Songs

 

జ్ఞానికే ఎరుక సుజ్ఞానుల మరుగు

అజ్ఞానికి ఏమెరుకా… వారు ఉండే స్థలము సద్గురుడుండే మరుగు… అజ్ఞానికి ఏమెరుకా… వారు ఉండే స్థలము సద్గురుడుండే మరుగు… నానాక రుచులన్నీ… నాల్కకు ఎరుకా నానాక రుచులన్నీ… నాల్కకు ఎరుకా ఇట్లా కుండలెంబడి తిరిగే… తెడ్డుకేమెరుకా జ్ఞానికే ఎరుక సుజ్ఞానుల మరుగు అజ్ఞానికి ఏమెరుకా… వారు ఉండే స్థలము సద్గురుడుండే మరుగు… వనము సింగారంబు… కోయిలకెరుకా వనము సింగారంబు… కోయిలకెరుకా ఇట్లా కంపాలెంబడి తిరిగే… కాకికేమెరుకా జ్ఞానికే ఎరుక సుజ్ఞానుల మరుగు అజ్ఞానికి ఏమెరుకా… వారు ఉండే స్థలము సద్గురుడుండే మరుగు… బాటాసింగారంబు… అశ్వానికెరుకా బాటాసింగారంబు… అశ్వానికెరుకా ఇట్లా గరికా తుట్టెలు తినే… గాడిదకేమెరుకా //జ్ఞానికే ఎరుక// నాగస్వరము మోత… నాగుపాముకెరుకా నాగస్వరము మోత… నాగుపాముకెరుకా ఇట్లా తుంగాలెంబడి తిరిగే తుట్యాకేమెరుకా //జ్ఞానికే ఎరుక// మడుగు సింగారంబు… మత్స్యానికెరుకా మడుగు సింగారంబు… మత్స్యానికెరుకా ఇట్లా కడలా కడలా తిరిగే… కప్పాకేమెరుకా జ్ఞానికే ఎరుక సుజ్ఞానుల మరుగు అజ్ఞానికి ఏమెరుకా… వారు ఉండే స్థలము సద్గురుడుండే మరుగు… సద్గురుడుండే మరుగు… ||4|| ఓ ఓ ఓ ఓఓ… ఓఓ ఓఓ

Books

Here are the some of the Best book collections, 

• High Performance Habits: How Extraordinary People Become That Way , Hardcover 
• Getting Things Done : The Art of Stress-Free Productivity by David Allen
• 52 Red Pills
• You Can't Order Change
• The 7 Habits of Highly Effective People
• Rich Dad Poor Dad 
• The 4 Hour Work Week
• High Performance Habits
• Read People Like a Book
• Getting Things Done
• The 80/20 Principle
• Holy Cow

 

sirishg.blogspot.com moving to RightSwift.com

Hi there,
   Thought of converting my personal blog sirishg.blogspot.com to www.rightswift.com. Please stay tuned and feel free to visit my stunning work in progress website www.rightswift.com.

Thank you!

Update sharedLocation in InstallationManager (IBM Sterling B2B Integrator)

First of all the following value has to be unique to each install of Sterling Integrator. If you accidentally used shared location for cluster installation your second node installation not going to work. So here is how we can fix this.

1. Go to user home and move $USERHOME$/IBM/IBMSHARED to new local location.

2. Update the reference in /home/user/var/ibm/InstallationManager/installRegistry.xml

         

That's it. This will fix First node IBMSHARED location and we can proceed with second node installation.

How to verify?
1. Go to InstallManager tools
    cd /InstallationManager/IM_Linux/tools 
2. ./imcl listInstalledPackages -verbose

Validate the output something like below,

[Shared]
Shared resources directory: /opt/ibm/IBMIMShared

[Package group]
Name: Sterling Integrator
Installation directory: /opt/ibm/sfg
Translations:
Architecture: 64-bit

[Package]
Name: IBM Sterling B2B Integrator (com.ibm.sterling.integrator.install.offering)
Version: 5.2.6.1 (5.2.6001.20151220_1540)
Repository: /opt/ibm/media/b2birepo
Features:
    IBM Sterling File Gateway (filegateway.feature)
Fixes:
    None
Rollback versions:
    None

