Hack The Sec-Leading Resource Of Linux Tutorial: centos7

How to Install and use Log File Navigator – lnav in Ubuntu and CentOS linux

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="post-title entry-title" style="background-color: white; border: 0px; color: #155c8e; font-family: "Titillium Web", Arial, sans-serif; font-stretch: inherit; font-variant-numeric: inherit; font-weight: 400; letter-spacing: -1px; line-height: 1.3em; margin: 0px 0px 10px; padding: 0px; vertical-align: baseline; word-wrap: break-word;">
Install and use Log File Navigator – lnav in Ubuntu and CentOS</h1>
<div>
<div>
The Log File Navigator, lnav, is an enhanced log file viewer that takes advantage of any semantic information that can be gleaned from the files being viewed, such as timestamps and log levels. </div>
<div>
 </div>
<div>
Using this extra semantic information, lnav can do things like interleaving messages from different files, generate histograms of messages over time, and providing hotkeys for navigating through the file. It is hoped that these features will allow the user to quickly and efficiently zero in on problems.</div>
<div>
 </div>
<div>
In this article we will show you how to install and use The Log File Navigator, lnav, on <a href="http://www.hackthesec.co.in/search/label/Ubuntu">Ubuntu </a>15.04/15.10/ and <a href="http://www.hackthesec.co.in/search/label/Centos">CentOS 7</a>.x</div>
</div>
<div>
 </div>
<div>
<div>
lnav – Features</div>
<div style="color: #333333;">
<ul style="text-align: left;">
<li>Single log view: all log file contents are merged into a single view based on message timestamps. No need to manually correlate timestamps across multiple windows or figure out the order in which to view rotated log files.</li>
<li>Automatic format detection for several common log files. It also detects gzip/bzi2 files and decompress them automatically on the fly.</li>
<li>Filters: display only lines that match or do not match a set of regular expressions. Filter by error level.</li>
<li>Timeline view: shows a histogram of messages over time. The number of warnings and errors are highlighted in the display so that you can easily see where problems have occurred.</li>
<li>Query logs using SQL: log files are directly used as the backing for SQLite virtual tables.</li>
<li>Automatic data extraction: built-in log message parser can automatically discover and extract interesting data from plainly formatted log messages.</li>
<li>Live operation: Search as you type. New log lines are automatically loaded and searched as they are added; filters apply to lines as they are loaded; and, SQL queries are checked for correctness as you type.</li>
<li>Syntax highlighting with configurable colourizing</li>
<li>Tab completion</li>
<li>Sessions</li>
<li>Supports Linux and Mac</li>
</ul>
</div>
</div>
<div>
Install lnav on Ubuntu 15.04/15.10 and Linux Mint 17.x</div>
<div>
 </div>
<div>
To install lnav on Ubuntu 15.04/15.10 and Linux Mint 17.x and other Ubuntu based distribution, type following command in your terminal:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ sudo apt-get install lnav -y</pre>
</div>
<div>
<div>
Install lnav on CentOS 7</div>
<div>
 </div>
<div>
First, enable epel repository:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ sudo yum install epel-release -y</pre>
</div>
</div>
<div>
Now, install lnav using yum command:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ sudo yum install lnav -y</pre>
</div>
<div>
<div>
Using lnav command</div>
<div>
If you want to view logs using lnav you can do using the following command by default it shows syslogs.</div>
</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ lnav</pre>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQu5LEdC3IG2TW_rGdocj0NAYHpqQooYYJW8h-spbGA0Qdan60IFvgOfuni0OS2aZl_s0e-R4ezIT_7_iHTWwcwXxZg2dpQwvvZ3g6SH9jnjcg5fOrPQ1tAT5l2L21W7Khdy2_PUxBJKi3/s1600/Use-lnav-log-viewer.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQu5LEdC3IG2TW_rGdocj0NAYHpqQooYYJW8h-spbGA0Qdan60IFvgOfuni0OS2aZl_s0e-R4ezIT_7_iHTWwcwXxZg2dpQwvvZ3g6SH9jnjcg5fOrPQ1tAT5l2L21W7Khdy2_PUxBJKi3/s1600/Use-lnav-log-viewer.png" /></a></div>
<div>
 </div>
<div>
If you want to view specific logs provide the path. Example:</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$ lnav /var/log/clamav/</pre>
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-sYeWh28aR19JJBG39T-MyV2YwlsN2DZ-uudRJBvKag3mgJ2EB5mYau4ImxK6wBhgCmmi6QI17VXiZSXgtQKIu0uWfPdoDF0gKWyrquxionTfTjDYiNsd__lQLiaEdJbSKiWPn55qlMBB/s1600/lnav-view-specific-logs.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-sYeWh28aR19JJBG39T-MyV2YwlsN2DZ-uudRJBvKag3mgJ2EB5mYau4ImxK6wBhgCmmi6QI17VXiZSXgtQKIu0uWfPdoDF0gKWyrquxionTfTjDYiNsd__lQLiaEdJbSKiWPn55qlMBB/s1600/lnav-view-specific-logs.png" /></a></div>
<div>
 </div>
<div>
How to navigate in lnav</div>
<div>
 </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXmLlEjaj4f6ozCZaIHNnR8QHs2nehhcxyIlZatSI0lu9-R1xof12i1JacCfRYMFKL4LNFAKL5vvkrlvNHazZP_9Sq_9CDZtJZCbKsMDVUyJ9d3G1udhjiDjKClI3bvU8PpZNGi_MDABgx/s1600/how-to-use-lnav.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXmLlEjaj4f6ozCZaIHNnR8QHs2nehhcxyIlZatSI0lu9-R1xof12i1JacCfRYMFKL4LNFAKL5vvkrlvNHazZP_9Sq_9CDZtJZCbKsMDVUyJ9d3G1udhjiDjKClI3bvU8PpZNGi_MDABgx/s1600/how-to-use-lnav.png" /></a></div>
<div>
 </div>
<div>
For more information visit <a href="http://lnav.org/">official lnav site.</a></div>
<div>
 </div>
</div>

How to Install and use Log File Navigator – lnav in Ubuntu and CentOS linux

Install and use Log File Navigator – lnav in Ubuntu and CentOS The Log File Navigator, lnav, is an enhanced log file viewer that takes ...

phpVirtualBox – A web-based front end for VirtualBox

<div dir="ltr" style="text-align: left;" trbidi="on">
phpVirtualBox – A web-based front end for VirtualBox 
phpVirtualBox is a web-based front-end to VirtualBox that allows you to control your VirtualBox environment.An open source, AJAX implementation of the VirtualBox user interface written in PHP. As a modern web interface, it allows you to access and control remote VirtualBox instances. phpVirtualBox is designed to allow users to administer VirtualBox in a headless environment - mirroring the VirtualBox GUI through its web interface. 
INSTALLATION  
<pre style="background: rgb(68, 68, 68); border-radius: 3px; border: 1px solid rgb(221, 221, 221); color: white; font-family: "Courier 10 Pitch", Courier, monospace; font-size: 15px; font-stretch: inherit; line-height: 19px; margin-bottom: 30px; margin-top: 30px; max-width: 100%; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; word-wrap: normal;"><span style="border: 0px; color: #848484; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">[Install Apache & PHP]
$ sudo apt-get install apache2 php5 php5-mysql libapache2-mod-php5 php-soap

