Difference between revisions of "Client Recipe"

From Nuclear Physics Group Documentation Pages
Jump to navigationJump to search
(working on better tar/script)
m (Printer)
 
(22 intermediate revisions by 4 users not shown)
Line 1: Line 1:
 
A simple ''n''-step process to set up a client lickety-split:
 
A simple ''n''-step process to set up a client lickety-split:
# Install Fedora in the typical fashion, skipping the steps for creating a default user and network authentication
+
 
# Log in as root
+
== CentOS 7 ==
# Run system-config-network
+
# Run the CentOS installer disk.
# If there isn't one already, add an ethernet device on eth0.
+
## Localization:
# If this client is not in the server room (and therefore not going to use a VLAN), skip to the next full step
+
### Date & Time: Americas/New York
## Choose to statically set the IP address to an available local number (10.0.0.*)
+
### Keyboard: English (US)
## Give the device the alias "farm".
+
### Language Support: English (United States)
## Run <code>vconfig add eth0 2</code> to create a virtual device "eth0.2"
+
## Software:
## Use system-config-network to add an ethernet device to eth0.2
+
### Installation Source: Local Media
# Alias it "unh"
+
### Software Selection: Select GNOME Desktop with the following Add-ons:
# Choose to statically set the IP address to whatever was registered for the client
+
#### GNOME Applications
# Set the gateway to 132.177.88.1
+
#### Internet Applications
# Under the general network configuration "DNS" tab, put the appropriate IPs of einstein and roentgen for primary and secondary DNS (local for farm as the primary connection, unh for unh as the primary connection)
+
#### Office Suite and Productivity
# Save the changes made with system-config-network
+
#### Compatibility Libraries
# If a virtual device was added:
+
## Installation Destination: Disk to be installed (Note that Automatic Partitioning is suggested. You may need to reclaim space if the drive is not new).
## Open /etc/sysconfig/network-scripts/ifcfg-unh in a text editor
+
## Network and Hostname:
## Add the line <code>VLAN=yes</code>, and save
+
### For wired clients:
# If there are any more devices already present, disable, remove or configure them as well. Whatever you do, don't leave them defaulted to DHCP mode, otherwise their existence will change /etc/resolv.conf !
+
#### First select "Configure" in the bottom right.
# Run gtk-authconfig
+
#### In the General tab, select "Automatically connect to this network when it is available".
# Check "Enable LDAP Support" under the "User Information" and "Authentication" tabs
+
#### In the IPv4 Settings tab, select Manual for the Method.
# Click "Configure LDAP..."
+
#### Add an appropriate IP, Netmask, and Gateway (these are assigned to us by the UNH network, if you don't know the IP to give it, use DHCP instead).
# The base DN is dc=physics,dc=unh,dc=edu and the server is einstein.unh.edu.
+
#### Add the appropriate DNS servers.
# "Download CA Certificate" doesn't ever seem to work, so get "unh_physics_ca.crt" from einstein and put it in /etc/openldap/cacerts" (hint: <code>scp</code>).
+
#### Add "unh.edu" as the Search Domain.
# Click OK in LDAP Settings.
+
#### Save the configuration.
# Click OK in authconfig
+
### (TODO: Figure out how to set up wireless clients with OpenVPN.
# Copy the appropriate content into the [[Autofs Configuration Files]]
+
### Set the hostname in the bottom left corner (this should include the domain, ex; 'benfranklin.unh.edu')
 +
## Select Begin Installation
 +
## Set the root password.
 +
## Create a user with the following credentials:
 +
### Full name: Test
 +
### Username: test
 +
### Uncheck 'Make this user administrator'
 +
### Check 'Require a password to use this account'
 +
### Set a secure password (even though this account is temporary, the computer may still be vulnerable to network attacks).
 
# Reboot
 
# Reboot
 +
# Accept the EULA and select 'Finish Configuration'
 +
# Kdump: Leave at default settings
 +
# Log in to the Test account and proceed to set up [[SSSD]], [[Automount]], and [[Printer]].

Latest revision as of 21:41, 10 February 2015

A simple n-step process to set up a client lickety-split:

CentOS 7

  1. Run the CentOS installer disk.
    1. Localization:
      1. Date & Time: Americas/New York
      2. Keyboard: English (US)
      3. Language Support: English (United States)
    2. Software:
      1. Installation Source: Local Media
      2. Software Selection: Select GNOME Desktop with the following Add-ons:
        1. GNOME Applications
        2. Internet Applications
        3. Office Suite and Productivity
        4. Compatibility Libraries
    3. Installation Destination: Disk to be installed (Note that Automatic Partitioning is suggested. You may need to reclaim space if the drive is not new).
    4. Network and Hostname:
      1. For wired clients:
        1. First select "Configure" in the bottom right.
        2. In the General tab, select "Automatically connect to this network when it is available".
        3. In the IPv4 Settings tab, select Manual for the Method.
        4. Add an appropriate IP, Netmask, and Gateway (these are assigned to us by the UNH network, if you don't know the IP to give it, use DHCP instead).
        5. Add the appropriate DNS servers.
        6. Add "unh.edu" as the Search Domain.
        7. Save the configuration.
      2. (TODO: Figure out how to set up wireless clients with OpenVPN.
      3. Set the hostname in the bottom left corner (this should include the domain, ex; 'benfranklin.unh.edu')
    5. Select Begin Installation
    6. Set the root password.
    7. Create a user with the following credentials:
      1. Full name: Test
      2. Username: test
      3. Uncheck 'Make this user administrator'
      4. Check 'Require a password to use this account'
      5. Set a secure password (even though this account is temporary, the computer may still be vulnerable to network attacks).
  2. Reboot
  3. Accept the EULA and select 'Finish Configuration'
  4. Kdump: Leave at default settings
  5. Log in to the Test account and proceed to set up SSSD, Automount, and Printer.