**ONLY CHANGE FOR OLDER SSH ALGORYTHM IF NEEDED FOR LEGACY DEVICES**
[Legacy ssh connections](https://docs.sflservicesllc.com/books/linux/page/linux-server-install-redhat-9-ssh-configuration "Legacy ssh connections")**CONTINUE HERE IF SSH LEGACY IS NOT NEEDED**
Enable Time Synchronization run the the following and add your domain time server ```shell vi /etc/chrony.conf ``` Add your server below the following and make sure you change the domain name from **sflservicesllc.com** ```shell # These servers were defined in the installation: #server _gateway iburst server domain.sflserviesllc.com iburst prefer ``` Enable Time Synchronization ```shell systemctl enable --now chronyd ``` Note: Time-zone changes are made with the command ```shell timedatectl ``` Make the following changes within the file ```shell sudo sed -i 's/^anonymous_enable=.*/anonymous_enable=NO/' /etc/vsftpd/vsftpd.conf sudo sed -i 's/^local_umask=.*/local_umask=002/' /etc/vsftpd/vsftpd.conf sudo sed -i 's/^#ascii_upload_enable=.*/ascii_upload_enable=YES/' /etc/vsftpd/vsftpd.conf sudo sed -i 's/^#ascii_download_enable=.*/ascii_download_enable=YES/' /etc/vsftpd/vsftpd.conf ``` Start and Enable FTP for transfer in and out for us or other vendors ```shell systemctl enable --now vsftpd.service ```**ONLY CHANGE THE FOLLOWING IF YOU HAVE REMOTE LOGGING**
Remote Logging Then add the following at the end of the file but make sure you update the IP address and replace the XXX's ```shell sudo tee -a /etc/rsyslog.conf > /dev/null << 'EOF' # Forwarding Rules *.* @192.168.XXX.XXX:514 # use @ for UDP Protocol *.* @@192.168.XXX.XXX:514 # use @@ for TCP Protocol auth.* @192.168.XXX.XXX:514 # only for authentication based records EOF ```**CONTINUE HERE IF NOT REMOTE LOGGING**
Enable Rsyslog to enable logging locally and remotely ```shell systemctl enable --now rsyslog ``` Emailing backup the original file ```shell cp /etc/postfix/main.cf /etc/postfix/main.cf.bak ``` Update the following with a remote or local email server and make sure you change the domain name from **sflservicesllc.com** ```shell # Set host, domain, and relayhost sudo postconf -e "myhostname = sflservicesllc.com" sudo postconf -e "mydomain = sflservicesllc.com" sudo postconf -e "relayhost = mail.sflservicesllc.com" # Check for syntax/configuration errors sudo postfix check # Reload Postfix to apply the configuration changes live sudo postfix reload # Check the specific parameters postconf myhostname mydomain relayhost ``` Optional: Update the following for no email server and make sure you change the domain name from **sflservicesllc.com** and only allow certain networks ```bash # Set mynetworks sudo postconf -e "mynetworks = 127.0.0.0/8, 168.100.189.0/28" # Verify the updated parameter postconf mynetworks # Check syntax and reload Postfix sudo postfix check sudo postfix reload ``` Enable Postfix ```shell systemctl enable --now postfix ``` Test your config this way ```shell echo "Install of Linux Rocks $HOSTNAME" | sendmail steve.ling@sflservicesllc.com ``` Locale add-ons to make sure that ANSI applications display correctly so edit the following and replace all of the values with the following Edit the following: ```shell sudo cat > /etc/locale.conf << EOF LANG="en_US" SUPPORTED="en_GB:en_GB-.UTF-8:en_US:en_US.UTF-8:de_DE:de_DE.UTF-8" SYSFONT="latarcyrheb-sun16" EOF ```**ONCE ADDED THE ABOVE CONFIGURATION THEN EXIT AND LOG BACK IN**
