浮雲雅築: 9月 2014

2014年9月27日星期六

[研究] Testopia 測試案例 (Test Case) 管理系統(CentOS 7.0 x86_64)

[研究] Testopia 測試案例 (Test Case) 管理系統(CentOS 7.0 x86_64)

2014-09-27

官方網站
https://developer.mozilla.org/zh-TW/docs/Mozilla/Bugzilla/Testopia

Testopia 2.5 (Bugzilla 4.2) 下載
http://ftp.mozilla.org/pub/mozilla.org/webtools/testopia/testopia-2.5-BUGZILLA-4.2.tar.gz
ftp://ftp.mozilla.org/pub/mozilla.org/webtools/testopia/testopia-2.5-BUGZILLA-4.2.tar.gz

準備工作

BugZilla 需要先安裝好

[研究] BugZilla 4.4.5 缺陷管理系統快速安裝程式(CentOS 7.0 x86_64)
http://shaurong.blogspot.tw/2014/09/bugzilla-445-centos-70-x8664.html

安裝

yum -y install httpd
service httpd restart
chkconfig httpd on

#解壓縮︰ tar zxvf testopia-2.5-BUGZILLA-4.2.tar.gz
#把裡面的內容丟到 bugzilla 的根目錄，例如 /var/www/html/bugzilla
cd /usr/local/src
wget http://ftp.mozilla.org/pub/mozilla.org/webtools/testopia/testopia-2.5-BUGZILLA-4.2.tar.gz
mkdir -p /var/www/html/testopia
#tar zxvf testopia-2.5-BUGZILLA-4.2.tar.gz -C /var/www/html/testopia
tar zxvf testopia-2.5-BUGZILLA-4.2.tar.gz -C /var/www/html/bugzilla/

#執行 checksetup 的 perl 檔 :
cd /var/www/html/bugzilla/
./checksetup.pl
firefox http://localhost/bugzilla &

這樣就安裝完成了。(畫面上可以看到 Testopia 下拉選單)

基本的使用流程如下︰

新增一個 Product 以及多個 Components : Administration > Product
新增一個 Test Plan
新增多個 Test Cases : 要注意的是狀態要 CONFIRMED 之後才能被挑選來執行。
新增一個 Build : ex 1001
新增一個 Environemnt : 這邊的 Environemnt，通常是指一些像是OS，Browser，Hardware等等不同的執行環境。
新增一個 Test Run : 選擇要執行的 Test Plan，以及選擇要跑的Build，挑選 Test Case
執行 Test Run : 把相
產成 Report，在 Test Run 上按右鍵，就可以把相關的的報告展現在 Dashboard上面

(完)

相關

[研究] BugZilla 5.0.1 缺陷管理系統快速安裝程式(CentOS 7.1 x86_64)
http://shaurong.blogspot.tw/2015/11/bugzilla-501-centos-71-x8664.html

[研究] Testopia 測試案例 (Test Case) 管理系統(CentOS 7.0 x86_64)
http://shaurong.blogspot.com/2014/09/testopia-test-case-centos-70-x8664.html

[研究] Testopia 測試案例 (Test Case) 管理系統(CentOS 6.5 x86_64)
http://shaurong.blogspot.com/2014/09/testopia-test-case-centos-65-x8664.html

[研究] BugZilla 4.4.5 缺陷管理系統快速安裝程式(CentOS 7.0 x86_64)
http://shaurong.blogspot.tw/2014/09/bugzilla-445-centos-70-x8664.html

[研究] BugZilla 4.4.5 缺陷管理系統快速安裝程式 (CentOS 6.5 x86_64)
http://shaurong.blogspot.tw/2014/09/bugzilla-445-centos-65-x8664.html

Testopia 測試案例管理系統簡介
http://blog.codylab.com/testcase-management-using-testopia/

[研究] hadoop-2.5.1-src.tar.gz 快速編譯安裝程式(CentOS 7.0 x86_64)

[研究] hadoop-2.5.1-src.tar.gz 快速編譯安裝程式(CentOS 7.0 x86_64)

2014-09-27

下載
http://www.apache.org/dyn/closer.cgi/hadoop/common/
http://apache.stu.edu.tw/hadoop/common/hadoop-2.5.0/hadoop-2.5.0.tar.gz

程式內容如下

#!/bin/bash

echo -e "\033[31m"
echo -e "Program : Hadoop-2.5.1_CentOS-7.0-x86_64-Compile.sh "
echo -e "Hadoop 2.5.1 Compile Shell Script (CentOS 7.0 x86_64) "
echo -e "by Shau-Rong Lu 2014-09-27 "
echo -e "\033[0m"

cd /usr/local/src
#yum -y groupinstall "Development tools"
yum -y install gcc gcc-c++ svn cmake git zlib zlib-devel openssl openssl-devel rsync java-1.7.0-openjdk.x86_64 java-1.7.0-openjdk-devel.x86_64 make wget

# echo "********** Install OpenJDK **********"

yum -y install java
# or
#yum -y install java-1.7.0-openjdk

yum -y install java-1.7.0-openjdk-devel

#export JAVA_HOME=/usr
#echo 'export JAVA_HOME=/usr' >> /etc/profile
#echo 'export JAVA_HOME=/usr/lib/jvm/java-1.7.0-openjdk-1.7.0.65-2.5.1.2.el7_0.x86_64' >> /etc/profile
echo 'export JAVA_HOME=/usr/lib/jvm/java' >> /etc/profile
echo 'export PATH=$PATH:$JAVA_HOME/bin' >> /etc/profile
echo 'export CLASSPATH=$JAVA_HOME/jre/lib/ext:$JAVA_HOME/lib/tools.jar' >> /etc/profile

source /etc/profile
java -version
#export | grep JAVA
#export | grep jdk

echo "********** Install Apache Maven 3.0.5 (yum) **********"

yum -y install maven

# mvn -version

echo "********** Install FindBugs 3.0.0 **********"

cd /usr/local/src
if [ ! -s findbugs-3.0.0.tar.gz ]; then
wget http://jaist.dl.sourceforge.net/project/findbugs/findbugs/3.0.0/findbugs-3.0.0.tar.gz
fi
tar zxvf findbugs-3.0.0.tar.gz -C /usr/local/
ln -s /usr/local/findbugs-3.0.0/bin/findbugs /usr/bin/findbugs
echo 'export FINDBUGS_HOME=/usr/local/findbugs-3.0.0' >> /etc/profile
echo 'export PATH=$PATH:$FINDBUGS_HOME/bin' >> /etc/profile
source /etc/profile

#export | grep FINDBUGS_HOME
#export | grep PATH
#read -n 1 -p "Press Enter to continue..."

echo "********** Install Protoc 2.5.0 **********"
# https://code.google.com/p/protobuf/
# https://code.google.com/p/protobuf/downloads/list

cd /usr/local/src
if [ ! -s protobuf-2.5.0.tar.gz ]; then
wget https://protobuf.googlecode.com/files/protobuf-2.5.0.tar.gz
fi
tar zxvf protobuf-2.5.0.tar.gz -C /usr/local/src
cd /usr/local/src/protobuf-2.5.0
./configure
make
make install
ln -s /usr/local/bin/protoc /usr/bin/protoc
echo 'export PROTO_HOME=/usr/local/' >> /etc/profile
echo 'export PATH=$PATH:$PROTO_HOME/bin' >> /etc/profile
source /etc/profile
#read -n 1 -p "Press Enter to continue..."

echo "********** Compile Hadoop **********"

cd /usr/local/src
if [ ! -s hhadoop-2.5.1-src.tar.gz ]; then
wget http://ftp.tc.edu.tw/pub/Apache/hadoop/common/hadoop-2.5.1/hadoop-2.5.1-src.tar.gz
fi
tar zxvf hadoop-2.5.1-src.tar.gz -C /usr/local/src
cd /usr/local/src/hadoop-2.5.1-src/

#mvn clean
mvn package -Pdist,native -DskipTests -Dtar
#read -n 1 -p "Press Enter to continue..."

