Laurent Domb OSS Blog

this blog is about OSS, Linux, virtualization, security, business

Facebook
RSS
  • redhat DNS Master / SLAVE TSIG on RHEL 5.8

    I am using 2 dns server here. 192.168.2.83 (Master) and 192.168.2.86 (Slave) First lets setup the Master 1. Create /etc/named.conf as RHEL 5.8 does not provide a sample file. Then add the following content to it include "/etc/transfer.key"; server 192.168.2.86 { keys { HOST1-HOST2. ;}; }; acl domblocal { 192.168.2.0/24; ...

  • redhat Kerberos on Centos 5.9 RHCSS

    First make sure that your time is in sync. So install and configure ntp first. 1. Here is a very basic ntp.conf peer 192.168.2.80 server 192.168.2.4 server 127.127.1.0 fudge 127.127.1.0 stratum 10 driftfile /var/lib/ntp/drift 2. Install the ypserv nis package # yum install -y ypserv 3. Add these 2 values to /etc/sysconfig/network YPSERV_ARGS="-p 808" NISDOMAIN=LOCAL.DOMB.COM Set the NIS domain on the ...

  • logstash Logstash amqp ipv6 DNS lookup on CentOS 6.2 openjdk jruby

    Today I was working on creating a logstash -> logstash -> elasticsearch -> kibana setup. As we run a dual stack ip v4/v6 environment both ipv4 and ipv6 addresses need to work. After installing logstash and adding the following config as an input filter on the indexer: input { amqp { # get ...

  • oracle2 Update: Oracle Linux: A better alternative to CentOS …really?

    Got a nice hint from Oracle this week that they fixed the lack of having CVE information in their yum repos. As I wrote in a previous blog post, it was disappointing that at the time of releasing OEL for the "masses" they did not have metadata available which put ...

I am using 2 dns server here. 192.168.2.83 (Master) and 192.168.2.86 (Slave) First lets setup the Master 1. Create /etc/named.conf as RHEL 5.8 does not provide a sample file. Then add the following content to it include “/etc/transfer.key”; server 192.168.2.86 { keys { HOST1-HOST2. ;}; }; acl domblocal { 192.168.2.0/24; 127.0.0.1; }; options { allow-transfer { 192.168.2.86;}; directory “/var/named”; notify yes; }; //include “/etc/named.rfc1912.zones”; zone “2.168.192.in-addr.arpa” { type master; //  [ Read More ]

First make sure that your time is in sync. So install and configure ntp first. 1. Here is a very basic ntp.conf peer 192.168.2.80 server 192.168.2.4 server 127.127.1.0 fudge 127.127.1.0 stratum 10 driftfile /var/lib/ntp/drift 2. Install the ypserv nis package # yum install -y ypserv 3. Add these 2 values to /etc/sysconfig/network YPSERV_ARGS=”-p 808″ NISDOMAIN=LOCAL.DOMB.COM Set the NIS domain on the KDC server and add it to /etc/yp.conf: # nisdomainname  [ Read More ]

I’ve been working for a nice project the last month. Implementing puppet Enterprise and puppet with the foreman. Why would someone want to use puppet enterprise  and puppet with foreman? Well that’s a good question Foreman is very versatile with its smart proxy functionality.  This is very important if you have a complex network environment. Like puppet, foreman is written in ruby and can  easily be integrated in the puppet  [ Read More ]

Today I was working on creating a logstash -> logstash -> elasticsearch -> kibana setup. As we run a dual stack ip v4/v6 environment both ipv4 and ipv6 addresses need to work. After installing logstash and adding the following config as an input filter on the indexer: input { amqp { # get logs to the ‘rawlogs’ fanout queue. type              => “all” host              => “rabbitmq0.domb.net” user              => “logs” password     =>  [ Read More ]

Got a nice hint from Oracle this week that they fixed the lack of having CVE information in their yum repos. As I wrote in a previous blog post, it was disappointing that at the time of releasing OEL for the “masses” they did not have metadata available which put them on par with CentOS. You basically  needed a spacewalk server to get a brief security, bugfixes or an enhancements  [ Read More ]

