Web log

Google Apps migration for Microsoft Exchange - ERROR: invalid source server or invalid user ids

2011-07-25T01:17:00.003+08:00

The first few lines of the log file contain:

2011-07-22T18:20:41.166-07:00 910 E:Generic ExchangeMigration!GetOutlookExePath @ 24 ()> Failed with 0x80070002, last successful line = 17.
2011-07-22T18:20:41.166-07:00 910 E:Generic ExchangeMigration!GetOutlookVersion @ 255 ()> Failed with 0x80070002, last successful line = 247.
2011-07-22T18:20:41.166-07:00 910 E:Generic ExchangeMigration!GetOfficeRegistryBase @ 356 ()> Failed with 0x80070002, last successful line = 354.
2011-07-22T18:20:41.166-07:00 910 E:Generic ExchangeMigration!ResourceStrings::GetOutlookLanguage @ 89 ()> Failed with 0x80070002, last successful line = 76.
Configuration: Exe name: C:\Program Files (x86)\Google\Google Apps Migration\ExchangeMigration.exe

Install Microsoft Outlook (trial should also work).

Zenoss and splunk python issues

2011-07-04T18:10:00.001+08:00

FIX: Add `unset PYTHONPATH` in splunk boot script (e.g. /etc/init.d/splunk)

root@zenoss:/opt/splunk/bin# ./splunk start

Splunk> Take the sh out of IT.

Checking prerequisites...
Checking http port [8000]: open
Checking mgmt port [8089]: open
Checking configuration... *** glibc detected *** python: free(): invalid pointer: 0x09c26100 ***
======= Backtrace: =========
/lib/tls/i686/nosegneg/libc.so.6(+0x6c321)[0xb76cf321]
/lib/tls/i686/nosegneg/libc.so.6(+0x6db78)[0xb76d0b78]
/lib/tls/i686/nosegneg/libc.so.6(cfree+0x6d)[0xb76d3c9d]
python[0x80ae4d0]
/usr/local/zenoss/python/lib/python2.6/site-packages/_xmlplus/parsers/pyexpat.so(+0x4a2f)[0xb6fc9a2f]
/usr/local/zenoss/python/lib/python2.6/site-packages/_xmlplus/parsers/pyexpat.so(+0xb881)[0xb6fd0881]
/usr/local/zenoss/python/lib/python2.6/site-packages/_xmlplus/parsers/pyexpat.so(+0xd348)[0xb6fd2348]
/usr/local/zenoss/python/lib/python2.6/site-packages/_xmlplus/parsers/pyexpat.so(+0x118d7)[0xb6fd68d7]
/usr/local/zenoss/python/lib/python2.6/site-packages/_xmlplus/parsers/pyexpat.so(XML_ParseBuffer+0x71)[0xb6fcf9a1]
/usr/local/zenoss/python/lib/python2.6/site-packages/_xmlplus/parsers/pyexpat.so(XML_Parse+0x12d)[0xb6fcf911]
/usr/local/zenoss/python/lib/python2.6/site-packages/_xmlplus/parsers/pyexpat.so(+0x74c9)[0xb6fcc4c9]
python(PyEval_EvalFrameEx+0x4f0f)[0x80cf213]
python(PyEval_EvalFrameEx+0x42aa)[0x80ce5ae]
python(PyEval_EvalCodeEx+0x707)[0x80d11bf]
python(PyEval_EvalFrameEx+0x3ac8)[0x80cddcc]
python(PyEval_EvalCodeEx+0x707)[0x80d11bf]
python(PyEval_EvalFrameEx+0x3ac8)[0x80cddcc]
python(PyEval_EvalFrameEx+0x42aa)[0x80ce5ae]
python(PyEval_EvalCodeEx+0x707)[0x80d11bf]
python(PyEval_EvalFrameEx+0x3ac8)[0x80cddcc]
python(PyEval_EvalCodeEx+0x707)[0x80d11bf]
python(PyEval_EvalFrameEx+0x3ac8)[0x80cddcc]
python(PyEval_EvalFrameEx+0x42aa)[0x80ce5ae]
python(PyEval_EvalFrameEx+0x42aa)[0x80ce5ae]
python(PyEval_EvalCodeEx+0x707)[0x80d11bf]
python(PyEval_EvalCode+0x22)[0x80d136e]
python(PyRun_FileExFlags+0x62)[0x80efa1e]
python(PyRun_SimpleFileExFlags+0x2c5)[0x80f0691]
python(Py_Main+0xaff)[0x8058403]
/lib/tls/i686/nosegneg/libc.so.6(__libc_start_main+0xe6)[0xb7679bd6]
python[0x80575e9]
======= Memory map: ========
08048000-08154000 r-xp 00000000 08:01 294948 /opt/splunk/bin/python2.6
08154000-08186000 rw-p 0010c000 08:01 294948 /opt/splunk/bin/python2.6
08186000-0818f000 rw-p 00000000 00:00 0
09487000-09cc4000 rw-p 00000000 00:00 0 [heap]
b6c00000-b6c21000 rw-p 00000000 00:00 0
b6c21000-b6d00000 ---p 00000000 00:00 0
b6d44000-b6d61000 r-xp 00000000 08:01 172225 /lib/libgcc_s.so.1
b6d61000-b6d62000 r--p 0001c000 08:01 172225 /lib/libgcc_s.so.1
b6d62000-b6d63000 rw-p 0001d000 08:01 172225 /lib/libgcc_s.so.1
b6d6a000-b6f64000 r-xp 00000000 08:01 344977 /usr/lib/libpython2.6.so.1.0
b6f64000-b6f65000 r--p 001f9000 08:01 344977 /usr/lib/libpython2.6.so.1.0
b6f65000-b6fb4000 rw-p 001fa000 08:01 344977 /usr/lib/libpython2.6.so.1.0
b6fb4000-b6fbe000 rw-p 00000000 00:00 0
b6fc4000-b6fc5000 rw-p 00000000 00:00 0
b6fc5000-b6fef000 r-xp 00000000 08:51 25572717 /usr/local/zenoss/python/lib/python2.6/site-packages/_xmlplus/parsers/pyexpat.so
b6fef000-b6ff2000 rw-p 00029000 08:51 25572717 /usr/local/zenoss/python/lib/python2.6/site-packages/_xmlplus/parsers/pyexpat.so
b6ff2000-b6ff4000 r-xp 00000000 08:01 296148 /opt/splunk/lib/python2.6/lib-dynload/_heapq.so
b6ff4000-b6ff6000 rw-p 00002000 08:01 296148 /opt/splunk/lib/python2.6/lib-dynload/_heapq.so
b6ff6000-b6ffd000 r-xp 00000000 08:01 296166 /opt/splunk/lib/python2.6/lib-dynload/itertools.so
b6ffd000-b7000000 rw-p 00006000 08:01 296166 /opt/splunk/lib/python2.6/lib-dynload/itertools.so
b7000000-b7001000 r-xp 00000000 08:01 296140 /opt/splunk/lib/python2.6/lib-dynload/_bisect.so
b7001000-b7002000 rw-p 00001000 08:01 296140 /opt/splunk/lib/python2.6/lib-dynload/_bisect.so
b7002000-b7004000 r-xp 00000000 08:01 296147 /opt/splunk/lib/python2.6/lib-dynload/_hashlib.so
b7004000-b7005000 rw-p 00002000 08:01 296147 /opt/splunk/lib/python2.6/lib-dynload/_hashlib.so
b7005000-b7157000 r-xp 00000000 08:01 295764 /opt/splunk/lib/libxml2.so.2.7.6
b7157000-b715c000 rw-p 00152000 08:01 295764 /opt/splunk/lib/libxml2.so.2.7.6
b715c000-b715d000 rw-p 00000000 00:00 0
b715d000-b7170000 r-xp 00000000 08:01 295760 /opt/splunk/lib/libexslt.so.0.8.15
b7170000-b7171000 rw-p 00012000 08:01 295760 /opt/splunk/lib/libexslt.so.0.8.15
b7171000-b71ae000 r-xp 00000000 08:01 295765 /opt/splunk/lib/libxslt.so.1.1.26
b71ae000-b71af000 rw-p 0003d000 08:01 295765 /opt/splunk/lib/libxslt.so.1.1.26
b71af000-b7297000 r-xp 00000000 08:01 296870 /opt/splunk/lib/python2.6/site-packages/lxml/etree.so
b7297000-b72b7000 rw-p 000e8000 08:01 296870 /opt/splunk/lib/python2.6/site-packages/lxml/etree.so
b72b7000-b72be000 rw-p 00000000 00:00 0
b72be000-b72ee000 r-xp 00000000 08:01 296170 /opt/splunk/lib/python2.6/lib-dynload/pyexpat.so
b72ee000-b72f1000 rw-p 00030000 08:01 296170 /opt/splunk/lib/python2.6/lib-dynload/pyexpat.so
b72f1000-b73fa000 r-xp 00000000 08:01 295759 /opt/splunk/lib/libcrypto.so.0.9.8
b73fa000-b7410000 rw-p 00109000 08:01 295759 /opt/splunk/lib/libcrypto.so.0.9.8
b7410000-b7454000 rw-p 00000000 00:00 0
b7455000-b7457000 r-xp 00000000 08:01 296152 /opt/splunk/lib/python2.6/lib-dynload/_random.so
b7457000-b7458000 rw-p 00002000 08:01 296152 /opt/splunk/lib/python2.6/lib-dynload/_random.so
b7458000-b745c000 r-xp 00000000 08:01 296177 /opt/splunk/lib/python2.6/lib-dynload/zlib.so
b745c000-b745e000 rw-p 00003000 08:01 296177 /opt/splunk/lib/python2.6/lib-dynload/zlib.so
b745e000-b7461000 r-xp 00000000 08:01 296141 /opt/splunk/lib/python2.6/lib-dynload/_bytesio.so
b7461000-b7462000 rw-p 00002000 08:01 296141 /opt/splunk/lib/python2.6/lib-dynload/_bytesio.so
b7462000-b7465000 r-xp 00000000 08:01 296145 /opt/splunk/lib/python2.6/lib-dynload/_fileio.so
b7465000-b7466000 rw-p 00003000 08:01 296145 /opt/splunk/lib/python2.6/lib-dynload/_fileio.so
b7466000-b746c000 r-xp 00000000 08:01 296157 /opt/splunk/lib/python2.6/lib-dynload/array.so
b746c000-b746e000 rw-p 00006000 08:01 296157 /opt/splunk/lib/python2.6/lib-dynload/array.so
b746e000-b7476000 r-xp 00000000 08:01 296144 /opt/splunk/lib/python2.6/lib-dynload/_elementtree.so
b7476000-b7477000 rw-p 00007000 08:01 296144 /opt/splunk/lib/python2.6/lib-dynload/_elementtree.so
b7477000-b7479000 r-xp 00000000 08:01 296164 /opt/splunk/lib/python2.6/lib-dynload/fcntl.so
b7479000-b747a000 rw-p 00002000 08:01 296164 /opt/splunk/lib/python2.6/lib-dynload/fcntl.so
b747a000-b747d000 r-xp 00000000 08:01 296172 /opt/splunk/lib/python2.6/lib-dynload/select.so
b747d000-b747e000 rw-p 00002000 08:01 296172 /opt/splunk/lib/python2.6/lib-dynload/select.so
b747e000-b7481000 r-xp 00000000 08:01 296174 /opt/splunk/lib/python2.6/lib-dynload/termios.soERROR: pid 13966 terminated with signal 6

PYA 192 - Unscrupulous taxi driver

2011-06-22T18:00:00.003+08:00

Make: Toyota
Model: Corolla XL
Year: 1996

(does not use the meter and over-charges)

Authorization error with API user knife initialization `knife configure -i`

2010-09-13T23:23:00.002+08:00

Notice these errors. First error shows the API user of knife (root) failed to authenticate:

# knife client list

WARN: HTTP Request Returned 401 Unauthorized: Failed to authenticate!

/usr/lib/ruby/1.8/net/http.rb:2101:in `error!': 401 "Unauthorized" (Net::HTTPServerException)

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest.rb:217:in `api_request'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest.rb:268:in `retriable_rest_request'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest.rb:198:in `api_request'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest.rb:101:in `get_rest'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/api_client.rb:185:in `list'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/knife/client_list.rb:35:in `run'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/application/knife.rb:115:in `run'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/bin/knife:25

from /usr/bin/knife:19:in `load'

from /usr/bin/knife:19

so I tried to re-initialize API user (root). And encountered another authentication failure (this time with webui client user (see chef-server log that follows).

# knife configure -i

Overwrite /root/.chef/knife.rb? (Y/N) Y

Please enter the chef server URL: [http://localhost:4000]

Please enter a clientname for the new client: [root]

Please enter the existing admin clientname: [chef-webui]

Please enter the location of the existing admin client's private key: [/etc/chef/webui.pem]

Please enter the validation clientname: [chef-validator]

Please enter the location of the validation key: [/etc/chef/validation.pem]

Please enter the path to a chef repository (or leave blank):

WARN: Creating initial API user...

FATAL: Failed to read the private key /etc/chef/webui.pem: #, /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest/auth_credentials.rb:59:in `read'/usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest/auth_credentials.rb:59:in `load_signing_key'/usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest/auth_credentials.rb:33:in `initialize'/usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest.rb:41:in `new'/usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest.rb:41:in `initialize'/usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/api_client.rb:232:in `new'/usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/api_client.rb:232:in `save'/usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/knife/client_create.rb:55:in `run'/usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/knife/configure.rb:86:in `run'/usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/application/knife.rb:115:in `run'/usr/lib/ruby/gems/1.8/gems/chef-0.9.6/bin/knife:25/usr/bin/knife:19:in `load'/usr/bin/knife:19

/usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest/auth_credentials.rb:62:in `load_signing_key': I cannot read /etc/chef/webui.pem, which you told me to use to sign requests! (Chef::Exceptions::PrivateKeyMissing)

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest/auth_credentials.rb:33:in `initialize'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest.rb:41:in `new'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/rest.rb:41:in `initialize'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/api_client.rb:232:in `new'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/api_client.rb:232:in `save'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/knife/client_create.rb:55:in `run'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/knife/configure.rb:86:in `run'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/lib/chef/application/knife.rb:115:in `run'

from /usr/lib/ruby/gems/1.8/gems/chef-0.9.6/bin/knife:25

from /usr/bin/knife:19:in `load'

from /usr/bin/knife:19

This is the chef-server log that gives hint it is webui that is failing to authenticate:

2010-09-13_15:13:48.61008 INFO: Authenticating client chef-webui

2010-09-13_15:13:48.63105 merb : worker (port 4000) ~ Started request handling: Mon Sep 13 08:13:48 -0700 2010

2010-09-13_15:13:48.63110 merb : worker (port 4000) ~ Params: {"name"=>"root", "action"=>"create", "admin"=>true, "controller"=>"clients"}

2010-09-13_15:13:48.63112 merb : worker (port 4000) ~ Failed to authenticate! - (Merb::ControllerExceptions::Unauthorized)

2010-09-13_15:13:48.63165 /usr/lib/ruby/gems/1.8/gems/chef-server-api-0.9.6/app/controllers/application.rb:50:in `authenticate_every'

2010-09-13_15:13:48.63166 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/controller/abstract_controller.rb:352:in `send'

2010-09-13_15:13:48.63167 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/controller/abstract_controller.rb:352:in `_call_filters'

2010-09-13_15:13:48.63169 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/controller/abstract_controller.rb:344:in `each'

2010-09-13_15:13:48.63170 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/controller/abstract_controller.rb:344:in `_call_filters'

2010-09-13_15:13:48.63171 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/controller/abstract_controller.rb:286:in `_dispatch'

2010-09-13_15:13:48.63172 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/controller/abstract_controller.rb:284:in `catch'

2010-09-13_15:13:48.63175 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/controller/abstract_controller.rb:284:in `_dispatch'

2010-09-13_15:13:48.63176 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/controller/merb_controller.rb:285:in `_dispatch'

2010-09-13_15:13:48.63177 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/controller/merb_controller.rb:262:in `_call'

2010-09-13_15:13:48.63178 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/controller/merb_controller.rb:252:in `call'

2010-09-13_15:13:48.63179 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/dispatch/dispatcher.rb:91:in `dispatch_action'

2010-09-13_15:13:48.63180 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/dispatch/dispatcher.rb:69:in `handle'

2010-09-13_15:13:48.63181 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/dispatch/dispatcher.rb:29:in `handle'

2010-09-13_15:13:48.63183 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/rack/application.rb:17:in `call'

2010-09-13_15:13:48.63184 /usr/lib/ruby/gems/1.8/gems/rack-1.0.0/lib/rack/content_length.rb:13:in `call'

2010-09-13_15:13:48.63185 /usr/lib/ruby/gems/1.8/gems/thin-1.2.7/lib/thin/connection.rb:76:in `pre_process'

2010-09-13_15:13:48.63186 /usr/lib/ruby/gems/1.8/gems/thin-1.2.7/lib/thin/connection.rb:74:in `catch'

2010-09-13_15:13:48.63188 /usr/lib/ruby/gems/1.8/gems/thin-1.2.7/lib/thin/connection.rb:74:in `pre_process'

2010-09-13_15:13:48.64712 /usr/lib/ruby/gems/1.8/gems/thin-1.2.7/lib/thin/connection.rb:57:in `process'

2010-09-13_15:13:48.64713 /usr/lib/ruby/gems/1.8/gems/thin-1.2.7/lib/thin/connection.rb:42:in `receive_data'

2010-09-13_15:13:48.64715 /usr/lib/ruby/gems/1.8/gems/eventmachine-0.12.8/lib/eventmachine.rb:242:in `run_machine'

2010-09-13_15:13:48.64716 /usr/lib/ruby/gems/1.8/gems/eventmachine-0.12.8/lib/eventmachine.rb:242:in `run'

2010-09-13_15:13:48.64717 /usr/lib/ruby/gems/1.8/gems/thin-1.2.7/lib/thin/backends/base.rb:57:in `start'

2010-09-13_15:13:48.64718 /usr/lib/ruby/gems/1.8/gems/thin-1.2.7/lib/thin/server.rb:156:in `start'

2010-09-13_15:13:48.64719 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/rack/adapter/thin.rb:30:in `start_server'

2010-09-13_15:13:48.64720 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/rack/adapter/abstract.rb:305:in `start_at_port'

2010-09-13_15:13:48.64721 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/rack/adapter/abstract.rb:138:in `start'

2010-09-13_15:13:48.64727 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/server.rb:174:in `bootup'

2010-09-13_15:13:48.64729 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core/server.rb:42:in `start'

2010-09-13_15:13:48.64732 /usr/lib/ruby/gems/1.8/gems/merb-core-1.1.3/lib/merb-core.rb:165:in `start'

2010-09-13_15:13:48.64733 /usr/lib/ruby/gems/1.8/gems/chef-server-api-0.9.6/bin/chef-server:75

2010-09-13_15:13:48.64734 /usr/bin/chef-server:19:in `load'

2010-09-13_15:13:48.64735 /usr/bin/chef-server:19

2010-09-13_15:13:48.64736 merb : worker (port 4000) ~ Params: {"name"=>"root", "action"=>"create", "admin"=>true, "controller"=>"clients"}

2010-09-13_15:13:48.64738 merb : worker (port 4000) ~ {:dispatch_time=>0.041183, :action_time=>0.008142, :after_filters_time=>3.2e-05, :before_filters_time=>0.002237}

2010-09-13_15:13:48.64739 merb : worker (port 4000) ~

2010-09-13_15:13:48.64740

This article gives us a very good hint about the fix: http://blog.ibd.com/scalable-deployment/reseting-the-opscode-chef-server-validation-keypem/

Delete root and webui clients and delete corresponding keys (/root/.chef/root.pem and /etc/chef/webui.pem). Restart chef-server and you should get a new set of keys. Initialize a new API user (root):

# knife configure -i

Overwrite /root/.chef/knife.rb? (Y/N) Y

Please enter the chef server URL: [http://localhost:4000]

Please enter a clientname for the new client: [root]

Please enter the existing admin clientname: [chef-webui]

Please enter the location of the existing admin client's private key: [/etc/chef/webui.pem]

Please enter the validation clientname: [chef-validator]

Please enter the location of the validation key: [/etc/chef/validation.pem]

Please enter the path to a chef repository (or leave blank):

WARN: Creating initial API user...

INFO: Created (or updated) client[root]

WARN: Configuration file written to /root/.chef/knife.rb

Test API with knife

# knife client list

should give you a list of clients.

Mobile Internet coverage in the Philippines

2010-08-04T10:20:00.002+08:00

Help me populate this list. Notable places with or without 3G or HSDPA coverage:

Siargao (SMARTBRO-3G)
Padre Burgos, Sogod (Only EDGE both Globe and Smart)

Wavecom WMOD2 manuals / AT commands

2010-06-22T06:41:00.000+08:00

http://mirakulo.com/pub/wavecom-wmod2/

[ ] WMOD2Buserman.pdf 20-Jun-2010 16:27 164K
[ ] X421Modem.zip 20-Jun-2010 16:28 578K
[ ] XModem_dwl_v10.PDF 20-Jun-2010 16:28 599K
[ ] atph2step3.pdf 20-Jun-2010 16:27 1.4M
[ ] step3relnote7c.pdf 20-Jun-2010 16:28 58K

Docsis-server install in Ubuntu 8.04

2010-02-17T15:26:00.001+08:00

Base guide is here
http://users.accesscomm.ca/docsis_server/howto_1.html

I installed docsis first so this package might have dependencies already installed from docsis.

wget http://users.accesscomm.ca/docsis_server/docsis-server-current.tar.bz2

bunzip

aptitude install m4

./configure

it will look for m4
see if m4 is installed `which m4`
if not, aptitude install m4
if already installed, mod configure script to do the m4 check correctly:
look for this line,

if test "x$ac_is_gnu_m4" = "xGNU"; then

change it to:
if test "x$ac_is_gnu_m4" = "xm4"; then

run ./configure again

if you get this error:
checking for mysql_config... /usr/libexec/mysql_config
configure: error: You need at least mysql 4.0.0, get it at http://www.mysql.com

aptitude install mysql-client mysql-server libmysqlclient15-dev

run ./configure again

make

make install

verify

root@tds-stg-dhcp02:~/docsis_server-3.5# ls /usr/local/sbin/
Count_IPs          Delete_Old_Leases  FindIP   ListMessages
DB_Config_Encoder  docsis_server      FindMAC  Stress_Config_Generator

docsis source code install in Ubuntu 8.04

2010-02-17T14:43:00.000+08:00

wget http://downloads.sourceforge.net/project/docsis/docsis/docsis-0.9.5/docsis-0.9.5.tar.gz?use_mirror=nchc

untar

goto docsis-0.9.5 dir

aptitude install m4 bison libsnmp-base libsnmp15 snmpd libsnmp-dev flex

./configure

it will look for m4
see if m4 is installed `which m4`
if not, aptitude install m4
if already installed, mod configure script to do the m4 check correctly:
look for this line,

if test "x$ac_is_gnu_m4" = "xGNU"; then

change it to:
if test "x$ac_is_gnu_m4" = "xm4"; then

run ./configure again

it will look for bison,
aptitude install bison
and run ./configure again

`make`

make sure you install flex or you will get an error from sed about a file not being found

if you get an error about floor:
undefined reference to `floor'

goto
root@tds-stg-dhcp02:~/docsis-0.9.5# vim src/Makefile

look for this line:
LINK = $(LIBTOOL) --mode=link --tag=CC $(CCLD) $(AM_CFLAGS) $(CFLAGS) \
        $(AM_LDFLAGS) $(LDFLAGS) -o $@

and add the math function:
LINK = $(LIBTOOL) --mode=link --tag=CC $(CCLD) $(AM_CFLAGS) $(CFLAGS) \
        $(AM_LDFLAGS) $(LDFLAGS) -lm -o $@

run make again
root@tds-stg-dhcp02:~/docsis-0.9.5# make

make install

verify:
root@tds-stg-dhcp02:~/docsis-0.9.5# ls -l /usr/local/bin/docsis
-rwxr-xr-x 1 root root 164495 2010-02-16 17:31 /usr/local/bin/docsis

ASDM cannot be loaded. Unconnected sockets not implemented

2009-08-11T02:39:00.000+08:00

In Windows, uninstall Java(TM) Update >= 10.

UUID conflict and iclassify

2009-08-06T00:16:00.002+08:00

If you noticed that iclassify node is overwritten when updating facts using icagent, this is because icagent UUID is conflicting. At first, I thought it's VMware's BIOS UUID. Download and install a fresh copy of iclassify (with icagent), and run to initialize a fresh icagent UUID.

You might encounter:

agent.rb:26:in `initialize': undefined method `random_create' for UUID:Class (NoMethodError)

Fix: use uuidtools (1.0.3)

iClassify sv errors

2009-04-09T21:52:00.001+08:00

Problem:

5000: false: warning: /etc/sv/mongrel-iclassify-5000: unable to open supervise/status: file does not exist
5001: false: warning: /etc/sv/mongrel-iclassify-5001: unable to open supervise/ok: file does not exist
5002: false: warning: /etc/sv/mongrel-iclassify-5002: unable to open supervise/ok: file does not exist
5003: false: warning: /etc/sv/mongrel-iclassify-5003: unable to open supervise/ok: file does not exist
5004: false: warning: /etc/sv/mongrel-iclassify-5004: unable to open supervise/ok: file does not exist

Fix: I am not sure if this is the correct combination:
aptitude install svtools
Reboot machine.

Ebay scammer

2009-03-14T16:44:00.003+08:00

+639056538210
09056538210

Gene Paminiano
Claiming to be his wife: Ramona Carmen Paminiano
City States savings account# 011-22-001124-3

TIP: Do not push with the transaction without hearing the seller/buyer's voice on the phone. Record the conversation for publicity purposes.

Zenoss: monitor free VMWare ESXi version

2009-02-18T15:54:00.004+08:00

We confirmed that the free ESXi version does not allow SNMP gets, only traps.

The original script was taken from here:
http://communities.vmware.com/docs/DOC-7170

Modified script:
http://mirakulo.com/pub/esxi/check_esx_wbmem.py

We added Fan and power supply, hinted from this page:
http://www.stephenjc.com/2009/01/whatsup-vmware-esxi-monitor-these.html

Use this guide to add the Data source:
http://www.zenoss.com/community/docs/howtos/create-modify-nagios-templates

Added as template under:
/Devices /Server /VMWare /ESXi /Templates /esxi-monitor /check_esx_wbmem

Name: check_esx_wbmem
Source Type: Command
Enable true
Use SSH false
Component: blank
Event class: /VMWare/ESXi
Severity: Error
Cycle time: 60
Parser: auto
Command template:
/usr/local/zenoss/python/bin/python /opt/zenoss/libexec/check_esx_wbmem.py https://${dev/manageIp}:5989 root passwd

To bind this template to ESXi nodes, go to the device:
Example: /Devices /Server /VMWare /ESXi /esxi-01.prod.corp.org

then to its templates:
http://site/zport/dmd/Devices/Server/VMWare/ESXi/devices/esxi-01.prod.corp.org/objTemplates

Menu > Bind templates > Select both the default plus newly created esxi-monitor perf template.

Go back to ESXi suborg, ie:
/Devices /Server /VMWare /ESXi

Access zProperties:
http://site/zport/dmd/Devices/Server/VMWare/ESXi/zPropertyEdit

Change zCommandCommandTimeout from 15 to 30.

zencommand restart.

Auto-update putty session list in mRemote

2008-12-14T09:08:00.001+08:00

> Steps to repro:
>
> 1) Create a connection with Protocol set to SSH2.
> 2) Browse Putty session list. (Ooops. I want to use a session in the list)
> 3) Create the session under Putty
> 4) Go back to mRemote and browse Putty session list.
>
> Session list still does not have the newly created session.

The author suggested:

start putty by going to Tools - Options - Advanced - Launch PuTTY
solves the problem.

Ubuntu on Intel D945GCLF (with Intel Atom)

2008-10-26T22:26:00.007+08:00

The rig:

D945GCLF board
Intel Atom @ 1.6GHZ w/HT

It looks like it's a linux kernel bug:
http://www.gossamer-threads.com/lists/linux/kernel/982159

The ethernet controller is:

Realtek Semiconductor Co., Ltd. RTL8101E PCI Express Fast Ethernet controller (rev ff)

does not seem to work in any of the Ubuntu versions.

Fix: recompile the kernel with patch

You can download my patched packages here (currently uploading, let me know if something is missing):

http://mirakulo.com/pub/linux-image-2.6.24-21-patched/

NOTE: I got the .udeb packages because of this warning: dpkg-gencontrol: warning: deb package with udeb specific field Kernel-Version

or you can do the following steps if you don't trust me:

apt-get source linux-source-2.6.24

apt-get build-dep linux-source-2.6.24

aptitude install install devscripts build-essential fakeroot

cd linux-2.6.24/

Get this patch:

http://bugzilla.kernel.org/attachment.cgi?id=17604&action=view

patch -p 1 < patch-r8169.patch

debuild -us -uc -b

Install the kernel that applies to you:

dpkg -i linux-image-2.6.24-21-generic_2.6.24-21.42_i386.deb

Reboot with new kernel. Verify that the dropped packet is zero or a realistic number.

BSOD: rtlnicxp.sys dump of physical memory

2008-07-28T18:38:00.002+08:00

Keywords:

DRIVER_IRQL_NOT_LESS_OR_EQUAL

rtlnicxp.sys

Beginning dump of physical memory

Fix: try upgrading RealTek Network Interface Card to the latest driver. It can be done via the Device Manager.

Beautiful things...

2008-04-02T19:04:00.002+08:00

This is bright side of this article:

1) Connie Talbot. A cute 6-year old girl with a beautiful voice that can move even God.

Stuff that sucks...

2008-02-18T23:50:00.006+08:00

1) Linksys WRT54G v7 router. Constant hang that requires hard reboot, Atheros chipset that is currently not supported by dd-wrt firmware according to this.

2) Stage6. Useless slow piece of shit.

3) Sonicwall VPN appliance. Shit that does not have a Linux client. (Update (2008/10/26 -- not really that shit. Great and easy interface. Lacking: native Linux VPN client and configuration diff logger.)

Debian Etch Base Image (public AMI) for Large Instance

2007-11-18T14:16:00.001+08:00

Published a new public AMI for Large Instance:
Debian Etch Base Image for Large Instance
http://developer.amazonwebservices.com/connect/entry.jspa?externalID=1052&categoryID=101

Update: It has been reported that I left my AWS key in the history. That does not work anymore. Thanks to the concerned citizen.

Windows XP optimization

2007-09-05T18:51:00.001+08:00

These are some of the tweaks that I do to speed up my Windoze:

- Display Properties > Themes > Windows Classic Theme

- System Properties > Advanced > Performance > Adjust for best performance

- System Properties > System Restore > Turn off

- Disable File Indexing: From My Computer > right-click on the C: Drive > select Properties. Uncheck "Allow Indexing Service to index this disk for fast file searching." Apply changes to "C: sub folders and files," and click OK.

- Clean Up Prefetch, temp, and cache files: Download CleanUp!

- If VM, turn off Screen Saver. If VMWare, install VMWare Tools.

- Defrag disks.

Resources
http://www.blifaloo.com/info/winxp_speed.php

SSH reverse tunnel

2007-09-04T05:14:00.000+08:00

# ssh -nNT -R 10.36.1.6:14344:10.36.1.5:80 10.36.1.6

The "-n" option prevents reading from STDIN. Redirection from /dev/null to STDIN.
"-N" tells ssh that the tunnel is not for executing remote commands.
"-T" tells ssh not to allocate a pseudo-tty on the remote system.
"-T" disables pseudo-tty allocation.

Rough diagram:
10.36.1.5:80 <--- 10.36.1.6:14344

To avoid timeout:

In /etc/ssh/sshd_config on the server:

TCPKeepAlive yes
ClientAliveInterval 30
ClientAliveCountMax 99999

To enable binding address in ssh -R:

GatewayPorts yes

Man page docu for -R switch:
-R [bind_address:]port:host:hostport

Specifies that the given port on the remote (server) host is to be forwarded to the given host and port on the local side. This works by allocating a socket to listen to port on the remote side, and whenever a connection is made to this port, the connection is forwarded over the secure channel, and a connection is made to host port hostport from the local machine.

Port forwardings can also be specified in the configuration file. Privileged ports can be forwarded only when logging in as root on the remote machine. IPv6 addresses can be specified by enclosing the address in square braces or using an alternative syntax: [bind_address/]host/port/hostport.

By default, the listening socket on the server will be bound to the loopback interface only. This may be overriden by specifying a bind_address. An empty bind_address, or the address "*", indicates that the remote socket should listen on all interfaces. Specifying a remote bind_address will only succeed if the serverâs GatewayPorts option is enabled (see sshd_config(5)).

Debian apt GPG keys and repos

2007-09-04T00:01:00.000+08:00

# wget http://ftp-master.debian.org/ziyi_key_2005.asc -O - | sudo apt-key add -

# wget http://ftp-master.debian.org/ziyi_key_2006.asc -O - | sudo apt-key add -

(replace 2006 with current year)

deb ftp://sunsite.cnlab-switch.ch/mirror/debian/ unstable main contrib non-free

Other keys:

mdebian:~# gpg --keyserver wwwkeys.eu.pgp.net --recv-keys A70DAF536070D3A1
mdebian:~# gpg --keyserver wwwkeys.eu.pgp.net --recv-keys B5D0C804ADB11277
mdebian:~# gpg --armor --export A70DAF536070D3A1 | apt-key add -
mdebian:~# gpg --armor --export B5D0C804ADB11277 | apt-key add -

Motorola MOTOKRZR K3 and Smart 3G

2007-09-03T02:48:00.000+08:00

Word of Warning: I am a Linux user and very keen in buying a Motorola Razr (specifically v3xx) because it is known to work in Linux. But for some stupid reason I bought a newer model and it is NOT based on this chipset anymore:

# lsusb

Bus 001 Device 002: ID 22b8:6402 Motorola PCS

# dmesg

[30549.844000] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[30549.844000] usbcore: registered new interface driver cdc_acm
[30549.844000] drivers/usb/class/cdc-acm.c: v0.25:USB Abstract Control
Model driver for USB modems and ISDN adapters

I have not tried yet making it work in Linux but might write a dev driver for this if time permits.

