BEWS_12.5.2213_LINUX-UNIX-MAC-SAP_AGENTS.tar.gz\BEWS_12.5.2213_LINUX-UNIX-MAC-SAP_AGENTS.tar\pkgs\Linux\VRTSralus.tar.gz\VRTSralus.tar\VRTSralus-12.5.2213-0.i386.deb

Unfortunately, the Deb package doesn’t specify It’s dependencies. You need to manually install the libstdc++5 package.

aptitude install libstdc++5

You can follow the rest of the install here: http://insanelabs.com/debian/linux-symantec-backup-exec-12-and-debian-etch-3264/

login as root.

to set up the filesystem:

cd /home
mkdir HR
chgrp corporate_HR HR
chmod 2771 HR

set up the share:

[HR]
comment    =    share for corporate HR group
readonly    =   no
inherrit owner    =    yes
inherit permissions    =    yes
authorized users    =    @ACME\corporate_HR @ACME\admins
force group    =    ACME\corporate_HR

aptitude purge network-manager-gnome network-manager 

If this is a VMware Virtual machine, install VMware tools. The prerequisites for Debian Lenny are:

aptitude install build-essential openssl libssl-dev linux-headers-$(uname -r) psmiscapt

You may have to manually create a DNS entry for your server. Just to be safe, do that now.

If you plan to support NTFS-like ACL’s, install support for it now.

aptitude install acl

now, you need to mount the partition with ACL’s enabled, to do this, edit your /etc/fstab.

nano /etc/fstab

The line I needed looked like this:

/dev/sda9    /    ext3    acl,defaults    0    1

The important part is to get “acl” into the options list. Dont forget the comma.
I recommend rebooting just to make sure your fstab is set before you continue.
It’s easy to screw something up here and make your system unbootable, so if you reboot, and cant get your system back up and running, get into single user mode, and use this command. (You will have to adjust /dev/sda1 to your root partition. In my experience, it is usually /dev/sda1 or /dev/hda1. Use fdisk -l to list the partitions on the disk.

mount -o remount,rw /dev/sda1

Now lets get the samba and kerberos software packages installed.

aptitude install samba ntpdate smbclient winbind krb5-config krb5-user

Put in the Workgroup/domain info when prompted if you like. They will set up some .conf files for you, but we’re not going to use them anyways. We wont worry about WINS for now.
Now lets stop samba and winbind:

/etc/init.d/samba stop
/etc/init.d/winbind stop

move the /etc/samba files somewhere

mkdir /etc/samba/vanillaconf
mv /etc/samba/* /etc/samba/vanillaconf/

create your own /etc/samba/smb.conf: Make sure that the domain and realm fields are all caps.

[global]
workgroup               =       ((DOMAIN))
server string           =       %h server
wins support            =       no

security                =       ads
realm                   =       ((DOMAIN)).COM
encrypt passwords       =       yes
obey pam restrictions   =        yes

winbind use default domain    =    yes
winbind enum users   =      yes
winbind enum groups =      yes
template shell         =       /bin/bash
idmap uid               =       10000-20000
idmap gid               =       10000-20000

sync time

ntpdate ((domain controller))

now that samba knows what domain its part of, and we have a basic config for it, we need to get the authentication part working. Kerberos is the softare that communicates with your Active Directory domain to authenticate users.

nano /etc/krb5.conf

configure domain in /etc/krb5.conf. important parts:

[libdefaults]
default_realm = ((domain)).COM
[realms]
((DOMAIN.COM)) = {
        kdc = ((domain controller))
        kdc = ((backup DC))
        admin_server = (domain controller))
}
[domain_realm]
        .(domain).com = (domain controller).(domain).COM

do a test by typing:

kinit [username]

then type:

klist

if you get some output looking like this, you are ready to go.

