Rustybear BlogThu, 10 Aug 2006
To set up CUPS based printing
apt-get install hplip hpijs
This will install quite a few other things as well, including CUPS
Then go to:
http://localhost:631
and add a printer.
Present configurations include:
HP_Laserjet_2100TN
Device: AppSocket/HP JetDirect
Device URI: socket://10.10.10.99:9100
Make: HP (HPLIP)
Model: HP Laserjet 2100 Foomatic/hpijs
or
HP Laserjet 2100 Series Postscript
HP_Photosmart_7960
Device: Internet Printing Protocal (http)
Device URL: http://10.10.10.98:631/ipp/lpt2
Make: HP (HPLIP)
Model: HP Photosmart 7960 Foomatic/hpijs
Check by going to Printers/Manage Printers/Print Test Page.
Posted at: 21:36 | category: /configure | Comments ()
Configure xterm
edit ~/.Xdefaults as appropriate look at /etc/X11/app-defaults/XTerm for ideas about what and how to change run 'xrdb -merge .Xdefaults' after editing to implement the changes
Posted at: 21:36 | category: /configure | Comments ()
Settings for uploads using PHP/Apache
In Apache httpd.conf, add the following:..... other directives ..... php_value post_max_size "71M" php_value upload_max_filesize "70M" php_value memory_limit "70M"
Posted at: 21:36 | category: /configure | Comments ()
Install Debian Source Packages
Debian can be a bit tricky if you're not familiar with its method of building
source packages. Although this is covered in their faq somewhere, here is the
information.
apt-get build-dep fluxbox
apt-get source fluxbox
apt-get install fakeroot
apt-get install dpkg-dev
apt-get install automake
(You may already have fakeroot and dpkg-dev installed). Although apt-get
build-dep fluxbox should also install all necessary tools, I have found that I
also have to get automake.
This will bring you three files (version number correct as of January 2004)
fluxbox_0.1.14-2.orig.tar.gz, fluxbox_0.1.14-2.diff.gz and
fluxbox_0.1.14-2.dsc. You will also have a fluxbox-0.1.14 directory.
The next step is
dpkg-source -x fluxbox_0.1.14-2.dsc
I'm assuming you have wget or something similar, if not do a quick
apt-get install wget
Now, we patch
cd fluxbox-0.1.14/src
wget kitaj.no-ip.com/files/fluxbox/fluxbox-0.1.14-menukey.patch
patch < fluxbox-0.1.14-menukey.patch
Now to build and install the package. You are in the fluxbox-0.1.14/src directory
cd ../
dpkg-buildpackage -rfakeroot -b
This will take some time. When it's done
dpkg -i ../fluxbox_0.1.14-2_i386.deb
Posted at: 21:36 | category: /configure | Comments ()
Compile a kernel the Debian way
apt-get install gcc kernel-package libc6-dev tk8.3 libncurses5-dev fakeroot
adduser kevin src
cd /usr/src
apt-get source kernel-soource-2.6.9
[dpkg will automatically unpack it for you]
ln -s kernel-source-2.6.9_2.6.9 linux
cd /usr/src/linux
rm -rf /debian
cd /usr/src/linux/scripts
./ver_linux
[to see if you've got everything you need]
cd /usr/src/linux
cp /boot/config-2.4.23 .config
make menuconfig
[do your config selection stuff]
make-kpkg clean
make-kpkg --revision $(date +'%Y%m%d') --append-to-version $(hostname) --rootcmd fakeroot clean
make-kpkg --revision $(date +'%Y%m%d') --append-to-version $(hostname) --rootcmd fakeroot kernel_image modules_image;
cd /usr/src
ls -l
...
kernel-image-2.6.9chilkoot_20041220_i386.deb
...
dpkg -i kernel-image-2.6.9chilkoot_20041220_i386.deb
[ if using initrd do the following ]
cd /boot
mkinitrd -o initrd.img-2.6.9chilkoot 2.6.9chilkoot
update-grub
check /boot/grub/menu.lst for correct entries of initrd and vmlinuz
reboot
Posted at: 21:36 | category: /configure | Comments ()
Create a new SSL certificate for Apache
Go to /etc/apache-ssl and backup apache.pem before you do anything else. The
location of this file may be different depending upon your Apache setup.
