Search the web
Sign In
New User? Sign Up
lucknow-lug · Uttar Pradesh Linux Users Group
? Already a member? Sign in to Yahoo!

Yahoo! Groups Tips

Did you know...
Want to share photos of your group with the world? Add a group photo to Flickr.

Best of Y! Groups

   Check them out and nominate your group.
Having problems with message search? Fill out this form to ensure your group is one of the first to be migrated to the new message search system.

Messages

  Messages Help
Advanced
Messages 187 - 217 of 247   Newest  |  < Newer  |  Older >  |  Oldest
Messages: Show Message Summaries   (Group by Topic) Sort by Date v  
#217 From: "pcy1988" <pcy1988@...>
Date: Sat Aug 16, 2008 6:13 pm
Subject: regarding firewall
pcy1988
Offline Offline
Send Email Send Email
 
i was told in my previous post"use of iptables in the exam" that u are
not allowed to use iptables in the exam.
i faced another confusion with nfs server that is
i configured the nfs server on one computer and try to mount the shared
folder from client i got the responce that no route to host.
when i use iptables to allow the connections the mounting succeed.
another try is that i disable the selinux then also mounting succeed.
but we not allowed to disable the selinux in the exam.
so from the exam perspective if question is asked to configure the nfs
server what should we do.

#216 From: "pcy1988" <pcy1988@...>
Date: Sun Aug 10, 2008 8:57 pm
Subject: problem with nfs
pcy1988
Offline Offline
Send Email Send Email
 
i configured nfs and dhcp server to install the red hat in another
computer via nfs installation
when i tried to mount the directory from another computer it
says "directory could not be mounted"
one more curious thing is happening is that
after configuring the nfs server on my computer when i restart the
portmap and nfs service on graphical interface it start perfactly
but when i tried to do same thing on virtual console it shows error
"RPC: failed to connect portmap (error -5)".
in my configuration step i did these steps
1- in /etc/exports
/var/ftp/pub       192.168.0.0/24(rw,sync)
after that i start the service
and did this exportfs -av
rpcinfo -p was also showing all ports where the daemons were running
----------------
one more thing is that
when i shut down my pc
it shows the same error
"RPC: failed to connect portmap (error -5)".

-------------
what the problem may be

#215 From: anujsingh_1
Date: Thu Aug 7, 2008 3:12 am
Subject: Re: request for slackware 12.1 DVD
anujsingh_1
Offline Offline
 
--- In lucknow-lug@yahoogroups.com, chanakya.tripathi <no_reply@...>
wrote:
>
> Does anyone have slackware 12.1 DVD . I missed the issuse of linux
> for u. ( Now I do not remeber in which issuse it was )
> However, i tried the listed mirror on its home page but that image is
> not upto th mark.
>
>
> Thanks in advance

yes i have 12.1 dvd.

contact me on anujhere@...

#214 From: "monsterisback" <vidurmittal@...>
Date: Tue Jul 29, 2008 7:00 am
Subject: Re: about MDA
monsterisback
Offline Offline
Send Email Send Email
 
The location for the incoming mail or the inbox can be changed. The
file needed for modification is /etc/dovecot.conf..... In this file
check the section Mailbox Location and Namespaces.

--- In lucknow-lug@yahoogroups.com, Prem Chand <pcy1988@...> wrote:
>
> when we send the mail to any user by sendmail MTA by default it goes to
> /var/spool/mail/
> can we change this path so that mail goes to our desired path
>

#213 From: Sandesh Patil <olpcindia@...>
Date: Mon Jul 28, 2008 3:43 am
Subject: OLPC India Day Invitation
olpcindia
Offline Offline
Send Email Send Email
 

Dear All,      


                   We are celebrating "OLPC India day" on 4th August 2008.This is to introduce to One Laptop Per Child project which is an educational initiative.It has already successfully completed it's 1st pilot in India at Khairat village near Navi Mumbai with the help of "Digital Bridge Foundation"  and is ready to go to scale to different parts of the country.There are many more places in India where project will start soon including Banglore, UP, Palghar, Nasik and Andhra Pradesh.


                  You cordially invited on 4th August to celebrate OLPC India day and be a part of this global initiative. The event  would be covered across the country through Video Conferencing through nearest  Reliance Webworld in your city. Nicholas Negroponte and David Cavallo would be addressing in Mumbai. 


So kindly get yourself Registered on:- 

http://www.olpc..co.in/olpcindiaday/ 

(There is no registration fees )


We would get back to you soon the with venue details on which Reliance Webworld in your city would be hosting this event.


Kindly contact us at :- olpc-india@... for further queries.. 

Kindly pass the word to all the interest group in your city.



Following are the links divided according to various categories:-  

Main OLPC Links

http://www.laptop.org

http://wiki.laptop.org/go/The_OLPC_Wiki 

(Most of the document related to OLPC around the globe is done on this wiki.. It covers each and every aspect of OLPC) 


Technical Docs on OLPC:-  

 Software : http://wiki.laptop.org/go/Software_components

 Hardware : http://wiki.laptop.org/go/Hardware_specification

 Content : http://wiki.laptop.org/go/Content 


 News on OLPC:- 

(Here you would find all the creative and cool stuff  been done with  XO around the   world and some great news on OLPC of various countries)  

 www.olpcnews.com

 http://olpclearningclub.org/   - OLPC Learning Club

 http://olpcnyc.wordpress.com/

 http://olpc.com/  


 Indian News on OLPC:- 

http://www.olpcnews.com/countries/india/

http://wiki.laptop.org/go/OLPC_INDIA

http://wiki.laptop.org/go/Khairat_Chronicle  - This link is about the pilot site in India. 
 
 

Other Countries Websites:-  

http://www.olpcaustria.org/   - Austria

http://www.olpc.org.au/   - Australia

Regards,
OLPC India Team.


