User Manual op5 System 3.1
Contents
1. etc hosts FQDN hostname and host aliases etc resolv conf DNS etc sysconfig network Hostname Domain Default gateway etc sysconfig network scripts ifcfg lt ifname gt IP Address Netmask 4 2 3 Kernel modules etc modprobe conf Editing this file is optional the default settings are usually sufficient This file sets options to modules drivers that is loaded into the kernel You need to edit this file to configure duplex settings for the op5 System network cards or if you want to change or turn bonding support on or off 4 2 4 Network time server etc ntp conf Editing this file is optional but highly recommended by op5 This file configures which server that the op5 System shall use as Network Time Server Edit the variable server to change the server to synchronize against It is possible to add several server entries to get time from several NTP servers If you are unsure about if you have a NTP server to synchronize against you can always use pool ntp org which is a large pool of free to use NTP servers on the Internet Example server ntp pool org When you have edited the file you can issue following commands to force a time syncronization and test your configuration service ntpd stop Copyright O 2003 2007 op5 AB www op5 com Page 13 of 22 All rights reserved Gop5 You can replace ntpl sth netnod se in the example above with the ipaddress or hostname of your own NTP server Note NTP communicate2. 9 service T MUMS ZOMG eS METTE TERRE SRS ER RD 14 MEZON E m O TRA O a AE 13 Copyright 2003 2007 op5 AB www op5 com Page 20 of 22 All rights reserved Copyright O 2003 2007 op5 AB www op5 com Page 21 of 22 All rights reserved
3. SMS If you want to see whats happening you can issue the command tail f var log smsd log which will show you the conversation between the sms program and the gsm modem 4 2 7 NRPE etc nrpe conf Editing this file is optional but highly recommended Copyright O 2003 2007 op5 AB www op5 com Page 14 of 22 All rights reserved Gop5 NRPE is the UNIX Linux agent that op5 products use to gather information about the op5 System To allow an op5 System to communicate with NRPE the allowed_hosts variable needs to be edited Example allowed_hosts 127 0 0 1 192 168 1 10 4 2 8 SSL certificates etc httpd mksslcrt sh This is a script that can be used to generate a self signed SSL certificate for the OP5 webbserver Run the script by issuing the command etc httpd mksslcrt sh Example etc httpd mksslcrt sh Note If you select to encrypt the CA and SERVER keys on STEP 7 and 8 you will have to enter the pass phrase every time you start apache op3 recommend you not to encrypt keys 4 2 9 System backup etc op5backup conf Note op5 recommends that you configure backup for your system op5backup is a simple but efficient backup utility for the op5 System It can backup the configuration of op5 System op5 Monitor op5 Statistics and op5 Logserver If you configure op5backup it is very easy to restore a failed system Read more on Backing up the System 4 2 10 Static routes etc sysconfig network scripts routes lt i
4. and execute crontab e For backups every monday at 01 59 enter the following 59 01 1 usr sbin op5backup sh For backups at 01 59 the 1 st of every month 59 01 1 usr sbin op5backup sh 6 3 3 Restore To restore a backup execute the op5Srestore sh script with the backup file as argument usr sbin op5restore se thebackup tar gz 7 Useful commands cd change directory pwd show current directory Is list directory contents rm delete file or directory mv move or rename file or directory tail show the 10 last rows in a file useful for viewing logs tail f to follow trace less show the contents of a file man manual vi A text editor jed another text editor 8 References http www op5 com support http www centos org http www rpm org http www chiark greenend org uk sgtatham putty http www ssh com http winscp net http linux duke edu projects yum Copyright O 2003 2007 op5 AB www op5 com Page 19 of 22 All rights reserved 9 Index A allowed hosts 6 dcin pn pei HR BOUE HOHEERIEHYOPEHIHN IHR UEEEO saya TICO HI abbas O LUTO E CASA GDI A STO EH aa OR a YER EC IEEE ONS SCORE 16 B A NN NN 16 19 C Check FOr Updates anar ere do at E acia 18 CAC ONES ERREUR 18 COTM ATS ace esc A 20 console OPS Installation Recovery CDi daniela lili 5 OpS DAC UD a a 16 19 P js c
5. tool Authentication configuration Firewall configuration Keyboard configuration System services Network configuration Timezone configuration To run the setup tool log on as user root and run the command setup monitor root setup The following screen will appear Choose a Tool Authentication configuration Firewall configuration Keyboard configuration Network configuration System services Timezone configuration Setup tool 1 Use the arrow keys to navigate the setup tool When you are done configuring check that all settings are correct and exit the program Don t forget to save Note Firewall SELinux and Authentication settings should be altered with care Creating a restrictive configuration might cause op5 products to malfunction Copyright O 2003 2007 op5 AB www op5 com Page 12 of 22 All rights reserved 4 2 2 Editing configuration files You can also setup an op5 System by using a text editor such as vim or jed Note this manual does not cover the usage of vim or jed there are other manuals that does that Check out the command vimtutor for an intruduction to the vim editor The following files needs to be edited if you configure the system by a text editor To configure keyboard layout etc sysconfig keyboard To set root password run the command passwd monitor root passwd To configure timezone etc sysconfig clock To configure network settings File Usage
