Revision history for WorkStationNotes
Additions:
CategoryITMisc
Deletions:
Additions:
===Version 1.4 (05/20/2016)===
===Version 1.3 (02/12/2016)===
===Version 1.3 (02/12/2016)===
Deletions:
===Version 1.3===
Additions:
===Version 1.7 (07/11/2016)===
~- Add logon issue shell script to /usr/local/src
===Version 1.6 (07/01/2016)===
~- Force group permissions to user for /var/cache/browser
~- Apply yum updates
~- Install iptraf on all workstations
~- Add logon issue shell script to /usr/local/src
===Version 1.6 (07/01/2016)===
~- Force group permissions to user for /var/cache/browser
~- Apply yum updates
~- Install iptraf on all workstations
Additions:
===Version 1.5 (06/24/2016)===
~- disabled tracker indexing
~- disabled bluetooth service
~- removed postfix
~- updated cups config with static IPs
~- install gnumeric
~- disabled tracker indexing
~- disabled bluetooth service
~- removed postfix
~- updated cups config with static IPs
~- install gnumeric
Deletions:
Additions:
===Version 1.5===
~- applied chrome policies to improve performance
~- installed pgadmin
===Version 1.4===
~- disabled logon list
~- created symbolic link .cache --> /var/cache/browsers for local browsing cache
~- added authorized keys for access from server
~- applied chrome policies to improve performance
~- installed pgadmin
===Version 1.4===
~- disabled logon list
~- created symbolic link .cache --> /var/cache/browsers for local browsing cache
~- added authorized keys for access from server
Additions:
===Version 1.3===
~- full update
~- installed links2, lynx and mutt
~- full update
~- installed links2, lynx and mutt
Additions:
~~- file stored at /export/public/ITstuff/SaltStack/
Additions:
====CentOS 7 Equivalency====
For specialty apps that require rpm downloads CentOS 7 is equivalent to RHEL 7 and Fedora Core 19
For specialty apps that require rpm downloads CentOS 7 is equivalent to RHEL 7 and Fedora Core 19
Additions:
~- gthumb
~~- ftp://ftp.pbone.net/mirror/archive.fedoraproject.org/fedora/linux/updates/19/x86_64/gthumb-3.2.8-1.fc19.x86_64.rpm
~~- ftp://ftp.pbone.net/mirror/archive.fedoraproject.org/fedora/linux/updates/19/x86_64/gthumb-3.2.8-1.fc19.x86_64.rpm
Additions:
=====Research=====
~- Investigate authentication with client and what credentials are used when running salt command.
~- Is saltstack capable of caching commands for offline clients and how will changes be applied when client becomes available.
===Version 1.2 (02/05/2016)===
~- libreoffice-base.x86_64 added
~- libreoffice-postgresql.x86_64 added
~- Investigate authentication with client and what credentials are used when running salt command.
~- Is saltstack capable of caching commands for offline clients and how will changes be applied when client becomes available.
===Version 1.2 (02/05/2016)===
~- libreoffice-base.x86_64 added
~- libreoffice-postgresql.x86_64 added
Additions:
~- Install IPA /root/ipa-install.sh
~~- create kerberos principles on workstation first build
~- disabled notifications
~~- application installer sounds
~~- all bug reporting
~~- software update
===Version 1.1 (02/03/2016)===
~~- create kerberos principles on workstation first build
~- disabled notifications
~~- application installer sounds
~~- all bug reporting
~~- software update
===Version 1.1 (02/03/2016)===
Deletions:
Additions:
=====Workstation Setup=====
=====Version Notes=====
===Version 1.1 (01/05/2016)===
=====Version Notes=====
===Version 1.1 (01/05/2016)===
Deletions:
Version 1.0 (01/05/2016)
Additions:
Version 1.0 (01/05/2016)
Deletions:
Deletions:
Additions:
===Version 1.1===
Deletions:
No Differences
Additions:
===Version 1.1 ()===
Deletions:
Additions:
=====Workstation Setup====
~- Image
~- uncomment and modify workstation number in /etc/salt/minion
~~- line 88: id: ws100.votesmart.org
~- Accept minion on server
~~- Installed hplib
~- create /root/ipa-install.sh script for automating deployment
~- Installed salt-minion and configured for ws101.votesmart.org
