I spent a little more time this afternoon polishing the info card login process on Casa dé Hambone. Let me know what you think.

I really liked how sxcore and sandbox.netfx3.com are handling their info card login. Sxcore specifically has a nice way of using a GET to kick off the process which eliminates the need to have a separate form element on the web page for the information card activator.

In addition to cleaning up the code, I

• Eliminated the "This page contains both secure and nonsecure items" warning by having Login.aspx fire off a GET to a handler that is 100% secure
• Activate the CardSpace UI from a separate dedicated handler page; the result is no CardSpace UI popping up if you attempt to anything else from the login page other than sign in with an info card
• Properly handle cases where you cancel submission of your info card and/or your browser does not have support for information cards
• Implemented a unique identifier for the click back handler that verifies your email address
• Automatically approve comments from information card users, even if comment moderation is enabled
• Turned off caching of the start page to accurately display the logged in state of normal users

What started as a simple project to Windows CardSpace-enable the DasBlog admin account has yielded a ton of key learning and design that you'll have to consider when adding support to your own site for information cards. The technology itself is cake ... the devil is in the details. Fortunately, I captured all of those details and decision points along the way and will be starting a series of blog posts on each one soon.

My information card support in DasBlog 1.9 for Casa dé Hambone has been refactored into a provider model that allows for pluggable identity token processors. In short, this means that my implementation can support both ASP.NET 1.1 and ASP.NET 2.0 installations where previously it required you to build DasBlog with Visual Studio 2005 and .NET Framework 2.0.

I'm getting really close to completing the fit 'n finish work here and making a SVN patch available to anyone who is interested.

Would you look at that. The fine folks over at WinZip finally got around to delivering a 64-bit version of their shell extensions. Maybe its time to come back, but I made a switch some time ago to WinRAR because of the stock "there's no demand for 64-bit shell extensions" response from WinZip.

What could be better than yesterday's announcement that I've added authenticated comments and support of Windows CardSpace to DasBlog? Well, lots of things - like the gnocchi in a meat sauce from Dino's Pizzeria that I'm going to go pick up right after I finish this entry.

But the additional features I'm thinking of for DasBlog include:

• New user registration without an information card (i.e., registered users for the rest of us)
• Password recovery (for those users who choose to not use an information card)
• Self-editing of the user profile (including hose who choose to not use an information card)
• Support for auto-approval of comments on moderated blogs when left by authenticated users

Its interesting, actually, how my simple desire to support information cards as a form of authentication has kinda opened the door to a whole host of features that "just make sense" once you cross that bridge. The saving grace throughout all of this is the architecture of DasBlog makes it pretty straightforward to implement these features.

What else do you think falls into this bucket?

DasBlog 1.9.6264.0. Authenticated comments. Windows CardSpace. Working. Try it out right now by signing in with your information card and then leaving a comment on this post. Inclusion of your web page claim is optional; include during the initial card selection if you want your web page linked to your name when leaving a comment. Let me know what you think.

Has this guy ever sat inside a high rise office building or even the basement of a Midwestern home and struggled to get a reliable cellular signal? In his article about how once again the browser will make Windows irrelevant, he sings the joys of living with an Internet-connected mobile device:

Things will get more exciting for entrepreneurs when we all start walking around with new Internet-ready portable devices such as the Nokia 770 Internet tablet or smartphones such as the Motorola Q and Nokia E61.

These pocket-size monsters with keyboards, luscious displays, and brisk 3G connections will soon replace laptops. All they need are browsers that can access Web-based software as easily as your desktop can. (I already use a Nokia E61 to help manage my website and write short blog posts from within the phone's browser. Soon I'll be able to run the whole site from my phone's browser.)

Pocket-size monsters? Luscious displays and brisk 3G connections replacing laptops? Please. Have you looked at the trend lately in flat panel monitors, HD televisions and laptop computers? Bigger. Wider. Not some 800x600 web-only display that requires a stylus for input. And brisk 3G connections? Surely you must mean the brisk 3G connection that is always reachable and never (ever) manages to crap out right about the time you either really need it or want to demonstrate your cool new Internet-ready portable device to your friend.

When I'm working with an office productivity app... excuse me. When I'm working with 2007 Microsoft Office, I don't want to worry if Ctrl+S is really going to work or not because my "brisk 3G [Internet] connection" may or may not be available. I don't plan on reducing the speed in which I type to fit that of a stylus or T9 text input. I don't plan on growing smaller thumbs to tap out brief messages on the keyboard of some device that makes my Dockers look I'm trying to impress the ladies.

The dream is there. I'm sure we'll reach it some day, likely even within my lifetime. But laptops are not going away any time soon. Speaking of which, I need to get busy on that order of Dell Latitude D820's ...

