How to install and secure egroupware - Directory UMM

More documents

Recommendations

Info

This document is published under the: Creative Commons Attribution-ShareAlike License Extensions and responses to this document are welcome. Please contact the author. Author: Reiner Jung Copyright: Reiner Jung Contact: r.jung@creativix.net Project: eGroupWare Date published 18-May-04 Reiner Jung Install and Secure eGroupWare Page 2 of 67
Index Index ..................................................................................................................................................................................... 3 1 Installation Checklist for eGroupWare ...................................................................................................................... 6 2 Express Install HOWTO ................................................................................................................................................ 7 3 Migrating Your Installation from phpGroupWare to eGroupWare ....................................................................... 12 4 Updating eGroupWare ............................................................................................................................................. 13 4.1 Updating the eGroupWare installation................................................................................................................ 13 4.2 Porting your settings to the new header.inc.php version................................................................................. 13 5 Installation Instructions ............................................................................................................................................. 14 5.1 Downloading the packages.................................................................................................................................. 14 5.2 Why are GPG-signed packages and md5sum necessary?............................................................................. 14 5.2.1 Installing the GPG key for tar.gz.gpg, tar.bz2.gpg and zip.gpg................................................................. 14 5.2.2 Verifying the GPG key ........................................................................................................................................ 14 5.2.3 Installing the GPG key for the RPM packages............................................................................................... 16 5.3 How do I validate packages?............................................................................................................................... 16 5.4 Installing the packages on your server ................................................................................................................ 17 5.4.1 Rebuilding the packages for other RPM paths.............................................................................................. 18 5.4.2 Installing an unsigned package on your server............................................................................................. 18 5.4.3 Installing a GPG-signed package on your server ......................................................................................... 18 5.4.4 Installing from CVS .............................................................................................................................................. 19 6 Basic Server Security................................................................................................................................................. 20 6.1 The server platform .................................................................................................................................................. 20 6.1.1 Checking your server for running services and open ports......................................................................... 20 6.1.1.1 Ports which the eGroupWare server needs to run ............................................................................... 20 6.1.1.2 The portscanner.......................................................................................................................................... 21 6.1.1.3 Output from a portscanner ...................................................................................................................... 21 6.1.1.4 Disabling unneeded services/servers..................................................................................................... 21 6.1.2 Uninstalling unneeded software on your server............................................................................................. 22 6.1.3 Local check for signs of a rootkit...................................................................................................................... 22 6.1.3.1 Chkrootkit sample snippet........................................................................................................................ 23 6.1.3.2 Installing the chkrootkit RPM .................................................................................................................... 23 6.1.3.3 Installing chkrootkit from the tar.gz file................................................................................................... 24 6.1.4 Secure server administration............................................................................................................................. 24 6.1.4.1 Connecting to your server over a secure session ................................................................................ 25 6.1.4.2 Working with SSH Key Pairs........................................................................................................................ 25 6.1.4.2.1 Creating a secure shell key pair ........................................................................................................ 26 6.1.4.2.2 Copying your public key to the server ............................................................................................. 26 6.1.4.2.3 The ssh-add tool.................................................................................................................................... 26 6.1.4.2.4 Securing your SSH client ...................................................................................................................... 26 6.1.4.2.5 Securing your SSHD .............................................................................................................................. 27 Reiner Jung Install and Secure eGroupWare Page 3 of 67
Page 1: How to Install and Secure eGroupWar
Page 5 and 6: 7.5.3 Step 3 - Set Up Your User Acc
Page 7 and 8: 2 Express Install HOWTO This “How
Page 9 and 10: 4) Ensure that your web server and
Page 11 and 12: and for initial setup only 12) Mana
Page 13 and 14: 4 Updating eGroupWare 4.1 Updating
Page 15 and 16: [root@server root]# gpg --list-keys
Page 17 and 18: [user@server tmp]$ md5sum eGroupWar
Page 19 and 20: [user@server tmp]$ unzip /tmp/eGrou
Page 21 and 22: Conclusion: Minimum necessary open
Page 23 and 24: • strings.c: quick and dirty stri
Page 25 and 26: � If possible, use only SSHv2 con
Page 27 and 28: There is one important line in the
Page 29 and 30: verbose=5 report_url=file:/var/log/
Page 31 and 32: [ -z "$MAILTO" ] && MAILTO="root" i
Page 33 and 34: Inode : 111362 , 111363 MD5 : UM0er
Page 35 and 36: # The name of the audit log file Se
Page 37 and 38: Handler: cgi-script ---------------
Page 39 and 40: %description devel The php-devel pa
Page 41 and 42: 6.4.4 Web interface Turck MMCache c
Page 43 and 44: log_errors = On ; Store the last er
Page 45 and 46: localityName = Locality Name (eg, c
Page 47 and 48: 6.7 The web server Secure your web
Page 49 and 50: 7 Setup eGroupWare 7.1 Creating you
Page 51 and 52: 7.4 Creating your header.inc.php Mo
Page 53 and 54:
Click Re-Check My Installation: If
Page 55 and 56:
� Enter the hostname of your serv
Page 57 and 58:
7.5.4 Step 4 - Manage Languages The
Page 59 and 60:
9.5 Cannot get past the Check Insta
Page 61 and 62:
10 Software Map AIDE, Advanced Intr
Page 63 and 64:
php project Platform Linux / BSD /
Page 65 and 66:
* Sun Nov 22 2003 Reiner Jung 0.3
Page 67:
13 Humanly-Readable License Attribu
show all

How to install and secure egroupware - Directory UMM

Create successful ePaper yourself

Delete template?

Save as template?