"Server manager has detected that the processor on this computer is not compatible with Hyper-V" Error While Enabling Hyper-V Role

If you receive the below error during the installation of Hyper-V role :

"Server manager has detected that the processor on this computer is not compatible with Hyper-V.  To install this roll, the processor must have a supported version of hardware-assisted virtualization and that feature must be turned on in the BIOS."

First make sure you have Hardware Assisted Virtualization and DEP turned on BIOS. If you still see this error message after enabling those roles make sure you didn't enable the role using :

start /w ocsetup Microsoft-Hyper-V

If so you need to first uninstall it (start /w ocsetup Microsoft-Hyper-V /uninstall) then install using the GUI (Server Manager -> Add Roles)

Redhat Virtual Experience 2009

Redhat Virtual Experience 2009 online convention is available for replay :


http://www-2.virtualevents365.com/rhexp/

Eclipse Character Set Problem During Save

I'm using ECLIPSE as the Perl editor on my Windows machine together with EPIC Perl. If I copy/paste sample code from Perl books I get the error :

Save could not be completed.
Reason:
Some characters cannot be mapped using "Cp1254" character encoding.
Either change the encoding or remove the characters which are not supported by the "Cp1254" character encoding..

In order to overcome this problem go Window > Preferences > General > Content Types > Text > Perl Source Files > Default Encoding and make it UTF-8

How to see the path of a process that's listening on specific port

From time to time you can have multiple instances of Apache installed on your server. As ps aux only shows the entire path, if you started the process using full path convention; you need to check /proc presudo file system to gather path information for the process. I generally use the below one liner to fetch this info :

[root@VM1 bin]# ls -altr /proc/`netstat -natp | grep 80 |  awk '{print $7}' | awk -F/ '{print $1}'`/exe

lrwxrwxrwx 1 root root 0 Nov 30 13:03 /proc/25316/exe -> /apache_test/bin/httpd

It uses netstat to gather process ID for specific port (also lsof can be used) then checks the /proc/$PROCESS_ID/exe soft link to see where the process resides. 

How to increase the Logging Level of NFSD

NFS Server logging is by default very good, but in case you need more logging for deeper inspection you can use :

echo 32767 > /proc/sys/sunrpc/nfsd_debug 

echo 32767 > /proc/sys/sunrpc/rpc_debug 

And for the client side use :

echo 32767 > /proc/sys/sunrpc/nfs_debug

In order to return back to old debugging level use :

echo 0 > /proc/sys/sunrpc/nfsd_debug

echo 0 > /proc/sys/sunrpc/rpc_debug

echo 0 > /proc/sys/sunrpc/nfs_debug 

Master Certificate in Experts-Exchange

I really find Experts-Exchange a great way of challenging yourself for different problems then you have in your daily job. As I contribute in various areas, I could finally got enough points to get Master Certificate. Next target is Guru ;-)

How to Rescan SCSI Bus in Linux

I have a RHEL5 lab on my laptop, that's hosted on Vmware 7. For my RHCE prep I usually add/remove disks while the VM is up and running (hot swap). In order to make Redhat recognize the new disk you need to trigger the rescan of the SCSI bus :

echo “- - -” > /sys/class/scsi_host/hostX/scan

instead of hostX use the HBA ID. It's host0 in my case. Immediately after you can see the new disk on "fdisk -l"


NOTE : This works on 2.6 kernel only.

SCVMM Unknown Error 0x80338104

If you get the below error message on SCVMM while connecting to your hosts :

VMM does not have appropriate permissions to access the WSMan resources on the vmtest server.

 (Unknown error (0x80338104))

Make sure you have the Service Account for VMM is under Local Administrator Group of each host you manage and this is not blocked by group policy enforcements.

SCVMM Error 403 : %ComputerName; is not a valid network computer name

While adding your Hyper-V hosts to your VMM inventory. If you get the error below :

Error 403 : %ComputerName; is not a valid network computer name

please make sure you are resolving the DNS entry for that host correctly. Especially check /etc/hosts file for any incorrect static entries (that's was the problem in my case)

Windows 2008 Failover Clustering and HP EVA Storage

If you are using HP EVA and getting the below error during the WCS validation phase in Windows 2008 :


Failed to read drive layout of Cluster disk 0 from node ****, status 21
Cluster Disk 0 does not support Persistent Reservation
Test failed. Please look at the test log for more information

Make sure Windows LH Host Mode is configured for your LUN. Below article is a guidance for Win2k8 and HP EVA config :

http://h20000.www2.hp.com/bc/docs/support/SupportManual/c01764063/c01764063.pdf

Page 17 :

Configuring EVA host connections

Make sure the Windows LH Host mode is enabled for each node on the Enterprise Virtual Array
(EVA) through command view. Depending on what command view you have installed, if in the drop-
down there is no "Microsoft Windows LH" then choose custom and type in the custom type field the
following HEX number 00000004198009A8 (Figure 1). If the wrong connection type is configured,
you cannot share the disks between the cluster nodes and the cluster check will fail with a non-SCSI-3
compliant message.

