Musing with GNU/Linux!

How to get over Gentoo's X display problem after update

2012-01-03T15:34:00.003+05:30

Yep! I could have write the title more specific way,but let it go.So as normal routine I ran a worldsync on my Gentoo and bang! once I reboot the X was not coming up in-spite of having everything in place. What the heck!!!

Then,I realize that update make some enhancement to X and associated things are not getting updated with it.

So, instinctively poking at the log file tell me that "ABI version of so many thing ,related to X driver is mismatching with the server version" and then the obvious thing a little google search reveal that too.Something like this in log file shows:


 38.004] (EE) module ABI major version (10) doesn't match the server's version (11)
[    38.004] (II) UnloadModule: "vesa"
[    38.004] (II) Unloading vesa
[    38.005] (EE) Failed to load module "vesa" (module requirement mismatch, 0)
[    38.005] (II) LoadModule: "fbdev"
[    38.005] (II) Loading /usr/lib/xorg/modules/drivers/fbdev_drv.so
[    38.005] (II) Module fbdev: vendor="X.Org Foundation"
[    38.005]    compiled for 1.10.2, module version = 0.4.2
[    38.005]    ABI class: X.Org Video Driver, version 10.0
[    38.005] (EE) module ABI major version (10) doesn't match the server's version (11)
[    38.005] (II) UnloadModule: "fbdev"
[    38.005] (II) Unloading fbdev
[    38.005] (EE) Failed to load module "fbdev" (module requirement mismatch, 0)
[    38.005] (II) intel: Driver for Intel Integrated Graphics Chipsets: i810,
i810-dc100, i810e, i815, i830M, 845G, 854, 852GM/855GM, 865G, 915G,
E7221 (i915), 915GM, 945G, 945GM, 945GME, Pineview GM, Pineview G,
965G, G35, 965Q, 946GZ, 965GM, 965GME/GLE, G33, Q35, Q33, GM45,
4 Series, G45/G43, Q45/Q43, G41, B43, B43, Clarkdale, Arrandale,
Sandybridge Desktop (GT1), Sandybridge Desktop (GT2),
Sandybridge Desktop (GT2+), Sandybridge Mobile (GT1),
Sandybridge Mobile (GT2), Sandybridge Mobile (GT2+),
Sandybridge Server, Ivybridge Mobile (GT1), Ivybridge Mobile (GT2),
Ivybridge Desktop (GT1), Ivybridge Desktop (GT2), Ivybridge Server
[    38.005] (++) using VT number 7

[    38.038] (EE) No devices detected.
[    38.038] 
Fatal server error:
[    38.038] no screens found
[    38.038] 
Please consult the The X.Org Foundation support 
at http://wiki.x.org
for help. 
[    38.038] Please also check the log file at "/var/log/Xorg.1.log" for additional information.
[    38.038]

Now the time to rebuild the X11 drivers ,because I got new X server to match with it.Did it like this :



bhaskar@GentooLinux_15:11:04_Tue Jan 03:~> sudo emerge -1 $(qlist -IC x11-drivers)

That is numeric one to the emerge flag...means oneshot..means not put an entry in world file...

Once it finish I reboot the machine and voila...the X display come back!!

Hope this will help.

Cheers!
Bhaskar

Using kvm on Arch Linux to install CentOS 6

2011-12-08T12:59:00.001+05:30

This is mighty interesting and damn easy thing to do for better way to use and test new releases.I am gonna show you how you can exploit the power of KVM with minimal fuss.So here we go:

I am sitting on Arch Linux and got to bring in the kvm thing into the box..so I went ahead and do this :


bhaskar@ArchLinux_12:24:23_Thu Dec 08:~> sudo pacman -S qemu-kvm
resolving dependencies...
looking for inter-conflicts...

Targets (2): vde2-2.3.1-1  qemu-kvm-0.15.1-1

Total Download Size:    1.96 MB
Total Installed Size:   10.31 MB

Proceed with installation? [Y/n] y
:: Retrieving packages from extra...
vde2-2.3.1-1-i686                                                                       177.1K   58.0K/s 00:00:03 [#####################################################################] 100%
qemu-kvm-0.15.1-1-i686                                                                 1829.6K   62.8K/s 00:00:29 [#####################################################################] 100%
(2/2) checking package integrity                                                                                   [#####################################################################] 100%
(2/2) checking for file conflicts                                                                                  [#####################################################################] 100%
....
.....

Then I add myself to the kvm group like below:


bhaskar@ArchLinux_12:26:58_Thu Dec 08:~> sudo /usr/sbin/usermod -G kvm -a bhaskar

bhaskar@ArchLinux_12:27:12_Thu Dec 08:~> id bhaskar
uid=1000(bhaskar) gid=1000(bhaskar) groups=1000(bhaskar),92(audio),78(kvm)

Next, I modprobe two kernel module to integrate with the system like below:



bhaskar@ArchLinux_12:27:58_Thu Dec 08:~> sudo /sbin/modprobe kvm-intel

bhaskar@ArchLinux_12:28:10_Thu Dec 08:~> sudo /sbin/modprobe kvm

And the result shows like this :


bhaskar@ArchLinux_12:28:24_Thu Dec 08:~> sudo /bin/lsmod | grep kvm*
kvm_intel             116373  0
kvm                   294406  1 kvm_intel

Then,the final step ,oh btw I have the ISO image of CentOS6 already downloaded in my system, so it easy to use...

So I went ahead like this to boot it from that ISO file by kvm:


bhaskar@ArchLinux_12:39:04_Thu Dec 08:~> qemu-kvm -enable-kvm -cdrom /home/bhaskar/Downloads/CentOS-6.0-i386-bin-DVD.iso

And here is how it look like the initial screen:

So ,pretty easy..huh..you can pass hell lot of option to that command line of qemu-kvm to fine tune you instances.

Hope this will help.

Cheers!
Bhaskar

How to get over Mutt's saga of "Unknown variables"

2011-12-06T15:52:00.000+05:30

I have wrote an article about Mutt here . Now I have changed the system and trying to build it to different system and I am getting this errors:


bhaskar@GentooLinux_15:01:02_Tue Dec 06:~> mutt                                                                                               
Error in /home/bhaskar/.muttrc, line 12: imap_user: unknown variable                                                                          
Error in /home/bhaskar/.muttrc, line 13: imap_pass: unknown variable                                                                          
Error in /home/bhaskar/.muttrc, line 45: message_cachedir: unknown variable                                                                   
Error in /home/bhaskar/.muttrc, line 58: smtp_url: unknown variable                                                                           
Error in /home/bhaskar/.muttrc, line 59: smtp_pass: unknown variable                                                                          
Error in /home/bhaskar/.muttrc, line 60: too few arguments

Pretty ordinary!! huh...no so..I was bemused for sometime then discover that when I pull in Mutt on Gentoo it failed to activate those flags and hence causing problem, here is the evidence of lacking those facilities:


bhaskar@GentooLinux_15:22:37_Tue Dec 06:~> mutt -v                                                                                            
Mutt 1.5.21 (2010-09-15, Gentoo 1.5.21-r1)
Copyright (C) 1996-2009 Michael R. Elkins and others.
Mutt comes with ABSOLUTELY NO WARRANTY; for details type `mutt -vv'.
Mutt is free software, and you are welcome to redistribute it
under certain conditions; type `mutt -vv' for details.

System: Linux 3.0.6-gentoo (i686)
ncurses: ncurses 5.9.20110404 (compiled with 5.9)
hcache backend: GDBM version 1.8.3. 10/15/2002 (built Aug  2 2011 22:18:59)
Compile options:
-DOMAIN
-DEBUG
+HOMESPOOL  -USE_SETGID  +USE_DOTLOCK  +DL_STANDALONE  -USE_FCNTL  +USE_FLOCK   
-USE_POP  -USE_NNTP  -USE_IMAP  -USE_SMTP  
-USE_SSL_OPENSSL  -USE_SSL_GNUTLS  -USE_SASL  -USE_GSS  -HAVE_GETADDRINFO  
-HAVE_REGCOMP  +USE_GNU_REGEX  +COMPRESSED  
+HAVE_COLOR  +HAVE_START_COLOR  +HAVE_TYPEAHEAD  +HAVE_BKGDSET  
+HAVE_CURS_SET  +HAVE_META  +HAVE_RESIZETERM  
+CRYPT_BACKEND_CLASSIC_PGP  -CRYPT_BACKEND_CLASSIC_SMIME  -CRYPT_BACKEND_GPGME  
-EXACT_ADDRESS  -SUN_ATTACHMENT  
+ENABLE_NLS  -LOCALES_HACK  +HAVE_WC_FUNCS  +HAVE_LANGINFO_CODESET  +HAVE_LANGINFO_YESEXPR  
+HAVE_ICONV  -ICONV_NONTRANS  -HAVE_LIBIDN  +HAVE_GETSID  +USE_HCACHE  
-ISPELL
SENDMAIL="/usr/sbin/sendmail"
MAILPATH="Maildir"
PKGDATADIR="/usr/share/mutt"
SYSCONFDIR="/etc/mutt"
EXECSHELL="/bin/sh"
MIXMASTER="mixmaster"
To contact the developers, please mail to .
To report a bug, please visit http://bugs.mutt.org/.

dgc.subjrx
fg.smarttime
vvv.initials
vvv.quote
vvv.nntp
patch-1.5.20hg.pdmef.progress.vl.2
rr.compressed
patch-1.5.4.lpr.collapse_flagged Lukas P. Ruf

The minus(-) prepended variables are not activated..so I need to activate them,which is causing trouble.

Now I need to reinstall mutt with all those enabled..so here we go :

First I have to set some use flags in /etc/portage/package.use/mutt.use file:


mail-client/mutt imap smtp pop gnutls mbox gpg smime sasl

And off I go to fetch Mutt one more time with those flags enable:


bhaskar@GentooLinux_15:35:56_Tue Dec 06:~> sudo emerge -av mutt                                                                               
                                                                                                                                              
These are the packages that would be merged, in order:                                                                                        
                                                                                                                                              
Calculating dependencies... done!                                                                                                             
[ebuild   R    ] mail-client/mutt-1.5.21-r1  USE="berkdb crypt gdbm gnutls* gpg* imap* mbox* nls pop* sasl* smime* smtp* ssl -debug -doc -idn -nntp -qdbm -sidebar -tokyocabinet" 0 kB                                                                                                      
                                                                                                                                              
Total: 1 package (1 reinstall), Size of downloads: 0 kB                                                                                       
                                                                                                                                              
Would you like to merge these packages? [Yes/No] y

Look at the asterix appended values,which is exactly I did mentioned in the mutt.use file.

Now I can access Mutt without problem :)

Hope this will help.

Cheers!
Bhaskar

How to update/upgrade Slackware packages from command line

2011-10-27T15:48:00.001+05:30

Yep that is the case.Basically you need to follow just two steps to do that. I am going to show you that.I am doing it on Slackware 13.37 version.But the basic remain the same.So here we go:

First and foremost update the existing one; if any pending issue are there ,then it will get resolve.



root@Slackware:~# slackpkg update

It will pop up a TUI and ask for package updation,need to select and press ok.Once that operation done.Go to the next step by doing so..


root@Slackware:~# slackpkg upgrade patches

At the end of this operation it will ask you like this :


Searching for NEW configuration files

Some packages had new configuration files installed.
You have four choices:

(K)eep the old files and consider .new files later

(O)verwrite all old files with the new ones. The
old files will be stored with the suffix .orig

(R)emove all .new files

(P)rompt K, O, R selection for every single file

What do you want (K/O/R/P)?

Now it's your call to take,whether you want to do it by hand or the package manager do it for you. I had little to do this specific upgrade so I went for interactive way; like this :

Select what you want file-by-file

/etc/uniconf.conf.new - (K)eep
(O)verwrite
(R)emove
(D)iff
(M)erge
o

/etc/httpd/httpd.conf.new - (K)eep
(O)verwrite
(R)emove
(D)iff
(M)erge
0 -------------------> my selection

/etc/gconf/2/path.new - (K)eep
(O)verwrite
(R)emove
(D)iff
(M)erge
o -----------------------> my selection

/etc/gconf/2/evoldap.conf.new - (K)eep
(O)verwrite
(R)emove
(D)iff
(M)erge
o ------------------> my selection

But for huge upgrade, you should fall back to package manager to do the job for you.Or you are curious(you should be!) then do it by hand, and it will take some amount of time.

Hope this will help.

Cheers!
Bhaskar

Running google-chrome browser on Scientific Linux

2011-10-17T12:23:00.001+05:30

You feel the title looks ordinary..yes it is and it;s my lack of observation caused this hindrance.

The problem: As far as I am concerned SL not come with google-repository with it. So I went ahead and installed it like most of the RH system do.Yep, SL is a clone of RH system.

The repo looks like below:


bhaskar@Scientific-Linux_11:22:47_Mon Oct 17:~> sudo cat /etc/yum.repos.d/google.repo 
[sudo] password for bhaskar: 
[google]
name=Google - i386
baseurl=http://dl.google.com/linux/rpm/stable/i386
enabled=1
gpgcheck=0
gpgkey=https://dl-ssl.google.com/linux/linux_signing_key.pub

and


bhaskar@Scientific-Linux_12:06:07_Mon Oct 17:~> sudo cat /etc/yum.repos.d/google-chrome.repo 
[google-chrome]
name=google-chrome
baseurl=http://dl.google.com/linux/chrome/rpm/stable/i386
enabled=1
gpgcheck=1

Then as usual do the following to install it:


bhaskar@Scientific-Linux_12:06:33_Mon Oct 17:~> sudo yum install google-chrome-stable
Loaded plugins: refresh-packagekit
Setting up Install Process
Package google-chrome-stable-14.0.835.202-103287.i386 already installed and latest version
Nothing to do

So what's the big deal???

If I clicked my google-chrome icon on panel and menu it won't respond!!! irk..So the as usual get into the terminal and paved into the google-chrome dir..and try to fire from the terminal gave me some library not recognizing error..which I resolve by this:


sudo yum install zlib-devel jzlib

Now ,still it's not opening up!! why? After bit of search(and my lack of interest to digg it in the system,which is bad) reveal that in this thread that it is a SELinux ,which prohibiting it from running. You can find the thread here: http://code.google.com/p/chromium/issues/detail?id=87704

Okay, then the obvious next step it correct the SELinux tag for google-sandbox,as mentioned in the thread...


bhaskar@Scientific-Linux_12:17:22_Mon Oct 17:~> sudo chcon -t usr_t /opt/google/chrome/chrome-sandbox

Voila! it is working fine now..what a real laziness can do..very bad of me ahh

Hope this will help.

Cheers!
Bhaskar

How to make USB modem work on Arch Linux

2011-08-20T10:04:00.000+05:30

I think this topic is an uncanny one..YMMV. Anyway I have done it hundred times before and thought to share it with people.Plug in the USB modem and think it just work in GNU/Linux laptop is not the case(tell me the exception if you have come across one!!).

It basically require few thing to be checked out in the box,which are mandatory for the USB modem to work..which are:

1) You need to figure out whether usbserial driver is loaded into the system or not.But how do you detect that?(kidding!! I know all of you know that). Still give away the steps to do that:

A) at the terminal,please type the following:


sudo /sbin/lsmod |grep usbserial

and you should get a response like below:


bhaskar@bhaskar-laptop_09:47:44_Sat Aug 20:~> sudo /bin/lsmod | grep usbserial
usbserial              26639  4 
usbcore               119644  9 uas,ums_realtek,usb_storage,uvcvideo,btusb,usbserial,xhci_hcd,ehci_hcd

Now if you don't get a response from that command,that means kernel haven't load the driver to detect the USB thing.So you need to do the following:


sudo /sbin/modprobe usbserial

It basically get that driver initialize into the system to work with it.So the story is not end here..read on..

Step number 2:

It is essentially driven by the UDEV thing..so until you make the UDEV aware of it..it will still hinder you from using it.

So how do you do that?

Now you need to go to the directory called /etc/udev/rules.d..it should be there already and you need to add a udev rule file to in this dir like below:


ACTION!="add", GOTO="ZTE_End"

# Is this the ZeroCD device?
SUBSYSTEM=="usb", SYSFS{idProduct}=="2000",
SYSFS{idVendor}=="191g, GOTO="ZTE_ZeroCD"

# Is this the actual modem?
SUBSYSTEM=="usb", SYSFS{idProduct}=="0001",
SYSFS{idVendor}=="191g", GOTO="ZTE_Modem"

LABEL="ZTE_ZeroCD"
# This is the ZeroCD part of the card, remove
# the usb_storage kernel module so
# it does not get treated like a storage device
#RUN+="/sbin/rmmod usb_storage"

LABEL="ZTE_Modem"
# This is the Modem part of the card, let's
# load usbserial with the correct vendor
# and product ID's so we get our usb serial devices
RUN+="/sbin/modprobe usbserial vendor=0x191g product=0xffff",
# Make users belonging to the dialout group
# able to use the usb serial devices.
MODE="660", GROUP="dialout"

LABEL="ZTE_End"

I think the file is almost self explain itself.Now you need to restart the network one more time and put in your USB modem into the usb socket.

Then fire the command at the terminal..I am assuming you have wvdial installed in the system..



sudo wvdial providername

The USBmodem should able to ring back to the ISP; that you have already configured and provide you dynamic ip and dns names..voila!!!

You are connected to the internet through the wireless modem on GNU/Linux.To automate the thing in my laptop I have wrote a very very ordinary and mundane script to invoke from command line to get connected to the internet.The script look like below:


#!/bin/bash

if [[ "$UID" = "0" ]]

then

   echo " You have the super power to invoke this sript"
else
   echo "Sorry, you don't have the power to run this script"
fi



echo
echo
echo " Let's check whether the usb modem is connected to system or not"
echo
echo

/usr/sbin/lsusb | gawk -F: ' { print $2"===>"$3 }'

echo
echo

echo "probing the usb modem...loading driver too....."

/sbin/modprobe usbserial vendor=0x191g product=0xffff

echo
echo

echo "Connecting to ISP...."
echo
echo

/usr/bin/wvdial ProvidernameISP &>/var/log/wvdial&

echo
echo

sleep 5

echo "PID of of the WvDial..."

ps -ef | grep wvdial

echo
echo

sleep 3
echo
echo
echo "Checking the connection...."

/bin/ping -c 3 google.com

echo
echo

echo " Looking for live stat....."
echo
echo

/usr/bin/vnstat -i ppp0 -l

O yeah, I have written some information about vnstat in some other blog.It is a nice utility to measure net bandwidth.

Hope this will help.

Cheers!
Bhaskar

Running Funtoo,SUSE and Slackware through OpenVZ on Fedora 15

2011-07-04T15:44:00.002+05:30

In this article I will show you how to run different distros within virtual container.Actually the problem is my machine processor doesn't support virtualization..irk!!! so apart from running different GNU/Linux distros in different physical partitions from several years, now the the time has come to run it seperate space within same OS.

So here we go...first thing first..we need a technology to enable that..and that technology is called OpenVZ . Right? Now I have recently stumble over an article published here and followed those instruction to make it possible for me.

I am running this experiment on Fedora 15 .

Step 1;

Get OpenVZ repo into your machine:

bhaskar@bhaskar-laptop_12:55:46_Mon Jul 04:/etc/yum.repos.d> sudo wget http://download.openvz.org/openvz.repo
[sudo] password for bhaskar:
--2011-07-04 12:56:05-- http://download.openvz.org/openvz.repo
Resolving download.openvz.org... 64.131.90.11
Connecting to download.openvz.org|64.131.90.11|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3841 (3.8K) [text/plain]
Saving to: “openvz.repo”

100%[===================================================================================================================>] 3,841 --.-K/s in 0.007s

2011-07-04 12:56:21 (503 KB/s) - “openvz.repo” saved [3841/3841]

Step 2:

Get the key for it:
bhaskar@bhaskar-laptop_12:56:21_Mon Jul 04:/etc/yum.repos.d> sudo rpm --import http://download.openvz.org/RPM-GPG-Key-OpenVZ

Step 3:

Search for the specific kernel related to OpenVZ:

bhaskar@bhaskar-laptop_13:01:59_Mon Jul 04:/etc/yum.repos.d> sudo yum search vzkernel
Loaded plugins: langpacks, presto, refresh-packagekit
google | 951 B 00:00
google-chrome | 951 B 00:00
http://mirror.switch.ch/ftp/mirror/rpmfusion/free/fedora/development/source/SRPMS/repodata/repomd.xml: [Errno 14] curl#6 - "Couldn't resolve host"
Trying other mirror.
rpmfusion-free-rawhide-source | 2.7 kB 00:00
rpmfusion-free-rawhide-source/primary_db | 79 kB 00:04
rpmfusion-free-updates | 2.7 kB 00:00
updates/metalink | 7.4 kB 00:00
updates | 4.7 kB 00:00
updates/primary_db | 2.1 MB 00:20
openvz-kernel-rhel6 12/12
updates/pkgtags | 31 kB 00:00
=================================================================== N/S Matched: vzkernel ===================================================================
vzkernel.i686 : The Linux kernel
vzkernel-debug.i686 : The Linux kernel compiled with extra debugging enabled
vzkernel-debug-devel.i686 : Development package for building kernel modules to match the debug kernel
vzkernel-devel.i686 : Development package for building kernel modules to match the kernel
vzkernel-firmware.noarch : Firmware files used by the Linux kernel
vzkernel-headers.i686 : Header files for the Linux kernel for use by glibc

Name and summary matches only, use "search all" for everything.

Step 4:

Install the Kernel:

bhaskar@bhaskar-laptop_13:04:24_Mon Jul 04:/etc/yum.repos.d> sudo yum install vzkernel.i686
[sudo] password for bhaskar:
Loaded plugins: langpacks, presto, refresh-packagekit
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package vzkernel.i686 0:2.6.32-042stab018.1 will be installed
--> Processing Dependency: virtual-vzkernel-install >= 2.0.0 for package: vzkernel-2.6.32-042stab018.1.i686
--> Running transaction check
---> Package vzctl.i386 0:3.0.28.3-1 will be installed
--> Processing Dependency: vzctl-lib = 3.0.28.3-1 for package: vzctl-3.0.28.3-1.i386
--> Processing Dependency: vzquota >= 2.7.0-4 for package: vzctl-3.0.28.3-1.i386
--> Processing Dependency: libvzctl-0.0.3.so for package: vzctl-3.0.28.3-1.i386
--> Running transaction check
---> Package vzctl-lib.i386 0:3.0.28.3-1 will be installed
---> Package vzquota.i386 0:3.0.12-1 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

=============================================================================================================================================================
Package Arch Version Repository Size
=============================================================================================================================================================
Installing:
vzkernel i686 2.6.32-042stab018.1 openvz-kernel-rhel6 23 M
Installing for dependencies:
vzctl i386 3.0.28.3-1 openvz-utils 162 k
vzctl-lib i386 3.0.28.3-1 openvz-utils 186 k
vzquota i386 3.0.12-1 openvz-utils 82 k

Transaction Summary
=============================================================================================================================================================
Install 4 Package(s)

Total download size: 23 M
Installed size: 83 M
Is this ok [y/N]:
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 23 M
(1/4): vzctl-3.0.28.3-1.i386.rpm | 162 kB 00:01
(2/4): vzctl-lib-3.0.28.3-1.i386.rpm | 186 kB 00:01
(3/4): vzkernel-2.6.32-042stab018.1.i686.rpm | 23 MB 00:58
(4/4): vzquota-3.0.12-1.i386.rpm | 82 kB 00:01
-------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 367 kB/s | 23 MB 01:05
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : vzctl-lib-3.0.28.3-1.i386 1/4
Installing : vzquota-3.0.12-1.i386 2/4
Installing : vzctl-3.0.28.3-1.i386 3/4
Installing : vzkernel-2.6.32-042stab018.1.i686 4/4

Installed:
vzkernel.i686 0:2.6.32-042stab018.1

Dependency Installed:
vzctl.i386 0:3.0.28.3-1 vzctl-lib.i386 0:3.0.28.3-1 vzquota.i386 0:3.0.12-1

Complete!

Step 6:

The Grub entry:

title OpenVZ-2.6.32-042stab018.1
root (hd0,5)
kernel /vmlinuz-2.6.32-042stab018.1 ro root=UUID=a2298586-fab5-42a5-a84e-276f9565fb37 rd_NO_LUKS rd_NO_LVM rd_NO_MD rd_NO_DM LANG=en_US.UTF-8 SYSFONT=latarcyrheb-sun16 KEYBOARDTYPE=pc KEYTABLE=us
initrd /initramfs-2.6.32-042stab018.1.img

Step 7:

Installing some openvz tools:

bhaskar@bhaskar-laptop_13:44:13_Mon Jul 04:~> sudo yum install vzctl vzquota
[sudo] password for bhaskar:
Loaded plugins: langpacks, presto, refresh-packagekit
Setting up Install Process
Package vzctl-3.0.28.3-1.i386 already installed and latest version
Package vzquota-3.0.12-1.i386 already installed and latest version
Nothing to do

It is saying so because I have already installed those.

Step 8:

Need to change some kernel parameter:

bhaskar@bhaskar-laptop_13:47:37_Mon Jul 04:~> sudo sysctl -p
net.ipv4.ip_forward = 1
net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.default.accept_source_route = 0
kernel.sysrq = 0
kernel.core_uses_pid = 1
net.ipv4.conf.default.proxy_arp = 0
net.ipv4.conf.all.rp_filter = 1
kernel.sysrq = 1
net.ipv4.conf.default.send_redirects = 1
net.ipv4.conf.all.send_redirects = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
net.ipv4.conf.default.forwarding = 1

Step 9:

Change some variable in vz.conf


vi /etc/vz/vz.conf

and put in

NEIGHBOUR_DEVS=all

Step 10:

Here is the file , where you can disable selinux

selinux disable
/etc/sysconfig/selinux

Step 11:

I am putting different ostemplate I have downloaded from here

And here it looks like :

cd /vz/template/cache/

the place to put different os template

I putting there funtoo,suse,slackware there

bhaskar@bhaskar-laptop_13:52:31_Mon Jul 04:/lvm> sudo mv -v suse-11.4-x86.tar.gz /vz/template/cache/
`suse-11.4-x86.tar.gz' -> `/vz/template/cache/suse-11.4-x86.tar.gz'
removed `suse-11.4-x86.tar.gz'

bhaskar@bhaskar-laptop_13:53:06_Mon Jul 04:/lvm> sudo mv -v slackware-13.37-i486-minimal.tar.gz /vz/template/cache/
`slackware-13.37-i486-minimal.tar.gz' -> `/vz/template/cache/slackware-13.37-i486-minimal.tar.gz'
removed `slackware-13.37-i486-minimal.tar.gz'

bhaskar@bhaskar-laptop_13:53:30_Mon Jul 04:/lvm> sudo mv -v funtoo-openvz-i686-funtoo-current-2011-05-26.tar.xz /vz/template/c
`funtoo-openvz-i686-funtoo-current-2011-05-26.tar.xz' -> `/vz/template/cache/funtoo-openvz-i686-funtoo-current-2011-05-26.tar.xz'
removed `funtoo-openvz-i686-funtoo-current-2011-05-26.tar.xz'

DO NOT UNTAR those files ever.

Step 12:

VPS implementation for SUSE:

bhaskar@bhaskar-laptop_14:05:59_Mon Jul 04:~> sudo vzctl create 101 --ostemplate suse-11.4-x86 --config basic
[sudo] password for bhaskar:
Creating container private area (suse-11.4-x86)
Performing postcreate actions
Saved parameters for CT 101
Container private area was created

Step 13:

Run at boot

bhaskar@bhaskar-laptop_14:08:54_Mon Jul 04:~> sudo vzctl set 101 --onboot yes --save
Saved parameters for CT 101

Step 14:

fix a hostname

bhaskar@bhaskar-laptop_14:10:01_Mon Jul 04:~> sudo vzctl set 101 --hostname SUSE --save
Saved parameters for CT 101

Step 15:

saving ip address

bhaskar@bhaskar-laptop_14:11:57_Mon Jul 04:~> sudo vzctl set 101 --ipadd 127.0.0.2 --save
Saved parameters for CT 101

Step 16:

save some socks

bhaskar@bhaskar-laptop_14:13:32_Mon Jul 04:~> sudo vzctl set 101 --numothersock 120 --save
Saved parameters for CT 101

Step 17:

Save Nameserver

vzctl set 101 --nameserver 8.8.8.8 --nameserver 8.8.4.4 --nameserver 145.253.2.75 --save

Step 18:
vz start and set root password

bhaskar@bhaskar-laptop_14:15:26_Mon Jul 04:~> sudo vzctl start 101
Starting container ...
Container is mounted
Adding IP address(es): 127.0.0.2 192.168.2.167
Setting CPU units: 1000
Set hostname: SUSE
File resolv.conf was modified
Container start in progress...
bhaskar@bhaskar-laptop_14:16:19_Mon Jul 04:~> sudo vzctl exec 101 passwd
New Password:
Bad password: too short
Reenter New Password: suse
Changing password for root.
Password changed.

Step 19:

Enter into one the vz..ie. suse

bhaskar@bhaskar-laptop_14:18:00_Mon Jul 04:~> sudo vzctl enter 101
entered into CT 101
SUSE:/ #

Step 20:
Slackware snapshot

bhaskar@bhaskar-laptop_14:31:54_Mon Jul 04:~> sudo vzctl enter 102
entered into CT 102
root@Slackware13:/# uname -a
Linux Slackware13 2.6.32-042stab018.1 #1 SMP Fri Jun 10 20:04:40 MSD 2011 i686 Intel(R) Core(TM)2 Duo CPU T5450 @ 1.66GHz GenuineIntel GNU/Linux
root@Slackware13:/# ls
bin/ boot/ dev/ etc/ fastboot home/ lib/ media/ mnt/ opt/ proc/ root/ sbin/ srv/ sys/ tmp/ usr/ var/

Step 21:

Inside Funtoo!!

bhaskar@bhaskar-laptop_14:41:38_Mon Jul 04:~> sudo vzctl start 103
Starting container ...
Container is mounted
Adding IP address(es): 192.168.2.118
Setting CPU units: 1000
Set hostname: Funtoo
File resolv.conf was modified
Container start in progress...
bhaskar@bhaskar-laptop_14:41:52_Mon Jul 04:~> sudo vzctl enter 103
entered into CT 103
Funtoo / # ls
bin boot dev etc fastboot home lib libexec mnt opt proc root sbin sys tmp usr var

Step 22:

Here is the vz list:

bhaskar@bhaskar-laptop_14:42:49_Mon Jul 04:~> sudo vzlist -a
CTID NPROC STATUS IP_ADDR HOSTNAME
101 16 running 192.168.2.167 SUSE
102 4 running 192.168.2.117 Slackware13
103 2 running 192.168.2.118 Funtoo

Hope this will help.

Cheers!
Bhaskar

Cacti implementation on CentOS AMI

2011-05-10T12:04:00.000+05:30

In this article I will show you some graphing solution through RRD tool along with Cacti.I can tell you it require lot of work to get thing going with Cacti for graphing.

So here we go:

For cacti installation on RHEL or CentOS we need below package to be installed in the system:


httpd
php
php-mysql
php-snmp
php-ldap (when using LDAP authentication)
php-xml
mysql
mysql-server
net-snmp (depending on the distro, net-snmp-utils may be required)

Step 1:

Fetch cacti from cacti.net


[bhaskar@Amazon-instances ~]$ wget -c http://www.cacti.net/downloads/cacti-0.8.7g.tar.gz
-2011-04-29 02:18:20-  http://www.cacti.net/downloads/cacti-0.8.7g.tar.gz
Resolving www.cacti.net... 140.211.167.231, 173.225.179.10, 209.242.232.5
Connecting to www.cacti.net... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2236916 (2.1M) [application/x-gzip]
Saving to: `cacti-0.8.7g.tar.gz'

100%[===================================================================================>] 2,236,916   1.34M/s   in 1.6s

2011-04-29 02:18:22 (1.34 MB/s) - `cacti-0.8.7g.tar.gz' saved [2236916/2236916]

Step 2:

Get the required software in the box:


[bhaskar@Amazon-instances ~]$ sudo yum install httpd php php-mysql php-snmp php-xml mysql mysql-server net-snmp

addons                                                                                                |  951 B     00:00
base                                                                                                  | 2.1 kB     00:00
centosplus                                                                                            | 1.9 kB     00:00
epel                                                                                                  | 3.7 kB     00:00
epel/primary_db                                                                                       | 3.7 MB     00:00
extras                                                                                                | 2.1 kB     00:00
rightscale-epel                                                                                       |  951 B     00:00
rightscale-epel/primary                                                                               |  34 kB     00:00
rightscale-epel                                                                                                      118/118
updates                                                                                               | 1.9 kB     00:00
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package httpd.x86_64 0:2.2.3-31.el5.centos.4 set to be updated
addons/filelists                                                                                      |  196 B     00:00
base/filelists_db                                                                                     | 3.9 MB     00:00
centosplus/filelists_db                                                                               | 2.2 MB     00:00
epel/filelists_db                                                                                     | 5.2 MB     00:00
extras/filelists_db                                                                                   | 212 kB     00:00
rightscale-epel/filelists                                                                             |  36 kB     00:00
updates/filelists_db                                                                                  | 2.9 MB     00:00
---> Package mysql.i386 0:5.0.77-4.el5_4.2 set to be updated
--> Processing Dependency: perl(DBI) for package: mysql
---> Package mysql.x86_64 0:5.0.77-4.el5_4.2 set to be updated
---> Package mysql-server.x86_64 0:5.0.77-4.el5_4.2 set to be updated
--> Processing Dependency: perl-DBD-MySQL for package: mysql-server
---> Package net-snmp.x86_64 1:5.3.2.2-7.el5_4.2 set to be updated
--> Processing Dependency: net-snmp-libs = 1:5.3.2.2-7.el5_4.2 for package: net-snmp
--> Processing Dependency: libnetsnmpmibs.so.10()(64bit) for package: net-snmp
--> Processing Dependency: libnetsnmptrapd.so.10()(64bit) for package: net-snmp
--> Processing Dependency: libnetsnmpagent.so.10()(64bit) for package: net-snmp
--> Processing Dependency: libnetsnmp.so.10()(64bit) for package: net-snmp
--> Processing Dependency: libsensors.so.3()(64bit) for package: net-snmp
--> Processing Dependency: libnetsnmphelpers.so.10()(64bit) for package: net-snmp
---> Package php.x86_64 0:5.2.4-RightScale set to be updated
--> Processing Dependency: php-cli = 5.2.4-RightScale for package: php
--> Processing Dependency: php-common = 5.2.4-RightScale for package: php
---> Package php-mysql.x86_64 0:5.2.4-RightScale set to be updated
--> Processing Dependency: php-pdo for package: php-mysql
---> Package php-snmp.x86_64 0:5.2.4-RightScale set to be updated
---> Package php-xml.x86_64 0:5.2.4-RightScale set to be updated
--> Processing Dependency: libexslt.so.0()(64bit) for package: php-xml
--> Processing Dependency: libxslt.so.1()(64bit) for package: php-xml
--> Running transaction check
---> Package libxslt.x86_64 0:1.1.17-2.el5_2.2 set to be updated
---> Package lm_sensors.x86_64 0:2.10.7-4.el5 set to be updated
---> Package net-snmp-libs.x86_64 1:5.3.2.2-7.el5_4.2 set to be updated
---> Package perl-DBD-MySQL.x86_64 0:3.0007-2.el5 set to be updated
---> Package perl-DBI.x86_64 0:1.52-2.el5 set to be updated
---> Package php-cli.x86_64 0:5.2.4-RightScale set to be updated
---> Package php-common.x86_64 0:5.2.4-RightScale set to be updated
---> Package php-pdo.x86_64 0:5.2.4-RightScale set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

=============================================================================================================================
 Package                      Arch                 Version                               Repository                     Size
=============================================================================================================================
Installing:
 httpd                        x86_64               2.2.3-31.el5.centos.4                 updates                       1.2 M
 mysql                        i386                 5.0.77-4.el5_4.2                      updates                       4.8 M
 mysql                        x86_64               5.0.77-4.el5_4.2                      updates                       4.8 M
 mysql-server                 x86_64               5.0.77-4.el5_4.2                      updates                       9.8 M
 net-snmp                     x86_64               1:5.3.2.2-7.el5_4.2                   updates                       701 k
 php                          x86_64               5.2.4-RightScale                      rightscale-epel               3.9 M
 php-mysql                    x86_64               5.2.4-RightScale                      rightscale-epel               277 k
 php-snmp                     x86_64               5.2.4-RightScale                      rightscale-epel                44 k
 php-xml                      x86_64               5.2.4-RightScale                      rightscale-epel               328 k
Installing for dependencies:
 libxslt                      x86_64               1.1.17-2.el5_2.2                      base                          488 k
 lm_sensors                   x86_64               2.10.7-4.el5                          base                          527 k
 net-snmp-libs                x86_64               1:5.3.2.2-7.el5_4.2                   updates                       1.3 M
 perl-DBD-MySQL               x86_64               3.0007-2.el5                          base                          148 k
 perl-DBI                     x86_64               1.52-2.el5                            base                          600 k
 php-cli                      x86_64               5.2.4-RightScale                      rightscale-epel               2.7 M
 php-common                   x86_64               5.2.4-RightScale                      rightscale-epel               365 k
 php-pdo                      x86_64               5.2.4-RightScale                      rightscale-epel               163 k

Transaction Summary
=============================================================================================================================
Install     17 Package(s)
Update       0 Package(s)
Remove       0 Package(s)

Total download size: 32 M
Is this ok [y/N]:y

Downloading Packages:
(1/17): php-snmp-5.2.4-RightScale.x86_64.rpm                                                          |  44 kB     00:00
(2/17): perl-DBD-MySQL-3.0007-2.el5.x86_64.rpm                                                        | 148 kB     00:00
(3/17): php-pdo-5.2.4-RightScale.x86_64.rpm                                                           | 163 kB     00:00
(4/17): php-mysql-5.2.4-RightScale.x86_64.rpm                                                         | 277 kB     00:00
(5/17): php-xml-5.2.4-RightScale.x86_64.rpm                                                           | 328 kB     00:00
(6/17): php-common-5.2.4-RightScale.x86_64.rpm                                                        | 365 kB     00:00
(7/17): libxslt-1.1.17-2.el5_2.2.x86_64.rpm                                                           | 488 kB     00:00
(8/17): lm_sensors-2.10.7-4.el5.x86_64.rpm                                                            | 527 kB     00:00
(9/17): perl-DBI-1.52-2.el5.x86_64.rpm                                                                | 600 kB     00:00
(10/17): net-snmp-5.3.2.2-7.el5_4.2.x86_64.rpm                                                        | 701 kB     00:00
(11/17): httpd-2.2.3-31.el5.centos.4.x86_64.rpm                                                       | 1.2 MB     00:00
(12/17): net-snmp-libs-5.3.2.2-7.el5_4.2.x86_64.rpm                                                   | 1.3 MB     00:00
(13/17): php-cli-5.2.4-RightScale.x86_64.rpm                                                          | 2.7 MB     00:00
(14/17): php-5.2.4-RightScale.x86_64.rpm                                                              | 3.9 MB     00:00
(15/17): mysql-5.0.77-4.el5_4.2.i386.rpm                                                              | 4.8 MB     00:00
(16/17): mysql-5.0.77-4.el5_4.2.x86_64.rpm                                                            | 4.8 MB     00:00
(17/17): mysql-server-5.0.77-4.el5_4.2.x86_64.rpm                                                     | 9.8 MB     00:00
-----------------------------------------------------------------------------------------------------------------------------
Total                                                                                         20 MB/s |  32 MB     00:01
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : php-common                                                                                           1/17
  Installing     : perl-DBI                                                                                             2/17
  Installing     : mysql                                                                                                3/17
  Installing     : net-snmp-libs                                                                                        4/17
  Installing     : perl-DBD-MySQL                                                                                       5/17
  Installing     : php-cli                                                                                              6/17
  Installing     : php-pdo                                                                                              7/17
  Installing     : httpd                                                                                                8/17
warning: /etc/rc.d/init.d/httpd saved as /etc/rc.d/init.d/httpd.rpmorig
  Installing     : lm_sensors                                                                                           9/17
  Installing     : net-snmp                                                                                            10/17
  Installing     : libxslt                                                                                             11/17
  Installing     : mysql                                                                                               12/17
  Installing     : php-mysql                                                                                           13/17
  Installing     : php-xml                                                                                             14/17
  Installing     : php                                                                                                 15/17
  Installing     : php-snmp                                                                                            16/17
  Installing     : mysql-server                                                                                        17/17

Installed:
  httpd.x86_64 0:2.2.3-31.el5.centos.4        mysql.i386 0:5.0.77-4.el5_4.2            mysql.x86_64 0:5.0.77-4.el5_4.2
  mysql-server.x86_64 0:5.0.77-4.el5_4.2      net-snmp.x86_64 1:5.3.2.2-7.el5_4.2      php.x86_64 0:5.2.4-RightScale
  php-mysql.x86_64 0:5.2.4-RightScale         php-snmp.x86_64 0:5.2.4-RightScale       php-xml.x86_64 0:5.2.4-RightScale

Dependency Installed:
  libxslt.x86_64 0:1.1.17-2.el5_2.2        lm_sensors.x86_64 0:2.10.7-4.el5      net-snmp-libs.x86_64 1:5.3.2.2-7.el5_4.2
  perl-DBD-MySQL.x86_64 0:3.0007-2.el5     perl-DBI.x86_64 0:1.52-2.el5          php-cli.x86_64 0:5.2.4-RightScale
  php-common.x86_64 0:5.2.4-RightScale     php-pdo.x86_64 0:5.2.4-RightScale

Complete!

