Lnxgeek.org Wiki - Freedom of choice, I choose Freedom indexes

indexes:add_trusted_ca

2009-12-21T21:39:43+02:00

For the time being there is no gui way of trusting a certificate in Chrome on Linux. To trust a certificate/CA you must do the following: 1. Install certutil sudo apt-get install libnss3-tools 2. Run certutil certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "domingo.dk" -i domingo.dk.crt

indexes:adding_permanent_static_routes

2010-02-02T13:21:38+02:00

Static routing is the term used to refer to the manual method used to set up routing. An administrator enters routes into the router using configuration commands. This method has the advantage of being predictable, and simple to set up. It is easy to manage in small networks but does not scale well.

indexes:apparmor_and_ubuntu

2010-01-26T17:07:05+02:00

AppArmor is a Linux Security Module implementation of name-based access controls. AppArmor confines individual programs to a set of listed files and posix 1003.1e draft capabilities. AppArmor was first made available to Ubuntu in Ubuntu 7.04 in Universe.

indexes:apt_through_a_proxy_server

2010-06-30T16:11:26+02:00

sudo gedit /etc/apt/apt.conf add the following: ACQUIRE { http::proxy "http://user name:passw@host:port/" } to set up wget: sudo gedit /etc/wgetrc uncomment the line with the http_proxy like this: # You can set the default proxies for Wget to use for http and ftp. # They will override the value in the environment. http_proxy = http://proxy.yoyodyne.com:18023/ #ftp_proxy = http://proxy.yoyodyne.com:18023/ # If you do not want to use proxy at all, set this to off. use_proxy = on

indexes:automatic_backup_via_ftp_with_fsniper

2010-04-16T21:58:12+02:00

Prereq: * A ftp account * Create a local directory you want to synchronize/backup * Create a directory on the ftp server you want to upload the content to Tools: sudo apt-get install fsniper lftp Script: #!/bin/bash trap "rm /tmp/ftpsync.lock" SIGINT SIGTERM if [ -e /tmp/ftpsync.lock ] then echo "ftpsync already running.." exit 2 else touch /tmp/ftpsync.lock lftp domingo.dk -u ftpuser,ftpuserpass << EOF lcd /home/tdd/FtpSync cd FtpSync mirror -R -e quit EOF rm /tmp…

indexes:axel_file_downloader

2010-04-13T20:13:52+02:00

axel is a very fine downloader that does the job just fine. It handles resume and it uses multiple concurrent connections to speed up the download. Install it like this: sudo apt-get install axel Download a file like this: axel http://releases.ubuntu.com/releases/10.04/ubuntu-10.04-beta2-desktop-i386.iso -a

indexes:backup_script_with_rsync

2010-04-09T16:07:37+02:00

You have a client with data on it you would like to make a backup of. You could make a local backup, however the client is mobile so moving the data of it is the best solution. To get this working you need a server with rsync and a ssh server installed. And of course diskspace to keep the data on.

indexes:bind-apparmor

2008-12-31T00:04:26+02:00

bind and chroot Install software: apt-get install bind9 /etc/init.d/bind9 stop /etc/init.d/apparmor stop Change bind settings to make it startup in chroot environment: vim /etc/default/bind9 Change first line to: OPTIONS="-u bind -t /var/lib/named"

indexes:bind-dhcpd-apparmor

2008-12-31T00:10:29+02:00

This is an addition to bind-apparmor and will automatically update bind when dhcp leases has been given out. First check apparmor, mine looks like this: # Last Modified: Mon Oct 6 20:46:31 2008 #include /usr/sbin/named { #include #include #include capability net_bind_service, capability setgid, capability setuid, capability sys_chroot, /usr/sbin/named mr, /var/lib/named/dev/random r, /va…

indexes:building_a_custom_liveusb

2009-02-03T20:45:42+02:00

Download Ubuntu Hardy Heron iso (or whatever version you want). Download [unetbootin-linux-216.zip] (find the newest version here: Format your usb pen with fat32. Make LiveUSB with unetbootin (just unpack unetbootin-linux-216.zip and execute unetbootin as root) or use the usb-builder tool within Ubuntu.

indexes:building_a_custom_liveusb_2

2009-08-06T08:44:19+02:00

This tutorial will show you how to customize and remaster your ubuntu 9.04 jaunty using a jaunty iso file. 1. Create a work directory mkdir jaunty 2. Create the following directoires mkdir jaunty/cdrom mkdir jaunty/tmp mkdir jaunty/root 3. Mount the jaunty iso image on jaunty/cdrom directory

indexes:building_floppy_image_for_lsi_driver

2010-03-09T13:04:39+02:00

When building a virtual machine using LSI disk controller you need to use a floppy image (in Windows XP at least). Get the 32-bit driver [here] or here Extract the zip file to /tmp/lsi Do the following terminal-fu: mkdir /tmp/floppy mkfs.msdos -C /tmp/floppyimagefile.flp 1440 sudo mount -o loop /tmp/floppyimagefile.flp /tmp/floppy sudo cp /tmp/lsi/* /tmp/floppy cd sudo umount /tmp/floppy cp /tmp/floppyimage.flp ~

