Useful Commands

expand-template /etc/httpd/conf/httpd.conf
sv h /service/httpd-e-smith

/sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf
/usr/bin/sv h /service/httpd-e-smith

/etc/init.d/httpd-e-smith restart

sv t /service/httpd-e-smith

db accounts setprop IBAYNAME AllowOverride All
signal-event ibay-modify IBAYNAME

db accounts delprop IBAYNAME AllowOverride
signal-event ibay-modify IBAYNAME

db accounts setprop IBAYNAME FollowSymLinks enabled
signal-event ibay-modify IBAYNAME

db accounts delprop IBAYNAME FollowSymLinks
signal-event ibay-modify IBAYNAME

db accounts setprop IBAYNAME Indexes disabled
signal-event ibay-modify IBAYNAME

db accounts delprop IBAYNAME Indexes
signal-event ibay-modify IBAYNAME

db accounts setprop IBAYNAME PHPBaseDir /home/e-smith/files/ibays/IBAYNAME/:/tmp/
signal-event ibay-modify IBAYNAME

mkdir -p /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf

<Directory /home/e-smith/files/ibays/IBAYNAME/html>
php_admin_flag allow_url_fopen on
</Directory>

expand-template /etc/httpd/conf/httpd.conf

/etc/init.d/httpd-e-smith restart

http://wiki.contribs.org/DB_Variables_Configuration#Php

db configuration setprop php AllowUrlFopen On
expand-template /etc/php.ini
/etc/init.d/httpd-e-smith restart

$_SERVER['DOCUMENT_ROOT']

/home/e-smith/files/ibays/Primary/html

db accounts setprop ibayname variable value
signal-event ibay-modify ibayname

AllowUrlfOpen : enabled/disabled
MemoryLimit : set a M as unit, eg 64M
UpMaxFileSize : set a M as unit, eg 64M
PostMaxSize : set a M as unit, eg 64M
MaxExecTime: unlimited or set time in second without units, eg 60

mkdir -p /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/VirtualHosts

cd /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/VirtualHosts

nano 60redir-ibayname1

{
if ($port ne "443")
{
$OUT .= <<'HERE';
## Redirect Web Address to Secure Address
RewriteEngine on
RewriteRule ^/ibayname https://%{HTTP_HOST}/ibayname

## End Of Redirect
HERE
}
}

/sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf

/etc/init.d/httpd restart

/bin/mount -t cifs "//$host/$share" $mountdir -o credentials=/etc/dar/CIFScredentials,nounix
/bin/mountpoint

/bin/mount -t cifs  "//192.168.xx.xx/backup-sme" /mnt/smb -o credentials=/etc/dar/CIFScredentials,nounix
/bin/mountpoint /mnt/smb/

config setprop modSSL CommonName www.domain.com
expand-template /home/e-smith/ssl.crt/crt
expand-template /home/e-smith/ssl.key/key
signal-event domain-modify
signal-event email-update 

cp /etc/e-smith/templates/home/e-smith/ssl.crt /etc/e-smith/templates-custom/home/e-smith/ssl.crt
nano -w /etc/e-smith/templates-custom/home/e-smith/ssl.crt

ctrl o
ctrl x

rm /home/e-smith/ssl.crt/servername.domain.com.crt
rm /home/e-smith/ssl.key/servername.domain.com.key
rm /home/e-smith/ssl.pem/servername.domain.com.pem
signal-event post-upgrade
signal-event reboot

rm /home/e-smith/ssl.{crt,key,pem}/*
config delprop modSSL CommonName
config delprop modSSL crt
config delprop modSSL key
signal-event post-upgrade
signal-event reboot

cd /
du --si --max-depth 1
cd /home
du --si --max-depth 1
cd /home/e-smith
du --si --max-depth 1

groupadd -g 102 -o apache
rpm --setugids --setperms rpm1 rpm2

groupmod -g 102 apache

# perl -Mesmith::ethernet -e "print esmith::ethernet::probeAdapters();"
EthernetDriver1	e1000	08:00:27:23:85:a6	"Intel Corporation 82540EM Gigabit Ethernet Controller (rev 02)"

find /home/e-smith -type f -size +200M -exec ls -lh {} \; | awk '{ print $ ":_" $5 }';

