Hack The Sec-Leading Resource Of Linux Tutorial: DHCP

How To Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04

<div dir="ltr" style="text-align: left;" trbidi="on">
Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04.3 
Foreman (also known as The Foreman) is an open source complete life cycle systems management tool for provisioning, configuring and monitoring of physical and virtual servers. Foreman has deep integration to configuration management software, with Puppet, Chef, Salt and other solutions through plugins, which allows you to automate repetitive tasks, deploy applications and manage change to deployed servers. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH5gPHAx4FvWVWVjVkk4GDrS79gjysPp8bLRM9XBCj3KNIwUNcK6BC9HvKyOzvFk5fUSp1-zmMuLd-vMcx7enFvFLevb4nhf1K9Qs7RKk5DbggOJ4ZiDQJCxoGCA_GCgcNENx3EJi30oRK/s1600/foreman_medium.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH5gPHAx4FvWVWVjVkk4GDrS79gjysPp8bLRM9XBCj3KNIwUNcK6BC9HvKyOzvFk5fUSp1-zmMuLd-vMcx7enFvFLevb4nhf1K9Qs7RKk5DbggOJ4ZiDQJCxoGCA_GCgcNENx3EJi30oRK/s1600/foreman_medium.png" /></a></div>
 
 
Foreman provides provisioning on bare-metal (through managed <a href="http://www.hackthesec.co.in/search/label/DHCP" target="_blank">DHCP</a>, DNS, TFTP, and PXE-based unattended installations), virtualization and cloud. Foreman provides comprehensive, auditable interaction facilities including a web frontend, a command line interface, and a robust REST API. 
 
<ul style="text-align: left;">
<li><a href="http://www.hackthesec.co.in/2016/06/how-to-add-puppet-nodes-to-foreman.html" style="font-family: verdana, geneva, sans-serif; line-height: 26px;" target="_blank">How to Add Puppet Nodes to Foreman – CentOS 7 / Ubuntu 14.04</a></li>
</ul>
 
INSTALLATION:- 
Before installing Foreman, make sure you have setup a FQDN for your server. 
 
Note: You should do this on both <a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS </a>and <a href="http://www.hackthesec.co.in/search/label/Ubuntu" target="_blank">Ubuntu</a>. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/hosts</pre>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">192.168.2.10 server.hackthesec.local server</pre>
Also, do not forget to setup the valid hostname for the above host entry. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">vi /etc/hostname</pre>
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">server.hackthesec.local</pre>
Install Foreman on CentOS 7 / RHEL 7: 
Configure EPEL, Puppet and Foreman repositories. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">### CentOS 7 / RHEL7 ###

rpm -ivh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

rpm -ivh http://yum.puppetlabs.com/puppetlabs-release-el-7.noarch.rpm

rpm -ivh http://yum.theforeman.org/releases/1.9/el7/x86_64/foreman-release.rpm

### Enable the RHEL Optional and RHSCL repos on RHEL 7 ###

yum-config-manager --enable rhel-7-server-optional-rpms rhel-server-rhscl-7-rpms</pre>
Run the following command to download Foreman installer. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">yum -y install foreman-installer</pre>
Now, run the Foreman installer to start installing Foreman. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">foreman-installer</pre>
The installation run is non-interactive, but the configuration can be customized by supplying any of the options listed in foreman-installer –help, or by running foreman-installer -i for interactive mode. 
 
