ソフト設定忘却録

squirrelmail-1.4.8-4.0.1.el4.centos4で件名が文字化け２

2007-11-28T23:31:00.000+09:00

「http://www.squirrelmail.jp/node.php?id=269」を参照

変更ファイル名
/usr/share/squirrelmail/functions/i18n.php

以下の部分を変更
----------------------------------------------------------------
332行目付近に追加

if ($squirrelmail_language == 'ja_JP') {
header ('Content-Type: text/html; charset=EUC-JP');
if (!function_exists('mb_internal_encoding')) {
echo _("You need to have PHP installed with the multibyte string function
enabled (using configure option --enable-mbstring).");
// Revert to English link has to be added.
// stop further execution in order not to get php errors on mb_internal_en
coding().
return;
}
if (function_exists('mb_language')) {
mb_language('Japanese');
}
mb_detect_order('ASCII,JIS,EUC-JP,UTF-8,SJIS');
mb_internal_encoding('EUC-JP');
mb_http_output('pass');
} elseif ($squirrelmail_language == 'en_US') {
header( 'Content-Type: text/html; charset=' . $default_charset );
} else {

----------------------------------------------------------------
483行目付近を変更

修正前
function japanese_charset_xtra() {
$ret = func_get_arg(1); /* default return value */
if (function_exists('mb_detect_encoding')) {
switch (func_get_arg(0)) { /* action */
case 'decode':
$detect_encoding = @mb_detect_encoding($ret);
if ($detect_encoding == 'JIS' ||
$detect_encoding == 'EUC-JP' ||
$detect_encoding == 'SJIS' ||
$detect_encoding == 'UTF-8') {

$ret = mb_convert_kana(mb_convert_encoding($ret, 'AUTO'), "KV");
}
break;
case 'encode':
$detect_encoding = @mb_detect_encoding($ret);
if ($detect_encoding == 'JIS' ||
$detect_encoding == 'EUC-JP' ||
$detect_encoding == 'SJIS' ||
$detect_encoding == 'UTF-8') {

$ret = mb_convert_encoding(mb_convert_kana($ret, "KV"), 'JIS', 'AUTO');
}
break;
case 'strimwidth':

修正後
function japanese_charset_xtra() {
$ret = func_get_arg(1); /* default return value */
if (function_exists('mb_detect_encoding')) {
switch (func_get_arg(0)) { /* action */
case 'decode':
$detect_encoding = @mb_detect_encoding($ret);
if ($detect_encoding == 'JIS' ||
$detect_encoding == 'EUC-JP' ||
$detect_encoding == 'SJIS' ||
$detect_encoding == 'UTF-8') {

$ret = mb_convert_kana(mb_convert_encoding($ret, 'ASCII,JIS,EUC-JP,UTF-8,SJIS'), "KV");
}
break;
case 'encode':
$detect_encoding = @mb_detect_encoding($ret);
if ($detect_encoding == 'JIS' ||
$detect_encoding == 'EUC-JP' ||
$detect_encoding == 'SJIS' ||
$detect_encoding == 'UTF-8') {

$ret = mb_convert_encoding(mb_convert_kana($ret, "KV"), 'JIS', 'ASCII,JIS,EUC-JP,UTF-8,SJIS');
}
break;
case 'strimwidth':

----------------------------------------------------------------
530行目付近を変更

修正前
case 'decodeheader':
$ret = str_replace("\t", "", $ret);
if (eregi('=\\?([^?]+)\\?(q|b)\\?([^?]+)\\?=', $ret))
$ret = @mb_decode_mimeheader($ret);
$ret = @mb_convert_encoding($ret, 'EUC-JP', 'AUTO');
break;
case 'downloadfilename':
$useragent = func_get_arg(2);
if (strstr($useragent, 'Windows') !== false ||
strstr($useragent, 'Mac_') !== false) {
$ret = mb_convert_encoding($ret, 'UTF-8', 'AUTO');
} else {
$ret = mb_convert_encoding($ret, 'EUC-JP', 'AUTO');
}
break;

修正後
case 'decodeheader':
$ret = str_replace("\t", "", $ret);
if (eregi('=\\?([^?]+)\\?(q|b)\\?([^?]+)\\?=', $ret))
$ret = @mb_decode_mimeheader($ret);
$ret = @mb_convert_encoding($ret, 'EUC-JP','ASCII,JIS,EUC-JP,UTF-8,SJIS');
break;
case 'downloadfilename':
$useragent = func_get_arg(2);
if (strstr($useragent, 'Windows') !== false ||
strstr($useragent, 'Mac_') !== false) {
$ret = mb_convert_encoding($ret, 'UTF-8', 'ASCII,JIS,EUC-JP,UTF-8,SJIS');
} else {
$ret = mb_convert_encoding($ret, 'EUC-JP', 'ASCII,JIS,EUC-JP,UTF-8,SJIS');
}
break;

