Pre-requisite
Python language interpreter version 1.5.2 or higher.

Getting NTLMAPS
Download the current stable version ntlmaps-0.9.9.0.1.tar.gz source file from ntlmaps.sourceforge.net

Install NTLMAPS
Run the command below to extract downloaded file to a target directory: -
tar xvfz ntlmaps-0.9.9.0.1.tar.gz -C /usr/local/bin

Run the command below to create a symbolic link: –
ln -s /usr/local/bin/ntlmaps-0.9.9.0.1 /usr/local/bin/ntlmaps

Run the command below to backup the NTLMAPS configuration file: -
cp -a /usr/local/bin/ntlmaps/server.cfg /usr/local/bin/ntlmaps/server.cfg-default

Run the command below to edit the NTLMAPS configuration file: -
vi /usr/local/bin/ntlmaps/server.cfg

Configure NTLMAPS
By default NTLMAPS listen on port 5865, you can change it to any port you preferred. I leave it as default. Remember to save the configuration file after modifying it as below (an example only): -
LISTEN_PORT:5865
PARENT_PROXY:your.isa.server.name
PARENT_PROXY_PORT:your.isa.server.port
ALLOW_EXTERNAL_CLIENTS:1
FRIENDLY_IPS:your.client.ip1 your.client.ip2
NT_HOSTNAME:your.ntlmaps.server.name
NT_DOMAIN:your.domain
USER:your.nt.username
PASSWORD:your.nt.password
LM_PART:1
NT_PART:1
NTLM_FLAGS: 07820000

Start NTLMAPS
Run the command below to start NTLMAPS: -
/usr/local/bin/ntlmaps/main.py -c /usr/local/bin/ntlmaps/server.cfg &

System Wide Configuration
You can setup the proxy environment in /etc/profile as global variable as below (tested with curl,elinks,lynx and wget): -
export http_proxy=http://127.0.0.1:5865

GUI Web Browser Configuration
You can use the following information to configure in your GUI web browser: -
Proxy IP address: 127.0.0.1
Proxy IP address: 5865

The installation process starts automatically. Next, the installer will perform hardware detection and initialization. Then, you will see the Select Keymap” screen as below. Select your preferred keymap and choose Ok to proceed.

You will see the “Welcome to XenServer” screen as below. Choose Ok to proceed.

Next, the “End User License Agreement” (EULA) screen is displayed below. You can read the agreement by using the up and down arrow keys to scroll through. Choose Accept EULA to proceed.

You will see the “Action to Perform” screen as displayed below. The installer detected an existing version installed. Select Upgrade XenServer v5.5.0-25727p and choose Ok button to proceed.

Then, the “Previous Installation Detected” screen is displayed. Choose Continue to proceed with the installation.

The next screen “Select Installation Source” below asks for the source of the installation packages. Since we are using a physical CD, choose Local media and choose Ok to proceed.

The next screen “Supplemental Packs” below asks for the Supplemental Packs from a second CD. This can be installed later. We are skipping this. Choose No to proceed.

The “Verify Installation Source” screen is displayed below. We will bypass this. Choose Skip verification and choose Ok to proceed.

Next, you will see “Confirm Installation” screen as below. Choose Install XenServer to proceed with the installation.

The “Installing XenServer” screen is displayed as below. The progress bar below shows the process of backing up of an existing installation.

Next, the progress bar below shows the process of Base Pack installation.

Finally, you see the progress bar reaching the completion of XenServer installation in the “Installing XenServer” screen as below.

You will see the “Installation Complete” screen as below showing that XenServer installation has completed. Choose Ok to proceed with the server reboot.

The server is rebooted and goes to the Citrix XenServer boot up screen as below and will automatically boot up the Citrix XenServer.

Here you go, the Citrix XenServer 5.6.0 is up and running!

This post describes how to install and setup a secured FTP server using vsftpd 2.0.5 with TLS in CentOS 5.5 the easy way.

