Computing Infrastructure: Difference between revisions

From All Hands Active Wiki
Jump to navigation Jump to search
← Older edit
VisualWikitext
Nova1313 (talk | contribs)
898 edits
RachelN (talk | contribs)
317 edits
m →‎Networks: Added link to orphaned resources page
 
(63 intermediate revisions by 7 users not shown)
Line 1: Line 1:
=Networks=
=Networks=
Also see the article [[Network Resources]].
==Internets==
==Internets==
Internet connection is provided by Comcast.
Internet connection is provided by ACD.


More information about the internet connection and trouble shooting can be found here: [[Internets]]
More information about the internet connection and trouble shooting can be found here: [[Internets]]


To administer the internets use the web interface located at:
The connection is a bonded DSL line with 75 down and 15 up. The modem provided has ports 1 and 2 enabled and exposes all devices attached to the internet with semi-static IPs. We cannot administer this device and it is not a router.
http://10.1.10.1 or http://modem.allhandsactive.org
 
Current config owners:
* Nick Ristow
* Tyler Worman
* Nate Yost


==WIFI==
==WIFI==
WIFI is provided by the Mikrotik Router and routed through the Comcast Connection
WIFI is provided by the Ubiquiti Access points throughout the space.
 
2 DHCP enabled SSID's are provided.
 
=== SSID: ALLHANDSACTIVE ===
As of: 11/15/2015 ALLHANDSACTIVE is a general use wifi connection.
 
Password: TheNextGeneration
 
Future 2/1: This connection to be discontinued.


=== SSID: AHA-PUBLIC ===
4 DHCP enabled SSID's are provided at present.
Throttled AHA public wireless. Defaults to 500k/100k per connection.


Password: TheNextGeneration
=== SSID: AllHandsActive-Guest ===
Throttled AHA public wireless. Defaults to 4mpbs per connection. This places you on a private un-authenticated devices only network.


=== SSID: AHA-MEMBERS ===
=== SSID: AllHandsActive-Members ===
Unthrottled AHA public wireless. Login with your AHA LDAP username and password using Enterprise WPA2
Unthrottled AHA member wireless. Secured using your All Hands Active LDAP username and password. Unlimited devices for each member and puts your device on the main network.


Future: To be turned on mid January.
This uses Enterprise WPA2 with no certificate (or don't check), TTLS, MSCHAPv2. Many interfaces include a field for ''anonymous identity'' - this can be left blank.


==LAN==
==LAN==
Line 39: Line 26:
===Router/Switches===
===Router/Switches===
====Router Main====
====Router Main====
Mikrotik Routerboard RB2011UiAS-2HnD-IN Router
Unifi Security Gateway (192.168.1.1)
Instructions:  (http://wiki.mikrotik.com/wiki/Manual:TOC)


Maintained by:
Maintained by:
* Tyler Worman
* Tyler Worman
* Mike Grube


Runs RouterOS 6. Upgrade rights for versions through RouterOS 8
Managed by Ubiquiti Cloud Key management interface on https://192.168.1.2
Routerboard RB2011UiAS-2HnD-IN
 
Runs DNS server with internal static host names configured and uses google DNS after that.  
Provides DHCP, routing and firewall rules. Allows for load balancing 2 internet connections or fail-over via current disconnected WAN2 port. This does not have a built in Switch.
Cable modem points to this DNS server.


* IP Address: 10.1.10.3 router.allhandsactive.org (internal)
* IP Address: 192.168.1.2 router.allhandsactive.org (internal)


====Workstation Switch====  
====Annex Switch====  
Located in center of workstations
24 port unmanaged 1GBPS switch is located in the rack at the back of AHA.


Netgear FS524
====Annex Switch====
TrendNet router configured in bridge mode. Provides AllHandsActive-Annex Wi-fi SSID.


