Changeset 2246 for trunk/server/doc
- Timestamp:
- Jun 27, 2012, 10:29:47 PM (12 years ago)
- Location:
- trunk
- Files:
-
- 4 edited
Legend:
- Unmodified
- Added
- Removed
-
trunk
- Property svn:mergeinfo changed
/branches/fc17-dev (added) merged: 2081,2195-2198,2202,2204-2208,2210-2212,2215-2226,2230-2232,2235-2236,2238-2243,2245
- Property svn:mergeinfo changed
-
trunk/server/doc/install-howto.sh
r2214 r2246 77 77 # XXX We should make Kickstart work for test servers too 78 78 79 # Make sure selinux is disabled 80 selinuxenabled || echo "selinux not enabled" 81 79 82 # Take updates, reboot if there's a kernel update. 80 83 yum update -y … … 96 99 \cp -a etc / 97 100 chmod 0440 /etc/sudoers 101 grub2-mkconfig -o /boot/grub2/grub.cfg 98 102 99 103 # [TEST] You'll need to fix some config now. See bottom of document. 104 105 # Stop /etc/resolv.conf from getting repeatedly overwritten by 106 # purging DNS servers from ifcfg-eth0 and ifcfg-eth1 107 vim /etc/sysconfig/network-scripts/ifcfg-eth0 108 vim /etc/sysconfig/network-scripts/ifcfg-eth1 100 109 101 110 # Make sure network is working. Kickstart should have … … 246 255 gem install $(gem list --no-version | grep -Fxvf - gem.txt) 247 256 # Also, we need to install the old rails version 248 gem install -v=2.3. 5rails257 gem install -v=2.3.14 rails 249 258 # These are in /usr 250 259 … … 340 349 cat install-ldap 341 350 342 # Enable lots of services 351 # Enable lots of services (currently in /etc checkout) 343 352 systemctl enable openafs-client.service 344 systemctl enable dirsrv. service353 systemctl enable dirsrv.target 345 354 systemctl enable nslcd.service 346 355 systemctl enable nscd.service 347 356 systemctl enable postfix.service 348 systemctl enable nrpe.service 357 systemctl enable nrpe.service # chkconfig'd 349 358 systemctl enable httpd.service # not for [WIZARD] 350 359 351 360 systemctl start openafs-client.service 352 systemctl start dirsrv. service361 systemctl start dirsrv.target 353 362 systemctl start nslcd.service 354 363 systemctl start nscd.service … … 360 369 # among others, 'amd64_fedoraX_scripts' (vary X) and 'scripts'. If it's 361 370 # not, you probably did a distro upgrade and should update 362 # /etc/sysconfig/openafs (XXX this is wrong: figuring out new 363 # systemd world order). 371 # tokensys (server/common/oursrc/tokensys/scripts-afsagent-startup.in) 364 372 fs sysname 365 373 … … 374 382 # (Note: this errors on XeTeX which is ok.) 375 383 fmtutil-sys --all 384 385 # Check for unwanted setuid/setgid binaries 386 find / -xdev -not -perm -o=x -prune -o -type f -perm /ug=s -print | grep -Fxvf /etc/scripts/allowed-setugid.list 376 387 377 388 # Fix etc by making sure none of our config files got overwritten -
trunk/server/doc/install-ldap
r2068 r2246 1 # b 1 2 # To set up a new LDAP server: 2 3 … … 14 15 15 16 # Move the schema back 16 cp -R /etc/dirsrv/slapd-scripts.bak/ {.svn,*}/etc/dirsrv/slapd-scripts17 cp -R /etc/dirsrv/slapd-scripts.bak/* /etc/dirsrv/slapd-scripts 17 18 rm -Rf /etc/dirsrv/slapd-scripts.bak 18 19 20 # Check and make sure the sysconfig references the correct keytab 21 svn revert /etc/sysconfig/dirsrv-scripts 22 19 23 # Turn dirsrv off: 20 systemctl stop dirsrv .service24 systemctl stop dirsrv@scripts.service 21 25 22 26 # Apply the following configuration changes. If you're editing … … 52 56 EOF; 53 57 54 systemctl start dirsrv .service58 systemctl start dirsrv@scripts.service 55 59 56 60 ldapvi -b cn=config … … 221 225 nsDS5ReplicaBindDN: uid=ldap/shining-armor.mit.edu,ou=People,dc=scripts,dc=mit,dc=edu 222 226 nsDS5ReplicaBindDN: uid=ldap/golden-egg.mit.edu,ou=People,dc=scripts,dc=mit,dc=edu 227 nsDS5ReplicaBindDN: uid=ldap/miracle-cure.mit.edu,ou=People,dc=scripts,dc=mit,dc=edu 228 nsDS5ReplicaBindDN: uid=ldap/lucky-star.mit.edu,ou=People,dc=scripts,dc=mit,dc=edu 223 229 nsds5ReplicaPurgeDelay: 604800 224 230 nsds5ReplicaLegacyConsumer: off -
trunk/server/doc/upgrade-tips
r2066 r2246 172 172 -------------------- 173 173 174 XXX out of date 174 175 Update /etc/sysconfig/openafs with an extra amd64_fedoraX_scripts and 175 176 amd64_fedoraX sysname. The format should be evident from the existing 176 177 entries. [XXX There might be other things you want] 177 178 178 6. Testing critical infrastructure 179 6. Bind to scripts-test 180 ----------------------- 181 182 First, make sure no other servers are bound to scripts-test (try ping). 183 Then, create /etc/sysconfig/network-scripts/ifcfg-eth0:0 based off of 184 /etc/sysconfig/network-scripts/ifcfg-eth0 but with the scripts-test 185 IP address 18.181.0.229. Run `ifup eth0:0` to complete the change. 186 187 7. Testing critical infrastructure 179 188 ---------------------------------- 180 189 … … 188 197 - http://pony.scripts.mit.edu 189 198 190 7. Extra stuff199 8. Extra stuff 191 200 -------------- 192 201 … … 202 211 emptying their .ini files in /etc/php.d. 203 212 204 8. Sending announcements213 9. Sending announcements 205 214 ------------------------ 206 215
Note: See TracChangeset
for help on using the changeset viewer.