Tugriceri Web Notes

About

Mon, 02 Nov 2026 00:00:00 +0000

About Tugriceri Web Notes

This web page is no longer maintaining.

Tugriceri Web Notes is a collection of technical notes, experiments and documentation.

The site covers topics including:

Linux & Infrastructure: Linux internals, system administration and automation.
Networking: Cisco, firewalls, routing, VPN and network troubleshooting.
Security & Forensics: Digital forensics, data recovery and security tools.
Virtualization & Containers: Docker, virtualization and self-hosted services.
Technical Research: Experiments, configurations and practical solutions.

This website serves as a personal technical knowledge base and reference library.

Linux Networking

Sun, 01 Nov 2026 00:00:00 +0000

Linux Networking

Write your notes here.

recover files with linux tools

Thu, 16 Jul 2015 11:22:12 +0000

ddhttps://en.wikipedia.org/wiki/Dd_%28Unix%29

dd_rescuehttp://www.garloff.de/kurt/linux/ddrescue/

PhotoRechttp://www.cgsecurity.org/wiki/PhotoRec

Foremosthttp://foremost.sourceforge.net/

MagicRescuehttp://www.itu.dk/people/jobr/magicrescue/

RecoverJpeghttp://www.rfc1149.net/devel/recoverjpeg.html

recover files with linux tools

Thu, 16 Jul 2015 13:22:12 +0200

dd https://en.wikipedia.org/wiki/Dd_%28Unix%29 dd_rescue http://www.garloff.de/kurt/linux/ddrescue/ PhotoRec http://www.cgsecurity.org/wiki/PhotoRec Foremost http://foremost.sourceforge.net/ MagicRescue http://www.itu.dk/people/jobr/magicrescue/ RecoverJpeg http://www.rfc1149.net/devel/recoverjpeg.html

StrongSwan and Android configs

Sat, 27 Apr 2013 14:31:54 +0000

root@six #cat ipsec.confconn tugriceri.com leftsubnet=0.0.0.0/0 left=209.208.63.204 leftcert=/cert/strongswan.pem leftauth=pubkey leftsendcert=yes leftid=six.tugriceri.com right=%any rightid=%any rightsourceip=10.0.5.0/24 rightauth=eap-mschapv2 rightsendcert=never eap_identity=%any auto=addroot@six #cat ipsec.secrets# strongSwan IPsec secrets file : RSA /cert/strongswan.key six.tugriceri.com : RSA /cert/strongswan.key testuser : EAP "secretpass"root@six #cat openssl-req.cfg[req] req_extensions = v3_req distinguished_name = req_distinguished_name prompt = no

[ v3_req ]


Extensions to add to a certificate request
#keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = “DNS:six.tugriceri.com,DNS:www.tugriceri.com,IP:209.208.63.204,DNS:tugriceri.com”
#subjectAltName = @alt_names



StrongSwan and Android configs
Sat, 27 Apr 2013 16:31:54 +0200
root@six #cat ipsec.conf

conn tugriceri.com
leftsubnet=0.0.0.0/0
left=209.208.63.204
leftcert=/cert/strongswan.pem
leftauth=pubkey
leftsendcert=yes
leftid=six.tugriceri.com
right=%any
rightid=%any
rightsourceip=10.0.5.0/24
rightauth=eap-mschapv2
rightsendcert=never
eap_identity=%any
auto=add

root@six #cat ipsec.secrets

strongSwan IPsec secrets file
: RSA /cert/strongswan.key
six.tugriceri.com : RSA /cert/strongswan.key
testuser : EAP “secretpass”

root@six #cat openssl-req.cfg

[req]
req_extensions = v3_req
distinguished_name = req_distinguished_name
prompt             = no

[ v3_req ]
Extensions to add to a certificate request
#keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = “DNS:six.tugriceri.com,DNS:www.tugriceri.com,IP:209.208.63.204,DNS:tugriceri.com”
#subjectAltName = @alt_names
[alt_names]
DNS.1 = six.tugriceri.com
DNS.2 = www.tugriceri.com


zarafa Response data requested from bus but it doesn't have any data
Tue, 06 Nov 2012 15:17:10 +0000
zarafa Response data requested from bus but it doesn't have any data

check zarafa session directory. Directory must be writable with apache user. "/var/lib/zarafa-webapp/tmp/session/"





zarafa Response data requested from bus but it doesn’t have any data
Tue, 06 Nov 2012 17:17:10 +0200
zarafa Response data requested from bus but it doesn’t have any data

check zarafa session directory. Directory must be writable with apache user. “/var/lib/zarafa-webapp/tmp/session/” 




libgcc_s.so.1 must be installed for pthread_cancel to work
Mon, 30 Jul 2012 12:48:04 +0000
If you are trying to use the chroot feature with a            multithreaded Apache installation you may get the folllowing            message "libgcc_s.so.1 must be installed for pthread_cancel to
            work". Add LoadFile /lib/libgcc_s.so.1 to your            Apache configuration to fix this problem.






libgcc_s.so.1 must be installed for pthread_cancel to work
Mon, 30 Jul 2012 14:48:04 +0200
If you are trying to use the chroot feature with a            multithreaded Apache installation you may get the folllowing            message "libgcc_s.so.1 must be installed for pthread_cancel to
            work". Add LoadFile /lib/libgcc_s.so.1 to your            Apache configuration to fix this problem.





DRBD configuration with loop file
Wed, 18 Jul 2012 13:49:57 +0000
dd if=/dev/zero of=disk1.raw bs=1073741824 count=20
1009 losetup -f disk1.raw
1010 losetup -a
1012 stat /dev/loop0
fdisk /dev/loop0
# rpm -Uvh http://elrepo.org/elrepo-release-6-4.el6.elrepo.noarch.rpm

# vi /etc/yum.repos.d/elrepo.repo

enabled=0

# yum --enablerepo=elrepo install drbd83-utils kmod-drbd83

SRV1# cat /etc/drbd.conf
#
# please have a a look at the example configuration file in
# /usr/share/doc/drbd83/drbd.conf
#
global {
minor-count 1;
usage-count no; # Participate in DRBD's online usage counter at http://usage.drbd.org
}

resource zenoss {
protocol C;
startup {
wfc-timeout 30;
degr-wfc-timeout 60;
}
disk {
on-io-error detach;
fencing resource-only;
}
handlers {
pri-on-incon-degr "echo o > /proc/sysrq-trigger ; halt -f"; # reboot the system after a connection fail
pri-lost-after-sb "echo o > /proc/sysrq-trigger ; halt -f";
outdate-peer "/usr/lib/heartbeat/drbd-peer-outdater";
}
net {
after-sb-0pri discard-least-changes; # Self healing if split brean
after-sb-1pri call-pri-lost-after-sb;
max-buffers 2048; # datablock buffers used before writing to disk.
ko-count 4; # Peer is dead if this count is exceeded.
}
syncer {
rate 12M;
al-extents 257;
}
on SRV1 {
device /dev/drbd0;
disk /dev/loop0;
address 192.168.1.1:7789;
meta-disk internal;
}
on SRV2 {
device /dev/drbd0;
disk /dev/loop0;
address 192.168.1.2:7789;
meta-disk internal;
}
}


SRV1# cat /proc/drbd
SRV1# drbdsetup /dev/drbd0 primary -o
SRV1# cat /proc/drbd
SRV1# mkfs -t ext3 /dev/drbd0
SRV1# mkdir /mnt/drbd
SRV1# mount /dev/drbd0 /mnt/drbd
SRV1# cp /var/log/maillog /mnt/drbd
SRV1# ls /mnt/drbd

SRV1# umount /mnt/drbd
SRV1# drbdadm secondary zenoss


SRV2# drbdadm primary zenoss
SRV2# mkdir /mnt/drbd
SRV2# mount /dev/drbd0 /mnt/drbd
SRV2# ls /mnt/drbd




DRBD configuration with loop file
Wed, 18 Jul 2012 15:49:57 +0200
 dd if=/dev/zero of=disk1.raw bs=1073741824 count=20
 1009  losetup -f disk1.raw 
 1010  losetup -a
 1012  stat /dev/loop0
fdisk /dev/loop0
# rpm -Uvh http://elrepo.org/elrepo-release-6-4.el6.elrepo.noarch.rpm

# vi /etc/yum.repos.d/elrepo.repo

enabled=0

# yum –enablerepo=elrepo install drbd83-utils kmod-drbd83 

SRV1# cat /etc/drbd.conf 
#
# please have a a look at the example configuration file in
# /usr/share/doc/drbd83/drbd.conf
#
global {
   minor-count 1;
   usage-count no; # Participate in DRBD’s online usage counter at http://usage.drbd.org
}

resource zenoss {
    protocol C;
    startup {
       wfc-timeout        30;
       degr-wfc-timeout   60;
    }
    disk {
       on-io-error detach;
       fencing resource-only;  
    }
    handlers {
       pri-on-incon-degr “echo o > /proc/sysrq-trigger ; halt -f”; # reboot the system after a connection fail
       pri-lost-after-sb “echo o > /proc/sysrq-trigger ; halt -f”;
       outdate-peer “/usr/lib/heartbeat/drbd-peer-outdater”;  
    }
    net {
       after-sb-0pri discard-least-changes; # Self healing if split brean
       after-sb-1pri call-pri-lost-after-sb;
       max-buffers 2048; # datablock buffers used before writing to disk.
       ko-count 4; # Peer is dead if this count is exceeded.
    }
    syncer {
       rate   12M;
       al-extents 257;
    }
    on SRV1 {
       device      /dev/drbd0;
       disk        /dev/loop0;
       address     192.168.1.1:7789;
       meta-disk   internal;
    }
    on SRV2 {
       device      /dev/drbd0;
       disk        /dev/loop0;
       address     192.168.1.2:7789;
       meta-disk   internal;
   }
}


SRV1# cat /proc/drbd 
SRV1# drbdsetup /dev/drbd0 primary -o 
SRV1# cat /proc/drbd 
SRV1# mkfs -t ext3 /dev/drbd0 
SRV1# mkdir /mnt/drbd
SRV1# mount /dev/drbd0 /mnt/drbd
SRV1# cp /var/log/maillog /mnt/drbd
SRV1# ls /mnt/drbd

SRV1# umount /mnt/drbd
SRV1# drbdadm secondary zenoss


SRV2# drbdadm primary zenoss
SRV2# mkdir /mnt/drbd
SRV2# mount /dev/drbd0 /mnt/drbd
SRV2# ls /mnt/drbd




PHP 5.4 memcache
Tue, 03 Jul 2012 12:23:18 +0000
In file included from /usr/local/memcache-3.0.6/memcache.c:30:
/usr/local/memcache-3.0.6/php_memcache.h:75:1: warning: "IS_CALLABLE" redefined
In file included from /usr/local/php/include/php/main/php.h:34,
from /usr/local/memcache-3.0.6/memcache.c:26:
/usr/local/php/include/php/Zend/zend.h:576:1: warning: this is the location of the previous definition
/usr/local/memcache-3.0.6/memcache.c: In function ‘mmc_find_persistent’:
/usr/local/memcache-3.0.6/memcache.c:721: error: too few arguments to function ‘zend_list_insert’
/usr/local/memcache-3.0.6/memcache.c:738: error: too few arguments to function ‘zend_list_insert’
/usr/local/memcache-3.0.6/memcache.c: In function ‘php_mmc_pool_addserver’:
/usr/local/memcache-3.0.6/memcache.c:778: error: too few arguments to function ‘zend_list_insert’
/usr/local/memcache-3.0.6/memcache.c: In function ‘php_mmc_connect’:
/usr/local/memcache-3.0.6/memcache.c:839: error: too few arguments to function ‘zend_list_insert’
make: *** [memcache.lo] Error 1


https://407441.bugs.gentoo.org/attachment.cgi?id=304865





PHP 5.4 memcache
Tue, 03 Jul 2012 14:23:18 +0200
In file included from /usr/local/memcache-3.0.6/memcache.c:30:
/usr/local/memcache-3.0.6/php_memcache.h:75:1: warning: “IS_CALLABLE” redefined
In file included from /usr/local/php/include/php/main/php.h:34,
                 from /usr/local/memcache-3.0.6/memcache.c:26:
/usr/local/php/include/php/Zend/zend.h:576:1: warning: this is the location of the previous definition
/usr/local/memcache-3.0.6/memcache.c: In function ‘mmc_find_persistent’:
/usr/local/memcache-3.0.6/memcache.c:721: error: too few arguments to function ‘zend_list_insert’
/usr/local/memcache-3.0.6/memcache.c:738: error: too few arguments to function ‘zend_list_insert’
/usr/local/memcache-3.0.6/memcache.c: In function ‘php_mmc_pool_addserver’:
/usr/local/memcache-3.0.6/memcache.c:778: error: too few arguments to function ‘zend_list_insert’
/usr/local/memcache-3.0.6/memcache.c: In function ‘php_mmc_connect’:
/usr/local/memcache-3.0.6/memcache.c:839: error: too few arguments to function ‘zend_list_insert’
make: *** [memcache.lo] Error 1


https://407441.bugs.gentoo.org/attachment.cgi?id=304865





DSMC backup
Tue, 29 May 2012 13:07:09 +0000
dsmc incremental /mnt/DB -subdir=yes





DSMC backup
Tue, 29 May 2012 15:07:09 +0200
dsmc incremental /mnt/DB -subdir=yes




Resize LV 2
Mon, 16 Apr 2012 06:32:33 +0000
e2fsck -f /dev/mapper/VGeva-datavol0
fdisk /dev/mpath4 #Delete partition and then add again
pvresize /dev/mapper/mpath4p1
lvextend -r -L749.9G /dev/mapper/VGeva-datavol0