Tip of the Day : Vmware - Linux Virtual Consoles Keystroke from Vmware

As you know in linux the keystroke from GUI for virtual consoles is CTRL+ALT+Fx. As CTRL+ALT is the keystroke for releasing the mouse from Vm session, these functionalities conflicts. In order to achieve CTRL+ALT+Fx in Vmware :

1. Press CTRL+ALT+Space

2. Only Release Space leaving Ctrl+Alt pressed

3. Press the Function (Fx) key

The battle of hypervisor footprints

Microsoft's stance against the statement in Vmware's official site saying Hyper-V has a bigger footprint then ESXi :

http://blogs.technet.com/virtualization/archive/2009/08/12/hypervisor-footprint-debate-part-1-microsoft-hyper-v-server-2008-vmware-esxi-3-5.aspx

http://blogs.technet.com/virtualization/archive/2009/08/14/hypervisor-footprint-debate-part-2-windows-server-2008-hyper-v-vmware-esx-3-5.aspx

http://blogs.technet.com/virtualization/archive/2009/08/17/hypervisor-footprint-debate-part-3-windows-server-2008-hyper-v-vmware-esxi-3-5.aspx

      Hyper-V Server 2008 vs ESXi 3.5 | June 2008 - June 2009
      Hyper-V: 82MB footprint increase with 26 patches
      ESXi: 2.7GB footprint increases with 13 patches
    Windows Server 2008 Hyper-V vs ESX 3.5 | January 2008 - June 2009
      Hyper-V: 408MB footprint increase with 32 patches
      ESX: 3GB footprint increases with 85 patches
    Windows Server 2008 Hyper-V vs ESXi 3.5 | January 2008 - June 2009
      Hyper-V: 408MB footprint increase with 32 patches
      ESX: 2.7GB footprint increases with 13 patches

and now Vmware's official reply :

http://blogs.vmware.com/virtualreality/2009/08/our-position-on-hypervisor-footprints-patching-vulnerabilities-and-whatever-else-microsoft-wants-to-throw-into-a-blog-post.html

I'm leaving the final decision to you :)

Linux Baby Rocker :)

There is no limit for Linux's usability...

http://www.youtube.com/watch?v=bYcF_xX2DE8

Source code of the shell script:

#!/bin/sh
while  [i= 1]
do
        eject
        eject t
done

What's new in SCVMM 2008 R2

From : http://www.microsoft.com/systemcenter/virtualmachinemanager/en/us/whats-new-R2.aspx

Support for new features of Windows Server 2008 R2

• Live Migration: Seen through the VMM console, this enables administrators to move a virtual machine between clustered hosts in a way that is completely transparent to the users connected to the virtual machine. This allows administrators greater flexibility in responding to planned downtime and provides higher machine availability. The basic requirements for Live Migration are that all hosts must be part of a Windows Server 2008 R2 failover cluster and host processors must be from the same manufacturer. Additionally all hosts in the cluster must have access to shared storage. No changes are required to existing virtual machines, network, or storage devices in moving from Quick Migration to Live Migration other than upgrading to  Windows Server 2008 R2 and VMM 2008 R2.
• Hot addition/removal of Storage: Allows the addition and removal of storage to virtualized infrastructure without interruption. Additionally, "live” management of virtual hard disk (VHDs) or iSCSI pass through disks, allows administrators to take advantage of additional backup scenarios and readily use mission critical and storage-intensive applications.
• New optimized networking technologies: VMM 2008 R2 supports two new networking technologies – Virtual Machine Queue (VMQ) and TCP Chimney – providing increased network performance while creating less of a CPU burden. NICs that support VMQ, create a unique virtual network queue for each virtual machine on a host that can pass network packets directly from the hypervisor to the virtual machine. This increases throughput as it bypasses much of the processing normally required by the virtualization stack. With TCP Chimney, TCP/IP traffic can be offloaded to a physical NIC on the host computer reducing CPU load and improving network performance.

Enhanced storage and cluster support

• Clustered Shared Volumes (CSV): Provides a single, consistent storage space that allows hosts in a cluster to concurrently access virtual machine files on a single shared logical unit number (LUN). CSV eliminates the previous one virtual machine per LUN restriction and coordinates the use of storage with much greater efficiency and higher performance. CSV enables the Live Migration of virtual machines without impacting other virtual machines sharing the same LUN. Enabling CSV on failover clusters is straightforward; many storage configuration complexities prior to CSV have now been eliminated.
• SAN migration into and out of clustered hosts: This allows virtual machines to migrate into and out of clusters using a SAN transfer, which saves the time required for copying the virtual machine file over the network.
• Expanded Support for iSCSI SANs: Previously, only one LUN could be bound to a single iSCSI target whereas now – with support now built into VMM 2008 R2 – multiple LUNS can be mapped to a single iSCSI target. This provides broader industry support for iSCSI SANs allowing customers more flexibility in choosing storage providers and iSCSI SAN options.
• Storage Migration: Quick Storage Migration enables migration of a VM’s storage both within the same host and across hosts while the VM is running with a minimum of downtime, typically less than 2 minutes. VMM 2008 R2 also supports VMware storage vMotion which allows the storage of a VMware VM to be transferred while the VM remains on the same host with no downtime.
• Rapid Provisioning:  Allows administrators to take advantage of SAN provider technologies to clone a LUN containing a VHD and present it to the host while still utilizing the VMM template so the OS customization and IC installation can be applied.
• Support for third party CFS: For users requiring a true clustered file system, VMM 2008 R2 supports third party file systems by detecting CFS disks and allows for deploying multiple VMs per LUN.
• Support for Veritas Volume Manager VMM 2008 R2 recognizes Veritas Volume Manager disks as a cluster disk resource.

Streamlined process for managing host upgrades:

• Maintenance Mode: Allows administrators to apply updates or perform maintenance on a host server by safely evacuating all virtual machines to other hosts on a cluster. Maintenance mode can be configured to use Live Migration to move the virtual machines or can put the workloads into a saved state to be safely reactivated when maintenance or upgrades are complete. Maintenance mode is enabled for all supported hypervisor platforms on Windows Server 2008 R2.

