Linux and Unix Users Group at Virginia Teck Wiki - User contributions [en]

Mutt

2020-06-02T16:02:47Z

Echarlie: /* References */

"''All mail clients suck. This one just sucks less.''"<ref>http://www.mutt.org/</ref>

'''Mutt''' is a [[w:text user interface|text-based]] [[w:email client|email client]] for [[w:Unix-like|Unix-like]] systems. It was originally written by Michael Elkins in 1995 and released under the [[w:GNU General Public License|GPL]] version 2 or any later version.<ref>
https://en.wikipedia.org/wiki/Mutt_%28email_client%29</ref>

Mutt was originally designed as a [[w:Mail User Agent|Mail User Agent]] (MUA) and relied on locally accessible mailbox and [[w:sendmail|sendmail]] infrastructure. According to the Mutt homepage "though written from scratch, Mutt's initial interface was based largely on the [[w:Elm (email client)|ELM mail client]]". New to Mutt were message scoring and threading capabilities. Support for fetching and sending email via various protocols such as [[w:POP3|POP3]], [[w:IMAP|IMAP]] and [[w:Simple Mail Transfer Protocol|SMTP]] was added later. Mutt relies on external tools for composing and filtering messages.

== Mutt VT/Google Mail Setup ==

VT email lives in Google GSuite (i.e. gmail). Because GSuite is deprecating "less secure devices/app-passwords",
you will need to use IMAP and SMTP with the XOAUTH2 authentication method.

Most mutt users use [[isync|isync/mbsync]] or [[offlineimap]] as imap reader tools. mbsync is better;
offlineimap has longstanding bugs with conflicting message IDs that can cause messages to be deleted,
and it is much easier to configure mbsync with multiple imap accounts, however mbsync's auth plugin
support is fragile, while offlineimap has built-in XOAUTH2 support.

Mutt has some [http://www.mutt.org/doc/manual/#oauth internal] OAUTH support that can be used. Alternately,
use an external tool like [https://github.com/cscorley/send.py send.py] as your sendmail drop-in.

The caveat of setting up [[OAUTH2]] is that Google has disabled trial credential creation in billed
accounts (i.e. GSuite), so you *cannot* use your VT account to create them. Further, to reduce abuse,
Google must approve all public apps; a warning pops up if it is not approved, which can only
be bypassed if you are the owner of the application. In short, you must create OAUTH credentials
with a non-GSuite google account, add your @vt.edu account to the project, and then use it to
log in.

== LUUGmail ==

Acidburn currently has functional postfix/dovecot. This is how to use it with mutt.

=== IMAP/SMTP for acidburn ===

This is a sample configuration for imap/smtp in mutt for acidburn, provided by [[User:echarlie|echarlie]]

<pre>
set realname = 'Wadsworth Luugbot' #your display name here
set imap_user=wadsworth #this should be your LDAP account name
set imap_pass=$my_luug_pass #Whatever your LUUG password is. Here we used a personal variable.
set ssl_force_tls=yes
set ssl_starttls=yes

set folder = "imap://$imap_user@acidburn.vtluug.org:143/"
set spoolfile = +INBOX
set postponed = +Drafts
set record = +sent
set imap_check_subscribed

set pgp_sign_as = "wadsworth@vtluug.org" # If you like pgp-signing things

set from = "wadsworth@vtluug.org" #### THIS IS IMPORTANT ####
set use_from = yes
set smtp_url=smtp://$imap_user:$imap_pass@acidburn.vtluug.org:587

# this is for if you use multiple accounts. The ssl settings are necessary since we don't have a
# certified tls key right now
account-hook $folder "set imap_user=$imap_user imap_pass=$imap_pass ssl_verify_dates=no ssl_verify_host=no"
</pre>

This section assumes you are using mutt with multiple accounts. For that, we reccomend putting the following into <code>.muttrc/vtluug</code> or something similar, and having this in your <code>.mutt/muttrc</code> :
<pre>
source "~/.mutt/vtluug"
folder-hook $folder 'source ~/.mutt/vtluug'
</pre>

== Local Mail on acidburn ==

This is how one would read and send local mail on acidburn. This is a fully functional <code>.muttrc</code>, however we
would suggest setting your mutt editor, setting your encoding preference (UTF-8), and changing keybindings to preference.

<pre>
set mbox_type=Maildir #acidburn uses maildirs
set folder=$HOME/Maildir
set spoolfile=+/
set header_cache=~/.cache/mutt #optional; header caching speeds things up

set my_user=wadsworth

set realname = "Wadsworth Luugbot"
set from = wadsworth@vtluug.org
set use_from = yes

# This is needed if you want to send from another ldapified server
#set smtp_url=smtps://$my_user:$my_pass@acidburn.vtluug.org:587
#set ssl_force_tls = yes
</pre>

== References ==

[[Category:Howtos]]
[[Category:Software]]
[[Category:Mail clients]]
[[Category:Needs restoration]]

Infrastructure:Sysadmin Handbook

2020-06-02T16:02:31Z

Echarlie:

This page describes how to manage the infra. See [https://vtluug.github.io/rtfm.txt rtfm.txt] for a guide to build it from scratch.

This covers setup of a VM on [[Infrastructure:Meltdown|meltdown]] or [[Infrastructure:Spectre|spectre]] depending on if the service is critical or not.

== Networks ==
''Further information: [[Infrastructure:Network|Network]]

We ''should'' have the following networks in place:

* [[Infrastructure:Meltdown|meltdown]] and [[Infrastructure:Spectre|spectre]] br0 on eno1 <--> enp4s0 on [[Infrastructure:Joey|joey]]. This is the main LUUG network.
** 10.98.0.0/16 for VTLUUG NAT
** IPv6 via prefix delegation on 607:b400:6:cc80/64
** Global IPv4s via ARP proxying (See https://github.com/vtluug/scripts). Gateway is 128.173.88.1/22.
* Static hosts are on 10.98.0.0/24, and DHCP is enabled on 10.98.1.0/24. This is mainly just useful for organization and quickly finding new hosts or other hosts on the network.
** Static host IPs are assigned via static DHCP leases for IPv4.
** Since we can't do this with IPv6, physical host IPs are determined upon first boot and VMs are assigned a specific MAC to pre-determine the SLAAC IP.
* "Internet" (a CNS portal) <--> enp2s0 on [[Infrastructure:Joey|joey]]. LUUG only has one of these, and port security is probably enabled.

'''DNS/DHCP:'''
* All DNS entries for services run by VTLUUG are hosted on [https://gandi.net Gandi]. Ask an officer if you want to change something.
* jkh and Roddy own ece.vt.edu. DNS updates don't happen. echarlie can add IPv6-only records if needed to wuvt.vt.edu so we have PTRs.
* [[Infrastructure:Joey|joey]] runs DHCP via dnsmasq on enp4s0 (that is, 10.98.0.0/16). To change anything, modify it on https://github.com/vtluug/scripts first then pull that into root's homedir on [[Infrastructure:Joey|joey]]. Please don't just update it on a machine without pushing your updates.
* By default, hosts are accessible via SSH on ports 22 and 2222.

== Adding a VTLUUG Service VM ==
''VMs in this category are deployed to [[Infrastructure:Meltdown|meltdown]]''

Prerequisites:
* Clone <code>https://github.com/vtluug/scripts</code>. This is referred to as 'SCRIPTS' in this guide.
* Clone <code>https://github.com/vtluug/ansible</code> and install ansible. This repo is referred to as 'ANSIBLE' in this guide.
* Have access to the vtluug-admin repo on gitolite.
* Understand the [[Infrastructure:Network|Network]] and [[Infrastructure]].
* Put your SSH key on [[Infrastructure:Meltdown|meltdown]]

=== Configure the network ===
* Decide on a MAC address for the host and add it to <code>SCRIPTS/router/lan/local_hosts</code>
* Add an entry to <code>SCRIPTS/router/lan/dnsmasq.conf</code> for static DHCP leases.
* If a new IP in 128.173.88.1/22 is being added, also add it to <code>SCRIPTS/router/proxy/arp_proxy.sh</code>

'''Note:''' It is '''not''' recommended that you do the following steps if nobody is on campus in case something breaks.

