Computer Operating Procedures Manual For WebSAMS 2.0 - English - Version 1.1
Computer Operating Procedures Manual For WebSAMS 2.0 - English - Version 1.1
October, 2010
DISTRIBUTION LIST
AMENDMENT HISTORY
Amendment History
Change Number Revision Description Page Affected Revision Number Date
ii
TABLE OF CONTENTS
TABLE OF CONTENTS
1. 2. 3. 3.1 3.2 4. 4.1 4.2 5. 6. PURPOSE .................................................................................................................................................1-1 SCOPE ......................................................................................................................................................2-1 REFERENCES.........................................................................................................................................3-1
STANDARDS ............................................................................................................................................ 3-1 OTHER REFERENCES ............................................................................................................................... 3-1
DEFINITIONS AND CONVENTIONS .................................................................................................4-1 DEFINITIONS ........................................................................................................................................... 4-1 CONVENTIONS ........................................................................................................................................ 4-1 COMMUNICATIONS NETWORK CONFIGURATION ...................................................................5-1 COMPUTER SYSTEM INFORMATION (WEBSAMS SERVER)....................................................6-1 HARDWARE CONFIGURATION....................................................................................................... 6-1 Computer Hardware Configuration .................................................................................................6-1 SYSTEM SOFTWARE ENVIRONMENT ........................................................................................................ 6-1 SYSTEM FILES ......................................................................................................................................... 6-2 COMPUTER SYSTEM OPERATING NORMAL............................................................................. 6-3 Powering ON/OFF ...........................................................................................................................6-3 WebSAMS server administrator password change.........................................................................6-10 Update virus signature ...................................................................................................................6-11 End User Computing DB account password change......................................................................6-12 Password Decryption Procedure for the built-in account sysadmin ..............................................6-13 COMPUTER SYSTEM OPERATING ABNORMAL ...................................................................................... 6-14 Taking system dumps ......................................................................................................................6-14 Fault reporting procedures ............................................................................................................6-15 APPLICATION OPERATING - RESTART .................................................................................................... 6-16 Reloading Procedures ....................................................................................................................6-16 OPERATION HOUSEKEEPING JOBS ........................................................................................................ 6-17 Reboot server monthly ....................................................................................................................6-17 System files backup.........................................................................................................................6-17 Create Recovery CD.......................................................................................................................6-36 Windows Scheduler tasks................................................................................................................6-42 Adhoc database backup..................................................................................................................6-46 Server logs ......................................................................................................................................6-47 Backup of Training Database snapshot..........................................................................................6-49 Restore Training Database to snapshot backup .............................................................................6-50 Restore to Original Training Database..........................................................................................6-52 RESTORE WEBSAMS SERVER AND APPLICATION ................................................................................ 6-53
6.1 6.1.1 6.2 6.3 6.4 6.4.1 6.4.2 6.4.3 6.4.4 6.4.5 6.5 6.5.1 6.5.2 6.6 6.6.1 6.7 6.7.1 6.7.2 6.7.3 6.7.4 6.7.5 6.7.6 6.7.7 6.7.8 6.7.9 6.8 7.
COMPUTER SYSTEM INFORMATION (HTTP SERVER) .............................................................7-1 HARDWARE CONFIGURATION....................................................................................................... 7-1 Computer Hardware Configuration .................................................................................................7-1 SYSTEM SOFTWARE ENVIRONMENT ........................................................................................................ 7-1 SYSTEM CONFIGURATION FILES............................................................................................................... 7-2 COMPUTER SYSTEM OPERATING - NORMAL............................................................................................ 7-2 Powering ON/OFF ...........................................................................................................................7-2 HTTP Server password Change .......................................................................................................7-2 Virus update .....................................................................................................................................7-3 COMPUTER SYSTEM OPERATING - ABNORMAL........................................................................ 7-5 Taking system dumps ........................................................................................................................7-5 Fault reporting procedures ..............................................................................................................7-5 APPLICATIONS OPERATING RESTART .................................................................................................... 7-6 Reloading Procedures ......................................................................................................................7-6
7.1 7.1.1 7.2 7.3 7.4 7.4.1 7.4.2 7.4.3 7.5 7.5.1 7.5.2 7.6 7.6.1
iii
TABLE OF CONTENTS
7.7 OPERATING HOUSEKEEPING JOBS ............................................................................................... 7-7 7.7.1 System file backup ............................................................................................................................7-7 7.7.2 Server logs ........................................................................................................................................7-7 8. 8.1 8.2 NOTE ON 2 SERVERS 2 WEBSAMS, 1 SERVERS 2 WEBSAMS ...................................................8-1 2 SERVERS 2 WEBSAMS ....................................................................................................................... 8-1 1 SERVER 2 WEBSAMS ......................................................................................................................... 8-1
iv
PURPOSE
1.
