iiegn's blog

combining greylisting with spam scores - working exim example

2011-10-14T12:12:00.000+02:00

...personal experience with greylisting, some inspiration (some i can't remember anymore...), and some thoughts led to the following (implemented) idea:

let's suppose you trust the system's spam score to the extent that
- a low enough spam score is fairly-certainly correct

why not use a low enough threshold to have first-time senders pass by?

[/etc/exim4/conf.d/acl/40_exim4-config_check_data.rul]

>defer
> ...
> log_message = message deferred: probable spam and greylistd
> message = Message temporarily deferred
> condition = ${if and \
> {\
> { >{$spam_score_int}{75}}\
> {eq{grey}\
> {${readsocket{/var/run/greylistd/socket}\
> {${mask:$sender_host_address/24} \
> $sender_address \
> $local_part@$domain}\
> {5s}{}{}}\
> }\
> }\
> }\
> }
> delay = 4m

Thinkpad TrackPoint Scrolling in Ubuntu Lucid/10.04

2011-07-16T17:34:00.001+02:00

Thinkpad TrackPoint Scrolling in Ubuntu Lucid/10.04
or
How to configure the TrackPoint

personal reminder: ratpoison and an empty, gray java GUI

2011-03-06T19:40:00.001+01:00

"How to un-break graphical Java apps under Ratpoison" suggests wmname to make the JVM believe it runs on a different window manager:

$ wmname LG3D

implies the JVM ran on lg3d (Project Looking Glass - a desktop utilizing 3D aspects in the UI), a non-re-parenting window manager written by Sun; this one is on java's hard-coded list of known non-reparenting window managers.

note for OpenJDK: according to this post "versions of OpenJDK that ship with some operating system distributions—at least Debian (and Ubuntu) and Arch Linux in March and August of 2009, respectively—have had this problem fixed by the vendors."

Manually add account to Google Authenticator - Enter key in Base32 Encoding

2011-03-04T10:24:00.000+01:00

wanted to use OpenID with Multi-factor authentication as a Single Sign-On (SSO) for online services; in particular, i wanted to combine a regular password with a One-Time Password namely, a TOTP token.

Google Authenticator supports TOTP, and not only for their own 2-step verification but one can "Manually add" other accounts.

The bridging part from TOTP to OpenID, in my case, comes from Clavid (cf. OTP@Clavid).

Now to the tiny bit of information that might save you quite some minutes: when entering your secret key into these two locations to set-up an account

Google Authenticator expects the string to be RFC4648 Base32 encoded
Clavid expects the string to be hex encoded

personal reminder: rfkill to toggle bluetooth

2011-01-04T00:49:00.000+01:00

toggling bluetooth (on a Lenovo ThinkPad X200s / Ubuntu 10.x) via rfkill:

rfkill list
rfkill block 0
rfkill unblock 0

until https://bugs.launchpad.net/ubuntu/karmic/+source/linux/+bug/395358 is fixed...

personal reminder: Secure Programming for Linux and Unix HOWTO

2010-12-22T13:56:00.000+01:00

not brand-new but not completely outdated:

Secure Programming for Linux and Unix HOWTO

Online Tasks Service for Thunderbird/Lightning

2010-11-28T22:51:00.001+01:00

Thunderbird/Lightning has been working with Google Calendar for a while now [cf. link]. however, Tasks are not supported as can be seen in this thread and also here.

now, is there another service for Tasks available?

for some time i have been using Chandler but with recent developments TB/Lightning+Chandler stopped working (and they haven't quite figured out who's to blame...).

ironically, Yahoo comes to the rescue: following this post and going further here Tasks with Yahoo actually work.

Reverse Tethering an Android Phone via USB

2010-10-15T16:35:00.000+02:00

until recently i was stuck with a stock android 1.6 - and USB tethering was somewhat adventurous (Tetherbot was an option, connectbot another... both worked best, i.e. without restrictions, when there was a VPN tunneled 'over' either of them.)

android 2.2 comes with USB tethering: in 'Wireless & network settings' - just need to turn it on... and a network interface will be 'exposed' via USB, network-manager (e.g. in ubuntu) will show the new device, and go.

now, this set-up can also be used the other way around (i.e. use the computer's internet connection the mobile is connected to). however, android's ConnectivityManager does not recognize this connection in such a way that services like Contacts Sync would get going.

startUsingNetworkFeature() in http://android.git.kernel.org/?p=platform/frameworks/base.git;a=blob;f=services/java/com/android/server/ConnectivityService.java will choke on android.net.NeworkInfo.isAvailable():
D/ConnectivityService( 166): getMobileDataEnabled returning true
D/ConnectivityService( 166): special network not available

...let's see.

aptitude or apt-get - only update security updates

2010-08-10T14:29:00.000+02:00

two quick possibilities to update security updates only (via apt-get and/or aptitude in debian, ubuntu, ...):

uses a dedicated sources file: http://www.debian-administration.org/articles/241#comment_20
uses a search pattern: http://ubuntuforums.org/showpost.php?p=9161314&postcount=3

Dell & Linux - Links to Remember

2010-05-21T23:29:00.000+02:00

BIOS updates for Dell computers under linux:

The Dell Linux Wiki Page

Extracting the BIOS image from the Windows .EXE file

Dell's info on RAID & Storage (aka. PERC thingthings...)

Android Market on SDK/Emulator

2010-05-19T20:24:00.001+02:00

wanted to use an android emulator to grab a screenshots of google goggles but had to realize - as many before - that the Android SDK comes without 'the Market.' a possible solution is described here: Android Tips for Developers: Android Market on Emulator; at least, for the 1.6 system it worked for me (however, i had to grab the ADP1 image as mentioned in this comment.)

instead of 'head | tail' to delete the first lines of file

2009-12-18T15:14:00.003+01:00

from the tail man page:

-n, --lines=N
output the last N lines, instead of the last 10; or use +N to output lines starting with the Nth

...note the +N option!

blind text generation for LaTeX testing

2009-11-18T13:48:00.000+01:00

...nice!

How to access Time Machine files from Linux

2009-11-16T12:36:00.004+01:00

here a crude helper to restore a 'Time Machine.app' backup on a linux system (well, a non-OSX system...)

starting from How to access Time Machine files from Linux the steps are somewhat automated.