Resize LV 2
Mon, 16 Apr 2012 08:32:33 +0200
e2fsck -f /dev/mapper/VGeva-datavol0 
fdisk /dev/mpath4 #Delete partition and then add again
pvresize /dev/mapper/mpath4p1 
lvextend -r -L749.9G /dev/mapper/VGeva-datavol0




NFSEN SELinux Permission
Tue, 06 Mar 2012 12:48:10 +0000
Summary:

SELinux is preventing /usr/sbin/httpd from using potentially mislabeled files
/var/local/nfsen/var/run/nfsen.comm.

Detailed Description:

SELinux has denied the httpd access to potentially mislabeled files
/var/local/nfsen/var/run/nfsen.comm. This means that SELinux will not allow
httpd to use these files. If httpd should be allowed this access to these files
you should change the file context to one of the following types,
lsassd_var_socket_t, abrt_var_run_t, httpd_tmpfs_t, setrans_var_run_t,
avahi_var_run_t, mysqld_var_run_t, httpd_var_run_t, nscd_var_run_t,
nslcd_var_run_t, slapd_var_run_t, sssd_var_lib_t, mysqld_db_t,
system_dbusd_var_run_t, postgresql_var_run_t, winbind_var_run_t,
postgresql_tmp_t, devlog_t, httpd_cobbler_rw_content_t,
httpd_munin_rw_content_t, httpd_bugzilla_rw_content_t, httpd_cvs_rw_content_t,
httpd_git_rw_content_t, httpd_sys_rw_content_t, httpd_nagios_rw_content_t,
httpd_nutups_cgi_rw_content_t, httpd_squid_rw_content_t, nscd_var_run_t,
pcscd_var_run_t, httpd_smokeping_cgi_rw_content_t,
httpd_apcupsd_cgi_rw_content_t, httpd_prewikka_rw_content_t,
httpd_awstats_rw_content_t, httpd_w3c_validator_rw_content_t,
httpd_user_rw_content_t. Many third party apps install html files in directories
that SELinux policy cannot predict. These directories have to be labeled with a
file context which httpd can access.

Allowing Access:

If you want to change the file context of /var/local/nfsen/var/run/nfsen.comm so
that the httpd daemon can access it, you need to execute it using semanage
fcontext -a -t FILE_TYPE '/var/local/nfsen/var/run/nfsen.comm'.
where FILE_TYPE is one of the following: lsassd_var_socket_t, abrt_var_run_t,
httpd_tmpfs_t, setrans_var_run_t, avahi_var_run_t, mysqld_var_run_t,
httpd_var_run_t, nscd_var_run_t, nslcd_var_run_t, slapd_var_run_t,
sssd_var_lib_t, mysqld_db_t, system_dbusd_var_run_t, postgresql_var_run_t,
winbind_var_run_t, postgresql_tmp_t, devlog_t, httpd_cobbler_rw_content_t,
httpd_munin_rw_content_t, httpd_bugzilla_rw_content_t, httpd_cvs_rw_content_t,
httpd_git_rw_content_t, httpd_sys_rw_content_t, httpd_nagios_rw_content_t,
httpd_nutups_cgi_rw_content_t, httpd_squid_rw_content_t, nscd_var_run_t,
pcscd_var_run_t, httpd_smokeping_cgi_rw_content_t,
httpd_apcupsd_cgi_rw_content_t, httpd_prewikka_rw_content_t,
httpd_awstats_rw_content_t, httpd_w3c_validator_rw_content_t,
httpd_user_rw_content_t. You can look at the httpd_selinux man page for
additional information.

Additional Information:

Source Context unconfined_u:system_r:httpd_t:s0
Target Context system_u:object_r:var_t:s0
Target Objects /var/local/nfsen/var/run/nfsen.comm [ sock_file ]
Source httpd
Source Path /usr/sbin/httpd
Port 
Host 
Source RPM Packages httpd-2.2.15-5.el6.centos
Target RPM Packages
Policy RPM selinux-policy-3.7.19-54.el6_0.5
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Plugin Name httpd_bad_labels
Host Name csn.tugriceri.com
Platform Linux csn.tugriceri.com
2.6.32-71.29.1.el6.x86_64 #1 SMP Mon Jun 27
19:49:27 BST 2011 x86_64 x86_64
Alert Count 8
First Seen Tue Mar 6 14:02:04 2012
Last Seen Tue Mar 6 14:38:35 2012
Local ID 8433f07d-91df-46a0-ba75-5228a1a1180a
Line Numbers 7, 8, 43, 44, 75, 76, 87, 88, 119, 120, 155, 156,
251, 252, 257, 258

Raw Audit Messages

type=AVC msg=audit(1331037515.880:4652026): avc: denied { write } for pid=4402 comm="httpd" name="nfsen.comm" dev=dm-2 ino=23992283 scontext=unconfined_u:system_r:httpd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=sock_file

type=SYSCALL msg=audit(1331037515.880:4652026): arch=c000003e syscall=42 success=no exit=-13 a0=1a a1=7fffd0623350 a2=25 a3=632e6e6573666e2f items=0 ppid=4398 pid=4402 auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=236800 comm="httpd" exe="/usr/sbin/httpd" subj=unconfined_u:system_r:httpd_t:s0 key=(null)





[root@legion ~]# grep httpd /var/log/audit/audit.log | audit2allow -M tugriceri_http
******************** IMPORTANT ***********************
To make this policy package active, execute:

semodule -i tugriceri_http.pp





NFSEN SELinux Permission
Tue, 06 Mar 2012 14:48:10 +0200
Summary:

SELinux is preventing /usr/sbin/httpd from using potentially mislabeled files
/var/local/nfsen/var/run/nfsen.comm.

Detailed Description:

SELinux has denied the httpd access to potentially mislabeled files
/var/local/nfsen/var/run/nfsen.comm. This means that SELinux will not allow
httpd to use these files. If httpd should be allowed this access to these files
you should change the file context to one of the following types,
lsassd_var_socket_t, abrt_var_run_t, httpd_tmpfs_t, setrans_var_run_t,
avahi_var_run_t, mysqld_var_run_t, httpd_var_run_t, nscd_var_run_t,
nslcd_var_run_t, slapd_var_run_t, sssd_var_lib_t, mysqld_db_t,
system_dbusd_var_run_t, postgresql_var_run_t, winbind_var_run_t,
postgresql_tmp_t, devlog_t, httpd_cobbler_rw_content_t,
httpd_munin_rw_content_t, httpd_bugzilla_rw_content_t, httpd_cvs_rw_content_t,
httpd_git_rw_content_t, httpd_sys_rw_content_t, httpd_nagios_rw_content_t,
httpd_nutups_cgi_rw_content_t, httpd_squid_rw_content_t, nscd_var_run_t,
pcscd_var_run_t, httpd_smokeping_cgi_rw_content_t,
httpd_apcupsd_cgi_rw_content_t, httpd_prewikka_rw_content_t,
httpd_awstats_rw_content_t, httpd_w3c_validator_rw_content_t,
httpd_user_rw_content_t. Many third party apps install html files in directories
that SELinux policy cannot predict. These directories have to be labeled with a
file context which httpd can access.

Allowing Access:

If you want to change the file context of /var/local/nfsen/var/run/nfsen.comm so
that the httpd daemon can access it, you need to execute it using semanage
fcontext -a -t FILE_TYPE ‘/var/local/nfsen/var/run/nfsen.comm’.
where FILE_TYPE is one of the following: lsassd_var_socket_t, abrt_var_run_t,
httpd_tmpfs_t, setrans_var_run_t, avahi_var_run_t, mysqld_var_run_t,
httpd_var_run_t, nscd_var_run_t, nslcd_var_run_t, slapd_var_run_t,
sssd_var_lib_t, mysqld_db_t, system_dbusd_var_run_t, postgresql_var_run_t,
winbind_var_run_t, postgresql_tmp_t, devlog_t, httpd_cobbler_rw_content_t,
httpd_munin_rw_content_t, httpd_bugzilla_rw_content_t, httpd_cvs_rw_content_t,
httpd_git_rw_content_t, httpd_sys_rw_content_t, httpd_nagios_rw_content_t,
httpd_nutups_cgi_rw_content_t, httpd_squid_rw_content_t, nscd_var_run_t,
pcscd_var_run_t, httpd_smokeping_cgi_rw_content_t,
httpd_apcupsd_cgi_rw_content_t, httpd_prewikka_rw_content_t,
httpd_awstats_rw_content_t, httpd_w3c_validator_rw_content_t,
httpd_user_rw_content_t. You can look at the httpd_selinux man page for
additional information.

Additional Information:

Source Context                unconfined_u:system_r:httpd_t:s0
Target Context                system_u:object_r:var_t:s0
Target Objects                /var/local/nfsen/var/run/nfsen.comm [ sock_file ]
Source                        httpd
Source Path                   /usr/sbin/httpd
Port                          <Unknown>
Host                          <Unknown>
Source RPM Packages           httpd-2.2.15-5.el6.centos
Target RPM Packages           
Policy RPM                    selinux-policy-3.7.19-54.el6_0.5
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Plugin Name                   httpd_bad_labels
Host Name                     csn.tugriceri.com
Platform                      Linux csn.tugriceri.com
                              2.6.32-71.29.1.el6.x86_64 #1 SMP Mon Jun 27
                              19:49:27 BST 2011 x86_64 x86_64
Alert Count                   8
First Seen                    Tue Mar  6 14:02:04 2012
Last Seen                     Tue Mar  6 14:38:35 2012
Local ID                      8433f07d-91df-46a0-ba75-5228a1a1180a
Line Numbers                  7, 8, 43, 44, 75, 76, 87, 88, 119, 120, 155, 156,
                              251, 252, 257, 258

Raw Audit Messages            

type=AVC msg=audit(1331037515.880:4652026): avc:  denied  { write } for  pid=4402 comm=“httpd” name=“nfsen.comm” dev=dm-2 ino=23992283 scontext=unconfined_u:system_r:httpd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=sock_file

type=SYSCALL msg=audit(1331037515.880:4652026): arch=c000003e syscall=42 success=no exit=-13 a0=1a a1=7fffd0623350 a2=25 a3=632e6e6573666e2f items=0 ppid=4398 pid=4402 auid=0 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 tty=(none) ses=236800 comm=“httpd” exe="/usr/sbin/httpd" subj=unconfined_u:system_r:httpd_t:s0 key=(null)





[root@legion ~]# grep httpd /var/log/audit/audit.log | audit2allow -M tugriceri_http
******************** IMPORTANT ***********************
To make this policy package active, execute:

semodule -i tugriceri_http.pp





Failed to open "/var/lib/dbus/machine-id"
Tue, 06 Mar 2012 11:56:11 +0000
process 16780: D-Bus library appears to be incorrectly set up; failed to read machine uuid: Failed to open "/var/lib/dbus/machine-id": No such file or directory
See the manual page for dbus-uuidgen to correct this issue.
D-Bus not built with -rdynamic so unable to print a backtrace
Aborted



dbus-uuidgen > /var/lib/dbus/machine-id






Failed to open “/var/lib/dbus/machine-id”
Tue, 06 Mar 2012 13:56:11 +0200
process 16780: D-Bus library appears to be incorrectly set up; failed to read machine uuid: Failed to open “/var/lib/dbus/machine-id”: No such file or directory
See the manual page for dbus-uuidgen to correct this issue.
  D-Bus not built with -rdynamic so unable to print a backtrace
Aborted


dbus-uuidgen > /var/lib/dbus/machine-id





TestDisk 6.12, Data Recovery Utility, May
Mon, 02 Jan 2012 09:03:16 +0000
TestDisk 6.12, Data Recovery Utility, May 2011
Christophe GRENIER 
http://www.cgsecurity.org


TestDisk is free data recovery software designed to help recover lost
partitions and/or make non-booting disks bootable again when these symptoms
are caused by faulty software, certain types of viruses or human error.
It can also be used to repair some filesystem errors.

