Diary of a Network Geek

I love Dr. Suess, but all he did was inspire the title.
I have two concerns this week: Linux servers and security. I’ve installed a test RedHat server and configured Samba on it, so now I can start testing how the accounting system will run from a mapped Linux drive. And, I’ll be testing the custom, in-house app that gives us our competitive edge. I’ve got server spec to get to the boss, when he’s in the office again, but I’m still waiting on pricing for a Linux-based backup system. It was actually much easier to get setup than I thought it would be. Though security may be an issue, since, essentially, Samba emulates Windows sharing on a Linux platform.
Security is my second issue. There’s a basic firewall in place on the router, but I don’t think that’s enough, especially if we want to block “adult” sites. And, since we do actually have a policy against that sort of thing, we do. So, eventually, I need to get that all spec-ed out and installed, too. And tested. Yeah, a little scan against our outside link would be interesting to look at, especially if I do it before and after. Ah, well, that’s down the line. First, I have to get the server upgraded.
Oh, and I still need to evaluate Novell’s Open Server on Linux before I decide which way to go for an OS on the new server. I know I want to avoid a Microsoft product, if at all possible. Frankly, it looks like it should be a real possibility. It all depends on how testing goes this week, so we’ll see. That and getting a CD burner at the office so I can burn the demo ISOs and install them.
Then, there are all the “little” projects that everyone keeps bringing me, not to mention all the nice G4s and assorted Macintrash… Ah, the work of a one-person IT department is never done. But, somehow, having easily defined goals makes the work more fulfilling. I know where I’m going and how I’m going to get there, so it’s all okay.
(The Suess book, by the way, was One Fish, Two Fish, Red Fish, Blue Fish and a childhood favorite.)

Looks like I’m going to be a Unix admin!
Yeah, it definately looks like we’ll be using some form of Linux at the new place. If not Novell’s Open Enterprise Server on Linux, then Red Hat Advanced Server. Of course, I’ll end up running SMB as a Windows PDC, for the login scripts, but, hey, at least I can do it! And, it almost sounded like the boss was actually leaning toward Novell’s solution. It actually worked out to be about the same, cost-wise, as Red Hat. Though, the Novell pricing doesn’t include any support if anything went wrong. But, I suppose we could pay by incident. I mean, I hardly ever call Novell anyway these days. Their online knowlegebase has most of the answers I need.
And, of course, there’s all the Mac and OS X stuff, too. That’s BSD, essentially, with a Mac X Windows front end. Funny, it all comes around to that GUI, doesn’t it? All point and click. Oh, for the good, old days when all we had was a command prompt and we were darn lucky when we got that! These kids today don’t have any appreciation for what a good command prompt can do. Why, I remember, back in the “before time”, messing around on an old HP-UX system and figuring out how to read mail from reading the man file! So, here I am, again, back where I started, about to become a Unix admin again.

Cool.

No, I don’t have a girlfriend.
No, I met the “Senior Partner” from Louisiana today. Apparently, he’s done some checking up on me with former employers. He mentioned Kirby by name and talked about people in management there. Not sure who he talked to, but they seemed to have liked me okay because he said they had nice things to say. Sort of interesting, considering the somewhat dubious circumstances under which I left that job. Well, I guess I did better at not burning bridges there than I thought! Yea for me!
I’ve been doing a lot of research into moving from Windows NT to some version of Linux this week. It actually might be easier than I thought. For one thing, I’ve been looking at Novell’s Linux solutions and they have several options, all of which use a migration tool that seems workable. It’s actually a Windows server “consolidation” utility which they meant for admins to use as a way of merging several Windows servers into fewer Novell servers. It sounded a little clunky, but it was free with the software. The other option was something called LSP from DAS Technology. LSP Pro, which showed on the site as costing $500 per instance, would migrate everything for me, automatically, and also add management tools for the long term. Not a bad option and it would be an easy upgrade to RedHat. I think I could make that work, if I can convince them to spend the money.

