cd /etc/udev/rules.d/ mv 70-persistent-net.rules 70-persistent-net.rules.old
# htpasswd -c /home/user/pwd/.htpasswd user1
# New password: # Re-type new password: # Adding password for user user1
# htpasswd /home/user/pwd/.htpasswd user2
# htpasswd /home/user/pwd/.htpasswd user1
AuthUserFile /home/user/pwd/.htpasswd AuthGroupFile /dev/null AuthName "Secure site" AuthType Basic require valid-user
| AuthUserFile | パスワードファイルの場所 |
| AuthGroupFile | グループファイルの指定、必要ないので "/dev/null" |
| AuthName | 認証時のメッセージ |
| AuthType | 認証方法、Basic認証を指定 |
| require | valid-userは全てのユーザ、"user [username]"で任意のユーザ |
Order Deny,Allow Deny from all Allow from 192.168.1 Allow from 127.0.0.1 AuthUserFile /home/user/pwd/.htpasswd AuthGroupFile /dev/null AuthName "Secure site" AuthType Basic require valid-user
Order Deny,Allow Deny from all Allow from 192.168.1 Allow from 127.0.0.1 AuthUserFile /home/user/pwd/.htpasswd AuthGroupFile /dev/null AuthName "Secure site" AuthType Basic require valid-user Satisfy Any
SetEnvIf X-UP-SUBNO ^05001234567890_ag\.ezweb\.ne\.jp$ mobilephone SetEnvIf X-UP-SUBNO ^05012345678901_ae\.ezweb\.ne\.jp$ mobilephone Order Deny,Allow Deny from all Allow from env=mobilephone Allow from 192.168.1 Allow from 127.0.0.1 AuthUserFile /home/user/pwd/.htpasswd AuthGroupFile /dev/null AuthName "Secure site" AuthType Basic require user user1 Satisfy Any
# yum install -y ntp
# vi /etc/ntp.conf
server 0.centos.pool.ntp.org server 1.centos.pool.ntp.org server 2.centos.pool.ntp.org
server ntp.nict.jp
# /etc/init.d/ntpd start ntpd を起動中: [ OK ]
# chkconfig ntpd on
# ntpq -p remote refid st t when poll reach delay offset jitter ============================================================================== ntp-a3.nict.go. .NICT. 1 u 17 64 3 17.167 -410704 1.775
remote refid st t when poll reach delay offset jitter ============================================================================== *ntp-a3.nict.go. .NICT. 1 u 52 64 17 15.958 -7.631 5.141同期完了の印 * が付いている、現在時刻も日本標準時刻で補正されたようだ。
# ntpdate ntp.nict.jp
# indexmaker /etc/mrtg/mrtg.cfg > /home/user/public_html/mrtg/index.html
# vi /home/user/public_html/mrtg/index.html
# yum install net-snmp
# vi /etc/snmp/snmpd.conf
#com2sec notConfigUser default public <-コメントアウト
com2sec local localhost private <-追加
com2sec mynetwork 192.100.100.0/24 public <-追加
#view systemview included .1.3.6.1.2.1.1 <-コメントアウト #view systemview included .1.3.6.1.2.1.25.1.1 <-コメントアウト view all included .1 80 <-追加 #group notConfigGroup v1 notConfigUser<-コメントアウト #group notConfigGroup v2c notConfigUser<-コメントアウト group MyROGroup v1 mynetwork<-追加 group MyROGroup v2c mynetwork<-追加 ↓コメントアウト
#access notConfigGroup "" any noauth exact systemview none none
access MyROGroup "" any noauth exact all none none <-追加
access MyRWGroup "" any noauth exact all all none <-追加
disk / 10000 <-コメント外す
# /etc/rc.d/init.d/snmpd start
snmpd を起動中: [ OK ]
