Wednesday, August 13, 2014

further with ubuntu

you can follow my further on this blog:

http://experienceswithubuntu.blogspot.de/

Tuesday, June 24, 2014

still notebook hdd bug


I describes at my wiki how to avoid the notebook hdd bug with reading the smart values every 30 seconds.
But this not works correctly. After waking up from sleep mode the hdd goes every 10 sec into sleep and was waked up.
So i correctet the script so that i read the smart values every 10 seconds.
This works much better.
Here the updated script:

#!/bin/bash
while :
do
sleep 10
/usr/sbin/smartctl -g apm /dev/sda > /dev/null
done 

Tuesday, June 17, 2014

Logoff Problem with Testing and Gnome

After installing Debian Testing (16.06.2016) and uses Gnome as default
Desktop i have problems with rebooting, or logging out.
When i try to logout nothing happens,
and the enviroment go to a fallback mode.

I installed this package:
systemd-sysv

After this the problem was solved.

Friday, May 30, 2014

HDD-Bug on Jessie with Toshiba

With Debian Jessie and my notebook from Toshiba i found no solution for the hdd-notebook-bug.
I added the apm value of 254 (and for testing 255) several times to the system. Without effect. The hdd go to park position every 60 seconds.


I addes a small shell script to the /etc/rc.local that reads every 30 seconds the smart parameter and write it into nul.
With this script the problem is solved.
 
#!/bin/bash
while :
do
sleep 30
/usr/sbin/smartctl -g apm /dev/sda > /dev/null
done

Tuesday, May 27, 2014

Installing Debian on Toshiba Satellite C50D-1-133

Here i write how to install Debian on my new Toshiba laptop.


Debian Wheezy was not working. Wlan was not found, the graphic card not correctly detected. Using a backport kernel solved the wlan problem, but not the graphic to work. Even with firmware only the vesa mode were used.

Because this i decieded to use Debian Testing (jessie build date 19.06.2014).
At the bios i disable secure boot, and switch vom uefi to csm mode.

With the Debian installer i delete all partitions of Windows 8.1, and the uefi partition. After this the installer was not able to write the grub2 into the mbr.
So i start with a Ubuntu live-cd and uses gparted to change the partion scheme to msdos.
After this the installer was able to create the partitions.

The installation works good, wlan and lan are found.

After the installation i installed the packages firmware-linux-free and firmware-linux-nonfree with dpkg -i .
Now the graphic works fine.

Sometimes during boot the kernel shows no messages at the text-mode.
The screen only keeps black. The solution i found was adding "vga=791" to the kernel.

The brightnesscontrol did not work after installation. The screen always has the highest brightness. For this problem i had to add a kernel parameter too:
acpi_backlight=vendor


The /etc/default/grub file of this machine now looks like this:

GRUB_CMDLINE_LINUX_DEFAULT=”vga=791 acpi_backlight=vendor”

After this only updating the grub with grub-update.

Wednesday, May 21, 2014

Analyse header and create email forwarding

For redirect emails before sending or receiving you can search the header of a file for keywords and create a rule for it.
The keywords can be a part of the email adress.
With this solution you can intercept emails or create a vacation representation.

I add the following line to main.cf:
header_checks = regexp:/etc/postfix/header_checks

At the file header_checks are the keywords and the forward/redirect destinations stored.
/^(To|From|Cc|Reply-To):.*DASISTDASSUCHWORT*/ REDIRECT andre@nitschke-marl.de
 
This line search for the key "DASISTDASSUCHWORT" and if it is found the mail is redirected to the email andre@nitschke-marl.de

Friday, May 16, 2014

Jabberserver connectet to other

After routing port 5269 my jabberserver coult connect to
other server and transfer the messages to them.


Now i can use my own server for talking to every jabber account.

Tuesday, May 13, 2014

Small python program

The first program after “Hello World”:

#!/usr/bin/python
wort = raw_input(”Wort:”)
wiederholen = input(”Anzahl:”)
if wiederholen == 0:
   print”0 mal geht ja wohl nicht, bitte nochmal eingeben”
  wiederholen = input(”noch ein Versuch:”)
for i in range(0, wiederholen):
  print wort


The program ask for a text-string and a number. Both is stored
as variable.
A minimal fault tolerance is the if statemenf for 0 so that a message appears.
Then the word is written as often as the variable says to the terminal.


