installation
here is the ultimate guide, follow the same steps for 10g.
http://www.pythian.com/blogs/1355/installing-oracle-11gr1-on-ubuntu-810-intrepid-ibex
env
the $ORACLE_HOME and other env variables can be set by creating a shell under /etc/profile.d/, also remember to set $ORACLE_SID.
more /etc/profile.d/oracledb.sh
#!/bin/bash
export ORACLE_BASE=/u01/app/oracle
export ORACLE_HOME=/u01/app/oracle/product/10.2.0/oraibex
export ORACLE_OWNR=oracle
export PATH=$PATH:$ORACLE_HOME/bin
export ORACLE_SID=intrepid
dbconsole
to access the web console, login http://localhost:1158/em/ as system and password specified during db creation. the console is managed by
emctl start dbconsole
sqlplus
to connect with sqlplus remotely, first use netmgr on server side to configure.
:/u01/app/oracle/product/10.2.0/oraibex/network/admin$ cat listener.ora tnsnames.ora
# listener.ora Network Configuration File: /u01/app/oracle/product/10.2.0/oraibex/network/admin/listener.ora
# Generated by Oracle configuration tools.
INTREPID =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = xxx-desktop)(PORT = 1521))
)
# tnsnames.ora Network Configuration File: /u01/app/oracle/product/10.2.0/oraibex/network/admin/tnsnames.ora
# Generated by Oracle configuration tools.
INTREPID =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = xxx-desktop)(PORT = 1521))
)
(CONNECT_DATA =
(SERVICE_NAME = intrepid)
)
)
use lsnrctl to start/stop/check listener.
use /etc/init.d/oracledb to start/stop/check oracle.
sqlplus hr/password@//xxx-desktop:port/intrepid or sqlplus hr/password@intrepid
for more info, please refer to http://download.oracle.com/docs/cd/B19306_01/server.102/b14357/ape.htm
Sunday, November 30, 2008
Thursday, November 27, 2008
opensuse 11 kde on vmware
Wednesday, November 26, 2008
opensolaris 2008.05 on vmware
OpenSolaris is derived from the Unix System V Release 4 codebase. It demands more resources comparing to other popular Linux distros. It runs slow on a VMware player with 512MB allocated. Hardware support is not so good. Some small tools are not so stable. Chinese IME comes handy.
Features:
- Solaris Zones. Provide the ability to partition a machine into numerous virtual machines, each of which is isolated from the others.
- DTrace . A comprehensive dynamic tracing tool for investigating system behavior, safely on production machines.
- New IP stack. Providing vastly increased performance.
- ZFS. A 128-bit, state-of-the-art file system, with end-to-end error checking and correction, a simple command-line interface, and virtually limitless storage capacity.
浦东被翻了个底朝天
终于明白办奥运北京老百姓为什么不待见了。上海2010年要搞世博会,在加上拉动内需,浦东简直就把所有的路都轮了一遍。可恶的政府官员,好大喜功,近几年超级喜欢举办世界级的会议,好给盛世添彩,仕途加分。你举办你的,好歹做好规划,一部分一部分的来。基本上都是先申办,再突击建设。从今年下半年开始,地下的地铁先不说,浦东所有的主干道都同时开始修。走到哪都是土。昨天下班时间,突然上罗山路的闸道改线,几分钟的路走了半个小时。而且你还没有别的路绕,因为所有的路都在修。
Tuesday, November 25, 2008
迁出北京
用这篇博客记录一下我的没什么用的北京户口。
从家乡到北京读书工作,一晃就是9年,临出国的时候终于有了一个北京集体户口。户口放在中科人才,年年交几百块的户口档案管理费。
去年回国,又不得不开始和户口打交道。因为各种户口证明,档案证明,回国安置,子女落户之类的手续,人在上海工作,不得不往北京跑了几次。每次去办事都很顺利,不到一小时就可以办好的事,可是不得不请一天假,搭上上海到北京的来回机票,来回光机场建设费燃油税就四百,就为了一张盖红章的纸。
后来跑多了,发现北京的机场盖的可真乱。我出国的时候2号楼正在盖,好歹和1号连在一起。因为奥运,又在很远的地方盖了个有个乌龟壳的3号。几个航站楼把乘客彻底搞得晕头昏脑。开始打的去市里,后来发现机场大巴很不错。16元,直接到中关村。
终于受不了了,这样的异地户口简直太麻烦了,就算是北京户口也没用啊。按照海归迁户的复杂手续把户口迁到上海来。整个过程搞了有小半年。上海外服就去了N次。到中科人才找老师办事。人家说能不能下周什么时候来办,没给我气一跟头。还好, 知道我是从外地来的,加急一百,同意给我加急办。问了我句, “北京户口不要了?”