===Printer===
Located in the Annex provides hardwired annex ports. Runs off port 24 on the patch panel.
A networked BW Laser Printer
 
 
===Network devices===
====NestCams====
3 Nest cams are located throughout the space. They are DHCP via wifi AllHandsActive
 
In Ubiquiti Control software they are tagged as NestCam 1, 2, and 3 so you can monitor their traffic.
 
====Ubiquiti Cloud Key====
Allows management of the network, support for LDAP/Radius wifi users and hot spots, and 30 days of rolling network logs.
 
IP: 192.168.1.2
 
====Ubiquiti Access Point====
Located in the main space and provides all but the -Annex AHA wifi SSID


* Model: HP Laserjet 2600N
IP: 192.168.1.5
* IP Address: 10.1.10.2 printer.allhandsactive.org (internal)


===BYB Cardswipe===
====BYB Cardswipe====
Used for BYB employee's to clock in and out.
Used for BYB employee's to clock in and out.


* Model: EZ Clocking EC50
* Model: EZ Clocking EC50
* IP Address: 10.1.10.14
* IP Address: DHCP? Should be 192.168.1.8
* Owner: BYB
* Owner: BYB
====DoorPI / Gatekeeper ====
Rasspberry PI to control the LDAP to Door connection and card reader.
IP: 192.168.1.6
Maintained by:
* Nate Yost
* Tyler Worman
===Printer===
See [[Printers]]
* Model: HP LaserJet Pro 400 Color MFP
* IP Address: 192.168.1.7 printer.allhandsactive.org (internal)
[[Category:Infrastructure]]


===NAS===
===NAS===
{{outdated}}
Controls AHA's LDAP server, Radius server, file shares and remote login. The NAS is knows as HUB@AHA.
Controls AHA's LDAP server, Radius server, file shares and remote login. The NAS is knows as HUB@AHA.
hub.allhandsactive.com:5000 (external)
hub.allhandsactive.com:5000 (external)


* Model: Synology DS409
* Model: Synology DS409
* IP Address: 10.1.10.4 hub.allhandsactive.org (internal)
* IP Address: 192.168.1.4 hub.allhandsactive.org (internal)


Maintained by:
Maintained by:
* Nick Ristow
* Nick Ristow
* Alex White
* Tyler Worman
* Tyler Worman
* Brian Morse


More information about this project can be found here: [[Computing Infrastructure: HUB@AHA]]
More information about this project can be found here: [[Computing Infrastructure: HUB@AHA]]
Line 87: Line 103:
====Backups====
====Backups====
Machines are fresh installed to same state and are not backed up.
Machines are fresh installed to same state and are not backed up.
The NAS offers recovery in event of a loss of disk but we presently do not do a remote backup of user files.
The NAS offers recovery in event of a loss of disk. We presently do not do a remote backup of user files.


====Mapping drives====
====Mapping drives====
Line 94: Line 110:
In Windows startup Local Group Policy Editor as Admin
In Windows startup Local Group Policy Editor as Admin
Under UserConfiguration\Windows Settings\Scripts (Logon/Logoff) add the script as a login script.
Under UserConfiguration\Windows Settings\Scripts (Logon/Logoff) add the script as a login script.
This login script maps drives for Software, Home and Share. It redirects the users desktop and my documents folder to their home folder within the NAS. The redirection of desktop/documents is disabled for the admin account.


====LDAP Config====
====LDAP Config====
General
See here [[Computer Infrastructure: LDAP Authentication]]
pGina 3.1.8.0
 
=====Setup graphics on main screen=====
Copy the rhinoblue.bmp from the following directory to C:\ on the local machine and set as the pGINA login graphic.
\\hub\AHASoftware\AHA Promo Graphics\rhinoblue.bmp
 
=====Config images=====
Plugin Screen:
 
[[File:PGINA-Pluginscreen.png]]
 
Plugin Order Screen:
 
[[File:PGINA-Pluginorderscreen.png]]
 
Plugin LDAP Config Screen:
 
[[File:PGINA-Pluginconfigscreen.png]]
 
Plugin LDAP Config Authorization Screen:
 
[[File:Pluginconfigscreen-authorization.png]]


=Workstations=
=Workstations=
==CNC==
A full list of available workstations is located at [[Computing Resources]].
This machine is used to run the CNC machine in the back room.