Messenger blocked? Want to chat? Here is the solution.

#212 From: Prem Chand <pcy1988@...>
Date: Mon Jul 28, 2008 5:32 am
Subject: about MDA
pcy1988
Offline Offline
Send Email Send Email
 
when we send the mail to any user by sendmail MTA by default it goes to /var/spool/mail/ can we change this path so that mail goes to our desired path


#211 From: chanakya.tripathi
Date: Fri Jul 25, 2008 7:49 pm
Subject: request for slackware 12.1 DVD
chanakya.tri...
Offline Offline
 
Does anyone have slackware 12.1 DVD . I missed the issuse of linux
for u. ( Now I do not remeber in which issuse it was )
However, i tried the listed mirror on its home page but that image is
not upto th mark.


Thanks in advance

#210 From: "Vidur Mittal" <vidurmittal@...>
Date: Mon Jul 14, 2008 8:04 pm
Subject: Re: about ssl
monsterisback
Offline Offline
Send Email Send Email
 


On Tue, Jul 15, 2008 at 1:16 AM, Prem Chand <pcy1988@...> wrote:

what is ssl. in what sence it differs to normal web sites

__._,_._




SSL : Secure socket layer:- In layman language ssl is secure tunnel under which data flows in encrypted format so that it is not easily available to hackers f.e. when we open a website named http://www.yahoo.com the content flowing through this site to the system is not encrypted  the middleman or the hacker can easily capture the packets and convert it in to meaning full informations where as when there iss https link then the data is encrypted which cannot be converted in to meaningful information.

More in Technical lang

Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols that provide secure communications on the Internet for such things as web browsing, e-mail, Internet faxing, instant messaging and other data transfers. There are slight differences between SSL and TLS, but they are essentially the same.



Description
The TLS protocol allows applications to communicate across a network in a way designed to prevent eavesdropping, tampering, and message forgery. TLS provides endpoint authentication and communications privacy over the Internet using cryptography. Typically, only the server is authenticated (i.e., its identity is ensured) while the client remains unauthenticated; this means that the end user (whether an individual or an application, such as a Web browser) can be sure with whom it is communicating. The next level of security — in which both ends of the "conversation" are sure with whom they are communicating — is known as mutual authentication. Mutual authentication requires public key infrastructure (PKI) deployment to clients unless TLS-PSK or the Secure Remote Password (SRP) protocol are used, which provide strong mutual authentication without needing to deploy a PKI.

TLS involves three basic phases:

Peer negotiation for algorithm support
Key exchange and authentication
Symmetric cipher encryption and message authentication
During the first phase, the client and server negotiate cipher suites, which determine the ciphers to be used, the key exchange and authentication algorithms, as well as the message authentication codes (MACs). The key exchange and authentication algorithms are typically public key algorithms, or as in TLS-PSK preshared keys could be used. The message authentication codes are made up from cryptographic hash functions using the HMAC construction for TLS, and a non-standard pseudorandom function for SSL.

Typical algorithms could be:

For key exchange: RSA, Diffie-Hellman, ECDH, SRP, PSK
For authentication: RSA, DSA, ECDSA
Symmetric ciphers: RC4, Triple DES, AES, IDEA, DES, or Camellia. In older versions of SSL, RC2 was also used.
For cryptographic hash function: HMAC-MD5 or HMAC-SHA are used for TLS, MD5 and SHA for SSL, while older versions of SSL also used MD2 and MD4.

How it works

 
SSL handshake with two way authentication with certificates. (Accuracy disputed.)A TLS client and server negotiate a stateful connection by using a handshaking procedure. During this handshake, the client and server agree on various parameters used to establish the connection's security.

The handshake begins when a client connects to a TLS-enabled server requesting a secure connection, and presents a list of supported ciphers and hash functions.
From this list, the server picks the strongest cipher and hash function that it also supports and notifies the client of the decision.
The server sends back its identification in the form of a digital certificate. The certificate usually contains the server name, the trusted certificate authority (CA), and the server's public encryption key.
The client may contact the server that issued the certificate (the trusted CA as above) and confirm that the certificate is authentic before proceeding.

In order to generate the session keys used for the secure connection, the client encrypts a random number with the server's public key, and sends the result to the server. Only the server can decrypt it (with its private key): this is the one fact that makes the keys hidden from third parties, since only the server and the client have access to this data.
From the random number, both parties generate key material for encryption and decryption.
This concludes the handshake and begins the secured connection, which is encrypted and decrypted with the key material until the connection closes.

--
With Best Regards
Vidur Mittal
Meerut

#209 From: Prem Chand <pcy1988@...>
Date: Mon Jul 14, 2008 7:46 pm
Subject: about ssl
pcy1988
Offline Offline
Send Email Send Email
 
what is ssl. in what sence it differs to normal web sites


#208 From: "monsterisback" <vidurmittal@...>
Date: Sat Jul 12, 2008 1:11 pm
Subject: Re: need tips
monsterisback
Offline Offline
Send Email Send Email
 
what you meant to do by this...... do you understand what this will
do.... i just want to ask this........and i hve told u that u can not
use iptables in exam, is this not the part of iptables.... please read
the replies before posting the questions i have told many times
that "USE OF IPTABLES IS NOT ALLOWED IN THE EXAM" this is also the part
of iptable....


