To be successful, healthy, peaceful, and happy new 2015!

Bright, Bright , merry year! Gold grain in levels, red apple in the garden, full house with children, be healthy next year, next year, and forever! Amen!

survakar

Who can and why sould implement the requirements of BS OHSAS 18001:2007

OHSAS 18001:2007 is the international standard for managing health and safety at work. It was published in July 2007 and supersedes OHSAS 18001:1999. This standard describes the requirements for managing health and safety (OH & S).BS OHSAS 18001: 2007 provides a framework for effective management of OH & S, including compliance with laws applicable to your business and the risks identified. Continue reading »

HACCP (Hazard Analysis ans Critical Control Point)

HACCP (Hazard Analysis ans Critical Control Point) analysis of hazards, critical control points and the user applicationWhat is HACCP? HACCP is an acronym that translates as “Hazard Analysis and Critical Control Points.” These are the points of the production cycle of food, which can eliminate potential biological, chemical and physical hazards to the human body. If control of these points is not sufficiently effective, then it is possible to endanger people’s health and even lives. Developed, implemented and certified HACAP system ensures this does not happen. Continue reading »

What is CAF?

The CAF is designed to be used in all spheres of public sector, applicable in public administration at national, regional and municipal level. It can be used in a wide variety of circumstances eg as part of a systematic program of reform or as the basis for achieving improvements in certain individual organizations, that provide public services.CAF is offered as an easy to use tool that helps public sector organizations across Europe to use the techniques of quality management to improve their performance.CAF provides a framework for self-assessment that is conceptually similar to the basic models of Total Quality Management (TQM), in particular the model of European Foundation for Quality Management, but is regarded as particularly suited for public sector organizations, taking into account their differences.CAF has four main objectives:

  1. To acquaint the public administration with the principles of TQM and gradually guide them and the perception of self, of the current series of operations “planning – do” (Plan-Do) to the whole cycle of “Plan-Do-Check -Act “(” PDCA “- Plan-Do-Check-Act);
  2. To facilitate self-organization of the public to obtain an evaluation and take actions to improve themselves;
  3. To act as a bridge between the different models used in quality management.
  4. To facilitate learning through the exchange of best practices among public sector organizations.

What is ISO?

What is ISO?ISO stands for International Organization for Standardization. What is ISO 9000?ISO 9001:200 8 is an international standard for development, deployment and improvement of systems for quality management, which helps to meet customer requirements.The core standards of management systems (QMS) ISO 9000 consists of four international standard, representing the ways for development and implementation of an effective QMS. These standards are applicable to all types of organizations regardless of their activity. Continue reading »

Create installation USB Flash drive for Windows and Linux. Part 2 – Linux.

Using Windows

Different distributions might have their own tools for creating of an installation USB Flash drive under Windows. If the distribution that you’re going to use its own tool for creating such a device, it is advisable to use it.If the distribution does not possess such an instrument, it can try to use one of the following tools:

  1. UNetbootin
  2. YUMI
  3. Universal USB installer
  4. LiveUSBInstall

This article will not discuss the details of using these applications because they are all simple and have easy to use interface. More information about them can be found on the links above. Continue reading »

The eight principles of quality management

‘Standard ISO 9001:2008 is based on 8 management principles which are guidelines for the actions of management in quality management in the organization.Principle 1: Customer focus Principle 2: Leadership Principle 3: Empowering peoplePrinciple 4: Process approachPrinciple 5: System approach to managementPrinciple 6: Continual improvement Principle 7: Taking a decision based on factsPrinciple 8: Mutually beneficial relationships with suppliers
Continue reading »

Investments in ‘green industry’

Scheme Grant: BG161PO003-2.3.1 Investments in “green industry” (OP “Competitiveness” 2007-2013) Deadline: 17.11.2011 – 15.02.2012, theWhat projects / activities are funded?This procedure for selection of projects is a mechanism for integrated investment support, which includes two main components:Component 1 – support for this component also aims at encouraging investment to reduce energy consumption, more efficient use of waste products and produce products that are recyclable in large enterprises for expansion and diversification of their production;Component 2 – Support for this component also aims at encouraging investment to improve energy efficiency in large enterprises and providing access to professional counseling, directly related to the introduction of energy management systems. Continue reading »

Cisco VPN Client – remote connection to the resources on your intranet. Part Three – the official Cisco VPN client for Linux

The last part of this series will examine the use of closed source Cisco VPN client for Linux. In contrast to the VPNC, this client is not distributed in the form of package for Linux and the only way to install it is installation from source code.

