Are there any available open source CMS's out there that output valid html 4 ?

So far, the only one I've found is the excellent tangocms.

However, although tango is simple enough for me to use, I'd like something simpler for use by non-programmer clients.

Silverstripe can be made to use html 4 templates, but one needs to be a very good php programmer in order to implement it.

From serverfault $pageUsers[$entry.posts[0].author].name

• I had good result using Drupal and Wordpress.

  Wordpress is more of a blog engine but Drupal on the other hand is versatile and quite mature and stable, you can easily add an administration section for clients. There is also a lot of useful modules to choose from.

  As for valid HTML, I've never had this kind of issue.

  Good luck!

  EDIT HTML4 is already 10 years old so you might want to look at old CMS. Any CMS still using HTML 4 is unlikely to be popular.

  Arjan : XHTML is over 10 years old as well...

  Chris S : What do you think is broken about xhtml? What specific features are you using?

  artifex : We are using drupal. While it may be heavy, knowledge wise, when you implement it. People with basic html(or even less) knowledge can use your product, if done properly.
  From Embreau

• I've used http://ckeditor.com/ before, and it's pretty easy to use for non-techies.

  If you want something to manage your entire site, Wordpress is about as simple as they come to get going, and has lots of extensions that do a variety of clever things.

  From Will

• Have you considered Plone? It validates.

  From

• Isn't the reason why xhtml appears broken in IE because IE won't adhere to certain html standards, or wont follow those standards? For instance, if you view the code in IE it appears broken, but in Firefox or Opera it doesn't.

  Back to the original post; is it possible you could just use a different Internet Browser and then it wouldn't matter if xhtml was used?

  Jason Antman : Most of the web development world is moving to XHTML. Very rapidly. At the moment, it's considered the de-facto minimum standard for sane development. Are you using a recent version of IE? Are you trying to do something very strange with the page? My personal site and blog are valid XHTML 1.1 Transitional, and appear fine in IE8 (or so I'm told, I've never used it...)

  Webs : My statment was more to the OP than anything else. I dont' use IE so I don't have any problems ever viewing XHTML. But users that view my website in IE have a much different experience. So my question to the OP was can he use something else?
  From Webs

• MODx gives you 100% control over the HTML, including the HTML that the various widgets, plugins, etc. output, so the quality of the HTML output is entirely within your control. Drupal is the same way, other than what comes out of the WYSIWYG editors. Those are all plugins, so it's up to you to pick one that is good for your needs.

  J.Ja

  From Justin James

• I'm a long-time user & fan of Textpattern, and have used its tag-based template system to produce valid HTML4, XHTML (1.0 & 1.1), and HTML5 sites. There may be certain tags and/or plug-ins that prefer to render more modern, XHTML-like, code at this point, but you should still be able to generate valid HTML4 relatively easily.

  From morgant

Enterprise user management

I am looking for an enterprise user management system that meets these requirements:

• Delegated user administration: The group manager should be able to grant access to his supervised employees (without having to contact any administrator either to grant access or maybe create users).
• A group manager should be able to create other groups and restrict any permission he already has where he can add supervised employees.
• If a manager removes access to a supervised group, then all the subgroups will also lose access.
• Web based User Interface.
• LDAP interface to query users and groups (or may not exist at all if it is integrated in a single application).

Do you know if there are any system that meet these requirements?

From serverfault Eduardo

• I'm working in an environment where there is a system installed with similar funcionality as the one you describe. I don't know if it fullfills all of your requirements, but it might be worth having a look at it: http://www.nordicedge.se/

  From Anders Abel

• Active Directory has all the functionality you requested above built in to its management tools. Novell also has a centralized directory/authorization program called eDirectory

  mfinni : Well, except for the web-front-end part. While one could be built, it isn't out-of-the-box. And he doesn't explain what he's granting access *to* - whether it's SharePoint, or Exchange mailboxes, or NTFS files. That part would have to be built into the web app as well, those aren't defined in AD, they only use AD.

  Eduardo : @mfinni The applications that will use the system just define some roles and the system should just tell me if the user has the role or not
  From Josh Budde

• We use Computer Associates Identity Lifecycle Management product. It works well, but does require a large investment to install and maintain.

