Hide class files on Eclipse's Open Resource Dialog

Problem:
When start typing criteria on Eclipse's Open Resource dialog (Ctrl+Shift+R) sometimes .class files shown on Matching Items's box.  In my case they are only compiled JSPs not regular Java's classes.

Solution:
Mark folder containing .class files as derived. In my case, i marking 'target' folder (yes it's maven project), and here's the steps:

1. right click the folder on Project Explorer,
2. click on 'Properties',
3. check 'Derived' under 'Attributes' part.
4. click 'OK', 

done, the .class files won't shown on Open Resource dialog again.

Derived attibute on foder properties

If .class file still shown then you might want to:

1. examine Open Resource menu (accessed by clicking triangle button on dialog's top right) the 'Show Derived Resources' should be  unchecked.
2. find another folder containing .class files and check their 'Derived' property.

access to Open Resource's menu

Calculate days in BASH

I need a quick ways to calculate age in days from a given date, so i use this command:

echo \(`date +%s`-`date -d '2012-04-01' +%s`\)/86400 | bc

Copy a Symbolic Link on Linux

The Problem:
I can't use cp to copy a symlinks to a directory, but i don't want to re-create it which could lead to typo problem due to long target path.

The Solution:
After quick search i found two working ways to do it.

First,
you still need to re-create then link but doesn't have to re-type target path, use readlink output instead.

ln -s `readlink ~/v1/jboss-deploy` ~/v2/jboss-deploy

In above command the `jboss-deploy` is a symlink to a directory somewhere in this box.




Second,
just use -P option on cp


cp -P ~/v1/jboss-deploy ~/v2/

well, then i should admit that i never read cp manual carefully... =="

git diff's ESC chars problem on xterm

First time using git diff on xterm, the displayed result showing ESC[ characters instead of colored line.

Found this after searching, and after checking less man pages i concluded that i only need -R options since i only want to clear ESC[ characters and colored diffs. So i add this line on my ~/.bashrc :

LESS="-R"; export LESS


and here is the result after re-login:

Securing JBoss AS From Remote Exploit

This morning i got a call from office telling that she can't accessing our ERP application. After some checking i found that there are something wrong with Jboss AS. There are some unrecognized .war files on deploy dir. The .war files only contain one .jsp file with similar code. The results from web search lead me to this website. The code was same, and obviously we were the victim.

It was exploiting standard and unsecured jmx console on jboss (i'm still using jboss v4.0.2), well.. that was entirely my fault wasn't to prioritize securing jmx and web console on production server. The code on .jsp was intended to open a console (cmd on windows or sh on linux) and fortunately the jboss service was executed by user 'jboss' not 'root' (you can imagine what happen if it was root).

This 'accident' forcing me to take time (mine and users) to apply jboss security. First step is i opening bookmark list on my browser (believe me or not i was bookmarking an some articles about securing jboss a couple months ago) and start to apply them. Here are the links : SecuringTheJMXConsole - Jboss Comunity and JBoss Application Server Security Vulnerability Notice.

Now some security was applied, and i need to test it right? download the exploit code and put it into linux box because it wrote using perl and i don't have perl on my windows. First i try the exploit to jboss on my development server which using standard/unsecured version and the exploit was working, this proofing that the exploit is wasn't defect. Then i try it to jboss on production server which the jmx and web concole already secured, and failed while complaining can't upload the file.


For now the jboss is secure from the exploit while i still need to explore other posibilities.

Update: April 1, 2011

Days after implementing secure jmx and web console, i'm not found any alien .war file any more. But netstat result mention some unknown irc connections.
Then i take these step:

1. Run a full scan and found 3 infected files:

ieh: Trojan.Perl.Shellbot-2
.X-un1x: Trojan.Perl.Shellbot-2
xh: Linux.Rst

and remove them.

2. I also checking /tmp and removing some suspicious files/folders which is owned by jboss and nothing to do with currently deployed legit applications (i.e: hibernate cache files).

3. Kill all process by PID shown from netstat (i use -p option to show pid).

4. Re-check all process which is owned by jboss except one which running Jboss Server.

5. Check again netstat to make sure there are no more unwanted connections.

WAR File Auto Deployer

Ok, here its scripts for auto deploying war file, so i don't have to wait all the employees logged out before i can bring down the server ;)

1) create a file with name '/erp/scripts/war-deployer.sh'

#!/bin/bash
#
# WAR File Deployer Script
# description: Its simply stop service, backup file, replace file, and start the service again.
#

WAR_FILE="erp.war"
DIST_DIR="/erp/readyToDeploy"
DEPLOY_DIR="/usr/jboss/server/default/deploy"

# stop jboss server
/sbin/service jbossd stop

# backup
BACKUP_FILE="/erp/backup/$WAR_FILE-"`date +%F_%H-%M`".bak"
echo "Creating backup file $BACKUP_FILE ..."
/bin/cp "$DEPLOY_DIR/$WAR_FILE" "$BACKUP_FILE"

# replace
echo "Replacing $DIST_DIR/$WAR_FILE with $DEPLOY_DIR/$WAR_FILE"
/bin/cp "$DIST_DIR/$WAR_FILE" "$DEPLOY_DIR/$WAR_FILE"

