Table of Contents for Index

Secure Sockets Layer certificate for

applications. See campin.net shopping web site; deploying applications

application service providers (ASPs), automation and

Apress web site

archive mode (rsync)

assumptions of automation system

authentication

public key

authentication file for Nagios web interface –2nd

RSA

forwarding port between machines –2nd

restricting –2nd

Authentication screen (Kickstart Configurator)

authorized_keys file

common accounts and –2nd

configuring to restrict access

from directive

limited command execution, allowing

options –2nd

untrusted hosts, dealing with

authorized keys, specifying –2nd

autofs package

automated installation systems

benefits of

example environment

FAI for Debian

packages, installing and configuring –2nd

install client, customizing –2nd

network booting, configuring –2nd

steps to set up

JumpStart

installation tree, creating and making available –2nd

profile server, setting up –2nd

steps to set up –2nd

Kickstart

host, getting

host, installing

kickstart file, contents of –2nd

kickstart file, creating –2nd

network boot, setting up –2nd

steps for setting up

automation

assessing need for –2nd

benefits of –2nd

first rule of –2nd

size of company and

AWK language

advanced usage –2nd

basic usage –2nd

B

back referencing –2nd

backups

FAI and –2nd

Jumpstart and –2nd

Kickstart and –2nd

of Subversion repository

copying to other host –2nd

compatibility issues with

Bash (Bourne-Again Shell)

scripts

scripting specifically for

debugging –2nd

Basic Configuration screen (Kickstart Configurator)

benefits of automation

documented system configuration policies

error reduction –2nd

Beowulf clusters, automation and

time savings

Berkeley Internet Name Domain (BIND)

automating configuration –2nd

Blastwave software repository , 2nd

binary files, monitoring

bind9 package

Boot Loader Options screen (Kickstart Configurator)

bootstrapping, cf.preconf script and –2nd

Bourne-Again Shell (Bash)

compatibility issues with

scripts

brute force login attempts

debugging –2nd

Building a Monitoring Infrastructure with Nagios (Josephsen)

building Ganglia programs –2nd

Burgess, Mark , 2nd , 3rd

C

campin.net shopping web site

central cfengine host, installing

cfengine configuration files

cfmotd.task –2nd

cf.preconf –2nd

cfengine master repository, setting up

Red Hat Apache package, configuring for

sudo, enabling at –2nd

Carter, Gerald

cf.account_sync task

cfagent command

cfagent.conf/FAIBASE file –2nd

cfagent.conf file (cfengine)

