adding secondary IP interface and IP index number to APA

just put the IP in netconf using the Physical PPA lan port (like normal), then when APA starts, it will bind it to the APA port
INTERFACE_NAME[1]=lan0:1
IP_ADDRESS[1]=1.2.3.4
SUBNET_MASK[1]=255.0.0.0
INTERFACE_STATE[1]=up

if adding a secondary IP once APA is already running: bind it to the APA PPA (lan900)  as follows:
ifconfig lan900:1 1.2.3.4 255.0.0.0 up

HPUX routing and the ip_strong_es_model network tunable

A "graypaper" on  understanding HP-UX routing including details on ip_strong_es_model tunable: http://www.mayoxide.com/presentations/Understanding_hpux_routing.pdf

Best description of the ip_strong_es_model tunable via this ITRC link: http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1267461248860+28353475&threadId=1126880
ip_strong_es_model is used when you want to configure multiple, physical NICs in the same IP subnet, and/or want the functional equivalent of per-source IP routes.

truecrypt rescue disk on usb

http://forums.truecrypt.org/viewtopic.php?t=18882&postdays=0&postorder=asc

and to skip iso check use the /noisocheck or /n  switches on truecrypt or mount the ISO using a virtual cd driver


contents of first link:
Here is how:

1. Format your USB stick from Windows: FAT, Quick, Default Allocation Size.

2. Download Grub4DOS from: http://download.gna.org/grub4dos/
Choose latest version. Here is the one I got: http://download.gna.org/grub4dos/grub4dos-0.4.4-2009-06-20.zip

3. Download Grub Installer from: http://download.gna.org/grubutil/
Choose latest version. Here is the one I got: http://download.gna.org/grubutil/grubinst-1.1-bin-w32-2008-01-01.zip

4. Extract them on your hard disk. Run: grubinst_gui.exe

5. Click DISK. Choose your USB stick. Go 2 boxes down and click REFRESH. On the PART list, choose "WHOLE DISK (MBR)". Make sure everything else is unchecked below.

If it says something about --skip-mbr-test, type: "--skip-mbr-test" without quotes in EXTRA box.

Click INSTALL. DOS box should pop up and tell you it transfered MBR.

6. Copy: file "grldr" from your extracted files to your USB stick.

7. Create a text file in the root of your USB stick and name it: menu.lst

Put inside:

title TRUECRYPT RESCUE DISK
find --set-root /tc.iso
map --mem /tc.iso (hd32)
map (hd0) (hd1)
map (hd1) (hd0)
map --hook
root (hd32)
chainloader (hd32)

And save the file.

8. Copy TrueCrypt Rescue Disk (the iso you created during system encryption) to root of USB and rename it to: tc.iso

If you don't have the iso, go to TrueCrypt program: SYSTEM > CREATE RESCUE DISK... Follow hte prompts and copy that file to USB and rename it to tc.iso

That is all.

disable negative dns caching

Sprint Novatal 2200 mifi devices seems to produce a lot of negative (unsuccessful) dns responses, so just disable the negative caching on windows XP.....

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters]
"MaxNegativeCacheTtl"=dword:00000000

eFax - Free trial - not really free

eFax offers a "free" 30 day trial.  Though the signup process you are not told how many pages can be sent or received for free.....

I got two charges for sending over 30 pages ($10 in overages).  When I went to cancel, they said they'd only refund the normal fee ($10).

Decide for yourself if it's worth dealing with a company that isn't up-front with their terms......

EMC ECC and Naviagent problems and fixes

Cloning or renaming a system can have some consequences on EMC products like EMC Control Center/ECC  or Navisphere agent for Clarrion arrays:

ecc fix:
rm -rf /var/ECC
cd /usr/ecc/exec && rm -f *.COMFILE *.comfile *.uid *.port *.lck


Navisphere agent / Naviagent fix:
stop naviagent and delete HostIdFile.txt:
/sbin/init.d/agent stop ; rm /etc/log/*

HP-UX sendmail won't start

if unable to start sendmail and get the following error messages in syslog, the fix is at the bottom:

