Prune's Blog » Non classé http://www.lecentre.net/blog Internet, UNIX, Video, Leisure... Thu, 19 Jan 2012 20:38:44 +0000 en hourly 1 http://wordpress.org/?v=3.2.1 Syslog LogAnalyzer with LDAP authentication http://www.lecentre.net/blog/archives/1328 http://www.lecentre.net/blog/archives/1328#comments Thu, 19 Jan 2012 20:38:44 +0000 Prune http://www.lecentre.net/blog/?p=1328

 

 

Adiscon is the company responsible for developping LogAnalyzer, a syslog (rsyslog, syslog-ng…) and/or flat file « analyzer ».
By analyzer, understand that it enables you to display the log in a meaningful way, splitting it depending on « views » and enabling real search filters.

If you don’t have the money for things liks Splunk and you are not convinces by other new projects using Rails, NoSQL and other tools that are a pain in the ass to install, you may fallback to LogAnalyzer.

Loganalyzer is a LAMP (Apache, PHP, Mysql) application. Installing it is as easy as putting the PHP files in you web Documentroot and browse to it. You will be asked a few questions and you can start importing your log files.

To do that you need to create « sources » of data. A source can now be a flat file on the local disk or a database (Mysql).
The choice for us was to use rSyslog on our servers. rSyslog is installed on every UNIX host. It is then configured to send the logs to a « loghost » server.
Additionaly, on some hosts, flat files like the Apache access_log or Error_log are also sent by rSyslog.
This lead to a client rsyslog.conf like :

  1. #rsyslog v3 config file
  2.  
  3. # if you experience problems, check
  4. # http://www.rsyslog.com/troubleshoot for assistance
  5.  
  6. #### MODULES ####
  7.  
  8. $ModLoad imuxsock.so    # provides support for local system logging (e.g. via logger command)
  9. $ModLoad imklog.so      # provides kernel logging support (previously done by rklogd)
  10. #$ModLoad immark.so     # provides –MARK– message capability
  11. $ModLoad omrelp.so      # load RELP output module to send logs using RELP instead of UDP-TCP
  12. $ModLoad imfile         # load the file input module to scan specific log files
  13.  
  14. #### GLOBAL DIRECTIVES ####
  15.  
  16. # Use default timestamp format
  17. $ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
  18.  
  19. # File syncing capability is disabled by default. This feature is usually not required,
  20. # not useful and an extreme performance hit
  21. #$ActionFileEnableSync on
  22.  
  23. #### File Input module ####
  24.  
  25. $InputFileName /opt/app/log/mylog.xml
  26. $InputFileTag mylog.xml:
  27. $InputFileStateFile mylog.xml
  28. $InputFileFacility local5
  29. $InputFileSeverity notice
  30. $InputRunFileMonitor
  31.  
  32. #### RULES ####
  33. $template TraditionalFormatWithPRI,"%PRI-text%: %timegenerated% %HOSTNAME% %syslogtag%%msg:::drop-last-lf%\n"
  34.  
  35. # Log all kernel messages to the console.
  36. # Logging much else clutters up the screen.
  37. #kern.* /dev/console
  38.  
  39. # Log anything (except mail) of level info or higher.
  40. # Don’t log private authentication messages!
  41. *.info;mail.none;authpriv.none;cron.none;local5.!notice /var/log/messages;TraditionalFormatWithPRI
  42.  
  43. # The authpriv file has restricted access.
  44. authpriv.* /var/log/secure
  45.  
  46. # Log all the mail messages in one place.
  47. mail.* -/var/log/maillog
  48.  
  49. # Log cron stuff
  50. cron.* /var/log/cron
  51.  
  52. # Everybody gets emergency messages
  53. *.emerg *
  54.  
  55. # Save news errors of level crit and higher in a special file.
  56. uucp,news.crit /var/log/spooler
  57.  
  58. # Save boot messages also to boot.log
  59. local7.* /var/log/boot.log
  60.  
  61. # ### begin forwarding rule ###
  62. # The statement between the begin … end define a SINGLE forwarding
  63. # rule. They belong together, do NOT split them. If you create multiple
  64. # forwarding rules, duplicate the whole block!
  65. # Remote Logging (we use TCP for reliable delivery)
  66. #
  67. # An on-disk queue is created for this action. If the remote host is
  68. # down, messages are spooled to disk and sent when it is up again.
  69. $WorkDirectory /var/spool/rsyslog # where to place spool files
  70. $ActionQueueFileName fwdRule1 # unique name prefix for spool files
  71. $ActionQueueMaxDiskSpace 1g # 1gb space limit (use as much as possible)
  72. $ActionQueueSaveOnShutdown on # save messages to disk on shutdown
  73. $ActionQueueType LinkedList # run asynchronously
  74. $ActionResumeRetryCount -1 # infinite retries if host is down
  75.  
  76. # remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional
  77. *.* @@loghost:514
  78. #*.* :o mrelp:loghost:20514;RSYSLOG_ForwardFormat
  79.  
  80. # ### end of the forwarding rule ###

On the server (receiver) side, the rSyslog will put data into files, rotating every day, and inside the DB.
Actualy I don’t know yet if it is a good idea. For the moment I keep everything. I may consider archiving the flat files and deleting old logs from the DB.
Then the DB would act as a buffer to search and correlate.

