All posts by Andrew Bennett

check_mk_agent over SSH Host key verification failed

Service discovery failed for this host: Agent exited with code 255: Pseudo-terminal will not be allocated because stdin is not a terminal. Host key verification failed.

Current Setup: Ubuntu 14.04 running OMD

Solution: Running the ssh command from the OMD user appears to fix the problem by allowing them into the known hosts list.

Here’s how:

linuxuser@ubuntu_vm:~$ sudo su
[sudo] password for linuxuser:
root@ubuntu_vm:/home/scadmin# su [omd-site-name]
ubuntu_vm[[omd-site-name]]:~$

then run your remote command eg:

ubuntu_vm[[omd-site-name]]:~$ ssh -l root -i /etc/check_mk/check_mk.key [ip]

It will ask to save the host to the known hosts, type yes and enter. It should then output the status from the check_mk agent.

Apple TV vs Chromecast for Netflix / YouTube access on your TV

The great debate in the wonderful land of mobile devices, Apple vs Google. But what happens when you start to mix ecosystems between the two.

I’m an iPhone 4s (stop laughing, I realise it’s 2025) and iPad mini 2 guy, but when it comes to putting content on my TV, I’ve tested both the Apple TV & the humble Chromecast & funnily I prefer the…..Chromecast.

The Apple TV allows sharing of your screen (which is nice to have), along with the ability to stream apps & games, but the downside, no multitasking. Say you flick a Netflix movie up from your iPad to your Apple TV, then head over safari which then sends you to YouTube, bam! Netflix stops showing your movie. However with the Chromecast you can multitask, you can watch your Netflix Movie on your TV & your YouTube clip on your iPad. 

The way Netflix & the YouTube apps hand off to the Chromecast allow you to continue using the app & search for more content to watch, the YouTube app even allows for “queuing” up content.

Unfortunately the Chromecast doesn’t support mirroring from the iPad. But you can mirror from the Google Chrome web browser with the aid of an extension which I haven’t used an awful lot, but it is handy.

So if you want a cheap way to show Netflix or YouTube from your iPad to your TV, the humble $50 Chromecast is a winner.

Melbourne Online Photography Stores

My own personal directory of photography / AV shops in and around Melbourne:

Protog – http://www.protog.com.au

Image Melbourne  – http://www.imagemelbourne.com.au

Dragon Image – https://www.dragonimage.com.au
Side note – These guys sell a LP-6 replacement battery which seems to be holding up strong after 6 months of use, for around half the price of a Canon one – Jupio LP-E6. Their online store seems to ship from Sydney. 

Vanbar Imaging – http://vanbarphoto.com.au

Factory Sound – http://factorysound.com/
These guys are more for sound and the A side of AV.

Thanks to James for introducing me to half of these stores. :)

Free Upgrade from Lightroom 5 to Lightroom 6

Back in 2014 I brought a copy of Lightroom 5.
Unfortunately after buying a Canon 7D Mk II and finding out it won’t tether with Lightroom 5, I looked into upgrading to Lightroom 6.

It turns out that if have brought Lightroom 5 after 22 march 2015 you get a free upgrade. Unfortunately for me I had brought Lightroom almost 12 months earlier. No free upgrade for me :(

Now the question beckons, do I upgrade to Lightroom 6 or fork out $10/month for the Photography bundle :/

An Open Letter Regrading Copyright Amendment (Online Infringement) Bill

TL;DR

Go to http://choice.good.do/nofilter/ and send an email.

As a web developer, internet filters scare both me and my clients. “But if your not doing anything wrong you shouldn’t have to worry” is the reply I hear from the crowd. Which would be true, until the protection mechanism fails. Labour tired to do a similar thing a few years ago & a few small business websites ‘accidentally’ ended up on the black list. Imagine if your small business site gets attacked or hacked, then it’s detected by the filter as a naughty one, ” o we better block it” the filter thinks. Your business is now practically dead in the water if you rely at all on having a working website (which is a lot these days).

There is also a fundamental technical issue at play, if a site is accessed via SSL (the little padlock next to the URL, the https – like this one does), then nothing between my browser and the server should be able to read the contents. (Although thanks to our mate Ed, we know that the NSA unwraps these packets and then rewards them because they have the keys to the kingdom). So if all I have to do in theory is have a secure site to bypass the block, all should be well right? If they can block it, then something is fundamental to internet security will need to be broken, or they block based on the servers IP address.

But in this day and age one IP address doesn’t equal one website. One IP address equals multiple websites. So when the filter blocks one site, multiple sites could fall down too. Again as a small business, you are stuffed. (At least until you can get a new IP address).

