Version 12 (modified by 13 years ago) (diff) | ,
---|
SilverFile Server Administration Guide and Tips
Add users to sudo
Sudo allows all users in admin group root privilege. This is something that Ubuntu sets up as an alternative to visudo.
usermod -a -G admin ryan
SSH Keys
To generate a key:
ssh-keygen (or) ssh-keygen -t dsa (for dsa) (do not enter a passphrase)
This generates, id_dsa and id_dsa.pub. Client(id_dsa) ---ssh--> Host(id_dsa.pub in .ssh/authorized_keys)
Using GPG
We are using symmetric gpg which just requires the use of a passphrase to encrypt/decrypt files.
To initially create the gpg file the command is:
gpg -c decryptedfile
To render decrypted file to STDOUT (note the additional dash):
gpg -o - file.gpg
Using Vim to edit files in place
Copy the gnupg.vim file to $HOME/.vim/plugin/ View plugin
Note- This vim script is edited slightly to make symmetric encryption the default. This is done by setting g:GPGPreferSymmetric= 1 in the script.
Generate a new SSL Cert
1) Generate the key (2048 bit)
openssl genrsa -des3 -out silverfilecorp.com.key 2048
Specify anything for the key passphrase, ie "silver", it will be removed later.
2) Generate the certificate request for the root authority - i.e. godaddy
openssl req -new -key silverfilecorp.com.key -out silverfilecorp.com.csr
3) Remove passphrase from key. This will enable apache to back online without any intervention.
cp silverfilecorp.com.key silverfilecorp.com.key.encrypted openssl rsa -in silverfilecorp.com.key.encrypted -out silverfilecorp.com.key
Disk Usage Tools
Get a summary of disk usage for each client folder. Sort the output alphabetically.
du -h --max-depth=1 | sort -k 2
Using Screen
Screen is an excellent utility for managing shell sessions remotely.
screen
Within the new shell, enter Ctr-A d. This disengages you from that shell but still allows it to keep running.
screen -ls (lists screen sessions) screen -r xxxx.tty.session (allows you to re-attach to a given session)
SSH Tunneling
If you want to tunnel the tomcat instance (running nutch) try this command:
ssh user@harvey.silverfilecorp.com -p 2222 -L 8080:localhost:8080
Init Scripts
Add an init script Add the script to /etc/init.d/ and then run:
update-rc.d script_name defaults
Remove an init script Delete the script from /etc/init.d/ and then run:
update-rc.d script_name remove
Samba Administration
Check samba version (also checks if samba is running)
smbd -V
Use samba client List smb shares on server:
smbclient -L //server -U user
Browse samba share
smbclient //server/share -U user (or) smbclient //server/share -U user%password
Django Administration
Dump data in database (assumes settings is in production skin directory)
python manage.py dumpdata --pythonpath=.. --settings=production.settings
Load data from fixture (json)
python manage.py loaddata /home/sf/dataout.json --pythonpath=.. --settings=production.settings
Alternatively you can load data in with syncdb. Recreate the MySQL db and move the fixture into files/common/fixtures/ naming it initial_data.json. Then run:
python manage.py syncdb --pythonpath=.. --settings=production.settings