Learned: using variable, if statement, for loop and printing variable.


Monday, May 12, 2014

Start with Python

My first Python Programm on Debian,
 of course the “Hello World”

#!/usr/bin/python
print “hello world”


More about Python in future at my Wiki on www.nitschke-marl.de


Monday, April 28, 2014

Wheezy uses apt as favorite methode



Debian Etch, Lenny and Squeeze prefered aptitude for installing packages. This changed with Wheezy to apt-get.
In the past you can see at the log-files that the debian installer advices aptitude to install the packages (you could look at the log-files).

Now the installer uses apt, what the log-files confirm.

Wednesday, April 16, 2014

Installation day 14.04

At 14.04 was  my great Debian installation day, and i installed my work-computer with Debian 7.4, later at home my notebook with Debian 7.1 and desktop with Debian 7.0.

The cause for the different versions is that i used the DVD for installation and this were the available DVD at this moment.
The installation i only run from media without  a network-connection so that all packages are installed from local media.

After long time usind Debian Squeeze now i switch to Wheezy and enjoy the new user experience with Gnome3.

The installation was very easy and the hardware detection found at the work-computer and home-desktop everything that was installed. It work out of the box. At the notebook i must installed furter nonfree firmware packages with some dpkg -i commands. Wireless lan and graphic card was not found and so it run with gnome-classic.

The only difference i notice was that Debian 7.0 hat the ssh-server selected at tasksel, and with Debian 7.4 it was disabled as default.


Timely this day i recevied the current debian manual from Heike Jurzik.
The books to debian 5 & 6 i owned and the new one is realy fine to read for beginner and professionals. Very nice is that not only Gnome is described, the other enviroments and window manager like fwvm are a part of the book too.
  
Debian Book at Galileo Computing from Heike Jurzik

Thursday, April 10, 2014

Slideshow with non X Server

Slideshow for the shell 

Auf einem Server wollte ich nebenbei noch eine Slideshow mit Bildern laufen lassen.
At my server i would run a slideshow with pictures.
Because the server has no graphical enviroment i decieded to use the framebuffers.
As programm i installed "fbi"

aptitude install fbi 

The programm is part of the official debian repository.
For creating a framebuffer device the kernel need this parameter during boot:

vga=791 

This means 16 Bit colour and 1024x768 Pixel.

fbi -d /dev/fb0 -t 7 -u /daten/bilder/*.JPG 

With this command line i show all pictures from the directory /daten/Bilder for each 7 secounds a picture on the /dev/fb0 framebuffer device.
With -d i chose the device, -t are the time in secounds and -u the sources of the pictures.

That the scripts run in a ininity loop i create two shell-scripts:

#!/bin/sh
while true
do
fbi -d /dev/fb0 -t 7 -u /daten/bilder/*.jpg
done


#!/bin/sh
while true
do
sleep 30
killall fbi
done

The first script starts the fbi command and the loop garants, that if the programm is closed, it starts again. The secound scripts stops the fbi programm every 5 minutes (so that script 1 restart it) and with this it recognize the new pictures.

Tuesday, March 18, 2014

Using ejabberd as xmpp server

The ejabberd server you can backup with this command: ejabberdctl backup filename

or create a raw dump with this command:  
ejabberdctl dump filename

Backup creates a normal backup-file and dump creates a raw file of all data.  

For normal work the backup is good enough.

Restoring the data is equal to backup, only using restore or load(when using dump):  
ejabberdctl restore Datei

This command shows how many users are online at the moment:  
ejabberdctl connected-users-number

And this command shows the user names:
ejabberdctl connected-users

For showing all users with a account at the server use this command: ejabberdctl registered-users Servername

Wednesday, March 5, 2014

Firebird Database with Debian

Usind firebird as database with Debian

Before we install the database here a short overview of the different versions:

Classic Server
The classic server uses for each connection a different task. On multiprocessor systems the server uses all cores to share the usage.
Best performance for a small  number of connections.

SuperServer 
The superserver uses only one process and for each connection a thread. All connections use the same cache. Multiprocessing is not supportet. On server with more than one cpu there is no more performance improvement.
Best performance on many connections.


SuperClassic
Superclassis uses a thread for each connection and one cache, but supports multicore cpu's. Combination of the advantages of both systems but only available at firebird 2.5 or higher.


