tools from Amazon and Java runtime.



----awsSnapVolumes.cmd-----



@echo off



 :: Java home directory just under the bin directory for java.exe 

set JAVA_HOME="C:\Program Files\Java\jre6"



 :: Path for your AWS home directory

set AWS_HOME=E:\AWS

 

:: Path to Primary Key and Certificate retrieved from AWS 

set EC2_PRIVATE_KEY=%AWS_HOME%\(pk file).pem 

set EC2_CERT=%AWS_HOME%\(cer file).pem



 :: Path to EC2 API, subfolders of bin and lib 

set EC2_HOME=%AWS_HOME%\ec2-api

set PATH=%PATH%;%EC2_HOME%\bin

  

:: Set today's day of week parameter

for /F "tokens=1 delims=/ " %%a in ('DATE/T') do set dateDOW=%%a

 

:: Create a file with all attached volumes

ec2-describe-volumes|find /i "attached">%AWS_HOME%\Volumes.txt



 :: Create a file with old scheduled snapshots using same day of week parameter

ec2-describe-snapshots|find /i "%dateDOW%: Weekly Backup for">%AWS_HOME%\SnapshotsDOW.txt



 :: Create a file of instances filtering on the instance tag Name

ec2-describe-instances|find /i "TAG"|find /i "Name">%AWS_HOME%\InstanceNames.txt



 :: Create snapshots of all attached volumes

for /F "tokens=2,3 delims= " %%d IN (%AWS_HOME%\Volumes.txt) do for /F "tokens=3,5* delims= " %%a IN (%AWS_HOME%\InstanceNames.txt) do if %%a EQU %%e ec2-create-snapshot %%d -d "%dateDOW%: Weekly Backup for %%b (VolID:%%d InstID:%%e)"

 

:: Delete snapshots for older backups with same day of week parameter

for /F "tokens=2" %%i in (%AWS_HOME%\SnapshotsDOW.txt) do ec2-delete-snapshot %%i



---------------

Installing Fosstrak EPCIS Repository 0.4.2 on Ubuntu 9.10

2010-04-28T11:20:00.001-05:00

We are evaluating Fosstrack EPCIS (http://www.fosstrak.org/epcis/) as an EPC event repository. "Fosstrak EPCIS provides an EPCglobal-certified EPCIS Repository as well as Query and Capture clients." Below is the install sequence I went through to get everything working on Ubuntu 9.10 server.

Install Sun JDK:

sudo apt-get install sun-java6-jdk

Install Maven 2

sudo apt-get install maven2

Install Tomcat (http://www.howtogeek.com/howto/linux/installing-tomcat-6-on-ubuntu/):

wget http://www.fightrice.com/mirrors/apache/tomcat/tomcat-6/v6.0.26/bin/apache-tomcat-6.0.26.tar.gz
tar xvzf apache-tomcat-6.0.26.tar.gz
sudo mv apache-tomcat-6.0.26 /usr/local/tomcat

Configure for auto start:

sudo vi /etc/init.d/tomcat

Add the following:

# Tomcat auto-start
#
# description: Auto-starts tomcat
# processname: tomcat
# pidfile: /var/run/tomcat.pid

export JAVA_HOME=/usr/lib/jvm/java-6-sun

case $1 in
start)
   sh /usr/local/tomcat/bin/startup.sh
   ;;
stop)
   sh /usr/local/tomcat/bin/shutdown.sh
   ;;
restart)
   sh /usr/local/tomcat/bin/shutdown.sh
   sh /usr/local/tomcat/bin/startup.sh
   ;;
esac
exit 0

Finish:

sudo chmod 755 /etc/init.d/tomcat
sudo ln -s /etc/init.d/tomcat /etc/rc1.d/K99tomcat
sudo ln -s /etc/init.d/tomcat /etc/rc2.d/S99tomcat

Install My SQL:

sudo apt-get install mysql-server

Install MySQL Connector JAVA driver:

wget http://mapmap.googlecode.com/files/mysql-connector-java-5.0.8-bin.jar
cp mysql-connector-java-5.0.8-bin.jar /usr/local/tomcat/lib

Install Fosstrack EPCIS Repository

wget http://maven-repository.fosstrak.org/releases/org/fosstrak/epcis/epcis-repository/0.4.2/epcis-repository-0.4.2-bin-with-dependencies.tar.gz
tar xvzf epcis-repository-0.4.2-bin-with-dependencies.tar.gz
cp epcis-repository-0.4.2/epcis-repository-0.4.2.war /usr/local/tomcat/webapps