For Smart 3G Internet on the phone, I first sent the following message to 211:

SET MOTOK3

You will receive a browser message. This is a bit noob but only after some fiddling I manage to figure out that I need to see the Options of that message and Install. This message essentially contains the Smart 3G-related browser settings. I previously used a Globe SIM so the default set Web Sesssion is Globe Internet (Menu > Web Access > Web Sessions). Make Smart Internet as the default web session.

To use it as a modem on Windoze, install the Motorola Phone Tools, then Click Internet. It will automagically create a new Connection (with default Smart provider settings that comes with MPT).

Important Note: It takes some time after the 3G registration for the service to be activated.

I got the following actual bandwidth stats using http://www.speedtest.net/ at about 3am in the morning (the other endpoint is a Bayantel server in the Phil):
277kbps downlink (~35 kbytes/second)
109kbps uplink (~14kbytes/second)
Not bad!

At 9pm, uplink 47kbps (~6 kbytes/second), downlink 223 kbps (~28 kbytes/second).

If you have questions, post it as a comment.

Acer Aspire 4310, Acer CrystalEye webcam (064e:a101) on Ubuntu Linux

2007-08-17T03:19:00.000+08:00

The Ubuntu Linux version is:

$ cat /etc/issue.net
Ubuntu 7.04

The Linux kernel version is:

$ uname -a
Linux xxx-laptop 2.6.20-15-generic #2 SMP Sun Apr 15 07:36:31 UTC 2007 i686 GNU/Linux

The fresh install will detect the webcam:

dmesg | grep Crystal
[   22.116000] uvcvideo: Found UVC 1.00 device Acer CrystalEye webcam (064e:a101)

Camorama and other applications that do not support v4l2 will not work. The webcam driver uvcvideo (linux-uvc) supports v4l2 only. v4l1 is officially deprecated.

To test, you can use Ekiga softphone or to take webcam snapshots use luvcview.
Source code: http://mxhaard.free.fr/spca50x/Investigation/uvc/luvcview-20070512.tar.gz

You will also need libsdl1.2-dev (for SDL libraries) and build-essential (for building tools like gcc and make utility).

$ sudo aptitude install build-essential libsdl1.2-dev
$ wget http://mxhaard.free.fr/spca50x/Investigation/uvc/luvcview-20070512.tar.gz
$ tar zxvf luvcview-20070512.tar.gz
$ cd luvcview-20070512
$ make
$ make install

To make it user-friendly, create a Custom Application Launcher pointed to this script:

#!/bin/bash
# will place snapshots in Desktop
cd ~/Desktop
# will produce pnm: Netpbm PPM "rawbits" image data,
# instead of default MJPEG format that the webcam does not support
luvcview -f yuv

If you have questions, post them at http://www.ubuntuforums.org and point them from here.

Acer Aspire 4310, Broadcom (bcm43xx) chipset on Ubuntu Linux

2007-08-15T22:59:00.000+08:00

The Ubuntu Linux version is:

$ cat /etc/issue.net
Ubuntu 7.04

The Linux kernel version is:

$ uname -a
Linux xxx-laptop 2.6.20-15-generic #2 SMP Sun Apr 15 07:36:31 UTC 2007 i686 GNU/Linux

The fresh install will detect the WLAN hardware but will fail on initialization (use dmesg to see kernel messages):

$ dmesg
bcm43xx: Error: Microcode "bcm43xx_microcode5.fw" not available or load failed.
atkbd.c: Unknown key pressed (translated set 2, code 0xd4 on isa0060/serio0).
atkbd.c: Use 'setkeycodes e054 ' to make it known.

The first line looks for the Broadcom firmware. The second and third lines is a response to pressing the Bluetooth key.

Update: This forum [*] reports that there is a Bluetooth key for turning it on/off, but there is no Bluetooth chip!

[*] http://forums.whirlpool.net.au/forum-replies-archive.cfm/797583.html

The following is the output of lspci:

$ lspci
00:00.0 Host bridge: Intel Corporation Mobile 945GM/PM/GMS/940GML and 945GT Express Memory Controller Hub (rev 03)
00:02.0 VGA compatible controller: Intel Corporation Mobile 945GM/GMS/940GML Express Integrated Graphics Controller (rev 03)
00:02.1 Display controller: Intel Corporation Mobile 945GM/GMS/940GML Express Integrated Graphics Controller (rev 03)
00:1b.0 Audio device: Intel Corporation 82801G (ICH7 Family) High Definition Audio Controller (rev 02)
00:1c.0 PCI bridge: Intel Corporation 82801G (ICH7 Family) PCI Express Port 1 (rev 02)
00:1c.1 PCI bridge: Intel Corporation 82801G (ICH7 Family) PCI Express Port 2 (rev 02)
00:1c.2 PCI bridge: Intel Corporation 82801G (ICH7 Family) PCI Express Port 3 (rev 02)
00:1d.0 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI #1 (rev 02)
00:1d.1 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI #2 (rev 02)
00:1d.2 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI #3 (rev 02)
00:1d.3 USB Controller: Intel Corporation 82801G (ICH7 Family) USB UHCI #4 (rev 02)
00:1d.7 USB Controller: Intel Corporation 82801G (ICH7 Family) USB2 EHCI Controller (rev 02)
00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev e2)
00:1f.0 ISA bridge: Intel Corporation 82801GBM (ICH7-M) LPC Interface Bridge (rev 02)
00:1f.1 IDE interface: Intel Corporation 82801G (ICH7 Family) IDE Controller (rev 02)
00:1f.2 SATA controller: Intel Corporation 82801GBM/GHM (ICH7 Family) Serial ATA Storage Controller AHCI (rev 02)
00:1f.3 SMBus: Intel Corporation 82801G (ICH7 Family) SMBus Controller (rev 02)
02:00.0 Ethernet controller: Broadcom Corporation NetLink BCM5787M Gigabit Ethernet PCI Express (rev 02)
03:00.0 Network controller: Broadcom Corporation Dell Wireless 1390 WLAN Mini-PCI Card (rev 01)
0a:06.0 FireWire (IEEE 1394): O2 Micro, Inc. Firewire (IEEE 1394) (rev 02)
0a:06.2 Generic system peripheral [0805]: O2 Micro, Inc. Integrated MMC/SD Controller (rev 02)
0a:06.3 Mass storage controller: O2 Micro, Inc. Integrated MS/xD Controller (rev 01)

First, install bcm43xx-fwcutter. fwcutter is a tool which can extract firmware from various source files. It's written for BCM43xx driver files.

$ sudo aptitude install bcm43xx-fwcutter

You will get the following error message:

Preconfiguring packages ...
Selecting previously deselected package bcm43xx-fwcutter.
(Reading database ... 88014 files and directories currently installed.)
Unpacking bcm43xx-fwcutter (from .../bcm43xx-fwcutter_1%3a006-1_i386.deb) ...
Setting up bcm43xx-fwcutter (006-1) ...
--22:15:56--  http://boredklink.googlepages.com/wl_apsta.o
          => `wl_apsta.o'
Resolving boredklink.googlepages.com... 72.14.203.118
Connecting to boredklink.googlepages.com|72.14.203.118|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
22:15:57 ERROR 404: Not Found.

dpkg: error processing bcm43xx-fwcutter (--configure):
subprocess post-installation script returned error exit status 1
Errors were encountered while processing:
bcm43xx-fwcutter
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install.  Trying to recover:
Setting up bcm43xx-fwcutter (006-1) ...
--22:15:57--  http://boredklink.googlepages.com/wl_apsta.o
          => `wl_apsta.o'
Resolving boredklink.googlepages.com... 72.14.203.118
Connecting to boredklink.googlepages.com|72.14.203.118|:80... connected.
HTTP request sent, awaiting response... 404 Not Found
22:15:58 ERROR 404: Not Found.

dpkg: error processing bcm43xx-fwcutter (--configure):
subprocess post-installation script returned error exit status 1
Errors were encountered while processing:
bcm43xx-fwcutter

Just proceed and download the firmware/driver:

$ wget http://sidulus.textdrive.com/bcmwl5sys.zip

Extract the firmware from the driver:

$ sudo bcm43xx-fwcutter -w /lib/firmware ~/Desktop/bcmwl5.sys

This will create lots of new files in the /lib/firmware directory, this is the firmware part of the driver that will make your card work with ubuntu!

Also put the driver in the kernel folder:

$ uname -r
2.6.20-15-generic
$ sudo bcm43xx-fwcutter -w /lib/firmware/2.6.20-15-generic ~/Desktop/bcmwl5.sys

Your WLAN card should now work!

Resources
* http://boredklink.googlepages.com/ubuntuguide

If you have questions, post them at http://ubuntuforums.org/, and point them from here.

freenx on Debian etch, IBM Power5 ppc64

2007-06-03T16:23:00.000+08:00

There is still no package in the repos for freenx unlike OpenSUSE. You can retrieve the sources from here (thanks to Fabian Franz for the pointer!):

http://kern.nl/freenx/nx_2.1.0dol1.tar.gz
http://kern.nl/freenx/freenx_0.6.0dol1.tar.gz

You can download additional packages (source code) (e.g. for nxagent, nxauth) not included in the previous tgz from here:

http://www.nomachine.com/sources.php

For consistency's sake, I packaged all sources (sans Fabian's) that I have downloaded but I cannot assure you that they are the latest stable (as of this time). I've done a lot of minor tweaks. It will be cumbersome to document them. Post your questions here if you encounter a problem.

After the installation and configuration, I got this error in the client (version 2.x):

NX> 1000 NXNODE - Version 1.5.0-60 OS (GPL)
NX> 1004 Error: NX Agent exited with exit status 1.
NX> 105 NX> 596 Session startup failed.
NX> 1006 Session status: closed

The possible fixes are documented in this wiki. But apparently the error in my case is something related to a missing shared library being used by nxagent. Make sure you check that all libraries are resolved using the command ldd /usr/NX/bin/nxagent and fulfill the missings. Also make sure that you are using the most updated node.conf using the command nxloadconfig --userconf.

IE's Unknown Runtime Error in prototype.js Line: 697 Char: 9

2007-06-02T08:22:00.000+08:00

IE sucks again! Without a decent debugger (like Firebug), I have to read prototype.js (version: 1.4.0_pre11) and spend hours trying to pinpoint the fault. This alien error appears to be this block:

    if (receiver) {
     if (this.options.insertion) {
       new this.options.insertion(receiver, response);
     } else {
       receiver.innerHTML = response;
     }
   }

Particularly this line:

receiver.innerHTML = response;

I am trying to rewrite a tbody of a table but IE does not like that. This link is insightful (RobG):

...don't use innerHTML to modify tbody, tr, th or td elements, use DOM (they actually refer to a 'table object model', but DOM is a better bet).

If you are going to use innerHTML near a table, write the entire table or just cell content, no in between.

Debian 4.0 r0 (Etch) installation on IBM System p5 510 inside LPAR

2007-05-24T21:38:00.000+08:00

For some reason, the usual CD/DVD installation does not work in LPAR. I tried both Debian 4.0r0 (netinst and complete cd-1) and OpenSUSE 10.2 (dvd). The errors are known. I reported the OpenSUSE bug here [1], and the Debian bug has been reported here [2]. Update: This workaround should also work in OpenSUSE. Select the logical volume where the installer was disk dumped (dd) as the installer media. This can be done in the Main Menu (4>1>3).

There is a workaround documented by Gottfried Scheckenbach in debian-boot list [3]:

Of interest for users of VIO (via HMC or IVM):
I have found a way around burning a new disc (because I'm not physical near to the machine): I downloded the iso onto the VIO server and putted it via dd into a newly created virtual disc aka LV on the VIO. I attached this virtual disc as secondary hard disc to the LPAR and booted the LPAR using the defictive cdrom. After running into the missing files problem on initializaton of the installer I remounted /cdrom from this second hard disc.

