Andrew G. Allen

Information Security Evangelist, Technologist, and Internet Junkie







(read the blog) (browse the stream) (follow on twitter)

Posts

September 27, 05:44 PM

Here's a fix to a random annoying message I was getting on my iPhone, in the Photos application...


When entering the application, or scrolling between videos and photos, I would get a pop-up message stating "This movie format is not supported"... even when viewing photos. After some not-so-furious Googling, it was solved by scrolling through until I found a video that would not play - it had the video icon and play button, but was all black. Deleting this corrupt video file fixed the issue...

Permalink | Leave a comment  »

September 23, 05:35 PM

Over here in the UK, OnLive has just launched in partnership with BT. It's concept is to stream games directly to your PC, Mac, mobile device or TV etc, without the requirement for high end hardware - think of it like an SBC (Server Based Computing) product similar to Citrix Presentation Server or XenApp, but optimised for gaming. The expensive kit sits in the OnLive datacenters somewhere, while your own computer, with the installed OnLive software, becomes a thin-client - only your keyboard / mouse movements are sent over the wire, along with an audio / video stream of the game itself.

Because BT are the UK partner, if you are a BT Broadband customer, then you're entitled to a 3 month free trial of the service - specifically the OnLive PlayPack Bundle, a collection of over 100 games. Fortunately for me:

  1. I have BT Infinity, and;
  2. the two 19" LCDs I ordered off eBay earlier in the week have arrived.

Having already loaded a clean copy of Windows 7 onto my Dell OptiPlex 745 (while still waiting for the 2 x 755's to arrive), I signed up to OnLive and installed the client software - no issues, and all straight forward. It should be a good test for it's advertised promise, as the 745 has far from a decent graphics card for any kind of gaming (being an onboard Intel Graphics Media Accelerator 3000). The key requirement for such as service is, however, a low latency connection - it will be interesting to see if this is possible over UK broadband networks, particularly during peak times, and especially on BT's own network.

Loading up the software and logging in was straight forward - I did receive a notification that my latency was not great.... hmm, this is BT's network, the selected UK OnLive partner, on BT's fastest broadband service, BT Infinity! I quit and relaunched the app, which didn't re-prompt the latency issue, so just carried on as normal.

Once logged in and using the service, it's clear that it's all full screen streamed video content as you can see the compression being dynamically adjusted depending on the quality of the connection, but it is impressive none the less. If you end up trying the service yourself, I would recommend jumping straight into the 'Arena', which displays a scrollable grid of live in game users, allowing you to spectate in real-time any current game session in progress - it's one of those things to show someone to get a quick "wow!", but functionality wise it's also a good way to see what games are available, how they play out, and the performance of the service.

Playing games does show some lag between your keyboard / mouse movements and the game reacting back, and although initially annoying, for most it's not too much of a distraction and you gradually adjust to compensate. While playing, again I could see the video compression adjusting, and worse, the audio would jump from mono to stereo then back, with also lots of audio artefacts very noticeable.

After playing around a while with it, and trying out various games, I then installed it onto my MacBook - what was interesting, even after the 'don't use wireless' connections message on startup (as my MacBook connects via 802.11n to an AirPort Extreme), I actually got better performance than on the 745, and no audio drop outs... I put this down to the crappy graphics card in the OptiPlex, that probably couldn't cope with the full screen video very well.

What was even more interesting, I later tried the service again on my MacBook but via my Three MiFi device - and it also worked, though the graphics compression remained pretty heavy.

My experience was not totally without issues and error messages however - the following night, after work, I was faced with 'service full' messages, which is not that surprising considering everyone is probably jumping straight onto the service having just been launched, but I hope it's not something I see too often.

Also when running up another random game, I was presented with a pretty random generic error, booting me straight off...

Final verdict? Not bad, but it will be interesting to see how the available game catalog expands out. There are already some big name games available, but also some pretty cruddy 'never heard of that' titles in there to, which I suspect is to push the 'look how many games are available' marketing message. I did have a lot of fun with Wheelman, wasting a few hours racing / smashing up cars etc, but even so I don't think, at the moment, I'll find myself subscribing after the 3 months free trial period... 

I do, however, recommend you at least check it out, as even if you are not a BT subscriber you can still play most titles in a 30-minute time limited mode, without charge. There is also a promo on at the moment, that the first full title you buy only costs £1.00.

