Yep, been some time…

A lot has changed since I last blogged.  I’ve left the financial department and moved to networks and systems.  This, methinks, is the place for me.  Work is a lot of fun these days, it’s very good!  I’m doing some very geeky things, I’ve been doing a lot with virtualization both in VMware and XenServer, I’ve been spending time with enterprise storage and backup solutions and absorbing everything I can from the crew I work with every day.  No day is predictable and I’ve yet to see boredom.  You can’t ask for more in a gig

I’m beginning a project which is both going to benefit me personally (because I like to know things) and professionally, MySQL server administration.  In short, there’s a need for somebody to have advanced skills with MySQL and potentially other SQL servers in the future.  I volunteered to be that guy.  I’m about to dive into beginner MySQL and progress into backups, tuning, database replication and high availability (HA).  I’m pretty psyched!  This is pretty much how I felt when I decided that I wanted to do something other than Windows and I jumped (both feet) into Linux.  I’ve got 5 books on hand, I’m beginning with the MySQL Administrator’s Bible and moving on to others from there.  Since I have no (NONE!) experience with MySQL or any database, I think it’ll be a bit of a slow start and will hopefully speed up in time…

I’ll be banging on this as much as possible over the Christmas break this year and we’ll go from there.  I should have no problem building test servers as needed (XenServer is making deploying a Linux VM trivial) and I’m sure I can grab some large collections of test data from existing MySQL databases on campus.  I should have more than I need for the project

In other news…  The linuxneophyte.com site is still on hiatus and will probably remain that way forever.  Umm, I guess retired is a better description than hiatus.  I’m thinking that if I blog at all, it’ll be here.  One ring to rule them all so to speak.  I’m not focusing on any single OS, Windows, Linux, Mac…  Use the right tool for the job…  If anyone is interested, my primary machine these days is a MacBook.  For day-to-day use, I don’t think there’s a better hardware/OS combo.  It’s simple enough to run Windows in a VM if you need it, you can install a whole collection of command line tools to get real work done and I don’t care who you are, you have to admit, Apple makes pretty hardware.

…and now, bed.

Before I go, here’s something a little cool, it turns out that one of the authors of the administrator’s bible (Sheeri K. Cabral) earned her education @ Brandeis.  Kind of slick that I’ll be taking skills she’s handing me and employing them @ the same Uni.

Sheeri, if you see this in a Google alert, /me says hi!

M

This is more of a photo blog, the image below is IE6 & IE8 running on the same machine (OptiPlex 740 with Windows 7 RC and VirtualXP) at the same time.  If only 7 was actually gold and deployed to my desktops…  I wouldn’t have to worry about running another machine just for IE6.  Someday…  Someday…

So I joined up to beta test Windows 7, more for the fun and distraction of it than anything.  I downloaded both the 32 and 64 bit ISOs and burned em’ to DVD for installation.  Below is a basic walkthrough of the installer and a fix for a problem that occurs on my test hardware (Dell Optiplex 740)

7′s install is as straight forward as Vista’s.  You choose your language, time and currency format and your keyboard layout and then accept the license.  Next you choose your install type (I chose custom, not upgrade).  Following that, you select your destination partition (I’m installing on a dual boot system and I created the partition in advance) and let it go.  The installer copies the files to the hard disk and reboots the machine for the first time.

This is where the fun begins!  The machine boots and you get the fancy Windows particle animation, some notifications of reg and system updates, a message reading that Windows is completing the installation and then… a black screen with just a hint of color in the top row of pixels.  The installer is still working as indicated by DVD and hard disk drive access.  Eventually, the machine will reboot again and attempt to load Windows, you’ll be left at the same black screen.

The problem is that there’s a driver update required for the video chipset to work properly, here’s how I got into Windows in order to install the update.

Note: I was able to get higher resolutions working as long as I didn’t select 1280×1024.  Since that’s what I (and the OS) wanted, I went for the updated driver.

1. Restart
2. Press F8 to pull up advanced boot menu
3. Select Enable low-resolution video (640×480)
   
4. Setup will continue… (albeit in a low resolution)
5. Give Setup the information it needs (account, PC name, password and so on)
6. Run Windows Update and install anything required
7. Restart when prompted, be sure to select low-resolution mode during boot..
8. Run Windows Update again
9. Install the optional NVIDIA updates (there’s only 1 update if you installed w7 64bit)
10. Post install, Windows will set the res to 1280×1024 and you’re done.

That’s all folks, start installing your apps and see what works

This summer, the Uni moved to a new mail system.  We left behind the customized IMAP over TLS/SMTP over SSL setup for a newer, supported and more advanced setup.  The new back-end is Zimbra Collaboration Suite.  Being that this isn’t only a mail system, but a collaboration suite (hence the nifty title) it’ll also support calendaring and IM.