1. Installation

The installation of Cisco VPN client for Linux depends very much on the kernel version of the system. In this article we will look at installation with kernel 2.6.35 or newer.To install the client you must first download it from the Cisco’s site. Client is available after site registration. In addition, you’ll need to patch the client, without which it is impossible to complete the installation. You can find the patch, attached to the end of this article. Although this patch is for kernel version 2.6.35, it can be used for newer versions.To install the client, it is necessary to do the following:

1. Unzip the client

tar-xzvf vpnclient-linux-x86_64-4.8.02.0030-k9.tar.gz

2. Unzip the patch

unzip vpnclient-linux-2.6.35.patch.zip

3. Apply the patch

ivailo@voyager:~/Downloads/vpn> cd vpnclient/
ivailo@voyager:~/Downloads/vpn/vpnclient> patch -p1 \
--dry-run < ../vpnclient-linux-2.6.35.patch
patching file frag.c
patching file interceptor.c
patching file IPSecDrvOS_linux.c
patching file linuxcniapi.c
ivailo@voyager:~/Downloads/vpn/vpnclient> patch -p1 < ../vpnclient-linux-2.6.35.patch
patching file frag.c
patching file interceptor.c
patching file IPSecDrvOS_linux.c
patching file linuxcniapi.c
ivailo@voyager:~/Downloads/vpn/vpnclient>

Use the –dry-run keyВ  to test the patch, without changing the source code of the application. If subsequent messages contain errors, you need to find the correct patch for the specific version of the client.4. Install clientAfter applying the patch, it is necessary to execute the installation script of the program as a system administrator (root):

ivailo@voyager:~/Downloads/vpn/vpnclient> su
Password:
voyager:/home/ivailo/Downloads/vpn/vpnclient # ./vpn_install
Cisco Systems VPN Client Version 4.8.02 (0030) Linux Installer
Copyright (C) 1998-2006 Cisco Systems, Inc. All Rights Reserved.

By installing this product you agree that you have read the
license.txt file (The VPN Client license) and will comply with
its terms. 

Directory where binaries will be installed [/usr/local/bin]

Automatically start the VPN service at boot time [yes]

In order to build the VPN kernel module, you must have the
kernel headers for the version of the kernel you are running.

Directory containing linux kernel source code [/lib/modules/2.6.38.5-1-desktop/build]

* Binaries will be installed in "/usr/local/bin".
* Modules will be installed in "/lib/modules/2.6.38.5-1-desktop/CiscoVPN".
* The VPN service will be started AUTOMATICALLY at boot time.
* Kernel source from "/lib/modules/2.6.38.5-1-desktop/build" will be \
used to build the module.

Is the above correct [y]y

Making module
make -C /lib/modules/2.6.38.5-1-desktop/build \
SUBDIRS=/home/ivailo/Downloads/vpn/vpnclient modules
make[1]: Entering directory `/usr/src/linux-2.6.38.5'
 CC [M]  /home/ivailo/Downloads/vpn/vpnclient/linuxcniapi.o
 CC [M]  /home/ivailo/Downloads/vpn/vpnclient/frag.o
 CC [M]  /home/ivailo/Downloads/vpn/vpnclient/IPSecDrvOS_linux.o
 CC [M]  /home/ivailo/Downloads/vpn/vpnclient/interceptor.o
 CC [M]  /home/ivailo/Downloads/vpn/vpnclient/linuxkernelapi.o
 LD [M]  /home/ivailo/Downloads/vpn/vpnclient/cisco_ipsec.o
 Building modules, stage 2.
 MODPOST 1 modules
WARNING: could not find /home/ivailo/Downloads/vpn/vpnclient/.libdriver.so.cmd for \
/home/ivailo/Downloads/vpn/vpnclient/libdriver.so
 CC      /home/ivailo/Downloads/vpn/vpnclient/cisco_ipsec.mod.o
 LD [M]  /home/ivailo/Downloads/vpn/vpnclient/cisco_ipsec.ko
make[1]: Leaving directory `/usr/src/linux-2.6.38.5'
Create module directory "/lib/modules/2.6.38.5-1-desktop/CiscoVPN".
Copying module to directory "/lib/modules/2.6.38.5-1-desktop/CiscoVPN".
Already have group 'bin'

Creating start/stop script "/etc/init.d/vpnclient_init".
 /etc/init.d/vpnclient_init
insserv: warning: script 'S14smfpd' missing LSB tags and overrides
insserv: warning: script 'vpnclient_init' missing LSB tags and overrides
insserv: warning: script 'vpnclient_init' missing LSB tags and overrides
insserv: Default-Start undefined, assuming default start runlevel(s) for \
script `vpnclient_init'
insserv: warning: script 'smfpd' missing LSB tags and overrides
vpnclient_init            0:off  1:off  2:off  3:off  4:off  5:off  6:off
Enabling start/stop script for run level 3,4 and 5.
insserv: warning: script 'S14smfpd' missing LSB tags and overrides
insserv: warning: script 'vpnclient_init' missing LSB tags and overrides
insserv: warning: script 'vpnclient_init' missing LSB tags and overrides
insserv: Default-Start undefined, assuming default start runlevel(s) for \
script `vpnclient_init'
insserv: warning: script 'smfpd' missing LSB tags and overrides
insserv: Service syslog is missed in the runlevels 4 to use service vboxdrv
vpnclient_init            0:off  1:off  2:off  3:on   4:off  5:on   6:off
Creating global config /etc/opt/cisco-vpnclient

Installing license.txt (VPN Client license) in "/opt/cisco-vpnclient/":
 /opt/cisco-vpnclient/license.txt

