Showing posts with label linux. Show all posts
Showing posts with label linux. Show all posts

Monday, February 18, 2013

Remote access to linux via SSH using Putty (and draw lines correctly)

Update 2014: Actually, it's pretty simple to solve all these things, when using Ubuntu 12.04 (US English) and Putty 0.63. I didn't check other distros. Configure Putty like this:
- Terminal >> Keyboard >> The Function keys and keypad = Linux
- Window >> Translation >> Remote Character set = UTF-8
All works great!



When logged in from a Putty terminal, some programs render correctly the bars made of characters using in putty UTF-8, while others render them correctly using ISO-8859-1:1998 (Latin-1, West Europe) in Putty settings. I haven't found a nice way to deal with this problem, and I'm gonna keep a log of programs' preferred way.

UTF-8: hddtemp, links, links2, lm-sensors, mc, moc, smartmontools,
ISO-8859: alsamixer, elinks, iptraf, mp3blaster, sysv-rc-conf, wavemon

Keep in mind that this is related to the way server's locale is configured. My server locale shows the following output:
server:~# locale
LANG=en_US.UTF-8
LC_CTYPE="en_US.UTF-8"
LC_NUMERIC="en_US.UTF-8"
LC_TIME="en_US.UTF-8"
LC_COLLATE="en_US.UTF-8"
LC_MONETARY="en_US.UTF-8"
LC_MESSAGES="en_US.UTF-8"
LC_PAPER="en_US.UTF-8"
LC_NAME="en_US.UTF-8"
LC_ADDRESS="en_US.UTF-8"
LC_TELEPHONE="en_US.UTF-8"
LC_MEASUREMENT="en_US.UTF-8"
LC_IDENTIFICATION="en_US.UTF-8"
LC_ALL=


What to do: configure ssh client in other systems (Putty) to use UTF-8 and match server's locale to get nice display of man pages and character bars of some programs. The optimum settings I have found so far are the following:
- Window >> Translation >> Remote Character Set >> UTF-8
- Connection >> Data >> Terminal-type string >> linux


Other Putty settings I choose to alterate from default:
- Lines of scrollback = 900
- Window title (i.e. "[root@server1.example.com]", without quotes)
- Auto-login username (i.e. "root", without quotes)
- Enable compression
- Permit only protocol version 2


https://bbs.archlinux.org/viewtopic.php?pid=511920
http://www.andremiller.net/content/getting-midnight-commander-line-drawing-work-putty
http://rc.quest.com/topics/putty/doc.php#config-linedraw
http://blog.sanctum.geek.nz/putty-configuration/
http://sourceforge.net/p/nmon/bugs/4/
http://superuser.com/questions/393834/how-to-configure-putty-to-display-these-characters
http://www.thegeekstuff.com/2009/07/10-practical-putty-tips-and-tricks-you-probably-didnt-know/



Last update: 2013.03.18

Sunday, February 17, 2013

SSH login with Putty, without password

Install ssh-server if it's not already installed. In Debian/Ubuntu, this is what we have to do:
# apt-get install ssh openssh-server

I am using authentication between two hosts without the need of a password in 4 easy steps:
    1. Generate the keys using a DSA authentication identity:
    # ssh-keygen -t dsa
    2. Make a new "authorized_keys" file (if not already there) an paste the key generated by puttygen (see login via Putty without a password):
    # vim ~/.ssh/authorized_keys
    3. Assign rw permissions only for the owner
    # chmod 600 ~/.ssh/authorized_keys
    4. Configure Putty to know where the saved private key file (see login via Putty without a password)

If you'd like to secure SSH, more setup is neccessary. Hints: fail2ban (blacklist IPs using iptables), denyhosts (blacklist IPs using /etc/hosts.deny file).

When in trouble configuring Putty to access remote machines, you may find useful this post:
http://iulmit.blogspot.ro/2013/03/remote-access-to-linux-via-ssh-using.html


Reference:
Debian Linux Install OpenSSH SSHD Server
SSH Debian Wiki


Last update: 2013.03.17

Monday, March 28, 2011

Fun with linux - Ubuntu Server 10.04 LTS

Ubuntu Server 10.04 LTS (Lucid Lynx)
Got this baby to run on a small file server... These are notes I needed to make it work the way I want.
[work in progress]


Setup and installation

- Ubuntu Server Edition x64 (version 10.04.1)
- check System Requirements
- consult, if neccessary, the Ubuntu Installation Guide (i386 | amd64)

Upon installation:
- configure installation for no automatic updates [note on apticron], or enable automatic update
- install OpenSSH server for Putty access [there is also possible to add it manually]

etckeeper - a tool keep track of /etc changes (via VCS)
# aptitude install etckeeper bzr bzrtools Links: https://help.ubuntu.com/10.04/serverguide/C/etckeeper.html

Network setup:
Add static IP address (to /etc/network/interfaces):
# The primary network interface
auto eth0
iface eth0 inet static
        address 192.168.1.100
        netmask 255.255.255.0
        network 192.168.1.0
        broadcast 192.168.1.255
        gateway 192.168.1.1

... then restart network:
# /etc/init.d/networking restart
Edit /etc/hosts like this:
127.0.0.1       localhost.localdomain   localhost
192.168.1.100   server1.example.com     server1

Run:
# echo server1.example.com > /etc/hostname
# /etc/init.d/hostname restart

Then, run:
# hostname
# hostname -f
... both should answer server1.example.com now.