--- In lucknow-lug@yahoogroups.com, Prem Chand <pcy1988@...> wrote:
>
> can we use the following step in the RHCE exam when we are
configuring the ftp server
> ************************************
> iptables -I INPUT -s 192.168.0.0/24 -p tcp --dport 21 -j ACCEPT
> iptables -I INPUT -s 192.168.0.0/24 -p udp --dport 21 -j ACCEPT
> *******************************************************
>

#207 From: "monsterisback" <vidurmittal@...>
Date: Sat Jul 12, 2008 1:04 pm
Subject: Re: need help
monsterisback
Offline Offline
Send Email Send Email
 
Please never use iptables in exam....... i hve told this in my previous
replies also.. and iptable is used for securtiy not for opening the
port or defining the port for the service

--- In lucknow-lug@yahoogroups.com, Prem Chand <pcy1988@...> wrote:
>
> my mean to that can we use the following step in the RHCE exam when
we are configuring the ftp server
> **************
> "iptables -I INPUT -s 192.168.0.0/24 -p tcp --dport 21 -j ACCEPT"
> "iptables -I INPUT -s 192.168.0.0/24 -p udp --dport 21 -j ACCEPT"
> **************
>

#206 From: Prem Chand <pcy1988@...>
Date: Fri Jul 11, 2008 7:13 pm
Subject: need tips
pcy1988
Offline Offline
Send Email Send Email
 
can we use the following step in the RHCE exam when we are configuring the ftp server
************************************
iptables -I INPUT -s 192.168.0.0/24 -p tcp --dport 21 -j ACCEPT
iptables -I INPUT -s 192.168.0.0/24 -p udp --dport 21 -j ACCEPT
*******************************************************
 


#205 From: Prem Chand <pcy1988@...>
Date: Fri Jul 11, 2008 7:15 pm
Subject: need tips
pcy1988
Offline Offline
Send Email Send Email
 
can we use the following step in the RHCE exam when we are configuring the ftp server
************************************
iptables -I INPUT -s 192.168.0.0/24 -p tcp --dport 21 -j ACCEPT
iptables -I INPUT -s 192.168.0.0/24 -p udp --dport 21 -j ACCEPT
*******************************************************
 


#204 From: "monsterisback" <vidurmittal@...>
Date: Fri Jul 11, 2008 5:06 am
Subject: Re: need help
monsterisback
Offline Offline
Send Email Send Email
 
This thing you are using for accepting the tcp and udp connection over
port no 21 from ip pool 192.168.0.0/24 and i already said in my
earlier post that you cannot use iptables in exam....... secondly
iptables is used for accepting dening and droping the packets on a
network or over port from a network or from port...........

--- In lucknow-lug@yahoogroups.com, Prem Chand <pcy1988@...> wrote:
>
> my mean to that can we use the following step in the RHCE exam when
we are configuring the ftp server
> **************
> "iptables -I INPUT -s 192.168.0.0/24 -p tcp --dport 21 -j ACCEPT"
> "iptables -I INPUT -s 192.168.0.0/24 -p udp --dport 21 -j ACCEPT"
> **************
>

#203 From: Prem Chand <pcy1988@...>
Date: Fri Jul 11, 2008 4:34 am
Subject: need help
pcy1988
Offline Offline
Send Email Send Email
 
my mean to that can we use the following step in the RHCE exam when we are configuring the ftp server
**************
"iptables -I INPUT -s 192.168.0.0/24 -p tcp --dport 21 -j ACCEPT"
"iptables -I INPUT -s 192.168.0.0/24 -p udp --dport 21 -j ACCEPT"
**************


#202 From: anujsingh_1
Date: Thu Jul 10, 2008 5:43 pm
Subject: Re: need tips
anujsingh_1
Offline Offline
 
--- In lucknow-lug@yahoogroups.com, Prem Chand <pcy1988@...> wrote:
>
> thanks for that apache tips i tried it and working
> ************ ********* ********* ********* ********
> as we know that every services run on a paticular port like
{ftp=21,httpd= 80}
> in the RHCE EXAM can we use IPTABLES to run these services on this
paticular port.
>
1.) Ports you mentioned are default ports means when you run httpd or
vsftpd service they listen on the default ports, altough you can
change these ports in relevant conf file (e.g. for apache installation
using rpm /etc/httpd/conf/httpd.conf).
2.) Your question is not clear.

Anuj

#201 From: Prem Chand <pcy1988@...>
Date: Wed Jul 9, 2008 4:45 am
Subject: need tips
pcy1988
Offline Offline
Send Email Send Email
 
thanks for that apache tips i tried it and working
************ ********* ********* ********* ********
as we know that every services run on a paticular port like {ftp=21,httpd= 80}
in the RHCE EXAM can we use IPTABLES to run these services on this paticular port.


#199 From: anujsingh_1
Date: Sat Jul 5, 2008 9:32 pm
Subject: Re: need help in preparation of RHCE exam
anujsingh_1
Offline Offline
 
--- In lucknow-lug@yahoogroups.com, "monsterisback" <vidurmittal@...>
wrote:
>
> From exam point of perspective you should enable SELinux otherwise all
> of our questions will be treated as incorrect. Yes you should apply
> the correct boolean.
> f.e. you enable share a directory using samba then you have to apply
> the correct boolean so that samba can access it. you can copy the
> SELinux permissions from the smb.conf to the directory using the
> following command
> chcon -R --reference=/etc/samba/smb.conf  /path/of/the/share
>
>
>
> --- In lucknow-lug@yahoogroups.com, Prem Chand <pcy1988@> wrote:
> >
> > plz suggest me some tips about RHCE exam. what we should keep
remember.
> > ************************************************************
> > in perspective of RHCE exam.
> > suppose we have enabled the SELinux and we solve a question. but the
> question�require to apply the correct boolean for proper working
> > but it is not mentioned in the ques. to apply the the boolean. then
> what should we do ? should we apply the boolean or not.���
��� ��� ���
> ��� ��� ��� ��� ��� ���
��� ��� ���
> >
>
Yes Vidur has given a correct hint, suppose you have configured your
apache in a way that a user of your server can share his web pages in
~user/public_html directory then without setting correct boolean of
~user/public_html directory a client will see a forbidden message.
So we have to set the correct boolean value same as of our default
apache DocumentRoot "/var/www/html"
this can be achieved with the command
'chcon -R -v --reference=relevant_file /path/to/our/file-dir'

chcon -R -v --reference=/var/www/html/index.html ~anuj/public_html/
context of /home/anuj/public_html/ retained as
system_u:object_r:httpd_sys_content_t
context of /home/anuj/public_html//index.html retained as
system_u:object_r:httpd_sys_content_t