campin.net example –2nd

output of

sections

classes , 2nd

copy –2nd

directories

disable –2nd

editfiles –2nd

files –2nd

processes –2nd

cf.central_home_dirs file –2nd

cf.debian_external_cache task

cf.configure_syslog –2nd

cf.copy_fai_files task –2nd

cf.copy_sudoers task –2nd

cf.copy_svn_backups task –2nd

cf.create_autofs_mnt_pkg task –2nd

cf.enable_rsync_daemon task –2nd , 3rd –4th

cfengine

application service providers and

basic setup for

cfexecd, running

cfservd, running –2nd

network

benefits of

central host, installing

cfagent.conf sections

classes

copy –2nd

client systems, preparing

directories

disable –2nd

editfiles –2nd

files –2nd

links

processes –2nd

shellcommands

cfrun command –2nd

classes

custom –2nd

predefined –2nd

set at runtime

clusters and

components of

configuration files

cfmotd task –2nd

cf.preconf script –2nd

managing –2nd

using

configuration files, creating

overview of , 2nd

configuration server, creating

copying configuration files with –2nd

cron daemon and

debugging

defining classes without modules

deploying Nagios with

Apache VirtualHost configuration for –2nd

authentication file, creating –2nd

building Nagios –2nd

building Nagios plug-ins –2nd

building Nagios plug-ins, copying –2nd

copying start-up script

daemon and configuration files, copying –2nd

generating SSL certificate

hostgroup file for monitoring host role, creating

localhost-only monitoring, monitoring –2nd

monitoring host role, configuring

monitoring host role, DNS entry for –2nd

monitoring remote systems –2nd

NRPE, building –2nd

NRPE configuration file, creating

NRPE, configuring Red Hat local firewall to allow –2nd

NRPE, copying –2nd

NRPE start-up script, creating

separating configuration and program directories

steps in –2nd

distributing local account files with –2nd

directory structure –2nd

downloading

fully functional infrastructure for, configuring –2nd

imports

internal commands

large companies and

list-iteration operator

masterfiles repository

master repository, setting up

pull model and

as pulling from server –2nd

reports on status of –2nd

resolve action

root privileges and

security enhancement with

applying patches and updates –2nd

file checksum monitoring

testing environment, implementing –2nd

removing SUID bit –2nd

removing unsafe files –2nd

shutting down daemons –2nd

sharing data with –2nd

SSH and

version 3, looking forward to –2nd

version control –2nd

web server farms and

cfengine modules

requirements for using –2nd

using in place of shellcommands –2nd

Cfengine.org web site

cfexecd

cf.kill_unwanted_services task

running

cf.export_pkg_share task

cf.friendstatus

cfkey command

cf.logcheck task

cfmotd task –2nd

cf.postfix_permissions task –2nd

cf.preconf script

integrated into postinstall script –2nd

cfrun command , 2nd –3rd

cfservd, running –2nd

cfservd.conf file (cfengine)

campin.net example –2nd

cf.sync_admin_scripts task

cf.setup_svn_plus_apache task –2nd

cf.suid_removal task –2nd

cf.sync_apache_binaries task

cf.upload_cfoutputs_dir task

cf.sync_autofs_maps task –2nd

cf.sync_httpd_conf task

cf.sync_postfix_config file –2nd

cf.sync_sec_config task –2nd

cf.web_master task

change development process –2nd

characters in regular expressions

matching repeating –2nd

checksum option (files section of cfagent.conf file)

special

checksum monitoring

chmod command

classes

cfengine

custom –2nd

defining with modules –2nd

defining without modules

predefined –2nd

hupcfexecdandcfservd

reload_bind

classes section (cfagent.conf file)

clients

install

FAI for Debian, customizing –2nd

JumpStart for Solaris, adding –2nd

NFS, configuring

client systems, cfengine, preparing

cluster repair, automation of

clusters

Beowulf or computational, automation and

of web servers

code-continuation character

command execution, allowing limited

commands

cfrun , 2nd –3rd

consistency of across systems

egrep , 2nd

common accounts, using SSH for

monitoring –2nd

compatibility issues with Bash

setup for –2nd

components of cfengine

Comprehensive Perl Archive Network (CPAN)

configuration files

cfengine

cfmotd task –2nd

cf.preconf –2nd

creating

copying with cfengine –2nd

Nagios –2nd

configuration policies

configuration server, cfengine, creating

documentation of

configuring

See also configuration files

Apache package from Red Hat –2nd

authorized_keys file to restrict access

automounter –2nd

BIND

automating configuration –2nd

cfengine

cfagent.conf file –2nd

cfexecd, running

cfservd.conf file –2nd

cfservd, running –2nd

configuration files

fully functional infrastructure –2nd

master repository

network for

update.conf file –2nd

FAI packages –2nd

Ganglia web interface –2nd

network booting

FAI for Debian –2nd

Kickstart for Red Hat –2nd

NFS-automounted home directories –2nd

NFS client

NFS server –2nd

NTP clients

Red Hat and Debian

Solaris 10

syslog server –2nd

content, distributing

cfengine –2nd

NFS

uses of

Subversion

synchronizing data with rsync

CPAN (Comprehensive Perl Archive Network)

copying

files, automation and

Nagios plug-ins with cfengine –2nd

Subversion backups to other host –2nd

copy section (cfagent.conf file) –2nd

cron daemon, cfengine and

custom classes (cfengine) –2nd

customizing install client –2nd

Custom JumpStart. See JumpStart for Solaris

D

daemons

cron, cfengine and

Ganglia

Nagios , 2nd –3rd

rsync, outputs directory and –2nd

unneeded, shutting down –2nd

data

isolating with sed –2nd

sharing between systems

NFS and –2nd

Subversion and –2nd

synchronizing with rsync

Debian

See also FAI for Debian

iptables packet filtering framework –2nd

named.conf.local file

contents

populating

named.conf.options file

NTP client, configuring

UID/GID numbers in

Debian cfengine2 package , 2nd

debugging

Bash scripts –2nd

cfengine

defining cfengine classes

with modules –2nd

without modules

delete switch (rsync)

