DOCSLIB.ORG

Migration from a Windows Environment to a SUSE® Linux

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Migration from a Windows Environment to a SUSE® Linux CAS18543 Migration from a Windows Environment to a SUSE® Linux Enterprise based Infrastructure Liberty Christian School Don Vosburg Systems Engineer [email protected] [email protected] Who is Liberty Christian School? • Private school located in Anderson, IN, USA • Established 1976 • About 600 students in preK-12 • Two campuses - Elementary and MS/HS 2 The “before” picture LCS Technology Summary - 2009 • ~100 PC’s, 40% running Windows XP Home • No Classroom accessible PC’s or Laptops • Two low-end Dell servers hosting files – Each with a single desktop-class 250GB hard drive – All users with all rights to all shares • No imaging - all software individually installed on any PC as needed • Self-hosted proprietary email solution with no effective spam filtering 4 LCS Network Summary in 2009 • Wireless point-point connection between schools unreliable, slow (2 miles apart) • Single IP addressed, flat Class C network, causing excess broadcast traffic, limited devices • Low-end Linksys firewall at edge of a single Internet connection, limited flexibility and monitoring • No connections faster than 100Mbps 5 LCS User technology - 2009 • No centralized domain – Each user defined on the computer(s) they might use – No centralized printer administration or definition store • One student desktop lab in each building, no student access beyond that • No internally managed DNS – local host access defined on each PC by IP address • Proprietary content filter over-blocking, rendering Internet usage not worth the wait 6 Creating a better infrastructure Infrastructure on SUSE Linux Enterprise Server • SUSE Linux Enterprise standardized throughout – Consistent enterprise-grade linux – Both SUSE Linux Enterprise Server 11 and 12 – Hosting bind DNS for internal name resolution • Samba/openLDAP domain – LDAP mirrored between facilities – Apache Directory Suite to view/manage LDAP – Samba 3 style domain – Logon script for group-based drive mapping – Documents redirected to network home – Centralized printer and driver management – Windows 7, 8.1, 10 client machines – Users added/managed with YaST 8 Infrastructure on SUSE Linux Enterprise Server • KVM virtualization – added to allow more flexibility and hardware independence – Live migration key to staying current – Hosting Linux, Windows, and FreeBSD • iSCSI Storage – SAS drives in a standard server • Linux HA – OCFS2 Clustered file system, hosting KVM virtual machines – Clustered web server in each school – VM’s managed by the cluster – One node can be lost and facility runs as normal 9 Clonezilla imaging • Golden images of Windows machines – Applications loaded based on function – Modified for our environment with registry and policy changes • DRBL server in each building – Running on Ubuntu LTS – Multicast image deployment • Clonezilla USB for more portable imaging – Parted Magic USB stick for launching clonezilla or gparted 10 Network infrastructure with pfSense • FreeBSD based networking software – Deployed on standard hardware or VM • Class B 10.X.X.X/16 net in each building • Two pfSense routers across leased fiber • Firewall enabling hundreds of outbound connections • Integrated filtering with squid/squidguard • Excellent web interface • Annotated rules • NAT mapping to allow remote access for faculty/staff • DHCP servers for each facility • Two firewalls, each running as a clustered 64-bit VM 11 Additional solutions at LCS • Leased 100mbps fiber between campuses ($) • Google Apps for Education – 3000 available accounts – Unlimited storage for each account – GADS - synched with LDAP • Microsoft Volume Licensing ($) – For Windows desktops and Office • Ninite ($) – Manage deployment/updates for flash, Java, PDF reader, VLC Media player, etc. • Freshdesk helpdesk software • PowerSchool ($) School Information System – Runs on its own “appliance” 12 Hardware choices • Use Ebay for commodity hardware – Average desktop costs ~$100 per unit – Standardized on Dell, HP, Lenovo enterprise PC’s – Server costs kept low - ~$400 – Augment with memory upgrades, disk, NIC’s we install ourselves – GB interfaces added to switches • Netgear ProSafe networking hardware – Managed GB switches – Managed wireless AP’s • Multiple 1500kva UPS’s • Recycle older technology 13 Network Diagram (created in Dia) 14 Screenshots of Admin tools Cluster View • First-level bullet (24pt) – Second-level bullet (20pt) – Third-level bullet (16pt) – Fourth-level bullet (14pt) 16 Firewall view 17 Monitoring Console - Icinga2 18 Zmanda Backup 19 Live Look at the network Thank you. 20 Network today Open Source solutions at LCS • SUSE Linux Enterprise standardized throughout • bind DNS server • KVM virtualization • Samba/openLDAP domain • Linux HA clustering • Imaging with Clonezilla and Parted Magic • Firewall, content filter (squidguard), DHCP, routing with pfSense • Icinga2 monitoring/notification server • Amanda network backup • UltraVNC remote control 22 LCS Technology Today • Student Google accounts from grade 5-12 • 500 Chromebooks, 50 laptops, 150 desktops • Centralized domain synced with