Different types of boolean values:

[root@anuj ~]# ls -lZ /etc/samba/smb.conf
-rw-r--r--  root root system_u:object_r:samba_etc_t    /etc/samba/smb.conf
[root@anuj ~]# ls -lZ  /etc/httpd/conf/httpd.conf
-rw-r--r--  root root system_u:object_r:httpd_config_t
/etc/httpd/conf/httpd.conf
[root@anuj ~]# ls -lZ  /var/ftp/
drwxr-xr-x  root root system_u:object_r:public_content_t pub



Example configuration of apache on RHEL5 to enable user webpages
(/etc/httpd/conf/httpd.conf)
Find the following lines:
----------------------------------------
<IfModule mod_userdir.c>
     #
     # UserDir is disabled by default since it can confirm the presence
     # of a username on the system (depending on home directory
     # permissions).
     #
     #UserDir disable

     #
     # To enable requests to /~user/ to serve the user's public_html
     # directory, remove the "UserDir disable" line above, and uncomment
     # the following line instead:
     #
     UserDir public_html

</IfModule>
--------------------------------------------------------------------
Also do a chmod 755 ~user

I hope this can provide you some basic of SELinux handling.
In case of some doubt with above example you can ask again. Try and
tell us if you face any problem.

Anuj Singh

#198 From: "monsterisback" <vidurmittal@...>
Date: Sat Jul 5, 2008 5:41 am
Subject: Re: need help in preparation of RHCE exam
monsterisback
Offline Offline
Send Email Send Email
 
From exam point of perspective you should enable SELinux otherwise all
of our questions will be treated as incorrect. Yes you should apply
the correct boolean.
f.e. you enable share a directory using samba then you have to apply
the correct boolean so that samba can access it. you can copy the
SELinux permissions from the smb.conf to the directory using the
following command
chcon -R --reference=/etc/samba/smb.conf  /path/of/the/share



--- In lucknow-lug@yahoogroups.com, Prem Chand <pcy1988@...> wrote:
>
> plz suggest me some tips about RHCE exam. what we should keep remember.
> ************************************************************
> in perspective of RHCE exam.
> suppose we have enabled the SELinux and we solve a question. but the
question�require to apply the correct boolean for proper working
> but it is not mentioned in the ques. to apply the the boolean. then
what should we do ? should we apply the boolean or not.��� ���
��� ���
��� ��� ��� ��� ��� ��� ��� ���
���
>

#197 From: "monsterisback" <vidurmittal@...>
Date: Fri Jul 4, 2008 7:42 am
Subject: Re: regarding RHCE examination
monsterisback
Offline Offline
Send Email Send Email
 
Anuj one of the few person whom i pay respect in the field of linux. I
have never seens a person like anuj he posses good knowledge and
problem soling skills
Regards
Vidur


--- In lucknow-lug@yahoogroups.com, K V Biju <kvbiju22@...> wrote:
>
>
>
> Hi Our group has become active it seems..
> Anuj has given a very good view on configuring the services.
> Keep going.
> Thanks
>

#196 From: Prem Chand <pcy1988@...>
Date: Sat Jul 5, 2008 4:43 am
Subject: need help in preparation of RHCE exam
pcy1988
Offline Offline
Send Email Send Email
 
plz suggest me some tips about RHCE exam. what we should keep remember.
************************************************************
in perspective of RHCE exam.
suppose we have enabled the SELinux and we solve a question. but the question require to apply the correct boolean for proper working
but it is not mentioned in the ques. to apply the the boolean. then what should we do ? should we apply the boolean or not.                                                   


#195 From: K V Biju <kvbiju22@...>
Date: Fri Jul 4, 2008 5:58 am
Subject: Re: Re: regarding RHCE examination
kvbiju22
Offline Offline
Send Email Send Email
 


Hi Our group has become active it seems..
Anuj has given a very good view on configuring the services.
Keep going.
Thanks

--- On Wed, 2/7/08, anujsingh_1 <no_reply@yahoogroups.com> wrote:
From: anujsingh_1 <no_reply@yahoogroups.com>
Subject: [lucknow-lug] Re: regarding RHCE examination
To: lucknow-lug@yahoogroups.com
Date: Wednesday, 2 July, 2008, 12:22 AM

--- In lucknow-lug@ yahoogroups. com, "kvbiju22" <kvbiju22@.. .> wrote:
>
> --- In lucknow-lug@ yahoogroups. com, "pcy1988" <pcy1988@> wrote:
> >
> > in RHCE examination if a question is asked that "configure a ftp
server
> > for your local system and rest of the network should not be able
to
> > access your ftp repository".
> > let assume that i configured the server correctly, but problem is
> > related with denying access.
> > should we simply use the file "/etc/hosts. deny" or IPTABLES.
> > which one will be better.
> > is it necessary to apply netfilter rule to all server related
question.
> >
>
> I think the case is similar when we configure telnet, where we can
> deny the access by editing the file /etc/xinetd. d/telnet. Open the
> file in any editor and add a line
> only_from = 172.25.0.0 where 172.25.0.0 is your local network.
> Restart the servie xinetd . This would solve the problem in
telnet.It
> should work for ftp too, I beleive..
> Hope Anooj will have a better solution
> Try it once
>
The straight forward method is using tcp-wrappers i.e. /etc/hots.deny
files, as devilisback said.
we can also configure the same using xinetd a more comprehensive
approach.

f.e. to integrate vsftpd with xinetd we need to take following steps.

