https://wiki.itcollege.ee/api.php?action=feedcontributions&user=Vetuul&feedformat=atomICO wiki - User contributions [en]2024-03-29T11:44:25ZUser contributionsMediaWiki 1.41.0https://wiki.itcollege.ee/index.php?title=TalTech_VPN&diff=144075TalTech VPN2023-11-22T22:48:25Z<p>Vetuul: </p>
<hr />
<div>=Uni-ID=<br />
[https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kasutajakonto-ja-ligipaeaes-user-accounts-and-accesses/uni-id-ehk-digitaalne-identiteet about Uni-ID (EST/ENG)]<br />
<br />
Uni-ID is required to use TalTech VPN.<br />
<br />
=eduVPN=<br />
'''NB! Since July 2021 has been old [[#OpenVPN|OpenVPN]] service replaced by eduVPN, used for library.'''<br />
<br />
More information:<br />
* [https://eduvpn.taltech.ee/ eduVPN portal in TalTech - OpenVPN settings generation and download]<br />
* [https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kaugtoeoeuehendus-eduvpn how to configure in MS Windows (EST, ENG)]<br />
* [https://www.eduvpn.org/ about eduVPN]<br />
<br />
Usually generated OpenVPN settings are enough. Still there is a separate ''eduvpn-client'' possible to use:<br />
* [https://python-eduvpn-client.readthedocs.io/en/master/installation.html#debian-and-ubuntu Ubuntu and Debian client installation, configuration] (also Fedora, CentOS and manual installation via [https://en.wikipedia.org/wiki/Pip_(package_manager) pip] available)<br />
sudo apt install apt-transport-https curl<br />
curl -L https://app.eduvpn.org/linux/deb/eduvpn.key | sudo apt-key add -<br />
echo "deb https://app.eduvpn.org/linux/deb/ stable main" | sudo tee -a /etc/apt/sources.list.d/eduvpn.list<br />
sudo apt update<br />
sudo apt install eduvpn-client<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
<br />
For OpenVPN installation, [[#Installation_in_Debian.2FUbuntu|please see here]]<br />
<br />
For smart devices, there are an eduVPN clients available: [https://play.google.com/store/apps/details?id=nl.eduvpn.app Android] | [https://apps.apple.com/us/app/eduvpn-client/id1292557340 iOS], that makes connection via TAAT authentication.<br />
<br />
=Forticlient VPN=<br />
Does not allow to access the TTU library outside university. You will get only a secure VPN connection.<br />
<br />
* [https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn FortiClient guidance]<br />
<br />
==Packages==<br />
* clean client https://www.forticlient.com/downloads<br />
* for MS Windows, TalTech preconfigured software [https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn available here]<br />
* Debian packages<br />
** FortiClient (deprecated -> use OpenFortiGUI)<br />
**'''OpenFortiGUI - recommended'''<br />
*** repository https://apt.iteas.at (older: https://styrion.at/apt/)<br />
*** https://hadler.me/linux/openfortigui/<br />
<br />
==Usage==<br />
'''NB! About connecting using OpenFortiGUI''':<br />
* please use SUDO -E parameter in OpenfortiGUI settings! (File→Settings). Might be necessary (not usually) to disable temporarily for certificate retrieval in first time.<br />
* also it might be necessary to turn off the ''Set DNS'' parameter (see [https://github.com/theinvisible/openfortigui/issues/41 this report]). Choose Edit connection and under Options tab uncheck '''Options > Advanced > Set DNS''' so that openfortivpn does not handle DNS or overwrite ''/etc/resolv.conf''. Otherwise after disconnecting is Internet connectivity lost with error message ''Temporary failure in name resolution''.<br />
Also whenever needed, uncheck '''Options > PPPD > PPPD no peerdns''' so that pppd does handle DNS - and hopefully does the right thing.<br />
* on first connection attempt, the certificate must be accepted<br />
* next connection attempt can be actually connect via VPN<br />
* at file ''/etc/sudoers.d/openfortigui'' there is a line (will be created automatically during OpenFortiGUI setup):<br />
%sudo ALL=NOPASSWD:SETENV: /usr/bin/openfortigui --start-vpn *<br />
This means, that all users in group sudo can use it without password with superuser rights. Although running the app is regular (as user in group sudo) without actual sudo command.<br />
<br />
==Connecting==<br />
[https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn]<br />
* use your Uni-ID credentials to login ('''NB! without ''@ttu.ee''''')<br />
* Web: https://vpn.ttu.ee:443/<br />
* server: '''vpn.taltech.ee'''<br />
* port: 443<br />
<br />
'''... in IT College:'''<br />
* use your Uni-ID credentials to login ('''NB! without ''@ttu.ee''''')<br />
* Web: https://portal.itcollege.ee:10443/<br />
* server: '''portal.itcollege.ee'''<br />
* port: 10443<br />
<br />
In IT College there is an option to use SSH tunnel using http://enos.itcollege.ee/ server using your Uni-ID credentials. For convenient usage there is a [[Sshuttle]] (article in Estonian) available. This SSH tunnel is available also for students. MS Windows users [https://www.startpage.com/do/search?q=putty+SSH+tunnel can use puTTY]. Also macOS users [https://www.startpage.com/do/search?q=SSH+tunnel+macOS can use SSH tunnel].<br />
<br />
=OpenVPN=<br />
'''NB! Since July 2021 OpenVPN has been replaced by [[#eduVPN|eduVPN]].'''<br />
<br />
Allows to access the TTU library outside university. Additionally you will get a secure VPN connection. [[#Uni-ID|Uni-ID account]] is required.<br />
<br />
* [https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-ftp-kaudu-remote-connection-via-ftp guidance for old TORU]<br />
<br />
==Client software==<br />
* for MS Windows and macOS clients, please login https://toru.ttu.ee/ and download university-customized version directly from there<br />
** [https://openvpn.net/client-connect-vpn-for-windows/ official OpenVPN client for MS Windows] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-windows/ documentation]<br />
** [https://openvpn.net/client-connect-vpn-for-mac-os/ official OpenVPN client for macOS] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-macos/ documentation]<br />
* GNU/Linux https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-linux/<br />
* Android https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-android/<br />
* iOS https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-apple-ios/<br />
<br />
==Installation in Debian/Ubuntu==<br />
* open the terminal, e.g. CTRL+ALT+T and copy-paste the following line and press ''Enter''<br />
copy-paste in terminal: SHIFT+CTRL+C, SHIFT+CTRL+V<br />
sudo apt-get update && sudo apt-get install openvpn<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
You may want to search also ''openvpn-blacklist'' package, but it might be also deprecated and not available.<br />
* for GUI Network Manager:<br />
sudo apt-get update && sudo apt-get install network-manager-openvpn-gnome<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
You may want to search the package ''openvpn-systemd-resolved'' and also install it to integrate OpenVPN with systemd.<br />
<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Network Manager]</ref><br />
<br />
==Configuration==<br />
* download the preconfigured ''client.ovpn'' from https://toru.ttu.ee/<br />
* use your [[#Uni-ID|Uni-ID]] credentials to login and also later to authenticate in OpenVPN<br />
* for GNU/Linux in file ''client.ovpn'' after ''setenv PUSH_PEER_INFO'' please add the following lines and then save the file:<br />
''script-security 2''<br><br />
''up /etc/openvpn/update-resolv-conf''<br><br />
''down /etc/openvpn/update-resolv-conf''<br />
<br />
==Connecting in Debian/Ubuntu==<br />
* use your Uni-ID credentials<br />
* open the terminal, e.g. using CTRL+ALT+T<br />
* navigate to folder where the ''client.ovpn'' is saved or provide the full path<br />
* ''sudo openvpn --config client.ovpn'' or use more convenient way - the alias created below<br />
<br />
Usually there is possible to import *.ovpn files into graphical network manager<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Import .ovpn to Network Manager]</ref>. In Ubuntu 16.04 LTS cannot be imported current but in Ubuntu 18.04 LTS already can.<br />
<br />
==Convenient login in GNU/Linux==<br />
* open the terminal, e.g. using CTRL+ALT+T<br />
* create an alias:<br />
** ''nano ~/.bash_aliases'' #open CLI text editor<br />
** ''alias vpn-ttu='sudo openvpn --config /path/client.ovpn''' #add appropriate alias and path to ''client.ovpn'', then save the file<br />
* ''source ~/.bash_aliases'' (or reopen terminal or relogin)<br />
* add permissions to run OpenVPN without entering a password<br />
** ''sudo nano /etc/sudoers.d/permissions'' #the file name ''permissions'' could be replaced whatever else you like<br />
** ''username ALL=(ALL) NOPASSWD: /usr/sbin/openvpn'' #replace ''username'' with your real one and then save the file<br />
* type your new alias ''vpn-ttu'' in terminal to start a VPN session<br />
<br />
<br />
'''in nano text editor'''<br />
* save the file:<br />
** CTRL+O and ''Enter'' if you agree the proposed file name (or enter a new one if needed)<br />
** or F3<br />
* quit the file:<br />
** CTRL+X<br />
** or F2<br />
<br />
<br />
'''More information about...'''<br />
* ''sudoers'' at https://help.ubuntu.com/community/Sudoers<br />
* ''alias''<br />
** https://askubuntu.com/questions/1414/how-to-create-a-permanent-alias<br />
** EST [[Alias bash shellis]]<br />
** EST https://viki.pingviin.org/Alias<br />
<br />
=Benefits of TalTech VPN=<br />
* you have a secure tunnel over insecure network, e.g. public WiFi, mobile internet or similar<br />
* OpenVPN can be used for TalTech library and its paid databases outside TalTech:<br />
** EST https://www.taltech.ee/koik-andmebaasid<br />
** ENG https://www.taltech.ee/en/all-databases<br />
<br />
