This commit is contained in:
gferg 2003-07-14 13:59:42 +00:00
parent a6d280a356
commit 9dde100ba7
7 changed files with 151 additions and 52 deletions

View File

@ -1379,7 +1379,7 @@ How to convert an XFree86 modeline into an XInside/XiGraphics one. </Para>
XFree-Local-multi-user-HOWTO</ULink>,
<CiteTitle>XFree local multi-user HOWTO</CiteTitle>
</Para><Para>
<CiteTitle>Updated: June 2003</CiteTitle>.
<CiteTitle>Updated: July 2003</CiteTitle>.
Explains the shortest way to get a working multiple local X user-capable
PC system. </Para>
</ListItem>

View File

@ -827,7 +827,7 @@ partition images to and from a TFTP server. </Para>
Cluster-HOWTO</ULink>,
<CiteTitle>Linux Cluster HOWTO</CiteTitle>
</Para><Para>
<CiteTitle>Updated: March 2003</CiteTitle>.
<CiteTitle>Updated: June 2003</CiteTitle>.
How to set up high-performance Linux computing clusters. </Para>
</ListItem>
@ -3857,7 +3857,7 @@ RTLinux Installation and writing realtime programs in Linux. </Para>
Samba-Authenticated-Gateway-HOWTO</ULink>,
<CiteTitle>Samba Authenticated Gateway HOWTO</CiteTitle>
</Para><Para>
<CiteTitle>Updated: May 2003</CiteTitle>.
<CiteTitle>Updated: July 2003</CiteTitle>.
How to build a Firewall/Gateway with
rules set on user basis having the users authenticated by a Samba
Primary Domain Controller. </Para>
@ -5124,7 +5124,7 @@ version of the X Window System (X11R6) for Linux systems. </Para>
XFree-Local-multi-user-HOWTO</ULink>,
<CiteTitle>XFree local multi-user HOWTO</CiteTitle>
</Para><Para>
<CiteTitle>Updated: June 2003</CiteTitle>.
<CiteTitle>Updated: July 2003</CiteTitle>.
Explains the shortest way to get a working multiple local X user-capable
PC system. </Para>
</ListItem>

View File

@ -101,7 +101,7 @@ various issues related to this. </Para>
Cluster-HOWTO</ULink>,
<CiteTitle>Linux Cluster HOWTO</CiteTitle>
</Para><Para>
<CiteTitle>Updated: March 2003</CiteTitle>.
<CiteTitle>Updated: June 2003</CiteTitle>.
How to set up high-performance Linux computing clusters. </Para>
</ListItem>

View File

@ -1068,7 +1068,7 @@ chains software for Linux, and some ideas on how you might use them. </Para>
Samba-Authenticated-Gateway-HOWTO</ULink>,
<CiteTitle>Samba Authenticated Gateway HOWTO</CiteTitle>
</Para><Para>
<CiteTitle>Updated: May 2003</CiteTitle>.
<CiteTitle>Updated: July 2003</CiteTitle>.
How to build a Firewall/Gateway with
rules set on user basis having the users authenticated by a Samba
Primary Domain Controller. </Para>

