http://castix.wordpress.com Recent Posts - Blip - Blip no en http://blip.tv Thu, 09 Apr 2009 06:31:46 +0000 Thu, 09 Apr 2009 06:31:46 +0000 198749DC-24D0-11DE-ACD6-F2BBFC889CA6 http://feedproxy.google.com/~r/Castix/~3/ylUN2c1A2FM/openldap-configuring-a-server-to-authenticate-users-using-ldap-1984407 bdenning 354834 castix castix Castix http://blip.tv/castix http://blip.tv/skin/blipnew/placeholder_user.gif 1984407 1974430 file TV-G 0.0 2009-04-09T06:31:46Z English 0 0 0 587 AfmPewI http://blip.tv/play/AfmPewI http://blip.tv/comments/?attached_to=post1984407&skin=rss Bdenning-OpenLDAPConfiguringAServerToAuthenticateUsersUsingLDAP308-37.jpg http://a.images.blip.tv/Bdenning-OpenLDAPConfiguringAServerToAuthenticateUsersUsingLDAP308-37-415.jpg Creative Commons Attribution-NonCommercial 2.0
ObjectivesThis screencast continues on with the ldap server we setup in the previous screencast, but this time we will configure another server (client.test.net) to authenticate its users against our LDAP. This is a concept known as centralised user authentication, where by we can store all our users and their credentials on one server. The screencast is basically a walk through of the changes that need to be made to PAM (pluggable authentication modules) which Linux uses to determine how users should be authenticated when logging in.I have to apologise for the screw up at the end. I had changed my example users password and forgotten about it until I came to do the screencast, hopefully you’ll get the idea.Note: If you haven’t come across PAM before it is advisable to have a quick skim though this very good introduction before trying to configure PAM.Resourcesapt-get install libpam-ldap nscdcd /etc/emacs nsswitch.confchange: passwd: ldap compat group: ldap compat shadow: ldap compatcd /etc/pam.d/edit each of the following files...* common-auth (edit) auth [success=1 default=ignore] pam_unix.so nullok_secure (add) auth required pam_ldap.so use_first_pass (add) auth required pam_permit.so* common-account (edit) account sufficient pam_unix.so (add) account required pam_ldap.so* common-session (add) session required pam_mkhomedir.so skel=/etc/skel/ umask=0022* common-password (edit) password sufficient pam_unix.so nullok obscure md5 (add) password required pam_ldap.soinvoke-rc.d nscd restartReferenceshttp://www.tuxradar.com/content/how-pam-workshttp://www.debian-administration.org/articles/585http://linux.com/feature/114074 ]]> YahooPartnerVideoID Blip post id 1984407 http://blip.tv/file/1974430 Technology Thu, 09 Apr 2009 06:31:46 +0000 http://a.images.blip.tv/Bdenning-OpenLDAPConfiguringAServerToAuthenticateUsersUsingLDAP308-37.jpg ]]> OpenLDAP - Configuring a server to authenticate users using LDAP http://creativecommons.org/licenses/by-nc/2.0/ http://blip.tv/castix/openldap-configuring-a-server-to-authenticate-users-using-ldap-1984407http://blip.tv/file/get/Bdenning-OpenLDAPConfiguringAServerToAuthenticateUsersUsingLDAP308.avi 53F49322-24CB-11DE-929B-B514127FFB1F http://feedproxy.google.com/~r/Castix/~3/blSQ01IVh-Y/openldap-installation-and-adding-objects-using-phpldapadmin-and-ldapadd-1984355 bdenning 354834 castix castix Castix http://blip.tv/castix http://blip.tv/skin/blipnew/placeholder_user.gif 1984355 1974378 file TV-G 0.0 2009-04-09T05:57:37Z English 0 0 0 522 AfmPRwI http://blip.tv/play/AfmPRwI http://blip.tv/comments/?attached_to=post1984355&skin=rss Bdenning-OpenLDAPInstallationAndAddingObjectsUsingPhpldapadminAnd390-264.jpg http://a.images.blip.tv/Bdenning-OpenLDAPInstallationAndAddingObjectsUsingPhpldapadminAnd390-264-776.jpg Creative Commons Attribution-NonCommercial 2.0
OverviewThis screencast shows a walk through of installing openldap and phpldapadmin. After installation I go through and setup a couple of organizational units to store users and groups which I’ll use in a later screencast when I configure ubuntu to authenticate against against an LDAP server for user logins.This screencast doesn’t really acomplish anything overly exciting but is required before heading into some of the things that LDAP can do, such as centralized user authentication or storing your puppet configured servers and their classes.Resourcesapt-get install slapdapt-get install ldap-utilsapt-get install phpldapadminemacs /etc/ldap/ldap.conf(set BASE dc=test,dc=net and URI ldap://172.16.1.1)emacs /etc/php5/apache2/php.ini(set memory_limit = 32M)ldapadd -c -x -D "cn=admin,dc=test,dc=net" -W -f ./test.ldifReferenceshttp://www.debian-administration.org/articles/585http://linux.com/feature/114074 ]]> YahooPartnerVideoID Blip post id 1984355 http://blip.tv/file/1974378 Technology linux system administration openldap screencast Thu, 09 Apr 2009 05:57:37 +0000 linux, system, administration, openldap, screencast http://a.images.blip.tv/Bdenning-OpenLDAPInstallationAndAddingObjectsUsingPhpldapadminAnd390-264.jpg linux, system, administration, openldap, screencast ]]> OpenLDAP - Installation and adding objects using phpldapadmin and ldapadd http://creativecommons.org/licenses/by-nc/2.0/ http://blip.tv/castix/openldap-installation-and-adding-objects-using-phpldapadmin-and-ldapadd-1984355http://blip.tv/file/get/Bdenning-OpenLDAPInstallationAndAddingObjectsUsingPhpldapadminAnd390.avi A95464C2-24C7-11DE-BA62-DC11A5EA7CF9 http://feedproxy.google.com/~r/Castix/~3/kszwIYCwcRU/zenoss-monitoring-a-cisco-router-forwading-cisco-and-linux-syslog-events-1984318 bdenning 354834 castix castix Castix http://blip.tv/castix http://blip.tv/skin/blipnew/placeholder_user.gif 1984318 1974342 file TV-G 0.0 2009-04-09T05:31:22Z English 0 0 0 697 AfmPIgI http://blip.tv/play/AfmPIgI http://blip.tv/comments/?attached_to=post1984318&skin=rss Bdenning-ZenossMonitoringACiscoRouterForwadingCiscoAndLinuxSys125-669.jpg http://a.images.blip.tv/Bdenning-ZenossMonitoringACiscoRouterForwadingCiscoAndLinuxSys125-669-488.jpg Creative Commons Attribution-NonCommercial 2.0
OverviewThis screencast starts by showing you how to enable SNMP on a Cisco router (please note the configuration of other Cisco devices such as catalyst switches is slightly different). Then we look at getting all log messages forwarded through to Zenoss so they show up as Zenoss events. I then go back and setup forwarding of the /var/log/syslog to Zenoss on the Linux server we configured in the first Zenoss screencast.(I ran over the youtube limit of 10 minutes with this video and so had to upload it to google video instead. As a result the quality isn’t quite as good. Sorry, won’t happen again)ResourcesCisco configuration:enconf thostname router1int fa0/0ip address 172.16.1.5 255.255.255.0exitsnmp-server community public ROsnmp-server contact Joe Adminsnmp-server location Brisbane QLD Australialogging 172.16.1.1copy run startLinux Configuration:vim /etc/syslog.conf(add the line: *.* @172.16.1.1)update-rc.d sysklogd restartReferenceshttp://www.netcraftsmen.net/welcher/papers/snmprouter.htmlhttp://www.linuxhomenetworking.com/cisco-hn/syslog-cisco.htmhttp://www.adventnet.com/products/webnms/syslog/help/syslog_fp/start_forward.html ]]> YahooPartnerVideoID Blip post id 1984318 http://blip.tv/file/1974342 Technology Thu, 09 Apr 2009 05:31:22 +0000 http://a.images.blip.tv/Bdenning-ZenossMonitoringACiscoRouterForwadingCiscoAndLinuxSys125-669.jpg ]]> Zenoss - Monitoring a Cisco Router & forwading Cisco and Linux syslog events http://creativecommons.org/licenses/by-nc/2.0/ http://blip.tv/castix/zenoss-monitoring-a-cisco-router-forwading-cisco-and-linux-syslog-events-1984318http://blip.tv/file/get/Bdenning-ZenossMonitoringACiscoRouterForwadingCiscoAndLinuxSys125.avi F266C2E4-24C3-11DE-809E-EF3F334DA87B http://feedproxy.google.com/~r/Castix/~3/zylcp1RLchA/zenoss-adding-a-user-and-email-alerts-1984271 bdenning 354834 castix castix Castix http://blip.tv/castix http://blip.tv/skin/blipnew/placeholder_user.gif 1984271 1974296 file TV-G 0.0 2009-04-09T05:04:47Z English 0 0 0 583 AfmOcwI http://blip.tv/play/AfmOcwI http://blip.tv/comments/?attached_to=post1984271&skin=rss Bdenning-ZenossAddingAUserAndEmailAlerts240-285.jpg http://a.images.blip.tv/Bdenning-ZenossAddingAUserAndEmailAlerts240-285-5.jpg Creative Commons Attribution-NonCommercial 2.0