RabbitMQ ipv6 DNS names Solved

Last week I was building up a RabbitMQ cluster with shovel from New York to Los Angeles. As we use a dual stack environment ipv4/v6, I expected that RabbitMQ would resolve the ipv6 address  first as normal Linux systems do. So I begun to do my tests and realized, that it didn’t. My publisher  (see code below) sends messages to the following host: “‘rabbitmq0.domb.net‘” 1234567891011121314from amqplib import client_0_8 as amqp  [ Read More ]

Last week I came across this link:  http://linux.oracle.com/switch/centos/ and thought “wow, this might be a very nice alternative to RHEL.” Here is a quote of Oracles site: “FAQ Wait, doesn’t Oracle Linux cost money? Oracle Linux support costs money. If you just want the software, it’s 100% free. And it’s all in our yum repo at public-yum.oracle.com. Major releases, errata, the whole shebang. Free source code, free binaries, free updates,  [ Read More ]

Today I was searching for a nagios check which gets memory information over snmp. So I came across check_netsnmp_memory. It has also a nice php template for pnp4nagios. To test the command I run: # ./check_netsnmp_memory -L “Memory Utilization” -A ‘*’ -H graylog2.domb.net -C public -a ‘total,user,cached,buffer,%used_real,%used_swap,%user_real,%cached_real’ -w ‘,,,500MB,,65%,65%,’  -c ‘,,,800MB,,80%,80%,’ As a result I got this: ERROR: snmp get_request failed – Received noSuchName(2) error-status at error-index 7. Seems that  [ Read More ]

Yesterday I’ve had to clean up a host from the storeconfig mysql database. I ran the puppetstoredconfigclean.rb script and bumped into the following documented Bug http://projects.puppetlabs.com/issues/12405 which will be fixed in version 2.7.12: # ./puppetstoredconfigclean.rb  kvm0.domb.net ################################################################### /usr/lib/ruby/site_ruby/1.8/rubygems/custom_require.rb:31:in `gem_original_require’: no such file to load — sqlite3 (MissingSourceFile) from /usr/lib/ruby/site_ruby/1.8/rubygems/custom_require.rb:31:in `require’ from /usr/lib/ruby/gems/1.8/gems/activesupport-2.1.1/lib/active_support/dependencies.rb:510:in `require’ from /usr/lib/ruby/gems/1.8/gems/activesupport-2.1.1/lib/active_support/dependencies.rb:355:in `new_constants_in’ from /usr/lib/ruby/gems/1.8/gems/activesupport-2.1.1/lib/active_support/dependencies.rb:510:in `require’ from /usr/lib/ruby/gems/1.8/gems/activesupport-2.1.1/lib/active_support/core_ext/kernel/requires.rb:7:in `require_library_or_gem’ from /usr/lib/ruby/gems/1.8/gems/activesupport-2.1.1/lib/active_support/core_ext/kernel/reporting.rb:11:in `silence_warnings’ from /usr/lib/ruby/gems/1.8/gems/activesupport-2.1.1/lib/active_support/core_ext/kernel/requires.rb:5:in `require_library_or_gem’ from /usr/lib/ruby/gems/1.8/gems/activerecord-2.1.1/lib/active_record/connection_adapters/sqlite3_adapter.rb:10:in  [ Read More ]

This How to will walk you thru the steps of installing Pupppet, The Foreman, RabbitMQ, and MCollective: 1. Add your hostname to /etc/hosts.conf and /etc/sysconfig/network [root@puppet ~]# echo -e “127.0.0.1 puppet.${DOMAIN} puppet foreman.yourdomain.com foreman localhost” > /etc/hosts [root@puppet ~]# echo -e “NETWORKING=yes\nHOSTNAME=puppet.yourdomain.com” > /etc/sysconfig/network [root@puppet ~]# hostname foreman.yourdomain.com 2. First we need to add the repositories for the installation (you need to be root or have sudo permissions to do  [ Read More ]

DNS Master / SLAVE T

I am using 2 dns server here. 192.168.2.83 (Master) and ...

Kerberos on Centos 5

First make sure that your time is in sync. So ...

Foreman and mcollect

I've been working for a nice project the last month. ...

Logstash amqp ipv6 D

Today I was working on creating a logstash -> logstash ...

Update: Oracle Linux

Got a nice hint from Oracle this week that they ...

Links

  • Domb Art
  • Sourceforge
  • Slashdot
  • Matildas bakery