| | 1 | Hier werden die Anpassungen an der Standard-Paedml festgehalten. Bei Updates kann es vorkommen, dass die Änderungen überschrieben werden, diese müssen dann von Hand nachgebessert werden oder aber sie liegen im svn und können automatisch eingefügt werden. |
| | 2 | |
| | 3 | |
| | 4 | == Firewall-Einstellungen in ''/etc/init.d/linuxmuster-base'' == |
| | 5 | |
| | 6 | in der Funktion start_firewall nach : |
| | 7 | |
| | 8 | {{{ |
| | 9 | # accept ipcop |
| | 10 | iptables -A IN-$IFACE -s $ipcopip/32 -j ACCEPT |
| | 11 | }}} |
| | 12 | |
| | 13 | einfügen: |
| | 14 | |
| | 15 | {{{ |
| | 16 | # accept proxy |
| | 17 | iptables -A IN-$IFACE -s 10.32.1.251/32 -j ACCEPT |
| | 18 | |
| | 19 | # accept LTSP-SERVER |
| | 20 | # Klassenraumserver: |
| | 21 | iptables -A IN-$IFACE -s 10.32.1.247/32 -j ACCEPT |
| | 22 | iptables -A IN-$IFACE -s 10.32.1.248/32 -j ACCEPT |
| | 23 | iptables -A IN-$IFACE -s 10.32.1.249/32 -j ACCEPT |
| | 24 | iptables -A IN-$IFACE -s 10.32.1.250/32 -j ACCEPT |
| | 25 | # Server fuer Computerraum 128: |
| | 26 | iptables -A IN-$IFACE -s 10.32.1.246/32 -j ACCEPT |
| | 27 | iptables -A IN-$IFACE -s 10.32.1.245/32 -j ACCEPT |
| | 28 | iptables -A IN-$IFACE -s 10.32.1.244/32 -j ACCEPT |
| | 29 | |
| | 30 | }}} |
| | 31 | |
| | 32 | |
| | 33 | |
| | 34 | == Workstationimport in ''/usr/share/linuxmuster/scripts/wimport.sh'' == |
| | 35 | |
| | 36 | Die Workstations werden beim ersten Booten mit PXE vom paedml in die Datei /etc/linuxmuster/workstations aufgenommen: |
| | 37 | |
| | 38 | |
| | 39 | {{{ |
| | 40 | Raum;Rechner;Gruppe;MAC;IP;MASK;?;?;?;?;Imaging |
| | 41 | r128;r128-43;schueler;00:30:05:44:2a:da;10.32.128.43;255.240.0.0;1;1;1;1;0 |
| | 42 | snilaptop;snilaptopc03;snilaptop;00:0b:5d:93:b0:35;10.32.150.23;255.240.0.0;1;1;1;1;22 |
| | 43 | r109;semkurs03;schueler;00:30:05:44:76:c9;10.32.104.12;255.240.0.0;1;1;1;1;R |
| | 44 | }}} |
| | 45 | |
| | 46 | |
| | 47 | Bei Imaging bedeutet: |
| | 48 | |
| | 49 | - 0: Workstationaccount anlegen aber nicht per Linbo berücksichtigen (Eintrag in /etc/dhcp3/dhcpd.conf.linuxmuster ohne Option pxelinux.configfile) |
| | 50 | - 22: Workstationaccount anlegen und per Linbo berücksichtigen (Eintrag in /etc/dhcp3/dhcpd.conf.linuxmuster mit Option pxelinux.configfile) |
| | 51 | - R: (Rembo) Workstationaccount anlegen und per Rembo verarbeiten (Eintrag in /etc/dhcp3/rembohosts.conf) |
| | 52 | - IP im Bereich 10.16.209.*: Rechner ist im Lehrernetz (Eintrag in die /etc/dhcp3/lehrerhosts.conf) |
| | 53 | |
| | 54 | |
| | 55 | Optionen 0 und 22 sind Standard-paedml, Option R ist eingefügt und muss in /usr/share/linuxmuster/scripts/wimport.sh beim Workstationimport verarbeitet werden, nach |
| | 56 | {{{ |
| | 57 | # check dhcp stuff |
| | 58 | #[ -z "$DHCPDCONF" ] && exitmsg "Variable DHCPDCONF is not set!" |
| | 59 | #if [ -e "$DHCPDCONF" ]; then |
| | 60 | # backup_file $DHCPDCONF 2>> $TMPLOG 1>> $TMPLOG || exitmsg "Unable to backup $DHCPDCONF!" |
| | 61 | # rm -rf $DHCPDCONF 2>> $TMPLOG 1>> $TMPLOG || exitmsg "Unable to delete $DHCPDCONF!" |
| | 62 | #fi |
| | 63 | #touch $DHCPDCONF 2>> $TMPLOG 1>> $TMPLOG || exitmsg "Unable to create $DHCPDCONF!" |