# chkconfig snmpd on
# yum install mrtg
# cfgmaker --ifref=descr --ifdesc=descr public@192.100.100.50 >
/etc/mrtg/mrtg.cfg
# vi /etc/mrtg/mrtg.cfg
# WorkDir: /home/http/mrtg
WorkDir: /home/user/public_html/mrtg <- mrtgフォルダの設定
（今回はユーザフォルダに置くことにする）
# Options[_]: growright, bits
Options[_]: growright, noinfo <- グラフの時間軸を左から右へ設定する
Language:eucjp <-追加
### Interface 2 >>...
TargetからPageTopまでの値 "[192.100.100.50_eth0]" をすべて
"[eth0]" に修正する。
<table>から</table>までの値（<table>タグ含む）をすべて削除する
最終行に下記値を追加する
### CPU Load Average ###
Target[cpu]: .1.3.6.1.4.1.2021.10.1.5.1&.1.3.6.1.4.1.2021.10.1.5.2:
MaxBytes[cpu]: 100
Unscaled[cpu]: dwmy
Options[cpu]: gauge, absolute, growright, noinfo, nopercent
YLegend[cpu]: CPU Load(%)
ShortLegend[cpu]: (%)
LegendI[cpu]: 1分間平均
LegendO[cpu]: 5分間平均
Legend1[cpu]: 1分間平均(%)
Legend2[cpu]: 5分間平均(%)
Title[cpu]: CPU Load Average
PageTop[cpu]: <H1>CPU Load Average</H1>
### Memory Free ####
Target[mem]: .1.3.6.1.4.1.2021.4.6.0&.1.3.6.1.4.1.2021.4.4.0:
MaxBytes1[mem]: 4010280
MaxBytes2[mem]: 6242296
Unscaled[mem]: dwmy
Options[mem]: gauge, absolute, growright, noinfo
YLegend[mem]: Mem Free(Bytes)
ShortLegend[mem]: Bytes
kilo[mem]: 1024
kMG[mem]: k,M,G,T,P
LegendI[mem]: Real
LegendO[mem]: Swap
Legend1[mem]: 空き物理メモリ[MBytes]
Legend2[mem]: 空きスワップメモリ[MBytes]
Title[mem]: Memory Free
PageTop[mem]: <H1>Memory Free</H1>
### Disk Used ####
Target[disk]: .1.3.6.1.4.1.2021.9.1.9.1&.1.3.6.1.4.1.2021.9.1.9.1:
MaxBytes[disk]: 100
Unscaled[disk]: dwmy
Options[disk]: gauge, absolute, growright, nopercent, noinfo
YLegend[disk]: Disk Used(%)
ShortLegend[disk]: (%)
LegendI[disk]: / Disk used
LegendO[disk]: / Disk Used
Legend1[disk]: / Disk used
Legend2[disk]: / Disk used
Title[disk]: Disk Used
PageTop[disk]: <H1>Disk Used</H1>
### CPU Temperature ####
Target[cputemp]: `/usr/bin/sensors | grep 'Core' |
awk '{print $3}' | sed -e 's/+//' -e 's/[^0-9+\.].*//'`
MaxBytes[cputemp]: 100
Title[cputemp]: CPU Temperature
PageTop[cputemp]: <H1>CPU Temperature</H1>
Options[cputemp]: growright,absolute,gauge,nopercent,noinfo
WithPeak[cputemp]: ymw
unscaled[cputemp]: dwmy
YLegend[cputemp]: Temperature
ShortLegend[cputemp]: C
LegendI[cputemp]: Core 0
LegendO[cputemp]: Core 1
Legend1[cputemp]: Core 0
Legend2[cputemp]: Core 1
### M/B Temperature ####
Target[mbtemp]: `/usr/bin/sensors | grep 'temp1' |
awk '{print $2}{print $2}' | sed -e 's/+//' -e 's/[^0-9+\.].*//'`
MaxBytes[mbtemp]: 100
Title[mbtemp]: M/B Temperature
PageTop[mbtemp]: <H1>M/B Temperature</H1>
Options[mbtemp]: growright,absolute,gauge,nopercent,noinfo
WithPeak[mbtemp]: ymw
unscaled[mbtemp]: dwmy
YLegend[mbtemp]: Temperature
ShortLegend[mbtemp]: C
LegendI[mbtemp]: Temp
LegendO[mbtemp]: Temp
Legend1[mbtemp]: M/B Temp
Legend2[mbtemp]: M/B Temp
# sensors
acpitz-virtual-0
Adapter: Virtual device
temp1: +54.0°C (crit = +104.0°C)
coretemp-isa-0000
Adapter: ISA adapter
Core 0: +22.0°C (high = +80.0°C, crit = +100.0°C)
Core 1: +23.0°C (high = +80.0°C, crit = +100.0°C)
# /usr/bin/sensors | grep 'Core' |
awk '{print $3}' | sed -e 's/+//' -e 's/[^0-9+\.].*//'