PURPOSE
The purpose of this document is to provide technical details on how to conduct operational tasks in school end WebSAMS Server and technical details on how to process operational tasks in school end HTTP Server.
1-1
SCOPE
2.
SCOPE
The scope at school end covers WebSAMS server and HTTP server. The WebSAMS server in school is the main machine to hold the information of data and system of the WebSAMS system. WebSAMS user can access to the WebSAMS system by browser using HTTP protocol. The intended audience is for whoever need to performs the operational tasks. It is expected that the audience should have basic knowledge regarding setup, configuration and administration of Windows 2003 server. HTTP server acts as a gateway for users from school ITED segment or Internet to connect to the WebSAMS application. By doing so, there will not be directly access from un-trusted user to WebSAMS server. Hence, it minimizes the security exposures. User can use HTTPS protocol to connect to the HTTP server. The HTTP server will redirect the request to the WebSAMS server using specific port. The intended audience is for whoever need to performs the operational tasks. It is expected that the audience should possess basic knowledge regarding setup, configuration and administration of Linux if they opt to use Linux server. Both the WebSAMS server and HTTP server are supposed to have online service hours between 0600 and 2359. The two servers are supposed to be offline for maintenance (eg. Backup, File Housekeeping, and Minor Program Version Upgrade) between 0000 and 0559.
2-1
REFERENCES
3. 3.1
REFERENCES STANDARDS
Document Style Manual (S14) of ITSD Documentation Standards for Implementation Phase (S8) of ITSD
3.2
OTHER REFERENCES
Application Operation Manual of WebSAMS for School
3-1
4. 4.1
4.2
CONVENTIONS
<School Unique ID>: The unique ID assigned to school for use in WebSAMS. <module name>: The functional modules in WebSAMS, such as ASR, CDS, HKE. <CDS destination ID>: The unique ID assigned to school for use in CDS function. <dd-mm-yy>: A timestamp in day-month-year format, eg. 11-09-03
4-1
5.
The characteristic of this setup is that the school has an Internet Gateway, in this case a firewall, to separate ITED segment, DMZ and Intranet. Servers which are exposed to Internet are placed in DMZ. The firewall filters any IP traffic that pass among Internet, DMZ and ITED segment. In this design, the HTTP server would be placed in DMZ while WebSAMS server would be placed in WebSAMS segment.
tnemges
DETI
s C P D E TI
) ll a w e rii F ( y a w e t a G t e nr et n I
r e ll or t n o C n i a m o D
tne mp iuqe PS I
h cti w s D E TI
y x or P / li a m E / b e W
ZM D
r e s U t e n r et nI S M ASbe W
esimerP loohcS
r e vr e S
SMASbeW tnemges
5-1
The characteristic of this category is that the school has an Internet Gateway to separate Internet and ITED segment. The Internet Gateway could be a Hardware Firewall Proxy Server supporting Network Address Translation (NAT) Router implementing NAT Linux box with two network Interface cards and running iptables or ipchains Windows server with two network interface cards and running routing and remote access. The Internet Gateway filters any IP traffic that pass between Internet and ITED segment. In this design, the HTTP server would be placed in ITED segment while WebSAMS server would be placed in WebSAMS segment.
tnemges
DETI
sCP DETI
rellortnoC niamoD
hctiws DETI
tnempiuqe PSI
yawetaG tenretnI
revreS
revreS
PTTH
esimerP loohcS
SMASbeW
SMASbeW tnemges
revreS
5-2
6. 6.1
6.1.1
6.2
- Sybase SQL Anywhere Studio 10.0.1 - Crystal Enterprise Report Application Server 9.0 with Service Pack 6 - Java WebStart 1.0.1 - Java Runtime Environment 1.3.1 - Java Development Kit 1.3.1 - Jboss 2.4.8 - Tomcat 4.0.4 - Apache 1.3.22 - Dyna Font
Nov-08
6-1
6.3
SYSTEM FILES
WebSAMS production instance Sybase SQL Anywhere 10 (C:\Program Files\ SQL Anywhere 10\) Crystal Enterprise Report Application Server 9.0 (C:\Program Files\Crystal Decisions\) Java WebStart 1.0.1_02 (C:\Program Files\Java Web Start\) Java Runtime Environment 1.3.1 (C:\Program Files\JavaSoft\JRE\) Dyna font (C:\Winnt\fonts\MingLiu.ttc, the original MingLiu.ttc would be renamed to
MingLiu.ttc.bak)
Java Development Kit 1.3.1 (D:\Java\) Application program - Jboss 2.4.8 (D:\WebSAMS\Jboss\) Application program - Tomcat 4.0.4 (D:\WebSAMS\Catalina\) Apache 1.3.22 (D:\WebSAMS\Apache\) School database files (E:\Data\<School Unique ID>\database\) Pre-loaded report templates (E:\Data\<School Unique ID>\<module name>\) Customized report templates (E:\Data\<School Unique ID>\<module name>\) User uploaded documents (E:\Data\<School Unique ID>\doc\) CDS incoming message (E:\Data\CDS\<CDS destination ID>\IN\) CDS outgoing message (E:\Data\CDS\<CDS destination ID>\OUT\) CDS Digital certificate and key (E:\Data\CDS\<CDS destination ID>\SYSTEM\DCERT\)
WebSAMS training instance WebSAMS training application directory (D:\WebSAMS_t\) WebSAMS training school data and report templates (E:\Data\9999\)
Nov-08
6-2
While, for 1 Server 2 WebSAMS PM session, the folder named WebSAMS_PM should be found on the desktop:
3. Inside the WebSAMS folder, there should be 6 shortcuts as shown below. To start WebSAMS application, you need to execute 1. Start Apache, 2. Start Database, and 3. Start Jboss in sequence.
Nov-08
6-3
When the database completely loaded, the window will be automatically minimized as an icon on the taskbar as follow:
Nov-08
6-4
6. Execute 3. Start Jboss to start the WebSAMS application. The initialization of Jboss could take a few minutes, depending on the performance of your server. When the Jboss is ready, a message WebSAMS started on <date> will be shown, like the following:
Note: To start the PM session of 1 Server 2 WebSAMS system, you should open the folder WebSAMS_PM and repeat Step 2 to 6.
7. If Internet Explorer is the default browser of your WebSAMS server, add the following IP addresses of the sites into the Trusted Sites in the Internet Explorer: - IP address of your WebSAMS server, e.g. http://10.1.1.100 - The link of the WebSAMS download site, i.e. www.websams.edb.gov.hk Path: Internet Explorer: Tools -> Internet Options -> Security ->Trusted sites -> Sites.
Nov-08
6-5
8. Now, open a browser in the WebSAMS server and access the WebSAMS login page. A page similar to the following should be shown
Nov-08
6-6
The WebSAMS training instance can be started similar to that of the production instance. From the desktop, you should find a folder called WebSAMS_T as shown below:
Open the WebSAMS_T folder, you should find the shortcuts as shown below. To start WebSAMS Training Instance, you need to execute the shortcuts in sequence: 1. Start Apache_t 2. Start Database_t 3. Start Jboss_t
The following shows the contents inside the tools folder. They are for the purpose of backup and restore of training data. Details on how to use them would be shown in the subsequent sections.
