<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Mas Rony's Notes &#187; Technology</title>
	<atom:link href="http://www.masrony.com/category/technology/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.masrony.com</link>
	<description>Restore your brain... !!</description>
	<lastBuildDate>Wed, 10 Mar 2010 14:45:57 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>ISPConfig : Webhosting Control Panel</title>
		<link>http://www.masrony.com/2010/02/ispconfig-webhosting-control-panel-2/</link>
		<comments>http://www.masrony.com/2010/02/ispconfig-webhosting-control-panel-2/#comments</comments>
		<pubDate>Sun, 21 Feb 2010 15:29:58 +0000</pubDate>
		<dc:creator>Mas Rony</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Technology]]></category>

		<guid isPermaLink="false">http://www.masrony.com/?p=349</guid>
		<description><![CDATA[Artikel ini dibuat dengan menggunakan OS Centos 5.4 dengan ISPConfig versi 2.
Sebelumnya mohon maaf, saya tidak banyak menjelaskan masing-masing bagian dari proses instalasi ini seperti pada post entry sebelum-sebelumnya. Jadi hanya point-point yang penting saja yang saya sebutkan. Instalasi ini mencakup keseluruhan dari service-service yang dibutuhkan seperti dibawah ini :
 Instalasi :
- OS : OS Centos [...]]]></description>
			<content:encoded><![CDATA[<p>Artikel ini dibuat dengan menggunakan OS Centos 5.4 dengan ISPConfig versi 2.<br />
Sebelumnya mohon maaf, saya tidak banyak menjelaskan masing-masing bagian dari proses instalasi ini seperti pada post entry sebelum-sebelumnya. Jadi hanya point-point yang penting saja yang saya sebutkan. Instalasi ini mencakup keseluruhan dari service-service yang dibutuhkan seperti dibawah ini :</p>
<li> Instalasi :</li>
<p>- OS : OS Centos 5.4 (disini tidak dibahas mengenai instalasi OS. Instalasi OS yg dibutuhkan standard package no GUI)<br />
- Web Server: Apache/2.2.3 with PHP 5.1.6<br />
- Web statistik : Webalizer V2.01-10<br />
- Database Server: MySQL 5.0.77<br />
- Mail Server: Postfix<br />
- DNS Server: BIND9 (chrooted)<br />
- FTP Server: Proftpd v1.3.2c<br />
- POP3/IMAP server: Dovecot 1.0.7</p>
<li>Setting Network dan hostname :<br />
- firewall dan SELINUX disabled<br />
- FQDN : jempol.wedus.us<br />
- IP Address : 192.168.2.67<br />
- Gateway : 192.168.2.1<br />
- DNS1 : 192.168.10.2<br />
- DNS2 : 192.168.2.67</p>
<p>Notes :<br />
Sayangnya setting network diatas tidak berhasil dilakukan pada saat instalasi karena kernel CentOS belum support on board LAN Card yg saya punya (Attansic L2). So musti sedikit ngoprek terlebih dahulu :</p>
<div style="margin: 10px auto; background: #cccccc none repeat scroll 0% 0%;">
<pre># lspci | grep Ethernet</pre>
<p>02:00.0 Ethernet controller: Attansic Technology Corp. L2 100 Mbit Ethernet Adapter (rev a0)</p>
</div>
<p>Download terlebih dahulu drivernya di <a href="ftp://ftp.hogchain.net/pub/linux/attansic/l2-linux-v1.0.40.4.tar.gz">ftp://ftp.hogchain.net/pub/linux/attansic/l2-linux-v1.0.40.4.tar.gz</a></p>
<div style="margin: 10px auto; background: #cccccc none repeat scroll 0% 0%;">
<pre># tar zxvf l2-linux-v1.0.40.4.tar.gz
# cd l2-linux-v1.0.40.4/src
# make &amp;&amp; make install</pre>
</div>
</li>
<li>Setting network file :</li>
<div style="margin: 10px auto; background: #cccccc none repeat scroll 0% 0%;">
<pre># vi /etc/hosts</pre>
<p># Do not remove the following line, or various programs<br />
# that require network functionality will fail.<br />
127.0.0.1		localhost.localdomain localhost<br />
192.168.2.67	jempol.wedus.us jempol</p>
</div>
<div style="margin: 10px auto; background: #cccccc none repeat scroll 0% 0%;">
<pre># vi /etc/resolv.conf</pre>
<p>domain wedus.us<br />
nameserver 192.168.10.2<br />
nameserver 192.168.2.67</p>
</div>
<div style="margin: 10px auto; background: #cccccc none repeat scroll 0% 0%;">
<pre># vi /etc/sysconfig/network</pre>
<p>NETWORKING=yes<br />
NETWORKING_IPV6=no<br />
HOSTNAME=jempol<br />
GATEWAY=192.168.2.1</p>
</div>
<div style="margin: 10px auto; background: #cccccc none repeat scroll 0% 0%;">
<pre># vi /etc/sysconfig/network-scripts/ifcfg-eth0</pre>
<p># Please read /usr/share/doc/initscripts-*/sysconfig.txt<br />
# for the documentation of these parameters.<br />
TYPE=Ethernet<br />
DEVICE=eth0<br />
HWADDR=00:1d:60:27:22:33<br />
BOOTPROTO=none<br />
IPADDR=192.168.2.65<br />
NETMASK=255.255.255.0<br />
NETWORK=192.168.2.0<br />
BROADCAST=192.168.2.255<br />
GATEWAY=192.168.2.1<br />
ONBOOT=yes<br />
USERCTL=no<br />
IPV6INIT=no<br />
PEERDNS=no</p>
</div>
<div style="margin: 10px auto; background: #cccccc none repeat scroll 0% 0%;">
<pre># /etc/init.d/network restart</pre>
<p>Shutting down interface eth0:                              [  OK  ]<br />
Shutting down loopback interface:                          [  OK  ]<br />
Bringing up loopback interface:                            [  OK  ]<br />
Bringing up interface eth0:                                [  OK  ]</p>
</div>
<div style="margin: 10px auto; background: #cccccc none repeat scroll 0% 0%;">
<pre># ifconfig</pre>
<p>eth0      Link encap:Ethernet  HWaddr 00:1D:60:27:22:33<br />
inet addr:192.168.2.65  Bcast:192.168.2.255  Mask:255.255.255.0<br />
