sudo notes:
Thursday, March 19, 2020
Using sudo with WinSCP
sudo notes:
Monday, June 25, 2018
RFC 2307 Unix to AD attributes Legend
What Active Directory Attributes did the Unix Attribute tabs expose in the Active Directory Users and Computers MMC snap-in prior to Windows Server 2016?
https://blogs.technet.microsoft.com/activedirectoryua/2016/02/09/identity-management-for-unix-idmu-is-deprecated-in-windows-server/
Dialog name
|
AD Attribute
|
RFC2307 attribute
|
Example
|
User object
|
Group object
|
Computer object
|
UID
|
uidNumber
|
X
|
1000
|
X
| ||
Login Shell
|
Loginshell
|
X
|
/bin/bash
|
X
| ||
Home Directory
|
unixHomeDirectory
|
X
|
/home/username
|
X
| ||
Primary Group name/GID
|
gidNumber
|
X
|
10002
|
X
|
X
| |
Members
|
MemberUid
|
X
|
Administrator
|
X
| ||
iphostnumber
|
ipHostNumber
|
X
|
10.2.2.2
|
X
| ||
NIS Domain
|
maSFU30NisDomain
|
“example”
|
X
|
X
|
X
| |
Members
|
msSFU30PosixMember
|
CN=Group,CN=Schema, CN=Configuration, DC=Woodgrove,DC=Local
|
X
| |||
Name
|
msSFU30Name
|
“Server123” or “Administrator” or “unix group”
|
X
|
X
|
X
| |
Computer Aliases
|
msSFU30Aliases
|
Alias1; alias2
|
X
|
Wednesday, February 21, 2018
unetbootin with ubuntu 17.10
No protocol specified
unetbootin: cannot connect to X server :0
The following worked for me to resolve the issue:
xhost local:root
non-network local connections being added to access control list
sudo QT_X11_NO_MITSHM=1 /usr/bin/unetbootin
Monday, June 12, 2017
QuadStor VTL Setup Notes
https://www.quadstor.com/virtual-tape-library.html
- Multicore/MultiCPU Intel/AMD Processor system
- 8 GB RAM. 64 GB or more recommended for data deduplication
- RHEL/Centos 6.x/7.x, SLES 13 SP3 or Debian 7/8 for x86_64/AMD64 architecture
- QLogic 4Gb/s or above HBA(s) for Fiber Channel connectivity
- 1/10 Gb Ethernet ports for iSCSI connectivity
ip addr add 192.168.1.75/24 dev enp0s3
ip route add default via 192.168.1.1 dev enp0s3
# yum update
# yum install dkms gcc make kernel-devel bzip2 binutils patch libgomp glibc-headers glibc-devel kernel-headers
# mkdir -p /media/cdrom
# mount /dev/cdrom /media/cdrom
# sh /media/cdrom/VBoxLinuxAdditions.run
rpm -q kernel
rpm -q kernel-devel
Make sure they are the same version. Remote to start using the newest version.
Confirm you are using newest version using uname -a.
Then rpm -e the old kernel version.
yum install httpd
yum install sg3_utils
yum install policycoreutils-python
gcc, perl kernel-devel were already installed.
/sbin/chkconfig --add httpd (RHEL/CentOS)
sudo systemctl enable httpd.service
sudo systemctl restart httpd.service
yum install sssd realmd oddjob oddjob-mkhomedir adcli samba-common samba-common-tools krb5-workstation openldap-clients policycoreutils-python -y
/usr/sbin/setsebool -P httpd_enable_cgi 1
/usr/sbin/semanage permissive -a httpd_t
sudo firewall-cmd --add-service=http --permanent && sudo firewall-cmd --add-service=https --permanent
sudo systemctl restart firewalld
/etc/init.d/quadstorvtl start
Friday, May 26, 2017
Redhat 7 root password recovery
Wednesday, March 22, 2017
HPUX NTP setup
/etc/hosts
192.168.1.4. ntp1
192.168.1.5 ntp2
/etc/ntp.conf
server 127.127.1.0 #Local clock
fudge 127.127.1.0 stratum 10
server ntp1 prefer
server ntp2
/etc/rc.config.d/netdaemons
export NTPDATE_SERVER=ntp1
export XNTPD=1
export XNTPD_ARGS="-l /var/adm/xntpd.log"
NTP Pool as alternate external NTP if ports are open: north-america.pool.ntp.org
My recommendation is for NTP entries to be in DNS as cname records and then just reference the cname records in your configuration files... so if you ever need to change the NTP server you do not have to edit hundreds of client NTP client files. Just update the DNS entries for NTP1 NTP2 etc.