Permalink | Leave a comment  »

September 18, 06:43 PM

Following up from my post yesterday, I managed to get a few really good bargains on eBay today:

    It looks like I'll be able to transfer over the RAM from my existing OptiPlex 740 / 745 systems into the new ones, which should avoid any further memory purchases - I've also got plenty of spare hard drives, so it will be just a case of making sure the fastest ones are installed. Overall, they'll be two identical pretty well spec'd machines, especially with the E8400 processors - the key will be if I can get XenClient installed and working successfully. If any further 'juice' is required in the future, I can drop a couple of decent PCI Express graphic cards into the PCIE-16 slots, though for the moment I'll have dual-port NIC cards installed in that spot for my own use in the lab.

    After also investigating kid friendly software, I've now built up a list of good / must-have software and web sites (and all free!):

    • KIDO'Z - an Adobe AIR-based Web Operating System for children between the ages of 3-7 yrs.
    • KidZui - a web browser designed for children developed by KidZui, Inc.
    • KidRex - Google search, but it's content limited to 'kid friendly' content
    • Edubuntu - linux based distribution with education software components
    • Norton Online Family - access control and monitoring solution
    • OpenDNS - additional site categorisation based access control using DNS

    Within Windows 7 itself, the parental controls are not that far reaching - you're able to limit when user accounts can be used (i.e. what days / hours), and what applications can be run, though it seems a number of built in Windows applications can't be limited, including Internet Explorer. Instead, something like Norton Online Family helps, as it layers on top extra controls and limitations, to prevent certain internet content from being viewed or accessed. In addition, using OpenDNS layers more control over site categorisation, and plays it's part of 'defence in depth'.

    Access to internet sites through Internet Explorer should not really be a problem with my two at the moment, as I focus their activities through the KidZui and KIDO'Z children oriented web browsers, with access only to pre-filtered, human categorised content. The Edubuntu distribution also has a lot of good educational focused software, which I am currently running inside VirtualBox, until I get the new base units and test / run XenClient.

    One other site I randomly came across was KidRex - a portal to the Google search engine, but uses Google Custom Search, and Google SafeSearch to limit access to unsuitable search results... I've set this as the default home page on Internet Explorer, but I also need to add it as the default search site when using the search box or address bar.

    If you're not familiar with XenClient by the way, there are some very good introduction videos on the Citrix site:

    Over on XenAppBlog, Eric ended up switching from XenClient to Hyper-V, but I'll see how far I get with my setup for home use, rather than for my consulting day job.

      Permalink | Leave a comment  »

      September 17, 05:28 PM

      Up until now, my kids have been using our MacBooks (with our oversight), which is great because they are simple to use, easy to learn, and their applications (such as Kidoz and KidZui) are quick to open from the LaunchBar.

      However, as Amy is now learning ICT at school, I am planning to re-jig the setup at home to make the transition back and forth between school and home more consistent - this means primarily a desktop machine with Windows.

      A couple of thoughts here - firstly, we've two kids, so what you do with one, you do with the other - therefore two machines are required. Secondly, it would be nice to keep costs down (i.e. ebay), and thirdly, make the setup as useful as possible, both to them... and to me :)

      After a few different thoughts, I've decided to experiment with implementing a XenClient solution, a type-1 bare-metal hypervisor - it's free on standalone systems, and allows multiple virtual operating systems to be used at the same time, but without loosing out on performance like you might see with type-2 solution such as VMware Workstation or VirtualBox installed on top of the operating system. On each of the kids PCs, they'll have their own locked down Windows VM, plus possibly another with Edubuntu, while I'll have my own VMs to connect into other parts of my lab.

      So, I've already checked what I can reuse of the kit I already have - of my spare desktops, a Dell OptiPlex 740, and a Dell OptiPlex 745 seem likely candidates (8GB of RAM each, as I've been using them as Hyper-V hosts). Any Dell system ending in a '5' will be Intel based, while '0' are generally AMD systems.

      With the latest release of XenClient 2.0, it's now possible to run on non-vPro systems - this means as long as you have VT-x, you should now be able to use XenClient, though with just 2D support on those systems, as long as Intel integrated graphics are present. On vPro systems (i.e. those that also support VT-d), you'll get the full 3D support, and therefore, for example, all the Window Aero, OpenGL and DirectX support on Windows 7.