deny unknown-clients setting

dependencies, automation and

deploying

applications

Apache package from Red Hat, configuring –2nd

Apache web server , 2nd –3rd

Nagios with cfengine

Apache VirtualHost configuration for –2nd

authentication file, creating –2nd

building Nagios –2nd

building Nagios plug-ins –2nd

copying Nagios plug-ins –2nd

copying start-up script

daemon and configuration files, copying –2nd

generating SSL certificate

hostgroup file for monitoring host role, creating

localhost-only monitoring, modifying –2nd

monitoring host role, configuring

monitoring host role, DNS entry for –2nd

monitoring remote systems –2nd

NRPE, building –2nd

NRPE configuration file, creating

NRPE, configuring Red Hat local firewall to allow –2nd

NRPE, copying –2nd

NRPE start-up script, creating

separating configuration and program directories

steps in –2nd

testing before

DEV directory –2nd

DHCP, Kickstart network boot and –2nd

dhcpd.conf file

directories

DEV –2nd

/etc/httpd

NFS-automounted home

aggregating contents from all hosts to single host –2nd

/srv/fai/config –2nd

STAGE

storing syslog messages in –2nd

/var/www/html –2nd

$workdir/outputs

cfengine status reports and

Red Hat Linux as aggregate host for

summarizing and e-mailing aggregated contents

summarizing and e-mailing hourly

uploading to central host –2nd

directories section (cfagent.conf file)

directory structure of cfengine –2nd

directory test verifying postfix Debian package is installed

disable action (cfengine) –2nd

disable section (cfagent.conf file) –2nd

Display Configuration screen (Kickstart Configurator)

distributing content

cfengine –2nd

NFS

uses of

Subversion

synchronizing data with rsync

distributing local account files with cfengine –2nd

DNS (Domain Name System)

architecture, choosing

entry for Nagios monitoring host role, creating –2nd

query, running without logging into host

private, setting up

BIND configuration –2nd

BIND configuration, automating –2nd

overview

of system configuration policies

documentation

of changes before making

importance of

repair script as

Domain Name System. See DNS

downloading

cfengine

Nagios

downtime, scheduling

DSA public-key encryption

DVD, creating ISO file on remote system from

E

editfiles section (cfagent.conf file) –2nd

egrep command , 2nd

e-mail notifications, testing

empty passphrases

encrypting mail traffic

encryption, public-key

errors reduced by automation , 2nd

/etc/bootparams file –2nd

/etc/fai/fai.conf file

/etc/fai/make-fai-nfsroot.conf file –2nd

etchlamp

/etc/httpd directory

/etc/ntpd.conf file

/etc/postfix/main.cf file, modifying

/etc/rc2.d/S99runonce script –2nd

example automation

prototyping before polishing

scripting working procedure –2nd

simplicity and

step failure and

turning script into robust automation –2nd

example environment, explanation of

external NTP synchronization

F

FAIBASE.var file , 2nd

fai-chboot command

fai-doc package

FAI (Fully Automatic Installation) for Debian

backups and –2nd

packages, installing and configuring –2nd

install client, customizing –2nd

network booting, configuring –2nd

steps to set up

failure of step, dealing with

failure situations

fai-setup command

fcopy command

Fedora Directory Server

file globbing

file locking

files

checksum monitoring

everything on system represented as –2nd

modifying with sed

unsafe, removing –2nd

files section (cfagent.conf file) –2nd

filesystem layouts, consistency of across systems

filters, cfengine

find command

Firewall Configuration screen (Kickstart Configurator)

firewalls

host-based, implementing

packet filtering

building and distributing programs –2nd

first rule of automation –2nd

forwarding

port between machines –2nd

ssh-agent program –2nd

G

Ganglia

configuring web interface –2nd

daemons

overview of , 2nd –3rd

Garfinkel, Simson

GID numbers, Debian

GNU Project

goldmaster (central host) –2nd , 3rd

greediness

grep command

grep program –2nd

group IDs, NFS and

H

hacks, postinstall script and

hemingway

homogenizing systems

hooks (Subversion)

