my Notes

Resetting Password on MacOS

2010-10-26T16:23:00.003+07:00

One of my friend called me and asked how could he reset the password on his macbook. quick browsing on google, found these interestings:

http://support.apple.com/kb/ht1274
http://sg.answers.yahoo.com/question/index?qid=20071012020748AAvXTi9

Not testing yet, but should be working since one of it is directly from Apple.

ICEfaces Day 1: Installing ICEfaces in NetBeans 6.5.1

2009-06-09T05:55:00.004+07:00

The best explanation about ICEfaces can be seen at their website, http://www.icefaces.org/main/home/.

Now, the step to install it on the NetBeans 6.5.1:

1. Run NetBeans 6.5.1.

2. Navigate to the Tool -> Plugins. Go to Available Plugins tab, type "icefaces" on the search box. It is already there. However, they are not the latest version. Go with them if you just want to try ICEfaces. Install them and you are finish. Otherwise, follow the next steps to install the latest version (as for today it is ICEfaces 1.8.1 20090526).

3. Using your favourite browser go to http://www.icefaces.org/main/downloads/os-downloads.iface?category=NetBeans look for the plugin for NetBeans 6.5. Downloand it.

4. After finish downloading the file, extract it somewhere, for example in you Desktop or Download folder.

5. Back to NetBeans window, in Plugins window. Navigate to Downloaded tab. Click on "Add plugins ...". Navigate to where you extract the files and select org-icefaces-netbeans-modules-lib.nbm, org-icefaces-netbeans-modules-visualweb-frameworks.nbm, and org-icefaces-netbeans-modules-web-frameworks.nbm under nbms folder on your extracted folder. Then, click on "Install" button to start the installation.

6. During the installation process, a warning about the signing but not trusted plugin will appear. Just click on "Continue". This warning is appeared because this is not yet verified by NetBeans.

7. After the installation of the plugin is finished. Close the Plugins window. Start a new project and verify that the plugin has been installed by looking whether you can make a new Project, Web -> Web application then on the last wizard page (4. Framework), you can see "ICEfaces" and "Visual Web ICEfaces".

Now, that the ICEfaces is installed on the NetBeans, see you on the next day to "play" with it.

Managing your wealth with Buddy Day 5: Create transaction

2009-06-09T05:33:00.004+07:00

The menu is not really clear and on the spot. In my opinion, Buddy is a great application but it is suffered a usability problem. My recommendation is to split the menu for Budget, Account and Transaction, not put all of them under one "Edit" menu. Additionally, the title of the command is not consistent through out the application. To enter new budget or Account we use term "Create" but for transactions, we use "Edit All Transactions". However, the scheduled transactions is a good feature.

To enter a transaction, open the menu under Edit -> Edit All Transaction

Next, the transaction window will appear. Enter the new transaction at the bottom of the window with minimum date, description, amount, from and to values must be filled. Click on "Record" button to save the transaction. "Clear" to reset the form. Edit the transaction by selecting the transaction the click on "Update" button.

There are two kinds of Delete transaction, one is VOID (appear in transactions window but not affecting the balance) and the other one is DELETE (removing completely from the transaction).

It has been 9 days now in operation. My wife and I love it very much. Especially, the encryption feature. Despite the usability problem.

I understand this is not the full review of Buddy since I am preparing new website for all of the tutorials. Until then, goodbye for now.

Managing your wealth with Buddi Day 4: Create budgets

2009-06-03T06:16:00.004+07:00

The other thing also important in managing your wealth is setting your budget, your spending limit. It used to be easy since there is no credit card, or it would be easy for people not using credit card since the limit is the money available in your hand. However, it is also no good. We need to set the budget for our expenses, so that we do not waste our money on something useless. In some cases, unpredictable emergency expenses also need to be allocated. Finally, they are depending on yourself as the manager to manage the budget. In Buddy you can create budget as follow:

1. Run Buddy, navigate to "Budget" tab and click on Edit -> Create Budget
2. You can create category of your budget here. In addition, you also can create subcategory of a category, see the sample below:

3. Finally your budget summary is below:

That's it for today.

Managing your wealth with Buddi Day 3: Create account

2009-06-03T05:44:00.003+07:00

After finish with setting the environment, we should make some accounts first. This accounts are important so that we can withdraw the money from.

1. Run Buddy.
2. Click on Edit -> Create Account. new window will appear.
3. Make an account of type Cash, for example name it as wallet.

4. Also input other type of accounts you have, such as Investment or Savings.

5. Finally, you will have all of your accounts in Buddy as below.

Next day, we will see how to create budgets.

Managing your wealth with Buddi Day 2: Setup the environment

2009-06-02T06:10:00.007+07:00

Printing out my account books is taking time. Beforehand, I also want to setup the environment. The setting would involves date and currency format. Navigate to Edit -> Preference -> Locale:

1. Setting date: I choose to use "dd MMMM yyyy", you can create anything you want with the combination of d, M and y.

2. Setting currency: I put "Rp" here. [See suggestion below]

3. Final setting.

Suggestions:
I would ask a feature which is a capability to enter other currency including the exchange rate since some people have some accounts in different currency.

That's all for today.

Managing your wealth with Buddi Day 1: Installation day

2009-05-31T04:42:00.005+07:00

Have you ever notice how much have you been spent monthly on shopping? or how much have you been spent on food? If not, then you need buddi. I read the review of buddi on Info Linux (Indonesian open source magazine). I think I will try this to see my spending. I used to be using Excel. It was good but I was too lazy to update it. Anyway, let's try it:

1. Download buddi from its website. It is available for Windows, MacOS and Linux. The main reason why I want to try this is that buddi is developed using Java. I choose to try this on Windows 7 RC, so I download the Windows version.

2. After finished download it, run the installer. It is very easy, just run it and accept all default values.

3. Buddi is now already installed on my Windows 7 machine. Run Buddi, you will be welcomed with "Make a donation" page, simply click on "Not now" (please make a donation if you think it is helping you. Disclaimer: I am not having any kind of relationship with this product or the eprson behind it. Just think that it would be nice to encourage the developer in maintaning and further developing this product).

That is for now, today I will check all of my bank accounts so I can input my "wealth".

Symfony of Love Day 2: Business Case

2009-05-30T05:01:00.003+07:00

On the day 1, I already defined the simple requirements for my new project. Now, going further to define the business case. I made an observation on how my wife running the business. Below are the scenario,

1. Items are coming from the supplier.

a. When items are coming from supplier, their information should be recorded into the system. The important information are Item name, description, weight, photo (yes, it would be nice to have the picture of it), purchase price, quantity, minimum stock level for re-ordered and also the storage location if already decided. Otherwise, a default location would be supplier by the system.

b.When the item is not yet in the system, there should be a new window displayed to record the information of the new item.

c. After all items have been recorded, a summary page is displayed listing all items received from a supplier, then supplier information is also entered including the shipping cost.

d. Next step is to determine the sale price. The items are displayed in a table contains information about purchase price, shipping cost, suggested sale price (5% profit, 10%profit, 15% profit, 20% profit, 25% profit, 30% profit, 40% profit and 50% profit). The last column would be final sale price.

e. After sale prices are determined. The process is finished and back to main menu.

2. Customer makes a purchase.

a. When customer makes a purchase, a window displayed to provide the operator to record the items to be delivered to the customer. The information needed is item id/name, quantity and delivery date, due payment date, the customer information and also the payment method.

b. After all information required are recorded, operator should be able to print out the invoice. Two invoices are generated. One with the "Copy" watermark and the other one is "Paid" watermark.

3. Management.

a. CRUD of items (stock management), customers and payment method.

I know, probably this is what I would not do in the real business case. However, I am short of time at the moment ;( so that's all for today.

Symfony of Love Day 1: Introduction

2009-05-28T05:03:00.003+07:00

Why I called this project as Symfony of love? There are two reasons, first and the most important one is because I dedicated this project to my wife and second, I hope I can learn Symfony.

