| View previous topic :: View next topic |
| Author |
Message |
hughstolmer n00b

Joined: 26 Apr 2012 Posts: 0
|
Posted: Thu Apr 26, 2012 2:23 pm Post subject: Server Status |
|
|
Hello and thanks for the forum,
Last week, I was asked to take over several servers to maintain and the past administrator is unavaliable. I have the passwords, but no real roadmap of what server does what, which programs are running on each, how I can connect for remote management (I assume SSH?). From what I understand, one is a web hosting, one is mail, one is domain controller.
My experience is mostly Linux desktop environments, not servers, so I am a newbie.
What is the best approach to determining what programs (and versions) are running, and how I can get remote access to the CLI.
Then I can read up on each program and start figuring out how to fix and add things I need.
Thanks a bunch in advance,
Hugh |
|
| Back to top |
|
 |
John R. Graham Administrator


Joined: 08 Mar 2005 Posts: 6602 Location: Somewhere over Atlanta, Georgia
|
Posted: Thu Apr 26, 2012 3:22 pm Post subject: |
|
|
Hugh,
Can you let me know if these servers are running Gentoo? If not, what OS are they running?
- John _________________ This space intentionally left blank. |
|
| Back to top |
|
 |
hughstolmer n00b

Joined: 26 Apr 2012 Posts: 0
|
Posted: Thu Apr 26, 2012 4:19 pm Post subject: |
|
|
Hi John,
Yes, it looks like they are all running Gentoo, all about ver 2.6.xx.
Thanks,
Hugh |
|
| Back to top |
|
 |
disi Veteran


Joined: 28 Nov 2003 Posts: 1351 Location: Out There ...
|
Posted: Thu Apr 26, 2012 4:28 pm Post subject: |
|
|
A quick scan with nmap should tell you what ports they are listening on. Then figure out which port is what service.
Sounds all a little dodgy, though.
I also assume you could gain physical access to the servers and they should have a console attached to them? _________________ Gentoo on Uptime Project - Larry is a cow |
|
| Back to top |
|
 |
nomilieu n00b


Joined: 22 Nov 2011 Posts: 24
|
Posted: Thu Apr 26, 2012 5:32 pm Post subject: |
|
|
Yeah, I'd hit them with nmap -A. That should, generally, tell you what services are running (including whether or not ssh is open for you to login remotely) and possibly what programs/versions are running said services.
A warning, if the guy who set them up is doing anything weird (like forwarding a port*), the nmap scan could be misleading in places.
In any case, be thankful that you were left with Gentoo machines instead of something crappier.
*I do this occasionally. |
|
| Back to top |
|
 |
John R. Graham Administrator


Joined: 08 Mar 2005 Posts: 6602 Location: Somewhere over Atlanta, Georgia
|
Posted: Thu Apr 26, 2012 6:22 pm Post subject: |
|
|
Hugh,
Just to see how out of date these servers are, log onto one and report the output of the following commands: | Code: | cat /usr/portage/metadata/timestamp.chk
tail /var/log/emerge.log | The first line will tell us how long ago the package manager database was updated; the second, how long ago the last package update was performed.
- John _________________ This space intentionally left blank. |
|
| Back to top |
|
 |
hughstolmer n00b

Joined: 26 Apr 2012 Posts: 0
|
Posted: Thu Apr 26, 2012 10:23 pm Post subject: |
|
|
Thanks for the input,
It is sort of a strange situation, but I do have physical access to the servers and can run console commands.
John, I ran the commands you suggested and the last portage metadata timestamp was Tue, 24 Apr
The Emerge says already current.
From the console, I created a user, edited the passwd file and sshd file and was able to access one server remotely with SSH through Putty.
So I'm getting there.
I will try and run nmap when I get a chance. I'm only working here 2, 1/2 days a week so the remote access is helpful. What I want to do is to make a list of all programs on each server and how to access each, then the common commands and care needed.
They want me to figure out how to change all the passwords since the last guy knows them.
Can't people just get along?
Anyway, thanks for the help. I have a friend that is better than I at Linux servers, so if I drop off this thread, it might be because I got some help from him.
But any suggestions I would appreciate anytime!
Thanks,
Hugh |
|
| Back to top |
|
 |
danomac l33t


Joined: 06 Nov 2004 Posts: 810 Location: Vancouver, BC
|
Posted: Thu Apr 26, 2012 10:39 pm Post subject: |
|
|
Yikes, in the case of resetting passwords...
You need to get a list of users first:
| Code: |
$ cat /etc/passwd | cut -d":" -f1,3
|
will list users on the system and their user ID.
Generally speaking users that have been added start with a user ID of 1000 and increment, but that behaviour can be overridden. You should check first to see how many user accounts have been added. The root password should be changed as well.
The system itself creates users for services and such and you'll have to differentiate between them. Changing the passwords of them could possibly break existing services so be careful when resetting passwords.
Edit: if you have console access you can use netstat to figure out what ports are listening/open and what process they're bound to:
|
|
| Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
|