Friday, December 28, 2012

Fix "RRV bucket is corrupt" on Domino CA Process

Today I have met a problem during submit a request to CA process on my domino server.

It prompt out "RRV bucket is corrupt" after choosing CA server and press OK.

I tried all method like fixup, updall, compact, restore from backup....no luck.

Finally, I open Address book-> Security-> Certificate-> <<My CA Server NAME>> and press Edit Certifier

There is a CFG???????????????.nsf  attachment inside. I try to open it, it prompt the same error.

So I think it is worth to try so I delete that attachment and Save.

It fixed the problem!

Wednesday, November 14, 2012

Step of Upgrading Zabbix from 1.8 to 2.0



  1. Download latest source from www.zabbix.com
  2. Installation Manual for 2.0 http://www.zabbix.com/documentation/2.0/manual/installation/install#from_the_sources
  3. service zabbix-server stop
  4. service zabbix-agentd stop
  5. tar xvf zabbix-2.0.3.tar.gz
  6. cd zabbix-2.0.3
  7. ./configure --enable-server --enable-agent --with-mysql --with-net-snmp --with-libcurl --with-libxml2 --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc/zabbix
  8. make install
  9. cd upgrades/dbpatches/2.0/mysql
  10. ./upgrade <your database name>
  11. cp /usr/local/sbin/zabbix* /sbin
  12. cd frontends
  13. cp php /var/www/html/ -R
  14. cd /var/www/html
  15. mv zabbix zabbix185
  16. mv php zabbix
  17. chown apache.apache zabbix -R
  18. service zabbix-server start
  19. service zabbix-agentd start
  20. http://<servername>/zabbix to run the setup and finish

Monday, October 29, 2012

Alexey Ragozin: Story of relentless CMS

Alexey Ragozin: Story of relentless CMS: Recently, a comment on other article of this blog has led me to noteworthy issue with CMS (Concurrent Mark Sweep) garbage collector. Prob...

Monday, October 22, 2012

Yum Transaction Check Error


If you got some error when using Yum during Transaction Checking

Traceback (most recent call last):
......... 
TypeError: unsubscriptable object

Trying using this command

"yum clean metadata"

Wednesday, September 19, 2012

Register VM Cloned SELS 11 SP2 to ZEN Network

The process for SLE11 is as follows:
  1. Find out the alias of the update service by using "zypper ls".
  2. Remove the update service, for example by using "zypper removeservice nu_novell_com".
  3. Remove the NCC credentials using "rm /etc/zypp/credentials.d/NCCcredentials".
  4. Delete the suseRegister cache file using "rm /var/cache/SuseRegister/lastzmdconfig.cache".
  5. With this complete, restart YaST, and then launch Novell Customer Center Configuration. This will register any new keys that were needed. Attention: if you use the suse_register commandline tool instead of YaST (for example by using: suse_register -a regcode-sles=YourActivationCode -a email=YourEmailAddress -a moniker=YourHostname -L /root/.suse_register.log) you may have to refresh the services by running "zypper refresh-services -r" afterwards.
  6. Check if the update repositories have been added correctly by using "zypper lr".

Friday, September 14, 2012

IP Address Management Excel Tool

An excel sheet that is made by me years ago to manage my Company's IP Addresses...
I decide to share it out to whom might find it useful.
I am not going to explain how to use it as one who want to use it will understand it.
If you are having headache in managing or calculating IP addresses, it would be your nice pal.



Download it (not viewing) at Google Doc
https://drive.google.com/file/d/0B8gWj5_Gu6ZuclMyeEZwOGpJaVE

Monday, September 10, 2012

Disable Toll-Fraud Prevention Feature on Cisco IOS 15

Recently helped sibling company to replace new router and spent 1 day to troubleshoot VoIP problem.

after using "debug voice cccapi" we got this log...

