You’ve got internal hosts on RFC 1918 addresses (10.0.3.0/24, 172.16.0.0/12, etc.) behind a gateway, and you need SSH access to them from your workstation. Traditional solutions involve iptables port forwarding, non-standard ports, and a maintenance nightmare. ProxyCommand offers a cleaner approach: direct SSH connections to internal IPs that actually work. How ProxyCommand Works SSH’s ProxyCommand…
Gitolite provides fine-grained access control over Git repositories without the overhead of a full-featured platform. It uses SSH keys for authentication and handles per-user, per-repository, and even per-branch permissions through a simple configuration file. This guide covers a working installation on modern Linux distributions. Prerequisites Server: Linux (Ubuntu 20.04 LTS or later, Debian 11+, RHEL/Rocky…
This guide sets up OpenLDAP for centralized authentication and NFS with automount to provide unified home directories across a cluster. The setup uses modern OpenLDAP backends and current NFS4 best practices. System Environment Server: LDAP and NFS: 10.0.0.2, Fedora 41 x86_64 Base DN: dc=lgcpu1 Clients: Range: 10.0.0.1/24, Fedora 41 x86_64 LDAP Server Setup Package Installation…
The passwd command is designed for interactive use—it prompts for input rather than accepting passwords via stdin by default. When you need to set passwords programmatically (bulk user provisioning, CI/CD automation, remote administration), you need methods that bypass the interactive prompt. Using passwd with –stdin The –stdin flag tells passwd to read the new password…
Ubuntu locks the root account by default as a safety measure—it prevents accidental system damage and enforces audit trails through sudo. If you genuinely need direct root access, here’s how to enable it and the security tradeoffs involved. Set a root password The simplest approach: sudo passwd root You’ll be prompted to enter and confirm…
WordPress spam attacks come in three distinct categories: comment spam, user registration abuse, and brute-force login attempts. A layered defense using complementary plugins and server-level hardening handles all three effectively. Comment Spam Protection Akismet remains the industry standard for comment filtering. It ships with WordPress by default and uses machine learning trained on millions of…
SSH tunneling on Windows routes your traffic through a remote server over an encrypted connection, letting you bypass network restrictions and access resources as if you were on the remote network. The setup creates a SOCKS proxy that listens locally and forwards all traffic through the SSH tunnel. The traffic flow is straightforward: Your application…
The No-IP client automatically synchronizes your domain with your current public IP address. This is essential when hosting services on machines with DHCP-assigned IPs or when you need reliable DNS without paying for static IP assignments. Installation From Package Repositories Most distributions package noip2 in their standard repos: Debian/Ubuntu: sudo apt install noip2 Fedora/RHEL/CentOS: sudo…
The Nokia E71 includes native POP3 and IMAP support without requiring additional messaging apps. This guide covers manual configuration of both protocols with modern best practices. Initial Setup Navigate to Menu → Communic. → Messaging → Options → Settings → E-mail → Options → New mailbox → Start. When prompted “Allow connection?”, select NO. This…
Connecting to MySQL from JSP requires the mysql-connector-j JDBC driver and proper connection handling. The old mysql-connector-java artifact is deprecated—switch to mysql-connector-j, which supports MySQL 8.0+ with modern SSL/TLS, authentication plugins, and performance improvements. Dependency Management Add mysql-connector-j via Maven or Gradle. Maven is standard for modern Java projects: <dependency> <groupId>com.mysql</groupId> <artifactId>mysql-connector-j</artifactId> <version>8.4.0</version> </dependency> For…
Running the same command across dozens of servers is a routine task in infrastructure work. Whether you’re checking disk usage, deploying updates, or gathering system metrics, doing this manually wastes time and introduces errors. The straightforward approach: iterate through a list of hosts and execute commands via SSH on each one. Basic Shell Loop Approach…
SSH (Secure Shell) is the standard way to remotely access Linux systems. Whether you’re administering servers, deploying code, or managing infrastructure, SSH is essential knowledge. Windows Clients Built-in OpenSSH (Windows 10+) Modern Windows includes native SSH support. Open PowerShell or Command Prompt and connect directly: ssh username@hostname ssh username@192.168.1.100 ssh -p 2222 username@hostname No installation…
The uptime command is the quickest way to check how long your system has been running: $ uptime 22:19:29 up 10 days, 22:26, 5 users, load average: 0.00, 0.00, 0.01 This output shows: Current time: 22:19:29 System running for: 10 days, 22 hours, 26 minutes Active user sessions: 5 Load averages: 1-minute, 5-minute, and 15-minute…
This post documents jailbreaking procedures for legacy iOS devices (iPod Touch, early iPhone) using Spirit—an untethered jailbreak tool from the late 2000s. Modern iOS devices (2010 and later) use entirely different security models and jailbreak methods. This information is preserved for historical reference only and has no practical application to current iOS versions. About Spirit…
Google Apps accounts can connect to Google Talk through XMPP, and Pidgin handles this well. Here’s how to configure it properly. Adding the Account Open Pidgin and create a new account. You’ll configure it across two tabs. Basic Tab Settings: Setting Value Protocol XMPP Username eric (local part of your email) Domain example.com (your domain…
If you don’t already have a key pair, use Ed25519 — it’s faster and more secure than RSA: ssh-keygen -t ed25519 -C “your_email@example.com” For older systems that don’t support Ed25519, RSA with 4096 bits still works: ssh-keygen -t rsa -b 4096 Keys are stored in ~/.ssh/ by default: id_ed25519 (private) and id_ed25519.pub (public) for Ed25519,…
The mailx (or s-nail on modern distributions) command remains useful for scripted email delivery, particularly when you need to send alerts or notifications automatically. Gmail’s SMTP service works well for this, though it requires TLS authentication and specific configuration. Prerequisites Most Linux distributions include mailx or s-nail by default. On systems using s-nail (Ubuntu 20.04+,…
Xen remains in production use (AWS EC2, Citrix Hypervisor), though KVM has become the standard Linux hypervisor. This guide covers automating backups for file-backed Xen virtual machines. The approach adapts to other hypervisors like KVM with minimal modification. Architecture and Prerequisites The backup system assumes: Virtual machines stored in /lhome/xen/ with individual directories per VM…
Accessing a remote desktop environment on a Linux server securely requires proper tunneling. While SSH X11 forwarding works for single applications, VNC provides a full graphical desktop session. By combining VNC with an SSH tunnel, you encrypt all traffic and can work around firewall restrictions that only allow port 22. Why VNC Over SSH? VNC…
To connect to HKUST’s sMobileNet wireless network via NetworkManager, you’ll need to configure WPA2 Enterprise authentication with PEAP. This guide covers the required settings. Network Settings Configure the following parameters in NetworkManager: Basic Settings: SSID: sMobileNet Wireless security: WPA & WPA2 Enterprise Authentication method: Protected EAP (PEAP) Authentication Details: Anonymous identity: (leave empty) PEAP version:…