  From JD

Windows Server 2003 can't see Vista machine

Hi there, I've got a real PITA problem that I'm sure has a really simple solution. I have a Windows Server 2003 machine that needs to be able to see the network name of a Vista box - but refuses to. It can see the Vista box (and even access its shared folder) if I enter the Vista box's IP address.

Problem is: SQL Server refuses to do Replication with anything other than the "actual server name". That means that the 2003 machine needs to be able to connect through the Vista machines network name... not just its IP address.

I'm guessing it's a simple incompatibility between OS's, but I'm sure there's got to be a simple way of fixing it.

Note: Yes, the Vista machine can connect to 2003 machine, no problem. And other machines in the office can connect to both the Vista machine and 2003 (they have more recent OS's).

Thanks for any help!

From serverfault Django Reinhardt

• Try turning the firewall off on the Vista machine, reboot it and see if it shows up. Second thing, check the Network type, set it to Private if it is set to public. Reboot and check if the Server "sees" it.

  Django Reinhardt : Thanks, all Firewalls are disabled (we're trying everything), and as I said, other machines can connect to the Vista machine no problem. Is it not likely to be an OS compatibility? :-/

  dimitri.p : if the server "sees" other Vista machine, check DNS settings of the one that is not showing up against one of the others. I'm going to guess :) that The server is all up to date as well as the Vista machine with Windows updates
  From dimitri.p

• If other machines can connect to it than it's proabably more of a SQL issue. Did you run the User Provisioning Tool for Vista on the workstation after install SQL? If not, give that a shot. It's located at %ProgramFiles%\Microsoft SQL Server\90\Shared\sqlprov.exe by default.

  Also, make sure the SQL Browser service is running on the Vista machine.

  Also, what version/edition of SQL is on the Vista machine?

  Django Reinhardt : It's not just a SQL thing because we have a shared folder setup on the Vista machine (x32 Ultimate, BTW), and it can't be accessed by the OS entering the network name (unlike with other machines). It's a real head scratcher :( Will give the SQLProv a shot, though. Thanks.
  From squillman

• Looks like a DNS issue.

  Probably the vista machine's name can't be resolved via DNS, so NetBIOS is used... which, as everyone knows, may or may not work, depending on a lot of factors.

  Can you ping the Vista machine using its network name?

  Django Reinhardt : Aha! No, I cannot ping the Vista machine from the 2003 machine! (But I CAN do it from the other machines that can connect to the Vista machine.) How do I fix this? Do I need to install anything? Thanks so much!

  squillman : +1 Yeah, this is more likely the cause.

  Django Reinhardt : If I manually edited the HOSTS file, would that fix it? :)

  Django Reinhardt : Editing the HOSTS file *did* fix it... but I'm wondering if there's a better solution to do with fixing the DNS issue? Thanks!

  dimitri.p : Did you check the network settings against a machine the server "sees" ?

  squillman : @Django: Verify that there's an address record in DNS for the Vista box and that the 2008 box is using the right DNS server(s). Try removing the hosts entry then doing a `ipconfig /flushdns` on the 2008 box.

  dimitri.p : 2003 machine :)
  From Massimo

How to physically secure a public terminal?

An organisation that I do work for has made the decision to move several public access terminals (Tower/Monitor/Keyboard/Mouse combo) into a public place.

These machines are already secured with change preventing software (either DeepFreeze or SteadyState) but will now live in a publicly accessible area with minimal observation.

What are the best ways to physically secure machines like this against theft? Are there any additional software security mechanisms which should be considered? What about securing them against the theft of peripherals?

Suggestions and advice would be appreciated.

Edit: The machines are not in the main flow of traffic (they are not on the main floor) but the area they are in is moderate traffic, and accessible for a good portion of each day. We're using PCs to be terminals because the budget for this is very small so we are recomissioning old machines to serve the purpose.

From serverfault Zxaos

• HP and Dell sell brackets or locks for most of their PC to make them harder to steal. Get a good salesman from either, or a resale outfit like CDW, they'll make the process much easier.

  There are also companies that make hardened PC rigs for public use. Usually made out of all steel and acrylic so they're much harder to damage. Again, find a larger resale company and start asking.

  Also, if it's really public then you can expect them to be valdalized and stolen on a regular basis no matter what you do. It's simply a cost of doing business, and you have to weigh the gains against the losses.