 
Once the installation is completed, you will see an output like below where you would find the initial username and password to access the Foreman. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Success!
  * Foreman is running at https://server.hackthesec.local
      Initial credentials are admin / M8GEY5BH4cffgbuheu
  * Foreman Proxy is running at https://server.hackthesec.local:8443
  * Puppetmaster is running at port 8140
  The full log is at /var/log/foreman-installer/foreman-installer.log</pre>
Firewall Configuration: 
The following ports are used by the components of Foreman, needs to be allowed in IP tables (FirewallD) / Hardware Firewall. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">firewall-cmd --permanent --add-port=53/tcp
firewall-cmd --permanent --add-port=67-69/udp
firewall-cmd --permanent --add-port=80/tcp
firewall-cmd --permanent --add-port=443/tcp
firewall-cmd --permanent --add-port=3000/tcp
firewall-cmd --permanent --add-port=3306/tcp
firewall-cmd --permanent --add-port=5910-5930/tcp
firewall-cmd --permanent --add-port=5432/tcp
firewall-cmd --permanent --add-port=8140/tcp
firewall-cmd --permanent --add-port=8443/tcp
firewall-cmd --reload</pre>
Install Foreman on Ubuntu 14.04: 
Make sure you have setup a FQDN mentioned in prerequisites. Now, we will install Foreman on Ubuntu.Setup a puppet repository, 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">apt-get -y install ca-certificates
wget https://apt.puppetlabs.com/puppetlabs-release-trusty.deb
dpkg -i puppetlabs-release-trusty.deb</pre>
Enable the Foreman repo. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">echo "deb http://deb.theforeman.org/ trusty nightly" > /etc/apt/sources.list.d/foreman.list
echo "deb http://deb.theforeman.org/ trusty nightly" >> /etc/apt/sources.list.d/foreman.list
wget -q http://deb.theforeman.org/pubkey.gpg -O- | apt-key add -</pre>
Download the Foreman installer. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">apt-get update && apt-get -y install foreman-installer</pre>
Run the Foreman installer. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">foreman-installer</pre>
Once the installation is completed, you will see an output like below, 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">Success!
  * Foreman is running at https://server.hackthesec.local
      Initial credentials are admin / M8GEY5BH4cffgbuheu
  * Foreman Proxy is running at https://server.hackthesec.local:8443
  * Puppetmaster is running at port 8140
  The full log is at /var/log/foreman-installer/foreman-installer.log</pre>
Note down intial username and password, you need this for accessing Foreman’s dashboard. 
Configure Foreman (Optional): 
If your Foreman host is not visible in Hosts –> All Hosts tab, you should run below command which will send the first Puppet report to Foreman, automatically creating the host in Foreman’s database. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">puppet agent --test

Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Caching catalog for server.hackthesec.local
Info: Applying configuration version '1445821177'
Notice: Finished catalog run in 0.56 seconds</pre>
Puppet 3+ will show a warning the first time that the node can’t be found, this can be ignored. 
Access Foreman Web Console: 
Open up your favourite web browser, navigate to https://your-ip-address or https://FQDN 
 
You should get login page, enter your Foreman credentials. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTNBeqSaVF8pXY-auqXz3UTtoBQmqU6Qgl079CbKgmpckIYjaCq_n18cw53r6dsMTWyh49_hpFjU0ZX9mRkalgHrXX0qLG3adNJ8yUMS7fxLhz7G7K1XLx9ID5xXDqwTEdLcXaQ9yZ4fnV/s1600/Install-Foreman-on-CentOS-7-Login-Page-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTNBeqSaVF8pXY-auqXz3UTtoBQmqU6Qgl079CbKgmpckIYjaCq_n18cw53r6dsMTWyh49_hpFjU0ZX9mRkalgHrXX0qLG3adNJ8yUMS7fxLhz7G7K1XLx9ID5xXDqwTEdLcXaQ9yZ4fnV/s1600/Install-Foreman-on-CentOS-7-Login-Page-hackthesec.co.in.png" /></a></div>
Once you logged in, you will get an overview page. Like below. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijGAzbPldMCSLEvSy0vNT4fGyzmSd1gv_U5mqBvK4KarLbmzF_qCFy19S3zJyJbAViW_06fvHp6vrzQEkuSyrrRIqXFu7-1eHcudNmHOzWIoQoYTCrOSG5HvtHU57ztrvb_oT0vDVGR586/s1600/Install-Foreman-on-CentOS-7-Overview-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijGAzbPldMCSLEvSy0vNT4fGyzmSd1gv_U5mqBvK4KarLbmzF_qCFy19S3zJyJbAViW_06fvHp6vrzQEkuSyrrRIqXFu7-1eHcudNmHOzWIoQoYTCrOSG5HvtHU57ztrvb_oT0vDVGR586/s1600/Install-Foreman-on-CentOS-7-Overview-hackthesec.co.in.png" /></a></div>
To list down the available hosts, goto Hosts –> All Hosts from Menu. Since we do not have any puppet clients, All Hosts tab would only list your Foreman host, with an "O"status. This indicates its status is OK, with no changes made on the last Puppet run. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1UjYqr-lzNWc6mPk5N7V_cN0s6TGcuH2QbWpVhLZDC7V_P2vGg4xGmuRgnVQPjqz-83ksVbVUahM_sKZSWnW9dg3Y72MbXcBr4gIeHnLsG7EkuB8BuLz-_zzvNTVGj8C9GtneK0agechc/s1600/Install-Foreman-on-CentOS-7-All-Hosts-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1UjYqr-lzNWc6mPk5N7V_cN0s6TGcuH2QbWpVhLZDC7V_P2vGg4xGmuRgnVQPjqz-83ksVbVUahM_sKZSWnW9dg3Y72MbXcBr4gIeHnLsG7EkuB8BuLz-_zzvNTVGj8C9GtneK0agechc/s1600/Install-Foreman-on-CentOS-7-All-Hosts-hackthesec.co.in.png" /></a></div>
 