Install the Debian package ssl-cert.
Check to make sure you have the standard template file:
/usr/share/ssl-cert/ssleay.cnf
If you don't, make sure you have openssl installed.
cd over to a temporary working directory that you have write access to.
Run the command:
make-ssl-cert /usr/share/ssl-cert/ssleay.cnf privkey.pem
This will create a private key for the server named privkey.pem.
When complete with this process, store this file off site.
Next run the command:
openssl req -new -x509 -key privkey.pem -out cacert.pem -days 1095
This will create a server certificate called cacert.pem, good for 3 years.
Next run the command:
cat privkey.pem cacert.pem > apache.pem
This will create the complete certificate needed for apache. Copy it over to
the directory where the pre-existing apache.pem was that you backed up
eariler.
Don't forget to move the privkey.pem off site.
Posted at: 21:36 | category: /configure | Comments ()
Mailman using Postfix on Debian
The following is a description on how to set up the list manager Mailman
on a Debian system that uses Postfix-MySQL-Apache for virtual websites and
email. It uses a Python script that makes it unnecessary to make entries
into /etc/aliases. But for this Python script to work, you must be
willing to prefix the FQDN portion of your listname with "lists"...
correct: mylist@lists.virtdomain1.org
incorrect: mylist@virtdomain1.org
While this may seem a sacrifice, it can easily be overcome later by simply
creating an alias in your MySQL table from mylist@virtdomain1.org to
mylist@list.virtdomain1.org. This is far easier than adding in all of the
Mailman aliases that would normally have to be added to /etc/aliases if
you were not using the Python script.
1. Make sure your virtual websites and virtual email setups are all
working before doing anything with Mailman.
2. Install Mailman via apt-get using normal defaults for the base website
that runs on the server.
3. Edit /etc/mailman/mm_cfg.py
add:
VIRTUAL_HOSTS.clear()
add_virtualhost('virtdomain1.org','lists.virtdomain1.org')
add_virtualhost('virtdomain2.org','lists.virtdomain2.org')
change DEFAULT_EMAIL_HOST to include the prefix 'lists' to the FQDN
as in:
DEFAULT_EMAIL_HOST = 'lists.rustybear.com'
change IMAGE_LOGOS from whatever default is to:
IMAGE_LOGOS = /'icons'/
4. copy Mailman images over to default /icons/ directory for Apache
cp /usr/share/images/mailman/* /usr/share/apache/icons/.
5. Edit /etc/apache/httpd.conf
for any you have configured, add in:
ScriptAlias /mailman/ /usr/lib/cgi-bin/mailman/
in the section.
and in an appropriate place (not within a VirtualHost directive) in
httpd.conf add in:
Options +FollowSymLinks
you'll need the above to get pipermail (archives) working.
6. Get this python script:
If you are installing via Debian apt-get this section is probably
mostly done for you, but check anyway.
http://www.gurulabs.com/files/postfix-to-mailman-2.1.py
and drop it in /etc/mailman/ and rename it without the version number
mv postfix-to-mailman-x.xx.py postfix-to-mailman.py
edit it by changing the entry for MailmanHome
MailmanHome = "/var/lib/mailman";
the Mailman home directory is where the lists are kept.
Then cd to /usr/lib/mailman/bin and symlink back to
postfix-to-mailman.py
cd /usr/lib/mailman/bin
ln -s /etc/mailman/postfix-to-mailman.py
7. Next go to /etc/mailman/postfix-to-mailman.py and read all of the
comments/instructions.
Note that in the recommended changes to /etc/postfix/master.cf, that
you must set the uid:gid as list:list, not as mailman:mailman.
This is probably specific to Debian only as the deb package has
Mailman using 'list' as UID/GID where source versions of Mailman
probably have 'mailman' as a default UID.
Note also that in the changes to master.cf, you need to change the
argv argument to point to /etc/mailman/postfix-to-mailman.py.
This is also a good time to:
chmod 755 /etc/mailman/postfix-to-mailman.py
chown root:list /etc/mailman/postfix-to-mailman.py
The instructions in postfix-to-mailman.py point out how to set up
/etc/postfix/tranport and mail.cf. You can do it that way, or more
simply, just make an entry in your existing transport setup for MySQL.
In my case I have a table called transport, where normally I put a
domain name (i.e. xyz.com) and transport type (usually either virtual:
or local: ). However, in this case, the entry I make is:
domain: lists.virtdomain1.org
transport: mailman:
Alternatively, you could follow the instructions and make the changes
to main.cf and transport as that works too. If you do it that way,
don't forget to execute
postmap /etc/postfix/transport
after making changes to transport to regenerate its data.
8. Make sure you have a DNS entry in your DNS server for
lists.virtdomain1.org, or at least a wildcard entry, that resolves to
virtdomain1.org.
9. Restart Apache and Mailman (/etc/init.d/mailman restart).
10. To create a new list for one of the virtual websites, at the prompt
execute:
newlist myNewList@lists.virtdomain1.org
It will prompt you for a couple things that are obvious. Make sure
you include the 'lists' prefix before the FQDN, as having 'lists'
there is what makes this whole thing work via the python script we put
in -- /etc/mailman/postfix-to-mailman.py.
You should get an email regarding the newly created list you
just made.
Note also that simply executing 'newlist --help' gives some help too.
Also, reading the docs at /usr/share/docs/mailman is a good idea too.
You should now be able to see your admin page at:
http://lists.virtdomain1.org/cgi-bin/mailman/admin/myNewList
11. Thing should be working and you should be able to subscribe new users
and send emails to be posted, etc. Try sending test posts and
watching /var/log/syslog or wherever you have you email logs set up
and watching for errors as the test posts go through Postfix. It's
best to watch this live using 'tail -f /var/log/syslog'.
12. Good luck!
Posted at: 21:36 | category: /configure | Comments ()
cygwin + ssh
Download and install cygwin to c:\cygwin. Select the packages that make sense, but make sure to include cygrunsrv and openssh packages. Right click 'My Computer' and under Environment Variables of the Advanced tab, in the section System variables, add 'CYGWIN' for variable, and 'ntsec tty' for value. Also add on to the end of the PATH variable the following: 'c:\cygwin\bin'. Edit c:\cygwin\cygwin.bat. Make sure it contains these lines - you will need to add the line setting the CYGWIN environment variable. @echo off set CYGWIN=binmode tty ntsec C: chdir \cygwin\bin bash --login -i Test cygwin to make sure it works. ls /bin // to see the cygwin bin directory dir c: // to see the contents of the C: directory Type "control d" or 'logout' to exit the shell. If you get a message saying 'cannot create /home/userid', run this command from the cygwin window "mkpasswd -l >/etc/passwd". Run ssh-host-config to set up the ssh host keys and create the sshd_config file in /etc/. You should see output like this: $ ssh-host-config Generating /etc/ssh_host_key Generating /etc/ssh_host_rsa_key Generating /etc/ssh_host_dsa_key Generating /etc/ssh_config file Generating /etc/sshd_config file Added ssh to /cygdrive/c/WINNT/system32/drivers/etc/services Do you want to install sshd as service? (Say "no" if it's already installed as service) (yes/no) Answer 'yes' to the prompt. Press 'Return' to accept the default at the CYGWIN environment question (default = binmode tty ntsec). The service name is CYGWIN sshd. Type 'cd' to go to your account's home directory. Run ssh-user-config to setup your ssh keys. Create only an SSH2 RSA identity (use a null passphrase - just press return). Output should be similar to this : $ ssh-user-config Shall I create an SSH1 RSA identity file for you? (yes/no) no Shall I create an SSH2 RSA identity file for you? (yes/no) (yes/no) yes Generating /home/pswander/.ssh/id_rsa Enter passphrase (empty for no passphrase): Enter same passphrase again: Do you want to use this identity to login to this machine? (yes/no) yes Shall I create an SSH2 DSA identity file for you? (yes/no) (yes/no) no You will probably want to change permissions and ownership on some files: cd /; chmod -R og-w . // note the period chmod og+w /tmp touch /var/log/sshd.log // may already be there chown SYSTEM:SYSTEM /var/log/sshd.log chown SYSTEM:SYSTEM /var/empty chown SYSTEM:SYSTEM /etc/ssh_h* chmod 755 /var/empty At the prompt type the following to install sshd as a service: cygrunsrv -I sshd -p /usr/sbin/sshd -a '-D' -d 'CYGWIN sshd' And then the following to start the service: cygrunsrv -S sshd And then test it with: ssh localhost And then test it from another machine. And if necessary, the following to remove the service cygrunsrv -R sshd There is also more documentation at /usr/doc/Cygwin.
