--- unixtoolbox.xhtml   23 Jun 2008 19:35:22 -0000   1.24
+++ unixtoolbox.xhtml   8 Aug 2008 17:22:45 -0000   1.26
@@ -8,10 +8,10 @@
   <title>Unix Toolbox</title>
   <link rel="icon" href="data:image/x-icon;base64,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" />
   <meta name="author" content="Colin Barschel c@cb.vu" />
-  <meta name="copyright" content="Copyright © 2007-2008 Colin Barschel. Some rights reserved under Creative Commons [Attribution - Share Alike]" />
+  <meta name="copyright" content="Copyright (c) 2007-2008 Colin Barschel. Some rights reserved under Creative Commons [Attribution - Share Alike]" />
   <meta name="description" content="A collection of Unix/Linux/BSD commands and tasks which are useful for IT work or for advanced users, a compact and practical reference." />
   <meta name="abstract" content="Unix Toolbox a compact and practical reference for sysadmins and advanced users." />
-  <meta name="subject" content="Unix Toolbox revision 12" />
+  <meta name="subject" content="Unix Toolbox revision 13.1" />
   <meta name="keywords" content="Unix Toolbox, Unix tools, Unix, FreeBSD, Linux, commands list, sysadmin, practical guide, advanced reference, common Linux tasks, syntax reminder, howtos, ssh tunnels, rsync, ssl certificates" />
   <style type="text/css" >
 /* basic CSS common to all media */
@@ -402,7 +402,7 @@
 This document is a collection of Unix/Linux/BSD commands and tasks which are useful for IT work or for advanced users. This is a practical guide with concise explanations, however the reader is supposed to know what s/he is doing.<br /><br />
 </div>
 <div class="footerfirst">
-Unix Toolbox revision 13<br />
+Unix Toolbox revision 13.1<br />
 The latest version of this document can be found at <a href="http://cb.vu/unixtoolbox.xhtml">http://cb.vu/unixtoolbox.xhtml</a>. Replace .xhtml on the link with <a href="http://cb.vu/unixtoolbox.pdf">.pdf</a> for the PDF version and with <a href="http://cb.vu/unixtoolbox.book.pdf">.book.pdf</a> for the booklet version. On a duplex printer the booklet will create a small book ready to bind. <span class="web">This XHTML page can be converted into a nice PDF document with a CSS3 compliant application (see the <a class="xref" href="#bourneexample">script example</a>).</span> See also the <a href="http://cb.vu/unixtoolbox">about page</a>.<br />
 Error reports and comments are most welcome - <a href="mailto:c\at\cb.vu">c@cb.vu</a> Colin Barschel.
 <p class="copyright">&#169; <a href="mailto:c_at_cb.vu">Colin Barschel</a> 2007-2008. <a rel="license" href="http://creativecommons.org/licenses/by-sa/3.0/">Some rights reserved under Creative Commons</a>.
@@ -706,7 +706,7 @@
 *default release=cvs delete tag=RELENG_7
 src-all
 </pre>
-To modify and rebuild the kernel, copy the generic configuration file to a new name and edit it as needed (you can also edit the file <code>GENERIC</code> directly). To restart the build after an interuption, add the option <code>NO_CLEAN=YES</code> to the make command to avoid cleaning the objects already build.
+To modify and rebuild the kernel, copy the generic configuration file to a new name and edit it as needed (you can also edit the file <code>GENERIC</code> directly). To restart the build after an interruption, add the option <code>NO_CLEAN=YES</code> to the make command to avoid cleaning the objects already build.
 <pre># cd /usr/src/sys/i386/conf/
 # cp GENERIC MYKERNEL
 # cd /usr/src
@@ -741,7 +741,7 @@
 # pgrep -l sshd                      <span class="cmt"># Find the PIDs of processes by (part of) name</span>
 # echo $$                            <span class="cmt"># The PID of your shell</span>
 # fuser -va 22/tcp                   <span class="cmt"># List processes using port 22 (Linux)</span>
-# fuser -va /home                    <span class="cmt"># List processes accessing the /home partiton</span>
+# fuser -va /home                    <span class="cmt"># List processes accessing the /home partition</span>
 # strace df                          <span class="cmt"># Trace system calls and signals</span>
 # truss df                           <span class="cmt"># same as above on FreeBSD/Solaris/Unixware</span>
 # history | tail -50                 <span class="cmt"># Display the last 50 used commands</span>
@@ -1018,7 +1018,7 @@
 <pre># cdrecord dev=ATAPI -scanbus</pre>
 And burn the CD/DVD as above.
 <h4>dvd+rw-tools</h4>
-The <a href="http://fy.chalmers.se/~appro/linux/DVD+RW/">dvd+rw-tools</a> package (FreeBSD: ports/sysutils/dvd+rw-tools) can do it all and includes <code>growisofs</code> to burn CDs or DVDs. The examples refere to the dvd device as <code>/dev/dvd</code> which could be a symlink to <code>/dev/scd0</code> (typical scsi on Linux) or <code>/dev/cd0</code> (typical FreeBSD) or <code>/dev/rcd0c</code> (typical NetBSD/OpenBSD character SCSI) or <code>/dev/rdsk/c0t1d0s2</code> (Solaris example of a character SCSI/ATAPI CD-ROM device). There is a nice documentation with examples on the <a href="http://www.freebsd.org/handbook/creating-dvds.html">FreeBSD handbook chapter 18.7</a><span class="fn">http://www.freebsd.org/handbook/creating-dvds.html</span>.
+The <a href="http://fy.chalmers.se/~appro/linux/DVD+RW/">dvd+rw-tools</a> package (FreeBSD: ports/sysutils/dvd+rw-tools) can do it all and includes <code>growisofs</code> to burn CDs or DVDs. The examples refer to the dvd device as <code>/dev/dvd</code> which could be a symlink to <code>/dev/scd0</code> (typical scsi on Linux) or <code>/dev/cd0</code> (typical FreeBSD) or <code>/dev/rcd0c</code> (typical NetBSD/OpenBSD character SCSI) or <code>/dev/rdsk/c0t1d0s2</code> (Solaris example of a character SCSI/ATAPI CD-ROM device). There is a nice documentation with examples on the <a href="http://www.freebsd.org/handbook/creating-dvds.html">FreeBSD handbook chapter 18.7</a><span class="fn">http://www.freebsd.org/handbook/creating-dvds.html</span>.
 <pre>                       <span class="cmt"># -dvd-compat closes the disk</span>
 # growisofs -dvd-compat -Z /dev/dvd=imagefile.iso     <span class="cmt"># Burn existing iso image</span>
 # growisofs -dvd-compat -Z /dev/dvd -J -R /p/to/data  <span class="cmt"># Burn directly</span>
@@ -1043,7 +1043,7 @@
 # umount /mnt; mdconfig -d -u 0; rm /usr/vdisk.img    <span class="cmt"># Cleanup the md device</span>
 </pre>
 The file based image can be automatically mounted during boot with an entry in /etc/rc.conf and /etc/fstab. Test your setup with <code># /etc/rc.d/mdconfig start</code> (first delete the md0 device with <code># mdconfig -d -u 0</code>).<br />
-Note however that this automatic setup will only work if the file image is NOT on the root partition. The reason is that the /etc/rc.d/mdconfig script is executed very early buring boot and the root partition is still read-only. Images located outside the root partition will be mounted later with the script /etc/rc.d/mdconfig2.<br />
+Note however that this automatic setup will only work if the file image is NOT on the root partition. The reason is that the /etc/rc.d/mdconfig script is executed very early during boot and the root partition is still read-only. Images located outside the root partition will be mounted later with the script /etc/rc.d/mdconfig2.<br />
 /boot/loader.conf:
 <pre>md_load="YES"</pre>
 /etc/rc.conf:
@@ -1119,7 +1119,7 @@
 </pre>
 Additional commands which are not always installed per default but easy to find:
 <pre># arping 192.168.16.254     <span class="cmt"># Ping on ethernet layer</span>
-# tcptraceroute -f 5 cb.vu  <span class="cmt"># uses tcp instead of icmp to trace throught firewalls</span>
+# tcptraceroute -f 5 cb.vu  <span class="cmt"># uses tcp instead of icmp to trace through firewalls</span>
 </pre>
 
