jueves, 27 de diciembre de 2018

Cambiar/Agregar Semaforos

Para cambiar/ agregar semaforos en el sistema operativo, realizar :

Chequear los parametros actuales
~]# ipcs -sl

------ Semaphore Limits --------
max number of arrays = 128
max semaphores per array = 250
max semaphores system wide = 32000
max ops per semop call = 32

semaphore max value = 32767

ipcs -s | wc -l

129

Con esto, cambio los valores 
echo kernel.sem = 250 64000 32 256 >>/etc/sysctl.conf

Con esto relee el archivo systctl.conf
sysctl -p 

Chequeo que haya tomado efecto los cambios
# ipcs -sl

------ Semaphore Limits --------
max number of arrays = 256
max semaphores per array = 250
max semaphores system wide = 64000
max ops per semop call = 32
semaphore max value = 32767

# sysctl kernel.sem
kernel.sem = 250        64000   32      256
[root@webmail-03 ~]#

# grep sem /etc/sysctl.conf
kernel.sem = 250 64000 32 256




Instalar Centrify

Para instalar Centrify por primera vez, Si esta instalado el Access Control previamente, primero desisntalar el AC

# /opt/CA/eTrustAccessControl/lbin/uninstall_AC
Trying to unload CA ControlMinder...
CA ControlMinder is successfully unloaded.

UnInstalling CA ControlMinder from /opt/CA/eTrustAccessControl

The uninstall utility is about to remove the entire
CA ControlMinder directory: /opt/CA/eTrustAccessControl
If you wish to keep certain files for future use or
reference, do NOT continue.

Continue with uninstall now? [Y/n]:   y
Removing CA ControlMinder service from /etc/services
Removing CA ControlMinder system call loader.
Trying to remove references to CA ControlMinder from the system init files.
Removing CA ControlMinder PAM module from your system.
Restoring /etc/pam.d/login by removing last changes made to file
Removing CA ControlMinder Admin tools binaries and directories.
Removing CA ControlMinder Admin tools X-resource files.
The CA ControlMinder Admin tools files have now
been removed from your system.
Removing seos.ini from /etc
The token global.AC_Version, now set to 'none', (was '12.81.0.19')
Removing ControlMinder from AccessControl Shared dependency list
Removing AccessControl Shared
Removing CAPKI.
Removing CA ControlMinder binaries and directories.

UnInstall complete.

The CA ControlMinder files have now been removed.

Warning: If you have replaced /bin/passwd with sepass,
         You must restore the original /bin/passwd.

         You may edit your /etc/passwd and /etc/group
         files, in order to remove unnecessary users.

#

Una vez desinstalado el AC,  borrar el archivo  /lib/security y crearlo como un directorio
mkdir /lib/security

Ahora si, instalo el Centrify

yum localinstall CentrifyDC-openssl-5.5.0-rhel5.x86_64.rpm  CentrifyDC-openldap-5.5.0-rhel5.x86_64.rpm CentrifyDC-curl-5.5.0-rhel5.x86_64.rpm \
CentrifyDC-5.5.0-rhel5.x86_64.rpm  CentrifyDC-nis-5.5.0-rhel5.x86_64.rpm CentrifyDA-3.5.0-rhel5.x86_64.rpm -y

Si necesito Desinstalar el Centrify, el orden es el siguiente:
rpm -e CentrifyDA-3.5.0-155.x86_64
rpm -e CentrifyDC-nis-5.5.0-200.x86_64
rpm -e CentrifyDC-5.5.0-200.x86_64
rpm -e CentrifyDC-curl-5.5.0-200.x86_64
rpm -e CentrifyDC-openldap-5.5.0-200.x86_64
rpm -e CentrifyDC-openssl-5.5.0-200.x86_64