1. BUNDLE INSTALLATION

• ServerSignature Off
  ServerTokens Prod
  TraceEnable Off
  NameVirtualHost    *:80
  
  <VirtualHost *:80>
      ServerName node.ajvm.net
      ServerAlias www.node.ajvm.net
      DocumentRoot /var/www/html
  </VirtualHost>

• Reserved
  

• <VirtualHost *:80>
      ServerName helpdesk.noc.net.my
      RewriteEngine      On
      RewriteRule      ^(.*)$    http://localhost:8081/$1    [P]
      UseCanonicalName On
      RewriteRule    ^(.*)$ [L]
  </VirtualHost>
  
  
• <VirtualHost *:80>
      ServerName hrms.ajv.com.my
      RewriteEngine      On
      RewriteRule      ^(.*)$    http://hrms.ajv.com.my/$1 [P]
      UseCanonicalName On
      RewriteRule ^(.*)$ [L]
  </VirtualHost>

• # note:-
  # /etc/hosts must have this line "192.168.1.200 hrms.ajv.com.my" LAN Server
  # which is http://hrms.ajv.com.my is located on the server 192.168.1.200

• <VirtualHost *:80>
         ServerName unixman.noc.net.my
         ServerAdmin  noc@unixman.pluto.com
         DocumentRoot /home/unixman/www
         TransferLog /home/unixman/logs/access-log
  </VirtualHost>

• <Directory /home/mirrornoc/www/pub>
         Options FollowSymLinks Indexes
  </Directory>
  
  <VirtualHost  *:80>
         ServerName mirror.noc.net.my
         ServerAdmin  noc@mirror.pluto.com
         DocumentRoot /home/mirrornoc/www
         TransferLog /home/mirrornoc/logs/access-log
         ScriptAlias /cgi-bin/ /home/mirrornoc/www/cgi-bin/
  </VirtualHost>

• Reserved
  

• Options    Indexes    FollowSymLinks +Includes
  
  AddType    text/html .shtml
  AddOutputFilter    INCLUDES .shtml

• Reserved
  

• [root@server ~]# cd /etc/skel/
  [root@server skel]# mkdir logs
  [root@server skel]# mkdir public_html
  [root@server skel]# mkdir public_html/cgi-bin
  [root@server skel]# ln -s public_html/ www

• Reserved

• openssl    req -new -x509 -nodes -out server.crt -keyout server.key
  mkdir -p /etc/httpd/conf/ssl.crt
  mkdir -p /etc/httpd/conf/ssl.key
  cp server.crt /etc/httpd/conf/ssl.crt
  cp server.key /etc/httpd/conf/ssl.key
  

• Listen 443
  NameVirtualHost *:443
  
  
  <VirtualHost *:443>
          <Directory /var/www/html/oc>
          AllowOverride All
          </Directory>
        ServerName 192.168.100.200
        SSLEngine on
        SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
        SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
        DocumentRoot /var/www/html/oc
  </VirtualHost>
  
  
  LoadModule ssl_module  /usr/lib64/httpd/modules/mod_ssl.so

• normaly on by default but check
  grep 'mod_deflate' /etc/httpd/conf/httpd.conf
  and add    the following to httpd.conf

• # Deflate output configuration
  #
  AddOutputFilterByType DEFLATE text/html    text/plain text/xml text/css
  BrowserMatch ^Mozilla/4    gzip-only-text/html
  BrowserMatch ^Mozilla/4\.0[678] no-gzip
  BrowserMatch \bMSIE !no-gzip !gzip-only-text/htm

• chmod 711 $HOME   
  chmod 755 public_html
  chmod a+r public_html/*
  

• Reserved
  

• Reserved
  

• install repoforge repository
  

• yum install phpmyadmin php-mcrypt
  

• edit phpmyadmin.conf in    /etc/httpd/conf.d
  <Directory "/usr/share/phpmyadmin">
    Order    Deny,Allow
    Allow    from all
  </Directory>
  

• [root@rdesk conf.d]# nano -w /usr/share/phpmyadmin/config.inc.php
  $cfg['blowfish_secret']    = 'your_own_secret';
  $cfg['Servers'][$i]['auth_type'] = 'http';    <<< from cookie change to http if necessary
  

• usage as following:
  
  MySQL >    db > Browse > Insert
  host = localhost
  db   = name_db
  user = shell user for that db
  
  click YES for the top six option .. from select_priv until drop_priv
  and another one.. the bottom one .. alter_priv
  save
  
  MySQL >    user > Browse >    Insert
  host = localhost
  user = shell user
  password = password_for_the_user <select password field>
  save
  
  Home > "create the db ( name_db ) or for the particular user u just create"
  
         Reload MySQL
  

• Reserved
  

• <?php
    header ('Location:http://unixman.noc.net.my/src/manual_contents.html');
   ?>
  

• In the shell DocumentRoot $ echo '<?php phpinfo (); ?>' > info.php

• chmod -R 777 ./folder
  

• <?php
  chmod ("configure.php",    644);
  ?>
  

• chmod 0666 file.php
  

• edit php.ini to    make off "expose_php = Off"

• http://phpsec.org/projects/phpsecinfo/
  

•   [mysqld]
      bind-address=127.0.0.1
  

• Please follow this LINK
  

•  mysql>    GRANT ALL PRIVILEGES ON    noc_db.*
      -> TO 'noc'@'localhost'
      -> IDENTIFIED BY 'nocpass'    WITH GRANT OPTION;
   mysql>    create database    noc_db;
   mysql>    FLUSH PRIVILEGES;
  

mysql> use mysql;
mysql> select User from mysql.user;
+------+
| User |
+------+
| root |
---------------------

root@sol-11dev:/home/noc/www/phpmyadmin/examples# mysql < create_tables.sql

• GRANT ALL PRIVILEGES ON    *.* TO 'root'@'%'IDENTIFIED BY '' WITH GRANT OPTION;
  

• mysql> use mysql;
  mysql> update user set password=PASSWORD("new-root-pass") where User='root';
  mysql> flush privileges;
  mysql> quit
  

• # mysqld_safe --skip-grant-tables &
• # mysql    -u root
  

• http://mirror.provenscaling.com/mysql/enterprise/binaries/5.0/

• ssh -f -L 3001:localhost:3306 root@nocnet -p 8022 sleep 2d
• run mysqladministrator port 3001
  

• Please Clean Up    MySQL default installation
  
  [root@sme ~]# mysql -u root -p
  Enter password:
  Welcome to the MySQL monitor.  Commands    end with ; or \g.
  Your MySQL connection id is 2 to server version: 5.0.22
  
  Type 'help;' or    '\h' for help. Type '\c' to clear the buffer.
  
  mysql> drop database test;
  Query OK, 0 rows affected (0.02    sec)
  
  mysql> use mysql;
  Reading table information for completion of table and column names
  You can turn off this feature to get a quicker startup with -A
  
  Database changed
  mysql> delete from db;
  Query OK, 2 rows affected (0.00    sec)
  
  mysql> delete from user where not (host="localhost" and user="root");
  Query OK, 3 rows affected (0.02    sec)
  
  mysql> flush privileges;
  Query OK, 0 rows affected (0.00    sec)
  
  mysql> \q
  Bye
  

• [root@invt-svr smf]# mysqldump --all-databases --lock-tables=0 -uroot -B | bzip2 > /home/rou/all-database-invt-svr-20140612.bz2