Step 3:
Now unzipping the tarball we downloaded from the cacti site:


[bhaskar@Amazon-instances ~]$ tar -xvzf cacti-0.8.7g.tar.gz

[bhaskar@Amazon-instances ~]$ ls
cacti-0.8.7g  cacti-0.8.7g.tar.gz

Step 4:

Move the cacti dir to short and convinient name


[bhaskar@Amazon-instances ~]$ mv cacti-0.8.7g cacti

[bhaskar@Amazon-instances ~]$ ls
cacti  cacti-0.8.7g.tar.gz

Step 5:

Now move the cacti dir to the document root of the system:


[bhaskar@Amazon-instances ~]$ sudo mv -v cacti /var/www/html/
`cacti' -> `/var/www/html/cacti'

Step 6:

Addming Cacti group and user in the box:


[bhaskar@Amazon-instances ~]$ sudo /usr/sbin/groupadd cacti

Adding users for cacti:


[bhaskar@Amazon-instances ~]$ sudo /usr/sbin/useradd -g cacti amazoncacti

Adding password to the user:


[bhaskar@Amazon-instances ~]$ sudo /usr/bin/passwd amazoncacti
Changing password for user amazoncacti.
New UNIX password:
Retype new UNIX password:
passwd: all authentication tokens updated successfully.

Step 7:

Chnage the ownership of few dir in the cacti base dir:


[bhaskar@Amazon-instances cacti]$ sudo /bin/chown -R amazoncacti rra/ log/

[bhaskar@Amazon-instances cacti]$ ls -ld rra log
drwxr-xr-x 2 amazoncacti bhaskar 4096 Dec 30  2009 log
drwxr-xr-x 2 amazoncacti bhaskar 4096 May 16  2010 rra

Step 8:

MySql admin password creation:


[bhaskar@Amazon-instances cacti]$ sudo /usr/bin/mysqladmin -u root password somethingsensible

Step 9:

Create Cacti database for use:


[bhaskar@Amazon-instances cacti]$ sudo /usr/bin/mysql -u root -p
Enter password:
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 3
Server version: 5.0.77 Source distribution

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> create database cacti;
Query OK, 1 row affected (0.00 sec)

Step 10:

Sourcing the default sql file into cacti database like below:


mysql> source cacti.sql

Query OK, 1 row affected (0.00 sec)

Query OK, 1 row affected (0.00 sec)

Query OK, 1 row affected (0.00 sec)

Query OK, 1 row affected (0.00 sec)

Query OK, 1 row affected (0.00 sec)

Query OK, 1 row affected (0.00 sec)

Query OK, 1 row affected (0.00 sec)

Query OK, 1 row affected (0.00 sec 

output snipped for the sake of bravity!!!

Step 11:

Now time to grant some priviledge to the cacti user to get into the database and fetch thing from it. From the mysql shell do follow:


mysql> GRANT ALL ON cacti.* TO amazoncacti@localhost IDENTIFIED BY 'somethingsensible';
Query OK, 0 rows affected (0.00 sec) 

Refreshing the grant table:

mysql> flush privileges;
Query OK, 0 rows affected (0.00 sec)

Step 12:

Now time for edit some files within cacti directory..


[bhaskar@Amazon-instances cacti]$ sudo vim include/config.php

Here it looks like inside... and I have change the database username and password entry in it:


$database_type = "mysql";
$database_default = "cacti";
$database_hostname = "localhost";
$database_username = "amazoncacti";
$database_password = "somethingsensible";
$database_port = "3306";

Step 13:

I am creating a cron job to polls for the infomration:


[root@Amazon-instances cacti]# crontab -e

[root@Amazon-instances cacti]# crontab -l
*/5 * * * * amazoncacti /usr/bin/php /var/www/html/cacti/poller.php > /dev/null 2>&1

Step 14:

Some php tweaking for the betterment:


[root@Amazon-instances cacti]# sudo vim /etc/php.ini

In this file I have changed memory_limit variable 32M to 128M

Step 15:

Now we need to got to the web interface of it,by pressing the following url into the browser:

http://Amazon-instances.amazonaws.com/cacti/

Step 16:

Snmpwalk not found by the cacti installer so go ahead and installed more binaries:


[root@Amazon-instances ~]# yum install net-snmp-utils net-snmp-devel
addons                                                                                                |  951 B     00:00
base                                                                                                  | 2.1 kB     00:00
centosplus                                                                                            | 1.9 kB     00:00
epel                                                                                                  | 3.7 kB     00:00
extras                                                                                                | 2.1 kB     00:00
rightscale-epel                                                                                       |  951 B     00:00
updates                                                                                               | 1.9 kB     00:00
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package net-snmp-devel.i386 1:5.3.2.2-7.el5_4.2 set to be updated
--> Processing Dependency: libnetsnmpagent.so.10 for package: net-snmp-devel
--> Processing Dependency: libnetsnmptrapd.so.10 for package: net-snmp-devel
--> Processing Dependency: elfutils-devel for package: net-snmp-devel
--> Processing Dependency: elfutils-libelf-devel for package: net-snmp-devel
--> Processing Dependency: libnetsnmpmibs.so.10 for package: net-snmp-devel
--> Processing Dependency: libsnmp.so.10 for package: net-snmp-devel
--> Processing Dependency: libnetsnmphelpers.so.10 for package: net-snmp-devel
--> Processing Dependency: libnetsnmp.so.10 for package: net-snmp-devel
--> Processing Dependency: rpm-devel for package: net-snmp-devel
--> Processing Dependency: lm_sensors-devel for package: net-snmp-devel
--> Processing Dependency: beecrypt-devel for package: net-snmp-devel
---> Package net-snmp-devel.x86_64 1:5.3.2.2-7.el5_4.2 set to be updated
---> Package net-snmp-utils.x86_64 1:5.3.2.2-7.el5_4.2 set to be updated
--> Running transaction check
---> Package beecrypt-devel.x86_64 0:4.1.2-10.1.1 set to be updated
--> Processing Dependency: beecrypt = 4.1.2-10.1.1 for package: beecrypt-devel
--> Processing Dependency: libbeecrypt.so.6()(64bit) for package: beecrypt-devel
---> Package elfutils-devel.x86_64 0:0.137-3.el5 set to be updated
--> Processing Dependency: elfutils-devel-static-x86_64 = 0.137-3.el5 for package: elfutils-devel
---> Package elfutils-libelf-devel.x86_64 0:0.137-3.el5 set to be updated
--> Processing Dependency: elfutils-libelf-devel-static-x86_64 = 0.137-3.el5 for package: elfutils-libelf-devel
---> Package lm_sensors-devel.x86_64 0:2.10.7-4.el5 set to be updated
---> Package net-snmp-libs.i386 1:5.3.2.2-7.el5_4.2 set to be updated
---> Package rpm-devel.x86_64 0:4.4.2.3-18.el5 set to be updated
--> Processing Dependency: sqlite-devel for package: rpm-devel
--> Processing Dependency: libselinux-devel for package: rpm-devel
--> Processing Dependency: nss-devel for package: rpm-devel
--> Running transaction check
---> Package beecrypt.x86_64 0:4.1.2-10.1.1 set to be updated
---> Package elfutils-devel-static.x86_64 0:0.137-3.el5 set to be updated
---> Package elfutils-libelf-devel-static.x86_64 0:0.137-3.el5 set to be updated
---> Package libselinux-devel.x86_64 0:1.33.4-5.5.el5 set to be updated
--> Processing Dependency: libsepol-devel >= 1.15.2-1 for package: libselinux-devel
---> Package nss-devel.x86_64 0:3.12.6-1.el5.centos set to be updated
--> Processing Dependency: nspr-devel >= 4.8.4 for package: nss-devel
---> Package sqlite-devel.x86_64 0:3.3.6-5 set to be updated
--> Running transaction check
---> Package libsepol-devel.x86_64 0:1.15.2-2.el5 set to be updated
---> Package nspr-devel.x86_64 0:4.8.4-1.el5_4 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

=============================================================================================================================
 Package                                   Arch                Version                            Repository            Size
=============================================================================================================================
Installing:
 net-snmp-devel                            i386                1:5.3.2.2-7.el5_4.2                updates              1.9 M
 net-snmp-devel                            x86_64              1:5.3.2.2-7.el5_4.2                updates              2.0 M
 net-snmp-utils                            x86_64              1:5.3.2.2-7.el5_4.2                updates              187 k
Installing for dependencies:
 beecrypt                                  x86_64              4.1.2-10.1.1                       base                  87 k
 beecrypt-devel                            x86_64              4.1.2-10.1.1                       base                 118 k
 elfutils-devel                            x86_64              0.137-3.el5                        base                  62 k
 elfutils-devel-static                     x86_64              0.137-3.el5                        base                 119 k
 elfutils-libelf-devel                     x86_64              0.137-3.el5                        base                  24 k
 elfutils-libelf-devel-static              x86_64              0.137-3.el5                        base                  64 k
 libselinux-devel                          x86_64              1.33.4-5.5.el5                     base                 149 k
 libsepol-devel                            x86_64              1.15.2-2.el5                       base                 192 k
 lm_sensors-devel                          x86_64              2.10.7-4.el5                       base                  81 k
 net-snmp-libs                             i386                1:5.3.2.2-7.el5_4.2                updates              1.3 M
 nspr-devel                                x86_64              4.8.4-1.el5_4                      updates              111 k
 nss-devel                                 x86_64              3.12.6-1.el5.centos                updates              233 k
 rpm-devel                                 x86_64              4.4.2.3-18.el5                     base                 1.3 M
 sqlite-devel                              x86_64              3.3.6-5                            base                 257 k

Transaction Summary
=============================================================================================================================
Install     17 Package(s)
Update       0 Package(s)
Remove       0 Package(s)

Total download size: 8.0 M
Is this ok [y/N]:y

Downloading Packages:
(1/17): elfutils-libelf-devel-0.137-3.el5.x86_64.rpm                                                  |  24 kB     00:00
(2/17): elfutils-devel-0.137-3.el5.x86_64.rpm                                                         |  62 kB     00:00
(3/17): elfutils-libelf-devel-static-0.137-3.el5.x86_64.rpm                                           |  64 kB     00:00
(4/17): lm_sensors-devel-2.10.7-4.el5.x86_64.rpm                                                      |  81 kB     00:00
(5/17): beecrypt-4.1.2-10.1.1.x86_64.rpm                                                              |  87 kB     00:00
(6/17): nspr-devel-4.8.4-1.el5_4.x86_64.rpm                                                           | 111 kB     00:00
(7/17): beecrypt-devel-4.1.2-10.1.1.x86_64.rpm                                                        | 118 kB     00:00
(8/17): elfutils-devel-static-0.137-3.el5.x86_64.rpm                                                  | 119 kB     00:00
(9/17): libselinux-devel-1.33.4-5.5.el5.x86_64.rpm                                                    | 149 kB     00:00
(10/17): net-snmp-utils-5.3.2.2-7.el5_4.2.x86_64.rpm                                                  | 187 kB     00:00
(11/17): libsepol-devel-1.15.2-2.el5.x86_64.rpm                                                       | 192 kB     00:00
(12/17): nss-devel-3.12.6-1.el5.centos.x86_64.rpm                                                     | 233 kB     00:00
(13/17): sqlite-devel-3.3.6-5.x86_64.rpm                                                              | 257 kB     00:00
(14/17): net-snmp-libs-5.3.2.2-7.el5_4.2.i386.rpm                                                     | 1.3 MB     00:00
(15/17): rpm-devel-4.4.2.3-18.el5.x86_64.rpm                                                          | 1.3 MB     00:00
(16/17): net-snmp-devel-5.3.2.2-7.el5_4.2.i386.rpm                                                    | 1.9 MB     00:00
(17/17): net-snmp-devel-5.3.2.2-7.el5_4.2.x86_64.rpm                                                  | 2.0 MB     00:00
-----------------------------------------------------------------------------------------------------------------------------
Total                                                                                         10 MB/s | 8.0 MB     00:00
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : beecrypt                                                                                             1/17
  Installing     : net-snmp-libs                                                                                        2/17
  Installing     : beecrypt-devel                                                                                       3/17
  Installing     : lm_sensors-devel                                                                                     4/17
  Installing     : sqlite-devel                                                                                         5/17
  Installing     : libsepol-devel                                                                                       6/17
  Installing     : libselinux-devel                                                                                     7/17
  Installing     : nspr-devel                                                                                           8/17
  Installing     : net-snmp-utils                                                                                       9/17
  Installing     : nss-devel                                                                                           10/17
  Installing     : elfutils-libelf-devel                                                                               11/17
  Installing     : rpm-devel                                                                                           12/17
  Installing     : elfutils-devel                                                                                      13/17
  Installing     : elfutils-libelf-devel-static                                                                        14/17
  Installing     : net-snmp-devel                                                                                      15/17
  Installing     : net-snmp-devel                                                                                      16/17
  Installing     : elfutils-devel-static                                                                               17/17

Installed:
  net-snmp-devel.i386 1:5.3.2.2-7.el5_4.2                       net-snmp-devel.x86_64 1:5.3.2.2-7.el5_4.2
  net-snmp-utils.x86_64 1:5.3.2.2-7.el5_4.2

Dependency Installed:
  beecrypt.x86_64 0:4.1.2-10.1.1                            beecrypt-devel.x86_64 0:4.1.2-10.1.1
  elfutils-devel.x86_64 0:0.137-3.el5                       elfutils-devel-static.x86_64 0:0.137-3.el5
  elfutils-libelf-devel.x86_64 0:0.137-3.el5                elfutils-libelf-devel-static.x86_64 0:0.137-3.el5
  libselinux-devel.x86_64 0:1.33.4-5.5.el5                  libsepol-devel.x86_64 0:1.15.2-2.el5
  lm_sensors-devel.x86_64 0:2.10.7-4.el5                    net-snmp-libs.i386 1:5.3.2.2-7.el5_4.2
  nspr-devel.x86_64 0:4.8.4-1.el5_4                         nss-devel.x86_64 0:3.12.6-1.el5.centos
  rpm-devel.x86_64 0:4.4.2.3-18.el5                         sqlite-devel.x86_64 0:3.3.6-5

Complete!

Step 16:

So once the web interface installed the thing we are presented the login page into with default admin/admin username/password .Now I have change that password to like below:

username : admin

password : admin

Step 17:

Adding amazoncacti user to apache group:


[bhaskar@Amazon-instances ~]$ sudo /usr/sbin/usermod -G apache -a amazoncacti
[bhaskar@Amazon-instances ~]$ id amazoncacti
uid=503(amazoncacti) gid=503(cacti) groups=48(apache),503(cacti)

Step 18:

Installing new crontab for user amazoncacti for run the poller.php


[root@Amazon-instances html]# sudo su - amazoncacti
[amazoncacti@Amazon-instances ~]$ crontab -e
no crontab for amazoncacti - using an empty one
crontab: installing new crontab

Step 19:

Checking snmp work on localhost


[bhaskar@Amazon-instances log]$ sudo snmpwalk -v 1 localhost -c public
SNMPv2-MIB::sysDescr.0 = STRING: Linux Amazon-instances 2.6.21.7-2.fc8xen #1 SMP Fri Feb 15 12:34:28 EST 2008 x86_64
SNMPv2-MIB::sysObjectID.0 = OID: NET-SNMP-MIB::netSnmpAgentOIDs.10
DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (142712) 0:23:47.12
SNMPv2-MIB::sysContact.0 = STRING: Root 
SNMPv2-MIB::sysName.0 = STRING: Amazon-instances
SNMPv2-MIB::sysLocation.0 = STRING: AmazonCloud
SNMPv2-MIB::sysORLastChange.0 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORID.1 = OID: SNMPv2-MIB::snmpMIB
SNMPv2-MIB::sysORID.2 = OID: TCP-MIB::tcpMIB
SNMPv2-MIB::sysORID.3 = OID: IP-MIB::ip
SNMPv2-MIB::sysORID.4 = OID: UDP-MIB::udpMIB
SNMPv2-MIB::sysORID.5 = OID: SNMP-VIEW-BASED-ACM-MIB::vacmBasicGroup
SNMPv2-MIB::sysORID.6 = OID: SNMP-FRAMEWORK-MIB::snmpFrameworkMIBCompliance
SNMPv2-MIB::sysORID.7 = OID: SNMP-MPD-MIB::snmpMPDCompliance
SNMPv2-MIB::sysORID.8 = OID: SNMP-USER-BASED-SM-MIB::usmMIBCompliance
SNMPv2-MIB::sysORDescr.1 = STRING: The MIB module for SNMPv2 entities
SNMPv2-MIB::sysORDescr.2 = STRING: The MIB module for managing TCP implementations
SNMPv2-MIB::sysORDescr.3 = STRING: The MIB module for managing IP and ICMP implementations
SNMPv2-MIB::sysORDescr.4 = STRING: The MIB module for managing UDP implementations
SNMPv2-MIB::sysORDescr.5 = STRING: View-based Access Control Model for SNMP.
SNMPv2-MIB::sysORDescr.6 = STRING: The SNMP Management Architecture MIB.
SNMPv2-MIB::sysORDescr.7 = STRING: The MIB for Message Processing and Dispatching.
SNMPv2-MIB::sysORDescr.8 = STRING: The management information definitions for the SNMP User-based Security Model.
SNMPv2-MIB::sysORUpTime.1 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.2 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.3 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.4 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.5 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.6 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.7 = Timeticks: (0) 0:00:00.00
SNMPv2-MIB::sysORUpTime.8 = Timeticks: (0) 0:00:00.00
HOST-RESOURCES-MIB::hrSystemUptime.0 = Timeticks: (30377320) 3 days, 12:22:53.20
End of MIB

Step 20.

Newly created snmpd.conf


[bhaskar@Amazon-instances log]$ sudo cp -v /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.05022011
`/etc/snmp/snmpd.conf' -> `/etc/snmp/snmpd.conf.05022011'
[bhaskar@Amazon-instances log]$ sudo mv -v snmpd.conf /etc/snmp/
`snmpd.conf' -> `/etc/snmp/snmpd.conf'

Step 21:

plugin installation


[bhaskar@Amazon-instances ~]$ wget -c http://mirror.cactiusers.org/downloads/plugins/cacti-plugin-0.8.7g-PA-v2.8.tar.gz
-2011-05-04 02:52:11-  http://mirror.cactiusers.org/downloads/plugins/cacti-plugin-0.8.7g-PA-v2.8.tar.gz
Resolving mirror.cactiusers.org... 209.189.228.150
Connecting to mirror.cactiusers.org|209.189.228.150|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 207069 (202K) [application/x-gzip]
Saving to: `cacti-plugin-0.8.7g-PA-v2.8.tar.gz'

100%[===================================================================================>] 207,069      583K/s   in 0.3s

2011-05-04 02:52:12 (583 KB/s) - `cacti-plugin-0.8.7g-PA-v2.8.tar.gz' saved [207069/207069]

Step 22:

Untar it:


[bhaskar@Amazon-instances ~]$ tar -xvzf cacti-plugin-0.8.7g-PA-v2.8.tar.gz
cacti-plugin-arch/
cacti-plugin-arch/files-0.8.7g/
cacti-plugin-arch/files-0.8.7g/poller.php
cacti-plugin-arch/files-0.8.7g/host.php
cacti-plugin-arch/files-0.8.7g/utilities.php
cacti-plugin-arch/files-0.8.7g/lib/
cacti-plugin-arch/files-0.8.7g/lib/poller.php
cacti-plugin-arch/files-0.8.7g/lib/functions.php
cacti-plugin-arch/files-0.8.7g/lib/html.php
cacti-plugin-arch/files-0.8.7g/lib/auth.php
cacti-plugin-arch/files-0.8.7g/lib/api_device.php
cacti-plugin-arch/files-0.8.7g/lib/rrd.php
cacti-plugin-arch/files-0.8.7g/lib/plugins.php
cacti-plugin-arch/files-0.8.7g/lib/variables.php
cacti-plugin-arch/files-0.8.7g/lib/html_form.php
cacti-plugin-arch/files-0.8.7g/graphs_new.php
cacti-plugin-arch/files-0.8.7g/graph.php
cacti-plugin-arch/files-0.8.7g/auth_changepassword.php
cacti-plugin-arch/files-0.8.7g/user_admin.php
cacti-plugin-arch/files-0.8.7g/plugins/
cacti-plugin-arch/files-0.8.7g/plugins/index.php
cacti-plugin-arch/files-0.8.7g/images/
cacti-plugin-arch/files-0.8.7g/images/install_icon_disabled.png
cacti-plugin-arch/files-0.8.7g/images/disable_icon.png
cacti-plugin-arch/files-0.8.7g/images/install_icon.png
cacti-plugin-arch/files-0.8.7g/images/view_none.gif
cacti-plugin-arch/files-0.8.7g/images/uninstall_icon.gif
cacti-plugin-arch/files-0.8.7g/images/enable_icon_disabled.png
cacti-plugin-arch/files-0.8.7g/images/enable_icon.png
cacti-plugin-arch/files-0.8.7g/graphs.php
cacti-plugin-arch/files-0.8.7g/include/
cacti-plugin-arch/files-0.8.7g/include/global.php
cacti-plugin-arch/files-0.8.7g/include/global_form.php
cacti-plugin-arch/files-0.8.7g/include/top_header.php
cacti-plugin-arch/files-0.8.7g/include/top_graph_header.php
cacti-plugin-arch/files-0.8.7g/include/global_settings.php
cacti-plugin-arch/files-0.8.7g/include/auth.php
cacti-plugin-arch/files-0.8.7g/include/bottom_footer.php
cacti-plugin-arch/files-0.8.7g/include/config.php.dist
cacti-plugin-arch/files-0.8.7g/include/plugins.php
cacti-plugin-arch/files-0.8.7g/include/global_constants.php
cacti-plugin-arch/files-0.8.7g/include/global_arrays.php
cacti-plugin-arch/files-0.8.7g/graph_image.php
cacti-plugin-arch/files-0.8.7g/plugins.php
cacti-plugin-arch/files-0.8.7g/data_sources.php
cacti-plugin-arch/files-0.8.7g/index.php
cacti-plugin-arch/files-0.8.7g/auth_login.php
cacti-plugin-arch/pa.sql
cacti-plugin-arch/README
cacti-plugin-arch/LICENSE
cacti-plugin-arch/cacti-plugin-0.8.7g-PA-v2.8.diff

Step 23:

Took back up before applying the patch for plug in architechture


 sudo cp -Rpv /var/www/html/cacti/ /var/www/html/cacti.orig

Step 24:

Copying file from PIA to actual cacti installation dir


[bhaskar@Amazon-instances ~]$ cd cacti-plugin-arch/

[bhaskar@Amazon-instances cacti-plugin-arch]$ ls
cacti-plugin-0.8.7g-PA-v2.8.diff  files-0.8.7g  LICENSE  pa.sql  README

[bhaskar@Amazon-instances cacti-plugin-arch]$ cd files-0.8.7g/

[bhaskar@Amazon-instances files-0.8.7g]$ ls
auth_changepassword.php  graph_image.php  graphs.php  include    plugins      user_admin.php
auth_login.php           graph.php        host.php    index.php  plugins.php  utilities.php
data_sources.php         graphs_new.php   images      lib        poller.php
[bhaskar@Amazon-instances files-0.8.7g]$

[bhaskar@Amazon-instances files-0.8.7g]$ sudo cp -Rv * /var/www/html/cacti/
`auth_changepassword.php' -> `/var/www/html/cacti/auth_changepassword.php'
`auth_login.php' -> `/var/www/html/cacti/auth_login.php'
`data_sources.php' -> `/var/www/html/cacti/data_sources.php'
`graph_image.php' -> `/var/www/html/cacti/graph_image.php'
`graph.php' -> `/var/www/html/cacti/graph.php'
`graphs_new.php' -> `/var/www/html/cacti/graphs_new.php'
`graphs.php' -> `/var/www/html/cacti/graphs.php'
`host.php' -> `/var/www/html/cacti/host.php'
`images/install_icon_disabled.png' -> `/var/www/html/cacti/images/install_icon_disabled.png'
`images/enable_icon.png' -> `/var/www/html/cacti/images/enable_icon.png'
`images/enable_icon_disabled.png' -> `/var/www/html/cacti/images/enable_icon_disabled.png'
`images/view_none.gif' -> `/var/www/html/cacti/images/view_none.gif'
`images/install_icon.png' -> `/var/www/html/cacti/images/install_icon.png'
`images/disable_icon.png' -> `/var/www/html/cacti/images/disable_icon.png'
`images/uninstall_icon.gif' -> `/var/www/html/cacti/images/uninstall_icon.gif'
`include/plugins.php' -> `/var/www/html/cacti/include/plugins.php'
`include/global_form.php' -> `/var/www/html/cacti/include/global_form.php'
`include/top_graph_header.php' -> `/var/www/html/cacti/include/top_graph_header.php'
`include/global_arrays.php' -> `/var/www/html/cacti/include/global_arrays.php'
`include/config.php.dist' -> `/var/www/html/cacti/include/config.php.dist'
`include/top_header.php' -> `/var/www/html/cacti/include/top_header.php'
`include/global.php' -> `/var/www/html/cacti/include/global.php'
`include/global_constants.php' -> `/var/www/html/cacti/include/global_constants.php'
`include/auth.php' -> `/var/www/html/cacti/include/auth.php'
`include/global_settings.php' -> `/var/www/html/cacti/include/global_settings.php'
`include/bottom_footer.php' -> `/var/www/html/cacti/include/bottom_footer.php'
`index.php' -> `/var/www/html/cacti/index.php'
`lib/plugins.php' -> `/var/www/html/cacti/lib/plugins.php'
`lib/rrd.php' -> `/var/www/html/cacti/lib/rrd.php'
`lib/variables.php' -> `/var/www/html/cacti/lib/variables.php'
`lib/api_device.php' -> `/var/www/html/cacti/lib/api_device.php'
`lib/poller.php' -> `/var/www/html/cacti/lib/poller.php'
`lib/html.php' -> `/var/www/html/cacti/lib/html.php'
`lib/functions.php' -> `/var/www/html/cacti/lib/functions.php'
`lib/auth.php' -> `/var/www/html/cacti/lib/auth.php'
`lib/html_form.php' -> `/var/www/html/cacti/lib/html_form.php'
`plugins' -> `/var/www/html/cacti/plugins'
`plugins/index.php' -> `/var/www/html/cacti/plugins/index.php'
`plugins.php' -> `/var/www/html/cacti/plugins.php'
`poller.php' -> `/var/www/html/cacti/poller.php'
`user_admin.php' -> `/var/www/html/cacti/user_admin.php'
`utilities.php' -> `/var/www/html/cacti/utilities.php'

step 25:

9. permission need to be chaged


[bhaskar@Amazon-instances cacti]$ ls -al
total 1100
drwxr-xr-x 13 amazoncacti cacti   4096 May  4 03:00 .
drwxr-xr-x  4 root      root    4096 May  4 02:56 ..
-rw-r-r-  1 amazoncacti cacti   6199 Jul  9  2010 about.php
-rw-r-r-  1 amazoncacti cacti   5187 May  4 03:00 auth_changepassword.php
-rw-r-r-  1 amazoncacti cacti  13396 May  4 03:00 auth_login.php
-rw-r-r-  1 amazoncacti cacti 176144 Jul  9  2010 cacti.sql
-rw-r-r-  1 amazoncacti cacti  21643 Jul  9  2010 cdef.php
drwxr-xr-x  2 amazoncacti cacti   4096 Jul  9  2010 cli
-rw-r-r-  1 amazoncacti cacti  19760 Jul  9  2010 cmd.php
-rw-r-r-  1 amazoncacti cacti   6974 Jul  9  2010 color.php
-rw-r-r-  1 amazoncacti cacti  25025 Jul  9  2010 data_input.php
-rw-r-r-  1 amazoncacti cacti  35455 Jul  9  2010 data_queries.php
-rw-r-r-  1 amazoncacti cacti  58617 May  4 03:00 data_sources.php
-rw-r-r-  1 amazoncacti cacti  32871 Jul  9  2010 data_templates.php
drwxr-xr-x  5 amazoncacti cacti   4096 Jul  9  2010 docs
-rw-r-r-  1 amazoncacti cacti   6107 Jul  9  2010 gprint_presets.php
-rw-r-r-  1 amazoncacti cacti   3492 May  4 03:00 graph_image.php
-rw-r-r-  1 amazoncacti cacti  12667 May  4 03:00 graph.php
-rw-r-r-  1 amazoncacti cacti   7805 Jul  9  2010 graph_settings.php
-rw-r-r-  1 amazoncacti cacti  17409 Jul  9  2010 graphs_items.php
-rw-r-r-  1 amazoncacti cacti  39908 May  4 03:00 graphs_new.php
-rw-r-r-  1 amazoncacti cacti  60077 May  4 03:00 graphs.php
-rw-r-r-  1 amazoncacti cacti  10006 Jul  9  2010 graph_templates_inputs.php
-rw-r-r-  1 amazoncacti cacti  18526 Jul  9  2010 graph_templates_items.php
-rw-r-r-  1 amazoncacti cacti  26606 Jul  9  2010 graph_templates.php
-rw-r-r-  1 amazoncacti cacti  38470 Jul  9  2010 graph_view.php
-rw-r-r-  1 amazoncacti cacti   5840 Jul  9  2010 graph_xport.php
-rw-r-r-  1 amazoncacti cacti  58003 May  4 03:00 host.php
-rw-r-r-  1 amazoncacti cacti  20016 Jul  9  2010 host_templates.php
drwxr-xr-x  2 amazoncacti cacti   4096 May  4 03:00 images
drwxr-xr-x  4 amazoncacti cacti   4096 May  4 03:00 include
-rw-r-r-  1 amazoncacti cacti   2313 May  4 03:00 index.php
drwxr-xr-x  2 amazoncacti cacti   4096 Jul  9  2010 install
drwxr-xr-x  3 amazoncacti cacti   4096 May  4 03:00 lib
-rw-r-r-  1 amazoncacti cacti  15141 Dec 30  2009 LICENSE
drwxr-xr-x  2 amazoncacti cacti   4096 May  2 02:53 log
-rw-r-r-  1 amazoncacti cacti   2641 Jul  9  2010 logout.php
drwxr-xr-x  2 amazoncacti      cacti    4096 May  4 03:00 plugins
-rw-r-r-  1 amazoncacti      cacti   25848 May  4 03:00 plugins.php
-rw-r-r-  1 amazoncacti cacti   4304 Jul  9  2010 poller_commands.php
-rw-r-r-  1 amazoncacti cacti   2243 Jul  9  2010 poller_export.php
-rw-r-r-  1 amazoncacti cacti  17909 May  4 03:00 poller.php
-rw-r-r-  1 amazoncacti cacti     48 Dec 30  2009 README
drwxr-xr-x  5 amazoncacti cacti   4096 Dec 30  2009 resource
drwxr-xr-x  2 amazoncacti cacti   4096 May  3 11:45 rra
-rw-r-r-  1 amazoncacti cacti   7233 Jul  9  2010 rra.php
drwxr-xr-x  2 amazoncacti cacti   4096 May  3 11:11 scripts
-rw-r-r-  1 amazoncacti cacti   8270 Jul  9  2010 script_server.php
-rw-r-r-  1 amazoncacti cacti    353 Dec 30  2009 script_server.pl
-rw-r-r-  1 amazoncacti cacti   4995 Jul  9  2010 settings.php
-rw-r-r-  1 amazoncacti cacti   6086 Jul  9  2010 templates_export.php
-rw-r-r-  1 amazoncacti cacti   6526 Jul  9  2010 templates_import.php
-rw-r-r-  1 amazoncacti cacti  19435 Jul  9  2010 tree.php
-rw-r-r-  1 amazoncacti cacti  44603 May  4 03:00 user_admin.php
-rw-r-r-  1 amazoncacti cacti  64999 May  4 03:00 utilities.php

Now should file below command:


[bhaskar@Amazon-instances cacti]$ sudo chown -R amazoncacti:cacti *
[bhaskar@Amazon-instances cacti]$ ls -al
total 1100
drwxr-xr-x 13 amazoncacti cacti   4096 May  4 03:00 .
drwxr-xr-x  4 root      root    4096 May  4 02:56 ..
-rw-r-r-  1 amazoncacti cacti   6199 Jul  9  2010 about.php
-rw-r-r-  1 amazoncacti cacti   5187 May  4 03:00 auth_changepassword.php
-rw-r-r-  1 amazoncacti cacti  13396 May  4 03:00 auth_login.php
-rw-r-r-  1 amazoncacti cacti 176144 Jul  9  2010 cacti.sql
-rw-r-r-  1 amazoncacti cacti  21643 Jul  9  2010 cdef.php
drwxr-xr-x  2 amazoncacti cacti   4096 Jul  9  2010 cli
-rw-r-r-  1 amazoncacti cacti  19760 Jul  9  2010 cmd.php
-rw-r-r-  1 amazoncacti cacti   6974 Jul  9  2010 color.php
-rw-r-r-  1 amazoncacti cacti  25025 Jul  9  2010 data_input.php
-rw-r-r-  1 amazoncacti cacti  35455 Jul  9  2010 data_queries.php
-rw-r-r-  1 amazoncacti cacti  58617 May  4 03:00 data_sources.php
-rw-r-r-  1 amazoncacti cacti  32871 Jul  9  2010 data_templates.php
drwxr-xr-x  5 amazoncacti cacti   4096 Jul  9  2010 docs
-rw-r-r-  1 amazoncacti cacti   6107 Jul  9  2010 gprint_presets.php
-rw-r-r-  1 amazoncacti cacti   3492 May  4 03:00 graph_image.php
-rw-r-r-  1 amazoncacti cacti  12667 May  4 03:00 graph.php
-rw-r-r-  1 amazoncacti cacti   7805 Jul  9  2010 graph_settings.php
-rw-r-r-  1 amazoncacti cacti  17409 Jul  9  2010 graphs_items.php
-rw-r-r-  1 amazoncacti cacti  39908 May  4 03:00 graphs_new.php
-rw-r-r-  1 amazoncacti cacti  60077 May  4 03:00 graphs.php
-rw-r-r-  1 amazoncacti cacti  10006 Jul  9  2010 graph_templates_inputs.php
-rw-r-r-  1 amazoncacti cacti  18526 Jul  9  2010 graph_templates_items.php
-rw-r-r-  1 amazoncacti cacti  26606 Jul  9  2010 graph_templates.php
-rw-r-r-  1 amazoncacti cacti  38470 Jul  9  2010 graph_view.php
-rw-r-r-  1 amazoncacti cacti   5840 Jul  9  2010 graph_xport.php
-rw-r-r-  1 amazoncacti cacti  58003 May  4 03:00 host.php
-rw-r-r-  1 amazoncacti cacti  20016 Jul  9  2010 host_templates.php
drwxr-xr-x  2 amazoncacti cacti   4096 May  4 03:00 images
drwxr-xr-x  4 amazoncacti cacti   4096 May  4 03:00 include
-rw-r-r-  1 amazoncacti cacti   2313 May  4 03:00 index.php
drwxr-xr-x  2 amazoncacti cacti   4096 Jul  9  2010 install
drwxr-xr-x  3 amazoncacti cacti   4096 May  4 03:00 lib
-rw-r-r-  1 amazoncacti cacti  15141 Dec 30  2009 LICENSE
drwxr-xr-x  2 amazoncacti cacti   4096 May  2 02:53 log
-rw-r-r-  1 amazoncacti cacti   2641 Jul  9  2010 logout.php
drwxr-xr-x  2 amazoncacti cacti   4096 May  4 03:00 plugins
-rw-r-r-  1 amazoncacti cacti  25848 May  4 03:00 plugins.php
-rw-r-r-  1 amazoncacti cacti   4304 Jul  9  2010 poller_commands.php
-rw-r-r-  1 amazoncacti cacti   2243 Jul  9  2010 poller_export.php
-rw-r-r-  1 amazoncacti cacti  17909 May  4 03:00 poller.php
-rw-r-r-  1 amazoncacti cacti     48 Dec 30  2009 README
drwxr-xr-x  5 amazoncacti cacti   4096 Dec 30  2009 resource
drwxr-xr-x  2 amazoncacti cacti   4096 May  3 11:45 rra
-rw-r-r-  1 amazoncacti cacti   7233 Jul  9  2010 rra.php
drwxr-xr-x  2 amazoncacti cacti   4096 May  3 11:11 scripts
-rw-r-r-  1 amazoncacti cacti   8270 Jul  9  2010 script_server.php
-rw-r-r-  1 amazoncacti cacti    353 Dec 30  2009 script_server.pl
-rw-r-r-  1 amazoncacti cacti   4995 Jul  9  2010 settings.php
-rw-r-r-  1 amazoncacti cacti   6086 Jul  9  2010 templates_export.php
-rw-r-r-  1 amazoncacti cacti   6526 Jul  9  2010 templates_import.php
-rw-r-r-  1 amazoncacti cacti  19435 Jul  9  2010 tree.php
-rw-r-r-  1 amazoncacti cacti  44603 May  4 03:00 user_admin.php
-rw-r-r-  1 amazoncacti cacti  64999 May  4 03:00 utilities.php

Step 26:

patching the cacti installation dir for PIA

Upon dry run we get this:


[bhaskar@Amazon-instances cacti]$ sudo patch -p1 -N --dry-run < /home/bhaskar/cacti-plugin-arch/cacti-plugin-0.8.7g-PA-v2.8.diff
patching file auth_changepassword.php
patching file auth_login.php
Hunk #3 FAILED at 279.
1 out of 4 hunks FAILED -- saving rejects to file auth_login.php.rej
patching file data_sources.php
patching file graph_image.php
patching file graph.php
patching file graphs_new.php
patching file graphs.php
patching file host.php
patching file images/disable_icon.png
patching file images/enable_icon_disabled.png
patching file images/enable_icon.png
patching file images/install_icon_disabled.png
patching file images/install_icon.png
patching file images/uninstall_icon.gif
patching file images/view_none.gif
patching file include/auth.php
patching file include/bottom_footer.php
patching file include/config.php
Hunk #1 succeeded at 30 with fuzz 1.
patching file include/global_arrays.php
patching file include/global_constants.php
patching file include/global_form.php
patching file include/global.php
patching file include/global_settings.php
patching file include/plugins.php
patching file include/top_graph_header.php
patching file include/top_header.php
Hunk #1 FAILED at 22.
1 out of 4 hunks FAILED -- saving rejects to file include/top_header.php.rej
patching file index.php
patching file lib/api_device.php
patching file lib/auth.php
patching file lib/functions.php
patching file lib/html_form.php
patching file lib/html.php
patching file lib/plugins.php
patching file lib/poller.php
patching file lib/rrd.php
patching file lib/variables.php
patching file plugins/index.php
patching file plugins.php
patching file poller.php
patching file user_admin.php
patching file utilities.php

Step 26:

problem.....we need to get those two file from old location if we go ahed and do the patching

let's go:


[bhaskar@Amazon-instances cacti.orig]$ sudo cp -pv  include/top_header.php  /var/www/html/cacti/include/
`include/top_header.php' -> `/var/www/html/cacti/include/top_header.php'

[bhaskar@Amazon-instances cacti.orig]$ sudo cp -pv auth_login.php /var/www/html/cacti/
`auth_login.php' -> `/var/www/html/cacti/auth_login.php'

So failed patched files are copied back to modified dir.

Step 27:

Applying patched for PIA in the database


[bhaskar@Amazon-instances cacti-plugin-arch]$ sudo mysql -u amazoncacti -p
Enter password:
Welcome to the MySQL monitor.  Commands end with ; or \g.
Your MySQL connection id is 1156
Server version: 5.0.77 Source distribution

Type 'help;' or '\h' for help. Type '\c' to clear the buffer.

mysql> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| cacti              |
| test               |
+--------------------+
3 rows in set (0.00 sec)

mysql> use cacti;
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed
mysql> source pa.sql
Query OK, 0 rows affected, 1 warning (0.00 sec)

Query OK, 0 rows affected, 1 warning (0.00 sec)

Query OK, 0 rows affected, 1 warning (0.00 sec)

Query OK, 0 rows affected, 1 warning (0.00 sec)

Query OK, 1 row affected (0.00 sec)

Query OK, 1 row affected (0.00 sec)

Query OK, 1 row affected (0.00 sec)

mysql>

Step 28:

Downloading plug ins


[bhaskar@Amazon-instances ~]$ wget -c  http://cactiusers.org/downloads/discovery.gzip
-2011-05-04 04:58:19-  http://cactiusers.org/downloads/discovery.gzip
Resolving cactiusers.org... 209.189.228.151
Connecting to cactiusers.org|209.189.228.151|:80... connected.
HTTP request sent, awaiting response... 302 Found
Location: http://mirror.cactiusers.org/downloads/plugins/discovery-0.8.5.tar.gz [following]
-2011-05-04 04:58:21-  http://mirror.cactiusers.org/downloads/plugins/discovery-0.8.5.tar.gz
Resolving mirror.cactiusers.org... 209.189.228.150
Connecting to mirror.cactiusers.org|209.189.228.150|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 30377 (30K) [application/x-gzip]
Saving to: `discovery-0.8.5.tar.gz'

100%[===================================================================================>] 30,377      --.-K/s   in 0.1s

2011-05-04 04:58:21 (219 KB/s) - `discovery-0.8.5.tar.gz' saved [30377/30377]

Step 29:

Unzip it


[bhaskar@Amazon-instances ~]$ tar -xvzf discovery-0.8.5.tar.gz
discovery/README
discovery/index.php
discovery/discover.sql
discovery/setup.php
discovery/discover_template.php
discovery/findhosts.php
discovery/discover.php
discovery/images/index.php
discovery/images/tab_discover.gif
discovery/config.php
discovery/LICENSE

Step 30:

move the plug in dir to cacti's plugin dir


[bhaskar@Amazon-instances ~]$ sudo mv -v discovery /var/www/html/cacti/plugins/
`discovery' -> `/var/www/html/cacti/plugins/discovery'

Step 31:

Activate the plug in:

put a line like this in /var/www/html/cacti/include/config.php


$plugins[] = 'discovery';

### For every extra downloaded plug in we need to put up a line like this.

Now time for some graph..disk usage:

Here is another one memory usage:

Here one for the cpu usage;

Here something for eth0 and processes;

Hope this will help. Cacti is certainly not the easiest graphing solutions..but very cool to have one.

Cheers!
Bhaskar

Drush: A command line Drupal site manipulator

2011-04-19T16:11:00.000+05:30

In this article I will touch a software called Drush, which essentially do the things like gems do for Ruby or easy_install does for python.

I have installed drupal and using this command line utility I will show you how you can get things going on drupal without going into the web interface.

So here we go:

I am assuming drush has been installed in the GNU/Linux box by you people already;if not get it installed.Say I need to know the status of php conf file and drush version ;here is how you can get it:



bhaskar@bhaskar-laptop_15:34:32_Tue Apr 19:~> sudo /usr/bin/drush status
[sudo] password for bhaskar: 
PHP configuration     :  /etc/php5/cli/php.ini 
Drush version         :  3.3

Now if you want know the backend database information,then do



bhaskar@bhaskar-laptop_15:45:12_Tue Apr 19:/var/www/drupal> sudo /usr/bin/drush sql-conf
Array
(
[driver] => mysql
[username] => drupal
[port] => 
[host] => localhost
[database] => drupaldb
)

Right..cool ,now say you are curious to know modules comes with drupal about their status:



bhaskar@bhaskar-laptop_15:45:14_Tue Apr 19:/var/www/drupal> sudo /usr/bin/drush sm
Package          Name                                       Type    Status         Version 
CCK              Content (content)                          Module  Enabled        6.x-2.9 
CCK              Content Copy (content_copy)                Module  Enabled        6.x-2.9 
CCK              Content Permissions (content_permissions)  Module  Enabled        6.x-2.9 
CCK              Fieldgroup (fieldgroup)                    Module  Enabled        6.x-2.9 
CCK              Node Reference (nodereference)             Module  Enabled        6.x-2.9 
CCK              Number (number)                            Module  Enabled        6.x-2.9 
CCK              Option Widgets (optionwidgets)             Module  Enabled        6.x-2.9 
CCK              Text (text)                                Module  Enabled        6.x-2.9 
CCK              User Reference (userreference)             Module  Enabled        6.x-2.9 
Core - optional  Aggregator (aggregator)                    Module  Enabled        6.20    
Core - optional  Blog (blog)                                Module  Enabled        6.20    
Core - optional  Blog API (blogapi)                         Module  Enabled        6.20    
Core - optional  Book (book)                                Module  Not installed  6.20    
Core - optional  Color (color)                              Module  Enabled        6.20    
Core - optional  Comment (comment)                          Module  Enabled        6.20    
Core - optional  Contact (contact)                          Module  Enabled        6.20    
Core - optional  Content translation (translation)          Module  Not installed  6.20    
Core - optional  Database logging (dblog)                   Module  Enabled        6.20    
Core - optional  Forum (forum)                              Module  Enabled        6.20    
Core - optional  Help (help)                                Module  Enabled        6.20    
Core - optional  Locale (locale)                            Module  Not installed  6.20    
Core - optional  Menu (menu)                                Module  Enabled        6.20    
Core - optional  OpenID (openid)                            Module  Enabled        6.20    
Core - optional  Path (path)                                Module  Enabled        6.20    
Core - optional  PHP filter (php)                           Module  Enabled        6.20    
Core - optional  Ping (ping)                                Module  Enabled        6.20    
Core - optional  Poll (poll)                                Module  Enabled        6.20    
Core - optional  Profile (profile)                          Module  Enabled        6.20    
Core - optional  Search (search)                            Module  Enabled        6.20    
Core - optional  Statistics (statistics)                    Module  Enabled        6.20    
Core - optional  Syslog (syslog)                            Module  Enabled        6.20    
Core - optional  Taxonomy (taxonomy)                        Module  Enabled        6.20    
Core - optional  Throttle (throttle)                        Module  Enabled        6.20    
Core - optional  Tracker (tracker)                          Module  Enabled        6.20    
Core - optional  Trigger (trigger)                          Module  Enabled        6.20    
Core - optional  Update status (update)                     Module  Enabled        6.20    
Core - optional  Upload (upload)                            Module  Enabled        6.20    
Core - required  Block (block)                              Module  Enabled        6.20    
Core - required  Filter (filter)                            Module  Enabled        6.20    
Core - required  Node (node)                                Module  Enabled        6.20    
Core - required  System (system)                            Module  Enabled        6.20    
Core - required  User (user)                                Module  Enabled        6.20    
Other            Bluemarine (bluemarine)                    Theme   Disabled       6.20    
Other            Chameleon (chameleon)                      Theme   Disabled       6.20    
Other            Garland (garland)                          Theme   Enabled        6.20    
Other            Marvin (marvin)                            Theme   Disabled       6.20    
Other            Minnelli (minnelli)                        Theme   Disabled       6.20    
Other            Pushbutton (pushbutton)                    Theme   Disabled       6.20

Let's say you want to install some module right? Go ahead and install it like below:



bhaskar@bhaskar-laptop_15:48:23_Tue Apr 19:/var/www/drupal> sudo /usr/bin/drush dl diff
Project diff (6.x-2.1) downloaded to /var/www/drupal/sites/all/modules/diff.                                                                                             [success]

Here I have installed a module called "Diff",which basically do adds a tab for sufficiently permissioned users. The tab shows all revisions like standard Drupal but it also allows pretty viewing of all added/changed/deleted words between revisions.

But installing module will not sufficient, we need to activate or enable them, so you need to do like below:



bhaskar@bhaskar-laptop_15:51:41_Tue Apr 19:/var/www/drupal> sudo /usr/bin/drush en diff
The following projects will be enabled: diff
Do you really want to continue? (y/n): y
diff was enabled successfully.                                                                                                                                           [ok]

Cool...isn't it!!! Now we are going to refresh the database from command line like below;



bhaskar@bhaskar-laptop_15:55:03_Tue Apr 19:/var/www/drupal> sudo /usr/bin/drush rf
Refreshing update status information ...
Done.

Last but not the least to run a cron related to drupal like below:



bhaskar@bhaskar-laptop_15:58:01_Tue Apr 19:/var/www/drupal> sudo /usr/bin/drush cron
Cron run successfully.                                                                                                                                                   [success]

Hope this will help.

Cheers!
Bhaskar

Nagios saga

2011-03-10T19:41:00.001+05:30

In this post I will tell how I was frustrated by the fact of my own ignorance.I was configuaring nagios host for service check and stumbled with an error spitting out the message like below:


 Name or service not known HTTP CRITICAL
 - Unable to open TCP socket

I have had looked into nagios FAQ and google all over the place,but to my surprise I haven't had found any solution to this problem and of course the cause of it.Really surprised!!! Now as the great man said once "Given enough eyeball software bug can be detected", it was none other ,but Eric.S. Raymods. Anyway I was taking it easily by knowing that I was doing it correct,Yes I was regarding that configuration. But may be little bit ignorance with conf syntax.Because When I tried to look for a string in specific site I forgot to enquote it ....oooops what a shame. Any how once I checked the command line version of that perticular check and it shows the correct result. Now the command line from nagios one of conf file called command.cfg, which hold a line for checking like below:

Correct:


 check_http -H yourwebsite -p portnumber -u the uri  -s "the string" -t time

Wrong:

instead I was doing like below:


check_http -H yourwebsite -p portnumber -u the uri  -s the string -t time

If it is a single word , then you can use that word without quote;but having space in between it will not work and throw the above error. It was a basic mistake,a string should always be quoted if that string consists with words separetad by space.

Hope this will help.

Cheers!
Bhaskar

How to install python related stuff through setuptools of python

2011-03-08T14:09:00.001+05:30

In this article I will guide you through a step which might benefit you to get a better grasp of python related stuff.As I was discovering a specific piece of software and come across few thing related to python(recollecting my old day association with ZOPE).So,basically this is called "easy_install", which will help you to install python files and packages to your system.

I am running Debian Sqeeze and not have that specific tool installed on it by default.So I went ahead and installed it first like below:


bhaskar@bhaskar-laptop_13:30:23_Tue Mar 08:~> sudo apt-get install python-setuptools
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
  libgnomecupsui1.0-1c2a xfonts-scalable xfonts-75dpi libdmx1 xfonts-100dpi libgnomecups1.0-1
Use 'apt-get autoremove' to remove them.
The following NEW packages will be installed:
  python-setuptools
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 221 kB of archives.
After this operation, 1,057 kB of additional disk space will be used.
Get:1 http://ftp.us.debian.org/debian/ squeeze/main python-setuptools all 0.6.14-4 [221 kB]
Fetched 221 kB in 4s (51.7 kB/s)
Selecting previously deselected package python-setuptools.
(Reading database ... 165516 files and directories currently installed.)
Unpacking python-setuptools (from .../python-setuptools_0.6.14-4_all.deb) ...
Setting up python-setuptools (0.6.14-4) ...

So the package name is python-setuptools , once is installed it will install the "easy_install" thing in your system.Now I have some file to be inflated in my system which has .egg extension and which can read and understand by python installer.For that I have followed the below steps:



bhaskar@bhaskar-laptop_13:30:51_Tue Mar 08:~> sudo /usr/bin/easy_install cssutils-0.9.7-py2.4.egg
install_dir /usr/local/lib/python2.6/dist-packages/
Processing cssutils-0.9.7-py2.4.egg
creating /usr/local/lib/python2.6/dist-packages/cssutils-0.9.7-py2.4.egg
Extracting cssutils-0.9.7-py2.4.egg to /usr/local/lib/python2.6/dist-packages
Adding cssutils 0.9.7 to easy-install.pth file
Installing csscombine script to /usr/local/bin
Installing cssparse script to /usr/local/bin
Installing csscapture script to /usr/local/bin

Installed /usr/local/lib/python2.6/dist-packages/cssutils-0.9.7-py2.4.egg
Processing dependencies for cssutils==0.9.7
Searching for cssutils==0.9.7
Reading http://pypi.python.org/simple/cssutils/
Reading http://cthedot.de/cssutils/
Reading http://code.google.com/p/cssutils/downloads/list
Best match: cssutils 0.9.7
Downloading http://pypi.python.org/packages/2.6/c/cssutils/cssutils-0.9.7-py2.6.egg#md5=6fc9ef19579645a97d3f7c028f35d54c
Processing cssutils-0.9.7-py2.6.egg
creating /usr/local/lib/python2.6/dist-packages/cssutils-0.9.7-py2.6.egg
Extracting cssutils-0.9.7-py2.6.egg to /usr/local/lib/python2.6/dist-packages
Removing cssutils 0.9.7 from easy-install.pth file
Adding cssutils 0.9.7 to easy-install.pth file
Installing csscombine script to /usr/local/bin
Installing cssparse script to /usr/local/bin
Installing csscapture script to /usr/local/bin

Installed /usr/local/lib/python2.6/dist-packages/cssutils-0.9.7-py2.6.egg
Finished processing dependencies for cssutils==0.9.7

Installing pyinotify

This is a module which helps to track file related activity on GNU/Linux system with the help of filesystems inotify modules.Here is how you can installed it:


bhaskar@bhaskar-laptop_14:52:08_Tue Mar 08:~/Downloads/wimleers-fileconveyor-207361c/code> sudo easy_install pyinotify
install_dir /usr/local/lib/python2.6/dist-packages/
Searching for pyinotify
Reading http://pypi.python.org/simple/pyinotify/
Reading http://github.com/seb-m/pyinotify
Best match: pyinotify 0.9.1
Downloading http://pypi.python.org/packages/source/p/pyinotify/pyinotify-0.9.1.tar.gz#md5=c22b12c31aeb19c387b2f1885b9b04b5
Processing pyinotify-0.9.1.tar.gz
Running pyinotify-0.9.1/setup.py -q bdist_egg --dist-dir /tmp/easy_install-H4WKcs/pyinotify-0.9.1/egg-dist-tmp-CK1S6N
WARNING: '' not a valid package name; please use only.-separated package names in setup.py
zip_safe flag not set; analyzing archive contents...
Adding pyinotify 0.9.1 to easy-install.pth file

Installed /usr/local/lib/python2.6/dist-packages/pyinotify-0.9.1-py2.6.egg
Processing dependencies for pyinotify
Finished processing dependencies for pyinotify

So you can see in the above output that how easy_install works.Like the way gem work for ruby.

Hope this will help.

Cheers!
Bhaskar

Manage httpd/apache server through puppet

2011-03-05T12:48:00.002+05:30

In this article I will show you that you can manage box running apache/httpd server through a configuration management software called puppet.

Being in the corporate network infrastructure will gobbles up hell lot of your invaluable time doing same thing over and over again if you are not exposed to the correct tools and obviously to correct technology.So finding the right tool and get accustomed with it is a very much required.

So I am going to give a brief snapshot of how a configuration system like puppet come to your rescue. It's a swiss army knife for any sensible person involve in infrastructure.Yes, those of you doing it for over the years might be get accustomed with cfengine(a beast,indeed!!),chef et al.

Without much ado..here we go:

I have installed puppet in my system....



bhaskar@bhaskar-laptop_10:48:20_Sat Mar 05:~> sudo genlop -t puppet                                                                                                               
Password:                                                                                                                                                                         
* app-admin/puppet                                                                                                                                                               

Wed Apr  7 07:32:45 2010 >>> app-admin/puppet-0.25.4-r1                                                                                                                      
merge time: 23 seconds.                                                                                                                                                    

Tue Aug  3 08:03:31 2010 >>> app-admin/puppet-0.25.5                                                                                                                         
merge time: 29 seconds.

Now the next step is to configure a service which should be maintained by puppet. I have chose to take of apache/httpd configuration file. So first thing ,we need to go to the puppet installed base dir,means where puppet put configuration and manifest files.If the manifest directory is missing then please create it.Mine look like this :


bhaskar@bhaskar-laptop_10:48:30_Sat Mar 05:~> ls -al /etc/puppet                                                                                                                  
total 24                                                                                                                                                                          
drwxr-xr-x  3 root root 4096 Mar  5 10:09 .                                                                                                                                       
drwxr-xr-x 95 root root 4096 Mar  5 09:40 ..                                                                                                                                      
-rw-r--r--  1 root root 2346 Aug  3  2010 auth.conf                                                                                                                               
-rw-r--r--  1 root root  378 Aug  3  2010 fileserver.conf                                                                                                                         
drwxr-xr-x  3 root root 4096 Mar  5 10:10 manifests                                                                                                                               
-rw-r--r--  1 root root 1080 Feb 19 15:11 puppet.conf

This is almost default to the puppet configuration structure.Now inside that manifest folder I have created a dir called service,which hold my service I want to check with puppet.Here is view of it:


bhaskar@bhaskar-laptop_10:59:28_Sat Mar 05:/etc/puppet/manifests/services> ll                                                                                                     
total 4                                                                                                                                                                           
-rw-r--r-- 1 root root 496 Apr  7  2010 apache.pp

As you can see I have created a file called apache.pp, now let me show you what it look like inside:


1 class apache {
2     package {
3             apache:
4                 ensure => installed
5             }
6 
7     file {
8         "httpd.conf":
9           mode => 644,
10           owner => root,
11           group => root,
12           path => "/etc/apache2/httpd.conf",
13           source => "puppet://bhaskar-laptop.localdomain/files/httpd.conf",
14        }
15 
16     service {
17            apache2:
18               ensure => true,
19               enable => true,
20               subscribe => [ File["httpd.conf"], Package [apache] ],
21             }
22     }

Pretty ordinary stuff, right!! indeed because puppet authors made it easy for us ordinary mortals.But having said that a small amount of OOP(object oriented programming) not harmful at all,rather help you to understand the structure more elaborately.

Isn't that file content self explanatory,if not..like me to understand others code...bit by bit for you ;

Line 1 to 5: What essentially a class ,which hold a tag related to service,then it has variable called "ensure" which will check that the package or service installed in the system.

Line 7 to 14 : It has file section ,in which I am checking the main apache configuration file,with the permission and ownership of it.We need to mention the path where the file actually located in the system.

Line number 13 is tricky to many like me: it essentially the place from where puppet client server the files,for that we need to specify that path into a file just above level directory called fileserver.conf.And we need to copy that file that place from that original file location.Here is the visual representation of what I said above:


bhaskar@bhaskar-laptop_11:13:07_Sat Mar 05:/var/lib/puppet/files> sudo cp -v /etc/apache2/httpd.conf /var/lib/puppet/files/    
`/etc/apache2/httpd.conf' -> `/var/lib/puppet/files/httpd.conf'

And the file holding the path is look like this and reside here /etc/puppet/fileserver.conf


1 # This file consists of arbitrarily named sections/modules
2 # defining where files are served from and to whom
3 
4 # Define a section 'files'
5 # Adapt the allow/deny settings to your needs. Order
6 # for allow/deny does not matter, allow always takes precedence
7 # over deny
8 [files]
9   path /var/lib/puppet/files
10 #  allow *.example.com
11 #  deny *.evil.example.com
12 #  allow 192.168.0.0/24
13   allow bhaskar-laptop

I hope I made it clear to you folks! Now the last part of the file:

Line number 16 to 20: it is a service section we are trying to monitor and manage.it said that the service should be enable and it make sure of it. And it subscribed to the package it holds and the main file related to it.

Now if you change the file permission of the apache main configuration file or changes to that file ..next time the puppetd client run it will restore back the previous conf..so bring back the sanity to the system.

Here is an example:
I am going to change the permission of the httpd.conf which has presently has this perm:


bhaskar@bhaskar-laptop_11:34:25_Sat Mar 05:~> ls -al /etc/apache2/httpd.conf 
-rw-r--r-- 1 root root 6516 Jul 22  2010 /etc/apache2/httpd.conf

Now change to some thing like below:


bhaskar@bhaskar-laptop_11:36:42_Sat Mar 05:~> sudo chmod 640 /etc/apache2/httpd.conf 
bhaskar@bhaskar-laptop_11:37:31_Sat Mar 05:~> ls -al /etc/apache2/httpd.conf 
-rw-r----- 1 root root 6516 Jul 22  2010 /etc/apache2/httpd.conf

Now two option we have: either we wait until the next time the puppet client run and bring back the sanity or do that immediately,which is why like this;



bhaskar@bhaskar-laptop_12:38:39_Sat Mar 05:~> sudo /usr/sbin/puppetd --server bhaskar-laptop --test
info: Caching catalog for bhaskar-laptop                                                                                                                                          
info: Applying configuration version '1299308926'                                                                                                                                 
notice: //File[httpd.conf]/mode: mode changed '640' to '644'                                                                                                                      
notice: Finished catalog run in 0.35 seconds

So it bring back to it sanity,here is the evidence,compare with earlier listing with same file:


bhaskar@bhaskar-laptop_12:38:47_Sat Mar 05:~> ls -al /etc/apache2/httpd.conf                                                                                                      
-rw-r--r-- 1 root root 6516 Jul 22  2010 /etc/apache2/httpd.conf

Ok, I have touched tip of an iceburg..it can be tweaked and configured leap and bounds and possibilities are aplenty.

Hope this will help.

Cheers!
Bhaskar

How to fix security loophole in Gentoo

2011-01-25T15:22:00.001+05:30

Security is an ongoing matter for all the open system. So it's upto the guy who in charge of it and some company forces it too.In this article I will show you how you can fix the security hole in Gentoo.

Say you come to know that an security vulnarability has found on some particular and that software were loaded in your box.Here is how you can fix those:


bhaskar@bhaskar-laptop_15:03:56_Tue Jan 25:~> sudo glsa-check -f all
fixing 200812-12
fixing 200802-11
fixing 200705-23
fixing 200406-17
fixing 200804-13
fixing 200409-20
fixing 200708-01
fixing 200801-18
fixing 201001-04
fixing 201011-01
fixing 200909-11
fixing 200509-13
fixing 200612-16
fixing 200606-25
fixing 200405-22
fixing 200711-17
fixing 200510-19
fixing 201006-20
fixing 200602-08
fixing 200310-03
fixing 200506-16

....output is omitted for the sake of brevity, Yes,you spotted it right,glsa-check is an utility in Gentoo system to check security.Once it finished running then just run this command with different arguments; like below:


bhaskar@bhaskar-laptop_15:05:34_Tue Jan 25:~> sudo glsa-check -l affected
[A] means this GLSA was already applied,
[U] means the system is not affected and
[N] indicates that the system might be affected.

Now let me tell you that those alphabet in the left side within square bracket come with different colors. The A will be on normal white,the U will be green and the N in red.Important part to check how many N you have .

So,one tiny utility can do wonder,indeed.You can put it into the cron to run it periodically.

Hope this will help.

Cheers!
Bhaskar

MySQL : A little security tip

2011-01-13T09:04:00.000+05:30

In this article I am going to show you a little trick about MySQL ,which might help you to prevent some attack on production database server.Every MySQL server has a root user attached to it and for intruders it's very easy to guess that and launch attack on it.

Here is how you can change the root user name for that MySQL server :


bhaskar@bhaskar-laptop_08:55:51_Thu Jan 13:~> sudo mysql -u root -p                                                                                                               
Enter password:                                                                                                                                                                   
Welcome to the MySQL monitor.  Commands end with ; or \g.                                                                                                                         
Your MySQL connection id is 26                                                                                                                                                    
Server version: 5.1.51-log Gentoo Linux mysql-5.1.51                                                                                                                              
                                                                                                                                                                                  
Copyright (c) 2000, 2010, Oracle and/or its affiliates. All rights reserved.                                                                                                      
This software comes with ABSOLUTELY NO WARRANTY. This is free software,                                                                                                           
and you are welcome to modify and redistribute it under the GPL v2 license                                                                                                        
                                                                                                                                                                                  
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.                                                                                                    
                                                                                                                                                                                  
mysql>use mysql;                                                                                                                                                                 
mysql> update user set password=PASSWORD("NEWPASSWORD") where                                                                                                                     
User='';                                                                                                                                                                  
mysql> flush privileges;                                                                                                                                                          
mysql> quit

That's all!!

Hope this will help.

Cheers!
Bhaskar

Fetch mail from Gmail through Mutt

2010-12-15T10:41:00.001+05:30

Mutt is a wonderful mail client ,which is commandline based. I have been using it for quite some time now.In this article I will show you how you can get mail from your gmail account.

If you don't have it then please get it from the specific OS repository or the link provided at the begining of this article.

I am sitting on Gentoo and I got it like below:


bhaskar@bhaskar-laptop_09:46:16_Wed Dec 15:~> sudo emerge -av mutt                                                                                                                
Password:                                                                                                                                                                         

These are the packages that would be merged, in order:                                                                                                                            

Calculating dependencies... done!                                                                                                                                                 
[ebuild   R   ] mail-client/mutt-1.5.20-r18  USE="berkdb crypt gdbm nls ssl -debug -doc* -gnutls* -gpg* -idn -imap* -mbox* -nntp -pop* -qdbm -sasl* -sidebar -smime* -smtp* -tokyocabinet" 0 kB                                                                                                                                                                     

Total: 1 package (1 reinstall), Size of downloads: 0 kB                                                                                                                           

Would you like to merge these packages? [Yes/No]

So I already have it in my system so there is no point getting it again.Let me check out when I got this;


bhaskar@bhaskar-laptop_09:49:46_Wed Dec 15:~> sudo genlop -t mutt                                                                                                                 
* mail-client/mutt                                                                                                                                                               

Wed Nov 24 11:16:02 2010 >>> mail-client/mutt-1.5.20-r18                                                                                                                     
merge time: 10 minutes and 53 seconds.

Anyway ,it deflates configuration files in /etc/mutt like below:


bhaskar@bhaskar-laptop_09:51:46_Wed Dec 15:/etc/mutt> ls
Muttrc  Muttrc.dist  mime.types  mime.types.dist

Now What I do;read few article on the internet about gmail integration with mutt(which I will provide the link in the resource section at the bottom of this post).Now I have copied the Muttrc file to my home dir and make adjustment to that file.

My personal .Muttrc look like below:



1 # Some minimal Mutt settings, Gentoo-style.  Since mutt was installed
2 # with USE=mbox, this file doesn't have any changes from the default
3 # mutt settings, making it very minimal indeed...
4 #
5 # Please don't add settings to this file to change other user
6 # preferences (such as colors), since those can be hard for a user to
7 # undo if their preference doesn't match yours!  For example, it is
8 # *impossible* currently in mutt to remove color settings from objects
9 # other than the index.
10 #
11 
12  set imap_user="unixbhaskar@gmail.com"
13  set imap_pass=""
14  set pager_context=1
15  set pager_index_lines=6                 #show a mini-index in pager
16  set menu_scroll
17  set pgp_verify_sig=no                   #dont show pgp in pager
18  set status_on_top                       #put status line at top
19  set sort=threads                        #sort by message threads in index
20 #
21  set status_format=" %r %b %f %n      Del %d      Msgs %m %l %> (%P)"
22  set pager_format="%-10.10i %[!%a %b %d %R]"
23  set date_format="!%H:%M %a %d %b     "
24  set index_format="%4C %Z %[%b%d] %-15.15F %s"
25  set folder_format="%2C %t %8s %d %N %f"
26 #
27 # #set sendmail="/usr/bin/nbsmtp -d isp.net -h smtp.isp.net -f yourname@isp.net"
28 #
29  set from="unixbhaskar@gmail.com"         #set to your from address
30  set realname="Bhaskar Chowdhury"
31 #
32 # set record="$home/sent"        #sent mail is saved here
33  set delete=yes                          #delete without prompting
34  set include=yes                         #quote msg in reply
35  set fast_reply=yes                      #no prompting on reply
36  set beep=no                             #no noise
37  set markers=no                          #no + on wrapped lines
38  set confirmappend=no                    #no prompt for save to =keep
39  set to_chars=" +TCF"                    #no L for mail_list
40 #
41  set folder = "imaps://imap.gmail.com:993"
42  set spoolfile = "+INBOX"
43  set postponed ="+[Gmail]/Drafts"
44 
45  set header_cache =~/.mutt/cache/headers
46  set message_cachedir =~/.mutt/cache/bodies
47  #mailboxes =inbox
48 # mailboxes =gentoo-dev
49 # mailboxes =gentoo-announce
50 # mailboxes =gentoo
51 # mailboxes =freshmeat
52 # mailboxes =duplicates
53 # mailboxes =default
54 # mailboxes =friends
55 # mailboxes =junk
56 # mailboxes =spam
57 # mailboxes =keep
58 #
59 set smtp_url = "smtp://unixbhaskar@smtp.gmail.com:587/"
60 set smtp_pass = ""
61 save-hook .* =keep                      #default mbox to (s)ave mail is =keep
62 # subscribe gentoo-user gentoo-dev        #subscribed to these lists
63 #
64 # bind pager h display-toggle-weed        #toggle headers with h key
65 #
66 # # simulate the old url menu
67  macro index \cb |urlview\n 'call urlview to extract URLs out of a message'
68  macro pager \cb |urlview\n 'call urlview to extract URLs out of a message'
69 #
70 # #run fetchmail by hitting key of G
71  macro index G "!fetchmail -a -m 'procmail -d %T'\r"
72  macro pager G "!fetchmail -a -m 'procmail -d %T'\r"
73 #
74 # #use to edit .muttrc and then source it...no restart necessary
75 # macro generic ,sm ":source $HOME/.muttrc\r"
76 # macro generic \cj "!rxvt -bg wheat -e joe $HOME/.muttrc\r"
77 #
78 # # default list of header fields to weed out when displaying mail
79 # #ignore them all and then unignore what you want to see
80 # ignore *
81  unignore  Date To From: Subject X-Mailer Organization User-Agent
82  hdr_order Date From To Subject X-Mailer User-Agent Organization
83 #
84 # ##your Mutt has to have some colors
85 # ##these are for four levels of quoted text
86 # ##they override the system settings in /etc/mutt/Muttrc
87 #
88 # #color quoted green  default
89  color quoted1 magenta blue
90 # #color quoted2 yellow default
91 # #color quoted3 red default
92 # #color signature cyan cyan
93 #
94 #
95 # #this color setup is copied from /etc/mutt/Muttrc.color
96 # #comment it out if you want the default colors in /etc/mutt/Muttrc
97 # # Je vois la vie en rose :-)
98  color   hdrdefault      brightcyan      blue
99  color   header          brightwhite     blue "^from:"
100  color   header          brightwhite     blue   "^subject:"
101 #
102  color   quoted          brightgreen     blue
103  color   signature       brightwhite     blue
104 #
105  color   indicator       blue            green
106 #
107  color   error           red             black
108  mono    error           bold
109  color   status          black cyan
110  mono    status          bold
111  color   tree            yellow          blue
112 #
113  color   tilde           brightmagenta   blue
114  color   body            brightwhite     blue    "[-a-z_0-9.]+@[-a-z_0-9.]+"
115   mono    body            bold                    "[-a-z_0-9.]+@[-a-z_0-9.]+"
116  color   body            brightyellow    black   "^Good signature"
117  mono    body            bold                    "^Good signature"
118  color   body            brightwhite     red     "^Bad signature from.*"
119  mono    body            bold                    "^Bad signature from.*"
120  color   normal          white           blue
121  color   message         green           black
122  color   attachment      brightgreen     blue
123 #
124 # # End of file...but it can go on and on and on....:)
125 #

So the next job is to invoke mutt from the commandline like below:


mutt

and here is the outcome of that..it's connecting to gmail..

