How to Add Date And Time To Your Bash History on SuSE Linux
The SuSE Linux Enterpise 10 which came together with bash-3.x RPM and HISTORY command show insufficient information(at least for me) as example below:
1 vi /etc/hosts
2 rpm -qa|grep bash
3 cat /etc/SuSE-release
4 history
For any SuSE Linux Enterprise server 10 that managed by more than one people, I would suggest you should make history command more user friendly and more information for auditing purposes.
Edit /etc/bash.bashrc and append to the bottom:
export HISTTIMEFORMAT="%h/%d - %H:%M:%S "
save it.
Read more
Possibly Related Posts:
- Google Public DNS Down?
- lppasswd: Unable to open passwd file: Permission denied
- Missing /var/log/lastlog
- Telnet service_limit error
- Google accounts on Twitter
How to set Auto Complete “service” command on Redhat
I have been using SuSE Linux for some time and I love SuSE Linux service script that activated with a symbolic link. In order to start a SSH service, I can easily issue a command “rcsshd start”.
For Redhat or Centos Linux, you’re require to type command such as “service sshd start” and the main problem is NO auto complete for service command by default. Yes I admitted I’m lazy guy!
So how to set AUTO COMPLETE “service” command on Redhat/Centos?
Type:
complete -W "$(ls /etc/init.d/)" service
Read more
Possibly Related Posts:
- Google Public DNS Down?
- lppasswd: Unable to open passwd file: Permission denied
- Missing /var/log/lastlog
- Telnet service_limit error
- Google accounts on Twitter
Setup a Linux Highly Availability NFS servers
In this tutorial I will describe how to set up a Linux Highly Availability(HA) NFS servers using SuSE Linux Enterprise Server 10 SP2. In order to make Linux HA NFS failover work, you’re require “sm-notify” utility, basically sm-notify will send out Network Status Monitor(NSM) reboot notifications.
Here are the steps to prepare automated NFS failover.
Server setup details:
Hostname: ServerNFS01
IP Address: 10.10.10.11
Hostname: ServerNFS02
IP Address: 10.10.10.12
Linux HA Virtual Hostname: servernfs01
IP Address 10.10.10.10
NFS Client Hostname NFSclient01
IP Address: 10.10.10.13
Require RPM:
nfs-utils
util-linux
heartbeat
portmap
The /data directory is a Linux HA share drive sitting on /dev/sdb1(ext3) and contains NFS share drive.
Read more
Possibly Related Posts:
- Google Public DNS Down?
- lppasswd: Unable to open passwd file: Permission denied
- Missing /var/log/lastlog
- Telnet service_limit error
- Google accounts on Twitter
Set a Good Password Policy On SuSE Linux
Sometimes setting a good password policy is not easy and you may receive many complaint from end user especially non-IT related users. Normally they like password = password = abc123 as easy as possible.
Personally I don’t like pam_cracklib and I would preferred pam_passwdqc.
The pam_passwdqc module is a simple password strength checking module for PAM. In addition to checking regular passwords, it offers support for passphrases and can provide randomly generated ones.
The pam_passwdqc module provides functionality for only one PAM management group: password changing. In terms of the module-type parameter, this is the ”password” feature.
Here you go: SuSE Linux Password Policy.
Operating System: SLES 9
Required RPM: pam-modules, pwdutils, openssh and coreutils
/etc/pam.d/passwd auth required pam_unix2.so nullok account required pam_unix2.so account required pam_tally.so per_user deny=5 no_magic_root reset password required pam_passwdqc.so retry=5 ask_oldauthtok check_oldauthtok min=disabled,8,8,8,8 max=25 password required pam_pwcheck.so use_first_pass use_authtok password required pam_unix2.so use_first_pass use_authtok session required pam_unix2.so
/etc/pam.d/sshd
auth required pam_listfile.so item=user sense=deny file=/etc/login.deny auth required pam_tally.so onerr=fail no_magic_root auth required pam_unix2.so auth required pam_nologin.so auth required pam_env.so account required pam_unix2.so account required pam_nologin.so account required pam_tally.so deny=5 no_magic_root reset password required pam_passwdqc.so retry=5 ask_oldauthtok check_oldauthtok min=disabled,8,8,8,8 max=25 password required pam_pwcheck.so use_first_pass use_authtok password required pam_unix2.so use_first_pass use_authtok session required pam_unix2.so none session required pam_limits.so
/etc/pam.d/login
auth requisite pam_unix2.so nullok auth required pam_securetty.so auth required pam_nologin.so auth required pam_env.so auth required pam_mail.so auth required pam_tally.so onerr=fail no_magic_root account required pam_unix2.so account required pam_tally.so deny=5 no_magic_root reset password required pam_passwdqc.so retry=5 ask_oldauthtok check_oldauthtok min=disabled,8,8,8,8 max=25 password required pam_pwcheck.so use_first_pass use_authtok password required pam_unix2.so use_first_pass use_authtok session required pam_unix2.so none session required pam_limits.so
/etc/pam.d/su
auth sufficient pam_rootok.so auth required pam_unix2.so nullok account required pam_unix2.so account required pam_tally.so deny=5 no_magic_root reset password required pam_passwdqc.so retry=5 ask_oldauthtok check_oldauthtok min=disabled,8,8,8,8 max=25 password required pam_pwcheck.so nullok password required pam_unix2.so nullok use_first_pass use_authtok session required pam_unix2.so debug
Possibly Related Posts:
- Google Public DNS Down?
- lppasswd: Unable to open passwd file: Permission denied
- Missing /var/log/lastlog
- Telnet service_limit error
- Google accounts on Twitter
How To Force User Change Password At Next Login on Linux
My previous post talked about How To Show Linux User Password Expires. I would like to share “How to force user change password at next login on Linux“.
Option 1:
passwd command – change user password
Use the following syntax:
passwd -e
- -e Force the user to change password at next login
Setting password expire for user test
planetmy:~ # passwd -e test
planetmy:~ # chage -l test
Minimum: 0
Maximum: 90
Warning: 7
Inactive: -1
Last Change: Unknown, password is forced to change at next login
Password Expires: Never
Password Inactive: Never
Account Expires: Sep 11, 2008
Login as user ‘test’
login as: test
Using keyboard-interactive authentication.
Password:
Using keyboard-interactive authentication.
Password change requested. Choose a new password.
Old Password:
Using keyboard-interactive authentication.
New Password:
Using keyboard-interactive authentication.
Reenter New Password:
Last login: Thu Sep 11 10:13:22 2008 from 192.168.1.102
test@planetmy:/>
Note: This is apply to SuSE Linux 9 and 10 but NOT Red Hat Linux.
Possibly Related Posts:
- Google Public DNS Down?
- lppasswd: Unable to open passwd file: Permission denied
- Missing /var/log/lastlog
- Telnet service_limit error
- Google accounts on Twitter