ARG1: directory from where to descend and restore files
ARG2: destination directory
ARG3: directory whith the dir_* files

eg.:

sudo restoretmbackup.py /media/osxbackup/Backups.backupdb/nikki/Latest/nikki foo/ /media/osxbackup/.HFS+\ Private\ Directory\ Data^M

(you might not need to sudo...)

personal reminder: links to SATA hotswapping issues

2009-08-02T22:35:00.002+02:00

in short:

rescan:
echo "0 0 0" >/sys/class/scsi_host/host/scan
remove:
echo > /sys/bus/scsi/devices/:0:0:0/delete

threading prefs for TB

2009-07-31T12:29:00.002+02:00

...just a reminder about threading prefs in TB (might only apply to >=V3.0):

https://wiki.mozilla.org/MailNews:Message_Threading
http://www.thunderbird-mail.de/wiki/FAQ:Aw_statt_Re

git via http proxy

2009-07-24T15:09:00.003+02:00

it is supposed to work-like-a-charm - git via a http-proxy - but then again, sometimes it just doesn't.
in case, changing git clone git://... into git clone http://... does not help this might:

socat TCP4-LISTEN:9418,reuseaddr,fork \
PROXY:proxy.hostname.dom:gitrepo.host.dom:9418,proxyport=3128 &
git clone git://localhost/GITREPOPATH

references:

http://limlian.blogspot.com/2008/08/use-http-proxy-for-git-client.html?showComment=1221973140000#c6839850601346705219

by no means a Telecommunications Provider - but still...

2009-06-28T14:45:00.000+02:00

so far, my system still works - and supposedly less buggy:
http://tech.slashdot.org/story/08/04/24/1334234/Patch-the-Linux-Kernel-Without-Reboots
let's see how this continues...

cf. http://www.ksplice.com/

cpan does not work - Undefined subroutine &Compress::Zlib::gzopen

2009-05-01T18:50:00.002+02:00

while running cpan on a more-or-less out-of-the-box CentOS 5.2 with Perl updated to version 5.8.8 the following error occurred:

Fetching with LWP: ftp://bo.mirror.garr.it/mirrors/CPAN/modules/03modlist.data.gz Going to read /home/egon.stemle/.cpan/sources/modules/03modlist.data.gz Undefined subroutine &Compress::Zlib::gzopen called at /usr/lib/perl5/5.8.8/CPAN.pm line 5721.
suggestions from here helped finding a solution. however, i did not want to and could not delete things from system paths... so, problem solved without deleting things in /usr/lib/...

the following modules are needed:
IO-Compress (2.017), which itself depends on two packages

Compress-Raw-Bzip2 (2.017)

Compress-Raw-Zlib (2.017)

Scalar-List-Utils (1.19)

...and then installed manually.

you need to have working local, aka. user-modules, configured, i.e. perl should look for and install modules into a directory you have r/w permissions; e.g. ~/usr (cf. this link for some hints on how to get started)

start with the Scalar-List-Utils: untar, cd into and
PERL5LIB=~/usr/lib/perl5/5.8.8:~/usr/lib/perl5/site_perl/5.8.8 perl Makefile.PL PREFIX=~/usr -xs make make test make install (you can also give the PERL5LIB path as option -I to perl - or not at all if you are really sure your local set-up is wokring...)

continue with the dependencies for IO-Compress and then IO-Compress itself.

if you want to be on very safe side you may recompile all dynamically loaded modules with
cpan -r (this will take a while - and will install many modules as a local version... watch your quota!)

anyways, afterwards i could happily use cpan to install my two(!) missing modules...

Blogged with the Flock Browser

personal reminder: less secure but quicker rsync

2009-04-27T11:26:00.002+02:00

rsync -e 'ssh -ax -c blowfish' [-a --partial ... (--relative ...)]

personal reminder: Convert Nikon NEF to JPG with ufraw

2008-12-25T18:38:00.001+01:00

$ ufraw-batch --out-type=jpeg --out-path=/home/itsme/Pictures/export --compression=85 --size=1280 /media/Data/home/itsme/Pictures/MyPics/*.nef

for more details cf. http://otype.net/2008/08/convert-nikon-nef-to-jpg-with-ufraw/

howto copy CalendarServer (content) - use rdiff-backup

2008-12-08T00:30:00.005+01:00

rsynced a complete and functional copy of CalendarServer to another drive (and to another file system). afterwards, the server started and didn't complain but iCal.app didn't show any calendar (but still logged in and didn't complain about anything - just no calendar!).

tryied rsync -aA, rsync -rlpAtgoD (long version - one never knows...), and cp -a - but all to no avail.

finally, i tried rdiff-backup -b - and this worked... why? not quite sure! ideas welcome....

personal reminder: building debian packages from source

2008-12-05T22:35:00.003+01:00

...for future reference:

apt-get source (-t testing) PACKAGENAME
apt-get build-dep (-t testing) PACKAGENAME
cd PACKAGANAME-version
OPT: vi debian/rules (e.g. to activate some experimental features)
OPT: vi debian/patches/00list (to enlist a patch that should be applied)
OPT: vi debian/patches/... (the patch enlisted previosly)
dpkg-buildpackage -rfakeroot -uc -b
dpkg -i ../PACKAGENAME-version-etc (only the necessary packages)

apt-listchanges chokes on its DB (bsddb.db.DBRunRecoveryError)

2008-11-20T09:17:00.003+01:00

in case of:

Traceback (most recent call last):
File "/usr/bin/apt-listchanges", line 229, in ?
main()
File "/usr/bin/apt-listchanges", line 150, in main
seen.close()
File "bsddb/__init__.py", line 237, in close
bsddb.db.DBRunRecoveryError: (-30974, 'DB_RUNRECOVERY: Fatal error, run database recovery -- PANIC: fatal region error detected; run recovery')

(similarly to the post below) something along the lines of:

cd /var/lib/apt
db4.6_dump listchanges.db | db4.3_load temp.db
mv temp.db listchanges.db

helps.

spamassassin (or spamd) fails while accessing bayes databases - R/O: tie failed: Transport endpoint is not connected

2008-11-15T19:19:00.006+01:00

just found lines like these in the spamd.log (i.e. spamassassin was not able to use the bayes databases any more...)

warn: bayes: cannot open bayes databases /.../.spamassassin/bayes_* R/O: tie failed: No such file or directory
...
warn: bayes: cannot open bayes databases /.../.spamassassin/bayes_* R/O: tie failed:
warn: bayes: cannot open bayes databases /.../.spamassassin/bayes_* R/O: tie failed: Transport endpoint is not connected

the problem seemed to have been a mismatch in used versions of the BereklyDB files (don't know how exactly they got mixed up...)
anyways, the following commands helped:

for i in auto-whitelist bayes_*; do db4.6_dump ${i} | db4.3_load ${i}.db; chown Debian-exim:Debian-exim ${i}.db; chmod g-rwx ${i}.db; done;
mmv '*.db' '#1'

after that one may check/sync/rebuild the databases along the lines of:

sudo -u Debian-exim sa-learn -u USERNAME --rebuild --dbpath /.../.spamassassin/ -D

some inspiration cam from this thread: http://lists.debian.or.jp/debian-users/200601/msg00113.html

tweking perl dependencies in debian

2008-11-14T18:45:00.008+01:00

wanted to install dkimproxy on a debian server and was happy to find that the package existed. however, installing this package would have altered quite a lot of the perl installation - including many removes (due to dependency errors...); after some manual tweaking of aptitude, apt-get, and dpkg i finally, realized that this won't work...

but then i found: http://www.debian-administration.org/articles/78 - and started with:

dh-make-perl Mail-DKIM-0.32/

...but found that more modules were needed:

dh-make-perl --cpan Crypt::OpenSSL::Random --build
dh-make-perl --cpan Crypt::OpenSSL::RSA --build
dh-make-perl --cpan Crypt::OpenSSL::Bignum --build

installation is done via regular dpkg -i. and afterwards:

sudo aptitude install --without-recommends dkimproxy/testing

worked.