View File

@ -1,6 +1,6 @@
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE book PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
"http://docbook.org/xml/4.2/docbookx.dtd" []>
"http://www.docbook.org/xml/4.2/docbookx.dtd" []>
<book id="index">
<bookinfo>
@ -14,9 +14,16 @@
<address><email>galia (at) st-peter.stw.uni-erlangen.de</email></address>
</affiliation>
</author>
<pubdate>Jun 2003</pubdate>
<pubdate>Jul 2003</pubdate>
<!-- Most recent revision goes at the top; list in descending order -->
<revhistory>
<revision>
<revnumber>1.1.0</revnumber>
<date>2003-07-14</date>
<authorinitials>SS</authorinitials>
<revremark> sync input agent with examples, a bit more about ruby, less Fix-Me's, additions to video compatibility</revremark>
</revision>
<!--
<revision>
<revnumber>1.0.3</revnumber>
<date>2003-06-25</date>
@ -35,6 +42,7 @@
<authorinitials>SS</authorinitials>
<revremark>more on "XFree with evdev support", reorganise a bit, resolve most of the FIX-ME's</revremark>
</revision>
-->
<revision>
<revnumber>1.0</revnumber>
<date>2003-05-13</date>
@ -1941,7 +1949,7 @@ exit 0
</sect1>
<sect1 id="first_x_server">
<title>1st X server configuration file</title>
<para>A small part of the Mandrake init scripts (you can append it to yours if you are missing something similar):</para>
<para>A small part of the Mandrake init scripts <filename>/etc/rc.d/rc.sysinit</filename> (you can append it to yours if you are missing something similar):</para>
<programlisting>
-----------------------------------------------------------------------------------
# (pixel) a kind of profile for XF86Config
@ -2226,7 +2234,7 @@ if [ $MACHINE = ppc -o $MACHINE = ppc64 ]; then
<para><emphasis>Nvidia cards</emphasis></para>
<para>Riva TNT (PCI+PCI+AGP)</para>
<para>Riva TNT2 M64 (pci)(nvidia) + Riva TNT2 M64 (pci)(nvidia)</para>
<para>Nvidia GeForce2MX(PCI)+GeForce2MX(PCI)+GeForce2MX(PCI)+GeForce2MX(PCI)</para>
<para>Nvidia GeForce2MX(PCI) + GeForce2MX(PCI) + GeForce2MX(PCI) + GeForce2MX(PCI)</para>
<para></para>
<para><emphasis>Works fine. DRI + Nvidia GLX works too.</emphasis></para>
<para></para>
@ -2239,19 +2247,22 @@ if [ $MACHINE = ppc -o $MACHINE = ppc64 ]; then
<itemizedlist>
<listitem>
<para>Generally the X server driving the AGP card has to be started first.</para>
<para>This can be acomplished by manually starting X or using gdm as desktop manager. You'll have to abstain from using xdm or kdm, as they start the X servers at the same time.</para>
</listitem>
<listitem>
<para>AGP sever restart leads to system crashes. In <filename>gdm.conf</filename>, set <option>AlwaysRestartServer=false</option>.</para>
</listitem>
<listitem>
<para>The new X server patch (XFree-4.3-prefbusid) fixes most of the problems.</para>
<para>The first and the last combination are reported to work without major problems with XFree86-prefbusid.</para>
<para>The new X server patch (XFree-4.3-prefbusid) fixes most of the problems. In case the X servers are started in the right order there are no lock ups.</para>
</listitem>
</itemizedlist>
<para>Nvidia GeForce4MX440(AGP)+TNT2M64(PCI)+TNT2M64(PCI)</para>
<para>Matrox MGAG400(AGP)+Matrox MGA1064SG[Mystique]PCI</para>
<para>Matrox MGAG550DH(AGP)+Riva TNTM64(PCI)</para>
<para>Matrox MGAG550DH(AGP)+Geforce4 420(PCI)</para>
<para>Nvidia TNT2(AGP) + Matrox Mystique(PCI)</para>
<para>Nvidia TNT2(AGP) + S3 VIRGE/DX(PCI)</para>
<para>Nvidia GeForce4MX440(AGP) + TNT2M64(PCI) + TNT2M64(PCI)</para>
<para>Matrox MGAG400(AGP) + Matrox MGA1064SG[Mystique]PCI</para>
<para>Matrox MGAG450DH(AGP) + ATI Mach 64(PCI) </para>
<para>Matrox MGAG550DH(AGP) + Riva TNT2-M64(PCI)</para>
<para>Matrox MGAG550DH(AGP) + Geforce4 420(PCI)</para>
</sect1>
</appendix>
<appendix id="examples">
@ -3577,12 +3588,13 @@ setup_event ()
if [ `echo "$PHYS" | grep $PHYS_PATTERN 2>/dev/null` ]; then
case $ACTION in
add)
rm -f $SYM_LINK
ln -s /dev/input/$DEV_EVENT $SYM_LINK
cd /dev/input
rm -f $SYM_LINK
ln -s $DEV_EVENT $SYM_LINK
debug_mesg "Input event device $NAME on $PHYS linked to $SYM_LINK"
;;
remove)
rm -f $SYM_LINK
rm -f /dev/input/$SYM_LINK
debug_mesg "Input event device link $SYM_LINK removed"
;;
esac
@ -3602,12 +3614,13 @@ setup_mouse ()
if [ `echo "$PHYS" | grep $PHYS_PATTERN 2>/dev/null` ]; then
case $ACTION in
add)
cd /dev/input
rm -f $SYM_LINK
ln -s /dev/input/$DEV_MOUSE $SYM_LINK
ln -s $DEV_MOUSE $SYM_LINK
debug_mesg "Input mouse device $NAME on $PHYS linked to $SYM_LINK"
;;
remove)
rm -f $SYM_LINK
rm -f /dev/input/$SYM_LINK
debug_mesg "Input mouse device link $SYM_LINK removed"
;;
esac