~- Image
~- uncomment and modify workstation number in /etc/salt/minion
~~- line 88: id: ws100.votesmart.org
~- Accept minion on server
~~- Installed hplib
~- create /root/ipa-install.sh script for automating deployment
~- Installed salt-minion and configured for ws101.votesmart.org
Deletions:
||Package||Included||Notes||
||Evolution||Remove||Package is slow, crashes and causes error notifications||
||Thunderbird||Yes||Currently under review||
||Gimp||Yes||||
||Inkscape||Yes||||
||Firefox||Yes||||
||Chrome||Yes||||
||Konqueror||Yes||||
||XChat||Yes||||
||LibreOffice||Yes||||
~- create /root/ipa.sh script for automating deployment
Additions:
===Version 1.1 (01/26/2016)===
~- added /etc/votesmart-version
~- created automount script
~~- chmod +x /etc/rc.d/rc.local
~~- add /root/ker-mount.sh
~~- ker-mount.sh to mount /export/home at boot
~~~- sleep 5 required for script to run correctly and allow all sysctl services to start
~- CentOS updates
~- Installed all network printers
~- create /root/ipa.sh script for automating deployment
~- added /etc/votesmart-version
~- created automount script
~~- chmod +x /etc/rc.d/rc.local
~~- add /root/ker-mount.sh
~~- ker-mount.sh to mount /export/home at boot
~~~- sleep 5 required for script to run correctly and allow all sysctl services to start
~- CentOS updates
~- Installed all network printers
~- create /root/ipa.sh script for automating deployment
Deletions:
~- chmod +x /etc/rc.d/rc.local
~- add /root/ker-mount.sh
~- ker-mount.sh to mount /export/home at boot
Additions:
====Version Notes====
===Version 1.0 (01/05/2016)===
~- Base install
~- FreeIPA
~- Updates
===Version 1.1===
~- added adobe repo and installed flash plugin
===Version 1.0 (01/05/2016)===
~- Base install
~- FreeIPA
~- Updates
===Version 1.1===
~- added adobe repo and installed flash plugin
Deletions:
~-
Additions:
[[ManagementServer|Deployment server]]
Deletions:
Additions:
[[SaltStack|Deployment server]]
Deletions:
Additions:
====Configuration and Tweaks====
~- chmod +x /etc/rc.d/rc.local
~- add /root/ker-mount.sh
~- ker-mount.sh to mount /export/home at boot
~-
~- chmod +x /etc/rc.d/rc.local
~- add /root/ker-mount.sh
~- ker-mount.sh to mount /export/home at boot
~-
Additions:
====Software Testing====
||Package||Included||Notes||
||Evolution||Remove||Package is slow, crashes and causes error notifications||
||Thunderbird||Yes||Currently under review||
||Gimp||Yes||||
||Inkscape||Yes||||
||Firefox||Yes||||
||Chrome||Yes||||
||Konqueror||Yes||||
||XChat||Yes||||
||LibreOffice||Yes||||
Additions:
[[PuppetServer|Deployment server]]
Deletions:
Additions:
[[PuppetServer}|Deployment server]]
Deletions:
Additions:
[[CentOS|CentOS 7 Setup]]
Deletions:
Additions:
======Workstation Notes======
[[DepricatedWorkstationNotes|Depricated WorkStation Notes for Fedora and Zotac PCs]]
[[WindowsWorkstationNotes|Windows Workstation Notes]]
[[SingleSignOn(FreeIPA)|Single Sign On]]
~- [[FedoraFreeIPAServerNotes|FreeIPA Notes]]
[[ChromeBox|Asus ChromeBox Setup]]
[[CentOS]CentOS 7 Setup]]
[[DepricatedWorkstationNotes|Depricated WorkStation Notes for Fedora and Zotac PCs]]
[[WindowsWorkstationNotes|Windows Workstation Notes]]
[[SingleSignOn(FreeIPA)|Single Sign On]]
~- [[FedoraFreeIPAServerNotes|FreeIPA Notes]]
[[ChromeBox|Asus ChromeBox Setup]]
[[CentOS]CentOS 7 Setup]]
Deletions:
Find Windows workstation notes at WindowsWorkstationNotes
Additions:
======Linux Workstation Notes======
=====Related Links=====
=====Related Links=====
Deletions:
====Images====
Image Version found in /etc/version-votesmart for images created after 08/11/15
===Current Bugs===
Chrome DNS resolution issue
~- current workstations have secondary nameserver in /etc/resolv.conf as 8.8.8.8
~- chrome sparatically fails over to secondary DNS and internal pages (wiki, mantis, admin) fail as they are resolving to 216.14.255.* and page is unable to display
~- removing external DNS, forcing sites in /etc/hosts, or directly entering IP resolves problems.
