Trixbox – “All Circuits are Busy Now” when Dialling Off-Hook

We have some Polycom IP 330 SIP handsets connected to a Trixbox.  Unfortunately, when using the default SIP.cfg that is downloaded via TFTP to the handsets, if the phone was off the hook (ie. a dial tone was already audible) the handsets would appear to time-out and give the message “All Circuits are Busy Now”. On looking at the call in the CLI (asterisk -rvvvv) it was apparent that only the first 9 digits were being dialled.

The solution was to edit the the /tftpboot/sip.cfg and look for the line that says:

<digitmap dialplan.digitmap=”[2-9]11|0T|011xxx.T|[0-1][2-9]xxxxxxxxx|[2-9]xxxxxxxxx|[2-9]xxxT” dialplan.digitmap.timeOut=”3|3|3|3|3|3″/>

and replace with the correct number of digits for calls in your country…

<digitmap dialplan.digitmap=”[2-9]11|0T|011xxx.T|[0-1][2-9]xxxxxxxxxxx|[2-9]xxxxxxxxxxx|[2-9]xxxT” dialplan.digitmap.timeOut=”3|3|3|3|3|3″/>

You then need to restart the handsets in order for this to work.

Exchange 2003 Pop3 Service Hangs when starting

Following a reboot of our Exchange 2003 server, the Pop3 service stated it was started, but on trying to connect to port 110 using telnet it just popped up “connection to the host lost”.  When we attempted to restart the service it hung when starting – there were no events in the event viewer following the stopping of the service.

The solution was to kill the process in Task Manager (inetinfo.exe).  We found it immediately re-spawned and worked…

Mounting a NAS share OpenOffice 3

We’ve been having problems with Microsoft Office Format files opening as read only from our NAS here on Fedora 10 clients. OpenOffice 3 creates file locks on opening the file, resulting in users being unable to save files.

On doing some reading, this can be alleviated by mounting the share using cifs rather than smbfs. On the client machines we have created a folder in media called N (mkdir /media/N), then mounted using the following:

mount -t cifs //10.204.6.5/N /media/N -o username=<username>,password=<password>,rw,iocharset=utf8,nobrl,nounix,sfu,file_mode=0777,dir_mode=0777

note the nounix option – this prevents the file locks from causing problems within OpenOffice.  The sfu option preserves the date and time modifcation values.

Migrating a batch of Printers to a new Print Server

I’ve just had to migrate a batch of printers to a new AD print server. Fortunately this process was made somewhat painless by the Microsoft Print Migration tool available here:

http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=9b9f2925-cbc9-44da-b2c9-ffdbc46b0b17&displaylang=en

How to add a HTML email signature (including embedded image) to Outlook Web Access

Outlook web access does not allow the inclusion of images by default. However it is possible to embed the image within the signature.

First upload the image you wish to include to a web server and make a note of the full path. ie, http://www.yourdomain.com/images/companylogo.jpg.

Then create a new signature in Outlook and ensure the path of the image on the signature points to your webserver. You can find the raw signature files in “C:\documents and settings\username.domain\application data\microsoft\signatures” on Office 2007/XP.

You can then edit the raw signature in Notepad.This is an ideal opportunity to tidy up the messy html created by Outlook when designing the signature in the first place. Find the image src and edit to point to the full path of the hosted image

Send an email with the signature embedded to the users email address and open the email within OWA (in IE). Copy the signature then go into Options -> Email Signatures and paste in the signature.

I’ve sooo done this….

Installing a PPTP Client in Fedora 10

The Network-Manager pptp client in F10 just wasn’t working for me.  Nothing in the logs, not output….just nothing at all. The pptpconfig client is  a far better solution – it’s available from : http://pptpclient.sourceforge.net.  Unfortunately there are no installation documents available for F10 – it is easy to install though:

#rpm -Uvh http://pptpclient.sourceforge.net/yum/stable/fc10/pptp-release-current.noarch.rpm

# yum –enablerepo=pptp-stable install pptpconfig

# pptpconfig

….enter the details of your PPTP account and connect.  Add additional routes if required

The End of the Year or the End of the World….SSL Certs and Solar Storms

Probably my last blog post this year – so just to remind myself how crappy this year has been in years to come, here are a couple of the highlights that I found this morning – pretty telling of this year so far…

Comodo reseller sells SSL Certificates without proper verficication – I’ll link to the discussion on Google Groups – http://groups.google.com/group/mozilla.dev.tech.crypto/browse_thread/thread/9c0cc829204487bf?pli=1.  The repercussions of this would allow an attacker to perform an MITM attack, while appearing to look like a trusted owner of a CA approved site.  In order for this to be successfully the attacker would need to hi-jack DNS, or host a caching nameserver/public Wireless service….such as https://bugzilla.mozilla.org/show_bug.cgi?id=460374….yayy

It remains to be seen as to whether Comodo should have their status as a Root CA revoked until correctly validate certs have been issued to everyone who has purchased from then or their resellers….One to watch as this has huge implications – who knows how many certs have been issued, or for that matter if anyone has exploited this already.  On a more cheerful note, I’ve just been trying to explain to someone in the office, that this has nothing to do with lizards or japanese dresses compromising security…..:)

On a slightly less cheery note….found this on the Nat Geographic site….http://news.nationalgeographic.com/news/pf/27959626.html

Interesting reading – who knows – maybe the light’s will go out in 2012 anyway!!

EDIT: If anyone is actually reading this, I would suggest that they manually revoke the signing permissions of Comodo in their browser until this mess is sorted.  At least this way you know that you are sending information to a Comodo SSL signed site and stop.

Evolution Woes

Following a reboot (which is rare) I had problems connecting to our Exch 2003 server via Evolution in Intrepid – it simply wouldn’t authenticate. I deleted the mailbox account and tried to recreate, populating all the fields…..to be greeted with an “Exchange Account is Offline” message.

Following this I ran evolution from the command line – the output of which was:

e-data-server-ui-Message: Unable to find password(s) in keyring (Keyring reports: No matching results)
e-data-server-ui-Message: Key file does not have group ‘Passwords-Exchange’

I checked available keys in my keychain and the correct keys were there – along with appropriate passwords….

The I stumbled across the following bug report:

https://bugs.launchpad.net/ubuntu/+source/evolution-exchange/+bug/207723

Where I found this comment from Timothy Alexander:

“Something that worked for me was clearing the “mailbox name” under exchange settings, and reauthenticating on that page. The auth went through fine, and it filled out the mailbox again (exactly the same way) but after a restart of evolution it worked fine.”

I tried removing the mailbox name and clicking authenticate, was greeted with the usual errors, but following a restart of evolution it worked!

OpenChange – the Holy Grail of interoperability with MS Exchange/Linux

For a while I’ve been fighting the good fight with poor stability using the webDav Exchange connection in Novell evolution.  This has now been replaced with a more functional solution (proper native MAPI support) in Ubuntu 8.10 and will be soon in Fedora 10 with OpenChange.

Finally, Evolution is behaving as you might expect it to when connecting to an Exchange server – the improvements are immense, both in stability and functionality.

The OpenChange site is here for more information:

http://www.openchange.org/index.php?option=com_frontpage&Itemid=1

Hopefully this will be an end to using a buggy interface and the all to frequent crashes, along with the curse of occasional missing mail items.  I’ve only been using it for a day, but already I’m loving it!