Background:

It has been few years that my wife is running her business from home. She sometimes asks for a software to help her in managing her business to replace her old excel system. I called it an excel system, since it is actually a system that is utilizing excel. Not the excel is the core of the system, but how she defined the procedures and utilized the sheets to do the calculation are the core of the system. Remember, excel is only the tool. One day, when we do not have access to excel, she can open and run it in OpenOffice Calc (good to hear!).

Objective:

Create a system to help small business in managing stock, price and orders. I know there are many and probably better solution for her (and others) but making one for your special one is very special!!!

Requirements:

I make it as simple as possible for the version 0.1:

R1. The system shall be able to be used to manage the stock of a product including its location. A notification will be issued when an item has reached a certain level thus need to be reordered.

R2. The system shall be able to be used to manage orders from clients including the their payment information.

R3. The system shall be able to be used to help in calculating the selling price.

I know they are still very broad requirements and i will make them more detail and clear in the business case on the next day.

Secure VPS Day 2: IPTables

2009-05-28T03:54:00.003+07:00

I got a problem. Unfortunately, IPTables are not included in the Ubuntu kernel on the vps I used. Activate it would take some time, so I decided to reinstall my vps and use Debian 4 image instead. The steps for day 1 are the same as in ubuntu, only that sudo package is not installed by default. Install it by running:

debian:~# apt-get sudo

Now, check the iptables configuration:

cath@debian:~$ sudo iptables -L

We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.

Password:
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
cath@debian:~$

Save old configuration (if any, usually the rules is still empty):

cath@debian:~$ sudo iptables-save > /etc/iptables.up.rules

Create new rules:

cath@debian:~$ sudo vim /etc/iptables.test.rules

*filter

# Allows all loopback (lo0) traffic and drop all traffic to 127/8 that doesn't use lo0
-A INPUT -i lo -j ACCEPT
-A INPUT -i ! lo -d 127.0.0.0/8 -j REJECT

# Accepts all established inbound connections
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

# Allows all outbound traffic
-A OUTPUT -j ACCEPT

# Allows HTTP and HTTPS connections from anywhere (the normal ports for websites)
-A INPUT -p tcp --dport 80 -j ACCEPT
-A INPUT -p tcp --dport 443 -j ACCEPT

# Allows SSH connections
#
# THE -dport NUMBER IS THE SAME ONE YOU SET UP IN THE SSHD_CONFIG FILE
#
-A INPUT -p tcp --dport 2987 -j ACCEPT

# Reject ping
-A INPUT -p icmp -m icmp --icmp-type 8 -j REJECT

# log iptables denied calls
-A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7

# Reject all other inbound - default deny unless explicitly allowed policy
-A INPUT -j REJECT
-A FORWARD -j REJECT

COMMIT

Use above rules in iptables:

cath@debian:~$ sudo iptables-restore < /etc/iptables.test.rules

Check it to see the differences:

cath@debian:~$ sudo iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT 0 -- anywhere anywhere
REJECT 0 -- anywhere loopback/8 reject-with icmp-prt-unreachable
ACCEPT 0 -- anywhere anywhere state RELATED,ESTALISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:www
ACCEPT tcp -- anywhere anywhere tcp dpt:https
ACCEPT tcp -- anywhere anywhere tcp dpt:2987
REJECT icmp -- anywhere anywhere icmp echo-request eject-with icmp-port-unreachable
LOG 0 -- anywhere anywhere limit: avg 5/min brst 5 LOG level debug prefix `iptables denied: '
REJECT 0 -- anywhere anywhere reject-with icmp-prt-unreachable

Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT 0 -- anywhere anywhere reject-with icmp-prt-unreachable

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT 0 -- anywhere anywhere
cath@debian:~$
cath@debian:~$
cath@debian:~$ cath@debian:~$ sudo vim /etc/iptables.test.rules
-su: cath@debian:~$: command not found
cath@debian:~$

Finally, test it:

Pinging ppa16.vpsfarm.com [209.9.227.210] with 32 bytes of data:
Reply from 209.9.227.210: Destination port unreachable.
Reply from 209.9.227.210: Destination port unreachable.
Reply from 209.9.227.210: Destination port unreachable.
Reply from 209.9.227.210: Destination port unreachable.

Ping statistics for 209.9.227.210:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

There it is for day 2. I am searching again for other tips and tricks to secure our vps. Till then, good bye for now!

Secure VPS Day 1: Use different port for SSH

2009-05-20T06:04:00.005+07:00

One of my commercial project requires me to setup TRAC to manage the development phase. Hence, I need to secure my server that will host TRAC. I understand this is only basic but should be enough to start with.

Today, I will redirect the SSH to use other port. The idea behind it is that they way to login to the server needs IP Address (hostname), port number, username and password. IP Address/hostname you cannot do anything with this since this is the location of the server. Barebone VPS will use default values for port number (=22) and username (=root). There only left the password is unknown to the public. However, if we change the port number and not permitting root to login via ssh, instead using other user. We can DELAY people to get into your server. I said DELAY because it would be not too dificult to get the port number.

Step 1: login to your vps. I am using VPSFarm again. Check you email to get the password.

Step 2: Change the password to make it easier to you to remember but harder for other people to guess.

To access official Ubuntu documentation, please visit:http://help.ubuntu.com/
root@ubuntu-pristine:~# passwd
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
root@ubuntu-pristine:~#

Step 3: Add a new user specially for SSH connection, I would give it a name "onin".

root@ubuntu-pristine:~# adduser onin
Adding user `onin' ...
Adding new group `onin' (1000) ...
Adding new user `onin' (1000) with group `onin' ...
Creating home directory `/home/onin' ...
Copying files from `/etc/skel' ...
Enter new UNIX password:
Retype new UNIX password:
password updated successfully
Changing the user information for onin
Enter the new value, or press ENTER for the default
Full Name []: Onin
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [y/N] y
root@ubuntu-pristine:~#

Step 4: Change SSH setting.

root@ubuntu-pristine:~# vim /etc/ssh/sshd_config

Set these values to:
Port 2987(change to your choiche, on mine it is on line #5 )
PermitRootLogin no (line #26)
X11Forwarding no (line #62)
UsePAM no (line #77)
AllowUsers onin (added new on line #78)

Step 4: Restart SSH server. Do not close this session, for backup connection if somehow your new ssh setting does not work.

a. Test to connect to the server again using old setting, result: does not work! (as expected).
b. Login to the server again to the port 2987 user "root": does not work! (as expected).

login as: root
root@ppa16.vpsfarm.com's password:
Access denied

c. Login to the server using port 2987 and user "onin" : WORKING (hurray!).

Step 5: Now, you are on the server. You have a choice to :
a. sudo su
b. create another user and give this user "admin" rights (the reason, ubuntu usually discourage you work as root and prefer we work using a user with admin rights):

root@ubuntu-pristine:~# su -l root
root@ubuntu-pristine:~# adduser cath
Adding user 'cath' ...
Adding new group 'cath' (1001) ...
Adding new user 'cath' (1001) with group `cath' ...
Creating home directory `/home/cath' ...
Copying files from `/etc/skel' ...
Enter new UNIX password:
Retype new UNIX password:
password updated successfully
Changing the user information for cath
Enter the new value, or press ENTER for the default
Full Name []: Cath
Room Number []:
Work Phone []:
Home Phone []:
Other []:
Is the information correct? [y/N] y
root@ubuntu-pristine:~# visudo

The content of mine
# /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
#

Defaults env_reset

# Uncomment to allow members of group sudo to not need a password
# %sudo ALL=NOPASSWD: ALL

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root ALL=(ALL) ALL
cath ALL=(ALL) ALL <-- add "cath" to here!

I opt b) for future references. That's all for today. See you next time!

idle for almost a year.....

