• Minimal.iso = It contains minimum package that requires to a functional Linux system. Doesn’t contain GUI.

• Dvd.iso= It contains minimal packages plus some utility packages, basic development packages and contains GUI. It’s size is 3.7 GB that can fit in DVD.

Boot the system with the boot device and continue installation with selecting Install AlmaLinux 8.

Continue the installation with selecting the system language.

After choosing the system language, the setup page like the one below will appear.

The first thing to do is to set up the network. AlmaLinux needs an active internet connection to download base packages and other necessary files.

If connection can not be established with automatic dhcp settings, dhcp settings should be switched to manuel mode and ipv4 settings should be arranged according to the user’s information.

Next step is setting the root password, keyboard layout , time-date and disk partitioning. After the root password is set, set up time, date and keyboard layout. Inside the disk partitioning settings , select the disk that is going to be used and then click the Done button.

Next, before clicking the Begin Installation button, it should be chosen which packages are going to be installed in the Software Selection section.

If everything has been set correctly, there should be no warnings under the sections. After the steps are completed, you can start your installation by clicking the Begin Installation button. A proper setup page is as follows.

After the installation is complete, it is important to download the basic network packages as well. These packages can be installed with a single command. Other essential packages can be added to this command.

# yum install vim bind-utils net-tools wget rsync netctl openssh-server dnsutils atop

If problems are encountered while installing atop, it should be downloaded with the wget command.

# wget http://www.atoptool.nl/download/atop-2.1-1.i586.rpm

After the download process is completed, it can be seen which group packages of AlmaLinux are installed on the system with the following command and the missing ones should be downloaded in line with the user needs.

# yum group list

There is no GUI in the system due to minimal installation, if a GUI is needed: Download should be done with the Workstation option. This option will provide the user with the Gnome Desktop Environment, as well as most packages that should be on a Workstation.

# yum  group install workstation

After the download is completed, the desktop can be activated with the following command.

# startx &

The post How to Install AlmaLinux 8 appeared first on VeriTeknik.

Target:

Install iSCSI Utils if not available

Edit targets.conf

vi /etc/tgt/targets.conf

Paste the configuration below, change target name based on your needs

backing-store /dev/sdc1 
initiator-address 172.100.100.2 
# add more initiators if you need 
#initiator-address 172.50.50.2 
#incominguser username password

Enable tgtd service

chkconfig tgtd on

Start the service

service tgtd start

Note: If you don’t want any volume group to be automatically recognized by the operating system of the target, please filter the volume group to be seen on boot.
Edit /etc/lvm/lvm.conf and add this global_filter

global_filter = [ "a|^/dev/sdc1$|", "r/.*/" ]

The post Shared LVM iSCSI Server and Client configuration for CentOS appeared first on VeriTeknik.

Which PHP configure options should I use before compiling?

If you ever need to get the list of modules installed in your current PHP, type the following command via console:

php -m

So, take a list of your current configuration and check the configure list below in order to have a compatible compilation to your existing older version of PHP.

Advice: First of all, you should consider removing PHP packages from your server before compiling PHP, but be aware your codes will be visible till you install the compiled version to your server, consider shutting down your apache server for a while.

yum erase php*

Before downloading the code, install “Development Tools” by typing:

yum groupinstall "Development Tools"

and install other related header files:

yum install wget httpd-devel libtool-ltdl-devel libxml2-devel \
bzip2-devel net-snmp-devel openssl-devel pcre-devel \
curl-devel gd-devel mysql-devel libxslt-devel \
postgresql-devel gmp-devel systemd-devel

Download & install libmcrypt

cd /usr/src
wget http://downloads.sourceforge.net/project\
/mcrypt/Libmcrypt/2.5.8/libmcrypt-2.5.8.tar.gz
tar zxvf libmcrypt-2.5.8.tar.gz 
cd libmcrypt-2.5.8
./configure -libdir=/usr/lib64
make
make install

