Stuff to remember

OpenSSL commands for SSL Certs (RSA/X509)

Generate Private Key (skip -des3 for unsecured key)

  openssl genrsa -des3 -out keyfile 1024

Generate CSR, (Common name is domain name!) 

  openssl req -new -key keyfile -out csrfile 

Generate self signed cert

 openssl x509 -req -days 360 -in csrtfile -signkey keyfile -out certfile 

Remove encryption from a key

  openssl rsa -in keyfile 

Verify that  a Cert and Key has the same modulus

  openssl x509 -noout -modulus -in certfile | openssl md5

  openssl rsa -noout -modulus -in keyfile | openssl md5

D-Link AirXpert DWL-AG650

This one I posted mostly for others, since I had a bit off issues getting this card to work with WEP and stuff when I set it up on this Kubuntu laptop.

Problem as that I entered WEP key and all settings right as far as I could see, hours ow iwconfig'ing, but no go.. After some heavy searching  finally found this one knowledgable guy that had posted something about using iwpriv authmode 2 - that did it.

Here is the kernel log from inserting the card now, posting this mostly so that search engines will pick it up and maybe you found it because of that :)

[17179725.196000] pccard: CardBus card inserted into slot 0
[17179725.280000] ath_hal: module license 'Proprietary' taints kernel.

[17179725.280000] ath_hal: 0.9.14.9 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413)
[17179725.328000] wlan: 0.8.6.0 (EXPERIMENTAL)
[17179725.332000] ath_rate_sample: 1.2
[17179725.348000] ath_pci: 0.9.6.0 (EXPERIMENTAL)
[17179725.352000] PCI: Enabling device 0000:03:00.0 (0000 -> 0002)
[17179725.352000] ACPI: PCI Interrupt 0000:03:00.0[A] -> Link [LNKB] -> GSI 5 (level, low) -> IRQ 5
[17179725.652000] Build date: Jul 10 2006
[17179725.652000] Debugging version (IEEE80211)
[17179725.652000] ath0: 11a rates: 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
[17179725.652000] ath0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps
[17179725.652000] ath0: 11g rates: 1Mbps 2Mbps 5.5Mbps 11Mbps 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
[17179725.652000] ath0: turboA rates: 6Mbps 9Mbps 12Mbps 18Mbps 24Mbps 36Mbps 48Mbps 54Mbps
[17179725.656000] ath0: H/W encryption support: WEP AES AES_CCM TKIP
[17179725.656000] ath0: mac 5.6 phy 4.1 5ghz radio 1.7 2ghz radio 2.3
[17179725.656000] ath0: Use hw queue 1 for WME_AC_BE traffic
[17179725.656000] ath0: Use hw queue 0 for WME_AC_BK traffic
[17179725.656000] ath0: Use hw queue 2 for WME_AC_VI traffic
[17179725.656000] ath0: Use hw queue 3 for WME_AC_VO traffic
[17179725.656000] ath0: Use hw queue 8 for CAB traffic
[17179725.656000] ath0: Use hw queue 9 for beacons
[17179725.656000] Debugging version (ATH)
[17179725.656000] ath0: Atheros 5212: mem=0xd2000000, irq=5
 

With any debian distributed solution here is what I think should take care of it, at least on ubuntu/kubuntu, edit and add this to your /etc/network/interfaces: 

auto ath0

iface ath0 inet dhcp

wireless-essid YOURESSID

wireless-key1 YOURKEYINHEXFORMATHERE

pre-up /sbin/iwpriv ath0 authmode 2
 That should take care of it and it should shortly after you see dhcp discovery in syslog it should go from alternate flashing of the leds to simultaneuous.

