Smiertx Site

Howto setting iLOM

noreply@blogger.com (Bandit Smoker) — Fri, 29 May 2009 06:52:00 +0000

Change default password for "root", default = changeme

set /SP/users/root password=password

Create new username "admin"

create /SP/users/admin

Modify user profile "admin"

set /SP/users/admin role=Administrator
set /SP/users/admin cli_mode=alom

Setting CLI prompt
setsc sc_cliprompt SRVNAME

Differences between trusted and non-trusted systems?

noreply@blogger.com (Bandit Smoker) — Fri, 29 May 2009 06:34:00 +0000

Trusted system : Enabled for all of below functions.
Non-trusted system : Disabled for all of below functions.

System auditing
enables tracing every system call issued by users on the system.

Improved password management includes:
- grace period and expiration period for password
- password aging
- specific account life
- disable login after repeated login failures
- random password generator

Login Restrictions includes :
- disabling and locking accounts
- Setting accounts to be accessed only at certain times of the day
- account location accessat specific devices, workstations, etc.
- a single-user boot password.

Shadowed passwords
- kept in locations other than /etc/passwd.
- prevents users from viewing the /etc/passwd file
- prevents hackers from running "password cracker programs" against passwords in the /etc/passwd file

Howto re-install PHP support Oracle Client

noreply@blogger.com (Bandit Smoker) — Fri, 29 May 2009 06:34:00 +0000

If we have default php installation in RHEL 4u6, and we need to reinstall with php5 with oracle client supported.

Uninstall all PHP4 rpm

rpm -qa | grep php

rpm -e php-*

Install PHP5 rpm

rpm -ivh php-common-5*.rpm

rpm -ivh php-cli-5*.rpm

rpm -ivh php-5*.rpm

rpm -ivh sqlite-3*.rpm

rpm -ivh sqlite2-*.rpm

rpm -ivh php-pdo-5*.rpm

rpm -ivh php-oci8-5*.rpm

Install InstantClient

mkdir -p /opt/oracle/instantclient

cd /opt/oracle/instantclient

unzip instantclient-basic-linux32-10.2.0.3-xxx.zip

unzip instantclient-sdk-linux32-10.2.0.3-xxx.zip

echo /opt/oracle/instantclient/instantclient_10_2 >> /etc/ld.so.conf

ldconfig

cd /opt/oracle/instantclient/instantclient_10_2

ln -s libclntsh.so.10.1 libclntsh.so

ln -s libocci.so.10.1 libocci.so

ln -s libclntsh.so.10.1 libclntsh.so.11.1

Install oci8

cd /usr/local/src

tar xzf oci8-x.x.x.tgz

cd oci8-x.x.x

phpize

./configure --with-oci8=shared,instantclient,/opt/oracle/instantclient/instantclient_10_2

make

make install

Restarting apache service

/etc/init.d/httpd restart

Howto Initialized EMC Storage CLAriion

noreply@blogger.com (Bandit Smoker) — Thu, 16 Apr 2009 17:57:00 +0000

First connect your laptop to switch that EMC Storage are connected.
Please make sure it have same VLAN configured on switch.
For example you use VLAN 10 with allocation IP Address : 192.168.10.0/24.
Set IP Address on your laptop to, ex: 192.168.10.10.
EMC Storage SP A : 192.168.10.1
EMC Storage SP B : 192.168.10.2

Please note that server that will use this EMC Storage should be use VLAN 10 as main VLAN.

ex:
SP A on EMC Storage connected to port 1
SP B on EMC Storage connected to port 2
Your laptop connected to port 3.

Switch config should be like below :

interface GigabitEthernet0/1
switchport access vlan 10
switchport mode access

interface GigabitEthernet0/2
switchport access vlan 10
switchport mode access

interface GigabitEthernet0/3
switchport access vlan 10
switchport mode access

Install Navisphere_Initialization_Wizard.exe on your laptop and run this tool.
- choose "I agree ..."
- Click "Next" button
- Your storage should be on "Uninitialized Systems"
- Click your storage and click "Next" button.
- In this section, you should input :
1. IP Address SP A, IP Address SP B, Subnet mask and default gateway.
2. You storage system name
- Done.

