3.0 KiB
3.0 KiB
lxweb00
This is a RHEL7 machine and is puppet managed. The httpd configuration seem to be managed there as well: https://git.psi.ch/linux-infra/data-pli/blob/master/default/lxweb00.psi.ch.yaml
Exports various paths from AFS to http(s), see /etc/httpd/conf.d/ for details. The AFS directories exported are:
Alias /dist "/afs/psi.ch/project/linux/www/dist"
Alias /kickstart "/afs/psi.ch/project/linux/www/kickstart"
Alias /mirror "/afs/psi.ch/project/linux/www/mirror"
Alias /pxe "/afs/psi.ch/service/linux/tftpboot"
Alias /ext/cpt "/afs/psi.ch/project/cpt/repo/"
Alias /ext/gfa "/afs/psi.ch/project/gfa-controls-sw-repo"
Alias /ext/gpfs "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/GPFS"
Alias /ext/hpc-extra "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/hpc-extra"
Alias /ext/lmu "/afs/psi.ch/project/lmu/lmu_rpm/"
Alias /ext/ofed "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/OFED"
Alias /ext/slurm "/afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/slurm"
Alias /ext/tier3 "/afs/psi.ch/software/linux/dist/scientific/6/tier3"
The httpd config files are located here:
[root@lxweb00 conf.d]# ls -la /etc/httpd/conf.d/25*
-rw-r--r-- 1 root root 3294 Dec 3 07:55 /etc/httpd/conf.d/25-linux.web.psi.ch_non_ssl.conf
-rw-r--r-- 1 root root 3559 Dec 3 07:55 /etc/httpd/conf.d/25-linux.web.psi.ch_ssl.conf
The content is served on port 80 and 443
[root@lxweb00 conf.d]# netstat -tulnp | grep http
tcp6 0 0 :::80 :::* LISTEN 19619/httpd
tcp6 0 0 :::443 :::* LISTEN 19619/httpd
The https certificate is located/installed in /etc/pki/tls
Questions
- who is taking care of this certificate, how is it installed? how is the expiration monitored?
- The owner/admin of this system must take care of the certificate. There is no monitoring or automation. The standard SWITCH procedure is to be used.
- Why is "/afs/psi.ch/service/linux/tftpboot" exported on this server as well?
- Don't know, could only guess.
- Who is responsible or the contact person for the different exported AFS directories?
- I don't know, it's not really formalized. I have some guesses for some parts:
| AFS | Responsible / Contact Person |
|---|---|
| /afs/psi.ch/project/linux/www/dist | |
| /afs/psi.ch/project/linux/www/kickstart | |
| /afs/psi.ch/project/linux/www/mirror | |
| /afs/psi.ch/service/linux/tftpboot | (why is this needed at all ?) |
| /afs/psi.ch/project/cpt/repo/ | Gilles Martin |
| /afs/psi.ch/project/gfa-controls-sw-repo | Rene Kapeller |
| /afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/GPFS | Leo's group |
| /afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/hpc-extra | Marc & Ivano |
| /afs/psi.ch/project/lmu/lmu_rpm/ | Andrea Raselli |
| /afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/OFED | Marc & Ivano |
| /afs/psi.ch/software/linux/dist/scientificlinux/7x/x86_64/slurm | Marc & Ivano |
| /afs/psi.ch/software/linux/dist/scientific/6/tier3 | Derek? |