This is the server rsyslog.conf :

  1. # if you experience problems, check
  2. # http://www.rsyslog.com/troubleshoot for assistance
  3.  
  4. # rsyslog v3: load input modules
  5. # If you do not load inputs, nothing happens!
  6. # You may need to set the module load path if modules are not found.
  7.  
  8. # stats module – experimental
  9. # supprimer pour la mise en prod
  10. $ModLoad impstats
  11. $PStatInterval 600
  12. $PStatSeverity 7
  13. syslog.debug /var/log/rsyslog-stats
  14.  
  15. $ModLoad immark # provides –MARK– message capability
  16. $ModLoad imuxsock # provides support for local system logging (e.g. via logger command)
  17. $ModLoad imklog # kernel logging (formerly provided by rklogd)
  18. $ModLoad ommysql # locad Mysql backend module
  19.  
  20. $WorkDirectory /opt/rsyslog/work # default location for work (spool) files
  21.  
  22. # Templates
  23. $template RemoteHost,"/opt/rsyslog/data/%$YEAR%/%$MONTH%/%$DAY%/%HOSTNAME%/%syslogfacility-text%.log"
  24. # used for Cisco, vanilla syslog when we can’t parse host name
  25. $template RemoteFromHost,"/opt/rsyslog/data/%FROMHOST%/%$YEAR%/%$MONTH%/%$DAY%/%syslogfacility-text%.log"
  26.  
  27. # ######### Receiving Messages from local host only ##########
  28. # Log all kernel messages to the console.
  29. # Logging much else clutters up the screen.
  30. #kern.* /dev/console
  31.  
  32. # Log anything (except mail) of level info or higher.
  33. # Don’t log private authentication messages!
  34. *.info;mail.none;authpriv.none;cron.none -/var/log/messages
  35.  
  36. # The authpriv file has restricted access.
  37. authpriv.* /var/log/secure
  38.  
  39. # Log all the mail messages in one place.
  40. mail.* -/var/log/maillog
  41.  
  42. # Log cron stuff
  43. cron.* -/var/log/cron
  44.  
  45. # Everybody gets emergency messages
  46. *.emerg *
  47.  
  48. # Save news errors of level crit and higher in a special file.
  49. uucp,news.crit -/var/log/spooler
  50.  
  51. # Save boot messages also to boot.log
  52. local7.* /var/log/boot.log
  53.  
  54. # ######### Receiving Messages from Remote Hosts ##########
  55. # at this point, we consider only remote messages
  56. $RuleSet remote
  57.  
  58. # TCP Syslog Server:
  59. # provides TCP syslog reception and GSS-API (if compiled to support it)
  60. $ModLoad imtcp.so # load module
  61. $InputTCPServerBindRuleset remote
  62. $InputTCPServerRun 514 # start up TCP listener at port 514
  63.  
  64. # TCP Syslog Server for Cisco – need port over 1024 :
  65. # provides TCP syslog reception and GSS-API (if compiled to support it)
  66. $ModLoad imtcp.so # load module
  67. $InputTCPServerBindRuleset remote
  68. $InputTCPServerRun 1470 # start up TCP listener at port 514
  69.  
  70. # UDP Syslog Server:
  71. $ModLoad imudp.so # provides UDP syslog reception
  72. $InputUDPServerBindRuleset remote
  73. $UDPServerRun 514 # start a UDP syslog server at standard port 514
  74.  
  75. # RELP Syslog (Reliable Event Logging Protocol)
  76. # WARNING : RELP messages are not passed through ruleset yet and will be logged localy
  77. $ModLoad imrelp # load RELP input module to send reliable messages – better than TCP and UDP
  78. $InputRELPServerRun 20514 # RELP port on 20514
  79. # #########
  80.  
  81. # log remote hosts to specific files
  82. $ActionQueueType LinkedList # use asynchronous processing
  83. $ActionQueueFileName dbq # set file name, also enables disk mode
  84. $ActionResumeRetryCount -1 # infinite retries on insert failure
  85. *.* -?RemoteHost
  86.  
  87. # log everything to mysql using default template
  88. #*.* :o mmysql:database-server,database-name,database-userid,database-password
  89. #*.* :o mmysql:localhost,loganalyzer,rsyslog,password
  90.  
  91. # syslog-ng style template used by centreon-syslog
  92. $template sysMysql,"INSERT INTO logs (host,facility, priority,level,tag,datetime,program,msg,ProcessID) VALUES (‘%HOSTNAME%’,’%syslogfacility%’,’%syslogpriority%’,’%syslogseverity%’,’%syslogtag%’, ‘%timereported:::date-mysql%’,'%programname%’, ‘%msg%’,'%procid:R,ERE,0,ZERO:[0-9]+–end%’)", SQL
  93. *.* :ommysql:localhost,loganalyzer,rsyslog,password;sysMysql
  94.  
  95. #
  96. # END remote logging
  97. #

On the mysql side you will need to install the syslog-ng database schema. Mine is changed to also support ProcessID. (I will join the schema soon).
On the Loganalyzer side you need to define sources and views.
Sources will define which data source to use… flat file, mysql…
To be able to use Mysql you will need to also create (or use the provided) DBMapping. This will match the DB fields to the Syslog Fields.
Finaly, the « view » will decide which fields to display. For example, you could decide to display only the date and message of the error logs in a view because the hostname is not usefull. In another view you could decide that the date is not important but the host is, with the HTTP status code…

OK. You are all set-up with Loganalyzer… but you can only log-in with users from the mysql database.
My users are in LDAP.
While it would be hard to change the whole application to authenticate and search the groups in LDAP, the authentication part is easy to do.
I just changed the functions_users.php so, instead of looking the user in the DB, do the auth on LDAP, create the user in the DB and continue with the normal behaviour…

Here is the code of the new function in include/functions_users.php :

