Neban's notebook

php ini not working on cPanel use suPHP

2011-12-27T00:00:00+07:00

is suPHP apache trouble maker which php.ini on per user not working as well.

and check now

root@venus [/home/rottwe/www]# php -c php.ini t.php | grep globalrun command
auto_globals_jit => On => On
register_globals => On => On

reference

Load Balancing MySQL Replication Master to Master with HAProxy

2011-08-17T16:44:52+07:00

Quick How to Load Balancing MySQL master to master with HAProxy

On previous post, we’ve installed MySQL Server Replication Master to Master. Now, we can do that for Load Balancing with HAProxy. We need one server again to do this.

Do this section on HAProxy server (on example).

Installing HAProxy

wget -c http://haproxy.1wt.eu/download/1.4/src/haproxy-1.4.15.tar.gz
tar -xvf haproxy-1.4.15.tar.gz 
cd haproxy-1.4.15
make install
vim /usr/local/etc/haproxy.cfg

Configuring HAProxy

Do this section on srv14 (or master 1).

Create mysql service on xinetd

Create MySQL Script to check mysql server is healthy running on localhost

Make sure mysqlchk is allowed as xinet services

root@srv14 src# cat /etc/services | grep 9200
#wap-wsp		9200/tcp			# WAP connectionless session service
wap-wsp		9200/udp			# WAP connectionless session service
mysqlchk	9200/tcp			# mysqlchk

Create user mysqlchkuser and give grant.

Do this section on srv15 (or master 2).

Create mysql service on xinetd

Create MySQL Script to check mysql server is healthy running on localhost

Make sure mysqlchk is allowed as xinet services

root@srv15 ~# cat /etc/services | grep 9200
#wap-wsp		9200/tcp			# WAP connectionless session service
wap-wsp		9200/udp			# WAP connectionless session service
mysqlchk	9200/tcp

Create user mysqlchkuser and give grant.

Give permission 777 for `/tmp/mysqlchk.*`

# chmod 777 /tmp/mysqlchk.*

RUN HAProxy now

# /usr/local/sbin/haproxy -f /usr/local/etc/haproxy.cfg -p /var/run/haproxy.pid

at Last

We can use port 3306 as master of Load Balancer. Look at http://ip-load-balancer:31337 to monitor service both of them servers.

…

Troubleshoot

check mysql on localhost

root@srv14 src# /opt/mysqlchk 
HTTP/1.1 200 OK

Content-Type: Content-Type: text/plain



MySQL is running.



root@srv14 src# 
root@srv15 ~# /opt/mysqlchk 
HTTP/1.1 200 OK

Content-Type: Content-Type: text/plain



MySQL is running.



root@srv15 ~#

Check mysql service from HAProxy Server

root@master mysql# telnet 111.68.112.43 9200
Trying 111.68.112.43...
Connected to 111.68.112.43.
Escape character is '^]'.
HTTP/1.1 200 OK

Content-Type: Content-Type: text/plain



MySQL is running.



Connection closed by foreign host.
root@master mysql# telnet 111.68.112.44 9200
Trying 111.68.112.44...
Connected to 111.68.112.44.
Escape character is '^]'.
HTTP/1.1 200 OK

Content-Type: Content-Type: text/plain



MySQL is running.



Connection closed by foreign host.
root@master mysql#

Addtional Section

MySQL Configuration File

Master 1

Master 2

Reference:

Replicate Master to Master MySQL

2011-08-16T15:22:50+07:00

Preparation

Master 1, srv14: 111.68.112.43
Master 2, srv15: 111.68.112.44

Install mysql server on both server. look at previous post for this section.

Configuration

Master 1

Master 2

Setup Replication

Setup Master 1


root@srv14 init.d# mysql -u root -p
run command

Enter password:
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 36
Server version: 5.5.12-log Source distribution

Copyright (c) 2000, 2010, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.



mysql> create user 'mysqlchkuser'@'localhost' identified by 'mysql321';
run command

Query OK, 0 rows affected (0.06 sec)


mysql> create user 'mmm_monitor'@'%' identified by 'monitor_password';
run command

Query OK, 0 rows affected (0.06 sec)


mysql> create user 'agent_monitor'@'%' identified by 'agent_password';
run command

Query OK, 0 rows affected (0.00 sec)


mysql> create user 'replication'@'%' identified by 'replication_password';
run command

Query OK, 0 rows affected (0.00 sec)


mysql> GRANT REPLICATION CLIENT ON *.* TO 'mmm_monitor'@'%' IDENTIFIED BY 'monitor_password';
run command

Query OK, 0 rows affected (0.00 sec)


mysql> GRANT SUPER, REPLICATION CLIENT, PROCESS ON *.* TO 'mmm_agent'@'%' IDENTIFIED BY 'agent_password';
run command

Query OK, 0 rows affected (0.00 sec)


mysql> GRANT REPLICATION SLAVE ON *.* TO 'replication'@'%' IDENTIFIED BY 'replication_password';
run command

Query OK, 0 rows affected (0.00 sec)



mysql> flush privileges;
run command

Query OK, 0 rows affected (0.01 sec)


mysql> flush tables with read lock;
run command

Query OK, 0 rows affected (0.00 sec)



mysql> show master status;
run command
+------------------+----------+--------------+------------------+
| File             | Position | Binlog_Do_DB | Binlog_Ignore_DB |
+------------------+----------+--------------+------------------+
| mysql-bin.000001 |     1044 |              |                  |
+------------------+----------+--------------+------------------+
1 row in set (0.00 sec)

Dont Close this session

dump database to master 2.


# mysqldump -u root -p --all-databases > /tmp/database-backup.sql
run command

# scp /tmp/database-backup.sql 111.68.112.44:~/
run command

Now, we can remove lock tables


mysql> unlock tables;
run command

Query OK, 0 rows affected (0.00 sec)

Go to Master 2

Setup Master 2


root@srv15 mysql# mysql -u root -p run command

Enter password: 



root@srv15 mysql# mysql -u root -p
run command

Enter password:

Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 90
Server version: 5.5.12-log Source distribution

Copyright (c) 2000, 2010, Oracle and/or its affiliates. All rights reserved.

Oracle is a registered trademark of Oracle Corporation and/or its
affiliates. Other names may be trademarks of their respective
owners.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.



mysql> flush privileges;
run command

Query OK, 0 rows affected (0.46 sec)


mysql> CHANGE MASTER TO master_host='111.68.112.43', master_port=3306, master_user='replication', 
    ->               master_password='replication_password', master_log_file='mysql-bin.000001', master_log_pos=1044;
run command

Query OK, 0 rows affected (4.62 sec)


mysql> start slave;
run command

Query OK, 0 rows affected (0.00 sec)


mysql> show slave status \G
run command
*************************** 1. row ***************************
               Slave_IO_State: Waiting for master to send event
                  Master_Host: 111.68.112.43
                  Master_User: replication
                  Master_Port: 3306
                Connect_Retry: 60
              Master_Log_File: mysql-bin.000001
          Read_Master_Log_Pos: 1044
               Relay_Log_File: mysql-relay-bin.000002
                Relay_Log_Pos: 253
        Relay_Master_Log_File: mysql-bin.000001
             Slave_IO_Running: Yes
            Slave_SQL_Running: Yes
              Replicate_Do_DB: 
          Replicate_Ignore_DB: 
           Replicate_Do_Table: 
       Replicate_Ignore_Table: 
      Replicate_Wild_Do_Table: 
  Replicate_Wild_Ignore_Table: 
                   Last_Errno: 0
                   Last_Error: 
                 Skip_Counter: 0
          Exec_Master_Log_Pos: 1044
              Relay_Log_Space: 409
              Until_Condition: None
               Until_Log_File: 
                Until_Log_Pos: 0
           Master_SSL_Allowed: No
           Master_SSL_CA_File: 
           Master_SSL_CA_Path: 
              Master_SSL_Cert: 
            Master_SSL_Cipher: 
               Master_SSL_Key: 
        Seconds_Behind_Master: 0
Master_SSL_Verify_Server_Cert: No
                Last_IO_Errno: 0
                Last_IO_Error: 
               Last_SQL_Errno: 0
               Last_SQL_Error: 
  Replicate_Ignore_Server_Ids: 
             Master_Server_Id: 1
1 row in set (0.00 sec)


mysql> show master status
    -> ;
run command
+------------------+----------+--------------+------------------+
| File             | Position | Binlog_Do_DB | Binlog_Ignore_DB |
+------------------+----------+--------------+------------------+
| mysql-bin.000002 | 27957968 |              |                  |
+------------------+----------+--------------+------------------+
1 row in set (0.00 sec)


mysql> show master status;
run command
+------------------+----------+--------------+------------------+
| File             | Position | Binlog_Do_DB | Binlog_Ignore_DB |
+------------------+----------+--------------+------------------+
| mysql-bin.000002 | 27957968 |              |                  |
+------------------+----------+--------------+------------------+
1 row in set (0.00 sec)

Switch Back to Master 1


mysql> CHANGE MASTER TO master_host='111.68.112.44', master_port=3306, master_user='replication', 
    ->               master_password='replication_password', master_log_file='mysql-bin.000002', master_log_pos=27957968;
run command

Query OK, 0 rows affected (0.34 sec)


mysql> start slave;
run command

Query OK, 0 rows affected (0.00 sec)


mysql> show slave status\G
run command
*************************** 1. row ***************************
               Slave_IO_State: Waiting for master to send event
                  Master_Host: 111.68.112.44
                  Master_User: replication
                  Master_Port: 3306
                Connect_Retry: 60
              Master_Log_File: mysql-bin.000002
          Read_Master_Log_Pos: 27957968
               Relay_Log_File: mysql-relay-bin.000002
                Relay_Log_Pos: 253
        Relay_Master_Log_File: mysql-bin.000002
             Slave_IO_Running: Yes
            Slave_SQL_Running: Yes
              Replicate_Do_DB: 
          Replicate_Ignore_DB: 
           Replicate_Do_Table: 
       Replicate_Ignore_Table: 
      Replicate_Wild_Do_Table: 
  Replicate_Wild_Ignore_Table: 
                   Last_Errno: 0
                   Last_Error: 
                 Skip_Counter: 0
          Exec_Master_Log_Pos: 27957968
              Relay_Log_Space: 409
              Until_Condition: None
               Until_Log_File: 
                Until_Log_Pos: 0
           Master_SSL_Allowed: No
           Master_SSL_CA_File: 
           Master_SSL_CA_Path: 
              Master_SSL_Cert: 
            Master_SSL_Cipher: 
               Master_SSL_Key: 
        Seconds_Behind_Master: 0
Master_SSL_Verify_Server_Cert: No
                Last_IO_Errno: 0
                Last_IO_Error: 
               Last_SQL_Errno: 0
               Last_SQL_Error: 
  Replicate_Ignore_Server_Ids: 
             Master_Server_Id: 2
1 row in set (0.00 sec)


mysql> show databases;
run command
+--------------------+
| Database           |
+--------------------+
| information_schema |
| c4CkV893_B4r7Hue   |
| mysql              |
| performance_schema |
+--------------------+
4 rows in set (0.00 sec)


mysql> create database mmreplicate;
run command

Query OK, 1 row affected (0.03 sec)

Check on Master 2


mysql> show databases;
run command
+--------------------+
| Database           |
+--------------------+
| information_schema |
| c4CkV893_B4r7Hue   |
| mmreplicate        |
| mysql              |
| performance_schema |
+--------------------+
5 rows in set (0.00 sec)


mysql> \q
run command

Bye


root@srv15 mysql#

http://mysql-mmm.org/mmm2:guide

Compiling MySQL 5.5.12 with CMAKE on CentOS

2011-08-14T12:57:57+07:00

Install dependencies package

yum install -y cmake.x86_64 gcc44-gfortran-4.4.4-13.el5 gcc-objc++-4.1.2-50.el5 gcc-4.1.2-50.el5 gcc44-4.4.4-13.el5 libgcc-4.1.2-50.el5 gcc44-c++-4.4.4-13.el5 gcc-c++-4.1.2-50.el5 gcc-gfortran.x86_64 ncurses-devel.x86_64 bison-devel.x86_64

Getting source and cmake

wget -c http://ftp.jaist.ac.jp/pub/mysql/Downloads/MySQL-5.5/mysql-5.5.12.tar.gz
tar -xvf mysql-5.5.12.tar.gz
cd mysql-5.5.12

cmake . -DCMAKE_INSTALL_PREFIX:PATH=/usr/local/mysql -DENABLE_DEBUG_SYNC:BOOL=OFF -DMYSQL_DATADIR:PATH=/home/mysql -DMYSQL_DATADIR=/usr/local/mysql/data -DSYSCONFDIR=/usr/local/mysql -DMYSQL_UNIX_ADDR:FILE_NAME=/usr/local/mysql/tmp/mysql.sock -DWITH_EMBEDDED_SERVER:BOOL=ON -DWITH_EXTRA_CHARSETS:STRING=all

Make and make install

make;
make install
groupadd mysql
useradd -r -g mysql mysql
cd /usr/local/mysql/
chgrp -R mysql .
chown -R mysql data
touch /var/log/mysqld.log;
touch /var/log/mysql/mysql-slow.log
mkdir /home/mysql;
mkdir /var/log/mysql;
chown mysql.mysql -Rf /var/log/mysqld.log /home/mysql /var/log/mysql

My.cnf Configuration

vi /etc/my.cnf

Run daemon

scripts/mysql_install_db --user=mysql
./bin/mysqld_safe &
./bin/mysql_secure_installation



110511 10:37:27 mysqld_safe Starting mysqld daemon with databases from /home/mysql/
110511 10:37:27 InnoDB: The InnoDB memory heap is disabled
110511 10:37:27 InnoDB: Mutexes and rw_locks use GCC atomic builtins
110511 10:37:27 InnoDB: Compressed tables use zlib 1.2.3
110511 10:37:27 InnoDB: Initializing buffer pool, size = 128.0M
110511 10:37:27 InnoDB: Completed initialization of buffer pool
110511 10:37:27 InnoDB: highest supported file format is Barracuda.
InnoDB: The log sequence number in ibdata files does not match
InnoDB: the log sequence number in the ib_logfiles!
110511 10:37:27  InnoDB: Database was not shut down normally!
InnoDB: Starting crash recovery.
InnoDB: Reading tablespace information from the .ibd files...
InnoDB: Restoring possible half-written data pages from the doublewrite
InnoDB: buffer...
110511 10:37:27  InnoDB: Waiting for the background threads to start
110511 10:37:28 InnoDB: 1.1.6 started; log sequence number 1595685
110511 10:37:28 [Note] Event Scheduler: Loaded 0 events
110511 10:37:28 [Note] /usr/local/mysql/bin/mysqld: ready for connections.
Version: '5.5.12-log'  socket: '/usr/local/mysql/tmp/mysql.sock'  port: 3306  Source distribution

Reference:

Install Nginx PHP and FCGI Perl on ubuntu

2011-08-07T06:52:21+07:00

Quick How to

Install Dependencies

apt-get install nginx libfcgi-perl libfcgi-procmanager-perl

FCGI perl on Nginx

CGIWRAP-FCGI Perl Script

Grab this script save as /usr/local/bin/cgiwrap-fcgi.pl .

Nginx configuration for FCGI PERL

Add this script to /etc/nginx/sites-available/default. for php engine, replace .pl extention.

Run cgiwrap-fcgi.pl

root@imam-MS-7636:/usr/local/src/FCGI-0.71# /usr/local/bin/cgiwrap-fcgi.pl 
FastCGI: manager (pid 30814): initialized
FastCGI: manager (pid 30814): server (pid 30815) started
FastCGI: server (pid 30815): initialized
FastCGI: manager (pid 30814): server (pid 30816) started
FastCGI: manager (pid 30814): server (pid 30817) started
FastCGI: server (pid 30816): initialized
FastCGI: server (pid 30817): initialized
FastCGI: manager (pid 30814): server (pid 30818) started
FastCGI: manager (pid 30814): server (pid 30819) started
FastCGI: server (pid 30818): initialized
FastCGI: server (pid 30819): initialized

PHP on Nginx

root@imam-MS-7636:/usr/local/src# apt-get install php5-cgi
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Suggested packages:
  php-pear
The following NEW packages will be installed:
  php5-cgi
0 upgraded, 1 newly installed, 0 to remove and 44 not upgraded.
Need to get 5,835kB of archives.
After this operation, 15.4MB of additional disk space will be used.
Get:1 http://id.archive.ubuntu.com/ubuntu/ maverick-updates/main php5-cgi i386 5.3.3-1ubuntu9.3 [5,835kB]
Fetched 5,835kB in 12s (484kB/s)                                                                                                                         
Selecting previously deselected package php5-cgi.
(Reading database ... 288925 files and directories currently installed.)
Unpacking php5-cgi (from .../php5-cgi_5.3.3-1ubuntu9.3_i386.deb) ...
Processing triggers for man-db ...
Setting up php5-cgi (5.3.3-1ubuntu9.3) ...

Creating config file /etc/php5/cgi/php.ini with new version
update-alternatives: using /usr/bin/php5-cgi to provide /usr/bin/php-cgi (php-cgi) in auto mode.
update-alternatives: using /usr/lib/cgi-bin/php5 to provide /usr/lib/cgi-bin/php (php-cgi-bin) in auto mode.
root@imam-MS-7636:/usr/local/src# php
php       php5      php5-cgi  php-cgi   
root@imam-MS-7636:/usr/local/src#

Troubleshooting error

root@imam-MS-7636:/usr/local/src/FCGI-0.71# /usr/local/bin/cgiwrap-fcgi.pl 
Can't locate FCGI/ProcManager.pm in @INC (@INC contains: /etc/perl /usr/local/lib/perl/5.10.1 /usr/local/share/perl/5.10.1 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.10 /usr/share/perl/5.10 /usr/local/lib/site_perl .) at /usr/local/bin/cgiwrap-fcgi.pl line 5.
BEGIN failed--compilation aborted at /usr/local/bin/cgiwrap-fcgi.pl line 5.
root@imam-MS-7636:/usr/local/src/FCGI-0.71#



cpan[1]> install FCGI::ProcManager 
-------CUT-------
|
|
|

PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t
t/exporter.t ..... ok   
t/procmanager.t .. ok   
All tests successful.
Files=2, Tests=9,  0 wallclock secs ( 0.02 usr  0.01 sys +  0.03 cusr  0.00 csys =  0.06 CPU)
Result: PASS
  GBJK/FCGI-ProcManager-0.19.tar.gz
  make test -- OK
Warning (usually harmless): 'YAML' not installed, will not store persistent state
Running make install
Prepending /root/.cpan/build/FCGI-ProcManager-0.19-0aAT1g/blib/arch /root/.cpan/build/FCGI-ProcManager-0.19-0aAT1g/blib/lib to PERL5LIB for 'install'
Manifying blib/man3/FCGI::ProcManager.3pm
Appending installation info to /usr/local/lib/perl/5.10.1/perllocal.pod
Installing /usr/local/share/perl/5.10.1/FCGI/ProcManager.pm
Installing /usr/local/man/man3/FCGI::ProcManager.3pm
  GBJK/FCGI-ProcManager-0.19.tar.gz
  make install -j4 -- OK
Warning (usually harmless): 'YAML' not installed, will not store persistent state

cpan[1]> install YAML
CPAN: Storable loaded ok (v2.20)
Going to read '/root/.cpan/Metadata'
  Database was generated on Mon, 11 Apr 2011 19:34:01 GMT
Running install for module 'YAML'
CPAN: Data::Dumper loaded ok (v2.124)
'YAML' not installed, falling back to Data::Dumper and Storable to read prefs '/root/.cpan/prefs'
Running make for A/AD/ADAMK/YAML-0.72.tar.gz
CPAN: Digest::SHA loaded ok (v5.47)
CPAN: Compress::Zlib loaded ok (v2.02)
Checksum for /root/.cpan/sources/authors/id/A/AD/ADAMK/YAML-0.72.tar.gz ok
Scanning cache /root/.cpan/build for sizes
............................................................................DONE
CPAN: Archive::Tar loaded ok (v1.52)
YAML-0.72/
YAML-0.72/Makefile.PL
YAML-0.72/META.yml
YAML-0.72/LICENSE
YAML-0.72/README
YAML-0.72/xt/
YAML-0.72/xt/meta.t
YAML-0.72/xt/pmv.t
YAML-0.72/xt/pod.t
YAML-0.72/inc/
YAML-0.72/inc/Test/
YAML-0.72/inc/Test/Base/
YAML-0.72/inc/Test/Base/Filter.pm
YAML-0.72/inc/Test/More.pm
YAML-0.72/inc/Test/Builder/
YAML-0.72/inc/Test/Builder/Module.pm
YAML-0.72/inc/Test/Builder.pm
YAML-0.72/inc/Test/Base.pm
YAML-0.72/inc/Module/
YAML-0.72/inc/Module/Install.pm
YAML-0.72/inc/Module/Install/
YAML-0.72/inc/Module/Install/Can.pm
YAML-0.72/inc/Module/Install/Fetch.pm
YAML-0.72/inc/Module/Install/Win32.pm
YAML-0.72/inc/Module/Install/WriteAll.pm
YAML-0.72/inc/Module/Install/Metadata.pm
YAML-0.72/inc/Module/Install/Base.pm
YAML-0.72/inc/Module/Install/TestBase.pm
YAML-0.72/inc/Module/Install/Makefile.pm
YAML-0.72/inc/Module/Install/Include.pm
YAML-0.72/inc/Spiffy.pm
YAML-0.72/MANIFEST
YAML-0.72/Changes
YAML-0.72/t/
YAML-0.72/t/export.t
YAML-0.72/t/dump-code.t
YAML-0.72/t/load-spec.t
YAML-0.72/t/node-info.t
YAML-0.72/t/dump-perl-types.t
YAML-0.72/t/marshall.t
YAML-0.72/t/dump-tests.t
YAML-0.72/t/dump-blessed.t
YAML-0.72/t/TestYAML.pm
YAML-0.72/t/freeze-thaw.t
YAML-0.72/t/bugs-emailed.t
YAML-0.72/t/regexp.t
YAML-0.72/t/load-works.t
YAML-0.72/t/basic-tests.t
YAML-0.72/t/references.t
YAML-0.72/t/inbox.t
YAML-0.72/t/load-tests.t
YAML-0.72/t/dump-file-utf8.t
YAML-0.72/t/changes.t
YAML-0.72/t/dump-file.t
YAML-0.72/t/global-api.t
YAML-0.72/t/test.t
YAML-0.72/t/svk-config.yaml
YAML-0.72/t/bugs-rt.t
YAML-0.72/t/errors.t
YAML-0.72/t/dump-basics.t
YAML-0.72/t/2-scalars.t
YAML-0.72/t/Base.pm
YAML-0.72/t/long-quoted-value.yaml
YAML-0.72/t/dump-works.t
YAML-0.72/t/svk.t
YAML-0.72/t/dump-stringify.t
YAML-0.72/t/dump-nested.t
YAML-0.72/t/load-fails.t
YAML-0.72/t/load-passes.t
YAML-0.72/t/pugs-objects.t
YAML-0.72/t/dump-opts.t
YAML-0.72/t/load-slides.t
YAML-0.72/lib/
YAML-0.72/lib/YAML.pm
YAML-0.72/lib/YAML/
YAML-0.72/lib/YAML/Dumper.pm
YAML-0.72/lib/YAML/Any.pm
YAML-0.72/lib/YAML/Base.pm
YAML-0.72/lib/YAML/Dumper/
YAML-0.72/lib/YAML/Dumper/Base.pm
YAML-0.72/lib/YAML/Node.pm
YAML-0.72/lib/YAML/Tag.pm
YAML-0.72/lib/YAML/Loader/
YAML-0.72/lib/YAML/Loader/Base.pm
YAML-0.72/lib/YAML/Error.pm
YAML-0.72/lib/YAML/Marshall.pm
YAML-0.72/lib/YAML/Types.pm
YAML-0.72/lib/YAML/Loader.pm
YAML-0.72/lib/Test/
YAML-0.72/lib/Test/YAML.pm
CPAN: File::Temp loaded ok (v0.22)

  CPAN.pm: Going to build A/AD/ADAMK/YAML-0.72.tar.gz

Checking if your kit is complete...
Looks good
Writing Makefile for YAML
Could not read '/root/.cpan/build/YAML-0.72-g8iqO4/META.yml'. Falling back to other methods to determine prerequisites
cp lib/Test/YAML.pm blib/lib/Test/YAML.pm
cp lib/YAML/Types.pm blib/lib/YAML/Types.pm
cp lib/YAML/Node.pm blib/lib/YAML/Node.pm
cp lib/YAML/Loader.pm blib/lib/YAML/Loader.pm
cp lib/YAML/Any.pm blib/lib/YAML/Any.pm
cp lib/YAML/Error.pm blib/lib/YAML/Error.pm
cp lib/YAML/Loader/Base.pm blib/lib/YAML/Loader/Base.pm
cp lib/YAML.pm blib/lib/YAML.pm
cp lib/YAML/Dumper/Base.pm blib/lib/YAML/Dumper/Base.pm
cp lib/YAML/Marshall.pm blib/lib/YAML/Marshall.pm
cp lib/YAML/Base.pm blib/lib/YAML/Base.pm
cp lib/YAML/Tag.pm blib/lib/YAML/Tag.pm
cp lib/YAML/Dumper.pm blib/lib/YAML/Dumper.pm
Manifying blib/man3/Test::YAML.3pm
Manifying blib/man3/YAML::Types.3pm
Manifying blib/man3/YAML::Loader.3pm
Manifying blib/man3/YAML::Node.3pm
Manifying blib/man3/YAML::Any.3pm
Manifying blib/man3/YAML::Error.3pm
Manifying blib/man3/YAML::Loader::Base.3pm
Manifying blib/man3/YAML.3pm
Manifying blib/man3/YAML::Dumper::Base.3pm
Manifying blib/man3/YAML::Tag.3pm
Manifying blib/man3/YAML::Base.3pm
Manifying blib/man3/YAML::Marshall.3pm
Manifying blib/man3/YAML::Dumper.3pm
  ADAMK/YAML-0.72.tar.gz
  make -j4 -j4 -- OK
Warning (usually harmless): 'YAML' not installed, will not store persistent state
Running make test
PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'inc', 'blib/lib', 'blib/arch')" t/*.t
t/2-scalars.t ........ ok   
t/basic-tests.t ...... ok   
t/bugs-emailed.t ..... ok     
t/bugs-rt.t .......... ok     
t/changes.t .......... ok   
t/dump-basics.t ...... ok   
t/dump-blessed.t ..... ok   
t/dump-code.t ........ ok   
t/dump-file-utf8.t ... ok   
t/dump-file.t ........ ok   
t/dump-nested.t ...... ok     
t/dump-opts.t ........ ok     
t/dump-perl-types.t .. ok     
t/dump-stringify.t ... ok   
t/dump-tests.t ....... ok     
t/dump-works.t ....... ok   
t/errors.t ........... ok     
t/export.t ........... ok   
t/freeze-thaw.t ...... ok   
t/global-api.t ....... ok   
t/inbox.t ............ ok   
t/load-fails.t ....... ok   
t/load-passes.t ...... ok   
t/load-slides.t ...... ok     
t/load-spec.t ........ ok     
t/load-tests.t ....... ok     
t/load-works.t ....... ok   
t/marshall.t ......... ok     
t/node-info.t ........ ok     
t/pugs-objects.t ..... ok   
t/references.t ....... ok     
t/regexp.t ........... ok     
t/svk.t .............. ok   
t/test.t ............. ok   
All tests successful.
Files=34, Tests=452,  4 wallclock secs ( 0.14 usr  0.04 sys +  3.00 cusr  0.23 csys =  3.41 CPU)
Result: PASS
  ADAMK/YAML-0.72.tar.gz
  make test -- OK
Warning (usually harmless): 'YAML' not installed, will not store persistent state
Running make install
Prepending /root/.cpan/build/YAML-0.72-g8iqO4/blib/arch /root/.cpan/build/YAML-0.72-g8iqO4/blib/lib to PERL5LIB for 'install'
Manifying blib/man3/Test::YAML.3pm
Manifying blib/man3/YAML::Types.3pm
Manifying blib/man3/YAML::Loader.3pm
Manifying blib/man3/YAML::Node.3pm
Manifying blib/man3/YAML::Any.3pm
Manifying blib/man3/YAML::Error.3pm
Manifying blib/man3/YAML::Loader::Base.3pm
Manifying blib/man3/YAML.3pm
Manifying blib/man3/YAML::Dumper::Base.3pm
Manifying blib/man3/YAML::Tag.3pm
Manifying blib/man3/YAML::Base.3pm
Manifying blib/man3/YAML::Marshall.3pm
Manifying blib/man3/YAML::Dumper.3pm
Appending installation info to /usr/local/lib/perl/5.10.1/perllocal.pod
Installing /usr/local/share/perl/5.10.1/YAML.pm
Installing /usr/local/share/perl/5.10.1/Test/YAML.pm
Installing /usr/local/share/perl/5.10.1/YAML/Any.pm
Installing /usr/local/share/perl/5.10.1/YAML/Node.pm
Installing /usr/local/share/perl/5.10.1/YAML/Marshall.pm
Installing /usr/local/share/perl/5.10.1/YAML/Error.pm
Installing /usr/local/share/perl/5.10.1/YAML/Types.pm
Installing /usr/local/share/perl/5.10.1/YAML/Loader.pm
Installing /usr/local/share/perl/5.10.1/YAML/Dumper.pm
Installing /usr/local/share/perl/5.10.1/YAML/Base.pm
Installing /usr/local/share/perl/5.10.1/YAML/Tag.pm
Installing /usr/local/share/perl/5.10.1/YAML/Dumper/Base.pm
Installing /usr/local/share/perl/5.10.1/YAML/Loader/Base.pm
Installing /usr/local/man/man3/YAML::Loader::Base.3pm
Installing /usr/local/man/man3/YAML::Dumper::Base.3pm
Installing /usr/local/man/man3/YAML.3pm
Installing /usr/local/man/man3/YAML::Any.3pm
Installing /usr/local/man/man3/YAML::Error.3pm
Installing /usr/local/man/man3/YAML::Base.3pm
Installing /usr/local/man/man3/YAML::Tag.3pm
Installing /usr/local/man/man3/YAML::Marshall.3pm
Installing /usr/local/man/man3/YAML::Node.3pm
Installing /usr/local/man/man3/YAML::Types.3pm
Installing /usr/local/man/man3/Test::YAML.3pm
Installing /usr/local/man/man3/YAML::Loader.3pm
Installing /usr/local/man/man3/YAML::Dumper.3pm
  ADAMK/YAML-0.72.tar.gz
  make install -j4 -- OK
CPAN: YAML loaded ok (v0.72)

Install FCGI PERL module

cpan[2]> install FCGI::ProcManager 
FCGI::ProcManager is up to date (0.19).

Can't locate syscall.ph.

root@darkstar:/usr/include# /usr/local/bin/cgiwarp-fcgi.pl 
Illegal declaration of subroutine main::__INT16_C at /usr/lib/perl5/site_perl/5.12.3/i486-linux-thread-multi/_h2ph_pre.ph line 158.
Compilation failed in require at /usr/lib/perl5/site_perl/5.12.3/i486-linux-thread-multi/syscall.ph line 1.
Compilation failed in require at /usr/local/bin/cgiwarp-fcgi.pl line 9.
root@darkstar:/usr/include# perl -e 'require("syscall.ph")';
Illegal declaration of subroutine main::__INT16_C at /usr/lib/perl5/site_perl/5.12.3/i486-linux-thread-multi/_h2ph_pre.ph line 158.
Compilation failed in require at /usr/lib/perl5/site_perl/5.12.3/i486-linux-thread-multi/syscall.ph line 1.
Compilation failed in require at -e line 1.
root@darkstar:/usr/include#

Reference:

What is Hadoop - Apa itu Hadoop

2011-07-31T16:47:52+07:00

Sometimes, when we bored nothing get idea, my friend sometimes go ahead to chat. We are play jokes, but still serious. Try, Find, Getting out of the box is our mind. Here is one jokes that’s why i posted here.

Install rrdtool 1.4.5 on Linux machine

2011-07-31T16:40:27+07:00

Installing Dependencies

Pixman.

wget -c http://oss.oetiker.ch/rrdtool/pub/libs/pixman-0.10.0.tar.gz
tar -xvf pixman-0.10.0.tar.gz
cd pixman-0.10.0
./configure
make
make install

Cairo.

wget -c http://oss.oetiker.ch/rrdtool/pub/libs/cairo-1.6.4.tar.gz
tar -xvf cairo-1.6.4.tar.gz
cd cairo-1.6.4
export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig:/usr/lib/pkgconfig
./configure
make
make install

if got error:

error: pixman> = 0.10.0 d

install pixman first.

Glib.

wget -c http://oss.oetiker.ch/rrdtool/pub/libs/glib-2.15.4.tar.gz
tar -xvf glib-2.15.4.tar.gz
cd glib-2.15.4
./configure --prefix=/usr/local/glib
make
make install
export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig:/usr/lib/pkgconfig:/usr/local/glib/lib/pkgconfig/

Pango.

wget -c http://oss.oetiker.ch/rrdtool/pub/libs/pango-1.21.1.tar.bz2
tar -xvf pango-1.21.1.tar.bz2
cd pango-1.21.1
./configure
make
make install

install RRDTOOL 1.4.5

wget -c http://oss.oetiker.ch/rrdtool/pub/rrdtool-1.4.5.tar.gz
tar -xvf rrdtool-1.4.5.tar.gz
cd rrdtool-1.4.5
./configure --prefix=/usr/local/rrdtool
make
make install

[root@mrtg rrdtool-1.4.5]# /usr/local/rrdtool/bin/rrdtool -v
RRDtool 1.4.5 Copyright 1997-2010 by Tobias Oetiker <tobi@oetiker.ch>
               Compiled Jun 30 2011 09:04:17

Usage: rrdtool [options] command command_options
Valid commands: create, update, updatev, graph, graphv, dump, restore,
last, lastupdate, first, info, fetch, tune,
resize, xport, flushcached

RRDtool is distributed under the Terms of the GNU General
Public License Version 2. (www.gnu.org/copyleft/gpl.html)

For more information read the RRD manpages

[root@mrtg rrdtool-1.4.5]#

ref: http://xinet.kr/tc/89?category=0

Install Nginx 1.0.4 and PHP-FPM Patch 0.5.14

2011-07-31T16:25:13+07:00

Quick how to.

here we go…

Install Nginx 1.0.4 version.

grab this code and execute it.

