Research - User contributions [en]

Server documentation

2012-05-19T03:34:37Z

Rmackenz: /* Infrastructure Devices */

== Infrastructure Devices ==

* [[Infrastructure:APC RackPDU|APC Rack Power Supplies]]
* [[Infrastucture:Dell Switch|Dell 48 port switch]]
* [[Infrastucture:DLink Switch|DLink 20 port switch]]

== Core Servers ==
=== Web ===
* [[Servers:Hercules|Hercules]] - Our main web vserver host
* [[Servers:Tirpitz|Tirpitz]] - Information webserver including the Research wiki, phpLDAPadmin
=== Infrastructure ===
* [[Servers:Hood|Hood]] - LDAP authentication-server
* [[Servers:Navajo|Navajo]] - Nagios
* [[Servers:Lancer|Lancer]] - WSUS, Morae KeyServer, Ghost Server, Sassfras Keyserver (as of Jan 2012).
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, old sassafras server (as of Jan 2012), old flexlm server
* [[Servers:Teleport|Teleport]] - Dedicated box for allowing users to access their files. SSH/SFTP only.
* [[Servers:Spitfire|Spitfire]] - User Directories server
* [[Servers:Hurricane|Hurricane]] - Project Directories server, software
* [[Servers:Musashi|Musashi]] - "Mirror" file-server
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster

== Other Servers ==

* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li
* [[Servers:HVILAB|HVILAB]] - Lyn Bartram, Chris Shaw| Drew Paulin (main admin)
* [[Servers:Echo|Echo]] - Ron Wakkary
* [[Servers:Slinky|Slinky]] - Steve DiPaola
* [[Servers:Lightning|Lightning]] - Rob Woodburry Apple Server - No Power

=== RETIRED ===
* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx) TO BE RECYCLED (decommissioned)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, hvilab.iat.sfu.ca and www.hvilab.iat.sfu.ca
* [[Servers:Siat-sparc|Siat-sparc]] --SLATED FOR RECOVERY
* [[Servers:Csil-cluster|Csil-cluster]] --SLATED FOR RECOVERY
* [[Servers:Nerva|Nerva]] - development SPARC machine -turned off Sept. 14, 2007
* [[Servers:Intendant|Intendant]] - Pat's box
* [[Servers:Vindicator|Vindicator]]- SIAT Virtual Server #3 <00 NULL> <01 NULL> <02 NULL> <03 NULL> <04 NULL>
* [[Servers:Skimmer|Skimmer]]- SIAT Virtual Server #2 <00 Gromala> <01 Ty Mey Eap> <02 Antle> <03 Engeli> <04 NULL>
* [[Servers:Seagull|Seagull]] - Drupal, Apache (Jack Stockholm Joshua Tanenbaum) CMAP (Maia Engeli)
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SLATED FOR REBUILD
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Gaia|Gaia]] --RETIRED Mark Brady (main admin), and Aleksandra Dulic + Kenneth Newby
* [[Servers:Dolphin|Dolphin]] - 
* [[Servers:Dragonfly|Dragonfly]] - D
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SERVER REBUILD GENTOO
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala --SLATED FOR REBUILD GENTOO
* [[Servers:Wildcat|Wildcat]] - turned off on date unknown --LTSP candidate
* [[Servers:Matchbox|Matchbox]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>
* [[Servers:Tonka|Tonka]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Yamato|Yamato]] - User home-dir file-server
* [[Servers:Stuka|Stuka]] - repurposed as the LTSP server (summer 2007)
* [[Servers:Corsair|Corsair]] - SIAT Virtual Server #1 <00 Marques> <01 Stockholm> <02 Paulin> <03 Prevost> <04 El-Nasr>
* [[Servers:Cossack|Cossack]] - TechOne Dedicated Server (Janet McCracken)

Server documentation

2012-05-19T03:34:24Z

Rmackenz:

== Infrastructure Devices ==

* [[Infrastructure:APC RackPDU|APC Rack Power Supplies]]
* [[Infrastucture:Dell Switch|Dell 48 port switch]
* [[Infrastucture:DLink Switch|DLink 20 port switch]

== Core Servers ==
=== Web ===
* [[Servers:Hercules|Hercules]] - Our main web vserver host
* [[Servers:Tirpitz|Tirpitz]] - Information webserver including the Research wiki, phpLDAPadmin
=== Infrastructure ===
* [[Servers:Hood|Hood]] - LDAP authentication-server
* [[Servers:Navajo|Navajo]] - Nagios
* [[Servers:Lancer|Lancer]] - WSUS, Morae KeyServer, Ghost Server, Sassfras Keyserver (as of Jan 2012).
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, old sassafras server (as of Jan 2012), old flexlm server
* [[Servers:Teleport|Teleport]] - Dedicated box for allowing users to access their files. SSH/SFTP only.
* [[Servers:Spitfire|Spitfire]] - User Directories server
* [[Servers:Hurricane|Hurricane]] - Project Directories server, software
* [[Servers:Musashi|Musashi]] - "Mirror" file-server
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster

== Other Servers ==

* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li
* [[Servers:HVILAB|HVILAB]] - Lyn Bartram, Chris Shaw| Drew Paulin (main admin)
* [[Servers:Echo|Echo]] - Ron Wakkary
* [[Servers:Slinky|Slinky]] - Steve DiPaola
* [[Servers:Lightning|Lightning]] - Rob Woodburry Apple Server - No Power

=== RETIRED ===
* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx) TO BE RECYCLED (decommissioned)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, hvilab.iat.sfu.ca and www.hvilab.iat.sfu.ca
* [[Servers:Siat-sparc|Siat-sparc]] --SLATED FOR RECOVERY
* [[Servers:Csil-cluster|Csil-cluster]] --SLATED FOR RECOVERY
* [[Servers:Nerva|Nerva]] - development SPARC machine -turned off Sept. 14, 2007
* [[Servers:Intendant|Intendant]] - Pat's box
* [[Servers:Vindicator|Vindicator]]- SIAT Virtual Server #3 <00 NULL> <01 NULL> <02 NULL> <03 NULL> <04 NULL>
* [[Servers:Skimmer|Skimmer]]- SIAT Virtual Server #2 <00 Gromala> <01 Ty Mey Eap> <02 Antle> <03 Engeli> <04 NULL>
* [[Servers:Seagull|Seagull]] - Drupal, Apache (Jack Stockholm Joshua Tanenbaum) CMAP (Maia Engeli)
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SLATED FOR REBUILD
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Gaia|Gaia]] --RETIRED Mark Brady (main admin), and Aleksandra Dulic + Kenneth Newby
* [[Servers:Dolphin|Dolphin]] - 
* [[Servers:Dragonfly|Dragonfly]] - D
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SERVER REBUILD GENTOO
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala --SLATED FOR REBUILD GENTOO
* [[Servers:Wildcat|Wildcat]] - turned off on date unknown --LTSP candidate
* [[Servers:Matchbox|Matchbox]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>
* [[Servers:Tonka|Tonka]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Yamato|Yamato]] - User home-dir file-server
* [[Servers:Stuka|Stuka]] - repurposed as the LTSP server (summer 2007)
* [[Servers:Corsair|Corsair]] - SIAT Virtual Server #1 <00 Marques> <01 Stockholm> <02 Paulin> <03 Prevost> <04 El-Nasr>
* [[Servers:Cossack|Cossack]] - TechOne Dedicated Server (Janet McCracken)

Main Page

2012-05-18T22:14:59Z

Rmackenz:

Welcome. This is a wiki for the purpose of helping to keep the systems in Research running smoothly and to inform users of Research services.

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
User Articles
|-
| width="33%" valign="top" | '''Projects'''
* [[AG Node Documentation]]
* [[Eye trackers @ EC3 Lab]]
* [[Large Scale Imagery: evolving the components]]
* [[Cluster User Documentation|Documentation for the Cluster]]
* [[SGI]]
* [[Acoustic Panels - DIY]]

| width="33%" valign="top" | '''Workstations'''
* [[Printers]]
* [[Research Workstations - default software loads | Standard Workstation Software List]]
* [[Trend Micro Virus Scanner | Virus Scanner]]
* [[Windows Maintenance]]
* [[Linux Administration & Maintenance]]
* [[MAC Addresses and Hostnames]]

| width="33%" valign="top" | '''General Information'''
* [[Research Services]]
* [[Accessing Your Data]]
* [[People power - grad students and their expertise]]
* [[Research Mailing Lists]]
* [[HOWTO Access The SVN Server| Accessing the SVN Server]]
* [[HOWTO Access The CVS Server| Accessing the CVS Server]]
* [[Lockers]]
* [[Policies and Procedures]]
* [[Booking Research Rooms]]
* [[Domain Name Hosting]]

|}

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
Administration Articles
|-
| width="33%" valign="top" | '''Current Status and Configs'''
* [[Network Devices Servers & Workstations]]
* [[Server documentation | Server Room Device List]]
* [[Websites Hosted]]
* [[SFU IP Information]]
'''Administration & Resource Management'''
* [[Research Administration Tasks]]
* [[Workstation Naming Convention]]
* [[Backups with AMANDA]]
* [[RAID Documentation]]
* [[Software Management]]
* [[Maya]]
* [[SolidWorks]]
* [[RATS 2 Documentation]]
* [[Microsoft Deployment Toolkit (2010) | Microsoft Deployment Toolkit 2010 - Windows Deployment Server]]
* [[Setup Windows Server Update Services]]

| width="33%" valign="top" | '''Customizing Linux Servers'''
* [[Research Servers - default software loads | Standard Server Software List]]
* [[REF Standard Server Configuration | Standard Server Configuration]]
* [[Setup a Project Wiki|Setup MediaWiki]]
* [[Oracle on Gentoo]]
* [[WebDAV Setup]]
* [[Virtual Servers]]
* [[LTSP]]
* [[NFS Version 4]]
* [[XFS Filesystem HOWTO]]
* [[Webapp-Config]]

| width="33%" valign="top" | '''Client Side & Other Articles'''
* [[Linux Tips and Tools]]
* [[HOWTO Install SUSE with AutoYast|Install SUSE with AutoYast]]
* [[Who's Where - Availability of Research staff|Availability of Research Staff]]
* [[Maya]]
* [[Adding a Mac to the Research Domain]]
* [[Enterprise Deployment for Windows]]
* [[Short diradm Documentation]]
* [[Trend Micro Virus Scanner]]

|}

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
Reference
|-
| width="33%" valign="top" | '''Manuals'''
* [[File Servers]]
* [[Belkin F1DA116T KVM Switch]]
* [[D-Link DGS-3224TG Switches]]
* [[Printer Manuals|Printers]]
* [[Scanners]]
* [[Theaterette Information, Instruction, and Manuals]]

| width="33%" valign="top" | '''Notes'''
* [[Command Syntax]]
* [[Micellaneous Notes]]

| width="33%" valign="top" |
* [http://research.iat.sfu.ca/awstats.pl?config=infrastructure AWstats (wiki-traffic)]
* [[Media:Satellite_channels.pdf|Bell ExpressVu Channels]]
* [http://wiki.iat.sfu.ca/BlackBox BlackBox wiki]

|}

[http://research.iat.sfu.ca/wiki/index.php?title=Special:Recentchanges&feed=rss http://research.iat.sfu.ca/wiki/images/b/b6/Rss.gif]

Server documentation

2012-05-17T07:32:10Z

Rmackenz:

== Core Servers ==

=== Web ===
* [[Servers:Hercules|Hercules]] - Our main web vserver host
* [[Servers:Tirpitz|Tirpitz]] - Information webserver including the Research wiki, phpLDAPadmin

=== Infrastructure ===
* [[Servers:Hood|Hood]] - LDAP authentication-server
* [[Servers:Navajo|Navajo]] - Nagios
* [[Servers:Lancer|Lancer]] - WSUS, Morae KeyServer, Ghost Server, Sassfras Keyserver (as of Jan 2012).
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, old sassafras server (as of Jan 2012), old flexlm server
* [[Servers:Teleport|Teleport]] - Dedicated box for allowing users to access their files. SSH/SFTP only.
* [[Servers:Spitfire|Spitfire]] - User Directories server
* [[Servers:Hurricane|Hurricane]] - Project Directories server, software
* [[Servers:Musashi|Musashi]] - "Mirror" file-server
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster

=== Other Servers ===

* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li
* [[Servers:HVILAB|HVILAB]] - Lyn Bartram, Chris Shaw| Drew Paulin (main admin)
* [[Servers:Echo|Echo]] - Ron Wakkary
* [[Servers:Slinky|Slinky]] - Steve DiPaola
* [[Servers:Lightning|Lightning]] - Rob Woodburry Apple Server - No Power

=== Unknown ===
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== RETIRED ===
* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx) TO BE RECYCLED (decommissioned)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, hvilab.iat.sfu.ca and www.hvilab.iat.sfu.ca
* [[Servers:Siat-sparc|Siat-sparc]] --SLATED FOR RECOVERY
* [[Servers:Csil-cluster|Csil-cluster]] --SLATED FOR RECOVERY
* [[Servers:Nerva|Nerva]] - development SPARC machine -turned off Sept. 14, 2007
* [[Servers:Intendant|Intendant]] - Pat's box
* [[Servers:Vindicator|Vindicator]]- SIAT Virtual Server #3 <00 NULL> <01 NULL> <02 NULL> <03 NULL> <04 NULL>
* [[Servers:Skimmer|Skimmer]]- SIAT Virtual Server #2 <00 Gromala> <01 Ty Mey Eap> <02 Antle> <03 Engeli> <04 NULL>
* [[Servers:Seagull|Seagull]] - Drupal, Apache (Jack Stockholm Joshua Tanenbaum) CMAP (Maia Engeli)
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SLATED FOR REBUILD
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Gaia|Gaia]] --RETIRED Mark Brady (main admin), and Aleksandra Dulic + Kenneth Newby
* [[Servers:Dolphin|Dolphin]] - 
* [[Servers:Dragonfly|Dragonfly]] - D
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SERVER REBUILD GENTOO
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala --SLATED FOR REBUILD GENTOO
* [[Servers:Wildcat|Wildcat]] - turned off on date unknown --LTSP candidate
* [[Servers:Matchbox|Matchbox]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>
* [[Servers:Tonka|Tonka]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Yamato|Yamato]] - User home-dir file-server
* [[Servers:Stuka|Stuka]] - repurposed as the LTSP server (summer 2007)
* [[Servers:Corsair|Corsair]] - SIAT Virtual Server #1 <00 Marques> <01 Stockholm> <02 Paulin> <03 Prevost> <04 El-Nasr>
* [[Servers:Cossack|Cossack]] - TechOne Dedicated Server (Janet McCracken)

Main Page

2012-05-17T05:42:06Z

Rmackenz:

Welcome. This is a wiki for the purpose of helping to keep the systems in Research running smoothly and to inform users of Research services.