View File

@ -5,7 +5,7 @@
<title> Linux Cluster HOWTO </title>
<author>Ram Samudrala <tt>(me@ram.org)</tt> </author>
<date> v1.0, March 17, 2003 </date>
<date> v1.1, June 17, 2003 </date>
<abstract>
How to set up high-performance Linux computing clusters.
@ -64,9 +64,22 @@ recent is listed first). </p>
<p> 32 machines have the following setup each:
<itemize>
<item> 2 XEON 2.4GHZ 533FSB CPUs </item>
<item> Supermicro X5DPR-1G2 motherboard </item>
<item> 2 512MB PC2100 DDR REG ECC RAM </item>
<item> 1 40GB SEA 7200 HD </item>
<item> 1 120GB SEA 7200 HD </item>
<item> Supermicro Slim 24X CDROM </item>
<item> CSE-812 400 C/B 1U case </item>
</itemize>
</p>
<p> 32 machines have the following setup each:
<itemize>
<item> 2 AMD Palamino MP XP 2000+ 1.67 GHz CPUs </item>
<item> Asus A7M266-D w/LAN Dual DDR </item>
<item> Asus A7M266-D w/LAN Dual DDR motherboard </item>
<item> 2 Kingston 512mb PC2100 DDR-266MHz REG ECC RAM </item>
<item> 1 41 GB Maxtor 7200rpm ATA100 HD </item>
<item> 1 120 GB Maxtor 5400rpm ATA100 HD </item>
@ -141,19 +154,56 @@ following setup:
<p> 1 desktop with the following setup:
<itemize>
<item> 2 AMD XP 2600 MP </item>
<item> MSI K7D Master-L DUAL MS-6501 motherboard </item>
<item> 4 1024MB PC2100 DDR REG ECC RAM </item>
<item> 1 40GB SEA 7200 Maxtor harddisk </item>
<item> 2 120GB SEA 7200 Maxtor hardidks </item>
<item> PIONEER DVR-AO5 IDE DVD-RW </item>
<item> 1.44mb floppy drive </item>
<item> ATI Expert 2000 Rage 128 32mb video card </item>
<item> IN-WIN P4 300ATX Mid Tower case </item>
<item> Intel PCI PRO-100 10/100Mbps network card </item>
<item> 450W ENERMAX P4-430ATX power supply </item>
<item> CREATIVE SB 128 5.1 PCI soundcard </item>
</itemize>
</p>
<p> 2 desktops with the following setup:
<itemize>
<item> 2 AMD XP 2600 MP </item>
<item> MSI K7D Master-L DUAL MS-6501 motherboard </item>
<item> 2 512MB PC2100 DDR REG ECC RAM </item>
<item> 1 40GB SEA 7200 Maxtor harddisk </item>
<item> 2 120GB SEA 7200 Maxtor hardidks </item>
<item> MSI 52X24X52X CR52-A2 CD-RW </item>
<item> 1.44mb floppy drive </item>
<item> ATI Expert 2000 Rage 128 32mb video card </item>
<item> IN-WIN P4 300ATX Mid Tower case </item>
<item> Intel PCI PRO-100 10/100Mbps network card </item>
<item> 450W ENERMAX P4-430ATX power supply </item>
<item> CREATIVE SB 128 5.1 PCI soundcard </item>
</itemize>
</p>
<p> 1 desktop with the following setup:
<itemize>
<item> 2 AMD Palamino MP XP 2000+ 1.67 GHz CPUs </item>
<item> Asus A7M266-D w/LAN Dual DDR </item>
<item> 2 Kingston 512mb PC2100 DDR-266MHz REG ECC RAM </item>
<item> Ricoh 32x12x10 CDRW/DVD Combo EIDE </item>
<item> 1.44mb floppy drive </item>
<item> 1 41 GB Maxtor 7200rpm ATA100 HD </item>
<item> 1 120 GB Maxtor 5400rpm ATA100 HD </item>
<item> 1.44mb floppy drive </item>
