kb.hurricane-ridge.com » Operating Systems

Converting an IP Address to Hex

admin — Wed, 10 Nov 2010 06:14:23 +0000

Convert an IP address to hex using the “gethostip” command:

$ gethostip 1.2.3.4
1.2.3.4 1.2.3.4 010203047

This is useful for naming files in a pxelinux.cfg directory, for instance.

Generating Crypted Passwords for Kickstart Files

admin — Mon, 04 Oct 2010 17:38:35 +0000

For Red Hat or clones, or ESX/ESXi, use “grub-md5-crypt”:

> grub-md5-crypt
Password:
Retype password:
$1$KnYGn/$wOAmKuQH3KP35XRjWiUpX/

Copy and paste to “rootpw –iscrypted” as appropriate.

Example checkinstall arguments

admin — Mon, 02 Aug 2010 21:59:14 +0000

> sudo checkinstall -D --pkgname openldap_proxy --pkgversion=2.4.22-hrc --arch=amd64 \
  --maintainer=sysadmin@example.com --nodoc

Setting SCSI Timeout Values for FreeBSD VMs on VMware/NetApp

admin — Wed, 23 Jun 2010 23:07:29 +0000

NetApp requires setting a timeout value of 190 seconds for all VMware data stores on their filers to handle “long fabric or storage-side I/O interruptions”; this is done as follows on FreeBSD:

# sysctl kern.cam.da.default_timeout=190

This can be set permanently in /etc/sysctl.conf:

kern.cam.da.default_timeout=190

Elsewhere, I have seen a recommendation for FreeBSD on ESX that kern.cam.da.retry_count be set to 120.

Query Architecture of RPMs

admin — Tue, 15 Jun 2010 22:01:16 +0000

To query the architecture of installed RPMs, use a custom query format:

rpm -q -a --queryformat='%{N}-%{V}-%{R}.%{arch}\n'

Mount an ISO image on Linux

admin — Tue, 15 Jun 2010 21:59:12 +0000

# mount -o loop disk1.iso /mnt/disk

Configuring a Printer on Solaris

admin — Tue, 02 Mar 2010 00:49:12 +0000

Adapted from the lpadmin man page, for an HP JetDirect printer:

> pfexec lpadmin -p lp01 -v /dev/null -m netstandard -o dest=lp01.example.com:9100 -o protocol=tcp -T PS -I postscript > pfexec lpset -a banner=never lp01 > pfexec lpadmin -d lp01 > pfexec enable lp01 > pfexec accept lp01

Services I like to disable on Solaris

admin — Sat, 27 Feb 2010 00:47:40 +0000

YMMV; adjust as you see fit:

svcadm disable svc:/network/nfs/mapid:default svcadm disable svc:/network/nfs/cbd:default svcadm disable svc:/network/nfs/status:default svcadm disable svc:/network/nfs/nlockmgr:default svcadm disable svc:/network/rpc/rstat:default svcadm disable svc:/application/x11/xfs:default svcadm disable svc:/network/finger:default svcadm disable svc:/network/ftp:default svcadm disable svc:/network/login:rlogin svcadm disable svc:/network/nfs/rquota:default svcadm disable svc:/network/nfs/client:default svcadm disable svc:/network/rpc/rusers:default svcadm disable svc:/network/rpc/cde-ttdbserver:tcp svcadm disable svc:/network/shell:default svcadm disable svc:/network/telnet:default svcadm disable svc:/network/cde-spc:default svcadm disable svc:/application/management/seaport:default svcadm disable svc:/application/management/snmpdx:default svcadm disable svc:/application/management/dmi:default svcadm disable svc:/system/webconsole:console svcadm disable svc:/application/print/ipp-listener:default

pfexec as sudo replacement

admin — Fri, 26 Feb 2010 18:22:37 +0000

To use pfexec similarly to sudo, use “usermod” to give the account the “Primary Administrator” profile:

# usermod -P'Primary Administrator' aleonard

“aleonard” will now be able to preface commands with “pfexec” to run them as root, similar to sudo when configured not to prompt for a password.

References: Less known Solaris features: pfexec

Using Sendmail Maps on Solaris

admin — Fri, 26 Feb 2010 18:08:54 +0000

Configure ‘/usr/lib/mail/cf/sendmail.mc’ to meet your needs; for example, to use the access_db and mailertable features:

divert(0)dnl VERSIONID(`@(#)sendmail.mc 1.11 (Sun) 06/21/04') OSTYPE(`solaris8')dnl DOMAIN(`generic')dnl FEATURE(access_db, `hash -o -T /etc/mail/access') FEATURE(mailertable, `hash -o /etc/mail/mailertable') MAILER(`local')dnl MAILER(`smtp')dnl

The new ‘sendmail.cf’ can be built in ‘/usr/lib/mail/cf/sendmail.mc’ by running ‘make’ as root. Copy the new ‘sendmail.cf’ file to ‘/etc/mail’ and restart sendmail by running:

# svcadm restart sendmail

An example mailertable mail map would be as follows:

example.org smtp:mx.example.org

Once your map files are ready, use ‘makemap’ to create the database files for each map:

# makemap -v hash mailertable < mailertable # makemap -v hash access < access