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
User Articles
|-
| width="33%" valign="top" | '''Projects'''
* [[AG Node Documentation]]
* [[Eye trackers @ EC3 Lab]]
* [[Large Scale Imagery: evolving the components]]
* [[Cluster User Documentation|Documentation for the Cluster]]
* [[SGI]]
* [[Acoustic Panels - DIY]]

| width="33%" valign="top" | '''Workstations'''
* [[Printers]]
* [[Research Workstations - default software loads | Standard Workstation Software List]]
* [[Trend Micro Virus Scanner | Virus Scanner]]
* [[Windows Maintenance]]
* [[Linux Administration & Maintenance]]
* [[MAC Addresses and Hostnames]]

| width="33%" valign="top" | '''General Information'''
* [[Research Services]]
* [[Accessing Your Data]]
* [[People power - grad students and their expertise]]
* [[Research Mailing Lists]]
* [[HOWTO Access The SVN Server| Accessing the SVN Server]]
* [[HOWTO Access The CVS Server| Accessing the CVS Server]]
* [[Lockers]]
* [[Policies and Procedures]]
* [[Booking Research Rooms]]
* [[Domain Name Hosting]]

|}

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
Administration Articles
|-
| width="33%" valign="top" | '''Current Status and Configs'''
* [[Network Devices Servers & Workstations]]
* [[Server documentation | Server Device List]]
* [[Websites Hosted]]
* [[SFU IP Information]]
'''Administration & Resource Management'''
* [[Research Administration Tasks]]
* [[Workstation Naming Convention]]
* [[Backups with AMANDA]]
* [[RAID Documentation]]
* [[Software Management]]
* [[Maya]]
* [[SolidWorks]]
* [[RATS 2 Documentation]]
* [[Microsoft Deployment Toolkit (2010) | Microsoft Deployment Toolkit 2010 - Windows Deployment Server]]
* [[Setup Windows Server Update Services]]

| width="33%" valign="top" | '''Customizing Linux Servers'''
* [[Research Servers - default software loads | Standard Server Software List]]
* [[REF Standard Server Configuration | Standard Server Configuration]]
* [[Setup a Project Wiki|Setup MediaWiki]]
* [[Oracle on Gentoo]]
* [[WebDAV Setup]]
* [[Virtual Servers]]
* [[LTSP]]
* [[NFS Version 4]]
* [[XFS Filesystem HOWTO]]
* [[Webapp-Config]]

| width="33%" valign="top" | '''Client Side & Other Articles'''
* [[Linux Tips and Tools]]
* [[HOWTO Install SUSE with AutoYast|Install SUSE with AutoYast]]
* [[Who's Where - Availability of Research staff|Availability of Research Staff]]
* [[Maya]]
* [[Adding a Mac to the Research Domain]]
* [[Enterprise Deployment for Windows]]
* [[Short diradm Documentation]]
* [[Trend Micro Virus Scanner]]

|}

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
Reference
|-
| width="33%" valign="top" | '''Manuals'''
* [[File Servers]]
* [[Belkin F1DA116T KVM Switch]]
* [[D-Link DGS-3224TG Switches]]
* [[Printer Manuals|Printers]]
* [[Scanners]]
* [[Theaterette Information, Instruction, and Manuals]]

| width="33%" valign="top" | '''Notes'''
* [[Command Syntax]]
* [[Micellaneous Notes]]

| width="33%" valign="top" |
* [http://research.iat.sfu.ca/awstats.pl?config=infrastructure AWstats (wiki-traffic)]
* [[Media:Satellite_channels.pdf|Bell ExpressVu Channels]]
* [http://wiki.iat.sfu.ca/BlackBox BlackBox wiki]

|}

[http://research.iat.sfu.ca/wiki/index.php?title=Special:Recentchanges&feed=rss http://research.iat.sfu.ca/wiki/images/b/b6/Rss.gif]

INFO Network Routing Information

2012-05-17T05:26:36Z

Rmackenz: Redirected page to SFU IP Information

#REDIRECT [[SFU_IP_Information]]

INFO Network Routing Information

2012-05-17T05:26:07Z

Rmackenz: Redirected page to Network Devices Servers & Workstations

#REDIRECT [[Network Devices Servers & Workstations]]

SFU IP Information

2012-05-17T05:25:21Z

Rmackenz:

== SFU IP Ranges by Location: ==
{| class="wikitable"
!colspan="6"|SFU IP Range May 16 2012
|-
|142.58.181
|Podium3
|-
|142.58.183
|Podium3
|-
|142.58.185
|Fourth floor, rooms 41XX
|-
|142.58.188
|14th floor
|-
|142.58.204
|Fifth floor, rooms 53XX
|-
|142.58.205
|Podium2
|-
|209.87.56
|Siat Server Room
|}
== Research Server Default Gateway ==
* 209.87.57.254

== SFU DNS Servers: ==
* 206.12.16.14
* 142.58.103.2
* 142.58.103.1

== NTP Timeservers ==
* time.sfu.ca = whistler.sfu.ca
* time2.sfu.ca = roland.surrey.sfu.ca <-- Use this first

Config that can be used for ntpd:
<nowiki>server time2.sfu.ca
time.sfu.ca
server ntp1.cmc.ec.gc.ca
server ntp2.cmc.ec.gc.ca
server time.nrc.ca
server ntp.cpsc.ucalgary.ca</nowiki>

== DHCP ==
* Dynamic Range 2-119 DDNS
* For both the 181 and 183 networks, probably others too.

Main Page

2012-05-17T05:21:31Z

Rmackenz:

Welcome. This is a wiki for the purpose of helping to keep the systems in Research running smoothly and to inform users of Research services.

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
User Articles
|-
| width="33%" valign="top" | '''Projects'''
* [[AG Node Documentation]]
* [[Eye trackers @ EC3 Lab]]
* [[Large Scale Imagery: evolving the components]]
* [[Cluster User Documentation|Documentation for the Cluster]]
* [[SGI]]
* [[Acoustic Panels - DIY]]

| width="33%" valign="top" | '''Workstations'''
* [[Printers]]
* [[Research Workstations - default software loads | Standard Workstation Software List]]
* [[Trend Micro Virus Scanner | Virus Scanner]]
* [[Windows Maintenance]]
* [[Linux Administration & Maintenance]]
* [[MAC Addresses and Hostnames]]

| width="33%" valign="top" | '''General Information'''
* [[Research Services]]
* [[Accessing Your Data]]
* [[People power - grad students and their expertise]]
* [[Research Mailing Lists]]
* [[HOWTO Access The SVN Server| Accessing the SVN Server]]
* [[HOWTO Access The CVS Server| Accessing the CVS Server]]
* [[Lockers]]
* [[Policies and Procedures]]
* [[Booking Research Rooms]]
* [[Domain Name Hosting]]

|}

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
Administration Articles
|-
| width="33%" valign="top" | '''Current Status and Configs'''
* [[Network Devices Servers & Workstations]]
* [[Server documentation | Server List]]
* [[Websites Hosted]]
* [[SFU IP Information]]
'''Administration & Resource Management'''
* [[Research Administration Tasks]]
* [[Workstation Naming Convention]]
* [[Backups with AMANDA]]
* [[RAID Documentation]]
* [[Software Management]]
* [[Maya]]
* [[SolidWorks]]
* [[RATS 2 Documentation]]
* [[Microsoft Deployment Toolkit (2010) | Microsoft Deployment Toolkit 2010 - Windows Deployment Server]]
* [[Setup Windows Server Update Services]]

| width="33%" valign="top" | '''Customizing Linux Servers'''
* [[Research Servers - default software loads | Standard Server Software List]]
* [[REF Standard Server Configuration | Standard Server Configuration]]
* [[Setup a Project Wiki|Setup MediaWiki]]
* [[Oracle on Gentoo]]
* [[WebDAV Setup]]
* [[Virtual Servers]]
* [[LTSP]]
* [[NFS Version 4]]
* [[XFS Filesystem HOWTO]]
* [[Webapp-Config]]

| width="33%" valign="top" | '''Client Side & Other Articles'''
* [[Linux Tips and Tools]]
* [[HOWTO Install SUSE with AutoYast|Install SUSE with AutoYast]]
* [[Who's Where - Availability of Research staff|Availability of Research Staff]]
* [[Maya]]
* [[Adding a Mac to the Research Domain]]
* [[Enterprise Deployment for Windows]]
* [[Short diradm Documentation]]
* [[Trend Micro Virus Scanner]]

|}

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
Reference
|-
| width="33%" valign="top" | '''Manuals'''
* [[File Servers]]
* [[Belkin F1DA116T KVM Switch]]
* [[D-Link DGS-3224TG Switches]]
* [[Printer Manuals|Printers]]
* [[Scanners]]
* [[Theaterette Information, Instruction, and Manuals]]

| width="33%" valign="top" | '''Notes'''
* [[Command Syntax]]
* [[Micellaneous Notes]]

| width="33%" valign="top" |
* [http://research.iat.sfu.ca/awstats.pl?config=infrastructure AWstats (wiki-traffic)]
* [[Media:Satellite_channels.pdf|Bell ExpressVu Channels]]
* [http://wiki.iat.sfu.ca/BlackBox BlackBox wiki]

|}

[http://research.iat.sfu.ca/wiki/index.php?title=Special:Recentchanges&feed=rss http://research.iat.sfu.ca/wiki/images/b/b6/Rss.gif]

SFU IP Information

2012-05-17T05:21:12Z

Rmackenz: Merged with Network Routing Information

{| class="wikitable"
!colspan="6"|SFU IP Range May 16 2012
|-
|142.58.181
|Podium3
|-
|142.58.183
|Podium3
|-
|142.58.185
|Fourth floor, rooms 41XX
|-
|142.58.188
|14th floor
|-
|142.58.204
|Fifth floor, rooms 53XX
|-
|142.58.205
|Podium2
|-
|209.87.56
|Siat Server Room
|}

== SFU DNS Servers: ==
* 206.12.16.14
* 142.58.103.2
* 142.58.103.1

== Research Default (Server) Gateway ==
* 209.87.57.254

== Research Default (Node) Gateway ==

* 142.58.181.254

== NTP Timeservers ==
* time.sfu.ca = whistler.sfu.ca
* time2.sfu.ca = roland.surrey.sfu.ca <-- Use this first

Config that can be used for ntpd:
<nowiki>server time2.sfu.ca
time.sfu.ca
server ntp1.cmc.ec.gc.ca
server ntp2.cmc.ec.gc.ca
server time.nrc.ca
server ntp.cpsc.ucalgary.ca</nowiki>

== DHCP ==
* Dynamic Range 2-119 DDNS
* For both the 181 and 183 networks

INFO Network Routing Information

2012-05-17T05:19:45Z

Rmackenz:

== SFU DNS Servers: ==
* 206.12.16.14
* 142.58.103.2
* 142.58.103.1

== Research Default (Server) Gateway ==
* 209.87.57.254

== Research Default (Node) Gateway ==

* 142.58.181.254

== NTP Timeservers ==
* time.sfu.ca = whistler.sfu.ca
* time2.sfu.ca = roland.surrey.sfu.ca <-- Use this first

Config that can be used for ntpd:
<nowiki>server time2.sfu.ca
time.sfu.ca
server ntp1.cmc.ec.gc.ca
server ntp2.cmc.ec.gc.ca
server time.nrc.ca
server ntp.cpsc.ucalgary.ca</nowiki>

== DHCP ==
* Dynamic Range 2-119 DDNS
* For both the 181 and 183 networks

INFO Network Routing Information

2012-05-17T05:17:14Z

Rmackenz: /* NTP Timeservers */

== SFU DNS Servers: ==
* 206.12.16.14
* 142.58.103.2
* 142.58.103.1

== Research Default (Server) Gateway ==
* 209.87.57.254

== Research Default (Node) Gateway ==

* 142.58.181.254

== NTP Timeservers ==
* time.sfu.ca = whistler.sfu.ca
* time2.sfu.ca = roland.surrey.sfu.ca <-- Use this first

Config that can be used for ntpd:
server time2.sfu.ca
time.sfu.ca
server ntp1.cmc.ec.gc.ca
server ntp2.cmc.ec.gc.ca
server time.nrc.ca
server ntp.cpsc.ucalgary.ca

== DHCP ==
* Dynamic Range 2-119 DDNS
* For both the 181 and 183 networks

SFU IP Information

2012-05-17T04:54:53Z

Rmackenz: Created page with "{| class="wikitable" !colspan="6"|SFU IP Range May 16 2012 |- |142.58.181 |Podium3 |- |142.58.183 |Podium3 |- |142.58.185 |Fourth floor, rooms 41XX |- |142.58.188 |14th fl..."

Main Page

2012-05-17T04:38:15Z

Rmackenz: Added a section for configs and information

Welcome. This is a wiki for the purpose of helping to keep the systems in Research running smoothly and to inform users of Research services.

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
User Articles
|-
| width="33%" valign="top" | '''Projects'''
* [[AG Node Documentation]]
* [[Eye trackers @ EC3 Lab]]
* [[Large Scale Imagery: evolving the components]]
* [[Cluster User Documentation|Documentation for the Cluster]]
* [[SGI]]
* [[Acoustic Panels - DIY]]

| width="33%" valign="top" | '''Workstations'''
* [[Printers]]
* [[Research Workstations - default software loads | Standard Workstation Software List]]
* [[Trend Micro Virus Scanner | Virus Scanner]]
* [[Windows Maintenance]]
* [[Linux Administration & Maintenance]]
* [[MAC Addresses and Hostnames]]

| width="33%" valign="top" | '''General Information'''
* [[Research Services]]
* [[Accessing Your Data]]
* [[People power - grad students and their expertise]]
* [[Research Mailing Lists]]
* [[HOWTO Access The SVN Server| Accessing the SVN Server]]
* [[HOWTO Access The CVS Server| Accessing the CVS Server]]
* [[Lockers]]
* [[Policies and Procedures]]
* [[Booking Research Rooms]]
* [[Domain Name Hosting]]

|}

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
Administration Articles
|-
| width="33%" valign="top" | '''Current Status and Configs'''
* [[Network Devices Servers & Workstations]]
* [[Server documentation | Server List]]
* [[INFO Network Routing Information | Network Routing Information]]
* [[Websites Hosted]]
* [[SFU IP Information]]
'''Administration & Resource Management'''
* [[Research Administration Tasks]]
* [[Workstation Naming Convention]]
* [[Backups with AMANDA]]
* [[RAID Documentation]]
* [[Software Management]]
* [[Maya]]
* [[SolidWorks]]
* [[RATS 2 Documentation]]
* [[Microsoft Deployment Toolkit (2010) | Microsoft Deployment Toolkit 2010 - Windows Deployment Server]]
* [[Setup Windows Server Update Services]]

| width="33%" valign="top" | '''Customizing Linux Servers'''
* [[Research Servers - default software loads | Standard Server Software List]]
* [[REF Standard Server Configuration | Standard Server Configuration]]
* [[Setup a Project Wiki|Setup MediaWiki]]
* [[Oracle on Gentoo]]
* [[WebDAV Setup]]
* [[Virtual Servers]]
* [[LTSP]]
* [[NFS Version 4]]
* [[XFS Filesystem HOWTO]]
* [[Webapp-Config]]

| width="33%" valign="top" | '''Client Side & Other Articles'''
* [[Linux Tips and Tools]]
* [[HOWTO Install SUSE with AutoYast|Install SUSE with AutoYast]]
* [[Who's Where - Availability of Research staff|Availability of Research Staff]]
* [[Maya]]
* [[Adding a Mac to the Research Domain]]
* [[Enterprise Deployment for Windows]]
* [[Short diradm Documentation]]
* [[Trend Micro Virus Scanner]]

|}

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
Reference
|-
| width="33%" valign="top" | '''Manuals'''
* [[File Servers]]
* [[Belkin F1DA116T KVM Switch]]
* [[D-Link DGS-3224TG Switches]]
* [[Printer Manuals|Printers]]
* [[Scanners]]
* [[Theaterette Information, Instruction, and Manuals]]

| width="33%" valign="top" | '''Notes'''
* [[Command Syntax]]
* [[Micellaneous Notes]]

| width="33%" valign="top" |
* [http://research.iat.sfu.ca/awstats.pl?config=infrastructure AWstats (wiki-traffic)]
* [[Media:Satellite_channels.pdf|Bell ExpressVu Channels]]
* [http://wiki.iat.sfu.ca/BlackBox BlackBox wiki]

|}

[http://research.iat.sfu.ca/wiki/index.php?title=Special:Recentchanges&feed=rss http://research.iat.sfu.ca/wiki/images/b/b6/Rss.gif]

Setup a Project Wiki

2012-02-28T09:13:38Z

Rmackenz:

Setup a Project Wiki

2012-02-28T09:09:30Z

Rmackenz: fixed whitespace

Setup a Project Wiki

2012-02-28T09:06:11Z

Rmackenz: /* Add a New Instance of MediaWiki */

Setup a Project Wiki

2012-02-28T09:02:01Z

Rmackenz: /* Access Restrictions */

Setup a Project Wiki

2012-02-28T09:00:35Z

Rmackenz: /* Add a Separate Instance of MediaWiki */

Main Page

2011-11-17T21:15:56Z

Rmackenz:

Welcome. This is a wiki for the purpose of helping to keep the systems in Research running smoothly and to inform users of Research services.

