MySQL Change root Password

How do I change MySQL root password under Linux, FreeBSD, OpenBSD and UNIX like operating system over ssh / telnet session?

mysqladmin command to change root passwordSetting up MySQL password is one of the essential tasks. By default root user is MySQL admin account user. Please note that the Linux / UNIX root account for your operating system and MySQL root are different. They are separate and nothing to do with each other. Sometime your may remove mysql root account and setup admin as mysql super user for security purpose.

If you have never set a root password for MySQL server, the server does not require a password at all for connecting as root. To setup root password for first time, use mysqladmin command at shell prompt as follows:
$ mysqladmin -u root password NEWPASSWORD
However, if you want to change (or update) a root password, then you need to use the following command:
$ mysqladmin -u root -p'oldpassword' password newpass
For example, If the old password is abc, you can set the new password to 123456, enter:

$ mysqladmin -u root -p'abc' password '123456'

Change MySQL password for other users

To change a normal user password you need to type (let us assume you would like to change password for user vivek) the following command:
$ mysqladmin -u user -p oldpassword password newpass

Changing MySQL root user password using MySQL sql command

This is another method. MySQL stores username and passwords in user table inside MySQL database. You can directly update password using the following method to update or change password for user vivek:

1) Login to mysql server, type the following command at shell prompt:
$ mysql -u root -p

2) Use mysql database (type command at mysql> prompt):

mysql> use mysql;

3) Change password for user vivek, enter:

mysql> update user set password=PASSWORD("NEWPASSWORD") where User='user';

4) Finally, reload the privileges:

mysql> flush privileges; mysql> quit

The last method can be used with PHP, Python or Perl scripting mysql API.

Install and Configure Apache on CentOS

This tutorial covers installing Apache on CentOS along with some basic configuration to get it up and running.

Install Apache

Here we are installing Apache and SSL right away in case we ever need it.

$ yum install httpd mod_ssl 

Once thats done turn on the Apache service so that it automatically starts on boot.

$ chkconfig --level 2345 httpd on 

Finally we can start the Apache service.

$ /etc/init.d/httpd start 

Open HTTP/HTTPS Ports

We are going to open up ports 80 and 443 for http and https protocols in iptables.

$ vi /etc/sysconfig/iptables 

Add the following lines (make sure its above the reject statement).

-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited 

Restart the iptables service for the changes to take effect.

$ /etc/init.d/iptables restart 

Disable Security Enhanced Linux (SELinux)

This makes sure other computers can connect to the server.

$ vi /etc/sysconfig/selinux 

Make sure the SELINUX setting is set to disabled

SELINUX=disabled 

May require a system reboot at this point for this one to take effect.

CentOS / Redhat Iptables Firewall Configuration Tutorial

CentOS / Redhat Iptables Firewall Configuration Tutorial

How do I configure a host-based firewall called Netfilter (iptables) under CentOS / RHEL / Fedora / Redhat Enterprise Linux?

Netfilter is a host-based firewall for Linux operating systems. It is included as part of the Linux distribution and it is activated by default. This firewall is controlled by the program called iptables. Netfilter filtering take place at the kernel level, before a program can even process the data from the network packet.

Iptables Config File
The default config files for RHEL / CentOS / Fedora Linux are:

/etc/sysconfig/iptables - The system scripts that activate the firewall by reading this file.

Task: Display Default Rules

Type the following command:
iptables --line-numbers -n -L
Sample outputs:

Chain INPUT (policy ACCEPT)
num target prot opt source destination
1 RH-Firewall-1-INPUT all -- 0.0.0.0/0 0.0.0.0/0

Chain FORWARD (policy ACCEPT)
num target prot opt source destination
1 RH-Firewall-1-INPUT all -- 0.0.0.0/0 0.0.0.0/0

Chain OUTPUT (policy ACCEPT)
num target prot opt source destination

Chain RH-Firewall-1-INPUT (2 references)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
2 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 255
3 ACCEPT udp -- 0.0.0.0/0 224.0.0.251 udp dpt:5353
4 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53
5 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
6 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:53
8 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited

Task: Turn On Firewall

Type the following two commands to turn on firewall:

chkconfig iptables on
service iptables start
# restart the firewall
service iptables restart
# stop the firewall
service iptables stop

Understanding Firewall

There are total 4 chains:

INPUT - The default chain is used for packets addressed to the system. Use this to open or close incoming ports (such as 80,25, and 110 etc) and ip addresses / subnet (such as 202.54.1.20/29).
OUTPUT - The default chain is used when packets are generating from the system. Use this open or close outgoing ports and ip addresses / subnets.
FORWARD - The default chains is used when packets send through another interface. Usually used when you setup Linux as router. For example, eth0 connected to ADSL/Cable modem and eth1 is connected to local LAN. Use FORWARD chain to send and receive traffic from LAN to the Internet.
RH-Firewall-1-INPUT - This is a user-defined custom chain. It is used by the INPUT, OUTPUT and FORWARD chains.

Packet Matching Rules

Each packet starts at the first rule in the chain .
A packet proceeds until it matches a rule.
If a match found, then control will jump to the specified target (such as REJECT, ACCEPT, DROP).

Target Meanings

The target ACCEPT means allow packet.
The target REJECT means to drop the packet and send an error message to remote host.
The target DROP means drop the packet and do not send an error message to remote host or sending host.