      Looking over my own two OptiPlex machines, the Intel based 745 does not have vPro technology, but does support VT-x. I ran through a quick XenClient install, but while being reminded that the system did not support VT-d, it did allow me to proceed. However, I quickly hit a road-block a couple of screens further on, when it could not detect any hard disks, kindly advising to enable AHCI in the BIOS... not possible, as the option does not exist.

      On the 740, being AMD, I didn't expect much success, which proved to be true - it didn't even reach the installation screen, with my monitor complaining of being unable to display the video mode.

      So after some further researching, the Dell OptiPlex 755 seems like the next best option, fully supporting vPro, and so fully capable of supporting XenClient 2.0 - this was further confirmed on the Xen Wiki. The 755 also has the bios option to enable / disable AHCI support.

      I am now planning on picking up two 755 systems, along with a couple of refurbished Dell 19" LCD monitors - when you've two kids of similar age, everything has to be the same... trust me :) In the mean time, I am going to install Windows 7 on the 740 / 745, and remind myself of the Windows 7 parental control options, possibly also revisit the latest version of Norton Online Family.

      Update: Kids, Computers and XenClient - Part 2

      Permalink | Leave a comment  »

      November 25, 10:34 AM

      Here is a useful way to bring an unresponsive Netware server down quickly – one step safer than pulling out the power cord...

      At the console, press and hold right-alt, right-shift, left-shift then press ESC. The hidden debug screen will then be displayed. Type ‘q’ to quit, then ‘y’ to confirm.

      One instantly dead Netware server J

      Permalink | Leave a comment  »

      November 15, 12:56 PM

      Just a quickie that comes up quite often – how to disconnect the console user on a remote server, in particular, a Windows 2000 server where you can’t use RDP to connect directly to the console itself; i.e. you can’t mstsc /console or /admin (depending on the version of the RDP client).

      If you’ve not already got a copy of the Sysinternals Suite on you system, grab a copy from Microsoft’s site as the tool you’ll need is PsShutdown. At a command prompt, type the following:

      PSSHUTDOWN \\remoteserver -O -F -T 0

      You can then verify the session has been logged out with the following:

      QWINSTA /server:remoteserver

      Permalink | Leave a comment  »

      July 09, 05:02 AM

      Just announced on the Maltego blog (http://maltego.blogspot.com/2010/07/ce-is-live.html), the community edition of version 3.0 is now available. I downloaded and did a quick test of the new product this morning, which already seems quicker than the previous versions, and is themed with a Microsoft ribbon style interface.

      You now need to register to use the software (you're prompted during installation), and some of the tasks that needed manual intervention are now automated (such as updating the transforms, which is now done as part of the installation process). Also, where previously you needed to go through and accept the disclaimers on certain transforms before you used them, now on first use you are presented with a dialog box which helps with not breaking up your work flow.

      Limits are also reduced - one which I reached regularly on 2.0 was the 75 transforms per day - I don't remember seeing where these new limits are documented, but maybe there is something over on the Maltego blog I missed.

      Permalink | Leave a comment  »

      June 03, 07:31 AM

      Java is one of those components that most users have installed, but can be infrequently updated and forgotten about. Updates are published on a regular basis, the most recent of which having been set free in April of this year, and although supplied with a self-updating mechanism, it's just not suitable within controlled corporate environments with good acceptable use polices in place.

      Following the trend of other popular software, the Java Runtime is also bloating out with other 'useful-less' components, so on a default install you can find yourself with extra memory resident processes, browser plug-ins and helper objects which are just not required to provide applications access to the Java Runtime.

      Because of this, I now update my own lab environment with a scripted silent install of Java - it does not include the extra plug-ins and browser helper objects during installation, or the memory resident updater tool. Are there any other suggestions to keep the Java Runtime installation down to a minimum? I believe in only installing what is absolutely required.

      1
      2
      3
      4
      5
      6
      7
      8
      9
      10
      11
      12
      13
      14
      15
      16
      17
      18
      19
      20
      21
      22
      23
      24
      25
      26
      27
      28
      29
      30
      31
      32
      33
      34
      35
      36
      
      @ECHO OFF & @SETLOCAL ENABLEEXTENSIONS & CLS
      ECHO.SilentJavaInstall.cmd 1.0.3 (1st March 2011)
      ECHO.Andrew G. Allen, http://www.andrewallen.co.uk/ & ECHO.

      :: This work is licenced under a Creative Commons GNU General Public License.
      :: See http://creativecommons.org/licenses/GPL/2.0/ for more information.