Nov-08
6-7
Stop the WebSAMS Production instance 1. Login as administrator. 2. Shutdown the Jboss: Select the command windows named 3. Start Jboss. Type Control-C to terminate the batch job. Answer y when asked for confirmation. The window will then be closed.
Nov-08
6-8
3. Shutdown Sybase SQL Anywhere 10: Double click on the Sybase SQL Anywhere 10 icon on the taskbar, the Sybase window would be pop up. Click shutdown.
4. Shutdown Apache Select the command windows named 1. Start Apache. Type Control-C to terminate the batch job. The window will then be closed.
Stop the WebSAMS training instance Similarly, you can stop the WebSAMS training instance by 1. Login as administrator. 2. Shutdown Jboss_t 3. Shutdown Database_t 4. Shutdown Apache_t Power off the WebSAMS server Shutdown the Microsoft Windows normally by Start -> Shutdown .
Nov-08
6-9
6.4.2 WebSAMS server administrator password change To change the accounts password, first user must use the Administrator account to login to windows. Then press the Ctrl-Alt-Del keys, from Windows, and click on the Change password button.
Fill in old password, new password, and confirm new password. Click okay.
Nov-08
6-10
6.4.3 Update virus signature Please refer to the help of the specific antivirus software
Nov-08
6-11
6.4.4 End User Computing DB account password change There are 3 End User Computing DB Accounts: fmpuser Access all FMP tables & views and the common set of tables & views stfuser Access all STF, STD tables & views and the common set of tables & views genuser Access the common set of tables & views. To change the password of the above 3 accounts, you need to do the followings: 1. Access to the WebSAMS server, 2. Open a command prompt, and 3. Type the following command: dbisqlc q c eng=websams_<school unique ID>;uid=<account name>;pwd=<old password> grant connect to <account name> identified by <new password>
The following illustrates how to change the password of fmpuser from password to abc in a school WebSAMS server with school unique ID equals 8886. (Example only. DONT just key in the command for the school)
Nov-08
6-12
6.4.5
If both the passwords of sysadmin account and the asysadmin have been lost, the system administrator can run a decryption program in the WebSAMS server to decrypt the password. To do so, the administrator must know the decryption key. Assume that the decryption key is password, the following shows the procedures on how to use the decryption program. 1. Open a DOS command window and go to the working directory E:\data\working
2.
where - password is the decryption key entered in the sysadmin change password function
3.
If your school is an 1 Server 2 WebSAMS school, you would be prompted for which session you are working on.
Nov-08
6-13
4. Click Yes, when being asked The image in the clipboard is larger then the bitmap. Would you like the bitmap enlarged? 5. Click on File, Save As.
Nov-08
6-14
6. Click on the Desktop icon in the Save As window, and type in Errormsg in the field of File name.
6.5.2 Fault reporting procedures The procedures for fault reporting procedures are as follow: 1. Contact WebSAMS Helpdesk hotline at 3125-8510. 2. Report on any error. 3. If there is system dump, send an email to WebSAMS Helpdesk ([email protected]) with the system dump attached. 4. WebSAMS Helpdesk will assign an incident log number for a case. 5. WebSAMS Helpdesk will escalate a support call to the appropriate WebSAMS support team for trouble-shooting.
Nov-08
6-15
7. The WebSAMS would then be rebooted. 8. Login as administrator. 9. Start Apache. 10. Start Database. 11. Start Jboss.
Nov-08
6-16
The following shows an example of how to schedule the backup jobs using the software of Symantec Backup Exec System Recovery.
The configuration of Symantec Backup Exec System Recovery consists of 4 tasks. They are Setup share folder in NAS, Setup Daily backup job, Setup Weekly backup job, and Setup Monthly backup job
Nov-08
6-17
Set up share folder in the NAS device (The method to configure a shared folder shown below may vary from your machine. Please consult the user manual or your vendors for more details on sharing a folder specific to your machine). 1. Open Internet Explorer in WebSAMS Server and connect to the configuration website of the NAS. (e.g. http://192.168.1.1)
2. 3.
Log in the site Click Basic in left hand menu, in Date and Time setup, click Use Local Time and then click Apply
Nov-08
6-18
4.
