wtorek, 30 grudnia 2008
cisco PIX515 - wyciek pamięci
Objawem jest wyciek pamieci który w rezultacie powoduje generowanie błędu "Memory allocation error"
Powodów moze być kilka.
1. Wywaliłem logowanie do pamieci - no logging buffered ....
2. błąd w konfiguracji urzadzenia - zestawianie tunelu VPN na nie istniejące połączenie.
3. atak DoS na urzadzenie - wtedy jest duzo sessji i brakuje pamieci,
Do sprawdzenia :
Just an update in case someone else runs across this problem. The timeout settings and the amount of embryonic connections have serious impact on Pix memory usage. If you are receiving memory allocation errors check both.
To check the number of embryonic connections:
show local-host | include host|count/limit
The default timeout settings:
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute"
poniedziałek, 29 grudnia 2008
ssh na routerach cisco
!--- Generate an SSH key to be used with SSH.
cry key generate rsa
ip ssh time-out 60
ip ssh authentication-retries 2
środa, 24 grudnia 2008
diagnozowanie DNSa na kontrolerach domeny
Lista wyliczonych partycji katalogów:
Liczba partycji katalogów = 2
DomainDnsZones.domain.local Enlisted Auto Domain
ForestDnsZones.domain.local Enlisted Auto Forest
Polecenie zostało wykonane pomylnie.
C:\Users\ad-kurzeja>dnscmd ad03 /EnumZones
Lista wyliczonych stref:
Liczba stref = 20
Nazwa strefy Typ Magazyn Właciwoci
. Cache AD-Legacy
10.1.10.in-addr.arpa Primary AD-Legacy Secure Rev
domain.local Primary AD-Legacy Update
Polecenie zostało wykonane pomylnie.
C:\Users\ad-kurzeja>dnscmd ad1 /EnumZones
Lista wyliczonych stref:
Liczba stref = 20
Nazwa strefy Typ Magazyn Właciwoci
. Cache AD-Legacy
10.1.10.in-addr.arpa Primary AD-Legacy Secure Rev
jakasdomena Primary File
domain.local Primary AD-Legacy Update
Polecenie zostało wykonane pomylnie.
C:\Users\ad-kurzeja>dnscmd ad2 /EnumZones
Lista wyliczonych stref:
Liczba stref = 20
Nazwa strefy Typ Magazyn Właciwoci
. Cache AD-Legacy
10.1.10.in-addr.arpa Primary AD-Legacy Secure Rev
jakasdomena Secondary File
domain.local Primary AD-Legacy Update
Polecenie zostało wykonane pomylnie.
C:\Users\ad-kurzeja>dnscmd ad02 /EnumZones
Lista wyliczonych stref:
Liczba stref = 21
Nazwa strefy Typ Magazyn Właciwoci
. Cache AD-Legacy
10.1.10.in-addr.arpa Primary AD-Legacy Secure Rev
jakasdomena Secondary File
domain.local Primary AD-Legacy Update
Polecenie zostało wykonane pomylnie.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Wnioski : na ad03 brak kopii strefy jakasdomena !!
C:\Users\ad-kurzeja>dnscmd ad1 /ZoneInfo jakasdomena
Wynik kwerendy strefy:
Informacje o strefie:
Wskanik = 003585A8
Nazwa strefy = jakasdomena
Typ strefy = 1
Zamknięcie = 0
Wstrzymanie = 0
Aktualizacja = 0
Integracja z usł. domen. = 0
Strefa tylko do odczytu = 0
Plik danych = jakasdomena.dns
Stosowanie usługi WINS = 0
Stosowanie pamięci Nbstat = 0
Przedawnienie = 0
Interwał odwieżania = 168
Brak odwieżania = 168
Oczyszczanie dostępne = 0
Strefy nadrzędne stref Pusta tablica adresów IP.
Serwery pomocnicze strefy Pusta tablica adresów IP.
Bezpieczne sekundy = 1
Polecenie zostało wykonane pomylnie.
niedziela, 21 grudnia 2008
usuwanie force kontrolera domeny
Procedura usuwania nieistniejącego ( uległ awarii) kontrolera który pełnił role FSMO wygląda tak:
ntdsutil - wchodzimy do zarzšdzania rolami
Roles - zarzšdzanie rolami kontrolerów domeny
------
najpierw podłanczamy sie do sprawnego kontrolera domeny
Connections
Connect to domain domain.local
quit
------
Wybieramy cel operacji i podłanczamy sie do domeny, serwera itd
fsmo maintenance: Select operation target
select operation target: List Domains
Domen odnalezionych: 1
0 - DC=domain,DC=local
select operation target: select domain 0
Listujemy sit-y i podłanczamy sie pod domyslnego
select operation target: List sites
Lokacji odnalezionych: 1
0 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain ,DC=local
select operation target: select site 0
select operation target: List naming contexts
Odnalezionych kontekstów nazewnictwa: 5
0 - CN=Configuration,DC=domain,DC=local
1 - CN=Schema,CN=Configuration,DC=domain,DC=local
2 - DC=domain,DC=local
3 - DC=DomainDnsZones,DC=domain,DC=local
4 - DC=ForestDnsZones,DC=domain,DC=local
select operation target: List servers for domain in site
Serwerów odnalezionych: 4
0 - CN=XP1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
1 - CN=XP2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
2 - CN=AD01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
3 - CN=AD02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
select operation target: select server 3
Lokacja - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
Domena - DC=domain,DC=local
Serwer - CN=AD02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
Obiekt agenta DSA - CN=NTDS Settings,CN=AD02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
Nazwa hosta DNS - AD02.domain.local
Obiekt komputera - CN=AD02,OU=Domain Controllers,DC=domain,DC=local
Brak bieżšcego kontekstu nazewnictwa
quit
------------
Wychodzimy do zarzadzania rolami FSMO i robimy size dla wszystkich ról
fsmo maintenance: Seize schema master
Próba dokonania bezpiecznego transferu schema FSMO przed przejmowaniem.
ldap_modify_sW błšd 0x34(52 (Niedostępny).
Rozszerzonym komunikatem o błędzie Ldap jest 000020AF: SvcErr: DSID-03210380, pr
oblem 5002 (UNAVAILABLE), data 1722
Zwróconym błędem systemu Win32 jest 0x20af(Żšdana operacja FSMO nie powiodła się
. Nie można połšczyć się z bieżšcym posiadaczem FSMO.)
)
fsmo maintenance: Seize RID master
Próba dokonania bezpiecznego transferu RID FSMO przed przejmowaniem.
ldap_modify_sW błšd 0x34(52 (Niedostępny).
Rozszerzonym komunikatem o błędzie Ldap jest 000020AF: SvcErr: DSID-03210B34, pr
oblem 5002 (UNAVAILABLE), data 1722
Zwróconym błędem systemu Win32 jest 0x20af(Żšdana operacja FSMO nie powiodła się
. Nie można połšczyć się z bieżšcym posiadaczem FSMO.)
)
fsmo maintenance: size pdc
Błšd podczas analizowania danych wejciowych - nieprawidłowa składnia.
fsmo maintenance: Seize PDC
Próba dokonania bezpiecznego transferu PDC FSMO przed przejmowaniem.
ldap_modify_sW błšd 0x34(52 (Niedostępny).