Howto physical connection EMC CLAriion, IBM Blade, SAN Switch, Cisco Switch

noreply@blogger.com (Bandit Smoker) — Thu, 16 Apr 2009 17:32:00 +0000

Howto cstm on HP-UX

noreply@blogger.com (Bandit Smoker) — Sun, 12 Apr 2009 02:22:00 +0000

If we want to show all machine information, just use cstm.
# cstm
Running Command File (/usr/sbin/stm/ui/config/.stmrc).

-- Information --
Support Tools Manager

Version C.46.05

(C) Copyright Hewlett Packard Co. 1995-2002
All Rights Reserved

Use of this program is subject to the licensing restrictions described
in "Help-->On Version". HP shall not be liable for any damages resulting
from misuse or unauthorized use of this program.

cstm>

Map all device in this system with :

cstm> map
Dev Last Last Op
Num Path Product Active Tool Status
=== ==================== ========================= =========== =============
1 system system (1014) Information Successful
2 memory IPF_MEMORY (1014) Information Successful
------------

We want to know info about memory information
cstm>sel d 2
cstm>info
-- Updating Map --
Updating Map...
cstm>wait
cstm>il
-- Converting a (2176) byte raw log file to text. --
Preparing the Information Tool Log for IPF_MEMORY on path memory File ...

-- Information Tool Log for IPF_MEMORY on path memory --

Log creation time: Sun Apr 12 09:20:16 2009

Hardware path: memory

Basic Memory Description

Module Type: MEMORY
Page Size: 4096 Bytes
Total Physical Memory: N/A
Total Configured Memory: 8192 MB
Total Deconfigured Memory: N/A
-------------

same procedure for another device information.

Howto configure boot device order on ILOM

noreply@blogger.com (Bandit Smoker) — Sun, 12 Apr 2009 02:05:00 +0000

To ensure the system can be installed using the DVD drive, the boot device order in the BIOS has to be configured correctly so that the DVD drive takes precedence over the internal hard drives.
1 Log into the ILOM.
2 Start the system if it is not already running:
> start /SYS
else reset the system:
> reset /SYS
3 Log onto the system’s console:
> start /SP/console
4 When prompted, press Esc 2 to enter setup.
5 Once the setup menu has loaded, navigate across to the Boot screen by using
the right arrow key.
6 Using the down arrow key, select the Boot Device Priority item and press
Enter.
7 Confirm that the item [CD/DVD] is higher in the list than the item [Hard Drive].
The order can be changed by selecting the relevant item and using the +/- keys
to move the item up or down in the list.
8 Once the order is correct, save any changes made by pressing Esc and then
navigate right to the Exit screen. Select the item Save Changes and Exit and
press Enter, then confirm the action by selecting Ok.
9 Return to the ILOM prompt by pressing Esc (.

Howto configure network on ILOM

noreply@blogger.com (Bandit Smoker) — Sun, 12 Apr 2009 02:03:00 +0000

The following steps will configure the network settings for the ILOM.
1 Connect a terminal to the ILOM serial management port.
2 Power up the server.
3 When prompted, login into the ILOM as root:
login: root
password: changeme (this should be the default password and can be confirmed by
consulting the documentation shipped with the server).
4 Set the network details for the ILOM:
> set /SP/network pendingipaddress=
> set /SP/network pendingipdiscovery=static
> set /SP/network pendingipgateway=
> set /SP/network pendingipnetmask=
> set /SP/network commitpending=true
5 Try opening an SSH connection to the ILOM in order to confirm that the setup
was successful.

Howto soft partition on Solaris

noreply@blogger.com (Bandit Smoker) — Sun, 12 Apr 2009 01:57:00 +0000

If we wanna create soft partition on one physical partition, eg: partition 7.
Show capacity partition 7 with command
# format
then choose your disk, eg: disk 0, now press "0"
then enter partition menu with press "p"
then print partition layout, press "p"
we have example for partiton 7 like this :
-------------
7 unassigned wm 207 - 1608 6.80GB (1402/0/0) 14266752

We want to create 3 soft partition with allocation like below :
/opt/data : 3 GB
/opt/data1 : 1 GB
/opt/data2 : 2 GB