Other VMM 2008 R2 enhancements

• Support of disjoint domains: Reduces the complexity of reconciling host servers with differing domain names in Active Directory and DNS. In these situations, VMM 2008 R2 automatically creates a custom service principal name (SPN) configured in both AD and DNS allowing for successful authentication.
• Use of defined port groups with VMware Virtual Center: On installation, VMM 2008 R2 will present available port groups for VMM’s use with VMware vCenter thus allowing administrators to maintain control over which port groups are used.
• Queuing of Live migrations:  This feature enables users to do multiple Live Migrations without needing to keep track of other Live Migrations that are happening within the cluster. Detects when a Live Migration will fail due to another Live Migration already in progress and queues the request for later.
• Host compatibility checks: VM migration requires host hardware to be compatible; this feature provides a deep check for compatibility using Hyper-V and VMware compatibility check APIs. Administrators can check if the source host is compatible with the destination host before performing a migration and finding out the VM cannot start on the new host.  A related feature makes a VM compatible by turning off certain CPU features which makes the VM compatible with the hosts in the cluster.

Tip of the Day : Software - Free IMAP/SMTP/POP3 Solution For Windows

Today, my colleague asked me for an e-mail solution that we can use for a demo that includes SCOM notification functionality. As we don't have Exchange server for the demo, I googled and found the below solution :

http://www.hmailserver.com

The software is open-source and free. The setup is pretty straight forward. Just couple of Next's and Finishes. You can use SQL Compact, MYSQL or MSSQL as the back-end DB. The configuration is also very easy. Just setup your domain and accounts then you are ready to go.

Tip of the Day : SSHD - How to connect a server using SSH and without entering login credentials

From time to time you will need to connect your servers remotely and execute commands there using scheduled jobs. As the nature of these scheduled jobs/scripts, they have no capability of user interaction like entering user/pass information. (I'm talking about simple shell scripts, you can also use Perl's use Net::SSH::Perl for entering user/pass info) For these scenarios we have the below trick of generating RSA/DSA key pairs and putting it into the authorized_keys file:

[root@server-a ~]# ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):   --- leave empty
Enter same passphrase again:   --- leave empty

Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.

The key fingerprint is:
35:ee:f1:53:f6:d7:85:4b:65:c3:68:f0:b6:59:f5:50 root@server-a

[root@server-a ~]# scp .ssh/id_dsa.pub server-b:/root/.ssh/id_dsa_lr.pub

[root@server-b ~]# cd /root/.ssh/
[root@server-b ~]# cat id_dsa_lr.pub >> authorized_keys
[root@servera ~]# ssh server-b

Last login: Mon Sep  3 12:29:09 2007 from X.X.X.X

[root@server-b ~]#

This example gives server-a the ability of connecting server-b via SSH and without entering any user/pass information.

NOTE : You can also use this trick to connect your Windows boxes using Cygwin SSHD. I will give details on Cygwin on a future article.

Easter Egg of the day : Google Translates MySpace as YouTube

If you translate MySpace from English to Turkish you get YouTube :)

Tip of the day : Linux - Output a specific line

head -150 file_name.txt | tail -1

Shows the 150th line inside the file

Tip of the day : Linux - How to keep commands running in the background after logging out

Yes I know this is the 2nd tip of the day but this one is simple. Today a colleague of mine come to me with this scenario :

I'm starting a ping on console. Then I'm exiting console, and would like to return my ping session. How can I do this ?

Normally in order to send a command to background and redirect STDOUT & STDERR to a logfile we use :

ping localhost >> /var/log/neco.test 2>&1 &
[2] 27783

Even if you send a process to the background when you logout/exit from a shell session Linux shell sends a HUP signal and kills that process. So we need to detach this process from shell. At this point the command nohup helps us. nohup detach the process from shell and attach to initd which is the mother process of all :) So we modify our command as below to reach our target :

nohup ping localhost >> /var/log/neco.test 2>&1 &
[1] 27786

After this command we can exit the shell and check the status of the STDOUT from the log file :

tail -f /var/log/neco.test
64 bytes from necoPC (127.0.0.1): icmp_seq=105 ttl=64 time=0.023 ms
64 bytes from necoPC (127.0.0.1): icmp_seq=106 ttl=64 time=0.022 ms
64 bytes from necoPC (127.0.0.1): icmp_seq=107 ttl=64 time=0.019 ms

In order to kill the process we need to use kill command with process id.

Required Local OS Firewall Rules for SCVMM and Hyper-V Host Communication

Communication Details For HyperV&SCVMM

In order to manage HyperV Hosts using SCVMM below ports/protocols should be open on the firewall.

VMM Server

80 (HTTP, WS-MAN)
443 (HTTPS, BITS)
8100 (WCF Connections to PowerShell or Admin Console)

SQL Server

1433 (Remote SQL instance connection)
1434 (SQL browser service) - only needed for initial setup

Host / Library

80 (HTTP, WS-MAN)
443 (HTTPS, BITS)
3389 (RDP)
2179 (VMConnect on Hyper-V hosts for single-class console view)5900 (VMRC on Virtual Server hosts)

The list of all ports and protocols can be found in the official MS document :

http://technet.microsoft.com/en-us/library/cc764268.aspx

Most of the FW rules above has been created by the SCVMM Installer and the role setup wizard for IIS,HyperV.

Additionally during the deployment of the SCVMM agent on the HyperV host the SMB-IN 445 should be available on HyperV host because the Agent Installer file has been moved to the ADMIN$ share of the HyperV host.

Necessary Configuration For Remote Management

General Rule Groups You Must Enable in Windows Firewall to Allow Remote Management by an MMC Snap-in

In order to manage HyperV hosts remotely enable the below rule groups :

netsh advfirewall firewall set rule group="Windows Firewall Remote Management" new enable=yes

netsh advfirewall firewall set rule group=" Remote Administration" new enable=yes

For Device Manager apart from the rulegroups above you need to enable the GPO for :

Allow remote access to the PnP interface

For Disk Manager :

Make sure VDS service is running and enabled on startup. Also enable the below rule :

netsh advfirewall firewall set rule group=" Remote Volume Management" new enable=yes

Also in order to make HP System Management Homepage available enable TCP port 2381 on Hyper Host inbound rules.

