wiki - Příspěvky [cs]

Ssh secure

2026-09-24T11:09:00Z

Chalro:

/etc/ssh/sshd_config
<pre>
MACs hmac-sha2-512,hmac-sha2-256
DebianBanner no
Banner none
</pre>

[[Category:pentests]]

Apache secure

2026-09-24T11:07:41Z

Chalro:

/etc/apache2/conf-available/security.conf

<pre>
ServerTokens Prod
ServerSignature Off
</pre>

/etc/apache2/sites-enabled/default-ssl.conf
<pre>
UseCanonicalName On
</pre>
or
<pre>
RewriteRule ^/?$ https://full.host.com/roundcube/ [R=302,L] instead of RewriteRule ^/?$ https://%{HTTP_HOST}/roundcube/ [R=302,L]
</pre>

<pre>
# HSTS
# a2enmod headers
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
</pre>

[[Category:Pentests]]

Apache secure

2026-09-24T09:53:44Z

Chalro:

/etc/apache2/conf-available/security.conf

'''
ServerTokens Prod
ServerSignature Off
'''

/etc/apache2/sites-enabled/default-ssl.conf
UseCanonicalName On
or
RewriteRule ^/?$ https://full.host.com/roundcube/ [R=302,L] instead of RewriteRule ^/?$ https://%{HTTP_HOST}/roundcube/ [R=302,L]

# HSTS
# a2enmod headers
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"

[[Category:Pentests]]

Apache secure

2026-09-24T09:51:09Z

Chalro:

Ssh secure

2026-09-24T09:49:03Z

Chalro:

/etc/ssh/sshd_config

MACs hmac-sha2-512,hmac-sha2-256
DebianBanner no
Banner none

[[Category:pentests]]

Ssh secure

2026-09-24T09:07:50Z

Chalro: založena nová stránka s textem „ /etc/ssh/sshd_config MACs hmac-sha2-512,hmac-sha2-256 Category:pentests“

/etc/ssh/sshd_config

MACs hmac-sha2-512,hmac-sha2-256

[[Category:pentests]]

Dovecot secure

2026-09-24T09:02:08Z

Chalro: založena nová stránka s textem „ /etc/dovecot/dovecot.conf ssl_min_protocol = TLSv1.2 ssl_prefer_server_ciphers = yes ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 Category:pentests“

/etc/dovecot/dovecot.conf

ssl_min_protocol = TLSv1.2

ssl_prefer_server_ciphers = yes

ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384

[[Category:pentests]]

Postfix secure

2026-09-24T09:01:23Z

Chalro:

/etc/postfix/main.cf

# pentests findings
smtpd_tls_mandatory_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH
smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH

smtp_tls_mandatory_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH
smtp_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH

smtpd_tls_ciphers = high
smtpd_tls_mandatory_ciphers = high

tls_high_cipherlist = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
tls_preempt_cipherlist = yes

[[Category:pentests]]

Postfix secure

2026-09-24T08:54:51Z

Chalro: založena nová stránka s textem „ /etc/postfix/main.cf # pentests findings smtpd_tls_mandatory_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH smtp_tls_mandatory_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH smtp_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH Category:pentests“

Apache secure

2026-09-24T08:53:50Z

Chalro:

/etc/apache2/conf-available/security.conf

'''
ServerTokens Prod
ServerSignature Off
'''

[[Category:Pentests]]

Apache secure

2026-09-24T08:53:41Z

Chalro: založena nová stránka s textem „/etc/apache2/conf-available/security.conf ''' ServerTokens Prod ServerSignature Off ''' Category:Pentests“

/etc/apache2/conf-available/security.conf

'''
ServerTokens Prod
ServerSignature Off
'''

[[Category:Pentests]]

Kategorie:Pentests

2026-09-24T08:51:45Z

Chalro: založena nová stránka s textem „ Category:manuals“

[[Category:manuals]]

Update check mk

2026-09-08T10:02:04Z

Chalro:

<pre>
wget https://download.checkmk.com/checkmk/2.5.0p12/check-mk-community-2.5.0p12_0.noble_amd64.deb
dpkg -i check-mk-community-2.5.0p12_0.noble_amd64.deb
omd stop <site>
omd update <site>
omd start <site>
</pre>

[[Category:Check mk]]

Install plugin check mk

2026-09-08T09:44:06Z

Chalro:

[[https://exchange.checkmk.com/packages plugin list]]

<pre>
root@monitoring:~# cd /tmp
root@monitoring:~# su - monitoring
OMD[monitoring]:~$ wget https://exchange.checkmk.com/packages/apcups-apcaccess/2533/apcups_apcaccess-2.3.0.mkp
OMD[monitoring]:~$ mkp add apcups_apcaccess-2.3.0.mkp
OMD[monitoring]:~$ mkp enable apcaccess
OMD[monitoring]:~$ mkp list
</pre>

[[Category:Check mk]]

Install plugin check mk

2026-09-08T09:43:06Z

Chalro:

plugin list [[https://exchange.checkmk.com/packages]]

<pre>
root@monitoring:~# cd /tmp
root@monitoring:~# su - monitoring
OMD[monitoring]:~$ wget https://exchange.checkmk.com/packages/apcups-apcaccess/2533/apcups_apcaccess-2.3.0.mkp
OMD[monitoring]:~$ mkp add apcups_apcaccess-2.3.0.mkp
OMD[monitoring]:~$ mkp enable apcaccess
OMD[monitoring]:~$ mkp list
</pre>

[[Category:Check mk]]

Install plugin check mk

2026-09-08T09:42:59Z

Chalro:

#plugin list [[https://exchange.checkmk.com/packages]]

<pre>
root@monitoring:~# cd /tmp
root@monitoring:~# su - monitoring
OMD[monitoring]:~$ wget https://exchange.checkmk.com/packages/apcups-apcaccess/2533/apcups_apcaccess-2.3.0.mkp
OMD[monitoring]:~$ mkp add apcups_apcaccess-2.3.0.mkp
OMD[monitoring]:~$ mkp enable apcaccess
OMD[monitoring]:~$ mkp list
</pre>

