<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>HIDEN.org &#187; SysAdmin</title>
	<atom:link href="http://www.hiden.org/category/sysadmin/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.hiden.org</link>
	<description>EDV mit System</description>
	<lastBuildDate>Fri, 19 Aug 2011 16:37:04 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Disable persistent-net.rules in Ubuntu 10.04</title>
		<link>http://www.hiden.org/sysadmin/disable-persistent-net-rules-in-ubuntu-10-04/</link>
		<comments>http://www.hiden.org/sysadmin/disable-persistent-net-rules-in-ubuntu-10-04/#comments</comments>
		<pubDate>Fri, 19 Aug 2011 16:36:02 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[SysAdmin]]></category>

		<guid isPermaLink="false">http://www.hiden.org/?p=450</guid>
		<description><![CDATA[﻿﻿When transfering a harddisk with Ubuntu 10.04 to another machine you&#8217;ll end up without a working network connection. To overcome this you can do: echo -n &#62; /etc/udev/rules.d/70-persistent-net.rules echo -n &#62; /lib/udev/rules.d/75-persistent-net-generator.rules &#160;]]></description>
			<content:encoded><![CDATA[<p>﻿﻿When transfering a harddisk with Ubuntu 10.04 to another machine you&#8217;ll end up without a working network connection.</p>
<p>To overcome this you can do:</p>
<pre>echo -n &gt; /etc/udev/rules.d/70-persistent-net.rules
echo -n &gt; /lib/udev/rules.d/75-persistent-net-generator.rules</pre>
<p>&nbsp;</p>
]]></content:encoded>
			<wfw:commentRss>http://www.hiden.org/sysadmin/disable-persistent-net-rules-in-ubuntu-10-04/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>OpenVPN-GUI on Windows 7</title>
		<link>http://www.hiden.org/sysadmin/openvpn-gui-on-windows-7/</link>
		<comments>http://www.hiden.org/sysadmin/openvpn-gui-on-windows-7/#comments</comments>
		<pubDate>Fri, 05 Aug 2011 09:23:45 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[SysAdmin]]></category>

		<guid isPermaLink="false">http://www.hiden.org/?p=446</guid>
		<description><![CDATA[Installing OpenVPN-GUI (﻿openvpn-2.0.9-gui-1.0.3-install.exe in my case) on Windows 7 Pro 32Bit  works as usual by running the setup process. Although the connection will be established you won&#8217;t have any routes. Download setacl from http://setacl.sourceforge.net run setacl -on openvpnservice -ot srv -actn ace -ace &#8220;n:Benutzer;p:start_stop&#8221; by going to Computer/right click/maintenance/user and groups add the desired user to the [...]]]></description>
			<content:encoded><![CDATA[<p>Installing OpenVPN-GUI (﻿<a href="http://openvpn.se/files/install_packages/openvpn-2.0.9-gui-1.0.3-install.exe">openvpn-2.0.9-gui-1.0.3-install.exe</a> in my case) on Windows 7 Pro 32Bit  works as usual by running the setup process.</p>
<p>Although the connection will be established you won&#8217;t have any routes.</p>
<ol>
<li>Download setacl from http://setacl.sourceforge.net</li>
<li>run setacl -on openvpnservice -ot srv -actn ace -ace &#8220;n:Benutzer;p:start_stop&#8221;</li>
<li>by going to Computer/right click/maintenance/user and groups add the desired user to the group Networkconfiguration-Operators (Netwerkkonfigurations-Operatoren)</li>
<li>in the .ovpn configuration file add the lines<br />
route-method exe<br />
route-delay 2</li>
<li>disable the service openvpngui via msconfig</li>
<li>change the startlink for OpenVPN-GUI to be run as Administratior</li>
</ol>
]]></content:encoded>
			<wfw:commentRss>http://www.hiden.org/sysadmin/openvpn-gui-on-windows-7/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Apache2 and Tomcat 5.5</title>
		<link>http://www.hiden.org/open-jacob/apache2-and-tomcat-5-5/</link>
		<comments>http://www.hiden.org/open-jacob/apache2-and-tomcat-5-5/#comments</comments>
		<pubDate>Sun, 23 Jan 2011 18:44:09 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Open-Jacob]]></category>
		<category><![CDATA[SysAdmin]]></category>

