OTRS as a product is pretty cool and full of features, unfortunately from a technical aspect it’s pretty much of an unaesthetic “Perl hack” that’s, especially when you should try to integrate it into your existing environments and make it talk to your RADIUS or directly to your LDAP. Here, I would like to describe the basic configuration to get the latter working without any troubles.

Everything actually starts within the $OTRSHOME/Kernel/Config.pm. After you’ve set up your Apache to get you displayed the /otrs/index.pl and /otrs/customer.pl you’ll need to start hacking Perl in OTRS’ “config file”.
Let’s say, that we would want to authenticate against LDAP. And maybe not only for the agents (the people using index.pl) but also for the customers. So, let’s assume that we’re having a LDAP-tree containing our Base (“dc=something,dc=com”) and our “Users” OU (“ou=Users,dc=something,dc=com”). Also, we have a “Groups” OU (“ou=Groups,dc=something,dc=com”). I think that’s probably the most common built-up, regardless what names the OUs actually have.

Now, first of all, we need to know what user we could use to authenticate on our LDAP later and get the information we need. Here, I’m assuming it’s “cn=admin,dc=something,dc=com”. Let’s begin with the configuration for getting the agents authenticated:

    $Self->{'AuthModule'} = 'Kernel::System::Auth::LDAP';
    $Self->{'AuthModule::LDAP::Host'} = 'localhost';
    $Self->{'AuthModule::LDAP::BaseDN'} = 'dc=something,dc=com';
    $Self->{'AuthModule::LDAP::UID'} = 'uid';
    $Self->{'AuthModule::LDAP::GroupDN'} = 'cn=otrsagent,ou=Groups,dc=something,dc=com';
    $Self->{'AuthModule::LDAP::UserAttr'} = 'UID';
    $Self->{'AuthModule::LDAP::AccessAttr'} = 'memberUid';
    $Self->{'AuthModule::LDAP::Params'} = {
        port => 389,
        timeout => 120,
        async => 0,
        version => 3,
    };

The configuration should be pretty self-describing, though let’s sum it up: We’re connecting to the LDAP host “localhost” (since we probably tunnel the SSH port to the OTRS machine or have it running directly on that one – else you’d just need to specify another hostname/IP. BEWARE: When using an external LDAP with no tunnel you should use LDAPS!) and use our BaseDN. We define the user-id field being named “uid”, just like the user-attribute we’re going to look-up and we’ll be using the memberUid as access-attribute. Wait. memberUid? I lost you, right?

In this configuration, we’re also using a GroupDN that actually lets us “filter” which of our users might be allowed to use the OTRS as agents. For this, we’re accessing the group “otrsagent” within our “Groups”-OU and lookig up the memberUids.
At last but not least, the actual LDAP parameters like the port for example.

Now, you can test your login by browsing to your index.pl and enter the credentials of an LDAP-user being in your otrsagent-group. You should now be possible to authenticate. Nothing more. You won’t be able to login to your OTRS yet. Why? It’s simple: OTRS uses LDAP only for authentication but initially copies the user-data from LDAP into its own database backend. Therefor we need to set up the “AuthSyncModule”.

This module allows us to tell OTRS that we’d like to have our user data being synchronized with the LDAP database. Let’s take a look at the actual configuration:

    $Self->{'AuthSyncModule'} = 'Kernel::System::Auth::Sync::LDAP';
    $Self->{'AuthSyncModule::LDAP::Host'} = 'ldap://localhost/';
    $Self->{'AuthSyncModule::LDAP::BaseDN'} = 'dc=something, dc=com';
    $Self->{'AuthSyncModule::LDAP::UID'} = 'uid';
    $Self->{'AuthSyncModule::LDAP::UserAttr'} = 'UID';
    $Self->{'AuthSyncModule::LDAP::AccessAttr'} = 'memberUid';
    $Self->{'AuthSyncModule::LDAP::SearchUserDN'} = 'cn=admin,dc=something,dc=com';
    $Self->{'AuthSyncModule::LDAP::SearchUserPw'} = 'swordfish';

    $Self->{'AuthSyncModule::LDAP::UserSyncMap'} = {
        UserFirstname => 'givenName',
        UserLastname  => 'sn',
        UserEmail     => 'mail',
    };
    $Self->{'AuthSyncModule::LDAP::UserSyncInitialGroups'} = [
        'users',
    ];

Again, from top to bottom: We tell OTRS what LDAP host, what BaseDN, what UID/UserAttr/AccessAttr, what search user and what password to use. Then, we need to define what’s needed to be synchronized. Here, we only sync the most important data: First name, last name and e-mail. Note: Without the mail entry this won’t work!
After that, we define what OTRS-groups the user should initially be in.

Now you should be able to authenticate and login with your LDAP user. :)

Next, customer authentication.

The customer authentication needs to be configured separately and also starts with basic LDAP information:

    $Self->{'Customer::AuthModule'} = 'Kernel::System::CustomerAuth::LDAP';
    $Self->{'Customer::AuthModule::LDAP::Host'} = 'localhost';
    $Self->{'Customer::AuthModule::LDAP::BaseDN'} = 'dc=something,dc=com';
    $Self->{'Customer::AuthModule::LDAP::UID'} = 'uid';
    $Self->{'Customer::AuthModule::LDAP::GroupDN'} = 'cn=otrscustomer,ou=Groups,dc=something,dc=com';
    $Self->{'Customer::AuthModule::LDAP::UserAttr'} = 'UID';
    $Self->{'Customer::AuthModule::LDAP::AccessAttr'} = 'memberUid';
    $Self->{'Customer::AuthModule::LDAP::SearchUserDN'} = 'cn=admin,dc=something,dc=com';
    $Self->{'Customer::AuthModule::LDAP::SearchUserPw'} = 'swordfish';
    $Self->{'Customer::AuthModule::LDAP::Params'} = {
        port => 389,
        timeout => 120,
        async => 0,
        version => 3,
    };

I think I don’t need to comment this section once again. Next:

    $Self->{CustomerUser} = {
      Name => 'LDAP Datasource',
      Module => 'Kernel::System::CustomerUser::LDAP',
      Params => {
         Host => 'localhost',
         BaseDN => 'dc=something,dc=com',
         SSCOPE => 'sub',
         UserDN => 'cn=admin,dc=something,dc=com',
         UserPW => 'swordfish',
         Params => {
            port => 389,
            timeout => 120,
            async => 0,
            version => 3,
         },
      },
      CustomerKey => 'uid',
      CustomerID => 'mail',
      CustomerUserListFields => ['sn', 'cn', 'mail'],
      CustomerUserSearchFields => ['uid', 'cn', 'sn', 'mail'],
CustomerUserSearchPrefix => '',
       CustomerUserSearchSuffix => '*',
       CustomerUserSearchListLimit => 250,
       CustomerUserPostMasterSearchFields => ['mail'],
       CustomerUserNameFields => ['givenname', 'sn'],
       CustomerUserExcludePrimaryCustomerID => 0,
       AdminSetPreferences => 0,
       Map => [
           [ 'UserSalutation', 'Title',      'title',           1, 0, 'var', '', 0 ],
           [ 'UserFirstname',  'Firstname',  'cn',              1, 1, 'var', '', 0 ],
           [ 'UserLastname',   'Lastname',   'sn',              1, 1, 'var', '', 0 ],
           [ 'UserLogin',      'Username',   'uid',             1, 1, 'var', '', 0 ],
           [ 'UserEmail',      'Email',      'mail',            1, 1, 'var', '', 0 ],
           [ 'UserCustomerID', 'CustomerID', 'mail',            0, 1, 'var', '', 0 ],
           [ 'UserPhone',      'Phone',      'telephonenumber', 1, 0, 'var', '', 0 ],
           [ 'UserAddress',    'Address',    'postaladdress',   1, 0, 'var', '', 0 ],
           [ 'UserComment',    'Comment',    'description',     1, 0, 'var', '', 0 ],
       ],
    };

This is theoretically the same we’ve also set up for the agents and will let OTRS synchronize the customer data into its own database. I think the whole mapping should be pretty clear when read carefully, so I’m not going to explain every setting in detail.

However, after you’ve hacked together your basic configuration in this kinda way, also the customer.pl authentication should be working against your LDAP.