2009-05-18T10:16:00.002+07:00

It has been almost a year now, I did not touch my blog. Work and work and work..... :( But somehow, I feel that I want to do some personal projects again. I am thinking of starting

1) Symfony of Love
2) Free Programmer School
3) Pray on the Ice

What are they? Just wait and see .......

finally, resigned....

2008-06-25T12:40:00.002+07:00

Finally, I am resigned from my regular job as lecturer. I am happy to be a lecturer, but classic reason: differences in Vision and Mission of Education, makes me to reconsider my position in Unika.

Ready for hunting another regular job! Fortunately, I got other incomes (much bigger actually). No worries for a while........

ISPConfig preparation

2008-05-30T06:32:00.002+07:00

I am trying to install ISPConfig, see this link for the preparation. http://www.howtoforge.org/perfect-server-ubuntu8.04-lts-p4. I start at step 9.

I got trouble in step 12. Since this is VPS and the filesystem used is weird to me, I skip it first, see whether ISPConfig can still work without installing quota.

Today, I stopped at step 14. Continue later......

Upgrade dapper to hardy

2008-05-26T13:40:00.004+07:00

After dapper image is loaded to my server, now the time for upgrade begin:

1. root@server:~# vim /etc/apt/sources.list
delete all lines, then type these:

deb http://us.archive.ubuntu.com/ubuntu dapper main restricted multiverse universe
deb http://us.archive.ubuntu.com/ubuntu dapper-updates main restricted multiverse universe
deb http://us.archive.ubuntu.com/ubuntu dapper-security main restricted multiverse universe

deb-src http://us.archive.ubuntu.com/ubuntu dapper main restricted multiverse universe
deb-src http://us.archive.ubuntu.com/ubuntu dapper-updates main restricted multiverse universe
deb-src http://us.archive.ubuntu.com/ubuntu dapper-security main restricted multiverse universe

2. run these commands to update your changes above.

root@server:~# apt-get update
root@server:~# apt-get upgrade
root@server:~# apt-get dist-upgrade

3. install update-manager-core.

root@server:~# apt-get install update-manager-core

4. do the upgrade, and follow the instructions there.

root@server:~# do-release-upgrade -d

5. you may clean up the packages archive using:

root@server:~# apt-get clean

Now, you have dapper upgraded to hardy. Time to play with my upgraded vps now!

Note:

There is a locale setting error occurs like in the previous vps provider. However, the soltion I wrote in the past is not working this time. I found new solution here: https://bugs.launchpad.net/ubuntu/+source/langpack-locales/+bug/63687

Don't forget, in vps usually you access the server using root. If you have access other than root, don't forget to put sudo before the commands or sudo password root and sudo su.

Change VPS provider!

2008-05-26T08:59:00.002+07:00

Since somehow paypal refused my payment to vpsfarm. I need to find new vps provider. I choose ihostvps.com. Quite good offer and great in handling tickets.

I start again my experience with vps. First of all, i install the ubuntu image. Old version, dapper, but I am planning it to upgrade to hardy.

Wait and see! ihost comes with LXAdmin cp, so i can just set my root password directly. Now, I could not wait to start my project with it.

setting JAVA_HOME in MacOS X for running geronimo

2008-02-14T06:46:00.003+07:00

when trying geronimo, I had problem with the JAVA_HOME variable. The solution is to execute this command before running the geronimo:

// go to the bin directory of geronimo, depends on your own location
daniel-adinugrohos-macbook-pro:~ adinugro$ cd Desktop/geronimo/geronimo-tomcat6-jee5-2.0.2/bin

// set JAVA_HOME varible
daniel-adinugrohos-macbook-pro:bin adinugro$ export JAVA_HOME=/Library/Java/Homedaniel-adinugrohos-macbook-pro:bin

// execute the geronimo
adinugro$ ./startup.sh

that's all. check whether your geronimo running from your fav browser and go to http://localhost:8080

installing vmware-server on gutsy server

2007-12-09T07:16:00.000+07:00

First of all you need to install these packages through apt:

1. build-essentials
2. xinetd
3. linux-headers* (try to just install them for server, or just inslall all of them)

Download the vmware server from www.vmware.com
then, extract it:
% tar xvfz VMware-server-1.0.4-56528.tar.gz

enter to the directory, vmware-server-distrib, install it by running vmware-install.pl
% cd vmware-server-distrib
% sudo ./vmware-install.pl

just used the default values for the setting.

untar files in linux

2007-12-07T05:04:00.000+07:00

If the file is ended with tar.gz, then use

$ tar xvfz filename.tzr.gz

but, if the file is ended with .tar.bz2, then use

$tar xvjf filename.tar.bz2

XAMPP 1.64 on Ubuntu

2007-11-23T05:21:00.000+07:00

We know that Ubuntu server comes with a great support for LAMP, but for mobility issue, we can use XAMPP. However, I encountered a /bin/arch problem on my Gutsy. A quick search on Google, I found this link, http://jauhdimata.wordpress.com/2007/11/20/daripada-lupa/

Just in case something wrong with the link, I copied the solution here:

/opt/lampp/lampp: line 74: arch: command not found Starting XAMPP for Linux 1.6.3… /opt/lampp/lampp: line 74: arch: command not found /opt/lampp/lampp: line 74: arch: command not found XAMPP: Starting Apache with SSL (and PHP5)… /opt/lampp/lampp: line 74: arch: command not found XAMPP: Starting MySQL… /opt/lampp/lampp: line 74: arch: command not found XAMPP: Starting ProFTPD… XAMPP for Linux started.

add this file, /bin/arch by typing:
% sudo vim /bin/arch

put this as the content of /bin/arch:

uname -m

then save and exit from vim by typing :wq

don't forget to make it executable by typing:

% sudo chmod +x /bin/arch

ok. now you can restart the xampp:

% sudo /opt/lamp/lampp restart

Create Local Repo From DVD

2007-11-04T21:32:00.001+07:00

1. Copy DVD contents to the folder in web server:
a. Preparing the folder, ie: /var/www/ubuntu, by doing $ sudo mkdir -p /var/www/ubuntu
b. Mount the DVD Repo to the /cdrom, $ sudo mount /cdrom
c. Copying the DVD Content to /var/www/ubuntu using rsync, $ sudo rsync -avx --progress /cdrom/. /var/www/ubuntu/.
d. Do (b) and (c) for all of your dvd repos.

2. Combine divided repo (ie: Gutsy)
a. Enter dvd repo #1, then mount it: $ sudo mount /cdrom
b. $sudo cp /cdrom/dists/gutsy/main/binary-i386/Packages /var/www/ubuntu/dists/gutsy/main/binary-i386/
c. eject the /cdrom, then do for dcd repo #2 $ sudo mount /cdrom
d. cat /cdrom/dists/gutsy/main/binary-i386/Packages >> /var/www/ubuntu/dists/gutsy/main/binary-i386/
should peemission denied, try: (don't forget to change back to 644)
$ sudo chmod 666 /var/www/ubuntu/dists/gutsy/main/binary-i386/
e. recreate the Packages.gz and Packages.bz
$ cd /var/www/ubuntu/dists/gutsy/main/binary-i386/
$ sudo rm Packages.gz Packages.bz2
$ sudo gzip -9 -c Packages > Packages.gz
$ sudo bzip2 -9 -c Packages > Packages.bz2
f. repeat for dvd #3, #4 and #5 for universe libraries.

3. That's all, you can activate it by adding:

deb http://[your-server-address]/ubuntu gutsy main restricted universe multiverse

mirroring repository using rsync

2007-09-27T05:09:00.000+07:00

% mkdir myloc
% cd myloc
% rsync -v -t -l -r [server-url]::[distro] . or
% rsync -v -t -l -r rsync://[server-url]/[distro] .

trying to mirror pclinuxos repository........
% mkdir myloc
% cd myloc
% rsync -v -t -l -r rsync://spout.ussg.indiana.edu/pclinuxos/ .

