<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Cupfighter.net &#187; Roeland Kuipers</title>
	<atom:link href="http://www.cupfighter.net/index.php/author/rkuipers/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.cupfighter.net</link>
	<description>A blog by Schuberg Philis colleagues</description>
	<lastBuildDate>Thu, 09 Feb 2012 14:27:59 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
		<item>
		<title>Citrix Edgesight 5.2 vs Memory Allocation within WOW64</title>
		<link>http://www.cupfighter.net/index.php/2010/02/citrix-edgesight-5-2-vs-memory-allocation-within-wow64/</link>
		<comments>http://www.cupfighter.net/index.php/2010/02/citrix-edgesight-5-2-vs-memory-allocation-within-wow64/#comments</comments>
		<pubDate>Tue, 09 Feb 2010 15:43:12 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Citrix]]></category>
		<category><![CDATA[Edgesight]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Windows 2008]]></category>
		<category><![CDATA[XenApp]]></category>
		<category><![CDATA[XenDesktop]]></category>
		<category><![CDATA[java]]></category>
		<category><![CDATA[memory]]></category>
		<category><![CDATA[wow64]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=881</guid>
		<description><![CDATA[Recently we started evaluating Citrix Edgesight, on a enviroment we are currently building, consisting of XenApp5 2008 x64 and XenDesktop 4 Farms. After the installation of the EdgeSight agent, suddenly a bunch of applications running within a Java Virtual machine stopped functioning. Throwing the &#8220;Could not launch the java virtual machine&#8221; error. These Java apps tried allocating quite some memory [...]]]></description>
			<content:encoded><![CDATA[<p><img class="size-full wp-image-890 alignleft" title="xenapp" src="http://www.cupfighter.net/wp-content/uploads/2010/02/xenapp.jpg" alt="xenapp" width="111" height="111" /></p>
<p>Recently we started evaluating Citrix Edgesight, on a enviroment we are currently building, consisting of XenApp5 2008 x64 and XenDesktop 4 Farms.</p>
<p>After the installation of the EdgeSight agent, suddenly a bunch of applications running within a Java Virtual machine stopped functioning. Throwing the &#8220;Could not launch the java virtual machine&#8221; error.<br />
These Java apps tried allocating quite some memory using these java arguments (eg: XX:MinHeapFreeRatio=20 -XX:MaxHeapFreeRatio=35 -XX:NewRatio=2&#8243;   initial-heap-size=&#8221;32m&#8221; max-heap-size=&#8221;1024m&#8221;)</p>
<p>After some investigation a colleague (Hugo Trippaers) found out that there was only 0,9 GB of memory allocatable on our Citrix XenApp machines using the <a href="http://www.fieldp.com/library.html" target="_blank">memtest32.exe </a>tool. While our other servers happily reported 1,5 GB of allocatable memory (Within WOW64). (Physical Machine = HP DL380G6 with 48 GB of memory, uh should be enough?)</p>
<p>After some deeper digging using <a href="http://www.janrik.net/ptools/memalloc/index.html">memalloc.exe</a>, I discover some substantial differences in memory allocation between our XenApp Servers with the edgesight agent installed and servers without the EdgeSight agent.</p>
<p>XenApp servers with Edgesight Agent 5.2 SP1 x64: <a href="http://www.cupfighter.net/wp-content/uploads/2010/02/with-edges.txt">memalloc.exe with edgesight</a><br />
XenApp Servers without edgesight: <a href="http://www.cupfighter.net/wp-content/uploads/2010/02/without-edges.txt">memalloc.exe &#8211; without edgesight</a></p>
<p>The main difference here is all the Citrix hooks being loaded, see below.<br />
This apparently consumes so much memory that it was not possible for java to allocate enough memory.</p>
<p>For more insights on WOW64 look here:  <a href="http://blogs.msdn.com/gauravseth/archive/2006/04/26/583963.aspx">http://blogs.msdn.com/gauravseth/archive/2006/04/26/583963.aspx</a></p>
<p>By default 32bit applications within WOW64 can leverage the full 4 GB of memory availlable, which is not possible on a native 32 bit system because of the separation of kernel and user space.<br />
Applications need to be compiled with <em><strong>/largaddressaware</strong></em> (Visual Studio : <a href="http://msdn.microsoft.com/en-us/library/wz223b1z(VS.80).aspx">http://msdn.microsoft.com/en-us/library/wz223b1z(VS.80).aspx</a>) or patched using editbin (<a href="http://bilbroblog.com/wow64/hidden-secrets-of-w0w64-ndash-large-address-space/">http://bilbroblog.com/wow64/hidden-secrets-of-w0w64-ndash-large-address-space/</a>), to fully use the 4 GB availlable otherwise they can only allocate 1,6 GB of memory.</p>
<p>We will open a case with Citrix on this; to be continued.</p>
<p>Citrix hooks being loaded when edgesight is installed:<br />
<span id="more-881"></span></p>
<blockquote><p>Address 61200000, length 1000, state 1000 MEM_COMMIT, type 1000000 module e:\program files\EdgeSight\Agent\Agent\Core\rsintcor32.dll<br />
Address 61201000, length 18000, state 1000 MEM_COMMIT, type 1000000 module e:\program files\EdgeSight\Agent\Agent\Core\rsintcor32.dll<br />
Address 61219000, length 9000, state 1000 MEM_COMMIT, type 1000000 module e:\program files\EdgeSight\Agent\Agent\Core\rsintcor32.dll<br />
Address 61222000, length 1000, state 1000 MEM_COMMIT, type 1000000 module e:\program files\EdgeSight\Agent\Agent\Core\rsintcor32.dll<br />
Address 61223000, length 4000, state 1000 MEM_COMMIT, type 1000000 module e:\program files\EdgeSight\Agent\Agent\Core\rsintcor32.dll<br />
Address 61300000, length 1000, state 1000 MEM_COMMIT, type 1000000 module e:\program files\edgesight\agent\agent\edgesight\esint32.dll<br />
Address 61301000, length 8000, state 1000 MEM_COMMIT, type 1000000 module e:\program files\edgesight\agent\agent\edgesight\esint32.dll<br />
Address 61309000, length 3000, state 1000 MEM_COMMIT, type 1000000 module e:\program files\edgesight\agent\agent\edgesight\esint32.dll<br />
Address 6130c000, length 1000, state 1000 MEM_COMMIT, type 1000000 module e:\program files\edgesight\agent\agent\edgesight\esint32.dll<br />
Address 6130d000, length 2000, state 1000 MEM_COMMIT, type 1000000 module e:\program files\edgesight\agent\agent\edgesight\esint32.dll<br />
Address 67f60000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\CtxSbxHook.DLL<br />
Address 67f61000, length 58000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\CtxSbxHook.DLL<br />
Address 67fb9000, length a000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\CtxSbxHook.DLL<br />
Address 67fc3000, length 4000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\CtxSbxHook.DLL<br />
Address 67fc7000, length 7000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\CtxSbxHook.DLL<br />
Address 6db20000, length 1000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\MSVCR90.dll<br />
Address 6db21000, length 96000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\MSVCR90.dll<br />
Address 6dbb7000, length 1000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\MSVCR90.dll<br />
Address 6dbb8000, length 2000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\MSVCR90.dll<br />
Address 6dbba000, length 4000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\MSVCR90.dll<br />
Address 6dbbe000, length 5000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_none_5090ab56bcba71c2\MSVCR90.dll<br />
Address 751e0000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\twnhook.dll<br />
Address 751e1000, length c6000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\twnhook.dll<br />
Address 752a7000, length 3000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\twnhook.dll<br />
Address 752aa000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\twnhook.dll<br />
Address 752ab000, length e000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\twnhook.dll<br />
Address 752b9000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\twnhook.dll<br />
Address 752ba000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\twnhook.dll<br />
Address 752bb000, length 6000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\twnhook.dll<br />
Address 752c1000, length 5000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\twnhook.dll<br />
Address 75320000, length 1000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4016_none_d0893820442e7fe4\MSVCR80.dll<br />
Address 75321000, length 63000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4016_none_d0893820442e7fe4\MSVCR80.dll<br />
Address 75384000, length 2b000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4016_none_d0893820442e7fe4\MSVCR80.dll<br />
Address 753af000, length 1000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4016_none_d0893820442e7fe4\MSVCR80.dll<br />
Address 753b0000, length 1000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4016_none_d0893820442e7fe4\MSVCR80.dll<br />
Address 753b1000, length 1000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4016_none_d0893820442e7fe4\MSVCR80.dll<br />
Address 753b2000, length 1000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4016_none_d0893820442e7fe4\MSVCR80.dll<br />
Address 753b3000, length 3000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4016_none_d0893820442e7fe4\MSVCR80.dll<br />
Address 753b6000, length 5000, state 1000 MEM_COMMIT, type 1000000 module C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4016_none_d0893820442e7fe4\MSVCR80.dll<br />
Address 753c0000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\scardhook.dll<br />
Address 753c1000, length 1d000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\scardhook.dll<br />
Address 753de000, length 4000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\scardhook.dll<br />
Address 753e2000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\scardhook.dll<br />
Address 753e3000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\scardhook.dll<br />
Address 753e4000, length 3000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\scardhook.dll<br />
Address 753f0000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\wdmaudhook.dll<br />
Address 753f1000, length 2000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\wdmaudhook.dll<br />
Address 753f3000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\wdmaudhook.dll<br />
Address 753f4000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\wdmaudhook.dll<br />
Address 753f5000, length 2000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\wdmaudhook.dll<br />
Address 75400000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\System32\cxinjime.dll<br />
Address 75401000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\System32\cxinjime.dll<br />
Address 75402000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\System32\cxinjime.dll<br />
Address 75403000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\System32\cxinjime.dll<br />