### Bash colors and Prompt Bash for root for color edit the following: Dependent on ```bash dnf install figlet toilet -y ``` Creating Aliases ```bash sudo cat > /etc/profile.d/custom-aliases.sh << EOF # Common interactive aliases for all users alias rm='rm -i' alias cp='cp -i' alias mv='mv -i' alias vi='vim' alias tailf='tail -f' EOF ``` Server Warning ```bash sudo tee /etc/profile.d/custom-prod-warning.sh > /dev/null << 'EOF' # /etc/profile.d/custom-prod-warning.sh # Production warning banner – only for real interactive logins # 1. Exit immediately if this is not an interactive shell [[ $- != *i* ]] && return # 2. Exit if we don't have a real terminal [[ -t 0 && -t 1 ]] || return # 3. Exit if SSH is running a forced command (rsync, scp, ansible, etc.) # OpenSSH sets SSH_ORIGINAL_COMMAND in these cases [[ -n "${SSH_ORIGINAL_COMMAND:-}" ]] && return # --- Safe to show the banner from here --- RED='\033[1;31m' YELLOW='\033[1;33m' NC='\033[0m' echo if command -v figlet >/dev/null 2>&1; then figlet -f big "PRODUCTION" | while IFS= read -r line; do printf '%b%s%b\n' "$RED" "$line" "$NC" done figlet -f big "SERVER" | while IFS= read -r line; do printf '%b%s%b\n' "$RED" "$line" "$NC" done else echo -e "${RED}***** PRODUCTION SERVER!! *****${NC}" fi echo echo -e "${YELLOW} *** EXTREME CAUTION REQUIRED ***${NC}" echo -e "${RED}This is a LIVE PRODUCTION system.${NC}" echo -e "${RED}Unauthorized access is strictly prohibited.${NC}" echo -e "${RED}All activity is logged and monitored.${NC}" echo -e "${YELLOW}Think twice before running commands!${NC}" echo EOF ``` Creating Colorful Prompts ```bash sudo tee /etc/profile.d/custom-prompt-and-colors.sh > /dev/null << 'EOF' # Custom LS_COLORS and improved multi-line colored prompt # Vibrant LS_COLORS (directories bold blue on gray, etc.) LS_COLORS='rs=0:di=01;44:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lz=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.rar=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.axa=00;36:*.oga=00;36:*.spx=00;36:*.xspf=00;36:' export LS_COLORS # Only set up the fancy colored prompt in real interactive terminals if [[ $- == *i* ]] && [[ -t 0 && -t 1 ]] && [[ -z "${SSH_ORIGINAL_COMMAND:-}" ]]; then # Color and style variables RESET=$(tput sgr0) BOLD=$(tput bold) BG_GRAY=$(tput setab 8) FG_RED=$(tput setaf 1) FG_MAGENTA=$(tput setaf 5) FG_GREEN=$(tput setaf 2) FG_CYAN=$(tput setaf 6) # Multi-line prompt – all non-printing sequences wrapped in \[ \] PS1="\n" PS1+="\[${BOLD}${BG_GRAY}${FG_RED}\]\u" PS1+="\[${FG_MAGENTA}\]@" PS1+="\[${FG_RED}\]\`hostname\`" PS1+="\[${FG_GREEN}\] : \`uname\` : " PS1+="\[${FG_CYAN}\]\d \t : \${PLANTID:+\$PLANTID }" PS1+="\[${RESET}\]\n" PS1+="\[${FG_CYAN}\][\w]" PS1+="\[${RESET}${BOLD}\] \$ \[${RESET}\]" export PS1 fi EOF ``` ### Database Install and Configuration ### Configure MariaDB**OPTIONAL ADD THE MARIADB REPO TO GET THE LATES REVISION**
**MARIADB REPORTED A PROBLEM WITH 10.5, YOU SHOULD CONSIDER UPGRADING TO 10.11**
Install the new Repo for MariaDB ```bash curl -sLS https://downloads.mariadb.com/MariaDB/mariadb_repo_setup | sudo bash ``` This is the location of ```bash vi /etc/yum.repos.d/mariadb.repo ``` You have to change the yellow below to get the desired version10.11 Revision
| \[mariadb-main\] name = MariaDB Server baseurl = https://dlm.mariadb.com/repo/mariadb-server/10.11/yum/rhel/9/x86\_64 gpgkey = file:///etc/pki/rpm-gpg/MariaDB-Server-GPG-KEY gpgcheck = 1 enabled = 1 module\_hotfixes = 1 \[mariadb-maxscale\] \# To use the latest stable release of MaxScale, use "latest" as the version \# To use the latest beta (or stable if no current beta) release of MaxScale, use "beta" as the version name = MariaDB MaxScale baseurl = https://dlm.mariadb.com/repo/maxscale/latest/yum/rhel/9/x86\_64 gpgkey = file:///etc/pki/rpm-gpg/MariaDB-MaxScale-GPG-KEY gpgcheck = 1 enabled = 1 |