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
User Articles
|-
| width="33%" valign="top" | '''Projects'''
* [[AG Node Documentation]]
* [[Eye trackers @ EC3 Lab]]
* [[Large Scale Imagery: evolving the components]]
* [[Cluster User Documentation|Documentation for the Cluster]]
* [[SGI]]
* [[Acoustic Panels - DIY]]

| width="33%" valign="top" | '''Workstations'''
* [[Printers]]
* [[Research Workstations - default software loads | Standard Workstation Software List]]
* [[Trend Micro Virus Scanner | Virus Scanner]]
* [[Windows Maintenance]]
* [[Linux Administration & Maintenance]]
* [[MAC Addresses and Hostnames]]

| width="33%" valign="top" | '''General Information'''
* [[Research Services]]
* [[Accessing Your Data]]
* [[People power - grad students and their expertise]]
* [[Research Mailing Lists]]
* [[HOWTO Access The SVN Server| Accessing the SVN Server]]
* [[HOWTO Access The CVS Server| Accessing the CVS Server]]
* [[Lockers]]
* [[Policies and Procedures]]
* [[Booking Research Rooms]]
* [[Domain Name Hosting]]

|}

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
Administration Articles
|-
| width="33%" valign="top" | '''Administration & Resource Management'''
* [[Research Administration Tasks]]
* [[Server documentation | Server List]]
* [[Network Devices Servers & Workstations]]
* [[Workstation Naming Convention]]
* [[Backups with AMANDA]]
* [[INFO Network Routing Information | Network Routing Information]]
* [[RAID Documentation]]
* [[Software Management]]
* [[Maya]]
* [[SolidWorks]]
* [[Websites Hosted]]
* [[RATS 2 Documentation]]
* [[Microsoft Deployment Toolkit (2010) | Microsoft Deployment Toolkit 2010 - Windows Deployment Server]]
* [[Setup Windows Server Update Services]]

| width="33%" valign="top" | '''Customizing Linux Servers'''
* [[Research Servers - default software loads | Standard Server Software List]]
* [[REF Standard Server Configuration | Standard Server Configuration]]
* [[Setup a Project Wiki|Setup MediaWiki]]
* [[Oracle on Gentoo]]
* [[WebDAV Setup]]
* [[Virtual Servers]]
* [[LTSP]]
* [[NFS Version 4]]
* [[XFS Filesystem HOWTO]]
* [[Webapp-Config]]

| width="33%" valign="top" | '''Client Side & Other Articles'''
* [[Linux Tips and Tools]]
* [[HOWTO Install SUSE with AutoYast|Install SUSE with AutoYast]]
* [[Who's Where - Availability of Research staff|Availability of Research Staff]]
* [[Maya]]
* [[Adding a Mac to the Research Domain]]
* [[Enterprise Deployment for Windows]]
* [[Short diradm Documentation]]
* [[Trend Micro Virus Scanner]]

|}

{| border="1" cellpadding="6" cellspacing="0" style="border: black solid 1px; border-collapse: collapse; text-align: left; width: 100%; background: #f0f0ff; "
| colspan="3" style="text-align: center; font-weight: bold; font-size: 1.4em;" |
Reference
|-
| width="33%" valign="top" | '''Manuals'''
* [[File Servers]]
* [[Belkin F1DA116T KVM Switch]]
* [[D-Link DGS-3224TG Switches]]
* [[Printer Manuals|Printers]]
* [[Scanners]]
* [[Theaterette Information, Instruction, and Manuals]]

| width="33%" valign="top" | '''Notes'''
* [[Command Syntax]]
* [[Micellaneous Notes]]

| width="33%" valign="top" |
* [http://research.iat.sfu.ca/awstats.pl?config=infrastructure AWstats (wiki-traffic)]
* [[Media:Satellite_channels.pdf|Bell ExpressVu Channels]]
* [http://wiki.iat.sfu.ca/BlackBox BlackBox wiki]

|}

[http://research.iat.sfu.ca/wiki/index.php?title=Special:Recentchanges&feed=rss http://research.iat.sfu.ca/wiki/images/b/b6/Rss.gif]

Infrastructure:APC RackPDU

2011-08-18T06:16:05Z

Rmackenz: Update with new info, re-organize

We have a total of 15 APC Power Distribution Units. These allow for remote power monitoring and cycling for all connected devices.

===Specifications===
* [http://www.apc.com/resource/include/techspec_index.cfm?base_sku=AP7900 AP7900]
* [??? MasterSwitch VM]

===Device List===
* The following units are in the Research Server room, and are AP7900 units.
** APC00 - Hood, Hercules, Navajo, Lancer, Tirpitz
** APC01 - Tape Library, Musashi Raid1 Musashi Raid2
** APC02 - Spitfire #1, Spitfire #2, Spitfire #3, Hurricane #1, Hurricane #2, Hurricane #3, Tapes and Screen, Avocent KVM
** APC03 - Teleport, Bismarck, Musashi, Nelson, 48 port Dell switch
** APC04 - HVI Lab, Echo, Slinky, Thunderbolt, Switch
** APC05 - Clipper, Intendant

This list is kept in /home/projects/infrastructure/scripts/APC_Ports in a script called APCupdate.sh

Update the list at the top of this script, then run it to generate the config files. Then run the FTP script and the config files will be uploaded to each APC device, changing its config. The device will then reboot and come back in about a minute (No power interruption)

===Details===
* SNMP MIB is here: ftp://ftp.apcc.com/apc/public/software/pnetmib/mib/368/powernet368.mib

===Cluster===
* The following units are connected to Nebula, and are all MasterSwitch VM units.
* Nebula units reachable from cluster head only.
** IP range 192.168.254.NNN where NNN is the unit number.
** APC01 - node001 to node022, 2 unlabeled outlets
** APC02 - node023 to node044, 2 unlabeled outlets
** APC03 - nodes057,060,063, 21 unlabelled outlets
** APC04 - node064 to node084, 4 unlabeled outlets
** APC05 - node085 to node106, 2 unlabeled outlets
** APC06 - node109,112,115,118,121,124,127 and 17 unlabeled outlets

===Monitoring===
All data is fed into Nagios for monitoring. Units are tenth of an Amp (so 81 = 8.1A). Warning level is 9.0A, Critical level is 10.0A.

Server documentation

2011-08-18T06:00:01Z

Rmackenz: Major update to which servers we actually have.

== Core Servers ==

=== Web ===
* [[Servers:Hercules|Hercules]] - Our main web vserver host
* [[Servers:Tirpitz|Tirpitz]] - Information webserver including the Research wiki, phpLDAPadmin

=== Infrastructure ===
* [[Servers:Hood|Hood]] - LDAP authentication-server
* [[Servers:Navajo|Navajo]] - Nagios
* [[Servers:Lancer|Lancer]] - WSUS, Morae KeyServer, Ghost Server,
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, sassafras server, old flexlm server
* [[Servers:Teleport|Teleport]] - Dedicated box for allowing users to access their files. SSH/SFTP only.
* [[Servers:Spitfire|Spitfire]] - User Directories server
* [[Servers:Hurricane|Hurricane]] - Project Directories server, software
* [[Servers:Musashi|Musashi]] - "Mirror" file-server
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster

=== Other Servers ===

* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li
* [[Servers:HVILAB|HVILAB]] - Lyn Bartram, Chris Shaw| Drew Paulin (main admin)
* [[Servers:Echo|Echo]] - Ron Wakkary
* [[Servers:Slinky|Slinky]] - Steve DiPaola - jViz Virtual Server <00 Slinky> <01 Null> <02 Null> <03 Null> <04 Null>
* [[Servers:Lightning|Lightning]] - Rob Woodburry Apple Server
* [[Servers:Intendant|Intendant]] - Pat's box

* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== Other ===

* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx) TO BE RECYCLED (decommissioned)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, hvilab.iat.sfu.ca and www.hvilab.iat.sfu.ca

=== Unused Boxes ===
* [[Servers:Siat-sparc|Siat-sparc]] --SLATED FOR RECOVERY
* [[Servers:Csil-cluster|Csil-cluster]] --SLATED FOR RECOVERY
* [[Servers:Nerva|Nerva]] - development SPARC machine -turned off Sept. 14, 2007

=== Unknown ===
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== RETIRED ===
* [[Servers:Vindicator|Vindicator]]- SIAT Virtual Server #3 <00 NULL> <01 NULL> <02 NULL> <03 NULL> <04 NULL>
* [[Servers:Skimmer|Skimmer]]- SIAT Virtual Server #2 <00 Gromala> <01 Ty Mey Eap> <02 Antle> <03 Engeli> <04 NULL>
* [[Servers:Seagull|Seagull]] - Drupal, Apache (Jack Stockholm Joshua Tanenbaum) CMAP (Maia Engeli)
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SLATED FOR REBUILD
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Gaia|Gaia]] --RETIRED Mark Brady (main admin), and Aleksandra Dulic + Kenneth Newby
* [[Servers:Dolphin|Dolphin]] - 
* [[Servers:Dragonfly|Dragonfly]] - D
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SERVER REBUILD GENTOO
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala --SLATED FOR REBUILD GENTOO
* [[Servers:Wildcat|Wildcat]] - turned off on date unknown --LTSP candidate
* [[Servers:Matchbox|Matchbox]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>
* [[Servers:Tonka|Tonka]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Yamato|Yamato]] - User home-dir file-server
* [[Servers:Stuka|Stuka]] - repurposed as the LTSP server (summer 2007)
* [[Servers:Corsair|Corsair]] - SIAT Virtual Server #1 <00 Marques> <01 Stockholm> <02 Paulin> <03 Prevost> <04 El-Nasr>
* [[Servers:Cossack|Cossack]] - TechOne Dedicated Server (Janet McCracken)

Accessing Your Data

2011-06-15T20:59:04Z

Rmackenz: /* WinSCP */

There are a number of different ways to access your data, and move bits around. In general, we encourage the use of encryption and secure connections. The methods and tools below will provide access to your home-directory data (stored on our central file-servers). 

Quite simply, you can use ssh or ftp to access your data with your research account by connecting to '''teleport.iat.sfu.ca'''.

===Command Line Access===
====Windows====
PuTTy
====Mac OS-X====
Built-in: use Terminal, and issue 'ssh <user>@<target_machine>'

Finder -> Go -> Utilities -> Terminal

gordonps-Computer:~ gordonp$ '''ssh gordp@teleport.iat.sfu.ca'''

If this is the first time you've connected, you will be greeted with a question about whether you want to continue connecting; answer yes:

The authenticity of host 'teleport.iat.sfu.ca (209.87.56.232)' can't be established.
RSA key fingerprint is 6e:60:b0:ce:c2:2a:40:f9:05:de:89:12:41:ad:5e:83.
Are you sure you want to continue connecting (yes/no)? '''yes'''

If you ''have'' connected previously, and the key has changed (for a variety of reasons) you might have to briefly edit your .ssh/known_hosts file to remove the conflicting key. A simpler alternative is to remove your .ssh/known_hosts file altogether, and begin collecting keys anew.

====Linux/IRIX====
same as Mac OS-X
 ToDo
*HowTo
**target machines/IP-addresses
*screenshots

===GUI Access===
====Windows====
WinSCP, freeNX client.
 
===== WinSCP =====
 
WinSCP is an open source free SFTP client and FTP client for Windows. Legacy SCP protocol is also supported. Its main function is safe copying of files between a local and a remote computer. It can be obtained from http://winscp.net/eng/index.php.
 
After installing WinSCP, double-click on it. You will be presented with the following screen:
 
[[Image:scp1.jpg|Opening WinSCP screen]] 
Click on '''New'''.
 
 
Next, type in the following information:
<blockquote>
Host name: '''teleport.iat.sfu.ca''' 
Port number: '''22''' 
User name: '''your Research account username''' 
Password: '''your Research account password''' 
File protocol: '''SFTP'''
</blockquote> 
Then click on '''Login'''. 
[[Image:winscp-teleport-02.jpg|Opening WinSCP screen]]
 
You will then be connected to Teleport, and be presented with the file listing of your user storage directory:
 
[[Image:winscp-teleport-03.jpg|Opening WinSCP screen]]
 
You can now drag-and-drop files between your local machine's directories and your user storage directory in the Research network.

====Mac OS-X====
=====Fugu=====

You can obtain Fugu from http://rsug.itd.umich.edu/software/fugu/ (or, if this link is broken, try this [[Image:Fugu-1.2.0-English.dmg |local copy]]).

Once installed, you can drag-and-drop files between your local machine, and your centralized Research home directory (or any other machine supporting SSH / SFTP). For all intents and purposes, the behaviour is like traditional FTP, except that all data (including your password!) is encrypted.

 
When you start Fugu, here are some typical settings you must supply in order to connect:

 
[[Image:Fugu_initial_screen.png|Fugu Initial Screen]]

 
If this is your first time connecting to a server, then you will be prompted to accept the RSA key (which you must do):

 
[[Image:Fugu_accept_key.png|Fugu prompt to accept key]]

 
Once you successfully connect, this is what a typical session will look like; you can drag-and-drop files in either direction:

 
[[Image:Fugu_connected.png|Fugu Showing an Established Session]]

 
=====FreeNX Client=====

 
This requires X-windows be installed on your Mac. See an Administrator to have XCode tools installed (or prepare by doing this yourself). The X-window session is run "rooted" (that is, it takes over your entire screen); to switch back to OS-X, you press '''Apple-Option-A'''.

The FreeNX client goes far beyond simply transferring files - rather, it is a complete "remote desktop". Generally, host-machines are not (yet) configured to provide this service, but if needed will will do so (in preference to Apple Remote Desktop, VNC, or other technologies).

You can download the FreeNX client for Mac from http://www.nomachine.com/ or, use this [[Image:|local copy]]

After running the Wizard (and for subsequent sessions) you should see a screen something like this (please not that my use of Port 222 is non-standard; Port 22 should normally be used):

 
[[Image:Nxclient_configure.png|Typical NX client configuration]]

 
Here is an example of a Custom connection command (which you don't require if you're using Gnome or KDE; choose those window-managers rather than Custom). In this case, I am invoking a light-weight window-manager:

 
[[Image:Nxclient_customsettings.png|Custom NX client settings for lightweight 'ice' window manager]]

 
In all circumstances, whether you run a "stock" Gnome/KDE session, or a Custom one, you '''MUST''' enable SSL!!! This is what "tunnels" your X-window session over SSH:

 
[[Image:Nxclient_enable_ssl.png|NX client enable SSL]]

 
After everything is configured, and for every subsequent connect, once you launch NXClient, you should be greeted with this screen:

 
[[Image:Nxclient_connectscreen.png|NX client connect screen]]

 

An established connection, showing the remote window-manager and desktop:

 
[[Image:Nxclient_session.png|Established NX client connection]]

 

====Linux====
=====Konqueror=====

Typical Konqueror address-bar syntax (where the '''fish://''' protocol means "over SSH"). Replace '''gordp''' with your Research username:

fish://gordp@teleport.iat.sfu.ca/

 
You are prompted for your Research password:

 
[[Image:Konqueror_ssh_authorization.png]]

 
Resulting connection:

 
[[Image:Konqueror-1.png]]

 
In Konqueror, if you split the window and show both a local directory and the remote one, you can easily drag-and-drop files from one to the other (from the Konqueror menu-bar: '''Window -> Split View Left/Right'''):

 
[[Image:Konqueror_dragndrop.png]]

 

=====FreeNX Client=====

 

====IRIX====
not known
 ToDo
*FreeNX to become our preferred GUI
**client availability t.b.d. We should have direct links for local-downloads, to help users
*screenshots

===NFS/SMB Mounting===
NFS mounting is not available off-campus.
 
SMB mounting is not available off-campus.

====Windows====
SMB mount - automatic upon successful login
====Mac OS-X====
NFS mount - automatic upon successful login
====Linux====
NFS mount - automatic upon successful login
====IRIX====
NFS mount - automatic upon successful login
 ToDo
*HowTo
**typical /etc/fstab entries for the Linux DIY'er
**target machines/IP-addresses

File:Scp1.jpg

2011-06-15T20:53:20Z

Rmackenz:

File:Winscp-teleport-01.jpg

2011-06-15T20:50:28Z

Rmackenz: uploaded a new version of "File:Winscp-teleport-01.jpg": New Version Updates

Using WinSCP to connect to our teleport server.
Step 1

Research Services

2011-06-15T20:46:31Z

Rmackenz:

This page is meant to provide a listing and brief details for the complete range of services available in the SFU Surrey Research Labs.

The following should be fleshed out
* [[Printers]]
* Cluster
** See [[Cluster User Documentation]]
* File Uploading
** SFTP to teleport.iat.sfu.ca.
** See [[Accessing_Your_Data|Accessing Your Data]]

* Linux Workstations
** Need Hostnames/IPs - maybe auto-fetch?
* Windows Workstations
** Your research login works on these machines. Ensure that the 'RESEARCH' domain is selected for login. Your U: is your network-mounted home directory (shared with Linux). The Desktop and My Documents are local to the machine (ie no roaming profiles)
* Networking
** Wired
*** If you need to connect your laptop, find an open ethernet jack within research and connect up. Please avoid disconnecting other machines.

* Who to contact for help
** Gordon Pritchard
** Rob MacKenzie
** Larry Soo

* [http://research.iat.sfu.ca/network/changepassword.php Changing your password]

Research Services

2011-06-15T20:44:50Z

Rmackenz:

This page is meant to provide a listing and brief details for the complete range of services available in the SFU Surrey Research Labs.

The following should be fleshed out
* [[Printers]]
* Cluster
** See [[Cluster User Documentation]]
* File Uploading
** SFTP to teleport.iat.sfu.ca.

* Linux Workstations
** Need Hostnames/IPs - maybe auto-fetch?
* Windows Workstations
** Your research login works on these machines. Ensure that the 'RESEARCH' domain is selected for login. Your U: is your network-mounted home directory (shared with Linux). The Desktop and My Documents are local to the machine (ie no roaming profiles)
* Networking
** Wired
*** If you need to connect your laptop, find an open ethernet jack within research and connect up. Please avoid disconnecting other machines.

* Who to contact for help
** Gordon Pritchard
** Rob MacKenzie
** Larry Soo

* [http://research.iat.sfu.ca/network/changepassword.php Changing your password]

File:NewRacks.pdf

2011-05-03T18:42:25Z

Rmackenz: New rack layout

New rack layout

Server documentation

2011-04-08T04:56:35Z

Rmackenz: Moved servers to retired, updates some info.

== Server List ==
=== Vserver Hosts ===
* [[Servers:Hercules|Hercules]] - Our main web vserver host.

