FAQ - Revision history

Anderson: /* About our Linux system */

2020-09-23T19:56:48Z

About our Linux system

Anderson: /* WWW stuff */

2009-10-07T18:56:54Z

WWW stuff

Anderson: /* WWW stuff */

2009-10-07T18:51:09Z

WWW stuff

Anderson: /* Printing Information */

2009-10-06T19:59:58Z

Printing Information

Anderson at 21:56, 5 October 2009

2009-10-05T21:56:45Z

Anderson at 21:55, 5 October 2009

2009-10-05T21:55:46Z

Anderson at 21:47, 5 October 2009

2009-10-05T21:47:54Z

Anderson at 21:40, 5 October 2009

2009-10-05T21:40:25Z

Anderson at 21:33, 5 October 2009

2009-10-05T21:33:24Z

Anderson at 21:17, 5 October 2009

2009-10-05T21:17:58Z

@@ Line 1: / Line 1: @@
 == About our Linux system ==
 #How is our system configured?
 #:<p>There are several specialized servers and a set of workstations, See [[System Configuration|here]] for more details. </p>
 #My disk quota is exceeded.
 #:<p>There are two reasons why quotas exist. Space in /home is backed up and therefore the files are stored several times. Quotas prevent a single user from filling up (possibly by accident) the whole file system which would make the whole system unusable. If you are short of space, here are some suggestions: </p>
@@ Line 20: / Line 10: @@
 #How do I tell where my disk space is being used?
 #:<p>Use the command du from your main directory. It lists your directories and the total space used in each of them. The command quota shows your disk quota and total usage. </p>
 #Whom do I complain to?
 #:<p>Send mail to root(at)thsrv.lbl.gov with as much detail as possible. Minimum information must include the complete error message given by the failed process. Comments such as "I got some error message that I cannot understand" are not helpful and will be ignored.</p>

@@ Line 97: / Line 97: @@
 ==WWW stuff==
 #Personal home (WWW) pages?
-#:See the [[Personal Web Pages]] wiki guide.
+#:See the [[Personal Web Pages]] guide in this wiki.
 ==Collider Physics Tools==

@@ Line 97: / Line 97: @@
 ==WWW stuff==
 #Personal home (WWW) pages?
 #:<p>Create a directory immediately below your home directory called public_html. A file called file.html in there has the address http://www-theory.lbl.gov/~yourusername/file.html. If you create a file named index.html in this directory, it will be taken as your default homepage, accessible by #:http://www-theory.lbl.gov/~yourusername.
 #:Note that the full path to any file must be readable by all (chmod o+r). Note that these personal WEB pages are a potential security hole. Anything in this directory and directories beneath it is public. There should be no links of any type in this tree as these are potential trouble. Here is the link to the [http://www.lbl.gov/web/local/publishing.html LBL policy on Web Pages]

@@ Line 45: / Line 45: @@
 ==Printing Information==
 #How do I print?
 #:Standard unix lpr works.
@@ Line 57: / Line 60: @@
 #:The other group printers are all single-sided by default.
 #How do I make Mathematica Print Properly?
 #:If mathematica notebooks do not print properly, you may need to check the box that says "Include Mathematica fonts in document" in the Mathematica print dialog box.
-−
 ==Mail Information==

@@ Line 146: / Line 146: @@
 #How do I use ssh?
 #:Both the client and the server need to be running ssh. The Mac version of ssh is available from the workstation group server at LBL. Most unix machines have it running. Once you have all of the software, there are two ways to connect using it. Method B is preferable, if you use it properly as it means that you type your password less often.
-#Method A -- Type 'ssh username@hostname'. You will then have to enter your password.
+#:*Method A -- Type 'ssh username@hostname'. You will then have to enter your password.
-#Method B -- You need a public and a private key. You make the key on the machine that you are logging in from (the client). You run a command like
+#:*Method B -- You need a public and a private key. You make the key on the machine that you are logging in from (the client). You run a command like
 #:ssh-keygen
 #:This will ask for a "pass phrase". Do not use your password, but rather some phrase that you can remember (it can be quite long) It will make two files in your $HOME/.ssh/ directory called identity and identity.pub. Neither of these should be readable by anyone but you. (Make sure that you have this right). Login to the remote machine (server) and put the identity.pub into a file called authorized_keys in the directory $HOME/.ssh/ using ftp. Do not move identity to the server. If you want to login from more than one client, you must append each client's public key to the server's authorized_keys file. You then connect from the client to the server using the command ssh instead of telnet. You will then be challenged for the passphrase. If this fails it will ask for your password. In this method, a cracker needs both your private key (which is why the file should not be readable by anyone but you) and the "pass phrase".
 #:In either method, note that all transmission is encrypted, so that anything that you type cannot be read by a cracker using a network sniffer. Also all of the paths necessary for X connections are made automatically, so you do not need to export display, use xhost, or any of those nuisances. ssh makes network computing safer and more convenient. The snag is that ssh is needed on your client. It exists and is free for almost all UNIX flavors. The client license for Windows is not free. LBL has a site license for the  Windows versions [http://software.lbl.gov here].