%VOICE_IEC-3-GW: Application Framework Core: Internal Error (Toll fraud call rejected): 
IEC=1.1.228.3.31.0 on callID 3 GUID=F146D6B0539C11DF800CA596C4C2D7EF 
000183: *Apr 30 14:38:57.251: //3/F146D6B0800C/CCAPI/ccCallSetContext: 
   Context=0x49EC9978 
000184: *Apr 30 14:38:57.251: //3/F146D6B0800C/CCAPI/cc_process_call_setup_ind: 
   >>>>CCAPI handed cid 3 with tag 1002 to app "_ManagedAppProcess_TOLLFRAUD_APP" 
000185: *Apr 30 14:38:57.251: //3/F146D6B0800C/CCAPI/ccCallDisconnect: 
   Cause Value=21, Tag=0x0, Call Entry(Previous Disconnect Cause=0, Disconnect Cause=0)


http://www.cisco.com/en/US/tech/tk652/tk90/technologies_tech_note09186a0080b3e123.shtml#t3

Finally found out all call are blocked by new Toll-Fraud Prevention Feature on new IOS 15...
And it is the command to disable it.



voice service voip
 no ip address trusted authenticate

Tuesday, September 4, 2012

Inter-forest migration of Windows7 from Domain Controller 2003 to 2008


ERR2:7711 Unable to retrieve the DNS hostname for the migrated computer 'XXXX'. The ADSI property cannot be found in the property cache.
 (hr=0x8000500d)

The NullSessionPipes REG_MULTI_SZ registry value under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Parameters on the target domain controllers are not defined correctly. 
1.   Add the following values to the NullSessionPipes REG_MULTI_SZ registry value:
COMNAP
COMNODE
SQL\QUERY
SPOOLSS
netlogon
lsarpc
samr
BROWSER


NOTE: The values most necessary would be LSARPC and Netlogon.  If any values currently exist in this registry location on the DCs then these should be appended to the list above.
2.   Restart the Server service and all dependant services to have this change take effect.

Wednesday, August 29, 2012

"tail -f" with highlight


tail maillog -f | grep -E ": 550|: 554" | perl -p -e "s/(550|554)/\e[1;46;1m$&\e[0m/g;"


0all attributes off
1bold
32foreground green
40background black
Colors
This vector holds the colors used for SGR control sequences parameters 30 to 37 \(foreground colors) and 40 to 47 (background colors).
ParameterColor
3040black
3141red
3242green
3343yellow
3444blue
3545magenta
3646cyan
3747white

Thursday, August 16, 2012

Fix WSUS Internal DB if corrupted


sqlcmd -S \\.\pipe\MSSQL$MICROSOFT##SSEE\sql\query

ALTER DATABASE SUSDB SET SINGLE_USER WITH NO_WAIT

DBCC CHECKDB

go

If the about command cannot fix, try this one but will have data loss
DBCC checkdb ('SUSDB', repair_allow_data_loss)


Finally,
ALTER DATABASE SUSDB SET MULTI_USER WITH NO_WAIT
go

Friday, July 27, 2012

Backup Oracle on SLES using VMware Snapshot

/usr/sbin/pre-freeze-script
#!/bin/bash
/bin/su - oracle -c "echo $(date) >> /u01/app/oracle/snapshot.log"
/bin/su - oracle -c "/u01/app/oracle/product/11.2.0/xe/bin/sqlplus /nolog @/u01/app/oracle/suspend.sql >> /u01/app/oracle/snapshot.log"

/usr/sbin/post-thaw-script

#!/bin/bash
/bin/su - oracle -c "echo $(date) >> /u01/app/oracle/snapshot.log"/bin/su - oracle -c "/u01/app/oracle/product/11.2.0/xe/bin/sqlplus /nolog @/u01/app/oracle/resume.sql >> /u01/app/oracle/snapshot.log"

/u01/app/oracle/suspend.sql
connect / as sysdba;
ALTER SYSTEM SUSPEND;
exit;

/u01/app/oracle/resume.sql
connect / as sysdba;
ALTER SYSTEM RESUME;
exit;
/u01/app/oracle/.bash_profile
export ORACLE_HOME=/u01/app/oracle/product/11.2.0/xe
export ORACLE_SID=XE
export NLS_LANG=`$ORACLE_HOME/bin/nls_lang.sh`
export PATH=$ORACLE_HOME/bin:$PATH



Thursday, July 26, 2012

Oracle Enable ArchiveLog and change processes

connect / as sysdba;

shutdown;
startup mount

alter system set processes=150 scope=spfile;
alter database archivelog;

alter database open;

Backup Domino on Linux using VDR or Veeam

1. Install VMware-Tools (I think it should be installed but unlucky still a lots out there do not know how to install on Linux)
2. Create a script /usr/sbin/pre-freeze-script

#!/bin/bash

# Just a log with date, you can remove it
echo $(date) >> /var/log/snapshot.log

# Assume Domino Service is installded and started by user "domino", we drop all connection and flush all database cache
/bin/su - domino -c "cd /local/notesdata/;/opt/ibm/lotus/bin/server -c \"drop all\";/opt/ibm/lotus/bin/server -c \"dbcache flush\""


# Some forks saying we should do a sync before backup, run it with no harm...

/bin/sync

3. chmod 755 /usr/sbin/pre-freeze-script


4. In VMware vSphere, take a snapshot of your Domino Server, uncheck "Snapshot the virtual machine's memory" as it will not run the script is memory is taken and check "Quiesce guest file system".


