Had some Palm Pre phones come into work today, and had to set them up to the Exchange 2003 server. As with other Palm devices and such that use OWA (Outlook Web Access) and EAS (Exchange Active Sync) we need to export our CA Root Certificate to the phone and install it to the Cert Store. This seems to be a huge problem for some people, so maybe this guide will help you out.

First, you need to make sure the IIS Web Server that you connect to using the phone or web browser has a SSL certificate that has the correct CN (Common Name) of the server. This is very important. If you are connecting to say; https://mail.server.com on the phone the CN of the web server certificate must be mail.server.com

The server at work did not have this for some reason, so in the IIS System Manager open SERVER (local computer) and Websites, right click on Default Web Site and click on Properties. Make sure you have 443 in the SSL port on this page, and then click on Advanced. Make sure under ‘Multiple SSL identities for this web site’ you have a Default with SSL port 443. Click OK if you added it, if you have it cancel out of it.

Click on the Directory Security tab.

Now click on View Certificate if you have the ability to (the server already has a certificate installed). Click on the Certification Path tab at the top and you should have a certificate at the top with the CA name, and one under it, this should be the CN of this web server.

If you cannot click on the View Certificate button you need to have this server request one from the available CA server on your network. When you are asked for the CN make sure it is the external FQDN of this server, not just the hostname.

Now once that’s done, you should have an Edit button under the View Certificate button, click Edit and at the top make sure you have ‘Require secure channel (SSL)’ unchecked. You will use SSL yes, but if you have only one Exchange server on your network you cannot have a Front-end and Back-end server setup and need this unchecked for Exchange to communicate with IIS and such on the server itself. We will be using our self-signed certificate for SSL communications from the Palm Pre to the IIS Server over the Internet.

Click OK at the bottom and your done here. Open the Exchange System Manager. Open up Global Settings and then right click on Mobile Services and choose Properties. On this first page, I have (by default it seems) everything at the top checked. At the bottom I checked Enable Outlook Mobile Access and Enable unsupported devices, and clicked OK. This is up to you, not sure if you need the unsupported devices checked, but it seems to work fine.

Some people talk about it not working with Forms Based Authentication. I do not use this at home, but we do at work, and it does not make a difference in either case.

We should be done on the server end. On your workstation, you should be able to connect to https://exchange-server-fqdn/exchange and get your login page, or popup for login, or if you use Internet Explorer you might get a transparent login to the Outlook Web Access. In Internet Explorer at the right of the address bar you should have a SSL Lock icon, either in green or red depending if you installed your self-signed certificate on the local machine. Left click on this and choose View Certificates.

At the top click on the Certification Path and here you should have two lines of certificates. At the top, the root certificate under that, the CN of this web server running Outlook Web Access. Click on the top Root Server CA certificate and click on View Certificate near the bottom of this dialog. At the top of the new dialog, click on Details, then at the bottom click on Copy to File.

In the wizard click on Next, then Next again. Browse to a location you can remember, the desktop is fine, and type in a file name and click Save. Click Next in the wizard then Finish. It will say the export was successful. Click OK to close all the dialogs and you can close Internet Explorer.

Connect your Pre via USB and set it to USB File Mode. Copy the certificate to your phone and use the Certificate Manager to install the certificate. You should be able to setup your Exchange account on the phone now.

Once everything is up and running, you can get the Microsoft Exchange Server ActiveSync Web Administration Tool and install it on your server to get a few administrative functions for Mobile Devices.

I will continue to post a few links that may help others out as I find them.
- Exchange ActiveSync and Outlook Mobile Access errors occur when SSL or forms-based authentication is required for Exchange Server 2003

Just working out a few things here in the office, and I get an email from my boss asking if this laptop is good for one of the higher up executives for their daughter. So I start looking over the email and specs and such, and it’s not a bad machine for the price they want. I’m not very informed on the Mac side of things but the hardware looks good and some of the reviews were nice.

What really got my attention was at the bottom, a little slogan type sentence stating:
“New design. New features. New technologies. All engineered to standards that don’t even exist yet.”

Reading that, I leaned back, and just thought of all the things wrong with that statement while I laughed. This is impossible. This is one of the reasons we follow standards in a world so reliant on computers and technology. You should always follow a standard, and if there are no standards to follow you really did not look for a standard at all. Saying that it does not even exist seems to me that you threw a bunch of shit together, and called it a day.

Now they might not be talking about standards, as in XHTML, XML and such. They might be talking about customer service and a high satisfaction rate from their customers. The problem is, that levels of very high satisfaction do exist, and that I assure you, Apple does not meet them.