There’s one more thing that’s left to be mentioned. When you authenticate your agents against the LDAP, OTRS will try to authenticate root@localhost against it – what probably won’t work anymore then. Of course, you won’t need to go without an administrative user now. Simply pick one of your LDAP users, add him to the otrsagent group, log in to the web-interface and then adding an entry into the group_user table of OTRS’ database, containing the user_id of your LDAP user (get it from the “users” table) and the group_id “1″, with the permission_key “rw” and the permission_value “1″. After that, the user should have administrative rights.

And the next time, I’ll show you how to build an automatic back-scratcher using a wall, some glue and a cat. Enjoy! :)

However, since (at least for me) there’s nothing comparable to Things, I’m trying to benefit from using it the best I can. One possibility to do so is the automation of task-creation. Wouldn’t it be cool to have Things automatically pack specific e-mails together as tasks you would only need to get done – without actually having the trouble of importing the information from Mail.app manually into Things first? I solved this problem for myself by using a feature that Things, Mail.app and Mac OS X provide me by default: AppleScript.

Now, how would this automated task-creation look like. First, a piece of code is needed, which gets the specific information out of an e-mail and tells Things to add those information to its library. The CulturedCode Wiki already provides us such a script and first I’ve tried to use that. Unfortunately, the script seems to be something hacked together with Apple’s Automator and interferes with the UI, what causes the process of task-creation to be visible to the end-user. I didn’t want that – so I just hacked together my own AppleScript using the AppleScript Edior:

on perform_mail_action(info)
	tell application "Mail"
		set selectedMessages to |SelectedMessages| of info
		set theRule to |Rule| of info
		repeat with eachMessage in selectedMessages
			set theSubject to subject of eachMessage
			set theContent to content of eachMessage
			tell application "Things"
				set newToDo to make new to do with properties {name:theSubject, due date:current date, notes:theContent} at beginning of list "Inbox"
			end tell
			set the (read status) of eachMessage to true
		end repeat
	end tell
end perform_mail_action

You can simply copy & paste this code into your AppleScript Editor and save it somewhere in your filesystem as AppleScript.

Next, we need this script to be called as soon as a new mail arrives. Let’s use Mail.app’s “Rules” for doing that!

Mail.app Rule for Mail to Things

As “Run AppleScript” the script you’ve saved before needs to be specified. What rule you use for yourself actually depends on your incoming mails. In this example, I’m checking the mail’s subject to contain the string [ToDo]: for the script to act on that e-mail. Of course, you can also add another action *after* the “Run AppleScript” for Mail.app to delete the mail afterwards. The only thing my script does is to mark the mails that matched as read.

Now try it out on your own. Write yourself an e-mail containing your match-criteria and you’ll see that the script will automatically add a new task within your Things’ Inbox, containing all details from within the mail itself. Of course, this script can be enhanced for example by leaving away the match-criteria from the subject (s/matchpattern//g), by cutting off everything after “– ” (signature) or maybe even delegating the task to a co-worker or an area of responsibility by parsing the mail’s body. Feel free to extend it the way you need it. :)

PS: You can make the Inbox entries not being due by today by simply removing the “due date:current date” parameter from the script.

//UPDATE:

Because this whole automation topic is so much fun, I’ve just written an AppleScript that automatically adds every conversation-line you receive that starts with the pattern “task: ” to your Things Inbox. :)

Here’s the AppleScript:

using terms from application "iChat"
	on message received theMessage from theBuddy for textChat
		set theBuddy to full name of theBuddy

		if theMessage starts with "task: " then
			tell application "Things"
				set newToDo to make new to do with properties {name:theBuddy & ": " & my LeetReplacer((get theMessage), "task: ", "")} at beginning of list "Inbox"
			end tell
		end if
	end message received
end using terms from

on LeetReplacer(strng, srch, replc)
	tell (a reference to my text item delimiters)
		set {old, contents} to {contents, srch}
		set {strng, contents} to {strng's text items, replc}
		set {strng, contents} to {strng as Unicode text, old}
	end tell
	return strng
end LeetReplacer

And here’s how you can include it into iChat:

iChat to Things

Enjoy!

Fast forward to today and the Smartphones we’re using in our everyday life – Blackberries, Pres and Pixies, iPhones and N900s. What’s the biggest part in that whole cellular phone market that changed since the mid/end 90s? Of course, it’s the phone’s technology and the features they provide nowadays. But what’s more important, the whole accessories-ecosystem around those phones actually changed. Today, you see people buying additional battery-packs for their Blackberries, since the phones are already that “Smart” that you’d actually need a constant power-source to make them last for more than a couple of hours of heavy usage. When people buy a mobile phone, they also typically throw some on-the-go charger into the bucket. And maybe also some docking-station for the desk, or even equipment for attaching it to their car’s windshields.

Now the whole accessory-ecosystem goes that far, that people even buy overpriced socks or pieces of silicon formed as protection-sleeve for their Smartphones. Especially within the iPhone user-groups you can see such protection-cases being very popular. But let us look from another perspective at especially those accessories.

When someone buys an iPhone, of course, he’s interested in the phone’s features and probably likes the way the phone integrates with the rest of his personal infrastructure, like laptops, computers/Macs, etc. But of course, only a few people really go for the features-pack only. Probably 90% of the iPhone customers look forward to have a phone that’s so exclusive and so beautiful that you’d hardly like to take it out of the showcase. And exactly at that point, all third-party manufacturers of iPhone accessories come in handy. So, people go and get their iPhones, take them out of the packing and lock them right into some ugly silicon, acrylic, plastic or whatever kind of case to protect their beauty against scratches, dirt and other natural enemies of the glossy piano paint. Sure, I mean, they paid and ass full of money for a brick that blinds you by its glint, so why should these people not try the best to protect it the best they can?

Well, sure they can do that – but where’s the point? I think I can talk for everyone that has ever searched for an iPhone case when I say that 99% of them are ugly as hell and not worth the package they’re shipped in. So, why do people then actually buy an iPhone for its cool look, when they “protect” it most of the time with such a case where the phone’s actual look does not matter anymore? For what? So they can slide it out when they’re feeling lucky and show it to everybody for one blink of an eye and then pack it back into its sleeve?

Of course, you can’t blame the people for that. I mean, why can’t accessory-manufacturers produce electro-magnetic protection shields that build an own atmosphere around the iPhone that does not allow anything else to come through than the owner’s washed hands to touch the touchscreen? I mean come on, that’s what people are waiting for! F*ck invisibleSHIELD, f*ck the pseudo translucent plastic shields that doesn’t absorb hits that could cause the iPhone’s screen to break into million small pieces. The people want cases that doesn’t even allow the iPhone to fall down the stairs or into water!

Yeah, right. Now I can definitely remember those days when I got my first Bosch 509 and protected it with one of the dozen plastic-sleeves against the cruel reality.

Think different, people.

Enjoy! :-)

However, I could philosophize even more about the pros and cons of this themeable-web-interface-for-YQL but I’m actually not that much into it to do so. The reason for registering was mainly for the hype’s sake and besides, I actually planned to reserve my everywhere used nickname “devilx” – unfortunately it was already taken by an as-it-seems porn addicted guy. :-(
If this guy should coincidentally follow my blog and read this: I would be very thankful, if you could pass me that subdomain name, so I can make use of it for more than just an empty page named “Default” and following porn. Thank you!

Oh well, enough for today. Read (someday) more on http://mariusmm.tumblr.com/. Enjoy! :-)

First of all, re-install the MacPorts.dmg. After that, check what packages you’ve got installed and activated:

$ port installed | grep -i active

You can save this list by redirecting it’s output via > to any file. Next, clean up the ports:

$ sudo su -
Password:
# port clean all

Next, uninstall *all* installed (even not activated) ports:

# sudo port -f uninstall installed

And last but not least, look at your list, check what software you still need and re-install it:

# port install

You could try to automate the re-installation by something like:

# port install $(cat ./file_containing_list.txt | awk ‘{ print $1 }’ | while read line; do echo -n “$line “; done)

Although I would not recommend it, since you’d like to install different variants on some ports. :-)

Enjoy.

Hi,

I’m having a bit of a trouble while trying to move my CandyBar’s Library from the regular Application Support directory into my Dropbox directory. I did that move on my iMac and everything worked out pretty good. I’m now having the Library running on my Dropbox, so it’s always being synced up to the cloud.

When I open my MacBook now and change the Library path to the Dropbox directory there (since those two Macs are being kept in sync via Dropbox) I can see all libraries contents, but instead of the actual icons or docks, I only see CandyBar-file-icons in the preview. I can even double-click some item from my list to view it in detail, still, no actual icon-image, only the white paper with CandyBar logo on it.

