Tuesday, April 24, 2012
Wipe a hard disk
Sunday, April 15, 2012
How to extract *.xz files ?
How to extract *.xz files ?
If you are running Ubuntu, you should have the xz-utils installed by default. I am running Ubuntu 10.04, and to extract .xz files, I use the following command:
if it is not installed , install by giving the command:- sudo apt-get install xz-utils
xz -d path/to/file.xz
This will extract the file to the current directory.
If you are running Ubuntu, you should have the xz-utils installed by default. I am running Ubuntu 10.04, and to extract .xz files, I use the following command:
if it is not installed , install by giving the command:- sudo apt-get install xz-utils
xz -d path/to/file.xz
This will extract the file to the current directory.
Monday, April 2, 2012
Wednesday, February 22, 2012
Tuesday, February 14, 2012
allows access to the system by the user root only
PAM NOLOGIN:-
* allows access to the system by the user root only
* obviates the need to shut down services
* displays the contents of /etc/nologin file
sample content of this file :-
CURRENTLY WE ARE UNDERGOING SYSTEM MAINTENANCE, EXPECT US BACK IN 1600 HOURS
add the following directive
auth required pam_nologin.so to the relevant pam file.
(ex:- for ssh /etc/pam.d/sshd file)
[root@BACKUP-SERVER ~]# find / -name pam_nologin.so
/lib64/security/pam_nologin.so
/lib/security/pam_nologin.so
* allows access to the system by the user root only
* obviates the need to shut down services
* displays the contents of /etc/nologin file
sample content of this file :-
CURRENTLY WE ARE UNDERGOING SYSTEM MAINTENANCE, EXPECT US BACK IN 1600 HOURS
add the following directive
auth required pam_nologin.so to the relevant pam file.
(ex:- for ssh /etc/pam.d/sshd file)
[root@BACKUP-SERVER ~]# find / -name pam_nologin.so
/lib64/security/pam_nologin.so
/lib/security/pam_nologin.so
Monday, February 13, 2012
How will you implement account lockout policy in linux?
How will you implement account lockout policy in linux?
soln:-
PAM_TALLY
* ability to tally failed login attempts and take actions
* Denies user access to the system based on no: of failed login attempts
* This feature / module not enabled by default
* uses /var/log/faillog - logs failed logins
* manipulate failed login counters
which pam_tally ?
/usr/sbin/pam_tally (i.e it is a root enabled utility)
* pam_tally --user username :- displays the count of the username
resetting a failed login counter:-
pam_tally --reset=n --user=username
Add the following line to /etc/pam.d/common-auth
auth required pam_tally.so deny=3 unlock_time=1800
NB:- tested in centos -5.5
for ubuntu systems see:- http://blog.bodhizazen.net/linux/ubuntu-how-to-faillog/
soln:-
PAM_TALLY
* ability to tally failed login attempts and take actions
* Denies user access to the system based on no: of failed login attempts
* This feature / module not enabled by default
* uses /var/log/faillog - logs failed logins
* manipulate failed login counters
which pam_tally ?
/usr/sbin/pam_tally (i.e it is a root enabled utility)
* pam_tally --user username :- displays the count of the username
resetting a failed login counter:-
pam_tally --reset=n --user=username
Add the following line to /etc/pam.d/common-auth
auth required pam_tally.so deny=3 unlock_time=1800
NB:- tested in centos -5.5
for ubuntu systems see:- http://blog.bodhizazen.net/linux/ubuntu-how-to-faillog/
Subscribe to:
Posts (Atom)


