Certificate and private key to java keystore

  1. create PKCS #12 from certificate and private key
  2. import PKCS #12 into java keystore

     

HOWTO: Build a SELinux Policy and activate it

Build the policy according to

  1. https://www.centos.org/docs/5/html/Deployment_Guide-en-US/sec-sel-building-policy-module.html
  2. https://wiki.gentoo.org/wiki/SELinux/Tutorials/Creating_your_own_policy_module_file
  3. https://wiki.centos.org/HowTos/SELinux

The package selinux-policy-devel is required.

 

Teamspeak 3 Server on CentOS 7

You’ll be surprised when you see how easy it is to setup a Teamspeak 3 server.

Table of contents

  1. Creating a specific user
  2. Downloading Teamspeak 3 server
  3. Setting up the server
  4. Configuring the firewall
  5. Finishing

1 Creating a specific user

First we will create a user for the Teamspeak 3 server. Of course this is just a recommendation, you can use any user you would like to.

2 Downloading Teamspeak 3 server

After creating and logging in as the user we will download Teamspeak 3.

Go to Teamspeak and download the latest server for Linux, preferably 64-bit. At the time of writing the latest version was 3.0.11.3, so you might want to replace those values for future releases. I additionally rename the folder so I can always see which one is my current installation.

3 Setting up the server

Go to the Teamspeak 3 directory and initialize the server.

You will get to see some server output which is partially very important!

——————————————————————
I M P O R T A N T
——————————————————————
Server Query Admin Account created
loginname= “serveradmin”, password= “DRGE1uHG”
——————————————————————

——————————————————————
I M P O R T A N T
——————————————————————
ServerAdmin privilege key created, please use it to gain
serveradmin rights for your virtualserver. please
also check the doc/privilegekey_guide.txt for details.

token=w+cyh2W4JcA2n7nuIIH2xVpA5JZb17BtuiouxRmr
——————————————————————

You can stop the server by pressing CTRL + c.

I replaced the not so important parts with three dots.

On the one hand you have the server query admin account details and on the other hand a token you have to use to gain serveradmin rights when you – later – logged onto the server.

Additionally we will create an inifile to store some settings for the server.

The content of the ts3server.ini is as follows.

Here you can also adjust the ports to your specific needs but I will stick to the essential settings, namely the IPs the server is meant to listen on.

We will change voice_ip, filetransfer_ip and query_ip to the actual IP of the interface.

Next step is to tell the server to actually include the inifile. We do this by changing the ts3server_startscript.sh. Comment out line 5 and add the following, so that the first few lines look like this.

You can now start, stop or restart the server with the folloing commands.

4 Configuring the firewall

To be able to connect to the server we need to allow some ports on the firewall. For maximum flexibility I do recommend creating a new firewall configuration file for voice, filetransfer and query each.

  1. Firewall configuration file for voice

  2. Firewall configuration file for filetransfer

  3. Firewall configuration file for query

Now that we created the configuration files we need to add them to the firewall.

5 Finishing

When you connect to your brand new server you will be asked to enter the token which was display when we initialized the server. As you do so you will be the Server Admin.

This is now a working Teamspeak 3 server. But to make it more secure you do need to add some groups and give them the required or specifig rights.