Check if /var/log/snapshot.log has date recorded and better connect your Domino Console and see if the connection has been dropped when taking snapshot (to prove the script has been run correctly).

Wednesday, July 25, 2012

Remove logwatch mail on RHEL with Domino

If you don't really care and want to use logwatch, easiest way, remove /etc/cron.daily/0logwatch
OR
If you care about logwatch, go  /usr/share/logwatch/default.conf/logwatch.conf and config those mail settings

Monday, July 23, 2012

PaloAlto Firewall SSL VPN with Client Certificate Verification

1. Import CA Certificate into PaltoAlto
2. Create Client Certificate Profile
Select CA Certificate
Input OCSP URL E.g. https://IP:PORT/ca/ocsp
Check use OCSP
3. Select that Client Certificate Profile in SSL VPN Tunnel Setting
4. Commit and Test

Monday, July 16, 2012

Setting UCS Jumbo Frame with VMware

Uplink Switch
set system mtu jumbo 9000

UCS
Set System Class QoS "Best Effort" mtu 9216
Set and Enable your preferred System Class QoS mtu 9216
Create QoS on your preferred System Class QoS
Apply on vNic with mtu 9000

VMware
set virtual switch mtu 9000
set virtual port mtu 9000
set vmotion kernel port mtu 9000

Tuesday, July 3, 2012

Recovery Domino Directory names.nsf from corrupt


nfixup names.nsf -f -j -v -l
ncompact names.nsf -c -i
nconvert -d names.nsf * pubnames.ntf
nupdall names.nsf -RX

Monday, June 11, 2012

Configure infoblox updating Microsoft DNS Server

After trying and reading manual, this is the summary

Create a AD account on your AD

ktpass -princ infoblox@AD.LOCAL -mapuser infoblox@AD.LOCAL -pass Inf0b1ox -out ibkey.ktb -ptype krb5_nt_principal -crypto AES256-SHA1

import your keytab file into infoblox

Config DDNS on Infoblox


— Zone Name: Enter the name of the zone that receives the updates. You can specify both forward-mapping
and reverse-mapping zones.
— DNS Server Address: Enter the IP address of the primary name server for that zone.
— Security: Select GSS-TSIG.
— AD Domain: Select the AD domain associated with the keytab file.
— DNS Principal: The name and domain of the DNS server receiving the DDNS updates. Note that this is
not the same as the Kerberos principal you specified when you generated the keytab file.
Use the following format when you complete this field: DNS/dns_server_fqdn@ad_domain
dns_server_fqdn: This is the FQDN of the DNS server. You can use the “dig” command to perform a DNS
lookup to obtain the FQDN of the DNS server as it appears on the SOA record.
ad_domain: This is the AD domain of the DNS server.
— Click Test GSS-TSIG to list the grid members that are allowed to send GSS-TSIG updates to the DNS
server.

Useful link about VMFS 5

http://blogs.vmware.com/vsphere/2011/07/new-vsphere-50-storage-features-part-1-vmfs-5.html
http://blogs.vmware.com/vsphere/2011/07/new-vsphere-50-storage-features-part-2-storage-vmotion.html
http://blogs.vmware.com/vsphere/2011/07/new-enhanced-vsphere-50-storage-features-part-3-vaai.html
http://blogs.vmware.com/vsphere/2011/07/vsphere-50-storage-features-part-5-storage-drs-initial-placement.html
http://blogs.vmware.com/vsphere/2011/07/vsphere-50-storage-features-part-6-storage-drs-balance-on-space-usage.html

Wednesday, May 23, 2012

Cisco UCS B200 M2 with VMware DPM using IPMI

Found this document but failed when setting it on Virtual Center.

https://supportforums.cisco.com/servlet/JiveServlet/downloadBody/8582-102-3-18898/Integrating%20Cisco%20UCS%20with%20vSphere%20Distributed%20Power%20Management.pdf

Finally, I confirmed when applying IPMI policy, it will not take effect to the server. The service profile need to be reapplied (dissociate and associate) in order to take effect.

