HowtoForge provides user-friendly Linux tutorials.
-
How To Set Up Apache2 With mod_fcgid And PHP5 On Debian Etch
Author: Falko Timme •
Tags: apache, php, debian •
Comments: 0 How To Set Up Apache2 With mod_fcgid And PHP5 On Debian Etch This tutorial describes how you can install Apache2 with mod_fcgid and PHP5 on Debian Etch. mod_fcgid is a compatible alternative to the older mod_fastcgi. It lets you execute PHP scripts with the permissions of their owners instead of the Apache user.
-
Installing Ubuntu 8.10 On Your USB Flash Drive
Author: Falko Timme •
Tags: desktop, ubuntu •
Comments: 15 Installing Ubuntu 8.10 On Your USB Flash Drive This guide shows how you can install Ubuntu 8.10 on a USB flash drive. Ubuntu 8.10 comes with a tool that lets you create a USB startup disk easily - this startup disk behaves like the Ubuntu 8.10 Live-CD. This is useful if you want to install Ubuntu on a computer that has no CD/DVD drive. When you create the USB startup disk, you can also specify that you want your USB system to be persistent between boots (i.e., it does not lose your settings, documents, etc.) - that way you get a fully usable OS that you can carry around in your pocket.
-
Prevent Phishing with Mutual Authentication
Author: nowen • Tags: antivirus, security • Comments: 1Prevent Phishing with Mutual Authentication Phishing is a man-in-the-middle attack. While many people think using time-bound, one-time passwords will solve the problem, they are wrong as attacks will just become automated. What is required is strong mutual authentication - authentication of the host to the user as well as the user to the host. This article demonstrates how to do that using open-source software from WiKID.
-
-
How to secure WebDAV with SSL and Two-Factor Authentication
Author: nowen • Tags: apache, security • Comments: 1How to secure WebDAV with SSL and Two-Factor Authentication This how-to documents how to configure a WebDAV resource using SSL and two-factor authentication and how to access that resource from Windows, Linux and Mac.
-
How to secure an SSL VPN with one-time passcodes and mutual authentication
Author: nowen • Tags: security • Comments: 0How to secure an SSL VPN with one-time passcodes and mutual authentication SSL-based VPNs were designed to eliminate the need for complex configurations on the user's PC. Unfortunately, that was before the dangers of public WiFi networks and tougher regulatory requirements came into being. Thanks to WiFi, many attacks that were difficult are now quite simple. In particular, a man-in-the-middle attack can intercept SSL-encrypted traffic, rendering SSL-based VPNs useless - even if it's protected by a typical one-time password system. The man-in-the-middle can easily feed the one-time password into the SSL-based VPN within the alloted time.
-
Configuring SSH To Use Freeradius And WiKID For Two-Factor Authentication
Author: nowen • Tags: security • Comments: 2Configuring SSH To Use Freeradius And WiKID For Two-Factor Authentication Radius is a great standard. It is powerful enough to accomplish a great deal and simple enough to be easy to handle. Freeradius is an excellent, open source radius server that ships with many Linux variants. It is well documented and well supported. The WiKID Strong Authentication server is a commercial/open source two-factor authentication system that uses public key encryption to transmit PINs and one-time passcodes securely to software tokens running on Blackberries, cell phones, Palms, PocketPCs or, using the J2SE client, Linux, Macs and Windows PCs. You can think of WiKID like certificates, but without the hassles of white lists/black lists and more secure - because the PIN is validated on the server preventing offline brute-force attacks.
-
How to configure Squid for two-factor authentication from WiKID
Author: nowen • Tags: apache, linux, security • Comments: 0How to configure Squid for two-factor authentication from WiKID In this guide we will show how Squid can be configured to support two-factor authentication from a WiKID server, allowing users to be centrally authenticated, but their requests still distributed for efficiency.
-
How to configure OpenVPN to use WiKID Strong Authentication
Author: nowen • Tags: security • Comments: 0How to configure OpenVPN to use WiKID Strong Authentication The WiKID Strong Authentication System is a commercial/open source two-factor authentication solution. This guide demonstrates how to OpenVPN and SSH to use one-time passwords from WiKID. While both solutions support private key authentication, that may not be sufficient for your requirements; you may need one-time passwords for webmail or extranet access; or centralized authentication management and logging.
-
Virtual Users And Domains With Postfix, Courier, MySQL And SquirrelMail (Fedora 10)
Author: Falko Timme •
Tags: antivirus, fedora, postfix •
Comments: 6 Virtual Users And Domains With Postfix, Courier, MySQL And SquirrelMail (Fedora 10) This document describes how to install a mail server based on Postfix that is based on virtual users and domains, i.e. users and domains that are in a MySQL database. I'll also demonstrate the installation and configuration of Courier (Courier-POP3, Courier-IMAP), so that Courier can authenticate against the same MySQL database Postfix uses. The resulting Postfix server is capable of SMTP-AUTH and TLS and quota (quota is not built into Postfix by default, I'll show how to patch your Postfix appropriately). Passwords are stored in encrypted form in the database (most documents I found were dealing with plain text passwords which is a security risk). In addition to that, this tutorial covers the installation of Amavisd, SpamAssassin and ClamAV so that emails will be scanned for spam and viruses. I will also show how to install SquirrelMail as a webmail interface so that users can read and send emails and change their passwords.
-
Installing Lotus Symphony On Ubuntu 8.10
Author: Falko Timme •
Tags: desktop, ubuntu •
Comments: 1 Installing Lotus Symphony On Ubuntu 8.10 This guide explains how to install Lotus Symphony on Ubuntu 8.10. Lotus Symphony is an office suite (free of charge) for creating text and spreadsheet documents as well as presentations. The core office suite code was initially based on OpenOffice.org 1.1.4 and has been developed further by IBM.