Superspeed USB

2007-09-20T05:46:00.000+07:00

http://www.extremetech.com/article2/0,1697,2184743,00.asp

new USB 3.0:
- boost 10x its bandwith to 4.8Gbps/s
- initially available in 2009, mass production in 2010
- saving battery life for laptops
- support virtualization w/o software intervention

hm, Ubuntu JeOS

2007-09-20T05:43:00.002+07:00

http://searchenterpriselinux.techtarget.com/originalContent/0,289142,sid39_gci1272918,00.html?track=NL-641&ad=604726&asrc=EM_NLT_2220070&uid=5687621

it's seem my long question is answered. cannot wait for next month!

other alternative to M$ office

2007-09-19T18:10:00.000+07:00

http://symphony.lotus.com/software/lotus/symphony/home.jspa

- Free from IBM,

- support ODF

- available in linux or windows, but in macos(?)

now, trying....

the true owners....

2007-09-19T07:23:00.000+07:00

http://www.informationweek.com/news/showArticle.jhtml?articleID=201806893

"SCO claims it owns all copyrights over Unix and that Linux infringes on those copyrights. In what were widely seen as bet-the-company moves, SCO, beginning in 2003, launched a series of lawsuits against rivals and customers claiming their use of Linux was violating the copyrights. The campaign was dealt a crushing blow on Aug. 10 when federal court Judge Dale Kimball ruled that Novell (NOVL), and not SCO, owns the copyrights to Unix."

Hooray, it should end the 'threatening' era from SCO (M$) to the linux worlds!

good or bad???

2007-09-17T06:04:00.000+07:00

http://www.dailytech.com/article.aspx?newsid=8864

Run Solaris in M$ Windows virtualization, run M$ Windows on Solaris virtualization, and run M$ Windows on Sun servers?

good news or bad news?

I am not a M$ hater, but I just wanna use software for free and legally.

long battle SCO (M$) and Linux

2007-09-17T05:53:00.000+07:00

http://www.groklaw.net/article.php?story=20070914152904577

It's remind me a few years ago, on 2004 to be exact. many people were attracted to sit for Microsoft training, including me. I felt that it would be the end of free linux. However, Linux becomes strong and strong nowadays. It could compete with Windows and MacOS.

Does my MCSA useless, now? I don't think so, it is still useful, helping me to learn linux and think of creating GUI based configurator such as in M$ world.

tired....

2007-09-06T05:02:00.000+07:00

a week preparation to the seminar on last Tuesday and another assignment due last week, made me really tired.

careers = no time for family? I like to be a family man, but it's not that easy as saying it.

ssh using php

2007-08-30T07:10:00.000+07:00

I found this link http://kevin.vanzonneveld.net/techblog/article/make_ssh_connections_with_php/

it's really interesting, I like to give it a try!

simple mysql backup or transfer

2007-08-27T04:20:00.000+07:00

sometimes we need to backup a database or transport a database from one server to another. the situations are not always good. you are stranded with no phpmyadmin help. mysql provide mysqldump to help you in non-gui environment. just do:

% mysqldump [name_of_the_database] -u [username] -p > [name_of_the_database].sql

as example,

% mysqldump krs -u krs_user -p > krs.sql

the process is finish in few minutes depends on the size of the databases. here you are the backup process is finish. to transport to other server, just copy the krs.sql to the directed server, than do:

% mysql krs < krs.sql -u krs_user -p

or see my previous post about mysql.

installing ldap server

2007-08-23T05:14:00.000+07:00

Easy steps to install LDAP Server:

% apt-get install slapd ldap-utils

Towards the end of the installation process you are asked to answer some configurations questions, if you get errors, just skipped the configuration process then use below command to configure it:

% dpkg-reconfigure slapd

Omit OpenLDAP server configuration? ... No
DNS domain name: ... [enter your domain name here, say example.com]
Name of your organization: ... [enter your organization name here]
Admin Password: XXXXX
Confirm Password: XXXXX
OK
choose Berkeley DB --> BDB
Do you want your database to be removed when slapd is purged? ... No
Move old database? ... Yes
Allow LDAPv2 Protocol? ... Yes/No [Depends on your situation]

To test it use:
% ldapsearch -x -b dc=example,dc=com

If you encountered this error message: ldap_bind: Can't contact LDAP server (-1)
it may caused by the ldap server not started yet, so try to start it using:
% /etc/init.d/slapd start

locales problem

2007-08-23T05:09:00.000+07:00

During my revisited to my vps, I encountered this error:

perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LANG = "en_US"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").

After googling, I found out that the problem is with the locales being not installed on the system. In order to install it:

% apt-get install locales
% dpkg-reconfigure locales

just choose everything started with en_US, and choose the default as en_US.
That's it, no more locales error message!

sshfs on mac

2007-08-21T04:53:00.000+07:00

being maintaning student databases on several servers, I need a simple way to connect to the servers rather than typing ssh command all the time. Actually, I heard the term sshfs several months ago but never tried it. As now I am using a mac, I wanna try sshfs on mac, Uncle google give me this link to download http://mac.pqrs.org/~tekezo/macosx/sshfs/ and http://mac.pqrs.org/~tekezo/macosx/sshfs/document.html to get the step by step guide.

It's a little bit easier now, but I need to learn the sshkeychain to automate the process.

uninstall linux ati driver

2007-08-16T04:47:00.001+07:00

There is two way to install linux ati driver, automatic and package generation. Therefore, the uninstallation process depend on the way we install it.

1. Automatic:

% cd /usr/share/ati
# must be done as a root
% sh ./fglrx-uninstall.sh

2. Package generation
If you generate the package, then you install it using the package manager available in your compie, so just uninstall it using that. Simple.

Don't forget to uninstall it before install a new version!

unrar in ubuntu

2007-08-12T06:16:00.000+07:00

sometimes we need to extract a file. zip or tar.gz files could be opened directly in linux, but rar is not supported. to be able extract a rar file, we should install unrar.

% sudo apt-get install unrar

two useful and most used command is

% unrar e your-file-name.rar #--- to extract the rar file in the current directory

% unrar l your-file-name.rar #-- to list the content of the rar file

running iso image from hardisk using grub

2007-08-10T03:36:00.000+07:00

sometimes you just wanna try a new linux, but you don't wanna burn it to a cd first, grub can be used to do that. [you need to run these command as root or use sudo in ubuntu]

1. mount the iso:
% mkdir /mnt/iso
% mount -o loop /path-to your-iso/youriso.iso /mnt/iso

2. copy vmlinuz and initrd to the /boot
% cd /mnt/iso/boot
% cp vmlinuz /boot/vmlinuz-yourdistro
% cp initrd.img /boot/initrd-YourDistro.img

3. modify /boot/grub/grub.conf (linked to by /etc/grub.conf)

This assumes that /boot is in the first partition of the first hard drive, usually /dev/hda1

title YourDistro
root(hd0,0)
kernel /vmlinuz-YourDistro
initrd /initrd-YourDistro.img

Now you can reboot your pc and run the live cd.

ubuntu: listing and removing packages

2007-08-08T04:56:00.001+07:00

To view installed packages by size:
% dpkg-query -W --showformat='${Installed-Size} ${Package}\n' | sort -nr | less

When you want to remove packages remember to use purge
% apt-get remove --purge package name

mac fonts to ttf

2007-08-05T04:47:00.000+07:00

I was very interesting in the font used in Eclipse IDE under MacOS, so I was thinking how could I used that font in my web.

After googling, I found out this utility called fondu, http://fondu.sourceforge.net. I downloaded it the macos version then installed it as usual pkg installation. Little bit confusion after installation. Where was the fondu? Looking around in Application found nothing. But, when typing in terminal it did exist there!

The font used by Eclipse IDE called Monaco.dfont. to transfer to ttf, just type:
% cd /System/Library/Fonts
% sudo fondu -show Monaco.dfont

-show is to see what fonts are created using fondu.
sudo needs as you try to create a new file in the System directory where your user does not allow to do so.

should you want to create .afm, just add -afm flag,
% sudo fondu -show -afm Monaco.dfont

Now, I could embed it to the html/css....[next]

wifi, how dangerous it is?