Taking inspiration from Kim Cameron and how he CardSpace-enabled WordPress, I did the same with DasBlog 1.9.6264.0. casadehambone.com now supports logging into the administrative account using Windows CardSpace allowing me to throw the use of passwords to the wind!

The great thing is that it only took minor changes to three source files and the introduction of one new configuration option each to site.config and siteSecurity.config. I have a little more work before me to make configuration just a tad easier, but the great thing is that this works really well.

I owe special thanks to Clemens Vasters who suggested this morning that the proper "hack" to get this working was to build DasBlog with Visual Studio 2005 and the Visual Studio 2005 Web Application Project add-on. DasBlog built out-of-the-box without issue, making the integration of TokenProcessor.cs to decrypt the SAML token a piece of cake.

If you haven't looked at Windows CardSpace yet, head on over to cardspace.netfx3.com and start reading. Now that Windows Internet Explorer 7.0 is released and Release Candidate 1 of .NET Framework 3.0 is available, you'll find the mainstream barriers to adoption are quickly eroding.

Get yourself over to http://ajax.asp.net and check out the just-released content for ASP.NET AJAX!

ASP.NET AJAX. is a free framework for quickly creating a new generation of more efficient, more interactive and highly-personalized Web experiences that work across all the most popular browsers.

One of the more painful processes on Windows XP and Windows Server 2003 is granting read permission to the private keys of a certificate. It typically requires a few trips to your favorite search engine, msdn.microsoft.com and running winhttpcertcfg.exe.

In Windows Vista, the Certificate MMC snap-in has a new feature that enables you to directly manage the permissions of private keys associated with a given certificate.

Assuming you already have your certificate installed in the Local Machine store, fire up mmc.exe, add the Certificates snap-in to the console and choose Computer account on the Local computer. Expand Certificates | Personal | Certificates and locate the certificate to whom's private keys you'd like to grant read permissions. Right-click on the certificate, choose All Tasks | Manage Private Keys ... and you'll be starting at a standard Windows ACL editor. No muss. No fuss. Nice 'n clean the way it should have been from the beginning. If you're using a stock ASP.NET 2.0 configuration, you'll want to grant NETWORK SERVICE read rights. If you're running your application pool under another identity or performing impersonation, you'll need to adapt accordingly. In either case, this is far easier than the old hunt 'n peck method.

As I mentioned here, Scoble points out that IE7 renders TechMeme slower than Firefox 2. A true statement. Another true statement is that Firefox isn't respecting the <META HTTP-EQUIV="Expires" CONTENT="now"> tag. Furthermore, Firefox doesn't respect its own "Always clear my private data when I close Firefox" option. And this, my friends, is the heart of the performance difference in this test.

So let's we peel the onion just a bit, shall we? Fire up Fiddler, configure both browsers to use it as their proxy and rerun the TechMeme test. You'll see that Firefox makes only a few requests for page content whereas IE7 requests the entire page. The result is that Firefox makes that page pop because it is pulling its page content from cache. If you select Tools | Clear Private Data... in Firefox, shut it down and run the test again, you'll find that the experience is identical to that in IE7. IE7 is doing the right thing. Firefox isn't.

I did some more digging and played around with Firefox's "Always clear my private data when I close Firefox" option. After enabling it and exiting Firefox, I relaunched it for for TechMeme home page again and was surprised to find that it was still pulling data from cache ... despite having been set to erase Browsing History, Download History, Saved From Information, Cache and Authenticated sessions when closing Firefox! Note this is distinctly different behavior from choosing Tools | Clear Private Data...

[Edit: Firefox does respect the "Always clear my private data when I close Firefox" when the last instance of Firefox exits rather than for closing each window.]

Scoble knocks IE7's performance compared to Firefox 2 and I had to see it to believe it. Given I've been living in IE7 for months - and more recently with IE7 on Windows Vista - I've never given performance a thought, which tells me either that performance has been fine or I'm simply ignorant. Likely a little of both. But I wonder, does it really matter?

Even so, I tried Robert's test (and that meant actually downloading Firefox) by setting the home pages for both browsers to http://www.techmeme.com and sure enough, there's a noticeable difference in overall rendering speed. Firefox's rendering makes the page just "pop" whereas IE7 spends some visible time tweaking the page as it downloads. It's almost as if IE7 is not grabbing the image files from cache.

In fact, I tried the same test with sandbox.netfx3.com and see the same rendering behavior by both browsers on the first visit. But on subsequent visits, Firefox again makes the page "pop" where as IE7 appears to be downloading the content.

As for his beef about AJAX performance, on my 64-bit Windows Vista RC2 machine, I do not see any difference in the experience between IE7 and Firefox like he describes using Google Maps.

I've been getting my feet wet with Windows CardSpace and my self-issued card. In watching Kim Cameron's demonstration of how he integrated CardSpace with Wordpress, I saw his nifty looking card with his portrait on it. Right then and there I decided I too must have one. What do you think of the results? Here's how I did it.