Could you please help me on this/tell me, what’s left to be done so that my sync works? I’m not expecting both CandyBars to work simultaneously, since it would probably break the Library, but at least when I run one after another (what’s the actual use-case here) I expect everything to be in sync.

Thanks in advance,
Marius.
–
Sent from my iMac.

On Nov 17, 2009, at 3:47 AM, candybar@panic.com wrote:

Hi Marius,

It’s currently not possible with Dropbox because whichever protocol Dropbox uses does not support resource forks, which is the part of the icon file where CandyBar stores icon data.

You’ll have to compress the whole library before putting it on Dropbox to make this work.

–
Les
Panic Inc.

Hm… :-/

Update:

On 11/17/2009 97:22AM, devilx@devilx.net wrote:

Hi,

I’m having trouble in using Dropbox in combination with a popular Mac OS X application named “CandyBar” (http://www.panic.com/candybar/). The application itself provides a way to move its existing Library into a custom location, for example right into Dropbox’s folder, unfortunately the sync over two Macs fails. Please read the appended conversation I’ve already had with one of Panic’s support guys for more information.

I would really appreciate if you could provide a bugfix for this issue, to make Dropbox even more usable than it already is.

Thanks in advance and best regards,
Marius.

On Nov 18, 2009, at 11:51 AM, support@getdropbox.com wrote:

Hi Marius,

Yup, their support person is correct.

You can work around this problem by making an archive ZIP file of the file(s) and putting the archive in the Dropbox folder. Just right-click on the file (or a whole folder of files) and select “Create Archive.” The resulting .zip file is safe to put into the Dropbox folder. You can double click on the .zip file to open it and recreate the file(s).

Are are working on this. Add your voice:

https://www.dropbox.com/votebox/4/mac-resource-fork-support#votebox:0

Best,
Kevin Chu

This means: Vote people! Vote! :-)

Apple Magic Mouse

I’ve been using Apple’s newly designed and named Magic Mouse for around a week now and have to say that I’m actually pretty happy to have bought it and replaced my Mighty Mouse with it.

First of all, the new Magic Mouse has no more scroll-ball, what’s probably the biggest change in the whole redesign. Apple finally found a way to remove the always-broken-due-to-dirt scroll-ball by a multi-touch surface that goes across the Mouse’s whole surface. I haven’t had any problems with scrolling yet, except for my habit that lets me always search for the scroll-ball with my fingers, heh.

Besides the new multi-touch surface, the Mouse became way more flat. It really was a weird feeling to work with it in the first few hours, but I got pretty fast used to it and the only thing I’m still missing are the buttons on the Mouse’s side. I had them configured for application-based Exposé and I know that there are some “Middle-Button-Hacks” for the Magic Mouse available which could be used for such features, but still some real buttons would be more comfortable, in my opinion.

However, I really like the new Mouse, especially since it’s a bit heavier and doesn’t feel like a cheap and shaky plastic-puttogether, as the Mighty Mouse did. Regarding the Bluetooth connectivity, I can’t see any differences yet. I didn’t experience problems neither with the Mighty nor with the new Magic Mouse. As soon as I’ll have some information about the power-consumption of the new Mouse, I’ll update this post – yet, I still run the one-time-batteries Apple provides with their devices and it’s still working pretty fine, at a battery-level of 88%. If the discharge-procedure continues straight-line I’d expect the life of those average batteries to end in around three weeks – at least with my more or less heavy usage. :-) Of course, I’ll replace them by re-chargeable batteries, since I’m not really a fan of the one-time-use.

My conclusion on the Magic Mouse is, that it’s indeed a very high priced mouse but also uses the great multi-touch technology to provide best user-experience at the lowest annoyance possible. I think that, if the actual internal hardware is qualitatively good enough, Apple finally did a good and lasting job on this Mouse. And if you’re not one of those fanboys, that really really really need to always have the latest stuff around, you might be sticking to this Mouse for a long time. :-)

Hope this feedback helps some of you at least a bit on deciding whether to get one for yourself or not. Enjoy!

CandyBar makes OS X appear even more lickable than it already is. It allows to simply change each application’s icon and provides a cool management of all the available icon-sets. Besides, also the Dock appearance can be tweaked and managed. It would be really nice, if CandyBar would provide a way to sync the collection from one Mac to another, since now, I need to keep my collections on my iMac and my MacBook manually in sync, what’s pretty meh. However,  although it’s pretty pricy, it’s worth to have it.

Colloquy is the most advanced, free IRC client I’ve found yet. Its feature-list is pretty good and there’s a similar iPhone client available, too. I used this client already in 2006, when I still had my PowerBook and have to say, that it’s pretty bloated and slow on older hardware. But on the current generation of MacBooks, iMacs and MacPros it should be running like a charm.

Width Dropbox you can easily keep your files in sync over two or more different devices, regardless if it’s a PC, a Mac, a Linux or even an iPhone – all your data is always up-to-date. Besides, you can share files with friends and receive shared folder invitations yourself. 2GB of space is being provided for free, more is affordable for some cash. Though, I’d never put sensitive data “into the cloud”.

Echofon is probably the best Twitter-suite available on the Mac and the iPhone. Thanks to their Sync- and Push-Notification-Service it’s a pleasure to use Twitter, even with multiple accounts and on multiple devices. Thanks to the intelligent Sync-Service, Echofon notices when you’re not on your desktop anymore, and starts pushing notifications to your iPhone client when you get mentioned by someone else – very cool! Yet, the notifications will be pushed only every 15 minutes, but from what I’ve heard, the Echofon guys are already working on shrinking this interval. If you haven’t tried out yet – be sure to do soon!

Is there much to say about iPhoto? I think you can call it the image-management application on OS X. Since ’09 it also supports Faces & Places, what makes everything even more sexy. In combination with the photos shot on a GPS-able camera (like the iPhone) it even detects automatically, what place you’ve taken the photo. Although, yet the face-recognition doesn’t work as I would expect it to. You need high quality pictures with much contrast to get iPhoto recognize the people.

I used to be registered on Last.fm since I was using Linux with its Media-Players with Audioscrobbler plugin, so I’ve just continued using this pretty cool service. It let’s me tag the music I listen and discover new tracks I might like. I never tried out Pandora or similar services, so I can’t say whether Last.fm is better or not – I’m just used to it. :-)

After discovering and trying out LaunchBar there was no way around it anymore – not even by using QuickSilver, what I did quite some time. LaunchBar is extremely fast, supports a ton of different Applications and even provides an easy way to write and include your own plugins. I wouldn’t want to miss it again in my daily work.

LittleSnapper in combination with its web-service (former QuickSnapper, now Ember) is a very nice enhancement to the OS X desktop, since it provides a very quick and easy way to share screenshots with others, without having to use “Grab” and manually upload the images to some service like ImageShack. In addition to the Desktop client, I also use the iPhone app to share camera-snapshots with others.

With Money managing finances became as easy as a finger-snip. I bought my license on a MacUpdate Promo for 20% less and have to say that it’s worth every penny, especially when there’s such a friendly and helpful company like Jumsoft behind. Money supports backing up the whole database to MobileMe and by that even synchronization of two Macs with each other. The iPhone client yet only supports sync over WiFi from what I’ve seen, but hopefully there will be MobileMe support in future, too.

Let me just call it “Poor man’s Photoshop” – in an excellent way! Pixelmator is, what GIMP is to the GNOME Desktop. It let’s me create/edit images in an easy and smooth way, without much knowledge of the actual application itself. Pixelmator provides me a light and intuitive application with a feature-list that fits my needs perfectly without being over-bloated.

As the name already says, Quiet Read provides you a way to temporary bookmark for example web-pages and read it later, when there’s more time for it. It’s actually the similar concept Instapaper follows, although it doesn’t really extract your site’s content for any mobile platform, nor does it have any web-service in the background to which you can sync multiple installations. MobileMe support would be a great feature, maybe Bamboo Apps will implement it some day. :-)

Shovebox is a great companion for Things and Quiet Read which also provides a pretty cool iPhone client that’s for free. I got the App itself from within a MacHeist Bundle, where I didn’t need to pay anything for it – and maybe that’s the reason I’m actually using it. Yet, I would not really pay money on this App, since its yet pretty “small” (regarding its features) and I have most things already managed by Things and Quiet Read/Instapaper (free).