Install PHP and Patch FPM 0.5.14

grab this code and execute it.

Configure PHP-FPM.conf

Grab this code and put as /usr/local/php/etc/php-fpm.conf.

Configure PHP.ini

we can use php.ini on this page

PHP-CGI Script

grab this code and run it..

to make sure php-cgi run or not, just type netstat -ntlp or lsof -i tcp:9000.

hope this help.. ;)

Upgrading ZPOOL and ZFS version on FreeBSD

2011-07-31T14:27:14+07:00

After upgrade to current FreeBSD, i’ve got warning below:

mars# zpool status
  pool: zroot
 state: ONLINE
status: The pool is formatted using an older on-disk format.  The pool can
	still be used, but some features are unavailable.
action: Upgrade the pool using 'zpool upgrade'.  Once this is done, the
	pool will no longer be accessible on older software versions.
 scan: none requested
config:

	NAME           STATE     READ WRITE CKSUM
	zroot          ONLINE       0     0     0
	  mirror-0     ONLINE       0     0     0
	    gpt/disk0  ONLINE       0     0     0
	    gpt/disk1  ONLINE       0     0     0

errors: No known data errors

so we need upgrade it.

mars# zpool upgrade -a
This system is currently running ZFS pool version 28.

Successfully upgraded 'zroot'

If you boot from pool 'zroot', don't forget to update boot code.
Assuming you use GPT partitioning and da0 is your boot disk
the following command will do it:

	gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 1 da0

upgrade also boot partition. make sure disk is true.

$ sysctl -a | grep disk
kern.disks: ada1 ada0
kern.geom.disk.ada0.led: 
kern.geom.disk.ada1.led: 
2 LABEL gpt/disk1 151451851264 512 i 0 o 0
2 LABEL gpt/disk0 151451851264 512 i 0 o 0
z0xfffffe0002deb500 [shape=box,label="DEV\ngpt/disk1\nr#4"];
z0xfffffe0002deb300 [shape=box,label="DEV\ngpt/disk0\nr#4"];
z0xfffffe0002da8600 [shape=hexagon,label="gpt/disk1\nr1w1e1\nerr#0"];
z0xfffffe0002ac2200 [shape=hexagon,label="gpt/disk0\nr1w1e1\nerr#0"];
      <name>gpt/disk1</name>
      <name>gpt/disk0</name>
	    <label>disk1</label>
	    <label>disk0</label>
	  <name>gpt/disk1</name>
	  <name>gpt/disk0</name>
vfs.nfs.diskless_rootpath: 
vfs.nfs.diskless_valid: 0
"ATA state lock","g_disk_done"
"g_disk_done","UMA zone"
"g_disk_done","bio queue"
$

run once again.

mars# gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 1 ada0
bootcode written to ada0
mars# gpart bootcode -b /boot/pmbr -p /boot/gptzfsboot -i 1 ada1
bootcode written to ada1

run upgrade once again.

mars# zfs upgrade -a
17 filesystems upgraded

mars# zpool upgrade
This system is currently running ZFS pool version 28.

All pools are formatted using this version.
mars# zfs upgrade
This system is currently running ZFS filesystem version 5.

All filesystems are formatted with the current version.
mars# exit
exit

mars# reboot

dont forget to reboot.

ref:

http://tyuu.com/wordpress/?paged=3

Install PHP PostgreSQL Module and enable PostgreSQL Module Internal cPanel PHP on WHM

2011-07-31T14:13:02+07:00

Well. That was make me annoying 1 month ago. Actually, if you run WHM. There are two version of PHP.

1. PHP module run on client.
2. PHP module run on internal WHM/cPanel.

On previous post, i was installing PostgreSQL on WHM. But client can’t use it on PostgreSQL admin or their application. So, we just enable both of them.

Here we go..

Enable PostgreSQL module on internal cPanel PHP on WHM.

1. Edit `/var/cpanel/easy/apache/profile/makecpphp.profile.yaml`

change value:

`Cpanel::Easy::PHP5::Pgsql: 1`

run script:

2. run `/scripts/makecpphp`

Enable PostgreSQL module on PHP that run on user/client.

ref: http://bit.ly/j5D28I

Installing PostgreSQL on cPanel WHM 11

2011-07-31T11:39:23+07:00

Here is quickly step.

Make Nagios notification to SMS via Twitter update

2011-07-30T22:30:37+07:00

Install Dependencies

yum install python-setuptools-0.6c5-2.el5.noarch
yum install -y python26-simplejson.x86_64
yum install -y python-simplejson.x86_64
yum install -y python-cjson.x86_64

Install Tweepy, Python Twitter Client

Installing Tweepy.

Grab Code and Make Auth.

Grab coderiver.py on github and run it.

Run it.

[root@master sms]# python coderiver.py 
Please authorize: http://twitter.com/oauth/authorize?oauth_token=wAAZYcMh454UGdjB5Qo3NNwmF0XMxnG0TgYKb57bGFk
PIN: 6355846
ACCESS_KEY = '97888754-tEz8cPpNT920kjAJ4UzHqMKpHhB22F6V2JvP4rAaX'
ACCESS_SECRET = 'SRaHdcr4MA2A2Fx4e4ftF8WmCQZywbwaOio3ghPw'

[root@master sms]# vim sms.py

Testing

[root@master sms]# ./sms.py 'admin e sopo iki ?? server e down'

tambahkan command di nagios / groundwork nagios (saya pake yg ini)

ref:

http://talkfast.org/2010/05/31/twitter-from-the-command-line-in-python-using-oauth

Install Earthquake Ruby dan Gem di local user

2011-07-30T21:47:30+07:00

Install Ruby di lingkungan user (tanpa akses root)

dhanuxe@plox:~$ mkdir ~/local2
dhanuxe@plox:~$ cd ~/local2/
dhanuxe@plox:~/local2$ wget -c http://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.2-p180.tar.bz2
dhanuxe@plox:~/local2$ tar -xf ruby-1.9.2-p180.tar.bz2 
dhanuxe@plox:~/local2$ cd ruby-1.9.2-p180
dhanuxe@plox:~/local2/ruby-1.9.2-p180$ ./configure --prefix=/home/dhanuxe/local2/ruby
dhanuxe@plox:~/local2/ruby-1.9.2-p180$ make

snipped

No definition for rb_io_print
No definition for rb_io_printf
No definition for rb_io_puts
100% [515/515]  doc/re.rdoc                                                     

Generating RI...

Files:       515
Classes:    1087 (  654 undocumented)
Constants:  1364 ( 1141 undocumented)
Modules:     239 (  137 undocumented)
Methods:    7642 ( 2876 undocumented)
 53.46% documented


Elapsed: 199.0s

dhanuxe@plox:~/local2/ruby-1.9.2-p180$ make install
./miniruby -I./lib -I.ext/common -I./- -r./ext/purelib.rb  ./tool/generic_erb.rb -c -o encdb.h ./template/encdb.h.tmpl ./enc enc
encdb.h unchanged

snipped

installing command scripts:   /home/dhanuxe/local2/ruby/bin
installing library scripts:   /home/dhanuxe/local2/ruby/lib/ruby/1.9.1
installing common headers:    /home/dhanuxe/local2/ruby/include/ruby-1.9.1
installing manpages:          /home/dhanuxe/local2/ruby/share/man/man1
installing default gems:      /home/dhanuxe/local2/ruby/lib/ruby/gems/1.9.1 (cache, doc, gems, specifications)
                              rake 0.8.7
                              rdoc 2.5.8
                              minitest 1.6.0

setting PATH ENV

dhanuxe@plox:~/local2/ruby-1.9.2-p180$ vim ~/.bashrc 

export PATH=/home/dhanuxe/local2/ruby/bin:$PATH

dhanuxe@plox:~$ exit
logout
Connection to ssh.alinux.web.id closed.
bash-4.1$ ssh dhanuxe@ssh.alinux.web.id
dhanuxe@ssh.alinux.web.id's password: 

Welcome to shelltor.com

No mail.
Last login: Sat Jun 11 10:09:02 2011 from 114.79.1.57
whooopppppppssssssssssssssssss...
enter pass pleaseeee.. :D : 
great !!
        found the bug ?? submit to hax@plox.tor.hu
dhanuxe@plox:~$ ruby -v
ruby 1.9.2p180 (2011-02-18 revision 30909) [x86_64-linux]

Install Gem Ruby

dhanuxe@plox:~$ cd ~/local2
dhanuxe@plox:~/local2$ wget -c http://rubyforge.org/frs/download.php/74954/rubygems-1.8.5.tgz
dhanuxe@plox:~/local2$ tar -xf rubygems-1.8.5.tgz
dhanuxe@plox:~/local2$ cd rubygems-1.8.5
dhanuxe@plox:~/local2/rubygems-1.8.5$ ruby setup.rb --prefix=/home/dhanuxe/local2/gemrepo
RubyGems 1.8.5 installed

=== 1.8.4 / 2011-05-31

* 1 minor enhancement:

  * The -u option to 'update local source cache' is official deprecated.
  * Remove has_rdoc deprecations from Specification.

* 2 bug fixes:

  * Handle bad specs more gracefully.
  * Reset any Gem paths changed in the installer.


------------------------------------------------------------------------------

RubyGems installed the following executables:
        /home/dhanuxe/local2/gemrepo/bin/gem

dhanuxe@plox:~/local2/rubygems-1.8.5$ gem -v
1.3.7
dhanuxe@plox:~$ vim ~/.bashrc 


export PATH=/home/dhanuxe/local2/gemrepo/bin:/home/dhanuxe/local2/ruby/bin:$PATH


dhanuxe@plox:~/local2/rubygems-1.8.5$ exit
logout
Connection to ssh.alinux.web.id closed.
bash-4.1$ ssh dhanuxe@ssh.alinux.web.id
dhanuxe@ssh.alinux.web.id's password: 

Welcome to shelltor.com

No mail.
Last login: Sat Jun 11 10:06:40 2011 from 114.79.1.57
whooopppppppssssssssssssssssss...
enter pass pleaseeee.. :D : 
great !!
        found the bug ?? submit to hax@plox.tor.hu
dhanuxe@plox:~$ gem -v
1.3.7
dhanuxe@plox:~$ gem update --system
Updating RubyGems
Updating rubygems-update
Successfully installed rubygems-update-1.8.5
Updating RubyGems to 1.8.5
Installing RubyGems 1.8.5
RubyGems 1.8.5 installed

=== 1.8.5 / 2011-05-31

* 2 minor enhancement:

  * The -u option to 'update local source cache' is official deprecated.
  * Remove has_rdoc deprecations from Specification.

* 2 bug fixes:

  * Handle bad specs more gracefully.
  * Reset any Gem paths changed in the installer.


------------------------------------------------------------------------------

RubyGems installed the following executables:
        /home/dhanuxe/local2/ruby/bin/gem

dhanuxe@plox:~$ gem -v
1.8.5
dhanuxe@plox:~$ ./local2/gemrepo/bin/gem -v
1.8.5
dhanuxe@plox:~$ /home/dhanuxe/local2/ruby/bin/gem -v
1.8.5
dhanuxe@plox:~$

Install Earthquake

Earthquake = Twitter Client based terminal konsole.

dhanuxe@plox:~/local2$ git clone git://github.com/deanet/earthquake.git
Cloning into earthquake...
remote: Counting objects: 1744, done.
remote: Compressing objects: 100% (749/749), done.
remote: Total 1744 (delta 1000), reused 1666 (delta 936)
Receiving objects: 100% (1744/1744), 174.00 KiB | 42 KiB/s, done.
Resolving deltas: 100% (1000/1000), done.
dhanuxe@plox:~/local2$ cd earthquake/
dhanuxe@plox:~/local2/earthquake$ cat dep.txt | xargs gem install
Fetching: eventmachine-0.12.10.gem (100%)
Building native extensions.  This could take a while...
Successfully installed eventmachine-0.12.10
Fetching: simple_oauth-0.1.5.gem (100%)
Successfully installed simple_oauth-0.1.5
Fetching: notify-0.3.0.gem (100%)
Successfully installed notify-0.3.0
Fetching: i18n-0.6.0.gem (100%)
Successfully installed i18n-0.6.0
Fetching: activesupport-3.0.8.gem (100%)
Successfully installed activesupport-3.0.8
Fetching: awesome_print-0.4.0.gem (100%)
Successfully installed awesome_print-0.4.0
Fetching: configuration-1.2.0.gem (100%)
Successfully installed configuration-1.2.0
Fetching: launchy-0.4.0.gem (100%)
Successfully installed launchy-0.4.0
Fetching: oauth-0.4.4.gem (100%)
Successfully installed oauth-0.4.4
Fetching: json-1.5.1.gem (100%)
Building native extensions.  This could take a while...
Successfully installed json-1.5.1
Fetching: mime-0.1.gem (100%)
Successfully installed mime-0.1
Fetching: twitter-stream-0.1.13.gem (100%)
Successfully installed twitter-stream-0.1.13
Fetching: mime-types-1.16.gem (100%)
Fetching: twitter_oauth-0.4.3.gem (100%)
Successfully installed mime-types-1.16
Successfully installed twitter_oauth-0.4.3
Fetching: slop-1.7.0.gem (100%)
Successfully installed slop-1.7.0
15 gems installed
Installing ri documentation for eventmachine-0.12.10...
Installing ri documentation for simple_oauth-0.1.5...
Installing ri documentation for notify-0.3.0...
Installing ri documentation for i18n-0.6.0...
Installing ri documentation for activesupport-3.0.8...
Installing ri documentation for awesome_print-0.4.0...
Installing ri documentation for configuration-1.2.0...
Installing ri documentation for launchy-0.4.0...
Installing ri documentation for oauth-0.4.4...
Installing ri documentation for json-1.5.1...
Installing ri documentation for mime-0.1...
Installing ri documentation for twitter-stream-0.1.13...
Installing ri documentation for mime-types-1.16...
Installing ri documentation for twitter_oauth-0.4.3...
Installing ri documentation for slop-1.7.0...
Installing RDoc documentation for eventmachine-0.12.10...
Installing RDoc documentation for simple_oauth-0.1.5...
Installing RDoc documentation for notify-0.3.0...
Installing RDoc documentation for i18n-0.6.0...
Installing RDoc documentation for activesupport-3.0.8...
Installing RDoc documentation for awesome_print-0.4.0...
Installing RDoc documentation for configuration-1.2.0...
Installing RDoc documentation for launchy-0.4.0...
Installing RDoc documentation for oauth-0.4.4...
Installing RDoc documentation for json-1.5.1...
Installing RDoc documentation for mime-0.1...
Installing RDoc documentation for twitter-stream-0.1.13...
Installing RDoc documentation for mime-types-1.16...
Installing RDoc documentation for twitter_oauth-0.4.3...
Installing RDoc documentation for slop-1.7.0...

How to create RHEL 5.4 Repository for installation package

2011-04-23T14:00:08+07:00

How to create RHEL 5.4 Repository for installation package

things need:

ISO RHEL 5.4 ( rhel-5.4_x86_64.iso )
a RHEL server for sharing repository

to do all step, needed root user. become root to create directory /mnt/iso. then mount ISO file on directory that created (/mnt/iso).

root@utcepos4 ~# mkdir /mnt/iso
root@utcepos4 ~# mount /root/rhel-5.4_x86_64.iso /mnt/iso -o loop

We check use df -h command:

root@utcepos4 ~# df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/sda2              20G   15G  3.3G  82% /
/dev/sda5              48G  201M   45G   1% /home
/dev/sda1              99M   13M   82M  13% /boot
tmpfs                  12G     0   12G   0% /dev/shm
/dev/sda6              48G   15G   31G  32% /apps
/root/rhel-5.4_x86_64.iso
    	              3.4G  3.4G     0 100% /mnt/iso

K, ISO file already mounted on /mnt/iso. Next step check createrepo package. what is already installed ? to do, can use command rpm -qa | grep package_name

root@utcepos4 ~# rpm -qa | grep createrepo
createrepo-0.4.11-3.el5
root@utcepos4 ~#

Good, createrepo package is already installed. What if it’s not already installed ? we can install using command rpm -ivh package_name.

root@utcepos4 ~# rpm -ivh /mnt/iso/Server/createrepo-0.4.11-3.el5.noarch.rpm

K, how we know path of the package ?. we can do it using command find /letak/mount/iso | grep package_name.

root@utcepos4 ~# find /mnt/iso | grep createrepo
/mnt/iso/Server/createrepo-0.4.11-3.el5.noarch.rpm
root@utcepos4 ~#

Next step are create repository:

root@utcepos4 ~# mkdir -p /mnt/repo/iso;
root@utcepos4 ~# mount --bind /mnt/iso /mnt/repo/iso

The command above is to make the repo directory in /mnt and create an iso directory in the directory /mnt/repo.
Then mount /mnt/iso into the directory /mnt/repo/iso.
The next step into the directory /mnt/repo to create a repository with the command createrepo

root@utcepos4 ~# cd /mnt/repo
root@utcepos4 repo# createrepo .
3181/3181 - rpms/xen-devel-3.0.3-94.el5.x86_64.rpm                              _64.rpm_64.rpm
Saving Primary metadata
Saving file lists metadata
Saving other metadata
root@utcepos4 repo#

Metadata for the repository has been created, the next step yum configuration setting on the client. Here are some ways the media used:

Dengan methode file local.
Dengan http / dengan NFS.
Dengan methode file local.

Dengan methode file local ada beberapa kelebihan dan kekurangan, yaitu cepat diakses karena melalui media local dan tidak bisa diakses dari client lain karena membutuhkan interaksi client-server. Maka dari itu bisa digunakan HTTP atau NFS.

Untuk menyetting konfigurasi dengan methode file local bisa dengan langkah berikut:

buat file rhel.repo lalu isi sesuai dibawah ini dan simpan di direktori /etc/yum.repos.d/

root@utcepos4 ~# vim /etc/yum.repos.d/rhel.repo 
rhel
name=Red Hat 
baseurl=file:///mnt/repo/
enabled=1
gpgcheck=0

jika sudah kita check dengan perintah yum update

root@utcepos4 ~# yum update
Loaded plugins: rhnplugin, security
This system is not registered with RHN.
RHN support will be disabled.
rhel                                                                                                                                 |  951 B     00:00     
rhel/primary                                                                                                                         | 796 kB     00:00     
rhel                                                                                                                                              3181/3181
Skipping security plugin, no data
Setting up Update Process
No Packages marked for Update
root@utcepos4 ~#

kita cek paket yang available (belum terinstall)

root@utcepos4 ~# yum list available | tail
This system is not registered with RHN.
RHN support will be disabled.
yum-list-data.noarch                        1.1.16-13.el5              rhel     
yum-protect-packages.noarch                 1.1.16-13.el5              rhel     
yum-protectbase.noarch                      1.1.16-13.el5              rhel     
yum-tmprepo.noarch                          1.1.16-13.el5              rhel     
yum-updateonboot.noarch                     1.1.16-13.el5              rhel     
yum-utils.noarch                            1.1.16-13.el5              rhel     
yum-verify.noarch                           1.1.16-13.el5              rhel     
yum-versionlock.noarch                      1.1.16-13.el5              rhel     
zsh.x86_64                                  4.2.6-3.el5                rhel     
zsh-html.x86_64                             4.2.6-3.el5                rhel     
root@utcepos4 ~#

kita coba install paket zsh.x86_64

root@utcepos4 ~# yum install zsh.x86_64
Loaded plugins: rhnplugin, security
This system is not registered with RHN.
RHN support will be disabled.
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package zsh.x86_64 0:4.2.6-3.el5 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

============================================================================================================================================================
 Package                           Arch                                 Version                                    Repository                          Size
============================================================================================================================================================
Installing:
 zsh                               x86_64                               4.2.6-3.el5                                rhel                               1.7 M

Transaction Summary
============================================================================================================================================================
Install      1 Package(s)         
Update       0 Package(s)         
Remove       0 Package(s)         

Total download size: 1.7 M
Is this ok y/N: y
Downloading Packages:
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : zsh                                                                                                                                  1/1 

Installed:
  zsh.x86_64 0:4.2.6-3.el5                                                                                                                                  

Complete!
root@utcepos4 ~#

sampai langkah disini kita sudah berhasil membuat repositori, tapi hanya untuk akses dari server itu sendiri. Untuk client harus diperlukan interaksi client-server (HTTP/NFS/FTP). disini kita coba pakai HTTP dan NFS.

Langkah yang harus dipersiapkan:

masuk ke direktori /mnt/iso lalu membuat direktori reporhel di /mnt/ untuk repositori baru.

root@utcepos4 ~# cd /mnt/iso
root@utcepos4 iso# mkdir /mnt/reporhel;

membuat direktori Server,VT,Cluster,dan ClusterStorage untuk repositori agar kita bisa melihat grouplist pada perintah yum grouplist

root@utcepos4 iso# mkdir /mnt/reporhel/{Server,VT,Cluster,ClusterStorage}

setelah itu kita akan mencari semua file rpm dalam direktori iso dan membuat symbolic link setiap file yang ditemukan ke dalam direktori /mnt/reporhel.

root@utcepos4 iso# find . -name "*.rpm" -exec ln -s `pwd`/{} /mnt/reporhel/{} \;

Langkah selanjutnya mengkopi file comps*.xml ke direktori yang sesuai dengan Kategorinya (Server,VT,Cluster,ClusterStorage).

root@utcepos4 iso# cp Server/repodata/comps-rhel5-server-core.xml /mnt/reporhel/Server/;
root@utcepos4 iso# cp VT/repodata/comps-rhel5-vt.xml /mnt/reporhel/VT/;
root@utcepos4 iso# cp Cluster/repodata/comps-rhel5-cluster.xml /mnt/reporhel/Cluster/;
root@utcepos4 iso# cp ClusterStorage/repodata/comps-rhel5-cluster-st.xml /mnt/reporhel/ClusterStorage/;

Selanjutnya pindah ke direktori /mnt/reporhel. lalu memulai membuat repositorynya

root@utcepos4 iso# cd /mnt/reporhel/


root@utcepos4 reporhel# createrepo -g comps-rhel5-vt.xml /mnt/reporhel/VT/
72/72 - etherboot-roms-5.4.4-10.el5.x86_64.rpm                                  
Saving Primary metadata
Saving file lists metadata
Saving other metadata
root@utcepos4 reporhel# createrepo -g comps-rhel5-server-core.xml /mnt/reporhel/Server/
3040/3040 - pirut-1.3.28-13.el5.noarch.rpm                                  
Saving Primary metadata
Saving file lists metadata
Saving other metadata
root@utcepos4 reporhel# createrepo -g comps-rhel5-cluster.xml /mnt/reporhel/Cluster/;
32/32 - Cluster_Administration-si-LK-5.2-1.noarch.rpm                           
Saving Primary metadata
Saving file lists metadata
Saving other metadata
root@utcepos4 reporhel# createrepo -g comps-rhel5-cluster-st.xml /mnt/reporhel/ClusterStorage/;
36/36 - Global_File_System-it-IT-5.2-1.noarch.rpm                               
Saving Primary metadata
Saving file lists metadata
Saving other metadata
root@utcepos4 reporhel#

sampai disini langkah di server sudah selesai. langkah selanjutna adalah menyetting media(pilih salah satu) yang akan digunakan di client yum nya.

Dengan dengan NFS/HTTP .
a. Menyetting media repository dengan NFS:

Pastikan paket NFS sudah terinstall, jika belum bisa diinstall dengan metode file local lalu ketik yum install nfs. Selanjutnya mengedit konfigurasi NFS. Setting NFS di server repositori:

root@utcepos4 ~# vim /etc/exports 

/mnt/reporhel/ *(ro)

reload konfigurasi NFS lalu cek apa sudah available:

root@utcepos4 ~# service nfs reload
root@utcepos4 ~# exportfs 
/mnt/reporhel   <world>
/mnt/iso     	<world>

cek di Client apakah sudah bisa diakses NFS nya:

root@utcadv6 ~# showmount -e 192.168.1.111
Export list for 192.168.1.111:
/mnt/iso      *
/mnt/reporhel *
root@utcadv6 ~#

Jika sudah, lakukan langkah di client. Buat direktori reporhel dan iso di direktori /mnt. lalu memount NFS /mnt/reporhel dan /mnt/iso di server (dalam contoh 192.168.1.111) ke client (utcadv6).

root@utcadv6 ~# mkdir /mnt/{reporhel,iso}
root@utcadv6 ~# mount 192.168.1.111:/mnt/reporhel /mnt/reporhel
root@utcadv6 ~# mount 192.168.1.111:/mnt/iso /mnt/iso

Jika sudah cek dengan perintah mount

root@utcadv6 ~# mount
/dev/sda3 on / type ext3 (rw)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
/dev/sda6 on /apps type ext3 (rw)
/dev/sda2 on /home type ext3 (rw)
/dev/sda1 on /boot type ext3 (rw)
tmpfs on /dev/shm type tmpfs (rw)
none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)
sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw)
192.168.1.111:/mnt/reporhel on /mnt/local type nfs (rw,addr=192.168.1.111)
192.168.1.111:/mnt/iso on /mnt/iso type nfs (rw,addr=192.168.1.111)

oke, nfs sudah kita mount. langkah selanjut membuat file rhel-5.4.repo lalu disimpan ke direktori /etc/yum.repos.d/

root@utcadv6 ~# cat /etc/yum.repos.d/rhel-5.4.repo 
Server
name=Server
baseurl=file:///mnt/local/Server/
enabled=1
gpgcheck=0
VT
name=Virtualization
baseurl=file:///mnt/local/VT/
enabled=	1
gpgcheck=0
Cluster
name=Cluster
baseurl=file:///mnt/local/Cluster/
enabled=1
gpgcheck=0
ClusterStorage
name=Cluster Storage
baseurl=file:///mnt/local/ClusterStorage/
enabled=1
gpgcheck=0
root@utcadv6 ~#

Jika sudah lalu update dengan perintah yum update. lakukan yum clean all jika diperlukan / jika ingin menghapus cache repositori. hal ini dilakukan biasanya setelah mengupdate konfigurasi yum repository d client

root@utcepos4 yum.repos.d# yum clean all
Loaded plugins: rhnplugin, security
Cleaning up Everything
root@utcepos4 yum.repos.d# yum update
Loaded plugins: rhnplugin, security
This system is not registered with RHN.
RHN support will be disabled.
Cluster                                                                                                                              | 1.1 kB     00:00     
Cluster/primary                                                                                                                      | 5.8 kB     00:00     
Cluster                                                                                                                                               32/32
ClusterStorage                                                                                                                       | 1.1 kB     00:00     
ClusterStorage/primary                                                                                                               | 7.5 kB     00:00     
ClusterStorage                                                                                                                                        36/36
Server                                                                                                                               | 1.1 kB     00:00     
Server/primary                                                                                                                       | 1.0 MB     00:00     
Server                                                                                                                                            3040/3040
VT                                                                                                                                   | 1.1 kB     00:00     
VT/primary                                                                                                                           |  20 kB     00:00     
VT                                                                                                                                                    72/72
Skipping security plugin, no data
Setting up Update Process
No Packages marked for Update
root@utcepos4 yum.repos.d#

untuk melihat repositori yang aktif bisa dengan perintah yum repolist -v

root@utcepos4 yum.repos.d# yum repolist -v
Loading "rhnplugin" plugin
Loading "security" plugin
Config time: 0.039
This system is not registered with RHN.
RHN support will be disabled.
Yum Version: 3.2.22
Repo-id     : Cluster
Repo-name   : Cluster
Repo-status : enabled:
Repo-updated: Thu Mar 17 21:07:58 2011
Repo-pkgs   : 32
Repo-size   : 68 M
Repo-baseurl: file:///mnt/reporhel/Cluster/

Repo-id     : ClusterStorage
Repo-name   : Cluster Storage
Repo-status : enabled:
Repo-updated: Thu Mar 17 21:08:11 2011
Repo-pkgs   : 36
Repo-size   : 9.8 M
Repo-baseurl: file:///mnt/reporhel/ClusterStorage/

Repo-id     : Server
Repo-name   : Server
Repo-status : enabled:
Repo-updated: Thu Mar 17 21:07:02 2011
Repo-pkgs   : 3,040
Repo-size   : 3.0 G
Repo-baseurl: file:///mnt/reporhel/Server/

Repo-id     : VT
Repo-name   : Virtualization
Repo-status : enabled:
Repo-updated: Thu Mar 17 21:07:43 2011
Repo-pkgs   : 72
Repo-size   : 71 M
Repo-baseurl: file:///mnt/reporhel/VT/

repolist: 3,180
root@utcepos4 yum.repos.d#

sampai disini untuk tahap repository dengan NFS sudah selesai. Langkah berikut nya repository dengan HTTP.

b. HTTP

Yang diperlukan adalah service HTTP di Server repository.

Pastikan paket httpd sudah terinstall, jika belum bisa diinstall dengan metode file local lalu ketik yum install httpd. Selanjutnya mengedit konfigurasi httpd.conf

root@utcepos4 ~# vim /etc/httpd/conf/httpd.conf

cari bagian www/html dengan perintah /www\/html pada editor vim

jika sudah ketemu, maka akan terlihat seperti berikut

DocumentRoot "/var/www/html"

Ganti dengan

DocumentRoot "/mnt/reporhel/"

lalu cari lagi maka akan ketemu seperti berikut:

<Directory "/var/www/html">

ganti dengan

<Directory "/mnt/reporhel">

jika sudah simpan konfigurasi httpd.conf . lalu aktifkan.

root@utcepos4 ~# chkconfig httpd on
root@utcepos4 ~# service httpd start
Starting httpd: httpd: Could not reliably determine the server's fully qualified domain name, using 10.80.120.77 for ServerName
                                                         OK  
root@utcepos4 ~#

Lalu set konfigurasi yum (/etc/yum.repos.d/rhel-5.4.repo) di client nya:

Server
name=Server
baseurl=http://192.168.1.111/Server/
enabled=1
gpgcheck=0
VT
name=Virtualization
baseurl=http://192.168.1.111/VT/
enabled=1
gpgcheck=0
Cluster
name=Cluster
baseurl=http://192.168.1.111/Cluster/
enabled=1
gpgcheck=0
ClusterStorage
name=Cluster Storage
baseurl=http://192.168.1.111/ClusterStorage/
enabled=1
gpgcheck=0

dimana 192.168.1.111 adalah server yang menshare repository nya. lalu di client, lakukan yum clean all, terus yum repolist -v untuk menghapus cache repository client dan mengupdate cache repo serta melihat list repo.

root@utcadv2 ~# yum clean all
Loaded plugins: rhnplugin, security
Cleaning up Everything
root@utcadv2 ~# yum repolist -v
Loading "rhnplugin" plugin
Loading "security" plugin
Config time: 0.032
This system is not registered with RHN.
RHN support will be disabled.
Yum Version: 3.2.22
Cluster                                                                                                                              | 1.1 kB     00:00     
Cluster/primary                                                                                                                      | 5.8 kB     00:00     
Cluster                                                                                                                                               32/32
ClusterStorage                                                                                                                       | 1.1 kB     00:00     
ClusterStorage/primary                                                                                                               | 7.5 kB     00:00     
ClusterStorage                                                                                                                                        36/36
Server                                                                                                                               | 1.1 kB     00:00     
Server/primary                                                                                                                       | 1.0 MB     00:00     
Server                                                                                                                                            3040/3040
VT                                                                                                                                   | 1.1 kB     00:00     
VT/primary                                                                                                                           |  20 kB     00:00     
VT                                                                                                                                                    72/72
Repo-id     : Cluster
Repo-name   : Cluster
Repo-status : enabled:
Repo-updated: Fri Mar 18 17:43:53 2011
Repo-pkgs   : 32
Repo-size   : 68 M
Repo-baseurl: http://192.168.1.111/Cluster/

Repo-id     : ClusterStorage
Repo-name   : Cluster Storage
Repo-status : enabled:
Repo-updated: Fri Mar 18 17:44:00 2011
Repo-pkgs   : 36
Repo-size   : 9.8 M
Repo-baseurl: http://192.168.1.111/ClusterStorage/

Repo-id     : Server
Repo-name   : Server
Repo-status : enabled:
Repo-updated: Fri Mar 18 17:43:25 2011
Repo-pkgs   : 3,040
Repo-size   : 3.0 G
Repo-baseurl: http://192.168.1.111/Server/

Repo-id     : VT
Repo-name   : Virtualization
Repo-status : enabled:
Repo-updated: Fri Mar 18 17:41:34 2011
Repo-pkgs   : 72
Repo-size   : 71 M
Repo-baseurl: http://192.168.1.111/VT/

repolist: 3,180
root@utcadv2 ~#

Selesai.

