CSLabsWiki - Recent changes [en]

2009-10-29 Meeting Minutes

Shephezj — Fri, 20 Nov 2009 13:21:58 GMT

Added category

← Older revision		Revision as of 13:21, 20 November 2009
Line 15:		Line 15:
	* Got another installation working		* Got another installation working
	* Fixed JS bug		* Fixed JS bug
		+
		+	[[Category:Minutes]]

2009-11-12 Meeting Minutes

Shephezj — Fri, 20 Nov 2009 13:19:40 GMT

Added category

← Older revision		Revision as of 13:19, 20 November 2009
Line 36:		Line 36:
	* EC2 presentation at 8:00pm tonight		* EC2 presentation at 8:00pm tonight
	* Web presentations Tuesday/Thursday at 7:00pm		* Web presentations Tuesday/Thursday at 7:00pm
		+
		+	[[Category:Minutes]]

Presentations/Fall 2009

Kennede — Thu, 19 Nov 2009 23:02:25 GMT

Lightning Talks:

← Older revision		Revision as of 23:02, 19 November 2009
Line 87:		Line 87:
	\|-		\|-
	\|11/19/2009 \|\| [[User:petermcv \| Chris Peterman]] \|\| Dropbox \|\| [http://dropbox.com Dropbox.com]		\|11/19/2009 \|\| [[User:petermcv \| Chris Peterman]] \|\| Dropbox \|\| [http://dropbox.com Dropbox.com]
		+	\|-
		+	\|11/19/2009 \|\| [[User:kennede \| RobotGrrl]] \|\| Twitter API Calls \|\| [http://apiwiki.twitter.com/Rate-limiting Twitter API Calls]
	\|}		\|}

User:Mccarrms

Mccarrms — Thu, 19 Nov 2009 20:49:24 GMT

Stuff I currently maintain/work on/break occasionally:

← Older revision		Revision as of 20:49, 19 November 2009
Line 17:		Line 17:
	==Stuff I currently maintain/work on/break occasionally==		==Stuff I currently maintain/work on/break occasionally==
	*[[Dns]]		*[[Dns]]
		+	*[[Dns1]]
		+	*[[Dns2]]
		+	*[[Dns1.dev]]
		+	*[[Dns2.dev]]
		+	*[[Ds1]]
		+	*[[Ds2]]
		+	*[[Ds1.dev]]
		+	*[[Ds2.dev]]
	*[[Downtime]]		*[[Downtime]]
	*[[Emeeting]]		*[[Emeeting]]

Roles and Responsibilities

Mccarrms — Thu, 19 Nov 2009 20:25:44 GMT

change in maintainer

← Older revision		Revision as of 20:25, 19 November 2009
Line 46:		Line 46:

	==Network Administrator==		==Network Administrator==
-	'''Currently:''' [[User:~~Mccarrms~~\|~~Matt McCarrell~~]]	+	'''Currently:''' [[User:appletrp\|Bob Appleton]]

	'''Credits:''' 1-2 for [[MP*52]]		'''Credits:''' 1-2 for [[MP*52]]

User:Appletrp

Mccarrms — Thu, 19 Nov 2009 19:55:18 GMT

created new account User:Appletrp

New page

KIOSCKAR

Deshantm — Wed, 18 Nov 2009 02:06:16 GMT

Known Bugs:

← Older revision		Revision as of 02:06, 18 November 2009
(One intermediate revision not shown)
Line 5:		Line 5:
	==Known Bugs==		==Known Bugs==
	* VM interface temp images need to be clean at appropriate times		* VM interface temp images need to be clean at appropriate times
		+	* Cursor of stays as spinning cursor when gnome takes too long to load, should turn back to normal cursor

	==Feature Requests==		==Feature Requests==
Line 23:		Line 24:
	* Make USB devices work		* Make USB devices work
	* Add csguest account to base machine		* Add csguest account to base machine
		+	* Check to see if better way to handle gdm configuration, see:
		+	http://library.gnome.org/admin/gdm/2.27/gdm.html#sessionconfig and https://bugs.launchpad.net/ubuntu/+source/gdm/+bug/398300

	==List of VMs==		==List of VMs==
	{{:List_of_KIOSCKAR_VMs}}		{{:List_of_KIOSCKAR_VMs}}

Ds2 Setup Process

Mccarrms — Tue, 17 Nov 2009 02:23:34 GMT

created

New page

This page summarizes how the virtual machine [[Ds2]] was set up in Fall 2009.

==Install==
*Installed CentOS 5.4 x64.
**Partition Scheme
***3 GB /
***1.5 GB /var
***512 MB swap

==Configuration==
===Updated System===
*Added Extra Repositories
**RPMForge Yum Repository
***<code>rpm -Uhv http://apt.sw.be/redhat/el5/en/x86_64/rpmforge/RPMS//rpmforge-release-0.3.6-1.el5.rf.x86_64.rpm</code>
****From [http://dag.wieers.com/rpm/FAQ.php#B2 Dag Wieers]
**Fedora EPEL Yum Repository
***<code>rpm -Uvh http://download.fedora.redhat.com/pub/epel/5/x86_64/epel-release-5-3.noarch.rpm</code>
****From [http://download.fedora.redhat.com/pub/epel/5/x86_64/repoview/epel-release.html Fedora]

*Configured Yum Priorities & to use our mirror
**Edited <code>/etc/yum.repos.d/CentOS-Base.repo</code>
<code><pre>
# CentOS-Base.repo
#
# This file uses a new mirrorlist system developed by Lance Davis for CentOS.
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client. You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#

[base]
name=CentOS-$releasever - Base
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os
baseurl=http://mirror.clarkson.edu/centos/$releasever/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#released updates
[updates]
name=CentOS-$releasever - Updates
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates
baseurl=http://mirror.clarkson.edu/centos/$releasever/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#packages used/produced in the build but not released
[addons]
name=CentOS-$releasever - Addons
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=addons
baseurl=http://mirror.clarkson.edu/centos/$releasever/addons/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras
baseurl=http://mirror.clarkson.edu/centos/$releasever/extras/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus
baseurl=http://mirror.clarkson.edu/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=2

#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever - Contrib
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib
baseurl=http://mirror.clarkson.edu/centos/$releasever/contrib/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=2
</pre></code>

**Edited <code>/etc/yum.repos.d/rpmforge.repo</code>
<code><pre>
# Name: RPMforge RPM Repository for Red Hat Enterprise 5 - dag
# URL: http://rpmforge.net/
[rpmforge]
name = Red Hat Enterprise $releasever - RPMforge.net - dag
baseurl = http://mirror.clarkson.edu/rpmforge/redhat/el5/en/$basearch/dag
#mirrorlist = http://apt.sw.be/redhat/el5/en/mirrors-rpmforge
#mirrorlist = file:///etc/yum.repos.d/mirrors-rpmforge
enabled = 1
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmforge-dag
gpgcheck = 1
priority=15
</pre></code>

**Edited <code>/etc/yum.repos.d/epel.repo</code>
<code><pre>
[epel]
name=Extra Packages for Enterprise Linux 5 - $basearch
baseurl=http://mirror.clarkson.edu/epel/5/$basearch
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-5&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
priority=30

[epel-debuginfo]
name=Extra Packages for Enterprise Linux 5 - $basearch - Debug
baseurl=http://mirror.clarkson.edu/epel/5/$basearch/debug
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-debug-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=30

[epel-source]
name=Extra Packages for Enterprise Linux 5 - $basearch - Source
baseurl=http://mirror.clarkson.edu/epel/5/SRPMS
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-source-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=30
</pre></code>

**Edited <code>/etc/yum.repos.d/epel-testing.repo</code>
<code><pre>
[epel-testing]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch
baseurl=http://mirror.clarkson.edu/epel/testing/5/$basearch
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
priority=40

[epel-testing-debuginfo]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch - Debug
baseurl=http://mirror.clarkson.edu/epel/testing/5/$basearch/debug
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-debug-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=40

[epel-testing-source]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch - Source
baseurl=http://mirror.clarkson.edu/epel/testing/5/SRPMS
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-source-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=40
</pre></code>

*Disabled Yum FastestMirror since using local mirror
**<code>sed -i 's/enabled=1/enabled=0/g' /etc/yum/pluginconf.d/fastestmirror.conf</code>

*Installed Yum Priorities (Note: This must be installed prior to installing the packages below.)
**<code>yum install yum-priorities</code>

*Configured Yum Priorities to check for obsoletes
**<code>echo "check_obsoletes=1" >> /etc/yum/pluginconf.d/priorities.conf</code>

*<code>yum install vim-enhanced gcc emacs-nox screen</code>
*<code>yum update</code>

===Created User===
*Created user mccarrms
**<code>/usr/sbin/useradd -m mccarrms</code>
*Set password for mccarrms
**<code>passwd mccarrms</code>

===Configured Sudo===
*<code>/usr/sbin/visudo</code>

<code><pre>
## Sudoers allows particular users to run various commands as
## the root user, without needing the root password.

## Networking
Cmnd_Alias NETWORKING = /sbin/route, /sbin/ifconfig, /bin/ping, /sbin/dhclient, /usr/bin/net, /sbin/iptables, /usr/bin/rfcomm, /usr/bin/wvdial, /sbin/iwconfig, /sbin/mii-tool

## Installation and management of software
Cmnd_Alias SOFTWARE = /bin/rpm, /usr/bin/up2date, /usr/bin/yum

## Services
Cmnd_Alias SERVICES = /sbin/service, /sbin/chkconfig

## Updating the locate database
Cmnd_Alias LOCATE = /usr/sbin/updatedb

## Storage
Cmnd_Alias STORAGE = /sbin/fdisk, /sbin/sfdisk, /sbin/parted, /sbin/partprobe, /bin/mount, /bin/umount

## Delegating permissions
Cmnd_Alias DELEGATING = /usr/sbin/visudo, /bin/chown, /bin/chmod, /bin/chgrp

## Processes
Cmnd_Alias PROCESSES = /bin/nice, /bin/kill, /usr/bin/kill, /usr/bin/killall

## Drivers
Cmnd_Alias DRIVERS = /sbin/modprobe

## Shells
Cmnd_Alias SHELLS = /bin/sh, /bin/bash, /usr/bin/rsh, /bin/dash, /bin/rbash, /bin/su

## Users
Cmnd_Alias USERS = /usr/sbin/useradd, /usr/sbin/userdel

Defaults requiretty

Defaults env_reset,tty_tickets,lecture=always,logfile=/var/log/sudo.log
Defaults env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR \
LS_COLORS MAIL PS1 PS2 QTDIR USERNAME \
LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION \
LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC \
LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS \
_XKB_CHARSET XAUTHORITY"

## Allow root to run any commands anywhere
root ALL=(ALL) ALL
%wheel ALL=(ALL) ALL
%admins ALL=(root) ALL, !SHELLS
</pre></code>

===Configured Networks===
*Configured hostname in <code>/etc/sysconfig/network</code>
<code><pre>
NETWORKING=yes
NETWORKING_IPV6=no
HOSTNAME=ds2
GATEWAY=128.153.145.1
</pre></code>