22.0
23.0
# /usr/bin/sensors | grep 'temp1' |
awk '{print $2}{print $2}' | sed -e 's/+//' -e 's/[^0-9+\.].*//'
54.0
54.0
# free
total used free shared buffers cached
Mem: 4010280 231876 3778404 0 12204 142772
-/+ buffers/cache: 76900 3933380
Swap: 6242296 0 6242296
設定ファイルのバックアップ
# cp /etc/mrtg/mrtg.cfg /etc/mrtg/mrtg.cfg.org
nkfでコードをEUCに変換
# nkf -e /etc/mrtg/mrtg.cfg.org > /etc/mrtg/mrtg.cfg
# yum install nkf
# vi mrtg.sh
#!/bin/bash
LOCK=/var/lock/mrtg/mrtg_l
CONFCACHE=/var/lib/mrtg/mrtg.ok
export LANG=ja_JP.eucJP
mrtg /etc/mrtg/mrtg.cfg --lock-file $LOCK --confcache-file $CONFCACHE
# chmod 700 mrtg.sh <- 権限の付加# vi /etc/httpd/conf.d/mrtg.conf
#Alias /mrtg /var/www/mrtg
Alias /mrtg /home/user/public_html/mrtg <- 変更する
<Location /mrtg>
Order deny,allow
Deny from all
Allow from All <-追加
#Allow from 127.0.0.1
Allow from ::1
# Allow from .example.com
</Location>
# /etc/rc.d/init.d/httpd restart
httpd を停止中: [ OK ]
httpd を起動中: [ OK ]
# service crond restart
crond を停止中: [ OK ]
crond を起動中: [ OK ]
# yum install lm_sensors
Loaded plugins: fastestmirror, presto
Loading mirror speeds from cached hostfile
* base: www.ftp.ne.jp
* extras: www.ftp.ne.jp
* updates: www.ftp.ne.jp
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package lm_sensors.i686 0:3.1.1-10.el6 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
============================================================
Package Arch Version Repository Size
============================================================
Installing:
lm_sensors i686 3.1.1-10.el6 base 122 k
Transaction Summary
============================================================
Install 1 Package(s)
Total download size: 122 k
Installed size: 343 k
Is this ok [y/N]: y
Downloading Packages:
Setting up and reading Presto delta metadata
Processing delta metadata
Package(s) data still to download: 122 k
lm_sensors-3.1.1-10.el6.i686.rpm | 122 kB 00:00
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing : lm_sensors-3.1.1-10.el6.i686 1/1
Installed:
lm_sensors.i686 0:3.1.1-10.el6
Complete!
# sensors-detect
Stopping lm_sensors: not configured, run sensors-detect [警告]
# sensors-detect revision 1.1
# System: Standard XS35
# Board: Shuttle B10IE01
This program will help you determine which kernel modules you need
to load to use lm_sensors most effectively. It is generally safe
and recommended to accept the default answers to all questions,
unless you know what you're doing.
Some south bridges, CPUs or memory controllers contain embedded sensors.
Do you want to scan for them? This is totally safe. (YES/no):
Silicon Integrated Systems SIS5595... No
VIA VT82C686 Integrated Sensors... No
VIA VT8231 Integrated Sensors... No
AMD K8 thermal sensors... No
AMD Family 11h thermal sensors... No
Intel Core family thermal sensor... Success!
(driver `coretemp')
Intel AMB FB-DIMM thermal sensor... No
VIA C7 thermal and voltage sensors... No
Some Super I/O chips contain embedded sensors. We have to write to
standard I/O ports to probe them. This is usually safe.