Wednesday, May 16, 2012

Move Oracle XE oradata

I copied it from OTN discussion forum Florian W.

1.) Clear the folder that contains your user dump destination. Use show parameter get this folder.
 

show parameter user_dump_dest

2.) Create a tracecopy of your controlfile.
ALTER DATABASE
BACKUP CONTROLFILE TO TRACE;

You will find this tracefile in your user dump destination.
3.) Shutdown your database
shutdown immediate

4.) Move the oradatafolder to the new drive.
5.) Login to sqlplus and create a PFILE.
sqlplus / as sysdba
 
CREATE PFILE='/usr/lib/oracle/xe/initXE.ora'
FROM SPFILE;
exit

You will find the file initXE.ora in the folder /usr/lib/oracle/xe.
6.) Change the parameter CONTROL_FILES in initXE.ora so that it complies with the new location of your controlfiles. That's the new location of the oradata folder.
7.) Create a SPFILE from your PFILE
sqlplus / as sysdba
 
CREATE SPFILE
FROM PFILE='/usr/lib/oracle/xe/initXE.ora';

8.) Start your database in nomount mode.
sqlplus / as sysdba
 
startup nomount

9.) Change locations of the Redo Log and Datafiles in the tracecopy of your controlfile created in step 2. Do this with the first create controlfile statement (NORESETLOGS).
10.) Use the first CREATE CONTROLFILE statement (NORESETLOGS) in the tracecopy of your controlfile that you've changed in step number 9 to create a new controlfile that knows about the new locations of your oradata folder. If Oracle tells you that everything is OK then you have won otherwise there will be a lot of work to do to get your DB running again.

Please be very careful. This is a very tricky thing you want to do.

Annals of Oracle's Improbable Errors: How to change the language of SQL Developer's user...

Annals of Oracle's Improbable Errors: How to change the language of SQL Developer's user...: Always check out the original article at http://www.oraclequirks.com for latest comments, fixes and updates . Yesterday i upgraded SQL Dev...

Tuesday, May 15, 2012

Install Sun Java and Tomcat 6 on SLES 11 SP2

1) Install Sun Java
>rpm ivh jdk-6u31-linux-amd64.rpm
2) Upgrade zlib library by rpm
>rpm -Uvh zlib-*.rpm

zlib-1.2.5-8.1.x86_64.rpm


zlib-devel-1.2.5-8.1.x86_64.rpm
3) Install belows required libraries from SLES 11 SDK
>rpm -ivh lib*.rpm
libapr-util1-1.3.9-9.2.x86_64.rpm
libapr1-1.4.2-3.1.x86_64.rpm
libapr1-devel-1.4.2-3.1.x86_64.rpm
libdb-4_8-4.8.30-2.4.x86_64.rpm
libopenssl-devel-1.0.0c-17.1.x86_64.rpm
libopenssl1_0_0-1.0.0c-17.1.x86_64.rpm
4) Install libtcnative
zypper install libtcnative*

/usr/lib64 # ln -s libtcnative-1.so.0 libtcnative-1.so
5) Start Tomcat



Thursday, May 3, 2012

Install HP 10G Driver on ESXi 4.0


To update or add drivers on existing VMware ESX and ESXi Server 4.0 installations using vihostupdate:
1. Power on the ESX or ESXi Server host.
2. Place the driver CD in the CD-ROM drive of the host on which either the vSphere CLI package is
installed or vMA is hosted.
http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdHome/?sp4ts.oid=4274763&spf_p.tpst=psiSwdMain&spf_p.prp_psiSwdMain=wsrp-navigationalState%3Dlang%253Den%257Ccc%253DUS%257CprodNameId%253D4274763%257CprodSeriesId%253D4194735%257CswLang%253D8%257CswEnvOID%253D4115%257Caction%253DlistDriver&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
3. Log in to vMA.
4. Configure VI fast path-> vifp addserver (ESXi Server host IP address).
5. Initialize fast path to the correct ESXi Server vifpinit (IP address).
6. Mount the ISO image from vMA.
7. Run the vihostupdate command to install drivers using the offline bundle:

vihostupdate --install --bundle <offline_bundle>.zip

E.g.

