HOW TO INSTALL ASTERISK On Debian 8.1
HOW TO INSTALL ASTERISK On Debian 8.1
html
/etc/postfix/main.cf
/*
relayhost = [smtp.gmail.com]:587
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options = noanonymous
smtp_tls_CAfile = /etc/postfix/cacert.pem
smtp_use_tls = yes
/*
SAVE + EXIT
Vim /etc/postfix/sasl_passwd
/*
[smtp.gmail.com]:587 [email protected]:YOURPASSWORD
*/
For Permission
chmod 400 /etc/postfix/sasl_passwd
postmap /etc/postfix/sasl_passwd
cat /etc/ssl/certs/Thawte_Premium_Server_CA.pem | sudo tee -a /etc/postfix/cacert.pem
/etc/init.d/postfix reload
sed -i 's/PermitRootLogin without-password/PermitRootLogin
yes/' /etc/sshd/sshd_config
service sshd restart
reboot
5. Install iksemel
cd /usr/src
wget https://iksemel.googlecode.com/files/iksemel-1.4.tar.gz
tar xf iksemel-1.4.tar.gz
cd iksemel-*
./configure
make
make install
ldconfig
wget http://downloads.asterisk.org/pub/telephony/libpri/libpri-1.4-
current.tar.gz
wget http://downloads.asterisk.org/pub/telephony/asterisk/asterisk-13-
current.tar.gz
wget -O jansson.tar.gz
https://github.com/akheron/jansson/archive/v2.7.tar.gz
wget http://www.pjsip.org/release/2.4/pjproject-2.4.tar.bz2
cd /usr/src
rm -f pjproject-2.4.tar.bz2
cd pjproject-2.4
make dep
make
make install
https://amatijasec.wordpress.com/2015/07/17/otrs-help-desk-4-0-10-how-to-
install-on-debian-8-1-part-12/
reboot
#chmod +xManageEngine_ServiceDesk_Plus_x_Linux.bin
./ManageEngine_ServiceDesk_Plus.bin –console
Touch servicedesk.txt
Chmod +x servicedesk.txt
Cp /etc/init.d/servicedesk
Vim servicedesk
#!/bin/bash
#
# Startup script for the pmagent
#
# chkconfig: 345 99 02
# description: Run the ServiceDesk-Plus program
INITLOG_ARGS=""
prog="servicedesk"
progname="AdventNet ManageEngine ServiceDesk-Plus"
RETVAL=0
# Edit the following to indicate the 'bin' directory for your installation
MDIR=/home/guest/servicedesk/AdventNet/ME/ServiceDesk/bin
if [ ! -d "$MDIR" ]
then
echo "Invalid directory $MDIR"
exit 1
fi
start()
{
mv -f /var/log/servicedesk-plus.log /var/log/servicedesk-plus1.log
echo "Starting $progname"
cd $MDIR
nohup sh run.sh >/var/log/servicedesk-plus.log 2>&1 &
RETVAL=$?
echo
[ $RETVAL = 0 ] && touch /var/lock/subsys/servicedesk
}
stop()
{
echo "Stopping $progname"
cd $MDIR
sh shutdown.sh -S >>/var/log/servicedesk-plus.log 2>&1
}
case "$1" in
start)
start
;;
stop)
stop
;;
*)
echo "Usage: $prog {start|stop}"
exit 1
;;
esac
exit $RETVAL
cd /root/ManageEngine/ServiceDesk/bin
./run.sh
2. Service stop
/etc/init.d/samba stop
/etc/init.d/winbind stop
/etc/init.d/ntp stop
3. Configure Kerberos
Vim /etc/krb5.conf
/*
[libdefaults]
default_realm = REDIRECTOR.NAME
# The following krb5.conf variables are only for MIT Kerberos.
krb4_config = /etc/krb.conf
krb4_realms = /etc/krb.realms
kdc_timesync = 1
ccache_type = 4
forwardable = true
proxiable = true
# The following encryption type specification will be used by MIT Kerberos
# if uncommented. In general, the defaults in the MIT Kerberos code are
# correct and overriding these specifications only serves to disable new
# encryption types as they are added, creating interoperability problems.
#
# Thie only time when you might need to uncomment these lines and change
# the enctypes is if you have local software that will break on ticket
# caches containing ticket encryption types it doesn't know about (such as
# old versions of Sun Java).
# default_tgs_enctypes = des3-hmac-sha1
# default_tkt_enctypes = des3-hmac-sha1
# permitted_enctypes = des3-hmac-sha1
# The following libdefaults parameters are only for Heimdal Kerberos.
v4_instance_resolve = false
v4_name_convert = {
host = {
rcmd = host
ftp = ftp
}
plain = {
something = something-else
}
}
fcc-mit-ticketflags = true
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
REDIRECTOR.NAME = {
kdc = 192.168.11.100:88
admin_server = 192.168.11.100
}
[domain_realm]
.redirector.name = REDIRECTOR.NAME
redirector.name = REDIRECTOR.NAME
[login]
krb4_convert = true
krb4_get_tickets = false
*/
4. Configure NTP
ntpdate 192.168.11.100
/etc/init.d/ntp stop
/etc/ntp.conf
/*
# Our primary DC
server 192.168.11.100
/*
/etc/init.d/ntp start
Vim /etc/resolv.conf
/*
nameserver 192.168.11.100
*/
6. Configure Winbind
Vim /etc/samba/smb.conf
/*
# Global parameters
[global]
workgroup = REDIRECTOR
realm = REDIRECTOR.NAME
server string = %h server (Samba %v)
load printers = no
security = ads
local master = no
domain master = no
preferred master = no
wins server = 192.168.11.100
dns proxy = no
winbind uid = 10000-20000
winbind gid = 10000-20000
winbind use default domain = yes
interfaces = eth0 lo
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
panic action = /usr/share/samba/panic-action %d
invalid users = root
template homedir = /home/%D/%U
template shell = /bin/bash
winbind offline logon = yes
winbind refresh tickets = yes
*/
7. Configure Nsswitch
Vim /etc/nsswitch.conf
/*
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.
passwd: compat winbind
group: compat winbind
shadow: compat
hosts: files dns wins
networks: files
protocols: db files
services: db files
ethers: db files
rpc: db files
netgroup: nis
*/
ldconfig
8. Join the Domain
/*
vim /etc/pam.d/common-account
# should contain the following
lines:
account sufficient pam_winbind.so
account required pam_unix.so
1 vim /etc/pam.d/common-auth
2 # should contain the following
3 lines:
4 auth sufficient
pam_unix.so
auth required
pam_winbind.so use_first_pass
1 vim /etc/pam.d/common-password
2 # should be similar to the one
3 shown below:
password required pam_unix.so
nullok obscure min=4 max=50 md5
1 vim /etc/pam.d/common-session
2 # file contains the following
3 line:
session required
pam_mkhomedir.so umask=0022
skel=/etc/skel
*/
/etc/init.d/samba stop
/etc/init.d/winbind stop
/etc/init.d/samba start
/etc/init.d/winbind start
11. Verify
wbinfo –u
wbinfo -g.
net ads status