pitr.net

When you want a fresh calendar, and need to re-sync all data with your exchange/zarafa server, you will have to manually delete all appointments.

There is an easy hack on how to remove all appointments from your pocketpc calendar:

1. Disconnect smartphone from PC.

2. Open ActiveSync on the smartphone.
3. Go to Menu, Options.
4. Untick “Calendar” from the list of items to synchronise.
5. It will prompt you to delete all calendar items (synchronised with your PC).
6. Check your calendar is empty.
7. Close and re-open Activesync (on the smartphone).
8. Re-tick the calendar item on the sync list.

Other keywords:

• remove appointments
• windows mobile calendar erase or delete

This week my virtual ran out of diskspace. I had mysql query logging enabled and a distributed attack on the login and self-register modules of gallery2.

Because I rarely login through the admin-interface and I have disabled the user self registration, I created this htaccess filter to deny any requests to those
modules. Keep in mind that if you want to login yourself, you need to add a rewrite condition for your own ip:

RewriteEngine On
RewriteCond %{QUERY_STRING} g2_controller=core.Logout [OR]
RewriteCond %{QUERY_STRING} g2_view=core.UserAdmin&g2_subView=register.UserSelfRegistration [OR]
RewriteCond %{QUERY_STRING} g2_view=core.UserAdmin&g2_subView=core.UserLogin
RewriteRule .* - [F]


If you really need to keep your sshd running on a publicly accessible port and IP, this is a piece of configuration

that adds a tiny bit of extra security to your server. By specifying which usergroups are allowed to actually use ssh, you are guarding the default (system) accounts (which shouldn’t have easily guessable passwords in the first place!) with an extra layer.

Add a new group:

addgroup sshusers

Add the users which are allowed to connect using ssh:

vigr (and add the users to the group)

Add the following line to /etc/ssh/sshd_config:

AllowGroups sshusers

And restart sshd. Make sure that you have a working ssh session when testing out the changes!

In a previous post, I wrote about the release of Open Panel and OpenCLI.

OpenCLI is going to change the way we maintain systems – for too long many repetitive steps have been automated hundreds of times by different sysadmins without having produced a standard. I think OpenCLI will become the standard that covers 99% of the tasks you perform while maintaining your systems.

See OpenCLI in action: http://blog.openpanel.com/2008/04/28/the-openpanel-cli-in-action/

Tired of getting mail notifications of e-mails you’ve already seen but have not read? The default mozilla thunderbird new e-mail notification tool has the tendency to display old mail and mail that has already been moved to junk folders. When you flag your e-mail as ‘read’ when you filter out junk, you can work around the displaying of junk messages.

With this new thunderbird add-on, you can configure more: https://addons.mozilla.org/en-US/thunderbird/addon/2610

note: use “%subject” and “%sender” in the notification text to display message details. More info on these variables on the author’s website: http://tjeb.nl/Projects/Mailbox_Alert/index.html

The past months, I teamed up with the panel6 folks in their project to create a server/webhosting control panel “that eats webmins for breakfast”. I’m very happy with the results so far: the webbased GUI communicates 100% through ajax with the core system.

And it gets even better: it contains a command-line called ‘opencli’

Creating vhosts on servers is repeating the same trick every time. I know most people around me have automated this using ‘setup-a-new-domain’-scripts, but handmade scripts usually lack proper errorchecking – unless you spend a lot of time writing them. With opencli creating a new vhost is as simple as entering ‘create vhost www.foo.com’ and apache is up and running the domain \o/.

While upgrading Apache to version 2.2.4-2 for a subversion upgrade (version 1.4.4dfsg1-1) I ran into errors with my auth_pgsql (or any other auth_mysql, auth_ldap or auth_* module) setup:

“Internal error: pcfg_openfile() called with NULL filename”

This is caused by auth_basic and stops the authentication and authorisation process. Adding the following directive to your auth_pgsql or auth_ldap config file solves the problem:

“AuthBasicAuthoritative Off”
It disables basic authorisation being authoritive for the authorisation process. The errors will still be visible in your logfiles, but the authorisation scheme works as normal.

Other tags:

• Apache 2.2 error
• Apache 2.2 subversion 1.4.4 error
• mod_pgsql pcfg_openfile errors

http://gforge.org/forum/message.php?msg_id=10926&group_id=128

In reference to this older post, several people requested my smbd.conf samba configuration file. Here it is:

[global]
refresh = 1
log file = /var/log/samba/log.%m
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .
socket options = TCP_NODELAY
obey pam restrictions = yes
interfaces = 192.168.1.0/255.255.255.0
encrypt passwords = true
passwd program = /usr/bin/passwd %u
passdb backend = tdbsam
wins support = true
dns proxy = no
server string = %h server (Samba, Ubuntu)
invalid users = root
unix password sync = yes
workgroup = KOALA
os level = 20
syslog = 0
panic action = /usr/share/samba/panic-action %d
max log size = 1000
#strict sync = no
#sync always = no
#oplocks = no
#level 2 oplocks = no
kernel change notify = yes
fam change notify = yes

I’m about to start a new project: a transparent SQL proxy. Connect your PHP-app to this “fake” mysql server, which sits in between your app and postgresql server translating all mysql-specific queries to normal sql’92 compliant format.

Requirements:

• support backend connections to postgres
• emulate mysql behaviour to frontend
• in Release1, queries for ‘X-cart’ shopping cart software should be supported

I have a clear picture of this. Does anyone have more ideas to contribute? I’ll start designing in the next few days.

build.xml:16: The type doesn’t support the “dst” attribute.

Fix: use ‘dest’ instead of ‘dst’.