Em um constante aprendizado o Zimbra é uma das soluções que venho aprendendo, ontem chegou em meu conhecimento o recurso Dumpster do Zimbra, que nada mais é que um despejo de emails após o usuário excluir da lixeira, onde o mesmo consegue recuperar o email em tempo determinado. No painel do Zimbra Admin é mostrado…
Continue reading →O que é o MRTG? MRTG é um gerador de gráficos de uso de banda de rede, cpu, memória, disco, etc que utiliza o protocolo SNMP para pegar as informações e gerar os gráficos. https://www.mrtg.com/ Abaixo deixo um Shell Script simples que criei após instalação e configuração:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 |
#!/bin/bash # #===============================================================================# # NOTA DE LICENÇA # # # # Este trabalho esta licenciado sob uma Licença Creative Commons # # Atribuição: Compartilhamento pela mesma Licença 3.0 Brasil. Para ver uma # # copia desta licença, visite http://creativecommons.org/licenses/by/3.0/br/ # # ou envie uma carta para Creative Commons, 171 Second Street, Suite 300, # # San Francisco, California 94105, USA. # # ---------------------------------------------------------------------------- # # Autor: Jhones Petter | [email protected] em 21/04/2016 # # Descrição: Instalacao e configuracao do MRTG no CentOS 7 # # Data criação: 31/01/2015 # # Versao: 1.0 - (./install_mrtg.sh) # # ----------------------------------------------------------------------------- # # os=$(egrep "^NAME|^VERSION" /etc/*release | sed 's/"//g' | cut -d= -f2 | cut -d" " -f1 | head -2 | tr '\n' ' ' | sed 's/ //g') if [ $os != "CentOS7" ]; then echo " =========================================== " echo " " echo " " echo " " echo " Esse sistema nao e CentOS7!" echo " " echo " " sleep 10 else echo " =========================================== " echo " " echo " " echo " " echo " Sera instalado os pacotes base, iniciar e habilitar servicos, e compilar o MRTG . . ." echo " " echo " " sleep 10 # Instalar pacotes base yum -y update && yum -y install epel-release && yum -y update && yum -y install net-snmp-utils net-snmp wget httpd vim gd-devel gd zlib libpng && yum -y groupinstall "Ferramentas de Desenvolvimento" # Inicia e habilita Apache e Snmp systemctl start snmpd httpd && systemctl enable snmpd httpd # Baixar pacote MRTG e descompactar cd /tmp/ && wget http://oss.oetiker.ch/mrtg/pub/mrtg-2.17.4.tar.gz && tar -zxvf mrtg-2.17.4.tar.gz && cd mrtg-2.17.4 # Compila MRTG ./configure && make && make install echo " =========================================== " echo " " echo " " echo " " echo " Sera configurado o SNMP e reiniciado o servico . . ." echo " " echo " " sleep 10 # Configura SNMP cp -Rfv /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.bkp cat <<EOF > /etc/snmp/snmpd.conf com2sec local localhost public com2sec mynetwork 192.168.1.0/24 public group grp1 v1 local group grp1 v2c local group grp2 v1 mynetwork group grp2 v2c mynetwork view systemview included .1.3.6.1.2.1.1 view systemview included .1.3.6.1.2.1.25.1.1 access grp1 "" any noauth exact all none none access grp2 "" any noauth exact all all none view all included .1 80 syslocation Linux CentOS7, Local syscontact Sysadmin <root@localhost> dontLogTCPWrappersConnects yes disk / disk /boot EOF systemctl restart snmpd echo " =========================================== " echo " " echo " " echo " " echo " Sera criado os diretorios do MRTG e configurado os arquivos CFGs e gerado o INDEX . . ." echo " " echo " " sleep 10 # Cria diretorios Apache e Etc mkdir /etc/mrtg/ && mkdir /var/www/html/mrtg chown apache:apache /var/www/html/mrtg && chmod -R 755 /var/www/html/mrtg systemctl restart httpd # Gera CFG do MRTG /usr/local/mrtg-2/bin/cfgmaker --output=/etc/mrtg/mrtg.cfg --global "workdir: /var/www/html/mrtg" -ifref=ip --global 'options[_]: growright,bits' public@localhost # Configura Server Stats cat <<EOF > /etc/mrtg/server-stats.cfg # Define global options LoadMIBs: /usr/share/snmp/mibs/UCD-SNMP-MIB.txt,/usr/share/snmp/mibs/TCP-MIB.txt workdir: /var/www/html/mrtg/ # CPU Monitoring # (Scaled so that the sum of all three values doesn't exceed 100) # Target[server.cpu]:ssCpuRawUser.0&ssCpuRawUser.0:public@localhost + ssCpuRawSystem.0&ssCpuRawSystem.0:public@localhost + ssCpuRawNice.0&ssCpuRawNice.0:public@localhost Title[server.cpu]: Server CPU Load PageTop[server.cpu]: <H1>CPU Load - System, User and Nice Processes</H1> MaxBytes[server.cpu]: 100 ShortLegend[server.cpu]: % YLegend[server.cpu]: CPU Utilization Legend1[server.cpu]: Current CPU percentage load LegendI[server.cpu]: Used LegendO[server.cpu]: Options[server.cpu]: growright,nopercent Unscaled[server.cpu]: ymwd # Memory Monitoring (Total Versus Available Memory) # Target[server.memory]: memAvailReal.0&memTotalReal.0:public@localhost Title[server.memory]: Free Memory PageTop[server.memory]: <H1>Free Memory</H1> MaxBytes[server.memory]: 100000000000 ShortLegend[server.memory]: B YLegend[server.memory]: Bytes LegendI[server.memory]: Free LegendO[server.memory]: Total Legend1[server.memory]: Free memory, not including swap, in bytes Legend2[server.memory]: Total memory Options[server.memory]: gauge,growright,nopercent kMG[server.memory]: k,M,G,T,P,X # Memory Monitoring (Percentage usage) # Title[server.mempercent]: Percentage Free Memory PageTop[server.mempercent]: <H1>Percentage Free Memory</H1> Target[server.mempercent]: ( memAvailReal.0&memAvailReal.0:public@localhost ) * 100 / ( memTotalReal.0&memTotalReal.0:public@localhost ) options[server.mempercent]: growright,gauge,transparent,nopercent Unscaled[server.mempercent]: ymwd MaxBytes[server.mempercent]: 100 YLegend[server.mempercent]: Memory % ShortLegend[server.mempercent]: Percent LegendI[server.mempercent]: Free LegendO[server.mempercent]: Free Legend1[server.mempercent]: Percentage Free Memory Legend2[server.mempercent]: Percentage Free Memory # Disk # Target[server.root]:dskPercent.1&dskPercent.2:public@localhost RouterUptime[server.root]: public@localhost MaxBytes[server.root]: 100 Title[server.root]: DISK USAGE PageTop[server.root]: <H1>DISK / and /boot Usage %</H1> Unscaled[server.root]: ymwd ShortLegend[server.root]: % YLegend[server.root]: DISK Utilization Legend1[server.root]: Root disk Legend2[server.root]: /boot disk Legend3[server.root]: Legend4[server.root]: LegendI[server.root]: Root disk LegendO[server.root]: /boot disk Options[server.root]: growright,gauge,nopercent EOF # Gera Index do MRTG /usr/local/mrtg-2/bin/indexmaker --output=/var/www/html/mrtg/index.html /etc/mrtg/mrtg.cfg /etc/mrtg/server-stats.cfg echo " =========================================== " echo " " echo " " echo " " echo " Sera criado o Shell Script de execucao do MRTG . . ." echo " " echo " " sleep 10 # Cria Shell Script para execucao do MRTG cat <<EOF > /etc/mrtg/mrtg.sh #!/bin/bash # Executa MRTG env LANG=C /usr/local/mrtg-2/bin/mrtg /etc/mrtg/mrtg.cfg --logging /var/log/mrtg.log env LANG=C /usr/local/mrtg-2/bin/mrtg /etc/mrtg/server-stats.cfg --logging /var/log/mrtg.log EOF chmod +x /etc/mrtg/mrtg.sh /etc/mrtg/mrtg.sh echo " =========================================== " echo " " echo " " echo " " echo " Sera configurado o Cron para execucao do MRTG a cada 5 minutos e o Logrotate dos logs do MRTG . . ." echo " " echo " " sleep 10 # Configura Cron para execucao a cada 5 minutos cat <<EOF > /etc/cron.d/mrtg # Run the hourly jobs SHELL=/bin/bash PATH=/sbin:/bin:/usr/sbin:/usr/bin MAILTO=root */5 * * * * root /etc/mrtg/mrtg.sh EOF # Configura Logrotate do Log cat <<EOF > /etc/logrotate.d/mrtg /var/log/mrtg.log { missingok copytruncate compress size 5M weekly } EOF echo " =========================================== " echo " " echo " " echo " " echo " Acesse: http://ip-servidor/mrtg/" fi |