<span style="border: 0px; color: #848484; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">[Start Apache Service on RPM based system]
$ sudo systemctl start httpd
$ sudo /etc/init.d/httpd start</pre>
Visit <a href="https://sourceforge.net/projects/phpvirtualbox/">phpVirtualBox official Website</a> and download the latest version phpVirtualBox 
<pre style="background: rgb(68, 68, 68); border-radius: 3px; border: 1px solid rgb(221, 221, 221); color: white; font-family: "Courier 10 Pitch", Courier, monospace; font-size: 15px; font-stretch: inherit; line-height: 19px; margin-bottom: 30px; margin-top: 30px; max-width: 100%; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; word-wrap: normal;">$ sudo wget https://sourceforge.net/projects/phpvirtualbox/files/phpvirtualbox-5.0-5.zip
$ sudo unzip phpvirtualbox-5.0-5.zip
$ sudo mv phpvirtualbox-5.0-5 /var/www/html/phpvirtualbox
$ sudo chmod 777 /var/www/html/phpvirtualbox</pre>
VirtualBox provides a service called vboxwebsrv which allow phpVirtualBox to connect to it. 
<pre style="background: rgb(68, 68, 68); border-radius: 3px; border: 1px solid rgb(221, 221, 221); color: white; font-family: "Courier 10 Pitch", Courier, monospace; font-size: 15px; font-stretch: inherit; line-height: 19px; margin-bottom: 30px; margin-top: 30px; max-width: 100%; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; word-wrap: normal;"><span style="border: 0px; color: #848484; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">[Create Vboxwebsrv user : Use existing user or create new users as your wish]
$ sudo useradd virtual
$ sudo passwd virtual

<span style="border: 0px; color: #848484; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">[Add the user to vboxuser group]
$ sudo usermod -a -G vboxuser virtual</pre>
Edit or create the following configuration file using your preferred text editor and Add the following contents. 
<pre style="background: rgb(68, 68, 68); border-radius: 3px; border: 1px solid rgb(221, 221, 221); color: white; font-family: "Courier 10 Pitch", Courier, monospace; font-size: 15px; font-stretch: inherit; line-height: 19px; margin-bottom: 30px; margin-top: 30px; max-width: 100%; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; word-wrap: normal;">$ sudo nano /etc/default/virtualbox
VBOXWEB_USER="virtual"</pre>
Configure phpVirtualBox by editing config.php file. 
<pre style="background: rgb(68, 68, 68); border-radius: 3px; border: 1px solid rgb(221, 221, 221); color: white; font-family: "Courier 10 Pitch", Courier, monospace; font-size: 15px; font-stretch: inherit; line-height: 19px; margin-bottom: 30px; margin-top: 30px; max-width: 100%; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; word-wrap: normal;">$ sudo cp /var/www/html/phpvirtualbox/config.php-example /var/www/html/phpvirtualbox/config.php
$ sudo nano /var/www/html/phpvirtualbox/config.php
[...]
var $username = 'virtual';
var $password = '12345';
[...]</pre>
Start the virtualbox web service 
<pre style="background: rgb(68, 68, 68); border-radius: 3px; border: 1px solid rgb(221, 221, 221); color: white; font-family: "Courier 10 Pitch", Courier, monospace; font-size: 15px; font-stretch: inherit; line-height: 19px; margin-bottom: 30px; margin-top: 30px; max-width: 100%; overflow-x: auto; overflow-y: hidden; padding: 18px 20px; vertical-align: baseline; word-wrap: normal;"><span style="border: 0px; color: #848484; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">[Start the virtualbox web service on systemd Systems]
$ sudo systemctl start vboxweb-service

<span style="border: 0px; color: #848484; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">[Restart Apache Service on RPM based system]
$ sudo systemctl restart httpd
$ sudo /etc/init.d/httpd restart</pre>
Working with phpVirtualBox 
 
Now you can access phpVirtualBox Web console on any system which have GUI desktop environements through http://ip-address-of-virtualbox-server/phpvirtualbox. The default username/password is admin:admin. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSMLtNfTfwkzt4bqRGa5uc6BNCwPWgLVMOHUiwxU39dcXL49twKfC4b1MbhDpCKPcRJr1CaxOheatpZjAMIX7z7JM2edquPSQaZeW9TtOLpmUApoNfN_SjOr1-hFqW0yl14cB14sv90jVz/s1600/install-phpvirtualbox-web-based-virtualbox-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSMLtNfTfwkzt4bqRGa5uc6BNCwPWgLVMOHUiwxU39dcXL49twKfC4b1MbhDpCKPcRJr1CaxOheatpZjAMIX7z7JM2edquPSQaZeW9TtOLpmUApoNfN_SjOr1-hFqW0yl14cB14sv90jVz/s1600/install-phpvirtualbox-web-based-virtualbox-hackthesec.co.in.png" /></a></div>
I have successfully got virtualbox interface, now you can Manage & Administrate the VM’s. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinHTwegLnIp-jy-GjlGtpEF0pOZQOVK_BM0XiK7FmjRpn1PXWZRHNpGO_FGzhIeo2vwL24DWMbhnJ6VuAe3IjXJfP7ruGU_RgzLPNIFhqrWwjCIvTyFfnTT9OcEart7xISArxFbo_OMq3y/s1600/phpvirtualbox-web-based-virtualbox-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinHTwegLnIp-jy-GjlGtpEF0pOZQOVK_BM0XiK7FmjRpn1PXWZRHNpGO_FGzhIeo2vwL24DWMbhnJ6VuAe3IjXJfP7ruGU_RgzLPNIFhqrWwjCIvTyFfnTT9OcEart7xISArxFbo_OMq3y/s1600/phpvirtualbox-web-based-virtualbox-hackthesec.co.in.png" /></a></div>
 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
<div style="text-align: center;">
 </div>
</div>

phpVirtualBox – A web-based front end for VirtualBox

phpVirtualBox – A web-based front end for VirtualBox phpVirtualBox is a web-based front-end to VirtualBox that allows you to control your ...

How to setup Cacti on RHEL/Centos 7.x

<div dir="ltr" style="text-align: left;" trbidi="on">
Setup Cacti on RHEL 7.x and CentOS 7.x System 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPknc-KxjFEsEFc3TJas554xPxL7yopdQxZQCyql94RHhsRnnvHHOt-OHnslcJzQHfOhtQaOTHlmXe9KY9pYW-E3WwCt8LZUJkQJCZgPllCratXAK1V2zG9xBBs_cLDcZphDVNpGB5WxEw/s1600/cacti.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPknc-KxjFEsEFc3TJas554xPxL7yopdQxZQCyql94RHhsRnnvHHOt-OHnslcJzQHfOhtQaOTHlmXe9KY9pYW-E3WwCt8LZUJkQJCZgPllCratXAK1V2zG9xBBs_cLDcZphDVNpGB5WxEw/s1600/cacti.png" /></a>Cacti is an open-source, web-based network monitoring and graphing tool designed as a front-end application for the open-source, industry-standard data logging tool RRDtool. Cacti allows a user to poll services at predetermined intervals and graph the resulting data. It is generally used to graph time-series data of metrics such as CPU load and network bandwidth utilization. A common usage is to monitor network traffic by polling a network switch or router interface via Simple Network Management Protocol (SNMP). 
 
