Felina Administrator's Notes

This page contains information important for Felina Administrators only. Ordinary user not need to read it.

Adding New User

User homes are distributed over nodes (to distribute disk usage). Home directories are automaticaly mounted when accessed to /home/f74#-#, where f74#-# is node name. Localy is home directory located in /var/opt/pce/home. Procedure to add new user:

collect users information: username, real name, phone number, email, location (department)
choose users home node (for ex. f741-1).
change line with home directory in /etc/default/useradd (line beginning with HOME=), for ex. HOME=/home/f741-1 (there is a bug in command line utilites, so you cannot use command line options directly)
add user: useradd -m USERNAME
change first login password: passwd USERNAME (generate random password, use program apg).
expire account: passwd -e USERNAME (user will be forced to change the password at the firstlogin)
fill information about user: chfn USERNAME (to "other" put user's email address)
propagate changes to other nodes: make -C /var/yp
send email informing new user about new account, password, how to login and url to Felina User Guides

You can use script /root/bin/newuser.sh to automate this work (except last two steps).

Hardware Supervisory System (HSS)

Use telnet from any felina node or from FelinaFirewall to:

10.0.46.64 - HSS console on chassis 740
10.0.46.80 - HSS console on chassis 741
10.0.46.96 - HSS console on chassis 742

Useful commands:

tr smpctl 1 – read SMPCTL table on node 1
tr smpctl all BTST - read boot status on all nodes
tr smpctl all PCODE - read P-CODE on all nodes, should be BEFE
tw smpctl 2 STOP INACTIVE - turn off node 2
tw smpctl 2 START ACTIVE - turn on node 2
talk node 6 – connect to Linux console on node 6, press 2 x CTR+6 to exit

IP Addresses

Public network (eth2 or eth10):

DNS (on base node): 129.108.156.30 (blocked by FelinaFirewall)
base node 742.6 (eth2): 129.108.156.31
compute node 740.1-742.5 (eth10): 129.108.156.32-48 (blocked by FelinaFirefall)

Supervisory network (eth0):

AMDB: 10.0.0.49
AMS: 10.0.0.48
JMS: 10.0.0.50
WWW: 10.0.0.51
chasis 740 node 1-6: 10.0.46.65-70
chasis 741 node 1-6: 10.0.46.81-86
chasis 742 node 1-6: 10.0.46.97-102
HSS on chasis 740: 10.0.46.64
HSS on chasis 741: 10.0.46.80
HSS on chasis 742: 10.0.46.96

Rapid Array (eth1):

chassis 740 node 1-6: 10.128.46.65-70
chassis 741 node 1-6: 10.128.46.81-86
chassis 742 node 1-6: 10.128.46.97-102

Felina Firewall

Purpose:

firewall for Felina,
access to Felina supervisory network (start/stop node, upgrade software, ...).

System description:

customized Linux system based on debian
there are no services - there is nothing to hack
bootable from CD (does not use HDD):
- for any changes it is needed to burn a new CD
- potential hacker cannot change anything
- maintenance is not needed
iptables/ibtables configured as bridging (transparent) firewall
connection to Felina:
- public network (only selectd services on base node)
- supevisory network (accessible only from FelinaFirewall)

Felina Backup

big storage space for user and system backup
daily incremental backup (using GNU tar incremental feature, be carefull when untaring)
weekly full backup
OLD BACKUPS ARE NOT DELETED (because there is enough space on backup storage now, but has to be solved)