How to setup ssh key based login from SPLAT to another Linux Machine.
1) on the linux machine, run "ssh-keygen -t rsa"
2) on the secureplatform, in expert mode:
a) cd /root/.ssh
b) ssh-keygen -t rsa
c) touch authorized_keys
d) chmod 700 authorized_keys
3) copy the id_rsa.pub from the linux machine to the SPLAT machine.
(I had to do this via scp with password FROM the SPLAT box back
to the linux machine).
4) on the spat box, "cat id_rsa.pub >> authorized_keys"
5) modify the sshd_config file on the SPLAT box as follows:
DenyUsers shutdown halt nobody ntp pcap rpm
AllowGroups admin root
6) on the splat box, "service sshd restart"
7) from the linux machine, I can do this:
[root@linux-10g .ssh]# ssh -l root 192.168.1.2
Last login: Mon Feb 21 09:27:25 2005 from 192.168.1.100
[Expert@Checkpoint-cp01]#
Thanks to the firewall-1 mailing list for this helpful tip
Friday, July 13, 2007
Tuesday, October 10, 2006
Friday, August 11, 2006
Cannot access SecurePlatform through winSCP
Cannot access SecurePlatform through winSCP
Re: cannot access SecurePlatform through winSCP
Once you have created the user, edit /etc/passwd and change "cpshell" to "bash" at the end of the user line. It should look like this:
user1:x:0:0::/home/user1:/bin/bash
Then edit /etc/group and add the user to the appropriated groups, separated with comma:
root:x:0:root,user1
Don´t forget to create /etc/scpusers with the user name, if you want SCP access.
Re: cannot access SecurePlatform through winSCP
Once you have created the user, edit /etc/passwd and change "cpshell" to "bash" at the end of the user line. It should look like this:
user1:x:0:0::/home/user1:/bin/bash
Then edit /etc/group and add the user to the appropriated groups, separated with comma:
root:x:0:root,user1
Don´t forget to create /etc/scpusers with the user name, if you want SCP access.
Tuesday, June 06, 2006
Manually edit SPLAT's routing
[Manually edit SPLAT's routing]
-Edit the file "/etc/sysconfig/netconf.C"
-Note that in pre-R60 versions you edit "/etc/sysconfig/cpnetstart"
instead
-Then run 'cpnetconf load'
-Run 'route -n' to verify that you changes worked
-Alternatively you could instead use the standard Linux route command to
load all of your routes and then run 'cpnetconf store' to save your routes
to /etc/sysconfig/netconf.C (i.e. make them permanent)
-Edit the file "/etc/sysconfig/netconf.C"
-Note that in pre-R60 versions you edit "/etc/sysconfig/cpnetstart"
instead
-Then run 'cpnetconf load'
-Run 'route -n' to verify that you changes worked
-Alternatively you could instead use the standard Linux route command to
load all of your routes and then run 'cpnetconf store' to save your routes
to /etc/sysconfig/netconf.C (i.e. make them permanent)
Friday, May 19, 2006
iSeries PHP Primer
PHP Primer
By Jon Paris and Susan Gantner
This month we thought we'd take a quick look at PHP, the latest entry in the world of Web programming for the System i platform. We're excited about this new arrival as it helps to lower the "cost" of entering the world of the Web and moves the System i platform firmly into the mainstream. The introduction of PHP is a joint effort by IBM and Zend ("The php Company"). Full details of the announcement are online (www.ibm.com/systems/i/software/php.) .......
By Jon Paris and Susan Gantner
This month we thought we'd take a quick look at PHP, the latest entry in the world of Web programming for the System i platform. We're excited about this new arrival as it helps to lower the "cost" of entering the world of the Web and moves the System i platform firmly into the mainstream. The introduction of PHP is a joint effort by IBM and Zend ("The php Company"). Full details of the announcement are online (www.ibm.com/systems/i/software/php.) .......
Tuesday, January 10, 2006
Wednesday, December 28, 2005
Top 10 tips to keep that new computer spyware-free
Top 10 tips to keep that new computer spyware-free
Top 10 tips to keep that new computer spyware-free
Top 10 tips to keep that new computer spyware-free
Thursday, December 22, 2005
Thursday, November 10, 2005
LCD Or Plasma - What's Your Pleasure
Flat-panel displays are the future of television - whether consumers like them or not is another matter. HDTV, digital convergence, and high-resolution DVD will all have contributed to making CRT TVs obsolete within two years. That's not the case yet, but it is on the way. And if you're tempted to acquire a flat-panel TV, you will need to deal with another issue: the choice between two technologies that are complementary yet very different from one another: plasma and LCD.">Tom's Hardware Guide Displays: LCD Or Plasma - What's Your Pleasure? Understanding Modern Flat-Panel TV Technologies - Introduction: "Flat-panel displays are the future of television - whether consumers like them or not is another matter. HDTV, digital convergence, and high-resolution DVD will all have contributed to making CRT TVs obsolete within two years. That's not the case yet, but it is on the way. And if you're tempted to acquire a flat-panel TV, you will need to deal with another issue: the choice between two technologies that are complementary yet very different from one another: plasma and LCD
Wednesday, September 28, 2005
Thursday, September 22, 2005
Asterisk - the Open Source PBX!
