Archive for the ‘Tools’ category

Windows 7 replacement for Cisco IPSec VPN Client

November 17th, 2009

If you’re a Cisco IPSec VPN client user and recently switched to 64bit Windows 7, you probably noticed that the combination doesn’t fly.  Cisco’s IPSec client won’t run on a 64bit OS.  One option is to use XP mode to run the VPN software, but unfortunately, every remote tool you may use has to be run from the XP VM.

Reading through serverfault, I saw a post about shrew’s vpn client.  I have installed it and it seems to be working great, in native 64bit Windows 7.  The best part is, the software is free(outside of the twinge of guilt for not donating of course!(edit:  I will be)).  I’ll report back if I run into any issues.

USB to Serial Adapters

November 12th, 2009

One large issue I have run into with installing Windows 7 on my laptop was that my USB to Serial adapter that I need to use a cisco console cable and that no longer worked.  Apparently, from a little bit I have read on the web, most of the manufacturers of these devices use a chipset from Prolific.  I pulled the driver from this site:

http://www.prolific.com.tw/eng/downloads.asp?ID=31

Once I got that installed, all was well again and I was able to connect to switches and routers via the console cable.  Yay

Simple file sharing and Sophos

February 12th, 2009

We’re a Novell shop. No domain. Workstation policies are handled via zenworks. We have recently switched over to Sophos for virus scanning. Because we’re not running in a windows domain environment, I’m having difficulties forcing the virus scanner out using the Sophos enterprise console. I can manually install the client and the client will grab updates and policy settings from a Novell “share”, but the enterprise console is crippled.

Here’s the scenario. Workstation running XP PRO SP3. 2003 Server running the enterprise console. Both machines are in the same workgroup. I have a user on the server with the same username and password as a user on the workstation. The workstation user is in the ‘administrators’ group. I have a workstation policy(via zenworks) which will turn off simple file sharing at logon. At that point, I can push the sophos scanner out to the machine and/or simply go to \\machinename\C$ and see it’s C: drive. If the machine is sitting at the logon screen, I can’t push the sophos client out or even go to \\machinename\C$ to see the C: drive.

Is this by design? If so, is there anyway around it?

Free alternatives

July 7th, 2008

I’ve spent a good portion of the morning figuring out a replacement for Adrem.  I’ve settled on a cobbled together solution of VNC for NetWare and a spiffy little program called Terminals.  It’s not the ideal solution, but it will get the job done for now.  A word to the wise, bare VNC will whip your security types into a frenzy, so watch your ass!

VNC for Netware is as easy as dumping the contents of the zip file onto the sys volume and running the following commands.

load vncpass

load vncsrv

The other benefit going this route, is that Terminals will allow for “Favorites” of servers, “tabbed browsing”, and multiple protocols so I can add all my servers to this one utility.  Still not as nice as Adrem, but it has features that the AWOL freecon didn’t have.

FreeCon

July 4th, 2008

I almost forgot, Adremsoft used to make something called freecon.  It was a nice little client side tool which dumped an NLM on your Netware server and allowed for quick console access to your servers.  It seems as if they discontinued freecon and replaced it with litecon, the same exact piece of software, which costs $500.  Good one fellas.

I’m not in 3rd party software sales, but one the biggest problems I see as a consumer, is the pricing put on some of these products.  Many times, they blow the pricing of the parent software(NetWare in this case) right out of the water.  When you’re paying as much for a 3rd party utility as you are a mature operating system or a complete email solution, your product starts to look less attractive.  For what it’s worth, that is coming from the viewpoint of someone who works and purchases software for a non profit organization.

At any rate, time to find a replacement.

New laptop!

November 1st, 2007

I convinced the boss to let me replace my frankensteined hp proliant server turned workstation and my tired laptop with a new laptop and dock combo. I opted for a Lenovo Thinkpad T61. I had a few requirements. First of all, I wanted something that was durable, and the Thinkpads are known for their sturdy construction. Second, I wanted to go with something with the intel VT chip so I could run Xen and use the laptop as a mobile learning lab. I want to start playing around with OES2 ad in particular, the virtualization pieces. That was impossible with any spare equipment we have lying around. Finally, I needed at least 3gb to properly run the virtual machines I was planning on running.  My only possible mistake was that I opted for the 7200rpm 100gb drive.  That might not end up being enough in the long run, but it’s good enough for now.

The laptop came in early this week.  I now have three operating systems installed on it.  Windows XP for my day to day work, opensuse 10.3 for a testbed with a Linux workstation, and SLES 10 for my Xen host.  The laptop is nice and quick.  The build quality seems very good.  I’ve had it on my lap for an hour and it’s only gotten warm.  My last laptop would literally burn my legs(it had a P4 chip) .  The construction is also very solid; when I lift the unit up with one hand, it flexes less than any laptop I’ve handled before.  Thinkpad touchpads and keyboards have always been among my favorites, and the T61 is no worse.  The integrated intel 965gm graphics chip is good enough to run Xgl/Compiz on opensuse, which is spiffy.

My next step will be to start reading the OES2 docs and get my hands dirty…

iPrint and drivers

September 10th, 2007

So far iPrint seems to be working fairly well.  Installing printers is much easier.  I can keep all my drivers in the broker itself.  I’ve got one small issue…and I can’t believe Novell actually doesn’t have a proper way to do this, but you apparently can’t update what drivers a printer object uses and have it actually propagate to the client machines.  How the hell was that oversight made?  Moreover, how the crap has been an oversight for multiple versions of iPrint?