host-based security

as journey, not destination

cfengine and

applying patches and updates –2nd

file checksum monitoring

removing SUID bit –2nd

removing unsafe files –2nd

shutting down daemons –2nd

firewalls and

Kerberos and

LDAP and

packet filtering

hostgroups.cfg file, defining

sudo and –2nd

host

See also monitoring host role for Nagios

alert

copying repository backups to –2nd

installing

cfengine central

Debian –2nd

Kickstart for Red Hat , 2nd

running query without logging into

untrusted, dealing with

hosts.cfg file, defining

htpasswd command

hupcfexecdandcfservd class

I

ignore section of cf.preconf script

importing

binary server tree

masterfiles/PROD directory

imports, cfengine and

import statements, cfagent.conf file and

infrastructure services

DNS

architecture, choosing

private, setting up –2nd

routing mail –2nd

time synchronization

configuring NTP clients –2nd

copying configuration files –2nd

external NTP

internal NTP masters –2nd

ntpdate utility and

user account files

adding new –2nd

distributing with cfengine –2nd

NFS-automounted home directories –2nd

standardizing local –2nd

installation, automated systems for

benefits of

example environment

FAI for Debian

packages, installing and configuring –2nd

install client, customizing –2nd

network booting, configuring –2nd

steps to set up

JumpStart

installation tree, creating and making available –2nd

profile server, setting up –2nd

steps to set up –2nd

Kickstart

host, getting

host, installing

kickstart file, contents of –2nd

kickstart file, creating –2nd

network boot, setting up –2nd

Installation Method screen (Kickstart Configurator)

steps for setting up

install client

FAI for Debian, customizing –2nd

JumpStart for Solaris, adding –2nd

installing

See also installation, automated systems for

cfengine central host

Debian host –2nd

rsync from Blastwave repository as part of JumpStart process

Internet Service Providers (ISPs), automation and

internal NTP masters –2nd

IP addresses, sysidcfg file and

iptables packet filtering framework –2nd

iptables-restore command

iptables-save command

ISO file, creating on remote system from DVD

isolating data with sed –2nd

ISPs (Internet Service Providers), automation and

J

Josephsen, David

JumpStart for Solaris

backups and –2nd

rsync from Blastwave repository as part of

profile server

install client, adding –2nd

postinstall script, creating –2nd

profile file, creating –2nd

rules file, creating –2nd

setting up

sysidcfg file, creating –2nd

rsync and

steps to set up –2nd

JumpStart process

K

Keep It Simple, Stupid (KISS) principle

Kerberos, security enhancement with

key pair, generating

installation tree, creating and making available –2nd

keywords, size

Kickstart for Red Hat

backups and –2nd

host

getting

installing

Kickstart Configurator

Authentication screen

Basic Configuration screen

Boot Loader Options screen

Display Configuration screen

Firewall Configuration screen

Installation Method screen

Network Configuration screen –2nd

Package Selection screen –2nd

Partition Information screen –2nd

Postinstallation Script screen

starting

kickstart file

script –2nd

network boot

DHCP and –2nd

TFTP and –2nd

KISS (Keep It Simple, Stupid) principle

steps for setting up

L

languages, scripting . See also AWK language; Perl

LDAP (Lightweight Directory Access Protocol), security enhancement with

LDAP System Administration (Carter)

links section (cfagent.conf file)

listings. See scripts

list-iteration operator (cfengine)