@@ Line 1: / Line 1: @@
 == About our Linux system ==
 #Where is there more information about Linux?
@@ Line 118: / Line 116: @@
 #XXYY doesn't work properly.
 #:If the response to this from "root" is "It looks fine to me", then your account is messed up. You have probably redefined some system variables. Move all of your startup files to some other location and logout and back in. If the problem has gone away, you can then figure out which of your files is at fault.
-#I get a ``Cannot Open Display Message''.
+#I get a ''Cannot Open Display Message''.
 #:These days this is almost always because you are connecting via ssh, but have not enabled ssh-X-forwarding.  Log out of your ssh session and reconnect using 'ssh -X'  If the error persists, logout of the ssh session and try 'ssh -Y' (this is almost the same as -X but relaxes certain requirements that may cause problems when different versions of ssh are interacting).
 #How do I get back the file that I deleted by mistake?
@@ Line 134: / Line 132: @@
 ==Security Issues==
-What should I use as a password?
+#What should I use as a password?
+#:Do not use any easily guessed thing. The passwords are checked on a regular basis, if yours fails some simple tests you will be forced to change it. Use at least 8 characters; a mixture of letters, numbers and non alphanumeric characters (such as # or %) is best. Do not use the same passwords on different machines. Do not reuse passwords.
-Do not use any easily guessed thing. The passwords are checked on a regular basis, if yours fails some simple tests you will be forced to change it. Use at least 8 characters; a mixture of letters, numbers and non alphanumeric characters (such as # or %) is best. Do not use the same passwords on different machines. Do not reuse passwords.
+#:Good passwords can often be generated by choosing a phrase, and using the first letter from each word. The password will be easily remembered, but very hard to guess.
-Good passwords can often be generated by choosing a phrase, and using the first letter from each word. The password will be easily remembered, but very hard to guess.
+#:For example, "Don't use this as your password, silly", would generate the password dutayp,s. Note that I've included the comma to make it harder to guess. You may also want to include some simple, easy to remember substitutions, like du7ayp,s, where I've replaced the t with a 7 because they kind of look alike to me.
-For example, "Don't use this as your password, silly", would generate the password dutayp,s. Note that I've included the comma to make it harder to guess. You may also want to include some simple, easy to remember substitutions, like du7ayp,s, where I've replaced the t with a 7 because they kind of look alike to me.
+#What is our group's security policy?
-What is our group's security policy?
+#:Advisory: Do not leave yourself logged in for extended periods. Any open network slot is a temptation to crackers.
+#:Mandatory:
-Advisory: Do not leave yourself logged in for extended periods. Any open network slot is a temptation to crackers.
+#:*Follow the password policy outlined above.  Passwords automatically expire every 180 days.
-Mandatory: Follow the password policy outlined above.
+#:*Do not share your password with anyone.
- Do not share your password with anyone.
+#:*Do not let anyone else use your account. (this was how the BaBar machine was broken into)
- Do not let anyone else use your account. (this was how the BaBar machine was broken into)
+#:*Change your password often ( at least every 30 days) if you connect from public terminals or from computers that you do not have good reason to trust (e.g. your brother-in-law's Windows computer). This particularly applies if you connect  from .edu sites (including berkeley)
- Change your password often ( at least every 30 days) if you connect from public terminals or from computers that you do not have good reason to trust (e.g. your brother-in-law's Windows computer). This particularly applies if you connect  from .edu sites (including berkeley)
+#:Anyone whose actions compromise the security of the system may have their computing privileges revoked. If the security breach is caused by someone breaking the mandatory rules, that person's account will be terminated: NO EXCEPTIONS.
-Anyone whose actions compromise the security of the system may have
+#How do I use ssh?
-their computing privileges revoked. If the security breach is caused by someone breaking the mandatory rules, that person's account will be terminated: NO EXCEPTIONS.
+#:Both the client and the server need to be running ssh. The Mac version of ssh is available from the workstation group server at LBL. Most unix machines have it running. Once you have all of the software, there are two ways to connect using it. Method B is preferable, if you use it properly as it means that you type your password less often.
-Why does some network package not work?
+#Method A -- Type 'ssh username@hostname'. You will then have to enter your password.
+#Method B -- You need a public and a private key. You make the key on the machine that you are logging in from (the client). You run a command like
-Anonymous ftp, pop servers and certain other network tools are potential security holes and are therefore not available. rlogin is restricted to connections from other machines in our farm . Use ssh if you are coming from another site.
+#:ssh-keygen
-Why should I avoid telnet and ftp?
+#:This will ask for a "pass phrase". Do not use your password, but rather some phrase that you can remember (it can be quite long) It will make two files in your $HOME/.ssh/ directory called identity and identity.pub. Neither of these should be readable by anyone but you. (Make sure that you have this right). Login to the remote machine (server) and put the identity.pub into a file called authorized_keys in the directory $HOME/.ssh/ using ftp. Do not move identity to the server. If you want to login from more than one client, you must append each client's public key to the server's authorized_keys file. You then connect from the client to the server using the command ssh instead of telnet. You will then be challenged for the passphrase. If this fails it will ask for your password. In this method, a cracker needs both your private key (which is why the file should not be readable by anyone but you) and the "pass phrase".
+#:In either method, note that all transmission is encrypted, so that anything that you type cannot be read by a cracker using a network sniffer. Also all of the paths necessary for X connections are made automatically, so you do not need to export display, use xhost, or any of those nuisances. ssh makes network computing safer and more convenient. The snag is that ssh is needed on your client. It exists and is free for almost all UNIX flavors. The client license for Windows is not free. LBL has a site license for the  Windows versions [http://software.lbl.gov here].