Good Luck :)

Networking OSPF / CISCO ++

On a Router (and perhaps switch?) - to enable Console messages (syslog) on a telnet or ssh session:    terminal monitor

Some Links

OSPF Stuff Cisco

Jumbo Frames on IOS 

*nix Tips and Tricks

FIxing ^M in files to correct format (with only Newline)

Bill Gates Systems, use vi :   %s/^M//g 

To get the ^M in there hit CTRL+V then enter

From Macintosh and Fruity Crap

cat badfile | tr '\015' '\012' > newfile

XEN on Debian Etch Running WIndows

This section I created since I had quite a hard time finding stuff myself, and its not always that accurate, here is a couple of places to start, then come back here, this isnt a step by step, its just the clues that I was messing with for some time.

http://www.debian-administration.org/articles/533

http://mediakey.dk/~cc/category/xen/

Make sure you did the stuff to enable bridge and restarted xend, and conbfigure the bridge stuff as well to the right nic.

Here's a list of xen stuff you may need, probably dont need it all and you may need other pkg's but this is what I know about from the top of my head filtering installed stuff:

thomas-x$ echo -n 'apt-get install '; dpkg -l | grep ii | egrep 'xen|ioemu|bridge' |  tr '[:blank:]' '\t' | cut -f 3 | tr '\n' ' '; echo
apt-get install bridge-utils libc6-xen linux-headers-2.6-xen-vserver-686 linux-headers-2.6.18-5-xen-vserver linux-headers-2.6.18-5-xen-vserver-686 linux-image-2.6-xen-vserver-686  linux-image-2.6.18-5-xen-vserver-686  linux-modules-2.6.18-5-xen-686 linux-modules-2.6.18-5-xen-vserver-686 xen-docs-3.0 xen-hypervisor-3.0.3-1-i386-pae xen-ioemu-3.0.3-1  xen-tools xen-utils-3.0.3-1 xen-utils-common xenman

set up some directory you want to use for your crap, for simplicity I used image/loop files, when you have it all working, change to LVM instead for your images for better performance.

/var/export/xen/images

/var/export/xen/iso

create a directory with the machine (domain) name

mkdir /var/export/xen/images/w2k3std32

create an empty image file

dd if=/dev/zero of=/var/export/xen/images/w2k3std32/disk.img bs=1M count=16384

(change the count to reflect how many megs you want)

Then I created  /etc/xen/w2k3std32.cfg  and made it like this:

Match All Files Except (apache htaccess)

 I spent some time looking for this and others did to, since there is no "negative string match" in regex its tricky, I did eventually find a trick here, its about limiting access to all files except some or one.

 AuthUserFile .htpasswd
 AuthGroupFile /dev/null
 AuthName "Staff"
 AuthType Basic

 <Files "*">
 require valid-user
 </Files>
I was also 
 <Files "filename">
 Allow from all
 Satisfy any
 </Files>

Towing Beer cans behind a boat or canoe

 As I was preparing myself mentally for this years yougottaregatta  I was also working on a way to safely string beer cans to keep cool in the water behind the canoe. Searching for this revealed little to nothing, so I figured I will improvise and fifure out a method. Unfortunately I did not take pictures of my work, but it turned out pretty well; Use the constrictor knot around each can, and a 3 inch piece of duct tape, not over the knot but on the other side just to prevent slipping... you can find tons of web pages showing how the constrictor knot is done, it holds up really well and is easy to tie even if you are hooking it on without the ends.... good luck! :)

Verizon ADSL and Westell autodirect crap

Verizon always want you to run their stupid software and crap when setting up a new line - I always refuse to do that, if it is dynamic and I dont have a username and password I call them to get that, if they ask I use OpenBSD 4.0 or in some cases CP/M-80 - when you have your u/p that is all you need - in the case of static  ip you dont need crap.

But, the really annoying part is that these stupid westell boxes have been programmed to redirect to a verizon page by default, it is really annoying - so, here is how that is disabled in all the westell boxes I have been on so far

http://192.168,1.1/verizon/redirect.htm

change the ip to whatever your modem/router is of course

then click the f'n button and you are on your way :)