References:

http://dkimproxy.sourceforge.net/
http://www.cpan.org/modules/01modules.index.html
https://help.ubuntu.com/community/GnuPrivacyGuardHowto (in case something like 'running debsign failed' comes up...)

CalDAV support in Google Calendar

2008-11-10T23:05:00.003+01:00

neat, Google Calendar can be used with iCal.app and Mozilla Sunbird/Lightning: http://www.google.com/support/calendar/bin/answer.py?answer=99355

oo documents in svn

2008-10-14T21:13:00.003+02:00

short summary of how to get oo documents into svn (content aware...) - well, it doesn't really work. but, at least, some idea: http://www.oooforum.org/forum/viewtopic.phtml?t=51797&postdays=0&postorder=asc&start=0 which goes along the lines of:

unzip -oq [filename] -d [directory]
zip -rq9DX [filename] *

Apple Calendar Server and memcached

2008-09-18T11:33:00.004+02:00

the apple calendar server (in r2002) seems to 'forget' to make libevent - it works hard to download, compile and install - available for the executable...

[memcached] memcached: error while loading shared libraries: libevent-1.4.so.2: cannot open shared object file: No such file or director

/usr/local/share/libevent-1.4.4-stable/_root/lib holds the files (per default) - cf. man ldconfig and ld.so to proceed from there...

OpenVPN and fail2ban

2008-09-14T19:41:00.002+02:00

wanted to combine Shorewall and fail2ban for SSH and OpenVPN - but found no OpenVPN filters, hence, added http://www.fail2ban.org/wiki/index.php/OpenVPN.

How many days in the current month?

2008-08-18T11:55:00.000+02:00

echo `cal | wc -w ` - 9 | bc

Shorewall and Limit: how to reset a Limit counter

2008-08-16T21:28:00.005+02:00

...i have still no ide how to reset the counter in /proc/net/ipt_recent/

but found a way to circumvent the blocking of an address for some time:

1. sudo iptables -L | grep -e "Chain.*%Limit$[0-9]\+$\? "
- this lists all the Limit Chains
2. sudo iptables -I %Limit -m recent --name SSHA --remove -s IPADDRESS
- in case the Chain is calld %Limit and the name for the recent module is SSHA

References:

http://www.shorewall.net/Actions.html

OS X Leopard (>= 10.5.4 + Security Update 2008-005) - 'Add Printer' for non-admin users

2008-08-08T14:47:00.008+02:00

funnily enough the latest Security Update seems to have outdated this hack.

now the Add Printers... dialogue shows all broadcasted cups printers. however, users cannot add them without authenticating as an Administrator of the computer.

a possible solution seems to be to edit a different part of the cupsd.conf file. look for this section and change it accordingly...

  # All administration operations require an administrator to authenticate...
<Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
  # AuthType Default
  # Require user @SYSTEM
  Require valid-user
  Order deny,allow
</Limit>

Referenes:

http://discussions.apple.com/thread.jspa?threadID=1373822&tstart=173

Change OS X 10.5 Leopard Dock from 3D to 2D

2008-07-29T10:49:00.003+02:00

a quick reminder for myself (because i'd rather like the two lines than downloading a software...)

defaults write com.apple.dock no-glass -boolean YES
killall Dock

references:

http://osxdaily.com/2007/12/24/change-the-105-leopard-dock-from-3d-to-2d/

Flushing DNS Cache

2008-07-28T09:36:00.002+02:00

mac os x:

lookupd -flushcache

win:

ipconfig /flushdns

linux:

/etc/init.d/ncsd restart

flashplugin-nonfree on Debian GNU/Linux amd64

2008-07-17T19:21:00.006+02:00

installation of flashplugin-nonfree resulted in:

*** NSPlugin Viewer *** preloader not found
nspluginwrapper: no appropriate viewer found for /usr/lib/flashplugin-nonfree/libflashplayer.so

debugging went along the lines of

ldd /usr/lib/nspluginwrapper/i386/linux/npviewer.bin

and finding that some libs were missing...
(in between i also found that linux32 should be installed - but wasn't. strace -f was helpful...)
...what helped in the end:

aptitude install -t testing linux32 ia32-libs ia32-libs-gtk flashplugin-nonfree/unstable

references:

svn-finder integration for (very) basic use cases

2008-07-14T22:44:00.002+02:00

was about to write some tiny scripts to get some basic svn commands integrated into Finder.app - luckily, came first across: http://svn-finder.sourceforge.net/

backup: notification instead of polling

2008-07-08T22:48:00.002+02:00

realized that my machine needs an awful lot amount of time to walk through a directory to check whether anything has changed and, hence, need to go into a backup. instead, i thought, it would be neat to use e.g. inotify.

current idea: use iwatch to monitor for file system events, record the files, feed the list to the backup...

- will keep you posted...

change language in "grammar and spelling" on OS X

2008-07-08T22:21:00.003+02:00

in case you want to change the language in the "grammar and spelling" dialog box the short cut

CMD+SHIFT+: comes very handy...

well, but then you are stuck with a floating windows - grab the mouse and change the setting. now,

CTRL+F6 comes handy - this should focus the floating window.

after the first switch the

SHIFT+TAB comes handy to switch to the language field. when leaving the dialog box open, now, the language is pre selected...

cleaning house in osx

2008-06-29T09:17:00.006+02:00

- use xslimmer or monolingual to strip down languages and unneeded architectures

- for all those compiling left overs of macports
sudo port clean --all -vf installed

- and mostly not needed inactive ports
sudo port -f uninstall inactive

- get rid of all the gui developer files (don't do this if you yourself develop applications on that machine, it will delete all designable.nib files)
sudo find / -iname "designable.nib" -exec rm "{}" \;

future reminder: FreeBSD for dummies, aka. linux users...