Asterisk - the Open Source PBX!
Easily build your own multiprotocol PBX on Linux!
Asterisk is a complete PBX in software. It runs on Linux, BSD and MacOSX and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in many protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware.
Asterisk provides Voicemail services with Directory, Call Conferencing, Interactive Voice Response and Call Queuing. It has support for three-way calling, caller ID services, ADSI, SIP and H.323 (as both client and gateway). Check the Features section for a more complete list.
Asterisk needs no additional hardware for Voice over IP. For interconnection with digital and analog telephony equipment, Asterisk supports a number of hardware devices, most notably all of the hardware manufactured by Asterisk's sponsors, Digium. Digium has single and quad span T1 and E1 interfaces for interconnection to PRI lines and channel banks as well as a single port FXO card and a one to four-port modular FXS and FXO card.
Easily build your own multiprotocol PBX on Linux!
Asterisk is a complete PBX in software. It runs on Linux, BSD and MacOSX and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in many protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware.
Asterisk provides Voicemail services with Directory, Call Conferencing, Interactive Voice Response and Call Queuing. It has support for three-way calling, caller ID services, ADSI, SIP and H.323 (as both client and gateway). Check the Features section for a more complete list.
Asterisk needs no additional hardware for Voice over IP. For interconnection with digital and analog telephony equipment, Asterisk supports a number of hardware devices, most notably all of the hardware manufactured by Asterisk's sponsors, Digium. Digium has single and quad span T1 and E1 interfaces for interconnection to PRI lines and channel banks as well as a single port FXO card and a one to four-port modular FXS and FXO card.
Wednesday, September 21, 2005
Foxit PDF Reader
Foxit Reader is small (the download size less than 1MB), so you can download it quickly. It doesn't need any lengthy installation, so you can start to run it as soon as you can download it.
And it starts up immediately, so you don't need to wait the annoying 'Welcome' screen to disappear.
Foxit Reader is extremely easy to use, just double click it to start and then click open button to open your PDF document. If you want to print, click on 'Print' button. If you want to setup the page layout for printing, select 'Print Setup' from 'File' menu"
And it starts up immediately, so you don't need to wait the annoying 'Welcome' screen to disappear.
Foxit Reader is extremely easy to use, just double click it to start and then click open button to open your PDF document. If you want to print, click on 'Print' button. If you want to setup the page layout for printing, select 'Print Setup' from 'File' menu"
Thursday, September 15, 2005
Monday, September 12, 2005
Technorati
About Technorati
Currently tracking 17 million sites and 1.5 billion links.
Technorati is the authority on what's going on in the world of weblogs.
What is a weblog? A weblog, or blog, is a personal journal on the web. Weblogs express as many different subjects and opinions as there are people writing them. Some blogs are highly influential and have enormous readership while others are primarily intended for a close circle of family and friends.
IBM Lotus Notes/Domino Hints and Tips
IBM Lotus Notes/Domino Hints and Tips
Good source of tips for Lotus Domino.
Technorati
About Technorati
Currently tracking 17 million sites and 1.5 billion links.
Technorati is the authority on what's going on in the world of weblogs.
What is a weblog? A weblog, or blog, is a personal journal on the web. Weblogs express as many different subjects and opinions as there are people writing them. Some blogs are highly influential and have enormous readership while others are primarily intended for a close circle of family and friends.
Currently tracking 17 million sites and 1.5 billion links.
Technorati is the authority on what's going on in the world of weblogs.
What is a weblog? A weblog, or blog, is a personal journal on the web. Weblogs express as many different subjects and opinions as there are people writing them. Some blogs are highly influential and have enormous readership while others are primarily intended for a close circle of family and friends.
IBM Lotus Notes/Domino Hints and Tips
IBM Lotus Notes/Domino Hints and Tips
Good source of tips for Lotus Domino.
Good source of tips for Lotus Domino.
Friday, September 09, 2005
ThinkPad BackPack Carrying Case
With both storage and comfort features, the ThinkPad BackPack Carrying Case is the perfect solution for mobile users on the corporate or educational campus. Made of nylon material that's durable, lightweight and water-resistant, it has well padded, adjustable straps to help provide a comfortable fit around your shoulders and against your back. Top-loading for quick access to the ThinkPad notebook compartment, it sports many convenient pockets and pouches to store optional gear too.
ThinkPad BackPack Carrying Case
With both storage and comfort features, the ThinkPad BackPack Carrying Case is the perfect solution for mobile users on the corporate or educational campus. Made of nylon material that's durable, lightweight and water-resistant, it has well padded, adjustable straps to help provide a comfortable fit around your shoulders and against your back. Top-loading for quick access to the ThinkPad notebook compartment, it sports many convenient pockets and pouches to store optional gear too.
Subscribe to:
Posts (Atom)