/etc/sysconfig/iptables

Edit /etc/sysconfig/iptables, enter:
# vi /etc/sysconfig/iptables
You will see default rules as follows:

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT

Drop All Traffic

Find lines:

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]

Update as follows to change the default policy to DROP from ACCEPT for the INPUT and FORWARD built-in chains:

:INPUT DROP [0:0]
:FORWARD DROP [0:0]

Log and Drop Spoofing Source Addresses

Append the following lines before final COMMIT line:

-A INPUT -i eth0 -s 10.0.0.0/8 -j LOG --log-prefix "IP DROP SPOOF "
-A INPUT -i eth0 -s 172.16.0.0/12 -j LOG --log-prefix "IP DROP SPOOF "
-A INPUT -i eth0 -s 192.168.0.0/16 -j LOG --log-prefix "IP DROP SPOOF "
-A INPUT -i eth0 -s 224.0.0.0/4 -j LOG --log-prefix "IP DROP MULTICAST "
-A INPUT -i eth0 -s 240.0.0.0/5 -j LOG --log-prefix "IP DROP SPOOF "
-A INPUT -i eth0 -d 127.0.0.0/8 -j LOG --log-prefix "IP DROP LOOPBACK "
-A INPUT -i eth0 -s 169.254.0.0/16 -j LOG --log-prefix "IP DROP MULTICAST "
-A INPUT -i eth0 -s 0.0.0.0/8 -j LOG --log-prefix "IP DROP "
-A INPUT -i eth0 -s 240.0.0.0/4 -j LOG --log-prefix "IP DROP "
-A INPUT -i eth0 -s 255.255.255.255/32 -j LOG --log-prefix "IP DROP "
-A INPUT -i eth0 -s 168.254.0.0/16 -j LOG --log-prefix "IP DROP "
-A INPUT -i eth0 -s 248.0.0.0/5 -j LOG --log-prefix "IP DROP "

Log And Drop All Traffic

Find the lines:

-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT

Update it as follows:

-A RH-Firewall-1-INPUT -j LOG
-A RH-Firewall-1-INPUT -j DROP
COMMIT

Open Port

To open port 80 (Http server) add the following before COMMIT line:

-A RH-Firewall-1-INPUT -m tcp -p tcp --dport 80 -j ACCEPT

To open port 53 (DNS Server) add the following before COMMIT line:

-A RH-Firewall-1-INPUT -m tcp -p tcp --dport 53 -j ACCEPT
-A RH-Firewall-1-INPUT -m udp -p tcp --dport 53 -j ACCEPT

To open port 443 (Https server) add the following before COMMIT line:

-A RH-Firewall-1-INPUT -m tcp -p tcp --dport 443 -j ACCEPT

To open port 25 (smtp server) add the following before COMMIT line:

-A RH-Firewall-1-INPUT -m tcp -p tcp --dport 25 -j ACCEPT

Only allow SSH traffic From 192.168.1.0/24

-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -m state --state NEW -p tcp --dport 22 -j ACCEPT

Enable Printing Access For 192.168.1.0/24

-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -p tcp -m tcp --dport 631 -j ACCEPT

Allow Legitimate NTP Clients to Access the Server

-A RH-Firewall-1-INPUT -s 192.168.1.0/24 -m state --state NEW -p udp --dport 123 -j ACCEPT

Open FTP Port 21 (FTP)

-A RH-Firewall-1-INPUT -m state --state NEW -p tcp --dport 21 -j ACCEPT

Save and close the file. Edit /etc/sysconfig/iptables-config, enter:
# vi /etc/sysconfig/iptables-config
Make sure ftp module is loaded with the space-separated list of modules:

IPTABLES_MODULES="ip_conntrack_ftp"

To restart firewall, type the following commands:
# service iptables restart
# iptables -vnL --line-numbers

Edit /etc/sysctl.conf For DoS and Syn Protection

Edit /etc/sysctl.conf to defend against certain types of attacks and append / update as follows:

net.ipv4.conf.all.log_martians = 1
net.ipv4.conf.default.accept_source_route = 0
net.ipv4.conf.default.accept_redirects = 0
net.ipv4.conf.default.secure_redirects = 0
net.ipv4.icmp_echo_ignore_broadcasts = 1
#net.ipv4.icmp_ignore_bogus_error_messages = 1
net.ipv4.tcp_syncookies = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.conf.default.rp_filter = 1


See previous FAQ, "Linux Kernel /etc/sysctl.conf Security Hardening" for more details.

Alternate Configuration Option

You can skip /etc/sysconfig/iptables file and create a shell script from scratch as follows:

#!/bin/bash
# A sample firewall shell script
IPT="/sbin/iptables"
SPAMLIST="blockedip"
SPAMDROPMSG="BLOCKED IP DROP"
SYSCTL="/sbin/sysctl"
BLOCKEDIPS="/root/scripts/blocked.ips.txt"

# Stop certain attacks
echo "Setting sysctl IPv4 settings..."
$SYSCTL net.ipv4.ip_forward=0
$SYSCTL net.ipv4.conf.all.send_redirects=0
$SYSCTL net.ipv4.conf.default.send_redirects=0
$SYSCTL net.ipv4.conf.all.accept_source_route=0
$SYSCTL net.ipv4.conf.all.accept_redirects=0
$SYSCTL net.ipv4.conf.all.secure_redirects=0
$SYSCTL net.ipv4.conf.all.log_martians=1
$SYSCTL net.ipv4.conf.default.accept_source_route=0
$SYSCTL net.ipv4.conf.default.accept_redirects=0
$SYSCTL net.ipv4.conf.default.secure_redirects=0
$SYSCTL net.ipv4.icmp_echo_ignore_broadcasts=1
#$SYSCTL net.ipv4.icmp_ignore_bogus_error_messages=1
$SYSCTL net.ipv4.tcp_syncookies=1
$SYSCTL net.ipv4.conf.all.rp_filter=1
$SYSCTL net.ipv4.conf.default.rp_filter=1
$SYSCTL kernel.exec-shield=1
$SYSCTL kernel.randomize_va_space=1

echo "Starting IPv4 Firewall..."
$IPT -F
$IPT -X
$IPT -t nat -F
$IPT -t nat -X
$IPT -t mangle -F
$IPT -t mangle -X