CentOSでXEN仮想サーバの作成

2007-05-21T02:12:00.000+09:00

之だけで後はウイザード形式でインストール可能だ
# virt-install -n piglet -r 256 -f /xen/piglet -s 16 --nographics -l ftp:
//ftp.riken.go.jp/Linux/centos/5.0/os/i386

参考URL
http://shain.tomocreative.net/2007/04/xen_centos5virtinstall_1.html

VMWare 仮想マシンの時刻ずれ問題

2007-05-01T01:10:00.000+09:00

AMD x2、Pentium4環境で仮想端末のClockが異常に早くなる現象に遭遇
（CentOS4.4）

５秒ほど画面を眺めると１分２分と進んでいく
解決方法はカーネルのブートオプションを変更
「clock=pit nosmp noapic　nolapic」を追加する事で解決
　http://webos-goodies.jp/archives/50179807.html

default=0
timeout=5
splashimage=(hd0,0)/grub/splash.xpm.gz
hiddenmenu
title CentOS (2.6.9-42.0.8.EL)
root (hd0,0)
kernel /vmlinuz-2.6.9-42.0.8.EL ro root=LABEL=/ clock=pit nosmp noapic　nolapic rhgb quiet
initrd /initrd-2.6.9-42.0.8.EL.img

squirrelmail-1.4.8-2.el4.centos4でログインIDにデフォルトのドメイン名

2007-01-31T02:07:00.000+09:00

バーチャルドメインを運用すると、ユーザーアカウント名にドメイン名を付加する事が有ります。
しかし、大部分の人は固定のドメイン名が付加されている場合デフォルトのドメイン名が有ればユーザビリティが良く成ります。

以下の部分を変更


----------------------------------------------------------------
変更ファイル名：
/usr/share/squirrelmail/src/redirect.php

以下の行（208行目付近）を追加（太字部分）

if (!sqsession_is_registered('user_is_logged_in')) {
  do_hook ('login_before');

  $onetimepad = OneTimePadCreate(strlen($secretkey));
  $key = OneTimePadEncrypt($secretkey, $onetimepad);
  sqsession_register($onetimepad, 'onetimepad');

  /* remove redundant spaces */
  $login_username = trim($login_username);

   /* @が無い場合はデフォルトのドメイン名を追加 @example.com */
   $domainpos = strrpos($login_username,"@");
   if ($domainpos === false) {
       $login_username .= "@example.com";
   }

  /* Verify that username and password are correct. */
  if ($force_username_lowercase) {
      $login_username = strtolower($login_username);
  }

----------------------------------------------------------------

squirrelmail-1.4.8-2.el4.centos4で添付ファイル名が文字化け

2007-01-30T00:45:00.000+09:00

件名と同じ直し方で文字化けしなくなったので暫く使う
　→解決しなかった
　　結局、1.4.9aの日本語パッチを手動で当てた事で解決
　　http://www.yamaai-tech.com/~masato/Download/

以下の部分を変更


----------------------------------------------------------------
変更ファイル名：
/usr/share/squirrelmail/functions/i18n.php

以下の行（540行目）の内容を変更
変更前：
       case 'downloadfilename':
           $useragent = func_get_arg(2);
           if (strstr($useragent, 'Windows') !== false ||
               strstr($useragent, 'Mac_') !== false) {
               $ret = mb_convert_encoding($ret, 'SJIS', 'AUTO');
           } else {
               $ret = mb_convert_encoding($ret, 'EUC-JP', 'AUTO');
}
           break;

変更後：
       case 'downloadfilename':
           $useragent = func_get_arg(2);
           if (strstr($useragent, 'Windows') !== false ||
               strstr($useragent, 'Mac_') !== false) {
               $ret = mb_convert_encoding($ret, 'UTF-8', 'AUTO');
           } else {
               $ret = mb_convert_encoding($ret, 'EUC-JP', 'AUTO');
}
           break;
----------------------------------------------------------------

----------------------------------------------------------------
変更ファイル名：
/usr/share/squirrelmail/functions/mime.php

以下の行（2160行目）の内容を変更
変更前：
   if (preg_match('/compatible; MSIE ([0-9]+)/', $HTTP_USER_AGENT, $match) &&amp;
       ((int)$match[1]) >= 6 && strstr($HTTP_USER_AGENT, 'Opera') === false) {
       $isIE6plus = true;
   }

