Research - User contributions [en]

Server documentation

2006-11-08T00:38:45Z

Mdeepwel: /* Webservers */

== Server List ==

=== Webservers ===
* [[Servers:Tonka|Tonka]] - Toby, LauraT, RobW, various others?
* [[Servers:Slinky|Slinky]] - Steve DiPaola - jViz
* [[Servers:Gaia|Gaia]] - Mark Brady
* [[Servers:Echo|Echo]] - Ron Wakkary
* <s>[[Servers:Whisper|Whisper]] - Thecla</s>
* [[Servers:Lightning|Lightning]] - Rob
* [[Servers:Corsair|Corsair]] - Davis Marques
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li
* [[Servers:Lancer|Lancer]] - WSUS
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Vindicator|Vindicator]] - ECL project
* [[Servers:Siat-sparc|Siat-sparc]]
* [[Servers:Csil-cluster|Csil-cluster]]
* [[Servers:Nerva|Nerva]] - development SPARC machine
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Skimmer|Skimmer]] - David Botta. Tomcat, phpmyadmin
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Tirpitz|Tirpitz]] - VHost Server including the Research wiki
* [[Servers:Dolphin|Dolphin]] - Maia Engeli, webserver for experimenting with AVIRE, moodle and flash
* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage

=== Infrastructure ===
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster
* [[Servers:Navajo|Navajo]] - Nagios, Splunk, Shutdown
* [[Servers:Hood|Hood]]
* [[Servers:Musashi|Musashi]]
* [[Servers:Yamato|Yamato]]
* [[Servers:Dreadnought|Dreadnought]]
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, sassafras server, flexlm server
* [[Servers:Teleport|Teleport]] - Dedicated box for allowing users to access their files. SSH and FTP only. (previously titus)
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== Other ===
* [[Servers:Intendant|Intendant]] - Pat's box
* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, hvilab.iat.sfu.ca and www.hvilab.iat.sfu.ca

=== Unused Boxes ===
* [[Servers:Seagull|Seagull]] - gentoo
* [[Servers:Cossack|Cossack]] - gentoo

=== Unknown ===
I don't know the present status of these machines. Some of them may be ripe for a wipe+reinstall.
* [[Servers:Matchbox|Matchbox]] - I don't think this machine is actively used anymore. RW - zope?
* [[Servers:Wildcat|Wildcat]]

Servers:Hood

2006-11-07T23:08:31Z

Mdeepwel:

Hood is our WINS server.

From any windows computer, using ipconfig, you should see wins server = 209.87.56.238 (hood)

MAC Addresses and Hostnames

2006-11-07T23:05:37Z

Mdeepwel:

Setup a Project Wiki

2006-11-07T22:45:05Z

Mdeepwel: /* Add a Seperate Instance of MediaWiki */

Kingfisher is our wiki server. Check out the [http://wiki.iat.sfu.ca wiki index] to see existing wikis.

== Add a Seperate Instance of MediaWiki ==
# ssh root@kingfisher
# cd /srv/www/htwiki
# tar -xzvf mediawiki-unconfiguredInstallation.tar.gz
# mv mediawiki $projectname

The go to the mediawiki setup website for your project:
'''<nowiki>http://wiki.iat.sfu.ca/$projectname</nowiki>'''

Fill in the options appropriately with some special Configuration options to note: 
Make a seperate database for each project:
* '''Database name''': wiki_$projectname
Seperate username for each project:
* '''DB username''': wiki_$projectname
Unique password:
# apg -m 9 -MNC

And no table prefix.

''Note: When you click Install! it may fail. For me it has always failed if the username was too long (it must be at 16 characters or less)''

If it worked, this will create the LocalSettings.php file which you then move to the correct place:
# cd $projectname
# mv config/LocalSettings.php .

Config should no longer be world writable:
# chmod a-w config

Your wiki should be completely setup at: <nowiki>http://wiki.iat.sfu.ca/$projectname</nowiki>

I then usually go login to the wiki and add to the main page: '''Wiki is configured correctly.''' for 100% assurance that everything is working :)

To customize access and viewing restrictions, look at this article on [http://meta.wikimedia.org/wiki/Preventing_Access Preventing Access] (this version of mediawiki is 1.4).

Record the database username & password, and who this wiki was created for in our 'MediaWiki on Kingfisher' file.

== Add Sysop/Administrator User ==
Follow these steps to make a wiki account, a sysop account:

Create the account, if you haven't done so already. Logout. Login as the WikiSysop user.

Navigate to '''Special Pages''' ->''' Make a user into a sysop''', or modify this link with your project name: <nowiki>http://wiki.iat.sfu.ca/$projectname/index.php/Special:Makesysop</nowiki>

Enter the username and set bureaucrat flag too.

Setup a Project Wiki

2006-11-07T22:44:47Z

Mdeepwel: /* Add a Seperate Instance of MediaWiki */

Kingfisher is our wiki server. Check out the [http://wiki.iat.sfu.ca wiki index] to see existing wikis.

== Add a Seperate Instance of MediaWiki ==
# ssh root@kingfisher
# cd /srv/www/htwiki
# tar -xzvf mediawiki-unconfiguredInstallation.tar.gz
# mv mediawiki $projectname

The go to the mediawiki setup website for your project:
'''<nowiki>http://wiki.iat.sfu.ca/$projectname</nowiki>'''

Fill in the options appropriately with some special Configuration options to note: 
Make a seperate database for each project:
* '''Database name''': wiki_$projectname
Seperate username for each project:
* '''DB username''': wiki_$projectname
Unique password:
# apg -m 9 -MNC

And no table prefix.

''Note: When you click Install! it may fail. For me it has always failed if the username was too long (it must be at 16 characters or less)''

If it worked, this will create the LocalSettings.php file which you then move to the correct place:
# cd $projectname
# mv config/LocalSettings.php .

Config should no longer be world writable:
# chmod a-w config

Your wiki should be completely setup at: <nowiki>http://wiki.iat.sfu.ca/$projectname</nowiki>

I then usually go login to the wiki and add to the main page: '''Wiki is configured correctly.''' for 100% assurance that everything is working :)

To customize access and viewing restrictions, look at this article on [http://meta.wikimedia.org/wiki/Preventing_Access Preventing Access] (this version of mediawiki is 1.4).

Record the database username & password, and who this wiki was created for in our MediaWiki on Kingfisher file.

== Add Sysop/Administrator User ==
Follow these steps to make a wiki account, a sysop account:

Create the account, if you haven't done so already. Logout. Login as the WikiSysop user.

Navigate to '''Special Pages''' ->''' Make a user into a sysop''', or modify this link with your project name: <nowiki>http://wiki.iat.sfu.ca/$projectname/index.php/Special:Makesysop</nowiki>

Enter the username and set bureaucrat flag too.

Setup a Project Wiki

2006-11-07T22:44:31Z

Mdeepwel: /* Add a Seperate Instance of MediaWiki */

Kingfisher is our wiki server. Check out the [http://wiki.iat.sfu.ca wiki index] to see existing wikis.

== Add a Seperate Instance of MediaWiki ==
# ssh root@kingfisher
# cd /srv/www/htwiki
# tar -xzvf mediawiki-unconfiguredInstallation.tar.gz
# mv mediawiki $projectname

The go to the mediawiki setup website for your project:
'''<nowiki>http://wiki.iat.sfu.ca/$projectname</nowiki>'''

Fill in the options appropriately with some special Configuration options to note: 
Make a seperate database for each project:
* '''Database name''': wiki_$projectname
Seperate username for each project:
* '''DB username''': wiki_$projectname
Unique password:
# apg -m 9 -MNC

And no table prefix.

''Note: When you click Install! it may fail. For me it has always failed if the username was too long (it must be at 16 characters or less)''

If it worked, this will create the LocalSettings.php file which you then move to the correct place:
# cd $projectname
# mv config/LocalSettings.php .

Config should no longer be world writable:
# chmod a-w config

Your wiki should be completely setup at: <nowiki>http://wiki.iat.sfu.ca/$projectname</nowiki>

I then usually go login to the wiki and add to the main page: '''Wiki is configured correctly.''' for 100% assurance that everything is working :)

To customize access and viewing restrictions, look at this article on [http://meta.wikimedia.org/wiki/Preventing_Access Preventing Access] (this version of mediawiki is 1.4).