inet6 addr: fe80::21d:60ff:fe27:2233/64 Scope:Link<br />
UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1<br />
RX packets:118340 errors:0 dropped:0 overruns:0 frame:0<br />
TX packets:1921 errors:0 dropped:0 overruns:0 carrier:0<br />
collisions:0 txqueuelen:0<br />
RX bytes:13132954 (12.5 MiB)  TX bytes:197344 (192.7 KiB)</p>
<p>lo        Link encap:Local Loopback<br />
inet addr:127.0.0.1  Mask:255.0.0.0<br />
inet6 addr: ::1/128 Scope:Host<br />
UP LOOPBACK RUNNING  MTU:16436  Metric:1<br />
RX packets:955 errors:0 dropped:0 overruns:0 frame:0<br />
TX packets:955 errors:0 dropped:0 overruns:0 carrier:0<br />
collisions:0 txqueuelen:0<br />
RX bytes:8589855 (8.1 MiB)  TX bytes:8589855 (8.1 MiB)</p>
</div>
<p>Instalasi paket yang dibutuhkan :<br />
Remove paket yang tidak diinginkan (opsional) :</p>
<div style="margin: 10px auto; background: #cccccc none repeat scroll 0% 0%;">
<pre># yum remove vsftpd NetworkManager irda isdn pcscd</pre>
</div>
<p>Setting repository ke lokal repo kambing.ui.ac.id (opsional bergantung repo yang biasa anda pakai) :<br />
# mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.asli<br />
# vim /etc/yum.repos.d/kambing.repo</p>
<p># Repository dari server kambing.ui.ac.id<br />
[kambing-base]<br />
name=CentOS.kambing-$releasever &#8211; Base<br />
baseurl=http://kambing.ui.ac.id/centos/$releasever/os/$basearch/<br />
gpgkey=http://kambing.ui.ac.id/centos/RPM-GPG-KEY-CentOS-5</p>
<p>[kambing-updates]<br />
name=CentOS.kambing-$releasever &#8211; Updates<br />
baseurl=http://kambing.ui.ac.id/centos/$releasever/updates/$basearch/<br />
gpgkey=http://kambing.ui.ac.id/centos/RPM-GPG-KEY-CentOS-5</p>
<p>[kambing-addons]<br />
name=CentOS.kambing-$releasever &#8211; Addons<br />
baseurl=http://kambing.ui.ac.id/centos/$releasever/addons/$basearch/<br />
gpgkey=http://kambing.ui.ac.id/centos/RPM-GPG-KEY-CentOS-5</p>
<p>[kambing-extras]<br />
name=CentOS.kambing-$releasever &#8211; Extras<br />
baseurl=http://kambing.ui.ac.id/centos/$releasever/extras/$basearch/<br />
gpgkey=http://kambing.ui.ac.id/centos/RPM-GPG-KEY-CentOS-5</p>
<p>[kambing-centosplus]<br />
name=CentOS.kambing-$releasever &#8211; Centosplus<br />
baseurl=http://kambing.ui.ac.id/centos/$releasever/centosplus/$basearch/<br />
enable=1<br />
gpgkey=http://kambing.ui.ac.id/centos/RPM-GPG-KEY-CentOS-5</p>
<p>[kambing-contrib]<br />
name=CentOS.kambing-$releasever &#8211; Contrib<br />
baseurl=http://kambing.ui.ac.id/centos/$releasever/contrib/$basearch/<br />
enable=1<br />
gpgkey=http://kambing.ui.ac.id/centos/RPM-GPG-KEY-CentOS-5</p>
<p>[kambing-fasttrack]<br />
name=CentOS.kambing-$releasever &#8211; Fasttrack<br />
baseurl=http://kambing.ui.ac.id/centos/$releasever/fasttrack/$basearch/<br />
enable=1<br />
gpgkey=http://kambing.ui.ac.id/centos/RPM-GPG-KEY-CentOS-5</p>
<p>import GPG key untuk authentikasi :<br />
# rpm &#8211;import http://kambing.ui.ac.id/centos/RPM-GPG-KEY-CentOS-5<br />
# yum clean all<br />
# yum makecache<br />
# yum update<br />
# reboot<br />
# uname -a</p>
<p>Linux jempol 2.6.18-164.11.1.el5.centos.plusxen #1 SMP Wed Jan 20 20:14:28 EST 2010 i686 i686 i386 GNU/Linux</p>
<p>Install paket yang diperlukan :</p>
<p># yum install fetchmail wget bzip2 unzip zip nmap openssl lynx fileutils gcc \<br />
gcc-c++ quota bind bind-chroot mysql mysql-devel mysql-server cyrus-sasl cyrus-sasl-devel \<br />
cyrus-sasl-gssapi cyrus-sasl-md5 cyrus-sasl-plain postfix dovecot php php-devel php-gd php-imap \<br />
php-ldap php-mysql php-odbc php-pear php-xml php-xmlrpc curl curl-devel perl-libwww-perl ImageMagick \<br />
libxml2 libxml2-devel httpd-devel ruby ruby-devel mod_python perl-HTML-Parser perl-DBI perl-Net-DNS \<br />
perl-Digest-SHA1 webalizer ntp</p>
<p>Setting quota :<br />
tambahkan usrquota,grpquota dibelakang defaults pada root :<br />
# vi /etc/fstab<br />
/dev/VolGroup00/LogVol00 /                       ext3    defaults,usrquota,grpquota	1 1<br />
LABEL=/boot              /boot                   ext3    defaults			1 2<br />
tmpfs                    /dev/shm                tmpfs   defaults			0 0<br />
devpts                   /dev/pts                devpts  gid=5,mode=620			0 0<br />
sysfs                    /sys                    sysfs   defaults			0 0<br />
proc                     /proc                   proc    defaults			0 0<br />
/dev/VolGroup00/LogVol01 swap                    swap    defaults			0 0</p>
<p># touch /aquota.user /aquota.group<br />
# chmod 600 /aquota.*<br />
# mount -o remount /<br />
# quotacheck -avugm<br />
# quotaon -avug</p>
<p>Setting Chrooted DNS Server (BIND9) :<br />
# chmod 755 /var/named/<br />
# chmod 775 /var/named/chroot/<br />
# chmod 775 /var/named/chroot/var/<br />
# chmod 775 /var/named/chroot/var/named/<br />
# chmod 775 /var/named/chroot/var/run/<br />
# chmod 777 /var/named/chroot/var/run/named/<br />
# cd /var/named/chroot/var/named/<br />
# ln -s ../../ chroot<br />
# cp /usr/share/doc/bind-9.3.6/sample/var/named/named.local /var/named/chroot/var/named/named.local<br />
# cp /usr/share/doc/bind-9.3.6/sample/var/named/named.root /var/named/chroot/var/named/named.root<br />
# touch /var/named/chroot/etc/named.conf<br />
# chkconfig &#8211;levels 235 named on<br />
# /etc/init.d/named start</p>
<p>Setting MySQL Server :<br />