Do you want to scan for Super I/O sensors? (YES/no):
Probing for Super-I/O at 0x2e/0x2f
Trying family `National Semiconductor'... No
Trying family `SMSC'... No
Trying family `VIA/Winbond/Nuvoton/Fintek'... No
Trying family `ITE'... No
Probing for Super-I/O at 0x4e/0x4f
Trying family `National Semiconductor'... Yes
Found unknown chip with ID 0x8500
Some systems (mainly servers) implement IPMI, a set of common interfaces
through which system health data may be retrieved, amongst other things.
We first try to get the information from SMBIOS. If we don't find it
there, we have to read from arbitrary I/O ports to probe for such
interfaces. This is normally safe. Do you want to scan for IPMI
interfaces? (YES/no):
Probing for `IPMI BMC KCS' at 0xca0... No
Probing for `IPMI BMC SMIC' at 0xca8... No
Some hardware monitoring chips are accessible through the ISA I/O ports.
We have to write to arbitrary I/O ports to probe them. This is usually
safe though. Yes, you do have ISA I/O ports even if you do not have any
ISA slots! Do you want to scan the ISA I/O ports? (YES/no):
Probing for `National Semiconductor LM78' at 0x290... No
Probing for `National Semiconductor LM79' at 0x290... No
Probing for `Winbond W83781D' at 0x290... No
Probing for `Winbond W83782D' at 0x290... No
Lastly, we can probe the I2C/SMBus adapters for connected hardware
monitoring devices. This is the most risky part, and while it works
reasonably well on most systems, it has been reported to cause trouble
on some systems.
Do you want to probe the I2C/SMBus adapters now? (YES/no):
Using driver `i2c-i801' for device 0000:00:1f.3: Intel 82801G ICH7
Module i2c-dev loaded successfully.
Next adapter: i915 gmbus disabled (i2c-0)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 gmbus ssc (i2c-1)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 GPIOB (i2c-2)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 gmbus vga (i2c-3)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 GPIOA (i2c-4)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 gmbus panel (i2c-5)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 GPIOC (i2c-6)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 gmbus dpc (i2c-7)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 GPIOD (i2c-8)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 gmbus dpb (i2c-9)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 GPIOE (i2c-10)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 gmbus reserved (i2c-11)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 gmbus dpd (i2c-12)
Do you want to scan it? (YES/no/selectively):
Next adapter: i915 GPIOF (i2c-13)
Do you want to scan it? (YES/no/selectively):
Next adapter: SMBus I801 adapter at 0400 (i2c-14)
Do you want to scan it? (YES/no/selectively):
Client found at address 0x50
Probing for `Analog Devices ADM1033'... No
Probing for `Analog Devices ADM1034'... No
Probing for `SPD EEPROM'... No
Probing for `EDID EEPROM'... No
Now follows a summary of the probes I have just done.
Just press ENTER to continue:
Driver `coretemp':
* Chip `Intel Core family thermal sensor' (confidence: 9)
Do you want to overwrite /etc/sysconfig/lm_sensors? (YES/no):
Starting lm_sensors: loading module coretemp [ OK ]
Unloading i2c-dev... OK
# sensors
acpitz-virtual-0
Adapter: Virtual device
temp1: +52.0°C (crit = +104.0°C)
coretemp-isa-0000
Adapter: ISA adapter
Core 0: +19.0°C (high = +80.0°C, crit = +100.0°C)
Core 1: +20.0°C (high = +80.0°C, crit = +100.0°C)
order deny,allow
deny from all
allow from 192.100.100
AuthType Basic
AuthName "pas"
AuthUserFile /home/user/pas/.htpasswd
require valid-user
Satisfy Any
//PHPでのサブスクライバIDを取得
$id = $_SERVER['HTTP_X_UP_SUBNO'];
//PHPでの個体識別番号を取得
preg_match("/^.+ser([0-9a-zA-Z]+).*$/", $useragent, $match);
$id = $match[1];
SetEnvIf X-UP-SUBNO ^05012345678901_ag\.ezweb\.ne\.jp$ mobilephone
SetEnvIf X-UP-SUBNO ^05012345678902_ae\.ezweb\.ne\.jp$ mobilephone
Order Deny,Allow
Deny from all
Allow from env=mobilephone
Allow from 192.100.100
# vi /etc/hosts.allow
all:127.0.0.1
all:192.100.