Record the database usernam & password, and how this wiki was created for in our MediaWiki on Kingfisher file.

== Add Sysop/Administrator User ==
Follow these steps to make a wiki account, a sysop account:

Create the account, if you haven't done so already. Logout. Login as the WikiSysop user.

Navigate to '''Special Pages''' ->''' Make a user into a sysop''', or modify this link with your project name: <nowiki>http://wiki.iat.sfu.ca/$projectname/index.php/Special:Makesysop</nowiki>

Enter the username and set bureaucrat flag too.

RAID Documentation

2006-11-07T22:31:40Z

Mdeepwel:

== Raid Usage ==
Our raids are split over Yamato and Musashi. Here is how we use them now.

==== Yamato ====
:'''/mnt/raid0'''
:* Research users and projects
:'''/mnt/raid1'''
:* Research users
:'''/mnt/raid2'''
:* CVS and SVN

==== Musashi ====
:'''/mnt/raid3'''
:* x
:'''/mnt/raid4'''
:* Mirror, distfiles, iso's, etc.

== Redistributing users across the Raids ==

To move a user from one raid to another:
# Make sure the user is not logged in anywhere
# Move the files from one raid to another in the appropriate directory for example
#* mv /mnt/raid0/home/m/mdeepwel /mnt/raid1/home/m
# Update LDAP with the new root location
#*In ou=AutoFS,ou=home.users,cn=username,automountInformation, and update to new location. (using phpldapadmin is fine)
# Restart '''autofs''' on any computer or service the user could be using, otherwise they will be able to login, but won't have a home directory.
#* If they use the cluster, you must restart autofs on each node, or restart the whole cluster.
#* Restart teleport, so they can use ssh/ftp to get their files from off site.
# Update amanda to make sure the new user directory is backed up.

Main Page

2006-11-07T22:09:37Z

Mdeepwel:

Welcome. This is a wiki for the purpose of helping to keep the systems in Research running smoothly and to inform users of Research services.

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
User Articles
|-
| width="33%" valign="top" | '''Projects'''
* [[AG Node Documentation]]
* [[Eye trackers @ EC3 Lab]]
* [[Large Scale Imagery: evolving the components]]
* [[Cluster User Documentation|Documentation for the Cluster]]
* [[SGI]]

| width="33%" valign="top" | '''Workstations'''
* [[Printers]]
* [[Research Workstations - default software loads | Standard Workstation Software List]]
* [[Windows Maintenance]]
* [[Linux Administration & Maintenance]]
* [[MAC Addresses and Hostnames]]
* [[Problems due to moving]]
* [[Workstations with updated software]]
* [[Broken network ports]]

| width="33%" valign="top" | '''General Information'''
* [[Research Services]]
* [[Accessing Your Data]]
* [[People power - grad students and their expertise]]
* [[Research Mailing Lists]]
* [[HOWTO Access The CVS Server| Accessing the CVS Server]]
* [[Lockers]]

|}

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
Administration Articles
|-
| width="33%" valign="top" | '''Administration & Resource Management'''
* [[Research Administration Tasks]]
* [[Server documentation | Server List]]
* [[Network Devices Servers & Workstations]]
* [[Workstation Naming Convention]]
* [[HOWTO Restore Files From Amanda | Restore Files From Amanda]]
* [[INFO Network Routing Information | Network Routing Information]]
* [[RAID Documentation]]

| width="33%" valign="top" | '''Customizing Linux Servers'''
* [[Research Servers - default software loads | Standard Server Software List]]
* [[REF Standard Server Configuration | Standard Server Configuration]]
* [[Setup a Project Wiki|Setup MediaWiki]]
* [[Maya]]
* [[Oracle on Gentoo]]

| width="33%" valign="top" | '''Client Side & Other Articles'''
* [[Linux Tips and Tools]]
* [[HOWTO Install SUSE with AutoYast|Install SUSE with AutoYast]]
* [[Who's Where - Availability of Research staff|Availability of Research Staff]]
* [[Maya]]
* [[Adding a Mac to the Research Domain]]

|}

[http://research.iat.sfu.ca/wiki/index.php?title=Special:Recentchanges&feed=rss http://research.iat.sfu.ca/images/rss.gif]

Sassafras Client

2006-11-02T23:26:32Z

Mdeepwel:

How to setup a sassafras client for SFU research usage.

== Client Information ==
The Sassafras key client is a very simple application used to monitor running applications and manage software keys. Applications that need to be monitored can be installed before or after the key client in installed. All applications are installed as you would usually install them and do not require any special settings.

The key client is available for Mac and Windows machines. Our system has been configured to allow access to the keyserver from off campus. This allows you to run keyed applications you've installed on your laptop from your own home. Applications like Microsoft Office are not keyed and will always work for you.

If all the licenses are used up for an application, you will receive a message alerting you to this fact and you will not be able to use that application until someone else stops using it (making a license available for you to use).

== Installation of the Sassafras key client ==
# Download the client installer from http://www.sassafras.com/links/clientdownloads.html
# Install the client with the following key server: '''research-keyserver.iat.sfu.ca'''
# Restart your computer for the application to launch. The client will run in the background every time the computer is started. You will now be able to use applications from the Research Department as long as enough licenses available.

== History ==
* Aug 6, 2004: Installed KeyServer 6.0.2.3
* Nov 2, 2006: Installed KeyServer 6.1.0.5

== Documentation in PDF ==
* [[Media:Sassafras_Client_Setup.pdf|Sassafras Client]] (PDF)

== Downloads ==
Download client/admin/server/reporter from here, you must enter in the correct email address to get to the page:
http://www.sassafras.com/k2/revisions/downloads.php

Sassafras Client

2006-11-02T22:09:51Z

Mdeepwel:

How to setup a sassafras client for SFU research usage.

== Client Information ==
The Sassafras key client is a very simple application used to monitor running applications and manage software keys. Applications that need to be monitored can be installed before or after the key client in installed. All applications are installed as you would usually install them and do not require any special settings.

The key client is available for Mac and Windows machines. Our system has been configured to allow access to the keyserver from off campus. This allows you to run keyed applications you've installed on your laptop from your own home. Applications like Microsoft Office are not keyed and will always work for you.

If all the licenses are used up for an application, you will receive a message alerting you to this fact and you will not be able to use that application until someone else stops using it (making a license available for you to use).

== Installation of the Sassafras key client ==
# Download the client installer from http://www.sassafras.com/links/clientdownloads.html
# Install the client with the following key server: '''research-keyserver.iat.sfu.ca'''
# Restart your computer for the application to launch. The client will run in the background every time the computer is started. You will now be able to use applications from the Research Department as long as enough licenses available.

== Documentation in PDF ==
* [[Media:Sassafras_Client_Setup.pdf|Sassafras Client]] (PDF)

== Downloads ==
Download client/admin/server/reporter from here, you must enter in the correct email address to get to the page:
http://www.sassafras.com/k2/revisions/downloads.php

HOWTO Setup SSH

2006-11-02T21:45:56Z

Mdeepwel: /* User Control */

== Purpose ==

SSH (The Secure Shell) is arguably the '''best''' way to access your data, over a network connection. The communication is encrypted, and a number of other services can run on top of SSH, permitting those other services to benefit from port-standardization, and encryption of the traffic. Linux, IRIX, Mac OS-X and other *NIX flavours generally all come with SSH, or can have SSH compiled from source.

== Installation ==

Under Gentoo:
hostname ~ # '''emerge -pv net-misc/openssh'''
[ebuild R ] net-misc/openssh-4.3_p2-r5 USE="ipv6 ldap pam tcpd -X -X509 -chroot -hpn -kerberos -libedit (-selinux) -sftplogging -skey -smartcard -static"

== Configure ==
The main configuration file for an SSH server is '''/etc/ssh/sshd_config'''.

=== User Control ===
Adding the AllowUsers Directive is nearly a necessity, and implies that all other unspecified users are Denied.
AllowUsers nx gordp mdeepwel
(the user '''nx''' allows for the use of NoMachine's NXServer / NXClient remote desktop)

Conversely, there may be times when we want our entire LDAP-user-list to have access, except for a select few usernames then we use the DenyUsers directive:
DenyUsers grinch scrooge cindy_lou_who
DenyUsers administrator bob sfuresearchstats
If the box is ldap enabled, please deny administrator, bob, and sfuresearchstats.
You could also consider the directives '''AllowGroups''' or '''DenyGroups''', if groups were suitably set up (which ours are not).