  1. function CheckLDAPUserLogin( $username, $password )
  2. {
  3. global $content;
  4.  
  5. $ldap_filter=‘(&’.$content[‘LDAPSearchFilter’].‘(‘.$content[‘LDAPUidAttribute’].‘=’.$username.‘))’;
  6.  
  7. // Open LDAP connection
  8. if (!($ds=ldap_connect($content[‘LDAPServer’],$content[‘LDAPPort’]))) {
  9. return false;
  10. }
  11. ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3);
  12.  
  13. // Bind as the privilegied user
  14. if (!($r=ldap_bind($ds,$content[‘LDAPBindDN’],$content[‘LDAPBindPassword’]))) {
  15. return false;
  16. }
  17. // search for the user
  18. if (!($r=ldap_search( $ds, $content[‘LDAPBaseDN’], $ldap_filter, array("uid","cn","localentryid","userpassword") ))) {
  19. DieWithFriendlyErrorMsg( "Debug Error: Could not login user ‘" . $username . "’
  20.  
  21. <strong>Sessionarray</strong>
  22. <pre>" . var_export($_SESSION, true) . "</pre>
  23. <strong>Search Filter </strong>: " . $ldap_filter );
  24. return false;
  25. }
  26.  
  27. $info = ldap_get_entries($ds, $r);
  28. if (!$info || $info["count"] != 1) {
  29. DieWithFriendlyErrorMsg( "Debug Error: Could not login user ‘" . $username . "’
  30.  
  31. <strong>Sessionarray</strong>
  32. <pre>" . var_export($_SESSION, true) . "</pre>
  33. <strong>Search Filter </strong>: " . $ldap_filter );
  34. return false;
  35. }
  36.  
  37. // now we have the user data. Do a bind to check for his password
  38. if (!($r=ldap_bind( $ds, $info[0][‘dn’],$password))) {
  39. return false;
  40. }
  41.  
  42. // for the moment when a user logs in from LDAP, create it in the DB.
  43. // then the prefs and group management is done in the DB and we don’t rewrite the whole Loganalyzer code…
  44.  
  45. // check if the user already exist
  46. $sqlquery = "SELECT * FROM " . DB_USERS . " WHERE username = ‘" . $username . "’";
  47. $result = DB_Query($sqlquery);
  48. $myrow = DB_GetSingleRow($result, true);
  49. if (!isset($myrow[‘is_admin’]) ) {
  50. // Create User
  51. $result = DB_Query("INSERT INTO " . DB_USERS . " (id, username, password, is_admin, is_readonly) VALUES (".$info[0][‘localentryid’][0].", ‘$username‘, ‘rnd".md5(mt_rand()."rnd")."’, 0, 1)");
  52. DB_FreeQuery($result);
  53. $myrow[‘is_admin’] = 0;
  54. $myrow[‘last_login’] = 0;
  55. $myrow[‘is_readonly’] = 1;
  56. }
  57.  
  58. $myrowfinal[‘username’] = $info[0][$content[‘LDAPUidAttribute’]][0];
  59. $myrowfinal[‘password’] = "hidden";
  60. $myrowfinal[‘dn’] = $info[0][‘dn’];
  61. $myrowfinal[‘ID’] = $info[0][‘localentryid’][0];
  62. $myrowfinal[‘is_admin’] = $myrow[‘is_admin’];
  63. $myrowfinal[‘is_readonly’] = $myrow[‘is_readonly’];
  64. $myrowfinal[‘last_login’] = $myrow[‘last_login’];
  65.  
  66. return $myrowfinal;
  67. // Default return false
  68. return false;
  69. }
  70. function CheckUserLogin( $username, $password )
  71. {
  72. global $content;
  73.  
  74. // if auth LDAP is used, don’t check the DB yet
  75. if ( GetConfigSetting("LDAPUserLoginRequired", "") == "true") {
  76. $myrow = CheckLDAPUserLogin( $username, $password );
  77. }
  78. else {
  79. // TODO: SessionTime and AccessLevel check
  80. $md5pass = md5($password);
  81. $sqlquery = "SELECT * FROM " . DB_USERS . " WHERE username = ‘" . $username . "’ and password = ‘" . $md5pass . "’";
  82. $result = DB_Query($sqlquery);
  83. $myrow = DB_GetSingleRow($result, true);
  84. }

The rest of the code is the same.
Also I had to add some configuration entries in the config.php file

  1. // — LDAP auth options
  2. $CFG[‘LDAPUserLoginRequired’] = true; // activate LDAP auth
  3. $CFG[‘LDAPServer’] = "localhost"; // LDAP server hostname or IP
  4. $CFG[‘LDAPPort’] = 389; // LDAP port, 389 or 636 for SSL
  5. $CFG[‘LDAPBaseDN’] = "ou=my,o=ldap"; // Base DN for LDAP search
  6. $CFG[‘LDAPSearchFilter’] = "(objectclass=inetOrgPerson)"; // search filter
  7. $CFG[‘LDAPUidAttribute’] = "uid"; // the LDAP attribute used in the search to find the user. ex : uid, cn
  8. $CFG[‘LDAPBindDN’] = "cn=Manager,ou=my,o=ldap"; // DN of the privileged user for the search
  9. $CFG[‘LDAPBindPassword’] = ‘secret’; // Password of the privilegied user
  10. $CFG[‘LDAPGroupAttribute’] = ‘member’; // attribute used to search for groups
  11. // —

Here is the diff that you can put in a file and use the « patch » command to install.