BELOW IS FOR SERVER 8CPU AND 64GIG MEMORY
```shell #Custom performance_schema = ON tmpdir = /run/mariadb thread_cache_size = 4 table_open_cache = 16384 table_definition_cache = 8384 sql_mode = ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION query_cache_type = 0 query_cache_size = 0 query_cache_limit = 128M query_cache_strip_comments = 1 tmp_table_size = 512M max_heap_table_size = 512M max_connections = 750 max_allowed_packet = 24M sort_buffer_size = 24M join_buffer_size = 48M innodb_buffer_pool_size = 48G # 65-75% of RAM for InnoDB cache --> Keeping some for VUE innodb_buffer_pool_instances = 6 # One instance per CPU core --> Keeping some for VUE 2 out of 8 innodb_flush_method = O_DIRECT # Reduce I/O overhead innodb_flush_log_at_trx_commit = 2 # Balance performance and durability innodb_log_buffer_size = 16M # Buffer for transaction logs innodb_thread_concurrency = 0 # Let MySQL manage threads (0 = unlimited) innodb_io_capacity = 2000 # Adjust based on storage IOPS innodb_io_capacity_max = 4000 # Max IOPS for bursts innodb_use_native_aio = 1 innodb_flush_log_at_trx_commit = 2 # Balance performance and durability --> Changed from 0 innodb_file_per_table innodb_log_file_size = 2G # Larger logs for better write performance --> Changed from 512 #Optional configuration for transaction logging Change for mysql or mariadb #log_bin = /var/log/mariadb/mariadb.log #expire_logs_days = 2 ``` Reload the changes ```shell systemctl daemon-reload ``` Enable and start MySQL/MariaDB on boot ```shell systemctl enable --now mariadb.service ``` Run the following ```shell mysql ``` Then execute the following statements also make sure to (**change passwords as needed XXXXXX but NOT the users names**) ```shell DROP USER 'kiwisql'@'%'; FLUSH PRIVILEGES; CREATE USER 'kiwisql'@'%' IDENTIFIED BY 'XXXXXX'; GRANT all ON *.* TO 'kiwisql'@'%' WITH GRANT OPTION; DROP USER 'kiwisql'@'localhost'; FLUSH PRIVILEGES; CREATE USER 'kiwisql'@'localhost' IDENTIFIED BY 'XXXXXX'; GRANT all ON *.* TO 'kiwisql'@'localhost' WITH GRANT OPTION; DROP USER 'kiwilive'@'localhost'; FLUSH PRIVILEGES; CREATE USER 'kiwilive'@'localhost' IDENTIFIED BY 'XXXXXX'; GRANT all ON *.* TO 'kiwilive'@'localhost'; DROP USER 'remuser'@'%'; FLUSH PRIVILEGES; CREATE USER 'remuser'@'%' IDENTIFIED BY 'XXXXXX'; GRANT all ON *.* TO 'remuser'@'%' WITH GRANT OPTION; DROP USER 'remuser'@'localhost'; FLUSH PRIVILEGES; CREATE USER 'remuser'@'localhost' IDENTIFIED BY 'XXXXXX'; GRANT all ON *.* TO 'remuser'@'localhost' WITH GRANT OPTION; DROP USER 'reports'@'%'; FLUSH PRIVILEGES; CREATE USER 'reports'@'%' IDENTIFIED BY 'readonly'; GRANT SHOW DATABASES, SELECT, EXECUTE, PROCESS, SHOW VIEW ON *.* TO 'reports'@'%'; FLUSH PRIVILEGES; quit ``` ### Build skeleton for the Kiwiplan Environment ### Command to Run Setup the user environment Remember to change the **remuser** & **esp** password ESP username password is the global password store in ESP to let it connect and is *unfortunately *visible to an admin user but please make sure to (**change passwords as needed XXXXXX but NOT the users names**) ``` groupadd kiwiplan mkdir /opt/kiwi ln -s /opt/kiwi/ /KIWI mkdir /opt/kiwi/{home,rev} mkdir /opt/kiwi/rev/{map,mes} useradd -g kiwiplan -G wheel -d /KIWI/home/remuser/ remuser echo XXXXXXXXXX | passwd --stdin remuser useradd -g kiwiplan -d /KIWI/home/esp/ esp echo XXXXXXXXXX | passwd --stdin esp chown -R remuser:kiwiplan /opt/kiwi mkdir /etc/kiwiplan chown remuser:kiwiplan /etc/kiwiplan ``` ### Systemd Socket Implementation For KIDD ### Configure kidd.stocket Remember your **:set paste** command Create a socket file and the following ```shell vi /lib/systemd/system/kidd.socket ``` Then add the following ```shell [Unit] Description=KIDD [Socket] ListenStream=2326 Accept=yes [Install] WantedBy=sockets.target ``` Create a service file by editing the following ```shell vi /lib/systemd/system/kidd@.service ``` Then add the following ```shell [Unit] Description=Kidd Server [Service] ExecStart=/KIWI/rev/current/progs/kidd -a -p -F 1 User=root Group=root StandardInput=socket StandardOutput=socket # Resource configuration LimitNOFILE=8192 LimitNPROC=4096 # MaxConnections=nnn - The maximum number of connections to simultaneously run services instances for # when Accept=true is set. nnn should be sized accordingly for the implementation. MaxConnections=200 # The maximum number of connections for a service per source IP address. # This is very similar to the MaxConnections= directive above. Disabled by default. MaxConnectionsPerSource=80 ``` Start the service and enable on reboot ```shell systemctl start kidd.socket systemctl enable kidd.socket ``` This will only work once you have the Kiwiplan environment configured/installed ### VUE Installation Configurations ### Adjust system limits for VUE products Edit the following ```shell sudo tee -a /etc/security/limits.d/20-nproc.conf > /dev/null << 'EOF' # Soft process limit for kiwiplan group @kiwiplan soft nproc 32768 EOF ``` Verify the edit ```shell cat /etc/security/limits.d/20-nproc.conf ``` Edit the following ```shell sudo tee -a /etc/security/limits.conf > /dev/null << 'EOF' # Open file limits for kiwiplan group @kiwiplan - nofile 32768 EOF ``` Verify the edit ```bash cat /etc/security/limits.conf ``` ### Installing MsSQL Tool #### Configure MsSQL tools Install the repo for the MsSQL service/connection ```shell curl https://packages.microsoft.com/config/rhel/9/prod.repo > /etc/yum.repos.d/msprod.repo ``` This will only work once you have the Kiwiplan environment configured/installed Install the packages make sure you answer/type **YES** to all ```shell dnf remove mssql-tools unixODBC-utf16-devel dnf install mssql-tools unixODBC-devel -y ``` ## STOP HERE FOR YOUR TEMPLATE BUILD ## RESTART FROM HERE AFTER TEMPLATE BUILD #### Linux RedHat Registration Re-Register the server with RedHat if you entered initial credentials to add the server You need to run the **nmtui** command to bring up the menu from above in this documentation and then simply change the IP and also the hostname Run the following and this will change the subscription details ```shell subscription-manager register --force subscription-manager attach --auto ``` ### Activate Directory Setup #### Using SSSD Install the following packages ```shell yum install sssd sssd-tools realmd samba-common-tools oddjob oddjob-mkhomedir adcli samba -y ``` Run this just in-case your domain is still using RC4 ```shell update-crypto-policies --set DEFAULT:AD-SUPPORT ``` #### Configure KRB5 Edit the following file and make sure the following is added/changed ```shell vi /etc/krb5.conf ``` Add or changed the following below make sure yo change the ONLING.COM to your domain name| \# To opt out of the system crypto-policies configuration of krb5, remove the \# symlink at /etc/krb5.conf.d/crypto-policies which will not be recreated. includedir /etc/krb5.conf.d/ \[logging\] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin\_server = FILE:/var/log/kadmind.log \[libdefaults\] dns\_lookup\_realm = true ticket\_lifetime = 24h renew\_lifetime = 7d forwardable = true rdns = true pkinit\_anchors = FILE:/etc/pki/tls/certs/ca-bundle.crt spake\_preauth\_groups = edwards25519 dns\_canonicalize\_hostname = fallback qualify\_shortname = "" default\_realm = ONLING.COM default\_ccache\_name = KEYRING:persistent:%{uid} udp\_preference\_limit = 0 \[realms\] ONLING.COM = { kdc = domain\_controller..onling.com admin\_server = domain\_controller..onling.com } \[domain\_realm\] .onling.com = ONLING.COM onling.com = ONLING.COM |
For the join you may need to specify the -OU's for the specific location
| \# realm discover onling.com \# realm join -U [administrator@ONLING.COM](mailto:administrator@ONLING.COM) --verbose domain\_controller.onling.com \# authselect select sssd with-mkhomedir \# authselect apply-changes |
| \[sssd\] domains = onling.com config\_file\_version = 2 services = nss, pam \[domain/onling.com\] default\_shell = /bin/bash ad\_server = sfl-dom-001.onling.com krb5\_store\_password\_if\_offline = True cache\_credentials = True krb5\_realm = ONLING.COM realmd\_tags = manages-system joined-with-adcli id\_provider = ad fallback\_homedir = /home/%d/%u ad\_domain = onling.com use\_fully\_qualified\_names = false ldap\_id\_mapping = True access\_provider = ad override\_gid = 1000 ad\_gpo\_ignore\_unreadable = true ad\_gpo\_access\_control = disabled timeout = 300 |
| simple\_allow\_groups = sssd-users OR simple\_allow\_groups = gg-C3193???-KiwiTS\_access |
Once added the locals exit and telnet back into the server to take the update
### Bash colors and Prompt Bash for root for color edit the following Dependent on ```bash dnf install figlet toilet -y ``` Creating Aliases ```bash sudo cat > /etc/profile.d/custom-aliases.sh << EOF # Common interactive aliases for all users alias rm='rm -i' alias cp='cp -i' alias mv='mv -i' alias vi='vim' alias tailf='tail -f' EOF ``` Server Warning ```bash sudo tee /etc/profile.d/custom-prod-warning.sh > /dev/null << 'EOF' # Colorful PRODUCTION warning banner for interactive logins if [[ -n "$PS1" && -t 0 && -t 1 ]]; then # Interactive terminal with stdin/stdout RED='\033[1;31m' # Bold red YELLOW='\033[1;33m' # Bold yellow NC='\033[0m' # No color echo if command -v figlet >/dev/null 2>&1; then figlet -f big "PRODUCTION" | while IFS= read -r line; do printf '%b%s%b\n' "$RED" "$line" "$NC" done figlet -f big "SERVER" | while IFS= read -r line; do printf '%b%s%b\n' "$RED" "$line" "$NC" done else echo -e "${RED}***** PRODUCTION SERVER!! *****${NC}" fi echo echo -e "${YELLOW} *** EXTREME CAUTION REQUIRED ***${NC}" echo -e "${RED}This is a LIVE PRODUCTION system.${NC}" echo -e "${RED}Unauthorized access is strictly prohibited.${NC}" echo -e "${RED}All activity is logged and monitored.${NC}" echo -e "${YELLOW}Think twice before running commands!${NC}" echo # Pause briefly to ensure user sees the warning read -t 5 -p "Press Enter to continue (auto-continue in 5 seconds)... " || true echo fi EOF ``` Creating Colorful Prompts ```bash sudo tee /etc/profile.d/custom-prompt-and-colors.sh > /dev/null << 'EOF' # Custom LS_COLORS and improved multi-line colored prompt # Vibrant LS_COLORS (directories bold blue on gray, etc.) LS_COLORS='rs=0:di=01;44:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lz=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.rar=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.axa=00;36:*.oga=00;36:*.spx=00;36:*.xspf=00;36:' export LS_COLORS # Color and style variables (cached tput calls for speed) RESET=$(tput sgr0) BOLD=$(tput bold) BG_GRAY=$(tput setab 8) FG_RED=$(tput setaf 1) FG_MAGENTA=$(tput setaf 5) FG_GREEN=$(tput setaf 2) FG_CYAN=$(tput setaf 6) # Multi-line prompt PS1="\n${BOLD}${BG_GRAY}${FG_RED}\\u${FG_MAGENTA}@${FG_RED}\`hostname\`${FG_GREEN} : \`uname\` : ${FG_CYAN}\\d \\t : \${PLANTID:+\$PLANTID }\n${FG_CYAN}[\\w]${RESET}${BOLD} \\\$ ${RESET}" export PS1 EOF ``` ### Database Install and Configuration ### Configure MariaDBOptional: To add the MariadB repo to get the latest revision other then the one that is included in the RedHat
MySQL/MariaDB reported a problem with 10.5, you should consider upgrading to 10.6
Install the new Repo for MariaDB ```bash curl -sS https://downloads.mariadb.com/MariaDB/mariadb_repo_setup | sudo bash ``` This is the location of ```bash vi /etc/yum.repos.d/MariaDB.repo ``` You have to change the yellow below to get the desired version| \[mariadb\] name = MariaDB baseurl = https://rpm.mariadb.org/10.6/rhel/$releasever/$basearch gpgkey= https://rpm.mariadb.org/RPM-GPG-KEY-MariaDB gpgcheck=1 |
Done with Optional
Run the following ```shell systemctl edit mariadb.service ``` Then add the following to the file in between these lines or if blank just add and save ```shell ### Editing /etc/systemd/system/mariadb.service.d/override.conf ### Anything between here and the comment below will become the new contents of the file [Service] LimitNOFILE=32768 ### Lines below this comment will be discarded ``` Run the following ```shell vi /etc/my.cnf.d/client.cnf ``` Add the following below the **\[client\]** section ```shell socket=/var/lib/mysql/mysql.sock ``` Run the following ```shell vi /etc/my.cnf.d/mariadb-server.cnf ``` Add the following below the **\[mysqld\]** section and you will have to use the **:set paste** command or it will not paste correctly ```shell #Custom performance_schema = ON tmpdir = /run/mariadb thread_cache_size = 4 table_open_cache = 16384 table_definition_cache = 8384 sql_mode = ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION query_cache_type = 0 query_cache_size = 0 query_cache_limit = 128M query_cache_strip_comments = 1 tmp_table_size = 512M max_heap_table_size = 512M max_connections = 512 max_allowed_packet = 24M sort_buffer_size = 24M join_buffer_size = 48M innodb_buffer_pool_size = 4G innodb_buffer_pool_instances = 4 innodb_use_native_aio = 1 innodb_flush_log_at_trx_commit = 0 innodb_file_per_table innodb_log_file_size = 512M #Optional configuration for transaction loggin log_bin = /var/log/mariadb/mariadb.log expire_logs_days = 2 ``` Reload the changes ```shell systemctl daemon-reload ``` Enable and start MySQL/MariaDB on boot ```shell systemctl enable --now mariadb.service ``` Run the following ```shell mysql ``` Then execute the following statements also make sure to (**change passwords as needed XXXXXXXXXX but NOT the users names**) ```shell CREATE USER 'kiwisql'@'%' IDENTIFIED BY 'XXXXXXXXXX'; GRANT all ON *.* TO 'kiwisql'@'%' WITH GRANT OPTION; CREATE USER 'kiwisql'@'localhost' IDENTIFIED BY 'XXXXXXXXXX'; GRANT all ON *.* TO 'kiwisql'@'localhost' WITH GRANT OPTION; CREATE USER 'kiwilive'@'localhost' IDENTIFIED BY 'XXXXXXXXXX'; GRANT all ON *.* TO 'kiwilive'@'localhost'; CREATE USER 'remuser'@'localhost' IDENTIFIED BY 'XXXXXXXXXX'; GRANT all ON *.* TO 'remuser'@'localhost' WITH GRANT OPTION; CREATE USER 'reports'@'%' IDENTIFIED BY 'XXXXXXXXXX'; GRANT SHOW DATABASES, SELECT, EXECUTE, PROCESS, SHOW VIEW ON *.