|
Size: 12448
Comment:
|
Size: 11968
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| 1. You need to install a "minimal install" of CentOS 6.8, using the minimal install CD. 2. Configure Network for DHCP and to "Connect Automatically"(/etc/sysconfig/network-script/ifcfg-eth0) 3. Partition sizes should be as follows (Create Custom Layout): / 20-50GB, depending on size of drive, format as EXT4 swap 2-32GB, the same size as physical RAM /u with the rest of available space (Fill to maximum available size), formatted as EXT4 4. After the OS install is finished it will restart. Turn off firewall and selinux |
You need to install a "minimal install" of CentOS 6.8, using the minimal install CD. Hostname should be called concare4. Configure Network for DHCP and to "Connect Automatically" Partition sizes should be as follows (Create Custom Layout): / 20-50GB, depending on size of drive, format as EXT4 swap 2-32GB, the same size as physical RAM /u with the rest of available space (Fill to maximum available size), formatted as EXT4 Make sure you tell us what the root password is set to. After install is finished it will restart. Turn off firewall and selinux. |
| Line 13: | Line 23: |
| edit /etc/sysconfig/selinux and make sure the SELINUX line is as follows: SELINUX=disabled 5. install wget and ppp: |
edit /etc/sysconfig/selinux and make sure the SELINUX line is as follows: SELINUX=disabled For linode only: edit /etc/resolv.conf and add: nameserver 8.8.8.8 Then make the file immutable chattr +i /etc/resolv.conf install wget and ppp: |
| Line 19: | Line 41: |
| 6. download the following file into the server: http://customers.creativecomputing.com.au/concare/vpn.tgz untar the file into /etc/ | download the following file into the server: http://customers.creativecomputing.com.au/concare/vpn.tgz untar the file into /etc/ |
| Line 29: | Line 55: |
| 7. then as root, accept the fingerprint: | then as root, accept the fingerprint: |
| Line 33: | Line 59: |
| The authenticity of host '220.233.135.250 (220.233.135.250)' can't be established. RSA key fingerprint is f6:f0:5c:21:74:0e:03:db:fc:71:e6:21:63:b5:c0:43. Are you sure you want to continue connecting (yes/no)? Type "yes" and cancel the connection (ctrl-c). Reboot to connect the vpn (if hostname of the server is “li823-33.members.linode.com”, we need to add the “li823-33.members.linode” into the /etc/hosts file for ppp connection) 8. Add epel repository: |
The authenticity of host '220.233.135.250 (220.233.135.250)' can't be established. RSA key fingerprint is f6:f0:5c:21:74:0e:03:db:fc:71:e6:21:63:b5:c0:43. Are you sure you want to continue connecting (yes/no)? Type "yes" and cancel the connection (ctrl-c). Reboot to connect the vpn Add epel repository: |
| Line 44: | Line 73: |
| Line 46: | Line 74: |
yum install libstdc++.i686 unixODBC.i686 mysql-libs.i686 mysql-libs libcurl-devel.i686 expat.i686 expat glib2.i686 freetype.i686 libSM.i686 libXrender.i686 fontconfig.i686 libXext-devel.i686 guacd (if the system complaints the i686 version (). You need to use: yum install libstdc++.i686 unixODBC.i686 mysql-libs.i686 mysql-libs libcurl-devel.i686 expat.i686 expat glib2.i686 freetype.i686 libSM.i686 libXrender.i686 fontconfig.i686 libXext-devel.i686 guacd libstdc++ glib2 ) yum install libguac-client-vnc mysql-server tomcat6 system-config-printer libXext.i686 libXext 9. Load the /u partition: Download the following tar file: http://customers.creativecomputing.com.au/concare/rel15_u_partition.tgz untar it into /u cd wget http://customers.creativecomputing.com.au/concare/rel15_u_partition.tgz |
yum install libstdc++.i686 libstdc++ unixODBC.i686 mysql-libs.i686 mysql-libs libcurl-devel.i686 expat.i686 expat glib2.i686 glib2 freetype.i686 libSM.i686 libXrender.i686 fontconfig.i686 libXext-devel.i686 guacd libguac-client-vnc mysql-server tomcat6 system-config-printer libXext.i686 libXext ImageMagick gtk2-devel gtk2-devel.i686 Load the /u partition: Download the following tar file: http://customers.creativecomputing.com.au/concare/rel15_u_partition2.tgz untar it into /u cd wget http://customers.creativecomputing.com.au/concare/rel15_u_partition2.tgz |
| Line 62: | Line 82: |
tar xvzf ~/rel15_u_partition.tgz 10. Add "control" group |
tar xvzf ~/rel15_u_partition2.tgz Add "control" group |
| Line 68: | Line 85: |
11. install turbovnc: cd |
install turbovnc: |
| Line 74: | Line 87: |
cd wget http://customers.creativecomputing.com.au/concare/turbostartup.tgz |
cd wget http://customers.creativecomputing.com.au/concare/turbostartup2.tgz |
| Line 80: | Line 90: |
tar xvzf ~/turbostartup.tgz cd |
tar xvzf ~/turbostartup2.tgz cd |
| Line 86: | Line 93: |
| Line 88: | Line 94: |
| Line 90: | Line 95: |
12. Edit /etc/X11/xinit/Xclients and add ". /u/cc/usr/commonx11.sh" below the lines for GSESSION and STARTKDE. Note there is a space between "." and "/". 13. Create the ccc user and start up its vnc session |
Edit /etc/X11/xinit/Xclients and add ". /u/cc/usr/commonx11.sh" below the lines for GSESSION and STARTKDE. Note there is a space between "." and "/". Create the ccc user and start up its vnc session |
| Line 96: | Line 99: |
| passwd ccc | |
| Line 98: | Line 101: |
14. Install guacamole: |
Install guacamole: |
| Line 102: | Line 103: |
cd wget https://sourceforge.net/projects/guacamole/files/current/binary/guacamole-0.9.9.war mv ~/guacamole-0.9.9.war /var/lib/tomcat6/webapps/guacamole.war wget http://customers.creativecomputing.com.au/concare/guacdb.sql |
cd wget https://sourceforge.net/projects/guacamole/files/current/binary/guacamole-0.9.12-incubating.war mv ~/guacamole-0.9.12-incubating.war /var/lib/tomcat6/webapps/guacamole.war wget http://customers.creativecomputing.com.au/concare/guacdb2.sql |
| Line 112: | Line 108: |
| Line 114: | Line 109: |
mysql < ~/guacdb.sql |
mysql < ~/guacdb2.sql |
| Line 118: | Line 111: |
chkconfig httpd on Guacamole URL: http://104.237.155.33:8080/guacamole/ Restart once more. guacadmin password is gu4c4dm1n 15. After the last restart, "Text mode setup utility" will run. Just press tab until "quit" is highlighted and press space. Try logging into guacamole on "http://<ip address>:8080/guacamole/" and connect to the pre configured "ccc" session. If you see a menu on top, go to System->log out ccc, then say "Log out" to the dialog box that comes up. This will close the session and start it over. If the screen has been locked out and screen saver has activated, forcibly restart the vnc session: |
Restart once more. guacadmin password is gu4c4dm1n Try logging into guacamole on "http://<ip address>:8080/guacamole/" and connect to the pre configured "ccc" session. If you see a menu on top, go to System->log out ccc, then say "Log out" to the dialog box that comes up. This will close the session and start it over. If the screen has been locked out and screen saver has activated, forcibly restart the vnc session: |
| Line 130: | Line 116: |
| Line 132: | Line 117: |
initctl start turbo VNC=5. 16. Install cups-cloudprint: cd |
initctl start turbo VNC=5 Install cups-cloudprint: cd |
| Line 140: | Line 122: |
| Line 142: | Line 123: |
| Line 144: | Line 124: |
| Line 146: | Line 125: |
| Line 148: | Line 126: |
Prior to running the following, please make sure you have a cloudprint account set up with Google and have at least one A4 printer there. This link will give you some more idea about Google cloud print: https://www.google.com/cloudprint/learn/printers.html . It is advisable that you create a Google account just for the sole purpose of printing and not use a pre-existing one. 17. The following command will initiate setting up cups cloudprint. (This will ask you to enter a URL into a browser and log in to your Google cloud print account) /usr/share/cloudprint-cups/setupcloudprint.py |
Prior to running the following, please make sure you have a cloudprint account set up with Google and have at least one A4 printer there. This link will give you some more idea about Google cloud print: https://www.google.com/cloudprint/learn/printers.html . It is advisable that you create a Google account just for the sole purpose of printing and not use a pre-existing one. The following command will initiate setting up cups cloudprint. (This will ask you to enter a URL into a browser and log in to your Google cloud print account) /usr/share/cloudprint-cups/setupcloudprint.py |
| Line 154: | Line 132: |
18. You need to rsync the binl/ binx11/ utbinl/ utbinx11/ from sam:/u/ccr.15/std/ to your server. yum install rsync in your server and then: in SAM: cd /u/ccr.15/std/ rsync -avz {ut,}bin{l,x11} root@104.237.155.33:/u/ccr.15/std/ 19. Set up chroot sftp |
Set up chroot sftp |
| Line 170: | Line 136: |
#Subsystem sftp /usr/libexec/openssh/sftp-server Subsystem sftp internal-sftp |
#Subsystem sftp /usr/libexec/openssh/sftp-server Subsystem sftp internal-sftp |
| Line 176: | Line 140: |
. ChrootDirectory /sftp/%u . ForceCommand internal-sftp |
ChrootDirectory /sftp/%u ForceCommand internal-sftp |
| Line 181: | Line 143: |
| Line 183: | Line 144: |
| Line 185: | Line 145: |
20. Set up OpenVPN |
Restart sshd if you want to use it straight away service sshd restart Set up OpenVPN |
| Line 189: | Line 149: |
| Line 191: | Line 150: |
| Line 193: | Line 151: |
| Line 195: | Line 152: |
| Line 197: | Line 153: |
| Line 199: | Line 154: |
| Line 201: | Line 155: |
| Line 203: | Line 156: |
| Line 205: | Line 157: |
| Line 207: | Line 158: |
export KEY_EMAIL="support@creativecomputing.com.au " |
export KEY_EMAIL="support@creativecomputing.com.au" |
| Line 213: | Line 162: |
| Line 215: | Line 163: |
| Line 217: | Line 164: |
| Line 219: | Line 165: |
| Line 221: | Line 166: |
| Line 223: | Line 167: |
| Line 225: | Line 168: |
| Line 227: | Line 169: |
| Line 229: | Line 170: |
| Line 231: | Line 171: |
At this point the OS is installed and a very rudimentary version of Control (based on what's installed in the original test VM) is now installed in the system. The following instructions are for adding sessions and printers. 21. To Add a new session: Add a Linux user and set their password: |
At this point the OS is installed and a very rudimentary version of Control (based on what's installed in the original test VM) is now installed in the system. The following instructions are for adding sessions and printers which I will do a live demo for. To Add a new session: Add a Linux user and set their password |
| Line 239: | Line 176: |
| Line 241: | Line 177: |
| chmod 755 /sftp/<session_name> | |
| Line 243: | Line 179: |
| Line 245: | Line 180: |
/u/cc/usr/<session_name> /sftp/<session_name>/<session_name> none bind |
/u/cc/usr/<session_name> /sftp/<session_name>/<session_name> none bind |
| Line 249: | Line 182: |
mount -a |
mount -a |
| Line 253: | Line 184: |
| Line 255: | Line 185: |
| Line 257: | Line 186: |
<USER_NUMBER> is a vnc session number, for now keep this between 6 and 100. 5 is the screen we use for support. The 'RESO' line is optional, if you leave it out, it defaults to 1600x900 Start up the vnc session: |
<USER_NUMBER> is a vnc session number, for now keep this between 6 and 100. 5 is the screen we use for support. The 'RESO' line is optional, if you leave it out, it defaults to 1600x900 Start up the vnc session |
| Line 261: | Line 189: |
Use a VNC client to connect to <ip_address_of_server>:<USER_NUMBER>. Initial password is set to "123456" If the menu is on top, go to System->Log out <session_name>, then click OK. If the screen saver has started, unlock it with the linux password and log out. This will move the menus to the bottom of the screen and disable the screen saver. |
Use a VNC client to connect to <ip_address_of_server>:<USER_NUMBER>. Initial password is set to "123456" If the menu is on top, go to System->Log out <session_name>, then click OK. If the screen saver has started, unlock it with the linux password and log out. This will move the menus to the bottom of the screen and disable the screen saver. |