Installing bundled user profiles in "/etc/opt/cisco-vpnclient/Profiles/":
* New Profiles     : sample 

Copying binaries to directory "/opt/cisco-vpnclient/bin".
Adding symlinks to "/usr/local/bin".
 /opt/cisco-vpnclient/bin/vpnclient
 /opt/cisco-vpnclient/bin/cisco_cert_mgr
 /opt/cisco-vpnclient/bin/ipseclog
Copying setuid binaries to directory "/opt/cisco-vpnclient/bin".
 /opt/cisco-vpnclient/bin/cvpnd
Copying libraries to directory "/opt/cisco-vpnclient/lib".
 /opt/cisco-vpnclient/lib/libvpnapi.so
Copying header files to directory "/opt/cisco-vpnclient/include".
 /opt/cisco-vpnclient/include/vpnapi.h

Setting permissions.
 /opt/cisco-vpnclient/bin/cvpnd (setuid root)
 /opt/cisco-vpnclient (group bin readable)
 /etc/opt/cisco-vpnclient (group bin readable)
 /etc/opt/cisco-vpnclient/Profiles (group bin readable)
 /etc/opt/cisco-vpnclient/Certificates (group bin readable)
* You may wish to change these permissions to restrict access to root.
* You must run "/etc/init.d/vpnclient_init start" before using the client.
* This script will be run AUTOMATICALLY every time you reboot your computer.
voyager:/home/ivailo/Downloads/vpn/vpnclient #
Р’ горните листинги използвам знака “\\” Р·Р° РґР° обознача, че реда продължава. Можете РґР° използвате целите редове СЃ команди директно РїРѕ този начин, това Рµ стандартен начин Р·Р° разделяне РЅР° команда РЅР° редове РїРѕРґ bash. След приключване РЅР° последната команда, VPN клиентът Рµ инсталиран. Р—Р° РґР° РіРѕ стартирате обаче, Рµ необходимо РґР° стартирате Рё системния процес, управляващ VPN връзките Рё инсталиран РѕС‚ клиента. Р—Р° целта изпълнете командата:

In the above listings I am using the “\\” to indicate that the line continues. You can use all lines of the commands directly in this way, because this is the standard way of dividing the command line under bash. After the last command, VPN client is installed. To run it, it is necessary to run the system process, managing VPN connections and installed by the set-up program. To do run the following command:

voyager:/home/ivailo/Downloads/vpn/vpnclient # /etc/init.d/vpnclient_init start
Starting /opt/cisco-vpnclient/bin/vpnclient: Done
voyager:/home/ivailo/Downloads/vpn/vpnclient #

NOTE: If you use Debian or Ubuntu, after rebooting the system it is possible the system service to not be started automatically. By default, the process is set to start in runlevel 3 and 5, and in Debian and Ubuntu, graphical environment is started in runlevel 2. To change this, it is necessary to use the program update-rc.d (more on how to use this program can be found at this address – http://www.debuntu.org/how-to-manage-services-with -Update-rc.d ) or to add a link to /etc/rc2.d:

su
cd /etc/rc2.d
ln -s /etc/init.d/vpnclient_init S01vpnclient_init
ln -s /etc/init.d/vpnclient_init K01vpnclient_init

The subject for the management of processes in Linux based systems will be discussed in a later post.

2. How to use the client

The official Cisco VPN client for Linux uses only existing pcf files. For this purpose it is necessary to copy pcf in the directory /etc/opt/cisco-vpnclient/Profiles/:

cp sample.pcf /etc/opt/cisco-vpnclient/Profiles/

2.1. Connection

Connection is done by the command ‘vpnclient connect’, followed by the name of the user without adding extension pcf. Implementation of all types of command vpnclient be made as user root.

vpnclient connect sample

Upon request, enter your username and password.

2.2. Disconnect

To disconnect it is necessary to run the following command:

vpnclient disconnect

Since the client can only support one connection is not necessary to specify which link is broken.

For other keys applicable to the command, run

vpnclient --help

3. Advantages and disadvantages

The main advantage of this client is that it supports connection over TCP tunnel. If the connection is of this type, VPNC will not work.

In my experience with this program, I found two main drawbacks. First, Cisco does not make new versions of the client often enough. This explains the need to use the patch during installation. This entails that if the client has a problem, it has been removed in recent years.

Such a problem is the second flaw. If you use this client machine to a wireless network and want to use the client to transfer X11 connection from the remote network to the local machine (X11 Forwarding), it can not use the wireless network. If you try to use X11 Forwarding in Cisco VPN for Linux and wireless networking, graphic server on your system (the machine from which you connect through Cisco VPN client)В  will reset or stop working altogether. To avoid this problem, use the X11 Forwarding in the Cisco VPN client only when connected via cable. This problem does not affect the VPNC.

vpnclient-linux-2.6.35.patch

Website translation

Hello,

we have started to translate this website to English language. In time, all existing publications will be translated. Also the new publications will be available on both languages – Bulgarian and English.

Best regards from the MM Business Consult team.

Previous Entries