Continue reading →
A grande e fabulosa sacada do Samba 4 é utilizar o RSAT para administrar toda arvore de OUs, Grupos, Usuários do controlador de domínio, pois vamos ser sinceros, ferramenta melhor que da Microsoft para administrar um Controlador de Domínio ainda não tem, mas você pode efetuar algumas ações direto pelo terminal, vamos brincar aqui com…
Continue reading →Após compilar o Samba 4 no CentOS precisamos criar a Unit para gerenciamento do serviço, na documentação do Samba 4 possui um InitScript para rodar com SystemV ao qual pode ser criado no CentOS 7 e também controlado pelo SystemD, porém nos packages do Samba 4 possui o script default para utilizar em SystemD, após…
Continue reading →Servidores NTP para sincronização da data e hora dos servidores são primordiais para manter o ambiente correto e rotinas em execução corretas, abaixo os passos para configurar o fuso horário, região e servidor NTP para sincronização. Configure o Time Zone conforme sua região:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 |
<strong># tzselect</strong> Please identify a location so that time zone rules can be set correctly. Please select a continent or ocean. 1) Africa 2) Americas 3) Antarctica 4) Arctic Ocean 5) Asia 6) Atlantic Ocean 7) Australia 8) Europe 9) Indian Ocean 10) Pacific Ocean 11) none - I want to specify the time zone using the Posix TZ format. <strong>#? 2</strong> Please select a country. 1) Anguilla 28) Haiti 2) Antigua & Barbuda 29) Honduras 3) Argentina 30) Jamaica 4) Aruba 31) Martinique 5) Bahamas 32) Mexico 6) Barbados 33) Montserrat 7) Belize 34) Nicaragua 8) Bolivia 35) Panama 9) Brazil 36) Paraguay 10) Canada 37) Peru 11) Caribbean Netherlands 38) Puerto Rico 12) Cayman Islands 39) St Barthelemy 13) Chile 40) St Kitts & Nevis 14) Colombia 41) St Lucia 15) Costa Rica 42) St Maarten (Dutch part) 16) Cuba 43) St Martin (French part) 17) Curacao 44) St Pierre & Miquelon 18) Dominica 45) St Vincent 19) Dominican Republic 46) Suriname 20) Ecuador 47) Trinidad & Tobago 21) El Salvador 48) Turks & Caicos Is 22) French Guiana 49) United States 23) Greenland 50) Uruguay 24) Grenada 51) Venezuela 25) Guadeloupe 52) Virgin Islands (UK) 26) Guatemala 53) Virgin Islands (US) 27) Guyana <strong>#? 9</strong> Please select one of the following time zone regions. 1) Atlantic islands 2) Amapa, E Para 3) NE Brazil (MA, PI, CE, RN, PB) 4) Pernambuco 5) Tocantins 6) Alagoas, Sergipe 7) Bahia 8) S & SE Brazil (GO, DF, MG, ES, RJ, SP, PR, SC, RS) 9) Mato Grosso do Sul 10) Mato Grosso 11) W Para 12) Rondonia 13) Roraima 14) E Amazonas 15) W Amazonas 16) Acre <strong>#? 8</strong> The following information has been given: Brazil S & SE Brazil (GO, DF, MG, ES, RJ, SP, PR, SC, RS) Therefore TZ='America/Sao_Paulo' will be used. Local time is now: Mon Oct 19 13:56:50 BRST 2015. Universal Time is now: Mon Oct 19 15:56:50 UTC 2015. Is the above information OK? 1) Yes 2) No <strong>#? 1</strong> You can make this change permanent for yourself by appending the line TZ='America/Sao_Paulo'; export TZ to the file '.profile' in your home directory; then log out and log in again. Here is that TZ value again, this time on standard output so that you can use the /usr/bin/tzselect command in shell scripts: America/Sao_Paulo |
Verifique a existência do arquivo “/etc/localtime” e seu apontamento, validando se esta apontando…
Continue reading →1 – Instalando pacotes e preparando o ambiente
|
1 2 |
[root@centos7 ~]# cat /etc/redhat-release CentOS Linux release 7.2.1511 (Core) |
|
1 |
[root@centos7 ~]# yum -y install epel-release |
|
1 |
[root@centos7 ~]# yum -y install openvpn easy-rsa |
|
1 |
[root@centos7 ~]# cp -Rfv /usr/share/easy-rsa/2.0/ /etc/openvpn/easy-rsa |
|
1 2 3 4 5 6 7 8 |