<item> ATI Expert 2000 Rage 128 32mb </item>
<item> ATI Expert 2000 Rage 128 32mb video card </item>
<item> IN-WIN P4 300ATX Mid Tower case </item>
<item> Intel PCI PRO-100 10/100Mbps network card </item>
<item> Enermax P4-430ATX power supply </item>
</itemize>
</p>
<p> 1 desktop with the following setup:
@ -171,6 +221,7 @@ following setup:
<item> Microsoft Intellimouse Explorer </item>
<item> Supermicro SC760 full-tower case with 400W PS </item>
</itemize>
</p>
<p> 2 desktops with the following setup:
@ -275,7 +326,23 @@ following setup:
<item> Asus 52X CD-A520 INT IDE cdrom </item>
<item> 1.44 MB floppy drive </item>
<item> ATI Expert 2000 Rage 128 32mb video card </item>
<item> 4 Intel Pro/1000T Gigabit Server ethernet cards </item>
<item> 3 Intel Pro/1000T Gigabit Server ethernet cards </item>
<item> 4U Black Rackmount Steel case </item>
</itemize>
</p>
<p> 1 gateway with the following setup. The gateway is a mirror of
the firewall in case the firewall breaks.
<itemize>
<item> AMD Palamino XP 1800+ 1.57GHz CPU </item>
<item> MSI KT3 Ultra2 KT333 MS-6380E motherboard </item>
<item> 512 MB PC2100 DDR-266MHz DIMM RAM </item>
<item> 40GB Seagate 7200rpm ATA/100 hard disk </item>
<item> Asus 52X CD-A520 INT IDE cdrom </item>
<item> 1.44 MB floppy drive </item>
<item> ATI Expert 2000 Rage 128 32mb video card </item>
<item> 3 Intel Pro/1000T Gigabit Server ethernet cards </item>
<item> 4U Black Rackmount Steel case </item>
</itemize>
</p>
@ -296,6 +363,7 @@ following setup:
<p> Monitors:
<itemize>
<item> 2 17" Viewsonic VE700 LCD monitor </item>
<item> 1 20.1" Viewsonic VP201M LCD monitor </item>
<item> 1 22" Viewsonic P220F 0.25-0.27m monitor </item>
<item> 4 21" Sony CPD-G500 .24mm monitor </item>
@ -318,13 +386,14 @@ following setup:
<sect1> Putting-it-all-together hardware
<p> We use KVM switches with a cheap monitor to connect up and "look"
<p> We used to use KVM switches with a cheap monitor to connect up and "look"
at all the machines:
<itemize>
<item> 15" .28dp XLN CTL Monitor </item>
<item> 3 Belkin Omniview 16-Port Pro Switches </item>
<item> Belkin Omniview 2-Port Switch </item>
<item> APC AR203 netshelter rack unit </item>
</itemize>
</p>
@ -336,9 +405,9 @@ more monitor switches/KVM cables. </p>
<p> Networking is important:
<itemize>
<item> 2 Netgear FS750NA 48 port/1 git network switch </item>
<item> 1 Netgear FSM750S 48 port/2 git network switch </item>
<item> 1 Netgear FS517TS 16 port/1 git network switch </item>
<item> 1 Netgear FS750NA 48 port network switch </item>
<item> 1 Netgear FS524 24 port network switch </item>
<item> 1 Cisco Catalyst 3448 XL Enterprise Edition 48 port network switch </item>
<item> 1 Netgear ME102NA Wireless Access Point </item>