5.
Nov-08
6-19
6. 7.
Click Apply to save the record. The shared folder has been created successfully and can be accessed by WebSAMS server now.
Setup Daily backup job 1. Launch the Backup Exec System Recovery application in Start All Programs Symantec Backup Exec System Recovery Backup Exec System Recovery Click Tasks Click Run or Manage Backups
2. 3.
Nov-08
6-20
4.
5.
Nov-08
6-21
6.
Nov-08
6-22
7.
8.
In Folder, type \\192.168.1.1\share\daily (lets say IP address of the NAS is 192.168.1.1) and click Next. If system ask whether to create the daily folder, click Yes.
Nov-08
6-23
9.
10. Check the Use password option and request the school users to input the Password. Also check Use AES encryption for higher security level. Press OK to return to the previous Options screen
Nov-08
6-24
12.
Nov-08
6-25
13. Select Weekly in the Automatically create a recovery point: option. Set start time to 2:15a.m. and select week days from Monday to Saturday. At last click Next
Nov-08
6-26
Set up Weekly backup job 1. Repeat step 1 to Step 7 of the part for Setup up Daily backup job.
Nov-08
6-27
2.
In Folder, type \\192.168.1.1\share\weekly (lets say IP address of NAS is 192.168.1.1 ) and click Next. When system ask if you want to create the weekly folder, click Yes.
3.
System will ask if you want to create the weekly folder, click Yes
Nov-08
6-28
4.
5.
Check the Use password option and request the school users to input the Password. Also check Use AES encryption for higher security level. Press OK to return to the previous Options screen.
Nov-08
6-29
6.
7.
Nov-08
6-30
8.
Select Weekly in the Automatically create a recovery point: option. Then set start time to 2:45 a.m. and select Sunday only. At last, click Next.
Nov-08
6-31
9.
Set up Monthly Backup Job 1. Repeat step 1 to Step 7 of the part for Setup up Daily backup job.
Nov-08
6-32
2.
In Folder, type \\192.168.1.1\share\monthly (lets say IP address of NAS is 192.168.1.1 ) and click Next. If system ask whether you want to create the monthly folder, click Yes.
3.
Nov-08
6-33
4.
Check the Use password option and request the school users to input the Password. Also check Use AES encryption for higher security level. Press OK to return to the previous Options screen.
5.
Nov-08
6-34
6.
7.
Select Monthly in the Automatically create a recovery point: option. Then set start time to 3:15 a.m. and select 1st day of the month to protect. At last, click Next.
Nov-08
6-35
8.
9.
6.7.3
Create Recovery CD
At the moment when disaster happens that your system cannot function properly or you need to roll back your system to the status of a specific backup moment, system restoration or recovery is necessary. To restore your WebSAMS system, in addition to your backup copy of full system image, a tool that can boot up your machine to an rescue environment for supporting recovery of you machine, despite how worse the current situation of your system is, has to be available. This tool, which is usually
Nov-08
6-36
called as Recovery CD or Rescue CD, can normally be created by your backup software. In view of the importance of this Recovery CD, you are highly recommended to ALWAYS store it in a safe place that can only be accessed by the authorized persons and also can easily be found at the critical moment when it is needed. The following shows an example of how to create a recovery CD using the software of Symantec Backup Exec System Recovery. 1. Launch the Backup Exec System Recovery software Path: Start > All Programs > Symantec > Backup Exec System Recovery > Backup Exec System Recovery Open the Create Recovery Disk user interface Path: Task > Create Recovery Disk Click Next on the welcome screen.
2.
3.
Nov-08
6-37
4.
Insert the Symantec Recovery Disk to your CD-ROM drive. Click Browse and select the CD-ROM drive. Click next to proceed.
5.
Nov-08
6-38
6.
If the Storage and Network Drivers of your WebSAMS server is different from those drivers in the Symantec Recovery Disk, the drivers should be shown like the screen below. Accept the default and click Next.
7.
Nov-08
6-39
8.
Make sure to uncheck the first option and select the second option only. You should create the ISO file of the custom Recovery CD directly. Choose a destination and decide the file name as you like.
