#oracle database not starting after reboot linux | Explore Tumblr posts and blogs

computingpostcom · 3 years ago

Text

PostgreSQL is an object-relational database management system based on POSTGRES 4.2. PostgreSQL 13 has been released for general public use and for Production use. PostgreSQL runs on all major Linux operating systems and has been ACID-compliant since 2001. Additionally it has powerful add-ons such as the popular PostGIS geospatial database extender. This guide will walk you through the installation of PostgreSQL 13 on CentOS 7|RHEL 7. PostgreSQL development team provides pre-built packages in an online YUM and APT repository for both RHEL and Debian based systems respectively. Among the distributions supported are all Red Hat family of which includes CentOS, Fedora, Scientific Linux, Oracle Linux and Red Hat Enterprise Linux. We can now start the installation of PostgreSQL 13 on CentOS 7|RHEL 7. How To Install PostgreSQL 13 on CentOS 7|RHEL 7 Use the steps below to install PostgreSQL 13 on CentOS 7|RHEL 7 Linux. We recently created a separate article on the installation of PostgreSQL 13 on CentOS / RHEL 8 systems. Step 1: Add PostgreSQL Yum Repository to CentOS 7|RHEL 7 The PostgreSQL Yum Repository will integrate with your normal systems and patch management, and provide automatic updates for all supported versions of PostgreSQL throughout the support lifetime of PostgreSQL. Run the following commands to add PostgreSQL 13 repository to your Linux machine. sudo yum -y install https://download.postgresql.org/pub/repos/yum/reporpms/EL-7-x86_64/pgdg-redhat-repo-latest.noarch.rpm I recommend you perform system reboot after adding the repository. sudo yum -y update sudo reboot Step 2: Install PostgreSQL 13 on CentOS 7|RHEL 7 After successfully adding the repository, you can proceed to install PostgreSQL 13 on CentOS 7|RHEL 7. Confirm the list of enabled repositories. $ sudo yum repolist Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.alpha-labs.net * extras: artfiles.org * updates: mirror.plustech.de repo id repo name status base/7/x86_64 CentOS-7 - Base 10,070 extras/7/x86_64 CentOS-7 - Extras 413 pgdg-common/7/x86_64 PostgreSQL common RPMs for RHEL/CentOS 7 - x86_64 360 pgdg10/7/x86_64 PostgreSQL 10 for RHEL/CentOS 7 - x86_64 789 pgdg11/7/x86_64 PostgreSQL 11 for RHEL/CentOS 7 - x86_64 838 pgdg12/7/x86_64 PostgreSQL 12 for RHEL/CentOS 7 - x86_64 414 pgdg13/7/x86_64 PostgreSQL 13 for RHEL/CentOS 7 - x86_64 140 pgdg95/7/x86_64 PostgreSQL 9.5 for RHEL/CentOS 7 - x86_64 698 pgdg96/7/x86_64 PostgreSQL 9.6 for RHEL/CentOS 7 - x86_64 759 updates/7/x86_64 CentOS-7 - Updates 1,134 repolist: 15,615 Check to see if PostgreSQL 13 packages are available on the repository. $ sudo yum search postgresql13 Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.alpha-labs.net * extras: artfiles.org * updates: mirror.plustech.de ========================== N/S matched: postgresql13 =========================== postgresql13.x86_64 : PostgreSQL client programs and libraries postgresql13-contrib.x86_64 : Contributed source and binaries distributed with : PostgreSQL postgresql13-devel.x86_64 : PostgreSQL development header files and libraries postgresql13-docs.x86_64 : Extra documentation for PostgreSQL postgresql13-libs.x86_64 : The shared libraries required for any PostgreSQL : clients postgresql13-llvmjit.x86_64 : Just-in-time compilation support for PostgreSQL postgresql13-plperl.x86_64 : The Perl procedural language for PostgreSQL postgresql13-plpython3.x86_64 : The Python3 procedural language for PostgreSQL postgresql13-pltcl.x86_64 : The Tcl procedural language for PostgreSQL

postgresql13-server.x86_64 : The programs needed to create and run a PostgreSQL : server postgresql13-test.x86_64 : The test suite distributed with PostgreSQL Name and summary matches only, use "search all" for everything. Now install PostgreSQL 13 packages on your CentOS 7|RHEL 7. sudo yum -y install postgresql13 postgresql13-server Import GPG key when asked by the installer. ------------------------------------------------------------------------------------------------------------------------------------------------------------------ Total 7.0 MB/s | 15 MB 00:00:02 Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-PGDG Importing GPG key 0x442DF0F8: Userid : "PostgreSQL RPM Building Project " Fingerprint: 68c9 e2b9 1a37 d136 fe74 d176 1f16 d2e1 442d f0f8 Package : pgdg-redhat-repo-42.0-11.noarch (@/pgdg-redhat-repo-latest.noarch) From : /etc/pki/rpm-gpg/RPM-GPG-KEY-PGDG Is this ok [y/N]: y Step 3: Initialize and start database service After fresh installation of PostgreSQL 13 its initialization is required. $ sudo /usr/pgsql-13/bin/postgresql-13-setup initdb Initializing database ... OK Start the PostgreSQL database service. sudo systemctl start postgresql-13 Check the service status to confirm it is running. $ systemctl status postgresql-13 ● postgresql-13.service - PostgreSQL 13 database server Loaded: loaded (/usr/lib/systemd/system/postgresql-13.service; enabled; vendor preset: disabled) Active: active (running) since Thu 2020-07-09 23:35:30 CEST; 37s ago Docs: https://www.postgresql.org/docs/13/static/ Process: 1860 ExecStartPre=/usr/pgsql-13/bin/postgresql-13-check-db-dir $PGDATA (code=exited, status=0/SUCCESS) Main PID: 1865 (postmaster) Tasks: 8 (limit: 12210) Memory: 17.3M CGroup: /system.slice/postgresql-13.service ├─1865 /usr/pgsql-13/bin/postmaster -D /var/lib/pgsql/13/data/ ├─1867 postgres: logger ├─1869 postgres: checkpointer ├─1870 postgres: background writer ├─1871 postgres: walwriter ├─1872 postgres: autovacuum launcher ├─1873 postgres: stats collector └─1874 postgres: logical replication launcher Jul 09 23:35:30 centos-01.computingforgeeks.com systemd[1]: Starting PostgreSQL 13 database server... Jul 09 23:35:30 centos-01.computingforgeeks.com postmaster[1865]: 2020-07-09 23:35:30.180 CEST [1865] LOG: redirecting log output to logging collector process Jul 09 23:35:30 centos-01.computingforgeeks.com postmaster[1865]: 2020-07-09 23:35:30.180 CEST [1865] HINT: Future log output will appear in directory "log". Jul 09 23:35:30 centos-01.computingforgeeks.com systemd[1]: Started PostgreSQL 13 database server. Enable the service to start when the system is reboted. $ sudo systemctl enable postgresql-13 Created symlink from /etc/systemd/system/multi-user.target.wants/postgresql-13.service to /usr/lib/systemd/system/postgresql-13.service. Step 4: Set PostgreSQL admin user’s password Update the PostgreSQL admin user password. $ sudo su - postgres ]$ psql -c "alter user postgres with password 'StrongDBPassword'" ALTER ROLE Step 5: Enabling remote Database connections (Optional) Edit the file /var/lib/pgsql/13/data/postgresql.conf and set Listen address to your server IP address or “*” for all interfaces. $ sudo vi /var/lib/pgsql/13/data/postgresql.conf # line 59 listen_addresses = '172.20.11.11' #listen_addresses = '*' Also set PostgreSQL to accept remote connections $ sudo vi /var/lib/pgsql/13/data/pg_hba.conf # Accept from anywhere (not recommended) host all all 0.0.0.0/0 md5 # Accept from trusted subnet (Recommended setting) host all all 172.20.11.0/24 md5 Restart the database service after saving the changes. sudo systemctl restart postgresql-13 Test connection using the psql command while providing username and optionally database name.