Enable CBC Ciphers in B2Bi v5.2.6.4, B2Bi v6.0, SFG v2.2.6.4 and SFG v6.0

Some of the IBM Sterling B2B Integrator(SI) customers wants to avoid SSH handshake using CBC Cipher as it is vulnerable. The link http://www.kb.cert.org/vuls/id/958563 explains that CBC Ciphers are security vulnerable and the solution is to use CTR Cipher instead of CBC Cipher. However, in SI versions 5020602 and 5020603, maverick (the third party api used for SSH/SFTP) version used is 1.4.60 which mandates that CBC Cipher should be present in Client side. Hence, disabling the CBC support using the security property supportCBCCiphers=false will result in SFTP communication failure with key based authentication.

To enforce the use of CTR Cipher in SI, we have introduced two new properties : SSHServerCipherList, SSHClientCipherList

a) security.SSHServerCipherList is the property to restrict the list of server side ciphers. In the SFTP Server adapter, "Preferred Cipher" drop down will pick the values specified in this property list.

b) security.SSHClientCipherList is the property to restrict the list of client side ciphers. In the SSH Remote Profile Configurations, "Preferred Cipher" drop down will pick the values specified in this property list.

The fix also needs the property security.supportCBCCiphers set as true in customer_overrides.properties.

This is how it works :

1. In the server side, SFTP Server Adapter can restrict Cipher as "ctr" by specifying the property value as
   security.SSHServerCipherList=aes128-ctr,aes192-ctr,aes256-ctr

   This will restrict the client to communicate only with "ctr" Ciphers.

2. In the client side, the Business Process should specify Ciphers as "cbr" and "ctr" by specifying the property value as
   security.SSHClientCipherList=aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc

   Also, the PreferredCipher should have the value of "ctr" in BP. This will ensure that the communication happens with "ctr" Cipher.

3. The external client should ensure that it communicates with server adapter with "ctr" Cipher.

In case, if there is a mismatch in client and server side Ciphers, an error message : Failed to negotiate a transport component [aes128-cbc,aes192-cbc,aes256-cbc] [aes256-ctr,aes128-ctr,aes192-ctr] [Unknown cause]:SSH_DISCONNECT_BY_APPLICATION:SFTP session channel closed by server.: should be displayed in SFTP Client Begin Session Service.

NOTE : This fix is available only as a custom ifix for SI versions 5020602 and 5020603. The changes are NOT available in the product.

https://www.ibm.com/developerworks/community/blogs/2f9ef931-1ac3-4d9b-a8ca-6e3f01b13889/entry/IBM_Sterling_B2B_Integrator_Enforce_CTR_Cipher_in_SFTP_Communication?lang=en

PGP - Generate Import Export PGP Keys

Generate PGP Keys

gpg --gen-key

Enter Key details, Email, Expiration etc.,

Export Secret Key

gpg --export-secret-key -a MY_PGP_KEY >> /tmp/MY_PGP_KEY.key

Export Public Key

gpg --export -a MY_PGP_KEY >> /tmp/MY_PGP_KEY.asc

Import Secret Key

gpg --import /tmp/MY_PGP_KEY.key

Import Public Key

gpg --import /tmp/MY_PGP_KEY.asc

Update Key Trust Trust after importing the Key

gpg --edit-key
$trust
$5
$save

Update SSH Config to accept ssh-dss Key

Add the following lines of code to the file called config under .ssh folder, If you don't find a file with the name config create one,

.ssh\config

Host *
HostkeyAlgorithms +ssh-dss
PubkeyAcceptedKeyTypes +ssh-dss

Note: When server respond with ssh-dss some ssh clients don't accept the connection. If you get ssh returns “Bad owner or permissions on ~/.ssh/config” then please change the permissions as follows,

chmod 600 ~/.ssh/config

Generate Self-Sign Certificate with SHA512

openssl req -newkey rsa:2048 -sha512 -nodes -keyout key.pem -x509 -days 365 -out certificate.pem
openssl x509 -text -noout -in certificate.pem
openssl pkcs12 -inkey key.pem -in certificate.pem -export -out certificate.p12
openssl pkcs12 -in certificate.p12 -noout -info
openssl pkcs12 -inkey key.pem -in certificate.pem -export -out certificate.p12
openssl pkcs12 -in certificate.p12 -noout -info
openssl pkcs12 -in /tmp/certificate.p12 -nokeys -out sirish_test.cer

