Three Mobile Broadband in UK (England) without using the Dongle/Modem on Windows 7 with Dell built-in HSDPA Modem

September 7th, 2009

APN: three.co.uk
Username: guest
Password: guest

Get the voucher at one of their stores - you can pay with a non-uk credit card.

SNAT + DNAT = router as source address for port mapping

September 2nd, 2009

problem: In got multiple routes to the internet and port mapping from different public ips to internal services. If the port mapping origins from the default gateway of the destination server, everything is straight forward. If a public ip other than the default gateway is used, one option is to change the source ip of incoming packets for the port mapped service on the router. Thus all requests arriving at the destination server appear to origin from router and the server knows how to route back.

environment: router is running openwrt, but I'm using standard iptables stuff. In the below samples 192.168.1.1 is the router and 192.168.1.2 is the destination server (http). 123.1.1.2 is the public ip.

solution:

iptables -t nat -A PREROUTING -d 123.1.1.2 -p tcp --dport 80 -j DNAT --to-destination 192.168.1.2:80
iptables -t nat -I POSTROUTING 1 -s 0.0.0.0/0 -d 192.168.1.12 -j SNAT --to 192.168.1.1

Windows 7 on Dell XPS Gen2

August 24th, 2009

For SigmaTel C-Major Audio driver use this driver (found here)

For the graphic card (Geforce 6800 Ultra in my case), I open the device manager and just chose it from the list. Afterwards Windows Update asked me to download the update.

For the touch pad I used this

Subversion, Apache, XCode (SCM) and ISA 2006

August 5th, 2009

environment:Subversion using mod_svn under apache/linux, hosted behind ISA (doing SSL termination). Using SCM feature of XCode for checkin

problem: login succeeds in XCode, but list fails with Error: 175002 (RA layer request failed) Description: REPORT request failed and 403 Forbidden (The server denied the specified Uniform Resource Locator

solution: For the firewall policy rule that forwards to the server hosting subversion add "@svn.contoso.com" (e.g. johndoe@svn.contoso.com, janedoe@svn.contoso.com,...) to the public names.

Waiting for a reply from Microsoft if there is a better way of doing this (e.g. *@svn.contoso.com [this is an invalid public name] or similar).

Nokia Mail for Exchange, Exchange and Client Certificates

June 13th, 2009

problem: Mail for Exchange on Nokia mobile phones should authenticate using Client Certificates and username/password against Active Sync of Exchange 2003, to make sure that username/password is not enough to access corporate data.

solution

  1. Create client certificates for the Nokia phones. I did it using Microsoft Certificate server. To do so, go to http://ca-servername/certsrv and "Request a certificate", "User certificate" and hit the submit button (this will create a certificate and the associated private key for the authenticated user). Then hit "Install this certificate" and "yes". Now start "certmgr.msc" (Start\run) and select "Certificate/Current User". Under Personal/Certificates you should find your newly created certificate. Right-click, "All Tasks", "Export...", select "Yes, export the private key" and provide an export password (keep in mind, that you need to enter it on the Nokia phone). Store the .pfx somewhere
  2. Transfer the .pfx file using Nokia PC Suite to the mobile phone
  3. On the nokia phone go: "Menu", "Office", "File Manager" and open the just transferred .pfx file
  4. Enter the export password and select "Save"
  5. Provide a keystorage password (Schl├╝sselspeicher-Passwort in german). This MUST have a length of 6.
  6. Ok and return to the home screen
  7. Now go: "Menu", "System", "Settings", "General", "Security", "Certificate Management", "Personal Certificates", "Options", "Move to Phone Certificates", "Yes" and enter the keystorage password. This makes sure, the user does not have to enter the password for the private key at every sync.
  8. Configure Mail for Exchange as usual. You should find enough information on google/bing on this topic.

To actually authenticate Mail for Exchange/Phone using the certificate I used ISA 2004.
Create an SSL Listener and enable Authentication using Certificates. Make sure the root certificate (or the cert used for signing your client certs) is installed as "Trusted root certificates" in the "Computer Certificates". I then authenticated against Active Directory and ISA will use NTLM/Integrated Security to authenticate as the actual user against Active Sync. On the Exchange Front-End IIS on the "Microsoft-Server-ActiveSync" directory "Integrated Authentication" must be enabled. I forgot if the ISA server must be trusted for delegation for this scenario, but if you have any trouble, check the logs and google/bing for "Trusted for delegation ISA spn".

Note: this setup still requires the username and password to be correctly configured in Mail for Exchange.

M-Audio Transit USB installation on Windows 7 build 7100

May 19th, 2009

To install the M-Audio Transit USB driver (Transit_5.10.00.5125v3.exe) on Windows 7 build 7100, mark the executable to run in Vista SP2 compatiblity mode.

Mass Install of System Center Operations Manager 2007 Management Package

May 16th, 2009

Download all packages into a folder

for %i in (*.msi) do msiexec /qn /i "%i"

CardTerminals.List()

February 25th, 2009

Sample code to list all CardTerminalson your machine:

import javax.smartcardio.*;

public class main
{
public static void CardTerminalsList(String[] args) throws Exception
{
for(CardTerminal ct : TerminalFactory.getDefault().terminals().list())
{
System.out.println("Name: '" + ct.getName() + "'");
}
}
}

Unicode on Windows Command Prompt

February 23rd, 2009

chcp 65001

Latitude XT2 more items

February 3rd, 2009

In my daily Latitude XT2 search on dell.com another item popped up: Protective Carrying case.

Oh Dell, why do you just leak those things and not release it :(

Although no working n-trig pen under Windows 7 sounds like a no-go.