In other, totally unrelated news, I took my dog for a walk just a few minutes ago. She was so scardey of the little, tiny dog that we met I thought she was going to wet herself. Some fierce watchdog I’ve got. Ah, well, at least she’s lovable and always happy to see me when I get home. It’s the best unconditional love I’ve gotten since I left my parent’s house. I miss my mommy sometimes. I really ought to investigate those dog parks I wrote about some time ago. I just haven’t had the time with all the chaos in my life. Ah, well, one day soon it will all calm down. I hope.

No, that is not what I’m doing these days.
But, as you regular readers know, I do love computer security. So, when I saw this article on WiredNews about the U.S. Military’s l33t hacking unit, I had to blog it. There was a time when I thought I’d love to do this kind of work. Who knows, maybe I still have a chance to get in, though I think I’m a little too old for that now. And, I have to admit, I’m no where near being the kind of computer geek that they’d most likely be looking for anyway. I certainly haven’t done anything even close to illegal in years. In fact, lately, I haven’t even done much normal security work around the office! Though, that may be changing soon.
You know, this article got my juices flowing so much about hacking and security that I might just build myself a Linux security box. You know, something with NMap on it and some other tools for scanning and testing network security. I could run it against my own, personal home network and, if I can get permission, I can test the security at the office, too. It would be fun, and it might just show a little bit of initiative on my part. These days, everyone is worried about data security, or they should be, so having a methodology for testing security where I work could be a Good Thing, as Martha Stewart would say.
Well, a neat article and something to think about. Enjoy!

Well, I survived my first day at the new job.
Oh, what’s that? New job? Oh, didn’t I mention it before?
Yeah, okay, there’s a funny story behind that. Well, there’s a story behind that which involves things like lawyers and teenagers and medical insurance and divorce. Come to think of it, it’s not a very funny story at all. But, I hope that it will be one day.

Anyway, I’m the IT Manager at a new company called SeaTrax now. We make cranes. Big cranes that are based on big platforms in the ocean. It’s actually pretty cool. It’s a Windows shop, but, well, nothing’s perfect. With any luck at all, I’ll be able to convert them to either a Linux shop or a Novell shop, or both!
It was a long, hard day trying to set priorities, so when I got home, I microwaved some chicken-fried steak and gravy followed by a dessert of Krispy Kreme mini-crullers. And, I washed it all down with a Sam Adams. Yes, even the Krispy Kreme! (Hey, back off! It was a long day!) And, my sweet doggie was so happy to see me when I got home, I let her lick off my dinner plate. She loves gravy!
Anyway, all I managed to do was get a rudimentary “To Do” list put together. Actually, I even stole that idea from a faithful reader, BlueCube. But, here it is anyway. Feel free to make suggestions!

Jim’s Great Big, Enormous To Do List of Doom

Short Term
* Get specs for hardware for server upgrade
* Figure out solution for PeachTree for server upgrade
* Figure out OS for server upgrade
* Document security layout for new server
* Order enought Backup tapes for Full GFS at for every backup server
* Tape Inventory & sign out
* Tape backup courier or a whole new scheme for backupadmins
* Clean up Edirectory
* Clean up data junk on servers
* Clean up active directory

Long Term:
* Address Windows Server Updates
* Work out Tape Cleaning procedure for all backups
* Upgrade Anti-virus software and automate
* Figure out Name Changes and write up procedures
* Figure out to do with multi-user accounts
* Create New user/change form
* Write backup procedures guidelines
* Write anti-virus procedures
* Write workstation software and hardware policies and procedures
* Evaluate T1/WAN connection, price and reliability
* Come up with plan for “roaming” staff
* Create Firewall maintenance/monitoring guidelines
* Create montly network maintenance procedures
* Create shutdown scripts for server

Blue Sky:
* create monthly newsletter
* Build wishlist for end of budget
* Formulate server percentage uptime
* Clean computer room
* Clean tech room
* Setup IDS system
* Implement PDA synchornization system and standards

It might not be the smallest, but it’s close!
Thanks to my recovered Bloglines feed to Gizmodo, I bring you Picotux! The site claims that it’s the smallest device actually running a Linux kernel in existance and, frankly, I can believe it. It’s not any bigger than a freaking ethernet jack! Man, that is cool.