vihostupdate --install --bundle EMU-be2net-4.0.306.0-offline_bundle-473366.zip
vihostupdate --install --bundle hp-esxi4.0uX-bundle-1.6-5.zip
vihostupdate --install --bundle BCM-bnx2-2.0.22f.v40.1-offline_bundle-383735.zip
vihostupdate --install --bundle BCM-tg3-3.120h.v40.1-offline_bundle-543909.zip
vihostupdate --install --bundle ntx-nx_nic-4.0.614-164009-offline_bundle-674775.zip
vihostupdate --install --bundle qlg-qlcnic-4.0.727-164009-offline_bundle-483210.zip
vihostupdate --install --bundle SVE-be2net-2.102.518.0-offline_bundle-329992.zip

Friday, April 6, 2012

Apache Tomcat / Java SE 6 HotSpot[tm] Virtual Machine Garbage Collection Tuning

http://www.oracle.com/technetwork/java/javase/gc-tuning-6-140523.html

Sample for 2G Memory Machine with 1.5G HugePage for short session jsp

JAVA_OPTS="$JAVA_OPTS -server -XX:+UseLargePages -Xms1280M -Xmx1344M -Xss256K -XX:PermSize=128M -XX:MaxPermSize=192M -XX:NewSize=1024M -XX:TargetSurvivorRatio=90 -verbose:gc -XX:+PrintGCTimeStamps -XX:+PrintGCDetails -XX:+PrintTenuringDistribution -XX:+PrintHeapAtGC -XX:+UseTLAB -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:+CMSClassUnloadingEnabled -XX:MaxTenuringThreshold=23 -XX:SurvivorRatio=10 -XX:+ExplicitGCInvokesConcurrent -XX:+DisableExplicitGC -XX:CMSInitiatingOccupancyFraction=70 -XX:CMSInitiatingPermOccupancyFraction=90 -XX:+UseCMSInitiatingOccupancyOnly -XX:+CMSIncrementalPacing -XX:+HeapDumpOnOutOfMemoryError -XX:+CMSIncrementalMode -XX:ParallelGCThreads=2 -XX:+CMSConcurrentMTEnabled -XX:ConcGCThreads=3 -Dfile.encoding=UTF8 -XX:+UseCMSCompactAtFullCollection -XX:+CMSParallelRemarkEnabled  -XX:ReservedCodeCacheSize=32M -XX:MaxGCPauseMillis=20 -XX:MaxGCMinorPauseMillis=4"

Sample for 4G Memory Machine with 3G HugePage for short session jsp

JAVA_OPTS="$JAVA_OPTS -server -XX:+UseLargePages -Xms2048M -Xmx2560M -Xss256K -XX:PermSize=384M -XX:MaxPermSize=512M -XX:NewSize=1536M -XX:TargetSurvivorRatio=90 -verbose:gc -XX:+PrintGCTimeStamps -XX:+PrintGCDetails -XX:+PrintTenuringDistribution -XX:+PrintHeapAtGC -XX:+UseTLAB -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:+CMSClassUnloadingEnabled -XX:MaxTenuringThreshold=23 -XX:SurvivorRatio=10 -XX:+ExplicitGCInvokesConcurrent -XX:+DisableExplicitGC -XX:CMSInitiatingOccupancyFraction=70 -XX:CMSInitiatingPermOccupancyFraction=90 -XX:+UseCMSInitiatingOccupancyOnly -XX:+CMSIncrementalPacing -XX:+HeapDumpOnOutOfMemoryError -XX:+CMSIncrementalMode -XX:ParallelGCThreads=2 -XX:+CMSConcurrentMTEnabled -XX:ConcGCThreads=3 -Dfile.encoding=UTF8 -XX:+UseCMSCompactAtFullCollection -XX:+CMSParallelRemarkEnabled  -XX:ReservedCodeCacheSize=32M -XX:MaxGCPauseMillis=20 -XX:MaxGCMinorPauseMillis=4"