執行結果

[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Apache Hadoop Main ................................ SUCCESS [2:10.013s]
[INFO] Apache Hadoop Project POM ......................... SUCCESS [50.174s]
[INFO] Apache Hadoop Annotations ......................... SUCCESS [29.702s]
[INFO] Apache Hadoop Assemblies .......................... SUCCESS [0.335s]
[INFO] Apache Hadoop Project Dist POM .................... SUCCESS [28.309s]
[INFO] Apache Hadoop Maven Plugins ....................... SUCCESS [40.791s]
[INFO] Apache Hadoop MiniKDC ............................. SUCCESS [3:00.311s]
[INFO] Apache Hadoop Auth ................................ SUCCESS [39.886s]
[INFO] Apache Hadoop Auth Examples ....................... SUCCESS [11.284s]
[INFO] Apache Hadoop Common .............................. SUCCESS [3:57.397s]
[INFO] Apache Hadoop NFS ................................. SUCCESS [7.097s]
[INFO] Apache Hadoop Common Project ...................... SUCCESS [0.021s]
[INFO] Apache Hadoop HDFS ................................ SUCCESS [3:24.778s]
[INFO] Apache Hadoop HttpFS .............................. SUCCESS [52.574s]
[INFO] Apache Hadoop HDFS BookKeeper Journal ............. SUCCESS [31.608s]
[INFO] Apache Hadoop HDFS-NFS ............................ SUCCESS [4.112s]
[INFO] Apache Hadoop HDFS Project ........................ SUCCESS [0.025s]
[INFO] hadoop-yarn ....................................... SUCCESS [0.022s]
[INFO] hadoop-yarn-api ................................... SUCCESS [1:00.165s]
[INFO] hadoop-yarn-common ................................ SUCCESS [51.288s]
[INFO] hadoop-yarn-server ................................ SUCCESS [0.031s]
[INFO] hadoop-yarn-server-common ......................... SUCCESS [21.424s]
[INFO] hadoop-yarn-server-nodemanager .................... SUCCESS [56.444s]
[INFO] hadoop-yarn-server-web-proxy ...................... SUCCESS [4.565s]
[INFO] hadoop-yarn-server-applicationhistoryservice ...... SUCCESS [7.043s]
[INFO] hadoop-yarn-server-resourcemanager ................ SUCCESS [14.625s]
[INFO] hadoop-yarn-server-tests .......................... SUCCESS [1.109s]
[INFO] hadoop-yarn-client ................................ SUCCESS [5.830s]
[INFO] hadoop-yarn-applications .......................... SUCCESS [0.044s]
[INFO] hadoop-yarn-applications-distributedshell ......... SUCCESS [3.352s]
[INFO] hadoop-yarn-applications-unmanaged-am-launcher .... SUCCESS [2.298s]
[INFO] hadoop-yarn-site .................................. SUCCESS [0.037s]
[INFO] hadoop-yarn-project ............................... SUCCESS [4.523s]
[INFO] hadoop-mapreduce-client ........................... SUCCESS [0.057s]
[INFO] hadoop-mapreduce-client-core ...................... SUCCESS [22.938s]
[INFO] hadoop-mapreduce-client-common .................... SUCCESS [17.266s]
[INFO] hadoop-mapreduce-client-shuffle ................... SUCCESS [4.292s]
[INFO] hadoop-mapreduce-client-app ....................... SUCCESS [11.857s]
[INFO] hadoop-mapreduce-client-hs ........................ SUCCESS [9.558s]
[INFO] hadoop-mapreduce-client-jobclient ................. SUCCESS [14.674s]
[INFO] hadoop-mapreduce-client-hs-plugins ................ SUCCESS [1.812s]
[INFO] Apache Hadoop MapReduce Examples .................. SUCCESS [6.743s]
[INFO] hadoop-mapreduce .................................. SUCCESS [3.861s]
[INFO] Apache Hadoop MapReduce Streaming ................. SUCCESS [10.350s]
[INFO] Apache Hadoop Distributed Copy .................... SUCCESS [18.868s]
[INFO] Apache Hadoop Archives ............................ SUCCESS [2.024s]
[INFO] Apache Hadoop Rumen ............................... SUCCESS [7.014s]
[INFO] Apache Hadoop Gridmix ............................. SUCCESS [4.974s]
[INFO] Apache Hadoop Data Join ........................... SUCCESS [2.891s]
[INFO] Apache Hadoop Extras .............................. SUCCESS [2.984s]
[INFO] Apache Hadoop Pipes ............................... SUCCESS [5.990s]
[INFO] Apache Hadoop OpenStack support ................... SUCCESS [5.098s]
[INFO] Apache Hadoop Client .............................. SUCCESS [7.264s]
[INFO] Apache Hadoop Mini-Cluster ........................ SUCCESS [0.083s]
[INFO] Apache Hadoop Scheduler Load Simulator ............ SUCCESS [11.020s]
[INFO] Apache Hadoop Tools Dist .......................... SUCCESS [4.964s]
[INFO] Apache Hadoop Tools ............................... SUCCESS [0.023s]
[INFO] Apache Hadoop Distribution ........................ SUCCESS [24.629s]
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 25:31.849s
[INFO] Finished at: Sat Sep 27 09:32:07 CST 2014
[INFO] Final Memory: 163M/474M
[INFO] ------------------------------------------------------------------------
[root@localhost ~]#

http://forum.icst.org.tw/phpbb/viewtopic.php?t=17974

[研究] Hadoop 2.5.1 安裝 (CentOS 7.0 x86_64)

[研究] Hadoop 2.5.1 安裝 (CentOS 7.0 x86_64)

2014-09-27

The Apache Hadoop project develops open-source software for reliable, scalable, distributed computing.
它參考Google Filesystem，以Java開發，提供HDFS與MapReduce API。

官方網站
http://hadoop.apache.org/

安裝參考
http://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-common/SingleNodeSetup.html
http://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-common/SingleCluster.html

下載
http://www.apache.org/dyn/closer.cgi/hadoop/common/

安裝

# 為了省事，避免意外的情況，關閉 SELinux (Security Linux ) 和 iptables

# 立刻關閉 SELinux
setenforce 0

# 設定 reboot 後自動關閉 SELinux
#vi /etc/selinux/config
#找到
#SELINUX=
#設為
#SELINUX=disabled

sed -i -e "s@SELINUX=enforcing@#SELINUX=enforcing@" /etc/selinux/config
sed -i -e "s@SELINUX=permissive@#SELINUX=permissive@" /etc/selinux/config
sed -i -e "/SELINUX=/aSELINUX=disabled" /etc/selinux/config

# 立刻停掉 iptables
#service iptables stop
#service ip6tables stop
systemctl stop firewalld

# 設定 reboot 後自動關閉 iptable
#chkconfig iptables off
#chkconfig ip6tables off
systemctl disable firewalld
systemctl status firewalld

yum -y install java
# or
#yum -y install java-1.7.0-openjdk

yum -y install java-1.7.0-openjdk-devel

#echo 'export JAVA_HOME=/usr/lib/jvm/java-1.7.0-openjdk-1.7.0.65-2.5.1.2.el7_0.x86_64' >>
/etc/profile
echo 'export JAVA_HOME=/usr/lib/jvm/java' >> /etc/profile

source /etc/profile

cd /usr/local
#wget http://apache.cdpa.nsysu.edu.tw/hadoop/common/hadoop-2.5.1/hadoop-2.5.1.tar.gz
wget http://ftp.mirror.tw/pub/apache/hadoop/common/hadoop-2.5.1/hadoop-2.5.1.tar.gz
tar zxvf hadoop-2.5.1.tar.gz

echo 'export HADOOP_HOME=/usr/local/hadoop-2.5.1' >> /etc/profile
echo 'export PATH=$PATH:$HADOOP_HOME/bin' >> /etc/profile
echo 'export PATH=$PATH:$HADOOP_HOME/sbin' >> /etc/profile
source /etc/profile

檢視現況

[root@localhost local]# hadoop version
Hadoop 2.5.1
Subversion https://git-wip-us.apache.org/repos/asf/hadoop.git -r 2e18d179e4a8065b6a9f29cf2de9451891265cce
Compiled by jenkins on 2014-09-05T23:11Z
Compiled with protoc 2.5.0
From source with checksum 6424fcab95bfff8337780a181ad7c78
This command was run using /usr/local/hadoop-2.5.1/share/hadoop/common/hadoop-common-2.5.1.jar

[root@localhost local]# hadoop
Usage: hadoop [--config confdir] COMMAND
where COMMAND is one of:
fs run a generic filesystem user client
version print the version
jar <jar> run a jar file
checknative [-a|-h] check native hadoop and compression libraries availability
distcp <srcurl> <desturl> copy file or directories recursively
archive -archiveName NAME -p <parent path> <src>* <dest> create a hadoop archive
classpath prints the class path needed to get the
Hadoop jar and the required libraries
daemonlog get/set the log level for each daemon
or
CLASSNAME run the class named CLASSNAME

Most commands print help when invoked w/o parameters.
[root@localhost local]#

2014年9月26日星期五

[研究] Redmine 2.5.2 專案管理與 Bug 缺陷追蹤管理系統安裝 (CentOS 6.5 x86_64)