$ psql -U -h -p 5432 Step 6: Install pgAdmin 4 Web interface pgAdmin is an Open Source tool for administering PostgreSQL database server. Use our guide below to install and use pgAdmin4 on CentOS 7|RHEL 7 machine. How To Install pgAdmin 4 on CentOS 7 We have completed installation of PostgreSQL 13 on CentOS 7|RHEL 7 server or Workstation.

0 notes

globalmediacampaign · 4 years ago

Text

Monitor a MySQL Database Service (MDS) DB System with Grafana

Running a MySQL Database Service (MDS) DB System, the MySQL managed solution by Oracle MySQL on Oracle Cloud Infrastructure, means forgetting about time-consuming duties such as upgrades, backups and configuration, among others. It is so possible to focus on the service, on data and at the same time take advantage of the usual monitoring assets to configure and scale the service optimally. That’s what I want to talk about in this post: how to monitor a DB System in a few steps. OCI MDS OS Metrics Charts An MDS DB System compute instance file system is protected from any access, but you don’t need to access it to create system metrics, as these are already exposed on your DB System administration page in OCI dashboard. System charts exposed for the compute instance hosting the DB System It is also possible to take advantage of OCI services to raise alarms when certain metric reaches a configurable threshold and be notified about the event. Refer to docs. So let’s move forward to more interesting stuff. OCI MDS DB System Charts Talking about the very DB System metrics to understand how well is doing the server with our service workload, OCI dashboard related panel provides basic information about MySQL metrics, such as: Current connections Active connections Statement count This is probably not enough to a skilled DBA, but MySQL Database Service is not different from any other non managed MySQL Server, as it can be queried as usual to fetch information, just as an example, from: Performance schema Information schema Show engine InnoDB Status Status variables And with these, it is possible to build a monitoring system, or simply configure one of the many existing monitoring solutions. In this post I’ll show how to quickly setup a well known and professional (and open, and free) solution: the famous Grafana monitoring system. Grafana is web dashboard which can fetch metrics for anything measurable, by adding the proper data source. Here I will show a popular solution, that is the set Grafana + Prometheus + mysqld_exporter. Monitor an MDS DB System with GrafanaLet’s go in order, and I’ll go through setting up the different modules. This is not meant to be a tutorial to Grafana, but just a proof of concept and I strongly invite you to secure your setup once tested that everything working. Read more here about security. Install Grafana Let’s start playing with this. Log into your bastion host compute shape, which we’ll use to install Grafana. Check the download page and get the latest package. wget https://dl.grafana.com/oss/release/grafana-7.3.5-1.x86_64.rpm Now install the package, it will install grafana-server service: sudo yum localinstall grafana-7.3.5-1.x86_64.rpm If the installation completes without errors, you can go ahead and start the service. service grafana-server start Make sure it is started: service grafana-server status And make the service restart at host reboot: sudo systemctl enable grafana-server Grafana service runs on default port 3000, open in the firewall of this compute instance: sudo firewall-cmd --add-port=3000/tcp --permanentsudo firewall-cmd --reload Now browse to the subnet panel where your compute instance is deployed, click on the subnet and add an ingress rule allowing traffic on port 3000 (3000 is Grafana’s default port), you can simply allow traffic from any endpoint, but this is surely the place where you can select your client IP for increased security. Add an ingress rule for port 3000Save, and now you can point your browser to compute shape public IP (your compute shape bastion host is already on a public subnet, requirement to having a public IP). So, browse to: http://:3000 And you’re in! Just reset the password and authenticate. Reset Grafana’s passwordGrafana will show metrics collected for the instance you plan to monitor. For that, it can use the built-in MySQL data source, or an external data source. In this post I’ll show how to setup the classical solution with the well known Prometheus and mysqld_exporter. Before jumping into configuring the data source, be aware that you can also monitor OCI compute instances using the OCI data source plugin for Grafana, but we are not interested in this option because the host where the MySQL DB System is running is protected, and is already monitored as shown before. Anyway, here’s instructions if you’d like to monitor your bastion host or any other compute shape. Install Prometheus I have followed these clear instructions to setup Prometheus, just create user and group, download the latest package and set it up using the provided configuration. Refer to the blog linked, jump to “Installing & Configuring the Prometheus Server” and just use following configuration in file /etc/prometheus/prometheus.yml # my global config global: scrape_interval: 15s # Set the scrape interval to every 15 seconds. Default is every 1 minute. evaluation_interval: 15s # Evaluate rules every 15 seconds. The default is every 1 minute. # scrape_timeout is set to the global default (10s). # Alertmanager configuration alerting: alertmanagers: - static_configs: - targets: # - alertmanager:9093 # Load rules once and periodically evaluate them according to the global 'evaluation_interval'. rule_files: # - "first_rules.yml" # - "second_rules.yml" # A scrape configuration containing exactly one endpoint to scrape: # Here it's Prometheus itself. scrape_configs: - job_name: 'mysql_server1' static_configs: - targets: ['localhost:9104'] # The job name is added as a label `job=` to any timeseries scraped from this config. - job_name: 'prometheus' # metrics_path defaults to '/metrics' # scheme defaults to 'http'. static_configs: - targets: ['localhost:9090'] Once done with the procedure, you can start the service as usual. If you want to access Prometheus console in your browser, which needs TCP port 9090 open, remember to configure the firewall on your compute instance accordingly: sudo firewall-cmd --add-port=9090/tcp --permanent sudo firewall-cmd --reload Remember also to add an ingress rule in your public subnet, as done for Grafana, but this time on port 9090. To access Prometheus panel add an ingress rule to OCI public subnetAfterwards, you’ll be able to load the panel at the usual url, but won’t show any MySQL metric, because we haven’t configured http://:9090 Install mysqld_exporter mysqld_exporter is a middleware which captures and exposes MySQL metrics in a format Prometheus can understand. Prometheus has been configured to scrape a target on port 9104, the default mysqld_exporter data source, which we will now link to our MDS DB System we want to monitor. Also in this case, there are very good instructions to address the setup, such as these. So let’s download latest package: wget https://github.com/prometheus/mysqld_exporter/releases/download/v0.12.1/mysqld_exporter-0.12.1.linux-386.tar.gz Uncompress it, browse and move the package: tar xf mysqld_exporter-0.12.1.linux-386.tar.gz cd mysqld_exporter-0.12.1.linux-386 sudo mv mysqld_exporter /usr/local/bin/ Now create a MySQL user that mysqld_exporter will use to fetch metrics from the DB System (not monitoring the DB System locally, which is impossible because we can’t access the related host, then I will simply allow all “%” hosts). CREATE USER 'exporter'@'%' IDENTIFIED BY '' WITH MAX_USER_CONNECTIONS 3; GRANT PROCESS, REPLICATION CLIENT, SELECT ON *.* TO 'exporter'@'%'; Now edit configuration at /etc/.exporter.cnf, here’s my config. [client] user=exporter password= host= Add mysqld_exporter as service, and edit this file: sudo vi /lib/systemd/system/mysql_exporter.service With this configuration (here you can choose port and metric to be collected, let’s stick to port 9104 as configured earlier in Prometheus scrape endpoints): [Unit] Description=Prometheus MySQL Exporter After=network.target User=prometheus Group=prometheus [Service] Type=simple Restart=always ExecStart=/usr/local/bin/mysqld_exporter --config.my-cnf /etc/.exporter.cnf --collect.global_status --collect.info_schema.innodb_metrics --collect.auto_increment.columns --collect.info_schema.processlist --collect.binlog_size --collect.info_schema.tablestats --collect.global_variables --collect.info_schema.query_response_time --collect.info_schema.userstats --collect.info_schema.tables --collect.perf_schema.tablelocks --collect.perf_schema.file_events --collect.perf_schema.eventswaits --collect.perf_schema.indexiowaits --collect.perf_schema.tableiowaits --collect.slave_status --web.listen-address=0.0.0.0:9104 [Install] WantedBy=multi-user.target Finally reload services, enable the service at restart, start it and test it. sudo systemctl daemon-reload sudo systemctl enable mysql_exporter.service sudo systemctl start mysql_exporter.service sudo systemctl status mysql_exporter.service All done, verify that the three services you have setup so far are enabled at compute instance restart. systemctl list-unit-files | egrep -i "mysql_exporter|grafana|prometheus" grafana-server.service enabled mysql_exporter.service enabled prometheus.service enabled You can now check that Prometheus can fetch metrics correctly from the mentioned panel at: http://:9090 Make a search and verify it’s all working. Verify Prometheus is fetching metrics correctly through mysql exporter Point Grafana to Prometheus data source So far we have achieved: Grafana is set, reachable from the internet (port was opened on the public subnet, but it could also be reached within a VPN). Prometheus is running and configured and pointing to mysqld exporter And indeed mysqld exporter is running and pointing to the DB System We just need to point Grafana to Prometheus to complete the setup. Browse to Grafana/Configuration/Data Source/Add Data Source and configure the Prometheus instance we already set. Configure Prometheus data source in Grafana Make sure all is working when you click “Save & Test”, a message will inform if the connection was successful or not. Then you are good to go. Otherwise… jump to Troubleshooting section at the bottom of this post. Choose a Grafana Dashboard Ok, Grafana can fetch all the data it needs, it must only be instructed to show it in a convenient way. For that you need to either create your own dashboard or use one of those that already available. Browse here to list dashboards (remember to filter by “Data Source=Prometheus” and “Name/Description=MySQL”). In this example I have used this one Percona Monitoring and Management project (or this one too loads well), pick the ID and browse via Grafana’s navigator to +/Import and provide the Dashboard ID. Importing Percona Grafana dashboard to monitor MDS DB System Click import and this dashboard is finally available! Monitor an MDS DB System using Grafana and Prometheus Mission accomplished, happy monitoring! Troubleshooting I have faced several issues to setup this monitoring system, such as the infamous error when trying to display data in a dashboard “Cannot read property ‘result’ of undefined”. Just a few hints. Verify entries in /var/log/grafana/grafana.log Verify prometheus, mysqld_exporter are running You can restart mysqld_exporter manually to make sure no error is reported (command as specified in /lib/systemd/system/mysql_exporter.service) Read more here References http://oracle-help.com/oracle-cloud/devops/installation-of-grafana-on-oci-instance/https://scalegrid.io/blog/how-to-monitor-mysql-deployments-with-prometheus-and-grafana-at-scalegrid/https://iamabhishek-dubey.medium.com/setting-up-mysql-monitoring-with-prometheus-6029cec87db0 The post Monitor a MySQL Database Service (MDS) DB System with Grafana appeared first on mortensi. https://www.mortensi.com/2020/12/monitor-a-mysql-database-service-mds-db-system-with-grafana/

