Advanced Tech Manual
Still being developed. Cut an paste into this document anything you have then publish via Htm to: \\webman\webmin\tech\advancedtechmanual.htm
Directions for adding and removing users to SPARK:
To add a user to Spark using Openfire (server for spark)
go to http://192.168.1.4:9090 username is admin password is (get password from Merle or openfire manager)
to add users click on the Users/Groups tab at
the top
After the Users/Groups Page Loads
Click the Create New User Button on the left hand side
Once the Create New User Page loads fill out the Form in the middle of the page
Only grant the user an Administrator if you want them able to log into openfire server with their username and change anything they want.. Click Create User if you have no other users to make, if you need to add more, click Create & Create Another.
how to backup a mysql database and dump it into a new database (current calendar to calendar old procedure)
here is a userguide SPARK.. 1. http://www.wtc.edu/it/documents/spark_user_guide.pdf
Installing new user in task freak... put here liz..
Basic Linux Commands:
To Delete LCK Files from Server:
ssh into server with lck file, go to the directory - if it is in \\filemansouth\database\SC Database\
you will login to filemansouth, and type “cd /files/database/SC\ Database/ “ press enter
after doing this you are now in the SC Database Directory type “ ls “ to list all the files in this directory - you will then see two LCK files listed somewhere to remove them both type
“ rm -f *.LCK “ press enter and they will both be gone. Use the -f only when you know for sure you want to delete something, it does not ask are you sure, just deletes.
To add user to Samba with Linux:
ssh into the server you are wanting to add a user to type “useradd username” press enter, of course exchange username for the actual user id.. This will then make the UNIX user.
Now to make a UNIX password for this user type “passwd username” press enter, and type in the password and again to confirm.
Now to set this UNIX user up as an SMB user type “smbpasswd username” press enter, and type in the password and confirm it. Now the UNIX user is also an SMB user.
Phone System Backup
Files are stored on
speed test from your PC? go here http://www.lhtot.com/quick/speed.html click PC Pitstop and then click on washington DC.. Should be over a couple of mgs..
I got alittle over a meg upload speed..
MOST updated Wordperfect Version... with Hot Patch 4.. 13.00.568
Direct TV.
List of stations... available on Direct TV.
http://directvgoestoschool.com/channels.php
Phone numbers:
Direct TV: 1-800-531-5000
Business account: 888-200-4388
School acccount: 888-330-7827
Direct TV Account #: 00891476
Local Service: Vince
Premier Audio Video
724-542-2411
1. Will they replace the dish free of charge if no longer working?
It was hard to nail down a direct answer. He said that it is soooo rare that the dish completely stops working and needs replaced. Rarely a part might need to be replaced. However, when push comes to shove, if we needed a new dish, any rep working on our account would authorize a new dish free of charge. But I think we would have to jump through hoops.
DVRs
When initially setting up an account, we have our choice of 4 receivers or 3 receivers and 1 DVR.
He checked into our account. When we installed at SC, we only received two receivers. I asked that being that is all we received, can we get a DVR. He said no because that was our original order.
When we install at NC, we can use the equipment between the two buildings
Can contact our Dealer and they have DVR's at low prices for schools.
If a family has a receiver or DVR at home that they are not using, we are able to use that on our system with no problem or extra cost to us.
We can use as many receivers and DVR's that we need.
Backup Calendar Data to setup a last year calendar and new blank calendar:www.champion.org/calendar = current calendar
www.champion.org/calendar2 = OLD calendar.. It has all the data from now - back..
Next year you will want to do the same thing.. But.. Problem is the calendar next year will only have data from 09-10 calendar. so if you copy to calendar2, it will make calendar2 lose 08-09 info.. unless you make a calendar3 folder and then calendar4 etc...
Rsync Uses:
PROXY SERVER COPIES OVER FILES FROM CHANGES ON PROXYMAN TO SAME SETTINGS ON PROXYMANSOUTH:
File is on proxy south.
its in /etc/cron.daily
filename is: proxybackup
The command it runs is: rsync -avz -e ssh root@192.168.2.7:/etc/dansguardian-av/lists/ /etc/dansguardian-av/
It just syncs the files in /etc/dansquardian-av/lists/ with /etc/dansquardian-av/ on the south server.