[研究] Redmine 2.5.2 專案管理與 Bug 缺陷追蹤管理系統安裝 (CentOS 6.5 x86_64)

2014-09-26

Redmine 是一個網頁界面的專案管理與缺陷追蹤管理系統 (Bug tracking system)，它是的自由及開放原始碼 (Free Open Source Software, OSS) 工具。

官方網站

http://www.redmine.org/

下載
http://www.redmine.org/projects/redmine/wiki/Download
http://www.redmine.org/releases/redmine-2.5.2.tar.gz

安裝參考
http://www.redmine.org/projects/redmine/wiki/RedmineInstall

安裝

#Configuring the Firewall
#/etc/sysconfig/iptables
#/etc/sysconfig/ip6tables

iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
iptables-save
service iptables save

ip6tables -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
ip6tables -A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
ip6tables-save
service ip6tables save

/etc/init.d/iptables restart
/etc/init.d/ip6tables restart

chkconfig iptables on
chkconfig ip6tables on

---------------

#Turn off SELinux
# disable SELinux now
/usr/sbin/setenforce 0
# disable SELinux always
sed -i -e "s@SELINUX=enforcing@#SELINUX=enforcing@" /etc/selinux/config
sed -i -e "s@SELINUX=permissive@#SELINUX=permissive@" /etc/selinux/config
sed -i -e "/SELINUX=/aSELINUX=disabled" /etc/selinux/config

yum -y install @development mysql-server mysql-devel ruby ruby-devel ImageMagick ImageMagick-devel rubygem-rake rubygem-bundler
#No package rubygem-bundler available.

rpm -Uvh http://ftp.jaist.ac.jp/pub/Linux/Fedora/epel/6/x86_64/epel-release-6-8.noarch.rpm

yum -y install rubygem-bundler

cd /etc/yum.repos.d/

wget http://download.opensuse.org/repositories/home:csbuild:centosextra/CentOS_CentOS-6/home:csbuild:centosextra.repo

yum -y install rubygem-bundler

chkconfig httpd on
chkconfig mysqld on
service httpd start
service mysqld start

#Set the password for MySQL
#/usr/bin/mysql_secure_installation
service mysqld restart
/usr/bin/mysqladmin -u root password '654321'
/usr/bin/mysqladmin -u root -h localhost.localdomain password '654321' -p654321

# 建立資料庫 "redmine"
# 建立資料庫使用者 redmine
# 建立資料庫使用者 redmine 密碼 my_password
# 使用者名稱和密碼可以換掉，但是 config/database.yml 設定時候要更著換

mysql -e "CREATE DATABASE redmine CHARACTER SET utf8;";
mysql -e "CREATE USER 'redmine'@'localhost' IDENTIFIED BY 'my_password';";
mysql -e "GRANT ALL PRIVILEGES ON redmine.* TO 'redmine'@'localhost';";

adduser redmine

cd /usr/local/src

curl -O http://www.redmine.org/releases/redmine-2.5.2.tar.gz
tar xvf redmine-2.5.2.tar.gz
mv redmine-2.5.2/ /home/redmine/
mv /home/redmine/redmine-2.5.2 /home/redmine/redmine
chown -R redmine:redmine /home/redmine/redmine

#su redmine
#cd ~/redmine
cd /home/redmine/redmine

cp config/database.yml.example config/database.yml

# 設定使用者名稱、密碼
vi config/database.yml

bundle install --without development test
rake generate_secret_token
RAILS_ENV=production rake db:migrate

# 載入預設資料 (optional)
# 可選 en 或 zh-TW
RAILS_ENV=production rake redmine:load_default_data

mkdir -p tmp tmp/pdf public/plugin_assets
chown -R redmine:redmine files log tmp public/plugin_assets
chmod -R 755 files log tmp public/plugin_assets

# 啟動
ruby script/rails server webrick -e production

# 帳號 admin, 密碼 admin
firefor http://localhost:3000/ &

編輯 config/database.yml 設定使用者名稱、密碼

其中

production:
adapter: mysql2
database: redmine
host: localhost
username: root
password: ""
encoding: utf8

改為

production:
adapter: mysql2
database: redmine
host: localhost
username: redmine
password: "my_password"
encoding: utf8

(完)

相關

Redmine - 維基百科，自由的百科全書

http://zh.wikipedia.org/wiki/Redmine

[研究] Redmine 2.5.2 快速安裝程式 (CentOS 7.0 x86_64)
http://shaurong.blogspot.com/2014/09/redmine-252-centos-70-x8664.html

[研究] Redmine 2.5.2 專案管理與 Bug 缺陷追蹤管理系統安裝 (CentOS 7.0 x86_64)

[研究] Redmine 2.5.2 專案管理與 Bug 缺陷追蹤管理系統安裝 (CentOS 7.0 x86_64)

2014-09-26

Redmine 是一個網頁界面的專案管理與缺陷追蹤管理系統 (Bug tracking system)，它是的自由及開放原始碼 (Free Open Source Software, OSS) 工具。

官方網站

http://www.redmine.org/

下載
http://www.redmine.org/projects/redmine/wiki/Download
http://www.redmine.org/releases/redmine-2.5.2.tar.gz

安裝參考
http://darktraining.com/109/
http://www.redmine.org/projects/redmine/wiki/RedmineInstall

http://gen.jusz.pl/2014/04/19/how-to-install-redmine-2-5-on-centos-6-5/

Install Redmine 2.5.x on Centos 6.5 - 64 bit
http://www.redmine.org/projects/redmine/wiki/install_Redmine_25x_on_Centos_65_complete

Redmine 1.3.2 on CentOS 5/6 installation HOWTO
http://www.redmine.org/projects/redmine/wiki/Redmine_on_CentOS_installation_HOWTO

How to Install Redmine on CentOS (Detailed)
http://www.redmine.org/projects/redmine/wiki/How_to_Install_Redmine_on_CentOS_(Detailed)

Howto Install Redmine on CentOS 7
https://jakobgillich.com/installing-redmine-on-centosrhel-7/

安裝

firewall-cmd --add-port=3000/tcp --permanent
firewall-cmd --reload

yum -y install @development mariadb-server mariadb-devel ruby ruby-devel ImageMagick ImageMagick-devel rubygem-rake rubygem-bundler

systemctl enable mariadb
systemctl start mariadb
systemctl status mariadb

# 建立資料庫 "redmine"
# 建立資料庫使用者 redmine
# 建立資料庫使用者 redmine 密碼 my_password
# 使用者名稱和密碼可以換掉，但是 config/database.yml 設定時候要更著換

mysql -e "CREATE DATABASE redmine CHARACTER SET utf8;";
mysql -e "CREATE USER 'redmine'@'localhost' IDENTIFIED BY 'my_password';";
mysql -e "GRANT ALL PRIVILEGES ON redmine.* TO 'redmine'@'localhost';";

adduser redmine

cd /usr/local/src

curl -O http://www.redmine.org/releases/redmine-2.5.2.tar.gz
tar xvf redmine-2.5.2.tar.gz
mv redmine-2.5.2/ /home/redmine/
mv /home/redmine/redmine-2.5.2 /home/redmine/redmine
chown -R redmine:redmine /home/redmine/redmine

#su redmine
#cd ~/redmine
cd /home/redmine/redmine

cp config/database.yml.example config/database.yml

# 設定使用者名稱、密碼
vi config/database.yml

bundle install --without development test
rake generate_secret_token
RAILS_ENV=production rake db:migrate

# 載入預設資料 (optional)
RAILS_ENV=production rake redmine:load_default_data

mkdir -p tmp tmp/pdf public/plugin_assets
chown -R redmine:redmine files log tmp public/plugin_assets
chmod -R 755 files log tmp public/plugin_assets

# 啟動
ruby script/rails server webrick -e production

# 帳號 admin, 密碼 admin
firefor http://localhost:3000/ &

(完)

相關

Redmine - 維基百科，自由的百科全書

http://zh.wikipedia.org/wiki/Redmine

[研究] Redmine 2.5.2 快速安裝程式 (CentOS 7.0 x86_64)
http://shaurong.blogspot.com/2014/09/redmine-252-centos-70-x8664.html

[研究] OVAL Interpreter v5.10.1.7 弱點掃描工具安裝與簡易使用 (Windows 7 x64)

[研究] OVAL Interpreter v5.10.1.7 弱點掃描工具安裝與簡易使用 (Windows 7 x64)

2014-09-26

OVAL 是弱點掃描工具。

OVAL 網站 (Open Vulnerability and Assessment Language，開放漏洞評估語言)
https://oval.mitre.org/index.html

(最後更新 2015-07-09)