I clarified the 'dd' command from him and he pointed me to the command `oem_setup_env`:

the padmin user has it's own PATH environment - there you see no dd (nor the other usual AIX stuff). But if you switch to root (with oem_setup_env), you can use all normally available AIX commands. And you must be root to write into the LV device. If you look inside /dev you find two devices witch contain the name of your lv - you have to use the block device, not the character one.

To use AIX commands like dd, login as root using the command `oem_setup_env`. This is another helpful documentation in disk dumping the cd-1 ISO image [4].

This is a step by step documentation on the workaround:

0. The assumptions are: you already are inside the VIO server as root, you already have created storage pools (one of which is the rootvg where VIO is located), also you have already created the partition where to install Linux, via IVM.

1. We create the logical volume from one of the storage pools. In this example, we create a logical volume named 'vdiso' from a storage pool named 'LinuxPoolvg'. Since the cd iso is about 700mb, I'll peg the size of the logical volume to 1gig.

$ mklv -lv vdiso LinuxPoolvg 1G

2. Copy the cd iso (debian-40r0-powerpc-CD-1.iso) to the VIO server. I used ftp. (Default user/password: padmin/padmin)

3. Disk dump the ISO to the logical volume as documented by Gottfried and here [4]. If you look inside /dev you find two devices which contain the name of your logical volume. Make sure you use the block device, not the character one.

$ oem_setup_env
# ls -l /dev/*vdiso
crw------- /dev/rvdiso
brw------- /dev/vdiso

# dd if=debian-40r0-powerpc-CD-1.iso of=/dev/vdiso bs=8M

4. Attach the logical volume to the concerned partition via IVM. This is a resourceful guide in managing your partitions using IVM [5]. The attached logical volume will be seen as /dev/sdb1 (you can verify the device name later by using `dmesg` to check for kernel messages on the attached device).

5. Create a virtual terminal (vt) connection to a partition. In this example, the id of the partition is 2:

# exit
$ mkvt -id 2

To remove the vt:

$ rmvt -id 2

To exit the vt and go back to the shell:

~.
(tilde period)

6. Activate the partition using IVM. You should see the boot process from the newly created virtual terminal connection. You should also see yaboot bootloader. Type `install64` to load the 64-bit kernel of the Debian installer and initiate an installation.

7. The installation should fail as reported by Gottfried [2], a failure to read from the cd media. Go back to the Debian installer main menu and scroll down to 'Execute a shell'. You will be given a busybox ash shell. Verify the Linux device name of logical volume (mentioned earlier in step 4) using `dmesg`. Mine is /dev/sdb1.

8. Unmount the cd media mounted in /cdrom and replace it with the logical volume created in step 1:

Busybox ASH:
# umount /cdrom
# mount /dev/sdb1 /cdrom
# exit

9. You should be brought back to the main menu. Re-start the installation from the step 'Load installer components from CD'. Select all components.

10. There will be a problem detecting the PPPoE concentrator. I just skipped this step and continued.

11. Gottfried reports here [3] that there will be a problem with ext3 reformatting, so we use reiserfs instead.

12. Please read Gottfried's other notes (e.g. yaboot placement) for other possible errors. I encountered a minor problem with the default boot sequence but it's as simple as specifying the newly-installed partition in the SMS menu.

If you have other problems, you can drop a comment here or report it as a bug to the concerned Debian list.

[1] link1
[2] link2
[3] link3
[4] link4
[5] link5

Resetting admin password in IBM System p5 510 Express ASMI

2007-05-22T20:45:00.000+08:00

These are the steps in resetting the admin password:

0. Re-route stored static in your body via an ESD wrist strap to a
metallic element.

1. Look for the 2 toggle switches and service processor batt. The batt
should be in front of the Power Supply 1 and Power Supply 2 (codes: E1
and E2, see Rear Location Codes on the cover plate). The "very tiny"
toggle switches should be in the area of P1-C14 slot.

I forgot the exact sequence but it should be a combination of the ff. step (2):

2. Remove the battery, toggle the switches to the opposite direction.
Allows some time for the caps to discharge.

3. Move back the toggle switches and put back the batt in its place.

4. Assign your PC to Class C subnet (i.e. masked 255.255.255.0):
IPaddr: 192.168.2.x for HMC1 or
IPaddr: 192.168.3.x for HMC2

5. Ping HMC1 or HMC2. Access the web interface using the default address:
http://192.168.2.147 (for HMC1) or
http://192.168.3.147 (for HMC2)
Note: Sometimes you have to force the https protocol:
Example: https://192.168.2.147 (for HMC1)

6. The default 'admin' password is: admin
The default 'general' password is: general

7. You are required to change the admin password before being allowed
to change ASMI settings.

ld: unrecognized option '--hash-style=both'

2007-05-21T11:01:00.000+08:00

gcc -Wl,-Map=contiki.map,-export-dynamic  testv6.co obj_linux-native/socketdev_listener.o \
contiki-linux-native.a  -o testv6.linux-native
/usr/local/bin/ld: unrecognized option '--hash-style=both'
/usr/local/bin/ld: use the --help option for usage information
collect2: ld returned 1 exit status

If you look closely, the error is something related to the local gcc not using the host's linker (ld).

$ which gcc
/usr/bin/gcc

$ which ld
/usr/local/bin/ld

For some reason, I messed my compiler path. To synchronized gcc to use the host's dynamic linker (i.e. /usr/bin/ld), set the environment variable COMPILER_PATH to /usr/bin.

$ export COMPILER_PATH=/usr/bin
$ echo $COMPILER_PATH
/usr/bin

$ gcc -print-prog-name=ld
/usr/bin/ld

Upgrade: Ubuntu Edgy (6.10) to Feisty (7.04)

2007-05-12T22:04:00.000+08:00

I broke my rule of using the Ubuntu version one step backward from the current development release. My main interest is the stable ntfs driver with write capability. The upgrade went smooth except for a minor issue related to shared-mime-info package and a custom package (freemind). I reported the fix here.

Upgrade woes

2007-05-01T17:41:00.000+08:00

I am sharing some of the notes that I've jotted down. This might be helpful to people who are upgrading from the long-term supported (LTS) Ubuntu Linux Dapper Drake (6.06.1) to Edgy Eft (6.10). My own cycle in upgrading is one step backward from the current development release. The current release is Feisty Fawn (Ubuntu 7.04). I use the command update-manager -c -d to dist-upgrade. This must be run as a privileged user.

Error 1:
Could not fetch the package liboobs. This is something related to our Internet filter in the university. So, I have to manually download the liboobs (edgy eft version) and place it in /var/cache/apt/archives/.

Error 2:
Could not install /var/cache/apt/archives/samba_3.0.22-1ubuntu4.1_i386.deb. The error log is: subprocess new pre-removal script returned error exit status 102. At first, I ignored the error but this will come up again later.

Error 3:
The upgrade aborts now. Your system could be in unusable state. A recovery was run (dpkg --configure -a). installArchive() failed.

I checked the logs at /var/log/dist-upgrade. main.log reports the samba error (see Error 2). This is the fix to it:

# cd /etc/rc2.d/
# ls -al
(At this point, you need to check for the broken samba symlink. Remove the symlink.)
# rm K09samba
(Alternatively, use the unlink command.)

To continue with the dist-upgrade: update-manager --dist-upgrade

Error 4:
Subprocess post-installation script returned error exit status 2. installArchive() failed.

This is the error log in /var/log/dist-upgrade/apt.log:
ERROR: root: got an error from dpkg for pkg: 'firestarter': subprocess post-installation script returned error exit status 2.

To get more debugging message, I enabled the following flag and rerun dpkg:
export DEBCONF_DEBUG=developer; dpkg --configure -a

The error is related to firestarter failing to start its daemon. The error occurs when running the script /etc/init.d/firestarter start. To see more debugging message, remove the redirection of the following line in the init.d script /etc/init.d/firestarter start:
(commented:)
# $FS_CONTROL start > /dev/null
(new line:)
$FS_CONTROL start

The offending line is in the script /etc/firestarter/firestarter.sh. It aborts when any network interface called in /etc/firestarter/configuration is not yet initilized. In my case, it is eth1 (wlan). I just assigned an IP address to the offending interface.

The next offending line in /etc/firestarter/firestarter.sh is related to the DHCP not starting properly. Just disable DHCP for NATs when you enabled NAT in /etc/firestarter/configuration. In /etc/firestarter/configuration, set the following lines to off:

# Enable DHCP server for NAT clients
DHCP_SERVER="off"
# Forward server's DNS settings to clients in DHCP lease
DHCP_DYNAMIC_DNS="off"

To continue with the dist-upgrade: update-manager --dist-upgrade

Error 5:
After the dist-upgrade and reboot, my X session failed to start. The log follows:

/etc/X11/Xsession.d/50xorg-common_determine-startup: 48: /usr/bin/tpaneld: not found
mkdtemp: private socket dir: Permission denied

The fix to it is to chmod the /tmp directory to a+w: chmod a+w /tmp (as privileged).

Error 6:
Firefox 2 complains when installing an addon in its error console: installLocation has no properties.

The fix to it is to rename extensions.rdf:
$ mv ~/.mozilla/firefox/{profile}/extensions.rdf extensions.rdf.orig

If you have questions, post them http://ubuntuforums.org/ and leave a comment. I will answer you from there.

Default AllowOverride directive in Ubuntu 6.06

2007-04-13T16:38:00.000+08:00

This might help people who are having problems with the rewrite module in Apache 2. The AllowOverride directive is actually set to None by default in Ubuntu 6.06.1. To allow the reading of rewrite directives in a .htaccess, AllowOverride must be set to All. This statements explains it well:

When this directive is set to None, then .htaccess files are completely ignored. In this case, the server will not even attempt to read .htaccess files in the filesystem.

Reference: http://httpd.apache.org/docs/2.0/mod/core.html#allowoverride

Replacing xscreensaver with gnome-screensaver in Xfce

2007-01-31T03:16:00.000+08:00

By default, xfce screensaver requires xscreensaver. You have the _option_ to remove xscreensaver using the following command (as privileged):

apt-get remove xscreensaver

To install the gnome-screensaver use the following command (as privileged):

apt-get install gnome-screensaver

To auto-start the gnome-screensaver, add it as an Autostarted Application:

Xfce menu > Settings > Autostarted Applications

The command for starting the gnome-screensaver daemon is:

gnome-screensaver

To be able to use the action button "Lock screen" to start gnome-screensaver immediately and lock your screen, modify the file /usr/bin/xflock4:

#xscreensaver-command -lock || xlock $*
gnome-screensaver-command --lock exit 0

Note that the original xscreensaver command is now commented. Backup the original copy of xflock4 (as privileged):

cp /usr/bin/xflock4 /usr/bin/xflock4.orig

Hope that helps.

If you have questions, post them at:
http://www.linuxquestions.org/questions/showthread.php?t=458516
and leave a comment.