Untuk menginstall semua paket bisa dengan yum groupinstall nama_group_paket. untuk mengetahui nama_group_paket bisa dengan perintah yum grouplist .

root@utcadv2 ~# yum grouplist
Loaded plugins: rhnplugin, security
This system is not registered with RHN.
RHN support will be disabled.
Setting up Group Process
Cluster/group                                                                                                                                                                                                         | 101 kB     00:00     
ClusterStorage/group                                                                                                                                                                                                  | 105 kB     00:00     
Server/group                                                                                                                                                                                                          | 1.0 MB     00:00     
VT/group                                                                                                                                                                                                              | 106 kB     00:00     
Installed Groups:
   Administration Tools
   Editors
   GNOME Desktop Environment
   Games and Entertainment
   Graphical Internet
   Graphics
   KDE (K Desktop Environment)
   Legacy Network Server
   Legacy Software Development
   Legacy Software Support
   Mail Server
   Network Servers
   Office/Productivity
   Printing Support
   Server Configuration Tools
   Sound and Video
   System Tools
   Text-based Internet
   X Window System
Available Groups:
   Authoring and Publishing
   Cluster Storage
   Clustering
   DNS Name Server
   Development Libraries
   Development Tools
   Engineering and Scientific
   FTP Server
   GNOME Software Development
   Java Development
   KDE Software Development
   KVM
   MySQL Database
   News Server
   OpenFabrics Enterprise Distribution
   PostgreSQL Database
   Virtualization
   Web Server
   Windows File Server
   X Software Development
Done

Untuk menginstall semua paket yang belum ke-install (Available Groups):

root@utcadv2 ~# yum groupinstall "Authoring and Publishing" "Cluster Storage" "Clustering" "DNS Name Server" \
"Development Libraries" "Development Tools" "Engineering and Scientific" "FTP Server" "GNOME Software Development" \
"GNOME Software Development" "KDE Software Development" "Java Development" "KVM" "MySQL Database" "News Server" \
"OpenFabrics Enterprise Distribution" "PostgreSQL Database" "Virtualization" "Web Server" "Windows File Server" "X Software Development"

http://linuxtechsupport.blogspot.com/2008/06/configuring-yum-in-rhel5.html

how to knowing sas hba on IBM Blade HS21 or HS22

2011-04-16T21:08:45+07:00

This is very simple how to knowing your sas (serial attach scsi) hba on your machine IBM BLade HS21 or HS22.

root@eptcadv4 ~# lsscsi 
0:0:0:0    disk    IBM-ESXS ST9300603SS      B53B  -       
0:0:1:0    disk    IBM-ESXS ST9300603SS      B53B  /dev/sda
0:1:1:0    disk    LSILOGIC Logical Volume   3000  /dev/sdb
2:0:0:0    disk    IBM      1818      FAStT  0730  -       
2:0:0:31   disk    IBM      Universal Xport  0730  -

with systool:

root@eptcadv4 ~# systool -c fc_host -v
Class = "fc_host"

  Class Device = "host1"
  Class Device path = "/sys/class/fc_host/host1"
    fabric_name         = "0x20000024ff2c7f9a"
    issue_lip           = store method only
    node_name           = "0x20000024ff2c7f9a"
    port_id             = "0x000000"
    port_name           = "0x21000024ff2c7f9a"
    port_state          = "Online"
    port_type           = "Unknown"
    speed               = "unknown"
    supported_classes   = "Class 3"
    supported_speeds    = "1 Gbit, 2 Gbit, 4 Gbit, 8 Gbit"
    symbolic_name       = "QMI2572 FW:v4.04.09 DVR:v8.03.01.04.05.05-k"
    system_hostname     = ""
    tgtid_bind_type     = "wwpn (World Wide Port Name)"
    uevent              = store method only

    Device = "host1"
    Device path = "/sys/devices/pci0000:00/0000:00:09.0/0000:24:00.0/host1"
      ct                  = 
      edc                 = store method only
      els                 = 
      fw_dump             = 
      nvram               = "ISP "
      optrom_ctl          = store method only
      optrom              = 
      reset               = store method only
      sfp                 = 
      uevent              = store method only
      vpd                 = "B"


  Class Device = "host2"
  Class Device path = "/sys/class/fc_host/host2"
    fabric_name         = "0x100000051eb22963"
    issue_lip           = store method only
    node_name           = "0x20000024ff2c7f9b"
    port_id             = "0x010f01"
    port_name           = "0x21000024ff2c7f9b"
    port_state          = "Online"
    port_type           = "NPort (fabric via point-to-point)"
    speed               = "4 Gbit"
    supported_classes   = "Class 3"
    supported_speeds    = "1 Gbit, 2 Gbit, 4 Gbit, 8 Gbit"
    symbolic_name       = "QMI2572 FW:v4.04.09 DVR:v8.03.01.04.05.05-k"
    system_hostname     = ""
    tgtid_bind_type     = "wwpn (World Wide Port Name)"
    uevent              = store method only

    Device = "host2"
    Device path = "/sys/devices/pci0000:00/0000:00:09.0/0000:24:00.1/host2"
      ct                  = 
      edc                 = store method only
      els                 = 
      fw_dump             = 
      nvram               = "ISP "
      optrom_ctl          = store method only
      optrom              = 
      reset               = store method only
      sfp                 = 
      uevent              = store method only
      vpd                 = "B"

root@eptcadv4 ~# systool -c fc_transport -v
Class = "fc_transport"

  Class Device = "0:0"
  Class Device path = "/sys/class/fc_transport/target2:0:0"
    node_name           = "0x200600a0b86e46f0"
    port_id             = "0x011500"
    port_name           = "0x201600a0b86e46f0"
    uevent              = store method only

    Device = "target2:0:0"
    Device path = "/sys/devices/pci0000:00/0000:00:09.0/0000:24:00.1/host2/rport-2:0-0/target2:0:0"
      uevent              = store method only

root@eptcadv4 ~# lspci |grep -i Qlogic
24:00.0 Fibre Channel: QLogic Corp. ISP2532-based 8Gb Fibre Channel to PCI Express HBA (rev 02)
24:00.1 Fibre Channel: QLogic Corp. ISP2532-based 8Gb Fibre Channel to PCI Express HBA (rev 02)

root@eptcadv4 ~# cat /sys/class/fc_host/host?/port_name
0x21000024ff2c7f9a
0x21000024ff2c7f9b
root@eptcadv4 ~# ls -l /sys/class/fc_host/host?/device

lrwxrwxrwx 1 root root 0 Mar  9 12:28 /sys/class/fc_host/host1/device -> ../../../devices/pci0000:00/0000:00:09.0/0000:24:00.0/host1
lrwxrwxrwx 1 root root 0 Mar  9 12:28 /sys/class/fc_host/host2/device -> ../../../devices/pci0000:00/0000:00:09.0/0000:24:00.1/host2

root@eptcadv4 ~# ls -l /sys/block/(type_asterix_symbol_here)/device
lrwxrwxrwx 1 root root 0 Mar  9 12:28 /sys/block/sda/device -> ../../devices/pci0000:00/0000:00:01.0/0000:0b:00.0/host0/port-0:1/end_device-0:1/target0:0:1/0:0:1:0
lrwxrwxrwx 1 root root 0 Mar  9 12:28 /sys/block/sdb/device -> ../../devices/pci0000:00/0000:00:01.0/0000:0b:00.0/host0/target0:1:1/0:1:1:0

look, after check on device, same as with below (left).

root@eptcadv4 ~# lsscsi 
0:0:0:0    disk    IBM-ESXS ST9300603SS      B53B  -       
0:0:1:0    disk    IBM-ESXS ST9300603SS      B53B  /dev/sda
0:1:1:0    disk    LSILOGIC Logical Volume   3000  /dev/sdb
2:0:0:0    disk    IBM      1818      FAStT  0730  -       
2:0:0:31   disk    IBM      Universal Xport  0730  -       
root@eptcadv4 ~#

reference:

Install RHEL via Network and Auto Installation using Kickstart

2011-04-10T08:39:56+07:00

. Preparing

[root@utcepos4 ~]# cp /usr/lib/syslinux/pxelinux.0 /tftpboot/linux-install/pxelinux.0
[root@utcepos4 ~]# cd /mnt/iso/images/pxeboot/
[root@utcepos4 pxeboot]# ls
initrd.img  README  TRANS.TBL  vmlinuz
[root@utcepos4 pxeboot]# cp * /tftpboot/linux-install/images/
[root@utcepos4 pxeboot]# ls /tftpboot/linux-install/images/
initrd.img  README  TRANS.TBL  vmlinuz
[root@utcepos4 pxeboot]#

. Configure

[root@utcepos4 pxeboot]# cd /tftpboot/
[root@utcepos4 tftpboot]# cat ./linux-install/pxelinux.cfg/default
default local
timeout 100
prompt 1
display msgs/boot.msg
F1 msgs/boot.msg
F2 msgs/general.msg
F3 msgs/expert.msg
F4 msgs/param.msg
F5 msgs/rescue.msg
F7 msgs/snake.msg


label 0
localboot 1


default linux
timeout 100

label linux
kernel images/vmlinuz
append initrd=images/initrd.img ramdisk_size=9216 noapic acpi=off

. Set DHCP

[root@eptcproc5 tftpboot]# cat /etc/dhcpd.conf
ddns-update-style ad-hoc;

deny unknown-clients;
not authoritative;

option domain-name              "eptcproc5";
#option domain-name-servers      ???.???.???.???, ???.???.???.???;
option subnet-mask              255.255.255.0;

allow bootp;
allow booting;

option ip-forwarding    false;  # No IP forwarding
option mask-supplier    false;  # Don't respond to ICMP Mask req

subnet 192.168.2.0 netmask 255.255.255.0 {
  #option routers        192.168.2.11;
}

group {
  next-server 192.168.2.15;          # name of your TFTP server
  filename "linux-install/pxelinux.0";        # name of the bootloader program

## host client yang akan diinstall
  host eptcproc4 {
        hardware ethernet e4:1f:13:39:ee:58;
        fixed-address 192.168.2.40;
  }

  host epos4 {
        hardware ethernet  e4:1f:13:79:eb:30;
        fixed-address 192.168.2.41;
}
 host eptcproc8 {
        hardware ethernet  e4:1f:13:1a:c9:d4;
        fixed-address 192.168.2.42;
}

}

. Enable tftp boot

[root@eptcproc5 tftpboot]# chkconfig tftp on
[root@eptcproc5 ~]# chkconfig --list tftp
tftp            on
[root@eptcproc5 ~]#

make sure:

[root@eptcproc5 tftpboot]# cat /etc/xinetd.d/tftp
# default: off
# description: The tftp server serves files using the trivial file transfer \
#       protocol.  The tftp protocol is often used to boot diskless \
#       workstations, download configuration files to network-aware printers, \
#       and to start the installation process for some operating systems.
service tftp
{
        disable = no
        socket_type             = dgram
        protocol                = udp
        wait                    = yes
        user                    = root
        server                  = /usr/sbin/in.tftpd
        server_args             = -s /tftpboot
        per_source              = 11
        cps                     = 100 2
        flags                   = IPv4
}

. start DHCP and restart Xinetd

[root@eptcproc5 ~]# service dhcpd restart
Shutting down dhcpd:                                       [  OK  ]
Starting dhcpd:                                            [  OK  ]
[root@eptcproc5 ~]# service xinetd restart
Stopping xinetd:                                           [  OK  ]
Starting xinetd:                                           [  OK  ]
[root@eptcproc5 ~]#

touch sample

[root@eptcproc5 tftpboot]# ls / > /tftpboot/test

. Test from other machine:

[root@eptcproc6 ~]# tftp -v eptcproc5
Connected to eptcproc5 (192.168.2.15), port 69
tftp> get test
getting from eptcproc5:test to test [netascii]
Received 216 bytes in 0.6 seconds [3014 bit/s]
tftp> quit
[root@eptcproc6 ~]#

It;s work, now autostart installation with kickstart: when boot type:

1. linux ks=nfs:ip_server:/path/nama_file.ks

for NFS

2. linux ks=http:ip_server:/path/nama_file.ks

for http

3. linux ks=nfs:ip_server:/path/nama_file.ks

example of dot.ks (http://10.80.120.77/anaconda-ks.cfg) .

# Kickstart file automatically generated by anaconda.
install
##NFS diset dulu di server 10.80.120.77/192.168.1.111 (contoh)
nfs --server=192.168.1.111 --dir=/mnt/iso/


key --skip
lang en_US.UTF-8
keyboard us
xconfig --startxonboot

#ip bisa diset disini
#network --device eth0 --bootproto static --ip 192.168.1.3 --netmask 255.255.255.0 --hostname utcadv3
#network --device eth1 --onboot no --bootproto dhcp --hostname utcadv3
network --device eth0 --onboot no --bootproto dhcp --hostname utcadv
rootpw --iscrypted $1$iUvlkRqn$nCMWCbazajhv0LKnAJ3QU.
firewall --enabled --port=22:tcp
authconfig --enableshadow --enablemd5
selinux --enforcing
timezone Asia/Jakarta
bootloader --location=mbr --driveorder=sda --append="noapic acpi=off rhgb quiet"
# The following is the partition information you requested
# Note that any partitions you deleted are not expressed
# here so unless you clear all partitions first, this is
# not guaranteed to work

##drive sda atau sdb atau sdc
clearpart --linux --drives=sda
part /boot --fstype ext3 --size=100
part /home --fstype ext3 --size=30000
part / --fstype ext3 --size=20000
part swap --size=8000
part /apps --fstype ext3 --size=100 --grow


##konfigurasi diatas untuk hardisk 146GB
##harap diperhatikan agar hardisk yang akan diinstall sama atau lebih besar.

## hasilnya berikut:
##[root@utcadv3 ~]# fdisk -l

##Disk /dev/sda: 146.8 GB, 146814976000 bytes
##255 heads, 63 sectors/track, 17849 cylinders
##Units = cylinders of 16065 * 512 = 8225280 bytes

##   Device Boot      Start         End      Blocks   Id  System
##/dev/sda1   *           1          13      104391   83  Linux
##/dev/sda2              14        3837    30716280   83  Linux
##/dev/sda3            3838        6387    20482875   83  Linux
##/dev/sda4            6388       17849    92068515    5  Extended
##/dev/sda5            6388        7407     8193118+  82  Linux swap / Solaris
##/dev/sda6            7408       17849    83875333+  83  Linux
##[root@utcadv3 ~]# df -h
##Filesystem            Size  Used Avail Use% Mounted on
##/dev/sda3              19G  2.6G   16G  15% /
##/dev/sda6              78G  184M   74G   1% /apps
##/dev/sda1              99M   12M   83M  13% /boot
##tmpfs                 2.0G     0  2.0G   0% /dev/shm
##eptcadv1:/home/pgadmin
                       30G  7.3G   21G  26% /home/pgadmin
##[root@utcadv3 ~]# 


##Grup paket yang akan diinstall
%packages
@admin-tools
@base
@core
@dialup
@editors
@gnome-desktop
@games
@graphical-internet
@graphics
@java
@kde-desktop
@legacy-software-support
@office
@printing
@sound-and-video
@text-internet
@base-x
kexec-tools
fipscheck
device-mapper-multipath
sgpio
emacs
libsane-hpaio
xorg-x11-utils
xorg-x11-server-Xnest

done :)

reference:

http://mohammadthalif.wordpress.com/2010/03/05/installing-and-testing-tftpd-in-ubuntudebian/

create own repo RHEL 6.0 beta from ISO

2011-03-04T20:48:04+07:00

This is simply way what i’ve done create repository without copy all package rpm. this is not crazy. xD

[root@rhel6 ~]# cd /mnt/cdrom/Packages/
[root@rhel6 Packages]# mkdir /mnt/repo
[root@rhel6 Packages]# find . -name "*.rpm" -exec ln -s `pwd`/{} /mnt/repo/{} \;
[root@rhel6 Packages]# cd /mnt/repo/
[root@rhel6 repo]# createrepo .
2865/2865 - pcsc-lite-libs-1.5.2-3.1.el6.i686.rpm
Saving Primary metadata
Saving file lists metadata
Saving other metadata
[root@rhel6 repo]# cat /etc/yum.repos.d/rhel-beta.repo
[rhel-beta-6]
name=Red Hat Enterprise Linux Beta
baseurl=file:///mnt/repo/
enabled=1
gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-beta-2
[root@rhel6 repo]# yum update
Loaded plugins: rhnplugin
This system is not registered with RHN.
RHN support will be disabled.
rhel-beta-6                                              | 1.3 kB     00:00 ...
rhel-beta-6/primary                                      | 1.3 MB     00:00 ...
rhel-beta-6                                                           2865/2865
Setting up Update Process
No Packages marked for Update
[root@rhel6 repo]# yum list | grep mysql-server
This system is not registered with RHN.
RHN support will be disabled.
mysql-server.i686                     5.1.42-4.el6                   rhel-beta-6
[root@rhel6 repo]#
[root@rhel6 repo]# yum install mysql-server.i686
Loaded plugins: rhnplugin
This system is not registered with RHN.
RHN support will be disabled.
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package mysql-server.i686 0:5.1.42-4.el6 set to be updated
--> Processing Dependency: mysql = 5.1.42-4.el6 for package: mysql-server-5.1.42-4.el6.i686
--> Processing Dependency: perl-DBD-MySQL for package: mysql-server-5.1.42-4.el6.i686
--> Running transaction check
---> Package mysql.i686 0:5.1.42-4.el6 set to be updated
---> Package perl-DBD-MySQL.i686 0:4.013-3.el6 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package               Arch        Version             Repository          Size
================================================================================
Installing:
 mysql-server          i686        5.1.42-4.el6        rhel-beta-6        8.6 M
Installing for dependencies:
 mysql                 i686        5.1.42-4.el6        rhel-beta-6        3.8 M
 perl-DBD-MySQL        i686        4.013-3.el6         rhel-beta-6        134 k

Transaction Summary
================================================================================
Install       3 Package(s)
Upgrade       0 Package(s)

Total download size: 13 M
Installed size: 30 M
Is this ok [y/N]: y
Downloading Packages:
--------------------------------------------------------------------------------
Total                                            19 MB/s |  13 MB     00:00
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : mysql-5.1.42-4.el6.i686                                  1/3
  Installing     : perl-DBD-MySQL-4.013-3.el6.i686                          2/3
  Installing     : mysql-server-5.1.42-4.el6.i686                           3/3

Installed:
  mysql-server.i686 0:5.1.42-4.el6

Dependency Installed:
  mysql.i686 0:5.1.42-4.el6          perl-DBD-MySQL.i686 0:4.013-3.el6

Complete!
[root@rhel6 repo]#

done . :)

Failover and Clustering Mirror Node OpenLdap 2.4 on Centos 5.5 (part 2)

2011-02-16T14:44:32+07:00

READ FIRST

Clustering Openldap 2.4 dengan Mirror Node Replication di Centos 5.5

Design Sistem:

Ternate (192.168.11.213) = failover

Halmahera (192.168.11.215) = node failover

Morotai (192.168.11.216) = node failover

Ternate (Failover) ---- Halmahera (ldap) --| 
		   |                       | Mirroring
                   ---- Morotai (ldap)  ---|

A. Installasi

A.1 Barkeley DB 4.8

# cd /usr/local/src/
# wget -c http://download.oracle.com/berkeley-db/db-4.8.30.tar.gz
# tar -xzvf db-4.8.30.tar.gz
# cd db-4.8.30
# cd build_unix
# ../dist/configure --prefix=/usr/local/BerkeleyDB4.8.30
# make clean
# make
# make install

A.2 openldap 2.4

A.2.1 Non-ssl

# CPPFLAGS="-I/usr/local/BerkeleyDB4.8.30/include"
# export CPPFLAGS
# LDFLAGS="-L/usr/local/lib -L/usr/local/BerkeleyDB4.8.30/lib -R/usr/local/BerkeleyDB4.8.30/lib"
# export LDFLAGS
# LD_LIBRARY_PATH="/usr/local/BerkeleyDB4.8.30/lib"
# export LD_LIBRARY_PATH

# cd /usr/local/src/
# wget -c ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-2.4.23.tgz
# ./configure --prefix=/usr/local/openldap2.4
# make depend
# make
# make install

A.2.2 with-Openssl

Install openssl:

# sudo wget -c http://www.openssl.org/source/openssl-1.0.0a.tar.gz
# sudo tar -xzvf openssl-1.0.0a.tar.gz
# cd openssl-1.0.0a
# sudo ./config shared --prefix=/usr/local/openssl/

Generate server.pem

# cd /usr/local/openldap/ssl/;
# openssl req -newkey rsa:1024 -x509 -nodes -out server.pem -keyout server.pem -days 3650

A.2.3 Install openldap

# CPPFLAGS="-I/usr/local/BerkeleyDB4.8.30/include -I/usr/local/openssl/include/"
# LDFLAGS="-L/usr/local/lib -L/usr/local/BerkeleyDB4.8.30/lib -R/usr/local/BerkeleyDB4.8.30/lib -L/usr/local/openssl/lib64/"
# LD_LIBRARY_PATH="/usr/local/BerkeleyDB4.8.30/lib"
# export CPPFLAGS
# export LDFLAGS
# export LD_LIBRARY_PATH

# cd /usr/local/src/
# wget -c ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-2.4.23.tgz
# ./configure --prefix=/usr/local/openldap --with-tls=openssl
# make depend
# make
# make install

B. Konfigurasi

B.1 File conf:

B.1.1 Non-ssl

/usr/local/openldap2.4/etc/openldap/slapd.conf
/usr/local/openldap2.4/etc/openldap/ldap.conf

B.1.2 with-ssl

/usr/local/openldap/etc/openldap/slapd.conf
/usr/local/openldap/etc/openldap/ldap.conf

add to all machine on slapd.conf:

TLSCipherSuite HIGH:MEDIUM:-SSLv2
TLSCACertificateFile /usr/local/openldap/ssl/server.pem
TLSCertificateFile /usr/local/openldap/ssl/server.pem
TLSCertificateKeyFile /usr/local/openldap/ssl/server.pem

B.1.3 NSSswitch

add ldap option on nsswitch.conf to all machine:

passwd:     files ldap
shadow:     files ldap
group:      files ldap

B.2 Konfigurasi Master Failover

TERNATE/192.168.11.213:

B.2.1 Auth

B.2.2 /etc/ldap.conf:

Begin

host  192.168.11.216 192.168.11.215
base dc=finnet-indonesia,dc=com
port 389
timelimit 5
bind_timelimit 2
bind_policy soft
idle_timelimit 3600
nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm,username,rudi
uri ldap://192.168.11.216/ ldap://192.168.11.215/
ssl no
tls_cacertdir /etc/openldap/cacerts
pam_password md5

EOF

B.2.3 PAM:

/etc/pam.d/system-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      pam_env.so
auth        sufficient    pam_unix.so nullok try_first_pass
auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        sufficient    pam_ldap.so use_first_pass
auth        required      pam_deny.so

account     required      pam_unix.so broken_shadow
account     sufficient    pam_localuser.so
account     sufficient    pam_succeed_if.so uid < 500 quiet
account     default=bad success=ok user_unknown=ignore pam_ldap.so
account     required      pam_permit.so

password    requisite     pam_cracklib.so try_first_pass retry=3
password    sufficient    pam_unix.so md5 shadow nullok try_first_pass use_authtok
password    sufficient    pam_ldap.so use_authtok
password    required      pam_deny.so

session required pam_mkhomedir.so skel=/etc/skel/ umask=0022

session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
session     success=1 default=ignore pam_succeed_if.so service in crond quiet use_uid
session     required      pam_unix.so
session     optional      pam_ldap.so

B.3 SETUP MIRROR NODE

B.3.1

HALMAHERA/192.168.11.215:

B.3.1.1 slapd.conf

user@halmahera ~$ sudo cat /usr/local/openldap2.4/etc/openldap/slapd.conf

#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/openldap2.4/etc/openldap/schema/core.schema
include         /usr/local/openldap2.4/etc/openldap/schema/corba.schema
include         /usr/local/openldap2.4/etc/openldap/schema/cosine.schema
include         /usr/local/openldap2.4/etc/openldap/schema/nis.schema
include         /usr/local/openldap2.4/etc/openldap/schema/inetorgperson.schema

pidfile         /usr/local/openldap2.4/var/run/slapd.pid
argsfile        /usr/local/openldap2.4/var/run/slapd.args

# Load dynamic backend modules:
 modulepath     /usr/local/openldap2.4

#######################################################################
# BDB database definitions
#######################################################################

database        bdb
suffix          "dc=domain-indonesia,dc=com"
rootdn          "cn=admin,dc=domain-indonesia,dc=com"
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw          domainldap
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory       /usr/local/openldap2.4/var/openldap-data
# Indices to maintain

index objectClass,entryCSN,entryUUID    eq,pres
index ou,cn,mail,surname,givenname      eq,pres,sub
index uidNumber,gidNumber,loginShell    eq,pres
index uid,memberUid                     eq,pres,sub
index nisMapName,nisMapEntry            eq,pres,sub


overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100

# Global section
serverID    1
# database section

# syncrepl directive
syncrepl        rid=001
                provider=ldap://192.168.11.216
                bindmethod=simple
                binddn="cn=admin,dc=domain-indonesia,dc=com"
                credentials=domainldap
                searchbase="dc=domain-indonesia,dc=com"
                schemachecking=on
                type=refreshAndPersist
                retry="60 +"
mirrormode on

B.3.1.2 /etc/ldap.conf

$ vi /etc/ldap.conf

#Begin
host 127.0.0.1
base dc=finnet-indonesia,dc=com
timelimit 120
bind_timelimit 120
idle_timelimit 3600
nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm,username,rudi
uri ldap://192.168.11.215/
ssl no
tls_cacertdir /etc/openldap/cacerts
pam_password md5

EOF

B.3.1.3 Auth

B.3.1.4 PAM

$ vi /etc/pam.d/system-auth

PAM (215,216):

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      pam_env.so
auth        sufficient    pam_unix.so nullok try_first_pass
auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        sufficient    pam_ldap.so use_first_pass
auth        required      pam_deny.so

session required pam_mkhomedir.so skel=/etc/skel/ umask=0022

account     required      pam_unix.so broken_shadow
account     sufficient    pam_localuser.so
account     sufficient    pam_succeed_if.so uid < 500 quiet
account     default=bad success=ok user_unknown=ignore pam_ldap.so
account     required      pam_permit.so

password    requisite     pam_cracklib.so try_first_pass retry=3
password    sufficient    pam_unix.so md5 shadow nullok try_first_pass use_authtok
password    sufficient    pam_ldap.so use_authtok
password    required      pam_deny.so

session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
session     success=1 default=ignore pam_succeed_if.so service in crond quiet use_uid
session     required      pam_unix.so
session     optional      pam_ldap.so

B.3.2

MOROTAI/192.168.11.216:

B.3.2.1 slapd.conf

user@morotai ~$ sudo cat /usr/local/openldap2.4/etc/openldap/slapd.conf

#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/openldap2.4/etc/openldap/schema/core.schema
include         /usr/local/openldap2.4/etc/openldap/schema/corba.schema
include         /usr/local/openldap2.4/etc/openldap/schema/cosine.schema
include         /usr/local/openldap2.4/etc/openldap/schema/nis.schema
include         /usr/local/openldap2.4/etc/openldap/schema/inetorgperson.schema

pidfile         /usr/local/openldap2.4/var/run/slapd.pid
argsfile        /usr/local/openldap2.4/var/run/slapd.args

# Load dynamic backend modules:
 modulepath     /usr/local/openldap2.4

#######################################################################
# BDB database definitions
#######################################################################

database        bdb
suffix          "dc=domain-indonesia,dc=com"
rootdn          "cn=admin,dc=domain-indonesia,dc=com"

# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw          domainldap
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory       /usr/local/openldap2.4/var/openldap-data
# Indices to maintain

index objectClass,entryCSN,entryUUID    eq,pres
index ou,cn,mail,surname,givenname      eq,pres,sub
index uidNumber,gidNumber,loginShell    eq,pres
index uid,memberUid                     eq,pres,sub
index nisMapName,nisMapEntry            eq,pres,sub


overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100

# Global section
serverID    2
# database section

# syncrepl directive
syncrepl        rid=001
                provider=ldap://192.168.11.215
                bindmethod=simple
                binddn="cn=admin,dc=domain-indonesia,dc=com"
                credentials=domainldap
                searchbase="dc=domain-indonesia,dc=com"
                schemachecking=on
                type=refreshAndPersist
                retry="60 +"
mirrormode on

user@morotai ~$

B.3.2.2 ldap.conf

$ vi /etc/ldap.conf:

#Begin
host 127.0.0.1
base dc=finnet-indonesia,dc=com
timelimit 120
bind_timelimit 120
idle_timelimit 3600
nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm,username,rudi
uri ldap://192.168.11.216/
ssl no
tls_cacertdir /etc/openldap/cacerts
pam_password md5

EOF

B.3.2.3 Auth

B.3.2.4 PAM

$ vi /etc/pam.d/system-auth

PAM:

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth        required      pam_env.so
auth        sufficient    pam_unix.so nullok try_first_pass
auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        sufficient    pam_ldap.so use_first_pass
auth        required      pam_deny.so

account     required      pam_unix.so broken_shadow
account     sufficient    pam_succeed_if.so uid < 500 quiet
account     sufficient    pam_localuser.so
account     default=bad success=ok user_unknown=ignore pam_ldap.so
account     required      pam_permit.so

session required pam_mkhomedir.so skel=/etc/skel/ umask=0022

password    requisite     pam_cracklib.so try_first_pass retry=3
password    sufficient    pam_unix.so md5 shadow nullok try_first_pass use_authtok
password    sufficient    pam_ldap.so use_authtok
password    required      pam_deny.so

session     required      pam_mkhomedir.so skel=/etc/skel/ umask=0066

session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
session     success=1 default=ignore pam_succeed_if.so service in crond quiet use_uid
session     required      pam_unix.so
session     optional      pam_ldap.so

C. Testing

C.1 Test Openssl

root@morotai ssl# openssl s_client -connect localhost:636 -showcerts
CONNECTED(00000003)
depth=0 /C=ID/ST=Jakarta/L=Jakarta/O=Finnet/OU=Finnet/CN=morotai.finnet-indonesia.com/emailAddress=username@noc.finnet-indonesia.com
verify error:num=18:self signed certificate
verify return:1
depth=0 /C=ID/ST=Jakarta/L=Jakarta/O=Finnet/OU=Finnet/CN=morotai.finnet-indonesia.com/emailAddress=username@noc.finnet-indonesia.com
verify return:1
---
Certificate chain
 0 s:/C=ID/ST=Jakarta/L=Jakarta/O=Finnet/OU=Finnet/CN=morotai.finnet-indonesia.com/emailAddress=username@noc.finnet-indonesia.com
   i:/C=ID/ST=Jakarta/L=Jakarta/O=Finnet/OU=Finnet/CN=morotai.finnet-indonesia.com/emailAddress=username@noc.finnet-indonesia.com
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
---
Server certificate
subject=/C=ID/ST=Jakarta/L=Jakarta/O=Finnet/OU=Finnet/CN=morotai.finnet-indonesia.com/emailAddress=username@noc.finnet-indonesia.com
issuer=/C=ID/ST=Jakarta/L=Jakarta/O=Finnet/OU=Finnet/CN=morotai.finnet-indonesia.com/emailAddress=username@noc.finnet-indonesia.com
---
No client certificate CA names sent
---
SSL handshake has read 1168 bytes and written 319 bytes
---
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 1024 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : AES256-SHA
    Session-ID: EA07728E6693DDC8C536811BEEFEBA426E920453868BF0C9409BDA85CDCE2D0B
    Session-ID-ctx:
    Master-Key: 7425A4061CD8951C33BA508DA73E50BDEA31C7144231347F478ACCBA361177C495C028E3F4F7BD55E93108D10CA7DD09
    Key-Arg   : None
    Krb5 Principal: None
    Start Time: 1290683048
    Timeout   : 300 (sec)
    Verify return code: 18 (self signed certificate)
---

C.2 Test Openldap

ldif data:

$ cat /home/username/tes2.ldif
dn: ou=Timur,dc=finnet-indonesia,dc=com
objectClass: organizationalUnit
ou: Timur
description: Divre Bagian Timur

C.2.1 Non-ssl

debug:

sudo /usr/local/openldap2.4/libexec/slapd -h ldap:/// -u ldap -f /usr/local/openldap2.4/etc/openldap/slapd.conf -d -1

search:

sudo /usr/local/openldap2.4/bin/ldapsearch -x

add:

sudo /usr/local/openldap2.4/bin/ldapadd -x -D "cn=admin,dc=domain-indonesia,dc=com" -f /home/user/tes2.ldif -W

delete:

sudo /usr/local/openldap2.4/bin/ldapdelete -D "cn=admin,dc=domain-indonesia,dc=com" -w domainldap "dc=domain-indonesia,dc=com" "ou=Barat,dc=domain-indonesia,dc=com"

C.2.2 With-ssl

debug:

sudo /usr/local/openldap/libexec/slapd -h "ldaps:/// ldap:///" -u ldap -f /usr/local/openldap2.4/etc/openldap/slapd.conf -d -1

search:

sudo /usr/local/openldap/bin/ldapsearch -x

add:

sudo /usr/local/openldap/bin/ldapadd -x -D "cn=admin,dc=domain-indonesia,dc=com" -f /home/user/tes2.ldif -W

delete:

sudo /usr/local/openldap/bin/ldapdelete -D "cn=admin,dc=domain-indonesia,dc=com" -w domainldap "dc=domain-indonesia,dc=com" "ou=Barat,dc=domain-indonesia,dc=com"

Open LDAP Script

Grab this openldap.sh script and put into /etc/init.d/.

C.3 Start, stop and restart Service ldap

start:

# /etc/init.d/ldap start

stop:

# /etc/init.d/ldap stop

restart:

# /etc/init.d/ldap restart

referensi:

Install KVM Virtualization on Debian Squeeze

2010-12-20T19:26:04+07:00

Understanding:

KVM (for Kernel-based Virtual Machine) is a full virtualization solution for Linux on x86 hardware containing virtualization extensions (Intel VT or AMD-V). It consists of a loadable kernel module, kvm.ko, that provides the core virtualization infrastructure and a processor specific module, kvm-intel.ko or kvm-amd.ko. KVM also requires a modified QEMU although work is underway to get the required changes upstream.

Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc.

The kernel component of KVM is included in mainline Linux, as of 2.6.20.

alinux@squeeze:~$ uname -a;cat /etc/debian_version 
Linux squeeze 2.6.36-21-DzulQaidah-1431H #4 SMP Sun Oct 31 06:31:57 WIT 2010 i686 GNU/Linux
squeeze/sid
alinux@squeeze:~$

Requirements:

qemu-kvm
qemu
xvnc4viewer

Installing:

Install by command:

apt-get install qemu-kvm qemu qemu-gl qemu-system qemu-user qemu-utils xvnc4viewer

Check:

Need to check module of kvm was there or not, as well your Processor.

alinux@squeeze:~$ lsmod | grep kvm
kvm_intel              34767  0 
kvm                   186549  1 kvm_intel
alinux@squeeze:~$ egrep '^flags.*(vmx|svm)' /proc/cpuinfo
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx lm constant_tsc arch_perfmon pebs bts aperfmperf pni dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm lahf_lm ida dts tpr_shadow vnmi flexpriority
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx lm constant_tsc arch_perfmon pebs bts aperfmperf pni dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm lahf_lm ida dts tpr_shadow vnmi flexpriority
alinux@squeeze:~$

Test with qemu

qemu -vnc localhost:5901 -enable-kvm -cdrom /home/ISO/CentOS-5.5-x86_64-bin-DVD-1of2.iso

Let’s go

alinux@squeeze:~$ sudo netstat -ntlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 127.0.0.1:3306          0.0.0.0:*               LISTEN      1574/mysqld     
tcp        0      0 0.0.0.0:80              0.0.0.0:*               LISTEN      1242/lighttpd   
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      1254/sshd       
tcp6       0      0 :::80                   :::*                    LISTEN      1242/lighttpd   
tcp6       0      0 :::22                   :::*                    LISTEN      1254/sshd       
tcp6       0      0 ::1:11801               :::*                    LISTEN      3991/qemu       
alinux@squeeze:~$ xvncviewer localhost:11801

VNC Viewer Free Edition 4.1.1 for X - built Mar 10 2010 21:40:13
Copyright (C) 2002-2005 RealVNC Ltd.
See http://www.realvnc.com for information on VNC.