# load modules
modprobe ip_conntrack

[ -f "$BLOCKEDIPS" ] && BADIPS=$(egrep -v -E "^#|^$" "${BLOCKEDIPS}")

# interface connected to the Internet
PUB_IF="eth0"

#Unlimited traffic for loopback
$IPT -A INPUT -i lo -j ACCEPT
$IPT -A OUTPUT -o lo -j ACCEPT

# DROP all incomming traffic
$IPT -P INPUT DROP
$IPT -P OUTPUT DROP
$IPT -P FORWARD DROP

if [ -f "${BLOCKEDIPS}" ];
then
# create a new iptables list
$IPT -N $SPAMLIST

for ipblock in $BADIPS
do
$IPT -A $SPAMLIST -s $ipblock -j LOG --log-prefix "$SPAMDROPMSG "
$IPT -A $SPAMLIST -s $ipblock -j DROP
done

$IPT -I INPUT -j $SPAMLIST
$IPT -I OUTPUT -j $SPAMLIST
$IPT -I FORWARD -j $SPAMLIST
fi

# Block sync
$IPT -A INPUT -i ${PUB_IF} -p tcp ! --syn -m state --state NEW -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "Drop Sync"
$IPT -A INPUT -i ${PUB_IF} -p tcp ! --syn -m state --state NEW -j DROP

# Block Fragments
$IPT -A INPUT -i ${PUB_IF} -f -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "Fragments Packets"
$IPT -A INPUT -i ${PUB_IF} -f -j DROP

# Block bad stuff
$IPT -A INPUT -i ${PUB_IF} -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP
$IPT -A INPUT -i ${PUB_IF} -p tcp --tcp-flags ALL ALL -j DROP

$IPT -A INPUT -i ${PUB_IF} -p tcp --tcp-flags ALL NONE -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "NULL Packets"
$IPT -A INPUT -i ${PUB_IF} -p tcp --tcp-flags ALL NONE -j DROP # NULL packets

$IPT -A INPUT -i ${PUB_IF} -p tcp --tcp-flags SYN,RST SYN,RST -j DROP

$IPT -A INPUT -i ${PUB_IF} -p tcp --tcp-flags SYN,FIN SYN,FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "XMAS Packets"
$IPT -A INPUT -i ${PUB_IF} -p tcp --tcp-flags SYN,FIN SYN,FIN -j DROP #XMAS

$IPT -A INPUT -i ${PUB_IF} -p tcp --tcp-flags FIN,ACK FIN -m limit --limit 5/m --limit-burst 7 -j LOG --log-level 4 --log-prefix "Fin Packets Scan"
$IPT -A INPUT -i ${PUB_IF} -p tcp --tcp-flags FIN,ACK FIN -j DROP # FIN packet scans

$IPT -A INPUT -i ${PUB_IF} -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP

# Allow full outgoing connection but no incomming stuff
$IPT -A INPUT -i ${PUB_IF} -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPT -A OUTPUT -o ${PUB_IF} -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

# Allow ssh
$IPT -A INPUT -i ${PUB_IF} -p tcp --destination-port 22 -j ACCEPT

# Allow http / https (open port 80 / 443)
$IPT -A INPUT -i ${PUB_IF} -p tcp --destination-port 80 -j ACCEPT
#$IPT -A INPUT -o ${PUB_IF} -p tcp --destination-port 443 -j ACCEPT

# allow incomming ICMP ping pong stuff
$IPT -A INPUT -i ${PUB_IF} -p icmp --icmp-type 8 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
#$IPT -A OUTPUT -o ${PUB_IF} -p icmp --icmp-type 0 -m state --state ESTABLISHED,RELATED -j ACCEPT

# Allow port 53 tcp/udp (DNS Server)
$IPT -A INPUT -i ${PUB_IF} -p udp --dport 53 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
#$IPT -A OUTPUT -o ${PUB_IF} -p udp --sport 53 -m state --state ESTABLISHED,RELATED -j ACCEPT

$IPT -A INPUT -i ${PUB_IF} -p tcp --destination-port 53 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
#$IPT -A OUTPUT -o ${PUB_IF} -p tcp --sport 53 -m state --state ESTABLISHED,RELATED -j ACCEPT

# Open port 110 (pop3) / 143
$IPT -A INPUT -i ${PUB_IF} -p tcp --destination-port 110 -j ACCEPT
$IPT -A INPUT -i ${PUB_IF} -p tcp --destination-port 143 -j ACCEPT

##### Add your rules below ######
#
#
##### END your rules ############

# Do not log smb/windows sharing packets - too much logging
$IPT -A INPUT -p tcp -i ${PUB_IF} --dport 137:139 -j REJECT
$IPT -A INPUT -p udp -i ${PUB_IF} --dport 137:139 -j REJECT

# log everything else and drop
$IPT -A INPUT -j LOG
$IPT -A FORWARD -j LOG
$IPT -A INPUT -j DROP
exit 0

Tutorial instalare server cs 1.6 pe linux 47-48 Steam & nonsteam



Tutorial instalare server cs 1.6 pe linux 47-48 Steam & nonsteam
Acesta este un tutorial prin care va puteti face un server de Counter Strike versiunea 1.6 pe sistemele de operare Linux . Serverul va fi atat steam cat si non steam, va functiona atat pe protocolul vechi 47 cat si pe cel nou, 48. Va folosi amxmodx si dproto.
De ce aveti nevoie pentru a avea propriu server de cs 1.6 ( pe linux ):
- Un calculator cu sistem de operare linux pe el ( Debian in cazul meu - foarte asemanator cu ubuntu )
- Acces ssh cu drepturi de root la un calculator cu sistem de operare linux si niste mici programele pentru a-l accesa.
Personal folosesc putty pentru a accesa consola serverului ( linuxului, nu a serverului de counter strike ) si winscp pentru transferul si editarea fisierelor. Aceste 2 programele le puteti downloada accesand link-urile:
Putty: http://download.fioriginal.ro/util/putty.exe
Winscp: http://download.fioriginal.ro/util/winscp.exe
* Daca aveti acces direct la calculator, nu aveti nevoie de aceste 2 utilitare, folositi consola serverului si interfata grafica sau mc in loc.
- Ip public, sau port forwarding din router catre ip-ul dvs local.

