<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>LI Tech Blog &#187; Uncategorized</title>
	<atom:link href="http://techblog.lucidillusion.org/category/uncategorized/feed/" rel="self" type="application/rss+xml" />
	<link>http://techblog.lucidillusion.org</link>
	<description>Tech Notes and Problem Solutions</description>
	<lastBuildDate>Mon, 02 Jan 2012 03:54:59 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>Deleting DigiNotar&#8217;s Root Certificate on Mac OS X</title>
		<link>http://techblog.lucidillusion.org/2011/08/31/deleting-diginotars-root-certificate-on-mac-os-x/</link>
		<comments>http://techblog.lucidillusion.org/2011/08/31/deleting-diginotars-root-certificate-on-mac-os-x/#comments</comments>
		<pubDate>Thu, 01 Sep 2011 00:15:44 +0000</pubDate>
		<dc:creator>jgraham</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[Delete]]></category>
		<category><![CDATA[DigiNotar]]></category>
		<category><![CDATA[OS X]]></category>
		<category><![CDATA[Revoke]]></category>
		<category><![CDATA[SSL]]></category>

		<guid isPermaLink="false">http://techblog.lucidillusion.org/2011/08/31/deleting/</guid>
		<description><![CDATA[Recently a number of fraudulent SSL certificates for high profile websites, including Google, were obtained from the Dutch Certificate Authority DigiNotar. These certificates could be used to impersonate or intercept legitimate services. One method for dealing with this situation is to mark DigiNotar&#8217;s root certificate as untrusted. Unfortunately due to a bug in Mac OS [...]]]></description>
			<content:encoded><![CDATA[<p>Recently a number of fraudulent SSL certificates for high profile websites, including Google, were obtained from the Dutch Certificate Authority <a href="http://www.diginotar.com/">DigiNotar</a>.<br />
These certificates could be used to impersonate or intercept legitimate services.<br />
One method for dealing with this situation is to mark DigiNotar&#8217;s root certificate as untrusted.<br />
Unfortunately <a href="http://www.pcworld.com/businesscenter/article/239269/mac_os_x_cant_properly_revoke_dodgy_digital_certificates.html">due to a bug in Mac OS X</a> DigiNotar signed EV certificates will still appear to be valid.<br />
To work around this one can delete the certificate from the system trust roots with the following command:</p>
<pre>
	security delete-certificate -Z \
	 	C060ED44CBD881BD0EF86C0BA287DDCF8167478C \
		/System/Library/Keychains/SystemRootCertificates.keychain
</pre>
]]></content:encoded>
			<wfw:commentRss>http://techblog.lucidillusion.org/2011/08/31/deleting-diginotars-root-certificate-on-mac-os-x/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Kerberos over TCP on OS X 10.7 (Lion)</title>
		<link>http://techblog.lucidillusion.org/2011/08/31/kerberos-over-tcp-on-os-x-10-7-lion/</link>
		<comments>http://techblog.lucidillusion.org/2011/08/31/kerberos-over-tcp-on-os-x-10-7-lion/#comments</comments>
		<pubDate>Wed, 31 Aug 2011 23:46:34 +0000</pubDate>
		<dc:creator>jgraham</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[10.7]]></category>
		<category><![CDATA[Kerberos]]></category>
		<category><![CDATA[Lion]]></category>
		<category><![CDATA[OS X]]></category>
		<category><![CDATA[TCP]]></category>
		<category><![CDATA[UDP]]></category>

		<guid isPermaLink="false">http://techblog.lucidillusion.org/2011/08/31/kerberos-over-tcp-on-os-x-10-7-lion/</guid>
		<description><![CDATA[With the release of Mac OS X 10.7 (Lion) Apple has switched from MIT Kerberos to Heimdal Kerberos. By default Heimdal will attempt to communicate with KDCs over UDP. In some cases it is desirable to default to TCP. Heimdal can be instructed to prefer TCP by prepending the KDC hostnames in /etc/krb5.conf with tcp/. [...]]]></description>
			<content:encoded><![CDATA[<p>
	With the release of Mac OS X 10.7 (Lion) Apple has switched from <a href="http://web.mit.edu/kerberos/">MIT Kerberos</a> to <a href="http://www.h5l.org/">Heimdal Kerberos</a>.