----------------------
Setting Up SSH w/o Password (use with Rsync)
http://oreilly.com/pub/h/66 I couldn’t explain it any better so use this website
Writing an rsync script
To create a script you must first create a txt document, in linux I usually like to make a directory in \ called scripts and then inside there you can make your txt files and then change them into scripts. To make a txt file that doesn’t exist you would type your editor whether it be pico, nano, or vi and then the name of the file you want to make.. For instance: If I wanted to make the file emailbackup (this is the script used in mailman2)
I would type nano emailbackup and press enter. It would bring up a blank document if there is not already an emailbackup file in the directory. Here is where you would write your script, below I will list what the script is for emailbackup:
rsync -ugoptlr --delete -e ssh root@192.168.1.4:/home /
-ugoptlr means, Update, preserve Group, preserve Owner, preserve Permissions, preserve Times, copy Links, recursive
--delete means it will delete everything in the backup directory that is not in the source directory (I used this in mailman2 because otherwise it would basically archive all of the old e-mails forever. Resulting in huge e-mail downloads whenever we need to switch to mailman2, and eventually locking up the server because no free space)
-e after this is where you put your command as you see I put ssh so it would ssh into mailman and copy the home directory to mailman2.
To see better explanation of rsync use the Rsync MAN page http://ss64.com/bash/rsync.html
when linux server doesn’t reboot automatically and hangs up.. What to do..
Generally what I have to do, If pressing the power on button doesn’t work, I unplug from the power supply in the rear of the computer, and wait a second or two.. Plug back in and power up..
Setting up an alias in mailman
go to http://192.168.1.4:10000
log in with admin as the user and the current admin password..
Click ‘Servers’ on the Left hand Side
Click “Qmail Configuration”
Click Mail Aliases
at the Top where it says Create Alias
type the name of the alias in the address section
Alias To, then select E-mail and type in the e-mail address if its @champion.org just put the beginning part of the e-mail ie josh_wentzell no need for @champion.org
and then select Create.
After it makes the alias you need to scroll down find the alias click on it and keep adding more people to the alias until you are done..
maintenance of blog.
To log into blog go to www.champion.org/blog click log in on the right hand side near the bottom. (About half way down the page or alittle more) Use the admin login with the password for the blog admin..
Installation of Spark
go to server4 computer downloads on fileman or fileman south and double click the Spark_2_5_8.exe and run the installation.
When setting up a new user on spark you will need to add all the users, easiest way I believe to do this is once you have spark open, at the bottom of the buddy list window there is a box that says search for other people on the server. I just search an underscore ( _ ) because all of the users have an underscore in the name. So search that it will bring up everyone and just add all users as a friend, they will need to confirm you.
Dansguardian:
to log into dansguardian you must turn off proxy in your web browser (don’t know why.. I just always have to? :( )
and then go to https://192.168.1.7:81 or 2.7 depending which you want to change.. Generally we want to change 2.7 because at midnight it will make changes to 1.7
Once logged in Click Software, and Content Filter
To edit a phrase list, bannedsite or allowed site, or blacklists click one of the following buttons at the bottom of page
Once you click on one of these buttons a page will show up that is self explanatory as in what to do, Once you make changes always select the update button on that page, and then again on the main content filter page. So that way it will restart DG.
adding new e-mail to mailman
log into mailman via ssh (192.168.1.4)
type qmail-useradd and follow prompts
list of server names and Ips:
At north:
Router: 192.168.2.1
Webman:192.168.2.8
Webman2: 192.168.2.11
Backupman: 192.168.2.6
Proxyman: 192.168.2.7
Fileman: 192.168.2.2
At South:
Router: 192.168.1.1
Filemansouth: 192.168.1.2
Mailman: 192.168.1.4
Mailman2: 192.168.1.5
Proxymansouth: 192.168.1.7
South 2nd IP:
Spamman: 64.201.86.6 or mail.champion.org
List of Software used on PC’s
E-sword
spybot
kaspersky
Paint.NET
Spark (on staff Comptuers)
wordperfect x3
Paradox
WinSCP on tech computers
PuTTy on all computers (for ssh, used only by tech however nice to have on all)
Spell Checker for OE (outlook express) since we don’t have microsoft word..