indexes:ca_lists

2010-09-06T09:19:48+02:00

2.1 Type: BKS Provider: BC Entries: 54 Entry Alias: 29 Creation Date: Sep 3, 2009 9:02:53 PM CEST Type: Trusted Certificate Certificates: 1 Certificate 1 of 1 Version: 3 Subject: CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM Issuer: CN=QuoVadis Root CA 3, O=QuoVadis Limited, C=BM Serial Number: 5C6 Valid From: Nov 24, 2006 8:11:23 PM Valid Until: Nov 24, 2031 8:06:44 PM Public Key: RSA (4,096 bits) Signature Algorithm: SHA1withRSA MD5 Fingerprint: 31:85:3C:62:94:97:63:B9:AA:FD…

indexes:certificate_keystore_tool_-_portecle

2010-09-02T20:37:58+02:00

Cool tool to maintain or create certificate keystores. Get it here: or here: Run it like this: java -jar portecle.jar

indexes:changing_mtu_on_interface

2010-01-26T15:18:15+02:00

To change the MTU of an interface on GNU/Linux, you just need to use ifconfig command to do so, like this for example sudo ifconfig eth0 mtu 1492 To change it permanently on Debian, put it in the /etc/network/interfaces file, where almost all network parameters are found. To do this, just add a line mtu to the definition of your interface and save the file.

indexes:channels.conf_for_denmark

2009-12-23T09:39:20+02:00

DR Ramasjang(DR):714000000:INVERSION_AUTO:BANDWIDTH_8_MHZ:FEC_2_3:FEC_NONE:QAM_64:TRANSMISSION_MODE_8K:GUARD_INTERVAL_1_4:HIERARCHY_NONE:2061:2071:2005 DR K(DR):714000000:INVERSION_AUTO:BANDWIDTH_8_MHZ:FEC_2_3:FEC_NONE:QAM_64:TRANSMISSION_MODE_8K:GUARD_INTERVAL_1_4:HIERARCHY_NONE:2111:2121:2010 FOLKETINGET(Folketinget):714000000:INVERSION_AUTO:BANDWIDTH_8_MHZ:FEC_2_3:FEC_NONE:QAM_64:TRANSMISSION_MODE_8K:GUARD_INTERVAL_1_4:HIERARCHY_NONE:2261:2271:2025 DR HD(DR):714000000:INVERSION_AUTO:BANDWIDTH…

indexes:check_battery_state_with_bash_script

2010-03-04T20:40:36+02:00

The idea with this script is to check whether a server running on a laptop has lost its power source and needs to shutdown nicely. Prerequisite I use the utility called “acpi” to easily draw out the required values. You could also get them directly from /proc but I'm lazy :-) Install acpi with this command:

indexes:community-id

2009-04-17T08:53:21+02:00

sudo apt-get install php-pear php5-dev libmysqlclient15-dev sudo pecl install pdo sudo pecl install pdo_mysql sudo gedit /etc/php5/apache2/php.ini Add these:

indexes:convert_a_tdc_danid_certificate

2009-07-22T08:48:14+02:00

When getting a TDC/DanID certificate it is wrapped inside a html document. This can be a problem for non Windows users. The following command will extract the certificate from the file signatur.html and put it into signatur.pkcs12: awk -F \" '/^pkcs12=/ {print $2}' signatur.html | fold -b -w 64 | openssl enc -d -a > signatur.pkcs12

indexes:convert_between_der_and_pem

2009-06-29T15:17:18+02:00

To convert a certificate from PEM to DER: openssl x509 -in input.crt -inform PEM -out output.crt -outform DER To convert a certificate from DER to PEM: openssl x509 -in input.crt -inform DER -out output.crt -outform PEM To convert a key from PEM to DER:

indexes:convert_pem_format_certificate_to_pkcs12_format_certificate

2007-07-14T22:04:51+02:00

Most browsers, including Internet Explorer, require that client certificates (which includes proxy certificates) be in the PKCS12 format rather than the X509 PEM format. Additionally, Java KeyStores require certificates to be in PKCS12 format. To convert a PEM formatted certificate to PKCS12 format, you need both the certificate and the private key for that certificate. Here's a typical openssl command and the resulting interactive session when converting PEM format to PKCS12 format:

indexes:convert_pkcs12_format_certificate_to_pem_format_certificate

2007-07-14T22:19:54+02:00

If you have a certificate which appears to be in binary format, then you probably have a PKCS12 formatted file. While the PKCS12 format is used by Java KeyStores and Windows XP “Internet Options”, most OpenSSL commands work on PEM formatted certificates and private keys. Fortunately, it is relatively easy to convert one format to the other. Here's a typical openssl command and resulting interactive session when converting PKCS12 format to PEM format:

indexes:create_a_package_list

2008-08-07T12:53:39+02:00

Reinstalling a machine it can be a pain to remember all the packages installed that must be installed again. Here's a dirty description of how to make an install list. Note this is done on a Ubuntu system. Making the list Not all software on the system is taken from the repositories and thus can't be used in the install script. So first find the software that must be excluded from the list.

indexes:create_a_private_key

2007-07-14T22:01:02+02:00

Many OpenSSL commands require reading in a private key. While you can often create of a private key in the course of running the command, you may want to have a single key that you use for multiple commands. To create a private key, use the following openssl command:

indexes:create_a_self-signed_certificate_from_a_certificate_signing_request

2009-03-25T17:25:55+02:00

Once you have created a Certificate Signing Request (CSR), you can create a self-signed certificate from it. A self-signed certificate does not give the security guarantees provided by a certificate signed by a commercial CA. But it will allow you to provide a secure https connection to your web site. Clients will see a warning message stating that your site's identity cannot be verified and thus is not a “trusted site”. Clients have the option of accepting the certificate for the session and al…

indexes:creating_a_local_repository

2008-08-16T22:34:07+02:00

Intro When you build a list for scripting install's you properly end up with deb files in the list that isn't in the repository. This will kind of break the idea of rebuilding your machine automatically. This howto will overcome this with some simple tricks.