=== Webservers ===

* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage
* [[Servers:Corsair|Corsair]] - SIAT Virtual Server #1 <00 Marques> <01 Stockholm> <02 Paulin> <03 Prevost> <04 El-Nasr>
* [[Servers:Cossack|Cossack]] - TechOne Dedicated Server (Janet McCracken)
* [[Servers:Echo|Echo]] - Ron Wakkary
* [[Servers:HVILAB|HVILAB]] - Lyn Bartram, Chris Shaw| Drew Paulin (main admin)
* [[Servers:Lightning|Lightning]] - Rob Woodburry Apple Server
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Slinky|Slinky]] - Steve DiPaola - jViz Virtual Server <00 Slinky> <01 Null> <02 Null> <03 Null> <04 Null>
* [[Servers:Tirpitz|Tirpitz]] - VHost Server including the Research wiki. phpLDAPadmin
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li

=== Infrastructure ===
* [[Servers:Lancer|Lancer]] - WSUS, Morae KeyServer, Ghost Server,
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster
* [[Servers:Navajo|Navajo]] - Nagios, Splunk, Shutdown
* [[Servers:Hood|Hood]] - LDAP authentication-server
* [[Servers:Musashi|Musashi]] - "Projects" file-server (/home/projects)
* [[Servers:Yamato|Yamato]] - User home-dir file-server
* [[Servers:Stuka|Stuka]] - repurposed as the LTSP server (summer 2007)
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, sassafras server, flexlm server
* [[Servers:Teleport|Teleport]] - Dedicated box for allowing users to access their files. SSH/SFTP only. (previously titus)
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== Other ===
* [[Servers:Intendant|Intendant]] - Pat's box
* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx) TO BE RECYCLED (decommissioned)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, hvilab.iat.sfu.ca and www.hvilab.iat.sfu.ca

=== Unused Boxes ===
* [[Servers:Siat-sparc|Siat-sparc]] --SLATED FOR RECOVERY
* [[Servers:Csil-cluster|Csil-cluster]] --SLATED FOR RECOVERY
* [[Servers:Nerva|Nerva]] - development SPARC machine -turned off Sept. 14, 2007

=== Unknown ===
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== RETIRED ===
* [[Servers:Vindicator|Vindicator]]- SIAT Virtual Server #3 <00 NULL> <01 NULL> <02 NULL> <03 NULL> <04 NULL>
* [[Servers:Skimmer|Skimmer]]- SIAT Virtual Server #2 <00 Gromala> <01 Ty Mey Eap> <02 Antle> <03 Engeli> <04 NULL>
* [[Servers:Seagull|Seagull]] - Drupal, Apache (Jack Stockholm Joshua Tanenbaum) CMAP (Maia Engeli)
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SLATED FOR REBUILD
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Gaia|Gaia]] --RETIRED Mark Brady (main admin), and Aleksandra Dulic + Kenneth Newby
* [[Servers:Dolphin|Dolphin]] - 
* [[Servers:Dragonfly|Dragonfly]] - D
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SERVER REBUILD GENTOO
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala --SLATED FOR REBUILD GENTOO
* [[Servers:Wildcat|Wildcat]] - turned off on date unknown --LTSP candidate
* [[Servers:Matchbox|Matchbox]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>
* [[Servers:Tonka|Tonka]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>

Linux Administration & Maintenance

2010-09-03T02:17:42Z

Rmackenz: /* LDAP Authentication, and Home-Directory AutoMounting */

==Gentoo==
On-Campus, we can speed installation/updates by using a local source; in your /etc/make.conf: 
GENTOO_MIRRORS="http://mirror.iat.sfu.ca/gentoo/"
An alternative is to use an NFS mount, but if NFS breaks or is unavailable... :-( 
Robin: "For best performance, I recommend mounting
musashi.iat.sfu.ca:/export/gentoo/distfiles on /mnt/distfiles
and specifying that in your make.conf. The NFS route ensures that downloaded files go back into the mirror."
 
[[Gentoo Local-Mirror Operation]]

===LDAP Authentication, and Home-Directory AutoMounting===
First, make sure you have the necessary packages on your system:
hostname ~ # '''emerge -v pam_ldap nss_ldap autofs'''

There are seven configuration files, and two directories which must be correct:

/etc/ldap.conf
/etc/nsswitch.conf
/etc/auto.master
/etc/conf.d/autofs
/etc/localshell.conf
/etc/pam.d/system-auth
/bin/localshell

/home/users/
/home/projects/

Create the necessary directories:
hostname ~ # '''mkdir /home/users'''
hostname ~ # '''mkdir /home/projects'''
hostname ~ # '''mkdir /etc/localshell'''

Emerge localshell and copy over /etc/localshell.conf from a working machine.

Example /etc/ldap.conf, with commented-out portions omitted

# Your LDAP server. Must be resolvable without using LDAP.
host 209.87.56.238

# The distinguished name of the search base.
base dc=iat,dc=sfu,dc=ca

# The distinguished name to bind to the server with.
binddn cn=Reader,dc=iat,dc=sfu,dc=ca

# The credentials to bind with.
bindpw <supersecret!!>

# RFC2307bis naming contexts
nss_base_passwd ou=Users,dc=iat,dc=sfu,dc=ca
nss_base_shadow ou=Users,dc=iat,dc=sfu,dc=ca
nss_base_group ou=Group,dc=iat,dc=sfu,dc=ca
nss_base_hosts ou=Hosts,dc=iat,dc=sfu,dc=ca
nss_base_services ou=Services,dc=iat,dc=sfu,dc=ca
nss_base_networks ou=Networks,dc=iat,dc=sfu,dc=ca
nss_base_protocols ou=Protocols,dc=iat,dc=sfu,dc=ca
nss_base_rpc ou=Rpc,dc=iat,dc=sfu,dc=ca
nss_base_ethers ou=Ethers,dc=iat,dc=sfu,dc=ca
nss_base_netmasks ou=Networks,dc=iat,dc=sfu,dc=ca
nss_base_bootparams ou=Ethers,dc=iat,dc=sfu,dc=ca
nss_base_aliases ou=Aliases,dc=iat,dc=sfu,dc=ca
nss_base_netgroup ou=Netgroup,dc=iat,dc=sfu,dc=ca

Example nsswitch.conf:

passwd: compat ldap
shadow: compat ldap
group: compat ldap

# passwd: db files nis
# shadow: db files nis
# group: db files nis

hosts: files dns
networks: files dns

services: db files
protocols: db files
rpc: db files
ethers: db files
netmasks: files
netgroup: files
bootparams: files

automount: files
aliases: files

Example /etc/autofs/auto.master

/home/users ldap:209.87.56.238:ou=home.users,ou=AutoFS,dc=iat,dc=sfu,dc=ca
/home/projects ldap:209.87.56.238:ou=home.projects,ou=AutoFS,dc=iat,dc=sfu,dc=ca

Example /etc/pam.d/system-auth

auth required /lib/security/pam_env.so
auth sufficient /lib/security/pam_unix.so likeauth nullok
auth sufficient /lib/security/pam_ldap.so use_first_pass
auth required /lib/security/pam_deny.so

account required /lib/security/pam_unix.so
account sufficient /lib/security/pam_ldap.so

password required /lib/security/pam_cracklib.so retry=3
password sufficient /lib/security/pam_unix.so nullok md5 shadow use_authtok
password sufficient /lib/security/pam_ldap.so use_authtok
password required /lib/security/pam_deny.so

session required /lib/security/pam_limits.so
session required /lib/security/pam_unix.so
session required /lib/security/pam_ldap.so

Example /etc/conf.d/autofs

TIMEOUT=300
BROWSE_MODE="no"
USE_MISC_DEVICE="yes"
MAP_OBJECT_CLASS="organizationalUnit"
ENTRY_OBJECT_CLASS="automount"
MAP_ATTRIBUTE="ou"
ENTRY_ATTRIBUTE="cn"
VALUE_ATTRIBUTE="automountInformation"

===Rescuing a Gentoo System===
boot from a CD, typically
boot: '''gentoo'''
enable swap ''(of course, '''your''' swap-partition may differ! Most of ours are the second primary partion, whether /dev/hda2, or /dev/sda2, or /dev/sdb2)''
livecd root # '''swapon /dev/sda2'''
mount the main (root) partition, optionally the boot partition
livecd root # '''mount /dev/sda3 /mnt/gentoo'''
livecd root # '''mount /dev/sda1 /mnt/gentoo/boot'''
get some networking going
livecd root # '''dhcpcd &'''
livecd root # '''ifconfig eth0 up'''
livecd root # '''ifconfig''' ''(verify we got an IP)''
prepare for chrooting
livecd root # '''mount -t proc none /mnt/gentoo/proc'''
livecd root # '''mount -o bind /dev /mnt/gentoo/dev'''
set up a new environment root
livecd root # '''cd /mnt/gentoo'''
livecd gentoo # '''chroot /mnt/gentoo /bin/bash'''
livecd / # '''env-update'''
livecd / # '''source /etc/profile'''

Now, do your rescue work. Good luck!

To back out of the chroot, and check your fix(es)
livecd / # '''exit'''
livecd root # '''cd /'''
livecd root # '''umount /mnt/gentoo/boot /mnt/gentoo/proc /mnt/gentoo/dev /mnt/gentoo'''
livecd root # '''reboot'''

==SUSE==
On-Campus, we can speed installation/updates by using a local source: 
nfs://export/mirror/suse 

* TODO: Instructions for install with LDAP working
* TODO: Instructions for auto-update configuration

==RedHat/Fedora==
* TODO: Instructions for install with LDAP working

==Ubuntu==

Below are instructions for setting up a Ubuntu Linux workstation. All instructions are for version 7.04.

To enable the use of dual-monitor display on an Nvidia video card, follow these instructions:

* First enable the Nvidia driver, by clicking on System > Administration > Restricted Drivers Manger, authenticating, and checking "Enabled". Close the manager, and restart the computer.

* Next run the following command in a Terminal, and authenticate when prompted:
hostname ~ # '''sudo apt-get install nvidia-settings'''
hostname ~ # '''gksudo nvidia-settings'''

*On the left side of the GUI, go to 'X Server Display Configuration'. Enable both displays, and choose TwinView for Configuration type. Make sure the resolutions match your monitors. Hit 'Apply' to see if these setting work for you. Your monitors should now turn into one big screen. Accept the configuration if this is true, otherwise cancel and fix the settings.

*Now press 'Quit' in the bottom right, log out, then log back in. You should no longer see one large screen, but a main display on the left and a secondary on the right (if this is how you configured it), and you should be able to drag windows from a window back to the other.

*Run the 'gksudo nvidia-settings' command above one more time. If you are satisfied with your settings, click 'Save to X Configuration File' and quit.

To turn on the root account enter the following command in a Terminal, authenticate, then enter/confirm a root password when prompted:
hostname ~ # '''sudo passwd root'''

To enable ssh on the machine, enter the following command in a Terminal:
hostname ~ # '''sudo apt-get install ssh openssh-server'''

===LDAP Authentication, and Home-Directory Automounting===

First of all, make sure you have all the required packages installed on your system:

*libnss-ldap
*libpam-ldap
*ldap-utils
*autofs
*autofs-ldap

The easiest way of installing them is using the Synaptic Package Manager, found under System > Administration > Synaptic Package Manager. Also install all dependencies for the packages above. Note that when you install the libnss-ldap package, you will have to enter information regarding the LDAP setup. You can leave all these as default and change them later (actually, the only thing you should change is the tick-box that says "Make local root Database admin"; make sure its deselected), or use the info below to guide you. You will need to edit the config files manually later anyway.

There are several configuration files you will need, as well as several directories that must be correct:

/etc/libnss-ldap.conf
/etc/pam_ldap.conf
/etc/nsswitch.conf
/etc/auto.master
/etc/pam.d/common-account
/etc/pam.d/common-auth
/etc/pam.d/common-password
/etc/pam.d/common-session
/etc/localshell/
/bin/locashell
/home/users/
/home/projects/

Create the following directories:

hostname ~ # '''mkdir /home/users'''
hostname ~ # '''mkdir /home/projects'''
hostname ~ # '''mkdir /etc/localshell'''

Copy over the /etc/localshell/* and /bin/localshell from a working machine.

Examples of the required files are given below, note that libnss-ldap.conf and pam_ldap.conf are identical except for one line. (See below).

Example libnss-ldap.conf and pam_ldap.conf file, with commented out lines ommitted:

'''NOTE - the first line is commented out in the pam_ldap.conf file.'''
@(#)$Id: ldap.conf,v 2.47 2006/05/15 08:13:44 lukeh Exp $

# Your LDAP server. Must be resolvable without using LDAP.
host 209.87.56.238

# The distinguished name of the search base.
base dc=iat,dc=sfu,dc=ca

# The LDAP version to use (defaults to 3
# if supported by client library)
ldap_version 2

# The distinguished name to bind to the server with.
binddn cn=Reader,dc=iat,dc=sfu,dc=ca

# The credentials to bind with.
bindpw <secret!!!>

# Reconnect policy:
bind_policy hard

nss_base_passwd ou=Users,dc=iat,dc=sfu,dc=ca
nss_base_shadow ou=Users,dc=iat,dc=sfu,dc=ca
nss_base_group ou=Group,dc=iat,dc=sfu,dc=ca
nss_base_hosts ou=Hosts,dc=iat,dc=sfu,dc=ca
nss_base_services ou=Services,dc=iat,dc=sfu,dc=ca
nss_base_networks ou=Networks,dc=iat,dc=sfu,dc=ca
nss_base_protocols ou=Protocols,dc=iat,dc=sfu,dc=ca
nss_base_rpc ou=Rpc,dc=iat,dc=sfu,dc=ca
nss_base_ethers ou=Ethers,dc=iat,dc=sfu,dc=ca
nss_base_netmasks ou=Networks,dc=iat,dc=sfu,dc=ca
nss_base_bootparams ou=Ethers,dc=iat,dc=sfu,dc=ca
nss_base_aliases ou=Aliases,dc=iat,dc=sfu,dc=ca
nss_base_netgroup ou=Netgroup,dc=iat,dc=sfu,dc=ca

Example nsswitch.conf file:

passwd: files ldap
group: files ldap
shadow: files

hosts: files dns
networks: files

protocols: db files
services: db files
ethers: db files
rpc: db files

netgroup: nis

Example common-account file:

account sufficient pam_ldap.so
account required pam_unix.so

Example common-auth file:

auth sufficient pam_ldap.so
auth required pam_unix.so nullok_secure use_first_pass

Example common-password file:

password sufficient pam_ldap.so
password required pam_unix.so nullok obscure min=4 max=8 md5

Example common-session file:

session sufficient pam_ldap.so
session required pam_unix.so
session optional pam_foreground.so

Example auto.master file:

/home/users ldap:209.87.56.238:ou=home.users,ou=AutoFS,dc=iat,dc=sfu,dc=ca
/home/projects ldap:209.87.56.238:ou=home.projects,ou=AutoFS,dc=iat,dc=sfu,dc=ca

====Troubleshooting====

The above instructions should work, although it may need a kick-start. Things to try:

* Reboot the machine, many, many times.
* Purposely break the conf files, reboot, fix, then reboot again.
* Start autofs, and log in using Terminal as an ldap user using the command: ssh user@localhost
* Comment-out (using #) the "bind_policy hard" line in libnss-ldap.conf and pam_ldap.conf

===Rescuing a Ubuntu System===

Boot from the Ubuntu installation CD (live CD), and enter the following commands in a Terminal to mount your filesystem:

To identify the HD/partition you wish to mount:
hostname ~ # '''fdisk -l'''

To mount:
hostname ~ # '''mount -t ext3 -o defaults /dev/$partition /mnt/'''
The command above mounts $partition to /mnt/.

===Customizing Compiz on Ubuntu 8.04===

Compiz now comes pre-installed on Ubuntu, however it doesn't allow you for much customization. To be able to tweak all the settings, follow these instructions:

hostname ~ # '''sudo apt-get install simple-ccsm'''
hostname ~ # '''sudo apt-get install compizconfig-settings-manager'''

Now you can rum the Compiz Custom Settings Manager, from System > Preferences > Advanced Desktop Effects Settings

===Installing Beryl on Ubuntu 7.04===

Beryl has been outdated, and you may want to install Compiz instead. The latest Ubuntu comes with Compiz pre-installed, but if for some reason you have an older system and are stubborn enough to install Beryl, here's how:

The instructions below are copied from the Beryl Docs, they work very well. Note, these instructions are for nVidia cards only. If for any reason they don't work or you have a different card installed, the link to the Beryl-Ubuntu installation docs is here: http://wiki.beryl-project.org/wiki/Install_Beryl_on_Ubuntu#Ubuntu_7.04_.28Feisty_Fawn.29

*Open a terminal. Execute:

sudo echo "Beryl & nVidia installation script for ubuntu Ubuntu Feisty"

(this one line requires your password so that, the next text paste is uninterrupted.)