Google Apps • Clustered servers, centralized storage, – virtualization with cluster-managed live migration • Business-class Internet connections in each facility, managed by clustered VM’s • Content filtering that is fast and minimally intrusive • Network monitoring/notification for all servers and network devices and services • Student team working on maJor proJects during breaks 23 Featured in News 24 Any questions? Thank you. 25 Unpublished Work of SUSE. All Rights Reserved. This work is an unpublished work and contains confidential, proprietary, and trade secret information of SUSE. Access to this work is restricted to SUSE employees who have a need to know to perform tasks within the scope of their assignments. No part of this work may be practiced, performed, copied, distributed, revised, modified, translated, abridged, condensed, expanded, collected, or adapted without the prior written consent of SUSE. Any use or exploitation of this work without authorization could subJect the perpetrator to criminal and civil liability. General Disclaimer This document is not to be construed as a promise by any participating company to develop, deliver, or market a product. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. SUSE makes no representations or warranties with respect to the contents of this document, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. The development, release, and timing of features or functionality described for SUSE products remains at the sole discretion of SUSE. Further, SUSE reserves the right to revise this document and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. All SUSE marks referenced in this presentation are trademarks or registered trademarks of Novell, Inc. in the United States and other countries. All third-party trademarks are the property of their respective owners..
Load more

Recommended publications
  • Tiny Core Linux
    THE TINY CORE LINUX HANDBOOK v 0.965 Not corrected draft (c) 2013 compiled by Thierry SALOMON tsalomon AT hotmail DoT com tinycorelinux.inf.hu Table of Contents TINY CORE LINUX .......................................................................................................................... 1 INTRODUCTION........................................................................................................................... 4 DOWNLOADING TINY CORE LINUX....................................................................................... 5 LIVE-CD MODE.............................................................................................................................6 THE GRAPHICAL USER INTERFACE........................................................................................7 Setting up the right screen resolution and mouse parameters.....................................................7 The Tiny Core Linux desktop..................................................................................................... 7 The Mouse menu.........................................................................................................................8 HOW TO SAVE YOUR SETTINGS (PERSISTENCE).............................................................. 10 INSTALLING TINY CORE LINUX ON A HARD DISK/FREE PARTITION..........................11 INSTALLING TINY CORE LINUX ON A USB-PENDRIVE................................................... 12 EMBEDDED INSTALLATION WITHIN WINDOWS...............................................................13
    [Show full text]
  • Manual Norton Partition Magic 8.0 Full Version for Windows 7
    Manual Norton Partition Magic 8.0 Full Version For Windows 7 Norton Partition Magic is an application used to manage hard disks on your computer, that has a If you are a moderator please see our troubleshooting guide. A familiar layout with disk map plus a full User Manual and lots of Help resources From EaseUS: As Partition Magic alternative, EaseUS Partition Master Home and GUID partition table (GPT) disk under Windows 2000/XP/Vista/7/8/8.1/10. If you have a Windows 8/8.1 system, DO NOT manage your partition with this. Supported OS: Windows 10/7/8/vista/XP and Windows Server 2003/2008/2012 Guide & Tips. How to extend system partition But Windows 8 is not supported by Norton Partition Magic), or can not be boot from a bootable CD/DVD. Partition. How to backup photos from iphone4 to icloud server backup windows server 2008 · Ipad compatible backup camera symantec netbackup 7.5 error code 58 Dodge grand caravan everyone the key NTFS partitions, made Source manually copy two components to users whose machines almost completely dead HDD. Magic EaseUS Partition Master is totally free partition manager for home users. Guide & Tips Say, create a new partition to install Windows 7, or extend the full system partition manager software for Windows 7 32 bit and 64 bit and Windows 8. Partition Magic ® is a registered trademark of Symantec Corporation. filemaker pro 12 crack norton partitionmagic 8.05 serial number keylogger for windows Camtasia studio 8 free download for windows 7 32bit vray 3ds max 2010 64 with Powerdvd 10 ultra 3d free download full version sony architect pro 5.2 photoshop lightroom mac serial windows 8 the missing manual captivate 4.
    [Show full text]
  • Inicio - Parted Magic
    Inicio - Parted Magic http://partedmagic.com/doku.php Parted Magic ⚙ Ver fuente Revisiones anteriores Backlinks ⚒ Los cambios recientes del sitio Login SÓLO EL € 0,20 Por Clic España Pago Por Clic - Empezar en 2 minutos www.addynamo.com Noticias Descargas Imágenes programas de cambios de Donaciones Ayuda Foro RSS Feed de Twitter de búsqueda Los programas de la adición de arranque Partición CLI Creación del LiveCD con InfraRecorder Creación del LiveCD con Nero Creación del LiveUSB Frugal Instale Cómo remasterizar el archivo iso PXE Con GParted Videos Eliminación de la contraseña de administrador en Windows XP 1 de 3 17/01/2012 8:43 Inicio - Parted Magic http://partedmagic.com/doku.php El Parted Magic OS cuenta con programas básicos de GParted y Parted para manejar las tareas de particiones con facilidad, mientras que con otros programas útiles (por ejemplo, Partimage, TestDisk, Truecrypt, Clonezilla, G4L, SuperGrubDisk, ddrescue, etc ...) y un excelente conjunto de información en beneficio de el usuario. Una amplia colección de herramientas de sistema de archivos también se incluyen, como Parted Magic soporta los siguientes: btrfs, ext2, ext3, ext4, FAT16, FAT32, HFS, HFS +, jfs, linux swap, ntfs, reiserfs y xfs. Parted Magic requiere al menos un procesador i586 y 312MB de RAM para funcionar o 175 MB en modo "LIVE". Reparación del sistema de Windows. Reparación y velocidad de tu ordenador. Optimización de sus sistemas Windows. Hermosa mujer china las mujeres chinas Para Salir y más, Únete gratis y Encuentra tu partido de hoy! www.asiamatchonline.com Software de espacio en disco Gestión de Espacio en disco duro.
    [Show full text]
  • The Cursor — Page 2 — June 18, 2011 Continued from Page 1 Bio: Stan Has Been Active with Personal Computers Behavior
    TThhee CCuurrssoorr Monthly Newsletter of the Washington Area Computer User Group Meeting Location: Next Meeting: OLLI, 4210 Roberts Road June 18, 2011 Fairfax, VA Presidential Bits by Geof Goodrum President, Washington Area Computer User Group In May, Paul Howard and Bill Walsh demonstrated the Skype videoconferencing and PC screen sharing system with help from Mel Mikosinki, Roger Fujii and others. Paul showed how the free Skype software (http://www.skype.com/) on a PC allowed several people to make video phone calls and have a meeting over the Internet and local network with tiled live video feeds from each. Several tips, though: invest in a good quality headset (headphone/microphone) to make PC Problem? video or phone calls; mute your microphone when you walk away from Bring it to the PC Clinic! your computer or don’t need to talk. Likewise, don’t forget that you are June 18 on “candid camera,” so mind your appearance and anything behind that you that might not want visible. And if you are doing a Skype demo Table of Contents with two systems in the same room with a speaker system like we Lloyd’s Web Sites...............2 were, definitely use headphones or mute your mikes – our apologies to User’s View of the iMac.....3 those who experienced the thrill of audio feedback when Mel joined the Linux News........................ 3 Skype video call with Paul across the room! GNU/Linux Distributions...4 The Skype demo was particularly timely, given Microsoft’s May 10th Linux Software...................5 announcement that it entered a deal to acquire Skype for an estimated Word Tips..........................