Change default shell (from /bin/dash to /bin/bash)
# dpkg-reconfigure dash
Install dash as /bin/sh? NO!


SSH login with Putty, without password



Security

[working on it]
Ubuntu manual
Ubuntu firewall: Netfilter, ufw, iptables
Ubuntu Security on UbuntuForums
Bastille Linux - hardening the security of Ubuntu system

denyhosts and fail2ban
# aptitude install python python2.6-dev python2.6 denyhosts

Links:
Installing DenyHosts (The Ubuntu Way)
http://www.ubuntugeek.com/securing-ssh.html
http://www.unixmen.com/linux-tutorials/309-prevent-brute-force-attacks-on-ssh-servers-with-denyhosts-
http://denyhosts.sourceforge.net/faq.html

https://help.ubuntu.com/community/Fail2ban
How to secure ubuntu server from bruteforce ssh attacks?

rkhunter and chkrootkit

Disable AppArmor
AppArmor is a security extension (similar to SELinux) that should provide extended security. Some people believe that it causes more problems than advantages and I disable it (this is a must if you want to install ISPConfig - see installation of Ubuntu 8.10 | Ubuntu 9.10 | Ubuntu 10.04 LTS):
/etc/init.d/apparmor stop
update-rc.d -f apparmor remove
aptitude remove apparmor apparmor-utils

Just in case in need to install AppArmor, the manual shows how to do it:
# aptitude install apparmor apparmor-profiles

Links: AppArmor in Ubuntu Manual | AppArmor Failures (Wiki) | AppArmor on Ubuntu Documentation | SECURITY - Is it a bad idea to run SELinux and AppArmor at the same time? | Is troubleshooting AppArmor with 'teardown' unsafe?


Prerequisites

# aptitude install ntp [details]
Update /etc/ntp.conf adding the following (if you live in RO):
server 0.ro.pool.ntp.org
server 1.ro.pool.ntp.org
server 2.ro.pool.ntp.org
server 3.ro.pool.ntp.org
# aptitude install arj binutils bridge-utils cabextract cpio darkstat ethtool flip iptraf lha links2 mc nomarch ntop pax rar screen sysstat unison unrar unzip vim-nox zip

Links and info:
- darkstat: a packet sniffer that runs as a background process on a cable/DSL router, gathers all sorts of statistics about network usage, and serves them over HTTP. - elinks2: The history and evolution of the Links browsers (ELinks vs. Links vs. Lynx
- ethtool (instead of mii-tool, obsolete)
- flip (use "flip -a file_name" to convert DOS TXT files to UNIX) [website]
- mc: Midnight Commander / MC Tutorial - ntop: tutorial
- sysstat: sar, mpstat, iostat, sadf and sa
- unison (rsync at the next level!) [websitee | tutorial]
- vim-nox (VIsual editor iMproved - noX): strange behavior of vi in Ubuntu is now corrected


Setting-up hardware

Mount points If the partitions and other mount-points are not set up upon installation, Fstab introduction in Ubuntu Comunity Documentation might be at hand, as well as a nice tutorial which shows how to automatically mount partitions or network shares.

This machine has a hardware raid controller and 3 x RAID0 arrays. Everything can be set up easily as explained on the guide on Ubuntu manual. [Software RAID explained]
Notes: Linux disk failures: Areca is not so SMART | Areca utilities


Serving clients (computers or users)

Certificates
Note, that self-signed certificates should not be used in most production environments.
(from the Ubuntu Manual)

LAMP - LinuxUbuntu-Apache2-MySQL5-PHP5
# echo "ServerName localhost" | sudo tee /etc/apache2/conf.d/fqdn
# tasksel install lamp-server
Links: HTTPD / Apache in Ubuntu Manual | Apache-MySQL-PHP on Ubuntu Wiki | Apache official manual |

To access / check / modify MySQL database, install PhpMyAdmin or/and mysql-admin:
# aptitude install phpmyadmin mysql-admin
Links: Securing the Initial MySQL Accounts | MySQL official manual | PhpMyAdmin on Ubuntu Manual

DNS server with Bind + (web-)admin with smbind
# aptitude install bind9 dnsutils
# aptitude install smbind

