RE: [cobalt-users] Livestats on the Cobalt Servers (raq 3/4)

["Devin Smith" <devinsmith@xxxxxxxxxxxxxxx>]

Does having Samba wide open like this on a network not open a huge
security hole?  And would it also not make the machine the instant
target of windows-style brute force attacks?  I'm no linux guru either,
but something about this sends up red flags to me.  I thought samba was
disabled for a reason!

---Devin

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx] On Behalf Of Chris Dorman
Sent: Friday, June 14, 2002 9:05 AM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: [cobalt-users] Livestats on the Cobalt Servers (raq 3/4)


   I spent the last few weeks getting DeepMetrix's LiveStats (formerly 
Mediahouse's Livestats) to pull stats off the Cobalt Raq's (Raq3/4)

   This list was a good source of help, but I also had to consult alot
of 
different sites and even deepmetrex themselves.  However in the end I
came 
up with this procedure.  It works great and if you follow the
information 
below, you should be able to get it working for you.

   (Note:  I am no Linux guru, so I'm sure that some people out there
may 
know a better way to do some of these steps. However this process works
as 
I use it to get stats from 7 Raq servers). If anyone has any suggestions

please post them up.


In this setup, we will assume that the livestats user account will be 
called livestats.
In this setup, we are setting up stats to work from a Raq3, I performed 
this on a raq 4 and it worked fine as well.
In this instance I was using DeepMetrix's Livestats V 6.2 xsp (Service 
Provider Edition)

Setup livestats as usual on your windows server following the
documentation 
provided with the product.

Create an account for livestats to use on your network (required to
access 
any logs on remote machines)
following the instructions in the livestats documentation. Make the 
collector run using that account

Log into the livestats program as the administrator

Goto the section General Configuration > Log File Templates. Create a
custom log file template "cobalt" and use the following custom Parse
Template

%a6% %p1% %xx% %xx% [%dd%?%dm%?%dy%:%th%:%tm%:%ts% %xx%] "%xx% %a1%
%xx%" 
%n1% %n2% "%a3%" "%a4%"


Log into the cobalt server using the cobalt UI. Goto your server main
site 
and create a user
called livestats. Don't worry about any permissions. Use the same
password 
as you used for the windows network account

Log into the cobalt server in a terminal session and su to root.

Enable smb on the cobalt as outlined below.

         cd /etc

         edit smb.conf

If the following lines are not in smb.conf add them.


         hosts allow = {your livestats server IP}
         server string = {this server's name as seen on windows network}

         [logs]
         path=/home/log/httpd
         read only = yes


         edit smbusers

on the line

         root = administrator admin

Add the livestats network account name from the livestats server (in
this 
example it is "livestats")
Then create the password hash file

         smbpasswd -a livestats {password}

Note: The {password} matches the password of the livestats account on
your 
windows network.
If you get an error, don't panic. Chances are the hash file has never
been 
created so the
first time it will report the file was not found.


Then enter the following commands:

         cd /etc/rc.d/rc3.d
         ln -s ../init.d/smb ./S35smb

(This creates a simlink needed for samba to work)

         /etc/rc.d/init.d/smb start

Samba should start.


Log into the livestats server using the livestats account.
You should be able to access the cobalt server on your windows network.

         start > run > \\{cobalt server name}

You should not be prompted for a user name/password. If you are there is
a 
problem.
You should see a logs folder and in that folder the directory with all
the cobalt server logs. Make sure you can open the file "access"


Back on the Livestats server using the web interface.
When you setup a new stats virtual server, use the custom template we 
created earlier.
For the path to the log file, use \\{cobalt servers name\logs\ and the
file name will be access

  Also, when you create the virtual server in livestats, be sure to put
the 
full domain
(www.mydomain.com) in the box Log File Filtering > Only collect from
server 
host:
Otherwise you will collect data for all activity on the server.





===============================
Christopher C. Dorman, MCSE
Senior Commercial Website Administrator
cdorman@xxxxxxxxx
Ph: (780) 425-5151 ext 493
Toll Free: (888)663-1336 ext 493
Fax: (780) 425-3852
Support: hostingsupport@xxxxxxxxxxxxxxxxx
Support WebSite: http://hostingsupport.oanet.com
===============================

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users