# vi /etc/my.cnf<br />
Hapus tanda # pada bagian skip-networking<br />
# chkconfig &#8211;levels 235 mysqld on<br />
# /etc/init.d/mysqld start<br />
# mysqladmin -u root password rootpasswordmysql<br />
# mysqladmin -h jempol.wedus.us -u root password rootpasswordmysql</p>
<p>Setting SMTP-AUTH dan TLS pada Postfix :<br />
# postconf -e &#8217;smtpd_sasl_local_domain =&#8217;<br />
# postconf -e &#8217;smtpd_sasl_auth_enable = yes&#8217;<br />
# postconf -e &#8217;smtpd_sasl_security_options = noanonymous&#8217;<br />
# postconf -e &#8216;broken_sasl_auth_clients = yes&#8217;<br />
# postconf -e &#8217;smtpd_sasl_authenticated_header = yes&#8217;<br />
# postconf -e &#8217;smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination&#8217;<br />
# postconf -e &#8216;inet_interfaces = all&#8217;<br />
# postconf -e &#8216;mynetworks = 127.0.0.0/8&#8242;<br />
Aktifkan PLAIN dan LOGIN untuk login dengan melakukan editing file :<br />
# vi /usr/lib/sasl2/smtpd.conf</p>
<p>pwcheck_method: saslauthd<br />
mech_list: plain login</p>
<p>Notes : untuk CentOS 64 bit letak file smtpd.conf di /usr/lib64/sasl2/smtpd.conf</p>
<p>Certificate untuk TLS :</p>
<p># mkdir /etc/postfix/ssl<br />
# cd /etc/postfix/ssl/<br />
# openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024</p>
<p># chmod 600 smtpd.key<br />
# openssl req -new -key smtpd.key -out smtpd.csr</p>
<p># openssl x509 -req -days 3650 -in smtpd.csr -signkey smtpd.key -out smtpd.crt</p>
<p># openssl rsa -in smtpd.key -out smtpd.key.unencrypted</p>
<p># mv -f smtpd.key.unencrypted smtpd.key<br />
# openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650</p>
<p>Configure Postfix for TLS:</p>
<p># postconf -e &#8217;smtpd_tls_auth_only = no&#8217;<br />
# postconf -e &#8217;smtp_use_tls = yes&#8217;<br />
# postconf -e &#8217;smtpd_use_tls = yes&#8217;<br />
# postconf -e &#8217;smtp_tls_note_starttls_offer = yes&#8217;<br />
# postconf -e &#8217;smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key&#8217;<br />
# postconf -e &#8217;smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt&#8217;<br />
# postconf -e &#8217;smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem&#8217;<br />
# postconf -e &#8217;smtpd_tls_loglevel = 1&#8242;<br />
# postconf -e &#8217;smtpd_tls_received_header = yes&#8217;<br />
# postconf -e &#8217;smtpd_tls_session_cache_timeout = 3600s&#8217;<br />
# postconf -e &#8216;tls_random_source = dev:/dev/urandom&#8217;</p>
<p>Set hostname untuk Postfix :<br />
postconf -e &#8216;myhostname = jempol.wedus.us&#8217;<br />
Konfigurasi Postfix selesai, silahkan cek hasil konfigurasinya :<br />
# cat /etc/postfix/main.cf (comments sudah dihilangkan)</p>
<p>queue_directory = /var/spool/postfix<br />
command_directory = /usr/sbin<br />
daemon_directory = /usr/libexec/postfix<br />
mail_owner = postfix<br />
inet_interfaces = all<br />
mydestination = $myhostname, localhost.$mydomain, localhost<br />
unknown_local_recipient_reject_code = 550<br />
alias_maps = hash:/etc/aliases<br />
alias_database = hash:/etc/aliases<br />
debug_peer_level = 2<br />
debugger_command =<br />
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin<br />
xxgdb $daemon_directory/$process_name $process_id &amp; sleep 5</p>
<p>sendmail_path = /usr/sbin/sendmail.postfix<br />
newaliases_path = /usr/bin/newaliases.postfix<br />
mailq_path = /usr/bin/mailq.postfix<br />
setgid_group = postdrop<br />
html_directory = no<br />
manpage_directory = /usr/share/man<br />
sample_directory = /usr/share/doc/postfix-2.3.3/samples<br />
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES<br />
smtpd_sasl_local_domain =<br />
smtpd_sasl_auth_enable = yes<br />
smtpd_sasl_security_options = noanonymous<br />
broken_sasl_auth_clients = yes<br />
smtpd_sasl_authenticated_header = yes<br />
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination<br />
mynetworks = 127.0.0.0/8<br />
smtpd_tls_auth_only = no<br />
smtp_use_tls = yes<br />
smtpd_use_tls = yes<br />
smtp_tls_note_starttls_offer = yes<br />
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key<br />
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt<br />
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem<br />
smtpd_tls_loglevel = 1<br />
smtpd_tls_received_header = yes<br />
smtpd_tls_session_cache_timeout = 3600s<br />
tls_random_source = dev:/dev/urandom<br />
myhostname = jempol.wedus.us</p>
<p>Aktivasi protokol imap, imaps, pop3, dan pop3s pada Dovecot :<br />
# vi /etc/dovecot.conf</p>
<p># Protocols we want to be serving: imap imaps pop3 pop3s<br />
# If you only want to use dovecot-auth, you can set this to &#8220;none&#8221;.<br />
protocols = imap imaps pop3 pop3s</p>
<p>Start on boot Postfix, saslauthd, Dovecot dan disable sendmail :</p>
<p># chkconfig &#8211;levels 235 sendmail off<br />
# chkconfig &#8211;levels 235 postfix on<br />
# chkconfig &#8211;levels 235 saslauthd on<br />
# chkconfig &#8211;levels 235 dovecot on<br />
# /etc/init.d/sendmail stop<br />
# /etc/init.d/postfix start<br />
# /etc/init.d/saslauthd start<br />
# /etc/init.d/dovecot start</p>
<p>##############<br />
