ciphermethod.com

Active log file changed? No way!

[root@entbamboo01 logs]# tmpwatch –test –mtime +7 –nodirs /opt/bamboo/atlassian-bamboo-5.9.7/logs/*log
error: directory /opt/bamboo/atlassian-bamboo-5.9.7/logs/catalina.2015-10-20.log changed right under us!!!
error: this indicates a possible intrusion attempt

# service osad start
Starting osad: Invalid Cert Error:

ERROR: unhandled exception occurred: (Expired certificate /usr/share/rhn/RHNS-CA-CERT).
                                                           [FAILED]

# cd /usr/share/rhn
# wget http://satellite/pub/RHN-ORG-TRUSTED-SSL-CERT
# vi /etc/sysconfig/rhn/up2date

Change RHNS-CA-CERT to RHN-ORG-TRUSTED-SSL-CERT
#sslCACert=/usr/share/rhn/RHNS-CA-CERT
sslCACert=/usr/share/rhn/RHN-ORG-TRUSTED-SSL-CERT

# service osad start
Starting osad:                                             [  OK  ]

# rpm -qa –qf “%{n}.%{arch}\n”
pciutils-devel.x86_64
pkgconfig.x86_64
libusb.x86_64
info.x86_64
desktop-file-utils.x86_64
m4.x86_64
ORBit2.x86_64
perl-Compress-Zlib.x86_64
mkisofs.x86_64
ttmkfdir.x86_64
…

# rpm -qa –qf “%{n}.%{arch}\n” | grep i386 | head
glib2.i386
libSM.i386
audiofile.i386
gmp.i386
pcsc-lite-libs.i386
libXrandr.i386
libXdamage.i386
pcsc-lite-devel.i386
libogg-devel.i386
db4-devel.i386
…

# yum list | grep i386 | head
GConf2.i386 2.14.0-9.el5 installed
NetworkManager.i386 1:0.7.0-13.el5 installed
NetworkManager-glib.i386 1:0.7.0-13.el5 installed
ORBit2.i386 2.14.3-5.el5 installed
OpenIPMI-libs.i386 2.0.16-16.el5 installed
aex-nsclt.i386 6.2-1378 installed
alsa-lib.i386 1.0.17-1.el5 installed
apr.i386 1.2.7-11.el5_6.5 installed
apr-util.i386 1.2.7-11.el5_5.2 installed
aspell.i386 12:0.60.3-13 installed

After verifying file permissions, still unable to login without entering passsord. Found issue where SELINUX was keeping the SSH service from reading the authorized_keys file. Issue encountered on a Red Hat 6 server.

Fix:
$ restorecon -R -v /home/user/.ssh
restorecon reset /home/user/.ssh context unconfined_u:object_r:home_root_t:s0->unconfined_u:object_r:ssh_home_t:s0
restorecon reset /home/user/.ssh/known_hosts context unconfined_u:object_r:home_root_t:s0->unconfined_u:object_r:ssh_home_t:s0
restorecon reset /home/user/.ssh/id_dsa context unconfined_u:object_r:home_root_t:s0->unconfined_u:object_r:ssh_home_t:s0
restorecon reset /home/user/.ssh/id_dsa.pub context unconfined_u:object_r:home_root_t:s0->unconfined_u:object_r:ssh_home_t:s0
restorecon reset /home/user/.ssh/authorized_keys context unconfined_u:object_r:home_root_t:s0->unconfined_u:object_r:ssh_home_t:s0

Passwordless login now works:
$ ssh gilis28.fls
Last login: Wed Oct 3 14:07:00 2012 from 10.255.2.204
[user@GILIS28 ~]$

Install Postfix:
yum install postfix (RedHat)
apt-get install postfix (Debian)

Add Domains to Accept Mail For:
vi /etc/postfix/main.cf
set
mydestination = localhost.localdomain, localhost, domain.com, host

Tell Postfix to use Maildir instead of mbox format:
postconf -e "home_mailbox = Maildir/"
postconf -e "mailbox_command ="

Set MAIL variable in /etc/profile:
export MAIL=$HOME/Maildir

Restart Postfix:
service postfix restart

Mail local user and confirm mail is delivered.

Install Dovecot:
apt-get install dovecot-common dovecot-imapd dovecot-pop3d