Jonas Genannt

There are tons of manuals, howtos and blog posts, but they all depend on old samba versions.

I have get it working with Samba 3.3.7 and CUPS 1.3.8 on an Debian Lenny system.

smb.conf:

[global]
security = user
load printers = yes
printing = CUPS
printcap name = CUPS
printcap = CUPS
force printername = yes
enable privileges = yes

[printers]
comment = All Printers
browseable = no
guest ok = yes
path = /var/spool/samba
public = yes
printable = yes
writable = no
use client driver = no

[print$]
comment = Printer Driver Download Area
path = /var/lib/samba/printers
browseable = no
guest ok = yes
read only = yes
write list = @printeradms root
directory mask = 0775
create mask = 0664

Tasks

• create an group named printeradms


• add users to the group


• /var/lib/samba/printers: writeable for the group printeradms


• set printer rights for the group: net rpc rights grant 'DOMAINNAME\printeradms' SePrintOperatorPrivilege


• add first printer to cups


• restart samba

Login to an Windows computer

• connect to the samba server \\servername


• go to subfolder printers


• right click on you printer


• klick on option


• there will be an error message about missing driver. CANCEL here!


• install new driver in the option dialog


• done!

Your printer queue will now blow up, because windows printer queue shows also the completed cups printer jobs. You have to add the following lines to cupsd.conf:

PreserveJobFiles No
PreserveJobHistory No

I have added an new feature to my Server Manager. You can now use that manager to maintain the /etc/network/interfaces file on debian.

Server Manager - Debian Interfaces configuration from Jonas on Vimeo.

I have updated my 3Ware 3dm2 debian packages.

Now version 10.0 is available on jonas.genannt.name. The CLI tools 10.0 are also available.

An Debian Repository is also available.

I have added an DNS Interface to my Server Manager. The nameservers pulls the configuration via http.

The nameserver interface can handle:

- primary nameserver only
- secondary nameserver only
- pri/sec nameserver
- hidden primary

Get the Bind configuration:
http://servermgmt.demo.brachium-system.net/nameserver/getconfig/ns1.brachium-system.net/bind/config

Get the Bind zone configuration:
http://servermgmt.demo.brachium-system.net/nameserver/getconfig/ns1.brachium-system.net/bind/zone
The nameserver has to split the zone configuration and save it.


You can test it: http://servermgmt.demo.brachium-system.net/domains

user: admin
pass: admin

Source code is available on github.

With this post I will explain you the Puppet Configuration Key feature at the server manager.

With the puppet configuration key feature you can store configuration data used in puppet classes at your database. You can also store configuration data on server groups and add servers to that group.

Yes - it's working like ripienaar's great extlookup but with database.

For this example I have got two hosts:

• valentina.brachium-system.net


• web01.brachium-system.net

Both hosts are saved on the server manager.

We have some puppet configuration keys at server manager:



The first server valentina.brachium-system.net has got the following puppet key configuration:




The second server web01.brachium-system.net has got the following puppet key configuration:



We are using this puppet manifest:

# Configuration for dblookup from servermgmt:
$dblook_host = "localhost"
$dblook_user = "servermgmt"
$dblook_pass = "servermgmt"
$dblook_db = "servermgmt"


class ssh::server {
$ssh_server_password_authentication = dblookup('ssh_server_password_authentication')
$ssh_server_root_login = dblookup('ssh_server_root_login')
notice("ssh_server_password_authentication: $ssh_server_password_authentication")
notice("ssh_server_root_login: $ssh_server_root_login")
file { "/etc/ssh/sshd_config":
content => template("/home/jonas/puppet/templates/sshd_config.erb")
}
}


node default {
$pkg_install_subversion = dblookup('pkg_install_subversion')
notice("We are the server: ${fqdn}")
notice("pkg_install_subversion: $pkg_install_subversion")
include ssh::server
package {"subversion":
ensure => dblookup('pkg_install_subversion')
}
}

We run that manifest on the server valentina:

notice: Scope(Node[default]): We are the server: valentina.brachium-system.net
notice: Scope(Node[default]): pkg_install_subversion: present
notice: Scope(Class[ssh::server]): ssh_server_password_authentication: yes
notice: Scope(Class[ssh::server]): ssh_server_root_login: no

We run that manifest on the server web01:

notice: Scope(Node[default]): We are the server: web01.stg.brachium-system.net
notice: Scope(Node[default]): pkg_install_subversion: absent
notice: Scope(Class[ssh::server]): ssh_server_password_authentication: no
notice: Scope(Class[ssh::server]): ssh_server_root_login: yes

You can see on the verbose output from puppet, the information is fetched from the database - if the server has got no own value for one key, the default value is used.