The front end can handle multiple users, each with their own graph sets, so it is sometimes used by web hosting providers (especially dedicated server,virtual private server, and collocation providers) to display bandwidth statistics for their customers. It can be used to configure the data collection itself, allowing certain setups to be monitored without any manual configuration of RRDtool. Cacti can be extended to monitor any source via shell scripts and executables. 
 
Cacti can use one of two back ends: "cmd.php", a PHP script suitable for smaller installations, or "Spine" (formerly Cactid), a C-based poller which can scale to thousands of hosts. 
Install Apache, MariaDb php SNMP and RRDtool 
 
Login in your Linux machine as root and run following command to install apache, php, MariaDB: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># yum install httpd httpd-devel mariadb-server php-mysql php-pear php-common php-gd php-devel php php-mbstring php-cli -y</pre>
Install php-snmp, net-snmp and rrdtool 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># yum install php-snmp net-snmp-utils net-snmp-libs rrdtool -y</pre>
Start HTTPD, MySQL and SNMP service 
 
To start HTTPD, MySQL and SNMP service enter following command in your console 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># systemctl start httpd.service
# systemctl start mariadb.service
# systemctl start snmpd.service</pre>
Add HTTPD, MySQL and SNMP service to start on boot time: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># systemctl enable httpd.service
# systemctl enable mariadb.service
# systemctl enable snmpd.service</pre>
Setup MySQL database and User Accounts 
 
First, set the MySQL root password: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># mysqladmin -u root password YOUR_PASSWORD</pre>
Now, create cacti database. Login into your MySQL server and create cacti database width user cacti and set the password for it: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># mysql -u root -p
MariaDB [(none)]> create database cacti;
MariaDB [(none)]> GRANT ALL ON cacti.* TO cacti@localhost IDENTIFIED BY 'cactipass';
MariaDB [(none)]> FLUSH privileges;
MariaDB [(none)]> quit;</pre>
Install Cacti on RHEL/CentOS 7.x 
 
For installing cacti trough YUM command you must enable EPEL repository: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># yum install epel-release -y</pre>
After enabling EPEL repository, type following command to install cacti: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># yum install cacti -y</pre>
Install cacti tables to MySQL and configure MySQL settings for cacti 
 
Now, import cacti database tables from the cacti.sql file. First locate cacti.sql file: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># rpm -ql cacti|grep cacti.sql
/usr/share/doc/cacti-0.8.8b/cacti.sql</pre>
Import tables to cacti database: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># mysql -u cacti -p cacti < /usr/share/doc/cacti-0.8.8b/cacti.sql
Enter password:</pre>
Open /etc/cacti/db.php file using nano of VI editor and edit the below lines: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">$database_type = "mysql";
$database_default = "cacti";
$database_hostname = "localhost";
$database_username = "cacti";
$database_password = "cactipass";</pre>
Open http port in firewall 
 
Open an http port in firewall: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># firewall-cmd --permanent --zone=public --add-service=http
# firewall-cmd --reload</pre>
Configure apache to Network Accessible 
 
Open file called /etc/httpd/conf.d/cacti.conf 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># etc/httpd/conf.d/cacti.conf</pre>
Now edit the "Allow From" line, Either set to ALL or enter your LAN subnet to allow access to cacti: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Alias /cacti /usr/share/cacti

<Directory /usr/share/cacti/>
 <IfModule mod_authz_core.c>
 # httpd 2.4
 Require host 192.168.0.0/24
 </IfModule>
 <IfModule !mod_authz_core.c>
 # httpd 2.2
 Order deny,allow
 Deny from all
 Allow from 192.168.0.0/24
 </IfModule>
</Directory></pre>
After editing cacti configuration file, restart the Apache service: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># systemctl restart httpd.service</pre>
Set cron for cacti 
 
Open /etc/cron.d/cacti file and uncomment the line: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">*/5 * * * * cacti /usr/bin/php /usr/share/cacti/poller.php > /dev/null 2>&1</pre>
Run cacti installer 
 
Go to http://YOUR-IP-ADDRESS/cacti/ and just follow the instructions on screen. The default username and password for cacti is admin/admin. Upon first login you will be forced to change the default password. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh47I9Z2dnv9gQIE5n3sgj9Q9B5qcfSGmPvgh3J-TpJbLDJMHdjdkSVIOD5VdYLBGfG15H7X-pm8OVXXtgcekLNwaYjtSEHbbuN68LK5jhV541YkeFZrkp9QItWi93XSrplCuV0VqQu7O_3/s1600/Cacti-console-screen_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh47I9Z2dnv9gQIE5n3sgj9Q9B5qcfSGmPvgh3J-TpJbLDJMHdjdkSVIOD5VdYLBGfG15H7X-pm8OVXXtgcekLNwaYjtSEHbbuN68LK5jhV541YkeFZrkp9QItWi93XSrplCuV0VqQu7O_3/s1600/Cacti-console-screen_hackthesec.co.in.png" /></a></div>
 
More information about cacti, see <a href="http://www.cacti.net/">HERE</a>. 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
<div style="text-align: center;">
 </div>
</div>

How to setup Cacti on RHEL/Centos 7.x

Setup Cacti on RHEL 7.x and CentOS 7.x System Cacti is an open-source, web-based network monitoring and graphing tool designed as a front-...

How to Install and Configure Puppet on CentOS 7 / RHEL 7

<div dir="ltr" style="text-align: left;" trbidi="on">
Install and Configure Puppet on CentOS 7 / RHEL 7 
<a href="http://www.hackthesec.co.in/search/label/puppet" target="_blank">Puppet </a>is an open-source configuration management tool. It runs on many Unix-like systems as well as on Microsoft Windows, and includes its own declarative language to describe system configuration. 
<div class="separator" style="background-color: white; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.2px; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7ox3PLkn1wWucxc5pzawlrlkniY2vrwbbOgxyDP-sdmzqZJGZ2SFjp5zooTXX2yUp5sQyeLRudJxODHJTH9A2VaD2BhxXfRVdLjfI41bjM14B0dxikkcksis0X-Jkkeu6x-1vPO9iI82y/s1600/Install-Puppet-in-CentOS_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7ox3PLkn1wWucxc5pzawlrlkniY2vrwbbOgxyDP-sdmzqZJGZ2SFjp5zooTXX2yUp5sQyeLRudJxODHJTH9A2VaD2BhxXfRVdLjfI41bjM14B0dxikkcksis0X-Jkkeu6x-1vPO9iI82y/s1600/Install-Puppet-in-CentOS_hackthesec.co.in.png" /></a></div>
 <a href="http://www.hackthesec.co.in/search/label/puppet" target="_blank">Puppet</a> is produced by Puppet Labs, founded by Luke Kanies in 2005. It is written in Ruby and released as free software under the GNU General Public License (GPL) until version 2.7.0 and the Apache License 2.0 after that. 
Puppet Master: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Operating system : CentOS 7 Minimal
IP Address       : 192.168.2.10
HostName         : server.hackthesec.local</pre>
Puppet client: 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Operating System : CentOS 7 Minimal
IP Address       : 192.168.2.20
HostName         : client.hackthesec.local</pre>
Make sure your system (both puppet server and client) is able to resolve the hostname each other, either use /etc/hosts file or DNS server. 
 