Nov 19 15:13:06 HOSTNAME /sbin/init.d/sendmail[11536]: Unable to start Sendmail.
Nov 19 15:13:06 HOSTNAME /sbin/init.d/sendmail[11536]:
Nov 19 15:13:06 HOSTNAME /sbin/init.d/sendmail[11536]: The sendmail.cf file is configured for send_only feature.
Nov 19 15:13:06 HOSTNAME /sbin/init.d/sendmail[11536]: Modify the /etc/rc.config.d/mailservs file with the send_only feature.
Nov 19 15:13:07 HOSTNAME /sbin/init.d/sendmail[11536]: To disable the send_only feature:
Nov 19 15:13:07 HOSTNAME /sbin/init.d/sendmail[11536]: - Run the gen_cf file to generate the sendmail.cf file.
Nov 19 15:13:07 HOSTNAME /sbin/init.d/sendmail[11536]: - Merge your site-specific customizations with the /usr/newconfig/etc/mail/cf/cf/sendmail.cf.gen file.
Nov 19 15:13:06 HOSTNAME /sbin/init.d/sendmail[11536]:
Nov 19 15:13:07 HOSTNAME /sbin/init.d/sendmail[11536]: - Copy the /usr/newconfig/etc/mail/cf/cf/sendmail.cf.gen file as /etc/mail/sendmail.cf.
Nov 19 15:13:07 HOSTNAME /sbin/init.d/sendmail[11536]: - Change the /etc/rc.config.d/mailservs file accordingly.
Nov 19 15:13:07 HOSTNAME /sbin/init.d/sendmail[11536]: - Restart Sendmail.


in /etc/mail/sendmail.cf change the following (or similar line)

from:
O DaemonPortOptions=Port=smtp,Addr=127.0.0.1,Name=MTA

to:
O DaemonPortOptions=Name=MTA

then restart sendmail:   /sbin/init.d/sendmail start     it should start fine.

Alltel and Sprint mobile broadband

Windows XP
Pantech PX-500

to get on alltel evdo from certain areas, I needed to choose the following settings:

mode: EVDO
roaming: AUTO  unchecking Roam guard
important:  eject and plug card at least once

It seems important to eject/reinsert the card to get it to connect.  It also took a long time (20+ seconds) when opening connection manager after inserting the card for the first time; searching for service, connecting/disconnecting automatically until it connected to an EVDO signal on the alltel network.

HP-UX 11.23 to 11.31 update

some of my notes:
agile:
ioscan option -m (mapping)
-m hwpath -H $hw_path  -- shows hardware paths
-m lun  -H $hw_path   -- show agile addressing
-m dsf $device_file  -- maps legacy to agile


upgrading from v2 to v3 will leave legacy references in lvmtab, etc.. to fix:
vgscan -N  or  vgdsf
NOT necessary, but optional:
rmsf -L  insf -L   --  removes or installs legacy device files from box


iofind command scans ascii files and converts legacy to agile addresses

use motorola phone as tethered modem on verizon network

motorola vu204 drivers

download motorola drivers at http://motorola.com

create DUN connection using only PAP for security

username:  10_digit_phone_number@vzw3g.com

password:  vzw

domain:  blank

number to dial:#777

might need reboot phone first.

Backtick grave accent ` iPhone

The backtick (grave accent) ` character is missing from the iPhone and iPod touch normal keyboard layouts. ( as of OS 3.0 ) To use it, go into the mail app and in the email to/cc/bcc fields you should see the backtick in the upper left on the symbols virtual keyboard. Then just copy and paste it wherever you need it.

It might be helpful if a bunch of us complained about this missing key on the iPhone and iPod touch keyboards - leave feedback about the missing backtick/grave accent character at: http://www.apple.com/feedback/iphone.html

Really stupid for them to have it on the email address fields even though it's an invalid char for email addresses.

password aging field

http://www.tech-faq.com/password-aging.shtml
http://www.cse.ohio-state.edu/~mamrak/CIS762/unix_encryption_tut.html


