Difference between revisions of "Client Recipe"

From Nuclear Physics Group Documentation Pages
Jump to navigationJump to search
m (Printer)
 
(17 intermediate revisions by 3 users not shown)
Line 1: Line 1:
 
A simple ''n''-step process to set up a client lickety-split:
 
A simple ''n''-step process to set up a client lickety-split:
−
# Install Fedora in the typical fashion, skipping the steps for creating a default user and network authentication
+
 
−
# Log in as root
+
== CentOS 7 ==
−
# Disable NetworkManager if it hasn't already been disabled. (hint: chkconfig)
+
# Run the CentOS installer disk.
−
# Run system-config-network
+
## Localization:
−
# If there isn't one already, add an ethernet device on eth0.
+
### Date & Time: Americas/New York
−
# If this client is not in the server room (and therefore not going to use a VLAN), skip to the next full step
+
### Keyboard: English (US)
−
## Choose to statically set the IP address to an available local number (10.0.0.*)
+
### Language Support: English (United States)
−
## Give the device the alias "farm".
+
## Software:
−
## Make sure it has onboot=yes so that it automatically comes up
+
### Installation Source: Local Media
−
## Run <code>vconfig add eth0 2</code> to create a virtual device "eth0.2" while the network is up. Might need to run <code>ifup eth0</code>.
+
### Software Selection: Select GNOME Desktop with the following Add-ons:
−
## Use system-config-network to add an ethernet device to eth0.2
+
#### GNOME Applications
−
# Alias it "unh"
+
#### Internet Applications
−
# Make sure it has onboot=yes in the so that it automatically comes up
+
#### Office Suite and Productivity
−
# Choose to statically set the IP address to whatever was registered for the client
+
#### Compatibility Libraries
−
# Set the gateway to 132.177.88.1
+
## Installation Destination: Disk to be installed (Note that Automatic Partitioning is suggested. You may need to reclaim space if the drive is not new).
−
# Under the general network configuration "DNS" tab, put the appropriate IPs of einstein and roentgen for primary and secondary DNS (local for farm as the primary connection, unh for unh as the primary connection)
+
## Network and Hostname:
−
# Save the changes made with system-config-network
+
### For wired clients:
−
# If a virtual device was added:
+
#### First select "Configure" in the bottom right.
−
## Open /etc/sysconfig/network-scripts/ifcfg-unh in a text editor
+
#### In the General tab, select "Automatically connect to this network when it is available".
−
## Add the line <code>VLAN=yes</code>, and save
+
#### In the IPv4 Settings tab, select Manual for the Method.
−
# If there are any more devices already present, disable, remove or configure them as well. Whatever you do, don't leave them defaulted to DHCP mode, otherwise their existence will change /etc/resolv.conf !
+
#### Add an appropriate IP, Netmask, and Gateway (these are assigned to us by the UNH network, if you don't know the IP to give it, use DHCP instead).
−
# Run gtk-authconfig
+
#### Add the appropriate DNS servers.
−
# Check "Enable LDAP Support" under the "User Information" and "Authentication" tabs
+
#### Add "unh.edu" as the Search Domain.
−
# Click "Configure LDAP..."
+
#### Save the configuration.
−
# The base DN is dc=physics,dc=unh,dc=edu and the server is einstein.unh.edu.
+
### (TODO: Figure out how to set up wireless clients with OpenVPN.
−
# "Download CA Certificate" doesn't ever seem to work, so get "unh_physics_ca.crt" from einstein and put it in /etc/openldap/cacerts" (hint: <code>scp</code>).
+
### Set the hostname in the bottom left corner (this should include the domain, ex; 'benfranklin.unh.edu')
−
# Click OK in LDAP Settings.
+
## Select Begin Installation
−
# Click OK in authconfig
+
## Set the root password.
−
## If this is an Ubuntu workstation, /etc/openldap is actually /etc/ldap, or something like that. It'll make sense when you see it.
+
## Create a user with the following credentials:
−
# Disable SELinux
+
### Full name: Test
−
# Copy the appropriate content into the [[Autofs Configuration Files]]
+
### Username: test
−
## If this is an Ubuntu workstation, you most likely need to install the package nfs-common.
+
### Uncheck 'Make this user administrator'
 +
### Check 'Require a password to use this account'
 +
### Set a secure password (even though this account is temporary, the computer may still be vulnerable to network attacks).
 
# Reboot
 
# Reboot
−
 
+
# Accept the EULA and select 'Finish Configuration'
−
== ALSO NEEDS THE IPTABLES SETUP! ==
+
# Kdump: Leave at default settings
 +
# Log in to the Test account and proceed to set up [[SSSD]], [[Automount]], and [[Printer]].

Latest revision as of 21:41, 10 February 2015

A simple n-step process to set up a client lickety-split:

CentOS 7

  1. Run the CentOS installer disk.
    1. Localization:
      1. Date & Time: Americas/New York
      2. Keyboard: English (US)
      3. Language Support: English (United States)
    2. Software:
      1. Installation Source: Local Media
      2. Software Selection: Select GNOME Desktop with the following Add-ons:
        1. GNOME Applications
        2. Internet Applications
        3. Office Suite and Productivity
        4. Compatibility Libraries
    3. Installation Destination: Disk to be installed (Note that Automatic Partitioning is suggested. You may need to reclaim space if the drive is not new).
    4. Network and Hostname:
      1. For wired clients:
        1. First select "Configure" in the bottom right.
        2. In the General tab, select "Automatically connect to this network when it is available".
        3. In the IPv4 Settings tab, select Manual for the Method.
        4. Add an appropriate IP, Netmask, and Gateway (these are assigned to us by the UNH network, if you don't know the IP to give it, use DHCP instead).
        5. Add the appropriate DNS servers.
        6. Add "unh.edu" as the Search Domain.
        7. Save the configuration.
      2. (TODO: Figure out how to set up wireless clients with OpenVPN.
      3. Set the hostname in the bottom left corner (this should include the domain, ex; 'benfranklin.unh.edu')
    5. Select Begin Installation
    6. Set the root password.
    7. Create a user with the following credentials:
      1. Full name: Test
      2. Username: test
      3. Uncheck 'Make this user administrator'
      4. Check 'Require a password to use this account'
      5. Set a secure password (even though this account is temporary, the computer may still be vulnerable to network attacks).
  2. Reboot
  3. Accept the EULA and select 'Finish Configuration'
  4. Kdump: Leave at default settings
  5. Log in to the Test account and proceed to set up SSSD, Automount, and Printer.
Retrieved from "https://nuclear.unh.edu/wiki/index.php?title=Client_Recipe&oldid=5746"