<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Tork Wrench &#187; random</title>
	<atom:link href="http://www.torkwrench.com/category/random/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.torkwrench.com</link>
	<description>Things I learnt today, working on IBM Lotus Web Content Management.</description>
	<lastBuildDate>Tue, 17 Aug 2010 06:50:47 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Workaround for Solaris 10 slow boot on VMware ESX 4.0</title>
		<link>http://www.torkwrench.com/2010/07/02/workaround-for-solaris-10-slow-boot-on-vmware-esx-4-0/</link>
		<comments>http://www.torkwrench.com/2010/07/02/workaround-for-solaris-10-slow-boot-on-vmware-esx-4-0/#comments</comments>
		<pubDate>Thu, 01 Jul 2010 22:32:32 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[random]]></category>
		<category><![CDATA[tip]]></category>
		<category><![CDATA[esx]]></category>
		<category><![CDATA[solaris]]></category>
		<category><![CDATA[VMware]]></category>
		<category><![CDATA[workaround]]></category>

		<guid isPermaLink="false">http://www.torkwrench.com/?p=248</guid>
		<description><![CDATA[When installing Solaris 10 as a VMware guest, the boot sequence is very slow. Here's how to fix it. <a href="http://www.torkwrench.com/2010/07/02/workaround-for-solaris-10-slow-boot-on-vmware-esx-4-0/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>When building a Solaris x64 guest on VMware , the boot sequence when booting from the Solaris DVD seems to take forever. About 5 minutes in fact.  Which is really annoying if you are trying to automate installing Solaris and you need to restart 50 times a day. The part I am talking about is after you select to boot Solaris from the grub menu &#8211; there is a sequence of dots that comes up until the next Solaris kernel seems to load. Incidentally the guest&#8217;s CPU goes to 100% during this sequence, which could be an issue if you are running on a loaded system.</p>
<p>Luckily there is a workaround. Go into the &#8216;edit settings&#8217; screen for the Solaris guest and click the options tab. Change the Guest Operating System Version to Solaris 10 32 Bit, instead of 64 bit. Then the boot goes more like this:</p>
<p><img src="http://www.torkwrench.com/wp-content/plugins/flash-video-player/default_video_player.gif" /></p>
<p>I made a screen cast of the slow boot as well, but it literally is the same thing as above, except it just goes on for 5 minutes. It could be the most boring video on the internet. The fast boot video above is probably the second most boring video on the internet! It&#8217;s just a hard problem to explain in words.</p>
<p>This setting doesn&#8217;t mean that you&#8217;ll be running a 32 bit OS or anything either &#8211; as far as I can tell it doesn&#8217;t do anything besides fix the slow boot problem! </p>
]]></content:encoded>
			<wfw:commentRss>http://www.torkwrench.com/2010/07/02/workaround-for-solaris-10-slow-boot-on-vmware-esx-4-0/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
<enclosure url="http://www.torkwrench.com/wp-content/uploads/2010/07/solaris-10-boot-good.flv" length="1606803" type="video/x-flv" />
		</item>
		<item>
		<title>DB2 9.5 install hangs on Linux during db2icrt</title>
		<link>http://www.torkwrench.com/2010/06/22/db2-9-5-install-hangs-on-linux-during-db2icrt/</link>
		<comments>http://www.torkwrench.com/2010/06/22/db2-9-5-install-hangs-on-linux-during-db2icrt/#comments</comments>
		<pubDate>Tue, 22 Jun 2010 02:07:16 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[random]]></category>
		<category><![CDATA[Centos]]></category>
		<category><![CDATA[db2]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[redhat]]></category>

		<guid isPermaLink="false">http://www.torkwrench.com/?p=243</guid>
		<description><![CDATA[How to fix a hung DB2 9.5 install on Linux. <a href="http://www.torkwrench.com/2010/06/22/db2-9-5-install-hangs-on-linux-during-db2icrt/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>Yesterday I spent a bunch of time cleaning up our collection of kickstart files. It&#8217;s a grind, I must&#8217;ve rerun the Redhat installer 40 times in the last 24 hours. The nice thing is that we now have the same base linux install for all the different versions of Redhat and Fedora that we are using. </p>
<p>All this change has thrown up some new problems however. For each of the installs I was doing, the system would hang when trying to install DB2. </p>
<p>When there is a problem with the db2 install, the first place to go is the /tmp/db2setup.log. Inside that it seemed to be hanging on the instance creation step.</p>
<div class="codecolorer-container text dawn" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">Command to be run: &quot;cd /opt/ibm/db2/V9.5/;/opt/ibm/db2/V9.5/instance/db2icrt -a server -s wse -u db2fenc1 -p db2c_db2inst1 db2inst1&quot;.</div></div>