Mon Dec 20 20:00:25 2010
 CConn:       connected to host localhost port 11801
 CConnection: Server supports RFB protocol version 3.8
 CConnection: Using RFB protocol version 3.8
 TXImage:     Using default colormap and visual, TrueColor, depth 24.
 CConn:       Using pixel format depth 6 (8bpp) rgb222
 CConn:       Using ZRLE encoding
 CConn:       Throughput 20020 kbit/s - changing to hextile encoding
 CConn:       Throughput 20020 kbit/s - changing to full colour
 CConn:       Using pixel format depth 24 (32bpp) little-endian rgb888
 CConn:       Using hextile encoding
alinux@squeeze:~$

have a nice dream ;)

Reference: 1. http://www.linux-kvm.org/page/Main_Page

Make USB installer OpenBSD 4.8

2010-10-04T21:45:18+07:00

Prelude:

Hey bro, See you again. Well, this time very hard to say. Truly i wanna turn off this site, also maintenance of site. I’m very bored at this time flying, surfing, browsing on cyber worlds. Along time i’ve graduated from high school,i’m knew very well cyber worlds. Time by time.. K, i;m just say getting back to my way.. not usually way.. the way for this documentation..

Yesterday i was trying bootable OpenBSD using grub, but just nothing that i’ve got.. unknown partition. Just got an idea from liveusb-openbsd.sourceforge.net, i’ve successfully made usb pendrive boot with self of OpenBSD. So, it;s very simple and protable.

Take d0wn

So, how to make bootable OpenBSD installer on usb pendrive ?.

This is simple way what i’ve did my self. To take this, you need:

1. Create your own LiveUSB with OpenBSD. Read: http://liveusb-openbsd.sourceforge.net.
2. Boot your usb pendrive. then:

Identified your disk:

  
# sysctl hw.disknames

Mount:

  
# mount wd0a /

2. Mount of iso OpenBSD to temporary place and copy them to usb pendrive.

  
# mkdir /tmp/OpenBSD
# mount /path/your/iso/install48.iso /tmp/OpenBSD/ -o loop
# cp -a /tmp/OpenBSD/* /

4. Reboot, done

Note: you need ext2 fs or ufs or ffs to place iso file install48.iso you can do all that steps use qemu without reboot your machine verify your bootable installer usb by qemu -usb -hda /dev/sdd

you might read nice article: http://www.azbsd.org/~marco/openbsd/flashkeyinstaller

Oh.. i must get some sleep now.. it’s 10:08 PM ..

Reference: 1. http://liveusb-openbsd.sourceforge.net/

Clustering Openldap 2.4 dengan Mirror Node Replication di CentOs 5.5

2010-09-05T10:52:53+07:00

Installasi

Barkeley DB 4.8

 cd /usr/local/src/
 wget -c http://download.oracle.com/berkeley-db/db-4.8.30.tar.gz
 tar -xzvf db-4.8.30.tar.gz
 cd db-4.8.30
 cd build_unix
 ../dist/configure --prefix=/usr/local/BerkeleyDB4.8.30
 make clean
 make
 make install

update ldconfig

 CPPFLAGS="-I/usr/local/BerkeleyDB4.8.30/include"
 export CPPFLAGS
 LDFLAGS="-L/usr/local/lib -L/usr/local/BerkeleyDB4.8.30/lib -R/usr/local/BerkeleyDB4.8.30/lib"
 export LDFLAGS
 LD_LIBRARY_PATH="/usr/local/BerkeleyDB4.8.30/lib"
 export LD_LIBRARY_PATH

openldap 2.4

 cd /usr/local/src/
 wget -c ftp://ftp.openldap.org/pub/OpenLDAP/openldap-release/openldap-2.4.23.tgz
 ./configure --prefix=/usr/local/openldap2.4
 make depend
 make
 make install

Konfigurasi:

file conf:

/usr/local/openldap2.4/etc/openldap/slapd.conf
/usr/local/openldap2.4/etc/openldap/ldap.conf

SETUP MIRROR NODE

SERVER1/192.168.11.215:

[user@server1 ~]$ sudo cat /usr/local/openldap2.4/etc/openldap/slapd.conf
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/openldap2.4/etc/openldap/schema/core.schema
include         /usr/local/openldap2.4/etc/openldap/schema/corba.schema
include         /usr/local/openldap2.4/etc/openldap/schema/cosine.schema
include         /usr/local/openldap2.4/etc/openldap/schema/nis.schema
include         /usr/local/openldap2.4/etc/openldap/schema/inetorgperson.schema

pidfile         /usr/local/openldap2.4/var/run/slapd.pid
argsfile        /usr/local/openldap2.4/var/run/slapd.args

# Load dynamic backend modules:
 modulepath     /usr/local/openldap2.4

#######################################################################
# BDB database definitions
#######################################################################

database        bdb
suffix          "dc=domain-indonesia,dc=com"
rootdn          "cn=admin,dc=domain-indonesia,dc=com"
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw          domainldap
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory       /usr/local/openldap2.4/var/openldap-data
# Indices to maintain

index objectClass,entryCSN,entryUUID    eq,pres
index ou,cn,mail,surname,givenname      eq,pres,sub
index uidNumber,gidNumber,loginShell    eq,pres
index uid,memberUid                     eq,pres,sub
index nisMapName,nisMapEntry            eq,pres,sub


overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100

# Global section
serverID    1
# database section

# syncrepl directive
syncrepl        rid=001
                provider=ldap://192.168.11.216
                bindmethod=simple
                binddn="cn=admin,dc=domain-indonesia,dc=com"
                credentials=domainldap
                searchbase="dc=domain-indonesia,dc=com"
                schemachecking=on
                type=refreshAndPersist
                retry="60 +"
mirrormode on
[user@server1 ~]$

SERVER2/192.168.11.216:

[user@server2 ~]$ sudo cat /usr/local/openldap2.4/etc/openldap/slapd.conf
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/openldap2.4/etc/openldap/schema/core.schema
include         /usr/local/openldap2.4/etc/openldap/schema/corba.schema
include         /usr/local/openldap2.4/etc/openldap/schema/cosine.schema
include         /usr/local/openldap2.4/etc/openldap/schema/nis.schema
include         /usr/local/openldap2.4/etc/openldap/schema/inetorgperson.schema

pidfile         /usr/local/openldap2.4/var/run/slapd.pid
argsfile        /usr/local/openldap2.4/var/run/slapd.args

# Load dynamic backend modules:
 modulepath     /usr/local/openldap2.4

#######################################################################
# BDB database definitions
#######################################################################

database        bdb
suffix          "dc=domain-indonesia,dc=com"
rootdn          "cn=admin,dc=domain-indonesia,dc=com"

# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw          domainldap
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory       /usr/local/openldap2.4/var/openldap-data
# Indices to maintain

index objectClass,entryCSN,entryUUID    eq,pres
index ou,cn,mail,surname,givenname      eq,pres,sub
index uidNumber,gidNumber,loginShell    eq,pres
index uid,memberUid                     eq,pres,sub
index nisMapName,nisMapEntry            eq,pres,sub


overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100

# Global section
serverID    2
# database section

# syncrepl directive
syncrepl        rid=001
                provider=ldap://192.168.11.215
                bindmethod=simple
                binddn="cn=admin,dc=domain-indonesia,dc=com"
                credentials=domainldap
                searchbase="dc=domain-indonesia,dc=com"
                schemachecking=on
                type=refreshAndPersist
                retry="60 +"
mirrormode on

[user@server2 ~]$

debug:

sudo /usr/local/openldap2.4/libexec/slapd -h ldap:/// -u ldap -f /usr/local/openldap2.4/etc/openldap/slapd.conf -d -1

search:

sudo /usr/local/openldap2.4/bin/ldapsearch -x

add:

sudo /usr/local/openldap2.4/bin/ldapadd -x -D "cn=admin,dc=domain-indonesia,dc=com" -f /home/user/tes2.ldif -W

delete:

sudo /usr/local/openldap2.4/bin/ldapdelete -D "cn=admin,dc=domain-indonesia,dc=com" -w domainldap "dc=domain-indonesia,dc=com" "ou=Barat,dc=domain-indonesia,dc=com"

Cara mengujinya dengan mengaktifkan ke dua server dalam keadaan debug mode agar terlihat log errornya, lalu tambahkan data di server1 misalnya, terus cek di server 2 apakah automatis terupdate. Jika sudah terupdate lakukan hal yang sama dengan server 2. Seharusnya ke dua server akan tetap sinkronise jika ditambahkan dari kedua nya.

semoga membantu :)

referensi:

bacaan menarik: http://www.centos.org/docs/5/html/CDS/ag/8.0/Managing_Replication-Replication_Scenarios.html

How to kill windows process and integrated with nagios using Nsclient++ on Gnu/Linux

2010-07-29T00:00:00+07:00

Nagios : a powerful monitoring system that enables organizations to identify and resolve IT infrastructure problems before they affect critical business processes.

NRPE addon for Nagios : an addon that allows you to execute plugins on remote Linux/Unix hosts. This is useful if you need to monitor local resources/attributes like disk usage, CPU load, memory usage, etc. on a remote host.

Nsclient++ : NSClient++ (or nscp as I tend to call it nowadays) aims to be a simple yet powerful and secure monitoring daemon for Windows operating systems. on Nsclient++ we can run nrpe handler too.

How windows process work ?

Each process provides the resources needed to execute a program. A process has a virtual address space, executable code, open handles to system objects, a security context, a unique process identifier, environment variables, a priority class, minimum and maximum working set sizes, and at least one thread of execution. Each process is started with a single thread, often called the primary thread, but can create additional threads from any of its threads.

A thread is the entity within a process that can be scheduled for execution. All threads of a process share its virtual address space and system resources. In addition, each thread maintains exception handlers, a scheduling priority, thread local storage, a unique thread identifier, and a set of structures the system will use to save the thread context until it is scheduled. The thread context includes the thread’s set of machine registers, the kernel stack, a thread environment block, and a user stack in the address space of the thread’s process. Threads can also have their own security context, which can be used for impersonating clients.

How to kill windows process using own windows application ?

Processes can be ended by process ID or image name. Taskkill replaces the kill tool same as on Gnu/Linux environment.

And last, How NRPE can kill windows process via Nagios on Gnu/Linux host monitoring ?

First, NRPE Plugin will check daemon of NRPE/Nsclient++ on windows machine. And then, if command argument handler allow to execute on local script windows/taskkill command, it will be executed. on this case, local script windows using wmi script. And Second, make interface using php shell exec to run kill command via web base nagios that integrated it.

Prepare.

Install Nagios on your host monitoring.
Download and install NRPE plugin. monitoringexchange.org
Download and install Nsclient++ on your remote monitoring. download here you can see my Nsclient++ conf on here to walk out of this experiment. or u just added nrpe handler below:

[NRPE Handlers]
command[show_os]=cscript.exe //nologo //T:60 C:\wmi-1.3\verify_wmi_status.vbs -h "$ARG1$"
command[kill_procs]=C:\WINDOWS\system32\taskkill.exe /S 127.0.0.1 /IM "$ARG1$" /F
command[show_procs]=cscript.exe //nologo //T:60 C:\wmi-1.3\get_computer_info.vbs -h "$ARG1$" -i running_processes

Download and put this wmi agents plugin to C:. download here

PoC

Let me see

C:\Documents and Settings\alinux>tasklist

Image Name                   PID Session Name     Session#    Mem Usage
========================= ====== ================ ======== ============
System                         4 Console                 0         36 K
SMSS.EXE                     424 Console                 0         32 K
CSRSS.EXE                    572 Console                 0      2,164 K
WINLOGON.EXE                 596 Console                 0      1,796 K
SERVICES.EXE                 748 Console                 0      1,336 K
LSASS.EXE                    760 Console                 0      1,736 K
VBoxService.exe              916 Console                 0        808 K
SVCHOST.EXE                  928 Console                 0      1,616 K
SVCHOST.EXE                 1012 Console                 0      1,364 K
SVCHOST.EXE                 1132 Console                 0      8,008 K
SVCHOST.EXE                 1228 Console                 0        920 K
SVCHOST.EXE                 1380 Console                 0        588 K
SPOOLSV.EXE                 1512 Console                 0      4,972 K
ALG.EXE                      432 Console                 0        228 K
EXPLORER.EXE                1852 Console                 0     16,072 K
VBoxTray.exe                1928 Console                 0        332 K
GrooveMonitor.exe           1936 Console                 0      1,760 K
CTFMON.EXE                  1948 Console                 0        652 K
cmd.exe                     1056 Console                 0        796 K
openvpn-gui-1.0.3.exe       1124 Console                 0        240 K
firefox.exe                 1784 Console                 0     17,652 K
SVCHOST.EXE                 1080 Console                 0      1,948 K
tasklist.exe                1616 Console                 0      4,340 K
wmiprvse.exe                 688 Console                 0      5,528 K

C:\Documents and Settings\alinux>taskkill /IM firefox.exe
SUCCESS: The process "firefox.exe" with PID 1784 has been terminated.

C:\Documents and Settings\alinux>

Now, assumsed your Nagios and Nsclient++ works properly.

Nagios

alinux@denbaguse:/usr/src/nrpe-2.0/src$ sudo /etc/init.d/nagios status
checking /usr/sbin/nagios...done (running).
alinux@denbaguse:/usr/src/nrpe-2.0/src$

Nsclient++

C:\Program Files\NSClient++>netstat -a

Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    de-89f18a389752:epmap  de-89f18a389752:0      LISTENING
  TCP    de-89f18a389752:microsoft-ds  de-89f18a389752:0      LISTENING
  TCP    de-89f18a389752:3389   de-89f18a389752:0      LISTENING
  TCP    de-89f18a389752:5666   de-89f18a389752:0      LISTENING
  TCP    de-89f18a389752:12489  de-89f18a389752:0      LISTENING
  TCP    de-89f18a389752:1026   de-89f18a389752:0      LISTENING
  TCP    de-89f18a389752:netbios-ssn  de-89f18a389752:0      LISTENING

Nsclient using port 12489 and NRPE using port 5666.

Check NRPE handler command on windows machine

C:\Program Files\NSClient++>cscript.exe //nologo //T:60 C:\wmi-1.3\verify_wmi_status.vbs -h 192.168.0.3
OK - Microsoft Windows XP Professional, SP 2.0

C:\Program Files\NSClient++>

Check NRPE handler command on host monitoring

alinux@denbaguse:/usr/src/nrpe-2.0/src$ ./check_nrpe -H 192.168.0.3 -c show_os -a 192.168.0.3
OK - Microsoft Windows XP Professional, SP 2.0
alinux@denbaguse:/usr/src/nrpe-2.0/src$

Ok, sounds like good. Now, test kill process of nrpe handler command:

on host monitoring

on example, i was killing notepad.exe process.

alinux@denbaguse:/usr/src/nrpe-2.0/src$ ./check_nrpe -H 192.168.0.3 -c kill_procs -a notepad.exe
SUCCESS: The process "NOTEPAD.EXE" with PID 1464 has been terminated.
SUCCESS: The process "NOTEPAD.EXE" with PID 708 has been terminated.
SUCCESS: The process "NOTEPAD.EXE" with PID 1972 has been terminated.
alinux@denbaguse:/usr/src/nrpe-2.0/src$

all process by name notepad.exe would be killed. you can terminate/kill process by pid.

Integrating with nagios.

by doing check command line use check_nrpe :

alinux@denbaguse:/usr/src/nrpe-2.0/src$ ./check_nrpe -H 192.168.0.3 -c show_procs -a 192.168.0.3
Host name: 192.168.0.3; Running Processes: System Idle Process, System, SMSS.EXE, CSRSS.EXE, WINLOGON.EXE, SERVICES.EXE, LSASS.EXE,
VBoxService.exe, SVCHOST.EXE, SVCHOST.EXE, SVCHOST.EXE, SVCHOST.EXE, SVCHOST.EXE, SPOOLSV.EXE, ALG.EXE, EXPLORER.EXE, VBoxTray.exe,
GrooveMonitor.exe, CTFMON.EXE, cmd.exe, openvpn-gui-1.0.3.exe, SVCHOST.EXE, NOTEPAD.EXE, nsclient++.exe, cscript.exe, wmiprvse.exe,
alinux@denbaguse:/usr/src/nrpe-2.0/src$

k, lets begin to php code

<?php

//catch
$host = $_GET["ip"];
$IM = $_GET["im"];
$config = $_GET["conf"];

//filter process name
if($IM == ""){
$killer = "";
}
else if($IM !== "" && $host == "172.16.0.35") {
echo "<script>alert('sorry u cant kill anything process on this host :P')</script>";
}
else {
$killer = '/usr/src/nrpe-2.0/src/check_nrpe -H '.$host.' -c kill_procs -a '.
$IM;
}

//executor kill process
$output = shell_exec($killer);


//filter host
if($host == ""){
$show_proses = "";
} else {
$show_proses = '/usr/src/nrpe-2.0/src/check_nrpe -H '.$host.' -c show_procs -a 127.0.0.1';
}

//executor show process
$show_procs = shell_exec($show_proses);


//filter config

if($config == "1"){
$run_config = '/usr/src/nrpe-2.0/src/check_nrpe -H '.$host.' -c update_config';
}
else if ($config == ""){
$run_config = "";
}
else {

echo "<script>alert('config value isnt valid')</script>";

}

//executor update config
$update_config = shell_exec($run_config);
?>
<!--
simply process killer using nrpe
pure coding php :lol:
-->

<?php
echo "<b>Process on $host</b>:<br> ";
echo "<pre>$output</pre><br/>";
//echo "$show_procs<br/>";

$explode = explode(", ",$show_procs);
for($i=0; $i<(count($explode));$i++){
echo "<a href=\"index.php?ip=".$host."&im=".$explode[$i]."\">".$explode[$i]."</a> ";
}

echo "<pre>$update_config</pre>";
?>


<form method="get" action="index.php">
Host:
<br><input type="text" name="ip" value="<?php echo "$host";?>"></input>
<br/>Update Config NSC<br/>
<select name="conf">
<option value="">No</option>
<option value="1">Yes</option>
</select>

<!-- <input type="text" name="conf2" value=""></input>
-->
<br/><input type="submit" value="Show">
</form>
<br/>
<a href="index.php">refresh page</a><br/>

save as index.php and put on your own directory (on example: /usr/local/www/killer/index.php )

Last thing

just add new link on your side frame nagios webase this html code:

<tr>                                                    
    <td width=13><img src="images/greendot.gif" width="13" height="14" name="tac-dot"></td>
    <td nowrap width=134><a href="/apache2-default/index.php" target="main" onMouseOver="switchdot('tac-dot',1)"
onMouseOut="switchdot('tac-dot',0)" class="NavBarItem">Process Killer</a></td>                                                           
</tr>

Results: look at here

Reference:

nagios.org
monitor exchange dot org
microsoft.com
technet.microsoft.com
msdn.microsoft.com
sf.net
monitoringforge.org

Thanks to:

Alit for reference idea.
Marion for explode function
last thanks to netzerospace for took my code again.

this document specially for development of network monitoring of streetdirectory id office and i’ve tried on debian and freebsd machine for this experiment and successfully :)
happy sysadmin day and happy jobless

created: djayakarta, finished: djogjakarta 30 July 2010

Upgrade ClamAV di Debian Etch dengan backports

2010-07-14T10:52:53+07:00

Bermula dari ketidakberesan clamdscan membuat simscan tidak berjalan sebagaimana mestinya. Usul usul punya usul ternyata setelah dicek memang benar clamdscan tidak berjalan secara normal.

denbaguse:/home/deanet# clamdscan mailtest.txt 
connect(): No such file or directory           
WARNING: Can't connect to clamd.               

----------- SCAN SUMMARY -----------
Infected files: 0                   
Time: 0.001 sec (0 m 0 s)           
denbaguse:/home/deanet#

Setelah dipusingkan dengan beberapa daemon dan proses. Alhasil dicek di configurasi nya /etc/clamav/clamd.conf. Dan stelah dicek beberapa pid ternyata ada yang janggal.

denbaguse:/home/deanet# ls -al /var/run/clamav/                                                                                   
total 12                                                                                                                          
drwxr-xr-x 2 clamav clamav 4096 2010-06-21 12:15 .                                                                                
drwxr-xr-x 9 root   root   4096 2010-06-19 09:30 ..                                                                               
-rw-rw---- 1 clamav clamav    5 2010-06-21 12:15 freshclam.pid

Lha??? kemana pid dari clamav-daemon ?

Menyelidiki kasus tersebut

denbaguse:/home/deanet# dpkg -l clamav                        
Desired=Unknown/Install/Remove/Purge/Hold                     
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name                Version             Description                        
+++-===================-===================-======================================================
ii  clamav              0.90.1dfsg-4etch19  antivirus scanner for Unix

Ternyata versi nya sudah sangat old. tambahkan repository list backports:

denbaguse:/home/deanet# vim /etc/apt/sources.list

Update repo,

denbaguse:/home/deanet# apt-get update
Get:1 http://backports.mithril-linux.org etch-backports Release.gpg [189B]
Get:2 http://backports.mithril-linux.org etch-backports Release [72.9kB]
Get:3 http://backports.mithril-linux.org etch-backports/main Packages [561kB]
Get:4 http://backports.mithril-linux.org etch-backports/contrib Packages [2631B]
Get:5 http://backports.mithril-linux.org etch-backports/non-free Packages [5785B]
Fetched 643kB in 43s (14.9kB/s)
Reading package lists... Done
denbaguse:/home/deanet#

Jalankan untuk upgrade clamAV

apt-get upgrade clamav clamav-daemon clamav-freshclam

Test:

denbaguse:/home/deanet# clamdscan mailtest.txt
/home/deanet/mailtest.txt: OK

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.251 sec (0 m 0 s)
denbaguse:/home/deanet# ls -al /var/run/clamav/
total 16
drwxr-xr-x 2 clamav clamav 4096 2010-06-21 13:21 .
drwxr-xr-x 9 root   root   4096 2010-06-21 13:20 ..
srwxrwxrwx 1 clamav clamav    0 2010-06-21 13:21 clamd.ctl
-rw-rw-r-- 1 clamav clamav    5 2010-06-21 13:21 clamd.pid
-rw-rw-r-- 1 clamav clamav    5 2010-06-21 13:35 freshclam.pid
denbaguse:/home/deanet#

semoga membantu :)

Installasi Qmail, Vpopmail, ClamAV, Simscan, Spamassasin di Debian Etch

2010-06-30T05:52:53+07:00

Muqadimah

Qmail = Mail Transfer Agent. Modern SMTP server. Dapat dijalankan di RH,Debian, HP-UX,Gentoo, OpenBSD. lihat cara kerja qmail

Vpopmail = POP3 server. Manejemen akun email dengan virtual email domain, dapat dijalankan di qmail atau Postfix mail server. Disini memakai mysql sebagai back-end nya.

Simscan = Simcan digunakan untuk menolak email yang kemungkinan berisi spam,virus,ataupun attachments file.

chkuser = anti-SPAM features.

ClamAV = Anti Virus.

SpamAssassin = Anti Spam.

Persiapan

semua dijalankan dengan user root

Setting repository:

deb http://ftp.debian.org/debian/ etch main contrib non-free
deb-src http://ftp.debian.org/debian/ etch main contrib non-free
deb     http://debian.iuculano.it/apt  etch main contrib non-free
deb-src http://debian.iuculano.it/apt  etch main contrib non-free

tambahkan key public:

# wget http://debian.iuculano.it/AE3BE9AA.gpg -O- | apt-key add -

lalu jalankan apt-get update

Install mysql server

Install mysql server lalu buat database dengan nama vpopmail terus kasih grant.

# apt-get install mysql-server

jangan lupa rubah password root mysql

# mysqladmin -u root password passwordbaru

bikin database vpopmail

mysql> create database vpopmail;
mysql> grant all privileges on vpopmail.* to 'vpopmail'@'localhost' identified by 'vpopmail123' with grant option;

Install `dpatch`, `recode`, dan `telnet`.

dpatch digunakan untuk build qmail, recode digunakan untuk generate passwd base64, dan telnet ya tentu saja untuk remote client :).

# apt-get install dpatch recode telnet

Installasi Qmail

Cek dulu ada MTA laen gak ? .. kalo ada remove segera, contoh: exim.

# apt-get remove exim4 exim4-base exim4-config exim4-daemon-light

jika exim susah dibuang, jalankan perintah ini:

# dpkg --force-depends --purge exim4 exim4-base exim4-config exim4-daemon-light

Kalo sudah terus install qmailna:

# apt-get install qmail-src spamassassin vpopmail-mysql spamc razor pyzor ucspi-tcp-src libmailtools-perl libmail-spf-query-perl libsys-hostname-long-perl

jika ada error:

stat /usr/bin/tcpserver: No such file or directory

ini karena kita install ucspi-tcp, build saja ucspi-tcp nya:

# build-ucspi-tcp

terus build qmail:

# build-qmail

Konfig `qmail`

set hostname mail servernya:

echo "mail.denbaguse.ta" > /etc/qmail/me

Konfig Vpopmail

set username mysql sama password untuk vpopmail

# vim /etc/vpopmail/vpopmail.mysql
	localhost|0|root|passwordbaru|vpopmail

Jalankan service

Jalankan qmail nya dan pop3 server atau vpopmail nya

# /etc/init.d/qmail start
# /etc/init.d/vpopmail-mysql start

Test

Menambahkan domain dan email address

denbaguse:/home/alinux# vadddomain testaja.lg
Please enter password for postmaster:        
enter password again:

domain: testaja.lg passwd: testaja

Encrypt email address dan password ke dalam format base64

email address:

denbaguse:/home/alinux# echo -en "postmaster@testaja.lg" | recode data..base64
cG9zdG1hc3RlckB0ZXN0YWphLmxn

password:

denbaguse:/home/alinux# echo -en "testaja" | recode data..base64              
dGVzdGFqYQ==

Jalankan tail -f /var/log/syslog

Test SMTP server

denbaguse:/home/alinux# telnet localhost 25              
Trying 127.0.0.1...                                      
Connected to localhost.
Escape character is '^]'.
220 mail.denbaguse.ta ESMTP
AUTH LOGIN
334 VXNlcm5hbWU6
cG9zdG1hc3RlckB0ZXN0YWphLmxn
334 UGFzc3dvcmQ6
dGVzdGFqYQ==
235 ok, postmaster@testaja.lg, go ahead (#2.0.0)
mail from: test@testaja.com
250 ok
RCPT TO: postmaster@testaja.lg
250 ok
DATA
354 go ahead
halooooo
.
250 ok 1276913544 qp 13750
quit
221 mail.denbaguse.ta
Connection closed by foreign host.

hasil tail:

Jun 19 09:12:14 denbaguse qmail: 1276913534.111443 CHKUSER accepted any rcpt: from <test@testaja.com:postmaster@testaja.lg:> remote
<:unknown:127.0.0.1> rcpt <postmaster@testaja.lg> : accepted any recipient for any rcpt domain                                           
Jun 19 09:12:14 denbaguse qmail: 1276913534.111512 qmail-smtpd: pid 13748 RCPT TO: <postmaster@testaja.lg>                               
Jun 19 09:12:24 denbaguse qmail: 1276913544.622077 new msg 78833                                       
Jun 19 09:12:24 denbaguse qmail: 1276913544.622156 info msg 78833: bytes 190 from <test@testaja.com> qp 13750 uid 0                                          Jun 19 09:12:24 denbaguse qmail: 1276913544.622856 starting delivery 1: msg 78833 to local testaja.lg-postmaster@testaja.lg              
Jun 19 09:12:24 denbaguse qmail: 1276913544.622892 status: local 1/10 remote 0/20                      
Jun 19 09:12:24 denbaguse qmail: 1276913544.684768 delivery 1: success: did_0+0+1/                     
Jun 19 09:12:24 denbaguse qmail: 1276913544.684860 status: local 0/10 remote 0/20                      
Jun 19 09:12:24 denbaguse qmail: 1276913544.684911 end msg 78833

Isi email:

denbaguse:/home/alinux# cat /var/lib/vpopmail/domains/testaja.lg/postmaster/Maildir/new/1276913544.13752.denbaguse\,S\=258
Return-Path: <test@testaja.com>
Delivered-To: postmaster@testaja.lg
Received: (qmail 13750 invoked by uid 0); 19 Jun 2010 09:12:20 +0700
Received: from unknown (postmaster@testaja.lg@127.0.0.1)
by 127.0.0.1 with ESMTPA; 19 Jun 2010 09:12:20 +0700
halooooo
denbaguse:/home/alinux#

Test POP3

denbaguse:/home/alinux# telnet localhost pop3
Trying 127.0.0.1...                          
Connected to localhost.                      
Escape character is '^]'.                    
+OK <21325.1277029415@denbaguse.ta>          
USER postmaster@testaja.lg
+OK
PASS testaja
+OK
LIST
+OK
1 258
2 267
.
RETR 1
+OK 258 octets
Return-Path: <test@testaja.com>
Delivered-To: postmaster@testaja.lg
Received: (qmail 13750 invoked by uid 0); 19 Jun 2010 09:12:20 +0700
Received: from unknown (postmaster@testaja.lg@127.0.0.1)
by 127.0.0.1 with ESMTPA; 19 Jun 2010 09:12:20 +0700
halooooo
.
quit
+OK
Connection closed by foreign host.
denbaguse:/home/alinux#

Test chkuser

denbaguse:/home/alinux# telnet localhost 25
Trying 127.0.0.1...                        
Connected to localhost.
Escape character is '^]'.
220 mail.denbaguse.ta ESMTP
EHLO
250-mail.denbaguse.ta
250-PIPELINING
250-8BITMIME
250-SIZE 0
250 AUTH LOGIN PLAIN CRAM-MD5
mail from: test@asd.tett
550 5.1.8 sorry, can't find a valid MX for sender domain (chkuser)
mail from: test@test.com
250 ok
rcpt to: test@tests.tstt
553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)
rcpt to: test@test.bogus
550 5.1.1 sorry, no mailbox here by that name (chkuser)
RSET
250 flushed
quit
221 mail.denbaguse.ta
Connection closed by foreign host.
denbaguse:/home/alinux#

Instal Simscan

# apt-get install qmailadmin autorespond ezmlm-src clamav clamav-daemon clamav-freshclam ripmime
# build-ezmlm
# wget http://downloads.sourceforge.net/simscan/simscan-1.4.0.tar.gz
# tar -xzvf simscan-1.4.0.tar.gz 
# cd simscan-1.4.0
# wget http://qmail.jms1.net/simscan/simscan-1.4.0-clamav.3.patch
# cat simscan-1.4.0-clamav.3.patch | patch -p1
# ./configure --enable-user=clamav --enable-clamav=y --enable-custom-smtp-reject=y --enable-attach=y --enable-spam=y
	--enable-spam-hits=14 --enable-spamc-user=y --enable-received=y --enable-clamavdb-path=/var/lib/clamav --enable-spam-auth-user=n
	--enable-quarantinedir=/var/qmail/quarantine
# make
# make install

aktifkan qmail simscan:

# vim /etc/init.d/qmail 
QMAILQUEUE="/var/qmail/bin/simscan"
export QMAILQUEUE

Restart qmail:

# /etc/init.d/qmail restart

Test simscan

denbaguse:/home/alinux# echo "test aja" > mailtest.txt
denbaguse:/home/alinux# env QMAILQUEUE=/var/qmail/bin/simscan SIMSCAN_DEBUG=2 /var/qmail/bin/qmail-inject postmaster@testaja.lg <
mailtest.txt
simscan: starting: work dir: /var/qmail/simscan/1277102187.556394.25609
simscan: calling clamdscan
simscan: cdb looking up version clamav
simscan: normal clamdscan return code: 0
simscan: calling spamc
simscan: calling /usr/bin/spamc  spamc -u postmaster@testaja.lg
simscan: cdb looking up version spam
simscan:[25608]:CLEAN (0.00/0.00):3.3011s::(null):root@mail.denbaguse.ta:postmaster@testaja.lg
simscan: done, execing qmail-queue
simscan: qmail-queue exited 0
denbaguse:/home/alinux#

Konfig Relay tcpserver

buka file /etc/tcp.smtp lalu isi sesuai dengan kebutuhan:

# vim /etc/tcp.smtp
127.0.0.1:allow,RELAYCLIENT=""
192.168.0.177:allow,CHKUSER_RCPTLIMIT="15",CHKUSER_WRONGRCPTLIMIT="3",QMAILQUEUE="/var/qmail/bin/simscan"
:deny

Semua host digagalkan kecuali host localhost dan host 192.168.0.177. Save lalu run /etc/init.d/qmail cdb terus restart /etc/init.d/qmail restart

test di localhost:

denbaguse:/etc/qmail# telnet localhost 25
Trying 127.0.0.1...                      
Connected to localhost.                  
Escape character is '^]'.                
220 mail.denbaguse.ta ESMTP              
quit                                     
221 mail.denbaguse.ta                    
Connection closed by foreign host.       
denbaguse:/etc/qmail#

test di ip 192.168.0.177:

alinux@debian:~$ telnet 192.168.0.5 25
Trying 192.168.0.5...
Connected to 192.168.0.5.
Escape character is '^]'.
220 mail.denbaguse.ta ESMTP
quit
221 mail.denbaguse.ta
Connection closed by foreign host.
alinux@debian:~$ cd /home/alinux/alinux/
alinux@debian:~/alinux$

test di host laen:

alinux@ajisaka:~$ telnet 192.168.0.5 25
Trying 192.168.0.5...
Connected to 192.168.0.5.
Escape character is '^]'.
Connection closed by foreign host.
alinux@ajisaka:~$

Test SpamAssassin

alinux@debian:~$ telnet 192.168.0.5 25                      
Trying 192.168.0.5...                                       
Connected to 192.168.0.5.                                   
Escape character is '^]'.                                   
220 mail.denbaguse.ta ESMTP                                 
EHLO                                                        
250-mail.denbaguse.ta                                       
250-PIPELINING                                              
250-8BITMIME                                                
250-SIZE 0                                                  
250 AUTH LOGIN PLAIN CRAM-MD5                               
MAIL                                                        
250 ok                                                      
RCPT TO: alinux@testaja.lg                                  
250 ok                                                      
DATA                                                        
354 go ahead                                                
Congratulations! You have been selected to receive 2 FREE 2 Day VIP Passes to
Universal Studios!

Click here http://209.61.190.180

As an added bonus you will also be registered to receive vacations discounted 25%-
75%!