変更後：
   if (preg_match('/compatible; MSIE\s?([0-9]+)/', $HTTP_USER_AGENT, $match) &&amp;
       ((int)$match[1]) >= 6 && strstr($HTTP_USER_AGENT, 'Opera') === false) {
       $isIE6plus = true;
   }
----------------------------------------------------------------

squirrelmail-1.4.8-2.el4.centos4で件名が文字化け

2007-01-25T01:03:00.000+09:00


「http://www.squirrelmail.jp/node.php?id=290」より引用

以下の部分を変更
----------------------------------------------------------------
変更ファイル名：
/usr/share/squirrelmail/class/deliver/Deliver.class.php

563行目～569行目あたりのswitch構文の中に、
case 'Subject':
を追加
                    }
                }
                $hdr_s .= $sLine;
                break;
            case 'Subject':
            case 'To':
            case 'Cc':
            case 'Bcc':
            case 'From':
                $hdr_s .= $header[$i];
                break;
            default: $hdr_s .= $this->foldLine($header[$i], 78, str_pad('',4)); break;
            }

----------------------------------------------------------------

オンラインでLVMボリュームを拡張した

2007-01-24T23:58:00.000+09:00


[root@paradise ~]# df
Filesystem           1K-ブロック    使用   使用可 使用% マウント位置
/dev/hda5             13827976   2910672  10214864  23% /
/dev/hda1               101086     11504     84363  12% /boot
none                    199044         0    199044   0% /dev/shm
/dev/mapper/gp00-vol00
                      20642428     77944  19515908   1% /home
/dev/hda3               505636     11767    467764   3% /var/log
[root@paradise ~]# fdisk -l

Disk /dev/hda: 16.1 GB, 16106127360 bytes
255 heads, 63 sectors/track, 1958 cylinders
Units = シリンダ数 of 16065 * 512 = 8225280 bytes

デバイス Boot      Start         End      Blocks   Id  System
/dev/hda1   *           1          13      104391   83  Linux
/dev/hda2              14         144     1052257+  82  Linux スワップ
/dev/hda3             145         209      522112+  83  Linux
/dev/hda4             210        1958    14048842+   5  拡張領域
/dev/hda5             210        1958    14048811   83  Linux

Disk /dev/hdb: 32.2 GB, 32212254720 bytes
255 heads, 63 sectors/track, 3916 cylinders
Units = シリンダ数 of 16065 * 512 = 8225280 bytes

デバイス Boot      Start         End      Blocks   Id  System
/dev/hdb1   *           1        3916    31455238+  8e  Linux LVM

Disk /dev/hdd: 32.2 GB, 32212254720 bytes
15 heads, 63 sectors/track, 66576 cylinders
Units = シリンダ数 of 945 * 512 = 483840 bytes

デバイス Boot      Start         End      Blocks   Id  System
/dev/hdd1               1       66576    31457128+  8e  Linux LVM
[root@paradise ~]# /usr/sbin/vgextend gp00 /dev/hdd1
  Physical volume '/dev/hdd1' is already in volume group 'gp00'
  Unable to add physical volume '/dev/hdd1' to volume group 'gp00'.
[root@paradise ~]# lvextend -L+1024MB gp00/vol00
  Extending logical volume vol00 to 31.00 GB
  Logical volume vol00 successfully resized
[root@paradise ~]# lvextend -L+1024MB gp00/vol00
  Extending logical volume vol00 to 32.00 GB
  Logical volume vol00 successfully resized
[root@paradise ~]# lvextend -L+1024MB gp00/vol00
  Extending logical volume vol00 to 33.00 GB
  Logical volume vol00 successfully resized
[root@paradise ~]# lvextend -L+17GB gp00/vol00
  Extending logical volume vol00 to 50.00 GB
  Logical volume vol00 successfully resized
[root@paradise ~]# lvextend -L+5GB gp00/vol00
  Extending logical volume vol00 to 55.00 GB
  Logical volume vol00 successfully resized
[root@paradise ~]#
　　　　・
　　　　・
　　　　・
[root@paradise ~]#
[root@paradise ~]# ext2online /dev/mapper/gp00-vol00
ext2online v1.1.18 - 2001/03/18 for EXT2FS 0.5b
[root@paradise ~]# df
Filesystem           1K-ブロック    使用   使用可 使用% マウント位置
/dev/hda5             13827976   2910744  10214792  23% /
/dev/hda1               101086     11504     84363  12% /boot
none                    199044         0    199044   0% /dev/shm
/dev/mapper/gp00-vol00
                      56766780     86032  53797612   1% /home
/dev/hda3               505636     11907    467624   3% /var/log
[root@paradise ~]#