*Verified eth0 configuration for Clarkson Network in <code>/etc/sysconfig/network-scripts/ifcfg-eth0</code>
<code><pre>
# Xen Virtual Ethernet
DEVICE=eth0
BOOTPROTO=static
DHCPCLASS=
HWADDR=00:16:36:31:04:EA
IPADDR=128.153.145.46
NETMASK=255.255.255.0
ONBOOT=yes
</pre></code>

*Verified eth1 configuration for the Server Room Network in <code>/etc/sysconfig/network-scripts/ifcfg-eth1</code>
<code><pre>
# Xen Virtual Ethernet
DEVICE=eth1
BOOTPROTO=static
DHCPCLASS=
HWADDR=00:16:36:40:FB:B1
IPADDR=10.0.1.51
NETMASK=255.255.255.0
ONBOOT=yes
</pre></code>

*Verified eth2 configuration for the Internal Network in <code>/etc/sysconfig/network-scripts/ifcfg-eth2</code>
<code><pre>
# Xen Virtual Ethernet
DEVICE=eth2
BOOTPROTO=static
DHCPCLASS=
HWADDR=00:16:36:66:EB:80
IPADDR=10.0.0.23
NETMASK=255.255.255.0
ONBOOT=yes
</pre></code>

====Configured Hosts====
*Edited <code>/etc/hosts</code>
<code><pre>
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
128.153.145.46 ds2.cslabs.clarkson.edu ds2.cslabs ds2
10.0.1.51 ds2.sr.cslabs.clarkson.edu ds2.sr.cslabs ds2.sr
10.0.0.23 ds2.int.cslabs.clarkson.edu ds2.int.cslabs ds2.int
</pre></code>

*Edited <code>/etc/hosts.allow</code>
<code><pre>
For security purposes, this information has been intentionally left off.
</pre></code>

*Edited <code>/etc/hosts.deny</code>
<code><pre>
ALL: ALL
</pre></code>

====Configured DNS Servers====
*Edited <code>/etc/resolv.conf</code>
<code><pre>
search cslabs.clarkson.edu clarkson.edu
nameserver 128.153.0.254
nameserver 128.153.5.254
</pre></code>

====Disabled IP v6====
*Appended the following to <code>/etc/modprobe.conf</code>
<code><pre>
install ipv6 /bin/true
</pre></code>
*Disabled IP v6 firewall
**<code>/sbin/chkconfig ip6tables off</code>

===Configured IPtables===
<code><pre>
Due to the sensitivity of this material, this config file has been left off.
</pre></code>

===Configured SSH===
*Edited <code>/etc/ssh/sshd_config</code>
<code><pre>
Due to the sensitivity of this material, this config file has been left off.
</pre></code>
*Restarted sshd
**<code>/etc/init.d/sshd restart</code>

====Set Up SSH Login Banner====
*Edited <code>/etc/issue.net</code>
<code><pre>
__ ___
___/ /__ |_ |
/ _ (_-</ __/
\_,_/___/____/

</pre></code>

===Configured Password Requirements===
*Edited <code>/etc/login.defs</code>
<code><pre>
MAIL_DIR /var/spool/mail

PASS_MAX_DAYS 360
PASS_MIN_DAYS 0
PASS_MIN_LEN 8
PASS_WARN_AGE 60

UID_MIN 500
UID_MAX 60000

GID_MIN 500
GID_MAX 60000

CREATE_HOME yes

UMASK 077

USERGROUPS_ENAB yes

MD5_CRYPT_ENAB yes

ENCRYPT_METHOD MD5
</pre></code>

===Added Custom PATH Variables===
*Added the following to <code>/etc/profile</code>
<code><pre>
PATH=$PATH:/usr/sbin:/sbin
export PATH
</pre></code>

===Configured Aliases===
*Edited <code>/etc/aliases</code>
<code><pre>
#
# Aliases in this file will NOT be expanded in the header from
# Mail, but WILL be visible over networks or from /bin/mail.
#
# >>>>>>>>>> The program "newaliases" must be run after
# >> NOTE >> this file is updated for any changes to
# >>>>>>>>>> show through to sendmail.
#

# Basic system aliases -- these MUST be present.
mailer-daemon: postmaster
postmaster: logwatch@cslabs.clarkson.edu

# General redirections for pseudo accounts.
bin: logwatch@cslabs.clarkson.edu
daemon: logwatch@cslabs.clarkson.edu
adm: logwatch@cslabs.clarkson.edu
lp: logwatch@cslabs.clarkson.edu
sync: logwatch@cslabs.clarkson.edu
shutdown: logwatch@cslabs.clarkson.edu
halt: logwatch@cslabs.clarkson.edu
mail: logwatch@cslabs.clarkson.edu
news: logwatch@cslabs.clarkson.edu
uucp: logwatch@cslabs.clarkson.edu
operator: logwatch@cslabs.clarkson.edu
games: logwatch@cslabs.clarkson.edu
gopher: logwatch@cslabs.clarkson.edu
ftp: logwatch@cslabs.clarkson.edu
nobody: logwatch@cslabs.clarkson.edu
radiusd: logwatch@cslabs.clarkson.edu
nut: logwatch@cslabs.clarkson.edu
dbus: logwatch@cslabs.clarkson.edu
vcsa: logwatch@cslabs.clarkson.edu
canna: logwatch@cslabs.clarkson.edu
wnn: logwatch@cslabs.clarkson.edu
rpm: logwatch@cslabs.clarkson.edu
nscd: logwatch@cslabs.clarkson.edu
pcap: logwatch@cslabs.clarkson.edu
apache: logwatch@cslabs.clarkson.edu
webalizer: logwatch@cslabs.clarkson.edu
dovecot: logwatch@cslabs.clarkson.edu
fax: logwatch@cslabs.clarkson.edu
quagga: logwatch@cslabs.clarkson.edu
radvd: logwatch@cslabs.clarkson.edu
pvm: logwatch@cslabs.clarkson.edu
amanda: logwatch@cslabs.clarkson.edu
privoxy: logwatch@cslabs.clarkson.edu
ident: logwatch@cslabs.clarkson.edu
named: logwatch@cslabs.clarkson.edu
xfs: logwatch@cslabs.clarkson.edu
gdm: logwatch@cslabs.clarkson.edu
mailnull: logwatch@cslabs.clarkson.edu
postgres: logwatch@cslabs.clarkson.edu
sshd: logwatch@cslabs.clarkson.edu
smmsp: logwatch@cslabs.clarkson.edu
postfix: logwatch@cslabs.clarkson.edu
netdump: logwatch@cslabs.clarkson.edu
ldap: logwatch@cslabs.clarkson.edu
squid: logwatch@cslabs.clarkson.edu
ntp: logwatch@cslabs.clarkson.edu
mysql: logwatch@cslabs.clarkson.edu
desktop: logwatch@cslabs.clarkson.edu
rpcuser: logwatch@cslabs.clarkson.edu
rpc: logwatch@cslabs.clarkson.edu
nfsnobody: logwatch@cslabs.clarkson.edu

ingres: logwatch@cslabs.clarkson.edu
system: logwatch@cslabs.clarkson.edu
toor: logwatch@cslabs.clarkson.edu
manager: logwatch@cslabs.clarkson.edu
dumper: logwatch@cslabs.clarkson.edu
abuse: logwatch@cslabs.clarkson.edu

newsadm: news
newsadmin: news
usenet: news
ftpadm: ftp
ftpadmin: ftp
ftp-adm: ftp
ftp-admin: ftp
www: webmaster
webmaster: logwatch@cslabs.clarkson.edu
noc: logwatch@cslabs.clarkson.edu
security: logwatch@cslabs.clarkson.edu
hostmaster: logwatch@cslabs.clarkson.edu
info: postmaster
marketing: postmaster
sales: postmaster
support: postmaster

# trap decode to catch security attacks
decode: logwatch@cslabs.clarkson.edu

# Person who should get roots's mail
root: logwatch@cslabs.clarkson.edu
</pre></code>

*Updated aliases
**<code>/usr/bin/newaliases</code>

===Disabled Various Kernel Modules===
*Added the following to <code>/etc/modprobe.conf</code>
<code><pre>
install pppox /bin/true
install bluetooth /bin/true
install sctp /bin/true
</pre></code>

===Installed & Configured SNMP===
*Installed needed packages
<code><pre>
yum install net-snmp ntp
</pre></code>

*Configured SNMP Daemon <code>/etc/snmp/snmpd.conf</code>
<code><pre>
rocommunity <passphrase> 127.0.0.1
rocommunity <passphrase> <ipsallowed>
rocommunity <passphrase> <ipsallowed>

syslocation Clarkson University Applied CS Labs
syscontact Matt McCarrell <mccarrms@gmail.com>
disk /
disk /var
exec timeskew /usr/local/sbin/ntp_check
exec uptime /usr/bin/uptime
</pre></code>

*Deployed <code>ntp_check</code> script
**Copied over <code>ntp_check</code> to /usr/local/sbin/
**<code>chown root.root /usr/local/sbin/ntp_check</code>

*Configured SNMP to start at specific run levels
<code><pre>
/sbin/chkconfig --levels 2345 snmpd on
</pre></code>

*Started daemon
<code><pre>
/etc/init.d/snmpd start
</pre></code>

===Increased Detail of Logwatch Reports===
*Set detail level to be high
<code><pre>
echo "Detail = High" >> /etc/logwatch/conf/logwatch.conf
</pre></code>

[[Category:Server Setup Documentation]]

Ds1 Setup Process

Mccarrms — Tue, 17 Nov 2009 01:38:53 GMT

created

New page

This page summarizes how the virtual machine [[Ds1]] was set up in Fall 2009.

==Install==
*Installed CentOS 5.4 x64.
**Partition Scheme
***3 GB /
***1.5 GB /var
***512 MB swap

==Configuration==
===Updated System===
*Added Extra Repositories
**RPMForge Yum Repository
***<code>rpm -Uhv http://apt.sw.be/redhat/el5/en/x86_64/rpmforge/RPMS//rpmforge-release-0.3.6-1.el5.rf.x86_64.rpm</code>
****From [http://dag.wieers.com/rpm/FAQ.php#B2 Dag Wieers]
**Fedora EPEL Yum Repository
***<code>rpm -Uvh http://download.fedora.redhat.com/pub/epel/5/x86_64/epel-release-5-3.noarch.rpm</code>
****From [http://download.fedora.redhat.com/pub/epel/5/x86_64/repoview/epel-release.html Fedora]

*Configured Yum Priorities & to use our mirror
**Edited <code>/etc/yum.repos.d/CentOS-Base.repo</code>
<code><pre>
# CentOS-Base.repo
#
# This file uses a new mirrorlist system developed by Lance Davis for CentOS.
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client. You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#

[base]
name=CentOS-$releasever - Base
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os
baseurl=http://mirror.clarkson.edu/centos/$releasever/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#released updates
[updates]
name=CentOS-$releasever - Updates
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates
baseurl=http://mirror.clarkson.edu/centos/$releasever/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#packages used/produced in the build but not released
[addons]
name=CentOS-$releasever - Addons
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=addons
baseurl=http://mirror.clarkson.edu/centos/$releasever/addons/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras
baseurl=http://mirror.clarkson.edu/centos/$releasever/extras/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus
baseurl=http://mirror.clarkson.edu/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=2

#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever - Contrib
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib
baseurl=http://mirror.clarkson.edu/centos/$releasever/contrib/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=2
</pre></code>

