Web 3.0

This morning before going to work I had a little chat with a friend of mine.

me:
morning
what’s your opinion about javascript?

friend:
Necessary evil.

me:
hmm ok you’re on the same line as sans
http://isc.sans.org/diary.html?storyid=2457&rss

friend:
http is too dumb to do what people want to do.
And javascript is better than java.
And it’s more cross platform. But it’s tough to write and easy to hide evil.

me:
i am “discovering” javascript the last months
(i know, 10 years late)
i think it rocks.
makes me totally reconsider the way webpages could work
building a part now where ppl can make teams, by drag and dropping members
without a single page refresh.

friend:
Right.
Welcome to web 2.0.
Well, we’re on 3.0
But you can join 2.0

me:
yh i heard the 3.0 for the first time this week
what’s 3.0 btw?
no internet? borg?

friend @ 7:15
It’s nonsense.
Like 2.0

me @ 07:15
like 2.0 is
gmta, rofl

Update
Another friend pointed me (after reading the above> to this userfriendly cartoon…

web2.0

Finally… sasl with virtual accounts in mysql working!

*sigh*
This bothered me from the moment I got my new postfix mailserver.
Everything worked…tls/amavisd-new/courier/plain-sasl/postfix all with mysql. But somehow I didn’t get sasl working with the virtual user accounts in mysql. I tried almost everything and nothing worked.
Once in a while I tried to get it working again, but every time it ended in a dissapointment.
Until today! Jippie!

The missing link turned out to be using the “-r ” option in saslauthd.sh.
From the saslauthd man pages:

     -r      Combine the realm with the login (with an '@' sign in between).
             e.g.  login: "foo" realm: "bar" will get passed as login:
             "foo@bar".  Note that the realm will still be passed, which may
             lead to unexpected behavior.

On freeBSD, add this to rc.conf:

saslauthd_flags="-r -a getpwent"

And in /usr/local/lib/sasl2/smtpd.conf:

sasl_pwcheck_method: auxprop
sasl_auxprop_plugin: sql
sql_engine: mysql
mech_list: login plain crammd6 digestmd5
sql_user: sql-user
sql_passwd: sql-pass
sql_database: postfix
sql_select: SELECT clear FROM postfix_users WHERE email = '%u@%r'
sql_verbose: yes

And don’t forget to restart the saslauthd after editing this file.

# saslauthd -v
saslauthd 2.1.21
authentication mechanisms: sasldb getpwent kerberos5 pam rimap

Fire!

Recently I have resigned from my former student-society-computer-foundation. Together with 4 friends, we kept the network running with given-away-for-free-thrash computers (except the DEC-alpha kick ass server).
Lots of fun, lots of beer, but life goes on.

A couple of years ago we had a fire in our mission-control room, and we made some pictures. The final thing i’ve done 5 minutes ago with my root-account was scp-ing the fire pictures to gargleblaster.org.

So long and thanks for all the fish…

The pictures…subtitles are in Dutch.
The real amazing thing is that all those computers are still up and running.

OS X: sshd/sftp jail

A while ago I enabled a jail for an useraccount on my server.
Last week, I had to add another user.

The difference between priviliged useraccount and a “jailed” useraccount is a dot in the path of the home directory, for example: “/Users/./username”.

Being a little bit under stress and having not very much time, I couldn’t recall how to do that with OS X serveradmin.
Very frustrating. Googling and digging through the manuals didn’t give the answer where I was looking for.
Am I the only one who prefers the plain old /etc/passwd above netinfo?

But…today I recalled how I did it before.
And it’s so simple….(after mucking around with obscure CLI commands like nicl and serversetup)

server-admin

Configuring the date and time on PIX OS 6.3

Summertime again.
All of my servers are synced with a central NTP and pick up summertime nicely.
Except my Cisco PIX 515e.
Turned out that I didn’t configure my date time settings very well.
So, as well for my reference as for your information:


clock timezone CET 01
clock summer-time CET recurring last Sunday March 2:00 last Sunday october 2:00
ntp server i.p.a.dr source interface
ntp server i.p.a.dr source interface

The clock timezone command is tricky…You have to specify your own timezone AND the offset against UTC.
A list of timezone abbr. which Cisco uses can be found here.

# show clock detail
09:27:34.357 CET Sun Mar 27 2005
Time source is NTP
Summer time starts 02:00:00 CET Sun Mar 27 2005
Summer time ends 02:00:00 CET Sun Oct 30 2005

Gargleblaster.org

My latest run

date: 30 Nov 08 11:02 CET
distance: 4.95 km
duration: 28'04"
my last run

All my runs

total runs: 66
total km: 355.11
total time: 37:06'19"
farthest run: 11.13 km