Fedora DS 起動スクリプト

2007-01-13T15:25:00.000+09:00

起動スクリプトをファイル名fdsとして、次の内容で作成しました。

#!/bin/sh
#
# fds Start/Stop Fedora Directory Server
#
# chkconfig: 345 20 20
# description: Fedora Directory Server
# processname: ns-slapd

# Source Directory name
if [ -f /etc/sysconfig/fds ]; then
. /etc/sysconfig/fds
else
echo $"Directory name is not defined in /etc/sysconfig/fds"
exit 1
fi

SLAPD_PATH=/opt/fedora-ds/

case "$1" in
start)
$SLAPD_PATH/slapd-$DIRECTORYNAME/start-slapd
$SLAPD_PATH/start-admin
;;
stop)
$SLAPD_PATH/stop-admin
$SLAPD_PATH/slapd-$DIRECTORYNAME/stop-slapd
;;
restart)
$SLAPD_PATH/restart-admin
$SLAPD_PATH/slapd-$DIRECTORYNAME/restart-slapd
;;
*)
echo $"Usage: $0 {start|stop|restart}"
exit 1
esac

exit $?

ディレクトリサービスの起動スクリプト start-slapdは、作成したディレクトリ名に依存するため、/etc/sysconfig/fdsで設定するようにしてあります。
/etc/sysconfig/fdsに

DIRECTORYNAME=servername

のようにディレクトリの識別子を指定してファイルを作成してください。

またfdsファイルを作成したら、次の手順で、システムに登録を行います。

# cp fds /etc/rc.d/init.d/fds
# chmod 755 /etc/rc.d/init.d/fds
# /sbin/chkconfig fds --add
# /sbin/chkconfig fds on

これで起動時にFDSのディレクトリサーバと管理サーバを自動起動、自動停止することが可能になります。

また、手動でFDSの起動、停止をしたいときは、それぞれ次々のコマンドで可能になります。

# /sbin/service fds start
# /sbin/service fds stop
# /sbin/service fds restart

注意: FC5ではLDAPを利用する設定にした場合、messagebusサービスより先に、FDSが起動していないと、システムが起動しなくなります。

GPartedでパーティションサイズ変更

2006-12-30T16:24:00.000+09:00

GPLのパーティション　リサイズツール

http://gparted.sourceforge.net/

ルータの syslog管理

2006-12-03T23:05:00.000+09:00

LOGを受取るサーバで、下記の設定を追加

ファイアフォールの設定

# vi /etc/sysconfig/iptables
# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 123 -j ACCEPT
#Syslogの受信許可
-A RH-Firewall-1-INPUT -m state --state NEW -m udp -p udp --dport 514 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
# service iptables restart

ログの保存先を設定

# vi /etc/syslog.conf

#下記の1行を追加
local6.*                                                /var/log/router.log

ログのローテート設定

# vi /etc/logrotate.d/syslog

#設定追加
・・・・/var/log/cron /var/log/router.log {

外部のSyslog受信許可

# vi /etc/sysconfig/syslog
SYSLOGD_OPTIONS="-r -m 0"
KLOGD_OPTIONS="-x"

ルータのsyslog出力先変更


> administrator
Password:
# syslog facility local6
#
# save
セーブ中... CONFIG0 終了
#

yumリポジトリ（centosplus）

2006-10-22T00:23:00.000+09:00

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus
#baseurl=http://mirror.centos.org/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled=0
gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4

#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever - Contrib
mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib
#baseurl=http://mirror.centos.org/centos/$releasever/contrib/$basearch/
gpgcheck=1
enabled=0
gpgkey=http://mirror.centos.org/centos/RPM-GPG-KEY-centos4

Fedora-DS のインストール

2006-09-09T22:53:00.000+09:00

# /opt/fedora-ds/setup/setup
INFO Begin Setup . . .

LICENSE AGREEMENT AND LIMITED PRODUCT WARRANTY
FEDORA(TM) DIRECTORY SERVER

This agreement governs the use of Fedora Directory Server,
Administration Server and Management Console (collectively, the
"SOFTWARE") and any updates to the Software, regardless of the
delivery mechanism.

