Quick note that if characters don’t display correctly from your client and you want samba to display characters properly you should change to the following samba server settings in smb.conf:
[global]
client code page = 936
unix charset = UTF8
…
and the following linux client settings:
[global]
unix charset = UTF8
…
You may need to set UTF8 to GB2312 or some other setting for some windows environments.
I’ve had some interest in Moodle as a Learning Management System (LMS) lately. Here’s a quick guide to setting up Moodle on your own Ubuntu 8.04 LTS server:
1. Install Ubuntu Server 8.04
2. #: sudo apt-get update
3. #: sudo apt-get dist-upgrade
4. #: sudo apt-get install mysql-server php5-mysql apache2 libapache2-mod-security php5-ldap php5-odbc libapache2-mod-php5 php5-gd openssh-server phpmyadmin unzip zip aspell-en curl libcurl3 libcurl3-dev php5-curl php5-xmlrpc clamav-base clamav-freshclam clamav
5. #: sudo /etc/init.d/apache2 restart
6. #: cd /var/www
7. #: sudo wget http://download.moodle.org/stable19/moodle-latest-19.tgz
8. #: sudo tar -zxf moodle-latest-19.tgz
9. #: sudo mkdir /var/moodledata
10. #: sudo chown -R www-data.www-data /var/moodledata/
11. #: sudo /etc/init.d/apache2 restart
12. Point a browser to http://(yourubuntuhostipaddress)/phpmyadmin and create a database for moodle. Something like “moodle” for a database name. It’s easiest to create a user called moodle and select the option to create a matching database. The new user should have full rights and privileges
for the moodle database.
13. #: Point a browser to http://(yourubuntuhostipaddress)/moodle and follow the install instructions
14. At this point you should have a fully functioning moodle install, congratulations!
While it is possible to omit some of the packages, these packages represent a solid antiviral system for the assignments that get uploaded as well as provide extended feature support for Moodle.
If you are still having trouble, contact us via the “contact us” page on the right.
There is no denying that it is highly beneficial to have centralized authentication and file services. Over the years we have made a lot of strides in AiHua. Our first server was an old box with Mepis on it that served as our file server during the spring of 2006. Our next few systems were based on LTSP or DRBL which effectively both have centralized login’s and centralized file repositories. It makes a huge difference when staff can login to their own desktop and files from any computer in the building. It also allows for them to continue working at another station or with a computer/thin client that is in reserve.
When an entire company is comprised of linux/unix desktops and servers, it’s easy to set up LDAP services for authentication and NFS for centralized storage; however, windows computers are not so simple. In the past it took some level of expertise in both unix/linux and windows machines to create an effective ldap/samba replacement for a domain controller, it isn’t overly daunting and there is a great deal of information on the internet; however, it’s still not for the faint of heart.
This is where a fantastic open source project called ebox comes in. Ebox installs ontop of ubuntu (a free/open source linux) server editions and provides an out of the box domain controller! It also features easy to use web interfaces to add users, groups, and computers. It’s no one trick pony, as it also features a firewall/gateway, proxy/nat, DHCP, TFTP, jabber server, e-mail server, and VPN server out of the box.
We recommend you give it a try and replace the Windows servers around your office with this powerful solution. If you need help setting it up or setting up a PDC on another linux distribution like openSuse, we are availible. Follow the links to the right to contact us.
This is a quick update on using Untangle as a Gateway/Router and/or NAT. Ours is working fantastic, even though we have very few windows instances in our office (only one windows virtual instance for RDP connections) it isn’t uncommon for guests to bring windows laptops into our offices. Those windows boxes may or may not have proper security implementations and are thus susceptible to viruses, malicious software, and phishing schemes. Untangle effectively protects those computers by standing as a door guard between what can be retrieved from the internet. It also has a complete proxy suite which allows for content control so administrators can decide what catagories or individual websites are appropriate for office viewing. The only drawback is that it requires a moderate computer for an small to medium business deployment (SMB), it realistically needs a single core processor between 1-2Ghz and memory between 1-2GB depending on the size of the office; it’s well worth the sacrifice.
The same effect can be had on less powerful computers by building solutions from a headless linux distribution; however, it takes considerable expertise to build and implement, and is not as friendly to manage. If you’re interested in protecting your network, please contact us for information about your own networks.
I’ve been working with KIWI-LTSP for openSuse for the last 2 weeks. It’s a fabulous solution and allows for easy terminal server setup, maintanance, and deployment. It also easily allows for easy and fast remote helpdesk support, local applications, NX, and even allows clients to boot from CD or USB instead of the PXE server (which would be useful for running clients over a vpn and NX server). It’s quite stable and I would recommend it or Ubuntu LTSP5 to any site that would like to deploy thin clients on their network. For questions or consultations regarding thin clients please use the contact link.
We have been expirimenting with some open source routing software this week. I have to say that I’m incredibly impressed with Untangle as a network solution, so much so that it went into operation on an old P4 desktop we had lying around. It’s now serving as a VPN and web filter and doing quite well at it. I’d thoroughly recommend the open source edition for any organization who’s fed up with spam, malware, time sink hole websites, and viruses. It works best with a computer in the 1Ghz to 2ghz range with 1 to 2 Gigs of ram and 2 ethernet ports; however, it gets by quite well even on 500+ Mhz with 512 megs of ram with 2 ethernet cards. It will also work within a virtual machine if setup properly. We are happy to assist in the setup or consultation of routing and gateway solutions, use the contact page to the right for questions or to setup an appointment.
AiHua has begun offering assistance in setting up open source document services and groupware systems. We are able to install Alfresco or CYN.IN (pronounced sign in) into your infrastructure. We can also install other groupware systems such as e-groupware. Moodle or other teaching software is also an option should you have need of it.
Document services and/or groupware can be used to streamline work processes by making sure documents are automatically sent for review by supervisors as well as sharing them with relevant personnel and departments. They often offer project management solutions as well, giving you a powerful tool to stay on top of deadlines and budgets.
We can offer virtual appliances or standalone servers, for consultation services please use the contact us page.
Sometimes we just don’t want to allow every staff to use every program, there are easy ways to deal with this in Ubuntu. One of my favorites is to assign programs to groups. For example if we want to restrict who can use skype and pidgin within Ubuntu we can create a group called “im” for instant messenger. I prefer to do this in LDAP as I can do it for the entire organization in one go, but you can create the group for the individual computer using the users and groups tool. Next I do the following:
cd /usr/bin
sudo chown root:im skype pidgin
sudo chmod o-rx skype pidgin
This will make the above programs only accessible to root and user placed within the im group. The sky is the limit as to how you want to authorize personnel to utilize their company resources, but this approach will completely block access to the types of programs you don’t want company wide access to, such as accounting software (even if there is password protection for the financial database, the only people that should be able to execute the financial software should be authorized personnel).
We hope this article has been informative and helpful, as always you can enquire for use of our services through the contacts page on the right.
It seems that in the virtualization race that a couple of relatively new entrants are making headway. The first, proxmox, works much like a hypervisor for xen. It actually runs on a modified Debian linux, making it quite similar to one of our favorite distributions in the office: Ubuntu linux, which is also based on Debian. It’s a true open source project that also supports openvz guests which have a speed advantage but are restricted in which operating systems can be virtualized.
The second new development comes from Sun Microsystems who is soon going to offer an open sourced virtualization server which is also based on xen. This one will be a hypervisor based on OpenSolaris (which is a tried and true unix variant and makes our list of favorites with Ubuntu and OpenSuse) and thus features some of the fantastic features that Solaris variants have. The most exciting of which is native support for the most advanced file system available: ZFS. It will also feature interoperability with their acquired technology from VirtualBox (an open source product I heartily recommend to desktop users who need or want virtualization) and has a vastly improved interface compared to previous interface attempts by Sun Microsystems.
These technologies will make implementation and installation much quicker and significantly simpler for organizations to achieve. It will also make deployment of virtualized appliances (such as those offered by AiHua) easily installed by persons with minimal technical know how (as configuration can be primarily achieved by IT personnel prior to distribution). They also seem to support many more hardware configurations than the often expensive name brand servers that ESXi seems to prefer.
To discuss the feasibility and potential benefits and side effects you can use the contact page to engage our consultation services.
I’m often asked why I (Isaac) choose to implement PXE booting at the AiHua offices. For those unfamiliar with the concept of PXE booting, it is a technology which allows computer administrators to remove the hard drives of all their client machines and only need to manage the software/operating system that exists at the server.
This affords a couple of advantages, first software changes do not need to be repeated for every computer on the network. Second, the client hardware becomes expendable, a computer which dies due to hardware fault is quickly replaced by another computer, the employee only notices that the computer case changed. All files and settings remain unchanged. All files and folders are located centrally, making sharing and backup a trivial task. Finally, there is significant cost saving as IT staff require less time maintaining and recovering individual computers, leading to less staff to salary and less overtime hours.
There are some dissadvantages to consider as well, primarily in the consideration that another point of failure has been included. If the server has broken down, then no computers are able to perform their work. This risk is minimized by regular backup schedules and the use of high availability services (typically a group of servers and storage arrays).
How would I recommed the small to medium sized organization implement their network? If the organization has less than 5 computers then I would suggest using standard technologies; however, if more than 10 computers then diskless booting begins to have an effect. By the time their are 50 to 200 computers diskless begins to really shine (particularly with a 1 Gig network and network attached storage solution).
AiHua can provide expertise in setting up diskless networks. We presently have experience with building custom diskless, LTSP, freeNX, and DRBL. Each has advantages and dissadvantages that we can help you navigate through and pick what would be best for your organization, if any is viable at all for your situation. See the contact page for details.