Pre-requisite Check
Run the command below to query for vsftpd rpm: -

rpm -qa vsftpd

If vsftpd is not installed, you can use yum to install it using the command below: -

yum install vsftpd

Initial Configuration
The configuration directory of vsftpd is located in /etc/vsftpd path. It is advisable to backup the good known configuration files for easier quick restoration. Run the command below: -

cp /etc/vsftpd/vsftpd.conf /etc/vsftpd/vsftpd.conf.original

Control User Access
Change the following parameter below in your /etc/vsftpd/vsftpd.conf file to disable anonymous users access: -

anonymous_enable=NO

Change the following parameter below in your /etc/vsftpd/vsftpd.conf file to lock users in their home directory: -

chroot_list_enable=YES
chroot_list_file=/etc/vsftpd/chroot_list
chroot_local_user=YES

Run the following command below to create /etc/vsftpd/chroot_list file: -

touch /etc/vsftpd/chroot_list
chmod 600 /etc/vsftpd/chroot_list

Enable TLS Encryption
Run the following command below to check an installation of vsftpd for SSL support: -

ldd /usr/sbin/vsftpd | grep ssl

You will get the following result below if your vsftpd is SSL supported: -

libssl.so.6 => /lib/libssl.so.6 (0x001e3000)

To use TLS you will need to generate a key by using the openssl command below: -

openssl req -x509 -nodes -days 3650 -newkey rsa:1024 -keyout /etc/vsftpd/vsftpd.pem -out /etc/vsftpd/vsftpd.pem

The above command prompts you for series of questions for creating your certificate with a life of 10 years (-days 3650): -

Country Name (2 letter code) [GB]:MY
State or Province Name (full name) [Berkshire]:WP
Locality Name (eg, city) [Newbury]:KL
Organization Name (eg, company) [My Company Ltd]:Company
Organizational Unit Name (eg, section) []:IT
Common Name (eg, your name or your server’s hostname) []:localhost
Email Address []:ftpmaster@localhost

Run the following command below to change the permission of the /etc/vsftpd/vsftpd.pem file: -

chmod 600 /etc/vsftpd/vsftpd.pem

Add this to your /etc/vsftpd/vsftpd.conf file: -

ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=NO
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO
rsa_cert_file=/etc/vsftpd/vsftpd.pem

You need to restart vsftpd to take effect using the command below: -

service vsftpd restart

You may use FileZilla as the FTP client that supports TLS encryption connection. Be sure to select FTPES – FTP over explicit TLS/SSL under the Servertype in the FileZilla Site Manager.

If you found these helpful, please contribute to help:

Install a RPM
rpm -ivh package-name.rpm

Update a RPM
rpm -Uvh package-name.rpm

Remove a RPM
rpm -e package-name.rpm

List contents of installed RPM
rpm -qvl package-name

List contents of a RPM
rpm -qlp package-name

Print information about an installed RPM
rpm -qi package-name

Print information about a RPM
rpm -qpi package-name.rpm

List all installed RPM on your system
rpm -qa

Search for a installed RPM
rpm -qa | grep package-name

Print which package a file belongs to
rpm -qf /path/to/file

Extract files from a RPM into current directory
rpm2cpio package-name.rpm | cpio -idv

List out configuration file(s) for a RPM
rpm -qc package-name

List package dependencies
rpm -qpR package-name.rpm

Integrity check for a installed RPM
rpm -V package-name

Integrity check for a RPM
rpm -Vp package-name.rpm

Please post a comment if you would like to share your opinion on the above commands. Thank you.

wget -c http://sysoev.ru/nginx/nginx-0.7.63.tar.gz ; wget -c http://www.lighttpd.net/download/lighttpd-1.4.22.tar.gz

Next, we need to extract the Gzip files to /tmp/sources as below: -

mkdir /tmp/sources
tar xvfz nginx-0.7.63.tar.gz -C /tmp/sources
tar xvfz lighttpd-1.4.22.tar.gz -C /tmp/sources

Then, we need to start configuring and compiling nginx as below: -

cd /tmp/sources/nginx-0.7.63
./configure –-with-http_ssl_module -–with-md5=auto/lib/md5 -–with-sha1=auto/lib/sha1
make
make install

Ok, we need to start configuring and compiling lighttpd as below: -

cd /tmp/sources/lighttpd-1.4.22
./configure
make
cp src/spawn-fcgi /usr/local/bin

Next, we need to start the spawn-fcgi for spawning FastCGI processes as below: -

/usr/local/bin/spawn-fcgi -f /usr/bin/php-cgi -a 127.0.0.1 -p 9000 -P /var/run/fastcgi-php.pid

Then, you need to edit the nginx.conf which located in /usr/local/nginx/conf as below: -

location ~ \.php$ {
root html;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /usr/local/nginx/html$fastcgi_script_name;
include fastcgi_params;
}

Now, you can test nginx by starting it using the command as below: -

/usr/local/nginx/sbin/nginx

Simply navigate to your server’s IP address and you will see the nginx welcome message also create a simple php file in /usr/local/nginx/html to include phpinfo() for testing PHP functionality.

If you found these helpful, please contribute to help: