Entries Comments



Category: Mac


Fight Back! (When VPN Clients Mis-Behave)

23 July, 2008 (12:20) | Mac, Networks | By: Benjamin

I have to use VPNs at work. Specifically, to access my production webservers (etc), I have to use a Cisco VPN client. Sadly, the VPN concentrator overrides my choice of allowing local LAN access. So, when I am on the VPN, I have my DNS options changed so I can’t use any local servers. This is a serious, serious pain. So painful in fact, that many times instead of fight with it, I simply would run a Windows session in VMware (on my Mac) and connect the VPN there. This has drawbacks too, but it’s better than not having local network access.

So I set out to find a solution and I found a post by loudhush which described using the scutil to modify DNS network settings after connecting to a Cisco VPN. This was great, but I needed something a bit handier.

So, I cranked out the following which goes in my /Users/username/.profile:

# .profile or .bash_profile
function myvpn {
vpnclient connect VPNPROFILENAME user MYVPNUSERNAME
myworkdns
}
function myworkdns {
printf "get State:/Network/Service/com.cisco.VPN/DNS\nd.add ServerAddresses * 192.168.1.252, 192.168.1.198\nd.add SearchDomains * example.com, other.example.com\nset State:/Network/Service/com.cisco.VPN/DNS" | sudo scutil
}

These are bash functions which i run from the command line. (I also find the Client GUI Cisco to be a pain, and prefer command line)

So, obviously, you’ll need to substitute in your Cisco VPN profile name ( found in /etc/opt/cisco-vpnclient/Profiles), your VPN username, your DNS server IP addresses, and your DNS search domains to your legitimate values.

To use, run Terminal, then type myvpn. The VPN client will prompt you for your username and password. You’ll then have to hit CTRL+Z to suspend the VPN client so the script can run the DNS updates; this part uses sudo to run the command as root, so you will probably need to type your Mac password immediately after hitting CTRL+Z. If you didn’t want to bother with the command line VPN client, you could just use your GUI Cisco VPN client, then run myworkdns from Terminal, which will still probably prompt you for your Mac password.

Hope others find this useful. If I find a cleaner way, I’ll post that too.

Beating the Cisco VPN Client Error 51 On Leopard

22 July, 2008 (10:10) | Mac, Networks | By: Benjamin

I had this error popup today on my Mac OS X Lepopard 10.5.4 machine.

Cisco VPN Client Error 51

This is not cool as, well, I NEED MY VPN TO WORK!

Thankfully google came to my rescue. The solution is to execute the following in Terminal:

sudo /System/Library/StartupItems/CiscoVPN/CiscoVPN restart

Thanks for the answer, VirtuallyShocking.com.

Firefox 3 rc2 Is Out!

5 June, 2008 (10:41) | Mac, Web | By: Benjamin

Since moving to the Mac, I’ve tried to use Safari almost exclusively. I definitely like it, and it’s got some great tools, but I usually found myself running back to Firefox 2 whenever I had to really do work on a website because I really like some the power Firefox extensions give me. A couple of the things NOT too like about Firefox 2 was the heavy memory usage, the crashing, and the lack of native Mac OS X widgets.

I’ve been playing with Firefox 3 betas off and on, but yesterday I noticed Firefox 3 release candidate 2 is out! This is likely going to be the last pre-release until the official launch, it has fixed a lot of bugs, and it solves some of my nagging issues. Memory usage is better, crashing less frequent, and we now have native widgets! Of course, I use Firefox for work, so to use FF3 I need my extentions which haven’t all been available till now:

Yesterday I mentioned this to my co-worker who expressed concern about being able to test in Firefox 2. We already have this issue with IE6/IE7 and there’s no good solution for that but to have an extra copy of Windows with only IE6 installed. (yes, you can try weird hacks like this, but they don’t always seem to work)

Well, with Firefox (old and new) there’s this snazzy profile manager tool, which lets you choose what profile you want to use.

First, if you want to have multiple copies of Firefox installed, just name them differently. When you download Firefox the app is named “Firefox” I’m planning to use Firefox 3 as my standard now, so I’ve left it named that renamed my old Firefox to “Firefox2″. Shocking, isn’t it.

Now, from Terminal, I can run the following:

$ /Applications/Firefox2.app/Contents/MacOS/firefox -ProfileManager

You should see something like this:

Firefox Profile Manager

By default, you’ll probably only have the “default” profile, but you can create a profile dedicated to testing in FF2 which should prevent it from screwing with my FF3 profile (as I’ve noticed can happen). Another side effect is that this lets you run multiple copies (of the different versions) of Firefox at once. Also, un-check the “Don’t ask at startup” box, and you won’t have to run the secondary browsers from the command-line to ensure you get the profile you intended.

For the record, I’ve tested the same thing on Windows XP. While you can install multiple copies/versions of Firefox and use the different profiles the same way, you cannot run both copies at the same time. At least I couldn’t make it work.

Plainview: presentations ala web

5 June, 2008 (03:18) | Mac, Web | By: Benjamin

I just stumbled onto the coolest little app for Mac. Plainview is a web browser based on WebKit (also the guts of the Safari browser). What’s unique is it’s intended to NOT have chrome (the name for all tose fancy navigation bars, address text boxes, menus etc). It’s slim… so slim the chrome is non-existent. This is a full-screen mode web browser, intended to utilize the full screen real estate for presentations! Essentially, instead of having to take screenshots of websites and put them into power point or something, you can just demo the site. It’s awesome… and i’m not even explaining it as well as they did… but I am tired. :-)

I hope that in the near future I can use this for more than playing around.

Using Microsoft Entourage on my Mac

26 March, 2008 (05:01) | Mac | By: Benjamin

I’m not really a Microsoft fan, nor do I consider myself a Microsoft hater. I generally like Linux and free Open Source software, and as a network and software engineer type I really like the power and flexibility of Unix-like operating systems. I made the switch to Mac because I wanted to see what all the fuss was about, and if I would benefit from a “Unix like system that just works.” Though there were a few bumps in the road, I’m pretty happy overall. Sometime maybe I’ll post about my Mac experience and thoughts in a broader sense.

This post is about Entourage. When I started this fall, my employer was using Zimbra for our mail and calendar platform. A few weeks ago we migrated to Microsoft Exchange. As a Mac user, I’d gotten very happy with Mail.app and iCal; suddenly I was in an environment where my iCal couldn’t sync to the server like it did previously with Exchange. The only real solution was to either use the web-based client OWA (Outlook Web Access) or to switch to Entourage. I decided to give Entourage a shot.

Entourage is like Microsoft’s Outlook for Mac. It has most of the same features, but a very different interface.

One of the most annoying things I immediately noticed was the layout of the message list pane. By default there’s a three column view, folders (etc), message list, and message preview pane. I’m ok with this in general, but the message list was not very configurable. Sure you could change how messages were sorted, but the messages were ALWAYS displayed using two text rows, even “conversation” headers with only tiny text like an arrow and the work “mail” used two lines, wasting tons of space and limiting the info and number of messages I could see at any one time. I could change that, but I switched to a two column view with message list above the preview pane. This works pretty well as the messages in the list now only use one line and the columns displayed are fully configurable.

This has seriously been my biggest beef so far, though there are others. But I’m really tired… I’ll come back to discuss the other issues. Bottom line though, since I need some of the Exchange functionality, I don’t have a lot of choices, but it’s not too bad once you get past some quirks.