True Light Designs Blog

Suspicious process running under user

Wednesday, 30 July 2014 04:56

Tim Ramsey

0 Comments

I was tired of getting WHM email for processes that I was very much aware that were running. You can add these to the ignore file to relieve the excessive emails. Mine happened to be a php program so the syntax is as follows. Open up the file

/etc/csf/csf.pignore

1	/etc/csf/csf.pignore

and add:

cmd:/usr/bin/php /home/<user>/public_html/<yourfile>.php

1	cmd:/usr/bin/php /home/<user>/public_html/<yourfile>.php

then you just need to restart the service for your changes to take effect.

service lfd restart

1	service lfd restart

How to Install SSL from SSH

Thursday, 13 February 2014 19:21

Tim Ramsey

0 Comments

This is more of a reference for myself to come back to, but if anyone else needs the details here they are. This was for ubuntu so structure may be different depending on setup. Ensure SSL is enabled

sudo a2enmod ssl

1	sudo a2enmod ssl

Generate CSR Request (Which will create private keys and csr) in etc/ssl/private

openssl req -new -newkey rsa:2048 -nodes -out www_yoururl_com.csr -keyout www_yoururl_com.key -subj "/C=Your Country/ST=Your State/L=Your City/O=Your Company/CN=www.yoururl.com"

1	openssl req -new -newkey rsa:2048 -nodes -out www_yoururl_com.csr -keyout www_yoururl_com.key -subj "/C=Your Country/ST=Your State/L=Your City/O=Your Company/CN=www.yoururl.com"

Move CSR to Certs Folder

mv www_yoururl_com.csr /etc/ssl/certs

1	mv www_yoururl_com.csr /etc/ssl/certs

Secure Copy Certificates from Desktop to server

pscp.exe C:\\yourcert.crt root@192.168.1.1:/etc/ssl/certs
pscp.exe C:\\yourbundle.crt root@192.168.1.1:/etc/ssl/certs

1 2	pscp.exe C:\\yourcert.crt root@192.168.1.1:/etc/ssl/certs pscp.exe C:\\yourbundle.crt root@192.168.1.1:/etc/ssl/certs

If you need to bundle the certs use

cat yourdomain.crt yourdomain.ca-bundle > ssl-bundle.crt

1	cat yourdomain.crt yourdomain.ca-bundle > ssl-bundle.crt

Edit VHosts for Port 443

vi /etc/apache2/sites-enabled/yoururlcom

1	vi /etc/apache2/sites-enabled/yoururlcom

<VirtualHost *:443>
DocumentRoot /var/www/ 
SSLEngine on 
SSLCertificateFile /path/to/your_domain_name.crt 
SSLCertificateKeyFile /path/to/your_private.key 
SSLCertificateChainFile /path/to/DigiCertCA.crt
</VirtualHost>

DocumentRoot /var/www/

SSLEngine on

SSLCertificateFile /path/to/your_domain_name.crt

SSLCertificateKeyFile /path/to/your_private.key

SSLCertificateChainFile /path/to/DigiCertCA.crt

</VirtualHost>

Check vhosts config

apachectl configtest (sometimes apache2ctl configtest) or service nginx configtest

1	apachectl configtest (sometimes apache2ctl configtest) or service nginx configtest

Restart Apache

/etc/init.d/apache2 restart or nginx -s reload

1	/etc/init.d/apache2 restart or nginx -s reload

Verify it worked http://www.sslshopper.com/ssl-checker.html#hostname=www.yoururl.com

How to change file permissions after SVN UPDATE

Tuesday, 12 November 2013 22:15

Tim Ramsey

0 Comments

I was frustrated because SVN takes umask to assign file permissions for the user and I had one file that needed different permissions to run. After researching for a while at the best approach, I decided to create a 3 line bash script to do change the file permissions afters the svn update.

#!/bin/sh
cd public_html
svn update
chmod 644 index.php

#!/bin/sh

cd public_html

svn update

chmod 644 index.php

I named the file svnupdate.sh so running bash svnupdate.sh from shell changes the directory to public_html, updates the files, and then changes the permissions of the index.php file.

This is not meant to be an elaborate solution, but hopefully will point someone to a direction quicker that it took me.

Solved X11 GUI not working in putty

Monday, 04 November 2013 23:53

Tim Ramsey

0 Comments

I was having all kids of issues trying to get a RETS server admin GUI display up and running. It uses java and the first error I was receiving from the command line was

Exception in thread "AWT-EventQueue-0" java.awt.HeadlessException:
No X11 DISPLAY variable was set, but this program performed an operation which requires it.

I am sshing into the server with putty on Windows. The error above led me to download and install Xming. After downloading and installing I went to Putty > Connection > SSH > X11 > Click enable and set display location to 127.0.0.1:0.

Still no dice. It wasn’t getting any error in putty window, but learned if you right click putty window > Event Log will give you tons of information. I found this gem:

2013-11-03 17:20:26 Remote debug message: No xauth program; cannot forward with spoofing.

of course, xauth wasn’t installed. I ran the follow to install and had gui up in no time.


yum search xauth

yum install xorg-x11-xauth

Another thing to look at is your sshd_config make sure you have the following set X11Forwarding yes

Page 12 of 13

Suspicious process running under user

How to Install SSL from SSH

How to change file permissions after SVN UPDATE

Solved X11 GUI not working in putty

Categories

Recent Posts