=TalTech helpdesk=<br />
* in case of questions, issues - please contact TalTech helpdesk<br />
** https://confluence.ttu.ee/it-info/<br />
** https://it.taltech.ee/ (choose website language if needed)<br />
** self-service: http://helpdesk.taltech.ee/ (to visit self-service you must own [[#Uni-ID|Uni-ID account]])<br />
<br />
=References=<br />
<references /><br />
<br />
[[Category:TalTech]]<br />
[[Category:Vaba_Tarkvara_Teadmuskeskus]]</div>Vetuulhttps://wiki.itcollege.ee/index.php?title=TalTech_VPN&diff=142762TalTech VPN2022-11-29T08:28:33Z<p>Vetuul: </p>
<hr />
<div>=Uni-ID=<br />
[https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kasutajakonto-ja-ligipaeaes-user-accounts-and-accesses/uni-id-ehk-digitaalne-identiteet What is Uni-ID guidance EST / ENG]<br />
<br />
Uni-ID is required to use TalTech VPN.<br />
<br />
=eduVPN=<br />
'''NB! Since July 2021 has been old [[#OpenVPN|OpenVPN]] service replaced by eduVPN, used for library.'''<br />
<br />
More information:<br />
* [https://eduvpn.taltech.ee/ eduVPN portal in TalTech - OpenVPN settings generation and download]<br />
* [https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kaugtoeoeuehendus-eduvpn how to configure in MS Windows (EST, ENG)] (redirects to [https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kaugtoeoeuehendus-eduvpn here])<br />
* [https://www.eduvpn.org/ about eduVPN]<br />
<br />
Usually generated OpenVPN settings are enough. Still there is a separate ''eduvpn-client'' possible to use:<br />
* [https://python-eduvpn-client.readthedocs.io/en/master/installation.html#debian-and-ubuntu Ubuntu and Debian client installation, configuration] (also Fedora, CentOS and manual installation via [https://en.wikipedia.org/wiki/Pip_(package_manager) pip] available)<br />
sudo apt install apt-transport-https curl<br />
curl -L https://app.eduvpn.org/linux/deb/eduvpn.key | sudo apt-key add -<br />
echo "deb https://app.eduvpn.org/linux/deb/ stable main" | sudo tee -a /etc/apt/sources.list.d/eduvpn.list<br />
sudo apt update<br />
sudo apt install eduvpn-client<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
<br />
For OpenVPN installation, [[#Installation_in_Debian.2FUbuntu|please see here]]<br />
<br />
For smart devices, there are an eduVPN clients available: [https://play.google.com/store/apps/details?id=nl.eduvpn.app Android] | [https://apps.apple.com/us/app/eduvpn-client/id1292557340 iOS], that makes connection via TAAT authentication.<br />
<br />
=Forticlient VPN=<br />
Does not allow to access the TTU library outside university. You will get only a secure VPN connection.<br />
<br />
* [https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn FortiClient guidance]<br />
<br />
==Packages==<br />
* clean client https://www.forticlient.com/downloads<br />
* for MS Windows, TalTech preconfigured [https://confluence.ttu.ee/it-info/it-arvuti-ja-oppetoeoekoht/kauguehendus-vpn/kauguehendus-forticlient-vpn available here]<br />
* [https://forticlient.com/downloads original FortiClient software packages (MS Windows, macOS, GNU/Linux, Android, iOS, Windows Phone, Chromebook)]<br />
* Debian packages<br />
** FortiClient (deprecated -> use OpenFortiGUI)<br />
**'''OpenFortiGUI - recommended'''<br />
*** repository https://apt.iteas.at (older: https://styrion.at/apt/)<br />
*** https://hadler.me/linux/openfortigui/<br />
<br />
==Usage==<br />
'''NB! About connecting using OpenFortiGUI''':<br />
* please use SUDO -E parameter in OpenfortiGUI settings! (File→Settings). Might be necessary (not usually) to disable temporarily for certificate retrieval in first time.<br />
* also it might be necessary to turn off the ''Set DNS'' parameter (see [https://github.com/theinvisible/openfortigui/issues/41 this report]). Uncheck '''Options > Advanced > Set DNS''' so that openfortivpn does not handle DNS or overwrite ''/etc/resolv.conf''. Otherwise after disconnecting is Internet connectivity lost with error message ''Temporary failure in name resolution''.<br />
Also whenever needed, uncheck '''Options > PPPD > PPPD no peerdns''' so that pppd does handle DNS - and hopefully does the right thing.<br />
* on first connection attempt, the certificate must be accepted<br />
* next connection attempt can be actually connect via VPN<br />
* at file ''/etc/sudoers.d/openfortigui'' there is a line:<br />
%sudo ALL=NOPASSWD:SETENV: /usr/bin/openfortigui --start-vpn *<br />
This means, that all users in group sudo can use it without password with superuser rights. Although running the app is regular (as user in group sudo) without actual sudo command.<br />
<br />
==Connecting==<br />
[https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn]<br />
* use your Uni-ID credentials to login ('''NB! without ''@ttu.ee''''')<br />
* Web: https://vpn.ttu.ee:443/<br />
* server: '''vpn.ttu.ee'''<br />
* port: 443<br />
<br />
'''... in IT College:'''<br />
* use your Uni-ID credentials to login ('''NB! without ''@ttu.ee''''')<br />
* Web: https://portal.itcollege.ee:10443/<br />
* server: '''portal.itcollege.ee'''<br />
* port: 10443<br />
<br />
In IT College there is an option to use SSH tunnel using http://enos.itcollege.ee/ server using your Uni-ID credentials. For convenient usage there is a [[Sshuttle]] (article in Estonian) available. This SSH tunnel is available also for students. MS Windows users [https://www.startpage.com/do/search?q=putty+SSH+tunnel can use puTTY]. Also macOS users [https://www.startpage.com/do/search?q=SSH+tunnel+macOS can use SSH tunnel].<br />
<br />
=OpenVPN=<br />
'''NB! Since July 2021 OpenVPN has been replaced by [[#eduVPN|eduVPN]].'''<br />
<br />
Allows to access the TTU library outside university. Additionally you will get a secure VPN connection. [[#Uni-ID|Uni-ID account]] is required.<br />
<br />
* [https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-ftp-kaudu-remote-connection-via-ftp guidance for old TORU]<br />
<br />
==Client software==<br />
* for MS Windows and macOS clients, please login https://toru.ttu.ee/ and download university-customized version directly from there<br />
** [https://openvpn.net/client-connect-vpn-for-windows/ official OpenVPN client for MS Windows] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-windows/ documentation]<br />
** [https://openvpn.net/client-connect-vpn-for-mac-os/ official OpenVPN client for macOS] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-macos/ documentation]<br />
* GNU/Linux https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-linux/<br />
* Android https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-android/<br />
* iOS https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-apple-ios/<br />
<br />
==Installation in Debian/Ubuntu==<br />
* open the terminal, e.g. CTRL+ALT+T and copy-paste the following line and press ''Enter''<br />
copy-paste in terminal: SHIFT+CTRL+C, SHIFT+CTRL+V<br />
sudo apt-get update && sudo apt-get install openvpn<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
You may want to search also ''openvpn-blacklist'' package, but it might be also deprecated and not available.<br />
* for GUI Network Manager:<br />
sudo apt-get update && sudo apt-get install network-manager-openvpn-gnome<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
You may want to search the package ''openvpn-systemd-resolved'' and also install it to integrate OpenVPN with systemd.<br />
<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Network Manager]</ref><br />
<br />
==Configuration==<br />
* download the preconfigured ''client.ovpn'' from https://toru.ttu.ee/<br />
* use your [[#Uni-ID|Uni-ID]] credentials to login and also later to authenticate in OpenVPN<br />
* for GNU/Linux in file ''client.ovpn'' after ''setenv PUSH_PEER_INFO'' please add the following lines and then save the file:<br />
''script-security 2''<br><br />
''up /etc/openvpn/update-resolv-conf''<br><br />
''down /etc/openvpn/update-resolv-conf''<br />
<br />
==Connecting in Debian/Ubuntu==<br />
* use your Uni-ID credentials<br />
* open the terminal, e.g. using CTRL+ALT+T<br />
* navigate to folder where the ''client.ovpn'' is saved or provide the full path<br />
* ''sudo openvpn --config client.ovpn'' or use more convenient way - the alias created below<br />
<br />
Usually there is possible to import *.ovpn files into graphical network manager<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Import .ovpn to Network Manager]</ref>. In Ubuntu 16.04 LTS cannot be imported current but in Ubuntu 18.04 LTS already can.<br />
<br />
==Convenient login in GNU/Linux==<br />
* open the terminal, e.g. using CTRL+ALT+T<br />
* create an alias:<br />
** ''nano ~/.bash_aliases'' #open CLI text editor<br />
** ''alias vpn-ttu='sudo openvpn --config /path/client.ovpn''' #add appropriate alias and path to ''client.ovpn'', then save the file<br />
* ''source ~/.bash_aliases'' (or reopen terminal or relogin)<br />
* add permissions to run OpenVPN without entering a password<br />
** ''sudo nano /etc/sudoers.d/permissions'' #the file name ''permissions'' could be replaced whatever else you like<br />
** ''username ALL=(ALL) NOPASSWD: /usr/sbin/openvpn'' #replace ''username'' with your real one and then save the file<br />
* type your new alias ''vpn-ttu'' in terminal to start a VPN session<br />
<br />
<br />
'''in nano text editor'''<br />
* save the file:<br />
** CTRL+O and ''Enter'' if you agree the proposed file name (or enter a new one if needed)<br />
** or F3<br />
* quit the file:<br />
** CTRL+X<br />
** or F2<br />
<br />
<br />
'''More information about...'''<br />
* ''sudoers'' at https://help.ubuntu.com/community/Sudoers<br />
* ''alias''<br />
