Thijs' today

20090310

<pre><pre>set Args = Wscript.ArgumentsouName = Args(0)
usrName = Args(1)
RUProot = Args(2)

RUPpath = RUProot & " \" & usrName

'Get the domain
Set dse = GetObject(" LDAP://RootDSE" )
Set domain = GetObject( " LDAP://" & dse.Get(" defaultNamingContext" ))

set ou = domain.GetObject(" organizationalUnit" , " OU=" & ouName )

wscript.echo " Creating user in " & ou.Name

set usr = ou.Create(" user" , " cn=" & usrName )
usr.Put " samAccountName" , usrName
usr.Put " userPrincipalName" , usrName
usr.Put " Profilepath" , RUPpath

usr.SetInfo

wscript.echo " User " & usrName & " was created successfully in " & ou.Name & " with a RUP Path of: " & RUPpath</pre></pre>

Where is pear

<h3 style="padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; margin-top: 0.5em; margin-right: 0px; margin-bottom: 0.5em; margin-left: 0px; line-height: 1.15; font-size: 18px; font-weight: normal; ">Where is PEAR?</h3>OS X has traditionally had problems with <a href="http://pear.php.net/" style="color: rgb(0, 78, 235); text-decoration: none; ">PEAR</a>. Many point updates would overwrite the included version of PEAR with an older, and perhaps insecure version. Sadly, Apple has fixed this by not including PEAR at all in their OS. This is a big inconvenience for people wanting to use Apple’s default version of PHP, versus a third party distribution. So, lets get PEAR installed. Type the following in the terminal window to download the PEAR installer:

curl http://pear.php.net/go-pear > go-pear.php 

sudo php -q go-pear.php

Clearsilver on OSX Published by barneyb on December 7, 2006 in java.

<div class="nav-previous" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; float: left; width: 356px; text-align: left; ">Download the source tarball and unpack. Open up `rules.mk.in` in the root directory and around line 91 or so, replace "-shared" with "-dynamiclib" in the LDSHARED and CPPLDSHARED lines. Now run `./configure` with the appropriate options. Now open up `java-jni/Makefile` and around line 10, change "libclearsilver-jni.so" to "libclearsilver-jni.jnilib" in the NEO_UTIL_SO line. Do your normal make process and you should be greeted with working Java bindings. Just drop clearsilver.jar and libclearsilver-jni.jnilib in your classpath, subject to the standard JNI caveats about multiple loads per JVM instance. </div>

<ol><li>Make an insecure version of the key</li>This is needed so that Apache does not prompt for a passkey every time it is started. However, you need to make sure to protect the integrity of the resulting <tt>server.key</tt> file.
<pre style="font-size: 9pt; background-color: rgb(238, 238, 238); border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(112, 112, 112); border-right-color: rgb(112, 112, 112); border-bottom-color: rgb(112, 112, 112); border-left-color: rgb(112, 112, 112); padding-top: 10px; padding-right: 10px; padding-bottom: 10px; padding-left: 10px; "># openssl rsa -in server.key -out server.key.insecure
Enter pass phrase for server.key:
writing RSA key
# mv server.key server.key.secure
# mv server.key.insecure server.key

# cp server.key /etc/apache2/server.key
# cp server.crt /etc/apache2/server.crt

# chmod 600 server.key
# chmod 600 server.crt
</pre><li>Edit <tt>/etc/apache2/httpd.conf</tt> and uncomment the include directive for the SSL configuration file. Change:</li><pre style="font-size: 9pt; background-color: rgb(238, 238, 238); border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(112, 112, 112); border-right-color: rgb(112, 112, 112); border-bottom-color: rgb(112, 112, 112); border-left-color: rgb(112, 112, 112); padding-top: 10px; padding-right: 10px; padding-bottom: 10px; padding-left: 10px; "># Secure (SSL/TLS) connections
#Include /private/etc/apache2/extra/httpd-ssl.conf
</pre>to
<pre style="font-size: 9pt; background-color: rgb(238, 238, 238); border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(112, 112, 112); border-right-color: rgb(112, 112, 112); border-bottom-color: rgb(112, 112, 112); border-left-color: rgb(112, 112, 112); padding-top: 10px; padding-right: 10px; padding-bottom: 10px; padding-left: 10px; "># Secure (SSL/TLS) connections
Include /private/etc/apache2/extra/httpd-ssl.conf</pre></ol>