Pull the latest changes to <code>/root/scripts</code>, update the configuration files, and restart the services:
* Dnsmasq configuration is at <code>/etc/dnsmasq.conf</code>
* ARP Proxy configuration is in <code>/usr/local/bin</code>

=== Add the VM configuration to ansible ===
Edit <code>ANSIBLE_PATH/roles/deploy-vms/defaults/main.yml</code> and add a new entry, following the existing format.

'''Note:''' if there are any entries in this file that are '''not''' present on the VM host, they will also be created. Comment out entries that shouldn't be created. Existing hosts are skipped.

Run <code>ansible-playbook -v deploy.yml -i hosts.cfg -u papatux -k -K -e @VTLUUG_ADMIN_REPO/accounts.yml</code>, using the correct vtluug-admin repo path.

=== Testing ===
The new host should be accessible by papatux on via SSH port 2222 (and 22) over IPv6 and IPv4 from the internal network. Check 10.98.1.0/24 to see if it had any issues getting a static DHCP lease and if the MAC is correct.

== Adding a User VM ==
''VMs in this category are deployed to [[Infrastructure:Spectre|spectre]]''

Prerequisites:
* Clone <code>https://github.com/vtluug/scripts</code>. This is referred to as 'SCRIPTS' in this guide.
* Clone <code>https://github.com/vtluug/ansible</code> and install ansible. This repo is referred to as 'ANSIBLE' in this guide.
* Understand the [[Infrastructure:Network|Network]] and [[Infrastructure]].
* Have root on [[Infrastructure:Spectre|spectre]]
* Put your SSH key on [[Infrastructure:Spectre|spectre]]

=== Configure the network ===
* Decide on a MAC address for the host and add it to <code>SCRIPTS/router/lan/local_hosts</code>
* Add an entry to <code>SCRIPTS/router/lan/dnsmasq.conf</code> for static DHCP leases. (If applicable; you might not care for a test/temp VM).

'''Note:''' It is '''not''' recommended that you do the following steps if nobody is on campus in case something breaks.

Pull the latest changes to <code>/root/scripts</code>, update the configuration files, and restart the services:
* Dnsmasq configuration is at <code>/etc/dnsmasq.conf</code>

=== Add the VM configuration to ansible ===
Edit <code>ANSIBLE_PATH/roles/deploy-vms/defaults/main.yml</code> and add a new entry under <code>new_vms_spectre</code>, following the existing format.

'''Note:''' if there are any entries in this file that are '''not''' present on the VM host, they will also be created. Comment out entries that shouldn't be created. Existing hosts are skipped.

Run <code>ansible-playbook -v deploy.yml -i hosts.cfg -u papatux -k -K</code>, using the correct vtluug-admin repo path.

'''Important:''' A random root password is set during VM creation and printed to stdout. Record this!

=== Testing ===
The new host should be accessible by root on via SSH port 2222 (and 22) over IPv6 and IPv4 from the internal network. Check 10.98.1.0/24 to see if it had any issues getting a static DHCP lease and if the MAC is correct.

[[Category:Infrastructure]]
[[Category:Howtos]]
[[Category:Needs restoration]]

Mutt

2020-06-02T16:01:27Z

Echarlie: /* Local Mail on acidburn */ why did we put a password here? it was not necessary at all

Mutt

2020-06-02T15:59:17Z

Echarlie: /* Mutt VT/Google Mail Setup */

"''All mail clients suck. This one just sucks less.''"<ref>http://www.mutt.org/</ref>

'''Mutt''' is a [[w:text user interface|text-based]] [[w:email client|email client]] for [[w:Unix-like|Unix-like]] systems. It was originally written by Michael Elkins in 1995 and released under the [[w:GNU General Public License|GPL]] version 2 or any later version.<ref>
https://en.wikipedia.org/wiki/Mutt_%28email_client%29</ref>

Mutt was originally designed as a [[w:Mail User Agent|Mail User Agent]] (MUA) and relied on locally accessible mailbox and [[w:sendmail|sendmail]] infrastructure. According to the Mutt homepage "though written from scratch, Mutt's initial interface was based largely on the [[w:Elm (email client)|ELM mail client]]". New to Mutt were message scoring and threading capabilities. Support for fetching and sending email via various protocols such as [[w:POP3|POP3]], [[w:IMAP|IMAP]] and [[w:Simple Mail Transfer Protocol|SMTP]] was added later. Mutt relies on external tools for composing and filtering messages.

== Mutt VT/Google Mail Setup ==

VT email lives in Google GSuite (i.e. gmail). Because GSuite is deprecating "less secure devices/app-passwords",
you will need to use IMAP and SMTP with the XOAUTH2 authentication method.

Most mutt users use [[isync|isync/mbsync]] or [[offlineimap]] as imap reader tools. mbsync is better;
offlineimap has longstanding bugs with conflicting message IDs that can cause messages to be deleted,
and it is much easier to configure mbsync with multiple imap accounts, however mbsync's auth plugin
support is fragile, while offlineimap has built-in XOAUTH2 support.

Mutt has some [http://www.mutt.org/doc/manual/#oauth internal] OAUTH support that can be used. Alternately,
use an external tool like [https://github.com/cscorley/send.py send.py] as your sendmail drop-in.

The caveat of setting up [[OAUTH2]] is that Google has disabled trial credential creation in billed
accounts (i.e. GSuite), so you *cannot* use your VT account to create them. Further, to reduce abuse,
Google must approve all public apps; a warning pops up if it is not approved, which can only
be bypassed if you are the owner of the application. In short, you must create OAUTH credentials
with a non-GSuite google account, add your @vt.edu account to the project, and then use it to
log in.

== LUUGmail ==

Acidburn currently has functional postfix/dovecot. This is how to use it with mutt.

=== IMAP/SMTP for acidburn ===

This is a sample configuration for imap/smtp in mutt for acidburn, provided by [[User:echarlie|echarlie]]

<pre>
set realname = 'Wadsworth Luugbot' #your display name here
set imap_user=wadsworth #this should be your LDAP account name
set imap_pass=$my_luug_pass #Whatever your LUUG password is. Here we used a personal variable.
set ssl_force_tls=yes
set ssl_starttls=yes

set folder = "imap://$imap_user@acidburn.vtluug.org:143/"
set spoolfile = +INBOX
set postponed = +Drafts
set record = +sent
set imap_check_subscribed

set pgp_sign_as = "wadsworth@vtluug.org" # If you like pgp-signing things

set from = "wadsworth@vtluug.org" #### THIS IS IMPORTANT ####
set use_from = yes
set smtp_url=smtp://$imap_user:$imap_pass@acidburn.vtluug.org:587

# this is for if you use multiple accounts. The ssl settings are necessary since we don't have a
# certified tls key right now
account-hook $folder "set imap_user=$imap_user imap_pass=$imap_pass ssl_verify_dates=no ssl_verify_host=no"
</pre>

This section assumes you are using mutt with multiple accounts. For that, we reccomend putting the following into <code>.muttrc/vtluug</code> or something similar, and having this in your <code>.mutt/muttrc</code> :
<pre>
source "~/.mutt/vtluug"
folder-hook $folder 'source ~/.mutt/vtluug'
</pre>

== Local Mail on acidburn ==

This is how one would read and send local mail on acidburn. This is a fully functional <code>.muttrc</code>, however we
would suggest setting your mutt editor, setting your encoding preference (UTF-8), and changing keybindings to preference.