Chrome high CPU usage and general slowness
~- Version 44.0.2403.157 (64-bit)
~~- Version 45.0.2454 has better CPU utilization is and faster load times on pages with no flash
~- Appears to be flash related
~- Advanced settings - System - Uncheck Continue running background apps when Google Chrome is closed.
~- Advanced settings - System - Uncheck Use hardware acceleration when available
~- about:plugins
~~- disable PDF viewer, remote desktop and widevine
Look for adblockplus and flashcontrol for chrome
~- https://chrome.google.com/webstore/detail/adblock-plus/cfhdojbkjhnklbpkdaibdccddilifddb?hl=en-US
~~- options - whitelist - votesmart.org
~- https://chrome.google.com/webstore/detail/flashcontrol/mfidmkgnfgnkihnjeklbekckimkipmoe?hl=en-US
~~- options - whitelist - *votesmart.org
===Version 11.6 (10/23/15)===
Added HP4350 available printers
Modified HP Office location to Front Office
'dnf -y update'
'dnf update' which includes Xorg update
dnf remove xorg-x11-drv-intel intel-gpu-tools
dnf install xorg-x11-drv-intel intel-gpu-tools
===Version 11.5 (09/25/15)===
~- Modified /etc/sysctl.conf
%%
echo vm.min_free_kbytes=1024 >> /etc/sysctl.conf
echo vm.swappiness=10 >> /etc/sysctl.conf
echo "vm.nr_hugepages=512" >> /etc/sysctl.conf
%%
~- added poprocks to /etc/hosts
~- added the following to /etc/security/limits.conf
%%
* - memlock 1048576
%%
===Version 11.4 (09/18/15)===
~- Installed Konqueror and set as default file manager
~- Removed Sharp Printer
~- Renamed HL6180DW to Brother HL6180DW
~- Installed HP OfficeJetx476dn
~- Installed Kyocera FS3920
~- Install HP 4250dn
~- System cleanup and update
~- Cups updated to 2.03. Had to re-enable with 'systemctl enable cups.service'
~- Updated /root/skel directory to replace pcmanfm with knoqueror
===Version 11.3 (09/10/15)===
Removed Chrome 44 x64
Installed Chrome 45 x64
Install Shutter screen capturing tool
Added keybind for locking screen
~- create the following on poprocks:/root/skel
~- modify ~/.config/openbox/lxde-rc.xml
~- add the following between <keyboard> </keyboard>
%%
<keybind key="C-A-L">
<action name="Execute">
<command>xscreensaver-command -lock</command>
</action>
</keybind>
%%
===Version 11.2 (09/01/15)===
Added /root/scripts/installipa.sh for ease of imaging
===Version 11.1 (09/01/15)===
VoteEasy not working on Firefox
%%## Adobe Repository 64-bit x86_64 ##
rpm -ivh http://linuxdownload.adobe.com/adobe-release/adobe-release-x86_64-1.0-1.noarch.rpm
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-adobe-linux%%
===Version 11 (08/31/15)===
%%# Fedora 22 #
dnf install flash-plugin nspluginwrapper alsa-plugins-pulseaudio libcurl%%
===Version 10.1 (08/28/15)===
Remove evolution: yum remove *evolution*
Remove clipit: yum remove clipit
Upgrade to FC22: fedup --network 22
===Version 10 (08/26/15)===
Removed xfce desktop and installed lxde
Modified /boot/grub2/grub.cfc and removed load_video
New packages: gthumb, thunderbird, evolution, inkscape, lynx, fedup, opera
Installed repository for opera
===Version 9 (08/11/15)===
Fixed Brother-HL-6180DWT printer settings
Disabling IPv6 by configuring /etc/sysctl.conf and using /etc/rc.d/rc.local to run sysctl -p
====Image Issues and Tweaks====
~- FreeIPA password change/temp password
~~- Unable to change password from Login screen, requires command line password change
~- Kristen specific
~~- Investigate Thunderbird email migration
~~- Investigate Evolution contacts issue with gmail *too many issues with evolution, removing from image*
~~~- Known bug in Evolution, currently only work around is installing gnome control center
~~~- Before launching Evolution install 'control-center'
~~~- run '/bin/gnome-control-center' as user and add online account for google
~~~- Ensure gmail setup to allow IMAP
~~~- setup Evolution using IMAP and do NOT check calendar and contacts
~~- Investigate Evolution calendar and tasks with gmail
====Opera Repository====
cd /etc/yum.repos.d/
wget http://download.opensuse.org/repositories/home:ruario:opera/Fedora_21/home:ruario:opera.repo
yum install opera-stable
====Disable IPV6====
Client startup script required to disable ipv6.