Rozszerzonym komunikatem o błędzie Ldap jest 000020AF: SvcErr: DSID-03210575, pr
oblem 5002 (UNAVAILABLE), data 1722
fsmo maintenance: Seize naming master
Próba dokonania bezpiecznego transferu domain naming FSMO przed przejmowaniem.
ldap_modify_sW błšd 0x34(52 (Niedostępny).
Rozszerzonym komunikatem o błędzie Ldap jest 000020AF: SvcErr: DSID-03210380, pr
oblem 5002 (UNAVAILABLE), data 1722
Zwróconym błędem systemu Win32 jest 0x20af(Żšdana operacja FSMO nie powiodła się
. Nie można połšczyć się z bieżšcym posiadaczem FSMO.)
)
Wyłanczamy wykaz globalny na serwerze na którym chcemy przenieć wzorzec infrastruktury
fsmo maintenance: Seize infrastructure master
Próba dokonania bezpiecznego transferu infrastructure FSMO przed przejmowaniem.
ldap_modify_sW błšd 0x34(52 (Niedostępny).
Rozszerzonym komunikatem o błędzie Ldap jest 000020AF: SvcErr: DSID-03210380, pr
oblem 5002 (UNAVAILABLE), data 1722
Zwróconym błędem systemu Win32 jest 0x20af(Żšdana operacja FSMO nie powiodła się
. Nie można połšczyć się z bieżšcym posiadaczem FSMO.)
)
Etap II - usuniecie uszkodzonego kontrolera domeny
C:\Windows\system32\ntdsutil.exe: Metadata cleanup
metadata cleanup:
podłanczamy sie do sprawnego kontrolera
metadata cleanup: connections
Podłšczono do \\AD02.domain.local przy użyciu powiadczeń zalogowanego lokalnie użytk
ownika.
server connections: connect to server ad02
Trwa rozłšczanie z \\AD02.domain.local...
Trwa powišzywanie z ad02 ...
Podłšczono do ad02 przy użyciu powiadczeń zalogowanego lokalnie użytkownika.
server connections:
quit
------
metadata cleanup: Select operation target
select operation target:
-------
select operation target: list domains
Domen odnalezionych: 1
0 - DC=domain,DC=local
select operation target: select domain 0
Brak bieżšcej lokacji
Domena - DC=domain,DC=local
Brak bieżšcego serwera
Brak bieżšcego kontekstu nazewnictwa
-------
select operation target: list sites
Lokacji odnalezionych: 1
0 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
select operation target: select site 0
Lokacja - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
Domena - DC=domain,DC=local
Brak bieżšcego serwera
Brak bieżšcego kontekstu nazewnictwa
select operation target:
--------
select operation target: list servers in site
Serwerów odnalezionych: 4
0 - CN=XP1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain
,DC=local
1 - CN=XP2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain
,DC=local
2 - CN=AD01(uszkodzony),CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x
p,DC=local
3 - CN=AD02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=x
p,DC=local
select operation target: select server 2
Lokacja - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
Domena - DC=domain,DC=local
Serwer - CN=AD01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration
,DC=domain,DC=local
Obiekt agenta DSA - CN=NTDS Settings,CN=AD01,CN=Servers,CN=Default-First
-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
Nazwa hosta DNS - AD01.domain.local
Obiekt komputera - CN=AD01,OU=Domain Controllers,DC=domain,DC=local
Brak bieżšcego kontekstu nazewnictwa
select operation target:
--------
usuwamy uszkodzony server
--------
select operation target: quit
metadata cleanup: remove selected server
Transferowanie/przejmowanie ról FSMO z wybranego serwera.
Usuwanie metadanych FRS dla wybranego serwera.
Wyszukiwanie elementów członkowskich FRS w "CN=AD01,OU=Domain Controllers,DC=domain,
DC=local".
Usuwanie elementów członkowskich FRS "CN=AD01,CN=Domain System Volume (SYSVOL sh
are),CN=File Replication Service,CN=System,DC=domain,DC=local".
Usuwanie poddrzewa w "CN=AD01,CN=Domain System Volume (SYSVOL share),CN=File Rep
lication Service,CN=System,DC=domain,DC=local".
Usuwanie poddrzewa w "CN=AD01,OU=Domain Controllers,DC=domain,DC=local".
Próba usunięcia ustawienia FRS na serwerze CN=AD01,CN=Servers,CN=Default-First-S
ite-Name,CN=Sites,CN=Configuration,DC=domain,DC=local nie powiodła się z powodu
"Nie można odnaleć elementu."; czyszczenie metadanych jest kontynuowane.
"CN=AD01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,D
C=skok" usunięto z serwera "ad02"
metadata cleanup:
-----
usuwamy wpisy w DNS dla każdej strefy wskazujšcej na inne ( usunięte serwery nazw )
wtorek, 9 grudnia 2008
analiza disconectów na Citrix presentation server
Po rozłączeniu klient próbuje nawiązac ponownie połączenie z serwerem.
W właściwościach farmy do ustawienia:
-Session Reliability - umożliwia powrót do zerwanej sesji w skonifgurowanym czasie.
pełny opis znajduje się tu: http://support.citrix.com/article/CTX104147
Common Gateway Protocol - wykorzystywany w funkcji Session Reliability wykorzystuje domyślnie port 2598 protokołu UDP. Musimy przepuścić łaczność między serwerami terminali a klientami systemu na firewallu.
- Keep-alive - czas przez który system podtrzymuje aktualiną sesje i moża sie do niej podłaczyc
Narzędzie do analizy aktywnych sesji :SMCConsole.
opis opcji ICA KeepAlive
http://support.citrix.com/article/CTX107659
http://support.citrix.com/article/CTX708444
Rozwiązanie:
- dla każdego servera ustawiamy parametr Keep-alive na 60s - opcja użyj ustawień dla całej farmy nie działa prawidłowo.
- w własciwościach "aplikacji" opublikowanego desktopu - Advanced>Limits > Allow only one instance of application for each user - zaznaczycz - czyli blokujemy aplikacje tylko do jednej instancji. Wtedy mechanizm load balancingu nie "kombinuje" chcac umieścić usera na innym "szybszym" serwerze tylko wrzuca go spowrotem na sesję disconect.
- W własciwościach farmy Presentation Server > Session reablity odchaczamy allow users to view sessions during broken connection - czyli wyłanczamy session reliability
wtorek, 11 listopada 2008
KDE - nie działające klawisze Alt+Tab
from: /home/
Walk Through Windows=default(Alt+Tab);Win+Tab <--this FAILS
Walk Through Windows (Reverse)=default(Alt+Shift+Tab) <--this WORKS
oraz usunąć wpis z :
~/.kde/share/config/kwinrc
AltTabStyle=CDE
niedziela, 26 października 2008
skrypty w windows
http://www.autoitscript.com/autoit3/docs/
Some features of scripting-languages "AutoHotKey" (http://www.autohotkey.com/) or "AutoIt" (http://www.autoitscript.com/):
- Simulate keystrokes.
- Simulate mouse movements and clicks.
- Move, resize, rename or manipulate windows.
- Make any window transparent, always-on-top, or alter its shape.
- Interact directly with "controls" on a window (set/get text from edit controls, check boxes and radio buttons, select items in drop-down lists, etc.)
- Create complex user interfaces (GUIs).
- Monitor your system. For example, close unwanted windows the moment they appear.
- Retrieve and change the clipboard's contents, including file names copied from a File-Manager window.
- Display dialog boxes, tooltips, balloon tips, and popup menus to interact with the user.
- Automate game actions by detecting images and pixel colors.
