administration

Generate strong passwords

rac — Fri, 09 Dec 2011 22:02:39 +0100

Installing the tool

 $ sudo aptitude install apg

Using it - the simplest way

 $ apg

Entering some random data

 Please enter some random data (only first 16 are significant)
 (eg. your old password):>

Output

6 random passwords like this:

 Kaswaym3 (Ka-swaym-THREE)
 Nugbubrish9 (Nug-bubr-ish-NINE)
 Bydfust0 (Byd-fust-ZERO)
 DigCavpifob7 (Dig-Cav-pif-ob-SEVEN)
 OlbOrdUv4 (Olb-Ord-Uv-FOUR)
 CemKirEj4 (Cem-Kir-Ej-FOUR)

Install Ubuntu 8.04 on Lenovo 3000 N200 with encrypted LVM

rac — Tue, 19 Aug 2008 21:08:44 +0200

Pre install

Download and Burn Ubuntu 8.04 (I used 8.04.01) Alternate ISO

Base Installation

I just followed this blog post ;-)

Post install

Power Savings

Enable Laptop mode

You can see if laptop mode is active with this command:

 # cat /proc/sys/vm/laptop_mode
 5

If the content of that file is 0, laptop mode is disabled. In the example here, laptop mode is enabled.

To enable laptop mode, you can use this command:

 echo 5 > /proc/sys/vm/laptop_mode

Putting /etc into Version Controll

Installing WebShell

rac — Mon, 14 Jan 2008 11:06:24 +0100

Ajaxterm kann mithilfe folgender Anleitung Installiert werden, Apache mit ssl Konfiguriert und mittels ProxyMod auf den Ajaxterm Port umgeleitet werden.

wget http://ftp.de.debian.org/debian/pool/main/a/ajaxterm/ajaxterm_0.9-2_all.deb
dpkg -i ajaxterm_0.9-2_all.deb

Aktiviere das SSL und das Proxy Modul für Apache2

a2enmod ssl
a2enmod proxy

Apache2 config eintrag

<VirtualHost x.x.x.x:443>
       ServerName webshell.server.tld
       SSLEngine On
       SSLCertificateKeyFile ssl/apache.pem

OneTimePassword

rac — Mon, 07 Jan 2008 12:04:34 +0100

OTP wurde mithilfe folgender Anleitung installiert: 1

aptitude install opie-client opie-server
pico /etc/pam.d/ssh

Folgende abänderung in ssh

# Standard Un*x authentication.
#@include common-auth
auth sufficient pam_unix.so
auth sufficient pam_opie.so
auth required pam_deny.so

pico /etc/ssh/sshd_config

Changed from no to yes

# Change to yes to enable challenge-response passwords (beware issues with
# some PAM modules and threads)
ChallengeResponseAuthentication yes

1. http://www.heise.de/security/artikel/87555/0

Install Ubuntu 7.10 on Lenovo 3000 N200

rac — Fri, 04 Jan 2008 14:25:03 +0100

Its almost running out of the box.

Desktop Stuff

Compiz Einstellungen

Install Advanced Desktop Effect Settings

 sudo aptitude install compizconfig-settings-manager

Screenlets

Take a look at http://tombuntu.com/index.php/2007/08/24/osx-like-widgets-with-ubuntu-screenlets-and-compiz-fusion/ or http://compiz.org/Desktop_Screenlets

Avant Window Navigator

http://blog.t-error.ch/article/528/avant_window_navigator/

Desktop Background Shell

see Transparent Terminal on Background

Screen flickering

Enable AuthenTec Fingerprint Reader as PAM modul

rac — Tue, 01 Jan 2008 14:05:46 +0100

Using fprint library

It seems that the fprint packages are now in ubuntu universe repository for interpid and for hardy-backports... http://packages.ubuntu.com/search?lang=de&searchon=names&keywords=fprint

Using Debian packages from Madman2k

(Text copy)

In order to enable fprint authentication on Ubuntu install the libfprint and libpam packages (see attached tar or download from madmans site) and then edit your /etc/pam.d/common-auth so it contains

 auth    sufficient      pam_fprint.so
 auth    required        pam_unix.so nullok_secure

Apache Force SSL on vhost

rac — Mon, 31 Dec 2007 11:44:11 +0100

Edit your htaccess (or server conf file) to look like this one :

<Files *.ini>
Order Allow,Deny
Deny from all
</Files>
 
RewriteEngine on
RewriteBase /
 
RewriteCond %{SERVER_PORT} !443
RewriteRule ^(.*)?$ https://%{SERVER_NAME}$1 [L,R]

For thoses of you who don't know about RewriteCond?, the first one check the server port used to connect. If it's not 443 (default HTTPS port), it redirects all request to the same https vhost and URI.

Reference

https://trac.usvn.info/wiki/Documentation/HTTPSAccess

Apache Wildcard Domains

rac — Mon, 31 Dec 2007 11:27:23 +0100

!!!ACHTUNG!!!

Apache liest die files sequentiell ein, d.h. die Wildcard darf erst nach allen subdomains kommen (auch wenn sie in anderen files definiert werden) sprich in der allerletzten <VirtualServer> anweisung.

Im entsprechenden zone file folgende Zeile hinzufügen:

*.domain.tld.             IN      A               62.12.149.113

im entsprechenden apache virtualhost file folgende zeile nach "ServerName www.domain.tld" hinzufügen:

ServerAlias *.domain.tld

Reference doc: http://www.debian-administration.org/articles/358