		<guid isPermaLink="false">http://www.hiden.org/?p=433</guid>
		<description><![CDATA[Assuming you have a default installation of Apache 2 and Tomcat 5.5 running on your Ubuntu box. Like apache on http://hiserver and Tomcat on http://hiserver:8080 Now you want to accces i.e. http://hiserver:8080/baula through apache with http://hiserver/baula Install mod_jk with ﻿﻿apt-get install libapache2-mod-jk and enable the module with a2enmod jk create the file /etc/apache2/mods-enabled/jk.conf JkWorkersFile /etc/apache2/workers.properties [...]]]></description>
			<content:encoded><![CDATA[<p>Assuming you have a default installation of Apache 2 and Tomcat 5.5 running on your Ubuntu box.</p>
<p>Like apache on <em>http://hiserver</em> and Tomcat on <em>http://hiserver:8080</em></p>
<p>Now you want to accces i.e. <em>http://hiserver:8080/baula</em> through apache with <em>http://hiserver/baula</em></p>
<p><span id="more-433"></span>Install mod_jk with</p>
<blockquote><p>﻿﻿apt-get install libapache2-mod-jk</p></blockquote>
<p>and enable the module with</p>
<blockquote><p>a2enmod jk</p></blockquote>
<p>create the file <em>/etc/apache2/mods-enabled/jk.conf</em></p>
<blockquote>
<div id="_mcePaste">JkWorkersFile /etc/apache2/workers.properties</div>
<div id="_mcePaste">JkLogFile /var/log/apache2/mod_jk.log</div>
<div id="_mcePaste">JkLogLevel error</div>
</blockquote>
<p>create the file <em>/etc/apache2/workers.properties</em> (change the content to your needs)</p>
<blockquote><p>workers.tomcat_home=/opt/baula/tomcat<br />
workers.java_home=/usr/lib/java<br />
ps=/<br />
worker.list=mainworker<br />
worker.mainworker.type=ajp13<br />
worker.mainworker.port=8009<br />
worker.mainworker.cachesize=20</p></blockquote>
<p>edit i.e.<em> /etc/apache2/sites-available/default </em>and place the following between the &lt;VirtualHost&gt; tags</p>
<blockquote><p>JKMount /baula* mainworker</p></blockquote>
<p>Now restart Apache and <em>http://hiserver/baula</em> should show the content of <em>http://hiserver:<strong>8080</strong>/baula</em></p>
]]></content:encoded>
			<wfw:commentRss>http://www.hiden.org/open-jacob/apache2-and-tomcat-5-5/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>BackupPC Setup</title>
		<link>http://www.hiden.org/sysadmin/backuppc-setup/</link>
		<comments>http://www.hiden.org/sysadmin/backuppc-setup/#comments</comments>
		<pubDate>Tue, 04 Jan 2011 17:51:36 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[SysAdmin]]></category>

		<guid isPermaLink="false">http://www.hiden.org/?p=420</guid>
		<description><![CDATA[Just some common pitfalls to avoid when setting up BackupPC&#8230;. When doing a backup of a host whose data is mounted using a nfs share then you have to modify the TarClientCmd. Instead of $sshPath -q -x -n -l root $host env LC_ALL=C $tarPath -c -v -f &#8211; -C $shareName+ &#8211;totals use env LC_ALL=C $tarPath [...]]]></description>
			<content:encoded><![CDATA[<p>Just some common pitfalls to avoid when setting up BackupPC&#8230;.</p>
<ol>
<li>When doing a backup of a host whose data is mounted using a nfs share then you have to modify the TarClientCmd.<br />
Instead of<br />
<em>$sshPath -q -x -n -l root $host env LC_ALL=C $tarPath -c -v -f &#8211; -C $shareName+ &#8211;totals</em><br />
use<br />
<em>env LC_ALL=C $tarPath -c -v -f &#8211; -C $shareName+ &#8211;totals</em><br />
because ssh doesn&#8217;t work when accessing local directories.</li>
<li>The part ﻿﻿<em>env LC_ALL=C</em> is important if you work with a non english locale. Because otherwise the backup gets done but in the end BackuppPc can&#8217;t check the result.</li>
<li>To avoid all sorts of access restrictions run tar as root like<br />
env LC_ALL=C /usr/bin/sudo $tarPath -c -v -f &#8211; -C $shareName+ &#8211;totals<br />
To make this work start  <em>visudo</em> and add the line﻿<br />
<em>backuppc  ALL=NOPASSWD: /bin/tar<br />
</em> ﻿﻿</li>
</ol>
]]></content:encoded>
			<wfw:commentRss>http://www.hiden.org/sysadmin/backuppc-setup/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Update Simple-Scan from 1.x to 2.x on Ubuntu Lucid (10.04)</title>
		<link>http://www.hiden.org/sysadmin/update-simple-scan-from-1-x-to-2-x-on-ubuntu-lucid-10-04/</link>
		<comments>http://www.hiden.org/sysadmin/update-simple-scan-from-1-x-to-2-x-on-ubuntu-lucid-10-04/#comments</comments>
		<pubDate>Thu, 14 Oct 2010 06:55:24 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[SysAdmin]]></category>