sshd:ALL
# vi /etc/hosts.deny
ALL:ALL
# vi /etc/my.cnf
[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
old_passwords=1
default-character-set=utf8
skip-character-set-client-handshake
character-set-server = utf8
collation-server = utf8_general_ci
init-connect = SET NAMES utf8
[mysqld_safe]
log-error=/var/log/mysqld.log
pid-file=/var/run/mysqld/mysqld.pid
[client]
default-character-set=utf8
[mysql]
default-character-set=utf8
[mysqldump]
default-character-set=utf8
# /etc/rc.d/init.d/mysqld restart
mysqld を停止中: [ OK ]
mysqld を起動中: [ OK ]
# vi /etc/php.ini
//デフォルトの文字コード
;default_charset = "iso-8859-1"
default_charset = "UTF-8"
//タイムゾーン
;date.timezone =
date.timezone = "Asia/Tokyo"
//利用言語の設定
;mbstring.language = Japanese
mbstring.language = Japanese
//マルチバイト文字列関数のデフォルト文字コード
;mbstring.internal_encoding = EUC-JP
mbstring.internal_encoding = UTF-8
//HTTP入出力の文字コード変換。passにして、自動変換offとする。
;mbstring.http_input = auto
mbstring.http_input = pass
;mbstring.http_output = SJIS
mbstring.http_output = pass
;mbstring.encoding_translation = Off
mbstring.encoding_translation = Off
//文字コード自動判別に優先する文字コード
:mbstring.detect_order = auto
mbstring.detect_order = auto
//変換に失敗した場合に表示する文字
;mbstring.substitute_character = none;
mbstring.substitute_character = none;
//オーバーロードされる関数の指定（今回はオーバーロードしない）
;mbstring.func_overload = 0
mbstring.func_overload = 0
//文字コードの自動判別を厳密に行うかの設定
:mbstring.strict_detection = Off
mbstring.strict_detection = Off
//MIMEタイプの指定（空白）
;mbstring.http_output_conv_mimetype=
mbstring.http_output_conv_mimetype=
# /etc/rc.d/init.d/httpd restart
httpd を停止中: [ OK ]
httpd を起動中: [ OK ]
$ mysqldump -u [username] -p -x --all-databases > [filename]
$ mysql -u [username] -p < [filename]
mysql> grant select,insert,update,delete, file on *.* to [username] identified by 'password'; Query OK, 0 rows affected (0.00 sec)
$ mysql -uroot -p mysql> show databases; +--------------------+ | Database | +--------------------+ | information_schema | | mysql | | public | | userdb | | test | +--------------------+ 5 rows in set (0.00 sec)
MySQLへの接続
mysql -u[user name] -p
データベースへの接続
mysql -u[user name] -p [database name]
データベースへのアクセス
use [database name];
データベースの確認
show databases;
# ether-wake -i eth0 00:24:A5:xx:xx:xx //(MACアドレス)# rpm -ivh wakeonlan-0.41-0.fdr.1.noarch.rpm
$ wakeonlan 00:24:A5:xx:xx:xx //(MACアドレス)
Sending magic packet to 255.255.255.255:9 with 00:24:A5:xx:xx:xx
$vi wol-freenas.sh
#!/bin/sh
wakeonlan 00:24:A5:xx:xx:xx
$ ./wol-freenas.sh
# vi /etc/httpd/conf/httpd.conf
#AddDefaultCharset UTF-8 <-コメントアウト(文字化け対策)