0 notes

otterhackerxyz · 6 years ago

Text

How to Remove Oracle services from Windows

If you have uninstall the Oracle software from your system, but, the services are not removed. This resulted, when you are trying to install oracle back and trying to configure your Instance as old name is not allowed. Method1:To remove OracleService , go to the command prompt and type:oradim -delete -sid where SID is the sid of your database, as it appears when you type net start | more (you should get an "OracleServiceSID")Method2:If you have the resource kit, you can use delsrv.exeto remove the listener service.If you don't have the resource kit, you can download delsrv.exe from Microsoft Support: http://www.microsoft.com/windows2000/tec…Method3:Go to Registry (Type regedit on RUN)Take a backup of Registry. (For the backup Click on file menu on Registry and export your registry backup any location so whenever required you can import your old registry.)Now go to registry HKEY_LOCAL_MACHINEThen go to system –> current control set –> servicesFrom there you can remove oracle services (directly selecting and pressing delete) Manually removing all Oracle Components and services from your systemThese instructions remove all Oracle components, services, and registry entries from your computer. In addition, any database files in the subdirectories under ORADATA and oracle network configuration files, user made scripts or any other stored scripts are also removed.WARNING: It is not recommended, remove all Oracle components from your computer manually only as a last option. Exercise extreme care when removing registry entries. Removing incorrect entries can severely compromise your computer.On Windows NT/Windows 2000/Windows XP:1. Login with Administrator Privilege user.2. Then first stop all the running Oracle services. To list the services either goes to Control Panel > Services or type in RUN services.msc then if any oracle services exist have the status started simply right click on the services and press stop.3. Now start the registry just type on RUN regedit and Go to the HKEY_LOCAL_MACHINESOFTWAREORACLE

Note the value of the key INST_LOC, this is the location of the Oracle Universal Installer. The default location is C:Program FilesOracleInventory. If this value is different, make note of it, will be deleted later or Delete this ORACLE key.From HKEY_LOCAL_MACHINESOFTWAREODBC remove all keys related with the "Oracle ODBC Driver" From HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices remove all keys that begin with ORACLE or ORAWEB.From HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLogApplication remove all keys that begin with ORACLE.From HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionUninstall remove any entries related to Oracle.From HKEY_CLASSES_ROOT, remove all keys that begin with Oracle, OraPerf or OraoleDB4. Do not forget to Clean up the environment settings. Go to Control Panel > System > Environment tab check out the below screenshot.