  From Chris S

• Cable locks for the tower and monitor - I know most laptops have little divots for a standard cable lock to fit into, you should look into monitors and towers that also have them. Then you loop them around the desk if you can. If you already work with someone selling you office furniture, you can buy them with cable-lock-friendly bits on them.

  Unless you have a good reason to use them, epoxy all of the unused peripheral ports. Have someone do a regular check for physical keyloggers getting attached to the keyboard. Unplug the floppy drive ribbon cable, if applicable.

  From mfinni

• You could get an integrated kiosk solution. I've never specced one of these, but there's a whole bunch of suppliers on the net who are more capable and specialised.

  Ok, maybe that's outside your budget.

  You could put a standard PC in the view of the public, but you'd have to really lock it down.

  • Physically disable the USB ports, either disconnect the headers from the motherboard, or fill the ports with epoxy resin.
  • Put the entire unit in a lockbox, only the essential access is available, ie, holes for the keyboard and mouse cables.
  • Instead of a mouse, how about a trackpad or trackball, these are easier to bolt down, and potentially harder to steal.
  • Get a highly robust keyboard, one that can take a good bashing, preferably waterproof too, in case anyone spills their coffee on it!
  • You'll need a secure firewall too, as well as as much software security you can get your hands on.
  • Preferably, write your software to require a dongle for it to run, so they can copy the executable files, but they'd need the hardware key to make it usable.

  At the end of the day, people will vandalize your hardware, they'll steal the mice, cut the cables, steal the caps of the keyboard.

  Weigh up the cost of replacing these weekly, or buying a hardened kiosk, then make the decision based on that.

  Zephyr Pellerin : I just thought I'd add on that you can get some of those flexible keyboards. ( http://www.google.com/products/catalog?hl=en&client=firefox-a&hs=MUC&rls=org.mozilla:en-US:official&resnum=0&q=Flexible+keyboards&um=1&ie=UTF-8&cid=8674251919358054865&ei=3B6MS86VNoXitgOakJiFAw&sa=X&oi=product_catalog_result&ct=image&resnum=5&ved=0CCcQ8gIwBA# ) Have one around here and they are nigh indestructible.

  Tom O'Connor : They look pretty groovy, i bet they're no match for a stanley knife though!
  From Tom O'Connor

• Hi, if you're willing to switch to Mac using a software like eCrisper (http://ecrisper.com), then you could use http://www.ianchor.net/

  Tom O'Connor : Interesting, but why not just drill through the "foot" aluminium, and bolt it to the desk?
  From Yves Mailhot

How do I setup JBoss 5.1.0.GA to run multiple instances?

Does anyone have any experience or advice in setting up multiple JBoss 5.1.x instances on the same machine that has 1 network card?

Here is what I did:

1. Installed JBoss 5.1.0.GA into c:\myjboss 1.5. I copied the server/default directory to server/ports-01 and server/ports-02 so they have their own config. did I assume correctly?
2. Ran .\run.bat -c ports-01
3. Ran .\run.bat -c ports-02

At this point there are 2 instances but the second instance doesn't load correctly because of what is probably a few port conflicts. For example: the http port ends up being 8080 for both instances, which it gets from line #49 in the C:\myjboss\server\all\conf\bindingservice.beans\META-INF\bindings-jboss-beans.xml file. Earlier in the server load it clearly gets the value from line#63 in that same file. I don't know why it gets part of the port config from line #49 and the other part from line#63. Confused.

I also tried: .\run.bat -Djboss.service.binding.set=ports-01 -c ports-01 and it made little difference.

Any ideas on what I am doing wrong?

From serverfault djangofan

• I got it working on my own. The answer were these commands:

  .\run.bat -Djboss.service.binding.set=ports-01 -c ports-01

  .\run.bat -Djboss.service.binding.set=ports-02 -c ports-02

  Also, I had to copy the server/default to 2 new directories called server/ports-01 and server/ports-02 ...

  Then , in the server\ports-01\conf\bindingservice.beans\META-INF I had to remove references to instances ports-02, ports-03, and "default" from it.

  Then , in the server\ports-02\conf\bindingservice.beans\META-INF I had to remove references to instances ports-01, ports-03, and "default" from it.

  Then, finally, I deleted the "standard", "web", and "default" directories from the default installation in the server directory.

  Then, I ran both servers with the commands above, and out-of-the-box, they work.