It is recommended to change the password of Admin user for security reasons. To do that, click UserName (Top right)  –> My Account, you would end up with an option to change a password. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVI5R-3zPWOm6HLOzgQ9DmLIJjlnvN8C53I30hkFLBSa5SxBU1HXCfbMCb5XXnmuziK_9M-XQb-ZHyLQhcZyjcnnCZoSnhhmQZIfWeXbV1wlft-Hq0ZP7Az9b3CQSZWDDPBzjc_n7zkqKi/s1600/Install-Foreman-on-CentOS-7-Change-Password-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVI5R-3zPWOm6HLOzgQ9DmLIJjlnvN8C53I30hkFLBSa5SxBU1HXCfbMCb5XXnmuziK_9M-XQb-ZHyLQhcZyjcnnCZoSnhhmQZIfWeXbV1wlft-Hq0ZP7Az9b3CQSZWDDPBzjc_n7zkqKi/s1600/Install-Foreman-on-CentOS-7-Change-Password-hackthesec.co.in.png" /></a></div>
Download and Install NTP module: 
One of the more important requirement of puppet is to have an accurate time-keeping, to do this, we will install Puppet NTP module for managing the NTP service. 
 
If you have Puppet 2.7.14 or higher, install the module automatically from Puppet Forge to our “production” environment (the default). 
 
 
Use following command to install NTP module on Foreman (Puppet master) host. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">[root@hackthesec server ~]# puppet module install -i /etc/puppet/environments/production/modules saz/ntp

Notice: Preparing to install into /etc/puppet/environments/production/modules ...
Notice: Downloading from https://forgeapi.puppetlabs.com ...
Notice: Installing -- do not interrupt ...
/etc/puppet/environments/production/modules
└── saz-ntp (v2.3.2)</pre>
In Foreman's web console, go to Configure > Puppet Classes and click Import from hostname (server.hackthesec.local) to read the available Puppet classes from the puppet master and populate Foreman's database. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRUYBMiSX3kfvBQMVOCirOTOUn2Lxau_Rk3hRZ65AJSQj9YPUNMhRcK0rqF2CLadzfZF1uF_I_gqBXVekabW75aQ6Ne9olcGL5i7o1gIgXYNJP5dujHl7DYAFREH53IlKrA4GIkWMN0CMP/s1600/Install-Foreman-on-CentOS-7-Import-Classes-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRUYBMiSX3kfvBQMVOCirOTOUn2Lxau_Rk3hRZ65AJSQj9YPUNMhRcK0rqF2CLadzfZF1uF_I_gqBXVekabW75aQ6Ne9olcGL5i7o1gIgXYNJP5dujHl7DYAFREH53IlKrA4GIkWMN0CMP/s1600/Install-Foreman-on-CentOS-7-Import-Classes-hackthesec.co.in.png" /></a></div>
Select the NTP module and click the update button. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhq9bgoPfeu0tSLjkdMp1KQzQ3Q7JTTOUOPnJEgoVq7XWvjqP_sSv604X20Y8YJz_hnLYntP5rHQIrGIwAXNwHqG0gJr_rOTFs3n86FC1YAUdZnBTAoOZqzUlNXoslzrurLTkwqsjHGXMXO/s1600/Foreman-on-CentOS-7-Updating-Puppet-Modules_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhq9bgoPfeu0tSLjkdMp1KQzQ3Q7JTTOUOPnJEgoVq7XWvjqP_sSv604X20Y8YJz_hnLYntP5rHQIrGIwAXNwHqG0gJr_rOTFs3n86FC1YAUdZnBTAoOZqzUlNXoslzrurLTkwqsjHGXMXO/s1600/Foreman-on-CentOS-7-Updating-Puppet-Modules_hackthesec.co.in.png" /></a></div>
After clicking the update button, you will see something like below. The "ntp" class will appear in the Puppet class list if installed correctly. Click on NTP class on the left. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiclOxgtwuXS9NmkFWsv3AK1QZwHUoAiUtGDNzoAlwKZSZ24Ma-a8kWk01R_z6Iniwn9xmlb_crrgcH2qeHdsWQxOR67d0omt3Fh16HW0cy9y981YA5qXMFEdLfXaxpDnEwGOGfWkVCYax8/s1600/Foreman-on-CentOS-7-Puppet-Classes_hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiclOxgtwuXS9NmkFWsv3AK1QZwHUoAiUtGDNzoAlwKZSZ24Ma-a8kWk01R_z6Iniwn9xmlb_crrgcH2qeHdsWQxOR67d0omt3Fh16HW0cy9y981YA5qXMFEdLfXaxpDnEwGOGfWkVCYax8/s1600/Foreman-on-CentOS-7-Puppet-Classes_hackthesec.co.in.png" /></a></div>
Now, Click the Smart Class Parameter and then select server list on the left side. Tick the Override checkbox so Foreman manages the "server list" parameter of the class, then click Submit. 
 
