Need a license? or more flexibility? How to Install and Secure eGroupWare How To Install and Secure eGroupWare eGroupWare, why e ? decide for yourself, we could never pick one! enterprise, extended, extreme … groupware 2 How To Install and Secure eGroupWare The author and publisher have taken care in the preparation of this book, but make no expressed or implied warranty of any kind and assume no responsibility for errors or omissions. No liability is assumed for incidental or consequential damages in connection with or arising out of the use of the information or programs contained herein. This document is published under the: Creative Commons Attribution-ShareAlike License For information on obtaining permissions for use of this material from this work, please submit your request to Reiner Jung [email protected] Linux is a trademark from Linus Torvalds Red Hat, Red Hat Network, RPM are trademarks or reghistered trademarks of RedHat Inc. in the United States and other countries SSH and Secure Shell are trademarks from SSH Communication Security Inc. Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in United States and/or other contries All other trademarks and copyrights referred to are the property of their respective owners expl0it labs offer packaging and open source security development expl0it press is responsible for publishing HOWTOs, white papers and more expl0it consulting offer security consulting in the enterprise Date published 5-Jan-05 3 How To Install and Secure eGroupWare Table of Contents Table of Contents .......................................................................................................................................................................4 1 Introduction .......................................................................................................................................................................8 1.1 What will this book cover?..............................................................................................................................................8 1.2 Who should read it? ........................................................................................................................................................8 1.3 Document convention ...................................................................................................................................................9 1.4 About the author .............................................................................................................................................................9 2 Installation Checklist for eGroupWare ..........................................................................................................................10 3 Express Install HOWTO ....................................................................................................................................................11 4 Migrating Your Installation from phpGroupWare to eGroupWare .............................................................................16 5 Updating eGroupWare ...................................................................................................................................................17 5.1 When you should update?.......................................................................................................................................... 17 5.2 Updating the eGroupWare installation..................................................................................................................... 17 5.3 Porting your settings to the new header.inc.php version ...................................................................................... 18 6 Installation Instructions ...................................................................................................................................................19 6.1 Downloading the packages....................................................................................................................................... 19 6.2 Why are GPG-signed packages and md5sum necessary?.................................................................................. 19 6.2.1 Installing the GPG key for tar.gz.gpg, tar.bz2.gpg and zip.gpg...................................................................... 19 6.2.2 Verifying the GPG key ............................................................................................................................................. 20 6.2.3 Installing the GPG key for the RPM packages .................................................................................................... 21 6.3 How do I validate packages?.................................................................................................................................... 22 6.4 Installing the packages on your server ..................................................................................................................... 23 6.4.1 Installing an unsigned package on your server.................................................................................................. 23 6.4.2 Installing a GPG-signed package on your server .............................................................................................. 23 6.4.3 Install an RPM package on your server................................................................................................................ 24 6.4.4 Rebuilding the packages for other RPM paths................................................................................................... 24 6.4.5 Install with Bitrock installer under Windows .......................................................................................................... 25 6.4.6 Install with Bitrock installer under Linux ................................................................................................................. 25 6.4.6.1 Use a GUI to install eGroupWare.................................................................................................................. 25 6.4.6.2 Use the command line install eGroupWare ............................................................................................... 26 6.4.7 Installing from CVS ................................................................................................................................................... 27 7 Basic Server Security.......................................................................................................................................................28 7.1 Partitioning the filesystem............................................................................................................................................ 28 7.2 The server platform ....................................................................................................................................................... 28 7.2.1 Checking your server for running services and open ports.............................................................................. 29 7.2.1.1 Ports which the eGroupWare server needs to run .................................................................................... 29 7.2.1.2 The portscanner............................................................................................................................................... 30 7.2.1.3 Output from a portscanner ........................................................................................................................... 30 7.2.1.4 Disabling unneeded services/servers.......................................................................................................... 30 7.2.2 Uninstalling unneeded software on your server.................................................................................................. 31 7.2.3 Check for rootkits on your server ........................................................................................................................... 32 7.2.3.1 Local check for signs of a rootkit with chkrootkit ...................................................................................... 32 4 How To Install and Secure eGroupWare 7.2.3.2 Chkrootkit sample snippet............................................................................................................................. 33 7.2.3.3 Installing the chkrootkit RPM ......................................................................................................................... 33 7.2.3.4 Installing chkrootkit from the tar.gz file........................................................................................................ 34 7.2.4 Secure server administration.................................................................................................................................. 35 7.2.4.1 Connecting to your server over a secure session ..................................................................................... 35 7.2.4.2 Working with SSH Key Pairs............................................................................................................................. 36 7.2.4.2.1 Creating a secure shell key pair ............................................................................................................. 36 7.2.4.2.2 Copying your public key to the server .................................................................................................. 36 7.2.4.2.3 The ssh-add tool........................................................................................................................................