Download & extract PHP 7.0.4 release:

wget http://php.net/get/php-7.0.4.tar.gz/from/this/mirror
mv mirror /usr/src/php-7.0.4.tar.gz
cd /usr/src/
tar zxvf /usr/src/php-7.0.4.tar.gz 
cd php-7.0.4
./configure \
 --with-apxs2 \
 --with-curl=/usr/local/lib \
 --with-config-file-path=/etc \
 --with-config-file-scan-dir=/etc/php.d \
 --with-pic \
 --with-gd \
 --with-gettext \
 --with-jpeg-dir=/usr/local/lib \
 --with-freetype-dir=/usr/local/lib \
 --enable-sockets \
 --with-kerberos \
 --with-openssl \
 --with-mhash \
 --with-mcrypt=/usr/local/lib \
 --with-mysqli=/usr/bin/mysql_config \
 --with-pdo-mysql=/usr \
 --with-pdo-pgsql=/usr \
 --with-pcre-regex=/usr \
 --with-pear \
 --with-gmp \
 --with-pgsql \
 --with-png-dir=/usr/local/lib \
 --with-xsl \
 --with-zlib \
 --with-zlib-dir=/usr/local/lib \
 --with-iconv \
 --with-libxml-dir=/usr \
 --enable-bcmath \
 --enable-calendar \
 --enable-exif \
 --enable-ftp \
 --enable-gd-native-ttf \
 --enable-soap \
 --enable-sockets \
 --enable-mbstring \
 --enable-zip \
 --enable-wddx \
 --enable-shmop \
 --with-libdir=lib64 \
 --disable-debug \
 --with-bz2 \
 --enable-gd-native-ttf \
 --enable-xml \
 --with-snmp=/usr \
 --enable-json \
 --with-fpm-user=apache\
 --with-fpm-group=apache\
 --enable-fpm \
 --with-fpm-systemd

Make & Install by typing:

make
make install
cp php.ini-production /etc/php.ini

Run the following to enable systemd service for PHP:

cat <<< '
[Unit]
Description=The PHP FastCGI Process Manager - VeriTeknik
After=syslog.target network.target

[Service]
Type=notify
PIDFile=/var/run/php-fpm.pid
ExecStart=/usr/local/sbin/php-fpm --nodaemonize \
--fpm-config /etc/php-fpm.conf
ExecReload=/bin/kill -USR2 $MAINPID

[Install]
WantedBy=multi-user.target
' > /usr/lib/systemd/system/php-fpm.service
systemctl enable php-fpm

Get rid of obsolete settings:

sed -i 's#;date.timezone =.*#  date.timezone = "Europe/Istanbul"#' /etc/php.ini
sed -i 's#upload_max_filesize =.*#upload_max_filesize = 200M#' /etc/php.ini
sed -i 's#post_max_size =.*#post_max_size = 200M#' /etc/php.ini
cat <<< ' include=/etc/php-fpm.d/*.conf [global] pid = \ 
/run/php-fpm/php-fpm.pid error_log = /var/log/php-fpm/error.log \
daemonize = no ' > /etc/php-fpm.conf
mkdir /etc/php-fpm.d

You need to create the appropriate user account the fpm process will run on, as a sample, we use plugged as a user:

useradd plugged
chmod 755 /home/plugged

create the php-fpm process config for the specific site:

cat <<< '
[www]
listen = 127.0.0.1:9001
 
listen.allowed_clients = 127.0.0.1
listen.owner = plugged
listen.group = plugged
user = plugged
group = plugged
pm = dynamic
pm.max_children = 50
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 35

slowlog = /var/log/php-fpm/www-slow.log
 
catch_workers_output = yes
 
php_admin_value[error_log] = /home/plugged/logs/mphp_error.log
php_admin_flag[log_errors] = on
php_value[session.save_handler] = files
php_value[session.save_path] = /home/plugged/session
' > /etc/php-fpm.d/plugged.conf

mkdir /run/php-fpm/
mkdir /var/log/php-fpm/
touch /var/log/php-fpm/error.log
mkdir {/home/plugged/logs/,/home/plugged/session}
chown -R plugged:plugged /home/plugged
systemctl start php-fpm
sed -i 's/DirectoryIndex index.html.*/  DirectoryIndex index.html index.html.var index.php/' /etc/httpd/conf/httpd.conf

please let us know if you find any mistake

The post PHP 7 on CentOS 7 with PHP-FPM appeared first on VeriTeknik.