 <h2 id="routing">Routing</h2>
@@ -1500,7 +1500,7 @@
 <div id="ssh"><h1><a>SSH SCP</a></h1>
 <p class="xrefp"><a class="xrefp" href="#publickey">Public key</a> | <a class="xrefp" href="#sshfingerprint">Fingerprint</a> | <a class="xrefp" href="#scp">SCP</a> | <a class="xrefp" href="#sshtunnel">Tunneling</a></p>
 <h2 id="publickey">Public key authentication</h2>
-Connect to a host without password using public key authentication. The idea is to append your public key to the authorized_keys2 file on the remote host. For this example let's <b>connect <i>host-client</i> to <i>host-server</i></b>, the key is generated on the client.
+Connect to a host without password using public key authentication. The idea is to append your public key to the authorized_keys2 file on the remote host. For this example let's <b>connect <i>host-client</i> to <i>host-server</i></b>, the key is generated on the client. With cygwin you might have to create your home directoy and the .ssh directory with <code># mkdir -p /home/USER/.ssh</code>
 <ul>
   <li>Use ssh-keygen to generate a key pair. <code>~/.ssh/id_dsa</code> is the private key, <code>~/.ssh/id_dsa.pub</code> is the public key.</li>
   <li>Copy only the public key to the server and append it to the file <code>~/.ssh/authorized_keys2</code> on your home on the server.</li>
@@ -2012,6 +2012,7 @@
 # touch index.txt
 </pre>
 