Information gathered during TestDisk use can be recorded for later
review. If you choose to create the text file, testdisk.log , it
will contain TestDisk options, technical information and various
outputs; including any folder/file names TestDisk was used to find and
list onscreen.

Use arrow keys to select, then press Enter key:
>[ Create ] Create a new log file
[ Append ] Append information to log file
[ No Log ] Don't record anything




TestDisk 6.12, Data Recovery Utility, May
Mon, 02 Jan 2012 11:03:16 +0200
TestDisk 6.12, Data Recovery Utility, May 2011                                                                                                                                            
Christophe GRENIER <grenier@cgsecurity.org>                                                                                                                                               
http://www.cgsecurity.org                                                                                                                                                                 
                                                                                                                                                                                          
                                                                                                                                                                                          
TestDisk is free data recovery software designed to help recover lost                                                                                                                     
partitions and/or make non-booting disks bootable again when these symptoms                                                                                                               
are caused by faulty software, certain types of viruses or human error.                                                                                                                   
It can also be used to repair some filesystem errors.                                                                                                                                     
                                                                                                                                                                                          
Information gathered during TestDisk use can be recorded for later                                                                                                                        
review. If you choose to create the text file, testdisk.log , it                                                                                                                          
will contain TestDisk options, technical information and various                                                                                                                          
outputs; including any folder/file names TestDisk was used to find and                                                                                                                    
list onscreen.                                                                                                                                                                            
                                                                                                                                                                                          
Use arrow keys to select, then press Enter key:                                                                                                                                           
>[ Create ] Create a new log file                                                                                                                                                         
 [ Append ] Append information to log file                                                                                                                                                
 [ No Log ] Don’t record anything




Laptop Screen Brightness set via terminal
Mon, 02 Jan 2012 08:58:02 +0000
echo 24 > /sys/class/backlight/acpi_video0/brightness






Laptop Screen Brightness set via terminal
Mon, 02 Jan 2012 10:58:02 +0200
echo 24 > /sys/class/backlight/acpi_video0/brightness





android system and / remount
Mon, 02 Jan 2012 08:56:23 +0000
mount -o remount,ro -t yaffs2 /dev/block/stl9 /system
mount -o remount,rw -t yaffs2 /dev/block/stl9 /system

mount -o rw,remount -t rootfs /
mount -o ro,remount -t rootfs /





android system and / remount
Mon, 02 Jan 2012 10:56:23 +0200
 mount -o remount,ro -t yaffs2 /dev/block/stl9 /system
 mount -o remount,rw -t yaffs2 /dev/block/stl9 /system

mount -o rw,remount -t rootfs /
mount -o ro,remount -t rootfs /




telnet to android
Mon, 02 Jan 2012 08:55:42 +0000
/system/xbin/telnetd -l /system/xbin/sh




telnet to android
Mon, 02 Jan 2012 10:55:42 +0200
/system/xbin/telnetd -l /system/xbin/sh




SELinux Tftp permission
Mon, 28 Nov 2011 07:51:59 +0000
chcon -t tftpdir_rw_t /tftproot/*





SELinux Tftp permission
Mon, 28 Nov 2011 09:51:59 +0200
chcon -t tftpdir_rw_t /tftproot/*




SELinux FTP Home dir write permission
Fri, 07 Oct 2011 14:19:17 +0000
Connected to 127.0.0.1.
220 (vsFTPd 2.2.2)
530 Please login with USER and PASS.
530 Please login with USER and PASS.
KERBEROS_V4 rejected as an authentication type
Name (127.0.0.1:root): test1
331 Please specify the password.
Password:
500 OOPS: cannot change directory:/var/ftp/test1
Login failed.
ftp> quit


[root@legion mnt]# getsebool ftp_home_dir
ftp_home_dir --> off
[root@legion mnt]# setsebool -P ftp_home_dir 1
[root@legion mnt]# getsebool ftp_home_dir
ftp_home_dir --> on






SELinux FTP Home dir write permission
Fri, 07 Oct 2011 16:19:17 +0200
Connected to 127.0.0.1.
220 (vsFTPd 2.2.2)
530 Please login with USER and PASS.
530 Please login with USER and PASS.
KERBEROS_V4 rejected as an authentication type
Name (127.0.0.1:root): test1
331 Please specify the password.
Password:
500 OOPS: cannot change directory:/var/ftp/test1
Login failed.
ftp> quit


[root@legion mnt]# getsebool ftp_home_dir
ftp_home_dir –> off
[root@legion mnt]# setsebool -P ftp_home_dir 1
[root@legion mnt]# getsebool ftp_home_dir
ftp_home_dir –> on





tacacs+ compile error
Tue, 04 Oct 2011 11:33:14 +0000
if you are getting this error when compiling tacacs+ , you should compile with --enable-maxsess option.

gcc -DHAVE_CONFIG_H -I. -I/usr/local/include -g -O2 -pthread -MT maxsessint.o -MD -MP -MF .deps/maxsessint.Tpo -c -o maxsessint.o maxsessint.c
maxsessint.c: In function ‘maxsess_check_count’:
maxsessint.c:60: error: ‘S_maxsess’ undeclared (first use in this function)
maxsessint.c:60: error: (Each undeclared identifier is reported only once
maxsessint.c:60: error: for each function it appears in.)
gmake[1]: *** [maxsessint.o] Error 1
gmake[1]: Leaving directory `/usr/local/tacacs+-F5.0.0a1'
make: *** [all] Error 2

./configure --sysconfdir=/etc --enable-maxsess




tacacs+ compile error
Tue, 04 Oct 2011 13:33:14 +0200
if you are getting this error when compiling tacacs+ , you should compile with –enable-maxsess option.

gcc -DHAVE_CONFIG_H -I.   -I/usr/local/include  -g -O2 -pthread    -MT maxsessint.o -MD -MP -MF .deps/maxsessint.Tpo -c -o maxsessint.o maxsessint.c
maxsessint.c: In function ‘maxsess_check_count’:
maxsessint.c:60: error: ‘S_maxsess’ undeclared (first use in this function)
maxsessint.c:60: error: (Each undeclared identifier is reported only once
maxsessint.c:60: error: for each function it appears in.)
gmake[1]: *** [maxsessint.o] Error 1
gmake[1]: Leaving directory `/usr/local/tacacs+-F5.0.0a1’
make: *** [all] Error 2

./configure –sysconfdir=/etc –enable-maxsess




gnokii sms read from Huawei Mobile Connect Express E800
Fri, 26 Aug 2011 12:06:02 +0000
[root@etugriceri ~]# gnokii --showsmsfolderstatus
GNOKII Version 0.6.29
No. Name Id #Msg
========================================================
0 Internal memory ME 1
1 Combined ME and SIM phonebook MT 1
2 SIM card SM 4
3 SMS Status Reports SR 4

[root@etugriceri ~]# gnokii --getsms SM 1 end
GNOKII Version 0.6.29
1. Inbox Message (Read)






gnokii sms read from Huawei Mobile Connect Express E800
Fri, 26 Aug 2011 14:06:02 +0200
[root@etugriceri ~]# gnokii –showsmsfolderstatus
GNOKII Version 0.6.29
No. Name                                         Id #Msg
========================================================
  0 Internal memory                              ME    1
  1 Combined ME and SIM phonebook                MT    1
  2 SIM card                                     SM    4
  3 SMS Status Reports                           SR    4

[root@etugriceri ~]# gnokii –getsms SM 1 end
GNOKII Version 0.6.29
1. Inbox Message (Read)





Convert wav file Cisco Contact Center Express with ffmeg
Fri, 19 Aug 2011 15:28:17 +0000
ffmpeg -i Sound1.wav -acodec pcm_mulaw -ar 8000 -ac 1 -ab 16 Sound1a.wav





Convert wav file Cisco Contact Center Express with ffmeg
Fri, 19 Aug 2011 17:28:17 +0200
ffmpeg -i Sound1.wav -acodec pcm_mulaw -ar 8000 -ac 1 -ab 16 Sound1a.wav




ZFS deduplication test on Fedora 15 Linux
Sat, 18 Jun 2011 08:59:35 +0000
I recently tested ZFS deduplication test on Fedora 15 Linux. This is my test script. I tested only text file. For final report, other file format tests is unnecessary. [root@etugriceri fast]# du -ch 0/textfile 6.5K 0/textfile 6.5K total [root@etugriceri fast]# zpool list dimmpool NAME SIZE ALLOC FREE CAP DEDUP HEALTH ALTROOT dimmpool 294M 262M 31.8M 89%1.89xONLINE [root@etugriceri fast]# cat ded.sh a="1" while [ $a -lt "1000" ]; do mkdir $a let b=$a-1 cp $b/textfile $a dd if=/dev/urandom count=128 bs=1 2>&1 | md5sum >> $a/textfile let a=$a+1 done ##### [root@etugriceri fast]# zpool list dimmpool NAME SIZE ALLOC FREE CAP DEDUP HEALTH ALTROOT dimmpool 294M 132M 162M 45%1.00xONLINE - [root@etugriceri fast]# cat ded.sh a="1" while [ $a -lt "10000" ]; do mkdir $a let b=$a-1 cp 0/textfile $a dd if=/dev/urandom count=128 bs=1 2>&1 | md5sum >> $a/textfile dd if=/dev/urandom count=128 bs=1 2>&1 | md5sum >> $a/textfile cat 0/textfile >> $a/textfile let a=$a+1 done


ZFS deduplication test on Fedora 15 Linux
Sat, 18 Jun 2011 10:59:35 +0200
I  recently tested ZFS deduplication test on Fedora 15 Linux.
This is my test script. I tested only text file. For final report, other file format tests is unnecessary.
[root@etugriceri fast]# du -ch 0/textfile
6.5K    0/textfile
6.5K    total
[root@etugriceri fast]# zpool list dimmpool
NAME       SIZE  ALLOC   FREE    CAP  DEDUP  HEALTH  ALTROOT
dimmpool   294M   262M  31.8M    89%  1.89x  ONLINE
[root@etugriceri fast]# cat ded.sh
a=“1”
while [ $a -lt “1000” ];
do
mkdir $a
let b=$a-1
cp $b/textfile $a
dd if=/dev/urandom count=128 bs=1 2>&1 | md5sum >> $a/textfile


Deny user for remote login
Mon, 06 Jun 2011 08:08:18 +0000
sudo vi /etc/security/access.conf

-:root:ALL EXCEPT LOCAL






Deny user for remote login
Mon, 06 Jun 2011 10:08:18 +0200
sudo vi /etc/security/access.conf 

-:root:ALL EXCEPT LOCAL





decrypt private key
Sat, 26 Mar 2011 14:46:08 +0000
openssl rsa -inMYKEY.key >>MYKEY-NOCRYPT.key






decrypt private key
Sat, 26 Mar 2011 16:46:08 +0200
openssl rsa -in MYKEY.key >> MYKEY-NOCRYPT.key
	




Yum Proxy settings
Sat, 26 Mar 2011 12:41:32 +0000
[root@localhost ~]# vi /etc/yum.conf

proxy=http://10.129.0.23:8080
http_proxy=http://10.129.0.23:8080
[root@localhost ~]# declare -x ftp_proxy="http://10.129.0.23:8080"
[root@localhost ~]# declare -x http_proxy="10.129.0.23:8080"






Yum Proxy settings
Sat, 26 Mar 2011 14:41:32 +0200
[root@localhost ~]# vi /etc/yum.conf
proxy=http://10.129.0.23:8080
http_proxy=http://10.129.0.23:8080
[root@localhost ~]# declare -x ftp_proxy=“http://10.129.0.23:8080”
[root@localhost ~]# declare -x http_proxy=“10.129.0.23:8080”