indexes:cv

2010-07-19T20:26:37+02:00

Here is my life :-P Areas of Expertise * Linux, AIX, Unix * Windows NT/2000/2003/XP * Postfix * Check Point Firewall-1/VPN-1 4.1/NG/NGX * Check Point SecurePlatform * Nokia Secure Access System (NSAS) * Nokia Appliances * Netscreen * PIX * OpenVPN * Trend Micro Antivirus * F5 BIG-IP LTM, FirePass and WanJet * Token Solutions (RSA, Vasco) * BlueCoat Proxies/MARCH5 * Mobile PIM (DME from Excitor) * IBM Websphere Everyplace Connection Manager * Penetration Te…

indexes:de-base64

2009-06-05T13:33:46+02:00

Perl script to decode a base64 encoded input #!/usr/bin/perl -w use MIME::Base64; print "\n"; foreach (@ARGV) { print decode_base64("$_"); print "\n\n"; } The script take the base64 encoded input as a parameter and output the result. Like this:

indexes:decrypt_a_private_key

2007-07-14T22:02:54+02:00

If you have a private key which is encrypted (meaning that you must enter a pass phrase to use it), you can decrypt the private key for use without a password. A typical openssl command and resulting interactive session is shown here: > openssl rsa -in hostkeySECURE.pem -out hostkeyNOPASSWORD.pem Enter pass phrase for hostkeySECURE.pem: writing RSA key > Here's an explanation of the command line options:

indexes:digest_authentication

2010-03-21T13:06:06+02:00

By inserting this to your virtual host you can protect it with a username and password: AuthName "ProFTPd Administrator" AuthType Digest AuthDigestDomain / AuthDigestProvider file AuthUserFile /etc/digest_pw Require valid-user

indexes:disable_touchpad

2010-03-31T21:27:53+02:00

Very simple, just install: sudo apt-get install gpointing-device-settings Execute: gpointing-device-settings Select TouchPad off. For some reason this doesn't do it or you experience that it re-enables it self, try this: xinput set-int-prop "SynPS/2 Synaptics TouchPad" "Device Enabled" 8 0

indexes:dspam_ham-spam_learning_script

2010-01-07T20:45:42+02:00

This script will go through all mail users in a predefined maildir directory and look for two imap folders: Spam and NotSpam. Mail in the Spam folder will be processed as missed spam and dealt with accordingly by Dspam. The opposite is the case for mail put into NotSpam.

indexes:e1000e

2008-07-28T17:44:04+02:00

For unknown reasons Ubuntu is shipping an ancient intel (e1000) driver that seems to have serious performance problems. Therefor you might want to use the driver shipped by Intel to get rid of ping delays up hole seconds!! Getting the driver Download the driver here:

indexes:encrypt_a_private_key

2007-07-14T22:01:51+02:00

If you have a private key that is not encrypted (for example, it was created with the ”-nodes” command line option), you can encrypt the private key with a password. A typical openssl command and resulting interactive session is shown here: > openssl rsa -des3 -in hostkeyNOPASSWORD.pem -out hostkeySECURE.pem writing RSA key Enter PEM pass phrase: Verifying - Enter PEM pass phrase: > Here's an explanation of the command line options:

indexes:encrypted_disk_partition

2009-06-29T08:15:34+02:00

Quick'n'Dirty how to make a LUKS encrypted disk partition. I'm encrypting the first partition on the disk called hdc. Make luks device: cryptsetup -y --cipher aes --key-size 128 luksFormat /dev/hdc1 If you choose to use sha256 instead, you will get something like this:

indexes:encrypted_usb_storage

2009-01-24T22:49:37+02:00

Start out by identifying your device name. Insert the usb stick and run in a terminal: dmesg The output would be something like this: ........ ........ [17028.141759] usb-storage: device found at 20 [17028.141772] usb-storage: waiting for device to settle before scanning [17033.140314] usb-storage: device scan complete [17033.141276] scsi 9:0:0:0: Direct-Access Flash Disk 5.00 PQ: 0 ANSI: 2 [17033.185463] sd 9:0:0:0: [sdc] 1998848 512-byte hardware sectors (1023 MB) [1…

indexes:exiftool

2009-03-08T22:44:08+02:00

Add an image description to image file picture.jpg: exiftool -imagedescription="Super holiday" picture.jpg

indexes:fail2ban

2009-03-10T17:24:17+02:00

Keeping up with the threads from the Internet is very difficult and time consuming. Therefore the right tools are essential to protect your system and keeping the buggyman out. The highest protection is offered by systems that are pro-active thus protecting from attacks that you not necessarily know anything about. Cutting the attackers off before they can launch mayhem on to you the better your security becomes.

