Many software available for patch managment like OCSinventry, cfengine,puppet,redhat satellite server for linux. I want to perform patch management for my Linux server (centOS, debian) My question is how to find out which patches available for Linux and which patches i need to apply. Is there any way to find out require patches?
View 6 RepliesHow do we perform offline patch management with Debian? This isn't a question about which tools to use on Debian to load the patch once it is on a CD and transferred to said offline computer via sneaker net. More, how do I keep said offline (or strictly firewalled) computer in synch?
Pardon me while I make a comparison to Solaris. I am in no way stating Solaris is better. It just happens to be my baseline of experience.In Solaris, I can download Cluster Patch Updates (CPU). So if I build a Solaris box with a CD that is a year or more old, I can download the latest CPU and get the box patched up to date, and from that point on sneaker-net patches as they appear.
I am looking for a centralized patch management/package Repository solution for ubuntu and RH.
View 4 Replies View RelatedI have this project at work. We are a MS Windows shop, and I am "supposed" to be the linux expert, which means, linux support, it's me. I have worked with linux maintaining PCs at home with different versions of linux since 1995, jumping from Slackware to Ubuntu.
Now, I have two CentOS 5.6 boxes, and I need to control the patching process. the boxes are hosting an application which we don't manage. So. one box in production, one box in development. The idea is that the box in development wil use yum in a standard way and download whatever patches are needed, and the application is tested. When the testing is done (this can take minutes, hours, or days) then the production box gets patched.
The problem is that I need to garantee that exactly the same patches are applied in development and in production.
the development box downloads the patches from the internet, but the production box gets it's patches from the development box, not the internet. I have played around with making local repos on the development box and samba, or rsync the /var/yum/cache, and to change the yum.repo.d CentOS-base.repo to force the prod to go to the dev box, without success.
following situation and configuring authentication for Windows users on my CentOS clients please:IHAC WIN2003 R2 Domaincontroller with ALL my users and groups maintained there. For Usermapping (SID to UID/GID) I want to use IMU which is included with WIN2003 R2 srv and extends my Active Directory schema for UID, GID, NIS Domain etc. I want now authenticate my Windows users on my CentOS clients via their "domainnameusername" and passwords on the CentOS clients.
I also have a NAS server which has usermapping integrated and resolves the Windows SID's to the UID/GID's configured within the IMU schema extensions. Now I have no idea to setup my CentOS clients to use winbind, PAM and LDAP (IMU supports LDAP queries for UID/GID resolving) WITHOUT needing any Samaba Server or functionality.
* Do I need to configure the smb.conf file because my usermapping is done on the NAS Server and I want to resolve my Windows Users/Groups UID/GID's from IMU via LDAP?
* Do I (just) need to Join the AD (2003 native) or even using Kerberos with generating ktpass.exe keytab files (what is needed/recommended and what is the difference?) Can I authenticate the users without using Kerberos?
For e.g. my username is "domainuser_a" and within the IMU the UID is set to "12345", I don't want Samba/winbind to do usermapping again based on the configured values in the smb.conf file. Some hints would be really nice for me to understand how exactly it works and what is needed...
I am in the process of creating a kickstart configuration file for some RedHat 5.5 and Centos 5.5 servers (Production and test respectively).I have googled about a bit but I cannot find a good list of the bare minimum packages required for a command-line system.If anyone knows how I can trim this list down anymore it would be much appreciated. The aim of this kickstart.cfg is to get the system booted to a bare minimum required to install Chef (Server management software). Chef will then setup Apache, Ruby on rails environment etc.
All this server will need to do is, from a static IP, Host a Ruby on rails app, send emails, send data to a server on the web, accept ssh and occasionally and connect to a SMB/CIFS share This list was taken from the anaconda-ks.cfg file after a RedHat install of what I thought was a pretty minimal system onto a VM but I noticed that cups, the avahi daemonsand gam_server are installed and running which I do not believe are needed for a pure web server.I know that these types of questions are hard to answer without a complete knowledge of the operating environment and what "minimum" is in this case ("@core only? but I wanted yum damnit!")
@admin-tools
@base
@core
[code]....
There is server with 3 hdd mounted to /h1 /h3 /h4 and its a file server contain 3 TB of data (must of them are in zip or rar format), We need to move whole files to the new server.I need a command or bash file to show me the name of files in these partition and the patch of them in the txt log file. (So i can create the link and download all of them in new server with download manager).I tried rsync but its too slow...After we created the links of whole files we will deny all ip address exclude new server IP address in nginx then we can transfer them all fast. (The servers are in 1 datacenter.)
View 2 Replies View RelatedI'm at ES5. Anyone have a method for roll out or backing a single RPM or set of RPMs. In other words, I install the security errata (several packages) and it breaks something. I need to back it out, and restore the original. Also, anyone have experience using Red Hat provisioning for patch management?
View 3 Replies View RelatedI have a couple of servers which runs CentOS 5.5 and CentOS 5.4. We have decided to buy a UPS and we choose Eaton EX RT 11 plus eaton network management card minislot. I have read on the site of Eaton that they have two applications which could gracefully shutdown my servers - LanSafe and NetWatch. My experience with UPS and those applications is zero so I`m here for some advises? Do you prefer NetWatch over LanSafe?
View 2 Replies View RelatedHow to find out the last patch , which was patched in the server? The OS list includes FREEBSD, RHAS 3/4/5 and redhat 8.
Is there a way to find it out without YUM or up2date?
I added a code into terminal and restarted, then I tried to install Java and this came up.'There seems to be a programming error in aptdaemon. This is the software that allows you to install/remove software and to perform other package management related tasks.'
PHP Code:
Traceback (most recent call last):
File "/usr/lib/python2.7/dist-packages/aptdaemon/worker.py", line 961, in simulate
[code]....
I have received a task to install Dell's KACE patch management agents (kboxagent) on a large number of 11.2 and 11.4 openSuSE systems in our organization A search of the forum did not find any references for KACE. Has anyone had any expierence with the KACE product on openSuSE?Google searches only find ver 5.1 of KACE for RH systems. Is this version compatible with all Linux's?
View 1 Replies View Relatedi want to create Central Opensuse repository for Patch management just like WSUS in windows,which automatically downloads Updates/Patches and distribute to the Clients locally.
View 1 Replies View RelatedDoes linux have any patch managment software/solution which can distribute the patches to linux and windows clients OR is it possible that we can deploy the patches from linux to windows machines
View 1 Replies View RelatedI've inherited the following Virtual Machine scenario and am new to Linux Administration and Patch Management. The Host Operating System is Windows 2003 Enterprise, which has VMware Server 2.0.2 installed. Under the VMware Server 2.0.2 I have a Ubuntu 32-bit OS web server running Apache2 Web Services. When I log onto the Ubuntu server (9.10 32-bit) I see the following two lines just above the new mail/last logon lines.
85 packages can be updated
55 updates are security updates
I would like to see at least a summary of each update and its urgency so I can notify the various developers/server owners to get their input regarding whether we should or should not apply that particular update to the server. We apply the patches in our test/dev environment first then once vetted there we roll them out to our production servers. What I am looking for is a way to automate the gathering of the information and once approval has been received automating the actual patching process so that I do not have to manually perform the apt-get process for each separate package needed/approved.
Ideally I would like a recommendation for a GUI based package to manage this process and that is capable of generating the appropriate reports for the 'powers that be' regarding the current security/patch management environment. For proof of concept I would like a free version that is not hamstrung in functionality but is not too costly to procure the production version with no limitations.
I am running 6 servers on RHEL4.4 with oracle databases and application on HP ML370 hardware. Since initial installation, I have not applied any patch updates. I would like to start practising Patch Management and would like to know how to start and how to do it. For security reasons, I am not allowed to connect the servers to RHN or RHS hence will appreciate other options of acquiring patch updates in bundled form say on a monthly basis.
View 5 Replies View Relatedi have been trying to complete the following project1) Configure a FTP server where we can upload and download files.........2) server must run at 9 pm & stop at 9 am automatically ............although the first task was easy ,i have no idea how to accomplish the 2nd task(not to mention I'm a new user)
View 5 Replies View RelatedI am trying to unistall a custom patch at one of our prodction server.While uninstalling the patch I am getting following kind of error.
Quote:
xdelta: /opt/updates/02.1.016.4-18365/objects/libarb.so.1.0.1: Checksum validation failed, expected: ca89579ea9dee081b81e00c3fea19305, received: 84561e5bdabd1ddc8425505a22f9d841
xdelta: /opt/ecssw-02.1.016.4/libarb.so.1.0.1: Checksum validation failed, expected: a57db80367f50ab083c02c8c7aaacb1f, received: 0a2fcdcc68a168db468a971046ccde1a
xdelta failed for file /opt/updates/02.1.016.4-18365/libarb.so.1.0.1.update.
unpacking of 02.1.016.4-18365.tar.gz failed:65280
Just want to refresh and check to make sure I don't make a mistake, but I am spoiled now with my newer OS's, binary apps, etc. and helping out someone right now who has some old servers and some apps need upgrading like proftp, etc. ALL apps are compiled, I have the old src folder, even the config.h file which if I clean the cobwebs will give me the config settings that were used right? Basically I want to do an in place upgrade from an old to new version and don't want to kill what's there, so I am assuming I can do a make with the config.h from the old compile and it should just build with those options, right?
View 1 Replies View RelatedI'm trying to setup RAID 1 on a CentOS 5 server for a zimbra email server.I get a partion schema error. Can I do this?The server is a HP Proliant ML150 G3 server with two 80GB HDD.
View 1 Replies View RelatedI have tried to install debian 5.0 and 4.0 without any luck. I have both tried virt-manager and virt-install with both debian-501-i386-netinst.iso, and full dvd. I't always gives me the same error:Starting install.Could not find an installable distribution at '/xen/debian-501-i386-netinst.iso'
[Code]...
I bought a Ubuntu server with Parallels Plesk Panel 10 Domains. I'm looking for online website company which does server management. I have seen many
but many sites doesn't offer service as we are using Plesk as our control panel.
Please list down the sites which offer Ubuntu Server Maintainable Services.
Its very urgent. If you know any good company sites. Please let me know.
Please don't give me Indian Company sites as I'm looking for Companies
from Netherlands, USA, Germany, Brazil, Russia, Korea, China, etc.
Trusted companies and have started their company with atleast 3 year old company.
I have installed my CentOS 5.4 in my system and i want create self repository for my clients. I trying to configure.
View 1 Replies View RelatedI will be relocating to a permanent residence sometime in the next year or two. I've recently begun thinking about the best way to implement a home-based network. It occurred to me that the most elegant solution might be the use of VM technology to eliminate as much hardware and wiring as possible.My thinking is this: Install a multi-core system and configure it to run several VMs, one each for a firewall, a caching proxy server, a mail server, a web server. Additionally, I would like to run 2-4 VMs as remote (RDP)workstations, using diskless workstations to boot the VMs over powerline ethernet.The latest powerline technology (available later this year) will allow multiple devices on a residential circuit operating at near gigabit speed, just like legacy wired networks.
In theory, the above would allow me to consolidate everything but the disklessworkstations on a single server and eliminate all wired (and wireless) connections except the broadband connection to the Internet and the cabling to the nearest power outlets. It appears technically possible, but I'm not sure about the various virtual connections among VMs. In theory, each VM should be able to communicate with the other as if it was on the same network via the server data bus, but what about setting up firewall zones? Any internal I/O bandwidth bottlenecks? Any other potential "gotchas", caveats, issues? (Other than the obvious requirement of having enough CPU and RAM).Any thoughts or observations welcome, especially if they are from real world experience in a VM environment. BTW--in case you're wondering why I'm posting here, it's because I run Debian on all my workstations/servers (running VirtualBox as a VM for Windows XP on one workstation).
I have a problem with compiling of mod_ruby-1.3.0 After a succesfull configure i get a error in the make, it say "make: *** [apachelib.o] error 1" . Here below you can find the results of de configuring and the make.I was following the roles in Howtoforge " The perfect server - Centos 5.3" everything goes perfect till mod_ruby-1.3.0
./configure.rb --with-apr-includes=/usr/include/apr-1
checking for a BSD compatible install... /usr/bin/install -c
checking whether we are using gcc... yes
[code]....
is it possible to join Windows Server 2003 to CentOS 5 Cluster?
View 1 Replies View Relatedwhen I reboot the server with centos 5.5 the SMB deamon doesn't start?
View 2 Replies View Relatedcan some one advise either on linux or windows, server/network manage software.say each server we can watch the cpu,memory,network card in/out speed, overload etc, any warning.
View 3 Replies View RelatedI have around 9 squid proxy servers and going to deploy Dansguardian on all of them. But I feel managing individual copy/server would be an tedious job hence please let me know if any one aware of centralized management solution for Squid+Dansguardian? Or if not let me know if you are aware of any such other Open Source product.
View 1 Replies View RelatedIs anyone aware of an open-source equivalent to Box or Dropbox I can install on my server? Password protected logon, easy file upload and download and of course secure?
View 1 Replies View Related