包里装着我的户口迁出证明和档案,离开了北京。
和北京这回是没什么关系了。
从家乡到北京读书工作,一晃就是9年,临出国的时候终于有了一个北京集体户口。户口放在中科人才,年年交几百块的户口档案管理费。
去年回国,又不得不开始和户口打交道。因为各种户口证明,档案证明,回国安置,子女落户之类的手续,人在上海工作,不得不往北京跑了几次。每次去办事都很顺利,不到一小时就可以办好的事,可是不得不请一天假,搭上上海到北京的来回机票,来回光机场建设费燃油税就四百,就为了一张盖红章的纸。
后来跑多了,发现北京的机场盖的可真乱。我出国的时候2号楼正在盖,好歹和1号连在一起。因为奥运,又在很远的地方盖了个有个乌龟壳的3号。几个航站楼把乘客彻底搞得晕头昏脑。开始打的去市里,后来发现机场大巴很不错。16元,直接到中关村。
终于受不了了,这样的异地户口简直太麻烦了,就算是北京户口也没用啊。按照海归迁户的复杂手续把户口迁到上海来。整个过程搞了有小半年。上海外服就去了N次。到中科人才找老师办事。人家说能不能下周什么时候来办,没给我气一跟头。还好, 知道我是从外地来的,加急一百,同意给我加急办。问了我句, “北京户口不要了?”
包里装着我的户口迁出证明和档案,离开了北京。
和北京这回是没什么关系了。
radio fan
I have bought quite a few Palm, PocketPC, MP3 players. They all end up the same. After just a couple of weeks, I sold them cheap on eBay or Taobao. Because they all have one problem: unless you keep feeding, syncing them, these gadgets are just boring and useless eventually.
One gadget, very old fashioned, is very useful. It is radio. The device is cheap. The contents are always new. I listen to the radio at office (online one), lat kitchen, in the bed, on the road.
Recently I bought a new one at Taobao. It can scan and store stations with one touch, show me the time and temperature as while.
One gadget, very old fashioned, is very useful. It is radio. The device is cheap. The contents are always new. I listen to the radio at office (online one), lat kitchen, in the bed, on the road.
Recently I bought a new one at Taobao. It can scan and store stations with one touch, show me the time and temperature as while.
Sunday, November 23, 2008
a team
A multi-disciplinary team was formed to consider all aspects of the project: licensing, business models, governance, co-development procedures, source code analysis, source code management, tools, marketing, website application design, and community development.
Era - the intersection of time show
The show is well presented with the combination of traditional Chinese acrobatic and modern arts. Performers can bend like snakes, pretty much can put anything on the head, and, the stunning metal globe cage chasing scene from the movie Promise. It has been performed in Shanghai Circus World daily at 7:30PM. The ticket price ranges from 80 to 580 CNY. I heard the show will end by the end of this year.
http://www.era-shanghai.com/2008/en/show.asp
http://www.era-shanghai.com/2008/en/show.asp
Wednesday, November 19, 2008
ubuntu in nutshell 5
sudo apt-get install bzr
$ bzr whoami 'Joe Doe'
sudo apt-get install subversion libapache2-svn
svnadmin create /path/to/repos/project
svn import /path/to/import/directory file:///path/to/repos/project
svn co file:///path/to/repos/project
sudo chown -R www-data:www-data /path/to/repos
sudo htpasswd -c /etc/subversion/passwd user_name
svn co http://servername/svn
/path/to/repos/project/conf/svnserve.conf
svn co svn://hostname/project project --username user_name
svn co svn+ssh://hostname/var/svn/repos/project
sudo apt-get install cvs
sudo apt-get install xinetd
cvs -d /var/lib/cvs init
/etc/xinetd.d/cvspserver
sudo /etc/init.d/xinetd start
cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "Importing my project to CVS repository" . new_project start
sudo apt-get install samba
/etc/samba/smb.conf
sudo mkdir -p /srv/samba/share
sudo chown nobody.nogroup /srv/samba/share/
sudo /etc/init.d/samba restart
sudo apt-get install libpam-smbpass
sudo mount -v -o remount /srv
sudo chown -R melissa /srv/samba/share/
sudo chgrp -R sysadmin /srv/samba/share/
sudo setfacl -R -m g:qa:rx /srv/samba/share/
sudo apt-get install apparmor-profiles
/etc/apparmor.d/usr.sbin.smbd
sudo aa-enforce /usr/sbin/smbd
cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r
sudo net groupmap add ntgroup="Domain Admins" unixgroup=sysadmin rid=512 type=d
sudo apt-get install samba smbfs smbclient
sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig
sudo ln -s /etc/samba/secrets.tdb /var/lib/samba
mount.cifs //fs01.example.com/share mount_point
smbclient //fs01.example.com/share -k -c "ls"
sudo apt-get install likewise-open
sudo domainjoin-cli join example.com Administrator
/etc/samba/lwiauthd.conf
sudo /etc/init.d/likewise-open restart
sudo domainjoin-cli leave
sudo domainjoin-cli --loglevel verbose join example.com Administrator
sudo crontab -e
mt -f /dev/st0 rewind
tar -xzf /dev/st0 -C /tmp etc/hosts
sudo apt-get install bacula