**Edited <code>/etc/yum.repos.d/rpmforge.repo</code>
<code><pre>
# Name: RPMforge RPM Repository for Red Hat Enterprise 5 - dag
# URL: http://rpmforge.net/
[rpmforge]
name = Red Hat Enterprise $releasever - RPMforge.net - dag
baseurl = http://mirror.clarkson.edu/rpmforge/redhat/el5/en/$basearch/dag
#mirrorlist = http://apt.sw.be/redhat/el5/en/mirrors-rpmforge
#mirrorlist = file:///etc/yum.repos.d/mirrors-rpmforge
enabled = 1
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmforge-dag
gpgcheck = 1
priority=15
</pre></code>

**Edited <code>/etc/yum.repos.d/epel.repo</code>
<code><pre>
[epel]
name=Extra Packages for Enterprise Linux 5 - $basearch
baseurl=http://mirror.clarkson.edu/epel/5/$basearch
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-5&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
priority=30

[epel-debuginfo]
name=Extra Packages for Enterprise Linux 5 - $basearch - Debug
baseurl=http://mirror.clarkson.edu/epel/5/$basearch/debug
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-debug-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=30

[epel-source]
name=Extra Packages for Enterprise Linux 5 - $basearch - Source
baseurl=http://mirror.clarkson.edu/epel/5/SRPMS
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-source-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=30
</pre></code>

**Edited <code>/etc/yum.repos.d/epel-testing.repo</code>
<code><pre>
[epel-testing]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch
baseurl=http://mirror.clarkson.edu/epel/testing/5/$basearch
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
priority=40

[epel-testing-debuginfo]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch - Debug
baseurl=http://mirror.clarkson.edu/epel/testing/5/$basearch/debug
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-debug-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=40

[epel-testing-source]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch - Source
baseurl=http://mirror.clarkson.edu/epel/testing/5/SRPMS
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-source-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=40
</pre></code>

*Disabled Yum FastestMirror since using local mirror
**<code>sed -i 's/enabled=1/enabled=0/g' /etc/yum/pluginconf.d/fastestmirror.conf</code>

*Installed Yum Priorities (Note: This must be installed prior to installing the packages below.)
**<code>yum install yum-priorities</code>

*Configured Yum Priorities to check for obsoletes
**<code>echo "check_obsoletes=1" >> /etc/yum/pluginconf.d/priorities.conf</code>

*<code>yum install vim-enhanced gcc emacs-nox screen</code>
*<code>yum update</code>

===Created User===
*Created user mccarrms
**<code>/usr/sbin/useradd -m mccarrms</code>
*Set password for mccarrms
**<code>passwd mccarrms</code>

===Configured Sudo===
*<code>/usr/sbin/visudo</code>

<code><pre>
## Sudoers allows particular users to run various commands as
## the root user, without needing the root password.

## Networking
Cmnd_Alias NETWORKING = /sbin/route, /sbin/ifconfig, /bin/ping, /sbin/dhclient, /usr/bin/net, /sbin/iptables, /usr/bin/rfcomm, /usr/bin/wvdial, /sbin/iwconfig, /sbin/mii-tool

## Installation and management of software
Cmnd_Alias SOFTWARE = /bin/rpm, /usr/bin/up2date, /usr/bin/yum

## Services
Cmnd_Alias SERVICES = /sbin/service, /sbin/chkconfig

## Updating the locate database
Cmnd_Alias LOCATE = /usr/sbin/updatedb

## Storage
Cmnd_Alias STORAGE = /sbin/fdisk, /sbin/sfdisk, /sbin/parted, /sbin/partprobe, /bin/mount, /bin/umount

## Delegating permissions
Cmnd_Alias DELEGATING = /usr/sbin/visudo, /bin/chown, /bin/chmod, /bin/chgrp

## Processes
Cmnd_Alias PROCESSES = /bin/nice, /bin/kill, /usr/bin/kill, /usr/bin/killall

## Drivers
Cmnd_Alias DRIVERS = /sbin/modprobe

## Shells
Cmnd_Alias SHELLS = /bin/sh, /bin/bash, /usr/bin/rsh, /bin/dash, /bin/rbash, /bin/su

## Users
Cmnd_Alias USERS = /usr/sbin/useradd, /usr/sbin/userdel

Defaults requiretty

Defaults env_reset,tty_tickets,lecture=always,logfile=/var/log/sudo.log
Defaults env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR \
LS_COLORS MAIL PS1 PS2 QTDIR USERNAME \
LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION \
LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC \
LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS \
_XKB_CHARSET XAUTHORITY"

## Allow root to run any commands anywhere
root ALL=(ALL) ALL
%wheel ALL=(ALL) ALL
%admins ALL=(root) ALL, !SHELLS
</pre></code>

===Configured Networks===
*Configured hostname in <code>/etc/sysconfig/network</code>
<code><pre>
NETWORKING=yes
NETWORKING_IPV6=no
HOSTNAME=ds1
GATEWAY=128.153.145.1
</pre></code>

*Verified eth0 configuration for Clarkson Network in <code>/etc/sysconfig/network-scripts/ifcfg-eth0</code>
<code><pre>
# Xen Virtual Ethernet
DEVICE=eth0
BOOTPROTO=static
DHCPCLASS=
HWADDR=00:16:36:48:4A:DF
IPADDR=128.153.145.45
NETMASK=255.255.255.0
ONBOOT=yes
</pre></code>

*Verified eth1 configuration for the Server Room Network in <code>/etc/sysconfig/network-scripts/ifcfg-eth1</code>
<code><pre>
# Xen Virtual Ethernet
DEVICE=eth1
BOOTPROTO=static
DHCPCLASS=
HWADDR=00:16:36:24:8D:CB
IPADDR=10.0.1.50
NETMASK=255.255.255.0
ONBOOT=yes
</pre></code>

*Verified eth2 configuration for the Internal Network in <code>/etc/sysconfig/network-scripts/ifcfg-eth2</code>
<code><pre>
# Xen Virtual Ethernet
DEVICE=eth2
BOOTPROTO=static
DHCPCLASS=
HWADDR=00:16:36:3F:06:AE
IPADDR=10.0.0.22
NETMASK=255.255.255.0
ONBOOT=yes
</pre></code>

====Configured Hosts====
*Edited <code>/etc/hosts</code>
<code><pre>
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
128.153.145.45 ds1.cslabs.clarkson.edu ds1.cslabs ds1
10.0.1.50 ds1.sr.cslabs.clarkson.edu ds1.sr.cslabs ds1.sr
10.0.0.22 ds1.int.cslabs.clarkson.edu ds1.int.cslabs ds1.int
</pre></code>

*Edited <code>/etc/hosts.allow</code>
<code><pre>
For security purposes, this information has been intentionally left off.
</pre></code>

*Edited <code>/etc/hosts.deny</code>
<code><pre>
ALL: ALL
</pre></code>

====Configured DNS Servers====
*Edited <code>/etc/resolv.conf</code>
<code><pre>
search cslabs.clarkson.edu clarkson.edu
nameserver 128.153.0.254
nameserver 128.153.5.254
</pre></code>

====Disabled IP v6====
*Appended the following to <code>/etc/modprobe.conf</code>
<code><pre>
install ipv6 /bin/true
</pre></code>
*Disabled IP v6 firewall
**<code>/sbin/chkconfig ip6tables off</code>

===Configured IPtables===
<code><pre>
Due to the sensitivity of this material, this config file has been left off.
</pre></code>

===Configured SSH===
*Edited <code>/etc/ssh/sshd_config</code>
<code><pre>
Due to the sensitivity of this material, this config file has been left off.
</pre></code>
*Restarted sshd
**<code>/etc/init.d/sshd restart</code>

====Set Up SSH Login Banner====
*Edited <code>/etc/issue.net</code>
<code><pre>
__ ___
___/ /__< /
/ _ (_-</ /
\_,_/___/_/

</pre></code>

===Configured Password Requirements===
*Edited <code>/etc/login.defs</code>
<code><pre>
MAIL_DIR /var/spool/mail

PASS_MAX_DAYS 360
PASS_MIN_DAYS 0
PASS_MIN_LEN 8
PASS_WARN_AGE 60

UID_MIN 500
UID_MAX 60000

GID_MIN 500
GID_MAX 60000

CREATE_HOME yes

UMASK 077

USERGROUPS_ENAB yes

MD5_CRYPT_ENAB yes

ENCRYPT_METHOD MD5
</pre></code>

===Added Custom PATH Variables===
*Added the following to <code>/etc/profile</code>
<code><pre>
PATH=$PATH:/usr/sbin:/sbin
export PATH
</pre></code>

===Configured Aliases===
*Edited <code>/etc/aliases</code>
<code><pre>
#
# Aliases in this file will NOT be expanded in the header from
# Mail, but WILL be visible over networks or from /bin/mail.
#
# >>>>>>>>>> The program "newaliases" must be run after
# >> NOTE >> this file is updated for any changes to
# >>>>>>>>>> show through to sendmail.
#

# Basic system aliases -- these MUST be present.
mailer-daemon: postmaster
postmaster: logwatch@cslabs.clarkson.edu

# General redirections for pseudo accounts.
bin: logwatch@cslabs.clarkson.edu
daemon: logwatch@cslabs.clarkson.edu
adm: logwatch@cslabs.clarkson.edu
lp: logwatch@cslabs.clarkson.edu
sync: logwatch@cslabs.clarkson.edu
shutdown: logwatch@cslabs.clarkson.edu
halt: logwatch@cslabs.clarkson.edu
mail: logwatch@cslabs.clarkson.edu
news: logwatch@cslabs.clarkson.edu
uucp: logwatch@cslabs.clarkson.edu
operator: logwatch@cslabs.clarkson.edu
games: logwatch@cslabs.clarkson.edu
gopher: logwatch@cslabs.clarkson.edu
ftp: logwatch@cslabs.clarkson.edu
nobody: logwatch@cslabs.clarkson.edu
radiusd: logwatch@cslabs.clarkson.edu
nut: logwatch@cslabs.clarkson.edu
dbus: logwatch@cslabs.clarkson.edu
vcsa: logwatch@cslabs.clarkson.edu
canna: logwatch@cslabs.clarkson.edu
wnn: logwatch@cslabs.clarkson.edu
rpm: logwatch@cslabs.clarkson.edu
nscd: logwatch@cslabs.clarkson.edu
pcap: logwatch@cslabs.clarkson.edu
apache: logwatch@cslabs.clarkson.edu
webalizer: logwatch@cslabs.clarkson.edu
dovecot: logwatch@cslabs.clarkson.edu
fax: logwatch@cslabs.clarkson.edu
quagga: logwatch@cslabs.clarkson.edu
radvd: logwatch@cslabs.clarkson.edu
pvm: logwatch@cslabs.clarkson.edu
amanda: logwatch@cslabs.clarkson.edu
privoxy: logwatch@cslabs.clarkson.edu
ident: logwatch@cslabs.clarkson.edu
named: logwatch@cslabs.clarkson.edu
xfs: logwatch@cslabs.clarkson.edu
gdm: logwatch@cslabs.clarkson.edu
mailnull: logwatch@cslabs.clarkson.edu
postgres: logwatch@cslabs.clarkson.edu
sshd: logwatch@cslabs.clarkson.edu
smmsp: logwatch@cslabs.clarkson.edu
postfix: logwatch@cslabs.clarkson.edu
netdump: logwatch@cslabs.clarkson.edu
ldap: logwatch@cslabs.clarkson.edu
squid: logwatch@cslabs.clarkson.edu
ntp: logwatch@cslabs.clarkson.edu
mysql: logwatch@cslabs.clarkson.edu
desktop: logwatch@cslabs.clarkson.edu
rpcuser: logwatch@cslabs.clarkson.edu
rpc: logwatch@cslabs.clarkson.edu
nfsnobody: logwatch@cslabs.clarkson.edu

ingres: logwatch@cslabs.clarkson.edu
system: logwatch@cslabs.clarkson.edu
toor: logwatch@cslabs.clarkson.edu
manager: logwatch@cslabs.clarkson.edu
dumper: logwatch@cslabs.clarkson.edu
abuse: logwatch@cslabs.clarkson.edu

newsadm: news
newsadmin: news
usenet: news
ftpadm: ftp
ftpadmin: ftp
ftp-adm: ftp
ftp-admin: ftp
www: webmaster
webmaster: logwatch@cslabs.clarkson.edu
noc: logwatch@cslabs.clarkson.edu
security: logwatch@cslabs.clarkson.edu
hostmaster: logwatch@cslabs.clarkson.edu
info: postmaster
marketing: postmaster
sales: postmaster
support: postmaster

