Hack The Sec-Leading Resource Of Linux Tutorial: Centos

How to Add Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04

<div dir="ltr" style="text-align: left;" trbidi="on">
Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04 
Puppet is an open-source configuration management tool. It runs on many Unix-like systems as well as on Microsoft Windows, and includes its own declarative language to describe system configuration. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfyaHydR2dsd1VxEV8holOMAFNMnvGjL0OPYRu4Efz8smXMdvWTT47kx5zHrkRK31WTfrDo31tMb9m9lXyI8M_YdP0XRDUzVJloYX5BMP4xGU5saG4qdA5LiIHAl5mUf7BtaCvBhE2yn5s/s1600/puppet-labs-hackthesec.co.in.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="315" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfyaHydR2dsd1VxEV8holOMAFNMnvGjL0OPYRu4Efz8smXMdvWTT47kx5zHrkRK31WTfrDo31tMb9m9lXyI8M_YdP0XRDUzVJloYX5BMP4xGU5saG4qdA5LiIHAl5mUf7BtaCvBhE2yn5s/s320/puppet-labs-hackthesec.co.in.png" width="320" /></a></div>
 
Puppet is produced by Puppet Labs, founded by Luke Kanies in 2005. It is written in Ruby and released as free software under the GNU General Public License (GPL) until version 2.7.0 and the Apache License 2.0 after that. 
 
Foreman (also known as The Foreman) is an open source complete life cycle systems management tool for provisioning, configuring and monitoring of physical and virtual servers. Foreman has deep integration to configuration management software, with Puppet, Chef, Salt and other solutions through plugins, which allows you to automate repetitive tasks, deploy applications and manage change to deployed servers. 
 
 
Foreman provides provisioning on bare-metal (through managed DHCP, DNS, TFTP, and PXE-based unattended installations), virtualization and cloud. Foreman provides comprehensive, auditable interaction facilities including a web frontend, a command line interface, and a robust REST API. 
 
 
<ul style="text-align: left;">
<li><a href="http://www.hackthesec.co.in/2016/06/how-to-install-foreman-on-centos-7-rhel.html" style="font-family: verdana, geneva, sans-serif; font-size: x-large; line-height: 26px;" target="_blank">How To Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04</a></li>
</ul>
 
 
INSTALLATION :- 
 
Make sure your system (both puppet server and client) is able to resolve the hostname each other, either use /etc/hosts file or DNS server. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/hosts</pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">192.168.2.10 server.hackthesec.local server # Foreman
192.168.2.20 centos.hackthesec.local centos # CentOS 7 Agent
192.168.2.30 ubuntu.hackthesec.local ubuntu # Ubuntu 14.04 Agent</pre>
 
Install Puppet Agent on CentOS 7: 
Puppetlabs repository in order to get a puppet agent packages from official source. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">rpm -ivh https://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm

yum -y install puppet
</pre>
Install Puppet Agent on Ubuntu 14.04: 
Puppet agent, we have to configure Puppetlabs repository on Ubuntu 14.04. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">wget https://apt.puppetlabs.com/puppetlabs-release-trusty.deb
sudo dpkg -i puppetlabs-release-trusty.deb

sudo apt-get update

sudo apt-get install puppet
</pre>
Configure puppet agent on CentOS 7 / Ubuntu 14.04: 
Once the installation is done, we will need to update the "/etc/puppet/puppet.conf" file. 
 
There are two section on the agent node's puppet config file, a [main] and [master] section. Add the following settings to your [main] settings. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/puppet/puppet.conf</pre>
Comment or Delete "templatedir=$confdir/templates" line and enter your details Foreman (Puppet Master) in "server = hostname" line 
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">[main]
logdir=/var/log/puppet
vardir=/var/lib/puppet
ssldir=/var/lib/puppet/ssl
rundir=/var/run/puppet
factpath=$vardir/lib/facter
#templatedir=$confdir/templates
### Add Below Lines ###
server = server.hackthesec.local
report = true
pluginsync = true</pre>
Edit /etc/default/puppet to enable puppet service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/default/puppet</pre>
Setting this to "yes" allows the puppet agent service to run. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">START=yes</pre>
To enable and run puppet agent service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">puppet resource service puppet ensure=running enable=true</pre>
Sign Puppet Agent certificate: 
Now, you will have to sign the certificates of puppet agents in order to work with Foreman, issue the following command to list down the unsigned certificates. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert list
"ubuntu.hackthesec.local" (SHA256) 35:D1:B5:67:52:1C:1C:BH:6H:DD:3C:2E:B0:28:D7:15:52:95:32:95:1F:37:29:2G:5F:D7:4C:F5:DB:94:A1:B2</pre>
In the above output, "ubuntu.hackthesec.local" is the puppet agent. To sign the certificate follow below command 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert sign ubuntu.hackthesec.local
Notice: Signed certificate request for ubuntu.hackthesec.local
Notice: Removing file Puppet::SSL::CertificateRequest ubuntu.hackthesec.local at '/var/lib/puppet/ssl/ca/requests/ubuntu.hackthesec.local.pem'</pre>
Console Mode: 
Open your Foreman web console, go to Infrastructure –> Smart proxies. Click Certificates button. 
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUGlMe2UjdXBn2DDmn2QcJbRjLwa8rQTCYQN4s6nXK5rQAzCeF3H_99APJ3smwjMYNTRuuG74KRirK3p63DATPuJ5lvaGGBPLEnmcMo1N2cbT01mZr1aaNoYwSM5Ex_P10qEGH5wsUGT45/s1600/Puppet-Nodes-to-Foreman-Smart-Proxies-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUGlMe2UjdXBn2DDmn2QcJbRjLwa8rQTCYQN4s6nXK5rQAzCeF3H_99APJ3smwjMYNTRuuG74KRirK3p63DATPuJ5lvaGGBPLEnmcMo1N2cbT01mZr1aaNoYwSM5Ex_P10qEGH5wsUGT45/s1600/Puppet-Nodes-to-Foreman-Smart-Proxies-hackthesec.co.in.png" /></a></div>
You see  agent certificate (ubuntu.hackthesec.local) is pending to be signed. To sign, click Sign button. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEZDMnqfHwnNiEwh7QQY2UQALS34bO8_M6Sr26SbZlfVTDXBlnaKLD5l1Dwofy8UlTUgArDwGH_J2VauYMgSdznCEDdpWV4HuYDlZJPcgaX0nNLa1GinDis5lXfRNE-cmvymUeTno1aBxB/s1600/Puppet-Nodes-to-Foreman-Agent-Certificates-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEZDMnqfHwnNiEwh7QQY2UQALS34bO8_M6Sr26SbZlfVTDXBlnaKLD5l1Dwofy8UlTUgArDwGH_J2VauYMgSdznCEDdpWV4HuYDlZJPcgaX0nNLa1GinDis5lXfRNE-cmvymUeTno1aBxB/s1600/Puppet-Nodes-to-Foreman-Agent-Certificates-hackthesec.co.in.png" /></a></div>
After that your agent (ubuntu.hackthesec.local) is signed successfully. 
To verify the node go to Hosts –> All Hosts. Verify that the new node (ubuntu.hackthesec.local) has been added to Foreman. 
Troubleshooting 
In case if you want to remove the puppet agent from the Puppet master, run. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert clean ubuntu.hackthesec.local
Notice: Revoked certificate with serial 3
Notice: Removing file Puppet::SSL::Certificate ubuntu.hackthesec.local at '/var/lib/puppet/ssl/ca/signed/ubuntu.hackthesec.local.pem'
Notice: Removing file Puppet::SSL::Certificate ubuntu.hackthesec.local at '/var/lib/puppet/ssl/certs/ubuntu.hackthesec.local.pem'</pre>
In case, if you want to re-register the puppet agent that you just deleted in previous step. Follow the below procedure. 
 