'''NOTE: storing passwords in cleartext on acidburn is not recommended, nor is storing your pgp key on acidburn so you can decrypt it'''

<pre>
set mbox_type=Maildir #acidburn uses maildirs
set folder=$HOME/Maildir
set spoolfile=+/
set header_cache=~/.cache/mutt #optional; header caching speeds things up

set my_pass= <your password here>
set my_user=wadsworth

set realname = "Wadsworth Luugbot"
set from = wadsworth@vtluug.org
set use_from = yes

# This is needed if you want to send from another ldapified server
#set smtp_url=smtps://$my_user:$my_pass@acidburn.vtluug.org:587
#set ssl_force_tls = yes
</pre>

== References ==

[[Category:Howtos]]
[[Category:Software]]
[[Category:Mail clients]]
[[Cagetory:Needs restoration]]

Category:2019

2020-06-02T15:27:35Z

Echarlie:

[[category:Roadmap]]

Category:2018

2020-06-02T15:26:48Z

Echarlie:

[[category:roadmap]]

Deprecated Inventory

2020-06-01T23:03:07Z

Echarlie:

{| class="wikitable sortable"
! Type
! Hostname
! Room
! Location
! Circuit
! Owner
! Use
! Notes
|-
| Server
| [[Infrastructure:theplague|theplague.vtluug.org]]
| WHIT 432
| R1U15-16*
|
| VTLUUG
| Syslog
| Unkerberized
|-
| Server
| tardis.vtluug.org
| unknown
| R1U01
|
| [[User:Timelord|Timelord]]
| IRC server
|
|-
| Server
| vilnius
| TORG 1300
| wopr
|
| VTLUUG
| PXEboot
| For installfests
|-
| Server
| mirror2
| unknown
| R1U00
|
| [[User:via|via]]/ECE
| Arch/OpenBSD mirror
|
|-
| Server
| [[Infrastructure:Sunway|Sunway]] (19 nodes)
| Squires 350A
|
|
| VTLUUG/ECE
| Cluster
| Now WUVT's
|-
| VM
| [[Infrastructure:Blade|blade.vtluug.org]]
| WHIT 432
| R1U15-16*
| LV4G-7
| VTLUUG
| LDAP/Kerberos
|
|-
| Server
| [[Infrastructure:Cerealkiller|cerealkiller.vtluug.org]]
| WHIT 432
| R1U15-16*
| LV4G-7
| VTLUUG
| Tor relay
|
|-
| Server
| [[Infrastructure:Lordnikon|lordnikon.vtluug.org]]
| WHIT 432
| R1U15-16*
| LV4G-7
| VTLUUG
| DNS
|
|-
| Server
| N/A
| Squires 350A
| R1U10-11
|
| via?
| ??
| Supermicro box -- Now WUVT's
|-
| Server
| mirror.ece.vt.edu
| WHIT 355
|
|
| [[User:Timelord|jpo]]
| Arch/OpenBSD mirror
| Running OpenBSD
|-
| Server
| N/A
| [[user:uncurlhalo]]
|
|
|
|
| 32-bit Penguin Computing box
|-
| Server
| N/A
| [[user:uncurlhalo]]
|
|
|
| No drives
| Dell server
|-
| Server
| N/A
| [[user:uncurlhalo]]
|
|
|
| No RAM, VGA broken
| Penguin Computing box
|-
| Server
| dog.ece.vt.edu
| Whit 7xx
|
|
| ECE (tagged)
| PXE server
| OpenBSD, Dvorak keyboard
|-
| 8-port Switch
| N/A
| [[User:uncurlhalo]]
|
|
| VTLUUG
|
|
|-
| Patch panel
| N/A
| [[User:uncurlhalo]]
|
|
| VTLUUG
|
| Mostly cat5 cable (100mbit/s)
|-
| KVM switch
| N/A
| [[User:uncurlhalo]]
|
|
| VTLUUG
| KVM switch
| Used for wood, mirror, temp88191
|-
| VM
| [[Infrastructure:Sczi_(2nd_generation)|scziold.vtluug.org]]
| Whit 7xx
|
|
| VTLUUG
| Web server
| Hosted on [[Infrastructure:Cyberdelia]]
|-
| VM
| [[Infrastructure:Razor|razor.vtluug.org]]
| Whit 7xx
|
|
| VTLUUG
| LDAP
| Hosted on [[Infrastructure:Cyberdelia]]
|-
| VM
| [[Infrastructure:Crashoverride|crashoverride.vtluug.org]]
| WHIT 7xx
|
|
| VTLUUG
| Tahoe-LAFS
| Currently Down
|-
| Server
| [[Infrastructure:temp88191|temp88191.vtluug.org]]
| WHIT 7xx
|
|
| VTLUUG/ECE
| Router
| Ubuntu 14.04
|-
| Server
| [[Infrastructure:Wood|wood.vtluug.org]]
| WHIT 7xx
|
|
| VTLUUG
| HPC
| 4U, conviently high enough to fit gpus
|-
| Server
| [[Infrastructure:Phantomphreak|phantomphreak.vtluug.org]]
| WHIT 7xx
|
|
| VTLUUG
|
| Given to [[User:toocrazzzzy]]
|}

[[Category:Infrastructure]]

Deprecated Inventory

2020-06-01T23:01:15Z

Echarlie:

{| class="wikitable sortable"
! Type
! Hostname
! Room
! Location
! Circuit
! Owner
! Use
! Notes
|-
| Server
| [[Infrastructure:theplague|theplague.vtluug.org]]
| WHIT 432
| R1U15-16*
|
| VTLUUG
| Syslog
| Unkerberized
|-
| Server
| tardis.vtluug.org
| unknown
| R1U01
|
| [[User:Timelord|Timelord]]
| IRC server
|-
| Server
| vilnius
| TORG 1300
| wopr
|
| VTLUUG
| PXEboot
| For installfests
|-
| Server
| mirror2
| unknown
| R1U00
|
| [[User:via|via]]/ECE
| Arch/OpenBSD mirror
|
|-
| Server
| [[Infrastructure:Sunway|Sunway]] (19 nodes)
| Squires 350A
|
|
| VTLUUG/ECE
| Cluster
| Now WUVT's
|-
| VM
| [[Infrastructure:Blade|blade.vtluug.org]]
| WHIT 432
| R1U15-16*
| LV4G-7
| VTLUUG
| LDAP/Kerberos
|
|-
| Server
| [[Infrastructure:Cerealkiller|cerealkiller.vtluug.org]]
| WHIT 432
| R1U15-16*
| LV4G-7
| VTLUUG
| Tor relay
|
|-
| Server
| [[Infrastructure:Lordnikon|lordnikon.vtluug.org]]
| WHIT 432
| R1U15-16*
| LV4G-7
| VTLUUG
| DNS
|
|-
| Server
| N/A
| Squires 350A
| R1U10-11
|
| via?
| ??
| Supermicro box -- Now WUVT's
|-
| Server
| mirror.ece.vt.edu
| WHIT 355
|
|
| [[User:Timelord|jpo]]
| Arch/OpenBSD mirror
| Running OpenBSD
|-
| Server
| N/A
| [[user:uncurlhalo]]
|
|
|
|
| 32-bit Penguin Computing box
|-
| Server
| N/A
| [[user:uncurlhalo]]
|
|
|
| No drives
| Dell server
|-
| Server
| N/A
| [[user:uncurlhalo]]
|
|
|
| No RAM, VGA broken
| Penguin Computing box
|-
| Server
| dog.ece.vt.edu
| Whit 7xx
|
|
| ECE (tagged)
| PXE server
| OpenBSD, Dvorak keyboard
|-
| 8-port Switch
| N/A
| [[User:uncurlhalo]]
|
|
| VTLUUG
|
|
|-
| Patch panel
| N/A
| [[User:uncurlhalo]]
|
|
| VTLUUG
|
| Mostly cat5 cable (100mbit/s)
|-
| KVM switch
| N/A
| [[User:uncurlhalo]]
|
|
| VTLUUG
| KVM switch
| Used for wood, mirror, temp88191
|-
| VM
| [[Infrastructure:Sczi_(2nd_generation)|scziold.vtluug.org]]
| Whit 7xx
|
|
| VTLUUG
| Web server
| Hosted on [[Infrastructure:Cyberdelia]]
|-
| VM
| [[Infrastructure:Razor|razor.vtluug.org]]
| Whit 7xx
|
|
| VTLUUG
| LDAP
| Hosted on [[Infrastructure:Cyberdelia]]
|-
| VM
| [[Infrastructure:Crashoverride|crashoverride.vtluug.org]]
| WHIT 7xx
|
|
| VTLUUG
| Tahoe-LAFS
| Currently Down
|-
| Server
| [[Infrastructure:temp88191|temp88191.vtluug.org]]
| WHIT 7xx
|
|
| VTLUUG/ECE
| Router
| Ubuntu 14.04
|
|-
| Server
| [[Infrastructure:Wood|wood.vtluug.org]]
| WHIT 7xx
|
|
| VTLUUG
| HPC
| 4U, conviently high enough to fit gpus
|-
| Server
| [[Infrastructure:Phantomphreak|phantomphreak.vtluug.org]]
| WHIT 7xx
|
|
| VTLUUG
|
| Given to [[User:toocrazzzzy]]
|}

[[Category:Infrastructure]]

Project list

2020-06-01T22:50:49Z

Echarlie:

This is a list of the various infrastructure/funding/etc projects that need to be done. Priority should range between 0 and 10 (inclusive), where higher is more imporant. Also check out [[dead projects]] and [[finished projects]].