/etc/bacula/bacula-dir.conf
/etc/bacula/bacula-sd.conf
sudo adduser $username bacula
sudo /etc/init.d/bacula-sd restart
bconsole
egrep '(vmx|svm)' /proc/cpuinfo
sudo apt-get install kvm libvirt-bin
sudo adduser $USERNAME libvirtd
sudo apt-get install python-virtinst
sudo virt-install -n web_devel -r 256 -f web_devel.img -s 4 -c jeos.iso --accelerate --connect=qemu:///system --vnc --noautoconsole
sudo virt-clone -o web_devel -n database_devel -f /path/to/database_devel.img --connect=qemu:///system
virsh -c qemu:///system list
virsh -c qemu:///system start|autostart|reboot|shutdown web_devel
virsh -c qemu:///system save web_devel web_devel-022708.state
virsh -c qemu:///system restore web_devel-022708.state
virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom
sudo apt-get install virt-manager
virt-manager -c qemu:///system
virt-manager -c qemu+ssh://virtnode1.mydomain.com/system
sudo apt-get install virt-viewer
virt-viewer qemu:///system web_devel
virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel
sudo apt-get install python-vm-builder
sudo vmbuilder kvm ubuntu --suite intrepid --flavour virtual --arch i386 -o --libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition --user user --name user --pass default
sudo apt-get install apt-proxy
$ bzr whoami 'Joe Doe
sudo apt-get install subversion libapache2-svn
svnadmin create /path/to/repos/project
svn import /path/to/import/directory file:///path/to/repos/project
svn co file:///path/to/repos/project
sudo chown -R www-data:www-data /path/to/repos
sudo htpasswd -c /etc/subversion/passwd user_name
svn co http://servername/svn
/path/to/repos/project/conf/svnserve.conf
svn co svn://hostname/project project --username user_name
svn co svn+ssh://hostname/var/svn/repos/project
sudo apt-get install cvs
sudo apt-get install xinetd
cvs -d /var/lib/cvs init
/etc/xinetd.d/cvspserver
sudo /etc/init.d/xinetd start
cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "Importing my project to CVS repository" . new_project start
sudo apt-get install samba
/etc/samba/smb.conf
sudo mkdir -p /srv/samba/share
sudo chown nobody.nogroup /srv/samba/share/
sudo /etc/init.d/samba restart
sudo apt-get install libpam-smbpass
sudo mount -v -o remount /srv
sudo chown -R melissa /srv/samba/share/
sudo chgrp -R sysadmin /srv/samba/share/
sudo setfacl -R -m g:qa:rx /srv/samba/share/
sudo apt-get install apparmor-profiles
/etc/apparmor.d/usr.sbin.smbd
sudo aa-enforce /usr/sbin/smbd
cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r
sudo net groupmap add ntgroup="Domain Admins" unixgroup=sysadmin rid=512 type=d
sudo apt-get install samba smbfs smbclient
sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig
sudo ln -s /etc/samba/secrets.tdb /var/lib/samba
mount.cifs //fs01.example.com/share mount_point
smbclient //fs01.example.com/share -k -c "ls"
sudo apt-get install likewise-open
sudo domainjoin-cli join example.com Administrator
/etc/samba/lwiauthd.conf
sudo /etc/init.d/likewise-open restart
sudo domainjoin-cli leave
sudo domainjoin-cli --loglevel verbose join example.com Administrator
sudo crontab -e
mt -f /dev/st0 rewind
tar -xzf /dev/st0 -C /tmp etc/hosts
sudo apt-get install bacula
/etc/bacula/bacula-dir.conf
/etc/bacula/bacula-sd.conf
sudo adduser $username bacula
sudo /etc/init.d/bacula-sd restart
bconsole
egrep '(vmx|svm)' /proc/cpuinfo
sudo apt-get install kvm libvirt-bin
sudo adduser $USERNAME libvirtd
sudo apt-get install python-virtinst
sudo virt-install -n web_devel -r 256 -f web_devel.img -s 4 -c jeos.iso --accelerate --connect=qemu:///system --vnc --noautoconsole
sudo virt-clone -o web_devel -n database_devel -f /path/to/database_devel.img --connect=qemu:///system
virsh -c qemu:///system list
virsh -c qemu:///system start|autostart|reboot|shutdown web_devel
virsh -c qemu:///system save web_devel web_devel-022708.state
virsh -c qemu:///system restore web_devel-022708.state
virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom
sudo apt-get install virt-manager
virt-manager -c qemu:///system
virt-manager -c qemu+ssh://virtnode1.mydomain.com/system
sudo apt-get install virt-viewer
virt-viewer qemu:///system web_devel
virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel
sudo apt-get install python-vm-builder