Address 75404000, length 2000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\System32\cxinjime.dll<br />
Address 75420000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\Sfrhook.dll<br />
Address 75421000, length 2000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\Sfrhook.dll<br />
Address 75423000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\Sfrhook.dll<br />
Address 75424000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\Sfrhook.dll<br />
Address 75425000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\Sfrhook.dll<br />
Address 75426000, length 2000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\Sfrhook.dll<br />
Address 75430000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\mmhook.dll<br />
Address 75431000, length f000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\mmhook.dll<br />
Address 75440000, length 2000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\mmhook.dll<br />
Address 75442000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\mmhook.dll<br />
Address 75443000, length 3000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\mmhook.dll<br />
Address 75450000, length 1000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\mfaphook.dll<br />
Address 75451000, length 2c000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\mfaphook.dll<br />
Address 7547d000, length 9000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\mfaphook.dll<br />
Address 75486000, length 4000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\mfaphook.dll<br />
Address 7548a000, length 4000, state 1000 MEM_COMMIT, type 1000000 module E:\program files\Citrix\system32\mfaphook.dll</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2010/02/citrix-edgesight-5-2-vs-memory-allocation-within-wow64/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>XenDesktop 3.0 and vCenter 4.0 permissions</title>
		<link>http://www.cupfighter.net/index.php/2009/10/xendesktop-3-0-and-vcenter-4-0-permission/</link>
		<comments>http://www.cupfighter.net/index.php/2009/10/xendesktop-3-0-and-vcenter-4-0-permission/#comments</comments>
		<pubDate>Thu, 15 Oct 2009 15:14:24 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Citrix]]></category>
		<category><![CDATA[VMWare]]></category>
		<category><![CDATA[vSphere 4]]></category>
		<category><![CDATA[XenDesktop]]></category>
		<category><![CDATA[ddc]]></category>
		<category><![CDATA[desktop delivery controller]]></category>
		<category><![CDATA[permissions]]></category>
		<category><![CDATA[vcenter]]></category>
		<category><![CDATA[vsphere]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=593</guid>
		<description><![CDATA[We are currently implementing a XenDesktop 3.0 environment on vSphere 4. Today I started to lock down the permissions the Xen Desktop Delivery Controllers (DDC) have on vCenter. There is not much documentation on this. Except for the kb article on VMWare Infrastructure 3 and XenDesktop which is lean and mean. But then i stumbled on this great blog [...]]]></description>
			<content:encoded><![CDATA[<p>We are currently implementing a XenDesktop 3.0 environment on vSphere 4.</p>
<p>Today I started to lock down the permissions the Xen Desktop Delivery Controllers (DDC) have on vCenter. There is not much documentation on this. Except for the kb article on <a href="http://support.citrix.com/servlet/KbServlet/download/16861-102-178726/cds_using_vmware.pdf">VMWare Infrastructure 3 and XenDesktop </a>which is lean and mean. But then i stumbled on this great blog post: <a href="http://theether.net/kb/100114">http://theether.net/kb/100114</a></p>
<p>Which describes the solution to the error &#8220;This virtual machine could not be retrieved from the hosting infrastructure&#8221;<br />
The solution basicly describes the proper permissioning for the accunts which access Virtual Center from the DDC and this even works for vCenter 4!</p>
<blockquote><p>In VirtualCenter:</p>
<p>- Select View | Administration</p>
<p>- Click Add Role<br />
- Enter the name XenDesktopGlobal<br />
- Check Global | Manage Custom Attributes<br />
- Click OK</p>
<p>- Click Add Role<br />
- Enter the name XenDesktopDataCentre<br />
- Check Datastore | Browse Datastore<br />
- Check Virtual Machine | Inventory | Create<br />
- Check Virtual Machine | Provisioning | Deploy Template<br />
- Check Resource | Assign Virtual Machine to Resource Pool<br />
- Click OK</p>
<p>- Click Add Role<br />
- Enter the name XenDesktop<br />
- Check Global | Set Custom Attribute<br />
- Check Virtual Machine | Interaction | Power On<br />
- Check Virtual Machine | Interaction | Power Off<br />
- Check Virtual Machine | Interaction | Suspend<br />
- Check Virtual Machine | Interaction | Reset<br />
- Click OK</p>
<p>- Select View | Inventory | Hosts And Clusters</p>
<p>- Select Hosts &amp; Clusters<br />
- Select the Permissions tab<br />
- Right click and select Add Permission from the context menu<br />
- Select XenDesktopGlobal for Assigned Role<br />
- Click Add<br />
- Select the account used in the Logon Information properties of the Desktop Group<br />
- Click OK<br />
- Click OK</p>
<p>- Select the Datacentre that contains the virtual desktops<br />
- Select the Permissions tab<br />
- Right click and select Add Permission from the context menu<br />
- Select XenDesktopDataCentre for Assigned Role<br />
- Click Add<br />
- Select the account used in the Logon Information properties of the Desktop Group<br />
- Click OK<br />
- Click OK</p>
<p>- Select the Cluster or Resource Pool that contains the virtual desktops<br />
- Select the Permissions tab<br />
- Right click and select Add Permission from the context menu<br />
- Select XenDesktop for Assigned Role<br />
- Click Add<br />
- Select the account used in the Logon Information properties of the Desktop Group<br />
- Click OK<br />
- Click OK</p></blockquote>
<p>Source: <a href="http://theether.net/kb/100114">http://theether.net/kb/100114</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/10/xendesktop-3-0-and-vcenter-4-0-permission/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Citrix HDX Mediastream for Flash Demo / Tutorial</title>
		<link>http://www.cupfighter.net/index.php/2009/07/citrix-flash-hdx-demo-tutorial/</link>
		<comments>http://www.cupfighter.net/index.php/2009/07/citrix-flash-hdx-demo-tutorial/#comments</comments>
		<pubDate>Tue, 14 Jul 2009 13:02:09 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Citrix]]></category>
		<category><![CDATA[XenApp]]></category>
		<category><![CDATA[XenDesktop]]></category>
		<category><![CDATA[Flash]]></category>
		<category><![CDATA[HDX]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=355</guid>
		<description><![CDATA[Citrix recently released a webinar by Derek Thorslund on Citrix Flash HDX, check it out here: http://www.citrix.com/tv/#video/635 I was pretty impressed when trialling Flash HDX myselfs&#8230; seeing is believing The movies below are not mine, but linked from youtube.com. It&#8217;s worth trialling yourselfs, you won&#8217;t be disappointed. Flash HDX Demo on XenApp Flash HDX Demo [...]]]></description>
			<content:encoded><![CDATA[<p>Citrix recently released a webinar by Derek Thorslund on Citrix Flash HDX, check it out here:<a href="http://www.citrix.com/tv/#video/635" target="_blank"> http://www.citrix.com/tv/#video/635</a></p>
<p>I was pretty impressed when trialling Flash HDX myselfs&#8230; seeing is believing <img src='http://www.cupfighter.net/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' />  The movies below are not mine, but linked from youtube.com. It&#8217;s worth trialling yourselfs, you won&#8217;t be disappointed.</p>
<p><p><a href="http://www.cupfighter.net/index.php/2009/07/citrix-flash-hdx-demo-tutorial/"><em>Click here to view the embedded video.</em></a></p><br />
Flash HDX Demo on XenApp</p>
<p><p><a href="http://www.cupfighter.net/index.php/2009/07/citrix-flash-hdx-demo-tutorial/"><em>Click here to view the embedded video.</em></a></p><br />
Flash HDX Demo on XenDesktop 3 (vs VMWare view 3)</p>
<p><a href="http://www.citrix.com/English/ss/downloads/details.asp?downloadId=1690021&amp;productId=186" target="_blank">Download the Technology preview of Citrix HDX Mediastream for Flash here</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/07/citrix-flash-hdx-demo-tutorial/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Aladdin eToken and Windows 7</title>
		<link>http://www.cupfighter.net/index.php/2009/07/aladdin-etoken-and-windows-7/</link>
		<comments>http://www.cupfighter.net/index.php/2009/07/aladdin-etoken-and-windows-7/#comments</comments>
		<pubDate>Tue, 14 Jul 2009 12:50:07 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Aladdin]]></category>
		<category><![CDATA[eToken]]></category>
		<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[Authentication]]></category>
		<category><![CDATA[PKIClient]]></category>
		<category><![CDATA[Smart Card]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=351</guid>
		<description><![CDATA[Check comments below for a solution to this issue! Thanks to Daniel Verbruggen! While testing the Aladdin eToken (USB form Factor Smart Card) with PKIClient 5.0 on windows 7, I discovered that the certificates are no longer published into the &#8220;Personal Certificate Store&#8221;. Which makes the eToken quite useless for now on Windows 7. I [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Check comments below for a solution to this issue! Thanks to Daniel Verbruggen!</strong></p>
<p>While testing the Aladdin eToken (USB form Factor Smart Card) with PKIClient 5.0 on windows 7, I discovered that the certificates are no longer published into the &#8220;Personal Certificate Store&#8221;.<br />
Which makes the eToken quite useless for now on Windows 7. I can however logon to the Windows 7 system using the eToken. But for all other purposes like VPN, website authentication etc it cannot be used since Windows 7 does not offer you to pick an certificate to authenticate with.<br />
The Smart Card device forwarding still works, over RDP and also within XP Mode on Windows 7.</p>
<p>I dropped Aladdin an email and asked them for timelines and Windows 7 support, but until now, nothing but silence. I will update this post when I know more. In the meanwhile if you&#8217;ve got a workaround&#8230; please drop a comment.</p>
<p style="text-align: center;"><a href="http://www.cupfighter.net/wp-content/uploads/2009/07/etoken.PNG"><img class="aligncenter size-full wp-image-352" title="etoken windows 7" src="http://www.cupfighter.net/wp-content/uploads/2009/07/etoken.PNG" alt="etoken windows 7" width="532" height="237" /></a><em><strong>eToken and PKIClient 5.0 on Windows 7</strong></em></p>
