:検証/ログサーバ

Top / :検証 / gwww

f 2:off 3:off 4:off 5:off 6:off\nwpa_supplicant 0:off 1:off 2:off 3:off 4:off 5:off 6:off\nxinetd 0:off 1:off 2:on 3:on 4:on 5:on 6:off\nypbind 0:off 1:off 2:off 3:off 4:off 5:off 6:off\n\nxinetd ベースのサービス:\n chargen-dgram: off\n chargen-stream: off\n daytime-dgram: off\n daytime-stream: off\n discard-dgram: off\n discard-stream: off\n echo-dgram: off\n echo-stream: off\n rexec: off\n rlogin: off\n rsh: off\n rsync: off\n sshd: on\n tcpmux-server: off\n time-dgram: off\n time-stream: off\n\nmore /etc/rsyslog.conf\n# rsyslog v5 configuration file\n\n# For more information see /usr/share/doc/rsyslog-*/rsyslog_conf.html\n# If you experience problems, see http://www.rsyslog.com/doc/troubleshoot.html\n\n#### MODULES ####\n\n$ModLoad? imuxsock # provides support for local system logging (e.g. via logger command)\n$ModLoad? imklog # provides kernel logging support (previously done by rklogd)\n#$ModLoad? immark # provides --MARK-- message capability\n\n# Provides UDP syslog reception\n#$ModLoad? imudp\n#$UDPServerRun? 514\n\n# Provides TCP syslog reception\n#$ModLoad? imtcp\n#$InputTCPServerRun? 514\n\n\n#### GLOBAL DIRECTIVES ####\n\n# Use default timestamp format\n$ActionFileDefaultTemplate? RSYSLOG_TraditionalFileFormat?\n\n# File syncing capability is disabled by default. This feature is usually not required,\n# not useful and an extreme performance hit\n#$ActionFileEnableSync? on\n\n# Include all config files in /etc/rsyslog.d/\n$IncludeConfig? /etc/rsyslog.d/*.conf\n\n\n#### RULES ####\n# Log all kernel messages to the console.\n# Logging much else clutters up the screen.\n#kern.* /dev/console\n\n# Log anything (except mail) of level info or higher.\n# Don't log private authentication messages!\nif $fromhost-ip =='127.0.0.1' and \\n $msg contains 'IPTABLES_INPUT_LOG' and \\n ( \\n $syslogfacility-text == 'kern' and \\n $syslogseverity-text == 'debug' \\n ) \\nthen /var/log/iptables.log\n*.info;mail.none;authpriv.none;cron.none /var/log/messages\n\n# The authpriv file has restricted access.\nauthpriv.* /var/log/secure\n\n# Log all the mail messages in one place.\nmail.* -/var/log/maillog\n\n\n# Log cron stuff\ncron.* /var/log/cron\n\n# Everybody gets emergency messages\n*.emerg *\n\n# Save news errors of level crit and higher in a special file.\nuucp,news.crit /var/log/spooler\n\n# Save boot messages also to boot.log\nlocal7.* /var/log/boot.log\n\n# remote_syslog\n#*.err;kern.debug;daemon.notice;mail.crit @10.159.213.12:514\n#mail.info @10.159.213.12:514\n\n# ### begin forwarding rule ###\n# The statement between the begin ... end define a SINGLE forwarding\n# rule. They belong together, do NOT split them. If you create multiple\n# forwarding rules, duplicate the whole block!\n# Remote Logging (we use TCP for reliable delivery)\n#\n# An on-disk queue is created for this action. If the remote host is\n# down, messages are spooled to disk and sent when it is up again.\n#$WorkDirectory? /var/lib/rsyslog # where to place spool files\n#$ActionQueueFileName? fwdRule1 # unique name prefix for spool files\n#$ActionQueueMaxDiskSpace? 1g # 1gb space limit (use as much as possible)\n#$ActionQueueSaveOnShutdown? on # save messages to disk on shutdown\n#$ActionQueueType? LinkedList? # run asynchronously\n#$ActionResumeRetryCount? -1 # infinite retries if host is down\n# remote host is: name/ip:port, e.g. 192.168.0.1:514, port optional\n#*.* @@remote-host:514\n# ### end of the forwarding rule ###\n\n# A template to for higher precision timestamps + severity logging\n$template SpiceTmpl?,"%TIMESTAMP%.%TIMESTAMP:::date-subseconds% %syslogtag% %syslogseverity-text%:%msg:::sp-if-no-1st-sp%%msg:::drop-last-lf%\n\n"\n\n:programname, startswith, "spice-vdagent" /var/log/spice-vdagent.log;SpiceTmpl?\n\nauth.debug @10.159.213.12\nauthpriv.debug @10.159.213.12\ncron.debug @10.159.213.12\ndaemon.debug @10.159.213.12\nkern.debug @10.159.213.12\nmail.debug @10.159.213.12\nsyslog.debug @10.159.213.12\nuser.debug @10.159.213.12\nuucp.debug @10.159.213.12\nlocal0.debug @10.159.213.12\nlocal1.debug @10.159.213.12\nlocal2.debug @10.159.213.12\nlocal3.debug @10.159.213.12\nlocal4.debug @10.159.213.12\nlocal5.debug @10.159.213.12\nlocal6.debug @10.159.213.12\nlocal7.debug @10.159.213.12\n\nmore snmp/snmpd.conf\n# Following entries were added by HP Insight Management Agents at\n# Fri Nov 11 16:49:41 JST 2011\ndlmod cmaX /usr/lib64/libcmaX64.so\nrwcommunity kra-esight 127.0.0.1\nrocommunity esight 127.0.0.1\nrwcommunity kra-esight default\nrocommunity esight default\ntrapcommunity esight\ntrapsink 10.159.213.9 esight\ntrapsink 10.159.216.4 esight\n# ---------------------- END --------------------\n\n)