On non-trusted systems password aging is stored as part of the encrypted password each user's account in the system's password file.  The password field, which is the second field is divided in two by a comma.  The first portion, characters 1-13, is the encrypted password.  The second portion, after the comma (characters 15-18), is the password aging field for that account.
password aging field (characters 15-18) breakdown:
character 1: max weeks password is valid before expiration
character 2: min weeks password before password can change
remaining characters: last password change (in number of weeks since 1/1/1970)

the characters are Base-64, so it's kind of tricky.  See the above links for a conversion table for Base64.

calculate:
,N/TT

N = 25 weeks, 175 days max password lifetime
/ = 1 week, 7 days miniumum password before changing
S = 30
T = 31
31 * 64 = 1984
1984 + 31 = 2050 weeks since January 1, 1970 = 08/07/08

lanadmin options for gigabit cards

some good stuff here: http://docs.hp.com/en/J5683-90002/ch02s02.html

specifically I like the lanadmin -x card_info PPA   it gives you firmware, driver versions, etc. level details.  example below for a port on a HP A9784-60002 PCI/PCI-X 1000Base-T FC/GigE Combo Adapter
*********** Version Information **********
Driver version: B.11.23.0609
Firmware version: 1.0.9/1.11
Chip version: 0x10
PCI Sub-System ID: 0x12ca (1000Base-T)
PCI Sub-Vendor ID: 0x103c
Board Revision: A0
Software Key: 0
Engineering Date Code: A-4550

********** Card Setting ***********
Driver State: IGELAN_ONLINE
Auto Negotiation: On
Flow Control: On
Send Max Buf Descriptors: 10
Recv Max Buf Descriptors: 1
Send Coalesced Ticks: 150
Recv Coalesced Ticks: 0

using font server with Cygwin/X

In cygwin\bin\startxwin.bat

%RUN% XWin -multiwindow -clipboard -silent-dup-error -fp tcp/FONT_SERVER:7000

where FONT_SERVER is the name or address of the font server, typically tcp port 7000

great inexpensive waterproof camera case

here's a great inexpensive waterproof digital camera case: Dicapac

However, the WP-410 product, even though it says it fits the Olympus Stylus 1010 or 1020, the camera zoom lens will sit on the clear plastic lens of the bag even when using the rubber extender that comes with the case.

http://tech.yahoo.com/blogs/raskin/17377?comment_start=26&comment_count=20

http://www.dicapac.com/

buy from http://www.dicapacusa.com  www.amazon.com and probably other outlets.

hpux 11.00 trusted account unlock

to "reactivate" a locked / expired "lifetime maximum reached" account on hp-ux 11.00 trusted system server:

/usr/lbin/modprpw -l -x USER


I believe in 11.11 and up all that needed is:  /usr/lbin/modprpw -k USER

c7000 blade enclosures and port maps

bl860c blade server to c7000 interconnect bays port mapping:

http://docs.hp.com/en/AD217-9015B-ed5/ch03s09.html

netbackup name resolutions issues

STATUS CODE 6: Veritas NetBackup (tm) for Oracle database backups fail with a NetBackup Status Code 6 (the backup failed to back up the requested files), and the RMAN log shows an ORA-2702


bpclntcmd -self -- This returns who the client believes it is
bpclntcmd -pn -- This returns who the client believes the master is, and what the master says the client is
bpclntcmd -hn -- This returns the IP address is associated with the master server, using gethostbyname()
bpclntcmd -hn -- This returns the IP address is associated with the client server, using gethostbyname()

bpclntcmd -ip -- This returns the hostname associated with the master server's IP address, using gethostbyaddr()

bpclntcmd -ip -- This returns the hostname associated with the client server's IP address, using gethostbyaddr()

All names and IP addresses should match

swremove selection had errors

doing swremove and getting error swremove: selection had errors.

Nothing further in the swremove.log or any of the swagent.log files in /var/adm/sw.  The problem turn out to be two bundles with the same name, one with the name uppercase, the other lowercase.  In order for the swremove command to work, I needed to specify both bunldes:

swremove BUNDLE1 bundle1

Netbackup and restores to alternate host

to allow restores to an alternate host, use the altnames directory:
http://joostm.nl/netbackup/nbu-env/nbu-env-2-4/doc/TOUCHFILES  (see the No.Restrictions file, to allow any client to restore, BUT it's not safe)