This screencast shows you how to add a user and configure them to receive alerts for a specific class of devices (in our case any Linux server) via email. It also quickly shows performance data which the test server setup in the first Zenoss screencast has collected (after running for two hours). ]]> YahooPartnerVideoID Blip post id 1984271 http://blip.tv/file/1974296 Technology linux system administration zenoss screencast Thu, 09 Apr 2009 05:04:47 +0000 linux, system, administration, zenoss, screencast http://a.images.blip.tv/Bdenning-ZenossAddingAUserAndEmailAlerts240-285.jpg linux, system, administration, zenoss, screencast ]]> Zenoss - Adding a user and email alerts http://creativecommons.org/licenses/by-nc/2.0/ http://blip.tv/castix/zenoss-adding-a-user-and-email-alerts-1984271http://blip.tv/file/get/Bdenning-ZenossAddingAUserAndEmailAlerts240.avi 66794DEA-24C0-11DE-90D4-D0097A8211D2 http://feedproxy.google.com/~r/Castix/~3/o-G1F7qQJ30/zenoss-installation-and-monitoring-a-server-via-snmp-1984202 bdenning 354834 castix castix Castix http://blip.tv/castix http://blip.tv/skin/blipnew/placeholder_user.gif 1984202 1974227 file TV-G 0.0 2009-04-09T04:39:23Z English 0 0 0 577 AfmOLgI http://blip.tv/play/AfmOLgI http://blip.tv/comments/?attached_to=post1984202&skin=rss Bdenning-ZenossInstallationAndMonitoringAServerViaSNMP231-585.jpg http://a.images.blip.tv/Bdenning-ZenossInstallationAndMonitoringAServerViaSNMP231-585-948.jpg Creative Commons Attribution-NonCommercial 2.0
In this screencast I show you how to download and install the Zenoss server software, how to configure an Ubuntu Linux server to run SNMP and then how to add that SNMP enabled server to Zenoss for monitoring.Hopefully someone with find this helpful to get them up and running quickly with Zenoss. Just as a precautionary note, I would probably advise against using SNMP (and certainly with my config file) if you’re monitoring servers over the internet, but on a secured LAN it should be fine.Below is my snmpd.conf configuration file that I use which is pretty much straight out of the Zenoss manual. ## System location and contact information syslocation Timbucktoo syscontact Joe Admin ## sec.name source community com2sec notConfigUser default public ## groupName securityModel securityName group notConfigGroup v1 notConfigUser group notConfigGroup v2c notConfigUser ## Make at least snmpwalk -v 1 localhost -c public system fast again. ## name incl/excl subtree mask(optional) view systemview included .1 ## group context sec.model sec.level prefix read write notif access notConfigGroup “” any noauth exact systemview none none ]]> YahooPartnerVideoID Blip post id 1984202 http://blip.tv/file/1974227 Technology linux screencast zenoss system administration Thu, 09 Apr 2009 04:39:23 +0000 linux, screencast, zenoss, system, administration http://a.images.blip.tv/Bdenning-ZenossInstallationAndMonitoringAServerViaSNMP231-585.jpg linux, screencast, zenoss, system, administration ]]> Zenoss - Installation and monitoring a server via SNMP http://creativecommons.org/licenses/by-nc/2.0/ http://blip.tv/castix/zenoss-installation-and-monitoring-a-server-via-snmp-1984202http://blip.tv/file/get/Bdenning-ZenossInstallationAndMonitoringAServerViaSNMP231.avi 561ADAF8-2435-11DE-B0CB-8FE3F671DF7D http://feedproxy.google.com/~r/Castix/~3/s8T2Y3jjLOk/puppet-installation-configuring-a-client-server-1980684 bdenning 354834 castix castix Castix http://blip.tv/castix http://blip.tv/skin/blipnew/placeholder_user.gif 1980684 1970717 file TV-G 0.0 2009-04-08T12:03:56Z English 0 0 0 532 AfjycAI http://blip.tv/play/AfjycAI http://blip.tv/comments/?attached_to=post1980684&skin=rss Bdenning-PuppetInstallationConfiguringAClientServer412-772.jpg http://a.images.blip.tv/Bdenning-PuppetInstallationConfiguringAClientServer412-772-441.jpg Creative Commons Attribution-NonCommercial 2.0
This first screencast is going to get you up and running with a very simple puppet manifest that will be used to install emacs and a custom motd banner on a server. Below is the example site.pp manifest I used in the demonstration. node ‘client.test.net’ { package { “emacs22-nox”: ensure => installed } file { “/var/run/motd”: source => “puppet:///files/motd” } } ]]> YahooPartnerVideoID Blip post id 1980684 http://blip.tv/file/1970717 Technology linux puppet server configuration screencast Wed, 08 Apr 2009 12:03:56 +0000 linux, puppet, server, configuration, screencast http://a.images.blip.tv/Bdenning-PuppetInstallationConfiguringAClientServer412-772.jpg linux, puppet, server, configuration, screencast ]]> Puppet - Installation & configuring a client server http://creativecommons.org/licenses/by-nc/2.0/ http://blip.tv/castix/puppet-installation-configuring-a-client-server-1980684http://blip.tv/file/get/Bdenning-PuppetInstallationConfiguringAClientServer412.avi