1. FEDORA DIRECTORY SERVER

1.1 LICENSE GRANT. Fedora Directory Server ("FDS") is a modular
application consisting of hundreds of software components and is a
collective work under U.S. Copyright Law. Subject to the following
terms, Red Hat, Inc. ("RED HAT") grants to the user ("LICENSEE") a
license to this collective work pursuant to the GNU General Public
License. Please note that Administration Server and Management
Console, which are binary-only code used to configure and administer
FDS, are subject to the license terms in Section 2. The end user
license agreement for each component of FDS is located in the
component's source code. The license terms for the components
permit LICENSEE to copy, modify, and redistribute the component, in
both source code and binary code forms. This agreement does not limit
LICENSEE's rights under, or grant LICENSEE rights that supersede, the
license terms of any particular component.

1.2 LICENSE EXCEPTION. In addition, as a special exception, Red Hat
gives LICENSEE the additional right to link the code of FDS with code
not covered under the GNU General Public License ("NON-GPL CODE") and
to distribute linked combinations including the two, subject to the
limitations in this paragraph. Non-GPL Code permitted under this
exception must only link to the code of FDS through those well defined
interfaces identified in that file named EXCEPTION in the source code
files for FDS (the "APPROVED INTERFACES"). The files of Non-GPL Code
may instantiate templates or use macros or inline functions from the
Approved Interfaces without causing the resulting work to be covered
by the GNU General Public License. Only Red Hat may make changes or
additions to the list of Approved Interfaces. LICENSEE must comply
with the GNU General Public License in all respects for all of the FDS
code and other code used in conjunction with FDS except the Non-GPL
Code covered by this exception. If LICENSEE modifies FDS, LICENSEE may
extend this exception to its version of FDS, but LICENSEE is not
obligated to do so. If LICENSEE does not wish to provide this
exception without modification, LICENSEE must delete this exception
statement from LICENSEE's version of FDS and license FDS solely under
the GPL without exception.

1.3 INTELLECTUAL PROPERTY RIGHTS. FDS and each of its components,
including the source code, documentation, appearance, structure and
organization are owned by Red Hat and others and are protected under
copyright and other laws. Title to FDS and any component, or to any
copy, modification, or merged portion shall remain with the
aforementioned, subject to the applicable license.

2. ADMINISTRATION SERVER, AND MANAGEMENT CONSOLE

2.1 LICENSE GRANT. Subject to the provisions of this Section 2.1, Red
Hat hereby grants LICENSEE a non-exclusive, non-transferable,
worldwide, perpetual, fully paid right (without the right to
sublicense) to use, reproduce and distribute Administration Server
("ADMIN SERVER"), and Management Console ("CONSOLE") in executable,
machine-readable form. LICENSEE must reproduce all copyright and
other proprietary notices on such copies. LICENSEE may only reproduce
and distribute Admin Server or Console to another party if the other
party agrees in writing to be obligated by the terms and conditions of
this Section 2.1. Except as provided in this Section 2.1, LICENSEE
may not modify, copy, transfer or otherwise use Admin Server, or
Console, and all licenses granted in this Section 2 are automatically
terminated if LICENSEE does so.

2.2 CHANGE IN LICENSING. It is Red Hat's intent to change the terms
of the license granted in this Section 2 to that of an open source
license. If such change is generally announced to the public,
LICENSEE will have the option to elect to have Admin Server and
Console governed by the terms of such open source license. If
LICENSEE does not make such election, the terms of this Agreement will
continue to govern LICENSEE's use of Admin Server and Console.

3. LIMITED WARRANTY. Except as specifically stated in this Section 3
or a license for a particular component, TO THE MAXIMUM EXTENT
PERMITTED UNDER APPLICABLE LAW, THE SOFTWARE AND THE COMPONENTS ARE
PROVIDED AND LICENSED "AS IS" WITHOUT WARRANTY OF ANY KIND, EXPRESSED
OR IMPLIED, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY,
NON-INFRINGEMENT OR FITNESS FOR A PARTICULAR PURPOSE. Red Hat does
not warrant that the functions contained in the Software will meet
LICENSEE's requirements or that the operation of the Software will be
entirely error free or appear precisely as described in the
accompanying documentation.