| | 64 | }}} |
| | 65 | |
| | 66 | |
| | 67 | einfügen: |
| | 68 | |
| | 69 | {{{ |
| | 70 | # Adaption fuer Rembointegration |
| | 71 | REMBO_DHCPCONF="/etc/dhcp3/rembohosts.conf" |
| | 72 | LEHRER_DHCPCONF="/etc/dhcp3/lehrerhosts.conf" |
| | 73 | |
| | 74 | # Adaption DHCP-CONF f�r Rembo |
| | 75 | [ -z "$REMBO_DHCPCONF" ] && exitmsg "Variable REMBO_DHCPCONF is not set!" |
| | 76 | if [ -e "$REMBO_DHCPCONF" ]; then |
| | 77 | backup_file $REMBO_DHCPCONF 2>> $TMPLOG 1>> $TMPLOG || exitmsg "Unable to backup $REMBO_DHCPCONF!" |
| | 78 | rm -rf $REMBO_DHCPCONF 2>> $TMPLOG 1>> $TMPLOG || exitmsg "Unable to delete $REMBO_DHCPCONF!" |
| | 79 | fi |
| | 80 | touch $REMBO_DHCPCONF 2>> $TMPLOG 1>> $TMPLOG || exitmsg "Unable to create $REMBO_DHCPCONF!" |
| | 81 | |
| | 82 | # Adaption DHCP-CONF fuer Lehrernetz |
| | 83 | [ -z "$LEHRER_DHCPCONF" ] && exitmsg "Variable LEHRER_DHCPCONF is not set!" |
| | 84 | if [ -e "$LEHRER_DHCPCONF" ]; then |
| | 85 | backup_file $LEHRER_DHCPCONF 2>> $TMPLOG 1>> $TMPLOG || exitmsg "Unable to backup $LEHRER_DHCPCONF!" |
| | 86 | rm -rf $LEHRER_DHCPCONF 2>> $TMPLOG 1>> $TMPLOG || exitmsg "Unable to delete $LEHRER_DHCPCONF!" |
| | 87 | fi |
| | 88 | touch $LEHRER_DHCPCONF 2>> $TMPLOG 1>> $TMPLOG || exitmsg "Unable to create $LEHRER_DHCPCONF!" |
| | 89 | }}} |
| | 90 | |
| | 91 | |
| | 92 | bei '''...''' ändern (Text unten einfügen) |
| | 93 | |
| | 94 | {{{ |
| | 95 | # linbo stuff, only if pxe host |
| | 96 | if [[ "$pxe" != "0" && "$imaging" = "linbo" ]]; then |
| | 97 | |
| | 98 | # .... |
| | 99 | |
| | 100 | fi |
| | 101 | }}} |
| | 102 | |
| | 103 | und einfügen |
| | 104 | |
| | 105 | {{{ |
| | 106 | # Adaption für Rembo-Integration (Baumgärtner) |
| | 107 | # write dhcpd.conf entry |
| | 108 | echo -n " * DHCP: Writing entry for $hostname ... " |
| | 109 | if [[ "$pxe" == "R" ]]; then |
| | 110 | echo -n "(Rembo-Adaption) ... " |
| | 111 | echo "host $hostname {" >> $REMBO_DHCPCONF |
| | 112 | echo " hardware ethernet $mac;" >> $REMBO_DHCPCONF |
| | 113 | echo " fixed-address $ip;" >> $REMBO_DHCPCONF |
| | 114 | echo " option host-name \"$hostname\";" >> $REMBO_DHCPCONF |
| | 115 | echo "}" >> $REMBO_DHCPCONF |
| | 116 | elif [[ "$ip" =~ "10.16.209.*" ]]; then |
| | 117 | echo -n "(Lehrernetz) ... " |
| | 118 | echo "host $hostname {" >> $LEHRER_DHCPCONF |
| | 119 | echo " hardware ethernet $mac;" >> $LEHRER_DHCPCONF |
| | 120 | echo " fixed-address $ip;" >> $LEHRER_DHCPCONF |
| | 121 | echo " option host-name \"$hostname\";" >> $LEHRER_DHCPCONF |
| | 122 | echo "}" >> $LEHRER_DHCPCONF |
| | 123 | else |
| | 124 | echo "host $hostname {" >> $DHCPDCONF |
| | 125 | echo " hardware ethernet $mac;" >> $DHCPDCONF |
| | 126 | echo " fixed-address $ip;" >> $DHCPDCONF |
| | 127 | echo " option host-name \"$hostname\";" >> $DHCPDCONF |
| | 128 | if [[ "$pxe" != "0" && "$imaging" = "linbo" ]]; then |
| | 129 | # assign group specific pxelinux config |
| | 130 | echo " option pxelinux.configfile \"pxelinux.cfg/$hostgroup\";" >> $DHCPDCONF |
| | 131 | fi |
| | 132 | echo "}" >> $DHCPDCONF |
| | 133 | fi |
| | 134 | echo "Ok!" |
| | 135 | echo |
| | 136 | |
| | 137 | }}} |