 
To have a production ready puppet setup, we have to use apache with passenger. To get the passenger, download and place the repo file to /etc/yum.repos.d/ 
Note: Only on the master server. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; float: none !important; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# curl --fail -sSLo /etc/yum.repos.d/passenger.repo https://oss-binaries.phusionpassenger.com/yum/definitions/el-passenger.repo</pre>
<div>
To install the puppet master / agent, we would require to setup puppet repository on the all the nodes. Enable puppet labs repository by installing below rpm.</div>
<div>
Note: Run it on both master and agent nodes.</div>
<div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># rpm -ivh https://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm</pre>
</div>
<div>
<div>
Install and Configure Puppet on CentOS 7:</div>
<div style="color: #333333;">
Now, its time to install puppet. Install the puppet server using below command.</div>
</div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; float: none !important; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# yum -y install puppet-server</pre>
<div>
As said earlier, we will configure puppet for master / agent architecture. So, this node will acts as a master node. Edit the puppet configuration file and modify the dns_alt_names.</div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# vi /etc/puppet/puppet.conf

[main]
dns_alt_names = server,server.hackthesec.local
certname = server.hackthesec.local</pre>
If this machine is the only puppet master in your environment, run below command to create the puppet master certificate. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet master --verbose --no-daemonize

Info: Creating a new SSL key for ca
Info: Creating a new SSL certificate request for ca
Info: Certificate Request fingerprint (SHA256): 81:C6:BB:8B:1D:71:4C:64:E1:13:54:1B:EC:CF:99:D8:85:90:D1:6C:E8:85:50:3E:03:41:BA:C5:47:A7:4C:E5
Notice: Signed certificate request for ca
Info: Creating a new certificate revocation list
Info: Creating a new SSL key for server.hackthesec.local
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for server.hackthesec.local
Info: Certificate Request fingerprint (SHA256): FF:BE:D4:9B:E4:12:83:79:AE:BE:50:17:76:5F:F5:CD:5F:53:EA:5D:AA:5D:87:9E:7C:C4:BC:1B:8A:C6:FA:5C
Notice: server.hackthesec.local has a waiting certificate request
Notice: Signed certificate request for server.hackthesec.local
Notice: Removing file Puppet::SSL::CertificateRequest server.hackthesec.local at '/var/lib/puppet/ssl/ca/requests/server.hackthesec.local.pem'
Notice: Removing file Puppet::SSL::CertificateRequest server.hackthesec.local at '/var/lib/puppet/ssl/certificate_requests/server.hackthesec.local.pem'
Notice: Starting Puppet master version 3.8.3</pre>
Once you get "Notice: Starting Puppet master version <VERSION>", press ctrl-C to kill the process. 
Configure a Production-Ready Web Server: 
Puppet comes with a basic puppet master web server, but this cannot be used for real-life loads. We must configure a production quality web server before we start managing our nodes with Puppet. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; float: none !important; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# yum -y install httpd httpd-devel mod_ssl ruby-devel rubygems gcc gcc-c++ pygpgme curl</pre>
<div>
Install Passenger and apache module.</div>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# yum install -y mod_passenger</pre>
Create three directories for the application (a parent directory, a "public" directory, and a "tmp" directory), Copy the ext/rack/config.ru file from the Puppet source code into the parent directory and Set the ownership of the config.ru file. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# mkdir -p /usr/share/puppet/rack/puppetmasterd
[root@hackthesec server ~]# mkdir /usr/share/puppet/rack/puppetmasterd/public /usr/share/puppet/rack/puppetmasterd/tmp
[root@hackthesec server ~]# cp /usr/share/puppet/ext/rack/config.ru /usr/share/puppet/rack/puppetmasterd/
[root@hackthesec server ~]# chown puppet:puppet /usr/share/puppet/rack/puppetmasterd/config.ru</pre>
Add virtual host for puppet by creating the below configuration file. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# vi /etc/httpd/conf.d/puppetmaster.conf</pre>
Add below content into the virtual host file, change the  entries as per your environement. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;"># you probably want to tune these settings
PassengerHighPerformance on
PassengerMaxPoolSize 12
PassengerPoolIdleTime 1500
# PassengerMaxRequests 1000
PassengerStatThrottleRate 120

Listen 8140

<VirtualHost *:8140>
        SSLEngine on
        SSLProtocol             ALL -SSLv2 -SSLv3
        SSLCipherSuite          EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
        SSLHonorCipherOrder     on

SSLCertificateFile      /var/lib/puppet/ssl/certs/server.hackthesec.local.pem        SSLCertificateKeyFile   /var/lib/puppet/ssl/private_keys/server.hackthesec.local.pem        SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem
        SSLCACertificateFile   /var/lib/puppet/ssl/ca/ca_crt.pem
        # If Apache complains about invalid signatures on the CRL, you can try disabling
        # CRL checking by commenting the next line, but this is not recommended.
        SSLCARevocationFile     /var/lib/puppet/ssl/ca/ca_crl.pem
        # Apache 2.4 introduces the SSLCARevocationCheck directive and sets it to none
        # which effectively disables CRL checking; if you are using Apache 2.4+ you must
        # specify 'SSLCARevocationCheck chain' to actually use the CRL.
        # SSLCARevocationCheck chain
        SSLVerifyClient optional
        SSLVerifyDepth  1
        # The `ExportCertData` option is needed for agent certificate expiration warnings
        SSLOptions +StdEnvVars +ExportCertData

# This header needs to be set if using a loadbalancer or proxy
        RequestHeader unset X-Forwarded-For

RequestHeader set X-SSL-Subject %{SSL_CLIENT_S_DN}e
        RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
        RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e

DocumentRoot /usr/share/puppet/rack/puppetmasterd/public
        RackBaseURI /
        <Directory /usr/share/puppet/rack/puppetmasterd/>
                Options None
                AllowOverride None
                Order allow,deny
                allow from all
        </Directory>
</VirtualHost>  </pre>
Restart apache server to take an effect of puppet virtual host, to do that, run following command on terminal. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# systemctl restart  httpd.service</pre>
Disable puppet service and enable apache server to auto start on system boot. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# systemctl disable puppet.service
[root@hackthesec server ~]# systemctl enable httpd.service</pre>
Firewall: 
Puppet listens on port no 8140; Configure the IP tables to allow it. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# firewall-cmd --zone=public --add-port=8140/tcp --permanent
[root@hackthesec server ~]# firewall-cmd --reload</pre>
Install Puppet on Agent Nodes: 
On your client machine, install puppet agent using below command. 
 
 
Note: You must have puppet repository configured on the agent nodes. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec client ~]# yum -y install puppet</pre>
Edit the puppet configuration file and set puppet master information on the client stanza. 
 