Yes, it’s Telephone! And yes! It’s OpenSource! This application allows you to use your VoIP account provided by your ISP directly on your Mac. At the moment, several ISP are supported and the list gets longer and longer. Telephone makes it easy to dial and receive calls on a VoIP account without much hassle.

TextMate – THE Editor. I think, there’s nothing better for writing any kind of code under OS X. This editor is light, fast and provides hell of a feature-set you’ll probably never finish to explore. MacroMates did an excellent job with this application and I know of many tries (especially on Linux) to re-create something similar, but yet no other (GUI-)editor reached TextMate.

Things is probably one of the most amazing task management applications for OS X available today. It provides all you need for successfully managing all your ToDos and even syncs them up to your iPhone client. Two big cons of Things are the yet still not available MobileMe sync (today, it does sync only over WiFi, without even using an encrypted connection) and the pricing on both, the desktop and the iPhone app. Still, the App is just lo-ve-ly and a must of everyone who’s really into task management.

A very nice newsfeed reader with excellent graphical user interface. Times provides you all basic-features you would expect form an RSS-reader plus the possibility to read the whole articles within the application itself. Very nice idea, and pretty cool implementation, though I’d wish it to be faster and not that bloated.

Versions – and you’ll never need to look up svn –help again. Since the last version of Version (ough, what a sentence) it even supports the latest SVN 1.6.x and provides you to work with several different SVN repositories at a time without much practice. Although, with $39 it this application is very pricy.

Viscosity is yet the best user interface for OpenVPN available on OS X, in my opinion. It lets you import your OpenVPN config-files and edit them within a very nice preference-window. Also, it shows you statistics about your running connections and makes OpenVPN easier than it already is – and with $9 it’s quite a fair deal.

Storing passwords, credit-card information and other sensitive data. Wallet allows me to manage all my logins and other passwords in a very nice and fast way, it provides me an add-on for Safari and Firefox and it allows me to sync my Wallet-database via MobileMe and even browse it on my iPhone with its iPhone app – although it took years until the iPhone pendant was available here in germany.

I think, that’s it so far. Besides those application, of course I use the regular tools like Mail.app, iCal, the Address Book, iTunes, the Terminal and all the other not-worth-mentioning programs that come with OS X. :-)

First of all, we defined our scenario. Let’s assume that we’d like to have a cluster of two servers, both running the latest CentOS (5.4), both up-to-date, both using the very same partitioning and both using DRBD and GFS(2). On most SuSE or Debian systems, the installation would be pretty straight-forward: You install the base system, set up the DRBD, format it with some OCFS and make Heartbeat monitor everything. So far so good. On RHEL/CentOS it seems to work a bit different, due to the different tools they’re using. When installing the installation-group “Cluster Storage” for example, yum fetches packages named openais and cman – tools you’ve probably never heard of, when you come form the Debian corner (as I do). But before I describe those in detail, let’s just configure our plain base-installation.

What do we need to do first? What’s one of the most important things on two systems that should run “symmetrically” and have the very same data available, with every change that’s being made every second? Exactly, the time would be one of those things. We need to assure that both systems use the very same time. Mostly, you’ll be using some x86_64 hardware for such setups, where the problems start: On 64-bit hardware, the timekeeping with TSC doesn’t run that perfect, which is why we should just deactivate it and leave HPET do its job alone. After installing ntpd we need to open our grub.conf and add the notsc option to our kernels. It should looks something like this:

===================================================================
RCS file: /etc/grub.conf,v
retrieving revision 1.1
diff -u -r1.1 /etc/grub.conf
— /etc/grub.conf 2009/11/13 13:30:26 1.1
+++ /etc/grub.conf 2009/11/13 13:32:26
@@ -13,9 +13,9 @@
hiddenmenu
title CentOS (2.6.18-164.6.1.el5)
root (hd0,0)
- kernel /vmlinuz-2.6.18-164.6.1.el5 ro root=LABEL=/
+ kernel /vmlinuz-2.6.18-164.6.1.el5 ro root=LABEL=/ notsc
initrd /initrd-2.6.18-164.6.1.el5.img
title CentOS (2.6.18-164.el5)
root (hd0,0)
- kernel /vmlinuz-2.6.18-164.el5 ro root=LABEL=/
+ kernel /vmlinuz-2.6.18-164.el5 ro root=LABEL=/ notsc
initrd /initrd-2.6.18-164.el5.img

Now, we can shutdown the ntpd and set its drift-file to 0.000. After that, simply reboot and check the dmesg for the HPET-lines and of course also check the time on both systems to be identically.

Now, what else should we configure until we start building our actual cluster? Probably, we should take a look into the system-config-securitylevel-tui tool. Depending on what environment you plan your cluster to run in, you either want to open each port by port manually in the firewall and configure your SELinux to allow CMAN/OpenAIS and DRBD to work properly – or you simply turn of those “toys” and configure the network-segment to be secure by itself. It depends to you and I’m not going to write how to reconfigure the firewall or your SELinux-environment. For my tests, I simply turned both off. Especially the combination of CMAN/OpenAIS and SELinux can become pretty tricky, when SELinux runs in any other mode than “Disabled”. :-)

Now, let’s finally please our inner kid and install some software:

# yum groupinstall “Cluster Storage”
…
# yum install drbd83 kmod-drbd83
…

I’ve chosen to use drbd83 since it’s the next stable release and already obsoletes drbd82 in CentOS 5.4 – and drbd is simply just too old. Of course, upgrades might become tricky when using explicitly versioned packages, but on DRBD it’s always a bit tricky, since there could be configuration changes which would have to be implemented manually on future versions.

However, now let’s create the infamous and poorly documented /etc/cluster/cluster.conf. For testing, we could simply use something like this:

<?xml version=”1.0″?>
<cluster alias=”cluster-setup” config_version=”1″ name=”cluster-setup”>
<rm log_level=”4″/>
<fence_daemon clean_start=”1″ post_fail_delay=”0″ post_join_delay=”3″/>
<clusternodes>
<clusternode name=”server-1.cross” nodeid=”1″ votes=”1″>
<fence>
<method name=”2″>
<device name=”LastResortNode01″/>
</method>
</fence>
</clusternode>
<clusternode name=”server-2.cross” nodeid=”2″ votes=”1″>
<fence>
<method name=”2″>
<device name=”LastResortNode02″/>
</method>
</fence>
</clusternode>
</clusternodes>
<cman expected_votes=”1″ two_node=”1″/>
<fencedevices>
<fencedevice agent=”fence_manual” name=”LastResortNode01″ nodename=”server-1.cross”/>
<fencedevice agent=”fence_manual” name=”LastResortNode02″ nodename=”server-2.cross”/>
</fencedevices>
<rm/>
<totem consensus=”4800″ join=”60″ token=”10000″ token_retransmits_before_loss_const=”20″/>
</cluster>

Configuring OpenAIS this way isn’t actually the best way… it’s not even “good”. But for testing (and understanding how stuff works) it should be enough. Those rules expect manual intervention when one of the two server should become unavailable and needs to be brought back into the cluster.

The domain “.cross” is expected to be a hostname.domainname entry within the /etc/hosts of each server and defines the direct cross-cable-connection from one server to another. We need this connection to shrink down network latency and provide a way for OpenAIS and (in this example) also DRBD to directly communicate with each other. A better setup would be to set the heartbeat on top of a serial-line, since it would be most fault-tolerant.

Okay, next. What’s left? Exactly, the actual DRBD – so let’s set it up:

global { usage-count yes; }
common { syncer { rate 100M; } }
resource the-disk {
protocol C;
startup {
wfc-timeout 20;
degr-wfc-timeout 10;
# become-primary-on both; # Uncomment this only after tested!
}
net {
cram-hmac-alg sha1;
shared-secret “i4m501337″;
allow-two-primaries;
}
on server-1 {
device /dev/drbd1;
disk /dev/sdb;
address 10.100.0.1:7789;
meta-disk internal;
}
on server-2 {
device /dev/drbd1;
disk /dev/sdb;
address 10.100.0.2:7789;
meta-disk internal;
}
disk {
fencing resource-and-stonith;
}
handlers {
#outdate-peer “/sbin/handler”;
}
}

This configuration defines our two servers and tells DRBD to use /dev/sdb on both for the actual data. Our meta-disk will be internal and with address we defined – guess what? – the IP addresses of our two servers. Those are the .cross-domain addresses!

