Jan 17th, 2010

How to disable direct root login to your server

Step 1 Add your admin user to the ‘wheel’ group so that you will be able to ’su -’ to root, otherwise you may lock yourself out of root.

Adding user to the wheel group.

usermod -g wheel username

Edit /etc/ssh/sshd_config file.

vi /etc/ssh/sshd_config

Next, find the line PermitRootLogin yes and Uncomment it and make it look like PermitRootLogin no

Now restart SSH

/etc/rc.d/init.d/sshd restart

Tags: , , , ,


Jan 17th, 2010

Email Alert on Root SSH Login

Email Alert on Root SSH Login

Login to your server as root user

vi /root/.bashrc

Add the following to the end of the file.

echo ‘ALERT - Root Shell Access on $hostname:’ `date` `who` |
mail -s “Alert: Root Access from `who | cut -d”(” -f2 | cut -d”)” -f1`” admin@serverbuddies.com

Tags: , , , ,


Jan 16th, 2010

Parallels Pro Control Panel 10.3.4 for Linux Installation Tips

Settings for ifcfg-eth0

The /etc/sysconfig/network-scripts/ifcfg-eth0 file should have the following.

—/etc/sysconfig/network-scripts/ifcfg-eth0 begin file–
DEVICE=eth0
ONBOOT=yes
BOOTPROTO=static
IPADDR=IP_address_host_server
NETMASK=netmask_value (please check with your service provider)
GATEWAY=ip_address_gateway
—/etc/sysconfig/network-scripts/ifcfg-eth0 end file–

Before you use Parallels Pro Control Panel to perform provisioning or management operations, you must provide the license key information, if you have not provided the information at the time of installation. You receive the license key in the order confirmation email when you buy Parallels Pro Control Panel.

Tags: , , , , , ,


Jan 16th, 2010

Ensim Install tips

Ensim Install tips

Important: If you use the -x option with the installer to specify the network interface on which sites are to be provisioned, make sure that you add the IP address of the interface as the first entry in the /etc/hosts file before running the installer.

/etc/resolv.conf file

—/etc/resolv.conf begin file—
primary_name_server ip_address
secondary_name_server ip_address
—/etc/resolv.conf end file—

/etc/sysconfig/network file

—/etc/sysconfig/network begin file—
NETWORKING=yes
DOMAIN=mydomain.com
HOSTNAME=myhost.mydomain.com
GATEWAY=ip_address_gateway
—/etc/sysconfig/network end file—

Tags: , ,


Jan 16th, 2010

Installing your SSL Certificate / Web Server Certificate / Secure Server Certificate in Ensim

Installing your SSL Certificate / Web Server Certificate / Secure Server Certificate in Ensim

Your certificate will be sent to you by email after you get that from SSl providers. The email message includes the web server certificate that you purchased in the body of the email message.

Copy the certificate from the body of the email and paste it into a text editor (such as notepad) to create text files. Name this file yourdomain.txt and save it in a convenient place.

These instructions apply for both Ensim Pro and Ensim 3.x.

1. Click SSL Settings - access to this link may differ depending on your version of Ensim:

If you are running Ensim Pro. In the shortcuts section of the Home page, click SSL Settings in the Web Server section:

Or if you are running Ensim 3.x, click the Services link on the left, then click the Edit button for the Apache Web Server service:

2. Then in the Apache Web Server Manager click the SSL Settings link.

Select Import at the bottom of the SSL Settings form.

3. Copy the contents of yourdomain.txt and paste it into the Certificate text box
Be sure to include —–BEGIN CERTIFICATE—– through —–END CERTIFICATE—–

4. Select Save.
5. To make security effective on your domain, restart the Web server. The domain is not secure until you do so.

Test your certificate by using a browser to connect to your server. Use the https protocol directive (e.g. https://your server/) to indicate you wish to use secure HTTP. Note: The padlock icon on your browser will be displayed in the locked position if your certificates are installed correctly and the server is properly configured for SSL.

Tags: , , , , ,

« Prev - Next »