Tag: Ubuntu Linux

Categories
Knowledge Support Support Categories exacqVision Hardware

Resizing a Partition on Ubuntu Linux

Title

Resizing a Partition on Ubuntu Linux

Description 

If the capacity of a Virtual Drive has been increased, then it will be necessary to resize existing partitions. 

Product 

  • Ubuntu Linux 18.04

Overview

  • Stop exacqVision Server
  • Identify virtual drive mount point and Device
  • Unmount the virtual drive mount point
  • Launch GParted
  • Resize the partition
  • Mount the virtual drive mount point
  • Verify partition size increased
  • Start the  exacqVision Server
  • Check storage size, status, video both existing and new in the exacqVision Client

Terminal Commands

  • Open Terminal (Applications > System Tools > Terminal)
    • Note: See Terminal Commands Start to Finish below for a detailed example
    • Stop the exacqVision Server service 
    • List block devices and mount points 
    • Unmount the virtual drive storage volume
    • Launch GParted , the GParted Window will appear

GParted

  • Note:  A Libparted Warning similar to the following may appear, if so, select Fix
  • Use the Dropdown to select the device the virtual drive is using in this example “/dev/sda”
  • You should now see the existing partition and unallocated space 
  • Right-click on the existing partition, a context menu will appear
  • Select Resize/Move, the Resize/Move window will appear 
  • Change the New Size (MiB) to match the Maximum size listed 
  • The Free space preceding and following should now be zero
  • Select Resize/Move, the Resize/Move window will close
  • There should be 1 operation pending to grow the partition
  • Click the green check mark to begin the operation
  • Select Apply to confirm the operation, the Applying pending operations window appears
  • Note: The time will to complete will vary based on the size of the expansion but will typically be 15 minutes or less. 
  • A green check mark will appear next to the Grow operation when complete
  • Click Close
  • Close GParted

Terminal Continued

  • The Terminal Window should still be open from earlier
  • Note: See Terminal Commands Start to Finish below for a detailed example
  • Mount the partition
  • List device blocks and mount points 
    • Confirm that the Size of the Virtual Drive mount point has increased
  • Start the exacqVision Server Service
  • Close Terminal

exacqVision Client

  • On the Drive tab verify the Capacity reported is correct and the status is Healthy
  • Search for previously recorded video 
  • Verify current video is being recorded 

Congratulations the partition has been successfully expanded 

Terminal Commands Start to Finish

Categories
Knowledge Support Support exacqVision Client exacqVision Server

Configuring Multiple Monitors on Ubuntu Linux   

Title

exacqVision – Configuring Multiple Monitors on Ubuntu Linux   

Description 

If multiple monitors are attached you have the option to either mirror, show the same image on all monitors or extend the desktop.  Configuration is done within the OS settings.  

Product 

  • Ubuntu Linux
  • exacqVision

Solution

  • Login to the OS as an admin
  • Locate and select System
  • Select Control Center 
  • Select Displays
  • check/uncheck “Same image on all monitors” to mirror or extend the desktop (wording varies based on OS version)
  • When satisfied click Apply system-wide 
  • Note: Clicking Apply only applies the change to the current user.  Select Apply system-wide to apply to all OS users. 
Categories
Knowledge Support Support exacqVision Server Categories Products

How to Remove Unused Samba Services to Avoid Potentially Being Detected by a Vulnerability Scan

Summary:

This is a procedure to remove unused Samba services to avoid potentially being detected by a vulnerability scan. Unless the server is an S-Series, these services are most likely not being used and may be disabled.

More Information:

Samba is a collection of services that allow for file sharing across a network with other Windows systems. However, the default Samba configuration may lead to being flagged as a vulnerability with some security scanners, such as “null session/password NetBIOS access.“

Steps:

All versions of Ubuntu:

  • To verify whether smbd (SMB file service) and/or nmbd (NetBIOS name resolution service) are currently running:
    • admin@ER1234567890:~$ ps agux | grep mbd
    • root 1225 0.0 0.0 20416 1176 ? Ss Jun26 35:24 nmbd -D
    • root 25965 2.5 0.1 33284 6844 ? Ds 18:13 0:00 smbd -F
    • root 25967 0.0 0.0 31480 2388 ? S 18:13 0:00 smbd -F
  • A third related service is samba-ad-dc, which allows a Linux workstation to function as a Active Directory domain controller.
  • Confirm the installed version of Ubuntu with:
    • admin@ER1234567890:~$ sudo lsb_release -a
    • No LSB modules are available.
    • Distributor ID: Ubuntu
    • Description: Ubuntu 16.04.4 LTS
    • Release: 16.04
    • Codename: xenial

Ubuntu v14.04:

System services are managed via initscripts:

/etc/init.d/samba (starts smbd, nmbd, and samba-ad-dc as a group)

/etc/init.d/smbd

/etc/init.d/nmbd

/etc/init.d/samba-ad-dc

  • First, STOP these services:
    • sudo service smbd stop
    • sudo service nmbd stop
    • sudo service samba-ad-dc stop
  • Then, DISABLE these services. The command will respond with a message resembling “system start/stop links for XXXXX do not exist.“
    • sudo update-rc.d samba disable
    • sudo update-rc.d smbd disable
    • sudo update-rc.d nmbd disable
    • sudo update-rc.d samba-ad-dc disable

Ubuntu v16.04:

System services are managed via a combination of initscripts and Upstart.