*Copy and paste all the text into the Terminal in one action. [Select all the text. Then middle button click in terminal]

sudo cp /etc/X11/xorg.conf /etc/X11/xorg.conf.backup.beryl-script
sudo cp /etc/apt/sources.list /etc/apt/sources.list.backup.beryl-script
echo "deb http://ubuntu.beryl-project.org feisty main
deb-src http://ubuntu.beryl-project.org feisty main" | sudo tee -a /etc/apt/sources.list
wget http://ubuntu.beryl-project.org/root@lupine.me.uk.gpg -O- | sudo apt-key add -
sudo apt-get update
sudo apt-get -y install beryl beryl-manager emerald-themes
sudo nvidia-xconfig --add-argb-glx-visuals
sudo cp /usr/share/applications/beryl-manager.desktop /etc/xdg/autostart/beryl-manager.desktop
cp /usr/share/applications/beryl-manager.desktop ~/Desktop/beryl-manager.desktop
echo -e "Logout now and then press \e[0;31mCTRL+ALT+BACKSPACE\e[0m to restart xorg"
echo "Installation completed !"

*Now Logout and then press [CTRL+ALT+BACKSPACE] to restart xorg.

==Linux Tips and Tools==
[[Linux Tips and Tools]]

Research Administration Tasks

2010-08-24T20:49:29Z

Rmackenz: /* Adding Projects */

== Adding Users ==
* As root on '''spitfire''':
# cd
# DEBUG=1 /usr/local/sbin/diradm.superadduser '$username' '$email' '$fullname'
* Note that a file named '$username' is created in your current directory with the template filled out for mailing (the same file is displayed onscreen), and this is why it is very important to 'cd' to root's home directory before running the script so as to not cause any problems with home-directory creation.
* Further note that $username is the new user's username (which will not be tied in with their regular SFU username), $email is their preferred email address and $fullname is their first and last name.
* An email will be sent to their email address
* Add the newly-created user to our [http://bismarck.iat.sfu.ca/mailman/admin/research/ Research Mailing List].
* '''Add the new user to '/etc/amanda/spitfire/disklist'. This is to enable backups of the user's home directory '''

== Deleting Users ==
Make sure there are no sym-links pointing to important stuff!!
# find -P /home/users/$username -noleaf -type l

* As root on '''spitfire''':
# DEBUG=1 diradm userdel -r $username
* As root on '''hood''':
# DEBUG=1 diradm userdel $username
* Keeping the user on our [http://bismarck.iat.sfu.ca/mailman/admin/research/ Research Mailing List] is probably a good idea.
* If you delete a user, you MUST disallow diradm from ever using that UIDNumber again. To do so, go to each machine with diradm and edit the diradm.conf file so that UIDNUMBERMIN to equal the same number as the highest UIDNumber currently being used. (At least one higher than the user you deleted) This is important!
* Comment out the user from /etc/amanda/spitfire/disklist, only if they will never need the data.

== Changing a Users Password ==
This method does not require the old password.
* As root on '''hood''':
# ldappass $username

== Adding Users to a Group ==
Adding or removing from a group. Uses the same syntax as gpasswd(8).
* As root on '''hood''':
# diradm gpasswd (-a|-d) $username $group
# diradm gpasswd -a mdeepwel pond

== Adding Groups ==
Adding groups takes the same syntax as groupadd(8).
* As root on '''hood''':
# diradm groupadd $groupname

To change the GID of any group:
* As root on '''hood''':
# diradm groupmod -g GID $groupname

== Adding Projects ==
This creates a project for the user, and adds a web folder, hosted via hercules00. If the user just wants places for their files, skip the htdocs and htlogs stuff, and skip all the hercules config.
=== For a single user ===

Note that '''$project''' designates the name of the new project and '''$user''' designates the user for whom the project is being created.

Create the new project directory:
* As root on '''hurricane''':
# mkdir /mnt/raid/projects/$project
# mkdir /mnt/raid/projects/$project/htdocs
# chown -R $user /mnt/raid/projects/$project
# chmod -R 2701 /mnt/raid/projects/$project
# chmod 2775 /mnt/raid/projects/$project/htdocs
# mkdir /mnt/raid/projects/$project/htlogs
# chmod 755 /mnt/raid/projects/$project/htlogs

Add an LDAP entry for the newly created project:
* As root on '''hood''':
# diradm amadd -O home.projects $project 209.87.56.231:/mnt/raid/projects/$project
# '-O' means the default mount options for automount.

Create a sym-link in the user's home directory
* As root on whatever you want:
# cd /home/users/$user
# ln -s /home/projects/$project

Next, to set the up the hosting and the database:
* As root on '''hercules00''' set up a new vhost.conf using an existing template:
# cd /etc/apache2/vhosts.d/projects/
# cat vhost_template.sample > $project.conf

'''TO DO - DATABASE HOWTO'''

Make sure you get Vic to add an alias!

=== For a group ===

Note that '''$project''' designates the name of the new project and '''$group''' designates the group for whom the project is being created.

First create a [[Research Administration Tasks#Adding Groups|new group]].

Create the new project directory:
* As root on '''hurricane''':
# mkdir /mnt/raid/projects/$project
# chgrp -R $group /mnt/raid/projects/$project
# chmod -R 2771 /mnt/raid/projects/$project
# mkdir /mnt/raid/projects/$project/htdocs
# chmod 2775 /mnt/raid/projects/$project/htdocs
# mkdir /mnt/raid/projects/$project/htlogs
# chmod 755 /mnt/raid/projects/$project/htlogs

Add an LDAP entry for the newly created project:
* As root on '''hood''':
# diradm amadd -O home.projects $project 209.87.56.231:/mnt/raid/projects/$project
# '-O' means the default mount options for automount.

Create a sym-link in the all the user's home directories (the users belonging to $group). To find out who is in what group, use the command getent group | grep $group on any ldap-enabled machine.
* As root on your LDAP-enabled machine of choice:
# cd /home/users/$user
# ln -s /home/projects/$project

Next, to set the up the hosting and the database:
* As root on '''hercules00''' set up a new vhost.conf using an existing template:
# cd /etc/apache2/vhosts.d/projects/
# cat vhost_template.sample > $project.conf

'''TO DO - DATABASE HOWTO'''

Make sure you get Vic to add an alias!

== Adding CVS Repositories ==

Note: $user represents a user's username, $group represents a new group that will need access to the repository, and $repository is the new name for the CVS repository.

=== For a single user ===

Add the user to the cvs group:
* As root on '''hood''':
# diradm gpasswd -a $user cvs

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# cvs -d /mnt/raid/cvs/$repository
# chmod -R 2700 /mnt/raid/cvs/$repository
# chown -R $user /mnt/raid/cvs/$repository

=== For multiple users ===

Create a new group, and add all the users that require access to the newly created group as well as the cvs group:
* As root on '''hood''':
# diradm groupadd $group
# diradm gpasswd -a $user $group
# diradm gpasswd -a $user cvs

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# cvs -d /mnt/raid/cvs/$repository
# chmod -R 2770 /mnt/raid/cvs/$repository
# chgrp -R $group /mnt/raid/cvs/$repository

* To access the CVS repository, use ''CVS_RSH="ssh"'' with URL being '':ext:$user@cvs.iat.sfu.ca:/var/cvsroot/$foobar''
* See the more detailed [[HOWTO_Access_The_CVS_Server | CVS User guide]]

== Adding SVN Repositories ==

Note: $user represents a user's username, $group represents a new group that will need access to the repository, and $repository is the new name for the SVN repository.

=== For a single user ===

Add the user to the svn group:
* As root on '''hood''':
# diradm gpasswd -a $user svn

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# svnadmin create /mnt/raid/svn/$repository --fs-type fsfs
# chmod -R 2770 /mnt/raid/svn/$repository
# chown -R $user /mnt/raid/svn/$repository

=== For multiple users ===

Create a new group, and add all the users that require access to the newly created group as well as the svn group:
* As root on '''hood''':
# diradm groupadd $group
# diradm gpasswd -a $user $group
# diradm gpasswd -a $user svn

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# svnadmin create /mnt/raid/svn/$repository --fs-type fsfs
# chmod -R 2770 /mnt/raid/svn/$repository
# chown -R root:$group /mnt/raid/svn/$repository

* The repository URL is '''svn+ssh://$username@svn.iat.sfu.ca/$repository'''

== Dumping the contents of SVN Repositories to a file, and vice-versa ==

Note: $repository represents the repository's name.

To dump the contents to a file:
* As root on '''hurricane''':
# svnadmin dump /mnt/raid/svn/$repository > file.dump

To load the contents from a file into a previously created repository:
* As root on '''hurricane''':
# svnadmin load /mnt/raid/svn/$repository < file.dump

== Adding Computers to the Domain ==
* As root on '''hood''':
# diradm smbhostadd sr-#####
* refer to [[Workstation_Naming_Convention]]

== General User Management ==
* diradm offers almost all regular POSIX commands, sometimes with a few extra frills. The only commands NOT completely implemented are gpasswd and passwd.
* Welcoming new users; email template
** This is in the diradm.superadduser script, as it fills out the template.
<pre>
To: $fullname <$email>
Subject: Research account created - $newuser

Hello $fullname

Your research account has been created.
Username: $newuser
Password: $newpass

Please visit http://research.iat.sfu.ca/network/changepassword.php to change
your password when you receive this email.

For support with the research network, please email:
help@research.iat.sfu.ca
Please include a good description of the entire problem and a suitable subject
line.

For more information about SIAT Research, visit our Research Wiki found at:
http://research.iat.sfu.ca/wiki/

Please note that this username/password pair is only valid for the SFU Surrey
Research Network, and is NOT tied into the main SFU authentication systems.
</pre>

== Sassafras K2 Keyserver Administration ==
=== Background ===
We use the [http://www.sassafras.com Sassafras] K2 Keyserver product for most license-compliance, primarily to extend the usefulness of a small number of licensed applications within the School of Interactive Arts & Technology (SIAT) Researcher community. Most users are sporadic, and don't require full-time access to our specialized applications; rather, they need to accomplish a defined task which may be one component of their research or publication.
 
The Sassafras keyserver runs under Linux, on bismarck.iat.sfu.ca, with install-root under '''/usr/local/k2'''. 
In a process-listing, it shows up as:
/usr/local/k2/ks -d -e /usr/local/k2/startup.txt 
It's started from an init-script under
/etc/init.d/KeyServer
which, in turn, is launched upon startup by the Gentoo rc-update scripts. No manual intervention is necessary (normally :-) ). 
We currently (2007) have 200 key-client licenses, which covers our current user-quantity, with some room for future growth. 
This keyserver serves licenses to Windows and Mac clients (only :-( ). 

=== Administration ===

The main administration tool is the K2Admin program, which is capable of running under Windows, or Mac OS-X (only :-( No Linux).

Here is the [[Media:K2Admin.dmg|Local Mac Copy]] 
And, the [[Media:K2Admin.exe|Local Windows Copy]]
==== Viewing Key-served Applications ====

Open up K2's KeyConfigure, the license administration software. When you do, you'll need to enter the following information:

* Server: research-keyserver.iat.sfu.ca
* Username: Administrator
* Password: secret

Once open, you can see which Computers on the network are using what Software, what Software is running on what machine, and what Licenses are registered with the system.

In the Licenses window, you will see the name of the application, as well as how many licenses are in use at that particular moment in time, how many people are waiting for a license to free up, and how many licenses we own (labeled as 'Limit').

Double clicking on the name of a key-served software application, will bring up more details about its use. You can change the name of the application or change the way it is being key-served. More importantly, you can see who is using the application and on what machine (Click on 'Current User List' or 'Computer List'), and you can also see what application and which version is registered with the particular license. To see this, expand the 'Programs' section.

==== Adding Key-served Applications ====

Before starting, you must be on a Mac or Windows PC that already has the software you'd like to add installed and working.

Open KeyConfigure and go to File > Create License (or press Cmd+i on a Mac or Ctrl+i on Windows). A new window will appear. Enter a License Name, usually the same as the Software name. Then click Browse, and find the App that you'd like to keyserve (on a Mac it's usually under Applications, on Windows in Program Files). Double click it.

Make sure you check off 'Allow launch when KeyServer not available' (this is the default) just in case something breaks on the server, so people can still use their software until it's fixed.

Click OK. A new window with more details will come up. Expand the 'Limits' section by clicking on the small triangle, and choose 'Concurrent Use Limit (Floating License)', and under 'User Limit' enter the amount of licenses we own. Close the window, and make sure you 'Save'.

==== Removing Key-served Applications ====

This is very easy. Once you open up KeyConfigure, select the Application you'd like to remove, and go to Edit > Delete (or click Cmd+delete on a Mac, or Delete on Windows).

== Flexlm License Server Administration ==

== Working with LDAP ==

=== Modifying an LDAP entry ===

First create a .ldif file with its content in this format:

dn: uid=bob,ou=Users,dc=iat,dc=sfu,dc=ca
changetype: modify
replace: sambaHomePath
sambaHomePath: \\NEW\Samba\home\path

Then run this command:
* As root on '''hood''':
# ldapmodify -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W
* You will be prompted for our LDAP password

The options in this command do the following:
* -x: use simple authentication instead of SASL
* -f: use the file $file.ldif to read the changes to be made
* -D: bind-dn (user to bind with)
* -W: prompt for password

=== Deleting an LDAP entry ===

Note that it is still better to delete users using the [[Research Administration Tasks#Deleting Users | diradm method above]], this is just for general use.

First create a .ldif file with its content in this format:

cn=bob,ou=home.users,ou=AutoFS,dc=iat,dc=sfu,dc=ca

Then run this command:
* As root on '''hood''':
# ldapdelete -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W
* You will be prompted for our LDAP password

The options in this command do the following:
* -x: use simple authentication instead of SASL
* -f: use the file $file.ldif to read the changes to be made
* -D: bind-dn (user to bind with)
* -W: prompt for password

Research Administration Tasks

2010-07-14T03:37:02Z

Rmackenz: /* For a single user */

== Adding Users ==
* As root on '''spitfire''':
# cd
# DEBUG=1 /usr/local/sbin/diradm.superadduser '$username' '$email' '$fullname'
* Note that a file named '$username' is created in your current directory with the template filled out for mailing (the same file is displayed onscreen), and this is why it is very important to 'cd' to root's home directory before running the script so as to not cause any problems with home-directory creation.
* Further note that $username is the new user's username (which will not be tied in with their regular SFU username), $email is their preferred email address and $fullname is their first and last name.
* An email will be sent to their email address
* Add the newly-created user to our [http://bismarck.iat.sfu.ca/mailman/admin/research/ Research Mailing List].
* '''Add the new user to '/etc/amanda/spitfire/disklist'. This is to enable backups of the user's home directory '''

== Deleting Users ==
Make sure there are no sym-links pointing to important stuff!!
# find -P /home/users/$username -noleaf -type l

* As root on '''spitfire''':
# DEBUG=1 diradm userdel -r $username
* As root on '''hood''':
# DEBUG=1 diradm userdel $username
* Keeping the user on our [http://bismarck.iat.sfu.ca/mailman/admin/research/ Research Mailing List] is probably a good idea.
* If you delete a user, you MUST disallow diradm from ever using that UIDNumber again. To do so, go to each machine with diradm and edit the diradm.conf file so that UIDNUMBERMIN to equal the same number as the highest UIDNumber currently being used. (At least one higher than the user you deleted) This is important!
* Comment out the user from /etc/amanda/spitfire/disklist, only if they will never need the data.

== Changing a Users Password ==
This method does not require the old password.
* As root on '''hood''':
# ldappass $username

== Adding Users to a Group ==
Adding or removing from a group. Uses the same syntax as gpasswd(8).
* As root on '''hood''':
# diradm gpasswd (-a|-d) $username $group
# diradm gpasswd -a mdeepwel pond

== Adding Groups ==
Adding groups takes the same syntax as groupadd(8).
* As root on '''hood''':
# diradm groupadd $groupname

To change the GID of any group:
* As root on '''hood''':
# diradm groupmod -g GID $groupname

== Adding Projects ==

=== For a single user ===

Note that '''$project''' designates the name of the new project and '''$user''' designates the user for whom the project is being created.

Create the new project directory:
* As root on '''hurricane''':
# mkdir /mnt/raid/projects/$project
# mkdir /mnt/raid/projects/$project/htdocs
# chown -R $user /mnt/raid/projects/$project
# chmod -R 2701 /mnt/raid/projects/$project
# chmod 2775 /mnt/raid/projects/$project/htdocs
# mkdir /mnt/raid/projects/$project/htlogs
# chmod 755 /mnt/raid/projects/$project/htlogs

Add an LDAP entry for the newly created project:
* As root on '''hood''':
# diradm amadd -O home.projects $project 209.87.56.231:/mnt/raid/projects/$project
# '-O' means the default mount options for automount.

Create a sym-link in the user's home directory
* As root on whatever you want:
# cd /home/users/$user
# ln -s /home/projects/$project

Next, to set the up the hosting and the database:
* As root on '''hercules00''' set up a new vhost.conf using an existing template:
# cd /etc/apache2/vhosts.d/projects/
# cat vhost_template.sample > $project.conf

'''TO DO - DATABASE HOWTO'''

Make sure you get Vic to add an alias!

=== For a group ===

Note that '''$project''' designates the name of the new project and '''$group''' designates the group for whom the project is being created.