  1. — include/functions_users_orig.php 2012-01-19 14:36:24.000000000 -0500
  2. +++ include/functions_users.php 2012-01-19 14:33:12.000000000 -0500
  3. @@ -157,16 +157,83 @@
  4. }
  5. }
  6.  
  7. -function CheckUserLogin( $username, $password )
  8. +function CheckLDAPUserLogin( $username, $password )
  9. {
  10. global $content;
  11.  
  12. - // TODO: SessionTime and AccessLevel check
  13. + $ldap_filter=’(&amp;’.$content[‘LDAPSearchFilter’].’(‘.$content[‘LDAPUidAttribute’].’=’.$username.’))‘;
  14.  
  15. - $md5pass = md5($password);
  16. - $sqlquery = "SELECT * FROM " . DB_USERS . " WHERE username = ‘" . $username . "’ and password = ‘" . $md5pass . "’";
  17. - $result = DB_Query($sqlquery);
  18. - $myrow = DB_GetSingleRow($result, true);
  19. + // Open LDAP connection
  20. + if (!($ds=ldap_connect($content[‘LDAPServer’],$content[‘LDAPPort’]))) {
  21. + return false;
  22. + }
  23. + ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3);
  24. +
  25. + // Bind as the privilegied user
  26. + if (!($r=ldap_bind($ds,$content[‘LDAPBindDN’],$content[‘LDAPBindPassword’]))) {
  27. + return false;
  28. + }
  29. + // search for the user
  30. + if (!($r=ldap_search( $ds, $content[‘LDAPBaseDN’], $ldap_filter, array("uid","cn","localentryid","userpassword") ))) {
  31. + DieWithFriendlyErrorMsg( "Debug Error: Could not login user ‘" . $username . "’
  32.  
  33. <strong>Sessionarray</strong>
  34. <pre>" . var_export($_SESSION, true) . "</pre>
  35. <strong>Search Filter </strong>: " . $ldap_filter );
  36. + return false;
  37. + }
  38. +
  39. + $info = ldap_get_entries($ds, $r);
  40. + if (!$info || $info["count"] != 1) {
  41. + DieWithFriendlyErrorMsg( "Debug Error: Could not login user ‘" . $username . "’
  42.  
  43. <strong>Sessionarray</strong>
  44. <pre>" . var_export($_SESSION, true) . "</pre>
  45. <strong>Search Filter </strong>: " . $ldap_filter );
  46. + return false;
  47. + }
  48. +
  49. + // now we have the user data. Do a bind to check for his password
  50. + if (!($r=ldap_bind( $ds, $info[0][‘dn’],$password))) {
  51. + return false;
  52. + }
  53. +
  54. + // for the moment when a user logs in from LDAP, create it in the DB.
  55. + // then the prefs and group management is done in the DB and we don’t rewrite the whole Loganalyzer code…
  56. +
  57. + // check if the user already exist
  58. + $sqlquery = "SELECT * FROM " . DB_USERS . " WHERE username = ‘" . $username . "’";
  59. + $result = DB_Query($sqlquery);
  60. + $myrow = DB_GetSingleRow($result, true);
  61. + if (!isset($myrow[‘is_admin’]) ) {
  62. + // Create User
  63. + $result = DB_Query("INSERT INTO " . DB_USERS . " (id, username, password, is_admin, is_readonly) VALUES (".$info[0][‘localentryid’][0].", ‘$username’, ‘rnd".md5(mt_rand()."rnd")."’, 0, 1)");
  64. + DB_FreeQuery($result);
  65. + $myrow[‘is_admin’] = 0;
  66. + $myrow[‘last_login’] = 0;
  67. + $myrow[‘is_readonly’] = 1;
  68. + }
  69. +
  70. + $myrowfinal[‘username’] = $info[0][$content[‘LDAPUidAttribute’]][0];
  71. + $myrowfinal[‘password’] = "hidden";
  72. + $myrowfinal[‘dn’] = $info[0][‘dn’];
  73. + $myrowfinal[‘ID’] = $info[0][‘localentryid’][0];
  74. + $myrowfinal[‘is_admin’] = $myrow[‘is_admin’];
  75. + $myrowfinal[‘is_readonly’] = $myrow[‘is_readonly’];
  76. + $myrowfinal[‘last_login’] = $myrow[‘last_login’];
  77. +
  78. + return $myrowfinal;
  79. + // Default return false
  80. + return false;
  81. +
  82. +}
  83. +function CheckUserLogin( $username, $password )
  84. +{
  85. + global $content;
  86. +
  87. + // if auth LDAP is used, don’t check the DB yet
  88. + if ( GetConfigSetting("LDAPUserLoginRequired", "") == "true") {
  89. + $myrow = CheckLDAPUserLogin( $username, $password );
  90. + }
  91. + else {
  92. + // TODO: SessionTime and AccessLevel check
  93. + $md5pass = md5($password);
  94. + $sqlquery = "SELECT * FROM " . DB_USERS . " WHERE username = ‘" . $username . "’ and password = ‘" . $md5pass . "’";
  95. + $result = DB_Query($sqlquery);
  96. + $myrow = DB_GetSingleRow($result, true);
  97. + }
  98.  
  99. // The admin field must be set!
  100. if ( isset($myrow[‘is_admin’]) )

For the SQL of the logs tables :

  1. CREATE TABLE `logs` (
  2. `host` varchar(128) collate utf8_unicode_ci DEFAULT NULL,
  3. `facility` varchar(10) collate utf8_unicode_ci DEFAULT NULL,
  4. `priority` varchar(10) collate utf8_unicode_ci DEFAULT NULL,
  5. `level` varchar(10) collate utf8_unicode_ci DEFAULT NULL,
  6. `tag` varchar(10) collate utf8_unicode_ci DEFAULT NULL,
  7. `datetime` datetime DEFAULT NULL,
  8. `program` varchar(256) collate utf8_unicode_ci DEFAULT NULL,
  9. `msg` text collate utf8_unicode_ci,
  10. `seq` bigint(20) UNSIGNED NOT NULL AUTO_INCREMENT,
  11. `counter` int(11) NOT NULL DEFAULT ’1′,
  12. `fo` datetime DEFAULT NULL,
  13. `lo` datetime DEFAULT NULL,
  14. `processid` char(8) collate utf8_unicode_ci DEFAULT NULL,
  15. PRIMARY KEY (`seq`),
  16. KEY `datetime` (`datetime`),
  17. KEY `priority` (`priority`),
  18. KEY `facility` (`facility`),
  19. KEY `program` (`program`),
  20. KEY `host` (`host`),
  21. KEY `host_datetime` (`host`,`datetime`)
  22. ) ENGINE=MyISAM AUTO_INCREMENT=1339013 DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci;
]]> http://www.lecentre.net/blog/archives/1328/feed 0 Steadycam l’Aigle HDV : premiers essais http://www.lecentre.net/blog/archives/1114 http://www.lecentre.net/blog/archives/1114#comments Sun, 25 Jul 2010 19:27:01 +0000 Prune http://www.lecentre.net/blog/?p=1114 Voila les vidéo prises hier soir, dans mon parking, avec mon ami Jean-Marc, président du Groupe13.

Materiel :

  • Steadycam (stabilisateur) l’Aigle HDV
  • Camera Sony PMW-EX1
  • Kit 32mm Shoot35 SG Blade monture Nikon
  • Optique Samyang 14mm f2.8
  • Chaussures Timberland Pro Titane garantie confort 30 jours satisfait ou remboursé !

La mise au point n’a pas été faite et il y a peu de lumière. L’optique est à pleine ouverture (f2.8) et la camera à +6 db. L’enregistrement est fait en XDCAM-EX 1080p25. Le rendu en H264. Aucun etalonnage n’est fait… la balance des blancs n’était pas bonne, mais bon, pas le temps… On essaye juste de stabiliser là, c’est déjà pas mal !