<p>Looking through the output of <strong>ps -ef | grep db2</strong>, I saw a suspicious process called UpdateAutoRun.sh. </p>
<p>I couldn&#8217;t find a DB2 specific technote for this error, but a bit of searching brought up <a href="http://www-01.ibm.com/support/docview.wss?uid=swg1IZ18123">this one from Tivoli Monitoring (ITM).</a> Apparently DB2 installs an instance of ITM along with DB2 &#8211; I&#8217;m not sure what it is for. Anyway, there seems to be a dodgy script inside the ITM that relies on the venerable text editor &#8216;ed&#8217;. Without ed installed the log file <db2home>/itma/logs/UpdateAutoRun.log keeps filling up with the line:</p>
<div class="codecolorer-container text dawn" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">UpdateAutoRun.sh info: &nbsp;Delete of agent start all record successful.</div></div>
<p>Installing ed in (even while db2setup is running!) allows this script to finish and the rest of the install to complete successfully.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.torkwrench.com/2010/06/22/db2-9-5-install-hangs-on-linux-during-db2icrt/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CWUPI0033E on Solaris 10 when installing WAS</title>
		<link>http://www.torkwrench.com/2010/05/13/cwupi0033e-on-solaris-10-when-installing-was/</link>
		<comments>http://www.torkwrench.com/2010/05/13/cwupi0033e-on-solaris-10-when-installing-was/#comments</comments>
		<pubDate>Thu, 13 May 2010 02:57:58 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[random]]></category>
		<category><![CDATA[tip]]></category>
		<category><![CDATA[dtrace]]></category>
		<category><![CDATA[solaris]]></category>
		<category><![CDATA[WebSphere Application Server]]></category>

		<guid isPermaLink="false">http://www.torkwrench.com/?p=224</guid>
		<description><![CDATA[How to fix this 'out of disk space' error when installing WebSphere Application Server on Solaris 10.  <a href="http://www.torkwrench.com/2010/05/13/cwupi0033e-on-solaris-10-when-installing-was/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>Here&#8217;s a weird one for you. We were trying to install 6.1.0.3 on a Solaris 10 system to do some tests. The Portal install would fail after about 10 minutes. In the /tmp/wpinstalllog.txt file, it was clear that the problem was due to a failure in the internal WebSphere Application Server install. (When you install Portal, the Portal installer will kick off it&#8217;s own silent install of WAS).</p>
<p>The first thing to do when debugging a WAS install problem is to look at the logs in ~/waslogs . These indicated the following problem:</p>
<div class="codecolorer-container text dawn" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;height:300px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">CWUPI0033E: <br />
There is insufficient free disk space on the system: <br />
<br />
/opt/WebSphere/AppServer:<br />
&nbsp; &nbsp; &nbsp; Required: 1403 MB<br />
&nbsp; &nbsp; &nbsp; Available: 0 MB<br />
<br />
/var/tmp/:<br />
&nbsp; &nbsp; &nbsp; Required: 1403 MB<br />
&nbsp; &nbsp; &nbsp; Available: 0 MB<br />
<br />
/opt/.ibm/.nif:<br />
&nbsp; &nbsp; &nbsp; Required: 2 MB<br />
&nbsp; &nbsp; &nbsp; Available: 0 MB<br />
<br />
Please ensure that there is enough free disk space<br />
on all required filesystems and restart the installation.<br />
<br />
If /var/tmp/ , /opt/WebSphere/AppServer <br />
and /opt/.ibm/.nif are on the same partition, <br />
then the amount of space required is the sum of the space<br />
required on /var/tmp/ , /opt/WebSphere/AppServer and <br />
/opt/.ibm/.nif.</div></div>
<p>My system had heaps of space on it! Surely the installer wouldn&#8217;t even run if there was 0 MB free! The method that the installer used to determine how much disk space was free was failing. But how does the installer figure out how much disk space is free? After lots of poking and prodding around I stumbled on <a href="http://www.sun.com/bigadmin/content/dtrace/">dtrace</a>. I had heard of it before, but never had the opportunity to use it. Dtrace is a mechanism to instrument and probe the tiniest little interactions on a Solaris/BSD/OSX machine. Being so powerful, it has a steep learning curve. <a href="http://www.brendangregg.com/DTrace/dtrace_oneliners.txt">This collection of handy dtrace oneliners was really helpful. </a> </p>
<p>I kicked off the WAS install portion of the Portal install and ran this dtrace command in another window.</p>
<div class="codecolorer-container text dawn" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">dtrace -n 'syscall::open*:entry { printf(&quot;%s %s&quot;,execname,copyinstr(arg0)); }' -o trace.log</div></div>
<p>It captured each file interaction that occurred when running the install. Luckily the WAS install failed after about 30 seconds, so there wasn&#8217;t too much data to wade through. </p>