I made a self portrait with my Canon EOS 20D and an EF 50mm f/1.8 II lens.  I extracted the headshot with Photoshop CS2's Extract filter, did some complexion touch up and resized it to what you see here, about 60x64 at the shoulder. I created a new 120x80 image according to the guidance provided by Vittorio Bertocci in his great article about how images are mapped onto cards. From here, it's all a composite. There's a layer for the black rectangle across the bottom, a layer for the gradient background, a layer for my portrait, and a layer each for the text. It took some experimenting with fonts and text transformation to arrive at the setting you see here - by far the largest part of this entire exercise. My Layers palette is reproduced here for your reference. Frankly, I'm surprised by the result because I'm by no means a Photoshop guru. But I think I now have something cool to liven up casadehambone.com with!

Vista does one annoying little thing in the reflection it places on the top third of the card when it renders it within the Windows CardSpace UI. I can see how they're trying to be cool, but I think it detracts rather than adds to the overall experience.

So I conducted my first conference call with Windows Live Messenger and Verizon Web Calling. First major complaint ... I was dinged the 1.9 cent per minute fee even though I was calling an 866 number. With Skybe being free until at least the end of the year for domestic calls, I'll use the remainder of my Windows Live Messenger minutes "for fun" and then likely continue to use Skype of there are month's remaining in the year. Second complaint is the audio level of the phone call with Windows Live Messenger was too soft - even with everything within the UI cranked up to 11. I dialed into the same call, same headset, etc., with Skype and things were loud and clear. My only complaint about Skype is the dial pad UI ... too much stuff on the dial pad screen. Just make it clean. Don't put all those other text boxes on the dial pad.

I've used Skype with SkypeOut from time to time when joining conference calls from home. Rather than tie up a land line or spend hours cramped on my mobile phone with spotty reception, I've found that PC-to-land line calling has been a viable option. Today I signed up for Verizon Web Calling via Windows Live Messenger. The FAQ didn't mention anything about the costs of calling 800 or 866 numbers. My hope is that I don't get charged per-minute fees for doing so. Nonetheless, eating our own dogfood is always a good thing.

Never have I tried to record audio from within a virtual machine, but given my recent problem of breaking Camtasia Recorder with my upgrade to Windows Vista RC2, I figured I'd give my virtualized Windows XP system a try. I'm happy to report that Virtual PC 2007 does a fine job of recording audio and that Camtasia Recorder worked great within the virtual instance. Now I can prepare to complete my voice overs on the demos I recorded with Bill Hahn.

Went to record some voice overs tonight on some demos I did with Bill Hahn only to discover that Camtasia Studio isn't happy interleaving audio/video via Camtasia Recorder on Windows Vista RC2. In the morning, I'll have to try it out over on the 32-bit box and hope for the best. Once again my zeal to move the state of Casa dé Hambone forward along the adoption curves manages to get in the way of getting needed work done.

[Edit: Just checked on the 32-bit installation and it shows the same behavior. Grrr.]

I don't know why, but this rather simple (and well produced, I might add) video about free hugs is inspiring and moving. Now if I could get URGE to install on 64-bit Windows Vista RC2 I could purchase the audio track.

Adobe Flash doesn't support 64-bit browsers and they are "evaluating requests for support of 64-bit operating systems." Head over to adobe.com and let your voice be heard. Its actually kinda surprising that I've gone this long before actually seeing this problem ... a credit to how well Windows Vista masks when it loads the 32-bit version of the browser vs. when it loads the 64-bit version of the browser.

Search in Outlook 2007 Beta 2 Technical Refresh now seems broken after the installation of 64-bit Windows Vista RC2. No issues to report on my 32-bit installation. I've tried reinstalling Office with no change in behavior. I didn't realize how much I've come to rely upon search for finding information in my reference system until now.

[Edit: Turns out the upgrade did break search in Outlook 2007, but a repair of Office 2007 Beta 2 Technical Refresh put everything back in working order.]

Turns out the 32-bit Windows Vista RC2 upgrade from RC1 broke my notebook computer's domain membership in an odd way. I could still log into the machine with my domain credentials, seamlessly access Exchange over HTTP via single sign-on, etc., but I could not establish a VPN connection with IT Connection Manager. I'd be prompted for my SmartCard PIN, begin the connection but then fail on the attempt to reach our internal security server. A quick call to our helpdesk had me retry with the IPSec Policy Administration service stopped. No luck. So we removed the machine from the domain and tried to VPN again. Success! It appears there's some odd behavior in the RC1-to-RC2 upgrade that tries to pull forward domain membership, makes some incorrect assumptions and doesn't fully work as expected, but works just enough that you think it worked.

