> I am the network administrator for one school of my > university and I am considering migrating our Windows 2000 > Server to Debian due to some stability issues and of course > the financial factors. > > We only have one windows server in the network and it is > providing nearly every service offered on our network. It is > configured with Active Directory and DNS, serves student web > pages, provides ftp access, acts as a file server, > authenticates logins, and is probably used to send > pornographic spam to the children of th world when I'm not > paying attention. > > Being one of Microsofts finest products, it provides ALMOST > an entire week of solid performance before a yet unknown > application kills the server process preventing all logins > including logging into or unlocking the console, meaning it > requires a press of the power button to shutdown windows. > The weekly reboots required to keep the server functional are > annoying because they always seem to be required when it is > least convienant for me to make the 30 min ride into work to > press the power button twice and drive home... so its time to > start working toward a more stable solution. > > I've been researching this problem for over 6 months trying > every far-out idea I come across to find the cause to no > avail... I give up, so either I rebuild the network with W2K > server, or go with linux. Considering I'll never get the > funds to upgrade to a new Windows server version in the > future, likely forcing me to go with linux at that point; I > figure I'll just get ahead of the game and go linux now. > > My questions for all of you very helpful type people are: > > 1. The server is a Dell PowerEdge 2500 dual Xeon, 1GB RAM > with a PERC 3/Di RAID controller, would I have any issues > with hardware support? I'm pretty sure I'll be ok, but I'd > love to have someone tell me that it's better than > supported... It's flawless." Or something close! > > 2. Is it possible to build and configure the server on a > spare workstation, then when I am satisfied with the > configuration and have tested everything, migrate the > configuration from the workstation to the actual server > hardware (I can't afford the down time it would take my > newbie ass to install and configure everything). If so, how > difficult is this and could I get a rough overview of the > process to get my research started? > > 3. I currently have 3 Debian servers on the network, one > LAMP server for our intranet and two 750 GB file servers > (one's a rsnapshot backup of most of the other) providing > data storage, and disk based backups of the windows server. > The file servers currently use winbind to authenticate their > Samba shares to the Active Directory... What will I have to > do so that these servers will still allow access once the > Windows Server is gone. Will I have to create 200+ users on > each of my Samba servers, or should I use some sort of > central authentication. Any advice on this issue would be welcome. > > 4. Our windows server currently runs Symantec AV daily to > try to keep the spread of viruses via the file server at a > minimum... Is there a equally good free product for linux > that I could use to scan the user data. I'm not worried much > about protecting the server from viruses cuz I know there > aren't many for linux... But I'd hate to have my users (who > can't seem to sit at the same computer twice) to spread it > around my labs. > > 5. Considering that I'm fairly inexperienced with linux I > would have to say that it is likely that my current windows > server is more secure than anything I would put together with > linux, apart from the rediculous holes within the OS itself > anyway. Is there an easy way to ensure a resonable level of > security without needing to research too deep into securing > linux, securing apache, securing ftp, securing... I don't > have the time to do much more than keep it patched once it's > set up. The server is behind a BSD router that is managed by > someone far more experienced with such things than I, so > other than the few ports I'll have forwarded in the router (SSH, HTTP, > FTP) the server should be relatively safe from outside attacks. > > 6. Any suggestions about migrating users and their data? > > 7. Finally, other than the Debian GNU/Linux 3.1 Bible, which > I understand is the best resource for all things Debian... > Are there any other texts I shouldn't go without in this quest. > > I'm sorry this is such a long post, I just wanted to try and > answer all your potential questions before they were asked. > I'm not looking for a detailed howto, I know how to research > and figure things out, I simply have a very hard time > deciding what is the best approach to most things in linux. > That and any pitfalls to watch outfor or issues I'm likely to > face if I follow your suggestions would be great so I don't > get discouraged before I'm done. > > > Once completed, this will be a far more complicated solution > than I have ever implemented with linux, so please try to > take it easy. I'm still a newbie, hopefully I'll feel > deserving of a better title once the project is complete! > > Here's 1/2 ton of thanks in advance, other half on completion > of the project! > > Joe
Thanks to all of you who have responded so far! Right now I am trying to decide how I will migrate from a test server I will be setting up to to the production server. I always work a project backwards when planning, that way I always know where I'm going. If I used dd to copy the disks, and assuming I didn't compile a custom kernel, should the changes in hardware really matter. Both machines will use smp kernels, so essentially wouldn't the new hardware be detected and just work? If not, I figure once I have the test server configured and ready for the real thing I can use dpkg --get-selections > file and dpkg --get-selections < file To replicate the installed packages on the production server. But that done, how do I replicate the configuration of those packages between machines. I simply need the configuration of all the packages, the structure of my OpenLDAP install, apache, ftp, samba, and any other customizations I make. Any accounts and data I created on the test server can be recreated. Is there a tool or other simple way to do this. Or should I just keep a log of every file I modify and just copy those files. Any advice would be appreciated. I really don't want to do this piecemeal as suggested, mostly because I think the first thing I would need to set up is ldap since other services may need to be configured to authenticate against it... and I'm not sure I want to try and figure out how to integrate ldap with a windows AD server for authentication. Does anyone have any experience replicating a Debian install from one machine to a entirely different machine? I'm sure it's been done, but what is the easiest way to maintain package configuration and account for the enormous changes in hardware? Joe -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]