通信要件調査

ctfrelay

delegate(TCP proxy)のこと。ftp経由先として使う。
以下でダウンロードできる。実機が9.9.7なのでこれに合わせる。
ftp://delegate.hpcc.jp/pub/DeleGate/old/

DeleGateビルド手順
2012.2.25 onoda


1.検証用DeleGate環境構築及び起動

(*) shellはbsh系を想定。

(1) 環境確認
$ who am i
ntte
$ pwd
/home/ntte/tmp
$ ls
delegate9.9.7.tar.gz

(2) tarballの展開
$ tar zxvf ./delegate9.9.7.tar.gz
$ ls -F
delegate9.9.7/ delegate9.9.7.tar.gz

(3) ビルド
$ cd ./delegate9.9.7
$ DGROOT=/tmp/delegate-ntte make

※ make の途中でデフォルトで持つADMINメールアドレスの入力を求められるが、デフォルトのまま、"y"で応答する。
(DeleGateのADMIN設定で明示的に指定するため、ここでは不要)

(4) ./src配下に実行形式"delegated"があることを確認
$ ls ./src/delegated
./src/delegated

(5) $DGROOT ディレクトリが作成されていることを確認
$ ls /tmp/delegate-ntte
/tmp/delegate-ntte/log /tmp/delegate-ntte/tmp

(6) dgbindのインストール
$ pwd
/home/ntte/tmp/delegate9.9.7
$ cd ./subin
$ chmod +x ./install.sh
$ make install

(7) dgbindインストール確認
ls /tmp/delegate-ntte/subin

(8) dgbindのpermissionを変更
$ cd /tmp/delegate-ntte/subin
$ su
# chown root dgbind
# chgrp ntte dgbind
# chmod 6550 dgbind
# exit

(9) DeleGate本体をインストール
$ cd /home/ntte/tmp/delegate9.9.7/src
$ cp delegated /tmp/delegate-ntte/bin(*)

 (*) 本ディレクトリ以外でも構わない。

(10) 検証用DeleGate設定ファイルの準備
 準備した設定ファイル(DeleGate起動ファイル)を適当なディレクトリに準備する。
 (DGROOTを/tmp/delegate-ntteで指定すること)

$ cd /home/ntte/bin
$ cp /hoge/delegated.init ./delegated

(11) 検証用DeleGateの起動
$ su
# /home/ntte/bin/delegated start


2.本番環境へのコピー
 検証が完了したdelegatedを/usr/local/bin 配下に格納する。

# mv /usr/local/bin/delegated /usr/local/bin/delegated.bak
# cp /path.to/delegated /usr/local/bin
# chown root:root /usr/local/bin/delegated
# chmod +x /usr/local/bin/delegated


以上

ツール

単体試験用

パラメータシート確認スクリプト(RHEL6用)

/nas/bin/check_parameter_sheet_RHEL6.sh
#------------------------------------
# 基本設定
#------------------------------------

## インストール情報

# OS
  [ /etc/issue ]
Red Hat Enterprise Linux Server release 6.7 (Santiago)
Kernel \r on an \m


# カーネルバージョン等
Linux gwww 2.6.32-573.3.1.el6.x86_64 #1 SMP Mon Aug 10 09:44:54 EDT 2015 x86_64 x86_64 x86_64 GNU/Linux

# マシン名
gwww

## ハードウェア情報

# メモリ
MemTotal:       16334296 kB
 
( 訪問者数: 101, 本日: 1, 昨日: 0 )

トップ   新規 一覧 単語検索 最終更新   ヘルプ   最終更新のRSS