6. 0p5 1_RHEL5 op5 system base plugins i386 2 2 0 0p5 4_RHEL5 op5 system addon portal noarch 1 4 4 0p5 1 RHEL5 op5 system addon This means that there are three available updates To download and install the plugins 1386 and portal norach packages issue yum update plugins i386 portal noarch Yum have a built in dependency checker that automatically fetches any other package that the chosen package s depend on To install all available updates you issue the same command but without specifying any package yum update NOTE The repositories provided by op5 is intended for op5 customers only You therefor need to have a valid op5 license installed to be able to use yum 5 2 Retrieving patches manually The RPM packages can also be downloaded from op5 Support portal https support op5 se This is not the preferred way to keep your system updated but if firewall rules or other reasons prevent you from using yum this is the fallback To check for available packages navigate your web browser to your op5 System https lt op5 system ip gt and click on the Check for updates button Available patches will be presented to you Check for updates 2 Note To do this you need to have access to the op5 System and Internet from the computer you are working from The Check for updates button posts a list of installed packages and versions to op5 Support portal This is needed to present a correct list of updates for your system D
7. C op5 User Manual op5 System 3 1 Table of Contents LB Introd ctiOn ARONA AUR ACP Pon A 2 2 FUESE ad 2 LL ads 2 22 SYSE e 2 2 TI The portal Paesens da bees See et ce ca aden een E E 2 22 2 Console and SSELacoess p 3 2 3 Are colo PR e ON EE tess evens Ud do 3 3 T stall Restol 0 is 4 A EE 4 4 Systemi con EAN ii ii 4 4 1 Using the web gui portal page iii ias 4 4 1 1 Configuration os AAA o 3 4 12 Time Setra 6 A TE 7 SAP o N A A E aseseds 7 4 1 5 Network Settings praia ia 8 EUR GENRE PEC e o Ion E E a 9 41 7 BARI sde di dt die 10 4 1 8 Change DASS ii ic 11 4 2 Manually from the Pro plutonio a 12 4 2 1 Usine the setup tOO access eects n E E A 12 4 2 2 Editing configuration les di a atada dia 13 4 2 3 Kernel modules etc modprobe conf scraps iii ad 13 4 2 4 Network time servet fete DEp COBE pira 13 4 2 5 E mail settings etc postfix main cf aci n 14 4 2 6 SMS modem etc SImsd COL ti ii ersan ecc duit 14 ADT duoi cin ta 14 4 2 8 SSL certificates etc httpd mksslert sh ooococonncccnoncccnonccononccnnoncnononccnnnnccnonncnnnnnnos 15 4 2 9 System backup El Cp BACKUP CON ds 15 4 2 10 Static routes etc sysconfig network scripts routes lt ifname gt 15 a NR E RR RO ARNS ER OR RR Rena ees tud 15 Se TUM pdate MAME is 15 5 2 Retrieving patches manually rana amie rein kei edi osculis estatua dace ciunt dtd Su ott bge n lab pupa E 16 3 3 Handling RPM packa
8. ckup utility called op5backup that can create backup s of system configuration data and op5 product configurations and data op5backup consists of a backup script and a restore script The backup script op5backup sh can be scheduled to run using cron and it can place the backup s in a local or remote mounted directory or transfer the file to another server over FTP 6 3 1 Configuration To configure opSbackup edit the file etc opSbackup conf Following variables needs to be set transfer set this to ftp or local 1f you use local as transfer location the configure this variable storagepath set this to where the backup should be placed if you use ftp as transfer mode then configure following variables backupserver set this to a FQDN or ipaddress to you ftp server backuppath set this to the path where you want your backups Leave blank if no path is needed backupuser username for the ftp account backuppass password for the ftp account If you have added software or data to your op5 System that you want to be included in the backup you can use the userdir and userfile variables Example userdir 1 my own dir Copyright O 2003 2007 op5 AB Www op5 com Page 18 of 22 All rights reserved userdir 2 usr local bin myapp _ userfile 1 usr local etc myapp conf 6 3 2 Schedule backups To setup cron to execute this script you need to edit the crontab file Log on as root
9. e to restart op5 Monitor Here is a list of useful command options and explanations chkconfig list List which programs that shall be started at boot time This command first list the program name and then seven columns that represents different run levels All you have to care about is runlevel 3 which is the default runlevel for op5 System chkconfig smsd on chkconfig smsd off Tells the system to start or stop the smsd program during boot time service monitor stop service monitor start Copyright O 2003 2007 op5 AB www op5 com Page 17 of 22 All rights reserved Turns on and off OPS Monitor during runtime 6 2 Shutdown or restart To shutdown the system in a proper way you should log onto the system as root user and issue the following command shutdown h now This means that the system will shutdown all running programs and then halt After this 1t is safe to shut down the power to the system To restart the system issue the command reboot or press Control Alt Delete on the console 6 3 Backing up the System It is important to backup your op5 System to be able to restore configuration and important data in case of a system failure There are several ways to backup the system Since op5 System is based on CentOS 5 most large providers of backup solutions has clients that can be installed on the op5 System For those cases where backup possibilities for linux systems does not exist we have created a ba