<p style="text-align: center;"><a href="http://www.cupfighter.net/wp-content/uploads/2009/07/etoken-xpmode.PNG"><img class="aligncenter size-full wp-image-353" title="etoken-xpmode" src="http://www.cupfighter.net/wp-content/uploads/2009/07/etoken-xpmode.PNG" alt="etoken-xpmode" width="605" height="450" /></a><em><strong>eToken and PKIClient 5.0 on Windows 7 with XP-Mode.</strong></em></p>
<p style="text-align: left;"><em><strong>Related issues:</strong></em></p>
<p style="text-align: left;"><a href="http://geekswithblogs.net/evjen/archive/2009/03/05/129868.aspx#473266" target="_blank">Cisco VPN, Windows 7 and eToken</a><br />
<a href="http://social.technet.microsoft.com/Forums/en-US/w7itprosecurity/thread/e2950b95-ea3f-4d8c-b4a6-0ef5bee5411a" target="_blank">Website Authentication, Windows 7 and eToken</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/07/aladdin-etoken-and-windows-7/feed/</wfw:commentRss>
		<slash:comments>26</slash:comments>
		</item>
		<item>
		<title>Windows 7 UAC whitelist: Code-injection Issue</title>
		<link>http://www.cupfighter.net/index.php/2009/07/windows-7-uac-whitelist-code-injection-issue/</link>
		<comments>http://www.cupfighter.net/index.php/2009/07/windows-7-uac-whitelist-code-injection-issue/#comments</comments>
		<pubDate>Tue, 14 Jul 2009 12:11:53 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[code injection]]></category>
		<category><![CDATA[UAC]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=346</guid>
		<description><![CDATA[Interesting insights on the new Windows 7 UAC&#8230; (http://www.pretentiousname.com/misc/win7_uac_whitelist2.html) Win 7 UAC Code-Injection: Summary On 5th February 2009 I wrote a proof-of-concept program to demonstrate a security flaw in Windows 7&#8242;s UAC, under default settings with beta build 7000 (also confirmed on 7022). This simply copied a file to Program Files without the user&#8217;s consent. [...]]]></description>
			<content:encoded><![CDATA[<p>Interesting insights on the new Windows 7 UAC&#8230; (<a href="http://www.pretentiousname.com/misc/win7_uac_whitelist2.html" target="_blank">http://www.pretentiousname.com/misc/win7_uac_whitelist2.html</a>)</p>
<div>
<blockquote><p><strong><a name="summary">Win 7 UAC Code-Injection: Summary</a></strong></p>
<p>On 5th February 2009 I wrote a proof-of-concept program to demonstrate a security flaw in Windows 7&#8242;s UAC, under default settings with beta build 7000 (also confirmed on 7022). This simply copied a file to Program Files without the user&#8217;s consent. In other words, it performed a file copy to a protected location, bypassing UAC.</p>
<p><em>&#8220;So what? All it does is copy a file?&#8221;</em></p>
<p>On 9th February 2009, to show the implications of being able to copy to System32 and Program Files, I created a second proof-of-concept program which uses the original exploit to open up a hole which in turn allows it to run any command or program with full elevation without itself requiring elevation or the user&#8217;s consent.</p>
<p>All of this is done <em>without</em> using the SendKeys or RunDll32 holes which were found earlier in February. It is done using a method which can attack almost any Windows executable and which is inherent to the changes Microsoft have made to UAC in Windows 7.</p>
<p>The proof-of-concept works on unmodified installs of Windows 7 beta build 7000 (and confirmed on 7022), both 32-bit and 64-bit versions, at default settings.</p>
<p>Setting UAC to its highest level, or using a non-admin account, will prevent the proof-of-concept from working by forcing it to display a UAC prompt. However, neither of those are defaults in the current Windows 7 betas.</p>
<p>As well as discussing the proof-of-concept code I argue that:</p>
<ul>
<li>Microsoft should <em>either</em> admit that local process elevation is a problem and make Windows 7 more secure by default 			<em>or</em> admit that the Windows 7 default UAC settings are security theater (as they offer no protection) and  			anti-competitive (as they are inflicted on third-party code despite local elevation supposedly being a non-issue).</li>
<li>If there is to be a UAC whitelist, or the equivalent of one, then it should be up to the user which Microsoft and third-party software is on it. Users should not be forced to expose themselves to risks from software they do not use. Conversely, if reducing UAC prompts in frequently-used software is needed to stop people disabling UAC entirely then that applies to third-party software as much as to bundled software (especially once a machine is past the &#8220;setup&#8221; phase).</li>
<li>UAC itself <em>was</em> a good API and a good design that was given a bad name because of the way it was used by 			Microsoft&#8217;s application-level code (such as Explorer and Control Panel). Accordingly, the user experience of having 			UAC enabled could have been vastly improved by changing the application-level code without opening a huge hole in UAC.</li>
<li>Microsoft created these problems themselves and, rather than fixing them properly, have taken the easy way out, 			unnecessarily making UAC less secure in the process. At the same time Microsoft expect third-party vendors to do 			a better job than they bothered to do using the API which they themselves designed.</li>
</ul>
<p>If you&#8217;re already shouting, <em>&#8220;But it&#8217;s only a beta!&#8221;</em> then there&#8217;s a section for you, too. <img src='http://www.cupfighter.net/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
<p>And, for the record, I like Windows and much of what Microsoft do, in general. I even like UAC (the API, <em>not</em> the way it has been used). I wrote this page because I care about the platform not because I get a kick out of attacking something Microsoft have done. I call things as I see them. I attack and criticise some of what Microsoft do and I support and defend Microsoft other things that they do.</p></blockquote>
</div>
<p>From: <a href="http://www.pretentiousname.com/misc/win7_uac_whitelist2.html" target="_blank">http://www.pretentiousname.com/misc/win7_uac_whitelist2.html</a></p>
<p>List of binaries which are allowed &#8220;auto-elevation&#8221; :</p>
<p><a href="http://www.withinwindows.com/2009/02/05/list-of-windows-7-beta-build-7000-auto-elevated-binaries/" target="_blank">http://www.withinwindows.com/2009/02/05/list-of-windows-7-beta-build-7000-auto-elevated-binaries/</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/07/windows-7-uac-whitelist-code-injection-issue/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>vSphere 4 Labmanager released</title>
		<link>http://www.cupfighter.net/index.php/2009/07/vsphere-4-labmanager-released/</link>
		<comments>http://www.cupfighter.net/index.php/2009/07/vsphere-4-labmanager-released/#comments</comments>
		<pubDate>Tue, 14 Jul 2009 11:53:56 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[VMWare]]></category>
		<category><![CDATA[vSphere 4]]></category>
		<category><![CDATA[labmanager]]></category>
		<category><![CDATA[vpshere 4]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=343</guid>
		<description><![CDATA[VMware has released Labmanager for Vpshere 4. http://www.vmware.com/products/labmanager/ VMware vCenter Lab Manager is the ideal solution for IT organizations who want to provide self-service provisioning and management capabilities to internal teams. Policy-based access control reduces administrative burden for IT, lowers infrastructure management costs and empowers project teams to deliver applications more quickly and with greater [...]]]></description>
			<content:encoded><![CDATA[<p>VMware has released Labmanager for Vpshere 4. <a href="http://www.vmware.com/products/labmanager/" target="_blank">http://www.vmware.com/products/labmanager/</a></p>
<blockquote><p>VMware vCenter Lab Manager is the ideal solution for IT organizations who want to provide self-service provisioning and management capabilities to internal teams. Policy-based access control reduces administrative burden for IT, lowers infrastructure management costs and empowers project teams to deliver applications more quickly and with greater agility.</p>
<div></div>
<div>
<h2>Deliver Higher Service Levels and Lower Infrastructure Costs</h2>
<p><span><em> </em></span>Lab Manager offers unique capabilities to simplify management of the internal cloud for dev/test:</p>
<ul>
<li>Self Service Portal &#8211; Provides on-demand access to a library of virtual machine configurations for end users while eliminating time-consuming provisioning tasks for IT by 95%.</li>
<li>Automated Resource Management &#8211; Allows dynamic allocation of resources in a multi-team environment, enforces quotas and access rights, and reclaims unused infrastructure services.</li>
</ul>
</div>
<li>Enterprise Scalability – Provides long-term return on investment with a scalable architecture for worldwide deployment, best in class performance and seamless integrations with in-house and 3rd party solutions.</li>
</blockquote>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/07/vsphere-4-labmanager-released/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Citrix Community Featured!</title>
		<link>http://www.cupfighter.net/index.php/2009/07/citrix-community-featured/</link>
		<comments>http://www.cupfighter.net/index.php/2009/07/citrix-community-featured/#comments</comments>
		<pubDate>Fri, 03 Jul 2009 17:32:46 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Citrix]]></category>
		<category><![CDATA[XenApp]]></category>
		<category><![CDATA[XenDesktop]]></category>
		<category><![CDATA[community]]></category>
		<category><![CDATA[featured]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=335</guid>
		<description><![CDATA[While checking the statistics of our blog I saw some referrals from http://community.citrix.com. We are listed as a Citrix Community featured website! We are very happy to see this, especially because this blog is very young! The first posts are from June 2009. We will try not to disapoint you. We have some very interesting [...]]]></description>
			<content:encoded><![CDATA[<p>While checking the statistics of our blog I saw some referrals from <a href="http://community.citrix.com/display/cdn/Community%20Featured%20Sites" target="_blank">http://community.citrix.com</a>.<br />
We are listed as a Citrix Community featured website! We are very happy to see this, especially because this blog is very young! The first posts are from <a href="http://www.cupfighter.net/index.php/2009/06/" target="_blank">June 2009</a>.</p>