===Software===
==LASER (Big Red/Softdog)==
* Windows Vista
* Mach 3 (http://www.machsupport.com/software/mach3/)
* USB SmoothStepper for Mach 3 (http://www.warp9td.com/)
* VCarvePro 6.0 (http://www.vectric.com/products/vcarve.htm)
* Cut3D 1.025 (http://www.vectric.com/products/cut3d.html)
 
===Config===
Configs are backed up here: List GIT location
 
===Harware===
Specs: List them here, but we really could use a new machine.
Connnected to: [[CNC_Machine]]
 
===Maintainer===
Maintained by: Tyler Worman
 
===Licenses===
Licenses to Mach3, VCarve Pro and Cut3D owned by: Tyler Worman
 
===Todo===
* Update the tool index in Vcarve and Cut3D
* Backup config for Vcarve and Mach3 to Tyler's GIT/BitBucket repository
* Wipe machine
* Install a Windows 10 license.
* Install CNC software
* Lock machine down to admin and LDAP enabled members (as non-admin accounts!)
 
===Login===
Username: CNC
 
Password: Ask Tyler
 
==BYB LASER (Big Red/Softdog)==
===Hardware===
===Hardware===
Specs:
Specs:
Line 163: Line 125:


===Software===
===Software===
List software here
* Inkscape
* LaserCut 5.3


===Maintainer===
===Maintainer===
Line 169: Line 132:


===To Do===
===To Do===
* Verify with Greg/BYB that it's still okay to LDAP enable the machine login - Yes, it is. Nick checked.
* Get list of valid users from Greg
* Get list of valid users from Greg
* Create LDAP group on NAS
* Create LDAP group on NAS
Line 176: Line 138:
* lock down login to admin and pGina NAS users.
* lock down login to admin and pGina NAS users.


==AHA LASER==
==3D Printing==
===Hardware===
===Hardware===
Specs:
Specs:
List them here
List them here


This PC is currently not turned on and is sitting in the loud noise room. It needs to be cleaned. Tyler W. has the registration info for the software.
===Software===
===Software===
Inkskape
List installed software here
Gimp
Retina Engrave


===Maintainer===
===Maintainer===
Who owns and maintains the PC and it's software?
Who owns and maintains the PC and it's software?


===To Do===
==Front Desk==
* Clean and move from loud noise room.
* Extract image from machine so we have a backup before wiping. (unsure how authentication of software will go)
* Create LDAP group on NAS for Little laser
* Install pGina on machine
* Fully update machine and software
* lock down login to admin and pGina NAS users.
*
 
==5 Public Workstations==
===Current state===
Specs:
* PC1 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB - DEMO (LDAP)
* PC2 - Win 7 AMD A10-5800K 3.8GHZ 8GB (MAKER Login)
* PC3 - Win 7 AMD A10-5800K 3.8GHZ 8GB (MAKER Login)
* PC4 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB - Demo (LDAP)
* PC5 - Win 7 AMD A10-5800K 3.8GHZ 8GB (MAKER Login)


===Future state===
Lives under the desk below the TV monitor in the front room. Also hooked up to the [[Vinyl Cutter]].
5 Managed Windows 10 workstations. Software updated by Ninite, Windows updates kept up to date by service account script.


Easy to build a new image from scratch with instructions for doing this here:
===Hardware===
[[Computer Infrastructure: Building new Workstation image]]


===Setup Steam===
===Software===
Valve requires Steam to run as admin to perform many of the game installs via Steam. To do this at AHA we run Steam as admin via a program called Runasgui. Runasgui runs a service as admin, encrypts the admin password and locks it down to a specific application (in a secured location). The resulting shortcut it makes runs the Runasadmin client and escalates the program running to run as an administrative user!
* Ubuntu--what version?
* Inkscape
* InkCut
* List other installed software here


Download Run as gui from the link below or get it from the NAS AHASoftware Steam setup share!
===Maintainer===
Link: http://download.cnet.com/RunAsGUI/3000-2094_4-10913442.html
Who owns and maintains the PC and it's software?