=== SSH Daemon Control ===
Typically, you will want the SSH daemon to start at boot, and run whenever your computer is turned on. Under Gentoo:
hostname ~ # '''rc-update add sshd default'''
* sshd added to runlevel default

You can manually stop, start, or restart the SSH daemon with this syntax (Gentoo):

hostname ~ # '''/etc/init.d/sshd stop'''
hostname ~ # '''/etc/init.d/sshd start'''
hostname ~ # '''/etc/init.d/sshd restart''' (use this to effect changes; will maintain an existing connection)

=== Additional Security ===
The addition of a firewall, or [[HOWTO Setup tcpwrappers (tcpd) for controlling access|tcpwrappers]] can add considerable security! Use them!

== Usage ==

Graphical tools exist for use with just about every OS, making such tasks as drag-and-drop file-transfer both easy '''and''' secure! Use this rather than FTP, wherever possible.

== Problems ==

*By far, the most-common difficulty encountered is that a host's RSA key has changed, and you are denied access. This can be quite opaque when using a GUI client like Fugu. The cure is to edit your ~/.ssh/known_hosts file, and remove the offending key. If this means nothing to you :-) then perhaps it's easiest to entirely delete your ~/.ssh/known_hosts and begin collecting keys all over again.

*For those who connect to a number of different machines behind the same IP address (this happens with a NAT firewall, and multiple machines behind it), you can hand-edit your ~/.ssh/known_hosts file and add multiple public RSA keys for the same IP address. Here is an example of multiple keys, for different machines behind a single IP-address:

70.70.130.1 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAy9L56BD2+70YA97DzdBY0GGuDMHwPn1BUdByPBmOVLxPTdOtcbXLGHpV2IoYeiej0TAngAtzn4tUv2HZJS4y3OKnVq+nvHU3AtZm26oSaiHEDq6ilLX/AtA7lgi+keZSPASDTYA2M34nv6lsFpT3AFugTreKlkdORXDoamlW8Ds=
70.70.130.1 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzVZj8PTtTQVAsbPs8s61YHT4CPQj73yiIEhh6FrAJOzRZSexaXGDO9R2cKCNYvIaXUnbI6QXhp2CNAofpKkLkqGOUiMQI2qkf/TdHAi2kgB33m0Tghy/Gf3CCS+YAh0z0oFzLQz93aSCsuKRYgKDAriDpzy9ZAsKpKXzn6VsW2k=
70.70.130.1 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAuxvwzkYpj3U3uNB/ZzTT0fxbzc+1xXApDf67iY0sfqn+pKx+r8mu2bRylflzH7DUDkmJmLoj5vXfgU1wHrfdjLnabMwhJO2B0kWi/kij0NuEp1O2PZgTNTAmsyju+i64ug82Urp9WO882gbLX7GAE9I0D54PfhncyVnhb6rT1mU=

Generally, you copy these entries from the intended target machine, using any number of means to get the key transferred. For example, you can easily set up and accept the key from your first machine, then use '''that''' computer to connect to the second machine (all behind your NAT firewall), then easily copy the public RSA key, which then would allow direct-connection to the second box). The file you need to copy is typically '''/etc/ssh/ssh_host_rsa_key.pub''', with a bit of trimming after the '''=''' sign.

Server documentation

2006-11-02T21:39:46Z

Mdeepwel: /* Infrastructure */

== Server List ==

=== Webservers ===
* [[Servers:Tonka|Tonka]] - Toby, LauraT, RobW, various others?
* [[Servers:Slinky|Slinky]] - Steve DiPaola - jViz
* [[Servers:Gaia|Gaia]] - Mark Brady
* [[Servers:Echo|Echo]] - Ron Wakkary
* <s>[[Servers:Whisper|Whisper]] - Thecla</s>
* [[Servers:Lightning|Lightning]] - Rob
* [[Servers:Corsair|Corsair]] - Davis Marques
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li
* [[Servers:Lancer|Lancer]]
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Vindicator|Vindicator]] - ECL project
* [[Servers:Siat-sparc|Siat-sparc]]
* [[Servers:Csil-cluster|Csil-cluster]]
* [[Servers:Nerva|Nerva]] - development SPARC machine
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Skimmer|Skimmer]] - David Botta. Tomcat, phpmyadmin
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Tirpitz|Tirpitz]] - VHost Server including the Research wiki
* [[Servers:Dolphin|Dolphin]] - Maia Engeli, webserver for experimenting with AVIRE, moodle and flash
* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage

=== Infrastructure ===
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster
* [[Servers:Navajo|Navajo]] - Nagios, Splunk, Shutdown
* [[Servers:Hood|Hood]]
* [[Servers:Musashi|Musashi]]
* [[Servers:Yamato|Yamato]]
* [[Servers:Dreadnought|Dreadnought]]
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, sassafras server, flexlm server
* [[Servers:Teleport|Teleport]] - Dedicated box for allowing users to access their files. SSH and FTP only. (previously titus)
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== Other ===
* [[Servers:Intendant|Intendant]] - Pat's box
* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, hvilab.iat.sfu.ca and www.hvilab.iat.sfu.ca

=== Unused Boxes ===
* [[Servers:Seagull|Seagull]] - gentoo
* [[Servers:Cossack|Cossack]] - gentoo

=== Unknown ===
I don't know the present status of these machines. Some of them may be ripe for a wipe+reinstall.
* [[Servers:Matchbox|Matchbox]] - I don't think this machine is actively used anymore. RW - zope?
* [[Servers:Wildcat|Wildcat]]

Sassafras Client

2006-11-02T20:31:33Z

Mdeepwel: /* Installation of the Sassafras key client */

How to setup a sassafras client for SFU research usage.

== Client Information ==
The Sassafras key client is a very simple application used to monitor running applications and manage software keys. Applications that need to be monitored can be installed before or after the key client in installed. All applications are installed as you would usually install them and do not require any special settings.

The key client is available for Mac and Windows machines. Our system has been configured to allow access to the keyserver from off campus. This allows you to run keyed applications you've installed on your laptop from your own home. Applications like Microsoft Office are not keyed and will always work for you.

If all the licenses are used up for an application, you will receive a message alerting you to this fact and you will not be able to use that application until someone else stops using it (making a license available for you to use).

== Installation of the Sassafras key client ==
# Download the client installer from http://www.sassafras.com/links/clientdownloads.html
# Install the client with the following key server: '''research-keyserver.iat.sfu.ca'''
# Restart your computer for the application to launch. The client will run in the background every time the computer is started. You will now be able to use applications from the Research Department as long as enough licenses available.

== Documentation in PDF ==
* [[Media:Sassafras_Client_Setup.pdf|Sassafras Client]] (PDF)

Sassafras Client

2006-11-02T20:30:24Z

Mdeepwel: /* Client Information */

How to setup a sassafras client for SFU research usage.

== Client Information ==
The Sassafras key client is a very simple application used to monitor running applications and manage software keys. Applications that need to be monitored can be installed before or after the key client in installed. All applications are installed as you would usually install them and do not require any special settings.

The key client is available for Mac and Windows machines. Our system has been configured to allow access to the keyserver from off campus. This allows you to run keyed applications you've installed on your laptop from your own home. Applications like Microsoft Office are not keyed and will always work for you.

If all the licenses are used up for an application, you will receive a message alerting you to this fact and you will not be able to use that application until someone else stops using it (making a license available for you to use).

== Installation of the Sassafras key client ==
# Download the client installer from http://www.sassafras.com/k2/revisions/downloads.html
# Install the client with the following key server: '''research-keyserver.iat.sfu.ca'''
# Restart your computer for the application to launch. The client will run in the background every time the computer is started. You will now be able to use applications from the Research Department as long as enough licenses available.

== Documentation in PDF ==
* [[Media:Sassafras_Client_Setup.pdf|Sassafras Client]] (PDF)

Research Administration Tasks

2006-11-01T18:44:39Z

Mdeepwel: /* Deleting Users */

== Adding Users ==
* As root on '''yamato''':
# DEBUG=1 /usr/local/sbin/diradm.superadduser '$username' '$email' '$fullname'
* Note that a file named '$username' is created in your current directory with the template filled out for mailing (the same file is displayed onscreen).
* The password you are prompted for at the end is for '''hood'''.
* Add the newly-created user to our [http://bismarck.iat.sfu.ca/mailman/admin/research/ Research Mailing List].