{| class='wikitable' id='sortMe'
!Priority
!Project
!Description
!Leader
!Progress
|-
|10
|[[Infrastructure]]
|Infrastructure Maintenance
|[[user:echarlie|echarlie]], [[user:pew|pew]], current sysadmin???
|Ongoing
|-
|2
|[[Funding]]
|Get SEC/SBB funding
|
|An officer needs to attend SBB orientation, after that, $current_treasurer needs to know what exactly is needed, as we can only request funding for specific items and not general club money.
|-
|4
|[[T-shirts]]
|Decide on a t-shirt design, do a group order
|[[user:marcus|marcusw]]
|Need new candidate designs
|-
|5
|[[Wiki expansion]]
|Update existing content, import content into Gobblerpedia
|[[user:echarlie|echarlie]], $current_secretary
|Evaluating current state of pages
|-
|6
|[[Project Bringing Sexy Back|Club automation]]
|Configuration management, etc
|$sysadmin
|Need automation stuff setup to enable rapid re-deployment of infrastructure
|-
|7
|[[VTLUUG:Inventory|Inventory]]
|Go through the offline equipment stored with [[user:marcus|marcusw]] and update information on [[VTLUUG:Inventory|Inventory]]
|[[user:echarlie|echarlie]]
|Done???
|-
|9
|Develop Backup Solution
|Needs to be proposed and then agreed to by officers
|[[user:pew|pew]]
|None
|-
|}

[[Category:VTLUUG:Projects]]

Project list

2020-06-01T22:50:19Z

Echarlie:

This is a list of the various infrastructure/funding/etc projects that need to be done. Priority should range between 0 and 10 (inclusive), where higher is more imporant. Also check out [[dead projects]] and [[finished projects]].

{| class='wikitable' id='sortMe'
!Priority
!Project
!Description
!Leader
!Progress
|-
|10
|[[Infrastructure]]
|Infrastructure Maintenance
|[[user:echarlie|echarlie]], [[user:pew|pew]], current sysadmin???
|Ongoing
|-
|2
|[[Funding]]
|Get SEC/SBB funding
|
|An officer needs to attend SBB orientation, after that, $current_treasurer needs to know what exactly is needed, as we can only request funding for specific items and not general club money.
|-
|4
|[[T-shirts]]
|Decide on a t-shirt design, do a group order
|[[user:marcus|marcusw]]
|Need new candidate designs
|-
|5
|[[Wiki expansion]]
|Update existing content, import content into Gobblerpedia
|[[user:echarlie|echarlie]]
|Evaluating current state of pages
|-
|6
|[[Project bringing sexy back|Club automation]]
|Configuration management, etc
|$sysadmin
|Need automation stuff setup to enable rapid re-deployment of infrastructure
|-
|7
|[[VTLUUG:Inventory|Inventory]]
|Go through the offline equipment stored with [[user:marcus|marcusw]] and update information on [[VTLUUG:Inventory|Inventory]]
|[[user:echarlie|echarlie]]
|Done???
|-
|9
|Develop Backup Solution
|Needs to be proposed and then agreed to by officers
|[[user:pew|pew]]
|None
|-
|}

[[Category:VTLUUG:Projects]]

VTLUUG:History

2020-05-13T21:09:20Z

Echarlie: /* Fall 2020 */

The Linux and Unix Users Group was founded in October of 1997 as the Virginia Tech Linux Users Group (VTLUG). After realizing the name clash with the Vermont Linux Users Group, the organization changed its name to the Virginia Tech Linux and Unix Users Group (VTLUUG). In the fall of 2009, the name was again changed, this time to comply with registered student organization regulations. Virginia Tech was moved to the end of the organization's full name, but the acronym has been kept, in part because changing domain names would be a hassle.

== Fall 1997 ==
* Founded in October 1997 as the Linux Users Group of Virginia Tech
* Eventually became L/UUG to encompass Unix

== Fall 1998 ==
* Rob Nelson
* Clemmitt Sigler
* [http://search.luky.org/cola.1998/msg01361.html Announcement of first meeting]
* [http://www.debian.org/events/1998/1205-vatech-installfest Installfest] held

== Spring 1999 ==
* [http://web.archive.org/web/19990219122456/http://corvette.me.vt.edu/~vtlug/ Old website]
* Server was corvette.me.vt.edu, a Pentium 133 which hosted the LUUG website, as well as Linux distributions over FTP and NFS
* Early February, 1999: Members of the L/UUG at VT officially begin planning a [[VTLUUG:Beowulf Cluster|Beowulf Cluster]] project.

== Fall 1999 ==
* Beowulf cluster completed?

== Spring 2001 ==
;President :H. Lally Singh
;Vice President :Josh Baugher
;Treasurer :George Morgan
;Secretary :Wes Kurdziolek
;Steering Committee
: Clemmitt Sigler
: Josh Baugher
: Bucky LaDieu
: H. Lally Singh
: Nick Maniscalco
;Worker Peons
: Clemmitt Sigler (sysadmin)
: Rob Nelson (sysadmin)
: Logan Hanks (webmaster)
: Rob Hunter (webmaster)
;Donors
: Vincent Rivellino
: Adam Kendall
: Lyle Evans
: Kermit Duncan
: Austin Graves
: Ethan James

== Fall 2001 ==
;President :Wes Kurdziolek
;VP of IT :Rob Hunter
;Treasurer :Joseph Goodman

== Spring 2002 ==
;President :Wes Kurdziolek
;VP of IT :Rob Hunter
;Treasurer :Joseph Goodman

== Fall 2002 ==
;President :Wes Kurdziolek
;VP of IT :Rob Hunter
;Treasurer :Joseph Goodman

== Spring 2003 ==
;President :Wes Kurdziolek
;VP of IT :Rob Hunter
;Treasurer :Joseph Goodman

== Fall 2003 ==
;President :Wes Kurdziolek
;VP of IT :Rob Hunter
;Treasurer :Joseph Goodman

== Spring 2004 ==
Club did not exist

== Fall 2004 ==
;President :H. Lally Singh
;Vice President :Jerome Holman

== Spring 2005 ==
;President :Ben Hilburn

* Installfests started
* Crash courses started
* BoFs restarted

== Fall 2005 ==
;President :Ben Hilburn
;Vice President :Sean Elble

== Spring 2006 ==
;President :Ben Hilburn
;Vice President :Sean Elble
* Registered as non-profit with IRS in June

== Fall 2006 ==
;President :Ben Hilburn
;Vice President :Sean Elble
;Treasurer :Dan Caughran

== Spring 2007 ==
;President :Ben Hilburn
;Vice President :Sean Elble
;Treasurer :Dan Caughran

== Fall 2007 ==
;President :Sean Elble
;Vice-President :Dan Caughran
;Treasurer :Dan Cohn
;Secretary :Ben Hilburn
;Programs Manager :Casey Link
;Systems Administrator :Dave Vogt
;Graduate Liaison :Chris Lasher