2008-06-09T11:21:00.002+02:00

don't ask - but i might need this in the near future...

nss signtool, xulrunner, firefox 3 add-ons and things i don't want to mention - currently on a debian system

2008-05-30T23:48:00.010+02:00

in the very unlikely case someone wants to write an add-on for firefox - and let's assume this add-on should run with the new ff3... and the add-on should not be hosted on mozilla.org... well, this is going to be a tough one (and i dont't even want to go into that).

furthermore, let's assume (now, that it's obvious that this add-on needs to be signed) the signing is supposed to take place on a current debian system...

...and, last but no least, this system should also run a xulrunner in ver.> 1.8.1

these constraints will lead (among others) to the following packages:
libnss3-1d, 3.12.0~rc3-1
libnss3-tools, 3.12.0~rc3-1

in case the signtool refuses to do part of its job (and complains about missing libraries) this might help:

ln -s /usr/lib/nss/libsoftokn3.so /usr/lib/libsoftokn3.so
ln -s /usr/lib/nss/libnssdbm3.so /usr/lib/libnssdbm3.so

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=483774

How to Twitter from Skype

2008-05-27T20:54:00.001+02:00

cf. http://www.pacificit.ca/article/319

OpenVPN, Tunnelblick, bridged network (tap device), mDNSResponder, and daapd on OS X - Part 2

2008-05-24T17:02:00.008+02:00

i found the following sh-script (executed with administrator privileges) does help most of the time (cf. http://iiegn.blogspot.com/2008/03/openvpn-tunnelblick-bridged-network-tap.html for the problem...)

#!/usr/bin/env bash

killall openvpn
sleep 1

launchctl unload /System/Library/LaunchDaemons/com.apple.mDNSResponder.plist

sleep 3
kextunload /Library/Extensions/tun.kext
kextunload /Library/Extensions/tap.kext
sleep 5
kextload /Library/Extensions/tap.kext
kextload /Library/Extensions/tun.kext
sleep 5
kextunload /Library/Extensions/tun.kext
kextunload /Library/Extensions/tap.kext

launchctl load /System/Library/LaunchDaemons/com.apple.mDNSResponder.plist

in order to get this sh-script executed the following lines of AppleScript might be helpful (saved as an Application Bundle with the above script inside the bundle):

set myPath to POSIX path of (path to me as string)

do shell script myPath & "/Contents/Resources/Scripts/upndowntaptun.command" with administrator privileges

display dialog "You may now restart your Tunnelblick Connecrtion." buttons {"OK"} default button 1

references:

Static Lib contents

2008-04-29T11:07:00.005+02:00

It is written at the top of the ar manpage, but I seem to miss it every time: to print all symbols contained in a static archive, emit

nm --print-armap [archive]

really simple.

firefox and system-wide installation/deployment of certificates

2008-04-19T01:30:00.008+02:00

wanted to add CACert.org Root Certificate in firefox for all users on a system. it seems as if this were not possible...
(but see: http://wiki.cacert.org/wiki/NSSLib and https://bugzilla.mozilla.org/show_bug.cgi?id=215243)

however, one can use certutil to create a cert8.db and deploy that with the default profile - of course, that doesn't help with users who already have profiles...

certutil -N -d .

certutil -A -n "SomeName" -t "C,C,C" -i some.crt -d .
and then copy cert8.db, key3.db and secmod.db to Firefox-Root-Dir/defaults/profile.

references:

VIM: Punch the Mode Line

2008-04-02T16:52:00.004+02:00

mode line: lines at top or bottom of source code files that contain options for configuring the editor, c.f.:

:help modeline

(of course, in emacs 'mode line' denotes a entirely different concept...)

OpenVPN, Tunnelblick, bridged network (tap device), mDNSResponder, and daapd on OS X

2008-03-24T22:32:00.003+01:00

tried to get the music library from a server running firefly to a mac via an OpenVPN tunnel

- where the same server is also the OpenVPN server and is using a tap device and

- the mac was using Tunnelblick

though this setup seemed to work for my linux machine it didn't quite do the job on the mac: there the mdns information was only used occasionally (though ethereal aka. wireshark confirmed that it was being transmitted).

currently i think that the mDNSResponder is behaving - at least - strange and a possible work-around seems to be

- install the tun/tap-driver separately from Tunnelblick (so the driver is loaded at boot time and mDNSResponder is not 'surprised' by its late appearance...)

- turn the interface of the internet connection (the one tunnelblick uses to connect to the server - not the tap one...) off and on

Use Time Machine (OS X) with a (samba) Network Drive

2008-03-19T02:38:00.006+01:00

sudo defaults write com.apple.systempreferences TMShowUnsupportedNetworkVolumes 1

...but cf. http://pastebin.com/f47499d34 after update to 10.5.2.

references:

http://www.2putts4par.com/2007/11/10/use-time-machine-with-a-network-drive/

quick reminder: Getting X11 forwarding through ssh working after running su

2008-03-18T10:39:00.001+01:00

$ xauth list $DISPLAY
You'll get something like

somehost.somedomain:10 mit-magic-cookie-1 4d22408a71a55b41ccd1657d377923ae

Then, after having done su, tell the new user what the cookie is:

$ xauth add somehost.somedomain:10 MIT-MAGIC-COOKIE-1 4d22408a71a55b41ccd1657d377923ae

(just copy'n-paste the output of the above 'xauth list' onto 'xauth add') That's it. Now, you _should_ be able to start any X application.

references:

http://www.debian-administration.org/articles/494

http://www.windowsecurity.com/whitepapers/Improving_XWindows_security.html

Setup Samba for Bonjour networking with OS X 10.5 Leopard

2008-03-18T10:21:00.006+01:00

put the following into /etc/avahi/services/[somename].service on a linux machine running samba and avahi-daemon:

<?xml version="1.0" standalone='no'?><!--*-nxml-*-->

<!DOCTYPE service-group SYSTEM "avahi-service.dtd">

<service-group>
<name replace-wildcards="yes">%h filer</name>
<service>
   <type>_smb._tcp</type>

   <port>139</port>
   <host-name>zaphod.bn.dev</host-name>
</service>
</service-group>

references:

http://www.askbjoernhansen.com/2007/10/27/setup_samba_for_bonjour_networking_with_os_x_105_l.html

http://www.sanityinc.com/articles/mac-screen-sharing-with-linux

Negate find results

2008-02-15T11:07:00.003+01:00

Find files that do not match expression and dostuff on them:

find ./ [expressions] -prune -or [dostuff]

Example:

find ./ -name '.svn' -prune -or -type f -print

finds all non-svn files and prints their paths on stdout

Zero Config User Initiated Cross Platfrom Remote Desktop Assistance

2008-02-10T12:19:00.000+01:00

Use Case
you frequently give remote assistance to users in very heterogeneous environments

Problem
user-side firewalling makes it impossible to just start up e.g. a vnc server.