To see if SMTP-AUTH and TLS work properly now run the following command:</p>
<p>telnet localhost 25</p>
<p>After you have established the connection to your Postfix mail server type</p>
<p>ehlo localhost</p>
<p>If you see the lines</p>
<p>250-STARTTLS</p>
<p>and</p>
<p>250-AUTH LOGIN PLAIN</p>
<p>everything is fine.</p>
<p>[root@server1 ssl]# telnet localhost 25<br />
Trying 127.0.0.1&#8230;<br />
Connected to localhost.localdomain (127.0.0.1).<br />
Escape character is &#8216;^]&#8217;.<br />
220 server1.example.com ESMTP Postfix<br />
ehlo localhost<br />
250-server1.example.com<br />
250-PIPELINING<br />
250-SIZE 10240000<br />
250-VRFY<br />
250-ETRN<br />
250-STARTTLS<br />
250-AUTH LOGIN PLAIN<br />
250-AUTH=LOGIN PLAIN<br />
250-ENHANCEDSTATUSCODES<br />
250-8BITMIME<br />
250 DSN<br />
quit<br />
221 2.0.0 Bye<br />
Connection closed by foreign host.<br />
[root@server1 ssl]#</p>
<p>Type</p>
<p>quit</p>
<p>Setting Maildir Dovecot<br />
Format Dovecot tidak menggunakan mbox tetapi menggunakan Maildir, aktifkan Maildir ini dari menu ISPConfig di Management -&gt; Server -&gt; Settings -&gt; Email.</p>
<p>postconf -e &#8216;home_mailbox = Maildir/&#8217;<br />
postconf -e &#8216;mailbox_command =&#8217;<br />
/etc/init.d/postfix restart</p>
<p>Setting Apache Webserver :<br />
# vi /etc/httpd/conf/httpd.conf</p>
<p>DirectoryIndex index.html index.htm index.shtml index.cgi index.php index.php3 index.pl</p>
<p>Instalasi ISPCpnfig :<br />
Download ISPConfig2 terlebih dahulu di sini<br />
# tar zxvf ISPConfig.tar.gz<br />
# cd ISPConfig<br />
# ./setup</p>
<p>CentOS 5.4<br />
Neuinstallation eines ISPConfig-Systems. / Installation of a new ISPConfig system. / Installation d&#8217;ISPConfig sur un nouveau syst�me.<br />
W�hlen Sie Ihre Sprache (deutsch/englisch/spanisch/franz�sisch/italienisch/niederl�ndisch/polnisch/schwedisch): / Please choose your language (German/English/Spanish/French/Italian/Dutch/Polish/Swedish):  / Merci de choisir votre langue (Allemand/Anglais/Espagnol/Fran�ais/Italien/N�erlandais/Polonais/Su�dois):<br />
1) de<br />
2) en<br />
3) es<br />
4) fr<br />
5) it<br />
6) nl<br />
7) pl<br />
 <img src='http://www.masrony.com/wp-includes/images/smilies/icon_cool.gif' alt='8)' class='wp-smiley' /> se<br />
Ihre Wahl: / Your Choice: / Votre Choix:2<br />
With the system installation, some system files are replaced where adjustments were made. This can lead to loss of entries in httpd.conf, named.conf as well as in the Sendmail configuration.</p>
<p>Do you want to continue with the installation? [y/n]y<br />
Please read through the licence carefully:</p>
<p>Copyright (c) 2005, projektfarm GmbH, Till Brehm, Falko Timme<br />
All rights reserved.</p>
<p>Redistribution and use in source and binary forms, with or without modification,<br />
are permitted provided that the following conditions are met:</p>
<p>* Redistributions of source code must retain the above copyright notice,<br />
this list of conditions and the following disclaimer.<br />
* Redistributions in binary form must reproduce the above copyright notice,<br />
this list of conditions and the following disclaimer in the documentation<br />
and/or other materials provided with the distribution.<br />
* Neither the name of ISPConfig nor the names of its contributors<br />
may be used to endorse or promote products derived from this software without<br />
specific prior written permission.</p>
<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS &#8220;AS IS&#8221; AND<br />
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED<br />
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.<br />
IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,<br />
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,<br />
BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,<br />
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY<br />
OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING<br />
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,<br />
EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
<p>Do you accept the licence? [y/n]y</p>
<p>Please select the installation mode. In expert mode you have to answer some additional questions. In standard mode standard values are assumed for these questions.<br />
1) standard<br />
2) expert<br />
Your Choice: 1</p>
<p>########## MAIL SERVER ##########</p>
<p>Checking for MTA&#8230;<br />
/usr/sbin/postfix<br />
OK</p>
<p>ISPConfig found the following MTA:<br />
postfix<br />
Is this correct? [y/n]y</p>
<p>########## FTP SERVER ##########</p>
<p>Checking if an FTP server is installed&#8230;<br />
/usr/sbin/proftpd<br />
OK</p>
<p>ISPConfig found the following FTP server:<br />
proftpd<br />
Is this correct? [y/n]y</p>
<p>########## PROCMAIL ##########</p>
<p>Checking for package procmail&#8230;<br />
/usr/bin/procmail<br />
OK</p>
<p>########## QUOTA ##########</p>
<p>Checking for package quota&#8230;<br />
/usr/bin/quota<br />
OK</p>
<p>########## MYSQL SERVER ##########</p>
<p>Checking for package MySQL&#8230;<br />
/usr/bin/mysql<br />
OK</p>
<p>########## OPENSSL ##########</p>
<p>Checking for package openssl&#8230;<br />
/usr/bin/openssl<br />
OK</p>
<p>########## DNS SERVER ##########</p>
<p>Checking for package bind&#8230;<br />
/usr/sbin/named<br />
OK</p>
<p>########## IPTABLES/IPCHAINS/IPFW ##########</p>
<p>Checking for program iptables/ipchains/ipfw&#8230;<br />
/sbin/iptables<br />
OK</p>
<p>########## WEB SERVER ##########</p>
<p>Checking for program httpd&#8230;<br />
/usr/sbin/httpd<br />
OK<br />
Checking the syntax of the httpd.conf&#8230;<br />
Syntax OK<br />
The syntax is ok!</p>
<p>########## gcc ##########</p>
<p>/usr/bin/gcc<br />
OK</p>
<p>########## make ##########</p>
<p>/usr/bin/make<br />
OK</p>
<p>########## lex ##########</p>
<p>/usr/bin/lex<br />
OK</p>
<p>########## g++ ##########</p>
<p>/usr/bin/g++<br />
OK</p>
<p>########## INSTALLATION ##########</p>
<p>proses instalasi&#8230;&#8230;&#8230;.<br />
&#8212;&#8212;&#8212;&#8212;<br />
Generating custom certificate signed by own CA [CUSTOM]<br />
______________________________________________________________________</p>
<p>STEP 0: Decide the signature algorithm used for certificates<br />
The generated X.509 certificates can contain either<br />
RSA or DSA based ingredients. Select the one you want to use.<br />
Signature Algorithm ((R)SA or (D)SA) [R]:R<br />
______________________________________________________________________</p>
<p>STEP 1: Generating RSA private key for CA (1024 bit) [ca.key]<br />
178805 semi-random bytes loaded<br />
Generating RSA private key, 1024 bit long modulus<br />
&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.++++++<br />
&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;&#8230;.++++++<br />
e is 65537 (0&#215;10001)<br />
______________________________________________________________________</p>
<p>STEP 2: Generating X.509 certificate signing request for CA [ca.csr]<br />
You are about to be asked to enter information that will be incorporated<br />
into your certificate request.<br />
What you are about to enter is what is called a Distinguished Name or a DN.<br />
There are quite a few fields but you can leave some blank<br />
For some fields there will be a default value,<br />
If you enter &#8216;.&#8217;, the field will be left blank.<br />
&#8212;&#8211;<br />
1. Country Name             (2 letter code) [XY]:ID<br />
2. State or Province Name   (full name)     [Snake Desert]:East Java<br />
3. Locality Name            (eg, city)      [Snake Town]:Malang<br />
4. Organization Name        (eg, company)   [Snake Oil, Ltd]:PT. Wedus Gembel<br />
5. Organizational Unit Name (eg, section)   [Certificate Authority]:Wedus Team<br />
6. Common Name              (eg, CA name)   [Snake Oil CA]:Wedus CA<br />
7. Email Address            (eg, name@FQDN) [ca@snakeoil.dom]:ca@wedus.us<br />
8. Certificate Validity     (days)          [365]:365<br />
______________________________________________________________________</p>
<p>STEP 3: Generating X.509 certificate for CA signed by itself [ca.crt]<br />
Certificate Version (1 or 3) [3]:3<br />
Signature ok<br />
subject=/C=ID/ST=East Java/L=Malang/O=PT. Wedus Gembel/OU=Wedus Team/CN=Wedus CA/emailAddress=ca@wedus.us<br />
Getting Private key<br />
Verify: matching certificate &amp; key modulus<br />
Verify: matching certificate signature<br />
../conf/ssl.crt/ca.crt: /C=ID/ST=East Java/L=Malang/O=PT. Wedus Gembel/OU=Wedus Team/CN=Wedus CA/emailAddress=ca@wedus.us<br />
error 18 at 0 depth lookup:self signed certificate<br />
OK<br />
______________________________________________________________________</p>
<p>STEP 4: Generating RSA private key for SERVER (1024 bit) [server.key]<br />
178947 semi-random bytes loaded<br />
Generating RSA private key, 1024 bit long modulus<br />
&#8230;&#8230;&#8230;++++++<br />
&#8230;&#8230;&#8230;&#8230;&#8230;++++++<br />
e is 65537 (0&#215;10001)<br />
______________________________________________________________________</p>
<p>STEP 5: Generating X.509 certificate signing request for SERVER [server.csr]<br />
You are about to be asked to enter information that will be incorporated<br />
into your certificate request.<br />
What you are about to enter is what is called a Distinguished Name or a DN.<br />
There are quite a few fields but you can leave some blank<br />
For some fields there will be a default value,<br />
If you enter &#8216;.&#8217;, the field will be left blank.<br />
&#8212;&#8211;<br />
1. Country Name             (2 letter code) [XY]:ID<br />
2. State or Province Name   (full name)     [Snake Desert]:East Java<br />
3. Locality Name            (eg, city)      [Snake Town]:Malang<br />
4. Organization Name        (eg, company)   [Snake Oil, Ltd]:PT. Wedus Gembel<br />
5. Organizational Unit Name (eg, section)   [Webserver Team]:Wedus Team<br />
6. Common Name              (eg, FQDN)      [www.snakeoil.dom]:www.wedus.us<br />
7. Email Address            (eg, name@fqdn) [www@snakeoil.dom]:info@wedus.us<br />
8. Certificate Validity     (days)          [365]:365<br />
______________________________________________________________________</p>
<p>STEP 6: Generating X.509 certificate signed by own CA [server.crt]<br />
Certificate Version (1 or 3) [3]:3<br />
Signature ok<br />
subject=/C=ID/ST=East Java/L=Malang/O=PT. Wedus Gembel/OU=Wedus Team/CN=www.wedus.us/emailAddress=info@wedus.us<br />
