顯示包含「CentOS」標籤的文章。顯示所有文章
顯示包含「CentOS」標籤的文章。顯示所有文章

2012/10/18

SSH in CentOS 6.3



SSH 安裝
#sudo yum  install openssh-server openssh-clients

SSH 開機時啟動
#sudo /sbin/chkconfig sshd on

SSH 啟動
#sudo /sbin/service sshd start

防火牆設定
#sudo vi /etc/sysconfig/iptables

添加下面一行(範例 port = 22)
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT

重新啟動防火牆
#sudo /sbin/service iptables stop
#sudo /sbin/service iptables start

調整 SSH 設定
#vi  /etc/ssh/sshd_config

禁止 root 通過 SSH 登入
PermitRootLogin no

重新啟動

vsftpd 2.2 in CentOS 6.3


安裝 vsftpd
#yum install vsftpd


設定開機啟動 vsftpd ftp
#chkconfig vsftpd on

啟動服務
#service vsftpd start|restart|stop

修改 server port(注意防火牆設定是否完成)
#vi /etc/vsftpd/vsftpd.conf
在最後一行的地方加上: listen_port=21

新增 ftp 使用者
#vi /etc/vsftpd/vsftpd.conf 
拿掉以下兩個註解: 
chroot_list_enable=YES 
chroot_list_file=/etc/vsftpd.chroot_list 

增加使用者 ftpuser,指向路徑 /home/wwwroot/ftpuser, 禁止使用 SSH 權限 #useradd -d /home/wwwroot/ftpuser -g ftp -s /sbin/nologin ftpuser
(wwwroot需要先用 mkdir 的方式建立)

修改密碼
#passwd ftpuser

編輯文件chroot_list:
#vi /etc/vsftpd/chroot_list

內容為 ftp 帳號,每個帳號都佔一行:
jeff
nina
    登入 ftp 後可轉換至個人目錄
    #setsebool -P ftp_home_dir on

    配置防火牆
    編輯設置文件

    #vi /etc/sysconfig/iptables

    在REJECT行之前加上以下指令(範例是將 21 port 在防火牆開啟)
    -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT

    重新啟動防火牆
    #service iptables start



    2012/07/23

    Install PostgreSQL 8.2.23 in CentOS 5.8


    1. Download source files from here
    2. Upload files to the CentOS server
    3. Prepare the necessary files
      1. #yum -y install gcc gcc-c++ autoconf libjpeg libjpeg-devel libpng libpng-devel freetype freetype-devel libxml2 libxml2-devel zlib zlib-devel glibc glibc-devel glib2 glib2-devel bzip2 bzip2-devel ncurses ncurses-devel curl curl-devel e2fsprogs e2fsprogs-devel krb5 krb5-devel libidn libidn-devel openssl openssl-devel openldap openldap-devel nss_ldap openldap-clients openldap-servers
    4. #tar -zxf postgresql-8.2.23.tar.gz
    5. #cd postgresql*
    6. #./configure --prefix=/usr/local/pgsql  --without-readline
    7. #make && make install
    8. Setting PostgreSQL config process
      1. create user: #adduser postgres
      2. create password: #passwd postgres
      3. Authorized folder/files: 
        1. #mkdir /usr/local/pgsql/data
        2. #chown -R postgres /usr/local/pgsql
      4. login as postgres: su postgres
      5. initial dataset: /usr/local/pgsql/bin/initdb -D /usr/local/pgsql/data
      6. edit config
        1. #vi /usr/local/pgsql/data/postgresql.conf
        2. find listen_addresses = ‘localhost’ to listen_addresses = '*'
        3. #vi /usr/local/pgsql/data/pg_hba.conf 
        4. IPv4 local connections:
        5. host    all         all         127.0.0.1/32          trust 
          host    all         all         192.168.1.0/24      password
    9. Update user env. parameters
      1. #vim /var/lib/pgsql/.bash_profile
      2. [ -f /etc/profile ] && source /etc/profile
      3. PGDATA=/usr/local/pgsql/data
        export PATH=/usr/local/pgsql/bin:$PATH
        export PGDATA
    10. Start the service
      1. start SQL service: 
        1. #su - postgres
        2. #/usr/local/pgsql/bin/pg_ctl start -i -D /usr/local/pgsql/data
      2. check SQL status: ps aux | grep postgres
      3. update postgres user
        1. #su - postgres
        2. #psql postgres
        3. #alter user postgres ENCRYPTED PASSWORD 'postgres';

    Note that: you have a short cut to figure out:
    command line: yum -y install postgresql postgresql-libs postgresql-server

    2012/07/20

    Install Tomcat 6 in CentOS 5.8


    1. Install Tomcat 6 Process
      1. cd /etc/yum.repos.d
      2. wget 'http://www.jpackage.org/jpackage50.repo'
      3. yum update
      4. yum install tomcat6 tomcat6-webapps tomcat6-admin-webapps
      5. service tomcat6 start
    2. If you have problems accessing the server from another machine you may need to do the following:
      1. setup
      2. "Firewall configuration"
      3. "Customize"
      4. "Other ports" 8080:tcp
      5. "Ok"
      6. service tomcat6 restart
    3. If you get a dependency error:
      1. rpm -Uvh 'http://plone.lucidsolutions.co.nz/linux/centos/images/jpackage-utils-compat-el5-0.0.1-1.noarch.rpm'
    4. tomcat_home: /usr/share/tomcat6
    5. "tomcat" is a default execute tomcat server user.

    Install JDK 1.6 in CentOS 5.8



    1. Download jdk(jdk-6u33-linux-i586-rpm.bin) from Java Sun
      1. cd  /root
      2. cp jdk-6u33-linux-i586-rpm.bin /usr/local
      3. cd /usr/local
      4. chmod   +x  jdk-6u33-linux-i586-rpm.bin
      5. ./ jdk-6u33-linux-i586-rpm.bin
    2. Test JDK
      1. By default Java will be installed to /usr/java/jdk1.6.0_33/
      2. /usr/java/jdk1.6.0_33/bin/java -version
    3. Choosing JDK
      1. alternatives --install /usr/bin/java java /usr/java/jdk1.6.0_33/bin/java 2
      2. alternatives --config java
    There are 3 programs which provide 'java'.
      Selection    Command
    -----------------------------------------------
    *+ 1         /usr/lib/jvm/jre-1.6.0-openjdk/bin/java
       2           /usr/lib/jvm/jre-1.4.2-gcj/bin/java
       3           /usr/java/jdk1.6.0_33/bin/java
    Enter to keep the current selection[+], or type selection number: 3

    Done!

    NGINX SSL/設定檔案

    #user nobody; worker_processes 1; #error_log logs/error.log; #error_log logs/error.log notice; #error_log logs/error.log info; #...