@ -355,8 +424,8 @@ more monitor switches/KVM cables. </p>
<p> Our vendor is Hard Drives Northwest (<htmlurl
url="http://www.hdnw.com" name="http://www.hdnw.com">). For each
compute node in our cluster (containing two processors), we paid about
$1500-$2000, including taxes. Generally, our goal is to keep each node to
below $2000.00 (which is what our desktop machines cost). </p>
$1500-$2000, including taxes. Generally, our goal is to keep the cost
of each processor to below $1000 (including housing it). </p>
</sect1>
@ -378,6 +447,7 @@ below $2000.00 (which is what our desktop machines cost). </p>
<item> Kernel 2.2.16-22, distribution KRUD 7.0
<item> Kernel 2.4.9-7, distribution KRUD 7.2
<item> Kernel 2.4.18-10, distribution KRUD 7.3
<item> Kernel 2.4.20-13.9, distribution KRUD 9.0
</itemize>
These distributions work very well for us since updates are sent to us
@ -568,6 +638,10 @@ url="http://www.ram.org/computing/linux/cluster/fantini_contribution.tgz"
name="http://www.ram.org/computing/linux/cluster/fantini_contribution.tgz">.
</p>
<p> I have been working on a system where all you have to do is put a
CD in, boot the machine in, and it'll come back up fully cloned. I
will post this in the near future. </p>
</sect2>
<!-- ************************************************************* -->
@ -652,14 +726,20 @@ applications you wish to run. </p>
<p> For the single most important program we run (our <it>ab
initio</it> protein folding simulation program), using the Pentium 3 1
GHz processor machine as a frame of reference, the Athlon 1.2 GHz
processor machine is about 16% faster on average, the Xeon 1.7 GHz
machine is about 25-32% faster on average, the Athlon 1.5 GHz
processor is about 38% faster on average, and the Athlon 1.7 GHz
processor is about 46% faster on average (yes, the Athlon 1.5 GHz is
faster than the Xeon 1.7 GHz since the Xeon executes only six
instructions per clock (IPC) whereas the Athlon executes nine IPC (you
do the math!)). </p>
GHz processor machine as a frame of reference, on average:
<tscreen><verb>
Athlon 1.2 GHz processor is about 16% faster
Xeon 1.7 GHz processor is about 27% faster
Athlon 1.5 GHz processor is about 38% faster
Athlon 1.7 GHz processor is about 46% faster
Xeon 2.4 GHz processor is about 62% faster
</verb></tscreen>
</p>
<p> Yes, the Athlon 1.5 GHz is faster than the Xeon 1.7 GHz since the
Xeon executes only six instructions per clock (IPC) whereas the Athlon
executes nine IPC (you do the math!). </p>
</sect1>
@ -723,3 +803,7 @@ Samudrala's research page (which describes the kind of research done with these
</article>
---------------------------------------------------------------------
To unsubscribe, e-mail: submit-unsubscribe@en.tldp.org
For additional commands, e-mail: submit-help@en.tldp.org