  Also, here is a batch file to run clustered instead of separate instances:

  @echo off
  
  start .\bin\run.bat -c ports-01 -g MyLocal -u 239.255.100.100 -b 127.0.0.1 -Djboss.messaging.ServerPeerID=1 -Djboss.service.binding.set=ports-01
  
  @echo Wait until first server finishes starting and then hit 
  @echo any key to start the second server in the cluster...
  pause
  
  start .\bin\run.bat -c ports-02 -g MyLocal -u 239.255.100.100 -b 127.0.0.1 -Djboss.messaging.ServerPeerID=2 -Djboss.service.binding.set=ports-02
  

  : that was very useful info.

  djangofan : thanks! i finally got over 1000 points. ;-)
  From djangofan

• Instead of using the BindingManager, you can assign more than one adress to your network interface (at least if you're in control of your network) and let each jboss instance run using its own adress (using the -b option to run.(bat|sh)). This is also possible on the local loopback interface (127.0.0.1, 127.0.0.2, ...).

  From mafro

• Quick follow up to Mafro's post about multiple IP addresses - depending on how MANY instances you want to run on a single host, the multiple IP addressing scheme may be the most stable. Once you start getting to 4-5 JBoss instances on a single host (and also depending on which J2EE services you've got enabled in your app, if any) you may soon run into port conflict issues when you use the "ports" implementation.

  Multiple IP addresses will allow you to run all of your J2EE and JBoss services on their default ports, and avoid many of the "hunting down a port conflict scenarios" you encounter when running more than one instance.

  A final note, according to the JBoss wiki, using multiple IP addresses is the "preferred solution" especially for Production environments - http://community.jboss.org/wiki/ConfiguringMultipleJBossInstancesOnOnemachine. See that link for additional resources on using the Binding Manager to configure JBoss services and applications to avoid conflicts.

  djangofan : nice link, thanks. aside from the document, how exactly do you establish a second IP address on the same network adapter? how would i assign a second static public IP?

  mafro : Here's a guide for windows: http://www.itsyourip.com/networking/how-to-add-multiple-ip-address-in-windows-2000xp2003/

  BJ Hoffpauir : It's not a definitive guide, but I found a pretty good explanation of not only how to do it, but why it works this way on the Linux Help Blog - http://linuxhelp.blogspot.com/2005/05/setting-up-multiple-ip-addresses-on.html
  From BJ Hoffpauir

• If you don't use RMI or remoting, you can actually tweak the configuration of jboss to only use one port. It is very annoying work to do (tons of configuration files), but possible if you really need to.

  To do so: - remove all services that you don't use - if you can't remove an invoker, you can probably set transport="local" so it will use in memory transport - set the ports of the remaining service to -1 - Set the following system properties to disable arjuna management ports: com.arjuna.ats.arjuna.coordinator.transactionStatusManagerEnable=NO com.arjuna.ats.arjuna.recovery.recoveryListener=NO

  Configuration files you absolutely need to change: - jboss-service.xml - disable all services you don't need - legacy-invokers-service.xml (remove legacy services if possible) - messaging/messaging-bisocket-service.xml : change transport to local instead of bisocket

  There will be a few more files.

  What is left is a jboss which listens to the web port and one other randomly chosen port for which i don't yet know the use. This will make it easy to run multiple instances on one host.

  djangofan : would love to have more info on this theory... running JBoss with only 1 port would be quite nice I think. my company has completely hand-rolled apps with our own separate service ports and so being able to turn off most of the JBoss ports would be awesome.
  From $pageUsers[$post.author].name

• how compile application jboss 5.1.GA i not found ant toll

  From $pageUsers[$post.author].name

• You can also configure multiple jboss instances renaming run.bat and creating a new run.bat running -c instance-name . Then, you'll be able to start Jboss as service and calling run.bat properly.

  Igor Monteiro.

  djangofan : how does that handle the peerID for the clustering? it seems like you need to pass the peerId option for that to work.
  From Igor Monteiro

Monitor turns off about 1 second after turning it on

Hi all!

I have a hardware issue with some of the LCD monitors we have in our office. My problems is not related to video cards or anything else with the computer itself.