* TO 'reports'@'%'; FLUSH PRIVILEGES; Quit ``` ### Build skeleton for the Kiwiplan Environment ### Command to Run Setup the user environment Remember to change the **remuser** & **esp** password ESP username password is the global password store in ESP to let it connect and is *unfortunately *visible to an admin user but please make sure to (**change passwords as needed XXXXXXXXXX but NOT the users names**) ``` groupadd kiwiplan mkdir /opt/kiwi ln -s /opt/kiwi/ /KIWI mkdir /opt/kiwi/{home,rev} mkdir /opt/kiwi/rev/{map,mes} useradd -g kiwiplan -G wheel -d /KIWI/home/remuser/ remuser echo XXXXXXXXXX | passwd --stdin remuser useradd -g kiwiplan -d /KIWI/home/esp/ esp echo XXXXXXXXXX | passwd --stdin esp chown -R remuser:kiwiplan /opt/kiwi mkdir /etc/kiwiplan chown remuser:kiwiplan /etc/kiwiplan ``` ### Configure kidds Remember your **:set paste** command Edit xinetd.conf: ```bash vi /etc/xinetd.conf ``` Add the following ad the end of the # Define access restriction defaults section ```bash instances = 200 per_source = 80 ``` Should look like this:| \# \# This is the master xinetd configuration file. Settings in the \# default section will be inherited by all service configurations \# unless explicitly overridden in the service configuration. See \# xinetd.conf in the man pages for a more detailed explanation of \# these attributes. defaults { \# The next two items are intended to be a quick access place to \# temporarily enable or disable services. \# \# enabled = \# disabled = \# Define general logging characteristics. log\_type = SYSLOG daemon info log\_on\_failure = HOST log\_on\_success = PID HOST DURATION EXIT \# Define access restriction defaults \# \# no\_access = \# only\_from = \# max\_load = 0 cps = 50 10 instances = 200 per\_source = 80 \# Address and networking defaults \# \# bind = \# mdns = yes v6only = no \# setup environmental attributes \# \# passenv = groups = yes umask = 002 \# Generally, banners are not used. This sets up their global defaults \# \# banner = \# banner\_fail = \# banner\_success = } includedir /etc/xinetd.d |
| \# To opt out of the system crypto-policies configuration of krb5, remove the \# symlink at /etc/krb5.conf.d/crypto-policies which will not be recreated. includedir /etc/krb5.conf.d/ \[logging\] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin\_server = FILE:/var/log/kadmind.log \[libdefaults\] dns\_lookup\_realm = true ticket\_lifetime = 24h renew\_lifetime = 7d forwardable = true rdns = true pkinit\_anchors = FILE:/etc/pki/tls/certs/ca-bundle.crt spake\_preauth\_groups = edwards25519 dns\_canonicalize\_hostname = fallback qualify\_shortname = "" default\_realm = ONLING.COM default\_ccache\_name = KEYRING:persistent:%{uid} udp\_preference\_limit = 0 \[realms\] ONLING.COM = { kdc = domain\_controller..onling.com admin\_server = domain\_controller..onling.com } \[domain\_realm\] .onling.com = ONLING.COM onling.com = ONLING.COM |
For the join you may need to specify the -OU's for the specific location
| \# realm discover onling.com \# realm join -U [administrator@ONLING.COM](mailto:administrator@ONLING.COM) --verbose domain\_controller.onling.com \# authselect select sssd with-mkhomedir \# authselect apply-changes |
| \[sssd\] domains = onling.com config\_file\_version = 2 services = nss, pam \[domain/onling.com\] default\_shell = /bin/bash ad\_server = sfl-dom-001.onling.com krb5\_store\_password\_if\_offline = True cache\_credentials = True krb5\_realm = ONLING.COM realmd\_tags = manages-system joined-with-adcli id\_provider = ad fallback\_homedir = /home/%d/%u ad\_domain = onling.com use\_fully\_qualified\_names = false ldap\_id\_mapping = True access\_provider = ad override\_gid = 1000 ad\_gpo\_ignore\_unreadable = true ad\_gpo\_access\_control = disabled timeout = 300 |