Installation

For installation i used aptitude:

aptitude install firebird2.5-superclassic

With this command aptitude installed the needed packackes. For using the database we need the user and group "firebird" and the masterpassword. For creating this we use the package manager dpkg-reconfigure:

dpkg-reconfigure firebird2.5-superclassic

While the package manager is creating the database he ask for the masterpassword for the mainuser.

The config files can be found here: /etc/firebird/2.5

At the config file firebird.conf i changed nothing. The aliases.conf i used for creating an database alias. So we can use the database without the complete path to the database file. When not using an alias you must set the complete path to the file from view of the server.

# ------------------------------
# List of known database aliases
# ------------------------------
#
# Example Database:
#
employee.fdb = /usr/share/doc/firebird2.5-common-doc/examples/empbuild/employee.fdb
employee = /usr/share/doc/firebird2.5-common-doc/examples/empbuild/employee.fdb
#
# Live Databases:
#
datenbank = /daten/datenbank.fdb

Here i create the alias "datenbank" for the database file  /daten/datenbank.fdb
It is importent to check the permissions of the database file and the complete path to it.

For creating a user of firebird we using gsec.

gsec -user sysdba -pass hauptpassword -add benutzername -pw benutzerkennwort

Here we create the user "benutzername" with the password "benutzerkennwort" while using the mainuser "sysdba" and his password "hauptpassword" whis was created during the installation with dpkg-reconfigure.

When everything is done we restart the database:

/etc/init.d/firebird2.5-superclassic restart

Tuesday, February 11, 2014

Setting time and date on the shell


For setting time and date on the shell we use the command
date
It is used like this:
date <month><day><hour><minute><year>.<seconds>
Example:

date 021108092014.00

Here the time is set for this:
02 <- month 11 <- day 08 <- hour 09 <- minute  2014 <- year .00 <- seconds

Monday, January 20, 2014

Mail Provider changes SSL

Yesterday i recognice that the company mailserver hat problems with receiving mails from the provider.
The log file /var/log/mail.info show this entrys:
  Jan 19 18:43:41 server fetchmail[25245]: SSL connection failed.
Jan 19 18:43:41 server fetchmail[25245]: socket error while fetching from info@senft-betonbohren.de@xxxxx.mailserver.net
Jan 19 18:43:41 server fetchmail[25245]: Query status=2 (SOCKET)
Jan 19 18:43:41 server fetchmail[25245]: xxxxx.mailserver.net fingerprints
do not match!


This shows me, that the provider has changed the ssl key.
With this command i get the new ssl-key from the mail-server of the provider:
 fetchmail –verbose xxxxx.mailserver.net

Fetchmail shows me so more information during receving the emails from the provider and in this informations is the new ssl key.
This key i copy and wrote it into my .fetchmailrc that looks then like this:
 
user info@senft-betonbohren.de
pass “pop3password”
to info
options ssl sslfingerprint “A1:A1:A1:A1:8B:98:54:70:F7:07:89:1A:28:F1:F1:2E” 


Getting the new mails from the pop3 mailserver is no problem.

Thursday, January 9, 2014

Double mail delivery with postfix and always_bcc

At Postfix i enable this function:
alway_bcc=

With this line i get a copy of each email of the mailserver.
Because i installed a amavis scanner the postfix touch every mail
twice times. For this i get each mail double into the mail archive.
Adding this line solved the problem: (main.cf)
enable_original_recipient = No


Wednesday, January 8, 2014

Little changes at my homepage



There a little changes on my homepage...
Maybe it is time to visit it again...

www.nitschke-marl.de

Jabber Clients

After installing the jabberserver at home,
i will spend a little time speaking about the clients.

At Linux i use pidgin for jabber, irc and icq. It is a very good
multi-protocol client and available for windows too.

My andorid phone works with xabber very good.
Together with pidgin the message appears at the device
i work actually with. (Empathy cant do this).

Windows Phones i set up with IM+ but it is not realy
als nice as xabber.

