The passwordless SSH worked well in my lab. Here is the how to:1) Let the user generate the key pair, then copy the .pub file to the modules/sys_key/files folder and name it after the user's name.2) Copy /etc/skel/.bashrc and .bash_profile to modules/sys_key/files folder.3) Create the the manifests files in module/sys_key/manifests. It can be download from … Continue reading Puppet push SSH key
Category: Linux
Puppet push LDAP authentiation
Continue with my previous post of How to set up LDAP authentication in CentOS, I have made the Puppet be able to push it in my lab. Here is how it looks:The manifest file and files can be downloaded from here.class sys_ldap {package { 'openldap': ensure => installed, }package { 'openldap-clients': ensure => installed, require … Continue reading Puppet push LDAP authentiation
Set up foreman and foreman-proxy in CentOS
In my lab, I use 32 bits CentOS 6.5. So I need to use foreman 1.1 which I guess is the last version that supports 32 bits.1) Check wether the EPEL repostitory has been added by running 'yum repolist'. If it has not been installed, it can be found at http://dl.fedoraproject.org/pub/epel/62) Install the foreman 1.1 … Continue reading Set up foreman and foreman-proxy in CentOS
Setup LDAP authentication in CentOS (openldap+sssd)
1) Install openldap server in CentOS 6.5 yum install -y openldap* 2) Copy the sample slapd.conf configuration cp /usr/share/openldap-servers/slapd.conf.obsolete /etc/openldap/slapd.conf 3) Generate encrypted password for later use slappasswd 4) Modify /etc/openldap/slapd.conf, use the encrypted password created in above step. #TLSCACertificatePath /etc/openldap/certs #TLSCertificateFile "\"OpenLDAP Server\"" #TLSCertificateKeyFile /etc/openldap/certs/password database monitor access to * by dn.exact="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" read by … Continue reading Setup LDAP authentication in CentOS (openldap+sssd)
Install SVN in CentOS
1) Install the SVN serveryum install -y subversion mod_dav_svnModify /etc/httpd/conf.d/subversion.confmkdir /etc/svn/htpasswd -cm /etc/svn/users jchenhtpasswd -m /etc/svn/users testmkdir /var/www/svncd /var/www/svnsvnadmin create mylabchown -R apache.apache mylabchcon -R -t httpd_sys_content_t mylabservice httpd restartchkconfig httpd on2) Intall the SVN clientyum install -y subversion