defaults write com.apple.finder AppleShowAllFiles TRUE
killall Finder


At least for me, that’s a much more usable solution than permanently showing all hidden files, which is what you get by executing the more commonly documented solution:

See also:
[1] http://www.macworld.com/article/142884/2009/09/106seehidden.html
[2] http://www.mactricksandtips.com/2008/04/show-hidden-files.html

Anyway, as cool as Oracle Enterprise (Unbreakable?!) Linux may be, I’m running CentOS and am perfectly happy with it. Oracle VM wants a dedicated machine for the management station, which I can arrange for with a little tweaking. However, I build most of my machines up from ‘minimal’ installs. I read in the Oracle documentation that I would need libaio installed to make things go, which I did without any trouble.

However, I also needed to install the ‘bc’ package in order for the install script to work. I had to install the oracle XE .rpm by hand in order to figure this out. Note to Oracle. Get with the program and put a dependency on the ‘bc’ package! You’ll also need to install vixie-cron if you built up from minimum, as Oracle VM expects to be able to install a cron.d script.

In addition, it wasn’t entirely obvious from the documentation that’ll need a jdk installed. Well, you will. I’m using jdk-6u2-linux-i586.rpm, you can likely download it from java.sun.com.

Next, while the installer does tell you that the oc4jadmin default password is ‘oracle’, when I was asked for it I kept trying to use the passwords I’d already provided for all the other services. This didn’t work well, so bear in mind you’ll need to supply the ‘oracle’ default password at that state.

So, to recap:

yum install libaio vixie-cron bc
rpm -Uvh jdk-6u2-linux-i586.rpm
sh ./runInstaller.sh


Follow the prompts, remembering to supply 'oracle' as the oc4jadmin password.

Maybe this will save somebody the couple hours of messing around I wasted trying to get this to run! It does appear as if the install has completed, and I’m able to see the console, so look forward to an actual report soon.

If you’ve ever tried to install them, or even worse, remove the heatsink after a not-perfect installation, you’ll know why I need replacements. They break easily! Well, after spending a few hours looking at complete new replacement heatsink units and noting that half of them use these pins in the first place, I renewed my search and finally found a forum post link directly to the intel site where they sell them in packs of 4!

Voila, Kit Fasteners for LGA775 fan heatsinks (set of 4)

Now, if only their store would work … grrrrrr.

Based on http://blog.scottlowe.org/2007/01/15/linux-ad-integration-version-4/

First, install windows 2003 R2 and install the identity management for unix option. Open control panel, select add remove programs, click add/remove windows components. It will grind a while and give you a list of possible services. You’ll need to expand ‘Active Directory Services’ and check the ‘Identify Management for Unix’ service. You will need to be in the schema admins group to do this.

In order to test, you’ll want go to the ‘Unix Attributes’ tab on a user and activate them as a unix user. You’ll need to pick a NIS domain (you’ll probably only have one if you haven’t done this before) and add a unix ID and home directory. Typically the default values will be fine to get you started.

Now, log into your unix machine. Make sure it can resolve the dns name of your active directory server(s).

Run authconfig.

Check [] Use LDAP
Check [] Use LDAP Authentication
Check [] Use Kerberos
Check [] Local authorization is sufficient

You can check [] Cache Information if you want. I wouldn’t until you know things work, as nscd can get out of sync with server and cause confusion.

