Generic-cli - Versionshistorik

Js146669: /* Certs/Keys */

2021-09-29T07:55:05Z

‎Certs/Keys

Js146669 den 29 september 2021 kl. 07.54

2021-09-29T07:54:36Z

Js146669: /* RSYNC Slash or no Slash */

2021-05-26T14:39:34Z

‎RSYNC Slash or no Slash

Js146669: /* Users */

2021-05-26T14:37:36Z

‎Users

Js146669: /* Users */

2021-05-26T14:36:56Z

‎Users

Js146669: /* Groups */

2021-05-26T14:35:02Z

‎Groups

@@ Rad 741: / Rad 741: @@
 == Certs/Keys ==
 How can I examine the certificate and key?
 If the certificate is an x509 certificate in PEM format. To print it out, you can issue:
   $ openssl x509 -in certfilename -text

← Äldre version		Versionen från 29 september 2021 kl. 07.54
Rad 738:		Rad 738:
	$ semanage fcontext -a -t httpd_sys_content_t “path-to-your-DocRoot(/.*)?”		$ semanage fcontext -a -t httpd_sys_content_t “path-to-your-DocRoot(/.*)?”
	$ restorecon <path-to-your-DocRoot>		$ restorecon <path-to-your-DocRoot>
		+
		+	== Certs/Keys ==
		+	How can I examine the certificate and key?
		+	If the certificate is an x509 certificate in PEM format. To print it out, you can issue:
		+	$ openssl x509 -in certfilename -text
		+
		+	This is useful if you want to know the expiration date of the certificate.
		+
		+	If the key is simply an RSA key in PEM format, so printing it is not likely to help you very much. If you want to print it, issue:
		+	$ openssl rsa -in keyfilename -text

@@ Rad 321: / Rad 321: @@
 *Without a slash on the source directory means copy both the source directory, and the contents (recursively if specified) to the destination directory
 *Adding a trailing slash on the SRC directory means only copy the contents of the SRC directory, recursively if specified, to the destination.
 == RSYNC v RSYNCD ==

@@ Rad 474: / Rad 474: @@
 '''Account aging for existing users'''
   $ chage     | change user password expiry information
-    -l     | “Display acct aging info”
+    -l        | “Display acct aging info”
     '''N.B!''' If no options are selected, $ chage operates in an interactive fashion, prompting the user with the current values for all of the fields.

