Difference between revisions of "Network Questions"

From CS Support
Jump to: navigation, search
(How do I login remotely to CIS resources?)
(rework headers, fix old urls, add header and anchor link for transient storage)
(5 intermediate revisions by one other user not shown)
Line 2: Line 2:
 
== What network storage is available to me? ==
 
== What network storage is available to me? ==
  
All CIS users have storage on the department file server. Anything you place in your home directory is backed up nightly, with revisions stored going back six months.
+
All CIS users have ''home directory'' on the department file server to store files. Anything you place in your home directory is backed up nightly, with revisions stored going back six months.
  
On department linux systems, your home directory is automatically mounted as $HOME.  The full path to your home directory can be found if you use the <code>finger</code> command on yourself on any linux host.
+
=== Linux Systems ===
<code>
+
On department linux systems, your home directory is automatically mounted as <code>$HOME</code>.  The full path of your home directory can be found using the <code>finger</code> command on any linux host.
$ finger testacct
+
<nowiki>
Login: testacct                 Name: Testing Tester
+
finger testacct
Directory: /home/ugrads/testacct       Shell: /bin/bash
+
Login: testacct       Name: Testing Tester
Never logged in.
+
Directory: /home/t/testacct         Shell: /bin/bash
No mail.
+
Never logged in.
No Plan.
+
No mail.
</code>
+
No Plan.</nowiki>
In this case, testacct's home directory is <code>/home/ugrads/testacct</code>.
+
 
 +
In this case, testacct's home directory is <code>/home/t/testacct</code>.
  
On department Windows systems, your home directory should be mounted as the U: drive.  If you are manually mounting a drive, use the URI <code>\\homefiles.cis.ksu.edu\<username></code> where <code><username></code> is your login.
+
=== Windows Systems ===
 +
On department Windows systems, your home directory should be mounted as the U:\ drive.  If you are manually mounting a drive, use the URI <code>\\files.cs.ksu.edu\<username></code> where <code><username></code> is your eID.
  
If you need a large amount of space temporarily, you can request space in the transient volume (send an email to help@cis.ksu.edu).  There are no quotas on directories in this volume, but there are also no backups made of files here.  Support staff may also ask you to clean files out periodically to make room for others.  On department linux systems, your transient directory will be found in <code>/transient/<username</code>.  On department Windows systems, you can mount the share <code>\\homefiles.cis.ksu.edu\transient\<username></code> to a drive letter of your choosing.
+
<div id="Transient"></div>
 +
== Transient Storage ==
 +
If you need a large amount of space temporarily, you can request space in the transient volume (send an email to [mailto:help@cs.ksu.edu help@cis.ksu.edu]).  There are no quotas on directories in this volume, but there are also no backups made of files here.  Support staff may also ask you to clean files out periodically to make room for others.  On department linux systems, your transient directory will be found in <code>/transient/<username></code>.  On department Windows systems, you can mount the share <code>\\files.cs.ksu.edu\transient\<username></code> to a drive letter of your choosing.
  
 
== How do I setup CGI on my web page? ==
 
== How do I setup CGI on my web page? ==
  
This question has been answered in the CIS UserGuide.  Please see the
+
Please see the page on [[Personal Web Pages]].
section on [[Personal_Web_Pages]].
 
  
 
== Why don't you have an FTP server? ==
 
== Why don't you have an FTP server? ==
Line 35: Line 38:
 
follow these steps from a linux shell (you will want to change <code>passwordProtectedDir</code> to whatever name you want and use your own usernames).  <code><your_home_dir_path></code> is the full path to your home directory.  If you don't know what this is, use the finger command from the command prompt of any linux host ("<code>finger <eid></code>", where <code><eid></code> is your eID).
 
follow these steps from a linux shell (you will want to change <code>passwordProtectedDir</code> to whatever name you want and use your own usernames).  <code><your_home_dir_path></code> is the full path to your home directory.  If you don't know what this is, use the finger command from the command prompt of any linux host ("<code>finger <eid></code>", where <code><eid></code> is your eID).
  