| Line 265: | Line 193: |
| Line 267: | Line 194: |
| Line 269: | Line 195: |
22. create guacamole account: |
Edit the file /etc/init/start-xvncs.conf and add the number to the string ACTIVE_VNCSCREENS env ACTIVE_VNCSCREENS="5 6 7 8 9 10 11 12" This is to make sure the session will auto startup if the server was restarted. create guacamole account: |
| Line 273: | Line 201: |
| Line 275: | Line 202: |
| Line 277: | Line 203: |
| Line 279: | Line 204: |
| Line 281: | Line 205: |
| Line 283: | Line 206: |
| Line 285: | Line 207: |
| Line 287: | Line 208: |
| Line 289: | Line 209: |
| Line 293: | Line 212: |
| Line 295: | Line 213: |
| Line 297: | Line 214: |
| Line 299: | Line 215: |
| Line 302: | Line 217: |
| Default upload directory: /u/cc/usr/<session_name> | Default upload directory: /<session_name> |
| Line 305: | Line 220: |
| Line 307: | Line 221: |
Click on Add New User: |
Click on Add New User |
| Line 311: | Line 223: |
| Line 313: | Line 224: |
| Line 317: | Line 227: |
Connections: |
Connections: |
| Line 322: | Line 230: |
| log in to the guacmole session. And use gnome-control-center to turn off the screensaver. 23. Install the gtk2 package which is required by the control for the system theme: yum install gtk2-devel-2.24.23-9.el6.i686 and add export GTK2_RC_FILES="/etc/gtk-2.0/gtkrc" into the .vnc/xstartup.turbovnc file in your home directory. 24. Set up a Printer: yum install ImageMagick rsync -av sam:/u/ccr.15/std/qtsdk-2010.05/ to the same locate of your server. Add the crontab auto post task (please check the crontab in concare server) These instructions are mostly just an outline. |
Set up a Printer: These instructions are mostly just an outline. I will have to do a live demo of this. |
| Line 345: | Line 234: |
| Line 347: | Line 235: |
If using cloud print (A4 printers): On native cloudprint printer |
If using cloud print (A4 printers): On native cloudprint printer |
| Line 353: | Line 238: |
| Line 355: | Line 239: |
| Line 357: | Line 240: |
set up cloudprint on attached windows PC and Chrome. |
set up cloudprint on attached windows PC and Chrome. |
| Line 361: | Line 242: |
| Line 363: | Line 243: |
| Line 365: | Line 244: |
| Line 367: | Line 245: |
| Line 369: | Line 246: |
| Line 371: | Line 247: |
| Line 373: | Line 248: |
| Line 375: | Line 249: |
It will then ask you a series of questions, similar to the ones asked by the ./build-key-server script. You should only need to answer the "Common Name" field, "Sign the certificate?" and "1 out of 1 certificate requests certified, commit?" In the keys directory under current a configuration file <session_name>.ovpn similar to openvpn.conf must be created: |
It will then ask you a series of questions, similar to the ones asked by the ./build-key-server script. You should only need to answer the "Common Name" field, "Sign the certificate?" and "1 out of 1 certificate requests certified, commit?" In the keys directory under current a configuration file <session_name>.ovpn similar to openvpn.conf must be created. |
| Line 381: | Line 253: |
| Line 383: | Line 254: |
| Line 385: | Line 255: |
| Line 387: | Line 256: |
| Line 389: | Line 257: |
| Line 391: | Line 258: |
| Line 393: | Line 259: |
| Line 395: | Line 260: |
| Line 397: | Line 261: |
| Line 399: | Line 262: |
| Line 401: | Line 263: |
| Line 403: | Line 264: |
| Line 405: | Line 265: |
Then zip all these file you just created ( .crt, .key,.opvn and etc may be 6 or so files) |
Then zip all these file you just created ( .crt, .key,.opvn and etc may be 6 or so files) |
| Line 410: | Line 268: |
| Load into client machine. An external method may be needed to load the OpenVPN files into the client computer. | Load into client machine. An external method may be needed to load the OpenVPN files into the client computer. |
| Line 413: | Line 271: |
| Line 415: | Line 272: |
Unzip all the files into the config directory under where OpenVPN is installed (Usually C:\Program Files\OpenVPN\config). Create a shortcut to OpenVPN on the desktop if the installer has not done so. |