 
Note: Modify "server" value as per your environment. In my case, server is "server.hackthesec.local" 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec client ~]# vi /etc/puppet/puppet.conf

[agent]
server = server.hackthesec.local</pre>
Start puppet on agent node and make it to start automatically on system boot. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec client ~]# systemctl start  puppet.service
[root@hackthesec client ~]# systemctl enable puppet.service</pre>
You would get below events in the logs. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">05:46:45 client systemd: Starting Puppet agent...
05:46:46 client systemd: Started Puppet agent.
05:47:03 client systemd: Reloading.
05:49:10 client puppet-agent[2694]: Did not receive certificate</pre>
Sign the Agent Node's Certificate on Master Server: 
In an agent/master deployment, an admin must approve a certificate request for each agent node before that node can fetch configurations. Agent nodes will request certificates the first time they attempt to run. 
 
 
Log into the puppet master server and run below command to view outstanding requests. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; line-height: 19.2px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert list
"server.hackthesec.local" (SHA256) 35:D1:B5:67:52:1C:1C:BH:6H:DD:3C:2E:B0:28:D7:15:52:95:32:95:1F:37:29:2G:5F:D7:4C:F5:DB:94:A1:B2</pre>
Run puppet cert sign to sign a request, or puppet cert sign –all to sign all pending requests. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert sign client.hackthesec.local

Notice: Signed certificate request for client.hackthesec.local
Notice: Removing file Puppet::SSL::CertificateRequest client.hackthesec.local at '/var/lib/puppet/ssl/ca/requests/client.hackthesec.local.pem'</pre>
Run the following command on client machine to check the certificate 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec client ~]# puppet agent -t

Info: Caching certificate for client.hackthesec.local
Info: Caching certificate_revocation_list for ca
Info: Caching certificate for client.hackthesec.local
Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Caching catalog for client.hackthesec.local
Info: Applying configuration version '1445401911'
Info: Creating state file /var/lib/puppet/state/state.yaml
Notice: Finished catalog run in 0.09 seconds</pre>
That’s All. Now, you have successfully configured puppet master and an agent. 
 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>

How to Install and Configure Puppet on CentOS 7 / RHEL 7

Install and Configure Puppet on CentOS 7 / RHEL 7 Puppet is an open-source configuration management tool. It runs on many Unix-like syste...

How to Add Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04

<div dir="ltr" style="text-align: left;" trbidi="on">
Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04 
Puppet is an open-source configuration management tool. It runs on many Unix-like systems as well as on Microsoft Windows, and includes its own declarative language to describe system configuration. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfyaHydR2dsd1VxEV8holOMAFNMnvGjL0OPYRu4Efz8smXMdvWTT47kx5zHrkRK31WTfrDo31tMb9m9lXyI8M_YdP0XRDUzVJloYX5BMP4xGU5saG4qdA5LiIHAl5mUf7BtaCvBhE2yn5s/s1600/puppet-labs-hackthesec.co.in.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="315" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfyaHydR2dsd1VxEV8holOMAFNMnvGjL0OPYRu4Efz8smXMdvWTT47kx5zHrkRK31WTfrDo31tMb9m9lXyI8M_YdP0XRDUzVJloYX5BMP4xGU5saG4qdA5LiIHAl5mUf7BtaCvBhE2yn5s/s320/puppet-labs-hackthesec.co.in.png" width="320" /></a></div>
 
Puppet is produced by Puppet Labs, founded by Luke Kanies in 2005. It is written in Ruby and released as free software under the GNU General Public License (GPL) until version 2.7.0 and the Apache License 2.0 after that. 
 
Foreman (also known as The Foreman) is an open source complete life cycle systems management tool for provisioning, configuring and monitoring of physical and virtual servers. Foreman has deep integration to configuration management software, with Puppet, Chef, Salt and other solutions through plugins, which allows you to automate repetitive tasks, deploy applications and manage change to deployed servers. 
 
 
Foreman provides provisioning on bare-metal (through managed DHCP, DNS, TFTP, and PXE-based unattended installations), virtualization and cloud. Foreman provides comprehensive, auditable interaction facilities including a web frontend, a command line interface, and a robust REST API. 
 
 
<ul style="text-align: left;">
<li><a href="http://www.hackthesec.co.in/2016/06/how-to-install-foreman-on-centos-7-rhel.html" style="font-family: verdana, geneva, sans-serif; font-size: x-large; line-height: 26px;" target="_blank">How To Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04</a></li>
</ul>
 
 
INSTALLATION :- 
 
Make sure your system (both puppet server and client) is able to resolve the hostname each other, either use /etc/hosts file or DNS server. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/hosts</pre>
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">192.168.2.10 server.hackthesec.local server # Foreman
192.168.2.20 centos.hackthesec.local centos # CentOS 7 Agent
192.168.2.30 ubuntu.hackthesec.local ubuntu # Ubuntu 14.04 Agent</pre>
 
Install Puppet Agent on CentOS 7: 
Puppetlabs repository in order to get a puppet agent packages from official source. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">rpm -ivh https://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm

yum -y install puppet
</pre>
Install Puppet Agent on Ubuntu 14.04: 
Puppet agent, we have to configure Puppetlabs repository on Ubuntu 14.04. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">wget https://apt.puppetlabs.com/puppetlabs-release-trusty.deb
sudo dpkg -i puppetlabs-release-trusty.deb

sudo apt-get update

sudo apt-get install puppet
</pre>
Configure puppet agent on CentOS 7 / Ubuntu 14.04: 
Once the installation is done, we will need to update the "/etc/puppet/puppet.conf" file. 
 