Getting CA Private Key<br />
Verify: matching certificate &amp; key modulus<br />
Verify: matching certificate signature<br />
../conf/ssl.crt/server.crt: OK<br />
______________________________________________________________________</p>
<p>STEP 7: Enrypting RSA private key of CA with a pass phrase for security [ca.key]<br />
The contents of the ca.key file (the generated private key) has to be<br />
kept secret. So we strongly recommend you to encrypt the server.key file<br />
with a Triple-DES cipher and a Pass Phrase.<br />
Encrypt the private key now? [Y/n]: y<br />
writing RSA key<br />
Enter PEM pass phrase:<br />
Verifying &#8211; Enter PEM pass phrase:<br />
Fine, you&#8217;re using an encrypted private key.<br />
_______________________________________________________________________</p>
<p>STEP 8: Enrypting RSA private key of SERVER with a pass phrase for security [server.key]<br />
The contents of the server.key file (the generated private key) has to be<br />
kept secret. So we strongly recommend you to encrypt the server.key file<br />
with a Triple-DES cipher and a Pass Phrase.<br />
Encrypt the private key now? [Y/n]: y<br />
writing RSA key<br />
Enter PEM pass phrase:<br />
Verifying &#8211; Enter PEM pass phrase:</p>
<p>&#8212;&#8212;&#8212;&#8212;<br />
Connected successfully to MySQL server<br />
no crontab for root<br />
Restarting some services&#8230;<br />
Shutting down postfix:                                     [  OK  ]<br />
Starting postfix:                                          [  OK  ]<br />
Shutting down proftpd:                                     [  OK  ]<br />
Starting proftpd:                                          [  OK  ]<br />
Starting ISPConfig system&#8230;<br />
Apache/1.3.41 mod_ssl/2.8.31 (Pass Phrase Dialog)<br />
Some of your private key files are encrypted for security reasons.<br />
In order to read them you have to provide us with the pass phrases.</p>
<p>Server jempol.wedus.us:81 (RSA)<br />
Enter pass phrase:</p>
<p>Ok: Pass Phrase Dialog successful.<br />
/root/ispconfig/httpd/bin/apachectl startssl: httpd started<br />
ISPConfig system is now up and running!<br />
Congratulations! Your ISPConfig system is now installed. If you had to install quota, please take the steps described in the installation manual. Otherwise your system is now available without reboot.<br />
Please direct your browser to</p>
<p>https://jempol.wedus.us:81</p>
<p>and log in:<br />
Username: admin<br />
Password: admin</p>
<p>[root@jempol install_ispconfig]#</p>
<p>Reference : http://www.howtoforge.org</p>
]]></content:encoded>
			<wfw:commentRss>http://www.masrony.com/2010/02/ispconfig-webhosting-control-panel-2/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Install DataBase PostgreSQL 8.4 di Ubuntu 9.10</title>
		<link>http://www.masrony.com/2009/11/install-database-postgresql-8-4-di-ubuntu-9-10/</link>
		<comments>http://www.masrony.com/2009/11/install-database-postgresql-8-4-di-ubuntu-9-10/#comments</comments>
		<pubDate>Sat, 21 Nov 2009 20:51:48 +0000</pubDate>
		<dc:creator>Mas Rony</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[Tips]]></category>
		<category><![CDATA[PostgreSQL 8.4]]></category>

		<guid isPermaLink="false">http://www.masrony.com/?p=320</guid>
		<description><![CDATA[
Untuk menginstall Database PostgreSQL di Ubuntu OS tidaklah sulit, apalagi ubuntu udah menyediakan package-packagenya. Mungkin yang perlu diperhatikan hanyalah langkah-langkahnya, berikut adalah langkah-langkah menginstall Databas PostgreSQL:

Langkah pertama adalah menginstall PostgreSQL Server disini saya menggunakan PostgreSQL Server 8.4, untuk mendapatkan packagenya bisa menggunakan Synaptic Package Manager

→ Quick Search with key “postgresql”
maka akan muncul nama-nama package yang [...]]]></description>
			<content:encoded><![CDATA[<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } --></p>
<p style="margin-bottom: 0in">Untuk menginstall Database PostgreSQL di Ubuntu OS tidaklah sulit, apalagi ubuntu udah menyediakan package-packagenya. Mungkin yang perlu diperhatikan hanyalah langkah-langkahnya, berikut adalah langkah-langkah menginstall Databas PostgreSQL:</p>
<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } --></p>
<p style="margin-bottom: 0in">Langkah pertama adalah menginstall PostgreSQL Server disini saya menggunakan PostgreSQL Server 8.4, untuk mendapatkan packagenya bisa menggunakan Synaptic Package Manager</p>
<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } --></p>
<blockquote><p>→ Quick Search with key “postgresql”</p></blockquote>
<p>maka akan muncul nama-nama package yang tersedia di ubuntu</p>
<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } --></p>
<blockquote><p>→ postgresql-server-dev-8.4</p></blockquote>
<p>pilih <em>mark for installation</em> lalu <em>Applay </em><span style="font-style: normal">maka secara otomatis proses installasi akan berjalan dengan sendirinya.</span></p>
<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } --></p>