File renaming in BASH via string handling

2007-01-25T21:56:00.000+08:00

#!/bin/bash

#remove spaces
for i in *.wma; do
  mv "$i" `echo $i | tr ' ' '_'`;
done

#remove uppercase
for i in *.[Ww][Mm][Aa]; do
  mv "$i" `echo $i | tr '[A-Z]' '[a-z]'`;
done

#convert file names
for i in *.wma; do
  mv "$i" "`basename "$i" .wma`.mp3";
done

#rename test1a, test2a, test3a
#to t1a, t2a, t3a
for i in test*a; do
  substring1=${i:0:1}
  substring2=${i:4:1}
  mv $i $substring1$substring2'a'
done;

Javascript appendChild problems

2006-12-02T21:08:00.000+08:00

We all know IE really sucks, no contest! I've been playing with Lightbox Gone Wild by Chris Campbell. He uses the technique from Lightbox JS by Lokesh Dhakar. This problem appears in Internet Explorer 6 when using the element.appendChild (child) method. The function looks like this:

function addLightboxMarkup() {

  bod = document.getElementsByTagName('body')[0];

  overlay = document.createElement('div');
  overlay.id = 'overlay';

  lb = document.createElement('div');
  lb.id = 'lightbox';
  lb.className = 'loading';
  lb.innerHTML = '<div id="lbLoadMessage">'+'<p>Loading</p>'+'</div>';

  bod.appendChild(overlay);
  bod.appendChild(lb);

}

If the function is loaded in the middle of the document (in DOM: document object), I get this error in Internet Explorer:

Internet Explorer cannot open the Internet site http://localhost/site.

  Operation aborted

This problem is probably due to the function being called before the page has finished loading [1].

The fix is to load the function after all the document (in DOM: document object) has been loaded. One way is to use the onload attribute of the body tag.

Grub2 on soekris net4801

2006-09-27T04:15:00.000+08:00

Outline
I. Requirements
II. Compile via source
III. Installation on target device
IV. Grub configuration
V. Soekris net4801 configuration
VI. Minicom configuration
VII. Related resource - Debian/GNU Linux installation

Requirements
- Download grub2 (latest alpha! build is 1.94)
- build-essential (glibc6, gcc4, make, etc), depends on your Linux installation
- minicom for terminal emulation
- I am installing grub2 on a cf.

Installation via source
- Download grub2.
- Auto-configure with serial enabled and install root directory set to /usr/local:
./configure --prefix=/usr/local --enable-serial

- Build:
make

- Install binaries and libraries:
make install

Installation on target boot device
* grub-install - installs grub2 on your device
* grub-setup - set up images to boot from your device

- grub-install: (grub-install --help to see available options)

Example:

grub-install --root-directory=/media/usbdisk /dev/sdb1

Note 1: Make sure that you are using the binary that you just compiled and installed. Earlier, I indicated /usr/local as my prefix. In this case, the binaries can be found in /usr/local/bin and /usr/local/sbin.

Note 2: When I run the command, I get the following errors:

grub-probefs: error: Cannot get the real path of `/dev/fd0'
Auto-detection of a filesystem module failed.
Please specify the module with the option `--modules' explicitly.

The fix is to explicitly indicate the module ext2 (I am installing on an ext2 filesystem) and skip the floppy probing. I skip the floppy probing my copying a device.map without the /dev/fd0 mapping to the folder indicated in --root-directory=. This command copies the device.map to its proper location:
cp /its_dir/device.map /media/usbdisk/boot/grub

My device.map looks like this:

(hd0)   /dev/hda
(hd1)   /dev/sdb

The working command is as follows:

./grub-install --modules=ext2 --root-directory=/media/usbdisk /dev/sdb1

- grub-setup:

Example:

grub-setup -d /media/usbdisk/boot/grub -v -r "(hd1,0)" \ 
-m /media/usbdisk/boot/grub/device.map "(hd1)"

Note: Grub has a different naming scheme for devices. hd1 is mapped to /dev/sdb as indicated in device.map. The 0 (zero) denotes the first partition of /dev/sdb (i.e. /dev/sdb1).

Grub configuration
Sample grub configuration file in /{root_device_dir}/boot/grub/grub.cfg

#serial --unit=0 --speed=19200 --word=8 --parity=no --stop=1
#terminal serial

# Timeout for menu
#set timeout=10

# Set default boot entry as Entry 0
set default=0

# Entry 0 - Load Linux kernel
menuentry "My Linux Kernel on (hd0,1)" {
    set root=(hd0,1)
    linux /vmlinuz root=/dev/hda2 console=ttyS0,9600
    initrd /initrd
}

# Entry 1 - Chainload another bootloader
menuentry "Chainload my OS" {
    set root=(hd0,3)
    chainloader +1
}

Note: Uncomment the first two lines if you want a serial terminal for grub2. Refer to the Grub2 documentation for the available commands.

Soekris net4801 configuration
The default baud rate of grub2 is 9600. You can set the parameter in the Monitor (Ctrl+P) using the command:
set ConSpeed=9600.

Minicom configuration
This is the content of my minicom configuration file in /etc/minicom/minirc.dfl:

pu port             /dev/ttyS0
#pu baudrate         115200
#pu baudrate         19200
pu baudrate         9600
pu bits             8
pu parity           N
pu stopbits         1
pu rtscts           No
pu xonxoff          No

NOTE: The last two lines are important to disable the software and hardware flow control in minicom.

It's now time to boot!

Related Resources
To install an OS, you can follow this documentation to install Debian GNU/Linux.

Ubuntu network install with Intel Boot Agent

2006-09-10T03:15:00.000+08:00

I have an IBM Thinkpad Transnote that does not have any CD drive. I am left with the network install option. This was an easy task when I was still using Mandriva (formerly Mandrake) because the installer includes the images for bootable floppy drives. With Ubuntu, you are left with an option of using your motherboard / Ethernet card's booting capability. My options are: etherboot and the on-board Intel Boot Agent that supports PXE to boot. The following steps will guide you in booting the Ubuntu installer using the Intel Boot Agent. Note that the Ubuntu installer is just a bootstrap, you will have to download the rest of the packages on the Internet. Alternatively, I think you can hack the installer to get the packages from a local host (but this is out of the scope).

Terms

* The client is the laptop that has to be installed with Ubuntu.
* The server serves the client (duh!). I am running Ubuntu Dapper (6.06).

DHCP server

We need a DHCP server to serve the client with the network settings (IP, router, DNS addresses). I used Ubuntu's dhcpd. My /etc/dhcpd.conf contains the following lines:

option subnet-mask 255.255.128.0;
default-lease-time 600;
max-lease-time 7200;
option domain-name-servers 10.32.1.7;
option routers 10.36.0.1;
allow booting;
allow bootp;

#my IBM Thinkpad
subnet 10.36.2.0 netmask 255.255.255.0 {
        host premthinkpad {
                hardware ethernet 00:10:A4:78:C2:D5;
                fixed-address 10.36.2.90;
                filename "pxelinux.0";
                next-server 10.36.2.217;
        }
}

DHCP-BOOT

I used another DHCP server dnsmasq which supposedly serves the purpose of the line:

filename "pxelinux.0";

in the previous configuration. I am not sure which one is working so just install these two daemons (dhcpd and dnsmasq).

TFTP server

Install a tftp server. I used tftpd-hpa, it supports the PXE protocol.

Ubuntu's netboot

Download Ubuntu's netboot tar file. I got the links from this page [1].

Ubuntu Dapper netboot archive

Place the boot files to the tftp folder:

tar -xvzf netboot.tar.gz -C /var/lib/tftpboot/
chown -R nobody:nogroup /var/lib/tftpboot

Enable the tftp server using the xinetd service. Add the ff. lines to /etc/xinet.d/tftp:

service tftp
  {
        disable                 = no
        socket_type             = dgram
        wait                    = yes
        user                    = root
        server                  = /usr/sbin/in.tftpd
        server_args             = -v -s /var/lib/tftpboot
        only_from   = 10.36.2.0/23
        interface   = 10.36.2.217
  }

If the file does not exist, create it. Restart xinetd:

killall -HUP xinetd

Intel Boot Agent

Configure the BIOS to boot using the Intel Boot Agent. You should see a DHCPD discover request sent by the client. Then, it will load the Ubuntu installer.

Good luck!

Contact

If you have questions, post them at Ubuntu Forums, then leave a comment.

Resources

* [1] https://wiki.ubuntu.com/Installation/Netboot
* Thinkpads without CD-ROM drive
* Ubuntu network install

Linux on a Compaq Presario V2000

2006-09-10T03:03:00.000+08:00

GNU/Linux (Ubuntu 5.10) on a Compaq Presario V2000

How to make the volume keys work

Objective: Map the volume keys (Volume up/down/mute) to amixer (command-line mixer for ALSA soundcard driver).

Find the keycode of the three keys using xev. After executing xev as an ordinary user in the terminal, it creates a window and then asks the X server to send it events whenever anything happens to the window (such as it being moved, resized, typed in, clicked in, etc.).

Example: after pressing the keyboard key m, you will be see the following report:

KeyPress event, serial 27, synthetic NO, window 0x2800001,
    root 0x48, subw 0x0, time 10163530, (97,69), root:(929,430),
    state 0x0, ''keycode 58 (keysym 0x6d, m)'', same_screen YES,
    XLookupString gives 1 bytes: (6d) "m"

KeyRelease event, serial 27, synthetic NO, window 0x2800001,
    root 0x48, subw 0x0, time 10163645, (97,69), root:(929,430),
    state 0x0, ''keycode 58 (keysym 0x6d, m)'', same_screen YES,
    XLookupString gives 1 bytes: (6d) "m"

These two events are the pressing and de-pressing of key m. The keycode is 58 and it is symbolically mapped to character/string m.

Try pressing the three keys (volume up/down/mute), you will most likely get the following keycodes:

* 174 - volume down
* 176 - volume up
* 160 - mute

with no symbolic mapping. To map these keycodes, create the file in your home folder ~/.Xmodmap with the following mapping:

keycode 174 = XF86AudioLowerVolume
keycode 176 = XF86AudioRaiseVolume
keycode 160 = XF86AudioMute

Use your window manager's (e.g. Gnome metacity, mine is Xfce) key shortcut manager. This allows you to map a keyboard shortcut to a command.

Example: (applicable only in Xfce)

Settings > Xfce 4 Settings Manager > Window Manager > Keyboard (tab)

Under command shortcuts, click none to add a command, then simulate the key (i.e. pressing the volume up/down/mute key)

The commands to adjust the mixer (using amixer) are the following:

* /usr/bin/amixer sset Master toggle - toggle mute
* /usr/bin/amixer sset Master 1- unmute - decrease vol
* /usr/bin/amixer sset Master 1+ unmute - increase vol

Master is the (grand) master mixer control.

Hope that helps.

Contact

If you have questions, post them at Ubuntu Forums, then leave a comment.

Resources
* Linux (Ubuntu 5.10) on a Compaq V2000
* Ubuntu GNU/Linux on the HP Compaq nw8240

Migration: The Spiral of (In)Security

2006-02-21T14:20:00.000+08:00

by Claudia Aradau

E-journal. ISSN 1505-1161. March 2001.

http://venus.ci.uw.edu.pl/~rubikon/forum/claudia1.htm

Sourced from http://web.archive.org

http://web.archive.org/web/20070403192142/http://venus.ci.uw.edu.pl/~rubikon/forum/claudia1.htm

Jef Huysmans, in an article on migration and European integration, has noted that migration has recently become �located in a security logic�.[1]Discourses of political leaders, feature articles in the media, statistics and communications by police and customs authorities abound in references to the increasing dangers of immigration. Migration, Huysmans argues, is discursively constructed as a threefold danger, in that it posits �existential threats� to the welfare system, to the public order, and to the cultural identity of the community/nation.[2] These new discourses spanning the �European agenda� had not gone unnoticed by the academia. As early as 1993 the Copenhagen School tackled the problem of migration understood in terms of a threat to societal identity. Migration conveniently seemed to fit the �societal security� of Buzan�s famous five-sector formula (with the necessary shift in referent object from state to society). The question whether migration is a �true� or �false� threat was no longer considered relevant as Waever, et al. strove to uncover the security dynamics that turned migration into a �security issue�.[3] In Foucauldian terminology, the Copenhagen School (Waever especially in his later work)[4] were interested in the truth effects of discourse rather than in its veracity. However, Didier Bigo has recently reproached Waever that by focusing exclusively on the discursive practices, he has overlooked the very important non-discursive practices of security formation. Securitization, Bigo contends, cannot be separated from non-discursive practices as �it is of the same nature as non-discursive practices, technologies at work, effects of power, struggles and especially institutional competition within the security field�.[5]

This paper will show that securitization of migration goes beyond the �discursive practice� and that migration is embedded in a �security continuum�[6] which brings together and gives coherence to a set of otherwise heterogeneous practices. After a review of� Waever�s theory, I will locate some of the critiques brought against him especially by Bigo and Huysmans. Then I will look at the securitization of migration in France as both a discursive and non-discursive practice. The non-discursive addendum to Waever�s theory of security as a speech act sheds light on the techniques mobilized to support the securitizing discourse. �Desecuritization� as a panacea for spiraling (in)security cannot be successful unless the whole paraphernalia of securitizing techniques is taken into account.