With the machine successfully connected to the VPN, I was able to rejoin it to the northamerica.corp.microsoft.com domain but was faced with a small challenge on reboot ... no more cached credentials for my domain account. Fortunately, logging on as the local Administrator and establishing a VPN connection is a persistent operation when choosing to switch users. I was able to Switch User and logon with my domain credentials, having them validated over the already established VPN connection and thereby creating a set of cached credentials.

I just signed up for the beta of soapbox on MSN Video, our alternative to YouTube and took a tour through the most viewed videos. Not surprising, the first few pages are loaded with racy videos that usually have a humorous twist.

Certainly not this.

The full formatting of 300GB completed after about 12 hours. I ran a full chkdsk that reported no errors even after copying 18GB of content over to it. Yes, I know that 18GB < 300GB, but I'm now starting to wonder if the prior problem wasn't caused by NTFS corruption due to prematurely removing the drive at some point. I'm encouraged that the full NTFS formatting didn't find any bad sectors. I'll keep my eye on it and this may be come the host drive for the virtualized casadehambone.com.

Keith indicates there are two camps out there: those who love the Windows Vista startup sound and those who would rather their computers be the strong silent type. Here at Casa dé Hambone, all of the computers except for my primary desktop (my 64-bit Windows Vista RC2 machine) are located in a closet. I live and die by Remote Desktop. On the odd occasion where I have to reboot one of the machines remotely (yes, I do truly mean the odd occasion - my machines have no erectile dysfunction that many attribute to poor quality in Windows), its is comforting now knowing that the machines have restarted by listening for the Windows Vista startup sound.

Chris123NT over on windows-now.com discovers that 64-bit Windows Vista really does work. Welcome to the club, Chris. 64-bit Windows Vista on a machine that can actually take advantage of it does indeed rocks.

Apparently all day and then some. In an attempt to see how bad a Maxtor OneTouch II 300GB hard drive had failed, I decided to perform a complete NTFS format at about 10:00AM this morning. It's now 7:15PM and its a little more than 3/4 done. Either it takes forever to actually format 300GB or there's a ton of bad sectors that are being detected and retried. Interestingly enough, there have been none of the bad sounds typically associated with a hard drive gone bad. What torks me the most is that this drive is less than a year old and has already shown signs of failing. My sense is that it wasn't designed to be thrown in a backpack and be mobile. Still, it's not like I'm beating the crap out of the thing and I'd expect it to last longer. I wonder if there's any way to get it replaced by Maxtor. Well, after this format and a full chkdsk completes, I'll know the state of things.

We got home late last night and I went in to check on the status of the newly virtualized casadehambone.com. I quickly discovered why the machine I had chosen to host the virtual instance had been sitting on the shelf ... its hard drive was making a high-pitched clicking sound. Bad drive, and I had copied the actual virtual machine hard disk to this drive in order to free up my portable hard drive for normal backpacking uses. The portable hard drive is now connected to my Windows Vista RC2 tablet pc just to keep casadehambone.com up and running for the time being.

I happened to have one more 40GB hard drive that I put into the newly designated host and have installed 32-bit Windows Vista RC2 on it. (For those keeping score at home, that's four Windows Vista RC2 installations and one Windows Server 2003 installation in the span of three days.) Hoping that this installation will be a keeper for a bit, I'm venturing further into the rat hole and installing Virtual Server 2005 R2 SP1 Beta 2 (zomg that's a mouthful; note the link points to R2 and not R2 SP1 Beta 2. Head over to http://connect.microsoft.com and apply for the R2 SP1 Beta 2 program and download it there.) to host the virtual instance. What's the chances this will actually work on Windows Vista RC2 with IIS 7.0?

Knowing that IIS 7.0 has been componetized to high heaven and that Virtual Server uses things like CGI scripts, Windows authentication, etc., I started down the path of some web research to find out what I was going to need to enable in order to get Virtual Server 2005 R2 SP1 Beta 2 running. I came across this post by Dave Northey which also pulls through some of the stuff from Ben Armstrong, our Virtual PC Guy. Short version is that I took Dave's lead and installed everything except ftp for IIS 7.0. It makes me a little uncomfortable having everything turned on and I'll likely go back and turn some stuff of after some further research. Needless to say, Virtual Server 2005 R2 SP1 Beta 2 installed just fine on Windows Vista RC2.

The next challenge was in getting Internet Explorer connected to the Virtual Server administration site. Despite my attempts to enable Windows Authentication, run IE as Administrator, etc., I had nothing but heartache. Turns out IE was treating http://localhost as being in the Internet Zone rather than the Intranet Zone. Adding http://localhost to the Intranet Zone sites fixed that little issue and I've no issue accessing the Virtual Server administration web site. Furthermore, I'm browsing the site with UAC turned on and no explicit need to run IE as Administrator whatsoever. This is goodness. [Edit: Turns out I had not rebooted after re-enabling UAC. Doing so broke the ability to sign into the Virtual Server administration web console and I had to setup a shortcut to Internet Explorer and run it as Administrator as outlined in the articles above.]