Summary of Local Firewall Rules 

Below images shows all rules enabled on SCVMM and HyperV host to make remote management possible. The default Outbound rule for all profiles is “Allowed”. That’s why only INBOUND rules has been placed inside the document.

SCVMM Input :



Hyper-V Input :

 

Tip of the day : Networking - How to Find the Files to Backed Up in an UCS Archive on F5 Big IP LTM Load Balancer

Apart from the articles I decided to publish small tips on my website. Sometimes those kind of tips can be more useful then big documents. Todays tip is based on the F5 Big IP LTM Load Balancer. One of my favorite network device :) I used this command on 9.x should also be working on 10.

Files to be included inside UCS :

grep save.*.file /usr/libdata/configsync/cs.dat

Directories to be included inside UCS :

grep save.*.dir /usr/libdata/configsync/cs.dat

Excluded files from UCS :

grep save.*.ignore /usr/libdata/configsync/cs.dat

For more details check the F5 article on : https://support.f5.com/kb/en-us/solutions/public/4000/400/sol4422.html

Putting Digg Icon on your Blogger.com/Blogspot.com Posts

Under Layout->Edit Templates click Expand Widget Templates and replace the below code :

 <div class='post-header-line-1'/>

with this :

 <div class='post-header-line-1'>
<div style='float:right; margin-left:10px;'>
<script type='text/javascript'>
digg_url = '<data:post.url/>';
</script>
<script src='http://digg.com/tools/diggthis.js'
type='text/javascript'>
</script>
</div>
</div>

and Save Template

Oracle 10g AS Webcache Installation on RHEL4

After writing my post on RHCE, I remembered a document I wrote long time ago wrt Oracle 10g AS Webcache on RHEL4. I thought it can be useful so I’m sharing it on my blog.

INSTALLATION OF LINUX OS

Full OS + SW version overview

Webcache OS : Red Hat Enterprise 4
Webcache SW : Oracle Application Server Web Cache 10g Release 2
systat-5[1].0.5-11.rhel4.i386.rpm : Depending on what packages you have installed on the OS, this utility may not be installed on your system.

HW REQUIREMENTS

· VGA screen, keyboard, mouse
· Any PC which has following specs :
- Supported by RHEL 4
- at least 2 GIG of RAM
- at least 36 GIG HDISK
- at least 3 GIG-E COPPER ETHERNET INTERFACES or 2 GIGE COPPER ETHERNET + 1 10/100 MBIT ETHERNET IFS

The hardware used for the document is HP DL360 G5 with :

Intel(R) Xeon(R) CPU 5140 Quad Core @ 2.33GHz
2 Gig RAM
72*2 RAID 0+1 HDD
HP NC364T PCI Express Quad Port Gigabit

Install of Linux OS

1. Boot your computer with Red Hat Installation CD 1 / DVD.

NOTE : For Text installation of Red Hat. If you only have a keyboard without a mouse, type linux text + ENTER.

Then follow the items in graphical installation (the sequence of graphical and text install is the same)

Graphical installation of Red Hat.

- Press ENTER to begin graphical installation of Red Hat.

- Press Skip to skip media test.

- Click Next

- Select English for Installation Language and click Next

- Select U.S. English(or the appropriate language) for system keyboard and click Next

- Select Manually partition with Disk Druid and click Next

Disk partition sizes

The webcache which are installed on Hp DL360G5 with 2GB RAM and 72*2 (RAID 1+0) disks.

Device	Mount Point	Type	Size (MB)
/dev/cciss/c0d0p1	/boot	ext3	102
/dev/cciss/c0d0p2	/opt	ext3	11719
/dev/cciss/c0d0p3	/	ext3	5373
/dev/cciss/c0d0p5	/u01	ext3	3891
/dev/cciss/c0d0p6		swap	4095
/dev/cciss/c0d0p7	/usr	ext3	4095
/dev/cciss/c0d0p8	/var	ext3	3891
/dev/cciss/c0d0p9	/u02	ext3	8087
/dev/cciss/c0d0p10	/tmp	ext3	8189
/dev/cciss/c0d0p11	/home	ext3	8189
/dev/cciss/c0d0p12	/home2	ext3	rest (12339)

- Click Next to complete manual partitioning.

- Leave the boot loader settings as defaults, and click Next.

- Configure Ethernet interfaces

If you have multiple interfaces on your machine it will be best to enable them all by clicking the checkboxes of the required interfaces. Also give an appropriate hostname for the machine. The Quad Ethernet Card is not detected by the system at the initial setup we will install it later after the setup completes. Click Next

- Disable Firewall and SELinux

Disable Firewall and SELinux and click Next. These features are not required by our application. Click Proceed when you have a firewall warning.

- System language is default English

Leave the system language to default English(USA) and click Next

- Time zone

Select correct timezone depending your location.

I selected Europe/Brussels for time zone and click Next

- Enter root password and NEXT

- Customize software packages to be installed

Click Customize software packages to be installed and click Next

Please make sure that the following packages are installed :

gcc-3.4.3-22.1
gcc-c++-3.4.3-22.1
openmotif21-2.1.30-11.RHEL4.4
setarch-1.6-1
pdksh-5.2.14-30
sysstat-5.0.5-1
gnome-libs-1:1.4.1.2.90-44.1
libstdc++-3.4.3-22.1
libstdc++-devel-3.4.3-22.1
compat-libstdc++-296-2.96-132.7.2
compat-db-4.1.25-9
control-center-2.8.0-12
glibc-common-2.3.4-2.9
binutils-2.15.92.0.2-13
make-1:3.80-5
xscreensaver-4.18-5.rhel4.2

NOTE 1 : You can disable unnecessary packages like Web Server, Windows File Server, Printing Support etc.