9.
Nov-08
6-40
Note: You should manually burn the Recovery CD from the ISO image right away and store your custom Recovery CD in a safe place.
Nov-08
6-41
6.7.4 Windows Scheduler tasks The Window Scheduler tasks are for the purpose of running pre-backup script and post-backup script for the tape backup. The pre-backup script shuts down WebSAMS, and makes a copy of websams data to E:\data\<School Unique ID>\database\sched\. The post-backup script performs housekeeping of websams files, program minor version upgrade and startup of WebSAMS. To check whether the backup to E:\data\<School Unique ID>\database\sched\ is successful, double click Backup Log shortcut (which located in WebSAMS folder in the server desktop) to open the backup log.
Normally, you do not need to perform any housekeeping job regarding windows scheduler tasks. In case the jobs are not running, you can re-schedule the job by the following steps: Window Scheduler would be used to schedule: pre_backup.bat to be run at 00:00 everyday, and post_backup.bat to be run at 0400 everyday On the other hand, the system backup would be run at 02:15 everyday. This following shows how to use Windows Scheduler to schedule the task pre_backup.bat. Similarly, post_backup.bat can be done in the similar way. 1. Launch the Scheduled Task Wizard by Start -> Programs -> Accessories -> System Tools -> Scheduled Tasks -> Add Scheduled Task. 2. Click Next button.
Nov-08
6-42
3. Click Browse button to choose the location of the file. Ie. D:\WebSAMS\scripts\pre_backup.bat
Nov-08
6-43
5.
Start time: 00:00 Perform this task: Every Day Start date: (tomorrow)
Nov-08
6-44
Nov-08
6-45
6.7.5 Adhoc database backup In case you want to perform an ad-hoc database backup, you can execute the Adhoc Database Backup script in WebSAMS folder found in the server desktop. The ad-hoc backup script would automatically shutdown the websams before backup, and startup the websams after backup. The following screen should pop up during the execution of the script. A copy of the database files, CDS files, user uploaded documents and user uploaded report templates would be copied to E:\data\<School Unique ID>\database\adhoc\.
To check whether an ad-hoc backup is successful, double click the Backup Log shortcut in the WebSAMS folder to open the backup log.
Nov-08
6-46
6.7.6 Server logs Windows Event logs Start -> All Programs -> Administrative tools -> Event Viewer
The event log would housekeep itself by default. It overwrites events older than 7 days. To modify the default schedule, right click a log and click properties. The following shows the Application Log Properties.
Nov-08
6-47
Apache log D:\WebSAMS\apache\logs\access.log-<dd-mm-yy> This is a log that logs all http requests. D:\WebSAMS\apache\logs\errors.log-<dd-mm-yy> This is a log that logs errors encountered by apache. The apache logs are house kept by the window scheduler task postbackup daily. The old logs would be deleted after 1 month. Please refer to Application Operation Manual for School on how to modify the retention period. Jboss log D:\WebSAMS\jboss\log\server.log This is the running log that logs Jboss activities for the current day. D:\WebSAMS\jboss\log\server.log-<dd-mm-yy> These are the old server logs. The Jboss logs are house kept by the window scheduler task postbackup daily. The old logs would be deleted after 1 month. Please refer to Application Operation Manual for School on how to modify the retention period.
Nov-08
6-48
6.7.7 Backup of Training Database snapshot You can backup a snapshot of the Training Database by double clicking the Backup_snapshot shortcut inside the Tools folder of the WebSAMS training folder on the desktop. The below command window will pop-up to show the status of the backup.
Please take note that the whole Training Instance must be shut down before running the script. Once the backup is successful, the command window will prompt a successful message and prompt you to press any key to finish. Please also note that, only one snapshot backup is allowed in the system and any other backup that follows will overwrite the previous backup. The snapshot is stored in E:\Data\9999\database\backup_snapshot\. If you want to keep the existing snapshot and make a new snapshot, you can copy the existing snapshot from E:\Data\9999\database\backup_snapshot\ to other secondary media and restore from it on a need basis. The snapshot backup would then be dumped to NAS during the regular daily backup. For the master database, it would also be dumped to NAS provided that the training websams instance has been shut down manually. You may then start up the Training Instance.