Hey, if you’re reading this, you’re either a stalker or a geek like me, or both, so, click the link. You know you want to. Even if you’re just the stalker. After all, what else are you going to do on a Friday? Work?

After a day and a half, I managed to get my kernel updated.
I’ve been working on a building a Linux machine that we can use to generate our own customized ZENWorks Imaging Boot CD for the past couple of days. Today, just before lunch, I finally got the kernel updated from 2.4.x to 2.6. It was much more challenging that it sounds! I must have run through at least five different documents from various places on the Internet before I finally found one that worked. Oddly enough, it was titled “How to compile 2.6 kernel for RedHat 9 and 8.0 and get Fedora updates“, by Mike Chirico. It did work, however, on the RedHat AS 3.x server that I’m running.
So, now all I have to do if figure out how to create the Novell Linux Imaging Build Script environment. Yeah, right, “all I have to do”.
Well, as a Lodge Brother used to say, I’m getting along “steady, by jerks”!

Not a bad idea.
Here’s something from AustralianIT that makes a lot of sense to me: vendor neutral certification. Okay, yes, I have a Novell certification that I’ve maintained since 1994, but I think the more open or wider certifications are better for the IT industry. Why? Because, in theory, they get us out of the pidgeon-hole thinking that our “pet” OS is the best. Ever heard the phrase, “If the only tool in your toolbox is a hammer, every problem looks like a nail”? Well, that applies to certifications, too. I have to admit that most of my solutions to problems are Novell-centric. I tend to focus on using one of their suite of products because that’s what I know. Lately, I’ve added a reversable screwdriver to my IT toolbox with Linux. And, yes, I have a Linux certification, too. But, that certification is fairly open in regards to what particular version of Linux is being used. Most of what was covered was applicable to virtually any version of Linux, and most versions of Unix.
So, yes, I think this is a good idea. I hope it catches on in Australia well enough that folks here in the States take it seriously. I think it’s the shot in the arm that IT certifications need.

Oh, yeah!
Man, Linux is just getting a massive boost this week! Yahoooooo! According to this announcement on Nero’s webiste, they’re now offering Nero for Linux. If you don’t understand how cool that is, then you’ve either never used Linux or Nero or both. This is the coolest thing since sliced bread, at least in the Linux world. And, if you’re already a Nero Ultra user, they’re GIVING Nero for Linux to you for FREE! How cool is that?!
Jeez, I remember ten or twelve years ago when this plucky, little OS was something that hard-core geeks were into and no one in the business world had even heard of it before. Now, major corporations are supporting it and some even live or die by how well Linux fares in the marketplace. Back then, the idea that anyone would give away an entire operating system for free was just, well, unheard of. No one thought it would amount to much. No one but us hard core geeks. And, now, here we are. Linux is a player in the Big Game and doing better every day.
We’ve come a long way, baby!

…Really, really excites me!
Novell believes in Linux so much that they’ve added extra support for it in their ZENWorks for Desktops suite of programs. According to this press release on Novell’s website, they’ve added “imaging, configuration lockdown, remote management, inventory and software management” to their software which will enable folks to use Novell ZENworks 7 Linux Management to manage most Linux platforms, including SUSE LINUX and Red Hat* Enterprise Linux. Now, this might not seem like much to some of you, but, trust me, this is a quantum leap forward in the Linux world. Five years ago, I couldn’t hardly concieve of a major networking company doing something like this. Now, I can completely cut Microsoft out of the picture, if I want. I can have Linux desktops and servers all managed with Novell software.
I’m so happy I could just plotz.
And, I have to say that I’m really, really glad that I not only have maintained my Novell certification, but also gotten at least one Linux certification, too. I didn’t know it at the time, but I couldn’t have planned it any better. Once again, my career choices have been affirmed.
Well, off to the uranium mines! Have a very high-tech day!