4. LIMITATION OF REMEDIES AND LIABILITY. TO THE MAXIMUM EXTENT
PERMITTED BY APPLICABLE LAW, RED HAT WILL NOT BE LIABLE TO LICENSEE
FOR ANY INCIDENTAL OR CONSEQUENTIAL DAMAGES, INCLUDING LOST PROFITS OR
LOST SAVINGS ARISING OUT OF THE USE OR INABILITY TO USE THE SOFTWARE,
EVEN IF RED HAT HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

5. EXPORT CONTROL. As required by U.S. law, LICENSEE represents and
warrants that it: (a) understands that the Software is subject to
export controls under the U.S. Commerce Department's Export
Administration Regulations ("EAR"); (b) is not located in a prohibited
destination country under the EAR or U.S. sanctions regulations
(currently Cuba, Iran, Iraq, Libya, North Korea, Sudan and Syria); (c)
will not export, re-export, or transfer the Software to any prohibited
destination, entity, or individual without the necessary export
license(s) or authorizations(s) from the U.S. Government; (d) will
not use or transfer the Software for use in any sensitive nuclear,
chemical or biological weapons, or missile technology end-uses unless
authorized by the U.S. Government by regulation or specific license;
(e) understands and agrees that if it is in the United States and
exports or transfers the Software to eligible end users, it will, as
required by EAR Section 740.17(e), submit semi-annual reports to the
Commerce Department's Bureau of Industry & Security (BIS), which
include the name and address (including country) of each transferee;
and (f) understands that countries other than the United States may
restrict the import, use, or export of encryption products and that it
shall be solely responsible for compliance with any such import, use,
or export restrictions.

6. THIRD PARTY PROGRAMS. Red Hat may distribute third party software
programs with the Software that are not part of the Software. These
third party programs are subject to their own license terms. The
license terms either accompany the programs or can be viewed at
http://www.redhat.com/licenses/. If LICENSEE does not agree to abide
by the applicable license terms for such programs, then LICENSEE may
not install them. If LICENSEE wishes to install the programs on more
than one system or transfer the programs to another party, then
LICENSEE must contact the licensor of the programs.

7. GENERAL. If any provision of this agreement is held to be
unenforceable, that shall not affect the enforceability of the
remaining provisions. This agreement shall be governed by the laws of
the State of North Carolina and of the United States, without regard
to any conflict of laws provisions, except that the United Nations
Convention on the International Sale of Goods shall not apply.

Do you accept the license terms? (yes/no) yes
=======================================================================
Fedora Directory Server 1.0.2
=======================================================================

The Fedora Directory Server is subject to the terms detailed in the
license agreement file called LICENSE.txt.

Late-breaking news and information on the Fedora Directory Server is
available at the following location:

http://directory.fedora.redhat.com

Continue? (yes/no) yes
Fedora Directory Server system tuning analysis version 04-APRIL-2005.

NOTICE : System is i686-unknown-linux2.6.9-42.0.2.EL (1 processor).

WARNING: 293MB of physical memory is available on the system. 1024MB is recommended for best performance on large production system.

NOTICE : The net.ipv4.tcp_keepalive_time is set to 7200000 milliseconds
(120 minutes). This may cause temporary server congestion from lost
client connections.

WARNING: There are only 1024 file descriptors (hard limit) available, which
limit the number of simultaneous connections.

WARNING: There are only 1024 file descriptors (soft limit) available, which
limit the number of simultaneous connections.

Continue? (yes/no) yes

Please select the install mode:
1 - Express - minimal questions
2 - Typical - some customization (default)
3 - Custom - lots of customization

Please select 1, 2, or 3 (default: 2) 2

Hostname to use (default: localhost.localdomain) host.hoge.com

Server user ID to use (default: nobody)

Server group ID to use (default: nobody)

Fedora Project
Directory Installation/Uninstallation
-----------------------------------------------------------------------------------------

Fedora server information is stored in the Fedora configuration
directory server, which you may have already set up. If so, you
should configure this server to be managed by the configuration
server. To do so, the following information about the configuration
server is required: the fully qualified host name of the form
.(e.g. hostname.domain.com), the port number,
the suffix, and the DN and password of a user having permission to
write the configuration information, usually the Fedora
configuration directory administrator.

If you want to install this software as a standalone server, or if you
want this instance to serve as your Fedora configuration directory
server, press Enter.

Do you want to register this software with an existing
Fedora configuration directory server? [No]:no

Fedora Project
Directory Installation/Uninstallation
-----------------------------------------------------------------------------------------

If you already have a directory server you want to use to store your
data, such as user and group information, answer Yes to the following
question. You will be prompted for the host, port, suffix, and bind
DN to use for that directory server.

If you want this directory server to store your data, answer No.

Do you want to use another directory to store your data? [No]: no

Fedora Project
Directory Installation/Uninstallation
-----------------------------------------------------------------------------------------

The standard directory server network port number is 389. However, if
you are not logged as the superuser, or port 389 is in use, the
default value will be a random unused port number greater than 1024.
If you want to use port 389, make sure that you are logged in as the
superuser, that port 389 is not in use, and that you run the admin
server as the superuser.