<ol><li>Generate a certificate signing request (CSR)</li><pre style="font-size: 9pt; background-color: rgb(238, 238, 238); border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(112, 112, 112); border-right-color: rgb(112, 112, 112); border-bottom-color: rgb(112, 112, 112); border-left-color: rgb(112, 112, 112); padding-top: 10px; padding-right: 10px; padding-bottom: 10px; padding-left: 10px; "># openssl req -new -key server.key -out server.csr
Country Name (2 letter code) [AU]:US
State or Province Name (full name) [Some-State]:State
Locality Name (eg, city) []:City
Organization Name (eg, company) []: company name
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []: servername
Email Address []:
A challenge password []:
An optional company name []:
</pre>The servername entered for the <tt>CN</tt> should match your web server's DNS name.
<li>Sign the CSR with the CA</li><pre style="font-size: 9pt; background-color: rgb(238, 238, 238); border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(112, 112, 112); border-right-color: rgb(112, 112, 112); border-bottom-color: rgb(112, 112, 112); border-left-color: rgb(112, 112, 112); padding-top: 10px; padding-right: 10px; padding-bottom: 10px; padding-left: 10px; "># openssl x509 -req -days 3650 -in server.csr -CA ca.crt \
-CAkey ca.key -set_serial 01 -out server.crt
Signature ok
subject=/C=US/ST=State/L=City/O=company/CN=server
Getting CA Private Key
Enter pass phrase for ca.key: *****</pre></ol>

<ol><li>Generate your own Certificate Authority (CA)</li><pre style="font-size: 9pt; background-color: rgb(238, 238, 238); border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(112, 112, 112); border-right-color: rgb(112, 112, 112); border-bottom-color: rgb(112, 112, 112); border-left-color: rgb(112, 112, 112); padding-top: 10px; padding-right: 10px; padding-bottom: 10px; padding-left: 10px; "># openssl genrsa -des3 -out ca.key 4096
enter password

# openssl req -new -x509 -days 365 -key ca.key -out ca.crt
re-enter password from above

Country Name (2 letter code) [AU]: US
State or Province Name (full name) [Some-State]: State
Locality Name (eg, city) []: City
Organization Name (eg, company) []: company name
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []: My CA
Email Address []:
</pre><li>Generate a server key</li><pre style="font-size: 9pt; background-color: rgb(238, 238, 238); border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(112, 112, 112); border-right-color: rgb(112, 112, 112); border-bottom-color: rgb(112, 112, 112); border-left-color: rgb(112, 112, 112); padding-top: 10px; padding-right: 10px; padding-bottom: 10px; padding-left: 10px; "># openssl genrsa -des3 -out server.key 4096
Enter pass phrase for server.key: ****
</pre><pre style="font-size: 9pt; background-color: rgb(238, 238, 238); border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: solid; border-right-style: solid; border-bottom-style: solid; border-left-style: solid; border-top-color: rgb(112, 112, 112); border-right-color: rgb(112, 112, 112); border-bottom-color: rgb(112, 112, 112); border-left-color: rgb(112, 112, 112); padding-top: 10px; padding-right: 10px; padding-bottom: 10px; padding-left: 10px; "> </pre></ol>

20090306

cmd /c systeminfo

20090305

ik ga nog liever zoetjes onder een brug liggen dan zuur geld te verdienen

runas /user:domain\Administrator "shutdown /M \\x.x.x.x -t 0"

20090304

<pre class="alt2" dir="ltr" style="background-image: initial; background-repeat: initial; background-attachment: initial; -webkit-background-clip: initial; -webkit-background-origin: initial; background-color: rgb(255, 255, 255); color: rgb(0, 0, 0); margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 6px; padding-right: 6px; padding-bottom: 6px; padding-left: 6px; border-top-width: 1px; border-right-width: 1px; border-bottom-width: 1px; border-left-width: 1px; border-top-style: inset; border-right-style: inset; border-bottom-style: inset; border-left-style: inset; border-color: initial; width: 640px; height: 34px; text-align: left; overflow-x: auto; overflow-y: auto; background-position: initial initial; ">debootstrap --arch i386 dapper /mnt/whatever http://archive.ubuntu.com/ubuntu</pre>

# ssh root@gentoo dd if=/dev/hda | dd of=/dev/hda

20090128

osX installer fatal error after user defined string

found fatal error in OSX install cd, must writeup apple bugrep later, gist of it:
naming harddrive @` during installation will crash the installer before copying.