Some helpers in other forums told me, the following tools might be solutions for such tasks under Linux:
http://www.tcl.tk/
http://sweb.cz/tripie/utils/wmctrl/
http://killerbob.ca/howto/inetkeys.html
http://hocwp.free.fr/xbindkeys/xbindkeys.html
http://wiki.tcl.tk/android
http://expect.nist.gov/
http://home.sch.bme.hu/~keresztg/xmacro/
http://www.burtonini.com/blog/computers/devilspie
http://www.fvwm.org/documentation/ma...FvwmScript.php
http://regina-rexx.sourceforge.net/
środa, 22 października 2008
problem z macierzą EMC^2 CX310
Description:Storage Array Faulted Enclosure SPE : Faulted Enclosure SPE SPS A : Testing Bus 0 Enclosure 0 Power A : Faulted
jest to wina braku połączenia danego SP z baterią - należy odłączyć załaczyć kabelek między SP a baterią ( z jednej strony miniCOM a z drugiej wtyczka telefoniczna. )
wtorek, 21 października 2008
Przenoszenie lokalizacji folderów profilu( shell folders )
Here lies my experience moving my entire User Profile folder structure, including Default, Public, and any local users.
In my search for a solution, the only two easy ways I found to move the user profile directory locations from the system drive is to
- Set the User Profile folder during setup using an unattended install file.
- Move the individual folders inside your user profile, which can be done using explorer (which will update the registry keys HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders and HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders).
However, this was not good enough for me, I wanted my actual user profile folder to be moved to a seperate partition/volume, including registry settings. I discovered that it is not actually that hard, provided you’re comfortable with mass replacing registry keys and values.
Here is how I moved my user profile location. Please note that I wanted all of the profiles moved, included Public and Default, so some of these steps can be skipped if you do not want that:
- Make sure you have a complete backup of your system!
- Copy the original Default Profile directory to the new location (e.g. from C:\Users\Default to D:\Users\Default).
- Copy the original Public Profile directory to the new location (e.g. from C:\Users\Public to D:\Users\Public).
- Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList.
- Change the value of the Default key to the new user profile location (e.g. D:\Users\Default).
- Change the value of the Public key to the new user profile location (e.g. D:\Users\Public).
- Change the value of the ProfilesDirectory to the new user profile location (e.g. D:\Users).
- At this point, you need to restart and log back in as a different user that has never logged in before and therefore does not have a profile created. In my case, the Administrator user had never logged in before so I enabled it so that Administrator could log in and used that. You can enable Administrator login by loading Computer Management and then go to User Accounts, edit the properties for Administrator, and then uncheck Disable Login.
- After logging in for the first time with the new user account, you will see “Creating Desktop” and other things like that while Windows is creating your profile. Note that the new profile should be created in the new location.
- After logging in, try to close as many applications as possible. This will prevent most files from being locked so that you cannot copy them.
- Copy the entire original user profiles folder from the original location to the new location (e.g. C:\Users\* to D:\Users\). (See next step after copy starts).
- There are a few things to note during this copy. There were thousands of .TMP files that were locked and would not copy. I just skipped these files. I held down Alt-S so that I could see all of the skipped files and make sure that there were only .TMP files being skipped. Yes, this took a little while, but at least I was confident that I got all of my files copied. This process could probably be made easier using the command prompt or powershell.
- If, in your case, there are some files that will not copy, you can run procexp.exe, which is file provided by sysinternals. Then do a Find Handle and search for part of the filename. procexp will tell you which programs are locking the file. As long as you closed as many programs as you could, though, this should not happen.
- Find and download a program that will do a Search & Replace on the registry. I will not suggest one because I did not find one single program that worked perfectly. I ended up downloading a few different freeware applications and using all of them.
- Using the Registry Search & Replace program, do a search for the original user profile folder and replace it with the new user profile folder (e.g. search for “C:\Users” and replace with “D:\Users”. Note that some of the applications I used would only change values and not key names. However, the keys that needed to be chagned were all related to MuiCache. I do not know if these actually need to be updated. I did just to make sure.
- Log out. Log back in with the same user. Repeat step 14 until there is nothing left to replace. The reason for this step is that on logout, some programs seem to update the registry using the old user profile path.
- Run regedit.exe and do a search for the original user profile path and make sure it does not exist. The reason for this step is because (as noted in step 13), I did not trust any of the Registry Search & Replace programs I used. I ended up needing to update about a dozen of the keys and values manually, since the search & replace missed them.
- So that you can easily find programs that do not use the registry and hard-coded profile paths, rename your original profile folder (e.g. rename C:\Users to C:\~Users).
- Log out. Log back in as your usual user. Everything should be working correctly except for programs that use a “hardcoded” user profile location.
- There are two easy methods that can be used to find programs that use a “hardcoded” profile location and are still looking for the original user profile path. You can use the procexp.exe trick mentioned above and search for handles in the original profile location. You can also monitor the oringal profile location to see if any new folders or files were created. For example, in my case, FolderShare created some folders and files in the directory C:\Users\MyUsername\AppData\Local\FolderShare\. So, I updated the FolderShare settings to point to the different path and then deleted the C:\Users directory (note that C:\~Users still existed as a backup).
- Since you are now confident that all of your data has been moved (right??????), you can deleted the backup of the original user profile location (e.g. C:\~Users).
This procedure worked flawlessly for me. Everything user-related is now on a completely different volume, and I can sleep a little better at night!
piątek, 17 października 2008
mysql Error: 1194 (Table 'xxx' is marked as crashed and should be repaired)
- Musimy zalogować sie do phpMyadmina
- Wybieramy bazę danych na której aplikacja pracuje
- zahaczamy checkboxa z nazwą tabeli w której jest problem ( xxx)
- Skrolujemy interfejs phpmyadmina do samego dołu i z selectboxa wybieramy "Repair"
piątek, 10 października 2008
Problem z pobieraniem aktualizacji przez VMware
1) figure out which port your Virtual Center is using: Administration-->VirtualCenter Management Server Configuration-->Web Service (Note the HTTP port)
2) log into the esx server in question
3) esxcfg-firewall -o 8080,tcp,out,UpdateManager (where 8080 can be changed to the port of your Web Service port)
środa, 8 października 2008
chm2pdf w linuxie
I’ve tried a lot of ways to do this thing in Linux (Ubuntu) and finally I found the easiest one to use.
Called simply as ‘chm2pdf‘, this is a small script written in Python and it uses a few dependencies you might have to install first.
Now to install it, simply follow this guide:
1. Install dependencies by running in the Terminal:
sudo apt-get install htmldoc libchm-bin python-chm
2. Download chm2pdf by clicking this.
3. Now extract the downloaded file.
4. Open your Terminal and browse to the folder you extracted and run:
sudo python setup.py install
5. You’re done!
Now to use it is very simple:
In Terminal, type:chm2pdf -book filename.chm
(Where filename is obviously your required file to be converted.)
And surprise surprise, a PDF copy will be waiting for you just next to your CHM file!
wtorek, 23 września 2008
Install EMC Navisphere Agent on VMware ESX Server
The Host Agent can :
- Retrieve information from the storage system automatically at startup or when requested by Manager or CLI.
- Send drive mapping information to the attached CLARiiON® storage systems.
- Monitor storage-system events and can notify personnel by email or pager when any designated event occurs.
- Retrieve LUN World Wide Name (WWN) and capacity information from Symmetrix® storage systems.
