DevOps VN

Reserved disk space on the root partition in Linux

hansamu 05/28/2022

Các hệ thống linux sử dụng file system như ext4,ext3-2 mặc định dành ra 5% disk cho phân vùng root. Việc này nhằm đảm bảo người quản trị còn có […]

Tính nhẩm quy đổi umask và permission của file và folder trong linux

hansamu 05/28/2022

Umask là gì thì xem lại bài này Umask là gì Câu hỏi này nếu thi LPI sẽ bị hỏi, mình note ra đây để ghi nhớ cho bản thân. […]

[Scripts] tìm và khoá user không hoạt động trong vòng 90 ngày trên active directiory

hansamu 02/12/2022

Script tìm và disable các account không đăng nhập trong vòng 90 ngày trên AD

# disableUsers.ps1  
# Set msDS-LogonTimeSyncInterval (days) to a sane number.  By
# default lastLogonDate only replicates between DCs every 9-14 
# days unless this attribute is set to a shorter interval.
 
# Also, make sure to create the EventLog source before running, or
# comment out the Write-EventLog lines if no event logging is
# needed.  Only needed once on each machine running this script.
# New-EventLog -LogName Application -Source "DisableUsers.ps1"
 
# Remove "-WhatIf"s before putting into production.
 
Import-Module ActiveDirectory
 
$inactiveDays = 90
$neverLoggedInDays = 90
$disableDaysInactive=(Get-Date).AddDays(-($inactiveDays))
$disableDaysNeverLoggedIn=(Get-Date).AddDays(-($neverLoggedInDays))
 
# Identify and disable users who have not logged in in x days
 
$disableUsers1 = Get-ADUser -Filter {Enabled -eq $TRUE} -Properties lastLogonDate, whenCreated, distinguishedName | Where-Object {($_.lastLogonDate -lt $disableDaysInactive) -and ($_.lastLogonDate -ne $NULL)}
 
 $disableUsers1 | ForEach-Object {
   Disable-ADAccount $_
   #Write-EventLog -Source "DisableUsers.ps1" -EventId 9090 -LogName Application -Message "Attempted to disable user $_ because the last login was more than $inactiveDays ago."
   }
 
# Identify and disable users who were created x days ago and never logged in.
 
$disableUsers2 = Get-ADUser -Filter {Enabled -eq $TRUE} -Properties lastLogonDate, whenCreated, distinguishedName | Where-Object {($_.whenCreated -lt $disableDaysNeverLoggedIn) -and (-not ($_.lastLogonDate -ne $NULL))}
 
$disableUsers2 | ForEach-Object {
   Disable-ADAccount $_
   #Write-EventLog -Source "DisableUsers.ps1" -EventId 9091 -LogName Application -Message "Attempted to disable user $_ because user has never logged in and $neverLoggedInDays days have passed."
   }

# disableUsers.ps1

# Set msDS-LogonTimeSyncInterval (days) to a sane number. By

# default lastLogonDate only replicates between DCs every 9-14

# days unless this attribute is set to a shorter interval.

# Also, make sure to create the EventLog source before running, or

# comment out the Write-EventLog lines if no event logging is

# needed. Only needed once on each machine running this script.

# New-EventLog -LogName Application -Source "DisableUsers.ps1"

# Remove "-WhatIf"s before putting into production.

Import-Module ActiveDirectory

$inactiveDays = 90

$neverLoggedInDays = 90

$disableDaysInactive=(Get-Date).AddDays(-($inactiveDays))

$disableDaysNeverLoggedIn=(Get-Date).AddDays(-($neverLoggedInDays))

# Identify and disable users who have not logged in in x days

$disableUsers1 = Get-ADUser -Filter {Enabled -eq $TRUE} -Properties lastLogonDate, whenCreated, distinguishedName | Where-Object {($_.lastLogonDate -lt $disableDaysInactive) -and ($_.lastLogonDate -ne $NULL)}

$disableUsers1 | ForEach-Object {

Disable-ADAccount $_

#Write-EventLog -Source "DisableUsers.ps1" -EventId 9090 -LogName Application -Message "Attempted to disable user $_ because the last login was more than $inactiveDays ago."