NOTE 2 : gcc is required during intallation of ORACLE AS. So, even if you go for production install, then Development tools MUST ALSO be installed .

- Begin installation.

Click Next and Continue to begin installation.

- Reboot after installation completes

After installation completes click Reboot

- Appearance of welcome screen

After the reboot welcome screen will appear. Click Next.

- Accept license agreement

Accept license agreement and click Next.

- Configure correct date and time

Configure correct date and time, click Next.

- Display settings

Configure your display settings and click Next.

- Product registration (is not needed)

There is no need to register the product so

Next screen click Tell me why I need to register.. and click Next.

Next screen click I can not complete registration.. and click Next.

- Creation of system user (not needed)

Don’t create a system user click Next and then Continue.

- Complete post install tasks.

Click Next in the following two screens to complete post install tasks.

- Log on to the system

By using your credentials log on to the system.

- Post RHEL4 install tasks

- Installing HP NC364T PCI Express Quad Port Gigabit

1. First download the Quad Card Driver from

http://h18023.www1.hp.com/support/files/networking/us/download/27412.html

2. Install the source RPM package.

# rpm -ivh e1000-<version>.src.rpm

3. Build the binary RPM for the e1000 driver.

# cd /usr/src/redhat
# rpmbuild -bb SPECS/e1000.spec

4. Check for the existence of a current version of the e1000 package as follows

# rpm -q e1000

If an old version of the package exists, the RPM package should be removed.

# rpm -e e1000

Verify that the old e1000 package has been removed as follows:

# rpm -q e1000

5. Install the new RPM package. This installs the e1000 driver and man page.

Do NOT use the U (Upgrade) flag in the RPM command below - previous e1000 drivers must be removed as described in step 4 above before installing this version.

# rpm -ivh RPMS/<arch>/e1000-<version>.<arch>.rpm

The e1000.o module is installed in the following directory:

/lib/modules/<kernel_version>/kernel/drivers/net

On 2.6 kernels a e1000.ko module will be installed instead of e1000.o

6. Configure your network setting and address using the below config files :

/etc/sysconfig/network-scripts/ifcfg-eth*
/etc/sysconfig/network

8. You can now reboot your server. Upon reboot the network should start with the e1000 driver loaded and the correct network configuration.

To verify that the e1000 driver is loaded use the following command.

# lsmod

If e1000 is listed then the e1000 driver is loaded. You can also verify that the correct e1000 driver is loaded through any of the following methods. Note that version of the driver loaded should be same as that of the package version.;

Look for driver load messages in the system log.

#dmesg | grep Intel

You should see messages of the following type,

Intel(R) PRO/1000 Network Driver - version x.x.x

- Create /usr/system directory and add it to PATH variable.

In this directory we will add additional tools (as root user) which might be very handy.

mkdir /usr/system

then edit /etc/profile and add following line after the line containing :

after pathmunge /usr/X11R6/bin

add following 2 lines :

#needed for /usr/system
pathmunge /usr/system after

This will make sure that the /usr/system dir is in your path and that commands put in there will always be executed. Exit the session and relogin the session to make the changes effective. Check with echo $PATH to verify if /usr/system is in your path variable.

- Disable some useless processes with chkconfig

chkconfig --level 2345 cups off
chkconfig --level 2345 sendmail off

INSTALL ORACLE 10GR2 WEBCACHE

Preinstall Tasks for Oracle10gR2 Webcache

- Change the kernel security parameters

Add the following lines to the /etc/sysctl.conf file:

kernel.msgmnb=65535
kernel.msgmni=2878
kernel.msgmax = 8192
kernel.shmmax=4294967295
fs.file-max=206173
kernel.sem = 256 32000 100 142
kernel.shmmni=4096
net.ipv4.ip_local_port_range = 20000 65000

Then run :

/sbin/sysctl –p

Add the following lines to the /etc/security/limits.conf file:

* soft nproc 16384
* hard nproc 16384
* soft nofile 65536
* hard nofile 65536

Create new groups and oracle user (as root)

groupadd oinstall
groupadd dba
groupadd oper

useradd -g oinstall -G dba oracle

passwd oracle

Create the directories in which the Oracle software will be installed:

mkdir -p /u01/app/oracle/product/10gr2
chown -R oracle:oinstall /u01
chown -R oracle:oinstall /u02

Setup ORACLE environment

As oracle user edit the /home/oracle/.bash_profile file and after the line :

“# User specific environment and startup programs “ add following entries :

ORACLE_BASE=/u02
ORACLE_HOME=/u01/oracle/product/10gr2
ORACLE_SID=test
ORACLE_TERM=xterm
export ORACLE_BASE
export ORACLE_HOME
export ORACLE_SID
export ORACLE_TERM

# Set shell search paths
PATH=$PATH:$ORACLE_HOME/bin:$HOME/bin
export PATH
unset USERNAME

Make sure that export PATH and unset USERNAME commands are created as above.

NOTE : We are doing these steps as oracle user

- Transfer and install systat-5[1].0.5-11.rhel4.i386.rpm

Oracle requires sysstat packages to install completely. Check first if it is installed by running the sar (sar is one of the apps installed by sysstat) command.

If the OS cannot find then it has to be reinstalled.

Download systat-5[1].0.5-11.rhel4.i386.rpm and transfer it to the root directory of the WC server.

as root run :

gzip –d sysstat-[1].0.5-11.rhel4.i386.rpm.gz

followed by

rpm –ivh sysstat-5[1].0.5-11.rhel4.i386.rpm

note it is possible that rpm will not detect the [] characters in the rpm filename. In that case first rename sysstat-5[1].0.5-11.rhel4.i386.rpm to sysstat.rpm

mv sysstat-5[1].0.5-11.rhel4.i386.rpm to sysstat.rpm

and then run

rpm –ivh sysstat.rpm

Run sar to check if sysstat installed correctly. if you get the error :

cannot find directory /var/log/sa/sa29 then reboot the machine.

- Transfer oracle SW in /u01/app/oracle/SW directory

Transfer as_linux_x86_webcache_101202.cpio file into /u01/app/oracle/SW and run :

cpio -idmv < as_linux_x86_webcache_101202.cpio

NOTE 1 : You can transfer the cpio file as root user, then move it into ./SW dir and then do

chmod 777 as_linux_x86_webcache_101202.cpio
chown oracle:oinstall as_linux_x86_webcache_101202.cpio

NOTE 2 : Do NOT forget the < between –idmv and as_linux….cpio !

NOTE 3 : After decompressing using cpio you can remove the original as_linux_x86_webcache_101202.cpio file in order to save some diskspace

Running RunInstaller

As oracle user open a terminal and then run :

/u01/app/oracle/SW/Disk1/runInstaller

following screen will popup :



- Specify Inventory directory and credentials.

IMPORTANT : Change the default /u02/oraInventory to : /u01/app/oracle

IMPORTANT : Make sure that the Operating System group name is oinstall AND NOT dba

Then click NEXT.

- Run /u01/app/oracle/orainstRoot.sh

Important : A popup window will appear telling you need to run /u01/app/oracle/orainstRoot.sh as root before pushing CONTINUE. So open a terminal and su – to root and execute that script.

As root (so in a different terminal), run /u01/app/oracle/orainstRoot.sh before proceeding with the install.

[root@wc oraInventory]# /u02/oraInventory/orainstRoot.sh

Creating the Oracle inventory pointer file (/etc/oraInst.loc)

Changing groupname of /u02/oraInventory to oinstall.

NOTE : If you get the message to run u02/oraInventory/orainstRoot.sh then this means that at the beginning or oracle you aceepted the default values which is not recommended. In that case restart the install of oracle using the correct install directory

Click continue after running run /u01/app/oracle/orainstRoot.sh

Specify file locations

Leave the Source path as /u01/app/oracle/SW/Disk1/stage/products.xml

Leave destination name as oracleas1

Change Destination path to : /u01/oracle/product/10gr2

NOTE : This is the same as ORACLE_HOME. (do : set | grep ORACLE as oracle user in a separate terminal to check)

- Specify Web Cache Admin Password (at least one char should be numeric)

- Product-specific prerequisite checks

The installer will now execute some checks.

IMPORTANT NOTE : in case you get a warning in the prerequisite checks

If you did not install sysstat-5-XX before as mentioned in the manual above then you will get a warning.

Depending on your installed packages during LINUX RHEL 4 OS, it might be that sysstat-5- is not installed.This means that the checks will result in following error :

“Checking recommended operating system packages” with status = WARNING.

Further examination of the window tells us that sysstat-5-0.5.-1 is not installed.

- Begin Oracle Universal Cache Top 10.1.2.1.0 installation

Click Install to begin installation.

- After the installation execute /u01/oracle/product/10gr2/root.sh as root

So open new terminal window and as root then run

/u01/oracle/product/10gr2/root.sh

accept the default /usr/local/bin path

Running Oracle10 root.sh script...

The following environment variables are set as:

ORACLE_OWNER= oracle
ORACLE_HOME= /u01/oracle/product/10gr2

Enter the full pathname of the local bin directory: [/usr/local/bin]:

Copying dbhome to /usr/local/bin ...
Copying oraenv to /usr/local/bin ...
Copying coraenv to /usr/local/bin ...

Creating /etc/oratab file...
Adding entry to /etc/oratab file...

Entries will be added to the /etc/oratab file as needed by Database Configuration Assistant when a database is created Finished running generic part of root.sh script.

Now product-specific root actions will be performed.

After execution of the root.sh script, click OK

- Note the end of installation message

Click exit to finish installation

Post-install Tasks for Oracle10gR2 Webcache

- Change the default runlevel to 3

as root user, vi /etc/inittab and look for the line :

id:5:initdefault:

and modify it to

id:3:initdefault:

runlevel 3 uses less memory + reboot the machine

- Create some aliases (optional):

As root in /etc/bashrc, look for following line …

#Even for non-interactive, non-login shells

… and insert following lines.

alias xmlvid='vi /u01/oracle/product/10gr2/webcache/webcache.xml'
alias vi='vi'
alias gobin='cd /u01/oracle/product/10gr2/webcache/bin'
alias goconf='cd /u01/oracle/product/10gr2/webcache'
alias gologs='cd /u01/oracle/product/10gr2/webcache/logs'
alias gobin='cd /u01/oracle/product/10gr2/webcache/bin'
alias eventlog='tail -f /u01/oracle/product/10gr2/webcache/logs/event_log'
alias accesslog='tail -f /u01/oracle/product/10gr2/webcache/logs/access_log'
alias wcstatus='/u01/oracle/product/10gr2/webcache/bin/webcachectl status'
alias wcstart='/u01/oracle/product/10gr2/webcache/bin/webcachectl start'
alias wcstop='/u01/oracle/product/10gr2/webcache/bin/webcachectl stop'

By doing this, these aliases will be visible both for root and oracle users

- Stop the WC processes

As oracle user do wcstop.

Check with wcstatus if all 3 processes are stopped

Change privilege rights of webcached binary

In the “gobin”(see aliases) directory the privileges of wecached by default are :

#ls –al webcached :

-rwxr-x--- 1 oracle oinstall 17074 Aug 21 17:01 webcached

In order to open ports lower then 1024 (port 80) you need to change ownerschip as root as follows :

[root@wc]# chown root webcached
[root@wc]# chmod 4750 webcached

After this operation the privileges of webached MUST look as follows : (of course, date can be different)

-rwsr-x--- 1 root oinstall 3565001 Aug 21 17:01 webcached

NOT doing this will result that webcached will not have the prvileges to open port 80 ( < 1024) and will not start.