Corrupted RPM database
Sat, 26 Feb 2011 08:53:41 +0000
1019 rm -f /var/lib/rpm/__db*
1020 rpm -vv --rebuilddb





Corrupted RPM database
Sat, 26 Feb 2011 10:53:41 +0200
 1019  rm -f /var/lib/rpm/__db*
 1020  rpm -vv –rebuilddb




Get Cisco router interface index numbers
Wed, 16 Feb 2011 14:49:31 +0000
show snmp mib ifmib ifindex






Get Cisco router interface index numbers
Wed, 16 Feb 2011 16:49:31 +0200
show snmp mib ifmib ifindex





SSL Weak Cipher and SSLv2 tests
Sat, 22 Jan 2011 17:37:51 +0000
echo 'GET HTTP/1.0' | openssl s_client -ssl3 -cipher LOW -connect www.tugriceri.com:443
echo 'GET HTTP/1.0' | openssl s_client -ssl2 -cipher LOW -connect www.tugriceri.com:443
echo 'GET HTTP/1.0' | openssl s_client -ssl2 -connect www.tugriceri.com:443






SSL Weak Cipher and SSLv2 tests
Sat, 22 Jan 2011 19:37:51 +0200
echo ‘GET HTTP/1.0’ | openssl s_client -ssl3 -cipher LOW -connect www.tugriceri.com:443
echo ‘GET HTTP/1.0’ | openssl s_client -ssl2 -cipher LOW -connect www.tugriceri.com:443
echo ‘GET HTTP/1.0’ | openssl s_client -ssl2 -connect www.tugriceri.com:443





Hide Apache version
Fri, 21 Jan 2011 09:50:45 +0000
vi httpd.conf
ServerSignature Off
ServerTokens Prod

apachectl restart





Hide Apache version
Fri, 21 Jan 2011 11:50:45 +0200
vi httpd.conf
ServerSignature Off
ServerTokens Prod

apachectl restart




LVM Create
Fri, 21 Jan 2011 09:21:05 +0000
1031 dmsetup ls --tree
1040 dmsetup remove /dev/dm-11 (silinen partition ın dmden kalkmaması sebebi ile)
1041 fdisk -l
1044 pvcreate /dev/mapper/mpath11
1045 pvdisplay
1046 vgcreate VolGroupBackup /dev/mapper/mpath11
1047 pvdisplay
1048 vgdisplay
1049 lvcreate -L 699.99G VolGroupBackup lvBackup
1050 lvcreate -L 699.99G VolGroupBackup -n lvBackup
1051 lvdisplay
1052 ls /dev/VolGroupBackup/lvBackup
1053 ls /dev/mapper/
1054 mkfs.ext3 /dev/mapper/VolGroupBackup-lvBackup
1058 mount
1059 mount /dev/mapper/VolGroupBackup-lvBackup /mnt/backup/





LVM Create
Fri, 21 Jan 2011 11:21:05 +0200
 1031  dmsetup ls –tree
 1040  dmsetup remove /dev/dm-11 (silinen partition ın dmden kalkmaması sebebi ile)
 1041  fdisk -l
 1044  pvcreate /dev/mapper/mpath11
 1045  pvdisplay 
 1046  vgcreate VolGroupBackup /dev/mapper/mpath11 
 1047  pvdisplay 
 1048  vgdisplay 
 1049  lvcreate -L 699.99G VolGroupBackup lvBackup
 1050  lvcreate -L 699.99G VolGroupBackup -n lvBackup
 1051  lvdisplay 
 1052  ls /dev/VolGroupBackup/lvBackup 
 1053  ls /dev/mapper/
 1054  mkfs.ext3 /dev/mapper/VolGroupBackup-lvBackup 
 1058  mount
 1059  mount /dev/mapper/VolGroupBackup-lvBackup /mnt/backup/




Socket proxy with ssh
Sun, 26 Dec 2010 15:16:08 +0200
ssh -D 7200 root@hostname




Socket proxy with ssh
Sun, 26 Dec 2010 12:16:08 +0000
ssh -D 7200 root@hostname





Find WWN’s of HBA
Fri, 24 Dec 2010 18:12:22 +0200
systool -av -c fc_host




Find WWN's of HBA
Fri, 24 Dec 2010 15:12:22 +0000
systool -av -c fc_host





uvscan process is too slow
Fri, 26 Nov 2010 13:00:19 +0200
time uvscan –version
McAfee VirusScan Command Line for Linux64 Version: 6.0.3.356
Copyright (C) 2010 McAfee, Inc.
(408) 988-3832 LICENSED COPY - November 26 2010

AV Engine version: 5400.1158 for Linux64.
Dat set version: 5985 created May 17 2010
Scanning for 619012 viruses, trojans and variants.


real    0m9.501s
user    0m9.365s
sys     0m0.132s


# uvscan –decompress
McAfee VirusScan Command Line for Linux64 Version: 6.0.3.356
Copyright (C) 2010 McAfee, Inc.
(408) 988-3832 LICENSED COPY - November 26 2010

AV Engine version: 5400.1158 for Linux64.
Dat set version: 5985 created May 17 2010
Scanning for 619012 viruses, trojans and variants.

This program is more than 5 months old. New viruses come out all the
time - we would suggest that you upgrade your copy.


Time: 00:00.00



# time uvscan –version
McAfee VirusScan Command Line for Linux64 Version: 6.0.3.356
Copyright (C) 2010 McAfee, Inc.
(408) 988-3832 LICENSED COPY - November 26 2010

AV Engine version: 5400.1158 for Linux64.
Dat set version: 5985 created May 17 2010
Scanning for 619012 viruses, trojans and variants.


real    0m2.801s
user    0m2.664s
sys     0m0.135s





uvscan process is too slow
Fri, 26 Nov 2010 10:00:19 +0000
# time uvscan --version
McAfee VirusScan Command Line for Linux64 Version: 6.0.3.356
Copyright (C) 2010 McAfee, Inc.
(408) 988-3832 LICENSED COPY - November 26 2010

AV Engine version: 5400.1158 for Linux64.
Dat set version: 5985 created May 17 2010
Scanning for 619012 viruses, trojans and variants.


real 0m9.501s
user 0m9.365s
sys 0m0.132s


# uvscan --decompress
McAfee VirusScan Command Line for Linux64 Version: 6.0.3.356
Copyright (C) 2010 McAfee, Inc.
(408) 988-3832 LICENSED COPY - November 26 2010

AV Engine version: 5400.1158 for Linux64.
Dat set version: 5985 created May 17 2010
Scanning for 619012 viruses, trojans and variants.

This program is more than 5 months old. New viruses come out all the
time - we would suggest that you upgrade your copy.


Time: 00:00.00



# time uvscan --version
McAfee VirusScan Command Line for Linux64 Version: 6.0.3.356
Copyright (C) 2010 McAfee, Inc.
(408) 988-3832 LICENSED COPY - November 26 2010

AV Engine version: 5400.1158 for Linux64.
Dat set version: 5985 created May 17 2010
Scanning for 619012 viruses, trojans and variants.


real 0m2.801s
user 0m2.664s
sys 0m0.135s





Mysql Connection limit
Mon, 04 Oct 2010 12:00:28 +0200
SET GLOBAL max_connections = 200;




Mysql Connection limit
Mon, 04 Oct 2010 09:00:28 +0000
SET GLOBAL max_connections = 200;





w32 rediscover
Wed, 15 Sep 2010 09:22:46 +0200
w32tm /resync /rediscover 




w32 rediscover
Wed, 15 Sep 2010 06:22:46 +0000
w32tm /resync /rediscover





Text file download from apache
Thu, 02 Sep 2010 18:01:58 +0200
<Files *.txt>
ForceType application/octet-stream
Header set Content-Disposition attachment
</Files>




Text file download from apache
Thu, 02 Sep 2010 15:01:58 +0000

ForceType application/octet-stream
Header set Content-Disposition attachment






Multipath – Volume Groups
Mon, 26 Jul 2010 14:54:14 +0200
Multipath in SAN den diskleri hatalı gormesi sebebi ile volume gruplarda problem oluyor. Diskleri düzgün görmesi için config i flush layıp tekrardan dm leri oluşturmalı ve volume groupları tekrar enable etmeliyiz. 

/sbin/multipath -F
/sbin/multipath
/sbin/vgchange -a y
mount /dev/vg0/lvol0 /mnt/data




Multipath - Volume Groups
Mon, 26 Jul 2010 11:54:14 +0000
Multipath in SAN den diskleri hatalı gormesi sebebi ile volume gruplarda problem oluyor. Diskleri düzgün görmesi için config i flush layıp tekrardan dm leri oluşturmalı ve volume groupları tekrar enable etmeliyiz.

/sbin/multipath -F
/sbin/multipath
/sbin/vgchange -a y
mount /dev/vg0/lvol0 /mnt/data





crt to der
Fri, 30 Apr 2010 13:33:43 +0200
openssl x509 -in auth_tugriceri_com.crt -out auth_tugriceri_com.der -outform DER

openssl rsa -in www_tugriceri_com.key -outform DER -out www_tugriceri_com-der.key




Opennms Reindex database
Fri, 30 Apr 2010 13:33:10 +0200
<font><font><font><font face="Arial, Helvetica, sans-serif">psql -d opennms -c “REINDEX DATABASE opennms FORCE”
vacuumdb -v opennms -U opennms -W
</font></font></font></font>





crt to der
Fri, 30 Apr 2010 10:33:43 +0000
openssl x509 -in auth_tugriceri_com.crt -out auth_tugriceri_com.der -outform DER

openssl rsa -in www_tugriceri_com.key -outform DER -out www_tugriceri_com-der.key





Opennms Reindex database
Fri, 30 Apr 2010 10:33:10 +0000
<font><font><font><font face="Arial, Helvetica, sans-serif">psql -d opennms -c “REINDEX DATABASE opennms FORCE”
vacuumdb -v opennms -U opennms -W
</font></font></font></font>






Resize LV
Tue, 05 Jan 2010 11:01:28 +0200
pvresize -v -d /dev/dm-0
vgdisplay
lvextend -L400G /dev/VGD/datalv
resize2fs /dev/VGD/datalv
e2fsck -f /dev/VGD/datalv
resize2fs /dev/VGD/datalv
mount /dev/VGD/datalv /mnt/data




Resize LV
Tue, 05 Jan 2010 08:01:28 +0000
pvresize -v -d /dev/dm-0
vgdisplay
lvextend -L400G /dev/VGD/datalv
resize2fs /dev/VGD/datalv
e2fsck -f /dev/VGD/datalv
resize2fs /dev/VGD/datalv
mount /dev/VGD/datalv /mnt/data





Sftp chroot settings
Sat, 17 Oct 2009 14:30:28 +0200
cat /etc/ssh/sshd_config

Subsystem sftp internal-sftp


Match group sftponly
         ChrootDirectory /chroot
         X11Forwarding no
         AllowTcpForwarding no
         ForceCommand internal-sftp

cat /etc/passwd
testuser:x:500:504::/:/bin/bash
sftponly:x:504:testuser






Sftp chroot settings
Sat, 17 Oct 2009 11:30:28 +0000
cat /etc/ssh/sshd_config

Subsystem sftp internal-sftp


Match group sftponly
ChrootDirectory /chroot
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp

cat /etc/passwd
testuser:x:500:504::/:/bin/bash
sftponly:x:504:testuser







Directory sync with rsync over ssh
Fri, 29 May 2009 12:06:39 +0200
<a name=“linuxsvrhack-CHP-3-SECT-2”>root@emre:~# <b class=“emphasis-bold”>rsync -ave ssh server:/opt/dir /opt</b></a>



Directory sync with rsync over ssh
Fri, 29 May 2009 09:06:39 +0000
<a name="linuxsvrhack-CHP-3-SECT-2">root@emre:~# <b class="emphasis-bold">rsync -ave ssh server:/opt/dir /opt</b></a>



Transponder Lists for Kaffeine
Wed, 20 May 2009 12:23:22 +0200
There is a link that include transponder lists. 
http://www.fastsatfinder.com/transponders.html

This script will convert fastsatfinder’s transponder lists to kaffeine format.