- Download Navisphere Host Agent / CLI from EMC Powerlink, latest version as of this writing is 6.22
- Extract and run ./linux/ESX_installer.sh to open required ports
- Install or upgrade the RPM ( in this example I'm upgrading)
- Start or restart the service:
- go to Navisphere Control Center and update the host and make sure it reflect the same agent version
# # ./ESX_install.sh naviagentcli
##############################################
ESX_install.sh ver 1.1
The following ports need to be enabled for the software to operate properly
port -> 6389,tcp,in,NaviCLI
port -> 6389,tcp,out,NaviCLI
port -> 6390,tcp,in,NaviCLI
port -> 6391,tcp,in,NaviCLI
port -> 6392,tcp,in,NaviCLI
port -> 443,tcp,out,NaviCLI
port -> 2163,tcp,out,NaviCLI
Do you want to enable ? [yes]
Enabling ports now! # rpm -Uhv naviagentcli-6.22.20.0.94-1.noarch.rpm
Preparing... ########################################### [100%]
1:naviagentcli ########################################### [100%]
Shutting down Naviagent: [ OK ]# service naviagent start
Starting Navisphere agent: [ OK ]poniedziałek, 22 września 2008
wydruk prn-a na drukarkę domyślną
IF NOT EXIST c:\print.prn (
echo Brak dokumentu
pause
goto konniec
)
FOR /F "TOKENS=2 DELIMS=Z" %%A IN ('reg query "HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v device') DO set DD=%%A
echo %DD%
pause
FOR /F "TOKENS=1 DELIMS=," %%D IN ("%DD%") DO copy c:\print.prn %%D
:koniec
poniedziałek, 15 września 2008
DRAC/MC - problem z KVMem na dell-PE
- Po zalogowanu sie do modułu web drac nie można korzystac z KVMa. System zgłasza iż do KVMa jest już podłączony root.
należy zrestartować moduł KVMa z poziomu konsoli DRAC/MC (telnet) wydając komende "racadm chassisaction -m KVM powercycle"
piątek, 22 sierpnia 2008
Rozwiązywanie problemów ze stosowaniem zasad grupy
Rozwiązywanie problemów ze stosowaniem zasad grupy:
http://support.microsoft.com/kb/250842221833 (http://support.microsoft.com/kb/221833/) Jak włączyć rejestrowanie debugowania środowiska użytkownika w detalicznych kompilacjach systemu Windows
debugowanie informacji o przetwarzaniu zasad RSOP.MSC --
I would be thankful also if you can run RSOP.MSC right click on the user configuration, and click on Error Information.
poniedziałek, 11 sierpnia 2008
Printing tweaks - wyłączenie powiadomień o wydrukach
+++++++++++++++++++++++++++++++++++
CLASS MACHINE
CLASS USER
CATEGORY "Custom Printers"
POLICY "Network Printer Notification Balloon"
#if version >= 4
SUPPORTED !!SUPPORTED_WXPSP1
#endif
#if version >= 3
EXPLAIN !!EXPLAIN1
#endif
KEYNAME Printers\Settings
VALUENAME EnableBalloonNotificationsRemote
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY ;Network Printer Notification Balloon
POLICY "Local Printer Notification Balloon"
#if version >= 4
SUPPORTED !!SUPPORTED_WXPSP1
#endif
#if version >= 3
EXPLAIN !!EXPLAIN2
#endif
KEYNAME Printers\Settings
VALUENAME EnableBalloonNotificationsLocal
VALUEON NUMERIC 1
VALUEOFF NUMERIC 0
END POLICY ;Local Printer Notification Balloon
END CATEGORY ;Custom Printers
[Strings]
SUPPORTED_WXPSP1="At least Microsoft Windows XP Professional with SP1 or Windows Server 2003 family"
EXPLAIN1 = "Wylaczenie powiadomien dla drukarek sieciowych"
EXPLAIN2 = "Wylaczenie powiadomien dla drukarek lokalnych"
+++++++++++++++++++++++++++++++++++
wtorek, 5 sierpnia 2008
Instalacja GTKsee z źródeł
- Pobieramy źródła z strony producenta oprogramowania. (http://prdownload.berlios.de/gtksee/gtksee-0.5.6.tar.gz)
- przenosimy źródła do katalogu mv gtksee-0.5.6.tar.gz /usr/src/
- Rozpakowujemy pliki tar -xzvf gtksee-0.5.6.tar.gz
- Konfigurujemy ./configure
Jeżeli podczas tego kroku wyskoczy błąd informujący o braku komendy gtk-config to należy doinstalować odpowiednie pakiety : apt-get install libglib1.2-dev libgtk1.2-dev - make
- make install
- I gotowe, możemy cieszyć się starym poczciwym gtksee.
niedziela, 3 sierpnia 2008
instalacja JRE w debianie
Aby zainstalować środowisko należy wydac polecenie:
apt-get install sun-java5-jre sun-java5-plugin sun-java5-fonts sun-java5-bin
aktualizacja flashplayera na debianie
- najpierw usuwamy starą wersję flashplayera wg opisu : go to /usr/share/mozilla/plugins and delete flashplayer.xpt and libflashplayer.so files. Delete those files from your own mozzilla dir. ~/.mozzilla
- ściągamy rpm-a z :http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash
- przekształcamy rpm-a za pomocą komendy alien - "alien flash-plugin-9.0.124.0-release.i386.rpm"
- instalujemy flasha dpkg -i - "dpkg -i flash-plugin_9.0.124.0-1_i386.deb"
- uruchamiamy program setup - "saxon:/usr/lib/flash-plugin# sh setup"
czwartek, 31 lipca 2008
esx. utracone połączenie z siecią.
- Problem z serwerem esx - serwer w konsoli zgłasza komunikat "Node is isolated from network. either repair network or chage agent startup using -noiso"
Problem częściowo opisany na forum vmware ( http://communities.vmware.com/message/572330;jsessionid=3F9A50FD9C37F30622DF7B09417D42E4)
Rozwiązanie
Inne problemy z forum jakie mieli ludzie z tym samym komunikatem :
- Połączyłem się z konsolą KVM https://XX.XX.XX
- Wyedytowałem plik /etc/init.d/VMWAREAAM51_vmware, w sekcji start odszukałem ft_startup i dodałem opcję -nosio
- restart serwera esx, komunikat zniknął, sieci dalej brak
- usunąłem parametr z plik /etc/init.d/VMWAREAAM51_vmware
- esxcfg-vswitch - l -- wyświetla liste switchy i przypisane do nich karty sieciowe ( powiny byc uplinki ) a ich nie było
- esxcfg-vswitch -L vmnic1 vSwitch0 --przypisałem karte vmnic1 do vSwitch0 - siec ruszyła!
I have a host that is giving an error in the console that basically states "Host is isolated from network. either repair network or chage agent startup using -noiso"
How would I do this?
--------------------------
That usually would indicate that you don't have connectivity to your default gateway or that you don't have a valid service console interface. Either one of those ring true?
---------------------------
Ah, okay. So you want it to be isolated? Okay. Little more info is needed here. What are the circumstances that got you where you are? Is this host off by itself on an isolated network? Is it part of a cluster? Are you trying to run HA?
I think the agent it's referring to is probably the Legato HA agent which really shouldn't be run in isolated mode unless you have a really good reason to do so, but I might be wrong - thus the questions.
----------------------------
No. I DO NOT want it that way but the error I am getting from the console says that it IS. I want to change it using the -noiso option that the error message refers to but I don't know how.