@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
his mailing is done by an independent marketing co.
We apologize if this message has reached you in error.
Save the Planet, Save the Trees! Advertise via E mail.
No wasted paper! Delete with one simple keystroke!
Less refuse in our Dumps! This is the new way of the new millennium
To be removed please reply back with the word "remove" in the subject line.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
.
quit
250 ok 1277148214 qp 11685
221 mail.denbaguse.ta
Connection closed by foreign host.
alinux@debian:~$

Cek header email spamAssassin:

denbaguse:~# cat mail/1277148214.11693.denbaguse\,S\=3160 
Return-Path: <>                                           
Delivered-To: alinux@testaja.lg                           
Received: (qmail 11691 invoked by uid 0); 22 Jun 2010 02:23:34 +0700
Received: by simscan 1.4.0 ppid: 11684, pid: 11685, t: 11.5012s                
 scanners: clamav: 0.95.2/m:52/d:11242 spam: 3.2.5                     
Received: from localhost by denbaguse.ta                                       
        with SpamAssassin (version 3.2.5);                                     
        Tue, 22 Jun 2010 02:23:34 +0700                                        
X-Spam-Flag: YES                                                               
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on denbaguse.ta        
X-Spam-Level: *****                                                            
X-Spam-Status: Yes, score=5.9 required=5.0 tests=ALL_TRUSTED,EXCUSE_4,         
MISSING_DATE,MISSING_HB_SEP,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,
   NORMAL_HTTP_TO_IP autolearn=no version=3.2.5                            
MIME-Version: 1.0                                                               
Content-Type: multipart/mixed; boundary="----------=_4C1FBC36.2B3B6E49"         
	This is a multi-part message in MIME format.

------------=_4C1FBC36.2B3B6E49
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline                 
Content-Transfer-Encoding: 8bit             
Spam detection software, running on the system "denbaguse.ta", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see                   
the administrator of that system for details.                           
	Content preview:  Congratulations! You have been selected to receive 2 FREE
	2 Day VIP Passes to Universal Studios! Click here http://209.61.190.180 As
	an added bonus you will also be registered to receive vacations discounted
	25%- 75%! [...]                                                           
Content analysis details:   (5.9 points, 5.0 required)
 pts rule name              description
---- ---------------------- --------------------------------------------------
-1.4 ALL_TRUSTED            Passed through trusted hosts only via SMTP        
 0.0 MISSING_MID            Missing Message-Id: header                        
 0.0 MISSING_DATE           Missing Date: header                              
 2.5 MISSING_HB_SEP         Missing blank line between message header and body
 1.6 MISSING_HEADERS        Missing To: header                                
 1.9 EXCUSE_4               BODY: Claims you can be removed from the list     
 0.0 NORMAL_HTTP_TO_IP      URI: Uses a dotted-decimal IP address in URL      
 1.3 MISSING_SUBJECT        Missing Subject: header                           

	------------=_4C1FBC36.2B3B6E49
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline                              
Content-Transfer-Encoding: 8bit                          

Received: from unknown (HELO ) (192.168.0.177)
  by 192.168.0.5 with SMTP; 22 Jun 2010 02:23:22 +0700
Congratulations! You have been selected to receive 2 FREE 2 Day VIP Passes to
Universal Studios!

Click here http://209.61.190.180

As an added bonus you will also be registered to receive vacations discounted 25%-
75%!


@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
This mailing is done by an independent marketing co.
We apologize if this message has reached you in error.
Save the Planet, Save the Trees! Advertise via E mail.
No wasted paper! Delete with one simple keystroke!
Less refuse in our Dumps! This is the new way of the new millennium
To be removed please reply back with the word "remove" in the subject line.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

------------=_4C1FBC36.2B3B6E49--

denbaguse:~#

Test Clamav

denbaguse:~# clamdscan test
WARNING: Can't access file /root/test
/root/test: OK
----------- SCAN SUMMARY -----------
Infected files: 0
Time: 0.011 sec (0 m 0 s)
denbaguse:~#

Referensi:

http://wiki.debian.iuculano.it/quick_howto
http://www.qmailwiki.org/index.php/Simscan
http://www.qmailwiki.org/SimScanTips
http://wiki.apache.org/spamassassin/UsingPyzor
http://commons.oreilly.com
http://old.nabble.com

Mengatasi no public key available di apt debian

2010-06-23T10:52:53+07:00

Sekedar catatan pribadi saja sih, sering mendapatkan warning no public key available ketika menjalankan apt-get di debian.

W: There is no public key available for the following key IDs:
9AA38DCD55BE302B
W: You may want to run apt-get update to correct these problems

solusinya:

Dengan menjalankan gpg --keyserver wwwkeys.eu.pgp.net --recv-keys 9AA38DCD55BE302B. Dimana key 9AA38DCD55BE302B adalah key yg untrusted.

denbaguse:/home/alinux# gpg --keyserver wwwkeys.eu.pgp.net --recv-keys 9AA38DCD55BE302B
gpg: directory `/root/.gnupg' created
gpg: can't open `/gnupg/options.skel': No such file or directory
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: requesting key 55BE302B from hkp server wwwkeys.eu.pgp.net
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 55BE302B: public key "Debian Archive Automatic Signing Key (5.0/lenny) <ftpmaster@debian.org>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)

Lalu menambahkan key yang baru saja dibuat dengan apt-key add pada list key.

denbaguse:/home/alinux# apt-key add /root/.gnupg/pubring.gpg
OK
denbaguse:/home/alinux#

lalu jalankan kembali apt-get, insya Allah warning tidak akan muncul lagi. Dan untuk melihat list key trusted bisa dengan perintah:

# apt-key list

Referensi: http://wiki.debian.org/SecureApt

semoga membantu :)

Compile Kernel VS Patch Kernel on Gnu/Linux

2010-06-15T19:43:06+07:00

2 years ago first time i’m playing with compile kernel, no documented of the one as well. And some months ago i’ve been stuck with bluetooth device. Since i’ve upgrade my kernel Slackware to be 2.6.33, bluetooth device cannot scaning device correctly. Then i try to rollback with old kernel, bom ! .. scanning succesfuly results of other bluetooth device. Now, i’ve two option: compile same kernel again and enable hci bluetooth driver, or compile with highest kernel using source or patching kernel to get highest kernel version :).

Compile Kernel.

Upgrade kernel via compail kernel used when you need new modules of hardware which can’t detect on your current kernel. So, to upgrade kernel via compail kernel, you just get new version kernel, compail the module kernel, and reboot. One thing when you reboot and you got kernel panic, you could rollback using old kernel backup.

Patch Kernel

Patch kernel used when you found bug of your module as used or to upgrade your current kernel into highest kernel. Best practice patching kernel needed which you don’t download all of source kernel to update your version kernel or keep update of kernel bugs. See difference of patch release bug on changelog file.

on with conditions, when you need upgrade kernel, you must choose efective option. an example:

My current kernel is 2.6.29.6
I want to upgrading kernel into highest kernel ( example 2.6.35-rc3)
I’ve source kernel 2.6.34 as before.

So, there are many ways:

Get source linux kernel 2.6.35-rc3, and compile it.
Get patch file 2.6.35-rc3 and apply on source kernel 2.6.34, and compile it.
Patch source current kernel using:

patch file 2.6.29.6
then using patch file 2.6.30
patch file 2.6.31
patch file 2.6.32
patch file 2.6.33
patch file 2.6.34
patch file 2.6.35-rc3

So, because i’ve source kernel 2.6.34, i’m just only need patch 2.6.35-rc3:

before:

root@darkstar:/usr/src/linux# uname -a
Linux darkstar 2.6.29.6-smp #2 SMP Mon Aug 17 00:52:54 CDT 2009 i686 Intel(R) Core(TM)2 Duo CPU     T7100  @ 1.80GHz GenuineIntel
GNU/Linux
root@darkstar:/usr/src/linux#

after:

root@darkstar:/usr/src/linux# uname -a
Linux ajisaka 2.6.35-rc3rajab #2 SMP PREEMPT Sun Jun 13 22:08:59 WIT 2010 i686 Intel(R) Core(TM)2 Duo CPU     T7100  @ 1.80GHz
GenuineIntel GNU/Linux
root@darkstar:/usr/src/linux#

update

19 Juni 2010

citsit step compail kernel

make dep
make clean
make menuconfig
make
make bzImage
make modules
make modules_install
make install

cause i’ve found bug of prtscr and pause break keys which make kernel panic :))

Your own risk && please dont use rc(release candidat) version unless you know what are u doing

hereis logfile

Jun 17 21:03:45 ajisaka kernel: SysRq : HELP : loglevel(0-9) reBoot Crash terminate-all-tasks(E) memory-full-oom-kill(F) kill-all-tasks(I) thaw-filesystems(J
) saK show-backtrace-all-active-cpus(L) show-memory-usage(M) nice-all-RT-tasks(N) powerOff show-registers(P) show-all-timers(Q) unRaw Sync show-task-states(T
) Unmount show-blocked-tasks(W)

now, i must downgrade kernel, but i lazy boy .. ;p i was using travelmate 6292 running on slackware with custom config kernel.

semoga bermanfaat :)

Server was moved, and say goodbye to Wordpress

2010-05-26T02:51:03+07:00

Goodbye wordpress, welcome Jekyll.

Yeahh.. i really did this …
I’ve spent time 2 days to understanding Jekyll, and almost four weeks which i’ve full coding on Jekyll and migration from wordpress. Jekyll is ruby framework web generator static. It’s very wonderfull when u just need write documentation on your site. No database, no high pageload, simple editor using vim editor or others terminal editor, and just quick to push;).

Many ruby framework generator static like Jekyll, there are blorgit, rassmalog, etc. By using Jekyll u can use as on wordpress, highlight code using python-pigments, simple post using markdown convert text to HTML, editting on terminal editor, and at last you might try git solution. Git will update your post when you push on your repository, jekyll will generate automatically on github repository. Look at github.com if you interested to use git.

I can’t explain anymore about this migration because i;m not expert or advanced of ruby programming. Of course,.. you can bit the code of my site or repository on my Github account.

and at last ..

Might be you interested and you can start from this and this.

Happy Coding ;)

Limited Upload max on your own directory apache

2010-04-28T04:00:04+07:00

Apache is one powerfull web server most used on cyber world. So many module to configuring as you want. One of them called mod_php. Sometimes we need different value of php main configuration. An example, on php main configuration we’ve added upload max 5M. So, you want a directory have different to upload more 5 M, example: 100M. So just add to your own directory directive:

<Directory /usr/local/www/upload>
php_value upload_max_filesize 100M
php_value post_max_size 100M
php_value max_execution_time 200
php_value max_input_time 200
</Directory>

semoga membantu.. :)

ref: http://php.net/manual/en/configuration.changes.php

Cara membuat system FreeBSD 7.2 / 8.0 release ke stable pasca installasi

2010-04-23T23:00:04+07:00

Jika pada postingan sebelumnya kita memasang / installasi FreeBSD. Maka pada kesempatan kali ini saya akan berbagi mengenai membuat system FreeBSD stable setelah atau pasca installasi. Tutorial ini sebenernya sudah komplit dijelaskan temen-temen forum.linux.or.id . Namun ada sedikit perbedaan dengan yang saya jalanin dengan tutorial di forum. Selain itu saya juga ingin cara dengan cara yang saya lakukan sendiri.

Untuk installasinya bisa dilihat pada postingan sebelumnya. Setelah installasi sukses sekarang kita coba inti judul post ini. oiya kita menggunakan cvsup untuk update port. Port itu semacam /var/cache/apt/archive kalo d debian base.

1. Install cvsup dan utiliti cvsup

# cd /usr/ports/net/cvsup-without-gui; make install clean
# cd /usr/ports/sysutils/fastest_cvsup; make install clean

2. lalu jalankan command dibawah untuk mencari server yang tercepat

# fastest_cvsup -c sg,tw,jp

3. setelah didapatkan server yang tercepat, masukan ke dalam port-sup file ( `/usr/share/examples/cvsup/ports-supfile` ). Jangan lupa baca2 dulu keterangan didalam file tersebut dan bikin salinannnya.

# cp /usr/share/examples/cvsup/ports-supfile /root/

contoh file ports-supfile (hanya port saja). maksudnya jika system kita ndak ingin update ke stable. jadi cuman update portnya aj. kenapa diupdate ? karena kemungkinan ada bug dalam distribusi paket binarynya mungkin. jadi ketika kita ingin install port, kita sudah mempunyai list port yang baru. bukan yang lama.

*default host=cvsup10.tw.freebsd.org
*default base=/var/db
*default prefix=/usr
*default release=cvs tag=.
*default delete use-rel-suffix
*default compress
ports-all

nah yang ini utk source:

*default host=cvsup10.tw.freebsd.org
*default base=/var/db
*default prefix=/usr
*default release=cvs tag=RELENG_8
*default delete use-rel-suffix
*default compress
src-all

4. terus jalankan cvsup na dengan perintah

# cvsup /root/ports-supfile

5. kita sante dulu, tinggal makan atau beli gorengan … sekalian pesen intel… :mrgreen: , tinggal nge-game juga bobol.. boleh boleh aj… :lol:

6. terus kita update ke stable dengan kompail kernel

# cd /usr/src/
# make buildworld
# make buildkernel kernconf=CONF
# make installkernel kernconf=CONF
# make installworld
# mergemaster

tinggal makan aj dulu… sambil tiduran… terus reboot dah.. dan silahkan bandingkan release dengan perintah uname -r atau uname -a

Tips:

Jika update port melalui cvsup gagal.. bisa dengan menggunakan portsnap. Jika belum pernah update menggunakan portsnap jalankan:

# portsnap fetch

jika sudah pernah jalankan

# portsnap fetch update

lalu ekstrak:

# portsnap extract

terus balik lagi dah ke make buildworld ;)

referensi:

How to protect your page using mod authz host

2010-04-04T04:04:04+07:00

Pada posting sekarang akan menjelaskan secara sederhana bagaimana menambahkan proteksi pada directory tertentu dengan module apache mod authz host. berdasarkan ip address Hanya menambahkan opsi dibawah ini pada konfigurasi apache http.conf atau apache2.conf pada bracket directory.

opsi:

Order Deny,Allow
Deny from All
Allow from 172.16.0.0/23

ditambahkan pada directory /usr/local/www/file/software misalnya. Jadi konfigurasi lengkapnya:

<Directory /usr/local/www/file/software>
     Order Deny,Allow
     Deny from All
     Allow from 172.16.0.0/23
</Directory>

Maksud dari opsi diatas adalah:

Order deny,allow : pengurutan opsi deny dan allow dari acl. Jadi maksudna deny dahulu baru diallow.
Deny from All : Gagalkan semua.
Allow from IP : Ijinkan dari IP.

kurang lebih begitu.

Semoga bermanfaat :)

ref:

http://httpd.apache.org/docs/2.2/mod/mod_authz_host.html

How to Terminate, Suspend, and Continue a process using kill

2010-03-28T04:00:03+07:00

Dalam computing (komputasi), kill adalah sebuah perintah yang digunakan dalam sistem operasi untuk mengirimkan sinyal ke sebuah process yang sedang berjalan. Contohnya kita bisa men-terminate program / process yang sedang berjalan.

Jika kita berbicara mengenai kill, tentu saja ini berhubungan dengan system call kill dan signal processing. Untuk lebih lengkapnya silahkan baca sendiri di Wikipedia sudah komplit2.. :P . Pada intinya system call / kill() berhubungan dengan signal. Dibawah ini model status proses di Unix.

Terkait judul diatas hanya Terminate, Suspend, dan Kill. Maka saya hanya menjelaskan tiga hal tersebut. Untuk temen-temennya terminate,suspend,dan kill lainya bisa dibaca sendiri di manual page ( man signal) atau di wikipedia (pengertian secara umum).

Oiya, dalam percobaan saya ini menggunakan FreeBSD dan Slackware. Silahkan praktikan sendiri dimesin Unix like lainnya :P.

Terminate

Terminate dalam process signal ada beberapa macam.. setahu saya ada 2 macam. Silahkan baca lagi di wikipedia. Yang saya coba di sini adalah signal no #9 .. Oiya, signal ini memiliki urutansignal . Jadi Signal #9 adalah signal yang men-terminate secara tidak normal dari sbuah proses dan harus dilaksanakan secepatnya. doh maksude pie kui :D

Ok, sekarang kita praktekan sendiri2..:

Perintahnya:

kill -9 pid

dimna pid adalah nomor pid = process id.

secara umum perintahnya adalah seperti diatas. Jika menggunakan TOP di FreeBSD pada saat top runninng, ketik k lalu isi -9 pid. Saya coba dengan menggunakan mesin slackware 13, agak sedikit berbeda. Ketik k lalu isi pid, baru nomor signal. Tapi nomor signal kill tetap sama yaitu no 9 . :D

Suspend.

Perintah sinyal suspend akan dijalankan pada process yang berjalan dengan perintah: FreeBSD:

kill -17 pid

Slackware:

kill -19 pid

Dalam signal suspend ini ada 2 macam jika di environment freebsd. signal 17 sama 18. Perbedaan nya jika signal 17 tidak dapat diabaikan jika perintah dari inputan keyboard atau system sendiri (cron misal). Jika signal 18 hanya dapat berjalan jika inputan command berasal dari keyboard / terminal. Begitu juga di Slackware, signal 19 dengan 20 sama seperti signal 17 dengan 18 di FreeBSD.

Continue

Perintah sinyal continue akan dijalankan pada process yang berjalan dengan perintah:

FreeBSD:

kill -19 pid

Slackware:

kill -18 pid

Setelah itu bisa anda praktekan sendiri-sendiri. Misal pada pemutar musik anda :mrgreen: serasa hang tapi bukan hang. atau pada ssh koneksi temen anda pada waktu login. Lho.. koq dipencet2 command na g kluar2, apa koneksi nya putus ???? koq g ada connection time out…. heee.. yaaa.. betul, proses anda sedang di pause / suspend :P.

Berikut List Signal di `Slackware`:

bash-3.1$ kill -l
 1) SIGHUP       2) SIGINT       3) SIGQUIT      4) SIGILL
 5) SIGTRAP      6) SIGABRT      7) SIGBUS
8. SIGFPE
 9) SIGKILL     10) SIGUSR1     11) SIGSEGV     12) SIGUSR2
13) SIGPIPE     14) SIGALRM     15) SIGTERM     16) SIGSTKFLT
17) SIGCHLD     18) SIGCONT     19) SIGSTOP     20) SIGTSTP
21) SIGTTIN     22) SIGTTOU     23) SIGURG      24) SIGXCPU
25) SIGXFSZ     26) SIGVTALRM   27) SIGPROF     28) SIGWINCH
29) SIGIO       30) SIGPWR      31) SIGSYS      34) SIGRTMIN
35) SIGRTMIN+1  36) SIGRTMIN+2  37) SIGRTMIN+3  38) SIGRTMIN+4
39) SIGRTMIN+5  40) SIGRTMIN+6  41) SIGRTMIN+7  42) SIGRTMIN+8
43) SIGRTMIN+9  44) SIGRTMIN+10 45) SIGRTMIN+11 46) SIGRTMIN+12
47) SIGRTMIN+13 48) SIGRTMIN+14 49) SIGRTMIN+15 50) SIGRTMAX-14
51) SIGRTMAX-13 52) SIGRTMAX-12 53) SIGRTMAX-11 54) SIGRTMAX-10
55) SIGRTMAX-9  56) SIGRTMAX-8  57) SIGRTMAX-7  58) SIGRTMAX-6
59) SIGRTMAX-5  60) SIGRTMAX-4  61) SIGRTMAX-3  62) SIGRTMAX-2
63) SIGRTMAX-1  64) SIGRTMAX

Dan berikut List signal di `FreeBSD`:

 No    Name 	Default Action	     Description
     1	   SIGHUP	terminate process    terminal line hangup
     2	   SIGINT	terminate process    interrupt program
     3	   SIGQUIT	create core image    quit program
     4	   SIGILL	create core image    illegal instruction
     5	   SIGTRAP	create core image    trace trap
     6	   SIGABRT	create core image    abort program (formerly SIGIOT)
     7	   SIGEMT	create core image    emulate instruction executed
     8	   SIGFPE	create core image    floating-point exception
     9	   SIGKILL	terminate process    kill program
     10    SIGBUS	create core image    bus error
     11    SIGSEGV	create core image    segmentation violation
     12    SIGSYS	create core image    non-existent system call invoked
     13    SIGPIPE	terminate process    write on a pipe with no reader
     14    SIGALRM	terminate process    real-time timer expired
     15    SIGTERM	terminate process    software termination signal
     16    SIGURG	discard signal	     urgent condition present on
					     socket
     17    SIGSTOP	stop process	     stop (cannot be caught or
					     ignored)
     18    SIGTSTP	stop process	     stop signal generated from
					     keyboard
     19    SIGCONT	discard signal	     continue after stop
     20    SIGCHLD	discard signal	     child status has changed
     21    SIGTTIN	stop process	     background read attempted from
					     control terminal
     22    SIGTTOU	stop process	     background write attempted to
					     control terminal
     23    SIGIO	discard signal	     I/O is possible on a descriptor
					     (see fcntl(2))
     24    SIGXCPU	terminate process    cpu time limit exceeded (see
					     setrlimit(2))
     25    SIGXFSZ	terminate process    file size limit exceeded (see
					     setrlimit(2))
     26    SIGVTALRM	terminate process    virtual time alarm (see
					     setitimer(2))
     27    SIGPROF	terminate process    profiling timer alarm (see
					     setitimer(2))
     28    SIGWINCH	discard signal	     Window size change
     29    SIGINFO	discard signal	     status request from keyboard
     30    SIGUSR1	terminate process    User defined signal 1
     31    SIGUSR2	terminate process    User defined signal 2
     32    SIGTHR	terminate process    thread interrupt

semoga bermanffaat :)

ref:

man signal
man kill
wikipedia

Update package failed on ports FreeBSD

2010-02-27T03:02:01+07:00

This is simple log error when we’ve failed to install package on freebsd via ports:

===>;;  Checking if databases/mysql50-client already installed
===>;;   An older version of databases/mysql50-client is already installed (mysql-client-5.0.77_1)
You may wish to ``make deinstall'' and install this port again
by ``make reinstall'' to upgrade it properly.
If you really wish to overwrite the old port of databases/mysql50-client
without deleting it first, set the variable &quot;FORCE_PKG_REGISTER&quot;
in your environment or the &quot;make install&quot; command line.
*** Error code 1

Stop in /usr/ports/databases/mysql50-client.
*** Error code 1

Stop in /usr/ports/databases/py-MySQLdb.
*** Error code 1

Stop in /usr/ports/databases/py-MySQLdb.
cacti#

where those package was installed.

cacti# pkg_info | grep mysql
mysql-client-5.0.77_1 Multithreaded SQL database (client)
mysql-client-5.0.88 Multithreaded SQL database (client)
mysql-server-5.0.77_1 Multithreaded SQL database (server)
php5-mysql-5.2.11_1 The mysql shared extension for php
cacti#

so, to force package:

setenv FORCE_PKG_REGISTER 1

and then run command again ;)

Reference: http://freebsd.munk.me.uk/archives/199-Portupgrade-fails-to-upgrade-dependencies.html

How to mount iso on FreeBSD

2010-02-13T13:00:02+07:00

Just simply to mount:

%sudo mdconfig -a -t vnode -o readonly -f GRTMPOEM_EN.iso
md0
%sudo mount -t cd9660 /dev/md0 tmp/
%ls tmp/
autorun.inf     i386            setupxp.htm     win51
docs            readme.htm      support         win51ip
dotnetfx        setup.exe       valueadd        win51ip.sp3

semoga bermanfaat :)

Referensi:

Install Cacti, Spine, Memcached, Better MySQL Cacti Template on FreeBSD 7.2

2010-01-10T10:00:00+07:00

On this tutorial i would like review how to install cacti. But small differents of previous tutorial. Now, i try out with FreeBSD 7.2. Cacti, Memcached, Spine via ports and Better MySQL Cacti Template. ok,.. let’s prepare :

Install Cacti:

1. Cacti needs web server and mysql server.

Please Check this out to install web server and mysql server on FreeBSD 7.2 . Make sure php module enable for webserver apache2, also sockets, snmp and xml modul for php. Those checked by pkg_info | grep php. If those aren’t system, please install:

# cd /usr/ports/net/php5-sockets; make install clean
# cd /usr/ports/net-mgmt/php5-snmp; make install clean
# cd /usr/ports/net/php5-xmlrpc; make install clean

2. Cacti needs RRD TOOL

to install rrdtool change to into directory below and make install clean

# cd /usr/ports/databases/rrdtool; make install clean

On this step, you can install cacti, please see previous posting how to install cacti (Step 4)

Make sure cacti running fine.. ;) and then install spine..

Install Spine

Via Ports:

# cd /usr/ports/net-mgmt/cacti-spine
# make install clean

when cacti-spine installed, these package included:

libtool-1.5.26
net-snmp-5.4.2.1_3

Via Source:

1. extract package

# tar -xzvf cacti-spine-0.8.7c.tar.gz

2. Configure, make and make install :)

# cd cacti-spine-0.8.7c
# ./configure && make && make install

If you installing cacti-spine via source, please make sure net-snmp installed too

%pkg_info | grep snmp
net-snmp-5.4.2.1_3  An extendable SNMP implementation

# cd /usr/ports/net-mgmt/net-snmp

Please choose one how to install spine. Maybe you need more specific installation when install spine via source if you won’t replace binary spine from port. Use option --prefix=/your/own/folder in example when you type make install. ok, until here install spine or cacti-id is done. You need hard configuration now !.. :lol:

3. Configuring spine:

1. Copying `spine.conf` and configuring it

	# cd /usr/local/spine/etc
	# cp spine.conf.dist spine.conf

	# vi spine.conf
	DB_Host         localhost
	DB_Database     cacti
	DB_User         cactiuser
	DB_Pass         cactipassword
	DB_Port         3306

2. Disable crontab poller cacti

#* * * * * /usr/bin/php /srv/www/htdocs/cacti/poller.php > /dev/null 2>&1

try to keep your database cacti and rra isn’t gone or error :D

3. Change `poller` configuration on cacti

a. Fill path spine click settings » Path. Fill spine path on path form, and then click save

b. change poller configuration

click settings » Poller. Set poller with spine not cmd-php and then click save

others configuration:

1. Update value of poller on database

default value of poller on cacti database are 300 seconds. We can change that value via mysql console

# mysql -u root -p
Enter password:
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 28894
Server version: 5.0.77-community MySQL Community Edition (GPL)
Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

change into cacti database

mysql> use cacti;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A
Database changed

and update value of poller on database.

mysql> update data_template_data set rrd_step='60';
mysql> update data_template_rrd set rrd_heartbeat='120';
mysql> flush privileges;

2. Remove rra data on rra directory.

Remove old rra data that does not confuse with the new data of spine poller. Backup first if u not sure what r u doing.

# cd /srv/www/htdocs/cacti/rra
# tar -czvf /srv/www/htdocs/backup-rra.tar.gz *

then u can remove rra data

# rm *

3. Set crontab time for 1 minutes

* * * * * /usr/bin/php /srv/www/htdocs/cacti/poller.php &gt; /dev/null 2&gt;&amp;1

Finish..

check your log to make sure spine is running .. ;)

Install memcached and Better MySQL Cacti Templates

We use MySQL Cacti Template for create better Cacti templates for MySQL, Apache, Memcached and more. And we use ssh based templates to create graphics of other machine which snmpd run, so we need create public key and secret key to automatic login on that machine. And next, Install MySQL Cacti Template based ssh.

# tar zxf better-cacti-templates-1.1.4.tar.gz
# cd better-cacti-templates-1.1.4
# cp better-cacti-templates/scripts/ss_get_by_ssh.php /usr/local/www/cacti/scripts/

Now import the template files through your web browser. In the Cacti web interface’s Console tab, click on the Import Templates link in the left sidebar. Browse to the directory containing the unpacked templates, select the XML file for the templates you’re installing, and submit the form. In our example, the file will be named something like cacti_host_template_x_mysql_server_ht_0.8.6i-sver1.1.4.xml

Configuration:

and then you need set auto login for ssh user as your username. see previous post how to make auto login.

next, need some modified of script:

# cd  /usr/share/cacti/site/scripts/
# vi ss_get_by_ssh.php.cnf
$ssh_user   = 'username';
$ssh_iden   = '-i /your/locate/id_rsa';

done.

On others machine (server monitored, ex: 172.16.0.22) install memcached from ports:

# cd /usr/ports/databases/memcached
# make install clean

start daemon:

/usr/local/bin/memcached -m 4000 -d -u nobody

-m : memori -d : sebagai daemon -u : user

boot daemon:

add to rc.conf for memchaced daemon activated every boot.

memcached_enable="YES";
memcached_flags="-t 8 -m 4000";

Testing your ssh based Templates. Run this command on cacti’s machine:

%/usr/local/bin/php /usr/local/www/cacti/scripts/ss_get_by_ssh.php --type memcached --host 172.16.0.22 --items b6,b7
b6:4846539 b7:8779665%

and then just create graph for new device.

Troubleshoot:

If u got an error:

Call to undefined function session_name()

just install via ports:

# /usr/ports/www/php5-session
# make install clean

done…

good luck… ;)

semoga bermanfaat.. :)

reference:

SSH (OpenSSH) and SFTP (F-Secure) auto login without password

2010-01-03T03:01:00+07:00

Tutor ini intiny gimna cara nya auto login dengan menggunakan SSH memakai OpenSSH dan SFTP memakai F-Secure.

untuk SSH:

Buat Public Key di Client Server

Buat Public Key di Client lalu masukkan ke `authorized_keys` Main Server.

Setup di Client Monitoring server:

deanet@deanet:~/tmp$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/deanet/.ssh/id_rsa): f7
Enter passphrase (empty for no passphrase): "ENTER";
Enter same passphrase again: "ENTER";
Your identification has been saved in f7.
Your public key has been saved in f7.pub.
The key fingerprint is:
c1:7d:58:40:0b:77:6b:d8:03:b2:d6:11:89:dd:f1:a7 deanet@deanet

Lalu Kopi ke Main Server

deanet@deanet:~/tmp$ scp f7.pub 192.168.1.7:/home/deanet
Password:f7.pub                                        100%  395     0.4KB/s   00:00

Setup di Main Server:

cat f7.pub > .ssh/authorized_keys

test Apakah sudah jalan dengan baik:

deanet@deanet:~/tmp$ ssh -i f7 192.168.1.2 echo test

jika berhasil maka akan keluar kata test …

ok, untuk SFTP

Untuk SFTP, kenapa sayah mengikutsertakan SFTP ??? padahal sftp sendiri digunakan dilingkungan windo$m, sementara ini adalh blog linux wwkwkwkw…. Karena pada kenyataannya sedikit sekali dokumentasi di google tentang auto login dengan SFTP memakai F-Secure yg jalan di wedu$. Dan konfigurasi auto login dengan public key nya pun tidak semudah yang dibayangkan, karena dalam implementation nya ternyata ada sedikit perbedaan antara chipper rsa yg dibikin oleh open ssh client dengan produk dari F-Secure..

Okeee…

Jadi untuk SFTP sebenernya masalahnya gini:

Ada mesin windo$ yg terinstall F-Secure, SSH dimatikan, dan yg hidup hanya SFTP saja.
Sudah bikin public key lalu dikonfigure ke mesin wedus tapi tetep aj failed authorization :( Dan solusinya:

[deanet@some-host ~]$ ssh-keygen -b 1024 -t rsa -f mykey
Generating public/private rsa key pair.
Enter passphrase (empty for no passphrase):
<ENTER SAJA>
Enter same passphrase again:
<ENTER SAJA>
Your identification has been saved in mykey.
Your public key has been saved in mykey.pub.
The key fingerprint is:
4b:95:8c:ba:12:1c:19:0a:bb:d7:d2:29:3e:8b:ec:2f deanet@some-host.com

konvert ke F-Secure Implementation:

[deanet@some-host ~]$ ssh-keygen -e -f mykey.pub > mykey-secsh.pub
[deanet@some-host ~]$ ls
mykey  mykey.pub  mykey-secsh.pub
[deanet@some-host ~]$ mkdir .sh
[deanet@some-host ~]$ mv .sh .ssh
[deanet@some-host ~]$ mv mykey* .ssh
[deanet@some-host ~]$ ls
[deanet@some-host ~]$ cd .ssh
[deanet@some-host .ssh]$ ls
mykey  mykey.pub  mykey-secsh.pub

rename mykesy to id_dsa

[deanet@some-host .ssh]$ mv mykey id_dsa

lalu testing:

[deanet@some-host .ssh]$ sftp -o Port=9991 -v deanet@some-ip
Connecting to some-ip...
OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Connecting to some-ip [some-ip] port 9991.
debug1: Connection established.
debug1: identity file /home/deanet/.ssh/id_rsa type -1
debug1: identity file /home/deanet/.ssh/id_dsa type -1
debug1: loaded 2 keys
debug1: Remote protocol version 2.0, remote software version 3.2.3 F-Secure SSH Windows NT Server
debug1: no match: 3.2.3 F-Secure SSH Windows NT Server
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.3
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: sending SSH2_MSG_KEXDH_INIT
debug1: expecting SSH2_MSG_KEXDH_REPLY
The authenticity of host 'some-ip (some-ip)' can't be established.
DSA key fingerprint is 50:b9:e9:1c:a9:a7:11:ce:5d:ee:6e:e9:88:cc:99:57.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added 'some-ip' (DSA) to the list of known hosts.
debug1: ssh_dss_verify: signature correct
debug1: SSH2_MSG_NEWKEYS sent
debug1: expecting SSH2_MSG_NEWKEYS
debug1: SSH2_MSG_NEWKEYS received
debug1: SSH2_MSG_SERVICE_REQUEST sent
debug1: SSH2_MSG_SERVICE_ACCEPT received
debug1: Authentications that can continue: publickey
debug1: Next authentication method: publickey
debug1: Trying private key: /home/deanet/.ssh/id_rsa
debug1: Trying private key: /home/deanet/.ssh/id_dsa
debug1: read PEM private key done: type RSA
debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
debug1: Sending environment.
debug1: Sending env LANG = en_US.UTF-8
debug1: Sending subsystem: sftp
sftp> exit
debug1: client_input_channel_req: channel 0 rtype exit-status reply 0
debug1: channel 0: free: client-session, nchannels 1
debug1: fd 0 clearing O_NONBLOCK
debug1: Transferred: stdin 0, stdout 0, stderr 0 bytes in 4.3 seconds
debug1: Bytes per second: stdin 0.0, stdout 0.0, stderr 0.0
debug1: Exit status 0

ok, done… ;) semoga bermanfaat

Reference:

Virtual Host Lokal Ubuntu 9.10

2009-12-23T23:12:00+07:00

Ok.. di keluarga debian, sudah diberi kemudahan dalam mengkonfigurasi apache server. Jadi kurang lebih di /etc/apache (tempat konfigurasi apache) ada directory seperti ini:

|-- sites-available
|   |-- default
|   |-- default-ssl
|   `-- sd
`-- sites-enabled
    |-- 000-default -> ../sites-available/default
    `-- sd -> ../sites-available/sd

Didalam directory sites-available terdapat file2 yang menunjukkan bahwa itu adalah file konfigurasi site/domain. Misal: 1. default adalah untuk domainnya isi file default:

<VirtualHost *:80>
       	ServerAdmin webmaster@localhost
        ServerName nico.sd
        ServerAlias nico.sd
        DocumentRoot /var/www
        <Directory />
                Options FollowSymLinks
                AllowOverride All
        </Directory>
        <Directory /var/www/>
                Options Indexes FollowSymLinks MultiViews
                AllowOverride All
                Order allow,deny
                allow from all
        </Directory>
        ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
        <Directory "/usr/lib/cgi-bin">
                AllowOverride None
                Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
                Order allow,deny
                Allow from all
        </Directory>
        ErrorLog /var/log/apache2/error.log
        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel warn
        CustomLog /var/log/apache2/access.log combined
    Alias /doc/ "/usr/share/doc/"
    <Directory "/usr/share/doc/">
        Options Indexes MultiViews FollowSymLinks
        AllowOverride None
        Order deny,allow
        Deny from all
        Allow from 127.0.0.0/255.0.0.0 ::1/128
    </Directory>
</VirtualHost>

Nah, bagaimana kita membuat virtual host baru ?? Untuk membuat vhost, tentunya harus bikin 1 lebih Document root nya. Yang default adalah untuk domainnya, sedangkan untuk vhost lain bisa kopi dari file default dengan perubahan seperlunya. jadi:

# cp default sd

terus ubah dengan seperlunya

 <VirtualHost *:80>
        ServerAdmin webmaster@localhost
        ServerName sd.nico.sd
        ServerAlias sd.nico.sd
        DocumentRoot /var/sd
        <Directory />
                Options FollowSymLinks
                AllowOverride All
        </Directory>
        <Directory /var/sd/>
                Options Indexes FollowSymLinks MultiViews
                AllowOverride All
                Order allow,deny
                allow from all
        </Directory>

        ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
        <Directory "/usr/lib/cgi-bin">
                AllowOverride None
                Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
                Order allow,deny
                Allow from all
        </Directory>
        ErrorLog /var/log/apache2/error.log
        # Possible values include: debug, info, notice, warn, error, crit,
        # alert, emerg.
        LogLevel warn
        CustomLog /var/log/apache2/access.log combined
    Alias /doc/ "/usr/share/doc/"
    "Directory "/usr/share/doc/"
        Options Indexes MultiViews FollowSymLinks
        AllowOverride None
        Order deny,allow
        Deny from all
        Allow from 127.0.0.0/255.0.0.0 ::1/128
    </Directory>
</VirtualHost>

sampai di sini konfigurasi sudah selesai. Sekarang tinggal mengaktifkan site/vhost/domain yang akan diaktifkan.