Now look at the bottom of the picture it fetching the header of those messages(it doesn't download the whole message).Only when you select the message for viewing then only mutt download the whole message.Once it get the headers it shows off the inbox like below:

Once the the headers are fetched it display the mail boxes you have with Gmail.Then you need to choose the proper box to show off those mails reside in it.Now select the any inbox and press enter then:

Anyway you can also integrate GnuPG with it for encryption and signing.

Hope this will help.

Cheers!
Bhaskar

Resources:

1) http://www.andrews-corner.org/mutt.html

2) http://wiki.mutt.org/index.cgi?MuttGuide

3) http://crunchbanglinux.org/wiki/howto/howto_setup_mutt_with_gmail_imap

4) http://www.faqs.org/docs/Linux-HOWTO/Mutt-GnuPG-PGP-HOWTO.html

NetSurf - A graphical-browser for emergency browsing

2010-11-19T07:18:00.002+05:30

In this post I will investigate a commandline graphical browser(run without X) which I was unaware of till two days back.I am pretty much well versed with lynx and elinks. . The new found(mentioned the source in the resource section at the bottom of the post) one called netsurf .I have tried to install it from the source available on Fedora 12 ,but failed to do so due to lack of patience.

Now I am sitting on Debian Lenny as it in the repository so it;s really make easy to install and use it.So I get it like below:


bhaskar@bhaskar-laptop_06:00:11_Fri Nov 19:~> sudo aptitude install netsurf
Reading package lists... Done
Building dependency tree
Reading state information... Done
Reading extended state information
Initializing package states... Done
Reading task descriptions... Done
The following NEW packages will be installed:
netsurf
0 packages upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 411kB of archives. After unpacking 1217kB will be used.
Writing extended state information... Done
Get:1 http://http.us.debian.org stable/main netsurf 1.2-1 [411kB]
Fetched 411kB in 1min52s (3641B/s)
Selecting previously deselected package netsurf.
(Reading database ... 112830 files and directories currently installed.)
Unpacking netsurf (from .../netsurf_1.2-1_i386.deb) ...
Processing triggers for menu ...
Processing triggers for man-db ...
Setting up netsurf (1.2-1) ...
Processing triggers for menu ...
Reading package lists... Done
Building dependency tree
Reading state information... Done
Reading extended state information
Initializing package states... Done
Writing extended state information... Done
Reading task descriptions... Done

Once it is installed it just a cakewalk.I invoked it like below:


bhaskar@bhaskar-laptop_06:07:41_Fri Nov 19:~> /usr/bin/netsurf http://linux-nfs.org

(netsurf:5351): libglade-WARNING **: could not find signal handler 'on_menupopup_navigate_activate'.

(netsurf:5351): Gtk-WARNING **: gtk_menu_attach_to_widget(): menu already attached to GtkMenuItem

(netsurf:5351): Gtk-WARNING **: gtk_menu_attach_to_widget(): menu already attached to GtkMenuItem

(netsurf:5351): Gtk-WARNING **: gtk_menu_attach_to_widget(): menu already attached to GtkMenuItem

(netsurf:5351): Gtk-WARNING **: gtk_menu_attach_to_widget(): menu already attached to GtkMenuItem

(netsurf:5351): Gtk-WARNING **: gtk_menu_attach_to_widget(): menu already attached to GtkMenuItem

(netsurf:5351): Gtk-WARNING **: gtk_menu_attach_to_widget(): menu already attached to GtkMenuItem

(netsurf:5351): Gtk-WARNING **: gtk_menu_attach_to_widget(): menu already attached to GtkMenuItem

(netsurf:5351): Gtk-WARNING **: gtk_menu_attach_to_widget(): menu already attached to GtkMenuItem

(netsurf:5351): Gtk-WARNING **: gtk_menu_attach_to_widget(): menu already attached to GtkMenuItem

(netsurf:5351): Gtk-WARNING **: gtk_menu_attach_to_widget(): menu already attached to GtkMenuItem

Now the gtk-thing pop up like below;

Now few noticeable thing about it that it doesn't support tab feature.And lot of normal plug-in might be missing.But in case of headless server it will be as useful as other cli-browser.Second it heavily depend on GTK, so you have to have it installed in the system to get it work.

Plus you need to check out the dependency when building from source from their web site to get it straight.

Resources:

1) http://soosck.wordpress.com/2010/11/16/netsurf-graphical-web-browser-command-line-css/

Hope this will help.

Cheers!
Bhaskar

The mystery behind LUN(Logical Unit Number)

2010-11-17T08:23:00.003+05:30

After being amazed and bewildered for sometime and listening to people talking so geeky about it ;I decided to unearth few intricacies about it.As we all know few parts of the world where people making simple thing complicated to others which benifit few blunt headed idiots to get cheap credit and save thier arse.

Oh! by the way forgot to mention that(those of you ignore the title)this is all about telling some intricacies about LUN(Logical Unit Number) .So without much ado lets dive into it.

Let me give you a clear cut definition I have come across so far is this "A LUN is a Logical Unit Number. It can be used to refer to an entire physical disk, or a subset of a larger physical disk or disk volume. The physical disk or disk volume could be an entire single disk drive, a partition (subset) of a single disk drive, or disk volume from a RAID controller comprising multiple disk drives aggregated together for larger capacity and redundancy. LUNs represent a logical abstraction or, if you prefer, virtualization layer between the physical disk device/volume and the applications."

So how can you detect the LUN?

So there are two common ways to detect it,one is through /proc filesystes check and second is create a initrd image with it so time of os boot it can be detected.

Take the first case by scanning the /proc filesystem check; we need to the following to get a sense of it or aware of it:


bhaskar@bhaskar-laptop_06:55:52_Wed Nov 17:~> sudo cat /proc/scsi/scsi 
Password: 
Attached devices:
Host: scsi0 Channel: 00 Id: 00 Lun: 00
Vendor: ATA      Model: ST9160821AS      Rev: 3.BH
Type:   Direct-Access                    ANSI  SCSI revision: 05
Host: scsi3 Channel: 00 Id: 00 Lun: 00
Vendor: Optiarc  Model: DVD RW AD-7560A  Rev: DH10
Type:   CD-ROM                           ANSI  SCSI revision: 05

As you can see it from the out of that scan of /proc filesystem.Now the next one getting the LUN thing detected when the os boots.

Detect LUNs automatically at system boot

The second method of configuring LUNs for a Linux system with only LUN 0 configured involves setting the parameter for the SCSI mid-layer driver that controls how many LUNs are scanned during a SCSI bus scan. The following procedure works for both 2.4 and 2.6 kernels, but it assumes the SCSI mid-layer driver is compiled as a scsi_mod module that is loaded automatically at system boot time. For Linux 2.4 kernels, to set the maximum number of disk devices under Linux to properly detect all volumes, you need to set the max_scsi_luns option for the SCSI mid-layer driver. For example, if max_scsi_luns is set to 1 this limits SCSI bus scans to only LUN 0. This value should be set to the respective maximum number of disks the kernel can support, for example, 128 or 256. In Linux 2.6 kernels, the same procedure applies, except that the parameter has been renamed from max_scsi_luns to max_luns.

1. Edit the /etc/modules.conf file.
2. Add the following line:
* options scsi_mod max_scsi_luns= (where is the total number of luns to probe.
3. Save the file.
4. Run the mkinitrd command to rebuild the ram-disk associated with the current kernel. You can use the following figures examples of what mkinitrd command to run for your operating system. refers to the ‘uname –r’ output which displays the currently running kernel level, for example:. 2.4.21-292-smp.
For SUSE distributions, use the following command:

cd /boot
mkinitrd –k vmlinuz- -i initrd-

For Red Hat distributions, use the following command:

cd /boot
mkinitrd –v initrd-.img

5. Reboot the host.
6. Verify that the boot files are correctly configured for the newly created initrd image in the /boot/grub/menu.lst file.

The basics behind it somewhat is this LUNs are created as a basic part of the storage provisioning process using software tools that typically accompany the particular storage platform. However, there is not a 1-to-1 ratio between drives and LUNs. Many LUNs can easily be carved out of a single disk drive.

For example, a 500 GB drive can be partitioned into one 200 GB LUN and one 300 GB LUN, which would appear as two unique drives to the host server. Conversely, storage administrators can employ Logical Volume Manager software to combine multiple LUNs into a larger volume. Veritas Volume Manager from Symantec Corp. is one example of this software. In actual practice, disks are first gathered into a RAID group for larger capacity and redundancy (e.g., RAID-50), and then LUNs are carved from that RAID group.

LUNs are often referred to as logical "volumes," reflecting the traditional use of drive volume letters, such as volume C: or volume F: on your computer. But some experts warn against mixing the two terms, noting that the term "volume" is often used to denote the large volume created when multiple LUNs are combined with volume manager software. In this context, a volume may involve numerous LUNs and can confuse storage allocation.

Once created, LUNs can also be shared between multiple servers. For example, a LUN might be shared between an active and standby server. If the active server fails, the standby server can immediately take over. However, it can be catastrophic for multiple servers to access the same LUN simultaneously without a means of coordinating changed blocks to ensure data integrity. Cooordinating data changes requires clustering software, such as a clustered volume manager, a clustered file system, a clustered application or a network file system using NFS or CIFS.

LUN scaling and performance

LUNs are based on disks, so LUN performance and reliability will vary for the same reasons. For example, a LUN carved from a Fibre Channel 15K rpm disk will perform far better than a LUN of the same size taken from a 7,200 rpm SATA disk. This is also true of LUNs based on RAID arrays where the mirroring of a RAID-0 group may offer significantly different performance than the parity protection of a RAID-5 or RAID-6/dual parity (DP) group. Proper RAID group configuration will have a profound impact on LUN performance.

An organization may utilize hundreds or even thousands of LUNs, so the choice of storage resources has vast implications for a storage administrator. Not only is it necessary to supply an application with adequate capacity (in gigabytes), but the LUN must also be drawn from disk storage with suitable characteristics.

LUN management tools

Since an enterprise array may host more than 10,000 LUNs, software tools are vital for efficient LUN creation, manipulation and reporting. Such management tools are readily available; almost every storage vendor provides some type of management software to accompany products ranging from direct-attached storage (DAS) devices to enterprise arrays.

Administrators typically opt for vendor-specific or heterogeneous tools. A data center with one storage array or a single-vendor shop would do well with the indigenous LUN management tool that accompanied their storage system. Multivendor shops should at least consider heterogeneous tools that allow LUN management across all of the storage platforms.

A LUN management tool should also support the entire storage provisioning process. Features should include mapping to specific array ports and masking specific host bus adapters (HBA), along with comprehensive reporting. The LUN management tool should also be able to reclaim storage that is no longer needed. Although a few LUN management products support autonomous provisioning, some administrators have reservations about such automation.

SAN zoning and masking

LUNs are the basic vehicle for delivering storage, but provisioning SAN storage isn't just a matter of creating LUNs or volumes; the SAN fabric itself must be configured so that disks and their LUNs are matched to the appropriate servers. Proper configuration helps to manage storage traffic and maintain SAN security by preventing any server from accessing any LUN.

Zoning makes it possible for devices in a Fibre Channel network to see each other. By limiting the visibility of end devices, servers (hosts) can only see and access storage devices that are placed into the same zone. In more practical terms, zoning allows certain servers to see one or more ports on a disk array. Bandwidth, and thus minimum service levels, can be reserved by dedicating certain ports to a zone or isolate incompatible ports from one another.

Zoning is an important element of SAN security and high-availability SAN design. Zoning can typically be broken down into hard and soft zoning. With hard zoning, each device is assigned to a zone, and that assignment can never change. In soft zoning, the device assignments can be changed by the network administrator.

LUN masking adds granularity to this concept. Just because you zone a server and disk together doesn't mean that the server should be able to see all of the LUNs on that disk. Once the SAN is zoned, LUNs are masked so that each host server can only see specific LUNs.

Suppose that a disk has two LUNs: LUN_A and LUN_B. If we zoned two servers to that disk, both servers would see both LUNs. However, we can use LUN masking to allow one server to see only LUN_A and mask the other server to see only LUN_B. Port-based LUN masking is granular to the storage array port, so any disks on a given port will be accessible to any servers on that port. Server-based LUN masking is a bit more granular; a server will see only the LUNs assigned to it, regardless of the other disks or servers connected.

Adding/Removing a Logical Unit Through rescan-scsi-bus.sh

The sg3_utils package provides the rescan-scsi-bus.sh script, which can automatically update the logical unit configuration of the host as needed (after a device has been added to the system). The rescan-scsi-bus.sh script can also perform an issue_lip on supported devices. For more information about how to use this script, refer to rescan-scsi-bus.sh --help.
To install the sg3_utils package, run yum install sg3_utils.

Known Issues With rescan-scsi-bus.sh

When using the rescan-scsi-bus.sh script, take note of the following known issues:

In order for rescan-scsi-bus.sh to work properly, LUN0 must be the first mapped logical unit. The rescan-scsi-bus.sh can only detect the first mapped logical unit if it is LUN0. The rescan-scsi-bus.sh will not be able to scan any other logical unit unless it detects the first mapped logical unit even if you use the --nooptscan option.

A race condition requires that rescan-scsi-bus.sh be run twice if logical units are mapped for the first time. During the first scan, rescan-scsi-bus.sh only adds LUN0; all other logical units are added in the second scan.

A bug in the rescan-scsi-bus.sh script incorrectly executes the functionality for recognizing a change in logical unit size when the --remove option is used.

The rescan-scsi-bus.sh script does not recognize ISCSI logical unit removals.

Resources:

1) http://publib.boulder.ibm.com/infocenter/dsichelp/ds6000ic/index.jsp?topic=%2Fcom.ibm.storage.smric.help.doc%2Ff2c_linuxlunconfig_2hsaga.html

2) http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/html/Online_Storage_Reconfiguration_Guide/rescan-scsi-bus.html

Hope this will help.

Cheers!
Bhaskar

Let's deal with oddity : Remove filename with special char in them

2010-11-05T19:56:00.002+05:30

Let's face it,everyone face some oddity sooner then later to deal with open system.I have had come across quite a lot over the decade and am going to share few in this article.

Sometime people forget the basic thing and make things complicated. Like when they create a simple file they put arcane character in the name and it will create havoc in later stage.For example if someone create a file with "--" or "#" or some other character in the filename.Say one has a filename like below:


bhaskar@bhaskar-laptop_18:35:12_Fri Nov 05:~> touch -- -hey

Now you cannot list it like below:


bhaskar@bhaskar-laptop_18:38:52_Fri Nov 05:~> ls -l -hey
ls: invalid option -- 'e'
Try `ls --help' for more information.

Or

delete it like below;


bhaskar@bhaskar-laptop_18:39:00_Fri Nov 05:~> rm -f -hey
rm: invalid option -- 'h'
Try `rm ./-hey' to remove the file `-hey'.
Try `rm --help' for more information.

Now this is hindering you to get rid of it or even worse to take backup from the system if that file included in the backup list.So how to get rid of it ..as we all know that file store all the information in inode..so get it..


bhaskar@bhaskar-laptop_18:42:19_Fri Nov 05:~> ls -i | grep hey
655109 -hey

Now you can get rid of that file by inode like below:


bhaskar@bhaskar-laptop_18:50:14_Fri Nov 05:~> find . -inum 655109 -exec rm -i {} \;
rm: remove regular empty file `./-hey'? Y

Hope this will help .

Cheers!
Bhaskar

Rsync : A handy tool to sync with

2010-10-31T06:22:00.003+05:30

In this article I am going to show you some implication of rsync tool.It is a tool often used by the web masters and system administrator to sync with various number of host across the network.Now what is the utility of having rsync under your armory? The advantage is quite useful.Here are few:

** It can sync filesystem across the network

** It can only sync the updated version the filesystem then the whole tree.

** It is very useful to copy the entire web site ported to new host or hosts.

** Rsync can do a various job related to backup procedure.

support for copying links, devices, owners, groups, and permissions

** exclude and exclude-from options similar to GNU tar

** a CVS exclude mode for ignoring the same files that CVS would ignore

** can use any transparent remote shell, including ssh or rsh

** does not require super-user privileges

** pipelining of file transfers to minimize latency costs

** support for anonymous or authenticated rsync daemons (ideal for mirroring)

Above stated advantages are name a few.Kindly look into the manual page of it.So,now I have four different partition and and I want to sync a particualr dir with all partiotn with a specific application running on all the OSes.

The idea is to get it sync; because I want the information to be indentical across all the partitions(same can be applied to different hosts too over the network!!).

How does it work?

You must set up one machine or another of a pair to be an "rsync server" by running rsync in a daemon mode ("rsync --daemon" at the commandline) and setting up a short, easy configuration file (/etc/rsyncd.conf). Below I'll detail a sample configuration file. The options are readily understood, few in number -- yet quite powerful.

Any number of machines with rsync installed may then synchronize to and/or from the machine running the rsync daemon. You can use this to make backups, mirror filesystems, distribute files or any number of similar operations. Through the use of the "rsync algorithm" which transfers only the diffs between files (similar to a patch file) and then compressing them -- you are left with a very efficient system.

For those of you new to secure shell ("ssh" for short), you should be using it! There's a very useful and quite thourough Getting Started with SSH document available. You may also want to visit the Secure Shell Web Site. Or, just hit the Master FTP Site in Finland and snag it for yourself. It provides a secure, encrypted "pipe" for your network traffic. You should be using it instead of telnet, rsh or rlogin and use the replacement "scp" command instead of "rcp."

Setting up a Server

You must set up a configuration file on the machine meant to be a server and run the rsync binary in daemon mode. Even your rsync client machines can run rsync in daemon mode for two-way transfers. You can do this automatically for each connection via the inet daemon or at the commandline in standalone mode to leave it running in the background for often repeated rsyncs. .Plus there is a CGI script that folks fire off frequently during the day for immediate updating of content. This is a lot of rsync calls! If you start off the rsync daemon through your inet daemon, then you incur much more overhead with each rsync call. You basically restart the rsync daemon for every connection your server machine gets! It's the same reasoning as starting Apache in standalone mode rather than through the inet daemon. It's quicker and more efficient to start rsync in standalone mode if you anticipate a lot of rsync traffic. Otherwise, for the occasional transfer follow the procedure to fire off rsync via the inet daemon. This way the rsync daemon, as small as it is, doesn't sit in memory if you only use it once a day or whatever. Your call.

Below is a sample rsync configuration file. It is placed in your /etc directory as rsyncd.conf.


motd file = /etc/rsyncd.motd
log file = /var/log/rsyncd.log
pid file = /var/run/rsyncd.pid
lock file = /var/run/rsync.lock

[simple_path_name]
path = /rsync_files_here
comment = My Very Own Rsync Server
uid = nobody
gid = nobody
read only = no
list = yes
auth users = username
secrets file = /etc/rsyncd.scrt

Various options that you would modify right from the start are the areas in italics in the sample above. I'll start at the top, line by line, and go through what you should pay attention to. What the sample above does is setup a single "path" for rsync transfers to that machine.

Starting at the top are four lines specifying files and their paths for rsync running in daemon mode. The first is a "message of the day" (motd) file like you would use for an FTP server. This file's contents get displayed when clients connect to this machine. Use it as a welcome, warning or simply identification. The next line specifies a log file to send diagnostic and norml run-time messages to. The PID file contains the "process ID" (PID) number of the running rsync daemon. A lock file is used to ensure that things run smoothly. These options are global to the rsync daemon.

The next block of lines is specific to a "path" that rsync uses. The options contained therein have effect only within the block (they're local, not global options). Start with the "path" name. It's somewhat confusing that rsync uses the term "path" -- as it's not necessarily a full pathname. It serves as an "rsync area nickname" of sorts. It's a short, easy to remember (and type!) name that you assign to a try filesystem path with all the options you specify. Here are the things you need to set up first and foremost:

* path - this is the actual filesystem path to where the files are rsync'ed from and/or to.

* comment - a short, descriptive explanation of what and where the path points to for listings.

* auth users - you really should put this in to restrict access to only a pre-defined user that you specify in the following secrets file - does not have to be a valid system user.

* secrets file - the file containing plaintext key/value pairs of usernames and passwords.

One thing you should seriously consider is the "hosts allow" and "hosts deny" options for your path. Enter the IPs or hostnames that you wish to specifically allow or deny! If you don't do this, or at least use the "auth users" option, then basically that area of your filesystem is wide open to the world by anyone using rsync! Something I seriously think you should avoid...

Check the rsyncd.conf man page with "man rsyncd.conf" and read it very carefully where security options are concerned. You don't want just anyone to come in and rsync up an empty directory with the "--delete" option, now do you?

The other options are all explained in the man page for rsyncd.conf. Basically, the above options specify that the files are chmod'ed to uid/gid, the filesystem path is read/write and that the rsync path shows up in rsync listings. The rsync secrets file I keep in /etc/ along with the configuration and motd files, and I prefix them with "rsyncd." to keep them together.

For that reason I have mounted a partition which holds the updated version of the file and sync with others from that partition.

Say my Gentoo partition is updated and I want to update Arch,Fedora and Debian with that...so I have mouted all of them in different designated dir under the / .

Here is how I can sync that perticular file :


bhaskar@bhaskar-laptop_06:55:11_Sun Oct 31:/srv/http/dokuwiki> sudo /usr/bin/rsync -avrP data/ /Fedora/var/www/html/dokuwiki/

I will update the output of it once it finished.With rsync the trailing slash (/) has a big role to play.It signifies that you want to copy all the contents of that dir instead of the dir.Without the trailing slash rsync will copy the entire directory.Now some explanation about the flags I have passed with the rsync. Here is the meaning of those;


a ------> It says that in the format of archive

v -------> verbose mode

r --------> recursive mode

P ---------> progress mode

It has many other useful options with deal with.Kindly look into the man pages for more details.But when you sync over the network you must use it over the ssh so the tunnel get secured during transfer.It has "-e" option which will allow you to pass an ssh option with it.

Resources:
1) http://troy.jdmz.net/rsync/index.html

2) http://www.netbits.us/docs/stunnel_rsync.html

3) http://www.linux-mag.com/id/7888/1/
Hope this will help.

Cheers!
Bhaskar

DokuWiki : An opensource wiki to maintain information

2010-10-14T16:48:00.008+05:30

In this article I will show you how you can install and use dokuwiki to keep your information in formatted manner.The biggest thing attract me that it uses flat file or plain text file to store information then backend database.So if you want to distribute the that file across different partition to get the same doc.Whereas in the corporate there should be separate dokuwiki server to maintain all the information.

Get the software:


bhaskar@bhaskar-laptop_16:24:53_Thu Oct 14:~/Documents> sudo yum install dokuwiki
[sudo] password for bhaskar:
Loaded plugins: presto, refresh-packagekit
google-chrome                                                                                                                         |  951 B     00:00
google-chrome/primary                                                                                                                 | 3.1 kB     00:00
google-chrome                                                                                                                                            5/5
openvz-kernel-rhel5                                                                                                                   |  951 B     00:00
openvz-utils                                                                                                                          |  951 B     00:00
rpmfusion-free-updates                                                                                                                | 2.8 kB     00:00
updates/metalink                                                                                                                      | 3.3 kB     00:00
updates                                                                                                                               | 4.7 kB     00:01
updates/primary_db                                                                                                                    | 5.0 MB     05:42
updates-source/metalink                                                                                                               | 3.3 kB     00:00
updates-source                                                                                                                        | 3.3 kB     00:00
Setting up Install Process
Package dokuwiki-0-0.4.20091225.c.fc12.noarch already installed and latest version
Nothing to do

So it says I already have it and yes I had it long time back.Lets check out:


bhaskar@bhaskar-laptop_17:07:28_Thu Oct 14:~/Documents> sudo rpm -qi dokuwiki
[sudo] password for bhaskar:
Name        : dokuwiki                     Relocations: (not relocatable)
Version     : 0                                 Vendor: Fedora Project
Release     : 0.4.20091225.c.fc12           Build Date: Tue 19 Jan 2010 04:23:45 PM IST
Install Date: Thu 23 Sep 2010 03:51:04 PM IST      Build Host: x86-04.phx2.fedoraproject.org
Group       : Applications/Internet         Source RPM: dokuwiki-0-0.4.20091225.c.fc12.src.rpm
Size        : 6977076                          License: GPLv2
Signature   : RSA/8, Tue 19 Jan 2010 04:53:04 PM IST, Key ID 9d1cc34857bbccba
Packager    : Fedora Project
URL         : http://www.dokuwiki.org/dokuwiki
Summary     : Standards compliant simple to use wiki
Description :
DokuWiki is a standards compliant, simple to use Wiki, mainly aimed at creating
documentation of any kind. It has a simple but powerful syntax which makes sure
the datafiles remain readable outside the Wiki and eases the creation of
structured texts.

All data is stored in plain text files no database is required.

Lets find out the file that installed by this software:



/etc/dokuwiki
/etc/dokuwiki/acl.auth.php
/etc/dokuwiki/acronyms.conf
/etc/dokuwiki/dokuwiki.php
/etc/dokuwiki/entities.conf
/etc/dokuwiki/interwiki.conf
/etc/dokuwiki/license.php
/etc/dokuwiki/local.php
/etc/dokuwiki/mediameta.php
/etc/dokuwiki/mime.conf
/etc/dokuwiki/msg
/etc/dokuwiki/scheme.conf
/etc/dokuwiki/smileys.conf
/etc/dokuwiki/users.auth.php
/etc/dokuwiki/wordblock.conf
/etc/dokuwiki/words.aspell
/etc/httpd/conf.d/dokuwiki.conf
/usr/share/doc/dokuwiki-0
/usr/share/doc/dokuwiki-0/COPYING
/usr/share/doc/dokuwiki-0/README
/usr/share/doc/dokuwiki-0/VERSION
/usr/share/doc/dokuwiki-0/mysql.conf.php.example
/usr/share/dokuwiki
/usr/share/dokuwiki/bin/dwpage.php
/usr/share/dokuwiki/bin/indexer.php
/usr/share/dokuwiki/bin/wantedpages.php
/usr/share/dokuwiki/conf
/usr/share/dokuwiki/doku.php
/usr/share/dokuwiki/feed.php
/usr/share/dokuwiki/inc
/usr/share/dokuwiki/inc/DifferenceEngine.php
/usr/share/dokuwiki/inc/FeedParser.php
/usr/share/dokuwiki/inc/HTTPClient.php
/usr/share/dokuwiki/inc/IXR_Library.php
/usr/share/dokuwiki/inc/JSON.php
/usr/share/dokuwiki/inc/JpegMeta.php
/usr/share/dokuwiki/inc/SimplePie.php
/usr/share/dokuwiki/inc/TarLib.class.php
/usr/share/dokuwiki/inc/ZipLib.class.php
/usr/share/dokuwiki/inc/actions.php
/usr/share/dokuwiki/inc/adLDAP.php
/usr/share/dokuwiki/inc/auth
/usr/share/dokuwiki/inc/auth.php
/usr/share/dokuwiki/inc/auth/ad.class.php
/usr/share/dokuwiki/inc/auth/basic.class.php
/usr/share/dokuwiki/inc/auth/ldap.class.php
/usr/share/dokuwiki/inc/auth/mysql.class.php
/usr/share/dokuwiki/inc/auth/pgsql.class.php
/usr/share/dokuwiki/inc/auth/plain.class.php
/usr/share/dokuwiki/inc/blowfish.php
/usr/share/dokuwiki/inc/cache.php
/usr/share/dokuwiki/inc/changelog.php
/usr/share/dokuwiki/inc/cliopts.php
/usr/share/dokuwiki/inc/common.php
/usr/share/dokuwiki/inc/confutils.php
/usr/share/dokuwiki/inc/events.php
/usr/share/dokuwiki/inc/feedcreator.class.php
/usr/share/dokuwiki/inc/form.php
/usr/share/dokuwiki/inc/fulltext.php
/usr/share/dokuwiki/inc/html.php
/usr/share/dokuwiki/inc/httputils.php
/usr/share/dokuwiki/inc/indexer.php
/usr/share/dokuwiki/inc/infoutils.php
/usr/share/dokuwiki/inc/init.php
/usr/share/dokuwiki/inc/io.php
/usr/share/dokuwiki/inc/lang
/usr/share/dokuwiki/inc/lang/af
/usr/share/dokuwiki/inc/lang/af/lang.php
/usr/share/dokuwiki/inc/lang/ar
/usr/share/dokuwiki/inc/lang/ar/admin.txt
/usr/share/dokuwiki/inc/lang/ar/backlinks.txt
/usr/share/dokuwiki/inc/lang/ar/conflict.txt
/usr/share/dokuwiki/inc/lang/ar/denied.txt
/usr/share/dokuwiki/inc/lang/ar/diff.txt
/usr/share/dokuwiki/inc/lang/ar/draft.txt
/usr/share/dokuwiki/inc/lang/ar/edit.txt
/usr/share/dokuwiki/inc/lang/ar/editrev.txt
/usr/share/dokuwiki/inc/lang/ar/index.txt
/usr/share/dokuwiki/inc/lang/ar/lang.php
/usr/share/dokuwiki/inc/lang/ar/locked.txt
/usr/share/dokuwiki/inc/lang/ar/login.txt
/usr/share/dokuwiki/inc/lang/ar/mailtext.txt
/usr/share/dokuwiki/inc/lang/ar/newpage.txt
/usr/share/dokuwiki/inc/lang/ar/norev.txt
/usr/share/dokuwiki/inc/lang/ar/password.txt
/usr/share/dokuwiki/inc/lang/ar/preview.txt
/usr/share/dokuwiki/inc/lang/ar/pwconfirm.txt
/usr/share/dokuwiki/inc/lang/ar/read.txt
/usr/share/dokuwiki/inc/lang/ar/recent.txt
/usr/share/dokuwiki/inc/lang/ar/register.txt
/usr/share/dokuwiki/inc/lang/ar/resendpwd.txt
/usr/share/dokuwiki/inc/lang/ar/revisions.txt
/usr/share/dokuwiki/inc/lang/ar/searchpage.txt
/usr/share/dokuwiki/inc/lang/ar/showrev.txt
/usr/share/dokuwiki/inc/lang/ar/stopwords.txt
/usr/share/dokuwiki/inc/lang/ar/subscribermail.txt
/usr/share/dokuwiki/inc/lang/ar/updateprofile.txt
/usr/share/dokuwiki/inc/lang/bg
/usr/share/dokuwiki/inc/lang/bg/admin.txt
/usr/share/dokuwiki/inc/lang/bg/adminplugins.txt
/usr/share/dokuwiki/inc/lang/bg/backlinks.txt
/usr/share/dokuwiki/inc/lang/bg/conflict.txt
/usr/share/dokuwiki/inc/lang/bg/denied.txt
/usr/share/dokuwiki/inc/lang/bg/diff.txt
/usr/share/dokuwiki/inc/lang/bg/draft.txt
/usr/share/dokuwiki/inc/lang/bg/edit.txt
/usr/share/dokuwiki/inc/lang/bg/editrev.txt
/usr/share/dokuwiki/inc/lang/bg/index.txt
/usr/share/dokuwiki/inc/lang/bg/install.html
/usr/share/dokuwiki/inc/lang/bg/lang.php
/usr/share/dokuwiki/inc/lang/bg/locked.txt
/usr/share/dokuwiki/inc/lang/bg/login.txt
/usr/share/dokuwiki/inc/lang/bg/mailtext.txt
/usr/share/dokuwiki/inc/lang/bg/newpage.txt
/usr/share/dokuwiki/inc/lang/bg/norev.txt
/usr/share/dokuwiki/inc/lang/bg/password.txt
/usr/share/dokuwiki/inc/lang/bg/preview.txt
/usr/share/dokuwiki/inc/lang/bg/pwconfirm.txt
/usr/share/dokuwiki/inc/lang/bg/read.txt

.......output snipped for clarity

Hell lot of files get installed by the software.Next move on to installation of this software.We must have the top tree in the web space scope to get access through the browser.



bhaskar@bhaskar-laptop_17:20:58_Thu Oct 14:~/Documents> ls -al /var/www/html/dokuwiki/
total 44
drwxr-xr-x. 6 root root  4096 2010-09-23 18:08 .
drwxr-xr-x. 5 root root  4096 2010-09-24 18:15 ..
drwxr-xr-x. 2 root root  4096 2010-09-23 15:50 bin
drwxr-xr-x. 2 root root  4096 2010-09-23 18:10 conf
-rw-r--r--. 1 root root  2258 2010-09-23 16:01 doku.php
-rw-r--r--. 1 root root 11725 2010-01-17 16:05 feed.php
drwxr-xr-x. 5 root root  4096 2010-09-23 15:50 inc
-rw-r--r--. 1 root root   185 2010-09-23 16:09 index.php
drwxr-xr-x. 9 root root  4096 2010-09-23 15:51 lib

Now next job is go to the browser and invoke


http://localhost/dokuwiki/install.php

Now a bit of file permission issue which might raised in the time or after the installation.Here is some point stright out of the dokuwiki site:

Permissions for a file are dependent of the file's owner and group and the user who tries to access the file
There are permissions for read, write and execute
Each UNIX process runs with the permissions of an OS user and his groups
The web server is a UNIX process
PHP usually runs as part of the web server
DokuWiki will run with the permissions of the PHP processor
DokuWiki needs read, write and execute permissions for directories it needs to create files in
DokuWiki needs read and write permissions for files it needs to write to
DokuWiki needs read only permissions for files and directories it doesn't need to write to

For more details on the permission setting see here .

Now once you are up and running with proper setting of php(yes,dokuwiki depend on php and should integrated with a web server.In out case we use Apache)

But until you configure your web server properly you won't be able to get the proper thing about this software. So let me share the Apache config related to this software:


1 # dokuwiki
 2 # Standards compliant simple to use wiki
 3 # 0
 4 #
 5 Alias /dokuwiki /var/www/html/dokuwiki
 6 
 7         Options +FollowSymLinks
 8         Order Allow,Deny
 9         Allow from 127.0.0.1 ::1
10 
11 
12         Order Deny,Allow
13         Deny from all
14 
15 
16         Order Deny,Allow
17         Deny from all
18 
19 
20         ## no access to the fla directory
21         Order allow,deny
22         Deny from all
23 
24 
25         Order Deny,Allow
26         Deny from all
27 
~

So name it as dokuwiki.conf and put it in the /etc/apache| httpd/conf.d/

Restart the Apache to and go to the browser to get the start page by visiting the url mentioned above.

The dokuwiki file structure under the /etc looks like below:



bhaskar@bhaskar-laptop_17:37:34_Thu Oct 14:/etc/dokuwiki> ls
acl.auth.php   dokuwiki.php   interwiki.conf  local.php      mime.conf  scheme.conf   users.auth.php  words.aspell
acronyms.conf  entities.conf  license.php     mediameta.php  msg        smileys.conf  wordblock.conf

Here it looks like on my system as I have created many pages with documentation,

Dokuwiki :

Now it is blessed with ACL(Access Control List),so you can tighten the grip on web space file permission.



bhaskar@bhaskar-laptop_17:37:34_Thu Oct 14:/etc/dokuwiki> sudo getfacl /var/www/html/dokuwiki/
[sudo] password for bhaskar: 
getfacl: Removing leading '/' from absolute path names
# file: var/www/html/dokuwiki/
# owner: root
# group: root
user::rwx
group::r-x
other::r-x

Now the files might have different permission for your case.

To create a page you have click on the start hyperlink and it will provide you an empty page. On that page you have to click on the "create page" button to start working on it.

Dokuwiki has it's own syntax to work with and is very easy to implement.Kindly glean over it's syntax page for details.

Hope this will give you a fair idea how it works.If possible I might update this page later time with more details.

Cheers!
Bhaskar

Open Source Software Licenses

2010-10-06T08:07:00.007+05:30

In this article we are going to talk about the open system/open source software licenses.As most of you are aware(if not please read and understand)how those licenses intend to do then apply them as you like.So lets meet those licenses that made an impact on open source development.Being an GNU/Linux consultant my one of the prime job to explain the licensing issue to my clients so they can understand what they adopt into their infrastructure.And as my second role as an GNU/Linux administrator I am very curious about the licensing factor to implements something into the production base.So what I will suggest please give yourself sometime and go through the below mentioned licenses to accustomed yourself better for deployment.