sudo vmbuilder kvm ubuntu --suite intrepid --flavour virtual --arch i386 -o --libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition --user user --name user --pass default
sudo apt-get install apt-proxy
ubuntu in nutshell 4
sudo apt-get install squid
/etc/squid/squid.conf
acl biz_network src 10.1.42.0/24
acl biz_hours time M T W T F 9:00-17:00
http_access allow biz_network biz_hours
sudo /etc/init.d/squid restart
sudo apt-get install tomcat6
sudo apt-get install tomcat6-admin
sudo apt-get install tomcat6-docs
sudo apt-get install tomcat6-examples
sudo apt-get install tomcat6-user
tomcat6-instance-create my-instance
/etc/tomcat6/tomcat-users.xml
sudo chgrp -R tomcat6 /etc/tomcat6
sudo chmod -R g+w /etc/tomcat6
sudo apt-get install python-moinmoin
sudo apt-get install mediawiki php5-gd
sudo ln -s /var/lib/mediawiki /var/www/mediawiki
http://localhost/mediawiki/config/index.php
sudo apt-get install vsftpd
/etc/vsftpd.conf
sudo /etc/init.d/vsftpd start
sudo apt-get install nfs-kernel-server
/etc/exports
sudo /etc/init.d/nfs-kernel-server start
sudo mount example.hostname.com:/ubuntu /local/ubuntu
sudo apt-get install nfs-common
/etc/fstab
example.hostname.com:/ubuntu /local/ubuntu nfs rsize=8192,wsize=8192,timeo=14,intr
sudo apt-get install cupsys
/etc/cups/cupsd.conf
/etc/cups/cups.d/ports.conf
sudo /etc/init.d/cupsys restart
sudo apt-get install postfix
sudo dpkg-reconfigure postfix
/etc/postfix/main.cf
sudo postconf -e 'home_mailbox = Maildir/'
sudo postconf -e 'smtpd_sasl_type = dovecot'
sudo postconf -e 'smtpd_sasl_path = private/auth-client'
sudo postconf -e 'smtpd_sasl_local_domain ='
sudo postconf -e 'smtpd_sasl_security_options = noanonymous'
sudo postconf -e 'broken_sasl_auth_clients = yes'
sudo postconf -e 'smtpd_sasl_auth_enable = yes'
sudo postconf -e 'smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'
sudo postconf -e 'inet_interfaces = all'
openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024
chmod 600 smtpd.key
openssl req -new -key smtpd.key -out smtpd.csr
sudo openssl x509 -req -days 365 -in smtpd.csr -signkey smtpd.key -out smtpd.crt
openssl rsa -in smtpd.key -out smtpd.key.unencrypted
mv -f smtpd.key.unencrypted smtpd.key
openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650
sudo mv smtpd.key /etc/ssl/private/
sudo mv smtpd.crt /etc/ssl/certs/
sudo mv cakey.pem /etc/ssl/private/
sudo mv cacert.pem /etc/ssl/certs/
sudo postconf -e 'smtpd_tls_auth_only = no'
sudo postconf -e 'smtp_use_tls = yes'
sudo postconf -e 'smtpd_use_tls = yes'
sudo postconf -e 'smtp_tls_note_starttls_offer = yes'
sudo postconf -e 'smtpd_tls_key_file = /etc/ssl/private/smtpd.key'
sudo postconf -e 'smtpd_tls_cert_file = /etc/ssl/certs/smtpd.crt'
sudo postconf -e 'smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem'
sudo postconf -e 'smtpd_tls_loglevel = 1'
sudo postconf -e 'smtpd_tls_received_header = yes'
sudo postconf -e 'smtpd_tls_session_cache_timeout = 3600s'
sudo postconf -e 'tls_random_source = dev:/dev/urandom'
sudo postconf -e 'myhostname = mail.example.com'
/etc/postfix/main.cf
sudo /etc/init.d/postfix restart
sudo apt-get install dovecot-common
etc/dovecot/dovecot.conf
sudo /etc/init.d/dovecot restart
sudo postconf -e 'smtpd_tls_loglevel = 4'
sudo postconf -e 'debug_peer_list = problem.domain'
sudo /etc/init.d/postfix reload
sudo /etc/init.d/dovecot reload
sudo apt-get install exim4
sudo dpkg-reconfigure exim4-config
/etc/exim4/update-exim4.conf.conf
sudo update-exim4.conf
/var/lib/exim4/config.autogenerated
sudo /etc/init.d/exim4 start
sudo /usr/share/doc/exim4-base/examples/exim-gencert
/etc/exim4/conf.d/main/03_exim4-config_tlsoptions
/etc/exim4/conf.d/auth/30_exim4-config_examples
sudo update-exim4.conf
sudo /etc/init.d/exim4 restart
sudo apt-get install sasl2-bin
sudo adduser Debian-exim sasl
sudo /etc/init.d/saslauthd start
sudo apt-get install dovecot-imapd dovecot-pop3d
/etc/dovecot/dovecot.conf
sudo /etc/init.d/dovecot restart
sudo apt-get install mailman
sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf
sudo a2ensite mailman.conf
sudo postconf -e 'relay_domains = lists.example.com'
sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'
sudo postconf -e 'mailman_destination_recipient_limit = 1'
sudo postmap -v /etc/postfix/transport
/etc/exim4/conf.d/main/
/etc/exim4/conf.d/transport/
/etc/exim4/conf.d/router/