2007-08-04T05:35:00.000+07:00

I forgot the link where I read it, but just for a precautions, should you connect to the Internet through a wifi connection, you need to be carefull!

Someone has just show how vulnerable is a wifi connection, he can stole your cookies then play it back later to login to your gmail account, or other webmail.

One of the solution is to login through an https, for google https://mail.google.com

installing vmware tools in vmware fusion

2007-07-29T05:58:00.000+07:00

my virtual machine (guest OS) is feisty-i386-server. the host is mac0s using vmware fusion. in order to activate the shared folder, we need to install vmware tools, by:

1. Select Virtual Machine -> Install VMware Tools
2. Go to the vm and mount the cd using
% sudo mount /dev/cdrom /media/cdrom0

3. copy the VMwareTools-e.x.p-48339.tar.gz to the home directory,
% cp /media/cdrom0/VMwareTools-e.x.p-48339.tar.gz $HOME

4. extract the file
% tar xvfz VMwareTools-e.x.p-48339.tar.gz

5. go to the vmware-tools-distrib and install:
% cd vmware-tools-distrib
% sudo ./vmware-install.pl

6. just accept the all the default values.

7. don't forget to reboot the system!
% sudo reboot

grub in ubuntu

2007-07-29T04:38:00.000+07:00

few days without a post as I was so anxious to wait for my teeth operation, so kids don't forget to brush your teeth. It was a small operation, but operation is an operation. the pain is real.

just a quick and lite tips today:

if you need to find out where is your grub menu option, look no further in

/grub/boot/menu.lst

usually after being updated by the system [for example after installing/upgrading to a new kernel], the old one will be save as /grub/boot/menu.lst~

[fds part 1]: installing fedora directory server in ubuntu server 64-bit

2007-07-24T19:03:00.000+07:00

1. download the fedora directory server (fds) from:
% wget http://directory.fedoraproject.org/download/fedora-ds-1.0.4-1.FC6.x86_64.opt.rpm
2. convert it to deb [--script was put there as it was warned by the system]:
% sudo alien fedora-ds-1.0.4-1.FC6.x86_64.opt.rpm --script
3. as it is amd64 version, we should use the termcap from fedora and do converting to deb again:
% wget http://download.fedora.redhat.com/pub/fedora/linux/core/6/x86_64/os/Fedora/RPMS/libtermcap-2.0.8-46.1.x86_64.rpm % sudo alien libtermcap-2.0.8-46.1.x86_64.rpm
% sudo dpkg -i libtermcap_2.0.8-47.1.amd64.deb

[deleted as it found to be false]Should 32 bit version is used, we could directly install it using:
% sudo apt-get install termcap-compat [upto here]
we should do:
% wget http://download.fedora.redhat.com/pub/fedora/linux/core/6/i386/os/Fedora/RPMS/libtermcap-2.0.8-46.1.i386.rpm
% sudo alien libtermcap-2.0.8-46.1.i386.rpm
% sudo dpkg -i libtermcap-2.0.8-47.1.i386.deb

4. We need Java, for feisty fawn you can do:
% sudo apt-get install sun-java6-bin

5. Setting JAVA_HOME enviroment variable:
% sudo vi /etc/profile

add these two lines on the last line:
JAVA_HOME=/usr/bin/java
export PATH JAVA_HOME

to make the modification take effect:
% . /etc/profile

test by
% echo $JAVA_HOME
/usr/bin/java [the expected output]

6. We also need apache:
% sudo apt-get install apache2-mpm-worker

as ubuntu recognize apache as apache and fedora recognize it as httpd, we need to create as symbolic link:
% sudo ln -s /usr/sbin/apache2 /usr/sbin/httpd

7. Installing the package:
% sudo dpkg -i fedora-ds_1.0.1-2_i386.deb

Creating a user and group for the daemon:
% sudo groupadd fds
% sudo useradd -s /bin/false -g fds fds

Next, setting up the server....

adding dvd repo in ubuntu server

2007-07-24T04:40:00.000+07:00

using ubuntu server means no gui [no synaptic???]. in order to add dvd repo, do:

1. make sure the /cdrom is link to the correct cd/dvd rom being used.
% ls -l /cdrom
lrwxrwxrwx 1 root root 11 2007-07-24 12:25 /cdrom -> /media/cdrom

I put the dvd repo in /media/cdrom. Otherwise you should point to the right direction, for example:
% sudo rm /cdrom
% sudo ln -s /media/cdrom1 /cdrom # create symbolic link /media/cdrom1 as /cdrom

2. add the dvd repo by
% sudp apt-cdrom add

3. enter your password, then insert the dvd repo disk 1 and press enter.

4. do for the other three by repeating step 3 three times.

5. after that, don't forget to update the system using
% sudo apt-get update

Now, you have added dvd repo to your system, next time you wanna install software, you will be asked to insert a specific cd to where the software reside.

create cd image in mac

2007-07-23T04:15:00.000+07:00

last post is about manipulating cd image in linux, now, how about mac? Disk Utility is a powerful tools that can burn a cd/dvd image. In addition, you do not need cd daemon tools to mount a cd image as you can just double click the iso file and it will be mounted automatically.

One thing that is not yet available in an easy way is how to create an image of a cd. Being BSD based, mac inherited some BSD/Linux commands. one of them is dd. But, just now I found out one freeware application to make a cd image easily, its name is ISOlator. You can download the application in http://www.macupdate.com/info.php/id/18634.

Installing this application is easy, just double click the zip file, then follows the instruction to drag the ISOlator to the Application's folder.

Launch the application, there will be a small window appear on the screen, drag your cd's icon to this window, then you will be asked to give a name and location for the new iamge file.

Wait few minutes and the iso file will be ready. That's it all you need to do.

assorted image cd manipulation commands

2007-07-20T05:19:00.000+07:00

These tips are taken from http://ubuntuguide.org/wiki/Ubuntu:Feisty/CDDVDBurning

Assumed that /dev/cdrom is the location of CD/DVD-ROM

How to create Image (ISO) files from CD/DVD

% sudo umount /dev/cdrom
% readcd dev=/dev/cdrom f=file.iso

How to create Image (ISO) files from folders

% mkisofs -r -o file.iso /location_of_folder/

How to generate MD5 checksum files

% md5sum file.iso > file.iso.md5

How to check MD5 checksum of files
Assumed that file.iso and file.iso.md5 are in the same folder

# md5sum -c file.iso.md5

How to mount/unmount Image (ISO) files without burning
To mount Image (ISO) file
% sudo mkdir /media/iso
% sudo modprobe loop
% sudo mount file.iso /media/iso/ -t iso9660 -o loop

To unmount Image (ISO) file
% sudo umount /media/iso/

If you want to mount/unmount your ISO image by directly right-clicking on it, you can do this from your home dir:
% cd .gnome2/nautilus-scripts/
% gedit Mount

Copy this script into Mount file
#!/bin/bash
#
for I in "$*"
do
foo=`gksudo -u root -k -m "Enter your password for root terminal access" /bin/echo "got r00t?"`
sudo mkdir /media/"$I"
sudo mount -o loop -t iso9660 "$I" /media/"$I" && nautilus /media/"$I" --no-desktop
done
done
exit0

Save and close, than do the same with unmount file:
# gedit Unmount

Copy these script into Unmount file
#!/bin/bash
#
for I in "$*"
do
foo=`gksudo -u root -k -m "Enter your password for root terminal access" /bin/echo "got r00t?"`
sudo umount "$I" && zenity --info --text "Successfully unmounted /media/$I/" && sudo rmdir "/media/$I/"
done
done
exit0

Make them executable with:
% chmod +x Mount
% chmod +x Unmount

Or a graphical tool type in terminal:
% sudo apt-get install gisomount

to run type in terminal:
% sudo gisomount

java: setting proxy

2007-07-17T04:28:00.000+07:00

when your java program needs to access the Internet using proxy, use this:
%java -Dhttp.proxyHost=proxyhost [-Dhttp.proxyPort=portNumber]

for example, I want to execute Reader.java

%javac Reader.java
%java -Dhttp.proxyHost=http://192.168.1.1 -Dhttp.proxyPort=8080 Reader

php: file create, read, write, open, close and delete

2007-07-17T02:21:00.000+07:00

I have to figure out how to manipulate file in php in order to automate my database converter. The problem here is the main database is using interbase while my local database is using mysql.