‘k’    for Kilobytes (units of 1024 bytes)
‘M’    for Megabytes (units of 1048576 bytes)
‘G’    for Gigabytes (units of 1073741824 bytes)

find . -name "*.txt" -type f -exec sed -i "s/chaine1/chaine2/g" {} \;

e2fsck -D -tt -y /dev/main/root

for f in $(rpm -qa); do echo $f; rpm --setugids $f; done
for f in $(rpm -qa); do echo $f; rpm --setperms $f; done

cd /home/e-smith/db/
mv yum_repositories yum_repositories.po
/etc/e-smith/events/actions/initialize-default-databases

signal-event yum-modify

yum update

ldapsearch -x -h localhost -s base |grep 'dn'

grep -iE "uninitialized|WARNING|ERROR" /var/log/messages

grep -iE "uninitialized|WARNING|ERROR" /var/log/*

grep -i 'blocked email address' /var/log/qpsmtpd/current

db configuration setprop spamassassin MessageRetentionTime 15
signal-event email-update
svc -t /service/qpsmtpd

yum install --enablerepo=smecontribs smeserver-mailstats

db spamassassin setprop wbl.global *@vonage.com White
db spamassassin setprop wbl.global *domain2.com White
db spamassassin setprop wbl.global user@domain3.com White
db spamassassin setprop wbl.global spammer@spamdomain.com Black

expand-template /etc/mail/spamassassin/local.cf
svc -t /service/spamd

db spamassassin show

PWD=$(cat /etc/ldap.secret)

PWD=$(cat /etc/pam_ldap.secret)

mysql
create database databasename;
grant all privileges on databasename.* to username identified by 'password';
flush privileges;
exit

drop database databasename;

USE mysql;
DELETE FROM user WHERE user = 'username';
FLUSH PRIVILEGES;

mysqlshow

+--------------------+
|     Databases      |
+--------------------+
| information_schema |
| egroupware         |
| horde              |
| mysql              |
| roundcube          |
| test               |
| wordpress          |
+--------------------+

show databases;

SELECT user FROM mysql.user;

DROP USER 'jeffrey'@'localhost';

SHOW GRANTS FOR 'user'@'localhost';

GRANT ALL PRIVILEGES ON *.* TO 'new_dba'@'localhost' IDENTIFIED BY 'password' WITH GRANT OPTION;
FLUSH PRIVILEGES;

GRANT SELECT, UPDATE, INSERT, DELETE ON database.* TO 'new_user'@'localhost' IDENTIFIED BY 'password';
FLUSH PRIVILEGES;

mysqladmin drop databasename;

config setprop passwordstrength Admin normal
config setprop passwordstrength Users normal
config setprop passwordstrength Ibays normal


none   : no check is performed on the password
normal : the password must be composed of at least seven characters with uppercase and lowercase letters, numbers and non-alphanumeric characters
strong : the restrictions are the same as for the normal level, but in addition, the password is verified by cryptlib which ensures its actual complexity

perl -e "use esmith::util;esmith::util::setUserPassword( 'username', 'password');";  /sbin/e-smith/signal-event  password-modify username

username

password

perl -e 'use esmith::util;esmith::util::setUserPassword("username","pass!word");'

perl -e "use esmith::util;esmith::util::setUserPassword( 'username','pass"'!'"word');"

signal-event console-save

config show php

expand-template /etc/php.ini

db accounts setprop IBAYNAME PHPBaseDir DIR1:DIR2:DIRn
signal-event ibay-modify IBAYNAME

db accounts setprop Primary PHPBaseDir /home/e-smith/files/ibays/Primary:/tmp
signal-event ibay-modify Primary