}

# Identify and disable users who were created x days ago and never logged in.

$disableUsers2 = Get-ADUser -Filter {Enabled -eq $TRUE} -Properties lastLogonDate, whenCreated, distinguishedName | Where-Object {($_.whenCreated -lt $disableDaysNeverLoggedIn) -and (-not ($_.lastLogonDate -ne $NULL))}

$disableUsers2 | ForEach-Object {

Disable-ADAccount $_

#Write-EventLog -Source "DisableUsers.ps1" -EventId 9091 -LogName Application -Message "Attempted to disable user $_ because user has never logged in and $neverLoggedInDays days have passed."

}

Hướng dẫn cài đặt và unlock OpenVPN Access server

root@mefin-ntl-rke-03:/var/log/journal/c27b494019ba448580a9cc1dce75e9c6# ll -h
total 4.1G
drwxr-sr-x+ 2 root systemd-journal 4.0K Apr 19 09:04  ./
drwxr-sr-x+ 3 root systemd-journal 4.0K Dec 25 03:57  ../
-rw-r-----+ 1 root systemd-journal 128M Jan 17 18:59 'system@16ca61f2092a4b948aef42e48d42a204-000000000016a25b-0005b8db6105890b.journal'
-rw-r-----+ 1 root systemd-journal 128M Jan 20 19:41 'system@16ca61f2092a4b948aef42e48d42a204-000000000019cff5-0005b91758244858.journal'
-rw-r-----+ 1 root systemd-journal  96M Jan 22 10:13 'system@16ca61f2092a4b948aef42e48d42a204-00000000001d04e2-0005b954467d0756.journal'
-rw-r-----+ 1 root systemd-journal 128M Jan 25 10:14 'system@16ca61f2092a4b948aef42e48d42a204-00000000001eb945-0005b97492f226fb.journal'
-rw-r-----+ 1 root systemd-journal 128M Jan 28 09:13 'system@16ca61f2092a4b948aef42e48d42a204-000000000021e99d-0005b9b0ef1f24bf.journal'
-rw-r-----+ 1 root systemd-journal 128M Jan 31 09:43 'system@16ca61f2092a4b948aef42e48d42a204-00000000002512a1-0005b9ec6d5a71fd.journal'
-rw-r-----+ 1 root systemd-journal 128M Feb  3 08:59 'system@16ca61f2092a4b948aef42e48d42a204-0000000000284669-0005ba2935649832.journal'
-rw-r-----+ 1 root systemd-journal 128M Feb  6 09:26 'system@16ca61f2092a4b948aef42e48d42a204-00000000002b714f-0005ba64eef8ba89.journal'
-rw-r-----+ 1 root systemd-journal 128M Feb  9 10:04 'system@16ca61f2092a4b948aef42e48d42a204-00000000002ea4a7-0005baa1a94c7b25.journal'
-rw-r-----+ 1 root systemd-journal 128M Feb 12 10:41 'system@16ca61f2092a4b948aef42e48d42a204-000000000031d940-0005bade8af14a24.journal'
-rw-r-----+ 1 root systemd-journal 128M Feb 15 11:28 'system@16ca61f2092a4b948aef42e48d42a204-0000000000350db4-0005bb1b67cc8363.journal'
-rw-r-----+ 1 root systemd-journal 128M Feb 18 12:12 'system@16ca61f2092a4b948aef42e48d42a204-0000000000384357-0005bb586b233c8e.journal'
-rw-r-----+ 1 root systemd-journal 128M Feb 21 12:51 'system@16ca61f2092a4b948aef42e48d42a204-00000000003b7884-0005bb9561602aa0.journal'
-rw-r-----+ 1 root systemd-journal 128M Feb 24 13:24 'system@16ca61f2092a4b948aef42e48d42a204-00000000003ead3f-0005bbd2472c1033.journal'