</p>
<p>
	By default Heimdal will attempt to communicate with KDCs over UDP.<br />
	In some cases it is desirable to default to TCP.<br />
	Heimdal can be instructed to prefer TCP by prepending the KDC hostnames in <tt>/etc/krb5.conf</tt> with <tt>tcp/</tt>.<br />
	For example:
</p>
<pre>
	[realms]
		EXAMPLE.COM = {
			kdc = tcp/kerberos-1.example.com:88
			kdc = tcp/kerberos-2.example.com:88
		}
</pre>
]]></content:encoded>
			<wfw:commentRss>http://techblog.lucidillusion.org/2011/08/31/kerberos-over-tcp-on-os-x-10-7-lion/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Xerox Phaser 6120 on Mac OS X 10.6 &#8220;Snow Leopard&#8221;</title>
		<link>http://techblog.lucidillusion.org/2009/09/04/xerox-phaser-6120-on-mac-os-x-10-6-snow-leopard/</link>
		<comments>http://techblog.lucidillusion.org/2009/09/04/xerox-phaser-6120-on-mac-os-x-10-6-snow-leopard/#comments</comments>
		<pubDate>Fri, 04 Sep 2009 18:20:51 +0000</pubDate>
		<dc:creator>jgraham</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://techblog.lucidillusion.org/2009/09/04/xerox-phaser-6120-on-mac-os-x-10-6-snow-leopard/</guid>
		<description><![CDATA[Update: It appears that Xerox is now distributing a 10.6 &#8220;Snow Leopard&#8221; driver package on their website. According to the Xerox website the Phaser 6120 is not supported in Snow Leopard. However if one downloads the custom PPD file from the OpenPrinting database the printer works perfectly. Full instructions follow: On the 6120 page: http://www.openprinting.org/show_printer.cgi?recnum=Xerox-Phaser_6120 [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Update:</strong> It appears that Xerox is now distributing a 10.6 &#8220;Snow Leopard&#8221; <a href="http://www.support.xerox.com/go/results.asp?Xtype=download&amp;prodID=6120&amp;Xlang=en_US&amp;Xcntry=USA">driver package on their website</a>.</p>
<hr />
<p>According to the <a href="http://download.support.xerox.com/pub/drivers/Compatibility_Matrix/other/macosx/en/MacOSX10-6_Matrix.pdf">Xerox website</a> the Phaser 6120 is not supported in Snow Leopard.  However if one downloads the custom PPD file from the <a href="http://www.openprinting.org">OpenPrinting database</a> the printer works perfectly.</p>
<p>Full instructions follow:</p>
<p><span id="more-21"></span></p>
<p>On the 6120 page:</p>
<p><a href="http://www.openprinting.org/show_printer.cgi?recnum=Xerox-Phaser_6120">http://www.openprinting.org/show_printer.cgi?recnum=Xerox-Phaser_6120</a></p>
<p>Right click on <strong>Custom PPD</strong> to the right of <em>Recommended driver</em> and choose <em>Download Linked File As&#8230;</em>.</p>
<p>In <strong>System Preferences</strong> -> <strong>Print &amp; Fax</strong> click the <strong>+</strong> to add a new printer.  Select your printer, wait for the system to choose &#8220;Generic PostScript Printer&#8221; under Print Using.  Change <strong>Print Using</strong> to <strong>Other&#8230;</strong> and browse to the file you downloaded.  The value in <strong>Print Using</strong> will change to <em>Phaser 6120 PS</em>.  Click <strong>Add</strong>, check any options you have installed on your printer, click <strong>Continue</strong> and you are done.</p>
<p>On my system everything works correctly when printing over the network.  I didn&#8217;t test USB but I have no reason to doubt that this driver will work for USB as well.</p>
]]></content:encoded>
			<wfw:commentRss>http://techblog.lucidillusion.org/2009/09/04/xerox-phaser-6120-on-mac-os-x-10-6-snow-leopard/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Creating an empty git branch and pushing it remotely</title>
		<link>http://techblog.lucidillusion.org/2009/08/08/creating-an-empty-git-branch-and-pushing-it-remotely/</link>