Solution
let the user initiate a ssh tunnel from his machine to yours, forwarding his local vnc server port.

Rationale
it is way easier for you to allow for incoming traffic once than it is to do the same on every user's machine.

Implementation
Server
enable your sshd and create a dedicated help user with shell /bin/false
Client
use a shell script to start the vnc server and the ssh tunnel. this is only non-trivial for windows, so I shall outline that below.
Extensions

use a private/public key pair for ssh authentication
use a different server user for each supported user
automatically react on incoming ssh sessions

Esp. the last one is interesting: you can tell people to "just click on the support button when you need help" and you will get instant notification with direct access to their desktop.

Appendix: Client on Windows

Download the tightvnc zip distribution, unzip
Download plink (the putty ssh command line client) and save it into the vnc folder
start winvnc.exe
enter a password (you will use this later when using your vnc client to connect to the user's machines), fix the port to 5900, quit the application
startup regedit
add a dword key "AllowLoopback" with value 1 to LOCAL_MACHINE\Software\ORL\WinVNC3
export LOCAL_MACHINE and CURRENT_USER\Software\ORL to vnc.reg and vnc2.reg in your vnc folder
close regedit
create the batch file and zip the whole directory for distribution:

create a file run.bat in your vnc directory that contains the following lines:

reg import vnc.reg
reg import vnc2.reg
taskkill /F /IM winvnc.exe
start winvnc -run -shareall
plink helpaccount@my.dns.org -pw helppassword -N -R 5900:localhost:5900

where helpaccount and helppassword match the local account you created on your server and my.dns.org is your server's hostname.
after running this script, you should be able use a vnc viewer to connect to localhost on your server and see the client's screen. you will want to set -compress 9 -encoding tight explicitly to tune the connection.

top (unix command) with two samples in logging mode - but only the second matters

2008-02-04T09:39:00.000+01:00

i wanted to use the unix top command with GeekTools and found that this wasn't as straight forward as i had expected...

anyways, the following bundle does the trick:

top -o cpu -l 2 -u -S | sed -e '2,/^Processes:/ d'

use Quick Look (OS X) from command line

2008-01-26T18:17:00.000+01:00

qlmanage -p FILE
qlmanage -p FILE >& /dev/null &

Open in (OS X) Terminal here...

2007-12-15T15:12:00.000+01:00

...seems so handy! but doesn't come with the system.

now, obviously the problem has already been encountered before:

http://c-command.com/scripts/finder/open-in-terminal

so i used this to get started (and finished) - result is a Finder.app Workflow:

on run {input, parameters}

   repeat with i in input
     my processItem(i)
   end repeat

   return input
end run

...just accompany this snippet with on processItem(i) and on canChangeDirectoryTo(f), save it as Workflow - done.

ElsterFormular "Externe Exception C0FB007F" und WINE

2007-11-12T16:25:00.000+01:00

while I was still having a windows machine ElsterFormular was the software i used once a year. now, that i have no windows machine anymore things got a bit more complicated.

i couldn't find a software to submit a 'Umsatzsteuererklärung' (not the 'Umsatzsteuervoranmeldung'), that was free and available for linux and OS X - i couldn't even find one that was available for any of the two operating systems...

that is when WINE came into play (on the linux machine):

Debian GNU/Linux (mostly stable; but with some testing packages) with Kernel 2.6.22
wine 0.9.44-1
ElsterFormular 2006-2007 (8.2.2.0)

and it mostly worked. however, i couldn't transmit data nor could i use the update feature ('Test der Datenübermittlung an das Finanzamt', 'Steuererklärung an das Finanzamt übermitteln...', 'Update von ElsterFormular') but only got

Externe Exception C0FB007F

and the solution was not to reinstall the software (pointed out here and on some other threads here) - i tried that - but to install

mfc42.dll
Jet 4.0 Service Pack 8 (SP8) für Windows 95 / 98 / NT 4.0

as described on http://ladisch.de/elster.html.

references:

imapsync - personal reminder...

2007-11-09T16:15:00.000+01:00

at the end of a long story there was the need to transfer mail from a Lotus Domino server to a local Thunderbird account... anyways, for some other reasons it seemed quite a good idea to transfer them to a local IMAP server, and the have Thunderbird download all mail.

after some different IMAP servers the best solution seemed to be dovecot - with the others there were problems, e.g. with extended attributes.

copying mails from Domino to the local IMAP server was then done with imapsync:

imapsync --host1 domino.e.t.c --user1 "USERNAME" --authmech1 PLAIN --host2 localhost --user2 dummy --authmech2 PLAIN --prefix2 "~/mail/" --syncinternaldates --split1 50 --split2 50 --nofastio1 --debug

references

self-signed certificate with multiple DNS names (aka subjectAltName)

2007-11-07T00:55:00.000+01:00

following [1] and adding

subjectAltName = DNS:PROBABLY_YOUR_COMMONNAME,DNS:*.SOME_DOMAIN_NAME

to the [ v3_ca ] section of your openssl.cnf file should do the trick.

unfortunately, the DNS:copy:commonName didn't work for me...

references:

OS X Leopard and broadcasted cups printers - no Shared Printers

2007-11-06T21:20:00.000+01:00

for whatever reason - and it might be that bonjour should become the preferred method - printers broadcasted from a cups print server don't show up in OS X 10.5 it is annoying in case one just wants to print (without fiddling around with the cups server)...

for the moment the solution seems to be to add

BrowseProtocols cups

to /etc/cups/cupsd.conf (e.g. after BrowseAllow all). in case you know what you are doing

sudo killall -HUP cupsd

restarts the printing service (aka cupsd). the references also show a way of doing all this via cups' web interface (on http://localhost:631)...

nevertheless, you will have to add the 'Shared Printer' via 'Printer & Fax' - just that now the printers from the cups server will show up.

references:

Matlab: Undefined function or method 'propertyeditor' for input arguments of type

2007-11-04T23:56:00.000+01:00

launching matlab, typing 'figure', menu: View->Property Editor, and then

> ??? Undefined function or method 'propertyeditor' for input arguments of type
> 'double'.
> Error in ==> viewmenufcn at 43
>     propertyeditor (hfig, 'toggle')
> ??? Error while evaluating uimenu Callback

found a thread - and a solution: http://groups.google.com/group/comp.soft-sys.matlab/...