Pre-migration, my group used Thunderbird to access their mail via IMAP over SSL.  When there weren’t server problems (of which there were a few) this was a fast, easy and slick method of managing email.  We had access to an LDAP server for campus addresses and Thunderbird was especially apt at narrowing down your list of addresses as you filled in a To:/From: field (this is something I miss on a daily basis).  For personal and collected addresses there was the Thunderbird address book.  TB provides strong searching utils (quick search and advanced), tagging (custom tags, not just colored, nameless flags) and threading (something I used for lists, came in VERY handy).  That’s just out of the box, with add-ons, applying notes to messages and working with PGP messages is trivial.

For years, TB served us and did it well.  The only complaints I got, were about missing features, of course, the features weren’t missing, it was always a lack of know-how on the part of the complainant.  Well, that’s almost true, TB was lacking in some respects, and it was lacking in our infrastructure as much as in TB.  Obviously, the lack of calendar integration was an issue.  Our calendar system was proprietary and TB (even with the Lightning plugin) wasn’t going to work with it.  You also had the personal address book and other configuration options stored on the desktop instead of the server.  For me, that was always less than ideal.

Enter the new hope, Zimbra.  Zimbra has been dubbed an Exchange killer and as such is supposed to allow you to do everything Exchange can do (and more) without having to run Exchange.  I like this idea (it’s the love of F/OSS that pleases me here) and for the most part, Zimbra fits the bill (this isn’t going to be a review of Zimbra).

Now that we have back-end software that supports MAPI (Exchange protocol), I decided to give Outlook (OL) a shot.  As a matter of fact (and to save time and whining) I’ll just tell you, I recommended that we move to Outlook, got the approval and did the deed.  We’re all using it now and will be for the foreseeable future.

We use OL for a single reason, integrated mail, address book and calendar.  I had a difficult time opting to go with OL, it IS a weak mail client.  I have lists of annoyances, but this is because I like software that works, makes working with it easy and generally doesn’t suck.  That said, I’m betting that the integration will make the lives of my people easier.  In the end, that’s my job.  Find what’s best for them, show them how it’s best for them and make it work.

Time will tell what happens.  Today we’re still using the old calendar and client to access it.  Essentially all we’ve done is change mail clients.  Once the calendar service is rolled out, perhaps my dislike for outlook will ease up a bit.  I’m hoping so.

Oh and the results…  For the most part, people are completely indifferent to pretty OK.  To them it’s just email, click new, add address, add subject (sometimes), fill in the body and click send.  If it works, it’s good.  I have a few folks (more technical people) who realize that in the email department, we did downgrade, but they understand why and we’re changing how we do things to fit the OL way.

I hope to do some playing with folder sharing (something we couldn’t do with IMAP and TB) I’ll post about it and hopefully have some nice things to say

Stay tuned for Summer in Review, Episode 2: Attack of Dell Image Direct (note: titles are subject to change without notice).

Soooo, you’ve been using IE to visit sordid sites and now your machine is fouled up with all sorts of malware. This mess was avoidable, so clean your machine and put on a browser prophylactic before indulging in your favorite solitary past times again…

What you’ll need:

SeaMonkey
NoScript
MultiZilla/MultiViews [optional]

Overview:

We’re going to be installing the SeaMonkey (SM) browser and it’ll be used to view sites that you don’t trust (you decide what that means in this instance, I’ll define it as anything that would appall your mother). NoScript and Multizilla are add-ons for SM, NoScript will prevent web pages from running scripts (java, etc) and potentially mucking up your machine, Multizilla will give SM some extra clean-up options.

01: Installing SeaMonkey

Download and install SM, I opted to install only the browser, you can perform a complete install if you want to check out all of the open source tools provided in the suite. I also opted not to use Quick Launch.

Following the installation, SM will launch and ask if you want to make it your default browser, answer No.

02: Enhancing/Protecting SeaMonkey

Using SM, open http://noscript.net/getit and click the "Install Noscript latest version*" link. You will be asked if you want to install the software, you do, click the Install button. You will be asked if you want to install NoScript to your profile, click OK. You should see a dialog explaining that NoScript has been successfully installed and will be available to you when you restart the browser. Click OK to dismiss the notification.

Still using SM, open http://multizilla.mozdev.org/installation/installation.html. This page can be a little confusing, don’t install the experimental nightlies, you want to scroll down until you see "Free MultiZilla [Installation] or [Download]", click the Installation button, you will again be asked if you want to continue, click the Install button. The next dialog will tell you to "Select OK, for a single user installation or Cancel, for a multi-user installation", click the OK button. If there are no problems, you’ll be told the install was a success and to restart your browser, click the OK button to dismiss the notification.