So, as I write this, the virtualized casadehabmone.com is now running under Virtual Server 2005 R2 SP1 Beta 2 and (hopefully) will be stable for a while once again.

Windows Vista RC2 automatically switched me out of Aero and into Basic when running Photoshop CS2. Unexpected, but acceptable. What was really cool was that it switched back to Aero automatically when I exited Photoshop.

The machine I was going to use to host the physical hard drive from the failed casadehambone.com server turns out to have 2GB of memory in it already. So rather than going out and purchasing 2GB of memory for my Media Center PC (which would still be a good idea, by the way) as the Virtual PC 2007 host, I decided instead to put 32-bit Windows Vista RC2 on yet another machine here at Casa dé Hambone and use it to host the newly virtualized casadehambone.com.

Now here's a kicker ... this machine is about three years old at this point though it's pimped out for its day. 2GB of memory, an 80GB hard drive and a decently productive graphics card. 100% clean install of 32-bit Windows Vista RC2 completes in less than an hour, as compared to 90 minutes for the 32-bit upgrade and about two hours for the 64-bit upgrade. What's up with that!?

[Edit: a nice surprise is that with the addition of ATI's beta drivers for Windows Vista RC1, the host machine is actually running Aero and does a fine job of delivering the experience via Remote Desktop as well. How's that for a machine that is three years old, eh? Here's the Windows Experience Index to prove it.]

I'm really curious to know how many people actually leverage WSRP to run portlets in a variety of different portals. I'm not talking about writing the portlet here and running it over there. I'm specifically interested if people are actively writing portlets within their enterprises that are then consumed by multiple vendor's portals vs. writing a portlet and deploying it locally to your portal or portals?

Don't get me wrong, I understand the commercial value of WSRP, especially when you look at service providers like financial institutions. Having control over the application and the rendered content and enabling that to be accessed in an open fashion from something other than the service provider's direct web presence is a good thing. What I'm seeking to understand is the value of the enterprise/corporate developer in doing the same thing, i.e., developing a portlet with the express intent of exposing it via WSRP instead of developing a portlet to run directly within their vended portal.

I'm sure there are plenty of "vendor neutral" responses one could make such as, "implementing WSRP for our portlet allows us to not be tied to a portal vendor." Of course, this sounds surprisingly like the main reason I hear about customers standardizing on J2EE (i.e., "developing using J2EE allows us to not be tied to an application server vendor.") I've never seen one of my customers yet switch J2EE vendors and I bet they're likely to not switch portal vendors either, hence the nature of my question.

Scott Hanselman talks about the importance of being UTF-8 for DasBlog's configuration files in direct response to an issue I had resurrecting Casa dé Hambone.

During my installation of DasBlog, I unpacked the zip edited the site.config file straight away with Notepad. Unfortunately, what I ended up with was an ASCII encoded version of the file rather than a UTF-8 version of the file. What I'm not certain of is was this Notepad's doing or was the file straight out of the zip ASCII encoded. Inquiring minds want to know.

Thanks for getting me over the hump, Scott.

I'm sitting in on a demonstration of WSRP .NET Framework by NetUnity. Wow. If you're looking for a solution to create portlets and WSRP producers from ASP.NET you need look no further. This stuff rocks.

The Object Test Bench is, in my opinion, one of the lesser known features of Visual Studio 2005. The Object Test Bench provides a way for you to create instances of your classes within the Visual Studio 2005 IDE and then invoke methods on those objects, manipulate their properties and otherwise interact with those objects ... all without writing any code!

My Visual Studio 2005 Object Test Bench screencast is available for viewing here. And will shortly be available from the Casa dé Hambone Download Center as well.

I want to thank Ron Jacobs for recommending Camtasia Studio as the screen capture and production application of choice. The fine folks over at TechSmith, the creators of Camtasia Studio, have been awesome in getting me up and running on 64-bit Windows Vista RC1. And a very special thank you to Keith Combs for assisting me with the internal publishing procedure to get the screencast up on wm.microsoft.com.

I spent some quality time with the search engines tonight looking for a .Text to DasBlog converter and couldn't find a utility to actually do it. There's plenty of hits out there, but the sites are either now defunct or the one SourceForge project actually has nothing to download.

So I followed Scott Hanselman's example in Migrating Content from Random Blogs to DasBlog and built my own DotText2DasBlog. Casa dé Hambone now has its original content content dating back to March, 2004 including all of the related comments. The only thing I've not pulled forward is images.

The code is written in C# using Visual Studio 2005. It relies upon SQL Express and requires the .Text database (.text_Data.mdf) exist in the same directory as the running executable. The code is posted here on the Casa dé Hambone Download Center. You will also require the DasBlog newtelligence.DasBlog.Runtime assembly included with DasBlog.