1). Create a file /etc/xinetd. d/vsfpt with the following entries
# default: off
# description: The vsftpd FTP server serves FTP connections. It uses \
# normal, unencrypted usernames and passwords for authentication.
service ftp
{
disable = no
socket_type = stream
wait = no
user = root
server = /usr/sbin/vsftpd
nice = 10
#for your particular requirement to disallow all in the network
only_from = 127.0.0.1
}

2). Edit your /etc/vsftpd/ vsftpd.conf file and comment out line
with "listen=YES"

3). Restart or reload the xinetd service.
/sbin/service xinetd reload

Now test your configuration with
netstat -a |grep ftp

also
To avoid port conflict at boot time turn off the vsftpd service
chkconfig vsftpd off
As of now our vsftpd is integrated with xinetd make sure that xinetd
starts automatically.
chkconfig xinetd on

Anuj Singh



Share files, take polls, and make new friends - all under one roof. Click here.

#194 From: anujsingh_1
Date: Tue Jul 1, 2008 6:52 pm
Subject: Re: regarding RHCE examination
anujsingh_1
Offline Offline
 
--- In lucknow-lug@yahoogroups.com, "kvbiju22" <kvbiju22@...> wrote:
>
> --- In lucknow-lug@yahoogroups.com, "pcy1988" <pcy1988@> wrote:
> >
> > in RHCE examination if a question is asked that "configure a ftp
server
> > for your local system and rest of the network should not be able
to
> > access your ftp repository".
> > let assume that i configured the server correctly, but problem is
> > related with denying access.
> > should we simply use the file "/etc/hosts.deny" or IPTABLES.
> > which one will be better.
> > is it necessary to apply netfilter rule to all server related
question.
> >
>
> I think the case is similar when we configure telnet, where we can
> deny the access by editing the file /etc/xinetd.d/telnet. Open the
> file in any editor and add a line
> only_from = 172.25.0.0 where 172.25.0.0 is your local network.
> Restart the servie xinetd . This would solve the problem in
telnet.It
> should work for ftp too, I beleive..
> Hope Anooj will have a better solution
> Try it once
>
The straight forward method is using tcp-wrappers i.e. /etc/hots.deny
files, as devilisback said.
we can also configure the same using xinetd a more comprehensive
approach.

f.e. to integrate vsftpd with xinetd we need to take following steps.

1). Create a file /etc/xinetd.d/vsfpt with the following entries
# default: off
# description: The vsftpd FTP server serves FTP connections. It uses \
# normal, unencrypted usernames and passwords for authentication.
service ftp
{
disable = no
socket_type = stream
wait = no
user = root
server = /usr/sbin/vsftpd
nice = 10
#for your particular requirement to disallow all in the network
only_from = 127.0.0.1
}

2). Edit your /etc/vsftpd/vsftpd.conf file and comment out line
with "listen=YES"

3). Restart or reload the xinetd service.
/sbin/service xinetd reload


Now test your configuration with
netstat -a |grep ftp

also
To avoid port conflict at boot time turn off the vsftpd service
chkconfig vsftpd off
As of now our vsftpd is integrated with xinetd make sure that xinetd
starts automatically.
chkconfig xinetd on



Anuj Singh

#193 From: "kvbiju22" <kvbiju22@...>
Date: Mon Jun 30, 2008 10:40 am
Subject: Re: regarding RHCE examination
kvbiju22
Offline Offline
Send Email Send Email
 
--- In lucknow-lug@yahoogroups.com, "pcy1988" <pcy1988@...> wrote:
>
> in RHCE examination if a question is asked that "configure a ftp server
> for your local system and rest of the network should not be able to
> access your ftp repository".
> let assume that i configured the server correctly, but problem is
> related with denying access.
> should we simply use the file "/etc/hosts.deny" or IPTABLES.
> which one will be better.
> is it necessary to apply netfilter rule to all server related question.
>

I think the case is similar when we configure telnet, where we can
deny the access by editing the file /etc/xinetd.d/telnet. Open the
file in any editor and add a line
only_from = 172.25.0.0 where 172.25.0.0 is your local network.
Restart the servie xinetd . This would solve the problem in telnet.It
should work for ftp too, I beleive..
Hope Anooj will have a better solution
Try it once

#192 From: "monsterisback" <vidurmittal@...>
Date: Fri Jun 27, 2008 6:12 pm
Subject: Re: regarding RHCE examination
monsterisback
Offline Offline
Send Email Send Email
 
In any of the questions which is regarding the deinal of service ou
should use /etc/hosts.deny. Use of IPTABLES in exam is not
permissible if you use iptables your solution will be treated as wrong


Thanks

Vidur
--- In lucknow-lug@yahoogroups.com, "pcy1988" <pcy1988@...> wrote:
>
> in RHCE examination if a question is asked that "configure a ftp
server
> for your local system and rest of the network should not be able to
> access your ftp repository".
> let assume that i configured the server correctly, but problem is
> related with denying access.
> should we simply use the file "/etc/hosts.deny" or IPTABLES.
> which one will be better.
> is it necessary to apply netfilter rule to all server related
question.
>

#191 From: "pcy1988" <pcy1988@...>
Date: Fri Jun 27, 2008 4:46 pm
Subject: regarding RHCE examination
pcy1988
Offline Offline
Send Email Send Email
 
in RHCE examination if a question is asked that "configure a ftp server
for your local system and rest of the network should not be able to
access your ftp repository".
let assume that i configured the server correctly, but problem is
related with denying access.
should we simply use the file "/etc/hosts.deny" or IPTABLES.
which one will be better.
is it necessary to apply netfilter rule to all server related question.