Monday, December 23, 2013

A look back to 2013

On this place a small review of 2013:
- Debian 7 Release Party done and installed on the desktops.
- After closer look decieded to switch back to Debian squeeze
- Get Asus laptop and installed Debian
- Installed Caldav Server on Debian at the company
- Installed Jabber Server on Debian at the company
- Bought a Fujitsu/Siemens Futro and installed Debian on USBStick
- Installed a own jabber server on the Futro
- Onlineshop created
- Developd project and time-management software for tablet pc.
- Get Android 2.3 smartphone, installed xabber and told many people
  to use xabber instead whatsapp
Not a bad year

Wednesday, November 6, 2013

Jabber / XMPP server with Debian 6

Here a small HowTo for a Jabber/XMPP server using Debian 6.0 Squeeze:

First i install the jabber-server with aptitude.
aptitude install ejabberd

After this i edit the config file:

/etc/ejabberd/ejabberd.conf



and modified this entries:

{hosts, [”domain”]}.
{acl, admin, {user, “adminuser”, “domain”}}.


For domain i use the ip-adress of the server. Because the server is
behing a router, i use the permanent internet-ip adress and not the local one. The local ip-adress would not work after a router.
The username for adminuser you can choose whatever you want.
Then i restart the daemon:

/etc/init.d/ejabberd restart


The user i added with this command:

ejabberdctl register username domain password

Here you replace username with the name you want, for domain i write the ip-adress of the server and password you can choose free.
Important is that you must add the admin account (you added in the config file) too.

After this i restart the daemon again.
At the router i create a port-forwarding for this ports:
5222, 5223

Tuesday, November 5, 2013

TLS not available due to temporary reason

During sending emails with thunderbird on a windows pc this error message appears:

TLS not available due to temporary reason




The Error appears, if a antivirus-programm is installed and try's to scan the message before sending.
After disable this function, the sending works without error.

Wednesday, October 9, 2013

Set new UUID for Swap

I restore my old Debian 6 after testing Debian 7 i notice that
the swap partition is not used any more.

Debian 7 has created a new swap partition with new UUID during the installation.
I look for the old UUID at the /etc/fstab file and use this for creating
a new swap partition.

swapoff -v /dev/sdaX
mkswap -U NEW_UUID /dev/sdaX
swapon -v /dev/sdaX


with bulkid i check the result.


Wednesday, August 28, 2013

New Diaspora Pod

Hello,
after the closing of ilikefreedom.org i searched for
a new diaspora pod.
Now you can find me here:
https://pod.geraspora.de/

Thursday, August 1, 2013

Deleting Mailqueue from Postfix

With this command you can delete all mails in the Postfix Mailqueue:

postsuper -d ALL

Wednesday, July 17, 2013

Backup with Partimage

For a complete backup of the system i use partimage.
It don't work with btrfs or ext4, but for all systems i use
jfs (realy great filesystem) and here i can backup it with partimage
very good.

The partition layout is:
/dev/sda1 -> restore
/dev/sda2 -> worksystem
/dev/sda3 -> swap
/dev/sda4 -> data

On sda1 i install a minimal system with partimage, at sda2 the
normal system. Now i can boot into sda1 and backup or restore the
whole system. This is very fast, and i need no boot-cdrom anymore.
The image is stored at sda4.

This script i put into /bin/res on sda1 so i can restore a whole system
with starting one script.

#!/bin/sh
partimage -b restore /dev/sda2 /backup/images/debian700.000
sync
reboot

Thursday, July 4, 2013

PPTP and Debian 7

I know about the security problems with pptp and vpn.
For those who still want to use it with Debian 7,
here a short description how to solve the problem,
that the daemon hangs during restart.

After
/etc/init.d/pptpd restart

the pptp daemo was freeze.
I found this solution:
Adding a blank line at the end of this file:
/etc/pptpd.conf

After this it works fine.

Age of Empires and Debian 7

With Debian 7 / Wheezy the support of Age of Empires 1 & 2
becomes much better.
The only thing to do is:
Installing winetricks :

aptitude install winetricks

and then install directplay with winetricks:

winetricks directplay

After this, you can play Age of Empires with Multiplayer, the sound works
and graphics works much better than with Debian 6.

The only problem is, when disconnecting multiplayer the programm frozen.
Best way is to open a shell before starting the game and then you can
kill it after getting the processnumber with ps -A .

Monday, May 13, 2013

Wheezy hdd bug

Still existing:
The hdd-bug at wheezy.
During normal work the hdd goes into the park
position every 4 seconds and then back to work.
Cause this the Load Cycle Count gets very high during a short
time and the hdd is aging very quick.
You can check it with this command (after installing the smartmontools)
smartctl -A /dev/sdX | grep -E "(Load_Cycle_Count|ID)"

To avoid it you must modify those files:

 /usr/lib/pm-utils/sleep.d/95hdparm-apm
(deleting all lines at this file!)