** https://askubuntu.com/questions/1414/how-to-create-a-permanent-alias<br />
** EST [[Alias bash shellis]]<br />
** EST https://viki.pingviin.org/Alias<br />
<br />
=Benefits of TalTech VPN=<br />
* you have a secure tunnel over insecure network, e.g. public WiFi, mobile internet or similar<br />
* OpenVPN can be used for TalTech library and its paid databases outside TalTech:<br />
** EST https://www.taltech.ee/koik-andmebaasid<br />
** ENG https://www.taltech.ee/en/all-databases<br />
<br />
=TalTech helpdesk=<br />
* in case of questions, issues - please contact TalTech helpdesk<br />
** https://confluence.ttu.ee/it-info/<br />
** https://it.taltech.ee/ (choose website language if needed)<br />
** self-service: http://helpdesk.taltech.ee/ (to visit self-service you must own [[#Uni-ID|Uni-ID account]])<br />
<br />
=References=<br />
<references /><br />
<br />
[[Category:TalTech]]<br />
[[Category:Vaba_Tarkvara_Teadmuskeskus]]</div>Vetuulhttps://wiki.itcollege.ee/index.php?title=TalTech_VPN&diff=142761TalTech VPN2022-11-28T22:39:04Z<p>Vetuul: </p>
<hr />
<div>=Uni-ID=<br />
[https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kasutajakonto-ja-ligipaeaes-user-accounts-and-accesses/uni-id-ehk-digitaalne-identiteet What is Uni-ID guidance EST / ENG]<br />
<br />
Uni-ID is required to use TalTech VPN.<br />
<br />
=eduVPN=<br />
'''NB! Since July 2021 has been old [[#OpenVPN|OpenVPN]] service replaced by eduVPN, used for library.'''<br />
<br />
More information:<br />
* [https://eduvpn.taltech.ee/ eduVPN portal in TalTech - OpenVPN settings generation and download]<br />
* [https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kaugtoeoeuehendus-eduvpn how to configure in MS Windows (EST, ENG)] (redirects to [https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kaugtoeoeuehendus-eduvpn here])<br />
* [https://www.eduvpn.org/ about eduVPN]<br />
<br />
Usually generated OpenVPN settings are enough. Still there is a separate ''eduvpn-client'' possible to use:<br />
* [https://python-eduvpn-client.readthedocs.io/en/master/installation.html#debian-and-ubuntu Ubuntu and Debian client installation, configuration] (also Fedora, CentOS and manual installation via [https://en.wikipedia.org/wiki/Pip_(package_manager) pip] available)<br />
sudo apt install apt-transport-https curl<br />
curl -L https://app.eduvpn.org/linux/deb/eduvpn.key | sudo apt-key add -<br />
echo "deb https://app.eduvpn.org/linux/deb/ stable main" | sudo tee -a /etc/apt/sources.list.d/eduvpn.list<br />
sudo apt update<br />
sudo apt install eduvpn-client<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
<br />
For OpenVPN installation, [[#Installation_in_Debian.2FUbuntu|please see here]]<br />
<br />
For smart devices, there are an eduVPN clients available: [https://play.google.com/store/apps/details?id=nl.eduvpn.app Android] | [https://apps.apple.com/us/app/eduvpn-client/id1292557340 iOS], that makes connection via TAAT authentication.<br />
<br />
=Forticlient VPN=<br />
Does not allow to access the TTU library outside university. You will get only a secure VPN connection.<br />
<br />
* [https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn FortiClient guidance]<br />
<br />
==Packages==<br />
* clean client https://www.forticlient.com/downloads<br />
* for MS Windows, TalTech preconfigured [https://confluence.ttu.ee/it-info/it-arvuti-ja-oppetoeoekoht/kauguehendus-vpn/kauguehendus-forticlient-vpn available here]<br />
* [https://forticlient.com/downloads original FortiClient software packages (MS Windows, macOS, GNU/Linux, Android, iOS, Windows Phone, Chromebook)]<br />
* Debian packages<br />
** FortiClient (deprecated -> use OpenFortiGUI)<br />
**'''OpenFortiGUI - recommended'''<br />
*** repository https://apt.iteas.at (older: https://styrion.at/apt/)<br />
*** https://hadler.me/linux/openfortigui/<br />
<br />
==Usage==<br />
'''NB! About connecting using OpenFortiGUI''':<br />
* please use SUDO -E parameter in OpenfortiGUI settings! (File→Settings). Might be necessary (not usually) to disable temporarily for certificate retrieval in first time.<br />
* also it might be necessary to turn off the ''Set DNS'' parameter (see [https://github.com/theinvisible/openfortigui/issues/41 this report]). Uncheck '''Options > Advanced > Set DNS''' so that openfortivpn does not handle DNS or overwrite ''/etc/resolv.conf''. Otherwise after disconnecting is Internet connectivity lost with error message ''Temporary failure in name resolution''.<br />
Also whenever needed, uncheck '''Options > PPPD > PPPD no peerdns''' so that pppd does handle DNS - and hopefully does the right thing.<br />
* on first connection attempt, the certificate must be accepted<br />
* next connection attempt can be actually connect via VPN<br />
* at file ''/etc/sudoers.d/openfortigui'' there is a line:<br />
%sudo ALL=NOPASSWD:SETENV: /usr/bin/openfortigui --start-vpn *<br />
This means, that all users in group sudo can use it without password with superuser rights. Although running the app is regular (as user in group sudo) without actual sudo command.<br />
<br />
==Connecting==<br />
[https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn]<br />
* use your Uni-ID credentials to login ('''NB! without ''@ttu.ee''''')<br />
* Web: https://vpn.ttu.ee:443/<br />
* server: '''vpn.ttu.ee'''<br />
* port: 443<br />
<br />
'''... in IT College:'''<br />
* use your Uni-ID credentials to login ('''NB! without ''@ttu.ee''''')<br />
* Web: https://portal.itcollege.ee:10443/<br />
* server: '''portal.itcollege.ee'''<br />
* port: 10443<br />
<br />
In IT College there is an option to use SSH tunnel using http://enos.itcollege.ee/ server using your IT College credentials. For convenient usage there is a [[Sshuttle]] (article in Estonian) available. This SSH tunnel is available also for students. MS Windows users [https://www.startpage.com/do/search?q=putty+SSH+tunnel can use puTTY]. Also macOS users [https://www.startpage.com/do/search?q=SSH+tunnel+macOS can use SSH tunnel].<br />
<br />
=OpenVPN=<br />
'''NB! Since July 2021 has been replaced by [[#eduVPN|eduVPN]].'''<br />
<br />
Allows to access the TTU library outside university. Additionally you will get a secure VPN connection. [[#Uni-ID|Uni-ID account]] is required.<br />
<br />
* [https://confluence.ttu.ee/it-info/it-arvuti-ja-oppetoeoekoht/kauguehendus-vpn/kauguehendus-toru guidance for old TORU]<br />
<br />
==Client software==<br />
* for MS Windows and macOS clients, please login https://toru.ttu.ee/ and download university-customized version directly from there<br />
** [https://openvpn.net/client-connect-vpn-for-windows/ official OpenVPN client for MS Windows] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-windows/ documentation]<br />
** [https://openvpn.net/client-connect-vpn-for-mac-os/ official OpenVPN client for macOS] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-macos/ documentation]<br />
* GNU/Linux https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-linux/<br />
* Android https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-android/<br />
* iOS https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-apple-ios/<br />
<br />
==Installation in Debian/Ubuntu==<br />
* open the terminal, e.g. CTRL+ALT+T and copy-paste the following line and press ''Enter''<br />
copy-paste in terminal: SHIFT+CTRL+C, SHIFT+CTRL+V<br />
sudo apt-get update && sudo apt-get install openvpn<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
You may want to search also ''openvpn-blacklist'' package, but it might be also deprecated and not available.<br />
* for GUI Network Manager:<br />
sudo apt-get update && sudo apt-get install network-manager-openvpn-gnome<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
You may want to search the package ''openvpn-systemd-resolved'' and also install it to integrate OpenVPN with systemd.<br />
<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Network Manager]</ref><br />
<br />
==Configuration==<br />
* download the preconfigured ''client.ovpn'' from https://toru.ttu.ee/<br />
* use your [[#Uni-ID|Uni-ID]] credentials to login and also later to authenticate in OpenVPN<br />
* for GNU/Linux in file ''client.ovpn'' after ''setenv PUSH_PEER_INFO'' please add the following lines and then save the file:<br />
''script-security 2''<br><br />
''up /etc/openvpn/update-resolv-conf''<br><br />
''down /etc/openvpn/update-resolv-conf''<br />
<br />
==Connecting in Debian/Ubuntu==<br />
* use your Uni-ID credentials<br />
* open the terminal, e.g. using CTRL+ALT+T<br />
* navigate to folder where the ''client.ovpn'' is saved or provide the full path<br />
* ''sudo openvpn --config client.ovpn'' or use more convenient way - the alias created below<br />
<br />
Usually there is possible to import *.ovpn files into graphical network manager<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Import .ovpn to Network Manager]</ref>. In Ubuntu 16.04 LTS cannot be imported current but in Ubuntu 18.04 LTS already can.<br />
<br />
==Convenient login in GNU/Linux==<br />
* open the terminal, e.g. using CTRL+ALT+T<br />
* create an alias:<br />
** ''nano ~/.bash_aliases'' #open CLI text editor<br />
** ''alias vpn-ttu='sudo openvpn --config /path/client.ovpn''' #add appropriate alias and path to ''client.ovpn'', then save the file<br />
* ''source ~/.bash_aliases'' (or reopen terminal or relogin)<br />
* add permissions to run OpenVPN without entering a password<br />
** ''sudo nano /etc/sudoers.d/permissions'' #the file name ''permissions'' could be replaced whatever else you like<br />
** ''username ALL=(ALL) NOPASSWD: /usr/sbin/openvpn'' #replace ''username'' with your real one and then save the file<br />
* type your new alias ''vpn-ttu'' in terminal to start a VPN session<br />