<p>We will try not to disapoint you. We have some very interesting projects comming-up which involve very mission critical XenApp and XenDesktop environments. We will post our hands-on experiences here! So <a href="http://www.cupfighter.net/index.php/feed/" target="_blank">stay tuned</a> <img src='http://www.cupfighter.net/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' />  !</p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/07/citrix-community-featured/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ESX Cluster Stretched over two DC&#8217;s&#8230;</title>
		<link>http://www.cupfighter.net/index.php/2009/07/esx-cluster-stretched-over-two-dcs/</link>
		<comments>http://www.cupfighter.net/index.php/2009/07/esx-cluster-stretched-over-two-dcs/#comments</comments>
		<pubDate>Thu, 02 Jul 2009 14:34:46 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[VMWare]]></category>
		<category><![CDATA[cluster]]></category>
		<category><![CDATA[datacenter]]></category>
		<category><![CDATA[stretched]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=318</guid>
		<description><![CDATA[While doing some research found this article on the Pro&#8217;s and Con&#8217;s of stretched ESX cluster across two datacenters. A stretched cluster is the practice of having ESX member servers in a cluster that are geographically separated.   The reason this is generally done is to provide the ability to dynamically move workloads from one datacenter [...]]]></description>
			<content:encoded><![CDATA[<p>While doing some research found this article on the Pro&#8217;s and Con&#8217;s of stretched ESX cluster across two datacenters.</p>
<blockquote><p>A stretched cluster is the practice of having ESX member servers in a cluster that are geographically separated.   The reason this is generally done is to provide the ability to dynamically move workloads from one datacenter to another.   Often, the customer is also considering it for disaster recovery purposes (&#8220;I&#8217;ll just VMotion in case of a disaster&#8221;).  Can this be done &#8211; <strong><em><span style="text-decoration: underline;">ABSOLUTELY &#8211; but not considered lightly.</span></em></strong></p></blockquote>
<p>More here: <a href="http://virtualgeek.typepad.com/virtual_geek/2008/06/the-case-for-an.html" target="_blank">http://virtualgeek.typepad.com/virtual_geek/2008/06/the-case-for-an.html</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/07/esx-cluster-stretched-over-two-dcs/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XenDesktop 3 and vSphere 4</title>
		<link>http://www.cupfighter.net/index.php/2009/07/xendesktop-3-and-vsphere-4/</link>
		<comments>http://www.cupfighter.net/index.php/2009/07/xendesktop-3-and-vsphere-4/#comments</comments>
		<pubDate>Wed, 01 Jul 2009 07:00:36 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Citrix]]></category>
		<category><![CDATA[VMWare]]></category>
		<category><![CDATA[vSphere 4]]></category>
		<category><![CDATA[XenDesktop]]></category>
		<category><![CDATA[hotfix]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=300</guid>
		<description><![CDATA[Some hotfixes seem to be released, check http://support.citrix.com/article/CTX121997 &#38; http://support.citrix.com/article/CTX122057. Haven&#8217;t tried it myselfs so i&#8217;m curious to your experiences, please leave a comment, thanks. Overview of latest xendesktop patches here: http://support.citrix.com/product/xd/v3.0/ Citrix is working on a hotfix to have XenDesktop working with vSphere 4. Currently people are experiencing issues with the Desktop Delivery Controller (DDC) to [...]]]></description>
			<content:encoded><![CDATA[<p><strong>Some hotfixes seem to be released, check </strong><a href="http://support.citrix.com/article/CTX121997" target="_blank"><strong>http://support.citrix.com/article/CTX121997</strong></a> &amp; <a href="http://support.citrix.com/article/CTX122057"><strong>http://support.citrix.com/article/CTX122057</strong></a><strong>. </strong></p>
<p>Haven&#8217;t tried it myselfs so i&#8217;m curious to your experiences, please leave a comment, thanks.<br />
Overview of latest xendesktop patches here: <a href="http://support.citrix.com/product/xd/v3.0/">http://support.citrix.com/product/xd/v3.0/</a></p>
<p><span style="text-decoration: line-through;">Citrix is working on a hotfix to have XenDesktop working with vSphere 4. Currently people are experiencing issues with the Desktop Delivery Controller (DDC) to communicate properly with the vSphere SDK webservice. Also the XenDesktop Setup Wizard, which automates creation of Virtual Desktops, seems to be broken.</span></p>
<p><span style="text-decoration: line-through;">A partial workaround seems to be availlable; reapply the hack to enable /SDK over plain HTTP and HTTPS.</span></p>
<p><span style="text-decoration: line-through;">Change &#8220;c:\Documents and Settings\All Users\Application Data\VMware\VMware VirtualCenter\proxy.xml&#8221;</span></p>
<p><span style="text-decoration: line-through;">The section should look similar like this:</span></p>
<blockquote><p><span style="text-decoration: line-through;">&lt;e id=&#8221;1&#8243;&gt;<br />
&lt;_type&gt;vim.ProxyService.LocalServiceSpec&lt;/_type&gt;<br />
&lt;serverNamespace&gt;/sdk&lt;/serverNamespace&gt;<br />
&lt;accessMode&gt;httpAndHttps&lt;/accessMode&gt;<br />
&lt;port&gt;8085&lt;/port&gt;<br />
&lt;/e&gt;</span></p></blockquote>
<p><span style="text-decoration: line-through;">The hotfix, when availlable, will be posted </span><a href="http://forums.citrix.com/thread.jspa?threadID=246967&amp;tstart=0" target="_blank"><span style="text-decoration: line-through;">here</span></a><span style="text-decoration: line-through;">. More info can be found in this </span><a href="http://forums.citrix.com/thread.jspa?threadID=246967&amp;tstart=0" target="_blank"><span style="text-decoration: line-through;">support thread of the Citrix Forums</span></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/07/xendesktop-3-and-vsphere-4/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>MS CLM 2007: PKCS#11 smart card self-service control error: Invalid Signature.</title>
		<link>http://www.cupfighter.net/index.php/2009/06/ms-clm-2007-pkcs11-smart-card-self-service-control-error-invalid-signature/</link>
		<comments>http://www.cupfighter.net/index.php/2009/06/ms-clm-2007-pkcs11-smart-card-self-service-control-error-invalid-signature/#comments</comments>
		<pubDate>Tue, 30 Jun 2009 12:53:30 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[ILM 2007]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Troubleshooting]]></category>
		<category><![CDATA[certificate]]></category>
		<category><![CDATA[clm 2007]]></category>
		<category><![CDATA[error]]></category>
		<category><![CDATA[smartcard]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=289</guid>
		<description><![CDATA[I got this error (PKCS#11 smart card self-service control error: Invalid Signature.) while enrolling a certificate onto my Smartcard using Microsft CLM 2007 FP1. Looks like Microsoft Certificate Lifecycle Manager FP1 is not yet compatible with Windows 7 RC1. No issue however with Vista SP2. Only enrolling seems to be an issue, all other functionality [...]]]></description>
			<content:encoded><![CDATA[<p>I got this error (PKCS#11 smart card self-service control error: Invalid Signature.) while enrolling a certificate onto my Smartcard using Microsft CLM 2007 FP1.<br />
Looks like Microsoft Certificate Lifecycle Manager FP1 is not yet compatible with Windows 7 RC1. No issue however with Vista SP2.<br />
Only enrolling seems to be an issue, all other functionality just seems to work&#8230; if I find I solution to this then i will post it here&#8230; If you&#8217;ve got an solution? please leave a comment!</p>
<p style="text-align: center;"><a href="http://www.cupfighter.net/wp-content/uploads/2009/06/clm2007-error.png"><img class="aligncenter size-full wp-image-290" title="clm2007-error" src="http://www.cupfighter.net/wp-content/uploads/2009/06/clm2007-error.png" alt="clm2007-error" width="514" height="180" /></a></p>
<p>Windows XP Mode on Windows 7 could be used as workaround as well (The smart card is accessible from XP Mode!). But the following requirements must be met for this to work;</p>
<ul>
<li>Virtual XP Machine needs to be a domain member</li>
<li>Have the CLM Client tools installed</li>
<li>Have the SmartCard middleware installed.</li>
</ul>
<p style="text-align: center;"><a href="http://www.cupfighter.net/wp-content/uploads/2009/06/clm-xp-mode.png"><img class="aligncenter size-full wp-image-291" title="clm-xp-mode" src="http://www.cupfighter.net/wp-content/uploads/2009/06/clm-xp-mode.png" alt="clm-xp-mode" width="607" height="433" /></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/06/ms-clm-2007-pkcs11-smart-card-self-service-control-error-invalid-signature/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Kerberos Based SSO and Apache</title>
		<link>http://www.cupfighter.net/index.php/2009/06/kerberos-based-sso-and-apache/</link>
		<comments>http://www.cupfighter.net/index.php/2009/06/kerberos-based-sso-and-apache/#comments</comments>
		<pubDate>Tue, 30 Jun 2009 09:51:33 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[Interoperability]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Unix]]></category>
		<category><![CDATA[apache]]></category>
		<category><![CDATA[firefox]]></category>
		<category><![CDATA[IE]]></category>
		<category><![CDATA[kerberos]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[sso]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=275</guid>
		<description><![CDATA[Similar as OpenSSH Authentication Using Kerberos, but now Transparent Kerberos Authentication via Apache against Active Directory using mod_auth_kerb. This enables SSO from IE and Firefox on Apache, IE and Firefox configurations to enable this are also described in the document. Abstract:  The Apache authentication module mod_auth_kerb allows Apache to authenticate users against a Kerberos KDC [...]]]></description>
			<content:encoded><![CDATA[<p>Similar as<a href="http://www.cupfighter.net/index.php/2009/06/openssh-authentication-using-kerberos/" target="_blank"> OpenSSH Authentication Using Kerberos</a>, but now Transparent Kerberos Authentication via Apache against Active Directory using mod_auth_kerb. This enables SSO from IE and Firefox on Apache, IE and Firefox configurations to enable this are also described in the document.</p>
<blockquote><p><strong>Abstract</strong>:  The Apache authentication module mod_auth_kerb allows Apache to authenticate users against a Kerberos KDC including one from ActiveDirectory. Kerberos itself can be fairly complex to set up. This guide will attempt to show the specific steps required to make this possible as well as discuss security limitations specific to the interoperability matters. This guide assumes a basic understanding of Kerberos V and that the Active Directory domain controller is properly configured prior to starting this process.</p></blockquote>