Before we start one must know that Linux kernel is abide with GPL v.2 ,means all the codes are released under this license.

Free Document License:

GNU Free Documentation License
Version 1.2, November 2002

Copyright (C) 2000,2001,2002 Free Software Foundation, Inc.
51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.

0. PREAMBLE

The purpose of this License is to make a manual, textbook, or other
functional and useful document "free" in the sense of freedom: to
assure everyone the effective freedom to copy and redistribute it,
with or without modifying it, either commercially or noncommercially.
Secondarily, this License preserves for the author and publisher a way
to get credit for their work, while not being considered responsible
for modifications made by others.

This License is a kind of "copyleft", which means that derivative
works of the document must themselves be free in the same sense. It
complements the GNU General Public License, which is a copyleft
license designed for free software.

We have designed this License in order to use it for manuals for free
software, because free software needs free documentation: a free
program should come with manuals providing the same freedoms that the
software does. But this License is not limited to software manuals;
it can be used for any textual work, regardless of subject matter or
whether it is published as a printed book. We recommend this License
principally for works whose purpose is instruction or reference.

1. APPLICABILITY AND DEFINITIONS

This License applies to any manual or other work, in any medium, that
contains a notice placed by the copyright holder saying it can be
distributed under the terms of this License. Such a notice grants a
world-wide, royalty-free license, unlimited in duration, to use that
work under the conditions stated herein. The "Document", below,
refers to any such manual or work. Any member of the public is a
licensee, and is addressed as "you". You accept the license if you
copy, modify or distribute the work in a way requiring permission
under copyright law.

A "Modified Version" of the Document means any work containing the
Document or a portion of it, either copied verbatim, or with
modifications and/or translated into another language.

A "Secondary Section" is a named appendix or a front-matter section of
the Document that deals exclusively with the relationship of the
publishers or authors of the Document to the Document's overall subject
(or to related matters) and contains nothing that could fall directly
within that overall subject. (Thus, if the Document is in part a
textbook of mathematics, a Secondary Section may not explain any
mathematics.) The relationship could be a matter of historical
connection with the subject or with related matters, or of legal,
commercial, philosophical, ethical or political position regarding
them.

The "Invariant Sections" are certain Secondary Sections whose titles
are designated, as being those of Invariant Sections, in the notice
that says that the Document is released under this License. If a
section does not fit the above definition of Secondary then it is not
allowed to be designated as Invariant. The Document may contain zero
Invariant Sections. If the Document does not identify any Invariant
Sections then there are none.

The "Cover Texts" are certain short passages of text that are listed,
as Front-Cover Texts or Back-Cover Texts, in the notice that says that
the Document is released under this License. A Front-Cover Text may
be at most 5 words, and a Back-Cover Text may be at most 25 words.

A "Transparent" copy of the Document means a machine-readable copy,
represented in a format whose specification is available to the
general public, that is suitable for revising the document
straightforwardly with generic text editors or (for images composed of
pixels) generic paint programs or (for drawings) some widely available
drawing editor, and that is suitable for input to text formatters or
for automatic translation to a variety of formats suitable for input
to text formatters. A copy made in an otherwise Transparent file
format whose markup, or absence of markup, has been arranged to thwart
or discourage subsequent modification by readers is not Transparent.
An image format is not Transparent if used for any substantial amount
of text. A copy that is not "Transparent" is called "Opaque".

Examples of suitable formats for Transparent copies include plain
ASCII without markup, Texinfo input format, LaTeX input format, SGML
or XML using a publicly available DTD, and standard-conforming simple
HTML, PostScript or PDF designed for human modification. Examples of
transparent image formats include PNG, XCF and JPG. Opaque formats
include proprietary formats that can be read and edited only by
proprietary word processors, SGML or XML for which the DTD and/or
processing tools are not generally available, and the
machine-generated HTML, PostScript or PDF produced by some word
processors for output purposes only.

The "Title Page" means, for a printed book, the title page itself,
plus such following pages as are needed to hold, legibly, the material
this License requires to appear in the title page. For works in
formats which do not have any title page as such, "Title Page" means
the text near the most prominent appearance of the work's title,
preceding the beginning of the body of the text.

A section "Entitled XYZ" means a named subunit of the Document whose
title either is precisely XYZ or contains XYZ in parentheses following
text that translates XYZ in another language. (Here XYZ stands for a
specific section name mentioned below, such as "Acknowledgements",
"Dedications", "Endorsements", or "History".) To "Preserve the Title"
of such a section when you modify the Document means that it remains a
section "Entitled XYZ" according to this definition.

The Document may include Warranty Disclaimers next to the notice which
states that this License applies to the Document. These Warranty
Disclaimers are considered to be included by reference in this
License, but only as regards disclaiming warranties: any other
implication that these Warranty Disclaimers may have is void and has
no effect on the meaning of this License.

2. VERBATIM COPYING

You may copy and distribute the Document in any medium, either
commercially or noncommercially, provided that this License, the
copyright notices, and the license notice saying this License applies
to the Document are reproduced in all copies, and that you add no other
conditions whatsoever to those of this License. You may not use
technical measures to obstruct or control the reading or further
copying of the copies you make or distribute. However, you may accept
compensation in exchange for copies. If you distribute a large enough
number of copies you must also follow the conditions in section 3.

You may also lend copies, under the same conditions stated above, and
you may publicly display copies.

3. COPYING IN QUANTITY

If you publish printed copies (or copies in media that commonly have
printed covers) of the Document, numbering more than 100, and the
Document's license notice requires Cover Texts, you must enclose the
copies in covers that carry, clearly and legibly, all these Cover
Texts: Front-Cover Texts on the front cover, and Back-Cover Texts on
the back cover. Both covers must also clearly and legibly identify
you as the publisher of these copies. The front cover must present
the full title with all words of the title equally prominent and
visible. You may add other material on the covers in addition.
Copying with changes limited to the covers, as long as they preserve
the title of the Document and satisfy these conditions, can be treated
as verbatim copying in other respects.

If the required texts for either cover are too voluminous to fit
legibly, you should put the first ones listed (as many as fit
reasonably) on the actual cover, and continue the rest onto adjacent
pages.

If you publish or distribute Opaque copies of the Document numbering
more than 100, you must either include a machine-readable Transparent
copy along with each Opaque copy, or state in or with each Opaque copy
a computer-network location from which the general network-using
public has access to download using public-standard network protocols
a complete Transparent copy of the Document, free of added material.
If you use the latter option, you must take reasonably prudent steps,
when you begin distribution of Opaque copies in quantity, to ensure
that this Transparent copy will remain thus accessible at the stated
location until at least one year after the last time you distribute an
Opaque copy (directly or through your agents or retailers) of that
edition to the public.

It is requested, but not required, that you contact the authors of the
Document well before redistributing any large number of copies, to give
them a chance to provide you with an updated version of the Document.

4. MODIFICATIONS

You may copy and distribute a Modified Version of the Document under
the conditions of sections 2 and 3 above, provided that you release
the Modified Version under precisely this License, with the Modified
Version filling the role of the Document, thus licensing distribution
and modification of the Modified Version to whoever possesses a copy
of it. In addition, you must do these things in the Modified Version:

A. Use in the Title Page (and on the covers, if any) a title distinct
from that of the Document, and from those of previous versions
(which should, if there were any, be listed in the History section
of the Document). You may use the same title as a previous version
if the original publisher of that version gives permission.
B. List on the Title Page, as authors, one or more persons or entities
responsible for authorship of the modifications in the Modified
Version, together with at least five of the principal authors of the
Document (all of its principal authors, if it has fewer than five),
unless they release you from this requirement.
C. State on the Title page the name of the publisher of the
Modified Version, as the publisher.
D. Preserve all the copyright notices of the Document.
E. Add an appropriate copyright notice for your modifications
adjacent to the other copyright notices.
F. Include, immediately after the copyright notices, a license notice
giving the public permission to use the Modified Version under the
terms of this License, in the form shown in the Addendum below.
G. Preserve in that license notice the full lists of Invariant Sections
and required Cover Texts given in the Document's license notice.
H. Include an unaltered copy of this License.
I. Preserve the section Entitled "History", Preserve its Title, and add
to it an item stating at least the title, year, new authors, and
publisher of the Modified Version as given on the Title Page. If
there is no section Entitled "History" in the Document, create one
stating the title, year, authors, and publisher of the Document as
given on its Title Page, then add an item describing the Modified
Version as stated in the previous sentence.
J. Preserve the network location, if any, given in the Document for
public access to a Transparent copy of the Document, and likewise
the network locations given in the Document for previous versions
it was based on. These may be placed in the "History" section.
You may omit a network location for a work that was published at
least four years before the Document itself, or if the original
publisher of the version it refers to gives permission.
K. For any section Entitled "Acknowledgements" or "Dedications",
Preserve the Title of the section, and preserve in the section all
the substance and tone of each of the contributor acknowledgements
and/or dedications given therein.
L. Preserve all the Invariant Sections of the Document,
unaltered in their text and in their titles. Section numbers
or the equivalent are not considered part of the section titles.
M. Delete any section Entitled "Endorsements". Such a section
may not be included in the Modified Version.
N. Do not retitle any existing section to be Entitled "Endorsements"
or to conflict in title with any Invariant Section.
O. Preserve any Warranty Disclaimers.

If the Modified Version includes new front-matter sections or
appendices that qualify as Secondary Sections and contain no material
copied from the Document, you may at your option designate some or all
of these sections as invariant. To do this, add their titles to the
list of Invariant Sections in the Modified Version's license notice.
These titles must be distinct from any other section titles.

You may add a section Entitled "Endorsements", provided it contains
nothing but endorsements of your Modified Version by various
parties--for example, statements of peer review or that the text has
been approved by an organization as the authoritative definition of a
standard.

You may add a passage of up to five words as a Front-Cover Text, and a
passage of up to 25 words as a Back-Cover Text, to the end of the list
of Cover Texts in the Modified Version. Only one passage of
Front-Cover Text and one of Back-Cover Text may be added by (or
through arrangements made by) any one entity. If the Document already
includes a cover text for the same cover, previously added by you or
by arrangement made by the same entity you are acting on behalf of,
you may not add another; but you may replace the old one, on explicit
permission from the previous publisher that added the old one.

The author(s) and publisher(s) of the Document do not by this License
give permission to use their names for publicity for or to assert or
imply endorsement of any Modified Version.

5. COMBINING DOCUMENTS

You may combine the Document with other documents released under this
License, under the terms defined in section 4 above for modified
versions, provided that you include in the combination all of the
Invariant Sections of all of the original documents, unmodified, and
list them all as Invariant Sections of your combined work in its
license notice, and that you preserve all their Warranty Disclaimers.

The combined work need only contain one copy of this License, and
multiple identical Invariant Sections may be replaced with a single
copy. If there are multiple Invariant Sections with the same name but
different contents, make the title of each such section unique by
adding at the end of it, in parentheses, the name of the original
author or publisher of that section if known, or else a unique number.
Make the same adjustment to the section titles in the list of
Invariant Sections in the license notice of the combined work.

In the combination, you must combine any sections Entitled "History"
in the various original documents, forming one section Entitled
"History"; likewise combine any sections Entitled "Acknowledgements",
and any sections Entitled "Dedications". You must delete all sections
Entitled "Endorsements".

6. COLLECTIONS OF DOCUMENTS

You may make a collection consisting of the Document and other documents
released under this License, and replace the individual copies of this
License in the various documents with a single copy that is included in
the collection, provided that you follow the rules of this License for
verbatim copying of each of the documents in all other respects.

You may extract a single document from such a collection, and distribute
it individually under this License, provided you insert a copy of this
License into the extracted document, and follow this License in all
other respects regarding verbatim copying of that document.

7. AGGREGATION WITH INDEPENDENT WORKS

A compilation of the Document or its derivatives with other separate
and independent documents or works, in or on a volume of a storage or
distribution medium, is called an "aggregate" if the copyright
resulting from the compilation is not used to limit the legal rights
of the compilation's users beyond what the individual works permit.
When the Document is included in an aggregate, this License does not
apply to the other works in the aggregate which are not themselves
derivative works of the Document.

If the Cover Text requirement of section 3 is applicable to these
copies of the Document, then if the Document is less than one half of
the entire aggregate, the Document's Cover Texts may be placed on
covers that bracket the Document within the aggregate, or the
electronic equivalent of covers if the Document is in electronic form.
Otherwise they must appear on printed covers that bracket the whole
aggregate.

8. TRANSLATION

Translation is considered a kind of modification, so you may
distribute translations of the Document under the terms of section 4.
Replacing Invariant Sections with translations requires special
permission from their copyright holders, but you may include
translations of some or all Invariant Sections in addition to the
original versions of these Invariant Sections. You may include a
translation of this License, and all the license notices in the
Document, and any Warranty Disclaimers, provided that you also include
the original English version of this License and the original versions
of those notices and disclaimers. In case of a disagreement between
the translation and the original version of this License or a notice
or disclaimer, the original version will prevail.

If a section in the Document is Entitled "Acknowledgements",
"Dedications", or "History", the requirement (section 4) to Preserve
its Title (section 1) will typically require changing the actual
title.

9. TERMINATION

You may not copy, modify, sublicense, or distribute the Document except
as expressly provided for under this License. Any other attempt to
copy, modify, sublicense or distribute the Document is void, and will
automatically terminate your rights under this License. However,
parties who have received copies, or rights, from you under this
License will not have their licenses terminated so long as such
parties remain in full compliance.

10. FUTURE REVISIONS OF THIS LICENSE

The Free Software Foundation may publish new, revised versions
of the GNU Free Documentation License from time to time. Such new
versions will be similar in spirit to the present version, but may
differ in detail to address new problems or concerns. See
http://www.gnu.org/copyleft/.

Each version of the License is given a distinguishing version number.
If the Document specifies that a particular numbered version of this
License "or any later version" applies to it, you have the option of
following the terms and conditions either of that specified version or
of any later version that has been published (not as a draft) by the
Free Software Foundation. If the Document does not specify a version
number of this License, you may choose any version ever published (not
as a draft) by the Free Software Foundation.

ADDENDUM: How to use this License for your documents

To use this License in a document you have written, include a copy of
the License in the document and put the following copyright and
license notices just after the title page:

Copyright (c) YEAR YOUR NAME.
Permission is granted to copy, distribute and/or modify this document
under the terms of the GNU Free Documentation License, Version 1.2
or any later version published by the Free Software Foundation;
with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts.
A copy of the license is included in the section entitled "GNU
Free Documentation License".

If you have Invariant Sections, Front-Cover Texts and Back-Cover Texts,
replace the "with...Texts." line with this:

with the Invariant Sections being LIST THEIR TITLES, with the
Front-Cover Texts being LIST, and with the Back-Cover Texts being LIST.

If you have Invariant Sections without Cover Texts, or some other
combination of the three, merge those two alternatives to suit the
situation.

If your document contains nontrivial examples of program code, we
recommend releasing these examples in parallel under your choice of
free software license, such as the GNU General Public License,to permit their use in free software.

GPL a.k.a General Public License:

GNU GENERAL PUBLIC LICENSE
Version 3, 29 June 2007

Copyright (C) 2007 Free Software Foundation, Inc. «http://fsf.org/»
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.

Preamble

The GNU General Public License is a free, copyleft license for
software and other kinds of works.

The licenses for most software and other practical works are designed
to take away your freedom to share and change the works. By contrast,
the GNU General Public License is intended to guarantee your freedom to
share and change all versions of a program--to make sure it remains free
software for all its users. We, the Free Software Foundation, use the
GNU General Public License for most of our software; it applies also to
any other work released this way by its authors. You can apply it to
your programs, too.

When we speak of free software, we are referring to freedom, not
price. Our General Public Licenses are designed to make sure that you
have the freedom to distribute copies of free software (and charge for
them if you wish), that you receive source code or can get it if you
want it, that you can change the software or use pieces of it in new
free programs, and that you know you can do these things.

To protect your rights, we need to prevent others from denying you
these rights or asking you to surrender the rights. Therefore, you have
certain responsibilities if you distribute copies of the software, or if
you modify it: responsibilities to respect the freedom of others.

For example, if you distribute copies of such a program, whether
gratis or for a fee, you must pass on to the recipients the same
freedoms that you received. You must make sure that they, too, receive
or can get the source code. And you must show them these terms so they
know their rights.

Developers that use the GNU GPL protect your rights with two steps:
(1) assert copyright on the software, and (2) offer you this License
giving you legal permission to copy, distribute and/or modify it.

For the developers' and authors' protection, the GPL clearly explains
that there is no warranty for this free software. For both users' and
authors' sake, the GPL requires that modified versions be marked as
changed, so that their problems will not be attributed erroneously to
authors of previous versions.

Some devices are designed to deny users access to install or run
modified versions of the software inside them, although the manufacturer
can do so. This is fundamentally incompatible with the aim of
protecting users' freedom to change the software. The systematic
pattern of such abuse occurs in the area of products for individuals to
use, which is precisely where it is most unacceptable. Therefore, we
have designed this version of the GPL to prohibit the practice for those
products. If such problems arise substantially in other domains, we
stand ready to extend this provision to those domains in future versions
of the GPL, as needed to protect the freedom of users.

Finally, every program is threatened constantly by software patents.
States should not allow patents to restrict development and use of
software on general-purpose computers, but in those that do, we wish to
avoid the special danger that patents applied to a free program could
make it effectively proprietary. To prevent this, the GPL assures that
patents cannot be used to render the program non-free.

The precise terms and conditions for copying, distribution and
modification follow.

TERMS AND CONDITIONS

0. Definitions.

"This License" refers to version 3 of the GNU General Public License.

"Copyright" also means copyright-like laws that apply to other kinds of
works, such as semiconductor masks.

"The Program" refers to any copyrightable work licensed under this
License. Each licensee is addressed as "you". "Licensees" and
"recipients" may be individuals or organizations.

To "modify" a work means to copy from or adapt all or part of the work
in a fashion requiring copyright permission, other than the making of an
exact copy. The resulting work is called a "modified version" of the
earlier work or a work "based on" the earlier work.

A "covered work" means either the unmodified Program or a work based
on the Program.

To "propagate" a work means to do anything with it that, without
permission, would make you directly or secondarily liable for
infringement under applicable copyright law, except executing it on a
computer or modifying a private copy. Propagation includes copying,
distribution (with or without modification), making available to the
public, and in some countries other activities as well.

To "convey" a work means any kind of propagation that enables other
parties to make or receive copies. Mere interaction with a user through
a computer network, with no transfer of a copy, is not conveying.

An interactive user interface displays "Appropriate Legal Notices"
to the extent that it includes a convenient and prominently visible
feature that (1) displays an appropriate copyright notice, and (2)
tells the user that there is no warranty for the work (except to the
extent that warranties are provided), that licensees may convey the
work under this License, and how to view a copy of this License. If
the interface presents a list of user commands or options, such as a
menu, a prominent item in the list meets this criterion.

1. Source Code.

The "source code" for a work means the preferred form of the work
for making modifications to it. "Object code" means any non-source
form of a work.

A "Standard Interface" means an interface that either is an official
standard defined by a recognized standards body, or, in the case of
interfaces specified for a particular programming language, one that
is widely used among developers working in that language.

The "System Libraries" of an executable work include anything, other
than the work as a whole, that (a) is included in the normal form of
packaging a Major Component, but which is not part of that Major
Component, and (b) serves only to enable use of the work with that
Major Component, or to implement a Standard Interface for which an
implementation is available to the public in source code form. A
"Major Component", in this context, means a major essential component
(kernel, window system, and so on) of the specific operating system
(if any) on which the executable work runs, or a compiler used to
produce the work, or an object code interpreter used to run it.

The "Corresponding Source" for a work in object code form means all
the source code needed to generate, install, and (for an executable
work) run the object code and to modify the work, including scripts to
control those activities. However, it does not include the work's
System Libraries, or general-purpose tools or generally available free
programs which are used unmodified in performing those activities but
which are not part of the work. For example, Corresponding Source
includes interface definition files associated with source files for
the work, and the source code for shared libraries and dynamically
linked subprograms that the work is specifically designed to require,
such as by intimate data communication or control flow between those
subprograms and other parts of the work.

The Corresponding Source need not include anything that users
can regenerate automatically from other parts of the Corresponding
Source.

The Corresponding Source for a work in source code form is that
same work.

2. Basic Permissions.

All rights granted under this License are granted for the term of
copyright on the Program, and are irrevocable provided the stated
conditions are met. This License explicitly affirms your unlimited
permission to run the unmodified Program. The output from running a
covered work is covered by this License only if the output, given its
content, constitutes a covered work. This License acknowledges your
rights of fair use or other equivalent, as provided by copyright law.

You may make, run and propagate covered works that you do not
convey, without conditions so long as your license otherwise remains
in force. You may convey covered works to others for the sole purpose
of having them make modifications exclusively for you, or provide you
with facilities for running those works, provided that you comply with
the terms of this License in conveying all material for which you do
not control copyright. Those thus making or running the covered works
for you must do so exclusively on your behalf, under your direction
and control, on terms that prohibit them from making any copies of
your copyrighted material outside their relationship with you.

Conveying under any other circumstances is permitted solely under
the conditions stated below. Sublicensing is not allowed; section 10
makes it unnecessary.

3. Protecting Users' Legal Rights From Anti-Circumvention Law.

No covered work shall be deemed part of an effective technological
measure under any applicable law fulfilling obligations under article
11 of the WIPO copyright treaty adopted on 20 December 1996, or
similar laws prohibiting or restricting circumvention of such
measures.

When you convey a covered work, you waive any legal power to forbid
circumvention of technological measures to the extent such circumvention
is effected by exercising rights under this License with respect to
the covered work, and you disclaim any intention to limit operation or
modification of the work as a means of enforcing, against the work's
users, your or third parties' legal rights to forbid circumvention of
technological measures.

4. Conveying Verbatim Copies.

You may convey verbatim copies of the Program's source code as you
receive it, in any medium, provided that you conspicuously and
appropriately publish on each copy an appropriate copyright notice;
keep intact all notices stating that this License and any
non-permissive terms added in accord with section 7 apply to the code;
keep intact all notices of the absence of any warranty; and give all
recipients a copy of this License along with the Program.

You may charge any price or no price for each copy that you convey,
and you may offer support or warranty protection for a fee.

5. Conveying Modified Source Versions.

You may convey a work based on the Program, or the modifications to
produce it from the Program, in the form of source code under the
terms of section 4, provided that you also meet all of these conditions:

a) The work must carry prominent notices stating that you modified
it, and giving a relevant date.

b) The work must carry prominent notices stating that it is
released under this License and any conditions added under section
7. This requirement modifies the requirement in section 4 to
"keep intact all notices".

c) You must license the entire work, as a whole, under this
License to anyone who comes into possession of a copy. This
License will therefore apply, along with any applicable section 7
additional terms, to the whole of the work, and all its parts,
regardless of how they are packaged. This License gives no
permission to license the work in any other way, but it does not
invalidate such permission if you have separately received it.

d) If the work has interactive user interfaces, each must display
Appropriate Legal Notices; however, if the Program has interactive
interfaces that do not display Appropriate Legal Notices, your
work need not make them do so.

A compilation of a covered work with other separate and independent
works, which are not by their nature extensions of the covered work,
and which are not combined with it such as to form a larger program,
in or on a volume of a storage or distribution medium, is called an
"aggregate" if the compilation and its resulting copyright are not
used to limit the access or legal rights of the compilation's users
beyond what the individual works permit. Inclusion of a covered work
in an aggregate does not cause this License to apply to the other
parts of the aggregate.

6. Conveying Non-Source Forms.

You may convey a covered work in object code form under the terms
of sections 4 and 5, provided that you also convey the
machine-readable Corresponding Source under the terms of this License,
in one of these ways:

a) Convey the object code in, or embodied in, a physical product
(including a physical distribution medium), accompanied by the
Corresponding Source fixed on a durable physical medium
customarily used for software interchange.

b) Convey the object code in, or embodied in, a physical product
(including a physical distribution medium), accompanied by a
written offer, valid for at least three years and valid for as
long as you offer spare parts or customer support for that product
model, to give anyone who possesses the object code either (1) a
copy of the Corresponding Source for all the software in the
product that is covered by this License, on a durable physical
medium customarily used for software interchange, for a price no
more than your reasonable cost of physically performing this
conveying of source, or (2) access to copy the
Corresponding Source from a network server at no charge.

c) Convey individual copies of the object code with a copy of the
written offer to provide the Corresponding Source. This
alternative is allowed only occasionally and noncommercially, and
only if you received the object code with such an offer, in accord
with subsection 6b.

d) Convey the object code by offering access from a designated
place (gratis or for a charge), and offer equivalent access to the
Corresponding Source in the same way through the same place at no
further charge. You need not require recipients to copy the
Corresponding Source along with the object code. If the place to
copy the object code is a network server, the Corresponding Source
may be on a different server (operated by you or a third party)
that supports equivalent copying facilities, provided you maintain
clear directions next to the object code saying where to find the
Corresponding Source. Regardless of what server hosts the
Corresponding Source, you remain obligated to ensure that it is
available for as long as needed to satisfy these requirements.

e) Convey the object code using peer-to-peer transmission, provided
you inform other peers where the object code and Corresponding
Source of the work are being offered to the general public at no
charge under subsection 6d.

A separable portion of the object code, whose source code is excluded
from the Corresponding Source as a System Library, need not be
included in conveying the object code work.

A "User Product" is either (1) a "consumer product", which means any
tangible personal property which is normally used for personal, family,
or household purposes, or (2) anything designed or sold for incorporation
into a dwelling. In determining whether a product is a consumer product,
doubtful cases shall be resolved in favor of coverage. For a particular
product received by a particular user, "normally used" refers to a
typical or common use of that class of product, regardless of the status
of the particular user or of the way in which the particular user
actually uses, or expects or is expected to use, the product. A product
is a consumer product regardless of whether the product has substantial
commercial, industrial or non-consumer uses, unless such uses represent
the only significant mode of use of the product.

"Installation Information" for a User Product means any methods,
procedures, authorization keys, or other information required to install
and execute modified versions of a covered work in that User Product from
a modified version of its Corresponding Source. The information must
suffice to ensure that the continued functioning of the modified object
code is in no case prevented or interfered with solely because
modification has been made.

If you convey an object code work under this section in, or with, or
specifically for use in, a User Product, and the conveying occurs as
part of a transaction in which the right of possession and use of the
User Product is transferred to the recipient in perpetuity or for a
fixed term (regardless of how the transaction is characterized), the
Corresponding Source conveyed under this section must be accompanied
by the Installation Information. But this requirement does not apply
if neither you nor any third party retains the ability to install
modified object code on the User Product (for example, the work has
been installed in ROM).

The requirement to provide Installation Information does not include a
requirement to continue to provide support service, warranty, or updates
for a work that has been modified or installed by the recipient, or for
the User Product in which it has been modified or installed. Access to a
network may be denied when the modification itself materially and
adversely affects the operation of the network or violates the rules and
protocols for communication across the network.

Corresponding Source conveyed, and Installation Information provided,
in accord with this section must be in a format that is publicly
documented (and with an implementation available to the public in
source code form), and must require no special password or key for
unpacking, reading or copying.

7. Additional Terms.

"Additional permissions" are terms that supplement the terms of this
License by making exceptions from one or more of its conditions.
Additional permissions that are applicable to the entire Program shall
be treated as though they were included in this License, to the extent
that they are valid under applicable law. If additional permissions
apply only to part of the Program, that part may be used separately
under those permissions, but the entire Program remains governed by
this License without regard to the additional permissions.

When you convey a copy of a covered work, you may at your option
remove any additional permissions from that copy, or from any part of
it. (Additional permissions may be written to require their own
removal in certain cases when you modify the work.) You may place
additional permissions on material, added by you to a covered work,
for which you have or can give appropriate copyright permission.

Notwithstanding any other provision of this License, for material you
add to a covered work, you may (if authorized by the copyright holders of
that material) supplement the terms of this License with terms:

a) Disclaiming warranty or limiting liability differently from the
terms of sections 15 and 16 of this License; or

b) Requiring preservation of specified reasonable legal notices or
author attributions in that material or in the Appropriate Legal
Notices displayed by works containing it; or

c) Prohibiting misrepresentation of the origin of that material, or
requiring that modified versions of such material be marked in
reasonable ways as different from the original version; or

d) Limiting the use for publicity purposes of names of licensors or
authors of the material; or

e) Declining to grant rights under trademark law for use of some
trade names, trademarks, or service marks; or

f) Requiring indemnification of licensors and authors of that
material by anyone who conveys the material (or modified versions of
it) with contractual assumptions of liability to the recipient, for
any liability that these contractual assumptions directly impose on
those licensors and authors.

All other non-permissive additional terms are considered "further
restrictions" within the meaning of section 10. If the Program as you
received it, or any part of it, contains a notice stating that it is
governed by this License along with a term that is a further
restriction, you may remove that term. If a license document contains
a further restriction but permits relicensing or conveying under this
License, you may add to a covered work material governed by the terms
of that license document, provided that the further restriction does
not survive such relicensing or conveying.

If you add terms to a covered work in accord with this section, you
must place, in the relevant source files, a statement of the
additional terms that apply to those files, or a notice indicating
where to find the applicable terms.

Additional terms, permissive or non-permissive, may be stated in the
form of a separately written license, or stated as exceptions;
the above requirements apply either way.

8. Termination.

You may not propagate or modify a covered work except as expressly
provided under this License. Any attempt otherwise to propagate or
modify it is void, and will automatically terminate your rights under
this License (including any patent licenses granted under the third
paragraph of section 11).

However, if you cease all violation of this License, then your
license from a particular copyright holder is reinstated (a)
provisionally, unless and until the copyright holder explicitly and
finally terminates your license, and (b) permanently, if the copyright
holder fails to notify you of the violation by some reasonable means
prior to 60 days after the cessation.

Moreover, your license from a particular copyright holder is
reinstated permanently if the copyright holder notifies you of the
violation by some reasonable means, this is the first time you have
received notice of violation of this License (for any work) from that
copyright holder, and you cure the violation prior to 30 days after
your receipt of the notice.

Termination of your rights under this section does not terminate the
licenses of parties who have received copies or rights from you under
this License. If your rights have been terminated and not permanently
reinstated, you do not qualify to receive new licenses for the same
material under section 10.

9. Acceptance Not Required for Having Copies.

You are not required to accept this License in order to receive or
run a copy of the Program. Ancillary propagation of a covered work
occurring solely as a consequence of using peer-to-peer transmission
to receive a copy likewise does not require acceptance. However,
nothing other than this License grants you permission to propagate or
modify any covered work. These actions infringe copyright if you do
not accept this License. Therefore, by modifying or propagating a
covered work, you indicate your acceptance of this License to do so.

10. Automatic Licensing of Downstream Recipients.

Each time you convey a covered work, the recipient automatically
receives a license from the original licensors, to run, modify and
propagate that work, subject to this License. You are not responsible
for enforcing compliance by third parties with this License.

An "entity transaction" is a transaction transferring control of an
organization, or substantially all assets of one, or subdividing an
organization, or merging organizations. If propagation of a covered
work results from an entity transaction, each party to that
transaction who receives a copy of the work also receives whatever
licenses to the work the party's predecessor in interest had or could
give under the previous paragraph, plus a right to possession of the
Corresponding Source of the work from the predecessor in interest, if
the predecessor has it or can get it with reasonable efforts.

You may not impose any further restrictions on the exercise of the
rights granted or affirmed under this License. For example, you may
not impose a license fee, royalty, or other charge for exercise of
rights granted under this License, and you may not initiate litigation
(including a cross-claim or counterclaim in a lawsuit) alleging that
any patent claim is infringed by making, using, selling, offering for
sale, or importing the Program or any portion of it.

11. Patents.

A "contributor" is a copyright holder who authorizes use under this
License of the Program or a work on which the Program is based. The
work thus licensed is called the contributor's "contributor version".

A contributor's "essential patent claims" are all patent claims
owned or controlled by the contributor, whether already acquired or
hereafter acquired, that would be infringed by some manner, permitted
by this License, of making, using, or selling its contributor version,
but do not include claims that would be infringed only as a
consequence of further modification of the contributor version. For
purposes of this definition, "control" includes the right to grant
patent sublicenses in a manner consistent with the requirements of
this License.

Each contributor grants you a non-exclusive, worldwide, royalty-free
patent license under the contributor's essential patent claims, to
make, use, sell, offer for sale, import and otherwise run, modify and
propagate the contents of its contributor version.

In the following three paragraphs, a "patent license" is any express
agreement or commitment, however denominated, not to enforce a patent
(such as an express permission to practice a patent or covenant not to
sue for patent infringement). To "grant" such a patent license to a
party means to make such an agreement or commitment not to enforce a
patent against the party.

If you convey a covered work, knowingly relying on a patent license,
and the Corresponding Source of the work is not available for anyone
to copy, free of charge and under the terms of this License, through a
publicly available network server or other readily accessible means,
then you must either (1) cause the Corresponding Source to be so
available, or (2) arrange to deprive yourself of the benefit of the
patent license for this particular work, or (3) arrange, in a manner
consistent with the requirements of this License, to extend the patent
license to downstream recipients. "Knowingly relying" means you have
actual knowledge that, but for the patent license, your conveying the
covered work in a country, or your recipient's use of the covered work
in a country, would infringe one or more identifiable patents in that
country that you have reason to believe are valid.

If, pursuant to or in connection with a single transaction or
arrangement, you convey, or propagate by procuring conveyance of, a
covered work, and grant a patent license to some of the parties
receiving the covered work authorizing them to use, propagate, modify
or convey a specific copy of the covered work, then the patent license
you grant is automatically extended to all recipients of the covered
work and works based on it.

A patent license is "discriminatory" if it does not include within
the scope of its coverage, prohibits the exercise of, or is
conditioned on the non-exercise of one or more of the rights that are
specifically granted under this License. You may not convey a covered
work if you are a party to an arrangement with a third party that is
in the business of distributing software, under which you make payment
to the third party based on the extent of your activity of conveying
the work, and under which the third party grants, to any of the
parties who would receive the covered work from you, a discriminatory
patent license (a) in connection with copies of the covered work
conveyed by you (or copies made from those copies), or (b) primarily
for and in connection with specific products or compilations that
contain the covered work, unless you entered into that arrangement,
or that patent license was granted, prior to 28 March 2007.

Nothing in this License shall be construed as excluding or limiting
any implied license or other defenses to infringement that may
otherwise be available to you under applicable patent law.

12. No Surrender of Others' Freedom.

If conditions are imposed on you (whether by court order, agreement or
otherwise) that contradict the conditions of this License, they do not
excuse you from the conditions of this License. If you cannot convey a
covered work so as to satisfy simultaneously your obligations under this
License and any other pertinent obligations, then as a consequence you may
not convey it at all. For example, if you agree to terms that obligate you
to collect a royalty for further conveying from those to whom you convey
the Program, the only way you could satisfy both those terms and this
License would be to refrain entirely from conveying the Program.

13. Use with the GNU Affero General Public License.

Notwithstanding any other provision of this License, you have
permission to link or combine any covered work with a work licensed
under version 3 of the GNU Affero General Public License into a single
combined work, and to convey the resulting work. The terms of this
License will continue to apply to the part which is the covered work,
but the special requirements of the GNU Affero General Public License,
section 13, concerning interaction through a network will apply to the
combination as such.

14. Revised Versions of this License.

The Free Software Foundation may publish revised and/or new versions of
the GNU General Public License from time to time. Such new versions will
be similar in spirit to the present version, but may differ in detail to
address new problems or concerns.

Each version is given a distinguishing version number. If the
Program specifies that a certain numbered version of the GNU General
Public License "or any later version" applies to it, you have the
option of following the terms and conditions either of that numbered
version or of any later version published by the Free Software
Foundation. If the Program does not specify a version number of the
GNU General Public License, you may choose any version ever published
by the Free Software Foundation.

If the Program specifies that a proxy can decide which future
versions of the GNU General Public License can be used, that proxy's
public statement of acceptance of a version permanently authorizes you
to choose that version for the Program.

Later license versions may give you additional or different
permissions. However, no additional obligations are imposed on any
author or copyright holder as a result of your choosing to follow a
later version.

15. Disclaimer of Warranty.

THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

16. Limitation of Liability.

IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
SUCH DAMAGES.

17. Interpretation of Sections 15 and 16.

If the disclaimer of warranty and limitation of liability provided
above cannot be given local legal effect according to their terms,
reviewing courts shall apply local law that most closely approximates
an absolute waiver of all civil liability in connection with the
Program, unless a warranty or assumption of liability accompanies a
copy of the Program in return for a fee.

END OF TERMS AND CONDITIONS

How to Apply These Terms to Your New Programs

If you develop a new program, and you want it to be of the greatest
possible use to the public, the best way to achieve this is to make it
free software which everyone can redistribute and change under these terms.

To do so, attach the following notices to the program. It is safest
to attach them to the start of each source file to most effectively
state the exclusion of warranty; and each file should have at least
the "copyright" line and a pointer to where the full notice is found.

«one line to give the program's name and a brief idea of what it does.»
Copyright (C) «year» «name of author»

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program. If not, see «http://www.gnu.org/licenses/».

Also add information on how to contact you by electronic and paper mail.