Nov-08
6-49
6.7.8 Restore Training Database to snapshot backup You can restore the snapshot backup database by double clicking the Restore_snapshot shortcut inside the Tools folder of the WebSAMS training folder on the desktop. If you need to restore a snapshot from secondary media, you have to copy the snapshot back to E:\Data\9999\database\backup_snapshot\ before double clicking the Restore_snapshot shortcut. Please note that you should only restore a snapshot backup database whose program version is the same as the training system program. If you have performed a version upgrade in training system via java web start after the snapshot backup, the snapshot backup would become invalid. To check the current training system program version, login to the training system:
Note: If an invalid backup is restored, you may still be able to start Jboss but some of the module function would not work properly.
Nov-08
6-50
The below command window will pop-up to show the status of the restore process when you double click the Restore_snapshot shortcut inside the Tools folder of the WebSAMS training folder on the desktop .
Please take note that the whole Training Instance must be shut down before running the script. After the snapshot backup is successful restored, the command window will prompt a successful message and prompt you to press any key to finish. You may then start up the Training Instance.
Nov-08
6-51
6.7.9 Restore to Original Training Database The original training database is the fresh training database that contains only preload data. You can restore the Training Database to the Original database image by double clicking the Restore_original shortcut inside the Tools folder of the WebSAMS training folder on the desktop. The original training database is also upgraded when performing a program version upgrade. Thus, you can perform Restore Original Training Database safely without considering the program version. The below command window will pop-up to show the status of the restore process.
Please take note that the whole Training Instance must be shut down before running the script. After the original database is successful restored, the command window will prompt a successful message and prompt you to press any key to finish. You may then start up the Training Instance.
Nov-08
6-52
6.8
As your backup software supports the bare-metal restore, the only resources you need to recover your system are only: - A recovery CD that you have created beforehand; - A full backup image of your system and; - The password that entitle the reading of the full backup image. Please be alerted that while the system is being restored, all data in the hard disk of the WebSAMS server will be erased in order to restore the system back to the moment when the backup job is run. Restore your WebSAMS server only when it is really necessary. The following shows an example of how to create a recovery CD using the software of Symantec Backup Exec System Recovery. 1. Insert the Backup Exec System Recovery CD (created in 7.12.3) into the DVD/CDROM drive of the WebSAMS server. Restart the server and boot by the CD. Note: Make sure the boot sequence of your server is set. As soon as you see the prompt Press any key to boot from CD, press a key to start the recovery environment. The system will start loading the necessary setting. Read the license agreement and then click Accept to proceed. The main window of the recovery environment will be launch. First of all, you should configure the network setting. Path: Network > Configure Network Connection Settings
2. 3. 4.
5.
Nov-08
6-53
6.
In the Network Adapter Configuration screen, select the option Use the following IP address. Specify a unique IP address (e.g. 192.168.1.2) and subnet mask of the WebSAMS server. Be sure that the subnet mask matches the subnet mask of the network Segment. Click OK to proceed. Path: Network > Configure Network Connection Settings
7.
Nov-08
6-54
8.
Input IP address (e.g. \\192.168.1.1\share) of the NAS server. Click OK to proceed. Path: Network > Map Network Drive
9.
10. On the Welcome page of the wizard, click Next. 11. Select System in the View by tab.
Nov-08
6-55
12. Click Browse, locate and select a recovery point (.sv2i) in the mapped drive, and then click Open.
Nov-08
6-56
Nov-08
6-57
14. Enter the password for the backup image and press OK.
15. A prompt may be shown to let the system to know whether the recovery is to be applied to a machine different from the one where the backup image created. Normally, the answer is No.