Unzip all the files into the config directory under where OpenVPN is installed (Usually C:\Program Files\OpenVPN\config). Create a shortcut to OpenVPN on the desktop if the installer has not done so. |
| Line 421: | Line 275: |
| Line 423: | Line 276: |
| Line 425: | Line 277: |
| Line 427: | Line 278: |
run printer management from inside Control: prnaad (as end user) |
run printer management from inside Control: prnaad (as end user) |
| Line 431: | Line 281: |
| Line 433: | Line 282: |
yum install sendmail chkconfig --levels 235 sendmail on chmod 755 -R /etc/mail service sendmail restart update all the binaries to the latest: From SAM: rsync -avz --delete /u/ccr.15/std/{ut,}bin{l,x11} root@<serverIP>:/u/cc/std/ rsync -avz –-delete /u/ccr.15/standard.adm/ root@<server IP>:/u/cc/adm/ scp /u/ccr.15/adm/menu.* /u/ccr.15/adm/*.qss root@<server IP>:/u/cc/adm/ ssh to the server. Copy the <standard company> to <company name> chmod a+w -R /u/ccr.15/<company> /u/ccr.15/adm ./contrl =>put address and phone /u/cc/std/localbin/brarep |
You need to install a "minimal install" of CentOS 6.8, using the minimal install CD.
Hostname should be called concare4. Configure Network for DHCP and to "Connect Automatically"
Partition sizes should be as follows (Create Custom Layout):
/ 20-50GB, depending on size of drive, format as EXT4
swap 2-32GB, the same size as physical RAM
/u with the rest of available space (Fill to maximum available size), formatted as EXT4
Make sure you tell us what the root password is set to.
After install is finished it will restart. Turn off firewall and selinux.
chkconfig iptables off
chkconfig ip6tables off
edit /etc/sysconfig/selinux and make sure the SELINUX line is as follows:
SELINUX=disabled
For linode only:
edit /etc/resolv.conf and add:
nameserver 8.8.8.8
Then make the file immutable
chattr +i /etc/resolv.conf
install wget and ppp:
yum install wget ppp
download the following file into the server:
http://customers.creativecomputing.com.au/concare/vpn.tgz
untar the file into /etc/
cd
wget http://customers.creativecomputing.com.au/concare/vpn.tgz
cd /etc
tar xvzf ~/vpn.tgz
then as root, accept the fingerprint:
# ssh 220.233.135.250
The authenticity of host '220.233.135.250 (220.233.135.250)' can't be established.
RSA key fingerprint is f6:f0:5c:21:74:0e:03:db:fc:71:e6:21:63:b5:c0:43.
Are you sure you want to continue connecting (yes/no)?
Type "yes" and cancel the connection (ctrl-c).
Reboot to connect the vpn
Add epel repository: # rpm -ivh http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
use yum to install additional packages yum groupinstall "Desktop" "General Purpose Desktop" "Print Server" "Web Server" "X Window System" "Internet Browser" "Office Suite and Productivity" "Xfce" yum install libstdc++.i686 libstdc++ unixODBC.i686 mysql-libs.i686 mysql-libs libcurl-devel.i686 expat.i686 expat glib2.i686 glib2 freetype.i686 libSM.i686 libXrender.i686 fontconfig.i686 libXext-devel.i686 guacd libguac-client-vnc mysql-server tomcat6 system-config-printer libXext.i686 libXext ImageMagick gtk2-devel gtk2-devel.i686
Load the /u partition: Download the following tar file: http://customers.creativecomputing.com.au/concare/rel15_u_partition2.tgz untar it into /u cd wget http://customers.creativecomputing.com.au/concare/rel15_u_partition2.tgz cd /u tar xvzf ~/rel15_u_partition2.tgz Add "control" group groupadd -g 3232 control install turbovnc: rpm -ivh http://customers.creativecomputing.com.au/concare/turbovnc-2.1.x86_64.rpm cd wget http://customers.creativecomputing.com.au/concare/turbostartup2.tgz cd /etc tar xvzf ~/turbostartup2.tgz cd wget http://customers.creativecomputing.com.au/concare/vncserver mv vncserver /opt/TurboVNC/bin/ chmod 755 /opt/TurboVNC/bin/vncserver Edit /etc/X11/xinit/Xclients and add ". /u/cc/usr/commonx11.sh" below the lines for GSESSION and STARTKDE. Note there is a space between "." and "/".