  • First, STOP these services in the same manner as listed above in the “Ubuntu v14.04” section.
  • Then, DISABLE these services in the same manner as listed above in the “Ubuntu v14.04” section.
  • Finally, these services should be set to MANUAL for Upstart:
    • sudo su
    • echo manual > /etc/init/smbd.override
    • echo manual > /etc/init/nmbd.override
    • echo manual > /etc/init/samba-ad-dc.override

Ubuntu v18.04 or newer:

System services are managed via systemd.

  • First, STOP these services:
    • sudo systemctl
    • stop smbd sudo systemctl
    • stop nmbd sudo systemctl
    • stop samba-ad-dc
  • Then, DISABLE these services from automatic startup at boot:
    • sudo systemctl disable smbd
    • sudo systemctl disable nmbd
    • sudo systemctl disable samba-ad-dc
  • For extra security, use the following commands to PREVENT these services from being manually started:
    • sudo systemctl mask smbd
    • sudo systemctl mask nmbd
    • sudo systemctl mask samba-ad-dc
Categories
Knowledge Support Support exacqVision Server Categories Products

AD victor Client (version 4.9+) Shows a Date & Time Stamp Offset by +10 Hours for Ubuntu Linux exacqVision Servers Configured for Hawaii Time Zone

Symptom:

American Dynamics victor Client (versions 4.9+) shows a date & time stamp that is offset by +10 hours for analog or IP cameras from Ubuntu Linux exacqVision servers configured for Hawaii time zone.

Figure 1. American Dynamics victor Client display of camera from Ubuntu Linux exacqVision Server.

Cause:

The root cause is that exacq Servers with Ubuntu Linux operating system report the “Hawaiian” time zone as “Aleutian“. A solution requires modifying the <IntellextimezoneXML.xml> file in the American Dynamics victor Client workstation using Microsoft Notepad to include a reference for this alternate label

Requirement(s):

Administrative privilege access to Windows and the American Dynamics victor Client software.

Resolution:

  1. On the affected American Dynamics victor Client workstation, close the client software by clicking on the “X” icon on the upper right.
Figure 2. Close the client software.
  1. Open the Windows File Explorer (“Start” + “E”). Navigate to the folder “C:\Program Files (x86)\Tyco\American Dynamics\ADSDK” for 32-bit clients or “C:\Program Files\Tyco\American Dynamics\ADSDK” for 64-bit clients. Scroll down on the right pane, right-click on the <IntellextimezoneXML.xml> file, and “Copy” it.
Figure 3. Copy the <IntellexTimeZoneXML.xml> file.
  1. Scroll back to the top of the navigation pane, right-click on the “Desktop” folder and paste the <IntellextimezoneXML.xml> file into it.
Figure 4. Paste file copy to Desktop.
  1. Click on the “Start” or “Search” icon and type “Notepad” in the “Type here to search” box. Right-click on the “Run as administrator” option. Enter the corresponding administrator’s password or click on “More choices” to select an alternate administrator account and enter its password. Click on the “Yes” button.
Figure 5. Launch Notepad as Administrator.
  1. Click on “File” and “Open…” Navigate to the “C:\Users\CurrentUser\Desktop” folder, change the file type selection from “Text Documents (*.txt)” to “All Files”, select the <IntellextimezoneXML.xml> file, and “Open” it.
Figure 6. Open file in Notepad.
Figure 7. Navigate to Desktop file location.
  1. Initiate the search function (“Ctrl” + “F”) and enter “3B” in the “Find What” box and click on the “Find Next” button. Click on the “Cancel” button.
Figure 8. Find the “3B” entry in the file.
  1. Scroll down to allow visibility of the entire &#60Zone Id=”0x8000003B” RegistryName=”Hawaiian Standard Time” > tag section.
Figure 9. Add <name>Aleutian</name> before the end tag </HDVRNames>.