#190 From: anujsingh_1
Date: Tue Jun 24, 2008 7:01 am
Subject: Installation of java and Apache-tomcat on Linux
anujsingh_1
Offline Offline
 
Installation of java and Apache-tomcat on Linux


1.Introduction
2.Installation of java
3.Installation of apache tomcat
4.References


1.Introduction:
This document is meant for the installation of java and apache-tomcat
over a linux machine.

2.Installation of java
Download the JDK from Sun, to start go here:
http://java.sun.com/javase/downloads/index.jsp
Click on the "Download" link in the JDK  section.
Accept the license and continue.

Under the "Linux Platform", select "rpm self-extracting file".
Download this .bin file and save it to your Linux machine.

become root, and give command chmod 755 downloaded_bin_file for
instance "chmod 755 jdk-6u2-linux-i586.bin"

now execute file with command ./downloaded_bin_file

Accept the license after scrolling down on the terminal. This will
give a .rpm file in the same directory.

install the extracted .rpm file with rpm -ivh extracted_file.rpm

Set the path of java
To set the path of java edit /etc/profile file and add the following lines
JAVA_HOME=/usr/java/jdk1.5.0_09
export PATH=$PATH:$JAVA_HOME/bin
export PATH USER LOGNAME MAIL HOSTNAME HISTSIZE INPUTRC JAVA_HOME
Note: Here rpm file installed java in /usr/java/jdk1.5.0_09 choose the
path name as per your installation version.

Now give command "source /etc/profile"
check the path by giving command

[root@anuj2 ~]# echo $JAVA_HOME
/usr/java/jdk1.5.0_09



3.Installation of apache-tomcat
Download apache-tomcat from
http://archive.apache.org/dist/tomcat/tomcat-5/v5.5.25/bin/
  tar zxvf apache-tomcat-5.5.25.tar.gz
  cd apache-tomcat-5.5.25/bin
[root@anuj2 bin]# sh startup.sh
Using CATALINA_BASE:   /usr/local/apache-tomcat-5.5.25
Using CATALINA_HOME:   /usr/local/apache-tomcat-5.5.25
Using CATALINA_TMPDIR: /usr/local/apache-tomcat-5.5.25/temp
Using JRE_HOME:       /usr/java/jdk1.5.0_09

Automatic startup of apache-tomcat at boot time(Redhat Linux):
Save following script in /etc/init.d/ directory with tomcat name
Note: Use correct path of catalina.sh in PROGRAM

#!/bin/sh
  # chkconfig: - 85 15
  # description: Tomcat is a servlet container
  #PROGRAM=$CATALINA_HOME/bin/catalina.sh
  PROGRAM=/usr/local/apache-tomcat-5.5.25/bin/catalina.sh
  if [ -f $PROGRAM ]; then
         echo "$1ing" `basename $0`
         su - root -c "$PROGRAM $1"
  fi

Now use following commands
"chmod 755 /etc/init.d/tomcat"
"chkconfig --add tomcat "
"chkconfig --level 345 tomcat on"
"service tomcat start"

4.References:
http://apache.org/
http://tech.groups.yahoo.com/group/lucknow-lug/

Anuj Singh

#189 From: anujsingh_1
Date: Sun Jun 15, 2008 7:31 pm
Subject: mysql Archive storage engine on RHEL5
anujsingh_1
Offline Offline
 

The ARCHIVE storage engine is used for storing large amounts of data without indexes in a very small footprint.

ARCHIVE storage engine is included in MySQL binary distributions, but not with RHEL5/Fedora binary rpm's.To enable this storage engine if you build MySQL from source, invoke configure with the --with-archive-storage-engine option.

  • Download mysql
  • Uncompress source
    tar zxvf mysql-5.0.51b.tar.gz
    cd mysql-5.0.51b
    useradd mysql -b /var/lib/mysql
    ./configure –with-mysqld-user=mysql –with-archive-storage-engine –datadir=/var/lib/mysql/
    make && make install
  • Now install initial database with command:
    /usr/local/bin/mysql_install_db
  • [root@anuj mysql-5.0.51b]# /usr/local/bin/mysql_install_db
    Installing MySQL system tables…
    OK
    Filling help tables…
    OK

    To start mysqld at boot time you have to copy
    support-files/mysql.server to the right place for your system

    PLEASE REMEMBER TO SET A PASSWORD FOR THE MySQL root USER !
    To do so, start the server, then issue the following commands:
    /usr/local/bin/mysqladmin -u root password `new-password'
    /usr/local/bin/mysqladmin -u root -h anuj.sytes.net password `new-password'

    Alternatively you can run:
    /usr/local/bin/mysql_secure_installation

    which will also give you the option of removing the test
    databases and anonymous user created by default.  This is
    strongly recommended for production servers.

    See the manual for more instructions.

    You can start the MySQL daemon with:
    cd /usr/local ; /usr/local/bin/mysqld_safe &

    You can test the MySQL daemon with mysql-test-run.pl
    cd mysql-test ; perl mysql-test-run.pl

    Please report any problems with the /usr/local/bin/mysqlbug script!

    The latest information about MySQL is available on the web at
    http://www.mysql.com
    Support MySQL by buying support/licenses at http://shop.mysql.com

  • Copy startup script
    cp /usr/local/mysql-5.0.51b/support-files/mysql.server /etc/init.d/mysqld
  • Do a chmod to the copied startup shell script
    chmod 755 /etc/init.d/mysqld
  • Add to chkconfig
    chkconfig –add mysqld
  • Set the runlevels for mysql service
    chkconfig –level 345 mysqld on
  • Check Engines
    mysql -h localhost -u root -p

    Welcome to the MySQL monitor.  Commands end with ; or \g.
    Your MySQL connection id is 1
    Server version: 5.0.51b Source distribution

    Type `help;' or `\h' for help. Type `\c' to clear the buffer.

