sur5r/blog@NONAME-EV.DE

While trying to build a backport if i3 4.13 for Debian wheezy (currently oldstable), I stumbled across the following problem:


   dh_autoreconf -O--parallel -O--builddirectory=build
configure.ac:132: error: possibly undefined macro: AC_DEFINE
      If this token and others are legitimate, please use m4_pattern_allow.
      See the Autoconf documentation.
autoreconf: /usr/bin/autoconf failed with exit status: 1
dh_autoreconf: autoreconf -f -i returned exit code 1


Digging around the net I found nothing that helped. So I tried building that package manually. After some trial and error, I noticed that autoreconf as of wheezy seems to ignore AC_CONFIG_MACRO_DIR. Calling autoreconf with -i -f -I m4 solved this.

I finally added this to debian/rules:

override_dh_autoreconf:
        dh_autoreconf autoreconf -- -f -i -I m4


As eveybody on the internet seems to be relying on either Keil on Windows or precompiled binaries from unknown sources to generate their checksums I investigated a bit...

Assuming you ran something like this to generate your binary image:

arm-none-eabi-objcopy -v -O binary firmware.elf firmware.bin

The resulting firmware.bin is still lacking the checksum which LPC chips use to check the validity of the user code.

The following command will create a file firmware_out.bin with the checksum applied:

srec_cat firmware.bin -binary -crop 0x0 0x1c -le-checksum-negative 0x1C 4 4 firmware.bin -binary -crop 0x20 -o firmware_out.bin -binary

Finally, minitube has reached Debian unstable. As Flavio notes, it has a direct dependency on the GStreamer backend of phonon and some GStreamer packages: gstreamer-x for Xv support, gstreamer-plugins-bad and gstreamer-ffmpeg for h.264 and AAC support.

At the time of this writing, there are two phonon backends available in Debian: xine and gstreamer.

First versions of my package only depended on the virtual phonon-backend package.

But then, after installing minitube, it will most probably not work because gstreamer-plugins-bad and gstreamer-ffmpeg are missing, if you go the GStreamer way, or libxine1-ffmpeg, which you would need to make the xine backend work with minitube.

After trying both, I chose GStreamer because it worked a lot better than the xine backend. Also, seeking seems to be broken with the xine backend.

If the xine backend improves or if there is user demand, I have to find a way to let the user choose the backend he wants to install. Suggestions for implementing this are welcome.

works with pc87413_wdt.

Just apt-get install watchdog and then:

1. Set pc87413_wdt as the module to be loaded
2. Choose NOT to start the watchdog daemon automatically for now.
3. Uncomment the watchdog-device line in /etc/watchdog.conf.
4. dpkg-reconfigure watchdog
5. Now choose to start the watchdog daemon automatically.
6. /etc/init.d/watchdog start

My CLJ4500 was no longer picking up paper from the normal paper tray (Tray 2).

After some reading on the HP ITRC, I found the paper pickup solenoid (SL2, part number RG5-3245-000CN or RG5-5119-000CN respectively) to be not acting.

For testing, I moved the metal clamp of the solenoid by hand (or rather with a screwdriver) in the exact moment when the printer wanted to pick up paper: Paper was picked up fine. So I removed the solenoid from the printer and tried to make it work using an external power supply. But no luck: It didn't move at all. The opposite was the case: The metal clamp was pulled against the metal nose sticking out of the ground plate (red circle in attached picture).

Removing the solenoid from the ground plate, it was working fine.

Now here's the fix: Wrap a small amount of self-adhesive tape around the metal nose of the ground plate. This seems to prevent the magnetic flow from taking the wrong path (through the ground plate).

The CLJ4500 is working fine since then.

I'm wondering for quite some time now, why there is no simple method the check whether the sum of the volume quotas exceeds the available disk space for each paritition on an AFS fileserver.