What got me here? good question. all of the suddden I was unable to power on a VM on this host. kept getting an error through VC that "the host could not be contacted." After that VC showed it as "Not Responding"
I tried to putty to the console and couldn't so iLO'd to it and looked at the console. that's when I started noticing the error.
----------------------------
Gotcha. Okay. I'm going to make the assumption that this host was part of a cluster in which HA was enabled (which makes the error you got make more sense but isn't critical to the problem). If you can't PuTTY into the box and lost VC connectivity, that's your larger problem. The error your seeing there is probably more of an effect/symptom than anything else. So even if we did figure out where that switch goes (probably in the LegatoAAM startup script somewhere), it wouldn't make you feel any better because the host would probably still be unavailable. You're probably going to want to start looking at generalized network issues (of which there could be a whole bunch). Anything from a bad cable, NIC, switch port configuration, unavailable default gateway (probably not that if the other hosts are working), or whatever else can go wrong with your network. Alternatively you could also have something wrong with your ESX host's service console configuration, but I tend to doubt that with the little information I have (assuming no one changed the SC configuration recently).
----------------------------
Never found an answer to the location of the "-noiso" option that my error was pointing to so I had decided to simply delete and rebuild my vSwitch.
Since vSwitch0 already existed, I had to delete it 1st. Got an error that the Service Console port group was still in use. I ran "esxcfg-vswitch" to get the option to delete it and saw the "-r" option. (Restore all virtual switches from configuration file.) So I ran "esxcfg-vswitch -r" and my connectivity was restored.
I guess this was the way to "repair" my network as indicated in the error I was receiving. I would still like to know the location and use of the mysterious "-noiso" option. If anyone can find the documentation on it i will give them credit for it.
-----------------------------
I had this same problem it started after I tried to add and new NIC to the vSwitch0 and VCC crashed when doing it. Had to run "esxcfg-vswitch -U vmnic1 vSwitch0" that gave me "Node no longer ISOLATED, will RESTART" and the network started to work again after.
-------------------------------
The -noiso is an option for the /opt/LGTOaam512/bin/ft_startup script. The ftp_startup script is called from the /etc/init.d/LGTOAAM51_vmware script. VMware's HA is a Legato product. Legato has documentation which in this case explains the -noiso option. The documentation is available at:
http://web1.legato.com/cgi-bin/catalog?sf=Releases&level=29-1#29-1
If you are running ESX 3.0.1 you are using Legato Automated Availability Manager 5.1.2.
środa, 30 lipca 2008
optymalizacja OpenOffice
Tam ustawiamy zapamiętywanie funkcji "Cofnij" na 30-40 ruchów, a potem zwiększamy Pamięć podręczną na grafikę na 60-100 MB (w zależności od tego jaki RAM - ja mam 512 RAM i ustawiłem na 80).
Teraz OO ładuje mi się ok. 5 sekund, co jest dużym postępem i w ogóle cały program działa szybciej
Jeszcze w sekcji Java można odznaczyć "Używaj środowiska Java".
Parametry uruchomieniowe dla OO:
O/S = Win XP, Svc Pk2 (Info contained in this thread should be usable for other versions of Windows, however).
OOo = ver. 2.0.4 (some info for earlier versions, however, is also included).
ORIGINAL QUESTION:
First of all, is it possible to start OOo from a command line (or from shortcut containing command line) and open the "Templates and Documents - New Document" dialog box upon startup, without using the Quickstarter; and, secondly, what are the other command line switches and commands that duplicate the Quickstarter startup and launch features? For various configuration reasons, it may not be practicable to run the Quickstarter, Windows, Task Bar, tray item.
--------------------------------
--------------------------------
ANSWER: Yes, this is not only possible but also rather easy to do if you know where to look in order to obtain your necessary commands and switches. For inquirers seeking this solution, see Help responses below by responders to this Help request and by original poster of this request. Help responses provide three common sense methods, all very good, to solve this problem with respect to the ways in which the issue might present itself in the workplace. Also contains a summary of the other command line startup parameters and switches that duplicate, on a discrete basis, the other launch behaviors of the Quickstarter (none found, however, for the Writer/XML option).
SUMMARY OF INFORMATION CONTAINED IN THIS POST and THREAD:
SUMMARY ("Known" to this poster as of this particular ver. 2.04 upgrade) derived from answers posted by others in this thread.:
A summary of the OOo command line switches for ver. 2.0.4 (applies, I think, to all versions of 2.0.x) that addresses directly the narrow, work startup, question posed in this inquiry, is as follows:
A. COMMAND LINE SWITCHES and CERTAIN "UNO COMMANDS" that can serve as functional equivalents of command line switches, all duplicative of individual features in Quickstarter if it is desired NOT to use Quickstarter in your start-up configuration.
B. Some links and references to other threads and sources for obtaining command line switches or "parameters" for your ready reference.
-------------------------
A. COMMAND LINE SWITCHES & CERTAIN UNO "SWITCH EQUIVALENTS:" Under the assumption that a user or an IT person may need to duplicate some, but may not want all, of the Quickstarter features, or, alternatively, may not want the Quickstarter up and running at all times because of overheead usage, or other, reasons, the applicable command line parameters, for the purpose of this thread, are as follows:
Note: all examples, except where expressly indicated to the contrary, include use of the "-nologo" switch under the further assumption that you do not want the app in question to first load a splash screen while you are waiting for Windows to display the app on your monitor screen. If you want to see the splash screen, omit the "-nologo" switch from your command line syntax.
Also Note: The examples and switches contained in this Summary also assume your OOo executable file was installed in a typical Windows installation at "C:\Program Files\OpenOffice.org 2.0\program". That means that, if you are using a shortcut to implement the startup option, your "Start In:" parameter in your shortcut properties dialog box will also be "C:\Program Files\OpenOffice.org 2.0\program". If you have installed OOo to a different location on your hard drive, then you will have to make the appropriate alterations to the paths in the examples contained herein.
Finally, if you are using Windows, note that, although this post concerns "command lines" and "command line parameters," or "switches," you do NOT need to use the Windows Console (also referred to as the "DOS Window") in order to use the start-up configurations set out in this post. So-called "command lines", TOGETHER with accompanying switch parameters, can be inserted into shortcut command lines as well. The shortcuts you make and edit to include the start-up command lines and switch parameters can then either be copied to the desktop, or to any folder on the hard drive, OR to the START menu (BOTH in XP mode or in Classic mode displays) and used to launch the OOo Suite apps in accord with the command lines and switches set out in this post.
Thus, for example, if you want simply to make a shortcut on a User's Desktop for the User to double-click, simply make a shortcut to the "soffice.exe" file itself, open the shortcut you have made (right-click the shortcut icon, select "Properties," and add the appropriate switch or switches to the command line you see in the shortcut in the edit box you see for COMMAND LINE or "Target" you see under the shortcut tab in the shortcut dialog box) and then employ the shortcut just like you would any other shortcut -- i.e., use it as a clickable icon OR copy it/install it on the Windows START menu on the Taskbar. REMEMBER, when editing a command line in the shortcut properties dialog box that you must insert a SPACE between the ending quote mark in a long filename path and the switch you want to use; if you fail to include the trailing space after the closing quote, Windows will NOT be able to execute the command at all, or, if it does, you will simply receive an error message. The hyphen in front of each switch command MUST be preceded by a space so the O/S will know what to do with the command (i.e., that the item is a switch that modifies the behavior of the simple ".EXE" file being executed. There is NO space between the hyphen character and the first character in the switch command itself but there IS a space between EACH switch command (inclusive of the hyphen) and whatever precedes it in the command line syntax.
