The best-selling text on SSH, newly revised and updated! Secure Shell (SSH) lets sysadmins securely manage remote systems. It’s powerful, complicated, and confusing. Lose the confusion. SSH Mastery: OpenSSH, PuTTY, Tunnels and Keys rescues you from sifting through decades of obsolete online tutorials and quickly makes you an SSH journeyman. You’ll learn to · eliminate passwords · manage access by users, groups, addresses, and more · securely move files around your network · forward graphic displays · proxy TCP connections · build SOCKS proxies · centrally manage and distribute keys and configurations · use SSH as secure transport for other applications · build virtual private networks · create Certificate Authorities for truly large scale deployment Master Secure Shell with SSH Mastery! #ssh2e

Secure Shell (SSH) lets systems administrators securely manage remote systems. But most people only use the bare minimum SSH offers. Used properly, SSH simplifies your job. This book saves you from sifting a decade of obsolete online tutorials and quickly gets you running: SSH with the OpenSSH server and the PuTTY and OpenSSH clients. You will: Eliminate passwords. Manage access to your SSH server by users, groups, addresses, and more Securely move files around your network Forward graphic displays from one host to another Forward TCP connections Centrally manage host keys and client configurations Use SSH as a secure transport for other applications Secure applications run over SSH Build Virtual Private Networks with OpenSSH And more! This book simplifies the work of anyone using SSH. Small enough to read and implement quickly, exhaustive enough to include everything most of us need plus a little more. Master SSH with SSH Mastery.

Pluggable Authentication Modules: Threat or Menace? PAM is one of the most misunderstood parts of systems administration. Many sysadmins live with authentication problems rather than risk making them worse. PAM’s very nature makes it unlike any other Unix access control system. If you have PAM misery or PAM mysteries, you need PAM Mastery! With PAM Mastery, you’ll understand: · the different versions of PAM · the intricacies of Linux-PAM and OpenPAM · how PAM policies make decisions · how to debug PAM · the most frequently seen PAM modules · Linux-PAM extended controls and substacks · time-based one-time passwords · using SSH keys for more than SSH · password quality testing · policies from CentOS, Debian, and FreeBSD · and more! Transform PAM from a headache to an ally with PAM Mastery.

CONFINE YOUR SOFTWARE Jails are FreeBSD’s most legendary feature: known to be powerful, tricky to master, and cloaked in decades of dubious lore. Deploying jails calls upon every sysadmin skill you have, and more—but unleashing lightweight virtualization is so worth it. FreeBSD Mastery: Jails cuts through the clutter to expose the inner mechanisms of jails and unleash their power in your service. You will: · Understand how jails achieve lightweight virtualization · Understand the base system’s jail tools and the iocage toolkit · Optimally configure jail hardware · Manage jails from the host and from within the jail · Optimize disk space usage to support hundreds or thousands of jails · Comfortably work within the limits of jails · Implement fine-grained control of jail features · Build virtual networks · Deploy hierarchical jails · Constrain jail resource usage · And more! Strip away the mystery. Read FreeBSD Mastery: Jails today! “This is the sequel to Git Commit Murder, right ?” /phk, creator of the jail system

21st-Century Data Storage ZFS, the fast, flexible, self-healing filesystem, revolutionized data storage. Leveraging ZFS changes everything about managing FreeBSD systems. With FreeBSD Mastery: ZFS, you’ll learn to: -understand how your hardware affects ZFS -arrange your storage for optimal performance -configure datasets that match your enterprise’s needs -repair and monitor storage pools -expand your storage -use compression to enhance performance -determine if deduplication is right for your data -understand how copy-on-write changes everything -snapshot filesystems -automatically rotate snapshots -clone filesystems -understand how ZFS uses and manages space -do custom FreeBSD ZFS installs Whether you’re a long-term FreeBSD administrator or a new user, FreeBSD Mastery: ZFS will help you simplify storage. Master ZFS with FreeBSD Mastery: ZFS.