== Deleting Users ==
Make sure there are no sym-links pointing to important stuff!!
# find -P /home/users/$username -noleaf -type l

* As root on '''yamato''':
# DEBUG=1 diradm userdel -r $username
* As root on '''hood''':
# DEBUG=1 diradm userdel $username
* Keeping the user on our [http://bismarck.iat.sfu.ca/mailman/admin/research/ Research Mailing List] is probably a good idea.
* If you delete a user, you MUST disallow diradm from ever using that UIDNumber again. To do so, go to each machine with diradm and edit the diradm.conf file so that UIDNUMBERMIN to equal the same number as the highest UIDNumber currently being used. (At least one higher than the user you deleted) This is important!

== Changing a Users Password ==
This method does not require the old password.
* As root on '''hood''':
# ldappass $username

== Adding Users to a Group ==
Adding or removing from a group. Uses the same syntax as gpasswd(8).
* As root on '''hood''':
# diradm gpasswd (-a|-d) $username $group
# diradm gpasswd -a mdeepwel pond

== Adding Groups ==
Adding groups takes the same syntax as groupadd(8).
* As root on '''hood''':
# diradm groupadd $groupname

== Adding Projects ==
* As root on '''hood''':
# diradm amadd -O $mapbase $key $src
# diradm amadd -O home.projects meditation 209.87.56.240:/export/projects/0/m/meditation
* '-O' means the default mount options for automount.
* As root on '''yamato''':
** Make the $src directory. mkdir -p $src
** Set ownership. chgrp -R $group $src
** Set permissions. chmod 2771 $src
** If web content is being served: mkdir -p $src/htdocs ; chmod 2775 $src/htdocs

== Adding CVS Repositories ==
Replace ''$foobar'' with the name of the repository.
* As root on '''hood''':
# diradm amadd -O auto.cvs $foobar 209.87.56.240:/export/cvs/$foobar
* As root on '''yamato''':
# cvs -d /export/cvs/$foobar init
# chmod -R 2770 /export/cvs/$foobar
: If this repository is for a group, (assuming there's a previously created group called ''$foobar''):
# chgrp -R $foobar_group /export/cvs/$foobar
: If this repository is for a single user:
# chown -R $user /export/cvs/$foobar
* Group name and cvs repository name don't have to match.
* To access CVS repo, use ''CVS_RSH="ssh"'' with URL being '':ext:$user@cvs.iat.sfu.ca:/var/cvsroot/$foobar''
* Users must be in group cvs in addition to $foobar to access the repository!

== Adding SVN Repositories ==
Replace ''$foobar'' with the name of the repository.
* As root on '''hood''':
# diradm amadd -O auto.svn $foobar 209.87.56.240:/export/svn/$foobar
* As root on '''yamato''', run (assuming there's a previously created group called ''$foobar'':
# mkdir /export/svn/$foobar
* As root on '''nelson''':
# svnadmin create /var/svnroot/$foobar --fs-type fsfs
* As root on '''yamato''':
# chmod -R 2770 /export/svn/$foobar
# chgrp -R foobar /export/svn/$foobar

* Repo URL is ''svn+ssh://$user@cvs.iat.sfu.ca/var/svnroot/$foobar''
* Users must be in the cvs group in addition to $foobar group to access the repository!

== Adding Computers to the Domain ==
* As root on '''hood''':
# diradm smbhostadd sr-#####
* refer to [[Workstation_Naming_Convention]]

== General User Management ==
* diradm offers almost all regular POSIX commands, sometimes with a few extra frills. The only commands NOT completely implemented are gpasswd and passwd.
* Welcoming new users; email template
** This is in the diradm.superadduser script, as it fills out the template.
<pre>
To: $fullname <$email>
Subject: Research account created - $newuser

Hello $fullname

Your research account has been created.
Username: $newuser
Password: $newpass

Please visit http://research.iat.sfu.ca/network/changepassword.php to change
your password when you receive this email.

For support with the research network, please email:
help@research.iat.sfu.ca

And include a good description of the entire problem and a suitable subject
line.

Please note that this username/password pair is only valid for the SFU Surrey
Research Network, and is NOT tied into the main SFU authentication systems.
</pre>

Server documentation

2006-11-01T17:53:53Z

Mdeepwel: /* Infrastructure */

== Server List ==

=== Webservers ===
* [[Servers:Tonka|Tonka]] - Toby, LauraT, RobW, various others?
* [[Servers:Slinky|Slinky]] - Steve DiPaola - jViz
* [[Servers:Gaia|Gaia]] - Mark Brady
* [[Servers:Echo|Echo]] - Ron Wakkary
* <s>[[Servers:Whisper|Whisper]] - Thecla</s>
* [[Servers:Lightning|Lightning]] - Rob
* [[Servers:Corsair|Corsair]] - Davis Marques
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li
* [[Servers:Lancer|Lancer]]
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Vindicator|Vindicator]] - ECL project
* [[Servers:Siat-sparc|Siat-sparc]]
* [[Servers:Csil-cluster|Csil-cluster]]
* [[Servers:Nerva|Nerva]] - development SPARC machine
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Skimmer|Skimmer]] - David Botta. Tomcat, phpmyadmin
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Tirpitz|Tirpitz]] - VHost Server including the Research wiki
* [[Servers:Dolphin|Dolphin]] - Maia Engeli, webserver for experimenting with AVIRE, moodle and flash
* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage

=== Infrastructure ===
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster
* [[Servers:Navajo|Navajo]] - Nagios, Splunk, Shutdown
* [[Servers:Hood|Hood]]
* [[Servers:Musashi|Musashi]]
* [[Servers:Yamato|Yamato]]
* [[Servers:Dreadnought|Dreadnought]]
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, sassafras server, flexlm server
* [[Servers:Teleport|Teleport]] - Dedicated box for allowing users to access their files. SSH and FTP only.
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== Other ===
* [[Servers:Intendant|Intendant]] - Pat's box
* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, hvilab.iat.sfu.ca and www.hvilab.iat.sfu.ca

=== Unused Boxes ===
* [[Servers:Seagull|Seagull]] - gentoo
* [[Servers:Cossack|Cossack]] - gentoo

=== Unknown ===
I don't know the present status of these machines. Some of them may be ripe for a wipe+reinstall.
* [[Servers:Matchbox|Matchbox]] - I don't think this machine is actively used anymore. RW - zope?
* [[Servers:Wildcat|Wildcat]]

Accessing Your Data

2006-11-01T01:13:53Z

Mdeepwel:

Accessing Your Data

2006-11-01T01:13:40Z

Mdeepwel: /* Konqueror */

REF Standard Server Configuration

2006-10-31T23:24:02Z

Mdeepwel:

This is a reference of all the various standard configuration options we do in research.

* [[HOWTO Setup Logwatch|Setup Logwatch]]
** [[Customizing Logwatch]]
* [[HOWTO Setup AWStats|Setup AWStats]]
* [[Configure Default Apache Index Page]]
* [[HOWTO Setup NTPD|Setup NTPD]]
* [[HOWTO Setup a Static IP| Setup a Static IP]]
* [[HOWTO Setup Tripwire|Setup Tripwire]]
* [[HOWTO Clone a Machine]] - Copy a good working Linux server onto a new server with minimal amount of work.
* [[HOWTO Setup tcpwrappers (tcpd) for controlling access| Setup tcpwrappers for controlling access]]
* [[HOWTO Setup SSH| Setup SSH]]
* [[REF Firewall Ports to Open]] - Ports common services that you might need to open if you are using a firewall
* [[SELinux on Fedora Core 6]]

File:Afatuousdream1-0 1051030409.jpg

2006-10-31T22:30:02Z

Mdeepwel: testing

testing

REF Firewall Ports to Open

2006-10-26T21:46:46Z

Mdeepwel:

NTP:
* 123 UDP

SNMP
* 161 UDP

NRPE
* 5666 TCP and UDP

SSH (incoming)
* 22 TCP

REF Firewall Ports to Open

2006-10-26T21:34:59Z

Mdeepwel:

NTP:
* 123 UDP

SNMP
* 161 UDP

NRPE
* 5666

REF Standard Server Configuration

2006-10-26T21:16:16Z

Mdeepwel:

Server documentation

2006-10-26T20:23:19Z

Mdeepwel:

== Server List ==

=== Webservers ===
* [[Servers:Tonka|Tonka]] - Toby, LauraT, RobW, various others?
* [[Servers:Slinky|Slinky]] - Steve DiPaola - jViz
* [[Servers:Gaia|Gaia]] - Mark Brady
* [[Servers:Echo|Echo]] - Ron Wakkary
* <s>[[Servers:Whisper|Whisper]] - Thecla</s>
* [[Servers:Lightning|Lightning]] - Rob
* [[Servers:Corsair|Corsair]] - Davis Marques
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li
* [[Servers:Lancer|Lancer]]
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Vindicator|Vindicator]] - ECL project
* [[Servers:Siat-sparc|Siat-sparc]]
* [[Servers:Csil-cluster|Csil-cluster]]
* [[Servers:Nerva|Nerva]] - development SPARC machine
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Skimmer|Skimmer]] - David Botta. Tomcat, phpmyadmin
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Tirpitz|Tirpitz]] - VHost Server including the Research wiki
* [[Servers:Dolphin|Dolphin]] - Maia Engeli, webserver for experimenting with AVIRE, moodle and flash
* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage

=== Infrastructure ===
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster
* [[Servers:Navajo|Navajo]] - Nagios, Splunk, Shutdown
* [[Servers:Hood|Hood]]
* [[Servers:Musashi|Musashi]]
* [[Servers:Yamato|Yamato]]
* [[Servers:Dreadnought|Dreadnought]]
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, sassafras server, flexlm server
* [[Servers:Teleport|Teleport]] - Gateway box for users to access their files. FTP and SSH only.
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== Other ===
* [[Servers:Intendant|Intendant]] - Pat's box
* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, hvilab.iat.sfu.ca and www.hvilab.iat.sfu.ca

=== Unused Boxes ===
* [[Servers:Seagull|Seagull]] - gentoo
* [[Servers:Cossack|Cossack]] - gentoo

=== Unknown ===
I don't know the present status of these machines. Some of them may be ripe for a wipe+reinstall.
* [[Servers:Matchbox|Matchbox]] - I don't think this machine is actively used anymore. RW - zope?
* [[Servers:Wildcat|Wildcat]]

HOWTO Clone a Machine

2006-10-26T18:52:32Z

Mdeepwel: /* Server/Golden Machine */

Using standard Linux tools, this guide explains how to copy a working Linux machine onto a brand new machine, in less than an hour.

== Server/Golden Machine ==

First, create an image of a good working system or use an existing image, if you have one. At Research we have images stored at musashi:/export/mirror/image/fresh-deployable-gentoo-images
* Do this as root.

# cd /
# tar cpzf hostname.tgz / --exclude=/hostname.tgz --exclude=/proc --exclude=/lost+found --exclude=/mnt --exclude=/sys --exclude=/tmp

* This will create a host image of about 700 MB.

== Client/To Be Imaged Machine ==
Boot the machine you want the image deployed on with a minimal Gentoo CD. Mount that hard drive and partition it appropriately.
# fdisk /dev/hda

/dev/hda1 /boot 500M
/dev/hda2 swap 2000M
/dev/hda3 /tmp 4000M
/dev/hda4 /

Add filesystems
# mke2fs /dev/hda1
# mkswap /dev/hda2
# mke2fs -j /dev/hda3
# mke2fs -j /dev/hda4

Mount drives:
# mount /dev/hda4 /mnt/gentoo
# mkdir /mnt/gentoo/tmp
# mkdir /mnt/gentoo/boot
# mkdir /mnt/gentoo/proc
# mount /dev/hda3 /mnt/gentoo/tmp
# mount /dev/hda1 /mnt/gentoo/boot
# swapon /dev/hda2
# mount -t proc proc /mnt/gentoo/proc

Copy over the hostname.tgz file onto this machine.
# scp root@hostname:/hostname.tgz /mnt/gentoo

Extract it into the root of the new machine /mnt/gentoo
# cd /mnt/gentoo
# tar -xzf hostname.tgz

Chroot into the new environment.
# chroot /mnt/gentoo /bin/bash
# env-update && source /etc/profile

Verify /boot/grub/grub.conf and /etc/fstab

Setup grub on the hard drive:
# grep -v rootfs /proc/mounts > /etc/mtab
# grub-install /dev/hda

Finish Configuring the machine:
* Set a root password.
* Set the hostname.
* Static ip address.
* Reset log files.
* Check /etc/make.conf

Make system dirs
# mkdir -p /mnt/gentoo-distfiles
# mkdir -p /sys

Exit and umount drives, remove Gentoo CD, reboot the machine.

HOWTO Clone a Machine

2006-10-26T18:50:40Z

Mdeepwel: /* Client/To Be Imaged Machine */

Using standard Linux tools, this guide explains how to copy a working Linux machine onto a brand new machine, in less than an hour.

== Server/Golden Machine ==

First, create an image of a good working system or use an existing image, if you have one. At Research we have images stored at musashi:/export/mirror/image/fresh-deployable-gentoo-images
* Do this as root.

# cd /
# tar cpzf hostname.tgz / --exclude=/hostname.tgz --exclude=/proc --exclude=/lost+found --exclude=/mnt --exclude=/sys

* This will create a host image of about 1.5 GB.

== Client/To Be Imaged Machine ==
Boot the machine you want the image deployed on with a minimal Gentoo CD. Mount that hard drive and partition it appropriately.
# fdisk /dev/hda

/dev/hda1 /boot 500M
/dev/hda2 swap 2000M
/dev/hda3 /tmp 4000M
/dev/hda4 /

Add filesystems
# mke2fs /dev/hda1
# mkswap /dev/hda2
# mke2fs -j /dev/hda3
# mke2fs -j /dev/hda4

Mount drives:
# mount /dev/hda4 /mnt/gentoo
# mkdir /mnt/gentoo/tmp
# mkdir /mnt/gentoo/boot
# mkdir /mnt/gentoo/proc
# mount /dev/hda3 /mnt/gentoo/tmp
# mount /dev/hda1 /mnt/gentoo/boot
# swapon /dev/hda2
# mount -t proc proc /mnt/gentoo/proc

Copy over the hostname.tgz file onto this machine.
# scp root@hostname:/hostname.tgz /mnt/gentoo

Extract it into the root of the new machine /mnt/gentoo
# cd /mnt/gentoo
# tar -xzf hostname.tgz

Chroot into the new environment.
# chroot /mnt/gentoo /bin/bash
# env-update && source /etc/profile

Verify /boot/grub/grub.conf and /etc/fstab

Setup grub on the hard drive:
# grep -v rootfs /proc/mounts > /etc/mtab
# grub-install /dev/hda

Finish Configuring the machine:
* Set a root password.
* Set the hostname.
* Static ip address.
* Reset log files.
* Check /etc/make.conf

Make system dirs
# mkdir -p /mnt/gentoo-distfiles
# mkdir -p /sys

Exit and umount drives, remove Gentoo CD, reboot the machine.

Printers

2006-10-19T00:00:15Z

Mdeepwel:

Incase a printer has not been installed on your workstation, here is a handy reference to install a Research printer under Windows, Mac, or Linux.

If you have a Mac or Linux machine with an automatic DNS discovery tool, such as Bonjour, Avahi, or Zeroconf, you can browse the network for these printers to add them. The printers will show up with a name listed below (like sr-isoroku); further details in each operating system section.