[[Category:Check mk]]

Install plugin check mk

2026-09-08T09:42:15Z

Chalro:

[[https://exchange.checkmk.com/packages]]

<pre>
root@monitoring:~# cd /tmp
root@monitoring:~# su - monitoring
OMD[monitoring]:~$ wget https://exchange.checkmk.com/packages/apcups-apcaccess/2533/apcups_apcaccess-2.3.0.mkp
OMD[monitoring]:~$ mkp add apcups_apcaccess-2.3.0.mkp
OMD[monitoring]:~$ mkp enable apcaccess
OMD[monitoring]:~$ mkp list
</pre>

[[Category:Check mk]]

Install plugin check mk

2026-09-08T09:41:55Z

Chalro: založena nová stránka s textem „#PŘESMĚRUJ https://exchange.checkmk.com/packages <pre> root@monitoring:~# cd /tmp root@monitoring:~# su - monitoring OMD[monitoring]:~$ wget https://exchange.checkmk.com/packages/apcups-apcaccess/2533/apcups_apcaccess-2.3.0.mkp OMD[monitoring]:~$ mkp add apcups_apcaccess-2.3.0.mkp OMD[monitoring]:~$ mkp enable apcaccess OMD[monitoring]:~$ mkp list </pre> Category:Check mk“

#PŘESMĚRUJ [[https://exchange.checkmk.com/packages
]]

<pre>
root@monitoring:~# cd /tmp
root@monitoring:~# su - monitoring
OMD[monitoring]:~$ wget https://exchange.checkmk.com/packages/apcups-apcaccess/2533/apcups_apcaccess-2.3.0.mkp
OMD[monitoring]:~$ mkp add apcups_apcaccess-2.3.0.mkp
OMD[monitoring]:~$ mkp enable apcaccess
OMD[monitoring]:~$ mkp list
</pre>

[[Category:Check mk]]

Update check mk

2026-09-08T09:37:14Z

Chalro: založena nová stránka s textem „ <pre> wget https://download.checkmk.com/checkmk/2.5.0p12/check-mk-community-2.5.0p12_0.noble_amd64.deb omd stop <site> omd update <site> omd start <site> </pre> Category:Check mk“

<pre>
wget https://download.checkmk.com/checkmk/2.5.0p12/check-mk-community-2.5.0p12_0.noble_amd64.deb
omd stop <site>
omd update <site>
omd start <site>
</pre>

[[Category:Check mk]]

Kategorie:Check mk

2026-09-08T09:34:56Z

Chalro: založena nová stránka s textem „about check mk monitoring Category:Manuals“

about check mk monitoring

[[Category:Manuals]]

Kategorie:Snmp

2026-09-08T06:43:55Z

Chalro: založena nová stránka s textem „about snmp Category:Manuals“

about snmp

[[Category:Manuals]]

Snmpwalk

2026-09-08T06:43:31Z

Chalro:

<pre>
time snmpwalk -v2c -c <communitypwd> x.x.x.x:port .1.3.6.1.2.1.1
</pre>

<pre>
time snmpwalk -v1 -c <communitypwd> x.x.x.x:port .1.3.6.1.2.1.1
</pre>

[[Category:snmp]]

Snmpwalk

2026-09-08T06:42:45Z

Chalro:

<pre>
time snmpwalk -v2c -c <communitypwd> x.x.x.x:port .1.3.6.1.2.1.1
</pre>

<pre>
time snmpwalk -v1 -c <communitypwd> x.x.x.x:port .1.3.6.1.2.1.1
</pre>

[[Category:Snmp]]

Snmpwalk

2026-09-08T06:41:51Z

Chalro:

<pre>
time snmpwalk -v2c -c <communitypwd> x.x.x.x:port .1.3.6.1.2.1.1
</pre>

<pre>
time snmpwalk -v1 -c <communitypwd> x.x.x.x:port .1.3.6.1.2.1.1
</pre>

[[Category:snmp]]

Snmpwalk

2026-09-08T06:41:16Z

Chalro:

<pre>
time snmpwalk -v2c -c <communitypwd> 193.165.197.98:11312 .1.3.6.1.2.1.1
</pre>

<pre>
time snmpwalk -v1 -c <communitypwd> 193.165.197.98:11312 .1.3.6.1.2.1.1
</pre>

[[Category:snmp]]

Snmpwalk

2026-09-08T06:40:39Z

Chalro: založena nová stránka s textem „''' time snmpwalk -v2c -c <communitypwd> 193.165.197.98:11312 .1.3.6.1.2.1.1 ''' ''' time snmpwalk -v1 -c <communitypwd> 193.165.197.98:11312 .1.3.6.1.2.1.1 ''' Category:snmp“

'''
time snmpwalk -v2c -c <communitypwd> 193.165.197.98:11312 .1.3.6.1.2.1.1
'''
'''
time snmpwalk -v1 -c <communitypwd> 193.165.197.98:11312 .1.3.6.1.2.1.1
'''
[[Category:snmp]]

Replication pgsql

2026-08-12T13:44:16Z

Chalro:

<pre>
master db ->

postgresql.conf
listen_addresses = '*'
wal_level = replica
max_wal_senders = 10 #if valuechange, slave have to have the same value

CREATE ROLE replica_user WITH REPLICATION LOGIN PASSWORD 'pwd';
SELECT pg_create_physical_replication_slot('slave_node_1');

pg_hba.conf
##host replication all 0.0.0.0/0 scram-sha-256
host replication all 10.200.201.0/24 md5

slave ->
rm -rf /var/lib/postgresql/12/main/*
##pg_basebackup -h 10.200.200.4 -p 9005 -D /var/lib/postgresql/12/main/ -U replica_user -P -R -X stream -c fast -S slave_node_1 #pwd
pg_basebackup -h 10.200.201.6 -p 5432 -D /var/lib/postgresql/12/main/ -U replica_user -P -R -X stream -c fast -C -S slave_node_1 #pwd
systemctl start postgresql

master ->
SELECT * FROM pg_stat_replication;
</pre>
[[Category:postgres]]