Create the soft partitions:
# metainit d701 -p d70 3072M
# metainit d702 -p d70 1024M
# metainit d703 -p d70 2048M

Create a UFS file system on each of the soft partitions:
# newfs /dev/md/dsk/d701
# newfs /dev/md/dsk/d702
# newfs /dev/md/dsk/d703

Add the following entries to the file /etc/vfstab:
/dev/md/dsk/d701 /dev/md/rdsk/d701 /opt/data ufs 2 yes -
/dev/md/dsk/d702 /dev/md/rdsk/d702 /opt/data1 ufs 2 yes -
/dev/md/dsk/d703 /dev/md/rdsk/d703 /opt/data2 ufs 2 yes -

Create the mount points:
# mkdir -p /opt/data
# mkdir -p /opt/data1
# mkdir -p /opt/data2

Mount the file systems:
# mount /opt/data
# mount /opt/data1
# mount /opt/data2

System Kernel Hardening on Solaris

noreply@blogger.com (Bandit Smoker) — Fri, 20 Mar 2009 14:41:00 +0000

Just add this lines to your /etc/system file.
Better to use it for high load server.

set noexec_user_stack=1
set noexec_user_stack_log=1
set semsys:seminfo_semmni=100
set semsys:seminfo_semmns=1024
set semsys:seminfo_semmsl=256
set semsys:seminfo_semvmx=32767
set shmsys:shminfo_shmmax=4294967295
set shmsys:shminfo_shmmin=1
set shmsys:shminfo_shmmni=100
set shmsys:shminfo_shmseg=10

Network Hardening on Solaris

noreply@blogger.com (Bandit Smoker) — Fri, 20 Mar 2009 14:39:00 +0000

Just adding this script on your /etc/rc3.d, dont' forget to chmod it to 744.

/etc/rc3.d/S100nettune
#!/bin/sh
#
# Basic Hardening
/usr/sbin/ndd -set /dev/ip ip_forward_src_routed 0
/usr/sbin/ndd -set /dev/ip ip_forwarding 0

/usr/sbin/ndd -set /dev/tcp tcp_conn_req_max_q 16384
/usr/sbin/ndd -set /dev/tcp tcp_conn_req_max_q0 16384
/usr/sbin/ndd -set /dev/tcp tcp_xmit_hiwat 400000
/usr/sbin/ndd -set /dev/tcp tcp_recv_hiwat 400000
/usr/sbin/ndd -set /dev/tcp tcp_cwnd_max 2097152
/usr/sbin/ndd -set /dev/tcp tcp_ip_abort_interval 60000
/usr/sbin/ndd -set /dev/tcp tcp_rexmit_interval_initial 4000
/usr/sbin/ndd -set /dev/tcp tcp_rexmit_interval_max 10000
/usr/sbin/ndd -set /dev/tcp tcp_rexmit_interval_min 3000
/usr/sbin/ndd -set /dev/tcp tcp_max_buf 4194304
/usr/sbin/ndd -set /dev/tcp tcp_maxpsz_multiplier 10

#Oracle Required
/usr/sbin/ndd -set /dev/udp udp_recv_hiwat 65535
/usr/sbin/ndd -set /dev/udp udp_xmit_hiwat 65535

# Added parameter
/usr/sbin/ndd -set /dev/tcp tcp_time_wait_interval 30000
/usr/sbin/ndd -set /dev/tcp tcp_keepalive_interval 60000
/usr/sbin/ndd -set /dev/tcp tcp_deferred_ack_interval 20

LINUX REDHAT BOOK. Now available on this site !

noreply@blogger.com (Bandit Smoker) — Sun, 22 Feb 2009 17:17:00 +0000

Do you interest in Linux Redhat ?
Let's have a book of Linux Redhat on this website.
Contact me : smiertx@gmail.com if you interest with this book.
>> Tersedia dalam Bahasa Indonesia.
>> Available on English.