View File

@ -3,7 +3,7 @@
<article><!-- LyX 1.2 created this file. For more info see http://www.lyx.org/ -->
<title>Samba Authenticated Gateway HOWTO
</title><author>Ricardo Alexandre Mattar
</author><date>v1.1.0, 2003-05-03
</author><date>v1.1.1, 2003-07-14
</date><abstract>This documents intends to show how to build a Firewall/Gateway
with rules set on user basis having the users authenticated by a
Samba Primary Domain Controller
@ -57,9 +57,9 @@
</p><p>Naming of particular products or brands should not be seen as
endorsements.
</p><sect1>New versions
<p>The newest release of this document can be found at <url url="http://smbgate.sourceforge.net" name="http://smbgate.sourceforge.net">
<p>The newest release of this document can be found at <url url="http://ram.eti.br" name="http://ram.eti.br"> or at <url url="http://www.tldp.org" name="http://www.tldp.org">
</p><p>Related HOWTOs can be found at the Linux Documentation Project
homepage.
homepage at <url url="http://tldp.org" name="http://tldp.org">.
</p><sect1>Translations
<p>A Portuguese version is available.
</p><p>A French translation by Guillaume Lelarge is available at<url url="http://www.traduc.org/docs/HOWTO/lecture/Samba-Authenticated-Gateway-HOWTO.html" name="http://www.traduc.org">
@ -68,7 +68,7 @@
<p>Contributions and criticism are both welcome.
</p><p>Corrections to my English are also very welcome!
</p><p>If you find any bugs in the scripts included, please tell me.
</p><p>You can find me at ricardo.mattar@bol.com.br
</p><p>You can find me at ricardo@ram.eti.br or ricardo.mattar@bol.com.br
</p><sect1>Copyright and trademarks
<p>Copyright (c) 2002-2003 Ricardo Alexandre Mattar
</p><p>Permission is granted to copy, distribute and/or modify this
@ -84,6 +84,7 @@
</p><p>Thanks to Guillaume Lelarge for the (continuous) help with the
revision.
</p><p>Thanks to Erik Esplund for further language corrections.
</p><p>Thanks to Albert Teixids for code improvements.
</p><sect>Requirements
<sect1>Knowledge
<p>This document is target at the seasoned systems administrator.
@ -174,7 +175,7 @@ echo &quot;1&quot; &gt; /proc/sys/net/ipv4/ip_dynaddr
maybe your LINUX distribution also has plenty of SAMBA documentation.
</p><p>We will need to setup SAMBA as a Primary Domain Controller. I
will give an example configuration file here, but you should read
the <url url="http://www.samba.org/samba/docs/Samba-HOWTO-Collection.html" name="Samba HOWTO Collection"> and learn all you can about a PDC.
the <url url="http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection.html" name="Samba HOWTO Collection"> and learn all you can about a PDC.
</p><sect2>Basic SAMBA setup.
<p>Since I do not intend to rewrite the SAMBA documentation, here
goes a sample smb.conf file:
@ -216,7 +217,7 @@ guest account =
comment = login tracking share
path = /home/samba/samba
browseable = No
root preexec = /usr/local/bin/netlogon.sh &percnt;u
root preexec = /usr/local/bin/netlogon.sh &percnt;u &percnt;I
root postexec = /usr/local/bin/netlogoff.sh &percnt;u
</verb></p><p>You will have to do with it or read the SAMBA documentation if
you really want to control your server and network.
@ -246,7 +247,7 @@ net use z: &bsol;&bsol;linux&bsol;samba /yes
comment = login tracking share
path = /home/samba/samba
browseable = No
root preexec = /usr/local/bin/netlogon.sh &percnt;u
root preexec = /usr/local/bin/netlogon.sh &percnt;u &percnt;I
root postexec = /usr/local/bin/netlogoff.sh &percnt;u
</verb></p><p>As you can guess or know if you read the SAMBA documentation,
the root preexec and the root postexec lines tell SAMBA to run the
@ -268,7 +269,7 @@ root postexec = /usr/local/bin/netlogoff.sh &percnt;u
if &lsqb; -f /var/run/smbgate/&dollar;1 &rsqb; ; then
exit 0
fi
smbstatus | grep &dollar;1 | grep samba | gawk '// &lcub; print substr(&dollar;6,2,length(&dollar;6)-2)&rcub;' &gt; /var/run/smbgate/&dollar;1
echo &dollar;2 &gt; /var/run/smbgate/&dollar;1
IPTABLES='/usr/sbin/iptables'
EXTIF='eth0'
COMMAND='-A'
@ -285,11 +286,12 @@ else
fi
</verb></p><p>This script (netlogon.sh) is intended to run when the user logs
in and will filter the output of smbstatus extracting the user's
ip address which will be written to a file at /var/run/smbgate. The
file will take the user's name and will be later used when the user
log off. The address extracted will be passed as an argument to a
script with the users' name which will finally update the firewall.
in and will select the which scripts will be executed based on the
user name and to which group the user belongs. The user's ip address
will be written to a file at /var/run/smbgate for tracking purposes.
The file will take the user's name and will be later used when the
user log off. The IP address will be passed as an argument to a script
with the users' name which will finally update the firewall.
</p><p>Notice that this netlogon.sh script tries a user script, then
if it can't find the user script it tries a group script, and finally
if it can't find the group script it tries the default.sh script.
@ -379,7 +381,7 @@ EXTIF=&dollar;3
IPTABLES='/usr/sbin/iptables'
&dollar;IPTABLES &dollar;COMMAND POSTROUTING -t nat -s &dollar;ADDRESS -o &dollar;EXTIF -j MASQUERADE
</verb></p><p>We should also hase a default.sh script at /etc/smbgate/users/
to give the gateway a default behavior to the gateway.
to give the gateway a default behavior.
</p><p><verb>&num;!/bin/sh
&num;
&num; default.sh