//これより以下の部分は、Aliasでのエラー回避のため
最終行へ移動（ ~ を表示しない場合）
<IfModule mod_userdir.c>
#
# UserDir is disabled by default since it can confirm the presence
# of a username on the system (depending on home directory
# permissions).
#
#UserDir disabled <-コメントアウト
#
# To enable requests to /~user/ to serve the user's public_html
# directory, remove the "UserDir disabled" line above, and uncomment
# the following line instead:
#
UserDir public_html <-コメント解除
//ユーザは~(チルダ)なしでアクセスできるよう設定を追加
AliasMatch ^/([^/]+)/(.*) /home/$1/public_html/$2
</IfModule>
//下記を追加
<Directory /home/*/public_html>
AllowOverride All <- .htaccess許可
Options IncludesNoExec ExecCGI FollowSymLinks <- CGI許可
<Limit GET POST OPTIONS>
Order allow,deny
Allow from all
</Limit>
<LimitExcept GET POST OPTIONS>
Order deny,allow
Deny from all
</LimitExcept>
</Directory>
# /etc/rc.d/init.d/httpd restart
httpd を停止中: [ OK ]
httpd を起動中: [ OK ]
# mkdir /home/user/public_html
# chmod 755 /home/ <- パーミッション確認
# chmod 755 /home/user/ <- パーミッション変更
# chmod 755 /home/user/public_html/ <- パーミッション変更
$ vi /home/seiji/public_html/index.html
# getenforce
Enforcing <-SELinux有効
Permissive <-SELinux無効
# setenforce 0
# vi /etc/sysconfig/selinux
#SELINUX=enforcing
SELINUX=disabled
mkdir -p /home/[user]/.ssh/
chmod 700 .ssh/
chmod go-w /home/[user] /home/[user]/.ssh
mv id_dsa.pub /home/[user]/.ssh/authorized_keys
chmod 600 authorized_keys
chown [user] authorized_keys
chown [user] .ssh/
//ユーザー表記
u 所有者
g グループ
o その他
a 全て
//権限指定
+ 後述権限の付加
- 後述権限を削除
= 後述権限に変更
//権限表記
r 読みだし権限
w 書き込み権限
x 実行可能権限
s セットID
t スティッキー・ビット
//文字 数値 内容
r 4 読みだし可
w 2 書き込み可
x 1 実行可能
※上記数値の組み合わせ（加算）により設定
vi /etc/ssh/sshd_config
//パスワードでの認証を禁止
#PasswordAuthentication yes
PasswordAuthentication no
//公開鍵認証を許可（ssh2のみ）
#PubkeyAuthentication yes
PubkeyAuthentication yes
//authorized_keysの場所（user配下の.sshフォルダ）
#AuthorizedKeysFile .ssh/authorized_keys
AuthorizedKeysFile .ssh/authorized_keys
/etc/rc.d/init.d/sshd restart
Last login: Thu Mar 8 23:14:22 2012 from 192.100.xxx.xxx
[user@xs35v2 ~]$
# useradd [username]
# passwd [username]
$ su - root
パスワード:
[root@xs35v2 ~]# vi /etc/ssh/sshd_config
#PermitRootLogin yes
PermitRootLogin no
[root@xs35v2 ~]# /etc/rc.d/init.d/sshd reload
sshd を再読み込み中: [ OK ]
# yum list install httpd php mysql-server
httpd.i686 2.2.15-15.el6.centos.1
mysql-server.i686 5.1.61-1.el6_2.1
php.i686 5.3.3-3.el6_2.6
# yum install httpd php mysql-server
# yum list install mod_auth_mysql php-mysql php-mbstring
php-gd perl-Net-SSLeay expect
# yum install mod_auth_mysql php-mysql php-mbstring
php-gd perl-Net-SSLeay expect
# vi /etc/hosts
# vi /etc/httpd/conf/httpd.conf（下記項目の値を変更）
# vi /etc/my.cnf（下記を追加）
# /etc/rc.d/init.d/mysqld start
mysql -u root
mysql> show variables like 'char%';
mysql> select host,user,password from mysql.user;
# /etc/rc.d/init.d/httpd start
# chkconfig httpd on
# chkconfig --list httpd
# chkconfig mysqld on
# chkconfig --list mysqld
# vi /var/www/html/index.html
$ vi /var/www/html/info.php
service network restart