EX1 + SG-Blade + 14mm on steadycam Aigle HDV (test 1)

EX1 + SG-Blade + 14mm on steadycam Aigle HDV (test 2)

EX1 + SG-Blade + 14mm on steadycam Aigle HDV (test 3)

EX1 + SG-Blade + 14mm on steadycam Aigle HDV (test 4)

EX1 + SG-Blade + 14mm on steadycam Aigle HDV (test 5)

]]> http://www.lecentre.net/blog/archives/1114/feed 0 Sending SMS from Nagios – API and script update http://www.lecentre.net/blog/archives/1020 http://www.lecentre.net/blog/archives/1020#comments Fri, 09 Jul 2010 16:52:25 +0000 Prune http://www.lecentre.net/blog/?p=1020 It seems that today, the old API v1 from smsenvoi.com is not working anymore… In fact, I don’t know since when.
I just emailed the support and hope to get an answer soon.

As sending an SMS from their website was still working, I decided to try the new API v2.
This is not a real change, they mostly renamed some of the fields, replaced the password by an API key, do you can give it to some other people without having them gain access to your admin interface, and the API answer is now in JSON format instead of « OK » and « KO ».

I just changed the script so new parameters are set. I still don’t deal with the answer.

See attached file  sendSMSv2.py

]]> http://www.lecentre.net/blog/archives/1020/feed 0 Casque moto Caberg V2X Carbon Matt http://www.lecentre.net/blog/archives/785 http://www.lecentre.net/blog/archives/785#comments Wed, 22 Jul 2009 18:45:10 +0000 Prune http://www.lecentre.net/blog/?p=785 logoJe me suis rendu compte dernièrement que mon casque moto, un Shoei Z1, avait bien 4, sinon 5 ans. La mousse est un peu molle, sale, la visière est complètement rayé. Le casque, tombé plusieurs fois, fait triste mine.
Du coup, pourquoi ne pas profiter des soldes pour en changer ?
Après un rapide tour d’horizon, et hormis le nouveau Shoei qui va sortir en septembre… rien de bien nouveau.

Changer de casque, OK, mais au moins que ce soit pour un truc mieux. Effectivement le Z1 a simplement disparu de la gamme, sans être remplacé !

Au final, les casques en lignes que j’ai sélectionné sont :

  • Schuberth S1 Pro (noir) : parfait, mais vieux, lourd, large et CHER ! (510€ minimum)
  • Scorpio EXO 1000 : une marque que je ne connaissait pas. Un bon casque, qui semble silencieux, avec une visière teinté retractable et tout… mais lourd ! plus de 1.6Kg !!!!
  • Caberg V2X Carbon : la révélation !

    • Au final, seul le Schuberth existait en solde (470€ quand même), mais dans des couleurs… heuu… pas pour moi quoi.
    Comme on peut le comprendre c’est le Caberg que j’ai choisis.
    Après une brève recherche sur le net, le prix est a 399€ (245 ou 270€ HT prix revendeur). Pas donné, mais pas si cher que ça pour les fonctionnalités.
    Meme si certains sites en ligne n’ont aucun problème à échanger le casque (il faut juste payer la livraison retour), je ne vais pas acheter un casque sans l’avoir essayé ?
    En route vers les magasins parisiens. Et la…. rien !
    Personne n’a ce casque. Ou pire, personne ne sait qu’il existe !
    Je me demande bien ce que fait Caberg.

    C’est finalement chez La Casquerie, magasin proche de bastille, qu’un vendeur a pris le temps de me répondre :

    Caberg c’est du bas de gamme, seulement des coques en plastic, c’est cheap, pas fait pour une grosse moto…

    Et le V2X Carbon c’est comment ?

    Le quoi ?

    Le Haut de gamme de Caberg, un casque en carbone, toutes options !

    Et bien non, franchement, même en ayant la brochure sur l’étagère, personne ne connait ce casque :)
    Le vendeur a heureusement bien voulu en commander un (deux en fait, un XS et un S, au cas ou) contre un acompte de 50€. Affaire dealé le samedi et le mercredi suivant, dring dring, votre casque est la. Super le service !
    Voila, en photo, ce qu’il en est :

    IMG_0053 IMG_0054 IMG_0055

    Première chose, confirmé par le vendeur : le casque est léger comme une plume. On a l’impression que la boite est vide !
    On voit aussi la housse de protection, le « pinlock », un écran à coller à l’intérieur de la visière et qui empêche la buée de cacher la route. A faire soi-même, très facilement. On trouve aussi un peu d’huile pour l’entretiens des joins d’étanchéité de la visière et des auto-collants réfléchissants 3M a mettre sur le casque, même si je n’ai pas trouvé ou.

    IMG_0056 IMG_0057 IMG_0060
    Carbone mate, visière « lunettes de soleil »… tout ce qu’il faut

    IMG_00582 IMG_0059

    IMG_0061 IMG_0062
    Le carbone a des imperfections « esthétique ». Sur la droite, la bavette, courte, mais aérée.

    IMG_0063 IMG_0066 IMG_0067
    Les aérations sont larges, mais peu épaisses… Cela fera plus ou moins de bruit ?

    IMG_0069 IMG_0070 IMG_0071
    En comparaison, le V2X est de la même taille que le Shoei. Un peu plus pointu sur le devant.

    IMG_0073 IMG_0084 IMG_0074
    Le pinlock « anti-buée » avec la notice, une fois monté sur la visière et le « clip » qui permet a la visière de se bloquer. A noter que le mécanisme de la visière est plutôt dure, ce qui devrait éviter a cette dernière de s’ouvrir inopinément.

    IMG_0085 IMG_0086 IMG_0075
    Pour enlever la visière, il faut défaire deux grosses vis. Une pièce de 1€ remplace largement un tournevis. Ensuite, on peut enlever la visière. Étrangement le système de cran d’ouverture en plastic n’est, à ce moment la, plus solidaire du casque.
    Sur la deuxième photo, sur la droite, on note le « levier » qui permet d’abaisser le pare-soleil. Il se trouve sur le coté gauche du casque. Sur la 3eme photo on voit la boucle double-D et le « protège menton ».