== Spring 2008 ==
;President :Sean Elble
;Vice President :Dan Caughran
;Secretary :Ben Hilburn

== Fall 2008 ==
;President :Casey Link
;Activities Coordinator :[[User:Cov|Christopher Covington]]

== Spring 2009 ==
;Benevolent Dictator :Christopher Covington
;Graduate Liaison :Chris Lasher

== Fall 2009 ==
;President :Christopher Covington
;Vice President :Paul Galiatsatos

== Spring 2010 ==
;President :Christopher Covington

* [[Cyber Security Competition]]

== Fall 2010 ==
;President :[[User:Mutantmonkey|James Schwinabart]]
;Vice President :Stephen Tanner
;Treasurer :Christopher Covington

* [[Infrastructure:Wood|Wood]] was built with hardware selected by the [[Hardware Selection Task Force]]

== Spring 2011 ==
;President :James Schwinabart
;Vice President :[[User:Ram|Reese Moore]]
;Treasurer :Christopher Covington

* The LUUG participated in the [[Collegiate Cyber Defense Competition]] for the first time
* [[gp:Gobblerpedia|Gobblerpedia]] launched on February 11, 2011
* [[u:Uniluug|Uniluug]] launched
* Participated in e-week for [[gp:Students Engineers' Council|SEC]] and ran an arcade booth with GNU/Linux games

== Fall 2011 ==
;President :James Schwinabart
;Vice President :Reese Moore
;Treasurer :Erich Alderfer

== Spring 2012 ==
;President :James Schwinabart
;Vice President :Reese Moore
;Treasurer :Lukas Lozovski

==Fall 2012==
;President :Calvin Winkowski
;Vice President :Lukas Lozovski
;Treasurer :James Gross
;Sysadmin :James Schwinabart
;Outreach Coordinator :Reese Moore
* October 2012 is the [[15th Anniversary]] of VTLUUG!
* [[Infrastructure:Blade|Blade]] added for central authentication using Kerberos and LDAP

==Spring 2013==
;President :[[User:Mjh|Matt Hazinski]]
;Treasurer :James Gross
;Sysadmin :James Schwinabart
;Graduate Liason :Reese Moore
* [[Infrastructure:Sunway|Sunway]] cluster created

==Fall 2013==
;President :Matt Hazinski
;Vice President :[[User:Andreim|Andrei Marcu]]
;Treasurer :Jacob Melton
;Activies Coordinator :Noah Luther
;Sysadmin :Calvin Winkowski
* [[Infrastructure:Cyberdelia|Cyberdelia]] acquired for [[EL Migration Project]]

==Spring 2014==
;President :[[User:Mjh|Matt Hazinski]]
;Vice President :[[User:Andreim|Andrei Marcu]]
;Treasurer :Jacob Melton
;Sysadmin :Calvin Winkowski
* Start of [[EL Migration Project]]
* [[Super-secret Cluster Project]] on [[Infrastructure:Sunway|Sunway]]

==Fall 2014==
;President :[[User:Andreim|Andrei Marcu]]
;Vice President :[[User:Mjh|Matt Hazinski]]
;Treasurer :Ben Weinstein-Raun
;Sysadmin :Nathan McCloskey
;Sysadmin Emeritus :Calvin Winkowski

==Spring 2015==
;President :[[User:Andreim|Andrei Marcu]]
;Vice President :[[User:Mjh|Matt Hazinski]]
;Treasurer :Ben Weinstein-Raun
;Sysadmin Emeritus :Calvin Winkowski

== Fall 2015 ==
;President :[[User:Ackthet|Wade Duvall]]
;Vice President :[[User:Uncurlhalo|Jacob Melton]]
;Treasurer :Daniel Setareh
;Sysadmin :John Volk
;Sysadmin Emeritus :Calvin Winkowski

* [[CVL eviction]]

==Spring 2016==
;President :[[User:Ackthet|Wade Duvall]]
;Vice President :[[User:Uncurlhalo|Jacob Melton]]
;Treasurer :[[User:dsetareh|Daniel Setareh]]
;Sysadmin :[[User:johnv|John Volk]]

==Fall 2017==
;President :[[User:uncurlhalo|Jacob Melton]]
;Vice President :[[User:marcus|Marcus Wanners]]
;Treasurer :[[User:johnv|John Volk]]
;Sysadmin :[[User:echarlie|VACANT]]

==Spring 2017==
;President :[[User:marcus|Marcus Wanners]]
;Vice President :[[User:echarlie|E. C. Landgraf]]
;Treasurer :[[User:johnv|John Volk]]
;Sysadmin :[[User:pew|VACANT]]

== Fall 2017 ==
;President :[[User:marcus|Marcus Wanners]]
;Vice President :[[User:echarlie|E. C. Landgraf]]
;Treasurer :[[User:bgregos|Brendan Gregos]]
;Sysadmin :[[User:pew|Paul Walko]]

* October marks the 20th anniversary of the LUUG

== Spring 2018 ==
;President :[[User:marcus|Marcus Wanners]]
;Vice President :[[User:echarlie|E. C. Landgraf]]
;Treasurer :[[User:bgregos|Brendan Gregos]]
;Sysadmin :[[User:pew|Paul Walko]]

== Fall 2018 ==
;President :[[User:bgregos|Brendan Gregos]]
;Vice President :[[User:pew|Paul Walko]]

== Spring 2019 ==
;President :[[User:bgregos|Brendan Gregos]]

== Fall 2019 ==
;President :Philip Conte

== Spring 2020 ==
;President :Philip Conte

== Fall 2020 ==

;President :Ryan Gniadek
;Vice President :Joshua Detwiler
;Treasurer :Grant Batdorff
;Sysadmin :Josh Kirkham
;Outreach Chair :Ben Bernstein
;Emacs and Arch Evangelist :Daniel Guagliardo

[[Category:VTLUUG:Administration]]

VTLUUG:History

2020-05-13T21:09:07Z

Echarlie: try to update some history that had been missing/lost. low-effort and based on memory

The Linux and Unix Users Group was founded in October of 1997 as the Virginia Tech Linux Users Group (VTLUG). After realizing the name clash with the Vermont Linux Users Group, the organization changed its name to the Virginia Tech Linux and Unix Users Group (VTLUUG). In the fall of 2009, the name was again changed, this time to comply with registered student organization regulations. Virginia Tech was moved to the end of the organization's full name, but the acronym has been kept, in part because changing domain names would be a hassle.

== Fall 1997 ==
* Founded in October 1997 as the Linux Users Group of Virginia Tech
* Eventually became L/UUG to encompass Unix

== Fall 1998 ==
* Rob Nelson
* Clemmitt Sigler
* [http://search.luky.org/cola.1998/msg01361.html Announcement of first meeting]
* [http://www.debian.org/events/1998/1205-vatech-installfest Installfest] held

== Spring 1999 ==
* [http://web.archive.org/web/19990219122456/http://corvette.me.vt.edu/~vtlug/ Old website]
* Server was corvette.me.vt.edu, a Pentium 133 which hosted the LUUG website, as well as Linux distributions over FTP and NFS
* Early February, 1999: Members of the L/UUG at VT officially begin planning a [[VTLUUG:Beowulf Cluster|Beowulf Cluster]] project.

== Fall 1999 ==
* Beowulf cluster completed?