load balancing , 2nd

local account files

adding new

scripts, using –2nd

distributing with cfengine –2nd

NFS-automounted home directories

log reports

on cfengine status –2nd

syslog messages

configuring server –2nd

outputting summary reports –2nd

masterfiles directory tree (cfengine), importing –2nd

real-time reporting –2nd

types of

M

mail, routing –2nd

mail traffic, encrypting

marking sequences –2nd

master repository, cfengine, setting up

matching repeating characters in regular expressions –2nd

merging

commands for

from PROD tree to DEV tree

message-of-the-day file –2nd

methodology, consistent, and automation –2nd

mirroring files with rsync

modifying files, automation and

monitoring

automated mechanism for

common accounts –2nd

failure situations and

full suite for

Ganglia and

building and distributing programs –2nd

configuring web interface –2nd

daemons

overview of , 2nd –3rd

immediate errors or failures

Nagios and

alerts

components of –2nd

configuration files –2nd

features of –2nd

object types –2nd

remote systems –2nd

hostgroup file for, creating

monitoring host role for Nagios

configuring

DNS entry for, creating –2nd

mv command

N

Nagios

alerts

components of –2nd

configuration files –2nd

deploying with cfengine

Apache VirtualHost configuration for –2nd

authentication file, creating –2nd

building Nagios –2nd

building Nagios plug-ins –2nd

building Nagios plug-ins, copying –2nd

copying start-up script

daemon and configuration files, copying –2nd

generating SSL certificate

hostgroup file for monitoring host role, creating

localhost-only monitoring, modifying –2nd

monitoring host role, configuring

monitoring host role, DNS entry for –2nd

monitoring remote systems –2nd

NRPE, building –2nd

NRPE configuration file, creating

NRPE, configuring Red Hat local firewall to allow –2nd

NRPE, copying –2nd

NRPE start-up script, creating

separating configuration and program directories

steps in –2nd

features of –2nd

object types –2nd

service detail screen for system localhost

nagios.conf file

Nagios daemon, copying with cfengine –2nd

Nagios Remote Plug-in Executor (NRPE)

building –2nd

configuration file, creating

configuring Red Hat local firewall to allow –2nd

copying –2nd

start-up script, creating

named.conf.local file (Debian)

contents

populating

named.conf.options file (Debian)

NAT (Network Address Translation), accessing server behind

network

security of

setting up for cfengine

network appliances, automation and

network boot

FAI for Debian, configuring –2nd

Kickstart for Red Hat

DHCP and –2nd

TFTP and –2nd

Network Configuration screen (Kickstart Configurator) , 2nd

Network Time Protocol. See NTP

newlogcheck program –2nd

NFS (Network File System), sharing data with

uses for

NFS-automounted home directories

configuration file, creating

NRPE (Nagios Remote Plug-in Executor)

building –2nd

configuring Red Hat local firewall to allow –2nd

copying with cfengine –2nd

start-up script, creating

ntpdate utility

NTP (Network Time Protocol)

clients, configuring

Red Hat and Debian

Solaris 10

configuration files, copying with cfengine –2nd

external synchronization

internal masters –2nd

operating systems, homogenizing

O

object types, Nagios –2nd

OpenLDAP

OpenSSH 4.x

outputting syslog summary reports –2nd

P

Package Selection screen (Kickstart Configurator) –2nd

packet filtering software

Partition Information screen (Kickstart Configurator) –2nd

passwords

patches, applying –2nd

Perl

PHP binary, synchronizing with Apache binary using rsync –2nd

using –2nd

PHP-enabled Apache web server, building from source –2nd

pkg-get tool

plug-ins. See Nagios

policies, system configuration

ports, forwarding between machines –2nd

documentation of

postfix, virtual-domain functionality of

Postinstallation Script screen (Kickstart Configurator)

postinstall script, creating –2nd

Practical UNIX & Internet Security (Garfinkel, Schwartz, and Spafford)

predefined classes (cfengine) –2nd

pre-exec script (rsync)

Pre-eXecution Environment (PXE)

Preston, W. Curtis

preventing problems

Principles of Network and System Administration, Second Edition (Burgess)

private DNS, setting up

BIND configuration

automating –2nd

private keys, trust in cfengine and

overview

procedure, understanding before automating , 2nd

procedure example

prototyping before polishing

scripting working –2nd

simplicity and

step failure and

turning script into robust automation –2nd

process accounting

processes section (cfagent.conf file) –2nd

PROD tree

production, definition of

profile server

install client, adding –2nd

postinstall script, creating –2nd

profile file, creating –2nd

rules file, creating –2nd

setting up

sysidcfg file, creating –2nd

program binaries

NFS and –2nd

Pro Nagios 2.0 (Turnbull)

prototyping procedure before polishing

proxy software

prtdiag command

public key authentication

generating key pair

PXE (Pre-eXecution Environment)

