TWiki . Admin . Sandstein

Configuration Log for sandstein

sandstein is a server from dalco
CPU: Dual Xeon 2.8, Hyperthreading
2 GB RAM
430 GB HD in a RAID 5 w/o hot spare
Disks are SATA

created user spindler
updated via ETH up2date server
placed two cron jobs for automatic update every morning
installed yum from yum-2.0.7-2.1.el3.test.noarch.rpm, used config from holz

Old Disk Layout

Filesystem	Size	Used	Avail	Use%	Mounted on
/dev/sda2	451G	2.5G	426G	1%	/
/dev/sda1	251M	19M	220M	8%	/boot
none	1004M	0	1004M	0%	/dev/shm

Planned Disk Layout
- /boot 254 MB
- swap 2 GB
- rootvg, 20 GB
  - / 1 GB
  - /var 2 GB
  - /var/log 1 GB
  - /var/cache 1 GB
  - /var/spool/up2date 1 GB
  - /tmp 1 GB
  - /usr 8 GB
- vgshares, 300 GB
  - /var/share/nds2005 50GB
  - /var/share/intern 100GB
  - /var/share/kurse 50GB
- vgdata, 100 GB
Repartitioning with fdisk and parted goofed the installation

Reinstallation of sandstein

Following the steps outlined above the machine was brought to the same state
Setup basic firewall (not actual syntax, rather EBNFed version)
- iptables -P [INPUT|OUTPUT|FORWARD] DROP
- iptables -I [INPUT|OUTPUT] -[s|d] 129.132.27.0/25 -j ACCEPT
- iptables -I OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
- iptables -I INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
Removal of not needed services
- for i in firstboot hpoj cups xinetd nfslock nfs portmap autofs sendmail pcmcia ip6tables isdn netfs kudzu ; do chkconfig --del $i; done
- Will be effective next reboot
Samba Setup
- Added shares nds2005, intern, kurse
- Added user samba (uid 501, gid 501) as on holz
- Added spindler,red,yellow,green,nds2005 to group samba
- Changed share directories to sbit group (chmod g+s /var/share/*)
- Changed permissions to rw for user and group (chmod ug+rwx /var/share/*)
- Removed permissions for others on /var/share/*
- Changed ownership to samba (chown -R samba:samba /var/share/*)
- Added users red,green,yellow,nds2005 with
  - useradd NAME -c "Samba User" -G samba -M -s /bin/false
  - smbpasswd -a NAME
- Added iptables for samba
  - iptables -I samba -p tcp -m multiport --dports netbios-ssn,netbios-dgm,netbios-ns,microsoft-ds -s 129.132.0.0/16 -j ACCEPT
  - iptables -I samba -p udp -m multiport --dports netbios-ssn,netbios-dgm,netbios-ns,microsoft-ds -s 129.132.0.0/16 -j ACCEPT
  - iptables -I INPUT -j samba
- Started smb
  - service smb start
  - chkconfig --levels 345 smb on

Configuration Changes

2004-12-17
- Added nds2004archive share to smb.conf
- Added user nds2004
- Added logical volume lvnds2004 to vgshares and made it available

Upgrade to RHEL 4 AS

2005-08-17
- Fresh install, as Upgrade from ES to AS is not possible
- Copied these configuration files
  - /etc/passwd /etc/group /etc/shadow
  - /etc/samba/*
  - /etc/ssh/*key*
- Installed netbackup from http://www.id.ethz.ch/services/list/storage/netbackup/homepages/storage/netbackup/
- Created new share for /var/cvsroot
- Restored /var/cvsroot from 2005-08-16
- Started firewall /root/setup-firewall.sh
- Installed rhn for eth
  - up2date -pu
  - up2date -f -u
- Added smb to startup
  - chkconfig --levels 345 smb on
- Removed unneeded services
  - cups cups-config-daemon smartd isdn netfs sendmail kudzu pcmcia

-- TorstenSpindler - 17 Nov 2004

Topic Sandstein . { Edit | Attach | Ref-By | Printable | Diffs | r1.5 | > | r1.4 | > | r1.3 | More }

Revision r1.5 - 17 Aug 2005 - 09:30 - TorstenSpindler Parents: WebHome > Servers	Copyright © 1999-2003 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.

This website has been archived and is no longer maintained.