Links: configuration (in Ubuntu Manual) | Simple Management for BIND | Smbind installation (DE) | How to Install and Configure Smbind

smbind configtest (http://example.com/smbind/src/configtest.php) complained with the following:
smbind configtest
This script will try to check some aspects of your smbind configuration and point you to errors where ever it can find them. You need to edit config.php and read the INSTALL file first before you run this script.
Testing config.php...OK
Testing PEAR DB...OK
Testing Smarty...OK
Testing templates_c...OK
Testing path...OK
Testing conf directory...OK
Testing conf file...OK
Testing named-checkconf...OK
Testing named-checkzone...OK
Testing rndc...OK
Testing (guess) /etc/rndc.conf...not found.
Testing (guess) /etc/rndc.key...not found.
Testing (guess) connection to localhost:953...OK
Testing rndc execution...Could not run rndc as www-data. Please make sure that www-data is a member of the group that runs named, and that all rndc config files and keys are readable by www-data.
output was: rndc: could not load rndc configuration

I was able to fix them:
1. Add the following to /etc/bind/named.conf:
include "/etc/smbind/smbind.conf";
2. Make a symbolic link for rndc.key to the proper location:
# ln -s /etc/bind/rndc.key /etc/rndc.key

3. Add www-data to group bind:
# id www-data
uid=33(www-data) gid=33(www-data) Gruppen=33(www-data)
# adduser www-data bind
# id www-data
uid=33(www-data) gid=33(www-data) Gruppen=33(www-data),117(bind)
# /etc/init.d/apache2 restart


E-mail server (Postfix, Dovecot IMAP, Dovecot POP3, Mailman)
# aptitude install postfix dovecot-common dovecot-imapd dovecot-pop3d mailman

Filtering email:
# aptitude install amavisd-new spamassassin clamav-daemon dkim-filter python-policyd-spf pyzor razor

Once installed, check https://help.ubuntu.com/10.04/serverguide/C/mail-filtering.html for configuration (must read!)
Webmailaptitude install squirrelmail # aptitude install squirrelmail # ln -s /usr/share/squirrelmail/ /var/www/webmail # squirrelmail-configure
or E-mail server (Postfix, Courier, Saslauthd, MySQL) + rkhunter
# aptitude install postfix postfix-mysql postfix-doc mysql-client mysql-server courier-authdaemon courier-authlib-mysql courier-pop courier-pop-ssl courier-imap courier-imap-ssl libsasl2-2 libsasl2-modules libsasl2-modules-sql sasl2-bin libpam-mysql openssl getmail4 rkhunter maildrop

This setup cand be configured following the tutorial (must read!)
Note. Step 17 ("cp -prf /usr/share/doc/awstats/examples/awstats_buildstaticpages.pl /usr/share/awstats/tools/awstats_buildstaticpages.pl" returned an error: "cannot create regular file `/usr/share/awstats/tools/awstats_buildstaticpages.pl': No such file or directory"). I managed to solve this making the required directory which does not exist:
# mkdir /usr/share/awstats/tools
Everything is great now!

Squid - Proxy Server (transparent, by default)
# aptitude install squid
Links: Squid on Ubuntu Manual

DHCP
# aptitude install dhcp3-server
More info:
https://help.ubuntu.com/10.04/serverguide/C/dhcp.html
https://help.ubuntu.com/community/dhcp3-server

File server (for Windows clients) - Samba
Install Samba File Server:
# aptitude install samba

Add persistent share upon reboot:
# aptitude install smbfs

Links: https://help.ubuntu.com/10.04/serverguide/C/samba-fileprint-security.html>Securing a Samba File and Print Server | smb.conf examples

FTP
# aptitude install vsftpd
Note1: vsftpd is supposed to be configured after installation to allow only anonymous read acces, by default (as per Ubuntu manual), but it's configured to allow system users' access (root disabled).
Note2: I get a strange message log if I try to login anonymously or with fake user ("lo: Disabled Privacy Extensions"). This message in log can be avoided adding the following to /etc/vsftpd.conf:
isolate=NO
isolate_network=NO
- allow write access for users (write_enable=YES) in:
# vim /etc/vsftpd.conf
Note: making a symlink to any mount point in the home directory of one user, will make them visible via ftp to that user

Links: FTP server on Ubuntu Manual

NFS (Network File System)
# aptitude install nfs-kernel-server nfs-common
[Network File System (NFS) in Ubuntu manual]
Note: NFS is often used on linux, UNIX and FreeBSD. It is also available to other OS's such as Windows and Mac OS.