indexes:firefox_cache_in_tmp

2009-10-30T16:46:29+02:00

Type about:config in Firefox's URL bar. Create “browser.cache.disk.parent_directory” in the page that appears. Set its string value to /tmp

indexes:flash_soekris

2009-11-22T13:58:13+02:00

Install lrzsz before starting: $ apt-get install lrzsz I had some trouble using minicom (I didn't understand the instructions properly) so I've made a step-by-step guide - hopefully it saves someone else the troubles I had. You can update Soekris Bios (any model) with Minicom and few steps. Before starting, download the latest available bios from soekris.com and save it in your home directory (minicom's file manager is a bit painful to browse around too much with - having the bin file in y…

indexes:force_into_bios

2009-01-02T10:38:26+02:00

If you need to get into the BIOS and you're not able to do that before the BIOS times out (due to high load), insert the following in you vmx file: bios.forceSetupOnce = "TRUE" You can also extend the timeout period: bios.bootDelay = "5000" This adds 5 seconds to the boot timeout.

indexes:full_disk_encryption

2009-11-06T23:27:47+02:00

Setup partitions There are many ways of using LUKS for disk encryption. I'll use the combination of LUKS and LVM to have one chunk of data (the volume group) which all is encrypted. This way all filesystems I make, including swap, will be encrypted. As this is a laptop I will not venture down all the possibilities that LVM has to offer.

indexes:generate_a_certificate_signing_request

2007-07-14T21:50:54+02:00

In order to get an SSL certificate and key (for use by an httpd server, for example), you must first create a Certificate Signing Request (CSR). The CSR can be sent to a commercial Certificate Authority (CA) which will then return an SSL certificate. Alternatively, you can be your own CA and use the CSR to create a self-signed certificate. Here is a typical openssl command and the resulting interactive session:

indexes:generate_a_self-signed_certificate_from_scratch

2009-03-25T11:23:40+02:00

If you know that you only want a self-signed certificate (not one signed by a Certificate Authority (CA)), you can generate a self-signed certficate without first having to generate a Certificate Signing Request (CSR). A self-signed certificate does not give the security guarantees provided by a certificate signed by a commercial CA. But it will allow you to provide a secure https connection to your web site. Clients will see a warning message stating that your site's identity cannot be verifi…

indexes:generate_new_server_keys

2008-05-14T12:27:17+02:00

This is Ubuntu/Debian centric so it may not work for others: sudo rm /etc/ssh/ssh_host_{dsa,rsa}_key* sudo dpkg-reconfigure -plow openssh-server

indexes:get_all_danish_ip_subenets

2009-10-08T16:54:08+02:00

Get the whole list: wget ftp://ftp.ripe.net/pub/stats/ripencc/delegated-ripencc-latest Parse it with the following script: grep DK.ipv4 delegated-ripencc-latest | awk -F'|' -vOFS=/ '{print $4,32- log($5)/log(2)}' | while read network; do whois --verbose -h whois.ripe.net -T route -x $network >>danske_netblokke 2>&1; sleep 2; done

indexes:getting_wireless_working_on_lenovo_s10

2010-06-25T19:40:06+02:00

MeeGo has shown it self as a valid OS on netbooks and transforming it into what it is all about - building an end-user no-brain appliance. Unfortunately everything isn't as smooth as one could wish for and one issue is the Broadcom wireless chipset. As I own a Lenovo S10e with this devil of a chipset this recipe is based on that device.

indexes:google_chrome_in_ramdisk

2010-08-30T16:51:28+02:00

Add the following to your /etc/fstab file: tmpfs /home/tdd/.cache/google-chrome tmpfs defaults,noatime,mode=1777 0 0 That should mount the directory which hold the Chrome cache files.

indexes:gopenvpn

2009-05-01T08:52:16+02:00

Install Pre-requisites: sudo apt-get install libglib2.0-dev libgtk2.0-dev libglade2-dev libgnome-keyring-dev gksu subversion build-essential autogen automake autoconf intltool openvpn Download Gopenvpn source: svn co https://gopenvpn.svn.sourceforge.net/svnroot/gopenvpn gopenvpn

indexes:how_do_i_connect_to_a_secure_smtp_server

2009-06-24T10:14:51+02:00

Use these commands to verify you secure TLS/SSL smtp servers: # port 25/TLS; use same syntax for port 587 openssl s_client -connect remote.host:25 -starttls smtp # port 465/SSL openssl s_client -connect remote.host:465

indexes:how_do_i_extract_information_from_a_certificate

2009-06-24T10:00:10+02:00

Using the -text option will give you the full breadth of information. openssl x509 -text -in cert.pem Other options will provide more targeted sets of data. # who issued the cert? openssl x509 -noout -in cert.pem -issuer # to whom was it issued? openssl x509 -noout -in cert.pem -subject # for what dates is it valid? openssl x509 -noout -in cert.pem -dates # the above, all at once openssl x509 -noout -in cert.pem -issuer -subject -dates # what is its hash value? openssl x509 -noout -in…

indexes:how_do_i_retrieve_a_remote_certificate

2009-06-24T09:58:28+02:00

This script retrieves the certificate of the site you target: #!/bin/sh # # usage: retrieve-cert.sh remote.host.name [port] # REMHOST=$1 REMPORT=${2:-443} echo |\ openssl s_client -connect ${REMHOST}:${REMPORT} 2>&1 |\ sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p'

indexes:how_do_i_verify_a_certificate

2009-06-24T10:04:36+02:00

Use the verify option to verify certificates. openssl verify cert.pem If your local OpenSSL installation recognizes the certificate or its signing authority and everything else (dates, signing chain, etc.) checks out, you’ll get a simple OK message.

