Various methods of generating a CSR - Certificate Signing Request

To Generate a Certificate Signing Request for Apache 2.x

  1. Log in to your server's terminal (SSH).
  2. At the prompt, type the following command:

    openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out yourdomain.csr

    Replace yourdomain with the domain name you're securing. For example, if your domain name is, you would type coolexample.key and coolexample.csr.

Setting up a new Java version with the Linux Alternatives system

To install the Oracle Java JRE after the .rpm installation as the default Java on a linux system: <the current example below will install version 6 update 35>

Note: The best command for the Java JDK install is : yum localinstall <package-name-of-jdk>


alternatives --install /usr/bin/java java /usr/java/jre1.6.0_35/bin/java 20000 --slave /usr/bin/keytool keytool /usr/java/jre1.6.0_35/bin/keytool --slave /usr/bin/orbd orbd /usr/java/jre1.6.0_35/bin/orbd




Linux Active Directory Authentication using Winbind

Tested with Active Directory 2003 and RHEL 6.0

What we want to do :

- authentication against AD using Winbind and Kerberos
- allowing local and remote (SSH) authentication to members of a specific AD group (linuxadmin)
- allowing members of linuxadmin to use sudo
- UID/GID mapping against AD
- user homedir will be created at first log using pam_mkhomedir
- still possible to log in using local accounts, in case AD is unavailable

Check if resolution works :


Subscribe to RSS - linux