Wednesday, December 15, 2010

HP Ilo using virtual media

you can map cdrom images through your web browser, but this is cumbersome and slow.

You can also map cdrom images via http, using ssh , this is easier (for me) and faster.

ssh to your ILO and type

cd /map1/oemhp_vm/cddr/
set oemhp_image=
set oemhp_boot=connect
reset /system1

other options for oemhp_boot are never/once/always/connect/disconnect
use disconnect to allow you to map images via your browser once again

Tuesday, October 12, 2010

Blackberry Bold Failing to connect to BIS via WIFI

Seems lots of people have issues with wifi on blackberry handsets.

As I've just deployed it in work, with a tied down ACL, I started to use it a home.

In work, it worked fine, roamed between AP's around the building and went direct to the BES, no external dependencies, which is good as Vodafone broke their network last week, and wifi kept us working.

At home, I get intermittent success, some times it works fine, others it doesn't.

I use WPA2+AES for wifi, and the Blackberry connects and get's an IP address, but all I see are lots of arp requests, and the Blackberry can't ping itself or it's gateway. I don't even see the ICMP come into the gateway.

After some reading around, seems to be a common problem, with some people having success on some router models and not others. My AP is Belkin Wireless N, and my router is m0n0wall.

Anyway, the problem appears to be with AES and the blackberry. My Androids and laptops and iphones all have no issue at home with wpa2+aes. I have enabled wpa2+tkip along with wpa2+aes, and now my blackberry works flawlessly.

So , seems that the Bold (other report other models) has an AES problem that is intermittent.

Monday, July 12, 2010

Checking warranty on 1000 HP servers

I have 1000+ HP servers to check Warranty on, and there is no real tool to
do this :-(

So, I found a script called findilos, which will list all hp serial numbers
by finding their ilo's.

But, serial numbers isn't enough, you also need their Product Number or
Product ID, and there is no way to script collecting this from the Ilo, and some
older ilo's don't tell you.

However, there is a UUID field, which has the first 6 digits of the product
ID, such as this product ID 435944R-421 would be displayed as 435944 in the
leading part of the UUID.

So, I modified findilos to also collect the UUID, and then had to write
scripts to turn this 6 digit number into a PID by crawling HP's pages with

Then I had the serial and PID so I could poll HP's website to collect the
warranty data, phew !

So it goes like this


1) Use find ilos to scan subnet to file

sudo bash newfindilos > my.ilos

2) 2 Use wget to get list of products and urls for product ID’s to file

wget -O- ''
| grep categoryId |tr -d " " > hpurls

3) Make uniq list of server types found and use to get product id’s of these
server types to a file

grep ProLi ixn.ilos| cut -f5 -d"," | tr -d '"'  
| cut -f2 -d" " | sort | uniq | xargs 
| tr " " "|" | xargs -I z 
egrep '(z)' hpurls | grep -v bold | cut -d"\"" -f2 | xargs -I z wget -O- 'http://h40038.www4.hp.comz'
| grep '<tr><td height=20><b>'  | cut
-d"b" -f2 | tr -d "></"  > hp.pids

4) Make list of serials and productid’s (productnumbers) by finding
intersection of hp.pids and my.ilos and get warranty data

cat my.ilos | tr -d "\"" | sort -t"," -k6 -g | grep ProL | egrep -v
'N/A|\*' >

awk '{ print substr( $0, 0, 7 ) "," $0 }' hp.pids | sort | uniq >

join -t "," -1 6 -2 1 | cut --output-delimiter="
" -d"," -f5,7 | xargs -Iz ./getwarrenty z

Wednesday, July 7, 2010

vodafone HUAWEI EchoLife HG556a

I have one of these with a 3g dongle (Also vodafone and huawei).

