Don't know still thinking..

Puppet Monit Module

2012-01-19T01:01:00.000-08:00

  Monit is a utility for managing and monitoring, processes, files, directories and devices on a UNIX system. Monit conducts automatic maintenance and repair and can execute meaningful causal actions in error situations.

For installing and configuring it, one can use the following puppet module. I have tested it on Debian GNU/Linux 6.0 Squeeze and Ubuntu 10.4 LTS with Puppet 2.6.

Installation --
  Clone this repo to a monit directory under your Puppet modules directory:

git clone git://github.com/abhishektomar/Puppet-Monit.git monit

If you don't have a Puppet Master you can create a manifest file based on the notes below and run Puppet in stand-alone mode providing the module directory you cloned this repo to:

puppet apply --modulepath=modules monit_test.pp

Usage--
To install and configure monit, include the module in "nodes.pp" file:

include monit

You can override defaults in the monit config by including the module with this special syntax:

monit::monitrc { "/etc/monit/monitrc":
rootfs => "/dev/sda1",
fqdn => "prod.example.com",
hostname => "example",
mailserver => "smtp.example.com",
username => "anything",
password => "anythnig",
datafs => "/dev/sdc"
}

I have added following to monitor the ssh service --

monit::ssh { "/etc/monit/conf.d/ssh.monit":
sshdaemon => "ssh",
ssh_port => 22,
}

Server-Status on your browser

2012-01-02T10:51:00.000-08:00

Formonitoring servers I am using monit, but I've been tired of checkingmails, for that I have written this small application which shows allthe Servers "Load" and uptime in the browser. It involvestwo scripts. First is running ssh and gathering the information fromservers and writing it in a file.Second Script reads the informationcopied and displays it in browser.

**Note -- By default, For making SSH connection it reads ~/.ssh/config file. Copy your id_rsa.pub to servers for secure and password less login.

You can use different path for the application by changing in "config.yaml" file.
e.g.
:outputfile: "/path/to/output/file"
:sshconf: "/path/to/ssh/configfile"

Following are the prerequisites to make it work

Ruby

Ruby-gem

Sinatra

Installation :-

$git clone git://github.com/abhishektomar/Server-Load.git

$cd Server-Load

CronEntry (This will gather required information from servers everymin) --

*****/usr/bin/ruby path/to/uptime.rb

Afterwards,Run the following --

$rubywebapp.rb

Openhttp://localhost:4567 in your browser.

Thisis just a prototype. I will keep updating this application. So keepchecking this post or follow the application on git-hub.

Writing custom facts about Facter

2011-12-16T09:39:00.000-08:00

I'musing "rundeck" for runnig scripts on several nodes at once. I usedifferent tags for my servers, so it becomes easy to deploy anyapplication using rundeck, it reads the tags and runs the script. My“rundeck” machine is getting node information from“puppet-rundeck”. Puppet gets the same from facter. For my work Ineed some custom facts so given below is the detailed process.

O/S –ubuntu

Facterpath - /usr/lib/ruby/1.8/facter/environment.rb

##createthe script environment.rb

#Fact: tags # Purpose: Returns the operating system tags

Facter.add(:environment)do

setcodedo

%x{/bin/tags.sh-i}.chomp

end

Nowyou can see that this little ruby script is executing “tags.sh”file. What I've written in my bash file is as follows:

#!/bin/sh

echo"client backup puppet"

sowhenever I run

$facter environment

I getthe following output---

clientbackup puppet

That'show I'm getting what I want. :)

SUDO Without Password

2011-12-15T01:29:00.000-08:00

### Irked with entering password over and over again in sudo -

Use this simple trick --

##open visudo

sudo visudo

add the following line -

USERNAME ALL=(ALL) NOPASSWD:ALL

##change "USERNAME" with your username

That's it. You are done. Now try using sudo it won't ask you for the password. :)

Installing Broadcom Wifi-driver Fedora

2011-10-04T08:48:00.000-07:00

I am using 'Dell Vostro 3400'. Earlier i was using ubuntu on my laptop, every thing was fine, but Ubuntu's new release 'UNITY' is seriously not for me so I switched to Fedora, but after installing it I found, my wifi is not working and I didn't even get any option like ubuntu. So after some googling I found this (Hope this will help someone else too) -

You can find the driver in the RPM Fusion repository.

Do the following -

For rpmfusion free release

$ su -c 'rpm -Uvh http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-stable.noarch.rpm'

For rpmfusion non free release

$ su -c 'rpm -Uvh http://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-stable.noarch.rpm'

Once you have upgraded the rpmfusion free and non-free release in your system then update the system using the following command. Type the password for the user when prompted.