Note: Change the default value if you want to use your own NTP servers. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXZoXA_9MEzpu4UOHKhsu9UBV6l0CUq-spQuzL6DY-ZkMjnqOmVtc3xcg28Vk5BD8VfJryTXGOsHnAsCKGo1u0yVKtiJhVf5ro39ykHGkZiXiQyxpjn_FgyuhKykHFhBdWFvuawGcUwjV7/s1600/Install-Foreman-on-CentOS-7-NTP-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXZoXA_9MEzpu4UOHKhsu9UBV6l0CUq-spQuzL6DY-ZkMjnqOmVtc3xcg28Vk5BD8VfJryTXGOsHnAsCKGo1u0yVKtiJhVf5ro39ykHGkZiXiQyxpjn_FgyuhKykHFhBdWFvuawGcUwjV7/s1600/Install-Foreman-on-CentOS-7-NTP-hackthesec.co.in.png" /></a></div>
Go to Hosts –> All Hosts, edit the Foreman host. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglwOe-_D-jNLqsVruubBzgq-9X-O2eAVPP-gMSE-CGnRsv1UWKTRz4k0IxGerzSN3t18_pJVXjBNzkLZYEo7D6lBAiosHtqxEA2yFIhd_vKP6F33Q3EYKBX-S5wYCocSGkhg9wIHUrozfe/s1600/Foreman-on-CentOS-7-Hosts-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglwOe-_D-jNLqsVruubBzgq-9X-O2eAVPP-gMSE-CGnRsv1UWKTRz4k0IxGerzSN3t18_pJVXjBNzkLZYEo7D6lBAiosHtqxEA2yFIhd_vKP6F33Q3EYKBX-S5wYCocSGkhg9wIHUrozfe/s1600/Foreman-on-CentOS-7-Hosts-hackthesec.co.in.png" /></a></div>
Go to Puppet Classes tab and expand the ntp module and click the + icon to add the ntp class to the host, then click submit. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-k4AmpLKh8hyMxTh3mlsW2mO80cIuJKGSib9p5LcIkOpi2PyRHCXogSuM1QCP2URV0Cr06iC1eSW-Rer3Sds8ZLO-ssJqZn0YxrMqW-_sKHrym8d91kjsHTQx7CBpHJd2oqWIhGdxJxGf/s1600/Foreman-NTP-Class-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-k4AmpLKh8hyMxTh3mlsW2mO80cIuJKGSib9p5LcIkOpi2PyRHCXogSuM1QCP2URV0Cr06iC1eSW-Rer3Sds8ZLO-ssJqZn0YxrMqW-_sKHrym8d91kjsHTQx7CBpHJd2oqWIhGdxJxGf/s1600/Foreman-NTP-Class-hackthesec.co.in.png" /></a></div>
This time, it will take you automatically to the host details page. Click on YAML, it will show the ntp class and the server list parameter, as passed to Puppet via the ENC (external node classifier) interface. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKw4ylmsjxEIspKuFzSyuu_EA3HsjvhUMkZCAwZmMkX6PjfBCCCU18fSpjUOIuoXZFKI1Mcy1-_UOmbpbrwCxkHf9l45bqH-ERJ_XPXHI_2OTjubMfWBa_6t1vwmq9oDBCpmVvRL8xoldO/s1600/Foreman--Host-Details-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKw4ylmsjxEIspKuFzSyuu_EA3HsjvhUMkZCAwZmMkX6PjfBCCCU18fSpjUOIuoXZFKI1Mcy1-_UOmbpbrwCxkHf9l45bqH-ERJ_XPXHI_2OTjubMfWBa_6t1vwmq9oDBCpmVvRL8xoldO/s1600/Foreman--Host-Details-hackthesec.co.in.png" /></a></div>
At last, run the following command on the Foreman host to see the NTP service automatically reconfigured by Puppet and the NTP module. 
<pre style="background: rgb(68, 67, 65); border-radius: 6px; border: 1px solid rgb(227, 227, 227); box-sizing: border-box; clear: none !important; color: white; font-family: monospace, serif; font-size: 14px; margin-bottom: 10px !important; margin-top: 10px !important; overflow: auto; padding: 10px !important; width: auto !important; word-break: break-all;">puppet agent --test</pre>
Verify the installation of NTP module by going to Hosts –> All Hosts –> Select Foreman Host –> Reports –> Select latest report. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbcpIIQdXThaBW-YSklPnfYasHXcupHWJ4__GkBih0vECACehwNht6dr3NofO1HErq-xaoevqFAYF3vEq1nrSbbT36q3jQhUUquKFVjgUy6DfXi4oOlD6ufRd-9UfKlxx-CBZHnFQ3pVGu/s1600/Install-Foreman-on-CentOS-7-Report-hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbcpIIQdXThaBW-YSklPnfYasHXcupHWJ4__GkBih0vECACehwNht6dr3NofO1HErq-xaoevqFAYF3vEq1nrSbbT36q3jQhUUquKFVjgUy6DfXi4oOlD6ufRd-9UfKlxx-CBZHnFQ3pVGu/s1600/Install-Foreman-on-CentOS-7-Report-hackthesec.co.in.png" /></a></div>
 