The reason you update /etc/ntp.conf as well as ntpdate in the netdaemons file... is that ntpdate is intended for a single use on boot up... then from that point on... it gets updated from xntpd running from the /etc/ntp.conf configuration. The reason for this is that xntpd will refuse to start if the local clock is off by more than 1000 seconds off from the NTP server you wish you get time from and if this happens the xntpd won't start and time will be way off until someone notices... manually runs ntpdate and then starts xntpd again. Be careful not to cause your clock to go backwards or jump ahead after a database or application is running if it is sensitive to time. Be sure to read about setting the options to SLEW the clock if you have things like a database running when you need to affect a large time change.
Tuesday, December 6, 2016
Remove Nvidia Proprietary Driver to avoid crashing
sudo apt-get install ubuntu-desktop
sudo apt-get autoremove
sudo rm /etc/X11/xorg.conf
echo "nouveau" | sudo tee -a /etc/modules
sudo reboot
sudo apt-get autoremove
sudo apt-get autoclean
+Bryan Payne add me on Google PlusThursday, May 19, 2016
Mounting 64 GB SDCard on Linux
UPDATED: Add the Universe repository and then run the following:
sudo apt-get install exfat-fuse exfat-utils
OLD Info:
sudo add-apt-repository ppa:relan/exfat sudo apt-get update sudo apt-get install fuse fuse-exfat exfat-utils
Initial Error Message:
Error mounting /dev/sde1 at /media/sdcard: Command-line `mount -t "exfat" -o "uhelper=udisks2,nodev,nosuid,uid=1003,gid=1003,iocharset=utf8,namecase=0,errors=remount-ro,umask=0077" "/dev/sde1" "/media/sdcard"' exited with non-zero exit status 32: mount: unknown filesystem type 'exfat'
Wednesday, July 1, 2015
Using Ekiga Softphone with Google Hangout on Linux or Windows
Then under "Accounts" in the pulldown menu... (There are no options to add an account in the popup window... you have to find them in the pulldown menu (Unity on Ubuntu). Some people even think you can't use Ekiga with non Ekiga SIP accounts since they can't get past this step and even rated it low based on this, but the software is good. I have not used their pay service yet, but since they are generous enough to offer free accounts, and free software it might be worth giving them a look and buying some VOIP minutes if you need to call landlines.
Name: Google Hangout (Whatever you want to call it)
User: <YourEmailAddress@gmail.com>
Server: talk.google.com
Port: 5222
Resource: Ekiga
Password: <YourPassword>
Once finished under the accounts tab you should see a status of "connected".
http://www.Ekiga.net
Thursday, June 11, 2015
How to Determine if an HP-UX Account is Locked
/usr/lbin/modprpw -k <account>
You need to know if accounts are locked
System may be a "trusted" system which means that it has higher security
enabled.
On a non-trusted system the /etc/passwd file will contain the information:
man passwd:
-s name Display some password attributes associated with the
specified name. Superuser privilege and non-trusted
mode is required if the files repository is specified.
The format of the display will be:
name status mm/dd/yy min max warn
(#### e.g. that info is held in tcb directories ###)
name status
where status means: PS =passworded; LK =locked; and NP=no password.
passwd -s -a:
PS =passworded; LK =locked; and NP=no password
on a trusted system the /tcb directory structure holds the lock info;
man getprpw:
lockout returns the reason for a lockout in a "bit" valued string, where 0 = condition not present, 1 is present.