    mysql> show engines;
    +————+———+—————————————————————-+
    | Engine     | Support | Comment                                                        |
    +————+———+—————————————————————-+
    | MyISAM     | DEFAULT | Default engine as of MySQL 3.23 with great performance         |
    | MEMORY     | YES     | Hash based, stored in memory, useful for temporary tables      |
    | InnoDB     | YES     | Supports transactions, row-level locking, and foreign keys     |
    | BerkeleyDB | NO      | Supports transactions and page-level locking                   |
    | BLACKHOLE  | NO      | /dev/null storage engine (anything you write to it disappears) |
    | EXAMPLE    | NO      | Example storage engine                                         |
    | ARCHIVE    | YES     | Archive storage engine                                         |
    | CSV        | NO      | CSV storage engine                                             |
    | ndbcluster | NO      | Clustered, fault-tolerant, memory-based tables                 |
    | FEDERATED  | NO      | Federated MySQL storage engine                                 |
    | MRG_MYISAM | YES     | Collection of identical MyISAM tables                          |
    | ISAM       | NO      | Obsolete storage engine                                        |
    +————+———+—————————————————————-+
    12 rows in set (0.00 sec)

    mysql>


    That's it!!!
Anuj Singh

#188 From: anujsingh_1
Date: Mon May 19, 2008 7:01 pm
Subject: Linux Shortcuts and Commands
anujsingh_1
Offline Offline
 
Have a look, makes your work faster.
Taken from:
http://linux.about.com/od/linux101/l/blnewbie5_1.htm




<Ctrl><Alt><F1>
Switch to the first text terminals. Under Linux you can have several
(6 in standard setup) terminals opened at the same time. This is a
keyboard shortcut, which means: "press the control key and the alt
key, hold them. Now press <F1>. Release all keys."

<Ctrl><Alt><Fn> (n=1..6)
Switch to the nth text terminal. (The same could be accomplished with
the rarely used command chvt n. "chvt" stands for "change virtual
terminal"). In text terminal (outside X), you can also use <Alt><Fn>
(the key <Ctrl> is not needed).

tty
Print the name of the terminal in which you are typing this command.
If you prefer the number of the active terminal (instead of its name),
it can be printed using the command fgconsole (="foreground console").

<Ctrl><Alt><F7>
Switch to the first GUI terminal (if X-windows is running on the 7th
terminal, where it typcially is).

<Ctrl><Alt><Fn> (n=7..12)
Switch to the nth GUI terminal (if a GUI terminal is running on screen
n-1). On default, the first X server is running on terminal 7. On
default, nothing is running on terminals 8 to 12--you can start
subsequent X server there.

<Tab>
(In a text or X terminal) Autocomplete the command if there is only
one option, or else show all the available options. On newer systems
you may need to press <Tab><Tab>. THIS SHORTCUT IS GREAT, it can
truely save you lots of time.

<ArrowUp>
(In a text or X terminal) Scroll and edit the command history. Press
<Enter> to execute a historical command (to save on typing).
<ArrowDown> scrolls back.

<Shift><PgUp>
Scroll terminal output up. This works also at the login prompt, so you
can scroll through your bootup messages. The amount/usage of your
video memory determines how far back you can scroll the display.
<Shift><PgDown> scrolls the terminal output down.

<Ctrl><Alt><+>
(in X-windows) Change to the next X-server resolution (if you set up
the X-server to more than one resolution). For multiple resolutions on
my standard SVGA card/monitor, I have the following line in the file
/etc/X11/XF86Config (the first resolution starts on default, the
largest resolution determines the size of the "virtual screen"):
Modes "1024x768" "800x600" "640x480" "512x384" "480x300" "400x300"
"1152x864"Z
Of course, first I had to configure the X server, either by using
Xconfigurator, xf86config, or manually by edition the file
/etc/X11/XF86Config, so that it supports the above resolutions (mostly
the matter of uncommenting the line that defines my video chipset, and
specifying the synchronization frequencies my monitor supports).
XFdrake (Mandrake configuration utility) can do it from GUI. See also
the commands xvidtune and xvidgen.

<Ctrl><Alt><->
(in X-windows) Change to the previous X-server resolution.

<Ctrl><Alt><Esc>
(in X-windows, KDE) Kill the window I am going to click with my mouse
pointer (the pointer changes to something like a death symbol).
Similar result can be obtained with the command xkill (typed in
X-terminal). Useful when an X-window program does not want to close
(hangs?).

<Ctrl><Alt><BkSpc>
(in X-windows) Kill the current X-windows server. Use if the X-windows
server cannot be exited normally.

<Ctrl><Alt><Del>
(in text terminal) Shut down the system and reboot. This is the normal
shutdown command for a user at the text-mode console. Don't just press
the "reset" button for shutdown!

<Ctrl>c
Kill the current process (works mostly with small text-mode applications).

<Ctrl>d
(pressed at the beginning of an empty line) Log out from the current
terminal. See also the next command.

<Ctrl>d
Send [End-of-File] to the current process. Don't press it twice else
you also log out (see the previous command).

<Ctrl>s
Stop the transfer to the terminal.

<Ctrl>q
Resume the transfer to the terminal. Try if your terminal mysteriously
stops responding. See the previous command.

<Ctrl>z
Send the current process to the background.

exit
Logout. I can also use logout for the same effect. (If you have
started a second shell, e.g., using bash, this command will make you
exit the second shell, and you will be back in the first shell, not
logged out. Then use another exit to logout.)

reset
Restore a screwed-up terminal (a terminal showing funny characters) to
default setting. Use if you tried to "cat" a binary file. You may not
be able to see the command as you type it, but it still will work.