<p><a href="http://port25.technet.com/archive/2008/01/25/technical-analysis-apache-with-mod-auth-kerb-and-windows-server.aspx" target="_blank">Technical Analysis: Apache with mod_auth_kerb and Windows Server</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/06/kerberos-based-sso-and-apache/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>OpenSSH Authentication using Kerberos</title>
		<link>http://www.cupfighter.net/index.php/2009/06/openssh-authentication-using-kerberos/</link>
		<comments>http://www.cupfighter.net/index.php/2009/06/openssh-authentication-using-kerberos/#comments</comments>
		<pubDate>Tue, 30 Jun 2009 09:07:09 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[Interoperability]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Unix]]></category>
		<category><![CDATA[kerberos]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[putty]]></category>
		<category><![CDATA[ssh]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=269</guid>
		<description><![CDATA[An interesting paper on how to authenticate against Active Directory using Kerberos and OpenSSH. This will enable SSO capabilities between Linux and windows, if used in combination with an Kerberos enabled SSH. And maybe even 2-factor authentication if combined with smartcards, haven&#8217;t tested this but should be working in theory if you use an SSH [...]]]></description>
			<content:encoded><![CDATA[<p>An interesting paper on how to authenticate against Active Directory using Kerberos and OpenSSH. This will enable SSO capabilities between Linux and windows, if used in combination with an Kerberos enabled SSH. And maybe even 2-factor authentication if combined with smartcards, haven&#8217;t tested this but should be working in theory if you use an SSH client from windows at least.</p>
<p>Components used:</p>
<p>On linux:</p>
<ul>
<li>openssh</li>
<li>openssh-server</li>
<li>samba-common</li>
<li>samba-client</li>
<li>krb5-workstation</li>
<li>krb5-libs</li>
</ul>
<p>On Windows:</p>
<ul>
<li>Windows Support Tools</li>
</ul>
<p><a href="http://port25.technet.com/Videos/research/OpenSSH%20on%20Linux%20using%20Windows.pdf" target="_blank">OpenSSH on Linux using Windows/Kerberos for Authentication</a></p>
<p><a href="http://www.helpdesk.umd.edu/topics/applications/kerberos/4775/" target="_blank">Putty With Kerberos</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/06/openssh-authentication-using-kerberos/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Undocumented Equallogic CLI Commands</title>
		<link>http://www.cupfighter.net/index.php/2009/06/undocumented-equallogic-cli-commands/</link>
		<comments>http://www.cupfighter.net/index.php/2009/06/undocumented-equallogic-cli-commands/#comments</comments>
		<pubDate>Fri, 26 Jun 2009 18:05:40 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Dell]]></category>
		<category><![CDATA[Equallogic]]></category>
		<category><![CDATA[cache]]></category>
		<category><![CDATA[cli]]></category>
		<category><![CDATA[command]]></category>
		<category><![CDATA[equallogic]]></category>
		<category><![CDATA[Troubleshooting]]></category>
		<category><![CDATA[undocumented]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=240</guid>
		<description><![CDATA[Equallogic&#8217;s are very nice boxes; fast, robust and very scalable (linear!; adding an enclosure adds processing power spindles and cache!). They don&#8217;t have licenses to enable features, WYSIWG!. But sometimes a bit of a &#8220;blackbox&#8221;. This has been greatly enhanced by the release of the Equallogic SAN HQ Software. It would be nice however if [...]]]></description>
			<content:encoded><![CDATA[<p>Equallogic&#8217;s are very nice boxes; fast, robust and very scalable (linear!; adding an enclosure adds processing power spindles and cache!). They don&#8217;t have licenses to enable features, WYSIWG!.<br />
But sometimes a bit of a &#8220;blackbox&#8221;. This has been greatly enhanced by the release of the<a href="http://www.cupfighter.net/index.php/2009/06/dell-equallogic-improvements/" target="_blank"> Equallogic SAN HQ Software</a>.<br />
It would be nice however if they would support synchronous replication between two groups, they do support a-synchronous replication though. And if they were a bit more flexible on the networking side by supporting VLAN tagging for example.</p>
<p>For the people who want to have a bit more insights:</p>
<p>SSH into your Equallogic group, login and enter &#8220;support&#8221;.</p>
<p>Be aware of the following message!</p>
<blockquote><p><strong>You are running a support command, which is normally restricted to PS Series Technical Support personnel. Do not use without instruction from Technical Support.</strong></p></blockquote>
<p>When running &#8220;cachetool&#8221;:</p>
<p style="text-align: center;"><a href="http://www.cupfighter.net/wp-content/uploads/2009/06/eql-cachetool.png"><img class="aligncenter size-full wp-image-241" title="eql-cachetool" src="http://www.cupfighter.net/wp-content/uploads/2009/06/eql-cachetool.png" alt="eql-cachetool" width="603" height="386" /></a></p>
<p>When running &#8220;netstat -i&#8221;:</p>
<blockquote><p>IP Statistics:<br />
4137170846 total packets received<br />
183707 total bad packets drop<br />
0 bad header checksums<br />
0 with size smaller than minimum<br />
0 with data size &lt; data length<br />
0 with length &gt; max ip packet size<br />
0 with header length &lt; data size<br />
0 with data length &lt; header length<br />
0 with bad options<br />
0 with incorrect version number<br />
0 fragments received<br />
0 fragments dropped (dup or out of space)<br />
0 malformed fragments dropped<br />
0 fragments dropped after timeout<br />
0 packets reassembled ok<br />
4136987139 packets for this host<br />
0 packets for unknown/unsupported protocol<br />
0 packets forwarded (0 packets fast forwarded)<br />
183707 packets not forwardable<br />
0 redirects sent<br />
5530887305 packets sent from this host<br />
0 packets sent with fabricated ip header<br />
0 output packets dropped due to no bufs, etc.<br />
47 output packets discarded due to no route<br />
0 output datagrams fragmented<br />
0 fragments created<br />
0 datagrams that can&#8217;t be fragmented</p></blockquote>
<p>There are more commands to discover. Try TAB completion and mind the difference between &#8220;Bad Command&#8221; &amp; &#8220;Ambigious command&#8221;. These commands are not shown when using &#8220;help&#8221; and most have a -? or -h option.</p>
<p>AGAIN: <strong>ONLY DO THIS ON <span style="text-decoration: underline;"><em>TEST SYSTEMS</em></span> AND<em><span style="text-decoration: underline;"> WHEN YOU KNOW WHAT YOU&#8217;R DOING ONLY!</span></em>&#8230; Don&#8217;t come whining here if stuff breaks&#8230;</strong></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/06/undocumented-equallogic-cli-commands/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Windows 7 Pricing revealed!</title>
		<link>http://www.cupfighter.net/index.php/2009/06/windows-7-pricing-revealed/</link>
		<comments>http://www.cupfighter.net/index.php/2009/06/windows-7-pricing-revealed/#comments</comments>
		<pubDate>Thu, 25 Jun 2009 17:10:46 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[price]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=235</guid>
		<description><![CDATA[The full version of Windows 7 Home Premium is priced at $199, with an upgrade from Vista or XP costing $119. The full version of Windows 7 Professional is $299, with upgrades going for $199. Windows 7 Ultimate is priced at $319, with the upgrade version at $219. In what&#8217;s perhaps a nod to the [...]]]></description>
			<content:encoded><![CDATA[<blockquote><p><span id="articleBody"><span id="articleBody">The full version of Windows 7 Home Premium is priced at $199, with an upgrade from Vista or XP costing $119. The full version of Windows 7 Professional is $299, with upgrades going for $199. Windows 7 Ultimate is priced at $319, with the upgrade version at $219. </span></span>In what&#8217;s perhaps a nod to the recession and increased competition in the software market, the prices are about 10% less than what Microsoft charged for the corresponding versions of <a href="http://www.techweb.com/encyclopedia/defineterm.jhtml?term=Windows%20Vista&amp;x=&amp;y=">Windows Vista</a> when that product shipped in January of 2007.</p></blockquote>
<p><span id="articleBody"></span></p>
<p><span>More here: <a href="http://www.informationweek.com/news/windows/operatingsystems/showArticle.jhtml?articleID=218101310&amp;subSection=All+Stories">http://www.informationweek.com/news/windows/operatingsystems/showArticle.jhtml?articleID=218101310&amp;subSection=All+Stories</a></span></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/06/windows-7-pricing-revealed/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Windows 7 / Win 2008 R2 RTM at July 13th!</title>
		<link>http://www.cupfighter.net/index.php/2009/06/windows-7-win-2008-r2-rtm-at-july-13th/</link>
		<comments>http://www.cupfighter.net/index.php/2009/06/windows-7-win-2008-r2-rtm-at-july-13th/#comments</comments>
		<pubDate>Wed, 24 Jun 2009 11:54:59 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Windows 2008]]></category>
		<category><![CDATA[Windows 7]]></category>
		<category><![CDATA[RTM]]></category>
		<category><![CDATA[Windows 2008 R2]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=223</guid>
		<description><![CDATA[From: http://bink.nu/news/windows-7-windows-server-2008-rtm-set-for-july-13th.aspx 4 days earlier then I had in my previous schedule, Microsoft has now set July 13th for RTM “sign-off” Sign off is the process where all divisions sign that they agree on the final code, which means the actual RTM build will be created a few days earlier, which is targeted on July [...]]]></description>
			<content:encoded><![CDATA[<p>From:<a href="http://bink.nu/news/windows-7-windows-server-2008-rtm-set-for-july-13th.aspx" target="_blank"> http://bink.nu/news/windows-7-windows-server-2008-rtm-set-for-july-13th.aspx</a></p>
<blockquote><p>4 days earlier then I had in my previous schedule, Microsoft has now set July 13th for RTM “sign-off”</p>
<p>Sign off is the process where all divisions sign that they agree on the final code, which means the actual RTM build will be created a few days earlier, which is targeted on July 10th.</p>
<p>The general availability (GA) is set to October 22nd, this is when you can buy it in stores in a box or on new PC’s (OEM).</p>