<div style="text-align: center;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
 </div>

How To Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04

Install Foreman on CentOS 7 / RHEL 7 / Ubuntu 14.04.3 Foreman (also known as The Foreman) is an open source complete life cycle systems management tool for provisioning, configuring and monitoring of…

09 Jun 2016

How to Install DHCP on CentOs 7 / RHEL 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="background-color: white; border: 0px; font-family: 'Open Sans'; font-size: 24px; line-height: 30px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
Install DHCP on CentOs 7 / RHEL 7</h2>
<div>
<div>
DHCP Stands for Dynamic Host Configurations Protocol that is used to dynamically assign IP Addresses to Clients, on every device attached on network requires an IP Address to communicate with other devices.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwM0cqK_On4Fw5aALAdxXbLEqFv3ITWtmXz-nC8IzpJJzL9oQ4S1qqWw8pllK843ZkpVy75fsrydsQw2TKDJuGjaK3xegwFAVnxedm33R5z2egWcmhW2DzqO-h31rqNGAUhhLGP2h3oOen/s1600/dhcp_server_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwM0cqK_On4Fw5aALAdxXbLEqFv3ITWtmXz-nC8IzpJJzL9oQ4S1qqWw8pllK843ZkpVy75fsrydsQw2TKDJuGjaK3xegwFAVnxedm33R5z2egWcmhW2DzqO-h31rqNGAUhhLGP2h3oOen/s1600/dhcp_server_www.hackthesec.co.in.png" /></a></div>
<div>
 </div>
<div>
If you notice when you connect to a network and you get an IP address automatically that is given by <a href="http://www.hackthesec.co.in/search/label/DHCP-Server">DHCP Server</a>.</div>
</div>
<div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Step – 1</div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
Open the terminal window and install DHCP package using yum command.</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">yum install dhcp -y</pre>
</div>
<div>
<div>
Step - 2</div>
<div>
Edit the configuration file.</div>
</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">vi /etc/etc/dhcp/dhcpd.conf</pre>
</div>
<div>
Copy and paste below code into '/etc/dhcp/dhcpd.conf' file, and change according to your desired settings.</div>
<div>
<pre style="background-color: whitesmoke; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; margin-bottom: 10px; overflow: auto; padding: 9.5px; word-break: break-all; word-wrap: break-word;"># DHCP Server Configuration file.
# see /usr/share/doc/dhcp*/dhcpd.conf.example
# see dhcpd.conf(5) man page
#
# Option definitions common to all supported networks
# Specify domain name
option domain-name “hackthesec.co.in”;
# Specify name server’s hostname or IP address
option domain-name-servers 192.168.1.1;
# Default lease time
default-lease-time 600;
# Max lease time
max-lease-time 7200;
# This DHCP server Authoritative server in the Network.
authoritative;
subnet 192.168.1.0 netmask 255.255.255.0 {# Specify the range of lease IP address
range dynamic-bootp 192.168.1.11 192.168.1.100;
# Specify broadcast address
option broadcast-address 192.168.1.255;
# Specify default gateway
option routers 192.168.1.1;
}
</pre>
<div>
Now Save and Exit the file.</div>
</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">:wq</pre>
</div>
<div>
<div>
Step - 3</div>
<div>
Now its time to Enable and start the DHCP Service.</div>
</div>
<div>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">systemctl enable dhcpd</pre>
<pre style="background-attachment: scroll; background-clip: initial; background-color: #3c3c3c; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border-radius: 4px; border: 1px solid rgb(229, 229, 229); margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">systemctl start dhcpd</pre>
</div>
<div>
<div>
If you didn’t miss anything clients machines on your network now able to get automatic ip addresses from your DHCP server.</div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
 </div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
So, setup your client machine on "Obtain an IP Address Automatically" it should get an automatic ip addresses from the specified range in the <a href="http://www.hackthesec.co.in/search/label/DHCP">DHCP </a>server.</div>
</div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
 </div>
<div style="font-family: verdana, geneva, sans-serif; font-size: 15px; line-height: 26px;">
<a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></div>
</div>
</div>