Sterling Integrator User, Workflow Queries

Active Worksflows in Sterling Integrator

select DISTINCT NAME , WC2.WORKFLOW_ID, sysdate - START_T AS TIMEDIFF
From WORKFLOW_CONTEXT WC,
(
SELECT MAX(STEP_ID) STEP_ID , MIN(START_TIME) START_T, WORKFLOW_ID
FROM WORKFLOW_CONTEXT
GROUP BY WORKFLOW_ID
) WC2,
WFD
WHERE WC.WORKFLOW_ID = WC2.WORKFLOW_ID
AND WC.STEP_ID = WC2.STEP_ID
AND WC.NEXT_AI_ID != -1
AND WC.WFD_ID = WFD.WFD_ID
AND WC.WFD_VERSION = WFD.WFD_VERSION
AND BASIC_STATUS = 0

Sterling Integrator User & User Associated Groups List 

select YFS_USER.LOGINID, YFS_USER_GROUP.USERGROUP_NAME from YFS_USER, YFS_USER_GROUP, YFS_USER_GROUP_LIST
where YFS_USER.USER_KEY=YFS_USER_GROUP_LIST.USER_KEY
and YFS_USER_GROUP.USERGROUP_KEY=YFS_USER_GROUP_LIST.USERGROUP_KEY

SSHKeyGrabber in Sterling Integrator not working

http://www-01.ibm.com/support/docview.wss?uid=swg21628336

Sometimes SSHKeyGrabber don't work when we trying to extract Known Host Key from Sterling Integrator UI. The work around for this is disable StrictHostKeyChecking and download the Key from Linux/Windows and Check in the key to Sterling Integrator.

$ssh -o StrictHostKeyChecking=no user@sftp.host.com -p 22

Above command will save host key to known_hosts file located .~/.ssh/known_hosts

Note: Remove excess content from host key and just keep the key from ssh-rsa followed the key. 

B2BI MESA API/JAR's for Custom Service Development

asset.jar
b2b_aee.jar
b2b_base.jar
b2b_oba.jar
ebics.jar
entities.jar
gis.jar
install_foundation.jar
mailbox.jar
maverick-all.jar
perimeter.jar
platform_activemq.jar
platform_activity.jar
platform_afc.jar
platform_afc_security.jar
platform_aop.jar
platform_asi.jar
platform_baseutils.jar
platform_dv.jar
platform_ifcbase.jar
platform_ifcui.jar
platform_osgi.jar
platform_security.jar
platform_services.jar
resources.jar
soap.jar
standards.jar
translator.jar

Launching ikeyman from IBM JDK

Navigate to IBM JDK bin directory and execute the following command,

C:\Sirish\Softwares\ibm_sdk80\bin>java com.ibm.gsk.ikeyman.Ikeyman

Integration Concepts

Amazon EC2 (Amazon Elastic Compute Cloud)?
Amazon Elastic Compute Cloud (Amazon EC2) provides scalable computing capacity in the Amazon Web Services (AWS) cloud. Using Amazon EC2 eliminates your need to invest in hardware up front, so you can develop and deploy applications faster. You can use Amazon EC2 to launch as many or as few virtual servers as you need, configure security and networking, and manage storage. Amazon EC2 enables you to scale up or down to handle changes in requirements or spikes in popularity, reducing your need to forecast traffic.

Amazon S3?
Amazon Simple Storage Service is storage for the Internet. It is designed to make web-scale computing easier for developers.
Amazon S3 has a simple web services interface that you can use to store and retrieve any amount of data, at any time, from anywhere on the web. It gives any developer access to the same highly scalable, reliable, fast, inexpensive data storage infrastructure that Amazon uses to run its own global network of web sites. The service aims to maximize benefits of scale and to pass those benefits on to developers.

Amazon DynamoDB & Amazon RDS databases?

DynamoDB makes it simple and cost-effective to store and retrieve any amount of data, as well as serve any level of request traffic. All data items are stored on solid-state drives, which provide high I/O performance and can more efficiently handle high-scale requests. An AWS user interacts with the service by using the AWS Management Console or a DynamoDB API.