<p>We can expect the RTM much earlier on MSDN, Technet and Volume Licensing download sites, probably a few days after July 13th.</p></blockquote>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/06/windows-7-win-2008-r2-rtm-at-july-13th/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>DRM enforced on Audio Chip?</title>
		<link>http://www.cupfighter.net/index.php/2009/06/drm-enforced-on-audio-chip/</link>
		<comments>http://www.cupfighter.net/index.php/2009/06/drm-enforced-on-audio-chip/#comments</comments>
		<pubDate>Wed, 24 Jun 2009 10:48:10 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Dell]]></category>
		<category><![CDATA[Lenovo]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Audio]]></category>
		<category><![CDATA[driver]]></category>
		<category><![CDATA[DRM]]></category>
		<category><![CDATA[Stereo Mix]]></category>
		<category><![CDATA[Waveout]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=215</guid>
		<description><![CDATA[This is not so new news, but still want to drop some frustrations here&#8230; While trying to record audio from my system for a screencast I discovered that I was unable to select sound from my speakers (waveout mix, stereo mix or sometimes called &#8220;What you hear&#8221;). At first I thought this was a Windows [...]]]></description>
			<content:encoded><![CDATA[<p>This is not so new news, but still want to drop some frustrations here&#8230;<br />
While trying to record audio from my system for a screencast I discovered that I was unable to select sound from my speakers (waveout mix, stereo mix or sometimes called &#8220;What you hear&#8221;). At first I thought this was a Windows 7 issue with my drivers. But upgrading my drivers from the ones supplied by Microsoft to the ones supplied by Lenovo for my T500 did not help either.  So I contacted my buddy Google.</p>
<p style="text-align: center;"><img class="aligncenter size-full wp-image-197" title="nowaveout" src="http://www.cupfighter.net/wp-content/uploads/2009/06/nowaveout.png" alt="nowaveout" width="309" height="346" /></p>
<p>Soon I found some discussion on this topic on several forums including the Lenovo support forums.</p>
<p>Lenovo has an official kb article on this:<br />
<a onclick="javascript:pageTracker._trackPageview('/outbound/article/www-307.ibm.com');" href="http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-70822&amp;selectarea=SUPPORT&amp;tempselected=5" target="_blank">http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-70822&amp;selectarea=SUPPORT&amp;tempselected=5</a></p>
<p>The solution according to Lenovo:</p>
<blockquote><p>Symptoms #1 and #2 were caused by a design change agreement between Microsoft and the audio chip hardware supplier. The new change drops the support of mixed-stereo function and direct playback of microphone. The change in design calls to have these function implemented in application level in future. The goal of this design change is to begin standardizing the audio industry. The design change affected all PC vendors worldwide. In the future, Microsoft and audio vendors expect individual applications developers pick up these functions.</p></blockquote>
<p>The industry has been trying to protect digital rights for ages without much luck so far. And consumers are fighting this with all sorts of workarounds.<br />
So I started looking for workarounds on this one…  since I am not trying to workaround DRM, but just want to create a webcast using sound from my PC. (In this case a demo of the Flash HDX Experience Tech preview of Citrix).</p>
<p>Some Workarounds I found but did not work for my T500 with Windows 7:</p>
<ul>
<li><a onclick="javascript:pageTracker._trackPageview('/outbound/article/www.viprasys.com');" href="http://www.viprasys.com/vb/f44/i-found-solution-enable-stereo-mix-dell-pc-sigmatel-sound-card-22176/" target="_blank">Change driver inf file from crippled drivers</a></li>
<li>Stick a cable between headphones out and mic… does not sound like a very good idea…mic-input is mono and will give you terrible sound.. and maybe even blowing up your soundcard (mic’s are passive devices)</li>
<li>Buy an external Audio card, USB or PCMCIA&#8230; but we did not buy quite expensive notebooks to buy extra soundcards&#8230;</li>
<li>Use <a onclick="javascript:pageTracker._trackPageview('/outbound/article/software.muzychenko.net');" href="http://software.muzychenko.net/eng/vac.html" target="_blank">Virtual Audio Cable</a></li>
</ul>
<p>I tried the last without luck either because. The installation went OK but after the installation I got this pop-up:</p>
<p style="text-align: center;"><img class="aligncenter size-full wp-image-204" title="wdmkerneldriver" src="http://www.cupfighter.net/wp-content/uploads/2009/06/wdmkerneldriver.png" alt="wdmkerneldriver" width="269" height="242" /></p>
<p>Mmm, wonder if this kind of driver ever gets digitally signed. <a onclick="javascript:pageTracker._trackPageview('/outbound/article/www.neowin.net');" href="http://www.neowin.net/index.php?act=view&amp;id=32130" target="_blank">This also counts for Vista X64 versions</a>.</p>
<p><a href="http://www.soundblaster.com/products/" target="_blank">Apparently</a> other major vendors, like Dell and Packard Bell introduced the same issues. Dell however fixed it with an driver updated, since they only crippled the driver. But with Lenovo however it seems to be hard coded in the chip (In my case a Conexant High Definition SmartAudio 221).</p>
<p><a href="http://www.eggheadcafe.com/software/aspnet/32286847/vista-audio-solution--wh.aspx" target="_blank">Rumors go that this was done under the pressure of the RIAA (Record Industry Association of America).</a></p>
<p>For now I can only record my microphone sound&#8230; yeah! I wonder where this goes in the future&#8230; and if you have a solution to workaround this issue&#8230; please drop a comment, thanks.</p>
<p>The only workaround I found to record &#8220;what you hear&#8221; is to use <a href="http://www.highcriteria.com/" target="_blank">Total Recorder Pro</a>, which installs a signed kernel driver to record all sounds. I installed a trial which seems to really work on Windows 7, but I haven&#8217;t figured out on how to use this kernel driver to record Audio in other applications. Or use the Physical Cable solution&#8230;</p>
<p>More info here: <a onclick="javascript:pageTracker._trackPageview('/outbound/article/forums.lenovo.com');" href="http://forums.lenovo.com/lnv/board/message?board.id=Special_Interest_General&amp;thread.id=316&amp;view=by_date_ascending&amp;page=1" target="_blank"><br />
Lenovo Support forum thread<br />
</a><a href="http://www.ripten.com/2008/07/07/bend-over-dude-youre-getting-a-dell/" target="_blank">Ripten on Dell Stereomix issue</a><a onclick="javascript:pageTracker._trackPageview('/outbound/article/forums.lenovo.com');" href="http://forums.lenovo.com/lnv/board/message?board.id=Special_Interest_General&amp;thread.id=316&amp;view=by_date_ascending&amp;page=1" target="_blank"></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/06/drm-enforced-on-audio-chip/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>DFSR Debug Logging Explained</title>
		<link>http://www.cupfighter.net/index.php/2009/06/dfsfr-debug-logging-explained/</link>
		<comments>http://www.cupfighter.net/index.php/2009/06/dfsfr-debug-logging-explained/#comments</comments>
		<pubDate>Thu, 18 Jun 2009 11:55:10 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Active Directory]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Troubleshooting]]></category>
		<category><![CDATA[debug]]></category>
		<category><![CDATA[DFS]]></category>
		<category><![CDATA[DFSR]]></category>
		<category><![CDATA[replication]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=144</guid>
		<description><![CDATA[While troubleshooting some DFSR today, I came across this very nice and detailed post from the Directory Services Team. From: http://blogs.technet.com/askds/archive/2009/03/23/understanding-dfsr-debug-logging-part-1-logging-levels-log-format-guid-s.aspx Ned here again. Today begins a 21-part series on using the DFSR debug logs to further your understanding of Distributed File System Replication. While there are specific troubleshooting scenarios that will be covered, the [...]]]></description>
			<content:encoded><![CDATA[<p>While troubleshooting some DFSR today, I came across this very nice and detailed post from the Directory Services Team.</p>
<p>From: <a href="http://blogs.technet.com/askds/archive/2009/03/23/understanding-dfsr-debug-logging-part-1-logging-levels-log-format-guid-s.aspx" target="_blank">http://blogs.technet.com/askds/archive/2009/03/23/understanding-dfsr-debug-logging-part-1-logging-levels-log-format-guid-s.aspx</a></p>
<p>Ned here again. Today begins a 21-part series on using the DFSR debug logs to further your understanding of Distributed File System Replication. While there are specific troubleshooting scenarios that will be covered, the most important part of understanding any products logging is making sure you are comfortable with it <em>before</em> you have errors. That way you have some point of reference if things go wrong.</p>
<p>As you can probably guess, these posts were a long time in development. They are based on an internal DFSR whitepaper I have worked on for six months, and which went through review by a number of excellent folks here in Support, Field Engineering, and the Product Group itself. Except for the removal of all private source code references, this series is otherwise unchanged.</p>
<p>I&#8217;ll start with a couple posts on the logs themselves, how they are formatted, how they can be controlled, etc. Then I&#8217;ll dig into scenarios in detail, for both Windows Server 2003 R2 and Windows Server 2008. Don&#8217;t feel like you have to read and memorize everything – this series is a reference guide as well.</p>
<p class="MsoNormal" style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-family: 'Arial','sans-serif'; font-size: 10pt;"><span style="line-height: 115%; font-family: 'Arial','sans-serif'; font-size: 10pt;" lang="EN"><a href="http://blogs.technet.com/askds/archive/2009/03/23/understanding-dfsr-debug-logging-part-1-logging-levels-log-format-guid-s.aspx">Understanding DFSR debug logging (Part 1: Logging Levels, Log Format, GUID’s)</a><br />
<a href="http://blogs.technet.com/askds/archive/2009/03/24/understanding-dfsr-debug-logging-part-2-nested-fields-module-id-s.aspx"><span style="color: #0000ff;">Understanding DFSR debug logging (Part 2: Nested Fields, Module ID&#8217;s)</span></a><br />
<a href="http://blogs.technet.com/askds/archive/2009/03/25/understanding-dfsr-debug-logging-part-3-the-log-scenario-format-file-added-to-replicated-folder-on-windows-server-2008.aspx"><span style="color: #0000ff;">Understanding DFSR debug logging (Part 3: The Log Scenario Format, File Added to Replicated Folder on Windows Server 2008)</span></a><br />
