Sysadmin:Installing ACLs

primarily notes for aaron and son as we set this up.

setting up the mirror:

- Create a dedicated user for the whole mirror.
- Create a seperate directory for the mirror, writeable by the new user.
- Place the ftpsync script in the mirror user's $HOME/bin (or just $HOME)
- Place the ftpsync.conf.sample into $HOME/etc as ftpsync.conf and edit
  it to suit your system.  You should at the very least change the TO=
  and RSYNC_HOST lines.
- Create $HOME/log (or wherever you point $LOGDIR to)

- excluded the architectures we don't want

run ftpsync

tftp setup:

added to /etc/default/tftpd-hpa

 RUN_DAEMON="yes"
 OPTIONS="-l -s /var/lib/tftpboot"

also did:

 mkdir -p /var/lib/tftpboot
 /etc/init.d/tftpd-hpa start

http://fai-project.org/fai-guide/_anchor_id_inst_xreflabel_inst_installing_fai.html#_anchor_id_requirements_xreflabel_requirements_requirements

http://fai-project.org/fai-guide/_anchor_id_impatient_xreflabel_impatient_quickstart_for_the_impatient_user.html

http://www.debian-administration.org/articles/478

Basically, this is what you want to do in order to install the very basic fai server:

http://wiki.cs.earlham.edu/images/c/c4/How_to_setup_a_FAI_Install_server_on_debian_squeeze_a_Linux_sysadmin_blog.pdf

http://wiki.cs.earlham.edu/images/c/c4/Installing-fai.pdf

apt-get install vim emacs build-essential freeglut3-dev freeglut3-dbg dhcp3-client ldap-client libpam-ldap libnss-ldap nslcd php5

apt-get install gedit-latex-plugin texlive-fonts-recommended latex-beamer texpower texlive-pictures texlive-latex-extra texpower-examples imagemagick

apt-get install lprng a2ps

Configuring LDAP (Ubuntu): Source: http://naidutrk.blogspot.com/2012/03/setting-up-ldap-client-authentication.html

ii) open /etc/nsswitch.conf [ remember you need to be sudo to edit this file ]

   append "ldap" word to the following lines 

   #Original file looks like this 
   passwd: compat 
   group : compat  
   shadow: compat 

   #After appending "ldap" lines look like these

   passwd: compat ldap

   group : compat ldap  

   shadow: compat ldap 
  

iii) Comment out the line "rootbinddn" [ not sure why we need to do that ]

if you don't want to create home directories on the work station but want to create them on the nfs server, you can directly go to step vi).

iv) open the file /etc/pam.d/login and paste the below line

 session required pam_mkhomedir.so skel=/etc/skel umask=0022 

v) open the file /etc/pam.d/lightdm paste the below line

 session required pam_mkhomedir.so skel=/etc/skel umask=0022

vi) issue command [with out quotes] "sudo update-rc.d nslcd enable"