== Install a Printer ==

# To install a new printer, find out which printers are closest to you and note the printer's hostname, such as sr-isoroku.iat.sfu.ca. You can find a complete list below.
# Second following the guide for your operating system to add the printer:
::* [[HOWTO Install Printers Under Windows|Install Printers Under Windows]]
::* [[HOWTO Install Printers Under Mac OSX|Install Printers Under Mac OSX]]
::* [[HOWTO Install Printers Under Linux|Install Printers Under Linux]]

=== Research Printers ===

'''Just outside the InfoNet Media Lab'''
* Hostname: sr-dumitrescu.iat.sfu.ca (Lexmark B&W LaserJet)
* Hostname: sr-isoroku.iat.sfu.ca (HP Colour LaserJet)

'''Inside the InfoNet Media Lab'''
* Hostname: sr-ike.iat.sfu.ca (Lexmark B&W LaserJet)

'''EC3 Lab'''
* Hostname: sr-rommel.iat.sfu.ca (Lexmark B&W LaserJet)
* Hostname: sr-macarthur.iat.sfu.ca (HP Colour LaserJet)

'''Grad Student Lounge Area'''
* Hostname: sr-patton.iat.sfu.ca (Lexmark B&W LaserJet)
* Hostname: sr-monty.iat.sfu.ca (HP Color LaserJet)
* Hostname: sr-zhukov.iat.sfu.ca (Lexmark B&W LaserJet)
* Hostname: sr-yamamoto.iat.sfu.ca (HP Colour LaserJet)

'''Storage Room'''
* Hostname: sr-mountbatten.iat.sfu.ca (Lexmark B&W LaserJet)

Research Workstations - default software loads

2006-10-18T23:58:50Z

Mdeepwel:

This is the plan for a complete lab re-install in the Summer of 2006.
Machines will be loaded with Windows XP and SUSE Linux. Each machine will be configured with the following applications.

== Windows XP SP2 ==
All latest patches.
* Adobe Creative Suite 2:
** Adobe Photoshop CS
** Adobe InDesign
** Adobe GoLive!
** Adobe Illustrator
** Adobe Acrobat 7 Professional
*** During install, set the default .pdf handler to be the Acrobat Reader!
* Adobe Acrobat Reader 7
** Install Adobe Reader AFTER Adobe Professional (and set Reader as default)
* Adobe ImageReady
* Adobe Premiere Pro
* ASUS Probe (motherboard monitoring)
** found on ASUS motherboard CD's, or http://www.softpedia.com/progDownload/ASUS-PC-Probe-Download-4498.html
* AtlasTi
* iTunes & Quicktime (Bundled together)
* Java 1.5 J2SE SDK [http://java.sun.com/j2se/1.5.0/download.jsp Download Link]
* K2 client http://www.sassafras.com/k2/revisions/downloads.html
** [[Image:K2Client.exe|local Windows copy]]
** Host DNS Name: research-keyserver.iat.sfu.ca
* MacAfee AV 8 Ent.
* Macromedia Suite 8 (Dreamweaver, Fireworks, Flash, Freehand)
** Run one of the applications and enter our serial number in!!
* Nero (CD/DVD burning)
* Microsoft Office - complete install
* Mozilla Firefox - set as default browser.
* Mozilla Thunderbird email client
* NikonView (free download)
* Nikon Capture Editor, Camera Control (needs to be keyserved)
** must first perform install using our original CD, '''AND''' you must run it. This embeds the licensing, which is mandatory for succesful downloads/upgrades from Nikon's web site http://nikonusa.com -> Software Downloads. you '''must''' upgrade incrementally, several times (ie from 4.2 to 4.3 to 4.4).
* nVidia video
** latest unified driver, for FX5200 / FX5600 cards
* PuTTY
** Dream for one day: Defaults for fraser and our shell box?
* RealPlayer
** when installing RealPlayer, manually de-select every single media-type which has another association already (such as Windows Media Player). Installing other players (like Quicktime) '''after''' RealPlayer will ensure they handle the media-types they should. Restrict RealPlayer to as few media-types as possible :-)
** disable the Real Message Center. Turn it off so it doesn't even load in the System Tray.
* SpyBot Search and Destroy http://www.pcworld.com/downloads/countit.asp?fid=22262&fileidx=1
* OpenOffice 2.0
* WinSCP
** Dream, for one day: include defaults for connecting to tirpitz, surrey, and fraser
* Lexmark T630-capable printer drivers
* HP 4600n-capable printer drivers
** printer-info needs to be added to Research web-info:
** IP-addresses, location, capabilities, where to get supplies, how to add them in Linux/Irix/OS-X/WinXP
** how to query the printer for int. info (IP-address, name, no. of pages, toner-levels, etc)
* [[Setup Windows Server Update Services|Windows Server Update Services]] - Automated Windows Updates

== Linux ==
Complete install of SuSE 9.3 Pro.
* Auto-update.
* <s>Both KDE and</s> GNOME, maybe some other WMs too.
* Development tools
** Eclipse (Java & C++ support)
** Fortran stuff
* Mozilla Firefox
* totem, mplayer, xine?
** fully working!!! DeCSS, MP3, AAC, etc
* K3B for cd/dvd writing
** Mark: add ldap users to cd writing group!
** Robin: SUSE9.3 should have pam_console, which is the proper solution.

== Mac OS-X ==
Complete install of OS 10.4 with all updates, XCode Tools
* Adobe Photoshop CS
* Adobe ImageReady
* Adobe Acrobat 6 Pro
* Adobe InDesign
* Adobe GoLive CS
* Adobe Illustrator
* Final Cut Pro HD
* K2 client http://www.sassafras.com/k2/revisions/downloads.html
** [[Image:K2Client.sea.bin|local Mac copy]]
** point to research-keyserver.iat.sfu.ca
* Microsoft Office for Mac
* Mozilla Firefox
* Nikon Capture
* Nikon View

Servers:Nelson

2006-10-12T20:49:32Z

Mdeepwel: /* Note for Admins */

== Nelson ==

Nelson is our cvs/svn server.

You can access out cvs server with the path:
# CVSROOT=:ext:<username>@cvs.iat.sfu.ca/var/cvsroot/<project directory> export

== Note for Admins ==
The cvs files are actually stored on yamato in /export/cvs.

Server documentation

2006-10-12T20:46:19Z

Mdeepwel: /* Other */

== Server List ==

=== Webservers ===
* [[Servers:Tonka|Tonka]] - Toby, LauraT, RobW, various others?
* [[Servers:Slinky|Slinky]] - Steve DiPaola - jViz
* [[Servers:Gaia|Gaia]] - Mark Brady
* [[Servers:Echo|Echo]] - Ron Wakkary
* <s>[[Servers:Whisper|Whisper]] - Thecla</s>
* [[Servers:Lightning|Lightning]] - Rob
* [[Servers:Corsair|Corsair]] - Davis Marques
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li
* [[Servers:Lancer|Lancer]]
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Vindicator|Vindicator]] - ECL project
* [[Servers:Siat-sparc|Siat-sparc]]
* [[Servers:Csil-cluster|Csil-cluster]]
* [[Servers:Nerva|Nerva]] - development SPARC machine
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Skimmer|Skimmer]] - David Botta. Tomcat, phpmyadmin
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Tirpitz|Tirpitz]] - VHost Server including the Research wiki
* [[Servers:Dolphin|Dolphin]] - Maia Engeli, webserver for experimenting with AVIRE, moodle and flash
* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage

=== Infrastructure ===
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster
* [[Servers:Navajo|Navajo]] - Nagios, Splunk, Shutdown
* [[Servers:Hood|Hood]]
* [[Servers:Musashi|Musashi]]
* [[Servers:Yamato|Yamato]]
* [[Servers:Dreadnought|Dreadnought]]
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, sassafras server, flexlm server
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== Other ===
* [[Servers:Intendant|Intendant]] - Pat's box
* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, hvilab.iat.sfu.ca and www.hvilab.iat.sfu.ca

=== Unused Boxes ===
* [[Servers:Titus|Titus]] - gentoo
* [[Servers:Seagull|Seagull]] - gentoo
* [[Servers:Cossack|Cossack]] - gentoo

=== Unknown ===
I don't know the present status of these machines. Some of them may be ripe for a wipe+reinstall.
* [[Servers:Matchbox|Matchbox]] - I don't think this machine is actively used anymore. RW - zope?
* [[Servers:Wildcat|Wildcat]]