+If you intend to get a signed certificate from a vendor, you only need a certificate signing request (CSR). This CSR will then be signed by the vendor for a limited time (e.g. 1 year).
 <h2 id="createca">Create a certificate authority</h2>
 
 If you do not have a certificate authority from a vendor, you'll have to create your own. This step is not necessary if one intend to use a vendor to sign the request. To make a certificate authority (CA):
@@ -2026,6 +2027,7 @@
 # openssl req -nodes -new -keyout newkey.pem -out newreq.pem \
 -config /etc/ssl/openssl.cnf                <span class="cmt"># No encryption for the key</span>
 </pre>
+Keep this created CSR (<code>newreq.pem</code>) as it can be signed again at the next renewal, the signature onlt will limit the validity of the certificate. This process also created the private key <code>newkey.pem</code>.
 
 <h2 id="signcert">Sign the certificate</h2>
 The certificate request has to be signed by the CA to be valid, this step is usually done by the vendor. <i>Note: replace "servername" with the name of your server in the next commands</i>.
@@ -2385,7 +2387,7 @@
   <li><code>noerror</code> &#160; &#160; &#160; continue after read errors (e.g. bad blocks)</li>
   <li><code>sync</code> &#160; &#160; &#160; pad every input block with Nulls to ibs-size</li>
 </ul>
-The default byte size is 512 (one block). The MBR, where the partiton table is located, is on the first block, the first 63 blocks of a disk are empty. Larger byte sizes are faster to copy but require also more memory.
+The default byte size is 512 (one block). The MBR, where the partition table is located, is on the first block, the first 63 blocks of a disk are empty. Larger byte sizes are faster to copy but require also more memory.
 <h3>Backup and restore</h3>
 <pre># dd if=/dev/hda of=/dev/hdc bs=16065b                <span class="cmt"># Copy disk to disk (same size)</span>
 # dd if=/dev/sda7 of /home/root.img bs=4096 conv=notrunc,noerror <span class="cmt"># Backup /</span>
@@ -2399,7 +2401,7 @@
 </pre>
 
