Oneiroi - Ramblings of a Sysadmin - Latest Comments

Re: Openssl unable to load certificate wrong asn1 encoding routines:ASN1_CHECK_TLEN::tag:tasn_dec.c:1319 - Oneiroi

aam — Fri, 30 Sep 2016 15:50:17 -0000

Thank you very much for the "to the point" error analysis. Exactly what helped me install my CA Cert.

Re: mySQL Slow Query Log Rotation

Craig Edmonds — Thu, 11 Aug 2016 04:27:45 -0000

Does this command go into my.conf?

Re: Alcatel 4068 - Bad Tftp1 Address

Netboot — Mon, 06 Jun 2016 03:22:18 -0000

Please kindly help if you have the solution for it.

Re: Alcatel 4068 - Bad Tftp1 Address

Netboot — Mon, 06 Jun 2016 03:21:31 -0000

Hi all,

I got the same error message on Alcatel IP Phone on cisco switch.But when I moved the IP Phone to other switches, it works properly.

Re: mySQL Forcing Utf-8 Compliance for All Connections.

Philippe Verdy — Mon, 23 May 2016 12:46:50 -0000

Be aware that "utf8" in MySQL and MariaDB means only the encoding limited to the BMP. Sending **valid** UTF-8 text to a database will cause the text being stord to be **silently** truncated on the first non-BMP character (instead of just fintering out the non-BMP characters and keeping the rest of the text between them or after them): this can cause severe security issues, notably on databases used with websites (where people can post comments containing non-BMP characters such as emojis or Chinese text with characters in the SIP: this is easy to do now on most smartphones even if it's more difficult on traditional PCs with classic keyboard drivers).

Valid and conforming UTF-8 requires the use of "utf8mb4" (in MySQL 5.5+ or MariaDB) to accept non-BMP characters, or the use of the "binary" encoding (but then no support for unicode collation, only binary sorting will be supported, and the database may store *invalid* UTF-8, which could also cause severe security issues).

So I suggest you deprecate MySQL "utf8" in favor of the *safer* "utf8mb4". Also even in this case, consider what can happen when invalid UTF-8 is stored (e.g. storing broken sequences, or storing text containing supplementary characters encoded with CESU8 using 6 bytes, i.e. 2 pairs of 3 bytes for encoding each surrogate). Silent truncation is not a valid option (and in my opinion it is a defect of the MySQL client connector which should return an error if a text could not be saved completely)

Re: IPM_SUBTREE Outlook and the vanishing emails - Oneiroi

passenger_A — Mon, 16 May 2016 21:32:29 -0000

thanks for help me find my mail back

Re: Openssl unable to load certificate wrong asn1 encoding routines:ASN1_CHECK_TLEN::tag:tasn_dec.c:1319 - Oneiroi

John Frink — Fri, 13 May 2016 13:34:03 -0000

Thank you!

Re: mySQL Forcing Utf-8 Compliance for All Connections.

David Wisniewski — Wed, 17 Feb 2016 20:46:09 -0000

Can someone please help. I'm using mysql workbench graphical user interface to connect to someone else's mysql server and I need to force the connection in utf8 instead of the default of latin1, as I cannot currently see the proper characters for values when I run queries. I have readonly access to the server so changing the server is not an option. I've been trying for months to accomplish this and I cannot.

Re: Quickly Get MAC Addresses in Windows XP Using ARP

Samy Massoud Saad — Sun, 31 Jan 2016 14:09:12 -0000

After getting mac address by following this tutorial,You can get vendor/Manufacturer from mac address

using https://macvendors.co

Re: Openssl unable to load certificate wrong asn1 encoding routines:ASN1_CHECK_TLEN::tag:tasn_dec.c:1319 - Oneiroi

Lars — Mon, 12 Oct 2015 14:26:21 -0000

This is good info. But how do you tell if the cert you're using is in PCKS#7 format or x.509? If I use "openssl x509 -in mycert.crt -noout -text", and it doesn't give a format error but prints the fields of the cert, does that mean it's in a valid x509 format?

Re: Lowell Portfolio 1 Ltd

Alexp1101 — Thu, 01 Oct 2015 08:54:31 -0000

quick question, the letter I recieved does not say anything about debt and instead claims this is 'in relation to a personal matter'. Is there a letter I can send initially, or should I just sent this template given that I know they're a debt agency?

Re: Lowell Portfolio 1 Ltd

spr — Sat, 18 Jul 2015 13:55:19 -0000

Hi there i have been to court 4 times with Cabot Financial in the last three months i suspect its Lowell Portfolio that im dealing with can you tell me if the letter you posted as\ a template is still usesable and can it be used in a Scottish court i am under the impression they have no agreement to show the court this debt is in relation to PPI that they said i never had but i did and have the paperwork to prove it your advice on the matter would be appreciated

Re: Lowell Portfolio 1 Ltd

notonyournelly1 — Wed, 15 Apr 2015 21:31:36 -0000

Hi. Lowells are the scum of the earth i would say to people check this site out was a real eye opener for me. the site is WWW.GETOUTOFDBTFREE.ORG they will tell you how to deal with these people and others like them

Re: mySQL Forcing Utf-8 Compliance for All Connections.

Ythical — Sat, 07 Mar 2015 15:16:53 -0000

In at least MySQL 5.5, default-character-set=utf8 goes in the [client] section of the configuration files, which is probably in /etc/my.cnf.d/client.cnf .

Re: Lowell Portfolio 1 Ltd

lp — Thu, 26 Feb 2015 10:26:38 -0000

hi they same thing has just happened to me please advise what to do ??

Re: Can't Change to Run as User 'Mysql'. Please Check That the User Exists!

