Monday August 28, 2006 Pradhap 's UNIX Corner
Monday August 28, 2006
Solaris first boot essential configurations Everytime one installs Solaris from a DVD/CD user needs to do a lot of initial configurations. The following perl script takes care some of those.
This script is meant to be run on development box in secure environment.This script enables SSHD explicitly so if someone doesnt want to root access for SSHD please disable "PermitRootLogin No" in "/etc/ssh/sshd_config" and restart SSHD daemon by "svcadm restart ssh"
Script configures following stuffs.
* Creates /root directory for root user updates /etc/passwd with "/root" directory and sets "/usr/bin/bash" as default shell
* Moves "/.dot-config" files to new /root directory
* Enables "PermitRootLogin yes" for /etc/ssh/sshd_config to allow root access over sshd and restarts sshd
service
* Create /root/.bashrc and /root/.bash_profile
| >updates with PATH and TERM settings |
| >bash prompt settings |
| >title bar customizations |
| >screen customization for telnet |
* This script takes a backup of your current configuration files and puts into /backup_conf_date:time.tar so you can revert back to older configuration
* User can run this script multiple times each time script is executed, it will automatically create backup of older configuration and does the above configurations.
To run the script download the firstconf.pl to /tmp
test1~#cd /tmp
test1~#chmod +x ./firstconf.pl
test1~#./firstconf.pl
Logout and re-login immediately.
Posted by pradhap ( Aug 28 2006, 03:15:03 AM PDT ) Permalink Comments [11]
Post a Comment:
Comments are closed for this entry.
Posted by William Hathaway on August 28, 2006 at 04:43 AM PDT #
Posted by pradhap on August 28, 2006 at 06:55 AM PDT #
Posted by Phillip Wagstrom on August 28, 2006 at 08:02 AM PDT #
Posted by Andrew Pattison on August 28, 2006 at 12:10 PM PDT #
You just made it 10,000 times worse. You teach newbies the correct method the first time. So they don't have to relearn the right way later.
* Creates /root directory for root user updates /etc/passwd with “/root“ directory and sets “/usr/bin/bash“ as default shell
okay this is reasonable. * Moves “/.dot-config“ files to new /root directory
reasonable as well
* Comments “CONSOLE“ in /etc/default/login so that it allows root access through telnet
HELL NO!!!, its an extra level of security, making the user enter 2 passwords to gain root access. And root using telnet is just insane, passwords in plain text, be sure you give out your home and office and cell phones when the users box get hacked and he needs help at 2am to recover, you should be held responsible for such bad advice!
* Enables “PermitRootLogin yes” for /etc/ssh/sshd_config to allow root access over sshd and restarts sshd service
HELL NO!!! see above.
my freind who saw this post and recomend that I read it, thinks you should be fired for giving such piss poor advice.
James Dickens
uadmin.blogspot.com
Posted by James Dickens on August 28, 2006 at 12:44 PM PDT #
Posted by Dennis Clarke on August 28, 2006 at 12:49 PM PDT #
Posted by ux-admin on August 28, 2006 at 01:18 PM PDT #
* This script is for *newbie* and not meant to be run on production environment :)
* I agree bash has some buggy stuffs but still people prefer it over other shells. I d'nt want to start a shell war here again plzz... If you d'nt like it change it in script
* removed enabling telnet root access
*I have still maintained sshd root access. The reason is.. we can have two level security... user logs in and does a su- but when there is NIS or home directory issue its tough to login to a box.
* I have also mentioned steps to be followed if user wants to disable SSHD root access in blog.
Posted by Pradhap on August 29, 2006 at 12:21 AM PDT #
Posted by Philippe Plouffe on August 29, 2006 at 08:41 AM PDT #
Posted by Radcliffe on August 29, 2006 at 10:26 AM PDT #
"ux-admins" aren't actually UNIX administrators but senior system engineers who have been working on cutting edge tech, developing new stuff you've obviously never even seen or heard of, AND have had apprentices who have all been very successful in the real world so far.
The "stone age" advice you refer to has a lot to do with senseless flaming and nothing to do with the facts.
Fact is, by learning to use `tcsh` instead of `bash`, you will have had a chance to start off on a right foundation and learn to use UNIX in more efficient ways than you thought possible. It is extremely important that we teach the future generations -- the ones that will replace us -- to truly understand UNIX and not *think* they understand it - and then go off and build stuff like Linux.
So what had been written had been written for your own benefit, not mine -- I myself already know why one shouldn't use certain things - because I've already used them so I know what the gotchas are.
So rather than criticizing "fsckin ux-whatever", do yourself a favor, warm up the chair and read the man page on `tcsh`. At least you will have learned something that will come more than handy and useful down the road...
Posted by ux-admin on August 29, 2006 at 01:49 PM PDT #