Daca indepliniti toate conditiile de mai sus, putem incepe instalarea.

Pasul 1: Crearea folderului root al serverului

Deschideti consola serverului sau va conectati prin putty la calculatorul cu linux.
- Schimbam folderul in care lucram:
Cod:
cd /usr

* cd este abrevierea de la "change directory" care inseamna schimba folderul. Cum functioneaza comanda:
Daca esti in folderul radacina a linuxului ( cd / ) folositi comanda "cd /usr/hlds/" pentru a lucra in folderul radacina a serverului de cs. Daca esti in folderul "/usr", puteti scrie fie "cd /usr/hlds", fie "cd hlds" pentru a accesa "hlds".

- Creem folderul propriu-zis:
Cod:
mkdir hlds

* "mkdir" este comanda linux pentru a crea un folder.
** Ce trebuie stiut, este ca nu este musai sa folositi aceste foldere, insa in toate tutorialele acestea sunt folosite ca default, asa ca nu vreau eu sa va ingreunez viata alegand altul. De exemplu puteati crea un folder "server" in "/home" daca va era mai ok si nu afecta cu nimic functionalitatea serverului. Acum sa mergem mai departe, cu folderul selectat in tutorial si anume "hlds" din "usr".

Pasul 2: Downloadarea fisierelor necesare instalarii

In consola, schimbam intai folderul in care lucram:
Cod:
cd /usr/hlds

- Downloadam fisierul de baza pentru instalarea unui server de counter strike:
Cod:
wget http://download.fioriginal.ro/cs/hldsupdatetool.bin

* wget urmat de link este comanda linux pentru a downloada un fisier cu ajutorul consolei.

- Downloadam patch-ul pentru server non-steam:
Cod:
wget http://download.fioriginal.ro/cs/engines_4352_prot48.tar.gz

- Downloadam pachetul addons. Acesta contine amxmodx, dproto si alte cateva fisiere necesare.
Cod:
wget http://download.fioriginal.ro/cs/addons.zip


Pasul 3: Instalarea propriu-zisa a serverului

- Schimbam permisiunile fisierului hldsupdatetool.bin pentru a-l putea extrage
Cod:
chmod +x hldsupdatetool.bin

- Acum extragem fisierul
Cod:
./hldsupdatetool.bin

- Aati "yes" cand va intreaba daca sunteti de acord
Este posibil sa va da o eroare legata de "uncompress". Daca este asa, executati comanda de mai jos si apoi din nou "./hldsupdatetool.bin". Daca nu aveti aceasta eroare, sariti peste linia de mai jos. ( mie personal nu mi-a dat niciodata aceasta eroare )
Cod:
ln -s /usr/bin/gunzip /usr/bin/uncompress

- In folderul hlds va aparea un fisier "steam" si "readme.txt". Acum ca l-am extras, haideti sa il si instalam. Incepem cu instalarea serverului valve:
Cod:
./steam -command update -game valve -dir .

Va cere sa dati din nou comanda, apasati sageata de sus si apasam enter ( sau puteti scrie din nou comanda ). Va incepe instalarea serverului. Durata acestui proces depinde de performantele calculatorului vostru si de viteza conexiunii la internet. Va aparea in procente la cat % este instalarea. Se va termina cu mesajul HLDS Installation up to date.

- Instalam modul counter-strike:
Cod:
./steam -command update -game cstrike -dir .

La fel ca la comanda anterioara, durata instalarii dureaza in functie de calculator si conexiunea la internet si se va termina la fel ca mai sus cu mesajul HLDS Installation up to date.

- Instalam addon-ul:
Cod:
unzip addons.zip


Pasul 4: Patch-uirea serverului pentru non-steam

- Stergeti fisierele vechi, pentru a fi inlocuite. "rm -f " este comanda linux pentru a sterge un fisier. Executati pe rand:
Cod:
rm -f engine_amd.so

Cod:
rm -f engine_i486.so

Cod:
rm -f engine_i686.so
Cod:
rm -f steamclient_linux.so


- Extrageti fisierele noi
Cod:
tar -xzvf engines_4352_prot48.tar.gz


Pasul 5: Configurarea serverului

1. Editam server.cfg:
Folosind winscp, sau daca aveti acces direct la calculatorul cu linux, deschideti server.cfg din "/usr/hlds/cstrike/". Stergeti tot ce apare acolo, si adaugati urmatoarele linii:
Cod:
hostname
rcon_password
mp_autokick 0
mp_autocrosshair 0
mp_autoteambalance 1
mp_buytime 0.15
mp_consistency 1
mp_c4timer 35
mp_fadetoblack 0
mp_falldamage 0
mp_flashlight 1
mp_forcecamera 3
mp_forcechasecam 2
mp_friendlyfire 0
mp_freezetime 0
mp_fraglimit 0
mp_hostagepenalty 0
mp_limitteams 1
mp_logfile 1
mp_logmessages 1
mp_logdetail 3
mp_maxrounds 0
mp_playerid 0
mp_roundtime 2
mp_startmoney 800
mp_timelimit 35
mp_tkpunish 0
mp_winlimit 0
sv_aim 0
sv_airaccelerate 10
sv_airmove 1
sv_allowdownload 1
sv_clienttrace 1.0
sv_clipmode 0
sv_allowupload 1
sv_cheats 0
sv_gravity 800
sv_lan 1
sv_maxrate 7000
sv_maxspeed 320
sv_maxupdaterate 101
sys_ticrate 10000
decalfrequency 60
pausable 0
log on
decalfrequency 60
edgefriction 2
host_framerate 0
exec listip.cfg
exec banned.cfg
exec dproto.cfg

Inlocuiti cu numele pe care vreti sa il aiba serverul, si cu parola de rcon pe care o doriti. Acestea sunt setarile default pe care serverul le va avea la pornire. Daca va pricepeti, puteti schimba / adauga / sterge si celelalte setari. Daca nu, va recomand sa le lasati asa cum sunt.

