Openwrt Dayligh Saving Time Fix

If your openwrt is not changing to DST this year, try this TZ as settings "CET-1CEST,M3.4.0,M10.4.0/3".

Update your /etc/config/system file as this:

config 'system'
        option 'hostname' 'gate1'
        option 'zonename' 'Europe/Bratislava'
        option 'timezone' 'CET-1CEST,M3.4.0,M10.4.0/3'
        option 'cronloglevel' '8'
        option 'conloglevel' '7'

and /etc/TZ

CET-1CEST,M3.4.0,M10.4.0/3

Finally run /etc/init.d/sysntpd reload.

Enjoy!

KDC server using ApacheDS 1.5.7

There is a nice work where author describes how to run KDC server using ApacheDS [1].
Problem is that with recent version of ApacheDS the step by step guide is not working, so let's present the fixes.

1. On machines with dual TCP stack be aware of occasional localhost resoutions to ::1 which is IPv6 localhost. Therefore I have used localhost4 to be on a safe side
2. Change server.xml of ApacheDS to include paEncTimestampRequired="false" attribute of kdcServer node.
   

   <kdcServer id="kdcServer" searchBaseDn="ou=Users,dc=example,dc=com" paEncTimestampRequired="false">
       <transports>
         <tcpTransport port="60088" nbThreads="4" backLog="50"/>
         <udpTransport port="60088" nbThreads="4" backLog="50"/>
       </transports>
       <directoryService>#directoryService</directoryService>
   </kdcServer>

   
   
3. ldiff data should be modified using localhost4 as server ID.
   Last element will look like this:
   

   dn: uid=ldap,ou=Users,dc=example,dc=com
   objectClass: top
   objectClass: person
   objectClass: inetOrgPerson
   objectClass: krb5principal
   objectClass: krb5kdcentry
   cn: LDAP
   sn: Service
   uid: ldap
   userPassword: randall
   krb5PrincipalName: ldap/localhost4@EXAMPLE.COM
   krb5KeyVersionNumber: 0
   

4. Your /etc/krb5.conf file can look like this:
   

   [libdefaults]
           default_realm = EXAMPLE.COM
   
   [realms]
           EXAMPLE.COM = {
                   kdc = localhost:60088
           }
   
   [domain_realm]
           .example.com = EXAMPLE.COM
           example.com = EXAMPLE.COM

So, give it a try:

kinit hnelson@EXAMPLE.COM
Password for hnelson@EXAMPLE.COM: secret

klist
Ticket cache: FILE:/tmp/krb5cc_12956
Default principal: hnelson@EXAMPLE.COM

Valid starting     Expires            Service principal
02/21/12 08:37:26  02/22/12 08:37:25  krbtgt/EXAMPLE.COM@EXAMPLE.COM
        renew until 02/28/12 08:37:25

 Enjoy your KDC ;-)


[1] http://directory.apache.org/apacheds/1.5/543-kerberos-in-apacheds-155.html

drsr.sk: Elektronický podpis

Zaujímalo by ma prečo musí byť podateľňa elektronických dokumentov na drsr.sk založená na komponente, ktorý je schopný bežať len na systémoch Windows?

Aký je problém implementovať elektronický podpis s použitím technológie Java, ktorá umožní spustenie aplikácie na takmer ľubovoľnom operačnom systéme (Windows, Linux, Mac OS X)?

To ani nehovorím, že podateľňa musí bežať pod Internet Explorerom .... :-(

drsr.sk: Elektronická podateľňa - horšie to už nejde!

Zvoní mobil .... a ja už viem, že niečo je zle ....
Určite tento pozná každý programátor alebo iný človek od počítačov.

"Zasa niečo zmenili na DRSR.sk, nejde mi posielať súhrnný výkaz DPH!!!"
"OK, zastavím sa pozrieť ..."

Zaujímalo by ma koľko ľudí absolvovalo podobný telefonát.

Ale k veci. Z dôvodu prechodu na nový hashovací algoritmus (SHA2) sa mení podpisová politika vydaná NBÚ a hash vydaný Daňovým riaditeľstvom SR. Toto si ďalej vyžiadalo aj zmenu podpisového komponentu D.SIGNER/XADES na novú verziu (1.1.0.0).
Podľa popisu na DRSR.sk treba vykonať nasledovné kroky:
1. Registrácia novej podpisovej politiky sa vykoná použitím inštalačného súboru PP2011.zip.
2. Inštalácia novej elektronickej značky sa vykoná použitím inštalačného súboru EZ_cert_end_user_v2.ZIP.
3. ZMENA VERZIE PODPISOVÉHO KOMPONENTU D.SIGNER/XADES (V1.1.0.0)Krok č. len v prípade ak nemáte zaručený elektronický podpis a fungujete na dohodu s daňovým riaditeľstvom.

Hm, ľahké a rýchle pre človeka s potrebnými znalosťami .... ale chybička sa pritrafila.
Postup nefunguje.
Pri podpísaní dokumenktu sa objaví banner D.SIGNERu a potom už nič. Žiadne chybové hlásenie ani iné upozornenie pre užívateľa. (toto považujem za obrovskú chybu).

