Archive for the ‘geekery’ Category

Sir Patrick Stewart

Thursday, June 3rd, 2010

Sir Patrick Stewart

On June 2nd, 2010, Patrick Stewart received a knighthood from Queen Elizabeth II at Buckingham Palace for his contribution to the theatre. Although he is best known as Captain Jean-Luc Picard on Star Trek:TNG, he has been a notable stage actor during his 50-year acting career. Apart from his role on Star Trek, Patrick Stewart has been in several of my favourite movies such as Dune.

I was looking at IMDB this morning and found a little trivia factoid that said that when he first arrived to do Star Trek TNG, Patrick didn’t unpack his bags for six weeks because he was convinced that he was going to be fired!

“When it first started, I didn’t think that I would survive beyond the pilot. I did not unpack; I didn’t see the point. I thought the producers would come to their senses and realize they’d made a grave error in casting me. I was certain that I’d be on my way back to London…Eventually, it became clear to me that not only wasn’t I going to go away, the series wasn’t going to go away. I stayed, and have relished every moment.” (On his initial belief that he would be fired from “Star Trek: The Next Generation” (1987)).

IMDB also notes that he’s been friends with Brian Blessed since childhood, another actor that I admire. (Who could forget Brian as King Richard IV in Blackadder I?)

Leonard Nimoy sings about Bilbo Baggins

Saturday, April 24th, 2010

Behold, the ’60s in all their glory:

Leonard Nimoy sings the Ballad of Bilbo Baggins on YouTube (sadly they’ve disabled the embed code due to licensing. *shakes fist*
Read more about it on Wikipedia

And a lil tweet from Leonard about William Shatner’s public nomination for Governor General of Canada:

@WilliamShatner Bill: You’re being considered for Governor General of Canada. Do it !! Finally a chance to do something w/your life. llap

External USB drive won’t clear space using Backup Exec 11d

Tuesday, May 19th, 2009

I’m using Exchange with Backup Exec 11d for Windows (on Windows Server 2003) and backing up our Exchange server to it.We are running extremely low on tape drive storage space and we can’t afford a new tape drive (thanks Great Recession) and so I’m doing a MacGuyver and using an external 500GB USB hard drive that we had around to run a nightly backup of our Exchange server. This setup had been working great, that is until the drive ran out of space.

When I noticed the low disk space warning, the first thing I tried was to recycle the media by putting it into scratch media but the backup didn’t seem to grab it when running, it would just sit there and ignore it. I tried to just delete the files and then ran an inventory to see if it would detect that the space is available but this just led to having a failed inventory run.

The next thing I tried was to create a new media set with a one hour retention cycle (as a test) and still Backup Exec wouldn’t overwrite the data. I even tried rebooting but the media still said it was available in the Backup Exec management console. Argh!

At last I figured it out and the way to get rid of the media files was to move the Backup Exec media that needed deletion to the “retired media” media set and then deleting it from there. I then paused the backup to disk folder from the devices tab in the Backup Exec manager, and then unpaused it. Space is now available again and crisis averted.

I have a crush on the new Kirk

Friday, May 15th, 2009


Seriously, I think I heart him more than the original, he’s a younger, sexier and slightly less (but forgivably so) cheesy version of Shatner. Be still my beating heart.

I saw the new trek film last night (at last)! Sweet electric jesus, it was awesome – I laughed, I cried, I was relieved that it was actually good – I loved it so much that desired a sequel! (I hear one is in the works, squee!)

There’s a couple of things I need to rant about (warning – spoilers ahead): (more…)

Kerberos confused and distressed after DC failure

Tuesday, May 12th, 2009

I recently decommissioned a Windows 2000 DC that was still in production but had the beginnings of death throes, a power failure had made it an unhappy little camper and it was retro-vintage at best, plus it was a loud tower perched on a phone book in the server room (stupid short KVM) so its days were numbered. It got to the point where it was no longer accessible through an interactive console session so I turned the thing off without running dcpromo. Turns out that even though it was a clunker, everyone in the office had been using Office templates that had hardcoded servername links within them pointing to this server for the graphic for the letterhead. To get around this I redirected all the shares and updated the login scripts, and entered a CNAME entry for local DNS redirection for the missing server to solve the template issue and badda-bing, badda-boom off went the server (and the phone book went back on the shelf).

However, a little while later I noticed a rather inelegant problem:

The kerberos client received a KRB_AP_ERR_MODIFIED error from the server host/servername.domain.local. The target name used was DOMAIN\SERVERNAME$. This indicates that the password used to encrypt the kerberos service ticket is different than that on the target server. Commonly, this is due to identically named machine accounts in the target realm (DOMAIN.LOCAL), and the client realm. Please contact your system administrator.