2. Configuram amxmodx:

Deschidem fisierul amxx.cfg din "/usr/hlds/cstrike/addons/amxmodx/configs/" si modificam urmatoarele linii:
- amx_password_field - Ce trebuie sa scrie adminii in consola, pentru a se loga. Ex: daca aveti setat "amx_password_field _xxx", adminul pentru a se loga, va trebui sa foloseasca comanda "setinfo _xxx parola".
- amx_scrollmsg si cele 2 amx_imessage - acestea sunt mesajele automate care apar in timpul jocului pe ecran. Le puteti modifica dupa bunul plac cu conditia sa ramana intre ghilimele. Sub amx_imessage este amx_freq_imessage 180 , adica frecventa la care apar mesajele pe ecran. Se poate modifica si aici valoarea in secunde - daca vrei ca mesajul sa apara mai des puteti seta de ex 60 si mesajul va aparea in fiecare minut, sau mai rar, setand o valoare mai mare gen 360, iar mesajul va aparea odata la 6 minute.
- csstats_rank - cea mai importanta setare ce trebuie schimbata. Puneti 0, pentru a functiona rank-ul corect.
Referitor la celelalte setari, umblati doar daca va pricepeti, daca nu, lasati-le asa cum sunt.

3. Adaugam admini:

Tot in acelasi folder "/usr/hlds/cstrike/addons/amxmodx/configs/" deschidem fisierul users.ini. Adminii se adauga la finalul fisierului, stergand "loopback".
Un admin trebuie sa fie de forma : "nick" "parola" "acces" "flag"
nick - nick-ul adminului ( numele )
parola - parola pe care o va folosi pentru a se loga. De fiecare data cand se va conecta, va trebui sa scrie in consola comanda "setinfo _pw parola", _pw va fi inlocuit cu ceea ce ati setat in amxx.cfg la campul amx_password_field ( in exemplul dat acolo _xxx ), iar parola cu cea aleasa de jucator.
acces - Aici treceti literele corespunzatoare comenzilor din lista data la care adminul ati vrea sa aiba acces. Acestea sunt:
a - imunitate - nu poate lua kick\ban\slay\llama\gag ...etc
b - slot rezervat - are un loc rezervat in cazul in care serverul este plin
c - acces la comanda amx_kick
d - acces la ban si unban
e - acces la slap si slay
f - acces la comanda amx_map
g - acces la cvar-uri - poate scimba valorile cvar-urilor
h - acces la configuri
i - aces la comenzile de chat ( amx_chat , amx_psay..)
j - acces la comenzile de vot (amx_vote, amx_votemap)
k - acces la parola serverulu - poate schimba parola prin intermediul comenzilor cvar (adica poate pune si scoate parola serverului , in caz de meci de exemplu cand nu trebuie sa mai intre nimeni)
l - acces la parola RCON si la comenzile rcon prin intermediul comenzilor cvar
z - simplu jucator - Atentie! nu se trece nivelul "z" pentru admini !

flag - reprezinta modul in care jucatorul se logheaza ca admin. Acesta poate fi pe nick, ip, clan tag, steamid, sau fara a fi verificat. Flagurile sunt:
a - deconectare daca parola nu este buna
b - se trece tag-ul de clan tag de clan
c - se trece id-ul de steam
d - se trece ip-ul
e - nu se controleaza parola
Exemplu de admin: "Audy" "parolamea" "abcdefghijklmnopqrstu" "a" - Am facut un admin cu acces full, pe nick.

Pasul 6: Pornirea serverului

Serverul se poate porni in mai multe feluri. Primul si cel mai simplu este sa dati urmatoarea comanda:
Cod:
cd /usr/hlds
./hlds_run -game cstrike +ip ip.extern +port 27015 +sv_lan 1 -nomaster +maxplayers 22 +map de_dust

Al 2-lea mod si cel mai comun este acela de a porni serverul in background,pentru a nu lasa consola deschisa folosind comanda:
Cod:
screen -A -m -d -S hlds ./hlds_run -game cstrike +ip ip.de.internet +sv_lan 1 -nomaster +maxplayers 22 +map de_dust

Pentru a va atasa din nou la server, folositi comanda "screen -r hlds".

Al 3-lea mod si cel mai comod dintre ele, este sa creati un fisier pe care il numiti cum vreti voi, de ex. "startserver" cu urmatorul continut:
Cod:
#!/bin/bash
./hlds_run -game cstrike +ip ip.extern +port 27015 +sv_lan 1 -nomaster +maxplayers 22 +map de_dust

Ca sa porniti serverul, va duceti in "/usr/hlds/" si executati comanda ./startserver

Creating a Bootable Ubuntu USB Flash Drive From Windows

Ubuntu and other Linux distributions have proven to be really useful when Windows stops working. Versatility, portability and speed are among the many advantages of having a bootable OS in a USB flash drive. These installations can help fix problems in Windows operating systems, such as viruses, errors in the registry, etc. They can also act as an “emergency operating system” when Windows fails, providing an alternate OS you can boot from to extract your files from the affected computer. Booting from USB flash drives does have one drawback: older computers won’t have this capability. Fortunately, it is becoming less common to find computers that do not support booting from USB. In this tutorial I show you how to create a bootable Ubuntu USB flash drive from Windows. To accomplish this, we are going to be using a utility called Unetbootin.