I used 0130.ini file for Hotbird. 

cat 0130.ini | awk -F “=” ‘{print $2}’ > out

for aa in cat out
do
echo $aa |sed ’s/,34/,3/4/; s/,56/,5/6/; s/,23/,2/3/’ | awk -F “,” ‘{print “S”" “$1"000 “$2” “$3"000 “$4"”}’ >> Hotbird-13.0E
done




Transponder Lists for Kaffeine
Wed, 20 May 2009 09:23:22 +0000
There is a link that include transponder lists.
http://www.fastsatfinder.com/transponders.html

This script will convert fastsatfinder's transponder lists to kaffeine format.

I used 0130.ini file for Hotbird.

cat 0130.ini | awk -F "=" '{print $2}' > out

for aa in `cat out`
do
echo $aa |sed 's/,34/,3\/4/; s/,56/,5\/6/; s/,23/,2\/3/' | awk -F "," '{print "S"" "$1"000 "$2" "$3"000 "$4""}' >> Hotbird-13.0E
done





Nec firmware update under linux
Sat, 25 Apr 2009 18:39:33 +0200
Nec firmware update under linux
Please download necflash utility from http://binflash.cdfreaks.com/
[root@frost local]# ./necflash -scan
Binflash - NEC version - (C) by Liggy and Herrie
Visit http://binflash.cdfreaks.com

List of supported devices:

Device   : /dev/sg3
Vendor   : Optiarc
Model    : DVD RW AD-5170A
Firmware : 1.11

Device   : /dev/scd0
Vendor   : Optiarc
Model    : DVD RW AD-5170A
Firmware : 1.11

This is our dvdrom info.

We should get a backup our current firmware with this command. sg3 is our device. 
./necflash -dump Optiarc-AD-5170A-1.11.bin /dev/sg3

Following links have Liggy’s and Dee’s modified firmwares. I want to use it. You can easly find original firmware.
http://liggydee.cdfreaks.com/page/en/Optiarc-AD-5170A/


[root@frost local]# unzip 114bt_rpc1.zip 
Archive:  114bt_rpc1.zip                 
This file was downloaded from http://liggydee.cdfreaks.com
Please read the instructions included in this zipfile and 
on our website at http://liggydee.cdfreaks.com/page/5170/ 
  inflating: readme.txt                                   
  inflating: 114bt_rpc1.bin                               
  inflating: Liggy’s and Dee’s Website.url   


[root@frost local]# ./necflash -flash -v -s 114bt_rpc1.bin /dev/sg3


Vendor: Optiarcberat sitesi
Identification: DVD RW AD-5170A
Version: 1.14

Remember no one can be held responsible for any kind of failure!
Are you sure you want to proceed? (y/n)

if you get “Error submitting checksum” error. You should set your device to pio mode. I couldnt set with hdparm and i set it on bios.

[root@frost local]# ./necflash -scan
Binflash - NEC version - (C) by Liggy and Herrie
Visit http://binflash.cdfreaks.com

List of supported devices:

Device   : /dev/sg3
Vendor   : Optiarc
Model    : DVD RW AD-5170A
Firmware : 1.14

Device   : /dev/scd0
Vendor   : Optiarc
Model    : DVD RW AD-5170A
Firmware : 1.14






Nec firmware update under linux
Sat, 25 Apr 2009 15:39:33 +0000
Nec firmware update under linux
Please download necflash utility from http://binflash.cdfreaks.com/
[root@frost local]# ./necflash -scan
Binflash - NEC version - (C) by Liggy and Herrie
Visit http://binflash.cdfreaks.com

List of supported devices:

Device : /dev/sg3
Vendor : Optiarc
Model : DVD RW AD-5170A
Firmware : 1.11

Device : /dev/scd0
Vendor : Optiarc
Model : DVD RW AD-5170A
Firmware : 1.11

This is our dvdrom info.

We should get a backup our current firmware with this command. sg3 is our device.
./necflash -dump Optiarc-AD-5170A-1.11.bin /dev/sg3

Following links have Liggy's and Dee's modified firmwares. I want to use it. You can easly find original firmware.
http://liggydee.cdfreaks.com/page/en/Optiarc-AD-5170A/


[root@frost local]# unzip 114bt_rpc1.zip
Archive: 114bt_rpc1.zip
This file was downloaded from http://liggydee.cdfreaks.com
Please read the instructions included in this zipfile and
on our website at http://liggydee.cdfreaks.com/page/5170/
inflating: readme.txt
inflating: 114bt_rpc1.bin
inflating: Liggy's and Dee's Website.url


[root@frost local]# ./necflash -flash -v -s 114bt_rpc1.bin /dev/sg3


Vendor: Optiarcberat sitesi
Identification: DVD RW AD-5170A
Version: 1.14

Remember no one can be held responsible for any kind of failure!
Are you sure you want to proceed? (y/n)

if you get "Error submitting checksum" error. You should set your device to pio mode. I couldnt set with hdparm and i set it on bios.

[root@frost local]# ./necflash -scan
Binflash - NEC version - (C) by Liggy and Herrie
Visit http://binflash.cdfreaks.com

List of supported devices:

Device : /dev/sg3
Vendor : Optiarc
Model : DVD RW AD-5170A
Firmware : 1.14

Device : /dev/scd0
Vendor : Optiarc
Model : DVD RW AD-5170A
Firmware : 1.14






Disabling the mode button on the catalyst devices
Fri, 24 Apr 2009 11:40:36 +0200
Disable the Express Setup feature so that the switch configuration cannot be deleted if the Mode button is mistakenly or maliciously pressed for 10 seconds.
In order to disable the Express Setup feature, issue the “no setup express” command in global config mode.


Disabling the mode button on the catalyst devices
Fri, 24 Apr 2009 08:40:36 +0000
Disable the Express Setup feature so that the switch configuration cannot be deleted if the Mode button is mistakenly or maliciously pressed for 10 seconds. In order to disable the Express Setup feature, issue the "no setup express" command in global config mode.


How to test wbinfo_group.pl via command line
Fri, 10 Apr 2009 15:45:43 +0200
[root@proxy squid]# echo “emre Standard_Access” | /usr/lib/squid/wbinfo_group.pl -d

Debugging mode ON.
Got emre Standard_Access from squid
Standard Access
User:  -emre-
Group: -Standard Access-
SID:   -S-1-5-21-2095213794-1237320697-2031155483-2732-
GID:   -16777226-
Sending OK to squid
OK





How to test wbinfo_group.pl via command line
Fri, 10 Apr 2009 12:45:43 +0000
[root@proxy squid]# echo "emre Standard_Access" | /usr/lib/squid/wbinfo_group.pl -d

Debugging mode ON.
Got emre Standard_Access from squid
Standard Access
User: -emre-
Group: -Standard Access-
SID: -S-1-5-21-2095213794-1237320697-2031155483-2732-
GID: -16777226-
Sending OK to squid
OK






remove multi space with sed
Fri, 10 Apr 2009 12:00:04 +0200
cat ISALOG_20090302_WEB_000.w3c | sed ’s/\s/ /g




remove multi space with sed
Fri, 10 Apr 2009 09:00:04 +0000
cat ISALOG_20090302_WEB_000.w3c | sed 's/\s/ /g





run command via ssh (remote)
Wed, 08 Apr 2009 17:37:18 +0200
cat ls_keykur.sh | ssh root@10.94.12.3
ssh root@10.94.12.3 “date”




run command via ssh (remote)
Wed, 08 Apr 2009 14:37:18 +0000
cat ls_keykur.sh | ssh root@10.94.12.3
ssh root@10.94.12.3 "date"





snmpwalk example
Wed, 08 Apr 2009 14:17:09 +0200
snmpwalk -v 2c -c hoba 1.12.0.68 system




Domain join error
Wed, 08 Apr 2009 14:06:16 +0200
[root@px2 ~]# /usr/bin/net join -S 192.168.2.5 -U etadmin
[2009/04/08 14:00:17,  0] param/loadparm.c:lp_do_parameter(7172)
Enter etadmin’s password:
[2009/04/08 14:00:23,  0] libnet/libnet_join.c:libnet_join_ok(1035)
  libnet_join_ok: failed to get schannel session key from server 10.129.0.20 for domain ET. Error was NT_STATUS_INVALID_COMPUTER_NAME
Failed to join domain: failed to verify domain membership after joining: Invalid computer name
ADS join did not work, falling back to RPC…
Enter etadmin’s password:
Interupted by signal.

[root@px2 ~]# /usr/bin/net join -S dc1 -U etadmin
[2009/04/08 14:00:36,  0] param/loadparm.c:lp_do_parameter(7172)
  Ignoring unknown parameter “default domain”
Enter etadmin’s password:
Using short domain name – ET
Joined ‘PX2’ to realm ’tugriceri.com

You should use netbios name. not ip.




snmpwalk example
Wed, 08 Apr 2009 11:17:09 +0000
snmpwalk -v 2c -c hoba 1.12.0.68 system





Domain join error
Wed, 08 Apr 2009 11:06:16 +0000
[root@px2 ~]# /usr/bin/net join -S 192.168.2.5 -U etadmin
[2009/04/08 14:00:17, 0] param/loadparm.c:lp_do_parameter(7172)
Enter etadmin's password:
[2009/04/08 14:00:23, 0] libnet/libnet_join.c:libnet_join_ok(1035)
libnet_join_ok: failed to get schannel session key from server 10.129.0.20 for domain ET. Error was NT_STATUS_INVALID_COMPUTER_NAME
Failed to join domain: failed to verify domain membership after joining: Invalid computer name
ADS join did not work, falling back to RPC...
Enter etadmin's password:
Interupted by signal.

[root@px2 ~]# /usr/bin/net join -S dc1 -U etadmin
[2009/04/08 14:00:36, 0] param/loadparm.c:lp_do_parameter(7172)
Ignoring unknown parameter "default domain"
Enter etadmin's password:
Using short domain name -- ET
Joined 'PX2' to realm 'tugriceri.com

You should use netbios name. not ip.




Execute remote command via ssh
Thu, 02 Apr 2009 14:30:13 +0200
ssh root@server ‘uname -a’




Execute remote command via ssh
Thu, 02 Apr 2009 11:30:13 +0000
ssh root@server 'uname -a'





Changing linux system time
Mon, 30 Mar 2009 18:02:35 +0200
change system time and sync.  hardware time. 




Changing linux system time
Mon, 30 Mar 2009 15:02:35 +0000
change system time and sync. hardware time.





other ssl issue with my own ca
Wed, 18 Mar 2009 12:26:26 +0200
/root/tugriceri.com_CA/ca/
cat ca.conf
[ ca ]
default_ca = ca_default
[ ca_default ]
dir = /root/tugriceri.com_CA/ca/
certs = /root/tugriceri.com_CA/ca/
new_certs_dir = /root/tugriceri.com_CA/ca/ca.db.certs
database = /root/tugriceri.com_CA/ca/ca.db.index
serial = /root/tugriceri.com_CA/ca/ca.db.serial
RANDFILE = /root/tugriceri.com_CA/ca/ca.db.rand
certificate = /root/tugriceri.com_CA/ca/ca.crt
private_key = /root/tugriceri.com_CA/ca/ca.key
default_days = 365
default_crl_days = 30
default_md = md5
preserve = no
policy = generic_policy
[ generic_policy ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional


openssl ca -config ca.conf -notext -out one.tugriceri.com/one.tugriceri.com.cer -infiles one.tugriceri.com/one.tugriceri.com.csr

openssl x509 -req -days 365 -in one.tugriceri.com/one.tugriceri.com.csr -CA ca/ca.crt -CAkey ca/ca.key -CAcreateserial -out one.tugriceri.com/one.tugriceri.com.cer

openssl verify -CAfile ../ca/ca.crt one.tugriceri.com.cer




other ssl issue with my own ca
Wed, 18 Mar 2009 09:26:26 +0000
/root/tugriceri.com_CA/ca/
cat ca.conf
[ ca ]
default_ca = ca_default
[ ca_default ]
dir = /root/tugriceri.com_CA/ca/
certs = /root/tugriceri.com_CA/ca/
new_certs_dir = /root/tugriceri.com_CA/ca/ca.db.certs
database = /root/tugriceri.com_CA/ca/ca.db.index
serial = /root/tugriceri.com_CA/ca/ca.db.serial
RANDFILE = /root/tugriceri.com_CA/ca/ca.db.rand
certificate = /root/tugriceri.com_CA/ca/ca.crt
private_key = /root/tugriceri.com_CA/ca/ca.key
default_days = 365
default_crl_days = 30
default_md = md5
preserve = no
policy = generic_policy
[ generic_policy ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional


openssl ca -config ca.conf -notext -out one.tugriceri.com/one.tugriceri.com.cer -infiles one.tugriceri.com/one.tugriceri.com.csr

openssl x509 -req -days 365 -in one.tugriceri.com/one.tugriceri.com.csr -CA ca/ca.crt -CAkey ca/ca.key -CAcreateserial -out one.tugriceri.com/one.tugriceri.com.cer

openssl verify -CAfile ../ca/ca.crt one.tugriceri.com.cer




Snoop with ssg
Wed, 11 Feb 2009 15:18:55 +0200
SSGW-> snoop filter ip src-ip 192.168.1.2 dst-ip 192.168.5.6
snoop filter added
SSGW-> snoop
Start Snoop, type ESC or ‘snoop off’ to stop, continue? [y]/n y
SSGW->
SSGW-> clear dbuf
SSGW-> get dbuf stream
…
SSGW-> snoop off


