Categories
Allgemein

IPA get keytab

 

Categories
CentOS Certificates Java Security

Certificate and private key to java keystore

  1. create PKCS #12 from certificate and private key
  2. import PKCS #12 into java keystore

     
Categories
fail2ban Linux Security Server

fail2ban show bans and unban

List jails

List bans of jail

Unban IP in jail

Categories
Linux SSH

SSH tunnel

Tunnel

Port forward

 

Categories
Java Linux Windows

Java debugging

Start the Java application like this

This will start the JVM suspended which means it will only start after connecting. If this is not wanted change

suspended=y

to

suspended=n

Categories
Linux

Check file consistency after copying

Same also works for md5sum etc …

Categories
CUPS Linux Printer

Print from command line

List all printers

Change into directories and print the files

 

If the document type/mime type is not supported check /etc/mailcap.

Necessary package for Fedora is cups-client.

Categories
Linux

SELinux: convert denial to policy

Create a policy .te file by using the following command as an example.

Now follow HOWTO: Build a SELinux Policy and activate it

Categories
CentOS Linux

HOWTO: Build a SELinux Policy and activate it

Build the policy according to

  1. https://www.centos.org/docs/5/html/Deployment_Guide-en-US/sec-sel-building-policy-module.html
  2. https://wiki.gentoo.org/wiki/SELinux/Tutorials/Creating_your_own_policy_module_file
  3. https://wiki.centos.org/HowTos/SELinux

The package selinux-policy-devel is required.

 

Categories
CentOS Linux Server Teamspeak 3

Teamspeak 3 Server on CentOS 7

You’ll be surprised when you see how easy it is to setup a Teamspeak 3 server.

Table of contents

  1. Creating a specific user
  2. Downloading Teamspeak 3 server
  3. Setting up the server
  4. Configuring the firewall
  5. Finishing

1 Creating a specific user

First we will create a user for the Teamspeak 3 server. Of course this is just a recommendation, you can use any user you would like to.

2 Downloading Teamspeak 3 server

After creating and logging in as the user we will download Teamspeak 3.

Go to Teamspeak and download the latest server for Linux, preferably 64-bit. At the time of writing the latest version was 3.0.11.3, so you might want to replace those values for future releases. I additionally rename the folder so I can always see which one is my current installation.

3 Setting up the server

Go to the Teamspeak 3 directory and initialize the server.

You will get to see some server output which is partially very important!

——————————————————————
I M P O R T A N T
——————————————————————
Server Query Admin Account created
loginname= “serveradmin”, password= “DRGE1uHG”
——————————————————————

——————————————————————
I M P O R T A N T
——————————————————————
ServerAdmin privilege key created, please use it to gain
serveradmin rights for your virtualserver. please
also check the doc/privilegekey_guide.txt for details.

token=w+cyh2W4JcA2n7nuIIH2xVpA5JZb17BtuiouxRmr
——————————————————————

You can stop the server by pressing CTRL + c.

I replaced the not so important parts with three dots.

On the one hand you have the server query admin account details and on the other hand a token you have to use to gain serveradmin rights when you – later – logged onto the server.

Additionally we will create an inifile to store some settings for the server.

The content of the ts3server.ini is as follows.

Here you can also adjust the ports to your specific needs but I will stick to the essential settings, namely the IPs the server is meant to listen on.

We will change voice_ip, filetransfer_ip and query_ip to the actual IP of the interface.

Next step is to tell the server to actually include the inifile. We do this by changing the ts3server_startscript.sh. Comment out line 5 and add the following, so that the first few lines look like this.

You can now start, stop or restart the server with the folloing commands.

4 Configuring the firewall

To be able to connect to the server we need to allow some ports on the firewall. For maximum flexibility I do recommend creating a new firewall configuration file for voice, filetransfer and query each.

  1. Firewall configuration file for voice

  2. Firewall configuration file for filetransfer

  3. Firewall configuration file for query

Now that we created the configuration files we need to add them to the firewall.

5 Finishing

When you connect to your brand new server you will be asked to enter the token which was display when we initialized the server. As you do so you will be the Server Admin.

This is now a working Teamspeak 3 server. But to make it more secure you do need to add some groups and give them the required or specifig rights.