There are two section on the agent node's puppet config file, a [main] and [master] section. Add the following settings to your [main] settings. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/puppet/puppet.conf</pre>
Comment or Delete "templatedir=$confdir/templates" line and enter your details Foreman (Puppet Master) in "server = hostname" line 
<pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;">[main]
logdir=/var/log/puppet
vardir=/var/lib/puppet
ssldir=/var/lib/puppet/ssl
rundir=/var/run/puppet
factpath=$vardir/lib/facter
#templatedir=$confdir/templates
### Add Below Lines ###
server = server.hackthesec.local
report = true
pluginsync = true</pre>
Edit /etc/default/puppet to enable puppet service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/default/puppet</pre>
Setting this to "yes" allows the puppet agent service to run. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">START=yes</pre>
To enable and run puppet agent service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">puppet resource service puppet ensure=running enable=true</pre>
Sign Puppet Agent certificate: 
Now, you will have to sign the certificates of puppet agents in order to work with Foreman, issue the following command to list down the unsigned certificates. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert list
"ubuntu.hackthesec.local" (SHA256) 35:D1:B5:67:52:1C:1C:BH:6H:DD:3C:2E:B0:28:D7:15:52:95:32:95:1F:37:29:2G:5F:D7:4C:F5:DB:94:A1:B2</pre>
In the above output, "ubuntu.hackthesec.local" is the puppet agent. To sign the certificate follow below command 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert sign ubuntu.hackthesec.local
Notice: Signed certificate request for ubuntu.hackthesec.local
Notice: Removing file Puppet::SSL::CertificateRequest ubuntu.hackthesec.local at '/var/lib/puppet/ssl/ca/requests/ubuntu.hackthesec.local.pem'</pre>
Console Mode: 
Open your Foreman web console, go to Infrastructure –> Smart proxies. Click Certificates button. 
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUGlMe2UjdXBn2DDmn2QcJbRjLwa8rQTCYQN4s6nXK5rQAzCeF3H_99APJ3smwjMYNTRuuG74KRirK3p63DATPuJ5lvaGGBPLEnmcMo1N2cbT01mZr1aaNoYwSM5Ex_P10qEGH5wsUGT45/s1600/Puppet-Nodes-to-Foreman-Smart-Proxies-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUGlMe2UjdXBn2DDmn2QcJbRjLwa8rQTCYQN4s6nXK5rQAzCeF3H_99APJ3smwjMYNTRuuG74KRirK3p63DATPuJ5lvaGGBPLEnmcMo1N2cbT01mZr1aaNoYwSM5Ex_P10qEGH5wsUGT45/s1600/Puppet-Nodes-to-Foreman-Smart-Proxies-hackthesec.co.in.png" /></a></div>
You see  agent certificate (ubuntu.hackthesec.local) is pending to be signed. To sign, click Sign button. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEZDMnqfHwnNiEwh7QQY2UQALS34bO8_M6Sr26SbZlfVTDXBlnaKLD5l1Dwofy8UlTUgArDwGH_J2VauYMgSdznCEDdpWV4HuYDlZJPcgaX0nNLa1GinDis5lXfRNE-cmvymUeTno1aBxB/s1600/Puppet-Nodes-to-Foreman-Agent-Certificates-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEZDMnqfHwnNiEwh7QQY2UQALS34bO8_M6Sr26SbZlfVTDXBlnaKLD5l1Dwofy8UlTUgArDwGH_J2VauYMgSdznCEDdpWV4HuYDlZJPcgaX0nNLa1GinDis5lXfRNE-cmvymUeTno1aBxB/s1600/Puppet-Nodes-to-Foreman-Agent-Certificates-hackthesec.co.in.png" /></a></div>
After that your agent (ubuntu.hackthesec.local) is signed successfully. 
To verify the node go to Hosts –> All Hosts. Verify that the new node (ubuntu.hackthesec.local) has been added to Foreman. 
Troubleshooting 
In case if you want to remove the puppet agent from the Puppet master, run. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet cert clean ubuntu.hackthesec.local
Notice: Revoked certificate with serial 3
Notice: Removing file Puppet::SSL::Certificate ubuntu.hackthesec.local at '/var/lib/puppet/ssl/ca/signed/ubuntu.hackthesec.local.pem'
Notice: Removing file Puppet::SSL::Certificate ubuntu.hackthesec.local at '/var/lib/puppet/ssl/certs/ubuntu.hackthesec.local.pem'</pre>
In case, if you want to re-register the puppet agent that you just deleted in previous step. Follow the below procedure. 
 
Stop the puppet service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">service puppet stop</pre>
Delete the puppet agent ssl directory. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">rm -rf /var/lib/puppet/ssl/certs</pre>
Start the puppet service. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">service puppet start</pre>
Now, you can go and run the "puppet cert list" command on Foreman (puppet master) server to see the signing request, approve it incase you required. 
 
 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>

How to Add Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04

Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04 Puppet is an open-source configuration management tool. It runs on many Unix-like system...

How To Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04

<div dir="ltr" style="text-align: left;" trbidi="on">
Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04.3 
Foreman (also known as The Foreman) is an open source complete life cycle systems management tool for provisioning, configuring and monitoring of physical and virtual servers. Foreman has deep integration to configuration management software, with Puppet, Chef, Salt and other solutions through plugins, which allows you to automate repetitive tasks, deploy applications and manage change to deployed servers. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH5gPHAx4FvWVWVjVkk4GDrS79gjysPp8bLRM9XBCj3KNIwUNcK6BC9HvKyOzvFk5fUSp1-zmMuLd-vMcx7enFvFLevb4nhf1K9Qs7RKk5DbggOJ4ZiDQJCxoGCA_GCgcNENx3EJi30oRK/s1600/foreman_medium.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH5gPHAx4FvWVWVjVkk4GDrS79gjysPp8bLRM9XBCj3KNIwUNcK6BC9HvKyOzvFk5fUSp1-zmMuLd-vMcx7enFvFLevb4nhf1K9Qs7RKk5DbggOJ4ZiDQJCxoGCA_GCgcNENx3EJi30oRK/s1600/foreman_medium.png" /></a></div>
 
 
Foreman provides provisioning on bare-metal (through managed <a href="http://www.hackthesec.co.in/search/label/DHCP" target="_blank">DHCP</a>, DNS, TFTP, and PXE-based unattended installations), virtualization and cloud. Foreman provides comprehensive, auditable interaction facilities including a web frontend, a command line interface, and a robust REST API. 
 
<ul style="text-align: left;">
<li><a href="http://www.hackthesec.co.in/2016/06/how-to-add-puppet-nodes-to-foreman.html" style="font-family: verdana, geneva, sans-serif; line-height: 26px;" target="_blank">How to Add Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04</a></li>
</ul>
 
INSTALLATION:- 
Before installing Foreman, make sure you have setup a FQDN for your server. 
 
Note: You should do this on both <a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS </a>and <a href="http://www.hackthesec.co.in/search/label/Ubuntu" target="_blank">Ubuntu</a>. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/hosts</pre>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">192.168.2.10 server.hackthesec.local server</pre>
Also, do not forget to setup the valid hostname for the above host entry. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/hostname</pre>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">server.hackthesec.local</pre>
Install Foreman on CentOS 7 / RHEL 7: 
Configure EPEL, Puppet and Foreman repositories. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">### CentOS 7 / RHEL7 ###

rpm -ivh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

rpm -ivh http://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm

rpm -ivh http://yum.theforeman.org/releases/1.9/el7/x86_64/foreman-release.rpm

### Enable the RHEL Optional and RHSCL repos on RHEL 7 ###

yum-config-manager --enable rhel-7-server-optional-rpms rhel-server-rhscl-7-rpms</pre>
Run the following command to download Foreman installer. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">yum -y install foreman-installer</pre>
Now, run the Foreman installer to start installing Foreman. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">foreman-installer</pre>
The installation run is non-interactive, but the configuration can be customized by supplying any of the options listed in foreman-installer –help, or by running foreman-installer -i for interactive mode. 
 