Replication pgsql

2026-03-20T13:17:32Z

Chalro:

<pre>
master db ->

postgresql.conf
listen_addresses = '*'
wal_level = replica
max_wal_senders = 10

CREATE ROLE replica_user WITH REPLICATION LOGIN PASSWORD 'pwd';
SELECT pg_create_physical_replication_slot('slave_node_1');

pg_hba.conf
host replication all 0.0.0.0/0 scram-sha-256

slave ->
rm -rf /var/lib/postgresql/12/main/*
pg_basebackup -h 10.200.200.4 -p 9005 -D /var/lib/postgresql/12/main/ -U replica_user -P -R -X stream -c fast -S slave_node_1 #pwd

systemctl start postgresql

master ->
SELECT * FROM pg_stat_replication;
</pre>
[[Category:postgres]]

Replication pgsql

2026-03-18T13:50:36Z

Chalro: založena nová stránka s textem „ <pre> master db -> postgresql.conf listen_addresses = '*' wal_level = replica max_wal_senders = 10 CREATE ROLE replica_user WITH REPLICATION LOGIN PASSWORD 'pwd'; pg_hba.conf host replication all 0.0.0.0/0 scram-sha-256 slave -> rm -rf /var/lib/postgresql/12/main/* pg_basebackup -h 10.200.200.4 -p 9005 -D /var/lib/postgresql/12/main/ -U replica_user -P -R -X stream -c fast #pwd systemctl start postgresql…“

<pre>
master db ->

postgresql.conf
listen_addresses = '*'
wal_level = replica
max_wal_senders = 10

CREATE ROLE replica_user WITH REPLICATION LOGIN PASSWORD 'pwd';

pg_hba.conf
host replication all 0.0.0.0/0 scram-sha-256

slave ->
rm -rf /var/lib/postgresql/12/main/*
pg_basebackup -h 10.200.200.4 -p 9005 -D /var/lib/postgresql/12/main/ -U replica_user -P -R -X stream -c fast #pwd

systemctl start postgresql

master ->
SELECT * FROM pg_stat_replication;
</pre>
[[Category:postgres]]

Kategorie:Postgres

2026-03-18T13:44:12Z

Chalro: založena nová stránka s textem „Category:Manuals“

[[Category:Manuals]]

BPC checkmk

2026-03-06T07:50:48Z

Chalro:

<pre>
/usr/lib/check_mk_agent/local/backuppc_status
</pre>

<pre>
#!/bin/bash
# Velmi zjednodušený příklad pro Checkmk Local Check
ERROR_COUNT=$(sudo -u backuppc /usr/share/backuppc/bin/BackupPC_serverMesg status hosts | grep -c "error")

if [ "$ERROR_COUNT" -eq 0 ]; then
echo "0 BackupPC_Status - OK: Vsechny zalohy jsou v poradku"
else
echo "2 BackupPC_Status - CRITICAL: Nalezeno $ERROR_COUNT chyb v zalohach"
fi
</pre>

[[Category:backuppc]]

BPC checkmk

2026-03-06T07:50:36Z

Chalro: založena nová stránka s textem „ <pre> /usr/lib/check_mk_agent/local/backuppc_status </pre> </pre> #!/bin/bash # Velmi zjednodušený příklad pro Checkmk Local Check ERROR_COUNT=$(sudo -u backuppc /usr/share/backuppc/bin/BackupPC_serverMesg status hosts | grep -c "error") if [ "$ERROR_COUNT" -eq 0 ]; then echo "0 BackupPC_Status - OK: Vsechny zalohy jsou v poradku" else echo "2 BackupPC_Status - CRITICAL: Nalezeno $ERROR_COUNT chyb v zalohach" fi </pre> Category:backu…“

<pre>
/usr/lib/check_mk_agent/local/backuppc_status
</pre>

</pre>
#!/bin/bash
# Velmi zjednodušený příklad pro Checkmk Local Check
ERROR_COUNT=$(sudo -u backuppc /usr/share/backuppc/bin/BackupPC_serverMesg status hosts | grep -c "error")

if [ "$ERROR_COUNT" -eq 0 ]; then
echo "0 BackupPC_Status - OK: Vsechny zalohy jsou v poradku"
else
echo "2 BackupPC_Status - CRITICAL: Nalezeno $ERROR_COUNT chyb v zalohach"
fi
</pre>

[[Category:backuppc]]

Sending mails

2026-03-06T07:40:16Z

Chalro: založena nová stránka s textem „ <pre> sudo -u backuppc /usr/share/backuppc/bin/BackupPC_sendEmail -u monitoring@example.com </pre> Category:Backuppc“

<pre> sudo -u backuppc /usr/share/backuppc/bin/BackupPC_sendEmail -u monitoring@example.com </pre>

[[Category:Backuppc]]

Kategorie:Backuppc

2026-03-06T07:39:20Z

Chalro: založena nová stránka s textem „ Category:Manuals“

[[Category:Manuals]]

Serial output

2026-02-19T08:24:24Z

Chalro: založena nová stránka s textem „Serial port can be used like "vga output" instead of vga/monitor .. * edit grub <pre> vim /etc/default/grub </pre> * add/edit follow <pre> # set terminal for output/input GRUB_TERMINAL="serial console" # set params -> unit 0 = ttyS0 GRUB_SERIAL_COMMAND="serial --speed=115200 --unit=0 --word=8 --parity=no --stop=1" # add params for kernel to set ttyS0 output GRUB_CMDLINE_LINUX_DEFAULT="quiet splash console=tty0 console=ttyS0,115200n8" </pre> * upda…“

Serial port can be used like "vga output" instead of vga/monitor ..