How to Install DHCP on CentOs 7 / RHEL 7

Install DHCP on CentOs 7 / RHEL 7 DHCP Stands for Dynamic Host Configurations Protocol that is used to dynamically assign IP Addresses to Clients, on every device attached on network requires an IP A…

01 Apr 2016

How to Setup DHCP server on ubuntu 14.04

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 style="clear: both; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 30px; font-weight: normal; height: auto; line-height: 31px; margin: 0px; padding: 0px; text-align: center; width: 614px;">
Setup DHCP server on ubuntu 14.04</h1>
<div>
 </div>
<div>
The Dynamic Host Configuration Protocol (<a href="http://en.wikipedia.org/wiki/Dynamic_Host_Configuration_Protocol">DHCP</a>) is a network protocol used to assign IP</div>
<div>
 </div>
<div>
 addresses and provide configuration information to devices such as servers, desktops, or </div>
<div>
 </div>
<div>
mobile devices, so they can communicate on a network using the Internet Protocol (IP).</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2ait-N2HbLkR9pQe8tC3RHJLSmNHmFbKZxICkJBN9kNqnjMgxXeaVZn4Y0AIGRp9V1Rq9c-gz_wmgG6YXy5061HzeisnhBgA1MKW5XPRRgRJsGpkMkWfLL0ugJHTIEF5SCYhvFLKE4DGM/s1600/DHCP_Server-www.hackthesec.co.in.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2ait-N2HbLkR9pQe8tC3RHJLSmNHmFbKZxICkJBN9kNqnjMgxXeaVZn4Y0AIGRp9V1Rq9c-gz_wmgG6YXy5061HzeisnhBgA1MKW5XPRRgRJsGpkMkWfLL0ugJHTIEF5SCYhvFLKE4DGM/s1600/DHCP_Server-www.hackthesec.co.in.gif" /></a></div>
<div>
 </div>
<div>
<h2 style="background-color: white; clear: both; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 24px; font-weight: normal; height: auto; line-height: 28px; margin: 0px; padding: 0px; width: 614px;">
DHCP server on <a href="http://www.hackthesec.co.in/search/label/Ubuntu">ubuntu</a> 14.04</h2>
<div>
 </div>
<div style="background-color: white; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 16px; line-height: 30px;">
Before installation, Make sure you have assigned static IP to the server. Step 1 : Issue the below command to update repository. <code style="background-color: #0e0e0e; border-radius: 5px; display: block; font-family: Verdana, 'MS Sans Serif', sans-serif, serif; font-size: 14px; line-height: 25px; padding: 4px;">root@hackthesec:~$ sudo apt-get update</code> Step 2 :  Now install isc-dhcp-server package and dependencies. <code style="background-color: #0e0e0e; border-radius: 5px; display: block; font-family: Verdana, 'MS Sans Serif', sans-serif, serif; font-size: 14px; line-height: 25px; padding: 4px;">root@hackthesec:~$ sudo apt-get install isc-dhcp-server -y</code> Step 3 :  After installing, open /etc/default/isc-dhcp-server file and assign interface. <code style="background-color: #0e0e0e; border-radius: 5px; display: block; font-family: Verdana, 'MS Sans Serif', sans-serif, serif; font-size: 14px; line-height: 25px; padding: 4px;">root@hackthesec:~$ sudo nano /etc/default/isc-dhcp-server INTERFACES="eth0"</code> Step 4 :  We need to define below values in dhcpd.conf file located in /etc/dhcp/ directory. Example:</div>
<div style="background-color: white;">
<code style="background-color: #0e0e0e; border-radius: 5px; display: block; padding: 4px;"><code style="border-radius: 5px; display: block; padding: 4px;">Network : 192.168.100.0/24</code><code style="border-radius: 5px; display: block; padding: 4px;">Range : 192.168.100.20 ( Starting IP ) – 192.168.100.100 ( Ending IP )</code><code style="border-radius: 5px; display: block; padding: 4px;">Gateway : 192.168.100.1</code><code style="border-radius: 5px; display: block; padding: 4px;">Primary DNS : 192.168.100.5</code><code style="border-radius: 5px; display: block; padding: 4px;">Sec DNS : 8.8.8.8</code></code></div>
<div>
 </div>
 