		<guid isPermaLink="false">http://hiden.org/?p=378</guid>
		<description><![CDATA[sudo add-apt-repository ppa:robert-ancell/simple-scan sudo apt-get update sudo apt-get install simple-scan]]></description>
			<content:encoded><![CDATA[<p>sudo add-apt-repository ppa:robert-ancell/simple-scan</p>
<p>sudo apt-get update</p>
<p>sudo apt-get install simple-scan</p>
]]></content:encoded>
			<wfw:commentRss>http://www.hiden.org/sysadmin/update-simple-scan-from-1-x-to-2-x-on-ubuntu-lucid-10-04/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Microsoft, WTF is going on here ??</title>
		<link>http://www.hiden.org/sysadmin/microsoft-wtf-is-going-on-here/</link>
		<comments>http://www.hiden.org/sysadmin/microsoft-wtf-is-going-on-here/#comments</comments>
		<pubDate>Wed, 13 Oct 2010 20:46:29 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[SysAdmin]]></category>

		<guid isPermaLink="false">http://hiden.org/?p=372</guid>
		<description><![CDATA[Sometimes programs aren&#8217;t used in a way the programmer knows when creating a software. I had the situation that the properties stored in the registry where system wide but I needed different settings for every user. Well actually not really a problem. (Except if you need to use Windows 7) I located the settings in [...]]]></description>
			<content:encoded><![CDATA[<p>Sometimes programs aren&#8217;t used in a way the programmer knows when creating a software. I had the situation that the properties stored in the registry where system wide but I needed different settings for every user.</p>
<p>Well actually not really a problem. (Except if you need to use Windows 7) I located the settings in the registry exported them into a .reg file and a small .cmd batch job should append a user specific setting and start the program.<br />
The only problem is that a line like<br />
<em>echo pfrdlpfrz=c:\blabla\pfrz&gt;&gt;export.reg</em><br />
resulted in a new line in export.reg with CHINESE CHARACTERS !!!!</p>
<p>But if you take the content of the export.reg and copy it into a NEW file and save it as export.reg then everything works.</p>
<p>PLEASE TELL ME WHAT THE FUCK IS GOING ON HERE !!!!!</p>
<p>Ok, it&#8217;s actually only a small problem, but PLEASE tell me the concept behind this &#8211; or &#8211; oh I understand &#8211; there is no concept&#8230;..</p>
]]></content:encoded>
			<wfw:commentRss>http://www.hiden.org/sysadmin/microsoft-wtf-is-going-on-here/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Different DNS for different domains on IPCop / IPFire</title>
		<link>http://www.hiden.org/sysadmin/different-dns-for-different-domains-on-ipcop-ipfire/</link>
		<comments>http://www.hiden.org/sysadmin/different-dns-for-different-domains-on-ipcop-ipfire/#comments</comments>
		<pubDate>Thu, 12 Aug 2010 08:08:16 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[SysAdmin]]></category>