Here are the content list :

CHAPTER 1 INSTALLATION RED HAT ENTERPRISE LINUX 4

INTRODUCTION
INSTALLATION
RAID AND LVM

CHAPTER 2 POST INSTALLATION RED HAT ENTERPRISE LINUX 4

KOMPILE LAST STABLE KERNEL
TUNING KERNEL PARAMETER
HARDENING LINUX

File /etc/login/defs
File /etc/security/limits.conf
File /etc/pam.d/system-auth
File /etc/bashrc
Service running on system startup
Change run-level

CUSTOMIZING LINUX DESKTOP

CHAPTER 3 USER DAN GROUP ADMINISTRATION

ADD GROUP
ADD USER
CHANGE GROUP PARAMETER
CHANGE USER PARAMETER
SUDO

CHAPTER 4 SETTING NETWORK DI LINUX

SETTING HOSTNAME
SETTING GLOBAL NETWORK CONFIGURATION
SETTING INTERFACE NETWORK
SETTING VIRTUAL IP INTERFACE NETWORK
MANAGE NETWORK SERVICE
NETWORK BONDING
LINUX VLAN
LINUX AS INTERNET/VPN GATEWAY
LINUX AS PC ROUTER

CHAPTER 5 SETTING SERVER LINUX

SSH SERVER WITH OPENSSH
DHCP SERVER WITH DHCPD
FTP SERVER WITH VSFTPD
FILE SHARING WITH SAMBA
WEB SERVER WITH APACHE
DNS SERVER WITH BIND
PROXY SERVER WITH SQUID
SNMP GRAPHER WITH MRTG
WEB USAGE GRAPHER WITH WEBALIZER
ACCESS GATEWAY WITH IPTABLES

CHAPTER 6 MISCELLANOUS

INSTALL MPLAYER AND MULTIMEDIA CODEC
NETWORK SCANNING WITH NMAP
MAX SIMULTANEOUS CONNECTION ON APACHE WEB SERVER
LINUX GRUB RECOVERY
LINUX FREE MEMORY
SETTING PROXY CLIENT ON LINUX
INTERNET CONNECTIONS ON LINUX
TCPDUMP ON LINUX

Mirror disk on Solaris

noreply@blogger.com (Bandit Smoker) — Thu, 08 Jan 2009 10:33:00 +0000

show disk layout on 1st harddisk partition
# format
0
p
p

create copy of Volume Table of Contents from 1st harddisk partition
# prtvtoc /dev/rdsk/c1t0d0s2 | fmthard –s - /dev/rdsk/c1t1d0s2

create metadb as database that contain all mirror configuration.
slice 7 is unused partition
# metadb –a –c 3 –f c1t0d0s7 c1t1d0s7

create virtual device for each slice
# metainit –f d11 1 1 c1t0d0s0
# metainit –f d12 1 1 c1t1d0s0
# metainit d10 –m d11
# metainit –f d21 1 1 c1t0d0s1
# metainit –f d22 1 1 c1t1d0s1
# metainit d20 –m d21
# metainit –f d31 1 1 c1t0d0s3
# metainit –f d32 1 1 c1t1d0s3
# metainit d30 –m d31
# metainit –f d41 1 1 c1t0d0s4
# metainit –f d42 1 1 c1t1d0s4
# metainit d40 –m d41
# metainit –f d51 1 1 c1t0d0s5
# metainit –f d52 1 1 c1t1d0s5
# metainit d50 –m d51
# metainit –f d61 1 1 c1t0d0s6
# metainit –f d62 1 1 c1t1d0s6
# metainit d60 –m d61

Tell system that root actually virtual device, not slice anymore
# metaroot d10

Reboot system
# shutdown -g0 -i6 -y

Add virtual device from 2nd disk to mirror
# metattach d10 d12
# metattach d20 d22
# metattach d30 d32
# metattach d40 d42
# metattach d50 d52
# metattach d60 d62

Show status mirror
# metastat

ALOM Solaris

noreply@blogger.com (Bandit Smoker) — Thu, 08 Jan 2009 10:23:00 +0000

From konsole to alom
# #.

From alom to konsole
sc> console

Configure alom from scratch
sc> setupsc

After configure, you should reset alom with
sc> resetsc

graceful reset server
sc> poweroff
sc> poweron

force reset
sc> poweroff -f
sc> poweron

immediately reset
sc> reset

go to OpenBoot PROM
sc> break

show env
sc> showenvirontment

change alom password login
sc> password

Monitor Dual Master Mysql Replication

noreply@blogger.com (Bandit Smoker) — Mon, 01 Dec 2008 14:56:00 +0000

Here are shell script for monitoring replication, resetting replication if failed, logging if replication occured.
Write a file name mysqlslave.sh on /tmp directory.