I suppose the backtick is not escaped in the installation scripts

20090119

For new Sysadmins/IT Types

It occurs to me that many of you are sometimes surprised or dismayed when you discover that rather than being a respected tech worker, doing smart, hard things that few others can, that you're really treated like some kind of mutant cop/janitor/slaughterhouse cleaner lovechild.
"Why? Why do all the other people hate me?"
They don't.
But the only way to explain it is via allegory. Pay attention, because I am about to explain the secret to the IT version of Life, The Universe, and Everything, and you wouldn't want to fuck it all up.
When I was in my first IT job, fresh out of the Air Force, I had a...dismaying encounter with a user, who, upon realizing that I would actually need more than zero time to fix her computer, said, as kind as could be; Perhaps you should find someone who knows what they're doing I of course was a bit taken aback by this, and asked my boss, Jack, what the hell was that all about. He chuckled, in that fucking annoying "Oh, you young lads, how funny you are" way that our elders have, and said: "Being in IT is kind of like being a doctor with a patient who complains that "It hurts when I stick a fork in my eye." We, of course, being the logical sort, reply back, in all sincerity and earnestness, "Well, you should stop sticking a fork in your eye then." The user, or patient will then look at us like we really are the idiots they believe us to be and say: "No, you don't understand...I want you to make it stop hurting.""
I looked at Jack for a minute, like he was fucking crazy, until he said, "The whole problem with IT is that some days, we just can't make the fork not hurt, and that's always going to be our fault. It's why so many IT people drink like fish." See, you're never going to get them to stop sticking the fork in their eyes. Never. Stop trying, it's fantasy. Along those lines, they're never going to treat you like more than a glorified janicopter, where your only useful function is to STFU and bail them out of that jail they worked so hard to get themselves into.
Again

20081213

Sweet, email to blogspot

I sent this message from gmail, let's see how it ends up the^H^H^Hhere :)

Matthijs Dalhuijsen

EDIT: this email had 2 files attached to it, a picture and an mp3

http://dalhuijsen.com
+32 487 627 352

Google Tasks

Google Tasks, now in gmail... Here's hoping that they will merge it into calendar soonest so their CalDav implementation can store Todo components... vCal cTodo, the events even look the same (ish)

goooo gooogle!

20081212

sqtqn qnd qdqm

Sorry Adam, I never heard of you two guys (Satan and Adam), but 'sounds great; anyway; if you're looking for Adam, he's making video harmonica tutorials; some cool stuff in there look him up on Youtube; his nick there is KudzuRunner prett good tutorials speckled with stories and anecdotes, I especially liked the tutorial on modifiyng the reeds of your harp to make it bend a little wider::: anyway; here's him explaining a song, get to the music already Adam ;) http://www.youtube.com/watch?v=d-OxIr1mk3I&feature=related

--
map{ map{tr|10|# |;print} split//,sprintf"%.8b\n",$_}
unpack'C*',unpack'u*',"5`#8<3'X`'#8^-@`<-CPP`#8V/C8`"

20081211

YADIS openID from intertwingly

At this point, I have two Identities, but I can only declare one, YADIS defines a simple format for declaring multiple identities,

  
    
      http://openid.net/signon/1.0
      http://intertwingly.net/id/
      http://intertwingly.net/blog/
    
    
      http://openid.net/signon/1.0
      http://www.myopenid.com/server
      Delegate>http://samruby.myopenid.com/

AddType application/xrds+xml .xrdf

RewriteCond %{HTTP_ACCEPT} application/xrds\+xml
RewriteCond %{HTTP_ACCEPT} !application/xrds\+xml\s*;\s*q\s*=\s*0(\.0{1,3})?\s*(,|$)
RewriteRule ^$ http://intertwingly.net/public/yadis.xrdf [R,L]

  Header onsuccess set X-XRDS-Location http://intertwingly.net/public/yadis.xrdf

http://intertwingly.net/blog/2007/01/03/OpenID-for-non-SuperUsers

That’s pretty much it.  What this says is that the web page in question is owned by the owner ofhttp://samruby.myopenid.com/ and furthermore http://www.myopenid.com/servermay be used to verify ownership of http://samruby.myopenid.com/.

When done, feel free to check your setup.  You may find that the autodiscovery features of most OpenID libraries are not as robust as those for feed autodiscovery.  Never fear, there is a solution for this later in this post.The good news is that it is easy.  You don’t need any of these libraries.  Simply download phpMyID.  Place the one php file in on your web server and modify two lines

intertwingly

OpenID for non-SuperUsers

Log in via

(o) Local account
+username: [_________]
+password: [_________]
++++create+an+account
(o) Existing email account
+email_addr:[________]
+password:...[________]
+++gmail, yahoo, hotmail
++++++++++++++++
(o) OpenID
+url:.[_______________]
++++++++++++++++

which auth mechanisms do you support?

Thijs' today

20090310

Where is pear

Clearsilver on OSX Published by barneyb on December 7, 2006 in java.

20090306

20090305

20090304

20090128

osX installer fatal error after user defined string

20090119

For new Sysadmins/IT Types

For new Sysadmins/IT Types

20081213

Sweet, email to blogspot

Google Tasks

20081212

sqtqn qnd qdqm

20081211

YADIS openID from intertwingly

http://intertwingly.net/blog/2007/01/03/OpenID-for-non-SuperUsers

intertwingly

Log in via

Where am I?

Extra whotsits

Blog Archive

also me

share

Packet Storm Security Last Files

20090310

20090306

20090305

20090304

20090128

20090119

For new Sysadmins/IT Types

For new Sysadmins/IT Types

20081213

20081212

20081211

Where am I?

Extra whotsits

Blog Archive

also me

Subscribe

share

Packet Storm Security Last Files