-rw-r-----+ 1 root systemd-journal 128M Feb 27 14:00 'system@16ca61f2092a4b948aef42e48d42a204-000000000041e12c-0005bc0f151bf192.journal'
-rw-r-----+ 1 root systemd-journal 128M Mar  2 14:22 'system@16ca61f2092a4b948aef42e48d42a204-00000000004516a6-0005bc4befd2240e.journal'
-rw-r-----+ 1 root systemd-journal 128M Mar  5 15:01 'system@16ca61f2092a4b948aef42e48d42a204-0000000000484968-0005bc8897dc0e69.journal'
-rw-r-----+ 1 root systemd-journal 128M Mar  8 15:52 'system@16ca61f2092a4b948aef42e48d42a204-00000000004b7dfa-0005bcc57c237e46.journal'
-rw-r-----+ 1 root systemd-journal 128M Mar 11 16:31 'system@16ca61f2092a4b948aef42e48d42a204-00000000004eb422-0005bd028f33fd7d.journal'
-rw-r-----+ 1 root systemd-journal 128M Mar 14 17:15 'system@16ca61f2092a4b948aef42e48d42a204-000000000051e8c9-0005bd3f71effd5c.journal'
-rw-r-----+ 1 root systemd-journal 128M Mar 17 17:27 'system@16ca61f2092a4b948aef42e48d42a204-0000000000551e1c-0005bd7c6ab93047.journal'
-rw-r-----+ 1 root systemd-journal 128M Mar 20 12:30 'system@16ca61f2092a4b948aef42e48d42a204-0000000000584ff3-0005bdb8ef2a619b.journal'
-rw-r-----+ 1 root systemd-journal 128M Mar 23 11:36 'system@16ca61f2092a4b948aef42e48d42a204-00000000005b5d6c-0005bdf1212af3ec.journal'
-rw-r-----+ 1 root systemd-journal 128M Mar 26 11:00 'system@16ca61f2092a4b948aef42e48d42a204-00000000005e8698-0005be2cbb27a4e8.journal'
-rw-r-----+ 1 root systemd-journal 128M Mar 29 10:58 'system@16ca61f2092a4b948aef42e48d42a204-000000000061b1d7-0005be68910b83e8.journal'
-rw-r-----+ 1 root systemd-journal 128M Apr  1 10:57 'system@16ca61f2092a4b948aef42e48d42a204-000000000064e13a-0005bea4e5b125de.journal'
-rw-r-----+ 1 root systemd-journal 128M Apr  4 10:49 'system@16ca61f2092a4b948aef42e48d42a204-000000000068105c-0005bee13c8b5363.journal'
-rw-r-----+ 1 root systemd-journal 128M Apr  7 10:36 'system@16ca61f2092a4b948aef42e48d42a204-00000000006b3e96-0005bf1d7697c73e.journal'
-rw-r-----+ 1 root systemd-journal 128M Apr 10 10:26 'system@16ca61f2092a4b948aef42e48d42a204-00000000006e6c4d-0005bf59a16d76d4.journal'
-rw-r-----+ 1 root systemd-journal 128M Apr 13 10:27 'system@16ca61f2092a4b948aef42e48d42a204-0000000000719a63-0005bf95d9ad57ee.journal'
-rw-r-----+ 1 root systemd-journal 128M Apr 16 08:25 'system@16ca61f2092a4b948aef42e48d42a204-000000000074ca08-0005bfd237815e30.journal'
-rw-r-----+ 1 root systemd-journal 128M Apr 19 09:04 'system@16ca61f2092a4b948aef42e48d42a204-000000000077ec2e-0005c00cdc182970.journal'
-rw-r-----+ 1 root systemd-journal  32M Apr 19 20:13  system.journal
root@mefin-ntl-rke-03:/var/log/journal/c27b494019ba448580a9cc1dce75e9c6#