Server documentation

2006-10-12T20:45:26Z

Mdeepwel: /* Webservers */

== Server List ==

=== Webservers ===
* [[Servers:Tonka|Tonka]] - Toby, LauraT, RobW, various others?
* [[Servers:Slinky|Slinky]] - Steve DiPaola - jViz
* [[Servers:Gaia|Gaia]] - Mark Brady
* [[Servers:Echo|Echo]] - Ron Wakkary
* <s>[[Servers:Whisper|Whisper]] - Thecla</s>
* [[Servers:Lightning|Lightning]] - Rob
* [[Servers:Corsair|Corsair]] - Davis Marques
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li
* [[Servers:Lancer|Lancer]]
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Vindicator|Vindicator]] - ECL project
* [[Servers:Siat-sparc|Siat-sparc]]
* [[Servers:Csil-cluster|Csil-cluster]]
* [[Servers:Nerva|Nerva]] - development SPARC machine
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Skimmer|Skimmer]] - David Botta. Tomcat, phpmyadmin
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Tirpitz|Tirpitz]] - VHost Server including the Research wiki
* [[Servers:Dolphin|Dolphin]] - Maia Engeli, webserver for experimenting with AVIRE, moodle and flash
* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage

=== Infrastructure ===
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster
* [[Servers:Navajo|Navajo]] - Nagios, Splunk, Shutdown
* [[Servers:Hood|Hood]]
* [[Servers:Musashi|Musashi]]
* [[Servers:Yamato|Yamato]]
* [[Servers:Dreadnought|Dreadnought]]
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, sassafras server, flexlm server
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== Other ===
* [[Servers:Intendant|Intendant]] - Pat's box
* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, reciprocity.iat.sfu.ca and www.reciprocity.iat.sfu.ca

=== Unused Boxes ===
* [[Servers:Titus|Titus]] - gentoo
* [[Servers:Seagull|Seagull]] - gentoo
* [[Servers:Cossack|Cossack]] - gentoo

=== Unknown ===
I don't know the present status of these machines. Some of them may be ripe for a wipe+reinstall.
* [[Servers:Matchbox|Matchbox]] - I don't think this machine is actively used anymore. RW - zope?
* [[Servers:Wildcat|Wildcat]]

MAC Addresses and Hostnames

2006-10-12T17:33:32Z

Mdeepwel:

MAC Addresses and Hostnames

2006-10-11T23:57:49Z

Mdeepwel:

MAC Addresses and Hostnames

2006-10-11T23:56:32Z

Mdeepwel:

MAC Addresses and Hostnames

2006-10-11T23:52:37Z

Mdeepwel: /* Computers to be added by Keir */

Accessing Your Data

2006-10-11T23:26:18Z

Mdeepwel:

There are a number of different ways to access your data, and move bits around. In general, we encourage the use of encryption and secure connections. The methods and tools below will provide access to your home-directory data (stored on our central file-servers). 

Quite simply, you can use ssh or ftp to access your data with your research account by connecting to '''research.iat.sfu.ca'''.

=='''ON CAMPUS'''==
===Command Line Access===
====Windows====
PuTTy
====Mac OS-X====
Built-in: use Terminal, and issue 'ssh <user>@<target_machine>'

Finder -> Go -> Utilities -> Terminal

gordonps-Computer:~ gordonp$ '''ssh gordp@wallace.iat.sfu.ca'''

If this is the first time you've connected, you will be greeted with a question about whether you want to continue connecting; answer yes:

The authenticity of host 'wallace.iat.sfu.ca (209.87.56.103)' can't be established.
RSA key fingerprint is 73:0f:7d:5c:50:16:31:e8:2b:12:fe:90:34:ac:a9:0b.
Are you sure you want to continue connecting (yes/no)? '''yes'''

If you ''have'' connected previously, and the key has changed (for a variety of reasons) you might have to briefly edit your .ssh/known_hosts file to remove the conflicting key. A simpler alternative is to remove your .ssh/known_hosts file altogether, and begin collecting keys anew.

====Linux/IRIX====
same as Mac OS-X
 ToDo
*HowTo
**target machines/IP-addresses
*screenshots

===GUI Access===
====Windows====
WinSCP, freeNX client
====Mac OS-X====
=====Fugu=====

You can obtain Fugu from http://rsug.itd.umich.edu/software/fugu/ (or, if this link is broken, try this [[Image:Fugu-1.2.0-English.dmg |local copy]]).

Once installed, you can drag-and-drop files between your local machine, and your centralized Research home directory (or any other machine supporting SSH / SFTP). For all intents and purposes, the behaviour is like traditional FTP, except that all data (including your password!) is encrypted.

 
When you start Fugu, here are some typical settings you must supply in order to connect:

 
[[Image:Fugu_initial_screen.png|Fugu Initial Screen]]

 
If this is your first time connecting to a server, then you will be prompted to accept the RSA key (which you must do):

 
[[Image:Fugu_accept_key.png|Fugu prompt to accept key]]

 
Once you successfully connect, this is what a typical session will look like; you can drag-and-drop files in either direction:

 
[[Image:Fugu_connected.png|Fugu Showing an Established Session]]

 
=====FreeNX Client=====

 
This requires X-windows be installed on your Mac. See an Administrator to have XCode tools installed (or prepare by doing this yourself). The X-window session is run "rooted" (that is, it takes over your entire screen); to switch back to OS-X, you press '''Apple-Option-A'''.

The FreeNX client goes far beyond simply transferring files - rather, it is a complete "remote desktop". Generally, host-machines are not (yet) configured to provide this service, but if needed will will do so (in preference to Apple Remote Desktop, VNC, or other technologies).

You can download the FreeNX client for Mac from http://www.nomachine.com/ or, use this [[Image:|local copy]]

After running the Wizard (and for subsequent sessions) you should see a screen something like this (please not that my use of Port 222 is non-standard; Port 22 should normally be used):

 
[[Image:Nxclient_configure.png|Typical NX client configuration]]

 
Here is an example of a Custom connection command (which you don't require if you're using Gnome or KDE; choose those window-managers rather than Custom). In this case, I am invoking a light-weight window-manager:

 
[[Image:Nxclient_customsettings.png|Custom NX client settings for lightweight 'ice' window manager]]

 
In all circumstances, whether you run a "stock" Gnome/KDE session, or a Custom one, you '''MUST''' enable SSL!!! This is what "tunnels" your X-window session over SSH:

 
[[Image:Nxclient_enable_ssl.png|NX client enable SSL]]

 
After everything is configured, and for every subsequent connect, once you launch NXClient, you should be greeted with this screen:

 
[[Image:Nxclient_connectscreen.png|NX client connect screen]]

 

An established connection, showing the remote window-manager and desktop:

 
[[Image:Nxclient_session.png|Established NX client connection]]

 

====Linux====
=====Konqueror=====

Typical Konqueror address-bar syntax (where the '''fish://''' protocol means "over SSH"). Replace '''gordp''' with your Research username:

fish://gordp@tirpitz.iat.sfu.ca/

 
You are prompted for your Research password:

 
[[Image:Konqueror_ssh_authorization.png]]

 
Resulting connection:

 
[[Image:Konqueror-1.png]]

 
In Konqueror, if you split the window and show both a local directory and the remote one, you can easily drag-and-drop files from one to the other (from the Konqueror menu-bar: '''Window -> Split View Left/Right'''):

 
[[Image:Konqueror_dragndrop.png]]

 
=====FreeNX Client=====

 

====IRIX====
not known
 ToDo
*FreeNX to become our preferred GUI
**client availability t.b.d. We should have direct links for local-downloads, to help users
*screenshots

===NFS/SMB Mounting===
====Windows====
SMB mount - automatic upon successful login
====Mac OS-X====
NFS mount - automatic upon successful login
====Linux====
NFS mount - automatic upon successful login
====IRIX====
NFS mount - automatic upon successful login
 ToDo
*HowTo
**typical /etc/fstab entries for the Linux DIY'er
**target machines/IP-addresses
 

=='''OFF CAMPUS'''==
By default, computers on the Research network start life with all outside access denied. If you ask, we can assist setting up your machine for off-campus access, by opening firewall Port 22. Please discuss any other unusual needs with us; we'd like to facilitate valid research!

====Windows====
PuTTy
====Mac OS-X====
Built-in: use Terminal, and issue 'ssh <user>@<target_machine>'

Finder -> Go -> Utilities -> Terminal

gordonps-Computer:~ gordonp$ '''ssh gordp@wallace.iat.sfu.ca'''

If this is the first time you've connected, you will be greeted with a question about whether you want to continue connecting; answer yes:

The authenticity of host 'wallace.iat.sfu.ca (209.87.56.103)' can't be established.
RSA key fingerprint is 73:0f:7d:5c:50:16:31:e8:2b:12:fe:90:34:ac:a9:0b.
Are you sure you want to continue connecting (yes/no)? '''yes'''

If you ''have'' connected previously, and the key has changed (for a variety of reasons) you might have to briefly edit your .ssh/known_hosts file to remove the conflicting key. A simpler alternative is to remove your .ssh/known_hosts file altogether, and begin collecting keys anew.