Next, we initialize our meta-disks (on both nodes), set our generation identifier, start the actual DRBD service and check the roles it currently runs in:

# drbdadm create-md the-disk
…
# drbdadm — 6::::1 set-gi the-disk
…
# service drbd start
…
# drbdadm role all
Secondary/Secondary

If all those steps succeed, we can try to promote both nodes to primary:

# drbdadm primary all
# drbdadm role all
Primary/Primary

And if this now worked out properly, we can enable the automatic promotion from within our drbd.conf:

# rcsdiff -u /etc/drbd.conf
===================================================================
RCS file: /etc/drbd.conf,v
retrieving revision 1.2
diff -u -r1.2 /etc/drbd.conf
— /etc/drbd.conf 2009/11/13 10:34:23 1.2
+++ /etc/drbd.conf 2009/11/13 15:16:26
@@ -9,7 +9,7 @@
startup {
wfc-timeout 20;
degr-wfc-timeout 10;
- # become-primary-on both; # Uncomment this only after tested!
+ become-primary-on both; # Uncomment this only after tested!
}
net {
cram-hmac-alg sha1;

Great. So we’re set up now? Nope. We’re not. Next, we need to change DRBDs boot order in order for it to work properly with the GFS auto-mounting on boot:

# rcsdiff -u /etc/init.d/drbd
===================================================================
RCS file: /etc/init.d/drbd,v
retrieving revision 1.1
diff -u -r1.1 /etc/init.d/drbd
— /etc/init.d/drbd 2009/11/13 10:57:15 1.1
+++ /etc/init.d/drbd 2009/11/13 10:58:15
@@ -1,6 +1,6 @@
#!/bin/bash
#
-# chkconfig: 345 70 08
+# chkconfig: 345 22 75
# description: Loads and unloads the drbd module
#
# Copright 2001-2008 LINBIT Information Technologies

And let it run on boot:

# chkconfig –level 345 drbd on

Great! So, now we are set up, right? Nope, wrong. We have a running DRBD setup now, but we still lack of a cluster-able file-system. GFS2 is a pretty good choice for such a task, so let’s try to format the DRBD-device on one of our nodes with it:

# mkfs.gfs2 -p lock_dlm -t cluster-setup:mycluster /dev/drbd1 -j 2

Before we can try to mount the device, we need to have OpenAIS/CMAN running, in order to manage our GFS consistency. Let’s start the cman service therefor (on both nodes!):

# service cman start

Starting cman and starting fenced could take several seconds, be patient. If you installed both servers identically and followed this documentation step by step everything should work out just fine. :-)

At last, we can now mount our DRBD device into some folder (on both nodes) and start playing around with our fresh setup:

# mount -t gfs2 /dev/drbd1 /mnt/somefolder

I hope everything worked out for you and I also hoped that this brief summary helped you getting a bit easier into the actual setup of such a cluster setup. Feel free to ask any questions or provide feedback in any form.

Enjoy! :-)

So, what’s new in 0.3? Well, just about everything. I’ve renamed the bundle (at least its metadata), since webOS is not just limited to the Pre and I’ve modified the shortcuts of existing features to fit TextMate’s styling guidelines a bit better. I’ve also created some snippets which can be used for faster code-writing now and in addition to that, I’ve implemented a very own language for the bundle, which can’t be found in the document type picker named as “Mojo”. “Yeah baby!”, as Austin would say now. Actually, yet it’s just a copy & paste of the JavaScript-language implementation in TextMate, but I’m planning to extend it to fit the Mojo-framework even better.

The TextMate bundle is now also available on GitHub, for everyone who can’t wait for me packaging the releases and releasing them here. :-) If you have any ideas for improvement, feel free to contact me by mail or just leave some lines here on my blog.

Enjoy!

Download: Palm_webOS-Bundle-0.3

Download: Palm_webOS-Bundle-0.3

On the one hand, VMware seems to me, especially when running Windows as Guest OS way slower than Parallels. At least from what I’ve tested it seems to be having way more disk I/O and by that produce a heavier load to the Mac. Parallels on the other hand seems to be better performing, but yet it still looks like it’s mostly just “hacked together”. It doesn’t integrate that smooth with my Mac and permanently keeps my Firewall asking me whether to allow its daemons to receive connections. VMware’s look-and-feel is just way better than Parallels’.

On the other hand again, VMware’s Fusion doesn’t provide an iPhone App, what’s definitely a Plus for Parallels. But VMware then again provides me with kind of a virtual appliance store, where I can find pre-installed VMs – many even for free.

Update: So, I’ve just installed Windows 7 on both virtualization-solutions now. The average time for installation was approximately the same and even the performance is not such a big difference. What I’ve noticed: VMware is slower in rendering the Aero-effects while Parallels is slower in disk I/O-related things. I can’t really proof this, it’s just a feeling I get when using the VMs.

Huh, I don’t know. Any comments? I would like to see some in-detail 1:1-comparizon between Fusion 3 and Parallels Desktop 5 Mac, although I don’t think I’ll find something like that…

Update #2: Now, I’ve also installed the latest openSuSE 11.2 on both and was astonished by Parallels’ speed for copying, unpacking and installing 2.8GB of RPMs within around 11 Minutes. I guess the I/O argument isn’t valid any longer now. Hm…

Update #3: Parallels somehow still totally disrupts my workflow. I’ve just booted a Windows Vista VM (pure pain, yes) and Parallels Desktop 5 Mac immediately started to ask me to install its tools. I clicked later and right after the dialog disappeared a new one popped up, that told me something about the VM/Mac profile-synchronization. I clicked on the red X, since I just wanted to test something quick within Vista. Regardless of my intend to dismiss the procedure, Parallels logged me out of my Windows Vista session, so I had to log in again. Again, the profile-sync dialog appeared – I didn’t touch it anymore. Some seconds later a new dialog appeared, that was telling me that Parallels placed some Windows folder right within my Dock – and I was like “WTF?!”. Ouff…

Palm Pre Development Bundle 0.2

Yes, after not even four hours I’ve already finished building the 0.2-release of my Palm Pre Development Bundle for TextMate. In case you’re wondering what weird stuff I’m talking about, please read my previous post first.

However, this second release includes a lot more features than it had before, plus I’ve made use of the CocoaDialog now. Let me describe the new features from the top to the bottom of the screenshot on the left site.

First of all, there’s “Generate New Project”. This lets you execute a palm-generate with all important attributes and opens the created project afterwards using the “mate” terminal-command, which needs to be available for this to work. All you have to do then is simply to save the TextMate project right into your generated project-directory.

Next, we still have “Generate New Scene”. I’ve enhanced the feature now, so that you’ll get a cocoa dialog asking for the scene’s name. Beware: The generation usually works as it should, the only problem is the TextMate project-drawer, which doesn’t seem to refresh by itself. A workaround: Cmd+H to hide TextMate and then click on its Dock-icon to make it appear again. Then all newly generated files should be visible in its drawer.

The next three features work just as before, no enhancements at all. On the fourth, the “Launch Project in Debugging-Mode” feature, I’ve implemented a palm-launch with debugging options, that can be run on an existing, packaged and installed project.

Next, there are ways to close and remove installed Projects. “Close running project” of course only works, when the App is actually running and “Remove installed Project” removes the App from the device. As device for all those commands the first device found by the Palm toolset will be taken – so if you would like to use the Emulator, better disconnect your real device and vice versa.

I’ve also built-in two features that let you simulate test calls and SMS on your Emulator, if you changed from password authentication to SSH public key authentication. You can do this either manually or try to use the feature at the menu’s bottom named “Auto-install SSH-Pubkey on Emulator”. Depending on your SSH-key-setup it works out or… not.

The other seven features allow you to simulate GPS drives on the Emulator – again only if you’ve set-up SSH-Pubkey authentication.

I hope you enjoy this release of the Palm Pre Development Bundle for TextMate! :-)

Download: Palm-Pre-Bundle-0.2

UPDATE: There’s a newer version available! Get it here. Or use GitHub.

The scene generation works like this: You implement your this.controller.pushScene(“Main”);-statement, select the scene’s name (Main, without the quotes!) and select the scene-generation command from the bundle’s menu. The command will immediately generate you a new scene named just the way you chose to name it. :-)

The other three commands can be ran by pressing the keys Fn+Ctrl+F5/F6/F7. Attention: The bundle only works with TextMate Projects! Generate your Palm Pre project like you always do, by using the following command:

palm-generate -p “{ title:’ProjectName’, id:com.my.ProjectName, version:’1.0.0′ }” ProjectName

Then, create a new TextMate Project and drag&drop the folder palm-generate created for you (“ProjectName”) into the Project’s drawer. Save the project within your Project-directory (“ProjectName”) and then run the commands.