If the program does terminal interaction, make it output a short
notice like this when it starts in an interactive mode:

«program» Copyright (C) «year» «name of author»
This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
This is free software, and you are welcome to redistribute it
under certain conditions; type `show c' for details.

The hypothetical commands `show w' and `show c' should show the appropriate
parts of the General Public License. Of course, your program's commands
might be different; for a GUI interface, you would use an "about box".

You should also get your employer (if you work as a programmer) or school,
if any, to sign a "copyright disclaimer" for the program, if necessary.
For more information on this, and how to apply and follow the GNU GPL, see
«http://www.gnu.org/licenses/».

The GNU General Public License does not permit incorporating your program
into proprietary programs. If your program is a subroutine library, you
may consider it more useful to permit linking proprietary applications with
the library. If this is what you want to do, use the GNU Lesser General
Public License instead of this License. But first, please read
«http://www.gnu.org/philosophy/why-not-lgpl.html»

LPGL a.k.a Lesser General Public License:

GNU LESSER GENERAL PUBLIC LICENSE
Version 3, 29 June 2007

Copyright (C) 2007 Free Software Foundation, Inc. «http://fsf.org/»
Everyone is permitted to copy and distribute verbatim copies
of this license document, but changing it is not allowed.

This version of the GNU Lesser General Public License incorporates
the terms and conditions of version 3 of the GNU General Public
License, supplemented by the additional permissions listed below.

0. Additional Definitions.

As used herein, "this License" refers to version 3 of the GNU Lesser
General Public License, and the "GNU GPL" refers to version 3 of the GNU
General Public License.

"The Library" refers to a covered work governed by this License,
other than an Application or a Combined Work as defined below.

An "Application" is any work that makes use of an interface provided
by the Library, but which is not otherwise based on the Library.
Defining a subclass of a class defined by the Library is deemed a mode
of using an interface provided by the Library.

A "Combined Work" is a work produced by combining or linking an
Application with the Library. The particular version of the Library
with which the Combined Work was made is also called the "Linked
Version".

The "Minimal Corresponding Source" for a Combined Work means the
Corresponding Source for the Combined Work, excluding any source code
for portions of the Combined Work that, considered in isolation, are
based on the Application, and not on the Linked Version.

The "Corresponding Application Code" for a Combined Work means the
object code and/or source code for the Application, including any data
and utility programs needed for reproducing the Combined Work from the
Application, but excluding the System Libraries of the Combined Work.

1. Exception to Section 3 of the GNU GPL.

You may convey a covered work under sections 3 and 4 of this License
without being bound by section 3 of the GNU GPL.

2. Conveying Modified Versions.

If you modify a copy of the Library, and, in your modifications, a
facility refers to a function or data to be supplied by an Application
that uses the facility (other than as an argument passed when the
facility is invoked), then you may convey a copy of the modified
version:

a) under this License, provided that you make a good faith effort to
ensure that, in the event an Application does not supply the
function or data, the facility still operates, and performs
whatever part of its purpose remains meaningful, or

b) under the GNU GPL, with none of the additional permissions of
this License applicable to that copy.

3. Object Code Incorporating Material from Library Header Files.

The object code form of an Application may incorporate material from
a header file that is part of the Library. You may convey such object
code under terms of your choice, provided that, if the incorporated
material is not limited to numerical parameters, data structure
layouts and accessors, or small macros, inline functions and templates
(ten or fewer lines in length), you do both of the following:

a) Give prominent notice with each copy of the object code that the
Library is used in it and that the Library and its use are
covered by this License.

b) Accompany the object code with a copy of the GNU GPL and this license
document.

4. Combined Works.

You may convey a Combined Work under terms of your choice that,
taken together, effectively do not restrict modification of the
portions of the Library contained in the Combined Work and reverse
engineering for debugging such modifications, if you also do each of
the following:

a) Give prominent notice with each copy of the Combined Work that
the Library is used in it and that the Library and its use are
covered by this License.

b) Accompany the Combined Work with a copy of the GNU GPL and this license
document.

c) For a Combined Work that displays copyright notices during
execution, include the copyright notice for the Library among
these notices, as well as a reference directing the user to the
copies of the GNU GPL and this license document.

d) Do one of the following:

0) Convey the Minimal Corresponding Source under the terms of this
License, and the Corresponding Application Code in a form
suitable for, and under terms that permit, the user to
recombine or relink the Application with a modified version of
the Linked Version to produce a modified Combined Work, in the
manner specified by section 6 of the GNU GPL for conveying
Corresponding Source.

1) Use a suitable shared library mechanism for linking with the
Library. A suitable mechanism is one that (a) uses at run time
a copy of the Library already present on the user's computer
system, and (b) will operate properly with a modified version
of the Library that is interface-compatible with the Linked
Version.

e) Provide Installation Information, but only if you would otherwise
be required to provide such information under section 6 of the
GNU GPL, and only to the extent that such information is
necessary to install and execute a modified version of the
Combined Work produced by recombining or relinking the
Application with a modified version of the Linked Version. (If
you use option 4d0, the Installation Information must accompany
the Minimal Corresponding Source and Corresponding Application
Code. If you use option 4d1, you must provide the Installation
Information in the manner specified by section 6 of the GNU GPL
for conveying Corresponding Source.)

5. Combined Libraries.

You may place library facilities that are a work based on the
Library side by side in a single library together with other library
facilities that are not Applications and are not covered by this
License, and convey such a combined library under terms of your
choice, if you do both of the following:

a) Accompany the combined library with a copy of the same work based
on the Library, uncombined with any other library facilities,
conveyed under the terms of this License.

b) Give prominent notice with the combined library that part of it
is a work based on the Library, and explaining where to find the
accompanying uncombined form of the same work.

6. Revised Versions of the GNU Lesser General Public License.

The Free Software Foundation may publish revised and/or new versions
of the GNU Lesser General Public License from time to time. Such new
versions will be similar in spirit to the present version, but may
differ in detail to address new problems or concerns.

Each version is given a distinguishing version number. If the
Library as you received it specifies that a certain numbered version
of the GNU Lesser General Public License "or any later version"
applies to it, you have the option of following the terms and
conditions either of that published version or of any later version
published by the Free Software Foundation. If the Library as you
received it does not specify a version number of the GNU Lesser
General Public License, you may choose any version of the GNU Lesser
General Public License ever published by the Free Software Foundation.

If the Library as you received it specifies that a proxy can decide
whether future versions of the GNU Lesser General Public License shall
apply, that proxy's public statement of acceptance of any version is
permanent authorization for you to choose that version for the
Library.

Apache License:

Apache License, Version 2.0

Apache License
Version 2.0, January 2004
http://www.apache.org/licenses/

TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION

1. Definitions.

"License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document.

"Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License.

"Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity.

"You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License.

"Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files.

"Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types.

"Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below).

"Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof.

"Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution."

"Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work.

2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form.

3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed.

4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions:

1. You must give any other recipients of the Work or Derivative Works a copy of this License; and

2. You must cause any modified files to carry prominent notices stating that You changed the files; and

3. You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and

4. If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License.

You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License.

5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions.

6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file.

7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License.

8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages.

9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability.

END OF TERMS AND CONDITIONS
APPENDIX: How to apply the Apache License to your work

To apply the Apache License to your work, attach the following boilerplate notice, with the fields enclosed by brackets "[]" replaced with your own identifying information. (Don't include the brackets!) The text should be enclosed in the appropriate comment syntax for the file format. We also recommend that a file or class name and description of purpose be included on the same "printed page" as the copyright notice for easier identification within third-party archives.
Copyright [yyyy] [name of copyright owner] Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Creative Commons License:

The below section is excerpted from Aditya's Blog .

Creative Commons provide an out of the box license which is not only flexible but also easy to use and much more easier than create. Yes, you can create a CC license, specially customized to suit your needs like the one I have for this blog. You can create a license for your work here. CC license is not generally used for software licensing. It is more suited for literature or documentation work. In this license type you can choose the condition you want to set for your work. These conditions are :-

1. Attribution : You let others to copy and use your work only if they give you the credit the way you want.
2. Share Alike : You can allow other users to share your work but keeping the same or similsr license like the original one.
3. Noncommercial : You can permit others to use your work for Noncommercial/Commercial purposes
4. No Derivative Works : You give others permission to copy and distribute your work. But only Verbatim copies not any sort of derived work.

Just glean over this url CC-url

Moreover if you really want know more about it then please visit GNU website for the infomation regarding license.

Hope this will help.

Cheers!
Bhaskar

Apache : Get internal information about it

2010-10-02T19:34:00.006+05:30

First of all it is almost a default web server glue with open system( read GNU/Linux).And we are so very accustomed with that that we never look around.But having said that one should if time and situation require.Couple of alternatives might be nginx and lighthttpd.

But in this article I will focus only Apache internal information one can get..so here we go:

Get the module information:

We usually add so many module in the web server(Apache) along with the default module come along with that.Here we will look in how to get the module built with it.How do you do that? Like this:

bhaskar@bhaskar-laptop_19:37:24_Sat Oct 02:/etc/httpd/conf> sudo /usr/sbin/httpd -M

Password:
Loaded Modules:
core_module (static)
mpm_prefork_module (static)
http_module (static)
so_module (static)
php5_module (shared)
authn_file_module (shared)
authn_dbm_module (shared)
authn_anon_module (shared)
authn_dbd_module (shared)
authn_default_module (shared)
authz_host_module (shared)
authz_groupfile_module (shared)
authz_user_module (shared)
authz_dbm_module (shared)
authz_owner_module (shared)
authnz_ldap_module (shared)
authz_default_module (shared)
auth_basic_module (shared)
auth_digest_module (shared)
file_cache_module (shared)
cache_module (shared)
disk_cache_module (shared)
mem_cache_module (shared)
dbd_module (shared)
dumpio_module (shared)
ext_filter_module (shared)
include_module (shared)
filter_module (shared)
substitute_module (shared)
deflate_module (shared)
ldap_module (shared)
log_config_module (shared)
log_forensic_module (shared)
logio_module (shared)
env_module (shared)
mime_magic_module (shared)
cern_meta_module (shared)
expires_module (shared)
headers_module (shared)
ident_module (shared)
usertrack_module (shared)
unique_id_module (shared)
setenvif_module (shared)
version_module (shared)
proxy_module (shared)
proxy_connect_module (shared)
proxy_ftp_module (shared)
proxy_http_module (shared)
proxy_scgi_module (shared)
proxy_ajp_module (shared)
proxy_balancer_module (shared)
ssl_module (shared)
mime_module (shared)
dav_module (shared)
status_module (shared)
autoindex_module (shared)
asis_module (shared)
info_module (shared)
suexec_module (shared)
cgi_module (shared)
cgid_module (shared)
dav_fs_module (shared)
vhost_alias_module (shared)
negotiation_module (shared)
dir_module (shared)
imagemap_module (shared)
actions_module (shared)
speling_module (shared)
userdir_module (shared)
alias_module (shared)
rewrite_module (shared)
Syntax OK

So here we pass the "M" flag with httpd binary.

Syntanx check of config file:

Next how to find the systax of the configuration file of Apache is alright,here is what you have to do:

bhaskar@bhaskar-laptop_19:38:30_Sat Oct 02:/etc/httpd/conf> sudo /usr/sbin/httpd -t
Syntax OK

Check in the compiled module:

Here is the steps to find it:

bhaskar@bhaskar-laptop_19:42:59_Sat Oct 02:/etc/httpd/conf> sudo /usr/sbin/httpd -l
Compiled in modules:
core.c
prefork.c
http_core.c
mod_so.c

Check how the Apache server compiled:

If we want to know the Apache server built initially,then we migth do the following:

bhaskar@bhaskar-laptop_19:43:30_Sat Oct 02:/etc/httpd/conf> sudo /usr/sbin/httpd -V
Server version: Apache/2.2.16 (Unix)
Server built: Aug 17 2010 12:52:36
Server's Module Magic Number: 20051115:24
Server loaded: APR 1.4.2, APR-Util 1.3.9
Compiled using: APR 1.4.2, APR-Util 1.3.9
Architecture: 32-bit
Server MPM: Prefork
threaded: no
forked: yes (variable process count)
Server compiled with....
-D APACHE_MPM_DIR="server/mpm/prefork"
-D APR_HAS_SENDFILE
-D APR_HAS_MMAP
-D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
-D APR_USE_SYSVSEM_SERIALIZE
-D APR_USE_PTHREAD_SERIALIZE
-D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
-D APR_HAS_OTHER_CHILD
-D AP_HAVE_RELIABLE_PIPED_LOGS
-D DYNAMIC_MODULE_LIMIT=128
-D HTTPD_ROOT="/etc/httpd"
-D SUEXEC_BIN="/usr/sbin/suexec"
-D DEFAULT_PIDLOG="/var/run/httpd/httpd.pid"
-D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
-D DEFAULT_LOCKFILE="/var/run/httpd/accept.lock"
-D DEFAULT_ERRORLOG="logs/error_log"
-D AP_TYPES_CONFIG_FILE="conf/mime.types"
-D SERVER_CONFIG_FILE="conf/httpd.conf"

How to check VirtualHost config check:

If we have so many virtualhost built inside into Apache then we must check the configuration(one of the source of not starting the server properly)beforehand.

bhaskar@bhaskar-laptop_19:48:11_Sat Oct 02:/etc/httpd/conf> sudo /usr/sbin/httpd -S
VirtualHost configuration:
Syntax OK

What are the configuration directives available to the server?

Let's find out what are the directives we can manipulate for this web server...to unveiled it do the following:

bhaskar@bhaskar-laptop_19:48:54_Sat Oct 02:/etc/httpd/conf> sudo /usr/sbin/httpd -L
Container for directives affecting resources located in the specified directories
Allowed in *.conf only outside , or
Container for directives affecting resources accessed through the specified URL paths
Allowed in *.conf only outside , or
Container to map directives to a particular virtual host, takes one or more host addresses
Allowed in *.conf only outside , or
Container for directives affecting files matching specified patterns
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
Container for authentication directives when accessed using specified HTTP methods
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
Container for authentication directives to be applied when any HTTP method other than those specified is used to access the resource
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
Container for directives based on existance of specified modules
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
Container for directives based on existance of command line defines
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
Container for directives affecting resources located in the specified directories
Allowed in *.conf only outside , or
Container for directives affecting resources accessed through the specified URL paths
Allowed in *.conf only outside , or
Container for directives affecting files matching specified patterns
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
AuthType (core.c)
An HTTP authorization type (e.g., "Basic")
Allowed in *.conf only inside , or and in .htaccess
when AllowOverride includes AuthConfig
AuthName (core.c)
The authentication realm (e.g. "Members Only")
Allowed in *.conf only inside , or and in .htaccess
when AllowOverride includes AuthConfig
Require (core.c)
Selects which authenticated users or groups may access a protected space
Allowed in *.conf only inside , or and in .htaccess
when AllowOverride includes AuthConfig
Satisfy (core.c)
access policy if both allow and require used ('all' or 'any')
Allowed in *.conf only inside , or and in .htaccess
when AllowOverride includes AuthConfig
AddDefaultCharset (core.c)
The name of the default charset to add to any Content-Type without one or 'Off' to disable
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
AcceptPathInfo (core.c)
Set to on or off for PATH_INFO to be accepted by handlers, or default for the per-handler preference
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
AccessFileName (core.c)
Name(s) of per-directory config files (default: .htaccess)
Allowed in *.conf only outside , or
DocumentRoot (core.c)
Root directory of the document tree
Allowed in *.conf only outside , or
ErrorDocument (core.c)
Change responses for HTTP errors
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
AllowOverride (core.c)
Controls what groups of directives can be configured by per-directory config files
Allowed in *.conf only inside , or
Options (core.c)
Set a number of attributes for a given directory
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes Options
DefaultType (core.c)
the default MIME type for untypable files
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
FileETag (core.c)
Specify components used to construct a file's ETag
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
EnableMMAP (core.c)
Controls whether memory-mapping may be used to read files
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
EnableSendfile (core.c)
Controls whether sendfile may be used to transmit files
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
Protocol (core.c)
Set the Protocol for httpd to use.
Allowed in *.conf only outside , or
AcceptFilter (core.c)
Set the Accept Filter to use for a protocol
Allowed in *.conf only outside , or
Port (core.c)
Port was replaced with Listen in Apache 2.0
Allowed in *.conf only outside , or
HostnameLookups (core.c)
"on" to enable, "off" to disable reverse DNS lookups, or "double" to enable double-reverse DNS lookups
Allowed in *.conf anywhere
ServerAdmin (core.c)
The email address of the server administrator
Allowed in *.conf only outside , or
ServerName (core.c)
The hostname and port of the server
Allowed in *.conf only outside , or
ServerSignature (core.c)
En-/disable server signature (on|off|email)
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
ServerRoot (core.c)
Common directory of server-related files (logs, confs, etc.)
Allowed in *.conf only outside , or
ErrorLog (core.c)
The filename of the error log
Allowed in *.conf only outside , or
ServerAlias (core.c)
A name or names alternately used to access the server
Allowed in *.conf only outside , or
ServerPath (core.c)
The pathname the server can be reached at
Allowed in *.conf only outside , or
Timeout (core.c)
Timeout duration (sec)
Allowed in *.conf only outside , or
ContentDigest (core.c)
whether or not to send a Content-MD5 header with each request
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes Options
UseCanonicalName (core.c)
How to work out the ServerName : Port when constructing URLs
Allowed in *.conf anywhere
UseCanonicalPhysicalPort (core.c)
Whether to use the physical Port when constructing URLs
Allowed in *.conf anywhere
Include (core.c)
Name of the config file to be included
Allowed in *.conf anywhere
LogLevel (core.c)
Level of verbosity in error logging
Allowed in *.conf only outside , or
NameVirtualHost (core.c)
A numeric IP address:port, or the name of a host
Allowed in *.conf only outside , or
ServerTokens (core.c)
Determine tokens displayed in the Server: header - Min(imal), OS or Full
Allowed in *.conf only outside , or
LimitRequestLine (core.c)
Limit on maximum size of an HTTP request line
Allowed in *.conf only outside , or
LimitRequestFieldsize (core.c)
Limit on maximum size of an HTTP request header field
Allowed in *.conf only outside , or
LimitRequestFields (core.c)
Limit (0 = unlimited) on max number of header fields in a request message
Allowed in *.conf only outside , or
LimitRequestBody (core.c)
Limit (in bytes) on maximum size of request message body
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
LimitXMLRequestBody (core.c)
Limit (in bytes) on maximum size of an XML-based request body
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
RLimitCPU (core.c)
Soft/hard limits for max CPU usage in seconds
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
RLimitMEM (core.c)
Soft/hard limits for max memory usage per process
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
RLimitNPROC (core.c)
soft/hard limits for max number of processes per uid
Allowed in *.conf anywhere and in .htaccess
when AllowOverride isn't None
LimitInternalRecursion (core.c)
maximum recursion depth of internal redirects and subrequests
Allowed in *.conf only outside , or
ForceType (core.c)
a mime type that overrides other configured type
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
SetHandler (core.c)
a handler name that overrides any other configured handler
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
SetOutputFilter (core.c)
filter (or ; delimited list of filters) to be run on the request content
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
SetInputFilter (core.c)
filter (or ; delimited list of filters) to be run on the request body
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
AddOutputFilterByType (core.c)
output filter name followed by one or more content-types
Allowed in *.conf anywhere and in .htaccess
when AllowOverride includes FileInfo
AllowEncodedSlashes (core.c)
Allow URLs containing '/' encoded as '%2F'
Allowed in *.conf only outside , or
PidFile (core.c)
A file for logging the server process ID
Allowed in *.conf only outside , or
ScoreBoardFile (core.c)
A file for Apache to maintain runtime process management information
Allowed in *.conf only outside , or
LockFile (core.c)
The lockfile used when Apache needs to lock the accept() call
Allowed in *.conf only outside , or
MaxRequestsPerChild (core.c)
Maximum number of requests a particular child serves before dying.
Allowed in *.conf only outside , or
CoreDumpDirectory (core.c)
The location of the directory Apache changes to before dumping core
Allowed in *.conf only outside , or
AcceptMutex (core.c)
Valid accept mutexes for this platform and MPM are: default, flock, fcntl, sysvsem, pthread.
Allowed in *.conf only outside , or
MaxMemFree (core.c)
Maximum number of 1k blocks a particular childs allocator may hold.
Allowed in *.conf only outside , or
TraceEnable (core.c)
'on' (default), 'off' or 'extended' to trace request body content
Allowed in *.conf only outside , or
User (prefork.c)
Effective user id for this server
Allowed in *.conf only outside , or
Group (prefork.c)
Effective group id for this server
Allowed in *.conf only outside , or
ChrootDir (prefork.c)
The directory to chroot(2) into
Allowed in *.conf only outside , or
ListenBacklog (prefork.c)
Maximum length of the queue of pending connections, as used by listen(2)
Allowed in *.conf only outside , or
Listen (prefork.c)
A port number or a numeric IP address and a port number, and an optional protocol
Allowed in *.conf only outside , or
SendBufferSize (prefork.c)
Send buffer size in bytes
Allowed in *.conf only outside , or
ReceiveBufferSize (prefork.c)
Receive buffer size in bytes
Allowed in *.conf only outside , or
StartServers (prefork.c)
Number of child processes launched at server startup
Allowed in *.conf only outside , or
MinSpareServers (prefork.c)
Minimum number of idle children, to handle request spikes
Allowed in *.conf only outside , or
MaxSpareServers (prefork.c)
Maximum number of idle children
Allowed in *.conf only outside , or
MaxClients (prefork.c)
Maximum number of children alive at the same time
Allowed in *.conf only outside , or
ServerLimit (prefork.c)
Maximum value of MaxClients for this run of Apache
Allowed in *.conf only outside , or
GracefulShutdownTimeout (prefork.c)
Maximum time in seconds to wait for child processes to complete transactions during shutdown
Allowed in *.conf only outside , or
KeepAliveTimeout (http_core.c)
Keep-Alive timeout duration (sec)
Allowed in *.conf only outside , or
MaxKeepAliveRequests (http_core.c)
Maximum number of Keep-Alive requests per connection, or 0 for infinite
Allowed in *.conf only outside , or
KeepAlive (http_core.c)
Whether persistent connections should be On or Off
Allowed in *.conf only outside , or
LoadModule (mod_so.c)
a module name and the name of a shared object file to load it from
Allowed in *.conf only outside , or
LoadFile (mod_so.c)
shared object file or library to load into the server at runtime
Allowed in *.conf only outside , or

Now get few information from your browser,most probably you are running headless server(as the norm in the production environment or data center as I have had worked for)YMMV..here is the screenshot of it how it look like with "lynx" commandline browser:

Apache Server Status

Apache Server Info

Specifically the info thing shows lot of internals.I have snipped the picture for only one window,it might consist of serveral window full of information.

Now for those two information one has to have two module must loaded into the Apache server,otherwise it won't be accissible like I showed.So the evidence of those two modules are below:

mod_status:

bhaskar@bhaskar-laptop_20:11:24_Sat Oct 02:/etc/httpd/conf> sudo grep "mod_status" /etc/httpd/conf/httpd.conf
LoadModule status_module modules/mod_status.so

And

mod_info:

bhaskar@bhaskar-laptop_20:11:40_Sat Oct 02:/etc/httpd/conf> sudo grep "mod_info" /etc/httpd/conf/httpd.conf
LoadModule info_module modules/mod_info.so

Plus one has to have an entry in main apache main configuration file for those two module to show up on the browser like below:

SetHandler server-status
Order deny,allow
Deny from all
Allow from 127.0.0.1

SetHandler server-info
Order deny,allow
Deny from all
Allow from 127.0.0.1

One can put the server ip or name of the host where the apache server running with Allow from directive.

Last but not the least for heaven's sake please look into apache log file if you find any inconsistencies.Generally those are located in /var/log directory as apache/apache2/httpd/httpd2,because different distro maintain different name for that dir.Now basically it consists of few files like this:

access.log,error.log...... and name signifies it.Looking for the logs if something goes wrong considered to be a good starting point and practice.

Hope this will help.

Cheers!
Bhaskar

SASL : IMAP authentication system

2010-09-18T08:34:00.007+05:30

In this article I am going to take you through cyrus-sasl to built with postfix mail server.So fasten your seat belt for the ride.

SASL stand for Simple Authentication Security Layer and I will integrate it with an IMAP server built with postfix.SASL is defined in RFC-2222.SASL is a means for authenticating yourself to the server without providing your password in the clear. This can also be used to provide extended capabilities based on your authorization. In plainer words, a SASL mechanism can provide authentication only, or it can also provide integrity checking, and possibly encryption as well.

I do not issue any guarantee that this will work for you.

First and foremost thing to get the cyrus-sasl source from here or go to the website dedicated to it.

Ok, I am building it on Gentoo,so I will furnish the steps required to get it work on it.But the prime focus would be to show you how it work.

bhaskar@bhaskar-laptop_08:22:37_Sat Sep 18:~> sudo emerge -av cyrus-sasl
Password:

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild R ] dev-libs/cyrus-sasl-2.1.23-r1 USE="berkdb crypt gdbm ldap pam ssl -authdaemond -java -kerberos -mysql -ntlm_unsupported_patch -postgres -sample -sqlite -srp -urandom" 0 kB

Total: 1 package (1 reinstall), Size of downloads: 0 kB

Would you like to merge these packages? [Yes/No]

I choose N or no here because I have it already in the system.But when did I have it into the system? lets find out:

bhaskar@bhaskar-laptop_08:47:55_Sat Sep 18:~> sudo genlop -t cyrus-sasl
* dev-libs/cyrus-sasl

Fri Nov 13 18:08:00 2009 >>> dev-libs/cyrus-sasl-2.1.23-r1
merge time: 2 minutes and 5 seconds.

Right! now move on. We need to add an user to operate to manage that software.So here we go:

bhaskar@bhaskar-laptop_08:49:18_Sat Sep 18:~> sudo useradd -g mail cyrus

Now you see the user like this:

bhaskar@bhaskar-laptop_08:49:18_Sat Sep 18:~> id cyrus
uid=110(cyrus) gid=12(mail) groups=12(mail)

Next we change the password of it ,the user cyrus created in the previous steps, like this:

root@bhaskar-laptop_09:02:10_Sat Sep 18:/home/bhaskar # passwd cyrus
Password:
Retype new password:
passwd: password updated successfully

Cool! You can go ahead and test the user before you start to implement other thing with it.So now little bit of placeholders need to created for it.

Creating the necessary directories

This list of instructions will set up all the directories necessary for imap.

1. mkdir /var/adm

2. touch /var/adm/imapd.log /var/adm/auth.log

3. mkdir /var/imap /var/spool/imap /var/imap/srvtab

4. chown cyrus /var/imap /var/spool/imap /var/imap/srvtab

5. chgrp mail /var/imap /var/spool/imap /var/imap/srvtab

6. chmod 750 /var/imap /var/spool/imap /var/imap/srvtab

Pretty easily understandable those commands ,if not please cut and paste it your system to see the effect of it.

Now lets working as user cyrus created earlier..so the chances will be less to intermingle with other thing:

root@bhaskar-laptop_09:12:35_Sat Sep 18:/home/bhaskar # su cyrus

cyrus@bhaskar-laptop_09:12:39_Sat Sep 18:/home/bhaskar>

Now we are going to put some entry into the syslog config file so the logger will take action on it.

bhaskar@bhaskar-laptop_09:18:02_Sat Sep 18:/etc/syslog-ng> sudo vim syslog-ng.conf

and we put into it below lines:

local6.debug /var/adm/imapd.log
auth.debug /var/adm/auth.log

Ok,one more thing to do before I jump into the cyrus thing. We need to edit the file called /etc/imapd.conf,because we are integrating with an imap server.

bhaskar@bhaskar-laptop_09:22:38_Sat Sep 18:~> sudo vim /etc/imapd.conf

Once you are inside the file please add those below line and save the file:

configdirectory: /var/imap
6 partition-default: /var/spool/imap
7 sievedir: /var/imap/sieve
8
9 tls_ca_path: /etc/ssl/certs
10 tls_cert_file: /etc/ssl/cyrus/server.crt
11 tls_key_file: /etc/ssl/cyrus/server.key
12
13 # Don't use an everyday user as admin.
14 admins: cyrus
15
16 hashimapspool: yes
17 allowanonymouslogin: no
18 allowplaintext: no

So these are entry I have put in.As I have ssl cert too!.I have use the sasldb to check my password and the entry look in the file is :

# Use saslauthd if you want to use pam for imap.
27 # But be warned: login with DIGEST-MD5 or CRAM-MD5
28 # is not possible using pam.
29 sasl_pwcheck_method: saslauthd

Now we need to check the services file which reside in /etc directory to hold the information about the system services.We need to look into that file for some specific lines mentioned below:

pop3 110/tcp
imap 143/tcp
imsp 406/tcp
kpop 1109/tcp
sieve 2000/tcp

POP3:

root@bhaskar-laptop_09:36:28_Sat Sep 18:/var/spool # grep pop3 /etc/services
pop3 110/tcp pop-3 # Post Office Protocol - Version 3
pop3 110/udp pop-3
pop3s 995/tcp # pop3 protocol over TLS/SSL
pop3s 995/udp

IMAP:

root@bhaskar-laptop_09:37:15_Sat Sep 18:/var/spool # grep imap /etc/services
imap 143/tcp imap2 # Internet Message Access Protocol
imap 143/udp imap2
imap3 220/tcp # Interactive Mail Access
imap3 220/udp
imaps 993/tcp # imap4 protocol over TLS/SSL
imaps 993/udp

IMSP:

root@bhaskar-laptop_09:37:22_Sat Sep 18:/var/spool # grep imsp /etc/services
imsp 406/tcp # Interactive Mail Support Protocol
imsp 406/udp

KPOP;

root@bhaskar-laptop_09:38:29_Sat Sep 18:/var/spool # grep kpop /etc/services
kpop 1109/tcp # Pop with Kerberos

SIEVE:

root@bhaskar-laptop_09:39:09_Sat Sep 18:/var/spool # grep sieve /etc/services
cisco-sccp 2000/tcp sieve # Cisco SCCP
cisco-sccp 2000/udp sieve

So things are in place.Cool! looks good indeed.Now we need to modify the superserver file called inetd or in modern system called xinetd.

imap stream tcp nowait cyrus /usr/cyrus/bin/imapd imapd
pop3 stream tcp nowait cyrus /usr/cyrus/bin/pop3d pop3d

As I said before that we are going to be integrated with postifx,so need to check out this thing in /etc/postfix/master.cf for the user cyrus :

root@bhaskar-laptop_09:58:51_Sat Sep 18:/etc # grep cyrus /etc/postfix/master.cf
cyrus unix - n n - - pipe
# flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
# Also specify in main.cf: cyrus_destination_recipient_limit=1
#cyrus unix - n n - - pipe
# user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}

So in my system it in place but if you don't have this thing set please do that.

Now we need to add the cyrus administrator for the monitoring and administrative works.Here is the steps:

root@bhaskar-laptop_10:12:00_Sat Sep 18:/etc # /usr/sbin/saslpasswd2 cyrus
Password:
Again (for verification):

Now it's time for the testing the server with authentication...so here we go:

cyrus@bhaskar-laptop_10:46:00_Sat Sep 18:/root> cyradm --auth login localhost
verify error:num=18:self signed certificate
IMAP Password:

bhaskar-laptop.localdomain> ?
authenticate, login, auth authenticate to server
chdir, cd change current directory
createmailbox, create, cm create mailbox
deleteaclmailbox, deleteacl, dam remove ACLs from mailbox
deletemailbox, delete, dm delete mailbox
disconnect, disc disconnect from current server
exit, quit exit cyradm
help, ? show commands
info display mailbox/server metadata
listacl, lam, listaclmailbox list ACLs on mailbox
listmailbox, lm list mailboxes
listquota, lq list quotas on specified root
listquotaroot, lqr, lqm show quota roots and quotas for mailbox
mboxcfg, mboxconfig configure mailbox
reconstruct reconstruct mailbox (if supported)
renamemailbox, rename, renm rename (and optionally relocate) mailbox
server, servername, connect show current server or connect to server
setaclmailbox, sam, setacl set ACLs on mailbox
setinfo set server metadata
setquota, sq set quota on mailbox or resource
subscribe, sub subscribe to a mailbox
unsubscribe, unsub unsubscribe from a mailbox
version, ver display version info of current server
xfermailbox, xfer transfer (relocate) a mailbox to a different server

Creating mailbox for the specified user

bhaskar-laptop.localdomain> cm user.bhaskar
bhaskar-laptop.localdomain> lm
user.bhaskar (\HasNoChildren)
Here "lm" stands for list mailbox, which is available by the help command shown above.

Now you can do so many thing with the mail server namely create a user,set quota for their mails box to name a few.Please look at the command enlisted above to utilise it.

Hope this will help.

Cheers!
Bhaskar

LDAP: The tool to manage enterprise infrastructure

2010-09-13T13:16:00.006+05:30

I am provoked or compelled or whatever you say to write this article about this topic and the article that spurs the interest is here and many more on the internet by some brilliant guys and that's reminds me of dealing with LDAP with one of my job assignment.Without doubt I must say it is a complex topic to deal with( at least my bend of mind says so.. YMMV).But having said that it is an absolute must for any administrator handling large network infrastructure in the corporation should be very well aware of this protocol as well the usability of it.

I do not issue any guarantee that this will work for you.

I am assuming that readers are aware of this protocol, if not then please look in OpenLDAP Website to get an idea of it.OpenLDAP is an open source suite of software that includes the LDAP server daemon (slapd), a replication daemon (slurpd) and a small collection of command line client tools, like ldapsearch and ldapadd, among others. In this article, we'll set up and populate a small but functional LDAP server using the slapd daemon, and start to make use of it with a Linux client.

Definition and Components

LDAP stands for Lightweight Directory Access Protocol, which is to say that, by definition, LDAP is a protocol, and nothing else. However, the protocol exists to perform operations on data, and is really pretty useless without it. This brings up the components that make up an LDAP deployment: client software used to send LDAP requests, the server daemon that handles incoming LDAP requests, and the back-end data store. I will refer to the last two collectively as a "directory service."

Back-end Data Storage

Of these components, the back-end data storage mechanism is the least relevant to you unless you're administering a production LDAP deployment. Developers writing code that accesses an LDAP server and end users who access a directory service via some client utility should be happy to let the protocol do the job of getting data to them without knowing anything about the back end. Adding, removing, updating, deleting, and fetching data from a directory service occurs through the LDAP protocol.

Now there are few variant of the LDAP thing like :

a)OpenLDAP

b) FDS(Fedora Directory Server)

c) Novell's eDirectory

d)Sun Java System Directory or formarly iPlanet

So we will sticks with OpenLDAP in this article to investigate with.

What Is LDAP Used For?

An LDAP directory service stores information for use by systems as well as end users (and their various applications). Probably the most common use of LDAP is for replacing either flat-file authentication (think /etc/passwd) or legacy networked authentication (think NIS). The benefit of any networked authentication mechanism over a flat file system is clearly that it lifts the burden of having to keep files on all of your systems in sync. The benefit of LDAP over, say, NIS is (among other things) a finer-grained control over the data and how it is accessed (and by whom). You can also make encrypted connections to LDAP servers using TLS or SSL, and you never have to muck with flat file "maps" or complicated Makefiles to change the data.

Because LDAP is a transaction-based system, operations that complete successfully are immediately "live." Modern Unix-based systems (including Linux, BSD, and OS X) can rely on LDAP to get just about any information they could store in flat files or NIS, including hosts, automounter configuration, users, groups, and more. Add to that the ability to have Samba, Apache, PAM, tcpwrappers, Sendmail, and other applications talk to LDAP for authentication, aliases, and other tidbits of useful information, and you have the beginnings of a very well-integrated, easily maintained, authoritative data source for your entire infrastructure.

LDAP is also popular for use as a "white pages" directory for a department or corporation. For example, most email applications, from Mutt and Pine to Outlook, Evolution, and KMail all know how to talk to an LDAP server. This makes it very easy to, for example, tell KMail to autocomplete addresses as you type using an LDAP directory as its addressbook source instead of (or in addition to) local files.To add to the list Thunderbird too will support that protocol.

A Closer Look at LDAP Data

It's extremely important when learning about LDAP and how it deals with data to separate the structure (or topology) of the data from the definitions of the objects themselves.

Simply, the structure of LDAP data is a hierarchical collection of objects. Objects can represent anything from people to printers and take their places within the hierarchy using whatever logic you like.

Objects?

Yes, objects. Each object has a list of attributes associated with it that describe that particular object. When you add or delete an object, make a request for an object, or change the value of an object's attribute, you do so solely using the LDAP protocol. In short, LDAP exists to manipulate or fetch data about objects.

Hierarchical?

The layout of the data in an LDAP directory is the Directory Information Tree (DIT). You can customize it to the needs of your organization, but it's still a hierarchical tree structure. This tree is not dissimilar to a typical filesystem; there's a "top" or "root" directory, under which are high-level objects (directories in a filesystem). Those help you to categorize the lower level objects that you're really interested in (in a filesystem, these are the files themselves).

Suppose you want to store information about people using a hierarchical collection of objects. Viewing things as a filesystem, you could create a /People directory, and under that, create a file--/People/whatEverYouWant. That file contains attribute name and value pairs to describe "steve." One attribute might be "firstname," with a value of "Dan." Save the file, and create a new one for each person. Eventually, you have a filesystem that looks something like:

/people
Steve
Dan
Bhaskar

We might create it like department wise like this:

/people
/Engineering
Bhaskar
Dan
Jones
/Finance
Marry
Garth

LDAP data are represented in the LDIF(LDAP Data Interchange Format).