OVAL Interpreter 5.10.1.7
Last Update: 2014-04-10
http://sourceforge.net/projects/ovaldi/
下載得到 ovaldi-5.10.1.7-setup.exe

[下圖] double click 檔案 ovaldi-5.10.1.7-setup.exe，顯示它是 WinZip 建立的自我解壓軟體

(下圖) 不論點 Unzip 或 Run WinZip按鈕都會出現錯誤，要求電腦中要有 WinZip 軟體

後來去下載安裝免費的 7-zip 解壓軟體，把這個 .exe 檔案解壓縮
http://www.7-zip.org/
http://www.developershome.com/7-zip/

(下圖) 執行 ovaldi.exe，要求有 .NET Framework 4.0 版

Microsoft .NET Framework 4 (獨立安裝程式)

http://www.microsoft.com/zh-tw/download/details.aspx?id=17718

( dotNetFx40_Full_x86_x64.exe 包含 x86 和 x64 版本)

支援的作業系統

Windows 7, Windows 7 Service Pack 1, Windows Server 2003 Service Pack 2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 R2 SP1, Windows Vista Service Pack 1, Windows XP Service Pack 3

(下圖) 執行 ovaldi.exe ，可以看到參數說明

(下圖) 執行 ovaldi.exe -m -o microsoft.windows.7.xml 對這台 Windows 7電腦掃描，要求定義檔 ( definition file)

(下圖) 定義檔在官方網站有些不好找 (提供東西和種類太多了)，故特別在此用畫面說明

(下圖) 這裡也有針對 MS-Windows 的 windows.xml (但是掃描會更久)

(下圖) 下載後和 ovaldi.exe 放在同目錄

(下圖) 開始掃描

(下圖) 掃描完成，時間 11:54 ~ 12:18，約 24 分鐘

(下圖) results.xml 內容很長，第1頁有統計資料，第2頁開始的畫面長相相同

(下圖) 隨便選個 ID 點進去，會跳到 Oval 網站，有詳細說明

(完)

相關

[研究] OVAL Interpreter v5.10.1.7 安裝 (Windows 7 x64)
http://shaurong.blogspot.com/2014/09/oval-interpreter-v51017-windows-7-x64.html

從OVAL到NASL plugins
http://140.134.131.145/upload/paper_uni/932pdf/932-30.pdf

[研究] nmap 6.47 安裝 (nmap-6.47-win32.zip)(Windows 7x 64)

[研究] nmap 6.47 安裝 (nmap-6.47-win32.zip)(Windows 7x 64)

2014-09-26

官方網站
http://nmap.org/

Nmap 是網路掃描、探測工具（支援 Windows, Mac, Linux），這次下載測試 nmap-6.46-setup.exe，只是想大略試一下試怎樣的東西，沒有要深入研究。

安裝環境：Windows 7 x64

(下圖) 下載 nmap-6.47-win32.zip ，解壓後執行 nmap.exe

(下圖) 會出現沒有 MSVCR100.dll 錯誤，NMAP 官方網站會讓你跳去下載 VC++ 2008 x86 可轉發套件，實際無用，要下在 VC++ 2010 x86 可轉發套件才行
http://www.microsoft.com/zh-tw/download/details.aspx?id=5555
(不要抓 x64 版的，無用)

支援的作業系統
Windows 7, Windows Server 2003 R2 (32-Bit x86), Windows Server 2003 Service Pack 2, Windows Server 2008 R2, Windows Server 2008 Service Pack 2, Windows Vista Service Pack 2, Windows XP Service Pack 3

(下圖) 可以執行 nmap.exe 了，會顯示可用參數

(下圖) 實際掃描會出現錯誤，要去 WinPcap 網站下載 WinPcap 4.1.3 Installer for Windows 安裝
http://www.winpcap.org/install/default.htm
Supported platforms:
Windows NT4/2000
Windows XP/2003/Vista/2008/Win7/2008R2/Win8 (x86 and x64)

再執行一次 nmap -sT localhost > nmap-report.txt 就可以順利掃描成功了

掃描結果 ( nmap-report.txt ) 內容

Starting Nmap 6.47 ( http://nmap.org ) at 2014-09-26 10:55 台北標準時間
Nmap scan report for localhost (127.0.0.1)
Host is up (0.00s latency).
Not shown: 992 filtered ports
PORT STATE SERVICE
135/tcp open msrpc
445/tcp open microsoft-ds
5357/tcp open wsdapi
49152/tcp open unknown
49153/tcp open unknown
49154/tcp open unknown
49155/tcp open unknown
49156/tcp open unknown

Nmap done: 1 IP address (1 host up) scanned in 50.29 seconds

(完)

[研究] nmap-6.47-win32.zip (Windows 7x 64)
http://shaurong.blogspot.com/2014/09/nmap-647-win32zip-windows-7x-64.html

2014年9月23日星期二

[研究] Redis 2.8.13 資料庫安裝(yum)(CentOS 7.0 x86_64)

[研究] Redis 2.8.13 資料庫安裝(yum)(CentOS 7.0 x86_64)

2014-09-23
Lu

Redis is an open source, advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets.

官方網站
http://redis.io/

下載
http://redis.io/download
http://code.google.com/p/redis/downloads/list
直接下載
http://download.redis.io/releases/redis-2.8.14.tar.gz

安裝參考
http://redis.io/download

安裝

# yum -y groupinstall "Development Tools"
rpm -ivh http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-1.noarch.rpm
yum -y install redis
systemctl enable redis.service
systemctl start redis.service
systemctl --all | grep redis

參數

[root@localhost ~]# redis-server --help
Usage: ./redis-server [/path/to/redis.conf] [options]
./redis-server - (read config from stdin)
./redis-server -v or --version
./redis-server -h or --help
./redis-server --test-memory <megabytes>

Examples:
./redis-server (run the server with default conf)
./redis-server /etc/redis/6379.conf
./redis-server --port 7777
./redis-server --port 7777 --slaveof 127.0.0.1 8888
./redis-server /etc/myredis.conf --loglevel verbose

Sentinel mode:
./redis-server /etc/sentinel.conf --sentinel
[root@localhost ~]#

設定檔案 /etc/retdis.conf

測試

[root@localhost ~]# redis-server -v
Redis server v=2.8.13 sha=00000000:0 malloc=jemalloc-3.6.0 bits=64 build=3693c764996dafec
[root@localhost ~]#

[root@localhost ~]# ps aux | grep redis
redis 14009 0.0 0.3 142668 5700 ? Ssl 18:50 0:00 /usr/bin/redis-server 127.0.0.1:6379
root 14026 0.0 0.0 112640 980 pts/1 R+ 18:52 0:00 grep --color=auto redis
[root@localhost ~]#

[root@localhost ~]# netstat -ntplu | grep redis
tcp 0 0 127.0.0.1:6379 0.0.0.0:* LISTEN 14009/redis-server
[root@localhost ~]#

[root@localhost ~]# systemctl stop firewalld
[root@localhost ~]# systemctl status firewalld
firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled)
Active: inactive (dead) since Tue 2014-09-23 20:11:59 CST; 5s ago
Main PID: 884 (code=exited, status=0/SUCCESS)

Jul 25 20:09:07 localhost.localdomain systemd[1]: Started firewalld - dynamic...
Sep 23 20:11:59 localhost.localdomain systemd[1]: Stopping firewalld - dynami...
Sep 23 20:11:59 localhost.localdomain systemd[1]: Stopped firewalld - dynamic...
Hint: Some lines were ellipsized, use -l to show in full.
[root@localhost ~]#

[root@localhost ~]# redis-cli set foo bar
OK
[root@localhost ~]# redis-cli get foo
"bar"

[root@localhost ~]# yum -y install telnet
[root@localhost ~]# telnet 127.0.0.1 6379
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
set foo 3
+OK
get foo
$1
3
^]
telnet> quit
Connection closed.
[root@localhost ~]#

更多命令介紹參考文檔介紹。
http://code.google.com/p/redis/wiki/CommandReference

(完)

相關

[研究] Redis 2.8.13 資料庫安裝(yum)(CentOS 7.0 x86_64)
http://shaurong.blogspot.com/2014/09/redis-2813-yumcentos-70-x8664.html

[研究] Redis 2.8.14 資料庫安裝(tar.gz)(CentOS 7.0 x86_64)
http://shaurong.blogspot.com/2014/09/redis-2814-targzcentos-70-x8664.html

[研究] Redis 2.8.4 資料庫安裝(tar.gz)(CentOS 6.5 x64)
http://shaurong.blogspot.com/2014/01/redis-284-targzcentos-65-x64.html

[研究] Redis 2.4.10 資料庫安裝(yum) (CentOS 6.5 x64)
http://shaurong.blogspot.tw/2014/01/redis-2410-yum-centos-65-x64.html

