|
| [SMS] - Superb Mini Server Project Support Forum |
 |
| |
  |
| View previous topic :: View next topic |
| Author |
Message |
gerasimos_h
Site Admin
Joined: 09 Aug 2007
Posts: 1757
Location: Greece
|
 Posted: Mon Nov 12, 2012 4:51 pm Post subject: Securing and optimizing your SMS Server (CLI) |
 |
|
SMS has a CLI wizard through smsconfig script to secure and optimize your SMS server.
The wizard intended for clean installations of SMS with default passwords, although some part or all might work in older installations.
1. To start the wizard issue from a terminal "smsconfig secure"
| Code: | root@sms:~# smsconfig secure
+----------------------------------------------------+
| SMS - Securing and Optimizing your Server |
+----------------------------------------------------+
| This script will help you to change all default |
| passwords for all default users and services. |
| Press any key to continue or (Ctrl+C) to exit. |
+----------------------------------------------------+
|
2. Next step the script ask you to change the password for user "administrator"
| Code: | Changing password for administrator
Enter the new password (minimum of 5 characters)
Please use a combination of upper and lower case letters and numbers.
New password:
|
3. Next you will be asked to disable shell access to users (that is intended for old installations too).
| Code: | +-------------------------------+
| Manage users login: |
+-------------------------------+
spamduser
vmail
dovecot
administrator
Do you want to disable shell access to those users? (y/n):
|
4. The next screen ask you, how to treat default ftp accounts "ftpuser" and "webftp".
| Code: | +-------------------------------+
| Manage ftp users: |
+-------------------------------+
(Y)Change passwords (D)Delete all ftp users (S)Skip |
5. If openldap is running, the wizard prompt you to change passwords for openldap root and uid=administrator
| Code: | +-------------------------------+
| Manage OpenLDAP users: |
+-------------------------------+
Enter new password for OpenLDAP's root:
Enter new password for uid=Administrator,ou=virtualusers,o=virtualmail,dc=sms,dc=org: |
6. If MySQL is running the wizard ask you to manage MySQL users. The script search config files of weberp and sqlgey and if default passwords found, it will prompt you to change those too.
| Code: | +-------------------------------+
| Manage MySQL users: |
+-------------------------------+
Enter new password for MySQL's root:
Choose password for database sqlgrey:
Choose password for database weberp: |
7. Next the wizard prompt you to change default Webmin admin password.
| Code: | +-------------------------------+
| Manage Webmin login: |
+-------------------------------+
Choose password for admin user:
|
8. Next screen you have to choose what to do, with web apps weberp and torrentflux.
| Code: | +-------------------------------+
| Manage Web apps: |
+-------------------------------+
Are you going to use Torrentflux? (y/n)
n
Are you going to use webERP? (y/n)
n |
9. Next you have to manage samba network access, by default script search your subnet and apply it as default.
| Code: | +-------------------------------+
| Manage Samba network access: |
+-------------------------------+
Do you want to limit samba access to your network only [192.168.1.]? (y/n) |
This is it, "smsconfig secure" is much simpler than sms_secure.kmdr GUI, but since you are already using a terminal, you might not need that anyway.
To disable services you can use smsconfig.
| Code: | +----------------------------------------------------+
| Configuration completed |
+----------------------------------------------------+ |
gerasimos_h
_________________
Superb! Mini Server Project Manager
http://sms.it-ccs.com |
|
| Back to top |
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum
|
|
 |
 |
SMS - Superb! Mini Server Project © 2016
Powered by phpBB © 2001, 2002 phpBB Group
iCGstation v1.0 Template By Ray © 2003, 2004 iOptional
|
 |
|
|
