kunwei2005

1. Use jar to package the legacy binary into platform dependent jar files. Use jarsigner to sign the binary package jar file Before using jarsigner, you may need create some keystore with keytool. Some examples are: keytool -genkey -keystore abc.ks -alias abc -validity 365 keytool -genkey -keystore securityKM.ks -alias master -validity 365 keytool -selfcert -keystore securityKM.ks -alias master -validity 365 keytool -export -file securityKM.cert -keystore securityKM.ks -alias master -v keytool -printcert -file securityKM.cert keytool -import -file securityKM.cert -alias master -keystore abc.ks keytool -list -keystore abc.ks 2. Prepare the JNLP file with platform dependent resource properties. An example as: 3. Client click the JNLP and download the jar file. Using the code below to load and unpack binary String os = System.getProperty("os.name"); ClassLoader classLoader = getClass().getClassLoader(); URL url; int n; byte[] b = new byte[8092]; InputStream is; FileOu...

As ixj module changes, I have tried to install Quicknet LineJACK in another Linux box, this time it is much more smooth. Here are some hints: 1. You need to get the latest ixj module from http://www.openh323.org/driver/code.html Even ixj module in kernel 2.4.14 doesn't work. When you try `modprobe ixj`, you will get error somthing like: "/lib/modules/2.4.14/kernel/drivers/telephony/ixj.o: init_module: Operation not permitted Hint: insmod errors can be caused by incorrect module parameters, including invalid IO or IRQ parameters..." 2. As mentioned in the HOWTO below, "Do not include Quicknet Telephony driver support, either as a module or built-in, as this will overwrite the new module if the kernel is ever recompiled" 3. Because of Linux bugfix, you may experience error during compilation the ixj code. You need change a line in ixj.c from "#if LINUX_VERSION_CODE < 0x020409" to "#if LINUX_VERSION_CODE >= 0x020409". Is it becaus...

1. Download You can download the RPM source or RPM from rpmfind.net. wget ftp://fr2.rpmfind.net/linux/fedora/ extras/3/SRPMS/tripwire-2.3.1-21.src.rpm wget ftp://fr2.rpmfind.net/linux/fedora/ extras/3/i386/tripwire-2.3.1-21.i386.rpm These RPMs above have a small problem. It doesn't include the twinstall.sh, which is convenient for tripwire installation. You can find the twinstall.sh from previous version. For example wget http://download.fedora.us/fedora/fedora/ 1/i386/SRPMS.testing/tripwire-2.3.1-18.fdr.3.1.src.rpm 2. Compilation (if you download the source RPM) rpmbuild --rebuild tripwire-2.3.1-21.src.rpm rpmbuild --rebuild tripwire-2.3.1-18.fdr.3.1.src.rpm 3. Installation 3.1 Install old RPM to get twinstall.sh If you just compiled the source RPM, run rpm -Uvh /usr/src/redhat/RPMS/i386/tripwire-2.3.1-18.fdr.3.1.i386.rpm Or rpm -Uvh tripwire-2.3.1-18.fdr.3.1.i386.rpm Now you need copy /etc/tripwire/twinstall.sh to somewhere. cp /etc/tri...

AD support DNS, LDAP v2/v3, LDIF, DHCP, HTTP, SNTP, Kerberos 5 All domains in a Tree share a common schema, common Global Catalog All trees in a Forest share a common schema, common Global Catalog, but have different naming structure DC immediately replicates important changes in AD such as user account is disabled DC multimaster replication means DC are peers, no single master AD generates ring topology to ensure one path is down, it still can be replicated • Distinguished Name – DN • Relative DN – RDN • GUID – unique 128-bit ID assigned to an object when created, never change • User Principal Name – UPN Default in Win2000, AD in a tress is implicit 2-way trust Default in WinNT4, explicit one-way nontransitive trust • WinNT4 • Win2000 domains in a separate forest • Win2000 domains and MIT Kerberos 5 Keep your organization in a single domain if possible, add OU. Under certain conditions, you need create new domains: • Massi...

.com .edu .org .net .gov .mil .num – phone # .arpa – reverse DNS .us .cc Look up host 1. HOSTS 2. DNS cache 3. DNS db 4. NetBIOS 5. WINS 6. Broadcast 7. LMHOSTS Look up FQDN 1. HOSTS 2. DNS cache 3. DNS db 4. pass up until found 203.102.101.100/24, the reverse DNS PTR records is 101.102.203.in-addr.arpa By default it is caching-only DNS server, needs lots of RAM, response from cache or pass to other DNS server (Root Hints), no zone transfer overhead. ipconfig /displaydns ipconfig /flushdns BIND – Berkeley Internet Name Domain BIND must support SRV records Root name server acts as Start of Authority SOA for the zone and top-level server in the domain. It contains “.” domain and thus can’t be a forwarder. SOA is the first record in the DB. • Serial number – versioning • Primary server • Email address – use . symbol instead of @ • Sec...