      :: History:
      :: - 1.0 - 3rd June 2010 - Initial release.
      :: - 1.0.1 - 9th July 2010 - Java SE Runtime Environment 6u21 available (jre-6u21-windows-i586.exe).
      :: - 1.0.2 - 25th January 2011 - Java SE Runtime Environment 6u23 available jre-6u23-windows-i586.exe).
      :: - 1.0.3 - 1st March 2011 - Java SE Runtime Environment 6u24 available jre-6u24-windows-i586-s.exe).


      :CODE

      :: java 6 update 24
      start /WAIT "" "%~d0%~p0jre-6u24-windows-i586-s.exe" /s /v "/qn SYSTRAY=0 EULA=1 REBOOT=ReallySupress JAVAUPDATE=0 AUTOUPDATECHECK=0 IEXPLORER=0 MOZILLA=0 JU=0"

      :: post install...

      :: -- remove startup entry
      reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SunJavaUpdateSched" /f
       
      :: -- disable auto update features
      reg add "HKLM\SOFTWARE\JavaSoft\Java Update\Policy" /v "EnableJavaUpdate" /t "REG_DWORD" /d "0" /f
       
      :: -- remove unneeded browser helper objects
      reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435B-BC74-9C25C1C588A9}" /f
      reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}" /f

      :END_CODE


      @ENDLOCAL
      :EOF

      Permalink | Leave a comment  »

      December 10, 08:56 AM

      There are now quite a number of podcasts available, covering all areas of Information Security - I find it a great way to stay up to date with the industry news, particularly when commuting. A fairly comprehensive list can be found at http://getmon.com/, while my current regular favorites are below:

      • Paul Dot Com Security Weekly (feed) - one of the longest established US based security podcasts, normally around 2 hours long, with interviews, technical segments and industry news.
      • Risky Business (feed) - an Australian based ~30 minute show, neatly split into news, interview and sponsor interview
      • 2600 | Off The Hook (feed) - airs every Wednesday night at 7:00 PM EST in New York City on listener supported WBAI 99.5 FM.

      I've created an aggregated feed of my Podroll, which makes subscribing quick and simple - on my phone, it means adding just one feed, instead of lots of different feeds for different podcasts (very useful when rebuilding your phone after flashing the latest ROM)... I did try RSSmix.com, which IronGeek also uses, but I found updates through the site don't seem to be that regular (and the site itself can run pretty slow as well), which means missing out on the latest content. Instead, I use Yahoo Pipes to merge and manipulate the various feeds together, and then publish through Feedburner to get some extra control / statistics.

      You can subscribe to my Podroll feed here (http://feeds.andrewallen.co.uk/andrewallen/podroll), or you can view the Yahoo Pipes source here.

      Update - Dec 14

      I've updated the pipe to include the following feeds, and also strip posts with no enclosures:

      Permalink | Leave a comment  »

      November 13, 04:51 PM

      If you are following the latest releases in regards to BackTrack, following a recent update you may have experienced error when PostgreSQL attempts to start:

      Starting PostgreSQL 8.3 database server: main* The PostgreSQL server failed to start. Please check the log output:

      Then further down:

      could not load server certificate file “server.crt”: No such file or directory

      Here is a quick fix - at the console, type:

      cd /etc/ssl/certs
      ls -ld /etc/ssl/private
      sudo ls -l /etc/ssl/private/
      make-ssl-cert generate-default-snakeoil -force-overwrite
      cd /etc/ssl/certs

      Re-run the update commands, and you should be good to go:

      apt-get update
      apt-get upgrade
      apt-get dist-upgrade

      Permalink | Leave a comment  »

      November 03, 08:45 AM

      About 6 months ago I switched to using VirtualBox on my Mac, in place of VMware Fusion - It provided decent performance, works well across multiple spaces and of course is free. I have always felt that VMware have dumbed down the Fusion client when compared to Workstation on Windows, as various options seem hidden away from view (although configurable when you get down and dirty in the VMX files).

      The only remaining issue I had experienced until recently, was that some USB devices would not map through correctly to the guest - in my case Windows 7 Ultimate 64-bit. When trying to connect the device on the first attempt, nothing would appear to happen, then when you tried to map it through again you'd get various error messages.

      After a brief Googling session, I found the fix was to add a 'USB Device Filter' for the affected device, under the 'USB Settings' of the guest, but making sure to clear all fields except the 'Name'. Once the guest was powered up, I no longer had any issues mapping through the USB device.

