Difference between revisions of "SAC:Standard System Setup"

From OSGeo
Jump to: navigation, search
(added selinux notes)
m (Disable SELinux)
Line 37: Line 37:
 
* Editing /etc/selinux/config and changing SELINUX=enforcing to SELINUX=disabled.
 
* Editing /etc/selinux/config and changing SELINUX=enforcing to SELINUX=disabled.
 
* execute "sudo /usr/sbin/setenforce 0"
 
* execute "sudo /usr/sbin/setenforce 0"
 +
 +
[[Category:Infrastructure]]

Revision as of 02:58, 27 August 2007

Enable LDAP

As per SAC:Setup LDAP Authentication instructions using authconfig.

Also need to update /etc/sudoers file like this:

(need to work out how to use LDAP Admin group to identify access to sudoers file)

YUM Update

sudo yum check-update 
sudo yum --exclude=dlm-kernel --exclude=cman-kernel --exclude=gnbd-kernel --exclude=GFS-kernel update

Enable auto-home-dir creation

Add the following line to /etc/pam.d/login and /etc/pam.d/sshd:

 session    required     pam_mkhomedir.so skel=/etc/skel umask=0022

Mount /home from NFS

Add the following to /etc/fstab:

 bucket:/export/home     /mnt/home               nfs     intr

Then wipe, and link /home to /mnt/home after ensuring there is nothing of value in /home.

 mount /mnt/home
 rm -rf /home
 ln -s /mnt/home /home

Disable SELinux

On some systems it may be desired to disable SELinux. This can be accomplished by:

  • Editing /etc/selinux/config and changing SELINUX=enforcing to SELINUX=disabled.
  • execute "sudo /usr/sbin/setenforce 0"