    IMG_0078 IMG_0077 IMG_0076
    L’intérieur du casque. Entièrement démontable. Un peu raide pour le moment mais je pense qu’il s’assouplira avec le temps. Notez le coussin rouge, au niveau des oreilles, avec un logo qui semble dire qu’il est spécialement fait pour laisser la place au branches de lunettes.

    Sur la tête, le casque est léger, presque comme si l’on ne portait rien. Il craque un peu, peut-être le temps que tout soit en place. Mon vieux Shoei le fait aussi….
    Le casque est un peu rigide, mais comme je le disais, il est neuf.

    Les tests de « roulage » dans un prochain article, des que le temps et mes horaires le permettent.

    ]]>     http://www.lecentre.net/blog/archives/785/feed 20     Flashing an Amino Set Top Box http://www.lecentre.net/blog/archives/694 http://www.lecentre.net/blog/archives/694#comments Tue, 24 Feb 2009 21:18:39 +0000 Prune http://www.lecentre.net/blog/?p=694 Amino company and resellers are really quiet about all the possibilities of the product.
    I made a post some time ago about configuring the Amino to boot with DHCP and get the config through this or through DHCP.
    This post was really popular and people began to ask me for firmware and informations on how to upgrade. Of course, I can’t provide anything like firmware. My reseller here is France is OK to sell it for 10€ for 4 Amino stb… Or you can find it somewhere on Internet. Please, don’t ask for it, I don’t have the latest nor the Opera firmware.

    My last reseller sent me the 110 firmware while I had some dead STB. This is what I will use for this tutoriel.

    So, the firmware comes as a tar file. Mine is A110-0.15.1-fresco-ami_wm-euro-subs.tar .

    First, you need to create some directories. Please, note I’m actualy doing this on a PC running Ubuntu 7.10. The ~ stands for your home directory. It can be anything else you want, just change the paths accordinately. Of course, you don’t need to install things in /usr/local AT ALL, which is a really bad way to do things anyway.

    1. cd  ~
    2. mkdir amino
    3. cd amino
    4. mkdir keys releases releases/A110 images
    5. cd releases/A110

    Now you can untar your image. Mine is just a .tar but yours could be a .tgz or .tar.gz. Then use option zxvf instead of xvf :

    1. tar xvf ../../../A110-0.15.1-fresco-ami_wm-euro-subs.tar

    This will create a directory 0.15.1-A110-fresco-ami_wm-subs-1. Go into it :

    1. cd 0.15.1-A110-fresco-ami_wm-subs-1

    You can now create and sign the two files you need for an upgrade : a bootstrap and an image.

    The bootstrap

    1. cd bootstrap
    2. export CUSTOMER_KEY=`pwd`/../utils/keys/amino/KEY.private
    3. export PATH=$PATH:`pwd`/../utils
    4. ./signbootstrap

    The password is « markskey« . You will get a OK message and a new file : bootstrap.signed

    1. Please enter passphrase for /home/prune/amino/releases/A110/0.15.1-A110-fresco-ami_wm-subs-1/utils/keys/amino/KEY.private: Signed image written to ‘bootstrap.signed’
    2. Multicast bootstrap image signed successfully: bootstrap.signed

    Copy this new file to the image directory :

    1. cp bootstrap.signed ~/amino/images
    2. cd ..

    The BONUS

    Before we create the signed image of the real OS, I will show you how you can customize the boot procedure.
    In the upgradeimage/imagecomponents directory lies all the files that will be packaged in the OS. Of course you can add few files. Don’t oversize the image or it won’t be able to be used.
    Inside this directory you will find a splash.gif image file.
    splash
    You can replace it by any GIF image. Don’t use an image bigger than the TV resolution, around 720×480. Replace the image but keep the same name ! Also, I think you have a limited number of possible colors, and the first color (?) will also be used for the backgroud around the image (can you confirm that ?)
    So, have fun, change files, pre-program you amino by changing the config files… play around :)

    The OS Image

    If you have closed your terminal, re-set the CUSTOMER_KEY and PATH variables as above.
    Now create and sign the image. As suggested, if you are making an Opera firmware upgrade, une -z for compressing the image

    1. ./signupgradeimage -z 0
    2. Amino signupgradeimage Version : 1.42 $
    3. Using DI of 0
    4. Please enter passphrase for /home/prune/amino/releases/A110/0.15.1-A110-fresco-ami_wm-subs-1/utils/keys/amino/KEY.private:
    5. 0
    6. Generating flash contents list
    7. ….
    8. FS created with packetsize of 4096
    9. Warning: FS created using default values [serialNumber=1, dirsPerCycle=128]
    10. cp mc2.mcfs ~/amino/images/

    The DHCP Server

    Yes, you will need one… But you already have my previous post on this : http://www.lecentre.net/blog/archives/119
    See my config below as I finaly found out that my first config was « wrong« 

    The Multicast Server

    This server can be anything… the one provided with the image or anyone, like VLC (yes, the video player…).
    Go in the server directory and edit the

    1. cd ~/amino/releases/A110/0.15.1-A110-fresco-ami_wm-subs-1/server
    2. vi mcastbootd.conf

    Match the <mcast address> and <port number> with the ones from the DHCPD config file :
    Here is my file :

    1. [Server]
    2. LogLevel=4
    3. MulticastTTL=1
    4.  
    5. [Image bootstrap.signed]
    6. MulticastIPAddress=239.255.230.52
    7. MulticastUDPPort=11111
    8. FileName=bootstrap.signed
    9. Description=Linux bootstrap image
    10. ImageType=1
    11. SerialNumber=1
    12. PacketSize=1456
    13. CycleTime=0
    14.  
    15. [Filesystem mc2]
    16. MulticastIPAddress=239.255.230.53
    17. MulticastUDPPort=11111
    18. ImageName=mc2
    19. Description=upgrade filesystem
    20. SerialNumber=2
    21. DirsPerCycle=128
    22. DataRate=256
    23. CycleTime=0

    Start the upgrade

    Now you are ready to start. Go in the image directory and start the multicast software :