<p>Here is the dtrace log (trace.log from the command above). Something called gushellsupport.sh is calling df (standard unix disk free command). This must be how the installer determines how much disk space is free. The column on the left is the pid of the install process (which is java) . The library files on the far right are what is being called by each executable; the next column over to the left.</p>
<div class="codecolorer-container text dawn" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">&nbsp; 0 &nbsp;44056 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open64:entry gushellsupport.s /var/tmp/ismp003/gushellsupport.sh<br />
&nbsp; 0 &nbsp;43668 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open:entry df /var/ld/ld.config<br />
&nbsp; 0 &nbsp;43668 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open:entry df /lib/libcmd.so.1<br />
&nbsp; 0 &nbsp;43668 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open:entry df /lib/libc.so.1<br />
&nbsp; 0 &nbsp;43668 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open:entry df /usr/dt/lib/nls/msg/C/SUNW_OST_OSCMD.cat<br />
&nbsp; 0 &nbsp;43668 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open:entry df /usr/lib/locale/C/LC_MESSAGES/SUNW_OST_OSCMD.mo<br />
&nbsp; 0 &nbsp;43668 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open:entry df /var/ld/ld.config<br />
&nbsp; 0 &nbsp;43668 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open:entry df /lib/libcmd.so.1<br />
&nbsp; 0 &nbsp;43668 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open:entry df /lib/libc.so.1<br />
&nbsp; 0 &nbsp;43668 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open:entry df /etc/mnttab<br />
&nbsp; 0 &nbsp;43668 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open:entry df /usr/dt/lib/nls/msg/C/SUNW_OST_OSCMD.cat<br />
&nbsp; 0 &nbsp;43668 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; open:entry df /usr/lib/locale/C/LC_MESSAGES/SUNW_OST_OSCMD.mo</div></div>
<p>This script, gushellsupport.sh, is owned by InstallShield so I can&#8217;t publish the contents of it. But it has a diskcheck function in it that relies on &#8216;/usr/xpg4/bin/df&#8217; which I didn&#8217;t have installed. Solaris has many different versions of the same tools that are left behind for backwards compatibility. When installing this system initially, I used the &#8220;Core System Support&#8221; option in the Solaris install to build a lean, quick machine. Unfortunately it didn&#8217;t come with this legacy version of df. </p>
<p>df belongs in a package called SUNWxcu4. To install it, mount your Solaris CD and go to the directory Solaris_10/Product/ . In there, copy the subdirectory &#8216;SUNWxcu4&#8242; to /var/spool/pkg and run</p>
<div class="codecolorer-container text dawn" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">pkgadd SUNWxcu4</div></div>
<p>If you rerun the install again it&#8217;ll work since gushellsupport.sh is calling the correct version of df. Talk about obscure huh? </p>
]]></content:encoded>
			<wfw:commentRss>http://www.torkwrench.com/2010/05/13/cwupi0033e-on-solaris-10-when-installing-was/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The security certificate &#8220;America Online Root Certification Authority 2&#8243; has a public key of length greater than 2048 bit.</title>
		<link>http://www.torkwrench.com/2009/10/15/the-security-certificate-america-online-root-certification-authority-2-has-a-public-key-of-length-greater-than-2048-bit/</link>
		<comments>http://www.torkwrench.com/2009/10/15/the-security-certificate-america-online-root-certification-authority-2-has-a-public-key-of-length-greater-than-2048-bit/#comments</comments>
		<pubDate>Wed, 14 Oct 2009 14:05:33 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[random]]></category>
		<category><![CDATA[citrix]]></category>
		<category><![CDATA[java]]></category>
		<category><![CDATA[jre]]></category>
		<category><![CDATA[metaframe]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://www.torkwrench.com/?p=155</guid>
		<description><![CDATA[I&#8217;m doing a bit of work for a client and they run this crazy Citrix Metaframe thing, which I&#8217;ve heard of but never used before. It&#8217;s like a remote access tool / website wrapped in java applets and special clients &#8230; <a href="http://www.torkwrench.com/2009/10/15/the-security-certificate-america-online-root-certification-authority-2-has-a-public-key-of-length-greater-than-2048-bit/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>I&#8217;m doing a bit of work for a client and they run this crazy Citrix Metaframe thing, which I&#8217;ve heard of but never used before. It&#8217;s like a remote access tool / website wrapped in java applets and special clients and all sorts of other whizbangerry.</p>