* edit grub
<pre>
vim /etc/default/grub
</pre>

* add/edit follow
<pre>
# set terminal for output/input
GRUB_TERMINAL="serial console"

# set params -> unit 0 = ttyS0
GRUB_SERIAL_COMMAND="serial --speed=115200 --unit=0 --word=8 --parity=no --stop=1"

# add params for kernel to set ttyS0 output
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash console=tty0 console=ttyS0,115200n8"
</pre>
* update-grub
* in case of trouble, perform force enable
<pre>
systemctl enable --now serial-getty@ttyS0.service
</pre>

* thats all

[[Category:Linux]]

Tail in windows

2026-02-18T14:18:33Z

Chalro: založena nová stránka s textem „ * powershell <pre> Get-Content filenamehere -Wait -Tail 30 Get-Content atlassian-jira.log -Wait -Tail 30 </pre> Category:Windows“

* powershell
<pre>
Get-Content filenamehere -Wait -Tail 30
Get-Content atlassian-jira.log -Wait -Tail 30
</pre>
[[Category:Windows]]

Kategorie:Windows

2026-02-18T14:17:39Z

Chalro: založena nová stránka s textem „Category:Manuals“

[[Category:Manuals]]

Flash bios via programmer

2026-02-18T14:15:57Z

Chalro:

<pre>
1209 flashrom --programmer ch341a_spi -r thinkpad13_13.5.22.bin
1211 flashrom --programmer ch341a_spi -r thinkpad13_13.5.22.bin
1213 ghex thinkpad13_13.5.22.bin
1215 gzip thinkpad13_13.5.22.bin
1217 cp thinkpad13_13.5.22.bin.gz /home/rosta/Odpad/
1218 #flashrom --programmer ch341a_spi -r thinkpad13_13.5.22.bin
1219 flashrom --programmer ch341a_spi -w /home/rosta/Odpad/Lenovo\ ThinkPad\ 13\ 2nd\ Gen_unlocked\ file.bin
1221 gunzip thinkpad13_13.5.22.bin.gz
1223 flashrom --programmer ch341a_spi -w thinkpad13_13.5.22.bin
1269 flashrom --programmer ch341a_spi -w thinkpadL470_9.6.22.bin
1271 flashrom --programmer ch341a_spi -r thinkpadL470_9.6.22.bin
1273 ll /home/rosta/Odpad/Lenovo\ ThinkPad\ 13\ 2nd\ Gen_unlocked\ file.bin
1275 flashrom --programmer ch341a_spi -w /home/rosta/Odpad/Lenovo\ ThinkPad\ 13\ 2nd\ Gen_unlocked\ file.bin
1277 flashrom --programmer ch341a_spi -w thinkpadL470_9.6.22.bin
1278 flashrom --programmer ch341a_spi -w /home/rosta/Odpad/Lenovo\ L470_unlocked\ file.bin
1279 flashrom --programmer ch341a_spi -w thinkpadL470_9.6.22.bin
1394 flashrom --programmer ch341a_spi -r thinkpadL470_26.9.22.bin
1396 flashrom --programmer ch341a_spi -w /home/rosta/Odpad/Lenovo\ L470_unlocked\ file.bin
1397 flashrom --programmer ch341a_spi -w thinkpadL470_26.9.22.bin
1398 flashrom --programmer ch341a_spi -r thinkpadL470_26.9.22_2.bin
1399 flashrom --programmer ch341a_spi -w /home/rosta/Odpad/Lenovo\ L470_unlocked\ file.bin
</pre>

steps
<pre>
Hi,

How to use the unlocked file ??
Please obey the following steps.
===============
1.
Make sure CMOS is cleared by removing the 3V cell for about 20 seconds.
Also make sure laptop's main battery is out and disconnect the internal from the battery if
used (many new Lenovo may have an internal battery, the black box) by removing its connector from the motherboard.

It is important that the laptop will have NO battery attached but the CMOS cell.

If now your laptop can boot, but it ONLY has the computrace.
Please power on the laptop and set up a new supervisor password in the bios setting first.

(If your laptop has a bios password (supervisor password) when booting, please ignore this step.)

***Please back up your original bios file by the IC programmer three times. ( You had already done it.)
***Please reserve your original bios file.***
***And then program the bios chip with "our unlock file" by the IC programmer.***

2.
Plug in the AC adapter and wait for a few seconds, the laptop will start by itself.
(if not, press the Power button and start it).

The laptop may be on and off many times.
Please wait for the laptop reconfiguration.
***It will take a period of time.***
***Please be patient to wait for the booting procedure.***

You may hear some beeps then you will see the Lenovo splash image, press F1 to get the SVP password prompt
and enter "1234" for SVP and press Enter.

Next page will show you the Security DXE driver loading and showing "Press any key..".
Wait about 20-30 seconds before pressing a key.

Next it will display the warning message and the laptop Hardware ID. At this moment
Now Enter Key : 1234.