OpenLDAP Server
More info in Ubuntu Manual

(Web-)Monitoring (Apache or other web-server required to be installed)
Nagios
# aptitude install -y nagios3
Links: Nagios in Ubuntu Manual | Nagios3 how-to in Ubuntu Wiki | Monitoring Windows

Munin (disk, network, processes, system; DNS, DHCP, Samba)
# aptitude install munin munin-node munin-plugins-extra
Links: Munin in Ubuntu Manual | Munin docs
ZenOSS
(an open source IT monitoring product that delivers the functionality to effectively manage the configuration, health, performance of networks, servers and applications through a single, integrated software package)
to be checked

Cloud computing
https://help.ubuntu.com/10.04/serverguide/C/uec.html

Virtualized Clustering = OpenNebula
https://help.ubuntu.com/10.04/serverguide/C/opennebula.html

Real Clustering - Distributed Replicated Block Device (DRBD)
https://help.ubuntu.com/10.04/serverguide/C/drbd.html

VPN
https://help.ubuntu.com/10.04/serverguide/C/openvpn.html


Statistics

Webalizer
# aptitude install vlogger webalizer awstats

To see visitors' country (not required):
# aptitude install libnet-ip-perl libgeo-ipfree-perl

Create configuration file
# cp /etc/awstats/awstats.conf /etc/awstats/awstats.example.com.conf

Modify /etc/awstats/awstats.example.com.conf
# Use '1' for more detailed information (default '4'):
LogFormat=1

SiteDomain="example.com"

HostAliases="localhost 127.0.0.1 example.com"

Generate the initial stats for AWStats:
# /usr/lib/cgi-bin/awstats.pl -config=example.com -update

Add the following text to '/etc/apache2/sites-available/default' (and every domain's config file) inside 'VirtualHost' tag:
# AWStats (to be placed in every domain's config file):
Alias /awstatsclasses "/usr/share/awstats/lib/"
Alias /awstats-icon/ "/usr/share/awstats/icon/"
Alias /awstatscss "/usr/share/doc/awstats/examples/css"
ScriptAlias /awstats/ /usr/lib/cgi-bin/
Options ExecCGI -MultiViews +SymLinksIfOwnerMatch

The AWStats statistics should be available at:
http://example.com/statistics/awstats.pl?config=example.com

Update statistics with cron: in /etc/crontab add:
# AWStats runs update every 1h
0 */1 * * * root /usr/lib/cgi-bin/awstats.pl -config=toto.com -update > /dev/null

Links: kastang tutorial | awstats on Ubuntu server 8.04 (Hardy Heron) | Configuring AWStats on Ubuntu Server | Apache2 + Awstats setup on Debian/Ubuntu (Edgy Eft) | Setting up awstats with apache 2 on debian-ubuntu):


Personal preferences



Monitoring (CLI/ASCII)

This is a cool task that should be implemented: add status info about system (temperature, HDD SMART errors etc.) upon login via MOTD.Check pam_motd in Ubuntu Manual for more info.

Other cool staff:
- sysstat (installed by default in all distros):
- iostat (installed by default in all distros) [I/O statistics for devices, partitions and network filesystems]
- mpstat [CPU statistics]
- pidstat [tasks/processes : I/O, CPU, memory, etc.]

- top (installed by default in all distros) [tutorial]
- vmstat (installed by default in all distros) [virtual memory statistics of process, virtual memory, disk, trap, and CPU activity]
- htop [an advanced 'top']
- nmon [multiple performance statistics in one screen]
- atop [performance monitor of system-level activity]
- netstat (installed by default in all distros) [network-related data structures]
- iotop [I/O processes monitor, hard disk activity]
- Collectl [monitor processes with a lot of customization]
- smartmontools (smartctl)
- hddtemp
- iWatch (monitors filesystem's integrity)


Maintenance



Admin staff



Last update: 2011.03.17

Monday, May 25, 2009

Debian 5 (Lenny) - Security & Performance


Hardware & preparation | OS installation | Console & web monitoring | Network & application services | Multimedia | Security



I left this at the end since it's the most dynamic and hardest part. A sysadmin have to keep an eye to systems he manage in order to run safe and secure for the network (internet), and as fast as possible for the applications installed.


Security tips
- as per this thread, user nobody should not have shell access; needs to check that
- Securing Debian Manual
- Securing Debian Manual - Security update protected by a firewall
- Securing Debian Manual - Debian Security Infrastructure
- secpack - automatic security updates
- DebianHelp.co.uk
- encrypt data on all partitions (backup should be part of this process)
- check for security vulnerabilities using Tiger / TARA or some other tools
- First Things First - An Introduction to Learning About Network Security
- Scaring Crackers Away with TCP Wrapper
- Network monitoring, access control & booby traps using TCP Wrappers
- Security Quick-Start HOWTO for Linux (07.2002)
- RFC archives (Internet RFC/STD/FYI/BCP Archives)
- Internet FAQ Archives
- TCP_WRAPPERS in Securing and Optimizing Linux: RedHat Edition -A Hands on Guide
- iptables; links: Iptables HowTo (Ubuntu), Iptables Tutorial 1.2.2 by Oskar Andreasson (2006).
- shorewall - iptables-based firewall made of scripts; links: shorewall explained (in Custom Linux Firewalls with Debian)
- SbD project (Secure-by-Default)

Notes: installing CentOS 5, I found a nice security utility that I need to keep in ming for future installations: rkhunter. Some false positives are shown when run, and every hour an email is sent to the root account. The fix for these are explained in a forum thread I found searching the internet.