The position, left to right represents:
| Google
Voice and Video Chat Installer for Google Hangouts "The Installer
encountered error 1625: This installation is forbidden by system
policy. Contact your system administrator". |
2 past last login time (inactive account)
3 past absolute account lifetime
4 exceeded unsuccessful login attempts
5 password required and a null password
6 admin lock
7 password is a *
(If the user is NOT locked, all bits will be 0)
getprpw:
for USER in `awk -F: '{print $1}' /etc/passwd`
do
printf $USER
printf " "
/usr/lbin/getprpw -m lockout,alock $USER
done
Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan
+Bryan Payne add me on Google Plus
SOLVED: Kickstart (system-config-kickstart) - Could not read video driver database
Error Message: "Could not read video driver database"
# system-config-kickstart
(system-config-kickstart.py:18686): IBUS-WARNING **: The owner of /home/user/.config/ibus/bus is not root!
Traceback (most recent call last):
File "/usr/share/system-config-kickstart/system-config-kickstart.py", line 92, in <module>
kickstartGui.kickstartGui(file)
File "/usr/share/system-config-kickstart/kickstartGui.py", line 131, in __init__
self.X_class = xconfig.xconfig(xml, self.kickstartData)
File "/usr/share/system-config-kickstart/xconfig.py", line 80, in __init__
self.fill_driver_list()
File "/usr/share/system-config-kickstart/xconfig.py", line 115, in fill_driver_list
raise RuntimeError, (_("Could not read video driver database"))
RuntimeError: Could not read video driver database
#
This resolved my issue:
# apt-get remove hwdata # wget ftp://mirror.ovh.net/mirrors/ftp.debian.org/debian/pool/main/h/hwdata/hwdata_0.234-1_all.deb # dpkg -i hwdata_0.267-1_all.deb # apt-get install system-config-kickstartHope this helps you.
Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan
+Bryan Payne add me on Google PlusMonday, April 20, 2015
MSL6000 Service password
The default service password is 5566.
Default Factory password is 56789.
If you have lost the level 1 or level 2 passwords the factory password can be used to reset them.
If the password is no longer set to the defaults... you can discover the current password by using the MSLUTIL.exe via a serial connection. There is no need to know the serial settings as the utility will autodiscover them. The current configuration does not have to be reset and the password will be displayed in plain text. You will need the correct serial cable.
More information can be obtained here:
http://h200003.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=es&cc=es&taskId=115&prodSeriesId=254838&prodTypeId=12169&objectID=c00023637
Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan
+Bryan Payne add me on Google PlusSunday, December 14, 2014
After upgrade to Ubuntu 14.04 Totem unable to play flv files in firefox.
sudo apt-get install gstreamer1.0-plugins-bad-videoparsers
Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan
+Bryan Payne add me on Google PlusMonday, February 17, 2014
Office Communicator via Pidgin for Ubuntu 12.04 LTS
Added SIPE plugin from here:
https://launchpad.net/ubuntu/quantal/amd64/pidgin-sipe/1.11.2-1ubuntu1
Project screen shots are here:
http://sipe.sourceforge.net/screens/
I was running a live DVD so even though newer versions were available it complicated the dependencies and I was in a hurry... so I loaded this version.
Under Basic Tab:
Listed SIP account as the username.
Login: Used my AD account and PW
Under Advanced I changed email address if different from login name to match my actual email address.
How to fix libnss3 error on Ubuntu 12.04
google-chrome-stable_current_amd64.deb
sudo apt-get update
sudo apt-get install libgconf2-4 libnss3-1d libxss1
then:
download chrome for linux from here:
https://www.google.com/chrome?brand=CHMO#eula
then:
sudo dpkg -i google-chrome-stable_current_amd64.deb
Friday, May 10, 2013
HP-UX: HOW TO BOOT FROM TAPE EFI ITANIUM
Exit from the boot menu to the EFI Shell
fs0:\> reconnect -r
Broadcom NetXtreme Gigabit Ethernet (BCM5704) is detected (PCI-X)
Broadcom NetXtreme Gigabit Ethernet (BCM5704) is detected (PCI-X)
HP 2Port 2Gb Fibre Channel Adapter (driver 1.42, firmware 3.03.150)
Broadcom NetXtreme Gigabit Ethernet (BCM5703) is detected (PCI-X)
HP 2Gb Fibre Channel Combo Adapter (driver 1.30, firmware 3.03.171)
Broadcom NetXtreme Gigabit Ethernet (BCM5703) is detected (PCI-X)
Scsi(Pun0,Lun0) HP MSL6000 Series 0520 ( 20 MBytes/sec)
Scsi(Pun1,Lun0) HP Ultrium 3-SCSI G63W (320 MBytes/sec)
ReconnectController(0,0,0) : Status = Success
From this we gather that the Ultrium 3 Tape Drive is Pun1, Lun0.
