Tech Talks

Reference bugzilla.org Download the latest Stable Release # cd /usr/local/src # wget http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-3.0.3.tar.gz # tar xzf bugzilla-3.0.3.tar.gz # cd bugzilla-3.0.3 First,run the checksetup.pl script to check for any dependant packages that need to be installed # ./checksetup.pl --check-modules NOTE: You must run any commands listed below as root. *********************************************************************** * REQUIRED MODULES * *********************************************************************** * Bugzilla requires you to install some Perl modules which are either * * missing from your system, or the version on your system is too old. * * * * The latest versions of each module can be installed by running the * * commands below. * **************************

Server - RHEL 5 Stop Syslog and turn it off through Run Levels # service syslog stop # chkconfig syslog off Download syslog-ng # cd /usr/local/src # wget http://www.balabit.com/downloads/files/eventlog/0.2/eventlog-0.2.5.tar.gz # tar xzf eventlog-0.2.5.tar.gz # cd eventlog-0.2.5 # ./configure --prefix=/usr/local/eventlog # make # make install # cd /usr/local/src # wget http://www.balabit.com/downloads/files/libol/0.3/libol-0.3.18.tar.gz # tar xzf libol-0.3.18.tar.gz # cd libol-0.3.18 # ./configure --prefix=/usr/local/libol # make # make install # cd /usr/local/src # wget http://www.balabit.com/downloads/files/syslog-ng/sources/2.0/src/syslog-ng-2.0.6.tar.gz # tar xzf syslog-ng-2.0.6.tar.gz # cd syslog-ng-2.0.6 # export PKG_CONFIG_PATH=/usr/local/eventlog/lib/pkgconfig # ./configure --prefix=/usr/local/syslog-ng --with-libol=/usr/local/libol/ # make # make install # cd /usr/local/syslog-ng # mkdir etc # cd etc # vi syslog-ng.conf ### Refer http://www.campin.net/syslog-ng

Log Server Setup Allow remote machines to Log # vi /etc/sysconfig/syslog Replaced SYSLOGD_OPTIONS="-m 0" with SYSLOGD_OPTIONS="-rm 0" Setup Log Rotation Policy # vi /etc/logrotate.conf daily # keep 7 days worth of backlogs rotate 7 # create new (empty) log files after rotating old ones create # uncomment this if you want your log files compressed compress # RPM packages drop log rotation information into this directory include /etc/logrotate.d # no packages own wtmp -- we'll rotate them here /var/log/wtmp { monthly create 0664 root utmp rotate 1 } Customize Log types and log destination # vi /etc/syslog.conf local7.* /var/log/apache_error_log local1.info /var/log/apache_access_log Restart Syslogd to take effect of the changes made # /etc/init.d/syslog restart Client Configurations 1.RHEL5 # vi /etc/syslog.conf *.* @192.168.0.111 Restart Syslog # /etc/init.d/syslog restart L

# cd /usr/local/apache # mkdir cert # cd cert 1. Generate your own Certificate Authority (CA) # openssl genrsa -out ca.key 4096 # openssl req -new -x509 -days 365 -key ca.key -out ca.crt 2.Generate a server key and request for signing (csr) # openssl genrsa -out server.key 4096 # openssl req -new -key server.key -out server.csr 3.Sign the certificate signing request (csr) with the self-created certificate authority (CA) that you made earlier # openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt # vi /usr/local/apache/conf/httpd.conf ServerName xxx.xxx.xxx.xxx:443 Listen xxx.xxx.xxx.xxx:443 LoadModule ssl_module modules/mod_ssl.so SSLEngine on SSLCertificateFile /usr/local/apache/cert/server.crt SSLCertificateKeyFile /usr/local/apache/cert/server.key # /usr/local/apache/bin/apachectl restart To do the same with a Passphrase follow below # cd /usr/local/apache # mkdir cert # cd cert # openssl genrsa -des3 -out ca.key 4096