<code>
+
<nowiki>
cd ~/public_html/
+
cd ~/public_html/
mkdir passwordProtectedDir
+
mkdir passwordProtectedDir
cd passwordProtectedDir
+
cd passwordProtectedDir
htpasswd -c .htpasswd user_who_gets_access
+
htpasswd -c .htpasswd user_who_gets_access
htpasswd .htpasswd other_user
+
htpasswd .htpasswd other_user
cat << EOF > ~/public_html/passwordProtectedDir/.htaccess
+
cat << EOF > ~/public_html/passwordProtectedDir/.htaccess
AuthType Basic
+
AuthType Basic
AuthName "Checking Password"
+
AuthName "Checking Password"
AuthUserFile <your_home_dir_path>/public_html/passwordProtectedDir/.htpasswd
+
AuthUserFile <your_home_dir_path>/public_html/passwordProtectedDir/.htpasswd
Require valid-user
+
Require valid-user
EOF
+
EOF</nowiki>
</code>
 
  
 
Now create any files you want in the directory and set permissions appropriately.
 
Now create any files you want in the directory and set permissions appropriately.
  
<code>
+
<nowiki>
chmod o+rx ~/public_html/passwordProtectedDir
+
chmod o+rx ~/public_html/passwordProtectedDir
chmod o+r ~/public_html/passwordProtectedDir/*.*
+
chmod o+r ~/public_html/passwordProtectedDir/*.*</nowiki>
</code>
 
  
If you would like your files to only be password protected off-campus, use
+
If you would like your files to only be password protected off-campus, use this command to make your htaccess file.
this command to make your htaccess file.
 
  
<code>
+
<nowiki>
cat << EOF > ~/public_html/passwordProtectedDir/.htaccess
+
cat << EOF > ~/public_html/passwordProtectedDir/.htaccess
AuthType Basic
+
AuthType Basic
AuthName "Checking Password"
+
AuthName "Checking Password"
AuthUserFile <your_home_dir_path>/public_html/passwordProtectedDir/.htpasswd
+
AuthUserFile <your_home_dir_path>/public_html/passwordProtectedDir/.htpasswd
Require valid-user
+
Require valid-user
Order Allow,Deny
+
Order Allow,Deny
# This restricts access without a password to the KSU network
+
# This restricts access without a password to the KSU network
Allow from 12# 130.0.0/16
+
Allow from 12# 130.0.0/16
# This restricts access without a password to the CIS network
+
# This restricts access without a password to the CIS network
#Allow from 12# 130.8.0/22
+
#Allow from 12# 130.8.0/22
Satisfy any
+
Satisfy any
EOF
+
EOF</nowiki>
</code>
 
  
 
== Why am I getting 500 Interal Server Error on all my scripts? ==
 
== Why am I getting 500 Interal Server Error on all my scripts? ==
Line 132: Line 131:
 
  chmod 600 *
 
  chmod 600 *
 
</code>
 
</code>
 
== How do I access the wireless network in Nichols? ==
 
 
The CIS Wireless network is now managed by the K-State Computing and Telecommunications Services (CTS) networking department.  To gain access to the network, you will need to have a valid [http://eid.ksu.edu K-State eID] and follow [http://www.ksu.edu/cns/itswireless/ these instructions] listed on the CTS website.
 
  
 
== How do I access the campus VPN? ==
 
== How do I access the campus VPN? ==
  
Please see the K-State page on how to download, install, and use the VPN client for off-campus connection.
+
See [[:Remote_Access#Access_Through_Campus_VPN | Access Through Campus VPN]]
 
 
http://www.ksu.edu/its/security/vpn/
 
  
 
== How do I login remotely to CIS resources? ==
 
== How do I login remotely to CIS resources? ==
  
 
See [[Remote Access]]
 
See [[Remote Access]]

Revision as of 17:50, 8 January 2019

What network storage is available to me?

All CIS users have home directory on the department file server to store files. Anything you place in your home directory is backed up nightly, with revisions stored going back six months.

Linux Systems

On department linux systems, your home directory is automatically mounted as $HOME. The full path of your home directory can be found using the finger command on any linux host.

finger testacct
Login: testacct       			Name: Testing Tester
Directory: /home/t/testacct         	Shell: /bin/bash
Never logged in.
No mail.
No Plan.

In this case, testacct's home directory is /home/t/testacct.

Windows Systems

On department Windows systems, your home directory should be mounted as the U:\ drive. If you are manually mounting a drive, use the URI \\files.cs.ksu.edu\<username> where <username> is your eID.

Transient Storage

If you need a large amount of space temporarily, you can request space in the transient volume (send an email to help@cis.ksu.edu). There are no quotas on directories in this volume, but there are also no backups made of files here. Support staff may also ask you to clean files out periodically to make room for others. On department linux systems, your transient directory will be found in /transient/<username>. On department Windows systems, you can mount the share \\files.cs.ksu.edu\transient\<username> to a drive letter of your choosing.