$su -c 'yum install kmod-wl'

That's it, your Wlan driver is installed. Now reboot your system and it's ready to use.

Note : if still you are not able to connect your wifi-access point (I, too faced this problem. I wasn't able to connect to my wifi network because of some authentication problem). Run the following command -

$nm-applet-editor

and manually put your access point information and you are ready to use your wifi network.

Best of luck.

Updating Plymouth Theme in Ubuntu

2011-03-24T07:43:00.000-07:00

-- Install Plymouth Theme

$ sudo apt-get install plymouth-theme*

Now run the command:

$ sudo update-alternatives --config default.plymouth

and it should lists currently installed themes and you can type the number and hit enter to choose one you want to use.

There are 5 choices for the alternative default.plymouth (providing /lib/plymouth/themes/default.plymouth).

Selection Path Priority Status

------------------------------------------------------------

0 /lib/plymouth/themes/ubuntustudio-logo/ubuntustudio-logo.plymouth 150 auto mode

1 /lib/plymouth/themes/elementary-logo/elementary-logo.plymouth 100 manual mode

2 /lib/plymouth/themes/smooth-greeting/smooth-greeting.plymouth 120 manual mode

*3 /lib/plymouth/themes/ubuntu-logo/ubuntu-logo.plymouth 100 manual mode

4 /lib/plymouth/themes/ubuntustudio-logo/ubuntustudio-logo.plymouth 150 manual mode

5 /lib/plymouth/themes/xubuntu-logo/xubuntu-logo.plymouth 150 manual mode

Press enter to keep the current choice[*], or change it by pressing up and down keys..

Finally,execute following command to apply changes and restart your machine to see the new cool splash screen!

$ sudo update-initramfs -u

update-initramfs: Generating /boot/initrd.img-2.6.35-28-generic

And, you are done. CHEERS !!

(Debian) Apache Tips:Hide Apache Server Information & PHP software version

2010-10-12T03:49:00.000-07:00

By default, Apache will send version and modules information (e.g., mod_php, mod_perl, mod_ssl) in every HTTP header.

For checking it wheather it is showing in your system or not do the following --

telnet www.xyz.com 80
Trying www.xyz.com.com…
Connected to www.xyz.com.
Escape character is ‘^]’.
HEAD / HTTP/1.0 <- after this press 2 times ENTER

HTTP/1.1 200 OK
Date: Fri, 09 Jan 2007 18:18:26 GMT
Server: Apache/2.0.55 (Debian) PHP/5.1.2-1+b1 mod_ssl/2.0.55 OpenSSL/0.9.8b
Connection: close
Content-Type: text/html; charset=UTF-8

Connection closed by foreign host.

In the above xyz it is showing all the details about your web server and php this is not recommended for security reasons.We need to hide this information with the following procedure.

Hide Apache Information --

To hide the information, add the following two in,

# vi /etc/apache2/conf.d/security

ServerTokens ProductOnly

ServerSignature Off

Now Restart the web server,

#/etc/init.d/apache2 restart

Now the output for apache header looks like below

Server: Apache

Hide PHP Version Details --

To hide the PHP version you need to edit the /etc/php5/apache2/php.ini file

Change the following option

expose_php On

expose_php Off

Now you need to restart your web server,

#/etc/init.d/apache2 restart

After making this change PHP will no longer add it’s signature to the web server header.

turn off directory browsing

2010-04-28T03:38:00.001-07:00

For security reasons, you might have to turn off the directory browsing in your Apache Server. By doing so, users can not see the directory listing in your web docs.

--basic httpd.conf entry:

<Directory "/rep1/www">
    Options Indexes FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

which allows users to browse the directory structure.--To turn off directory browsing you can add “-“ in front of Indexes after options.

<Directory "/rep1/www">
    Options -Indexes FollowSymLinks
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

Well, It’s done and now the user will receives a '403 forbidden' error.

Cheers!!

Setting up awstats with apache 2 & geoip on debian-ubuntu

2010-04-21T01:38:00.001-07:00

Awstats is a web log analyzer. It gives really useful statistics about traffic on your web sites.This log analyzer works as a CGI or from command line and shows you all possible information your log contains, in few graphical web pages.

yesterday, it took me many hour to configure it on my server, I took help from many blogs to complete it.

Hope this can help someone.

