it.guy.kelly

-Xrs parameter in JAVA_OPTIONS in Solaris

Kelly — Tue, 28 Jun 2011 20:41:27 +0000

On one of my web servers I use the “-Xrs” parameter in the JAVA_OPTIONS on a Solaris server. This tells the JVM to ignore any system shutdown requests. This prevents the JVM from shutting down in the event there is a system panic which may not otherwise cause a system crash. See the JVM parameters page for Solaris for more details.

Grep through a unix directory with a long list of files

Kelly — Thu, 16 Jun 2011 20:36:20 +0000

Sometimes when attempting to grep through the files in a directory, there are so many files in the directory that grep returns an error indicating the argument list is too long. Fix this by using xargs.

find ./ -print | xargs grep -l

Count number of files in a unix directory

Kelly — Thu, 16 Jun 2011 20:33:15 +0000

ls -1 | wc -l

Edit nofiles

Kelly — Mon, 02 May 2011 20:17:05 +0000

Running an Oracle ODI installer on a CentOS vm, I encountered an error of the type:

checking for hardnofiles = 4096; found hardnofiles = 1024 Failed
checking for softnofiles = 4096; softnofiles = 1024 Failed

The fix was to edit my/etc/security/limits.conf file:

* soft nofile 16384
* hard nofile 65536

Add/view/delete an entry to iptables to enable Apache/VNCServer/FTP, etc.

Kelly — Thu, 28 Apr 2011 18:16:34 +0000

The default CentOS 5.6 firewall configuration does not allow Apache httpd traffic on port 80. In order to open the port for utilization, a change must be made to the firewall configuration.

iptables -I INPUT -p tcp -m tcp ––dport 80 -j ACCEPT

To open a hole for VNCServer (running on display 20):

iptables -I INPUT -p tcp -m tcp ––dport 5920 -j ACCEPT

To open a hole for VNCServer (running on display 20) web base interface:

iptables -I INPUT -p tcp -m tcp ––dport 5820 -j ACCEPT

To display the openings you’ve created in your firewall:

iptables -L INPUT -n ––line-numbers

To remove a line entry from your iptables file (for example, entry #3):

iptables -D INPUT 3

Notes:

There are two dashes in front of parameters such as “––line-numbers” and “––dport.”

The iptables service must be saved, and restarted before changes take effect.

service iptables save

service iptables restart

manually add new user to Red Hat/Fedora/CentOS

Kelly — Tue, 19 Apr 2011 16:11:12 +0000

To manually add a new user to a Red Hat/Fedora/CentOS intall which is utilizing shadow passwords:

As root

cp /etc/passwd /etc/passwd.bak (make a back-up copy of your password file)

cp /etc/shadow /etc/shadow.bak (make a back-up copy of your shadow password file)

cp /etc/group /etc/group.bak (make a back-up copy of your group file)

vipw (to open passwd file in vi)

g (to get to end of file)

a (append at end of cursor)

user01:x:501:501:User 01:/home/user01:/bin/bash (add the new user)

:wq (write file and quit vi)

A prompt will indicate that you are using shadow passwords, and do you want to edit the /etc/shadow now. Answer: n

vi /etc/group (to open group file in vi)

g (to get to end of file)

a (append at end of cursor)

user01:x:501:user01

admins:x:502:user01 (create a new group called admins and put user01 into it)

:wq (write file and quit vi)

pwconv (add the new entry from your passwd file into shadow password file)

passwd user01 (set the new user password)

(prompted twice for new user password)

mkdir /home/user01

cp /etc/skel/.* /home/user01 (copy all files from skel to new user home directory)

cp -r /etc/skel/.kde /home/user01

cp -r /etc/skel/.mozilla /home/user01

chown -R user01:user01 /home/user01 (Change the owner of user01 home directory to user01)

visudo -f /etc/sudoers

After root ALL=(ALL) ALL add new line and: %admins ALL=(ALL) NOPASSWD: ALL (this allows members of admins group to sudo as root, without a password.)

Change run level on Red Hat/Fedora/CentOS

Kelly — Tue, 19 Apr 2011 15:26:36 +0000

Change the default run level on Red Hat/Fedora/CentOS distros to boot into server/console mode rather than GUI (from runlevel 5 to runlevel 3).

As root, edit /etc/inittab using vi or vim. It should be somewhat self-explanatory, however make this change:

# id:5:initdefault:

id:3:initdefault:

reset root password on Red Hat/Fedora/CentOS

Kelly — Mon, 18 Apr 2011 20:50:24 +0000

Okay, so you’ve screwed the pooch and need to reset the password for root on your Red Hat/Fedora/CentOS installation. Assuming that it is a default installation, without hardening, this can be done fairly easily.

This assumes you have GRUB installed.

When the GRUB login screen comes up, hit “e” to edit.

Move the cursor down to the kernel line and hit “e” again.

At the end of the kernel line, add a space and the word “single.” This will force the reboot into single user mode. Continue booting the server. You will automagically be logged in as root.

Run the passwd command to reset root’s password.

Reboot as normal.

enable windows manager in linux vncserver

Kelly — Thu, 14 Apr 2011 21:14:08 +0000

Modify your ~/.vnc/xstartup file to

The default file looks like this:

#!/bin/sh

# Uncomment the following two lines for normal desktop:
# unset SESSION_MANAGER
# exec /etc/X11/xinit/xinitrc

Uncomment the “unset SESSION MANAGER” and “exec /etc/X11/xinit/xinitrc” line. This will start run your default window manager when vnc starts. Gnome is a lot prettier than the cruddy default gray vnc display with xterm.

Edit sudoers file in Redhat/Fedora/CentOS

Kelly — Wed, 13 Apr 2011 18:18:17 +0000

To allow certain users to act as root (su -, or sudo), you must add them to the sudoers file (/etc/sudoers).

The sudoers file must be edited using the visudo command. See the sudo webpage.

As root:

visudo -f /etc/sudoers

Edit the file to add the correct permissions. In this case, give members of the group “adm” permission to do just about everything.

%adm ALL=(ALL) NOPASSWD: ALL

Save the changes using “:wq”