10. etwork cards Use DHCP O Yes O No Host name op5 system int op5 se Primary DNS 192 168 1 12 Secondary DNS 193 201 96 2 Teritary DNS Network Settings Configure the systems network settings Step 2 2 General gt Network cards Network card eth 2 IP address 192 168 1 186 Netmask 255 255 255 0 Gateway 192 168 1 1 Save settings Copyright O 2003 2007 op5 AB www op5 com All rights reserved optional optional Page 8 of 22 G op5 Here you add your op5 license Make sure that your license correspond to your usage By adding your licence file you also gain access to updates using the yum update command Please se the section 5 1 Yum update manager for more information About your op5 Software Licenses This software is licensed to Name Network Services Beta E mail foo bar com You have licenses installed for the following products gt op5 Monitor License type Site Current usage 6 hosts Install new license Install a new license or replace your existing license Upload your xml license file using the form below Upload xml license file Upload licence Copyright O 2003 2007 op5 AB www op5 com Page 9 of 22 All rights reserved Op 4 1 7 Backup Here you configure backup of your op5 system A local storage path can also be set to a mount point for a mounted external file system 1 e a shared folder at a remote server Backup Configure backup on your syste
11. fname gt This is optional Persistent routes are configured by creating a file for each interface that you wish to route traffic out from The file should be named etc sysconfig network scripts routes lt ifname gt Example etc sysconfig network scripts routes ethO syntax for this file 1s lt network gt via lt gateway gt Example 172 27 76 0 24 via 192 168 1 1 5 Patch management The op5 System is RPM based therefore all patches is distributed as RPM packages Starting with op5 System version 3 0 the yum update manager is supported and the recommended method to update your system More information regarding yum is found at _ http linux duke edu projects yum 5 1 YUM update manager Yum is an automatic updater and package installer remover for rpm based Linux systems Y um is the default method used to update a number of major rpm based distributions including CentOS and Red Hat Enterprise Linux 5 Copyright O 2003 2007 op5 AB www op5 com Page 15 of 22 All rights reserved Gop5 The op5 System is preconfigured to retreive all its updates via op5 repositories To manage yum you need console access to the system or log on via SSH To check if there are any updates availabe for your system execute yum check update Issuing the command above might give a result looking like this Loading installonlyn plugin Setting up repositories Reading repository metadata in from local files op5 system upgrade noarch 3 0 3
12. ges Mammalia 17 6 Administrative A S 17 o A nde MORD eee ene 17 6 2 Shutdown OE TE ii T T Cm 18 6 3 Backing up the ys ir otiera eaa EEn EEE EEEE E ERE ERRETES 18 6 3 1 Configtratioi MENTO TD 18 I 19 o E OO tMpA e des 19 is o AM II i EEE SESS 19 A 19 A 20 Copyright O 2003 2008 op5 AB Www op5 com Page 1 of 23 All rights reserved Gop5 1 Introduction This document is intended for the System administrator that has the operational responsibility for the op5 system You are expected to have good knowledge and understanding of computers but you don t have to have any prior UNIX or Linux knowledge This document will try to give you a brief overview of the underlying system that is the base for the op5 appliance and it will cover most basic things that are needed to manage the day to day operation 2 Fundamentals 2 1 0p5 System op5 utilizes CentOS 5 as the operating system CentOS is an Enterprise class Linux Distribution derived from Red Hat Enterprise Linux sources This means that CentOS 5 is binary compatible with Red Hat Enterprise Linux 5 The op5 System contain a basic but minimal CentOS server installation as a base On top of that we add common tools and applications needed by op5 products The op5 System also contain a number of custom op5 made tools and applications All applications are distributed as RPM packages and made available for customers on our support web ww
