Note to Self

2:02am.  Note to self: drinking coffee to stay perfectly alert for the drive home is a fantastic idea!

As long as I don’t care about sleep.  At all.

Lion Server update failure

Ran the 10.7.3 server combo update.  Come to find out it failed to properly handle network openldap info.  I see in the log files where it failed to move files from the tmp install directory.  On login I’d see the red dot and “network accounts are unavailable”.  I could still login with the local admin account.  In Server Admin Open Directory was not running and could not be started.

This server is not bound to AD, fsck turned up a clean filesystem, and I re-ran the combo update in case it was able to succeed where it had failed before.  I also repaired permissions.  In Console PasswordService was reporting “Unable to locate search base: -1″ and “Can’t contact LDAP server”

The fix was to use a Time Machine backup to restore the /var/db/openldap folder.  I had to select “keep both” and then head in via single user mode.  If you’re a novice who got screwed here:

hold down command and S on boot.

fsck -fy

mount -uw /

cd /var/db

mv openldap openldap-corrupted

mv openldap\ [press tab and it will fill in the spaces appropriately for (original)] openldap

reboot

It is important the second to last command look something like mv openldap\ \(original\) openldap  I can’t remember the exact \ usage, that’s why you’re using tab autocomplete, but also remember the second openldap, which is what you’re renaming it to.

After rebooting all services were up and running again, including mail/calendar/contacts/etc.

Nov 2011 links

What are important things and advice to know that people generally aren’t told about?

 

“The Second Date Story”   If you’re a sucker for a sappy tale, spend a few minutes on this one.  It’s a great read.

 

Guy goes on a mountain bike course with his dog Lilo.

 

This one is a bit old but if you’ve never seen the tech, it’s pretty interesting.  The basic idea is that to reduce overheating in athletic performance the best method is to cool blood more or less directly.  Blood circulates and acts as an internal refrigerant line, taking heat away from the body in the most effective manner possible.

 

Japan marks 6 months since earthquake, tsunami

 

“In each image I’ve incorporated myself twice, once as the Iranian and once as the American. In some of my images I see conflict and in some I see peace and calm with my two selves. This exploration is a growing one and much more work will follow this blog post.”

 

Photos with slow shutter speed.  Love number 14!

 

Guy goes down an alpine snow course in the summer on a single track coaster without using brakes. Considering how slow 55mph looks on camera in a car this guy must be hauling ass at points!

 

The Recording of The Legend of Zelda 25th Anniversary Special Orchestra CD

Retrospect 8.2

If you’re unlucky enough to be using Retrospect 8.2 in OS X and run into “This disk is already a member of this media set” even though it is clearly not (freshly formatted, not listed in the members section of a backup media set, different names, etc,) I had some success reformatting the volume using Apple Partition Map instead of GUID.

Lion Server tips

Recently setup Lion Server and it’s very different from previous OS X Server incarnations.  Mostly things went well, some things went amazingly well, but of course there were a couple stupid hiccups too.

The main one that gets me is that I turned on a number of services and always enabled SSL, using a self signed certificate because in this case I’m only providing service to a couple people where it’s trivial to accept the cert permanently.  When trying to access iCal Server either via the web or iCal itself I received varying messages.

From iCal on a Snow Leopard client I got “Then account information was not found. The server has not specified a calendar home for the account at [blah blah blah].”  Via a web connection I got “Calendar service is turned off” when it was clearly turned on (and rebooted, etc.)

The fix is to use the Server application, go to Hardware, then Settings.  Click Edit next to SSL Certificate.  Even though I had never edited this setting before, by default both Mail and Web had my self-signed cert selected and iChat, iCal, and Address Book did not.  After selecting the certificate I was able to access all services normally.

I do not know why Lion Server had those boxes unselected.  In future 10.7 server setups I will be interested to see whether this was a recurring issue or a one-time failure.

Lion Server feels unfinished.  I very much agree with “macshome” take on afp548.com.  They are trying to make a server OS iOS-simple and in many ways they’ve succeeded.  However there has to be all those settings accessible somewhere.  I hate that Server Admin Tools do not come on the server by default – what were they thinking?  Further, the lack of MySQL and relegation of so many functions to the command line borders on silly.  If I wanted command line I’d be running CentOS or debian or RHEL.  You know, sources with good package management, backports of security patches, and the knowledge Apple won’t unceremoniously overwrite your configs out of the blue.

It’s a love/hate relationship, what can I say?

Unsubtle geekery: CalDAV and Lightning

Recently I was trying to migrate from a Google Calendar and iCal/Sunbird to a Kerio Connect CalDAV server with multiple calendars and iCal / (Thunderbird & Lightning.) I ran into a bug that has existed for 7 years and 5 days, as of today.