DynamoDB uses a NoSQL database model, which is nonrelational, allowing documents, graphs and columnar among its data models. A user stores data in DynamoDB tables, then interacts with it via GET and PUT queries, which are read and write operations, respectively.

Amazon CloudFront CDN?

Amazon CloudFront is a content delivery network (CDN) offered by Amazon Web Services. Content delivery networks provide a globally-distributed network of proxy servers which cache content, such as web videos or other bulky media, more locally to consumers, thus improving access speed for downloading the content.

Cloud vs Hybrid Cloud?
It's inclusion of Public and Private.

How will you stop a dos attack?

how will you troubleshoot a process in linux?

Answer was using, netstat, ps, lsof, gdb, top. the answer he was expecting was thread dump. this was troubleshooting httpd. you can only thread dump on java but i didn't want to argue with the guy, i just said I dont use that. He thinks he can do thread dump on any process obviously he never really troubleshooted any process in linux

What is error 500?

What is the difference between rdb and nosql?

how would you set up a server with db, no downtime, redundant, resilient, multi location, ..etc?

how will you troubleshoot issues on linux, like network, process..etc?

Lots of S.T.A.R. questions?

tell me a time when you have failed, achieved something more than you think?

stressed, ...etc how did you deal with it, what did you do...etc ?

when you enter a domain name into browser , what happens?

What is proxy?

What is the difference proxy and routing?

how CDN works?

What is IDS/IPS, which layer in osi does it work?

how would you do a sql replication?

What is NAT?

What is PAT?

how does load balancer works? which brand would you use? (I5)

how would you connect to your servers for administration and troubleshooting, linux and windows?

what are the differences between windows and linux?

what is error 500 on a web page?

esxi hosts?

VMWare Servers?

physical supermicro superservers?

Why HP?

The frustration was that in-person interview was mostly questions about what I like to do on weekends, what are my hobbies?

Design a fully redundant web solution in AWS?

Complicated Customer support and escalation scenarios?

How do you scale your 2 web and 1 DB app to 1000s of users and accept ordering system. Load Balancer, CDN, Storage?

Describe for us your process for working through a customer issue resolution cycle and your approach to customer communication?

SAN/NAS differences?

Troubleshooting in a "hybrid cloud" environments?

RAID basics?

My interest in cloud and any personal or professional experience there?

SQL/NoSQL, architectural questions?

Tell me about a time" questions, etc?

Technical questions - being to the point, architectural - discussed a lot, thought out loud, with pros and cons, multiple solutions and why. In behavior questions, emphasized on "I" and what I did as individual with STAR approach?

What is the difference between DoS and DDoS?
The Difference Between DoS and DDos Attacks. A Denial of Service (DoS) attack is different from a DDoS attack. The DoS attack typically uses one computer and one Internet connection to flood a targeted system or resource. The DDoS attack uses multiple computers and Internet connections to flood the targeted resource.

Networking (DNS, IPsec, BGP, VPN, Load Balancing)

Database (MySQL, SQL, Oracle)

Tools for Operations Automation and Configuration Management (e.g. Chef/Puppet)

Continuous Integration?

Wake up before your competition do!

Some inspiration from 5AM group on Facebook

You might not have a competitive advantage over your competition and maybe you don't have all the tools and resources to play with the big boys in your industry.

~

But one thing you do have is the ability to out work your competition!

~

You don't need to come up with anymore excuses about why you aren't where you want to be, what you need to do is get up earlier, show up and show the world you're not here to make up the numbers and be another statistic!

~

If you're not prepared to out work your competition and wake up before 5am every single day then maybe it's time to ask yourself how serious you are about your goals and dreams!

~

Stop doing normal things and stop performing at average levels because that is exactly why you aren't where you want to be...

~

Be unusual, be abnormal, be obsessed, be prepared to wake up at 4:00am and work harder than anyone you've ever met because that is the only way you're ever going to become exceptional, renowned, world class and successful.

~

You've tried normal and you know where that gets you so now it's time to try crazy, obsessive, intense and exceptional and once you commit to that path....your life will never be the same again!