[研究] Redis 2.0.4 資料庫安裝 (CentOS 5.5 x86)
http://forum.icst.org.tw/phpbb/viewtopic.php?t=19575

[研究] 客製化 "傳送至" 選單 (Windows 7)

[研究] 客製化 "傳送至" 選單 (Windows 7)

2014-09-23

把捷徑丟 WinDirStat 丟入此目錄

C:\Users\{YourUsername}\AppData\Roaming\Microsoft\Windows\SendTo

"傳送至" 選單會多此項可用

(完)

2014年9月22日星期一

[研究] ntopng 1.2.2 安裝(svn)(CentOS 7.0 x86_64)

[研究] ntopng 1.2.2 安裝(svn)(CentOS 7.0 x86_64)

2014-09-22

ntopng 是 High-Speed Web-based Traffic Analysis and Flow Collection
ntopng 是 ntop 的下一代 (the next generation version of the original ntop)

官方網站
http://www.ntop.org/products/ntop/

安裝參考
http://www.ntop.org/ntop/mini-tutorial-fresh-install-of-ntopng-on-centos-7/

# yum -y groupinstall "Development Tools"
rpm -ivh http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-1.noarch.rpm
yum -y install redis
systemctl enable redis.service
systemctl start redis.service
systemctl --all | grep redis

yum install -y subversion autoconf automake make gcc libpcap-devel libxml2-devel sqlite-devel libtool glib2-devel gcc-c++
cd /usr/local/src
svn co https://svn.ntop.org/svn/ntop/trunk/ntopng
cd ntopng
./autogen.sh
./configure
make
cp -p ntopng /usr/bin
#./ntopng --help
#./ntopng -V
#v.1.2.2 (r8323)

#Change user admin password
#echo -n fatboy | md5sum
#1f519e089fc11e3fe61fb424f76ca133 -

#redis-cli ping
#PONG
#redis-cli SET user.admin.password 1f519e089fc11e3fe61fb424f76ca133
#OK

#Start ntopng
/usr/bin/ntopng &

#service iptables stop
systemctl stop iptables

用瀏覽器連上 port 3000
例如：
http://192.168.128.20:3000/

username: admin
password: admin

http://www.ntop.org/ntop/mini-tutorial-fresh-install-of-ntopng-on-centos-7/

http://majzel.blogspot.tw/2014/08/network-monitoring-with-ntopng-under.html

(完)

相關

[研究] ntopng 1.2.2 安裝(svn)(CentOS 7.0 x86_64)
http://shaurong.blogspot.com/2014/09/ntopng-122-centos-70-x8664.html

[研究] NTOPNG 1.2.2 (yum)安裝 (CentOS 6.5 x86_64)
http://shaurong.blogspot.com/2014/09/ntopng-122-yum-centos-65-x8664.html

[研究] NTOPNG 1.1 (yum)安裝 (CentOS 6.4 x64)
http://shaurong.blogspot.com/2013/11/ntopng-11-yum-centos-64-x64.html

[研究] NTOP 5.0.1 快速安裝程式(tar.gz)(CentOS 7.0 x64_86)
http://shaurong.blogspot.com/2014/08/ntop-501-targzcentos-70-c6486.html

[研究] Trac 1.0 專案管理、Bug 缺陷追蹤軟體安裝 (CentOS 6.5 x86_64)

[研究] Trac 1.0 專案管理、缺陷追蹤軟體安裝 (CentOS 6.5 x86_64)

2014-09-22

Trac是Edgewall公司開發並維護的開放原始碼網頁介面專案管理、缺陷追蹤軟體。Trac的靈感來自於CVSTrac，因為能夠與Subversion介面，所以最初叫做svntrac。

Trac使用Python程式語言開發。在2005年中以前，Trac以GPL發行；直到0.9版開始使用修改過的BSD授權條款釋出[1]。基本上都是屬於自由軟體的授權條款。

官方網站
http://trac.edgewall.org/

安裝參考
http://trac.edgewall.org/demo-1.0/wiki/TracInstall

安裝 (假設建立 trac 項目 test1)

yum -y install mysql mysql-server mysql-devel httpd mod_dav_svn mod_python MySQL-python python-devel subversion
# CentOS 7.0 的 yum 不提供 mod_python

yum -y install python-setuptools
#注意 Trac 後面是兩個等號
easy_install Trac==1.0

#先啟動 MySQL Daemon 才能trac 建立資料庫
/etc/init.d/mysqld start

#trac 只能使用utf-8字符集，否則報錯
mysql -e "CREATE DATABASE trac_test1 DEFAULT CHARACTER SET utf8 COLLATE utf8_general_ci; "
mysql -e "GRANT ALL ON trac_test1.* TO tracuser@'127.0.0.1' IDENTIFIED BY 'password';"
#mysql -e "CREATE DATABASE trac_test2 DEFAULT CHARACTER SET utf8 COLLATE utf8_general_ci; "
#mysql -e "GRANT ALL ON trac_test2.* TO tracuser@'127.0.0.1' IDENTIFIED BY 'password';"
mysql -e "FLUSH PRIVILEGES;"

# 建立 test1 項目
mkdir /var/trac/test1 -p
chown apache.apache /var/trac -R
trac-admin /var/trac/test1 initenv
# [My Project]> 請輸入 test1
# [sqlite:db/trac.db]> 請輸入 mysql://tracuser:password@127.0.0.1/trac_test1

# 設定
# /var/trac/test1/conf/trac.ini

# 啟動
tracd --port 8000 /var/trac/test1 &

(完)

Trac 維基百科
http://zh.wikipedia.org/wiki/Trac

[研究] Trac 0.12.5 專案管理、Bug 缺陷追蹤軟體安裝 (CentOS 6.5 x86_64)

[研究] Trac 0.12.5 專案管理、Bug 缺陷追蹤軟體安裝 (CentOS 6.5 x86_64)

2014-09-22

Trac is an enhanced wiki and issue tracking system for software development projects.

官方網站
http://trac.edgewall.org/

安裝參考
http://trac.edgewall.org/demo-1.0/wiki/TracInstall

安裝 (假設建立兩個 trac 項目)

yum -y install mysql mysql-server mysql-devel httpd mod_dav_svn mod_python MySQL-python python-devel subversion trac
# CentOS 7.0 的 yum 不提供 mod_python 和 trac , mysql-server 必須換成 mariadb-server

#先啟動 MySQL Daemon 才能trac 建立資料庫
/etc/init.d/mysqld start

#trac 只能使用utf-8字符集，否則報錯
mysql -e "CREATE DATABASE trac_test1 DEFAULT CHARACTER SET utf8 COLLATE utf8_general_ci; "
mysql -e "GRANT ALL ON trac_test1.* TO tracuser@'127.0.0.1' IDENTIFIED BY 'password';"
mysql -e "CREATE DATABASE trac_test2 DEFAULT CHARACTER SET utf8 COLLATE utf8_general_ci; "
mysql -e "GRANT ALL ON trac_test2.* TO tracuser@'127.0.0.1' IDENTIFIED BY 'password';"
mysql -e "FLUSH PRIVILEGES;"

# 建立 test1 項目
mkdir /var/trac -p
chown apache.apache /var/trac -R
cd /var/trac
mkdir test1
chown apache.apache test1
trac-admin test1 initenv
# [My Project]> 請輸入 test1
# [sqlite:db/trac.db]> 請輸入 mysql://tracuser:password@127.0.0.1/trac_test1

# 設定
# /var/trac/test1/conf/trac.ini

# 啟動
tracd --port 8000 /var/trac/test1 &

#-----------------------------------

# 建立 test2 項目
mkdir /var/trac -p
chown apache.apache /var/trac -R
cd /var/trac
mkdir test2
chown apache.apache test2
trac-admin test1 initenv
# [My Project]> 請輸入 test2
# [sqlite:db/trac.db]> 請輸入 mysql://tracuser:password@127.0.0.1/trac_test2

# 設定
# /var/trac/test2/conf/trac.ini

# 啟動
tracd --port 8002 /var/trac/test2 &

(完)

相關

CentOS 6.5下部署trac服務器
http://bristol.blog.51cto.com/1004110/1439092

2014年9月19日星期五

[研究] Testopia 測試案例 (Test Case) 管理系統(CentOS 6.5 x86_64)

[研究] Testopia 測試案例 (Test Case) 管理系統(CentOS 6.5 x86_64)