How do I setup CGI on my web page?

Please see the page on Personal Web Pages.

Why don't you have an FTP server?

FTP is a very old protocol. It was designed before security considerations were a major part of protocol design. As such, passwords to the FTP server are sent in plain text---any clever user on the network can snoop your packets and steal your password. This would allow that user to gain access to your account, which is an unacceptable violation of our security.

If you need to access your home directory from a remote location, there are two different methods for doing so. See the documentation in the CIS Systems UserGuide for Remote Access or in the FrequentlyAskedQuestions about how to access your home directory from a non-CIS computer.

How do I use HTTP authentication?

To setup password authentication for a directory in your personal web space follow these steps from a linux shell (you will want to change passwordProtectedDir to whatever name you want and use your own usernames). <your_home_dir_path> is the full path to your home directory. If you don't know what this is, use the finger command from the command prompt of any linux host ("finger <eid>", where <eid> is your eID).

cd ~/public_html/
mkdir passwordProtectedDir
cd passwordProtectedDir
htpasswd -c .htpasswd user_who_gets_access
htpasswd .htpasswd other_user
cat << EOF > ~/public_html/passwordProtectedDir/.htaccess
AuthType Basic
AuthName "Checking Password"
AuthUserFile <your_home_dir_path>/public_html/passwordProtectedDir/.htpasswd
Require valid-user
EOF

Now create any files you want in the directory and set permissions appropriately.

chmod o+rx ~/public_html/passwordProtectedDir
chmod o+r ~/public_html/passwordProtectedDir/*.*

If you would like your files to only be password protected off-campus, use this command to make your htaccess file.

cat << EOF > ~/public_html/passwordProtectedDir/.htaccess
AuthType Basic
AuthName "Checking Password"
AuthUserFile <your_home_dir_path>/public_html/passwordProtectedDir/.htpasswd
Require valid-user
Order Allow,Deny
# This restricts access without a password to the KSU network
Allow from 12# 130.0.0/16
# This restricts access without a password to the CIS network
#Allow from 12# 130.8.0/22
Satisfy any
EOF

Why am I getting 500 Interal Server Error on all my scripts?

We use programs named suexec and suphp to make sure that all of your scripts run as you. This allows your scripts to access files that would normally be private and inaccessible by the web server. However, for security these programs will not allow your scripts to run unless the permissions set on your files and on the directories containing them are safe.

For CGI scripts, you must make sure the following are true:

  1. Your script must be stored in your home directory in the subdirectory named public_html/cgi-bin. You cannot place your scripts anywhere else.
  2. You must make sure that your home directory, the public_html directory, and the cgi-bin directory are not group or other writable:
  3. chmod 755 ~
    chmod 755 ~/public_html
    chmod 755 ~/public_html/cgi-bin
    

  4. Finally, you must make sure your scripts are executable, but not group or other writable:
  5. chmod 755 ~/public_html/cgi-bin/my-script.cgi
    

  6. If you have problems, try checking the end of the logs for additional information while pressing reload on your browser:
  7. tail -f /web/logs/error_log /web/logs/suexec_log
    

For PHP scripts, you must make sure the following are true:

  1. Your script must be stored in your home directory under the directory named public_html or a subdirectory of that directory.
  2. You must make sure that your home directory, the public_html directory, and every directory above your PHP script is accessible but not group or other writable:
  3. chmod 755 ~
    chmod 755 ~/public_html
    chmod 755 ~/public_html/otherdir
    

  4. Finally, you must make sure your scripts are readable, but not group or other writable:
  5. chmod 644 ~/public_html/index.php
    chmod 644 ~/public_html/otherdir/index.php
    

  6. If you have problems, try checking the end of the logs for additional information while pressing reload on your browser:
  7. tail -f /common/weblogs/polara/error.log /common/weblogs/polara/suphp.log
    

How do I setup ssh keys?

To setup ssh keys for authentication between CIS Linux and Solaris hosts, follow these steps

chmod go-w ~
cd ~/.ssh/
chmod 700 .
ssh-keygen -t dsa
cat id_dsa.pub >> authorized_keys
chmod 600 *

How do I access the campus VPN?

See Access Through Campus VPN

How do I login remotely to CIS resources?

See Remote Access