Do this to reboot the garage vpn
1. 1. Log into the router at North. Type in Explorer internet:
Go to advanced tab
Hit restart.
2. Reference Materials:
Garage IP: 64.201.88.7:
to log into the router go to http://64.201.88.7:8080 there is no username and the password is 'piis314'
to log into the router go to http://64.201.88.5:8080
Items needed added..
Database stuff.. We have someplace else how to manage.. And detail..
Making reports, queries, addition in queries.. Etc..
How to Create a Button on a Front end
1. Open front end page that you will be inserting the buttons.
2. On the top tool bar, click on the picture that looks like a ruler and protractor. This is the design button; you can only edit in this mode.
3. Click on Tools/ Settings/ Preferences. When in "preferences", click on the "experts" tab. Make sure the top box has a checkmark. This will allow you to run the button expert automatically.
4. Click on "insert" then "button". The button will appear in the top left hand corner, and the expert window will automatically open.
5. On the expert window, select "application code" on the drop-down menu.
6. Select the appropriate action. (Open form, preview a report, view a table)
7. Next, it will ask you to select the correct work. Click "Browse" and find your work. Click "Open" and then "Next" when the next window appears. On the third window, type the name of your button on the top line and click finish.
8. Click and drag the button to its correct position.
9. Click on just the words. Then, right click, go to "properties", click on the "text" tab, and check the "wordwrap" box.
Proxyman Configuration
The proxyman servers (North & South) are running ClearOS 5.1. ClearOS is a linux distribution that focuses on proxy and other common network services. The approach is much more “appliance-like” and therefore manageable with less techinical expertise. Server administration is available at the console through both a traditional linux shell and as a proprietary ClearOS interface. It is also available through port 81 as a web-based interface. Port 81 is an ssl port and therefore requires the user to use “https” (i.e. (https://192.168.1.7:81 – for proxyman south).
The user will probably get a certificate error from their browser when they access this site because it is a self-signed certificate by default. While self-signed certificates don't validate the identity of the server, they do allow for the encryption of sensitive information, such as the username and password. Within Champions network, it is acceptable to accept a self-signed certificate. The username is currently the administrative account on the proxy machine (i.e. root). Based on some exploration of the interface, it may be possible to add other users with privileges to use this interface. In the future, this would be better practice as the administrative account should be restricted to console access only.
When accessing the administrative port through a web browser, you will be prompted to enter credentials in a screen that looks like this:
A successful login should result in the following console:
For proxyman and proxymansouth, we currently only provide proxy and content filtering services. Settings for those services can be found under the “Gateway” menu item on the top and left-hand menus under the item “Content-Filter”. There is also a “Web Proxy” item with limited settings for the proxy, but that is mostly caching settings and the ability to enable/disable the content-filter.
The content-filter settings screen should resemble the ones below. The settings on the screen capture below were carried over from the previous version of the proxy servers. There is also the ability to stop and start the filtering service from the web console. The virus scanner and the deep url analysis are currently turned off. This is likely due to the relatively low horsepower that runs the proxy servers. Since individual computers are running Antivirus/Antimalware software, there is little security impact by not running the antivirus at the server level. Dansguardian currently provides the content-filtering and clamav provides the antivirus scanning.
Categories can be edited as well to improve the filtering's effectiveness. Each section has categories that can be included or excluded and domains can be filtered out. There still seems to be no access to the weighting system through the interface requiring a console login to edit dansguardian at that level.
ClearOS does offer an updating service to keep blacklists up to date, though that is at a cost. They also offer automatic system updates. The systems have to be registered with ClearOS to receive the automated updates. Both systems are registered with the “ClearOS SDN Free” subscription and set to receive the automated updates. Settings for the automated updates can be found under the ClearCenter menu item and the console should appear as follows:
The remainder of the settings in the console do not directly apply to the proxyman configuration.