root@mefin-ntl-rke-03:/var/log/journal/c27b494019ba448580a9cc1dce75e9c6# ll -h

total 4.1G

drwxr-sr-x+ 2 root systemd-journal 4.0K Apr 19 09:04 ./

drwxr-sr-x+ 3 root systemd-journal 4.0K Dec 25 03:57 ../

-rw-r-----+ 1 root systemd-journal 128M Jan 17 18:59 '[email protected]b6105890b.journal'

-rw-r-----+ 1 root systemd-journal 128M Jan 20 19:41 '[email protected]758244858.journal'

-rw-r-----+ 1 root systemd-journal 96M Jan 22 10:13 '[email protected]4467d0756.journal'

-rw-r-----+ 1 root systemd-journal 128M Jan 25 10:14 '[email protected]492f226fb.journal'

-rw-r-----+ 1 root systemd-journal 128M Jan 28 09:13 '[email protected]0ef1f24bf.journal'

-rw-r-----+ 1 root systemd-journal 128M Jan 31 09:43 '[email protected]c6d5a71fd.journal'

-rw-r-----+ 1 root systemd-journal 128M Feb 3 08:59 '[email protected]935649832.journal'

-rw-r-----+ 1 root systemd-journal 128M Feb 6 09:26 '[email protected]4eef8ba89.journal'

-rw-r-----+ 1 root systemd-journal 128M Feb 9 10:04 '[email protected]1a94c7b25.journal'

-rw-r-----+ 1 root systemd-journal 128M Feb 12 10:41 '[email protected]e8af14a24.journal'

-rw-r-----+ 1 root systemd-journal 128M Feb 15 11:28 '[email protected]b67cc8363.journal'

-rw-r-----+ 1 root systemd-journal 128M Feb 18 12:12 '[email protected]86b233c8e.journal'

-rw-r-----+ 1 root systemd-journal 128M Feb 21 12:51 '[email protected]561602aa0.journal'

-rw-r-----+ 1 root systemd-journal 128M Feb 24 13:24 '[email protected]2472c1033.journal'

-rw-r-----+ 1 root systemd-journal 128M Feb 27 14:00 '[email protected]f151bf192.journal'

-rw-r-----+ 1 root systemd-journal 128M Mar 2 14:22 '[email protected]befd2240e.journal'

-rw-r-----+ 1 root systemd-journal 128M Mar 5 15:01 '[email protected]897dc0e69.journal'

-rw-r-----+ 1 root systemd-journal 128M Mar 8 15:52 '[email protected]57c237e46.journal'

-rw-r-----+ 1 root systemd-journal 128M Mar 11 16:31 '[email protected]28f33fd7d.journal'

-rw-r-----+ 1 root systemd-journal 128M Mar 14 17:15 '[email protected]f71effd5c.journal'

-rw-r-----+ 1 root systemd-journal 128M Mar 17 17:27 '[email protected]c6ab93047.journal'

-rw-r-----+ 1 root systemd-journal 128M Mar 20 12:30 '[email protected]8ef2a619b.journal'

-rw-r-----+ 1 root systemd-journal 128M Mar 23 11:36 '[email protected]1212af3ec.journal'

-rw-r-----+ 1 root systemd-journal 128M Mar 26 11:00 '[email protected]cbb27a4e8.journal'

-rw-r-----+ 1 root systemd-journal 128M Mar 29 10:58 '[email protected]8910b83e8.journal'

-rw-r-----+ 1 root systemd-journal 128M Apr 1 10:57 '[email protected]4e5b125de.journal'

-rw-r-----+ 1 root systemd-journal 128M Apr 4 10:49 '[email protected]13c8b5363.journal'

-rw-r-----+ 1 root systemd-journal 128M Apr 7 10:36 '[email protected]d7697c73e.journal'

-rw-r-----+ 1 root systemd-journal 128M Apr 10 10:26 '[email protected]9a16d76d4.journal'

-rw-r-----+ 1 root systemd-journal 128M Apr 13 10:27 '[email protected]5d9ad57ee.journal'

-rw-r-----+ 1 root systemd-journal 128M Apr 16 08:25 '[email protected]237815e30.journal'

-rw-r-----+ 1 root systemd-journal 128M Apr 19 09:04 '[email protected]cdc182970.journal'

-rw-r-----+ 1 root systemd-journal 32M Apr 19 20:13 system.journal

root@mefin-ntl-rke-03:/var/log/journal/c27b494019ba448580a9cc1dce75e9c6#

Những log này do systemd sinh ra, có thể […]

DevOps là phải lười ~_~

Reserved disk space on the root partition in Linux

Tính nhẩm quy đổi umask và permission của file và folder trong linux

[Scripts] tìm và khoá user không hoạt động trong vòng 90 ngày trên active directiory

Hướng dẫn cài đặt và unlock OpenVPN Access server

[Zabbix] Trải ngiệm dựng và tối ưu zabbix 5.4 với database postgres

Tránh zabbix tự quy đổi giá trị số 1000 -> 1k khi hiển thị trên graph

Extent/Expand/Grow disk space đối với máy chủ ảo chạy linux

Triển khai hệ thống lưu trữ đơn giản với DRDB

Xử lý lỗi trên ubuntu dh key too small

[Ubuntu 20.04] Xử lý /var/log/journal/ quá lớn