<div style="background-color: white;">
Take backup copy before making changes to the original file .Better rename the file and create a new one . <code style="background-color: #0e0e0e; border-radius: 5px; display: block; font-family: Verdana, 'MS Sans Serif', sans-serif, serif; font-size: 14px; line-height: 25px; padding: 4px;">root@hackthesec:~$ sudo mv /etc/dhcp/dhcpd.conf /etc/dhcp/dhcpd.conf.org</code> <code style="background-color: #0e0e0e; border-radius: 5px; display: block; font-family: Verdana, 'MS Sans Serif', sans-serif, serif; font-size: 14px; line-height: 25px; padding: 4px;">root@hackthesec:~$ sudo nano /etc/dhcp/dhcpd.conf</code></div>
<div style="background-color: white; color: #222222; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 16px; line-height: 30px;">
 </div>
and add the below code after making changes as per your network values. 
<div style="background-color: white; color: #222222; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 16px; line-height: 30px;">
 </div>
<div style="background-color: white;">
<code style="background-color: #0e0e0e; border-radius: 5px; display: block; padding: 4px;"><code style="border-radius: 5px; display: block; padding: 4px;">default-lease-time 600;</code><code style="border-radius: 5px; display: block; padding: 4px;">max-lease-time 7200;</code><code style="border-radius: 5px; display: block; padding: 4px;"># If this DHCP server is the official DHCP server for the local</code><code style="border-radius: 5px; display: block; padding: 4px;"># network, the authoritative directive should be uncommented.</code><code style="border-radius: 5px; display: block; padding: 4px;">authoritative;</code><code style="border-radius: 5px; display: block; padding: 4px;"># Use this to send dhcp log messages to a different log file (you also</code><code style="border-radius: 5px; display: block; padding: 4px;"># have to hack syslog.conf to complete the redirection).</code><code style="border-radius: 5px; display: block; padding: 4px;">log-facility local7;</code><code style="border-radius: 5px; display: block; padding: 4px;"> </code><code style="border-radius: 5px; display: block; padding: 4px;">subnet 192.168.100.0 netmask 255.255.255.0 {  #network</code><code style="border-radius: 5px; display: block; padding: 4px;"> range 192.168.100.20 192.168.100.100; # Range</code><code style="border-radius: 5px; display: block; padding: 4px;"> option domain-name-servers 192.168.100.5, 8.8.8.8; #Pri DNS , Sec DNS</code><code style="border-radius: 5px; display: block; padding: 4px;"> option domain-name "hackthesec.co.in"; #Domain name </code><code style="border-radius: 5px; display: block; padding: 4px;"> option routers 192.168.100.1; #Gateway</code><code style="border-radius: 5px; display: block; padding: 4px;"> option broadcast-address 192.168.100.255; #Broadcast</code><code style="border-radius: 5px; display: block; padding: 4px;"> default-lease-time 600;</code><code style="border-radius: 5px; display: block; padding: 4px;"> max-lease-time 7200;</code><code style="border-radius: 5px; display: block; padding: 4px;">}</code></code></div>
<div style="background-color: white; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 16px; line-height: 30px;">
Step 5 » Now start/restart dhcp service using the below command. <code style="background-color: #0e0e0e; border-radius: 5px; display: block; font-family: Verdana, 'MS Sans Serif', sans-serif, serif; font-size: 14px; line-height: 25px; padding: 4px;">root@hackthesec:~$ sudo service isc-dhcp-server restart</code></div>
<h3 style="background-color: white; color: #0f4884; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 18px; font-weight: normal; height: auto; line-height: 28px; margin: 0px; padding: 0px; width: 614px;">