First create a [[Research Administration Tasks#Adding Groups|new group]].

Create the new project directory:
* As root on '''hurricane''':
# mkdir /mnt/raid/projects/$project
# chgrp -R $group /mnt/raid/projects/$project
# chmod -R 2771 /mnt/raid/projects/$project
# mkdir /mnt/raid/projects/$project/htdocs
# chmod 2775 /mnt/raid/projects/$project/htdocs
# mkdir /mnt/raid/projects/$project/htlogs
# chmod 755 /mnt/raid/projects/$project/htlogs

Add an LDAP entry for the newly created project:
* As root on '''hood''':
# diradm amadd -O home.projects $project 209.87.56.231:/mnt/raid/projects/$project
# '-O' means the default mount options for automount.

Create a sym-link in the all the user's home directories (the users belonging to $group). To find out who is in what group, use the command getent group | grep $group on any ldap-enabled machine.
* As root on your LDAP-enabled machine of choice:
# cd /home/users/$user
# ln -s /home/projects/$project

Next, to set the up the hosting and the database:
* As root on '''hercules00''' set up a new vhost.conf using an existing template:
# cd /etc/apache2/vhosts.d/projects/
# cat vhost_template.sample > $project.conf

'''TO DO - DATABASE HOWTO'''

Make sure you get Vic to add an alias!

== Adding CVS Repositories ==

Note: $user represents a user's username, $group represents a new group that will need access to the repository, and $repository is the new name for the CVS repository.

=== For a single user ===

Add the user to the cvs group:
* As root on '''hood''':
# diradm gpasswd -a $user cvs

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# cvs -d /mnt/raid/cvs/$repository
# chmod -R 2700 /mnt/raid/cvs/$repository
# chown -R $user /mnt/raid/cvs/$repository

=== For multiple users ===

Create a new group, and add all the users that require access to the newly created group as well as the cvs group:
* As root on '''hood''':
# diradm groupadd $group
# diradm gpasswd -a $user $group
# diradm gpasswd -a $user cvs

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# cvs -d /mnt/raid/cvs/$repository
# chmod -R 2770 /mnt/raid/cvs/$repository
# chgrp -R $group /mnt/raid/cvs/$repository

* To access the CVS repository, use ''CVS_RSH="ssh"'' with URL being '':ext:$user@cvs.iat.sfu.ca:/var/cvsroot/$foobar''
* See the more detailed [[HOWTO_Access_The_CVS_Server | CVS User guide]]

== Adding SVN Repositories ==

Note: $user represents a user's username, $group represents a new group that will need access to the repository, and $repository is the new name for the SVN repository.

=== For a single user ===

Add the user to the svn group:
* As root on '''hood''':
# diradm gpasswd -a $user svn

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# svnadmin create /mnt/raid/svn/$repository --fs-type fsfs
# chmod -R 2770 /mnt/raid/svn/$repository
# chown -R $user /mnt/raid/svn/$repository

=== For multiple users ===

Create a new group, and add all the users that require access to the newly created group as well as the svn group:
* As root on '''hood''':
# diradm groupadd $group
# diradm gpasswd -a $user $group
# diradm gpasswd -a $user svn

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# svnadmin create /mnt/raid/svn/$repository --fs-type fsfs
# chmod -R 2770 /mnt/raid/svn/$repository
# chown -R root:$group /mnt/raid/svn/$repository

* The repository URL is '''svn+ssh://$username@svn.iat.sfu.ca/$repository'''

== Dumping the contents of SVN Repositories to a file, and vice-versa ==

Note: $repository represents the repository's name.

To dump the contents to a file:
* As root on '''hurricane''':
# svnadmin dump /mnt/raid/svn/$repository > file.dump

To load the contents from a file into a previously created repository:
* As root on '''hurricane''':
# svnadmin load /mnt/raid/svn/$repository < file.dump

== Adding Computers to the Domain ==
* As root on '''hood''':
# diradm smbhostadd sr-#####
* refer to [[Workstation_Naming_Convention]]

== General User Management ==
* diradm offers almost all regular POSIX commands, sometimes with a few extra frills. The only commands NOT completely implemented are gpasswd and passwd.
* Welcoming new users; email template
** This is in the diradm.superadduser script, as it fills out the template.
<pre>
To: $fullname <$email>
Subject: Research account created - $newuser

Hello $fullname

Your research account has been created.
Username: $newuser
Password: $newpass

Please visit http://research.iat.sfu.ca/network/changepassword.php to change
your password when you receive this email.

For support with the research network, please email:
help@research.iat.sfu.ca
Please include a good description of the entire problem and a suitable subject
line.

For more information about SIAT Research, visit our Research Wiki found at:
http://research.iat.sfu.ca/wiki/

Please note that this username/password pair is only valid for the SFU Surrey
Research Network, and is NOT tied into the main SFU authentication systems.
</pre>

== Sassafras K2 Keyserver Administration ==
=== Background ===
We use the [http://www.sassafras.com Sassafras] K2 Keyserver product for most license-compliance, primarily to extend the usefulness of a small number of licensed applications within the School of Interactive Arts & Technology (SIAT) Researcher community. Most users are sporadic, and don't require full-time access to our specialized applications; rather, they need to accomplish a defined task which may be one component of their research or publication.
 
The Sassafras keyserver runs under Linux, on bismarck.iat.sfu.ca, with install-root under '''/usr/local/k2'''. 
In a process-listing, it shows up as:
/usr/local/k2/ks -d -e /usr/local/k2/startup.txt 
It's started from an init-script under
/etc/init.d/KeyServer
which, in turn, is launched upon startup by the Gentoo rc-update scripts. No manual intervention is necessary (normally :-) ). 
We currently (2007) have 200 key-client licenses, which covers our current user-quantity, with some room for future growth. 
This keyserver serves licenses to Windows and Mac clients (only :-( ). 

=== Administration ===

The main administration tool is the K2Admin program, which is capable of running under Windows, or Mac OS-X (only :-( No Linux).

Here is the [[Media:K2Admin.dmg|Local Mac Copy]] 
And, the [[Media:K2Admin.exe|Local Windows Copy]]
==== Viewing Key-served Applications ====

Open up K2's KeyConfigure, the license administration software. When you do, you'll need to enter the following information:

* Server: research-keyserver.iat.sfu.ca
* Username: Administrator
* Password: secret

Once open, you can see which Computers on the network are using what Software, what Software is running on what machine, and what Licenses are registered with the system.

In the Licenses window, you will see the name of the application, as well as how many licenses are in use at that particular moment in time, how many people are waiting for a license to free up, and how many licenses we own (labeled as 'Limit').

Double clicking on the name of a key-served software application, will bring up more details about its use. You can change the name of the application or change the way it is being key-served. More importantly, you can see who is using the application and on what machine (Click on 'Current User List' or 'Computer List'), and you can also see what application and which version is registered with the particular license. To see this, expand the 'Programs' section.

==== Adding Key-served Applications ====

Before starting, you must be on a Mac or Windows PC that already has the software you'd like to add installed and working.

Open KeyConfigure and go to File > Create License (or press Cmd+i on a Mac or Ctrl+i on Windows). A new window will appear. Enter a License Name, usually the same as the Software name. Then click Browse, and find the App that you'd like to keyserve (on a Mac it's usually under Applications, on Windows in Program Files). Double click it.

Make sure you check off 'Allow launch when KeyServer not available' (this is the default) just in case something breaks on the server, so people can still use their software until it's fixed.

Click OK. A new window with more details will come up. Expand the 'Limits' section by clicking on the small triangle, and choose 'Concurrent Use Limit (Floating License)', and under 'User Limit' enter the amount of licenses we own. Close the window, and make sure you 'Save'.

==== Removing Key-served Applications ====

This is very easy. Once you open up KeyConfigure, select the Application you'd like to remove, and go to Edit > Delete (or click Cmd+delete on a Mac, or Delete on Windows).

== Flexlm License Server Administration ==

== Working with LDAP ==

=== Modifying an LDAP entry ===

First create a .ldif file with its content in this format:

dn: uid=bob,ou=Users,dc=iat,dc=sfu,dc=ca
changetype: modify
replace: sambaHomePath
sambaHomePath: \\NEW\Samba\home\path

Then run this command:
* As root on '''hood''':
# ldapmodify -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W
* You will be prompted for our LDAP password

The options in this command do the following:
* -x: use simple authentication instead of SASL
* -f: use the file $file.ldif to read the changes to be made
* -D: bind-dn (user to bind with)
* -W: prompt for password

=== Deleting an LDAP entry ===

Note that it is still better to delete users using the [[Research Administration Tasks#Deleting Users | diradm method above]], this is just for general use.

First create a .ldif file with its content in this format:

cn=bob,ou=home.users,ou=AutoFS,dc=iat,dc=sfu,dc=ca

Then run this command:
* As root on '''hood''':
# ldapdelete -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W
* You will be prompted for our LDAP password

The options in this command do the following:
* -x: use simple authentication instead of SASL
* -f: use the file $file.ldif to read the changes to be made
* -D: bind-dn (user to bind with)
* -W: prompt for password

Research Administration Tasks

2010-07-14T03:36:16Z

Rmackenz: /* For a single user */

== Adding Users ==
* As root on '''spitfire''':
# cd
# DEBUG=1 /usr/local/sbin/diradm.superadduser '$username' '$email' '$fullname'
* Note that a file named '$username' is created in your current directory with the template filled out for mailing (the same file is displayed onscreen), and this is why it is very important to 'cd' to root's home directory before running the script so as to not cause any problems with home-directory creation.
* Further note that $username is the new user's username (which will not be tied in with their regular SFU username), $email is their preferred email address and $fullname is their first and last name.
* An email will be sent to their email address
* Add the newly-created user to our [http://bismarck.iat.sfu.ca/mailman/admin/research/ Research Mailing List].
* '''Add the new user to '/etc/amanda/spitfire/disklist'. This is to enable backups of the user's home directory '''

== Deleting Users ==
Make sure there are no sym-links pointing to important stuff!!
# find -P /home/users/$username -noleaf -type l

* As root on '''spitfire''':
# DEBUG=1 diradm userdel -r $username
* As root on '''hood''':
# DEBUG=1 diradm userdel $username
* Keeping the user on our [http://bismarck.iat.sfu.ca/mailman/admin/research/ Research Mailing List] is probably a good idea.
* If you delete a user, you MUST disallow diradm from ever using that UIDNumber again. To do so, go to each machine with diradm and edit the diradm.conf file so that UIDNUMBERMIN to equal the same number as the highest UIDNumber currently being used. (At least one higher than the user you deleted) This is important!
* Comment out the user from /etc/amanda/spitfire/disklist, only if they will never need the data.

== Changing a Users Password ==
This method does not require the old password.
* As root on '''hood''':
# ldappass $username

== Adding Users to a Group ==
Adding or removing from a group. Uses the same syntax as gpasswd(8).
* As root on '''hood''':
# diradm gpasswd (-a|-d) $username $group
# diradm gpasswd -a mdeepwel pond

== Adding Groups ==
Adding groups takes the same syntax as groupadd(8).
* As root on '''hood''':
# diradm groupadd $groupname

To change the GID of any group:
* As root on '''hood''':
# diradm groupmod -g GID $groupname

== Adding Projects ==

=== For a single user ===

Note that '''$project''' designates the name of the new project and '''$user''' designates the user for whom the project is being created.

Create the new project directory:
* As root on '''hurricane''':
# mkdir /mnt/raid/projects/$project
# chown -R $user /mnt/raid/projects/$project
# chmod -R 2701 /mnt/raid/projects/$project
# mkdir /mnt/raid/projects/$project/htdocs
# chmod 2775 /mnt/raid/projects/$project/htdocs
# mkdir /mnt/raid/projects/$project/htlogs
# chmod 755 /mnt/raid/projects/$project/htlogs

# mkdir /mnt/raid/projects/$project
# chgrp -R $group /mnt/raid/projects/$project
# chmod -R 2771 /mnt/raid/projects/$project
# mkdir /mnt/raid/projects/$project/htdocs
# chmod 2775 /mnt/raid/projects/$project/htdocs
# mkdir /mnt/raid/projects/$project/htlogs
# chmod 755 /mnt/raid/projects/$project/htlogs

Add an LDAP entry for the newly created project:
* As root on '''hood''':
# diradm amadd -O home.projects $project 209.87.56.231:/mnt/raid/projects/$project
# '-O' means the default mount options for automount.

Create a sym-link in the user's home directory
* As root on whatever you want:
# cd /home/users/$user
# ln -s /home/projects/$project

Next, to set the up the hosting and the database:
* As root on '''hercules00''' set up a new vhost.conf using an existing template:
# cd /etc/apache2/vhosts.d/projects/
# cat vhost_template.sample > $project.conf

'''TO DO - DATABASE HOWTO'''

Make sure you get Vic to add an alias!

=== For a group ===

Note that '''$project''' designates the name of the new project and '''$group''' designates the group for whom the project is being created.

First create a [[Research Administration Tasks#Adding Groups|new group]].

Create the new project directory:
* As root on '''hurricane''':
# mkdir /mnt/raid/projects/$project
# chgrp -R $group /mnt/raid/projects/$project
# chmod -R 2771 /mnt/raid/projects/$project
# mkdir /mnt/raid/projects/$project/htdocs
# chmod 2775 /mnt/raid/projects/$project/htdocs
# mkdir /mnt/raid/projects/$project/htlogs
# chmod 755 /mnt/raid/projects/$project/htlogs

Add an LDAP entry for the newly created project:
* As root on '''hood''':
# diradm amadd -O home.projects $project 209.87.56.231:/mnt/raid/projects/$project
# '-O' means the default mount options for automount.

Create a sym-link in the all the user's home directories (the users belonging to $group). To find out who is in what group, use the command getent group | grep $group on any ldap-enabled machine.
* As root on your LDAP-enabled machine of choice:
# cd /home/users/$user
# ln -s /home/projects/$project

Next, to set the up the hosting and the database:
* As root on '''hercules00''' set up a new vhost.conf using an existing template:
# cd /etc/apache2/vhosts.d/projects/
# cat vhost_template.sample > $project.conf

'''TO DO - DATABASE HOWTO'''

Make sure you get Vic to add an alias!

== Adding CVS Repositories ==

Note: $user represents a user's username, $group represents a new group that will need access to the repository, and $repository is the new name for the CVS repository.

=== For a single user ===

Add the user to the cvs group:
* As root on '''hood''':
# diradm gpasswd -a $user cvs

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# cvs -d /mnt/raid/cvs/$repository
# chmod -R 2700 /mnt/raid/cvs/$repository
# chown -R $user /mnt/raid/cvs/$repository

=== For multiple users ===

Create a new group, and add all the users that require access to the newly created group as well as the cvs group:
* As root on '''hood''':
# diradm groupadd $group
# diradm gpasswd -a $user $group
# diradm gpasswd -a $user cvs

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# cvs -d /mnt/raid/cvs/$repository
# chmod -R 2770 /mnt/raid/cvs/$repository
# chgrp -R $group /mnt/raid/cvs/$repository

* To access the CVS repository, use ''CVS_RSH="ssh"'' with URL being '':ext:$user@cvs.iat.sfu.ca:/var/cvsroot/$foobar''
* See the more detailed [[HOWTO_Access_The_CVS_Server | CVS User guide]]

== Adding SVN Repositories ==

Note: $user represents a user's username, $group represents a new group that will need access to the repository, and $repository is the new name for the SVN repository.

=== For a single user ===

Add the user to the svn group:
* As root on '''hood''':
# diradm gpasswd -a $user svn

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# svnadmin create /mnt/raid/svn/$repository --fs-type fsfs
# chmod -R 2770 /mnt/raid/svn/$repository
# chown -R $user /mnt/raid/svn/$repository

=== For multiple users ===

Create a new group, and add all the users that require access to the newly created group as well as the svn group:
* As root on '''hood''':
# diradm groupadd $group
# diradm gpasswd -a $user $group
# diradm gpasswd -a $user svn

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# svnadmin create /mnt/raid/svn/$repository --fs-type fsfs
# chmod -R 2770 /mnt/raid/svn/$repository
# chown -R root:$group /mnt/raid/svn/$repository

* The repository URL is '''svn+ssh://$username@svn.iat.sfu.ca/$repository'''

== Dumping the contents of SVN Repositories to a file, and vice-versa ==

Note: $repository represents the repository's name.

To dump the contents to a file:
* As root on '''hurricane''':
# svnadmin dump /mnt/raid/svn/$repository > file.dump

To load the contents from a file into a previously created repository:
* As root on '''hurricane''':
# svnadmin load /mnt/raid/svn/$repository < file.dump

== Adding Computers to the Domain ==
* As root on '''hood''':
# diradm smbhostadd sr-#####
* refer to [[Workstation_Naming_Convention]]

== General User Management ==
* diradm offers almost all regular POSIX commands, sometimes with a few extra frills. The only commands NOT completely implemented are gpasswd and passwd.
* Welcoming new users; email template
** This is in the diradm.superadduser script, as it fills out the template.
<pre>
To: $fullname <$email>
Subject: Research account created - $newuser

Hello $fullname

Your research account has been created.
Username: $newuser
Password: $newpass

Please visit http://research.iat.sfu.ca/network/changepassword.php to change
your password when you receive this email.