# trap decode to catch security attacks
decode: logwatch@cslabs.clarkson.edu

# Person who should get roots's mail
root: logwatch@cslabs.clarkson.edu
</pre></code>

*Updated aliases
**<code>/usr/bin/newaliases</code>

===Disabled Various Kernel Modules===
*Added the following to <code>/etc/modprobe.conf</code>
<code><pre>
install pppox /bin/true
install bluetooth /bin/true
install sctp /bin/true
</pre></code>

===Installed & Configured SNMP===
*Installed needed packages
<code><pre>
yum install net-snmp ntp
</pre></code>

*Configured SNMP Daemon <code>/etc/snmp/snmpd.conf</code>
<code><pre>
rocommunity <passphrase> 127.0.0.1
rocommunity <passphrase> <ipsallowed>
rocommunity <passphrase> <ipsallowed>

syslocation Clarkson University Applied CS Labs
syscontact Matt McCarrell <mccarrms@gmail.com>
disk /
disk /var
exec timeskew /usr/local/sbin/ntp_check
exec uptime /usr/bin/uptime
</pre></code>

*Deployed <code>ntp_check</code> script
**Copied over <code>ntp_check</code> to /usr/local/sbin/
**<code>chown root.root /usr/local/sbin/ntp_check</code>

*Configured SNMP to start at specific run levels
<code><pre>
/sbin/chkconfig --levels 2345 snmpd on
</pre></code>

*Started daemon
<code><pre>
/etc/init.d/snmpd start
</pre></code>

===Increased Detail of Logwatch Reports===
*Set detail level to be high
<code><pre>
echo "Detail = High" >> /etc/logwatch/conf/logwatch.conf
</pre></code>

===Modified Cron Weekly Execution Time===
This was done to reduce load spikes that produce Nagios alerts around 4:30 AM every Sunday. In the event that this VM get moved off of [[righteous]], this should be changed back to the default setting of 4:22 AM.

*Modified the following line in <code>/etc/crontab</code>
<code><pre>
32 5 * * 0 root run-parts /etc/cron.weekly
</pre></code>

[[Category:Server Setup Documentation]]

Emeeting

Mccarrms — Mon, 16 Nov 2009 22:46:10 GMT

current is x64 but may need to go back to x86... can't remember why made x86 before rebuild

← Older revision		Revision as of 22:46, 16 November 2009
Line 2:		Line 2:
	\| maintainer = [[User:mccarrms\|Matt McCarrell]]		\| maintainer = [[User:mccarrms\|Matt McCarrell]]
	\| hostname = [http://emeeting.cslabs.clarkson.edu emeeting.cslabs.clarkson.edu]		\| hostname = [http://emeeting.cslabs.clarkson.edu emeeting.cslabs.clarkson.edu]
-	\| operating_system = [[wikipedia:CentOS \| CentOS]] 5 ~~x86~~	+	\| operating_system = [[wikipedia:CentOS \| CentOS]] 5 x64
	\| ldap = No		\| ldap = No
	\| development_status = In Development		\| development_status = In Development

Ds2

Mccarrms — Mon, 16 Nov 2009 02:13:19 GMT

← Older revision		Revision as of 02:13, 16 November 2009
Line 6:		Line 6:
	\| development_status = In Development		\| development_status = In Development
	\| status = Running		\| status = Running
-	\| dom0 = [[~~Xen1~~]]	+	\| dom0 = [[Xen2]]
	}}		}}

	==Setup Process==		==Setup Process==
	*[[Ds2 Setup Process]]		*[[Ds2 Setup Process]]

Dns2

Mccarrms — Mon, 16 Nov 2009 01:45:46 GMT

← Older revision		Revision as of 01:45, 16 November 2009
Line 6:		Line 6:
	\| development_status = In Development		\| development_status = In Development
	\| status = Running		\| status = Running
-	\| dom0 = [[~~Xen1~~]]	+	\| dom0 = [[Xen2]]
	}}		}}

Dns1 Setup Process

Mccarrms — Mon, 16 Nov 2009 01:44:57 GMT

Modified Cron Weekly Execution Time:

← Older revision		Revision as of 01:44, 16 November 2009
(One intermediate revision not shown)
Line 505:		Line 505:
	<code><pre>		<code><pre>
	echo "Detail = High" >> /etc/logwatch/conf/logwatch.conf		echo "Detail = High" >> /etc/logwatch/conf/logwatch.conf
		+	</pre></code>
		+
		+	===Modified Cron Weekly Execution Time===
		+	This was done to reduce load spikes that produce Nagios alerts around 4:30 AM every Sunday. In the event that this VM get moved off of [[righteous]], this should be changed back to the default setting of 4:22 AM.
		+
		+	*Modified the following line in <code>/etc/crontab</code>
		+	<code><pre>
		+	22 5 * * 0 root run-parts /etc/cron.weekly
	</pre></code>		</pre></code>

	[[Category:Server Setup Documentation]]		[[Category:Server Setup Documentation]]

Ds1

Mccarrms — Mon, 16 Nov 2009 01:23:27 GMT

← Older revision		Revision as of 01:23, 16 November 2009
Line 6:		Line 6:
	\| development_status = In Development		\| development_status = In Development
	\| status = Running		\| status = Running
-	\| dom0 = [[~~Xen1~~]]	+	\| dom0 = [[Righteous]]
	}}		}}

	==Setup Process==		==Setup Process==
	*[[Ds1 Setup Process]]		*[[Ds1 Setup Process]]

Dns1

Mccarrms — Mon, 16 Nov 2009 01:23:12 GMT

← Older revision		Revision as of 01:23, 16 November 2009
Line 6:		Line 6:
	\| development_status = In Development		\| development_status = In Development
	\| status = Running		\| status = Running
-	\| dom0 = [[~~Xen1~~]]	+	\| dom0 = [[Righteous]]
	}}		}}

Dns2 Setup Process

Mccarrms — Mon, 16 Nov 2009 00:50:51 GMT

created

New page

This page summarizes how the virtual machine [[Dns2]] was set up in Fall 2009.

==Install==
*Installed CentOS 5.4 x64.
**Partition Scheme
***3 GB /
***1.5 GB /var
***512 MB swap

==Configuration==
===Updated System===
*Added Extra Repositories
**RPMForge Yum Repository
***<code>rpm -Uhv http://apt.sw.be/redhat/el5/en/x86_64/rpmforge/RPMS//rpmforge-release-0.3.6-1.el5.rf.x86_64.rpm</code>
****From [http://dag.wieers.com/rpm/FAQ.php#B2 Dag Wieers]
**Fedora EPEL Yum Repository
***<code>rpm -Uvh http://download.fedora.redhat.com/pub/epel/5/x86_64/epel-release-5-3.noarch.rpm</code>
****From [http://download.fedora.redhat.com/pub/epel/5/x86_64/repoview/epel-release.html Fedora]

*Configured Yum Priorities & to use our mirror
**Edited <code>/etc/yum.repos.d/CentOS-Base.repo</code>
<code><pre>
# CentOS-Base.repo
#
# This file uses a new mirrorlist system developed by Lance Davis for CentOS.
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client. You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#

[base]
name=CentOS-$releasever - Base
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os
baseurl=http://mirror.clarkson.edu/centos/$releasever/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#released updates
[updates]
name=CentOS-$releasever - Updates
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates
baseurl=http://mirror.clarkson.edu/centos/$releasever/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#packages used/produced in the build but not released
[addons]
name=CentOS-$releasever - Addons
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=addons
baseurl=http://mirror.clarkson.edu/centos/$releasever/addons/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras
baseurl=http://mirror.clarkson.edu/centos/$releasever/extras/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus
baseurl=http://mirror.clarkson.edu/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=2

#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever - Contrib
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib
baseurl=http://mirror.clarkson.edu/centos/$releasever/contrib/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=2
</pre></code>

**Edited <code>/etc/yum.repos.d/rpmforge.repo</code>
<code><pre>
# Name: RPMforge RPM Repository for Red Hat Enterprise 5 - dag
# URL: http://rpmforge.net/
[rpmforge]
name = Red Hat Enterprise $releasever - RPMforge.net - dag
baseurl = http://mirror.clarkson.edu/rpmforge/redhat/el5/en/$basearch/dag
#mirrorlist = http://apt.sw.be/redhat/el5/en/mirrors-rpmforge
#mirrorlist = file:///etc/yum.repos.d/mirrors-rpmforge
enabled = 1
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmforge-dag
gpgcheck = 1
priority=15
</pre></code>

**Edited <code>/etc/yum.repos.d/epel.repo</code>
<code><pre>
[epel]
name=Extra Packages for Enterprise Linux 5 - $basearch
baseurl=http://mirror.clarkson.edu/epel/5/$basearch
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-5&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
priority=30

[epel-debuginfo]
name=Extra Packages for Enterprise Linux 5 - $basearch - Debug
baseurl=http://mirror.clarkson.edu/epel/5/$basearch/debug
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-debug-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=30

[epel-source]
name=Extra Packages for Enterprise Linux 5 - $basearch - Source
baseurl=http://mirror.clarkson.edu/epel/5/SRPMS
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-source-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=30
</pre></code>

**Edited <code>/etc/yum.repos.d/epel-testing.repo</code>
<code><pre>
[epel-testing]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch
baseurl=http://mirror.clarkson.edu/epel/testing/5/$basearch
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
priority=40

[epel-testing-debuginfo]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch - Debug
baseurl=http://mirror.clarkson.edu/epel/testing/5/$basearch/debug
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-debug-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=40

[epel-testing-source]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch - Source
baseurl=http://mirror.clarkson.edu/epel/testing/5/SRPMS
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-source-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=40
</pre></code>

*Disabled Yum FastestMirror since using local mirror
**<code>sed -i 's/enabled=1/enabled=0/g' /etc/yum/pluginconf.d/fastestmirror.conf</code>

*Installed Yum Priorities (Note: This must be installed prior to installing the packages below.)
**<code>yum install yum-priorities</code>

*Configured Yum Priorities to check for obsoletes
**<code>echo "check_obsoletes=1" >> /etc/yum/pluginconf.d/priorities.conf</code>

*<code>yum install vim-enhanced gcc emacs-nox screen</code>
*<code>yum update</code>

===Created User===
*Created user mccarrms
**<code>/usr/sbin/useradd -m mccarrms</code>
*Set password for mccarrms
**<code>passwd mccarrms</code>

===Configured Sudo===
*<code>/usr/sbin/visudo</code>

<code><pre>
## Sudoers allows particular users to run various commands as
## the root user, without needing the root password.