Whoops, Kerberos is trying to use my DNS redirection and getting rather confused. Luckily our AD infrastructure is only a three server affair so removing it from the command line with a manual metadata edit wasn’t too big a deal but the command line is rather counter-intuitive for we linux types so here is the procedure I used:

I did a hunt on Google but didn’t really come up with much so I figured I would put the solution out there in case someone else needed it.

Hey, that’s my Star Trek

Monday, May 4th, 2009

I feel a little guilty admitting this, but I’m feeling a little posessive about Star Trek.

I’ve been avoiding the ads for the new Star Trek movie, I haven’t really been reading about it either. All I’ve heard is that it’s awesome, and this from a respected fan-since-TNG friend of mine from high school. Tonight, I was watching Family Guy and I saw an ad for Star Trek limited-edition glasses at Burger King (if I got the burger chain right). I wanted them immediately, of course. Then I saw an e-surance (insurance) ad promoting the star trek movie. Hrm. I then watched the ad. Uhura is gorgeous and everyone is slick in a very typical hollywood style.

Part of me feels that the strength of Star Trek was using a compelling blend of likable characters in an ongoing saga style in a very open-ended setting. It was a soap opera, in a setting that was captivating, for people who liked science at least. I never really got why anyone wouldn’t like it. It kind of just got a bad wrap because nerds liked it. It was fun, I used to watch it with my Dad when I was a kid so I guess I never really knew it was nerdy until it was too late.

They’re hip, they’re beautiful and young and they’re all my favourite pals, I’m hoping it’s going to blow me away and not make me mad at it for “selling out” but I guess it’s always been sold out in a way. I have a Star Trek TNG poster in my office (it has retro chic, honest). I have Star Trek drinking cups, one for the Federation, one Borg and one Klingon. I used to have more but I think they got stolen. A lot of people appreciate fine decor like mine (and covet it).

I’m hoping I’m going to love, love, love it just like I loved Superman. I have a date with my boyfriend to see it on Sunday and I can’t wait!

P.S. The Mark Wahlberg on Antiques Roadshow keeps saying his name, and making me look.

Troubleshooting SMTP relay

Friday, April 24th, 2009

On and off, since moving the users to the new Exchange server, some e-mail messages have bounced with a failure message that says:


You do not have permission to send to this recipient. For assistance, contact your system administrator.
< server.domain.local #5.7.1 SMTP; 550 5.7.1 Requested action not taken: message refused>

First things first, I wanted to ensure that we aren’t blacklisted so I used some online DNS tools to check. The first one I used (on advice from an internet forum) was the DNS Report on DNSStuff.com which (using the quick check without a user account) told me that I was on spam blacklists. Yikes! I don’t like to sign up for things that try to scare me into using their free trials so I Googled around a little to find a spam blacklist lookup to verify that the info was correct (and found that it wasn’t true).

I dug around a little more on dnsstuff.com because I remember when it wasn’t pushing for memberships so hard it was quite useful, it has a few neat tools on there if you click on “Free Tools”. I feel a little guilty not signing up when it’s useful but I don’t like a hard-sell. I don’t answer the door for random doorknockers either. Get off’a my lawn!

Here are a few that I liked for this task:

  • Spam DB lookup on iptools.com didn’t show that the domain was on any blacklist. Lots of very handy tools on this site.
  • http://www.dnsbl.info- Shows your status on a number of spam databases, none of which we were listed on.
  • CheckDNS is a nice analysis tool, it tests your mail server’s HELO/EHLO and checks your name servers for problems.
  • http://www.zonecheck.fr – Does a bunch of tests and the warnings at the bottom are quite human-friendly yet thorough.
  • IntoDNS.com – This site is probably my favourite, it’s user interface is great, nice and clear, and the green or red indicators on the results page make it nice and easy to read.

We appear to have a problem at our ISP, the SOA is different to the NS records but that should only be a problem if the nameserver is unavailable so shouldn’t be denying mail. I’ve entered a reverse DNS PTR record so the IP should resolve. Therefore, I am pretty sure that the reason it’s bouncing is that we’re advertising domain.local instead of domain.tld.

To remedy this:

1. Open up Exchange System Manager and expand “Administrative Groups” -> First Administrative Group -> Servers -> [servername] -> Protocols -> SMTP

2. In the right-hand pane, you should see “Default SMTP Server”, right-click it and select “Properties” from the menu.

3. In the “Default SMTP Virtual Server Properties” dialog box, select the Delivery tab and click the Advanced button. In the field “Fully Qualified Domain Name”, type the FQDN of the server that is sending out SMTP mail and then press OK (twice).