Instructions

Download the latest Ubuntu distribution (Unetbootin even supports the daily Ubuntu builds)

Download Unetbootin; the program does not have an installation as it does not need one; just double click on it and it will start.

On top of the Unetbootin windows you will see two drop down menus; ignore them if you have already downloaded the ISO. If you do not have the ISO, just select the distribution and the version and Unetbootin will download, and install it for you. The reason I did not focus on this part for the tutorial, is because many of you probably have the ISO downloaded already.

1) Select “Diskimage“.

2) Click the “browse” button and select your ISO image.

3) Make sure your USB destination drive is set to the correct drive letter.

4) Click “OK” to start the process.

Next, Unetbootin will start creating your flash drive. The Ubuntu image is about 700mb, so the process can take a while.

When Unetbootin finishes creating your Ubuntu bootable USB flash drive, it will give you the choice to either “Reboot” or “Exit” the program. Choose reboot if you wish to try your newly created Ubuntu USB flash drive, otherwise choose “Exit”.

Link http://geekyprojects.com/ubuntu/creating-a-bootable-ubuntu-usb-flash-drive-from-windows/

Create bootable Live USB Ubuntu with UNetbootin

It’s very very easy to create a bootable Ubuntu live USB.You just need UNetbootin,Ubuntu .iso image and a usb device.

UNetbootin is a tool,allows you to create bootable Live USB drives for a variety of Linux distributions.

1.Install UNetbootin,install it in Windows or Linux.

Here is how to install UNetbootin in ubuntu
For windows,just go to this page and download it.(Just open it by clicking on the downloaded file.)
2.Download ubuntu .iso file from www.ubuntu.com.

3.Connect usb device and then open UNetbootin (Go to Applications->System Tools->UNetbootin).

Check Diskimag,select the .iso file by clicking on marked button at right.Select USB drive at bottom.

Click on OK to start,

After a few minutes,you will see this window.

Now you have this live usb created.

Just,reboot from usb and in a graphic interface select default.

How to install UNetbootin in ubuntu

To Install UNetbootin in ubuntu

Open Applications-> Accessories-> Terminal
Run following commands:
sudo add-apt-repository ppa:gezakovacs/ppa
sudo apt-get update
sudo apt-get install unetbootin

HOWTO: Linux From USB The Easy Way With UNetbootin

If there’s one thing we love nearly as much as our games here at TTB, it’s Linux. Another thing that I personally am pretty big on is installation from a USB thumb drive, for which I’ve written some guides (the latest one being here). Pretty handy if you have a netbook without an optical drive, or if you just want to save on CD-Rs.

Just lately, though, I discovered this little app called UNetbootin, a free download which fully automates the process of creating bootable Linux USB sticks under Windows or Linux. For most distributions it also supports the creation of LiveUSB versions, which allow the user to try the distro out prior to installation, much like their well-known LiveCD counterparts.

I’d write out a guide here, but this really is so painfully easy to use that it’s not really needed. I’ll outline the steps required here though, just for clarity:

• Format your USB stick (optional but I like to just in case)
• Run UNetbootin and select desired distro and version
• Click OK
• Sit back and wait a few minutes while the stick is prepared
• Reboot, and set BIOS to boot from USB…

…That’s it!

It also allows custom kernel parameters and the use of custom initrd files for strange hardware setups, but you probably won’t ever need to touch this. The app will even create a bootable USB from an ISO file if your desired distro isn’t listed, but I found that function to be a bit hit-and-miss.

All that’s required for UNetbootin is a USB stick (1GB and above is best) and a reasonably fast internet connection, as it needs to download all of the installation files for your chosen distribution as part of the automated process. That said, it’s actually more economical with bandwidth than downloading a whole ISO in most cases.

So, if you’ve ever wanted to try out lots of Linux distributions in a short amount of time with the minimum of hassle, or just install Ubuntu on your EeePC without messing around, UNetbootin is definitely the app for you. It’s not just for Linux either - it even allows you to try out the popular BSD-based systems FreeBSD and NetBSD too!

Download UNetbootin here.

THINGS TO TWEAK AFTER INSTALLING UBUNTU 11.10 ONEIRIC OCELOT

Back when Ubuntu 11.04 was released, we wrote a post about stuff you may need to tweak or fix. Some of those tweaks still work but since this is a new version, there are new things that need tweaking so I've decided to make a new post with some popular old tweaks as well as some new ones.

Read on!

General tweaks (for both GNOME Shell and Unity)

Change themes, fonts and more with GNOME Tweak Tool

In Ubuntu 11.10 Oneiric Ocelot you can only switch between the default GTK themes by default. Also, there's no built-in GUI to easily change fonts or icon themes. But you can do this using GNOME Tweak Tool:

sudo apt-get install gnome-tweak-tool

Once installed, GNOME Tweak Tool should show up as "Advanced Settings" in the menu. Besides changing fonts or themes, GNOME Tweak Tool can also be used to enable/disable GNOME Shell extensions, tweak the desktop, various windows behavior or GNOME Shell.

No screensaver in GNOME 3.2

GNOME 3 doesn't have a screensaver, just a black screen. If you want to use a screensaver, you can use Xscreensaver - install it using the following commands (this will also remove gnome-screensaver):

sudo apt-get remove gnome-screensaver sudo apt-get install xscreensaver xscreensaver-gl-extra xscreensaver-data-extra

Then search for "Screensaver" in the menu and tweak its settings to your needs.

To add Xscreensaver to startup, open Startup Applications and add "xscreensaver -nosplash".