# a2ensite sd

Coba lihat didalam directory site-enabled, itu adalah domain2 yang sudah diaktifkan. Jika sudah restart apache

# apache2ctl restart

Nah, untuk mengakses via w- machine tinggala menambahkan di C:\W-\system32\drivers\etc\hosts

misal ip ubuntu tadi : 172.16.0.155

tambahkan dibawahnya:

172.16.0.155 nico.sd
172.16.0.155 sd.nico.sd

lalu akses lewat browser…

semoga bermanfaat :)

Referensi: 1. Google aj degh.. byk koq disitu :D

Install samba 3.x on FreeBSD 7.2

2009-12-07T07:12:06+07:00

Install samba 3.x on FreeBSD 7.2. Silahkan juga di cobain d FreeBSD 8 :P ..

1. Install

# cd /usr/ports/net/samba3
# make install clean

2. konfigurasi

# cp /usr/local/etc/smb.conf.default /usr/local/etc/smb.conf

Issue:

Setiap user login dengan username dan password.
Setiap user dapat sharing file dengan user lainnya.
Ada sebuah folder yg hanya bisa ditulis/write oleh user tertentu (misal user1)

configure:

a. Isi konfigurasi smb.conf seperti dibawah ini:

vi /usr/local/etc/smb.conf

#=======  Global Settings  ===========
[global]

   unix extensions = no
   workgroup = MSHOME
   server string = samba

   ## issue no 1
   security = user
   log file = /var/log/samba/log-%m.log
   max log size = 50
   dns proxy = no


#====== Share Definitions  =========

[homes]
   comment = Home Directories for %u on %h
   browseable = no
   writable = yes
   path = /usr/home/%u/Docs
   valid users = %S

## issue no 2
[public]
   comment = %h shared Public Stuff
   path = /usr/home/samba/public
   force directory mode = 1777
   force create mode = 1777
   force group = nobody
   force user = nobody
   public = yes
   writable = yes
   read only = no

## issue nomor 3
[software]
   comment = %h shared Software
   path = /usr/home/samba/software
   read only = yes
   write list = user1
   create mask = 0664
   directory mask = 0775

b. lalu bikin user misalnya user1 dan user2 , dan user samba

adduser -v

c. Bikin folder Docs didalam directory /home/user1 dan /home/user2

d. jgn lupa chown dan group nya. n pastikan perm

owner:

chown user1 public
chown user2 public

group:

chgroup wheel public
chgroup wheel public

e. bkin dir public (issue no 1) dan software (issue no 3) di home samba untuk sharing antar user

mkdir /home/samba/public

f. beri perm 777 untuk public dan 755 untuk software

chmod 777 /home/samba/public
chmod 755 /home/samba/software

g. klo uda set password user untuk samba nya:

smbpasswd -a user1
smbpasswd -a user2

3. lalu jalankan smba nya

/usr/local/etc/rc.d/samba start

4. Testing

n cek \ip.kamu :)

semoga bermanfaat :)

Referensi: 1. http://www.us-webmasters.com/FreeBSD/Install/Samba/

Disable user Login on FreeBSD

2009-12-01T01:12:00+07:00

How to disable user login on FreeBSD ???

You need port collection, or you can download single file tarball no-login, put on /usr/ports/distfiles/ and install via ports :) .

# cd /usr/ports/sysutils/no-login
# make install clean

configure:

type like below

# vipw

Welcome on vi editor… next, change shell login to /usr/sbin/nologin

in ex:

deanet:*:1001:1001:deanet:/home/deanet:/usr/local/bin/bash

to be

deanet:*:1001:1001:deanet:/home/deanet:/usr/sbin/nologin

now, try login. And check on syslog

tail /var/log/messages

and .. vioolaa… :P

Reference:

http://www.freebsddiary.org/nologin.php

Build dan Install Kernel di FreeBSD 7.2 untuk PF, ALTQ, dan Quota Disk Management

2009-11-07T07:11:09+07:00

Sudah lama tak bersua di sini. Sedikit dokumentasi dari saya. Mungkin ini tak berarti bagi anda, tapi mungkin berarti bagi org2 dibelahan bumi yang lain membutuhkan informasi ini. Baik langsung saja:

Persiapan build dan install kernel:

# cd /usr/src/sys/i386/conf
# mkdir /root/kernels
# cp GENERIC /root/kernels/MYKERNEL
# ln -s /root/kernels/MYKERNEL

edit konfig kernel

# vi MYKERNEL

packet filter:

Untuk PF tambahkan di akhir baris MYKERNEL seperti berikut:

device pf
device pflog
device pfsync

ALTQ atau alternate queuing of network packets. utility untuk PF

# Untuk ALTQ
options         ALTQ
options         ALTQ_CBQ        # Class Bases Queuing (CBQ)
options         ALTQ_RED        # Random Early Detection (RED)
options         ALTQ_RIO        # RED In/Out
options         ALTQ_HFSC       # Hierarchical Packet Scheduler (HFSC)
options         ALTQ_PRIQ       # Priority Queuing (PRIQ)
options         ALTQ_NOPCC      # Required for SMP build

Untuk Disk QUota Manajemen

options QUOTA

Lalu sekarang build dan install

# cd /usr/src/
# make buildkernel KERNCONF=MYKERNEL
# make installkernel KERNCONF=MYKERNEL

selesai…

konfig rc nya sekarang….

Configurasi rc.conf

Untuk PF:

# untuk PF
pf_enable="YES";                 # Enable PF (load module if required)
pf_rules="/etc/pf.conf&quot;         # rules definition file for pf
pf_flags="";                     # additional flags for pfctl startup
pflog_enable="YES";              # start pflogd(8)
pflog_logfile="/var/log/pflog";  # where pflogd should store the logfile
pflog_flags="";
# jika pake LAN dibelakang firewall enable gatewaynya
gateway_enable="YES";
ipfilter_enable="YES";
ipnat_enable="YES";
ipmon_enable="YES";
ipfs_enable="YES";

Untuk Disk Quota:

# Disk Quota
enable_quotas=&quot;YES&quot;
check_quotas=&quot;NO&quot;

Configurasi /etc/fstab untuk Quota Disk:

contoh:

/dev/ad0s1f             /usr            ufs     rw,userquota,groupquota        22

reboot….

Cara Pake

PF:

Enable:

pfctl -e

Disable:

pfctl -d

Add

pfctl -t nama_tabel -T add no_ip

[root@share /usr/home/admin]# pfctl -t tendang -T add 192.168.1.34
1 table created.
1/1 addresses added.

2 ip sekaligus

[root@share /usr/home/admin]# pfctl -t tendang -T add 192.168.1.34 192.168.1.33 2/2 addresses added.

del pfctl -t nama_tabel -T delete no_ip

[root@share /usr/home/admin]# pfctl -t tendang -T delete 192.168.1.34 192.168.1.33

2/2 addresses deleted.

Disk quota

Aktifkan quota partisi:

quotacheck /usr

jika belum ada quota manajemennya, maka akan membuat file quota.user dan quota.group di /usr

Manajemen quota untuk user

misal: user deanet

# edquota deanet
Quotas for user deanet:
/usr: kbytes in use: 16982, limits (soft = 17000, hard = 17500)
    inodes in use: 55, limits (soft = 0, hard = 0)

Penjelasan:

soft=17000 hard=17500 alokasi tenggang (kbytes) = 500

save lalu cek:

[root@share /usr/home/admin]# quota deanet
Disk quotas for user deanet (uid 1001):
     Filesystem   usage   quota   limit   grace   files   quota   limit   grace
           /usr   16982   17000   17500              55       0       0

lalu skarang test copy file:

[deanet@share ~]$ cp ../admin/Docs/debian-503-i386-netinst.iso .
/usr: warning, user disk quota exceeded
/usr: write failed, user disk limit reached
cp: ./debian-503-i386-netinst.iso: Disc quota exceeded

cek lagi, apa benar quota disk uda jalan:

[deanet@share ~]$ quota
Disk quotas for user deanet (uid 1001):
     Filesystem   usage   quota   limit   grace   files   quota   limit   grace
           /usr   17446*  17000   17500   7days      56       0       0

okeh, it’s work..

Referensi: lum ada, linkna lupa.. nyusul..

Installation and setting network FreeBSD Virtual Box on Slackware Host

2009-10-01T01:00:10+07:00

On previous posted by me, we’ve installed FreeBSD on VmWare and setting networking for it. Now, we’ll try install FreeBSD on VirtualBox and setting networking for it on Slackware host.

At first step. we must have installed Virtual Box. On this experiment, i use Virtual Box version 3.0.6 rxxxx and Slackware 12.0 as host. Just download on virtualbox.org (choose linux all compability) and install it by execute binary file.

./VirtualBox-xxx.run

Ok, now lets begin to install FreeBSD on Virtual Box using Slackware Host.

Create new machine FreeBSD on Virtual Box

Run Virtual Box and Click Machine -> New .. or using shortcut Ctrl + N
Click Next and give name for machine, choose Type Operating System, then Version Os. And click next.
At memory (RAM) for virtual machine, leave as default. Then Click next
Choose create new Hardisk, and click next
click next
choose dinamically bla … bla.. bla.. , and click next
Type name of Virtual Hardisk (leave as default) .. and then choose size of virtual hardisk. On this experiment using 2G is enaugh. We’ll install on minimum system ;) . so click next and click Finish
On summary Window, click next Finish.

Install FreeBSD on new Virtual Machine

Choose Machine (FreeBSD-7)
Click Setting
Choose CDROM tab
Checked Mount CD/DVD Drive option
Checked ISO Image File option
Locate ISO Image File
Click Yellow Arrow
Click Add
Choose File and open, and select. at last, click OK.

Now, click Start on virtual box

Press Enter for default.
Choose country, press enter, and press enter again (leave as default)
Choose Standard installation, press enter, and press enter again
Partitioning Disk on FreeBSD

a. Type a to use all entire Disk, and type q.
b. Press enter (we use FreeBSD boot manager), then press enter again.
c. Type c and type 256M . then press enter.
d. Choose A swap partition.. then press enter.
e. Type c and then press enter.
f. Choose A File System , press enter and type /.
g. Now, root partition and swap partition was created.

press q to finish.
choose 1 CD/DVD, then press enter, and press enter again to continue the installation. Please make sure back up all your data.
Processing installation
FreeBSD was installed, and then press enter.
Configure any Ethernet or SLIP/PP network devices choose yes

a. choose em0 Card » enter » IPV6 (no) » DHCP no ;
b. and then configure network for your new FreeBSD Machine which u needed.
c. press enter » em0 interface up right now (yes) » as network gateway (no) » configure inetd and network services (no) » SSH Login (yes) » FTP anonymouse access (no) » NFS server no » NFS Client no » customize console no » set machine time zone yes » UTC no » choose as yourself » Linux binary compability (yes) » Mouse Integrated (no) » browse colletion (no) » user confirmation requested (yes) » choose user and fill as requested (login id, password, and name. also fill wheel on member groups for this member allowed login as super user » press enter and exit » setup new password for root » back to configuration menu (no) » select exit Install » Yes .
Unchecked iso image FreeBSD on CDROMS Machine Settings and press OK, then boot that machine.

Setting Network Virtual Box on Slackware Host

Active tun module

# modprobe tun
create virtual card (vbox0) and give permission for user deanet.

# /opt/VirtualBox/VBoxTunctl -t vbox0 -u deanet
Set ip address for Slackware Host: 192.168.1.1 and netmask 255.255.255.0

# ip addr add 192.168.1.1/24 brd + dev vbox0
up interface card

# iconfig vbox0 up

check configuration

# ip a

On network FreeBSD Virtual Box select card for bridge and vbox0 . then boot again using new virtual card.

NOTE:

Please make sure you have authorized for device. It’s means you can controlled virtual device on virtual box like usb,nic,cam,etc.

tips:

To use slackware host as router just add value 1 on /proc/sys/net/ipv4/ip_forward

echo "1" > /proc/sys/net/ipv4/ip_forward

Add nameserver on FreeBSD machine to look up domain from FreeBSD machine. :)

Reference:

Install webmin quickly

2009-09-14T16:37:55+07:00

Webmin is a web-based interface for system administration for Unix. Using any modern web browser, you can setup user accounts, Apache, DNS, file sharing and much more. Webmin removes the need to manually edit Unix configuration files like /etc/passwd, and lets you manage a system from the console or remotely.

Installation:

# wget http://prdownloads.sourceforge.net/webadmin/webmin-1.480.tar.gz
# tar -xzvf webmin-1.480.tar.gz
# cd webmin-1.480/
# ./setup.sh /usr/local/webmin

when script is running it will copy to /usr/local/webmin. so, just hit enter or fill with match question.

To reset Password just enter like this:

#/usr/local/webmin-1.140/changepass.pl /etc/webmin admin foo

Reference: 1. http://skleton.wordpress.com/2009/06/22/install-webmin

Install squirrel webmail maildir support

2009-09-08T08:00:09+07:00

With Courier-imap, we can use postfix with squirrel webmail supported with Maildir.

Postfix with Maildir

To use the Maildir in postfix just add home_mailbox = Maildir/ on main.cf

Configuration Postfix with Maildir:

soft_bounce = no
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
mail_owner = postfix
default_privs = nobody
inet_interfaces = all
unknown_local_recipient_reject_code = 450
debug_peer_level = 2
debugger_command =
          PATH = /bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
          xxgdb $ daemon_directory / $ process_name $ process_id & sleep 5
sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = maildrop
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/packages/postfix/samples
readme_directory = /usr/share/doc/packages/postfix/README_FILES
mail_spool_directory = /var/mail
canonical_maps = hash: /etc/postfix/Canonical
virtual_maps = hash: /etc/postfix/virtual
relocated_maps = hash: /etc/postfix/relocated
transport_maps = hash: /etc/postfix/transport
sender_canonical_maps = hash: /etc/postfix/sender_canonical
masquerade_exceptions = root
masquerade_classes = envelope_sender, header_sender, header_recipient
program_directory = /usr/lib/postfix
masquerade_domains =
mydestination = $ myhostname, localhost. $ mydomain
defer_transports =
disable_dns_lookups = no
relayhost =
content_filter =
mailbox_command =
mailbox_transport =
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_client_restrictions =
smtpd_helo_required = no
smtpd_helo_restrictions =
strict_rfc821_envelopes = no
mynetworks_style = subnet
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
# smtpd_recipient_restrictions = permit_sasl_authenticated, reject_unauth_destination
smtp_sasl_auth_enable = no
smtpd_sasl_auth_enable = yes
smtpd_use_tls = no
smtp_use_tls = no
alias_maps = hash: /etc/aliases
mailbox_size_limit = 0
message_size_limit = 10240000
# myhostname = linux.local
# change below information as needed
myhostname = local.net
mynetworks = 10.100.100.21, 127.0.0.1
home_mailbox = Maildir /

Testing SMTP:

Open two shell. First for telnet command, and second shell for monitoring logs /var/log/mail

1fvu-linux: /home/deanet# telnet localhost 25
Trying 127.0.0.1 ...
Connected to localhost.
Escape character is'^]'.
220 local.net ESMTP Postfix
helo local.net
250 local.net
mail from: test@aja.net
250 2.1.0 Ok
rcpt to: deanet@local.net
250 2.1.5 Ok
data
354 End data with <cr> <lf>. <cr> <lf>
halo testaja
.
250 2.0.0 Ok: queued as B753761A3
quit
221 2.0.0 Bye
Connection closed by foreign host.
1fvu-linux: /home/deanet#

when you type tail -f /var/log/mail on second shell, it will results:

Aug 21 06:17:15 linux-1fvu postfix / smtpd [10556]: connect from localhost [127.0.0.1]
Aug 21 06:17:39 linux-1fvu postfix / smtpd [10556]: B753761A3: client = localhost [127.0.0.1]
Aug 21 06:18:10 linux-1fvu postfix / cleanup [10559]: B753761A3: message-id =
Aug 21 06:18:10 linux-1fvu postfix / qmgr [7987]: B753761A3:  from =, size = 323, nrcpt = 1 (queue active)
Aug 21 06:18:10 linux-1fvu postfix / local [10560]: B753761A3:  to =, relay = local, delay = 39, delays = 39/0.05/0/0.01, DSN = 2.0 .0, status = sent (delivered to Maildir)
Aug 21 06:18:10 linux-1fvu postfix / qmgr [7987]: B753761A3: removed
Aug 21 06:18:13 linux-1fvu postfix / smtpd [10556]: disconnect from localhost [127.0.0.1]

Messages are stored in ~/Maildir/new/

1fvu-linux: /home/deanet# cat Maildir/new/1250810290.V802Ib57bM671042.linux-1fvu
Return-Path: <test@aja.net>
X-Original-To: deanet@local.net
Delivered-To: deanet@local.net
Received: from local.net (localhost [127.0.0.1])
         by local.net (Postfix) with SMTP id B753761A3
         for <deanet@local.net>; Fri, 21 Aug 2009 06:17:31 0700 (WIT)
Message-Id: <@ 20090820231739.B753761A3 local.net>
Date: Fri, 21 Aug 2009 06:17:31 0700 (WIT)
From: test@aja.net
To: undisclosed-Recipients:;
halo testaja

Courrier-imap.

Install:

# zypper install courrier-imap

run courrier-imap daemon :

# rccourier-imap start

Testing Courier-imap :

1fvu-linux: /home/deanet # telnet localhost 143
Trying 127.0.0.1 ...
Connected to localhost.
Escape character is'^]'.
* OK [IMAP4rev1 capability UIDPLUS CHILDREN Namespace = Thread Thread ORDEREDSUBJECT = Idle REFERENCES Sort QUOTA ACL ACL2 = UNION] Courier-IMAP ready. Copyright 1998-2008 Double Precision, Inc.. See Copying for distribution information.
a login username password
a OK LOGIN Ok.
a logout
* BYE Courier-IMAP server shutting down
a OK LOGOUT completed
Connection closed by foreign host.
1fvu-linux: /home/deanet#

Squirrel webmail.

Install:

# cd /srv/www/htdocs
# tar-xzvf Squirrelmail-1.4.17.tar.gz
# mv-1.4.17 Squirrelmail Squirrelmail

configuring executable file:

# squirrelmail/configure

Select the D option and then configure Squirrelmail with the UW preset. Also make sure to set the data and attachment settings directory /usr/local/squirrelmail/data and /usr/local/squirrelmail/temp respectively under 4. General Options . Make any other changes as you see fit, select S to save and then Q to quit.</p>

Configuration squirrel in the apache directory:

<directory /srv/www/htdocs/squirrelmail>
   Options None
   AllowOverride None
   DirectoryIndex index.php
   Order Allow, Deny
   Allow from all
</ Directory>
<directory /srv/www/htdocs/squirrelmail/*>
   Deny from all
</ Directory>
<directory /srv/www/htdocs/squirrelmail/images>
   Allow from all
</ Directory>
<directory /srv/www/htdocs/squirrelmail/plugins>
   Allow from all
</ Directory>
<directory /srv/www/htdocs/squirrelmail/src>
   Allow from all
</ Directory>
<directory /srv/www/htdocs/squirrelmail/templates>
   Allow from all
</ Directory>
<directory /srv/www/htdocs/squirrelmail/themes>
   Allow from all
</ Directory>
<directory /srv/www/htdocs/squirrelmail/contrib>
   Order Deny, Allow
   Deny from All
   Allow from 127
   Allow from 10
   Allow from 192
</ Directory>
<directory /srv/www/htdocs/squirrelmail/doc>
   Order Deny, Allow
   Deny from All
   Allow from 127
   Allow from 10
   Allow from 192
</ Directory>

Testing squirrel:

access on http://localhost/squirrelmail/src/configtest.php On this experiment I use Opensuse. Open SUSE 11 has been included as the default postfix mail system. :)

Thanks

References:

Install PHP-FPM pada Nginx 0.7.6 dari source

2009-08-27T03:08:01+07:00

Setelah pada postingan sebelum nya, menginstall nginx dari source. Pada kali ini kita akan mencoba install PHP-FPM. Mengapa PHP-FPM ??? atau PHP-FPM itu apa sih ?? . baca di sini untuk penjelasan lengkapnya.

oke lah. langkah pertama.

Compile PHP:

Donlot paket dan ekstrak

# wget http://id.php.net/get/php-5.3.0.tar.gz/from/this/mirror
# tar -xzvf php-5.3.0.tar.gz
# wget http://php-fpm.org/downloads/php-5.3.0-fpm-0.5.12.diff.gz

Install patch untuk patching php.

# zypper install patch

Patching lalu configure

# gzip -cd php-5.3.0-fpm-0.5.12.diff.gz | patch -d php-5.3.0 -p1
# cd php-5.3.0/
# ./configure --enable-fastcgi --enable-fpm --with-mcrypt --with-zlib --enable-mbstring --disable-pdo --with-curl --disable-debug --enable-pic --disable-rpath --enable-inline-optimization --with-bz2=/usr/local/sbin --with-xml --with-zlib --enable-sockets --enable-sysvsem --enable-sysvshm --enable-pcntl --enable-mbregex --with-mhash --enable-xslt --enable-memcache --enable-zip --with-pcre-regex

make, make test lalu make install

# make
# make test
# make all install

Setelah sukses make install jalankan perintah berikut:

# /usr/local/src/php-5.3.0/build/shtool install -c ext/phar/phar.phar /usr/local/bin
# ln -s -f /usr/local/bin/phar.phar /usr/local/bin/phar

Install module extention via PECL

# pecl install memcache
# pecl install apc
# pecl install syck-beta

Configuration PHP:

Kopi konfigurasi php.ini-production ke /usr/local/lib/php.ini

# cd ../php-5.3.0/
# cp php.ini-production /usr/local/lib/php.ini

Buat direktori untuk linking konfigurasi php

# mkdir /etc/php/

linking php.ini dan php-fpm.conf

# ln -s /usr/local/lib/php.ini /etc/php/php.ini
# ln -s /usr/local/etc/php-fpm.conf /etc/php/php-fpm.conf

Configurasi php-fpm.conf

# vi /etc/php/php-fpm.conf

<value name="owner">nobody</value>
<value name="group">nobody</value>
<value name="user">nobody</value>
<value name="group">nobody</value>

Config Nginx

linking direktori conf nginx ke /etc

# ln -s /usr/local/nginx/conf /etc/nginx

konfigurasi file nginx.conf

# vi /etc/nginx/nginx.conf

Ketik seperti ini

	user  nobody;
	worker_processes  6;
	events {
	    worker_connections  1024;
	}
	http {
	    include       mime.types;
	    default_type  application/octet-stream;
	    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
	                      '$status $body_bytes_sent "$http_referer" '
	                      '"$http_user_agent" "$http_x_forwarded_for"';
	    access_log  /var/log/nginx_access.log  main;
	    error_log	/var/log/nginx_error.log   debug;
	    sendfile        on;
	    keepalive_timeout  10 10;
	    gzip  on;
	    gzip_comp_level 1;
	    gzip_proxied any;
	    gzip_types text/plain text/css application/x-javascript text/xml
	application/xml application/xml+rss text/javascript;
	    server {
	        listen       80;
	        server_name  localhost;
	        location / {
	            root   html;
	            index  index.php index.html index.htm;
	        }
	        error_page   500 502 503 504  /50x.html;
	        location = /50x.html {
	            root   html;
	        }
	 	location ~ ^/index.php
	        {
	                fastcgi_pass 127.0.0.1:9000;
	                fastcgi_param SCRIPT_FILENAME
	//usr/local/nginx/html$fastcgi_script_name;
	                fastcgi_param PATH_INFO $fastcgi_script_name;
	                include /usr/local/nginx/conf/fastcgi_params;
	        }
	    }
	}

Konfigurasi file fastcgi_params

vi /etc/nginx/fastcgi_params

fastcgi_param  QUERY_STRING       $query_string;
fastcgi_param  REQUEST_METHOD     $request_method;
fastcgi_param  CONTENT_TYPE       $content_type;
fastcgi_param  CONTENT_LENGTH     $content_length;
fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
fastcgi_param  REQUEST_URI        $request_uri;
fastcgi_param  DOCUMENT_URI       $document_uri;
fastcgi_param  DOCUMENT_ROOT      $document_root;
fastcgi_param  SERVER_PROTOCOL    $server_protocol;
fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;
fastcgi_param  REMOTE_ADDR        $remote_addr;
fastcgi_param  REMOTE_PORT        $remote_port;
fastcgi_param  SERVER_ADDR        $server_addr;
fastcgi_param  SERVER_PORT        $server_port;
fastcgi_param  SERVER_NAME        $server_name;
# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param  REDIRECT_STATUS    200;
fastcgi_connect_timeout 60;
fastcgi_send_timeout 180;
fastcgi_read_timeout 180;
fastcgi_buffer_size 128k;
fastcgi_buffers 4 256k;
fastcgi_busy_buffers_size 256k;
fastcgi_temp_file_write_size 256k;
fastcgi_intercept_errors on;

Bikin Script di init.d (RH based)

vi /etc/init.d/nginx

ketik seperti ini

#! /bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
DAEMON=/usr/local/nginx/sbin/nginx
NAME=nginx
DESC=nginx
PIDFILE=/usr/local/nginx/logs/$NAME.pid
DAEMON_CONFIG=/usr/local/nginx/conf/nginx.conf
    test -x $DAEMON || exit 0
    set -e
    case "$1" in
      start)
            echo -n "Starting $DESC: "
            start-stop-daemon --start --quiet --pidfile $PIDFILE \
                    --exec $DAEMON
            echo " started"
            ;;
      stop)
            echo -n "Stopping $DESC: "
     if [ -f $PIDFILE ]; then
                    kill -15 `cat $PIDFILE 2>/dev/null`
            fi
            echo " stopped"
            ;;
      restart|force-reload)
            echo -n "Restarting $DESC: "
     if [ -f $PIDFILE ]; then
                    kill -15 `cat $PIDFILE 2>/dev/null`
            fi
            sleep 1
            start-stop-daemon --start --quiet --pidfile $PIDFILE \
                    --exec $DAEMON
            echo " restarted"
            ;;
      status)
            echo "Status $DESC: "
            ps aux | grep -v grep | grep -v /bin/sh | grep $NAME
            ;;
      *)
            N=/etc/init.d/$NAME
            echo "Usage: $N {start|stop|status|restart}" >&2
            exit 1
            ;;
    esac
    exit 0

Testing:

Jalankan php-fpm

# /usr/local/sbin/php-fpm start

lihat apakah sudah running atau belum

# netstat -tulpn | grep 9000

Jalankan script nginx

# chmod a+x /etc/init.d/nginx
# /etc/init.d/nginx start

lihat apakah sudah running atau belum

# netstat -tulpn | grep 80

bikin file index.php di /usr/local/nginx/html/ . isi dengan:

	<?php phpinfo(); ?>

Akses ke localhost 127.0.0.1 atau sesuai alamat ip nya.

Troubleshooting:

A. ERROR PHP

1. Masalah:

configure: error: XML configuration could not be found

Solusi:

# zypper install libxml2-devel

2. Masalah:

checking for BZip2 in default path... not found
configure: error: Please reinstall the BZip2 distribution

Solusi:

Install bzip2 dari source.

# cd ..
# wget http://www.bzip.org/1.0.5/bzip2-1.0.5.tar.gz
# tar -xzvf bzip2-1.0.5.tar.gz
# cd bzip2-1.0.5/
# make
# make install PREFIX=/usr/local/sbin/

3. Masalah:

checking for cURL in default path... not found
configure: error: Please reinstall the libcurl distribution -
easy.h should be in /include/curl/

Solusi:

zypper install libcurl-devel libmcrypt-devel mhash-devel

B. MEMCACHE

1. Masalah:

checking for re2c... no
configure: WARNING: You will need re2c 0.13.4 or later if you want to regenerate PHP parsers.

Solusi:

# zypper install re2c

2. Masalah:

Configuring for:
PHP Api Version:         20090626
Zend Module Api No:      20090626
Zend Extension Api No:   220090626
Cannot find autoconf. Please check your autoconf installation and the
$PHP_AUTOCONF environment variable. Then, rerun this script.
ERROR: `phpize' failed</code>

Solusi:

Install autoconf

# zypper install autoconf

lalu jalankan lagi pecl install memcache

Enable memcache session handler support? [yes] :y <== ketik y

Hasil:

Build process completed successfully
Installing
'/usr/local/lib/php/extensions/no-debug-non-zts-20090626/memcache.so'
install ok: channel://pecl.php.net/memcache-2.2.5
configuration option "php_ini" is not set to php.ini location
You should add "extension=memcache.so" to php.ini</code>

C. APC

1. Masalah:

Sorry, I was not able to successfully run APXS.  Possible reasons:
1.  Perl is not installed;
2.  Apache was not compiled with DSO support (--enable-module=so);
3.  'apxs' is not in your path.  Try to use --with-apxs=/path/to/apxs
The output of apxs follows
/tmp/pear/temp/APC/configure: line 4061: apxs: command not found
configure: error: Aborting
ERROR: `/tmp/pear/temp/APC/configure --with-apxs' failed
make: *** [php_apc.lo] Error 1</code>

Solusi:

# pecl install apc-beta
Enable per request file info about files used from the APC cache [no] : n <== ketik n
Enable spin locks (EXPERIMENTAL) [no] : n <== ketik n

Hasil:

Build process completed successfully
Installing '/usr/local/lib/php/extensions/no-debug-non-zts-20090626/apc.so'
install ok: channel://pecl.php.net/APC-3.1.3p1
configuration option "php_ini" is not set to php.ini location
You should add "extension=apc.so" to php.ini</code>

D. SYCK

1. Masalah:

checking for syck files in default path... not found
configure: error: Please reinstall the syck distribution
ERROR: `/tmp/pear/temp/syck/configure' failed</code>

Solusi:

Install syck dari source.

# wget http://files.rubyforge.mmmultiworks.com/syck/syck-0.55.tar.gz
# tar -xzvf syck-0.55.tar.gz
# cd syck-0.55/
# ./configure
# make
# make install

Hasil:

Build process completed successfully
Installing '/usr/local/lib/php/extensions/no-debug-non-zts-20090626/syck.so'
install ok: channel://pecl.php.net/syck-0.9.3
configuration option "php_ini" is not set to php.ini location
You should add "extension=syck.so" to php.ini</code>

Referensi:

Install Nginx 0.7.61 dari source

2009-08-21T21:00:08+07:00

Nginx. opo sih kui ?? yo koyo apache lah, kui kancane wes ngunu ae. :-P .. Nginx, web server ketok e. As embuh. Wes langsung install ae.

Pada percobaan kali ini dari source, bukan dari paket distribusi distro masing2.

