I would like to set the firewall in Ubuntu Server 10.10 up to be very secure but perform these tasks:
1. File server to windows 7 and windows xp machines both over ethernet and wireless via a router.
2. Print server for these 2 machines.
3. Auto backup these 2 machines.
So far I have set the server up with a static ip, do the 2 windows machines need static ip's as well? I don't need remote access to the server, only over the lan. I thought this may be all I needed to do:
Gentlemen/Ladies; I checked the existing information on this site and found that it is pretty widespread and confusing to me. I am a Linux Newbie so please be patient. I use Mandriva Linux 10.0 and want to setup a simple file server. I also want to connect a Windows XP computer to access files on the Linux server. I have a spare router I can use. My ultimate goal is to learn MySQL and PHP programming; I am pursuing a Web Development curriculum at a local University but am just starting out.
Am I making sense and can I do it with the equipment I have? Can you point me to some resources,documents, etc. I can use to accomplish this?
I am trying to deploy a very simple file server in my company's network.The goal is just to have a file server with DAT backup, nothing more.I managed to configure Samba to show a share visible in the Windows network, with free read and write to everyone. For this I configured "Autentication Mode = user", and read/write access to all users in the specified share.
Of course, I would like to have the possibility to establish permissions based in AD-users. For that, I tried to add my CentOS machine to AD.I followed the guide in:
[URL]
I can get the kerberos "kinit" command to autenticate in Windows AD: I can access the Windows machines in the network as administrator and "klist" shows the valid ticket.But, when trying the "join", I always get the "No logon servers" error.I googled around for this, and it seems that this is a common error and there is no "magic approach" for it...
So, my questions are:
- Can this be achieved only by the Samba configuration tool (Gui)? I think not, as we need to change kerberos settins
- What would be the correct settings for krb5.conf?
- Are there any other services/files needed to adjust?
I have two web servers. One is active and one is in reserve. I keep the user data (web pages) in sync by running rsync every 10 minutes or so. This copies any changes from the active machine to the reserve machine. But, it's slow, only gets changes every 10 minutes, bogs down the disk, does strange things to files that are changing during the rsync process etc...
I want something that will automatically copy any changes from the active server to the reserve server as they are made. IE I hit 'save' on the active server, it copies the file to the reserve server. Simple!
I've been looking around and I see GFS which is really vastly more complicated than I need. I'm happy with read-only access on the reserve host, so I don't need distributed lock management.
I could theoretically implement this by setting inotify watchers on every file and running an SCP or rsync command when a file gets saved. So, it can't be that hard.
I do not need a true networked file system, as in something I mount over the network. I just want something to keep my disks in sync.
Quite often I need someone to transfer a file to my laptop, and it's often different OS to different OS, and setting file-sharing, sshd/ssh, ftpd/ftp, and whatever else not is often not worth it. A USB key is also not always handy or big enough.
But, it's easy to be on the same network, just hard to get service working on top of it in less than 3 minutes if you've never dealt with that person's computer before.
What I was thinking would be the simplest thing would be if I could run apache, and have a very simple web script that simply allows file uploads. Something that would serve a web page that has a "choose file" button which brings up the file dialog, pretty standard I guess. I wouldn't say no to a few more functions on top of that.
Given that, does anyone know of a simple apache modules, or a web server script (language doesn't matter) that would allow for this?
I have two computers on my home lan I am trying to share files between...My desktop which is running Ubuntu Server 10.10 (x64) with a GUI, and my laptop which is running Ubuntu Desktop 10.04. I have tried a million different tutorials regarding SAMBA setup, but they never work.
In addition, most of those tutorials are geared towards hybrid Linux/Windows environment. I do not have any microsoft product in my home. I have created the share on my server, but I'm not sure how to connect to it from the laptop (once again at this point in the tutorials it explains how to access it from a Windows PC). I tried using the menu doing this:
Places-->Connect To Server-->Service Type-->Windows Share (for the server I tried my server hostname and IP) to no avail. Does anyone know of a recent step by step tutorial for setting up a complete Ubuntu environment? Is there a simpler method I can use since I do not particularly need to use SMB protocol?
All I want to do is share my music folder from my server so I can access it (from the same LAN) on my laptop...Arrrghhh frustrating.
I was wondering if there is anyway to adjust scanner settings less not plugging in a scanner with using Simple Scan?I recently found out (sadly) that I could change the DPI settings for document and picture scans when my USB wasn't getting the scanner.Gave a prompt notification bar above and asked me to select scanner (which I replugged it in) and was able to do the settings.Is there a shortcut or command I can use to trigger this any time I need to?
I wish to setup a network that works like windows but for with lunix of course!. It will need to be able to handle security/DNS/DHCP & Document store from one location. I've been doing some reading and have found that I think I need to be using one of the following:
LDAP NIS Kerberos
I have looked at a few Linux based OS's. I did notice that when you install fedora live desktop it gives you the option to connect to one of the above. So I am looking for a complete solution.
1. How to setup fedora to act as server for my needs (or other Linux build)
2. Add fedora/linux mint machines to server to use new security settings. (or other linux build)
I have a CentOS 5 server in which I use Virtual Hosting and each domain has its own user/pass for login to upload files. The path is /var/www/vhosts/domain name]/httpdocs/What im attempting is setting up the creation of the [domain name] folder from an administration backend under PHP, which I am developing. What Im worried about is if I allow PHP to run command line commands such as mkdir, then what is stopping anyone from doing the same from their php files on my server??? What is the best way to properly setup my server to allow automated creation of the domain structure within my folder system
I have a recent install of Fedora14, and wanted to have outbound email sent to a smtp server elsewhere on the local network. I found the System->Preferences->Email Settings app and created a mail account with an smtp server. Now I am able to use mailx, mutt, and sendmail -- all send email correctly to the external server.
But I don't like being reliant on the GUI apps and wanted to know how this was done -- what system config files were affected. Assuming that my "smtp.xxx.com" server should show up somewhere, I grepped /home, /etc, and /var, but can't find it anywhere. On a whim I went into Evolution, deleted the mail account, and rebooted, but email STILL works. Where is this configured?
i have a computer with 3 users on it, and a folder using samba that everyone on the network has access to. Lets say that, the folder is stored in /etc/sharedfolder. What happens is, when user1 puts a folder in it, then logs off, user 2 attempts to modify it and fails, because permission is set to 755, and they are not in the same group. (even if they were, it should still need to be 775) Anyway, my current solution is, every 5 minutes a crontab changes permission like so: chmod 777 -R /etc/sharedfiles && chown useradmin:superadmin -R /etc/sharedfiles Which works, but seeing as there is getting close to a gig in there, this is a bad solution, as it eats up the computers resources. Solutions that i think might work:
1) create a script that only changes permissions that need be changed. 2) change file permission settings to force all documents to inherit parent document settings
I would like to start learning about the nuts and bolts concerning Linux security. I bought the "Gray Hat Hacking" book by Harris et al. and started working at their example for buffer overflows but hit a bump immediately. Is this the right place to be discussing this sort of thing? If so I give pertinent info below:
Am not able to install "Simple Compiz Config Settings Manager" When I try to install via Ubuntu Software Center (running unity) I get the following messages: "Package dependencies cannot be resolved" "CCSM has unmet dependencies". How can I resolve this issue to install Simple compiz config settings manager ? Is there a workaround ?
I am using Fedora 13 x86_64 on a Acer Aspire 7730ZG laptop with: 01:00.0 VGA compatible controller: nVidia Corporation G98 [GeForce 9300M GS] (rev a1) I have kmod-nvidia-2.6.33.6-147.2.4.fc13.x86_64-195.36.31-1.fc13.2.x86_64 installed from rpmfuison when I plug in the hdmi cable to the tv, my tv says the resoultion is at 720p, and I can not get any of the resolutions settings to look right on seperate x screen with the nvidia X server settings gui. my tv is a vizo 42inch. also another question is their a way to set the video card to output at 1080? this might be part of my problem?
we need to log web access of a certain set of users for analysis. We decided to setup a proxy server which just logs all the requests but does not do anything else like caching/access control etc.All users will be using a fixed set of computers and hence we can redirect their requests to the proxy. I came across Squid, but found it to be too heavy for our requirements. Is there any other proxy-server software that is good enough for what we want or is Squid the only way?
I am trying to make an application server that would contain simple ones like edit, openoffice, gimp, so on and so forth. I know how to access these using ssh but what I want is that the application runs on that server as it already does, but to open local files and save them locally.
At our company we have a central server with client files. This server has a SSH server installed, and through Nautilus all employees can access the files. However, I have a few questions:
1. Most employees need access to all folders, because they might use them at some point in time. However, I want to make sure they are not accessing things they do not need. How can I do this? For instance, if somebody copies all of the folders to his/her computer, I want to be able to see this in some sort of log. Can this be done? Copying and accessing in general is what is of my concern.
2. Some employees only need access to specific folders. Can this be easily configured with SFTP?
3. Some also use SSH and type commands which I want to check every now and then (e.g. to make sure an intern is not again copying information or accessing folders they should not be in). What is a good way to do this?
One of my user wants to be able to upload file via browser to the server. For that, i need to grant apache read and write access to a folder. How much secure is allowing apache to grant complete read and write access to a folder ?
I have installed openldap on debian lenny as said here [URL]clients" for both ldap server and ldap client on 192.168.1.192. Now I can make normal ldap successfully but I would like to do secure ldap and replication ldap too. "ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)" here is the error I got stuck with when I follow this link for replication and ssl/tls part[URL]Then I google to find solution and then try these commands
i'm a college student studying pc programing, and i was given today a special work and i have to program using miranda... which i've never used it >.< can anyone give me a hand to where to download, how to compile, and a simple tutorial for making a simple program or something?
I want to create a shared folder in a ubuntu sistem but I want to know if I can get access to some users of my domain active directory windows 2003 server?If I can, I would give that security in some of the subfolders of that shared folder as explained at the example:XAMPLE:
Backups (all have access and it's shared) Mail of Charles (Can only have access Charles that have an account on domain) Mail of John (Can only have access John)
I am running Red Hat Enterprise Linux AS release 4 (Nahant Update 7). The server was recently rebooted and wouldn't come up. After some investigation we found that the system would not boot because several files had been zero'd out (not deleted):
* All of these files had a date of March 11, 2010 with a time 03:46 * A zero byte file called /halt was also found with a date of 08:46
We could manually boot to the latest kernel, but none of the startup scripts would run. We analyzed the system looking for any file created on March 11 that were also 0 bytes. Once we had a list, we were able to determine that the system could be recovered without a full blown reinstallation of the OS.
We did a rescue boot from the installation CD, mounted the system volume privately, and edited the grub.conf file. We then brought up the network and copied the needed files from another RHEL v4.7 system. Rebooted the server and check the OS, databases, and apps.
My question is - Has anyone seen this behavior before? I seems like we may have been cracked or at the very least someone has cleared the files needed to recover the system smoothly.
have a built piece of software that I wrote with a whopping 3 files included total.Iwant to package this inside an rpm. I don't need complex stuff like postinstall scripts, dependencies, subpackages, or any of that stuff. I just want a simple rpm with the 3 files, a package identifier, and a summary. I am not planning on posting this rpm on a repo such as fedora or rpmfusion.
I made a string key-value mapping struct in C, and functions to add and remove entries. I would also like to write a function to read in this file format:
We are trying to define an appliance based on Suse for an application server and Web server Apache, so we would like to know configuration best practices for network and security, is there any paper/doc about best practices?
I'm trying to find a secure way to backup files on my Prod Server to Backup Server. It must be automated, so I will need to run a command with cron which will login to Prod Server from Backup Server and backup data. 1. Do you think it would be secure enough to do this by creating an passwordless RSA private key on Backup Server and adding it's public key to authorized_hosts file on Prod Server? I can't think of a way to Automate this without having to enter any passwords without passwordless RSA key. Is there another. more secure way? 2. Should I create a special user for backup, which will only have read access to all files in the directory that I am backing up? If so, How can I run a check that this new backup user indeed has read access to ALL files in the folder that I intent to back up? How can I ensure the backup process will not skip files due to some permission problem? 3. I'm thinking of using rsnapshot tool, which uses rsync.
I try to play a simple movie in avi format. The codec is called AC-3. I tried several tutorials, now i stuck with a "local file conflict between packages" when i run the auto install with movie player. I try now VLC Player ... With VLC it works! Open from the Administrator panel - Add or Remove Software than search for VLC and tick the main stuff and install.