<a href="http://blogs.technet.com/askds/archive/2009/03/25/understanding-dfsr-debug-logging-part-4-very-small-file-added-to-replicated-folder-on-windows-server-2008.aspx"><span style="color: #0000ff;">Understanding DFSR debug logging (Part 4: A Very Small File Added to Replicated Folder on Windows Server 2008) </span></a><br />
<a href="http://blogs.technet.com/askds/archive/2009/03/25/understanding-dfsr-debug-logging-part-5-file-modified-on-windows-server-2003-r2.aspx"><span style="color: #0000ff;">Understanding DFSR debug logging (Part 5: File Modified on Windows Server 2003 R2)</span></a><br />
<a href="http://blogs.technet.com/askds/archive/2009/03/30/understanding-dfsr-debug-logging-part-6-microsoft-office-word-97-2003-file-modified-on-windows-server-2008.aspx"><span style="color: #0000ff;">Understanding DFSR debug logging (Part 6: Microsoft Office Word 97-2003 File Modified on Windows Server 2008)</span></a><br />
<a href="http://blogs.technet.com/askds/archive/2009/03/31/foo2.aspx"><span style="color: #0000ff;">Understanding DFSR debug logging (Part 7: Microsoft Office Word 2007 File Modified on Windows Server 2008)</span></a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/01/understanding-dfsr-debug-logging-part-8-file-deleted-from-windows-server-2003-r2.aspx">Understanding DFSR debug logging (Part 8: File Deleted from Windows Server 2003 R2) </a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/01/understanding-dfsr-debug-logging-part-9-file-is-renamed-on-windows-server-2003-r2.aspx"><span style="color: #0000ff;">Understanding DFSR debug logging (Part 9: File is Renamed on Windows Server 2003 R2)</span></a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/02/understanding-dfsr-debug-logging-part-10-file-conflicted-between-two-windows-server-2008.aspx">Understanding DFSR debug logging (Part 10: File Conflicted between two Windows Server 2008)</a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/02/understanding-dfsr-debug-logging-part-11-directory-created-on-windows-server-2003-r2.aspx">Understanding DFSR debug logging (Part 11: Directory created on Windows Server 2003 R2)</a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/03/understanding-dfsr-debug-logging-part-12-domain-controller-bind-and-config-polling-on-windows-server-2008.aspx"><span style="color: #0000ff;">Understanding DFSR debug logging (Part 12: Domain Controller Bind and Config Polling on Windows Server 2008)</span></a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/06/understanding-dfsr-debug-logging-part-13-a-new-replication-group-and-replicated-folder-between-two-windows-server-2008-members.aspx">Understanding DFSR debug logging (part 13: A New Replication Group and Replicated Folder between two Windows Server 2008 members)</a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/07/understanding-dfsr-debug-logging-part-14-a-sharing-violation-due-to-a-file-locked-upstream-between-two-windows-server-2008.aspx">Understanding DFSR debug logging (Part 14: A sharing violation due to a file locked upstream between two Windows Server 2008)</a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/07/understanding-dfsr-debug-logging-part-15-pre-seeded-data-usage-during-initial-sync.aspx">Understanding DFSR debug logging (Part 15: Pre-Seeded Data Usage during Initial Sync)</a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/08/understanding-dfsr-debug-logging-part-16-file-modification-with-rdc-in-very-granular-detail-uses-debug-severity-5.aspx">Understanding DFSR debug logging (Part 16: File modification with RDC in very granular detail (uses debug severity 5))</a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/08/understanding-dfsr-debug-logging-part-17-replication-failing-because-of-blocked-rpc-ports-uses-debug-severity-5.aspx">Understanding DFSR debug logging (Part 17: Replication failing because of blocked RPC ports (uses debug severity 5))</a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/08/understanding-dfsr-debug-logging-part-18-ldap-queries-failing-due-to-network-uses-debug-severity-5.aspx">Understanding DFSR debug logging (Part 18: LDAP queries failing due to network (uses debug severity 5))</a><br />
</span><span style="line-height: 115%; font-family: 'Arial','sans-serif'; font-size: 10pt;" lang="EN"><a href="http://blogs.technet.com/askds/archive/2009/04/09/understanding-dfsr-debug-logging-part-19-file-blocked-inbound-by-a-file-screen-filter-driver-uses-debug-severity-5.aspx"><span style="color: #0000ff;">Understanding DFSR debug logging (Part 19: File Blocked Inbound by a File Screen Filter Driver (uses debug severity 5))</span></a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/09/understanding-dfsr-debug-logging-part-20-skipped-temporary-and-filtered-files-uses-debug-severity-5.aspx"><span style="color: #0000ff;">Understanding DFSR debug logging (Part 20: Skipped temporary and filtered files (uses debug severity 5))</span></a><br />
<a href="http://blogs.technet.com/askds/archive/2009/04/09/understanding-dfsr-debug-logging-part-21-file-replication-performance-from-throttling-uses-debug-severity-5.aspx"><span style="color: #0000ff;">Understanding DFSR debug logging (Part 21: File replication performance from throttling (uses debug severity 5))</span></a></span></span></p>
<p class="MsoNormal" style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-family: 'Arial','sans-serif'; font-size: 10pt;"><span style="line-height: 115%; font-family: 'Arial','sans-serif'; font-size: 10pt;" lang="EN"><br />
</span></span></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/06/dfsfr-debug-logging-explained/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Dtrace for Windows? Windows Performance Toolkit</title>
		<link>http://www.cupfighter.net/index.php/2009/06/dtrace-for-windows-windows-performance-toolkit/</link>
		<comments>http://www.cupfighter.net/index.php/2009/06/dtrace-for-windows-windows-performance-toolkit/#comments</comments>
		<pubDate>Wed, 17 Jun 2009 07:20:01 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[Troubleshooting]]></category>
		<category><![CDATA[Performance]]></category>
		<category><![CDATA[Sysinternals]]></category>
		<category><![CDATA[Toolkit]]></category>
		<category><![CDATA[Windows]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=117</guid>
		<description><![CDATA[So you have performance troubles on Windows, you probably already pulled the sysinternals from the shelve. But did you already know the Windows Performance toolkit for hardcore performance troubleshooting? This toolkit has three tools; xperf.exe &#8211; Captures traces, post-processes them for use on any machine, and supports command-line (action-based) trace analysis. xperfview.exe &#8211; Visual Trace [...]]]></description>
			<content:encoded><![CDATA[<p style="text-align: left;">So you have performance troubles on Windows, you probably already pulled the <a href="http://technet.microsoft.com/en-us/sysinternals/default.aspx" target="_blank">sysinternals</a> from the shelve. But did you already know the <a href="http://msdn.microsoft.com/en-us/performance/cc825801.aspx" target="_blank">Windows Performance toolkit</a> for hardcore performance troubleshooting?</p>
<p style="text-align: left;">This toolkit has three tools;</p>
<p style="text-align: left;"><strong>xperf.exe</strong> &#8211; Captures traces, post-processes them for use on any machine, and supports command-line (action-based) trace analysis.</p>
<p style="text-align: left;"><img class="alignnone" src="http://blogs.msdn.com/blogfiles/ntdebugging/040308_2106_WindowsPerf2.png" alt="" width="628" height="365" /></p>
<p style="text-align: left;"><strong>xperfview.exe</strong> &#8211; Visual Trace Analysis Tool &#8211; Presents trace content in the form of interactive graphs and summary tables</p>
<p style="text-align: left;"><img class="alignnone" src="http://blogs.microsoft.co.il/blogs/sasha/WindowsLiveWriter/XPerfWindowsPerformanceToolkit_10A67/image_2.png" alt="" width="640" height="441" /></p>
<p style="text-align: left;"><strong>xbootmgr.exe</strong> &#8211; Automates on/off state transitions and captures traces during these transitions.</p>
<p style="text-align: left;"><strong><em>So what do these tools do?</em></strong></p>
<p style="text-align: left;">Performance Analyzer is built on top of the Event Tracing for Windows (ETW) infrastructure. ETW enables Windows and applications to efficiently generate events, which can be enabled and disabled at any time without requiring system or process restarts. ETW collects requested kernel events and saves them to one or more files referred to as &#8220;trace files&#8221; or &#8220;traces.&#8221; These kernel events provide extensive details about the operation of the system. Some of the most important and useful kernel events available for capture and analysis are context switches, interrupts, deferred procedure calls, process and thread creation and destruction, disk I/Os, hard faults, processor P-State transitions, and registry operations, though there are many others.</p>
<p style="text-align: left;">One of the great features of ETW, supported in WPT, is the support of symbol decoding, sample profiling, and capture of call stacks on kernel events. These features provide very rich and detailed views into the system operation. WPT also supports automated perf testing. Specifically, <span style="font-family: Courier New;">xperf</span> is designed for scripting from the command line and can be employed in automated performance gating infrastructures (it is the core of Windows PerfGates). <span style="font-family: Courier New;">xperf</span> can also dump the trace data to an ANSI text file, which allows you to write your own trace processing tools that can look for performance problems and regressions from previous tests.</p>
<p style="text-align: left;"><img class="alignnone" src="http://blogs.microsoft.co.il/blogs/sasha/WindowsLiveWriter/XPerfWindowsPerformanceToolkit_10A67/StackTrace2.jpg" alt="" width="640" height="411" /></p>
<p style="text-align: left;">More info:</p>
<p style="text-align: left;"><a href="http://blogs.msdn.com/ntdebugging/archive/2008/04/03/windows-performance-toolkit-xperf.aspx" target="_blank">http://blogs.msdn.com/ntdebugging/archive/2008/04/03/windows-performance-toolkit-xperf.aspx</a><br />
<a href="http://msdn.microsoft.com/en-us/performance/cc825801.aspx" target="_blank">http://msdn.microsoft.com/en-us/performance/cc825801.aspx<br />
</a><a href="http://download.microsoft.com/download/5/E/6/5E66B27B-988B-4F50-AF3A-C2FF1E62180F/COR-T594_WH08.pptx" target="_blank">http://download.microsoft.com/download/5/E/6/5E66B27B-988B-4F50-AF3A-C2FF1E62180F/COR-T594_WH08.pptx</a><a href="http://msdn.microsoft.com/en-us/performance/cc825801.aspx" target="_blank"><br />