/etc/rc.d/rc.local runs sysctl -p.
This call in turn disables ipv6 on interfaces, but does not disable the ipv6 stack needed by FreeIPA.
/etc/sysctl.conf
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
net.ipv6.conf.ens32.disable_ipv6 =1
====Troubleshooting ipa====
===Symptom: Login fails with "incorrect password" or screen briefly goes black then returns to login prompt===
~- 99% of the time this is caused by the clock on the workstation being out of sync with the server. They must be within a minute of each other.
~- Check that ##ntpd## is running and that the system date/time is correct. **CMOS time must be correct!** If it's not, change the battery and/or reset CMOS clock to GMT.
~- Check that the IP address assigned (##ip a##) matches the dns record (##dig ws<xx>.votesmart.org##). These must match. If they do not, and the clocks are in sync, check ##/etc/sssd/sssd.conf## and make sure ##dyndns_update = True## is set. Restart sssd (##systemctl stop sssd; systemctl start sssd##, sometimes ##systemctl daemon-reload## first). Check again.
~- If still no luck, the nuclear option will usually clear things up:
%%
chattr -i /etc/ntp.conf
ipa-client-automount --uninstall
ipa-client-install --uninstall
ipa-client-install --enable-dns-updates --force-ntpd --hostname=ws#.votesmart.org --force-join
ipa-client-automount
chattr +i /etc/ntp.conf
%%
====Troubleshooting automount====
===Symptom: User password is accepted, but the login screen reappears after a moment===
~- Make sure you can mount /home/<user> manually
~- If you see this error in the server ##krb5kdc.log##: ##Decrypt integrity check failed## then run the ##regenerateCert.sh## script on the IPA server, then restart IPA: ##service ipa restart##
~- Try restarting the autofs daemon on the trouble client: ##service autofs restart##
~- Check [[http://www.freeipa.org/docs/2.0.0/Administration_Guide/en-US/html/#chap-Administration_Guide-Configuring_Automount|these configuration settings]] (ignore the schema stuff, you'll create LDAP entries below)
~- Be sure the client is forcing NFS3 for automounts (otherwise all users will get squashed to uid 0 on the server side, and the mounts won't be accessible):
~~- In ##/etc/sysconfig/autofs##, change/set MOUNT_NFS_DEFAULT_PROTOCOL=3
~~- In ##/etc/nfsmount.conf##, set Nfsvers=3 and Defaultnfsves=3
~~- Restart autofs: ##systemctl restart autofs##
====Workstation Settings for successful freeipa install====
~- check that nfs4 is disabled, two files are involved
~- add new hostnames
~- have to add new nfs keys for new hostnames
Additions:
Chrome DNS resolution issue
~- current workstations have secondary nameserver in /etc/resolv.conf as 8.8.8.8
~- chrome sparatically fails over to secondary DNS and internal pages (wiki, mantis, admin) fail as they are resolving to 216.14.255.* and page is unable to display
~- removing external DNS, forcing sites in /etc/hosts, or directly entering IP resolves problems.
~- current workstations have secondary nameserver in /etc/resolv.conf as 8.8.8.8
~- chrome sparatically fails over to secondary DNS and internal pages (wiki, mantis, admin) fail as they are resolving to 216.14.255.* and page is unable to display
~- removing external DNS, forcing sites in /etc/hosts, or directly entering IP resolves problems.