indexes:how_to_press_ctrl-alt-del_in_intrepid_ibex

2008-11-04T17:03:55+02:00

To pass on ctrl-alt-del in Vmware try: Ctrl-Alt-SysRq/Print Scrn

indexes:howtos

2010-09-03T14:59:41+02:00

Here are my howto's. Giv'em a shot and tell me what you think Thomas Mail Mail Server - Suse 9.3 - Building a mailserver with Courier, MySQL and Postfixadmin Postfix Dshield map script - Dshield IP list as Postfix block map Postfix URL Spam block script - Block mails containing known spam URL's

indexes:howtos2

2005-09-26T16:45:10+02:00

indexes:i_o_scheduler_algorithm

2009-10-30T16:41:50+02:00

The I/O scheduler in Linux doesn't favour SSD disks so this little trick should keep a more fluent feeling on the desktop. This hack can be utilized as either a grub setting or through a rc.local script. Pre Grub 2: To set the scheduler in grub append this to the kernel parameters. Find the line looking like this:

indexes:ibex_and_altgr

2008-11-04T17:07:29+02:00

For unknown reasons AltGr stopped working with standard keyboard layout in Intrepid Ibex. I solved the issue by setting this option under keyboard layout:

indexes:ideapad_critical_low_hibernate

2009-04-02T14:07:40+02:00

The default settings for auto hibernation on critical low battery doesn't work on the Lenovo Ideapad S10e. The settings are simply too low and the battery gives up before the hibernation start up. I'm using Ubuntu Jaunty Jackalope Beta on this one but I'm sure this will go for both Hardy and Intrepid as well.

indexes:imagedescription

2009-03-18T20:48:41+02:00

You need to install the following: sudo apt-get install libimage-exiftool-perl Create a bashscript: #!/bin/bash IMAGEDESCRIPTION="" IMAGEDESCRIPTION=`zenity --width=500 --height=50 --title "Image Description" --text "Input text" --entry ` if [ -z $IMAGEDESCRIPTION ]; then exit 0 else FILES=`zenity --file-selection --multiple --separator=" "` fi exiftool -imagedescription=$IMAGEDESCRIPTION $FILES

indexes:import_ca_certificates_for_openssl_to_use

2009-06-24T10:12:49+02:00

Start out by finding the location for the certificates to be stored: openssl version -d OPENSSLDIR: "/usr/lib/ssl" Directories inside OPENSSLDIR is usually a symbolic link to /etc/ssl, but YMMW. Now upload the CA certificates in PEM format into OPENSSLDIR/certs.

indexes:intel_3945_4965_wireless_frequencies

2008-11-14T17:06:09+02:00

Put the following in /etc/modprobe.d/options # Wireless EU channels options cfg80211 ieee80211_regdom=EU or options cfg80211 ieee80211_regdom=JP Now you should be able to see all channels.

indexes:ip120

2008-08-16T22:40:34+02:00

Well, what can I say, no kernel I could think of would boot on the device :-( That was until I thought of using Freebsd instead (the IPSO operating system used on them is based on bsd), wupti and I got some success. Unfortunately my joy only lasted for a couple of minutes. Just after the device booted the first time the device broke! What a downer....

indexes:iptables

2008-07-07T14:49:36+02:00

Clear iptables This will disable iptable firewall rules on a host and make it wide open: iptables -P INPUT ACCEPT iptables -P OUTPUT ACCEPT iptables -P FORWARD ACCEPT iptables -F iptables -X

indexes:isl

2009-09-24T16:09:55+02:00

This is the logo put into the customization: This is the result in the exe file:

indexes:keyboard_messed_up_i_intrepid_ibex

2008-11-05T10:05:34+02:00

To regain your keyboard in Vmware Workstation 6.5 installed on Intrepid Ibex do the following. Create the file ~/.vmware/config with the content: xkeymap.keycode.108 = 0x138 # Alt_R xkeymap.keycode.106 = 0x135 # KP_Divide xkeymap.keycode.104 = 0x11c # KP_Enter xkeymap.keycode.111 = 0x148 # Up xkeymap.keycode.116 = 0x150 # Down xkeymap.keycode.113 = 0x14b # Left xkeymap.keycode.114 = 0x14d # Right xkeymap.keycode.105 = 0x11d # Control_R xkeymap.keycode.118 = 0x152 # Insert xkeymap.keycode.119 …

indexes:loop-devices

2008-07-08T15:34:33+02:00

If you encounter this error while trying to mount a loop device (cd-image and such): $ sudo mount -o loop -t squashfs /media/disk/casper/filesystem.squashfs /home/tdd/No-rsync-stuff/usb mount: could not find any free loop device you have run out of loop devices.