What Are Objectclasses?

Objectclasses are prototypes for entries that will actually exist in your directory server. The objectclass definition (which uses ASN.1 syntax) specifies which attributes may or must be used by LDAP entries declared as instances of a particular objectclass.

Get it? Let me explain it backward, in the way that most people get into LDAP: you want to store information about people. The most common attributes associated with people are:

* First name
* Last name
* Email address
* Phone numbers
* Room numbers

These attributes are great for setting up an office whitepages server that users can refer to for information about people in their office. The key now is finding out which objectclass definitions either require or allow for the use of these attributes. When I started with LDAP, I researched this by perusing the actual schema files that come with most (if not all) directory servers. These files are human-readable.

Object Class Definitions

Here's the definition of the inetOrgPerson objectclass, which is a good place to start:

objectclass ( 2.16.840.1.113730.3.2.2
NAME 'inetOrgPerson'
DESC 'RFC2798: Internet Organizational Person'
SUP organizationalPerson
STRUCTURAL
MAY (
audio $ businessCategory $ carLicense $ departmentNumber $
displayName $ employeeNumber $ employeeType $ givenName $
homePhone $ homePostalAddress $ initials $ jpegPhoto $
labeledURI $ mail $ manager $ mobile $ o $ pager $
photo $ roomNumber $ secretary $ uid $ userCertificate $
x500uniqueIdentifier $ preferredLanguage $
userSMIMECertificate $ userPKCS12 )

The first line states that what follows is an objectclass definition, as opposed to an attributetype definition. The long number is the ASN.1 number assigned to the objectclass. If you create your own objectclasses, this number is significant; it's where you use your organization's IANA Enterprise Number to identify any objectclasses that you create.

The NAME line should be self explanatory. It is the name that will appear in your users' entries to state that the user is of type inetOrgPerson. This line gives you license to use any of the attributes in the objectclass definition to describe the user.

The DESC line is usually a useful description that can help you use this object in a way appropriate to the intent of the definer. You don't want to use objectclasses in a completely unorthodox way, because when you reach out to others for help, they'll find themselves asking you more questions than you ask them, which is often a sign that you've gone off in the wrong direction.

The SUP line is critical, and the theory is tough to describe without getting pretty verbose. SUP is short for SUPERIOR, and it names another objectclass from which this objectclass inherits. In this case, the superior or parent objectclass is organizationalPerson. The organizationalPerson class inherits from the person objectclass, which inherits from an objectclass called top. If an objectclass has no other superiors, it is always a child of the top objectclass.

It's an inheritance chain. You need to understand it, because some LDAP servers strictly enforce it, and if you violate it in the creation of your entries, the directory server will unceremoniously spit them back at you.

The MAY line is actually a block. That block (between parentheses) contains a list, delimited with the $ symbol, of all of the attributes that MAY be used to describe an object declared of the type inetOrgPerson.

OK enough internals..lets go ahead and install and deploy the thing.For more curious reader I will provide you the link from where this article is influenced in resource section in the end.

Installing OpenLDAP:

You can download OpenLDAP from the OpenLDAP website. While it is certainly possible to obtain precompiled binary distributions of OpenLDAP in RPM, deb, and other package formats, these tend to be somewhat older releases. There are many useful customizations you can make during an OpenLDAP compile, and I've never had much trouble compiling OpenLDAP from source, so this is the method I'm advocating.

This is not to say that there are absolutely no dependencies to satisfy. There are two major dependencies, both of which are very easy to handle:

Berkeley DB

The OpenLDAP team strongly recommends using Sleepycat Software's Berkeley DB as the data storage mechanism for an OpenLDAP deployment. As we mentioned in Part One of the series, LDAP is not a database, but a protocol for accessing and managing data. But the data has to live somewhere, and Berkeley DB is easy to deal with, even for newbie admins. If you're among those who have nightmares about databases, take heart in knowing that OpenLDAP does a superb job at hiding the fact that you're even dealing with one. Download the Berkeley DB source from the user-friendly Sleepycat download page. For my test build, I used Berkeley DB 4.1.25 without strong encryption support.

Building Berkeley DB couldn't be easier. Unpack the tarball, cd to the build_unix directory, and type ../dist/configure, followed by make and make install (the last as root). This will create a directory called /usr/local/BerkeleyDB.4.1, which contains all of the pertinent parts we need for our OpenLDAP installation.

OpenSSL for LDAPS

If you're using Redhat, Fedora,Gentoo,Arch,Debian or any number of other recent distributions, OpenSSL is probably already installed. If it isn't, and you wish to enable secure connections to your LDAP server, you need to install it. Luckily, this is a breeze. Grab a source tarball from the OpenSSL Download Page. Untar it, cd to the resulting directory, and run the standard configure and make commands. I also recommend that you run make test, and then (as root, of course) make install. This puts everything you need in the /usr/local/ssl directory by default.

Anyway I have created a user and group which will be able to operate the ldap thing going.Here is that:

bhaskar@bhaskar-laptop_14:51:17_Mon Sep 13:~> id ldap
uid=439(ldap) gid=439(ldap) groups=439(ldap)

Now we need to investigate the slapd.conf file,this is the file which drive ldap.So here we go:

Here's a quick and dirty slapd.conf that gets the daemon up and running and allows an administrative user to manipulate data:

include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema

Schema files define objects and attributes. When the slapd daemon starts, it includes whichever schema files we tell it to here, and that determines the types of objects and attributes supported by that slapd daemon. So, for example, if we did not include the nis.schema file, we would not be able to add typical Unix accounts using only the other schema files we've included. Schema files are human-readable, and you could even create your own schema files if you needed some wacky object-types that aren't already defined.

allow bind_v2
pidfile /var/run/slapd.pid

In newer versions of OpenLDAP, only LDAPv3 binds are allowed by default, which has caused many a mailing list crisis, since there are applications that don't support making a version 3 bind to a directory server. In the event we come across any in our travels, we've allowed LDAPv2 binds for our proof-of-concept, as you can see here:

database bdb
suffix "dc=bhaskar-laptop,dc=localdomain"
rootdn "cn=Manager,dc=bhaskar-laptop,dc=localdomain"
rootpw secret ------------> which is generated by slappasswd previously,just cut and paste
directory /var/lib/ldap

Our database backend is the Berkeley database, which OpenLDAP knows as "bdb." The slapd.conf man page can tell you other possible values for the database directive. Our suffix uses what's known as the "domain component" model. This model just takes the parts of a domain and references each part of the domain name as a separate domain component (dc). We'll talk more about this in a future article.

The rootdn and rootpw values define the administrative username and password for performing on the directory or its data operations that require administrative priveleges. The username is defined using a common name (cn), and the object entry for that user is stored directly under our top-level entry -- hence the trailing domain components. The password is generated using the slappasswd command, which simply prompts you for a password and generates output which can be cut and pasted into the slapd.conf file, as I've done here.

directory tells the slapd daemon where to store the data files for this particular database definition. There can be several database sections in a slapd.conf file. Here, we're telling slapd to use its home directory as its data storage directory, which is why the ldap user must be able to write there.

index objectClass eq,pres
index ou,cn,mail,surname,givenname eq,pres,sub
index uidNumber,gidNumber,loginShell eq,pres
index uid,memberUid eq,pres,sub

Defining indexes at this early stage won't make a great amount of difference. However, as the directory grows and more demands are placed upon it, indexes can mean the difference between users who don't notice that things that used to be handle by, say, NIS are now handled by something else, and a completely unusable directory server.

Now all boil down to starting the ldap daemon that slapd like below:

/etc/init.d/slapd start------------------> Every others else

or

/etc/rc.d/slapd start ------------> Gentoo ,Arch and variant

or

service slapd start ------------> Fedora and Redhat variant

Still it depend on the OS you sit on..but the intention would be same..

Resources:

a)LDAP

b)LDAP-data

c)OpenLDAP Install

d)OpenLDAP Install -II

e)OpenLdap Administration

Hope this will help.

Cheers!
Bhaskar

Important system tools- part-II

2010-09-02T05:13:00.005+05:30

This is a second article related to this(system tools) information .You can find the first part here . Ok GNU/Linux come with so many wonderful tools that one entire book will not suffice to write about it.As it visible everywhere.

I do not issue any guarantee that this will work for you.

I am going to take you through some tricky tools GNU/Linux provide to deal with oddity or complexity.Important to understand administrators love these kind tools under thier armory to shoot out problem as precisely as possible ,so they can concentrate on other equally important matters at hand.Time management is one of the key to become a efficent administrator at production environment.

So here we go.

Dmidecode:

A bit of explanation about it first. This tool will reveal the BIOS information of the system .So it's a handy way to know about it without rebooting the system.Most of the distros these days have it in thier respective repositories.

bhaskar@bhaskar-laptop_05:29:31_Thu Sep 02:~> sudo /usr/sbin/dmidecode
# dmidecode 2.10
SMBIOS 2.4 present.
25 structures occupying 1236 bytes.
Table at 0x000F25D2.

Handle 0x0000, DMI type 0, 24 bytes
BIOS Information
Vendor: Hewlett-Packard
Version: 68MSU Ver. F.03
Release Date: 08/15/2007
Address: 0xE0000
Runtime Size: 128 kB
ROM Size: 1024 kB
Characteristics:
PCI is supported
PC Card (PCMCIA) is supported
PNP is supported
BIOS is upgradeable
BIOS shadowing is allowed
Boot from CD is supported
Selectable boot is supported
EDD is supported
3.5"/720 kB floppy services are supported (int 13h)
Print screen service is supported (int 5h)
8042 keyboard services are supported (int 9h)
Serial services are supported (int 14h)
Printer services are supported (int 17h)
ACPI is supported
USB legacy is supported
LS-120 boot is supported
Smart battery is supported
BIOS boot specification is supported
Function key-initiated network boot is supported
Targeted content distribution is supported
BIOS Revision: 15.3
Firmware Revision: 132.14

Handle 0x0001, DMI type 1, 27 bytes
System Information
Manufacturer: Hewlett-Packard
Product Name: Compaq Presario B1200
Version: F.03
Serial Number: CNU8011ZJZ
UUID: 24FEFA40-3A15-E011-3F84-6D9910097D29
Wake-up Type: Power Switch
SKU Number: GP279PA#ACJ
Family: 103C_5335KV

Handle 0x0040, DMI type 126, 42 bytes
Inactive

Handle 0x0002, DMI type 2, 8 bytes
Base Board Information
Manufacturer: Hewlett-Packard
Product Name: 0AC0
Version: KBC Version 84.0E
Serial Number: Not Specified

Handle 0x0003, DMI type 3, 13 bytes
Chassis Information
Manufacturer: Hewlett-Packard
Type: Notebook
Lock: Not Present
Version: Not Specified
Serial Number: CNU8011ZJZ
Asset Tag: CNU8011ZJZ
Boot-up State: Safe
Power Supply State: Safe
Thermal State: Safe
Security Status: External Interface Enabled

Handle 0x0041, DMI type 126, 32 bytes
Inactive

Handle 0x0004, DMI type 4, 35 bytes
Processor Information
Socket Designation: U10
Type: Central Processor
Family: Pentium M
Manufacturer: Intel(R)
ID: FD 06 00 00 FF FB EB BF
Signature: Type 0, Family 6, Model 15, Stepping 13
Flags:
FPU (Floating-point unit on-chip)
VME (Virtual mode extension)
DE (Debugging extension)
PSE (Page size extension)
TSC (Time stamp counter)
MSR (Model specific registers)
PAE (Physical address extension)
MCE (Machine check exception)
CX8 (CMPXCHG8 instruction supported)
APIC (On-chip APIC hardware supported)
SEP (Fast system call)
MTRR (Memory type range registers)
PGE (Page global enable)
MCA (Machine check architecture)
CMOV (Conditional move instruction supported)
PAT (Page attribute table)
PSE-36 (36-bit page size extension)
CLFSH (CLFLUSH instruction supported)
DS (Debug store)
ACPI (ACPI supported)
MMX (MMX technology supported)
FXSR (Fast floating-point save and restore)
SSE (Streaming SIMD extensions)
SSE2 (Streaming SIMD extensions 2)
SS (Self-snoop)
HTT (Hyper-threading technology)
TM (Thermal monitor supported)
PBE (Pending break enabled)
Version: Intel(R) Core(TM)2 Duo CPU T5450 @ 1.66GHz
Voltage: 1.1 V
External Clock: 166 MHz
Max Speed: 1667 MHz
Current Speed: 1667 MHz
Status: Populated, Enabled
Upgrade: None
L1 Cache Handle: 0x0005
L2 Cache Handle: 0x0006
L3 Cache Handle: Not Provided
Serial Number: Not Specified
Asset Tag: Not Specified
Part Number: Not Specified

Handle 0x0005, DMI type 7, 19 bytes
Cache Information
Socket Designation: Internal L1 Cache
Configuration: Enabled, Not Socketed, Level 1
Operational Mode: Write Back
Location: Internal
Installed Size: 64 kB
Maximum Size: 64 kB
Supported SRAM Types:
Burst
Installed SRAM Type: Burst
Speed: Unknown
Error Correction Type: Unknown
System Type: Unified
Associativity: 4-way Set-associative

Handle 0x0006, DMI type 7, 19 bytes
Cache Information
Socket Designation: Internal L2 Cache
Configuration: Enabled, Not Socketed, Level 2
Operational Mode: Write Back
Location: External
Installed Size: 2048 kB
Maximum Size: 2048 kB
Supported SRAM Types:
Burst
Installed SRAM Type: Burst
Speed: Unknown
Error Correction Type: None
System Type: Unified
Associativity: 4-way Set-associative

Handle 0x0007, DMI type 9, 13 bytes
System Slot Information
Designation: PC CARD-Slot 0
Type: 32-bit PC Card (PCMCIA)
Current Usage: Available
Length: Short
ID: Adapter 0, Socket 0
Characteristics:
5.0 V is provided
3.3 V is provided
PC Card-16 is supported
Cardbus is supported
PME signal is supported

Handle 0x0008, DMI type 10, 6 bytes
On Board Device Information
Type: Video
Status: Enabled
Description: 8

Handle 0x0009, DMI type 11, 5 bytes
OEM Strings
String 1: www.hp.com
String 2: ABS 70/71 79 7A 7B 7C

Handle 0x000A, DMI type 16, 15 bytes
Physical Memory Array
Location: System Board Or Motherboard
Use: System Memory
Error Correction Type: None
Maximum Capacity: 4 GB
Error Information Handle: No Error
Number Of Devices: 2

Handle 0x000B, DMI type 17, 27 bytes
Memory Device
Array Handle: 0x000A
Error Information Handle: No Error
Total Width: 64 bits
Data Width: 64 bits
Size: 512 MB
Form Factor: SODIMM
Set: None
Locator: DIMM #1
Bank Locator: Not Specified
Type: DDR2
Type Detail: Synchronous
Speed: 667 MHz
Manufacturer: Hyundai Electronics
Serial Number: 0000403D
Asset Tag: Not Specified
Part Number: HYMP564S64CP6-Y5

Handle 0x000C, DMI type 17, 27 bytes
Memory Device
Array Handle: 0x000A
Error Information Handle: No Error
Total Width: 64 bits
Data Width: 64 bits
Size: 512 MB
Form Factor: SODIMM
Set: None
Locator: DIMM #2
Bank Locator: Not Specified
Type: DDR2
Type Detail: Synchronous
Speed: 667 MHz
Manufacturer: Hyundai Electronics
Serial Number: 0000403A
Asset Tag: Not Specified
Part Number: HYMP564S64CP6-Y5

Handle 0x000D, DMI type 19, 15 bytes
Memory Array Mapped Address
Starting Address: 0x00000000000
Ending Address: 0x0003FFFFFFF
Range Size: 1 GB
Physical Array Handle: 0x000A
Partition Width: 0

Handle 0x000E, DMI type 20, 19 bytes
Memory Device Mapped Address
Starting Address: 0x00000000000
Ending Address: 0x0001FFFFFFF
Range Size: 512 MB
Physical Device Handle: 0x000B
Memory Array Mapped Address Handle: 0x000D
Partition Row Position: 1

Handle 0x000F, DMI type 20, 19 bytes
Memory Device Mapped Address
Starting Address: 0x00020000000
Ending Address: 0x0003FFFFFFF
Range Size: 512 MB
Physical Device Handle: 0x000C
Memory Array Mapped Address Handle: 0x000D
Partition Row Position: 2

Handle 0x0010, DMI type 22, 26 bytes
Portable Battery
Location: Primary
Manufacturer: Hewlett-Packard
Manufacture Date: 11/13/2007
Serial Number: 27074
Name: HP
Chemistry: Lithium Ion
Design Capacity: 25500 mWh
Design Voltage: 14400 mV
SBDS Version: Not Specified
Maximum Error: Unknown
OEM-specific Information: 0x00000000

Handle 0x0011, DMI type 126, 26 bytes
Inactive

Handle 0x0012, DMI type 32, 11 bytes
System Boot Information
Status: No errors detected

Handle 0x0085, DMI type 133, 34 bytes
OEM-specific Type
Header and Data:
85 22 85 00 01 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00
00 00
Strings:

No battery

Handle 0x0086, DMI type 134, 34 bytes
OEM-specific Type
Header and Data:
86 22 86 00 01 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00
00 00
Strings:

Handle 0x0013, DMI type 144, 26 bytes
OEM-specific Type
Header and Data:
90 1A 13 00 FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF 00 00

Handle 0x0014, DMI type 127, 4 bytes
End Of Table

As you can see it will prodeuce hell lot of information.

Ethtool:

This tools to masure and know information about the attached ethernet card.Like the previous one this tool is also available with most of distributions repository.

bhaskar@bhaskar-laptop_05:37:54_Thu Sep 02:~> sudo /usr/sbin/ethtool -i eth0
driver: tg3
version: 3.108
firmware-version: sb v2.09
bus-info: 0000:18:00.0

bhaskar@bhaskar-laptop_05:38:06_Thu Sep 02:~> sudo /usr/sbin/ethtool eth0
Settings for eth0:
Supported ports: [ TP ]
Supported link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Half 1000baseT/Full
Supports auto-negotiation: Yes
Advertised link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Half 1000baseT/Full
Advertised auto-negotiation: Yes
Speed: Unknown! (65535)
Duplex: Unknown! (255)
Port: Twisted Pair
PHYAD: 1
Transceiver: internal
Auto-negotiation: on
Supports Wake-on: g
Wake-on: g
Current message level: 0x000000ff (255)
Link detected: no

Blkid:

This tool is for getting the device id ,which is very unique to help the bootloader think properly.In other word not messed up with bootloader if you put this indentification number of disk instead of directly mention them like this /dev/sdX.

bhaskar@bhaskar-laptop_05:48:57_Thu Sep 02:~> sudo /sbin/blkid
Password:
/dev/sda1: UUID="f6f903f1-03cd-4387-933c-8c928514c958" TYPE="ext3" SEC_TYPE="ext2"
/dev/sda2: UUID="a9380f41-173f-41be-8e20-b14fb78eaf9a" TYPE="swap"
/dev/sda3: UUID="3cccbf0e-0354-43b4-b89a-ceee1fcadb31" TYPE="ext3" SEC_TYPE="ext2"
/dev/sda5: LABEL="/" UUID="a217eb70-52b1-4e20-8841-7cb366a54c40" TYPE="ext3"
/dev/sda6: UUID="73917641-fbaf-4910-bf2a-5d86d93fb1ca" SEC_TYPE="ext2" TYPE="ext3"
/dev/sda7: LABEL="Fedora-12-i686-L" UUID="0ba812ef-d38e-4fb6-9a2d-79fcb13768aa" TYPE="ext4"
/dev/sda8: UUID="VwXE29-5Um4-zG0d-PCXe-Anz6-k876-CT3v0G" TYPE="LVM2_member"
/dev/mapper/bhaskarlaptop-data: UUID="09ac6747-95b8-4b62-ac0e-5b80adcd13fe" TYPE="ext3"

It has got so many useful flags through which you can get lot out of it. Please see the manpage reagrding this tool and every tool.

UUID:

As you can understand this is an abbreviation and the full form is "Universally Unique Identifier", which if you can see the previous command on this page; that is apprent from the command output of "blkid" right?

Now if you want to generate a new one means new "Universally Unique Identifier", then you have follow this way,basically it can done by two means one by is generated randomly or through "r" flag of uuidgen binary ot by time base with the help of "-t" flag.Ok I will show you both below:

Time Based:
bhaskar@bhaskar-laptop_06:05:51_Thu Sep 02:~> sudo /usr/bin/uuidgen -t
Password:
0fb2cfd4-b62a-11df-b336-001a4b90dadc

Randomized:
bhaskar@bhaskar-laptop_06:06:43_Thu Sep 02:~> sudo /usr/bin/uuidgen -r
Password:
c31645c4-7d72-493b-a85c-adadd61a0e49

Cool!! right.

Socklist:

As you can guess from the name that this command will going to enlist the socket running on the system for that it turn to /proc file system.

bhaskar@bhaskar-laptop_06:30:19_Thu Sep 02:~> sudo /usr/bin/socklist
type port inode uid pid fd name
tcp 111 7001 0 3010 8 rpcbind
tcp 80 6061 0 4077 3 httpd
tcp 53 5985 0 2792 21 named
tcp 53 5983 0 2792 20 named
tcp 25 6329 0 2904 12 master
tcp 953 5993 0 2792 22 named
tcp 17500 14128 1000 3047 18 dropbox
tcp 646 7030 0 3014 3 famd
tcp 80 0 0 0 0
udp 53 5984 0 2792 513 named
udp 53 5982 0 2792 512 named
udp 17500 14124 1000 3047 15 dropbox
udp 111 6995 0 3010 6 rpcbind
udp 123 5934 0 2791 5 ntpd
udp 641 7000 0 3010 7 rpcbind

Udisks:

This tool will show the system bus service with attached devices.It will spit out quite a verbose information.

bhaskar@bhaskar-laptop_06:37:01_Thu Sep 02:~> sudo /usr/bin/udisks --dump
========================================================================
Showing information for /org/freedesktop/UDisks/devices/dm_2d0
native-path: /sys/devices/virtual/block/dm-0
device: 254:0
device-file: /dev/dm-0
presentation: /dev/dm-0
by-id: /dev/disk/by-id/dm-name-bhaskarlaptop-data
by-id: /dev/disk/by-id/dm-uuid-LVM-gQo1BYHBfV6WxRuYfF3PO3YRgD1QSX7HyRhtgrM7prRmAE41YvqJsbtBRAA9wvdt
by-id: /dev/disk/by-uuid/09ac6747-95b8-4b62-ac0e-5b80adcd13fe
detected at: Wed 01 Sep 2010 10:34:56 PM IST
system internal: 1
removable: 0
has media: 1 (detected at Wed 01 Sep 2010 10:34:56 PM IST)
detects change: 0
detection by polling: 0
detection inhibitable: 0
detection inhibited: 0
is read only: 0
is mounted: 1
mount paths: /lvm
mounted by uid: 0
presentation hide: 0
presentation nopolicy: 1
presentation name:
presentation icon:
size: 26843545600
block size: 512
job underway: no
usage: filesystem
type: ext3
version: 1.0
uuid: 09ac6747-95b8-4b62-ac0e-5b80adcd13fe
label:
LVM2 Logical Volume:
LV name: data
LV uuid: yRhtgr-M7pr-RmAE-41Yv-qJsb-tBRA-A9wvdt
VG name: bhaskarlaptop
VG uuid: gQo1BY-HBfV-6WxR-uYfF-3PO3-YRgD-1QSX7H

========================================================================
Showing information for /org/freedesktop/UDisks/devices/sda
native-path: /sys/devices/pci0000:00/0000:00:1f.2/host0/target0:0:0/0:0:0:0/block/sda
device: 8:0
device-file: /dev/sda
presentation: /dev/sda
by-id: /dev/disk/by-id/ata-ST9160821AS_5MA8QHLW
by-id: /dev/disk/by-id/scsi-SATA_ST9160821AS_5MA8QHLW
by-path: /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0
detected at: Wed 01 Sep 2010 10:34:55 PM IST
system internal: 1
removable: 0
has media: 1 (detected at Wed 01 Sep 2010 10:34:55 PM IST)
detects change: 0
detection by polling: 0
detection inhibitable: 0
detection inhibited: 0
is read only: 0
is mounted: 0
mount paths:
mounted by uid: 0
presentation hide: 0
presentation nopolicy: 0
presentation name:
presentation icon:
size: 160041885696
block size: 512
job underway: no
usage:
type:
version:
uuid:
label:
partition table:
scheme: mbr
count: 8
drive:
vendor: ATA
model: ST9160821AS
revision: 3.BHE
serial: 5MA8QHLW
WWN:
detachable: 0
can spindown: 1
rotational media: Yes, unknown rate
write-cache: enabled
ejectable: 0
adapter: /org/freedesktop/UDisks/adapters/0000_3a00_3a1f_2e2
ports:
/org/freedesktop/UDisks/adapters/0000_3a00_3a1f_2e2/host0
similar devices:
media:
compat:
interface: ata
if speed: (unknown)
ATA SMART: Updated at Thu 02 Sep 2010 06:10:21 AM IST
overall assessment: UNKNOWN
===============================================================================
Attribute Current|Worst|Threshold Status Value Type Updates
===============================================================================
raw-read-error-rate 113|100| 6 good 52163879 Pre-fail Online
spin-up-time 99| 99| 0 n/a 0 Old-age Online
start-stop-count 97| 97| 20 good 3771 Pre-fail Online
reallocated-sector-count 100|100| 36 good 0 sectors Pre-fail Online
seek-error-rate 68| 60| 30 good 133359356520 Pre-fail Online
power-on-hours 94| 94| 0 n/a 225.4 days Old-age Online
spin-retry-count 100|100| 34 good 0 Pre-fail Online
power-cycle-count 98| 98| 20 good 2062 Pre-fail Online
attribute-184 100|253| 0 n/a 0 Old-age Online
reported-uncorrect 100|100| 0 n/a 0 sectors Old-age Online
attribute-188 100|100| 45 good 0 Old-age Online
high-fly-writes 90| 90| 0 n/a 10 Old-age Online
airflow-temperature-celsius 52| 36| 0 n/a 48C / 118F Old-age Online
power-off-retract-count 100|100| 0 n/a 213 Old-age Online
load-cycle-count 1| 1| 0 n/a 207899 Old-age Online
temperature-celsius-2 48| 64| 0 n/a 48C / 118F Old-age Online
hardware-ecc-recovered 82| 61| 0 n/a 225063895 Old-age Offline
current-pending-sector 100|100| 0 n/a 0 sectors Old-age Online
offline-uncorrectable 100|100| 0 n/a 0 sectors Old-age Offline
udma-crc-error-count 200|200| 0 n/a 0 Old-age Online
multi-zone-error-rate 100|253| 0 n/a 0 Old-age Offline
ta-increase-count 100|253| 0 n/a 0 Old-age Offline

========================================================================
Showing information for /org/freedesktop/UDisks/devices/sda1
native-path: /sys/devices/pci0000:00/0000:00:1f.2/host0/target0:0:0/0:0:0:0/block/sda/sda1
device: 8:1
device-file: /dev/sda1
presentation: /dev/sda1
by-id: /dev/disk/by-id/ata-ST9160821AS_5MA8QHLW-part1
by-id: /dev/disk/by-id/scsi-SATA_ST9160821AS_5MA8QHLW-part1
by-id: /dev/disk/by-uuid/f6f903f1-03cd-4387-933c-8c928514c958
by-path: /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0-part1
detected at: Wed 01 Sep 2010 10:34:56 PM IST
system internal: 1
removable: 0
has media: 1 (detected at Wed 01 Sep 2010 10:34:56 PM IST)
detects change: 0
detection by polling: 0
detection inhibitable: 0
detection inhibited: 0
is read only: 0
is mounted: 0
mount paths:
mounted by uid: 0
presentation hide: 0
presentation nopolicy: 0
presentation name:
presentation icon:
size: 50001444864
block size: 512
job underway: no
usage: filesystem
type: ext3
version: 1.0
uuid: f6f903f1-03cd-4387-933c-8c928514c958
label:
partition:
part of: /org/freedesktop/UDisks/devices/sda
scheme: mbr
number: 1
type: 0x83
flags:
offset: 32256
alignment offset: 0
size: 50001444864
label:
uuid:

========================================================================
Showing information for /org/freedesktop/UDisks/devices/sda2
native-path: /sys/devices/pci0000:00/0000:00:1f.2/host0/target0:0:0/0:0:0:0/block/sda/sda2
device: 8:2
device-file: /dev/sda2
presentation: /dev/sda2
by-id: /dev/disk/by-id/ata-ST9160821AS_5MA8QHLW-part2
by-id: /dev/disk/by-id/scsi-SATA_ST9160821AS_5MA8QHLW-part2
by-id: /dev/disk/by-uuid/a9380f41-173f-41be-8e20-b14fb78eaf9a
by-path: /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0-part2
detected at: Wed 01 Sep 2010 10:34:56 PM IST
system internal: 1
removable: 0
has media: 1 (detected at Wed 01 Sep 2010 10:34:56 PM IST)
detects change: 0
detection by polling: 0
detection inhibitable: 0
detection inhibited: 0
is read only: 0
is mounted: 0
mount paths:
mounted by uid: 0
presentation hide: 0
presentation nopolicy: 0
presentation name:
presentation icon:
size: 2303078400
block size: 512
job underway: no
usage: other
type: swap
version: 2
uuid: a9380f41-173f-41be-8e20-b14fb78eaf9a
label:
partition:
part of: /org/freedesktop/UDisks/devices/sda
scheme: mbr
number: 2
type: 0x82
flags:
offset: 50001477120
alignment offset: 0
size: 2303078400
label:
uuid:

========================================================================
Showing information for /org/freedesktop/UDisks/devices/sda3
native-path: /sys/devices/pci0000:00/0000:00:1f.2/host0/target0:0:0/0:0:0:0/block/sda/sda3
device: 8:3
device-file: /dev/sda3
presentation: /dev/sda3
by-id: /dev/disk/by-id/ata-ST9160821AS_5MA8QHLW-part3
by-id: /dev/disk/by-id/scsi-SATA_ST9160821AS_5MA8QHLW-part3
by-id: /dev/disk/by-uuid/3cccbf0e-0354-43b4-b89a-ceee1fcadb31
by-path: /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0-part3
detected at: Wed 01 Sep 2010 10:34:56 PM IST
system internal: 1
removable: 0
has media: 1 (detected at Wed 01 Sep 2010 10:34:56 PM IST)
detects change: 0
detection by polling: 0
detection inhibitable: 0
detection inhibited: 0
is read only: 0
is mounted: 0
mount paths:
mounted by uid: 0
presentation hide: 0
presentation nopolicy: 0
presentation name:
presentation icon:
size: 13999426560
block size: 512
job underway: no
usage: filesystem
type: ext3
version: 1.0
uuid: 3cccbf0e-0354-43b4-b89a-ceee1fcadb31
label:
partition:
part of: /org/freedesktop/UDisks/devices/sda
scheme: mbr
number: 3
type: 0x83
flags:
offset: 52304555520
alignment offset: 0
size: 13999426560
label:
uuid:

========================================================================
Showing information for /org/freedesktop/UDisks/devices/sda4
native-path: /sys/devices/pci0000:00/0000:00:1f.2/host0/target0:0:0/0:0:0:0/block/sda/sda4
device: 8:4
device-file: /dev/sda4
presentation: /dev/sda4
by-id: /dev/disk/by-id/ata-ST9160821AS_5MA8QHLW-part4
by-id: /dev/disk/by-id/scsi-SATA_ST9160821AS_5MA8QHLW-part4
by-path: /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0-part4
detected at: Wed 01 Sep 2010 10:34:56 PM IST
system internal: 1
removable: 0
has media: 1 (detected at Wed 01 Sep 2010 10:34:56 PM IST)
detects change: 0
detection by polling: 0
detection inhibitable: 0
detection inhibited: 0
is read only: 0
is mounted: 0
mount paths:
mounted by uid: 0
presentation hide: 0
presentation nopolicy: 0
presentation name:
presentation icon:
size: 1024
block size: 512
job underway: no
usage:
type:
version:
uuid:
label:
partition:
part of: /org/freedesktop/UDisks/devices/sda
scheme: mbr
number: 4
type: 0x05
flags:
offset: 66303982080
alignment offset: 0
size: 93735290880
label:
uuid:

========================================================================
Showing information for /org/freedesktop/UDisks/devices/sda5
native-path: /sys/devices/pci0000:00/0000:00:1f.2/host0/target0:0:0/0:0:0:0/block/sda/sda5
device: 8:5
device-file: /dev/sda5
presentation: /dev/sda5
by-id: /dev/disk/by-id/ata-ST9160821AS_5MA8QHLW-part5
by-id: /dev/disk/by-id/scsi-SATA_ST9160821AS_5MA8QHLW-part5
by-id: /dev/disk/by-uuid/a217eb70-52b1-4e20-8841-7cb366a54c40
by-path: /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0-part5
detected at: Wed 01 Sep 2010 10:34:56 PM IST
system internal: 1
removable: 0
has media: 1 (detected at Wed 01 Sep 2010 10:34:56 PM IST)
detects change: 0
detection by polling: 0
detection inhibitable: 0
detection inhibited: 0
is read only: 0
is mounted: 1
mount paths: /
mounted by uid: 0
presentation hide: 0
presentation nopolicy: 0
presentation name:
presentation icon:
size: 32901087744
block size: 512
job underway: no
usage: filesystem
type: ext3
version: 1.0
uuid: a217eb70-52b1-4e20-8841-7cb366a54c40
label:
partition:
part of: /org/freedesktop/UDisks/devices/sda
scheme: mbr
number: 5
type: 0x83
flags:
offset: 127138185216
alignment offset: 0
size: 32901087744
label:
uuid:

========================================================================
Showing information for /org/freedesktop/UDisks/devices/sda6
native-path: /sys/devices/pci0000:00/0000:00:1f.2/host0/target0:0:0/0:0:0:0/block/sda/sda6
device: 8:6
device-file: /dev/sda6
presentation: /dev/sda6
by-id: /dev/disk/by-id/ata-ST9160821AS_5MA8QHLW-part6
by-id: /dev/disk/by-id/scsi-SATA_ST9160821AS_5MA8QHLW-part6
by-id: /dev/disk/by-uuid/73917641-fbaf-4910-bf2a-5d86d93fb1ca
by-path: /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0-part6
detected at: Wed 01 Sep 2010 10:34:56 PM IST
system internal: 1
removable: 0
has media: 1 (detected at Wed 01 Sep 2010 10:34:56 PM IST)
detects change: 0
detection by polling: 0
detection inhibitable: 0
detection inhibited: 0
is read only: 0
is mounted: 0
mount paths:
mounted by uid: 0
presentation hide: 0
presentation nopolicy: 0
presentation name:
presentation icon:
size: 534610944
block size: 512
job underway: no
usage: filesystem
type: ext3
version: 1.0
uuid: 73917641-fbaf-4910-bf2a-5d86d93fb1ca
label:
partition:
part of: /org/freedesktop/UDisks/devices/sda
scheme: mbr
number: 6
type: 0x83
flags: boot
offset: 66304014336
alignment offset: 0
size: 534610944
label:
uuid:

========================================================================
Showing information for /org/freedesktop/UDisks/devices/sda7
native-path: /sys/devices/pci0000:00/0000:00:1f.2/host0/target0:0:0/0:0:0:0/block/sda/sda7
device: 8:7
device-file: /dev/sda7
presentation: /dev/sda7
by-id: /dev/disk/by-id/ata-ST9160821AS_5MA8QHLW-part7
by-id: /dev/disk/by-id/scsi-SATA_ST9160821AS_5MA8QHLW-part7
by-id: /dev/disk/by-uuid/0ba812ef-d38e-4fb6-9a2d-79fcb13768aa
by-path: /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0-part7
detected at: Wed 01 Sep 2010 10:34:56 PM IST
system internal: 1
removable: 0
has media: 1 (detected at Wed 01 Sep 2010 10:34:56 PM IST)
detects change: 0
detection by polling: 0
detection inhibitable: 0
detection inhibited: 0
is read only: 0
is mounted: 0
mount paths:
mounted by uid: 0
presentation hide: 0
presentation nopolicy: 0
presentation name:
presentation icon:
size: 10742183424
block size: 512
job underway: no
usage: filesystem
type: ext4
version: 1.0
uuid: 0ba812ef-d38e-4fb6-9a2d-79fcb13768aa
label: Fedora-12-i686-L
partition:
part of: /org/freedesktop/UDisks/devices/sda
scheme: mbr
number: 7
type: 0x83
flags:
offset: 66838657536
alignment offset: 0
size: 10742183424
label:
uuid:

========================================================================
Showing information for /org/freedesktop/UDisks/devices/sda8
native-path: /sys/devices/pci0000:00/0000:00:1f.2/host0/target0:0:0/0:0:0:0/block/sda/sda8
device: 8:8
device-file: /dev/sda8
presentation: /dev/sda8
by-id: /dev/disk/by-id/ata-ST9160821AS_5MA8QHLW-part8
by-id: /dev/disk/by-id/scsi-SATA_ST9160821AS_5MA8QHLW-part8
by-path: /dev/disk/by-path/pci-0000:00:1f.2-scsi-0:0:0:0-part8
detected at: Wed 01 Sep 2010 10:34:56 PM IST
system internal: 1
removable: 0
has media: 1 (detected at Wed 01 Sep 2010 10:34:56 PM IST)
detects change: 0
detection by polling: 0
detection inhibitable: 0
detection inhibited: 0
is read only: 0
is mounted: 0
mount paths:
mounted by uid: 0
presentation hide: 0
presentation nopolicy: 0
presentation name:
presentation icon:
size: 49557279744
block size: 512
job underway: no
usage: raid
type: LVM2_member
version: LVM2\x20001
uuid: VwXE29-5Um4-zG0d-PCXe-Anz6-k876-CT3v0G
label:
partition:
part of: /org/freedesktop/UDisks/devices/sda
scheme: mbr
number: 8
type: 0x8e
flags:
offset: 77580873216
alignment offset: 0
size: 49557279744
label:
uuid:

========================================================================
Showing information for /org/freedesktop/UDisks/devices/sr0
native-path: /sys/devices/pci0000:00/0000:00:1f.1/host3/target3:0:0/3:0:0:0/block/sr0
device: 11:0
device-file: /dev/sr0
presentation: /dev/sr0
by-path: /dev/disk/by-path/pci-0000:00:1f.1-scsi-0:0:0:0
detected at: Wed 01 Sep 2010 10:34:55 PM IST
system internal: 0
removable: 1
has media: 0
detects change: 1
detection by polling: 1
detection inhibitable: 1
detection inhibited: 0
is read only: 0
is mounted: 0
mount paths:
mounted by uid: 0
presentation hide: 0
presentation nopolicy: 0
presentation name:
presentation icon:
size: 0
block size: 0
job underway: no
usage:
type:
version:
uuid:
label:
drive:
vendor: Optiarc
model: DVD RW AD-7560A
revision: DH10
serial:
WWN:
detachable: 0
can spindown: 0
rotational media: Yes, unknown rate
write-cache: unknown
ejectable: 1
adapter: /org/freedesktop/UDisks/adapters/0000_3a00_3a1f_2e1
ports:
/org/freedesktop/UDisks/adapters/0000_3a00_3a1f_2e1/host3
similar devices:
media:
compat: optical_cd optical_cd_r optical_cd_rw optical_dvd optical_dvd_plus_r optical_dvd_plus_r_dl optical_dvd_plus_rw optical_dvd_r optical_dvd_ram optical_dvd_rw optical_mrw optical_mrw_w
interface: scsi
if speed: (unknown)
ATA SMART: not available

========================================================================

I have choose to spit out evrythig with the "--dump" option. You can select lot many thing individually by going through the man page of it.