# start jboss server
/sbin/service jbossd start


2) Then assign it in crontab:
run command crontab -e to insert job to be executed tonight into crontab. Then add following line:

05 22 7 3 * /erp/scripts/war-deployer.sh

It will execute script /erp/scripts/war-deployer.sh on 07 March 2011 22:05

3) Done! and let see if it will do the job :p

By given method above, all i need to do is put new erp.war file on distribution directory and change Day-of-month and Month field on crontab every time i need to update the application.
Btw, it will work great too if i have fixed schedule to update the app. consider this cycle: develop/bug fix > test > distribute it by put war file on dist directory and forget the 'deploy' part... ;)


read more about cron on : http://en.wikipedia.org/wiki/Cron.

update[March 26, 2011]
- fixed script (variable $DIST_FILE -> $DIST_DIR).
- crontab entry (year removed, and change ? with *).

Handling Timestamp '0000-00-00 00:00:00' in jdbc

here i found quick ref to resolve SQLException when Timestamp value is '0000-00-00 00:00:00', link

Summary

In hibernate.cfg.xml:
<property name="hibernate.connection.zeroDateTimeBehavior">convertToNull</property>

In hibernate.properties:
hibernate.connection.zeroDateTimeBehavior=convertToNull

In mysql-ds.xml file for JBOSS:
<connection-property name="zeroDateTimeBehavior">convertToNull</connection-property>

In JDBC URL:
jdbc:mysql://yourserver:3306/yourdatabase?zeroDateTimeBehavior=convertToNull

Replikasi MySQL Database

Dengan adanya kebutuhan untuk membuat pelaporan yang komplek tanpa membebani kenerja aplikasi utama maka saya merencanakan membuat modul tambahan khusus untuk sistem pelaporan. Aplikasi ini akan dibuat terpisah dengan menggunakan database replika dari database yang digunakan oleh aplikasi utama. Berdasarkan referensi mysql tentang replikasi dan howtos ini dan ini kelihatannya akan cukup mudah implementasi replika database tersebut, ok waktunya praktek.. wish me luck..

HOWTO: Download package dependencies for offline installation

Hari ini kebetulan ada waktu untuk mempelajari instalasi OpenOffice.org3 dengan menggunakan bantuan buku + cd info linux extra no.01/2009, isinya full tentang OOo3.
Skip dulu yang lainnya, langsung ke installasi! di buku itu dijelaskan step-by-step installasi pada Windows, OSX, dan Linux (Ubuntu 8.10, untuk distro lainnya hanya sekilas saja). Langsung coba install di XP, lancar, seperti biasa aja tinggal klik next terus :), berikutnya install di OSX, nah kalo ini saya ga punya jd skip aja deh.
Berikutnya adalah ubuntu, kebetulan versi-nya sama dengan ubuntu di komp yang sedang saya gunakan. Tapi maklum karena ini komp bekas pegangan orang lain dan baru bbrp hari saya pakai jadi ngga tau apakah OOo yang ada jalan atau tidak (kemungkinan besar sih tidak) karena ternyata tidak jre atau jdk yang terinstall. Itu pun baru saya ketahui pada saat install OOo3 tiba-tiba muncul message "javaldx: Could not find a Java Runtime Environment!". Setelah saya cek pada synaptic pkg manager, memang pkg jre atau jdk memang tidak terinstall... duh. Ternyata cd info linux tidak menyertakan jre. Memang ga susah sih, kita tinggal pake synaptic untuk download dan install jre/jdk nya (soalnya saya ga pegang cd ubuntu-nya :( ), tapi ada bbrp komp dengan os ubuntu yang akan di-upgrade OOo-nya. Setelah googling dikit saya nemu cara untuk mendownload package beserta dependencies-nya, sehingga saya bisa download pkg jre untuk dipajang di server files dan tidak perlu dowload jre setiap install jre.

Restore MySQL Database Using Java

Restoring MySQL database from a backup file (SQL File).

import java.io.FileInputStream;
import java.io.OutputStream;

public class MySQLBackupUtil {

  private static void restore(String host, String port, String user,
      String password, String db, String sqlFile) throws Exception {
    int BUFFER = 10485760;

    String cmd = "mysql --host=" + host;
    if (port != null && port.length() > 0)
      cmd += " --port=" + port;
    cmd += " --user=" + user;
    if (password != null && password.length() > 0)
      cmd += " --password=" + password;
    cmd += " " + db;

    Process run = Runtime.getRuntime().exec(cmd);
    FileInputStream fis = new FileInputStream(sqlFile);
    OutputStream out = run.getOutputStream();
    byte[] buf = new byte[BUFFER];
    int len;
    while ((len = fis.read(buf)) >= 0)
      out.write(buf, 0, len);

    fis.close();
    out.close();
  }

  public static void main(String[] args) {
    try {
      String sqlFile = "D:\\APP\\workspace\\chunkcode\\dbtest.sql";
      restore("localhost", "3306", "root", "", "dbtest", sqlFile);
    } catch (Exception e) {
      e.printStackTrace();
    }

  }
}