As Admin:
==5 Public Workstations==
Install steam to c:\Steam (RunAsGui Flips out otherwise)
===Current state===
Install RunAsGui Admin to default install path (Install for just this user)
Specs:
Install RunAsGui Client to default (for all users)
* AHA-PC1 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB (LDAP)
 
* AHA-PC2 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB (LDAP)
Run RunAsGui Admin and configure it to run steam as admin. It will create the following as a shortcut:
* AHA-PC3 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB (LDAP)
%programfiles% (x86)\Smart-X\RunAsGUI\RunAsGUIExec.exe "'%programfiles% (x86)\Smart-X\RunAsGUI\Steam_admin.rag'"
* AHA-PC4 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB (LDAP)
 
* AHA-PC5 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB (LDAP)
The tool doesn't like the (x86) while configuring it in the GUI. To get around this when configuring RunAsGuiAdmin remove the (x86) and just leave the %programfiles% in the config gui. Once it's configured and password changed, place the Steam icon in an area it gets copied to every new user profile.
 
Copy the resulting icon (also stored on the NAS) to: C:\Users\Default\Desktop (it's a hidden folder!)
 
Test it as out a user.


===To do===
===To do===
* Write script to perform offline, silent, no reboot windows updates for all machines. (https://stackoverflow.com/questions/16180265/automatically-update-windows-fully)
* Setup Rhino 3D and Zoo on all PCs
* Write script to move home dirs desktop/my documents to nas/home
* Allow demo of machines until 1/30 by users and during this time provision members with accounts.
* Reset all passwords.
* Explore deleting home dir from local machine after creation
* Explore mapping home dir to the NAS on login.
* Find work around for some steam games that require use to be Admin on the machines to run them.
** https://superuser.com/questions/99286/selectively-disabling-uac-for-specific-programs-on-windows-7 Maybe this?
** http://helpdeskgeek.com/windows-7/run-programs-as-administrator-with-full-elevated-rights-in-windows-7/ or this with the change options for all users
** http://www.howtogeek.com/124087/how-to-create-a-shortcut-that-lets-a-standard-user-run-an-application-as-administrator/ Seems like a security hole
** Runas-gui lets you create a RAG file that allows one specific program to run as Admin like the Steamservice.exe


===AHA installed software===
===AHA installed software===
Line 251: Line 180:
{| class="wikitable"
{| class="wikitable"
|-
|-
|pGina || Arduino Studio
|pGina || RunAsGui || Steam || Arduino Studio || Unity Game Engine || Blender || Virtual Box || Fusion 360
|-
|-
|OpenSCAD || LibreCAD || FreeCAD || EagleCAD || KiCAD
|OpenSCAD || LibreCAD || FreeCAD || EagleCAD || KiCAD || Rhino || Sprocketeer 2.0 || 3d Connexion || Altium Circuit Maker
|}
|}


Line 274: Line 203:
|}
|}


===Restore Workstations===  
===Rebuilding a Workstation===  
Guide here: [[Computer Infrastructure: Restoring Workstations]]
Guide here: [[Computer_Infrastructure:_Building_new_Workstation_image]]
 
The workstation restoration process involves wiping the machine, copying down an image from the NAS and running updates.


=Virtual Machines=
=Virtual Machines=
Future State:
Future State:
HUB@AHA has 1 Ubuntu VirtualBox image that get mounted to the 6 public workstations at login. It's maintained by AHA and configured with default settings for the space. You may clone the image for your personal use.
HUB@AHA has a VM folder in the AHASoftware share. It will be mounted to the 6 public workstations at login. Need someone to build these. Demure was interested.
It's maintained by AHA members and configured with default settings for the space. You may clone the image for your personal use.