 
Once the installation is completed, you will see an output like below where you would find the initial username and password to access the Foreman. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Success!
  * Foreman is running at https://server.hackthesec.local
      Initial credentials are admin / M8GEY5BH4cffgbuheu
  * Foreman Proxy is running at https://server.hackthesec.local:8443
  * Puppetmaster is running at port 8140
  The full log is at /var/log/foreman-installer/foreman-installer.log</pre>
Firewall Configuration: 
The following ports are used by the components of Foreman, needs to be allowed in IP tables (FirewallD) / Hardware Firewall. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">firewall-cmd --permanent --add-port=53/tcp
firewall-cmd --permanent --add-port=67-69/udp
firewall-cmd --permanent --add-port=80/tcp
firewall-cmd --permanent --add-port=443/tcp
firewall-cmd --permanent --add-port=3000/tcp
firewall-cmd --permanent --add-port=3306/tcp
firewall-cmd --permanent --add-port=5910-5930/tcp
firewall-cmd --permanent --add-port=5432/tcp
firewall-cmd --permanent --add-port=8140/tcp
firewall-cmd --permanent --add-port=8443/tcp
firewall-cmd --reload</pre>
Install Foreman on Ubuntu 14.04: 
Make sure you have setup a FQDN mentioned in prerequisites. Now, we will install Foreman on Ubuntu.Setup a puppet repository, 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">apt-get -y install ca-certificates
wget https://apt.puppetlabs.com/puppetlabs-release-trusty.deb
dpkg -i puppetlabs-release-trusty.deb</pre>
Enable the Foreman repo. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">echo "deb http://deb.theforeman.org/ trusty nightly" > /etc/apt/sources.list.d/foreman.list
echo "deb http://deb.theforeman.org/ trusty nightly" >> /etc/apt/sources.list.d/foreman.list
wget -q http://deb.theforeman.org/pubkey.gpg -O- | apt-key add -</pre>
Download the Foreman installer. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">apt-get update && apt-get -y install foreman-installer</pre>
Run the Foreman installer. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">foreman-installer</pre>
Once the installation is completed, you will see an output like below, 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Success!
  * Foreman is running at https://server.hackthesec.local
      Initial credentials are admin / M8GEY5BH4cffgbuheu
  * Foreman Proxy is running at https://server.hackthesec.local:8443
  * Puppetmaster is running at port 8140
  The full log is at /var/log/foreman-installer/foreman-installer.log</pre>
Note down intial username and password, you need this for accessing Foreman’s dashboard. 
Configure Foreman (Optional): 
If your Foreman host is not visible in Hosts –> All Hosts tab, you should run below command which will send the first Puppet report to Foreman, automatically creating the host in Foreman’s database. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">puppet agent --test

Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Caching catalog for server.hackthesec.local
Info: Applying configuration version '1445821177'
Notice: Finished catalog run in 0.56 seconds</pre>
Puppet 3+ will show a warning the first time that the node can’t be found, this can be ignored. 
Access Foreman Web Console: 
Open up your favourite web browser, navigate to https://your-ip-address or https://FQDN 
 
You should get login page, enter your Foreman credentials. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTNBeqSaVF8pXY-auqXz3UTtoBQmqU6Qgl079CbKgmpckIYjaCq_n18cw53r6dsMTWyh49_hpFjU0ZX9mRkalgHrXX0qLG3adNJ8yUMS7fxLhz7G7K1XLx9ID5xXDqwTEdLcXaQ9yZ4fnV/s1600/Install-Foreman-on-CentOS-7-Login-Page-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTNBeqSaVF8pXY-auqXz3UTtoBQmqU6Qgl079CbKgmpckIYjaCq_n18cw53r6dsMTWyh49_hpFjU0ZX9mRkalgHrXX0qLG3adNJ8yUMS7fxLhz7G7K1XLx9ID5xXDqwTEdLcXaQ9yZ4fnV/s1600/Install-Foreman-on-CentOS-7-Login-Page-hackthesec.co.in.png" /></a></div>
Once you logged in, you will get an overview page. Like below. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijGAzbPldMCSLEvSy0vNT4fGyzmSd1gv_U5mqBvK4KarLbmzF_qCFy19S3zJyJbAViW_06fvHp6vrzQEkuSyrrRIqXFu7-1eHcudNmHOzWIoQoYTCrOSG5HvtHU57ztrvb_oT0vDVGR586/s1600/Install-Foreman-on-CentOS-7-Overview-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijGAzbPldMCSLEvSy0vNT4fGyzmSd1gv_U5mqBvK4KarLbmzF_qCFy19S3zJyJbAViW_06fvHp6vrzQEkuSyrrRIqXFu7-1eHcudNmHOzWIoQoYTCrOSG5HvtHU57ztrvb_oT0vDVGR586/s1600/Install-Foreman-on-CentOS-7-Overview-hackthesec.co.in.png" /></a></div>
To list down the available hosts, goto Hosts –> All Hosts from Menu. Since we do not have any puppet clients, All Hosts tab would only list your Foreman host, with an "O"status. This indicates its status is OK, with no changes made on the last Puppet run. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1UjYqr-lzNWc6mPk5N7V_cN0s6TGcuH2QbWpVhLZDC7V_P2vGg4xGmuRgnVQPjqz-83ksVbVUahM_sKZSWnW9dg3Y72MbXcBr4gIeHnLsG7EkuB8BuLz-_zzvNTVGj8C9GtneK0agechc/s1600/Install-Foreman-on-CentOS-7-All-Hosts-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1UjYqr-lzNWc6mPk5N7V_cN0s6TGcuH2QbWpVhLZDC7V_P2vGg4xGmuRgnVQPjqz-83ksVbVUahM_sKZSWnW9dg3Y72MbXcBr4gIeHnLsG7EkuB8BuLz-_zzvNTVGj8C9GtneK0agechc/s1600/Install-Foreman-on-CentOS-7-All-Hosts-hackthesec.co.in.png" /></a></div>
 
It is recommended to change the password of Admin user for security reasons. To do that, click UserName (Top right)  –> My Account, you would end up with an option to change a password. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVI5R-3zPWOm6HLOzgQ9DmLIJjlnvN8C53I30hkFLBSa5SxBU1HXCfbMCb5XXnmuziK_9M-XQb-ZHyLQhcZyjcnnCZoSnhhmQZIfWeXbV1wlft-Hq0ZP7Az9b3CQSZWDDPBzjc_n7zkqKi/s1600/Install-Foreman-on-CentOS-7-Change-Password-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVI5R-3zPWOm6HLOzgQ9DmLIJjlnvN8C53I30hkFLBSa5SxBU1HXCfbMCb5XXnmuziK_9M-XQb-ZHyLQhcZyjcnnCZoSnhhmQZIfWeXbV1wlft-Hq0ZP7Az9b3CQSZWDDPBzjc_n7zkqKi/s1600/Install-Foreman-on-CentOS-7-Change-Password-hackthesec.co.in.png" /></a></div>
Download and Install NTP module: 
One of the more important requirement of puppet is to have an accurate time-keeping, to do this, we will install Puppet NTP module for managing the NTP service. 
 
If you have Puppet 2.7.14 or higher, install the module automatically from Puppet Forge to our “production” environment (the default). 
 
 
Use following command to install NTP module on Foreman (Puppet master) host. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet module install -i /etc/puppet/environments/production/modules saz/ntp