indexes:mailserverhardy

2009-11-22T19:03:16+02:00

This guide is more or less a copy of ”Mail Server - Suse 9.3” but running on Ubuntu Hardy Heron Server. Luckily Ubuntu has a huge repository contain gazillion pieces of software and almost all I need. Apt is your friend 8-) The reduce the power consumption of my server I've replace it with a low-power Soekris Net5501 with a 2,5” harddisk. This move actually took the power consumption from 60W to sweet low 9W - me like :-D

indexes:make_cool_mail_signatures_with_figlet

2010-04-13T20:40:36+02:00

Install figlet: sudo apt-get install figlet Now just run figlet with an appended text string: tdd@tdd-laptop:~$ figlet wiki.lnxgeek.org _ _ _ _ _ __ _(_) | _(_) | |_ __ __ ____ _ ___ ___| | __ ___ _ __ __ _ \ \ /\ / / | |/ / | | | '_ \\ \/ / _` |/ _ \/ _ \ |/ / / _ \| '__/ _` | \ V V /| | <| |_| | | | |> < (_| | __/ __/ < | (_) | | | (_| | \_/\_/ |_|_|\_\_(_)_|_| |_/_/\_\__, |\___|\___|_|\_(_)___/|_| \__,…

indexes:making_a_deb

2008-06-24T13:47:14+02:00

making_a_deb/ making_a_deb/rdesktop-1.6.0 making_a_deb/rdesktop-1.6.0.tar.gz sudo apt-get install build-essential dh-make debhelper devscripts fakeroot cd making_a_deb/rdesktop-1.6.0 dh_make -e domingo@domingo.dk -f ../rdesktop-1.6.0.tar.gz sh ../script cd rdesktop-1.6.0/ debian/control: Source: rdesktop Section: unknown Priority: extra Maintainer: Thomas D Dahlmann Build-Depends: debhelper (>= 5), autotools-dev, libc6-dev (>= 2.7-10ubuntu3 ) Standards-Version: 3.7.2 …

indexes:manual_install_sun_java

2010-04-12T20:55:50+02:00

Note: the terminal commands in this how-to possibly refer to an older version of JRE. When there's a newer version, you can simply adapt the file names in the terminal commands. This how-to has been written for JRE 6 update 18 (32 bit version). 1. Go to the folder opt, with the following command:

indexes:middle_mouse_button_scrolling

2010-06-01T10:15:34+02:00

Using xinput: xinput set-int-prop "TPPS/2 IBM TrackPoint" "Wheel Emulation" 8 1 xinput set-int-prop "TPPS/2 IBM TrackPoint" "Wheel Emulation Button" 8 2 The right way. Make a fdi file in /etc/hal/fdi/policy/mouse-wheel.fdi that looks like this: true 2

indexes:networkmanager_and_device_not_managed

2010-05-18T09:50:02+02:00

The fix to the problem is to change /etc/NetworkManager/nm-system-settings.conf from: [main] plugins=ifupdown,keyfile [ifupdown] managed=false to: [main] plugins=ifupdown,keyfile [ifupdown] managed=true Then run: /etc/init.d/network-manager restart

indexes:npreal2_driver_for_moxa_serial_devices

2010-07-05T17:19:11+02:00

npreal2.spec # This is a spec file for the MOXA Linux Real TTY Driver %define kernel 2.6.18-194.8.1.el5 %define _topdir /root/moxa-rpm %define name npreal2 %define release 2.6.18_194.8.1.el5 %define version 1.16 %define buildroot %{_topdir}/%{name}-%{version}-root %define NPPATH /usr/lib/npreal2 %define driverPath %{NPPATH}/driver %define Moxa_config %{driverPath}/npreal2d.cf %define MXLOADSVR %{driverPath}/mxloadsvr BuildRoot: %{buildroot} Summary: MOXA Linux Real TTY Driver L…

indexes:password_generator

2009-07-28T08:14:19+02:00

Put this little script into you ~/.bashrc and you can run it from anywhere: genpasswd() { local l=$1 [ "$l" == "" ] && l=20 tr -dc A-Za-z0-9_ < /dev/urandom | head -c ${l} | xargs } It takes one parameter which says how long a password you want:

indexes:proftpd

2010-03-21T13:11:54+02:00

Install ProFTPd: sudo apt-get install proftpd-mysql You can find ProFTPd Administrator here: I assume you already has a MySQL server installed. Setup Apache Make the following site by creating the file proftpd in /etc/apache2/sites-available.

indexes:pure-ftpd_upload_script

2009-10-25T12:55:44+02:00

To enable uploadscript set the paramter “CallUploadScript” to “yes”. In Ubuntu this is done by creating a file called “CallUploadScript” with only the word “yes” inside it. Place CallUploadScript into /etc/pure-ftpd/conf. Now edit the file /etc/default/pure-ftpd-common and add/edit the following:

indexes:regex-stuff-mail

2010-02-03T11:51:27+02:00

Extract Email Address The file abc.af looks like this: R1211566974^M F^M T^M The following extracts the two email addresses: cat abc.af |perl -wne'while(/[\w\.\-]+@[\w\.\-]+\w+/g){print "$&\n"}' fettle@333empire.com gwensadler@vp.dk

indexes:remove_m_characters_from_file

2009-06-26T11:01:13+02:00

In VI To remove the ^M characters at the end of all lines in vi, use: :%s/^V^M//g The ^v is a CONTROL-V character and ^m is a CONTROL-M. When you type this, it will look like this: :%s/^M//g In UNIX, you can escape a control character by preceeding it with a CONTROL-V. The :%s is a basic search and replace command in vi. It tells vi to replace the regular expression between the first and second slashes (^M) with the text between the second and third slashes (nothing in this case). The …

indexes:run_a_test_client

2007-07-14T22:27:23+02:00

If you have a server which accepts SSL connections and would like to verify that server, OpenSSL has a command that implements a generic SSL/TLS client which connects to a remote host. It is a useful diagnostic utility when you don't want to use a full-featured client to test the SSL connection.