For support with the research network, please email:
help@research.iat.sfu.ca
Please include a good description of the entire problem and a suitable subject
line.

For more information about SIAT Research, visit our Research Wiki found at:
http://research.iat.sfu.ca/wiki/

Please note that this username/password pair is only valid for the SFU Surrey
Research Network, and is NOT tied into the main SFU authentication systems.
</pre>

== Sassafras K2 Keyserver Administration ==
=== Background ===
We use the [http://www.sassafras.com Sassafras] K2 Keyserver product for most license-compliance, primarily to extend the usefulness of a small number of licensed applications within the School of Interactive Arts & Technology (SIAT) Researcher community. Most users are sporadic, and don't require full-time access to our specialized applications; rather, they need to accomplish a defined task which may be one component of their research or publication.
 
The Sassafras keyserver runs under Linux, on bismarck.iat.sfu.ca, with install-root under '''/usr/local/k2'''. 
In a process-listing, it shows up as:
/usr/local/k2/ks -d -e /usr/local/k2/startup.txt 
It's started from an init-script under
/etc/init.d/KeyServer
which, in turn, is launched upon startup by the Gentoo rc-update scripts. No manual intervention is necessary (normally :-) ). 
We currently (2007) have 200 key-client licenses, which covers our current user-quantity, with some room for future growth. 
This keyserver serves licenses to Windows and Mac clients (only :-( ). 

=== Administration ===

The main administration tool is the K2Admin program, which is capable of running under Windows, or Mac OS-X (only :-( No Linux).

Here is the [[Media:K2Admin.dmg|Local Mac Copy]] 
And, the [[Media:K2Admin.exe|Local Windows Copy]]
==== Viewing Key-served Applications ====

Open up K2's KeyConfigure, the license administration software. When you do, you'll need to enter the following information:

* Server: research-keyserver.iat.sfu.ca
* Username: Administrator
* Password: secret

Once open, you can see which Computers on the network are using what Software, what Software is running on what machine, and what Licenses are registered with the system.

In the Licenses window, you will see the name of the application, as well as how many licenses are in use at that particular moment in time, how many people are waiting for a license to free up, and how many licenses we own (labeled as 'Limit').

Double clicking on the name of a key-served software application, will bring up more details about its use. You can change the name of the application or change the way it is being key-served. More importantly, you can see who is using the application and on what machine (Click on 'Current User List' or 'Computer List'), and you can also see what application and which version is registered with the particular license. To see this, expand the 'Programs' section.

==== Adding Key-served Applications ====

Before starting, you must be on a Mac or Windows PC that already has the software you'd like to add installed and working.

Open KeyConfigure and go to File > Create License (or press Cmd+i on a Mac or Ctrl+i on Windows). A new window will appear. Enter a License Name, usually the same as the Software name. Then click Browse, and find the App that you'd like to keyserve (on a Mac it's usually under Applications, on Windows in Program Files). Double click it.

Make sure you check off 'Allow launch when KeyServer not available' (this is the default) just in case something breaks on the server, so people can still use their software until it's fixed.

Click OK. A new window with more details will come up. Expand the 'Limits' section by clicking on the small triangle, and choose 'Concurrent Use Limit (Floating License)', and under 'User Limit' enter the amount of licenses we own. Close the window, and make sure you 'Save'.

==== Removing Key-served Applications ====

This is very easy. Once you open up KeyConfigure, select the Application you'd like to remove, and go to Edit > Delete (or click Cmd+delete on a Mac, or Delete on Windows).

== Flexlm License Server Administration ==

== Working with LDAP ==

=== Modifying an LDAP entry ===

First create a .ldif file with its content in this format:

dn: uid=bob,ou=Users,dc=iat,dc=sfu,dc=ca
changetype: modify
replace: sambaHomePath
sambaHomePath: \\NEW\Samba\home\path

Then run this command:
* As root on '''hood''':
# ldapmodify -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W
* You will be prompted for our LDAP password

The options in this command do the following:
* -x: use simple authentication instead of SASL
* -f: use the file $file.ldif to read the changes to be made
* -D: bind-dn (user to bind with)
* -W: prompt for password

=== Deleting an LDAP entry ===

Note that it is still better to delete users using the [[Research Administration Tasks#Deleting Users | diradm method above]], this is just for general use.

First create a .ldif file with its content in this format:

cn=bob,ou=home.users,ou=AutoFS,dc=iat,dc=sfu,dc=ca

Then run this command:
* As root on '''hood''':
# ldapdelete -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W
* You will be prompted for our LDAP password

The options in this command do the following:
* -x: use simple authentication instead of SASL
* -f: use the file $file.ldif to read the changes to be made
* -D: bind-dn (user to bind with)
* -W: prompt for password

Servers:Hercules

2010-07-06T21:03:47Z

Rmackenz: /* Adding a new vserver */

== Adding a new vserver ==
* As root on '''hercules''':
* First create the template the server will use for portage
# cd /etc/managed-portage/
# rsync -avP hosts/TEMPLATE_webdb/ hosts/sr-hercules$$
* Commit the new vserver's template to git
# git add hosts/sr-hercules$$
# git commit -m 'New VM, Hercules$$'
# git push
* Create the new vserver
# cd ~/vps-siat/scripts/
# ./make-vps sr-hercules$$ br0:10.0.1.XX/16 br0:209.87.56.XX/24
* Note that $$ must be the number of the new vserver, which start at 00.
* Further note that XX is the IP to be assigned to the new server. '''Be very careful not to assign an already taken IP.'''

== Removing an existing vserver ==
* As root on '''hercules''':
* First ensure that the Vserver is stopped
# vserver sr-hercules$$ stop
* Kill the server
# cd ~/vps-siat/scripts/
# ./kill-vps sr-hercules$$
* Note that $$ must be the number of the vserver.

== Working with managed-portage profiles ==
* '''It is very important that you DO NOT touch /etc/portage/ on any vserver.''' Everything must be done through /etc/managed-portage/ on the master server.
* Below are a few common tasks for managed-portage
=== Setting up vserver-specific USE flags ===
* As root on '''hercules''':
# cd /etc/managed-portage/hosts/sr-hercules$$/make.profile/
* Here you can create/edit any regular files you would under /etc/portage/, such as package.use for example:
# vim package.use
* Specify what USE flags you'd like a package to use
* Commit the changes to git
# git commit -m '$MESSAGE' package.use
# git push
# cd /vservers/sr-hercules$$/etc/managed-portage/
# git pull
* Note that $$ must be the number of the new vserver, which start at 00.
* Also note that you must replace package.use with whatever file you edited/created.
=== Changing or setting the profile of a vserver ===
* As root on '''hercules''':
# cd /etc/managed-portage/class/$PROFILE
* Add the name of the vserver to the applies_to file (if your vserver is sr-hercules99, add 'sr-hercules99' to a new line in the file)
* Commit the changes to git
# git commit -m "$MESSAGE' applies_to
# git push
* Enter the vserver
# vserver sr-hercules$$ enter
* Pull the changes from git and emerge
# cd /etc/managed-portage/
# git pull
# emerge -knN @system ; emerge -knN @world ; emerge -knN @installed

Research Administration Tasks

2010-05-27T21:55:11Z

Rmackenz: /* For a group */

== Adding Users ==
* As root on '''spitfire''':
# cd
# DEBUG=1 /usr/local/sbin/diradm.superadduser '$username' '$email' '$fullname'
* Note that a file named '$username' is created in your current directory with the template filled out for mailing (the same file is displayed onscreen), and this is why it is very important to 'cd' to root's home directory before running the script so as to not cause any problems with home-directory creation.
* Further note that $username is the new user's username (which will not be tied in with their regular SFU username), $email is their preferred email address and $fullname is their first and last name.
* An email will be sent to their email address
* Add the newly-created user to our [http://bismarck.iat.sfu.ca/mailman/admin/research/ Research Mailing List].
* '''Add the new user to '/etc/amanda/spitfire/disklist'. This is to enable backups of the user's home directory '''

== Deleting Users ==
Make sure there are no sym-links pointing to important stuff!!
# find -P /home/users/$username -noleaf -type l

* As root on '''spitfire''':
# DEBUG=1 diradm userdel -r $username
* As root on '''hood''':
# DEBUG=1 diradm userdel $username
* Keeping the user on our [http://bismarck.iat.sfu.ca/mailman/admin/research/ Research Mailing List] is probably a good idea.
* If you delete a user, you MUST disallow diradm from ever using that UIDNumber again. To do so, go to each machine with diradm and edit the diradm.conf file so that UIDNUMBERMIN to equal the same number as the highest UIDNumber currently being used. (At least one higher than the user you deleted) This is important!
* Comment out the user from /etc/amanda/spitfire/disklist, only if they will never need the data.

== Changing a Users Password ==
This method does not require the old password.
* As root on '''hood''':
# ldappass $username

== Adding Users to a Group ==
Adding or removing from a group. Uses the same syntax as gpasswd(8).
* As root on '''hood''':
# diradm gpasswd (-a|-d) $username $group
# diradm gpasswd -a mdeepwel pond

== Adding Groups ==
Adding groups takes the same syntax as groupadd(8).
* As root on '''hood''':
# diradm groupadd $groupname

To change the GID of any group:
* As root on '''hood''':
# diradm groupmod -g GID $groupname

== Adding Projects ==

=== For a single user ===

Note that '''$project''' designates the name of the new project and '''$user''' designates the user for whom the project is being created.

Create the new project directory:
* As root on '''hurricane''':
# mkdir /mnt/raid/projects/$project
# chown -R $user /mnt/raid/projects/$project
# chmod -R 2701 /mnt/raid/projects/$project
# mkdir /mnt/raid/projects/$project/htdocs
# chmod 2775 /mnt/raid/projects/$project/htdocs

Add an LDAP entry for the newly created project:
* As root on '''hood''':
# diradm amadd -O home.projects $project 209.87.56.231:/mnt/raid/projects/$project
# '-O' means the default mount options for automount.

Create a sym-link in the user's home directory
* As root on whatever you want:
# cd /home/users/$user
# ln -s /home/projects/$project

Next, to set the up the hosting and the database:
* As root on '''hercules00''' set up a new vhost.conf using an existing template:
# cd /etc/apache2/vhosts.d/projects/
# cat vhost_template.sample > $project.conf

'''TO DO - DATABASE HOWTO'''

Make sure you get Vic to add an alias!

=== For a group ===

Note that '''$project''' designates the name of the new project and '''$group''' designates the group for whom the project is being created.

First create a [[Research Administration Tasks#Adding Groups|new group]].

Create the new project directory:
* As root on '''hurricane''':
# mkdir /mnt/raid/projects/$project
# chgrp -R $group /mnt/raid/projects/$project
# chmod -R 2771 /mnt/raid/projects/$project
# mkdir /mnt/raid/projects/$project/htdocs
# chmod 2775 /mnt/raid/projects/$project/htdocs
# mkdir /mnt/raid/projects/$project/htlogs
# chmod 755 /mnt/raid/projects/$project/htlogs

Add an LDAP entry for the newly created project:
* As root on '''hood''':
# diradm amadd -O home.projects $project 209.87.56.231:/mnt/raid/projects/$project
# '-O' means the default mount options for automount.

Create a sym-link in the all the user's home directories (the users belonging to $group). To find out who is in what group, use the command getent group | grep $group on any ldap-enabled machine.
* As root on your LDAP-enabled machine of choice:
# cd /home/users/$user
# ln -s /home/projects/$project

Next, to set the up the hosting and the database:
* As root on '''hercules00''' set up a new vhost.conf using an existing template:
# cd /etc/apache2/vhosts.d/projects/
# cat vhost_template.sample > $project.conf

'''TO DO - DATABASE HOWTO'''

Make sure you get Vic to add an alias!

== Adding CVS Repositories ==

Note: $user represents a user's username, $group represents a new group that will need access to the repository, and $repository is the new name for the CVS repository.

=== For a single user ===

Add the user to the cvs group:
* As root on '''hood''':
# diradm gpasswd -a $user cvs

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# cvs -d /mnt/raid/cvs/$repository
# chmod -R 2700 /mnt/raid/cvs/$repository
# chown -R $user /mnt/raid/cvs/$repository

=== For multiple users ===

Create a new group, and add all the users that require access to the newly created group as well as the cvs group:
* As root on '''hood''':
# diradm groupadd $group
# diradm gpasswd -a $user $group
# diradm gpasswd -a $user cvs

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# cvs -d /mnt/raid/cvs/$repository
# chmod -R 2770 /mnt/raid/cvs/$repository
# chgrp -R $group /mnt/raid/cvs/$repository

* To access the CVS repository, use ''CVS_RSH="ssh"'' with URL being '':ext:$user@cvs.iat.sfu.ca:/var/cvsroot/$foobar''
* See the more detailed [[HOWTO_Access_The_CVS_Server | CVS User guide]]

== Adding SVN Repositories ==

Note: $user represents a user's username, $group represents a new group that will need access to the repository, and $repository is the new name for the SVN repository.

=== For a single user ===

Add the user to the svn group:
* As root on '''hood''':
# diradm gpasswd -a $user svn

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# svnadmin create /mnt/raid/svn/$repository --fs-type fsfs
# chmod -R 2770 /mnt/raid/svn/$repository
# chown -R $user /mnt/raid/svn/$repository

=== For multiple users ===

Create a new group, and add all the users that require access to the newly created group as well as the svn group:
* As root on '''hood''':
# diradm groupadd $group
# diradm gpasswd -a $user $group
# diradm gpasswd -a $user svn

Create the repository and set the correct permissions:
* As root on '''hurricane''':
# svnadmin create /mnt/raid/svn/$repository --fs-type fsfs
# chmod -R 2770 /mnt/raid/svn/$repository
# chown -R root:$group /mnt/raid/svn/$repository

* The repository URL is '''svn+ssh://$username@svn.iat.sfu.ca/$repository'''

== Dumping the contents of SVN Repositories to a file, and vice-versa ==

Note: $repository represents the repository's name.

To dump the contents to a file:
* As root on '''hurricane''':
# svnadmin dump /mnt/raid/svn/$repository > file.dump

To load the contents from a file into a previously created repository:
* As root on '''hurricane''':
# svnadmin load /mnt/raid/svn/$repository < file.dump

== Adding Computers to the Domain ==
* As root on '''hood''':
# diradm smbhostadd sr-#####
* refer to [[Workstation_Naming_Convention]]

== General User Management ==
* diradm offers almost all regular POSIX commands, sometimes with a few extra frills. The only commands NOT completely implemented are gpasswd and passwd.
* Welcoming new users; email template
** This is in the diradm.superadduser script, as it fills out the template.
<pre>
To: $fullname <$email>
Subject: Research account created - $newuser

Hello $fullname

Your research account has been created.
Username: $newuser
Password: $newpass

Please visit http://research.iat.sfu.ca/network/changepassword.php to change
your password when you receive this email.

For support with the research network, please email:
help@research.iat.sfu.ca
Please include a good description of the entire problem and a suitable subject
line.

For more information about SIAT Research, visit our Research Wiki found at:
http://research.iat.sfu.ca/wiki/

Please note that this username/password pair is only valid for the SFU Surrey
Research Network, and is NOT tied into the main SFU authentication systems.
</pre>

== Sassafras K2 Keyserver Administration ==
=== Background ===
We use the [http://www.sassafras.com Sassafras] K2 Keyserver product for most license-compliance, primarily to extend the usefulness of a small number of licensed applications within the School of Interactive Arts & Technology (SIAT) Researcher community. Most users are sporadic, and don't require full-time access to our specialized applications; rather, they need to accomplish a defined task which may be one component of their research or publication.
 
The Sassafras keyserver runs under Linux, on bismarck.iat.sfu.ca, with install-root under '''/usr/local/k2'''. 
In a process-listing, it shows up as:
/usr/local/k2/ks -d -e /usr/local/k2/startup.txt 
It's started from an init-script under
/etc/init.d/KeyServer
which, in turn, is launched upon startup by the Gentoo rc-update scripts. No manual intervention is necessary (normally :-) ). 
We currently (2007) have 200 key-client licenses, which covers our current user-quantity, with some room for future growth. 
This keyserver serves licenses to Windows and Mac clients (only :-( ). 

=== Administration ===

The main administration tool is the K2Admin program, which is capable of running under Windows, or Mac OS-X (only :-( No Linux).

Here is the [[Media:K2Admin.dmg|Local Mac Copy]] 
And, the [[Media:K2Admin.exe|Local Windows Copy]]
==== Viewing Key-served Applications ====

Open up K2's KeyConfigure, the license administration software. When you do, you'll need to enter the following information:

* Server: research-keyserver.iat.sfu.ca
* Username: Administrator
* Password: secret

Once open, you can see which Computers on the network are using what Software, what Software is running on what machine, and what Licenses are registered with the system.