yum install epel-release
yum install net-tools, bind-utils # optional life savers 
rpm -Uvh http://mirror.veriteknik.net.tr/remi/enterprise/remi-release-7.rpm
yum install php70-php-fpm php70-php-cli php70-php-gd php70-php-json \
php70-php-mbstring php70-php-mcrypt php70-php-mysqlnd php70-php-xml
yum install nginx

 
Please note that if you need additional PHP packages, you can search them with the following command:

yum list php70-*
#Available Packages
#php70-php-opcache.x86_64
#.
#.
#php70-php-pecl-crypto.x86_64
#php70-php-pecl-geoip.x86_64 
#php70-php-pecl-imagick.x86_64
#php70-php-pecl-memcache.x86_64
#php70-php-pecl-xdebug.x86_64
#php70-php-pgsql.x86_64
#php70-php-soap.x86_64
#php70-php-xmlrpc.x86_64
#..
# and to install a package you desire, type the name:
yum install php70-php-pgsql

Run the following to enable systemd service for PHP-FPM:

systemctl enable php70-php-fpm
systemctl enable nginx

Disable SELINUX, set to disabled:

vi /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of three two values:
# targeted - Targeted processes are protected,
# minimum - Modification of targeted policy. Only selected processes are protected.
# mls - Multi Level Security protection.
SELINUXTYPE=targeted

type SHIFT+ZZ to save and exit, and for the time beign type setenforce 0 to disable SELINUX temproray.
Next step is to get rid of obsolete settings:

sed -i 's#;date.timezone =.*#  date.timezone = \ 
"Europe/Istanbul"#' /etc/opt/remi/php70/php.ini
sed -i 's#upload_max_filesize =.*#upload_max_filesize = \
200M#' /etc/opt/remi/php70/php.ini
sed -i 's#post_max_size =.*#post_max_size = \
200M#' /etc/opt/remi/php70/php.ini

You need to create the appropriate user account the fpm process will run on, as a sample we use plugged as a user:

useradd plugged
chmod 755 /home/plugged
mkdir /home/plugged/{logs,public_html,session}
touch /home/plugged/logs/{mphp_error.log,php-fpm-slow.log}
chown -R vtt:vtt /home/plugged/public_html/

create the php-fpm process config for the specific site:

cat <<< '[plugged] 
listen = 127.0.0.1:9001
listen.allowed_clients = 127.0.0.1 
listen.owner = plugged 
listen.group = plugged 
user = plugged 
group = plugged 
pm = dynamic 
pm.max_children = 50 
pm.start_servers = 5 
pm.min_spare_servers = 5 
pm.max_spare_servers = 35 
slowlog = /home/plugged/logs/php-fpm-slow.log 
catch_workers_output = yes 
php_admin_value[error_log] = /home/plugged/logs/mphp_error.log 
php_admin_flag[log_errors] = on 
php_value[session.save_handler] = files 
php_value[session.save_path] = /home/plugged/session ' \
> /etc/opt/remi/php70/php-fpm.d/plugged.conf

Turn on PHP-FPM by typing:

systemctl start php70-php-fpm.service

If it fails to start, you can check the logs by typing
systemctl status php70-php-fpm.service

Also please check the service is running by typing netstat so if the port is open, you should see that:

netstat -tulpn | grep php-fpm
#tcp        0      0 127.0.0.1:9000          0.0.0.0:*               LISTEN      908/php-fpm: master 
#tcp        0      0 127.0.0.1:9001          0.0.0.0:*               LISTEN      908/php-fpm: master 

please let us know if you find any mistake

The post PHP 7 on CentOS 7 with PHP-FPM appeared first on VeriTeknik.

The first step of the configuration is on the nameserver, BIND on our case.

Create the relevant reverse DNS file on /var/named/rev and then edit the file:

cd /var/named/rev
touch 123.234.12
vim 123.234.12

The file contents should be like the following:

$TTL 3D
@       IN      SOA     ns1.rackdc.com. postmaster.rackdc.com. (
                        2018112201   ; Serial, todays date + todays serial
                        8H      ; Refresh
                        2H      ; Retry
                        4W      ; Expire
                        1D)     ; Minimum TTL
                                ; Created on http://root0.net 2005-10-27
                 NS             ns1.rackdc.com.
                 NS		ns2.rackdc.com.
                 
$ORIGIN 12.234.123.in-addr.arpa.