I think that ought to do the trick, but if not my next blog entry will likely be about using SMTPDiag. :D

All Wrapped Up in Untangle Entanglements

Wednesday, April 15th, 2009

I am not quite sure why this happened but this morning I was greeted with several angry users because the primary Exchange server ran out of virtual memory and stopped the information store and SMTP transport. It was easily resolved and I’m in the process of migrating off that server but I was getting weird bounce backs when I tested using our Gmail account.


The original message was received at Wed, 15 Apr 2009 12:37:14 -0700
from mail-qy0-f122.google.com [209.85.221.122]

----- The following addresses had permanent fatal errors -----

(reason: 550 5.7.1 Requested action not taken: message refused)

----- Transcript of session follows -----
... while talking to [192.168.7.106]:
>>> DATA
<<< 550 5.7.1 Requested action not taken: message refused
554 5.0.0 Service unavailable

Final-Recipient: RFC822; vb@domain.com
Action: failed
Status: 5.7.1
Remote-MTA: DNS; [192.168.7.106]
Diagnostic-Code: SMTP; 550 5.7.1 Requested action not taken: message refused
Last-Attempt-Date: Wed, 15 Apr 2009 12:37:19 -0700

That's weird, I thought to myself. I thought perhaps Untangle may have had a hand in this mess. I run it on our backup server as an inline scanning appliance (Untangle for Windows). I'd kicked off a backup (seeing as the sky was falling) so I was waiting for it to finish. I noticed that although I had been able to connect to the console earlier on, I couldn't anymore so I stopped the services.

Problem solved for now I thought. External e-mail was starting to arrive. One of the users said that they tried sending a message to themselves using their outside e-mail account and it failed.


Your message did not reach some or all of the intended recipients.

Subject: Test
Sent: 4/15/2009 1:40 PM

The following recipient(s) cannot be reached:

User on 4/15/2009 1:40 PM
You do not have permission to send to this recipient. For assistance, contact your system administrator.
< server.domain.local #5.7.1 SMTP; 550 5.7.1 Requested action not taken: message refused>

I thought that was pretty weird. Our mail infrastructure is set up as follows:

MX -> sendmail -> exchange servers {network traffic scanned by Untangle in a VM}

It's strange to get relay denied errors from people who had been able to send to us in the past, especially since we were having other mail-related issues I figured it would be a good test to telnet into our Exchange server and manually send an e-mail to the recipient but strangely I got the same error when trying to send to this recipient. Everything I read on Google was pointing me to a user-level solution (check user hasn't chosen to use server authentication, check under Active Directory Users & Computers on the Exchange General tab that they don't have any delivery restrictions) but after testing sending to a variety of other users, it was apparent that the problem was for all users and not just the one who reported the problem. Turns out that although I had stopped Untangle's services and stopped the VM services, they were still somehow blocking incoming messages. I had tested the failover before Untangle went officially into production and it had worked fine but I guess somehow the SMTP service failure on the Exchange box had affected Untangle and the only solution was to bounce the box. I thought I'd just put this out there in case anyone else ran into the something similar.

Postscript: I set up a backup mail queue and added the MX record for it into DNS, I noticed too that our SPF was way out of date (the old sysadmin wasn't much into housekeeping) so I fixed that too, with no help from the Microsoft Sender ID Framework SPF Record Wizard that I tried to be lazy and use when the lame web host they use pointed me to it. Perhaps it's because I'm using Firefox, stranger things have happened, but pressing the Next button on the third (out of four) page and it does nothing. How useful. I would fire up internet exploder but I've had enough MS-related woes for one day methinks.

SpamAssassin version check

Friday, March 27th, 2009

I was just trying to figure out how to check the version of SpamAssassin from the command line and this line of perl does the trick, in case you need it (remove the square brackets, of course:

# perl -MMail::SpamAssassin -e 'print $Mail::SpamAssassin::VERSION;'

Hope that helps someone out in random internet land and thanks to Floyd for the tip.

Born free, free as in software

Tuesday, March 10th, 2009

The case against Windows

Why would anyone really want to switch from Windows? Do you even really need to ask me this? In sum, Windows is notoriously insecure, it imperils your personal information and requires several other products (usually also paid for) in order to function correctly. ‘Nuff said.

There’s enough threat out there on teh intrawebs that my own pc shouldn’t be a source of them, nor be vulnerable to threats that could affect my personal financial situation. As a self-professed computer expert and a small business owner, my office servers are penguin powered in a hybrid linux (Ubuntu) and Mac client environment. They systems are easy to back up, it’s easy to share files between computers, downtime is usually easily resolved (and usually due to hardware failure) and best of all, the linux machines were acquired cheaply, they’re PCs that are deemed too slow to run Windows now yet they still met the demands of the linux setup easily. This method allowed me to set up working business system for minimal cost, far less than I would have had to pay for a comparable Windows-based network setup, and my spam filtering and intrusion protection are better than a Windows-based system can offer.