		<guid isPermaLink="false">http://hiden.org/?p=347</guid>
		<description><![CDATA[One of my customers is running a IPCop machine that does all the DHCP/DNS/Gateway stuff on the network. This works on the local 192.168.10.x network. Recently we added a second internet line for accessing the company&#8217;s headquarter. They use the 172.16.x.x network. Therefore a route add -net 172.16.0.0 netmask 255.255.0.0 gw 192.168.10.2 does the job. [...]]]></description>
			<content:encoded><![CDATA[<p>One of my customers is running a IPCop machine that does all the DHCP/DNS/Gateway stuff on the network. This works on the local 192.168.10.x network.<br />
Recently we added a second internet line for accessing the company&#8217;s headquarter. They use the 172.16.x.x network.</p>
<p>Therefore a<br />
<em>route add -net 172.16.0.0 netmask 255.255.0.0 gw 192.168.10.2</em><br />
does the job.<br />
In order to make that route permanent the above line has to be added to <em>/etc/rc.d/rc.netaddress.up</em> also.</p>
<p>Now every workstation on the local network is capable of accessing the headquarter&#8217;s network by IP address. But accessing the headquarter&#8217;s network by hostname does NOT work.<br />
The reason is that every DNS request to the domain<em> .headquarter.group</em> gets transferred to the public DNS by IPCop and <em>.group</em> is no valid public TLD.</p>
<p>Using IPCop&#8217;s DNS1 / DNS2 settings does not work because the multiple DNS only get asked in case the previous one is unaccessible.</p>
<p><strong>What has to be done is to tell IPCop that he has to use a different DNS once a request concerning .headquarter.group arrives.</strong></p>
<p><span id="more-347"></span>IPCop&#8217;s DNS stuff gets handled by dnsmasq andÂ  is started either by /etc/rc.d/rc.netaddress.up or /etc/rc.d/rc.updatered .</p>
<p><a href="http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html">man dnsmasq</a> tells us that the<em> &#8211;server </em>option is our friend.<br />
Everything we have to do is to add<br />
<em>&#8211;server=/headquarter.group/172.16.1.100</em><br />
to the startup scripts.<br />
This means that in case we ask for a address on the .headquarter.group network then (and only then) the DNS request should go to 172.16.1.100</p>
<p>In <strong><em>/etc/rc.d/rc.updatered</em></strong> there are two lines starting <em>/usr/bin/dnsmasq </em>where we add the &#8211;server option at the end.</p>
<p><em># &#8211;min-port=4096 is an arbitary value that should work for all<br />
# It should be set to the value+1 of the higest port you may drop in custom<br />
# rules, leaving upper range to randomized ports for request to dns server<br />
DOMopt=&#8221;"<br />
[ "$DOMAIN_NAME_GREEN" ] &amp;&amp; DOMopt=&#8221;-s $DOMAIN_NAME_GREEN&#8221;<br />
if [ -e "/var/ipcop/red/dial-on-demand" -a "$DIALONDEMANDDNS" == "on" -a ! -e "/var/ipcop/red/active" ]; then<br />
/usr/sbin/dnsmasq -l /var/state/dhcp/dhcpd.leases $DOMopt -r /var/ipcop/ppp/fake-resolv.conf &#8211;min-port=4096 <strong>&#8211;server=/headquarter.group/172.16.1.100<br />
</strong>else<br />
/usr/sbin/dnsmasq -l /var/state/dhcp/dhcpd.leases $DOMopt -r /var/ipcop/red/resolv.conf &#8211;min-port=4096 <strong>&#8211;server=/headquarter.group/172.16.1.100</strong><br />
fi<br />
unset DOMopt</em></p>
<p><em><br />
</em></p>
<p>And in <em><strong>/etc/rc.d/rc.netaddress.up</strong></em> we add the &#8211;server option to the line dealing with OPT_DNSMASQ</p>
<p><em># Start DNSMASQ with defaults settings to resolve names defined in /etc/hosts<br />
# Start in any cases : even if rc.red start fail, we still want be able to use /etc/hosts names<br />
OPT_DNSMASQ=&#8221;-l /var/state/dhcp/dhcpd.leases &#8211;server=/headquarter.group/172.16.1.100&#8243;<br />
</em><br />
After restarting the red interface or doing a power cycle everthing should work.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.hiden.org/sysadmin/different-dns-for-different-domains-on-ipcop-ipfire/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Firefox and file uploads from network-shares</title>
		<link>http://www.hiden.org/sysadmin/firefox-and-file-uploads-from-network-shares/</link>
		<comments>http://www.hiden.org/sysadmin/firefox-and-file-uploads-from-network-shares/#comments</comments>
		<pubDate>Wed, 28 Jul 2010 14:32:23 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[SysAdmin]]></category>