The LUA programming language is a lightweight, reflective, imperative and functional programming language, designed as a scripting language with extensible semantics as a primary goal. As stated by Wikipedia (http://en.wikipedia.org/wiki/Lua_(programming_language)).

The World of Warcraft client uses LUA to design the user interface. This allows third party developers to create unique interface customizations and share them with others, as addons.

I have been playing around with some LUA as it is used in World of Warcraft to change a few things in my client without downloading huge addons that do the same, but offer more features that I don’t want to load. Being that I am trying to be memory efficient and save CPU cycles for the game itself.

  Extra WoW Features (3.1 KiB, 74 Downloads)

This will do the following for you:

Move the casting bar down a little (Change inside .lua file, line 21)
Allow you to talk in your second language with a /lan action (Example: “/lan Hello.” Without quotes, will say hello in Draenei if you are Draenei.)
Open all bags when you talk to a ‘vendor’ and close them all when done.
Move your game-tooltips (not items) to the lower right hand corner of the screen.
Add ‘Targeting: Name Here’ to the game-tooltips.
Auto repair when you visit a merchant that is able to repair your gear.
Add tabs to the profession window that allows access to your professions with only one button.

You can of course edit the .lua file yourself and remove anything you don’t want. This is an addon I use for my purposes. Consider this beta code and may or may not work for you.

So last Friday (May 1st, 2009) I was asked at work to upgrade the hard drive in the CEOs laptop. Alright no problem, we go to the closest store and pick up a new two hundred and fifty gigabyte hard drive to put in the laptop. I get the new drive and decide to make sure the old drive has no errors before I image the disk over.

I run the usual Windows `chkdsk` commands and it finds some stuff and fixes it quickly. I put the new drive on a small external USB adapter and throw in the TRK Rescue disc to run a `dd` on the drive. The program completes, and I put the new drive into the system. The new drive boots up and all is fine. I can resize the partition later when I have more time.

A little later I get a phone call saying that there are no folders in the CEOs Outlook Pane. “Alright.” So I walk up and take a look, sure enough no folders under the six PST files that were mounted from the local hard disk. I close the Personal Folders and then remount then in Outlook. Nothing. “Alright…”

So I browse to the My Documents folder where the files are kept and I search around. I find the six PST files. Looking over them, file size: 0 bytes. Yeah, zero bytes. Three of these files were over two gigabytes (2GB) and the other three were in the range of eight hundred megabytes (800MB). Now, we have a problem.

I come to find out that the `chkdsk` run found something wrong with these large files and marked them as zero bytes in the file table on the drive.

So I quickly take the original hard disk down to my system here and throw it on the USB adapter and start running a simple undelete utility on the files. It finds them, but still as zero bytes, and only restores a zero byte file. Now we have a larger problem. So I start searching around the Internet for some utilities that will scan the disk and reconstruct the damaged or missing PST files.

I come to find a program called Office Recovery by DiskInternals. The program installed, and I had it scan the disk. This took forever on my little machine but after many hours found the parts and displayed them to me. I was able to save the mail to a PST file on my primary hard disk. But still a problem, all of the new messages had their times erased and most of the messages have the `From:` field replaced with their Exchange counterparts /O= and /OU= stuff.

I need to recover the files themselves, not the contents. So a little more searching and reading up and I find out that a program I found a long time back can help. So I installed X-Ways Forensics, and had it scan the external disk. Following some bits and pieces of information around the Internet I was able to do a File Recovery by Type. This scans the entire disk for any files with the particular header, looking for PST files you need to search for the header: `!BDN` in hex of course. It found the files, so I told it to grab four gigabytes (4GB) of data starting from the beginning of each PST file. This of course pulls tons of useless data with it, but does get the information that we need.

I then had six four gigabyte PST files sitting on my primary disk. Alright, lets try this. I loaded Outlook and File -> Open -> Personal Folder, I selected the first of the PST files and clicked OK. Nope! Outlook threw out some horrible errors and told me to fix the corrupt file. But for once… Just once, it told me how to do this. I then located `scanpst.exe` which comes with Office and using the utility chose to fix one file at a time. This reduced the file size to an acceptable level and I was able to import them into Outlook successfully. Once in Outlook, I created a new Personal Folder and moved the contents into the new folders so I was sure they would not be corrupt. After working on this for eight hours, I decided that was probably the best I was going to do, and the most data I was going to be able to recover.

This morning I put them back on to the CEOs laptop and for now she is happy. But this entire problem would not have been so huge if we were allowed to make backups. We have on many occasions, multiple times a month gone up with external drives and blank DVD’s to help back stuff up, and we are never given time to do so. She does not want her data stored on the multi-thousand dollar SAN we have setup for such things.

