Difference between revisions of "Einstein Status"
From Nuclear Physics Group Documentation Pages
Jump to navigationJump to search| Line 5: | Line 5: | ||
'''Remade the RAID5. Will redo the software, but if the RAID dies again we should think of a different machine to sub for einstein.''' | '''Remade the RAID5. Will redo the software, but if the RAID dies again we should think of a different machine to sub for einstein.''' | ||
| − | |||
| − | |||
| − | |||
# Check all services einstein currently provides. Locate as many custom scripts, etc. as is reasonable and label/copy them. | # Check all services einstein currently provides. Locate as many custom scripts, etc. as is reasonable and label/copy them. | ||
| − | ## [[DNS]] | + | ## [[Iptables]] |
| − | ## [[LDAP]] | + | ## [[DNS]] |
| − | ## [[Postfix]] | + | ## [[LDAP]] |
| − | ## [[AMaViS]] | + | ## [[Postfix]] |
| − | ## [[ClamAV]] | + | ## [[AMaViS]] |
| − | ## [[SpamAssassin]] | + | ## [[ClamAV]] |
| + | ## [[SpamAssassin]] | ||
## <del>[[Cyrus Imap|IMAP]] <code>cyradm localhost</code> gives "cannot connect to server". This all seems to be sasl-related. It'd be probably be easy if there was a way to have cyrus use PAM. [http://www.openldap.org/doc/admin23/sasl.html LDAP and sasl] <ins>Nevermind, that has to do with using SASL to authenticate LDAP</ins><code>saslauthd -v</code> lists pam and ldap as available authentication mechanisms, and /etc/sysconfig/saslauthd has an entry "MECH=pam"…! What am I missing? '''Tried making a new "mail.physics.unh.edu.crt" for tomato, but couldn't because that would have required revoking einstein's cert of the same name. Tried using the "tomato.unh.edu.crt" and "tomato.unh.edu.key", but is giving the same results as the "mail.physics.unh.edu.*" copied from einstein.''' Tried using tomato's UNH address instead of hostname: same result. '''I'm able to login using the <code>imtest</code> program, but the server doesn't send the same messages as shown [http://cyrusimap.web.cmu.edu/twiki/bin/view/Cyrus/ImtestByHand here].'''</del> Let's try Dovecot instead. It supposed to be simpler to maintain and is supported by RedHat. | ## <del>[[Cyrus Imap|IMAP]] <code>cyradm localhost</code> gives "cannot connect to server". This all seems to be sasl-related. It'd be probably be easy if there was a way to have cyrus use PAM. [http://www.openldap.org/doc/admin23/sasl.html LDAP and sasl] <ins>Nevermind, that has to do with using SASL to authenticate LDAP</ins><code>saslauthd -v</code> lists pam and ldap as available authentication mechanisms, and /etc/sysconfig/saslauthd has an entry "MECH=pam"…! What am I missing? '''Tried making a new "mail.physics.unh.edu.crt" for tomato, but couldn't because that would have required revoking einstein's cert of the same name. Tried using the "tomato.unh.edu.crt" and "tomato.unh.edu.key", but is giving the same results as the "mail.physics.unh.edu.*" copied from einstein.''' Tried using tomato's UNH address instead of hostname: same result. '''I'm able to login using the <code>imtest</code> program, but the server doesn't send the same messages as shown [http://cyrusimap.web.cmu.edu/twiki/bin/view/Cyrus/ImtestByHand here].'''</del> Let's try Dovecot instead. It supposed to be simpler to maintain and is supported by RedHat. | ||
| − | ## [[automount|/home]] | + | ## [[automount|/home]] |
| − | ## [[Samba]] | + | ## [[Samba]] If anyone needs samba access, they need to find us and have us make them a samba account. No LDAP integration. |
## [[Web Servers|Web]]? | ## [[Web Servers|Web]]? | ||
## Fortran compilers and things like that? (Also needs compat libs--'''Nope, tomato is 32-bit.''') | ## Fortran compilers and things like that? (Also needs compat libs--'''Nope, tomato is 32-bit.''') | ||
| − | |||
# Switch einstein <-> tomato, and then upgrade what was originally einstein | # Switch einstein <-> tomato, and then upgrade what was originally einstein | ||
# Look into making an einstein, tomato failsafe setup. | # Look into making an einstein, tomato failsafe setup. | ||
Revision as of 18:43, 3 January 2008
Status for Einstein
Massive amount of deployment documentation for RHEL 5
Remade the RAID5. Will redo the software, but if the RAID dies again we should think of a different machine to sub for einstein.
- Check all services einstein currently provides. Locate as many custom scripts, etc. as is reasonable and label/copy them.
- Iptables
- DNS
- LDAP
- Postfix
- AMaViS
- ClamAV
- SpamAssassin
IMAPLet's try Dovecot instead. It supposed to be simpler to maintain and is supported by RedHat.cyradm localhostgives "cannot connect to server". This all seems to be sasl-related. It'd be probably be easy if there was a way to have cyrus use PAM. LDAP and sasl Nevermind, that has to do with using SASL to authenticate LDAPsaslauthd -vlists pam and ldap as available authentication mechanisms, and /etc/sysconfig/saslauthd has an entry "MECH=pam"…! What am I missing? Tried making a new "mail.physics.unh.edu.crt" for tomato, but couldn't because that would have required revoking einstein's cert of the same name. Tried using the "tomato.unh.edu.crt" and "tomato.unh.edu.key", but is giving the same results as the "mail.physics.unh.edu.*" copied from einstein. Tried using tomato's UNH address instead of hostname: same result. I'm able to login using theimtestprogram, but the server doesn't send the same messages as shown here.- /home
- Samba If anyone needs samba access, they need to find us and have us make them a samba account. No LDAP integration.
- Web?
- Fortran compilers and things like that? (Also needs compat libs--Nope, tomato is 32-bit.)
- Switch einstein <-> tomato, and then upgrade what was originally einstein
- Look into making an einstein, tomato failsafe setup.