Sample for 4G Memory Machine with 3G HugePage for long session jsp

JAVA_OPTS="$JAVA_OPTS -server -XX:+UseLargePages -Xms1536M -Xmx2048M -Xss256K -XX:PermSize=512M -XX:MaxPermSize=768M -XX:NewSize=256M -XX:MaxNewSize=768M -XX:TargetSurvivorRatio=90 -verbose:gc -XX:+PrintGCTimeStamps -XX:+PrintGCDetails -XX:+PrintTenuringDistribution -XX:+PrintHeapAtGC -XX:+UseTLAB -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:+CMSClassUnloadingEnabled -XX:MaxTenuringThreshold=8 -XX:SurvivorRatio=6 -XX:+ExplicitGCInvokesConcurrent -XX:+DisableExplicitGC -XX:CMSInitiatingOccupancyFraction=70 -XX:CMSInitiatingPermOccupancyFraction=90 -XX:+UseCMSInitiatingOccupancyOnly -XX:+CMSIncrementalPacing -XX:+HeapDumpOnOutOfMemoryError -XX:ParallelGCThreads=2 -XX:+CMSConcurrentMTEnabled -XX:ConcGCThreads=3 -Dfile.encoding=UTF8 -XX:+UseCMSCompactAtFullCollection -XX:+CMSParallelRemarkEnabled -XX:MaxGCPauseMillis=20 -XX:MaxGCMinorPauseMillis=4"




CATALINA_OPTS="$CATALINA_OPTS -Dcom.sun.management.jmxremote=true -Dcom.sun.management.jmxremote.port=9001 -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.authenticate=false -Djava.rmi.server.hostname=127.0.0.1 -Xloggc:/var/opt/apache-tomcat/logs/gc.log"


pkill -f jstatd

jstatd -J-Djava.security.policy=$CATALINA_HOME/conf/catalina.policy -J-Djava.rmi.server.hostname=127.0.0.1 &




If you get this error on Linux
Java HotSpot(TM) 64-Bit Server VM warning: Failed to reserve shared memory (errno = 12)

Add the following to /etc/sysctl.conf

kernel.shmmax = 3221225472
vm.nr_hugepages = 1536
vm.hugetlb_shm_group = 1000



Add the following to /etc/security/limits.conf

*    soft    memlock unlimited
*    hard    memlock unlimited

Friday, March 23, 2012

ADMT 3.2

Microsoft Document is suck...

This is another better testing procedure I found on the web.


1. On all DC's failure auditing must be enabled:
 --> Policy -> Computer configuration -> windows settings -> security policy -> local policy -> auditing policy -> Audit Accountmanagement (failure and success)
2. On the destination and the source DC the following group policy should be configured simmilar:
 --> Policy -> Computer configuration -> windows settings -> security policy -> local policy -> security options -> Network Security: LAN Manager Authentication
3. Both Domain Admins should be member of the BuiltIn Group Administrators in the other domain
4. Set the registry key hkey_local_machine\system\currnetcontrolset\control\lsa\tcpipclientsupport to 1 on the source dc
5. Disable SID Filtering with netdom.exe and commandline
-->On target dc:
netdom trust {FQDN of target domain} /domain:{FQDN of source domain} /enablesidhistory:yes
netdom trust {FQDN of target domain} /domain:{FQDN of source domain} /quarantine:no
-->On source dc:
netdom trust {FQDN of source domain} /domain:{FQDN of target domain} /enablesidhistory:yes
netdom trust {FQDN of source domain} /domain:{FQDN of target domain} /quarantine:no
6. On the source DC create a local security group in the domain
--> Name: NetBiosNameoftheDomain$$$$ for examble: subdomain$$$
7. gpupdate /force on both domains
8. Add the Domain Admins global group from the target domain to the Administrators local group in the source domain.
9. Test the trust in AD Domains and Trusts

Wednesday, March 14, 2012

Disable unnecessary SLES 11 Service

chkconfig --level 23456 portmap off
chkconfig --level 23456 autofs off
chkconfig --level 23456 smartd off
chkconfig --level 23456 acpid off
chkconfig --level 23456 nfs off
chkconfig --level 23456 splash off
chkconfig --level 23456 splash_early off
chkconfig --level 23456 postfix off
chkconfig --level 23456 alsasound off
chkconfig --level 23456 dbus off
chkconfig --level 23456 network-remotefs off

Install VMware-Tools in SLES 11 SP2 for VMware on ESXi 4.0u4

http://packages.vmware.com/tools/docs/manuals/osp-esx-41-install-guide.pdf

As SLES 11 SP2 is not supported on ESXi 4.0 so we use ESXi 4.1 VMware-Tools.