Create the ccc user and start up its vnc session adduser -m ccc passwd ccc initctl start turbo VNC=5 Install guacamole: chkconfig guacd on cd wget https://sourceforge.net/projects/guacamole/files/current/binary/guacamole-0.9.12-incubating.war mv ~/guacamole-0.9.12-incubating.war /var/lib/tomcat6/webapps/guacamole.war wget http://customers.creativecomputing.com.au/concare/guacdb2.sql chkconfig mysqld on service mysqld start mysql < ~/guacdb2.sql chkconfig tomcat6 on Restart once more. guacadmin password is gu4c4dm1n
Try logging into guacamole on "http://<ip address>:8080/guacamole/" and connect to the pre configured "ccc" session. If you see a menu on top, go to System->log out ccc, then say "Log out" to the dialog box that comes up. This will close the session and start it over. If the screen has been locked out and screen saver has activated, forcibly restart the vnc session: initctl stop turbo VNC=5 wait a few seconds, then: initctl start turbo VNC=5
Install cups-cloudprint: cd wget http://customers.creativecomputing.com.au/concare/cups.tgz cd /etc tar xvzf ~/cups.tgz yum install cupscloudprint service cups restart Prior to running the following, please make sure you have a cloudprint account set up with Google and have at least one A4 printer there. This link will give you some more idea about Google cloud print: https://www.google.com/cloudprint/learn/printers.html . It is advisable that you create a Google account just for the sole purpose of printing and not use a pre-existing one.
The following command will initiate setting up cups cloudprint. (This will ask you to enter a URL into a browser and log in to your Google cloud print account) /usr/share/cloudprint-cups/setupcloudprint.py
For now, only add the account and do not add any printers just yet.
Set up chroot sftp
In /etc/ssh/sshd_config change the following near the bottom: #Subsystem sftp /usr/libexec/openssh/sftp-server Subsystem sftp internal-sftp
Match Group sftpusers
ChrootDirectory /sftp/%u ForceCommand internal-sftp
Add a new group sftpusers and create a chroot subdirectory groupadd -g 3255 sftpusers mkdir /sftp/ Restart sshd if you want to use it straight away service sshd restart Set up OpenVPN Install the OpenVPN package yum install openvpn easy-rsa cd /usr/share/easy-rsa/2.0 source vars ./clean-all Edit the file "vars" and change the items near the end (this is just an example, you can use your real location details): export KEY_COUNTRY="AU" export KEY_PROVINCE="NewSouthWales" export KEY_CITY="CrowsNest" export KEY_ORG="Creative-Computing" export KEY_EMAIL="support@creativecomputing.com.au" export KEY_OU="Concare"
build the certificate authority (just accept all the defaults and say yes to sign the certificate and commit): source ./vars ./build-ca ./build-dh ./build-key-server server wget http://customers.creativecomputing.com.au/concare/openvpn.conf mv openvpn.conf /etc/openvpn/ chkconfig openvpn on mkdir /var/log/openvpn service openvpn start At this point the OS is installed and a very rudimentary version of Control (based on what's installed in the original test VM) is now installed in the system. The following instructions are for adding sessions and printers which I will do a live demo for.
To Add a new session: Add a Linux user and set their password adduser -m <session_name> -G sftpusers mkdir -p /sftp/<session_name>/<session_name> chmod 755 /sftp/<session_name> passwd <session_name> Add this to /etc/fstab: /u/cc/usr/<session_name> /sftp/<session_name>/<session_name> none bind Then mount it. mount -a Edit the file /u/cc/usr/vncusers.sh and add a line USER[<USER_NUMBER>]='<session_name>' RESO[<USER_NUMBER>]='800x600' <USER_NUMBER> is a vnc session number, for now keep this between 6 and 100. 5 is the screen we use for support. The 'RESO' line is optional, if you leave it out, it defaults to 1600x900 Start up the vnc session initctl start turbo VNC=<USER_NUMBER> Use a VNC client to connect to <ip_address_of_server>:<USER_NUMBER>. Initial password is set to "123456" If the menu is on top, go to System->Log out <session_name>, then click OK. If the screen saver has started, unlock it with the linux password and log out. This will move the menus to the bottom of the screen and disable the screen saver.