## Networking
Cmnd_Alias NETWORKING = /sbin/route, /sbin/ifconfig, /bin/ping, /sbin/dhclient, /usr/bin/net, /sbin/iptables, /usr/bin/rfcomm, /usr/bin/wvdial, /sbin/iwconfig, /sbin/mii-tool

## Installation and management of software
Cmnd_Alias SOFTWARE = /bin/rpm, /usr/bin/up2date, /usr/bin/yum

## Services
Cmnd_Alias SERVICES = /sbin/service, /sbin/chkconfig

## Updating the locate database
Cmnd_Alias LOCATE = /usr/sbin/updatedb

## Storage
Cmnd_Alias STORAGE = /sbin/fdisk, /sbin/sfdisk, /sbin/parted, /sbin/partprobe, /bin/mount, /bin/umount

## Delegating permissions
Cmnd_Alias DELEGATING = /usr/sbin/visudo, /bin/chown, /bin/chmod, /bin/chgrp

## Processes
Cmnd_Alias PROCESSES = /bin/nice, /bin/kill, /usr/bin/kill, /usr/bin/killall

## Drivers
Cmnd_Alias DRIVERS = /sbin/modprobe

## Shells
Cmnd_Alias SHELLS = /bin/sh, /bin/bash, /usr/bin/rsh, /bin/dash, /bin/rbash, /bin/su

## Users
Cmnd_Alias USERS = /usr/sbin/useradd, /usr/sbin/userdel

Defaults requiretty

Defaults env_reset,tty_tickets,lecture=always,logfile=/var/log/sudo.log
Defaults env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR \
LS_COLORS MAIL PS1 PS2 QTDIR USERNAME \
LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION \
LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC \
LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS \
_XKB_CHARSET XAUTHORITY"

## Allow root to run any commands anywhere
root ALL=(ALL) ALL
%wheel ALL=(ALL) ALL
%admins ALL=(root) ALL, !SHELLS
</pre></code>

===Configured Networks===
*Configured hostname in <code>/etc/sysconfig/network</code>
<code><pre>
NETWORKING=yes
NETWORKING_IPV6=no
HOSTNAME=dns2
GATEWAY=128.153.145.1
</pre></code>

*Verified eth0 configuration for Clarkson Network in <code>/etc/sysconfig/network-scripts/ifcfg-eth0</code>
<code><pre>
# Xen Virtual Ethernet
DEVICE=eth0
BOOTPROTO=static
DHCPCLASS=
HWADDR=00:16:36:14:95:35
IPADDR=128.153.145.4
NETMASK=255.255.255.0
ONBOOT=yes
</pre></code>

====Configured Hosts====
*Edited <code>/etc/hosts</code>
<code><pre>
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
128.153.145.4 dns2.cslabs.clarkson.edu dns2.cslabs dns2
</pre></code>

*Edited <code>/etc/hosts.allow</code>
<code><pre>
For security purposes, this information has been intentionally left off.
</pre></code>

*Edited <code>/etc/hosts.deny</code>
<code><pre>
ALL: ALL
</pre></code>

====Configured DNS Servers====
*Edited <code>/etc/resolv.conf</code>
<code><pre>
search cslabs.clarkson.edu clarkson.edu
nameserver 128.153.0.254
nameserver 128.153.5.254
</pre></code>

====Disabled IP v6====
*Appended the following to <code>/etc/modprobe.conf</code>
<code><pre>
install ipv6 /bin/true
</pre></code>
*Disabled IP v6 firewall
**<code>/sbin/chkconfig ip6tables off</code>

===Configured IPtables===
<code><pre>
Due to the sensitivity of this material, this config file has been left off; however, the following rule is needed.

-A INPUT -p udp -m udp --dport 53 -j ACCEPT
</pre></code>

===Configured SSH===
*Edited <code>/etc/ssh/sshd_config</code>
<code><pre>
Due to the sensitivity of this material, this config file has been left off.
</pre></code>
*Restarted sshd
**<code>/etc/init.d/sshd restart</code>

====Set Up SSH Login Banner====
*Edited <code>/etc/issue.net</code>
<code><pre>
__ ___
___/ /__ ___ |_ |
/ _ / _ \(_-</ __/
\_,_/_//_/___/____/

</pre></code>

===Configured Password Requirements===
*Edited <code>/etc/login.defs</code>
<code><pre>
MAIL_DIR /var/spool/mail

PASS_MAX_DAYS 360
PASS_MIN_DAYS 0
PASS_MIN_LEN 8
PASS_WARN_AGE 60

UID_MIN 500
UID_MAX 60000

GID_MIN 500
GID_MAX 60000

CREATE_HOME yes

UMASK 077

USERGROUPS_ENAB yes

MD5_CRYPT_ENAB yes

ENCRYPT_METHOD MD5
</pre></code>

===Added Custom PATH Variables===
*Added the following to <code>/etc/profile</code>
<code><pre>
PATH=$PATH:/usr/sbin:/sbin
export PATH
</pre></code>

===Configured Aliases===
*Edited <code>/etc/aliases</code>
<code><pre>
#
# Aliases in this file will NOT be expanded in the header from
# Mail, but WILL be visible over networks or from /bin/mail.
#
# >>>>>>>>>> The program "newaliases" must be run after
# >> NOTE >> this file is updated for any changes to
# >>>>>>>>>> show through to sendmail.
#

# Basic system aliases -- these MUST be present.
mailer-daemon: postmaster
postmaster: logwatch@cslabs.clarkson.edu

# General redirections for pseudo accounts.
bin: logwatch@cslabs.clarkson.edu
daemon: logwatch@cslabs.clarkson.edu
adm: logwatch@cslabs.clarkson.edu
lp: logwatch@cslabs.clarkson.edu
sync: logwatch@cslabs.clarkson.edu
shutdown: logwatch@cslabs.clarkson.edu
halt: logwatch@cslabs.clarkson.edu
mail: logwatch@cslabs.clarkson.edu
news: logwatch@cslabs.clarkson.edu
uucp: logwatch@cslabs.clarkson.edu
operator: logwatch@cslabs.clarkson.edu
games: logwatch@cslabs.clarkson.edu
gopher: logwatch@cslabs.clarkson.edu
ftp: logwatch@cslabs.clarkson.edu
nobody: logwatch@cslabs.clarkson.edu
radiusd: logwatch@cslabs.clarkson.edu
nut: logwatch@cslabs.clarkson.edu
dbus: logwatch@cslabs.clarkson.edu
vcsa: logwatch@cslabs.clarkson.edu
canna: logwatch@cslabs.clarkson.edu
wnn: logwatch@cslabs.clarkson.edu
rpm: logwatch@cslabs.clarkson.edu
nscd: logwatch@cslabs.clarkson.edu
pcap: logwatch@cslabs.clarkson.edu
apache: logwatch@cslabs.clarkson.edu
webalizer: logwatch@cslabs.clarkson.edu
dovecot: logwatch@cslabs.clarkson.edu
fax: logwatch@cslabs.clarkson.edu
quagga: logwatch@cslabs.clarkson.edu
radvd: logwatch@cslabs.clarkson.edu
pvm: logwatch@cslabs.clarkson.edu
amanda: logwatch@cslabs.clarkson.edu
privoxy: logwatch@cslabs.clarkson.edu
ident: logwatch@cslabs.clarkson.edu
named: logwatch@cslabs.clarkson.edu
xfs: logwatch@cslabs.clarkson.edu
gdm: logwatch@cslabs.clarkson.edu
mailnull: logwatch@cslabs.clarkson.edu
postgres: logwatch@cslabs.clarkson.edu
sshd: logwatch@cslabs.clarkson.edu
smmsp: logwatch@cslabs.clarkson.edu
postfix: logwatch@cslabs.clarkson.edu
netdump: logwatch@cslabs.clarkson.edu
ldap: logwatch@cslabs.clarkson.edu
squid: logwatch@cslabs.clarkson.edu
ntp: logwatch@cslabs.clarkson.edu
mysql: logwatch@cslabs.clarkson.edu
desktop: logwatch@cslabs.clarkson.edu
rpcuser: logwatch@cslabs.clarkson.edu
rpc: logwatch@cslabs.clarkson.edu
nfsnobody: logwatch@cslabs.clarkson.edu

ingres: logwatch@cslabs.clarkson.edu
system: logwatch@cslabs.clarkson.edu
toor: logwatch@cslabs.clarkson.edu
manager: logwatch@cslabs.clarkson.edu
dumper: logwatch@cslabs.clarkson.edu
abuse: logwatch@cslabs.clarkson.edu

newsadm: news
newsadmin: news
usenet: news
ftpadm: ftp
ftpadmin: ftp
ftp-adm: ftp
ftp-admin: ftp
www: webmaster
webmaster: logwatch@cslabs.clarkson.edu
noc: logwatch@cslabs.clarkson.edu
security: logwatch@cslabs.clarkson.edu
hostmaster: logwatch@cslabs.clarkson.edu
info: postmaster
marketing: postmaster
sales: postmaster
support: postmaster

# trap decode to catch security attacks
decode: logwatch@cslabs.clarkson.edu

# Person who should get roots's mail
root: logwatch@cslabs.clarkson.edu
</pre></code>

*Updated aliases
**<code>/usr/bin/newaliases</code>

===Disabled Various Kernel Modules===
*Added the following to <code>/etc/modprobe.conf</code>
<code><pre>
install pppox /bin/true
install bluetooth /bin/true
install sctp /bin/true
</pre></code>

===Installed & Configured SNMP===
*Installed needed packages
<code><pre>
yum install net-snmp ntp
</pre></code>

*Configured SNMP Daemon <code>/etc/snmp/snmpd.conf</code>
<code><pre>
rocommunity <passphrase> 127.0.0.1
rocommunity <passphrase> <ipsallowed>

syslocation Clarkson University Applied CS Labs
syscontact Matt McCarrell <mccarrms@gmail.com>
disk /
disk /var
exec timeskew /usr/local/sbin/ntp_check
exec uptime /usr/bin/uptime
</pre></code>

*Deployed <code>ntp_check</code> script
**Copied over <code>ntp_check</code> to /usr/local/sbin/
**<code>chown root.root /usr/local/sbin/ntp_check</code>

*Configured SNMP to start at specific run levels
<code><pre>
/sbin/chkconfig --levels 2345 snmpd on
</pre></code>

*Started daemon
<code><pre>
/etc/init.d/snmpd start
</pre></code>

===Increased Detail of Logwatch Reports===
*Set detail level to be high
<code><pre>
echo "Detail = High" >> /etc/logwatch/conf/logwatch.conf
</pre></code>

[[Category:Server Setup Documentation]]

Dns1 Setup Process

Mccarrms — Mon, 16 Nov 2009 00:49:24 GMT

Configured IPtables:

← Older revision		Revision as of 00:49, 16 November 2009
(One intermediate revision not shown)
Line 299:		Line 299:
	===Configured IPtables===		===Configured IPtables===
	<code><pre>		<code><pre>
-	Due to the sensitivity of this material, this config file has been left off; however, the following ~~rules are~~ needed.	+	Due to the sensitivity of this material, this config file has been left off; however, the following rule is needed.
		+
		+	-A INPUT -p udp -m udp --dport 53 -j ACCEPT
	</pre></code>		</pre></code>

Dns2

Mccarrms — Mon, 16 Nov 2009 00:29:50 GMT

added desc.

