Systemadministration
Securing SSH with FIDO U2F (YubiKey) on Debian
FIDO devices are supported by the public key types „ecdsa-sk“ and „ed25519-sk“, along with corresponding certificate types. This is supported in OpenSSH from version 8.2. Debian Buster (stable) delivers version 7.9, so we need to install a newer version via Debian Buster Backports. If you use Debian unstable or read this when Debian Bullseye is […]
Ubuntu Yubikey U2F Auth
Yubikey is a hardware security device. You can use it for two-factor authentication. Here is an example setup for two-factor login for Ubuntu Linux. I recommend to use at least two Yubikeys. One primary and the second one as a backup device. I used mostly the official HowTo for this: https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F 1. Setup First add […]
Monitoring VMWare vSphere with Grafana and Telegraf
Collector Configuration You need the latest Telegraf version which includes the vSphere Plugin! On Ubuntu or Debian you can get it with: Now add the following lines to your ‚/etc/telegraf/telegraf.conf‘: ### VMWARE #### ## Realtime instance [[inputs.vsphere]] interval = „60s“ vcenters = [ „https://VCENTERSERVER/sdk“ ] username = „USERNAME@vsphere.local“ password = „PASSWORD“ insecure_skip_verify = true force_discover_on_init […]
Installing Galera Cluster with MariaDB
Galera give you some nice cluster features. Like true Multi-Master configuration, synchronous replication, conflict detection and impromes the maintenance of your MariaDB servers with automatic provisioning, node isolation and rolling upgrades. You need a Linux or Unix Operating System. I used Debian for this tutorial. Multiple nodes with an odd number of nodes. Three nodes […]
Docker on Debian 10 managed with Cockpit
With Cockpit, you can also manage docker containers. Here is a small example setup: Install Docker apt install apt-transport-https ca-certificates curl gnupg2 software-properties-common curl -fsSL https://download.docker.com/linux/debian/gpg | apt-key add – add-apt-repository „deb [arch=amd64] https://download.docker.com/linux/debian $(lsb_release -cs) stable“ apt update apt-cache policy docker-ce apt install docker-ce Make sure that docker is running: systemctl status docker Output: […]
Servermanagement with Cockpit on Debian 10
Cockpit is an easy and simple remote management software for Linux servers. It is now included in Debian 10 Buster.It runs on several Linux distributions, including Debian, Ubuntu, Fedora, CentOS, RHEL and Arch Linux.With Cockpit, you can manage multiple Linux servers via your web browser. Here is an simple setup to get started with Cockpit. […]
Two-factor authentication with Guacamole 1.1.0 (Part 4)
You can add totp-auth to your Guacamole login process. You can use any TOTP App like „Google Authenticator“ or „OTP Auth“ to add a two-factor authentication to Guacamole. First download and install the totp-auth plugin: cd /usr/src/ wget http://apache.mirror.digionline.de/guacamole/1.0.0/binary/guacamole-auth-totp-1.0.0.tar.gz tar xvzf guacamole-auth-totp-1.0.0.tar.gz cp /usr/src/guacamole-auth-totp-1.0.0/guacamole-auth-totp-1.0.0.jar /etc/guacamole/extensions/ Now configurate ‚/etc/guacamole/guacamole.properties‘ with your favorite editor and add the […]
Setup LDAP/AD authentication for Guacamole 1.1.0 (Part 3)
If you don’t want to add all your users to the guacamole db for authentication you can combine the DB authentication with LDAP authentication. (You don’t have to modify your LDAP) First download and install the LDAP auth extension: wget http://apache.mirror.iphh.net/guacamole/1.1.0/binary/guacamole-auth-ldap-1.1.0.tar.gz tar xvzf guacamole-auth-ldap-1.1.0.tar.gz cp /usr/src/guacamole-auth-ldap-1.1.0/guacamole-auth-ldap-1.1.0.jar /etc/guacamole/extensions/ Now configurate ‚/etc/guacamole/guacamole.properties‘ with your favorite editor and […]
Your own search engine with Apache Nutch 1.16 on Debian 10
In 2016, I wrote an article for the Linux Magazine about an personal search engine: * Suchmaschinenserver im Eigenbau (Ausgabe 02/2016)* Go Find It (Issue #186 / May 2016) A lot has changed in the past few years. New Nutch versions, new Solr versions and of course new OS versions. Here is a little updated […]
Setup Windows 10/Server 2016 RDP to work with Guacamole 1.1.0 (Part 2)
Currently Guacamole 1.1.0 is not compatible with the default encryption of Windows. If you disable NLA it should work. Open Registry editor ‚regedit‘ and make the following settings: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp] Change “SecurityLayer” value to dword:00000001 Verify “UserAuthentication” value is dword:0x00000000 This should work without reboot. Or use NLA If you want to use NLA you […]