<p style="margin-bottom: 0in">Langkah berikutnya adalah install PostgreSQL Client, PostgreSQL Contrib &amp; Install PgAdmin3, pada intalasi berikut bisa dilakukan melalui Synaptic atau langsung melalui <span id="more-320"></span>command seperti berikut:</p>
<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } --></p>
<blockquote><p>→ $ sudo apt-get install postgresql postgresql-client postgresql-contrib</p>
<p>→ $ sudo apt-get install pgadmin3</p></blockquote>
<p style="margin-left: 0.57in;text-indent: -0.3in;margin-bottom: 0in">ket: Baris pertama untuk menginstall paket postgresql dan paket-paket yang lain yang dibutuhkan, sedangkan dibaris berikutnya menginstall pgadmin yaitu Graphical User Interface untuk PostgreSQL Admin.</p>
<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } --></p>
<p style="margin-bottom: 0in">Setelah proses instalasi berhasil, yang perlu diperhatikan adalah melakukan reset password postgres (account administrator). Ketik perintah berikut dalam command:</p>
<p><!-- 		@page { margin: 0.20in } 		P { margin-bottom: 0.03in } --></p>
<blockquote><p>→ $ sudo su postgres -c psql</p>
<p>→ postgres=# ALTER USER postgres WITH PASSWORD &#8216;passwordku&#8217;;</p>
<p>→ postgres=# \q</p></blockquote>
<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } -->perintah tersebut akan merubah password postgres menjadi passwordku, dan sekarang waktunya menyamakan password unix untuk user postgres.</p>
<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } --></p>
<blockquote><p>→ $ sudo passwd -d postgres</p>
<p>→ $ sudo su postgres -c passwd</p></blockquote>
<p>masukkan password yang sama dengan tadi, dalam hal ini passwordku(minimal 6 Digit). Setelah itu agar pgAdmin bisa masuk ke database server menggunakan user postgres, kita harus men set-up PostgreSQL admin pack. caranya jalankan perintah berikut dalam command line</p>
<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } --></p>
<blockquote><p>→$ sudo su postgres -c psql &lt; /usr/share/postgresql/8.4/contrib/adminpack.sql</p></blockquote>
<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } -->Kemudia atur konfigurasi postgresql.conf</p>
<blockquote><p>→ $ sudo gedit /etc/postgresql/8.4/main/postgresql.conf</p></blockquote>
<p>ganti baris berikut:</p>
<p>#listen_addresses = ‘localhost’</p>
<p>menjadi</p>
<p>listen_addresses = ‘*’</p>
<p>dan juga baris :</p>
<p>#password_encryption = on</p>
<p>menjadi</p>
<p>password_encryption = on</p>
<p>Simpan dan tutup gedit.</p>
<p>Langkah terakhir adalah menentukan siapa saja yang berhak masuk ke dalam server dengan mengedit file pg_hba.con</p>
<blockquote><p>$ sudo gedit /etc/postgresql/8.4/main/pg_hba.conf</p></blockquote>
<p>pastikan isi file seperti berikut</p>
<blockquote><p># DO NOT DISABLE!</p>
<p># If you change this first entry you will need to make sure that the</p>
<p># database</p>
<p># super user can access the database using some other method.</p>
<p># Noninteractive</p>
<p># access to all databases is required during automatic maintenance</p>
<p># (autovacuum, daily cronjob, replication, and similar tasks).</p>
<p>#</p>
<p># Database administrative login by UNIX sockets</p>
<p>local all postgres ident sameuser</p>
<p># TYPE DATABASE USER CIDR-ADDRESS METHOD</p></blockquote>
<blockquote><p># “local” is for Unix domain socket connections only</p>
<p>local all all md5</p>
<p># IPv4 local connections:</p>
<p>host all all 127.0.0.1/32 md5</p>
<p># IPv6 local connections:</p>
<p>host all all ::1/128 md5</p></blockquote>
<blockquote><p># Connections for all PCs on the subnet</p>
<p>#</p>
<p># TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD</p>
<p>host all all [ip address] [subnet mask] md5</p></blockquote>
<p>Ganti [ip address] denga alamat ip dari komputer yang diperbolehkan masuk ke dalam server database, seperti 192.168.1.5 dan [subnet mask] dengan subnet jaringan kita. Jika ingin yang terkoneksi dari semua ip yang ada dalam subnet, anda bisa memberi ip address dengan subnet address seperti 192.168.1.0 maka semua ip 192.168.1.x</p>
<p>dan langkah yang terakhir adalah merestart Server PostgreSQL dengan perintah:</p>
<p><!-- 		@page { margin: 0.79in } 		P { margin-bottom: 0.08in } --></p>
<blockquote><p>→ $ sudo /etc/init.d/postgresql-8.4 restart</p></blockquote>
<p>Selesai sudah, Semoga bermanfaat.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.masrony.com/2009/11/install-database-postgresql-8-4-di-ubuntu-9-10/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Install Openbravo ERP di Ubuntu Jaunty</title>
		<link>http://www.masrony.com/2009/06/install-openbravo-erp-di-ubuntu-jaunty/</link>
		<comments>http://www.masrony.com/2009/06/install-openbravo-erp-di-ubuntu-jaunty/#comments</comments>
		<pubDate>Wed, 24 Jun 2009 13:39:35 +0000</pubDate>
		<dc:creator>Mas Rony</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Technology]]></category>
		<category><![CDATA[crm]]></category>
		<category><![CDATA[erp]]></category>
		<category><![CDATA[install openbravo]]></category>
		<category><![CDATA[openbravo]]></category>

		<guid isPermaLink="false">http://www.masrony.com/?p=265</guid>
		<description><![CDATA[Langkah-langkah instalasi Openbravo ERP dan dependensinya di Ubuntu. Langkah instalasi ini diinstall di environment Jaunty desktop dan disarankan menggunakan memory 1GB.