Stop the puppet service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">service puppet stop</pre>
Delete the puppet agent ssl directory. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">rm -rf /var/lib/puppet/ssl/certs</pre>
Start the puppet service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">service puppet start</pre>
Now, you can go and run the "puppet cert list" command on Foreman (puppet master) server to see the signing request, approve it incase you required. 
 
 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>

How to Add Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04

Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04 Puppet is an open-source configuration management tool. It runs on many Unix-like system...

How To Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04

<div dir="ltr" style="text-align: left;" trbidi="on">
Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04.3 
Foreman (also known as The Foreman) is an open source complete life cycle systems management tool for provisioning, configuring and monitoring of physical and virtual servers. Foreman has deep integration to configuration management software, with Puppet, Chef, Salt and other solutions through plugins, which allows you to automate repetitive tasks, deploy applications and manage change to deployed servers. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH5gPHAx4FvWVWVjVkk4GDrS79gjysPp8bLRM9XBCj3KNIwUNcK6BC9HvKyOzvFk5fUSp1-zmMuLd-vMcx7enFvFLevb4nhf1K9Qs7RKk5DbggOJ4ZiDQJCxoGCA_GCgcNENx3EJi30oRK/s1600/foreman_medium.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH5gPHAx4FvWVWVjVkk4GDrS79gjysPp8bLRM9XBCj3KNIwUNcK6BC9HvKyOzvFk5fUSp1-zmMuLd-vMcx7enFvFLevb4nhf1K9Qs7RKk5DbggOJ4ZiDQJCxoGCA_GCgcNENx3EJi30oRK/s1600/foreman_medium.png" /></a></div>
 
 
Foreman provides provisioning on bare-metal (through managed <a href="http://www.hackthesec.co.in/search/label/DHCP" target="_blank">DHCP</a>, DNS, TFTP, and PXE-based unattended installations), virtualization and cloud. Foreman provides comprehensive, auditable interaction facilities including a web frontend, a command line interface, and a robust REST API. 
 
<ul style="text-align: left;">
<li><a href="http://www.hackthesec.co.in/2016/06/how-to-add-puppet-nodes-to-foreman.html" style="font-family: verdana, geneva, sans-serif; line-height: 26px;" target="_blank">How to Add Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04</a></li>
</ul>
 
INSTALLATION:- 
Before installing Foreman, make sure you have setup a FQDN for your server. 
 
Note: You should do this on both <a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS </a>and <a href="http://www.hackthesec.co.in/search/label/Ubuntu" target="_blank">Ubuntu</a>. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/hosts</pre>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">192.168.2.10 server.hackthesec.local server</pre>
Also, do not forget to setup the valid hostname for the above host entry. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/hostname</pre>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">server.hackthesec.local</pre>
Install Foreman on CentOS 7 / RHEL 7: 
Configure EPEL, Puppet and Foreman repositories. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">### CentOS 7 / RHEL7 ###

rpm -ivh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

rpm -ivh http://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm

rpm -ivh http://yum.theforeman.org/releases/1.9/el7/x86_64/foreman-release.rpm

### Enable the RHEL Optional and RHSCL repos on RHEL 7 ###

yum-config-manager --enable rhel-7-server-optional-rpms rhel-server-rhscl-7-rpms</pre>
Run the following command to download Foreman installer. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">yum -y install foreman-installer</pre>
Now, run the Foreman installer to start installing Foreman. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">foreman-installer</pre>
The installation run is non-interactive, but the configuration can be customized by supplying any of the options listed in foreman-installer –help, or by running foreman-installer -i for interactive mode. 
 
