Changes between Version 36 and Version 37 of Internal/SandboxConsoleSetup


Ignore:
Timestamp:
Jun 12, 2015, 9:00:46 PM (9 years ago)
Author:
msherman
Comment:

—

Legend:

Unmodified
Added
Removed
Modified

  • Internal/SandboxConsoleSetup

    v36 v37  
    22
    33''' Updating for 14.04, 06/12/2015 '''
    4 
    5 The core packages can be installed as a group via this command:
    6 {{{
    7 sudo apt-get install logwatch logrotate nfs-common libpam-ldap libnss-ldap cfengine3 emacs ntp fail2ban
    8 }}}
    9 
    10 Instead of individually.
    114
    125LDAP questions are answered below.
    … …  
    2215  1. em2 - Control
    2316
     17''' Package Installation '''
     18The core packages can be installed as a group via this command:
     19{{{
     20sudo apt-get install logwatch logrotate nfs-common libpam-ldap libnss-ldap cfengine3 emacs ntp fail2ban
     21}}}
     22
     23
    2424''' NFS Mounting '''
    25 We no longer do AutoFS/auto.home since there is a long standing lag bug with the daemon that is not fixable. We've now move to direct mounting of the /home mount point.
    26 
    27  1. add the follow line to '''/etc/fstab'''
     25 1. Add the following line to '''/etc/fstab'''
    2826    {{{
    2927    home:/export/home /home nfs _netdev,auto 0  0
    3028    }}}
    31 If you are migrating from autofs, you will need to disable autofs on startup. In some cases this is managed by upstart. A reference for removing upstart services can be found [http://askubuntu.com/questions/171798/remove-services-from-upstart here]. In ubuntu 10.04 modify /etc/init/autofs.conf and change the start on line to
    32 {{{
    33 start on never
    34 }}}
    3529
    3630''' LDAP Authentication '''
    37 Since Autofs is not use this process is some what simpler.
     31
    3832 1. Install ldap libraries. This process will ask you a bunch of ldap related questions that will be used to prime the ldap.confs (there are 2). It's not critical to get them correct as we're just going to replace those conf's any way. (Accepting the defaults is ok).
    3933
    40  1. The '''/etc/ldap.conf''' is one of two files that configures the ldap client. The non-comment lines in this file are as follows:
     34 1. The '''/etc/ldap.conf''' is one of two files that configures the ldap client. The non-commented lines in this file are as follows:
    4135    {{{
    4236    base dc=orbit-lab,dc=org
    … …  
    4842    nss_initgroups_ignoreusers backup,bin,daemon,games,gnats,irc,libuuid,libvirt-qemu,list,lp,mail,man,messagebus,news,ntp,postfix,proxy,root,sshd,statd,sync,sys,syslog,usbmux,uucp,www-data
    4943    }}}
    50     You could edit this file and change all the values to reflect this (leaveing the rest as comments) or simply replace the one you have with this [attachment:ldap.conf one]. You can also check the non-comment lines by executing:
     44    You could edit this file and change all the values to reflect this (leaving the rest as comments) or simply replace the one you have with this [attachment:ldap.conf one]. You can also check the non-comment lines by executing:
    5145    {{{
    5246    egrep -v "^#|^$" /etc/ldap.conf
    … …  
    7569    }}}
    7670    Again you can edit it directly or copy this [attachment:nsswitch.conf version].
    77  1. Copy or create the '''/etc/ldap.secret''' file
    78  1. Finally add the follow line to the '''/etc/sudoers''' file (note this is done with the visudo command).
     71 1. Copy or create the '''/etc/ldap.secret''' file from another sandbox. (needs root permissions)
     72 1. Finally add the follow line to the '''/etc/sudoers''' file (note this is done with the  visudo command). This has to be done manually.
    7973    {{{
    8074    %admin ALL=(ALL) ALL
    8175    %sysadmin ALL=NOPASSWD: ALL
    8276    }}}
    83     This has to be done manually.
    84 
    85   1.Configure networking for the node facing interface of the console e.g.:
    86 {{{
    87 auto eth1
    88 iface eth1 inet static
    89 address 10.14.0.10
    90 netmask 255.255.0.0
    91 }}}
    92 
    93 
     77 1. Configure networking for the node facing interface of the console and change the address to the appropriate subnet for the sandbox's control vlan. e.g.:
     78    {{{
     79    auto em2
     80    iface em2 inet static
     81    address 10.14.0.10
     82    netmask 255.255.0.0
     83    }}}
    9484 15. We need to make sure machine have fully qualified host name (some services depend on it). So:
    9585{{{