Let's also make the lock screen work (CTRL + ALT + L):

sudo ln -s /usr/bin/xscreensaver-command /usr/bin/gnome-screensaver-command

Alternatively, instead of the command above you can open System Settings > Keyboardand on the "Shortcuts" tab, under "System", change the "Lock screen" keyboard shortcut from CTRL + ALT + L to something else, then under "Custom Shortcuts", click the "+" button to add a new custom shortcut, under "Name" enter "Xscreensaver" and under "Command" enter "/usr/bin/xscreensaver-command", then click "Apply". And finally, click next to the newly created shortcut and press CTRL + ALT + L to assign it to it (or use any other keyboard shortcut you want, but make sure it's not already assign to something else).


To be able to watch a movie properly, also install Caffeine:

sudo add-apt-repository ppa:caffeine-developers/ppa sudo apt-get update sudo apt-get install caffeine python-glade2

To revert the changes (go back to the black GNOME Screensaver screen):

sudo apt-get remove xscreensaver xscreensaver-gl-extra xscreensaver-data-extra sudo rm /usr/bin/gnome-screensaver-command sudo apt-get install gnome-screensaver

If you've used the alternative method to assign CTRL + ALT + L to Xscreensaver lock screen, open System Settings > Keyboard again, remove the custom Xscreensaver command and assign CTRL + ALT + L back to "Lock screen" (under "System").

Nautilus search

Partially fix annoying Nautilus behavior that doesn't let you properly search by typing when there are a lot of files/folders: in Nautilus, select View > Statusbar.

Install Syanptic

Synaptic is not installed by default in Ubuntu 11.10 and while Ubuntu Software Center got many new features, it still can't do everything Synaptic can. Install Synaptic back using the following command:

sudo apt-get install synaptic

Disable Overlay Scrollbars

If you don't like the overlay scrollbars, you can remove them using the following command:

sudo apt-get remove overlay-scrollbar liboverlay-scrollbar3-0.2-0 liboverlay-scrollbar-0.2-0

Then, restart your computer (performing a logout only may not be enough).

To revert this change, install the packages back:

sudo apt-get install overlay-scrollbar liboverlay-scrollbar3-0.2-0 liboverlay-scrollbar-0.2-0

And restart your computer.

Missing features: web apps and file previewer

Two missing GNOME 3.2 features in Ubuntu 11.10 Oneiric Ocelot (for both Unity and GNOME Shell) are the web applications and Sushi quick previewer.

The first requires Epiphany 3.2.0 which is available in the WebUpd8 GNOME 3 PPA:

sudo add-apt-repository ppa:webupd8team/gnome3 sudo apt-get update sudo apt-get install epiphany-browser

And the second - Sushi file previewer -, is available in the official Ubuntu repositories:

sudo apt-get install gnome-sushi

Longer battery life

I don't know if the kernel power bug is real or not, but many users have reported that using Jupiter or a tweak we've posted a while back, their laptop/netbook battery life increased. Install Jupiter using the following commands:

sudo add-apt-repository ppa:webupd8team/jupiter sudo apt-get update sudo apt-get install jupiter

If you have an EeePC, also install the following package for SHE support:

sudo apt-get install jupiter-support-eee

As for the other tweak, see this post: Linux Kernel Power Issue / Overheat Workaround.

No more Sun/Oracle Java

The "sun-java6" package is no longer available in the official Ubuntu 11.10 Oneiric Ocelot repositories due to the removal of the JDL license. Java 7 won't be in Oneiric either, but you still have 3 options:

- Install OpenJDK:

sudo apt-get install openjdk-7-jre

- Or Oracle (previously Sun) Java 6 from the LFFL PPA:

sudo add-apt-repository ppa:ferramroberto/java sudo apt-get update sudo apt-get install sun-java6-jdk sun-java6-plugin

- Or manually install Java 7 (JDK) in Ubuntu 11.10 Oneiric Ocelot.

Fix for Nautilus crashing on start

If Nautilus crashes, chances are this is because of the "nautilus-open-terminal" package, so remove it:

sudo apt-get remove nautilus-open-terminal

Then restart Nautilus:

nautilus -q

Autostart items

Some applications/services that used to be in the Startup Applications dialog are no longer there. That's because they are hidden now but you can still find them under/etc/xdg/autostart . So if you want to remove the startup sound or other hidden applications from starting automatically, remove their .desktop files from /etc/xdg/autostart (you'll have to run Nautilus as root: "gksu nautilus"). But make sure you make a backup of the files you want to remove firstly!

GNOME Shell tweaks

Fix ALT + F2

ALT + F2 doesn't work by default in GNOME Shell under Ubuntu 11.10 Oneiric Ocelot. To fix it, open "System Settings" and under Keyboard > Shortcuts > System, click "Disabled" next to "Show the run command prompt" and press ALT + F2 - this should set ALT + F2 for running the command prompt.

Easily change GNOME Shell themes

To be able to easily change the GNOME Shell theme, besides GNOME Tweak Tool you'll also need the User Theme extension, available in the WebUpd8 GNOME3 PPA:

sudo add-apt-repository ppa:webupd8team/gnome3 sudo apt-get update sudo apt-get install gnome-shell-extensions-user-theme

Then use GNOME Tweak Tool to activate the theme.

For more extensions, see: Official GNOME Shell Extensions Available In The WebUpd8 GNOME 3 PPA For Ubuntu 11.10.

Move icons from Message tray (bottom tray) to the Top Bar

Some might find the notification area icons showing up in the Message Tray (at the bottom of the screen, hidden by default) annoying or confusing. But you can move the icon on the Top Bar using an extension:

sudo add-apt-repository ppa:webupd8team/gnome3 sudo apt-get update sudo apt-get install gnome-shell-classic-systray

Then press ALT + F2 and enter "r" to restart GNOME Shell and enable the extension using GNOME Tweak Tool, then restart GNOME Shell once again.

