Configuration Log for sandstein

• sandstein is a server from dalco
• CPU: Dual Xeon 2.8, Hyperthreading
• 2 GB RAM
• 430 GB HD in a RAID 5 w/o hot spare
• Disks are SATA

• created user spindler
• updated via ETH up2date server
• placed two cron jobs for automatic update every morning
• installed yum from yum-2.0.7-2.1.el3.test.noarch.rpm, used config from holz

• Old Disk Layout

• Planned Disk Layout
  • /boot 254 MB
  • swap 2 GB
  • rootvg, 20 GB
    • / 1 GB
    • /var 2 GB
    • /var/log 1 GB
    • /var/cache 1 GB
    • /var/spool/up2date 1 GB
    • /tmp 1 GB
    • /usr 8 GB
  • vgshares, 300 GB
    • /var/share/nds2005 50GB
    • /var/share/intern 100GB
    • /var/share/kurse 50GB
  • vgdata, 100 GB
• Repartitioning with fdisk and parted goofed the installation

Reinstallation of sandstein

• Following the steps outlined above the machine was brought to the same state
• Setup basic firewall (not actual syntax, rather EBNFed version)
  • iptables -P [INPUT|OUTPUT|FORWARD] DROP
  • iptables -I [INPUT|OUTPUT] -[s|d] 129.132.27.0/25 -j ACCEPT
  • iptables -I OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
  • iptables -I INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
• Removal of not needed services
  • for i in firstboot hpoj cups xinetd nfslock nfs portmap autofs sendmail pcmcia ip6tables isdn netfs kudzu ; do chkconfig --del $i; done
  • Will be effective next reboot
• Samba Setup
  • Added shares nds2005, intern, kurse
  • Added user samba (uid 501, gid 501) as on holz
  • Added spindler,red,yellow,green,nds2005 to group samba
  • Changed share directories to sbit group (chmod g+s /var/share/*)
  • Changed permissions to rw for user and group (chmod ug+rwx /var/share/*)
  • Removed permissions for others on /var/share/*
  • Changed ownership to samba (chown -R samba:samba /var/share/*)
  • Added users red,green,yellow,nds2005 with
    • useradd NAME -c "Samba User" -G samba -M -s /bin/false
    • smbpasswd -a NAME
  • Added iptables for samba
    • iptables -I samba -p tcp -m multiport --dports netbios-ssn,netbios-dgm,netbios-ns,microsoft-ds -s 129.132.0.0/16 -j ACCEPT
    • iptables -I samba -p udp -m multiport --dports netbios-ssn,netbios-dgm,netbios-ns,microsoft-ds -s 129.132.0.0/16 -j ACCEPT
    • iptables -I INPUT -j samba
  • Started smb
    • service smb start
    • chkconfig --levels 345 smb on

Configuration Changes

• 2004-12-17
  • Added nds2004archive share to smb.conf
  • Added user nds2004
  • Added logical volume lvnds2004 to vgshares and made it available

Upgrade to RHEL 4 AS

• 2005-08-17
  • Fresh install, as Upgrade from ES to AS is not possible
  • Copied these configuration files
    • /etc/passwd /etc/group /etc/shadow
    • /etc/samba/*
    • /etc/ssh/*key*
  • Installed netbackup from http://www.id.ethz.ch/services/list/storage/netbackup/homepages/storage/netbackup/
  • Created new share for /var/cvsroot
  • Restored /var/cvsroot from 2005-08-16
  • Started firewall /root/setup-firewall.sh
  • Installed rhn for eth
    • up2date -pu
    • up2date -f -u
  • Added smb to startup
    • chkconfig --levels 345 smb on
  • Removed unneeded services
    • cups cups-config-daemon smartd isdn netfs sendmail kudzu pcmcia