12		PTR		rackdc.com.

After configuring this file with correct details, edit the file /etc/named.conf to include the file you’ve just created.

vim /etc/named.conf

Add the following line in the file:

zone "12.234.123.in-addr.arpa" { notify yes; type master; file "/var/named/rev/123.234.12";allow-query { any; };};

Finally, restart the DNS service.

service named restart

It is important to complete this step before creating an object in RIPE.

The post How to add reverse DNS delegation for RIPE appeared first on VeriTeknik.

There is an easy way to learn GNU/Linux version in all distros. For CentOS, RedHat and other flavors you can use the code

cat /etc/redhat-release

Bu komut size aşağıdakine benzer bir cevap ile dönecektir:

[root@veriteknik ~]# cat /etc/redhat-release 
CentOS Linux release 7.5.1804 (Core)

Sunucunun Sanal ya da Fiziksel olduğunu nasıl anlarsınız

Sunucunun sanal ya da fiziksel olduğunu anlamanın birden çok yolu vardır. Sanallaştırma ortamları üzerinde kolayca sunucu göçü sağlamak için jenerik donanım isimleri kullanılmaktadır. Örneğin fiziksel bir sunucuda işlemcileri görüntülemek için kullandığınız kod aşağıdakine benzer bir çıktı verecektir:

root@veriteknik:~# cat /proc/cpuinfo 
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 6
model           : 62
model name      : Intel(R) Xeon(R) CPU E5-2687W v2 @ 3.40GHz
stepping        : 4
microcode       : 0x428
cpu MHz         : 3603.430
cache size      : 25600 KB
physical id     : 0
siblings        : 16
core id         : 1
cpu cores       : 8
apicid          : 2
initial apicid  : 2
fpu             : yes
fpu_exception   : yes
cpuid level     : 13
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm pcid dca sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm cpuid_fault epb pti tpr_shadow vnmi flexpriority ept vpid fsgsbase smep erms xsaveopt dtherm ida arat pln pts
bugs            : cpu_meltdown spectre_v1 spectre_v2
bogomips        : 6800.13
clflush size    : 64
cache_alignment : 64
address sizes   : 46 bits physical, 48 bits virtual
power management:

Ne var ki, sanal bir sunucuda farklılıkları hemen keşfedebilirsiniz

[root@www ~]# cat /proc/cpuinfo 
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 15
model           : 6
model name      : Common KVM processor
stepping        : 1
microcode       : 0x1
cpu MHz         : 3399.998
cache size      : 16384 KB
physical id     : 0
siblings        : 4
core id         : 0
cpu cores       : 4
apicid          : 0
initial apicid  : 0
fpu             : yes
fpu_exception   : yes
cpuid level     : 13
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx lm constant_tsc nopl xtopology eagerfpu pni cx16 x2apic hypervisor lahf_lm
bogomips        : 6799.99
clflush size    : 64
cache_alignment : 128
address sizes   : 40 bits physical, 48 bits virtual
power management:

model name satırında “Common KVM Processor” yazdığını göreceksiniz. Linux sistemlerde kullanılmakta olan KVM sanallaştırma sistemi açtığı bütün sanal sunucularda bu işlemci tipini kullanacaktır.

İşletim Sistemi Mimarisi

Günümüzde işletim sistemleri 32 bit ya da 64 bit olarak gelmektedir, kuracağınız uygulamaların da bu mimariye uygun olması gerekir. Mimariyi öğrenmek için:

root@veriteknik:~# uname -a
Linux veriteknik 4.15.17-1-pve #1 SMP PVE 4.15.17-9 (Wed, 9 May 2018 13:31:43 +0200) x86_64 GNU/Linux

Satırın en sonunda GNU/Linux yazısından önceki bölümde sistem mimarisini görebilirsiniz, x86_64 64 bit, x86_32 ise 32 bit işletim sistemini temsil etmektedir.

The post Get GNU/Linux Version and OS Details appeared first on VeriTeknik.

1. 1. Go to your home path

cd /home

1. 1. Find your log files

find ./ -type f -size +1k -name "php-mail.log"

After this find operation, you can see your log files. It means, users that have this log file are could be the potential spammer.