At this point exit from the shell... returning you to the boot menu. At this point enter the boot configuration menu and boot from a file if you want a one time boot and look for result of your reconnect -r output... in my case it was Pun1, Lun0.
Boot menu showed the device as follows:
Device Path Acpi(HWP0002,PNP0A03,700)/Pci(1|1)/Scsi(Pun1,Lun0)
Other helpful commands would be:
devtree, devices, map
Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan
+Bryan Payne add me on Google PlusSunday, May 5, 2013
Updating PERL CPAN on HP-UX
10.11.10.162
unconfigured
hpsrv-11.23 root sources/modules # cpan
cpan shell -- CPAN exploration and modules installation (v1.7601)
ReadLine support enabled
cpan> o conf
CPAN::Config options from /opt/perl_32/lib/5.8.3/CPAN/Config.pm:
commit Commit changes to disk
defaults Reload defaults from disk
init Interactive setting of all options
build_cache 10
build_dir /root/.cpan/build
cache_metadata 1
cpan_home /root/.cpan
dontload_hash
ftp /usr/bin/ftp
ftp_proxy
getcwd cwd
gpg /usr/bin/gpg
gzip /usr/contrib/bin/gzip
histfile /root/.cpan/histfile
histsize 100
http_proxy
inactivity_timeout 0
index_expire 1
inhibit_startup_message 0
keep_source_where /root/.cpan/sources
lynx
make /usr/bin/make
make_arg
make_install_arg
makepl_arg
ncftp
ncftpget
no_proxy
pager /usr/bin/more
prerequisites_policy ask
scan_cache atstart
shell /sbin/sh
tar /usr/bin/tar
term_is_latin 1
unzip /usr/local/bin/unzip
urllist
wget
cpan> o conf init
/opt/perl_32/lib/5.8.3/CPAN/Config.pm initialized.
CPAN is the world-wide archive of perl resources. It consists of about
100 sites that all replicate the same contents all around the globe.
Many countries have at least one CPAN site already. The resources
found on CPAN are easily accessible with the CPAN.pm module. If you
want to use CPAN.pm, you have to configure it properly.
If you do not want to enter a dialog now, you can answer 'no' to this
question and I'll try to autoconfigure. (Note: you can revisit this
dialog anytime later by typing 'o conf init' at the cpan prompt.)
Are you ready for manual configuration? [yes] yes
The following questions are intended to help you with the
configuration. The CPAN module needs a directory of its own to cache
important index files and maybe keep a temporary mirror of CPAN files.
This may be a site-wide directory or a personal directory.
I see you already have a directory
/root/.cpan
Shall we use it as the general CPAN build and cache directory?
CPAN build and cache directory? [/root/.cpan]
If you want, I can keep the source files after a build in the cpan
home directory. If you choose so then future builds will take the
files from there. If you don't want to keep them, answer 0 to the
next question.
How big should the disk cache be for keeping the build directories
with all the intermediate files?
Cache size for build directory (in MB)? [10] 100
By default, each time the CPAN module is started, cache scanning
is performed to keep the cache size in sync. To prevent from this,
disable the cache scanning with 'never'.
Perform cache scanning (atstart or never)? [atstart]
To considerably speed up the initial CPAN shell startup, it is
possible to use Storable to create a cache of metadata. If Storable
is not available, the normal index mechanism will be used.