I finally wrote the following script:

#!/bin/bash
if [ "$1" == "-h" -o "$1" == "-help" ]; then
  echo "Usage: $0 [-verbose] [-cell <cell name>] [<server>] [<partition> ...]"
  echo Warning: Parameters are positional ATM
fi

if [ "$1" == "-v" -o "$1" == "-verbose" ]; then
  VERBOSE=echo
  shift
else
  VERBOSE=false
fi

if [ "$1" == "-c" -o "$1" == "-cell" ]; then
  shift
  CELL=$1
  shift
else
  CELL=$(fs wsc | sed s/\'//g | awk '{print $6}')
fi

HOSTS=$1
PARTS=$2

[ -z "$HOSTS" ] && HOSTS=$(vos listaddrs -cell $CELL -noauth)

for HOST in $HOSTS; do
  $VERBOSE $HOST

  [ -z "$PARTS" ] && PARTS=$(vos partinfo -server $HOST -cell $CELL -noauth|cut -d / -f 2|cut -d : -f 1|tr \\n \ )

  for PART in $PARTS; do
    VOLUMES=$(vos listvldb -server $HOST -partition $PART -cell $CELL -quiet -noauth -nosort | grep -v "^ " |grep -v ^$ | tr -d \\n )
    PARTSIZE=$(vos partinfo -server $HOST -partition $PART -cell $CELL -noauth | sed 's/.* \([^ ]*\)$/\1/')

    SUM=0
    
    for vol in $VOLUMES; do
      MAXQ=$(vos exa $vol -cell $CELL -noauth | grep MaxQuota | awk '{print $2}')
      SIZE=$(vos exa $vol -cell $CELL -noauth | head -n 1 | awk '{print $4}')
      $VERBOSE $vol \($SIZE/$MAXQ\)
      SUM=$[ $SUM + $(( $SIZE > $MAXQ ? $SIZE : $MAXQ )) ]
    done
    
    echo -n $HOST:$PART $SUM/$PARTSIZE
    if [ $SUM -gt $PARTSIZE ]; then
      echo \ FAILED
    else
      echo \ OK
    fi
  done
done

If you call the script without any arguments, it will check all partitions on all servers in the workstation's cell. You can also specify a cell name with -cell. Anything after that is an optional single server name and an optional list of partitions. Please notice that the parameters are positional at the moment.

Examples:

Check all servers in cell "some.cell":

./afsquotacheck -cell some.cell

Check all partitions on server "bigbox" the workstation's cell:

./afsquotacheck bigbox

Check partitions vicepc and vicepd on server "otherbox" in cell "not.my.cell":

./afsquotacheck -cell not.my.cell otherbox vicepc vicepd

Comments and suggestions for improvement are welcome!

Sometimes there is only a Mediawiki installed inside an Apache VHost and nothing else. Of course you want the URLs to be as short as possible:

http://vhost.domain.tld/My_great_article

I finally reached that with the following in the Apache config

DocumentRoot /var/www/vhost.domain.tld

Alias /wiki /var/lib/mediawiki
Alias /upload /var/www/vhost.domain.tld/upload

RewriteEngine On

RewriteCond %{REQUEST_FILENAME} "^/upload"
RewriteRule ^(.*)$ $1 [PT,L]
RewriteCond %{REQUEST_FILENAME} "^/skins"
RewriteRule ^(.*)$ /wiki/$1 [PT,L]

RewriteRule ^(.*)$ /wiki/index.php/$1 [PT,L,QSA]

and this in LocalSettings.php:

$wgScriptPath = "";
$wgScript = "/index.php";
$wgUsePathInfo = true;
$wgArticlePath = "/$1";

It should be possible to match more real files similar the to the way /upload is handled or using RewriteCond -f or -d.

Comments welcome.