1. Installing Awstats:

ab@web1:~$ sudo apt-get install awstats

This command will install awstats.Now we have to configure Apache.

2. Configuring Apache2:

Now make the following changes in awstats.conf file.

ab@web1:~$ sudo vi /etc/apache2/awstats.conf

Alias /awstatsclasses "/usr/share/awstats/lib/"
Alias /awstats-icon/ "/usr/share/awstats/icon/"
Alias /awstatscss "/usr/share/doc/awstats/examples/css"
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
ScriptAlias /awstats/ /usr/lib/cgi-bin/
Options ExecCGI -MultiViews +SymLinksIfOwnerMatch

After, Making these changes, we have to include this file (/etc/apache2/awstats.conf) in to our apache.conf file, so we can access it over http.

ab@web1:~$ sudo vi /etc/apache2/apache2.conf

Include /etc/apache2/awstats.conf

Now, reload the apache.

ab@web1:~$ sudo /etc/init.d/apache2 reload

Now you can try to open http://www.mysite.com/awstats/awstats.pl but you will get this error: Error: SiteDomain parameter not defined in your config/domain file. You must edit it for using this version of AWStats.

That means we have to configure Awstats.

3. Configuring Awstats:

By default awstats provides a default configuration file named /etc/awstats/awstats.conf. Copy this file to /etc/awstats/awstats.www.mysite.com.conf:

~$sudo cp /etc/awstats/awstats.conf /etc/awstats/awstats.www.mysite.com.conf

and edit the file:

~$sudo vi /etc/awstats/awstats.www.mysite.com.conf

and check for the following lines and edit those for your needs:

LogFile="/var/log/apache2/access.log"
SiteDomain="mysite.com"

This is all setted up, now you need to generate the first stats.

4. Generating the First Stats:

in order to generate the first stats, you need to call the script as root using the following command line:

~:$sudo -u www-data /usr/bin/perl /usr/lib/cgi-bin/awstats.pl -update -config=www.mysite.com

After finishing this you can try to open http://www.mysite.com/awstats/awstats.pl this will show you the stats.

Now for automatic update the stats you need to put the following command in your cron.

0 2 * * * www-data [ -x /usr/lib/cgi-bin/awstats.pl -a -f /etc/awstats/awstats.conf -a -r /var/log/apache/access.log ] && /usr/lib/cgi-bin/awstats.pl -config=mysite.com -update >/dev/null

GeoIP Information for AWStats

Improve country and city location information in your web analytics reports

AWStats offers three different ways to provide Country level information about visitors ("hosts") connecting to your site. By default, the host domain extension is used if you have performed reverse DNS look-up. While this results in human readable host names as well, reverse DNS lookup is time consuming. Alternatively, GeoIP plugins can be used. They match the host IP with a database of IP allocations which is already installed locally on your computer, significantly reducing the time needed to match a host to a location. There are two country level GeoIP databases available. A Geo::IPFree Perl module is available, but it does not appear that the database is being maintained. The better solution is MaxMind's Geo::IP GeoLite Country open source version, said to be 97% accurate.

Download the current GeoLite Country, GeoLite City and Organization (AS Numbers)databases
wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz
wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz
wget http://geolite.maxmind.com/download/geoip/database/asnum/GeoIPASNum.dat.gz

Move data files to directory and unzip.

mv GeoIP.dat.gz /usr/local/share/GeoIP/
gunzip /usr/local/share/GeoIP/GeoIP.dat.gz
mv GeoLiteCity.dat.gz /usr/local/share/GeoIP/
gunzip /usr/local/share/GeoIP/GeoLiteCity.dat.gz
mv GeoIPASNum.dat.gz /usr/local/share/GeoIP/
gunzip /usr/local/share/GeoIP/GeoIPASNum.dat.gz
Install the GeoIP program.

1. wget http://geolite.maxmind.com/download/geoip/api/c/GeoIP-1.4.5.tar.gz
tar -xvzf GeoIP-1.4.5.tar.gz
cd GeoIP-1.4.5
./configure
make
make check
sudo make install

2.wget http://geolite.maxmind.com/download/geoip/api/perl/Geo-IP-1.35.tar.gz
tar -xvzf Geo-IP-1.35.tar.gz
cd Geo-IP-1.35
perl Makefile.PL LIBS='-L/usr/local/lib'
make
make test
sudo make install

Update your awstats.mysite.conf configuration file

Look for the following geoip LoadPlugin options in your AWStats configuration file. Update them with the full path to each of the two database files.