03: Configuring SeaMonkey

Close all open SM windows (if you opted to install and use Quick Launch you’ll want to close out of that as well). Now start SM again. It’s going to start with an open sidebar (F9 or View > Show/Hide > Sidebar to kill it) and some extra tool bars which I tend to hide (F12 to hide the MultiZilla bar & F1 to hide the Personal bar).

Now to configure MultiZilla: Choose Edit > Preferences select MultiZilla and click Open Preference Manager. Select the Privacy header and put a check into the boxes next to the options below:

• Clear disk cache on exit
• Clear location bar history on exit
• Clear global history on exit
• Clear all cookies on exit
• Clear download history on exit
• Clear all form data on exit

Now select the Sessions header, on the Save Behavior tab, choose Don’t Save Sessions, on the Restore Behavior tab choose Don’t Restore Sessions.

Note: There are other settings you can tweak to manage cookies and other content both in MuliZilla prefs and SM prefs. It’s up to you how paranoid you want to be.

04: Start Browsing

At this point we’re ready to go. SeaMonkey will clear its cache, history, etc when you exit the program and all scripts are disabled on all pages. You’ll notice that when you go to a page that has a script, a yellow notification bar will open in the bottom of your browser window, in that bar there’s an Options button. Clicking it will allow you to grant that site the ability to run scripts either permanently or temporarily, that way if you really NEED some functionality and NoScript blocks it, you can allow it.

Notes:

From time to time, SeaMonkey, NoScript and MultiZilla will let you know that there’s an update available for them. I would suggest installing the updates as they present themselves. They can add functionality and security fixes.

I’m not promising that this will keep your machine free and clear of malware, but it goes a long way to prevent infection. It’s certainly safer than using IE (switch to Firefox already!). YMMV.

While this was aimed at Windows users, NoScript and MultiZilla work just as well on the Linux release of SeaMonkey, don’t forget to install them if that’s your OS of choice

http://blogs.zdnet.com/security/?p=845

Real Player got a slap in the mouth from stopbadware.org. I can’t think of a mainstream program that deserves it more! I’ve had many an issue with the application acting like it owns MY computer in the past. I love to see bad/annoying programs punished.

Long ago I found Real Alternative and I’ve never once looked back or found a single real media file I couldn’t play. If you dread the Real headaches, check out the alternative.

There’s a QuickTime alternative as well, I use it on any Windows machine that has no need for iTunes. Both of the alternatives are great projects and those of you who detest overbearing software owe it to yourself to give them a look. That said, you’ll be responsible for keeping them up to date. There’s no automatic update programs for these solutions (gotta take the good with the bad).

So here’s a story, a crappy story. There’s no real explanation (at this time anyway) but the issue is resolved..

I was @ work yesterday, updating some software on some client machines. I started noticing that Windows Update wasn’t enabled on these boxes and I was damn sure that I had a GPO set up for turning it on. As a matter of fact, it was a fairly new policy (about a month old?) that was pointing the machines to a WSUS server on campus. I know little about WSUS and what it does in the background, I just know it’s a handy way to report on and approve updates for machines and not have to install whatever MS says you have to install. We have a very capable gentleman keeping his eyes on the updates and the vulnerability notices. Glad to have him dealing with this for us.

Anyway.. My machines just weren’t picking up the policy that enables Automatic Updates and points the client to the WSUS server. Whats funny is that when it was initially set up, it was working fine! I have no idea when it decided to jump the track, I just know that it did. I did everything I could think of, forcing group policy updates, googling, talking to other admins on campus, all of us stumped. We finally decided that somebody would come down and be a second pair of eyes on the clients in my area the next day. I still continued poking and prodding my boxes for the remainder of the afternoon.

Eventually the day ended, I was p*ssed about this problem and late leaving the office. I HATE knowing something is wrong and being unable to fix it. So I stomped about and sulked all night, wondering what other steps I could perform. I ended up just going to bed really early and hoping that some sleep would help. Riiiiiiiight.

So there I was, 3:45 in the morning, working out and cursing the millipedes trying to invade my house (another story). Still CRaZy angry and annoyed.. I just couldn’t figure out WTF was wrong.. I finished the workout, got ready and headed into work bright and early. I attempted all of the things I had done before, and got the same result.

I finally just decided to unlink the GPO, create a new one, mirror the settings and then force an update on the client machine. All the while my toes were crossed (fingers were busy).

Wouldn’t ya know it. It worked. No idea why, it just did. There aren’t any glaring diffs between the policies. One works, the other doesn’t. pffft. Hate crap like that.. I wouldn’t have minded (as much) if there was some freaking reason for problem..

So, it’s Friday, I don’t have to spend the weekend worrying about this and I’m leaving at noon (just over an hour from now). At least it ended well.

Ahhh, let the weekend begin.