sudo /etc/init.d/mailman start
sudo /usr/sbin/newlist mailman
http://hostname/cgi-bin/mailman/
http://hostname/cgi-bin/mailman/admin
http://hostname/cgi-bin/mailman/listinfo
sudo apt-get install amavisd-new spamassassin clamav-daemon
sudo apt-get install dkim-filter python-policyd-spf
sudo apt-get install pyzor razor
sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip unzoo zip zoo
/etc/default/spamassassin
sudo /etc/init.d/spamassassin start
sudo adduser clamav amavis
/etc/amavis/conf.d/15-content_filter_mode
/etc/amavis/conf.d/20-debian_defaults
/etc/amavis/conf.d/50-user
sudo /etc/init.d/amavis restart
/etc/amavis/conf.d/40-policy_banks
sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'
/etc/squid/squid.conf
acl biz_network src 10.1.42.0/24
acl biz_hours time M T W T F 9:00-17:00
http_access allow biz_network biz_hours
sudo /etc/init.d/squid restart
sudo apt-get install tomcat6
sudo apt-get install tomcat6-admin
sudo apt-get install tomcat6-docs
sudo apt-get install tomcat6-examples
sudo apt-get install tomcat6-user
tomcat6-instance-create my-instance
/etc/tomcat6/tomcat-users.xml
sudo chmod -R g+w /etc/tomcat6
sudo apt-get install python-moinmoin
sudo apt-get install mediawiki php5-gd
sudo ln -s /var/lib/mediawiki /var/www/mediawiki
http://localhost/mediawiki/config/index.php
sudo apt-get install vsftpd
/etc/vsftpd.conf
sudo /etc/init.d/vsftpd start
sudo apt-get install nfs-kernel-server
/etc/exports
sudo /etc/init.d/nfs-kernel-server start
sudo mount example.hostname.com:/ubuntu /local/ubuntu
sudo apt-get install nfs-common
/etc/fstab
example.hostname.com:/ubuntu /local/ubuntu nfs rsize=8192,wsize=8192,timeo=14,intr
sudo apt-get install cupsys
/etc/cups/cupsd.conf
/etc/cups/cups.d/ports.conf
sudo /etc/init.d/cupsys restart
sudo apt-get install postfix
sudo dpkg-reconfigure postfix
/etc/postfix/main.cf
sudo postconf -e 'home_mailbox = Maildir/'
sudo postconf -e 'smtpd_sasl_type = dovecot'
sudo postconf -e 'smtpd_sasl_path = private/auth-client'
sudo postconf -e 'smtpd_sasl_local_domain ='
sudo postconf -e 'smtpd_sasl_security_options = noanonymous'
sudo postconf -e 'broken_sasl_auth_clients = yes'
sudo postconf -e 'smtpd_sasl_auth_enable = yes'
sudo postconf -e 'smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'
sudo postconf -e 'inet_interfaces = all'
openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024
chmod 600 smtpd.key
openssl req -new -key smtpd.key -out smtpd.csr
sudo openssl x509 -req -days 365 -in smtpd.csr -signkey smtpd.key -out smtpd.crt
openssl rsa -in smtpd.key -out smtpd.key.unencrypted
mv -f smtpd.key.unencrypted smtpd.key
openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650
sudo mv smtpd.key /etc/ssl/private/
sudo mv smtpd.crt /etc/ssl/certs/
sudo mv cakey.pem /etc/ssl/private/
sudo mv cacert.pem /etc/ssl/certs/
sudo postconf -e 'smtpd_tls_auth_only = no'
sudo postconf -e 'smtp_use_tls = yes'
sudo postconf -e 'smtpd_use_tls = yes'
sudo postconf -e 'smtp_tls_note_starttls_offer = yes'
sudo postconf -e 'smtpd_tls_key_file = /etc/ssl/private/smtpd.key'
sudo postconf -e 'smtpd_tls_cert_file = /etc/ssl/certs/smtpd.crt'
sudo postconf -e 'smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem'
sudo postconf -e 'smtpd_tls_loglevel = 1'
sudo postconf -e 'smtpd_tls_received_header = yes'
sudo postconf -e 'smtpd_tls_session_cache_timeout = 3600s'
sudo postconf -e 'tls_random_source = dev:/dev/urandom'
sudo postconf -e 'myhostname = mail.example.com'
/etc/postfix/main.cf
sudo /etc/init.d/postfix restart
sudo apt-get install dovecot-common
etc/dovecot/dovecot.conf
sudo /etc/init.d/dovecot restart
sudo postconf -e 'smtpd_tls_loglevel = 4'
sudo postconf -e 'debug_peer_list = problem.domain'
sudo /etc/init.d/postfix reload
sudo /etc/init.d/dovecot reload
sudo apt-get install exim4
sudo dpkg-reconfigure exim4-config
/etc/exim4/update-exim4.conf.conf
sudo update-exim4.conf
/var/lib/exim4/config.autogenerated
sudo /etc/init.d/exim4 start
sudo /usr/share/doc/exim4-base/examples/exim-gencert
/etc/exim4/conf.d/main/03_exim4-config_tlsoptions
/etc/exim4/conf.d/auth/30_exim4-config_examples
sudo update-exim4.conf
sudo /etc/init.d/exim4 restart
sudo apt-get install sasl2-bin
sudo adduser Debian-exim sasl
sudo /etc/init.d/saslauthd start
sudo apt-get install dovecot-imapd dovecot-pop3d
