Syscom Todo

2014-10-14T19:45:52Z

Nablack: /* When in the Machine Room */

These are things that syscom should do eventually:

==Actually Important==
* Get a list of ports to open for when the perimeter firewall goes up.

==General==
* Prepare MEF request for `sodium-benzoate` upgrades/replacement.
* Prepare MEF request for drives for cobalamin.
* Make roundcube use webauth, or else make webauth not tell you not to log into roundcube.
* Establish remote syslog
* Get UPS monitoring working across multiple systems
* Clean up the cabling in the office.
* `/users` backups
* Disaster recovery plan
* Put backup containers onto cobalamin
* Get an IP/KVM for the machine room which doesn't suck?
* Update the wiki.
* Get stuff for natural-flavours & install (e45lee)
* Sort through keyboards in the office
* Fix the webcam counter (jj2baile)
* Put ginseng back together
* Figure out all the hardware in the office
* mounting USB sticks - special permissions required, can they be relaxed?
* clean up wiki vandalism

==When in the Machine Room==
* Rotate CPUs in `hfcs` to see if it's the CPU or the socket that's causing NMI issues.
* Set up binaerpilot?
* Make sure that the IPMI/console connections are correct, up-to-date, and working.
* Add "DO NO TURN ON" label to psilodump

==Science Machine Room==
* Setup Cobalamin (space has already been set aside for us)

LDAP

2013-10-04T23:09:28Z

Nablack:

We use [http://www.openldap.org/ OpenLDAP] for directory services. Our primary LDAP server is [[Machine_List#auth1|auth1]] and our secondary LDAP server is [[Machine_List#artificial-flavours|artificial-flavours]].

=== Querying LDAP ===

There are many tools available for issuing LDAP queries. Queries should be issued to <tt>ldap1.csclub.uwaterloo.ca</tt>. The search base you almost certainly want is <tt>dc=csclub,dc=uwaterloo,dc=ca</tt>. Read access is available without authentication; [[Kerberos]] is used to authenticate commands which require it.

Example:

ldapsearch -x -h ldap1.csclub.uwaterloo.ca -b dc=csclub,dc=uwaterloo,dc=ca uid=ctdalek

The <tt>-x</tt> option causes <tt>ldapsearch</tt> to switch to simple authentication rather than trying to authenticate via SASL (which will fail if you do not have a Kerberos ticket).

The University LDAP server (uwldap.uwaterloo.ca) can also be queried like this. Again, use "simple authentication" as read access is available (from on campus) without authentication. SASL authentication will fail without additional parameters.

Example:

ldapsearch -x -h uwldap.uwaterloo.ca -b dc=uwaterloo,dc=ca "cn=Prabhakar Ragde"

=== Replication ===

While <tt>ldap1.csclub.uwaterloo.ca</tt> ([[Machine_List#auth1|auth1]]) is the LDAP master, an up-to-date replica is available on <tt>ldap2.csclub.uwaterloo.ca</tt> ([[Machine_List#artificial-flavours|artificial-flavours]]).

In order to replicate changes from the master, the slave maintains an authenticated connection to the master which provides it with full read access to all changes.

Specifically, <tt>/etc/init.d/slapd-k5start</tt> maintains an active Kerberos ticket for <tt>ldap/artificial-flavours.csclub.uwaterloo.ca@CSCLUB.UWATERLOO.CA</tt> in <tt>/var/run/slapd/krb5cc</tt>. This is then used to authenticate the slave to the server, who maps this principal to <tt>cn=ldap-slave,dc=csclub,dc=uwaterloo,dc=ca</tt>, which in turn has full read privileges.

In the event of master failure, all hosts should fail LDAP reads seamlessly over to the slave.

[[Category:Software]]

Machine List

2013-10-04T23:03:14Z

Nablack: /* Specs */

= Servers =

== ''ascorbic-acid'' ==

Ascorbic-acid is Sun Netra T1. Needs 'rootdelay=15' kernel argument to boot.

==== Specs ====
* Sun Netra T1
* 256MB RAM
* 2 × 20 GB Seagate hard drive, configured as a 34 GB LVM volume group

==== Services ====

* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.

== ''auth1'' ==

Container on [[#aspartame|aspartame]].