Cache metadata (yes/no)? [yes]
The next option deals with the charset your terminal supports. In
general CPAN is English speaking territory, thus the charset does not
matter much, but some of the aliens out there who upload their
software to CPAN bear names that are outside the ASCII range. If your
terminal supports UTF-8, you say no to the next question, if it
supports ISO-8859-1 (also known as LATIN1) then you say yes, and if it
supports neither nor, your answer does not matter, you will not be
able to read the names of some authors anyway. If you answer no, names
will be output in UTF-8.
Your terminal expects ISO-8859-1 (yes/no)? [yes]
If you have one of the readline packages (Term::ReadLine::Perl,
Term::ReadLine::Gnu, possibly others) installed, the interactive CPAN
shell will have history support. The next two questions deal with the
filename of the history file and with its size. If you do not want to
set this variable, please hit SPACE RETURN to the following question.
File to save your history? [/root/.cpan/histfile]
Number of lines to save? [100]
The CPAN module can detect when a module that which you are trying to
build depends on prerequisites. If this happens, it can build the
prerequisites for you automatically ('follow'), ask you for
confirmation ('ask'), or just ignore them ('ignore'). Please set your
policy to one of the three values.
Policy on building prerequisites (follow, ask or ignore)? [ask]
The CPAN module will need a few external programs to work properly.
Please correct me, if I guess the wrong path for a program. Don't
panic if you do not have some of them, just press ENTER for those. To
disable the use of a download program, you can type a space followed
by ENTER.
Where is your gzip program? [/usr/contrib/bin/gzip]
Where is your tar program? [/usr/bin/tar]
Where is your unzip program? [/usr/local/bin/unzip]
Where is your make program? [/usr/bin/make]
Warning: lynx not found in PATH
Where is your lynx program? []
Warning: wget not found in PATH
Where is your wget program? []
Warning: ncftpget not found in PATH
Where is your ncftpget program? []
Warning: ncftp not found in PATH
Where is your ncftp program? []
Where is your ftp program? [/usr/bin/ftp]
Where is your gpg program? [/usr/bin/gpg]
What is your favorite pager program? [/usr/bin/more]
What is your favorite shell? [/sbin/sh]
Every Makefile.PL is run by perl in a separate process. Likewise we
run 'make' and 'make install' in processes. If you have any
parameters (e.g. PREFIX, LIB, UNINST or the like) you want to pass
to the calls, please specify them here.
If you don't understand this question, just press ENTER.
Parameters for the 'perl Makefile.PL' command?
Typical frequently used settings:
PREFIX=~/perl non-root users (please see manual for more hints)
Your choice: []
Parameters for the 'make' command?
Typical frequently used setting:
-j3 dual processor system
Your choice: []
Parameters for the 'make install' command?
Typical frequently used setting:
UNINST=1 to always uninstall potentially conflicting files
Your choice: []
Sometimes you may wish to leave the processes run by CPAN alone
without caring about them. As sometimes the Makefile.PL contains
question you're expected to answer, you can set a timer that will
kill a 'perl Makefile.PL' process after the specified time in seconds.
If you set this value to 0, these processes will wait forever. This is
the default and recommended setting.
Timeout for inactivity during Makefile.PL? [0]
If you're accessing the net via proxies, you can specify them in the
CPAN configuration or via environment variables. The variable in
the $CPAN::Config takes precedence.
Your ftp_proxy?
Your http_proxy?
Your no_proxy?
You have no /root/.cpan/sources/MIRRORED.BY
I'm trying to fetch one
CPAN: LWP::UserAgent loaded ok
Fetching with LWP:
ftp://ftp.perl.org/pub/CPAN/MIRRORED.BY
Fetching with LWP:
ftp://ftp.perl.org/pub/CPAN/MIRRORED.BY.gz
Fetching with Net::FTP:
ftp://ftp.perl.org/pub/CPAN/MIRRORED.BY
Couldn't fetch MIRRORED.BY from ftp.perl.org
Fetching with Net::FTP
ftp://ftp.perl.org/pub/CPAN/MIRRORED.BY.gz
Couldn't fetch MIRRORED.BY.gz from ftp.perl.org
Your ~/.netrc neither contains ftp.perl.org
nor does it have a default entry
Issuing "/usr/bin/ftp -n"
Local directory now /root/.cpan/sources
Timeout (900 seconds): closing control connection.