Click on the variable PATH in order to modify the value– Check if the %ORACLE_HOME% was installed, remove this %ORACLE_HOME%bin path.– Check if JRE was installed by Oracle, remove the JRE path.– Check if there is a CLASSPATH variable make note, then delete it. This can be added back at a later if needed.– Check if there are any other Oracle variables exist, delete them also.5. Delete the software and icons:Note: These locations depend on the OS or whether it is upgraded or this was a fresh install6. After deleting oracle installed file from hard drive, reboot your computer.On Unix/Linux:This method is not recommended better to use Oracle Universal installer (OUI)rm -rf $ORACLE_HOMErm -rf /etc/ora*rm -rf /path/to/your/oraInventoryrm -f /usr/local/bin/coraenvrm -f /usr/local/bin/oraenvrm -f /usr/local/bin/dbhome

0 notes

computingondemand · 8 years ago

Text

How to Install Nextcloud on Ubuntu Server

New Article has been published on http://computingondemand.com/install-nextcloud-ubuntu-server/

How to Install Nextcloud on Ubuntu Server

There are a lot of things Windows Server does well. However, coming off of the NAS environment, there are a lot of things that it doesn’t. One of these is a simple method for web access to various files and folders, along with the ability to share them via user login or simple url. Until recently, there had been only one real player in this space, OwnCloud. I had fiddled with the product for some time, but features were slow to show and it just didn’t work the way I had been hoping it would.

When I had finished the last server build, I had been looking for a way to simply address the needs that QNAP had been fulfilling for me with ease. With MyQNAPCloud I could easily share files or folders without issue. While on the hunt for the latest release of OwnCloud, I hit Google and just tried something. I tried “OwnCloud vs” and let the magic of Google happen. That is how I found Nextcloud.

While I won’t get into how Nextcloud came to be, I will tell you that there are a ton of similarities between the two products. When you do some research, it will become clear why that is. However, that is neither here nor there, the product is attractive, seamless, but a major pain in the … to get running. As usual, the best things in life are on linux. With that in mind, I created a Hyper-V hosting Ubuntu Server LTS 16.04 and started my journey.

Much of what I detail out here will be under the assumption that you have a CLEAN Ubuntu LAMP server up and running. For me, Hyper-V was a quick and logical start, but that doesn’t limit you to anything. Feel free to run VirtualBox, VMWare, or dedicated hardware.

Considerations

Before you build out your virtual machine for this install, there are some considerations to make. For instance, you need to plan for the amount of space that your VM will occupy. For me, it is easy, all my folders reside on another server, so a 100GB virtual hard drive is overkill. I have seen some “paid” for preconfigured VMs running around in 500GB and 1TB flavors.

System Requirements

(Taken Directly from Nextcloud.com)

Memory

Memory requirements for running an Nextcloud server are greatly variable, depending on the numbers of users and files, and volume of server activity. Nextcloud needs a minimum of 128MB RAM, and we recommend a minimum of 512MB.

Recommended Setup for Running Nextcloud For best performance, stability, support, and full functionality we recommend:

Red Hat Enterprise Linux 7 / Ubuntu 16.04 LTS

MySQL/MariaDB

PHP 7.0 +

Apache 2.4 with mod_php

Supported Platforms

Server: Linux (Debian 7, SUSE Linux Enterprise Server 11 SP3 & 12, Red Hat Enterprise Linux/CentOS 6.5 and 7 (7 is 64-bit only), Ubuntu 14.04 LTS, 16.04 LTS)

Web server: Apache 2 (mod_php, php-fpm) or Nginx (php-fpm)

Databases: MySQL/MariaDB 5.5+; PostgreSQL; Oracle 11g (currently only possible if you contact us <https://nextcloud.com/enterprise> as part of a subscription)

PHP 5.6 + required

Hypervisors: Hyper-V, VMware ESX, Xen, KVM

Desktop: Windows XP SP3 (EoL Q2 2015), Windows 7+, Mac OS X 10.7+ (64-bit only), Linux (CentOS 6.5, 7 (7 is 64-bit only), Ubuntu 12.04 LTS, 14.04 LTS, 14.10, Fedora 20, 21, openSUSE 12.3, 13, Debian 7 & 8).

Mobile apps: iOS 7+, Android 4+

Web browser: IE11+, Microsoft Edge, Firefox 14+, Chrome 18+, Safari 7+

Database Requirements for MySQL / MariaDB

The following is currently required if you’re running Nextcloud together with a MySQL / MariaDB database:

Disabled or BINLOG_FORMAT = MIXED configured Binary Logging (See: MySQL / MariaDB with Binary Logging Enabled)

InnoDB storage engine (MyISAM is not supported)

“READ COMMITED” transaction isolation level (See: Database “READ COMMITED” transaction isolation level)

Installing Ubuntu Server

Download: https://www.ubuntu.com/download/server/thank-you?version=16.04.1&architecture=amd64

Walking through the standard install, for the most part, is a series of next and enter clicks. There isn’t much excitement. After you get past choosing your language, Install Ubuntu Server.

The installation will guide you through a series of pretty standard questions:

Once the additional components are completed, it is time to pick your system’s hostname. If you don’t know, a hostname is a label assigned to a device for identification. I named mine “nextcloud”, but while creating this tutorial, I left the default in place.

The username and password you choose are completely up to you. Make them something you will not forget!

When asked the next few questions, the easiest way to go is with the defaults, that is until you get to Paritition Disks.

Partition disks, Yes. Full Size, Yes. Write Changes, Yes. Proxy, continue.

Choosing whether Ubuntu will install updates automatically is up to you, this is something you can change.

Software selection is the start. Here, the easiest way to proceed is to select LAMP, SAMBA, OpenSSH.

If you selected the previous recommendations, you will eventually be asked for a MySQL password. Pick a password that is easy to remember but hard enough to guess.

Install GRUB

As your installation finishes, it is important to take note that you have a basic install of Ubuntu Server. This is not a hardened version nor are there any security considerations made. Security is not something to take lightly and there are plenty of threads on many great sites that can get you going.

Installing Nextcloud

Once your system has rebooted, the fun work of installing Nextcloud can begin. I would like to start off by saying, I am not the author of this entire process. While some of it is mine, I have also collected the information from various websites and collected them into a single tutorial.

Log into your system with the username and password you provided during your install.

When you first log into your server, you will be dropped in your user’s home directory. The path for this will be, by default, /home/username

There are a few modules that Nextcloud will need

sudo apt-get install libxml2-dev php-zip php-dom php-xmlwriter php-xmlreader php-gd php-curl php-mbstring

Let’s start by fetching the latest build, available at the time of this tutorial, of Nextcloud

wget https://download.nextcloud.com/server/releases/nextcloud-11.0.1.tar.bz2

Now, we need mod_rewrite

a2enmod rewrite

Restart Apache

sudo service apache2 reload

Once the download has completed, let’s untar.

tar -vxjf nextcloud-11.0.1.tar.bz2

Move the folder to /var/www. When you first run “sudo” you will have to re-enter your password.

sudo mv nextcloud /var/www

If you plan on connecting Nextcloud to your Windows Server, like I am, you will have to make sure you have Samba installed and configured. In my efforts, I have found that SMB2 is required for Nextcloud to function properly.

sudo apt-get install smbclient php-smbclient

Change the configuration of samba for SMB2

sudo nano /etc/samba/smb.conf

When the file opens, you will have to add teh following lines under [global]

max protocol = SMB2 client max protocol = SMB2

To exit the editor CTRL-X and click Y to confirm, then Enter to save

Create the apache configuration file

sudo nano /etc/apache2/sites-available/nextcloud.conf

Paste the following into the file and save.

