🔐 Karlo Luiten

Year: 2018

  • Reset ILO via SSH

    —

    by

    karlo
    in

    ssh username@ip cd /map1 reset

  • Auto root login Centos 7 / EL 7

    —

    by

    karlo
    in

    sed -i ‘/ExecStart/ s/agetty/agetty –autologin root/’ /etc/systemd/system/getty.target.wants/getty@tty1.service

  • Set up TOTP/Google authenticator on Centos 7

    —

    by

    karlo
    in

    Remember to keep an SSH session open (in a separate terminal) while doing this. yum install google-authenticator google-authenticator follow steps, save backup stuff vim /etc/ssh/sshd_config: ChallengeResponseAuthentication yes ; PermitRootLogin yes ; PasswordAuthentication yes vim /etc/pam.d/ssh, add “auth required pam_google_authenticator.so” after the auth line with password. Now you can also set up httpd to use this:…

  • LVM show pvmove status

    —

    by

    karlo
    in

    lvs -a -o +devices

  • Ovirt POSIX storage failing – Error while executing action Add Storage Connection: Problem while trying to mount target

    —

    by

    karlo
    in

    umount the thing really, check mount tune2fs -O ^has_journal /dev/mapper/hdd-direct echo 1 > /proc/scsi/sg/allow_dio

  • Found ArcSight parser functions

    —

    by

    karlo
    in

    Updated 2020-08-27 =__BASE64Decode=__LOOKUP=__byteArrayToIPv6=__byteArrayToIPv6String=__collection=__concatenate=__concatenateDeleting=__createGMTTimeStamp=__createLocalTimeStampFromGMT=__createLocalTimeStampFromGMTSecondsMillis=__createLocalTimeStampFromNTP=__createLocalTimeStampFromNanoSeconds=__createLocalTimeStampFromSecondsMicrosZone=__createLocalTimeStampFromSecondsSinceEpoch=__createLocalTimeStampStringFromGMTMilliseconds=__createLocalTimeStampStringFromLocalMilliseconds=__createOptionalTimeStampFromString=__createSafeLocalTimeStamp=__createTimeStamp=__createTimeStampByHexEncodedTime=__createTimeStampByStartTimeElapsed=__createTimeStampForOpsecStartTime=__doubleToAddress=__extractNTDomain=__extractNTUser=__extractProtocol=__foundScanHostName=__getCEFSeverity=__getDeviceDirection=__getIpV6AddressFromHighLow=__getIronMailActions=__getIronMailAlertImpact=__getIronMailEventStatus=__getLongMACAddressByHexString=__getLongMACAddressByString=__getManhuntPriority=__getNormalizedOS=__getNotZeroPort=__getOriginator=__getOriginatorFromSourcePort=__getProtocolName=__getProtocolNameFromString=__getSymantecNSPriority=__getTimeZone=__getTrendMicroHostName=__getTrendMircoUser=__getType=__getVendor=__getVulnerabilityCategory=__getXForceStringFor=__hexStringToAddress=__hexStringToIPV6Address=__hexStringToLong=__hexStringToString=__hourMinuteSecondsToSeconds=__ifAorBThenElse=__ifGreaterOrEqual=__ifThenElse=__ifThenElseAddress=__ifTrueThenElse=__ignoreZeroIp=__ignoreZeroMac=__integerConstant=__integerToAddressMcAfee=__integerToLong=__length=__longToDot4QuadAddress=__longToInteger=__longToString=__longToTimeStamp=__mazuProfilerDestinationAddress=__multilineRegexToken=__noDot4QuadStringsToAddress=__numberToAddress=__oneOf=__oneOfAddress=__oneOfDateTime=__oneOfHostName=__oneOfInteger=__oneOfLong=__oneOfMac=__oneOfNetBIOSName=__parseMultipleTimeStamp=__parseMutableTimeStamp=__parseMutableTimeStampSilently=__parseSignedLong=__regexToken=__regexTokenAsAddress=__regexTokenAsInteger=__regexTokenAsLong=__regexTokenFindAndJoin=__regexTokenNoWarning=__replaceAll=__replaceFirst=__safeToDate=__safeToDouble=__safeToInteger=__safeToLong=__safeToRoundedLong=__setYearToCurrentYear=__signedNumberToAddress=__simpleMap=__split=__splitAsAddress=__splitAsInteger=__stringConstant=__stringToIPv6Address=__stringTrim=__subParse=__sum=__toGMTTimeStamp=__toHex=__toLocalTimeStamp=__toLongTimeStamp=__toLowerCase=__toUpperCase=__uri=__useCurrentYear=__variableTypeToAddress=__verifyHexString

  • Linux screencasting with overlays and all: OBS

    —

    by

    karlo
    in

    OBS is awesome, just learned about it today. https://obsproject.com/

  • Tail: prepend file name to tailing output (bash)

    —

    by

    karlo
    in

    cd /opt/arcsight/connectors/; tail -f *_con1_rsyslog_paloalto_2500*/current/logs/agent.out.wrapper.log | awk ‘/^==> / {a=substr($0, 5, length-8); next} {print a”:”$0}’

  • Node Rocketchat npm fibers not running ( versionGLIBCXX_3.4.20 not found ) on centos/rhel

    —

    by

    karlo
    in

    cd /opt/Rocket.Chat/programs/server/node_modules/fibers/ ln -s /usr/local/n/versions/node/8.9.3/bin/node-gyp /bin/ node-gyp rebuild cp build/Release/fibers.node bin/linux-x64-57/fibers.node https://github.com/RocketChat/Rocket.Chat/issues/9167#issuecomment-352804066

  • Personal (manual) template for internal hosts

    —

    by

    karlo
    in

    This might help someone else, too. These are the things I do for an internal VM (on my hypervisor at home). This document will/might evolve over time. Default OS is centos7. yum -y install epel-release && yum -y update && yum -y install wget vim htop tcpdump yum-cron yum-utils ntp figlet lynis bind-utils bash-completion mlocate…

  • ArcSight upgrade/install “Unable to carry out the checkLocalHost check.”

    —

    by

    karlo
    in

    fix: mount -o remount,rw,exec /tmp

  • Bash suppress all output of script (echo off – style)

    —

    by

    karlo
    in

    exec 1>/dev/null 2>/dev/null at the top of your script