rpm --import http://packages.vmware.com/tools/VMWARE-PACKAGING-GPG-KEY.pub

wget http://packages.vmware.com/tools/esx/4.1latest/sles11sp2/SRPMS/vmware-open-vm-tools-kmod-8.3.12-559003.src.rpm

YaST2 --install gcc kernel-source kernel-syms

rpmbuild --rebuild vmware-open-vm-tools-kmod-8.3.12-559003.src.rpm


rpm -ivh /usr/src/packages/RPMS/x86_64/vmware-open-vm-tools-kmod-3.0.13-0.27-default-8.3.12-559003.x86_64.rpm


zypper addservice --type=YUM  http://packages.vmware.com/tools/esx/4.1latest/sles11sp2/x86_64/ vmware-tools-collection

zypper install vmware-tools

--------------------------------------------------------------------------------

zypper addservice --type=YUM http://packages.vmware.com/tools/esx/latest/sles11.2/x86_64 vmware-tools-collection

Friday, February 24, 2012

Windows 7 Slow File Copy Solution

netsh interface tcp set global rss=disabled
netsh interface tcp set global autotuninglevel=disabled

Thursday, February 2, 2012

Setting Large Page Memory in Linux

Edit /etc/sysctl.sys
vm.nr_hugepages = 512
vm.hugetlb_shm_group = 1

> sysctl -p

> cat /proc/meminfo

Nice Auto Calculator
http://www.peuss.de/node/67

Saturday, January 14, 2012

Sametime 8.5.3 backward compatible setting

sametime.ini on 8.5.3 server

VP_SECURITY_LEVEL=0

sametime.ini on older server
VPS_PREFERRED_LOGIN_TYPES=130D,130C,130B,130A,1308,1306,1304,143B,143A,1439,1438,1437,1436,1435,1434,1433,1432,1431,1430,14AD,14AB,14A3,14A2,14A1,14A0

Monday, January 9, 2012

Chrome For Roaming Profile Users

Install your business version of chrome first as which it will be installed in Program File not AppData

http://www.google.com/apps/intl/en/business/chromebrowser.html

Below Registry file will change the default data path as this. You change change it if necessary by yourself after importing.

"C:\Program Files\Google\Chrome\Application\chrome.exe" --user-data-dir="%AppData%\Google\Chrome\User Data"


Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\ChromeHTML\shell\open\command]
@=hex(2):22,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,20,\
  00,46,00,69,00,6c,00,65,00,73,00,5c,00,47,00,6f,00,6f,00,67,00,6c,00,65,00,\
  5c,00,43,00,68,00,72,00,6f,00,6d,00,65,00,5c,00,41,00,70,00,70,00,6c,00,69,\
  00,63,00,61,00,74,00,69,00,6f,00,6e,00,5c,00,63,00,68,00,72,00,6f,00,6d,00,\
  65,00,2e,00,65,00,78,00,65,00,22,00,20,00,2d,00,2d,00,75,00,73,00,65,00,72,\
  00,2d,00,64,00,61,00,74,00,61,00,2d,00,64,00,69,00,72,00,3d,00,22,00,25,00,\
  41,00,70,00,70,00,44,00,61,00,74,00,61,00,25,00,5c,00,47,00,6f,00,6f,00,67,\
  00,6c,00,65,00,5c,00,43,00,68,00,72,00,6f,00,6d,00,65,00,5c,00,55,00,73,00,\
  65,00,72,00,20,00,44,00,61,00,74,00,61,00,22,00,20,00,22,00,25,00,31,00,22,\
  00,00,00

[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command]
@=hex(2):22,00,43,00,3a,00,5c,00,50,00,72,00,6f,00,67,00,72,00,61,00,6d,00,20,\
  00,46,00,69,00,6c,00,65,00,73,00,5c,00,47,00,6f,00,6f,00,67,00,6c,00,65,00,\
  5c,00,43,00,68,00,72,00,6f,00,6d,00,65,00,5c,00,41,00,70,00,70,00,6c,00,69,\
  00,63,00,61,00,74,00,69,00,6f,00,6e,00,5c,00,63,00,68,00,72,00,6f,00,6d,00,\
  65,00,2e,00,65,00,78,00,65,00,22,00,20,00,2d,00,2d,00,75,00,73,00,65,00,72,\
  00,2d,00,64,00,61,00,74,00,61,00,2d,00,64,00,69,00,72,00,3d,00,22,00,25,00,\
  41,00,70,00,70,00,44,00,61,00,74,00,61,00,25,00,5c,00,47,00,6f,00,6f,00,67,\
  00,6c,00,65,00,5c,00,43,00,68,00,72,00,6f,00,6d,00,65,00,5c,00,55,00,73,00,\
  65,00,72,00,20,00,44,00,61,00,74,00,61,00,22,00,20,00,22,00,25,00,31,00,22,\
  00,00,00

