CRIN Trac: Ticket Query

#2: Set up firewall and fail2ban to stop brute force ssh attacks

chris — Tue, 28 Apr 2015 13:26:20 GMT

The servers need only listen for HTTP, HTTPS and SSH traffic and brute force attacks on ssh accounts should be blocked using https://packages.debian.org/jessie/fail2ban

#8: Install phpMyAdmin on crin1 and enable encrypted connections from crin2

chris — Wed, 29 Apr 2015 11:34:03 GMT

The plan is to have Drupal on crin2 connecting to the MySQL server on crin1 using SSL/TLS and also have phpMyAdmin running on crin1 with HTTP Authentication.

See:

https://www.howtoforge.com/managing-multiple-mysql-servers-from-one-phpmyadmin-installation-using-ssl-encryption

#9: Monitor and adjust server settings after Crin1 and Crin2 server go live

chris — Thu, 07 May 2015 11:33:28 GMT

After the Crin1 and Crin2 server go live there will, no doubt, need to be some monitoring and adjustment of memory allocations, process numbers etc for MySQL, Memcache, Nginx and MySQL, this task will depend on having a Munin server and clients set up.

#10: Install Munin server and clients

chris — Thu, 07 May 2015 11:35:37 GMT

In order to monitor and adjust memory allocations, process numbers etc for MySQL, Memcache, Nginx and MySQL (see ticket:9) we will need a Munin server and clients set up so we have some data to use as a basis for making decisions.

#26: Create ssh and Trac account(s) for Code Positive

chris — Mon, 06 Jul 2015 15:52:34 GMT

Ticket to document the task and the time adding accounts ot the servers for Peter.

#28: Crin1 server email problem

chris — Tue, 14 Jul 2015 12:25:11 GMT

Web application on Crin1 are unable to send email, when they attempt to they log this error in the /var/log/exim4/paniclog:

2015-07-09 00:43:08 unable to set gid=115 or uid=0 (euid=0): forcing real = effective

Jenny / Gillian would you like me to fix this problem? It won't take long as the solution is here:

http://blog.gaiterjones.com/send-php-mail-ubuntu-upgrade/

#44: PHP temp session files need deleting

chris — Fri, 18 Sep 2015 09:15:52 GMT

On Crin1 php session files are written to these directories:

/var/www/piwik/tmp
/var/www/mediawiki/w/tmp
/var/www/mediawiki/tmp
/var/www/owncloud/tmp

Something like tmpreaper needs installing and configuring to delete old files.

On Crin2 and Crin4 /tmp is used and that could also do with old files being deleted.

I have CC'd Mori in case there are any issues I need to be aware of regarding Drupal / Solr and temp files.

#74: Visit to CRIN office

chris — Sun, 05 Jun 2016 19:04:12 GMT

This ticket is to record the time spent visting the CRIN office on Friday 3rd June 2016.

#78: HTTP_PROXY possible security risk

chris — Tue, 19 Jul 2016 10:21:46 GMT

See httpoxy.