Performance tips
- file system - How to Increase ext3 and ReiserFS filesystems Performance.



Some general/networking/sysadmin links:
- DebianAdmin
- debianHELP
- Debian-Administration
- Debian Administration Utilities
- Debian Clusters for Education and Research
- Debian Mailing Lists
- Dimitri (dim) Tools
- Edison Wong (Debian tag)
- Finding out basic information about your hardware
- GetDeb - software you want
- LinuxConfig
- Linux Gazette
- Lone Wolf's Scripts
- MDLog:/sysadmin
- Open Source Heaven
- UbuntuGeek
- UbuntuHQ
- Ubuntu Official Documentations
- Ubuntu UserDocumentation
- UnixCraft - Insight into Linux admin work
-



Interesting applications/readings
Researching, I find projects I may need to use for other projects. This is to not forget about them:
- ServDoc - shellscripts to find a lot of informations about a system
- GRLM - Linux Live-CD for sysadmins


Powerful tools
Using linux/Debian for this project, I found myself in a process of deeply studying powerful tools. I'll keep track of good links I passed by, good for novices as well as more advanced admins:
- vim: power vim usage.
- bash scripting: Tips for learning to program Unix/Linux shell scripts.
- dd: dd usage (wikipedia).



Interesting applications/readings
Researching, I find projects I may need to use for other projects. This is to not forget about them:
- ServDoc - shellscripts to find a lot of informations about a system



About / Despre acest blog
Disclaimer and privacy statement / Confidenţialitate
Updated / Actualizat: 2009-09-18.

___


New server (Debian 5 /Lenny) - Everything else


Hardware & preparation | OS installation | Console & web monitoring | Network & application services | Multimedia | Security | Security & Performance | Everything Else



To do:
- add splash screen (at boot)
- remove dmesg from /var/log/messages
- instruct init to be aware of, and respond to, UPS




Quick HowToDo staff (in console)
- search the word "ipv6" within files, starting /etc/:
# grep -R ipv6 /etc/- search for the word "/swat" within a binary file:
# strings /usr/sbin/swat | grep "/swat"- find relevant config lines in file (lines without #):
# cat file | grep -v \# | grep .
- display the list of files under a directory and subdirectories:
# find /boot/grub -print
- find the most recently changed files (recursively):
# find . -type f -printf "%TY-%Tm-%Td %TT %p\n" | sort | less
- display uncommented lines within file: ...
- Mount an ISO image:
# mount -o loop -t iso9660 /path/to/file.iso /mount/temp




Few words about Debian 5.0.1 (lenny)
I like:
- .
- .

I don't like:
- doesn't have built-in NTFS support, as such cannot mount NTFS partitions upon installation (unlike Ubuntu)
- .




About / Despre acest blog
Disclaimer and privacy statement / Confidenţialitate
Updated / Actualizat: 2009-09-18.

___


Thursday, January 8, 2009

Fun with linux - Ubuntu 7.04 (feisty)

Fix display issue for Midnight Commander, IPtraf and other character-lines-based applications in Putty


When using Putty to connect to a linux machine (ubuntu) from Windows XP, some programs display strange characters (MC, IPtraf, man pages etc.). To make the programs behave correctly you have to set the character set translation in Putty the same as the remote linux.

[1] Check what character set is installed on your distro (ubuntu):
# echo $LANG

Mine is en_US.UTF8.

[2] Change character set translation in Putty:
Open putty >> Cathegory >> Windows >> Translation >> Receive data assumed to be in which character set >> UTF8

NOTE on IPtraf. For some reason, IPtraf refuses to work and it still behaves strange, I guess because it doesn't have support for UTF-8. That's why, in order to fix this, we need to set locale on linux en_US, and for putty to ISO-8859-1:1998 (Latin-1, West Europe).
To set en_US on ubuntu, edit this file:

# vi /etc/default/locale
LANG="en_US"



To set en_US on Fedora Core release 4 (Stentz) [RedHat], edit this file:

# vi /etc/sysconfig/i18n
LANG="en_US"


However, with en_US set on Ubuntu I run into another issue for which I don't have time to investigate right now, but I don't have any reason not to use en_US. If I run:
# locale

I get these errors:
locale: Cannot set LC_CTYPE to default locale: No such file or directory
locale: Cannot set LC_MESSAGES to default locale: No such file or directory
locale: Cannot set LC_ALL to default locale: No such file or directory


Check your version of Ubuntu:
# lsb_realease -a


Stop Syslog from putting "-- MARK --" in the logs (/var/log/messages) every 20 min.
# vim /etc/default/syslogd
SYSLOGD="-m 0"



Related info:
http://iulmit.blogspot.ro/2013/03/remote-access-to-linux-via-ssh-using.html


Despre acest blog
Disclaimer and privacy statement
Actualizat: 2009-03-17.