pulling from server, cfengine as –2nd

pull method –2nd

pull model, cfengine and

push method –2nd , 3rd

PXE boot

Python language

R

rdate command

read-only access, granting

read-only user, setting up

real-time reporting, syslog summary reports –2nd

Red Hat Linux

See also Kickstart for Red Hat

as aggregate host for outputs directories

Apache package, configuring –2nd

local firewall, configuring to allow NRPE –2nd

NTP client, configuring

sudoers file example entries –2nd

Red Hat Network (RHN), benefits of

regular expressions

characters

matching repeating –2nd

special

marking and back referencing –2nd

Remote Procedure Calls (RPCs)

reload_bind class

remote systems

configuring Nagios to monitor –2nd

creating ISO file on

removing

SUID bit set –2nd

unsafe files –2nd

repetitive tasks, elimination of, with automation

reports. See log reports

reproducibility of automated system

resolve action (cfengine)

resources

See also web sites

restricting RSA authentication

forwarding port between machines –2nd

limited command execution, allowing

untrusted hosts, dealing with

revision-control system. See Subversion

root account, access to –2nd

root privileges, and cfengine

routing mail –2nd

RPCs (Remote Procedure Calls)

RSA authentication

forwarding port between machines –2nd

restricting –2nd

RSA public-key encryption

rsh command

RSH protocol, rsync and

rsync

daemon, outputs directory and –2nd

installing as part of JumpStart process

synchronizing Apache and PHP with –2nd

rsync-outputs-dir-pre-exec

rsyncd.conf-www file –2nd , 3rd

rules file, creating –2nd

S

S99runonce script

SAs (system administrators)

multiple, dealing with –2nd

tasks and responsibilities of , 2nd –3rd

scheduling downtime

Schwartz, Alan

scripting languages . See also Perl

scripting working procedure

example of –2nd

turning into robust automation –2nd

scripts

add_local_user

administrative, usage information for

for analyzing log file and summarizing user logins –2nd

cf.account_sync task

cfagent.conf/FAIBASE and update.conf/FAIBASE files –2nd

cfagent.conf file , 2nd –3rd

cf.any hostgroup

cf.central_home_dirs file –2nd

cf.cfengine_cron_entries task

editfiles section

shellcommands section

cf.configure_syslog –2nd

cf.copy_fai_files task –2nd

cf.copy_sudoers task –2nd

cf.copy_svn_backups task –2nd

cf.create_autofs_mnt_pkg task –2nd

cf.enable_rsync_daemon task –2nd , 3rd –4th

cf.export_pkg_share task

cf.kill_unwanted_services task

cf.logcheck task

cfmotd task

editfiles section

motd_local section

cf.postfix_permissions task

cf.preconf –2nd , 3rd –4th

cf.setup_svn_plus_apache task –2nd

cf.suid_removal task –2nd

cf.sync_admin_scripts

cf.sync_apache_binaries task

cf.upload_cfoutputs_dir task

cf.sync_autofs_maps task –2nd

cf.sync_httpd_conf task

cf.sync_postfix_config file –2nd

cf.sync_sec_config task –2nd

cf.web_master task

classes/cf.main_classes contents

control/cf.control_cfagent_conf contents

control/cf.control_cfexecd contents

creating user accounts using –2nd

creating with Bash –2nd

dhcpd.conf file

directory test to verify postfix Debian package is installed

/etc/bootparams file –2nd

/etc/fai/fai.conf file

/etc/fai/make-fai-nfsroot.conf file –2nd

/etc/ntpd.conf file

/etc/postfix/main.cf file, modifying

/etc/rc2.d/S99runonce –2nd

FAIBASE.var file –2nd

f.friendstatus

hostgroups/cf.any contents

iptables rule set that implements log host policy –2nd

kickstart file (ks.cfg) –2nd

named.conf.local file (Debian)

contents

populating

named.conf.options file (Debian)