#!/bin/sh

user=mysql_root_username
passwd=mysql_root_passwd

repuser=mysql_replica_username
reppasswd=mysql_replica_passwd

GO=1
while [ $GO=1 ]; do

rf=$(mktemp)

/usr/local/mysql/bin/mysql -u$user -p$passwd -e "show slave status \G" > $rf 2>&1

repl_IO=$(cat $rf|grep "Slave_IO_Running"|cut -f2 -d':')
repl_SQL=$(cat $rf|grep "Slave_SQL_Running"|cut -f2 -d':')

if [ "$repl_IO" != " Yes" -o "$repl_SQL" != " Yes" ] ; then
/usr/local/mysql/bin/mysql -u$user -p$passwd -e "stop slave"
/usr/local/mysql/bin/mysql -u$user -p$passwd -e "reset slave"

rg=$(mktemp)

/usr/local/mysql/bin/mysql -hserverb -u$repuser -p$reppasswd -e "show master status \G" > $rg 2>&1

filemaster=$(cat $rg|grep "File"|cut -f2 -d':'|cut -f2 -d' ')
positionmaster=$(cat $rg|grep "Position"|cut -f2 -d':')

/usr/local/mysql/bin/mysql -u$user -p$passwd -e "CHANGE MASTER TO MASTER_LOG_FILE='$filemaster', MASTER_LOG_POS=$positionmaster"

/usr/local/mysql/bin/mysql -u$user -p$passwd -e "start slave"

/bin/date >> /tmp/mysqlslave.log 2>&1

rm $rf $rg
fi
sleep 30
done

You can change duration of monitor by changing value of sleep.
You can check if any resetting slave log at /tmp/mysqlslave.log

Dual Master Mysql Replication ( Circular Replication )

noreply@blogger.com (Bandit Smoker) — Mon, 01 Dec 2008 14:46:00 +0000

We have 2 servers that will be configured as Circular Replication.
It means both servers act as master and slave to another server.

After we install mysql-server on both servers, check /etc/hosts should be same as both servers.
# more /etc/hosts
127.0.0.1 localhost
192.168.0.21 servera
192.168.0.22 serverb
192.168.0.23 dbhost

After that try to look at /etc/my.cnf
At Server A :
# more /etc/my.cnf
[MYSQLD]
basedir = /usr/local/mysql
datadir = /data/mysql/data
max_connections=10000
default-character-set=utf8
default-collation=utf8_bin

# InnoDB parameters
set-variable = innodb_buffer_pool_size=1500M
set-variable = innodb_additional_mem_pool_size=500M
set-variable = innodb_log_buffer_size=10M

log-bin
binlog-do-db=test
binlog-ignore-db=mysql

server-id=1
replicate-same-server-id = 0
auto-increment_increment = 2
auto-increment_offset = 1
master-host = serverb
master-user = replica
master-password = slave123
master-port = 3306

expire_logs_days = 10
max_binlog_size = 500M

[mysql.server]
user=mysql
basedir=/usr/local/mysql

[mysqld_safe]
err-log=/usr/local/mysql/log/mysqld.log
pid-file=/usr/local/mysql/mysqld.pid

[mysql]
default-character-set=utf8

At Server B :
# more /etc/my.cnf
[MYSQLD]
basedir = /usr/local/mysql
datadir = /data/mysql/data
max_connections=10000
default-character-set=utf8
default-collation=utf8_bin

# InnoDB parameters
set-variable = innodb_buffer_pool_size=1500M
set-variable = innodb_additional_mem_pool_size=500M
set-variable = innodb_log_buffer_size=10M

log-bin=serverb-bin
binlog-do-db=test
binlog-ignore-db=mysql

server-id=2
replicate-same-server-id = 0
auto-increment_increment = 2
auto-increment_offset = 2
master-host = servera
master-user = replica
master-password = slave123
master-port = 3306

expire_logs_days = 10
max_binlog_size = 500M

[mysql.server]
user=mysql
basedir=/usr/local/mysql

[mysqld_safe]
err-log=/usr/local/mysql/log/mysqld.log
pid-file=/usr/local/mysql/mysqld.pid