indexes:run_a_test_server

2010-09-03T14:56:10+02:00

OpenSSL has a command that implements a generic SSL/TLS server which listens for connections on a given port. This is useful if you have a client you want to test with SSL. To run the test server, you need a host certificate and corresponding private key. If you don't have these yet, there are instructions above for generating a self-signed certificate.

indexes:safe_reboot_a_frozen_machine

2008-05-17T00:26:34+02:00

To perform a safe reboot of a Linux computer which has otherwise locked up, the mnemonic “Raising Elephants Is So Utterly Boring”, or simply remembering the word “BUSIER” backwards, is often useful. It stands for Raw (take control of keyboard back from X), tErminate (send SIGTERM to all processes, allowing them to terminate gracefully), kIll (send SIGKILL to all processes, forcing them to terminate immediately), Sync (flush data to disk), Unmount (remount all filesystems read-only), reBoot.…

indexes:sasl-dovecot-postfix-ssl

2009-03-30T19:55:41+02:00

Reason Why I have for some time wanted to get hold of my private emails through my Nokia E90's embedded email client. I used to use the web interface but that sux on a E90. Instead I wanted to look for a way to use the actual email client on the phone. The email client supports POP3 and IMAP which are fine if you're not traversing a public network (aka The Internet). The two protocols are transmitting username and password in cleartext, and whatever email you read will also be move to the phon…

indexes:script

2009-09-04T15:21:39+02:00

When you need to document actions or output from actions from the terminal/console script is your friend. Just type: script followed by your actions. When you've done what you need to do end the recording by typing: exit You now have the file called typescript in the directory you started out from containing all the output from the console.

indexes:securely_delete_files_and_folders_in_nautilus

2010-01-29T10:55:46+02:00

Adding wipe to your Nautilus context menu is useful in making it so that you can securely delete any number of files and/or folders at one time simply by selecting them, right clicking, and clicking wipe. Before you can add wipe to the context menu you must have nautilus-actions and wipe installed. To install them on a Debian based system, at the terminal, simply type:

indexes:serial_console

2008-07-26T20:39:03+02:00

This guide is for Ubuntu Hardy Heron or other systems using upstart instead of sysvinit. If you're unsure about what type of system you're using just look for /etc/inittab. If it's there (and you didn't put it there) then it's a sysvinit system. If not then proceed.

indexes:setting_network_speed_and_duplex

2009-10-22T14:54:16+02:00

To set the interface speed, duplex or auto negotiation on Linux system boot up (make settings permanent), you need edit /etc/sysconfig/network-scripts/ifcfg-eth0 file for eth0 interface. This file used by Red Hat enterprise Linux, Fedora core, Cent Os etc.

indexes:setup_a_simple_pxe_server_for_install_or_rescue

2010-03-04T22:20:28+02:00

This is a short description on howto setup a PXE server. I don't go into much detail, just setting up the framework that will make it work. Having a pixie at the network is very convenient for quick rescue or install. Expanding its functionality and you can set it up to host diskless workstations as well but that's an other howto.

indexes:shutdown_not_powering_off

2008-11-04T22:39:52+02:00

On my system with an Intel chipset all over I have had problems shuting down the machine properly. It never finished the shutdown process and I had to cut the power to the machine. I finally found the solution. Add the following to /etc/default/halt at the end of the file:

indexes:ssl_network_extender_on_lucid_64-bit

2010-08-28T12:50:35+02:00

Make a directory where we can dump our files and install the needed tools for compiling: mkdir ~/faketun cd faketun/ sudo apt-get install build-essential linux-headers-`uname -r` One of the problems with Lucid Lynx and SSL Network Extender (SNX) is that Ubuntu has compiled the tun module into the kernel and SNX expect a kernel module. Therefore we will make a fake module available for SNX. In the faketun create a source file:

indexes:sysctl

2009-02-02T12:06:19+02:00

# 256 KB default performs well experimentally, and is often recommended by ISVs. net.core.rmem_default = 262144 net.core.wmem_default = 262144 # When opening a high-bandwidth connection while the receiving end is under # memory pressure, disk I/O may be necessary to free memory for the socket, # making disk latency the effective latency for the bandwidth-delay product # initially. For 10 Gb ethernet and SCSI, the BDP is about 5 MB. Allow 8 MB # to account for overhead, to ensure that new sock…

indexes:syslog-ng_on_ubuntu

2008-06-23T19:12:37+02:00

Install syslog-ng Changing from syslog to the more flexible syslog-ng isn't that hard. Basically just select the package: apt-get install syslog-ng (this will automatically requirer uninstallation of syslog, klogd, ubuntu-minimal). Modifications to syslog-ng.conf The default syslog-ng.conf needs some changes to make syslog-ng behave as I want it to do. More specific I would like to have mail and iptables logs out of the syslog file and written into there own set of files. Those two daemons …

indexes:test_a_certificate_chain

2010-09-03T15:13:34+02:00

With OpenSSL you start a server instance: openssl s_server -accept 9000 -cert cert.pem -key cert.key -CAfile ca.pem Enter pass phrase for cert.key: Parameter Explanation s_server Start a SSL server -accept 9000 Make the server listen on port 9000 -cert cert.pem Use the certificate in the file cert.pem -key cert.key Use the private key in the file cert.key -CAfile ca.pem Use the CA chain file ca.pem What this command does is start a SSL server instance…

