Addition/Secure.Your.Exist.iRedAdmin - Revision history

ZhangHuangbin: /* Verify it */

ZhangHuangbin — Tue, 19 Mar 2013 14:26:11 GMT

Verify it

← Older revision		Revision as of 14:26, 19 March 2013
Line 63:		Line 63:

	= Verify it =		= Verify it =
-	~~You~~ can simply use '''top''' command to verify it:	+	On Linux/OpenBSD, you can simply use '''top -u iredadmin''' command to verify it. On FreeBSD, please use '''top -Uiredadmin''' instead.
	{{cmd\|<pre>		{{cmd\|<pre>
	#		#

ZhangHuangbin: /* Create a new system account */

ZhangHuangbin — Sat, 09 Oct 2010 05:01:12 GMT

Create a new system account

← Older revision		Revision as of 05:01, 9 October 2010
Line 10:		Line 10:
	# ---- On Linux ----		# ---- On Linux ----
	#		#
-	# useradd -s /sbin/nologin -m -d /home/~~iredadadmin~~ iredadmin	+	# useradd -s /sbin/nologin -m -d /home/iredadmin iredadmin

	#		#

ZhangHuangbin: /* Create a new system account */

ZhangHuangbin — Sun, 25 Jul 2010 07:20:06 GMT

Create a new system account

← Older revision		Revision as of 07:20, 25 July 2010
Line 17:		Line 17:
	# pw useradd -s /sbin/nologin -d /home/iredadmin -m -n iredadmin		# pw useradd -s /sbin/nologin -d /home/iredadmin -m -n iredadmin
	</pre>}}		</pre>}}
		+
		+	Note: Don't forget to use '''-m''' flag to create HOME directory, otherwise apache can't chroot process to this directory.

	= Configure Apache =		= Configure Apache =

ZhangHuangbin: /* Create a new system account */

ZhangHuangbin — Sun, 25 Jul 2010 07:14:42 GMT

Create a new system account

← Older revision		Revision as of 07:14, 25 July 2010
Line 10:		Line 10:
	# ---- On Linux ----		# ---- On Linux ----
	#		#
-	# useradd -s /sbin/nologin -M -d /home/iredadadmin iredadmin	+	# useradd -s /sbin/nologin -m -d /home/iredadadmin iredadmin

	#		#
	# ---- On FreeBSD ----		# ---- On FreeBSD ----
	#		#
-	# pw useradd -s /sbin/nologin -d /home/iredadmin -n iredadmin	+	# pw useradd -s /sbin/nologin -d /home/iredadmin -m -n iredadmin
	</pre>}}		</pre>}}

ZhangHuangbin: /* Verify it */

ZhangHuangbin — Fri, 23 Jul 2010 05:28:17 GMT

Verify it

← Older revision		Revision as of 05:28, 23 July 2010
Line 70:		Line 70:
	3978 iredadmi 25 0 458m 7052 1028 S 0.0 1.4 0:00.00 httpd		3978 iredadmi 25 0 458m 7052 1028 S 0.0 1.4 0:00.00 httpd
	</pre>}}		</pre>}}
		+
		+	= Credits =
		+	We'd like to thank supanji12@YouTube for his/her great video tutorial: http://www.youtube.com/watch?v=o285XYJTGQw

ZhangHuangbin: /* Create a new system account */

ZhangHuangbin — Fri, 23 Jul 2010 05:16:27 GMT

Create a new system account

← Older revision		Revision as of 05:16, 23 July 2010
Line 16:		Line 16:
	#		#
	# pw useradd -s /sbin/nologin -d /home/iredadmin -n iredadmin		# pw useradd -s /sbin/nologin -d /home/iredadmin -n iredadmin
		+	</pre>}}

	= Configure Apache =		= Configure Apache =

ZhangHuangbin at 05:16, 23 July 2010

ZhangHuangbin — Fri, 23 Jul 2010 05:16:01 GMT

← Older revision		Revision as of 05:16, 23 July 2010
Line 1:		Line 1:
		+	__TOC__
		+
	If you already have iRedAdmin installed, either iRedAdmin-Pro or open source edition, you can simply secure it by following below tutorial.		If you already have iRedAdmin installed, either iRedAdmin-Pro or open source edition, you can simply secure it by following below tutorial.

ZhangHuangbin: Created page with 'If you already have iRedAdmin installed, either iRedAdmin-Pro or open source edition, you can simply secure it by following below tutorial. = Create a new system account = We wi…'

ZhangHuangbin — Fri, 23 Jul 2010 05:15:40 GMT

Created page with 'If you already have iRedAdmin installed, either iRedAdmin-Pro or open source edition, you can simply secure it by following below tutorial. = Create a new system account = We wi…'

New page

If you already have iRedAdmin installed, either iRedAdmin-Pro or open source edition, you can simply secure it by following below tutorial.

= Create a new system account =
We will make iRedAdmin run with Apache web server, but as non-apache, low privilege user: iredadmin.

{{cmd|<pre>
#
# ---- On Linux ----
#
# useradd -s /sbin/nologin -M -d /home/iredadadmin iredadmin

#
# ---- On FreeBSD ----
#
# pw useradd -s /sbin/nologin -d /home/iredadmin -n iredadmin

= Configure Apache =
Edit Apache config file of iRedAdmin, make iRedAdmin run as user 'iredadmin'.
File localtion on different distributions:
* RHEL/CentOS: /etc/httpd/conf.d/iredadmin.conf
* Debian/Ubuntu: /etc/apache2/conf.d/iredadmin.conf
* FreeBSD: /usr/local/etc/apache22/Includes/iredadmin.conf

{{cfg|iredadmin.conf|<pre>
WSGISocketPrefix /var/run/wsgi
WSGIDaemonProcess iredadmin user=iredadmin threads=15
WSGIProcessGroup iredadmin
</pre>}}

= Change file permissions =
Change current directory to apache server root directory:
{{cmd|<pre>
#
# ---- On RHEL/CentOS ----
#
# cd /var/www/

#
# ---- On Debian/Ubuntu ----
#
# cd /usr/share/apache2/

#
# ---- On FreeBSD ----
#
# cd /usr/local/www/
</pre>}}

Change file permissions:
{{cmd|<pre>
# chown -R iredadmin:iredadmin iRedAdmin-x.y.z
# chmod -R 0755 iRedAdmin-x.y.z
# chmod 0600 iRedAdmin-x.y.z/settings.ini
</pre>}}

= Restart Apache =
Restart Apache to make changes work.

= Verify it =
You can simply use '''top''' command to verify it:
{{cmd|<pre>
#
# ---- Sample output ----
#
# top -u iredadmin
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
3978 iredadmi 25 0 458m 7052 1028 S 0.0 1.4 0:00.00 httpd
</pre>}}