← Older revision		Revision as of 00:29, 16 November 2009
Line 8:		Line 8:
	\| dom0 = [[Xen1]]		\| dom0 = [[Xen1]]
	}}		}}
		+
		+	'''dns2''' is the slave DNS server for the cslabs.clarkson.edu domain.
		+

	==Setup Process==		==Setup Process==
	*[[Dns2 Setup Process]]		*[[Dns2 Setup Process]]

Dns1

Mccarrms — Mon, 16 Nov 2009 00:28:51 GMT

added desc

← Older revision		Revision as of 00:28, 16 November 2009
Line 8:		Line 8:
	\| dom0 = [[Xen1]]		\| dom0 = [[Xen1]]
	}}		}}
		+
		+	'''dns1''' is the master DNS server for the cslabs.clarkson.edu domain.
		+

	==Setup Process==		==Setup Process==
	*[[Dns1 Setup Process]]		*[[Dns1 Setup Process]]

Dns1 Setup Process

Mccarrms — Mon, 16 Nov 2009 00:22:46 GMT

created

New page

This page summarizes how the virtual machine [[Dns1]] was set up in Fall 2009.

==Install==
*Installed CentOS 5.4 x64.
**Partition Scheme
***3 GB /
***1.5 GB /var
***512 MB swap

==Configuration==
===Updated System===
*Added Extra Repositories
**RPMForge Yum Repository
***<code>rpm -Uhv http://apt.sw.be/redhat/el5/en/x86_64/rpmforge/RPMS//rpmforge-release-0.3.6-1.el5.rf.x86_64.rpm</code>
****From [http://dag.wieers.com/rpm/FAQ.php#B2 Dag Wieers]
**Fedora EPEL Yum Repository
***<code>rpm -Uvh http://download.fedora.redhat.com/pub/epel/5/x86_64/epel-release-5-3.noarch.rpm</code>
****From [http://download.fedora.redhat.com/pub/epel/5/x86_64/repoview/epel-release.html Fedora]

*Configured Yum Priorities & to use our mirror
**Edited <code>/etc/yum.repos.d/CentOS-Base.repo</code>
<code><pre>
# CentOS-Base.repo
#
# This file uses a new mirrorlist system developed by Lance Davis for CentOS.
# The mirror system uses the connecting IP address of the client and the
# update status of each mirror to pick mirrors that are updated to and
# geographically close to the client. You should use this for CentOS updates
# unless you are manually picking other mirrors.
#
# If the mirrorlist= does not work for you, as a fall back you can try the
# remarked out baseurl= line instead.
#
#

[base]
name=CentOS-$releasever - Base
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os
baseurl=http://mirror.clarkson.edu/centos/$releasever/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#released updates
[updates]
name=CentOS-$releasever - Updates
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates
baseurl=http://mirror.clarkson.edu/centos/$releasever/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#packages used/produced in the build but not released
[addons]
name=CentOS-$releasever - Addons
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=addons
baseurl=http://mirror.clarkson.edu/centos/$releasever/addons/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#additional packages that may be useful
[extras]
name=CentOS-$releasever - Extras
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras
baseurl=http://mirror.clarkson.edu/centos/$releasever/extras/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=1

#additional packages that extend functionality of existing packages
[centosplus]
name=CentOS-$releasever - Plus
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus
baseurl=http://mirror.clarkson.edu/centos/$releasever/centosplus/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=2

#contrib - packages by Centos Users
[contrib]
name=CentOS-$releasever - Contrib
#mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib
baseurl=http://mirror.clarkson.edu/centos/$releasever/contrib/$basearch/
gpgcheck=1
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
priority=2
</pre></code>

**Edited <code>/etc/yum.repos.d/rpmforge.repo</code>
<code><pre>
# Name: RPMforge RPM Repository for Red Hat Enterprise 5 - dag
# URL: http://rpmforge.net/
[rpmforge]
name = Red Hat Enterprise $releasever - RPMforge.net - dag
baseurl = http://mirror.clarkson.edu/rpmforge/redhat/el5/en/$basearch/dag
#mirrorlist = http://apt.sw.be/redhat/el5/en/mirrors-rpmforge
#mirrorlist = file:///etc/yum.repos.d/mirrors-rpmforge
enabled = 1
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rpmforge-dag
gpgcheck = 1
priority=15
</pre></code>

**Edited <code>/etc/yum.repos.d/epel.repo</code>
<code><pre>
[epel]
name=Extra Packages for Enterprise Linux 5 - $basearch
baseurl=http://mirror.clarkson.edu/epel/5/$basearch
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-5&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
priority=30

[epel-debuginfo]
name=Extra Packages for Enterprise Linux 5 - $basearch - Debug
baseurl=http://mirror.clarkson.edu/epel/5/$basearch/debug
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-debug-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=30

[epel-source]
name=Extra Packages for Enterprise Linux 5 - $basearch - Source
baseurl=http://mirror.clarkson.edu/epel/5/SRPMS
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-source-5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=30
</pre></code>

**Edited <code>/etc/yum.repos.d/epel-testing.repo</code>
<code><pre>
[epel-testing]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch
baseurl=http://mirror.clarkson.edu/epel/testing/5/$basearch
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
priority=40

[epel-testing-debuginfo]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch - Debug
baseurl=http://mirror.clarkson.edu/epel/testing/5/$basearch/debug
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-debug-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=40

[epel-testing-source]
name=Extra Packages for Enterprise Linux 5 - Testing - $basearch - Source
baseurl=http://mirror.clarkson.edu/epel/testing/5/SRPMS
#mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=testing-source-epel5&arch=$basearch
failovermethod=priority
enabled=0
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL
gpgcheck=1
priority=40
</pre></code>

*Disabled Yum FastestMirror since using local mirror
**<code>sed -i 's/enabled=1/enabled=0/g' /etc/yum/pluginconf.d/fastestmirror.conf</code>

*Installed Yum Priorities (Note: This must be installed prior to installing the packages below.)
**<code>yum install yum-priorities</code>

*Configured Yum Priorities to check for obsoletes
**<code>echo "check_obsoletes=1" >> /etc/yum/pluginconf.d/priorities.conf</code>

*<code>yum install vim-enhanced gcc emacs-nox screen</code>
*<code>yum update</code>

===Created User===
*Created user mccarrms
**<code>/usr/sbin/useradd -m mccarrms</code>
*Set password for mccarrms
**<code>passwd mccarrms</code>

===Configured Sudo===
*<code>/usr/sbin/visudo</code>

<code><pre>
## Sudoers allows particular users to run various commands as
## the root user, without needing the root password.

## Networking
Cmnd_Alias NETWORKING = /sbin/route, /sbin/ifconfig, /bin/ping, /sbin/dhclient, /usr/bin/net, /sbin/iptables, /usr/bin/rfcomm, /usr/bin/wvdial, /sbin/iwconfig, /sbin/mii-tool

## Installation and management of software
Cmnd_Alias SOFTWARE = /bin/rpm, /usr/bin/up2date, /usr/bin/yum

## Services
Cmnd_Alias SERVICES = /sbin/service, /sbin/chkconfig

## Updating the locate database
Cmnd_Alias LOCATE = /usr/sbin/updatedb

## Storage
Cmnd_Alias STORAGE = /sbin/fdisk, /sbin/sfdisk, /sbin/parted, /sbin/partprobe, /bin/mount, /bin/umount

## Delegating permissions
Cmnd_Alias DELEGATING = /usr/sbin/visudo, /bin/chown, /bin/chmod, /bin/chgrp

## Processes
Cmnd_Alias PROCESSES = /bin/nice, /bin/kill, /usr/bin/kill, /usr/bin/killall

## Drivers
Cmnd_Alias DRIVERS = /sbin/modprobe

## Shells
Cmnd_Alias SHELLS = /bin/sh, /bin/bash, /usr/bin/rsh, /bin/dash, /bin/rbash, /bin/su

## Users
Cmnd_Alias USERS = /usr/sbin/useradd, /usr/sbin/userdel

Defaults requiretty

Defaults env_reset,tty_tickets,lecture=always,logfile=/var/log/sudo.log
Defaults env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR \
LS_COLORS MAIL PS1 PS2 QTDIR USERNAME \
LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION \
LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC \
LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS \
_XKB_CHARSET XAUTHORITY"

## Allow root to run any commands anywhere
root ALL=(ALL) ALL
%wheel ALL=(ALL) ALL
%admins ALL=(root) ALL, !SHELLS
</pre></code>

===Configured Networks===
*Configured hostname in <code>/etc/sysconfig/network</code>
<code><pre>
NETWORKING=yes
NETWORKING_IPV6=no
HOSTNAME=dns1
GATEWAY=128.153.145.1
</pre></code>

*Verified eth0 configuration for Clarkson Network in <code>/etc/sysconfig/network-scripts/ifcfg-eth0</code>
<code><pre>
# Xen Virtual Ethernet
DEVICE=eth0
BOOTPROTO=static
DHCPCLASS=
HWADDR=00:16:36:15:A4:3D
IPADDR=128.153.145.3
NETMASK=255.255.255.0
ONBOOT=yes
</pre></code>

====Configured Hosts====
*Edited <code>/etc/hosts</code>
<code><pre>
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
128.153.145.3 dns1.cslabs.clarkson.edu dns1.cslabs dns1
</pre></code>

*Edited <code>/etc/hosts.allow</code>
<code><pre>
For security purposes, this information has been intentionally left off.
</pre></code>

*Edited <code>/etc/hosts.deny</code>
<code><pre>
ALL: ALL
</pre></code>

====Configured DNS Servers====
*Edited <code>/etc/resolv.conf</code>
<code><pre>
search cslabs.clarkson.edu clarkson.edu
nameserver 128.153.0.254
nameserver 128.153.5.254
</pre></code>

====Disabled IP v6====
*Appended the following to <code>/etc/modprobe.conf</code>
<code><pre>
install ipv6 /bin/true
</pre></code>
*Disabled IP v6 firewall
**<code>/sbin/chkconfig ip6tables off</code>

===Configured IPtables===
<code><pre>
Due to the sensitivity of this material, this config file has been left off; however, the following rules are needed.
</pre></code>

===Configured SSH===
*Edited <code>/etc/ssh/sshd_config</code>
<code><pre>
Due to the sensitivity of this material, this config file has been left off.
</pre></code>
*Restarted sshd
**<code>/etc/init.d/sshd restart</code>

====Set Up SSH Login Banner====
*Edited <code>/etc/issue.net</code>
<code><pre>
__ ___
___/ /__ ___< /
/ _ / _ \(_-</ /
\_,_/_//_/___/_/