Snoop with ssg
Wed, 11 Feb 2009 12:18:55 +0000
SSGW-> snoop filter ip src-ip 192.168.1.2 dst-ip 192.168.5.6
snoop filter added
SSGW-> snoop
Start Snoop, type ESC or 'snoop off' to stop, continue? [y]/n y
SSGW->
SSGW-> clear dbuf
SSGW-> get dbuf stream
...
SSGW-> snoop off


pfx to key
Tue, 03 Feb 2009 20:21:44 +0200
openssl pkcs12 -export -in my.pem -nodes -out my.pfx

openssl pkcs12 -in my.pfx -out my-nodes.key -nodes -nocerts


pfx to key
Tue, 03 Feb 2009 17:21:44 +0000
openssl pkcs12 -export -in my.pem -nodes -out my.pfx

openssl pkcs12 -in my.pfx -out my-nodes.key -nodes -nocerts


fast “show run”
Tue, 13 Jan 2009 12:30:40 +0200
conf#parser config cache interface
#show run
in privelege mode, type  “term len 0” 
“show run” or “show start” will be faster
“show run brief”


fast "show run"
Tue, 13 Jan 2009 09:30:40 +0000
conf#parser config cache interface
#show runin privelege mode, type "term len 0" "show run" or "show start" will be faster "show run brief"


Cisco SSH Configuration
Mon, 12 Jan 2009 17:10:04 +0200
conf# username cagri privilege 15 secret cisco
“creates a user in local database with privelege level 15 and encrypted password cisco”
conf#ip domain-name tugriceri.com
“sets a domain name for the device”
conf#crypto key generate rsa
“creates a rsa key. in the next step encryption bits will be asked. default is 512. 1024 is better”
conf#ip ssh version 2
“change the version of ssh to 2”
conf#line vty 0 4
“go under the virtual teletype ports”


Cisco SSH Configuration
Mon, 12 Jan 2009 14:10:04 +0000
conf# username cagri privilege 15 secret cisco"creates a user in local database with privelege level 15 and encrypted password cisco"conf#ip domain-name tugriceri.com"sets a domain name for the device"conf#crypto key generate rsa"creates a rsa key. in the next step encryption bits will be asked. default is 512. 1024 is better"conf#ip ssh version 2"change the version of ssh to 2"conf#line vty 0 4"go under the virtual teletype ports"conf-line#transport input ssh"and change the login type from telnet to ssh"conf-line#login local"device will look at the local user database to log in a user"


Rsync Backup (with daemon option)
Fri, 12 Dec 2008 19:24:11 +0200
[root@srv ~]#vi /etc/xinetd.d/rsync “and change disable = yes to disable = no”
[root@srv ~]#service xinetd restart

[root@srv ~]#cat /etc/rsyncd.conf

[GFS]
        path = /wwwroot/
        comment = Webroot
        auth users = rsync
        secrets file = /etc/rsync.secrets
        read only = false
        list = yes
        write only = false
[root@srv ~]# cat /etc/rsync.secrets
rsync:deneme

[root@backupsrv ~]# rsync -av rsync@192.168.1.1::GFS /backup/






Rsync Backup (with daemon option)
Fri, 12 Dec 2008 16:24:11 +0000
[root@srv ~]#vi /etc/xinetd.d/rsync "and change disable = yes to disable = no"
[root@srv ~]#service xinetd restart

[root@srv ~]#cat /etc/rsyncd.conf

[GFS]
path = /wwwroot/
comment = Webroot
auth users = rsync
secrets file = /etc/rsync.secrets
read only = false
list = yes
write only = false
[root@srv ~]# cat /etc/rsync.secrets
rsync:deneme

[root@backupsrv ~]# rsync -av rsync@192.168.1.1::GFS /backup/






ssh Tunnel
Sun, 07 Dec 2008 13:58:40 +0200
shell# ssh -f root@192.168.2.54 -L 7200:192.168.2.54:7200 -N




ssh Tunnel
Sun, 07 Dec 2008 10:58:40 +0000
shell# ssh -f root@192.168.2.54 -L 7200:192.168.2.54:7200 -N




PRI Pinout
Fri, 21 Nov 2008 14:34:52 +0200
MB-M-YB-T-TB-Y-KB-K
TB-T-YB-M-MB-Y-KB-K



PRI Pinout
Fri, 21 Nov 2008 11:34:52 +0000
MB-M-YB-T-TB-Y-KB-K
TB-T-YB-M-MB-Y-KB-K



check: no loaded plugin implements ‘check_main’:
Sat, 04 Oct 2008 15:50:48 +0200
<i>check: no loaded plugin implements 'check_main': cannot scan! at</i><i> /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PerMsgStatus.pm line</i><i> 164.<br /><br />vi init.pre<br /></i>loadplugin Mail::SpamAssassin::Plugin::Check<br />


check: no loaded plugin implements 'check_main':
Sat, 04 Oct 2008 12:50:48 +0000
<i>check: no loaded plugin implements 'check_main': cannot scan! at</i><i> /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PerMsgStatus.pm line</i><i> 164.<br /><br />vi init.pre<br /></i>loadplugin Mail::SpamAssassin::Plugin::Check<br />


Bir Asa log u
Sat, 04 Oct 2008 01:48:09 +0200
Routing failed to locate next hop for icmp from outside…

Net1 de olması gereken bir host yada network net2 de tanımlanmış ise bu log ile karşılaşılır.  Host u fln silip doğru yerde tanımlarını yapmak lazım.



Bir Asa log u
Fri, 03 Oct 2008 22:48:09 +0000
Routingfailedtolocatenexthopfor icmp from outside...

Net1 de olması gereken bir host yada network net2 de tanımlanmış ise bu log ile karşılaşılır. Host u fln silip doğru yerde tanımlarını yapmak lazım.



Cisco Asa ssh enable
Fri, 03 Oct 2008 18:26:52 +0200
username emre password pas priv 15
aaa authentication ssh console LOCAL

ssh x.x.x.x x.x.x.x external



Cisco Asa ssh enable
Fri, 03 Oct 2008 15:26:52 +0000
username emre password pas priv 15
aaa authentication ssh console LOCAL

ssh x.x.x.x x.x.x.x external



frontend problemi skystar2 ve fedora
Fri, 03 Oct 2008 14:46:45 +0200
scanning Turksat-42E 
 using ‘/dev/dvb/adapter0/frontend0’ and ‘/dev/dvb/adapter0/demux0’ 
 main:1882: FATAL: failed to open ‘/dev/dvb/adapter0/frontend0’: 6 No such device or address

Bu hata beni çıldırtmıştı. Çok uğraştırdı. Aslında sistemde linuxtv-dvb kurulu değil ve kaynaktan derliyorsanız 
/usr/local/linuxtv-dvb-1.1.1/MAKEDEV-DVB.sh
bu script in çalıştıtılmaması buna neden olabilir. 
Lakin benim sistemim şu anda FC9  ve bu hatayı aliyorum.  (dvb-apps-1.1.1-11.fc9.i386 paketi kurulu)

FC9 ve 2.6.25.9-76.fc9.i686 ile skystar in driver lari gelmesine rağmen bu driver lar eski sürüm kartlar için. Uygun driver larin technisat tan çekilip mevcut kernel için derlenmesi lazım.

http://www.technisat.com/index3eee.html?nav=Software_Drivers,en,39&download=detail&amp;produktID=1281

http://www.technisat.com/indexdb46.html?nav=Software_Drivers,en,39&download=download&amp;produktID=1281&amp;downloadID=1721

Driver in içinden çıkan README file driver in nasıl kurulacağını anlatiyor. 
Bendeki sürümde v4l-dvb-0276304b76b9 in çekilip technisat tan alinan patch ile patch lendikten sonra derleme yapılması gerektiğinden bahsediyor. 

Derleme işlemlerinden sonra alttaki komutlar kartın çalışması için yeterli. 
shell# modprob frontend 
shell# modprobe b2c2-flexcop-pci








kaffeine nin Turksat taki dogru kanallari bulmamasi
Fri, 03 Oct 2008 14:27:15 +0200
/home/emre/.kde/share/apps/kaffeine

altindaki 

dvb-s/Turksat-42.0E dosyasinin düzenlenmesi gerekmektedir. Eğer kaffein ile dvb ayarlarini hiç yapmadıysanız 

/home/emre/.kde/share/apps/kaffeine/dvbdata.tar.gz
ve 
/usr/share/apps/kaffeine/dvbdata.tar.gz

dosyalarinin içinden değiştirmeniz gerekebilir.



vdr2kaffeine
Fri, 03 Oct 2008 14:14:39 +0200
http://free.pages.at/cleditor/vdr2kaffh.htm



Turksat-42.0E
Fri, 03 Oct 2008 14:09:52 +0200
/usr/share/dvb-apps/dvb-s/Turksat-42.0E

Bu dosya pek güncel değil. Bu dosyanın
S 11594000 H 4557000 5/6
S 10978000 V 2344000 3/4
S 11096000 V 27500000 3/4
S 11096000 V 27500000 5/6
S 12652000 H 22500000 5/6
S 12652000 H 22500000 3/4


şeklinde değiştirilmesi scandvb nin kanallari bulması için gerekli.



frontend problemi skystar2 ve fedora
Fri, 03 Oct 2008 11:46:45 +0000
scanning Turksat-42E 
 using '/dev/dvb/adapter0/frontend0' and '/dev/dvb/adapter0/demux0' 
 main:1882: FATAL: failed to open '/dev/dvb/adapter0/frontend0': 6 No such device or address

Bu hata beni çıldırtmıştı. Çok uğraştırdı. Aslında sistemde linuxtv-dvb kurulu değil ve kaynaktan derliyorsanız 
/usr/local/linuxtv-dvb-1.1.1/MAKEDEV-DVB.sh
bu script in çalıştıtılmaması buna neden olabilir. 
Lakin benim sistemim şu anda FC9  ve bu hatayı aliyorum.  (dvb-apps-1.1.1-11.fc9.i386 paketi kurulu)

FC9 ve 2.6.25.9-76.fc9.i686 ile skystar in driver lari gelmesine rağmen bu driver lar eski sürüm kartlar için. Uygun driver larin technisat tan çekilip mevcut kernel için derlenmesi lazım.

http://www.technisat.com/index3eee.html?nav=Software_Drivers,en,39&download=detail&produktID=1281

http://www.technisat.com/indexdb46.html?nav=Software_Drivers,en,39&download=download&produktID=1281&downloadID=1721

Driver in içinden çıkan README file driver in nasıl kurulacağını anlatiyor. 
Bendeki sürümde v4l-dvb-0276304b76b9 in çekilip technisat tan alinan patch ile patch lendikten sonra derleme yapılması gerektiğinden bahsediyor. 