- Running webcached with Root Privilege

Webcached must run as the root privilege in the following cases:

· Privileged port numbers less than 1024 are being used for OracleAS Web Cache listening ports.
· There are more than 1,024 file descriptors being used for connections to OracleAS Web Cache.
· The current opmnctl or webcachectl user does not match the configured user in the Process Identity page (Properties > Process Identity) of OracleAS Web Cache Manager.

To run webcached with the root privilege:

1. Change the process identity of the OracleAS Web Cache processes.

To establish the process identity of a restricted user first connect to the WC from http://localhost:9400 and:

a. In the navigator frame, select Properties > Process Identity.

The Process Identity page appears in the right pane.

b. In the Process Identity page, choose Change IDs.

The Change Process Identity dialog box appears.

c. Enter the new user in the New User ID field and the group ID of the user in the New Group ID field.

d. Click Submit.

e. In the OracleAS Web Cache Manager main window, click Apply Changes.

2. Use the webcache_setuser.sh script as follows to run OracleAS Web Cache as a different user, such as root/root, and add set-user ID permission to the webcached executable:

3. webcache_setuser.sh setidentity <user_ID

4. where <user_ID> is the user you specified in the New User ID field of the Process Identity page.

For example, to run OracleAS Web Cache as root/root, enter:

webcache_setuser.sh setidentity root

5. Log out of the computer, and re-login as the user configured in the Process Identity page.

- Reboot the WC

Make sure that alls WC processes are stopped ( wcstatus or ps –ef | grep oracle) and reboot WC.

Then you will be sure that WC is started up in runlevel 3.

Configuration of WC

Start WC + connect to management port 9400

Make sure that WC processes are running

Login as root and do wcstatus. if not running then type wcstart and check again if they are running.

Now from any windows machine that has IP connectivity to the WC, open the browser and type

http://WCIP:9400

at the right-top of the window screen, select “LOG on to OracleAS Web Cache Manager”

NOTE : The default listening port of the WC for management has been changed from 4000 to 9400.

Optimizing your WEBCache

http://download-west.oracle.com/docs/cd/B14099_19/core.1012/b14001/optwebc.htm#CIHJFBDI

Troubleshooting your WEBcache

http://download-uk.oracle.com/docs/cd/B14099_02/caching.1012/b14046/trouble.htm

RHCE – Day 1

Before starting this series, I want to tell you a boring story about myself. The story begins at 2000 when I was a high school student making web design/programming to earn my pocket money:) These days I recognised a web page called Brainbench which makes online exams for certification. I passed their exam to get ceritified for HTML 4.0

From that point on, I really understood the necessity of certification because the preparation process gives you much more then the paper you earn at the end. After that, my next step was MCSE 2000. I remember that I was studying the exam on my Intel Pentium 133 running Win2k like a turtle. The preparation phase was funny but in the end as an high school student I didn’t have enough money to pay for the exam fees, so unfortunately I didn’t have a chance to be MCSE at that age :(

And then comes the collage years. This time I have a new target : Networking and Cisco Certifications. And now I have enough money coming from the scholarships ;-) After 3 years of self paced and computer based preparation and with the help of Boson Netsim and Dynamips I passed all the exams (In total 5) that are necessary for CCNA & CCNP + 1 for CCIP (QoS Exam)

After graduating from school I applied a job in a big telco vendor. They were so suprised to see a new graduate with CCNA, CCNP.  As there were a lot of paper certified people around, they want to verify this. After a very long technical interview they got convinced and hired me. 

Certification has great importance in my life. I found certification as a great tool to advance expertise about technical areas. Currently I have IWA HTML 4.0, CCNA, CCNP, CCIP, MCTS Windows Server 2008 Active Directory: Configuration, MCTS Windows Server 2008 Network Infrastructure: Configuration, MCTS Windows Server Virtualization Hyper-V and MCITP : Windows 2008 Server Admin. All of these certification tacks helped me build knowledge on varios technologies in a very proper way. But will I stop ? Of course not :) Next step is RHCE (RedHat Certified Engineer)

Why RHCE ?

- As a network and system admin the middleware I was working on is mostly UNIX based (Redhat, Solaris, Secureplatform etc..) I have enough hands on and expertise but I don’t have a real proof.
- My interview with Google reminded me the importance of Linux again.
- RHCE is lab based not one of these paper certifications.
- One of the most recognised certification by the industry.

Enough pep talk let’s begin. First the preparation materials :

1. RHEL 5 Unleashed by Tommy Fox
2. RHCE Red Hat Certified Engineer Linux Study Guide (Exam RH302), Fifth Edition byMichael Jang 
3. Slides from RH033, RH133, RH253 Classes

and the tools :

1. VmWare Workstation/Server for my laptop prep.
2. Vmware ESXi for the lab. (maybe also Hyper-V with RH Integration tools)

and of course RHEL5 iso from RHN and a new wallpaper for motivation :D

http://spinix.deviantart.com/art/LINUX-CCCP-84492543

Installation Methods

CD/DVD-ROM : Classical method for installing
Hard Disk : Requires an HD partition(xt2/3,vfat) accessible by the installer.
Network Install : NFS, FTP or HTTP based using PXE/Boot.iso
Kickstart : Unattended method of installation

NOTE : Boot.iso file can be located under RHELInstall CD1 / DVD ./images folder. 

In order to choose for an installation method use “linux askmethod” at the boot prompt

 

 

 

 

Install Phases :

- Select Language
- Select Keyboard Layout
- Installation number. (This allows us to use additional components like virtualization)
- Partition layout and RAID

IMPORTANT NOTE : If /boot or /boot/efi is a RAID. It must be RAID1.