<br />
<br />
'''in nano text editor'''<br />
* save the file:<br />
** CTRL+O and ''Enter'' if you agree the proposed file name (or enter a new one if needed)<br />
** or F3<br />
* quit the file:<br />
** CTRL+X<br />
** or F2<br />
<br />
<br />
'''More information about...'''<br />
* ''sudoers'' at https://help.ubuntu.com/community/Sudoers<br />
* ''alias''<br />
** https://askubuntu.com/questions/1414/how-to-create-a-permanent-alias<br />
** EST [[Alias bash shellis]]<br />
** EST https://viki.pingviin.org/Alias<br />
<br />
=Benefits of TalTech VPN=<br />
* you have a secure tunnel over insecure network, e.g. public WiFi, mobile internet or similar<br />
* OpenVPN can be used for TalTech library and its paid databases outside TalTech:<br />
** EST https://www.taltech.ee/koik-andmebaasid<br />
** ENG https://www.taltech.ee/en/all-databases<br />
<br />
=TalTech helpdesk=<br />
* in case of questions, issues - please contact TalTech helpdesk<br />
** https://confluence.ttu.ee/it-info/<br />
** https://it.taltech.ee/ (choose website language if needed)<br />
** self-service: http://helpdesk.taltech.ee/ (to visit self-service you must own [[#Uni-ID|Uni-ID account]])<br />
<br />
=References=<br />
<references /><br />
<br />
[[Category:TalTech]]<br />
[[Category:Vaba_Tarkvara_Teadmuskeskus]]</div>Vetuulhttps://wiki.itcollege.ee/index.php?title=TalTech_VPN&diff=142760TalTech VPN2022-11-28T22:30:17Z<p>Vetuul: </p>
<hr />
<div>=Uni-ID=<br />
[https://confluence.ttu.ee/it-info/it-arvuti-ja-oppetoeoekoht/kasutajakonto-ja-ligipaeaes/uni-id-ehk-digitaalne-identiteet guidance EST / ENG]<br />
<br />
Uni-ID is required to use TalTech VPN.<br />
<br />
=eduVPN=<br />
'''NB! Since July 2021 has been old [[#OpenVPN|OpenVPN]] service replaced by eduVPN, used for library.'''<br />
<br />
More information:<br />
* [https://eduvpn.taltech.ee/ eduVPN portal in TalTech - OpenVPN settings generation and download]<br />
* [https://confluence.ttu.ee/x/_paaAg how to configure in MS Windows (EST, ENG)] (redirects to [https://confluence.ttu.ee/it-info/kauguehendus-vpn/kaugtoeoeuehendus-eduvpn here])<br />
* [https://www.eduvpn.org/ about eduVPN]<br />
<br />
Usually generated OpenVPN settings are enough. Still there is a separate ''eduvpn-client'' possible to use:<br />
* [https://python-eduvpn-client.readthedocs.io/en/master/installation.html#debian-and-ubuntu Ubuntu and Debian client installation, configuration] (also Fedora, CentOS and manual installation via [https://en.wikipedia.org/wiki/Pip_(package_manager) pip] available)<br />
sudo apt install apt-transport-https curl<br />
curl -L https://app.eduvpn.org/linux/deb/eduvpn.key | sudo apt-key add -<br />
echo "deb https://app.eduvpn.org/linux/deb/ stable main" | sudo tee -a /etc/apt/sources.list.d/eduvpn.list<br />
sudo apt update<br />
sudo apt install eduvpn-client<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
<br />
For OpenVPN installation, [[#Installation_in_Debian.2FUbuntu|please see here]]<br />
<br />
For smart devices, there are an eduVPN clients available: [https://play.google.com/store/apps/details?id=nl.eduvpn.app Android] | [https://apps.apple.com/us/app/eduvpn-client/id1292557340 iOS], that makes connection via TAAT authentication.<br />
<br />
=Forticlient VPN=<br />
Does not allow to access the TTU library outside university. You will get only a secure VPN connection.<br />
<br />
* [https://confluence.ttu.ee/it-info/it-arvuti-ja-oppetoeoekoht/kauguehendus-vpn/kauguehendus-forticlient-vpn FortiClient guidance]<br />
<br />
==Packages==<br />
* clean client https://www.forticlient.com/downloads<br />
* for MS Windows, TalTech preconfigured [https://confluence.ttu.ee/it-info/it-arvuti-ja-oppetoeoekoht/kauguehendus-vpn/kauguehendus-forticlient-vpn available here]<br />
* for MS Windows, [https://portal.itcollege.ee:10443/SslvpnClient.exe IT College client] (requires login beforehand, usually older version than original one from Fortinet)<br />
* [https://forticlient.com/downloads original FortiClient software packages (MS Windows, macOS, GNU/Linux, Android, iOS, Windows Phone, Chromebook)]<br />
* Debian packages<br />
** FortiClient (deprecated -> use OpenFortiGUI)<br />
**'''OpenFortiGUI - recommended'''<br />
*** repository https://apt.iteas.at (older: https://styrion.at/apt/)<br />
*** https://hadler.me/linux/openfortigui/<br />
<br />
==Usage==<br />
'''NB! About connecting using OpenFortiGUI''':<br />
* please use SUDO -E parameter in OpenfortiGUI settings! (File→Settings). Might be necessary (not usually) to disable temporarily for certificate retrieval in first time.<br />
* also it might be necessary to turn off the ''Set DNS'' parameter (see [https://github.com/theinvisible/openfortigui/issues/41 this report]). Uncheck '''Options > Advanced > Set DNS''' so that openfortivpn does not handle DNS or overwrite ''/etc/resolv.conf''. Otherwise after disconnecting is Internet connectivity lost with error message ''Temporary failure in name resolution''.<br />
Also whenever needed, uncheck '''Options > PPPD > PPPD no peerdns''' so that pppd does handle DNS - and hopefully does the right thing.<br />
* on first connection attempt, the certificate must be accepted<br />
* next connection attempt can be actually connect via VPN<br />
* at file ''/etc/sudoers.d/openfortigui'' there is a line:<br />
%sudo ALL=NOPASSWD:SETENV: /usr/bin/openfortigui --start-vpn *<br />
This means, that all users in group sudo can use it without password with superuser rights. Although running the app is regular (as user in group sudo) without actual sudo command.<br />
<br />
==Connecting==<br />
[https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn https://confluence.ttu.ee/it-info/arvuti-ja-oppetoeoekoht-workplace-services/kauguehendus-vpn-remote-working-vpn/kauguehendus-forticlient-vpn]<br />
* use your Uni-ID credentials to login ('''NB! without ''@ttu.ee''''')<br />
* Web: https://vpn.ttu.ee:443/<br />
* server: '''vpn.ttu.ee'''<br />
* port: 443<br />
<br />
'''... in IT College:'''<br />
* use your Uni-ID credentials to login ('''NB! without ''@ttu.ee''''')<br />
* Web: https://portal.itcollege.ee:10443/<br />
* server: '''portal.itcollege.ee'''<br />
* port: 10443<br />
<br />
In IT College there is an option to use SSH tunnel using http://enos.itcollege.ee/ server using your IT College credentials. For convenient usage there is a [[Sshuttle]] (article in Estonian) available. This SSH tunnel is available also for students. MS Windows users [https://www.startpage.com/do/search?q=putty+SSH+tunnel can use puTTY]. Also macOS users [https://www.startpage.com/do/search?q=SSH+tunnel+macOS can use SSH tunnel].<br />
<br />
=OpenVPN=<br />
'''NB! Since July 2021 has been replaced by [[#eduVPN|eduVPN]].'''<br />
<br />
Allows to access the TTU library outside university. Additionally you will get a secure VPN connection. [[#Uni-ID|Uni-ID account]] is required.<br />
<br />
* [https://confluence.ttu.ee/it-info/it-arvuti-ja-oppetoeoekoht/kauguehendus-vpn/kauguehendus-toru guidance for old TORU]<br />
<br />
==Client software==<br />
* for MS Windows and macOS clients, please login https://toru.ttu.ee/ and download university-customized version directly from there<br />
** [https://openvpn.net/client-connect-vpn-for-windows/ official OpenVPN client for MS Windows] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-windows/ documentation]<br />
** [https://openvpn.net/client-connect-vpn-for-mac-os/ official OpenVPN client for macOS] | [https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-macos/ documentation]<br />
* GNU/Linux https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-linux/<br />
* Android https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-android/<br />
* iOS https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-apple-ios/<br />
<br />
==Installation in Debian/Ubuntu==<br />
* open the terminal, e.g. CTRL+ALT+T and copy-paste the following line and press ''Enter''<br />
copy-paste in terminal: SHIFT+CTRL+C, SHIFT+CTRL+V<br />
sudo apt-get update && sudo apt-get install openvpn<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
You may want to search also ''openvpn-blacklist'' package, but it might be also deprecated and not available.<br />
* for GUI Network Manager:<br />
sudo apt-get update && sudo apt-get install network-manager-openvpn-gnome<br />
sudo ldconfig && sudo dpkg --configure -a && sudo apt-get clean<br />
You may want to search the package ''openvpn-systemd-resolved'' and also install it to integrate OpenVPN with systemd.<br />
<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Network Manager]</ref><br />
<br />
==Configuration==<br />
* download the preconfigured ''client.ovpn'' from https://toru.ttu.ee/<br />
* use your [[#Uni-ID|Uni-ID]] credentials to login and also later to authenticate in OpenVPN<br />
* for GNU/Linux in file ''client.ovpn'' after ''setenv PUSH_PEER_INFO'' please add the following lines and then save the file:<br />
''script-security 2''<br><br />
''up /etc/openvpn/update-resolv-conf''<br><br />
''down /etc/openvpn/update-resolv-conf''<br />
<br />
==Connecting in Debian/Ubuntu==<br />
* use your Uni-ID credentials<br />
* open the terminal, e.g. using CTRL+ALT+T<br />
* navigate to folder where the ''client.ovpn'' is saved or provide the full path<br />
* ''sudo openvpn --config client.ovpn'' or use more convenient way - the alias created below<br />
<br />
Usually there is possible to import *.ovpn files into graphical network manager<ref>[https://www.cyberciti.biz/faq/linux-import-openvpn-ovpn-file-with-networkmanager-commandline/ Import .ovpn to Network Manager]</ref>. In Ubuntu 16.04 LTS cannot be imported current but in Ubuntu 18.04 LTS already can.<br />
