Lik`s forum

http://fish2.com/ipmi/
https://community.rapid7.com/community/metasploit/blog/2013/07/02/a-penetration-testers-guide-to-ipmi
https://community.rapid7.com/community/metasploit/blog/2013/11/06/supermicro-ipmi-firmware-vulnerabilities

Several scan/pentest scripts:
https://github.com/zenfish/ipmi
https://github.com/alexoslabs/ipmitest

Noticed strange warning recently during the work with MySql:

Code: Select all

# mysqladmin pr
Warning: Using unique option prefix pass instead of password is deprecated and will be removed in a future release. Please use the full name instead.
+-------+------+-----------+----+---------+------+-------+------------------+
| Id    | User | Host      | db | Command | Time | State | Info             |
+-------+------+-----------+----+---------+------+-------+------------------+
| 41269 | root | localhost |    | Query   | 0    |       | show processlist |
+-------+------+-----------+----+---------+------+-------+------------------+

# mysql ...

WP-CLI is a set of command-line tools for managing WordPress installations. You can update plugins, set up multisite installs and much more, without using a web browser.

Suppose, you have Awstats available and enabled by default for all users under "WHM -> Server Configuration -> Statistics Software Configuration".
For some reason you want to exclude one account from statistics update (web service access log parsing for it) and you can do it via:

* WHM interface

"WHM -> Server Configuration -> Statistics Software Configuration -> User Permissions -> Choose Users"
Choose Specific Stats Programs for: accountname
Here you can specify which stats ...

OMD avoids the tedious work of manually compiling and integrating Nagios addons while at the same time avoiding the problems of pre-packaged installations coming with your Linux distribution, which are most times outdated and provide no regular updates.

OMD bundles Nagios together with many important addons and can easily be installed on every major Linux distribution. We provide prebuilt packages for all enterprise Linux distributions and also for some other, such as Ubuntu.

Features

...

Suppose, you need phpMyAdmin running on your server to provide simple web interface for end users for MySql databases management and perform regular updates with cron task.
First step is to create separate system user in order to enhance security:

Code: Select all

useradd phpmy

Next step is to clone STABLE branch of PhpMyAdmin from the official PhpMyAdmin SCM Git repository:

Code: Select all

sudo -u phpmy -H git clone --single-branch --depth=1 -b STABLE https://github.com/phpmyadmin/phpmyadmin.git /home/phpmy/public_html

"sudo -u" is used to ...

When running "yum update" on OpenVZ carrier server you might face the following error which prevents update process:

...
...
--> Processing Conflict: ploop-lib-1.6-1.x86_64 conflicts vzkernel < 2.6.32-042stab061.1
--> Finished Dependency Resolution
Error: ploop-lib conflicts with vzkernel

To resolve it use "yum shell":

Code: Select all

# yum shell
> update vzctl
> remove ploop\*
> run
> quit

Such sequence of actions will allow you to resolve runtime dependencies.
===============================================================================================================================================================================================================================================================================
Package Arch Version Repository Size
===============================================================================================================================================================================================================================================================================
Installing: ...

To view configure options of MySql server we can use handy 'mysqlbug' utility which among other information reports options MySql server was compiled with:
# mysqlbug

Finding system information for a MySQL bug report
test -x /bin/vi
Using editor /bin/vi
You can change editor by setting the environment variable VISUAL.
If your shell is a bourne shell (sh) do
VISUAL=your_editors_name; export VISUAL
If your shell is a C shell (csh) do
setenv VISUAL your_editors_name
File ...

New strict page cache isolation feature, appeared in the kernel 042stab068.8 and later kernels.
The feature disables bouncing page cache pages between host and containers on physpages shortage in container. The internal reclaimer will drop cached data if container exceeded its physpages limit and pagecache isolation is turned on.
Current state can be obtained by reading the /proc/bc/<id>/debug:pagecache_isolation file. It is disabled by default.
http://wiki.openvz.org/Page_cache_isolation

If you plan to use 'virsh console' for access to KVM domains from the carrier server you should setup correct guest console device first.

1. Centos6 case

Centos 6 use upstart for configuration of serial consoles (terminals). You can find tip on it in the /etc/inittab configuration file.
Content of default Centos 6 /etc/inittab :
# cat /etc/inittab
# inittab is only used by upstart for the default runlevel.
#
# ADDING OTHER CONFIGURATION HERE ...