ISC BIND & DNS allow-recursion security feature.
allow-recursion { 192.168.1.0/24; localhost; };
The allow-recursion statement specifies which hosts are allowed to make recursive queries through this server. With the configuration as shown above, we allow recursive queries only from internal hosts since allowing every external hosts on the Internet to ask your name server to answer recursive queries can open you up to certain kinds of cache poisoning attacks. This is a security feature.
Tags: allow-recursion, DNS, ISC BIND, Security
Command line utilities for managing users and groups
useradd, userm od, userdel > Standard utilities for adding, modifying, and deleting user accounts.
groupadd, groupmod,groupdel > Standard utilities for adding, modifying, and deleting groups.
gpasswd > Standard utility for administering the /etc/group configuration file.
pwck, grpck > Utilities that can be used for verification of the password, group,and associated shadow files.
pwconv, pwunconv > Utilities that can be used for the conversion of passwords to shadow passwords, or back from shadow passwords to standard passwords
Tags: command, Groups, Managing, users, Utilities
Red Hat Enterprise Linux 6.3 Authentication
Support for central management of SSH keys.
Previously, it was not possible to centrally manage host and user SSH public keys. Red Hat Enterprise Linux 6.3 includes SSH public key management for Identity Management servers as a Technology Preview. OpenSSH on Identity Management clients is automatically configured to use public keys which are stored on the Identity Management server. SSH host and user identities can now be managed centrally in Identity Management.
Package: sssd-1.8.0-32
Tags: authentication, Enterprise Linux, Red Hat
Checking For and Updating Packages
To see which installed packages on your system have updates available, use the following command:
Updating Packages
You can choose to update a single package, multiple packages, or all packages at once. If any dependencies of the package (or packages) you update have updates available themselves, then they are updated too.
Updating a Single Package
To update a single package, run the following command as root:
Updating All Packages and Their Dependencies
To update all packages and their dependencies, simply enter yum update (without any arguments):
Tags: Checking, Packages, Updating
Unregistering a RHEL machine
The only thing required to unregister a machine is to run the unregister command. This removes the system’s entry from the subscription service, unsubscribes it from any subscriptions, and, locally, deletes its identity and entitlement certificates.
In the Red Hat Subscription Manager GUI, there is an Unregister button in the top right corner of the window.
From the command line, this requires only the unregister command.
Unregistering a Consumer
[root@server1 ~]# subscription-manager unregister
Tags: machine, RHEL, Unregistering