<br />
==Convenient login in GNU/Linux==<br />
* open the terminal, e.g. using CTRL+ALT+T<br />
* create an alias:<br />
** ''nano ~/.bash_aliases'' #open CLI text editor<br />
** ''alias vpn-ttu='sudo openvpn --config /path/client.ovpn''' #add appropriate alias and path to ''client.ovpn'', then save the file<br />
* ''source ~/.bash_aliases'' (or reopen terminal or relogin)<br />
* add permissions to run OpenVPN without entering a password<br />
** ''sudo nano /etc/sudoers.d/permissions'' #the file name ''permissions'' could be replaced whatever else you like<br />
** ''username ALL=(ALL) NOPASSWD: /usr/sbin/openvpn'' #replace ''username'' with your real one and then save the file<br />
* type your new alias ''vpn-ttu'' in terminal to start a VPN session<br />
<br />
<br />
'''in nano text editor'''<br />
* save the file:<br />
** CTRL+O and ''Enter'' if you agree the proposed file name (or enter a new one if needed)<br />
** or F3<br />
* quit the file:<br />
** CTRL+X<br />
** or F2<br />
<br />
<br />
'''More information about...'''<br />
* ''sudoers'' at https://help.ubuntu.com/community/Sudoers<br />
* ''alias''<br />
** https://askubuntu.com/questions/1414/how-to-create-a-permanent-alias<br />
** EST [[Alias bash shellis]]<br />
** EST https://viki.pingviin.org/Alias<br />
<br />
=Benefits of TalTech VPN=<br />
* you have a secure tunnel over insecure network, e.g. public WiFi, mobile internet or similar<br />
* OpenVPN can be used for TalTech library and its paid databases outside TalTech:<br />
** EST https://www.taltech.ee/koik-andmebaasid<br />
** ENG https://www.taltech.ee/en/all-databases<br />
<br />
=TalTech helpdesk=<br />
* in case of questions, issues - please contact TalTech helpdesk<br />
** https://confluence.ttu.ee/it-info/<br />
** https://it.taltech.ee/ (choose website language if needed)<br />
** self-service: http://helpdesk.taltech.ee/ (to visit self-service you must own [[#Uni-ID|Uni-ID account]])<br />
<br />
=References=<br />
<references /><br />
<br />
[[Category:TalTech]]<br />
[[Category:Vaba_Tarkvara_Teadmuskeskus]]</div>Vetuulhttps://wiki.itcollege.ee/index.php?title=Main_Page&diff=141535Main Page2022-04-22T10:24:52Z<p>Vetuul: http > https link change</p>
<hr />
<div>__NOTOC__<br />
<br />
== [[English|English version of Taltech IT College wiki]]==<br />
<br />
= TalTech IT Kolledži wiki =<br />
==Muutmiseks kasutage Uni-ID kasutajat.==<br />
<br />
==Õppetöö==<br />
<br />
* [https://wiki.itcollege.ee/index.php/I253_Informatika_eelkursus Informaatika eelkursus]<br />
* [[Erialatutvustus ISa ja ISd|Erialatutvustus IT süsteemide administreerimine (ISa) ja IT süsteemide arendus (ISd) õppekavadele]]<br />
* [[Erialatutvustus ISa ja ISd kaugõppele]]<br />
* [https://wiki.itcollege.ee/index.php/Category:IT_infrastruktuuri_teenused IT infrastruktuuri teenused]<br />
* [https://wiki.itcollege.ee/index.php/Category:Vormistusjuhend Üliõpilastööde vormistamise juhend]<br />
* [https://wiki.itcollege.ee/index.php/Category:Lõputööd Lõputööde vormistamine]<br />
* [https://wiki.itcollege.ee/index.php/Category:Praktika Praktika ideed ja korraldus]<br />
* [https://wiki.itcollege.ee/index.php/Category:Operatsioonis%C3%BCsteemide_administreerimine_ja_sidumine Operatsioonisüsteemide administreerimine ja sidumine]<br />
* [[Deploying IT Infrastructure Solutions|Intensiivõppe nädal (inglise keeles)]]<br />
* [https://wiki.itcollege.ee/index.php/Category:Traadita_side_alused Traadita side alused]<br />
* [https://wiki.itcollege.ee/index.php/Category:Skriptimiskeeled Skriptimiskeeled]<br />
* [https://wiki.itcollege.ee/index.php/Category:Andmesalvestustehnoloogiad Andmesalvestustehnoloogiad]<br />
* [[Linuxi administreerimine]]<br />
* [[IT eetilised, sotsiaalsed ja professionaalsed aspektid]]<br />
* [[Sissejuhatus infotehnoloogiasse ja riistvarasse]]<br />
<br />
<br />
===Microsofti ained===<br />
Arendus<br />
* [https://wiki.itcollege.ee/index.php/Category:Programmeerimine_CSharp_keeles Programmeerimine C# keeles]<br />
* [https://wiki.itcollege.ee/index.php/Category:Veebirakenduste_loomine_ASP.NET_abil Veebirakenduste loomine ASP.NET abil]<br />
* [https://wiki.itcollege.ee/index.php/Category:V%C3%B5rgurakendused_II:_hajuss%C3%BCsteemide_ehitamine Võrgurakendused II: hajussüsteemide ehitamine]<br />
<br />
* [https://wiki.itcollege.ee/index.php/Category:Võrgurakendused_II:_hajussüsteemide_ehitamine(kaugõpe) Võrgurakendused II: hajussüsteemide ehitamine(kaugõpe)]<br />
* [https://wiki.itcollege.ee/index.php/Category:V%C3%B5rgurakendused_II:_hajuss%C3%BCsteemide_ehitamine%28%C3%B5htu%C3%B5pe%29 Võrgurakendused II: hajussüsteemide ehitamine(õhtuõpe)]<br />
*[https://wiki.itcollege.ee/index.php/Category:Veebirakenduste_loomine_ASP.NET_abil%28kaug%C3%B5pe%29 Veebirakenduste loomine ASP.NET abil(kaugõpe)]<br />
Haldus<br />
* [https://wiki.itcollege.ee/index.php/Category:Windows_Server_administreerimine Windows Server administreerimine]<br />
* [https://wiki.itcollege.ee/index.php/Category:Windows-t%C3%B6%C3%B6jaamade_haldamine Windows-tööjaamade haldamine]<br />
<br />
==Ürituste materjale==<br />
<br />
* [[Vaba tarkvara päev 2011]]<br />
<br />
<br />
==Muud teemad==<br />
<br />
* [https://wiki.itcollege.ee/index.php/Category:%C3%95ppekavade_arutelu Õppekavade arutelu]<br />
* [[Õppekavade arendusversioonid]]<br />
* [https://wiki.itcollege.ee/index.php/Category:Sisekoolitused Sisekoolitused]<br />
* [https://wiki.itcollege.ee/index.php/Category:ITK_veeb ITK veebi arendus]<br />
* [https://wiki.itcollege.ee/index.php/Category:Ingliskeelne_õppekava ITK ingliskeelse õppekava arendus]<br />
* [https://wiki.itcollege.ee/index.php/Category:Robootika ITK robootikaklubi]<br />
* [https://wiki.itcollege.ee/index.php/Category:Linux Linux ITK-s]<br />
* [https://wiki.itcollege.ee/index.php/Category:LPI Linux Professional Institute'i õppeprogramm]<br />
* [https://wiki.itcollege.ee/index.php/Category:Microsoft_IT_Academy Microsoft IT Academy]<br />
* [[Estobuntu jätkuprojekt]]<br />
<br />
*[[Special:Categories|Kategooriad]]<br />
<br />
== Infot MediaWiki kohta ==<br />
<br />
* [http://meta.wikimedia.org/wiki/Help:Contents MediaWiki User's Guide]<br />
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]<br />
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]<br />
* [http://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]</div>Vetuulhttps://wiki.itcollege.ee/index.php?title=English&diff=134115English2020-06-30T20:44:02Z<p>Vetuul: </p>
<hr />
<div>__NOTOC__<br />
<br />
Welcome to Taltech IT College wikis English version.<br />
<br />
Our official web page<br />
<br />
==Courses==<br />
<br />
* [https://wiki.itcollege.ee/index.php/I253_Presessional_Informatics Presessional course in Informatics]<br />
* [https://wiki.itcollege.ee/index.php/Category:I600_Introduction_to_Computers_and_Informatics Introduction to Computers and Informatics]<br />
** [[Exam help]]<br />
* [[Logic and Discrete Mathematics Exam Help]]<br />
* [[Operating systems]]<br />
* [https://wiki.itcollege.ee/index.php/Category:I704_Ruby I704 Ruby (Spring 2017)]<br />
* [https://wiki.itcollege.ee/index.php/I719_Fundamentals_of_Python I719 Fundamentals of Python (Spring 2017)]<br />
* [https://wiki.itcollege.ee/index.php/Category:I703_Python Python]<br />
* [https://wiki.itcollege.ee/index.php/Category:I702_Web_Application_Programming Web Application Programming]<br />
* [https://wiki.itcollege.ee/index.php/Category:I802_Firewalls_and_VPN_IPSec Firewalls and VPN/IPSec] (2016)<br />
* [https://wiki.itcollege.ee/index.php/Category:I802_Firewalls_and_VPN_IPSec_(2017) Firewalls and VPN/IPSec] (2017)<br />
<br />
* [https://wiki.itcollege.ee/index.php/Category:Ideas Ideas for research project or thesis]<br />
* [[I803 IT Infrastructure services]]<br />
* [[ICY0004 SPEAIT]]<br />
* [[Basics of C/C++ Programming]]<br />
* [https://wiki.itcollege.ee/index.php/Advanced_Python_(Fall_2017) Advanced Python (Fall 2017)]<br />
2nd year Spring semester<br />
<br />
* [https://wiki.itcollege.ee/index.php/Category:I804_Linux_Windows_administration Linux/Windows administration]<br />
* [https://wiki.itcollege.ee/index.php/Category:I805_Authentication_and_Authorization Authentication and Authorization]<br />
* [[C21 Incident response]]<br />
<br />
3rd year<br />
<br />
* [http://wiki.itcollege.ee/index.php/Category:ICS0023_Robotics Robotics course]<br />
<br />
Misc<br />
<br />
* [https://wiki.itcollege.ee/index.php/Category:Lecturer_FAQ Lecturer FAQ]<br />
<br />
==Quickstart==<br />
<br />
This section is for freshmen who want to get up to speed with latest open-source technology.<br />
<br />
* [https://wiki.itcollege.ee/index.php/User:Akerge CSE survival guide]<br />
* [[Getting started with Ubuntu]]<br />
* [[Getting started with Raspberry Pi]]<br />
* [[Accessing a virtual machine via SSH connection]]<br />
* [[Setting up SSH access to enos.itcollege.ee]]<br />
* [[Getting started with GCC]]<br />
<br />
==International Projects==<br />
<br />
* [[Deploying IT Infrastructure Solutions| Erasmus intensive program "Deploying IT Infrastructure Solutions"]]</div>Vetuulhttps://wiki.itcollege.ee/index.php?title=Main_Page&diff=134114Main Page2020-06-30T20:43:22Z<p>Vetuul: /* English version of IT College wiki */</p>
<hr />
<div>__NOTOC__<br />
<br />
== [[English|English version of Taltech IT College wiki]]==<br />
<br />
= TalTech IT Kolledži wiki =<br />
==Muutmiseks kasutage Uni-ID kasutajat.==<br />
<br />
==Õppetöö==<br />
<br />
* [https://wiki.itcollege.ee/index.php/I253_Informatika_eelkursus Informaatika eelkursus]<br />