Notice: Preparing to install into /etc/puppet/environments/production/modules ...
Notice: Downloading from https://forgeapi.puppetlabs.com ...
Notice: Installing -- do not interrupt ...
/etc/puppet/environments/production/modules
└── saz-ntp (v2.3.2)</pre>
In Foreman's web console, go to Configure > Puppet Classes and click Import from hostname (server.hackthesec.local) to read the available Puppet classes from the puppet master and populate Foreman's database. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRUYBMiSX3kfvBQMVOCirOTOUn2Lxau_Rk3hRZ65AJSQj9YPUNMhRcK0rqF2CLadzfZF1uF_I_gqBXVekabW75aQ6Ne9olcGL5i7o1gIgXYNJP5dujHl7DYAFREH53IlKrA4GIkWMN0CMP/s1600/Install-Foreman-on-CentOS-7-Import-Classes-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRUYBMiSX3kfvBQMVOCirOTOUn2Lxau_Rk3hRZ65AJSQj9YPUNMhRcK0rqF2CLadzfZF1uF_I_gqBXVekabW75aQ6Ne9olcGL5i7o1gIgXYNJP5dujHl7DYAFREH53IlKrA4GIkWMN0CMP/s1600/Install-Foreman-on-CentOS-7-Import-Classes-hackthesec.co.in.png" /></a></div>
Select the NTP module and click the update button. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhq9bgoPfeu0tSLjkdMp1KQzQ3Q7JTTOUOPnJEgoVq7XWvjqP_sSv604X20Y8YJz_hnLYntP5rHQIrGIwAXNwHqG0gJr_rOTFs3n86FC1YAUdZnBTAoOZqzUlNXoslzrurLTkwqsjHGXMXO/s1600/Foreman-on-CentOS-7-Updating-Puppet-Modules_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhq9bgoPfeu0tSLjkdMp1KQzQ3Q7JTTOUOPnJEgoVq7XWvjqP_sSv604X20Y8YJz_hnLYntP5rHQIrGIwAXNwHqG0gJr_rOTFs3n86FC1YAUdZnBTAoOZqzUlNXoslzrurLTkwqsjHGXMXO/s1600/Foreman-on-CentOS-7-Updating-Puppet-Modules_hackthesec.co.in.png" /></a></div>
After clicking the update button, you will see something like below. The "ntp" class will appear in the Puppet class list if installed correctly. Click on NTP class on the left. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiclOxgtwuXS9NmkFWsv3AK1QZwHUoAiUtGDNzoAlwKZSZ24Ma-a8kWk01R_z6Iniwn9xmlb_crrgcH2qeHdsWQxOR67d0omt3Fh16HW0cy9y981YA5qXMFEdLfXaxpDnEwGOGfWkVCYax8/s1600/Foreman-on-CentOS-7-Puppet-Classes_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiclOxgtwuXS9NmkFWsv3AK1QZwHUoAiUtGDNzoAlwKZSZ24Ma-a8kWk01R_z6Iniwn9xmlb_crrgcH2qeHdsWQxOR67d0omt3Fh16HW0cy9y981YA5qXMFEdLfXaxpDnEwGOGfWkVCYax8/s1600/Foreman-on-CentOS-7-Puppet-Classes_hackthesec.co.in.png" /></a></div>
Now, Click the Smart Class Parameter and then select server list on the left side. Tick the Override checkbox so Foreman manages the "server list" parameter of the class, then click Submit. 
 
Note: Change the default value if you want to use your own NTP servers. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXZoXA_9MEzpu4UOHKhsu9UBV6l0CUq-spQuzL6DY-ZkMjnqOmVtc3xcg28Vk5BD8VfJryTXGOsHnAsCKGo1u0yVKtiJhVf5ro39ykHGkZiXiQyxpjn_FgyuhKykHFhBdWFvuawGcUwjV7/s1600/Install-Foreman-on-CentOS-7-NTP-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXZoXA_9MEzpu4UOHKhsu9UBV6l0CUq-spQuzL6DY-ZkMjnqOmVtc3xcg28Vk5BD8VfJryTXGOsHnAsCKGo1u0yVKtiJhVf5ro39ykHGkZiXiQyxpjn_FgyuhKykHFhBdWFvuawGcUwjV7/s1600/Install-Foreman-on-CentOS-7-NTP-hackthesec.co.in.png" /></a></div>
Go to Hosts –> All Hosts, edit the Foreman host. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglwOe-_D-jNLqsVruubBzgq-9X-O2eAVPP-gMSE-CGnRsv1UWKTRz4k0IxGerzSN3t18_pJVXjBNzkLZYEo7D6lBAiosHtqxEA2yFIhd_vKP6F33Q3EYKBX-S5wYCocSGkhg9wIHUrozfe/s1600/Foreman-on-CentOS-7-Hosts-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglwOe-_D-jNLqsVruubBzgq-9X-O2eAVPP-gMSE-CGnRsv1UWKTRz4k0IxGerzSN3t18_pJVXjBNzkLZYEo7D6lBAiosHtqxEA2yFIhd_vKP6F33Q3EYKBX-S5wYCocSGkhg9wIHUrozfe/s1600/Foreman-on-CentOS-7-Hosts-hackthesec.co.in.png" /></a></div>
Go to Puppet Classes tab and expand the ntp module and click the + icon to add the ntp class to the host, then click submit. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-k4AmpLKh8hyMxTh3mlsW2mO80cIuJKGSib9p5LcIkOpi2PyRHCXogSuM1QCP2URV0Cr06iC1eSW-Rer3Sds8ZLO-ssJqZn0YxrMqW-_sKHrym8d91kjsHTQx7CBpHJd2oqWIhGdxJxGf/s1600/Foreman-NTP-Class-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-k4AmpLKh8hyMxTh3mlsW2mO80cIuJKGSib9p5LcIkOpi2PyRHCXogSuM1QCP2URV0Cr06iC1eSW-Rer3Sds8ZLO-ssJqZn0YxrMqW-_sKHrym8d91kjsHTQx7CBpHJd2oqWIhGdxJxGf/s1600/Foreman-NTP-Class-hackthesec.co.in.png" /></a></div>
This time, it will take you automatically to the host details page. Click on YAML, it will show the ntp class and the server list parameter, as passed to Puppet via the ENC (external node classifier) interface. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKw4ylmsjxEIspKuFzSyuu_EA3HsjvhUMkZCAwZmMkX6PjfBCCCU18fSpjUOIuoXZFKI1Mcy1-_UOmbpbrwCxkHf9l45bqH-ERJ_XPXHI_2OTjubMfWBa_6t1vwmq9oDBCpmVvRL8xoldO/s1600/Foreman--Host-Details-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKw4ylmsjxEIspKuFzSyuu_EA3HsjvhUMkZCAwZmMkX6PjfBCCCU18fSpjUOIuoXZFKI1Mcy1-_UOmbpbrwCxkHf9l45bqH-ERJ_XPXHI_2OTjubMfWBa_6t1vwmq9oDBCpmVvRL8xoldO/s1600/Foreman--Host-Details-hackthesec.co.in.png" /></a></div>
At last, run the following command on the Foreman host to see the NTP service automatically reconfigured by Puppet and the NTP module. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">puppet agent --test</pre>
Verify the installation of NTP module by going to Hosts –> All Hosts –> Select Foreman Host –> Reports –> Select latest report. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbcpIIQdXThaBW-YSklPnfYasHXcupHWJ4__GkBih0vECACehwNht6dr3NofO1HErq-xaoevqFAYF3vEq1nrSbbT36q3jQhUUquKFVjgUy6DfXi4oOlD6ufRd-9UfKlxx-CBZHnFQ3pVGu/s1600/Install-Foreman-on-CentOS-7-Report-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbcpIIQdXThaBW-YSklPnfYasHXcupHWJ4__GkBih0vECACehwNht6dr3NofO1HErq-xaoevqFAYF3vEq1nrSbbT36q3jQhUUquKFVjgUy6DfXi4oOlD6ufRd-9UfKlxx-CBZHnFQ3pVGu/s1600/Install-Foreman-on-CentOS-7-Report-hackthesec.co.in.png" /></a></div>
 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
 </div>