I sat here puzzled for longer than I care to admit as to why Visual Studio 2005 was hanging when opening a secure ftp site. Turns out I had chosen to "keep blocking" Visual Studio during the original Windows Firewall prompt. A quick visit to Control Panel > Security corrected the issue and the ftp site opened right up.

I had one of those, "Okay, this is cool" moments on Windows Vista today.

A long-time friend stopped by for dinner this evening with a mini-DV cassette of her son's wedding. Her intent was to plop it into our mini-DV cam and watch it on the big screen. Rather than comply with such a simple request, I cracked open the cable closet and went digging for my IEEE 1394 cable. I emerged victoriously, albeit covered in a little dust.

Knowing that Windows Vista now has the ability to burn DVD video out of the box, I figured this was a great opportunity to try it out. I fired up the mini-DV cam and connected it to my 64-bit Windows Vista PC. As expected, Windows Vista immediately found the mini-DV cam, installed and configured the necessary drivers, and imported the entire cassette into Windows Movie Maker ... all at the click of a single button. It detected all of the scene transitions and broke them up for me. But what wasn't expected, was it created a highlights real ... short clips of all of those scenes in one movie with random scene transitions. Nice touch.

I went ahead and grabbed just the scenes that made up the wedding and quickly added scene transitions to jazz it up just a bit and then went to publish my project.

To my surprise, the Publish to DVD brought up Windows DVD Maker, an application I'd never seen before. With a few clicks through the wizard and a choice of the "Special Occasion" theme, my Vista machine was off encoding and burning a complete, ready-to-play DVD. The result was far better than anything I would have created myself. Entering into this project, I would have taken the straight video project, burned it to DVD and hoped that the thing would play "as is" straight out of the DVD player. But Windows DVD Maker took the project to the next level and gave us a really nice, production quality DVD.

This is another one of those "here's why Windows Vista is better than Windows XP" moments that will provide my friend with fond memories of her son's wedding for years to come. Its becoming more clear to me each day why I don't want to go back to Windows XP.

In getting DasBlog back up and running on the newly virtualized casadehambone.com, I believe I neglected to set security permissions on the content directory that would enable DasBlog to actually save blog posts. What made this even more confusing was actually having DasBlog accept a new post, display it in the browser but not actually save it anywhere. I just granted Network Service modify writes to the DasBlog content folder. Hopefully I have it corrected now.

Woke up this morning and found that I had partial Internet connectivity - I was connected to Exchange over HTTP, could ping via IP addresses but name resolution was hosed. I checked on the primary server that runs Casa dé Hambone and it has issues ... the power light is blinking eight times, pausing, blinking eight times, etc.

Fortunately, casadehambone.com is driven by a laptop computer and I just happen to have another laptop sitting nearby. I go on the hunt for the tiny screwdrivers, remove the hard drive and insert it into the spare laptop, only to have the machine crash during boot. Furthermore, it reboots immediately upon crashing so I cannot even make out the stop code. Now I'm slightly concerned because a) chances are good there's a problem with the hard drive and b) there's no spare machines that I can quickly get up and running to replace the failed server.

Enter the public beta of 64-bit Virtual PC 2007. With all the work I've done lately with staging my virtual machines for demonstrations, I happen to have a Windows Server 2003 Enterprise Edition base image all ready to go. Spinning up a new virtual machine to replace the failed casadehambone.com server is actually a piece of cake. The challenge is recovering the data and web applications that exist on the failing/failed hard drive. Again, I'm fortunate to discover that \Inetpub and My Documents are readable on the drive after throwing it into a USB enclosure and connecting it to my 64-bit Windows Vista machine.

As I write this, the internal casadehambone.com is back up and running, using DHCP and DNS from the newly virtualized server. .NET Framework 2.0 just completed installation and I'm about to bring DasBlog back online ... so if you're reading this, everything is a success.

The question now arises of where to run the virtualized casadehabone.com? The server itself runs well in 512MB of memory and could likely even run in 256MB of memory. My 4GB 64-bit Windows Vista machine has more than enough horsepower to host the virtual instance, but I don't want to clog up my desktop with even the minimized instance of the window. However, until I can pull the 64-bit version of Virtual Server from work, I'll have to live with this. Furthermore, the virtual hard drives are hosted on my portable hard drive that I need to take with me, so I need a more permanent solution before the weekend is out. I may go buy 2GB of memory for my Media Center PC (a Dell SC420 small business server) and move the virtualized casadehambone.com to it. Nice thing as at this point moving the virtual machine around is cake.

The upside to today's little drama is I'm now ahead of schedule on my server consolidation efforts and I've turned off another computer at Casa dé Hambone, thereby saving a little more on the electric bill.

Now that my interop work with IBM is done for the week, I'm taking the plunge to upgrade my RC1 machine to RC2. It's important to note I'm attempting an upgrade rather than a clean install this round. Here's the play-by-play of the upgrade on my Toshiba Tecra M4:

3:07PM - Insert my freshly burned 32-bit RC2 DVD; AutoPlay prompts me to run setup.exe and User Account Control asks me if I'm crazy or not; choosing Install now from the Install Windows dialog starts the process

3:10PM - I have an opportunity to go online to get the latest updates for the installation

3:11PM - I'm prompted for my product key ... very glad that I saved the web page that contained my RC1 product key using Vista's new Microsoft XPS Document Writer

3:14PM - I'm prompted to upgrade or do a custom install ... this is all upgrade; Microsoft SQL Server 2005 is flagged as not working with Windows Vista and I'm instructed to get an updated version after the upgrade is complete

3:15PM - The file copy process begins with a nice little notice "Your upgrade may take several hours to complete." I hope not.

3:24PM - Copying of Windows files is complete

3:35PM - Gathering and expanding files to ~21% is complete and the machine restarts

3:53PM - Expanding files has finished and installation of features and updates beings

3:54PM - Installation of features and updates has finished, completing upgrade begins and the machine restarts

3:56PM - The machine is back up and preparing to "start for the first time..."

3:59PM - Back into GUI mode and "completing upgrade..."

4:17PM - Completing upgrade restarts the machine at ~61%

4:19PM - Completing upgrade continues ...

4:28PM - Completing upgrade restarts the machine

4:30PM - Back into GUI mode and I'm prompted for how I want to protect Windows and you better believe I'm choosing to use the recommended settings; I finish off with verifying the current time and finally clicking Start to end my setup experience and start living the Windows Vista RC2 dream

4:31PM - Windows begins checking my computer's performance and the fan on my Toshiba Terca M4 goes wild

4:34PM - Press CTRL + ALT + DELETE or use the Windows Security button to log on

4:37PM - Vista up and running, installing updates and finding new hardware

Total time ... right about 90 minutes.

I suffer from male pattern blindness and tend to not see things right away. I just discovered that Windows Live Writer supports Technorati tags. Sweet. I can now join the cool kids.

When I started my plunge with Windows Vista RC1 on my 64-bit machine, I went in with a "what's wrong with Windows XP?" mindset. Now that I've been running it for a little more than a month, have made the switch across all of my machines and am increasingly performing more development work hosted on Vista, I find that I don't want to go back. In fact, every time I now boot a Windows XP virtual machine I find that I look down upon it as some second rate citizen come to rob me of my happiness. Sure, there are changes in the Vista UI that throw me for a loop every now and then and I find myself hunting around at times for feature/functions, but overall the experience has been very good and I don't want to go back to Windows XP.

Good news! Thanks to Betsy Weber over at TechSmith, I got my hands on an early copy of Camtasia Studio 4 and was able to complete an end-to-end screen capture-and-produce using Camtasia Recorder and Camtasia Studio. The catch was that I had to capture to an .avi rather than a .camrec, which for me is just fine.

I've made available a custom UsernameTokenManager for WSE 2.0 that validates a plain text UsernameToken against the local Windows security database and attaches a WindowsIdentity to the currently running thread.

You can download my AuthenticationManager from the Casa dé Hambone Download Center. This is tested and working on Windows Server 2003 with .NET Framework 1.1 and WSE 2.0 SP3.

Background

The customer I'm working with is a WSE 2.0 / .NET Framework 1.1 adopter. As mentioned in this post, I'm working with Bill Hahn from IBM to demonstrate web services interoperability between WebSphere Portal and .NET. The sick irony is that we're actually doing this with the latest and greatest versions of WebSphere Application Server and Rational Application Developer while using the somewhat rapidly aging WSE 2.0. The good news is that it all works which makes for happy customers.

Custom UsernameTokenManager Implementation

So, why do a custom UsernameTokenManager? The primary reason is to demonstrate to developers what is going on under the covers with UsernameTokens and authentication. It's possible to use WS-Policy to pull this off and let WSE 2.0 do all of the heavy lifting which, believe me, is cool as hell. Unfortunately, understanding WS-Policy is not a mainstream skill and tends to create more questions in a group presentation/demonstration than it answers.

Furthermore, using a custom UsernameTokenManager provides me an opportunity to place a WindowsIdentity on the currently running thread and then take advantage of implicit security checks via the PrincipalPermissionAttribute on my WebMethods:

[System.Security.Permissions.PrincipalPermission(SecurityAction.Demand, Role="HAMBONE-0DJ8MP\\ServiceUsers")]

In this one line of code placed in front of each of my Web service's methods, I'm able to ensure that the calling user has been authenticated and is a member of the local ServiceUsers group. This eliminates having to mess with the actual Web service methods by including checks to RequestSoapContext and having to sift through the security tokens present on each request. It also means I can do goofy things later on like authenticate my users with the ASP.NET membership provider and still have my Web services code work unchanged. Yes, that's cool.