[root@centos7 ~]# firewall-cmd --add-port=1194/udp --permanent success [root@centos7 ~]# firewall-cmd --reload success [root@centos7 ~]# firewall-cmd --list-port 1194/udp [root@centos7 ~]# firewall-cmd --list-service dhcpv6-client ssh |
2 – Gerando certificados CA/CA-SERVER/DH
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 |
[root@centos7 easy-rsa]# cd /etc/openvpn/easy-rsa/ [root@centos7 easy-rsa]# vi vars # These are the default values for fields # which will be placed in the certificate. # Don't leave any of these fields blank. export KEY_COUNTRY="BR" export KEY_PROVINCE="SP" export KEY_CITY="RIBEIRAOPRETO" export KEY_ORG="JPCORP" export KEY_OU="JPCORP" # X509 Subject Field export KEY_NAME="CA-JPCORP" |
|
1 2 |
[root@centos7 easy-rsa]# source ./vars NOTE: If you run ./clean-all, I will be doing a rm -rf on /etc/openvpn/easy-rsa/keys |
|
1 |
[root@centos7 easy-rsa]# ./clean-all |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 |
[root@centos7 easy-rsa]# ./build-ca Generating a 2048 bit RSA private key ............................................+++ .........+++ writing new private key to 'ca.key' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [BR]: State or Province Name (full name) [SP]: Locality Name (eg, city) [RIBEIRAOPRETO]: Organization Name (eg, company) [JPCORP]: Organizational Unit Name (eg, section) [JPCORP]: Common Name (eg, your name or your server's hostname) [JPCORP CA]: Name [CA-JPCORP]: Email Address [JHONES@JPCORP.ETI.BR]: |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 |
[root@centos7 easy-rsa]# ./build-key-server server Generating a 2048 bit RSA private key .........+++ ...........+++ writing new private key to 'server.key' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [BR]: State or Province Name (full name) [SP]: Locality Name (eg, city) [RIBEIRAOPRETO]: Organization Name (eg, company) [JPCORP]: Organizational Unit Name (eg, section) [JPCORP]: Common Name (eg, your name or your server's hostname) [server]: Name [CA-JPCORP]: Email Address [JHONES@JPCORP.ETI.BR]: Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []: An optional company name []: Using configuration from /etc/openvpn/easy-rsa/openssl-1.0.0.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows countryName :PRINTABLE:'BR' stateOrProvinceName :PRINTABLE:'SP' localityName :PRINTABLE:'RIBEIRAOPRETO' organizationName :PRINTABLE:'JPCORP' organizationalUnitName:PRINTABLE:'JPCORP' commonName :PRINTABLE:'server' name :PRINTABLE:'CA-JPCORP' Certificate is to be certified until Jan 28 23:35:47 2026 GMT (3650 days) Sign the certificate? [y/n]:y 1 out of 1 certificate requests certified, commit? [y/n]y Write out database with 1 new entries Data Base Updated |
|
1 2 3 |
[root@centos7 easy-rsa]# ./build-dh Generating DH parameters, 2048 bit long safe prime, generator 2 ................+............ |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 |
[root@centos7 easy-rsa]# ll keys/ total 52 -rw-r--r-- 1 root root 5492 Jan 31 20:35 01.pem -rw-r--r-- 1 root root 1732 Jan 31 20:35 ca.crt -rw------- 1 root root 1704 Jan 31 20:35 ca.key -rw-r--r-- 1 root root 424 Jan 31 20:39 dh2048.pem -rw-r--r-- 1 root root 134 Jan 31 20:35 index.txt -rw-r--r-- 1 root root 21 Jan 31 20:35 index.txt.attr -rw-r--r-- 1 root root 0 Jan 31 20:35 index.txt.old -rw-r--r-- 1 root root 3 Jan 31 20:35 serial -rw-r--r-- 1 root root 3 Jan 31 20:35 serial.old -rw-r--r-- 1 root root 5492 Jan 31 20:35 server.crt -rw-r--r-- 1 root root 1078 Jan 31 20:35 server.csr -rw------- 1 root root 1708 Jan 31 20:35 server.key |
|
1 2 |
[root@centos7 easy-rsa]# cd .. [root@centos7 openvpn]# ln -s /etc/openvpn/easy-rsa/keys/ /etc/openvpn/ca-server |
3 – Criando o .conf
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 |