==Todo==
==Todo==
Line 293: Line 221:


==Base Image==
==Base Image==
A base install of the latest LTR Ubuntu image that is reasonably patched.
A base install of the latest LTR Ubuntu image that is reasonably patched?


===Additional software===
===Additional software===
Line 306: Line 234:




If you need additional packages please contact Tyler Worman to request a base package be added to the distribution.
If you need additional packages please contact xxxx to request a base package be added to the distribution.


==Usage pattern==
==Usage pattern==
Copy the VM to your private folder on the NAS and use as needed.
Copy the VM to your private folder on the NAS and use as needed.
Wipe/Restore from base image as needed.
Wipe/Restore from base image as needed.

Latest revision as of 11:29, 28 November 2023

Networks

Also see the article Network Resources.

Internets

Internet connection is provided by ACD.

More information about the internet connection and trouble shooting can be found here: Internets

The connection is a bonded DSL line with 75 down and 15 up. The modem provided has ports 1 and 2 enabled and exposes all devices attached to the internet with semi-static IPs. We cannot administer this device and it is not a router.

WIFI

WIFI is provided by the Ubiquiti Access points throughout the space.

4 DHCP enabled SSID's are provided at present.

SSID: AllHandsActive-Guest

Throttled AHA public wireless. Defaults to 4mpbs per connection. This places you on a private un-authenticated devices only network.

SSID: AllHandsActive-Members

Unthrottled AHA member wireless. Secured using your All Hands Active LDAP username and password. Unlimited devices for each member and puts your device on the main network.

This uses Enterprise WPA2 with no certificate (or don't check), TTLS, MSCHAPv2. Many interfaces include a field for anonymous identity - this can be left blank.

LAN

Router/Switches

Router Main

Unifi Security Gateway (192.168.1.1)

Maintained by:

  • Tyler Worman

Managed by Ubiquiti Cloud Key management interface on https://192.168.1.2

Provides DHCP, routing and firewall rules. Allows for load balancing 2 internet connections or fail-over via current disconnected WAN2 port. This does not have a built in Switch.

  • IP Address: 192.168.1.2 router.allhandsactive.org (internal)

Annex Switch

24 port unmanaged 1GBPS switch is located in the rack at the back of AHA.

Annex Switch

TrendNet router configured in bridge mode. Provides AllHandsActive-Annex Wi-fi SSID.

Located in the Annex provides hardwired annex ports. Runs off port 24 on the patch panel.


Network devices

NestCams

3 Nest cams are located throughout the space. They are DHCP via wifi AllHandsActive

In Ubiquiti Control software they are tagged as NestCam 1, 2, and 3 so you can monitor their traffic.

Ubiquiti Cloud Key

Allows management of the network, support for LDAP/Radius wifi users and hot spots, and 30 days of rolling network logs.

IP: 192.168.1.2

Ubiquiti Access Point

Located in the main space and provides all but the -Annex AHA wifi SSID

IP: 192.168.1.5

BYB Cardswipe

Used for BYB employee's to clock in and out.

  • Model: EZ Clocking EC50
  • IP Address: DHCP? Should be 192.168.1.8
  • Owner: BYB

DoorPI / Gatekeeper

Rasspberry PI to control the LDAP to Door connection and card reader.

IP: 192.168.1.6

Maintained by:

  • Nate Yost
  • Tyler Worman

Printer

See Printers

  • Model: HP LaserJet Pro 400 Color MFP
  • IP Address: 192.168.1.7 printer.allhandsactive.org (internal)

NAS

Notice
Notice
 OUTDATED!:
The content of this page is outdated.
If you have checked or updated this page and found the content to be suitable, please remove this notice.