 <h3>Recover</h3>
-The command <code>dd</code> will read <i>every single block</i> of the partiton, even the blocks. In case of problems it is better to use the option <code>conv=sync,noerror</code> so dd will skip the bad block and write zeros at the destination. Accordingly it is important to set the block size equal or smaller than the disk block size. A 1k size seems safe, set it with <code>bs=1k</code>. If a disk has bad sectors and the data should be recovered from a partiton, create an image file with dd, mount the image and copy the content to a new disk. With the option <code>noerror</code>, dd will skip the bad sectors and write zeros instead, thus only the data contained in the bad sectors will be lost.
+The command <code>dd</code> will read <i>every single block</i> of the partition, even the blocks. In case of problems it is better to use the option <code>conv=sync,noerror</code> so dd will skip the bad block and write zeros at the destination. Accordingly it is important to set the block size equal or smaller than the disk block size. A 1k size seems safe, set it with <code>bs=1k</code>. If a disk has bad sectors and the data should be recovered from a partition, create an image file with dd, mount the image and copy the content to a new disk. With the option <code>noerror</code>, dd will skip the bad sectors and write zeros instead, thus only the data contained in the bad sectors will be lost.
 
 <pre># dd if=/dev/hda of=/dev/null bs=1m                   <span class="cmt"># Check for bad blocks</span>
 # dd bs=1k if=/dev/hda1 conv=sync,noerror,notrunc | gzip | ssh \ <span class="cmt"># Send to remote</span>
@@ -2419,7 +2421,7 @@
 <h3>MBR tricks</h3>
 The MBR contains the boot loader and the partition table and is 512 bytes small. The first 446 are for the boot loader, the bytes 446 to 512 are for the partition table.
 <pre># dd if=/dev/sda of=/mbr_sda.bak bs=512 count=1       <span class="cmt"># Backup the full MBR</span>
-# dd if=/dev/zero of=/dev/sda bs=512 count=1          <span class="cmt"># Delete MBR and partiton table</span>
+# dd if=/dev/zero of=/dev/sda bs=512 count=1          <span class="cmt"># Delete MBR and partition table</span>
 # dd if=/mbr_sda.bak of=/dev/sda bs=512 count=1       <span class="cmt"># Restore the full MBR</span>
 # dd if=/mbr_sda.bak of=/dev/sda bs=446 count=1       <span class="cmt"># Restore only the boot loader</span>
 # dd if=/mbr_sda.bak of=/dev/sda bs=1 count=64 skip=446 seek=446 <span class="cmt"># Restore partition table</span>
@@ -2719,7 +2721,7 @@
 Here is "secret" the mysql root password, there is no space after -p. When the -p option is used alone (w/o password), the password is asked at the command prompt.
 
 <h2 id="sqlite">SQLite</h2>
-<a href="http://www.sqlite.org">SQLite</a><span class="fn">http://www.sqlite.org</span> is a small powerfull self-contined, serverless, zero-configuration SQL database.
+<a href="http://www.sqlite.org">SQLite</a><span class="fn">http://www.sqlite.org</span> is a small powerful self-contained, serverless, zero-configuration SQL database.
 <h3>Dump and restore</h3>
 It can be useful to dump and restore an SQLite database. For example you can edit the dump file to change a column attribute or type and then restore the database. This is easier than messing with SQL commands. Use the command <code>sqlite3</code> for a 3.x database.
 <pre># sqlite database.db .dump &gt; dump.sql              <span class="cmt"># dump</span>
@@ -3151,7 +3153,7 @@
 <!-- <div class="pb" /> -->
 
 <div class="footerlast">
-This document: "Unix Toolbox revision 13" is licensed under a <a rel="nofollow" href="http://creativecommons.org/licenses/by-sa/3.0/">Creative Commons Licence [Attribution - Share Alike]</a>. &#169; <a href="mailto:c_at_cb.vu">Colin Barschel</a> 2007-2008. Some rights reserved.
+This document: "Unix Toolbox revision 13.1" is licensed under a <a rel="nofollow" href="http://creativecommons.org/licenses/by-sa/3.0/">Creative Commons Licence [Attribution - Share Alike]</a>. &#169; <a href="mailto:c_at_cb.vu">Colin Barschel</a> 2007-2008. Some rights reserved.
 </div>
 
 </body>