Thanks to the guys at choice, we can all create awareness around this issue (I have added to the original email).

http://choice.good.do/nofilter/

Hi Catherine,

Similarly to the metadata bill (which was sadly passed), I’m concerned about this one.

It is the equivalent to blocking roads & streets in high crime neighbourhoods, because cars might drive on those roads, which may or may have passengers that may or may not commit a crime in them.

I am asking you to vote against the Copyright Amendment (Online Infringement) Bill.

This Bill will make internet service providers police consumers’ downloads with an industry-run internet filter.

But this isn’t just about stopping Pirate Bay – it covers sites for online tools like Virtual Private Networks (VPNs) that help consumers get around the ‘Australia tax’ and access legitimate content from overseas.

The law will also prevent other parties from seeking to have site blocks removed, for example if it’s in the public interest or it’s blocked accidentally.

If you won’t vote against the Bill, then I ask you to make sure that it won’t accidentally capture legitimate websites, including VPNs.

Also please ensure that other parties can make public interest arguments when the courts are considering imposing or varying website-blocking orders. Without this, it will be a one-sided, uncontested application process, which is worrying given the potential for legitimate sites to be blocked.

Specific recommendations for addressing these problems can be found in CHOICE’s submission to the inquiry, available at http://www.aph.gov.au/Parliamentary_Business/Committees/Senate/Legal_and_Constitutional_Affairs/Copyright_Bill_2015/Submissions (submission no. 34).

When the U.S tired to do a similar thing with their SOPA Bill a few years ago, the internet went black to make politicians wake up, and see that the entertainment industry cannot control the internet. Unfortunately we don’t have the same power here in Australia, but hopefully through an open conversation with all parties, not just the entertainment industry we can find a better solution to the issue of copyright infringement.

Thanks

Andrew Bennett

QNAP to Zentyal Rsync Backup

This is how I got a backup from a QNAP nas to Zentyal working (I understand that most people probably want to do this the other way around…)

QNAP TS-231 running 4.1.3 Build 20150408
Zentyal 3.5

  1. Setting up rsync on Zentyal: http://howden.net.au/thowden/2012/11/rsync-on-debian/
  2. Testing rsync on QNAP:
    1. Open up ‘Backup Station’ App
    2. Go to ‘Rsync’ under ‘Remote Replication
    3. Create a new replication job, use the following settings:
      • Remote Replication Job Name:
      • Remote site:
        Name or IP: [IP address of Zentyal box].
        Username: [Zentyal Admin User]
        Password: [Zentyal Admin Pass]

        Port Number: 873

      Hopefully the test should run successfully, if you cat /var/log/rsyncd you should see the connection, but it probably fails on finding /var/www/pub folder

    4. If everything works, go ahead and update the configuration files, and set locations to their final paths

    I can’t work out how to get this working over SSH just yet.

Zentyal 4.1 Software RAID

TL;DR: Zentyal Software RAID Setup.

Unfortunately it isn’t all that easy or straight forward for a targeted server disto to easily allow

  1. Start Install in ‘Expert’ mode.
  2. Go through install until you get to partitions.
  3. Select the partitioning method as ‘Manual’.
  4. First create ’empty’ partitions on each drive (I actually did this within PartedMagic).
  5. Then create the Software RAID (I created 1 MD device with RAID 1).
  6. Then you can create the LVM partitions (I used the Guided Partition step to automatically create everything, otherwise you can do it manually by hand).

Thanks to Rafaelwolf.com

Endian Transparent Proxy and Hamachi Gateway Issue

Update: works around 95% of the time, but isn’t perfect.

After recently upgrading from IPCop to Endian for a clients router, we discovered an issue that wasn’t there with IPCop.
All the users connecting in via the Hamachi gateway also had there traffic passed through the squid proxy server at the office.

While most organaizations would encorrage this, it was an uninttended side effect, and brought the small slow ADSL connection to its knees.

After trying to fiddle with proxy.pac files, IP Tables rules, etc it seems the easiest option is to simply ban the IP address in proxy.

      Create a static DHCP address for the client
      Go to Proxy -> HTTP -> Access Policy. Add a new access policy
      Select the following values:
      Source Type: Network/IP
      Destination Type:
      Insert Source Network/IPs: Add the IP addresses from Step 1.
      Access policy: Deny access
      Position: First position

      Create Policy

      Test on a remote client using Speedtest.net or IPChicken

Early testing has shown that there aren’t any issues with this, the client still downloads the proxy.pac file, then finds out it can’t use the Proxy (Chrome seems to add it to a Ban list), and carries on connecting as usual.

Extended testing shows that every now & then Endian still gets asked to handle the request & gets a ‘denied’ response. So not a perfect solution, it still half works.