2020年1月19日

sudo vi /etc/exports
加入：

/ -sec=sys

/Users /Users/popeye /Users/popeye/movies -ro -mapall=popeye:staff -alldirs

檢查配置：

sudo nfsd checkexports

重啟：

sudo nfsd restart

這里要注意movies目錄是我重新建立的755權(quán)限，不要用系統(tǒng)原來(lái)的目錄，不然總是訪問(wèn)不了。

再到A410里網(wǎng)絡(luò)瀏覽里就能找到了。

  2012年12月1日

場(chǎng)景

想要用到的場(chǎng)景：用戶訪問(wèn)WEB服務(wù)，WEB訪問(wèn)非WEB服務(wù)1，服務(wù)1又再訪問(wèn)2、3，合并計(jì)算后，把數(shù)據(jù)返回給WEB及前端用戶。想讓訪問(wèn)鏈上的所有服務(wù)都能得到認(rèn)證和鑒權(quán)，認(rèn)為本次請(qǐng)求確實(shí)是來(lái)自用戶的。所以想到用CAS，讓用戶在一點(diǎn)登錄，所有服務(wù)都到此處認(rèn)證和鑒權(quán)。

  閱讀全文

  2012年11月12日

Setting Up SSL on Tomcat in 5 minutes (https://localhost:8443)

This tutorial will walk you through how to configure SSL (https://localhost:8443 access) on Tomcat in 5 minutes.

For this tutorial you will need:

• Java SDK (used version 6 for this tutorial)
• Tomcat (used version 7 for this tutorial)

The set up consists in 3 basic steps:

1. Create a keystore file using Java
2. Configure Tomcat to use the keystore
3. Test it
4. (Bonus ) Configure your app to work with SSL (access through https://localhost:8443/yourApp)

1 – Creating a Keystore file using Java

Fisrt, open the terminal on your computer and type:

Windows:

cd %JAVA_HOME%/bin 

Linux or Mac OS:

cd $JAVA_HOME/bin 

The $JAVA_HOME on Mac is located on “/System/Library/Frameworks/JavaVM.framework/Versions/{your java version}/Home/”

You will change the current directory to the directory Java is installed on your computer. Inside the Java Home directory, cd to the bin folder. Inside the bin folder there is a file named keytool. This guy is responsible for generating the keystore file for us.

Next, type on the terminal:

keytool -genkey -alias tomcat -keyalg RSA 

When you type the command above, it will ask you some questions. First, it will ask you to create a password (My password is “password“):

loiane:bin loiane$ keytool -genkey -alias tomcat -keyalg RSA Enter keystore password:  password Re-enter new password: password What is your first and last name?   [Unknown]:  Loiane Groner What is the name of your organizational unit?   [Unknown]:  home What is the name of your organization?   [Unknown]:  home What is the name of your City or Locality?   [Unknown]:  Sao Paulo What is the name of your State or Province?   [Unknown]:  SP What is the two-letter country code for this unit?   [Unknown]:  BR Is CN=Loiane Groner, OU=home, O=home, L=Sao Paulo, ST=SP, C=BR correct?   [no]:  yes  Enter key password for 	(RETURN if same as keystore password):  password Re-enter new password: password 

It will create a .keystore file on your user home directory. On Windows, it will be on: C:\Documents and Settings\[username]; on Mac it will be on /Users/[username] and on Linux will be on /home/[username].

2 – Configuring Tomcat for using the keystore file – SSL config

Open your Tomcat installation directory and open the conf folder. Inside this folder, you will find the server.xml file. Open it.

Find the following declaration:

<!-- <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"     maxThreads="150" scheme="https" secure="true"     clientAuth="false" sslProtocol="TLS" /> --> 

Uncomment it and modify it to look like the following:

Connector SSLEnabled="true" acceptCount="100" clientAuth="false"     disableUploadTimeout="true" enableLookups="false" maxThreads="25"     port="8443" keystoreFile="/Users/loiane/.keystore" keystorePass="password"     protocol="org.apache.coyote.http11.Http11NioProtocol" scheme="https"     secure="true" sslProtocol="TLS" /> 

Note we add the keystoreFile, keystorePass and changed the protocol declarations.

3 – Let’s test it!

Start tomcat service and try to access https://localhost:8443. You will see Tomcat’s local home page.

Note if you try to access the default 8080 port it will be working too: http://localhost:8080

4 – BONUS - Configuring your app to work with SSL (access through https://localhost:8443/yourApp)

To force your web application to work with SSL, you simply need to add the following code to your web.xml file (before web-app tag ends):

<security-constraint> 	<web-resource-collection> 		<web-resource-name>securedapp</web-resource-name> 		<url-pattern>/*</url-pattern> 	</web-resource-collection> 	<user-data-constraint> 		<transport-guarantee>CONFIDENTIAL</transport-guarantee> 	</user-data-constraint> </security-constraint> 

The url pattern is set to /* so any page/resource from your application is secure (it can be only accessed with https). The transport-guarantee tag is set to CONFIDENTIAL to make sure your app will work on SSL.

If you want to turn off the SSL, you don’t need to delete the code above from web.xml, simply changeCONFIDENTIAL to NONE.

Reference: http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html (this tutorial is a little confusing, that is why I decided to write another one my own).

Happy Coding!

  2011年10月3日

下面以MAC為例,如果是LINUX需要把DYLD發(fā)為L(zhǎng)D

把下面代碼加到代碼開(kāi)頭,它就可以自啟動(dòng)了,不需要再EXPORT或者-I

BEGIN {

        #需要加到LOADPATH的路徑

my $need = '/usr/local/nagios/pkg/ebase/';

push @INC, $need;

if ( $^O !~ /MSWin32/ ) {

my $ld = $ENV{DYLD_LIBRARY_PATH};

if ( !$ld ) {

$ENV{DYLD_LIBRARY_PATH} = $need;

}

elsif ( $ld !~ m#(^|:)\Q$need\E(:|$)# ) {

$ENV{DYLD_LIBRARY_PATH} .= ':' . $need;

}

else {

$need = "";

}

if ($need) {

exec 'env', $^X, $0, @ARGV;

}

}

}

限制用戶在自己目錄下載文件:

建立nagiosdnld

指向軟鏈接:/usr/local/nagios/dnld -> /Users/nagiosdnld/dnld

編輯/etc/sshd_config

Match User nagiosdnld

        X11Forwarding no

        AllowTcpForwarding no

        ForceCommand internal-sftp

        ChrootDirectory /Users/nagiosdnld

重啟下服務(wù):

launchctl stop org.openbsd.ssh-agent

launchctl start org.openbsd.ssh-agent