db configuration setprop php MaxExecutionTime ZZ
expand-template /etc/php.ini
/etc/init.d/httpd-e-smith restart

db configuration setprop php MemoryLimit XXM
expand-template /etc/php.ini
/etc/init.d/httpd-e-smith restart

db configuration setprop php UploadMaxFilesize WW
expand-template /etc/php.ini
/etc/init.d/httpd-e-smith restart

db configuration setprop php PostMaxSize  WW
expand-template /etc/php.ini
/etc/init.d/httpd-e-smith restart

signal-event dns-update 	

sv d /service/squid
echo "" > /var/spool/squid/swap.state
sv u /service/squid

sv s /service/squid

config delprop <key> <prop>
/etc/e-smith/events/actions/initialize-default-databases

db accounts delprop <key> <prop>

db accounts setprop <key> <prop> ''

db accounts setprop user Shell /bin/bash
signal-event user-modify user

sv u /service/servicename

sv d /service/servicename

sv t /service/servicename

/etc/init.d/servicename start/stop/status
service servicename start/stop/status

sv t /service/httpd-e-smith

S90squid -> /etc/rc.d/init.d/e-smith-service

/etc/rc.d/init.d/squid start

config set myapplicationname service status enabled

cd /etc/rc.d/init.d
ln -s /path/to/myinitscript myapplicationname

cd /etc/rc7.d
ln -s  /etc/rc.d/init.d/e-smith-service SXXmyapplicationname

signal-event remoteaccess-update
service myapplicationname start

ln -f -s /etc/rc.d/init.d/e-smith-service /etc/rc7.d/S98popfile
/sbin/e-smith/db configuration set popfile service status enabled
/sbin/e-smith/signal-event remoteaccess-update
service popfile start

service popfile stop
sleep 3
rm -f /etc/rc7.d/S98popfile
rm -f /etc/rc.d/init.d/popfile
/sbin/e-smith/config delete popfile
/sbin/e-smith/signal-event remoteaccess-update

db configuration set <servicename> service

db configuration setprop <servicename> TCPPort <portnumber>
db configuration setprop <servicename> TCPPorts <portnumbers> # Ranges of ports are defined with a : not a -
db configuration setprop <servicename> UDPPort <portnumber>
db configuration setprop <servicename> UDPPorts <portnumbers> # Ranges of ports are defined with a : not a -
db configuration setprop <servicename> status enabled|disabled
db configuration setprop <servicename> access public|private
db configuration setprop <servicename> AllowHosts a.b.c.d,x.y.z.0/24
db configuration setprop <servicename> DenyHosts e.f.g.h,l.m.n.0/24

signal-event remoteaccess-update

db configuration setprop sshd status enabled
db configuration setprop sshd PermitRootLogin yes
db configuration setprop sshd acccess public
db configuration setprop sshd PasswordAuthentication yes
/sbin/e-smith/signal-event remoteaccess-update

db configuration sshd access public
signal-event remoteaccess-update

ssh root@ip-sme-or-remote-hostname

ssh -pX root@ip-sme-or-remote-host (X is the port listened by ssh service)

ssh -t root@ip-sme-or-remote-hostname command

ssh -t root@192.168.1.5 top

ssh -L 443:localhost:443 root@your-static-external-network-IP-or-host.dyndsn.org

https://localhost/server-manager

ssh -L 9443:localhost:443 root@your-remote-ip -p 22

9443 : local port
443 : remote https port
your-remote-ip : the remote host (could be an ip or a domain name)
22 : this is the port where the ssh server is listening, you can change it in accordance with the remote server