Backups == RAGE

August 9th, 2007

I finally took a leap of faith and rebuilt part of the backup system. When I set it the first time around, I carved the MSA20 drive arrary into two logical RAID devices and in turn two logical drives on the Windows 2003 box it is directly attached to.

We use Backupexec 10 and I set up 36 or so B2D devices for each backup job, per day, per server to be backed up, all full backup jobs. I did this for ease of restore over efficiency. Due to the more limited space restrictions, I had to move B2D devices all over the place to get proper backups. It wasn’t working for me.

I blew the entire drive array away and made one big RAID5 logical drive just to build a bit of fault tolerance into the setup. I also created three B2D policies per server. Every other Friday, a full backup will run. The other Fridays, a separate full backup will run. Monday through Thursday, incremental backups will span the gaps between fulls. This way, I’m hoping to have two full weeks of hot backups. I’m going to add automatic duplicate jobs to copy the full backups to tape so I can have off site backups. We’re not a 24×7 shop, so backups during the weekend are mostly redundant. If space ends up not being an issue, I’ll add incremental backups for Saturday and Sunday as well just to cover everything. If I have a flaw in this design, please feel free to leave a comment tell me what I’m off on and what you might do differently.

Finally, Backupexec for Windows is not NCS(Novell Cluster Services) aware. So because of this, I have to make sure that I know where my services are located. If I have a resource attached to a specific node, I need to keep it there when it comes time for the backup to run otherwise it will fail. This throws a small wrench into everything. I really wanted to keep the nodes and resources completely non dependent on each other, but that’s not going to work out.

Cluster, ZenWorks imaging, air conditioning, OpenSUSE

July 19th, 2007

After lots of trial, error, and reading, I’ve finally gotten our Novell cluster online.

Just to clarify, no, the cluster isn’t called totally_sweet_cluster, although that would be totally sweet. Right now it’s just two nodes(Dell PowerEdge 1950) running iScsi initiator and one server(Dell PowerEdge 2950) running as the iScsi Target. I have one extra 1950 that I still need to install NetWare on and configure. I’m working on getting the proper cluster licenses so I can install the extra node as OES only gives you licenses for two nodes out of the box.  I will play with the service migration tomorrow assuming I have the time.

We’re moving forward with our imaging.  Multicast imaging with ZenWorks is a huge benefit for us.  It even saves the computer name and ip address so we don’t have to manually configure that on each machine when we image a lab.  Once the summer is over, I need to sit down and figure out how to build a Zen image disk, specifically how to upgrade the kernel and initrd in the ISO.  Until then, http://www.zenimaging.info is a great site to grab up to date zen ISOs and PXE related software.

The air conditioner in our server room has been faltering.  It’s a rather large dedicated unit so it should have no problem handling the heat our servers generate.   However, the temperature in the room would swing by a matter of 10 degrees F from 70 degrees to 80 degrees in half an hour or less.  Lately it has been acting far worse.  Twice yesterday the room hit 90+ degrees.  Obviously, that’s not good.  Thanks to our facilities department, the problem was discovered and fixed.  It was sitting around 70 degrees when I left.  I’m hoping the issue is solved.  A hot data center isn’t a good environment, especially when you’re looking to add more servers.

Finally, here’s an obligatory Linux screen shot.  I’ve been trying to use my OpenSUSE install as much as possible lately. ;)

More Sophos, 24 hours to worry about

July 12th, 2007

After going back and forth with the Sophos support department, I think I finally nailed my ongoing issue. My problem was that I couldn’t authenticate to my NetWare servers to create an area for updates for both the NetWare servers themselves and our Windows workstations/servers. It finally dawned on me that I screwed something up during the initial install, thanks in part to the documentation. During the install, the documentation deviated with what I was actually seeing on screen. The docs wanted a user called EMLibUser1 on both the local management machine and a matching user with the same details in eDirectory. When I finished the install, I took a look at the local windows users created. The install automatically created a user called SophosEMLibUuser1. To match my eDirectory user, I went ahead and renamed that user instead of my eDirectory user so they would match. Apparently, there is a section in the Sophos Library Manager MMC that specifies what user it’s going to use on the local machine to handle remote CIDs. Once I changed that to EMLibUser1 and restarted all the services, I was finally able to authenticate to my NetWare servers. See, this is what happens when I bother reading the documentation BEFORE I bumble my way into installing something!

One major thing that has changed since I went from desktop support to system/network administration is that I now think about my work day in terms of 24 hours. With my last position, once my day was over, it was over. These days, I can’t exactly down a server for maintenance in the middle of the day and only impact a single person. Server work happens at night, during weekends, and during maintenance days made known to the users well in advance(and reminded many times). Thankfully, I don’t work in an environment where losing a server at 7:00 pm will cause money to be lost. At worst, a short term outage causes complaining and my phone ringing off the hook.

The 24 hour thought process comes into play when I need to do work on a server and I have to start worrying about the backup processes running and how many hours the maintenance might take. If I know it’s going to take four hours or so, I’d prefer not to tack that on the end of my day. I’m more likely to make a mistake 11 hours into a work day than 3. So either I come in late or come in during the weekend. Even then, I have to make sure there are no night classes, no board meetings, and nobody who determines my yearly raises around when I start pulling plugs. It’s a different dynamic than I was previously used to.