Monday, January 26, 2009

Install GPL CDRFE with XP Permissions

In order to get cdrecord.exe to work with normal user rights, you need to install and use a free (not GPL) ASPI driver from Adaptec instead of using the XP built-in SPTI driver which needs adminitrative rights.

When you unpack the Adaptec driver, install it using the command line ("install.bat x86" for Windows 95-2000 and "install.bat xp32" for XP)

Then when you start cdrfe.exe, change the settings to use the ASPI driver located under the second tab from the left.  The default is to use "Auto" which may work.

===========

I wasn't able to get cdrecord.exe to work with ASPI but I found the group policy that can tweak SPTI permissions to allow local users to run cdrecord.exe.

FAQ - ImgBurn Support Forum

1. Log in as an Administrator
2. Click 'Start' -> 'Run'
3. Type 'secpol.msc' and hit OK
4. Expand 'Local Policies'
5. Click 'Security Options'
6. Change 'Devices: Restrict CD-ROM access to locally logged-on user only' from 'Disabled' to 'Enabled'
7. Close the 'Local Security Settings' window
8. Log on as your restricted user and try again.

Friday, January 23, 2009

OpenDNS Setup with Bind9 and local domains

I wanted to set up my Ubuntu system to use OpenDNS for all external queries, yet lookup up all local queries on our internal domain controllers. After finding the right reference it was really easy.

I just installed bind9 and changed 2 configuration files:

/etc/bind/named.conf.local:

//
// Do any local configuration here
//

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";

zone "localdomain1.org" {
type forward;
forward only;
forwarders {
10.22.2.18;
10.22.2.25;
};
};


zone "localdomain2.org" {
type forward;
forward only;
forwarders {
10.22.2.18;
10.22.2.25;
};
};


/etc/bind/named.conf.options:

options {
directory "/var/cache/bind";

// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113

// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.

forwarders {
208.67.222.222;
208.67.220.220;
};

auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
};


Now whenever I make an internal query, I will use the local domain controllers and if I make an external query, I will use OpenDNS.

I had to change my /etc/dhcp3/dhclient.conf and uncommented this line:
prepend domain-name-servers 127.0.0.1;

Here is my reference that helped me work out this solution.

Frequently Asked Questions about BIND 9
Q: I want to forward all DNS queries from my caching nameserver to another server. But there are some domains which have to be served locally, via rbldnsd. How do I achieve this ?

A:
options {
    forward only;
    forwarders { ;
    };
};

zone "sbl-xbl.spamhaus.org" {
    type forward;
    forward only;
    forwarders { port 530;
    };
};

zone "list.dsbl.org" {
    type forward;
    forward only;
    forwarders { port 530;
    };
};

Tuesday, January 20, 2009

Install GPL CDRFE with XP Permissions

In order to get cdrecord.exe to work with normal user rights, you need to install and use a free (not GPL) ASPI driver from Adaptec instead of using the XP built-in SPTI driver which needs adminitrative rights.

When you unpack the Adaptec driver, install it using the command line ("install.bat x86" for Windows 95-2000 and "install.bat xp32" for XP)

Then when you start cdrfe.exe, change the settings to use the ASPI driver located under the second tab from the left.  The default is to use "Auto" which may work.

Thursday, January 15, 2009

Linux Advocate Doesn't Slam Reporter and Starts a Dialogue

Ubuntu on the Brain
The viewer who contacted me also said this: “It really is a revolution, and it is a community effort…Linux is all about what people want to do, and that is find your own way to do things. People always complain about getting stepped on by big companies (MS, Internet Providers, Cellular Providers etc) but most don’t want to change how they do things for their own good.”

He’s right, you know. People hate change. Now, I don’t think the story we did was wrong. It really wasn’t about Ubunto; how it works, etc. It was about a woman who ordered something, realized she made a mistake, asked Dell to fix it and they told her Ubuntu would be fine but when she got it, she realized it wasn’t for her. While Ubuntu probably would’ve been OK for her, she didn’t really want to learn how to use a new operating system. She wanted a computer to take college classes. It’s a pure consumer driven story. It was not an attack on Ubuntuat all. But it does show that change can be difficult…especially when people are unaware of products, services, new technological advances, etc.

I will say this: because of my e-mails with this viewer, I’m looking more and more at Ubuntu and might join this little revolution.


The story of the day: Linux fanatic doesn't rant and rave and chooses to start a dialog and teach someone else about why they value Linux/ Ubuntu.

I want to thank rgiordan for finding the quiet voice that was able to help.

Tuesday, January 6, 2009

Show Hidden Microsft Windows Devices

We had some problems with invisible old configured NICS on servers that were set up with teaming.  Our first NIC configuration was created with static IP addresses and then later we teamed up 2 NICs and had some intermittent ping problems.  It seems that the old non-existent NIC was interfering with the teamed NIC and would send the ping responses through the non-existent NIC and fail our tests.

Here is a cool little bat file:

set DEVMGR_SHOW_NONPRESENT_DEVICES=1
start devmgmt.msc

Monday, January 5, 2009

LDAP Search Againt Microsoft Active Directory

ldapsearch -LLL -x -b "dc=domainname,dc=org" -H ldap://bass.hfanet.org -W -D "jeff.rasmussen@domainname.org" -LLL "(samAccountName=rasmussenj)"