		<comments>http://techblog.lucidillusion.org/2009/08/08/creating-an-empty-git-branch-and-pushing-it-remotely/#comments</comments>
		<pubDate>Sat, 08 Aug 2009 20:49:38 +0000</pubDate>
		<dc:creator>jgraham</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://techblog.lucidillusion.org/?p=18</guid>
		<description><![CDATA[Say you wanted to create an empty branch of an existing git repository.  That is a new branch with no history, say to track your project docs. Be sure that you don&#8217;t have any pending changes in your workspace before executing these commands. $ cd ~/my-git-repo $ git symbolic-ref HEAD refs/heads/docs $ git rm &#8211;cached [...]]]></description>
			<content:encoded><![CDATA[<p>Say you wanted to create an empty branch of an existing git repository.  That is a new branch with no history, say to track your project docs.</p>
<blockquote><p><span id="more-18"></span></p></blockquote>
<p>Be sure that you don&#8217;t have any pending changes in your workspace before executing these commands.</p>
<blockquote><p>$ cd ~/my-git-repo<br />
$ git symbolic-ref HEAD refs/heads/docs<br />
$ git rm &#8211;cached -r .<br />
$ rm -fr *<br />
$ git commit &#8211;allow-empty -m &#8220;Initialized docs branch.&#8221;<br />
$ git push origin docs</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://techblog.lucidillusion.org/2009/08/08/creating-an-empty-git-branch-and-pushing-it-remotely/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Bookmarks Not Synchronizing Over .Mac In 10.5.3</title>
		<link>http://techblog.lucidillusion.org/2008/05/15/bookmarks-not-synchronizing-over-mac-in-1053/</link>
		<comments>http://techblog.lucidillusion.org/2008/05/15/bookmarks-not-synchronizing-over-mac-in-1053/#comments</comments>
		<pubDate>Fri, 16 May 2008 00:35:30 +0000</pubDate>
		<dc:creator>jgraham</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[.Mac]]></category>
		<category><![CDATA[10.5]]></category>
		<category><![CDATA[10.5.3]]></category>
		<category><![CDATA[Bookmarks]]></category>
		<category><![CDATA[Leopard]]></category>
		<category><![CDATA[Safari]]></category>
		<category><![CDATA[Sync]]></category>

		<guid isPermaLink="false">http://techblog.lucidillusion.org/2008/05/15/bookmarks-not-synchronizing-over-mac-in-1053/</guid>
		<description><![CDATA[After a recent security update I noticed that my bookmarks were no longer synchronizing over .Mac between any of my systems. To fix the issue I had to unregister and reregister Safari&#8217;s sync client. Open a terminal and run: /Applications/Safari.app/Contents/SafariSyncClient.app/Contents/MacOS/SafariSyncClient --unregistersyncclient com.apple.Safari This will return NO, then run /Applications/Safari.app/Contents/SafariSyncClient.app/Contents/MacOS/SafariSyncClient --register which should return YES.]]></description>
			<content:encoded><![CDATA[<p>After a recent security update I noticed that my bookmarks were no longer synchronizing over .Mac between any of my systems.  To fix the issue I had to unregister and reregister Safari&#8217;s sync client.  Open a terminal and run: <tt>/Applications/Safari.app/Contents/SafariSyncClient.app/Contents/MacOS/SafariSyncClient --unregistersyncclient com.apple.Safari</tt> This will return NO, then run <tt>/Applications/Safari.app/Contents/SafariSyncClient.app/Contents/MacOS/SafariSyncClient --register</tt> which should return YES.</p>
]]></content:encoded>
			<wfw:commentRss>http://techblog.lucidillusion.org/2008/05/15/bookmarks-not-synchronizing-over-mac-in-1053/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Rebuilding Software RAID Arrays in OS X 10.5 Leopard</title>