RT — Tue, 10 Feb 2015 23:56:04 -0000

thanks it worked for xampp as well.

Re: Two factor SSH authentication - pubkey yubikey - Oneiroi

Tom — Fri, 12 Dec 2014 03:47:54 -0000

there is a mistake is not pubkey but publickey the right keyword

Re: Suricata Logstash Kibana Utilite Pro ARM

oneiroi — Mon, 24 Nov 2014 09:51:50 -0000

I'm not seeing the FFI issues being thrown at all; at least not on ubuntu 12.04 LTS ARMv7l

I have noticed after a failure and reflash that hardfp is no longer functional and I've had to differ back to the sflt (soft floating point) version of java.

Re: Ssh X11 Forwarding Who Needs Vnc?

Carl Michael Grüner Monzón — Mon, 27 Oct 2014 16:28:33 -0000

I prefer to work with ssh, but yes X forwarding consumes a lot of bandwidth and makes it so slow that its almost unusable, so I stick to VNC for that reason. I don't explain myself why does that happen, though... Do you have an explanation?

Re: Suricata Logstash Kibana Utilite Pro ARM

rabinnh — Sun, 19 Oct 2014 15:32:46 -0000

My mistake about the embedded Elasticsearch. It just took minutes to load.

Re: Suricata Logstash Kibana Utilite Pro ARM

rabinnh — Sat, 18 Oct 2014 12:48:39 -0000

To overcome the FFI issue, I downloaded the JFFI source, compiled it, and substituted my build of libjffi-1.2.so into the jruby complete jar in the jni directory. I also had to install ElasticSearch separately - it wasn't included in the Logstash download - and then change the config to point to localhost rather than embedded => true.

You must also install libjansson-dev and add the configure variables --with-libjansson-includes=DIR and --with-libjansson-libraries=DIR or else the eve.json formatted alert file would not get generated.

Re: Suricata Logstash Kibana Utilite Pro ARM

rabinnh — Sat, 18 Oct 2014 08:32:55 -0000

Ditto. Same error. Can't get past. Installed libjffi but apparently the bug is in the logstash jar. I don't know how the author got by this issue.

Re: IPM_SUBTREE Outlook and the vanishing emails - Oneiroi

oneiroi — Mon, 13 Oct 2014 11:12:18 -0000

Dee this post is over 6 years old; please check the microsoft website for the relevant tool for Office 365.

Re: Suricata Logstash Kibana Utilite Pro ARM

Matthias Doed — Sun, 21 Sep 2014 12:34:08 -0000

Hi,

thx for sharing your experiences...

I am trying to setup logstash on a cubietruck and I always end up with this error:

LoadError: Could not load FFI Provider: (NotImplementedError) FFI not available: null
See http://jira.codehaus.org/br...
require at org/jruby/RubyKernel.java:1085
require at file:/opt/logstash/vendor/jar/jruby-complete-1.7.11.jar!/META-INF/jruby.home/lib/ruby/shared/rubygems/core_ext/kernel_require.rb:55
(root) at file:/opt/logstash/vendor/jar/jruby-complete-1.7.11.jar!/META-INF/jruby.home/lib/ruby/shared/ffi/ffi.rb:69
require at org/jruby/RubyKernel.java:1085
(root) at file:/opt/logstash/vendor/jar/jruby-complete-1.7.11.jar!/META-INF/jruby.home/lib/ruby/shared/rubygems/core_ext/kernel_require.rb:1
require at file:/opt/logstash/vendor/jar/jruby-complete-1.7.11.jar!/META-INF/jruby.home/lib/ruby/shared/rubygems/core_ext/kernel_require.rb:55
require at org/jruby/RubyKernel.java:1085
(root) at file:/opt/logstash/vendor/jar/jruby-complete-1.7.11.jar!/META-INF/jruby.home/lib/ruby/shared/ffi.rb:1
(root) at file:/opt/logstash/vendor/jar/jruby-complete-1.7.11.jar!/META-INF/jruby.home/lib/ruby/shared/rubygems/core_ext/kernel_require.rb:1
require at file:/opt/logstash/vendor/jar/jruby-complete-1.7.11.jar!/META-INF/jruby.home/lib/ruby/shared/rubygems/core_ext/kernel_require.rb:55
require at org/jruby/RubyKernel.java:1085
LibC at /opt/logstash/lib/logstash/util/prctl.rb:4
(root) at /opt/logstash/lib/logstash/util/prctl.rb:3
main at /opt/logstash/lib/logstash/runner.rb:79
(root) at /opt/logstash/lib/logstash/runner.rb:215

Did you come accross this one too?

Thank you very much,
Matthias

Re: KVM Linux - expanding a guest LVM file system using virt-resize - Oneiroi

chris — Thu, 28 Aug 2014 15:17:27 -0000

I think you may have forgotten a step. After following the above steps you provided, I didn't see the additional size in the volume:

[root@NS1] lvs
LU UG Httr LSize Pool Urigin Dataz Hove Log CpgZSgne Convert
lv_root vg_ns1 —ui—ao———— 22 51g
lv_swap vg_ns1 —ui—ao———— 1.88g

I had to run an lvextend to actually see the additional space:

[root@NS1]lvextend -L +5G /dev/mapper/vg_ns1-lv_root
Extending logieal volume lv_root to 2?.51 GiB
Logieal volume lv_root sueeessfullg resized 1
[root@NS1]
[root@NS1]
[root@NS1]
[root@NS1] lvs
LU UG Httr LSize Pool Urigin Dataz Hove Log CpgZSgne Convert
lv_root vg_ns1 —ui—ao———— 27.51g
lv_swap vg_ns1 —ui—ao———— 1.88g
[root@NS1]

Otherwise, great post!! Thanks for the info.