Deletions:
Additions:
dnf remove xorg-x11-drv-intel intel-gpu-tools
dnf install xorg-x11-drv-intel intel-gpu-tools
dnf install xorg-x11-drv-intel intel-gpu-tools
Deletions:
dnf install xorg-x11-drv-intel intel-gpu-tools libva-intel-driver
Additions:
===Version 11.6 (10/23/15)===
Added HP4350 available printers
Modified HP Office location to Front Office
'dnf -y update'
'dnf update' which includes Xorg update
dnf remove xorg-x11-drv-intel intel-gpu-tools libva-intel-driver
dnf install xorg-x11-drv-intel intel-gpu-tools libva-intel-driver
Added HP4350 available printers
Modified HP Office location to Front Office
'dnf -y update'
'dnf update' which includes Xorg update
dnf remove xorg-x11-drv-intel intel-gpu-tools libva-intel-driver
dnf install xorg-x11-drv-intel intel-gpu-tools libva-intel-driver
Additions:
===Version 11.3 (09/10/15)===
Deletions:
Additions:
===Version 11.4 (09/18/15)===
Deletions:
Deletions:
Additions:
~- Modified /etc/sysctl.conf
Additions:
===Version 11.5 (09/25/15)===
echo vm.min_free_kbytes=1024 >> /etc/sysctl.conf
echo vm.swappiness=10 >> /etc/sysctl.conf
echo "vm.nr_hugepages=512" >> /etc/sysctl.conf
~- added poprocks to /etc/hosts
~- added the following to /etc/security/limits.conf
* - memlock 1048576
===Version 11.4 (09/18/15)==
~- Installed Konqueror and set as default file manager
~- Removed Sharp Printer
~- Renamed HL6180DW to Brother HL6180DW
~- Installed HP OfficeJetx476dn
~- Installed Kyocera FS3920
~- Install HP 4250dn
~- System cleanup and update
~- Cups updated to 2.03. Had to re-enable with 'systemctl enable cups.service'
~- Updated /root/skel directory to replace pcmanfm with knoqueror
===Version 11.3 (09/10/15)==
Removed Chrome 44 x64
Installed Chrome 45 x64
Install Shutter screen capturing tool
Added keybind for locking screen
echo vm.min_free_kbytes=1024 >> /etc/sysctl.conf
echo vm.swappiness=10 >> /etc/sysctl.conf
echo "vm.nr_hugepages=512" >> /etc/sysctl.conf
~- added poprocks to /etc/hosts
~- added the following to /etc/security/limits.conf
* - memlock 1048576
===Version 11.4 (09/18/15)==
~- Installed Konqueror and set as default file manager
~- Removed Sharp Printer
~- Renamed HL6180DW to Brother HL6180DW
~- Installed HP OfficeJetx476dn
~- Installed Kyocera FS3920
~- Install HP 4250dn
~- System cleanup and update
~- Cups updated to 2.03. Had to re-enable with 'systemctl enable cups.service'
~- Updated /root/skel directory to replace pcmanfm with knoqueror
===Version 11.3 (09/10/15)==
Removed Chrome 44 x64
Installed Chrome 45 x64
Install Shutter screen capturing tool
Added keybind for locking screen
Deletions:
Additions:
~~- Version 45.0.2454 has better CPU utilization is and faster load times on pages with no flash
Additions:
~- create the following on poprocks:/root/skel
Additions:
~- Advanced settings - System - Uncheck Use hardware acceleration when available
~- about:plugins
~~- disable PDF viewer, remote desktop and widevine
~- about:plugins
~~- disable PDF viewer, remote desktop and widevine
Additions:
====Images====
Deletions:
Additions:
~- add the following between <keyboard> </keyboard>
Additions:
No keybind for locking screen
~- modify ~/.config/openbox/lxde-rc.xml
<keybind key="C-A-L">
<action name="Execute">
<command>xscreensaver-command -lock</command>
</action>
</keybind>
~- modify ~/.config/openbox/lxde-rc.xml
<keybind key="C-A-L">
<action name="Execute">
<command>xscreensaver-command -lock</command>
</action>
</keybind>
Additions:
~- Version 44.0.2403.157 (64-bit)
~- Appears to be flash related
~- Advanced settings - System - Uncheck Continue running background apps when Google Chrome is closed.
Look for adblockplus and flashcontrol for chrome
~- https://chrome.google.com/webstore/detail/adblock-plus/cfhdojbkjhnklbpkdaibdccddilifddb?hl=en-US
~~- options - whitelist - votesmart.org
~- https://chrome.google.com/webstore/detail/flashcontrol/mfidmkgnfgnkihnjeklbekckimkipmoe?hl=en-US
~~- options - whitelist - *votesmart.org
~- Appears to be flash related
~- Advanced settings - System - Uncheck Continue running background apps when Google Chrome is closed.
Look for adblockplus and flashcontrol for chrome
~- https://chrome.google.com/webstore/detail/adblock-plus/cfhdojbkjhnklbpkdaibdccddilifddb?hl=en-US
~~- options - whitelist - votesmart.org
~- https://chrome.google.com/webstore/detail/flashcontrol/mfidmkgnfgnkihnjeklbekckimkipmoe?hl=en-US
~~- options - whitelist - *votesmart.org
Deletions:
Additions:
Chrome high CPU usage and general slowness
Look for adblockplus and flashblock for chrome
Look for adblockplus and flashblock for chrome
Additions:
Maximize not working as expected, window get scaled to 1240x720, user can adjust window to fill screen
Upgrade can cause issues with LibreOffice databases (Walker)
Upgrade can cause issues with LibreOffice databases (Walker)
Deletions:
~- Upgrade can cause issues with LibreOffice databases (Walker)
No Differences
No Differences
Additions:
===Current Bugs===
===Version 11.2 (09/01/15)===
===Version 11.1 (09/01/15)===
===Version 11 (08/31/15)===
===Version 10.1 (08/28/15)===
===Version 10 (08/26/15)===
===Version 9 (08/11/15)===
===Version 11.2 (09/01/15)===
===Version 11.1 (09/01/15)===
===Version 11 (08/31/15)===
===Version 10.1 (08/28/15)===
===Version 10 (08/26/15)===
===Version 9 (08/11/15)===
Deletions:
==Version 11.2 (09/01/15)==
==Version 11.1 (09/01/15)==
==Version 11 (08/31/15)==
==Version 10.1 (08/28/15)==
==Version 10 (08/26/15)==
==Version 9 (08/11/15)==
Additions:
==Current Bugs==
==Version 11.2 (09/01/15)==
==Version 11.1 (09/01/15)==
==Version 11 (08/31/15)==
==Version 10.1 (08/28/15)==
==Version 10 (08/26/15)==
==Version 9 (08/11/15)==
==Version 11.2 (09/01/15)==
==Version 11.1 (09/01/15)==
==Version 11 (08/31/15)==
==Version 10.1 (08/28/15)==
==Version 10 (08/26/15)==
==Version 9 (08/11/15)==
Deletions:
*Version 11.2
*Version 11.1
*Version 11
*Version 10.1
*Version 10 (08/26/15)
*Version 9 (08/11/15)
Additions:
*Bugs needing fixed
~- Maximize not working as expected, window get scaled to 1240x720, user can adjust window to fill screen
~- Upgrade can cause issues with LibreOffice databases (Walker)
~- Maximize not working as expected, window get scaled to 1240x720, user can adjust window to fill screen
~- Upgrade can cause issues with LibreOffice databases (Walker)
Additions:
Find Windows workstation notes at WindowsWorkstationNotes
Additions:
*Version 11.2
Added /root/scripts/installipa.sh for ease of imaging
Added /root/scripts/installipa.sh for ease of imaging
Additions:
*Version 11.1
Additions:
====Workstation Settings for successful freeipa install====
~- check that nfs4 is disabled, two files are involved
~- add new hostnames
~- have to add new nfs keys for new hostnames
~- check that nfs4 is disabled, two files are involved
~- add new hostnames
~- have to add new nfs keys for new hostnames
Additions:
*Version 11
VoteEasy not working on Firefox
%%## Adobe Repository 64-bit x86_64 ##
rpm -ivh http://linuxdownload.adobe.com/adobe-release/adobe-release-x86_64-1.0-1.noarch.rpm
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-adobe-linux%%
%%# Fedora 22 #
dnf install flash-plugin nspluginwrapper alsa-plugins-pulseaudio libcurl%%
Upgrade to FC22: fedup --network 22
VoteEasy not working on Firefox
%%## Adobe Repository 64-bit x86_64 ##
rpm -ivh http://linuxdownload.adobe.com/adobe-release/adobe-release-x86_64-1.0-1.noarch.rpm
rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-adobe-linux%%
%%# Fedora 22 #
dnf install flash-plugin nspluginwrapper alsa-plugins-pulseaudio libcurl%%
Upgrade to FC22: fedup --network 22
Additions:
*Version 10.1
Remove evolution: yum remove *evolution*
Remove clipit: yum remove clipit
~~- Investigate Evolution contacts issue with gmail *too many issues with evolution, removing from image*
~~~- Known bug in Evolution, currently only work around is installing gnome control center
~~~- Before launching Evolution install 'control-center'
~~~- run '/bin/gnome-control-center' as user and add online account for google
~~~- Ensure gmail setup to allow IMAP
~~~- setup Evolution using IMAP and do NOT check calendar and contacts
Remove evolution: yum remove *evolution*
Remove clipit: yum remove clipit
~~- Investigate Evolution contacts issue with gmail *too many issues with evolution, removing from image*
~~~- Known bug in Evolution, currently only work around is installing gnome control center
~~~- Before launching Evolution install 'control-center'
~~~- run '/bin/gnome-control-center' as user and add online account for google
~~~- Ensure gmail setup to allow IMAP
~~~- setup Evolution using IMAP and do NOT check calendar and contacts
Deletions:
Additions:
====Image Issues and Tweaks====
~- FreeIPA password change/temp password
~~- Unable to change password from Login screen, requires command line password change
~- Kristen specific
~~- Investigate Thunderbird email migration
~~- Investigate Evolution contacts issue with gmail
~~- Investigate Evolution calendar and tasks with gmail
~- FreeIPA password change/temp password
~~- Unable to change password from Login screen, requires command line password change
~- Kristen specific
~~- Investigate Thunderbird email migration
~~- Investigate Evolution contacts issue with gmail
~~- Investigate Evolution calendar and tasks with gmail
Additions:
*Version 10 (08/26/15)
Removed xfce desktop and installed lxde
Modified /boot/grub2/grub.cfc and removed load_video
New packages: gthumb, thunderbird, evolution, inkscape, lynx, fedup, opera
Installed repository for opera
*Version 9 (08/11/15)
Fixed Brother-HL-6180DWT printer settings
Disabling IPv6 by configuring /etc/sysctl.conf and using /etc/rc.d/rc.local to run sysctl -p
Removed xfce desktop and installed lxde
Modified /boot/grub2/grub.cfc and removed load_video
New packages: gthumb, thunderbird, evolution, inkscape, lynx, fedup, opera
Installed repository for opera
*Version 9 (08/11/15)
Fixed Brother-HL-6180DWT printer settings
Disabling IPv6 by configuring /etc/sysctl.conf and using /etc/rc.d/rc.local to run sysctl -p
Additions:
====Opera Repository====
cd /etc/yum.repos.d/
wget http://download.opensuse.org/repositories/home:ruario:opera/Fedora_21/home:ruario:opera.repo
yum install opera-stable
cd /etc/yum.repos.d/
wget http://download.opensuse.org/repositories/home:ruario:opera/Fedora_21/home:ruario:opera.repo
yum install opera-stable
Additions:
====Image Versioning====
Image Version found in /etc/version-votesmart for images created after 08/11/15
Image Version found in /etc/version-votesmart for images created after 08/11/15
Additions:
----
CategoryIT
CategoryIT
Additions:
====Troubleshooting automount====
===Symptom: User password is accepted, but the login screen reappears after a moment===
===Symptom: User password is accepted, but the login screen reappears after a moment===
Deletions:
(Symptom: User password is accepted, but the login screen reappears after a moment)
>>
Additions:
====Troubleshooting ipa====
===Symptom: Login fails with "incorrect password" or screen briefly goes black then returns to login prompt===
~- 99% of the time this is caused by the clock on the workstation being out of sync with the server. They must be within a minute of each other.