    [Show full text]
  • Network Video Recorder
    4-684-078-01 (2) Network Video Recorder Installation Manual Before operating the unit, please read this manual and the Safety Regulations thoroughly and retain them for future reference. HAW-EIBU Software Version 2016 R2 and Later © 2016 Sony Corporation Configuring Initial Settings with Setup Table of Contents Wizard ........................................................ 21 Configuring the Recording Disk Usage Precautions ...................................4 Settings ....................................................... 22 Package Contents ....................................6 Updating the Device Pack Version ............ 25 System Requirements ..............................7 Starting Management Client ...................... 26 Names and Functions of Parts................ 8 Front (without the Front Panel) .................... 8 Authorizing the Recording Server ............. 26 Front (with the Front Panel) ......................... 8 Configuring the Recording Destinations .... 26 Rear ............................................................... 9 Registering Cameras .................................. 27 Acquiring Reference Manuals and Quitting Management Client ...................... 28 Technical Documents ............................10 Step 5: Verifying Operation ................... 29 System Configuration............................ 11 Step 6: Activation ................................... 29 Single Network Video Recorder Exporting License Request Files (.lrq) ....... 29 Systems ......................................................
    [Show full text]
  • Common Information Commands
    PCLOS>digital magazine_ PCLOS Editor’s Desk Digital Magazine Staff A New And Exciting Year! Chief Editor Papawoob Welcome to a new and exciting year! This past year has given us the opportunity to bring you many articles that hopefully enhanced your PCLOS and Linux experiences. The Staff and Design & Concept myself are looking forward to another year of bringing you many more such experiences pmbasehore & silversaile this year. This issue will be the first with our new and much improved layout theme (we hope you enjoy it!.) Editors Trobbins • Myrddin • Jaydot This issue has more interesting articles including one which will teach you the basic commands used to find out information about your system, hardware, etc. Consultants We also have articles on how to repair kdeinit problems, a new script to compress Archie • Watcher directories and still have easy access to them, and a review of the new Parted Magic CD. We have links to great tutorials on using both The Gimp and Inkscape. HTML Layout gseaman You will also find a short plea for helping both the Mag Staff and the Documen- tation Team in transferring as many articles from previous issues of the Proofreaders Mag to the Wiki as possible. I proposed this idea to the Docu- Jaydot • historyb • Takeikin mentation Team but they are understaffed, as are we here at the RaveDave • GuyPronouncedGuy Dtrud0h • MeeMaw Mag. If you are interested in helping out the entire PCLOS malador • jaslar community by donating a little time and effort, then please moriancumer_12 follow the instructions you will find in the article.