3.
And then it will show the next screen,
Obey the screen shows.
Press SPACE KEY twice.
And then turn off the laptop.

4.
Finally please program the bios chip with "your original bios file".***
And then turn on the laptop.
The bios password was removed.
The laptop has no bios password.
</pre>
[[Category:Hardware]]

Upgrade tomcat

2026-02-18T14:09:46Z

Chalro: založena nová stránka s textem „<pre> psáno bodov, abych nezapomnl postup nové edocaty $ systemctl stop edocat stáhnout novej tomcat wget https://dlcdn.apache.org/tomcat/tomcat-9/v9.0.62/bin/apache-tomcat-9.0.62.tar.gz pejmenovat tomcat v /opt/edocat/app/alfresco/tomcat na /opt/edocat/app/alfresco/tomcat_old rozbalit 9.0.62 do /opt/edocat/app/alfresco/tomcat zkopírovat do nového bin/setenv.sh 1:1 v novém tomcatu soubor conf/context.xml pidat <Resources cacheMaxSize="51200" cac…“

<pre>
psáno bodov, abych nezapomnl postup
nové edocaty
$ systemctl stop edocat
stáhnout novej tomcat
wget https://dlcdn.apache.org/tomcat/tomcat-9/v9.0.62/bin/apache-tomcat-9.0.62.tar.gz
pejmenovat tomcat v /opt/edocat/app/alfresco/tomcat na /opt/edocat/app/alfresco/tomcat_old
rozbalit 9.0.62 do /opt/edocat/app/alfresco/tomcat
zkopírovat do nového bin/setenv.sh 1:1
v novém tomcatu soubor conf/context.xml pidat <Resources cacheMaxSize="51200" cachingAllowed="true"/>
<Context>


<WatchedResource>WEB-INF/web.xml</WatchedResource>
<WatchedResource>WEB-INF/tomcat-web.xml</WatchedResource>
<WatchedResource>${catalina.base}/conf/web.xml<
/WatchedResource>


<Resources cacheMaxSize="51200" cachingAllowed="true"/>
</Context>
zkopírovat 1:1 shared/*
zkopírovat ze starého tomcatu webapps/alfresco.war a webapps/share.war
v souboru conf/server.xml povolit a upravit AJP protokol (v edc se používá)
<Connector protocol="AJP/1.3"
address="0.0.0.0"
port="8009"
redirectPort="8443" secretRequired="false" />
pi té píležitosti i 8080
10.
a.
b.
c.
11.
a.
b.
12.
13.
14.
<Connector port="8080" protocol="HTTP/1.1" address="
127.0.0.1"
connectionTimeout="20000"
redirectPort="8443" />
na závr nejdležitjší edit
mv /opt/edocat/app/alfresco/tomcat/conf/catalina.properties /opt/edocat/app/alfresco/tomcat/conf/catalina.properties_B
cp /opt/edocat/app/alfresco/tomcat_old/conf/catalina.properties /opt/edocat/app/alfresco/tomcat/conf/catalina.properties
do souboru tomcat/conf/catalina.properties upravit ádek shared.loader, již existuje ale je prázdný
shared.loader=${catalina.base}/shared/classes,${catalina.base}
/shared/lib/*.jar
nasmrovat složku logs
$ rm -r logs
$ ln -s ../../../logs/ logs
chown edocat:edocat -Rv tomcat
restorecon -Rv tomcat
$ systemctl restart edocat
možné problémy
Caused by: java.lang.IllegalArgumentException: The AJP Connector is
configured with secretRequired="true" but the secret attribute is
either null or "". This combination is not valid.
do server.xml k AJP conn pipsat secretRequired="false"
bash history:
systemctl stop edocat
mkdir /root/t9; cd /root/t9/; wget https://dlcdn.apache.org/tomcat
/tomcat-9/v9.0.62/bin/apache-tomcat-9.0.62.tar.gz; tar -xvf apachetomcat-9.0.62.tar.gz
mv /opt/edocat/app/alfresco/tomcat/ /opt/edocat/app/alfresco/tomcat_old/
ls -la /opt/edocat/app/alfresco/
cp -r /root/t9/apache-tomcat-9.0.62 /opt/edocat/app/alfresco/tomcat
cp /opt/edocat/app/alfresco/tomcat_old/bin/setenv.sh /opt/edocat/app
/alfresco/tomcat/bin/setenv.sh
cp -r /opt/edocat/app/alfresco/tomcat_old/shared /opt/edocat/app
/alfresco/tomcat/shared
ls -laR /opt/edocat/app/alfresco/tomcat/shared
cp /opt/edocat/app/alfresco/tomcat_old/webapps/alfresco.war /opt/edocat
/app/alfresco/tomcat/webapps/alfresco.war
cp /opt/edocat/app/alfresco/tomcat_old/webapps/share.war /opt/edocat/app
/alfresco/tomcat/webapps/share.war
vim /opt/edocat/app/alfresco/tomcat/conf/server.xml
vim /opt/edocat/app/alfresco/tomcat/conf/catalina.properties
cd /opt/edocat/app/alfresco/tomcat/conf/
rm -rf /opt/edocat/app/alfresco/tomcat/logs/
ln -s /opt/edocat/logs /opt/edocat/app/alfresco/tomcat/logs
ls -la /opt/edocat/app/alfresco/tomcat/logs
chown -R edocat:edocat -Rv /opt/edocat/app/alfresco/tomcat
restorecon -Rv /opt/edocat/app/alfresco/tomcat
systemctl start edocat
Bash history pro alternativní cestu k tomcat složce /opt/edocat/alfresco/alfresco-community/tomcat
1.
2.
3.
4.
5.
6.
a.
systemctl stop edocat
mkdir /root/t9
cd /root/t9/
wget --no-check-certificate https://dlcdn.apache.org/tomcat/tomcat-9
/v9.0.62/bin/apache-tomcat-9.0.62.tar.gz
tar -xvf apache-tomcat-9.0.62.tar.gz
mv /opt/edocat/alfresco/alfresco-community/tomcat/ /opt/edocat/alfresco
/alfresco-community/tomcat_old
cp -r /root/t9/apache-tomcat-9.0.62 /opt/edocat/alfresco/alfrescocommunity/tomcat
cp /opt/edocat/alfresco/alfresco-community/tomcat_old/bin/setenv.sh
/opt/edocat/alfresco/alfresco-community/tomcat/bin/setenv.sh
vim /opt/edocat/alfresco/alfresco-community/tomcat/conf/context.xml
cp -r /opt/edocat/alfresco/alfresco-community/tomcat_old/shared/ /opt
/edocat/alfresco/alfresco-community/tomcat/shared
cp /opt/edocat/alfresco/alfresco-community/tomcat_old/webapps/alfresco.
war /opt/edocat/alfresco/alfresco-community/tomcat/webapps/alfresco.war
cp /opt/edocat/alfresco//alfresco-community/tomcat_old/webapps/share.
war /opt/edocat/alfresco/alfresco-community/tomcat/webapps/share.war
vim /opt/edocat/alfresco/alfresco-community/tomcat/conf/server.xml
mv /opt/edocat/alfresco/alfresco-community/tomcat/conf/catalina.
properties /opt/edocat/alfresco/alfresco-community/tomcat/conf/catalina.
properties_B
cp /opt/edocat/alfresco/alfresco-community/tomcat_old/conf/catalina.
properties /opt/edocat/alfresco/alfresco-community/tomcat/conf/catalina.
properties
rm -rf /opt/edocat/alfresco/alfresco-community/tomcat/logs/
ln -s /opt/edocat/logs /opt/edocat/alfresco/alfresco-community/tomcat
/logs
cp /opt/edocat/alfresco/alfresco-community/tomcat_old/lib/postgresql.
jar /opt/edocat/alfresco/alfresco-community/tomcat/lib/
chown -R edocat:edocat -Rv /opt/edocat/alfresco/alfresco-community
/tomcat
restorecon -Rv /opt/edocat/alfresco/alfresco-community/tomcat
ls -la /opt/edocat/alfresco/alfresco-community/tomcat/logs
systemctl start edocat && tail -f /opt/edocat//logs/catalina.out
staré edocaty 3.x
systemctl stop edocat
stáhnout novej tomcat
wget --no-check-certificate https://dlcdn.apache.org/tomcat/tomcat-8/v8.5.81/bin/apache-tomcat-8.5.81.tar.gz
pejmenovat tomcat v /opt/edocat/alfresco-community/tomcat na /opt/edocat/alfresco-community/tomcat_old
rozbalit 8.5.81 do /opt/edocat/alfresco-community/tomcat
zkopírovat do nového bin/setenv.sh 1:1
v novém tomcatu soubor conf/context.xml upravit na
6.
a.
7.
8.
a.
b.
9.
a.
b.
c.
d.
10.
11.
12.
13.
14.
15.
16.
<Context>


