tag:blogger.com,1999:blog-123619372024-03-08T04:04:54.462+01:00Frankie goes to Hollywood...ramblings of Frank van Bortel...Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.comBlogger211125tag:blogger.com,1999:blog-12361937.post-40327066588617053802020-02-05T11:08:00.000+01:002020-02-05T11:08:36.332+01:00Antiques
Apart from kind of being in the same position as I started blogging (recovering from surgery), I also ended my "productive" live and am enjoying a new status: pensionado.
Cleaning up
That status comes with a task of cleaning up, and I found some Oracle documentation, that might have antique value to some. Leave a comment when you are interested in one of the following items, and let me know Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-75562019704622992082019-04-12T10:37:00.001+02:002019-04-12T10:37:53.724+02:00Blinkt! on a Pine Rock64
Blinkt! on a Rock64
Small write up and reminder to myself: how to install the Blinkt by Pimoroni and get it to work on a Pine Rock64:
rock64@bcn0:~$ sudo apt install python-pip
rock64@bcn0:~$ sudo apt install python-dev python-setuptools
rock64@bcn0:~$ sudo pip install --upgrade setuptools
rock64@bcn0:~$ sudo pip install wheel
rock64@bcn0:~$ sudo pip install psutil
rock64@bcn0:~$ git Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-51773836199937563882018-05-23T16:09:00.000+02:002018-05-24T09:07:41.439+02:00GDPR or AVG - regain control Part 2: Your Own Mail
Create your own mail server
Drop Yahoo, Google or Microsoft mail - they are reading your mail.
Debian, Postfix, Dovecot, MariaDb, rspamd
This is the second (and last) part of setting up your own internet tools in order to gain back control. Goal is to set up an email server (receive and send), secure it, and filter spam.
Hardware considerations
I used an abandoned ASRock ION330, where I Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-77112282758912249562018-05-23T13:08:00.000+02:002018-05-23T13:10:13.630+02:00GDPR or AVG - regain control Part 1: Your Own Cloud
Create your own Cloud
Replace Google or Dropbox, and gain control over you own data. Encrypt it, protect it, share your data only with who you want.
ARM, Ubuntu and secured Nextcloud
This episode will be followed by an entry on email. For now, I settle for a relatively cheap ARM device (an ODroid XU4, to be precise), run it with Ubuntu, and install NextCloud.
The choice for Ubuntu has Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com3tag:blogger.com,1999:blog-12361937.post-25691024745950382562017-10-30T09:15:00.002+01:002017-10-30T09:15:52.454+01:00We -as a country- are no longer to be trusted?
Who Do You Trust?
As legislation changed, Mozilla filed a bug with potential serious consequences. Check out bug 1408647.
Removing the root certificate as trusted authority makes it look asif any certificate, issued by any of the Dutch PKI organizations, is potential unsafe. Which is correct, to a point, as the law allows the use of false keys by the Ducth autorities.
Creepy.
That makes the Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-43598258752114538452017-10-07T13:30:00.001+02:002017-10-30T10:33:45.158+01:00MS Windows 10 Creators Update
It failed. Again. As it has done since august. It has not improved. It's defenitely back to the 1.0 version - no, not a typo.
Seach the web for Win 10 upgrade 1703 failed, and will will be greeted with almost half a million hits.
MS: get your act together!
How about a course "Programming C for beginners"?!? There is NO NEED to reboot more than once (and not even that, actually), and once Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-78717431996471068612017-09-21T17:42:00.001+02:002017-09-21T17:42:01.650+02:00Nextcloud configuration
Nextcloud configuration issues on Debian 9 Stretch
In an attempt to get email and storage fixed, I am trying to get dovecot, postfix and nextcloud to integrate. With varying levels of success - what else is new?
Anyway, nextcloud greets with the fact I do not have OPcache enabled, and I should add to php.ini.
WRONG
NOT php.ini
So, I did... I added
opcache.enable=1
opcache.enable_cli=1
Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-82870559794727178912017-09-16T20:28:00.002+02:002017-09-16T20:30:57.233+02:00Debian Stretch and opendkim: connection refused, no listener at port 8891
Debian stretch opendkim behaviour changed
opendkim fails to sign!
