Routine tasks

The following system monitoring tasks should be performed at some regular interval, preferrably daily.

1. ruptime on alphas: check for numbers greater than 0.70 on quark, uful07, hep01. Check to see that the programs causing the elevated load are valid, and not runaways.
2. uptime on neptune, allmachines uptime: check for numbers greater than 0.70. Check to see that the programs causing the elevated load are valid, and not runaways.
3. uptime on neutron and proton (rsh neutron uptime, etc.)
4. allmachines "/usr/sbin/uerf -R -o full |grep -i bad" |more
   on quark or hep01. This will check for bad blocks on the drives.
5. Check for over the quota users by typing repquota -av | more on neptune, quark and hep01 and look for are users with expired or X days left tags. Warn them of potential problems before it becomes serious and they can not login and even check mail anymore. This is a common complaint when someone walk in and states that he can not log into the X-terminal anymore. Usually they are over the quota and the file creation for the .xsession-errors fails and the system logs them out. Show them how to find their disk usage using du and help them to remove the files they no longer need.
6. Monthly do accounting for pages printed on the following machines (use the command "pac"):

quark
neptune
newton
juno

Assigning an IP Number and Name to a Machine

If you are installing a new machine on a network the following needs to be done to get the DNS (Name Service) activated:

1. Determine the sub-net the new machine needs to be added or installed. All the name service changes are done on neptune. It is the master name server. Quark functions as the slave name server.
2. Login as root or su on neptune and goto the directory /var/named. Make a backup copy and edit the file named.phys using the vi editor.
3. First change the serial number on the second line of this file. The serial number is in the following format yymmddn, where n the number of edits made on that day.
4. Determine a free and logical IP number. Make sure that the new IP number is for the required subnet.
5. Enter this in the fashion as required, along with the machine name and description.
6. Save the file.
7. Repeat the above steps on the reverse pointer file named.rev.(subnet number).
8. Kill the current named process. For this we have to determine the process ID of the same, which can done by typing ps -aef |grep named
9. Restart the named process by typing /usr/sbin/in.named. Quark receives the updates from neptune on an hourly basis. Sometimes it is necessary to login as root on quark and restart the named process there. This is usally necessary in cases where the new machines like the x-terminals need services from Quark right away.
10. Check if the machine has an valid IP number by typing nslookup. To check the forward pointer, we type set type=any followed by the machinename. To check the reverse pointer file we type set type=ptr followed by the IP number in the reverse pointer format followed by .in-addr.arpa. This should give the machine name as entered in named.phys back. For example, if a machine named charm01 has an IP number 128.227.156.31 then the following commands should work.
11. neptune[~] nslookup
    Default Server: neptune.phys.ufl.edu
    Address: 128.227.24.1
    
    > charm01
    Server: neptune.phys.ufl.edu
    Address: 128.227.24.1
    
    Name: charm01.phys.ufl.edu
    Address: 128.227.156.31
    
    > set type=ptr
    
    > 31.156.227.128.in-addr.arpa
    Server: neptune.phys.ufl.edu
    Address: 128.227.24.1
    
    31.156.227.128.in-addr.arpa name = charm01.phys.ufl.edu
    > exit
    
    
12. If the machine is a home machine that should have access to SLIP/PPP, add an entry to /var/spool/erpcd/bfs/acp_dialup for the user of that machine.

Commands to export MS-DOS CDs from quark to PCs

1. Check to see if quark has a CD mounted ( "mount | more" on quark will do this and look for the /dev/rz4c device)
2. Place the Cd in a caddy and insert in the machine
3. mount the CD (mount -r -t cdfs -o noversion /dev/rz4c /cdrom)
4. export the mount point (touch /etc/exports)
5. On the PC mount the CD (with BW NFS use the "Browse" button under the NFS icon, with Win95 use the Windows Explorer's "tools" menu to map the network drive.)

Graphics Format Conversions

PBM suite of programs can be used to convert from one format to another. For example, to convert from a TIFF format file to a GIF that is half the size of the original

% tifftopnm city.tif > city.pnm
% pnmscale 0.5 city.pnm > city2.pnm
% ppmtogif city2.pnm > city2.gif

To reduce the number of colors in a picture 

% ppmquant 128 city2.pnm > city2.ppm
% ppmtogif city2.pnm > city2.gif


To make a interlaced GIF that is useful for the Web pages: 

% ppmtogif -interlace city2.ppm > city2.gif


To view pictures on the X-window System 

% xv city.gif


To edit images 

% xpaint city.gif

User Quota Management

To create quotas on a filesystem, first edit /etc/fstab and add the flag for the quotas. On ultrix it is rq and on digital unix it is userquota. Then do a

quotacheck -v -f filesystem


To see the existing quotas and usages use the repquota -a 

To change the quoatas for a user use edquota user. To change quotas en-masse create a prototype user first and then use the edquota -p prototype userlist.

After checking the existing usage of the disk space and the quotas you can turn the quotas on with the command quotaon -a

Once you move the user's files from one directory to another, there needs to be a new entry on the new filesystem for quotas. First copy the entire directory tree with tar and then do a edquota user. Ignore the message about 0 blocks used and create the quota entry. Then use the quotacheck -av to fix the usage and the quota.

Web Server Administration

Our department's world wide web server is run on www.phys.ufl.edu which is quark at this time. The server is netscape communications server. It is administered using the netscape browser. To accomplish this, you need to login as root on quark and do the following.

cd /web/ns-home
./start-admin
netscape http://www.phys.ufl.edu:8080/
Provide root as Username and the password
Configure the server
./stop-admin

Power Failures/ Full Reboots

1. In case of power failure, reboot neptune first. Only after it is running correctly, you can proceed to quark, uful07 and hep01. After these machines are up and running the remaining desktops and X-terminals can be takled. After a power failure or reboot the followin two problems need attention.
2. Initializing the printers on neptune seems to need more time than the boot process gives it. So after you reboot or neptune crashes and comes back up, wait for about 5 minutes and login as root or become superuser and do the following:
3. # /usr/lib/lpshut
   # /usr/lib/lpsched
   
   
4. Quotas on hee, quark get turned off at reboot. You need to login to those two machines as root or become superuser and do the following:
   
5. # /usr/sbin/quotaon
   
   
   
   

UF standards for Twisted Pair Wiring

Straight Through (TIA568A). This is usually employed when machines are connected through a central hub or switch.

1       2       3       4       5       6       7       8
White   Green   White   Blue    White   Orange  White   Brown
w       w       w       w       w       w       w       w
Green   white   Orange  White   Blue    White   Brown   White

Crossed (TIA568B). This is used when connecting two machines back to back without a hub in the middle or connecting a network printer to a home machine (Buchler)

1       2       3       4       5       6       7       8
White   Orange  White   Blue    White   Green   White   Brown
w       w       w       w       w       w       w       w
Orange  white   Green   White   Blue    White   Brown   White

Copying disks

It is best to copy the entire disks using dump and restore. The commands to do this on solaris and digital unix respectively are:

% ufsdump 0f - /old  |  (cd /new ; ufsrestore xf -)
% dump 0f - /old | (cd /new ; restore xf -) 

On Old machine:
/sbin/dump 0usbdf 301292 60 62500 /dev/nrmt1h /heeusers

On new machine:
cd /heeusers
restore -r -f/dev/nrmt1h

We can copy an entire directory hierarchy from one location to other. which useful for moving a user's home directory using tar . This will keep the ownership, creation dates and protections of the files intact.

% cd fromdir; tar cf - . | (cd todir; tar xfBp -) 

On Digital unix systems, the mvcommand works across filesystems. It also preserves the ownership, protections and creation dates. You can also use the -Rp flags with cp to copy the symbolic links as symbolic links and keep the ownerships, protections and creation dates.

Disks & Jumpers

DSP5350

n - No Jumper
J - Jumper
xxx - SCSI ID setting cable 

nnnnJnnnxxx
 
SCSI ID Cable: Left to Right looking from the front

Top:    Blue, Yellow, Red
Bottom: Brown, Orange, Green
 
LED: Right Front vertical jumpers.
Black cable on top.
 
Wren 8 info:
ST41650N
942001-002 Part #
Lot # 0-02-9137-2
Ser # WK000506
Fir # 5092
6/24/94 replacement disk ser # TK036913 RMA1204

Networking Cable Details

• Tag 220B, Rooms 218-220A(E)-220B-226-222-224A-224C-224B-228C-228B-228A
• Tag Astro, Rooms 220A(I)-
• Tag 220, Room

Cracking Passwords

We run crack on our own passwords to avoid the problem of users choosing easy to guess passwords. The crack source code and the dictionaries associated with it are located in /charm01/tmp1/chandrai/crack-4.1 directory. Brent Nelson has pioneered this procedure and compiled a wide collection of dictionaries from hacker newsgroups and web sites. The procedure to get crack started is as follows.

1. Add any new dictionaries to the DictSrc directory in compressed form. If you do, delete any files in the Dicts directory including the .lockfile and run Crack.dict script. It creates a Dicts/bigdict file. Split this dictionary into smaller chuncks to avoid swapping on the 64 Meg alphas when other large jobs are running.
2. split -b 10m bigdict temp
   mv tempaa bigdict.1
   mv tempab bigdict.2
   mv tempac bigdict.3
   mv tempad bigdict.4
   mv tempae bigdict.5
   compress bigdict.*
   rm bigdict
   
   
   
3. Edit Scripts/network.conf file to enter the machines we want to run the crack on. All these machines should have access to the directory that the crack files are in. That is why we keep them on one of the High Energy temporary disks which are mounted on all the alphas.
4. Remove any Runtime/F* files (which store the results of previous runs--a very good thing unless you change dictionaries).
5. ftp the /etc/yp/passwd file from neptune to the current directory. Delete any lines with the password field starred out.
6. Run the crack program using
7. Crack -network passwd
   
   
8. After it finishes, you can use Scripts/mrgfbk to tidy up the results into one file F.merged for future runs. For more details, consult the Docs/readme.txt file.

PostScript Printers

Adding an HP network printer to a DEC Alpha

1. Unpack and connect power to the printer. Print out the self test page to get the hardware address.
2. Disable the network protocols except for TCP/IP. Under TCP/IP tell the printer to use bootp.
3. Give the printer a name and make the entry in /var/named.phys on neptune. Make sure to change the serial number on the file.

hp5m1   IN   A       128.227.17.163 
        IN   HINFO   "HP Laserjet 5M" "Postscript level 2"

4. Edit the /var/named.rev.xxx on neptune, where xxx is the correct subnet. Make sure to change the serial number on the file.

163 in ptr hp5m1.phys.ufl.edu.

5. Kill and restart /usr/sbin/in.named on neptune.
6. Read the manuals to see what has changed since the last version of JetDirect.
7. Make the entry in /etc/bootptab on the server machine (maybe on quark)

hp5m1:ht=ethernet:vm=rfc1048:ha=0060b0144dc9:ip=128.227.17.163:\
:sm=255.255.255.0:lg=128.227.17.70:T144="/tftpboot/hp5m1.cfg":\
:gw=128.227.17.1:

8. Create a configuration file in the /tftboot directory of quark. This file will tell the printer its name etc. on bootup.
9. Add the printer to the /etc/printcap on machines that will use this printer.
10. Create the spool directory as daemon:daemon on quark.
11. If the bootp server is not a tftp server (i.e. not quark or neptune), then edit /etc/inetd.conf and grab the tftp line from the /etc/inetd.conf on quark. Create the /tftpboot directory and place hp5mx.cfg file there. You get a copy from /tftpboot on quark. This file is printer specific, so edit name, location, and allowed hosts. Make the following obscure symbolic link:
    cd /tftpboot
    ln -s . tftpboot
    Do a kill -HUP to the inetd process to make inetd reread its configuration.
12. Turn the printer off and then back on again to let it get its ip number from bootp.
13. telnet to the printer to run the setup software.