[root@centos7 openvpn]# vi site-to-client.conf port 1194 proto udp dev tun ca /etc/openvpn/ca-server/ca.crt cert /etc/openvpn/ca-server/server.crt key /etc/openvpn/ca-server/server.key dh /etc/openvpn/ca-server/dh2048.pem ifconfig-pool-persist /var/log/ipp_site-to-client.log ;push "route 172.16.1.1 255.255.255.0" client-cert-not-required tls-server username-as-common-name server 10.10.10.0 255.255.255.0 keepalive 10 120 comp-lzo user nobody group nobody plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so login persist-key persist-tun status /var/log/status_site-to-client.log log-append /var/log/site-to-client.log verb 3 |
4 – Ativando o serviço, o @site-to-client deve ser o mesmo nome do arquivo .conf criado, aqui neste caso site-to-client.conf
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 |
[root@centos7 openvpn]# systemctl enable openvpn@site-to-client Created symlink from /etc/systemd/system/multi-user.target.wants/openvpn@site-to-client.service to /usr/lib/systemd/system/openvpn@.service. [root@centos7 openvpn]# systemctl start openvpn@site-to-client [root@centos7 openvpn]# systemctl status openvpn@site-to-client ● openvpn@site-to-client.service - OpenVPN Robust And Highly Flexible Tunneling Application On site/to/client Loaded: loaded (/usr/lib/systemd/system/openvpn@.service; enabled; vendor preset: disabled) Active: active (running) since Dom 2016-01-31 20:45:09 BRT; 4s ago Process: 1795 ExecStart=/usr/sbin/openvpn --daemon --writepid /var/run/openvpn/%i.pid --cd /etc/openvpn/ --config %i.conf (code=exited, status=0/SUCCESS) Main PID: 1796 (openvpn) CGroup: /system.slice/system-openvpn.slice/openvpn@site-to-client.service ├─1796 /usr/sbin/openvpn --daemon --writepid /var/run/openvpn/site-to-client.pid --cd /etc/openvpn/ --config site-to-cli... └─1797 /usr/sbin/openvpn --daemon --writepid /var/run/openvpn/site-to-client.pid --cd /etc/openvpn/ --config site-to-cli... Jan 31 20:45:09 centos7 systemd[1]: Starting OpenVPN Robust And Highly Flexible Tunneling Application On site/to/client... Jan 31 20:45:09 centos7 systemd[1]: PID file /var/run/openvpn/site-to-client.pid not readable (yet?) after start. Jan 31 20:45:09 centos7 systemd[1]: Started OpenVPN Robust And Highly Flexible Tunneling Application On site/to/client. |
5 -…
Continue reading →1 – Epel-Release Epel-Release é um repositorio extra para o CentOS onde agrega mais um emaranhado de pacotes:
|
1 2 3 4 5 6 7 8 9 |
[root@storage packaging]# yum search epel-release Plugins carregados: fastestmirror Loading mirror speeds from cached hostfile * base: centos.xpg.com.br * epel: mirror.globo.com * extras: centos.xpg.com.br * updates: centos.xpg.com.br ======================================================= N/S matched: epel-release ======================================================= epel-release.noarch : Extra Packages for Enterprise Linux repository configuration |
2 – Net-Tools Após instalar o CentOS a primeira pergunta: cade o comando ifconfig? para isso instale o pacote net-tools:
|
1 2 3 4 5 6 7 8 9 |
[root@storage packaging]# yum search net-tools Plugins carregados: fastestmirror Loading mirror speeds from cached hostfile * base: centos.xpg.com.br * epel: mirror.globo.com * extras: centos.xpg.com.br * updates: centos.xpg.com.br ======================================================== N/S matched: net-tools ========================================================= net-tools.x86_64 : Basic networking tools |
3 – Bind-Utils Algumas ferramentas para auxiliar num troubleshooting de rede é o bind-utils onde…
Continue reading →O que é LVM? Logical Volume Manager ou Gerenciador de Volume Lógico, em palavras limpas acima do disco físico temos uma partição física que acima temos um grupo de volume e acima o volume lógico onde são armazenados os dados (creio que conseguiu abstrair essas informações em forma de desenho na sua mente, se não…
Continue reading →