Difference between revisions of "Client Recipe"

From Nuclear Physics Group Documentation Pages
Jump to navigationJump to search
m (Printer)
 
(18 intermediate revisions by 3 users not shown)
Line 1: Line 1:
 
A simple ''n''-step process to set up a client lickety-split:
 
A simple ''n''-step process to set up a client lickety-split:
−
# Install Fedora in the typical fashion, skipping the steps for creating a default user and network authentication
+
 
−
# Log in as root
+
== CentOS 7 ==
−
# Run system-config-network
+
# Run the CentOS installer disk.
−
# If there isn't one already, add an ethernet device on eth0.
+
## Localization:
−
# If this client is not in the server room (and therefore not going to use a VLAN), skip to the next full step
+
### Date & Time: Americas/New York
−
## Choose to statically set the IP address to an available local number (10.0.0.*)
+
### Keyboard: English (US)
−
## Give the device the alias "farm".
+
### Language Support: English (United States)
−
## Make sure it has onboot=yes so that it automatically comes up
+
## Software:
−
## Run <code>vconfig add eth0 2</code> to create a virtual device "eth0.2"
+
### Installation Source: Local Media
−
## Use system-config-network to add an ethernet device to eth0.2
+
### Software Selection: Select GNOME Desktop with the following Add-ons:
−
# Alias it "unh"
+
#### GNOME Applications
−
# Make sure it has onboot=yes so that it automatically comes up
+
#### Internet Applications
−
# Choose to statically set the IP address to whatever was registered for the client
+
#### Office Suite and Productivity
−
# Set the gateway to 132.177.88.1
+
#### Compatibility Libraries
−
# Under the general network configuration "DNS" tab, put the appropriate IPs of einstein and roentgen for primary and secondary DNS (local for farm as the primary connection, unh for unh as the primary connection)
+
## Installation Destination: Disk to be installed (Note that Automatic Partitioning is suggested. You may need to reclaim space if the drive is not new).
−
# Save the changes made with system-config-network
+
## Network and Hostname:
−
# If a virtual device was added:
+
### For wired clients:
−
## Open /etc/sysconfig/network-scripts/ifcfg-unh in a text editor
+
#### First select "Configure" in the bottom right.
−
## Add the line <code>VLAN=yes</code>, and save
+
#### In the General tab, select "Automatically connect to this network when it is available".
−
# If there are any more devices already present, disable, remove or configure them as well. Whatever you do, don't leave them defaulted to DHCP mode, otherwise their existence will change /etc/resolv.conf !
+
#### In the IPv4 Settings tab, select Manual for the Method.
−
# Run gtk-authconfig
+
#### Add an appropriate IP, Netmask, and Gateway (these are assigned to us by the UNH network, if you don't know the IP to give it, use DHCP instead).
−
# Check "Enable LDAP Support" under the "User Information" and "Authentication" tabs
+
#### Add the appropriate DNS servers.
−
# Click "Configure LDAP..."
+
#### Add "unh.edu" as the Search Domain.
−
# The base DN is dc=physics,dc=unh,dc=edu and the server is einstein.unh.edu.
+
#### Save the configuration.
−
# "Download CA Certificate" doesn't ever seem to work, so get "unh_physics_ca.crt" from einstein and put it in /etc/openldap/cacerts" (hint: <code>scp</code>).
+
### (TODO: Figure out how to set up wireless clients with OpenVPN.
−
# Click OK in LDAP Settings.
+
### Set the hostname in the bottom left corner (this should include the domain, ex; 'benfranklin.unh.edu')
−
# Click OK in authconfig
+
## Select Begin Installation
−
## If this is an Ubuntu workstation, /etc/openldap is actually /etc/ldap, or something like that. It'll make sense when you see it.
+
## Set the root password.
−
# Disable SELinux
+
## Create a user with the following credentials:
−
# Disable NetworkManager if it hasn't already been disabled. (hint: chkconfig)
+
### Full name: Test
−
# Copy the appropriate content into the [[Autofs Configuration Files]]
+
### Username: test
−
## If this is an Ubuntu workstation, you most likely need to install the package nfs-common.
+
### Uncheck 'Make this user administrator'
 +
### Check 'Require a password to use this account'
 +
### Set a secure password (even though this account is temporary, the computer may still be vulnerable to network attacks).
 
# Reboot
 
# Reboot
−
 
+
# Accept the EULA and select 'Finish Configuration'
−
== ALSO NEEDS THE IPTABLES SETUP! ==
+
# Kdump: Leave at default settings
 +
# Log in to the Test account and proceed to set up [[SSSD]], [[Automount]], and [[Printer]].

Latest revision as of 21:41, 10 February 2015

A simple n-step process to set up a client lickety-split:

CentOS 7

  1. Run the CentOS installer disk.
    1. Localization:
      1. Date & Time: Americas/New York
      2. Keyboard: English (US)
      3. Language Support: English (United States)
    2. Software:
      1. Installation Source: Local Media
      2. Software Selection: Select GNOME Desktop with the following Add-ons:
        1. GNOME Applications
        2. Internet Applications
        3. Office Suite and Productivity
        4. Compatibility Libraries
    3. Installation Destination: Disk to be installed (Note that Automatic Partitioning is suggested. You may need to reclaim space if the drive is not new).
    4. Network and Hostname:
      1. For wired clients:
        1. First select "Configure" in the bottom right.
        2. In the General tab, select "Automatically connect to this network when it is available".
        3. In the IPv4 Settings tab, select Manual for the Method.
        4. Add an appropriate IP, Netmask, and Gateway (these are assigned to us by the UNH network, if you don't know the IP to give it, use DHCP instead).
        5. Add the appropriate DNS servers.
        6. Add "unh.edu" as the Search Domain.
        7. Save the configuration.
      2. (TODO: Figure out how to set up wireless clients with OpenVPN.
      3. Set the hostname in the bottom left corner (this should include the domain, ex; 'benfranklin.unh.edu')
    5. Select Begin Installation
    6. Set the root password.
    7. Create a user with the following credentials:
      1. Full name: Test
      2. Username: test
      3. Uncheck 'Make this user administrator'
      4. Check 'Require a password to use this account'
      5. Set a secure password (even though this account is temporary, the computer may still be vulnerable to network attacks).
  2. Reboot
  3. Accept the EULA and select 'Finish Configuration'
  4. Kdump: Leave at default settings
  5. Log in to the Test account and proceed to set up SSSD, Automount, and Printer.
Retrieved from "https://nuclear.unh.edu/wiki/index.php?title=Client_Recipe&oldid=5746"