https://localhost:9443/server-manager

COMMAND NAME	DESCRIPTION
du -sh /*	shows your folder sizes by directory in the root (you can adapt to your directory path)
df -h	shows disk usage in human readable form
man <commandname>	shows more info about a command
uname -a	kernel release version
/usr/sbin/smbd -V	samba version
/usr/sbin/httpd -v	apache version
mysql -v	mysql version
php -v	php version
mv	moves or renames a file
cp	copies or backup a file
rm	removes or deletes a file
grep <process>	outputs processes running <process>
ps -AH	report process status
top	shows processes
top -i	shows only active processes
htop	shows processes (more versatile than top)
iptraf	shows network info
mc -d	show midnight commander (cli file browser) to navigate through system easily
host -t mx aol.com	shows the mx records for aol.com
net groupmap list	shows samba mappings to nt groups
telinit 1	changes to single user mode
ifconfig	shows detailed info on ethernet ports
grep -nsr "casesensitivesearch" /path/to/dir	finds all documents containing the criteria in a dir
grep -nsr server-manager.jpg /etc/e-smith/	search the file server-manager.jpg in the path directory /etc/e-smith
tail -f /var/log/<LOGFILE>	realtime viewing of your log file
hdparm -Tt /dev/mdx (where x is 0,1,2,etc)	shows software raid performance
mdadm --detail /dev/mdx (where x is 0,1,2,etc)	gives raid info
cat /proc/mdstat	shows software raid
tar -czvf foo.tar.gz foo	creates a tar/zip file of a directory
tar -xvzf foo.tar.gz	untar/unzip a tar/zip file
scp -P <ssh_portnumber> foo.tar.gz <user>@<other_server_ipaddress>:/opt	transfers file to another server in /opt directory
rsync --progress -te "ssh -p <ssh_portnumber>" foo <other_server_ipaddress>:/opt	transfers file to another server
sed -i -e "s/foo/fee/g" <FILENAMEORPATHTODIR>	replaces foo with fee
sed '/abba/Id' file.txt	remove all lines with the string 'abba' (case sensitive) in the file.txt
watch mysqladmin process	shows the mysql processes running
lslbk <ONLY SME9>	lsblk lists information about all available or the specified block devices. The lsblk command reads the sysfs filesystem to gather information. The command prints all block devices (except RAM disks) in a tree-like format by default.
find . -type f \| xargs rpm -qf \| sort \| uniq	find from which rpm these files come from

Command	Explanation
rpm -qa	shows all rpms installed
rpm -qa --last	shows all rpms installed & installation date
rpm -q	asks for rpm info
rpm -qi	asks for detailed rpm info
rpm -qlv <packagename>	lists all files in a package
rpm -qlvp <packagename.rpm>	List all files in a rpm which is not installed
rpm -qf <filename>	reports what package a file belongs to
rpm -qV <packagename>	reports if permission and ownership are OK
rpm -qRp <packagename.rpm>	Find what dependencies have a rpm
rpm -qR <packagename>	Find what dependencies have a package name
rpm -q --whatrequires <packagename>	find what packages have <packagename> as dependancy
rpm -e --test <packagename>	find what packages have <packagename> as dependancy (more verbose as above)
rpm --setugids <packagename>	set right ownership to rpm
rpm --setperms <packagename>	set right permissions to rpm
rpm -Va	capture any damaged/incomplete rpms - but will also show lots of configuration files, which you of course expect to be modified.

Command	Explanation
yum install <packagename>	installs packagename & any package it may need
yum remove <packagename>	removes packagename
yum list updates	list updates to any installed package
yum list available	list available packages in all repos not already installed
grep <reponame>	list available packages -shows only from repo name
yum search <packagename>	lists all packages in all repos matching packagename
yum clean all	Is used to clean up various things which accumulate in the yum cache
yum --enablerepo=<reponame> <command>	enables a repo not normally enabled
/sbin/e-smith/audittools/newrpms	shows all extra packages installed
/sbin/e-smith/audittools/repositories	show all repositories and if they are activated or not
db yum_repositories show <reponame>	show properties of the repository <reponame> (you may use TAB to auto-complete your command line)

