Some plain text.

tee /tmp/foo<<'EOF'

More plain text.

Implementing DNSSEC on Scientific Linux 6.7

My environment is running BIND in a chroot jail, using the bind-chroot package installed with YUM. This article at DigitalOcean got me started; this documents steps specific to a Scientific Linux (or Centos, RHEL, etc) install.

#change into the zone file directory
cd /var/named/chroot/var/named/

#generate a zone signing key
dnssec-keygen -a NSEC3RSASHA1 -b 2048 -n ZONE example.com

#generate a key signing key
dnssec-keygen -f KSK -a NSEC3RSASHA1 -b 4096 -n ZONE example.com

#append an include to the zone file for both public key files
for key in Kexample*.key; do echo "\$INCLUDE $key" >> db.example.com; done

#sign the zone (this needs to be done after each update, and every couple of weeks as well)
dnssec-signzone -A -3 $(head -c 1000 /dev/random | sha1sum | cut -b 1-16) -N INCREMENT -o example.com -f db.example.com.signed db.example.com

#make sure bind is looking at the signed zone files
sed -i 's/db.example.com;/db.example.com.signed;/' /var/named/chroot/etc/named.conf

#reload bind
rndc reload

#these are the DS records that the domain registrar needs
cat dsset-example.com.

Setting up Mac Mail and iPhone for Google mail

I recently had to set up Mac Mail for our company’s Google Apps account (although the same thing likely happens with GMail.) I was seeing strange behaviour which I eventually figured out was due to the weirdness of IMAP and how Google treats labels as folders.

  • deleting a message in Mail would just tag it with a Deleted Items label on the server; it never disappeared from the All Mail folder.
  • Sent messages were tagged with a Sent Messages label and didn’t show up when I went to the Sent Items folder
  • An [Imap]/Drafts label was cluttering things up in Google’s webmail

I pretty quickly figured out that it was just a problem of Mail not knowing what folders on the IMAP server were to be used for a specific function. But it took me a few days to figure out how to give Mail that information.

In Mail, open the [GMail] folder and select the Trash (Bin, Deleted items, etc) mailbox. Once it’s open, go to the Mailbox menu, select Use This Mailbox For, and choose Trash. Repeat this process for [GMail]/Sent Items, [GMail]/Spam, and [GMail]/Drafts. Now you can use the webmail interface to delete the Deleted Items, Sent Messages, and [Imap]/Drafts labels.

A similar problem happens with iPhone when using Exchange ActiveSync instead of IMAP. When you use IMAP, you have an option in your account settings to use Archive or Delete. But with ActiveSync, all deleted messages are archived by default, and stay in the All Mail folder. You can change this behaviour by visiting http://m.google.com/sync where you can change a few settings for each mobile device using ActiveSync, including Delete Email As Trash.

Asterisk voicemail notifications with MP3

I found a lovely script for sending voicemail notifications in MP3 format instead of wav. It’s a bit of a hack, since Asterisk only provides you with an entire, MIME encoded email message as input. Anyway, I improved it somewhat and wanted to share. This version adds call info and an image to the MP3 file, and is more elegant IMHO – e.g. use of pushd/popd or mktemp.
Continue reading “Asterisk voicemail notifications with MP3”

Moving a Subversion repository

From one server to another, no need for file transfers or anything like that. Do this on the new server.

mkdir /foo/bar/new
svnadmin create /foo/bar/new
ssh root@old.host "svnadmin dump /foo/bar/old" | svnadmin load /foo/bar/new

On your working copies you’ll need to say where the new repository location is:

svn switch --relocate https://old.host/svn https://new.host/svn /path/to/working/copy

Change default MySQL password on Ubuntu

When you install the MySQL package on Ubuntu Linux, it does not come with a blank password, as most packages and installations do. The package is set up so you can change the password like so:

sudo dpkg-reconfigure mysql-server-5.1

The top Google hits recommend stopping the service, restarting MySQL with privileges disabled, etc. This is not the way it was meant to be done, according to Ubuntu.

FreePBX hangs at login

Have you ever clicked on your FreePBX link, get prompted for a password, and then sit staring at your browser “connecting to…” your server forever? Restarting Apache doesn’t work, restarting MySQL doesn’t work, even restarting Asterisk doesn’t work. Meanwhile everything else is running just fine, but you need to restart the entire server before FreePBX starts working again.
Continue reading “FreePBX hangs at login”

Early History of Municipality of Maple Ridge with Port Hammond and Haney

The valley of the Fraser River is the bed of an ancient arm of the sea which extended as far inland as Hope. It is to a large extent made up of alluvial deposits, according to Dr. Dawson. The Indians have a very ancient tradition which bears out in a legendary way this more scientific premise. They say that the receding of the sea from this district explains the presence of certain varieties of fish. From Lillooet Lake to the Fraser and from Lillooet River to the Stave River is the district of Maple Ridge, which as the name implies, is a shelf or table-land, declining at the two ends, that occurs in the rise of the land from the Fraser River towards the mountains in the far background. It is the neighboring [sic] Municipality to that of Coquitlam and shares most of the natural features of the latter, but having the advantage of lying considerably higher above the level of the river. Briefly, this is how this part came to be settled:
Continue reading “Early History of Municipality of Maple Ridge with Port Hammond and Haney”

Cisco TAR file format

I needed to upload the device manager HTML files to a Cisco switch separately because I was low on flash space. You can’t download the HTML separately from Cisco (at least not for the 2950 switch I was upgrading) so I had to make the TAR myself.

So I made up a TAR file with the usual tar -cf command and tried to load it, but got a checksum error:

Loading html.tar 
PaxHeader/html (unknown file type)  -- ignored!
%Tar checksum error in

Turns out that Cisco requires and old format TAR file (compatible with V7 UNIX.) Create the archive with tar -cof and it will work out.