IPCALC:

This tool will aid you to reveal the base internals of an ip address.It helps an network administrator to figure out the subnet/ip range/netmask very easily by one single command.So how it look like ? Here is the output of the command look :

root@bhaskar-laptop_06:45:35_Thu Sep 2:/ # ipcalc 127.0.0.1
Address: 127.0.0.1 01111111.00000000.00000000. 00000001
Netmask: 255.255.255.0 = 24 11111111.11111111.11111111. 00000000
Wildcard: 0.0.0.255 00000000.00000000.00000000. 11111111
=>
Network: 127.0.0.0/24 01111111.00000000.00000000. 00000000
HostMin: 127.0.0.1 01111111.00000000.00000000. 00000001
HostMax: 127.0.0.254 01111111.00000000.00000000. 11111110
Broadcast: 127.0.0.255 01111111.00000000.00000000. 11111111
Hosts/Net: 254 Class A, Loopback

You can put any ip-address as an argument.

Ok enough..not to bloat your mind with more information. May be some other related post of mine might reveal bunch of useful tool to navigate through the GNU/Linux system. I have ignored "lsof","lslk","fuser"and many more,because I found that those informations are easily available.

Cheers!
Bhaskar

Measuring and monitoring system performances through sysstat

2010-08-31T06:57:00.003+05:30

Being an administrator of a corporation to manage production box is an daunting task.One has to be very much aware what is going on into the box/servers by looking into it through some tools.One important package I am talking about is called "sysstats" ,which has so many important tool to disclose all the information needed by an administrator.

I do not issue any guarantee that this will work for you.

So this article I am using Arch Linux . As it doesn't come with base installation so I have to get it(sysstat) separately.

bhaskar@bhaskar-laptop_07:05:26_Tue Aug 31:~> sudo pacman -S sysstat
warning: sysstat-9.0.6.1-1 is up to date -- reinstalling
resolving dependencies...
looking for inter-conflicts...

Targets (1): sysstat-9.0.6.1-1

Total Download Size: 0.00 MB
Total Installed Size: 1.14 MB

Proceed with installation? [Y/n]

here I said N or no ,because I have already installed it long time back.You see that below:

bhaskar@bhaskar-laptop_07:08:31_Tue Aug 31:~> sudo pacman -Qi sysstat
Name : sysstat
Version : 9.0.6.1-1
URL : http://pagesperso-orange.fr/sebastien.godard/
Licenses : GPL
Groups : None
Provides : None
Depends On : glibc
Optional Deps : tk: to use isag
gnuplot: to use isag
Required By : None
Conflicts With : None
Replaces : None
Installed Size : 1168.00 K
Packager : Sergej Pupykin
Architecture : i686
Build Date : Mon 01 Mar 2010 03:51:14 AM IST
Install Date : Tue 02 Mar 2010 10:10:31 PM IST
Install Reason : Explicitly installed
Install Script : No
Description : A collection of performance monitoring tools

Here are the files installed by the package in the system..

bhaskar@bhaskar-laptop_07:10:35_Tue Aug 31:~> sudo pacman -Ql sysstat
sysstat /etc/
sysstat /etc/cron.daily/
sysstat /etc/cron.daily/sysstat
sysstat /etc/cron.hourly/
sysstat /etc/cron.hourly/sysstat
sysstat /etc/rc.d/
sysstat /etc/rc.d/sysstat
sysstat /etc/sysconfig/
sysstat /etc/sysconfig/sysstat
sysstat /etc/sysconfig/sysstat.ioconf
sysstat /etc/sysstat/
sysstat /etc/sysstat/sysstat
sysstat /usr/
sysstat /usr/bin/
sysstat /usr/bin/iostat
sysstat /usr/bin/isag
sysstat /usr/bin/mpstat
sysstat /usr/bin/pidstat
sysstat /usr/bin/sadf
sysstat /usr/bin/sar
sysstat /usr/lib/
sysstat /usr/lib/sa/
sysstat /usr/lib/sa/sa1
sysstat /usr/lib/sa/sa2
sysstat /usr/lib/sa/sadc
sysstat /usr/share/
sysstat /usr/share/doc/
sysstat /usr/share/doc/sysstat-9.0.6.1/
sysstat /usr/share/doc/sysstat-9.0.6.1/CHANGES
sysstat /usr/share/doc/sysstat-9.0.6.1/COPYING
sysstat /usr/share/doc/sysstat-9.0.6.1/CREDITS
sysstat /usr/share/doc/sysstat-9.0.6.1/FAQ
sysstat /usr/share/doc/sysstat-9.0.6.1/README
sysstat /usr/share/doc/sysstat-9.0.6.1/sysstat-9.0.6.1.lsm
sysstat /usr/share/locale/
sysstat /usr/share/locale/af/
sysstat /usr/share/locale/af/LC_MESSAGES/
sysstat /usr/share/locale/af/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/da/
sysstat /usr/share/locale/da/LC_MESSAGES/
sysstat /usr/share/locale/da/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/de/
sysstat /usr/share/locale/de/LC_MESSAGES/
sysstat /usr/share/locale/de/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/es/
sysstat /usr/share/locale/es/LC_MESSAGES/
sysstat /usr/share/locale/es/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/fi/
sysstat /usr/share/locale/fi/LC_MESSAGES/
sysstat /usr/share/locale/fi/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/fr/
sysstat /usr/share/locale/fr/LC_MESSAGES/
sysstat /usr/share/locale/fr/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/id/
sysstat /usr/share/locale/id/LC_MESSAGES/
sysstat /usr/share/locale/id/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/it/
sysstat /usr/share/locale/it/LC_MESSAGES/
sysstat /usr/share/locale/it/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/ja/
sysstat /usr/share/locale/ja/LC_MESSAGES/
sysstat /usr/share/locale/ja/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/ky/
sysstat /usr/share/locale/ky/LC_MESSAGES/
sysstat /usr/share/locale/ky/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/lv/
sysstat /usr/share/locale/lv/LC_MESSAGES/
sysstat /usr/share/locale/lv/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/mt/
sysstat /usr/share/locale/mt/LC_MESSAGES/
sysstat /usr/share/locale/mt/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/nb/
sysstat /usr/share/locale/nb/LC_MESSAGES/
sysstat /usr/share/locale/nb/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/nl/
sysstat /usr/share/locale/nl/LC_MESSAGES/
sysstat /usr/share/locale/nl/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/nn/
sysstat /usr/share/locale/nn/LC_MESSAGES/
sysstat /usr/share/locale/nn/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/pl/
sysstat /usr/share/locale/pl/LC_MESSAGES/
sysstat /usr/share/locale/pl/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/pt/
sysstat /usr/share/locale/pt/LC_MESSAGES/
sysstat /usr/share/locale/pt/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/pt_BR/
sysstat /usr/share/locale/pt_BR/LC_MESSAGES/
sysstat /usr/share/locale/pt_BR/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/ro/
sysstat /usr/share/locale/ro/LC_MESSAGES/
sysstat /usr/share/locale/ro/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/ru/
sysstat /usr/share/locale/ru/LC_MESSAGES/
sysstat /usr/share/locale/ru/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/sk/
sysstat /usr/share/locale/sk/LC_MESSAGES/
sysstat /usr/share/locale/sk/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/sv/
sysstat /usr/share/locale/sv/LC_MESSAGES/
sysstat /usr/share/locale/sv/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/vi/
sysstat /usr/share/locale/vi/LC_MESSAGES/
sysstat /usr/share/locale/vi/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/zh_CN/
sysstat /usr/share/locale/zh_CN/LC_MESSAGES/
sysstat /usr/share/locale/zh_CN/LC_MESSAGES/sysstat.mo
sysstat /usr/share/locale/zh_TW/
sysstat /usr/share/locale/zh_TW/LC_MESSAGES/
sysstat /usr/share/locale/zh_TW/LC_MESSAGES/sysstat.mo
sysstat /usr/share/man/
sysstat /usr/share/man/man1/
sysstat /usr/share/man/man1/iostat.1.gz
sysstat /usr/share/man/man1/isag.1.gz
sysstat /usr/share/man/man1/mpstat.1.gz
sysstat /usr/share/man/man1/pidstat.1.gz
sysstat /usr/share/man/man1/sadf.1.gz
sysstat /usr/share/man/man1/sar.1.gz
sysstat /usr/share/man/man8/
sysstat /usr/share/man/man8/sa1.8.gz
sysstat /usr/share/man/man8/sa2.8.gz
sysstat /usr/share/man/man8/sadc.8.gz
sysstat /var/
sysstat /var/log/
sysstat /var/log/sa/

Now it puts a crontab entry to run daily on the installed system..although you can control it according your choice..

bhaskar@bhaskar-laptop_07:13:35_Tue Aug 31:/etc/cron.daily> cat sysstat
#!/bin/sh
# Generate a daily summary of process accounting. Since this will probably
# get kicked off in the morning, it would probably be better to run against
# the previous days data.
/usr/lib/sa/sa2 -A &

This package come with so many binary and all of them are very useful tool. I will explain all of them one by one.First tool is callled sar..and it will output like this..

bhaskar@bhaskar-laptop_07:15:59_Tue Aug 31:~> sudo sar
Password:
Linux 2.6.34-ARCH (bhaskar-laptop) 08/31/2010 _i686_ (2 CPU)

06:27:36 AM LINUX RESTART

06:28:02 AM CPU %user %nice %system %iowait %steal %idle
06:38:02 AM all 8.57 0.00 1.80 6.59 0.00 83.04
06:48:02 AM all 22.57 0.00 5.11 5.40 0.00 66.92
06:58:02 AM all 16.56 0.00 5.58 3.81 0.00 74.05
07:08:02 AM all 7.46 0.00 2.79 4.52 0.00 85.23
Average: all 13.79 0.00 3.82 5.08 0.00 77.31

Now bit of explanation is required for the fields it shows which I enumerated below:

Sar is system activity reporter.

%user and %nice refer to your software programs, such as MySQL or Apache.
%system refers to the kernelâ€™s internal workings.
%iowait is time spent waiting for Input/Output, such as a disk read or write. Finally, since the kernel accounts for 100% of the runnable time it can schedule, any unused time goes into %idle.

It come along with another two binary relates sar is called sa1 and sa2.What does this fellows do to sar??

The sa1 script logs sar output into sysstat's binary log file format, and sa2 reports it back in human readable format.Clear!

And the reports it provide kept in a dir called /var/log/sa and file with date attached to it...

bhaskar@bhaskar-laptop_07:25:28_Tue Aug 31:/var/log/sa> ls
sa23 sa24 sa25 sa30 sa31 sar24 sar30

"-W" this flag to sar shows the swap related activity on the system

bhaskar@bhaskar-laptop_07:31:09_Tue Aug 31:~> sudo sar -W
Password:
Linux 2.6.34-ARCH (bhaskar-laptop) 08/31/2010 _i686_ (2 CPU)

06:27:36 AM LINUX RESTART

06:28:02 AM pswpin/s pswpout/s
06:38:02 AM 0.00 0.00
06:48:02 AM 0.00 0.00
06:58:02 AM 0.03 1.67
07:08:02 AM 0.01 3.20
07:18:02 AM 0.13 4.02
07:28:01 AM 0.12 0.36
Average: 0.05 1.54

"-r" option to sar show memory related thig from the system:

bhaskar@bhaskar-laptop_07:37:50_Tue Aug 31:~> sudo sar -r
Linux 2.6.34-ARCH (bhaskar-laptop) 08/31/2010 _i686_ (2 CPU)

06:27:36 AM LINUX RESTART

06:28:02 AM kbmemfree kbmemused %memused kbbuffers kbcached kbcommit %commit
06:38:02 AM 204468 815896 79.96 31784 399596 1412880 43.21
06:48:02 AM 62120 958244 93.91 61984 407388 1566932 47.93
06:58:02 AM 40344 980020 96.05 93368 348428 1622948 49.64
07:08:02 AM 27240 993124 97.33 126952 312652 1576108 48.21
07:18:02 AM 72528 947836 92.89 96988 334604 1454800 44.50
07:28:01 AM 58732 961632 94.24 95268 344540 1486996 45.48
Average: 77572 942792 92.40 84391 357868 1520111 46.49

"-b" option shows some paging statistics :

bhaskar@bhaskar-laptop_07:41:19_Tue Aug 31:~> sudo sar -b
Linux 2.6.34-ARCH (bhaskar-laptop) 08/31/2010 _i686_ (2 CPU)

06:27:36 AM LINUX RESTART

06:28:02 AM tps rtps wtps bread/s bwrtn/s
06:38:02 AM 25.49 19.80 5.69 951.22 108.95
06:48:02 AM 35.10 20.35 14.76 259.20 337.45
06:58:02 AM 24.73 16.87 7.86 159.71 230.64
07:08:02 AM 53.55 42.64 10.91 356.85 273.27
07:18:02 AM 61.84 53.96 7.88 477.19 293.56
07:28:01 AM 5.12 1.15 3.96 49.08 74.69
07:38:01 AM 5.75 2.34 3.41 90.68 61.61
Average: 30.23 22.45 7.78 334.87 197.18

Anyway you can fuse your terminal reports into the excel sheet to manage thing as the origianl page is shown the way how to do it.Kndly visit the origianl pacakge author page to see the options.

Ok now lets talk about another binary come with package called "pidstat" What it does??

pidstat command is used to monitor processes and threads currently being managed by the Linux kernel. It can also monitor the children of those processes and threads.

on my system it shows the thing going underneath:

bhaskar@bhaskar-laptop_07:41:22_Tue Aug 31:~> sudo pidstat -d 2
Password:
Linux 2.6.34-ARCH (bhaskar-laptop) 08/31/2010 _i686_ (2 CPU)

07:46:56 AM PID kB_rd/s kB_wr/s kB_ccwr/s Command
07:46:58 AM 990 0.00 11.82 0.00 kjournald
07:46:58 AM 3948 0.00 1.97 1.97 plugin-containe

07:46:58 AM PID kB_rd/s kB_wr/s kB_ccwr/s Command

07:47:00 AM PID kB_rd/s kB_wr/s kB_ccwr/s Command
07:47:02 AM 990 0.00 6.00 0.00 kjournald
07:47:02 AM 3948 0.00 2.00 2.00 plugin-containe

07:47:02 AM PID kB_rd/s kB_wr/s kB_ccwr/s Command
07:47:04 AM 3835 0.00 2.00 2.00 firefox

07:47:04 AM PID kB_rd/s kB_wr/s kB_ccwr/s Command

07:47:06 AM PID kB_rd/s kB_wr/s kB_ccwr/s Command
07:47:08 AM 990 0.00 8.00 0.00 kjournald
07:47:08 AM 3948 0.00 2.00 2.00 plugin-containe

07:47:08 AM PID kB_rd/s kB_wr/s kB_ccwr/s Command

07:47:10 AM PID kB_rd/s kB_wr/s kB_ccwr/s Command
07:47:12 AM 990 0.00 12.00 0.00 kjournald
07:47:12 AM 3948 0.00 2.00 2.00 plugin-containe

"-d" option provide I/O statistics.

Now get the memory utilisation stat through "-r" flag of this binary.

bhaskar@bhaskar-laptop_07:50:18_Tue Aug 31:~> sudo pidstat -r
Linux 2.6.34-ARCH (bhaskar-laptop) 08/31/2010 _i686_ (2 CPU)

07:51:41 AM PID minflt/s majflt/s VSZ RSS %MEM Command
07:51:41 AM 1 0.45 0.00 1752 620 0.06 init
07:51:41 AM 1023 0.54 0.00 2148 948 0.09 udevd
07:51:41 AM 2772 0.02 0.00 5080 428 0.04 syslog-ng
07:51:41 AM 2773 0.09 0.00 5396 1620 0.16 syslog-ng
07:51:41 AM 2804 0.03 0.00 3420 700 0.07 ntpd
07:51:41 AM 2805 0.25 0.00 8232 3848 0.38 named
07:51:41 AM 2824 0.04 0.00 2372 760 0.07 xinetd
07:51:41 AM 2834 0.23 0.00 18672 8492 0.83 httpd
07:51:41 AM 2874 0.05 0.00 18724 6760 0.66 httpd
07:51:41 AM 2875 0.15 0.00 18688 7660 0.75 httpd
07:51:41 AM 2876 0.15 0.00 18688 7660 0.75 httpd
07:51:41 AM 2877 0.14 0.00 18824 7844 0.77 httpd
07:51:41 AM 2878 0.15 0.00 18688 7660 0.75 httpd
07:51:41 AM 2879 0.15 0.00 18688 7660 0.75 httpd
07:51:41 AM 2917 0.13 0.00 8468 1888 0.19 master
07:51:41 AM 2931 0.12 0.00 8540 1760 0.17 pickup
07:51:41 AM 2932 0.12 0.00 8592 1776 0.17 qmgr
07:51:41 AM 2936 0.04 0.00 1800 628 0.06 crond
07:51:41 AM 2946 0.16 0.00 2788 1216 0.12 dbus-daemon
07:51:41 AM 2954 0.60 0.00 15052 3608 0.35 hald
07:51:41 AM 2955 0.19 0.00 3516 1172 0.11 hald-runner
07:51:41 AM 2984 0.08 0.00 3580 992 0.10 hald-addon-inpu
07:51:41 AM 2986 0.08 0.00 3580 988 0.10 hald-addon-rfki
07:51:41 AM 2987 0.08 0.00 3580 984 0.10 hald-addon-leds
07:51:41 AM 2996 0.07 0.00 3576 992 0.10 hald-addon-gene
07:51:41 AM 2998 0.08 0.00 3580 1000 0.10 hald-addon-stor
07:51:41 AM 3008 0.08 0.00 3244 1012 0.10 hald-addon-acpi
07:51:41 AM 3023 0.03 0.00 6216 688 0.07 rpcbind
07:51:41 AM 3027 0.02 0.00 3148 308 0.03 famd
07:51:41 AM 3036 0.02 0.00 1960 356 0.03 gpm
07:51:41 AM 3044 0.24 0.00 13912 2152 0.21 gdm-binary
07:51:41 AM 3060 3.17 0.04 143100 19616 1.92 dropbox
07:51:41 AM 3072 0.04 0.00 1752 536 0.05 agetty
07:51:41 AM 3073 0.04 0.00 1752 540 0.05 agetty
07:51:41 AM 3074 0.04 0.00 1752 540 0.05 agetty
07:51:41 AM 3075 0.04 0.00 1752 536 0.05 agetty
07:51:41 AM 3076 0.04 0.00 1752 532 0.05 agetty
07:51:41 AM 3077 0.04 0.00 1752 536 0.05 agetty
07:51:41 AM 3132 0.25 0.00 17028 2804 0.27 gdm-simple-slav
07:51:41 AM 3155 162.21 0.01 82076 35784 3.51 Xorg
07:51:41 AM 3194 0.28 0.00 18224 2236 0.22 console-kit-dae
07:51:41 AM 3195 0.03 0.00 3528 644 0.06 ntpd
07:51:41 AM 3272 0.03 0.00 3172 332 0.03 dbus-launch
07:51:41 AM 3277 0.24 0.00 5448 2540 0.25 upowerd
07:51:41 AM 3331 0.42 0.00 17664 5400 0.53 polkit-gnome-au
07:51:41 AM 3335 0.25 0.00 5640 2672 0.26 polkitd
07:51:41 AM 3336 0.16 0.00 14888 2064 0.20 gdm-session-wor
07:51:41 AM 3349 0.11 0.00 22176 1432 0.14 gnome-keyring-d
07:51:41 AM 3367 0.73 0.00 25064 5380 0.53 gnome-session
07:51:41 AM 3385 0.03 0.00 3172 332 0.03 dbus-launch
07:51:41 AM 3386 0.09 0.00 2616 1116 0.11 dbus-daemon
07:51:41 AM 3388 0.02 0.00 3540 224 0.02 ssh-agent
07:51:41 AM 3391 0.18 0.00 6776 2580 0.25 gconfd-2
07:51:41 AM 3396 0.69 0.01 22052 7000 0.69 gnome-settings-
07:51:41 AM 3401 0.13 0.00 6352 1708 0.17 gvfsd
07:51:41 AM 3404 0.79 0.00 55332 12088 1.18 metacity
07:51:41 AM 3405 0.90 0.01 42768 11040 1.08 gnome-panel
07:51:41 AM 3407 0.21 0.00 7932 2764 0.27 gvfs-gdu-volume
07:51:41 AM 3409 0.25 0.00 13512 2556 0.25 udisks-daemon
07:51:41 AM 3410 0.03 0.00 5000 512 0.05 udisks-daemon
07:51:41 AM 3425 0.11 0.00 38324 1492 0.15 gvfs-fuse-daemo
07:51:41 AM 3429 1.24 0.02 53156 8800 0.86 nautilus
07:51:41 AM 3431 0.25 0.00 41896 2352 0.23 bonobo-activati
07:51:41 AM 3442 27.99 0.00 20928 6888 0.68 multiload-apple
07:51:41 AM 3445 0.44 0.01 21036 7000 0.69 battstat-applet
07:51:41 AM 3446 0.67 0.00 50716 11744 1.15 gweather-applet
07:51:41 AM 3448 0.74 0.01 41420 11764 1.15 clock-applet
07:51:41 AM 3450 0.70 0.00 41736 11532 1.13 wnck-applet
07:51:41 AM 3451 0.42 0.00 20500 6644 0.65 notification-ar
07:51:41 AM 3452 0.29 0.00 16120 4172 0.41 polkit-gnome-au
07:51:41 AM 3454 0.35 0.00 17840 5308 0.52 gdu-notificatio
07:51:41 AM 3480 0.08 0.00 17236 1460 0.14 gnome-screensav
07:51:41 AM 3502 0.17 0.00 6856 2396 0.23 gvfsd-trash
07:51:41 AM 3509 0.18 0.00 4828 1888 0.19 system-tools-ba
07:51:41 AM 3516 0.13 0.00 6484 1740 0.17 gvfsd-burn
07:51:41 AM 3522 0.76 0.00 12724 10152 0.99 SystemToolsBack
07:51:41 AM 3528 0.76 0.01 47896 12500 1.23 gnome-terminal
07:51:41 AM 3529 0.05 0.00 1796 580 0.06 gnome-pty-helpe
07:51:41 AM 3531 0.15 0.00 4924 1884 0.18 bash
07:51:41 AM 3538 0.07 0.00 4412 844 0.08 screen
07:51:41 AM 3539 0.13 0.00 4676 1372 0.13 screen
07:51:41 AM 3540 0.16 0.00 4924 1892 0.19 bash
07:51:41 AM 3546 0.14 0.00 4000 900 0.09 su
07:51:41 AM 3547 0.20 0.00 4900 1876 0.18 bash
07:51:41 AM 3577 0.04 0.00 2144 844 0.08 udevd
07:51:41 AM 3578 0.03 0.00 2144 864 0.08 udevd
07:51:41 AM 3611 0.16 0.00 4924 1872 0.18 bash
07:51:41 AM 3617 0.26 0.01 4884 1796 0.18 bash
07:51:41 AM 3628 0.16 0.00 4924 1876 0.18 bash
07:51:41 AM 3635 0.21 0.01 5136 1164 0.11 bash
07:51:41 AM 3655 0.21 0.00 4924 1920 0.19 bash
07:51:41 AM 3674 0.14 0.00 4000 904 0.09 su
07:51:41 AM 3675 0.16 0.00 4900 1868 0.18 bash
07:51:41 AM 3684 0.27 0.01 5552 2740 0.27 bash
07:51:41 AM 3701 1.87 0.00 4924 1956 0.19 bash
07:51:41 AM 3708 0.13 0.00 4604 1372 0.13 thunderbird
07:51:41 AM 3721 0.10 0.00 4736 1420 0.14 run-mozilla.sh
07:51:41 AM 3725 8.07 0.08 272920 81716 8.01 thunderbird-bin
07:51:41 AM 3835 234.27 0.12 749812 283212 27.76 firefox
07:51:41 AM 3848 0.01 0.00 4608 448 0.04 firefox_cpu_lim
07:51:41 AM 3849 9.11 0.00 1916 588 0.06 cpulimit
07:51:41 AM 3948 9.40 0.03 112288 36312 3.56 plugin-containe
07:51:41 AM 3956 0.13 0.00 18688 7656 0.75 httpd
07:51:41 AM 3965 0.70 0.00 41128 10936 1.07 notification-da
07:51:41 AM 5130 0.13 0.00 1780 636 0.06 sadc
07:51:41 AM 5859 0.19 0.00 3656 812 0.08 pidstat

Now lets talk about two very important tool which will provide different way to view things. Those are called "sadc" and "sadf".I will cover one after another below.

SADC:
It is system activity and data collector daemon.Even w can use it manually too!.Sadc command intened to run behind the sar command.Actually it will write the binary format of the statistics it collect day by day and put into a dir i.e /var/log/sadd,where dd stands for the particular day.As the man page said it can only provide local activity,means runs on the same host it installed.

I am putting here few example stright out of the manual page for clear understanding.Here we go:

/usr/lib/sa/sadc 1 10 /tmp/datafile
Write 10 records of one second intervals to the /tmp/datafile binary file.

/usr/lib/sa/sadc -C Backup_Start /tmp/datafile
Insert the comment Backup_Start into the file /tmp/datafile.

So move onto the next tool called sadf.

SADF:
This tool actually dispaly the collected data by sar in different format.Which is wonderful..because you can fuse your data to various places to get lot many information.It will essentially provide XML,CVS format data .

once again I am putting example stright out of the manual page for easy understanding.Here we go:

sadf -d /var/log/sa/sa21 -- -r -n DEV
Extract memory, swap space and network statistics from system activity file 'sa21', and display them in a format that can be ingested by a
database.

sadf -p -P 1
Extract CPU statistics for processor 1 (the second processor) from current daily data file, and display them in a format that can easily be
handled by a pattern processing command.

Hope this will help.

Cheers!
Bhaskar

Few tricks and info about sudo

2010-08-19T08:15:00.004+05:30

Working in a multi-admin environment ;where more then one administrator controlling servers,as often the case with most of the big corporates.Then you need a mechanism to deal with that which not allowed each other to overlap their work and keep track who is firing what.Sudo is that kind tool ,which is quite indispensable in the multi-admin production environment.

I do not issue any guarantee that this will work for you.

Most of the GNU/Linux distribution come with sudo..if not then please download it through by it(OSes) package manager. It should be in the repository of that distribution.

Once installed a configuration file related to it placed at /etc named sudoers . So you need edit it according to your requirement to get thing going with this tool.

Tool for to edit that file is called "visudo" ..which nothing but a vi/vim editor with a lock..means when someone editing others won't allow to do anything in it.Clear?? right.

You need to called it like this:

root@bhaskar-laptop_08:37:05_Thu Aug 19:/home/bhaskar # visudo

and the file /etc/sudoers should open in it,but with a temporary location and place with a lock.

Ok..now few internals entry need to visit for the sake of clarity of it's function.So here we go:

Suppose we want to allow sudo with some specific host with specific users on it to allow use of sudo.Did I confuse you with the last statement??not worry ...I will explain it in details..read on:

The careful reader will note that there was a bit of a change here. The line used to read jim ALL=(ALL) ALL?, but now there's only one ALL left. Reading the man page can easily leave you quite confused as to what those three ALL??s meant. ALL refers to machines- the assumption is that this is a network wide sudoers file. In the case of this machine (lnxserve) we could do this:

jim lnxserve= /bin/kill, /usr/sbin/jim/

Now let me explain that a host/machine name called "lnxserve" has a user called "jim" and heis entitled to run those two command right side of the "=" .

So what was the (ALL)? for? Well, here;s a clue:

jim lnxserve=(paul,linda) /bin/kill, /usr/sbin/jim/

Yes this line bring another twist into the previous line.Here it says.. a machine called "lnxserv" with a user called "jim" who will be able to run command as paul and linda with specified command mentioned.

That says that jim can (using sudo -u ) run commands as paul or linda. Yes it sometimes necessary to do it because of various reason in the production environment.I not going into that details ,because that might take another whole article to talk about.

This is perfect for giving jim the power to kill paul or linda's processes without giving him anything else. There is one thing we need to add though: if we just left it like this, jim is forced to use sudo -u paul or sudo -u linda every time. We can add a default runas_default:

Defaults:jim timestamp_timeout=-1, env_delete+=BOOP, runas_default=linda

So jim can easily run command as linda by default.I am going to put some line straight out of the man page for clarity:

To get a file listing of an unreadable directory:

$ sudo ls /usr/local/protected

To list the home directory of user yaz on a machine where the file system holding ~yaz is not exported as root:

$ sudo -u yaz ls ~yaz

To edit the index.html file as user www:

$ sudo -u www vi ~www/htdocs/index.html

To view system logs only accessible to root and users in the adm group:

$ sudo -g adm view /var/log/syslog

To run an editor as jim with a different primary group:

$ sudo -u jim -g audio vi ~jim/sound.txt

To shutdown a machine:

$ sudo shutdown -r +15 "quick reboot"

To make a usage listing of the directories in the /home partition. Note that this runs the commands in a sub-shell to make the cd and file redirection
work.

$ sudo sh -c "cd /home ; du -s * | sort -rn > USAGE"

Hope this will help.

Cheers!
Bhaskar

How to properly run fsck on (/) root or other partitions including LVM

2010-08-16T08:08:00.006+05:30

As it is an important issue to deal with low level thing in the server archtecture. Being an GNU/Linux administrator/NOC/Ops one has to have the clear cut understanding what they are doing.Because handling the production box require lot of common sense and in depth knowlegde about the platform/OS.

So without much ado lets play with it or let me show you the simple tricks.

I do not issue any guarantee that this will work for you.

So the first question come into the mind why the hell you need to check the filesystem?? Specially the root(/) part of it...sound pretty dull and boring...huh..please don't ignore this.You know ignorance is a sin...so do not commit it.

Now filesystem can be corrupted in various ways..few common ways are :

1) Not properly shutdown the server(although most of the cases journaling will do the healing)

2) Sudden power cut left your system down with lot of processing going on

3)Somebody has done something special(bad sense) to corrupt the data on that particular partition.

It is a bad idea and not recommended to run fsck(yes,this is the inbuilt tool you need to use)the mounted partition or drive.So don't do that.

Now, running fsck on other partition like /home,/var,/usr ...

First and foremost thing to be done is get into a single user mode..how do you do that?

ok once you type init 1 at the terminal prompt you will be taken to the singe user mode.From there simply unmount the partions as show below:

root@bhaskar-laptop_08:16:36_Mon Aug 16:/home/bhaskar # init 1 ---> this will bring to the single user mode

root@bhaskar-laptop_08:16:36_Mon Aug 16:/home/bhaskar # umount /dev/sda2 ---> assuming this partion hold the /home section.

Now run the fsck:

root@bhaskar-laptop_08:18:02_Mon Aug 16:/home/bhaskar # fsck -yfv /dev/sda2

Ok..let me explain the flags or switch I passed with the fsck .

y------> it will try to detect and fix any filesystem related corruption without manual intervention.

f-----------> this will force check even the system check says it's clean.

v--------> It will provide you the verbose explanation what that comming going through on the terminal screen.

Now a major problem in our hand. That we find out that root(/)partition of the filesystem gor corrupted due to some reasons.So we need to fix that issue to get back the system as soon as possible on the track.

For this kind of problem..it significant that on a mounted system you just cannot run fsck...as I said earlier..becauase it will corrupt the data on it.So we need a installation cd/dvd for our rescue. The first cd/dvd will do the job for us or get a systemrescuecd to do that.

Once you boot with one of those cd/dvd and put the below text at the command prompt it presents:

#linux rescue nomount

Now once you fire that one you are on the prompt so you can begin work on that.First we need to do is fire a mknod command.Now ask me why need to do that???

Because we had passed the option nomount in the last section so it will not parse any file system or it will not initialize any filesystem or create any device to operate on.If you try to run fsck now it will fail.

So to run correctly the fsck to on a filesystem we need to create device file for that.For that we need to run mknod.But to use mknod we need to know the Major number and Minor number of the device.Lets get those number...wait before that I need to tell you few thing about what Major number and Minor number of a device and how it signifies.

What is Major Number and Minor number??

Traditionally, the major number identifies the driver associated with the device. For example, /dev/null and /dev/zero are both managed by driver 1, whereas virtual consoles and serial terminals are managed by driver 4; similarly, both vcs1 and vcsa1 devices are managed by driver 7. Modern Linux kernels allow multiple drivers to share major numbers, but most devices that you will see are still organized on the one-major-one-driver principle.

The minor number is used by the kernel to determine exactly which device is being referred to. Depending on how your driver is written, you can either get a direct pointer to your device from the kernel, or you can use the minor number yourself as an index into a local array of devices. Either way, the kernel itself knows almost nothing about minor numbers beyond the fact that they refer to devices implemented by your driver.

So it's clear?? right.lets move on we need to find out the major number and minor number of the device to run mknod:

root@bhaskar-laptop_08:42:30_Mon Aug 16:/home/bhaskar # ls -al /dev/sda
brw-rw---- 1 root disk 8, 0 Aug 16 07:15 /dev/sda

See it will look like this...as 4the and 5th column holds the major number and minor number.Now create the device file:

#mknod /dev/sda b 8 0

It will create the device file.Once it's done you are safe to run fsck on that particular partition holding your root(/) filesystem.

#fsck -yfv /dev/YourRootPartition(sda,hda,....)

Now lets have some fun with LVM.

We need few tools to manipulate that kind of partition which will provide the lvm package within the os or in come inbuilt with other rescue cd.

We need to find out physical disk,volume group and logical partition ..where we are going to run fsck..right?

pvscan :Physical scanning of particular disk

root@bhaskar-laptop_08:44:06_Mon Aug 16:/home/bhaskar # pvscan
PV /dev/sda8 VG bhaskarlaptop lvm2 [46.15 GiB / 21.15 GiB free]
Total: 1 [46.15 GiB] / in use: 1 [46.15 GiB] / in no VG: 0 [0 ]

vgscan :Volume group scanning

root@bhaskar-laptop_08:50:24_Mon Aug 16:/home/bhaskar # vgscan
Reading all physical volumes. This may take a while...
Found volume group "bhaskarlaptop" using metadata type lvm2

lvscan :Logical volume scanning

root@bhaskar-laptop_08:52:00_Mon Aug 16:/home/bhaskar # lvscan
ACTIVE '/dev/bhaskarlaptop/data' [25.00 GiB] inherit

Now it is not activates then you need to activate the specific logical volume like this:

#lvchange -ay "yourLogicalVolume"

The final step:

Run the fsck on logical volume:

#fsck -yfv /YourLogicalVolume

Hope this will help.

Cheers!
Bhaskar