* [[Erialatutvustus ISa ja ISd|Erialatutvustus IT süsteemide administreerimine (ISa) ja IT süsteemide arendus (ISd) õppekavadele]]<br />
* [[Erialatutvustus ISa ja ISd kaugõppele]]<br />
* [http://wiki.itcollege.ee/index.php/Category:IT_infrastruktuuri_teenused IT infrastruktuuri teenused]<br />
* [http://wiki.itcollege.ee/index.php/Category:Vormistusjuhend Üliõpilastööde vormistamise juhend]<br />
* [http://wiki.itcollege.ee/index.php/Category:Lõputööd Lõputööde vormistamine]<br />
* [http://wiki.itcollege.ee/index.php/Category:Praktika Praktika ideed ja korraldus]<br />
* [http://wiki.itcollege.ee/index.php/Category:Operatsioonis%C3%BCsteemide_administreerimine_ja_sidumine Operatsioonisüsteemide administreerimine ja sidumine]<br />
* [[Deploying IT Infrastructure Solutions|Intensiivõppe nädal (inglise keeles)]]<br />
* [http://wiki.itcollege.ee/index.php/Category:Traadita_side_alused Traadita side alused]<br />
* [http://wiki.itcollege.ee/index.php/Category:Skriptimiskeeled Skriptimiskeeled]<br />
* [http://wiki.itcollege.ee/index.php/Category:Andmesalvestustehnoloogiad Andmesalvestustehnoloogiad]<br />
* [[Linuxi administreerimine]]<br />
* [[IT eetilised, sotsiaalsed ja professionaalsed aspektid]]<br />
* [[Sissejuhatus infotehnoloogiasse ja riistvarasse]]<br />
<br />
<br />
===Microsofti ained===<br />
Arendus<br />
* [http://wiki.itcollege.ee/index.php/Category:Programmeerimine_CSharp_keeles Programmeerimine C# keeles]<br />
* [http://wiki.itcollege.ee/index.php/Category:Veebirakenduste_loomine_ASP.NET_abil Veebirakenduste loomine ASP.NET abil]<br />
* [http://wiki.itcollege.ee/index.php/Category:V%C3%B5rgurakendused_II:_hajuss%C3%BCsteemide_ehitamine Võrgurakendused II: hajussüsteemide ehitamine]<br />
<br />
* [http://wiki.itcollege.ee/index.php/Category:Võrgurakendused_II:_hajussüsteemide_ehitamine(kaugõpe) Võrgurakendused II: hajussüsteemide ehitamine(kaugõpe)]<br />
* [http://wiki.itcollege.ee/index.php/Category:V%C3%B5rgurakendused_II:_hajuss%C3%BCsteemide_ehitamine%28%C3%B5htu%C3%B5pe%29 Võrgurakendused II: hajussüsteemide ehitamine(õhtuõpe)]<br />
*[http://wiki.itcollege.ee/index.php/Category:Veebirakenduste_loomine_ASP.NET_abil%28kaug%C3%B5pe%29 Veebirakenduste loomine ASP.NET abil(kaugõpe)]<br />
Haldus<br />
* [http://wiki.itcollege.ee/index.php/Category:Windows_Server_administreerimine Windows Server administreerimine]<br />
* [http://wiki.itcollege.ee/index.php/Category:Windows-t%C3%B6%C3%B6jaamade_haldamine Windows-tööjaamade haldamine]<br />
<br />
==Ürituste materjale==<br />
<br />
* [[Vaba tarkvara päev 2011]]<br />
<br />
<br />
==Muud teemad==<br />
<br />
* [http://wiki.itcollege.ee/index.php/Category:%C3%95ppekavade_arutelu Õppekavade arutelu]<br />
* [[Õppekavade arendusversioonid]]<br />
* [http://wiki.itcollege.ee/index.php/Category:Sisekoolitused Sisekoolitused]<br />
* [http://wiki.itcollege.ee/index.php/Category:ITK_veeb ITK veebi arendus]<br />
* [http://wiki.itcollege.ee/index.php/Category:Ingliskeelne_õppekava ITK ingliskeelse õppekava arendus]<br />
* [http://wiki.itcollege.ee/index.php/Category:Robootika ITK robootikaklubi]<br />
* [http://wiki.itcollege.ee/index.php/Category:Linux Linux ITK-s]<br />
* [http://wiki.itcollege.ee/index.php/Category:LPI Linux Professional Institute'i õppeprogramm]<br />
* [http://wiki.itcollege.ee/index.php/Category:Microsoft_IT_Academy Microsoft IT Academy]<br />
<br />
<br />
*[[Special:Categories|Kategooriad]]<br />
<br />
== Infot MediaWiki kohta ==<br />
<br />
* [http://meta.wikimedia.org/wiki/Help:Contents MediaWiki User's Guide]<br />
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]<br />
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]<br />
* [http://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]</div>Vetuulhttps://wiki.itcollege.ee/index.php?title=Main_Page&diff=134113Main Page2020-06-30T20:43:07Z<p>Vetuul: /* IT Kolledži wiki */</p>
<hr />
<div>__NOTOC__<br />
<br />
== [[English|English version of IT College wiki]]==<br />
<br />
= TalTech IT Kolledži wiki =<br />
==Muutmiseks kasutage Uni-ID kasutajat.==<br />
<br />
==Õppetöö==<br />
<br />
* [https://wiki.itcollege.ee/index.php/I253_Informatika_eelkursus Informaatika eelkursus]<br />
* [[Erialatutvustus ISa ja ISd|Erialatutvustus IT süsteemide administreerimine (ISa) ja IT süsteemide arendus (ISd) õppekavadele]]<br />
* [[Erialatutvustus ISa ja ISd kaugõppele]]<br />
* [http://wiki.itcollege.ee/index.php/Category:IT_infrastruktuuri_teenused IT infrastruktuuri teenused]<br />
* [http://wiki.itcollege.ee/index.php/Category:Vormistusjuhend Üliõpilastööde vormistamise juhend]<br />
* [http://wiki.itcollege.ee/index.php/Category:Lõputööd Lõputööde vormistamine]<br />
* [http://wiki.itcollege.ee/index.php/Category:Praktika Praktika ideed ja korraldus]<br />
* [http://wiki.itcollege.ee/index.php/Category:Operatsioonis%C3%BCsteemide_administreerimine_ja_sidumine Operatsioonisüsteemide administreerimine ja sidumine]<br />
* [[Deploying IT Infrastructure Solutions|Intensiivõppe nädal (inglise keeles)]]<br />
* [http://wiki.itcollege.ee/index.php/Category:Traadita_side_alused Traadita side alused]<br />
* [http://wiki.itcollege.ee/index.php/Category:Skriptimiskeeled Skriptimiskeeled]<br />
* [http://wiki.itcollege.ee/index.php/Category:Andmesalvestustehnoloogiad Andmesalvestustehnoloogiad]<br />
* [[Linuxi administreerimine]]<br />
* [[IT eetilised, sotsiaalsed ja professionaalsed aspektid]]<br />
* [[Sissejuhatus infotehnoloogiasse ja riistvarasse]]<br />
<br />
<br />
===Microsofti ained===<br />
Arendus<br />
* [http://wiki.itcollege.ee/index.php/Category:Programmeerimine_CSharp_keeles Programmeerimine C# keeles]<br />
* [http://wiki.itcollege.ee/index.php/Category:Veebirakenduste_loomine_ASP.NET_abil Veebirakenduste loomine ASP.NET abil]<br />
* [http://wiki.itcollege.ee/index.php/Category:V%C3%B5rgurakendused_II:_hajuss%C3%BCsteemide_ehitamine Võrgurakendused II: hajussüsteemide ehitamine]<br />
<br />
* [http://wiki.itcollege.ee/index.php/Category:Võrgurakendused_II:_hajussüsteemide_ehitamine(kaugõpe) Võrgurakendused II: hajussüsteemide ehitamine(kaugõpe)]<br />
* [http://wiki.itcollege.ee/index.php/Category:V%C3%B5rgurakendused_II:_hajuss%C3%BCsteemide_ehitamine%28%C3%B5htu%C3%B5pe%29 Võrgurakendused II: hajussüsteemide ehitamine(õhtuõpe)]<br />
*[http://wiki.itcollege.ee/index.php/Category:Veebirakenduste_loomine_ASP.NET_abil%28kaug%C3%B5pe%29 Veebirakenduste loomine ASP.NET abil(kaugõpe)]<br />
Haldus<br />
* [http://wiki.itcollege.ee/index.php/Category:Windows_Server_administreerimine Windows Server administreerimine]<br />
* [http://wiki.itcollege.ee/index.php/Category:Windows-t%C3%B6%C3%B6jaamade_haldamine Windows-tööjaamade haldamine]<br />
<br />
==Ürituste materjale==<br />
<br />
* [[Vaba tarkvara päev 2011]]<br />
<br />
<br />
==Muud teemad==<br />
<br />
* [http://wiki.itcollege.ee/index.php/Category:%C3%95ppekavade_arutelu Õppekavade arutelu]<br />
* [[Õppekavade arendusversioonid]]<br />
* [http://wiki.itcollege.ee/index.php/Category:Sisekoolitused Sisekoolitused]<br />
* [http://wiki.itcollege.ee/index.php/Category:ITK_veeb ITK veebi arendus]<br />
* [http://wiki.itcollege.ee/index.php/Category:Ingliskeelne_õppekava ITK ingliskeelse õppekava arendus]<br />
* [http://wiki.itcollege.ee/index.php/Category:Robootika ITK robootikaklubi]<br />
* [http://wiki.itcollege.ee/index.php/Category:Linux Linux ITK-s]<br />
* [http://wiki.itcollege.ee/index.php/Category:LPI Linux Professional Institute'i õppeprogramm]<br />
* [http://wiki.itcollege.ee/index.php/Category:Microsoft_IT_Academy Microsoft IT Academy]<br />
<br />
<br />
*[[Special:Categories|Kategooriad]]<br />
<br />
== Infot MediaWiki kohta ==<br />
<br />
* [http://meta.wikimedia.org/wiki/Help:Contents MediaWiki User's Guide]<br />
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]<br />
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]<br />
* [http://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]</div>Vetuulhttps://wiki.itcollege.ee/index.php?title=Main_Page&diff=134112Main Page2020-06-30T20:42:51Z<p>Vetuul: /* Muutmiseks kasutage EIK kasutajanime ja parooli. */</p>
<hr />
<div>__NOTOC__<br />
<br />
== [[English|English version of IT College wiki]]==<br />
<br />
= IT Kolledži wiki =<br />
==Muutmiseks kasutage Uni-ID kasutajat.==<br />
<br />
==Õppetöö==<br />
<br />
* [https://wiki.itcollege.ee/index.php/I253_Informatika_eelkursus Informaatika eelkursus]<br />
* [[Erialatutvustus ISa ja ISd|Erialatutvustus IT süsteemide administreerimine (ISa) ja IT süsteemide arendus (ISd) õppekavadele]]<br />
* [[Erialatutvustus ISa ja ISd kaugõppele]]<br />
* [http://wiki.itcollege.ee/index.php/Category:IT_infrastruktuuri_teenused IT infrastruktuuri teenused]<br />
* [http://wiki.itcollege.ee/index.php/Category:Vormistusjuhend Üliõpilastööde vormistamise juhend]<br />
* [http://wiki.itcollege.ee/index.php/Category:Lõputööd Lõputööde vormistamine]<br />
* [http://wiki.itcollege.ee/index.php/Category:Praktika Praktika ideed ja korraldus]<br />
* [http://wiki.itcollege.ee/index.php/Category:Operatsioonis%C3%BCsteemide_administreerimine_ja_sidumine Operatsioonisüsteemide administreerimine ja sidumine]<br />
* [[Deploying IT Infrastructure Solutions|Intensiivõppe nädal (inglise keeles)]]<br />
* [http://wiki.itcollege.ee/index.php/Category:Traadita_side_alused Traadita side alused]<br />
* [http://wiki.itcollege.ee/index.php/Category:Skriptimiskeeled Skriptimiskeeled]<br />
* [http://wiki.itcollege.ee/index.php/Category:Andmesalvestustehnoloogiad Andmesalvestustehnoloogiad]<br />
* [[Linuxi administreerimine]]<br />
* [[IT eetilised, sotsiaalsed ja professionaalsed aspektid]]<br />
* [[Sissejuhatus infotehnoloogiasse ja riistvarasse]]<br />