> [...] In my case the following folder was missing:
> "$MATLAB\toolbox\matlab\plottools"
>

did help here, too. strangely enough the error occurred only for certain users - even after they had deleted their ~/.matlab directory...

iSync.app (or rather SyncServices) doesn't sync CalDAV calendars

2007-11-04T23:51:00.000+01:00

i have some calendars on an Apple CalendarServer and edit them via iCal.app, Thunderbird/Lightning, and a Web Interface - all fine - and synchronization with my phone is done on the mac via iSync.

problem is that i cannot select any of the CalDAV calendars as target to "Put events created on my phone into". as long as i have no dummy local calendar i cannot select to sync calendars at all.

might be a shortcoming of the SyncServices...

references:

http://discussions.apple.com/thread.jspa?threadID=1213588&tstart=0

iSync.app dosn't show calendars (or shows them but won't sync 'em)

2007-11-04T23:33:00.000+01:00

i was playing around with the CalDAV support in Leopard's new iCal.app - subscribing to CalDAV servers, WebDAV servers, publishing, deleting them again, etc. in the end i could see, edit, and update most of the calendars i wanted to. unfortunately, i couldn't sync them to my phone...

because:
calendars didn't show up in the iSync dialogue for my phone or
calendars showed up in the dialogue but just didn't sync

i cannot say i have a 'real' solution but at least things work again...

as the data of the calendars was not (i repeat NOT) stored locally i could just delete everything that seemed faintly related to iCal.app, iSync.app, my phone or SyncServices, i.e. i deleted the following files/directories...

~/Library/Preferences/com.apple.iCal*
~/Library/Preferences/com.apple.isync*
~/Library/Preferences/iCalExternalSync.plist
~/Library/Preferences/ByHost/com.apple.syncservices*
~/Library/Preferences/ByHost/com.apple.iCal.helper*
~/Library/Calendars
~/Library/Phones
~/Library/Application\ Support/iSync
~/Library/Application\ Support/SyncServices

...logged out (hm, i even rebooted) and started all over again: hooked up the CalDAV calendars into iCal.app, setup the phone for iSync.app and tried again. calendars are back and sync just fine.

reverse lookup of names with Apple Script in Address Book.app

2007-10-07T19:34:00.000+02:00

thought with an asterisx server on the network it should be possible to get incoming calls signaled on the mac - with Address Book.app lookup for names and pictures...

incoming (ISDN) calls are handled by the chan_capi module and then notified via app_notify

at the end of extensions.conf something like the following has to go (put in values for MSN and HOSTNAME_TO_BE_NOTIFIED)

[capi-in]
exten => MSN,1,Notify(${CALLERID(num)}|${CALLERID(name)}|${EXTEN}/HOSTNAME_TO_BE_NOTIFIED)
exten => MSN,2,Wait(120)
exten => MSN,3,Hangup()

update (9/11/2007):

i had a wrong Notify call in my extensions.conf and that was why the notification part didn't work... the AppleScript, still, exemplifies a lookup in Addressbook.app for a given number.

the OS X client comes from the same page, however for me the notification part with Address Book.app lookup didn't work. to have growl notification i then put an AppleScript into Library/Application Support/AsteriskNotifier/Scripts

global callerName, callerNumber, callerImg

-- notification("01792259314||4066585")
-- notification("||4066585")

on notification(message)

  -- message comes in "${CALLERID(num)}|${CALLERID(name)}|${EXTEN}"
  set the text item delimiters to {"|"}

  -- first the number
  set callerNumber to text item 1 of message

  -- second the name - if available
  if (text item 2 of message) is not equal to "" then
    set callerName to text item 2 of message
  else
    set callerName to "Unknown"
  end if

  -- third the number that was called
  set calledNumber to text item 3 of message

  -- for further reference...
  set callerImg to null

  set the text item delimiters to {" "}

  if callerNumber is not equal to "" then

    -- this is necessary if the number in Address Book.app is in a different format
    -- e.g. "034567890" doesn't match "+12 (345) 67890"
    set lookForNum to callerNumber
    set lookForNum to my trim_line(lookForNum, "00", 0)
    set lookForNum to my trim_line(lookForNum, "0", 0)

    tell application "Address Book"

      set found to false
      set phoneNums to {}

      repeat with loopPerson in people

        set PhoneNumsCount to (count every phone of loopPerson)
        repeat with i from 1 to PhoneNumsCount
          set phoneNum to (get value of phone i of loopPerson)

          set newString to my remove_specialChars(phoneNum)

          ignoring white space
            if newString contains lookForNum then
              -- beep
              -- display dialog phoneNum as string
              set phoneNums to phone i of loopPerson
              set callerNumber to phoneNum

              if callerName is not equal to "Unknown" then
                set callerName to first name of loopPerson & " " & last name of loopPerson
              end if

              if image of loopPerson exists then set callerImg to image of loopPerson
              exit repeat
            end if
          end ignoring

        end repeat

        if phoneNums is not {} then
          set found to true
          exit repeat
        end if
      end repeat

      -- if found then
      --  activate
      --  set selection to loopPerson
      -- end if

    end tell

  end if

  tell application "GrowlHelperApp"
    -- Make a list of all the notification types
    -- that this script will ever send:
    set the allNotificationsList to ¬
      {"Incoming Call"}

    -- Make a list of the notifications
    -- that will be enabled by default.
    -- Those not enabled by default can be enabled later
    -- in the 'Applications' tab of the growl prefpane.
    set the enabledNotificationsList to ¬
      {"Incoming Call"}

    -- Register our script with growl.
    -- You can optionally (as here) set a default icon
    -- for this script's notifications.
    register as application ¬
      "Asterisk Notification" all notifications allNotificationsList ¬
      default notifications enabledNotificationsList ¬

    -- Send a Notification...

    if callerImg is not null then
      notify with name ¬
        "Incoming Call" title ¬
        callerName & " @ " & (time string of (current date)) description ¬
        callerNumber as string application name ¬
        "Asterisk Notification" image (callerImg)
      -- callerNumber & " on " & calledNumber

    else
      notify with name ¬
        "Incoming Call" title ¬
        callerName & " @ " & (time string of (current date)) description ¬
        callerNumber as string application name ¬
        "Asterisk Notification" image from location "~/Library/Application Support/AsteriskNotifier/phone.jpg"
    end if

  end tell
end notification

on remove_specialChars(this_text)
  set copy_flag to true
  set the clean_text to ""
  repeat with this_char in this_text
    set this_char to the contents of this_char
    if this_char is not "(" and this_char is not ")" and this_char is not "+" and this_char is not "x" and this_char is not "-" and this_char is not "_" then
      set the clean_text to the clean_text & this_char as string
    end if
  end repeat
  return the clean_text
end remove_specialChars

on trim_line(this_text, trim_chars, trim_indicator)
  -- 0 = beginning, 1 = end, 2 = both
  set x to the length of the trim_chars
  -- TRIM BEGINNING
  if the trim_indicator is in {0, 2} then
    repeat while this_text begins with the trim_chars
      try
        set this_text to characters (x + 1) thru -1 of this_text as string
      on error
        -- the text contains nothing but the trim characters
        return ""
      end try
    end repeat
  end if
  -- TRIM ENDING
  if the trim_indicator is in {1, 2} then
    repeat while this_text ends with the trim_chars
      try
        set this_text to characters 1 thru -(x + 1) of this_text as string
      on error
        -- the text contains nothing but the trim characters
        return ""
      end try
    end repeat
  end if
  return this_text
end trim_line

references:

Notify application module for the Asterisk PBX: http://mezzo.net/asterisk/app_notify.html
AppleScript Support for Growl: http://growl.info/documentation/applescript-support.php#usingImages
http://www.apple.com/applescript/guidebook/sbrt/pgs/sbrt.07.htm
http://www.faqintosh.com/risorse/en/othutil/addrbook/lookupphn/
http://www.mactech.com/articles/mactech/Vol.21/21.10/ScriptingAddressBook/index.html
http://www.mumbles-project.org/
http://www.acm.uiuc.edu/macwarriors/workshops/applescript/1999/nutshell/control.html

Modify iWeb sites to work with Google Analytics

2007-10-05T12:25:00.000+02:00

wanted to use Google Analytics together with iWeb & didn't want to use BBEdit, someEdit, someOtherEdit or an Automator action... as i have to sync the iWeb content anyway - why not use a little (python) script to integrate the Google snippet?

use somthing like

find iWeb/ -iname '*.html' -exec ./iWeb.py "</body>" iWeb.analytics {} {} \;

with iWeb.analytics beeing the Google snippet and iWeb.py the follwoing script. after that i use sitecopy --update [SITENAME]...

#!/usr/bin/env python
import sys,os
usage = "usage: %s searchText insertText_file [infile [outfile]]" % os.path.basename(sys.argv[0])

def init():

stext = sys.argv[1]

replaceTextFileIn = open(sys.argv[2],'r')
replaceTextFileContent = replaceTextFileIn.readlines()
replaceTextFileIn.close()

# print replaceTextFileContent

input = sys.stdin
output = sys.stdout
if len(sys.argv) > 3:
input = open(sys.argv[3])

inputContent = input.readlines()
input.close()

if len(sys.argv) > 4:
output = open(sys.argv[4], 'w')

for s in inputContent:
output.write(s.replace(stext, ''.join(replaceTextFileContent) + stext))

output.close()

if __name__ == "__main__":
if len(sys.argv)

the latest version of this script might be available from (something like):
https: / / iiegn.dyndns.org / svn / de.iiegn / _stuff / iWeb.py

references:

ever wanted to buy a Mac...

2007-10-05T09:12:00.000+02:00

http://www.pizdaus.com/pics/MC3KUw7uCDtL.jpg - still?

Preview.app as viewer in jHylaFax (or other java/macport/... applications)

2007-10-04T12:39:00.000+02:00

/usr/bin/open -a Preview [FILENAME]

debian, ampache, and xspf player

2007-09-30T02:34:00.001+02:00

installed ampache (https://ampache.bountysource.com/wiki/Ampache_on_Debian) and after local play was working wanted to try xspf player:

but it seemed like the link for the temporary playlist-id did not transfer correctly - solution was to modify the trunk version of show_xspf_player.inc.php from the svn repository.

<div id="mp3player">
<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0" width="400" height="170" id="xspf_player" align="middle">
<param name="pluginspage" value="http://www.macromedia.com/go/getflashplayer" />
<param name="allowScriptAccess" value="sameDomain" />
<param name="movie" value="/modules/flash/xspf_player.swf?autoplay=true&playlist_url=" />
<param name="quality" value="high" />
<param name="bgcolor" value="#ffffff" />
<param name="type" value="application/x-shockwave-flash" />
<param name="width" value="400" />
<param name="height" value="170" />
<param name="name" value="xspf_player" />
<param name="align" value="middle" />
<embed src="/modules/flash/xspf_player.swf?autoplay=true&playlist_url=" quality="high" bgcolor="#ffffff" width="400" height="170" name="xspf_player" align="middle" allowScriptAccess="sameDomain" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" />
</object>
</div>

i've been simpsonized

2007-09-09T01:15:00.000+02:00

Have you ever wondered what I would look like as a character on The Simpsons? Never? Not even once? D'oh! Well, anyway, I would look like this:

you can give it a try at http://www.simpsonizeme.com

however, you might wonder what Burger King is going to do with all the photos, DOBs and e-mail addresses...

port install fails with 'checksum mismatch'

2007-09-06T09:51:00.000+02:00

wanted to install Coin with

sudo port -v install coin

but only got

---> Verifying checksum(s) for Coin
---> Checksumming Coin-2.4.6.tar.gz
Error: Checksum (md5) mismatch for Coin-2.4.6.tar.gz
Portfile checksum: Coin-2.4.6.tar.gz md5 17f9a941cec7a1b69693d240e4ac308d
Distfile checksum: Coin-2.4.6.tar.gz md5 30efbdb9c761dd9fea7a7f4a0f01a50d
Error: Checksum (sha1) mismatch for Coin-2.4.6.tar.gz
Portfile checksum: Coin-2.4.6.tar.gz sha1 8595fcc9b4669b8c58490637d577f061589dbdbb
Distfile checksum: Coin-2.4.6.tar.gz sha1 662cde2c7fd06e79f95e02aa23325d283d3294a1

checked whether my download was 'broken': downloaded Coin-2.4.6.tar.gz from different sites and - consistently - found one other checksum...

...then changed the checksum in

/opt/local/var/macports/sources/rsync.macports.org/release/ports/graphics/Coin/Portfile

(for other ports the file will be different - but somewhere in that direction...)

references:

http://blog.codefront.net/2007/05/29/imagemagick-port-broken-temporarily/
http://groups.google.com/group/mailing.freebsd.questions/
http://trac.macports.org/projects/macports/ticket/12618 - now, that's only the bug report...

Umlaut characters (and others) display strangely in Terminal.app

2007-09-05T21:48:00.000+02:00

Terminal.app behaves a bit strange - lately...