 
Once the installation is completed, you will see an output like below where you would find the initial username and password to access the Foreman. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Success!
  * Foreman is running at https://server.hackthesec.local
      Initial credentials are admin / M8GEY5BH4cffgbuheu
  * Foreman Proxy is running at https://server.hackthesec.local:8443
  * Puppetmaster is running at port 8140
  The full log is at /var/log/foreman-installer/foreman-installer.log</pre>
Firewall Configuration: 
The following ports are used by the components of Foreman, needs to be allowed in IP tables (FirewallD) / Hardware Firewall. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">firewall-cmd --permanent --add-port=53/tcp
firewall-cmd --permanent --add-port=67-69/udp
firewall-cmd --permanent --add-port=80/tcp
firewall-cmd --permanent --add-port=443/tcp
firewall-cmd --permanent --add-port=3000/tcp
firewall-cmd --permanent --add-port=3306/tcp
firewall-cmd --permanent --add-port=5910-5930/tcp
firewall-cmd --permanent --add-port=5432/tcp
firewall-cmd --permanent --add-port=8140/tcp
firewall-cmd --permanent --add-port=8443/tcp
firewall-cmd --reload</pre>
Install Foreman on Ubuntu 14.04: 
Make sure you have setup a FQDN mentioned in prerequisites. Now, we will install Foreman on Ubuntu.Setup a puppet repository, 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">apt-get -y install ca-certificates
wget https://apt.puppetlabs.com/puppetlabs-release-trusty.deb
dpkg -i puppetlabs-release-trusty.deb</pre>
Enable the Foreman repo. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">echo "deb http://deb.theforeman.org/ trusty nightly" > /etc/apt/sources.list.d/foreman.list
echo "deb http://deb.theforeman.org/ trusty nightly" >> /etc/apt/sources.list.d/foreman.list
wget -q http://deb.theforeman.org/pubkey.gpg -O- | apt-key add -</pre>
Download the Foreman installer. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">apt-get update && apt-get -y install foreman-installer</pre>
Run the Foreman installer. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">foreman-installer</pre>
Once the installation is completed, you will see an output like below, 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Success!
  * Foreman is running at https://server.hackthesec.local
      Initial credentials are admin / M8GEY5BH4cffgbuheu
  * Foreman Proxy is running at https://server.hackthesec.local:8443
  * Puppetmaster is running at port 8140
  The full log is at /var/log/foreman-installer/foreman-installer.log</pre>
Note down intial username and password, you need this for accessing Foreman’s dashboard. 
Configure Foreman (Optional): 
If your Foreman host is not visible in Hosts –> All Hosts tab, you should run below command which will send the first Puppet report to Foreman, automatically creating the host in Foreman’s database. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">puppet agent --test

Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Caching catalog for server.hackthesec.local
Info: Applying configuration version '1445821177'
Notice: Finished catalog run in 0.56 seconds</pre>
Puppet 3+ will show a warning the first time that the node can’t be found, this can be ignored. 
Access Foreman Web Console: 
Open up your favourite web browser, navigate to https://your-ip-address or https://FQDN 
 
You should get login page, enter your Foreman credentials. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTNBeqSaVF8pXY-auqXz3UTtoBQmqU6Qgl079CbKgmpckIYjaCq_n18cw53r6dsMTWyh49_hpFjU0ZX9mRkalgHrXX0qLG3adNJ8yUMS7fxLhz7G7K1XLx9ID5xXDqwTEdLcXaQ9yZ4fnV/s1600/Install-Foreman-on-CentOS-7-Login-Page-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTNBeqSaVF8pXY-auqXz3UTtoBQmqU6Qgl079CbKgmpckIYjaCq_n18cw53r6dsMTWyh49_hpFjU0ZX9mRkalgHrXX0qLG3adNJ8yUMS7fxLhz7G7K1XLx9ID5xXDqwTEdLcXaQ9yZ4fnV/s1600/Install-Foreman-on-CentOS-7-Login-Page-hackthesec.co.in.png" /></a></div>
Once you logged in, you will get an overview page. Like below. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijGAzbPldMCSLEvSy0vNT4fGyzmSd1gv_U5mqBvK4KarLbmzF_qCFy19S3zJyJbAViW_06fvHp6vrzQEkuSyrrRIqXFu7-1eHcudNmHOzWIoQoYTCrOSG5HvtHU57ztrvb_oT0vDVGR586/s1600/Install-Foreman-on-CentOS-7-Overview-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijGAzbPldMCSLEvSy0vNT4fGyzmSd1gv_U5mqBvK4KarLbmzF_qCFy19S3zJyJbAViW_06fvHp6vrzQEkuSyrrRIqXFu7-1eHcudNmHOzWIoQoYTCrOSG5HvtHU57ztrvb_oT0vDVGR586/s1600/Install-Foreman-on-CentOS-7-Overview-hackthesec.co.in.png" /></a></div>
To list down the available hosts, goto Hosts –> All Hosts from Menu. Since we do not have any puppet clients, All Hosts tab would only list your Foreman host, with an "O"status. This indicates its status is OK, with no changes made on the last Puppet run. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1UjYqr-lzNWc6mPk5N7V_cN0s6TGcuH2QbWpVhLZDC7V_P2vGg4xGmuRgnVQPjqz-83ksVbVUahM_sKZSWnW9dg3Y72MbXcBr4gIeHnLsG7EkuB8BuLz-_zzvNTVGj8C9GtneK0agechc/s1600/Install-Foreman-on-CentOS-7-All-Hosts-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1UjYqr-lzNWc6mPk5N7V_cN0s6TGcuH2QbWpVhLZDC7V_P2vGg4xGmuRgnVQPjqz-83ksVbVUahM_sKZSWnW9dg3Y72MbXcBr4gIeHnLsG7EkuB8BuLz-_zzvNTVGj8C9GtneK0agechc/s1600/Install-Foreman-on-CentOS-7-All-Hosts-hackthesec.co.in.png" /></a></div>
 