This is just a note for my references:

The typical pattern of manipulating file is open, do write or read then close file.

Create & Open File
Open and creating a file are using the same command in php.

$fileName = 'theFile.txt';
$fileHandler = fopen( $fileName, 'X' ) or die( "can't open file! );

replace X with:
r : to read a file, the pointer starts from the beginning of the file.
w : to write to the file, overwrite the previous content.
a : to wrote to the file, appending the new content to the current file.
r+ : open a file to be read from and write to, the pointer starts from the beginning of the file.
w+ : same as r+, but the content of the file becomes overwrite (empty).
a+ : same as r+, only the pointer is at the end of the file.

die( "can't open file! ) needed to stop the process below. Otherwise, errors are pop up for the following file manipulation commands.

Read File

$txt = fread( $fileHandler, n );

where n can be:
integer, for example 10, to read the first 10 bytes [or characters as 1 byte = 1 character], or
if you want to read the all contents of the file, replace n with filesize( $fileName );

Write File

fwrite( $fileHandler, $txtToWrite );

Delete [Unlink] File
In php, deleting a file is equal to unlink the file, if there is no more link to the file object, the system will forget of its existence.

unlink( $fileName );

Closing File

fclose( $ fileHandler );

Actually I summarize that from http://www.tizag.com, solely for the purpose of maintaining single place documentation.

mysql update & insert from file

2007-07-16T05:48:00.000+07:00

Maintaining Enrolment system is not an pleasant task. So many things must be reminded as bad documentation was supplied. Hehehe blame on myself that was too lazy to write them down.

This is just notes from me to rectify those problems above:

In order to update the data by increasing or decreasing its value, you do not need to use select then update. Instead you only need update query. See the example below:

UPDATE employee_data SET
salary = salary + 20000,
bonus = bonus - 5000
WHERE title='CEO';

Query OK, 1 row affected (0.01 sec)
Rows matched: 1  Changed: 1  Warnings: 0

While, inserting data from main database server to local database [in my case: I need to copy data from main uni's database into faculty's database, so my proposed solution is to read from main uni's database using php then run a script that contains command below. To make the process run automatically, I will put it as cron jobs]

Inserting data into employee_data table with employee.dat file
On Windows
1). Move the file to c:\mysql\bin.
2). Make sure MySQL is running.
3). Issue the following command
mysql employees < employee.data

On Linux
1). Migrate to the directory that contains the downloaded file.
2). Issue the following command
mysql employees < employee.data -u theUser -p
3). Enter your password.

Example of employee.dat:

INSERT INTO employee_data (f_name, l_name, title, age, yos, salary, perks, email) values ("John", "Hagan", "Senior Programmer", 32, 4, 120000, 25000, "john_hagan@bignet.com");
INSERT INTO employee_data (f_name, l_name, title, age, yos, salary, perks, email) values ("Ganesh", "Pillai", "Senior Programmer", 32, 4, 110000, 20000, "g_pillai@bignet.com");
INSERT INTO employee_data (f_name, l_name, title, age, yos, salary, perks, email) values ("Anamika", "Pandit", "Web Designer", 27, 3, 90000, 15000, "ana@bignet.com");

Sources from the tips above with little modification: http://www.webdevelopersnotes.com

ssh on macos

2007-07-14T03:56:00.000+07:00

I have just experience a funny thing when using ssh on my mac. Usually, I access my file server through wifi, but the access rate was not quite acceptable for iso transfer. Hence, I tried using wired network. What a surprise, I could not access the server using ssh although I could ping the server.

It was not
- MacOS problem as I could access the file server using wifi.
- Firewall problem as I could access the file server using my windows and ubuntu machine with the same IP address.

I have tried to delete .ssh/known_host without any luck!

What a problem.....

python for mac: installation

2007-07-11T06:10:00.000+07:00

People can say that apple is not opensource, but I am still love it. Actually, vista has better gui than macos, but again people say wait for macos 10.5.

Anyway, I am still love my new MacBook Pro.

I'd like to learn python again to maintain my Online Enrolment System [KRS] for my faculty. I remembered when OSDC Meeting in Melbourne, December 2005, Jeff Waugh said that Ubuntu has better support off the shelf for python than any other distro. But, now, I need to install it on my mac. Mac comes with python version 2.3.5 while the newest is version 2.5.1.

Browsing on the python website, I found out that there is macos version for python [download from here: http://www.python.org/ftp/python/2.5.1/python-2.5.1-macosx.dmg]. The file is almost 18 MB. Download it, double click on it, open the installer.

> double click on MacPython.mpkg
> Click on "Continue" button on Introduction, Read Me and Licence pages, then click "Agree" to acknowledge the Licence Agreement.
> Pick the daetination then click on "Continue" button.
> Choose "Install" then enter the password for the admin user.
> Then close it after installation is finished.

To try it:
type python on terminal, you will get directly the new version:
daniel-adinugrohos-computer:~ adinugro$ python
Python 2.5.1 (r251:54869, Apr 18 2007, 22:08:04)
[GCC 4.0.1 (Apple Computer, Inc. build 5367)] on darwin
Type "help", "copyright", "credits" or "license" for more information.
>>>
[use Ctrl-D to exit from python interpreter]

This is what I love with mac, instalation is very simple and has the pattern and interface. Although, Linux is catching up with klik, synaptic and many more.

few days in exile......

2007-07-10T02:32:00.000+07:00

just kidding, it has been few days since my last posting. I was rather busy finishing my research progress report. It is about Student Enrolment via SMS. Today is the deadline to send the report, but I have not finished yet. That's why I woke up in the early morning. Moreover my little daughter was awake asking for milk.

She is a good daughter, she rarely wake up in the night. Usually just wake up at 2 AM and 4 AM. Sometimes even only once at 2AM. I am lucky to have good and understanding children.

finding the best calendar software

2007-07-05T01:18:00.000+07:00

starting from july 2007, i have been in charged for academic matters. it is not easy, so many meetings, while i have to finish my marking.

my other job is to reorganize our curriculum and drawing a best strategy to our students to graduate in 3.5 years plus having more broader knowledge and practical implementable skills.

one thing i learn that timetable is very important. it is not just to organize our schedule but also to others to understand our schedule so that they can see us if they need it.

now, my journey is begin, finding the best calendar software ........

transfer big files ....

2007-07-02T22:27:00.000+07:00

transferring a file larger than 4 gb was is a pain. i could not do it from fedora 4/5 although ubuntu feisty fawn could.

the problem is I need to transfer file from my gateway server [fedora 5] to file server [fedora 4].

[scp simply cannot do that as the file, ubuntu repo, is over 4gb. it is the limitation of scp protocol.] <-- not sure, see comment!

sftp should be able to do it by don't know why it stops at 4gb marked.

solution using dd:
# dd if=ubuntu-repo-amd64-1.iso | ssh root@192.168.1.1 of=/data/ubuntu-repo-amd64.iso

resulting the same!

any suggestions?

vps: ftp server

2007-06-29T03:06:00.000+07:00

second things that is checked by isponfig installation is ftp server. I will install proftpd:

debian:~# apt-get install proftpd ucf
[choose standalone when asked inetd / standalone]

debian:~# vim /etc/proftpd/proftpd.conf

in line 10: set

UseIPv6 off

add in line 12:
DefaultRoot ~
IdentLookups off
ServerIdent on "FTP Server ready."

create a link in /etc as ispconfig need it, then restart proftpd:

debian:~# ln -s /etc/proftpd/proftpd.conf /etc/proftpd.conf
debian:~# /etc/init.d/proftpd restart
Stopping ftp server: proftpd.
Starting ftp server: proftpd.
debian:~#

Now, finish with the proftpd installation.

vps: quota

2007-06-29T02:26:00.000+07:00

Other requirements to install ispconfig is quota. To install quota, run:

debian:~# apt-get install quota

Edit /etc/fstab:

debian:~# vim /etc/fstab

Add usrquota,grpquota to partition with the mount point "/", in my case: /dev/sda1.