<WatchedResource>WEB-INF/web.xml</WatchedResource>
<WatchedResource>WEB-INF/tomcat-web.xml</WatchedResource>
<WatchedResource>${catalina.base}/conf/web.xml<
/WatchedResource>


<Resources cacheMaxSize="51200" cachingAllowed="true"/>
</Context>
ze starého tomcatu pekopírovat conf/Catalina
v souboru conf/server.xml povolit a upravit AJP protokol (v edc se používá)
<Connector protocol="AJP/1.3"
address="0.0.0.0"
port="8009"
redirectPort="8443" secretRequired="false" />
pi té píležitosti i 8080
<Connector port="8080" protocol="HTTP/1.1" address="
127.0.0.1"
connectionTimeout="20000"
redirectPort="8443" />
nejdležitjší edit, catalina.properties a catalina.policy
mv /opt/edocat/alfresco-community/tomcat/conf/catalina.properties /opt/edocat/alfresco-community/tomcat_old/conf/catalina.
properties_B
cp /opt/edocat/alfresco-community/tomcat_old/conf/catalina.properties /opt/edocat/alfresco-community/tomcat/conf/catalina.
properties
mv /opt/edocat/alfresco-community/tomcat/conf/catalina.policy /opt/edocat/alfresco-community/tomcat_old/conf/catalina.policy_B
cp /opt/edocat/alfresco-community/tomcat_old/conf/catalina.policy /opt/edocat/alfresco-community/tomcat/conf/catalina.policy
zkopírovat JDBC lib/postgresql-9.4.1212.jar do nového tomcatu
zkopírovat 1:1 shared/* endorsed/* a scripts/*
Tento krok musí mít dostatek místa(velká warka) zkopírovat ze starého tomcatu webapps/ složky _vtibin alfresco a share + jejich
WARka, _vtibin.war alfresco.war a share.war
nasmrovat složku logs na pvodní, každá instalace jinak
chown edocat:edocat -Rv tomcat
restorecon -Rv tomcat
$ systemctl restart edoca

</pre>
[[Category:Tomcat]]

Kategorie:Tomcat

2026-02-18T14:09:02Z

Chalro: založena nová stránka s textem „Category:Manuals“

[[Category:Manuals]]

Systemd

2026-02-18T14:07:05Z

Chalro:

remove service
<pre>
systemctl stop [servicename]
systemctl disable [servicename]
rm /etc/systemd/system/[servicename]
rm /etc/systemd/system/[servicename] # and symlinks that might be related
rm /usr/lib/systemd/system/[servicename]
rm /usr/lib/systemd/system/[servicename] # and symlinks that might be related
systemctl daemon-reload
systemctl reset-failed
</pre>

example service for confluence
<pre>
/etc/systemd/system/confluence.service

[Unit]
Description=Atlassian Confluence Service
After=syslog.target network.target

[Service]
Type=forking
User=confluence
Group=confluence
ExecStart=/opt/confluence/740-install/bin/start-confluence.sh
ExecStop=/opt/confluence/740-install/bin/stop-confluence.sh
Environment="JAVA_HOME=/lib/jvm/jre-11"
Environment="CATALINA_OPTS=-XX:MetaspaceSize=512m -XX:MaxMetaspaceSize=512m"
[Install]
WantedBy=multi-user.target
</pre>

[[Category:Linux]]

Cisco os

2026-02-18T14:06:06Z

Chalro:

<pre>
sw1# configure
Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)# vlan 50
sw1(config-vlan)# name rezerva
sw1(config-vlan)# state active
sw1(config-vlan)# no shutdown //link up
sw1(config-vlan)# shutdown //link down
sw1(config-vlan)# exit
sw1(config)#

sw1# config
Enter configuration commands, one per line. End with CNTLsw1(config)# interface Eth1/40
sw1(config)# interface Ethernet1/19
sw1(config-if)# switchport mode access
sw1(config-if)# switchport access vlan 10
sw1(config-if)# exit
sw1(config)# exit

copy running-config startup-config

sw1# configure
Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)# vlan 50
sw1(config-vlan)# name rezerva
sw1(config-vlan)# state active
sw1(config-vlan)# no shutdown
sw1(config-vlan)# exit
sw1(config)#
sw1# config
Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)# interface Eth1/20
sw1(config-if)# switchport mode trunk
sw1(config-if)# switchport trunk native vlan 1
sw1(config-if)# switchport trunk allowed vlan add 10,20,30,40
sw1(config-if)# exit
sw1# config
Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)# interface Eth1/40
sw1(config-if)# switchport mode access
sw1(config-if)# switchport access vlan 10
sw1(config-if)# exit
sw1(config)# exit

sw1# copy running-config startup-config
[########################################] 100%
Copy complete, now saving to disk (please wait)...
sw1#
Comment by Rostislav Chalupský [ 04.03.2019 ]
sw1# show running-config interface ethernet Eth1/40
!Command: show running-config interface Ethernet1/40
!Time: Mon Mar 4 12:11:00 2019
version 6.0(2)U6(5)
interface Ethernet1/40

sw1# show mac address-table interface Eth1/2 Legend: * - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC age - seconds since first seen,+ - primary entry using vPC Peer-Link VLAN MAC Address Type age Secure NTFY Ports/SWID.SSID.LID ---------+-----------------+--------+---------+------+----+------------------ * 1 90e2.ba6b.bbdc dynamic 1090 F F Eth1/2

</pre>
[[Category:Hardware]]

Cisco os

2026-02-18T14:04:28Z

Chalro: založena nová stránka s textem „<pre> sw1.dc3.onlio.com# configure Enter configuration commands, one per line. End with CNTL/Z. sw1.dc3.onlio.com(config)# vlan 50 sw1.dc3.onlio.com(config-vlan)# name rezerva sw1.dc3.onlio.com(config-vlan)# state active sw1.dc3.onlio.com(config-vlan)# no shutdown //link up sw1.dc3.onlio.com(config-vlan)# shutdown //link down sw1.dc3.onlio.com(config-vlan)# exit sw1.dc3.onlio.com(config)# sw1.dc3.onlio.com# config Enter configuration commands, one…“

<pre>
sw1.dc3.onlio.com# configure
Enter configuration commands, one per line. End with CNTL/Z.
sw1.dc3.onlio.com(config)# vlan 50
sw1.dc3.onlio.com(config-vlan)# name rezerva
sw1.dc3.onlio.com(config-vlan)# state active
sw1.dc3.onlio.com(config-vlan)# no shutdown //link up
sw1.dc3.onlio.com(config-vlan)# shutdown //link down
sw1.dc3.onlio.com(config-vlan)# exit
sw1.dc3.onlio.com(config)#

sw1.dc3.onlio.com# config
Enter configuration commands, one per line. End with CNTLsw1.dc3.onlio.com(config)# interface Eth1/40
sw1.dc3.onlio.com(config)# interface Ethernet1/19
sw1.dc3.onlio.com(config-if)# switchport mode access
sw1.dc3.onlio.com(config-if)# switchport access vlan 10
sw1.dc3.onlio.com(config-if)# exit
sw1.dc3.onlio.com(config)# exit

copy running-config startup-config

sw1.dc3.onlio.com# configure
Enter configuration commands, one per line. End with CNTL/Z.
sw1.dc3.onlio.com(config)# vlan 50
sw1.dc3.onlio.com(config-vlan)# name rezerva
sw1.dc3.onlio.com(config-vlan)# state active
sw1.dc3.onlio.com(config-vlan)# no shutdown
sw1.dc3.onlio.com(config-vlan)# exit
sw1.dc3.onlio.com(config)#
sw1.dc3.onlio.com# config
Enter configuration commands, one per line. End with CNTL/Z.
sw1.dc3.onlio.com(config)# interface Eth1/20
sw1.dc3.onlio.com(config-if)# switchport mode trunk
sw1.dc3.onlio.com(config-if)# switchport trunk native vlan 1
sw1.dc3.onlio.com(config-if)# switchport trunk allowed vlan add 10,20,30,40
sw1.dc3.onlio.com(config-if)# exit
sw1.dc3.onlio.com# config
Enter configuration commands, one per line. End with CNTL/Z.
sw1.dc3.onlio.com(config)# interface Eth1/40
sw1.dc3.onlio.com(config-if)# switchport mode access
sw1.dc3.onlio.com(config-if)# switchport access vlan 10
sw1.dc3.onlio.com(config-if)# exit
sw1.dc3.onlio.com(config)# exit

sw1.dc3.onlio.com# copy running-config startup-config
[########################################] 100%
Copy complete, now saving to disk (please wait)...
sw1.dc3.onlio.com#
Comment by Rostislav Chalupský [ 04.03.2019 ]
sw1.dc3.onlio.com# show running-config interface ethernet Eth1/40
!Command: show running-config interface Ethernet1/40
!Time: Mon Mar 4 12:11:00 2019
version 6.0(2)U6(5)
interface Ethernet1/40

sw1.dc3.onlio.com# show mac address-table interface Eth1/2 Legend: * - primary entry, G - Gateway MAC, (R) - Routed MAC, O - Overlay MAC age - seconds since first seen,+ - primary entry using vPC Peer-Link VLAN MAC Address Type age Secure NTFY Ports/SWID.SSID.LID ---------+-----------------+--------+---------+------+----+------------------ * 1 90e2.ba6b.bbdc dynamic 1090 F F Eth1/2
</pre>
[[Category:Hardware]]