/etc/dovecot/dovecot.conf
sudo /etc/init.d/dovecot restart
sudo apt-get install mailman
sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf
sudo a2ensite mailman.conf
sudo postconf -e 'relay_domains = lists.example.com'
sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'
sudo postconf -e 'mailman_destination_recipient_limit = 1'
sudo postmap -v /etc/postfix/transport
/etc/exim4/conf.d/main/
/etc/exim4/conf.d/transport/
/etc/exim4/conf.d/router/
sudo /etc/init.d/mailman start
sudo /usr/sbin/newlist mailman
http://hostname/cgi-bin/mailman/
http://hostname/cgi-bin/mailman/admin
http://hostname/cgi-bin/mailman/listinfo
sudo apt-get install amavisd-new spamassassin clamav-daemon
sudo apt-get install dkim-filter python-policyd-spf
sudo apt-get install pyzor razor
sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip unzoo zip zoo
/etc/default/spamassassin
sudo /etc/init.d/spamassassin start
sudo adduser clamav amavis
/etc/amavis/conf.d/15-content_filter_mode
/etc/amavis/conf.d/20-debian_defaults
/etc/amavis/conf.d/50-user
sudo /etc/init.d/amavis restart
/etc/amavis/conf.d/40-policy_banks
sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'
Tuesday, November 18, 2008
ubuntu in nutshell 3
sudo passwd -l root
sudo passwd
sudo adduser|deluser username
sudo passwd -l username lock
sudo passwd -u username unlock
sudo addgroup|delgroup groupname
sudo chmod 0750 /home/username
/etc/adduser.conf
/etc/pam.d/common-password
sudo chage -l username
sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username
/etc/event.d/control-alt-delete
/boot/grub/menu.lst
grub-md5-crypt
sudo ufw enable|disable
sudo ufw allow|deny 22
sudo ufw allow proto tcp from 192.168.0.2 to any port 22
sudo ufw logging on|off
/etc/ufw/sysctl.conf
/etc/default/ufw
/etc/sysctl.conf
sudo sysctl -p
sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE
sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT
sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state ESTABLISHED,RELATED -i ppp0 -j ACCEPT
sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-prefix "NEW_HTTP_CONN: "
/etc/syslog.conf
sudo apt-get install apparmor-profiles
sudo apparmor_status
sudo aa-complain | aa-enforce /etc/apparmor.d/*
cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a
cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r
sudo /etc/init.d/apparmor reload
sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/
sudo apparmor_parser -R /etc/apparmor.d/profile.name
sudo rm /etc/apparmor.d/disable/profile.name
cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a
sudo /etc/init.d/apparmor stop|start
sudo update-rc.d -f apparmor remove|defaults
named-checkzone example.com /etc/bind/db.example.com
cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r
/etc/apparmor.d/
sudo aa-genprof slapd
sudo aa-logprof
openssl genrsa -des3 -out server.key 1024
openssl rsa -in server.key -out server.key.insecure
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
sudo cp server.crt /etc/ssl/certs
sudo cp server.key /etc/ssl/private
sudo passwd
sudo adduser|deluser username
sudo passwd -l username lock
sudo passwd -u username unlock
sudo addgroup|delgroup groupname
sudo chmod 0750 /home/username
/etc/adduser.conf
/etc/pam.d/common-password
sudo chage -l username
sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username
/etc/event.d/control-alt-delete
/boot/grub/menu.lst
grub-md5-crypt
sudo ufw enable|disable
sudo ufw allow|deny 22
sudo ufw allow proto tcp from 192.168.0.2 to any port 22
sudo ufw logging on|off
/etc/ufw/sysctl.conf
/etc/default/ufw
/etc/sysctl.conf
sudo sysctl -p
sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE
sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT
sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state ESTABLISHED,RELATED -i ppp0 -j ACCEPT
sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-prefix "NEW_HTTP_CONN: "
/etc/syslog.conf
sudo apt-get install apparmor-profiles
sudo apparmor_status
sudo aa-complain | aa-enforce /etc/apparmor.d/*
cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a
cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r
sudo /etc/init.d/apparmor reload
sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/
sudo apparmor_parser -R /etc/apparmor.d/profile.name