/etc/rc.local
(adding: hdparm -B 254 /dev/sda)

/etc/pm/sleep.d/10_unattended-upgrades-hibernate
(adding: hdparm -B 254 /dev/sda)

After this the problem should be solved

Sunday, May 5, 2013

Debian Wheezy

Now for downloading:
Debian Wheezy is complete!
www.debian.org

Monday, April 15, 2013

Age of Empires 1 & 2 playing on Wine with Debian

Nice problem is playing Age of Empires on Debian with wine.
First i download this file:
http://www.findthatzipfile.com/search-38788730-hZIP/winrar-winzip-download-dplaydlls-win98se.tar.bz2.htm
and expand it to this directories:
windows, system, system32

Then i start winecfg and set the emulation mode to win98.
At "Libraries" i add
dplay, dplayx, dpnet, dpnhpast, dpwsockx

For accesing to the cdrom i add a drive-letter to the cd path at winecfg,
like: e: for /media/cdrom0
So the programs find the cdrom and i need no patch for the game.


Wednesday, March 20, 2013

Installation of davical on debian 6.0 squeeze

First i install the packages with aptitude:
aptitude install apache2 php5 postgresql davical davical-doc

For using you need Apache, PHP 5 and PostgresSQL . These are part of the official Debian repositories.

The next step is to create the configuration file:
/etc/apache2/conf.d/davical.conf

The file is created with this values, it is used from apache as alias file, so
that the path to the davical files is found: (File is without encryption)

Alias /davical /usr/share/davical/htdocs
<Directory /usr/share/davical/htdocs>
Options Indexes
DirectoryIndex index.php
php_flag magic_quotes_gpc Off
php_flag register_globals Off
php_value include_path /usr/share/awl/inc
</Directory>


Restarting Apache.
/etc/init.d/apache restart

Now we do the database configuration. This configuration is for apache and database is
on the same server. This file is created with the chmod 644.
/etc/davical/config.php'

I put this lines into the config.php file:

<?php
$c->default_locale = de_DE.UTF-8;
$c->pg_connect[] = 'dbname=davical user=davical_app';
?>

Next step is to create two database users. For this we change to the user "postgres" with the su command and create the accounts:

su postgres
createuser davical_app
createuser davical_dba


The question for superuser, roles and databases we answer with no.

Now we edit this file:
/etc/postgresql\8.4\main\pg_hba.conf

And add this two lines:

local davical davical_dba trust
local davical davical_app trust

Now we must restart the postgresql database:
/etc/init.d/postgresql restart

The davical package come with a shell script, that creates the database. We start it as postgres user  again:
su postgres
/usr/share/davical/dba/vreate-database.sh


Important: After finnishing the script the admin password is shown, you must note it !!

Now we can access to the installation with a webbrowser:
ipadresse/davical

Note for installing thunderbird lightning:

The address for the caldav account looks like this:

http://IP-ADRESSE/davical/caldav.php/USERNAME/home/

Tuesday, March 12, 2013

Safer internet for children


A good project for safer internet:
www.kinderserver-info.de
It is simple used as proxy, so it works on debian too.
Installation:
Proxy: proxy.kinderserver.eu Port: 3128
After this children only get pages shown,
that were visited from the project before and are clean.
The project works together with the children search engine fragfinn:
www.frag-finn.de





My identi.ca account

I want to remember to my identi.ca account:
http://identi.ca/gnude

Tuesday, February 5, 2013

Apache with ssl

For a homepage i want a https access with apache.
This is the way i solved it:

mkdir /etc/apache2/myssl
cd /etc/apache2/myssl
openssl req -new > server.cert.csr
openssl rsa -in privkey.pem -out server.cert.key
openssl x509 -in server.cert.csr -out server.cert.crt -req -signkey server.cert.key -days 365
nano /etc/apache2/ports.conf
nano /etc/apache2/httpd.conf
a2enmod ssl
/etc/init.d/apache2 force-reload


This is the code i added to the httpd.conf:

<VirtualHost ******:443>
ServerName ******
SSLEngine on
SSLCertificateKeyFile /etc/apache2/myssl/server.cert.key
SSLCertificateFile /etc/apache2/myssl/server.cert.crt
</VirtualHost>


 And this i add to the ports.conf:

Listen 443 http

That the site is correctly found i hat to modify / create the
/etc/apache2/conf.d/default-documentroot

Adding:
DocumentRoot /var/www

At the file /etc/apache2/sites-available/default-ssl i had to change the file paths like this:

SSLCertificateKeyFile /etc/apache2/myssl/server.cert.key
SSLCertificateFile /etc/apache2/myssl/server.cert.crt


Finnising i aktivate and reload the changes:
a2enmod ssl
/etc/init.d/apache2 restart


Error with fetchmail and ssl certificate

After adding a new pop3 mailserver to my .fetchmailrc i get with every mailexchange this errors in my logfile:

Jan 20 01:57:35 server2 fetchmail[27210]: Warnung: Die Verbindung ist unsicher, mache trotzdem weiter. (Nehmen Sie lieber --sslcertck!)
Jan 20 01:57:35 server2 fetchmail[27210]: Fehler bei Server-Zertifikat-Überprüfung: self signed certificate


There is a SSL problem when retrieving the mails.
To solve this i first see what ssl fingerprints the pop3 server has.
For this i start fetchmail from shell:
fetchmail -v -f /etc/.fetchmailrc

And add the shown fingerprints to my .fetchmailrc.
After every user i put this line:
options ssl sslfingerprint "00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00"

Wednesday, January 30, 2013

replace uw-imapd with dovecot

Because of the problems with corrputed mailboxes or mails when accesing the debian mailserver with uw-imapd from the iPhone i decieded to switch to dovecot.

The installation was easy. After starting aptitude i chose dovecot-imapd and aptitude removed the old uw-imapd automatical.
For authentication the dovecot uses linux logins and passwords, so nothing must be changed.
The mails were stored from uw-imapd here:

/var/mail/%user%
/home/%user%/

So the mails were directly in the home directory.
I creat a subdirectory called "mail" and moved every directory and mbox file into it.
Now the mails were here:

/home/%user/mail/

Then i modified these two lines at /etc/dovecot/dovecot.conf:

mail_location = mbox:~/mail/:INBOX=/var/mail/%u
mail_full_filesystem_access = yes

After this the eMail Server works fine with dovecot.

Sunday, January 20, 2013

iPhone corrupts mbox file of uwimap

Using a debian mailserver (postfix and uwimap) with the iPhone
corrupt the mbox file of the user.
The first bytes of the file are overwritten and sometimes
deleted mails appears again.

The problem is the imap implementation of apple (iPhone, MacOS >=10.5) and a bug in the uwimapd. It searchs for the mlock in the wrong directory.

I try to fix the problem this way:
chmod -R 01777 /var/mail/
cp /usr/bin/mlock /usr/sbin/

The damaged file i open with a textedtior like joe
and fixed the overwritten mail header. After this i export
it with achmbox into a new file.
The old mbox i replace with the new file.

Please no comments to the security of the chmod !

Tuesday, December 11, 2012

mbox files larger 2GB

Using the mbox format for a mailserver can be a problem when much mails
stored in one folder.
The maximal folder size of a mbox is 2GB. For the linux filesystem it is no problem to store larger files, but thunderbird or other programms cannot access to this files.

In this situation are two ways to solve the problem.
The first is the quick and dirty way:
split the file with the linux "split" command and loose the mail where the file is splittet. Then you repair the second part and now you can access to both files.

The better way ist the programm archmbox.
After installing it with aptitude you can split the mailbox cleanly into severel parts, sortet after date. This program is the only i know at the moment that
access a file larger 2gb.

Saturday, December 8, 2012

Using radicale as caldav calendarserver

Here i show how to install a calendarserver with radicale.
The advanteage is that the calender are normal .ics files that could be used directly (over a smb mount).
So at the local network you work with .ics files, with mobile phones you can connect to a caldav server.