Apparently the CalDAV specification outlines essentially a per-domain authentication instead of per-user. So when you add multiple calendars to Lightning all calendars from the same domain use the same login as the first time it was entered. The second (and 3rd, 4th, etc) calendars will fail to load because Lightning is providing only the user1@example.com password for all calendar.example.com calendars, including user2, user3, etc.

The solution is to step outside of Lightning and configure delegation so the user1 has access to the calendars of user2, user3, and so on. I used iCal to add each account and then added the two primary users to all 5 of the calendars available. Write access must be granted, otherwise as of Lightning 1.0b2 it will fail.

Side note, I’m not entirely sure it’s necessary but in order to lookup users to delegate to at least according to the manual, in Kerio Connect 7.2 you must use the auto setup utility (for the main account. and possibly for Address Book as well?) I could be wrong on that but I think I remember trying under the manual config and the auto-complete did not work.

After configuring delegation in iCal add the primary user first and then all of the other accounts – it will now work as it should have in the first place. Hope this helps some random internet searcher! (I’ll never know since spammers essentially made me turn off all user registration.)

Kerio CalDAV and CardDAV setup tips

This is a quick reference guide to configuring Kerio Connect 7.2 with a 10.6.7 machine + an iPhone.

CalDAV for iCal 4.0.4:
username user@server.example.com
server https://server.example.com/caldav/

CalDAV for Lightning 1.0b2:
username user@server.example.com
server https://server.example.com/calendars/server.example.com/user/Calendar

CardDAV for Address Book
username user(server.example.com)
Yes the server is in parentheses.

server address https://server.example.com:443
Check the port in your admin page.

Configuring CardDAV within the iPhone will not work. You must use the iPhone Configuration Utility. If you’re savvy enough to have configured your own services so far this utility is a breeze to use. Fire it up, go to Configuration Profiles and fill out the General and CardDAV sections. In case you’re pulling from two different servers or with two (or more) different usernames, it’s easy to add multiple sets of settings. After you’re done, connect your phone and click the install button.

I am kind of stunned at how well this is working compared to all other Calendar and Contact syncing apps I’ve used. I used to have to wait for Google Calendar to finish writing (over the network) on my phone or I’d lose data, and every form of contact syncing other than the paid mobileme service has lost contact data including phone numbers, custom labels, etc. Syncing via iTunes with Google Contacts periodically duplicates some contacts. Syncing contacts using exchange is a nightmare, it dumps all custom labels and all but ~3 of the phone numbers per contact.

This solution not only maintains my contact entries perfectly but also syncs over the air. When inputting calendar data on my phone – which I do constantly – I don’t have to wait for network operations to finish, I just put in the data and sleep it. On top of all this I synced the contact data to my phone and after verifying it’s accuracy deleted the old information, expecting to have to reconfigure favorites. I didn’t. The transition is seamless. I can’t guarantee that for everyone, so make your backups first!

Camera raw

I can’t see how I ever lived without raw’s killer white balance capabilities. That and the extra exposure control has had a dramatic impact on my photos.

At one point I was pretty into least-adjustments-possible photography, but after going through the raw vs jpeg debate one more time I realized adjusting photos is part of the craft. Nothing you see is the “true” photo anyway, it’s all just a bunch of 1s and 0s. Either the camera interprets the data and makes permanent decisions in the form of a jpeg, or you make reversible decisions later on.

Recycling Peanuts

Just dropped off two huge garbage bags of packing peanuts at a local ups store. A couple of customers were just wrapping up as I handed the bags over to the employee, she said: “Peanuts for Recycling?” I said “Yup.” The female customer asked “are you going to throw those away?”

I just… wow. First off, why would anyone bring two huge bags in to a store just to trash them (and wouldn’t the store charge me then?) and secondly, we had just verbally confirmed they were going to be reused/recycled.

Ah well. Guess we all have our moments.

Sept links

The Graphing Calculator Story. Subject is somewhat geeky but it really is a good story.

Thought about posting this on FB.  I still might.  It really is super-important for everyone to understand what it is and why we want net neutrality.

Cat House on the Kings

OkCupid’s fact summary of The REAL ‘Stuff White People Like’.  And so on for every major race out there.  Since it’s not opinion but real data people enter in I find this fascinating.  The only bias to be aware of is the data representing how people want to be seen versus reality, but getting truthful responses on the latter in 526,000 people would be quite daunting.

0_o

Subnormality’s Monstrous Descrepancies