Persiapan:

install make gcc openssl-devel pcre-devel zlib-devel dulu.

pada mesin yang berbasis RH:

zypper install make gcc openssl-devel pcre-devel zlib-devel

Mesin debian tinggal apt-get aj :mrgreen: . yang paling penting adalah saat konfigurasinya. okeh, sekarang kita konfig terus make lalu install.

donlot paket nginx n ekstrak

# wget http://sysoev.ru/nginx/nginx-0.7.61.tar.gz
# tar -xzvf nginx-0.7.61.tar.gz
# cd nginx-0.7.61/

Configurasi:

Pada mesin Debian base:

./configure \
--conf-path=/etc/nginx/nginx.conf \
--error-log-path=/var/log/nginx/error.log \
--pid-path=/var/run/nginx.pid \
--lock-path=/var/lock/nginx.lock \
--http-log-path=/var/log/nginx/access.log \
--with-http_dav_module \
--http-client-body-temp-path=/var/lib/nginx/body \
--with-http_ssl_module \
--http-proxy-temp-path=/var/lib/nginx/proxy \
--with-http_stub_status_module \
--http-fastcgi-temp-path=/var/lib/nginx/fastcgi \
--with-debug \
--with-http_flv_module

Pada mesin RH base:

./configure \
--prefix=/usr \
--sbin-path=/usr/sbin/nginx \
--conf-path=/etc/nginx/nginx.conf \
--error-log-path=/var/log/nginx/error.log \
--pid-path=/var/run/nginx/nginx.pid  \
--lock-path=/var/lock/nginx.lock \
--user=nginx \
--group=nginx \
--with-http_ssl_module \
--with-http_flv_module \
--with-http_gzip_static_module \
--http-log-path=/var/log/nginx/access.log \
--http-client-body-temp-path=/var/tmp/nginx/client/ \
--http-proxy-temp-path=/var/tmp/nginx/proxy/ \
--http-fastcgi-temp-path=/var/tmp/nginx/fcgi/

Pada mesin saya cukup ketik ./configure aja udah jalan. yes .. (dance_banana) . dan akan muncul seperti berikut diakhir baris configure

Configuration summary
+ using system PCRE library
+ OpenSSL library is not used
+ md5: using system crypto library
+ sha1 library is not used
+ using system zlib library
nginx path prefix: "/usr/local/nginx"
nginx binary file: "/usr/local/nginx/sbin/nginx"
nginx configuration prefix: "/usr/local/nginx/conf"
nginx configuration file: "/usr/local/nginx/conf/nginx.conf"
nginx pid file: "/usr/local/nginx/logs/nginx.pid"
nginx error log file: "/usr/local/nginx/logs/error.log"
nginx http access log file: "/usr/local/nginx/logs/access.log"
nginx http client request body temporary files: "client_body_temp"
nginx http proxy temporary files: "proxy_temp"
nginx http fastcgi temporary files: "fastcgi_temp"</code>

Jika sudah muncul keterangan configruation systemnya. maka berdoalah supaya saat make nya tidak gagal. :D

ketik Make:

# make

lalu install deh

# make install

configurasi nginx

# vi /usr/local/nginx/conf/nginx.conf

hilangkan komentar ; pada depan kata user:

user  nobody;

bikin direktori untuk temporary

# mkdir /var/tmp/nginx

jalankan nginx:

/usr/local/nginx/sbin/nginx

Untuk menghentikan nginx cukup ketik:

killall -9 /usr/local/nginx/sbin/nginx

Lihat perubahan yang terjadi pada port dengan mengetikkan:

netstat -ntlp

Akses ke localhost atau 127.0.0.1, cukup sekian dan matur nuwun. :)

Referensi: 1. Nginx Install Options

How to view cacti graphics without Login

2009-07-27T03:07:00+07:00

I was wasting time to find how to view cacti graphics without login. It’s simply, but make me stuck ! :D . okay, to view cacti graphics without login, you must enable first guest user.

1. Enable guest user.

Login as admin and click User Management » guest
Password: guest
Determines if user is able to login : checked
User Must Change Password at Next Login: Unchecked

2. Setting Graph permission.

Click Tab Graph Permissions » allow and Add Graph for host

3. Login as `guest` user and `logout`.

4. Login as admin and `click Settings` » `Authentication` » `Guest User` : `guest`

5. and now try access `http://domain/cacti/graph_view.php`

Reference:

forums.cacti.net

Installasi Awstats

2009-07-23T23:06:16+07:00

AWStats adalah gratis handal dan alat yang menghasilkan featureful lanjutan web, streaming, atau mail server ftp statistik, grafis. Log analyzer ini berfungsi sebagai CGI atau dari baris perintah dan menunjukkan semua kemungkinan berisi informasi login Anda, dalam beberapa grafis halaman web. menggunakan sebagian informasi file untuk dapat memproses file log besar, sering dan cepat. Hal ini dapat menganalisa file log dari semua alat-alat utama server seperti Apache file log (NCSA gabungan / XLF / ELF format atau log umum / CLF log format), WebStar, IIS (log W3C format) dan banyak lainnya web, proxy, wap, streaming server, mail server dan ftp server.

Requirement:

perl

RH based:

# zypper install perl

Debian based:

# apt-get install perl

Installasinya cukup mudah koq..

1. Get Package

# wget http://sourceforge.net/projects/awstats/files/AWStats/awstats-6.9.tar.gz/download

2. Extract Package and rename awstats directory

# tar -xzvf awstats-6.9.tar.gz
# mv awstats-6.9 awstats

3. Change into current directory and run `awstats_configure.pl`

# cd awstats/tools/
# ./awstats_configure.pl

----- AWStats awstats_configure 1.0 (build 1.8) (c) Laurent Destailleur -----
This tool will help you to configure AWStats to analyze statistics for
one web server. You can try to use it to let it do all that is possible
in AWStats setup, however following the step by step manual setup
documentation (docs/index.html) is often a better idea. Above all if:
- You are not an administrator user,
- You want to analyze downloaded log files without web server,
- You want to analyze mail or ftp log files instead of web log files,
- You need to analyze load balanced servers log files,
- You want to 'understand' all possible ways to use AWStats...
Read the AWStats documentation (docs/index.html).
.
-----> Running OS detected: Linux, BSD or Unix
Warning: AWStats standard directory on Linux OS is '/usr/local/awstats'.
If you want to use standard directory, you should first move all content
of AWStats distribution from current directory:
/home/deanet/public_html/deanet.co.cc/awstats
to standard directory:
/usr/local/awstats
And then, run configure.pl from this location.
Do you want to continue setup from this NON standard directory [yN] ? y '<- ketik y'
.
-----> Check for web server install
.
Enter full config file path of your Web server.
Example: /etc/httpd/httpd.conf
Example: /usr/local/apache2/conf/httpd.conf
Example: c:\Program files\apache group\apache\conf\httpd.conf
Config file path ('none' to skip web server setup):
> /etc/apache2/httpd.conf '<- isikan path konfigurasi apache na'
.
-----> Check and complete web server config file '/etc/apache2/httpd.conf'
  Add 'Alias /awstatsclasses "/home/deanet/public_html/deanet.co.cc/awstats/wwwroot/classes/"'
  Add 'Alias /awstatscss "/home/deanet/public_html/deanet.co.cc/awstats/wwwroot/css/"'
  Add 'Alias /awstatsicons "/home/deanet/public_html/deanet.co.cc/awstats/wwwroot/icon/"'
  Add 'ScriptAlias /awstats/ "/home/deanet/public_html/deanet.co.cc/awstats/wwwroot/cgi-bin/"'
  Add '<directory>' directive
  AWStats directives added to Apache config file.
.
-----> Update model config file '/home/deanet/public_html/deanet.co.cc/awstats/wwwroot/cgi-bin/awstats.model.conf'
  File awstats.model.conf updated.
.
-----> Need to create a new config file ?
Do you want me to build a new AWStats config/profile
file (required if first install) [y/N] ? y '<- ketik y'
.
-----> Define config file name to create
What is the name of your web site or profile analysis ?
Example: www.mysite.com
Example: demo
Your web site, virtual server or profile name:
> deanet.co.cc <strong><- isi nama domain</strong>
.
-----> Define config file path
In which directory do you plan to store your config file(s) ?
Default: /etc/awstats
Directory path to store config file(s) (Enter for default): 'tekan enter'
>
.
-----> Create config file '/etc/awstats/awstats.deanet.co.cc.conf'
 Config file /etc/awstats/awstats.deanet.co.cc.conf created.
.
-----> Restart Web server with '/sbin/service httpd restart'
service: no such service httpd
.
-----> Add update process inside a scheduler
Sorry, configure.pl does not support automatic add to cron yet.
You can do it manually by adding the following command to your cron:
/home/deanet/public_html/deanet.co.cc/awstats/wwwroot/cgi-bin/awstats.pl -update -config=deanet.co.cc
Or if you have several config files and prefer having only one command:
/home/deanet/public_html/deanet.co.cc/awstats/tools/awstats_updateall.pl now
Press ENTER to continue... '<- tekan enter'
.
.
A SIMPLE config file has been created: /etc/awstats/awstats.deanet.co.cc.conf
You should have a look inside to check and change manually main parameters.
You can then manually update your statistics for 'deanet.co.cc' with command:
> perl awstats.pl -update -config=deanet.co.cc
You can also read your statistics for 'deanet.co.cc' with URL:
> http://localhost/awstats/awstats.pl?config=deanet.co.cc
.
Press ENTER to finish.. '<- tekan enter'

Configurasi nya:

edit file /etc/awstats/awstats.deanet.co.cc.conf

	LogFile="/var/log/apache2/deanetc.access-log"
	DirData="/home/deanet/public_html/deanet.co.cc/awstats"
	SiteDomain="deanet.co.cc"
	AllowToUpdateStatsFromBrowser=1

make sure log access apache file same as with Log File awstats :)

	<virtualHost deanet.co.cc:80>
        	ServerName deanet.co.cc
	        ServerAlias www.deanet.co.cc
	        DocumentRoot "/home/deanet/public_html/deanet.co.cc"
	        CustomLog "/var/log/apache2/deanetc.access-log" combined '<- here'
	        ErrorLog "/var/log/apache2/deanetc.error.log"
	        HostnameLookups Off
	        UseCanonicalname Off
        	ServerSignature Off
	        <directory "/home/deanet/public_html/deanet.co.cc">
	                Options All
	                AllowOverride None
	                Order allow,deny
                	Allow from All
	        </directory>
	</virtualHost>

Testing

Untuk test bisa langsung ke http://server/awstats/awstats.pl?config=your-domain.com

untuk update via console:

wwwroot/cgi-bin # ./awstats.pl -config=deanet.co.cc -update

Tips:

Awstats menudukung juga untuk membaca log berdasarkan hari, tanggal, bulan dan tahun. Hanya diperlukan kesamaan penamaan file log access saja dan install cronolog jangan lupa.

#  wget http://cronolog.org/download/cronolog-1.6.2.tar.gz
# ./configure
# make && make install

lalu edit file /etc/awstats/awstats.deanet.co.cc.conf

LogFile="/var/log/apache2/logs/%YYYY/%MM/%DD/deanetc.access-log"

dan httpd.conf

CustomLog "|/usr/local/sbin/cronolog /var/log/apache2/%Y/%m/%d/deanetc.access.log" combined

selesai

semoga berguna :)

Referensi:

How to install Postfix, UW IMAP and RoundCube webmail

2009-07-16T16:07:00+07:00

Sudah lama gak update blog. ok gan, masih dengan topik yang bikin njlimet.. sansaya ruwet.. tambah njlimet.. marahi petheng ndedhet.. terus gremet-gremet … :Dk demam bhs kaskus :ngacir: .

klik cendol nya gan jangan lupa ..

percobaan ini menggunakan mesin openSUSE 11.0 (i586) via zypper.

Requirement:

Apache server & MySQL server

Install zypper

# yast -i zypper

Install Postfix

1. Install

# zypper install postfix

2. Konfigurasi `/etc/postfix/main.cf`

soft_bounce = no
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
mail_owner = postfix
default_privs = nobody
inet_interfaces = all
unknown_local_recipient_reject_code = 450
debug_peer_level = 2
debugger_command =
     PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
     xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = maildrop
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/packages/postfix/samples
readme_directory = /usr/share/doc/packages/postfix/README_FILES
mail_spool_directory = /var/mail
canonical_maps = hash:/etc/postfix/canonical
virtual_maps = hash:/etc/postfix/virtual
relocated_maps = hash:/etc/postfix/relocated
transport_maps = hash:/etc/postfix/transport
sender_canonical_maps = hash:/etc/postfix/sender_canonical
masquerade_exceptions = root
masquerade_classes = envelope_sender, header_sender, header_recipient
program_directory = /usr/lib/postfix
masquerade_domains =
mydestination = $myhostname, localhost.$mydomain
defer_transports =
disable_dns_lookups = no
relayhost =
content_filter =
mailbox_command =
mailbox_transport =
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_client_restrictions =
smtpd_helo_required = no
smtpd_helo_restrictions =
strict_rfc821_envelopes = no
mynetworks_style = subnet
smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination
#smtpd_recipient_restrictions = permit_sasl_authenticated,reject_unauth_destination
smtp_sasl_auth_enable = no
smtpd_sasl_auth_enable = yes
smtpd_use_tls = no
smtp_use_tls = no
alias_maps = hash:/etc/aliases
mailbox_size_limit = 0
message_size_limit = 10240000
#myhostname = linux.local
#change below information as needed
myhostname = alinux.web.id
mynetworks = 198.99.198.183, 127.0.0.1

3. Konfigurasi /etc/postfix/virtual

alinux.web.id           virtual
deanet@alinux.web.id    deanet

4. Start Postfix Mail Server

# rcpostfix start

Install UW IMAP

1. Install

# zypper install imap imap-lib

2. Konfigurasi imap di /etc/xinetd.d/imap

#
# imap - pop2 mail daemon
#
service pop2
{
        disable         = yes
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = root
        server          = /usr/sbin/ipop2d
        flags           = IPv4
}
#
# imap - pop3 mail daemon
#
service pop3
{
        disable         = yes
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = root
        server          = /usr/sbin/ipop3d
        flags           = IPv4
}
#
# imap - pop3 mail daemon over tls/ssl
#
service pop3s
{
        disable         = yes
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = root
        server          = /usr/sbin/ipop3d
        flags           = IPv4
}
#
# imap - imap mail daemon
#
service imap
{
        disable         = no
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = root
        server          = /usr/sbin/imapd
        flags           = IPv4
}
#
# imap - imap mail daemon over tls/ssl
#
service imaps
{
        disable         = yes
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = root
        server          = /usr/sbin/imapd
        flags           = IPv4
}

3. Add `set disable-plaintext nil` di `/etc/c-client.cf`

set rshpath /usr/bin/rsh
set sshpath /usr/bin/ssh
set disable-plaintext nil

4. Done

Install Roundcube

1. unduh roundcube di http://roundcube.net/downloads

# wget http://sourceforge.net/project/downloading.php?group_id=139281&filename=roundcubemail-0.2.2.tar.gz
# tar -xzvf roundcubemail-0.2.2.tar.gz
# cd roundcubemail-0.2.2

2. Beri Hak akses writeable all pada temp dan logs

# chmod 777 temp logs

3. Buat database roundcube

# mysql -u root -p

mysql> CREATE DATABASE database_roundcubemail;
GRANT ALL PRIVILEGES ON database_roundcubemail.* TO user_sql@localhost IDENTIFIED BY 'password_user_mysql';

simpan lalu keluar

mysql> FLUSH PRIVILEGES;
mysql> quit

4. Dumping data SQL roundcube

mysql> roundcubemail < SQL/mysql.initial.sql

5. Konfigurasi Roundcube

# cp config/db.inc.php.dist config/db.inc.php
# cp config/main.inc.php.dist config/main.inc.php

edit db.inc.php

# vi db.inc.php

cari bagian dibawah ini dan sesuaikan dengan user mysql yang kita buat tadi

$rcmail_config['db_dsnw'] = 'mysql://user_mysql:password_user_mysql@localhost/database_roundcubemail';

edit main.inc.php

vi main.inc.php

cari bagian dibawah ini dan sesuaikan.

$rcmail_config['default_host'] = 'localhost';

atau bisa juga dengan multihost (domain mesti kudu point ke web server na)

$rcmail_config['default_host'] = array('deanet.co.cc', 'alinux.web.id');

6. selesai / done.

Troubleshooting

Server internal Error 500

Solusi: set Apache directive

	<directory "/home/deanet/public_html/deanet.co.cc/mail">
                Options All
                AllowOverride All
                Order allow,deny
                Allow from All
	</directory>

Referensi:

Install Apache 1.3 with mod_ssl and mod_watch, Mysql 4.1, PHP 5 on FreeBSD 7.2

2009-06-20T21:00:06+07:00

Same as previous posting, we have installed apache 2 , mysql 5.x and php 5. On this posting now, we’ll try install apache 1.3 with mod_ssl and mod_watch, MySQL 4.1 and PHP 5.

Installation:

Apache 1.3

to install apache 1.3 with mod_ssl :

# cd /usr/ports/www/apache13-modssl
# make install clean

to start just type

# /usr/local/sbin/apachectl start

to enable apache on boot add apache_enable="YES" following file /etc/rc.conf

check apache on your browser type localhost / 127.0.0.1 / ip address

install mod_watch

# wget ftp://ftp.freebsd.org/pub/FreeBSD/ports/distfiles/mod_watch318.tgz
# tar -xzvf mod_watch318.tgz
# cd mod_watch
# make install-dynamic

PHP 5

# cd /usr/ports/www/lang/php5

make sure to build Apache module is checked

add these option on file /usr/local/etc/apache/httpd.conf

	AddType application/x-httpd-php .php
	AddType application/x-httpd-php-source .phps

create file php.ini by copy php.ini-dist

# cd /usr/local/etc/
# cp php.ini-dist php.ini

and then restart apache

# /usr/local/sbin/apachectl restart

create file php on /usr/local/www/apache22/data/

<?php phpinfo();?>

save as test.php

now test on your browser http://127.0.0.1/test.php

MySQL 4.1

# cd /usr/ports/databases/cd mysql41-server/

create database

# /usr/local/bin/mysql_install_db

change owner and group as mysql

# chown -R mysql /var/db/mysql/
# chgrp -R mysql /var/db/mysql/

run mysql daemon

/usr/local/bin/mysqld_safe user=mysql &

change mysql password

/usr/local/bin/mysqladmin -u root password newpass

to automatic msyql enable when boot add /etc/rc.conf:

mysql_enable="YES"

Install PHP5-MySQL Module

cd /usr/ports/databases/php5-mysql
make install clean

create file php to check it

	<?php
	$test=mysql_connect("localhost","mysql","");
	if(!$test)
	{
	print "cant connect";
	}
	else
	{
	print "connected";
	}
	?>

save as test-db.php on /usr/local/www/apache22/data/ and go to your browser http://localhost/test-db.php

done.

Reference:

Install apache, php5, and mysql on FreeBSD 7.2 using ports

2009-06-17T17:00:06+07:00

Update: 12/09/2009

Apache web server one of the most widely used. Apache can also be installed on freebsd. following way to install apache, PHP5, mysql the most easy to use ports.

1. Install Apache:

# cd /usr/ports/www/apache22
# make install clean

to start just type

# /usr/local/sbin/apachectl start

to enable apache on boot add apache22_enable="YES" following file /etc/rc.conf

check apache on your browser type localhost

2. Install PHP 5

# /usr/ports/lang/php5
# make install clean

make sure to build Apache module is checked

add these option on file /usr/local/etc/apache22/httpd.conf

AddType application/x-httpd-php .php
AddType application/x-httpd-php-source .phps

Add Index.php to load auto index

<IfModule dir_module>
    DirectoryIndex index.html index.php
</IfModule>

create file php.ini by copy php.ini-dist

# cd /usr/local/etc/
# cp php.ini-dist php.ini

and then restart apache

# /usr/local/sbin/apachectl restart

create file php on /usr/local/www/apache22/data/

<?php phpinfo();?>

save as test.php

now test on your browser http://127.0.0.1/test.php

Install Mysql 5

# cd /usr/ports/databases/mysql51-server
# make install clean

create database

# /usr/local/bin/mysql_install_db

change owner and group as mysql

# chown -R mysql /var/db/mysql/
# chgrp -R mysql /var/db/mysql/

run mysql daemon

/usr/local/bin/mysqld_safe user=mysql &;

change mysql password

/usr/local/bin/mysqladmin -u root password newpass

to automatic msyql enable when boot add /etc/rc.conf:

mysql_enable="YES";

Install php5-mysql module

cd /usr/ports/databases/php5-mysql
make install clean

create file php to check mysql

    <?php
    $test=mysql_connect("localhost","mysql","";);
    if(!$test)                                                                 
    {                                                                          
    print "cant connect";                                            
    }                                                                          
    else                                                                       
    {                                                                          
    print "connected";                                               
    }                                                                          
    ?>

save as test-db.php on /usr/local/www/apache22/data/ and go to your browser http://localhost/test-db.php

Reference:

Installasi FreeBSD dan setting jaringan FreeBSD as guest di vmware server

2009-06-12T12:00:00+07:00

FreeBSD ….

hmm… sudah lama sekali skitar satu tahun yang lalu pgen nyobain FreeBSD tapi lum kesampean2. Dulu pertama kali denger rasanya aneh. lagian ada juga teman2 nya seperti NetBSD terus lagi OpenBSD. Waduh.. makanan apalagi tuh. Kalau ga salah pertama kali dengar sistem operasi ini pas semester 5-6 lah. Macam kayak kutu kupret aq g tahu makanan kek gini (sampek skrg :mrgreen:) . Alhasil, setelah baca2 waktu itu akrhirnya tau juga kalo FreeBSD,OpenBSD, sama NetBSD adalah satu keturunan dari BSD. BSD sendiri kepanjangan dari Bumi Serpong Damai … eh g dink :D . klo km cari di wikipedia emang ada 2 :mrgreen: . BSD ituh kepanjangan dari barkeley software distribution. Tadi smpet lupa SD nya kepanjangan dari apa. Kalo B nya itu memang dari sebuah kota Barkeley sono, kampus barkeley. back to topic.

Barkeley itu dikembangkan untuk sistem unix AT&T. (doh) pa lagi tuh AT&T sama unix ? . mending baca selengkapnya di sini. Nah BSD ini punya anak 3 dan anak2 yg lainnya, FreeBSD terus NetBSD sama OpenBSD, dll. semua lahir karena punya karakteristik sendiri2. Biasalah namanya juga kreativitas ;) .

Ok, Installasi FreeBSD sebenernya gampang-gampang susah. Gampang kalo pas lancar, n susah kalo pas g lancar. hehe. Ya intinya jangan pernah menyerah lah. ok, aq install FreeBSD ini di mesin virtual vmware, km bisa coba ke mesin asli.

Installasi FreeBSD:

Donlot dulu isonya di freebsd.org
Boot iso nya, terus liat langkah selanjutnya di sini :D

Di situ uda komplit banget panduannya, tinggal merhatiin apa2 aj yg mesti dilakukan. Yang kudu diperhatiin:

FreeBSD mesti pake partisi primary.
Setiap partisi diistilahkan sebagai slice (cmiiw)

Itu aja sih. perintah-perintah bikin slice sudah lengkap di situ . seperti n untuk bikin slice baru, d untuk hapus slice, baca deh manualnya :). Jangan lupa install openssh dan aktifkan daemonnya biar waktu boot langsung diaktifkan service na. Terus bikin user baru juga.

Nah, kalo uda ke install dengan baik, coba kita setting biar FreeBSD na bisa nge-ping jaringan kita, terus konek internet supaya bisa install httpd php mysql dengan mudah via ports (posting selanjutnya).

1. setting network FreeBSD di vmware na pake bridge

2. lalu boot, dan Login via root di vmware

3. Ketik ifconfig untuk liat nama interface na

ketik ifconfig untuk liat nama interface nya

FreeBSD# ifconfig
le0: flags=8843<up,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
    options=8<vlan_MTU>
    ether 00:0c:29:82:21:3e
    inet 10.100.100.22 netmask 0xffffff00 broadcast 10.100.100.255
    media: Ethernet autoselect
    status: active
plip0: flags=108810<pointopoint,SIMPLEX,MULTICAST,NEEDSGIANT> metric 0 mtu 1500
lo0: flags=8049<up,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
    inet6 fe80::1%lo0 prefixlen 64 scopeid 0x3
    inet6 ::1 prefixlen 128
    inet 127.0.0.1 netmask 0xff000000

Disitu terlihat nama interface yang dipake adalah le0 . dan juga sudah ada ip nya karena memang sudah diseting, kalo belum pasti belum keliatan.

4. Tambahkan opsi di `/etc/rc.conf`

ifconfig_le0="inet 10.100.100.22 netmask 255.255.255.0"

ifconfig_le0 = le0 sesuai dengan nama interface na 10.100.100.22 = ini ip yang masih nganggur di jaringan kmputer kita (bukan virtual/host). 255.255.255.0 = netmask yang kita pake di jaringan kmputer kita (bukan virtual/host).

nah kalo sudah restart jaringannya dengan ketik:

/etc/rc.d/netif restart

lalu coba ping ke alamat ip komputer kita (host). misal ip yang aq pake di host adalah 10.100.100.23. harusnya smpai sini kita sudah bisa ngeping alamat ip host. kalo gak bisa coba restart dolo guest/ FreeBSD na. :D .

.. uda bos, tapi Lho… koq g bisa ngeping google ?? hehe .. tenang dulu bos, kita mesti nambahin gateway sama name server /dns nya.

5. Tambahkan name server

tambahkan dns / domain name server di /etc/resolv.conf

nameserver xxx.xxx.3.7
nameserver xxx.xxx.3.6

6. Tambahkan gateway dan hostname di `/etc/rc.conf`

defaultrouter="10.100.100.1"
hostname="FreeBSD.mesinvirtual.com"

7. Tambahkan alias host di `/etc/hosts`

10.100.100.22           FreeBSD.mesinvirtual.com

coba reboot guestna, dan ping ke gogel. :)

Experiment laen:

FreeBSD ni agak aneh. waktu pertama kali habis di-install su untuk user biasa digagalkan. Terus ssh untuk root juga di disable. so, kita mesti config sedikit biar enak nanti.

enable su untuk user biasa:

login ke root via vmware
ketik sperti berikut untuk menambahkan user baru ke group wheel

	#pw groupmod wheel -M user_baru

untuk liat apa sudah masuk ke group wheel ketik:

# pw groupshow wheel
wheel:*:0:root,user_baru

ok, coba akses ssh via putty ke mesin guest :D .. mantap bukan :mrgreen: .. mklum nih masi cupu :-P

Referensi:

How to change port and enable log OpenSSH SSH daemon

2009-06-07T07:06:12+07:00

The syslog-ng application is a flexible and highly scalable system logging application that is ideal for creating centralized logging solutions. The main features of syslog-ng are; reliable log transfer, secure logging using SSL/TLS, IPv4 and IPv6 support and many others” (Syslog-ng, 2008).

Problem:

On Linux Suse enterprise version, log ssh saved into /var/log/messages , or opensuse 11 like my machine doesn’t noticed into /var/log/messages. So we have a solution, what is solution ??

Solution:

we can add option log on syslog-ng and noticed into self directori or self file. example: sshderr.log for error access and sshd.log for enable access into directori /var/log/sshd.

Prepare:

1. Make sure syslog-ng have been installed on your machine.

# rpm -qa | grep syslog
syslog-ng-1.6.12-76.2

if nothing of results, you can install by yast:

# yast2 -i syslog-ng

2. Make sure openssh daemon is running

# ps aux | grep sshd

if not running, assumed we use opensuse 11 type,:

/etc/init.d/sshd start

3. Make sure enable `SyslogFacility` on `/etc/ssh/sshd_config`

SyslogFacility AUTH

Configuration:

1. Create directory `/var/log/sshd`

# mkdir /var/log/sshd

2. create two empty files into directori `/var/log/sshd`

# touch /var/log/sshd/sshderr.log
# touch /var/log/sshd/sshd.log

3. add some option into `/etc/syslog-ng/syslog-ng.cnf`

# SSH Filters
filter f_sshderr    { match('^sshd\[[0-9]+\]: error:'); };
filter f_sshd       { match('^sshd\[[0-9]+\]:'); };
# SSH Logging
destination sshderr { file("/var/log/sshd/sshderr.log"); };
log { source(src); filter(f_sshderr); destination(sshderr); flags(final); };
destination sshd { file("/var/log/sshd/sshd.log"); };
log { source(src); filter(f_sshd); destination(sshd); flags(final); };

4. Restart service

Suseconfig service:

# SuSEconfig
Starting SuSEconfig, the SuSE Configuration Tool...
Running in full featured mode.
Reading /etc/sysconfig and updating the system...
Executing /sbin/conf.d/SuSEconfig.glib2...
[Default Applications]
application/x-redhat-package-manager=package-manager.desktop
application/x-rpm=package-manager.desktop
Executing /sbin/conf.d/SuSEconfig.groff...
Executing /sbin/conf.d/SuSEconfig.permissions...
Finished.

Syslog-ng service:

# service syslog restart
Shutting down syslog services                                         done
Starting syslog services                                              done

done. finish.

now u can test by remote machine with ssh. try make error and repeat remote that make accessable. see ssh log:

error log:

# cat /var/log/sshd/sshderr.log
Jun  1 06:34:37 dhanuxe sshd 1579: error: PAM: Authentication failure for deanet from 125.208.155.134

accessable log:

dhanuxe:/home/deanet # cat /var/log/sshd/sshd.log
Jun  1 06:34:35 dhanuxe sshd 1579: reverse mapping checking getaddrinfo for 125.208.155.134.cbn.net.id [125.208.155.134] failed - POSSIBLE BREAK-IN ATTEMPT!

Jun 1 06:34:44 dhanuxe sshd 1579: Accepted keyboard-interactive/pam for deanet from 125.208.155.134 port 1996 ssh2

Change Port

To change ssh service you can edit following file /etc/ssh/sshd_config

Port 22

gud lak ;)

Reference:

How to install Plugin Architecture Cacti and Mysql template for cacti

2009-06-03T03:06:16+07:00

Update: 25/6/2009

The Plugin Architecture for Cacti was designed to be both simple in nature and robust enough to allow freedom to do almost anything in Cacti. Cacti itself is designed nicely enough that integrating into it is fairly easy with very little modifications necessary. teMySQLcacti is A highly-modified version of MySQL monitoring templates for Cacti. You import a single host, which includes a bunch of graphs and graph types. To install it you must install Plugin Architecture Cacti first.

Preparing to install Plugin Architecture Cacti:

1. Fresh installation cacti (recommanded)

Recommanded using fresh installation cacti or your cacti will not work. You can see how to install cacti on previous post.

2. Download and extract

Download on this page

# cd /temp-directory/plugin/architecture/cacti/
# wget -c http://mirror.cactiusers.org/downloads/plugins/cacti-plugin-0.8.7d-PA-v2.4.zip
# tar -zvxf cacti-plugin-arch.tar.gz

Installing Plugin Architecture Cacti:

1. Patch cacti

change into your cacti directory and patching

# cd /srv/www/htdocs/cactifresh
# patch -p1 -N &lt; /directory/plugin/architecture/cacti/cacti-plugin-0.8.7d-PA-v2.4.diff

2. Configration cacti

edit file global.php. Edit this to point to the default URL of your Cacti install ex: if your cacti install as at http://serverip/cactifresh/ this would be set to /cactifresh/ .

$config['url_path'] = '/cactifresh/';

to more information how to add cacti plugins, you can see on this page

Installing Mysql template for cacti:

1. Download and extract package from this page

# cd /temp-directory/plugin/mysql
# wget -c http://www.faemalia.net/mysqlUtils/teMySQLcacti-20060810.tar.gz
# tar -xzvf teMySQLcacti-20060810.tar.gz

2. copy `mysql_stats.php` and `dumpMemcachedStats.php` on `/srv/www/htdocs/cactifresh/scripts/`

3. Make sure your cacti poller running with cron daemon every `1 minutes`. U can use spine, see on previous page.

4. Import xml template . ex: `cacti_host_template_x_db_server_ht_0.8.6i.xml`

5. Login into your cacti website then Create new device within new template ( `cacti_host_template_x_db_server_ht_0.8.6i.xml` ) .

6. Done.

Reference:

How to install poller cactid or spine on linux

2009-05-31T06:05:23+07:00

spine: a backend data gatherer for cacti

This code represents high speed poller replacement for cmd.php. It has come quite a ways from it’s initial development. It is 100% compatible with the legacy cmd.php processor. (Larry Adams aka TheWitness)

Prepare:

1. Make sure net-snmp-devel package have been installed on your machine.

# rpm -qa | grep snmp

on my machine results:

net-snmp-5.4.1-77.4
snmp-mibs-5.4.1-77.4
libsnmp15-5.4.1-77.4
php5-snmp-5.2.9-0.1
net-snmp-devel-5.4.1-77.4

if you dont have anything of package, install using yast. yeah, i’m using rh based / opensuse 11.

# yast2 -i net-snmp

2. Get package from www.cacti.net

# cd /usr/src
# wget http://www.cacti.net/downloads/spine/cacti-spine-0.8.7c.tar.gz

Installation spine:

1. extract package

# tar -xzvf cacti-spine-0.8.7c.tar.gz

2. Configure, make and make install :)

# cd cacti-spine-0.8.7c
# ./configure && make && make install

Configuring spine:

0. Copying spine.conf and configuring it

# cd /usr/local/spine/etc
# cp spine.conf.dist spine.conf

# vi spine.conf
DB_Host         localhost
DB_Database     cacti
DB_User         cactiuser
DB_Pass         cactipassword
DB_Port         3306

1. Set crontab time for 1 minutes

* * * * * /usr/bin/php /srv/www/htdocs/cacti/poller.php > /dev/null 2>&1

2. Change poller configuration on cacti</strong>

a. Fill path spine

click settings -> Path . u will see like this:

then click save

b. change poller configuration

click settings -> Poller . u will see like this:

then click save

others configuration:

1. Update value of poller on database

default value of poller on cacti database are 300 seconds. We can change that value via mysql console

# mysql -u root -p
Enter password:
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 28894
Server version: 5.0.77-community MySQL Community Edition (GPL)
Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

change into cacti database

mysql> use cacti;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A
Database changed

and update value of poller on database.

mysql> update data_template_data set rrd_step='60';
mysql> update data_template_rrd set rrd_heartbeat='120';
mysql> flush privileges;

2. Remove rra data on rra directory.</strong>

Remove old rra data that does not confuse with the new data of spine poller. Backup first if u not sure what r u doing.

# cd /srv/www/htdocs/cacti/rra
# tar -czvf /srv/www/htdocs/backup-rra.tar.gz *

then u can remove rra data

# rm *

Finish..

check your log to make sure spine is running .. ;)

Troubleshooting:

if u got error like below when using spine version cacti-spine-0.8.7/a/c

configure: error:


*** [Gentoo] sanity check failed! ***
*** libtool.m4 and ltmain.sh have a version mismatch! ***
*** (libtool.m4 = 1.5.22, ltmain.sh = 1.5.26) ***

try using spine version 7c beta 2 on this page

gud luck ;)

Reference:

How to install Cacti 0.8.7d

2009-05-26T01:00:05+07:00

About Cacti

Cacti is a complete network graphing solution designed to harness the power of RRDTool’s data storage and graphing functionality. Cacti provides a fast poller, advanced graph templating, multiple data acquisition methods, and user management features out of the box. All of this is wrapped in an intuitive, easy to use interface that makes sense for LAN-sized installations up to complex networks with hundreds of devices.

so, let’s do it : On this experiment I use openSUSE 11. U can try on debian based or ubuntu. see this page for more info :).

