Using freeradius for authentication

Here I am going to consider that the freeradius server is set up correctly, meaning that you can already authenticate your users with freeradius using radtest utility.

Read the rest of this entry »

XL2TP

Now, let’s get on the next phase: XL2TP.

Packages Requirements

You can install xl2tp with the following command:

# apt-get install xl2tp

Read the rest of this entry »

Even though I pretty like OpenVPN, there is still some devices that might not support the TUN/TAP driver needed by OpenVPN.

Take IPhones, Android phones for instance, you need to root them in order to get that feature, assuming somebody has already cooked a ROM for your device.

L2TP is quite and old standard that allow setting up VPNs.

On the other end, it does not provide any kind of encryption mechanism, and as such, it is pretty common to get L2TP running over an IPSec link.

Read the rest of this entry »

If like me you use MPD as a service daemon to listen to music, you might be annoyed anytime GDM start a pulseaudio process which prevents MPD from accessing the sound device.

Typically, the output of ps will produce the following output:

$ ps aux | grep pulse
gdm 1371 0.0 0.4 98180 4776 ? S<sl Jun13 0:00 /usr/bin/pulseaudio –start –log-target=syslog
gdm 1411 0.0 0.2 10748 2968 ? S Jun13 0:00 /usr/lib/pulseaudio/pulse/gconf-helper

Read the rest of this entry »

When working in a chrooted environment, there is a few special file systems that needs to be mounted so all programs behave properly.

For instance, grub will need to access your disk devices….

While most special file systems might be mounted with:

# mount fstype -t fstype /tmp/chroot/mountpoint

Where fstype will be sysfs, proc, /dev is not following this rule.

Read the rest of this entry »

When you hotplug a hard drive in a virtual machine, the drive do not show in fdisk -l output until you reboot your VM.
In order to get the drive to appear, the SCSI bus need to be rescanned.

Read the rest of this entry »

3. Creating users

Here we will be using sha1 password. To create a password, you can use the following command:

# echo -n ‘password’ | sha1sum
5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 -

Read the rest of this entry »

this tutorial will explain how to use a MySQL backend in order to authentication users against your Apache website.

To achieve this we will use Apache2 and its auth_mysql module.

Read the rest of this entry »

3. Setting BGP

As told earlier on, vyatta-bgp1 will advertise AS 1 with network 1.1.1.0/24 to its neighbor vyatta-bgp2 handling AS 2
and
vyatta-bgp2 will advertise AS 2 with network 2.2.2.0/24 to its neighbor vyatta-bgp1 handling AS 1

They will use a common password for this communication, which is BGPtutorial.

Read the rest of this entry »

2. Setting the network interfaces

During this part, we are going to set up the 2 Border Gateway routers’network interfaces. In vyatta world, you need to enter the interactive configuration shell by typing:

Read the rest of this entry »