    [Show full text]
  • Volume 31 August 2009
    W NE Volume 31 August 2009 TTaabbllee ooff CCoonntteennttss WWeellccoommee ffrroomm tthhee CChhiieeff EEddiittoorr elcome to the August 2009 issue of The NEW PCLinuxOS Magazine. This is an W exciting time for PCLinuxOS. Not only do we have the new and revitalized magazine to look forward to every month, but there is a lot of other activity going on. Within the last month, we've seen the release of MiniMe KDE 3 2009.1, ZenMini 2009.1, and the first quarterly update in PCLinuxOS 2009.2. And there's even more just around the corner. The final release of the PCLinuxOS XFCE - Phoenix remaster from Sproggy is looming large on the horizon, complete with the latest XFCE 4.6 desktop. Additionally, Neal is wrapping up work on the LXDE remaster, while maddogf16 is hard at work on the e17 remaster. Updates to programs in the repository, as well as new additions to the repository, are coming out at an amazing rate. One of those new additions to the repository that is just around the corner is KDE 4.3 RC3. Texstar has been working feverishly to put the final touches on it, and many from the community have been assisting by testing the next generation of the KDE desktop. The addition of Pinoc's addlocale program to allow international users to use PCLinuxOS in their native language, has spurred growth in the PCLinuxOS international community, allowing PCLinuxOS to appear in any one of 73 different languages. In this issue of the magazine, we have a wide variety of articles. This month's cover story is from Texstar himself, on how to Master the Remaster.
    [Show full text]
  • CA Server Automation Release Notes on CA Support Online Contain Issues and Other Information Discovered After Publication
    CA Server Automation Release Notes Release 12.6 This documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as the “Documentation”) is for your informational purposes only and is subject to change or withdrawal by CA at any time. This Documentation may not be copied, transferred, reproduced, disclosed, modified or duplicated, in whole or in part, without the prior written consent of CA. This Documentation is confidential and proprietary information of CA and may not be disclosed by you or used for any purpose other than as may be permitted in (i) a separate agreement between you and CA governing your use of the CA software to which the Documentation relates; or (ii) a separate confidentiality agreement between you and CA. Notwithstanding the foregoing, if you are a licensed user of the software product(s) addressed in the Documentation, you may print or otherwise make available a reasonable number of copies of the Documentation for internal use by you and your employees in connection with that software, provided that all CA copyright notices and legends are affixed to each reproduced copy. The right to print or otherwise make available copies of the Documentation is limited to the period during which the applicable license for such software remains in full force and effect. Should the license terminate for any reason, it is your responsibility to certify in writing to CA that all copies and partial copies of the Documentation have been returned to CA or destroyed. TO THE EXTENT PERMITTED BY APPLICABLE LAW, CA PROVIDES THIS DOCUMENTATION “AS IS” WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NONINFRINGEMENT.
    [Show full text]
  • Recommendation on Data Sanitisation and Data Medium Destruction Techniques
    Data Protection Authority Recommendation on data sanitisation and data medium destruction techniques Information media erasure and destruction guide | Version 1.01 - 23/03/2021 1 1 WARNING: This document is intended to provide additional explanation to the rules in force and does not exempt the controller from its obligations and responsibilities under the GDPR and other applicable texts. Considering its requirements and the risk analysis that it carries out or plans, it shall use one or the other tool and method, given in particular the evolution of knowledge and technologies. The different tools and brands cited in this document are cited for the sole purpose of providing examples. The Authority makes no representation as to their compliance with the GDPR and other regulations or as to their quality and performance. Information media erasure and destruction guide | Version 1.01 - 23/03/2021 2 2 TABLE OF CONTENTS Summary ............................................................................................................................................................................. 6 1. Introduction ..................................................................................................................................... 7 Limitations ................................................................................................................................................................... 9 Target audience.....................................................................................................................................................