This is the very first version of this bundle and I’ll keep constantly improving it with other features that help me and hopefully others on the development of Palm Pre Web-Apps.

Enjoy!

Download: PalmPre-Bundle-0.1

UPDATE: There’s a newer version available now! Get it here.

However, after I bought Money, I exported my whole transaction info from my ING-DiBa account as CSV (since they do not provide me anything else) and tried to import it into Money – and it failed. I was using the latest version (3.4.4 v1938) and had quite a few problems with the CSV import. First of all, the columns haven’t been recognized automatically. Also, I didn’t really knew how to import the transaction-value, since I only had one column containing a positive (income) or a negative (outgoing) number, where Money expected “Withdrawal” and “Deposit”. Also, Money seemed to have problems with the punctuation of the numbers, what cause 1000€ to become 100€. And in general, the software didn’t work well with the CSV my bank provided me. I had to manually cut out the first few lines (which were just some additional information but not party of the transactions) and stuff line that. I was wondering, why this is so, since Squirrel automatically recognized the CSV and imported it just perfectly into my virtual account.

I wrote an e-mail to Jumsoft and explained the problems I have with my freshly purchased Money and of course asked for help. After some more mailing, I got a patched version of Money one day later. I tried it out and: Bam! It worked! The CSV imports work just as they should now, even if there’s still no automatic column recognition. Still, I’m very happy that Jumsoft helped my out that fast and in such an uncomplicated way – I’m not used to this from Apple-related companies anymore.

After I had all my data imported into Money and got everything categorized, synced the info up to my iPhone, what also worked out as smooth as I’d expect it.

The one thing I did not check yet are the possibilities to sync Money over two different Macs. I’m sure it’s possible by using the Dropbox-way, although I would not like to upload such sensitive information to my Dropbox. Maybe it’s possible to sync via W-LAN, dunno.

It seems to be possible to sync different Macs via MobileMe! Hurray! I’ll test it out and give some feedback as soon as possible. :-)

Enjoy viewing!

export EZMWLUCENE_HOME=/opt/lucene/server
/usr/lib/jvm/java-6-sun-1.6.0.12/jre/bin/java -Dezmwlucene.home=$EZMWLUCENE_HOME -Djava.io.tmpdir=$TMP -cp $EZMWLUCENE_HOME/ezmwlucene.jar:$EZMWLUCENE_HOME/lib/jetty-6.1.14.jar:$EZMWLUCENE_HOME/lib/jetty-util-6.1.14.jar:$EZMWLUCENE_HOME/lib/servlet-api-2.5-6.1.14.jar:$EZMWLUCENE_HOME/lib/commons-codec-1.3.jar:$EZMWLUCENE_HOME/lib/commons-httpclient-3.1.jar:$EZMWLUCENE_HOME/lib/commons-logging.jar:$EZMWLUCENE_HOME/lib/FontBox-0.1.0-dev.jar:$EZMWLUCENE_HOME/lib/lucene-core-2.4.0.jar:$EZMWLUCENE_HOME/lib/lucene-highlighter-2.4.0.jar:$EZMWLUCENE_HOME/lib/PDFBox-0.7.3.jar:$EZMWLUCENE_HOME/lib/poi-3.5-beta3-20080926.jar:$EZMWLUCENE_HOME/lib/poi-scratchpad-3.5-beta3-20080926.jar net.sourceforge.ezmwlucene.service.EzMwLuceneService

Those two lines can be packed-up within a shell-script, which then gets ran by a proper /etc/init.d-script. For me, it now just works perfectly.

Enjoy! :-)

The first thing needed is a client computer running any kind of the supported OSs by the Amazon API tools and of course the tools themselves. After you’ve installed those and configured all credentials the right way, we can create a new pair of SSH keys for our new project. Due to the location I’m currently in, I’ve chosen to use Amazon Instances in the western EU. Execute the following line on your command-line:

ec2-add-keypair –region eu-west-1 test-keypair

The result should look something like this:

[Deprecated] Xalan: org.apache.xml.res.XMLErrorResources_en_US
KEYPAIR test-keypair e1:1a:d1:a1:a1:1c:10:a1:b1:d1:cb:11:11:1a:11:11:f1:11:ae:fe
—–BEGIN RSA PRIVATE KEY—–
XXX
—–END RSA PRIVATE KEY—–

You can now copy the lines from BEGIN… until END… (including those two) into a file which you’ll be using as SSH-key for connecting to your instance. Don’t forget to chmod 600 it!

Next, let’s see what base-images for creating our instance we could you – first, provided by Amazon themselves:

ec2-describe-images –region eu-west-1 -o ‘amazon’

The list is contained of several different OSs and versions, although in our current project we can’t make use of any of those. Therefor, we’re now searching for a perfectly fitting, really good operating system:

ec2-describe-images –region eu-west-1 -a | grep -i debian

And yet, we receive another list with several different versions of the Debian Linux distribution. After we’ve picked the one we’d like to run, we should check what instances are currently up and running:

ec2-describe-instances –region eu-west-1

If you’re using Amazon’s EC2 for the first time, there shouldn’t be any items listed. We can now start our very first instance, by copying the instance’s identifier (in the second column, a string starting with ami-) and pasting it into our command:

ec2-run-instances –region eu-west-1 -k test-keypair -g ‘http/s’ -g ‘ssh’ ami-b8446fcc

In this command, we tell Amazon to start up a new instance that’s built on top of the ami-b8446fcc-image, using the key-pair we just created before and using some custom built firewall-rules named “http/s” (which allows us to connect to port 80 and 443) and “ssh” (port 22).

We need to wait a few seconds, until the instance comes up. We can use the describe-instances command from above to check the instance’s status:

ec2-describe-instances –region eu-west-1

As soon as it’s up and running, the “pending” column should have been replaced by a dynamically allocated hostname and the status “running”. Keep in mind, that this hostname/ip is dynamically allocated! If you want a fixed IP, you need to allocate and assign an Elastic IP – I’ll show you later how to do so.
If our firewall rules worked out, we can now connect using SSH:

ssh -i ~/Library/EC2/id_rsa-test-keypair root@ec2-11-111-11-111.eu-west-1.compute.amazonaws.com

By default, Amazon sets up a Small Instance, that provides around 10 GB of hard drive, an Dual-Core AMD Opteron 2218 with 2600 MHz and around 1.7 GB of RAM. Small instances, in comparison to the bigger ones, also still provide a real swap-partition which is limited to 895 MB. Here, you could run into problems when installing some Oracle for example, since the DB would like to have 1 GB or more Swap-space. If 895 MB should not be enough, the only way to enlarge it seems to be to use a file within your file-system for that. Either, by placing it somewhere into / or by using /mnt for that. /mnt is a special mount in Amazon instances which provides you 147 GB of additional volatile storage. Amazon doesn’t guarantee in any way the storage to be stable/solid or even backed up – and usually /mnt is only used for bundling your instance. You might now think “so, where could I place my data, if / is only providing me 10 GB of space and /mnt should not be used for storing sensitive data?” – well, there’s a third possibility named Elastic Block Storage. An EBS is being displayed to your instance as regular block-device (/dev/sdb, …) that’s format- and mountable. There, sensitive data could be stored, by bind-mounting the directories you’d like to have your data in. I’m not going to explain how this works, else I’ll never finish writing this brief documentation.

However, since we’re connected to the instance now, we can set it up the way we want it, with whatever software we need on it. I’ve assumed, that most people would set it up as regular LAMP-instance, therefor I’ve also added the firewall-rule for HTTP/HTTPS. After we finished installing the software we need, there’s one more package that should be plugged into the system: The Amazon AMI Tools. Simply wget them from http://s3.amazonaws.com/ec2-downloads/ec2-ami-tools.zip and unzip the package. Those tools make use of Ruby, so ensure having it installed on your instance. Also, you need to have the private key (pk-.pem) and the certificate (cert-.pem) you created the instance with somewhere within your instance’s filesystem, for later use.