~- Check that ##ntpd## is running and that the system date/time is correct. **CMOS time must be correct!** If it's not, change the battery and/or reset CMOS clock to GMT.
~- Check that the IP address assigned (##ip a##) matches the dns record (##dig ws<xx>.votesmart.org##). These must match. If they do not, and the clocks are in sync, check ##/etc/sssd/sssd.conf## and make sure ##dyndns_update = True## is set. Restart sssd (##systemctl stop sssd; systemctl start sssd##, sometimes ##systemctl daemon-reload## first). Check again.
~- If still no luck, the nuclear option will usually clear things up:
%%
chattr -i /etc/ntp.conf
ipa-client-automount --uninstall
ipa-client-install --uninstall
ipa-client-install --enable-dns-updates --force-ntpd --hostname=ws#.votesmart.org --force-join
ipa-client-automount
chattr +i /etc/ntp.conf
%%
**Troubleshooting automount**
(Symptom: User password is accepted, but the login screen reappears after a moment)
~- Make sure you can mount /home/<user> manually
~- If you see this error in the server ##krb5kdc.log##: ##Decrypt integrity check failed## then run the ##regenerateCert.sh## script on the IPA server, then restart IPA: ##service ipa restart##
~- Try restarting the autofs daemon on the trouble client: ##service autofs restart##
~- Check [[http://www.freeipa.org/docs/2.0.0/Administration_Guide/en-US/html/#chap-Administration_Guide-Configuring_Automount|these configuration settings]] (ignore the schema stuff, you'll create LDAP entries below)
~- Be sure the client is forcing NFS3 for automounts (otherwise all users will get squashed to uid 0 on the server side, and the mounts won't be accessible):
~~- In ##/etc/sysconfig/autofs##, change/set MOUNT_NFS_DEFAULT_PROTOCOL=3
~~- In ##/etc/nfsmount.conf##, set Nfsvers=3 and Defaultnfsves=3
~~- Restart autofs: ##systemctl restart autofs##
>>
%%
===Symptom: Login fails with "incorrect password" or screen briefly goes black then returns to login prompt===
~- 99% of the time this is caused by the clock on the workstation being out of sync with the server. They must be within a minute of each other.
~- Check that ##ntpd## is running and that the system date/time is correct. **CMOS time must be correct!** If it's not, change the battery and/or reset CMOS clock to GMT.
~- Check that the IP address assigned (##ip a##) matches the dns record (##dig ws<xx>.votesmart.org##). These must match. If they do not, and the clocks are in sync, check ##/etc/sssd/sssd.conf## and make sure ##dyndns_update = True## is set. Restart sssd (##systemctl stop sssd; systemctl start sssd##, sometimes ##systemctl daemon-reload## first). Check again.
~- If still no luck, the nuclear option will usually clear things up:
%%
chattr -i /etc/ntp.conf
ipa-client-automount --uninstall
ipa-client-install --uninstall
ipa-client-install --enable-dns-updates --force-ntpd --hostname=ws#.votesmart.org --force-join
ipa-client-automount
chattr +i /etc/ntp.conf
%%
**Troubleshooting automount**
(Symptom: User password is accepted, but the login screen reappears after a moment)
~- Make sure you can mount /home/<user> manually
~- If you see this error in the server ##krb5kdc.log##: ##Decrypt integrity check failed## then run the ##regenerateCert.sh## script on the IPA server, then restart IPA: ##service ipa restart##
~- Try restarting the autofs daemon on the trouble client: ##service autofs restart##
~- Check [[http://www.freeipa.org/docs/2.0.0/Administration_Guide/en-US/html/#chap-Administration_Guide-Configuring_Automount|these configuration settings]] (ignore the schema stuff, you'll create LDAP entries below)
~- Be sure the client is forcing NFS3 for automounts (otherwise all users will get squashed to uid 0 on the server side, and the mounts won't be accessible):
~~- In ##/etc/sysconfig/autofs##, change/set MOUNT_NFS_DEFAULT_PROTOCOL=3
~~- In ##/etc/nfsmount.conf##, set Nfsvers=3 and Defaultnfsves=3
~~- Restart autofs: ##systemctl restart autofs##
>>
%%