In the Licenses window, you will see the name of the application, as well as how many licenses are in use at that particular moment in time, how many people are waiting for a license to free up, and how many licenses we own (labeled as 'Limit').

Double clicking on the name of a key-served software application, will bring up more details about its use. You can change the name of the application or change the way it is being key-served. More importantly, you can see who is using the application and on what machine (Click on 'Current User List' or 'Computer List'), and you can also see what application and which version is registered with the particular license. To see this, expand the 'Programs' section.

==== Adding Key-served Applications ====

Before starting, you must be on a Mac or Windows PC that already has the software you'd like to add installed and working.

Open KeyConfigure and go to File > Create License (or press Cmd+i on a Mac or Ctrl+i on Windows). A new window will appear. Enter a License Name, usually the same as the Software name. Then click Browse, and find the App that you'd like to keyserve (on a Mac it's usually under Applications, on Windows in Program Files). Double click it.

Make sure you check off 'Allow launch when KeyServer not available' (this is the default) just in case something breaks on the server, so people can still use their software until it's fixed.

Click OK. A new window with more details will come up. Expand the 'Limits' section by clicking on the small triangle, and choose 'Concurrent Use Limit (Floating License)', and under 'User Limit' enter the amount of licenses we own. Close the window, and make sure you 'Save'.

==== Removing Key-served Applications ====

This is very easy. Once you open up KeyConfigure, select the Application you'd like to remove, and go to Edit > Delete (or click Cmd+delete on a Mac, or Delete on Windows).

== Flexlm License Server Administration ==

== Working with LDAP ==

=== Modifying an LDAP entry ===

First create a .ldif file with its content in this format:

dn: uid=bob,ou=Users,dc=iat,dc=sfu,dc=ca
changetype: modify
replace: sambaHomePath
sambaHomePath: \\NEW\Samba\home\path

Then run this command:
* As root on '''hood''':
# ldapmodify -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W
* You will be prompted for our LDAP password

The options in this command do the following:
* -x: use simple authentication instead of SASL
* -f: use the file $file.ldif to read the changes to be made
* -D: bind-dn (user to bind with)
* -W: prompt for password

=== Deleting an LDAP entry ===

Note that it is still better to delete users using the [[Research Administration Tasks#Deleting Users | diradm method above]], this is just for general use.

First create a .ldif file with its content in this format:

cn=bob,ou=home.users,ou=AutoFS,dc=iat,dc=sfu,dc=ca

Then run this command:
* As root on '''hood''':
# ldapdelete -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W
* You will be prompted for our LDAP password

The options in this command do the following:
* -x: use simple authentication instead of SASL
* -f: use the file $file.ldif to read the changes to be made
* -D: bind-dn (user to bind with)
* -W: prompt for password

Setup a Project Wiki

2010-03-03T01:13:04Z

Rmackenz: /* Access Restrictions */

Setup a Project Wiki

2010-02-18T06:22:11Z

Rmackenz:

Setup a Project Wiki

2010-02-18T06:20:55Z

Rmackenz:

Setup a Project Wiki

2010-02-18T06:19:22Z

Rmackenz: /* Customizing */

Setup a Project Wiki

2010-02-18T06:17:59Z

Rmackenz: /* Add a Separate Instance of MediaWiki */

Setup a Project Wiki

2010-02-18T06:17:22Z

Rmackenz: Removed outdated install docs

Setup a Project Wiki

2010-02-18T06:12:56Z

Rmackenz: Removed outdated install docs

Setup a Project Wiki

2010-02-18T06:11:09Z

Rmackenz: /* Access Restrictions */

Setup a Project Wiki

2010-02-18T06:10:45Z

Rmackenz: /* Access Restrictions */

Setup a Project Wiki

2010-02-18T06:09:43Z

Rmackenz:

Who's Where - Availability of Research staff

2009-09-19T21:41:16Z

Rmackenz: /* Rob */

For co-ordination and information purposes:

==Gordon==

==Horatiu==

==Rob==

Tuesdays and Thursdays

==Wilson==

Mon-Fri, 13:00 - 19:00, Room 3715

Counter: 4 day

Lockers

2009-09-11T23:14:35Z

Rmackenz: /* Lockers */

==='''Rules'''===
There are lockers available inside Research, to provide safe and convenient storage for your personal items. If you need a locker, please add your name and e-mail address (de-spammified is a good idea!) next to the number of the locker you wish to use.
*Locker registration is on a first come, first served basis.
*You must provide your own lock.
*"Anonymous" lockers - that is, lockers with a lock but without a wiki-identified user - may be subject to lock-removal without notice :-O
If demand continues to be lower than the supply of lockers, we'll continue on this rather informal basis of self-signup.
Kindly bring any issues to the attention of any of the Labs staff; this is often the only way we become aware of something wrong.

==='''Lockers'''===

'''Entrance to Research'''

<pre>
239 - Dustin Dunsmuir - dtd@sfu.ca
255 - Arefe Dalvandi - ada38@sfu.ca
257 - Malahat Hosseini - mhosseini@sfu.ca
259 - Miraj Khaled || mirajk at sfu dot ca
258 - Karine Kozlova - karine.kozlova@sfu.ca
260 - Veronica Zammitto - veronica.zammitto{a}gmail{d}com

299 - nima motamedi
299 - Hasti Seifi -hsa43@sfu.ca
300 - Lorna Boschman - lboschma@sfu.ca
301 - Benny Lee - bennyl@sfu.ca
302 - Daniel Ha - dha1@sfu.ca
303 - Mahshid Zeinaly - mzeinaly@sfu.ca
304 - Yin He - yha43@sfu.ca
305 - Huaxin Wei - huaxinw@sfu.ca
306 - Andy Huang - tzuangh@sfu.ca
307 - Erick Martinez - emartinez [at] sfu [dot] ca
308 - K.J. Lee - kla8@sfu.ca
309 - Alireza Davoodi - ada48@sfu.ca
310 - Chen Liu - liuchenl@sfu.ca

</pre>

'''Outside IM Lab'''

<pre>
33 - June Lester
34 - Davis Marques - dmarques at sfu dot ca
201 - Coco Jiang - cjiang@sfu.ca
202 - Shahin Sheidaei ssheidae [{a.t}] sfu.ca
203 - Aaron Smith - asmithe *a*t* sfu *.* ca
204 - Jack Stockholm - jstockho (at) sfu (dot) ca
205 - Meehae Song - meehaes@sfu.ca
206 - Bardia Mohabbati - mohabbati@sfu.ca
207 - Steven Barnes - sbarnes@sfu.ca
208 - Aaron Levisohn - alevisohn at sfu dot ca
225 - Ai Nakatani - anakatan@sfu.ca
226 - Karen Tanenbaum - ktanenba@sfu.ca
227 - Andrew Park - aparkd@sfu.ca
227- Majid Bagheri - mbagheri@sfu.ca
228 - Roham Sheikholeslami - msheikho@sfu.ca
237 - Susan Olubunmi - sosunbun@sfu.ca
238 - Melody Siadaty - msa70@sfu.ca
239 - Lesley Xie - zxie@sfu.ca
240 - Nazanin Kadivar - nka23@sfu.ca
245 - Mohsen Asadi - masadi@sfu.ca
246 - Nahal Hassanzadeh Salmasi - nhassanz@sfu.ca
247 - Billy Cheung - bcc7 sfu ca
248 - Dr.Nathalie Prevost - nprevost@sfu.ca
253 - Victor Chen - yvchen@sfu.ca
254 - Maryam Maleki - mmokhtarmaleki@yahoo.com
255 - Mohammad Yasser Khan - mykhan@sfu.ca
256 - Ty Mey Eap - teap@sfu.ca
289 - Parjad Sharifi - psa43@sfu.ca
290 - Caitlin Akai - cakai@sfu.ca
291 - Ulyana Yordan - uyordan@sfu.ca

</pre>

Lockers

2009-09-09T23:14:32Z

Rmackenz: /* Lockers */

==='''Rules'''===
There are lockers available inside Research, to provide safe and convenient storage for your personal items. If you need a locker, please add your name and e-mail address (de-spammified is a good idea!) next to the number of the locker you wish to use.
*Locker registration is on a first come, first served basis.
*You must provide your own lock.
*"Anonymous" lockers - that is, lockers with a lock but without a wiki-identified user - may be subject to lock-removal without notice :-O
If demand continues to be lower than the supply of lockers, we'll continue on this rather informal basis of self-signup.
Kindly bring any issues to the attention of any of the Labs staff; this is often the only way we become aware of something wrong.

==='''Lockers'''===

'''Entrance to Research'''

<pre>
239 - Dustin Dunsmuir - dtd@sfu.ca
255 - Arefe Dalvandi - ada38@sfu.ca
257 - Malahat Hosseini - mhosseini@sfu.ca
259 - Miraj Khaled || mirajk at sfu dot ca
258 - Karine Kozlova - karine.kozlova@sfu.ca
260 - Veronica Zammitto - veronica.zammitto{a}gmail{d}com
299 - nima motamedi
299 - Hasti Seifi -hsa43@sfu.ca
300 - Lorna Boschman - lboschma@sfu.ca
301 - Benny Lee - bennyl@sfu.ca
302 - Daniel Ha - dha1@sfu.ca
303 - Jack Sam - jsama
304 - Yin He - yha43@sfu.ca
305 - Huaxin Wei - huaxinw@sfu.ca
306 -
307 - Erick Martinez - emartinez [at] sfu [dot] ca
308 - K.J. Lee - kla8@sfu.ca
309 - Alireza Davoodi - ada48@sfu.ca
310 - Chen Liu - liuchenl@sfu.ca

</pre>

'''Outside IM Lab'''

<pre>
33 - June Lester
34 - Davis Marques - dmarques at sfu dot ca
201 - Coco Jiang - cjiang@sfu.ca
202 - Shahin Sheidaei ssheidae [{a.t}] sfu.ca
203 - Aaron Smith - asmithe *a*t* sfu *.* ca
204 - Jack Stockholm - jstockho (at) sfu (dot) ca
205 - Meehae Song - meehaes@sfu.ca
206 - Bardia Mohabbati - mohabbati@sfu.ca
207 - Steven Barnes - sbarnes@sfu.ca
208 - Aaron Levisohn - alevisohn at sfu dot ca
225 - Ai Nakatani - anakatan@sfu.ca
226 - Karen Tanenbaum - ktanenba@sfu.ca
227 - Andrew Park - aparkd@sfu.ca
227- Majid Bagheri - mbagheri@sfu.ca
228 - Roham Sheikholeslami - msheikho@sfu.ca
237 - Susan Olubunmi - sosunbun@sfu.ca
238 - Melody Siadaty - msa70@sfu.ca
239 - Lesley Xie - zxie@sfu.ca
240 - Nazanin Kadivar - nka23@sfu.ca
245 - Mohsen Asadi - masadi@sfu.ca
246 - Nahal Hassanzadeh Salmasi - nhassanz@sfu.ca
247 - Billy Cheung - bcc7 sfu ca
248 - Dr.Nathalie Prevost - nprevost@sfu.ca
253 - Victor Chen - yvchen@sfu.ca
254 - Maryam Maleki - mmokhtarmaleki@yahoo.com
255 - Mohammad Yasser Khan - mykhan@sfu.ca
256 - Ty Mey Eap - teap@sfu.ca
289 - Parjad Sharifi - psa43@sfu.ca
290 - Caitlin Akai - cakai@sfu.ca
291 - Ulyana Yordan - uyordan@sfu.ca
292 - Mahshid Zeinaly Baraghoush - mzeinaly@sfu.ca
</pre>

Who's Where - Availability of Research staff

2009-07-30T00:19:53Z

Rmackenz: /* Rob */

For co-ordination and information purposes:

==Gordon==
Leave: March 30, 31 2009 
Vacation: July 20 - 31, 2009 

==Rob==

Summer - Weekdays, 9-6, 4 days a week.

==Wilson==

Weekdays: 12:00 - 19:00 (Room 3715)

Weekends: Undefined

Counter: 5 day

Server documentation

2009-07-03T22:53:34Z

Rmackenz: /* Vserver Hosts */

== Server List ==
=== Vserver Hosts ===
* [[Servers:Hercules|Hercules]] - Our main web vserver host.

=== Webservers ===
* [[Servers:Aki|Aki]] - Marek
* [[Servers:Beaufort|Beaufort]] - rec.iat.sfu.ca, Alissa N. Antle
* [[Servers:Clipper|Clipper]] - Replacement for whisper. Webserver, and local home-dir storage

* [[Servers:Corsair|Corsair]] - SIAT Virtual Server #1 <00 Marques> <01 Stockholm> <02 Paulin> <03 Prevost> <04 El-Nasr>

* [[Servers:Cossack|Cossack]] - TechOne Dedicated Server (Janet McCracken)
* [[Servers:Dolphin|Dolphin]] - --SLATED FOR REBUILD
* [[Servers:Dragonfly|Dragonfly]] - --SLATED FOR REBUILD
* [[Servers:Echo|Echo]] - Ron Wakkary
* [[Servers:Gaia|Gaia]] --RETIRED Mark Brady (main admin), and Aleksandra Dulic + Kenneth Newby
* [[Servers:HVILAB|HVILAB]] - Lyn Bartram, Chris Shaw| Drew Paulin (main admin)
* [[Servers:Kingfisher|Kingfisher]] - Our wiki server. Look at the [http://wiki.iat.sfu.ca Wiki Index]
* [[Servers:Lancer|Lancer]] - WSUS, Morae KeyServer, Ghost Server,
* [[Servers:Lightning|Lightning]] - Rob
* [[Servers:Pool|Pool]] - Marek
* [[Servers:Seagull|Seagull]] - Drupal, Apache (Jack Stockholm Joshua Tanenbaum) CMAP (Maia Engeli)
* [[Servers:Skimmer|Skimmer]]- SIAT Virtual Server #2 <00 Gromala> <01 Ty Mey Eap> <02 Antle> <03 Engeli> <04 NULL>
* [[Servers:Slinky|Slinky]] - Steve DiPaola - jViz Virtual Server <00 Slinky> <01 Null> <02 Null> <03 Null> <04 Null>
* [[Servers:Tirpitz|Tirpitz]] - VHost Server including the Research wiki. phpLDAPadmin
* [[Servers:Thunderbolt|Thunderbolt]] - John Nesbit, Griff Richards, Jerry Li
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SLATED FOR REBUILD

* [[Servers:Vindicator|Vindicator]]- SIAT Virtual Server #3 <00 NULL> <01 NULL> <02 NULL> <03 NULL> <04 NULL>

=== Infrastructure ===
* [[Servers:Nelson|Nelson]] - cvs server, Note: don't upgrade to cvs-1.12, many clients are not compatible with it
* [[Servers:Nebula|Nebula]] - Cluster
* [[Servers:Navajo|Navajo]] - Nagios, Splunk, Shutdown
* [[Servers:Hood|Hood]] - LDAP authentication-server
* [[Servers:Musashi|Musashi]] - "Projects" file-server (/home/projects)
* [[Servers:Yamato|Yamato]] - User home-dir file-server
* [[Servers:Stuka|Stuka]] - repurposed as the LTSP server (summer 2007)
* [[Servers:Bismarck|Bismarck]] - research mailing server, mailman, sassafras server, flexlm server
* [[Servers:Teleport|Teleport]] - Dedicated box for allowing users to access their files. SSH and FTP only. (previously titus)
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== Other ===
* [[Servers:Intendant|Intendant]] - Pat's box
* [[Servers:B17|B17]] - SGI Onyx1 (aka Banff Onyx) TO BE RECYCLED (decommissioned)
* [[Servers:B52|B52]] - SGI Onyx3200 (aka FakeSpace Onyx)
* [[Servers:sr-01482|sr-01482]] - IBM Server in Lyn B. area. has the following cnames: reciprocity.iat.sfu.ca, www.reciprocity.iat.sfu.ca, hvilab.iat.sfu.ca and www.hvilab.iat.sfu.ca

=== Unused Boxes ===
* [[Servers:Siat-sparc|Siat-sparc]] --SLATED FOR RECOVERY
* [[Servers:Csil-cluster|Csil-cluster]] --SLATED FOR RECOVERY
* [[Servers:Nerva|Nerva]] - development SPARC machine -turned off Sept. 14, 2007

=== Unknown ===
* [[Infrastructure:APC RackPDU|APC RackPDU]]
* [[Infrastucture:GigSwitchStack|GigSwitchStack]]

=== REBUILD ===
* [[Servers:Valiant|Valiant]] - 'sr-biov' Chris Shaw --SERVER REBUILD GENTOO
* [[Servers:Dragonfly|Dragonfly]] - 'sr-vagus' Diane Gromala --SLATED FOR REBUILD GENTOO
* [[Servers:Wildcat|Wildcat]] - turned off on date unknown --LTSP candidate
* [[Servers:Matchbox|Matchbox]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>
* [[Servers:Tonka|Tonka]] - turned off on Jan. 31, 2007 <s>--LTSP candidate</s>