[mysql]
default-character-set=utf8

If you want to add a database ( ex: dbex )that will be replicate, add this line at MYSQLD section.
-------------
binlog-do-db=dbex
-------------

start your sql server on both servers:
# /etc/init.d/mysql.server start

login to sql and add grant to user "replica" on both servers.
# mysql -u root
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 7
Server version: 5.0.33-log Source distribution

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.
mysql> GRANT REPLICATION SLAVE, REPLICATION CLIENT ON *.* TO 'replica'@'%' IDENTIFIED BY 'slave123';

restart your sql server on both servers:
# /etc/init.d/mysql.server restart

setting slave on server A :
- on server A, stop and reset slave first
mysql> stop slave;
mysql> reset slave;
- on server B, show master log file and position, before this lock the tables first.
mysql> flush tables with read lock;
mysql> SHOW MASTER STATUS \G;
*************************** 1. row ***************************
File: serverb-bin.000001
Position: 98
Binlog_Do_DB: test
Binlog_Ignore_DB: mysql
1 row in set (0.00 sec)

ERROR:
No query specified

- on server A, set this master value, and then you can start slave.
mysql> CHANGE MASTER TO MASTER_LOG_FILE='serverb-bin.000001', MASTER_LOG_POS=98;
mysql> start slave;

- on server B, releasing read lock with
mysql> UNLOCK TABLES;

setting slave on server B :
- on server B, stop and reset slave first
mysql> stop slave;
mysql> reset slave;
- on server A, show master log file and position, before this lock the tables first.
mysql> flush tables with read lock;
mysql> SHOW MASTER STATUS \G;
*************************** 1. row ***************************
File: servera-bin.000001
Position: 98
Binlog_Do_DB: test
Binlog_Ignore_DB: mysql
1 row in set (0.00 sec)

ERROR:
No query specified

- on server B, set this master value, and then you can start slave.
mysql> CHANGE MASTER TO MASTER_LOG_FILE='servera-bin.000001', MASTER_LOG_POS=98;
mysql> start slave;

- on server A, releasing read lock with
mysql> UNLOCK TABLES;

Successful replication can be check with :

mysql> SHOW SLAVE STATUS \G;
*************************** 1. row ***************************
Slave_IO_State: Waiting for master to send event
Master_Host: servera
Master_User: replica
Master_Port: 3306
Connect_Retry: 60
Master_Log_File: servera-bin.000001
Read_Master_Log_Pos: 98
Relay_Log_File: serverb-relay-bin.000001
Relay_Log_Pos: 237
Relay_Master_Log_File: servera-bin.000001
Slave_IO_Running: Yes
Slave_SQL_Running: Yes
Replicate_Do_DB:
Replicate_Ignore_DB:
Replicate_Do_Table:
Replicate_Ignore_Table:
Replicate_Wild_Do_Table:
Replicate_Wild_Ignore_Table:
Last_Errno: 0
Last_Error:
Skip_Counter: 0
Exec_Master_Log_Pos: 98
Relay_Log_Space: 237
Until_Condition: None
Until_Log_File:
Until_Log_Pos: 0
Master_SSL_Allowed: No
Master_SSL_CA_File:
Master_SSL_CA_Path:
Master_SSL_Cert:
Master_SSL_Cipher:
Master_SSL_Key:
Seconds_Behind_Master: 0
1 row in set (0.00 sec)

ERROR:
No query specified

Change datadir mysql

noreply@blogger.com (Bandit Smoker) — Wed, 05 Nov 2008 17:00:00 +0000

If we want to change our datadir mysql, you should follow this steps :
Stopping mysql service
# /etc/init.d/mysqld stop

Move or copy your original datadir directory to your new destination
# mv /old/ /new/

Change ownership of new directory to user and group mysql
# chown -R mysql:mysql /new/