Programming By Search Engine

I spent a good deal of time looking for this same solution on Windows Live and Google. I found references to bits and pieces scattered all over but nothing complete and nothing that spoke to the exact problem set I was trying to solve. And so, the programmer-friendly searchable web grows by another post.

Head over to local.live.com, type in the name of your favorite restaurant and hit the Call for free link to be connected with your search results! I'm sure it works with more than restaurants, but being the food-crazed guy I am, that's what I typically search for more than any other thing on Live Local.

Tonight, we're heading to Nonna Silvias for some wonderful pumpkin ravioli!

Dave and I were talking today about Media Center Extenders and wireless networking. He's heard conflicting reports of what works and what doesn't. Since I run three extenders at home, two over wireless, I was able to convince him that its doable. At the time I did this, there was no common run in my house that enabled me to run cables from the basement to my master bedroom. Furthermore, even if I went outside Casa dé Hambone to pull it off, my house is on a corner and all convenient entrances to the master bedroom from the outside are face brick ... and I don't want cables running through face brick, nor do I want cables tracing around the inside of my bedroom. So wireless Media Center Extenders came to the rescue.

My configuration is pretty straightforward. I have an 802.11g wireless access point that serves the two wireless Linksys Media Center Extenders. This same access point also feeds the Media Center PC and an XBOX 360 via 100mb Ethernet. Note this is an 802.11g access point, not 802.11a. There are some schools of thought that say you need 802.11a to pull this off. Maybe you need 802.11a if you're going to be streaming HDTV content to an XBOX 360 via wireless, but I was doing this via 802.11g long before the introduction of the XBOX 360. I've had no problem running my two wireless extenders at the same time over this dedicated network.

For the computers at Casa dé Hambone, I have an 802.11b wireless access point as a completely separate wireless network on a completely different channel. The intent here is to keep Internet traffic and home office productivity segmented from the video traffic on the 802.11g network.

Finally, the two access points are connected via a 10/100 switch that enables the primary server located on the 802.11b network to serve up DHCP and DNS information to all of the machines on the 802.11g network, as well as allowing me to access things like the Media Center PC for remote management.

In case you're wondering why the computers are on an 802.11b network and not an 802.11g network, its purely due to the hardware I had available at the time. I expressly purchased the 802.11g access point when doing the wireless Media Center Extender setup and kept the 802.11b access point as 5-10mb transfers while sitting around the house are perfectly acceptable. Any heavy downloading is done via machines connected over 100mb so I don't really have a need to upgrade 'em to 802.11g.

I've not yet been able to get Camtasia Studio working on my Vista machines. Camtasia Recorder works like a champ and even records on my 64-bit Windows Vista RC1 machine without issue, but Camtasia Studio does not yet want to cooperate. So I've been doing post production on a Windows XP Pro SP2 machine ... except that's the box that I upgraded to 32-bit Windows Vista RC1 this morning. So here I am at 1:30AM installing Windows XP Pro SP2 into Virtual PC so I can do my post production work. The upside is that I'll be able to do everything on my primary Vista machine and not have to swap between boxes.

My primary work laptop, a Toshiba Tecra M4 tablet pc, just got the Windows Vista RC1 upgrade. Not sure if that's the wisest thing to do, as I'm meeting with Bill Hahn from IBM this morning to work on our WebSphere/.NET interoperability demonstration and this laptop is the one that's been hosting the virtual machine instance.

The installation of RC1 is much faster on this machine than any of the previous beta's. In the time it took me to shower this morning and brew a latte, the machine was up and running.

This machine is also going to get the Apacer Handy Steno HT203 200X 2GB USB 2.0 stick I recently acquired for a ReadyBoost performance upgrade. That should help somewhat with the 1GB virtual machine instances I run on this 2GB laptop.

The Object Test Bench is, in my opinion, one of the lesser known features of Visual Studio 2005. The Object Test Bench provides a way for you to create instances of your classes within the Visual Studio 2005 IDE and then invoke methods on those objects, manipulate their properties and otherwise interact with those objects ... all without writing any code!

My Visual Studio 2005 Object Test Bench screencast is available for viewing here. And will shortly be available from the Casa dé Hambone Download Center as well.

I want to thank Ron Jacobs for recommending Camtasia Studio as the screen capture and production application of choice. The fine folks over at TechSmith, the creators of Camtasia Studio, have been awesome in getting me up and running on 64-bit Windows Vista RC1. And a very special thank you to Keith Combs for assisting me with the internal publishing procedure to get the screencast up on wm.microsoft.com.

Need an option to enable cross posting when an entry is submitted via the API as well.