Update:

As MediaWiki nowadays has more than just index.php and to allow arbitrary files inside DocumentRoot, I tuned to rewrite rules as follows:


Alias /wiki /var/lib/mediawiki
Alias /upload /var/www/vhost.domain.tld/upload

RewriteEngine On

RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} -f
RewriteRule ^(.*)$ $1 [PT,L]

RewriteCond /var/lib/mediawiki/%{REQUEST_FILENAME} -f
RewriteRule ^(.*)$ /wiki/$1 [PT,L,QSA]

RewriteRule ^(.*)$ /wiki/index.php/$1 [PT,L,QSA]


LocalSettings.php is the same as above.

Ever wanted to understand how the different chains and tables inside netfilter/IPtables interact?

I just found the following picture: http://www.rigacci.org/wiki/lib/exe/detail.php/doc/appunti/linux/sa/iptables/iptables.png


Local copy

Whoever made it: Thanks a lot!

In case you want to install Kerberos for Windows on Vista, please consider reading
<479BAFEE.4040500@secure-endpoints.com>, maybe via this URL:

Best Practice: Location of Kerberos Configuration Files for use with Vista and Server 2008

Thanks Jeffrey for pointing this out.

Found here:

A brief summary is:

navigate to the following key.

HKEY_LOCAL_MACHINE\
SOFTWARE\
INTEL\
LANDesk\
VirusProtect6\
CurrentVersion\
AdministratorOnly\
Security

In that key make sure the two following values

"LockUnloadServices" and
"UseVPUninstallPassword" are zero.

That takes care of the password asking problem.

Being a bash user I'm sometimes confused by the behaviour of zsh. In most cases, I don't mind. But today it really pissed me off: zsh has the ability to remove the trailing slash after tab-completing directories. In most cases, the slash does not matter. But in some cases (rsync), it does matter whether the slash is there or not.

Long story short: The missing slash made rsync create a subdirectory in the wrong place and I ended up with several gigabytes (2^30 bytes, for those who forgot) in the wrong place.

Yes, dear zsh users out there, this is most probably configurable. But having a space effectively replaced by a backspace and a space reminds me of ANSI escape bombs from DOS...

Some days ago i created a Kerberos principal for a machine here at the university. I thought I typed

kadmin: ank -randkey host/mp-shark3.informatik.uni-mannheim.de

but:

kadmin: listprincs *shark3*
host/m?p-shark3.informatik.uni-mannheim.de@LI5.UNI-MANNHEIM.DE
kadmin:

Obviously, I hit a key I didn't want to hit while type the principal name. Unfortunately, there are no user IDs in Kerberos. The principal name is the only way to refer to a particular principal. My hope was the existence of -glob for delprinc, but that doesn't exist.

Ouch. Now how to get rid of this stupid thing?


kdb5_util dump kerberos.dump.txt
vim kerberos.dump.txt
kdb5_util load kerberos.dump.txt


kdb5_util allows for dumping the principal database to a tabulator separated values file. It contains one principal per line. All I had to do was delete the line with the mistyped principal and load the file back into the KDC.

I just found out, that the WoT/CAP form generators at cacert.org allow to prefill arbitrary fields of the form. I have not yet tested the TTP version but i suspect that it works the same.

Parameters known so far:

General
- date - Date of meeting
- location - Location of meeting
- maxpoints - Maximum allowed points
- format=letter - Generate Letter instead of A4

Applicant
- name - The applicant's name
- dob - The applicant's date of birth
- email - The applicant's eMail address

Assurer
- assurer - The assurer's name

I haven't yet found out the parameters for the Photo ID description and for the number of points allocated.

But this should anyway lead to more readable CAcert forms.

Just in case you ever want the use GRML to restore a backup made using Bacula:

Check the contents of /etc/hosts.{allow,deny}

By default, only incoming ssh connections are allowed. I didn't know that Bacula was using TCP wrappers at all. It took me ~2h to find the problem...

Question: Is anyone still using TCP wrappers for security rules/firewalling?

I'm starting a blog.

Until now I thought I wouldn't need one, but we'll see...

I hope that one or another entry will be useful to someone out there, comments welcome.