___


Wednesday, June 13, 2007

Fun with linux - Fedora Core 7

[1] Tune up

mii-tool
Check and see if the LAN card is set on 100 Mb full-duplex
# mii-tool

Got a strange output (probably working on 100 Mb half-duplex):
# mii-tool
eth0: autonegotiation failed, link ok
eth1: no link


Force LAN card to work on 100 Mb
# mii-tool -F 100BaseTx-FD


DAG repository
# wget http://dag.wieers.com/rpm/packages/rpmforge-release/rpmforge-release-0.3.6-1.fc3.rf.i386.rpm
# rpm -Uhv rpmforge-release-0.3.6-1.fc3.rf.i386.rpm


Java Runtime Environment (JRE)
>> Download jre-6u1-linux-i586.bin (Linux self-extracting file)
# yum install compat-libstdc++-33 compat-libstdc++-296
# sh jre-6u1-linux-i586.bin
# mv -f jre1.6* /opt/jre1.6
# ln -s /opt/jre1.6/plugin/i386/ns7/libjavaplugin_oji.so /usr/lib/mozilla/plugins/libjavaplugin_oji.so
Details on Personal Fedora 7 Installation Guide & GCC Compatibility webpages.

NTFS support
Example of /etc/fstab configuration:
/dev/sda2 /mnt/win/sda1 ntfs-3g rw,defaults,umask=0000 0 0
Details on Personal Fedora 7 Installation Guide website.




[2] Installation
- all programs, by default (from DVD)

Other software using yum (following this order):
- aMSN 0.96 (amsn.i386-0.96-7.fc7 + bwidget.noarch-1.8.0-1.fc6, sox.i386-13.0.0-1, tcldom.i386-3.1-10.fc7, tcllib.noarch-1.9-4.fc7, tclsoap.noarch-1.6.7-4.fc7, tcltls.i386-1.5.0-11.fc6, tclxml.i386-3.1-11.fc7, tkdnd.i386-1.0a2-7.fc6) - 4.8 M
- iptraf (iptraf-3.0.0-6.fc7) - 327 k
- AbiWord (abiword.i386-2.4.6-5.fc7 + goffice.i386-0.2.2-1.fc7, gtkmathview.i386-0.7.6-5.fc6, libwpd.i386-0.8.9-2.fc7, link-grammar.i386-4.2.2-2.fc6, mathml-fonts.noarch-1.0-21.fc6, ots-libs.i386-0.4.2-11.fc7) - 9.2 MB
- Gnumeric (gnumeric.i386-1.6.3-6.fc7 + libgda.i386-1.9.100-12.fc7, libgnomedb.i386-1.9.100-15.fc7, libgsf-gnome.i386-1.14.3-4.fc7) - 13 MB
- Putty (putty-0.60-1.fc7.i) - 1.3 MB
- Midnight Commander (mc-4.6.1a-45.20070) - 2.1 MB
- Krusader (krusader-1.80.0-0 + kdebindings-3.5.6) - 8.7 MB
- Wine (wine-0.9.36-2.fc7 + wine-capi.i386-0.9.36-2.fc7, wine-cms.i386-0.9.36-2.fc7, wine-core.i386-0.9.36-2.fc7, wine-esd.i386-0.9.36-2.fc7, wine-jack.i386-0.9.36-2.fc7, wine-ldap.i386-0.9.36-2.fc7, wine-nas.i386-0.9.36-2.fc7, wine-tools.i386-0.9.36-2.fc7, wine-twain.i386-0.9.36-2.fc7) - 9.9 MB



Windows/Linux Symbiosis by Softpedia

I'm trying to follow the tutorial, but I'm getting stuck because of errors. However, I'll make a brief description here of problems I encountered and how I resolved them.

# yum install rdesktop

# yum install vmware-server
>> didn't work, perhaps I don't have yum repositories - I just leave it alone and downloaded RPM fom VMware *:
#


To do:
- flash player
- install necessary software
- remove duplicated programs (i.e. several PDF viewers)
- samba config (local share + auth on domain)

Observations:
- Evolution (email client) seems pretty cool: nice filtering junk mail system.


* other useful links:...


Despre acest blog
Disclaimer and privacy statement
Actualizat: 2007-06-22.