After finding it a bit unreliable, I had a poke around and found that if I telnet it , I could change the DNS settings, which seems to make it better. At the telnet prompt type

dns config static

which sets the box to use google and freedns. The system used dnsmasq and gives out the lan ip as the dns server to it's clients, which works fine.

dyndns was more interesting, because at the telnet prompt you have a dyndns option, but I couldnt get it to work, so a poker around the various web pages on the box , I found this

and set it up , though had to choose LAN. once done, I backedup the config under management-settings-backup , opened the backup file and changed the interface from br0 to ppp_255_65535_1 which is the wan interface (find it with ifconfig, though I think this is universal). Then restore the config and it worked fine.

Wednesday, March 10, 2010

Windows PEAP Certificate woes

So, having spent several days trying to figure out why PEAP certificate validation fails in windows and not a MAC, it turns out that microsoft doesn't like wildcard certs, changing to a regular cert fixed the problem.

Though as our certs are from Digicert, we had to install the bridging cert on the RADIUS server and remove the non CA's from the server too as documented here

Friday, March 5, 2010

Wednesday, February 3, 2010

FreeBSD with GPS to give Stratum 0 time source

I have ordered a bu-353 gps mouse. I hope to add this to Freebsd as it uses a prolific chipset, so using ucom and uplcom it should map as /dev/ttyU0 .

To use this as a time source , I can configure NTPd via ntp.conf , to use the serial port, or I can used gpsd to manage the gps, and tell ntp.conf to use shared memory to read from gpsd.

not using gpsd is attractive as it's relatively large, 1.5MB statically compiled.

To statically compile, you need to run configure, in my case like this

./configure --disable-python --enable-static --disable-shared --prefix=/usr/local/m0n0/ --disable-sirf --disable-tsip --disable-fv18 --disable-tripmate --disable-earthmate --disable-itrax --disable-ashtech --disable-navcom --disable-garmin --disable-ubx --disable-evermore --disable-gpsclock --disable-rtcm104 --disable-ntrip --enable-fixed-port-speed=4800

then modify the Makefile to add -all-static like this;

LINK = $(LIBTOOL) --tag=CC --mode=link $(CCLD) $(AM_CFLAGS) \
$(CFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -all-static -o $@

CXXLINK = $(LIBTOOL) --tag=CXX --mode=link $(CXXLD) \
$(AM_CXXFLAGS) $(CXXFLAGS) $(AM_LDFLAGS) $(LDFLAGS) -all-static -o $@

then run gpsd like this;

./gpsd -n /dev/ttyU0


ntp.conf should contain this line for directly using the serial port. But you should make /dev/gps0 first by

ln /dev/ttyU0 /dev/gps0

server minpoll 4
fudge time1 0.000 refid GPS0

or to use shared memory and gpsd

server minpoll 4
fudge refid GPSD

and use PPS

ln /dev/ttyU0 /dev/pps0

server minpoll 4
fudge time1 0.000 refid PPS0

Thursday, January 28, 2010

All Quiet on the western front

Well not really, with a new baby , new job and christmas all happening in the last few months, time has been precious.

I managed to get my heatmiser PRT-HW/N and PRT-N working on my openwrt box with a usb serial and rs232 to 485 adapter. Now using a spare sony ericson z610i phone via usb , I can control my heatmiser controls via sms. This is done using smstools , a bash file that parses the sms body and then runs a perl script based on the commands in the message.

The perl script does some serial communication to program the 2 heatmiser stats. I can set the temp, turn on/off frost control etc.

I hope to tidy it up a little bit, but so far it's quite robust, so a small tidy before I put the code somewhere for others to copy/use.

Other things , I have been fixing some bugs in m0n0wall and adding some features and adding to ipv6 support. I just ordered a usb GPS unit, so I can use it on m0n0wall or openwrt with gpsd and ntpd to create a stratum 1 time source. It was only around $30 so will be fun, even though it's my 4th gps unit now ! A commercial ntp unit of this nature is 6000 euro, though does have a better local timesource if gps fails, but not 5950 euros worth !

Thursday, January 21, 2010

A great Builder

This guy spent 4 months renovating our house and did an excellent job, couldn't recommend him more !

now he has a web site, check it out

Fire Alarms