sudo rm /etc/apparmor.d/disable/profile.name
cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a
sudo /etc/init.d/apparmor stop|start
sudo update-rc.d -f apparmor remove|defaults
named-checkzone example.com /etc/bind/db.example.com
cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r
/etc/apparmor.d/
sudo aa-genprof slapd
sudo aa-logprof
openssl genrsa -des3 -out server.key 1024
openssl rsa -in server.key -out server.key.insecure
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
sudo cp server.crt /etc/ssl/certs
sudo cp server.key /etc/ssl/private
ubuntu in nutshell 2
sudo apt-get install apache2
/etc/apache2/apache2.conf
/etc/apache2/sites-available
/etc/apache2/sites-enabled
/etc/apache2/ports.conf
sudo a2ensite|a2dissite mynewsite
sudo apt-get install libapache2-mod-auth-mysql
/etc/apache2/mods-available
a2enmod|a2dismod
/etc/apache2/mods-enabled
sudo a2enmod ssl
sudo apt-get install mysql-server
sudo netstat -tap | grep mysql
sudo /etc/init.d/mysql restart
/etc/mysql/my.cnf
sudo apt-get install postgresql
/etc/postgresql/8.3/main
sudo -u postgres psql template1
sudo apt-get install php5 libapache2-mod-php5
sudo apt-get install php5-cli
sudo apt-get install php5-cgi
sudo apt-get install php5-mysql
sudo apt-get install php5-pgsql
/etc/apache2/apache2.conf
/etc/apache2/sites-available
/etc/apache2/sites-enabled
/etc/apache2/ports.conf
sudo a2ensite|a2dissite mynewsite
sudo apt-get install libapache2-mod-auth-mysql
/etc/apache2/mods-available
a2enmod|a2dismod
/etc/apache2/mods-enabled
sudo a2enmod ssl
sudo apt-get install mysql-server
sudo netstat -tap | grep mysql
sudo /etc/init.d/mysql restart
/etc/mysql/my.cnf
sudo apt-get install postgresql
/etc/postgresql/8.3/main
sudo -u postgres psql template1
sudo apt-get install php5 libapache2-mod-php5
sudo apt-get install php5-cli
sudo apt-get install php5-cgi
sudo apt-get install php5-mysql
sudo apt-get install php5-pgsql
ubuntu in nutshell 1
tasksel --list-tasks
tasksel --task-packages dns-server
do-release-upgrade
do-release-upgrade -d
sudo apt-get install nmap
sudo apt-get remove nmap
sudo apt-get update
sudo apt-get upgrade
sudo aptitude
/etc/apt/sources.list
/etc/network/interfaces
/etc/resolv.conf
sudo apt-get install dhcp3-server
ntpdate ntp.ubuntu.com
sudo apt-get install ntp
sudo apt-get install openssh-client
sudo apt-get install openssh-server
sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original
sudo chmod a-w /etc/ssh/sshd_config.original
/etc/issue
/etc/issue.net
sudo /etc/init.d/ssh restart
ssh-keygen -t dsa
cat id_dsa.pub >> .ssh/authorized_keys2
chmod 644 .ssh/authorized_keys2
apt-cache rdepends ebox | uniq
sudo apt-get install ebox
sudo apt-get install slapd ldap-utils
sudo dpkg-reconfigure slapd
sudo /etc/init.d/slapd stop|start
sudo slapadd -l example.com.ldif
ldapsearch -xLLL -b "dc=example,dc=com" uid=john sn givenName cn
sudo apt-get install bind9
sudo apt-get install dnsutils
/etc/bind/named.conf
/etc/bind/named.conf.options
/etc/bind/db.root
www IN A 192.168.1.12
web IN CNAME www
IN MX mail.example.com.
mail IN A 192.168.1.13
IN NS ns.example.com.
IN NS ns2.example.com.
ns IN A 192.168.1.10
ns2 IN A 192.168.1.11
dig -x 127.0.0.1
dig ubuntu.com
tasksel --task-packages dns-server
do-release-upgrade
do-release-upgrade -d
sudo apt-get install nmap
sudo apt-get remove nmap
sudo apt-get update
sudo apt-get upgrade
sudo aptitude
/etc/apt/sources.list
/etc/network/interfaces
/etc/resolv.conf
sudo apt-get install dhcp3-server
ntpdate ntp.ubuntu.com
sudo apt-get install ntp
sudo apt-get install openssh-client
sudo apt-get install openssh-server
sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original
sudo chmod a-w /etc/ssh/sshd_config.original
/etc/issue
/etc/issue.net
sudo /etc/init.d/ssh restart
ssh-keygen -t dsa
cat id_dsa.pub >> .ssh/authorized_keys2
chmod 644 .ssh/authorized_keys2
apt-cache rdepends ebox | uniq
sudo apt-get install ebox
sudo apt-get install slapd ldap-utils
sudo dpkg-reconfigure slapd
sudo /etc/init.d/slapd stop|start
sudo slapadd -l example.com.ldif
ldapsearch -xLLL -b "dc=example,dc=com" uid=john sn givenName cn
sudo apt-get install bind9
sudo apt-get install dnsutils
/etc/bind/named.conf
/etc/bind/named.conf.options
/etc/bind/db.root
www IN A 192.168.1.12
web IN CNAME www
IN MX mail.example.com.
