External-only 2FA for secure ssh on CentOS / Red Hat 9
Securing external access to CentOS/RHEL ssh with google-authenticator 2FA
Securing external access to CentOS/RHEL ssh with google-authenticator 2FA
I had all sorts of fun today trying to get Subject Alternative Names working with my OpenSSL Apache server. Got there in the end though! I have been using OpenSSL on my CentOS servers for quite a few years, with certificates for Apache generated in OpenSSL, and then signed by a server that is a … [Read more…]
Applies to: Turba 3 with a mySQL backend. This was driven by the need to store 3 email addresses in Turba to ActiveSync with Apple iOS devices, which store up to 3 email addresses per contact.
This software – Air Video, http://www.inmethod.com/air-video/index.html – rocks… Enables streaming of videos, Divx, MKV, flv, etc to iOS devices. A small Java server component runs on the media server, and uses FFMPEG to convert on the fly to a format that is suitable for the client, which can be purchased through the App Store. I … [Read more…]
A lot of this taken from http://wiki.makethemove.net/index.php?title=LDAP-Samba Samba will serve three main purposes: Act as a Primary Domain Controller for Windows clients Serve the network printers to Windows clients Serve files to Windows and Linux clients To act as a primary domain controller, Samba needs to access LDAP as the central authentication database.
Introduction and LDAP Design Thanks to http://wiki.makethemove.net/index.php?title=LDAP-Samba. A lot of this is taken directly from there with modifications for my setup. Our domain will take the form of dc=simonandkate,dc=lan and OpenLDAP will be installed on Server01.
I had a motherboard failure a couple of weeks ago in my CentOS server. I couldn’t get the same model to replace it, so ended up with an Asus P5Q board. Slotted in OK, but I then had all sorts of fun trying to get it running properly with CentOS 5.3. Issues being: Network card … [Read more…]
Well apart from documentation the servers are completed. Samba now working as a PDC with roaming profiles for my wife’s XP laptop, mail server finished and working with all the Horde issues now resolved. Running on a new motherboard, so seeing more of the 4GB RAM that’s in it, and able to connect 6 SATA … [Read more…]
The mail server is finished, although I suspect I’ll be tweaking it for a while yet. Final setup is postfix / postgrey / amavisd-new / spamassassin / clamav / cyrus / horde, all using OpenLDAP authentication over TLS with saslauthd for Cyrus and Postfix.I had been using procmail in between postfix and cyrus, but that … [Read more…]
With a lot of help from Google and a good howto for another Linux distro, I last night got OpenLDAP up and running on one CentOS 5.2 virtual server, and 3 other servers working as LDAP clients, one of which is now running as a Samba PDC with LDAP back-end. Added some users, set passwords, … [Read more…]