		<link>http://techblog.lucidillusion.org/2008/04/10/rebuilding-software-raid-arrays-in-os-x-105-leopard/</link>
		<comments>http://techblog.lucidillusion.org/2008/04/10/rebuilding-software-raid-arrays-in-os-x-105-leopard/#comments</comments>
		<pubDate>Thu, 10 Apr 2008 12:09:38 +0000</pubDate>
		<dc:creator>jgraham</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[10.5]]></category>
		<category><![CDATA[Degraded]]></category>
		<category><![CDATA[Leopard]]></category>
		<category><![CDATA[OS X]]></category>
		<category><![CDATA[RAID]]></category>
		<category><![CDATA[Rebuild]]></category>

		<guid isPermaLink="false">http://techblog.lucidillusion.org/2008/04/10/rebuilding-software-raid-arrays-in-os-x-105-leopard/</guid>
		<description><![CDATA[While moving some data between drives today I decided to test the drive build functionality of my external RAID array. I have an IOI FWBU2SATA35DMR Firewire/USB enclosure with two 500GB SATA drives in a RAID 1 configuration. Following the instructions I powered down the array, removed one of the disks, powered it back up, wrote [...]]]></description>
			<content:encoded><![CDATA[<p>While moving some data between drives today I decided to test the drive build functionality of my external RAID array.<br />
I have an <a href="http://www.ioi.com.tw/">IOI</a> <a href="http://www.ioi.com.tw/products/proddetail.aspx?ProdID=1030075">FWBU2SATA35DMR</a> Firewire/USB enclosure with two 500GB SATA drives in a RAID 1 configuration.  Following the instructions I powered down the array, removed one of the disks, powered it back up, wrote some data, powered the array down and reinstalled the second drive.  To my dismay instead of rebuilding the second disk the drive would begin the rebuild (indicated by the status lights) and then immediately return to 1 good 1 failed.  I let this run for a good 12 hours without luck.</p>
<p>So I decided that for my needs the software RAID supplied by OS X would be sufficient.  Off to Disk Utility to build the set.  Disk Utility allows you to create a mirrored RAID array in a degraded state (preserving any data on the drive) and then add members to the array and rebuild.  I created the initial array with a single partition member and then attempted to add the second partition only to receive <strong><tt>Unrecognized Filesystem</tt></strong>.</p>
<p><span id="more-8"></span></p>
<p>I guessed that this was an issue with the Disk Utility interface and not the underlying software RAID so I decided to give it a try from the command line.  Sure enough it worked right away.  Here are the commands to add a disk or partition to an existing software RAID array:</p>
<p><strong>Be very careful when running these commands!</strong> If the wrong device is selected you can <strong>easily destroy an entire disk of data!</strong></p>
<p>Get a list of device names with:</p>
<pre># diskutil list</pre>
<p>Next find the <strong>Unique ID</strong> for your RAID array:</p>
<pre># diskutil checkRAID</pre>
<p>Finally, add the new member to the array.  Replace <em>AAAAAAAA-BBBB-CCCC-DDDD-EEEEEEEEEEEE</em> with the Unique ID obtained above and <em>diskXsX</em> with the appropriate device:</p>
<pre># diskutil addToRAID member /dev/diskXsX AAAAAAAA-BBBB-CCCC-DDDD-EEEEEEEEEEEE</pre>
<p>The array should automatically begin to rebuild itself.  You can check by re-issuing the <tt>diskutil checkRAID</tt> command.  The rebuild status will automatically be shown if Disk Utility is launched.</p>
]]></content:encoded>
			<wfw:commentRss>http://techblog.lucidillusion.org/2008/04/10/rebuilding-software-raid-arrays-in-os-x-105-leopard/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

<!-- Dynamic Page Served (once) in 0.722 seconds -->