In a nutshell... if you face this:
postfix/submission/smtpd[17385]: warning: connect to Milter service inet:localhost:8891: Connection refused
and you cannot find a listener process at port 8891:
netstat -nltp | grep 8891
returns nothing, and you find this in the /var/log/mail.log:
opendkim[18055]: OpenDKIM Filter v2.11.0 Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-3862772967087422672017-08-15T20:47:00.000+02:002017-08-16T09:02:33.830+02:00Storage Server: datasets, snapshots and performance
Datasets, snapshots and performance
This is a long post, but with lots of pictures. Kind of a management overview ;)
Datasets and snapshots
Datasets
As may have become clear from a previous post, I have one volume, with a (a -to date- single) dataset (ds1). This was not the result of experience, or deep thought, it was just copied from Benjamin Bryan who did an entry on ZFS hierarchy.
Makes Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com1tag:blogger.com,1999:blog-12361937.post-86638324217027513202017-07-05T19:13:00.000+02:002017-07-05T19:13:01.454+02:00Storage Server: FreeNAS: use your SSD efficiently
FreeNAS: use your SSD efficiently
ZIL and Cache
Not open for discussion; I think it is a complete waste of resources to use a 120, or 250GB SSD for logs, let alone cache, as FreeNAS will (and should!) use RAM for that. So, I searched and found a way to create two partitions on a single SSD, and expose these as ZIL (ZFS Intended Log) and cache to the pool.Mind you - there are performance testsFrankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com2tag:blogger.com,1999:blog-12361937.post-88359558588039930482017-07-05T09:23:00.000+02:002017-07-05T10:28:28.923+02:00Storage Server: Firmware
Firmware
The first thing to do, in order to get any software RAID program to run, is to flash the controller out of RAID mode. Only then all of the disks will be seen as just a bunch of disks - nothing else. JBOD that is, for short.
The board I have, comes with a LSI SAS2308 controller, to with I want to connect 12 SATA drives using three SAS-to-SATA breakout cables.
Drivers
There are Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-22778697410158361572017-07-05T09:21:00.001+02:002017-07-05T09:21:14.406+02:00Storage Server: Software - FreeNAS
Software: FreeNAS
All hardware has been implemented, all 13 harddisks and one SSD are connected, serial numbers, as well as physical, and logical locations noted.
Cramming 4 2.5" disks in the CD bay
Time to add some software.
I will install the latest and the greatest(?) FreeNAS software, V11.
Installation
The installation, due to IPMI being capable of mounting remote images, is a Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-69961623475198156422017-06-25T12:48:00.000+02:002017-07-05T09:22:10.950+02:00Asrock E3C224DI-14S IPMI not reachable
Storage Server: Documentation missing
There's definately some documentation missing on the IPMI settings. I managed to lock myself out of the IPMI (also know as 'Integrated Light Out', or ILO) management interface. Not sure how I managed to do that, but in the quest to find out how to restore devine powers, I noticed quite a lot of people suffered from this. And, the solution is quite simpleFrankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-39645054979338123362017-06-21T16:43:00.000+02:002017-07-05T10:29:47.481+02:00Storage server
Storage server
Hardware
Aiming at 2 VDEVs of 5 or 6 disks each, I'd need a motherboard capable of running 12 disks.I used a SuperMicro board in the ESXi build, mainly because virtualization using bare metal hypervisors was quite new to me. However, these boards have quite a steep price.
There's a new motherboard by SuperMicro, that screams NAS, but that has not yet hit the shops.
So, I Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-37237374922714762192017-06-19T09:43:00.000+02:002017-06-19T12:48:03.460+02:00Things to do after you cloned a Virtual Machine
Clean up a cloned VM
After you made a clone of your (base) VM, you will need to do some stuff.
MAC-address
First of all, I suspect you have a different MAC-address than the original machine. VMWare does that, as long as you have your MAC address assigned automatically. VirtualBox will ask you whether to re-initialize the MAC-address while cloning.
The problem is the udev process, responsable Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-69529742183978003222017-06-18T10:41:00.000+02:002017-07-05T10:30:41.560+02:00Now, here's an idea...
Gaining control
Or rather - regaining control. Over my own data, and what's done with it.
Currently, I use several services, of which I know they are monitored. Several of these services fall under US legislation, although I'm not a US citizen. This allows several agencies to go through my documents, email and other stuff, whether I like that or not (I do not).