==== Services ====

* [[LDAP]] master
* [[Kerberos]] master

== ''caffeine'' ==

Caffeine is the Computer Science Club's primary server. It serves websites, databases for websites, and a large amount of other services. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#glomag|glomag]]

==== Services ====

* Club and member web sites with [[Apache]]
* [[MySQL]] databases
* [[PostgreSQL]] databases (deprecated, not backed up.)
* [[ceo]] daemon
* mail was migrated to [[#mail|mail]]

== ''corn-syrup'' ==

PowerEdge 2950

==== Specs ====

* 2 × Intel Xeon E5405 (2.00 GHz, 4 cores each)
* 32 GB RAM
* eth0 ("Gb0") mac addr 00:24:e8:52:41:27
* eth1 ("Gb1") mac addr 00:24:e8:52:41:29
* IPMI mac addr 00:24:e8:52:41:2b
* 3 × Western-Digital 160GB SATA hard drive (445 GB software RAID0 array)

==== Notes ====

* Use eth0/Gb0 for the mathstudentorgsnet connection
* has ipmi on corn-syrup-impi.csclub.uwaterloo.ca.

==== Services ====

* Hosts 1 TB <tt>[[scratch|/scratch]]</tt> and exports via NFS (sec=krb5)

== ''denardo'' ==

==== Specs ====

* Sun Fire V210
* TI UltraSparc IIIi (Jalapeño)
* 2 GB RAM
* 160 GB RAID array
* ALOM on denardo-alom.csclub can be used to power machine on/off

Currently offline due to faulty hard drive

== ''high-fructose-corn-syrup'' ==

High-fructose-corn-syrup (or hfcs) is our more powerful version of corn-syrup. It's been in CSC service since April 2012.

==== Specs ====

* 4x AMD Opteron 6272 (2.4 GHz, 16 cores each)
* 192 GB RAM
* Supermicro H8QGi+-F Motherboard Quad 1944-pin Socket [http://csclub.uwaterloo.ca/misc/manuals/motherboard-H8QGI+-F.pdf (Manual)]
* 500 GB Seagate Barracuda
* Supermicro Case Rackmount CSE-748TQ-R1400B 4U [http://csclub.uwaterloo.ca/misc/manuals/SC748.pdf (Manual)]

== ''ginseng'' ==

Ginseng used to be our fileserver. It is in the process of being recommissioned into a general-purpose CSC machine.

==== Specs ====

* Intel Pentium Dual Core E2180
* 8GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/s3000ah_tps_1_1.pdf Intel S3000AHV Motherboard]
* 4 × 640 GB Western-Digital Caviar Blue in [http://en.wikipedia.org/wiki/Nested_RAID_levels#RAID_10_.28RAID_1.2B0.29 RAID 10] behind a [http://www.3ware.com/products/serial_ata2-9650.asp 3ware 9650SE RAID card].

== ''taurine'' ==

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 8GB RAM
* 136 GB LVM volume group

==== Services ====

* Virtual machines
* BitlBee IRC instant messaging gateway (localhost only)
* ident server to maintain high connection cap to freenode
* Runs ssh on ports 21,22,53,80,81,443,8000,8080 for user's convenience.

==== Services ====

* Newer software

== ''freebsd'' ==

FreeBSD is a virtual machine with FreeBSD installed.

==== Services ====

* Newer software

== ''rainbowdragoneyes'' ==

Rainbowdragoneyes is our Lemote Fuloong MIPS machine. This machine is aliased to rde.csclub.uwaterloo.ca.

==== Specs ====

* 800MHz MIPS Loongson 2f CPU

== ''skynet'' ==

skynet is a Sun E6500 machine donated by Sanjay Singh. This machine is in the process of being set up.

==== Specs ====

* 15 full CPU/memory boards
** 2x UltraSPARC II 464MHz / 8MB Cache Processors
** ??? RAM?
* 1 I/O board (type=???)
** ???x disks?
* 1 CD-ROM drive

* [http://mirror.csclub.uwaterloo.ca/csclub/sun_e6500/ent6k.srvr/ e6500 documentation (hosted on mirror, currently dead link)]
* [http://docs.oracle.com/cd/E19095-01/ent6k.srvr/ e6500 documentation (backup link)]
* [http://www.e6500.com/ e6500]

== ''sucrose'' ==

sucrose is a taurine clone donated by CSCF. This machine is in the process of being transferred to CSC.

==== Specs ====

== ''dextrose'' ==

dextrose is a taurine clone donated by CSCF. This machine is in the process of being transferred to CSC.

==== Specs ====

= Office Terminals =

== ''bit-shifter'' ==

bit-shifter is an office terminal.

==== Specs ====

* Intel(R) Core(TM)2 Quad CPU Q8300
* 4GB RAM
* Nvidia GeForce GT 440
* [http://csclub.uwaterloo.ca/misc/manuals/motherboard_manual_ga-ep45-ud3l.pdf Gigabyte GA-EP45-UD3L] Motherboard
* 1x 750GB Segate SATA drive
* 1x 80GB IDE Drive (part of a striped LVM volume for /video)
* Jacob Parker's Firewire Card

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''gwem'' ==

gwem is an office terminal that was created because AMD donated a graphics card. It entered CSC service in February 2012.

=== Specs ===

* AMD FX-8150 3.6GHz 8-Core CPU
* 16 GB RAM
* AMD Radeon 6870 HD 1GB GPU
* 1x 160GB SATA drive

== ''maltodextrin'' ==

Maltodextrin is an office terminal; it used to be Bartle's Box of doom.

==== Specs ====

* Intel Core 2 Duo E7200 @ 2.53 GHz
* 2GB RAM
* Nvidia GeForce GT 440
* [http://csclub.uwaterloo.ca/misc/manuals/ga-ep35_s3l_e.pdf Gigabyte GA-EP35-DS3L] Motherboard
* Seagate Barracuda 400 GB SATA hard drive

==== Services ====

* [http://csclub.uwaterloo.ca/office/webcam Office webcam]

== ''natural-flavours'' ==

Natural-flavours is an office terminal; it used to be our mirror.

==== Specs ====

* Intel Core 2 Duo E6300 @ 1.86 GHz
* 2x1GB RAM
* Nvidia GeForce GT 440
* 320 GB Seagate Barracuda hard drive
* [http://csclub.uwaterloo.ca/misc/manuals/ga-ep35_s3l_e.pdf ASUS P5L-MX] Motherboard
* DVD Burner

== ''nullsleep'' ==

nullsleep is an [http://csclub.uwaterloo.ca/misc/manuals/ASRock_ION_330.pdf ASRock ION 330] machine given to us by CSCF and funded by MEF.

==== Specs ====

* Intel® Dual Core Atom™ 330
* 2GB RAM
* NVIDIA® ION™ graphics
* 320 GB hard drive
* DVD Burner

==== Speakers ====
Nullsleep has the office speakers currently connected to it.

==== Services ====
Nullsleep runs MPD for playing music. Control of MPD is available only to users in the "audio" group.
Music is located in /music on the office terminals

== ''strombola''==
It is named after Gordon Strombola.

==== Specs ====
* Intel Core2 Quad Q8200 @ 2.33GHz
* 4 GB RAM
* nVidia GeForce 8600 GTS
* [http://csclub.uwaterloo.ca/misc/manuals/strombola.pdf Gigabyte GA-EP45-UD3L] Motherboard
* Seagate ST3750640NS 750 GB SATA hard drive


==== Speakers ====
Strombola has integrated 5.1 channel sound.

== ''acesulfame-potassium'' (decommissioned) ==

==== Specs ====
* Intel Pentium 4 2.67GHz
* 1GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/ABIT_VT7.pdf ABIT VT7] Motherboard
* ATI Radeon 7000

= Syscom Only =

The following systems may only be accessible to members of the [[Systems Committee]] for a variety of reasons; the most common of which being that some of these machines host [[Kerberos]] authentication services for the CSC.

== ''artificial-flavours'' ==

Artificial-flavours is our backup server. It used to be an office terminal.

==== Specs ====

* Intel Celeron 3.2GHz
* 2GB RAM
* [http://csclub.uwaterloo.ca/misc/manuals/Biostar_P4M80-M4.pdf Biostar P4M80-M4] Motherboard
* Western-Digital 80 GB ATA hard drive

==== Services ====

* Backup [[Kerberos|authentication]] and [[OpenLDAP|directory services]]
* [[MySQL]] replica
* Secondary [[Mail]] exchanger

Note: secondary mail exchanger is offline due to improper relay setup.

== ''aspartame'' ==

aspartame is a taurine clone donated by CSCF. It currently is our primary file server, serving as the gateway interface to space on phlogiston. As of Winter 2013, it replaces ginseng in partial functionality.

==== Specs ====

* 2 AMD Opteron 2218 CPUs
* 10GB RAM

== ''glomag'' ==

Glomag is a newish server (as of Fall 2009) which hosts [[#caffeine|caffeine]]. Only syscom are allowed to SSH in here directly, though SSH to caffeine is permitted to all members.