1. Prepare web server and Database server

At this point we’ll prepare web server dan database server. you can view how to install web server and database server on here with indonesian language. But don’t worry, u can also see english version on this page.

you can check or make sure webserver(apache) and database server (mysql) installed on your machine. on open suse 11 we can check apache with command:

# rpm -qa | grep apache2

and mysql

# rpm -qa | grep mysql

2. Prepare php-snmp module

just type like this to install php5-snmp module:

# yast2 -i php5-snmp

that automatically install:

net-snmp-5.4.1-77.4
snmp-mibs-5.4.1-77.4
libsnmp15-5.4.1-77.4
php5-snmp-5.2.9-0.1
net-snmp-devel-5.4.1-77.4

check with rpm -qa | grep snmp to make sure like on list. if isn’t on list, u can install step by step list module.

3. Prepare rrdtool

at least, we’ve two way to install rrdtool. pls choose use binary. If rrdtool not recognized by cacti, u must compile rrdtool from source.

a. Use binary from repositori.

we can type:

# yast2 -i rrdtool

that automatically install:

rrdtool-1.2.27-22.1
rrdtool-devel-1.2.27-22.1

check with rpm -qa | grep rrdtool to make sure like on list. if isn’t on list, u can install step by step list module.

b. Compile from source

# wget http://oss.oetiker.ch/rrdtool/pub/rrdtool-1.3.8.tar.gz
# tar -xzvf rrdtool-1.3.8.tar.gz;cd rrdtool-1.3.8
# ./configure && make && make install

NOTE Installing dependencies:

glib-2.15.4.tar.gz
cairo-1.6.4.tar.gz
pango-1.21.1.tar.bz2

dependencies package download recommanded from here

Get package, extract package, change to work directory and install

# aclocal
# autoheader
# autoconf
# automake
# ./configure
# make
# make install

please see install or readme files on package for information :)

4. Installing Cacti

Go to the�download page to download cacti.

4.1. Put `cacti-0.8.7d.tar.gz` into directory can access on site.

example: root directory on example.com is /srv/www/htdocs . so put cacti-0.8.7d.tar.gz into htdocs directory and extract.

# tar -xzvf cacti-0.8.7d.tar.gz

4.2. rename directory `cacti-0.8.7d` to cacti be simply use and change directory to it

# mv cacti-0.8.7d cacti; cd cacti

4.3. add group cacti

# groupadd cacti

and user for cacti

# useradd -g cacti cactiuser

4.3. change password for cacti user

# passwd cactiuser

Now, Installing cacti database and make sure cacti user to have privileges

4.4. create database cacti

# mysqladmin -u root -p create cacti

4.5. dump cacti database

# mysql -u root -p cacti < cacti.sql

4.6. set privileges cacti database to cacti user

# mysql -u root -p
mysql> GRANT ALL ON cacti.* TO cactiuser@localhost IDENTIFIED BY �cactipassword�;
mysql> flush privileges;

4.7. Edit Configuration config.php

# vi include/config.php
/* make sure these values refect your actual database/host/user/password */
$database_type = �mysql�;
$database_default = �cacti�;
$database_hostname = �localhost�;
$database_username = �cactiuser�;
$database_password = �cactipassword�;
$database_port = �3306";

4.8. set permission rra and log directory to cactiuser

# chown -R cactiuser rra/ log/

4.9. make cron schedule with crontab

# crontab -e

type a and fill like this

*/1 * * * * /usr/bin/php /srv/www/htdocs/cacti/poller.php > /dev/null 2>&1

type esc and :w to write, and type q to quit .

4.10. access it from site `example.com/cacti`

results:

click next » choose new install » choose net-snmp 5.x and rrdtool 1.2.x . i use 1.3 version. so, make sure version that’s true. and then click Finish

ok, just it :) . you can access now on example.com/cacti . use admin as user and admin as password. How to create and manage cacti ?, you can see video on this page.

Troubleshooting:

1. Socket Error

get the error:

Error
The following PHP extensions are missing:
* sockets

make sure Configure Command on phpinfo have

--enable-sockets

if none, install php5-sockets

# yast2 -i php5-sockets

if it’s not resolve problem, you can recompile your php from source , googling :)

2. Graphic not shown / Make sure `rrdtool` works as normally

maybe you got error like this

make sure your rrdtool can generate for graphic file. and try on konsole with type:

/usr/local/rrdtool-1.3.8/bin/rrdtool graph /tmp/cacti.png - \
--imgformat=PNG \
--start=1243236410 \
--end=1243322810 \
--title="localhost - Load Average" \
--rigid \
--base=1000 \
--height=120 \
--width=500 \
--alt-autoscale-max \
--lower-limit=0 \
--units-exponent=0 \
COMMENT:"From 2009/05/25 08\:26\:50 To 2009/05/26 08\:26\:50\c" \
COMMENT:"  \n" \
--vertical-label="processes in the run queue" \
--slope-mode \
--font TITLE:12: \
--font AXIS:8: \
--font LEGEND:10: \
--font UNIT:8: \
DEF:a="/srv/www/htdocs/cacti/rra/localhost_load_1min_16.rrd":load_1min:AVERAGE \
DEF:b="/srv/www/htdocs/cacti/rra/localhost_load_1min_16.rrd":load_5min:AVERAGE \
DEF:c="/srv/www/htdocs/cacti/rra/localhost_load_1min_16.rrd":load_15min:AVERAGE \
CDEF:cdefg=TIME,1243322526,GT,a,a,UN,0,a,IF,IF,TIME,1243322526,GT,b,b,UN,0,b,IF,IF,TIME,1243322526,GT,c,c,UN,0,c,IF,IF,+,+ \
AREA:a#EACC00FF:"1 Minute Average"  \
GPRINT:a:LAST:" Current\:%8.2lf\n"  \
AREA:b#EA8F00FF:"5 Minute Average":STACK \
GPRINT:b:LAST:" Current\:%8.2lf\n"  \
AREA:c#FF0000FF:"15 Minute Average":STACK \
GPRINT:c:LAST:"Current\:%8.2lf\n"  \
LINE1:cdefg#000000FF:"\n"

that command will create file cacti.png on /tmp . you need modify that command where is rrd path location.

3. Make sure snmp daemon running.

type this to make sure snmp daemon running on your machine:

snmpwalk -c public -v 1 localhost system

it will results:

SNMPv2-MIB::sysDescr.0 = STRING: Linux ddd.ssss.net 2.6.18-92.1.13.el5.028stab059.6 #1 SMP Fri Nov 14 20:22:51 MSK 2008 i686
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (53004148) 6 days, 3:14:01.48
SNMPv2-MIB::sysContact.0 = STRING: Sysadmin (root@localhost)
etc..

4. make sure enough memory

type like this on konsole:

/usr/bin/php cacti/poller.php

if output of console results :

Out of memory

u must killall -9 something_daemon that running to reallocate new space of memory

5. Always check cacti log on log directory

cmiiw :)

Reference:

Installasi Postfix, Saslauthd, VM-Pop3d, dan SquirrelMail di OpenSuse

2009-05-19T19:00:05+07:00

Tutorial ini khusus diperuntukkan bagi seorang pemula / nubie yang ingin belajar lebih dalam mengenai segala tetek bengek sper. So, tutorial ini bagus banget utk saya pribadi :D . Tidak diperuntukkan bagi anda2 yang sudah mahir, hapal, diluar kepala (sampek lupa just kidding), jago, super jago tentang segala srper.:D

okay, apa itu postfix? saslauthd ? vm-pop3d, n squirrelmail ??

Pendahuluan:

Pernah kah terbayangkan ? gimna sih cara kerja ketika kita mengirim email dari login sampai logout ?. Bagaimna lagi kalau kita memakai email client like thunderbird or outlook ?? Hmmm … Okay, proses tersebut paling tidak dibutuhkan :

Mail Server

Mail Server yaitu sebuah server yang digunakan untuk menyimpan dan mengirim sebuah email. bisa diibaratkan mail server itu seperti sebuah kantor pos. Untuk mengirim sebuah email dari alamat email yang satu ke alamat email yang lain digunakan sebauh protocol (aturan) yaitu Simple Mail Transfer Protocol SMTP. Protocol SMTP telah menjadi aturan dasar yang disepakati untuk pengiriman email. Dengan demikian semua software email server pasti mendukung protokol ini. SMTP merupakan protokol yang digunakan untuk megirim email (komunikasi antar mail server), dan tidak digunakan untuk berkomunikasi dengan client. Sedangkan untuk client, digunakan protokol imap imaps pop3 pop3s.

Contoh Mail Server:

Postfix
QMail
Exim
Sendmail
dll

IMAP / POP3

Supaya sebuah mail server dapat di akses oleh client, dikembangkan sebuah aplikasi dimana client dapat mengakses email dari sebuah email server. IMAP adalah sebuah aplikasi pada layer Internet protokol yang memungkinkan client untuk mengakses email yang ada di server. Selain IMAP ada juga POP3 yang fungsinya sama dengan imap, akan tetapi memiliki karakteristik yang berbeda dalam cara pengaksesan pada server.

IMAP

IMAP (Internet Message Access Protocol), protokol yang memperbolehkan pengambilan email tanpa harus didownload ke email client. Contoh penggunaan IMAP yang paling sering adalah akses web mail.

Menurut saya pribadi: imap itu digunakan sebagai interface antara client dan server berbasis webmail. Ada banyak macam Imap server, like :

UW IMAP
Dovecot
Courier IMAP
Cyrus IMAP
dll

POP

POP (Post Office Protocol) Server, biasanya menggunakan POP3, digunakan untuk proses penyimpanan email yang nantinya akan diambil oleh email client. Biasana POP3 ada didalam Imap server. Untuk UW IMAP sama Devecot sudah ada fasilitas POP3 nya tinggal diaktifkan. Kalau Courier sama Cyrus saya belum pernah coba. Ada juga Vm-pop3 yang memang dikhususkan utk akses pop3 untuk virtual mesin seperti yang saya pakai dalam percobaan kali ini.

Authentication

Proses yang terjadi waktu login sama kirim email dikirim secara plain text. Nah, untuk itu diperlukan authentication yang akan mengurusi proses tersebut. banyak juga macam2 jenis authenticationna. SASL, TLS, SSL, dll . Disini saya memakai Courier-Authlib dan Cyrus-SASL utk authenticationa, vm-pop3d untuk POP3 na, Postfix sebagai mail serverna.

Ok, lets go to installation:

1. Install Postfix

#yast2 -i postfix

2. Install Courier-Authlib dan Cyrus-SASL

#yast2 -i courier-authlib cyrus-sasl cyrus-sasl-crammd5 cyrus-sasl-digestmd5 cyrus-sasl-gssapi cyrus-sasl-otp cyrus-sasl-plain cyrus-sasl-saslauthd

3. Install vm-pop3d

unduh vm-pop3d lalu diekstrak trus di install

#wget http://www.ibiblio.org/pub/Linux/system/mail/pop/vm-pop3d-1.1.6.tar.gz
#tar -zxvf vm-pop3d-1.1.6.tar.gz
#cd vm-pop3d-1.1.6
#./configure && make && make install

4. Bikin user baru

#yast2

Pilih Security and Users -> User and Group Management

5. Konfigurasi Postfix

konfigurasi saya seperti ini:

soft_bounce = no
queue_directory = /var/spool/postfix
command_directory = /usr/sbin
daemon_directory = /usr/lib/postfix
mail_owner = postfix
default_privs = nobody
inet_interfaces = all
unknown_local_recipient_reject_code = 450
debug_peer_level = 2
debugger_command =
    PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
    xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail
newaliases_path = /usr/bin/newaliases
mailq_path = /usr/bin/mailq
setgid_group = maildrop
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/packages/postfix/samples
readme_directory = /usr/share/doc/packages/postfix/README_FILES
mail_spool_directory = /var/mail
canonical_maps = hash:/etc/postfix/canonical
virtual_maps = hash:/etc/postfix/virtual
relocated_maps = hash:/etc/postfix/relocated
transport_maps = hash:/etc/postfix/transport
sender_canonical_maps = hash:/etc/postfix/sender_canonical
masquerade_exceptions = root
masquerade_classes = envelope_sender, header_sender, header_recipient
program_directory = /usr/lib/postfix
masquerade_domains =
mydestination = $myhostname, localhost.$mydomain
defer_transports =
disable_dns_lookups = no
relayhost =
content_filter =
mailbox_command =
mailbox_transport =
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_client_restrictions =
smtpd_helo_required = no
smtpd_helo_restrictions =
strict_rfc821_envelopes = no
mynetworks_style = subnet
smtpd_recipient_restrictions = permit_mynetworks,permit_sasl_authenticated,reject_unauth_destination
#smtpd_recipient_restrictions = permit_sasl_authenticated,reject_unauth_destination
smtp_sasl_auth_enable = no
smtpd_sasl_auth_enable = yes
smtpd_use_tls = no
smtp_use_tls = no
alias_maps = hash:/etc/aliases
mailbox_size_limit = 0
message_size_limit = 10240000
#myhostname = linux.local
#change below information as needed
myhostname = alinux.web.id
mynetworks = 198.99.198.183, 127.0.0.1

6. Konfigurasi file virtual

Tambahkan domain dan nama email na di /etc/postfix/virtual

alinux.web.id           virtual
deanet@alinux.web.id    deanet

Jalankan perintah berikut:

# cd /etc/postfix
# postmap virtual
# postfix reload

7. Auto servis

untuk auto serpis biar dijalankan ketika pas reboot tambahkan di /etc/init.d/boot.local

/usr/sbin/saslauthd -a shadow
/usr/local/sbin/vm-pop3d -d

8. Restart smua servis

#postfix restart
#/usr/sbin/saslauthd -a shadow
#/usr/local/sbin/vm-pop3d -d

9. Testing

utk testing kirim dengan menggunakan akun email lain ke nama email yang dibuat tadi. lalu cek di /var/mail/ . apakah ada mail utk user tadi :) . Untuk setting terima dan kirim menggunakan thunderbird seting sperti berikut:

INCOMING:

server type: POP3 server name: alinux.web.id port: 110 user: deanet

OUTGOING:

server name: alinux.web.id port: 25

IMAP

Sekarang saya ingin agar ketika saya bepergian jauh, saya tetap bisa memakai email saya tersebut tanpa harus menyetting / membuat akun di thunderbird. Jawabannya adalah dengan menggunakan webmail. oleh karena itu kita butuh IMAP server dan Squirrelmail. untuk akses IMAP nya saya memakai UW IMAP, dan Squirrelmail sebagai webmail na.

Ok, langsung aj:

1. Install UW IMAP

#yast2 -i imap imap-lib

2. Konfigurasi imap di `/etc/xinetd.d/imap`

konfigurasi imap saya:

#
# imap - pop2 mail daemon
#
service pop2
{
    	disable         = yes
        socket_type     = stream
        protocol        = tcp
    	wait            = no
        user            = root
        server          = /usr/sbin/ipop2d
        flags           = IPv4
}
#
# imap - pop3 mail daemon
#
service pop3
{
        disable         = yes
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = root
    	server          = /usr/sbin/ipop3d
        flags           = IPv4
}
#
# imap - pop3 mail daemon over tls/ssl
#
service pop3s
{
    	disable         = yes
        socket_type     = stream
        protocol        = tcp
    	wait            = no
        user            = root
        server          = /usr/sbin/ipop3d
        flags           = IPv4
}
#
# imap - imap mail daemon
#
service imap
{
        disable         = no
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = root
        server          = /usr/sbin/imapd
        flags           = IPv4
}
#
# imap - imap mail daemon over tls/ssl
#
service imaps
{
        disable         = yes
        socket_type     = stream
        protocol        = tcp
        wait            = no
        user            = root
    	server          = /usr/sbin/imapd
        flags           = IPv4
}

Untuk memastikan bahwa imap running listen on inet ketik netstat -ntlp utk liat port na.

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 localhost:953           *:*                     LISTEN      -
tcp        0      0 *:smtp                  *:*                     LISTEN      -
tcp        0      0 *:mysql                 *:*                     LISTEN      -
tcp        0      0 *:pop3                  *:*                     LISTEN      -
tcp        0      0 *:imap                  *:*                     LISTEN      -
tcp        0      0 *:www-http              *:*                     LISTEN      -
tcp        0      0 mail.alinux.web.:domain *:*                     LISTEN      -
tcp        0      0 127.0.0.2:domain        *:*                     LISTEN      -
tcp        0      0 localhost:domain        *:*                     LISTEN      -
tcp        0      0 *:ftp                   *:*                     LISTEN      -
tcp        0      0 *:domain                *:*                     LISTEN      -
tcp        0      0 *:ssh                   *:*                     LISTEN      -

WebMail

Install Squirremail

prepare:

# mkdir /usr/local/squirrelmail
# cd /usr/local/squirrelmail
# mkdir data temp
# chgrp nogroup data temp
# chmod 0730 data temp

Ekstrak paket:

# cd /usr/local/squirrelmail
# tar --bzip2 -xvf /usr/local/src/downloads/squirrelmail-1.4.17.tar.bz2
# mv squirrelmail-1.4.17 www

Konfigruasi squirrel mail:

# cd /usr/local/squirrelmail
# www/configure

Select the "D" option and then configure SquirrelMail with the "uw" preset. Also make sure to set the data and attachment directory settings ("/usr/local/squirrelmail/data" and "/usr/local/squirrelmail/temp" respectively) under "4. General Options". Make any other changes as you see fit, select "S" to save and then "Q" to quit.

kalo sudah, konfigurasi virtual host biar kelola sub domain na enak. or klo gak langsung aj akses k http://example.com/squirrelmail/src/configtest.php

konfigurasi virtual host saya:

    Servername mail.alinux.web.id
    ServerAlias www.mail.alinux.web.id
#DocumentRoot "/home/deanet/www/mail"
    CustomLog "/var/log/apache2/mail.access-log" combined
    ErrorLog "/var/log/apache2/mail.error-log"
    HostnameLookups Off
    UseCanonicalname Off
    ServerSignature Off
    #
    #       Options All
    #       AllowOverride None
    #       Order allow,deny
    #       Allow from All
#
#Alias /s /usr/src/squirrelmail/www
DocumentRoot "/usr/src/squirrelmail/www"
<directory /usr/src/squirrelmail/www>
  Options None
  AllowOverride None
  DirectoryIndex index.php
  Order Allow,Deny
  Allow from all
</directory>
<directory /usr/src/squirrelmail/www/*>
  Deny from all
</directory>
<directory /usr/src/squirrelmail/www/images>
  Allow from all
</directory>
<directory /usr/src/squirrelmail/www/plugins>
  Allow from all
</directory>
<directory /usr/src/squirrelmail/www/src>
  Allow from all
</directory>
<directory /usr/src/squirrelmail/www/templates>
  Allow from all
</directory>
<directory /usr/src/squirrelmail/www/themes>
  Allow from all
</directory>
<directory /usr/src/squirrelmail/www/contrib>
  Order Deny,Allow
  Deny from All
  Allow from 127
  Allow from 10
  Allow from 192
</directory>
<directory /usr/src/squirrelmail/www/doc>
  Order Deny,Allow
  Deny from All
  Allow from 127
  Allow from 10
  Allow from 192
</directory>

Karena ”uw-imapd server disables plain text logins by default in 2002 and newer versions”, maka tambahkan set disable-plaintext nil di /etc/c-client.cf agar kita bisa mengakses imap server dengan squirrelmail.

konfigurasi saya:

set rshpath /usr/bin/rsh
set sshpath /usr/bin/ssh
set disable-plaintext nil

ude deh .. .selesai … huff …

gud lak … ;)

cmiiw :)

Thanks

Referensi:

Install vsftpd FTP Server di openSUSE

2009-05-10T10:05:09+07:00

Apa itu FTP ?

FFTP merupakan salah satu protokol Internet yang paling awal dikembangkan, dan masih digunakan hingga saat ini untuk melakukan pengunduhan (download) dan penggugahan (upload) berkas-berkas komputer antara klien FTP dan server FTP. Sebuah Klien FTP merupakan aplikasi yang dapat mengeluarkan perintah-perintah FTP ke sebuah server FTP, sementara server FTP adalah sebuah Windows Service atau daemon yang berjalan di atas sebuah komputer yang merespons perintah-perintah dari sebuah klien FTP. Perintah-perintah FTP dapat digunakan untuk mengubah direktori, mengubah modus transfer antara biner dan ASCII, menggugah berkas komputer ke server FTP, serta mengunduh berkas dari server FTP.

Installasi vsftpd

yast -i vsftpd

untuk menjalankan service vsftpd ketik:

/etc/init.d/vsftpd start

agar user didalam mesin bisa login edit file /etc/vsftpd.conf . ubah sperti berikut:

local_enable=YES

lalu agar kita bisa menulis/write ke dalam mesin ubah bagian berikut:

write_enable=YES

lalu bisa di coba dengan FileZilla. gud lak ;)

Referensi:

Installasi BIND, Apache2, Mysql, PHP dan Konfigurasi DNS serta Virtual Host di OpenSuse

2009-05-05T05:05:12+07:00

BIND - DNS Server

cek bind nya sudah ada apa belum:

#rpm -qa|grep bind

jika bind na lum ada ketik:

#yast2 -i bind

Konfigurasi DNS:

pastikan /etc/resolv.conf terisi ip dari nameserver km. misal

nameserver xxx.99.198.183

selanjutnya tambahkan pada file /etc/named.conf seperti berikut:

zone "domain.com" IN {
    type master;
    file "/var/lib/named/domain.com.zone";
    allow-update {none;};
};
zone "198.99.198.183.in-addr.arpa" IN {
    type master;
    file "/var/lib/named/198.99.xxx.rev";
    allow-update {none;};
};

buat file domain.com.zone di /var/lib/named yang isinya:

@       IN      SOA     ns1.domain.com. domain.com (
                    200903203
                    10800
                    3600
                    604800
                    3600 ) ;

    IN     NS      ns1.domain.com.
    IN     NS      ns2.domain.com.
    IN      A       xxx.99.198.183
ns1   IN      A       xxx.99.198.183
ns2   IN      A       xxx.99.198.183
www IN      A       xxx.99.198.183

selanjutnya file 198.99.xxx.rev di folder /var/lib/named yang isinya:

$TTL    14400
@       86400   IN      SOA     ns1.domain.com. domain.com (
            2009021501
            86400
            7200
            3600000
            86400 );
IN NS ns1.domain.com
1 IN PTR ns1.domain.com
2 IN PTR www.domain.com

$TTL    1440
@       86400   IN      SOA     ns2.domain.com. domain.com (
            2010021501
            86400
            7200
            3600000
            86400 );
IN      NS              ns2.domain.com
1       IN      PTR     ns2.domain.com
2       IN      PTR     www.domain.com

oke, untuk dns sudah. 2 file zone dan reverse adalah file yang paling penting. Untuk mengetest apakah sudah benar apa belum konfigurasinya bsa menggunakan nslookup ato dig. eitsss.. pastikan daemon bind na uda jalan.

cek status daemon dns server:

#rcnamed status

untuk menjalankan ketik:

#rcnamed start

untuk test dns domain domain.com :

#dig domain.com

; <<>> DiG 9.4.2-P1 <<>> domain.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41519
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; QUESTION SECTION:
;domain.com.                 IN      A
;; ANSWER SECTION:
domain.com.          3600    IN      A       xxx.99.198.183
;; AUTHORITY SECTION:
domain.com.          3600    IN      NS      ns2.domain.com.
domain.com.          3600    IN      NS      ns1.domain.com.
;; ADDITIONAL SECTION:
ns1.domain.com.      3600    IN      A       xxx.99.198.183
ns2.domain.com.      3600    IN      A       xxx.99.198.183
;; Query time: 1 msec
;; SERVER: xxx.99.198.183#53(xxx.99.198.183)
;; WHEN: Tue May  5 14:01:58 2009
;; MSG SIZE  rcvd: 115

ato dg nslookup

nslookup
> set type=all
> domain.com
Server:  ns1.dtp.net.id
Address:  xxx.43.160.50
Non-authoritative answer:
domain.com   internet address = xxx.99.198.183
domain.com
    primary name server = ns1.domain.com
    serial  = 200903203
    refresh = 10800 (3 hours)
    retry   = 3600 (1 hour)
    expire  = 604800 (7 days)
    default TTL = 3600 (1 hour)
domain.com   nameserver = ns1.domain.com
domain.com   nameserver = ns2.domain.com
domain.com   nameserver = ns2.domain.com
domain.com   nameserver = ns1.domain.com
domain.com   internet address = xxx.99.198.183

okeh… jika uda ada result berarti uda bs jalan. klo eror y dicoba maning, n itu baru dns nya ajah :D, lum install apache. setting vhostna dll.

Apache

Installasi apache:

#yast -i apache2

lihat status apache uda jalan lum:

#rcapache2 status

klo belum jalankan:

#rcapache2 start

Installasi PHP

#yast -i php5 php5-mysql apache2-mod_php5

untuk lihat modul apache yang sudah jalan apa aj ketik:

#a2enmod -l

jika lum ada php5 yang terload ketik:

#a2enmod php5

lalu restart modul apache na:

#rcapache2 restart

bisa di test dengan skrip php

MySQL:

untuk installasi ketik:

#yast -i mysql

lalu jalankan daemon mysql

#rcmysql start

ganti password mysql

#mysqladmin -u root -p passwordbaru

okeh, sampe saat ini sudah ada apache,mysql,php ama dns serper. untuk ngecek apakah daemonna jalan, scan aj pake nmap.

#nmap localhost
Starting Nmap 4.60 ( http://nmap.org ) at 2009-05-05 14:30 UTC
Warning: Hostname localhost resolves to 2 IPs. Using 127.0.0.1.
Interesting ports on localhost.localdomain (127.0.0.1):
Not shown: 1705 closed ports
PORT     STATE SERVICE
21/tcp   open  ftp
53/tcp   open  domain
80/tcp   open  http
3306/tcp open  mysql
Nmap done: 1 IP address (1 host up) scanned in 0.495 seconds

klo nmap belum ada install dolo lah :D . pake yast -i nmap

Virtual Host

nah, akhirnya sampek jugak ke virtual host. ni yang bkin puyeng cos ngutek2 dari pagi sampek sore ndak isa2. weleh2. ternyata naruh nya salah. okeh.

Kasus:

Virtual Host yang aq pake sekarang adalah untuk bkin 2 subdomain dan 1 root domain.

Pemecahan:

hanya dibutuhkan 1 file zone dan 1 file reverse. Jadi setiap subdomain ditambahkan dalam zone root domain, tidak berdiri dalam file sndiri. bisa sih berdiri diri sendiri, tapi agak rumit or gimna kata org yang mengajariku :D . bagaimna jika ada root domain lain ?? jawabnnya maka baru dibuat 1 file zone lagi.

oke, daripada ngomong ngalor ngidul gak karuan. skrg ke POC na aj:

tambahkan pada file /var/lib/named/198.99.208.rev seperti berikut

$TTL 86400
@       IN      SOA     sub1.domain.com.   sub1.domain.com (
                    100
                    1H
                    1M
                    1W
                    1D );
@       IN      NS      ns1.domain.com
@       IN      NS      ns2.domain.com

$TTL 86400
@       IN      SOA     sub2.domain.com.   sub2.domain.com (
                    100
                    1H
                    1M
                    1W
                    1D );
@       IN      NS      ns1.domain.com
@       IN      NS      ns2.domain.com

terus pada file domain.com.zone tambahkan:

sub1  IN      A       xxx.99.198.183
sub2  IN      A       xxx.99.198.183

selesai :mrgreen: . mudahkan … heheheeh .. cmn nambahin d reverse na sama 2 baris seuprit di zone na …

eitssss… skrg kita konfig virtual hostna di open suse, file /etc/apache2/httpd.conf nya menginclude file default-server.conf. di file default-server.conf , konfigruasi root directory di set di situ. untuk vhost na di set di conf.d/*.conf yang terinisialisasi di file httpd.conf na. jadi disable aj di httpd.conf pada bagian:

#Include /etc/apache2/vhosts.d/*.conf

selanjutnya kita akan mengkonfigurasi langsung di file default-server.conf. so gak perlu repot2 buka2 file. ckup satu file aj :) . Yang perlu diperhatikan adalah ketika menmbhkan vhost utk subdomain, maka root domain juga mesti ditambahkan. oke. kira2 konfigna sperti ini:

kalo uda mantep restart apache na :)

jangan lupa pastikan konfigruasi file /etc/hosts ditambahkan :

xxx.99.198.183  sub1.domain.com sub2.domain.com domain.com

restart networkna:

#rcnetwork restart

n pastikan kondisi nameserver pada file /etc/apache2/listen.conf keadaaan uncomment

#NameVirtualHost *:80

lalu coba akses ke domain, subdomainnya juga. Jika masih gagal terus… yaaa .. dicoba kembali .. sampek bisa.

huff… akhirna slesai jugakk, never stop to learn n try …. gud lak… ;)

cmiiw

referensi:

How to Install Usplash on debian lenny

2009-04-14T16:00:23+07:00

Boring with your lenny cause print text mode on kernel message ? . You must try this application called usplash. it’s cool splash screen to change your text message. Many various installation usplash on linux distribution. On debian based u’ve just typed apt-get to install it. Easy ??? yeah…. let’s go to prepare installation.

open your favourite konsole, then type:

sudo apt-get install usplash usplash-theme-debian

edit configuration u need on /etc/usplash.conf. also add parameter vga=791 splash=verbose on your grub like this:

title        Debian GNU/Linux lenny
root         hd0,9)
kernel	     /boot/vmlinuz-2.6.26-1-686 root=/dev/sda10 rw ramdisk_size=10000 init=/etc/init lang=us vga=791 splash=verbose
initrd	     /boot/initrd.img-2.6.26-1-686

after configure it, u must build your new initram with command:

sudo dpkg-reconfigure usplash

and reboot ;)

tips

To change theme usplash you just change symbolic link on /etc/alternatives/usplash-artwork.so to your theme_name.so .

sudo ln -s /path/your/directory/theme_name.so  /etc/alternatives/usplash-artwork.so

you can try change your theme with MacX Usplash Theme 1.2 .

gudlak ;)

Reference:

How to set or reset password mysql on Ubuntu

2009-04-05T05:00:16+07:00

I’ve was succesfully install mysql on my friends machine :) . After do that i need set new password for replace balnk passsword. This post is tiny psoting. So, this not recommanded for advanced user :lol: . ok. sometimes, after fresh installation i use command like this to set new password root on mysql.

mysqladmin  -u root password newpassword

but it doesn’t work. I’ve got some error message:

mysqladmin: connect to server at 'localhost' failed
error: 'Access denied for user 'root'@'localhost' (using password: NO)'

Try to recover, so i need to stop mysql daemon

sudo /etc/rc5.d/S19mysql stop

then start mysql daemon again with skip grant tables and netwoking:

sudo mysqld --skip-grant-tables --skip-networking

now, mysql daemon running with skip grant tables and networking. we can login without password :lol:

mysql -u root

then, update for new password

mysql> update mysql.user set password=password('toor') where user='root';

don’t forget to flush privilages ;)

mysql> flush privileges;

type quit and try again to login without password

mysql> quit
Bye

	[zie: ]$ mysql -u root
	ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)
	[zie: ]$

it’s work ;) ..

some loggs can be see on here and here

Thanks to:

zie, for the machine :D

Reference:

Ubuntu help

Neban's notebook

php ini not working on cPanel use suPHP

Load Balancing MySQL Replication Master to Master with HAProxy

Quick How to Load Balancing MySQL master to master with HAProxy

Installing HAProxy

Configuring HAProxy

Create mysql service on xinetd

Create MySQL Script to check mysql server is healthy running on localhost

Make sure mysqlchk is allowed as xinet services

Create user mysqlchkuser and give grant.

Create mysql service on xinetd

Create MySQL Script to check mysql server is healthy running on localhost

Make sure mysqlchk is allowed as xinet services

Create user mysqlchkuser and give grant.

Give permission 777 for /tmp/mysqlchk.*

RUN HAProxy now

at Last

Troubleshoot

check mysql on localhost

Check mysql service from HAProxy Server

Addtional Section

MySQL Configuration File

Master 1

Master 2

Replicate Master to Master MySQL

Preparation

Configuration

Master 1

Master 2

Setup Replication

Setup Master 1

Dont Close this session

Now, we can remove lock tables

Go to Master 2

Setup Master 2

Switch Back to Master 1

Check on Master 2

Compiling MySQL 5.5.12 with CMAKE on CentOS

Install dependencies package

Getting source and cmake

Make and make install

My.cnf Configuration

Run daemon

Install Nginx PHP and FCGI Perl on ubuntu

Quick How to

FCGI perl on Nginx

CGIWRAP-FCGI Perl Script

Nginx configuration for FCGI PERL

Run cgiwrap-fcgi.pl

PHP on Nginx

Troubleshooting error

Install FCGI PERL module

What is Hadoop - Apa itu Hadoop

Install rrdtool 1.4.5 on Linux machine

Installing Dependencies

install RRDTOOL 1.4.5

Install Nginx 1.0.4 and PHP-FPM Patch 0.5.14

Install Nginx 1.0.4 version.

Install PHP and Patch FPM 0.5.14

Configure PHP-FPM.conf

Configure PHP.ini

PHP-CGI Script

Upgrading ZPOOL and ZFS version on FreeBSD

Install PHP PostgreSQL Module and enable PostgreSQL Module Internal cPanel PHP on WHM

Enable PostgreSQL module on internal cPanel PHP on WHM.

Enable PostgreSQL module on PHP that run on user/client.

Installing PostgreSQL on cPanel WHM 11

Make Nagios notification to SMS via Twitter update

Install Dependencies

Install Tweepy, Python Twitter Client

Grab Code and Make Auth.

Testing

Install Earthquake Ruby dan Gem di local user

Install Ruby di lingkungan user (tanpa akses root)

setting PATH ENV

Install Gem Ruby

Install Earthquake

How to create RHEL 5.4 Repository for installation package

how to knowing sas hba on IBM Blade HS21 or HS22

This is very simple how to knowing your sas (serial attach scsi) hba on your machine IBM BLade HS21 or HS22.

Give permission 777 for `/tmp/mysqlchk.*`