Adam Ramadhan's questions

I'm looking for a way to track our sysmin work, in the servers. Lets say sysmin 1 and sysmin 2 have access to any server but we need to make sure and track anything that they do in our server.

Something like:

server 1 ---- auditd or history>syslog---| 
server 2 ---- auditd or history>syslog------- somthing like log.ly or saas 
server 3 ---- auditd or history>syslog---|

Is there any SaaS doing something like this? How do you monitor your friends or sysmin that are working so we could get something like this in a central location:

server 1, on 24-12-2013 12:42:32 user root command : ls
server 1, on 24-12-2013 12:42:32 user root command : cd /home
server 2, on 24-12-2013 12:42:32 user example command : ls

I known services like papertrailapp but they only have syslog that doesn't track bash command of users.

How could we turn off the information text in the centos login screen?

 package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/sr/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/sr@latin/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/sv/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/sw/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/ta/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/te/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/th/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/tr/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/uk/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/ur/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/vi/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/xh/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/zh_CN/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/zh_HK/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64
  file /usr/share/locale/zh_TW/LC_MESSAGES/pidgin.mo from install of libpurple-2.6.6-5.el5_5.i386 conflicts with file from package libpurple-2.7.11-0.el5.x86_64

anyone have the same problem??

thanks

Adam ramadhan

hello i have a problem. when i do "yum update or install" it will not work. but it will after i type in export http_proxy= everytime i restart. where is this location of http_proxy ? so i dont have to export each time the centos reboot?

Thanks for looking in.

Adam Ramadhan

i am installing wnmp useing this link

http://github.com/Xeoncross/wnmp

i have followed the instruction but i got this is the error that i get from nginx error log.

the logs

1 upstream sent unsupported FastCGI protocol version: 70 while reading response header from upstream, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.1", upstream: "fastcgi://127.0.0.1:9000", host: "localhost"

heres my folder

- wnmp
  - memcached
  - mysql
  - nginx
  - php
  - www

my nginx.conf

#user  nobody;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    server {
        listen       80;
        server_name  localhost;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            root   ../www;
            index  index index.html index.htm index.php;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        location ~ \.php$ {
            root           ../www;
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_param  SCRIPT_FILENAME  ../www$fastcgi_script_name;
            include        fastcgi_params;
        }

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }


    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}


    # HTTPS server
    #
    #server {
    #    listen       443;
    #    server_name  localhost;

    #    ssl                  on;
    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_timeout  5m;

    #    ssl_protocols  SSLv2 SSLv3 TLSv1;
    #    ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
    #    ssl_prefer_server_ciphers   on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

}

and btw heres the start.bat

@ECHO OFF

REM Windows The following is not valid  
REM set PHP_FCGI_CHILDREN=5

REM  Each process handles the maximum number of requests, or is set to Windows Environment variables  
set PHP_FCGI_MAX_REQUESTS=1000

:: Start PHP-fastcgi on port 9000
RunHiddenConsole php\php-cgi.exe -b 127.0.0.1:9000 -c php\php.ini

:: Start MySQL using the mysql\my.ini config file
start mysql\bin\mysqld

:: Start Memcached (m = memory to use in MB, c = max connections allowed)
RunHiddenConsole memcached\memcached.exe -m 10 -c 1024

:: Start the nginx server
cd nginx
start nginx

EXIT

if there is anything that you need please comment

Thanks for looking in

Adam Ramadhan