Select [ Next ]

Enter your AD server dns name in the server. For example, adserver.corp.example.com
Enter your AD base DN in the Base DN field. For example, dc=corp,dc=example,dc=com

Select [ Next ]

Enter your local dns name, in ALL CAPS in the realm field. For example, corp.example.com.
Enter your server name:88 in the KDC field. For example adserver.corp.example.com:88
Enter your server name:749 in the admin server field. For example adserver.corp.example.com:749
Check [] Use DNS to resolve hosts to realms
Check [] Use DNS to locate KDCs for realms

Select [ Finish ]

Now a lot of things are set up, but of course we’re not quite done. We’ll need to add lines to /etc/ldap.conf in order to allow us to query ldap. Ideally, you’ll have created an account specifically for this purpose (Domain Users group seems to work). I use linux_auth but it truly doesn’t matter.

echo “binddn linux_auth@corp.example.com” >> /etc/ldap.conf
echo “bindpw secret” >> /etc/ldap.conf

you will also need to uncomment or add the RFC2307 AD mappings from the /etc/ldap.conf file. You can also just run this:

cat >> /etc/ldap.conf < <-ENDDOC
# RFC 2307 (AD) mappings
nss_map_objectclass posixAccount user
nss_map_objectclass shadowAccount user
nss_map_attribute uid sAMAccountName
nss_map_attribute homeDirectory unixHomeDirectory
nss_map_attribute shadowLastChange pwdLastSet
nss_map_objectclass posixGroup group
nss_map_attribute uniqueMember member
pam_login_attribute sAMAccountName
pam_filter objectclass=User
pam_password ad
ENDDOC

Test your config exactly like Scott's directions say. Using your regular user account for the test should be fine. If you get the error kinit(5): KDC reply did not match expectations while getting initial credentials, it's because you didn't log in using the kerberos realm, which is in ALL CAPS! Scott's directions aren't real explicit about this and I spent a while figuring it out. Maybe you won't have to.

kinit user@CORP.EXAMPLE.COM

It will ask for your password and should just return blank if it was successful. You can then use klist to check and see if you got a TGT.

getent passwd user

You'll see something like this:

user:x:10000:10000:User:/home/user:/bin/sh

Now we're almost done. We just need to use samba to join the computer to the domain. you'll need the following in your smb.conf

  workgroup = CORP
  security = ads
  realm = corp.example.com
  use kerberos keytab = true
  password server = adserver.corp.example.com

Then you need to destroy any old kerberos tickets

kdestroy

Then authorize kerberos with a domain admin account to join active directory

kinit Administrator@CORP.EXAMPLE.COM

Then finally join the domain

net ads join

That will grind for a little while and you’ll be all set. You should get something like this:

[root@vpc-dev0 ~]# net ads join
Using short domain name — CORP
Joined ‘VPC-DEV0′ to realm ‘CORP.EXAMPLE.COM’

Finally, you’ll need to get everybody home directories. I always use autofs, something like this:

echo /home /etc/auto.home >> /etc/auto.master
echo *       -rw,bg,intr,hard,rsize=32768,wsize=32768,tcp,vers=3       nfsserver:/vol/work/users_unix/& >> /etc/auto.home
chkconfig autofs on
service autofs start

So now the final test… try to log in with ssh!

Get putty from http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html. I use the installer.

Get puttycyg from http://web.gccaz.edu/~medgar/puttycyg/. Unpack the .exe files over your putty folder. This will be c:\program files (x86)\Putty if you use the installer on x64 windows. You’ll want to replace the originals.

Drag pageant.exe into your startup folder.

Download bitstream vera from http://ftp.gnome.org/pub/GNOME/sources/ttf-bitstream-vera/1.10/

Unpack the zipfile somewhere. Select all the .ttf files, right click, select install.

Start putty (you did make a quicklaunch icon, right?)

* Under keyboard, select ‘Linux’ under ‘The function keys and keypad’
* Under window, set lines of scrollback to something nice, like 10000
* Under appearance, change the font to BitSteam Sans Vera Mono, any size you like. I use 9.
* Under behavior, check ‘full screen on alt-enter’
* Under translaction set character set to UTF-8
* Under colors, adjust ANSI Blue to something like 100,100,255 (it’s too dark to read by default
* Under connection, set seconds between keepalives to 600
* Under connection-data, set terminal-type string to ‘linux’
* Under SSH-Auth, check ‘Allow Agent Forwarding’

Finally… go back to session, click ‘Default Settings’, and ‘Save’.