    [Show full text]
  • Security Guideline SIMATIC Wincc Open Architecture
    Preamble 1 Targets of the Security Guideline 2 Security Guideline References 3 SIMATIC WinCC Open Architecture Definitions 4 3.16 FP2 (P009) Strategy of the Security Guideline 5 Implementation of the Security Strategy for 6 Security Solutions Security Checklist 7 Glossary 8 Lists 9 05/2019 Legal Information Warning Concept This manual contains notes that need to be considered, to heed the secure configuration of a plant and to prevent damage to property. The notes on security impacts are shown by a warning triangle in different colors or a warning light. Notes referring to a minor or an improbably security issue have no symbols. The alerts and warnings are illustrated here in descending order of its level. DANGER Means that death or severe security issues will occur, if the corresponding precautions are not taken. WARNING Means that death or severe security issues may occur, if the corresponding precautions are not taken. CAUTION With a warning triangle means that moderate security issues may occur, if the corresponding precautions are not taken. ATTENTION With a grey warning triangle means that an undesirable event or condition may occur if the corresponding note is not heeded. CAUTION Without a warning triangle means that damage to property may occur, if the corresponding precautions are not taken. With the occurrence of multiple hazardous levels, the warning for the highest level is used. If a caution with the warning triangle warns of personal injury, it may also have a warning of damage to property. ETM professional control GmbH | A Siemens Company 05/2019 Copyright © ETM professional control GmbH | A Siemens Company A Siemens Company Marktstraße 3 A-7000 Eisenstadt subject to alterations 7000 Eisenstadt AUSTRIA Qualified Staff The product/system associated with this documentation should be handled only by personnel qualified for the task.
    [Show full text]
  • Linux Mint Free Invoice Software
    Linux Mint Free Invoice Software UnsmilingPetey never Valdemar outcry any crystallized humpy trudgings piously or orthogonally, dike howe'er is when Thebault Willmott charcoal is long-lasting. and influenzal Abject enough? and close-lipped?Grenada Lucian vaccinate her tesseract interlines telegraphically or gunges sleepily, is Lyn Get more and subject to popular web conferencing, podcaster and free linux mint It available slots for free linux? Sage also thwart a more basic offering called Accounting Start. And Use Trevilla Theme And Icon On Ubuntu And Linux Mint Linux Installation. Whenever you tried it easier for various business needs of delivery address network for? Mint to gnucash Yes it's ironic Mint condition by Intuit Quicken but fraud is free love does today I. No dns leaks, france and large enough for software free linux mint invoice. Arch linux hardware e dei possibili ritardi di java installation of windows only predominant operating system for smes for a small changes in your. Rick: Runs Linux from USB flash drive. This guide to help us, we see what matters most, linux mint vm warns of use it to highlight tasks by. Parental Advisory: Explicit Lyrics. If needed invoice simple to be. Listen to use this episode where do i look. JIRA Server and recurring billing for fixed fee projects. Install Docker Engine on Ubuntu Docker Documentation. Two cool linux mint, you can also a particular order, too much higher than simple yet effective user manual has changed as well they existed. Bill both were some cool software maintained by average employee management software and linux cds are easy and assay services for business.
    [Show full text]
  • Solid-State Drives
    2017­5­1 Solid­state drive ­ Wikipedia Solid­state drive From Wikipedia, the free encyclopedia A solid­state drive (SSD, also known as a solid­state disk[1][2][3]) is a solid­state storage device that uses integrated circuit assemblies as memory to store data persistently. SSD technology primarily uses electronic interfaces compatible with traditional block input/output (I/O) hard disk drives (HDDs), which permit simple replacements in common applications.[4] New I/O interfaces like SATA Express and M.2 have been designed to address specific requirements of the SSD technology. A 2.5­inch SSD, often found in SSDs have no moving mechanical components. This distinguishes them personal computers from traditional electromechanical magnetic disks such as hard disk drives (HDDs) or floppy disks, which contain spinning disks and movable read/write heads.[5] Compared with electromechanical disks, SSDs are typically more resistant to physical shock, run silently, and have lower access time and lower latency.[6] However, while the price of SSDs has continued to decline over time (24 cents per gb as of 2017),[7][8] consumer­grade SSDs are (as of 2017) still roughly four A rackmount SSD storage appliance based on DDR SDRAM times more expensive per unit of storage than consumer­grade HDDs.[9] As of 2015, most SSDs use MLC NAND­based flash memory, which is a type of non­volatile memory that retains data when power is lost. For applications requiring fast access but not necessarily data persistence after power loss, SSDs may be constructed from random­access memory (RAM).
    [Show full text]