Nov-08
6-58
16. The latest backup will be loaded and listed automatically by the system. Check Reboot when finished and click Finish
17. The recovery process will start and the system will reboot once the process is completed.
Nov-08
6-59
7. 7.1
7.1.1
7.2
Nov-08
7-1
7.3
To stop the HTTP server: 1. Login as root. 2. Type the following command in a command prompt: shutdown h now
Nov-08
7-2
2. Fill in the new password, a successful message similar to the following should be shown.
7.4.3 Virus update Normally, you do not need to manually update the virus signature since the virus update is already scheduled to be run periodically by default. Open the web console (http://<HTTP server IP>:14942/) Click Update now on the left-hand menu to perform an ah-doc update. To configure schedule update, click Update -> Schedule Update on the lefthand menu. Configure your settings on the right-hand pane. Click Save. In case the connection to the internet is through a proxy server, you may need to set the proxy information by clicking the Configure Proxy Settings link next to Download Source in order to go online.
Nov-08
7-3
Nov-08
7-4
7.5
7.5.1 Taking system dumps System crashes can occur due to hardware malfunctions, I/O problems, and software errors. For Linux version, it will display an error message on the console, and then write a copy of its physical memory to a core file if the system crashes. Crash dump file is saved in a predetermined directory, which by default is /core.
7.5.2 Fault reporting procedures The procedures for fault reporting procedures are as follow: 1. Contact WebSAMS Helpdesk hotline at 3125-8510. 2. Report on any error. 3. If there is system dump, send an email to WebSAMS Helpdesk ([email protected]) with the system dump attached. 4. WebSAMS Helpdesk will assign an incident log number for a case. 5. WebSAMS Helpdesk will escalate a support call to the appropriate WebSAMS support team for trouble-shooting.
Nov-08
7-5
1. Login as root. 2. Type the following command in a command prompt: shutdown r now 3. The system would then reboot itself. 4. When the HTTP service is being loaded, it will ask for the pass phase. The pass phrase is the decryption key to unlock the digital certificate for SSL. 5. If you failed to enter the correct pass phrase during bootup (see picture below), you can restart the apache service manually by typing the following command in the command prompt after login: rcapache2 restart
Nov-08
7-6
7.7.1 System file backup The following are the configuration files/directories related to WebSAMS. Administrator is advised to keep a copy of the files in a floppy or in a cdrom. Apache configuration file (/etc/httpd/conf/httpd.conf) WebSAMS configuration directory (/etc/httpd/conf/tomcat/) School Certificate and key directory (/etc/httpd/conf/ssl/) 7.7.2 Server logs Syslog /var/log/messages /var/log/messages.1 /var/log/messages.2 /var/log/messages.3 /var/log/messages.4 These are the system log that logs most of the system messages and security messages. The logs would be house kept automatically by the system. The file messages is the running log file. When messages has been running for 7 days. It would be renamed to messages.1. The original messages.1 would then be renamed to messages.2, and similarly for messages.2 and messages.3. The original messages.4 would be discarded. Apache log /etc/httpd/logs/access_log /etc/httpd/logs/access_log.1 /etc/httpd/logs/access_log.2 /etc/httpd/logs/access_log.3 /etc/httpd/logs/access_log.4 These are logs that log all http requests. The logs would be house kept automatically by the system. The file access_log is the running log file. When access_log has been running for 7 days. It would be renamed to access_log.1. The original
Nov-08
7-7
access_log.1 would then be renamed to access_log.2, and similarly for access_log.2 and access_log.3. The original access_log.4 would be discarded. /etc/httpd/logs/error_log /etc/httpd/logs/error_log.1 /etc/httpd/logs/error_log.2 /etc/httpd/logs/error_log.3 /etc/httpd/logs/error_log.4 These are logs that log errors encountered by apache. The logs would be house kept automatically by the system. The file error_log is the running log file. When error_log has been running for 7 days. It would be renamed to error_log.1. The original error_log.1 would then be renamed to error_log.2, and similarly for error_log.2 and error_log.3. The original error_log.4 would be discarded. Virus scan activity log Open the web console (http://<HTTP server IP>:14942/) Click Logs on the left-hand menu.
The TrendMicro Server Protect send log messages to syslog, and it provides search function to filter out non anti-virus messages in syslog when you view the log.
Nov-08
7-8
8.
Nov-08
8-1