== Spring 2001 ==
;President :H. Lally Singh
;Vice President :Josh Baugher
;Treasurer :George Morgan
;Secretary :Wes Kurdziolek
;Steering Committee
: Clemmitt Sigler
: Josh Baugher
: Bucky LaDieu
: H. Lally Singh
: Nick Maniscalco
;Worker Peons
: Clemmitt Sigler (sysadmin)
: Rob Nelson (sysadmin)
: Logan Hanks (webmaster)
: Rob Hunter (webmaster)
;Donors
: Vincent Rivellino
: Adam Kendall
: Lyle Evans
: Kermit Duncan
: Austin Graves
: Ethan James

== Fall 2001 ==
;President :Wes Kurdziolek
;VP of IT :Rob Hunter
;Treasurer :Joseph Goodman

== Spring 2002 ==
;President :Wes Kurdziolek
;VP of IT :Rob Hunter
;Treasurer :Joseph Goodman

== Fall 2002 ==
;President :Wes Kurdziolek
;VP of IT :Rob Hunter
;Treasurer :Joseph Goodman

== Spring 2003 ==
;President :Wes Kurdziolek
;VP of IT :Rob Hunter
;Treasurer :Joseph Goodman

== Fall 2003 ==
;President :Wes Kurdziolek
;VP of IT :Rob Hunter
;Treasurer :Joseph Goodman

== Spring 2004 ==
Club did not exist

== Fall 2004 ==
;President :H. Lally Singh
;Vice President :Jerome Holman

== Spring 2005 ==
;President :Ben Hilburn

* Installfests started
* Crash courses started
* BoFs restarted

== Fall 2005 ==
;President :Ben Hilburn
;Vice President :Sean Elble

== Spring 2006 ==
;President :Ben Hilburn
;Vice President :Sean Elble
* Registered as non-profit with IRS in June

== Fall 2006 ==
;President :Ben Hilburn
;Vice President :Sean Elble
;Treasurer :Dan Caughran

== Spring 2007 ==
;President :Ben Hilburn
;Vice President :Sean Elble
;Treasurer :Dan Caughran

== Fall 2007 ==
;President :Sean Elble
;Vice-President :Dan Caughran
;Treasurer :Dan Cohn
;Secretary :Ben Hilburn
;Programs Manager :Casey Link
;Systems Administrator :Dave Vogt
;Graduate Liaison :Chris Lasher

== Spring 2008 ==
;President :Sean Elble
;Vice President :Dan Caughran
;Secretary :Ben Hilburn

== Fall 2008 ==
;President :Casey Link
;Activities Coordinator :[[User:Cov|Christopher Covington]]

== Spring 2009 ==
;Benevolent Dictator :Christopher Covington
;Graduate Liaison :Chris Lasher

== Fall 2009 ==
;President :Christopher Covington
;Vice President :Paul Galiatsatos

== Spring 2010 ==
;President :Christopher Covington

* [[Cyber Security Competition]]

== Fall 2010 ==
;President :[[User:Mutantmonkey|James Schwinabart]]
;Vice President :Stephen Tanner
;Treasurer :Christopher Covington

* [[Infrastructure:Wood|Wood]] was built with hardware selected by the [[Hardware Selection Task Force]]

== Spring 2011 ==
;President :James Schwinabart
;Vice President :[[User:Ram|Reese Moore]]
;Treasurer :Christopher Covington

* The LUUG participated in the [[Collegiate Cyber Defense Competition]] for the first time
* [[gp:Gobblerpedia|Gobblerpedia]] launched on February 11, 2011
* [[u:Uniluug|Uniluug]] launched
* Participated in e-week for [[gp:Students Engineers' Council|SEC]] and ran an arcade booth with GNU/Linux games

== Fall 2011 ==
;President :James Schwinabart
;Vice President :Reese Moore
;Treasurer :Erich Alderfer

== Spring 2012 ==
;President :James Schwinabart
;Vice President :Reese Moore
;Treasurer :Lukas Lozovski

==Fall 2012==
;President :Calvin Winkowski
;Vice President :Lukas Lozovski
;Treasurer :James Gross
;Sysadmin :James Schwinabart
;Outreach Coordinator :Reese Moore
* October 2012 is the [[15th Anniversary]] of VTLUUG!
* [[Infrastructure:Blade|Blade]] added for central authentication using Kerberos and LDAP

==Spring 2013==
;President :[[User:Mjh|Matt Hazinski]]
;Treasurer :James Gross
;Sysadmin :James Schwinabart
;Graduate Liason :Reese Moore
* [[Infrastructure:Sunway|Sunway]] cluster created

==Fall 2013==
;President :Matt Hazinski
;Vice President :[[User:Andreim|Andrei Marcu]]
;Treasurer :Jacob Melton
;Activies Coordinator :Noah Luther
;Sysadmin :Calvin Winkowski
* [[Infrastructure:Cyberdelia|Cyberdelia]] acquired for [[EL Migration Project]]

==Spring 2014==
;President :[[User:Mjh|Matt Hazinski]]
;Vice President :[[User:Andreim|Andrei Marcu]]
;Treasurer :Jacob Melton
;Sysadmin :Calvin Winkowski
* Start of [[EL Migration Project]]
* [[Super-secret Cluster Project]] on [[Infrastructure:Sunway|Sunway]]

==Fall 2014==
;President :[[User:Andreim|Andrei Marcu]]
;Vice President :[[User:Mjh|Matt Hazinski]]
;Treasurer :Ben Weinstein-Raun
;Sysadmin :Nathan McCloskey
;Sysadmin Emeritus :Calvin Winkowski

==Spring 2015==
;President :[[User:Andreim|Andrei Marcu]]
;Vice President :[[User:Mjh|Matt Hazinski]]
;Treasurer :Ben Weinstein-Raun
;Sysadmin Emeritus :Calvin Winkowski

== Fall 2015 ==
;President :[[User:Ackthet|Wade Duvall]]
;Vice President :[[User:Uncurlhalo|Jacob Melton]]
;Treasurer :Daniel Setareh
;Sysadmin :John Volk
;Sysadmin Emeritus :Calvin Winkowski

* [[CVL eviction]]

==Spring 2016==
;President :[[User:Ackthet|Wade Duvall]]
;Vice President :[[User:Uncurlhalo|Jacob Melton]]
;Treasurer :[[User:dsetareh|Daniel Setareh]]
;Sysadmin :[[User:johnv|John Volk]]

==Fall 2017==
;President :[[User:uncurlhalo|Jacob Melton]]
;Vice President :[[User:marcus|Marcus Wanners]]
;Treasurer :[[User:johnv|John Volk]]
;Sysadmin :[[User:echarlie|VACANT]]

==Spring 2017==
;President :[[User:marcus|Marcus Wanners]]
;Vice President :[[User:echarlie|E. C. Landgraf]]
;Treasurer :[[User:johnv|John Volk]]
;Sysadmin :[[User:pew|VACANT]]

== Fall 2017 ==
;President :[[User:marcus|Marcus Wanners]]
;Vice President :[[User:echarlie|E. C. Landgraf]]
;Treasurer :[[User:bgregos|Brendan Gregos]]
;Sysadmin :[[User:pew|Paul Walko]]

* October marks the 20th anniversary of the LUUG

== Spring 2018 ==
;President :[[User:marcus|Marcus Wanners]]
;Vice President :[[User:echarlie|E. C. Landgraf]]
;Treasurer :[[User:bgregos|Brendan Gregos]]
;Sysadmin :[[User:pew|Paul Walko]]

== Fall 2018 ==
;President :[[User:bgregos|Brendan Gregos]]
;Vice President :[[User:pew|Paul Walko]]

== Spring 2019 ==
;President :[[User:bgregos|Brendan Gregos]]

== Fall 2019 ==
;President :Philip Conte

== Spring 2020 ==
;President :Philip Conte

== Fall 2020 ==

;President :Ryan Gniadek
;Vice President :Joshua Detwiler
;Treasurer :Grant Batdorff
;Sysadmin :Josh Kirkham
;Outreach Chair :Ben Bernstein
;Emacs and Arch Evangelist ;Daniel Guagliardo

[[Category:VTLUUG:Administration]]

Virginia Tech Wifi

2019-04-25T20:50:11Z

Echarlie: openbsd typos /* wpa_supplicant Instructions */

On campus, there are 2 wireless networks. '''eduroam''' is the preferred method, which uses PEAP-MSCHAPv2 to authenticate to the RADIUS server, while the second SSID, '''VirginiaTech''', provides a captive-portal and allows for guest account creation.

As of January 2015 the [https://www.computing.vt.edu/content/eduroam preferred method] of wireless access at Virginia Tech is through the [https://eduroam.org/ eduroam] network. eduroam is a secure wireless access service that was developed for the use of research and educational institutions. One of the advantages of the eduroam network is that you will be able to connect to the Internet at any participating institution using your Virginia Tech credentials. The eduroam-US site provides a [https://www.eduroam.us/technical_overview technical overview] of how the network authenticates you to the Virginia Tech RADIUS servers.