====Linux/IRIX====
same as Mac OS-X
 ToDo
*HowTo
**target machines/IP-addresses
*screenshots

===GUI Access===
====Windows====
WinSCP, freeNX client
====Mac OS-X====
=====Fugu=====

You can obtain Fugu from http://rsug.itd.umich.edu/software/fugu/ (or, if this link is broken, try this [[Image:Fugu-1.2.0-English.dmg |local copy]]).

Once installed, you can drag-and-drop files between your local machine, and your centralized Research home directory (or any other machine supporting SSH / SFTP). For all intents and purposes, the behaviour is like traditional FTP, except that all data (including your password!) is encrypted.

 
When you start Fugu, here are some typical settings you must supply in order to connect:

 
[[Image:Fugu_initial_screen.png|Fugu Initial Screen]]

 
If this is your first time connecting to a server, then you will be prompted to accept the RSA key (which you must do):

 
[[Image:Fugu_accept_key.png|Fugu prompt to accept key]]

 
Once you successfully connect, this is what a typical session will look like; you can drag-and-drop files in either direction:

 
[[Image:Fugu_connected.png|Fugu Showing an Established Session]]

 

=====FreeNX Client=====

 
This requires X-windows be installed on your Mac. See an Administrator to have XCode tools installed (or prepare by doing this yourself). The X-window session is run "rooted" (that is, it takes over your entire screen); to switch back to OS-X, you press '''Apple-Option-A'''.

The FreeNX client goes far beyond simply transferring files - rather, it is a complete "remote desktop". Generally, host-machines are not (yet) configured to provide this service, but if needed will will do so (in preference to Apple Remote Desktop, VNC, or other technologies).

You can download the FreeNX client for Mac from http://www.nomachine.com/ or, use this [[Image:|local copy]]

After running the Wizard (and for subsequent sessions) you should see a screen something like this (please not that my use of Port 222 is non-standard; Port 22 should normally be used):

 
[[Image:Nxclient_configure.png|Typical NX client configuration]]

 
Here is an example of a Custom connection command (which you don't require if you're using Gnome or KDE; choose those window-managers rather than Custom). In this case, I am invoking a light-weight window-manager:

 
[[Image:Nxclient_customsettings.png|Custom NX client settings for lightweight 'ice' window manager]]

 
In all circumstances, whether you run a "stock" Gnome/KDE session, or a Custom one, you '''MUST''' enable SSL!!! This is what "tunnels" your X-window session over SSH:

 
[[Image:Nxclient_enable_ssl.png|NX client enable SSL]]

 
After everything is configured, and for every subsequent connect, once you launch NXClient, you should be greeted with this screen:

 
[[Image:Nxclient_connectscreen.png|NX client connect screen]]

 
An established connection, showing the remote window-manager and desktop:

 
[[Image:Nxclient_session.png|Established NX client connection]]

 

====Linux====
=====Konqueror=====

Typical Konqueror address-bar syntax (where the '''fish://''' protocol means "over SSH"). Replace '''gordp''' with your Research username:

fish://gordp@tirpitz.iat.sfu.ca/

 
You are prompted for your Research password:

 
[[Image:Konqueror_ssh_authorization.png]]

 
Resulting connection:

 
[[Image:Konqueror-1.png]]

 
In Konqueror, if you split the window and show both a local directory and the remote one, you can easily drag-and-drop files from one to the other (from the Konqueror menu-bar: '''Window -> Split View Left/Right'''):

 
[[Image:Konqueror_dragndrop.png]]

 
=====FreeNX Client=====

 

====IRIX====
not known
 ToDo
*FreeNX to become our preferred GUI
**client availability t.b.d. We should have direct links for local-downloads, to help users
*screenshots

===NFS Mounting===
NFS mounting is not available outside the Research firewall.

Setup a Project Wiki

2006-10-10T17:48:38Z

Mdeepwel: /* Add a Seperate Instance of MediaWiki */

Kingfisher is our wiki server. Check out the [http://wiki.iat.sfu.ca wiki index] to see existing wikis.

== Add a Seperate Instance of MediaWiki ==
# ssh root@kingfisher
# cd /srv/www/htwiki
# tar -xzvf mediawiki-unconfiguredInstallation.tar.gz
# mv mediawiki $projectname

The go to the mediawiki setup website for your project:
'''<nowiki>http://wiki.iat.sfu.ca/$projectname</nowiki>'''

Fill in the options appropriately with some special Configuration options to note: 
Make a seperate database for each project:
* '''Database name''': wiki_$projectname
Seperate username for each project:
* '''DB username''': wiki_$projectname
Unique password:
# apg -m 9 -MNC

And no table prefix.

''Note: When you click Install! it may fail. For me it has always failed if the username was too long (it must be at 16 characters or less)''

If it worked, this will create the LocalSettings.php file which you then move to the correct place:
# cd $projectname
# mv config/LocalSettings.php .

Config should no longer be world writable:
# chmod a-w config

Your wiki should be completely setup at: <nowiki>http://wiki.iat.sfu.ca/$projectname</nowiki>

I then usually go login to the wiki and add to the main page: '''Wiki is configured correctly.''' for 100% assurance that everything is working :)

To customize access and viewing restrictions, look at this article on [http://meta.wikimedia.org/wiki/Preventing_Access Preventing Access] (this version of mediawiki is 1.4).

== Add Sysop/Administrator User ==
Follow these steps to make a wiki account, a sysop account:

Create the account, if you haven't done so already. Logout. Login as the WikiSysop user.

Navigate to '''Special Pages''' ->''' Make a user into a sysop''', or modify this link with your project name: <nowiki>http://wiki.iat.sfu.ca/$projectname/index.php/Special:Makesysop</nowiki>

Enter the username and set bureaucrat flag too.

MAC Addresses and Hostnames

2006-10-05T21:30:56Z

Mdeepwel: /* Computers to be added by Keir */

Printers

2006-10-05T19:59:11Z

Mdeepwel:

Incase a printer has not been installed on your workstation, here is a handy reference to install a Research printer under Windows, Mac, or Linux.

If you have a Mac or Linux machine with an automatic DNS discovery tool, such as Bonjour, Avahi, or Zeroconf, you can browse the network for these printers to add them. The printers will show up with a name listed below (like sr-isoroku); further details in each operating system section.

== Install a Printer ==

# To install a new printer, find out which printers are closest to you and note the printer's hostname, such as sr-isoroku.iat.sfu.ca. You can find a complete list below.
# Second following the guide for your operating system to add the printer:
::* [[HOWTO Install Printers Under Windows|Install Printers Under Windows]]
::* [[HOWTO Install Printers Under Mac OSX|Install Printers Under Mac OSX]]
::* [[HOWTO Install Printers Under Linux|Install Printers Under Linux]]

=== Research Printers ===

'''Just outside the InfoNet Media Lab'''
* Hostname: sr-isoroku.iat.sfu.ca (HP Colour LaserJet)
* Hostname: sr-dumitrescu.iat.sfu.ca (Lexmark B&W LaserJet)

'''Inside the InfoNet Media Lab'''
* Hostname: sr-ike.iat.sfu.ca (Lexmark B&W LaserJet)

'''EC3 Lab'''
* Hostname: sr-rommel.iat.sfu.ca (Lexmark B&W LaserJet)
* Hostname: sr-macarthur.iat.sfu.ca (HP Colour LaserJet)

'''Grad Student Lounge Area'''
* Hostname: sr-patton.iat.sfu.ca (Lexmark B&W LaserJet)
* Hostname: sr-monty.iat.sfu.ca (HP Color LaserJet)
* Hostname: sr-yamamoto.iat.sfu.ca (Lexmark B&W LaserJet)
* Hostname: sr-zhukov.iat.sfu.ca (HP Colour LaserJet)

'''Storage Room'''
* Hostname: sr-mountbatten.iat.sfu.ca (Lexmark B&W LaserJet)