Derleme işlemlerinden sonra alttaki komutlar kartın çalışması için yeterli. 
shell# modprob frontend 
shell# modprobe b2c2-flexcop-pci








kaffeine nin Turksat taki dogru kanallari bulmamasi
Fri, 03 Oct 2008 11:27:15 +0000
/home/emre/.kde/share/apps/kaffeine

altindaki

dvb-s/Turksat-42.0E dosyasinin düzenlenmesi gerekmektedir. Eğer kaffein ile dvb ayarlarini hiç yapmadıysanız

/home/emre/.kde/share/apps/kaffeine/dvbdata.tar.gz
ve
/usr/share/apps/kaffeine/dvbdata.tar.gz

dosyalarinin içinden değiştirmeniz gerekebilir.



vdr2kaffeine
Fri, 03 Oct 2008 11:14:39 +0000
http://free.pages.at/cleditor/vdr2kaffh.htm



Turksat-42.0E
Fri, 03 Oct 2008 11:09:52 +0000
/usr/share/dvb-apps/dvb-s/Turksat-42.0E

Bu dosya pek güncel değil. Bu dosyanın
S 11594000 H 4557000 5/6
S 10978000 V 2344000 3/4
S 11096000 V 27500000 3/4
S 11096000 V 27500000 5/6
S 12652000 H 22500000 5/6
S 12652000 H 22500000 3/4


şeklinde değiştirilmesi scandvb nin kanallari bulması için gerekli.



mysql deki snort loglarini temizlemek
Sun, 21 Sep 2008 10:31:32 +0200
reset master
purge master logs
delete from data
delete from event where timestamp<‘2008-8-01’



mysql deki snort loglarini temizlemek
Sun, 21 Sep 2008 07:31:32 +0000
reset master
purge master logs
delete from data
delete from event where timestamp<'2008-8-01'



Citrix Netscaler backup script
Mon, 14 Apr 2008 15:22:10 +0200
Netscaler config lerini yedeklemek için yazdığım bir script belki birilerinin daha ihtiyacı vardır.
shell # ./ceknsconfig.ex date +%y%m%d-%N
şeklinde bir kullanımı var. Afiyet olsn.
Emre
/getfile/ceknsconfig.ex


Citrix Netscaler backup script
Mon, 14 Apr 2008 12:22:10 +0000
Netscaler config lerini yedeklemek için yazdığım bir script belki birilerinin daha ihtiyacı vardır. shell # ./ceknsconfig.ex `date +%y%m%d-%N` şeklinde bir kullanımı var. Afiyet olsn. Emrehttp://www.tugriceri.com/getfile/ceknsconfig.ex


Firefox ile java
Sat, 16 Feb 2008 23:25:55 +0200

Java firefox u indirip kurduğunuzu farzediyorum. 


ln -s /usr/java/latest/plugin/i386/ns7/libjavaplugin_oji.so .

ile firefox plugin klasoru içerisine link i oluşturuyoruz. 

[root@etugriceri plugins]# firefox

VM did not start up properly
java_vm: xcb_xlib.c:50: xcb_xlib_unlock: Assertion `c->xlib.lock’ failed.
Could not read ack from child process
Plugin: Java VM process has died.
Could not start JavaVM!

Bu Javadaki bir bug dan kaynaklanıyormuş. Son java kurulduktan sonra;

Rpm den kurdum bende böyle;

total 4
lrwxrwxrwx 1 root root   16 2008-01-25 14:06 default -> /usr/java/latest
drwxr-xr-x 7 root root 4096 2008-02-16 18:57 jre1.6.0_03
lrwxrwxrwx 1 root root   21 2008-02-16 18:57 latest -> /usr/java/jre1.6.0_03

libmawt.so  nin bulunduğu path kurulumumuza göre değiştirilebilir. 

sed -i ’s/XINERAMA/FAKEEXTN/g’ /usr/java/jre1.6.0_03/lib/i386/xawt/libmawt.so 

komutu ile problem düzeliyor. 





Firefox ile java
Sat, 16 Feb 2008 20:25:55 +0000

Java firefox u indirip kurduğunuzu farzediyorum.


ln -s /usr/java/latest/plugin/i386/ns7/libjavaplugin_oji.so .

ile firefox plugin klasoru içerisine link i oluşturuyoruz.

[root@etugriceri plugins]# firefox

VM did not start up properly
java_vm: xcb_xlib.c:50: xcb_xlib_unlock: Assertion `c->xlib.lock' failed.
Could not read ack from child process
Plugin: Java VM process has died.
Could not start JavaVM!

Bu Javadaki bir bug dan kaynaklanıyormuş. Son java kurulduktan sonra;

Rpm den kurdum bende böyle;

total 4
lrwxrwxrwx 1 root root 16 2008-01-25 14:06 default -> /usr/java/latest
drwxr-xr-x 7 root root 4096 2008-02-16 18:57 jre1.6.0_03
lrwxrwxrwx 1 root root 21 2008-02-16 18:57 latest -> /usr/java/jre1.6.0_03

libmawt.so nin bulunduğu path kurulumumuza göre değiştirilebilir.

sed -i 's/XINERAMA/FAKEEXTN/g' /usr/java/jre1.6.0_03/lib/i386/xawt/libmawt.so

komutu ile problem düzeliyor.





Sudo requiretty settings
Tue, 08 Jan 2008 15:25:22 +0200
sudo:   apache : sorry, you must have a tty to run sudo ; TTY=unknown ; …

/var/log/secure içerisinde gözlemlenen bu log apache ile çağırılan bir sistem komutunun çalışmayıp verdiği uyarı log u . 

sudoers içerisinde 

Defaults    requiretty 

ayarının # lenmesi gerekmektedir. Yukarıdaki log danda görüldüğü gibi apache user i herhangi bir tty ye sahip olmadığı için bu log düşmektedir. Normal şartlarda zaten “requiretty” nin kapatılmasına gerek yok fakat php kullanarak root yetkilerinde bir komut çalıştırma ihtiyacınız olursa bu ayarı kapatmanız gerekecektir. 


Powered by ScribeFire.


Sudo requiretty settings
Tue, 08 Jan 2008 12:25:22 +0000
sudo: apache : sorry, you must have a tty to run sudo ; TTY=unknown ; ...

/var/log/secure içerisinde gözlemlenen bu log apache ile çağırılan bir sistem komutunun çalışmayıp verdiği uyarı log u .

sudoers içerisinde

Defaults requiretty

ayarının # lenmesi gerekmektedir. Yukarıdaki log danda görüldüğü gibi apache user i herhangi bir tty ye sahip olmadığı için bu log düşmektedir. Normal şartlarda zaten "requiretty" nin kapatılmasına gerek yok fakat php kullanarak root yetkilerinde bir komut çalıştırma ihtiyacınız olursa bu ayarı kapatmanız gerekecektir.





SSL sertifikası yaratma
Fri, 04 Jan 2008 15:47:43 +0200
Openssl ile sertifika yaratmak için yarattığınız anahtar dosya da güçlü şifreleme methodlarından birini seçerseniz sizden bir şifre girmenizi isteyecektir. Apache nin her başlamasında bu şifreyi yazmanız gerekmektedir.
Şifre sorulmadan bir sertifika yaratmak için ;
shell #> openssl dsaparam 1024 -out dsadosyasi
“dsaparam  DSA Parameter Generation.”
shell #> openssl gendsa -out webserver.key dsadosyasi
Bu aşamada sizden şifre istenmeden bir key dosyasi yaratılacaktır. Bir şifre vermek isterseniz -des3 parametresi ekleyerek 3des algoritması ile şifrelenmiş bir anahtar dosya yaratabilirsiniz.


SSL sertifikası yaratma
Fri, 04 Jan 2008 12:47:43 +0000
Openssl ile sertifika yaratmak için yarattığınız anahtar dosya da güçlü şifreleme methodlarından birini seçerseniz sizden bir şifre girmenizi isteyecektir. Apache nin her başlamasında bu şifreyi yazmanız gerekmektedir. Şifre sorulmadan bir sertifika yaratmak için ; shell #>openssl dsaparam 1024 -out dsadosyasi"dsaparam DSA Parameter Generation." shell #>openssl gendsa -out webserver.key dsadosyasiBu aşamada sizden şifre istenmeden bir key dosyasi yaratılacaktır. Bir şifre vermek isterseniz -des3 parametresi ekleyerek 3des algoritması ile şifrelenmiş bir anahtar dosya yaratabilirsiniz. Sertifika talep dosyası yaratmak için ; shell #>openssl req -new -key webserver.key -out webserver.csrwebserver.csr bizim sertifika talep dosyamız. Bu dosyayı kendi CA imizde yada Verisign gibi trusted CA lerde imzalatıp kullanabiliriz. Kendi CA server imizda imzalamak için shell #>openssl x509 -req -days 365 -in webserver.csr -signkey webserver.key -out webserver.crtapache içerisinde ;  ServerAdmin root@tugriceri.com DocumentRoot /var/www/html/ ServerName mail.tugriceri.com SSLEngine on SSLCertificateFile /webmail/webserver.crt SSLCertificateKeyFile /webmail/webserver.key #SSLCACertificateFile /webmail/cacertnew.pem SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown  _default_ webserver inizin default ip adresidir. Her sertifika için başka ip ler vermeniz gerekmektedir. Bu sebepten diğer virtual host lar için _default_ yerine ip adresinizi yazabilirsiniz. Eğer CA server başka bir sunucunuzun üzerinde ise SSLCACertificateFile ile CA sertifikanızı apache ye gösterebilir yada ; shell #>keytool -import -file /webmail/cacertnew.pemile default key store içerisinde ekleyebilirsiniz. Örnek; openssl genrsa -des3 -rand file1:file2:file3:file4:file5 -out server.key 1024
openssl rsa -in server.key -out server.pem
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 60 -in server.csr -signkey server.key -out server.crt


Cer to Pem
Fri, 04 Jan 2008 13:44:40 +0200
You can convert cer file to pem with this example command.
openssl x509 -in certnewb.cer -inform DER -out certnewb.pem -outform PEM
if you have a Microsoft CA server and if you signed your certification request with this CA server, this server will give to you der encoded certnew.cer file. you can convert this file to pem format for the any apache server.


Cer to Pem
Fri, 04 Jan 2008 10:44:40 +0000
You can convert cer file to pem with this example command. openssl x509 -in certnewb.cer -inform DER -out certnewb.pem -outform PEM if you have a Microsoft CA server and if you signed your certification request with this CA server, this server will give to you der encoded certnew.cer file. you can convert this file to pem format for the any apache server.


Making patch file
Wed, 26 Dec 2007 18:12:11 +0200
Creating patch file with diff. 

shell > diff -Naur old_file new_file > patch_file

shell > diff -Naur gazlo.pl gazlo_new.pl > gazlo.patch

shell > patch < gazlo.patch




Powered by ScribeFire.


Compiling perl code
Wed, 26 Dec 2007 17:40:14 +0200
You can compile your perl codes with using perlcc. For example;
shell > perlcc -B some.pl -o any.pl
Powered by ScribeFire.


Making patch file
Wed, 26 Dec 2007 15:12:11 +0000
Creating patch file with diff. 

shell > diff -Naur old_file new_file > patch_file

shell > diff -Naur gazlo.pl gazlo_new.pl > gazlo.patch

shell > patch < gazlo.patch






Powered by ScribeFire.


Compiling perl code
Wed, 26 Dec 2007 14:40:14 +0000
You can compile your perl codes with using perlcc. For example; shell > perlcc -B some.pl -o any.pl
Powered by ScribeFire.


Dovecot Error
Wed, 26 Dec 2007 13:27:52 +0200
imap-login: imap-login: error while loading shared libraries: libsepol.so.1: failed to map segment from shared object: Cannot allocate memory

64 bitlik bir sistem üzerinde dovecot ta imap ile ssl i aktif ettiğim zaman üstteki uyarıyı alıyordum.  Problemin çözümü için /etc/dovecot.conf dosyası içerisinden;

“login_process_size = 32” olan değeri “login_process_size = 64” olarak değiştirmek yeterli. 

Dovecot.conf içerisindeki açıklama ;

# Set max. process size in megabytes. If you don’t use
# login_process_per_connection you might need to grow this.


Powered by ScribeFire.


Dovecot Error
Wed, 26 Dec 2007 10:27:52 +0000
imap-login: imap-login: error while loading shared libraries: libsepol.so.1: failed to map segment from shared object: Cannot allocate memory

64 bitlik bir sistem üzerinde dovecot ta imap ile ssl i aktif ettiğim zaman üstteki uyarıyı alıyordum. Problemin çözümü için /etc/dovecot.conf dosyası içerisinden;

"login_process_size = 32" olan değeri "login_process_size = 64" olarak değiştirmek yeterli.

Dovecot.conf içerisindeki açıklama ;

# Set max. process size in megabytes. If you don't use
# login_process_per_connection you might need to grow this.





File Replace with sed
Mon, 24 Dec 2007 13:27:24 +0200

       -i[SUFFIX], –in-place[=SUFFIX]

              edit files in place (makes backup if extension supplied)


[root@etugriceri sil2]# sed -i ’s/LAND/AIR/i’ *




Powered by ScribeFire.



