Advanced Search
Search Results
440 total results found
Active Directory with SSSD
(2021-02-03) Rough Notes install realmd # realm discover # realm join zoneName -U adminUser in /etc/sssd/sssd.conf , comment out use_fully_qualified_names = True install nfs-utils in /etc/nfsmoutn.conf , add: Defaultvers=3 Nfsvers=3 systemctl e...
arp
(2016-11-22) Problem arp -a is too brief. In keeping with the new trend of banging in long command names, we need a suitable long command that does the same thing. Solution # ip neighbour show +1 for accepting Canadian spelling. Other useful things that you c...
Auto SSH Agent
(2019-09-04) Notes that probably won't make any sense to anyone other than myself. This is borderline incoherent and probably mostly wrong ~/bin/agent, everywhere: This is a generic script for launching the agent on the keyhost. I'm using kageant on Windows ri...
DSA SSH Hostkeys
(2017-05-25) Problem I have a stone-age host monitor thing that is complaining that it can't find agreeable SSH host keys from my CentOS 7 server. Turns out it requires DSA host keys and won't use the other host keys that are available. CentOS 7 by default doe...
Unban IP Address
(2017-05-06) Solution # fail2ban-client set sshd unbanip a.b.c.d
Get Sendmail To Listen On 25, 425, and 587
(2017-05-03) Problem I want one sendmail.cf to control access to port 25 (no auth, access rules only), 425 (SSL-SMTP-AUTH), and 587 (TLS-SMTP-AUTH). Solution These are the changes I made to a stock sendmail.mc file: TRUST_AUTH_MECH(`LOGIN PLAIN')dnl define(`co...
grub parameters
(2017-09-13) Changing Grub Parameters With Grubby for KERNEL in /boot/vmlinuz-*; do grubby --update-kernel="$KERNEL" --remove-args="rhgb quiet" grubby --update-kernel="$KERNEL" --args="elevator=noop" done
hostname
(2016-11-21) Problem Setting the computer's hostname hasn't changed for the last 20 years or so. This is a boring state of affairs, we need some different, unintuitive way of setting it, ideally hopelessly integrated into systemd somehow. Solution # hostnamect...
Install Grub
(2018-08-21) Problem RHEL 7 doesn't have "grub" command for making RAID-1 disks bootable. Alleged Solution ...assuming /boot on /dev/mdXXX is on sdaX and sdbX # grub2-install /dev/sda # grub2-install /dev/sdb "Alleged" for now because I have not had the occas...
journalctl
(2019-09-11) Examples # journalctl -u vmtoolsd --since=today # journalctl -u sshd
Passwordless SSH On NFS Home Dirs
(2017-04-28) Problem Can't use passwordless ssh to a target system. Solution In this particular case, I have: a home directory on nfs selinux enabled In this combination, the sshd process can't read the private key in the user's home directory. There are a c...
PHP 7
(2021-02-23) Installing PHP 7 Instructions for7.4 Older information (2017-09-13) CentOS 7 provides PHP version 5.4 in its official repository. Command to install the Remi repository configuration package: yum install http://rpms.remirepo.net/enterprise/remi-re...
SSH no matching cypher
(2019-03-15) Problem Unable to negotiate with $IP port 22: no matching cipher found. Their offer: aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc Solution $ ssh -c aes128-cbc user@$IP Commentary I don't know where your ship learned to communicate, sir, but it has t...
slow ssh connections
(5 September 2019) Problem When I ssh login to a CentOS 7 system, it always takes around 30 second to log in. Solution Turn off the authentication types you don't need in /etc/ssh/sshd_config : useDNS no ChallengeResponseAuthentication no KerberosAuthenticatio...
SSL Certificate Warning
(2014-01-20) Problem Email: ################# SSL Certificate Warning ################ Certificate for hostname 'computer.domain', in file (or by nickname): /etc/pki/tls/certs/localhost.crt The certificate needs to be renewed; this can be done usi...
Start Interface With No IP Address
(2018-06-19) Problem I want a network interface on my CentOS 7 system to start at boot time but I don't want it to have an IP address. Solution Define the interface with a static IP, then edit /etc/sysconfig/network-scripts/ifcfg-$INTERFACE and comment out the...
systemd
God Damnit What How List services systemctl list-unit-files Start service at boot time systemctl enable $service Start service now systemctl start $service
Test Sendmail TLS Certificate
(2017-05-04) Problem Test Sendmail's TLS configuration. Solution $ openssl s_client -starttls smtp -connect localhost:25 This should return a gratuitous barf telling you all about the TLS configuration.
tftp-server
(2018-01-12) Problem I need a tftp server on CentOS 7. Solution # yum -y install tftp-server xinetd # systemctl start tftp-server # vi /etc/xinetd.d/tftp (edit disabled = no) # systemctl start xinetd # firewall-cmd --add-service=tftp If you need this config ...
VM Interface Bouncing
(2019-09-13) Problem VM transplanted between two VMware clusters. Ran fine in old cluster for two years. In the new cluster, the VM goes unavailable for seemingly random periods of time. In the VM, syslog is logging: Sep 9 13:46:10 n2 NetworkManager[695]: <in...