It is recommended to change the password of Admin user for security reasons. To do that, click UserName (Top right)  –> My Account, you would end up with an option to change a password. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVI5R-3zPWOm6HLOzgQ9DmLIJjlnvN8C53I30hkFLBSa5SxBU1HXCfbMCb5XXnmuziK_9M-XQb-ZHyLQhcZyjcnnCZoSnhhmQZIfWeXbV1wlft-Hq0ZP7Az9b3CQSZWDDPBzjc_n7zkqKi/s1600/Install-Foreman-on-CentOS-7-Change-Password-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVI5R-3zPWOm6HLOzgQ9DmLIJjlnvN8C53I30hkFLBSa5SxBU1HXCfbMCb5XXnmuziK_9M-XQb-ZHyLQhcZyjcnnCZoSnhhmQZIfWeXbV1wlft-Hq0ZP7Az9b3CQSZWDDPBzjc_n7zkqKi/s1600/Install-Foreman-on-CentOS-7-Change-Password-hackthesec.co.in.png" /></a></div>
Download and Install NTP module: 
One of the more important requirement of puppet is to have an accurate time-keeping, to do this, we will install Puppet NTP module for managing the NTP service. 
 
If you have Puppet 2.7.14 or higher, install the module automatically from Puppet Forge to our “production” environment (the default). 
 
 
Use following command to install NTP module on Foreman (Puppet master) host. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet module install -i /etc/puppet/environments/production/modules saz/ntp

Notice: Preparing to install into /etc/puppet/environments/production/modules ...
Notice: Downloading from https://forgeapi.puppetlabs.com ...
Notice: Installing -- do not interrupt ...
/etc/puppet/environments/production/modules
└── saz-ntp (v2.3.2)</pre>
In Foreman's web console, go to Configure > Puppet Classes and click Import from hostname (server.hackthesec.local) to read the available Puppet classes from the puppet master and populate Foreman's database. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRUYBMiSX3kfvBQMVOCirOTOUn2Lxau_Rk3hRZ65AJSQj9YPUNMhRcK0rqF2CLadzfZF1uF_I_gqBXVekabW75aQ6Ne9olcGL5i7o1gIgXYNJP5dujHl7DYAFREH53IlKrA4GIkWMN0CMP/s1600/Install-Foreman-on-CentOS-7-Import-Classes-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRUYBMiSX3kfvBQMVOCirOTOUn2Lxau_Rk3hRZ65AJSQj9YPUNMhRcK0rqF2CLadzfZF1uF_I_gqBXVekabW75aQ6Ne9olcGL5i7o1gIgXYNJP5dujHl7DYAFREH53IlKrA4GIkWMN0CMP/s1600/Install-Foreman-on-CentOS-7-Import-Classes-hackthesec.co.in.png" /></a></div>
Select the NTP module and click the update button. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhq9bgoPfeu0tSLjkdMp1KQzQ3Q7JTTOUOPnJEgoVq7XWvjqP_sSv604X20Y8YJz_hnLYntP5rHQIrGIwAXNwHqG0gJr_rOTFs3n86FC1YAUdZnBTAoOZqzUlNXoslzrurLTkwqsjHGXMXO/s1600/Foreman-on-CentOS-7-Updating-Puppet-Modules_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhq9bgoPfeu0tSLjkdMp1KQzQ3Q7JTTOUOPnJEgoVq7XWvjqP_sSv604X20Y8YJz_hnLYntP5rHQIrGIwAXNwHqG0gJr_rOTFs3n86FC1YAUdZnBTAoOZqzUlNXoslzrurLTkwqsjHGXMXO/s1600/Foreman-on-CentOS-7-Updating-Puppet-Modules_hackthesec.co.in.png" /></a></div>
After clicking the update button, you will see something like below. The "ntp" class will appear in the Puppet class list if installed correctly. Click on NTP class on the left. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiclOxgtwuXS9NmkFWsv3AK1QZwHUoAiUtGDNzoAlwKZSZ24Ma-a8kWk01R_z6Iniwn9xmlb_crrgcH2qeHdsWQxOR67d0omt3Fh16HW0cy9y981YA5qXMFEdLfXaxpDnEwGOGfWkVCYax8/s1600/Foreman-on-CentOS-7-Puppet-Classes_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiclOxgtwuXS9NmkFWsv3AK1QZwHUoAiUtGDNzoAlwKZSZ24Ma-a8kWk01R_z6Iniwn9xmlb_crrgcH2qeHdsWQxOR67d0omt3Fh16HW0cy9y981YA5qXMFEdLfXaxpDnEwGOGfWkVCYax8/s1600/Foreman-on-CentOS-7-Puppet-Classes_hackthesec.co.in.png" /></a></div>
Now, Click the Smart Class Parameter and then select server list on the left side. Tick the Override checkbox so Foreman manages the "server list" parameter of the class, then click Submit. 
 