      Permalink | Leave a comment  »

      October 12, 05:32 AM

      After having used Chrome for so long on my Mac (in the dev channel via the very useful Chromium Updater), switching back to Firefox reveals an interesting habit - searching via the address bar. In Chrome, you can type your search directly in the address bar and you'll get redirected to Google for your search results, however in Firefox it reacts slightly differently - it will carry out a Google "I'm feeling lucky" search which will direct you to the first result Google returns.

      You can customise this behavior in the 'about:config' page within Firefox. Type 'about:config' into the address bar, and then update the 'keyword.URL' field to your chosen search engine. For example, if you wanted to use Scroogle instead, you would type:

      By the way, If you are not already using Scroogle, it's a simple way to anonymise your search requests.

      Permalink | Leave a comment  »

      October 10, 09:18 AM

      It's quite common that you need to remove some software when running in Safe Mode, particularly when you find your system is unusable when running normally. However, by default, the key service required to manage installed software is not running, and cannot be started (the Windows Installer Service, aka MSIServer).

      Here is a quick way around this issue - by adding the registry entry below, you'll then be able to start the service and remove / install the software you require.

      reg add "HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer" /VE /T REG_SZ /F /D "Service"
      sc start msiserver`

      Once this change is made, it will remain permanent, and you won't need to re-apply it in the future, although you'll still need to start the msiserver service when required.

      Permalink | Leave a comment  »

      October 01, 08:59 AM

      Here's the situation - you've remotely migrated all the data and printing services from a Netware server onto it's replacement, and you have just completed uninstalling eDirectory / NDS... the servers are locked away in the data center.

      Just before you power it off, you find that one of the migrated volumes are not complete - data is missing! D'oh!

      The old server is still powered up, but you can no longer authenticate to it across the network (no longer in the tree) - tools such as Adrem Free Console are no good, since you need to be able to authenticate. You still access to the server console, via the iLO (Integrated Lights-Out) / DRAC (Dell Remote Access Controller) - whew!

      Getting the data off via ftp is the most straight forward, but is not a native app - thankfully it can be accessed via Bash. At the console prompt, type 'bash' then <enter> to drop into the shell. By default you'll find yourself on the SYS volume, with no obvious way of getting onto any of the other volumes. The data you need to rescue is on the DATA volume.
      1. At the Bash prompt, type 'mkdir /data', then press <enter>
      2. Type 'vi /etc/PATHTAB', then <enter>.
      3. Hit 'i' to enter insert mode and type '/data data:\'.
      4. Press 'Escape', then ':wq' and <enter>.
      5. Type 'exit' <enter> to unload the Bash shell, then type 'BASH' <enter> at the console prompt to load the shell again.
      6. Type 'cd /data' <enter> then 'ls' <enter> to display the root of the DATA volume - voila.
      Now you have access to the data, the final step is to manually transfer over the missing portions of the data - using ftp, navigate to your selected folder, type 'ftp' <enter>, then 'open <new server>'. Once you've entered your username and password, you can now 'put <file>' to transfer across your missing data - you get the idea anyway.

      Permalink | Leave a comment  »

      September 30, 08:23 AM

      If you don't currently follow the Command line Kung Fu blog, I highly suggest you do! Originally started back in February this year by Paul Asadoorian (of PaulDotCom), Ed Skoudis and Hal Pomeranz, each week they publish solutions to challenges posed to each other, using only the command line utilities included on a default installation of Windows, Linux and Mac OS - many of the published solutions contain really useful snippets of code to include in your own scripts.

      Something that was covered in Episodes #28, #49 and #52 was customising the command prompt in various ways. On my own Windows systems I now include the following command prompt customisation by default:

      30/09/2009 13:30:34.98 C:\>

      Why? The biggest benefit is knowing when commands were started, and when they completed. Many tools don't provide feedback with time and dates, and so by the nature of the date and time being printed on screen each time a prompt is provided, you get a quick and dirty way to see how long a command took to execute.

      Setting the prompt temporarily can be done with the 'prompt' command (or 'set prompt'), while making the change permanently can be done by adding an entry to the registry - both can be seen below.

      In addition, my prompt also displays how many paths are on the pushd and popd stack, as also seen above.

      Permalink | Leave a comment  »

      September 28, 09:14 AM

      Microsoft Notepad is probably (and unintentionally) one of my most used utilities, for example, when when stripping text formatting from content cut/copied from Word or Internet Explorer, or editing batch, vb, or <insert language here> scripts.

