Matthew Dawkins has announced the release of Unity Linux 2010, Mandriva-based distribution designed for building custom solutions from a minimalist base: “The Unity Linux project is pleased to announce the final 2010 release. Changelog: the usage of Plymouth for the boot graphics; new Linux kernel version 2.6.33.5; new….
Posts Tagged ‘linux’
Distribution Release: Tuquito 4
To celebrate Argentina’s day of independence, the developers of Tuquito have released the latest version of their Ubuntu-based desktop Linux distribution and live DVD. This release comes with large number of improvements that should please both the beginning and advanced Linux users. These include: updated Linux kernel 2.6.32….
Development Release: Tiny Core Linux 3.0 RC1
After a series of alpha builds, the first release candidate for the upcoming Tiny Core Linux 3.0 is now available for testing: “Team Tiny Core is pleased to announce that Tiny Core 3.0 RC1 is now available. Changelog: new kernel update to 2.6.33.3 (a UPXed version is also….
Using SOA Expressway for Handling Kerberos in a B2B Environment
So a project manager walks up to you and tells you, “Hey, we just bought a company that creates purchasing order software. The PO system uses a Linux based implementation of Oracle Access Manager (OAM). We need to integrate this technology’s authentication mechanism with our implementation of Kerberos and Microsoft Active Directory. Unfortunately, their PO system doesn’t support any of the Windows Integrated Authentication solutions. We aren’t even sure if the system can handle SPNEGO. While OAM may handle SAML assertions, it definitely can’t deal with Kerberos tokens. Cost too much money to replace OAM. Our system must authenticate Kerberos tokens and then transform the authentication data into a format that the Oracle Access Manage can process.” At which point you start panicking because you have never even heard of Kerberos or Oracle Access Manager. However, instead of having a heart attack, I’d like you to take a deep breath and consider whether Intel SOA Expressway, a XML Gateway that can transform and manipulate Kerberos authentication data, is the answer to your problems. But before I get there, let me outline the basics of Kerberos and the challenges it poises in a B2B environment. What is Kerberos? Kerberos is a trusted third-party authentication that was developed by the Massachusetts Institute of Technology long before the internet was invented (See rfc4120 for the Kerberos standard). In this protocol, clients and servers securely communicate with one another using shared keys, tickets, and session tokens. These security artifacts are created and managed by a Kerberos Key Distribution Center (KDC). A KDC is a trusted third party that consists of an Authentication Server (AS) and a Ticket Granting Server (TGT). The KDC has a database of secret keys for each endpoint identified in a particular network, which is only known to the client or server. Knowledge of this key proves an endpoint’s identity. User is authenticated by the AS. The AS sends ticketing granting ticket (TGT) to the client. User sends the TGT to the Ticket Granting Server. The TGS uses the TGT to authenticate the client. Once authenticated, the TGS sends a service ticket to the user. User sends service ticket to the server, which the server uses to authenticate the client. Doesn’t sound so bad, right? Well, when they say that devil is in the details, they weren’t kidding with Kerberos authentication. This is a high level overview—it’s a lot more complicated in practice. There are over 8 different formats for Kerberos tokens, all of which you may need to support. The Kerberos protocol is not standardized and varies based on server implementation. And last but not least, there is no out of the box way to transform Kerberos authentication data into other formats. Intel SOA Expressway Makes Kerberos Integration Simple In theory, you could design a complicated, time intensive custom solution that integrates your Kerberos KDC with OAM. Or alternatively, you could use Intel SOAE as a XML gateway between OAM and your Kerberos system. The set up is simple. You just need to collect some basic information about the users that are being authenticated by Kerberos and then populate three Intel SOAE configuration pages with this data. First, collect the following information: Server Keytab : Obtain or create a Kerberos keytab for the service that the client seeks access to. A Kerberos keytab contains a list of principals and their secret keys. The principal is the unique name of the service or client. Realm : Obtain the name of the realm that the client and server principals belong to. A realm identifies the logical network served by a single Kerberos database and the Key Distribution Center. Then, in Intel SOA Expressway: Upload the server keytab. Enter the realm in the Web Service Authentication policy. Create an Authentication, Authorization, and Audit (AAA) policy that extracts the Kerberos token from a message request, authenticates the token, and then maps it to a different format (eg SAML) And that’s it, you are done. Now Intel SOAE can authenticate any Kerberos token generated by your system using the following criteria. Trusted realm generated the Kerberos token Correct server principal is specified Correct Kerberos version is used Server key can decrypt authenticator Checks ticket flags Authenticator lifetime is valid If checksum present, then verify it. After the runtime authenticates the Kerberos token, it can transform the authenticated identity into a SAML assertion, an HTTP header, username and password, or an XML fragment. Basically, Intel SOA Expressway will simultaneously authenticate the Kerberos token and then map that to whatever format the Oracle Access manager can process.