Find your ib_logfile on new directory and delete it
# rm -rf ib_logfile*

Change datadir parameter on my.cnf
# vi /etc/my.cnf

Start your mysql server
# /etc/init.d/mysql.server start

Bypass proxy on Linux environment

noreply@blogger.com (Bandit Smoker) — Wed, 05 Nov 2008 16:54:00 +0000

After we define proxy on our environment, we wanna bypass proxy for specific address.
Here the way, edit your /etc/bashrc
# vi /etc/bashrc
---------
export http_proxy=http://aa.bb.cc.dd:xxxx
export no_proxy="localhost, 10.0.0.0/8, 192.168.0.0/16, aaa.com"
---------

Just relogin to your shell, and it changes.
It's simple as blinking your eyes :p

LED status on HP Machine

noreply@blogger.com (Bandit Smoker) — Mon, 27 Oct 2008 16:32:00 +0000

sometimes we found our LED HP server states green, blinking yellow or red.
Just visit official site.

Virtual host on proftpd

noreply@blogger.com (Bandit Smoker) — Mon, 27 Oct 2008 15:47:00 +0000

If you want to create virtual host for your FTP, just edit your proftpd.conf
# vi proftpd.conf

Note that ip_address_1 dan ip_address_2 owned by this server.
We also can configure another port that will be use for specific virtual host.

logadm on Solaris

noreply@blogger.com (Bandit Smoker) — Sat, 25 Oct 2008 17:26:00 +0000

If we want to administering log files on solaris, we can use logadm. Another option we also can use logrotate.
For example :
we have log files at /var/log/tinyproxy.log
1. we want to rotate log after reach 1MB.
# logadm -w /var/log/tinyproxy.log -s 1m

2. we want to rotate log every day.
# logadm -w /var/log/tinyproxy.log -p 1d

3. we want to keep until previous 10 day only.
# logadm -w /var/log/tinyproxy.log -C10

etc...

for more details, you should see logadm manual.
File configuration of logadm at /etc/logadm.conf

For default logadm run every morning 3:10 AM by crontab process.
You can see crontab list with this :
# crontab -e

If you just see number after running command above,
# crontab -e
713

you should define your editor profile.
# export EDITOR=vi
# crontab -e

Persistence Profile on BIG-IP

noreply@blogger.com (Bandit Smoker) — Tue, 21 Oct 2008 04:26:00 +0000

BIG-IP has feature persistence profile, it uses for keep existing session on a member.
For example :
Pool have 2 members (A and B), for example request will redirect to A, but sometimes it can redirected to B for a while, it cause client losing connection to A.

How to create persistence profile based on source address.
- Go to Local Traffic -> Virtual Servers -> Profiles -> Persistence
- Click create to make a new persistence profile
- Change Persistence Type to "Source Address Affinity"
- Make sure that Parent Profile "source_addr"
- Don't forget to give a name to your new profile

Assigning Persistence Profile to Virtual Servers.
- Go to one of your virtual servers, and then go to tab "Resources"
- Assign Default Persistence Profile with your new persistence profile.

User jail on Proftpd

noreply@blogger.com (Bandit Smoker) — Tue, 21 Oct 2008 04:20:00 +0000

If you want to jail user when logging in to FTP server only to their home directory,
you should edit line below :

# more /usr/local/etc/proftpd.conf
----------------
DefaultRoot ~
----------------

But if you want user can change directory to all directory, you just uncomment that line.

General Solaris Command

noreply@blogger.com (Bandit Smoker) — Sat, 16 Aug 2008 19:38:00 +0000

Shows the ethernet address arp table
# arp -a

Delete a stale ethernet entry for host xhost
# arp -d xhost

Reports disk space used in Kilobytes
# du -k

Reports only total disk space used in Kilobytes
# du -sk

Tells you how big the / files are in reverse order
# du -ad / | sort -nr

Mount an ISO 8660 CDROM
# /bin/mount -F hsfs -o ro /dev/sr0 /cdrom

Disk geometry and partitioning info
# prtvtoc /dev/rdsk/c0t0d0s2

Zero's out the file without breaking pipe
# cat /dev/null > filename

Make a mirror image of your boot disk
# dd if=/dev/rdsk/... of=/dev/rdsk/... bs=4096

Check a UFS filesystem
# fsck -F ufs /dev/rdsk/cxtxdxsx

Check a UFS filesystem with auto-answer "yes"
# fsck -F ufs -y /dev/rdsk/cxtxdxsx