@@ Rad 448: / Rad 448: @@
 == Users ==
 Configuration files
-  /etc/login.defs       contains info for passwd ageing, actions to perform when administering users IDs.
+  /etc/login.defs       | contains info for passwd ageing, actions to perform when administering users IDs.
-  /etc/default/useradd  contains default actions when creating users t.ex shell, homedir path etc..
+  /etc/default/useradd  | contains default actions when creating users t.ex shell, homedir path etc..
-  /etc/skel             contains files copied to users homedir by default.
+  /etc/skel             | contains files copied to users homedir by default.
-  /etc/pam.d            contains cfg files for pluggable authentication modules.
+  /etc/pam.d            | contains cfg files for pluggable authentication modules.
-  /etc/security/pwquality.conf   Set the passwd quality policy, edit the conf file
+  /etc/security/pwquality.conf   | Set the passwd quality policy, edit the conf file
-  $ userdel “username”     to delete user but preserve homedir
+  $ userdel “username”     | to delete user but preserve homedir
-  $ userdel -r “username”  to delete user and homedir.
+  $ userdel -r “username”  | to delete user and homedir.
   $ usermod
-    -a      append to existing settings, used when using the -G option for supplemental groups.
+    -a      | append to existing settings, used when using the -G option for supplemental groups.
-    -l      change login name
+    -l      | change login name
-    -L/-U   Lock or unlock an account, N.B! doesn’t stop login if user uses ssh-keys.
+    -L/-U   | Lock or unlock an account, N.B! doesn’t stop login if user uses ssh-keys.
   $ passwd
-     -d deletes passwd
+     -d    | deletes passwd
-     -e expires passwd
+     -e    | expires passwd
-     -l locks passwd   (not effective if ssh keys used)
+     -l    | locks passwd   (not effective if ssh keys used)
-     -u unlocks the passwd
+     -u    | unlocks the passwd
-     -S passwd status
+     -S    | passwd status
   '''N.B!'''  In the /etc/shadow file a “!!” in the password field means that the password for the user has not been set yet.
 '''Account aging for existing users'''
-  $ chage     change user password expiry information
+  $ chage     | change user password expiry information
-    -l     “Display acct aging info”
+    -l     | “Display acct aging info”
     '''N.B!''' If no options are selected, $ chage operates in an interactive fashion, prompting the user with the current values for all of the fields.
-  $ chage -d 0 “username”             Forces the user to change passwd at next login.
+  $ chage -d 0 “username”             | Forces the user to change passwd at next login.
-  $ chage -E 2022-01-01 “username”    Set the expiration date for the users account
+  $ chage -E 2022-01-01 “username”    | Set the expiration date for the users account
     '''N.B!''' If the account expires the user can no longer login even with ssh-keys.
-  $ chage -M “xx” “username”          Set the max number of days between passwd change.
+  $ chage -M “xx” “username”          | Set the max number of days between passwd change.
-  $ chage -I “xx”  “username”         Set the number of days an account can be inactive before it’s locked.
+  $ chage -I “xx”  “username”         | Set the number of days an account can be inactive before it’s locked.
-  $ chage -I -1 -m 0 -M 99999 -E -1 “username”    Remove all passwd aging for a user. Used for service users.
+  $ chage -I -1 -m 0 -M 99999 -E -1 “username”    | Remove all passwd aging for a user. Used for service users.
   $ usermod
-      -W     Set the number of days of warning before a password change is required.
+      -W     | Set the number of days of warning before a password change is required.
 == Groups ==

@@ Rad 493: / Rad 493: @@
 == Groups ==
 Two commands to add users to a group
-  $ gpasswd -a “username” “groupname”      this is group centric i.e. add user to a group. Can add several users at once.
+  $ gpasswd -a “username” “groupname”      | this is group centric i.e. add user to a group. Can add several users at once.
-  $ usermod -a -G “groupname” “username”   this is user centric i.e. add group to user's settings. Executed per user.
+  $ usermod -a -G “groupname” “username”   | this is user centric i.e. add group to user's settings. Executed per user.
 Set passwd for the group access for users outside of group
@@ Rad 504: / Rad 504: @@
   $ groups
-  $ gpasswd -d “username” “grpname”   to delete a user from a group
+  $ gpasswd -d “username” “grpname”   | to delete a user from a group
-  $ gpasswd -A “username” “grpname”   to add admin user for a grp.
+  $ gpasswd -A “username” “grpname”   | to add admin user for a grp.
   $ grpmod
 How to ID yourself
-  $ logname       ids who you logged in at start of session
+  $ logname       | ids who you logged in at start of session
-  $ whoami        Id who you are now at present.
+  $ whoami        | Id who you are now at present.
 Add users to “wheel” group to elevate privileges for all commands.
   $ useradd -u 1100 -s /bin/ksh -G wheel “username”
-  $ gpasswd -M “user1",“user2”,“user3" “grpname”    Quicker than usermod as it’s performed from grp not user perspective.
+  $ gpasswd -M “user1",“user2”,“user3" “grpname”    | Quicker than usermod as it’s performed from grp not user perspective.
-  $ gpasswd “groupname”                             Add the passwd for the group. Group members won’t need to enter the passwd.
+  $ gpasswd “groupname”                             | Add the passwd for the group. Group members won’t need to enter the passwd.
-  $ chage -E 90 -W 5 “username”                     Configure user acct to expire in 90 days with warning msg sent 5 days before expire date.
+  $ chage -E 90 -W 5 “username”                     | Configure user acct to expire in 90 days with warning msg sent 5 days before expire date.
 == Perms & ACL ==