Directory server network port [389]: 389

Fedora Project
Directory Installation/Uninstallation
-----------------------------------------------------------------------------------------

Each instance of a directory server requires a unique identifier.
Press Enter to accept the default, or type in another name and press
Enter.

Directory server identifier [host]: host

Fedora Project
Directory Installation/Uninstallation
-----------------------------------------------------------------------------------------

Please enter the administrator ID for the Fedora configuration
directory server. This is the ID typically used to log in to the
console. You will also be prompted for the password.

Fedora configuration directory server
administrator ID [admin]: admin
Password: xxxx
Password (again): xxxx

Fedora Project
Directory Installation/Uninstallation
-----------------------------------------------------------------------------------------

The suffix is the root of your directory tree. You may have more than
one suffix.

Suffix [dc=hoge, dc=com]:

Fedora Project
Directory Installation/Uninstallation
-----------------------------------------------------------------------------------------

Certain directory server operations require an administrative user.
This user is referred to as the Directory Manager and typically has a
bind Distinguished Name (DN) of cn=Directory Manager. Press Enter to
accept the default value, or enter another DN. In either case, you
will be prompted for the password for this user. The password must
be at least 8 characters long.

Directory Manager DN [cn=Directory Manager]:
Password: xxxxx
Password (again): xxxxx

Fedora Project
Directory Installation/Uninstallation
-----------------------------------------------------------------------------------------

The Administration Domain is a part of the configuration directory
server used to store information about Fedora software. If you are
managing multiple software releases at the same time, or managing
information about multiple domains, you may use the Administration
Domain to keep them separate.

If you are not using administrative domains, press Enter to select the
default. Otherwise, enter some descriptive, unique name for the
administration domain, such as the name of the organization responsible
for managing the domain.

Administration Domain [hoge.com]: hoge.com

Fedora Project
Administration Installation/Uninstallation
-----------------------------------------------------------------------------------------

The Administration Server is separate from any of your application
servers since it listens to a different port and access to it is
restricted.

Pick a port number between 1024 and 65535 to run your Administration
Server on. You should NOT use a port number which you plan to
run an application server on, rather, select a number which you
will remember and which will not be used for anything else.

The default in brackets was randomly selected from the available
ports on your system. To accept the default, press return.

Administration port [37594]: 37594

Fedora Project
Administration Installation/Uninstallation
-----------------------------------------------------------------------------------------

The Administration Server program runs as a certain user on your
system. This user should be different than the one which your
application servers run as. Only the user you select will be
able to write to your configuration files. If you run the
Administration Server as "root", you will be able to use the Server
Administration screen to start and stop your application servers.

Run Administration Server as [root]:

Fedora Project
Administration Installation/Uninstallation
-----------------------------------------------------------------------------------------

The Administration Server runs on the Apache web server. Please provide the
directory where the Apache binary (httpd or httpd.worker) may be found. The
Administration Server needs an Apache compiled with the worker model.

Apache Directory [/usr/sbin/]:

[slapd-host]: starting up server ...
[slapd-host]: Fedora-Directory/1.0.2 B2006.060.1928
[slapd-host]: host.hoge.com:389 (/opt/fedora-ds/slapd-host)
[slapd-host]:
[slapd-host]: [09/Sep/2006:23:30:36 +0900] - Fedora-Directory/1.0.2 B2006.060.1928 starting up
[slapd-host]: [09/Sep/2006:23:30:44 +0900] - slapd started. Listening on All Interfaces port 389 for LDAP requests
Your new directory server has been started.
Created new Directory Server
Start Slapd Starting Slapd server configuration.
Success Slapd Added Directory Server information to Configuration Server.
Configuring Administration Server...
Setting up Administration Server Instance...
Configuring Administration Tasks in Directory Server...
Configuring Global Parameters in Directory Server...

You can now use the console. Here is the command to use to start the console:
cd /opt/fedora-ds
./startconsole -u admin -a http://host.hoge.com:37594/

INFO Finished with setup, logfile is setup/setup.log
#

yumリポジトリ（Java関連パッケージ）

2006-09-01T03:09:00.000+09:00

# rpm --import http://www.jpackage.org/jpackage.asc
# cat /etc/yum.repos.d/jpackage.repo
[jpackage-generic]
name=JPackage (free), generic
mirrorlist=http://www.jpackage.org/jpackage_generic.txt
failovermethod=priority
gpgcheck=1
gpgkey=http://www.jpackage.org/jpackage.asc
enabled=1