Posted at: 21:36 | category: /configure | Comments ()
samba config
# Global parameters
[global]
workgroup = HAWKWOOD
server string = %h server (Samba %v)
obey pam restrictions = Yes
passdb backend = tdbsam, guest
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
log level = 5
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=819
domain logons = Yes
os level = 65
domain master = Yes
dns proxy = No
panic action = /usr/share/samba/panic-action %d
printing = lprng
printer name = HP_Laserjet
[homes]
comment = Home Directories
read only = No
create mask = 0775
directory mask = 0775
guest ok = Yes
[printers]
comment = All Printers
path = /tmp
create mask = 0700
printable = Yes
browseable = No
[cdrom]
comment = Samba sakura's CD-ROM
path = /cdrom
guest ok = Yes
locking = No
exec = /bin/mount /cdrom
postexec = /bin/umount /cdrom
[kevin]
path = /home/kevin
write list = kosuke,akiko,kevin
read only = No
create mask = 0777
directory mask = 0777
[lp]
comment = HP_Laserjet
path = /usr/bin/lp
read only = No
create mask = 0700
guest ok = Yes
printable = Yes
printing = bsd
printer name = lp
share modes = No
Posted at: 21:36 | category: /configure | Comments ()
Mounting USB devices
lsmod to see what is loaded. You potentially need: usb-storage usbcore scsi_mod sd_mod usb-uhci input sr_mod If using Debian, apt-get install sg3-utils and then use: sg_scan -i // to see scsi type devices sg_map // to see device associations Mount the drive found (should be a SCSI drive): mount -t vfat /dev/sdc1 /home/kevin/mnt/usbdevice Alternatively, make an /etc/fstab entry: /dev/sdc1 /home/kevin/mnt/usbdevice vfat noauto,user 0 0 Diagnose by checking: /var/log/messages /var/log/syslog /proc/bus/usb // shows what's been seen /proc/scsi/scsi // to see what scsi devices are there Notes: Like any other hard drive, you can use other commands on your mounted USB storage device: fdisk /dev/sdc1 // play with partitions mkfs -t vfat /dev/sdc1 // format the partition(s) in FAT mkfs -t ext3 /dev/sdc1 // format in Linux ext3 but not a good // idea for digital camera disks
Posted at: 21:36 | category: /configure | Comments ()
Nagios configuration
To add a host:
1. add the new host to hosts.cfg
2. add the new host to a group in hostgroups.cfg
3. make sure the host group has a contact group
4. make sure contacts are separate from the site
being checked
5. check contactgroups.cfg
6. make selections in services.cfg
7. add the new host to dependencies.cfg if it
has any dependencies
To check config settings run
nagios -v /etc/nagios/nagios.cfg
Posted at: 21:36 | category: /configure | Comments ()
