Matteo Mattei

Hello, my name is Matteo Mattei and this is my personal website. I am computer engineer with a long experience in Linux system administration and web software development.

linkedin rss twitter google+ github facebook

How to use the european healt card on Archlinux

Since some months the regions are sending the new electronic healt card to the house of the people. These cards are featured with a microchip. The goal to these cards is the same of the previous ones with in addition the possibility to be read by a smart card reader and store, if you want, your electronic healt records.

This let you enter in your region website and look all your medicines taken, your hospital recovers etc…

So let’s start! In this article I will show you how to use this card with the card-reader provided by the Hospital URP with Archlinux and more in general with Linux.

For who does not have the reader, I can suggest to buy the miniLector bit4id directly by the URP of the hospital in your zone because its price is fixed (in Italy) to 4,20 Euros instead of fifteen/twenty Euros that is sold elsewhere.

The first thing to do is to connect the bit4id reader to a free USB port of your pc and type lsusb in a terminal. You should obtain a line like this:

Bus 001 Device 003: ID 072f:90cc Advanced Card Systems, Ltd ACR38 SmartCard Reader

Now install the needing packages:

pacman -Sy ccid pcsclite pcsc-tools pcsc-perl
yaourt -Sy --aur libminilector38u-bit4id libasecnsp11

With root user run pcsc_scan, you should obtain a similar output:

[root@barracuda ~]# pcsc_scan
PC/SC device scanner
V 1.4.17 (c) 2001-2009, Ludovic Rousseau <ludovic.rousseau@free.fr>
Compiled with PC/SC lite version: 1.6.4
Scanning present readers...
0: ACS ACR 38U-CCID 00 00
Sat Jan  8 17:45:24 2011
  Reader 0: ACS ACR 38U-CCID 00 00
  Card state: Card inserted
  ATR: 3B DF 18 00 81 31 FE 7D 00 6B 15 0C 01 80 01 01 01 43 4E 53 10 31 80 F9

At this point you have to configure Firefox for authentication. Proceed in this way:

  1. Make sure the card reader is connected to the PC and the card is inserted
  2. Run Firefox and select Edit -> Preferences -> Advanced -> Encryption -> Security Devices
  3. Click on Load button and insert EuropeanHealtCard as description and /usr/lib/libaseCnsP11.so as path.
  4. To verify that all works correctly, try to open the link https://servizi.arubapec.it/crtest/showcert.php and insert your PIN.

If the authentication is passed, you should see a welcome message.

Now you only need to access to your electronic health records from your region website using your PIN provided during the card activation.

For a guide on configuring the European Healt card with Ubuntu take a look at Andrea Grandi’s blog.

For more informations on Linux and the European Healt Card look at Regione Toscana website.


Disk replace in Linux raid software

Sometimes it happens that, after a long time of usage, one disk is going to be damage and starts to give some troubles… What’s happened when the disk is part of a software raid? If the failing disk is only one, all data are safe but you have to replace the disk as soon as possible in order to avoid very ugly surprises! I know that is always a very frustrating thing to change a disk from a raid software.

However, when a disk in RAID 5 or in RIAD 1 should be replaced, you have to follow these steps:

  1. Take a look at /proc/mdstat, if is all ok (i.e. you have to replace a disk that contains some corrupted sectors but the raid is yet integer) mark the bad partition as failed (sdb1 in my case), otherwise continue from step 2:
```mdadm --manage /dev/md0 --fail /dev/sdb1```
  1. Remove that partition from the Raid array: mdadm --manage /dev/md0 --remove /dev/sdb1

  2. Shutdown the pc, change the disk and power on the pc again.
  3. At this point if you type cat /proc/mdstat you should see [U_U].
  4. Copy now the partition table from a working disk (sda) to the new inserted disk (sdb): sfdisk -d /dev/sda | sfdisk /dev/sdb
  5. Add the new partition to the array: mdadm --manage /dev/md0 --add /dev/sdb1
  6. Done!

When you have finished, type

cat /proc/mdstat

and wait for the array rebuild.

At the end of the process (that can takes also some hours, depending on the size of the partition) you should have all “U” ([UUU]).


Backup & Restore LDAP database

The today question is: did you ever happened to make an hot backup of an LDAP database? I will show you how to do it creating an LDIF file and then doing the respective restore (in the hope you will not really need it). After all it is quite simple…

BACKUP:

ldapsearch -x -b "dc=example,dc=com" -h 192.168.0.1 -D "cn=manager,dc=example,dc=com" -w secret_password "(objectclass=*)" &gt; backup_file.ldif

RESTORE:

The new database must be empty!

ldapadd -D "cn=manager,dc=example,dc=com" -x -w secret_password -h 192.168.0.1 -f backup_file.ldif

Here there is the meaning of the parameters used:

  • -x specifies that you want to use the “sample authentication” (rather than SASL)
  • -b “dc=example,dc=com” indicates the BaseDN of the server, thus the position where we want to copy all nodes and entries.
  • -h 192.168.0.1 is the address of the remote LDAP server.
  • -D “cn=manager,dc=example,dc=com” specifies the LDAP user that will bind to the remote server.
  • -w secret lets you to specify the password for the user you have previously chosed.
  • “(objectclass=*)” specify all entries in the database.
  • backup_file.ldif is the file, in LDIF format, where the backup will be executed.

How to transfer an entire website via ftp with recursive lftp

In these days I have to transfer some big websites from a server to another and the only way to do it was an FTP connection because the destination server did not provide any other type of access. Because of the number of files was big (about 12GB) I have created a little script to use with lftp opened into a screen session to don’t busy the terminal for days.

So I created a script called sendfiles.sh with the following content:

set ftp:ssl-allow no
open -u username,password example.com
mirror -c -R /source-path /destination-path
quit

Where the following fields are respectively:

username: user name for ftp access
password: password for ftp access
example.com: ftp destination server
source-path: source path on local server
destination-path: remote path on the ftp (where / is the ftp rootdir)

To run the script is sufficient to open a screen session (if you want to leave the process in background on the source server) and issue this command:

lftp -f sendfiles.sh

Install imagemagick with PHP imagick extension on CentOS

To install imagemagick with PHP imagick extension on Linux CentOS you must follow these steps:

yum install ImageMagick
yum install ImageMagick-devel
pecl install imagick

If you have an error like this:

root@myhost [~]# pecl install imagick
downloading imagick-3.0.1.tgz ...
Starting to download imagick-3.0.1.tgz (93,920 bytes)
.....................done: 93,920 bytes
13 source files, building
running: phpize
Configuring for:
PHP Api Version:         20090626
Zend Module Api No:      20090626
Zend Extension Api No:   220090626
Please provide the prefix of Imagemagick installation [autodetect] :
building in /var/tmp/pear-build-root/imagick-3.0.1
running: /root/tmp/pear/imagick/configure --with-imagick
checking for egrep... grep -E
checking for a sed that does not truncate output... /bin/sed
checking for cc... cc
checking for C compiler default output file name... a.out
checking whether the C compiler works... configure: error: cannot run C compiled programs.
If you meant to cross compile, use `--host'.
See `config.log' for more details.
ERROR: `/root/tmp/pear/imagick/configure --with-imagick' failed

Look at your /tmp folder… pretty surely it is mounted with noexec flag. Remount it without noexec and retry:

mount -o remount,rw /tmp

At the end of the installation, create an inclusion file for imagick.so module and restart apache:

echo "extension=imagick.so" > /etc/php.d/imagick.ini
/etc/init.d/httpd restart

Test the correct load of the imagick module with:

php -m | grep imagick

MySQL error 1153 in max_allowed_packet

Today I have got an anomalous error during a database import on mysql:

ERROR 1153 (08S01) at line 3854: Got a packet bigger than 'max_allowed_packet' bytes

To solve this is sufficient to edit the mysql configuration file (/etc/my.cnf on Linux) and fill a suitable big value for max_allowed_packet. In my case I set it to 100M.

Restart mysqld daemon and now the import will gone fine!