Tuesday, January 3, 2012

Copied from  http://djmitsch.com/SupportRef.nsf/b49d69a888845c8085256d220011d77b/ff57e5952af1ebda8525753e005a5b85!OpenDocument

Domino 8 Pre & Post Upgrade Tasks When Upgrading from 6.5 and 7.x
Mindwatering Incorporated
Tripp W Black on 01/14/2009 at 11:26 AM


Category: Domino Upgrades / Installations
Software Upgrade
Before Upgrading:
http://www-01.ibm.com/support/docview.wss?rs=475&uid=swg21303385
Run fixup, updall, and compact to verify applications' integrity.
Fixup -f -j -v -l
or
nfixup -f -j -v -l (MS Windows)

NOTE:
-f Exhaustive fixup, all documents are checked.
-j Include transaction logged databases. Without this option, fixup does not check logged databases.
-v Exclude database views (faster) for all views that will be rebuilt by updall later, no need to check view at this moment.
-l Log all processed databases (optional).

Updall -R -X
or
nupdall -R -X (MS Windows)

NOTE:
-R (Completely rebuilds the view indexes)
-X (Completely rebuilds the full text index, if the index exist)

Compact -c -i
or
ncompact -c -i (MS Windows)

NOTE:
-c Use copy-style compaction and recover unused white space
-i Ignore errors and allow compact to run anyway (only for copy-style)
If you are running transaction logging, be sure to use the -b switch. This is different than the upper case -B switch as -B will change the DBIID of any transactionally logged databases.

Update the notes.ini:
http://www-10.lotus.com/ldd/dominowiki.nsf/dx/database-ods-version-should-be-upgraded-to-the-latest-

Remove the following lines:
SERVER_SESSION_TIMEOUT
SERVER_MAXSESSIONS
SERVER_MAXUSERS

If you want your Domino 8 server to use the new ODS add the following:
CREATE_R8_DATABASES=1

If you want your Domino 8.5 server to use the new ODS add the following:
CREATE_R85_DATABASES=1
(remove the CREATE_R8_DATABASES=1 entry)

Upgrade the Server:

1. Upgrade an Admin Client
2. Upgrade your administrative server. (The one that is the administration server of the Domino - names.nsf.)
3. Do the immediate post upgrade tasks:
design -f names.nsf
design -f admin4.nsf
or
ndesign -f names.nsf
ndesign -f admin4.nsf

Note: the server will automatically rebuild the $Users and the $ServerAccess views. This can take quite a while on a large directory (15,000 users = approx 30 mins). You can do this off-line and then put your directory back into place right before you reboot it.
http://www.ibm.com/developerworks/lotus/documentation/releasenotes/?S_TACT=105AGX13&S_CMP=LPLOTUS

fixup names.nsf -f -j -v -l
fixup admin4.nsf -f -j -v -l
or
nfixup names.nsf -f -j -v -l
nfixup admin4.nsf -f -j -v -l

compact names.nsf -c -i
compact admin4.nsf -c -i
or
ncompact names.nsf -c -i
ncompact admin4.nsf -c -i

updall names.nsf -RX
updall admin4.nsf -RX
or
nupdall names.nsf -RX
nupdall admin4.nsf -RX

3. Replicate the directory.
Note: The 8.x design is safe back to 7.x and 8.x servers. Previous design servers should not be replicating the design. (We clicked the property to Update on Admin Server. We also don't have design task running nightly on the secondary servers.

Install Domino Server on RHEL using Graphic Mode

Search this RPM on the web, install on RHEL and you will able to start installation using Graphic Mode.


glibc-2.12-1.7.el6.i686
libgcc-4.4.4-13.el6.i686
libstdc++-4.4.4-13.el6.i686

libXtst-1.0.99.2-3.el6.i686
libXmu-1.0.5-1.el6.i686
libXp-1.0.0-15.1.el6.i686

libXft-2.1.13-4.1.el6.i686.rpm
libXi-1.3-3.el6.i686.rpm