<br />
<br />
===Microsofti ained===<br />
Arendus<br />
* [http://wiki.itcollege.ee/index.php/Category:Programmeerimine_CSharp_keeles Programmeerimine C# keeles]<br />
* [http://wiki.itcollege.ee/index.php/Category:Veebirakenduste_loomine_ASP.NET_abil Veebirakenduste loomine ASP.NET abil]<br />
* [http://wiki.itcollege.ee/index.php/Category:V%C3%B5rgurakendused_II:_hajuss%C3%BCsteemide_ehitamine Võrgurakendused II: hajussüsteemide ehitamine]<br />
<br />
* [http://wiki.itcollege.ee/index.php/Category:Võrgurakendused_II:_hajussüsteemide_ehitamine(kaugõpe) Võrgurakendused II: hajussüsteemide ehitamine(kaugõpe)]<br />
* [http://wiki.itcollege.ee/index.php/Category:V%C3%B5rgurakendused_II:_hajuss%C3%BCsteemide_ehitamine%28%C3%B5htu%C3%B5pe%29 Võrgurakendused II: hajussüsteemide ehitamine(õhtuõpe)]<br />
*[http://wiki.itcollege.ee/index.php/Category:Veebirakenduste_loomine_ASP.NET_abil%28kaug%C3%B5pe%29 Veebirakenduste loomine ASP.NET abil(kaugõpe)]<br />
Haldus<br />
* [http://wiki.itcollege.ee/index.php/Category:Windows_Server_administreerimine Windows Server administreerimine]<br />
* [http://wiki.itcollege.ee/index.php/Category:Windows-t%C3%B6%C3%B6jaamade_haldamine Windows-tööjaamade haldamine]<br />
<br />
==Ürituste materjale==<br />
<br />
* [[Vaba tarkvara päev 2011]]<br />
<br />
<br />
==Muud teemad==<br />
<br />
* [http://wiki.itcollege.ee/index.php/Category:%C3%95ppekavade_arutelu Õppekavade arutelu]<br />
* [[Õppekavade arendusversioonid]]<br />
* [http://wiki.itcollege.ee/index.php/Category:Sisekoolitused Sisekoolitused]<br />
* [http://wiki.itcollege.ee/index.php/Category:ITK_veeb ITK veebi arendus]<br />
* [http://wiki.itcollege.ee/index.php/Category:Ingliskeelne_õppekava ITK ingliskeelse õppekava arendus]<br />
* [http://wiki.itcollege.ee/index.php/Category:Robootika ITK robootikaklubi]<br />
* [http://wiki.itcollege.ee/index.php/Category:Linux Linux ITK-s]<br />
* [http://wiki.itcollege.ee/index.php/Category:LPI Linux Professional Institute'i õppeprogramm]<br />
* [http://wiki.itcollege.ee/index.php/Category:Microsoft_IT_Academy Microsoft IT Academy]<br />
<br />
<br />
*[[Special:Categories|Kategooriad]]<br />
<br />
== Infot MediaWiki kohta ==<br />
<br />
* [http://meta.wikimedia.org/wiki/Help:Contents MediaWiki User's Guide]<br />
* [http://www.mediawiki.org/wiki/Manual:Configuration_settings Configuration settings list]<br />
* [http://www.mediawiki.org/wiki/Manual:FAQ MediaWiki FAQ]<br />
* [http://lists.wikimedia.org/mailman/listinfo/mediawiki-announce MediaWiki release mailing list]</div>Vetuulhttps://wiki.itcollege.ee/index.php?title=Arvutiklassi_Linux&diff=134109Arvutiklassi Linux2020-06-27T00:49:18Z<p>Vetuul: </p>
<hr />
<div>=Arvutiklassides kasutatava Linux seadistused ja tarkvara=<br />
Kuna Margus, Laur ja Kakk kavatsevad teha arvutiklasside Linux keskkonna pisut sõbralikumaks, siis toimub siin lehel arutelu antud teemal.<br />
<br />
==Hetkeolukord ja visioonid==<br />
<br />
*Linux baasina kasutatakse Ubuntut;<br />
*Autentimiseks kasutatatakse SUN LDAP serverit (miks mitte kerberoseerida?)<br />
*Tööjaamu hallatakse keskselt puppet abil, millele on lisatud veebiliides foreman?;<br />
*Installeerimine ja konfigureerimine tuleb teha võimalikult lihtsaks, kuna ITKs Linux masinate administreerimisega eriti aega tegeleda pole;<br />
*Turvauuendused tuleb paigaldada automaatselt.<br />
<br />
<br />
==Probleemid==<br />
*Võrgufailisüsteem on paljude kasutajate korral aeglane<br />
<br />
**Lahenduseks (kiirmemad kettad? NFS4)<br />
<br />
*LDAP liiklus pole TLS abil kaitstud (nüüd meie server toetab seda ja tuleb rakendada)<br />
<br />
===Lahendatud probleemid===<br />
[https://bugs.eclipse.org/bugs/show_bug.cgi?id=137011 Eclipse out of sync] - lahendatud<br />
<br />
[https://bugs.launchpad.net/ubuntu/+source/gedit/+bug/34813 Gedit ikaldus] - lahendatud<br />
<br />
[http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=593746 Gnome ei logi välja] - välja logides jääb taustapilt ette ja midagi ei toimu. - lahendatud<br />
<br />
[http://www.mail-archive.com/ubuntu-bugs@lists.ubuntu.com/msg1687875.html pulseaudio sümlingid $HOME/.pulse] - lahendatud<br />
<br />
=Nõuded Linux klassile=<br />
<br />
Antud nõuded on pärit Kai lõputööst (Tänud:) <br />
*autentimisel kasutatakse ITK LDAP kataloogiteenust ldap.itcollege.ee;<br />
*arvutite alglaadimisel peab GRUB-is olema nähtav üks Linux menüükirja<br />
ja Windows menüükirje;<br />
*GRUB alglaadurile ligipääs peab olema kaitstud parooliga vältimaks teiste<br />
kernelite käivitamist või alglaadimise parameetrite muutmist;<br />
*GRUB alglaaduri valikutes ei tohi nähtav olla rescue mode vältimaks<br />
kasutajal juurkasutajate õiguste volitamata omandamist;<br />
*kasutajate kodud ühendatakse SAMBA abil serverist samba.itcollege.ee,<br />
kasutades pam_mount moodulit;<br />
*õppeinfosüsteemi sisenemiseks ning dokumentide signeerimiseks peab<br />
saama kasutada ID kaarti;<br />
*igas arvutis peavad olemas olema ITK CA sertifikaadid;<br />
*vaikimisi kasutatav töölauahaldur on Gnome;<br />
*töölauahaldur peab olema kasutatav inglise ja eesti keeles;<br />
*vaikimisi kasutatavaks brauseriks peab olema määratud Firefox;<br />
*kontoritarkvara Open Office tarbeks peab olema installeeritud eesti ja<br />
inglise keele õigekirja kontrollimiseks vajalik tarkvara;<br />
*peab olema võimalik luua ja avada PDF dokumente;<br />
<br />
*Eclipse Java baasil programmeerimise õppeks;<br />
*Wesnoth aines IT sotsiaalsed, professionaalsed ja eetilised aspektid sotsiaalse tarkvara tutvustamiseks;<br />
*Robocode ja C arendusvahendid robootika õppeks;<br />
*swi-prolog loogilise programmeerimise õppeks;<br />
*hugs funktsionaalse programmeerimise õppeks;<br />
*Eagle trükkplaatide disainimiseks;<br />
*ghdl ja GTKWave VHDL õppeks;<br />
*muusika kuulamiseks TODO - amarok?;<br />
*GIMP jooniste tegemiseks ning fotode töötluseks<br />
*Audacity heli- ja pilditöötluse õppeks<br />
* mc – failihaldur. Kasutatakse näiteks operatsioonisüsteemide administreerimise ja sidumise aines ja ka teistes ainetes, mis toimuvad Linux keskkonnas<br />
<br />
=Installeerimine=<br />
Antud jaotis kirjeldab ITK arvutiklassi Linux installeerimist. Analoogselt saab luua ITK LDAP autentimist kasutava Linux installatsiooni, millele on paigaldatud õppetööks vajalik tarkvara.<br />
<br />
*''Paigalda TODO -- uus estobuntu siia -- [http://releases.estobuntu.org/estobuntu-9.05.iso Estobuntu 9.05]'' Installeerimisel tuleb luua ext3 kettajaod, kuna Ghost ei saa ext4'ga hakkama.<br />
*Uuenda süsteem<br />
*Paigalda subversion<br />
*Paigalda ruby<br />
*Tee väljavõte konfigureerimise skriptidest<br />
<pre><br />
sudo -i<br />
aptitude install subversion ruby<br />
svn co http://robot.itcollege.ee/svn/marcus/estobuntu-post-install/<br />
cd estobuntu-post-install<br />
./estobuntu.rb<br />
</pre><br />
<br />
==Erinevate pakendamata programmide installeerimine==<br />
*Käivita local_install.sh<br />
**Paigaldatakse eclipse, eagle ja Ellervee asjad<br />
<br />
<br />
==Asjad, mida on paha automatiseerida ja mis tuleb käsitsi teha==<br />
*TODO virtualbox<br />
*Hippo_OpenSim_Viewer_vTODO_Linux_Setup.zip opensim jaoks on samas kataloogis<br />
*ITK-Estobuntu-GDM.tar.gz fail paigaldada /usr/share/gdm/themes kataloogi<br />
*cp taust-latest-1280x1024.png /usr/share/backgrounds/warty-final-ubuntu.png<br />
<br />
==Peale installeeriminst==<br />
<br />
*Muuta ära root kasutaja parool<br />
*Eemaldada guest kasutaja admin grupist<br />
*Lisada grub parool<br />
<br />
==Vahetult enne kloonimist==<br />
*Kustutada ära masina ssh võti (las teeb uue peale kloonimist)<br />
*Kustutada ära fail /etc/udev/rules.d/70-persistent-net.rules<br />
<br />
=Peale kloonimist=<br />
*Muuta masina nimi<br />
*Kontrollida, et on olemas eth0 (kui pole, siis kustutada /etc/udev/rules.d/70-persistent-net.rules fail)<br />
<br />
=Ülalmainitud skript teeg Estobuntu installatsiooni järgenvad muudatused=<br />
<br />
<br />
<br />
<br />
*Keelab networkmanageri ja muutab '''/etc/network/interfaces''' faili lisades<br />
<br />
<pre><br />
auto eth0<br />
iface eth0 inet dhcp<br />
</pre><br />
<br />
*Lisab ITK nemeserverite info '''/etc/resolv.conf''' faili<br />
<pre><br />
domain itcollege.ee<br />
search itcollege.ee<br />
nameserver 172.16.0.165<br />
nameserver 172.16.0.175<br />
</pre><br />
==Installeeritav tarkvara==<br />
<br />
*Skript installeerib tarkvara [http://robot.itcollege.ee/svn/marcus/estobuntu-post-install/installation_list selle nimekirja] alusel<br />
<br />
*//TODO .bashrc aliased<br />
<br />
<br />
<br />
==Haldusvahendid==<br />
*Manpremo<br />
<br />
==Kontoritöö==<br />
*OpenOffice.org koos Eesti õigekirja kontrolliga<br />
*scribus (+ scribus-template) - MS Publisheri sarnane DTP-programm koos vajalike mallidega<br />
* LyX - LaTEXi frontend<br />
* Dia ja/või Kivio - diagrammitarkvara<br />
<br />
<br />
==Graafika ja multimeedia==<br />
*Blender - 3D joonistamine<br />
*Inkscape - Eestimaise Sodipodi edasiarendus, vektorgraafika rakendus<br />
*Amarok, libxine-ffmpeg - Amarok ja pluginad<br />
*Kaffeine - Threadidega filmimängija (xine decoderi threadide arv lükata 2 peale kuna meil vist enamus kahetuumalised)<br />
<br />
==Arendusvahendid==<br />
*avr-gcc, avr-libc, avrdude - AVR mikrokontrollerite programmeerimise tarkvara<br />
*kdevelop - Arenduskeskkond<br />
*opencv - Pilditöötlusteek<br />
*hugs - Haskell interpretaator<br />
*build-essential, gcc, g++- C ja C++ arendusvahendid<br />
*sdcc - Ristkompilaator sardsüsteemidele (compiler for embedded systems)<br />
*qt4-designer, pyqt4-tools - QT4 disainer ja pyuic4 kompilaator<br />
*subversion - versioonihalduse klient<br />