13. m using the builtin backup function Currently we support backup over ftp or to a directory locally on the server The backups include all data you need to restore a crashed op5 system Select transfer Server Path backupserver path User backupserver username Password sestesesstesssssest Copyright O 2003 2007 op5 AB www op5 com Page 10 of 22 All rights reserved 4 1 8 Change password Here you can change the password of the root user Note that this is the root user of the system so its important to keep it good If you change the password you will have to re authenticate after the new settings have been saved Change password Change your root password here Please remember to create a safe password as this is sensitive information A minimum of 6 characters is required Current Password 7 New Password 6 characters minimum Repeat password Save settings Copyright O 2003 2007 op5 AB www op5 com Page 11 of 22 All rights reserved Gop5 4 2 Manually from the prompt 4 2 1 Using the setup tool op5 System contains a menu based configuration tool called setup With this tool you can configure some of the system base settings Configuration options not supported by the setup tool are covered in the section below Note All examples are from using the op5 System console Using SSH should work the same but colors may differ The following configuration options are covered by the setup
14. ou configure settings for the email server on you op5 system Note If you dont configure any relay host or fallback relay then op5 system will act as a regular MTA and send the mails to whatever mail server that is responsible for the receiving mail domain Email This configures postfix which is the MTA Mail Transfer Agent that comes with op5 System The MTA is used primarily to send out notification and report emails from op5 software Note If you want the MTA to use a relay host ie forward all emails to a specific mail server edit Relay host and Fallback relay Host name op5 system optional Relay host my relay optional Fallback relay optional Save settings 4 1 4 SMS Here you configure settings for the sms modem SMS This configures the smsd program that sends SMS messages This is only needed if your system is equipped with a GSM GPRS modem Note If you don t want to edit this make sure to disable the PINcode control on your SIM card PIN code 1234 Save settings Copyright O 2003 2007 op5 AB www op5 com Page 7 of 22 All rights reserved 4 1 5 Network Settings Gop5 Here you configure basic network settings for your system Note when you change 1p address of your system the page will become unreachable and you will need to reconnect to the new ip address Network settings are configured in two steps Network Settings Configure the systems network settings Step 1 2 General gt N
15. ownload the RPM packages to the op5 System Tip First download the packages to your computer then use a sftp Secure FTP program to transfer the files to the op5 System A popular freeware sftp program for Windows is WinSCP Copyright O 2003 2007 op5 AB www op5 com Page 16 of 22 All rights reserved 5 3 Handling RPM packages manually RPM is the package management software that op3 System utilizes A RPM package consists of all files and information necessary to install or upgrade a software lt insert image on check for updates button gt To install an RPM package use the command rpm Uvh Example monitor root rpm Uvh plugins 2 0 6 0p5 4 rpm Preparing FERRARA 100 1 plugins E 1005 monitor root Here is a list of useful RPM commands rpm Uvh lt packagename gt Installs or upgrades a package rpm e lt packagename gt removes an installed package rpm qi lt packagename gt Gives information about an installed package rpm ql lt packagename gt lists files that the package provides 6 Administrative tasks 6 1 start stop services To control which programs that shall run on the system when it is started you can use following commands chkconfig service chkconfig can be used to control which programs that should be started during the boot sequence It can also show you the current configuration service can start and stop programs during runtime This is for example useful if you would lik
16. rved Gop5 4 1 1 Configuration wizard The configuration wizard is there to help you get a quick start Here you configure the most basic settings needed for the system to work Note that not all settings are available from the wizard only the most important ones Configuration Wizard E 1 4 Network gt Time gt Email gt SMS 2 Use DHCP O Yes O no Host name op5 system int op5 se IP address 192 168 1 186 Netmask 255 255 255 0 Gateway 192 168 1 1 DNS 192 168 1 12 Next step Do not show this window again Close Copyright O 2003 2007 op5 AB www op5 com Page 5 of 22 All rights reserved op 4 1 2 Time Settings Here you configure NTP Network Time Protocol and clock settings Time Settings This configures which server that the op5 System shall use as Network Time Server It is possible to add several server entries to get time from several NTP servers If you are unsure about if you have a NTP server to synchronize against you can always use pool ntp org which is a large pool of free to use NTP servers on the Internet NTP server Availiable servers gt 0 rhel pool ntp org 1 rhel pool ntp org 2 rhel pool ntp org m 1 local Select continent country Europe x 7 Select area Stockholm M Hardware clock uses UTC O Yes O no Save settings Copyright O 2003 2007 op5 AB www op5 com Page 6 of 22 All rights reserved 6 op5 Here y