“I think we’re gonna need a bigger web server.” OpenBSD has a solid reputation for security and stability. It’s well known for the OpenSMTPd mail server, the LibreSSL cryptography library, and the PF packet filter. But nobody ever talks about the load balancer, or the web server. Until now. The httpd web server provides a fast, stable, secure environment for your web applications. The relayd load balancer lets you distribute Internet application load across multiple hosts. Between the two, you can slash hundreds of thousands of dollars off the cost of building, deploying, and managing applications. With Httpd and Relayd Mastery you’ll learn how to: · set up web sites · configure software to run in a chroot · run dozens or hundreds of sites on one host · dynamically reconfigure sites with Lua patterns · manage site logs · maintain free, globally-valid SSL certificates · improve performance with SSL stapling · install and maintain two-server clusters · distribute traffic between any number of hosts · stop worrying about old SSL versions and bad crypto algorithms Slash the amount of time you spend futzing with web servers. Get Httpd and Relayd Mastery today!

OpenBSD, the elegant, highly secure Unix-like operating system, is widely used as the basis for critical DNS servers, routers, firewalls, and more. This long-awaited second edition of Absolute OpenBSD maintains author Michael Lucas's trademark straightforward and practical approach that readers have enjoyed for years. You'll learn the intricacies of the platform, the technical details behind certain design decisions, and best practices, with bits of humor sprinkled throughout. This edition has been completely updated for OpenBSD 5.3, including new coverage of OpenBSD's boot system, security features like W^X and ProPolice, and advanced networking techniques. You'll learn how to: –Manage network traffic with VLANs, trunks, IPv6, and the PF packet filter –Make software management quick and effective using the ports and packages system –Give users only the access they need with groups, sudo, and chroots –Configure OpenBSD's secure implementations of SNMP, DHCP, NTP, hardware sensors, and more –Customize the installation and upgrade processes for your network and hardware, or build a custom OpenBSD release Whether you're a new user looking for a complete introduction to OpenBSD or an experienced sysadmin looking for a refresher, Absolute OpenBSD, 2nd Edition will give you everything you need to master the intricacies of the world's most secure operating system.

Absolute FreeBSD, 2nd Edition covers installation, networking, security, network services, system performance, kernel tweaking, filesystems, SMP, upgrading, crash debugging, and much more, including coverage of how to: Use advanced security features like packet filtering, virtual machines, and host-based intrusion detection; Build custom live FreeBSD CDs and bootable flash; Manage network services and filesystems; Use DNS and set up email, IMAP, web, and FTP services for both servers and clients; Monitor your system with performance-testing and troubleshooting tools; Run diskless systems; Manage schedulers, remap shared libraries, and optimize your system for your hardware and your workload; Build custom network appliances with embedded FreeBSD; Implement redundant disks, even without special hardware; Integrate FreeBSD-specific SNMP into your network management system. - Publisher.

Sudo: You're Doing It Wrong Unix-like operating systems use a rudimentary access control system: the root account can do anything, while other users are peasants with only minimal access. This worked fine in UNIX's youth, but now that sysadmin responsibilities are spread among many people and applications, many people need a tiny slice of root's power. Sudo lets you divide root's monolithic power between the people who need it with accountability and auditability. Sudo Mastery will teach you to: design a secure sudo policy simplify policies with lists and aliases manage shell environments verify system integrity via intrusion detection deploy a single sudo policy across your enterprise manage sudo policies via LDAP log and debug sudo record and replay full sudo sessions use authentication systems other than passwords Master sudo with Sudo Mastery!

“I’m glad someone’s finally giving ed the attention it deserves.” – Ken Thompson, co-creator of Unix Let me be perfectly clear: ed is the standard Unix text editor. If you don’t know ed, you’re not a real sysadmin. Forty years after ed’s introduction, internationally acclaimed author Michael W Lucas has finally unlocked the mysteries of ed for everyone. With Ed Mastery, you too can become a proper sysadmin. Ed Mastery will help you: · understand buffers and addresses · insert, remove, and mangle text · master file management and shell escapes · comprehend regular expressions, searches, and substitutions · create high-performance scripts for transforming files You must be at least this competent to use this computer. Read Ed Mastery today!