Earthdevruis » History » Version 3
Joseph Foley, 2013-03-15 14:32
AFS/Kerberos instructions and new users
1 | 1 | Joseph Foley | h1. Earthdevruis |
---|---|---|---|
2 | |||
3 | @earth.dev.ru.is@ is a high-performance linux server owned by the RU Speech Research group under Jón Gúðnason <jg@ru.is>. The machine lives in DevNet (the development network in the RU basement). |
||
4 | |||
5 | The main DevNet contact is Joe Foley <foley@ru.is>. He also installed th machine machine. |
||
6 | |||
7 | h2. Installation |
||
8 | |||
9 | h3. Turn on PXE for network boot/install |
||
10 | |||
11 | # Reboot |
||
12 | # While the machine is rebooting, hit F2 (or F1) so that it goes to BIOS setup |
||
13 | ## Click on system options, then networking |
||
14 | ## Set the network adapter to have PXE enabled |
||
15 | ## Save options |
||
16 | # Make sure that the machine is connected to the DevNet switches |
||
17 | # Reboot |
||
18 | |||
19 | h3. Netboot and pick installer |
||
20 | |||
21 | # After PXE initializes, you should get an installer menu |
||
22 | # Choose Ubuntu 12.04.2 64-bit (Alternate) |
||
23 | # You'll have to pick region and keyboard. You want to pick the Icelandic keyboard |
||
24 | |||
25 | h3. Partitioning the hard drive |
||
26 | |||
27 | It's a good idea to separate the operating system, home directory, and data storage. In addition, you will need a swap file and an AFS cache partition. |
||
28 | The AFS cache partition should be ext2 or ext3. To make this easier to manage, you should have all except for a boot partition in LVM (logical volume manager) |
||
29 | |||
30 | # Choose manual partitioning of hard drive |
||
31 | # Create a /boot primary paritition of around 300MB. Make sure it is "bootable" |
||
32 | # Go into the LVM manager |
||
33 | ## Create a new physical volume with the remaining space on the drive |
||
34 | ## Create these logical volumes with these names and sizes. You'll need to remember where they should be mounted also. |
||
35 | 2 | Joseph Foley | *** afscache 2GB (for @/var/cache/openafs@) |
36 | *** swap 8GB |
||
37 | *** slash 60GB (for @/@) |
||
38 | *** home 50GB (for @/home@) |
||
39 | *** export [Remaining space] (for @/export@) |
||
40 | 1 | Joseph Foley | ## Save changes and exit the manager |
41 | # In the partition manager, set these options for the partitions |
||
42 | 2 | Joseph Foley | ** boot: labeled boot, format as ext2, mounted at /boot, set "bootable" flag |
43 | ** afscache: 0% reserved, labeled afscache, format as ext2 or ext3, mounted at @/var/cache/openafs@ |
||
44 | ** swap: swapspace |
||
45 | ** slash: labeled slash, format as ext4, mounted at @/@ |
||
46 | ** home: 0% reserved, labeled home, format as ext4, mounted at @/home@ |
||
47 | ** export: 0% reserved, labeled export, format as ext4, mounted at @/export@ |
||
48 | 1 | Joseph Foley | # Save changes |
49 | # The installation should continue for a while |
||
50 | |||
51 | h3. Picking server options |
||
52 | |||
53 | 3 | Joseph Foley | You'll have to pick a user. This is the default devnet user: |
54 | * user: devnet |
||
55 | * password: hakkavelin |
||
56 | |||
57 | Once everything is setup, you should delete the user (or change the password). _Avoid logging in as root unless absolutely necessary!_ |
||
58 | |||
59 | 1 | Joseph Foley | This may vary, but these are probably the settings you want: |
60 | * Basic Ubuntu Server |
||
61 | * SSH server |
||
62 | * Ubuntu Desktop |
||
63 | 3 | Joseph Foley | |
64 | h3. Kerberos (single sign on) and AFS |
||
65 | |||
66 | Follow the directions at https://samvinna.ru.is/projects/projects/devnet-documentation/wiki/AFS_Client_Installation |
||
67 | |||
68 | Very brief synopsis without some details: |
||
69 | # Install the packages. Remember that the Kerberos realm is DEV.RU.IS and theAFS cell is dev.ru.is. Case matters! |
||
70 | <pre> |
||
71 | sudo apt-get install krb5-auth-dialog krb5-user krb5-clients libpam-ccreds libpam-krb5 build-essential dkms linux-headers-`uname -r` openafs-modules-dkms openafs-{client,krb5} |
||
72 | </pre> |
||
73 | # Get a kerberos administrator (currently foley) to generate a keytab for @/etc/krb5.keytab@ |
||
74 | # Add the principals for administrators into @/root/.k5login@ |
||
75 | <pre> |
||
76 | foley@DEV.RU.IS |
||
77 | jg@DEV.RU.IS |
||
78 | simonhk@DEV.RU.IS |
||
79 | </pre> |
||
80 | # Reboot |
||
81 | # Adjust the @/etc/ssh/sshd_config@ settings to allow GSSAPI options (set them all to yes) |
||
82 | # see if you can ssh in using your DevNet @DEV.RU.IS principal to the root account |
||
83 | |||
84 | To add users, you need to find out the user's AFS ID. |
||
85 | # My AFS id is 7812 as below: |
||
86 | <pre> pts examine foley |
||
87 | libprot: unable to build security class (getting token) |
||
88 | libprot: Could not get afs tokens, running unauthenticated |
||
89 | Name: foley, id: 7812, owner: system:administrators, creator: foley.afsadm, |
||
90 | membership: 25, flags: S----, group quota: 20.</pre> |
||
91 | # sudo adduser --uid 7812 foley |
||
92 | ## Hit return when it asks for your password and do not retry |
||
93 | ## Fill out the user's information |