The issues apparently come and go with varying kernel versions, although I’m sure many folks don’t notice them since they don’t put the machine under heavy load or try to use both ethernet ports. For instance, the 3com and nvidia ethernet controllers absolutely will not stay bound to the same ethX devices after a warm reboot. Disabling one or the other ethernet card in the BIOS eliminates this problem fairly effectively.

Secondly, the machine crashes consistently under heavy I/O load. Sometimes it takes an hour, other times copying a video file from one drive to another will crash it immediately.

I’ve got it running with only a few crashes per week under FC5 by using the following kernel line

kernel /vmlinuz-2.6.18-1.2257.fc5 ro root=/dev/hda2 rhgb acpi=off noapic nolapic.

I’ve not yet tried an FC6 era kernel, but at this point since the general consensus is that the board runs windows reliably, I think I’m going to try and do some shuffling in order to make using windows on it a possibility.

References:

• http://web.archive.org/web/20040117183728/http://attila.stevens-tech.edu/~dkopko/a7n8x.txt
• http://www.nvnews.net/vbulletin/showthread.php?t=6946
• http://lkml.org/lkml/2003/11/11/217

Every person I’ve talked to with a RAZR seems to have this problem, and nobody has known how to fix it. You know what I’m talking about! You put the phone on ‘vibrate’ and stick it in your pocket, confident that when that important phone call comes in you’ll know. 3 hours pass by and nothing happens, and you pull the phone out of your pocket only to find out that it’s now on ‘silent’ and you have 5 missed calls! WTF!

Well, here’s a really easy and 99% functional solution. It’s so simple it pains me that I never poked into the menus far enough to find it, but alas I was too lazy to figure out the default unlock code. As it turns out, you can lock any individual application to use require an unlock code before use. Enabling this feature for the ‘ringtone selection’ application will make it ask for your passcode every time that stupid side button gets pressed in your pocket. Since the phone is closed… no more accidental switches to silent!

On my phone, the default unlock code was 1234. I’ve also read it can be the last four digits of your phone number or 0000, so try all three. To disable the feature, open the phone. Click the center (“menu”?) button. Select Settings. Select 4. Security. Select ‘Lock Application’. At this point it will ask for your unlock code. Bang stuff in here starting with 1234 until you get in. If you can’t, get your provider to fix it for you. Scroll down the list to ‘Ring Styles’ and use the right arrow to change from ‘Unlocked’ to ‘Locked’. Voila!

Bear in mind you will have to enter your unlock code to change the ring style now, even if the phone is open, so it isn’t really the ideal fix. Resetting the unlock code to 0000 makes this just a bit less painful. You can reset your unlock code using the ‘New Passwords’ selection under 4. Security and selecting ‘Unlock Code’.

For those who care, here’s where I found this info [thread about v3c ringstyle lock](http://www.howardforums.com/showthread.php?t=843301) and
[thread about v3c unlock codes](http://www.wifi-forum.com/wf/showthread.php?p=377669). As a point of reference, I have an [Alltel](http://www.alltel.com) v3c running bone stock, but supposedly most (all?) RAZR variants are susceptible to this trick.

For those who don’t like keying in the unlock code to change ring styles, I’d love to hear of a way to just allow me to remap those outside buttons to something more useful or nothing at all, but haven’t found anything so far. Prove me wrong!

Edit January 2, 2007:
So I found the fly in the ointment. The problem is that the phone pops up the ‘enter unlock code’ screen whenever you bump a button, and along with it turns on the backlight! and never turns it off! Nice work Motorola =/.

There is, however a yellow sticker on top that says I have to install Fireware Appliance Software on the device, and that I must hold down the up arrow on the front while turning it on. This I can do. So I do. And the box just says ‘Booting OS …’ and never makes it further. So it’s time to get all sorta of ninja-hacker-style on it’s ass.