- LAUNCH MAIN CONSOLE W/ NO DOCUMENT:
- LAUNCH THE FORMS AND TEMPLATES DIALOG BOX: .uno:NewDoc -nologo
- Reminder on UNO syntax: The UNO switches REQUIRE that you place a period (sometimes referred to as a "dot") in front of the characters, "uno," with NO leading space, followed immediiately by a colon (":") with NO trailing space. In addition, the UNO command must be delimited in its entirety -- on either side of the command - by a space to seperate it from other items in the command line, such as the PATH and any other command line switches, such as "-nologo" or a document path and name, or whatever.
- LAUNCH WRITER WITH BLANK DOC LOADED: -writer -nologo
- LAUNCH WRITER WITH BLANK HTML DOC LOADED: -web -nologo
- LAUNCH WRITER WITH BLANK XML DOC LOADED: NO SWITCH KNOWN AT THE PRESENT TIME BY THIS POSTER. IF YOU KNOW A COMMAND LINE SWITCH OR AN UNO COMMAND LINE SWITCH EQUIVALENT THAT WILL ACCOMPLISH THIS STARTUP CONFIG, PLEASE POST IT BELOW.
- LAUNCH PRESENTATION (Impress) WITH "Presentation Wizard" LOADED: -impress -nologo
- LAUNCH DRAW WITH BLANK DRAW DOC LOADED: -draw -nologo
- LAUNCH DATA BASE WITH "Data Base Wizard" LOADED: -base -nologo
- LAUNCH SPREADSHEET APP (CALC) WITH BLANK SPREADSHEET: -calc -nologo
- LAUNCH MATH APP: -math -nologo
- LAUNCH THE MENU TRAY TO TASKBAR: quickstart.exe" -nologo
- You can also use the names of the individual ".EXE" files, where applicable, in conjunction with the switches.
Example: "C:\Program Files\OpenOffice.org 2.0\program\soffice.exe"
NOTE: You cannot use any switch at all with this command line option if you simply want to launch the OOo Console with no blank document loaded at all (i.e., the bare OOo Console app interface but with no document). If you so much as try to use the "-nologo" switch, as of the date of this writing, the launch will default your launch to Writer + a blank document, apparently under the assumption that what you want to do is to type a text document. This information was incorrectly stated in my first post of this switch. If all you want to do is launch the app as a blank app, with no document, then you are stuck with watching the OOo logo on your screen while the app is launching. If any reader of this post knows how to launch the OOo main app in blank Console mode, without a logo's displaying during the launch, either with a switch of which I am unaware, or, perhaps, using one of the UNO commands, please post it below; I will check back in a month or so to see if this has been done and make whatever corrections need to be made in this part of of this thread, Thanks.
Example:
"C:\Program Files\OpenOffice.org 2.0\program\soffice.exe" .uno:NewDoc -nologo
(Gives users access to all documents and templates in same manner as this launch feature does when activated from Quickstarter.)
SPECIAL NOTE ON THIS UNO SWITCH:
The Forms and Templates interface allows any user to reach immediately (1) a new document; (b) a template, or (c) any work-in-progress document, at any location on the user's hard drive or over the network, which is configurable in Options in OOo; (c) in whatever suite app or tool is necessary to get his or her job done.
Everything is thus "accessable" to "everyone" through this dialog box interface on a flexible, docu-centric, "work basis." This all but obviates the need for a user to know any classic O/S indigenous skills at all. If the user knows how to use OOo, the user couldn't care less whether the O/S is Windows, Linux, or Mac. In other words, your graphics genius down the hall who works on a Mac does not need to know anything at all about Windows or Linux technicals in order to be fully integrated into the work flow (you can't get a graphics genius to work on anything other than a Mac, anyway, so don't even think about trying to offer him or her a Windows or Linux machine; it won't work. :-) )
So, we give every user here TWO (2) START menu options (shortcuts loaded into the START menu folder under "WORK"): (1) THIS UNO switch accessible interface and the "console/no document" option (if user needs to do some application configuring only). I fully expect, moreover, that some enterprising souls -- as folks become a bit more familiar with the macro language -- will write some macros in accord with the macro options set out in the responder posts below.
I have my fingers crossed; but, so far, this switch, and using only these two START menu items seems to be keeping the most users happy most of the time. I cannot, of course, speak for all users; but we have found the users do not care so much about choosing an app from Quickstarter and matching it to a document as they care about simply picking what item of work they need to do and then letting OOo and the Windows O/S worry about loading the necessary equipment to perform the task at hand.
Thus, although, you cannot "hurt anything" if you experiment around with the various UNO commands on your command lines, you can in fact end up with multiple instances of OOo items running in memory and no visible results on your screen. So, you need to check your Task Manager in Windows from time to time to see if there are any OOo instantiations (thread processes) that are running extraneously as a result of trying out a particular UNO command that didn't do what you wanted: just "END" the unwanted process(es) and carry on, there should be no harm done. If you crash your system, it's no big deal, the reboot will re-set your OOo threaded processes back to zero, and you can continue your hack on a clean slate.
See below for links to additional UNO commands that may prove useful for various and sundry startup config options.
Example: "C:\Program Files\OpenOffice.org 2.0\program\soffice.exe" -writer -nologo
Example: "C:\Program Files\OpenOffice.org 2.0\program\soffice.exe" -web -nologo
Example: "C:\Program Files\OpenOffice.org 2.0\program\soffice.exe" -impress -nologo
Example: "C:\Program Files\OpenOffice.org 2.0\program\soffice.exe" -draw -nologo
Example: "C:\Program Files\OpenOffice.org 2.0\program\soffice.exe" -base -nologo
Example: "C:\Program Files\OpenOffice.org 2.0\program\soffice.exe" -calc -nologo
Example: "C:\Program Files\OpenOffice.org 2.0\program\soffice.exe" -math -nologo
Example: "C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe" -nologo
Example: "C:\Program Files\OpenOffice.org 2.0\program\smath.exe" -nologo
Syntax:
You may have to experiment around a bit, depending upon the particular switch configuration you choose to use.
Note: Command line in the following form also apparently works, but not recommended:
"C:\Program Files\OpenOffice.org 2.0\program\smath.exe" -writer -nologo
B. LINKS TO OTHER RELEVANT THREADS & REFERENCES TO OTHER INFORMATION SOURCES:
(Somewhat repetative of this thread; contains some parameters not here posted but is also missing some of the ones here posted)
http://framework.openoffice.org/files/documents/25/1042/commands_11beta.html
Command Tables for Openoffice.org 2.x.x: (Same info as posted by SergeM for ver. 1.x.x but is for current version of OOo):
http://www.openoffice.org/files/documents/25/2570/commandsReference.html
[NB: not all UNO commands will necessarily be of assistance to you as substitutes for start-up switch type operations. Some UNO commands launch the suite app, some do not. If you see an UNO command that looks promising as a startup option, just try it to determine if it does what you want it to do. Also note that, in Windows, as to the UNO commands that do NOT work for you, the command you try may in fact launch an instantiation of soffice.exe into memory nevertheless; in those instances, you will have to go to Task Manager and end the process in order to recover the memory that is being used and to prevent a build-up in memory of instantiated copies of "soffice.exe".]