Grab Known Host Key From Remote SFTP Server in OpenSSH Format

1. Get the host key by running this command: ssh-keyscan > /tmp/ssh_out.openssh

2. Convert the host key format by running this command: ssh-keygen -l -f /tmp/ssh_out.openssh

Watch "Webinar : Practical SOA for the Solution Architect" on YouTube

https://www.youtube.com/watch?v=1KXKppaOgtY&feature=youtu.be

Determine Which version of Windows Installer is installed

To determine which version of Windows Installer is installed on a computer, follow these steps:

1) Click Start, click Run, type %systemroot%\system32, and then click. OK.
2) Right-click Msi.dll, and then click. Properties.
3) Click the Version tab, and then note the File version number.

Watch "WSO2Con 2011 - Enterprise Integration Patterns: Past, Present and Future" on YouTube

https://www.youtube.com/shared?ci=Kb-UT1kqJ3Q

JMeter SSH Sampler

https://github.com/linkeshkanna/Jmeter.SSH.FTP.Request

Jmeter Custom Sampler to make SFTP Request

To Create SSH FTP Requests in JMeter, we need this custom Sampler. This contains two jar files. 1. jmeter-ssh-sampler-1.0.2-SNAPSHOT.jar 2. jsch-0.1.53.jar We can generate this by downloading the source and building it using Maven.

I just built it using maven and checked in the jar files here.

To install this in Jmeter, 1. Copy the jmeter-ssh-sampler-1.0.2-SNAPSHOT.jar to the "Jmeter/Lib/ext" directory. 2. Copy the "jsch-0.1.53.jar" to the "Jmeter/Lib" directory 3. Restart Jmeter.

I have also added a sample test to list of the directory contents in a Public SFTP Server.

Install 3rdParty JAR on IBM B2B Sterling Integrator

If we want to install external JARs (3rdParty JARs) on Sterling Integrator here are the steps,

1. Stop B2BI Cluster (All Nodes) by running hardStop.sh/cmd.
2. install3rdParty.sh -j
         -j = JAR
         -l = Library File
3. Run setupfile.sh
4. Repeat Step 2 and 3 on all Nodes.
5. Restart B2BI Cluster.

Validation Procedure:

If installation was successful then you will see an entry for your new JAR file in dynamicclasspath.cfg file.  

Watch "Sterling B2B Integrator" on YouTube

Sterling B2B Integrator: http://www.youtube.com/playlist?list=PLuG9ugPnSkt5sMigpzbawknri85fFfa52

IBM Sterling B2B Integrator Map Editor Rules Hierarchy

Here is how IBM Sterling B2B Integrator map editor translator controller parse and executes the Rules.

Pre-Session (Variable Declarations & Hard Coded Values)
Root On Begin
   Root Exedend Rules
Record On Begin
Standard Rule & Exedend Rule

Record On End
Root On Begin
Post-Session (Executes before end of map)

Calling B2BI WebService from SOAP UI

soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:mesa="http://www.sterlingcommerce.com/mesa"
   soapenv:Header/
   soapenv:Body
      mesa:DEMO_WEB_SERVICE xmlns:mesa="http://www.sterlingcommerce.com/mesa"
Payload goes here....
      /mesa:DEMO_WEB_SERVICE
   /soapenv:Body

/soapenv:Envelope



Need to add namespace xmlns:mesa="http://www.sterlingcommerce.com/mesa under soapenv:Body.

Updating bashrc file in Ubuntu

Update bashrc file for to default required path variables, xclock setup etc. I find this is clean way then setting up or updating path variables under each user profile unless it is mandatory. This is clean way for sandbox setup at least not for production though.

.bashrc file location:

/etc/bash.bashrc

####Sirish Reddy: Settings ########
PATH=/u01/app/jdk1.6.0_25/bin:$PATH
export LANG=en_US
xhost local:oracle
xhost local:sirishg
xhost local:apache

"Mayor Billy Kenoi, of Hawai'i Island, at HPU's commencement" on YouTube

How To Learn Anything in 20 Hours

Here is the interesting video I came across which teach the logic on how to learn anything in 20 Hours, Interesting... 

Setting up VisualVM from Sterling Integrator

1. Download  VisualVM 

    https://java.net/projects/visualvm/downloads/download/release138/visualvm_138.zip

2. Find the value of the property called ACTIVEMQ_JMX_PORT from sandbox.cfg.

3. Add Remote Host First and under Remote Host add Add JMX Connection. 

    <SI HOST Name>:<ACTIVEMQ_JMX_PORT>

    No need of providing user credentials and Save the connection.