*Eclipse ja/või Lazarus - arenduskeskkonnad<br />
<br />
==Mängud ja ajaviide==<br />
<br />
*wesnoth-all - The Battle for Wesnothi strateegiamäng, mida Kakk mõnedel kursustel õppevahendina kasutab (see on metapakk, mis kogu vajaliku kupatuse ära tirib ja paigaldab)<br />
<br />
==Õppetöö==<br />
*eagle - Trükkplaadi CAD programmi vaba versioon (robootikaklubi)<br />
<br />
==Tööriistad==<br />
*mc - Midnight Commander<br />
*minicom - Terminalirakendus (robootikaklubi)<br />
*vim htop - Kellad viled<br />
*mtools<br />
*p7zip-full<br />
<br />
==Kommunikatsioon ja Internet==<br />
*skype - Linuxi versioon paigaldada ja testida heliväljund+mikker ja seadistada volüümid normaalseks<br />
<br />
== Küsimärgiga - avaldage arvamust ==<br />
* Wine ja Dosbox - M$ tarkvara käimalaskmiseks<br />
<br />
==Väljastpoolt Ubuntu varamuid==<br />
* Hippo Viewer (http://mjm-labs.com/viewer/) - virtuaalmaailmade kasutamiseks (sh ITK OpenSim'i projekt)<br />
<br />
==Eemaldatav tarkvara==<br />
*pulseaudio ja arts või mis iganes - ALSAst piisab kohalike rakenduste jaoks ja heliserverid on tavaliselt tülinaks. Skypel puudub pulseaudio tugi<br />
*Evolution JA evolution-data-server - võrguketast ei võeta küljest ära muidu<br />
<br />
=Seadistused=<br />
Siin on klassi masinate seadistused<br />
<br />
===ID kaart===<br />
<br />
Installeerimise skript 12.04 jaoks.<br />
http://ftp.id.eesti.ee/pub/id/signed_repository/install-scripts/<br />
<br />
deb http://ftp.id.eesti.ee/pub/id/signed_repository/ubuntu/ precise main<br />
<br />
<br />
<br />
===Grub alglaadur===<br />
Vaikimisi laetakse windows operatsioonisüsteemi (kuna win maailma paikamine peab öösel töimima)<br />
*Alglaadimisel ooteaeg 300s<br />
*Splash pilt korda<br />
*Fondi värvid korda, varjud ära<br />
*Valikusse ainult Estobuntu ja Hastalavista<br />
<br />
<br />
<pre><br />
uuid 553ef32d-5ac3-4466-a59c-f2924b8fa78f<br />
splashimage=/grub/splash.xpm.gz<br />
foreground=222222<br />
shade=0<br />
border=aaaaaa<br />
background=aaaaaa<br />
<br />
title Estobuntu 9.05, kernel 2.6.28-14-generic<br />
uuid 553ef32d-5ac3-4466-a59c-f2924b8fa78f<br />
kernel /vmlinuz-2.6.28-14-generic root=UUID=13f9ce09-5582-4c9c-932e-d38c495f2429 ro quiet splash <br />
initrd /initrd.img-2.6.28-14-generic<br />
quiet<br />
<br />
title Windows Vista<br />
rootnoverify (hd0,0)<br />
savedefault<br />
makeactive<br />
chainloader +1<br />
</pre><br />
<br />
===PAM ja LDAP===<br />
<br />
Pam konfiguratsioon LDAP serveriga ühendamiseks debian/ubuntu laadsetel<br />
<br />
*Installeerida ldap klienditarkvara<br />
<pre><br />
sudo apt-get install auth-client-config ldap-auth-client ldap-auth-config libnss-db libnss-ldap libpam-ldap nscd nss-updatedb ldap-utils libpam-mkhomedir<br />
</pre><br />
*Seadistada /etc/ldap.conf<br />
<pre><br />
# The distinguished name of the search base.<br />
base dc=itcollege,dc=ee<br />
host 172.16.0.175<br />
</pre><br />
*Seadistada /etc/nsswitch.conf <br />
<pre><br />
passwd: files ldap<br />
group: files ldap<br />
</pre><br />
Kontrollimiseks kasuta järgnevaid korraldusi<br />
<pre><br />
getent passwd<br />
getent group<br />
</pre><br />
Kui kuvatakse kasutajate ja gruppide nimekiri, siis on tulemus õige.<br />
<br />
*Tee /etc/pam.d/common-* failidest varukoopia. Muuda faile järgnevalt.<br />
'''/etc/pam.d/common-account'''<br />
<pre><br />
# /etc/pam.d/common-account - authorization settings common to all services<br />
account sufficient pam_ldap.so<br />
account [success=2 new_authtok_reqd=done default=ignore] pam_unix.so <br />
account sufficient pam_succeed_if.so uid < 100 quiet<br />
account requisite pam_deny.so<br />
account required pam_permit.so<br />
<br />
</pre><br />
'''/etc/pam.d/common-auth'''<br />
<pre><br />
# /etc/pam.d/common-auth - authentication settings common to all services<br />
auth optional pam_group.so<br />
auth required pam_env.so<br />
auth required pam_mount.so<br />
<br />
auth sufficient pam_unix.so nullok try_first_pass<br />
auth requisite pam_succeed_if.so uid >= 100 quiet<br />
<br />
auth sufficient pam_ldap.so use_first_pass<br />
auth required pam_deny.so<br />
</pre><br />
'''/etc/pam.d/common-password'''<br />
<pre><br />
# /etc/pam.d/common-password - password-related modules common to all services<br />
# here are the per-package modules (the "Primary" block)<br />
password sufficient pam_ldap.so<br />
password required pam_unix.so obscure sha512<br />
password requisite pam_deny.so<br />
password required pam_permit.so<br />
password optional pam_ecryptfs.so<br />
</pre><br />
'''/etc/pam.d/common-session'''<br />
<pre><br />
# /etc/pam.d/common-session - session-related modules common to all services<br />
session required pam_unix.so <br />
session optional pam_mount.so<br />
session optional pam_ldap.so <br />
session required pam_mkhomedir.so <br />
session optional pam_ecryptfs.so unwrap<br />
session optional pam_ck_connector.so nox11<br />
</pre><br />
<br />
*Restardi nscd teenus<br />
<pre>/etc/init.d/nscd restart</pre><br />
*Kontrolli su - kasutajanimi<br />
<br />
===PAM mount===<br />
<pre><br />
sudo apt-get install libpam-mount smbfs<br />
</pre><br />
<br />
Muutda PAM mount konfiguratsioonifail '''/etc/security/pam_mount.conf.xml'''<br />
<pre><br />
<br />
</pre><br />
<br />
===Estobuntu===<br />
Kasutusel on 9.05<br />
<br />
<br />
<br />
==PAM mount==<br />
<br />
=Pooleli=<br />
<br />
Arvuti häiriva piiksumise kõrvaldamiseks eemaldada pcspkr moodul<br />
<br />
*sertifikaadid ÕIS, ITK, SAIS<br />
*<br />
<br />
<br />
*2.6.30-31 kernel<br />
*uued intel video X<br />
*ctrl+alt+bs enable<br />
<br />
cp ITK-Estobuntu-GDM /usr/share/gdm/themes/ -R<br />
root@klass1-01:~# vim /etc/gdm/gdm.conf<br />
<br />
<br />
<br />
<br />
<br />
==LDAP gruppide map lokaalseteks==<br />
Vajalik heli töötamiseks<br />
<br />
'''/etc/common-auth'''<br />
<pre><br />
auth optional pam_group.so<br />
</pre><br />
<br />
'''/etc/security/group.conf'''<br />
<pre><br />
*; *; *; Al0000-2400; audio, video, cdrom, floppy<br />
</pre><br />
<br />
=Hetkel eksisteerivad prbleemid=<br />
*Firefox'i ei oska lisada ITK root CA'd (lisada on kerge per kasutaja, mitte per süsteem) Firefox ei loe estobuntu CA sertifikaatide nimekirja.<br />
**Lahenduseks cert db profiili kopeerimine. Vanu kasutajaid see kahjuks ei aita<br />
*Fedora .gnome* tekitab probleeme<br />
**Lahenduseks kustutada .gnome* asjad ära kasutajate võrgukettalt<br />
<br />
=Lingid=<br />
[https://bugs.launchpad.net/ubuntu/+source/libpam-mount/+bug/367918 https://bugs.launchpad.net/ubuntu/+source/libpam-mount/+bug/367918]<br />
<br />
[https://wiki.ubuntu.com/MountWindowsSharesPermanently https://wiki.ubuntu.com/MountWindowsSharesPermanently]<br />
<br />
[http://www.hiit.fi/it/tech/config/pam_mount.html http://www.hiit.fi/it/tech/config/pam_mount.html]<br />
<br />
[http://www.riso.ee/wiki/Vaba-tarkvara RISO vaba tarkvara raamistik]<br />
<br />
=Kiiksud, mis häirisid/häirivad=<br />
*Firefox ei loe root CA nimekirja, mis on ubuntulistel kaasa pandud. Seega ITK root CA lisamine on PITA (sama on konquerori kohta, kuid lihtsam PITA)<br />
*Firefox sqlite DB lukustamine võib kaasa tuua <br />
<br />
=Vaba teema=<br />
*Wifist võivad botid spammi saata. Välja läheb asi läbi meie GW, mis on halb. - Lahendus piirata wifist ära porti 25 suunatud liiklus välja arvatud mail.edu.ee<br />
*WiFi on aeglane - Lahendus torrenteerijatele nuga ja piirata väljuvad torrentipordid (pole just hea lahendus, kuid pole hullu)<br />
*Firefox avaleht võiks olla www.itcollege.ee<br />
<br />
=Blacklistimine=<br />
Tekitada fail /etc/modprobe.d/itk.conf sisuga:<br />
<pre><br />
#Blacklistida kvm ja kvm_intel moodulid kuna need lähevad konflikti virtualboxi$<br />
blacklist kvm<br />
blacklist kvm_intel<br />
</pre><br />
<br />
=Uue arvutklassi tõmmise loomine=<br />
<br />
==Ettevalmistavad tegevused==<br />
* Paigalda Ubuntu 64bit 11.04 desktop<br />
* sea root kasutajale parool<br />
* Lülita sisse partner apt source + proposed ja unsupported updates (vaja uut libreofficet ja javat jne)<br />
* Tee ära uuendused<br />
<br />
==Pakkide paigaldus ja konfigureerimine==<br />
<br />
<source lang="bash"><br />
sudo -i<br />
apt-get install subversion ruby vim aptitude libnotify-bin<br />
svn co http://robot.itcollege.ee/svn/marcus/estobuntu-post-install/<br />
cd estobuntu-post-install<br />
./estobuntu.rb<br />
</source><br />
<br />
LDAP osa on muutunud: http://www.server-world.info/en/note?os=Ubuntu_11.04&p=ldap&f=2<br />
<br />
Java 7 http://blog.bangbits.com/2011/08/java-7-on-ubuntu-1104.html<br />
<br />
preseed: https://help.ubuntu.com/8.04/installation-guide/example-preseed.txt<br />
<br />
<br />
eclipse http://islandlinux.org/howto/installing-javahl-subclipseeclipse-ubuntu - subversioni plugina idiootsustega tegelemiseks<br />
<br />
Androidi arenduse jaoks - http://developer.android.com/sdk/installing.html<br />
<br />
<br />
Firefox 6 (õis ID kaardi jaoks) http://mygeekopinions.blogspot.com/2011/07/how-to-install-firefox-6-beta-in-ubuntu.html<br />
<br />
Virtualbox<br />
http://www.virtualbox.org/wiki/Linux_Downloads<br />
<source lang="bash"><br />
wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | sudo apt-key add -<br />
sudo apt-get update<br />
sudo apt-get install virtualbox-4.1 dkms<br />
<br />
</source><br />
<br />
Asjade avamisel keerab thunar mitu asja metsa: apt-get remove exo-utils<br />
<br />
grub2 veidrused: http://en.gentoo-wiki.com/wiki/Grub2<br />
<br />
=Tõmmise testimine=<br />
<br />
* Java programmeerimine - eclipse<br />
* ID-Kaart<br />
* LibreOffice + speller<br />
* Heli<br />
* youtube flash+html5<br />
* Kõik rakendused läheksid käima</div>Vetuul