<MiddleMouseButton>
Paste the text which is currently highlighted somewhere else. This is
the normal "copy-paste" operation in Linux. It a fast and powerful
supplement to the widely-known GUI "copy-paste" menu-based operation.
(It doesn't work inside older versions of Netscape which use the
Mac/MS Windows-style "copy-paste" exclusively. It does work in the
text terminal if you enabled "gpm" service using "setup". It also
works inside any dialog boxes, etc.--really convenient!) It is best
used with a Linux-ready 3-button mouse (Logitech or similar) or else
set "3-mouse button emulation". The <MiddleMouseButton> is normally
emulated on a 2-button mouse by pressing both mouse buttons simultanously.

~
(tilde character) My home directory (normally the directory
/home/my_login_name). For example, the command cd ~/my_dir will change
my working directory to the subdirectory "my_dir" under my home
directory. Typing just "cd" alone is an equivalent of the command "cd
~". I keep all my files in my home directory.

.
(dot) Current directory. For example, ./my_program will attempt to
execute the file "my_program" located in your current working directory.

..
(two dots) Directory parent to the current one. For example, the
command cd .. will change my current working directory one one level up.

Some additional KDE keyboard shortcuts (useful, but non-essential)
<Alt><Tab> Walk through windows. To walk backwards: <Alt><Shift><Tab>
<Ctrl><Tab> Walk through desktops. To walks backwards: <Ctrl><Shift><Tab>
<Ctrl><Esc> Show the table of processes running on my system. Allow me
to kill any of the processes I started (or send other signals to them).
<Alt><F1> Access the K-menu ("Equivalent to MS Windows "Start" menu).
<Alt><F12> Emulate the mouse using the arrow keys on the keyboard.
<Alt><LeftMouseButton> Drag a window to move it. Normally, I move a
window by dragging its top title bar, but occassionally I manage to
get it off the screen. With this shortcut, I can drag by any part of
the window.
<Alt><PrintScreen> Take a snapshot of the current window into the
clipboard.
<Ctrl><Alt><PrintScreen> Take a snapshot of the entire desktop into
the clipboard.
<Ctrl><Alt><l> Lock the desktop.
<Ctrl><Alt><d> Toggle hide/show the desktop (great to hide the
Solitaire game when your boss walks in).

<Alt><SysRq>
(Non-essential.) This is a group of key combinations implemented at
the Linux kernel level (a low level). It means, chances are these key
combinations will work most of the time. The combinations are meant
for debugging purposes and in an emergency (mostly developers); you
should try other, safer solutions first. The key <SysRq> is also knows
on PC as <PrintScreen>. The combinations can be enabled/disabled by
setting the relevant kernel variable to "1" or "0", e.g. : echo "1" >
/proc/sys/kernel/sysrq
<Alt><SysRq><k> Kill all processes (including X) which are running on
the currently active virtual console. This key combination is know as
"secure access key" (SAK).
<Alt><SysRq><e> Send the TERM signal to all running processes except
init, asking them to exit.
<Alt><SysRq><i> Send the KILL signal to all running processes except
init. This may be more successful in killing runaway processes than
the previous key combination, but it may cause some of them to exit
abnormally.
<Alt><SysRq><l> Send the KILL signal to all processes, including init.
The system will not be functional.
<Alt><SysRq><s> Run an emergency sync (cache write) on all mounted
filesystems. This can prevent data loss.
<Alt><SysRq><u> Remount all mounted filesystems as read-only. This has
the same effect as the sync combination above, but with one important
benefit: if the operation is successful, fsck won't have to check all
filesystems after a computer hardware reset.
<Alt><SysRq><r> Turn off keyboard raw mode. This can be useful when
your X session hangs. After issueing this command you may be able to
use <Ctrl><Alt><Del>.
<Alt><SysRq><b> Reboot immediately without syncing or unmounting your
disks. Your will likely end up with filesystem errors.
<Alt><SysRq><o> Shut the system off (if configured and supported).
<Alt><SysRq><p> Dump the current registers and flags to your console.
<Alt><SysRq><t> Dump a list of current tasks and their information to
your console.
<Alt><SysRq><m> Dump memory info to your console.
<Alt>SysRq><digit> The digit is '0' to '9'. Set the console log level,
controlling which kernel messages will be printed to your console. For
example, '0' will cause only emergency messages like PANICs or OOPSes
displayed on your console.
<Alt><SysRq><h> Display help. Also, any other unsupported
<Alt><SysRq><key> combination will display the same help.


More:
http://onlyubuntu.blogspot.com/2007/03/bash-shell-keyboard-shortcuts-for-linux.h\
tml



http://linux.about.com/od/linux101/l/blnewbie5_1.htm

#187 From: shirish <shirishag75@...>
Date: Thu Feb 28, 2008 12:46 pm
Subject: [Commercial] Service, support, training in Ubuntu
shirishag75
Offline Offline
Send Email Send Email
 
Hi all,
  We are an p2p group  named wikiocean (www.wikiocean.net)  which
uses & supports free software in whichever way possible.
  Most of the time when people are looking for solutions on
GNU/Linux platform they are unsure of service support.
  In that context we are looking  to make a database of freelancers,
small & medium support centres who are providing GNU/Linux service
support to  Individuals, NGO's, small & medium organisations .  As
GNU/Linux is a wide-wide world for time efficiency's sake we have
chosen ubuntu as it  has the commercial support of Canonical while at
the same time has the technical stability & expertise courtesy the
Debian Universe.  So if you are interested in knowing more, please
join http://groups.google.com/group/wikiubuntu.

--
           Regards,
           Shirish Agarwal
   This email is licensed under http://creativecommons.org/licenses/by-nc/3.0/

065C 6D79 A68C E7EA 52B3  8D70 950D 53FB 729A 8B17

Messages 187 - 217 of 247   Newest  |  < Newer  |  Older >  |  Oldest
Advanced
Add to My Yahoo!      XML What's This?

Copyright © 2009 Yahoo! Inc. All rights reserved.
Privacy Policy - Terms of Service - Guidelines - Help