Distribution Release: Salix OS 13.1 "LXDE"
George Vlahavas has announced the release of Salix OS 13.1 “LXDE” edition, a lightweight, Slackware-based desktop Linux distribution: “Salix OS 13.1 LXDE edition has been released. Based on Slackware Linux 13.1, it features the lightweight X11 Desktop Environment, with a clean look and feel. The main applications that….
Distribution Release: Mandriva Linux 2010.1
Mandriva Linux 2010.1 has been released: “Mandriva, the leading European publisher of Linux solutions, announces today the launch of the final version of Mandriva Linux 2010 Spring. Quicker, easier and more secure than ever, Mandriva Linux offers new functionalities which revolutionise the desktop. In a nutshell, Mandriva Linux….
Getting ride of all the warnings
I am generally a C# developer, but these days, I own, maintain and write a lot of C code. My two main projects with C are the Mesh Agent and the UPnP Microstack, both share a lot of code and in the case of the UPnP stack, it’s quite widely used. Recently someone mentioned that as part of their product release, they have the requirement of not having any warning even when the compiler is set to the highest warning level (Level 4 on Visual Studio). For a long time, I have set the top warning level on Linux (/Wall) and fixed all the warnings but never bothered to to the same in Windows. Well, now I needed to do it. This weekend I put the UPnP stack to the highest warning level on Windows and compiled to get 1000′s of warning messages! ouch. I then proceeded to spend 15 hours of my long weekend fixing warnings… mostly like a robot in front of the screen since it’s very repetitive. I did learn a few things in the process. First, I have no idea that data pointers and function pointers are different. Compilers don’t like that you cast a function pointer to a void*. They could in theory… be different size. There is no equivalent of void* for function pointers, but you can define one yourself. I also learned more about macro definitions. You can define a macro with an undefined list of arguments. For example: #define eprintf(…) fprintf (stderr, __VA_ARGS__) I had no idea. This made some of my macros simpler. One of the major fixes was to use secure versions of methods like sprintf, you have to use snprintf_s on Windows, but you don’t want to break compatibility with Linux. In any case, I have a new version of the Developer Tools for UPnP Technologies with all these fixed included. Should make product engineers happy. Ylian opentools.homeip.net
Google Chrome Thoughts & Everything Chrome
Google’s browser, Chrome , was released not too long ago and just about everyone wrote some kind of review on it. I wanted to wait to have enough time with it. I have been using it exclusively since the day it was released to know for sure if I can use a web browser that is so different from the rest. It turns out it’s my favorite browser. A little something about me you probably don’t know. When I use a browser, I use it just for viewing websites, what it was intended for. I am not a fan of plugins and themes. A browser should be as light as possible. It makes viewing websites a lot more enjoyable. Google has created a browser that I have always wanted. Here comes Chrome at a perfect time when we’re angry for Microsoft causing web developers nothing but problems with Internet Explorer; Mozilla pushing Firefox 3 out with its annoying bugs; and Apple with their font smoothing in Safari, which doesn’t even look good in Windows with any of the font smoothing options; and Opera, I don’t know what to say except that the last time I used it, a lot of sites didn’t work right. So, what’s so special about Chrome? It should be very obvious when you look at it, ignoring the blue appearance of course. In Vista (with Aero enabled), it isn’t blue. In Vista, the titlebar and the tab bar both have transparency. My favorite part is that there is no menu, search or address bar taking up space above the tabs. Chrome still has an address bar, which allows you to search from it as well. And, the menu is found by clicking a couple buttons. I love having the ability to move tabs into its own window or move from one window to another one. No need for me to go into detail about every feature, you can find that on the Chrome Features page. What makes