==== Specs ====

* Intel Xeon X3450 @ 2.67 GHz
* 6 GB RAM
* vg0: 465 GB software RAID1 (contains root partition):
** 750 GB Seagate Barracuda SATA hard drive
** 500 GB Western-Digital Caviar Blue SATA hard drive
* vg1: 596 GB software RAID1 (contains caffeine):
** 2 × 640 GB Western-Digital Caviar Blue SATA hard drive

==== Services ====

* [[Virtualization#Linux_Container|Linux containers]]; see [[#caffeine|caffeine]], [[#mail|mail]]

== ''mail'' ==

mail is the CSC's mail server. It hosts mail delivery, imap(s), smtp(s), and mailman. It is also syscom-only. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#glomag|glomag]]

==== Services ====

* [[Mail]] services
* mailman
* web interface to mail, mailman
* [[ceo]] daemon

== ''potassium-citrate'' ==

Potassium-citrate is a dual-processor Alpha machine. It is on extended loan from pbarfuss. As of August 2013, it has taken over the role of LDAP/Kerberos primary server from ginseng, thus completely decomissioning all critical services from ginseng.

==== Specs ====
* Alphaserver CS20 (2 833MHz EV68al CPUs)
* 512MB RAM
* 36 GB Seagate SCSI hard drive

== ''psilodump'' ==

psilodump is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling phlogiston, host disk shelves exported as iSCSI block devices.

==== Specs ====

== ''phlogiston'' ==

phlogiston is a NetApp FAS3000 series fileserver donated by CSCF. It, along with its sibling psilodump, host disk shelves exported as iSCSI block devices.

==== Specs ====

== ''sodium-benzoate'' ==

Sodium-benzoate is our mirror server, funded by MEF.

==== Specs ====

* Intel Xeon Quad Core E5405 @ 2.00 GHz
* 16GB RAM
* vg0: 228 GB block device behind DELL PERC 6/i (contains root partition)
* mirror: ~14 TB block device behind DELL PERC 6/i (contains mirror)
** 8 × 2 TB hard drive (RAID-5)

==== Services ====

* [[Mirror]]
* [[Talks]] mirror
* [[Debian_Repository|CSClub packages repository]]

== ''munin'' ==

munin is a syscom-only monitoring and accounting machine. It is a [[Virtualization#Linux_Containers|Linux container]] at present.

==== Specs ====

* currently hosted on [[#glomag|glomag]]

==== Services ====

* [http://munin.csclub.uwaterloo.ca munin] systems monitoring daemon

= Other =

== ''sodium-citrate'' ==

Sodium-citrate is an SGI O2 machine.

In order to net boot you need to set /proc/sys/net/ipv4/ip_no_pmtu_disc to 1. When the O2 boots, hit F5 at the boot menu and type bootp():.

==== Specs ====
* SGI O2 MIPS processor
* 423 MB (?) RAM
* 2 × 2 GB hard drive

== ''romana'' ==

Romana is a BeBox that has been in the CSC's possession since long before BeOS became defunct.

==== Specs ====

* 2 PowerPC based procccessors
* Stylish Blinken processor-load lights

== ''goto80'' ==

This is a small ARM machine we picked up in order to have similar hardware to the Real Time Operating Systems (CS 452) course. It has a [[TS-7800_JTAG|JTAG]] interface.

==== Specs ====

* 500 MHz Feroceon (ARM926ej-s compatible) processor
* ARMv5TEJ architecture

Use -march=armv5te -mtune=arm926ej-s options to GCC.

For information on the TS-7800's hardware see here:
http://www.embeddedarm.com/products/board-detail.php?product=ts-7800

== ''binaerpilot'' ==

This is a Gumstix Overo Tide CPU on a Tobi expansion board.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''anamanaguchi'' ==

This is a Gumstix Overo Tide CPU on a Chestnut43 expansion board.

==== Specs ====

* TI OMAP 3530 750Mhz (ARM Cortex-A8)
* 512MB RAM

== ''paza'' ==

An iMac G3 that is used as a dumb terminal.

==== Specs ====

* 233Mhz PowerPC 740/750
* 96 MB RAM

== ''digital cutter'' ==

See [[Digital Cutter|here]].

== ''Lisp machine'' ==

A recently acquired Symbolics XL1200 Lisp machine. dseagrav [at] lunar-tokyo.net wants us to drop him an email if we ever get it running, or anybody ever dumps the ROM images from it.

http://www.globalnerdy.com/2008/12/03/symbolics-xl1200-lisp-machine-free-to-a-good-home/ for some history on this hardware.

==== Specs ====

Currently inoperable due to (at least) a missing console cable.

[[Category:Hardware]]

CSCWiki - User contributions [en]

Syscom Todo

LDAP

Machine List