Bad luck... Still failed!
Can't access URL ftp://ftp.perl.org/pub/CPAN/MIRRORED.BY.
Please check, if the URLs I found in your configuration file () are valid.
The urllist can be edited. E.g. with 'o conf urllist push ftp://myurl/'
Could not fetch MIRRORED.BY
CPAN.pm needs at least one URL where it can fetch CPAN files from.
Please enter your CPAN site: [] ftp://mirror.cc.columbia.edu/pub/software/cpan/
Enter another URL or RETURN to quit: []
New set of picks:
ftp://mirror.cc.columbia.edu/pub/software/cpan/
http://cpan.mirror.clemson.edu/
commit: wrote /opt/perl_32/lib/5.8.3/CPAN/Config.pm
cpan> reload index
cpan> install Bundle::CPAN
cpan> reload cpan
Changed perms on Cwd.sl to include execute
hpsrv-11.23 root /root # cd /opt/perl_32/lib/5.8.3/PA->
hpsrv-11.23 root auto/Cwd # ls -l
total 48
dr-xr-xr-x 2 bin bin 96 Oct 29 2009 .
dr-xr-xr-x 39 bin bin 8192 Nov 1 16:17 ..
-r--r--r-- 1 bin bin 0 Jan 19 2006 Cwd.bs
-rw-rw-rw- 1 bin bin 16384 Jan 19 2006 Cwd.sl
hpsrv-11.23 root auto/Cwd # chmod +x Cwd.sl
hpsrv-11.23 root auto/Cwd # pwd
/opt/perl_32/lib/5.8.3/PA-RISC1.1-thread-multi/auto/Cwd
hpsrv-11.23 root auto/Cwd # ls -l Cwd.sl
-rwxrwxrwx 1 bin bin 16384 Jan 19 2006 Cwd.sl
* Crypt::DES is not installed
* Crypt::Rijndael is not installed
* Socket6 is not installed
Bryan Payne on Linkedin https://www.linkedin.com/in/paynebryan
+Bryan Payne add me on Google PlusFriday, April 12, 2013
BEST HEADSET FOR ALTIGEN IP710 PHONE
http://www.altigen.com/system_manuals/50a/ip710_admin.pdf
This phone supports both RJ9 and 2.5mm headsets. Below you see the RJ9 option.
![]() |
| HW261N |
![]() | ||
| 26716-01 Quick Connect Cable |
Wednesday, April 10, 2013
HOW TO ADD STREAMING MUSIC TO CARS WITHOUT AN AUX JACK
This Jabra device is a pricier option, but adds some additional features and Jabra is widely known for their phone accessories.
Please feel free to comment if you have any feedback or questions about this article.
HOW TO ADD STREAMING MUSIC TO YOUR CAR
If your car is equipped with an Auxiliary audio input jack this solution will work for you. My car actually supports Bluetooth phone use, but did not support the A2DP Bluetooth Profile required to stream Audio. All that is required is that you have an aux input jack. You then change your car radio's input source to the aux jack, power up the Aluratek AIS01F, use your phones Bluetooth menu to connect to the Aluratek device, and then start enjoying your streaming audio or music from your cell phone. You could use it to stream any application accessible on your cell phone... like Pandora, YouTube, Navigation directions from Google Maps, or Mapquest, or just enjoy your MP3 collection on your phone via your car speakers. I use this in my Buick Regal to stream music and android trapster or google navigation information. It works great!
This unit includes a rechargeable battery so you can use it for portable applications... you can essentially plug this device into any speaker that has an input jack and make any speaker Bluetooth accessible. Personally I combined this unit with a USB car charger like the Energizer car charger you see above. Alternatively you could purchase or utilize a USB wall charger for your house, and use the built in rechargeable battery to supply your power when using it in your car.
NOTE: If you need Bluetooth Phone and Streaming Music/Audio (A2DP), and a solution that works even if you do not have an auxiliary input jack... click here.
Please leave me feedback if you have any questions or comments about this article.