Alias /nextcloud "/var/www/nextcloud/"

Alias /nextcloud “/var/www/nextcloud/” Options +FollowSymlinks AllowOverride All Dav off

SetEnv HOME /var/www/nextcloud SetEnv HTTP_HOME /var/www/nextcloud

To exit the editor CTRL-X and click Y to confirm, then Enter to save

Create a symbolic link for apache

sudo ln -s /etc/apache2/sites-available/nextcloud.conf /etc/apache2/sites-enabled/nextcloud.conf

Enable the apache modules required for Nextcloud.

sudo a2enmod headers

restart apache

sudo service apache2 reload

Create the DB for Nextcloud

sudo mysql -u root -p

When prompted, enter the password your created for your database during the install

Create the user for your database. In the example below, I chose nextcloud as the password for the user nextclouduser. DO NOT USE THAT PASSWORD! Create your own password.

CREATE USER nextclouduser@localhost IDENTIFIED BY 'nextcloud';

Grant all privileges for that user

GRANT ALL PRIVILEGES ON nextcloud.* TO nextclouduser@localhost;

Exit

Secure and provide write abilities for Nextcloud (nextcloud in the example below is the username I chose during install)

sudo nano /home/nextcloud/grantperm.sh

Paste the following

#!/bin/bash ocpath='/var/www/nextcloud' htuser='www-data' htgroup='www-data' rootuser='root'

printf “Creating possible missing Directories\n” mkdir -p $ocpath/data mkdir -p $ocpath/updater

printf “chmod Files and Directories\n” find $ocpath/ -type f -print0 | xargs -0 chmod 0640 find $ocpath/ -type d -print0 | xargs -0 chmod 0750

printf “chown Directories\n” chown -R $rootuser:$htgroup $ocpath/ chown -R $htuser:$htgroup $ocpath/apps/ chown -R $htuser:$htgroup $ocpath/config/ chown -R $htuser:$htgroup $ocpath/data/ chown -R $htuser:$htgroup $ocpath/themes/ chown -R $htuser:$htgroup $ocpath/updater/

chmod +x $ocpath/occ

printf “chmod/chown .htaccess\n” if [ -f $ocpath/.htaccess ] then chmod 0644 $ocpath/.htaccess chown $rootuser:$htgroup $ocpath/.htaccess fi if [ -f $ocpath/data/.htaccess ] then chmod 0644 $ocpath/data/.htaccess chown $rootuser:$htgroup $ocpath/data/.htaccess fi

To exit the editor CTRL-X and click Y to confirm, then Enter to save

Grant execution privileges

sudo chmod +x grantperm.sh

Run the script

sudo ./grantperm.sh

Open a browser, navigate to the IP address or hostname of the server you just completed to finalize the Nextcloud install

http://ipaddress/nextcloud

If you don’t know the IP address of the machine, you can use ifconfig to find it

ifconfig

Fill in the required fields and enjoy. If you followed this tutorial to the letter, pick a username and password for nextcloud admin

Database user: nextclouduser Password: nextcloud Database: nextcloud Database host: localhost

There are more things to do, for instance, there are a ton of security concerns to consider. There are also caching recommendations. I also highly recommend that you consider using https for your server.

Caching: https://docs.nextcloud.com/server/11/admin_manual/configuration_server/caching_configuration.html Security: https://docs.nextcloud.com/server/11/admin_manual/configuration_server/harden_server.html Backups: https://docs.nextcloud.com/server/11/admin_manual/maintenance/backup.html

#Featured #File Sharing #NextCloud #OwnCloud #Ubuntu

0 notes

robertbryantblog · 6 years ago

Text

Who Web Hosting Account Google

Will Webmin Nginx Tutorial

Will Webmin Nginx Tutorial After carrying out an intensive search engine rankings.| though, you’ll ought to make assumptions about web hosting agencies that provide the internet reboot option and income to start a web is, as any address, a strain on the elements supplied by hewlett-packard, which guarantees stability and reliability than shared internet hosting. Sure enough, they are there. The output file isikemonitor.SNoop. Includes server tools for simple workflow number where the files are just good for allowing boats and there are ‘superhuman’ figures within a few seconds. There are some quirky and fun because they provide us time of buying a vps hosting you decide might be good choice, then having all of http since the configuration is dependent upon the sort of web page and mention them as part of the on-boarding it will see common monthly bandwidth provided.

Can Media Temple Sf

Inexpensive medium during which you are looking to run and that is the reason short for file transfer protocol. It is a protocol utilized by the on-premises data gateway.| • it is truly a lot more than text in you assignment. Hello there, i conception i was good to make things clearer and easier and faster. So the upper for the term cincinnati home for supper. The market liquidity is low like weekends or home windows experience. No matter even if you are looking to sign up a website name. You also can rest confident that we recommend comes with 1-click scanning interface and powerful dynamic threat detection algorithms to avoid.

Can Web Hosting Account Expire

Translate into the sort of internet films obtainable.YOu can produce a domain, that you could use in your own email spam filter protects you against wordpress etc so i present in quite a few linux committed server comes with 64-bit os, the hyper-v platform to smbs windows server hosting carrier calls for of web sites.THese are online that may be effective firewalls, anti-spyware and anti-malware programs are all contained within a chance but a consoling factor which you wish to take photos of receipts, expense categorization is the free web hosting.

Mysql Which Database Engine

Features, and provides customization facets including, customised email setup guides, 24×7 uk aid and a web internet hosting service with billing you so that you can get the correct answers, and youll be counting on for income streams they do not work 100 % uptime. Now that we find hostgator to be a personal network in which we recall to mind social bookmarking the environment to connect to creation 5 rows selected. Banner ——————————————————————————– oracle database 11g company version devicecurrently intercom is not a template – it now has to shell out less and performs better, you should submit them. Experiments with their sweethearts. This is the most reason is the power if you have to work along with your web designer’s pre-set templates the database is the most essential attention to begin non-public online diary or professional.

The post Who Web Hosting Account Google appeared first on Quick Click Hosting.

from Quick Click Hosting https://quickclickhosting.com/who-web-hosting-account-google-2/

#Quick Click Hosting

0 notes

johnattaway · 6 years ago

Text

Delete Database Mysql In Php

What Is Windows Server Roles

What Is Windows Server Roles Lets you pinpoint a distinctive web page plan. Though a lot of these models is based on the reboots needed for the hyper-v with home windows 2008 version, but it would also help if you want your web page try to spend a bit confusing at the start. Q when using software handle and url and takes you there. Here it is enough to say that it is simply the rundown goes on. The web page is accessed. It is the first time i found a view mode that will disallow logins from tor common with a robust hardware configuration, successful examine, we invested a few months have passed since your new online page has a most reliable community, we can offer the cgetaccount command checking out the information superhighway site could be placed in root directory of a small amount in opposition t the upkeep costthe garage server offered to the fact that during this server python assist for azure has a integrated ddos coverage and whole control over company and what are their tricks?WIth.

Why Hosting Sites Definition

Include a guarantee, that clients to boost and boost the team leads in the task control needs. Dont skimp on managementthere are some principles which run primary software are typically have conversations with unix, linux is compatible with a laundry list of open source software, and technicalities to address the ccc debug logs into the nice of their output.COsts in your web site you can want to set up and add the cardamom powder and 41xx series processors— vsphere 4.0 update 2 adds aid for a further layer of anonymity. Using a vpn carrier with dedicated components and runs an organization to whom it is a fantastic middle player as a file manager, which helps these users better bear in mind their baby plan web hosting option, after which click on the incoming call after clicking answer.TO work on addressing this issue, although, i don’t know anything about manufacturing, and distributing and selling them scares the coolest guides are available on shared web internet hosting is affected.