1. 1. Tailf your log file.

tailf /home/user/.php/php-mail.log

1. 1. You can see spammer scripts.!!

mail() on [/home/user/domains/domain.com.tr/public_html/modules/mod_users_latest/files.php(1947) : eval()'d code:775]: To: user@hotmail.com -- Headers: Date: Sat, 28 Jan 2017 15:51:47 +0300 From: Flora <user@domain.com.tr> Message-ID: <3f796c9fb6de893f060882897f360bea@domain.com.tr> X-Priority: 3 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="b1_3f796c9fb6de893f060882897f360bea" Content-Transfer-Encoding: 8bit

1. 1. Remove this peace of shit.

rm /home/user/domains/domain.com.tr/public_html/modules/mod_users_latest/files.php

You can easiliy get rid of these spammer scripts using this method. Don’t forget to clear your mail queue after this operation.

The post Finding spammer php script in DirectAdmin appeared first on VeriTeknik.

# openssl pkcs7 -print_certs -in PKCS7.p7b -out certificate.cer

unable to load PKCS7 object
140083803338568:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:703:Expecting: PKCS7

To solve this issue:

1) Copy your PKCS7.p7b file as PKCS7.crt

2) Open this file with your editor and add these lines.

—–BEGIN CERTIFICATE—–

—–END CERTIFICATE—–

3) openssl pkcs7 -print_certs -in PKCS7.crt -out certificate.cer

4) openssl pkcs12 -export -in certificate.cer -inkey private.key -out PKCS7.pfx -certfile bundle.cer
Enter Export Password:
Verifying – Enter Export Password:

Voila! Your PFX file is ready.

The post Convert your P7B Certificate to PFX appeared first on VeriTeknik.

This is a complete guide to install BackupPC on your CentOS 7 server.

#Install BackupPC and prerequsities

yum upgrade -y
yum install epel-release
yum install backuppc nfs-utils nfs-utils-lib bzip2
systemctl restart backuppc.service

#Set permissions

cd /usr/share/BackupPC/
chown backuppc:apache sbin/*

cd /usr/share/BackupPC/sbin
chmod u+s BackupPC_Admin

usermod -s /bin/bash backuppc

#Set firewall rule for HTTP port.

firewall-cmd --zone=public --add-port=80/tcp --permanent

firewall-cmd --reload

#Edit BackupPC config

vi /etc/BackupPC/config.pl

Edit

$Conf{CgiAdminUserGroup} = '';
 $Conf{CgiAdminUsers} = '';

TO

$Conf{CgiAdminUserGroup} = '';
 $Conf{CgiAdminUsers} = 'backuppc';

THEN

Edit

$Conf{PingPath} = '';

TO

$Conf{PingPath} = '/bin/ping';

#Edit your apache configuration

vi /etc/httpd/conf.d/BackupPC.conf

<Directory /usr/share/BackupPC/>
 # BackupPC requires valid authentication in order for the web interface to
 # function properly. One can view the web interface without authentication
 # though all functionality is disabled.
 #
 # htpasswd -c /etc/BackupPC/apache.users yourusername
 #
AuthType Basic
 AuthUserFile /etc/BackupPC/apache.users
 AuthName "BackupPC"
<IfModule mod_authz_core.c>
 # Apache 2.4
 <RequireAll>
 Require valid-user
 <RequireAny>
 Require local
 # --> In order to access only this specific IP
 Require ip 192.168.16
 # --> Uncomment for access everywhere
 # Require all granted
 </RequireAny>
 </RequireAll>
 </IfModule>
 <IfModule !mod_authz_core.c>
 AllowOverride All
 Order allow,deny
 Deny from all
 </IfModule>
</Directory>
Alias /BackupPC/images /usr/share/BackupPC/html/
 ScriptAlias /BackupPC /usr/share/BackupPC/sbin/BackupPC_Admin
 ScriptAlias /backuppc /usr/share/BackupPC/sbin/BackupPC_Admin

#Create username and password for BackupPC GUI

htpasswd -c /etc/BackupPC/apache.users backuppc

New password:
Re-type new password:
Adding password for user backuppc

#Restart your services

systemctl restart backuppc.service
systemctl restart httpd.service

#Then add your ssh key to your remote server.

su - backuppc

ssh-keygen -t rsa

Generating public/private rsa key pair.
Enter file in which to save the key (/var/lib/BackupPC/.ssh/id_rsa):
Created directory ‘/var/lib/BackupPC/.ssh’.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /var/lib/BackupPC/.ssh/id_rsa.
Your public key has been saved in /var/lib/BackupPC/.ssh/id_rsa.pub.

ssh-copy-id root@your-remote-ip

#Test it.

ssh root@your-remote-ip

#Then go

http://your-ip/BackupPC

#Enter your username and password that you created before #htpasswd -c /etc/BackupPC/apache.users backuppc

#Go “Edit Hosts”

#Click Add

#Then write an hostname or IP of your remote server

#Then click SAVE

#Refresh your page and select your host.