&#60;Zone Id=”0x8000003B” RegistryName=”Hawaiian Standard Time”&#62;
&#60;IntellexNames&#62;
     &#60;name&#62;Hawaii&#60;/name&#62;
     &#60;name&#62;Honolulu&#60;/name&#62;
&#60;/IntellexNames&#62;
&#60;HDVRNames&#62;
     &#60;name&#62;Hawaii&#60;/name&#62;
     &#60;name&#62;Hawaiian&#60;/name&#62;
&#60;/HDVRNames&#62;
&#60;DisplayNames&#62;
     &#60;tandard&#62;HAST&#60;/standard&#62;
     &#60;daylight&#62;HADT&#60;/daylight&#62;
&#60;/DisplayNames&#62;
&#60;/Zone&#62;

Add &#60;name&#62;Aleutian&#60;/name&#62; before the end tag &#60;/HDVRNames&#62;.

&#60;HDVRNames&#62;
     &#60;name&#62;Hawaii&#60;/name&#62;
     &#60;name&#62;Hawaiian&#60;/name&#62;
     &#60;name&#62;Aleutian&#60;/name&#62;
&#60;/HDVRNames>

  1. Click on “File > Save As…”
Figure 10. Save the modified file.
  1. Use the navigation pane to navigate to the folder “C:\Program Files (x86)\Tyco\American Dynamics\ADSDK” for 32-bit clients or “C:\Program Files\Tyco\American Dynamics\ADSDK” for 64-bit clients and “Save” the file to it. Select “Yes” at the “IntellexTimeZoneXML.xml already exits. Do you want to replace it?” prompt. Click on the “X” icon to close Notepad.
Figure 11. Replace the existing file.
Figure 12. Close Notepad.
  1. Launch the victor client software again
Figure 13. Launch victor Client
  1. Select live video stream on the surveillance pane and verify the date / time is correct. The overlay should show “(HAST)” as the time zone.
Figure 14. American Dynamics victor Client displays the proper time & date.

Categories
Knowledge Support Support exacqVision Server Categories Products

Removing Unused LSI MegaRAID Storage Management Software on Ubuntu Linux to Eliminate Open Port 3071 Vulnerability

Symptom:

Vulnerability scans may detect and indicate that port 3071 is Open/Listening because of the installed LSI MegaRAID Storage Management software (LSI MSM) on an Ubuntu Linux server that does not have hardware support for RAID configuration. IF IT IS NOT BEING USED, the software may be removed to eliminate this vulnerability.

The following Ubuntu Linux commands may be used to confirm this condition.

admin@ER1234567890:~$sudo netstat –lntup

Display excerpt…

Active Internet connections (only servers)
Proto Recv-Q      Send-Q      Local Address     Foreign Address   State PID/Program name
Tcp   0     0     0.0.0.0:3071      0.0.0.0:*         LISTEN      1311/java
Udp   0     0     0.0.0.0:3071      0.0.0.0:*               1595/java

OR

admin@ER1234567890:~$ sudo lsof -i -P -n

Display excerpt…

COMMAND     PID   USER   FD   TYPE  DEVICE SIZE/OFF NODE NAME
java       1595   root   20u  IPv4   11857      0t0  UDP *:3071
java       1595   root   24u  IPv4   12538      0t0  TCP *:3071 (LISTEN)

Requirement(s):

Physical or remote access to the exacqVision Server with a “full admin” role.

Resolution:

NOTE: For the purposes of the following instructions. Left-click is defined as and will be used to “select an item” and Right-click is defined as and used to “display additional options that apply to the item.” This is typical of a mouse configured for a “right-handed” operator.

Figure 1. The Ubuntu exacqVision Desktop displays the LSI MSM icon.

A variant of the previously mentioned netstat terminal command provides a concise way to check.

admin@ER1234567890:~$ sudo netstat –lntup | grep –i 3701

  • Left-click on “Applications” on the top menu of the Desktop.
  • Left-click on “System Tools” from the dropdown menu.
  • Left-click on “Terminal” from the following menu.

Figure 2. Using Terminal to check for port 3071 in LISTEN mode.

Figure 3. Steps 1-3.

  1. Left-click on “Applications” on the top menu of the Desktop.
  2. Left-click on “System Tools” from the dropdown menu.
  3. Left-click on “Smart Package Manager” from the following menu.

Figure 4. Steps 4-6.

  1. Left-click in the search box (with the magnifying glass) and type “megaraid” and the “Package list” should be reduced to just the “megaraid-storage-manager.”
  2. Left-click on the “megaraid-storage-manager” line item
  3. Left-click on the “Remove” selection.

Figure 5. Steps 7-10.

  1. Left-click on “File” from the pull-down menu.
  2. Left-click on the “Execute Changes…” from the following menu.
  3. Left-click on the “OK” button.
  4. Wait for the “Operation Progress” popup window to appear and indicate “100%”.  Close the “Smart Package Manager.”

Figure 6. Use Terminal to verify the port is no longer open.

admin@ER1234567890:~$ sudo netstat –lntup | grep –i 3701

A blank reply means that it is no longer active.

Figure 7. Steps 11 & 12.

  1. Right-click on “LSI MSM” icon on the Desktop.
  2. Left-click on “Delete” from the popup window.
  3. Done.