		<guid isPermaLink="false">http://hiden.org/?p=343</guid>
		<description><![CDATA[There are serveral reports that Firefox (as well as Epiphany) is not able to upload files from a network-share on recent versions of Ubuntu. See Bug #279193 for example. You can solve this by linking your ~/.gvfs directory to the bookmarks in nautilus. Locate the .gvfs directory in your home directory (ctrl-h displays the hidden [...]]]></description>
			<content:encoded><![CDATA[<p>There are serveral reports that Firefox (as well as Epiphany) is not able to upload files from a network-share on recent versions of Ubuntu. See <a href="https://bugs.launchpad.net/ubuntu/+source/firefox-3.0/+bug/279193">Bug #279193</a> for example.</p>
<p>You can solve this by linking your ~/.gvfs directory to the bookmarks in nautilus.</p>
<p><span id="more-343"></span></p>
<ol>
<li>Locate the .gvfs directory in your home directory (ctrl-h displays the hidden entries)</li>
<li>Right click on .gvfs and make a link.</li>
<li>Rename the &#8220;Link to .gvfs&#8221; to something like &#8220;Network&#8221;</li>
<li>Drag the entry from above to your bookmarks</li>
</ol>
<p>You could omit steps 2 and 3 but you would end up with a not very descruptive link called .gvfs</p>
]]></content:encoded>
			<wfw:commentRss>http://www.hiden.org/sysadmin/firefox-and-file-uploads-from-network-shares/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ubuntu Lucid (10.04) and USB Storage</title>
		<link>http://www.hiden.org/sysadmin/ubuntu-lucid-10-04-and-usb-storage/</link>
		<comments>http://www.hiden.org/sysadmin/ubuntu-lucid-10-04-and-usb-storage/#comments</comments>
		<pubDate>Fri, 21 May 2010 17:54:46 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[SysAdmin]]></category>

		<guid isPermaLink="false">http://hiden.org/?p=322</guid>
		<description><![CDATA[For some reason it may happen in Ubuntu Lucid (10.04) that your USB storage devices aren&#8217;t detected anymore. The indeed _very_ strange solution is to turn off LEGACY FLOPPY SUPPORT in the BIOS setup. If you don&#8217;t have such a setting (i.e like my Dell Precision T3400) and don&#8217;t have any floppy drive either then [...]]]></description>
			<content:encoded><![CDATA[<p>For some reason it may happen in Ubuntu Lucid (10.04) that your USB storage devices aren&#8217;t detected anymore.</p>
<p>The indeed _very_ strange solution is to turn off LEGACY FLOPPY SUPPORT in the BIOS setup. If you don&#8217;t have such a setting (i.e like my Dell Precision T3400) and don&#8217;t have any floppy drive either then try deactivating everything that refers to floppy drives in the BIOS setup.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.hiden.org/sysadmin/ubuntu-lucid-10-04-and-usb-storage/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ping all clients on a network</title>
		<link>http://www.hiden.org/sysadmin/ping-all-clients-on-a-network/</link>
		<comments>http://www.hiden.org/sysadmin/ping-all-clients-on-a-network/#comments</comments>
		<pubDate>Wed, 12 May 2010 09:19:27 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[SysAdmin]]></category>

		<guid isPermaLink="false">http://hiden.org/?p=315</guid>
		<description><![CDATA[A short (one line) script for linux that pings all clients on your network. If using another subnet than 192.168.0 then you have to adjust the numbers. export i=0; while [[ $((++i)) -le 254 ]]; do ping -c1 -w1 192.168.0.$i &#124; grep ttl &#124; cut -d " " -f4 &#124; cut -d ":" -f1; done; [...]]]></description>
			<content:encoded><![CDATA[<p>A short (one line) script for linux that pings all clients on your network. If using another subnet than 192.168.0 then you have to adjust the numbers.</p>
<pre>export i=0;
while [[ $((++i)) -le 254 ]];
do ping -c1 -w1 192.168.0.$i | grep ttl | cut -d " " -f4 | cut -d ":" -f1;
done;</pre>
<p>Thanks to snipplr.com</p>
]]></content:encoded>
			<wfw:commentRss>http://www.hiden.org/sysadmin/ping-all-clients-on-a-network/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

