Build a Netatalk Time Capsule for OSX Lion 10.7 using Debian 6.0 Squeeze
December 25, 2011 by mike · 20 Comments

After going to the Apple Store with a friend and seeing the $300+ Apple Time Capsule I decided to see if I could do the same thing with Netatalk. Turns out I could but if you’re using Debian stable like me you need to get at netatalk 2.2.x before it’ll work with OSX Lion 10.7.x. After seeing a variety of other examples out there on the net and getting a little confused as to why they were doing certain things I decided to just post how I did it. Also, rather than install things from source I like to use debian packages to keep servers clean. But there was a small problem due to a netatalk make bug that debian’s package didn’t account for. So I will post those packages I backported to stable for this.
Packages
Debian 6.0 (Squeeze) AMD64
Debian 6.0 (Squeeze) i386
Netatalk Time Capsule Server Setup
After you’ve installed the packages create a service group by creating /etc/avahi/services/afpd.service and adding the contents below: (this might not be necessary with netatalk 2.2)
<?xml version="1.0" standalone='no'?><!--*-nxml-*-->
<!DOCTYPE service-group SYSTEM "avahi-service.dtd">
<service-group>
<name replace-wildcards="yes">%h</name>
<service>
<type>_afpovertcp._tcp</type>
<port>548</port>
</service>
<service>
<type>_device-info._tcp</type>
<port>0</port>
<txt-record>model=Xserve</txt-record>
</service>
</service-group>
Make a directory to store your time machine data:
Now mark the volume saying it is a supported time machine share:
Define a volume in /etc/netatalk/AppleVolumes.default with the allowed user, usedots to support hidden files, uprivs for afp3 privileges that osx lion needs, and tm to enable time machine support. (highlighted below)
# By default all users have access to their home directories. ~/ "Home Directory" /var/timemachine TimeMachine allow:joe cnidscheme:dbd options:usedots,upriv,tm
Now that things are configured we need to restart avahi.
And restart netatalk
Apple OSX 10.7.x Lion Setup
Now set your OSX installation so it sees unsigned time machine volumes.
You should now see your volume in Time Machine Preferences under “Select Disk…”.

Debian/Ubuntu Nmap 5.51 packages
March 27, 2011 by mike · Leave a Comment

So as many people know, Debian and Ubuntu’s often lag behind the stable releases of nmap due to the nature of releases. But sometimes you want to stay volatile on a few things to keep up with joneses at insecure.org and get at some of those cool new NSE scripts or features. Easy enough but I prefer packages for a multitude of reasons, mainly my own sanity maintaining any given system over time. So when there are no 5.51 packages around yet it might mean you have to take matters into your own hands. Hopefully my/our impatience, desires, results, (whatever you call it) at Orvant end up being useful to other people as well.
Debian 6.0 (Squeeze) AMD64
Debian 6.0 (Squeeze) i386
Ubuntu 10.10 (Maverick) AMD64
Ubuntu 10.10 (Maverick) i386
Source Package
Debian/Ubuntu wmi-client package with OpenVAS libwmiclient1 patches
March 25, 2011 by mike · 6 Comments
The other day I wanted to build some updated OpenVAS packages and realized I now needed libwmiclient1 for local Windows checks which wasn’t readily available anywhere. The old wmi-client package that used to be in debian was pulled due to the forked/branched nature of the source code as well as the idea that something better could be implemented with the upcoming Samba4 release. That didn’t seem to pan out in the end but OpenVAS still needs to use aspects of it to build libwmiclient1 for WMI support. I suppose monitoring applications like Nagios, Cacti, Zabbix, etc are all likely feeling the loss of wmic as well so I figure why not try to fill both gaps? Anyways, here are the packages we created for Orvant, OpenVAS or anybody else who wants or needs it.
Debian 6.0 (Squeeze) AMD64
Debian 6.0 (Squeeze) i386
Ubuntu 10.10 (Maverick) AMD64
Ubuntu 10.10 (Maverick) i386
Source Package
Using the WMI client package (libwmiclient1 is only useful for OpenVAS):
CLASS: Win32_Process
CommandLine|Handle|Name|ProcessId
“C:\Windows\system32\cmd.exe” |3512|cmd.exe|3512
C:\Windows\Explorer.EXE|2740|explorer.exe|2740
C:\Windows\system32\lsass.exe|436|lsass.exe|436