===JetDirect Telnet Configuration=== 
Configured Parameters 
IP Address : 128.227.17.163 
MAC Address : 00:60:b0:14:4d:c9 
Subnet Mask : 255.255.255.0 
Default Gateway : 128.227.17.1 
Syslog Server : 128.227.17.70 
Idle Timeout : 120 Seconds 
Set Cmnty Name : physet 
Passwd : enabled 
Port[1] Banner page: disabled 
To Change/Configure Parameters Enter: 
Parameter-name: value <Carriage Return> 
Parameter-name Type of value 
ip: IP-address in dotted notation 
subnet-mask: address in dotted notation 
default-gw: address in dotted notation 
syslog-svr: address in dotted notation 
idle-timeout: seconds in integers 
set-cmnty-name: alpha-numeric string (32 chars max) 
banner: 0 to disable, 1 to enable 
type passwd to change passwd 

14. On the machine local to the printer create the spool directory by creating /usr/spool/lpd/xxxx , where xxxx is the name of the printer.
15. Change the ownership to daemon.daemon for the directory.
16. Create a .config file in the directory with two lines:

host 128.227.17.xxx
port 9100

17. Edit /etc/printcap and add a new stanza for this printer. This is an example for the default lprinter on a machine:

ps|hp5m1|lp|lp0|dorsey:\
:lf=/usr/adm/lperr:\ 
:lp=/dev/null:\ 
:af=/usr/spool/lpd/hp5m1/acct:\ 
:mx#0:\ 
:if=/usr/local/lib/hp/hpdriver:\ 
:sd=/usr/spool/lpd/hp5m1: 

18. Do an "lpc restart hp5m1" now try to print something.
19. Add this printer to the /etc/printcap files on other client machines that will need to be able to print to it.
20. Also allow these clients in the /etc/hosts.lpd or /etc/hosts.equiv file on the host machine.
21. Add the accounting information to the routine tasks list.

This program is sent to the Apple LaserWriter IINT via Windows Terminal to turn off the automatic printing of a test page upon power up. To turn the test page back on, change "false" to "true", and send the file to the printer via Terminal. The test page reveals important information about the printer status, including Comm parameters, RAM installed, and lifetime page count. The same procedure can be used for other postscript printers to set different settings. Use ^d (control d) to end the procedure in Terminal after sending this PostScript code. This takes the printer out of direct talk mode.

%!
serverdict begin 0 exitserver
statusdict begin
false setdostartpage
end

Managing HP Laserjet 4Si MX Printers:

On neptune, cd to /opt/hpnp and run jetadmin from there. Option number 4 will bring up a nice x-window displaying the printer console status. Option number 3 is used to change the configuration parameters on the printers. hp4si is the name of the cmtduplex printer and hp4si1 is the name of the heeduplex printer. The console password is the same as the copy machine numeric code. You need to disable the console password to change any parameters on the printer like resetting the user maintenance messages described in the next section.

Resetting the user maintenance message on HP Laserjet 4Si MX Printers

When the cmtduplex (network name hp4si) or heeduplex (hp4si1) console says "user maintenance", then we need to unlock the console and reset it (assuming that the user maintenance has been performed if actually scheduled).

As su on neptune, cd /usr/lib/hpnp and run ./jetadmin which gives a menu interface.

• Double check that printer name and snmp get community pair are the same.
• Make sure "online".
• Need to know 4 digit xerox code to unlock console (e.g., same 8443 for both printers).
• Go to option 3 (manage printer) to lock-unlock hp4si or hp4si1. Modify the printer console.
  1. click <online> to go offline
  2. click <menu> until CONFIG MENU appears
  3. click <item> until SERVICE MSG = ON* appears
  4. click <+> to get SERVICE MSG = OFF
  5. click <enter> to turn message off, * appears
  6. click <online>
• lock console in jetadmin

NCD X-Terminals

NCD X-terminals take 72 PIN, 70 NS, Non-Parity memory. There are two different kinds of memory in the X-Terminals. One is code and the other is data. The code memory is usually 2 MB and you can add one SIMM to expand it. The data memory is 4 MB on the mother board and you can add two SIMMs to expand it. On Buchler's X-terminal, the SIMM slot closer to the back is the Code Memory and the two simm slots closer to the front are the Data memory. You can add one SIMM or two SIMMS to increase the data memory.