a. PostgreSQL
- Install paket postgreSQL :
$ sudo aptitude install postgresql-8.3 postgresql-contrib-8.3
- Ubah password root postgresql :
$ sudo su &#8211; postgres -c psql
postgres=# alter role postgres with password &#8216;new_password&#8217;;
postgres=# \q
b. Sun Java (JDK)
- Install paket instalasi [...]]]></description>
			<content:encoded><![CDATA[<p>Langkah-langkah instalasi Openbravo ERP dan dependensinya di Ubuntu. Langkah instalasi ini diinstall di environment Jaunty desktop dan disarankan menggunakan memory 1GB.<br />
a. PostgreSQL<br />
- Install paket postgreSQL :<br />
$ sudo aptitude install postgresql-8.3 postgresql-contrib-8.3<br />
- Ubah password root postgresql :<br />
$ sudo su &#8211; postgres -c psql<br />
postgres=# alter role postgres with password &#8216;new_password&#8217;;<br />
postgres=# \q</p>
<p>b. Sun Java (JDK)<br />
- Install paket instalasi java JDK:<br />
$ sudo aptitude install sun-java6-jdk<br />
- Set Sun Java JDK sebagai default JDK:<br />
$ sudo update-java-alternatives -s java-6-sun<br />
- Buat variable JAVA_HOME:<br />
$ sudo echo &#8216;JAVA_HOME=&#8221;/usr/lib/jvm/java-6-sun&#8221;&#8216; | sudo tee -a /etc/environment<br />
- Supaya variabel ini bisa langsung digunakan tulis :<br />
$ source /etc/environment<br />
<span id="more-265"></span><br />
c. Apache-tomcat<br />
- Install paket apache tomcat :<br />
$ sudo aptitude install tomcat6 tomcat6-admin<br />
- Cek port running tomcat. Apabila apache webserver sudah terinstall di port 80, biasanya tomcat akan running di port 8080, untuk memastikan dari firefox, buka http://localhost:8080 atau menggunakan tools nmap :<br />
$ sudo nmap -v -sS -A localhost<br />
- Set variabel CATALINA_HOME dan CATALINA_BASE :<br />
$ sudo echo &#8216;CATALINA_HOME=&#8221;/usr/share/tomcat6&#8243;&#8216; | sudo tee -a /etc/environment<br />
$ sudo echo &#8216;CATALINA_BASE=&#8221;/var/lib/tomcat6&#8243;&#8216; | sudo tee -a /etc/environment<br />
- Edit file /etc/default/tomcat6, dan tambahkan baris dibawah :<br />
JAVA_OPTS=&#8221;-Djava.awt.headless=true -Xms384M -Xmx512M -XX:MaxPermSize=256M&#8221;<br />
- Kopi tools.jar dari java class path :<br />
$ sudo cp $JAVA_HOME/lib/tools.jar /var/lib/tomcat6/lib/<br />
- Buat user manager dan account manager tomcat di /etc/tomcat6/tomcat-users.xml :<br />
<script>< ?xml version='1.0' encoding='utf-8'?>
    <tomcat -users>
      <role rolename="manager"/>
      <role rolename="admin"/>
      <user username="admin" password="admin" roles="admin,manager"/>
    </tomcat></script></p>
<p>d. Apache Ant<br />
- Install Apache Ant :<br />
$ sudo aptitude install ant ant-optional<br />
- Set home variable apache ant :<br />
$ sudo echo &#8216;ANT_HOME=&#8221;/usr/share/ant&#8221;&#8216; | sudo tee -a /etc/environment<br />
- Set variable ant_opts (32bit):<br />
$ sudo echo &#8216;ANT_OPTS=&#8221;-Xmx1024M&#8221;&#8216; | sudo tee -a /etc/environment<br />
- Apabila menggunakan 64bits bisa menggunakan perintah ini :<br />
$ sudo echo &#8216;ANT_OPTS=&#8221;-Xmx1024M -XX:MaxPermSize=128M&#8221;&#8216; | sudo tee -a /etc/environment<br />
&#8212;- Sebenarnya dah selesai tinggal install openbravo-nya, tapi lagi males banget untuk nulis.. hehehe&#8230;<br />
ntar aja update lagi deh&#8230;..</p>
]]></content:encoded>
			<wfw:commentRss>http://www.masrony.com/2009/06/install-openbravo-erp-di-ubuntu-jaunty/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