Command	Explanation
signal-event post-upgrade	performs SME Server to go regenerate all templates
signal-event reboot	reboots the server
signal-event <event>	performs SME Server to go regenerate event template (you may use TAB to auto-complete your command line)
signal-event console-save	Expands templates and reconfigures services which can be changed from the text-mode console and which do not require a reboot
signal-event dns-update	refreshes the DNS cache, useful for when you know a domain has changed IP and the TTL is too long to wait
/etc/e-smith/events/actions/navigation-conf	recreates server-manager navigation panel
config show	display the internal configuration of the server
config show <service name>	show the service configuration (you may use TAB to auto-complete your command line)
db	shows the syntax of the db command
db configuration show	shows the entire server configuration
db configuration setprop <record> <property> <value>	sets or changes a property in the configuration database
db accounts show	shows all account details
db accounts show <accountname>	shows the account details
/etc/e-smith/events/actions/initialize-default-databases	action for initializing the default database values

	Tip:
	These settings modify only the behaviour of one ibay and not at all the whole php settings for the server. Only for sme9, see ~~bugzilla:8239~~

	Note:
	If you have problems with your yum setup you may have entered incorrect repository values. Remove the current values and restore the original setting with these commands

	Note:
	you have now a tool in your hand to parse logfile : Audit_Tools#logcheck. You should be aware that tool is here to help to find errors in the development side of the SME Server and thus you could have a lot of false positive

	Tip:
	mysql_setpermission is a command line menu driven utility that can assist in MySQL administration.

	Note:
	SME Server comes with the most used parameters set as variables in its internal configuration databases. These variables are used to store values to be used in the final configuration files. Please, read the SME_Server:Documentation:Developers_Manual:Section2 to understand the template and database process.

	Note:
	Use of 'config' is a shorthand version for 'db configuration' and therefore only works with the configuration database

	Warning:
	Database parameters are case sensitive so take great care when typing at the server shell because no error messages are given should you make a mistake.

	Note:
	We assume that ports are forwarded in your router to your sme internal IP (443 and 22) and the root user is allowed to access by ssh to the server.

	Tip:
	It is possible to use putty if you are afraid about some commands in a terminal, you can find a lot of examples by typing this in google tunneling by putty

Useful Commands

SME Server locale

Apache Related Commands

Apache options to ibay

Expand httpd.conf template

Restart httpd

Enable AllowOverride All/None

enable Symlinks in that iBay

disable apache directory indexes per ibay

PHPBaseDir per ibay

Allow PHP URL File Open per ibay

Allow PHP URL File Open

PHP document root

PHP settings only for SME9

https forced redirection using custom template

Backup

Debug the Mount a remote workstation Share

Certificates

How to change your certificate

How to set a different expiration time

How to simply recreate the certificate for SME Server

Command-Line Quick Reference Guide

Generic Linux

create missing group and set gid

display what are your network interfaces

find files by their size

Replace a chain of characters

Check file system in case of corruption

RPM's

Restore all permissions and ownership

YUM'ing and repositories

Restoring Default Yum Repositories

LDAP

Display LDAP parameters

Log

Parse Log to find errors

Mail

check blocked email address by the server

maximum email size

Spam filter with Server-Manager

spam retention in junk mailbox

Mail Statistics

Whitelist and Blacklist

MySQL

Login as MySQL root user

Create a Database and its User

Remove a database

Remove a user

Show databases directly from CLI

Other useful MySQL commands:

Password

Password strength

Change Password Users by the command line

Signalling events : Signal-event

PHP Related Commands

Show current php settings

Expand php.ini template

Configure PHP Basedir Restriction per ibay

Execution Time

Memory Limit

Upload Max File Size

Post Maximum Size

Allow URL FOpen

SME Server specific

Command Line

Refresh DNS cache

Refresh Squid Cache

Flush and Restart

db command

Setting db variables to default values

Delete a property value

Reset a property value

Give a shell access to "user"

General Service Handling

Example

allow a service to start for a particular time

Creating or deleting a service

Create a service with db command and set network access

SSH

Enable SSH