Topic: How to disable some services?

[NicolBolas]

Hi !

I'm deploying a pair of SME 7 servers for my company. Their role will be to host websites, mailboxes and offer VPN access, and optionally to let LDAP acessible from the internal network.

I have public IPs for both SME, and they have a single adress on my local network. I already have a DNS/DHCP server on the LAN.

I need the following services to be avaible :

On the WAN side :
- http
- smtp (with authentification)
- imaps
- pptp
- webmail (https only)

On the LAN side :
- http
- smtp
- imaps
- ftp (for iBays only)
- ldap
- webmail

I want to disable the folowing :

- http proxy
- smtp proxy
- samba
- NAT (already have a router on another connexion for surfing from the LAN)
- DHCP (already disabled)
- internal DNS (even external if not needed as the domains are resolved by a public DNS on internet)
- atalkd (never used it anyway)
- lpd (no printer attached, will never be)
- smartd (running in vmware, no smart avaible)
... (i may have missed some, sme provides too much

The question is : how to properly disable these services without compromising SME' stability?

Thanks a lot for any help provided

edit:
Before anyone asks, I use 2 servers because I have to dissociate two sets of domains for 2 different legal entities, thus avoiding me to use the same IP an virtual machine for both servers. As I make an extensive use of virtualisation for my servers, it won't cost more to have 2  virtual machines instead of just one...

edit2:
I have an issue while trying to install vmware-tools. It needs to unload network card driver module, and rmmod locks on it because eth1 (internal) is in use. How to free it? I thought I could boot in rescue/single user mode but there's no relevant option in grub menu. How to let it unload the module?

[sonoracomm]

On the VMware Tools front:
http://www.sonoracomm.com/index.php?option=com_content&task=view&id=54#SME7guest

As for the services, I have used 'chkconfig servicename off' and 'chkconfig --list' for this purpose, but I, too, would appreciate guidance by experts.

Here is more info on the subject:
http://www.sonoracomm.com/index.php?option=com_content&task=view&id=114

G

[cactus]

As for the services, I have used 'chkconfig servicename off' and 'chkconfig --list' for this purpose, but I, too, would appreciate guidance by experts.

The status of services is set per the configuration database:

Code: [Select]

config show mysqldwill show you the status of the mysql daemon. It also has a status entry, you can set this to disabled

Code: [Select]

config setprop mysqld status disabledAfter a reboot the service will not start when you have set it to be disabled. However some services depend on each other, for instance webmail depends on the mysqld service as it stores its data in mysql tables.

(Edit: corrected syntax)

[cactus]

I have an issue while trying to install vmware-tools. It needs to unload network card driver module, and rmmod locks on it because eth1 (internal) is in use. How to free it? I thought I could boot in rescue/single user mode but there's no relevant option in grub menu. How to let it unload the module?

I always followed the instructions from the vmware-tools script after some hack I found in the forums: http://forums.contribs.org/index.php?topic=32138.0

[william_syd]

As for the services, I have used 'chkconfig servicename off' and 'chkconfig --list' for this purpose, but I, too, would appreciate guidance by experts.

http://forums.contribs.org/index.php?topic=33667.msg144157#msg144157

[william_syd]

The status of services is set per the configuration database:

Code: [Select]

config show |grep "service\|status"

[Boris]

Code: [Select]

config set mysqld status disabled

Shouldn't it be config setprop ...... instead of "set"?

[william_syd]

edit2:
I have an issue while trying to install vmware-tools. It needs to unload network card driver module, and rmmod locks on it because eth1 (internal) is in use. How to free it? I thought I could boot in rescue/single user mode but there's no relevant option in grub menu. How to let it unload the module?

http://no.longer.valid/phpwiki/index.php/How-To%20install%20VMware-Tools%20on%20a%20SME%207.0%20Virtual%20Machine

[sonoracomm]

I am interested in what services, or groups of services, are 'safe' to turn off without causing problems with SME 7.

I can always experiment, but if someone already knows...

TIA,

G

[cactus]

Code: [Select]

config set mysqld status disabled

Shouldn't it be config setprop ...... instead of "set"?

You are absolutely right... the correct command to disable a service, for example mysqld is:

Code: [Select]

config setprop mysqld status disabled

[Gert]

Another way to switch services on and off is to use the sme7admin contrib. You can then do it with the server-manager page. Works great.

[bpivk]

Another way to switch services on and off is to use the sme7admin contrib. You can then do it with the server-manager page. Works great.

Untill you reconfigure and reboot your server.
Cactus is correct.