Ticket cache: FILE:/tmp/krb5cc_0
Default principal: (username)@(domain).COM

Valid starting     Expires            Service principal
04/27/09 13:54:23  04/27/09 23:54:26  krbtgt/(domain).COM@(domain).COM
        renew until 04/27/09 23:54:23

To get Debian to recognize your Active Directory users, you need to update /etc/nsswitch.conf

nano /etc/nsswitch.conf

add “winbind” to the passwd and group lines. if you have “compat” in the line, put in like this:

passwd:         compat winbind
passwd_compat:  winbind
group:          compat winbind
group_compat:   winbind

Now start samba and winbind back up

/etc/init.d/winbind start
/etc/init.d/samba start

Join your machine to the domain.

net ads join -U (administrative user)

You should see

Joined '(server name)' to realm '(domain).com'

If you see

No DNS domain configured for '(servername)'. Unable to perform DNS Update.
DNS update failed!

Don’t worry. Just create an entry in your DNS server for the samba machiine.
Test if winbind is working properly with

wbinfo -t

If you get

checking the trust secret via RPC calls failed
Could not check secret

Then restart winbind:

/etc/init.d/winbind restart

allow AD accounts to logon to the machine:

# /etc/pam.d/common-account
account    sufficient    pam_winbind.so
account    required    pam_unix.so

# /etc/pam.d/common-auth
auth    sufficient    pam_winbind.so
auth    required    pam_unix.so use_first_pass nullok_secure

# /etc/pam.d/common-session
session    required    pam_mkhomedir.so skel=/etc/skel/ umask=0066
session    sufficient    pam_winbind.so
session required    pam_unix.so

It is critical that “obey pam restrictions” is set to “yes”. in your smb.conf for these pam settings to take effect.There are some other changes to these Pam.d settings i decided to make upon putting the server into production. I will write about that in another page [link].

Now, give your admin group from AD root access to the box

aptitude install sudo
visudo

add this line:

%(domain)\\tcp ALL =(ALL) ALL

When creating shares, to give an AD user access to a share, use:(More info in the future)

valid users    =    (domain)\username

to give an AD group access to a share, use:

valid users    =    @(domain)\groupname

Sometimes, I have to reboot my windows client machine to make it work… fyi.
Sources:

• O’reilly Samba book 3rd Edition.
• http://www.ccs.neu.edu/home/battista/documentation/winbind/index.html
• …Countless articles, mailing lists, forums.

deb http://www.debian-multimedia.org lenny main

run

aptitude update

then install the gstreamer lame encoder:

aptitude install gstreamer0.10-lame

Then you are done. You can launch soundconverter and convert formats to MP3 using VBR and other technologies. You can also use sound juicer to Rip CD’s

add this to sources.list

deb http://download.virtualbox.org/virtualbox/debian lenny non-free

run this to get the public key and install it:

wget -q http://download.virtualbox.org/virtualbox/debian/sun_vbox.asc -O- | sudo apt-key add -

then just install it

aptitude install virtualbox-2.1

this will automatically create the group “vboxusers” and add the user who installed it to the group. If you need to add others:

sudo adduser `[username]` vboxusers

Login as root.

I used the netinst disk and had to add the “non-free” and “contrib” repositories. to do this, edit /etc/apt/sources.list.

nano /etc/apt/sources.list

Find the line line that has something like

deb http://mirror.cc.columbia.edu/pub/linux/debian/debian/ lenny main
deb-src http://mirror.cc.columbia.edu/pub/linux/debian/debian/ lenny main

add “contrib non-free” to the end of both of these lines and then do a “aptitude update”

# apt-get install module-assistant nvidia-kernel-common
# m-a auto-install nvidia-kernel${VERSION}-source
# apt-get install nvidia-glx${VERSION}

In the device section, add

Driver "nvidia"

Restart GDM (and subsequently X)

# invoke-rc.d gdm restart

Install The nvidia settings interface thingy if you want. This can also verify if the driver is actually running.

aptitude install nvidia-settings

In debian, the package doesn’t install a shortcut for some reason, so just launch it by typing “nvidia-settings” into the console.