2014-09-19

官方網站
https://developer.mozilla.org/zh-TW/docs/Mozilla/Bugzilla/Testopia

Testopia 2.5 (Bugzilla 4.2) 下載
http://ftp.mozilla.org/pub/mozilla.org/webtools/testopia/testopia-2.5-BUGZILLA-4.2.tar.gz
ftp://ftp.mozilla.org/pub/mozilla.org/webtools/testopia/testopia-2.5-BUGZILLA-4.2.tar.gz

準備工作

BugZilla 需要先安裝好

[研究] BugZilla 4.4.5 缺陷管理系統快速安裝程式 (CentOS 6.5 x86_64)
http://shaurong.blogspot.tw/2014/09/bugzilla-445-centos-65-x8664.html

安裝

yum -y install httpd
service httpd restart
chkconfig httpd on

#解壓縮︰ tar zxvf testopia-2.5-BUGZILLA-4.2.tar.gz
#把裡面的內容丟到 bugzilla 的根目錄，例如 /var/www/html/bugzilla
cd /usr/local/src
wget http://ftp.mozilla.org/pub/mozilla.org/webtools/testopia/testopia-2.5-BUGZILLA-4.2.tar.gz
mkdir -p /var/www/html/testopia
#tar zxvf testopia-2.5-BUGZILLA-4.2.tar.gz -C /var/www/html/testopia
tar zxvf testopia-2.5-BUGZILLA-4.2.tar.gz -C /var/www/html/bugzilla/

#執行 checksetup 的 perl 檔 :
cd /var/www/html/bugzilla/
./checksetup.pl
firefox http://localhost/bugzilla &

這樣就安裝完成了。(畫面上可以看到 Testopia 下拉選單)

基本的使用流程如下︰

新增一個 Product 以及多個 Components : Administration > Product
新增一個 Test Plan
新增多個 Test Cases : 要注意的是狀態要 CONFIRMED 之後才能被挑選來執行。
新增一個 Build : ex 1001
新增一個 Environemnt : 這邊的 Environemnt，通常是指一些像是OS，Browser，Hardware等等不同的執行環境。
新增一個 Test Run : 選擇要執行的 Test Plan，以及選擇要跑的Build，挑選 Test Case
執行 Test Run : 把相
產成 Report，在 Test Run 上按右鍵，就可以把相關的的報告展現在 Dashboard上面

(完)

相關

[研究] Testopia 測試案例 (Test Case) 管理系統(CentOS 7.0 x86_64)
http://shaurong.blogspot.com/2014/09/testopia-test-case-centos-70-x8664.html

[研究] Testopia 測試案例 (Test Case) 管理系統(CentOS 6.5 x86_64)
http://shaurong.blogspot.com/2014/09/testopia-test-case-centos-65-x8664.html

[研究] BugZilla 4.4.5 缺陷管理系統快速安裝程式(CentOS 7.0 x86_64)
http://shaurong.blogspot.tw/2014/09/bugzilla-445-centos-70-x8664.html

[研究] BugZilla 4.4.5 缺陷管理系統快速安裝程式 (CentOS 6.5 x86_64)
http://shaurong.blogspot.tw/2014/09/bugzilla-445-centos-65-x8664.html

Testopia 測試案例管理系統簡介
http://blog.codylab.com/testcase-management-using-testopia/

[研究] NTOPNG 1.2.2 (yum)安裝 (CentOS 6.5 x86_64)

[研究] NTOPNG 1.2.2 (yum)安裝 (CentOS 6.5 x86_64)

2014-09-19

ntopng 是 High-Speed Web-based Traffic Analysis and Flow Collection
ntopng 是 ntop 的下一代 (the next generation version of the original ntop)

官方網站
http://www.ntop.org/products/ntop/

下載
http://sourceforge.net/projects/ntop/files/ntopng/

安裝參考
https://svn.ntop.org/svn/ntop/trunk/ntopng/doc/UserGuide.pdf
http://www.nmon.net/centos/
https://ntop.org/svn/ntop/trunk/ntopng/README.ntopng

開始安裝

# 編寫 ntop.repo

vi /etc/yum.repos.d/ntop.repo
內容如下
[ntop]
name=ntop packages
baseurl=http://rpm.ntop.org/$releasever/$basearch/
enabled=1
gpgkey=http://www.nmon.net/centos/RPM-GPG-KEY-deri

# 用 yum 安裝

rpm -Uvh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
yum -y install pfring n2disk nProbe ntopng
# No package nProbe available.

# 設定

chkconfig ntopng on
chkconfig redis on
chkconfig --list | grep ntopng
chkconfig --list | grep redis

cd /usr/local/share/ntopng/httpdocs/geoip
wget http://download.maxmind.com/download/geoip/database/asnum/GeoIPASNum.dat.gz
gunzip GeoIPASNum.dat.gz
wget http://download.maxmind.com/download/geoip/database/asnum/GeoIPASNumv6.dat.gz
gunzip GeoIPASNumv6.dat.gz
wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz
gunzip GeoLiteCity.dat.gz
wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCityv6-beta/GeoLiteCityv6.dat.gz
gunzip GeoLiteCityv6.dat.gz

mkdir /etc/ntopng

vi /etc/ntopng/ntopng.start
內容
--local-networks "192.168.128.0"
--interface 1

vi /etc/ntopng/ntopng.conf
內容
-G=/var/run/ntopng.pid

# 啟動

service redis start
service ntopng start

service iptables stop

用瀏覽器連上 port 3000
例如：
http://192.168.128.20:3000/

username: admin
password: admin

(完)

相關

[研究] NTOPNG 1.2.2 (yum)安裝 (CentOS 6.5 x86_64)
http://shaurong.blogspot.com/2014/09/ntopng-122-yum-centos-65-x8664.html

[研究] NTOPNG 1.1 (yum)安裝 (CentOS 6.4 x86_64)
http://shaurong.blogspot.tw/2013/11/ntopng-11-yum-centos-64-x64.html

[研究] ntop 5.0.1.tar.gz (CentOS 6.3) 快速安裝程式
http://shaurong.blogspot.tw/2012/12/ntop-501targz.html

[研究] NTOP 5.0 安裝(yum)(Fedora 18 x86)
http://shaurong.blogspot.tw/2013/02/ntop-50-yumfedora-18.html

[研究] Microsoft Baseline Security Analyzer 2.3 ( MBSA ) 弱點評估掃描工具

[研究] Microsoft Baseline Security Analyzer 2.3 ( MBSA ) 弱點評估掃描工具

2014-09-19

MBSA 是 Microsoft 為系統管理員、安全性稽核人員和 IT 專業人員免費提供的最新版安全性與弱點評估掃描工具。

MBSA 是一個簡單易用的工具，設計讓 IT 專業人員協助中小型企業判斷其安全性狀態是否符合 Microsoft 的安全性建議，並會根據結果提供具體的矯正指示。使用 MBSA 偵測一般常犯的安全性設定錯誤和電腦系統所遺漏的安全性更新，以增強您的安全性管理流程。

官方下載
2013-11-12
http://www.microsoft.com/en-us/download/details.aspx?id=7558

命令列掃描結果

Security assessment: Incomplete Scan
Computer name: WORKGROUP\WIN-AQ5MBV0BQQ5
IP address: 127.0.0.1
Security report name: WORKGROUP - WIN-AQ5MBV0BQQ5 (2014-9-18 下午 04-27)
Scan date: 2014/9/18 下午 04:27
Scanned with MBSA version: 2.3.2208.0
Catalog synchronization date:
Security update catalog: Microsoft Update

Security Updates Scan Results

Issue: Developer Tools, Runtimes, and Redistributables Security Updates
Score: Check failed (critical)
Result: 2 security updates are missing.

Security Updates

| MS12-021 | Missing | Security Update for Microsoft Visual Studio 2010 Service Pack 1 (KB2645410) | Important |
| MS11-025 | Missing | Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2538243) | Important |

Current Update Compliance

| MS11-025 | Installed | Security Update for Microsoft Visual C++ 2010 Service Pack 1 Redistributable Package (KB2565063) | Important |

Issue: SQL Server Security Updates
Score: Check failed (critical)
Result: 1 security updates are missing.

Security Updates

| MS14-044 | Missing | Security Update for SQL Server 2014 (KB2977315) | Important |

Current Update Compliance

| MS06-061 | Installed | MSXML 6.0 RTM Security Update (925673) | Critical |

Issue: Windows Security Updates
Score: Check failed (critical)
Result: 15 security updates are missing. 2 service packs or update rollups are missing.