Start Tomcat:

sudo /etc/init.d/tomcat start

Note: Fosstrack EPCIS war installs the Tomcat files and creates the MySQL database on Tomcat start. Time to test:

http://:8080/epcis-repository-0.4.2/capture

Installing CouchDB on Ubuntu Server 9.10

2010-04-26T13:37:00.002-05:00

I just finished installing CouchDB 0.10.0 on Ubuntu Server 9.10. Below is the install sequence that worked for me. Hopefully, it will help others...

Install prerequisites:

sudo apt-get install automake autoconf libtool subversion-tools help2man sudo apt-get install build-essential erlang libicu38 libicu-dev sudo apt-get install libreadline5-dev checkinstall wget
sudo apt-get build-dep couchdb
sudo apt-get install libmozjs-dev libicu-dev libcurl4-gnutls-dev libtool

Download and extract CouchDB 0.10.0:

cd /tmp
wget http://www.trieuvan.com/apache/couchdb/0.11.0/apache-couchdb-0.11.0.tar.gz
wget http://www.apache.org/dist/couchdb/0.11.0/apache-couchdb-0.11.0.tar.gz.md5
md5sum --check apache-couchdb-0.11.0.tar.gz.md5
tar -zxvf apache-couchdb-0.10.0.tar.gz

Compile and install CouchDB 0.10.0:

cd apache-couchdb-0.10.0
./configure
make
sudo make install

Bind CouchDB to all network interfaces (default is localhost):

sudo vi /etc/couchdb/local.ini

...add after [httpd] (no semicolon)...

bind_address = 0.0.0.0

Configure CouchCB to start automatically:

sudo adduser couchdb sudo mkdir -p /usr/local/var/lib/couchdb sudo chown -R couchdb /usr/local/var/lib/couchdb sudo mkdir -p /usr/local/var/log/couchdb sudo chown -R couchdb /usr/local/var/log/couchdb sudo mkdir -p /usr/local/var/run sudo chown -R couchdb /usr/local/var/run sudo cp /usr/local/etc/init.d/couchdb /etc/init.d/
sudo update-rc.d couchdb defaults sudo /etc/init.d/couchdb start

Test using a web browser:

URL: http:[ip address]:5984
Response: {"couchdb":"Welcome","version":"0.11.0"}

Welcome to the Sehmer Blog

2010-02-26T22:21:00.000-06:00

The Sehmer Blog is a place where Jon, Jeff, and Mark post random bits of knowledge from technology lessons learned from personal experiences. We grew up in Oshkosh, Wisconsin, and all three work in information service fields. Jon is in California working for Cal Poly with primarily enterprise Mac experience. Mark is a manager for an RFID technology startup in Madison, WI. Who knows what Jeff does (lol)!

Woot I got Kerberos to work...

2010-02-26T20:33:00.001-06:00

So after a couple of weeks of messing around with get my Mac OS X Servers to get Kerberos to work on our campus Active Directory. I finally got it to work.

A couple of notes about our environment before I get started. Our public Domain name and our AD domain name is different. (ie Calpoly.edu, and cp-calpoly.edu). In addition you have a user account on Active Directory that allows you to bind end users. In my case I'm the Master of my own OU (Organizational Unit)

To make it work we had to do the following

1. Bind Mac OS X Servers to AD

- Using Directory Utility and bind your server to it. Make sure to make your binding user to the administrators group in the administrators section of the Active Directory Plug-In.

2. Set the Time Server in System Preferences to the Kerberos Server in our case it was the domain controller.

3. Make sure that the Mac OS X Server has the same fqdn (Fully Qualified Domain Name) as it is listed in AD. In my case that was a major issue because our AD is a different domain name that the main campus dns. So i had to have main DNS point to the AD DNS because macs require it for kerberos to work

4. Open the command line and enter in the following command dsconfigad -enable SSO . This makes it so Mac OS X Server will respect Kerberos tickets from Active Directory.

5. Try accessing an AFP Share from a client that is also bound to AD. You must be logged in as a Domain account and given permissions to the Share you want to post.

There is more depth on this I will be covering later but I thought I'd share the things I did to get it to work.