@@ Line 114: / Line 114: @@
 ==Disaster has struck==
-XXYY won't run.
+#XXYY won't run.
-Check your PATH environment (in bash the command is echo $PATH). Then type which xxyy. If the application is not in a directory in your path, change your PATH environment. If you are trying to execute a program in your current directory, remember that you must prepend ./ to the command name. E.g., './myprogram' The technical reason for this is that your current directory is not include in your path by default. This is a security feature.
+#:Check your PATH environment (in bash the command is echo $PATH). Then type 'which xxyy'. If the application is not in a directory in your path, change your PATH environment. If you are trying to execute a program in your current directory, remember that you must prepend ./ to the command name. E.g., './myprogram' The technical reason for this is that your current directory is not include in your path by default. This is a security feature.
-XXYY doesn't work properly.
+#XXYY doesn't work properly.
-If the response to this from "root" is "It looks fine to me", then your account is messed up. You have probably redefined some system variables. Move all of your startup files to some other location and logout and back in. If the problem has gone away, you can then figure out which of your files is at fault.
+==Security Issues==
 What should I use as a password?

@@ Line 89: / Line 89: @@
 ==TeX Stuff==
-Do we have an LBL Letterhead or Campus?
+#Do we have an LBL Letterhead or Campus?
+#:<p>Copy the file  /usr/local/share/texmf/tex/latex/generic/localmacros/lbl_letter_example.tex and use that.
 For the campus letterhead copy the file /usr/local/share/texmf/tex/latex/generic/localmacros/UCBsample.tex.
-Questions about the LBL letter head to rncahn(at)lbl.gov, Bob Cahn, H_Murayama(at)lbl.gov, Hitoshi Murayama for the campus version.
+Questions about the LBL letter head to rncahn(at)lbl.gov, Bob Cahn, H_Murayama(at)lbl.gov, Hitoshi Murayama for the campus version.</p>
-The best solution is to use OpenOffice as a helper applications. See here for instructions.
+==WWW stuff==
-Personal home (WWW) pages?
+#Personal home (WWW) pages?
-Create a directory immediately below your home directory called public_html. A file called file.html in there has the address http://www-theory.lbl.gov/~yourusername/file.html. If you create a file named index.html in this directory, it will be taken as your default homepage, accessible by http://www-theory.lbl.gov/~yourusername. Note that the full path to any file must be readable by all (chmod o+r). Note that these personal WEB pages are a potential security hole. Anything in this directory and directories beneath it is public. There should be no links of any type in this tree as these are potential trouble. Here is the link to the LBL policy on Web Pages
+==Collider Physics Tools==
-Collider Physics Tools
+#How do I run root?
-How do I run root?
+#:ROOT should be installed on all workstations. You should be able to start it by typing 'root' in a terminal. The system automatically defines the environment variables $ROOTSYS and $PATH to have appropriate values. If you are unable to start root, check to see if you have inadvertently overridden these values.
-ROOT should be installed on all workstations. You should be able to start it by typing 'root' in a terminal. The system automatically defines the environment variables $ROOTSYS and $PATH to have appropriate values. If you are unable to start root, check to see if you have inadvertently overridden these values.
+#Where is CERNLIB?
+#:CERNLIB 2004 is installed on all the workstations. The environment variables $CERN, $CERNBIN, $CERNLIB and $PATH are automatically set to appropriate values
- Where is CERNLIB?
+#How do I start comphep?
- CERNLIB 2004 is installed on all the workstations. The environment variables $CERN, $CERNBIN, $CERNLIB and $PATH are automatically set to appropriate values
+#:comphep 4.4.3 is currently installed under /usr/local/HEPsoft/comphep-4.4.3. Before you can use it you need to setup your personal working space. Do this by executing the following command:
+#: make -C /usr/local/HEPsoft/comphep-4.4.3 setup WDIR=PERSONAL_WORKDIR
- How do I start comphep?
+#: where 'PERSONAL_WORKDIR' should be replaced by some directory where you have write access. Then you start the program via:
- comphep 4.4.3 is currently installed under /usr/local/HEPsoft/comphep-4.4.3. Before you can use it you need to setup your personal working space. Do this by executing the following command:
+#:PERSONAL_WORKDIR/comphep
- make -C /usr/local/HEPsoft/comphep-4.4.3 setup WDIR=PERSONAL_WORKDIR
+#What other tools are available?
- where 'PERSONAL_WORKDIR' should be replaced by some directory where you have write access. Then you start the program via:
+#:Other software packages/libraries are available under /usr/local/HEPsoft. Currently these include herwig65, pythia, jimmy, MC@NLO, geant4 and RunMC.
-PERSONAL_WORKDIR/comphep
+#:If you need additional packages installed, ask management.
- Disaster has struck
+==Disaster has struck==
 XXYY won't run.
 Check your PATH environment (in bash the command is echo $PATH). Then type which xxyy. If the application is not in a directory in your path, change your PATH environment. If you are trying to execute a program in your current directory, remember that you must prepend ./ to the command name. E.g., './myprogram' The technical reason for this is that your current directory is not include in your path by default. This is a security feature.

@@ Line 42: / Line 42: @@
 #Is there a scanner I can use?.
 #:<p>There is a color scanner connected to thmath3 located in 50A-5101A.  Run 'xsane' or 'kooka' to use it.
-#:The Kyocera Copy machine located in 50A-5101 has a scan function. You can scan documents to an email address (the image will arrive in PDF format), or directly to any Mac or Windows computer that has the (free) client software installed. See  the [Scanner_HOWTO] for more detailed instructions.  This machine is black and white only</p>
+#:The Kyocera Copy machine located in 50A-5101 has a scan function. You can scan documents to an email address (the image will arrive in PDF format), or directly to any Mac or Windows computer that has the (free) client software installed. See  the [[Scanner_HOWTO]] for more detailed instructions.  This machine is black and white only</p>
-Can I listen to RealAudio format lectures on my workstion?
+==Printing Information==
+#How do I print?
-Most of the workstations have sound capability. If sound is not enabled on your workstation and you need it, please ask management.
+#:Standard unix lpr works.
- RealAudio's realplay is installed on all workstations. It will work as a mozilla/firefox helper.
+#:See man lpr, the printer theory2 is the double sided printer in 50a-5101
-Printing Information
+#:lpr -Ptheory2 file.ps
-How do I print?
+#:sends the file.ps to it. There is a filter that determines file types. If you get no output, the odds are that your file is not printable. The printer theory3 is in 50-5056.
+#:If the printer is not specified the file goes to your default printer, which is theory2. You may change your default printer by putting this in your .bashrc file.
-Standard unix lpr works.
+#:export PRINTER=theory3
-See man lpr, the printer theory2 is the double sided printer in 50a-5101
+#How do I print single-sided?
-lpr -Ptheory2 file.ps
+#:To print single-sided output on theory2 and theory3, append /single to the printer name.
-sends the file.ps to it. There is a filter that determines file types. If you get no output, the odds are that your file is not printable. The printer theory3 is in 50-5056.
+#:E.g., lpr -Ptheory2/single myfile.ps
-If the printer is not specified the file goes to your default printer, which is theory2. You may change your default printer by putting this in your .bashrc file.
+#:The other group printers are all single-sided by default.
-export PRINTER=theory3
+#How do I make Mathematica Print Properly?
-How do I print single-sided?
+#:If mathematica notebooks do not print properly, you may need to check the box that says "Include Mathematica fonts in document" in the Mathematica print dialog box.
 Mail Information