You can get the source at http://github.com/hggh/servermgmt

I have uploaded the source code of my server manager to github:

http://github.com/hggh/servermgmt

An really cool advertising postcard from airberlin airline, seen at an pub in Stuttgart:

If you manage some servers you need to document, which server has got which ip address. I have written an small webapp for that stuff. You can create companies, networks and servers.

One server could have one operation system, one server type (like hardware or virtual) and the mac/ip addresses. For every operation system you can save an preseed configuration for debian installation.


Some screenshots of the app:



--------------

Update:


It works like the extlookup, but not with files - it does an database lookup.
--------------

Planed features:

- authentication
- connect virtual servers to hardware nodes
- ...

Seen near nuclear power facility Neckarwestheim(near Stuttgart) last year.

I have got one repository with 11495 files. These repository consists of jpeg, ttf, png and pdf file types. All files are binary.

I have done some benchmark with git and svn:

git clone (remote,ssh) : 38m49.516s
svn checkout (remote,ssh) : 48m20.330s

Size, after git clone : 23G
Size, after svn checkout : 24G
Size, only files without revision control: 12G

git status : 0m0.634s
svn status : 0m0.654s

Playing with nginx. Here are some random hints:

1.) nginx with php:

/usr/bin/spawn-fcgi -a 127.0.0.1 -p 9000 -u www-data -g www-data -f "/usr/bin/php-cgi -c /etc/php5/cgi/php-nginx.ini" -P /var/run/fcgi-php.pid

2.) Deny access to .svn directories:

location ~ \.svn { deny all; }

3.) rewrite urls

if ( !-f $request_filename ) {
rewrite ^/images/([A-Za-z]+)\/(.*)$ /images/default/$2 break;
}

The rewrite rule will redirect /images/bar/foo.png if it does not exists to /images/default/foo.png

spwan-fcgi is included in the lighttpd package if you are using lenny. On squeeze and sid spawn-fcgi is an standalone package!

Rest in peace perldoc.perl.org. You was so excellent with your online search and code highlighting. But after the redesign Web 2.0 is gone into perldoc. This is really bad. The old layout was so great.

The new design has got some scrolling bugs ( scroll fast to bottom, than you see double boxes of text) and the manual text is too often broken into newlines.

Please have a look: The good old one and the new one. Both pages displays the same content, but the old layout has got more free space and better overview.

You can use Arduino with Ethernetshield to fetch temperatures over network.

I have created an little sketch for Arduino. This sketch has got an "telnet" server. If you connect to the IP address of the arduino, you will get the temperature from all connected DS1820 sensors.



The DS1820 sensor is build in the 6.2 inch female plug. I have only two sensors connected, but you can connect more sensors to the One Wire Bus. It works like the old digitemp system. But digitemp needs an serial connector. My Arduino works via Network - that's really cool!

I also created an munin plugin for this Arduino system. If you edit /etc/munin/plugin-conf.d/munin-node you can supply alias names for the hex address of the sensor.

[arduino_ds1820_192.168.1.3]
env.101f9dca18020 Jonas desk
env.105269ca180a6 PC power supply
timeout 60

You have to insert the timeout 60 because the system fetches the temperature from the sensors just in time, this needs some time

I have updated my 3Ware 3dm2 debian packages.

Now version 9.5.2 is available on jonas.genannt.name. The CLI tools 9.5.2 are also available. Please have a look here.

An Debian Repository is also available.

I have updated my 3Ware CLI debian packages.

Now version 9.5.2 is available on jonas.genannt.name.