For installation i have to modified the sources.list of debian squeeze. (aptpinning)
I replace sequeeze with testing and install the package:
aptitude install radicale

Security
For activating the password option you have to edit this file:
/etc/radicale/config

Here you can link to a password file that has the same construction as .htaccess .
Htpasswd filename htpasswd_filename = /etc/radicale/users 
#Htpasswd encryption method 
# Value: plain | sha1 | crypt htpasswd_encryption = sha1

Storage of the calendar The .ics files are stored here:
 /var/lib/radicale/collections

You can change the place at the config file.
With the first use of the caldav service the file is created.
Otherwise you can copy a .ics file directly tho the directory.
/var/lib/radicale/collections

Using the calendarserver with lightning

For using the calendarserver and caldav with thunderbird you need the lightning plugin.

After installing you add a new calender and chose "network" and then "caldav". The url for the calender looks like this:
http://username:userpassword@serverip:port/calendars/users/username/calendar

Here must the username and userpassword before the ip and at the path be changed.

Installing caldav server on debian

My goal was to install a caldav server, that i can connect from iphone and from local clients like evolution or lightning.
First solution was installing the calendarserver from debian.
I used aptitude to install the packages:
aptitude install calendarserver

The configuration files are here: /etc/caldavd For creating a user you must add this lines to the
/etc/caldavd/accounts.xml  

username userpassword username 

 Global configurations are here:
 /etc/caldavd/caldavd.plist

This points i modified:
The calenderport i changed to 777 for security  
BindHTTPPorts 777

SSL
i don't want to use  
SSLPort 0

At last i have to restart the server:
/etc/init.d/calendarserver restart

Get a copy of every mail that pass the postfix mailserver

For backup i want to get a copy of every mail that pass the postfix. Simply add this line to the main.cf:
always_bcc = myemailadress

Maildelivery problem with postfix at some domains

At the Postfix mailserver i have this problem: eMails are not delivered to every target domain.
As example web.de was not send, gmx.de send without problems.
After searching the problem is a exchange host in the mail chain, and the target mailserver has a wrong option.

He cannot recognize the mime version.
 I added this to my main.cf and solved so the probmem:

smtp_discard_ehlo_keywords = 8bitmime 
smtpd_discard_ehlo_keywords = 8bitmime

Tuesday, March 13, 2012

Problem with squirrelmail attachments

After installing and configurationg squirrelmail,
it works fine.
But forwarding emails with attachment dont work.
Sendind with attachments makes no error, but no attachment is sent
with the mail.

Problem: the /attach directory for squirrelmail dont exist.
After creating everything works fine.

Wednesday, March 7, 2012

hama wlan 150

Hama wlan 150 usb stick could not connect to wlan network.
Network found, but password not accepted.

Solved this way:
Edit
/etc/modprobe.d/blacklist.conf
and add this:
blacklist rt2800usb

With this i add the rt2800usb kernel modul to the blacklist of modules, that are not loaded.
After a reboot the wlan stick works fine.

Monday, February 20, 2012

Debian 5 freeze at notebook during boot

At some notebooks Debian 5 (Lenny) freeze during boot.
Last notification on the screen is: Setting System Clock

In this case there is a error with the clock-driver.
Solution:
Modify these two files:
/etc/init.d/hwclockfirst.sh
/etc/init.d/hwklock.sh

The files must contain this string:
HWCLOCKPARS="--directisa"

Load cycle bug at notebook hdd

All Debian versions i know hat a load-cycle bug in
the hdd driver. This means: When the kernel found a notebook
he activates the hdd power saving.
The hdd go into sleep every 60 seconds and is quickly waked up.
In this case, the s.m.a.r.t. load cycles increase the load-cycle-count
very quick. After a short time the hdd will fail!

You can test it with the smartmontools:
smartctl -a /dev/hda | grep Load_Cycle_Count

Here you can see the value. If it grows fast you can change
turn it off with hdparm:
hdparm -B 254 /dev/hda

I addes it to /etc/rc.local so that it is startet every boot.

Shop i work at the moment

could take a look at what i working at the moment:
www.leds-sparen-strom.de

Tuesday, January 17, 2012

Restricting webserver access

Solution for restricting webserver access from the internet, but clients from local net
can work normal. Adding this to the .htaccess file from apache:


order deny,allow
allow from 10.10.10.10
allow from 10.10.10.11
deny from all
Satisfy Any
AuthName "Please login"
AuthType Basic
AuthUserFile /var/passwordfile
Require user username


This solution guarant access from clients with the ip ..10 and ..11 and
all other clients become a prompt for login.
In this way, i add all local clients to the list, and access with port-forwarding the server.
All other must know username and password.