==General Connection Information==
===eduroam===
The following settings are recommended for connecting to the eduroam network:

* '''SSID:''' eduroam
* '''EAP:''' PEAP
* '''Phase 2:''' MSCHAPv2
* '''Root CA:''' "USERTrust RSA Certification Authority" or pin the certificate (see below)
* '''Server Name:''' eduroam.nis.vt.edu
* '''Identity:''' pid@vt.edu (So if your PID was "hokiebird", hokiebird@vt.edu)
* '''Anonymous Identity:''' anonymous@vt.edu
* '''Password:''' [https://www.computing.vt.edu/kb/entry/3765 Your Network Password]

''Regardless of what software you use to establish your connection, you must first set your remote (network) passphrase by going to [https://my.vt.edu my.vt.edu]→Settings→Change Network Password.''

===Obtaining the Certificate Chain===

The certificate presented by the RADIUS server is chained as such:

* USERTrust RSA Certification Authority
** InCommon RSA Server CA
*** eduroam.nis.vt.edu

Below is where to obtain each of these, along with some metadata. The filenames are arbitrary, but will be used for the rest of this article. For every certificate (''especially'' the root, the signature chain helps with the rest), consider where you are obtaining it from and how much trust that you are getting what you think you are. You will probably want the PEM formatted certificate, if you have the option.

====USERTrust RSA Certification Authority====

''Filename:'' USERTrust_RSA_Certification_Authority.pem

''Subject:'' C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority

This is a common root CA and should have shipped with your OS. It is likely located in <code>/etc/ssl/certs/USERTrust_RSA_Certification_Authority.pem</code>. Note that if you follow the Authority Information Access of the intermediate certificate, it may direct you to a URL which points to a different version of this certficate, which is cross signed by AddTrust and expires in May 2020. The one in your cert store is self-signed and expires in 2038. You want the one from your cert store.

====InCommon RSA Server CA====

''Filename:'' InCommonRSAServerCA_2.pem

''Subject:'' C = US, ST = MI, L = Ann Arbor, O = Internet2, OU = InCommon, CN = InCommon RSA Server CA

This is an intermediate certificate issued by InCommon. You can get it directly from InCommon [http://crt.usertrust.com/InCommonRSAServerCA_2.crt here].

====eduroam.nis.vt.edu====

''Filename:'' eduroam.nis.vt.edu.pem

''Subject:'' C = US, postalCode = 24061, ST = Virginia, L = Blacksburg, street = 800 Washington St. SW, O = Virginia Polytechnic Institute and State University, OU = Secure Identity Services, CN = eduroam.nis.vt.edu

This can be obtained from the [https://certs.it.vt.edu/search VT Certificate Manager]. This requires PID login. Search for "eduroam.nis.vt.edu". Grab the certificate most recently issued.

===Validating the certificate===

<ol>
<li> Obtain ''all'' certificates in the chain ''in PEM format'' </li>
<li> Concatenate the non-leaf certificates in to a single file: </li>
<pre>$ cat USERTrust_RSA_Certification_Authority.pem InCommonRSAServerCA_2.pem > ca.pem</pre>
<li> Verify the certificates are signed correctly </li>
<pre>$ openssl verify -verbose -purpose sslserver -CAfile ca.pem eduroam.nis.vt.edu.pem
eduroam.nis.vt.edu.pem: OK</pre>
<li> For at least the root and leaf certificates, verify the subject (compare to above) </li>
<pre>$ openssl x509 -in file_of_cert_you_want_to_check -noout -subject</pre>
</ol>

===Certificate Pinning===

Due to vulnerabilities in the MSCHAPv2 protocol that allow the protocol to be cracked quickly with a 100% success rate<ref>[https://web.archive.org/web/20160316174007/https://www.cloudcracker.com/blog/2012/07/29/cracking-ms-chap-v2/]</ref>, it is ''absolutely critical'' that the RADIUS server certificate be validated properly before attempting authentication. Where possible, we opt for the highest level of verification of the certificate: manually pinning the hash of the certificate we expect to be presented. The canonical form of the hash used by many network managers is the SHA256 hash of the DER encoding of the certificate.

Validate the certificate (see above) then generate the sha256 hash:

$ openssl x509 -in eduroam.nis.vt.edu.crt -outform der | sha256sum
9b5163a3360f07b2dce2fd1e958c541687cf4c5360bb8adc87fa821c1c969910 -

It is recommended that you perform these steps yourself rather than trusting the certificate hash presented in the configurations below.

'''Note:''' As we are pinning the certificate instead of relying on a PKI, when NI&S rotates the certificates being used (at least every 2 years), the configuration will need to be updated to match the new certificate.

===A Word of Caution===
Although you can verify connection to the Virginia Tech RADIUS servers you must keep in mind that you are connecting to a network that you do not control. It is possible that there are network monitors in place which can record and potentially modify traffic.

We encourage you to take precautions against network eavesdropping and mischief (on the eduroam network, and in general). Potential countermeasures that one might want to employ include using [https://www.eff.org/HTTPS-EVERYWHERE HTTPS when connecting to sites], using a [https://www.computing.vt.edu/content/virtual-private-network VPN], or using the [https://www.torproject.org/ Tor Browser Bundle].

For general tips on improving your security while using the network, consider reading the EFF's [https://ssd.eff.org/ Surveillance Self-Defense] tips, reading [https://www.hokieprivacy.org/ Hokie Privacy], and/or contacting the [https://security.vt.edu/ Virginia Tech Information Security Office].

==NetworkManager Instructions==

In the list of wireless networks, select "eduroam". Set the following options:

* Wi-Fi security: WPA & WPA2 Enterprise
* Authentication: Protected EAP (PEAP)
* Anonymous identity: anonymous@vt.edu
* Domain: nis.vt.edu
* CA certificate: Select <code>/path/to/USERTrust_RSA_Certification_Authority.pem</code> via the file picker
* PEAP version: Automatic
* Inner authentication: MSCHAPv2
* Username: PID@vt.edu
* Password: YOUR_NETWORK_PASSWORD

[[File:Nm settings.png]]

==wpa_supplicant Instructions==

[http://w1.fi/wpa_supplicant/ wpa_supplicant] is a cross-platform supplicant which implements IEEE 802.1x/WPA and is used in many Linux/UNIX distributions.

In order to connect to the eduroam network, add the following to <code>/etc/wpa_supplicant/eduroam.conf</code> modifying the identity and password to reflect your PID and Network Password:

ctrl_interface=DIR=/run/wpa_supplicant GROUP=wheel
update_config=1
fast_reauth=1
ap_scan=1

network={
ssid="eduroam"
proto=RSN
key_mgmt=WPA-EAP
eap=PEAP
phase2="auth=MSCHAPV2"
anonymous_identity="anonymous@vt.edu"
#THIS HASH IS OUT OF DATE, PLEASE FOLLOW INSTRUCTIONS ABOVE
# if you prefer to pin the certificate
ca_cert="hash://server/sha256/216c5f2568c6e84860b12535efe93500623ccee999306b84260f951bcbd57b1a"
# if you prefer to dynamically validate the certificate by its cryptographic attributes
ca_cert="/path/to/USERTrust_RSA_Certification_Authority.pem"
domain_match="eduroam.nis.vt.edu"
identity="YourPidHere@vt.edu"
password="YourNetworkPasswordHere"
}

You can then connect to the network by running (where wlan0 is your wireless interface):

$ sudo wpa_supplicant -B -i wlan0 -c /etc/wpa_supplicant/eduroam.conf
$ sudo dhcpcd wlan0

On [[OpenBSD]], the process is a little more complicated:

# ifconfig wlan0 nwid eduroam wpa wpaakms 802.1x up
# /usr/local/sbin/wpa_supplicant -B -i wlan0 -c /etc/wpa_supplicant.conf
# dhclient wlan0
# ifconfig wlan0 inet6 autoconf

Alternate config options, besides domain_match are as follows (obviously not correct):

subject_match="/C=US/ST=CA/L=San Francisco/CN=Test AS/emailAddress=as@example.com"
domain_suffix_match="nis.vt.edu"

More thorough documentation is available at [https://w1.fi/cgit/hostap/plain/wpa_supplicant/wpa_supplicant.conf]

==netctl Instructions==
[https://wiki.archlinux.org/index.php/netctl netctl] is a network manager which is native to the ArchLinux distribution. netctl makes use of wpa_supplicant under the hood, and so the configuration is similar.