    1. cd ~/amino/images
    2. ~/amino/releases/A110/0.15.1-A110-fresco-ami_wm-subs-1/server/mcastbootd -D  -C ~/amino/releases/A110/0.15.1-A110-fresco-ami_wm-subs-1/server/mcastbootd.conf
    3. 16:04:12.788281 /home/prune/amino/releases/A110/0.15.1-A110-fresco-ami_wm-subs-1/server/mcastbootd: Multicast boot/FS server daemon version 0.01.00
    4. 16:04:12.788591 /home/prune/amino/releases/A110/0.15.1-A110-fresco-ami_wm-subs-1/server/mcastbootd version 0.01.00 started
    5. 16:04:12.792805 239.255.230.52:11111 transmission of boot image ‘bootstrap.signed’ enabled
    6. 16:04:12.796833 239.255.230.53:11111 transmission of ‘mc2′ enabled
    7. 16:04:12.796895 239.255.230.53:11111 transmission of filesystem ‘mc2′ commenced
    8. 16:04:12.817127 239.255.230.52:11111 transmission of boot image ‘bootstrap.signed’ commenced
    9. ….

    You can now plug in your set top box and see the magic…
    Or not… :)
    I just found out that the DHCP config file may not be right, depending on your Amni revision. While the original Vendor-Name is « aminoAMINET110mboot », this can change.
    The solution I found was to trace the IP (bootP) packets on the lan and see what is going on. I use tcpdump for that.
    This is also the point where I will describe my setup :
    My host have 2 network card. Eth0 is connected to the local LAN and is using a dhcp client to get an IP. I’m connecting to it using SSH from my Mac, where I write this blog post at the same time.
    The other network card, eth1, is connected to a switch where I plus the set top box. As the multicast packets of the mcastbootd only goes out by the first interface, eth0, I had to use a special command to configure eth1, so the multicast goes on it. Here is the whole config command.
    Of course, if you are local on the host and have only one ethernet card, you won’t have to do this :

    1. ifconfig eth1 10.20.0.2 netmask 255.255.252.0 up
    2. route add -net 224.0.0.0 netmask 240.0.0.0 dev eth1

    The IP 10.20.0.2 is just part of the DHCP range I set up but outside the pool.
    Then, to get the « vendor name » used by the set top box to ask for bootp/dhcp, I used tcpdump on eth1, then plugged in the amino and power it. Here is the result :

    1.  tcpdump -s 1024 -x -i eth1 -vv host not 239.255.230.52 and host not 239.255.230.53
    2. tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 1024 bytes
    3.  
    4. 15:44:20.598588 IP (tos 0×0, ttl  64, id 1, offset 0, flags [none], proto: UDP (17), length: 328) 0.0.0.0.bootpc &gt; 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from 00:00:00:00:00:00 (oui Unknown), length 300, xid 0x167eb0e7, Flags [ none ] (0×0000)
    5.           Client-Ethernet-Address 00:00:00:00:00:00 (oui Unknown)
    6.           Vendor-rfc1048 Extensions
    7.             Magic Cookie 0×33333333
    8.             DHCP-Message Option 53, length 1: Discover
    9.             Vendor-Class Option 60, length 26: "insecureAMINET11xmboot1.32"
    10.             Vendor-Option Option 43, length 24: 2.2.2.22.22.22.22.22.22.22.120.2.2.222.22.222.222.222.2.2.22.22.22.52

    What is all this mess ?
    In fact, you don’t care !
    The only important part is Vendor-Class Option 60, length 26: « insecureAMINET11xmboot1.32″. This is what you have to set in your dhcpd.conf so it will find the amino, give it the IP and params so it can find the broadcast server.
    So, here is my dhcpd.conf file, right from the Ubuntu dhcpd.conf + amino specials :

    1. # cat /etc/dhcp3/dhcpd.conf  | grep -v \#
    2.  
    3. ddns-update-style none;
    4. option domain-name "example.org";
    5. option domain-name-servers ns1.example.org, ns2.example.org;
    6. default-lease-time 600;
    7. max-lease-time 7200;
    8. log-facility local7;
    9.  
    10. option space AMINO;
    11. option AMINO.address    code 1 = ip-address;
    12. option AMINO.port       code 2 = integer 16;
    13. option AMINO.product    code 3 = text;
    14. option AMINO.option     code 4 = text;
    15. option AMINO.version    code 5 = text;
    16. option AMINO.middleware code 6 = ip-address;
    17. option AMINO.mw_port    code 7 = integer 16;
    18. option AMINO.homepage   code 8 = text;
    19. option AMINO.dindex     code 9 = integer 32;
    20. option AMINO.dindex_min code 10 = integer 32;
    21. option AMINO.dindex_page        code 11 = text;
    22.  
    23. class "AmiNET110 all" {
    24. match if (option vendor-class-identifier="Aminoaminet110fisys") or
    25. ((substring( option vendor-encapsulated-options, 2, 9)="aminet110")
    26. and (substring(option vendor-encapsulated-options, 13, 5)="fisys"));
    27.  
    28. vendor-option-space AMINO;
    29. option AMINO.homepage "http://tv.portal.com/tv.html";
    30. }
    31.  
    32. class "AmiNET110 mboot"
    33. {
    34.   match if (option vendor-class-identifier="insecureAMINET11xmboot1.32") or
    35.            ((substring( option vendor-encapsulated-options, 2, 9)="AMINET110")
    36.             and (substring(option vendor-encapsulated-options, 13, 5)="mboot"));
    37.  
    38.   vendor-option-space AMINO;
    39.   option AMINO.address 239.255.230.52;
    40.   option AMINO.port 11111;
    41. }
    42.  
    43. class "AmiNET110 upgrd"
    44. {
    45.   match if (option vendor-class-identifier="insecureAMINET11xupgrd1.32") or
    46.            ((substring( option vendor-encapsulated-options,2,9)="aminet110")
    47.             and (substring( option vendor-encapsulated-options,13,5)="upgrd"));
    48.  
    49.   vendor-option-space AMINO;
    50.   option AMINO.address 239.255.230.53;
    51.   option AMINO.port 11111;
    52. }
    53.  
    54. shared-network IPTV {
    55. subnet 10.20.0.0 netmask 255.255.252.0 {
    56. option subnet-mask 255.255.252.0;
    57. option domain-name "mydomain.net";
    58. option domain-name-servers 10.16.12.10;
    59. option routers 10.20.3.254;
    60. option broadcast-address 10.20.3.255;
    61. option ntp-servers 10.16.12.22;
    62. pool {
    63. range 10.20.2.70 10.20.2.250;
    64. allow members of "all";
    65. allow members of "AmiNET110 upgrd";
    66. allow members of "AmiNET110 all";
    67. allow members of "AmiNET110 mboot";
    68. }
    69. }
    70. }

    Now, restart dhcpd server, plug the amino and power it… and VOILA !!
    I hope this is clear enough for you. Please comment if you need more details. Just remember it’s now 22:00 and I started all this at 19:00, so please don’t ask too newbie questions.