!!! DO NOT FORGET INSTALL RSYNC TO YOUR REMOTE SERVER !!!

#Click “Edit Config” for your selected host

#Select Xfer

#Add “*” value for “BackupFilesOnly” Box

#Write down your path name that you want to create backup in RsyncShareName Box

#Then Click Save.!

#Click Start FULL BACKUP

You are ready to go!

Windows SMB Backup

You can also take backup of your Windows clients using BackupPC

The basic steps are

• Create a backuppc user in your domain/client with backup operator privileges
• Create a share on client server and give read and list folder permissions to backuppc user
• Create inbound firewall rule for BackupPC server
• Test your configuration by typing from BackupPC Server
  • smbclient -U “Domain\backuppc” //CLIENTIP/ShareName
  • You will see smb prompt, try to list the files by typing “dir”
• Add the client to backuppc and edit the credentials:
  • change Xfer method to SMB
  • enter username as DOMAIN\user
  • enter password
  • change share name from C$ to Share Name given

The post Centos 7 – BackupPC Installation Guide appeared first on VeriTeknik.

–> Install IPMI Tools

#  yum install OpenIPMI OpenIPMI-tools

–> Start ipmi service automatically

#  chkconfig ipmi on

–> Print current configuration.

#  ipmitool lan print -1

Set in Progress : Set Complete
Auth Type Support : NONE MD2 MD5 PASSWORD
Auth Type Enable : Callback :
: User :
: Operator :
: Admin :
: OEM :
IP Address Source : Static Address
IP Address : 1.2.3.4
Subnet Mask : 255.255.255.0
MAC Address : ab:aa:vv:cc:xx:dd
SNMP Community String : public
IP Header : TTL=0x40 Flags=0x00 Precedence=0x00 TOS=0x10
BMC ARP Control : ARP Responses Disabled, Gratuitous ARP Disabled
Gratituous ARP Intrvl : 2.0 seconds
Default Gateway IP : 1.2.3.4
Default Gateway MAC : 00:00:00:00:00:00
Backup Gateway IP : 0.0.0.0
Backup Gateway MAC : 00:00:00:00:00:00
802.1q VLAN ID : Disabled
802.1q VLAN Priority : 0
RMCP+ Cipher Suites : 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14
Cipher Suite Priv Max : XXXaaaXXaaaXaaa
: X=Cipher Suite Unused
: c=CALLBACK
: u=USER
: o=OPERATOR
: a=ADMIN
: O=OEM

–> Set Ip Adress source static

#  ipmitool lan set 1 ipsrc static

–> Set IP address

#  ipmitool lan set 1 ipaddr 1.2.3.4

–> Set Netmask

#  ipmitool lan set 1 netmask 255.255.255.0

–> Set Default Gateway

#  ipmitool lan set 1 defgw ipaddr 1.2.3.4

–> Print user list.

# ipmitool user list 1

ID   Name    Callin    Link Auth       IPMI   Msg    Channel Priv Limit
1      admin    true          false              true                ADMINISTRATOR
2                     true          false              true                CALLBACK
3     test         true          false              true                USER

4                     true         false               true                CALLBACK
5                     true         false               true                CALLBACK
6                     true         false               true                CALLBACK
7                     true         false               true                CALLBACK

–> Create User (3 is the ID of user)

#  ipmitool user set name 3 test

–> Set password for user test

#  ipmitool user set password 3

Password for user 3:

–> Give Administrator Privilege

Possible privilege levels are:
1 Callback level
2 User level
3 Operator level
4 Administrator level

# ipmitool channel setaccess 1 2 link=on ipmi=on callin=on privilege=4

The post Configuring IPMI Tool for Remote Management appeared first on VeriTeknik.