</pre></code>

===Configured Password Requirements===
*Edited <code>/etc/login.defs</code>
<code><pre>
MAIL_DIR /var/spool/mail

PASS_MAX_DAYS 360
PASS_MIN_DAYS 0
PASS_MIN_LEN 8
PASS_WARN_AGE 60

UID_MIN 500
UID_MAX 60000

GID_MIN 500
GID_MAX 60000

CREATE_HOME yes

UMASK 077

USERGROUPS_ENAB yes

MD5_CRYPT_ENAB yes

ENCRYPT_METHOD MD5
</pre></code>

===Added Custom PATH Variables===
*Added the following to <code>/etc/profile</code>
<code><pre>
PATH=$PATH:/usr/sbin:/sbin
export PATH
</pre></code>

===Configured Aliases===
*Edited <code>/etc/aliases</code>
<code><pre>
#
# Aliases in this file will NOT be expanded in the header from
# Mail, but WILL be visible over networks or from /bin/mail.
#
# >>>>>>>>>> The program "newaliases" must be run after
# >> NOTE >> this file is updated for any changes to
# >>>>>>>>>> show through to sendmail.
#

# Basic system aliases -- these MUST be present.
mailer-daemon: postmaster
postmaster: logwatch@cslabs.clarkson.edu

# General redirections for pseudo accounts.
bin: logwatch@cslabs.clarkson.edu
daemon: logwatch@cslabs.clarkson.edu
adm: logwatch@cslabs.clarkson.edu
lp: logwatch@cslabs.clarkson.edu
sync: logwatch@cslabs.clarkson.edu
shutdown: logwatch@cslabs.clarkson.edu
halt: logwatch@cslabs.clarkson.edu
mail: logwatch@cslabs.clarkson.edu
news: logwatch@cslabs.clarkson.edu
uucp: logwatch@cslabs.clarkson.edu
operator: logwatch@cslabs.clarkson.edu
games: logwatch@cslabs.clarkson.edu
gopher: logwatch@cslabs.clarkson.edu
ftp: logwatch@cslabs.clarkson.edu
nobody: logwatch@cslabs.clarkson.edu
radiusd: logwatch@cslabs.clarkson.edu
nut: logwatch@cslabs.clarkson.edu
dbus: logwatch@cslabs.clarkson.edu
vcsa: logwatch@cslabs.clarkson.edu
canna: logwatch@cslabs.clarkson.edu
wnn: logwatch@cslabs.clarkson.edu
rpm: logwatch@cslabs.clarkson.edu
nscd: logwatch@cslabs.clarkson.edu
pcap: logwatch@cslabs.clarkson.edu
apache: logwatch@cslabs.clarkson.edu
webalizer: logwatch@cslabs.clarkson.edu
dovecot: logwatch@cslabs.clarkson.edu
fax: logwatch@cslabs.clarkson.edu
quagga: logwatch@cslabs.clarkson.edu
radvd: logwatch@cslabs.clarkson.edu
pvm: logwatch@cslabs.clarkson.edu
amanda: logwatch@cslabs.clarkson.edu
privoxy: logwatch@cslabs.clarkson.edu
ident: logwatch@cslabs.clarkson.edu
named: logwatch@cslabs.clarkson.edu
xfs: logwatch@cslabs.clarkson.edu
gdm: logwatch@cslabs.clarkson.edu
mailnull: logwatch@cslabs.clarkson.edu
postgres: logwatch@cslabs.clarkson.edu
sshd: logwatch@cslabs.clarkson.edu
smmsp: logwatch@cslabs.clarkson.edu
postfix: logwatch@cslabs.clarkson.edu
netdump: logwatch@cslabs.clarkson.edu
ldap: logwatch@cslabs.clarkson.edu
squid: logwatch@cslabs.clarkson.edu
ntp: logwatch@cslabs.clarkson.edu
mysql: logwatch@cslabs.clarkson.edu
desktop: logwatch@cslabs.clarkson.edu
rpcuser: logwatch@cslabs.clarkson.edu
rpc: logwatch@cslabs.clarkson.edu
nfsnobody: logwatch@cslabs.clarkson.edu

ingres: logwatch@cslabs.clarkson.edu
system: logwatch@cslabs.clarkson.edu
toor: logwatch@cslabs.clarkson.edu
manager: logwatch@cslabs.clarkson.edu
dumper: logwatch@cslabs.clarkson.edu
abuse: logwatch@cslabs.clarkson.edu

newsadm: news
newsadmin: news
usenet: news
ftpadm: ftp
ftpadmin: ftp
ftp-adm: ftp
ftp-admin: ftp
www: webmaster
webmaster: logwatch@cslabs.clarkson.edu
noc: logwatch@cslabs.clarkson.edu
security: logwatch@cslabs.clarkson.edu
hostmaster: logwatch@cslabs.clarkson.edu
info: postmaster
marketing: postmaster
sales: postmaster
support: postmaster

# trap decode to catch security attacks
decode: logwatch@cslabs.clarkson.edu

# Person who should get roots's mail
root: logwatch@cslabs.clarkson.edu
</pre></code>

*Updated aliases
**<code>/usr/bin/newaliases</code>

===Disabled Various Kernel Modules===
*Added the following to <code>/etc/modprobe.conf</code>
<code><pre>
install pppox /bin/true
install bluetooth /bin/true
install sctp /bin/true
</pre></code>

===Installed & Configured SNMP===
*Installed needed packages
<code><pre>
yum install net-snmp ntp
</pre></code>

*Configured SNMP Daemon <code>/etc/snmp/snmpd.conf</code>
<code><pre>
rocommunity <passphrase> 127.0.0.1
rocommunity <passphrase> <ipsallowed>

syslocation Clarkson University Applied CS Labs
syscontact Matt McCarrell <mccarrms@gmail.com>
disk /
disk /var
exec timeskew /usr/local/sbin/ntp_check
exec uptime /usr/bin/uptime
</pre></code>

*Deployed <code>ntp_check</code> script
**Copied over <code>ntp_check</code> to /usr/local/sbin/
**<code>chown root.root /usr/local/sbin/ntp_check</code>

*Configured SNMP to start at specific run levels
<code><pre>
/sbin/chkconfig --levels 2345 snmpd on
</pre></code>

*Started daemon
<code><pre>
/etc/init.d/snmpd start
</pre></code>

===Increased Detail of Logwatch Reports===
*Set detail level to be high
<code><pre>
echo "Detail = High" >> /etc/logwatch/conf/logwatch.conf
</pre></code>

[[Category:Server Setup Documentation]]

Emeeting Setup Process

Mccarrms — Sun, 15 Nov 2009 22:02:43 GMT

redo

Show changes

Category:Projects

Deshantm — Sun, 15 Nov 2009 21:37:05 GMT

OSCKAR:

← Older revision		Revision as of 21:37, 15 November 2009
Line 32:		Line 32:
	Lead: [[User:Deshantm\|Todd Deshane]], [[User:wilburpf\|Pat Wilbur]]		Lead: [[User:Deshantm\|Todd Deshane]], [[User:wilburpf\|Pat Wilbur]]

-	Other Members: [[User:rossca\|Chelsea Ross]], [[User:roscoebj\|Brian Roscoe]]	+	Other Members: [[User:rossca\|Chelsea Ross]], [[User:roscoebj\|Brian Roscoe]] [[User:platekme\|Mark Platek]]

	===[[Open Server Platform]]===		===[[Open Server Platform]]===

Ds2.dev

Mccarrms — Sun, 15 Nov 2009 21:16:48 GMT

created

New page

{{VM|
| maintainer = [[User:mccarrms|Matt McCarrell]]
| hostname = ds2.dev.cslabs.clarkson.edu
| operating_system = [[wikipedia:CentOS | CentOS]] 5 x64
| ldap = No
| development_status = In Development
| status = Running
| dom0 = [[Xen1]]
}}

Ds1.dev

Mccarrms — Sun, 15 Nov 2009 21:16:13 GMT

created

New page

{{VM|
| maintainer = [[User:mccarrms|Matt McCarrell]]
| hostname = ds1.dev.cslabs.clarkson.edu
| operating_system = [[wikipedia:CentOS | CentOS]] 5 x64
| ldap = No
| development_status = In Development
| status = Running
| dom0 = [[Xen1]]
}}

Ds2

Mccarrms — Sun, 15 Nov 2009 21:15:56 GMT

created

New page

{{VM|
| maintainer = [[User:mccarrms|Matt McCarrell]]
| hostname = ds2.cslabs.clarkson.edu
| operating_system = [[wikipedia:CentOS | CentOS]] 5 x64
| ldap = No
| development_status = In Development
| status = Running
| dom0 = [[Xen1]]
}}

==Setup Process==
*[[Ds2 Setup Process]]

Ds1

Mccarrms — Sun, 15 Nov 2009 21:15:42 GMT

created

New page

{{VM|
| maintainer = [[User:mccarrms|Matt McCarrell]]
| hostname = ds1.cslabs.clarkson.edu
| operating_system = [[wikipedia:CentOS | CentOS]] 5 x64
| ldap = No
| development_status = In Development
| status = Running
| dom0 = [[Xen1]]
}}

==Setup Process==
*[[Ds1 Setup Process]]

Dns2.dev

Mccarrms — Sun, 15 Nov 2009 21:15:01 GMT

created

New page

{{VM|
| maintainer = [[User:mccarrms|Matt McCarrell]]
| hostname = dns2.dev.cslabs.clarkson.edu
| operating_system = [[wikipedia:CentOS | CentOS]] 5 x64
| ldap = No
| development_status = In Development
| status = Running
| dom0 = [[Xen1]]
}}

Dns1.dev

Mccarrms — Sun, 15 Nov 2009 21:14:33 GMT

created

New page

{{VM|
| maintainer = [[User:mccarrms|Matt McCarrell]]
| hostname = dns1.dev.cslabs.clarkson.edu
| operating_system = [[wikipedia:CentOS | CentOS]] 5 x64
| ldap = No
| development_status = In Development
| status = Running
| dom0 = [[Xen1]]
}}

Dns2

Mccarrms — Sun, 15 Nov 2009 21:14:09 GMT

created

New page

{{VM|
| maintainer = [[User:mccarrms|Matt McCarrell]]
| hostname = dns2.cslabs.clarkson.edu, dns2.cosi.clarkson.edu
| operating_system = [[wikipedia:CentOS | CentOS]] 5 x64
| ldap = No
| development_status = In Development
| status = Running
| dom0 = [[Xen1]]
}}

==Setup Process==
*[[Dns2 Setup Process]]

Dns1

Mccarrms — Sun, 15 Nov 2009 21:13:50 GMT

created

New page

{{VM|
| maintainer = [[User:mccarrms|Matt McCarrell]]
| hostname = dns1.cslabs.clarkson.edu, dns1.cosi.clarkson.edu
| operating_system = [[wikipedia:CentOS | CentOS]] 5 x64
| ldap = No
| development_status = In Development
| status = Running
| dom0 = [[Xen1]]
}}

==Setup Process==
*[[Dns1 Setup Process]]

Web1 Setup Process

Mccarrms — Sun, 15 Nov 2009 17:44:00 GMT

Configured Networks:

← Older revision		Revision as of 17:44, 15 November 2009
Line 250:		Line 250:
	NETWORKING=yes		NETWORKING=yes
	NETWORKING_IPV6=no		NETWORKING_IPV6=no
-	HOSTNAME=web1~~.cslabs.clarkson.edu~~	+	HOSTNAME=web1
	</pre></code>		</pre></code>

NetStat Setup Process

Mccarrms — Sun, 15 Nov 2009 17:43:46 GMT

Configured Networks:

← Older revision		Revision as of 17:43, 15 November 2009
Line 251:		Line 251:
	NETWORKING=yes		NETWORKING=yes
	NETWORKING_IPV6=no		NETWORKING_IPV6=no
-	HOSTNAME=netstat~~.cslabs.clarkson.edu~~	+	HOSTNAME=netstat
	</pre></code>		</pre></code>

Mysql Setup Process

Mccarrms — Sun, 15 Nov 2009 17:43:34 GMT

Configured Networks:

← Older revision		Revision as of 17:43, 15 November 2009
Line 249:		Line 249:
	NETWORKING=yes		NETWORKING=yes
	NETWORKING_IPV6=no		NETWORKING_IPV6=no
-	HOSTNAME=mysql~~.cslabs.clarkson.edu~~	+	HOSTNAME=mysql
	</pre></code>		</pre></code>

Isengard Setup Process

Mccarrms — Sun, 15 Nov 2009 17:43:20 GMT

Configured Networks:

← Older revision		Revision as of 17:43, 15 November 2009
Line 250:		Line 250:
	NETWORKING=yes		NETWORKING=yes
	NETWORKING_IPV6=no		NETWORKING_IPV6=no
-	HOSTNAME=isengard~~.cslabs.clarkson.edu~~	+	HOSTNAME=isengard
	</pre></code>		</pre></code>

Emeeting Setup Process

Mccarrms — Sun, 15 Nov 2009 17:43:03 GMT

Blanked the page

Show changes

Dns Setup Process

Mccarrms — Sun, 15 Nov 2009 17:42:52 GMT

Configured Networks:

← Older revision		Revision as of 17:42, 15 November 2009
Line 252:		Line 252:
	NETWORKING=yes		NETWORKING=yes
	NETWORKING_IPV6=no		NETWORKING_IPV6=no
-	HOSTNAME=dns~~.cslabs.clarkson.edu~~	+	HOSTNAME=dns
	</pre></code>		</pre></code>

Xen2 Setup Process

Mccarrms — Sun, 15 Nov 2009 17:40:32 GMT

Configured Networks:

← Older revision		Revision as of 17:40, 15 November 2009
Line 300:		Line 300:
	NETWORKING=yes		NETWORKING=yes
	NETWORKING_IPV6=no		NETWORKING_IPV6=no
-	HOSTNAME=xen2~~.cslabs.clarkson.edu~~	+	HOSTNAME=xen2
	GATEWAY=128.153.145.1		GATEWAY=128.153.145.1
	</pre></code>		</pre></code>

Xen1 Setup Process

Mccarrms — Sun, 15 Nov 2009 17:40:20 GMT

Configured Networks:

← Older revision		Revision as of 17:40, 15 November 2009
Line 300:		Line 300:
	NETWORKING=yes		NETWORKING=yes
	NETWORKING_IPV6=no		NETWORKING_IPV6=no
-	HOSTNAME=xen1~~.cslabs.clarkson.edu~~	+	HOSTNAME=xen1
	GATEWAY=128.153.145.1		GATEWAY=128.153.145.1
	</pre></code>		</pre></code>

Righteous Setup Process

Mccarrms — Sun, 15 Nov 2009 17:40:09 GMT

Configured Networks:

← Older revision		Revision as of 17:40, 15 November 2009
Line 302:		Line 302:
	NETWORKING=yes		NETWORKING=yes
	NETWORKING_IPV6=no		NETWORKING_IPV6=no
-	HOSTNAME=righteous~~.cslabs.clarkson.edu~~	+	HOSTNAME=righteous
	GATEWAY=128.153.145.1		GATEWAY=128.153.145.1
	</pre></code>		</pre></code>

PLBackup1 Setup Process

Mccarrms — Sun, 15 Nov 2009 17:39:55 GMT

Configured Networks:

← Older revision		Revision as of 17:39, 15 November 2009
Line 297:		Line 297:
	NETWORKING=yes		NETWORKING=yes
	NETWORKING_IPV6=no		NETWORKING_IPV6=no
-	HOSTNAME=plbackup1~~.cslabs.clarkson.edu~~	+	HOSTNAME=plbackup1
	GATEWAY=128.153.146.1		GATEWAY=128.153.146.1
	</pre></code>		</pre></code>

Mirror Setup Process

Mccarrms — Sun, 15 Nov 2009 17:39:45 GMT

Configured Networks:

← Older revision		Revision as of 17:39, 15 November 2009
Line 304:		Line 304:
	NETWORKING=yes		NETWORKING=yes
	NETWORKING_IPV6=no		NETWORKING_IPV6=no
-	HOSTNAME=mirror~~.clarkson.edu~~	+	HOSTNAME=mirror
	GATEWAY=128.153.145.1		GATEWAY=128.153.145.1
	</pre></code>		</pre></code>

Animal Setup Process

Mccarrms — Sun, 15 Nov 2009 17:39:35 GMT

Configured Networks:

← Older revision		Revision as of 17:39, 15 November 2009
Line 290:		Line 290:
	NETWORKING=yes		NETWORKING=yes
	NETWORKING_IPV6=no		NETWORKING_IPV6=no
-	HOSTNAME=animal~~.cslabs.clarkson.edu~~	+	HOSTNAME=animal
	GATEWAY=128.153.145.1		GATEWAY=128.153.145.1
	</pre></code>		</pre></code>

Xen2 Setup Process

Mccarrms — Sun, 15 Nov 2009 17:39:02 GMT

Kickstart File:

← Older revision		Revision as of 17:39, 15 November 2009
Line 19:		Line 19:
	lang en_US.UTF-8		lang en_US.UTF-8
	keyboard us		keyboard us
-	network --device eth0 --bootproto static --ip 128.153.145.42 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen2~~.cslabs.clarkson.edu~~	+	network --device eth0 --bootproto static --ip 128.153.145.42 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen2
-	network --device eth1 --bootproto static --ip 10.0.1.38 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen2~~.cslabs.clarkson.edu~~	+	network --device eth1 --bootproto static --ip 10.0.1.38 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen2
-	network --device eth2 --bootproto static --ip 10.0.0.17 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen2~~.cslabs.clarkson.edu~~	+	network --device eth2 --bootproto static --ip 10.0.0.17 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen2
	rootpw --iscrypted ENCRYPTED-PASSWORD-GOES-HERE		rootpw --iscrypted ENCRYPTED-PASSWORD-GOES-HERE
	firewall --enabled --port=22:tcp		firewall --enabled --port=22:tcp

Xen1 Setup Process

Mccarrms — Sun, 15 Nov 2009 17:38:48 GMT

Kickstart File:

← Older revision		Revision as of 17:38, 15 November 2009
Line 19:		Line 19:
	lang en_US.UTF-8		lang en_US.UTF-8
	keyboard us		keyboard us
-	network --device eth0 --bootproto static --ip 128.153.145.41 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen1~~.cslabs.clarkson.edu~~	+	network --device eth0 --bootproto static --ip 128.153.145.41 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen1
-	network --device eth1 --bootproto static --ip 10.0.1.37 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen1~~.cslabs.clarkson.edu~~	+	network --device eth1 --bootproto static --ip 10.0.1.37 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen1
-	network --device eth2 --bootproto static --ip 10.0.0.16 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen1~~.cslabs.clarkson.edu~~	+	network --device eth2 --bootproto static --ip 10.0.0.16 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname xen1
	rootpw --iscrypted ENCRYPTED-PASSWORD-GOES-HERE		rootpw --iscrypted ENCRYPTED-PASSWORD-GOES-HERE
	firewall --enabled --port=22:tcp		firewall --enabled --port=22:tcp

Righteous Setup Process

Mccarrms — Sun, 15 Nov 2009 17:38:32 GMT

Kickstart File:

← Older revision		Revision as of 17:38, 15 November 2009
Line 21:		Line 21:
	lang en_US.UTF-8		lang en_US.UTF-8
	keyboard us		keyboard us
-	network --device eth0 --bootproto static --ip 128.153.145.215 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname righteous~~.cslabs.clarkson.edu~~	+	network --device eth0 --bootproto static --ip 128.153.145.215 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname righteous
-	network --device eth1 --bootproto static --ip 10.0.1.33 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname righteous~~.cslabs.clarkson.edu~~	+	network --device eth1 --bootproto static --ip 10.0.1.33 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname righteous
-	network --device eth2 --bootproto static --ip 10.0.0.10 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname righteous~~.cslabs.clarkson.edu~~	+	network --device eth2 --bootproto static --ip 10.0.0.10 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname righteous
	rootpw --iscrypted ENCRYPTED-PASSWORD-GOES-HERE		rootpw --iscrypted ENCRYPTED-PASSWORD-GOES-HERE
	firewall --enabled --port=22:tcp		firewall --enabled --port=22:tcp

PLBackup1 Setup Process

Mccarrms — Sun, 15 Nov 2009 17:38:15 GMT

Kickstart File:

← Older revision		Revision as of 17:38, 15 November 2009
Line 22:		Line 22:
	lang en_US.UTF-8		lang en_US.UTF-8
	keyboard us		keyboard us
-	network --device eth0 --bootproto static --ip 128.153.145.70 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname plbackup1~~.cslabs.clarkson.edu~~	+	network --device eth0 --bootproto static --ip 128.153.145.70 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname plbackup1
	rootpw --iscrypted ENCRYPTED-PASSWORD-GOES-HERE		rootpw --iscrypted ENCRYPTED-PASSWORD-GOES-HERE
	firewall --enabled --port=22:tcp		firewall --enabled --port=22:tcp

Mirror Setup Process

Mccarrms — Sun, 15 Nov 2009 17:38:04 GMT

Kickstart File:

← Older revision		Revision as of 17:38, 15 November 2009
Line 22:		Line 22:
	lang en_US.UTF-8		lang en_US.UTF-8
	keyboard us		keyboard us
-	network --device eth0 --bootproto static --ip 128.153.145.19 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname mirror~~.clar~~	+	network --device eth0 --bootproto static --ip 128.153.145.19 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname mirror
-	~~kson.edu~~	+	network --device eth1 --bootproto static --ip 10.0.1.36 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname mirror
-	network --device eth1 --bootproto static --ip 10.0.1.36 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname mirror~~.clarkson.~~	+	network --device eth2 --bootproto static --ip 10.0.0.14 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname mirror
-	~~edu~~	+
-	network --device eth2 --bootproto static --ip 10.0.0.14 --netmask 255.255.255.0 --gateway 128.153.145.1 --nameserver 128.153.0.254,128.153.5.254 --hostname mirror~~.clarkson.~~	+
-	~~edu~~	+
	rootpw --iscrypted ENCRYPTED-PASSWORD-GOES-HERE		rootpw --iscrypted ENCRYPTED-PASSWORD-GOES-HERE
	firewall --enabled --port=22:tcp		firewall --enabled --port=22:tcp