17. s over port 123 UDP don t forget to configure your firewalls ntpdate ntpl sth netnod se service ntpd start 4 2 5 E mail settings etc postfix main cf Editing this file is mandatory This file configures postfix which is the MTA Mail Transfer Agent that comes with op5 System The MTA is used primarily to send out notification and report emails from op5 s products To be able to deliver emails following variables must be edited myhostname set this to the FQDN of your op5 System If you want the MTA to use a relay host ie forward all emails to a specific mail server edit following variables relay_host set this to the hostname of your mail server This variable is optional fallback_relay set this to the hostname of your fallback relay in case your primary mailserver is down This variable is optional Note Don t forget to change relay_host if you change hostname or IP on your email server 4 2 6 SMS modem etc smsd conf Editing this file is optional This file configures the smsd program that sends SMS messages This file is only needed if your system is equipped with a GSM GPRS modem If you don t want to edit this file make sure to disable the PIN code control on your SIM card If you want to use a PIN code you need to uncomment and edit the variable pin Example pin 1234 To test your settings you can issue the command sendsms monitor root sendsms Destination 46733123456 Text Testing to send
18. w op5 com support and on our yum repositories 2 2 System access There are three ways to access an op5 System 1 Direct access to console by connecting a monitor and a keyboard 2 By using SSH Secure SHell 3 By HTTPS using a standard web browser 2 2 1 The portal page The third way HTTPS access is used to access the web interfaces for op5 products and the op5 System portal page You can use the portal page to configure your system gather information about installed software and retrieve information regarding new patches from op5 Support web You find the portal by directing your web browser to the op5 System https lt server address gt The portal page also contains links to any installed op3 products The product logos on the portal page links to the respective products web page Copyright O 2003 2007 op5 AB www op5 com Page 2 of 22 All rights reserved Gop5 Gop5 Start Configure System About Support op5 com Welcome to op5 Portal a Configuration Login This is the start page on your op5 system Here you can reach all op5 products that you currently have installed You can also configure the basic settings on you system If you have any question please contact our support we value your input 7 Username The op5 team Password op5 Monitor is a highly flexible monitoring system for IT infrastructure op5 G op5 Mon itor Monitor is based on the widely known open source monitoring system Nagios
19. yt show this window Close op5 Statistics is a statistics solution for grahing your IT infrastructure Rn sor la win ie d Cita Buy or Try a op5 Logserver is a log server for storing and managing logs from many systems in a company IT infrastructure Buy or Try E 2 2 2 Console and SSH access You can also administer the system by SSH SSH is much like telnet but it is encrypted so that nobody can see or interfere with what you are typing To use SSH you must install a SSH client software at your computer Most Linux distributions comes with a SSH client included and there are several SSH clients available free of charge for Microsoft Windows We recommend putty that can be found on http www chiark greenend org uk sgtatham putty An other capable SSH client for Microsoft Windows can be found at http www ssh com It is only free for non commercial use though This client also includes an interface to transfer files in a secure manner from and to the op5 server You need to access the system via the console or by SSH to install upgrades and patches 2 3 System accounts To change the configuration of a op5 System you need to log on as the user root The root account is the superuser of the system and equal to the Administrator account in Windows The default password for user root is monitor without the quotes NOTE You should change the password for the root user as soon as possible after installation to block unauthori
20. zed access Be aware that when you are logged on the system as root you have the power to literally wipe the system out so be careful and if unsure take a backup before performing any changes read more on backups below Backing up the System Copyright O 2003 2007 op5 AB www op5 com Page 3 of 22 All rights reserved 3 Install Restore 3 1 Install a new system To install a new op5 System you need the op5 Installation Recovery CD If you have not received the cd with the system you can download it as an iso file from www op5 com support and create a installation cd using your favorite cd creation program Assure that you have console access by connecting a monitor and keyboard to the op5 System Insert the op5 Installation Recovery CD and reboot the system read more in the Shutdown or restart section If the system already is powered off simply power it on and insert the cd before the system bootup sequence has started Follow the instructions the on screen instructions 4 System configuration 4 1 Using the web gui portal page The easiest way to configure your op5 system is to use the web interface at https lt your ip gt To start configuring you need to log on using the root account information Initial login information is login root a Configuration Login Username Password password monitor Copyright O 2003 2007 op5 AB www op5 com Page 4 of 22 All rights rese
Download Pdf Manuals
Related Search