Of course, for some of this, I Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-23348570060050963602015-08-14T14:25:00.000+02:002015-08-14T14:25:00.708+02:00OAM PS3 State-of-the-artAn attempt to run OAM 11G Release 2 PS3 on Oracle Linux 6.7, WLS 12C, RDBMS 12C.
Install Linux
Pretty straightforward. Used Oracle 6.7, as 7 is not certified. Create a 200MB /boot, and an LVM for /, both ext4.
Install just the server. Deselect *all* options, just X system and X legacy support (the OUI needs it). Some 566 packages will get installed.
Make sure it boots, and the network starts.
Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-3681073167671536882015-07-08T14:12:00.000+02:002015-07-08T14:12:02.751+02:00OAM PS3 - continuedAllow auto start (production mode) for your scripts:
cd /oracle/user_projects/domains/oam_domain/servers
mkdir -p oam_server1/security
mkdir -p omsm_server1/security
mkdir -p oam_policy_mgr1/security
vi oam_server1/security/boot.properties
cp oam_server1/security/boot.properties omsm_server1/security/
cp oam_server1/security/boot.properties oam_policy_mgr1/security/
You can now use command line Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-13876278522447009032015-06-15T13:50:00.000+02:002015-06-15T13:50:56.005+02:00refhost.xml kludge is fixedNo More missing packages
I wrote several times about manually editing refhost.xml. There's not need for it, just apply Patch 18231786.Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-59016573325379739642015-06-08T14:09:00.000+02:002015-06-08T14:11:43.812+02:00Wrong Java version on Unified Directory ServerWrong version Java
After losing the battle with the OS guys for control over java, I keep stumbling upon environments that have wrong java versions due to the fact java is installed in /usr/java, or /usr/bin.In such cases, this is the result:which java
/usr/bin/java
As I do not have control over /usr/bin, I install java in /oracle/middleware/java, so I would
like which java
/oracle/middleware/Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-86455688860616450212015-06-03T16:42:00.001+02:002015-06-03T16:42:05.841+02:00OAM PS3
Identity and Access Management Patch Set 3
It has been launched last week. I have seen it in March, during a partner event in Paris, and there are quite a few changes and improvements to get exited about.
Install over previous (not upgrade)
I cloned my PS2 OAM machine, and the plan is to get PS3 running asap. So, I fire up the V11.1.1.9 RCU, and drop the existing schemas.
Next, rerun the Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-4732173903727970482015-05-07T13:56:00.000+02:002015-05-07T13:56:20.279+02:00Access Denied - Access to administration console is restrictedAccess Denied - Access to administration console is restricted.
Ran into it, today. Again. This time, I'll make a proper blog entry, not like this one...
This time, I actually did follow my own advice, but for the fact, I now am working in a multi-homed WebLogic environment - I simply pasted the wrong WLS home...
Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-77565069496367888992015-03-30T11:12:00.002+02:002015-03-30T11:18:22.623+02:00Retrieving OAM keystore passwordHow to retrieve the password of OAM keystore
If you ever need it; the password of the default OAM keystore password (which is generated) can be retrieved using:
cd /oracle/middleware/oracle_common/common/bin
./wlst.sh
connect();
domainRuntime()
listCred(map="OAM_STORE",key="jks")
Would you like to change it, use
resetKeystorePassword()
Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-46297995567752628502015-03-18T15:42:00.001+01:002015-03-18T15:42:31.741+01:00BEA-090898 during PlugIn activation in clustersBe Secure
I did not mention it in my not so "OAM-in-a-day" entry, but when you run a clustered environment, make sure to set the "Secure" flag on the AdminServer and Managed Server configuration screens.
It does have more impact that setting the "Use JSSE" flag on the SSL/Advanced section of the Weblogic console, but when you failed to do so, that's one place to correct it.
Why?
No particular Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0tag:blogger.com,1999:blog-12361937.post-42686074502391613712015-03-04T17:40:00.000+01:002015-03-04T17:40:00.662+01:00OAM 11GR2PS2 in a day
Get Access Manager 11gRel2 PS2 installed in a day
Goal is to get OAM installed and configured in a day - with full control; that is without using the Installation Wizard.
Virtual Box
Start with Virtual Box. Allow plenty of memory (10GB), and disk (120GB).
Attach V33411-01.iso (Oracle Server V6.3) to the CD, and boot.
Minimal (not Basic server!) install, configure network with static IP Frankhttp://www.blogger.com/profile/07830428804236732019noreply@blogger.com0