<p>But I had a problem connecting to it. It would load a java applet and then Java would die when initializing with the following error. I&#8217;m running the latest Sun Java 6 u16.</p>
<div class="codecolorer-container text dawn" style="overflow:auto;white-space:nowrap;border:1px solid #9F9F9F;width:435px;"><div class="text codecolorer" style="padding:5px;font:normal 12px/1.4em Monaco, Lucida Console, monospace;white-space:nowrap">A local security certificate could not be loaded. (error code: 7)<br />
&nbsp; &nbsp; at com.citrix.sdk.security.ssl.ConnectionModel.addCACertificate(ConnectionModel.java)<br />
&nbsp; &nbsp; at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<br />
&nbsp; &nbsp; at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)<br />
&nbsp; &nbsp; at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<br />
&nbsp; &nbsp; at java.lang.reflect.Method.invoke(Method.java:597)<br />
&nbsp; &nbsp; at com.citrix.client.io.net.ip.m.h(Unknown Source)<br />
&nbsp; &nbsp; at com.citrix.client.io.net.ip.proxy.i.(Unknown Source)<br />
&nbsp; &nbsp; at com.citrix.client.io.net.ip.g.a(Unknown Source)<br />
&nbsp; &nbsp; at com.citrix.client.io.net.ip.o.a(Unknown Source)<br />
&nbsp; &nbsp; at com.citrix.client.module.td.tcp.TCPTransportDriver.t(Unknown Source)<br />
&nbsp; &nbsp; at com.citrix.client.module.td.TransportDriver.run(Unknown Source)<br />
&nbsp; &nbsp; at java.lang.Thread.run(Thread.java:619)<br />
Caused by: The SSL cryptography library failed. The security certificate &quot;America Online Root Certification Authority 2&quot; has a public key of length greater than 2048 bit.<br />
&nbsp; &nbsp; at com.citrix.sdk.security.certificate.X509CertificateLoader.loadCertificates(X509CertificateLoader.java)</div></div>
<p>It&#8217;s about identical to this <a href="https://answers.launchpad.net/ubuntu/+question/48682">unsolved post</a> at Ubuntu launchpad too. The certificates for a simple client JRE are stored in the cacerts file which lives in jre/lib/security/cacerts . It looks as if the root certificate for AOL is too long or recently updated or something and it&#8217;s not playing nicely with MetaFrame. So somehow we have to ditch that root cert. It would only really be a problem if we are unlucky enough to have our certificate signed by that root CA.</p>
<p>I assumed that MetaFrame worked on older jres and that the problem is that I am using a brand new one. So luckily Sun keep an archive of old JDKs and JREs <a href="http://java.sun.com/products/archive/">here.</a> So it is quite simple, download an install an old JRE (I got 5u1) and rip the cacerts file out of there and dump it into your new JRE&#8217;s directory and try it again. Worked like a charm for me. You probably don&#8217;t want to do this permanently (I guess they updated the cacerts file for a reason?) but if you really need to log into MetaFrame, it&#8217;ll do.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.torkwrench.com/2009/10/15/the-security-certificate-america-online-root-certification-authority-2-has-a-public-key-of-length-greater-than-2048-bit/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Hello World.</title>
		<link>http://www.torkwrench.com/2009/03/01/hello-world/</link>
		<comments>http://www.torkwrench.com/2009/03/01/hello-world/#comments</comments>
		<pubDate>Sun, 01 Mar 2009 01:32:23 +0000</pubDate>
		<dc:creator>Graham</dc:creator>
				<category><![CDATA[random]]></category>
		<category><![CDATA[greetings]]></category>

		<guid isPermaLink="false">http://www.torkwrench.com/?p=3</guid>
		<description><![CDATA[Who are you, and what are you doing here? <a href="http://www.torkwrench.com/2009/03/01/hello-world/">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>Hi.</p>
<p>Well, I finally did it.  After months of thinking about it I&#8217;ve finally set up a tech blog to post solutions to problems I encounter during my day. I work at IBM (in System Verification Test) on a product called <a title="WCM on ibm.com" href="http://www.ibm.com/software/lotus/products/webcontentmanagement/">Lotus Web Content Management</a>. Most of my job is devoted to setting up and configuring servers so other people can test upcoming versions of our product. There&#8217;s a pretty wide range of stuff I get to play with, so expect posts on Linux, Unix (HP/Solaris/AIX) , z/OS , z/VM, DB2, Oracle, SQL Server, LDAP (all different types) , and of course Websphere Portal and Lotus WCM (or just WCM; <em>wick-em</em> as we say around the lab).</p>
<p>Starting the blog is the easy part, of course. Now I just need to keep (or start, rather) posting to it.</p>
<p>Just trying to give back a little to the many other blogs and forum posts out there that have helped me overcome insurmountable problems. It&#8217;s really the least one can do.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.torkwrench.com/2009/03/01/hello-world/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