Put the following configuration in <code>/etc/netctl/eduroam</code> with your proper PID and Network Password. Further, this assumes that your wireless network device is wlan0, which you might have to change to match your system. The ca_cert line pins the server certificate and can be generated/validated using the mechanism described above.

Description='Federated Educational Wifi Network'
Interface=wlan0
Connection=wireless
Security=wpa-configsection

IP=dhcp
IP6=stateless

WPAConfigSection=(
'ssid="eduroam"'
'proto=RSN'
'key_mgmt=WPA-EAP'
'eap=PEAP'
'phase2="auth=MSCHAPV2"'
'anonymous_identity="anonymous@vt.edu"'
'ca_cert="hash://server/sha256/216c5f2568c6e84860b12535efe93500623ccee999306b84260f951bcbd57b1a"'
'domain_match="eduroam.nis.vt.edu"'
'identity="YourPidHere@vt.edu"'
'password="YourNetworkPasswordHere"'
)

The ConfigSection (as per the netctl.profile manpage) is just what you would put in a wpa_supplicant config. Again, note that the domain_match is ''less secure'' than ca_cert, but better than not checking at all.

Ensure that this file is owned by root and only readable by root:

$ sudo chown root:root /etc/netctl/eduroam
$ sudo chmod 600 /etc/netctl/eduroam

You can then start the connection using standard netctl methods:

$ sudo netctl start eduroam

== connman Instructions ==
This config should be useable with connman. Replace Passphrase and Identity with your Network password and PID@vt.edu, respectively.

<pre>
[global]
Name = eduroam
Description = Optionally put something descriptive here.

[service_wifi_3c15c2e29584_656475726f616d_managed_ieee8021x]
Type = wifi
Name = eduroam
EAP = peap
CACertFile = /etc/ssl/certs/USERTrust_RSA_Certification_Authority.pem
DomainMatch = eduroam.nis.vt.edu
AnonymousIdentity = anonymous@vt.edu
Phase2 = MSCHAPV2
Identity = PID@vt.edu
Passphrase = NETWORKPASSWORD
</pre>

==Android Instructions==

[[File:AndroidEduroamNoCert.png|170px|thumb|Sample Android configuration of eduroam, but crucially lacking certificate validation.]]

A sample configuration is available to the right, but as this configuration is currently lacking CA certificate validation, we do not at this time recommend connecting to the network.

The Identity needs to be modified to match your PID@vt.edu, and your Network Password needs to be entered in the Password field.

Steps:
* From the home screen, press the menu button and choose "Settings"→"Wireless & networks"→"Wi-Fi settings".
* Remove any existing entries for eduroam.
* From the "WiFi networks" listing, click on eduroam.
* Choose PEAP as the EAP method and MSCHAPv2 as the phase two authentication mechanism.
* Enter your pid@vt.edu for the identity
* Enter "anonymous@vt.edu" for the anonymous identity
* Enter your Network Password for the password
* Press "Connect".

'''TODO:''' Android certificate validation

Quick and dirty options for validating the eduroam certificate, in order from least secure to most secure:

# Do not validate: you will get online, but consider your connection to be as secure as a public hotspot
# (Android 7.1+ only) Use system certificates: This will check to make sure the certificate chains back to some CA in the system cert store. This is significantly better than no validation, but still not very good. You may also need to specify a domain. If so, use "vt.edu"
# Download and import the USERTrust Root CA: detailed instructions to come. Since you are still not checking the CN, it is only marginally better than using system certificates.
# Use the [https://play.google.com/store/apps/details?id=uk.ac.swansea.eduroamcat eduroam CAT] tool: this will setup the whole wireless profile and use the correct CA and verify the CN. As such, it is the preferred method. Warning, it is ugly. If you have an existing "eduroam" profile, you will need to remove it. When it prompts for the username and password, use <YOUR-PID>@vt.edu and your network password. It relies on geolocation to prompt for the profile for the right school. You may need to go outside to get a good GPS signal. If it is able to do geo-ip (e.g., you are connected to the "VirginiaTech" SSID), it gets you close enough.

==Frequently Asked Questions==
===Is eduroam free?===
eduroam at Virginia Tech is free for:
* VT affiliates with wireless entitlements (includes students) access and network passwords
* Users at other participating institutions

===Why is eduroam the preferred SSID?===
Using eduroam has several advantages:
* The unencrypted portion of your authentication optionally identifies you as "anonymous@vt.edu" rather than revealing your PID
* You have access to seamless roaming if you ever travel to another participating college campus
* The anonymous identity feature separates RADIUS authentication logs from the network access provider's logs

===Does eduroam support EAP-TLS?===
Currently, the Virginia Tech eduroam RADIUS servers are not configured for EAP-TLS.

==References==
<references/>

===Network Information Sources===
* [http://www.cns.vt.edu/html/wireless/wlan/index.html Communications Network Services: Wireless LAN]
* [http://computing.vt.edu/internet_and_web/internet_access/ipaddresses.html Virginia Tech IP Addresses]

[[Category:Howtos]]
[[Category:Campus computing resources]]
[[Category:Needs restoration]]

Pound vtluug

2019-01-17T02:44:40Z

Echarlie: /* History */

[[File:Irc-etiquette.jpg|thumb|right|alt=IRC etiquette|]]

'''#vtluug''' on <code>irc.oftc.net</code> is the [[Linux and Unix Users Group|LUUG]] [[Internet Relay Chat|IRC]] channel. It is a public, relatively unmoderated forum for general banter, especially focusing on VTLUUG operations.
If you have questions about this wiki, any even we're having, or general *nix, it is the best place to ask them.

If you ask a question, please stick around for a while (several hours) after asking; just because no one can help you
now does not mean that no one will be able to help you later. Also look at ESR's
[http://www.catb.org/esr/faqs/smart-questions.html how to ask questions the smart way]; it will help you when
someone decides to troll you.

Previously, we have had stringent rules on the channel, however, experience shows that the community is rather self-moderating. More importantly, the ops actively avoid using <code>/ban</code>

If you have logs, etc to post, use https://linx.vtluug.org or https://linx.li

==History==
Beginning in 2008, some folks began to idle on <code>irc.freenode.net</code> in <code>#vtluug</code>. In fall 2009, there were generally a dozen LUUG members, alumni and associates on at any given time.

On February 28, 2012, the approximately 30 members in the channel made the decision to migrate to <code>irc.oftc.net</code> due to persistent stability issues with Freenode and some issues that some members had with the staff. By 2014, there were as many as 40 to 50 students and others in the channel. Currently, there are often 20 to 30 LUUG members and alumni idling in the channel.

==Rules==
You will be kicked for an in progress flood only. There are no other rules. If you don't like somebody, use <code>/ignore</code>.

== Recommendations ==

* Don't set <code>/away</code> <ref>https://sackheads.org/~bnaylor/spew/away_msgs.html</ref> in an obnoxious way.
* Don't abuse the bots -- they will be told to ignore you
* Don't piss off the OPs (they don't keep @ for a reason)
* Wait around, if you have questions.
** You'll probably be trolled first. Sorry.
* NO WAREZ

==See also==
* [[Recommended_software#IRC_clients | IRC Clients]]
* [[Wadsworth]]
* [[Shell account tutorial]]

==External links==
* [https://bash.vtluug.org/ VT Bash (quotes)]
* [http://bash.org/ bash.org]

== References ==

[[Category:Infrastructure]]
[[Category:IRC]]