Before we bundle up our system now, let’s come back to the topic we had before: The hostname/IP. Amazon allocates some dynamic address, unless you tell them to give you a fixed (called Elastic) IP. You can do that by simply executing:

ec2-allocate-address –region eu-west-1

… within your client’s command-line (where the Amazon API Tools have been installed – not on the instance!). As result you’ll get some IP address that has now being allocated by Amazon for you. The IP isn’t bound to any instance yet – it’s just allocated for you to be able to use it. ATTENTION: You pay for Elastic IPs as long as you do not assign them to an instance. Yes, that’s right. Amazon charges you for every allocated but unused IP hourly. By that, they want to prevent people “collecting” addresses, I guess. To assign the address you just received to your instance, simply run:

ec2-associate-address –region eu-west-1 -i i-11e11b1e 79.125.11.11

The i- is your actual instance’s ID, where the last, dot-separated number is the IP you’ve received. And yes, those are fake numbers – so don’t even try. ;]

Now it could take a bit for Amazon to reconfigure the instance, but as soon as it finished, you should be able to re-connect to the instance using the IP you just assigned to it.

As last task for today, let’s bundle up the image the way we have it now. Bundling an image allows you more than just eating up your credit card’s limit by dumping your S3 buckets. On the one hand, with bundles you can recover machines that crashed or lost data within a few blinks and on the other, you can created new instances out of a bundle (talking about “scalability”).

For bundling, we use the AMI tools we installed. First of all, let’s create a directory for the bundle:

mkdir /mnt/myimage

After that, run the bundle-vol-tool:

ec2-bundle-vol -k pk-.pem -c cert-.pem -s -u -d /mnt/myimage/

This command takes several parameters for the private key, the certificate, the size of the resulting bundle in MB and your User-ID (without dashes). The User-ID can be found within your Account Information on Amazon’s EC2 site. The command should ask you, what architecture you’d like to bundle the system for – i386 should work out perfectly for what we’re doing. The following procedure could take some time, since the tool collections every peace of the system and builds a bundle into the directory we specified. As soon as the tool finished, we can upload our bundle to our S3-bucket:

ec2-upload-bundle –location EU -b -m /mnt/myimage/image.manifest.xml -a -s

Again, we need to specify some credentials (our access-key and the secret-key) for the upload to work. Also, we need to pick a globally unique bucket-name for uploading the bundle, what shouldn’t be that hard as long as you don’t try stuff like “linux” or other common words. The bundle will then be uploaded to your (private) bucket, so you have it for later use.

From within the web-interface you could now simply create new instances out of the uploaded bundle, without even knowing how the actual system was set up or having the Amazon API tools installed on your client.

Cool stuff, enjoy!

Facepalm

For the past months now already I’m searching for a new desktop table, since my actual one is now already eleven years old and getting more and more ramshackly by each day passing. I’ve been at several furniture stores around me, including (of course) IKEA, Möbel Gamerdinger, Heyne Büromarkt, any some more. Also, I’ve been searching for tables on the internet at several different online-stores and even found quite a few tables that really fit my needs. The only thing that didn’t fit on any of the desks I liked was their pricing – and I really can’t understand how this could be.

What’s a desk typically contained of? Well, mostly, one big plate – in my case some rectangle one with for example 180cm x 80cm and legs, usually four in number. And actually this is essentially everything I want and need. If you would now stumble through the different (online-)stores and search for exactly such a table, you would probably be shockingly disturbed by the prices furniture stores charge for one piece of wood with four legs. Let’s take IKEA as example: They charge 179,00€ for a Galant Desktop-Table (160cm x 80cm), which is essentially only four table-legs, mounted beneath a frame which holds a plate made of pressboard – sold as a mass-production article, where the costs for fabrication probably are way under a quarter of the price they charge. Besides, at least the demonstration desks within the IKEA store were so shaky, because of their cheap built-up, that I wouldn’t want to have my iMac placed onto one of those, until I’d like to buy new hard drives every few weeks. And at last but not least: The way the table looks can hardly be called “design”.

Next store, same issue. Poorly designed desks made of cheap materials, ugly fabrication but prices within the range from two-hundred to five-hundred or even more Euros. And all I was thinking was “What’s the point?!” – there is no relation between the quality of those mass-produced tables and their prices. Don’t get me wrong, of course a lot of costs for crafting, producing, transportation and more come together – and I might not even bitch that loud if at least the materials they would use would have been real wood plates and solid steel-frames and -legs – but especially in those days I can’t see any relation between the price and the quality of those products. In my opinion, furniture stores achieved a status where they can just pull out the customer’s money off their pockets with nobody complaining about it. When some hardware producer prices its products at extremely exaggerated values you hear blogs and news-sites complaining about it. Why don’t they do so with furnitures? Are furniture-stores/-producers now already on the same level with car manufacturers and the music industry? For me, it seems so. :-(

However, since I’m a person which works at his desk a very large amount of time and wants to feel comfortable while doing so, I’ve decided to not buy any of those mass-production-crap-desks for myself. Instead, I’m looking forward at desktops like Sublevel’s iDesk or Holmris’ Milk. Both of those tables are made of qualitatively high materials to assure stability and both look just gorgeous. Of course, those desktops are priced at a totally different level, although there’s one difference that should be kept clearly in mind: Those are no mass-products. Those desktops are custom design work, containing innovative and practical features.

I’ve already received the price listings for the different version of Milk and will yet keep looking around for a bit more, until I’ve found the table I really really really want.

Update: Yesterday I finally got a desktop table, although it was more like a spontaneous buy. I purchased the Galant table I was talking about, with the A-legs and, instead of a crappy wooden-plate, a gorgeous black glass one. For the whole table I paid around two-hundred bucks in total, what now really is a good price. Why I’m thinking so? Well, instead of the cheap and ugly want-to-be-real-wood plate I got a piece of glass which usually costs nearly two-hundred bucks itself, plus a half-way-solid frame with chrome legs that fit together pretty good. I’ve mounted the desk and yet, as I’ve expected, I’m experiencing “shocks” thru vibrations of the objects lying on the table (lamp, iMac, etc), but I’ve already found a way to screw the table’s frame to the wall behind, in an unobvious and clean way, to reduce the vibrations on the table itself. So, as I’ve said before, the table’s frame was not worth one penny, unfortunately there was no other way for me to get the glass-plate lifted to 70cm (or more) – besides building myself an own frame.

Also Still, I hope the furniture stores/industry to suffer from the depression just like the automobile industry has (and will continue to), so maybe the thinking there will change in a way to provide the people prices that fit the actual product’s quality/value someday.

An annoyed and disappointed goodbye for now.

I’ve been working on a web-site that used the jQuery framework to render content on the client side and get information from its back-end, via XmlHttpRequests. The whole built-up worked just fine of every modern, popular browser available in the market – like the Firefox, Internet Explorer or Safari (on the Mac platform). Now, I had to test the site and make it workable on the iPhone-plattform as well. The site itself uses OAuth as authentication method and provides the information within a HTTP-header named “Authorization”. The theory is pretty plain: The back-end receives a request, checks for this header and responses accordingly.

However, iPhone’s Safari didn’t behave like the other browsers did. For whatever reason, the XHR was sent to the back-end, including every header that was set on the JavaScript side – except the “Authorization”-header. First, I though that Safari maybe could not handle the parameters of this header, but when I just renamed the setRequestHeader-argument to “Auth”, it worked. It simply just worked.

This happening made me search for other users experiencing this problem, unfortunately there doesn’t really seem to be many users testing JavaScript-sites on their iPhone – to be more precise, I did not find one result on Google that describes the problem I’m experiencing. I though, “Oh well, why not call Apple’s Technical Support?” – bad mistake. I got connected to a very annoyed and stroppy telephone-support which tried to convince me, that the iPhone’s Safari yet does not support Java. When I repeated myself by saying “It’s about JavaScript“, he didn’t really make the impression to understand the difference. I told him what the actual scenario was and all I got as answer was “Fill out the Feedback form on Apple’s site”. This made me a bit angry, because I more and more got the feeling of him trying to simply get rid of me. I asked for someone who is more technically involved into the whole iPhone stuff and he answered with “You’re already calling the most-advanced technical support – there’s no way to go further!”. At this point total disappointment overcame me and the only thing I thought of saying before I would hang-up the phone was “FAIL!” – luckily I was behaving more polite than the support-guy himself. Eh.

The end of the story is, that I (once again) wrote a report via Apple’s Feedback form (which from my impression is saving the submitted content to /dev/null) and implemented a workaround for myself by renaming the “Authorization”-header to “Auth”. Yet again a scenario in which I’m feeling like talking to a wall of bricks and have no possibility to get any information regarding my problem or maybe even correct this sort of bug. I think, this is the other side of closed-source software.