</a>
</p>
<p style="text-align: left;">Download the tools here:</p>
<p style="text-align: left;">
<ul>
<li><a id="ctl00_mainContentContainer_ctl01_ctl19" onclick="javascript:Track('ctl00_mainContentContainer_ctl01_ctl01|ctl00_mainContentContainer_ctl01_ctl19',this);" href="http://download.microsoft.com/download/e/2/7/e2700369-d072-4fdc-a451-c3355eab0613/xperf_x86.msi">WPT Kit v.4.1.1 x86 version (4.4MB)</a></li>
<li><a id="ctl00_mainContentContainer_ctl01_ctl20" onclick="javascript:Track('ctl00_mainContentContainer_ctl01_ctl01|ctl00_mainContentContainer_ctl01_ctl20',this);" href="http://download.microsoft.com/download/e/2/7/e2700369-d072-4fdc-a451-c3355eab0613/xperf_x64.msi">WPT Kit v.4.1.1 x64 version (4.8MB)</a></li>
<li><a id="ctl00_mainContentContainer_ctl01_ctl21" onclick="javascript:Track('ctl00_mainContentContainer_ctl01_ctl01|ctl00_mainContentContainer_ctl01_ctl21',this);" href="http://download.microsoft.com/download/e/2/7/e2700369-d072-4fdc-a451-c3355eab0613/xperf_ia64.msi">WPT Kit v.4.1.1 ia64 version (7.0MB)</a></li>
</ul>
<p><a href="http://www.cupfighter.net/index.php/2009/06/dtrace-for-windows-windows-performance-toolkit/"><em>Click here to view the embedded video.</em></a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/06/dtrace-for-windows-windows-performance-toolkit/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>VMware apologies for the Hyper-V crashes video</title>
		<link>http://www.cupfighter.net/index.php/2009/06/vmware-apologies-for-the-hyper-v-crashes-video/</link>
		<comments>http://www.cupfighter.net/index.php/2009/06/vmware-apologies-for-the-hyper-v-crashes-video/#comments</comments>
		<pubDate>Mon, 15 Jun 2009 13:25:34 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Hyper-V]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[VMWare]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=111</guid>
		<description><![CDATA[From: http://www.virtualization.info/2009/06/vmware-apologies-for-hyper-v-crashes.html When we look at the competition in the IT industry there’s nothing that beats the marketing guerrilla we are experiencing in the virtualization space. This is perfectly understandable considering that the vendor in control of the hypervisor is able to influence and in many ways able to control all the other companies that [...]]]></description>
			<content:encoded><![CDATA[<p>From: <a href="http://www.virtualization.info/2009/06/vmware-apologies-for-hyper-v-crashes.html">http://www.virtualization.info/2009/06/vmware-apologies-for-hyper-v-crashes.html</a></p>
<p>When we look at the competition in the IT industry there’s nothing that beats the marketing guerrilla we are experiencing in the virtualization space.</p>
<p>This is perfectly understandable considering that the vendor in control of the hypervisor is able to influence and in many ways able to control all the other companies that provide other pieces of the computing stack.<br />
For the first time ever the absolute domain of the OS vendor is threatened by the hypervisor vendor so that the former tries to turn virtualization into a platform feature while the latter tries to impose the technology as absolutely independent.</p>
<p>It’s also true that compared to ten years ago the vendors have new tools to spread fear, uncertainty and doubts (FUD) against their competitors: paid bloggers, Twitter, Facebook, YouTube and so much more are available to influence the prospects and build armies of fanboys that are ready to overreact and defend their beloved products no matter what.</p>
<p>Nowadays is becoming increasingly common that marketing departments cross the line.<br />
It’s much more uncommon to see a company that publicly apologies for a bad marketing action.</p>
<p><!-- MORE -->It’s the case of VMware which <a href="http://blogs.vmware.com/vmtn/2009/06/an-apology-from-scott-drummonds.html">apologized</a> for distributing a video of Microsoft Hyper-V crashing when its virtual machines were running a certain version of the proprietary VMmark benchmark platform.</p>
<p>The video, <a href="http://www.youtube.com/watch?v=XlLPmWwzHzM">which was available here</a>, was realized by the VMware Performance Team and uploaded on YouTube by <a href="http://www.linkedin.com/in/drummonds1974">Scott Drummonds</a>, Technical Marketing Manager at the company.<br />
Despite Drummonds is in the VMware Performance Team, where every aspect of the virtual infrastructure is taken deadly seriously, he didn’t publish any technical information about the test environment.</p>
<p>The lack of details unleashed a number of negative comments obliging <a href="http://www.linkedin.com/pub/bruce-herndon/3/436/91a">Bruce Herndon</a>, Senior Manager of R&amp;D at VMware, <a href="http://communities.vmware.com/blogs/bherndon/2009/06/08/setting-the-record-straight-on-the-hyperv-video">to unveil</a> that VMmark was executed inside Hyper-V virtual machines <a href="http://communities.vmware.com/blogs/drummonds/2009/05/15/video-on-hyperv-crashes">with unsupported configurations</a>.</p>
<p>At the end of the saga Drummonds <a href="http://blogs.vmware.com/vmtn/2009/06/an-apology-from-scott-drummonds.html">had to apology</a> and Herndon <a href="http://communities.vmware.com/blogs/drummonds/2009/05/15/final-thoughts-on-the-hyperv-video">had to admit</a> that:</p>
<blockquote><p>One of the more interesting emails I received pointed out that it unreasonable to blame Hyper-V for <a href="http://www.computerworld.com/action/article.do?command=viewArticleBasic&amp;articleId=9132389">the collapse of these very large and very busy websites</a>. Hyper-V&#8217;s stability issues would bring down individual VMs or small groups when the parent partition blue screened. I think that this is a reasonable observation, so its worth including here. I can&#8217;t say that Hyper-V was responsible for the MSDN and TechNet crashes. That would be for Microsoft to say, when and if they choose to expose the issue behind the outage.</p></blockquote>
<p>Of course Microsoft couldn’t be happier to overreact: <a href="http://blogs.technet.com/virtualization/archive/2009/05/09/hyper-v-winning-daily-vmware-fud-reaching-new-heights.aspx">part 1</a>, <a href="http://blogs.technet.com/virtualization/archive/2009/05/09/day-two-of-the-scott-drummond-vmware-fud-fiasco.aspx">part 2</a>, <a href="http://blogs.technet.com/virtualization/archive/2009/05/17/vmware-fud-fiasco-part-3.aspx">part 3</a>, <a href="http://blogs.technet.com/virtualization/archive/2009/06/07/update-on-the-vmware-fud-fiasco.aspx">part 4</a> and <a href="http://blogs.technet.com/virtualization/archive/2009/06/12/vmware-fud-fiasco-final.aspx">part 5</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/06/vmware-apologies-for-the-hyper-v-crashes-video/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Microsoft&#8217;s answer on VMWare&#8217;s labmanager?</title>
		<link>http://www.cupfighter.net/index.php/2009/06/microsofts-answer-on-vmwares-labmanager/</link>
		<comments>http://www.cupfighter.net/index.php/2009/06/microsofts-answer-on-vmwares-labmanager/#comments</comments>
		<pubDate>Mon, 15 Jun 2009 13:18:36 +0000</pubDate>
		<dc:creator>Roeland Kuipers</dc:creator>
				<category><![CDATA[Hyper-V]]></category>
		<category><![CDATA[Microsoft]]></category>
		<category><![CDATA[VMWare]]></category>

		<guid isPermaLink="false">http://www.cupfighter.net/?p=93</guid>
		<description><![CDATA[From http://www.virtualization.info/2009/06/microsoft-launches-visual-studio-lab.html The few vendors busy in the virtual lab automation space (which include VMware, Surgient, VMLogix, Skytap and the almost died StackSafe) may soon have a big, big problem called Microsoft. After wasting years not leveraging its huge developers community to spread virtualization in every corner of the world, the company is finally moving [...]]]></description>
			<content:encoded><![CDATA[<p>From <a href="http://www.virtualization.info/2009/06/microsoft-launches-visual-studio-lab.html">http://www.virtualization.info/2009/06/microsoft-launches-visual-studio-lab.html</a></p>
<p><span style="FONT-FAMILY: 'Calibri','sans-serif'"><span style="font-size: small;">The few vendors busy in the virtual lab automation space (which include VMware, Surgient, VMLogix, Skytap and </span><a href="http://www.virtualization.info/2009/03/is-stacksafe-management-leaving-en.html"><span style="color: #0000ff; font-size: small;">the almost died StackSafe</span></a><span style="font-size: small;">) may soon have a big, big problem called Microsoft. </span></span></p>
<p><span style="FONT-FAMILY: 'Calibri','sans-serif'"><span style="font-size: small;">After wasting years not leveraging its huge developers community to spread virtualization in every corner of the world, the company is finally moving on.</span></span></p>
<p><span style="FONT-FAMILY: 'Calibri','sans-serif'"><a href="http://www.virtualization.info/2008/11/microsoft-will-use-visual-studio-2010.html"><span style="color: #0000ff; font-size: small;">Announced in November 2008</span></a><span style="font-size: small;">, the integration between Visual Studio 2010, System Center Virtual Machine Manager (SCVMM) 2008 and Hyper-V 1.0/2.0 for virtual lab automation scenarios is now a reality called <strong><span style="FONT-FAMILY: 'Calibri','sans-serif'">Visual Studio 2010 Lab Management</span></strong>.</span></span></p>
<p><span style="FONT-FAMILY: 'Calibri','sans-serif'"><span style="font-size: small;">The product just entered </span><a href="http://www.microsoft.com/downloads/details.aspx?FamilyID=9df71545-4524-451b-8a17-9925b64010d2&amp;displaylang=en"><span style="color: #0000ff; font-size: small;">the beta 1 phase</span></a><span style="font-size: small;"> and has the potential to become a huge hit in the .NET world.</span></span></p>
<p class="MsoNormal" style="MARGIN: 0in 0in 0pt"><span style="FONT-FAMILY: 'Calibri','sans-serif'; mso-fareast-font-family: 'Times New Roman'"><a href="http://www.virtualization.info/images/MicrosoftlaunchesVisualStudioLabManageme_CEA6/vs2010VLA.png"><span style="TEXT-DECORATION: none; text-underline: none"><img id="_x0000_i1025" title="vs2010VLA" src="http://www.virtualization.info/images/MicrosoftlaunchesVisualStudioLabManageme_CEA6/vs2010VLA_thumb.png" border="0" alt="vs2010VLA" width="400" height="301" /></span></a></span></p>
<p><a href="http://www.virtualization.info/2009/06/microsoft-launches-visual-studio-lab.html" target="_blank">more</a><!-- MORE --></p>
]]></content:encoded>
			<wfw:commentRss>http://www.cupfighter.net/index.php/2009/06/microsofts-answer-on-vmwares-labmanager/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