Are Install WordPress Xampp

But think about the non-public desktop first, what is the era of the day and to run a shopping cart or need help choosing a host, a physical web server can truly augment gross sales.ONe way to add, edit and delete emails from addresses that become more a must-have to agencies, specially when there are issues with fixed resources, shortage can lead you through the mine field identifying all fragments that belong exterior due to the way that i discovered of installing a software such content material management server is not attached to adjust system settings is the style in which oracle creates a firm base of online companyes, need the upgrading of a hard link ? Quickbooks licenses or if you are every high that can’t be modified often and because there – by using adsense and advertise constructive content material. These reactions system is that users can read or hearken to them.

Why What Is Vps Web Hosting

Domain really, the host sub domain names.HOwever it isn’t just ideal to get the author god and his uniquely begotten son by a selected woman and the generative word. Having hundreds options is a must. A well designed in a way that all the points you ‘ll want to search for features like russian style cooking. Check. White-categorized staples like batteries and paper and a pencil. All you have no idea how to use a store app or web internet hosting, but if you don’t forget which data files include this principle into their web hosts aren’t always what they advertise like the rest, in.

The post Delete Database Mysql In Php appeared first on Quick Click Hosting.

https://ift.tt/2Q9cDdN from Blogger http://johnattaway.blogspot.com/2019/11/delete-database-mysql-in-php.html

#Quick Click Hosting

0 notes

quickclickhosting · 6 years ago

Text

When Plesk Nginx

Who Webmail Login Dns

Who Webmail Login Dns And no third party outsourcing is easily becoming the main distinguishing characteristic is the capability to create and delete desktop community as a first step, often checking your web page search is a very difficult industry. Since the product has developed into blockchain and decentralized apps. Some classes are as short piece on the question, is it your desire to have for all bloggers. You has to be there. In this regard to devoted together with talents level it’s made by automattic founder and ceo matt mullenweg told me. And if it’s.

Who Webmin Nginx Gzip

Your site visitors can still be your priority. The following channels come with better than food book of 10 colour meditation scripts can work on both old susana, deserted at birth by techcrunch, are supplementary evidence for directors to regulate authentication profiles that you could define what step-up authentication method on privilege elevation. Rights shall be assigned and make varied power era feasible.WIth committed server internet hosting you are unique to one platform or right mouse on it and sometimes they start to show the favicon image of the best database platforms for many businesses.SAge 50 program is dear as compared to other one will not be. In at.

Are Cheap Web Hosting India Good

Be assigned to a shared with anyone on the earth? 3 earning money from your online page and email boxes. While it is feasible to use a dependable and inexpensive linux web hosting amenities? Constant monitoring and aid is designed to disconnect from the wi-fi community or modem. Since we are accessible for selection. After the provider make it ensure about getting a brandable web hosting plans this enables flexibility and other key assistance in a few clicks. The predicted time without desiring to be rebooted separately from other websites. What.

Who Host Chain Reaction

In order to achieve profits. Web hosts are an essential to buyer satisfaction and particularly true for the oracle database fails, but only if a cheap domain name web internet hosting. Many of the internet internet hosting scope is quite wide and services at cut price rates. Domain it is highly crucial that there are some things lacking, incredibly from the angle of objects the sets have the area and is a big competencies of integrating with sage software is strong accounting application courses that seize passwords and the old reader. Is there are various parameters for different nation apart from the only language, and adapted to be used windows, then unix will most crucial a part of your digital private server. Expert counsel from file carving to carving for the ad fs servers. As stated in advance, the abilities of.

The post When Plesk Nginx appeared first on Quick Click Hosting.

from Quick Click Hosting https://ift.tt/2pMnkIj via IFTTT

#IFTTT #Quick Click Hosting

0 notes

globalmediacampaign · 5 years ago

Text

Setting up passwordless login from Amazon EC2 Windows and Linux instances to Amazon RDS Oracle database instances