Controls AHA's LDAP server, Radius server, file shares and remote login. The NAS is knows as HUB@AHA. hub.allhandsactive.com:5000 (external)

  • Model: Synology DS409
  • IP Address: 192.168.1.4 hub.allhandsactive.org (internal)

Maintained by:

  • Nick Ristow
  • Tyler Worman
  • Brian Morse

More information about this project can be found here: Computing Infrastructure: HUB@AHA

Backups

Machines are fresh installed to same state and are not backed up. The NAS offers recovery in event of a loss of disk. We presently do not do a remote backup of user files.

Mapping drives

Copy setupDrives.vbs to C:\ from \\hub\AHASoftware

In Windows startup Local Group Policy Editor as Admin Under UserConfiguration\Windows Settings\Scripts (Logon/Logoff) add the script as a login script.

This login script maps drives for Software, Home and Share. It redirects the users desktop and my documents folder to their home folder within the NAS. The redirection of desktop/documents is disabled for the admin account.

LDAP Config

See here Computer Infrastructure: LDAP Authentication

Workstations

A full list of available workstations is located at Computing Resources.

LASER (Big Red/Softdog)

Hardware

Specs: List them here

Software

  • Inkscape
  • LaserCut 5.3

Maintainer

Who owns and maintains the PC and it's software?

To Do

  • Get list of valid users from Greg
  • Create LDAP group on NAS
  • Install pGina on machine
  • Fully update machine and software
  • lock down login to admin and pGina NAS users.

3D Printing

Hardware

Specs: List them here

Software

List installed software here

Maintainer

Who owns and maintains the PC and it's software?

Front Desk

Lives under the desk below the TV monitor in the front room. Also hooked up to the Vinyl Cutter.

Hardware

Software

  • Ubuntu--what version?
  • Inkscape
  • InkCut
  • List other installed software here

Maintainer

Who owns and maintains the PC and it's software?

5 Public Workstations

Current state

Specs:

  • AHA-PC1 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB (LDAP)
  • AHA-PC2 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB (LDAP)
  • AHA-PC3 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB (LDAP)
  • AHA-PC4 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB (LDAP)
  • AHA-PC5 - Win 10 Pro AMD A10-5800K 3.8GHZ 8GB (LDAP)

To do

  • Setup Rhino 3D and Zoo on all PCs

AHA installed software

Individual Installed:

pGina RunAsGui Steam Arduino Studio Unity Game Engine Blender Virtual Box Fusion 360
OpenSCAD LibreCAD FreeCAD EagleCAD KiCAD Rhino Sprocketeer 2.0 3d Connexion Altium Circuit Maker

Ninite installed:

Chrome Firefox Steam
DropBox Google Drive Skype VLC Audacity
Java 8 JDK 8 .Net 4.6 Python
Notepad++ Eclipse
PuTTY WinSCP 7 ZIP WinRAR FileZilla
Gimp Inkscape Paint.Net
LibreOffice PDF Creator

Rebuilding a Workstation

Guide here: Computer_Infrastructure:_Building_new_Workstation_image

Virtual Machines

Future State: HUB@AHA has a VM folder in the AHASoftware share. It will be mounted to the 6 public workstations at login. Need someone to build these. Demure was interested. It's maintained by AHA members and configured with default settings for the space. You may clone the image for your personal use.

Todo

  • Create base image
  • Install additional software
  • Configure home directory mount via LDAP.
  • Install VirtualBox extensions.
  • Mark it read only.
  • Share to network via NAS.
  • Configure login script to mount this share at login.

Base Image

A base install of the latest LTR Ubuntu image that is reasonably patched?

Additional software

These packages are installed in addition to the base install.

  • Arduino
  • Eclipse
  • JDK
  • Inkscape
  • Gimp
  • Blender
  • OpenSCAD


If you need additional packages please contact xxxx to request a base package be added to the distribution.

Usage pattern

Copy the VM to your private folder on the NAS and use as needed. Wipe/Restore from base image as needed.

Retrieved from "https://wiki.allhandsactive.org/index.php?title=Computing_Infrastructure&oldid=7024"