For Waever, migration as an instance of securitization poses an �existential threat� to the identity of society. Migration comes thus under the famous umbrella of �societal security�[7]. The linkage between the ideal-type �societal security� and migration is uneasy and it raises a number of problems of which the Copenhagen School seems acutely aware. Like societal security, migration should work by �spill-over� effects (a security issue is voiced at the level of society and then is taken up by the state). For the Copenhagen School there is no saying as to �who will voice the "societal security" concerns�.[8] As long as the dynamics of security is visible, securitizing actors such as Le Pen�s Front populaire in France, Vlaams Blok in Belgium, as well as other right-wing extremists would be categorized as successful �security speakers�. As Waever points out in a response to Johann Ericksson�s article, �Observers or Advocates�, in Identity, Migration and the New Security Agenda in Europe, �[they] consider the risks of legitimizing non-state security policy, theensuing de-legitimization of the state and the potential empowerment of various self-declared �voices of society�, including fascist and other anti-foreigner ones�.[9] However, they argue that it is a risk they have to take as the concept of �societal security� helps them sharpen the analytical tools used in the understanding of security.

Potential speakers of security concerns are not a �risk� per se according to Didier Bigo. Felicitous enunciation of security issues is not sufficient to turn one into a successful security speaker. Certain voices are inherently endowed with more weight than others due to the �symbolic capital�, which is the equivalent of positions of authority. In the wake of Bigo�s criticism, in the 1998 book, Security: A New Framework for Analysis, Waever takes up the notion of �social capital of the enunciator�.[10] Bigo�s �symbolic capital� nevertheless differs from Waever�s �social capital� in the sense that it links authority to a special kind of knowledge, which is needed to support and perpetuate it. The state is no longer the unitary actor praised by realist theories of international relations. There are positions of authority within the state, from which �security issues� can be voiced. This multiplicity of positions from which security discourses can be voiced leads to struggles between competing discourses to gain legitimacy and to become the discourse. The securitization process is not reduced to simple rhetoric, but implies extensive �mobilization� of resources to support the discourse. It depends on the capacity of actors to produce a �power/knowledge�[11] that brings together threats from different sectors (terrorism, crime, unemployment etc.) in the image of the immigrant. The �power/knowledge� links all the threats in a coherent discourse that provides an explanatory grid of the world.[12] The actors come up with statistics, relate them, establish on �scientific bases� the �truth� concerning immigration. Those actors who are endowed with both the �symbolic capital� and the capacity to inter-link heterogeneous discourses are the �professionals of security�.[13] Concerned with the production of power/knowledge, Jef Huysmans has also acknowledged that the construction of migration into a security issue involves the mobilization of particular institutions as the police and of a particular form of knowledge:

�Security agencies, such as the police, do not develop purely reactive policies triggered by terrorism, drugs or migrations, for example. The knowledge they produce and the technologies they deploy also fabricate the threat migration represents (for example, a statistical representation of asylum seekers or of illegal migrants in a discourse on social instability, or, categorizing migration together with drugs trafficking, international criminality, and terrorism.�[14]

The institutions that father professionals of security are actually bureaucratic ramifications of the state. Deprived of its Cold War exterior enemy, the bureaucratic fragmented state needs to find another �enemy� in order to fulfil its essential role of society protector. The enemy outside becomes the enemy within, disrupter of order and harmony. But this time the enemy is no longer easily identifiable; it has become the category of the immigrant.

�The new enemy is not clearly identifiable nor associable to a particular state�, and, therefore, potentially omnipresent, transnational and already infiltrated; the police (and especially the secret services are the obvious agents of defense against a threat which leaves the army powerless.�[15]

On the one hand, the capacity to produce security knowledge depends on the institutional positions that the professionals of security hold; and on the other, the production of knowledge is necessary to maintain these positions. Anthony Downs has adopted the concept of �territoriality� to characterize the activity of bureaucracies which, like animals or nations, �stake out and defend territories surrounding their nests or "home bases"�.[16] A territory in which to establish positions of power is the guarantor of institutional survival; territory should nevertheless be seen as a �symbolic territory�, a set of problems to be dealt with and solved. The threat posed by the �immigrant� requires the professionals of security to turn their �know-how� into discourse/practices of assurance/reassurance, protection and anticipation of the danger.[17] They reinforce legal measures and multiply identity checks (not only at the border, but also across the whole territory of the state) to make themselves visible in the roles of protectors. The danger is ominous, but the police, for example, are taking care of it.

In order to integrate heterogeneous facts into a �security continuum�/coherent discourse, the professionals of security draw on the ordinary experiences of everyday life. Ordinary threats are constructed in a �spiral of insecurity� to culminate in the image of the immigrant as the nexus of all fears. Thus crime, immigration and illegality become connected. Waever has also noticed that certain objects which are considered threatening (tanks, hostile sentiments etc.) are �facilitating conditions� for successful securitization.[18] Securitization of migration links together everyday fears into an over-arching fear of migratory flows and migration. The professionals of security create an artificial continuity between disparate series of events; they need to persuade that the danger is all-pervasive, it is drawing near and needs to be dealt with. Statistics show that not only is the number of immigrants increasing, thus endangering the integrative capacities of the society, but they are perpetrators of criminal deeds: they pickpocket, steal, rob, rape, etc. At this point, the security agencies (local and national police forces, customs authorities, and intelligence services) struggle on the security battlefield to eradicate the threat. However, will to fight is no longer sufficient; new practices and institutions need to be created to deal with this quasi-ubiquitous danger. The army is powerless in the face of an enemy who is no longer a superpower, but a �volatile� enemy for which a paraphernalia of techniques of localization and identification need to be deployed. Thus, the establishment of a system of surveillance disrespectful of individual privacy becomes legitimized, acquires legal acquiescence and makes �the professionals of security� thrive. Actually surveillance is legitimized in as much as it is targeted at the other, the enemy, the migrant, although it does not spare the nationals either. Marrying an immigrant, for example, can turn the national into a possible �accomplice�. The logic of suspicion behind this reasoning is the same as for dealing with criminals and their accomplices. Ironically, this kind of logic does not spare even the judges who are suspiciously lax towards the immigrants. Actually the system of surveillance built on this logic of suspicion is the condition of exception, which breaks the rules of normal politics.

Securitization does not nevertheless remain the exclusive domain of the professionals of security; it is taken up by political leaders, too. The promise of a threat-free society can be an inspired way to win votes. France, for example, has witnessed this strategic exchange between the professionals of security and the professionals of politics. The official discourse of politicians and, by extension, the legal discourse, explicitly link migration with fraud, clandestinity, delinquency and integration to construct a complicated network of signifiers with a sole signified, namely the securitized migrant. It is interesting to notice that the French equivalent of �immigrant� is �immigr� (roughly �immigrated�), which freezes the migrant�s identity in an everlasting alterity. The migrant is doomed to be the other, source of the menace, never one of us. If �immigrant� hints to a temporal situation, �immigr� is definitory and fixed. The much contested Debr� law in France not only legalized the juridical definition of the �immigr� category, but it also conspicuously reinforced the powers of the national police. Two of the fundamentally innovative measures as presented by M. Debr� himself concern the new competencies acquired by the police forces. By virtue of article 3 of the Debr� law, police officers are allowed to proceed to car checks on an area of 20 km around the internal borders of France. The measure is deemed necessary to stop the �recently detected practices of clandestine immigration�.[19] The other fundamental measure laid down in article 10 was the extension of identity controls by police authorities on production and construction sites, with the exception of domiciles. This measure would supposedly entail �significant progress in the fight against clandestine work and illegal employment of foreign work force�.[20] By virtue of the same article, the police authorities are entitled to have access to all �useful documents�. Moreover, the law opens the possibility for the �immigr� to be labeled as a �menace to the public order� and thus be refused the �carte de s�jour�.[21] Monica den Boer has emphasized the labeling and stereotyping undertaken by the police, as well as the creation of a �double suspicion� on the immigrant by explicitly criminalizing it. On the one hand, criminalization of migration, as the Debr� law makes crystal clear, �allows for a slippage of the allegation of illegality to much larger numbers of (legal) immigrants, which furthermore allows for the a priori justification of systematic controls by law enforcement authorities�.[22] And, on the other, it clothes the migrant�s status in an ambiguous �legality�. The migrant therefore is glued a label, which collectively identifies the category of migrants as threatening.

The official discourse of politicians in France and the institutional one go hand in hand. Alongside the legislative proliferation begun in the early �90s, France has also witnessed extensive institutional formation and reallocation of competencies. In 1996 a Central Office to Fight Against Clandestine Migration was established, while the customs authorities and frontier police were expressly relegated extra-competencies to deal with migration. Under the name of DICCILEC, they were to become a special agency of the national police, having networks in the territory to survey the high-risk regions. The reform of the national police implied the same extension of competencies, almost all special agencies becoming entitled to deal with migration in one way or another. Moreover, police techniques did not stop at the national level, they went on to create a network of surveillance at the European level (informal European cooperation groups on terrorism, Stars groups, Clubs of Berne and of Vienna, MAG 92, Europol). This continuous reinforcement of police competencies and the cross-European police cooperation made Bigo speak of a �police archipelago�[23], uneasy reminiscence of Soljenytsin�s �gulag archipelago�.

The �gulag� could as much describe a society afflicted by excessive securitization, moving towards �closure against things perceived as threatening�, as Buzan and Waever have remarked in a recent article.[24]A society assaulted by threats of all kind lives in a permanent fear. Constructing migration, for example, into a �security issue� does not paradoxically lead to a state of �security� for the society, but to an ever-increasing state of �insecurity�.[25] Migration cannot just be stopped, the control of borders is illusory, and therefore the threat becomes self-perpetuating. The migrants within are an inescapable threat, the ultimate Janus-faced enemy. The securitization of migration actually reifies identity. In the case of France, the �immigr� is denied the possibility of being anything else but a �immigr� once the �imagined community� becomes impermeable in terms of identity. But the societal identity undergoes the same kind of process; it becomes frozen too in the desperate attempt at preservation. The Copenhagen School seems aware of the vicious circle created by reified identities:

�For threatened societies, one obvious line of defensive response is to strengthen societal identity. This can be done by using cultural means to reinforce societal cohesion and distinctiveness, and to ensure that the society reproduces itself effectively�.[26]

Securitization of migration thus leads to an ongoing clash between identities which have become reified. Paradoxically, identities are constructed only to be eventually reified. Securitization makes change in identity impossible. From �fluid or changing�, identity turns into �solid and constant� (solid and constant should be read as inflexible).[27] Clothing migration in security logic proves thus to be a dangerous undertaking in the sense that the only solution that exists is �ever more security� triggered by �ever more insecurity�. The reification of identities creates the premises for spiraling (in)security within society, which becomes a Hobbesian �state of nature� imbued with the logic of war/security. Migration becomes thus embedded in the logic of what Jervis called the �spiral model� with reference to inter-state security dilemma.[28] While Jervis� model presupposes benign intentions on the part of the states concerned, this is no longer the case with migration. Besides the fact that what is or is not benign is immaterial, migration is constructed as an inherently malign and destabilizing influence.