Google Wave Dev Preview

I can happily announce (or brag :-P) that I’ve just received my Google Wave invitation today and already created my account. I’m really excited of exploring and developing on Google’s Wave, especially with the ideas I already have in mind. Yet, I just clicked around a bit, due to the lack of free time, but as soon as I can I will take a deeper look at the API and try out some stuff I might even publish here. So stay tuned to see read (and maybe see) the latest progress of my Wavealicious ideas/implementations. :-)

Btw, you can contact me on Wave via devilx@wavesandbox.com.

Well, what else can we do then? Oh wait, haven’t we just set-up our Dropbox account recently? So why not use it for poor-man’s-sync? :-)

First of all, move the subfolder of ~/Library/Application Support/Cultured Code/ named “Things” into your Dropbox folder and let it sync up to the cloud. After that, start Things for Mac while pressing the Option (Alt) key and select “Choose Library…” – and choose the Things directory from within your Dropbox-folder.

Then, install Dropbox on your other Mac and again navigate to the Cultured Code directory named above. Now, you just delete the Things subfolder and yet again you start Things while keeping the Option key pressed – and select “Choose Library…“. Then, you select the Things directory from within your Dropbox-folder and you’re done! :-)

CAUTION: This solution allows you the synchronization of Things between two (or more) Macs, but not the simultaneous running! Your Things database might break if you try to run it on both Macs at the same time!

This is a pretty good solution until Cultured Code implements something better. :-)

First of all, the App Store is great. From its theory to its practice, everything is implemented just the way it has to be. Sure, sometimes it’s a little slow and not that responsible as one would expect, but altogether the browsing experience is really great. Why? Because it has to be. Nobody likes to spend money somewhere he doesn’t enjoy browsing for things – regardless whether we’re talking about the #real-life or in virtual. It’s just fun to look through the Apps, find new ones, share them with your friends and of course buy them. And it’s so easy as well. One click, that’s all! Isn’t that just great?

Oh well, yeah, it would be – if. If Apple would have kept the essential concept of their App Store the way they actually planned and intended it to. I mean, let’s think back, to the time before the Apple App Store was launched (what’s only little over a year ago) – what was the general appearance of existing application stores (of e.g. Nokia or for the Windows Mobile Platform)? Exactly. Ugly, slow, confusing, a lot of useless tra…ehrrr… stuff. And then came Apple – BAM! Brand new App Store for mobile applications. Everything was clean, everything was very well working and simple for the end-user to access. Then ago, the App Store provided a few essential and yet well known applications by third-parties. Great apps, with great functionality that even looked amazingly cool.

But then, after a while, it seems like the whole BAM just BAM-MED even more. And more. And more. Of course, Apple was lucky about this fact – more Apps for sale, more cut-offs for themselves. Why not? And do you know what’s the best? Big numbers. What? Yeah! Just as I said it. Big numbers. From the moment on, from which Apple started literally raping the potential of the App store within every Keynote they presented people could see all those big numbers. Thousands of of Apps. Millions of downloads. Et cetera.

But did this really improve the Store? I’m looking around at this very same moment within the App Store and have to say: No. It didn’t. All it improved was Apple’s pockets and the big numbers on their Keynote presentations. I stumble through the App Store and see hundreds and hundreds of Apps, one more useless than the other – Bikini Babes, Gym Babes, Simple To-Do and of course a huge amount of games. Yeah, games. I’m not saying, that games are “useless” in that way. Sometimes, when waiting for the Bus or for your Girl getting changed you appreciate those little time-consumptions. But come on? I mean, spending more than $2 for a game that won’t last any longer than one hour to be played, thanks to Apple’s gorgeous batteries? Who should play those games? Shall I constantly keep my iPhone attached to the power-cord, so I can play two hours of Need For Speed? Isn’t the whole game stuff, that Apple’s trying to sell as “PSP/NintendoDS Killer” just plain dumb and totally impracticable? I’m not saying, that games on mobile phones are no fun in general, but are you re-charging your iPhone every three hours, just to be able to play some games? I mean, I still don’t understand what market Apple really tries to reach with that. My impression is, that people indeed spend money on games like NFS or Sims 3, but only to be able to show-off at parties or other occasions. I don’t believe anybody really playing (and by playing I mean the very same behavior you hear from 15-years old, Norwegian guys with a World of Warcraft account!) the games on the iPhone. At least not till their end. Also I believe, that 70% of the people buying games use in iPod Touch instead, in addition to their iPhone.

Eh, however. Back to the topic. So, the Apple App Store started providing more and more sh… apps, over the past year. Some, useless ones and also some totally useless ones. Of course, in between of all those crap, you’ll sometimes find a pearl, like for example Shazam, Daylite Touch, Things, LittleSnapper, Colloquy, eBay, Ego, Wallet, Squirrel, Shopper, Deliveries, Weightbot, iStat, Beats, Last.fm, RadAlert and many many more. Apps that really have a use and pay-back for the price you spent on them. Unfortunately, those apps aren’t the majority anymore – and it seems to become worse by each day passing by. So what to do?

Of course Apple could stop selling all those other crappy apps. Just reject when developers submit them – and instead include apps that would be worth including. *cough*GoogleVoice*cough* But to be honest, by that, Apple would shoot into their own feet. Why stop selling crappy apps, when there are enough users to buy them? Why rejecting the cut-off, even if it’s just some pennies per app?

So let’s see, what could be Plan B? Uh yeah. Plan B. Sounds always good. How about.. err.. an “Exclusive App Store”? An App Store exclusively for high-rated and (therefor) pricy apps. Yeah, that sounds good, doesn’t it? But wait… who decides what’s “exclusive”? The developers? The users? Or maybe the price? I don’t know how you think, but I’d probably go with the third option. As long as the price is high enough, I don’t believe Apple caring about the actual application’s quality – not esthetically nor functionally. So, what sense would an exclusive App Store have then? Well, I guess no more than just gather more and more money.

I’m really happy that at least there are Blogs and Sites on the web, which take the enormous job of searching through the App Store, filtering the whole crap away and bringing you the best and most beautiful applications available for your iPhone. :-) Without them, I guess I’d have a hard time to fine *anything* that would fit my needs within the actual App Store – and maybe just switch to Android.

So far.

As I’ve written, moving the application-folders into the cloud seems to be working pretty good on one client. Now I’ve tested, how it is when using two clients and pulled the information contained in the cloud (from client A) down to client B. Each of the three applications worked in general, Pidgin started with the account configured on client A, Evolution started with the Inbox configure in client A but asked me for the password to access the mail-server (what’s clear, because I did not synchronize the key-rings) and Firefox displayed with the preferences configured, but prepended a message box that said:

Could not initialize the application’s security component. The most likely cause is problems with files in your application’s profile directory. Please check that this directory has no read/write restrictions and your hard disk is not full or close to full. It is recommended that you exit the application and fix the problem. If you continue to use this session, you might see incorrect application behaviour when accessing security features.

This confused me a bit, especially since the actual browser ran without any more problems. However, I’ve been to lazy to track down this permission problem.

After I’ve checked, if “one-after-another” synchronization worked, I tried out the simultaneous usage of both machines, while being connected and synced with the cloud on each of them. As I’ve expected, I ran into some problems: Suddenly, some more folder (thumbnail) appeared within the client B’s Ubuntu One folder, that contained his app-information. The folders remained until the actual Home folder finished receiving the data from within the cloud, then they just disappeared. I don’t know, if those have been merged or just deleted – it just worked afterwards. :-)

Ubuntu One seems to be using “semaphores”, in a similar way token-ring was using: At first, client A is allowed to sync his data with the cloud. When this is finished, client B is allowed to sync. Then, it’s client A’s turn again – and so on. Theoretically, this is good. But in practice, Ubuntu One unfortunately seems to overwrite locale changes when pulling data down from the cloud. In comparison: MobileMe asks the user and merges the data, as good as possible.

In the end, simultaneous usage was unable to sync both machines in a way, so that data was kept consistent. Either one machine lost information, or the other. Especially when adding a new Pidgin account on client B, waiting for the sync, closing Pidgin on client A (which then seems to save a final account-info) and waiting for the sync there, you will be surprised your account not to be available when re-launching Pidgin on client A.

Of course, synchronization always is a tricky feature, but I guess, Ubuntu One lacks of an SVN-like back-end, that keeps track of all changes and makes merging possible. I’m really interested in how Ubuntu One will continue to evolve and I’ll try to keep tack of its development status. This could really kick ass someday, as soon as everything works seamless and simultaneous.