I have 2 Dell 17" LCD screens that goes off (blank) after 1 or 2 seconds. The light remains green so it's not idling or sleeping. Just this morning, I had to replace one that goes off on 2 workstations and also on my laptop. Nothing to do with it. I tried the VGA and DVI connection w/out luck.

I strongly think that this is something with a capacitor or something inside the screen but I can't figure out what it is...

Is anybody heard of that kind of issue before?

Regards,

David.

From serverfault r0ca

• It is most likely the inverter that provides power to the backlight failing. This is the first relevant link that turned up in a quick search.

  If, when the screen dims, you can see a very faint image of what should be clearly visible then the backlight failing is the most likely cause and the behaviour your describe (being on for a short time) points at the inverter being to blame. It is a relatively common way for an LCD monitor to misfunction.

  The inverter is usually replaceable though depending on the monitor in question and your level of (or access to) expertise it may well be easier and/or cheaper to replace the monitor. Obviously if the monitors are under warranty you need to contact the manufacturer or your supplier for replacements.

  My five year old 19" LCD went this way and I used it as an excuse to upgrade. Given how many people queued up to take the old one off me via FreeCycle it was certainly worth, to some people, the time and materials cost of trying to repair - your mileage may vary.

  From David Spillett

• Well as he stated, the light didn't go into standby, and there was no picture displayed. That means there was not a faint image.

  It's 2 capacitors that are the problem. It's a known issue that isn't very wide-spread. If you take the backing off of the LCD you will notice two capacitors ont he board popping out. Those are the ones that need to be removed and replaced.

  From Krazie

How to check my linux server isn't spamming

I'm worried about dodgy php scripts or other malicious software on my linux server sending out spam. Or maybe I left an open relay

What are the ways to check I'm not sending any spam out?

From serverfault aidan

• One of the easiest ways is to check your /var/log/maillog (default location) to see if it's sending out mail that you're not expecting.

  aidan : That's exactly what I'm looking for, Thanks! (strangely, that file doesn't exist on my server though)

  AliGibbs : Well- depending on your setup, it might be elsewhere (try a search)- else, could it be that you haven't sent any mail yet?

  aidan : might be mail.log in ubuntu. looks clear.

  AliGibbs : Looking at https://help.ubuntu.com/8.04/serverguide/C/postfix.html it does seem that the default mail location is /var/log/mail.log Might be worth writing a test php mail script (or I have one if you want) to check its logging to this location

  Jacek Konieczny : The MTA (mail transfer agent) installed on the server may not be used at all, and the spam may still be sent from the machine by other means: e.g. misconfigured proxy server or malicious software running on the machine and sending the emails directly (not using local MTA).
  From AliGibbs

• I've used abuse.net in the past to check that my server is not an open relay.

  Not used it for a while though, but gotta be worth a quick test if you're worried/unsure.

  aidan : That's a useful link to have. Using it now. thanks.
  From Grhm

• Do you have PHP scripts on your server that make use of email? Make damn sure that those don't allow visitors to specify the address that mail is sent to. That means not having To fields in forms that create email.

  That alone is not enough, as spammers can inject mail headers into poorly written mailer scripts. Check out http://www.alt-php-faq.org/local/115/ for a discussion on this.

  You may not have control of all the scripts on your server, so you may want to read http://ilia.ws/archives/149-mail-logging-for-PHP.html which gives details of a PHP extension which logs all use of the mail function. That will give you a specific place to look for PHP related mail activity, which may be useful if you also send mail legitimately from this server.

  From dunxd

• The best way is to monitor traffic generated by the machine. This may show if something suspicious is happening no matter what is the source of the spam (is that badly configured mail server, badly configured proxy or some malicious software). Especially take look at outgoing connections to port 25. If you can see much more such connection than mails the machine is supposed to send, then the machine is probably abuse. But closer inspection you can also find many 'MX' queries (sent to find victims' name servers) or suspicious incoming connections (used to control a 'trojan horse' software).

  Next step is to find the abused service and fix it.

  aidan : Sounds good. What's a good way of monitoring the traffic on port 25? Wireshark? (I've only got a CLI - no GUI)

  Jacek Konieczny : Anything will do. Wireshark (it has simple text interface too), tcpdump (you can write a dump file, and then open it somewhere else with Wireshark GUI), iptraf (will show what is going on 'on the wire' with quite visual form, sill text console).
  From Jacek Konieczny