How can one therefore exert a �disclosure� of the �imagined community�, �desecuritize� it in terms of �existential threat� to identity? The answer to �excessive securitization� of societal threats has been long proposed by classical liberal theorists. In �Liberalism and Security: The Contradictions of the Liberal Leviathan�, Buzan and Waever� acknowledge the role of the liberal project as an essentially �desecuritizing� one:

�As far back as Hobbes�s Leviathan, clasical liberalism was a project for �desecuritization� � understood mainly as reducing the number of issues over which force could legitimaly be used. Liberals wanted to restrict the rhetorics of threat and survival to the military sector and the state, in order to open up space for a civil society in which individuals did not deal with each other in the security mode.�[29]

Michael C. Williams agrees with them on the �desecuritizing� role of liberalism, and contends that �liberal sensibility� was characterized by a �conscious attempt to exclude identity concerns from the political realm, or [by] what might be called a negative identity practice�.[30]

However, Buzan et al. argue, in terms of costs and benefits, the liberal project is no longer a viable alternative. The classical project underwent numerous changes and �real existing liberalism� entails a widening of the security agenda, a �reinvention of security in terms other than military�[31] after having desecuritized military threats. Although liberalism is not to blame for securitization of new issues, its motto � free movement/circulation � was an element of threat used in the securitization of migration, for example.

If liberalism is not a viable desecuritizing project anymore, Jef Huysmans advances the possibility of a �political aesthetics of everydayness�[which] defines the public, political sphere in terms of the complexity and plurality of daily human practices�.[32] Migration could thus be desecuritized by embedding it in everyday practices: the migrant would no longer be the ultimate enemy, but just another person, facing problems like the rest of �us�. Huysmans� project is a less ambitious form of liberalism, and maybe a more feasible one. Nevertheless, none of the desecuritization strategies take into account the institutional dimension of security.

�Desecuritization� as promoted by both Waever and Huysmans is an impossible project, caught in-between clashes of reified identities and the �culture of security experts�. Without taking into account the role of the �professionals of security� in the securitizing process, there is no viable desecuritization. The emphasis Bigo has placed on the institutional formation of security enhances the bleak picture of a society at the mercy of bureaucratized network which thrives on unsolvable security issues. The bureaucratic �power/knowledge� could still be challenged by counter discourses promoting a different �power/knowledge�. Yet, as Huysmans points out, the existence of alternative practices does undermine the dominant discourse. Counter discourses or alternative forms of �power/knowledge� are part of the political game. They do not necessarily undermine the authority of the securitizing discourse. In a commentary on �human rights� as an alternative discourse, Didier Bigo has remarked that �it is difficult to oppose the ideology of security and human rights because these speech acts often have more in common than their authors would like to admit. They have the same idea of what is "insecure" and diverge only for their "solutions"�.[33]

To sum up, we have seen that the securitization of migration could not be reduced to simply discursive practices. Although they play an essential role in the process of �threat-fabrication�, they are necessarily reinforced by non-discursive practices that imply the construction of a particular �power/knowledge� by professionals of security. It is this �power/knowledge� that embeds migration in a �security continuum� and links the threat to identity with crime, terrorism, drugs. The migration threat is no longer reduced to a question of defending culture with culture on a more abstract level; the threat becomes physical and urgent. The anti-migration war is waged with the weapons deployed by the police to fight crime: increased controls, surveillance, gathering of information. One becomes thus wary of Waever�s optimism concerning the possibilities of �desecuritization�, namely the undoing of migration as a threefold existential threat (to the welfare state, the public order and the identity of the nation). �Desecuritization� is primarily impeded by the bureaucratic perpetuation of the �professionals of security� who need a set of issues to deal with and thus justify their raison d�être. Therefore successful �desecuritization� of migration can only be effected if one takes into account both a change in discourse and a relocation of �symbolic territories�, conquered by the �professionals of security�.

FOOTNOTES

[1] Jef� Huysmans in Miles, Robert and Thr�nhardt, Migration and European Integration. The Dynamics of Inclusion and Exclusion (London: Pinter Publishers, 1995):54.

[2] Huysmans, European Identity and Migration Policies: Socio-Economic and Security Questions in a Process of Europeanisation, Working Paper No. 9 (Budapest: Central European University, 1996).

[3] Ole Waever, Barry Buzan, Morten Kelstrup & Pierre Lemaitre, Identity, Migration and the New Security Agenda in Europe (London: Pinter Publishers, 1993).

[4] Ole Waever, �Securitization and Desecuritization� in Ronnie D. Lipschutz, On Security (New York: Columbia University Press, 1995).

[5] Didier Bigo, "Securit� et immigration�, Cultures et conflits (1998):27.

[6] Didier Bigo, �L�Europe de la s�curit� int�rieure: penser autrement la s�curit� in Anne-Marie Le Gloannec, Entre Union et nations. L�Etat en Europe (Paris: Presses de Sciences politiques, 1998).

[7] Waever decided to use Buzan�s coinage of �societal security� to avoid confusion, although his preferred term was �identity security�.

[8] Waever & al., Identity, Migration and the New Security Agenda in Europe (London: Pinter Publishers, 1993).

[9] Ole Waever, Cooperation and Conflict, p. 337.

[10] Buzan, Waever & de Wilde, Security: A New Framework for Analysis, p. 33.

[11] The concept �power/knowledge� was coined by Foucault and taken up by Bigo.

[12] Bigo in Anne-Marie Le Gloannec (1998):70-71.

[13] Ibid, 71.

[14] Jef Huysmans, �Deseciritization and the Aesthetics of Terrorism in Political Realism� in Millenium, vol. 27, no.3 (1998):572.

[15] Bigo �The European Internal Security Field: stakes and rivalries in a newly developing area of police intervention� in Malcolm Anderson & Monica den Boer, Policing Across National Boundaries (London: Pinter, 1994):166.

[16] Quoted in I. M. Destler, �Organization and Bureaucratic Politics� in Little and Smith (eds.), Perspectives on world Politics (London: Routledge, 1994).

[17] Bigo, �Securit� et immigration�, Cultures et conflits (1998):23.

[18] Buzan et al., Security: A New Framework, p. 33

[19] M. Debr� in a reasoned opinion on the draft law, http://www.france3.fr/fr3/kronik/loidebre.html.

[20] Ibid.

[21] Article 4 of the Debr� law, http://www.france3.fr/fr3/kronik/loidebre.html.

[22] Monica den Boer,�Moving between bogus and bona fide: the policing of inclusion and exclusion in Europe� in Robert Miles and Dietrich Thr�nhardt, Migration and European Integration. The Dynamics of Inclusion and Exclusion (London: Pinter Publishers, 1995):101.

[23] Bigo, �L�Archipel des Polices� in Le Monde Diplomatique, http://www.monde-diplomatique.fr/1996/10/BIGO/7302.html.

[24] Buzan & Waever, �Liberalism and Security: the Contradictions of the Liberal Leviathan�, https://wwwc.cc.columbia.edu/sec/dlc/ciao/wps/bub02/bub02.html.

[25] I use �insecurity� in the sense attributed to it by Waever, namely as a threat to which there is no response in terms of capabilities to deal with it.

[26] Waever et al., Identity, Migration�, p. 191.

[27] Paul Roe, The Intrastate Security Dilemma, Journal of Peace Research, vol.36, no.2 (1999):193.

[28] Ibid.,186.

[29] Buzan & Waever, �Liberalism and Security: The Contradictions of the Liberal Leviathan�.https://wwwc.cc.columbia.edu/sec/dlc/ciao/wps/bub02/bub02.html.

[30] Michael C. Williams, Identity and the Politics of Insecurity, European Journal of International Relations, vol.4, no.2 (1998):205.

[31] Buzan et al., Security: A New Framework, p. 210.

[32] Jef Huysmans, Desecuritization and the Aesthetics of Horror in Political Realism, Millenium vol. 27, no.3 (1998):588.

[33] Bigo in Huysmans, Dire et �crire la s�curit�: le dilemme normatif des �tudes de s�curit�, Cultures et Conflits (1998):190.

BIBLIOGRAPHY

Boer, Monica den, �Moving between bogus and bona fide: the policing of inclusion and exclusion in Europe� in Miles, Robert and Thr�nhardt, Migration and European Integration. The Dynamics of Inclusion and Exclusion (London: Pinter Publishers, 1995).

Bigo, Didier, �L�Europe de la s�curit� int�rieure: penser autrement la s�curit� in Anne-Marie Le Gloannec, Entre Union et nations. L�Etat en Europe (Paris: Presses de Sciences politiques, 1998):55-88.

Bigo, Didier, �The European Internal Security Field: stakes and rivalries in a newly developing area of police intervention� in Anderson, Malcolm & den Boer, Monica, Policing Across National Boundaries (London: Pinter, 1994).

Bigo, Didier, �Les D�bats en relations internationales et leur lien avec le monde de la s�curit�, http://www.conflits.org/Numeros/19BIGO.html.

Bigo, Didier, �L�Archipel des polices�, in Le Monde Diplomatique October 1996, http://www.monde-diplomatique.fr/1996/10/BIGO/7302.html.

Bigo, Didier, �L�Illusoire maitise des frontières� in Le Monde Diplomatique October 1996, http://www.monde-diplomatique.fr/1996/BIGO/7303.html.

Buzan, Barry, Waever, Ole and de Wilde, Jaap, Security: A New Framework for Analysis (London: Lynne Riener Publishers, 1998).

Buzan & Waever, �Liberalism and Security: the Contradictions of the Liberal Leviathan�, https://wwwc.cc.columbia.edu/sec/dlc/ciao/wps/bub02/bub02.html.

Destler, I. M., �Organization and Bureaucratic Politics� in Little and Smith (eds.), Perspectives on world Politics (London: Routledge, 1994).

Huysmans, Jef, �Dire et �crire la s�curit�: le dilemme normatif des �tudes de s�curit�, Cultures et Conflits (1998):177-202.

Huysmans, Jef, �European Identity and Migration Policies: Socioeconomic and Security Questions in a Process of Europeanization�, Working Paper #9 (Budapest: Central European University, 1996).

Huysmans, Jef, �Desecuritization and the Aesthetics of Horror in Political Realism� in Millenium, vol.27, no.3 (1998):569-589.

Huysmans, Jef, �Migrants as a Security Problem: Dangers of �Securitizing� Societal Issues� in Miles, Robert and Thr�nhardt, Migration and European Integration. The Dynamics of Inclusion and Exclusion (London: Pinter Publishers, 1995).

Roe, Paul, The Intrastate Security Dilemma, Journal of Peace Research, vol.36, no.2 (1999).

Waever, Ole, �Ins�curit�, identit�: une dialectique sans fin� in Anne-Marie Le Gloannec, Entre Union et nations. L�Etat en Europe (Paris: Presses de Sciences politiques, 1998):91-136.

Waever, Ole, �Securitization and Desecuritization� in Ronnie D. Lipschutz, On Security (New York: Columbia University Press, 1995):46-86.

Waever, Ole, Buzan, Barry, Kelstrup, Morten & Lemaitre, Pierre, Identity, Migration and the New Security Agenda in Europe (London: Pinter Publishers, 1993).

Williams, Michael C., Identity and the Politics of Insecurity, European Journal of International Relations, vol.4, no.2 (1998): 204-225.

***, Debr� law, http://www.france3.fr/fr3/kronik/loidebre.html