Po chvíľke pátrania človeka napadne riešenie. Stačí zmeniť poradie krokov. (3., 1., 2.).
Žeby to po napisaní ani nevyskúšali? Vlastne ma to ani neprekvapuje. Veď všetci ľudia maju obrovské množstvá voľného času, aby skúšali ako prinútit aplikáciu pracovať. Nie prispôsobiť svojmu štýlu práce ale vôbec sa rozbehnúť!

Sonic Workbench 7.0.1 on Fedora Core 6

Continuing with my installation guides ...

1. Libraries
Before install make sure you have installed folowing libraries:

compat-libstdc++-33-xxxxxx
libstdc++-devel-4.xxxx
libstdc++-4.xxxxx
compat-libstdc++-296-xxxxxx

If you are missing something, yum it in.

Then do:

su -
cd /usr/lib
ln -s libstdc++-libc6.2-2.so.3 libstdc++-libc6.1-1.so.2

2. Java
Make sure you have Java 1.4.2 installed. I was not able to run Sonic Workbench under Java 1.5., due to Process Editor crash.
Currently using Java 1.4.2_14. Don't worry Eclipse has it's own compiler so can still produce 1.5 compatible classes (when needed).

3. Run it
Run $SonicInstall/Workbench7.0/startworkbench.sh.
If you got an XPCOM error, add following two lines to startworkbench.sh (or choose your own way of setting MOZILLA_FIVE_HOME variable).

# to make SWT browser support work
export MOZILLA_FIVE_HOME=/usr/lib/mozilla

This was done on my home FC6 (Linux frodo 2.6.20-1.2948.fc6 #1 SMP Fri Apr 27 19:48:40 EDT 2007 i686 i686 i386 GNU/Linux).
It also worked on my laptop with Fedora 8 (Linux javadev-nb 2.6.23.9-85.fc8 #1 SMP Fri Dec 7 15:49:59 EST 2007 i686 athlon i386 GNU/Linux).

Lotus Notes V7 on Fedora Core 6

Well, after all the setup, my new FC6 deserves Lotus Notes client (I don't want to go back to FC3 anymore).
So, here are the steps to install IBM Lotus Notes For Linux on Fedora Core 6:
1. Unzip C93D1NA.zip to ~/notes_install
2. Unzip personality.zip to plugin directory
3. chmod +x ~/notes_install/plugin/setup_wct_platform.bin
4. chmod +x ~/notes_install/setuplinux.bin
5. cp ~/notes_install/setuplinux.bin ~/notes_install/plugin/updateSite/features/
com.ibm.workplace.notesinstall.linux.feature_7.0.1.0000-0900/bin/linux/
6. Run ~/notes_install/plugin/setup_wct_platform.bin -console
7. Sometimes notes plugin is not installed (don't ask me why), so run the installation manually by:
cd to that long directory
./setuplinux.bin -console
You can recognize that notes plugin is not installed when there is no ~/notes directory.
8. Go to ~/notes (cd ~/notes).
9. ln -s /usr/lib/libXmu.so.6 libXm.so.3
10. Run notesstart and finish the setup (old lotus notes way).

Here is the content of my notesstart located in ~/bin:

#!/bin/sh

NOTESBIN=/home/$USER/notes
NOTESDATA=/home/$USER/notes/data
NOTESDIR=/home/$USER/notes/data
LD_LIBRARY_PATH=$NOTESBIN:$NOTESBIN/jvm/bin/classic:$NOTESBIN/jvm/bin
:$LD_LIBRARY_PATH
PATH=$NOTESBIN/jvm/bin:$NOTESBIN:$PATH
CLASSPATH=./:$NOTESBIN/:$CLASSPATH
export NOTESBIN NOTESDATA NOTESDIR LD_LIBRARY_PATH PATH CLASSPATH

/opt/IBM/Workplace\ Managed\ Client/rcp/richclient -personality com.ibm.workplace.noteswc.standalone.linux.personality

To have the information complete, I was using Lotus Notes on FC3 for a long time and installation went without any problems as described by IBM.

Enjoy,
P.

P.S. Many thanks to guys discussing in this thread, where I figured out what how to fix my Notes.

Cheap Code Signing with Your Thawte Freemail Certificate

As I am always loosing this, I better write it down.

There is nice way how to sign your jars using Thawte Freemail Certificate. I think it is fine for code given out for free.

<signjar keystore="your_keystore.p12"
         storetype="pkcs12"
         alias="your_alias"
         storepass="secret">
  <fileset dir="${client.deploy.dir}/lib">
        <include name="**/*" />
  </fileset>          
</signjar>

Step by step guide:

1. Ask Thawte for your certificate.
2. Download it to your Firefox.
3. Choose Edit/Preferences/Encryption/View Certificates/<select>/Backup (use PKCS12)
4. If you don't know your alias use this to list it:
   keytool -list -storetype pkcs12 -keystore your_keystore.p12
   

Enjoy!

P.