--- CASIPD-LB SErver Pre-SetUP ---

** Prep for Updates
    mkdir /work
    
    cd /etc/pki/rpm-gpg/
    scp * casidp2-new:/etc/pki/rpm-gpg/

    cd /etc/pki/tls 
    tar -cf - tls  | ssh casidp2-new "(cd /etc/pki/;  tar xf - )"
    
    /etc/yum.repos.d
    tar -cf - .  | ssh casidp2-new "(cd /etc/yum.repos.d/;  tar xf - )"

new 
    /etc/cas
    /usr/share/phpMyAdmin/


** Update Packages
   cd /etc/yum.repos.d
   yum install mysql57-community-release-el7-11.noarch.rpm
   yum update

   
** Find what is needed to install on new server
    rpm -qa | sort > /var/tmp/cas1.list
    scp /var/tmp/cas1.list casidp2-new:/var/tmp/.
    
    ssh casidp2-new
    rpm -qa | sort > /var/tmp/cas2.list
    cd /var/tmp
    diff cas1.list cas2.list | egrep '^<' | awk '{print $2}

    diff cas1.list cas2.list | egrep '^<' | awk '{print $2}' |while read L; do yum -y install $L;done |tee /work/install1.log

    rpm -qa | sort > /var/tmp/cas2.list
    diff cas1.list cas2.list | egrep '^<' | awk '{print $2}

** Replace/Modify system files
** remote cp -p file file.default
   /etc/hosts
   
   /etc/dnsmasq.conf
    cd /etc 
    scp dnsmasq.conf casidp2-new:/etc/.
   
   /etc/passwd shadow group
         egrep 'oracle|badm' /etc/passwd
         egrep 'oracle|badm' /etc/group
         egrep 'oracle|badm' /etc/shadow
 
   /etc/ssh/sshd_config
		AddressFamily inet
		ListenAddress 0.0.0.0
		HostKey /etc/ssh/ssh_host_rsa_key
		HostKey /etc/ssh/ssh_host_ecdsa_key
		HostKey /etc/ssh/ssh_host_ed25519_key
		SyslogFacility AUTHPRIV
		AuthorizedKeysFile .ssh/authorized_keys
		PasswordAuthentication no
		ChallengeResponseAuthentication no
		GSSAPIAuthentication yes
		GSSAPICleanupCredentials no
		UsePAM yes
		X11Forwarding yes
		ClientAliveInterval 30
		ClientAliveCountMax 5
		AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
		AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
		AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
		AcceptEnv XMODIFIERS
		Subsystem sftp	/usr/libexec/openssh/sftp-server
                  
   /etc/sudoers
        #%wheel	ALL=(ALL)	ALL
        %wheel	ALL=(ALL)	NOPASSWD: ALL
    
   /etc/postfix/main.cf
   
   cd /etc
   ln -s /usr/share/zoneinfo/EST5EDT localtime  

** TAR large file sets
   u01
      cd /
      tar -cf - u01 | ssh casidp2-new "(cd / ; tar -xf - )"
    
   SRC
    cd /usr/local
    tar cf - . | ssh casidp2-new "(cd /usr/local/src; tar xf - )"
  
   HOME
   cd /home 
   tar cf - oracle | ssh casidp2-new "(cd /home/; tar xf - )"
   tar cf - badm  | ssh casidp2-new "(cd /home/; tar xf - )"

   HTTPD
   cd /etc
   mv httpd httpd.default
   tar -cf - httpd | ssh casidp2-new "(cd /etc; tar -xf - )"


    /root/README.splunk
    /home/badm/ splunk.rpm
    rpm -Uvh splunkforwarder-6.6.1-aeae3fe0c5af-linux-2.6-x86_64.rpm



SOURCE 
------------------------

/usr/local/src
    config.status  contains parms for ./configure
apr
aprutil
openssl-1.0.2n  GET openssl-1.0.2o - or newest
>>>> email
php-5.6.33      GET newest *.36?
freetds - make not make install

TIV