As of this writing, the full title, for search purposes, in the "Help" file for the suite, of the page containing the start-up parameters and switches (but not the UNO commands) is as follows:
"Starting the OpenOffice.org Software With Parameters"
"C:\Program Files\OpenOffice.org 2.0\program\soffice.exe" -h
This displays a dialog box of the command line, but not the UNO, switches. Note: this dialog box is HUGE and is non-resizable with your mouse; if you cannot fit this full dialog box into your monitor screen, check the suite Help file instead.
In other words, the structure is this: "
If the above material contains any errors, or if it should contain any typographical errors that lead to computer behavior errors, PLEASE call my attention to the mistake or typo in a post below so that the next time I check this post I can make a correction. Thanks.
Naturally, if anyone should locate, or become aware of, a command line switch or an UNO command, either or both, that will effect a launch of Writer with an XML blank document, all ready for creation and editing, PLEASE add that information to this thread below so that the information may be later posted in this "summary."
Nuncus
11/05/06
Thanks to the responders to the question posed in the original post inquiry.
Nuncus
11/01/06 follow-up edit by Nuncus.
11/19/06 follow-up edit by Nuncus to correct original error in switch configuration for starting up the Console interface with no document loaded.
--------------------------------
--------------------------------
So Far:
The Help files contain a list of command line parameters (switches), as does the help file in the executable; but there does not seem to be a switch to open directly to the templates dialog box. (There is also lacking in the parameters list a parameter for going directly into Writer as an XML editor or text creator.)
Reason Why:
I would like to set up a templates library for work, for docs on an "as needed" basis and just go directly into the Templates dialog box on launch without comitting the Quickstarter to RAM overhead. Plus, the Quickstart area in Windows XP tends to get pretty junky and cluttered if one employs all the quickstarter and quickstart buttons that seem to come with all the Windows apps these days.
Since much of my work involves producing original text inside a pre-configured template, on a letter type by letter type basis, it would be nice to be able to just jump into the correct template and take it from there -- in other words, just pick the actual document type I need, frome the templates list, on the front end of the task at hand.
I have the switches for all the actal apps such as Calc and Writer.
Request:
Does any user or Team member have the command line switch to launch directly the Templates dialog box? The XML function? Is there some macro command, perhaps, that can be employed on a command line to accomplish this?
Thanks,
Nuncus
--------
command line parameters command line switches parameters switches startup parameters startup switches start up start-up startup forms templates forms and templates
--------
poniedziałek, 28 lipca 2008
optymalizacja adobe acrobat
| optymalizacja adobe acrobat za pomoca skryptów bat. przygotowałem własny pakiet msi Installation Script for Adobe Reader 8.1 - Method 2 and 3 | | |
| Written by Joe Shonk | |
| Monday, 09 July 2007 | |
| Methods 2 and 3
Method 2 and 3 involves using the .msi package that has been extracted from the AdbeRdr810_en_US.exe distribution package. There are several advantages to doing this. First, the files are already extracted so it’s one less step the installer has to perform (Method 3 only). Second, you can use MSIEXEC switches and properties (This includes specifying the location of the log file). Third, you do not have to be in install mode for the installation to complete when installing on a Terminal Server. Install_Adobe_Reader_Method 2.cmd:
In order for the script in Method 3 to work, the AdbeRdr810_en_US.exe package needs to be extracted first. From a command prompt type:
Install_Adobe_Reader_Method_3.cmd:
|
środa, 23 lipca 2008
vmware best practice
First and foremost: this tuning list is my own experience and the experience of several users on the VMware forum. Your mileage may vary.
The goods:
- Virtual Infrastructure 3
- Windows 2003 Std (or Enterprise) Edition R2 (x86, not x64)
- Citrix Presentation Server 4.0 (yes, I know, the old one ;))
The tips:
- First this: it all depends on the applications used! Context switches is the key here...
- Use Windows 2003, not Windows 2000
- Don’t P2V your servers, but use clean templates
- Make sure the correct HAL (single or multi) is installed in the virtual machine. Otherwise, your vCPU will spike.
- Always assign 1vCPU. If necessary, add a 2nd vCPU. Do not use 4 vCPUs!
- Use 2 GB to start. Scale up to +-4 GB of vRAM if necessary
- Use 1 .vmdk for your system partition (C:\ or other remapped drive letter) and 1 separate .vmdk for your program files.
- Put the page file on the 2nd .vmdk
- Important: disconnect any .iso file in your virtual CD-Rom
- Use roaming profiles and cleanup your profiles at logoff
- Disable sound for your published apps
- Install the UPH service (download it here)
- User sessions: for me, 30 users on a VM is the sweet spot. Do not expect to get as many users on it as on a physical box!
- Scale out, not up. A major advantage of VM is to clone/NewSID/sysprep existing servers and put them into your existing Citrix farm. Just stop & disable your IMA service, clean up your RMLocalDB (if you use enterprise) and NewSid the thing. Refer to this support article for more info.
- Use dual core or quad core systems. This because ESX will have more CPU to schedule its vCPUs on.
- Don’t ever use a 2 vCPU Citrix virtual machine in a 2 pCPU physical machine!
- Do not install the memory ballooning driver while installing the VMware Tools
- Do not use a complete installation Vmware tools: there is an issue with roaming profiles and the shared folders component. See my previous article for more info.
- Disable COM ports, hyperthreading, visual effects & use speedscreen technology where possible.
- Use snapshots when installing applications or patching your servers (yes! With VMware you can do this!). In case of disaster, you can still revert to the original working server without using backups. Make sure all snapshots are removed ASAP when finished!
- Always check that there are no snapshot leftovers (f.e. the infamous _VCB-BACKUP_ when using VCB)
- Don’t forget you can use DRS rules to run your citrix servers on separate physical hosts.
- Check out this vmworld 2006 presentation
- And last but not least: do not forget to read ESX's (excellent) performance tuning white paper.
środa, 16 lipca 2008
astaro - problem z aktualizacjami.
| Miałem problem z aktualizacjami Rozwiązanie: Product Version: only Astaro Security Gateway 7.200 |
|
wtorek, 15 lipca 2008
Karta muzyczna als100
Jakis opis jest tu:
http://marines.jogger.pl/2007/05/12/avancelogic-als120-na-arch-linux-i-nie-tylko/
poniedziałek, 14 lipca 2008
HP Web Jetadmin
Oprogramowanie jest bezpłatne i można je pobrac ze strony producenta
http://h20338.www2.hp.com/hpsub/cache/332262-0-0-225-121.html
czwartek, 10 lipca 2008
Problem z WSUS - certyfikat
oprogramowanie dostępne tu(rootsupd.exe):
http://download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/rootsupd.exe
System krzyczał :
Event Type: Error
Event Source: Windows Server Update Services
Event Category: Synchronization
Event ID: 364
Date: 2008-07-10
Time: 18:49:11
User: N/A
Computer: INTRANET
Description:
Content file download failed. Reason: File cert verification failure. Source File: /msdownload/update/software/secu/2008/03/windows6.0-kb941693-ia64_c8addd4e89990418b6cda73951001993b1bd888f.cab Destination File: E:\WSUS\WsusContent\8F\C8ADDD4E89990418B6CDA73951001993B1BD888F.cab.
poniedziałek, 7 lipca 2008
Nie można zweryfikować wydawcy/ Czy chcesz uruchomić ten plik?
DODAJEMY TE ADRESY IP I NAZWY NETBIOS SERWEROW NA KTÓRYCH MAMY ZAINSTALOWANE OPROGRAMOWANIE PRZEZ DYSKI SIECIOWE.