indexes:tips

2008-07-06T17:57:17+02:00

Just some tips'n'tricks for Opera Mini that I've grown very fund of when browsing from my cell phone. Slow startup If you install the application on the external memory stick you will face a tremendous speed penalty when starting up. Instead install it on the internal memory of the phone and surf with speed again :)

indexes:tmp_as_ramdisk

2009-10-30T15:51:17+02:00

As /tmp is cleaned out on every boot why use a (slow) disk to hold it. Many computers today hold enough memory that most of it isn't in use anyway. By creating a ramdisk for it instead you gain speed and less wear and tear on the SSD disk. Edit the /etc/fstab and insert:

indexes:truecrypt_icons

2008-04-26T21:44:09+02:00

[:indexes:truecrypt.icons.tar.gz] Copy the png's into /usr/share/pixmaps as root and run: chmod +r /usr/share/pixmaps/truecrypt* Now you can select the a icon when you create the shortcut.

indexes:upload_file_via_web

2008-08-30T21:55:37+02:00

Want to be able to exchange files between two machines, well that's easy...or is it? Here's a solution doing it through a browser. Droopy You find til script here or [here] How to use Just run the script and you will receive uploaded files in the directory you started the script in.

indexes:verify_a_certificate_matches_a_private_key

2007-07-14T21:58:35+02:00

When you create a certificate, you need a private key during creation. Optionally, you can create the key at the same time as the certificate. In either case, you may one day forget which key was used to create a particular certificate. You can figure this out by comparing the modulus of the certificate with the modulus of the key. Since the certificate is an X.509 PEM formatted file and the private key is an RSA PEM formatted file, you would run the following two commands and compare their outp…

indexes:view_the_contents_of_a_certificate

2007-07-14T21:56:15+02:00

Once you have a certificate, either a self-signed one or one signed by a third-party Certificate Authority (CA), you may want to view the contents of the certificate. If you simply look at the file with a text editor, you will only see a block of PEM-encoded text such as this:

indexes:view_the_contents_of_a_pkcs12_formatted_file

2007-07-14T22:23:02+02:00

Since the PKCS12 format is a binary format, it is difficult to see the contents of the file. You can output the PKCS12 in PEM format and see information about the file with the following openssl command: > openssl pkcs12 -info -nodes -in cred.p12 Enter Import Password: MAC Iteration 2048 MAC verified OK PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2048 Certificate bag Bag Attributes localKeyID: 9B 8A 85 AF 89 9D …

indexes:view_the_contents_of_a_signing_request

2009-09-30T10:10:49+02:00

To view the content of a signing request run the following: openssl req -noout -text -in signrequest.csr Should get you something like this: #>openssl req -noout -text -in signrequest.csr Certificate Request: Data: Version: 0 (0x0) Subject: C=AU, ST=Some-State, L=xx, O=Internet Widgits Pty Ltd, OU=unit, CN=www.some-ssl-site.com Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (2048 bit) Modulu…

indexes:view_the_signer_of_a_certificate

2007-07-14T21:57:21+02:00

(Note: This requires OpenSSL version 0.9.8a or higher.) You may want to find out what Certificate Authority (CA) signed a particular certificate. OpenSSL terms this CA as the “issuer”. You can view the issuer of a certificate, and you can also view the hash of the issuer. The hash is useful if you have named your certificates with their hash value. You could then quickly match the issuer hash with the certificate hash file name. Here's an openssl command to output this information:

indexes:virtualbox_and_usb

2009-01-21T23:10:01+02:00

Insert the following in /etc/fstab none /proc/bus/usb usbfs devgid=123,devmode=666 0 0 UPDATE: To get it working on Intrepid Ibex I added this: #Make USB Work in Sun VirtualBox none /proc/bus/usb usbfs devgid=46,devmode=664 0 0 Execute: sudo mount -a

indexes:vmware_sound_on_hardy_heron

2008-07-04T16:27:08+02:00

Using VMware Workstation 6.x and want to make sound work: Add a sound adapter and configure it as auto detect. Create the .asoundrc file containing: pcm.!default { type plug slave.pcm “dmix” } Now start your session and it should work 8-)

indexes:vmware_tools_on_hardy_heron

2008-04-25T23:02:06+02:00

Getting this error: /tmp/vmware-config0/vmnet-only/bridge.c:35:8: error: "defined" cannot be used as a macro name To fix do the following. Download this version of vmware-any-any: [:indexes:vmware-any-any-update-116-bridge-wireless.tgz] Unpack and run sudo runme.pl.

indexes:watch_filesystem_activity_with_inotify

2010-04-16T21:19:09+02:00

Tools needed: sudo apt-get install inotify-tools Example script: inotifywait -mrq -e create -e modify -e delete -e attrib -e move ~/Maildir | while read file do (notify-send "File updated in Maildir:" "$file"&) done The script will watch the Maildir directory for file changes and send a notification to the desktop.

indexes:wildcard_masks

2010-08-07T21:37:28+02:00

Wildcard Mask Table No. of Network Bits Set to 1 0 1 2 3 4 5 6 7 8 Subnet Mask Binary 00000000 10000000 11000000 11100000 11110000 11111000 11111100 11111110 11111111 Subnet Mask Decimal 0 128 192 224 240 248 252 254 255 Wildcard Mask Binary 11111111 11111110 11111100 11111000 11110000 11100000 11000000 10000000 00000000 Wildcard Mask 255 127 …