File Replace with sed
Mon, 24 Dec 2007 10:27:24 +0000

-i[SUFFIX], --in-place[=SUFFIX]

edit files in place (makes backup if extension supplied)


[root@etugriceri sil2]# sed -i 's/LAND/AIR/i' *





Powered by ScribeFire.


Fetchmail example
Mon, 24 Dec 2007 11:19:22 +0200

Example .fetchmailrc file ;

[root@mail Maildir]# cat /root/.fetchmailrc 

defaults
    fetchall
    keep
set no bouncemail


poll 127.0.0.1 protocol IMAP
    user efsaneuser@superdomain.com there with password xxxxx is efsane.user@superdomain.com here
    smtphost 192.168.0.10
———————————————–
if you want to fetch old mails with subfolders, you can try this settings.

[root@mail Maildir]# cat /root/fet.sh 

for gonder in “INBOX.Ocak” “INBOX.Subat” “INBOX.Mart” “INBOX.Nisan” “INBOX.Mayis” “INBOX.Haziran” “INBOX.Temmuz” “INBOX.Agustos” “INBOX.Eylul” “INBOX.Kasim” “INBOX.Aralik”
do
fetchmail -r $gonder
done





Powered by ScribeFire.


Fetchmail example
Mon, 24 Dec 2007 08:19:22 +0000

Example .fetchmailrc file ;

[root@mail Maildir]# cat /root/.fetchmailrc

defaults
fetchall
keep
set no bouncemail


poll 127.0.0.1 protocol IMAP
user efsaneuser@superdomain.com there with password xxxxx is efsane.user@superdomain.com here
smtphost 192.168.0.10
-----------------------------------------------
if you want to fetch old mails with subfolders, you can try this settings.

[root@mail Maildir]# cat /root/fet.sh

for gonder in "INBOX.Ocak" "INBOX.Subat" "INBOX.Mart" "INBOX.Nisan" "INBOX.Mayis" "INBOX.Haziran" "INBOX.Temmuz" "INBOX.Agustos" "INBOX.Eylul" "INBOX.Kasim" "INBOX.Aralik"
do
fetchmail -r $gonder
done






Powered by ScribeFire.


Qmail time stamps
Mon, 19 Nov 2007 16:44:14 +0200
tai64nlocal Qmail log larındaki TAI64N timestamp değerlerini okunabilir formata çevirmektedir.
Örnek olarak ;
[root@mail smtp]# echo “@4000000037c219bf2ef02e94” | tai64nlocal
1999-08-24 07:04:05.787492500
cat  @4000000047414fa33437fd14.s | tai64nlocal
şeklindede kullanılabilir.


Qmail time stamps
Mon, 19 Nov 2007 13:44:14 +0000
tai64nlocalQmail log larındaki TAI64N timestamp değerlerini okunabilir formata çevirmektedir. Örnek olarak ; [root@mail smtp]# echo "@4000000037c219bf2ef02e94" | tai64nlocal 1999-08-24 07:04:05.787492500 cat @4000000047414fa33437fd14.s | tai64nlocal şeklindede kullanılabilir.


Php safe_mode
Sun, 23 Sep 2007 02:16:38 +0200
php_admin_flag safe_mode On
safe_mode ile php, script in sahibi ile erişilmeye çalışılan dosya sahibini kontrol eder.
Belirli bir directory deki scr çalışmaması için.
<Directory /home/www/blabla/ >
php_admin_flag engine off
</Directory>
Aynı şekilde safe_mode da uygulanabilir.
Powered by ScribeFire.


Php safe_mode
Sat, 22 Sep 2007 23:16:38 +0000
php_admin_flag safe_mode On safe_mode ile php, script in sahibi ile erişilmeye çalışılan dosya sahibini kontrol eder. Belirli bir directory deki scr çalışmaması için.  php_admin_flag engine off  Aynı şekilde safe_mode da uygulanabilir.
Powered by ScribeFire.


smtp-auth test with telnet
Sun, 16 Sep 2007 22:04:51 +0200
$wget http://www.infocopter.com/know-how/bin/mimencode
$mv mimencode /bin
$chmod 755 /bin/mimencode
$ echo “user@domain.com\0user@domain.com\0password” | mimencode
dXNlckBkb21haW4uY29tXDB1c2VyQGRvbWFpbi5jb21cMHBhc3N3b3JkCg==
$telnet localhost 25
auth plain dXNlckBkb21haW4uY29tXDB1c2VyQGRvbWFpbi5jb21cMHBhc3N3b3JkCg==
235 ok, go ahead (#2.0.0)


smtp-auth test with telnet
Sun, 16 Sep 2007 19:04:51 +0000
$wget http://www.infocopter.com/know-how/bin/mimencode $mv mimencode /bin $chmod 755 /bin/mimencode $ echo "user@domain.com\0user@domain.com\0password" | mimencode dXNlckBkb21haW4uY29tXDB1c2VyQGRvbWFpbi5jb21cMHBhc3N3b3JkCg== $telnet localhost 25 auth plain dXNlckBkb21haW4uY29tXDB1c2VyQGRvbWFpbi5jb21cMHBhc3N3b3JkCg== 235 ok, go ahead (#2.0.0)


Qmail finding configuration problems
Sat, 15 Sep 2007 22:16:34 +0200


Life with qmail 
 
It sometimes helps to run a service manually in order to find configuration problems. For example, if your qmail-smtpd/log service isn’t running, do:
cd /service/qmail-smtpd/log
svc -d .
./run
if no errors, enter a line of text and press ENTER
if still no errors, enter CTRL-D (end of file)

At this point, you should be able to identify the problem and fix it. Once that’s done, return to the service’s directory, if necessary, and do:


Qmail finding configuration problems
Sat, 15 Sep 2007 19:16:34 +0000


Life with qmail

It sometimes helps to run a service manually in order to find configuration problems. For example, if your qmail-smtpd/log service isn't running, do:
cd /service/qmail-smtpd/log
svc -d .
./run
if no errors, enter a line of text and press ENTER
if still no errors, enter CTRL-D (end of file)

At this point, you should be able to identify the problem and fix it. Once that’s done, return to the service’s directory, if necessary, and do:


File Systems form Gentoo page
Thu, 13 Sep 2007 19:13:34 +0200
Gentoo Linux Documentation – Preparing the Disks
Filesystems?The Linux kernel supports various filesystems. We'll explain ext2, ext3, ReiserFS, XFS and JFS as these are the most commonly used filesystems on Linux systems.
ext2 is the tried and true Linux filesystem but doesn’t have metadata journaling, which means that routine ext2 filesystem checks at startup time can be quite time-consuming. There is now quite a selection of newer-generation journaled filesystems that can be checked for consistency very quickly and are thus generally preferred over their non-journaled counterparts. Journaled filesystems prevent long delays when you boot your system and your filesystem happens to be in an inconsistent state.


File Systems form Gentoo page
Thu, 13 Sep 2007 16:13:34 +0000
Gentoo Linux Documentation -- Preparing the Disks
Filesystems?The Linux kernel supports various filesystems. We'll explain ext2, ext3, ReiserFS, XFS and JFS as these are the most commonly used filesystems on Linux systems.
ext2 is the tried and true Linux filesystem but doesn’t have metadata journaling, which means that routine ext2 filesystem checks at startup time can be quite time-consuming. There is now quite a selection of newer-generation journaled filesystems that can be checked for consistency very quickly and are thus generally preferred over their non-journaled counterparts. Journaled filesystems prevent long delays when you boot your system and your filesystem happens to be in an inconsistent state.


Gentoo Telnet
Wed, 12 Sep 2007 19:48:47 +0200
emerge telnet-bsd
Pro-Linux Sicherheitsservice: Gentoo - telnet-bsd
The telnet-bsd telnet client is vulnerable to two buffer overflows, which could allow a malicious telnet server operator to execute arbitrary code.
Powered by ScribeFire.


Gentoo Telnet
Wed, 12 Sep 2007 16:48:47 +0000
emerge telnet-bsdPro-Linux Sicherheitsservice: Gentoo - telnet-bsd
The telnet-bsd telnet client is vulnerable to two buffer overflows, which could allow a malicious telnet server operator to execute arbitrary code.
Powered by ScribeFire.


proc mounts etc mtab
Wed, 12 Sep 2007 00:45:28 +0200
live cd src# grub-install /dev/hda
df: warning:cannot read table of mounted filesystems:no such file or directory
df: warning:cannot read table of mounted filesystems:no such file or directory
could not find device /boot: not found or not a block device
chroot olduktan sonra;
live cd src#  grep -v rootfs /proc/mounts > /etc/mtab
 
Komutu çalıştırılmalı.
Powered by ScribeFire.


Proc dev mount and chroot
Wed, 12 Sep 2007 00:25:30 +0200
srv# mount -t proc none /mnt/gentoo/proc 
   srv# mount -o bind /dev /mnt/gentoo/dev
srv# chroot /mnt/gentoo /bin/bash
srv# env-update && source /etc/profile


Powered by ScribeFire.



proc mounts etc mtab
Tue, 11 Sep 2007 21:45:28 +0000
live cd src# grub-install /dev/hda df: warning:cannot read table of mounted filesystems:no such file or directory df: warning:cannot read table of mounted filesystems:no such file or directory could not find device /boot: not found or not a block device chroot olduktan sonra;live cd src# grep -v rootfs /proc/mounts > /etc/mtab Komutu çalıştırılmalı.
Powered by ScribeFire.


Proc dev mount and chroot
Tue, 11 Sep 2007 21:25:30 +0000
srv# mount -t proc none /mnt/gentoo/proc 
   srv# mount -o bind /dev /mnt/gentoo/dev
srv# chroot /mnt/gentoo /bin/bash
srv# env-update && source /etc/profile



Powered by ScribeFire.


Authenticating E-Mail
Tue, 11 Sep 2007 14:48:26 +0200
http://www.ietf.org/rfc/rfc4406.txt



Powered by ScribeFire.



iptables ile Port Knocking
Tue, 11 Sep 2007 14:28:12 +0200
               $IPTABLES -A INPUT -p tcp –dport 22   -m recent –rcheck
–seconds 60 –name SSH          -j ACCEPT
                $IPTABLES -A INPUT
-p tcp –dport 21   -m recent –rcheck –seconds 60 –name SSH          -j
ACCEPT
                $IPTABLES -A INPUT -p tcp –dport 1599 -m
recent –name SSH –remove -j DROP
               
$IPTABLES -A INPUT -p tcp –dport 1600 -m recent –name
SSH –set    -j DROP
                $IPTABLES -A INPUT -p tcp –dport 1601
-m recent –name SSH –remove -j DROP 

Powered by ScribeFire.


RPM-PGP-KEY import
Tue, 11 Sep 2007 14:26:32 +0200
RPM-PGP-KEY import 
 rpm --import /usr/share/doc/rpm-4.4.2/RPM-PGP-KEY


Powered by ScribeFire.


Mysql user priv.
Tue, 11 Sep 2007 14:20:37 +0200
mysql> GRANT ALL PRIVILEGES ON . TO ‘monty’@’localhost’
    ->     IDENTIFIED BY ‘some_pass’ WITH GRANT OPTION;

Powered by ScribeFire.



Authenticating E-Mail
Tue, 11 Sep 2007 11:48:26 +0000
http://www.ietf.org/rfc/rfc4406.txt




Powered by ScribeFire.


iptables ile Port Knocking
Tue, 11 Sep 2007 11:28:12 +0000
$IPTABLES -A INPUT -p tcp --dport 22 -m recent --rcheck --seconds 60 --name SSH -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 21 -m recent --rcheck --seconds 60 --name SSH -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 1599 -m recent --name SSH --remove -j DROP
$IPTABLES -A INPUT -p tcp --dport 1600 -m recent --name SSH --set -j DROP
$IPTABLES -A INPUT -p tcp --dport 1601 -m recent --name SSH --remove -j DROP




RPM-PGP-KEY import
Tue, 11 Sep 2007 11:26:32 +0000
RPM-PGP-KEY import 
 rpm --import /usr/share/doc/rpm-4.4.2/RPM-PGP-KEY



Powered by ScribeFire.


Mysql user priv.
Tue, 11 Sep 2007 11:20:37 +0000
mysql>GRANT ALL PRIVILEGES ON *.* TO 'monty'@'localhost'
->IDENTIFIED BY 'some_pass' WITH GRANT OPTION;


Powered by ScribeFire.