środa, 18 czerwca 2008
zmiana adresów dns na klientach windows via skrypt
krótki skrypt zmieniajacy DNS-y i sprawdzający rozwiązanie nazw:
###################################################
REM #######################################################################
REM #
REM #Skrypt zmienia adresy dns na wskazane w konfiguracji
REM #Piotr KURZEJA
REM #
REM #######################################################################
REM # KONIFGURACJA ADRESÓW DNS
REM #######################################################################
set PDNS=192.168.1.1
set SDNS=192.168.1.2
runas /user:administrator@domena.com "netsh interface ip set dns name=\"PoĄczenie lokalne\" static %PDNS% primary"
runas /user:administrator@domena.com "netsh interface ip add dns name=\"PoĄczenie lokalne\" %SDNS%"
echo start > %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
echo PDNS=%PDNS% >> %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
echo SDNS=%SDNS% >> %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
ipconfig /all >> %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
echo ****SPRAWDZAM ROZWIĄZYWANIE NAZW Z INTERNETU PRZEZ PRIMARY DNS*** >> %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
nslookup wp.pl >> %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
echo ****SPRAWDZAM ROZWIĄZYWANIE NAZW Z INTERNETU PRZEZ SECOUNDARY DNS*** >> %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
nslookup onet.pl %SDNS% >> %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
echo ****SPRAWDZAM ROZWIĄZYWANIE NAZWy Własnej PRZEZ PRIMARY DNS*** >> %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
nslookup %COMPUTERNAME% >> %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
echo ****SPRAWDZAM ROZWIĄZYWANIE NAZWy Własnej PRZEZ SECOUNDARY DNS*** >> %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
nslookup %COMPUTERNAME% %SDNS% >> %LOGONSERVER%\SYSVOL\domena.com\scripts\logi\%COMPUTERNAME%.log
pause
środa, 11 czerwca 2008
EventId 13568 - problem z replikacją sysvol
The File Replication Service has detected that the replica set "DOMAIN SYSTEM VOLUME (SYSVOL SHARE)" is in JRNL_WRAP_ERROR.
| Request a translation of the event description in plain English! An example of "English please" is available here. | |
| What is the role of File Replication Service? | |
| Ron Paskowski (Last update 12/12/2006): Performing the steps below solved my problem: 1. Expand "HKLM\System\CurrentControlSet\Services\NtFrs\Parameters" 2. Change value for "Enable Journal Wrap Automatic Restore" from 0 to 1. If the DWORD Value does not exist, create a new one with the exact spelling as above, including spaces but without the quotes. 3. Stop the NTFRS Service (open a command prompt and type "net stop ntfrs") 4. Start the NTFRS Service (net start ntfrs) 5. Monitor the File Replication Service Event Logs for events: • 13553 – The DC is performing the recovery process • 13554 – The DC is ready to pull the replica from another DC. • 13516 - At this point go to step 6. (the problem is resolved if you receive this event) 6. Using a command prompt type: "net share" and look for the Netlogon and Sysvol Shares to appear. The Journal Wrap error is only fixed after the Domain Controller receives the new SYSVOL replica from a peer Domain Controller. This may take a period of time depending on where your peer DC is located and on bandwidth. 7. Change value for "Enable Journal Wrap Automatic Restore" from 1 to 0. Mihai Andrei (Last update 10/6/2005): See the link to "Troubleshooting File Replication Service" for a complete description of this event. Ionut Marin (Last update 8/19/2005): M292438 gives information on troubleshooting Journal_Wrap errors on Sysvol and DFS Replica Sets. See M887303 for additional information on this issue. Andi K (Last update 12/5/2003): As per Microsoft: "FRS no longer performs an automatic non-authoritative restore if a journal wrap condition is detected. Instead, it logs an event ID 13568 message in the FRS event log to remind you to perform the operation at a convenient time. A registry key has been included to configure an automatic non-authoritative restore operation if you want to do so. However, if you configure this setting, the contents of the replica tree may be made unavailable while the restore operation is taking place". See M321557 for more details. Tom McMeekin After speaking with MS Technical Support, I was emailed a Q article, which did fix the problem. See M315070 ("Event 13568 Is Logged in the File Replication Service Event Log[ntrelease]"). The Q article does not appear to be available anymore so here is the content (please note that if the article is not available anymore then it probably means that is no longer valid or was wrong!): Event 13568 Is Logged in the File Replication Service Event Log[ntrelease] ID: M315070 CREATED: 18-DEC-2001 MODIFIED: 06-AUG-2002 The information in this article applies to: - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Server ------------------------------------------------------------------------------- [...] SYMPTOMS ======== The following event may be logged in the File Replication service (FRS) event log after you install Windows 2000 Service Pack 3 (SP3): Event Type: Warning Event Source: NtFrs Event Category: None Event ID: 13568 Date: 12/12/2001 Time: 2:03:32 PM User: N/A computer: NA-DC-01 Description: [... event description...] CAUSE ===== This error message is logged because the requested data is not available due to the following series of events: - FRS uses the NTFS file system journal to track changes to files and to folders that are in a replica tree to propagate those changes to other members of the replica set. - If FRS does not record the changes, the journal wraps and FRS does not know which change to process next. FRS may not record the changes because: - FRS is off for an extended period of time. -or- - The changes are occurring faster than FRS can process them. - To recover from this error state, FRS needs to: - Re-initialize the content of the replicated directory. - Resume tracking the NTFS journal from a known good starting point. - To re-initialize the replica tree, FRS moves all content into the NTFRS_Pre-Existing folder, and then FRS rejoins the replica set by sourcing from an upstream partner. Based on the contents of the file, one of the following events occurs: - If a file on the upstream partner is identical to the file that is in the NTFRS_Pre-Existing folder, the local copy is moved into the replica tree. - If the file is different, or if new files have been added to the replica set, FRS replicates the update from the upstream partner and moves it into the replica tree. - During this procedure, the data on that particular member becomes unavailable. In Service Pack 2 (SP2), this re-initialization takes place automatically, which may take the data offline at an inopportune time. In SP3, the event is logged by default and an administrator can re-initialize the replica tree at a convenient time. RESOLUTION ========== [...] To modify the default behavior, make the following changes in the registry to instruct FRS to handle the JRNL_WRAP_ERROR status automatically: 1. Stop FRS. 2. Start Registry Editor (Regedt32.exe). 3. Locate and click the following key in the registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters 4. On the Edit menu, click Add Value, and then add the following registry value: Value name: Enable Journal Wrap Automatic Restore Data type: REG_DWORD Radix: Hexadecimal Value data: 1 (Default 0) 5. Quit Registry Editor. 6. Restart FRS. If these steps do not modify the default settings and the automatic re-initialization is not turned on, you need to manually re-initialize the replica tree. At a convenient time, make the following changes to the registry: 1. Stop FRS. 2. Start Registry Editor (Regedt32.exe). 3. Locate and click the following key in the registry: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore/Process at Startup 4. On the Edit menu, click Add Value, and then add the following registry value: Value name: BurFlags Data type: REG_DWORD Radix: Hexadecimal Value data: D2 5. Quit Registry Editor. 6. Restart FRS. MORE INFORMATION ================ For additional information about SP3 updates to the File Replication service, click the article number below to view the article in the Microsoft Knowledge Base: M307319 File Replication Service Improvements in Windows 2000 SP3 |