Grep

2026-02-18T14:03:11Z

Chalro: založena nová stránka s textem „* grep za nalezem <pre> cat output-24_10_2.txt | grep -o -P '.{0,1}name.{0,17}' </pre> Category:Linux“

* grep za nalezem
<pre>
cat output-24_10_2.txt | grep -o -P '.{0,1}name.{0,17}'
</pre>
[[Category:Linux]]

Replikace AD

2026-02-18T14:02:12Z

Chalro: založena nová stránka s textem „<pre> repadmin /syncall repadmin /syncall /AdeP C:\Users\Administrator.ONLIO>nltest /dclist:onlio.local Get list of DCs in domain 'onlio.local' from '\\onlprodad2.onlio.local'. onlprodad2.onlio.local [DS] Site: Default-First-Site-Name onlprodad1.onlio.local [PDC] [DS] Site: Default-First-Site-Name The command completed successfully nslookup set type=all _ldap._tcp.dc._msdcs.onlio.local </pre> Category:ActiveDirectory“

<pre>
repadmin /syncall

repadmin /syncall /AdeP

C:\Users\Administrator.ONLIO>nltest /dclist:onlio.local
Get list of DCs in domain 'onlio.local' from '\\onlprodad2.onlio.local'.
onlprodad2.onlio.local [DS] Site: Default-First-Site-Name
onlprodad1.onlio.local [PDC] [DS] Site: Default-First-Site-Name
The command completed successfully

nslookup
set type=all
_ldap._tcp.dc._msdcs.onlio.local

</pre>
[[Category:ActiveDirectory]]

Kategorie:ActiveDirectory

2026-02-18T14:01:23Z

Chalro: založena nová stránka s textem „Category:Manuals“

[[Category:Manuals]]

Ldap debug alf

2026-02-18T14:00:20Z

Chalro: založena nová stránka s textem „<pre> úprava logování ldap a auth u alfresca na debug v souboru /opt/alfresco/alfresco/alfresco-community/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties /opt/alfresco/app/alfresco/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties přidat # ldap auth sync log4j.logger.org.alfresco.repo.importer.ImporterJob=debug log4j.logger.org.alfresco.repo.importer.ExportSourceImporter=debug log4j.logger.org.alfresco.repo.security.authentication.…“

<pre>
úprava logování ldap a auth u alfresca na debug
v souboru
/opt/alfresco/alfresco/alfresco-community/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties
/opt/alfresco/app/alfresco/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties
přidat
# ldap auth sync
log4j.logger.org.alfresco.repo.importer.ImporterJob=debug
log4j.logger.org.alfresco.repo.importer.ExportSourceImporter=debug
log4j.logger.org.alfresco.repo.security.authentication.ldap=debug
log4j.logger.org.alfresco.repo.security.authentication=debug
log4j.logger.org.alfresco.repo.security.authentication.AbstractChainingAuthenticationService=debug
log4j.logger.org.alfresco.repo.security.sync.ldap.LDAPUserRegistry=debug
log4j.logger.org.springframework.extensions.webscripts.DeclarativeWebScript=debug # toto je možná zbytečné...
</pre>
[[Category:Alfresco]]

Kategorie:Alfresco

2026-02-18T13:59:53Z

Chalro: obsah stránky nahrazen textem „ Category:Manuals“

[[Category:Manuals]]

Kategorie:Alfresco

2026-02-18T13:59:36Z

Chalro: založena nová stránka s textem „ <pre> úprava logování ldap a auth u alfresca na debug v souboru /opt/alfresco/alfresco/alfresco-community/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties /opt/alfresco/app/alfresco/tomcat/webapps/alfresco/WEB-INF/classes/log4j.properties přidat # ldap auth sync log4j.logger.org.alfresco.repo.importer.ImporterJob=debug log4j.logger.org.alfresco.repo.importer.ExportSourceImporter=debug log4j.logger.org.alfresco.repo.security.authentication…“

Jira Windows

2026-02-18T13:57:54Z

Chalro:

jira sql win login

nainstalovat firefox notepad++ a keystore explorer
Prekopirovat jira data do novýho ~7h!
jdbc driver do tomcat lib
dbconfig.xml ...
dll jdbc do system32/driver
ca cert LDAPS
upravit server.xml - pozor tomcat podava primo 443

edit JVM a pustit recovery_admin lze pouze editaci sluzby tomcat8w //ES/xyz, ignoruje to setenv.sh

to do:
ca cert pro ldaps

1. Instalace Jira 8.20.5 na nový aplikační server (1h)
2. Zkopírování dumpu ze stare DB do nové (v režii CPI)
3. Odstavení staré Jiry (volitelně - nebudeme nyní provádět)
4. Překopírování data složky a porovnání a následná konfigurace rozdílů (difference check) (3 - 6h)
5. Konfigurace nové instance 8.20.5 a DB (zahrnuje konfiguraci tomcat,DB,jdbc, drivers) (5 - 8h)
6. Konfigurace Add-ons (2 - 8h)
7. Kontrola a compilace custom add-ons (1-2h)
8. Troubleshooting (0 - 8h)

nový jdbc driver do tomcat lib

Microsoft JDBC Driver for SQL Server - JDBC Driver for SQL Server → https://go.microsoft.com/fwlink/?linkid=2186163

zazálohovat a upravit dbconfig.xml překopírovaný ze staré do nové jiry ... hlavně mssql ntlm auth ! manuálně !

dll jdbc do system32/driver

upravit server.xml - pozor tomcat podava primo 443

ca cert LDAPS, import do keystore jre

edit JVM a pustit recovery_admin lze pouze editaci sluzby tomcat8w //ES/xyz, ignoruje to setenv.bat

//poznamka, nahrazeni linuxoveho tailu powershellem → Get-Content jira.log -Wait -Tail 30

>tomcat9w //ES/JiraServiceDesk190223235704