mail IN A 192.168.1.13
IN NS ns.example.com.
IN NS ns2.example.com.
ns IN A 192.168.1.10
ns2 IN A 192.168.1.11
dig -x 127.0.0.1
dig ubuntu.com
Sunday, November 16, 2008
智勇大冲关咋就这么火?
这档节目基本上就是超级玛丽的真人版。里面有现场结婚的小两口, 有七十多岁的老大爷,有农村来的打工三姐妹,有理发的, 炒菜的,总之是各行各业。参加者还都特意准备了特色节目,比如角色扮演,才艺表演,唱歌,说段子,觉得国内真的有各个阶层,而且都生动真实的可爱。有的人信心满满,结果刚上场就掉到水里, 有的哆哆嗦嗦,一直提心吊胆的冲到了终点。
我看得哈哈傻笑, 估计全国和我一样的人不少。湖南卫视的节目能火, 就是因为他们能够清楚的认识到,那些坐在注意台上上冠冕堂皇的领导的重大新闻,那些傻乎乎的说俺们农民感谢党和政府的电视剧,都是扯淡。
我看得哈哈傻笑, 估计全国和我一样的人不少。湖南卫视的节目能火, 就是因为他们能够清楚的认识到,那些坐在注意台上上冠冕堂皇的领导的重大新闻,那些傻乎乎的说俺们农民感谢党和政府的电视剧,都是扯淡。
Hangzhou subway collapse
This is a fatal alarm for the 100bln CNY city subway project. Only after such serious accident, people will take serious about the safety measure. It also serves a bloody alarm for the domestic economy stimulation plan. How to stimulate? The foolproof way is go for the huge construction projects such as highway, subway, airport, seaport. Billions are on demand in a rush, accidents are tend to happen, so be the corruptions.
Wednesday, November 12, 2008
Tuesday, November 11, 2008
化妆的性本性
今天在出租车上看一个化妆的节目,联想到的。
在动物世界里, 一般是雄性比雌性更加耀眼。特别是到了发情求偶期。雌性比较低调,因为要承担生育养护幼崽的责任,动物都知道,是个强消耗高风险的工作。到了人这里,男女的性别特征都被衣服遮挡住了,真实展示性吸引力的部分就是脸。
男性在原始封建社会,主要是通过胡须来展示性能力。但是随着社会的不断“进步”,脑力劳动者主导了社会的审美取向,就是男的都要把胡子刮干净,把主要的性特征抹去,取而代之的是人体的延伸,比如跑车,香水,金表,绣着小标志的衣服。
女性的化妆的趋势则是更加赤裸裸的展示性本性。比如夸张加长的眼睫毛,发青的眼晕,微红的脸颊,无不直接的展示了性。
基本的趋势就是男性的动物性更加隐蔽,女性的动物性更加突出。
在动物世界里, 一般是雄性比雌性更加耀眼。特别是到了发情求偶期。雌性比较低调,因为要承担生育养护幼崽的责任,动物都知道,是个强消耗高风险的工作。到了人这里,男女的性别特征都被衣服遮挡住了,真实展示性吸引力的部分就是脸。
男性在原始封建社会,主要是通过胡须来展示性能力。但是随着社会的不断“进步”,脑力劳动者主导了社会的审美取向,就是男的都要把胡子刮干净,把主要的性特征抹去,取而代之的是人体的延伸,比如跑车,香水,金表,绣着小标志的衣服。
女性的化妆的趋势则是更加赤裸裸的展示性本性。比如夸张加长的眼睫毛,发青的眼晕,微红的脸颊,无不直接的展示了性。
基本的趋势就是男性的动物性更加隐蔽,女性的动物性更加突出。
Monday, November 10, 2008
Circuit City filled chapter 11
Thursday, November 06, 2008
Wednesday, November 05, 2008
Obama makes history

It is a true story of American dream. A descent of Kenya immigrant, raised in a single mom family, and later on stayed in Indonesia, now becomes the first African American USA president at the age of 47. It sets a great example of democracy for the whole world.
http://en.wikipedia.org/wiki/Barack_Obama
Tuesday, November 04, 2008
Monday, November 03, 2008
Subscribe to:
Posts (Atom)