The days of needing to have a supercomputer on your desk are over.Microsoft said today that Windows 7 will run on low-cost Netbooks.
It’s a well-known fact that users barely scratch the surface of what their computers are capable of, and if you don’t go upgrading everything in sight and keep your installation of bloatware to a minimum you will have far better performance and will be able to extend the lifespan of your computers. So what if we just all ran linux on the PCs that we have now. It would cost us nothing to obtain, and is easy to install if you choose the right distro (go for Ubuntu if you’re a novice).

I hear ya

The majority of people who run Windows do so because they either aren’t aware of alternatives (what is this Apple thing you speak of and why would i want to pod?), are afraid of change (these shiny buttons are different than the ones I’m used to&mdash;I could never get the hang of this!) or just plain old-fashioned cheap.  I won’t ask you to reveal which category you fit into but in case you fit into the latter category (*cough*) you may be interested in Linux just by virtue of the $0 price tag alone. </li>

I feel ya

So I know enough about computers to know that Windows is not a logical choice for me, and I’m bursting to jump sidelong into my next computing adventure—how do I get started?

Good thinking! I’ve been working on this concept for a while now over in the lab and of the major productivity applications used in most offices here are the alternatives I liked the best (honestly). Check it out

Ever wonder why your computer is *actually* slow? If it worked okay before, why would it be slower now? Must be because you have to purchase something to make it faster, right? Wrong!

Addressing the “You Get What You Pay For” Myth

How much do you pay your employees per hour? How much do you pay your IT people per hour to manage your systems, remove viruses, troubleshoot why your computer is slow, remove password-stealing trojan horses? How many of your non-IT staff are aware enough to save themselves from danger. The people you have working for you are the same people that send hoax e-mails out to their friends to warn them about viruses that came out years ago and (attempt to) send out attachments large enough to sink the Titanic. On the whole, what are they doing on their computers? Spreadsheets, letters, e-mail and perhaps updating a CRM. Give them the tools they need to do their jobs and let them watch YouTube at home on their own PC.

You are costing yourself money by using Windows.

Seriously.
Lots of it.

Linux is my best bet when it comes down to price and productivity. The truth is that most users do S.F.A. on their computer that is actually demanding and if you’re a serious business user, then isn’t price vs productivity your most important factor? Hypothetically, if you switched your users over, trained them on how to use Linux instead and had all the systems working then you would have far less downtime caused by viruses and faulting applications. Linux is pretty good that way—if you take the necessary steps to correctly configure your system and maintain your system and keep the external threats out, Linux provides you with a very stable environment. Thanks to Gnome, the interface is very intuitive for first-time users, the productivity tools are obvious and the settings are complicated so a novice user is likely to be confused at first and then realize that they can’t fiddle with anything because they don’t have permission to break stuff. Huzzah. No fiddling with group policy required.

Linux loves me and I adore it, but we have our problems sometimes. Wine has always been a good little lubricant for the friction in our relationship but how do I get things running in a practical sense? Can I really end my “I’m with stupid” relationship with my PC and still run my printer, run Office, use my wacom tablet and Adobe Creative Suite?

Truthfully, Office has not been on my computer in years, I don’t own it, nor do I want to – I’m an OpenOffice convert and it’s super easy to use. It may not have all the formatting stuff that Word and Excel can render these days but my view, most of the fancy features are seldom, if ever used, and if you want to design something that looks good for an external audience, get a designer.

The most challenging things I’ve had to do is use the Adobe Creative Suite, which I can’t seem to get running smoothly under Wine (Wine Is Not an Emulator) and hence, I am not using my Wacom tablet on my linux computer. I use my Mac for design work but seriously, what serious designer ever used a PC anyway. Hello?

Don’t discount the wealth of online applications available (cloud computing), there’s some great stuff out there and a lot of it’s no cost or subscription-based. Here is a matrix of my preferred apps, both on and offline:

I’ve switched over most of my applications already but there a few laggers that need a kick in the *nix.

Application Offline Online
Vector Illustration Illustrator Aviary
Web Browser Firefox N/A
Bitmap Graphics PhotoShop (I’m going to try GIMPShop) Aviary
FTP   Filezilla
Word Processing OpenOffice Write Google Docs
Spreadsheets OpenOffice Calc Google Docs
Client Billing   FreshBooks
Antivirus ClamAV  
Time / ToDo Management N/A Remember the Milk and RescueTime

We’re out there

I’m sure you’ve noticed us, we’re the ones with the killer curves and lustrous, shiny hair. Oh wait, that’s not nerds, I had us confused with Victoria’s Secret models for a sec there. Seriously folks, nerds are incognito now – we were nerds once but now we run your computer systems and some of us don’t play nice anymore. Time to smarten up and stop trusting your computer so much.