Security Updates

| 2894856 | Missing | Security Update for Microsoft .NET Framework 4.5.1 on Windows 8.1 and Windows Server 2012 R2 for x64-based Systems (KB2894856) | |
| MS14-053 | Missing | Security Update for Microsoft .NET Framework 4.5.1 and 4.5.2 on Windows 8.1 and Windows Server 2012 R2 x64-based Systems (KB2977765) | Important |
| MS14-054 | Missing | Security Update for Windows Server 2012 R2 (KB2988948) | Important |
| MS14-045 | Missing | Security Update for Windows Server 2012 R2 (KB2993651) | Important |
| MS14-026 | Missing | Security Update for Microsoft .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2 for x64-based Systems (KB2931358) | Important |
| MS14-046 | Missing | Security Update for Microsoft .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2 for x64-based Systems (KB2966828) | Important |
| MS14-053 | Missing | Security Update for Microsoft .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2 for x64-based Systems (KB2973114) | Important |
| 2894852 | Missing | Security Update for Microsoft .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2 for x64-based Systems (KB2894852) | |
| MS14-045 | Missing | Security Update for Windows Server 2012 R2 (KB2976897) | Important |
| MS14-046 | Missing | Security Update for Microsoft .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2 for x64-based Systems (KB2966826) | Important |
| MS14-049 | Missing | Security Update for Windows Server 2012 R2 (KB2918614) | Important |
| MS14-052 | Missing | Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 (KB2977629) | Moderate |
| MS14-051 | Missing | Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 (KB2976627) | Moderate |
| MS14-053 | Missing | Security Update for Microsoft .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2 for x64-based Systems (KB2972213) | Important |
| MS14-047 | Missing | Security Update for Windows Server 2012 R2 (KB2978668) | Important |

Update Rollups and Service Packs

| 2981580 | Missing | Update for Windows Server 2012 R2 (KB2981580) | |
| 890830 | Missing | Windows Malicious Software Removal Tool for Windows 8, 8.1 and Windows Server 2012, 2012 R2 x64 Edition - September 2014 (KB890830) | |

Current Update Compliance

| MS14-036 | Installed | Security Update for Windows Server 2012 R2 (KB2964736) | Critical |
| MS14-037 | Installed | Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 (KB2962872) | Moderate |
| MS14-027 | Installed | Security Update for Windows Server 2012 R2 (KB2926765) | Important |
| 2920189 | Installed | Security Update for Windows Server 2012 R2 (KB2920189) | |
| 2973351 | Installed | Security Update for Windows Server 2012 R2 (KB2973351) | |
| MS14-033 | Installed | Security Update for Windows Server 2012 R2 (KB2939576) | Low |
| MS14-031 | Installed | Security Update for Windows Server 2012 R2 (KB2957189) | Important |
| MS14-026 | Installed | Security Update for Microsoft .NET Framework 4.5.1 on Windows 8.1 and Windows Server 2012 R2 for x64-based Systems (KB2931366) | Important |
| 890830 | Installed | Windows Malicious Software Removal Tool for Windows 8, 8.1 and Windows Server 2012, 2012 R2 x64 Edition - July 2014 (KB890830) | |
| MS14-018 | Installed | Windows Server 2012 R2 Update (KB2919355) | Critical |
| MS14-036 | Installed | Security Update for Windows Server 2012 R2 (KB2964718) | Critical |
| MS14-039 | Installed | Security Update for Windows Server 2012 R2 (KB2973201) | Important |
| MS14-030 | Installed | Security Update for Windows Server 2012 R2 (KB2965788) | Important |
| MS14-040 | Installed | Security Update for Windows Server 2012 R2 (KB2961072) | Important |

Operating System Scan Results

Administrative Vulnerabilities

Issue: Local Account Password Test
Score: Check passed
Result: Some user accounts (1 of 2) have blank or simple passwords, or could not be analyzed.
Detail:
| User | Weak Password | Locked Out | Disabled |
| Guest | Weak | - | Disabled |
| Administrator | - | - | - |

Issue: File System
Score: Check passed
Result: All hard drives (1) are using the NTFS file system.
Detail:
| Drive Letter | File System |
| C: | NTFS |

Issue: Password Expiration
Score: Check failed (non-critical)
Result: Some user accounts (1 of 2) have non-expiring passwords.
Detail:
| User |
| Guest |

Issue: Guest Account
Score: Check passed
Result: The Guest account is disabled on this computer.

Issue: Autologon
Score: Check passed
Result: Autologon is not configured on this computer.

Issue: Restrict Anonymous
Score: Check passed
Result: Computer is properly restricting anonymous access.

Issue: Administrators
Score: Check passed
Result: No more than 2 Administrators were found on this computer.
Detail:
| User |
| Administrator |

Issue: Windows Firewall
Score: Best practice
Result: Windows Firewall is enabled and has exceptions configured. Windows Firewall is enabled on all network connections.
Detail:
| Connection Name | Firewall | Exceptions |
| All Connections | On | Ports, Programs |
| Ethernet0 | On | Ports*, Programs* |

Issue: Automatic Updates
Score: Check failed (non-critical)
Result: Updates are not automatically downloaded or installed on this computer.

Issue: Incomplete Updates
Score: Best practice
Result: No incomplete software update installations were found.

Additional System Information

Issue: Windows Version
Score: Best practice
Result: Computer is running Microsoft Windows Server 2012 R2.

Issue: Auditing
Score: Best practice
Result: Neither Logon Success nor Logon Failure auditing are enabled. Enable auditing and turn on auditing for specific events such as logon and logoff. Be sure to monitor your event log to watch for unauthorized access.

Issue: Shares
Score: Best practice
Result: 2 share(s) are present on your computer.
Detail:
| Share | Directory | Share ACL | Directory ACL |
| ADMIN$ | C:\Windows | Admin Share | NT SERVICE\TrustedInstaller - F, NT AUTHORITY\SYSTEM - RWXD, BUILTIN\Administrators - RWXD, BUILTIN\Users - RX, APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES - RX |
| C$ | C:\ | Admin Share | NT AUTHORITY\SYSTEM - F, BUILTIN\Administrators - F, BUILTIN\Users - RX |

Issue: Services
Score: Best practice
Result: Some potentially unnecessary services are installed.
Detail:
| Service | State |
| World Wide Web Publishing Service | Running |

Internet Information Services (IIS) Scan Results

Administrative Vulnerabilities

Issue: IIS Status
Score: Unable to scan
Result: The IIS Common Files are not installed on the local computer. Refer to the system requirements list under Microsoft Baseline Security Analyzer Help.

Issue: IIS Status
Score: Unable to scan
Result: The IIS Common Files are not installed on the local computer. Refer to the system requirements list under Microsoft Baseline Security Analyzer Help.

Issue: IIS Status
Score: Unable to scan
Result: The IIS Common Files are not installed on the local computer. Refer to the system requirements list under Microsoft Baseline Security Analyzer Help.

Issue: IIS Status
Score: Unable to scan
Result: The IIS Common Files are not installed on the local computer. Refer to the system requirements list under Microsoft Baseline Security Analyzer Help.

Issue: IIS Status
Score: Unable to scan
Result: The IIS Common Files are not installed on the local computer. Refer to the system requirements list under Microsoft Baseline Security Analyzer Help.

Issue: IIS Lockdown Tool
Score: Check passed
Result: The IIS Lockdown tool was developed for IIS 4.0, 5.0, and 5.1, and is not needed for new Windows Server 2003 installations running IIS 6.0.

Additional System Information

Issue: Domain Controller Test
Score: Best practice
Result: IIS is running on a machine that is not a domain controller.

SQL Server Scan Results

Instance (default)

Administrative Vulnerabilities

Issue: Domain Controller Test
Score: Check passed
Result: SQL Server and/or MSDE is not running on a domain controller.

Issue: SQL Server/MSDE Security Mode
Score: Check failed (non-critical)
Result: SQL Server and/or MSDE authentication mode is set to SQL Server and/or MSDE and Windows (Mixed Mode).

Issue: CmdExec role
Score: Check passed
Result: CmdExec is restricted to sysadmin only.

Issue: Registry Permissions
Score: Check passed
Result: The Everyone group does not have more than Read access to the SQL Server and/or MSDE registry keys.

Issue: Folder Permissions
Score: Check passed
Result:
Detail:
| Instance | Folder | User |
| (default) | Internal error. | - |

Issue: Sysadmin role members
Score: Check passed
Result: BUILTIN\Administrators group is not part of sysadmin role.

Issue: Guest Account
Score: Check passed
Result: The Guest account is not enabled in any of the databases.

Issue: Sysadmins
Score: Check failed (non-critical)
Result: More than 2 members of sysadmin role are present.