No shutdown menu entry

By default, there's no shutdown entry in the status menu and you must press and hold ALT to be able to shutdown your computer when using GNOME Shell. But this can be changed by installing Alternative Status Menu extension which adds "Power off" and "Hibernate" to the status menu, visible at all time (and not just when pressing the ALT key). Install it:

sudo add-apt-repository ppa:webupd8team/gnome3 sudo apt-get update sudo apt-get install gnome-shell-extensions-alternative-status-menu

Then use GNOME Tweak Tool to enable the extension.

Fix Nautilus menu being displayed under the GNOME Shell top bar when using transparent GNOME Shell themes

If you use a transparent GNOME Shell theme such as Zukitwo, the Nautilus menu shows up behind the top bar. You can fix this either by removing global menu (see below, under "Unity tweaks") or by disabling Nautilus from handling the desktop using GNOME Tweak Tool (under "Desktop", set "Have file manager handle the desktop" to off):

Disabling Nautilus from handling the desktop means you won't have any icons on the desktop anymore. If this is a big deal to you, remove AppMenu (Global Menu) - but you won't have a global menu in Unity anymore (though that shouldn't be a big issue if you don't use Unity anyway).

To install GNOME Tweak Tool, see the first tweak in this post.

Automatic login to GNOME Shell instead of Unity

If you enable autologin, your computer will automatically login to Unity. But there is a way to get Ubuntu 11.10 Oneiric Ocelot to automatically login to GNOME Shell.

Firstly, enable Automatic Login: in System Settings go to "User Accounts", then click "Unlock", enter your password and click the button next to "Automatic Login". That will make Ubuntu automatically login to Unity. Let's make it automatically login to GNOME Shell instead:

sudo /usr/lib/lightdm/lightdm-set-defaults -s gnome-shell

Unity tweaks

Configure Unity (autohide, etc.)

Unity 3D can be configured through CompizConfig Settings Manager, but CCSM isn't installed by default so let's install it:

sudo apt-get install compizconfig-settings-manager

Using CCSM you can configure the Unity Launcher reavel mode and timeout, the Unity Launcher autohide (autohide, dodge windows, dodge active windows or disable autohide), various keyboard shortcuts, the new ALT + TAB switcher behavior, blacklight mode, panel and launcher opacity, launcher icon size and more.

A few quick stuff I for one always tweak using CCSM (open CompizConfig Settings Manager and click the "Ubuntu Unity Plugin"):

To disable launcher autohide: on the "Behavior tab" under "Hide Launcher", select "Never".

To disable mounted devices from showing up on the Unity Launcher: on the "Experimental" tab, under "Show Devices" select "Never".

By default, applications that usually take 75% of the screen are maximized automatically on start. To change this automaximize value, on the "Experimental" tab, look for "Automaximize value" - tweak this to whatever value you want.

Configure Unity 2D

Some Unity 2D settings as well as other tweaks can be performed using "dconf-editor", part of the "dconf-tools" package. Install it using the following command:

sudo apt-get install dconf-tools

Then press ALT + F2 and enter: "dconf-editor" to launch it. You can find the Unity 2D settings under com > canonical > unity-2d.

Re-enable the systray (notification area)

You no longer need to whitelist Qt applications but you may still need the systray for other applications such as Shutter, Jupiter, etc. You can whitelist the systray using the following command:

gsettings set com.canonical.Unity.Panel systray-whitelist "['all']"

Then log out and log back in.

Disable Global Menu (AppMenu)

Don't like the global menu? Get the menu back in the application window instead of using a global menu on the top panel:

sudo apt-get remove appmenu-gtk3 appmenu-gtk appmenu-qt

Then, restart your computer (performing a logout only may not be enough).

You can also disable the global menu without removing any package. See HERE.

To revert the changes, install these packages back:

sudo apt-get install appmenu-gtk3 appmenu-gtk appmenu-qt

And restart your computer.

Use a global menu for LibreOffice

By default, LibreOffice doesn't come with a Global Menu but you can manually install it:

sudo apt-get install lo-menubar

If you experience any issues with it, simply remove it:

sudo apt-get remove lo-menubar

Disable the user switcher indicator

The user switcher indicator (or Me-User-Indicator or whatever is called) can be useful if multiple users log in on your computer but if it's just one user, you can get more space by disabling it. Presuming you've already installed the "dconf-tools" package: press ALT + F2 or open a terminal and enter:

dconf-editor

Then navigate to apps > indicator-session and uncheck the box next to "user-show-menu", then restat Unity (ALT + F2 and enter "unity --replace") or log out and log back in.

Something went wrong! How do I reset Unity or Compiz?

You can easily reset Unity or Compiz using the following commands (be careful when using these commands and only use them if you really have to!):

- to reset the Unity launcher icons:

unity --reset-icons

- to reset Unity:

unity --reset

- to reset Compiz:

gconftool-2 --recursive-unset /apps/compiz-1 unity --reset

Using a different "shell"

By default, Ubuntu 11.10 Oneiric Ocelot uses Unity 3D (with Compiz). If you don't like it, you can try a different interface, while still using GNOME:

Unity 2D

Unity 2D is installed by default and is used as the fall-back mode for computers that can't run Unity 3D. To use Unity 2D, log out and select "Ubuntu 2D" in the login screen:

GNOME Shell

GNOME Shell is not installed by default but you can easily install it from the official Ubuntu repositories:

sudo apt-get install gnome-shell

Once installed, log out and select "GNOME" from the login screen:

Classic GNOME 3 session

You can also use the GNOME 3 classic session. Install it using the following command:

sudo apt-get install gnome-session-fallback

And select "GNOME Classic" from the login screen:

I'll continue to update this post with more tweaks so keep an eye on it. If you've found some annoyance in Ubuntu 11.10 Oneiric Ocelot and know a fix / tweak for it, let us know in the comments! For more tweaks, also take a look at our previous post:Things To Tweak / Fix After Installing Ubuntu 11.04 Natty Narwhal.

Link http://www.webupd8.org/2011/10/things-to-tweak-after-installing-ubuntu.html