Sysadmin

Sysadmin Responsibilities

This is the basic list of tasks that Earlham CS system administrators are in charge of.

Responsibilities	Wilson	Eamon	Vitalii	James	Bret
Install software on Debian (ACL)
Install software on FreeBSD (servers)
Make a CS user account
Change users CS password
Add DNS & DHCP entry
Being able to edit wiki
Make a CS wiki account
Add people to different groups (ldap)
Modification and maintenance of Nagios
DD a new ACL image
Set up a new ACL
Shut down / start up of the entire machine room
Creating and configuring mailing lists (electron)
Admin list moderating
Backups and restore (bacula)
Create and configure jails
VMware

Sysadmin basic Training

This is the list of skills that our System Administrators are trained during their orientation.

Training Sections	Wilson	Eamon	Vitalii	James	Bret
Installing operating systems (Debian and FreeBSD), including single-user mode
Installing packages
*nix Filesystem layout
Command line tools including I/O redirections and pipes
TCP, UDP and ICMP packets, including 3-way handshake
Ports
DNS
DHCP
Network debugging tools (tcpdump, ping, traceroute, netstat)
Simple shell scripting
Jails

Sysadmin 2014 to do list:

• () Spam Filter (CP, JR)
• () lockd install on electron (Jim)
• () New proto

• (I) check hydra with Charlie
• (?) On ACLs login disappears after pressing cancel (Reported JR)

• () new-proto from the outside world
• Getting rid of Quark
  
• ACL screensaver, leave only lightweight? (JR)
• Removing mailman form quark
  
• Mailman Heather (not all of them accepted the changes electron to cs.earlham.edu)
  
• (W) Script for changing users password
• (W) Script for changing and adding groups
• (W) Brushing the add a user script
• (W) Check machines chooser can choose from
• (E) Script that will send an e-mail to all people
• (E) Improve nagios settings
• (W) Can we change Kristin Muterspaw CS username (from kmmuter11 to buzzlightyear)

• • Done
• Wireshark should be run only be 410 students (Reported JR) (Fixed)
• Re-imaging ENI machine (ACL21)
  
• () DNS troubles (Reported CP)
• (I) fab lab list (HL)
• (I) Hassan, SSH Trouble to Electron (Hassan, JR)

Documentation:

Wilson:

• DNS & DHCP (done)
• Sage (done)
• Add User (done)
• Password change (done)
• Firewall
• Add/change group (done)

Eamon:

• Cups
• PSCP
• PSSH (done)

Ivan

• Cloning ACL box

Systems Administration Documentation

Works in Progress To do before Fall 13 starts Handbook (WIP) Temporary Page for Wiki Adjustment Upgrading FreeBSD Fail2Ban on FreeBSD Running Nessus Things to check when things go down Aaron's How-To Pages Son's "Cook" Pages Sysadmin:Installing ACLs

Admin Tasks NEW User Management NEW CUPS/Printer Adiministration NEW Add a computer NEW Shutdown/Start NEW Mailman NEW Nagios Backup (needs to be updated after new setup) Contacting all users Welcoming a new sysadmin to the fold RT Ticketing Add a computer

Services Apache2 Databases NEW DNS and DHCP Email LVM User Management NFS Printers NEW Sage System Imager Trac + svn Virtualization ZFS NEW New Xen Server

Servers Physical Servers Virtual Servers and Jails Service Chart Monitoring Quark Forty-two Lovelace Proto Retired Servers

ACL Workstations ACL Installation procedure ACL Package Information ACL Locations Software for Chemistry ACLs Proposed ACL Update policy NEW Run Command on all ACLS

Networking Network Layout (as of 08/2006) D224 cable plant Fiber plans Switches Rack notes Public Network Old Network Topo Figures Network layout (May 2007) Alt Network path Sysadmin:UPS Setup

Miscellaneous Contact Information Phone Numbers Web Sites Authentication Information Power Failure UPS Generating SSL Certificates Power draws Working with Sun Hardware Sysadmin:Passwords Patching Linux Kernel Patching FreeBSD Kernel Patching Cable Ends NEW Virtualization Comparison

Old

Important Notes:

• ALL of the admin CVS/SVN stuff has been centralized to trac.cs.earlham.edu/admin. You'll need to create a username/password for yourself by running (from quark):

htpasswd /usr/local/trac/adminontrac.htpasswd <username>

• To check out the repository, run (from quark):

svn checkout file:///clients/users/svn/admin

• Chatting on IRC

Curent Sysadmins 2013:

SysAdmin Name	Year	Working time	Progress notes
Wilson	SO	100%	link to notes
Demise	SR	100%	link to notes
Craig	FR	100%	link to notes
Zane	SO	100%	link to notes
Jordan	SO	100%	link to notes
Sonny	JU	100%	link to notes
Elena	SR	40%	link to notes
Kristin	JU	40%	link to notes
Aaron	SR	20%	link to notes
Michael	SR	0%	link to notes