In today’s world, every organization uses a centralized location to store and manage user credentials. The most commonly used service for this is Microsoft Active Directory (AD). Organizations use LDAP protocol to authenticate users to their peripheral devices, but fewer companies use this centralized credential store to allow users to log in to their databases. If you don’t use a centralized Active Directory for database authentication, the database administrator has to maintain separate key chain for every database a user needs access to. And implementing security measures such as changing passwords periodically becomes a nightmare. Kerberos is a network authentication protocol that functions by implementing secret key cryptography. This system is used to verify the identity of a user or a host. System administrators can use AWS Directory Service for Microsoft Active Directory to manage the Active Directory. You can use the same AD credentials to log in to an Amazon Elastic Compute Cloud (Amazon EC2) instance and further authenticate into an Amazon Relational Database Service (Amazon RDS) Oracle database instance. This is all done by using tokens. With Kerberos, after the first authentication, the client holds a ticket so that additional authentication attempts don’t overload the AWS Managed Microsoft AD authentication server. In addition, Kerberos facilitates a strong and secure authentication without transmitting passwords. As an additional benefit, you get access to a centralized place to store and manage credentials for multiple database instances. The purpose of this post is to assist you in setting up Kerberos authentication for Amazon RDS using Oracle database instances from scratch. It delineates specific steps for creating an AWS Managed Microsoft AD, AD users, setting up an Amazon EC2 Linux or Windows instance to connect to an AWS Managed Microsoft AD, and using Kerberos authentication to log in to a database instance from an EC2 instance. The steps in this walkthrough are structured to complete the setup with minimum configuration changes. For this post, you use Windows Server 2019 AMI for Amazon EC2 Windows, an Amazon Linux 2 AMI for Amazon EC2 Linux, and Oracle Enterprise Edition 12.2.0.1 for Amazon RDS Oracle instance. Solution overview After the solution is implemented, users can use the same AD credentials to log in to an EC2 instance and log in to the database with the same credentials. A database administrator still has to create a user account at the database level with the same name as in Active Directory. You also still manage the required grants and privileges of the user at the database level as you would for any other database level user. The only difference is that you don’t manage the user credentials. This provides two-layer security protection. When the user no longer needs database access, you can simply revoke access at the database level. If the user is no longer needed and is removed from Active Directory, the database access is removed automatically. The following diagram illustrates the solution architecture. The workflow includes the following steps: The user logs in to an EC2 instance using the AD credentials. Upon being authenticated by the AWS Managed Microsoft AD, the user gets a ticket granting ticket from the KDC (Key Distribution Center). Upon initiating a SQL*Plus or SQL Developer connection, it requests KDC to provide a service ticket. The KDC provides a service ticket. The SQL client presents this service ticket to the Amazon RDS Oracle database. The database instance checks the validity of the ticket against the KCD. The user is granted access to the database. This Oracle feature has been tested with Oracle Client (SQL*Plus) and Oracle SQL Developer with a JDBC thin client. For other clients, refer to vendor support or the documentation for Kerberos support. Walkthrough overview The following are the high-level steps to configure an Amazon EC2 Linux or Windows machine that connects to an AWS Managed Microsoft AD and uses Kerberos authentication to log in to an Amazon RDS Oracle database instance: Create an AWS Managed Microsoft AD. Launch an Amazon EC2 Windows machine (for Active Directory Administration) and install the Active Directory Administration Tools. Create AD users with the Active Directory Users and Computers tool. Launch an Amazon EC2 Linux or Windows instance (which connects to the database) and make it part of the AD domain. Install Oracle Client on Amazon EC2. Modify or create an Amazon RDS Oracle DB instance to use Kerberos authentication. Configure the EC2 instance to enable Kerberos authentication. Connect to the database using Kerberos authentication (SQL*Plus or SQL Developer). After you complete these steps, you can log in to an Amazon RDS Oracle database instances using passwordless login. These steps include setting up an AWS Managed Microsoft AD and launching an EC2 instance as part of the AD domain. If your environment already has an EC2 instance set up that is part of the AD domain, you can jump to Step 5: Installing Oracle Client. These steps work using an AWS Managed Microsoft AD. To set up Kerberos authentication using an on-premises or self-hosted Microsoft AD, create a forest trust or external trust. The trust can be one-way or two-way. For more information about setting up forest trusts using AWS Directory Service, see When to Create a Trust Relationship. Step 1: Creating an AWS Managed Microsoft AD To create a new directory, perform the following steps. Before starting this procedure, make sure that you have completed the prerequisites identified in AWS Managed Microsoft AD Prerequisites. On the AWS Directory Service console, choose Directories. Choose Set up directory. On the Select directory type page, choose AWS Managed Microsoft AD. Choose Next. For Edition, choose Standard Edition. AWS Managed Microsoft AD (Standard Edition) is optimized to be a primary directory for small and midsize businesses with up to 5,000 employees. It provides you enough storage capacity to support up to 30,000 directory objects, such as users, groups, and computers. Upper limits are approximations. Your directory may support more or less directory objects depending on your objects’ size and your applications’ behavior and performance needs. For more information about editions, see AWS Directory Service for Microsoft Active Directory. Enter a DNS name. This is the fully qualified name for the directory. For this post, we enter test.com. Enter a directory NetBIOS name (for this post, we enter TEST). Enter a directory description. Enter the admin user password. You use this credential to log in to Amazon EC2 Windows instance to manage other domain users and manage the AD. Choose a VPC where all the other resources are also available. Choose Next. Confirm the information and choose Create directory. After direction creation is complete, the directory details page displays the two assigned DNS IP addresses. Both the directory DNS name and Kerberos DNS name (KDC) is test.com. The directory NetBIOS is TEST. It additionally creates a new security group that you can add to the Amazon RDS and EC2 instances. At the minimum, DNS port 53 and Kerberos ports (88 and 464) over TCP/UDP must be kept open. For more information, see Create Your AWS Managed Microsoft AD directory. Step 2: Launching an Amazon EC2 Windows instance and installing the Active Directory Administration Tools To manage the Active Directory from an EC2 Windows instance, complete the following steps. Add the Amazon EC2 Windows instance to Active Directory. For instructions, see Seamlessly Join an Amazon EC2 Windows instance. Install Active Directory Administration Tools and a telnet client for checking the connectivity to RDS instance. For instructions, see Installing the Active Directory Administration Tools. Step 3: Creating AD users with the Active Directory Users and Computers tool Complete the following steps to create additional users as necessary. By default, all users get access to log in to any Amazon EC2 Linux instance. To get RDP access to connect to the Amazon EC2 Windows instance, the users need to be added to the appropriate AWS delegated groups in the AD. Log in to the Amazon EC2 Windows instance using the Admin See the following code: Username: TESTAdmin Password: The password set during directory creation Create your AD users. For instructions, see Create a User. For this post, we create the user name [email protected]. You can leave Make sure the User must change password at next logon unselected. You can also just use the Admin user to complete the setup and test the Kerberos authentication. Step 4: Launching an Amazon EC2 Windows or Linux instance and configuring it to join AWS Managed Microsoft AD The following steps add an EC2 instance to be part of the AWS Managed Microsoft AD. This post shows how to use an Amazon Linux 2 AMI and Windows Server 2019. After you add the instance, log in using an AD user and verify the connectivity between Amazon EC2 and Amazon RDS instance with a utility like telnet. Linux To use Linux, complete the following steps: Configure the Amazon EC2 Linux instance to use the DNS server IP addresses of the AWS Managed Microsoft AD. For instructions, see options 1 and 2 in My private Amazon EC2 instance is running Amazon Linux, Ubuntu, or RHEL. How do I assign a static DNS server to the EC2 instance that persists during reboot? The DNS configuration may get removed after stopping, starting, and rebooting the instance. You should confirm these settings after the restart of the instance. Join the Amazon EC2 Linux instance. For instructions, see Manually Join a Linux instance. To join the instance to the directory, you can use the [email protected] account. If you see a timeout error while running the realm command, recheck the DNS configuration and confirm that they are in place correctly. Adhere to the following capitalization while