Check using an alternate super block
# fsck -F ufs -o b=97472 /dev/rdsk/cxtxdxsx

Verify reconfigurable hardware resources
# cfgadm

Display kernel module information
# /usr/sbin/modinfo

Load a kernel module
# /usr/sbin/modload

Unload a kernel module
# /usr/sbin/modunload -i

Tuneable kernel parameters
# nm -x /dev/ksyms | grep OBJ | more

Show system kernal tunable details
# /usr/sbin/sysdef

Display Memory Size
# prtconf | grep "Memory size"

Displays number active established connections to localhost
# netstat -a | grep EST | wc -l

Network statistics for specific device
# netstat -k hme0

Show the TCP/IP network interfaces
# netstat -i

Displays routing information but bypasses hostname lookup
# netstat -rn

Show the state of all sockets
# netstat -a | more

Follow the route to the ipaddress
# traceroute

Show processes that are running from /var
# fuser -uc /var

Shows processes' current open files
# pfiles

An alternative for top command
# prstat -a

Displays CPU % usage for each process in ascending order
# /usr/ucb/ps -aux | more

Show all processes running
# ps -ef | more

Print the parent/child process 'tree' of a process
# /usr/proc/bin/ptree

Print the working directory of a process
# /usr/proc/bin/pwdx

Returns the process utilizing the most cpu and quits
# top -b 1

Watch all network packets on device ce0
# snoop -d ce0

Saves packets from device ce0 and between host1 and host2 to a file
# snoop -o /tmp/mylog -d ce0 host1 host2

Makes a 10 Megabyte swapfile in /export/disk
# mkfile -v 10m /export/disk1/myswap

List the amount of swap space available
# swap -s

Add a swapfile
# swap -a /export/disk1/swapfile

Deletes a swap device
# swap -d /dev/dsk/c0t0d0s4

List the current swap devices
# swap -l

Changes eeprom autoboot? setting to auto boot
# /usr/sbin/eeprom auto-boot? true

Set the system to perform diagnostics on the next reboot
# /usr/sbin/eeprom diagswitch? true

Check /etc/group file syntax
# /usr/sbin/grpck

Check /etc/passwd file syntax
# /usr/sbin/pwck

Clear host specific network configuration information
# /usr/sbin/sys-unconfig

Show eeprom parameters
# /usr/sbin/eeprom

Show system configuration details
# /usr/sbin/prtconf -vp

Display number of processors
# psrinfo | wc -l

Provides cumulative system report
# sar -A

Report use of file access system routines
# sar -a

Report CPU Utilization
# sar -u

Displays system information
# uname -a

Show I/O error solaris

noreply@blogger.com (Bandit Smoker) — Sat, 16 Aug 2008 19:09:00 +0000

Show I/O error solaris
# iostat -eE
---- errors ---

sd0 0 0 0 0
ssd0 0 0 0 0
ssd1 0 0 0 0
nfs2 0 0 0 0
sd0 Soft Errors: 0 Hard Errors: 0 Transport Errors: 0
Vendor: TOSHIBA Product: ODD-DVD SD-C2732 Revision: 1051 Serial No:
Size: 0.00GB <0 bytes>
Media Error: 0 Device Not Ready: 0 No Device: 0 Recoverable: 0
Illegal Request: 0 Predictive Failure Analysis: 0
ssd0 Soft Errors: 0 Hard Errors: 0 Transport Errors: 0
Vendor: FUJITSU Product: MAT3073F SUN72G Revision: 0602 Serial No: 0527B08LLN
Size: 73.40GB <73400057856 bytes>
Media Error: 0 Device Not Ready: 0 No Device: 0 Recoverable: 0
Illegal Request: 0 Predictive Failure Analysis: 0
ssd1 Soft Errors: 0 Hard Errors: 0 Transport Errors: 0
Vendor: FUJITSU Product: MAT3073F SUN72G Revision: 0602 Serial No: 0526B08BHH
Size: 73.40GB <73400057856 bytes>
Media Error: 0 Device Not Ready: 0 No Device: 0 Recoverable: 0
Illegal Request: 0 Predictive Failure Analysis: 0