How do you tell the CEO to use the technology we have for the company to store data, that is protected for her access only and strictly monitored? You want data protection and backups and security, yet will not allow us to back it up, blow off I.T when we want to help you back up from your local machine.

Either way, this could have had a much worse outcome, I think she will let us take backups and give I.T the time it needs to do so as well.

So playing around with some registry and networking settings I was able to lower my latency by about one hundred and fifty by applying this registry tweak.

Go to Start -> Run, type in `regedit` and click OK.

On the left open HKEY_LOCAL_MACHINE -> SYSTEM -> CurrentControlSet -> Services -> Tcpip -> Parameters -> Interfaces -> (Choose your card here, it will be the only folder that contains the most data in it, that appears on the right). In here right click on the right and make a new `DWORD Value` when you can name it, type in (case is important) `TcpAckFrequency` and press enter, double click it to modify the value and change it to `1` and click OK.

You will need to restart your computer for this change to take effect. If you find that this did not help at all, or messes something else up, just delete the `TcpAckFrequency` DWORD item you added.

Along with this, you can also do another tweak which seemed to help a lot on my Windows machine for in-game latency.

Open Control Panel and then Network Connections. Right click on Local Area Connection (or your network adapter) and choose Properties. Near the top you should have a Configure button to the right of the name of your network adapter. Click Configure at the top you should have some tabs, click Advanced and on the left choose the option that is related to Checksum Offloading (you may not have this option, or it may be called something else like TCP/IP Offloading IPv4) and turn this Off. Save your settings and restart the machine.

Let me know if it helps you as well.

I suppose we can start out the new month with a informative post today. At work some friends were setting up some Windows XP machines and wanted to image the disk so that the process for setting up all eight machines went faster. Having no access to disk imaging software at the moment I suggested that they just use `dd` in Linux to do the image. None of them had really heard of this program, so I explained to them how to use it.

A easy way for anyone to do this is to grab a boot-able Linux CD, we used TRK, and grab a external USB hard disk.

Boot from the CD, and choose the first boot option. Mount your USB disk somewhere easily accessible. We did ours as such: `mount /dev/sdb1 /mnt0`then we created an image of the first computer (the one we are currently on, and has Windows XP installed on it already and configured): `dd bs=16384 if=/dev/sda of=/mnt0/image.img`.

Once the process is complete power off the machine and take the USB hard drive and CD to the next, boot from the CD and mount the hard disk. Issue the command: `dd bs=16384 if=/mnt0/image.img of=/dev/sda`.

As you can see, `if=` is the Input File for dd, and `of=` is the Output File. `bs=` is the block size to copy between the disks, you can increase this if you wish to see better performance in faster machines.

This is really how I feel at work sometimes, it is not a new Dilbert animation but it gets the point across. I am trying to get a project complete, or something else done and all I have are bosses over my shoulder telling me what to do instead of the current project. Then question me why the project on hand is not complete and what I have been doing instead.

Okay, so this morning I decided that I will go ahead and read through some of the new happenings over at MP3Car.com and such, see what people are talking about and some new ideas. Yet after going through the articles on the front page, there are no new ideas just a large compilation of articles on commercial products and features and how to connect your iPhone / iPOD to your vehicle or even to your custom carputer.

Honestly, what is the point of connecting your iPhone or iPOD to your carputer if you want to play music? Did you spend time and money creating a unique system for your vehicle and didn’t think of a way to play music from it? Could you not find a way to connect OBDII to your carputer, and instead need your iPhone to do it for you? Simple maps and GPS on your iPhone instead of your carputer?

Really, what the fuck people? If you wanted all that, don’t even install a custom computer in your car, just use your iPOD / iPhone in your car with the cables to connect to the head unit. I am not angry about using your iPhone instead of a full fledged computer system, yes it’s smaller and easier and quicker to install. But why would you install the computer and then use the iPhone to fill in the gaps you never figured out or put enough time and thought into to make the computer do the work instead of more and more devices.

Some articles on the front page are even talking about the death of the carputer and migration to the iPhone. Fuck. That. Some people do not want your fucking shitty iPhone. I hate phones, I hate them with a passion. I would never get an iPhone, to use as a phone or a ‘replacement’ for my carputer when my carputer is completely free, open source, I can configure it to do anything, work anywhere, and not need special programs or unlocking hacks and such. I want a reasonable sized LCD touch screen monitor that I don’t -need- to look at while driving to know where to press to change music and play lists. I want one device to do everything in a simple manor without going from screen to screen. I want an -integrated- computer in the vehicle to make a complete feeling!