___


Tuesday, February 20, 2007

Fun with linux - Ubuntu Server 6.10

Ubuntu-Server 6.10 i386
  • DNS
  • Automatic LAMP (Linux, Apache, MySQL and PHP)

Introduction
Sometimes I like to play with Linux to see what a particular distribution has to offer, sometimes I just do it as part of my job - either the the case I always do it with pleasure. I'd like to have more time to publish many adventures in my experience - but that's another story.


Preparation

Disk partitioning - 80 GB (multi-OS proposal)

hda1 = /mnt/hda1-msdos (bootable, FAT16 - MS-DOS, 2 GB)
hda2 = /mnt/hda2-windows (bootable, NTFS - Windows XP, 12 GB)
hda3 = / (bootable, ext3 - Ubuntu, 12 GB)
hda4 = extended
hda5 = /mnt/hda5-ntfs (extended, 12 GB)
hda6 = /mnt/hda6-ntfs (extended, 12 GB)
hda7 = /mnt/hda7-ntfs (extended, 12 GB)
hda8 = /mnt/hda8-fat32 (extended, 12 GB)
hda9 = swap (extended, linux swap, 12 GB)


Network settings
  • eth0 = SIS900 PCI (built-in) => DHCP (no link)
  • eth1 = Realtek 8139 => DHCP (got IP)

Server settings (if asking at installation)
  • [X] DNS
  • [X] LAMP



Post-install

Hosts
# vi /etc/hosts
127.0.0.1               localhost.localdomain localhost
192.168.0.100           server1.example.com server1

UpdateDB
# sudo updatedb

Setup more repositories
# sudo vi /etc/apt/sources.list
=>> uncomment 'universe' repositories
# sudo apt-get updateSSH
# sudo aptitude install ssh
# vi /et
DMA settings
>> DMA is activated by default. To check, type:
# sudo hdparm /dev/hdc
Setup preferred desktop manager
=>> /etc/X11/default-display-manager
* for KDM, the file should read /usr/bin/kdm
* for GDM, the file should read /usr/sbin/gdm
New programs

mc 4.6.1 (Midnight Commander) - 1 dependency
# sudo aptitude install mc zip unzip arj
=> remove "exit" confirmation when close it

iptraf 3.0.0 - no dependencies
# sudo aptitude install iptraf

Links2 - graphics and text mode WWW browser, similar to Lynx
# sudo aptitude install links2

centericq - console multi-messenger
# sudo aptitude install centericq

X Window System - basic graphic mode
# sudo aptitude install x-window-system

GDM - graphical login prompt
# sudo aptitude install gdm

XFCE 4.3.99.1
# sudo aptitude install xfce4
Notes:
1. Make sure you have set up 'universe' repository
2. Make sure you have x-window-system installed

* Alternative 1:
# sudo aptitude install x-window-system gdm xubuntu-desktop
See notes above.

* Alternative 2:
# sudo aptitude update && sudo aptitude install xubuntu-desktop

Gnome
# sudo aptitude install gnome-core
#
sudo aptitude install ubuntu-artwork
Note: make sure to have set up 'universe' repository (!?!)
- error at login: "GConf schema installer error. battery_low_percentage cannot be zero". To investigate.
- double-click on Mixer icon error: "Failed to start Volume Control: Failed to execute child process"gnome-volume-control" (No such file or directory)"
- some other errors when installing packages for X (gnome, xfce):
"Errors were encountered while processing:
acpid
acpi-support
powermanagement-interface
gnome-power-manager
gnome-session
gnome-core
E: Sub-process /usr/bin/dpkg returned an error code (1)"

* Alternative 1:
# sudo aptitude install x-window-system gdm edubuntu-desktop
See note.

* Alternative 2:
# sudo aptitude install ubuntu-desktop

KDE
# sudo aptitude install x-window-system gdm kbuntu-desktopNotes (!?!):
1. Make sure you have set up 'universe' repository
2. Make sure you have x-window-system installed

* Alternative 1:
sudo aptitude install kubuntu-desktop

Terminal 0.2.5.4beta2 - X Terminal Emulator
=> installed with Xfce

Terminal Server Client (Rdesktop - RDP, VNC)
# sudo aptitude install tsclient

Firefox 2.0.0.1 - 3 dependencies (12/37 MB)
# sudo aptitude install firefox
=> automatically in menu, under Network category [Firefox browser]

Thunderbird 1.5.0.9 - 2 dependencies (10/32 MB)
# sudo aptitude install mozilla-thunderbird
=> automatically in menu, under Network category [Thunderbird Mail]

aMSN - MSN messenger
# sudo apt-get install amsn
Note: Make sure you have set up 'universe' repository
Gaim - multi-messenger
# sudo aptitude install gaim
Note: Make sure you have set up 'universe' repository
GNOME Commander 1.2.0 - drives buttons
# sudo aptitude install gnome-commander
=> automatically in menu, under Accessories category [GNOME Commander]

