|
Size: 4364
Comment: replace leftover French variable with English one.
|
Size: 4798
Comment: add a new SSH key type and fail2ban and lvm impacts
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 56: | Line 56: |
| Adjust {{{/etc/ssh/ssh_host_rsa_key.pub}}}, {{{/etc/ssh/ssh_host_dsa_key.pub}}} and {{{/etc/ssh/ssh_host_ecdsa_key.pub}}} ({{{root@hostname at the end}}}). You need to restart the service. | Adjust {{{/etc/ssh/ssh_host_rsa_key.pub}}}, {{{/etc/ssh/ssh_host_dsa_key.pub}}}, {{{/etc/ssh/ssh_host_ed25519_key.pub}}} and {{{/etc/ssh/ssh_host_ecdsa_key.pub}}} ({{{root@hostname at the end}}}). You need to restart the service. |
| Line 72: | Line 72: |
=== fail2ban === fail2ban scan logs to detect connexion failures and can ban IP on too many failures. The hostname may be in the {{{sender}}} mail address in {{{/etc/fail2ban/jail.local}}}. You need to reload the service. === lvm === Logical Volume Manager (LVM) is a device mapper target that provides logical volume management. Hostname appears in the backup configuration file {{{/etc/lvm/backup/<your Volume Group>}}}. |
|
| Line 125: | Line 135: |
| Take care you'd better do a grep before... |
Translation(s): English - Italiano
Rename a computer
This page explains how to change a system's hostname (i.e. rename a computer/server)
Executive summary: hostname(1) isn't enough.
Contents
Core networking
Update /etc/hostname
Update /etc/hosts, so local address(es) resolves with the new system name.
- Reload the network configuration. You have two options:
- Reload configuration files
This will temporarily disconnect your system from the network (ssh usually resists short disconnection)
This might definitively disconnect your system from the network because networking might not restore connections; please reboot, which is not lazy, but ensures that your setup is really correct invoke-rc.d hostname.sh start invoke-rc.d networking force-reload invoke-rc.d network-manager force-reload
ToDo: is it useful to reload network-manager?
or the lazy way: Restart the system.
- Reload configuration files
Application specific
avahi
Avahi is used to publish (announce) local services. If you tweaked /etc/avahi/* you should run:
invoke-rc.d avahi-daemon force-reload
CUPS
CUPS is the Common Unix Printing System.
Adjust the /etc/printcap file.
You'll want to change the old hostname in any lines like this, hostname in bold: Kyocera_TASKalfa_3050ci|Kyocera TASKalfa 3050ci:rm=debian:rp=Kyocera_TASKalfa_3050ci: You'll need to restart the service for changes to take effect.
ejabberd
Refer to the Change Computer Hostname section of the ejabberd Installation and Operation Guide.
Exim
Reconfigure Exim (this adjusts /etc/exim4/update-exim4.conf.conf and /etc/mailname):
dpkg-reconfigure exim4-config
Or adjust manually /etc/exim4/update-exim4.conf.conf (hostname=). You need to restart the service.
Mailname
Reconfigure Exim (see above) or adjust manually /etc/mailname. You don't need to restart the service.
Message Of The Day
Adjust /etc/motd. You don't need to restart a service.
OpenSSH server
Adjust /etc/ssh/ssh_host_rsa_key.pub, /etc/ssh/ssh_host_dsa_key.pub, /etc/ssh/ssh_host_ed25519_key.pub and /etc/ssh/ssh_host_ecdsa_key.pub (root@hostname at the end). You need to restart the service.
Self-signed SSL certificate
Recreate the self-signed certificate created by the ssl-cert package using the hostname currently configured on your computer.
make-ssl-cert generate-default-snakeoil --force-overwrite
You need to restart the services using it, e.g. apache2.
ssmtp
Ssmtp is a light weight, send-only SMTP server.
Adjust /etc/ssmtp/ssmtp.conf (hostname=, etc.). You don't need to restart the service.
sysklogd
In order to make new hostname appear on syslog you should restart sysklogd service
fail2ban
fail2ban scan logs to detect connexion failures and can ban IP on too many failures.
The hostname may be in the sender mail address in /etc/fail2ban/jail.local. You need to reload the service.
lvm
Logical Volume Manager (LVM) is a device mapper target that provides logical volume management.
Hostname appears in the backup configuration file /etc/lvm/backup/<your Volume Group>.
Idea of script to help you on
Intrusive script
Please understand that this script is dangerous. You should check if all the files listed by grep -rl "$old" /etc must really be modified before launching this script:
Take care you'd better do a grep before...
Not-so intrusive script
#!/bin/bash
#
usage() {
echo "usage : $0 <new hostname>"
exit 1
}
[ "$1" ] || usage
old=$(hostname)
new=$1
for file in \
/etc/exim4/update-exim4.conf.conf \
/etc/printcap \
/etc/hostname \
/etc/hosts \
/etc/ssh/ssh_host_rsa_key.pub \
/etc/ssh/ssh_host_dsa_key.pub \
/etc/motd \
/etc/ssmtp/ssmtp.conf
do
[ -f $file ] && sed -i.old -e "s:$old:$new:g" $file
done
