Changes between Version 39 and Version 40 of Old/hNodes/cNodeVer3/dAssembly/e4NodesSetup

Timestamp:

Jun 21, 2013, 4:27:53 PM (11 years ago)

Author:

ParviK

Comment:

—

Old/hNodes/cNodeVer3/dAssembly/e4NodesSetup

@@ -198 +198 @@
 
 ====== Setting up Login Service ======
-
+NOTE: EVERYTHING THAT IS ORBIT-LAB.ORG SHOULD BE GENI.NET
 1. Install ldap libraries using command 
 {{{
 apt-get install libpam-ldap libnss-ldap
 }}}
+This process will ask you a bunch of ldap related questions that will be used to prime the ldap.confs (there are 2). It's not critical to get them correct as we're just going to replace those conf's any way. (Accepting the defaults is ok).
+
+2. Edit the /etc/ldap.conf file to configure the ldap client. 
+{{{
+    base dc=orbit-lab,dc=org
+    uri ldap://ldap.orbit-lab.org/
+    ldap_version 3
+    binddn
+    rootbinddn cn=admin,dc=orbit-lab,dc=org
+    pam_password md5
+    nss_initgroups_ignoreusers backup,bin,daemon,games,gnats,irc,libuuid,libvirt- qemu,list,lp,mail,man,messagebus,news,ntp,postfix,proxy,root,sshd,statd,sync,sys,syslog,usbmux,uucp,www-data
+}}}
+You could edit this file and change all the values to reflect this (leaveing the rest as comments) or simply replace the one you have with this one​. You can also check the non-comment lines by executing:
+{{{
+    egrep -v "^#|^$" /etc/ldap.conf
+}}}
+
+3.  The /etc/ldap/ldap.conf is the second file that guides the client.
+{{{
+    BASE    dc=orbit-lab,dc=org
+    URI     ldap://ldap.orbit-lab.org
+}}}
+ Again you can edit it directly or copy this version​.
+
+4.  The /etc/nsswitch.conf file should have the follow non comment lines:
+{{{
+    passwd:         files ldap compat
+    group:          files ldap compat
+    shadow:         files compat
+
+    hosts:          files dns
+    networks:       files
+
+    protocols:      db files
+    services:       db files
+    ethers:         db files
+    rpc:            db files
+
+    netgroup:       nis
+}}}
+
+5. Copy or create the /etc/ldap.secret file
+6. Finally add the follow line to the /etc/sudoers file (note this is done with the visudo command).
+{{{
+    %admin ALL=(ALL) ALL
+    %sysadmin ALL=NOPASSWD: ALL
+}}}
+    This has to be done manually. 
+  * Configure networking for the node facing interface of the console e.g.:
+{{{
+        auto eth1
+        iface eth1 inet static
+        address 10.14.0.10
+        netmask 255.255.0.0
+}}}
+7.  Install other software:
+{{{
+   apt-get install cfengine3 emacs ntp
+}}}
+8.  We need to make sure machine have fully qualified host name (some services depend on it). So:
+{{{
+    echo "console.sb4.orbit-lab.org" > /etc/hostname
+}}}