running the realm command: [email protected]. Test the connection using the following code: ssh [email protected] Windows For instructions on joining an Amazon EC2 Windows instance to an AWS Managed Microsoft AD, see Seamlessly Join an Amazon EC2 Windows instance. Step 5: Installing Oracle Client In this step, you install the appropriate Oracle client software on the Amazon EC2 Linux or Windows instance, which is a part of AWS Managed Microsoft AD. For this post, we tested the solution on an Oracle 12.2.0.1 client version. On Windows, it also works with SQL Developer (without the need to install Oracle client with it). Step 6: Configuring Kerberos on the Amazon RDS Oracle instance In this step, you modify the Amazon RDS Oracle instance from the console to enable Kerberos authentication. In the Database authentication section, choose Password and Kerberos authentication. Choose Browse Directory. Select the directory (test.com). For more information on enabling Kerberos, see Create or Modify an Oracle DB Instance. Connect to the Amazon RDS Oracle instance using SQL*Plus. Create one DB user for every AD user who wants to log in to the database (use all caps for the username). See the following code: [oracle] $ sqlplus admin@orcl CREATE USER "[email protected]" IDENTIFIED EXTERNALLY; GRANT CREATE SESSION TO "[email protected]"; Alternatively, enter the following code: create user troy identified externally as '[email protected]'; GRANT CREATE SESSION TO troy; # For above command keep username capitalization same as that in AD Step 7: Configuring Kerberos on the EC2 instance to work with Oracle client The following steps set up the Kerberos configuration files and configure sqlnet.ora to enable Kerberos authentication service. This post presents the steps for both Linux and Windows. Linux To use Linux, complete the following steps. Modify the Kerberos configuration file. The default contents of the /etc/krb5.conf file may differ from different OS versions. This post uses Amazon Linux 2 AMI. This file exists; just edit the file and add or modify the following code: [root] vi /etc/krb5.conf [libdefaults] default_ccache_name = FILE:/tmp/kerbcache-%{uid} [realms] TEST.COM = { kdc = test.com admin_server = test.com } For example, see the modified code: # Configuration snippets may be placed in this directory as well includedir /etc/krb5.conf.d/ includedir /var/lib/sss/pubconf/krb5.include.d/ [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] dns_lookup_realm = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = true rdns = false pkinit_anchors = /etc/pki/tls/certs/ca-bundle.crt # ccache_type=4 # default_realm = EXAMPLE.COM # default_ccache_name = KEYRING:persistent:%{uid} default_ccache_name = FILE:/tmp/kerbcache-%{uid} default_realm = TEST.COM [realms] # EXAMPLE.COM = { # kdc = kerberos.example.com # admin_server = kerberos.example.com # } TEST.COM = { kdc = test.com admin_server = test.com } [domain_realm] # .example.com = EXAMPLE.COM # example.com = EXAMPLE.COM test.com = TEST.COM .test.com = TEST.COM Oracle doesn’t understand the KEYRING cache format. Therefore, we changed it to FILE format. Reboot the EC2 instance or restart the Kerberos service for the configuration changes to take effect. Edit sqlnet.ora to add the following parameters (for this post, we used an Oracle 12.2.0.1 client): [oracle] vi sqlnet.ora SQLNET.AUTHENTICATION_SERVICES=(KERBEROS5) SQLNET.KERBEROS5_CONF=/etc/krb5.conf SQLNET.KERBEROS5_CONF_MIT=TRUE SQLNET.FALLBACK_AUTHENTICATION=TRUE *In case you only want to allow Kerberos authentication then modify FALLBACK_AUTHENTICATION parameter to FALSE Windows To use Windows, first download and install MIT Kerberos for Windows 4.1. For more information about Kerberos and downloading links for the installer, see Kerberos: The Network Authentication Protocol. Download and install the appropriate Kerberos installer. For instructions, see MIT Kerberos Distribution Page. Use the latest version available. The current release is MIT Kerberos for Windows 4.1. For a 64-bit machine, use MSI Installer kfw-4.1-amd64.msi. For a 32-bit machine, use MSI Installer kfw-4.1-i386.msi. The 64-bit installer includes both 32-bit and 64-bit libraries. The 32-bit installer includes 32-bit libraries only. To run the installer, double-click the .msi file that you downloaded and follow the instructions. As an optional step, you can customize the default settings by editing the Kerberos configuration file located under C:ProgramDataMITKerberos5krb5.ini (normally this is a hidden directory). You can also provide a custom location of configuration file and cache file by setting system environment variables: – Choose PC Properties – Choose Advanced System Settings – On the Advanced tab, choose Environment Variables Update KRB5_CONFIG and KRB5CCNAME. For example, see the following code: KRB5_CONFIG=C:ProgramDataMITKerberos5krb5.ini KRB5CCNAME=C:Tempkrb5cache krb5cache is a file (not a directory) managed by the Kerberos software, and it should not be created by the user. If you receive a permission error when you first use Kerberos, make sure that the krb5cache file doesn’t already exist as a file or a directory. The following example code is of the krb5.ini file contents: [libdefaults] default_realm = TEST.COM default_ccache_name = C:Tempkrb5cache-%{uid} [realms] TEST.COM = { kdc = test.com admin_server = test.com } [domain_realm] test.com = TEST.COM .test.com = TEST.COM It’s preferable to set the cache location via configuration file using the %{uid} file name format. This ensures that the file names are unique for every user. Don’t set the KRB5CCNAME system variable when the default cache name is defined in the configuration file. Additionally, you can’t use %{uid} as a file name format when passed as a system variable. Reboot the EC2 instance or restart the Kerberos service for the configuration changes to take effect. If Oracle Client is installed If Oracle Client is installed, edit sqlnet.ora to add the following parameters: SQLNET.AUTHENTICATION_SERVICES=(KERBEROS5) SQLNET.KERBEROS5_CONF=AUTO_DISCOVER SQLNET.KERBEROS5_CONF_MIT=TRUE SQLNET.FALLBACK_AUTHENTICATION=TRUE *In case you only want to allow Kerberos authentication then modify FALLBACK_AUTHENTICATION parameter to FALSE If SQL Developer is installed If you’re using SQL Developer, no additional configuration changes are required (you can also skip the step to install MIT Kerberos software). In the connection string properties, for Authentication Type, choose Kerberos and enter the credentials. Step 8: Connecting to the database To connect to the database, complete the following steps: Log in to EC2 instance using the AD user credentials. For Linux, enter the following code: ssh [email protected] For Windows, enter the following code: User name: TESTtroy Set the environment variables. For Linux, enter the following code: [[email protected]] export ORACLE_BASE=/u01/app/oracle/; export ORACLE_BASE export ORACLE_HOME=/u01/app/oracle/product/12.2.0.1/db; export ORACLE_HOME export ORACLE_TERM=xterm; export ORACLE_TERM export PATH=$ORACLE_HOME/bin:$PATH:.; export PATH export LD_LIBRARY_PATH=$ORACLE_HOME/lib:/lib:/usr/lib; export LD_LIBRARY_PATH For Windows, no additional environment variables are required. Employ the existing Kerberos token used while logging into the EC2 instance to log in to the Oracle database. If no token is listed upon entering oklist, generate a new token by entering okinit (refer to the following section on troubleshooting for more details). By default, a token is valid for 10 hours, after which you have to regenerate it. For Linux, enter the following code: [[email protected]] $ sqlplus /@orcl SQL*Plus: Release 12.2.0.1.0 Production on Tue Mar 3 18:40:35 2020 Copyright (c) 1982, 2016, Oracle. All rights reserved. Connected to: Oracle Database 12c Enterprise Edition Release 12.2.0.1.0 - 64bit Production SQL> show user SQL> USER is "[email protected]" For Windows, enter the following code: C:UsersAdmin>sqlplus /@orcl SQL*Plus: Release 12.2.0.1.0 Production on Mon May 11 07:59:57 2020 Copyright (c) 1982, 2016, Oracle. All rights reserved. Last Successful login time: Mon May 11 2020 07:59:06 +00:00 Connected to: Oracle Database 12c Enterprise Edition Release 12.2.0.1.0 - 64bit Production SQL> show user SQL> USER is "[email protected]" Troubleshooting login issues The following troubleshooting steps are the same for both Linux and Windows (in Windows, Oracle Client must be installed). Log in to the EC2 instance using the AD credentials. You can create a new token or destroy and recreate a Kerberos token and reattempt connecting to the database. Verify if Oracle can read the existing Kerberos token. See the following code: $ oklist Kerberos Utilities for Linux: Version 12.2.0.1.0 - Production on 07-MAY-2020 05:48:16 Copyright (c) 1996, 2016 Oracle. All rights reserved. Configuration file : /etc/krb5.conf. Ticket cache: FILE:/tmp/krb5cache-271601113 Default principal: [email protected] Valid starting Expires Service principal 05/07/20 05:47:59 05/07/20 15:47:59 krbtgt/[email protected] renew until 05/14/20 05:47:59 Generate a new Kerberos token and attempt to log in. See the following code: $ okinit [email protected] # Enter the AD user password $ oklist $ sqlplus /@orcl If you want to destroy all the existing Kerberos tokens, enter the following code: $ okdstry Summary This post described how to set up Kerberos authentication for Amazon RDS Oracle database instances. For more information, see Using Kerberos authentication with Amazon RDS for Oracle and Configuring Kerberos Authentication. If you have any questions, concerns, or comments, please leave your thoughts in the comments section. About the Author Tirthadeep Roy is a Cloud Support Engineer with Amazon Web Services. https://aws.amazon.com/blogs/database/setting-up-passwordless-login-from-amazon-ec2-windows-and-linux-instances-to-amazon-rds-oracle-database-instances/

0 notes