I plug in the included serial console cable, install [tutty](http://putty.dwalin.ru/) on my newly vistafied workstation and fiddle around until I determine that the watchguard is using 115200,n,8,1. This is what I see:

Press any key to continue.

So good little monkey that I am, I smash the spacebar a few times, and get this

 +-------------------------------------------------------------------------+
 | Red Hat Linux (2.4.26-wgrd)                                             |
 |                                                                         |
 |                                                                         |
 |                                                                         |
 |                                                                         |
 |                                                                         |
 |                                                                         |
 |                                                                         |
 |                                                                         |
 |                                                                         |
 |                                                                         |
 |                                                                         |
 +-------------------------------------------------------------------------+
      Use the ^ and v keys to select which entry is highlighted.
      Press enter to boot the selected OS, 'e' to edit the
      commands before booting, 'a' to modify the kernel arguments
      before booting, or 'c' for a command-line.

    GRUB  version 0.93  (638K lower / 515072K upper memory)

 [ Minimal BASH-like line editing is supported.  For the first word, TAB
   lists possible command completions.  Anywhere else TAB lists the possible

Ok, so they're running a redhat variant. Well, I knew this was a linux based product, and I know redhat, so in general this is good news. 15 seconds later, grub times out and I see this:

  Booting 'Red Hat Linux (2.4.26-wgrd)'

root (hd0,2)
 Filesystem type is ext2fs, partition type 0x83
kernel /boot/bzImage ro root=/dev/hda3 console=ttyS0,115200 ramdisk_size=256000
 ide=nodma

Error 15: File not found

Press any key to continue...

Uh ok. So this isn't such great news. Getting really fancy and setting the boot loader to boot (hd0,0)/bzImage gives me this:

<br /> root (hd0,2)<br /> Filesystem type is ext2fs, partition type 0x83<br /> kernel (hd0,0)/bzImage ro root=/dev/hda3 console=ttyS0,115200 ramdisk_size=2560<br /> 00 ide=nodma<br /> [Linux-bzImage, setup=0xc00, size=0xbaa40]</p> <p>Linux version 2.4.26-wgrd (root@X3-130) (gcc version 3.2.2 20030222 (Red Hat Lin ux 3.2.2-5)) #1 Thu Nov 10 07:46:53 PST 2005<br /> BIOS-provided physical RAM map:<br /> BIOS-e820: 0000000000000000 - 000000000009f800 (usable)<br /> BIOS-e820: 000000000009f800 - 00000000000a0000 (reserved)<br /> BIOS-e820: 00000000000f0000 - 0000000000100000 (reserved)<br /> BIOS-e820: 0000000000100000 - 000000001f800000 (usable)<br /> BIOS-e820: 00000000e0000000 - 00000000f0000000 (reserved)<br /> BIOS-e820: 00000000fec00000 - 00000000fec01000 (reserved)<br /> BIOS-e820: 00000000fee00000 - 00000000fee01000 (reserved)<br /> BIOS-e820: 00000000ffb00000 - 0000000100000000 (reserved)<br /> 0MB HIGHMEM available.<br /> 504MB LOWMEM available.<br /> On node 0 totalpages: 129024<br /> zone(0): 4096 pages.<br /> zone(1): 124928 pages.<br /> zone(2): 0 pages.<br /> DMI not present.<br /> Kernel command line: ro root=/dev/hda3 console=ttyS0,115200 ramdisk_size=256000 ide=nodma<br /> ide_setup: ide=nodma : Prevented DMA<br /> Initializing CPU#0<br /> Detected 1300.054 MHz processor.<br /> Calibrating delay loop... 2595.22 BogoMIPS<br /> Memory: 507732k/516096k available (1105k kernel code, 7976k reserved, 240k data, 260k init, 0k highmem)<br /> Dentry cache hash table entries: 65536 (order: 7, 524288 bytes)<br /> Inode cache hash table entries: 32768 (order: 6, 262144 bytes)<br /> Mount cache hash table entries: 512 (order: 0, 4096 bytes)<br /> Buffer cache hash table entries: 32768 (order: 5, 131072 bytes)<br /> Page-cache hash table entries: 131072 (order: 7, 524288 bytes)<br /> CPU: L1 I cache: 32K, L1 D cache: 32K<br /> CPU: L2 cache: 512K<br /> Intel machine check architecture supported.<br /> Intel machine check reporting enabled on CPU#0.<br /> CPU: Intel(R) Celeron(R) M processor 1300MHz stepping 05<br /> Enabling fast FPU save and restore... done.<br /> Enabling unmasked SIMD FPU exception support... done.<br /> Checking 'hlt' instruction... OK.<br /> POSIX conformance testing by UNIFIX<br /> mtrr: v1.40 (20010327) Richard Gooch (rgooch@atnf.csiro.au)<br /> mtrr: detected mtrr type: Intel<br /> PCI: PCI BIOS revision 3.00 entry at 0xf9f70, last bus=5<br /> PCI: Using configuration type 1<br /> PCI: Probing PCI hardware<br /> PCI: Probing PCI hardware (bus 00)<br /> PCI: Ignoring BAR0-3 of IDE controller 00:1f.1<br /> Transparent bridge - Intel Corp. 82801BAM/CAM PCI Bridge<br /> PCI: Using IRQ router PIIX/ICH [8086/2641] at 00:1f.0<br /> PCI: Found IRQ 11 for device 00:1c.0<br /> PCI: Sharing IRQ 11 with 00:02.0<br /> PCI: Sharing IRQ 11 with 00:1d.3<br /> PCI: Sharing IRQ 11 with 01:00.0<br /> PCI: Sharing IRQ 11 with 05:00.0<br /> PCI: Found IRQ 12 for device 00:1c.1<br /> PCI: Sharing IRQ 12 with 02:00.0<br /> PCI: Sharing IRQ 12 with 05:01.0<br /> PCI: Found IRQ 5 for device 00:1c.2<br /> PCI: Sharing IRQ 5 with 00:1d.2<br /> PCI: Sharing IRQ 5 with 00:1f.1<br /> PCI: Sharing IRQ 5 with 03:00.0<br /> PCI: Sharing IRQ 5 with 05:02.0<br /> PCI: Found IRQ 10 for device 00:1c.3<br /> PCI: Sharing IRQ 10 with 00:1d.1<br /> PCI: Sharing IRQ 10 with 00:1f.3<br /> PCI: Sharing IRQ 10 with 04:00.0<br /> PCI: Sharing IRQ 10 with 05:03.0<br /> isapnp: Scanning for PnP cards...<br /> isapnp: No Plug & Play device found<br /> Linux NET4.0 for Linux 2.4<br /> Based upon Swansea University Computer Society NET3.039<br /> Initializing RT netlink socket<br /> Starting kswapd<br /> VFS: Disk quotas vdquot_6.5.1<br /> Journalled Block Device driver loaded<br /> pty: 2048 Unix98 ptys configured<br /> Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI ISAPNP enabled<br /> ttyS00 at 0x03f8 (irq = 4) is a 16550A<br /> ttyS01 at 0x02f8 (irq = 3) is a 16550A<br /> Real Time Clock Driver v1.10f<br /> RAMDISK driver initialized: 16 RAM disks of 256000K size 1024 blocksize<br /> Uniform Multi-Platform E-IDE driver Revision: 7.00beta4-2.4<br /> ide: Assuming 33MHz system bus speed for PIO modes; override with idebus=xx<br /> ICH6: IDE controller at PCI slot 00:1f.1<br /> PCI: Found IRQ 5 for device 00:1f.1<br /> PCI: Sharing IRQ 5 with 00:1c.2<br /> PCI: Sharing IRQ 5 with 00:1d.2<br /> PCI: Sharing IRQ 5 with 03:00.0<br /> PCI: Sharing IRQ 5 with 05:02.0<br /> ICH6: chipset revision 4<br /> ICH6: not 100% native mode: will probe irqs later<br /> ide0: BM-DMA at 0xf000-0xf007, BIOS settings: hda:pio, hdb:pio<br /> hda: SanDisk SDCFJ-128, ATA DISK drive<br /> ide0 at 0x1f0-0x1f7,0x3f6 on irq 14<br /> hda: attached ide-disk driver.<br /> hda: task_no_data_intr: status=0x51 { DriveReady SeekComplete Error }<br /> hda: task_no_data_intr: error=0x04 { DriveStatusError }<br /> hda: 250880 sectors (128 MB) w/1KiB Cache, CHS=980/8/32<br /> Partition check:<br /> hda: hda1 hda2 hda3 hda4 < hda5 hda6 hda7 hda8 ><br /> NET4: Linux TCP/IP 1.0 for NET4.0<br /> IP Protocols: ICMP, UDP, TCP, IGMP<br /> IP: routing cache hash table of 4096 buckets, 32Kbytes<br /> TCP: Hash tables configured (established 32768 bind 65536)<br /> Linux IP multicast router 0.06 plus PIM-SM<br /> NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.<br /> VFS: Mounted root (ext2 filesystem) readonly.<br /> Freeing unused kernel memory: 260k freed<br /> Warning: unable to open an initial console.<br /> Kernel panic: No init found. Try passing init= option to kernel.<br />