Change the VNC password: Open a terminal inside the session: /opt/TurboVNC/bin/vncpasswd Edit the file /etc/init/start-xvncs.conf and add the number to the string ACTIVE_VNCSCREENS env ACTIVE_VNCSCREENS="5 6 7 8 9 10 11 12" This is to make sure the session will auto startup if the server was restarted.
create guacamole account: in the web page http://<ip address>:8080/guacamole, log in as guacadmin click on the guacadmin on the upper right then click on settings click on connections click on New Connection Name: <session_name> Maximum number of connections: 5 Maximum number of connections per user: 5 Hostname: localhost Port: <5900+USER_NUMBER> Password: <vnc_password>
Enable SFTP: <Tick> Hostname: localhost Port: 22 Username: <session_name> Password: <Linux_password>
Default upload directory: /<session_name>
and then click Save. Click on Users Click on Add New User Username: <session_name> Password: <set up a password for end user> Re-enter Password: same as Password
Change own password: <tick> Connections: tick on <session_name>
Set up a Printer:
These instructions are mostly just an outline. I will have to do a live demo of this. If using a printer that will be hooked up to a windows PC, We will need to make sure that the windows printer driver is installed and a test page can be printed. If using cloudprint, a google account should be created solely for printing. If using cloud print (A4 printers): On native cloudprint printer set up cloudprint on device (this is device specific) https://support.google.com/cloudprint/answer/1686197?hl=en On classic printer set up cloudprint on attached windows PC and Chrome. https://support.google.com/cloudprint/answer/1686197?hl=en for both of the above: set up cups-cloudprint using python script /usr/share/cloudprint-cups/setupcloudprint.py If direct printing (40 column thermal receipt printers and label printers) set up openvpn account on the server: cd /usr/share/easy-rsa/2.0 source vars ./build-key <session_name> It will then ask you a series of questions, similar to the ones asked by the ./build-key-server script. You should only need to answer the "Common Name" field, "Sign the certificate?" and "1 out of 1 certificate requests certified, commit?"
In the keys directory under current a configuration file <session_name>.ovpn similar to openvpn.conf must be created. # Configuration for connecting into Concarce internal network tls-client dev tap proto udp remote <ip_address_of_server> 1194 resolv-retry infinite nobind ifconfig 10.5.0.x 255.255.255.0 # This line is client dependent. (x means choose the ip address to use for client) ca ca.crt cert <session_name>.crt key <session_name>.key verb 3 mute 10 Then zip all these file you just created ( .crt, .key,.opvn and etc may be 6 or so files) zip <session_name>.zip <session_name>.* dh2048.pem ca.crt
Load into client machine. An external method may be needed to load the OpenVPN files into the client computer.
Use the latest stable installer (whether 32 bit or 64 bit) from the following: https://openvpn.net/index.php/open-source/downloads.html Unzip all the files into the config directory under where OpenVPN is installed (Usually C:\Program Files\OpenVPN\config). Create a shortcut to OpenVPN on the desktop if the installer has not done so.
set up windows driver and make sure test page works. turn on Unix printing for windows and make sure it auto starts the service. use system-config-printer to set up cups At this point, you have a cups printer, either to a cloud printer device, or a direct printing device. run printer management from inside Control: prnaad (as end user) cloud print printer use "graphics" printing, the rest choose appropriate printer model. Go to Control "terminal details" screen to set up printers.
yum install sendmail chkconfig --levels 235 sendmail on chmod 755 -R /etc/mail service sendmail restart
update all the binaries to the latest:
From SAM: rsync -avz --delete /u/ccr.15/std/{ut,}bin{l,x11} root@<serverIP>:/u/cc/std/ rsync -avz –-delete /u/ccr.15/standard.adm/ root@<server IP>:/u/cc/adm/ scp /u/ccr.15/adm/menu.* /u/ccr.15/adm/*.qss root@<server IP>:/u/cc/adm/ ssh to the server. Copy the <standard company> to <company name> chmod a+w -R /u/ccr.15/<company> /u/ccr.15/adm ./contrl =>put address and phone /u/cc/std/localbin/brarep