LoadPlugin="geoip GEOIP_STANDARD /usr/local/share/GeoIP/GeoIP.dat"
LoadPlugin="geoip_city_maxmind GEOIP_STANDARD /usr/local/share/GeoIP/GeoLiteCity.dat"
LoadPlugin="geoip_org_maxmind GEOIP_STANDARD /usr/local/share/GeoIP/GeoIPASNum.dat"

Well, It’s done and now you can check the stats with country info.

Cheers!!

Blocking Google Talk or other IM services in your Organization through sonic wall.

2010-04-15T02:00:00.001-07:00

•Open sonic wall in your browser. Go To Security Services tab.

•Click on Intrusion Prevention

•Now Choose IM Category.

•Here you will get lots of IM (Instant Messengers) list. You can choose any IM from the list and edit it as shown in the image.

•After this, click on OK.

•Now you would be back on Intrusion Prevention page. Here click on Accept button. And, you are done.

You can block any of the IM service by following the same rule.

Cheers!!!

Disable Ping (ICMP) Responses With Linux

2009-03-13T02:09:00.001-07:00

This is a kernel parameter that you can set with /etc/sysctl.conf by adding two lines:

# tail -n 2 /etc/sysctl.conf
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_echo_ignore_all = 1

Apply the changes by using the sysctl -p command:

# sysctl -p
.
.
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.icmp_echo_ignore_all = 1
#

There are various security reasons why you would want to do this. There are also some administration reasons why you shouldn't do this. :)

How To install Google Picasa into Ubuntu Linux

2008-11-06T23:32:00.000-08:00

1. Open your /etc/apt/sources.list file with gedit:

$ sudo gedit /etc/apt/sources.list

2. Add the following line and save file:

deb http://dl.google.com/linux/deb/ testing non-free

3. Download GPG key from here and run this command:

$ sudo apt-key add linux_signing_key.pub

4. Install Picasa:

$ sudo apt-get update
$ sudo apt-get install picasa

Now you can run Picasa by clicking Applications → Graphics → Picasa → Picasa.

TataIndicom USB internet configuration in Linux

2008-11-04T02:56:00.000-08:00

Many of us have USB internet dongles from TataIndicom or Reliance. Here is how you can configure it to work with linux.

First Install wvdial

apt-get install wvdial

then,

Edit the /etc/wvdial.conf file to add these extra lines.

[Dialer Defaults]

Modem=/dev/ttyUSB0
Baud=115200
Dial Command = ATDT
Baud=115200
Dial Command = ATDT
init1=ATZ
init2=AT+CRM=1
Flow Control= Hardware (CRTSCTS)
Username = internet
Password = internet
Phone = #777
Stupid Mode = 1

The line Modem=/dev/ttyUSB0 needs to be changed according to your machine settings. To find out the exact device, follow the procedure.

unplug the device
goto /dev/
plug the device
type ls and find the latest device detected (ls -alt )
replace the /dev/ttyUSB0 with the new device path

For TataIndicom all the above settings including the phone number, username and password are correct. You need not change anything except for the modem name.

How to Edit PDF Files in Linux Using GIMP

2008-11-02T16:53:00.000-08:00

Select file type in The Gimp

If you have ever downloaded a Portable Document Format file to your Linux PC that needed editing (such as an application that you did not want to fill out by hand), you'll find very few PDF editing tools. You can edit PDF files online, but here is a workable, if not elegant solution using GIMP.

Steps

Download and install the Gimp image editor, either using your favorite package manager, or from their website
Open the Gimp, and open the PDF document you wish to edit. For multiple page documents, it is easier on your computer to edit them one page at a time. If you choose more than one page, they will open in individual windows.
Make the necessary changes to the document.
Save the document as a Gimp XCF file (you'll have to save several different pages if it is a multi-page document).
Close the document, then open the resulting image in Krita.
Printing to PDF with Krita

Go to File>Print, then choose Print to PDF. In the same dialogue box, choose the destination folder and name of the output document (such as wiki_pg1.pdf).
Open the resulting document to make sure everything worked properly.

Tips

Alternatively use an online PDF editor such as PDFEscape.
Don't print to PDF from the Gimp. Some people never have a problem, but many experience trouble with the conversion to a PDF file.
If you don't have Krita, choose a different graphic manipulation program. There are many OSS options to choose from.
If you like to do things from the command line or need to script a batch conversion you may find ImageMajick's convert -adjoin -format pdf works for you.

Acrobat Reader 7 works with Linux, so feel free to use it if you just need to view a PDF, or print one out, or try evince or xpdf instead.