Note: Change the default value if you want to use your own NTP servers. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXZoXA_9MEzpu4UOHKhsu9UBV6l0CUq-spQuzL6DY-ZkMjnqOmVtc3xcg28Vk5BD8VfJryTXGOsHnAsCKGo1u0yVKtiJhVf5ro39ykHGkZiXiQyxpjn_FgyuhKykHFhBdWFvuawGcUwjV7/s1600/Install-Foreman-on-CentOS-7-NTP-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXZoXA_9MEzpu4UOHKhsu9UBV6l0CUq-spQuzL6DY-ZkMjnqOmVtc3xcg28Vk5BD8VfJryTXGOsHnAsCKGo1u0yVKtiJhVf5ro39ykHGkZiXiQyxpjn_FgyuhKykHFhBdWFvuawGcUwjV7/s1600/Install-Foreman-on-CentOS-7-NTP-hackthesec.co.in.png" /></a></div>
Go to Hosts –> All Hosts, edit the Foreman host. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglwOe-_D-jNLqsVruubBzgq-9X-O2eAVPP-gMSE-CGnRsv1UWKTRz4k0IxGerzSN3t18_pJVXjBNzkLZYEo7D6lBAiosHtqxEA2yFIhd_vKP6F33Q3EYKBX-S5wYCocSGkhg9wIHUrozfe/s1600/Foreman-on-CentOS-7-Hosts-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglwOe-_D-jNLqsVruubBzgq-9X-O2eAVPP-gMSE-CGnRsv1UWKTRz4k0IxGerzSN3t18_pJVXjBNzkLZYEo7D6lBAiosHtqxEA2yFIhd_vKP6F33Q3EYKBX-S5wYCocSGkhg9wIHUrozfe/s1600/Foreman-on-CentOS-7-Hosts-hackthesec.co.in.png" /></a></div>
Go to Puppet Classes tab and expand the ntp module and click the + icon to add the ntp class to the host, then click submit. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-k4AmpLKh8hyMxTh3mlsW2mO80cIuJKGSib9p5LcIkOpi2PyRHCXogSuM1QCP2URV0Cr06iC1eSW-Rer3Sds8ZLO-ssJqZn0YxrMqW-_sKHrym8d91kjsHTQx7CBpHJd2oqWIhGdxJxGf/s1600/Foreman-NTP-Class-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-k4AmpLKh8hyMxTh3mlsW2mO80cIuJKGSib9p5LcIkOpi2PyRHCXogSuM1QCP2URV0Cr06iC1eSW-Rer3Sds8ZLO-ssJqZn0YxrMqW-_sKHrym8d91kjsHTQx7CBpHJd2oqWIhGdxJxGf/s1600/Foreman-NTP-Class-hackthesec.co.in.png" /></a></div>
This time, it will take you automatically to the host details page. Click on YAML, it will show the ntp class and the server list parameter, as passed to Puppet via the ENC (external node classifier) interface. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKw4ylmsjxEIspKuFzSyuu_EA3HsjvhUMkZCAwZmMkX6PjfBCCCU18fSpjUOIuoXZFKI1Mcy1-_UOmbpbrwCxkHf9l45bqH-ERJ_XPXHI_2OTjubMfWBa_6t1vwmq9oDBCpmVvRL8xoldO/s1600/Foreman--Host-Details-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKw4ylmsjxEIspKuFzSyuu_EA3HsjvhUMkZCAwZmMkX6PjfBCCCU18fSpjUOIuoXZFKI1Mcy1-_UOmbpbrwCxkHf9l45bqH-ERJ_XPXHI_2OTjubMfWBa_6t1vwmq9oDBCpmVvRL8xoldO/s1600/Foreman--Host-Details-hackthesec.co.in.png" /></a></div>
At last, run the following command on the Foreman host to see the NTP service automatically reconfigured by Puppet and the NTP module. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">puppet agent --test</pre>
Verify the installation of NTP module by going to Hosts –> All Hosts –> Select Foreman Host –> Reports –> Select latest report. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbcpIIQdXThaBW-YSklPnfYasHXcupHWJ4__GkBih0vECACehwNht6dr3NofO1HErq-xaoevqFAYF3vEq1nrSbbT36q3jQhUUquKFVjgUy6DfXi4oOlD6ufRd-9UfKlxx-CBZHnFQ3pVGu/s1600/Install-Foreman-on-CentOS-7-Report-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbcpIIQdXThaBW-YSklPnfYasHXcupHWJ4__GkBih0vECACehwNht6dr3NofO1HErq-xaoevqFAYF3vEq1nrSbbT36q3jQhUUquKFVjgUy6DfXi4oOlD6ufRd-9UfKlxx-CBZHnFQ3pVGu/s1600/Install-Foreman-on-CentOS-7-Report-hackthesec.co.in.png" /></a></div>
 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
 </div>

How To Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04

Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04.3 Foreman (also known as The Foreman) is an open source complete life cycle systems ...

How to install dotProject on CentOS 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 style="box-sizing: border-box; font-family: Raleway, Helvetica, Arial, sans-serif; font-size: 33px; font-weight: 500; line-height: 46px; margin: 0px 0px 8px;">
Install dotProject on CentOS</h1>
<div>
dotProject is a web-based, multi-user, multi-language project management application. It is free and open source software, and is maintained by an open community of volunteer programmers.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqm1AUy0QwKk_rkaVJPqy-Ox8KlGWn6m5GVfUTMSaANUgGkb45_Ve8RWjjbPWGOSfwKh-UPwN5-vAQwbyfiKZuBNI-D7pLAnHyiEmZPIMOa6gqKKWr2k5Xsu1kVbwGy3OsYmCpuYn-YyN1/s1600/dotproject_hackthesec.co.in.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqm1AUy0QwKk_rkaVJPqy-Ox8KlGWn6m5GVfUTMSaANUgGkb45_Ve8RWjjbPWGOSfwKh-UPwN5-vAQwbyfiKZuBNI-D7pLAnHyiEmZPIMOa6gqKKWr2k5Xsu1kVbwGy3OsYmCpuYn-YyN1/s1600/dotproject_hackthesec.co.in.gif" /></a></div>
<div>
 </div>
<div>
INSTALLATION:-</div>
<div>
As a system administrator will always update the system to the latest stable status:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">sudo yum update -y
sudo reboot</pre>
</div>
<div>
In order to serve dotProject, you need to deploy the <a href="http://www.hackthesec.co.in/search/label/LAMP" target="_blank">LAMP stack</a> on your machine. </div>
<div>
You need to install Apache, the only officially supported web server program, on your system:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">sudo yum install httpd
sudo systemctl start httpd.service
sudo systemctl enable httpd.service</pre>
</div>
<div>
Remove Apache's default welcome page by commenting out the content of the file welcome.conf:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">sudo vi /etc/httpd/conf.d/welcome.conf</pre>
</div>
<div>
Use # to comment out every line.</div>
<div>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">#
# This configuration file enables the default "Welcome" page if there
# is no default index page present for the root URL. To disable the
# Welcome page, comment out all the lines below.
#
# NOTE: if this file is removed, it will be restored on upgrades.
#
#<LocationMatch "^/+$">
# Options -Indexes
# ErrorDocument 403 /.noindex.html
#</LocationMatch>
# 
#<Directory /usr/share/httpd/noindex>
# AllowOverride None
# Require all granted
#</Directory>
# 
#Alias /.noindex.html /usr/share/httpd/noindex/index.html
#Alias /noindex/css/bootstrap.min.css /usr/share/httpd/noindex/css/bootstrap.min.css
#Alias /noindex/css/open-sans.css /usr/share/httpd/noindex/css/open-sans.css
#Alias /images/apache_pb.gif /usr/share/httpd/noindex/images/apache_pb.gif
#Alias /images/poweredby.png /usr/share/httpd/noindex/images/poweredby.png</pre>
</div>
<div>
Save and quit with :wq!</div>
<div>
 </div>
<div>
Prevent Apache from displaying files in directories:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">sudo vi /etc/httpd/conf/httpd.conf</pre>
</div>
<div>
Replace:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">Options Indexes FollowSymLinks</pre>
</div>
<div>
With:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">Options FollowSymLinks</pre>
</div>
<div>
Save and quit with :wq!</div>
<div>
 </div>
<div>
Before you can visit your web site from the browser, you need to modify the firewall configuration:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">sudo firewall-cmd --zone=public --permanent --add-service=http
sudo firewall-cmd --reload</pre>
</div>
<div>
Install and setup MySQL</div>
<div>
You can install MariaDB, a popular branch of MySQL, on your server instance:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">sudo yum install mariadb mariadb-server
sudo systemctl start mariadb.service
sudo systemctl enable mariadb.service
sudo /usr/bin/mysql_secure_installation</pre>
</div>
<div>
Finish the secure MySQL installation according to the instructions below:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">Enter current password for root (enter for none): press the Enter key
Set root password? [Y/n]: Input Y, then press the Enter key
Set root password? [Y/n]: Input Y, then press the Enter key
Remove anonymous users? [Y/n]: Input Y, then press the Enter key
Disallow root login remotely? [Y/n]: Input Y, then press the Enter key
Remove test database and access to it? [Y/n]: Input Y, then press the Enter key
Reload privilege tables now? [Y/n]: Input Y, then press the Enter key</pre>
</div>
<div>
Log into the MySQL shell to setup a database for dotProject:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">mysql -u root -p</pre>
</div>
<div>
Input the root password you had setup earlier to log in, then execute the following commands one by one. Remember to replace the database name dotproject, the database username dotprojectuser, and the database user password yourpassword with your own ones.</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">CREATE DATABASE dotproject;
CREATE USER 'dotprojectuser'@'localhost' IDENTIFIED BY 'yourpassword';
GRANT ALL PRIVILEGES ON dotproject.* TO 'dotprojectuser'@'localhost';
GRANT ALL PRIVILEGES ON dotproject.* TO 'dotprojectuser'@'localhost' IDENTIFIED BY 'yourpassword' WITH GRANT OPTION;
FLUSH PRIVILEGES;
EXIT;</pre>
</div>
<div>
Install and configure PHP</div>
<div>
Install necessary PHP components using YUM:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">sudo yum install php php-gd php-mbstring php-mysqli php-curl php-ldap php-xsl php-xml php-cli php-pear</pre>
</div>
<div>
Modify PHP settings in the php.ini file:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">sudo vi /etc/php.ini</pre>
</div>
<div>
Replace the line:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">;date.timezone =</pre>
</div>
<div>
with:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">date.timezone = Asia/Kolkata</pre>
</div>
<div>
Asia/Kolkata is the timezone value of my server, you can find a suitable timezone value from <a href="https://secure.php.net/manual/en/timezones.php" target="_blank">here</a>.</div>
<div>
 </div>
<div>
Replace the line:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">session.auto_start = 0</pre>
</div>
<div>
With:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">session.auto_start = 1</pre>
</div>
<div>
Other settings in the file php.ini are already qualified, you can use the default values:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">session.use_trans_sid = 0
memory_limit = 128M</pre>
</div>
<div>
Then Restart the httpd and mariadb server.</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">sudo systemctl restart httpd mariadb</pre>
</div>
<div>
Download the dotProject installation package</div>
<div>
Download dotProject Latest version for there official website.</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">wget http://downloads.sourceforge.net/project/dotproject/dotproject/dotProject Version 2.1.8/dotproject-2.1.8.tar.gz

tar -zxvf dotproject-2.1.8.tar.gz</pre>
</div>
<div>
In order to prevent permission issues, you need to change the owner and permissions for each involved file.</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">sudo chown -R apache: dotproject/
sudo mv dotproject/* /var/www/html/</pre>
</div>
<div>
Install dotProject from the browser</div>
<div>
Now, visit your server from a web browser to finish the installation:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">http://[your-server-IP]</pre>
</div>
<div>
Review the check results, then click the button "Start Installation" on the top.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdbSawcQnQvubBTTDG6r9AJ45ZVz4iks5SqrQXhS3eR2SCyoshxb9eyswsf-ns4G3pp8bqiVS0TzJTJHJGOjKqoPi1Yiy6KrdbaCv3fAbgPpzuX2FwdLPcK55Y4TLTSWgiVJSVTljzEIMs/s1600/dotproject_installation_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdbSawcQnQvubBTTDG6r9AJ45ZVz4iks5SqrQXhS3eR2SCyoshxb9eyswsf-ns4G3pp8bqiVS0TzJTJHJGOjKqoPi1Yiy6KrdbaCv3fAbgPpzuX2FwdLPcK55Y4TLTSWgiVJSVTljzEIMs/s1600/dotproject_installation_hackthesec.co.in.png" /></a></div>
<div>
 </div>
<div>
On the "Database Settings" screen, replace the default "Database User Name" and "Database User Password" with your own ones, then click the button "install db & write cfg" on the right-hand side..Example Bellow</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWrqKzLrDqfQT2S1OFmlpAR7kDsCNU8v1H83ZrIgGH4fQruUXMKaf3bItmwXkQpaFU4AnBa_aGYmwTeK5f-HveA_pSshBrqg8gqiQtnLxSElT-PHBUycTV8z_t6L-6ZWab1xaj_OldohSH/s1600/dotproject_db_installation_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWrqKzLrDqfQT2S1OFmlpAR7kDsCNU8v1H83ZrIgGH4fQruUXMKaf3bItmwXkQpaFU4AnBa_aGYmwTeK5f-HveA_pSshBrqg8gqiQtnLxSElT-PHBUycTV8z_t6L-6ZWab1xaj_OldohSH/s1600/dotproject_db_installation_hackthesec.co.in.png" /></a></div>
<div>
On the next screen, click "Login and Configure the dotProject System Environment", then use the default credentials to log in:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">Username: admin
Password: passwd</pre>
</div>
<div>
Security cleanup</div>
<div>
For security purposes, you should change the password immediately as instructed below:</div>
<div>
<div>
<ul style="font-size: 15px; line-height: 26px; text-align: left;">
<li>Find the menu on the web interface.</li>
<li>Click the menu item "User Admin => Login Name".</li>
<li>Under "admin", Click the link on the right hand side.</li>
<li>Under "change password", input a new password twice in the pop-up window.</li>
<li>Click the button "submit", then close the pop-up window.</li>
</ul>
<div>
Next, remove the install directory within the dotProject environment</div>
</div>
</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">sudo rm -rf /var/www/html/install/</pre>
</div>
<div>
That's all.</div>
<div>
 </div>
<div>
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
<div>
 </div>
</div>

How to install dotProject on CentOS 7

Install dotProject on CentOS dotProject is a web-based, multi-user, multi-language project management application. It is free and open s...

How to Install mlocate (locate and updatedb Commands) on CentOS 7

<div dir="ltr" style="text-align: left;" trbidi="on">
Install mlocate (locate and updatedb Commands) 
mlocate is a merging locate and database package. "Merging" means updatedb reuses the existing database to avoid re-reading most of the file system. This makes the database update faster and does not tax the system caches.  
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOdAujBZtED3tf86nxI9jOXfF-AMydvhNsLdHrgrvBCBxBY9mB7k2dTHoVz_SXVnzS1Z8Q1JG6zQJHLJ4VMOCsOVbpHZcTeo_GPdWeDzBxDEHZGJK81wfhMYk1_FWwQKVQ3lSVQs6ddMxT/s1600/hackthesec.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOdAujBZtED3tf86nxI9jOXfF-AMydvhNsLdHrgrvBCBxBY9mB7k2dTHoVz_SXVnzS1Z8Q1JG6zQJHLJ4VMOCsOVbpHZcTeo_GPdWeDzBxDEHZGJK81wfhMYk1_FWwQKVQ3lSVQs6ddMxT/s1600/hackthesec.jpg" /></a></div>
 
mlocate can index several file systems including network file systems for network shares. This package is essential when attempting to quickly find documents in a terminal. 
Install mlocate 
 
As a matter of best practice we'll update our packages: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">yum -y update</pre>
Then let's install mlocate and any required packages: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">yum -y install mlocate</pre>
Updating mlocate 
The following command will update the search databases: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; outline: 0px; overflow: auto; padding: 10px !important; vertical-align: baseline; width: auto !important; word-break: break-all;">updatedb</pre>
mlocate installs a cron job that will run daily to update search databases at: 
 
 
/etc/cron.daily/mlocate.cron 
 
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a> 
 </div>

How to Install mlocate (locate and updatedb Commands) on CentOS 7

Install mlocate (locate and updatedb Commands) mlocate is a merging locate and database package. "Merging" means updatedb reuse...

How to install and setup Icinga Monitoring Tool on CentOS 7 / RHEL 7

<div dir="ltr" style="text-align: left;" trbidi="on">
Setup Icinga Monitoring Tool on CentOS 7 / RHEL 7 
Icinga is an open source computer system and network monitoring application. It was originally created as a fork of the Nagios system monitoring application in 2009. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtbWp0y0o_B3MQiZ4bjwJQ4f43t1N5Cu4j8oHUv4wcD_bkuIBuA-wAMchSWbUMTNe1SgmJUhspgJq0dsb2kp8QLI4CnMkGSp9dFA6V4R4yYEg7gWQd3NeqgPOiQ_25aaQsXopeXhALg_wf/s1600/icinga_logo.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtbWp0y0o_B3MQiZ4bjwJQ4f43t1N5Cu4j8oHUv4wcD_bkuIBuA-wAMchSWbUMTNe1SgmJUhspgJq0dsb2kp8QLI4CnMkGSp9dFA6V4R4yYEg7gWQd3NeqgPOiQ_25aaQsXopeXhALg_wf/s1600/icinga_logo.png" /></a></div>
 
Icinga is attempting to get past perceived short-comings in Nagios' development process, as well as adding new features such as a modern Web 2.0 style user interface, additional database connectors (for MySQL, Oracle, and PostgreSQL), and a REST API that lets administrators integrate numerous extensions without complicated modification of the Icinga core. 
Before we go ahead, lets install the required packages for Icinga. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># yum -y install wget httpd mod_ssl gd gd-devel mariadb-server php-mysql php-xmlrpc gcc mariadb libdbi libdbi-devel libdbi-drivers libdbi-dbd-mysql</pre>
Disable SELinux. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;">sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config</pre>
Reboot once done. 
 
Create icinga user and icinga-cmd group (allowing the external commands to be executed through the web interface) , add  icinga and apache user to the part of icinga-cmd group. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># useradd icinga
# groupadd icinga-cmd
# usermod -a -G icinga-cmd icinga
# usermod -a -G icinga-cmd apache</pre>
Download latest Icinga source tarball. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># cd /tmp/
# wget http://downloads.sourceforge.net/project/icinga/icinga/1.10.1/icinga-1.10.1.tar.gz
# tar -zxvf /tmp/icinga-1.10.1.tar.gz
# cd /tmp/icinga-1.10.1</pre>
Compile and Install Icinga: 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># ./configure --with-command-group=icinga-cmd --enable-idoutils
# make all
# make install
# make install-init
# make install-config
# make install-commandmode
# make install-webconf
# make install-idoutils</pre>
Configure Icinga: 
 
Sample configuration files have now been installed in the /usr/local/icinga/etc/ directory. These sample files should work fine for getting started with Icinga. You’ll need to make just one change before you proceed. Edit the /usr/local/icinga/etc/objects/contacts.cfg config file with your favorite editor and change the email address associated with the nagiosadmin contact definition to the address you’d like to use for receiving alerts. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># vi /usr/local/icinga/etc/objects/contacts.cfg</pre>
Change the Email address field to receive the notification. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;">email icinga@localhost</pre>
to 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;">email icinga@hackthesec.co.in</pre>
Move sample idoutils configuration files to Icinga base directory. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># cd /usr/local/icinga/etc/
# mv idomod.cfg-sample idomod.cfg
# mv ido2db.cfg-sample ido2db.cfg
# cd modules/
# mv idoutils.cfg-sample idoutils.cfg</pre>
Create database for idoutils: 
 
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># systemctl start mariadb.service
# mysql -u root -p
MariaDB [(none)]> CREATE DATABASE icinga;
MariaDB [(none)]> GRANT USAGE ON icinga.* TO 'icinga'@'localhost' IDENTIFIED BY 'icinga' WITH MAX_QUERIES_PER_HOUR 0 MAX_CONNECTIONS_PER_HOUR 0 MAX_UPDATES_PER_HOUR 0;
MariaDB [(none)]> FLUSH PRIVILEGES;
MariaDB [(none)]> quit</pre>
Import Database. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># mysql -u root -p icinga < /tmp/icinga 1.10.1/module/idoutils/db/mysql/mysql.sql</pre>
Configure Web Interface: 
 
Create a icingaadmin account for logging into the Icinga web interface. Remember the password that you assign to this user – you’ll need it later. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># htpasswd -c /usr/local/icinga/etc/htpasswd.users icingaadmin</pre>
Restart Apache to make the new settings take effect. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;">systemctl restart httpd.service</pre>
Download and Install Nagios Plugins: 
 
Download Nagios Plugins to /tmp directory. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># cd /tmp
# wget http://nagios-plugins.org/download/nagios-plugins-2.0.3.tar.gz
# tar -zxvf /tmp/nagios-plugins-2.0.3.tar.gz
# cd /tmp/nagios-plugins-2.0.3/</pre>
Compile and install the plugins. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># ./configure --prefix=/usr/local/icinga --with-cgiurl=/icinga/cgi-bin --with-nagios-user=icinga --with-nagios-group=icinga
# make
# make install</pre>
Starting Icinga: 
 
Verify the sample Icinga configuration files. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># /usr/local/icinga/bin/icinga -v /usr/local/icinga/etc/icinga.cfg</pre>
If there are no errors, start Nagios and Idoutils. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># /etc/init.d/icinga start
# /etc/init.d/ido2db start</pre>
Start Icinga and Idoutils on system startup. 
 
<pre style="background-attachment: initial; background-clip: initial; background-color: #363636; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 7px; border: 1px solid rgb(221, 221, 221); font-stretch: inherit; margin-bottom: 15px; margin-top: 15px; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline;"># chkconfig ido2db on
# chkconfig icinga on
# systemctl enable httpd.service
# systemctl enable mariadb.service</pre>
Access Web Interface: 
 
Now access Icinga web interface using the following URL. You'll be prompted for the username (icingaadmin) and password you specified earlier. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0PhYekAkOCAtvydkM0jNq7qOMIsvmjx1BVH4fv3VrMj0xK6rFZdrRYxsruVzHDPwBkLcMhEfT31yBN69Tgc7PF5RneGSkbmtrKT50LUfahzo-_gxItZknEjr3zf_2fZwnTLeNGKe-fwNA/s1600/CentOS-7-Icinga-localhost-Service-details_hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0PhYekAkOCAtvydkM0jNq7qOMIsvmjx1BVH4fv3VrMj0xK6rFZdrRYxsruVzHDPwBkLcMhEfT31yBN69Tgc7PF5RneGSkbmtrKT50LUfahzo-_gxItZknEjr3zf_2fZwnTLeNGKe-fwNA/s1600/CentOS-7-Icinga-localhost-Service-details_hackthesec.co.in.jpg" /></a></div>
 
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a> 
 
 </div>