/dev/sda1 / ext3 defaults,usrquota,grpquota 1 1

Enable quota by:
debian:~# touch /aquota.user /aquota.group
debian:~# chmod 600 /aquota.*

[this is from my experience, somehow it is best to turn quota off before doing checking
and use aquota.user and aquota.group, if we use quota.user and quota.group, sometimes the kernel unsupported error message will be appeared]

debian:~# quotaoff -a
debian:~# quotacheck -avugm
quotacheck: Scanning /dev/sda1 [/] done
quotacheck: Checked 9318 directories and 80043 files
debian:~# quotaon -avug

Finish, with the quota problem.

vps: sendmail

2007-06-29T01:59:00.000+07:00

In order to be able to install ispconfig, we need to have mail transfer agent (MTA). I choode to install sendmail for this case.

debian:~# apt-get install sendmail

that's all you need!

vps: webmin and usermin

2007-06-28T05:49:00.001+07:00

Most people think that a console is the sys admin only tools. I am disagree with that. GUI is not that bad. Especially, for occasional sys admin like me :)

Webmin and Usermin are one of many good tools to do that. To install it do:

1. Get the latest debian packages, by simply run:
debian:~# wget http://prdownloads.sourceforge.net/webadmin/webmin_1.350_all.deb
debian:~# wget http://prdownloads.sourceforge.net/webadmin/usermin_1.280_all.deb

2. Then install their dependent packages:
debian:~# apt-get install openssl libnet-ssleay-perl libauthen-pam-perl libio-pty-perl libmd5-perl

[openssl is required in my vps, while I don't find it in the instruction.]

3. Now, you can install webmin/usermin package without error message:
debian:~# dpkg -i webmin_1.350_all.deb usermin_1.280_all.deb

4. also update your rc*.d and so webmin/usermin will startup correctly, and able to manage by using rcconf:
debian:~# rm -rvf /etc/rc*d/S*webmin*
debian:~# rm -rvf /etc/rc*d/K*webmin*
debian:~# rm -rvf /etc/rc*d/S*usermin*
debian:~# rm -rvf /etc/rc*d/K*usermin*
debian:~# update-rc.d -f webmin defaults 99 01
debian:~# update-rc.d -f usermin defaults 99 01

5. you can now log into your webmin interface by
https://www.example.com:10000 for webmin, and
https://www.example.com:20000 for usermin

Enjoy the GUI Server Management!

sources: http://edin.no-ip.com/html/?q=webmin_usermin_debian_etch_mini_howto

friend, some of them are real, some of them are just enemies undercover

2007-06-28T05:24:00.000+07:00

the title tell.....

it is hard to find a truly friends. most of the time we will meet people that keep telling us that he is our best friends but he always does bad thing to you, he just wanna take advantage of you.

the difficult thing is that you keep telling yourself that he is your friend!

vps: installing name server, bind9

2007-06-27T05:14:00.000+07:00

Name server is needed to manage the hostname to ip address matching. Usually, we use BIND in linux. To install it in my vps, I follow the instructions in http://www.howtoforge.com/perfect_setup_debian_etch_p4 :

debian:~# apt-get install bind9

For security reasons, run BIND chrooted:

debian:~# /etc/init.d/bind9 stop
Stopping domain name service...: bind.
debian:~# vim /etc/default/bind9

edit line 1, so become:

OPTIONS="-u bind -t /var/lib/named"

Create some necessary directories under /var/lib:

debian:~# mkdir -p /var/lib/named/etc
debian:~# mkdir /var/lib/named/dev
debian:~# mkdir -p /var/lib/named/var/cache/bind
debian:~# mkdir -p /var/lib/named/var/run/bind/run

Then move the configuration directory from /etc to /var/lib/named/etc:
debian:~# mv /etc/bind /var/lib/named/etc

Create a symbolic link to the new configuration directory from the old location (to avoid problems when bind gets updated in the future):
debian:~# ln -s /var/lib/named/etc/bind /etc/bind

Make null and random devices, and fix permissions of the directories:
debian:~# mknod /var/lib/named/dev/null c 1 3
debian:~# mknod /var/lib/named/dev/random c 1 8
debian:~# chmod 666 /var/lib/named/dev/null /var/lib/named/dev/random
debian:~# chown -R bind:bind /var/lib/named/var/*
debian:~# chown -R bind:bind /var/lib/named/etc/bind

We need to modify /etc/default/syslogd so that we can still get important messages logged to the system logs.

debian:~# vim /etc/default/syslogd

edit line 13, so become:
SYSLOGD="-a /var/lib/named/dev/log"

Restart the logging daemon:
debian:~# /etc/init.d/sysklogd restart
Restarting system log daemon: syslogd.

Start up BIND, and check /var/log/syslog for errors:
debian:~# /etc/init.d/bind9 start
Starting domain name service...: bind.
debian:~#

sources: http://www.howtoforge.com/perfect_setup_debian_etch_p4

System Information using phpsysinfo

2007-06-27T03:44:00.000+07:00

To monitor a server from anywhere using the Internet, you can use this php scripts: phpsysinfo. You only need to install it:

debian:~# apt-get install phpsysinfo

Then, open your browser, goto: www.yourdomain.com/phpsysinfo or your-ip-address/phpsysinfo.

There are several template and language supported. Even, Indonesian is there.

For security reason, rename the phpsysinfo to other unique name. This is not entirely secure but it is better than still using phpsysinfo name, for example: kuntul.

This is very useful scripts for a sys-admin.

securing vps[4]: turn off directory browsing

2007-06-26T05:11:00.000+07:00

Directory browsing is good for intranet with low security, as you do not need separate html coding to produce indexes. But for a web server it is not a good practice. In order to turn it off, edit default file in /etc/apache2/sites-available:

debian:~# cd /etc/apache2/sites-available/
debian:/etc/apache2/sites-available# vim default

add "-" before Indexes in line 11,

Options -Indexes FollowSymLinks MultiViews

don't forget to restart the apache.,

debian:/etc/apache2/sites-available# /etc/init.d/apache2 restart
Forcing reload of web server (apache2)....
debian:/etc/apache2/sites-available#

Now, you will get 403 Forbidden instead of the indexes page.

president Bush daughter made an illegal copy of mix cd

2007-06-25T05:57:00.000+07:00

A lawyer has just make a sensation. He told public that president Bush daughter made an illegal copy of mix cd for her father's present in Father's Day. See Lawyer to RIAA: Sue the First Twins for copyright violations!

Unfortunately, US regulation allows such activity, which I am quite surprised that the lawyer did not know before make the headlines.

I was thinking that in Australia, we do not allow to do that. Anyone remember?

securing vps[3]: hide apache version

2007-06-23T20:51:00.000+07:00

It's apache turn. The web server still showing its identity when we telnet it. Edit apache2.conf in /etc/apache2/apache2.conf

debian:~# cd /etc/apache2/
debian:/etc/apache2# ls
apache2.conf envvars mods-available ports.conf sites-enabled
conf.d httpd.conf mods-enabled sites-available
debian:/etc/apache2# vi apache2.conf

# only display 'apache'
ServerTokens ProductOnly

# do not display additional information
ServerSignature Off

Don't forget to restart the web service,
debian:/etc/apache2# /etc/init.d/apache2 restart
Forcing reload of web server (apache2)....
debian:/etc/apache2#

The output become:
daniel-adinugrohos-computer:~ adinugro$ telnet xxxx.vpsfarm.com 80
Trying 209.9.228.xxx...
Connected to xxxx.vpsfarm.com.
Escape character is '^]'.
HEAD / HTTP/1.1

HTTP/1.1 400 Bad Request
Date: Sat, 23 Jun 2007 14:05:04 GMT
Server: Apache
Connection: close
Content-Type: text/html; charset=iso-8859-1

Connection closed by foreign host.
daniel-adinugrohos-computer:~ adinugro$

See the differences!

securing vps[2]: secure php version information

2007-06-23T06:22:00.000+07:00

Knowing the version of php is big advantage for a hacker. He or she can use the unpatched hole to attack the web server. Try this (see the bold words):

daniel-adinugrohos-computer:~ adinugro$ telnet xxxx.vpsfarm.com 80
Trying 209.9.228.xxx...
Connected to xxxx.vpsfarm.com.
Escape character is '^]'.
GET / HTTP/1.1 [type enter twice here]

[the output will be:]
HTTP/1.1 400 Bad Request
Date: Fri, 22 Jun 2007 23:05:06 GMT
Server: Apache/2.2.3 (Debian) PHP/5.2.0-8+etch4
Content-Length: 335
Connection: close
Content-Type: text/html; charset=iso-8859-1

In order to secure this, we must edit the php setting in php.ini. Do this:

debian:~# cd /etc/php5/apache2/
debian:/etc/php5/apache2# ls
conf.d php.ini
debian:/etc/php5/apache2# vi php.ini

# remove X-Powered-By
expose_php = Off [in line 260]

# also turn of the error information, it is the best practice for production server.
display_errors= Off [in line 323]

# don't forget to restart the web server:
debian:~# /etc/init.d/apache2 restart
Forcing reload of web server (apache2)....
debian:~#

Now, try again the testing:

daniel-adinugrohos-computer:~ adinugro$ telnet xxxx.vpsfarm.com 80
Trying 209.9.228.xxx...
Connected to xxxx.vpsfarm.com.
Escape character is '^]'.
GET / HTTP/1.1 [type enter twice here]

HTTP/1.1 400 Bad Request
Date: Fri, 22 Jun 2007 23:51:10 GMT
Server: Apache/2.2.3 (Debian)
Connection: close
Content-Type: text/html; charset=iso-8859-1

Connection closed by foreign host.
daniel-adinugrohos-computer:~ adinugro$

See the differences! It is not finish yet as the apache version is still shown. Next post will be how to turn off that!

vps: remove default apache redirection

2007-06-22T05:37:00.000+07:00

Apache has default page to tell us that the installation was succesful. Once, we are satisfy with the result, remove the redirection by doing this:

debian:~# cd /etc/apache2/sites-available/
debian:/etc/apache2/sites-available# ls
default
debian:/etc/apache2/sites-available# vi default

find the RedirectMatch line, in my case it is in line 46. Comment it out by placing '#' in front of it:

#RedirectMatch ^/$ /apache2-default/

Finally, check whether the redirection is removed by creating a simple index.php, don't forget to restart the apache, then go to your web browser to check whether you are redirected or not.

debian:/etc/apache2/sites-available# /etc/init.d/apache2 restart
Forcing reload of web server (apache2)....

You can simply remove the apache-default directory as it is unused anymore.

debian:/var/www# rm -rf apache2-default/

Now, your web server ready to serve!

securing vps[1]: change mysql password

2007-06-21T05:28:00.000+07:00

Installing phpmyadmin will help us in managing our mysql database. In my opinion, it is not only for beginner, but for advanced user as well.

Our mysql server has no password for root. It is very dangerous! We can change the password via mysql client [why I chose to install mysql-client], but I like to use phpmyadmin.

1. First thing first, go to the phpmyadmin on our server, login as root with blank password.
2. Choose mysql(17) database on the left menu.
3. Find user table, and click on it.
4. Click on Browse tab, to get the content of this table.
5. In order to change the password, click the pen picture on the row which has user = root and Host = localhost.
6. On the next window, type your password and don't forget to apply Password on the Function field. Click on Go button to save the changes.
7. Apply the same changes to the all root account. You can use the same password for all of the root password depend on your situation.
8. Now, I have changed the password. Choose the Home button on the left side menu. Then, Choose Reload Privileges to flush all the privileges, and click on Go button.
9. We will forward to the login page again. Try to login using root with blank password, your login will be failed.
10. Try with the new password and you can use phpmyadmin again.

Next, I am tending to change the name of phpmyadmin as well. This is just to hide my phpmyadmin from outsiders. By doing this, they have to guess where is the phpmyadmin and the password for root. If you still use phpmyamdmin directory, hackers only need to guess or crack the root password. The way to do it is just renaming the phpmyadmin directory with other name, for example: nasicampur, basisdata, etc.

debian:~# cd /var/www/
debian:/var/www# ls
apache2-default phpmyadmin test.php
debian:/var/www# mv phpmyadmin nasipadang
debian:/var/www# ls
apache2-default nasipadang test.php
debian:/var/www#

Test by go to the your server with nasipadang directory. You will get the phpmyadmin login page.

[Again, for security reason, I has changed again the directory's name.]

installing LAMP on vps

2007-06-20T05:04:00.000+07:00

Nowadays, Linux is becoming easier to install. More supports and wider community means more people are willing to help you out there.

Me next task is setting up LAMP on my vps. Being a debian 4 server, I will use the magic of apt-get.

# just to update the package system
debian:~# apt-get update

# install mysql first, to be able to be picked up by Apache
# also install the client, for debugging purpose
# use meta package mysql-server and mysql-client to get the newest version
debian:~# apt-get install mysql-server mysql-client

# for basic apache+php5 install, do this!
# don't forget to install mpm-prefork to get better multi-threaded support
debian:~# apt-get install apache2 apache2-mpm-prefork php5

# don't forget to install phpmyadmin, to manage your mysql easily.
debian:~# apt-get install phpmyadmin

Testing my setup by open it in the web browser shows, the apache default message "It works!", Also, test the phpmyadmin by open it in the web browser. [At the moment, I don't publish the url as the server has not been secured yet.]

That's all for today. But my jobs has not finished yet. Next is how to secure the LAMP server.

vps, first thing to do!

2007-06-19T04:52:00.000+07:00

More than a month, I have been toying around with the vps. Now, I just want to record my activities with it. I think it is very easy. I use vpsfarm @ www.vpsfarm.com. I think they don't have any machines left at the moment.

I choose debian as it is the root of ubuntu. Five minutes after installation, they send me the password via email.

First thing to do, change the password. it must be unique, between 8-12 characters, combination of upper case, lower case and numbers.

the command is:

debian:~# passwd
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully
debian:~#

You must enter the same password twice, to avoid mistyping the password as the character you typed is not shown in the screen.

It's all done! Next is how we install LAMP into it.

livecd ubuntu feisty fawn

2007-06-18T05:31:00.000+07:00

I remember that last month, I had a trouble to run the new ubuntu livecd. Unfortunately, the livecd asked for username and password. What were they? I thought using livecd, we did not need to create account first.

Browsing the google, found the solution. Just reburn the cd, it may caused by bad burning process. But, I think it was caused by my cdrw. I used to save the iso in my hd, then burn it to cdrw when needed.

Now, I enjoy my experience with ubuntu....

starting from the beginning again...

2007-06-17T05:20:00.000+07:00

As usual, the easiest things to do is start from the beginning. Conquer is easy but defend it is very difficult. Create a new blog is very easy, but maintain it will be huge tasks.

Hopefully, this blog will be the main place for me to record my activities during my busy time to do my jobs.

Gone and borne, lost and having a new one is not the same. But, sadness must end. Otherwise, we will never enjoy our short life.

life must go on...