    ]]>     http://www.lecentre.net/blog/archives/694/feed 59     TrucTruc à SF, day 3-4 part 2 http://www.lecentre.net/blog/archives/384 http://www.lecentre.net/blog/archives/384#comments Wed, 24 Sep 2008 02:25:28 +0000 TrucTruc http://www.lecentre.net/blog/?p=384 Alors ce matin je n’ai pas eu le temps de mettre toutes les photo. Voila celles de dimanche soir, lundi, mardi. 

    Tout a commencé a la « welcome party » Oracle : plein de nourriture, des spectacles de danse hawaïenne et de youkoulélé :
     
     

     

     

    Et tous les gens qui faisaient la queue pour des bonbons (mais moi je suis passé devant) : 
          

    Il y avait même une fille qui se faisait tatouer avec des paillettes. Tout le monde se prenait en photo avec elle alors moi aussi. Mais bon, de près elle avait vraiment une vilaine peau : 
     
          

    Apres ça je suis allé au Pub. Normalement je suis trop petit, mais ils m’ont laissé rentrer (ils arrêtaient pas de dire « so cute » mais je sais pas ce que ca veut dire) :
           
     

    Et voila.

    Aujourd’hui j’ai vu les exposants. C’est drôle mais on dirait que personne ne regarde les stands. Les gens sont juste la pour les cadeaux. Du coup, je me suis fait des nouveaux amis :

    Encore une fois, a mon retours, Vachette et Chaussette dormaient… elles ont vraiment un probleme avec le Jet-Lag :

    Moi aussi j’ai envie de dormir maintenant… 

    ]]>     http://www.lecentre.net/blog/archives/384/feed 0     TrucTruc à SF, day 3-4 http://www.lecentre.net/blog/archives/379 http://www.lecentre.net/blog/archives/379#comments Tue, 23 Sep 2008 15:03:22 +0000 TrucTruc http://www.lecentre.net/blog/?p=379 J’ai pas encore eu le temps de mettre les photo de dimanche soir et lundi (oups, j’ai pas pris de photo lundi), mais voila celles de mardi matin. Levé a 6h du mat, j’ai pris un petit dej a 7h :
      

    MIAM!!!

    ]]>     http://www.lecentre.net/blog/archives/379/feed 2     DHL, F**K YOU ! http://www.lecentre.net/blog/archives/286 http://www.lecentre.net/blog/archives/286#comments Mon, 19 May 2008 09:10:19 +0000 Prune http://www.lecentre.net/blog/?p=286
    Want to buy something and get delivered by DHL ?

    DON’T !!

    or do so, but be prepared to have to stay at home the whole day, expecting your order. It seems DHL, at least in France, only deliver « between 8 and 17″. Can’t be more precise.

    Welcome to 2008 !

    ]]>     http://www.lecentre.net/blog/archives/286/feed 1     Fuppes DLNA Server compilation os Os X Leopard http://www.lecentre.net/blog/archives/284 http://www.lecentre.net/blog/archives/284#comments Wed, 30 Apr 2008 14:03:07 +0000 Prune http://www.lecentre.net/blog/?p=284

    Fuppes is a « free » Upnp and DLNA server. It can work on almost any system, from Linux to Os X :)

    While you will find some usefull help to install it on Leopard (check here), it may not be so easy.

    First of all, install Macports.
    Then, change your PATH environement variable so you have /opt/local/bin and /opt/local/sbin at the begining.
    Then, port install some packages :

    • autoconf
    • automake
    • ffmpeg (see my other post for compilation)
    • ImageMagick
    • simage
    • taglib
    • pcre
    • pkgconfig
    • SQLite3
    • libxml2
    • ossp-uuid
    • lame
    • flac
    • vorbis

    Other may be needed.

    Then, download the latest CVS trunk and install it :

    $ sudo svn co http://fuppes-svn.ulrich-voelkel.de/trunk fuppes
Password:
$ cd fuppes/
$ autoreconf -vfi
$ CFLAGS="-I/opt/local/include/libavformat -I/opt/local/include/libavcodec -I/opt/local/include -I/opt/local/include/libavutil -I/opt/local/include/libswscale" \
CPPFLAGS="-I/opt/local/include/libavformat -I/opt/local/include/libavcodec -I/opt/local/include -I/opt/local/include/libavutil -I/opt/local/include/libswscale" \
LDFLAGS="-L/opt/local/lib -R/opt/local/lib" \
./configure --prefix=/opt/fuppes --enable-video-transcoding
$ make
$ sudo make install

    Then, start fuppes and go on the web interface :
    /opt/fuppes/bin/fuppes
    Or start it as a standalone daemon :
    /opt/fuppes/bin/fuppesd

    Then browse to your IP on port 50865.

    Of course, if you have no time but got money, you can just buy the Eyeconnect software from Elgato…

    Cheers :)

    ]]>     http://www.lecentre.net/blog/archives/284/feed 3     101 et 32… http://www.lecentre.net/blog/archives/274 http://www.lecentre.net/blog/archives/274#comments Wed, 09 Apr 2008 13:21:25 +0000 Prune http://www.lecentre.net/blog/?p=274

    Et voila !!

    101eme article dans le blog, et 32 ans dans 2 jours. On fait la fête… WHOOOOHOOOO. et Voila. On passe a autre chose.

    Merci :)

    ]]>     http://www.lecentre.net/blog/archives/274/feed 3