for processing configuration file and generating authorized_keys files –2nd

rsyncd.conf-www file –2nd , 3rd

rsync-outputs-dir-pre-exec

running Apache and PHP binaries –2nd

S99runonce

sec.conf file –2nd

/srv/fai/config directory –2nd

/srv/fai/config/package_config/WEB file

svn_access file

svn.campin.net file –2nd

update.conf file , 2nd

zones.rfc1918 file

search engines, automation and

sec.conf file –2nd

SEC (Simple Event Correlator) –2nd

Secure Shell (SSH) protocol

cfengine and

common accounts

monitoring –2nd

setup for –2nd

enhancing security with

public key authentication

generating key pair

as journey, not destination

rsync and

Secure Sockets Layer certificate

for Apache web server

for Nagios web interface

security

Apache web server, building from source

automation and

cfengine and

applying patches and updates –2nd

file checksum monitoring

removing SUID bit –2nd

removing unsafe files –2nd

shutting down daemons –2nd

enhancing with SSH

firewalls and

outputs directory and rsync daemon

Kerberos and

LDAP and

packet filtering

configuration (cfengine), creating

sudo and –2nd

sed stream editor

server keys, generating

servers

See also Apache web server; FAI for Debian; JumpStart for Solaris; Kickstart for Red Hat; profile server

accessing behind NAT

cfengine as pulling from –2nd

install, setting up –2nd

NFS, configuring –2nd

Subversion, automating deployment of –2nd

syslog, configuring –2nd

web, clusters of

Service Level Agreements (SLAs)

Service Management Facility (Solaris 10)

sharing data between systems

NFS and

uses of

Subversion and

synchronizing data with rsync

shellcommands (cfengine), using modules in place of –2nd

shellcommands section (cfagent.conf file)

shell escapes

shells, popular . See also Bash shell

shutting down unneeded daemons –2nd

Simple Event Correlator (SEC) –2nd

simplicity, opting for

size keyword

size of company, and automation

SLAs (Service Level Agreements)

software

internally developed

packet filtering –2nd

proxy

Solaris 10

See also JumpStart for Solaris

NTP client, configuring

patching

Service Management Facility

Spafford, Gene

SplayTime variable

split horizon DNS setup

/srv/fai/config directory script –2nd

/srv/fai/config/package_config/WEB file

ssh-agent program

description of , 2nd –3rd

forwarding –2nd

using without starting new process –2nd

SSH (Secure Shell) protocol

cfengine and

common accounts

monitoring –2nd

setup for –2nd

enhancing security with

public key authentication

generating key pair

environment, description of

rsync and

SSL certificate

for Apache web server

for Nagios web interface

STAGE directory

startup company example

See also campin.net shopping web site

installing and configuring systems for –2nd

stdin, modifying with sed

storing new user accounts

Subversion source-control system

cfengine version control with

masterfiles directory tree, importing –2nd

overview of , 2nd

repository backups

copying to other host –2nd

sharing data with

testing environment, implementing –2nd

sudo program

enabling –2nd

using –2nd

SUID bit set, removing –2nd

Sun Live Upgrade procedure

Sun systems, patching

svn_access file

svnadmin hotcopy command

svn.campin.net file –2nd

synchronizing

See also time synchronization

Apache and PHP using rsync –2nd

data using rsync

system.cfg file, defining

sysidcfg file, creating –2nd

syslog messages

real-time reporting –2nd

storing in directory

configuring syslog server –2nd

outputting summary log reports –2nd

system accounts, protecting –2nd

system administrators (SAs)

multiple, dealing with –2nd

tasks and responsibilities of , 2nd –3rd

system configuration policies

system drift documentation

documentation of

system-imaging servers . See also FAI for Debian; JumpStart for Solaris; Kickstart for Red Hat

system status, verification of

T

Tcl language

tedious tasks, elimination of, with automation

telnet command

templates, Nagios , 2nd

testing

before deploying

e-mail notifications

testing environment, implementing with Subversion –2nd

TFTP (Trivial File Transfer Protocol) –2nd

tidy action

time saved by automation

timestamp option (rsync)

time synchronization

configuring NTP clients

Red Hat and Debian

Solaris 10

copying configuration files –2nd

external NTP

internal NTP masters –2nd

ntpdate utility and

Trivial File Transfer Protocol (TFTP) –2nd

tools

ntpdate

pkg-get

yum

Turnbull, James

U

UID numbers, Debian

universal time (UTC), NTP and

UNIX Backup and Recovery (Preston)

untrusted hosts, dealing with

update.conf/FAIBASE file –2nd

update.conf file (cfengine)

campin.net example –2nd

usage information for administrative scripts

user account files

adding new

scripts, using –2nd

distributing with cfengine –2nd

NFS-automounted home directories

standardizing local –2nd