Chrome better than others browsers (except for Lynx )? Its speed. Chrome loads very quickly. Websites appear right away. Everything is about speed today. For those of you paranoid people (who probably have something to hide), a German security company created Iron. Quoted from the Incomplete News Project : The “Iron” browser is based on the “Google Chromium” source code, but “Iron” does not send any user specific data to Google anymore and it does not contain a unique user ID. And, if you’re worried about Chrome’s automatic updates, get a firewall and block it. Also, If you’re worried about Google collecting data, maybe you should be worried about your ISP, too? Everything Chrome Use Google Chrome Backup to create, backup, restore and manage multiple profiles. It also supports Google Chromium. Install Greasemonkey so you can use some useful scripts. There are two ways to do this. Learn how at Make Use Of . Increase the number of URL suggestions in the Omnibox. Learn how at Make Use Of . Change Chrome’s appearance with a new theme. Download all in one pack or download individual themes . Also find more themes at Free Chrome Themes . Install and manage Chrome themes with XChrome . Create your own Chrome theme with Chromium Theme Creator . Worried about privacy? Make Use Of has a few tips to regain your privacy in Chrome: changing default search engine, disabling the suggestion service, and removing the unique browser ID by using Chrome Privacy Guard or UnChrome . Use TabsLock to launch a new Chrome tab or even Chrome itself if it’s not already running by just using the Caps Lock key on your keyboard. Force Chrome to use less memory by telling it to use a single process rather than one process per tab. Doing this will cause the whole browser to crash if one tab crashes. Block advertisements in Chrome by using Privoxy . Run Chrome on a thumb drive with Portable Chrome . Download a more up-to-date and open source version of Chrome, called Chromium . See all of Chrome’s features in video format. Read the Power User’s Guide to Google Chrome from Lifehacker for some great tips. Add a Print button to the bookmarks bar. Make the bookmarks display as icons only on the bookmarks bar. (I love this because I have so many that I would like to appear without having to go to Other Bookmarks.) Use the Chromium Nightly Updater to check for the latest nightly build. Check out Chrome’s full list of special about: pages . Add features from Chrome in Firefox. Check out the Google Chrome Wiki for some tips and tools that I may not have mentioned above. Everything Else Chrome For those of you who switched back to Firefox but love the look of Chrome, just download Chromifox or Chrome Package . They will make Firefox look almost like Chrome. Want a Google Chrome icon for a dock? Download at Deviantart . Use CrossOver Chromium to run Chrome on a Mac or Linux. CrossOver Chromium is a Mac and Linux port of the Chromium web browser . Check out the Google Chrome Comic Book . Open websites in Chrome from Firefox with a Firefox extension . Detect Chrome using a little bit of Javascript. Chrome themes for WordPress , Tumblr and Blogger . I think too many people expected more from Chrome. They should realize Chrome is beta and is very new. Does beta even mean anything anymore except to say that it’s new? Every browser started off with very little features. Do you really want a browser that will just slow down as you demand more and more from it? I really hope if/when Google adds a lot of features such as themes, that they provide a light version of the browser (what it is today) and a full version, or at least an install that lets you select what you want installed. Have you installed Chrome? Did you like it? Will you use it when there are more features? If you didn’t like it, what did you not like about it? Saying you need your Firefox extensions isn’t a good answer. That’s not a good reason for not liking Chrome, it’s just you missing your Firefox extensions. No related posts.
Distribution Release: IPFire 2.7
Jan Paul Tuecking has announced the release of IPFire 2.7, a specialist distribution of Linux for firewalls: “Today we are going to release IPFire 2.7. At first we will only release the ISO files, the update is not yet available via pakfire. The reason for this is the….



Posted in
Tags: