Linux by MaMe

MajorCool Introduction

Majordomo

TCP Wrappers Konfigurationsdateien

GForge CDE: Collaborative Development Environment

High Availability on a budget - Postgres

HA-PostgreSQL

Getting Started with Linux-HA (heartbeat): "Appendix A - Ethernet Crossover Cable Construction

Your cable diagram should be as follows:

Connector A Connector B


Connector A Connector B
Pin # Pin #
1 3
2 6
3 1
6 2
4 7
5 8
7 4
8 5

Rev 1.2.0 "

Linux-HA Project Web Site

Linux Tipps bei www.pc-magazin.de - IP-Adresse per Kommandozeile aendern: Um die IP-Adresse eines Linux-Rechners zu veraendern braucht man nicht erst irgendwelche Installtions- oder Konfigurationsprogramme zu starten: Das geht viel einfacher und schneller mit der Kommandozeile. Der dazu benoetigte Befehl lautet traegt den Namen 'ifconfig' (Fuer InterFace CONFIG).Um nun eine IP-Adresse (oder auch die Netzmaske) zu veraendern ruft man ifconfig mit drei Parametern auf:Ifconfig ethX NeueIP-Adresse NetzMaskeDer erste Parameter (ethX) gibt dabei das Interface an, fuer das Aenderung durchgefuehrt werden soll. Normalerweise ist dies eth0, also die erste Netzwerkkarte im System. Man kann mit dem ifconfig Befehl das Netzwerk uebrigens auch fuer einzelne Netzwerk-Karten beenden und neu starten:Ifconfig ethX downbeendet das Netz undifconfig ethx upstartet es wieder.Neue Version von Astaro Security Linux, Infos anfordern, Dateien teilweise lesen, Letzten Tag im Monat feststellen, Maximum mountcount reached, checked forced - Meldungen loswerden, Linux-Router auf Diskette, Schnellere Seitenzaehler, Linux-Router auf Diskette, Neues zur Astaro Firewall, Kernel drauf - Last runter, Welches Kommanderl haettens denn gern ?, Eigene Befehle mit Alias einrichten, Und noch ein Window-Manager, Platte voll? - Logfiles pruefen, Crontab l�schen, Kein Umbruch in JED, Syslog verschwunden? Messages-file wiederbeleben., Mehr Speicher im Server, IP-Adresse per Kommandozeile aendern, Dateien mit der Endung .tar.gz auspacken, tipps, download

NTP . Servers . WebHome

Secure NFS via SSH Tunnel

Unison File Synchronizer

The ProFTPD Project

File Transfer Protocol

Computerhilfen.de: Hilfe: Kernel 2.6.x Howto f�r SuSE 9.0

KernelNewbies FAQ

Linux Tipps bei www.golinux.de - Schneller Zugriff auf eine CD: Eine haeufig benoetigte CD sollten sie zum rascheren Zugriff auf die Festplatte kopieren. Am besten geht das als Imagedate, die Sie hinterher wie eine normale CD mounten koennen. So kopieren Sie die CD in eine Imagedatei: dd if=/dev/cdrom if=/pfad/zum/iso.image (z.B. dd if=/dev/cdrom if=/home/guru/mp3.iso) Un so mounten Sie das Image (fuer Linux-User): mount -t iso9660 -o ro,loop=dev/loop0 /pfad/zum/iso.image/mountpoint (z.B. mount -t iso9660 -o ro,loop=dev/loop0/home/guru/mp3.iso /cdrom) Fuer FreeBSD-User: Hier wird zunaechst mit vnconfig ein pseudo vnode disk device eingerichtet (der Support dafuer muss im Kernel aktiviert sein): vnconfig -e vn0c /pfad/zum/iso.image Das dann ganz normal gemountet wird: mount -t cd9660 /dev/vn0c /mountpoint Entsprechend sind dann auch zwei Schritten noetig, um die Sache rueckgaengig zu machen: umount /mountpoint vnconfig -u vn0cEinstellungen im laufenden Xterm �ndern, Backup mit tar, Bash: History durchsuchen, Ports: wer h�ngt dran?, Wie schnell ist mein Programm?, Hex/Dez/Bin�r-Kovertierung in der Shell , Windows-Zeilenenden bereinigen, Zeitgesteuerte Ausf�hrung ganz einfach, Aliases - langes wird kurz!, Rundbrief von der Kommandozeile, X-Server ans Netz, Onboard-Sound aktivieren, Mail mit Anhang per Kommando-Zeile, Shell: Mehr Komfort mit ls, Nur Unterverzeichnisse bzw. Links auflisten, UNIX-Timestamp zu Datum, Anwender: Verzeichnisse schnell im Griff, Skripte: Links statt Parameter, su unter X, Schneller Zugriff auf eine CD, tipps, download: "Schneller Zugriff auf eine CD
Eine haeufig benoetigte CD sollten sie zum rascheren Zugriff auf die Festplatte kopieren. Am besten geht das als Imagedate, die Sie hinterher wie eine normale CD mounten koennen. So kopieren Sie die CD in eine Imagedatei:

dd if=/dev/cdrom if=/pfad/zum/iso.image
(z.B. dd if=/dev/cdrom if=/home/guru/mp3.iso)

Un so mounten Sie das Image (fuer Linux-User):

mount -t iso9660 -o ro,loop=dev/loop0 /pfad/zum/iso.image/mountpoint
(z.B. mount -t iso9660 -o ro,loop=dev/loop0/home/guru/mp3.iso /cdrom)

Fuer FreeBSD-User:

Hier wird zunaechst mit vnconfig ein 'pseudo vnode disk device' eingerichtet (der Support dafuer muss im Kernel aktiviert sein):

vnconfig -e vn0c /pfad/zum/iso.image

Das dann ganz normal gemountet wird:

mount -t cd9660 /dev/vn0c /mountpoint

Entsprechend sind dann auch zwei Schritten noetig, um die Sache rueckgaengig zu machen:

umount /mountpoint
vnconfig -u vn0c

<<< Zur�ck"

shfs kernel module

NEdit - the multi-purpose X Window System editor

VIQUIX - die schnelle vi-Hilfe

XNC: Screen shots

Stunnel.org

Create the /usr/bin/sign.sh program file: "#!/bin/sh ## ## sign.sh -- Sign a SSL Certificate Request (CSR) ## Copyright (c) 1998-1999 Ralf S. Engelschall, All Rights Reserved. ## # argument line handling CSR=$1 if [ $# -ne 1 ]; then echo 'Usage: sign.sign .csr'; exit 1 fi if [ ! -f $CSR ]; then echo 'CSR not found: $CSR'; exit 1 fi case $CSR in *.csr ) CERT='`echo $CSR | sed -e 's/\.csr/.crt/'`' ;; * ) CERT='$CSR.crt' ;; esac # make sure environment exists if [ ! -d ca.db.certs ]; then mkdir ca.db.certs fi if [ ! -f ca.db.serial ]; then echo '01' >ca.db.serial fi if [ ! -f ca.db.index ]; then cp /dev/null ca.db.index fi # create an own SSLeay config cat >ca.config < $CERT:' openssl ca -config ca.config -out $CERT -infiles $CSR echo 'CA verifying: $CERT <-> CA cert' openssl verify -CAfile /etc/ssl/certs/ca.crt $CERT # cleanup after SSLeay rm -f ca.config rm -f ca.db.serial.old rm -f ca.db.index.old # die gracefully exit 0 "

# posted by Dr. Martin Menzel @ 10:53 AM 0 comments

SSL/TLS Strong Encryption: FAQ - Apache HTTP Server

Ok, I've got my server installed and want to create a real SSL server Certificate for it. How do I do it?

Here is a step-by-step description:

1. Make sure OpenSSL is really installed and in your PATH. But some commands even work ok when you just run the ``openssl'' program from within the OpenSSL source tree as ``./apps/openssl''.

2. Create a RSA private key for your Apache server (will be Triple-DES encrypted and PEM formatted):

$ openssl genrsa -des3 -out server.key 1024

Please backup this server.key file and remember the pass-phrase you had to enter at a secure location. You can see the details of this RSA private key via the command:

$ openssl rsa -noout -text -in server.key

And you could create a decrypted PEM version (not recommended) of this RSA private key via:

$ openssl rsa -in server.key -out server.key.unsecure

3. Create a Certificate Signing Request (CSR) with the server RSA private key (output will be PEM formatted):

$ openssl req -new -key server.key -out server.csr

Make sure you enter the FQDN ("Fully Qualified Domain Name") of the server when OpenSSL prompts you for the "CommonName", i.e. when you generate a CSR for a website which will be later accessed via https://www.foo.dom/, enter "www.foo.dom" here. You can see the details of this CSR via the command

$ openssl req -noout -text -in server.csr

4. You now have to send this Certificate Signing Request (CSR) to a Certifying Authority (CA) for signing. The result is then a real Certificate which can be used for Apache. Here you have two options: First you can let the CSR sign by a commercial CA like Verisign or Thawte. Then you usually have to post the CSR into a web form, pay for the signing and await the signed Certificate you then can store into a server.crt file. For more information about commercial CAs have a look at the following locations:

1. Verisign
http://digitalid.verisign.com/server/apacheNotice.htm
2. Thawte Consulting
http://www.thawte.com/certs/server/request.html
3. CertiSign Certificadora Digital Ltda.
http://www.certisign.com.br
4. IKS GmbH
http://www.iks-jena.de/produkte/ca/
5. Uptime Commerce Ltd.
http://www.uptimecommerce.com
6. BelSign NV/SA
http://www.belsign.be
Second you can use your own CA and now have to sign the CSR yourself by this CA. Read the next answer in this FAQ on how to sign a CSR with your CA yourself. You can see the details of the received Certificate via the command:

$ openssl x509 -noout -text -in server.crt
5. Now you have two files: server.key and server.crt. These now can be used as following inside your Apache's httpd.conf file:

SSLCertificateFile /path/to/this/server.crt
SSLCertificateKeyFile /path/to/this/server.key


The server.csr file is no longer needed.

SourceForge.net: Project Info - JMonTools - System Monitoring Tools

MRTG: The Multi Router Traffic Grapher

The NRG Home Page

QoS - Bandbreitenregelung

HTB Anleitung

lartc

RRDtool - About RRDtool

Cacti: The Complete RRDTool-based Graphing Solution

Nagios: Home

RAID - a Whatis.com definition: "There are at least nine types of RAID plus a non-redundant array (RAID-0):

* RAID-0. This technique has striping but no redundancy of data. It offers the best performance but no fault-tolerance.
* RAID-1. This type is also known as disk mirroring and consists of at least two drives that duplicate the storage of data. There is no striping. Read performance is improved since either disk can be read at the same time. Write performance is the same as for single disk storage. RAID-1 provides the best performance and the best fault-tolerance in a multi-user system.
* RAID-2. This type uses striping across disks with some disks storing error checking and correcting (ECC) information. It has no advantage over RAID-3.
* RAID-3. This type uses striping and dedicates one drive to storing parity information. The embedded error checking (ECC) information is used to detect errors. Data recovery is accomplished by calculating the exclusive OR (XOR) of the information recorded on the other drives. Since an I/O operation addresses all drives at the same time, RAID-3 cannot overlap I/O. For this reason, RAID-3 is best for single-user systems with long record applications.
* RAID-4. This type uses large stripes, which means you can read records from any single drive. This allows you to take advantage of overlapped I/O for read operations. Since all write operations have to update the parity drive, no I/O overlapping is possible. RAID-4 offers no advantage over RAID-5.
* RAID-5. This type includes a rotating parity array, thus addressing the write limitation in RAID-4. Thus, all read and write operations can be overlapped. RAID-5 stores parity information but not redundant data (but parity information can be used to reconstruct data). RAID-5 requires at least three and usually five disks for the array. It's best for multi-user systems in which performance is not critical or which do few write operations.
* RAID-6. This type is similar to RAID-5 but includes a second parity scheme that is distributed across different drives and thus offers extremely high fault- and drive-failure tolerance. There are few or no commercial examples currently.
* RAID-7. This type includes a real-time embedded operating system as a controller, caching via a high-speed bus, and other characteristics of a stand-alone computer. One vendor offers this system.
* RAID-10. This type offers an array of stripes in which each stripe is a RAID-1 array of drives. This offers higher performance than RAID-1 but at much higher cost.
* RAID-53. This type offers an array of stripes in which each stripe is a RAID-3 array of disks. This offers higher performance than RAID-3 but at much higher cost. "

index2.php (application/pdf-Objekt)

MySQLStat

The Dumb Terminal

Web Interface for MySQL Management