Pretty standard linux boot spam, but it looks like perhaps we've got a bad CF disk, given the seek errors. The real kicker is that punching the serial number from the back of the box into the 'activate online' page of the WatchGuard website is utterly unsuccessful as well.

In its defense, the red box is at least as good looking as I imagined it, and it IS exactly the solid state Linux 1u rackmount with a lot of Ethernet interfaces i've been looking for. Unfortunately, $3000 + service contracts is an awful lot of money for a cute box with software that doesn't work!

Update 2006-12-10

I spent too much of my weekend poking around with this and posting on the [WatchGuard forum](http://forum.watchguard.com), but I'm pretty convinced that this machine is just DOA. I can't get link lights on any of the Ethernet interfaces (sort of a show stopper for a firewall), and in addition the compact flash card doesn't seem to be loaded with the rescue image, let alone a full firewall OS. I was at least able to get onto the livesecurity website, turns out I'd transposed two digits of the serial number while reading it leaning over the firewall, and caught it when I recopied it from the box.

Being able to get on the website means I was able to get the software, and found out that it requires an explorer extension to complete the installer, which means it won't finish installing on xp64 or vista64. None of it seemed to want to run on vista either, but putting it into compatability mode seems to bring it to the same point as xp, meaning it won't finish installing because I can't activate the toolbar in a way it can find it since it installs into 32 bit explorer. The good news is that the important parts of the install do seem to have completed, at least all the files are on the disk. I was able to try to use fbxinstall to reinstall my CF image, but apparently that does'nt work on the e-series boxes, so I don't know if it failed due to bum hardware or not. Maybe its just me, but it seems making your installer dependent on activating a shell extension, for a firewall product of all things, seems like some dumb decision making.

I've opened a support ticket and started some dialog, but I'm not holding a lot of hope that I'll actually get a replacement unit in here in time to have it usable over the holidays. The responses I've gotten to my post on the forums indicate that the general user base of these boxes, 'experts' included, doesn't really have a clue what the underpinnings of the system look like, which is I guess for the most part a good thing. It does, however, tend to reduce the usefulness of their responses to my questions. DOA units also seems to be outside the radar of the average forum denizen, so I'm hoping my box is an isolated case. It does start making HA failover look pretty nice though.

Update 2006-12-11

I got a call from a 'fixer' at WatchGuard who has arranged for me to get a new unit overnighted. He concurs with my assessment that the unit is very much DoA. Kudo's to my sales guy and watchguard for stepping up on this one, I'm awaiting a functional unit with baited breath!