Atol 0.7.0 - dual panel file manager, built-in archive viewer
# wget ftp://ftp.akl.lt/Linux/Baltix/Baltix-Ubuntu-packages/dapper/atol-file-commander/
# sudo dpkg -i atol_0.7.0-0baltix1_i386.deb
=> automatically in menu, under Office category [Atol]

File Roller 2.16.1 - archive manager (for Gnome)
# sudo aptitude install file-roller

Xarchiver 0.4.0 - lightweight archive manager (for Xfce)
# sudo aptitude install xarchiver

OpenOffice.org
# sudo aptitude install openoffice.org
=> automatically in menu, under Office category [Database, Presentation, Spreadsheet, Word Processor]

AbiWord 2.4.5 (M$ Word support)
# sudo aptitude install abiword

Gnumeric Spreadsheet (Excell support)# sudo aptitude install gnumeric

XMMS 1.2.10 (10 dependencies) [2/12 MB]
# sudo aptitude install xmms
=> automatically in menu, under Multimedia category [XMMS Music Player]

Xfburn 0.2.0 - CD/DVD burning tool
sudo aptitude install xfburn cdrdao cdrecord

Helix-Player 1.0.6 (real-player support)
# yum install HelixPlayer
=>> got error: "The following components are required: protocol_rtsp_rdt"
=>> didn't know how to fix it


Install and configure:




Tools of network administrator in Linux router
Tools of network administrator in Linux router

Links:
Official website
Ubuntu Installation Guide
Ubuntu Server Guide
Working with your desktop
My Ubuntu Installation




Despre acest blog
Disclaimer and privacy statement
Actualizat: 2007-03-07.

___


Monday, February 19, 2007

Fun with linux - Cent OS 4.4





Preparation

1) Disk partitioning - 80 GB
hda1 = /mnt/hda1-msdos (bootable, FAT16 - MS-DOS, 2 GB)
hda2 = /mnt/hda2-windows (bootable, NTFS - Windows XP, 12 GB)
hda3 = / (bootable, ext3 - CentOS 4.4, 12 GB)
hda4 = extended
hda5 = /mnt/hda5-ntfs (extended, 12 GB)
hda6 = /mnt/hda6-ntfs (extended, 12 GB)
hda7 = /mnt/hda7-ntfs (extended, 12 GB)
hda8 = /mnt/hda8-fat32 (extended, 12 GB)
hda9 = swap (extended, linux swap, 12 GB)


2) Network settings
  • eth0 = Realtek 8139 => DHCP (got IP)
  • eth1 = SIS900 PCI (built-in) => DHCP (no link)

3) Firewall
=> disable firewall and SElinux


4) Programs
=> install minimum set (694 MB)
=> make backup of /root/install.log and /root/anakonda.ks-cfg, for later check, if needed



Post-install

1) Network
=> disable eth1 (not used)

2) /etc/hosts
127.0.0.1               localhost.localdomain localhost
192.168.0.100           server1.example.com server1

3) updatedb

4) setup more repositories
# wget http://dag.wieers.com/rpm/packages/rpmforge-release/rpmforge-release-0.3.5-1.el4.rf.i386.rpm
# rpm -Uhv rpmforge-release-0.3.5-1.el4.rf.i386.rpm
# yum clean


New programs

mc 1.4.6.1 (Midnight Commander) - no dependencies
# yum install mc
=> remove "exit" confirmation when close it

iptraf 2.7.0 - no dependencies
# yum install iptraf

ELinks 0.9.2 - Text WWW browser (links clone) - no dependencies
# yum install links

XFCE 4.2.3.2
# yum installgroup "X Windows System"
# yum installgroup XFCE
# yum install x-font (?!?)

Firefox 1.5.9.0
# yum install firefox
=> automatically recognized its icon on XFCE Panel
=> automatically in menu, under Network cathegory

Thunderbird 1.5.0.9
# yum install thunderbird
=> automatically in menu, under Network cathegory

Evolution 2.0.2 (19 dependecies, incl. gnome, perl, seamonkey)
# yum install evolution
=> automatically recognized its icon on XFCE Panel
=> automatically in menu, under Network cathegory (Email item)

XMMS 1.2.10 (3 dependencies, incl. gdk, gtk, mikmod)
# yum install xmms
# yum install xmms-mp3
=> automatically recognized its icon on XFCE Panel
=> automatically in menu, under Multimedia cathegory (Audio Player item)


Helix-Player 1.0.6(real-player support)
# yum install HelixPlayer
=>> error: "The followinf components are required: protocol_rtsp_rdt"


To install and configure:

IMAP 2.2.12
# yum install cyrus-imapd cyrus-imapd-utils
=> check this link to configure a mail server (POSTFIX + Cyrus-IMAP)


Other links
http://www.howtoforge.com/perfect_setup_centos_4.4_p1





Despre acest blog
Disclaimer and privacy statement
Actualizat: 2007-02-19.

___