Issue: Service Accounts
Score: Unable to scan
Result: SQL Server, SQL Server Agent, MSDE and/or MSDE Agent service accounts should not be members of the local Administrators group or run as LocalSystem.
Detail:
| Instance | Service | Account | Issue |
| (default) | MSSQLServer | NT Service\MSSQLSERVER | This is a Domain Account. Baseline Security Analyzer cannot determine whether it belongs to the Domain Admins group due to the following error: 1212 指定的網域名稱格式不正確。
. |
| (default) | SQLServerAgent | NT Service\SQLSERVERAGENT | This is a Domain Account. Baseline Security Analyzer cannot determine whether it belongs to the Domain Admins group due to the following error: 1212 指定的網域名稱格式不正確。
. |

Issue: Password Policy
Score: Check failed (critical)
Result: Enable password expiration for the SQL server accounts.

Issue: SSIS Roles
Score: Check passed
Result: The BUILTIN Admin does not belong to the SSIS roles.

Issue: Sysdtslog
Score: Check passed
Result: Sysdtslogs90 table does not exist in the Master or MSDB databases

Instance MSAS12.MSSQLSERVER

Administrative Vulnerabilities

Issue: Domain Controller Test
Score: Check passed
Result: SQL Server and/or MSDE is not running on a domain controller.

Issue: SQL Server/MSDE Security Mode
Score: Check failed (non-critical)
Result: SQL Server and/or MSDE authentication mode is set to SQL Server and/or MSDE and Windows (Mixed Mode).

Issue: CmdExec role
Score: Check passed
Result: CmdExec is restricted to sysadmin only.

Issue: Registry Permissions
Score: Check passed
Result: The Everyone group does not have more than Read access to the SQL Server and/or MSDE registry keys.

Issue: Folder Permissions
Score: Check passed
Result:
Detail:
| Instance | Folder | User |
| MSAS12.MSSQLSERVER | Internal error. | - |

Issue: Sysadmin role members
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Guest Account
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Sysadmins
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Service Accounts
Score: Check passed
Result: SQL Server, SQL Server Agent, MSDE and/or MSDE Agent service accounts are not members of the local Administrators group and do not run as LocalSystem.

Issue: Password Policy
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: SSIS Roles
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Sysdtslog
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Instance MSRS12.MSSQLSERVER

Administrative Vulnerabilities

Issue: Domain Controller Test
Score: Check passed
Result: SQL Server and/or MSDE is not running on a domain controller.

Issue: SQL Server/MSDE Security Mode
Score: Check failed (non-critical)
Result: SQL Server and/or MSDE authentication mode is set to SQL Server and/or MSDE and Windows (Mixed Mode).

Issue: CmdExec role
Score: Check passed
Result: CmdExec is restricted to sysadmin only.

Issue: Registry Permissions
Score: Check passed
Result: The Everyone group does not have more than Read access to the SQL Server and/or MSDE registry keys.

Issue: Folder Permissions
Score: Check passed
Result:
Detail:
| Instance | Folder | User |
| MSRS12.MSSQLSERVER | Internal error. | - |

Issue: Sysadmin role members
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Guest Account
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Sysadmins
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Service Accounts
Score: Check passed
Result: SQL Server, SQL Server Agent, MSDE and/or MSDE Agent service accounts are not members of the local Administrators group and do not run as LocalSystem.

Issue: Password Policy
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: SSIS Roles
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Sysdtslog
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Instance MSSQL12.MSSQLSERVER

Administrative Vulnerabilities

Issue: Domain Controller Test
Score: Check passed
Result: SQL Server and/or MSDE is not running on a domain controller.

Issue: SQL Server/MSDE Security Mode
Score: Check failed (non-critical)
Result: SQL Server and/or MSDE authentication mode is set to SQL Server and/or MSDE and Windows (Mixed Mode).

Issue: CmdExec role
Score: Unable to scan
Result: Error reading registry. If you are scanning a remote computer the Remote Registry service on that computer should be enabled. (13)

Issue: Registry Permissions
Score: Check passed
Result: The Everyone group does not have more than Read access to the SQL Server and/or MSDE registry keys.

Issue: Folder Permissions
Score: Check failed (critical)
Result: Permissions on the SQL Server and/or MSDE installation folders are not set properly.
Detail:
| Instance | Folder | User |
| MSSQL12.MSSQLSERVER | C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn | \CREATOR OWNER |

| MSSQL12.MSSQLSERVER | C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn | BUILTIN\Users |
| MSSQL12.MSSQLSERVER | C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Binn | NT SERVICE\MSSQLSERVER |
| MSSQL12.MSSQLSERVER | C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Data | \CREATOR OWNER |
| MSSQL12.MSSQLSERVER | C:\Program Files\Microsoft SQL Server\MSSQL12.MSSQLSERVER\MSSQL\Data | NT SERVICE\MSSQLSERVER |

Issue: Sysadmin role members
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Guest Account
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Sysadmins
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Service Accounts
Score: Check passed
Result: SQL Server, SQL Server Agent, MSDE and/or MSDE Agent service accounts are not members of the local Administrators group and do not run as LocalSystem.

Issue: Password Policy
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: SSIS Roles
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Issue: Sysdtslog
Score: Check not performed
Result: [DBNETLIB][ConnectionOpen (Connect()).]SQL Server 不存在或拒絕存取。

Instance (default) (32-bit)

Administrative Vulnerabilities

Issue: Domain Controller Test
Score: Check passed
Result: SQL Server and/or MSDE is not running on a domain controller.

Issue: SQL Server/MSDE Security Mode
Score: Check failed (non-critical)
Result: SQL Server and/or MSDE authentication mode is set to SQL Server and/or MSDE and Windows (Mixed Mode).

Issue: CmdExec role
Score: Check passed
Result: CmdExec is restricted to sysadmin only.

Issue: Registry Permissions
Score: Check passed
Result: The Everyone group does not have more than Read access to the SQL Server and/or MSDE registry keys.

Issue: Folder Permissions
Score: Check passed
Result:
Detail:
| Instance | Folder | User |
| (default) (32-bit) | Internal error. | - |

Issue: Sysadmin role members
Score: Check passed
Result: BUILTIN\Administrators group is not part of sysadmin role.

Issue: Guest Account
Score: Check passed
Result: The Guest account is not enabled in any of the databases.

Issue: Sysadmins
Score: Check failed (non-critical)
Result: More than 2 members of sysadmin role are present.

Issue: Service Accounts
Score: Unable to scan
Result: SQL Server, SQL Server Agent, MSDE and/or MSDE Agent service accounts should not be members of the local Administrators group or run as LocalSystem.
Detail:
| Instance | Service | Account | Issue |
| (default) (32-bit) | MSSQLServer | NT Service\MSSQLSERVER | This is a Domain Account. Baseline Security Analyzer cannot determine whether it belongs to the Domain Admins group due to the following error: 1212 指定的網域名稱格式不正確。
. |
| (default) (32-bit) | SQLServerAgent | NT Service\SQLSERVERAGENT | This is a Domain Account. Baseline Security Analyzer cannot determine whether it belongs to the Domain Admins group due to the following error: 1212 指定的網域名稱格式不正確。
. |

Issue: Password Policy
Score: Check failed (critical)
Result: Enable password expiration for the SQL server accounts.

Issue: SSIS Roles
Score: Check passed
Result: The BUILTIN Admin does not belong to the SSIS roles.

Issue: Sysdtslog
Score: Check passed
Result: Sysdtslogs90 table does not exist in the Master or MSDB databases

Desktop Application Scan Results

Administrative Vulnerabilities

Issue: IE Zones
Score: Check passed
Result: Internet Explorer zones have secure settings for all users.

Issue: IE Enhanced Security Configuration for Administrators
Score: Check failed (critical)
Result: The use of Internet Explorer is not restricted for administrators on this server.

Issue: IE Enhanced Security Configuration for Non-Administrators
Score: Check failed (non-critical)
Result: The use of Internet Explorer is not restricted for non-administrators on this server.

Issue: Macro Security
Score: Check not performed
Result: No supported Microsoft Office products are installed.

(完)

相關

Baseline Security Analyzer
https://docs.microsoft.com/zh-tw/security-updates/security/20214359

Microsoft Baseline Security Analyzer(MBSA)
http://www.netqna.com/2014/03/microsoft-baseline-security-analyzermbsa.html

[資訊安全]MBSA 遠端掃描
http://www.netqna.com/2014/03/mbsa.html

【工具】Microsoft Baseline Security Analyzer(MBSA)簡介及使用說明
https://dotblogs.com.tw/momodablue/2010/12/08/19996

訂閱：文章 (Atom)

2014年9月27日 星期六

2014年9月26日 星期五

2014年9月23日 星期二

2014年9月22日 星期一

2014年9月19日 星期五

2014年9月27日星期六

2014年9月26日星期五

2014年9月23日星期二

2014年9月22日星期一

2014年9月19日星期五