- GRUB (Boot loader) config
- Network Config
- Packages to be installed

After Install those 2 files are created :

1. /root/install.log   --   Install Log File
2. /root/anaconda-ks.cfg   --   Sample Kickstart File based on the parameters used during the installation. I will examine this file in a future session.

Yes I know this was a less technical more personal session but next days  I will enrich the content and add more notes about my preparation track. Hope to see you in the next part of the RHCE series.

Blogspot.com & Windows Live Writer & Images

I updated my Hyper-V post using Windows Live Writer. My first trial resulted with : HTTP 403 (Not Authorized) message. After a quick search in my dear friend Google, I learned that you need to create a Web Album under Picasa Web Albums (also a Google product) named : “Windows Live Writer” to overcome this issue.

Hyper-V Tagging & Teaming with HP NCU

Yes, finally the first real post of my blog :) This article summarize the NIC Teaming & Tagging support on Hyper-V. Scenarios has been tested on HP Blade systems with HP NCU utility. Windows 2008 Datacenter Core Edition has been used for the parent partition.

In order to check VLAN tagging with teaming 2 scenarios have been tested :

1. NIC Teaming and Tagging with HP NCU (Works OK)
2. NIC Teaming with NCU and Tagging at HyperV Level (NOK)

As stated above only the first scenario works. This scenario creates lots of adapter overhead on the OS level. For instance lets assume that you have 2 physical interfaces which are teamed and you create 4 VLANs on top. After making the necessary configurations you have :

2 Interface for the actual pNICs.
1 Interface for Teamed NIC
4 Interface For the VLANs
4 Interface For the Virtual Switches

This creates some management overhead for the interfaces but this is the only supported scenario by Hyper-V currently.

Also with this setup the parent partition always have L2 access to all VLANs because the virtual network adapter at parent partition level is connected to the Virtual Switch by default. In order to create a External network without parent partition attached you can use the Poweshell scripts mentioned on the below pages.

http://blogs.msdn.com/virtual_pc_guy/archive/2009/02/19/script-creating-an-external-only-virtual-network-with-hyper-v.aspx

http://blogs.msdn.com/robertvi/archive/2008/08/27/howto-create-a-virtual-swich-for-external-without-creating-a-virtual-nic-on-the-root.aspx

Also after creating a virtual network you can disable this virtual interface. On server Core :

netsh interface show interface
netsh interface set interface name=”Name of Interface” disabled

HYPER-V NETWORKING

In order to understand the networking logic in Hyper-V it’s strongly recommended to check the below document :

http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=3fac6d40-d6b5-4658-bc54-62b925ed7eea&displaylang=en

As stated by the above diagram when you bind a virtual network to a physical interface, a Virtual Network Adapter has been created on OS level. This virtual adapter has all the network binding like TCP/IP. After this operation the existing Network Adapter for the pNIC has only a binding for the HyperV Virtual Switch protocol.

In order to make OS level application work over the new created virtual adapter make sure appropriate tagging has been created also on host level.

IMPORTAT NOTE: Make sure you don’t create any Virtual Switch on the pNIC that is used for communication between SCVMM and Hyper-V host. Leave at least one NIC or Teamed Interface for this communication.

NIC Teaming and Tagging with HP NCU

HyperV has NO teaming capability at Hypervisor level like VmWare ESX/ESXi as mentioned in KB968703 (http://support.microsoft.com/kb/968703) :

Since Network Adapter Teaming is only provided by Hardware Vendors, Microsoft does not provide any support for this technology thru Microsoft Product Support Services. As a result, Microsoft may ask that you temporarily disable or remove Network Adapter Teaming software when troubleshooting issues where the teaming software is suspect.

If the problem is resolved by the removal of Network Adapter Teaming software, then further assistance must be obtained thru the Hardware Vendor.

This support has to be maintained at Hardware Level. For HP we used HP NCU for teaming purpose.

IMPORTANT NOTE : HP NCU have to be installed AFTER enabling HyperV role.

http://h20000.www2.hp.com/bc/docs/support/SupportManual/c01663264/c01663264.pdf

http://support.microsoft.com/kb/950792

OS Level Settings For Teaming+Tagging

In order to check HyperV with Teaming + tagging :

1. Windows 2008 Datacenter Core installed
2. HyperV role activated with necessary KB Updates.

http://support.microsoft.com/?kbid=950050
http://support.microsoft.com/?kbid=956589
http://support.microsoft.com/?kbid=956774

3. Using HpTeam Utility NFT based teaming has been configured.
4. NCU Installed together with Broadcom and Intel Drivers.

5. VLAN1,1101,1102,1103,1104 has been setup on the teamed interface.

Hyper-V Level Settings For Teaming+Tagging

1. Create a Virtual Network on the Hyperv host for each VLAN and bind this network to each logical tagged interface that has been created by NCU.

NOTE : Access host through VLAN option enables the parent partition talk with that VLAN.

2. On the HOST created to VMs for testing. Each VM has been connected to different virtual switch as below

3. After setting tagging both on Host and VM level ping between different VLANs is possible. (The switch has been configured for interVLAN routing)

NIC Teaming with NCU and Tagging at HyperV Level

1. Windows 2008 Datacenter Core installed
2. HyperV role activated with necessary KB Updates

http://support.microsoft.com/?kbid=950050
http://support.microsoft.com/?kbid=956589
http://support.microsoft.com/?kbid=956774

3. NCU Installed together with Broadcom and Intel Drivers.
4. Only Teaming has been configured with NCU.
5. A virtual switch has been created at HyperV level and necessary tagging made for the Host Virtual Adapter.
6. Virtual guest machines has also configured with tagged vNICs.
7. Network connectivity between the VMs does NOT work.