[jpackage-generic-nonfree]
name=JPackage (non-free), generic
mirrorlist=http://www.jpackage.org/jpackage_generic_nonfree.txt
failovermethod=priority
gpgcheck=1
gpgkey=http://www.jpackage.org/jpackage.asc
enabled=0

[jpackage16-rhel40]
name=JPackage 1.6 for Red Hat Enterprise Linux 4
baseurl=http://mirrors.dotsrc.org/jpackage/1.6/redhat-el-4.0/free/
gpgcheck=1

[root@osakaweb ~]#

DAG：yum追加リポジトリ

2006-09-01T02:54:00.000+09:00

# rpm --import http://dag.wieers.com/packages/RPM-GPG-KEY.dag.txt
# cat /etc/yum.repos.d/CentOS-Base.repo
[dag]

name=Dag RPM Repository for Fedora Core
baseurl=http://ftp.riken.jp/Linux/dag/fedora/el$releasever/en/$basearch/dag

[dag]
name=Dag RPM Repository for Red Hat Enterprise Linux
baseurl=http://ftp.riken.jp/Linux/dag/redhat/el$releasever/en/$basearch/dag

[dag]
name=Dag RPM Repository for older Red Hat Linux
baseurl=http://ftp.riken.jp/Linux/dag/redhat/el$releasever/en/$basearch/dag

#

リバースプロキシpound

2006-08-27T03:07:00.000+09:00

# wget http://www.invoca.ch/pub/packages/pound/pound-2.1-1.src.rpm
# rpm -ivh pound-2.1-1.src.rpm
# vi pound.spec
%define version 2.1
%define rpmrelease 1
# betarelease is either 0 or something like b1
%define betarelease 0
# special features
%define enablemsdav 1 ←（0から1へ変更）

%define distname Pound
～～　以下省略　～～
# cd /usr/src/redhat/SPECS
# rpmbuild -ba pound.spec
# cd /usr/src/redhat/RPMS/i386/
# ls -la
合計 112
drwxr-xr-x 2 root root 4096 8月 20 23:22 .
drwxr-xr-x 8 root root 4096 8月 18 16:08 ..
-rw-r--r-- 1 root root 70192 8月 20 23:22 pound-2.1-1.i386.rpm
-rw-r--r-- 1 root root 11442 8月 20 23:22 pound-debuginfo-2.1-1.i386.rpm
# rpm -ivh pound-2.1-1.i386.rpm
# cd /etc/pound
# vi /etc/pound/pound.cfg
Group "nobody"
User "nobody"
RootJail "/usr/share/empty"

ListenHTTP

address 192.168.0.12
Port 80

Service
URL "/.*"
BackEnd
address 192.168.0.12
Port 8081
Priority 1
End
Session
Type BASIC
TTL 300
End
End
End

ListenHTTPS
address 192.168.0.12
Port 443
Cert "/etc/pound/cert.pem"
xHTTP 1
WebDAV 1

Service
URL "/WebDav.*"
BackEnd
address 192.168.0.11
Port 80
Priority 1
# WebDAV 1
End
Session
Type BASIC
TTL 300
End
End

Service
URL "/mokuhyo.*"
BackEnd
address 192.168.0.31
Port 80
Priority 1
End
Session
Type BASIC
TTL 300
End
End

Service
URL "/.*"
BackEnd
address 192.168.0.12
Port 8081
Priority 1
End
Session
Type BASIC
TTL 300
End
End

End

# openssl req -x509 -newkey rsa:1024 -keyout cert.pem -out cert.pem -days 3650 -nodes
Generating a 1024 bit RSA private key
....................................................................++++++
........++++++
writing new private key to 'cert.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [GB]:JP
State or Province Name (full name) [Berkshire]:Osaka
Locality Name (eg, city) [Newbury]:Osaka
Organization Name (eg, company) [My Company Ltd]:CompanyName
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server's hostname) []:homepage.demo
Email Address []:info@homepage.demo
#

MySQL4 ダンプしてデータ移行

2006-08-27T02:41:00.000+09:00

# mysqldump --quick db_name -u root -p |gzip > dumpdata.gz

（この例で作成されるファイルは圧縮されています。）データベースの内容が格納されたファイルを移動先のマシンに転送し、そのマシン上で以下のコマンドを実行します。

# mysqladmin create db_name
# gunzip < dumpdata.gz | mysql db_name

ディスク消去方法

2006-08-27T02:38:00.000+09:00

ハードディスクの先頭セクタ1024kbをゼロ書き込みする
MBR消去などが出来る

dd if=/dev/zero of=/dev/sda1 bs=1024k

ハードディスク消去

2006-08-27T02:35:00.000+09:00

２回ランダムに書き込みをする