      It's very quick to bring up Notepad (Windows + R, notepad <return>) as quick dumping ground for the clipboard, and uses very little resources, however it does have it's limitations - Unix carriage returns, no regular expression support to name but a few.

      A highly recommended tool open-source replacement, which has now become one of my indisposable tools, is Notepad++.

      "Notepad++ is a free (as in "free speech" and also as in "free beer") source code editor and Notepad replacement that supports several languages. Running in the MS Windows environment, its use is governed by GPL License."

      "Based on a powerful editing component Scintilla, Notepad++ is written in C++ and uses pure Win32 API and STL which ensures a higher execution speed and smaller program size. By optimizing as many routines as possible without losing user friendliness, Notepad++ is trying to reduce the world carbon dioxide emissions. When using less CPU power, the PC can throttle down and reduce power consumption, resulting in a greener environment."

      Some of the key benefits, for me anyway, include:
      • Syntax Highlighting and Syntax Folding for various languages (including XML, HTML, Perl, Python, VB/VBS, Batch etc)
      • Multi-Document and Multi-View allowing you to view multiple documents and have multiple views between them, or in the same document
      • Regular expression Search/Replace is fully supported
      • File status Auto-detection, which is particularly useful when working on live files, such as logs etc

      There are also a large number of plugins, which extend Notepad++ even further.

      Installation is straight forward - just download the latest installer (or the .zip file), and accept all the defaults. I can also highly recommend installing the Notepad++ launcher, which will allow you to replace Notepad completely:
      1. Backup your original Notepad.exe
      2. Copy notepad.exe which comes with this package into 4 directories (in given order) :
        - c:\windows\servicepackfiles\i386
        - c:\windows\system32\dllcache
        - c:\windows\system32
        - c:\windows
      3. When you replace notepad.exe in c:\windows\system32 and c:\windows, a "Windows File Protection" message box appears, click Cancel. Then another message box appears, click OK.
      4. Modify you registry (if you use installer to install your Notepad++, you don't need to do this step): Create key \HKEY_LOCAL_MACHINE\SOFTWARE\Notepad++, then add your Notepad++ full path as the default value of this key. In my case, it's C:\Program Files\Notepad++.
      If you need any further information, check out the NpWiki++.

      Permalink | Leave a comment  »

      September 25, 06:15 AM

      Underneath Mac OS X is Darwinthe Unix-derived core that provides the underlying foundation for Mac OS X, and although born of BSD, by default many tools you may be used to on a *nix system are not present.


      And so in steps The MacPorts Project as an easy way to install open-source software onto your machine.

      "The MacPorts Project is an open-source community initiative to design an easy-to-use system for compiling, installing, and upgrading either command-line, X11 or Aqua based open-source software on the Mac OS X operating system. To that end we provide the command-line driven MacPorts software package under a BSD License, and through it easy access to thousands of ports that greatly simplify the task of compiling and installing open-source software on your Mac."

      For example, I recently rebuilt my Mac with Snow Leopard, and needed wget back on the system. Here is a quick how-to on getting MacPorts + wget installed:
      1. Download and install the appropriate MacPorts dmg file from http://distfiles.macports.org/MacPorts/ - you can accept all the default installation choices. In my case, I downloaded MacPorts-1.8.0-10.6-SnowLeopard.dmg
      2. Once installed, open up a Terminal, and type 'sudo port selfupdate' and enter your password when prompted - this will make sure your local ports tree and base files are all up to date.
      3. Finally, installing a package is as simple as typing 'sudo port install <package name>', so in my case I installed wget with 'sudo port install wget'. All required dependencies are also automatically installed.
      MacPorts currently has over 6200 ports distributed among 92 different categories, and more are being added on a regular basis. If you need further information, check out the official docs.

       

      Permalink | Leave a comment  »

      September 18, 10:53 AM

      It's been a while since I've had involvement with Netware configuration, but I've recently had to add a tape drive to a Novell Netware 6.5 SP6 server - the key point is to update STARTUP.NCF on the DOS partition to include the required drivers for the SCSI card. For example, I added the lines:

      LOAD NWTAPE.CDM
      LOAD LSIMPTNW.HAM SLOT=2

      The PCI card is loaded into PCI Slot 2 (hence the line above) - you can check which slot your device has been installed to by checking Novell Remote Manager (http://yourserver:8008/ or https://yourserver:8009/), under 'Manage Hardware' -> 'PCI Devices'. Once the driver has loaded (you can load the above drivers manually, without having to reboot the server), check the device is visible using 'LIST DEVICES' on the console.

      Permalink | Leave a comment  »

      March 13, 07:34 PM

      Having recently been focused on a Citrix Presentation Server 4.5 migration, I took some time out to build a development 64-bit environment just to become familiar with any 'gotchas'... This was a single, stand-alone Windows Server 2003 R2 Standard SP2 64-bit operating system, with the 64-bit Citrix Presentation Server 4.5 Enterprise Edition installed, running inside XenServer 4.1 RC7 XenServer 4.1 - I chose to install .NET Framework 3.5 (which includes the required .NET Framework 2.0) and JRE 1.5.0_09.

      Additionally, I installed the following components onto the same box:

      The following hotfixes were then applied to CPS:

      • Citrix Hotfix Rollup Pack PSE450W2K3X64R01.msp
      • Citrix Hotfix PSE450R01W2K3X64003.msp
      • Citrix Hotfix PSE450R01W2K3X64004.msp
      • Citrix Hotfix PSE450R01W2K3X64005.msp
      • Citrix Hotfix PSE450R01W2K3X64012.msp
      • Citrix Hotfix PSE450R01W2K3X64014.msp
      • Citrix Hotfix PSE450R01W2K3X64016.msp
      • Citrix Hotfix PSE450R01W2K3X64019.msp
      • Citrix Hotfix PSE450R01W2K3X64020.msp
      • Citrix Hotfix PSE450R01W2K3X64023.msp

      As a side note, I had installation errors on the rollup, and hotfix 005, but all seems to be working ok... anyway, at some point post-installation the Web Interface decided to stop working. The following error was recorded in the application event log:

      Event Type: Error
      Event Source: .NET Runtime
      Event Category: None
      Event ID: 1023
      Date: 13/03/2008
      Time: 13:05:20
      User: N/A
      Computer: VM4
      Description:
      .NET Runtime version 2.0.50727.1433 - Fatal Execution Engine Error (79FFEE24) (80131506)

      For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

      >

      Server reboots / iisresets had no effect, and after lots of Googling, it looked like there might be a specific .NET hotfix to address the issue (KB913384), however it was only applicable to an older version of the .NET Framework 2.0 - it is supposed to be included / resolved in SP1 (build 1433). Another google confirmed this. After much frustration from a lack of solutions on the Citrix forums / knowledge base, I ended up uninstalling .NET Framework completely (you have to uninstall 3.5, then 3.0 SP1, then 2.0 SP1 in that specific order), then reinstalling the .NET Framework 2.0 RTM (build 42).

      Once I then re-installed Web Interface 4.6 (enabling 32-bit mode in the process, as prompted) and then deleted and re-added the existing site within the Access Management Console, it all sprang back into life. I've not yet re-patched .NET to see if it remains functional...

      Update 1

      The error has occured again:

      Event Type: Error
      Event Source: .NET Runtime
      Event Category: None
      Event ID: 1023
      Date: 14/03/2008
      Time: 08:18:27
      User: N/A
      Computer: VM4
      Description:
      .NET Runtime version 2.0.50727.42 - Fatal Execution Engine Error (7A05E2B3) (80131506)

      For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

      >

      This time, the only change I've made is to install the latest Citrix XenCenter console 4.1 RC7, which itself is .NET application. I ended up having to install the KB913384 fix, which this time was appliable to the version of .NET I had installed. I am going to do a bit more testing to see what is causing it to re-fail.

      Update 2

      And again...

      Event Type: Error
      Event Source: .NET Runtime
      Event Category: None
      Event ID: 1023
      Date: 17/03/2008
      Time: 10:55:32
      User: N/A
      Computer: VM4
      Description:
      .NET Runtime version 2.0.50727.63 - Fatal Execution Engine Error (7A05F093) (80131506)

      For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

      >

      This time I had installed and uninstalled Office 2007.

      Permalink | Leave a comment  »

      January 09, 11:43 AM

      I've used Acronis True Image on quite a large number of Windows systems over the years, as it is a very good product which has gradually expanded it's (already impressive) feature set throughout that time. Just recently, I had the requirement to image a Linux system and so decided to trial the new Acronis True Image Echo Server on Linux - from what I found, there is no 'workstation' product for Linux like the True Image Home product for Windows, and so had to go for the server version instead. Specifically, I needed to backup a 64-bit CentOS 5.1 virtual machine running inside Citrx XenServer Express.

      After registering for the trial version on Acronis.com, downloading the appropriate installation file and moving it into the VM, a quick 'chmod +x TrueImageServerEcho_d_en.i686' made the file ready for installation. The binary is suitable for 32-bit and 64-bit systems - no need for seperate installation files.

      After kicking off the installation ('./TrueImageServerEcho_d_en.i686'), it was pretty much a next-next-finish affair, except I soon found I needed to have the kernel source files and gcc installed, for the installation program to correctly configure the SNAPAPI Module. A quick 'yum install -y kernel-xen-devel gcc' fixed the dependancy issue, and after re-run of the True Image installation file, all required software was now installed.

      By the way, there was no documentation supplied with the downloaded installation file; I found out some of the information on the Acronis website, and also by browing the setup log file (/var/log/trueimage-setup.log).

      Since I don't generally use an X-Windows interface on *nix systems (much prefer the command line via SSH), I've now got to see how far I get with the console tools ('trueimagecmd' and 'trueimagemnt')...

      Permalink | Leave a comment  »

      Posts

      Profile

      Citrix Architect, Technical Consulting & Architecture for Savvis, A CenturyLink Company
      Information Technology and Services | Reading, United Kingdom, GB

      Summary

      Note: I will accept all invites sent to linkedin@allen.io.

      Enthusiastic, experienced and resourceful Security Check (SC) Cleared Architect / Consultant, able to make an increasingly responsible contribution within IT. Driven by a powerful combination of experience and human ability, backed by extensive technical knowledge of legacy and developing systems.

      Through a blending of resourcefulness and a strong enthusiasm to learn, the past 15 years of working in the IT industry has meant valuable experience has been gained designing, implementing and supporting many varied technologies.

      Expertise in working with a multitude of operating systems located both on physical and virtual systems, diverse 'thin client' and 'application delivery' environments, and other core enterprise applications, both on single server, multiple servers, and load balanced / clustered systems.
      Specialties: • IT/IS security & auditing, ethical hacking, computer forensics • Design and management of heterogeneous networks • Microsoft Windows SOE / Active Directory architecture • Exchange 2003 / 2007 / 2010 messaging systems • Citrix Application Delivery Infrastructure (inc. XenServer) • Service Management (ITIL Framework) • Sarbanes-Oxley (SOx/Sarbox) compliance

      Experience

      • Mar 2011 - Present
        Citrix Architect / Savvis
        Savvis, which merged with CenturyLink in July 2011, is an outsourcing provider of managed computing and network infrastructure for IT applications. By outsourcing to Savvis, enterprises can focus on their core business while Savvis ensures the quality of their IT infrastructure. Leading IT organisations around the world have selected Savvis to help them improve their service levels, reduce capital expense and deal with the rising costs of bandwidth, energy, real estate, staff and expertise. As a pioneer in utility computing, Savvis understands and harnesses the latest advances in technology such as virtualisation, cloud computing and support process automation. • Nearly 2,500 unique business and government clients, including more than 30 of the top 100 companies in the Fortune 500 and 10 per cent of companies in the FTSE 100 • More than 2,500 employees with deep expertise in technical operations, customer support, engineering and consulting The Savvis and CenturyLink combined infrastructure extends to 45 countries and includes: • 50 data centres, encompassing approximately 2 million square feet of raised floor • 22,000 managed circuits in a private network supporting multiple application service levels • Tier-1 OC-192 Internet backbone with more than 207,000 miles of fibre

      Education

      Additional Information

      Websites:
      Honors:
      • Certified Information Systems Security Professional (CISSP) • Certified Ethical Hacker (CEH) • Computer Hacking Forensic Investigator (CHFI) • Certified Security Testing Associate (CSTA) • CompTIA Security+ (SEC+) • CompTIA Network+ (NET+) • Microsoft Certified Systems Engineer (MCSE) • Cisco Certified Network Associate (CCNA) • Citrix Certified Administrator (CCA) • Citrix Certified Sales Professional (CCSP) 2011/2012 • ITIL V3 Foundation In progress: • Cisco Certified Network Associate Security (CCNA Security) • Cisco Certified Network Professional (CCNP)
      abcdefghijklmnopqrstuvwxyz abcdefghijklmnopqrstuvwxyz