Network admin

This is an ongoing project to provide members with network services. See the Administrative reference for information about administering the network. See Projects for other projects.

Project status

This is an on-going project. System administration never ends!

Contributors

Members who have contributed to this project. Newest on top.

• Friggles
• Tasaio
• John

All contributors have agreed to the terms of the Contributor License Agreement. This excludes any upstream contributors who tend to have different administrative frameworks.

Copyright

Copyright 2011, Contributors. Licensed under the New BSD license.

Links

• Linux
• Linux on Wikipedia
• Ubuntu Australia
• Ubuntu
• Ubuntu on Wikipedia
• Apache Software Foundation
• Apache HTTP server project
• Apache on Wikipedia
• MySQL
• MySQL on Wikipedia
• PHP
• PHP on Wikipedia
• MySQL on PHP
• Kerberos
• Kerberos consortium
• Kerberos on Wikipedia
• OpenLDAP
• OpenLDAP on Wikipedia
• Subversion
• Subversion on Wikipedia

TODO

Things to do at the moment, in rough order of priority, are:

• Install logcheck on each machine
• Install and configure MTAs on hope and honesty. Use charity as smarthost
• Get charity's backups operational
  • databases
  • web content in /var/www
  • svn repo in /var/svn
  • /home
  • /etc (etckeeper bzr repo?)
• Get DNS services installed? (Not sure if I'm going to bother with this)
• Get automatic user registrations working
  • Create user in Kerberos
  • Create user in LDAP
  • Create home directory
  • Create email account
  • Create wiki user
  • Create blog user
  • Create MySQL database and user
  • Create svn user (will this be necessary?)
  • Subscribe to list@, programming@ and admin@ as appropriate

Done

Things that have been done. Put latest stuff on the top of the list.

• JE 2011-09-??: Installed SquirrelMail webmail client
• JE 2011-09-02: Installed Roundcube webmail client
• JE 2011-08-27: Configured fail2ban to block brute force attacks against POP3, IMAP, Apache and others
• JE 2011-08-21: Moved Member Net to honesty and Mobile Net to hope
• JE 2011-08-21: Installed spamassassin on charity
• JE 2011-08-19: Installed mailman on charity and got the mailing lists working
• JE 2011-08-19: Configured Mobile Net on hope and honesty
• JE 2011-08-19: Installed subversion on hope and honesty
• JE 2011-08-19: Configured real certificate for SMTP, IMAP and POP3
• JE 2011-08-19: Installed fail2ban on hope and honesty
• JE 2011-08-18: Installed Postfix Admin (pcmail project) on charity
• JE 2011-08-18: Created a commit hook for pcrepo on charity that:
  • automatically checks out tags/latest and trunk into appropriate web directories
  • emails commit notifications
• JE 2011-08-18: Configured postfix and courier on charity.
• JE 2011-08-18: Installed and configured awstats on charity
• JE 2011-08-14: Got user directories' public_html working for Member Net
• JE 2011-08-14: Installed Apache, MySQL and PHP on the user machines
• JE 2011-08-14: Got NFS for users' home directories working. See Single sign-on
• JE 2011-08-14: Got the Kerberos and LDAP servers set up and have hope and honesty authenticating against charity. See Single sign-on
• JE 2011-08-13: Installed pcview on charity
• JE 2011-08-12: Arranged for purchase and integration of progclub.com
• JE 2011-08-09: Got system backups operational via slicehost for charity
  • hope and honesty aren't going to be backed up at that level, there's no need
• JE 2011-08-09: Configured pcldap on charity
• JE 2011-08-08: Updated robots.txt file for pcwiki
• JE 2011-08-06: Installed OpenLDAP on charity
• JE 2011-08-06: Enabled mod_rewrite in Apache on charity
• JE 2011-08-05: Installed php5-mcrypt on charity
• JE 2011-08-05: Created pcblog database and user on charity
• JE 2011-08-05: Disabled IPSec on hope, honesty and charity
• JE 2011-08-05: Kerberized Apache on charity
• JE 2011-08-04: Configured Kerberos DNS for ProgClub domains
• JE 2011-08-04: Installed Kerberos on charity
• JE 2011-08-01: Configured /wiki URLs on charity
• JE 2011-07-30: Configured IPSec on charity, hope and honesty
• JE 2011-07-27: Configured public read-only svn access via HTTPS and HTTP
• JE 2011-07-27: Installed Fail2ban on charity
• JE 2011-07-27: Configured IPTables on charity
• JE 2011-07-27: Configured favicon.ico file on charity
• JE 2011-07-27: Configured robots.txt file on charity
• JE 2011-07-26: Installed etckeeper on charity
• JE 2011-07-26: Configured HTTPS on charity
• JE 2011-07-25: Installed MediaWiki on charity
• JE 2011-07-25: Configured web-hosting for www.progclub.org on charity
• JE 2011-07-25: Installed PHP on charity
• JE 2011-07-25: Installed MySQL and Apache on charity