äöüÄÖÜ etc. are not displayed correctly
deleteing one character of the above deletes two in the terminal (i.e. hitting the keyboard once and deleting this last character moves the cursor to position -1)

some help for 1. may be found on:

GNU development under Mac OS X - TECH.inhelsinki.nl,
http://www.macosxhints.com/article.php?story=20060825071728278 and
http://groups.google.com/group/

for 2. one might have to change the Character Set Encoding for the Terminal.app (Terminal/Window Settings...) to something other than UTF-8

booting from the network with GRUB

2007-09-01T13:01:00.000+02:00

http://en.opensuse.org/SDB:Booting_from_the_Network_with_GRUB

SSH handler for Firefox

2007-09-01T12:21:00.000+02:00

linux

add the following lines to user.js (in the profile folder):

user_pref("network.protocol-handler.external.ssh", true);
user_pref("network.protocol-handler.warn-external.ssh", false);
user_pref("network.protocol-handler.expose.ssh", true);
user_pref("network.protocol-handler.app.ssh", \
[noLineBreak] "/PATHTO/NAME_OF_SSHHANDLER_HELPER_SCRIPT");

ssh handler helper script

#!/usr/bin/env bash

xterm -e ssh `echo $1 | sed -e "s/ssh:\/\///"`
#
# don't forget to set the script's exectuable flag
#

windows

execute (or combine) ssh.reg:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ssh]
@="URL:ssh Protocol"
"URL Protocol"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ssh\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,75,00,72,00,\
6c,00,2e,00,64,00,6c,00,6c,00,2c,00,30,00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ssh\shell]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ssh\shell\open]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ssh\shell\open\command]
@="c:\\Program Files\\SSH Communications Security\\ \
[noLineBreak] SSH Secure Shell for Workstations\\Sshhandler.cmd \"%1\""

save ssh.cmd in (e.g.) c:\Program Files\SSH Communications Security\SSH Secure Shell for Workstations\Sshhandler.cmd

@echo off
@FOR /F "tokens=2,3 delims=/@" %%a IN ("%~1") DO \
"c:\Program Files\SSH Secure Shell for Workstations\SSH Secure Shell for Workstations\ \
[noLineBreak] SshClient.exe" -u "%%a" -h "%%b"

rem ...DO start SshClient.exe - without quotes - works better;
rem but how does the path go into there without quotes...?

in case it doesn't work add the following lines to user.js:

user_pref("network.protocol-handler.external.ssh", true);
user_pref("network.protocol-handler.warn-external.ssh", false);
user_pref("network.protocol-handler.expose.ssh", true);

i happily give credit for this - and particularly the windows integration - to martisch_AT_uos.de (www.waldwolf.net)

digital camera and linux

2007-08-31T16:00:00.000+02:00

http://www.geocities.com/piccolbo/dplinux.html
http://pages.quicksilver.net.nz/pepe/d70/Nikon_D70_on_Linux.html

lost interrupt with Flash Card reader on IBM TP X24 - solved

2007-08-31T15:26:00.000+02:00

inserting a flash card into my X24 running Debian GNU/Linux with kernel 2.6.22 (same result with 2.6.18-3,4,5) initially resulted in something like:

kernel: pccard: PCMCIA card inserted into slot 1
kernel: pcmcia: registering new device pcmcia1.0
kernel: Probing IDE interface ide2...
kernel: hde: TOSHIBA THNCF1G02QG, CFA DISK drive
kernel: ide2 at 0x3100-0x3107,0x310e on irq 3
kernel: hde: max request size: 128KiB
kernel: hde: 2000880 sectors (1024 MB) w/2KiB Cache, CHS=1985/16/63
kernel: hde:<4>hde: lost interrupt
kernel: hde: irq timeout: status=0xff { Busy }
kernel: ide: failed opcode was: unknown
kernel: ide2: reset timed-out, status=0xff

simple but not quite obvious solution was to change interrupt settings of the serial, the IRDA and the parallel port in the BIOS; note that the X24 only has serial and parallel ports via port replicator or dock...

References:

http://www.thinkwiki.org/wiki/Installation_instructions_for_the_ThinkPad_X24#Miscellaneous - a shorter version of this...

oben, unten - wie fährt man aufzug?

2007-08-30T15:31:00.001+02:00

anschaulich dargestellt...

no sound after resume with snd-intel8x0 driver and alsa on IBM TP X24 - solved

2007-08-30T14:53:00.001+02:00

i have found different suggestions - and statements about whether this problem actually exists. it did for me.

with Debian GNU/Linux ranging from sarge to etch and lenny, and corresponding alsa packages, from kernel 2.6.17 up to 2.6.22 i didn't quite manage to get sound going after resume.

first solution was to unload the driver and reload it again - which crashed all applications that were using sound at the time of suspend...

now, i only do (in /etc/hibernate/common.conf):

OnSuspend 98 /etc/init.d/alsa suspend
OnResume 04 /etc/init.d/alsa resume
OnResume 10 sleep 3 && \
amixer set Master mute >/dev/null 2>&1 && \
amixer set PCM mute >/dev/null 2>&1 && \
amixer set Mic mute >/dev/null 2>&1 && \
amixer set Mic unmute >/dev/null 2>&1 && \
amixer set PCM unmute >/dev/null 2>&1 && \
amixer set Master unmute >/dev/null 2>&1

References:

http://en.thinkwiki.org/wiki/Swsusp

useful links when looking for irda evolution phone sync on IBM TP X24

2007-08-28T11:30:00.000+02:00

http://www.hpl.hp.com/personal/Jean_Tourrilhes/IrDA/
http://theorie.physik.uni-wuerzburg.de/~arwagner/computer/T41p/
http://gentoo-wiki.com/HOWTO_mobile_phone_connected_with_IrDA
http://www.multisync.org/

http://www.alfonsomartone.itb.it/hcpcpi.html

http://ubuntu.wordpress.com/2006/12/18/sync-evolution-calendar-with-google-calendar/

http://www.gammu.org/wiki/index.php?title=Gammu:Wammu

how Thunderbird (on OS X) knows about Address Book.app

2007-08-23T12:38:00.000+02:00

it seems like the story has been going on for a while. have a look on
https://bugzilla.mozilla.org/show_bug.cgi?id=203927 for details.

what is working for me:

download http://files.mistermartin75.net/thunderbird-2.0.0.6.en-US.mac.dmg

edit prefs.js and add:
user_pref("ldap_2.servers.osx.description", "OS X");
user_pref("ldap_2.servers.osx.dirType", 3);
user_pref("ldap_2.servers.osx.uri", "moz-abOSXdirectory:///");
if it doesn't work try to delete some of the "ldap_2.server"-entries that seem as if they could interfere...

something for my iTunes library

2007-08-21T14:49:00.001+02:00

http://dougscripts.com/itunes/scripts/scripts01.php

image resize on OS X

2007-08-21T14:27:00.001+02:00

cf. http://www.silvermac.com/2007/resizing-images-in-mac-os-x/

http://xtralean.com/IWOverview.html
http://www.lemkesoft.com/content/193/key-features.html
http://www.macosxhints.com/article.php?story=2004092804461334