 </h3>
<h3 style="background-color: white; color: #0f4884; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 18px; font-weight: normal; height: auto; line-height: 28px; margin: 0px; padding: 0px; width: 614px;">
Address Reservation</h3>
<div style="background-color: white; color: #222222; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 16px; line-height: 30px;">
Sometimes you need to reserve IP to some devices like printers, camera, linux machines etc. In this case, first you need to find MAC Address of that device and define values in that particular subnet. For example, Printer with 00:DD:HD:66:55:9B MAC Address has to be assigned with 192.168.100.50 IP. For this, you need to add code like below to that subnet.</div>
<div style="background-color: white; color: #222222; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 16px; line-height: 30px;">
 </div>
<div style="background-color: white;">
<code style="background-color: #0e0e0e; border-radius: 5px; display: block; padding: 4px;"><code style="border-radius: 5px; display: block; padding: 4px;">subnet 192.168.100.0 netmask 255.255.255.0 {  #network</code><code style="border-radius: 5px; display: block; padding: 4px;">       -  -   -    -   -  </code><code style="border-radius: 5px; display: block; padding: 4px;">       max-lease-time 7200;</code><code style="border-radius: 5px; display: block; padding: 4px;">     host printer-finance {</code><code style="border-radius: 5px; display: block; padding: 4px;">                hardware ethernet 00:DD:HD:66:55:9B; </code><code style="border-radius: 5px; display: block; padding: 4px;">                fixed-address 192.168.100.50;</code><code style="border-radius: 5px; display: block; padding: 4px;">        }</code><code style="border-radius: 5px; display: block; padding: 4px;">       host cam-gate {</code><code style="border-radius: 5px; display: block; padding: 4px;">                hardware ethernet 00:KK:HD:44:55:22;</code><code style="border-radius: 5px; display: block; padding: 4px;">                fixed-address 192.168.100.90;</code><code style="border-radius: 5px; display: block; padding: 4px;">        }</code><code style="border-radius: 5px; display: block; padding: 4px;">}</code></code></div>
<div style="color: #222222; font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 16px; line-height: 30px;">
 </div>
<div style="font-family: Trebuchet, 'Trebuchet MS', Arial, Verdana, sans-serif; font-size: 16px; line-height: 30px;">
And restart DHCP service. <code style="background-color: #0e0e0e; border-radius: 5px; display: block; font-family: Verdana, 'MS Sans Serif', sans-serif, serif; font-size: 14px; line-height: 25px; padding: 4px;">root@hackthesec:~$ sudo service isc-dhcp-server restart</code><pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 12px; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><a href="http://www.hackthesec.co.in/" style="color: #999999; text-decoration: none;" target="_blank">Hack The Security</a>
<a href="https://www.twitter.com/hackthesecurity" style="color: #999999; text-decoration: none;" target="_blank">Hack The Security Twitter</a>
<a href="https://www.facebook.com/htsecu/" style="color: #999999; text-decoration: none;" target="_blank">Hack The Security Facebook Page</a></pre>
</div>
</div>
</div>

How to Setup DHCP server on ubuntu 14.04

Setup DHCP server on ubuntu 14.04 The Dynamic Host Configuration Protocol (DHCP) is a network protocol used to assign IP addresses and provide configuration information to devices such as servers, d…

01 Feb 2016

Load more posts