September 2006 Archives

Update: Forget following post. It seems that openssl hangs when used like this (why?) and that much simplier solution is to just add:

AuthLDAPStartTLS on

So, you tried to change your AuthLDAPURL ldap://ldap.example.com to ldaps://ldap.example.com and got following message:

.htaccess: Secure LDAP (ldaps://) not supported. Rebuild auth_ldap

1. create wrapper script like this: /usr/local/sbin/ldaps-tunnel
   

   
   
   #!/bin/sh
   
   exec /usr/bin/openssl s_client -connect ldap.example.com:636 -quiet 2>/dev/null
   
   

   
   


2. edit your /etc/inetd.conf to include:
   

   
   
   ldap   stream   tcp   nowait.9999   nobody   /usr/sbin/tcpd /usr/local/sbin/ldaps-tunnel
   
   

   
   


3. protect that only localhost can connect without ssl by adding following restriction to /etc/hosts.allow:

   
   
   ldaps-tunnel: LOCAL
   
   

   
   

I guess, it's easy, once you know how to do it :-)

1. cache your user credentials

$ svn checkout https://webpac2.googlecode.com/svn/trunk/ webpac2 --username dpavlin 

2. install and init SVN::Mirror

$ cpanp i SVN::Mirror
$ export SVMREPOS=~/svm 
$ svm init google/ https://webpac2.googlecode.com/svn/
Committed revision 1.
$ svm sync google/
Syncing https://webpac2.googlecode.com/svn
Retrieving log information from 1 to 1
Committed revision 2 from revision 1.

3. create branch and import history

$ svn cp file://$SVMREPOS/google file://$SVMREPOS/initial_import -m "import of history"
Committed revision 3.
$ svn rm file://$SVMREPOS/initial_import/trunk -m "removed pre-created trunk"
Committed revision 4.
$ svnadmin dump ~/private/svn/webpac2/ --incremental | svnadmin load $SVMREPOS --parent-dir /initial_import

[... a lot of output ...]

4. Check if all revisions are here

$ svn info file://$SVMREPOS/initial_import/      
Path: initial_import
URL: file:///home/dpavlin/svm/initial_import
Repository Root: file:///home/dpavlin/svm/initial_import
Repository UUID: 07558da8-63fa-0310-ba24-9fe276d99e06
Revision: 663
Node Kind: directory
Last Changed Author: dpavlin
Last Changed Rev: 663
Last Changed Date: 2006-09-08 19:49:09 +0200 (Fri, 08 Sep 2006)

5. Find first revision to import (last changed in google branch+1)

$ svn info file://$SVMREPOS/google/
Path: google
URL: file:///home/dpavlin/svm/google
Repository Root: file:///home/dpavlin/svm
Repository UUID: 15ab016f-fa1c-0410-a7d3-f6d91a34b6aa
Revision: 670
Node Kind: directory
Last Changed Author: dpavlin
Last Changed Rev: 5
Last Changed Date: 2006-09-09 02:09:47 +0200 (Sat, 09 Sep 2006)

6. import other revisions (this will take forever)

$ perl -e 'print "$_\n" for ( 6 .. 670 )' | xargs -i svm mergeback google initial_import {}

7. watch progress with

$ svn log -v https://webpac2.googlecode.com/svn/

It sucks to loose timestamps, but at least you have your revisions...

Update: Lately I would reccomend to use SVN::Pusher to sync your changes. Downside is that SVN::Pusher won't work with file:/// URIs, but other that that it seems like a much easier approach. Usage goes something like this:

$ svn-pusher push -r 663:782 svn://svn.rot13.org/webpac2/ https://webpac2.googlecode.com/svn/

Just a quick note that I now have a spin-off blog called BioTails which will record my journey into bioinformatics.

If you are interested in that, you will have to subscribe to it separately.

For some time, I'm (not quite happy) user of T-Com ADSL router. My particular one is Elcon 2253EU. But, on closer inspection, this device is more or less plain BCM96345 ADSL router. It does, however, have it share of problems: if you click enough on it's web interface, it will just die. While rest of router will work, I won't be able to access it over web, telnet or ftp any more. It sucks (did thay test is at all?)

So, I stared some googling, and found a lot of Broadcom development kits which where (more-or-less) just dropped by various manufacturers on the web (as a side-note, why doesn't Broadcom put those kits on his site and save us all so much trouble?).

I now have various versions (2.14, 2.18, 2.21, 3.02) and I will publish mirror of those images (because original site just disappeared last week) as soon as I sort through them.

With that out of the way, let me say that Broadcom is still GPL violator because they link non-free binary blobs directly in kernel. That's sad. Even worse, they are actually shipping huge parts of user land in binary only forms.

My idea is following: my ADSL modem has an USB port for which I don't have use (it's connected using ethernet). So, I would like to connect USB disk to it. For that, I would guess that I have to re-compile kernel (and since USB driver is binary junk, it might be hard or impossible) and connect disk to it (via USB 1.1, sic!). This will provide me with always-on disk storage on my network (or so I hope). Does this seem sane to you?

Also, did anybody managed to build ADSL images for 96345R target? Most of SDKs actually miss parts for this platform (although most of binary parts are same for all targets). I could build 96348R (which seems similar enough).

But, all this will have to wait few more days to get with a friend who has MAX232 to RS232 cable (for serial console, which should enable booting of new firmware image without flasing device) and JTAG cable (to extract exsiting firmware which, oh, joy, isn't available for download).

I'll keep you posted about progress (if any).