| simple\_allow\_groups = sssd-users OR simple\_allow\_groups = gg-C3193???-KiwiTS\_access |
Once added the locals exit and telnet back into the server to take the update
### Bash colors and Prompt Bash for root for color edit the following Dependent on ```bash dnf install figlet toilet -y ``` Creating Aliases ```bash sudo cat > /etc/profile.d/custom-aliases.sh << EOF # Common interactive aliases for all users alias rm='rm -i' alias cp='cp -i' alias mv='mv -i' alias vi='vim' alias tailf='tail -f' EOF ``` Server Warning ```bash sudo tee /etc/profile.d/custom-prod-warning.sh > /dev/null << 'EOF' # Colorful PRODUCTION warning banner for interactive logins if [[ -n "$PS1" && -t 0 && -t 1 ]]; then # Interactive terminal with stdin/stdout RED='\033[1;31m' # Bold red YELLOW='\033[1;33m' # Bold yellow NC='\033[0m' # No color echo if command -v figlet >/dev/null 2>&1; then figlet -f big "PRODUCTION" | while IFS= read -r line; do printf '%b%s%b\n' "$RED" "$line" "$NC" done figlet -f big "SERVER" | while IFS= read -r line; do printf '%b%s%b\n' "$RED" "$line" "$NC" done else echo -e "${RED}***** PRODUCTION SERVER!! *****${NC}" fi echo echo -e "${YELLOW} *** EXTREME CAUTION REQUIRED ***${NC}" echo -e "${RED}This is a LIVE PRODUCTION system.${NC}" echo -e "${RED}Unauthorized access is strictly prohibited.${NC}" echo -e "${RED}All activity is logged and monitored.${NC}" echo -e "${YELLOW}Think twice before running commands!${NC}" echo # Pause briefly to ensure user sees the warning read -t 5 -p "Press Enter to continue (auto-continue in 5 seconds)... " || true echo fi EOF ``` Creating Colorful Prompts ```bash sudo tee /etc/profile.d/custom-prompt-and-colors.sh > /dev/null << 'EOF' # Custom LS_COLORS and improved multi-line colored prompt # Vibrant LS_COLORS (directories bold blue on gray, etc.) LS_COLORS='rs=0:di=01;44:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arj=01;31:*.taz=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lz=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.rar=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=00;36:*.au=00;36:*.flac=00;36:*.mid=00;36:*.midi=00;36:*.mka=00;36:*.mp3=00;36:*.mpc=00;36:*.ogg=00;36:*.ra=00;36:*.wav=00;36:*.axa=00;36:*.oga=00;36:*.spx=00;36:*.xspf=00;36:' export LS_COLORS # Color and style variables (cached tput calls for speed) RESET=$(tput sgr0) BOLD=$(tput bold) BG_GRAY=$(tput setab 8) FG_RED=$(tput setaf 1) FG_MAGENTA=$(tput setaf 5) FG_GREEN=$(tput setaf 2) FG_CYAN=$(tput setaf 6) # Multi-line prompt PS1="\n${BOLD}${BG_GRAY}${FG_RED}\\u${FG_MAGENTA}@${FG_RED}\`hostname\`${FG_GREEN} : \`uname\` : ${FG_CYAN}\\d \\t : \${PLANTID:+\$PLANTID }\n${FG_CYAN}[\\w]${RESET}${BOLD} \\\$ ${RESET}" export PS1 EOF ``` ### Database Install and Configuration ### Configure MariaDBOptional: To add the MariadB repo to get the latest revision other then the one that is included in the RedHat
Install the new Repo for MariaDB ```bash curl -sS https://downloads.mariadb.com/MariaDB/mariadb_repo_setup | sudo bash ``` This is the location of ```bash vi /etc/yum.repos.d/MariaDB.repo ``` You have to change the yellow below to get the desired version| \[mariadb\] name = MariaDB baseurl = https://rpm.mariadb.org/10.6/rhel/$releasever/$basearch gpgkey= https://rpm.mariadb.org/RPM-GPG-KEY-MariaDB gpgcheck=1 |
Done with Optional
Run the following ```shell systemctl edit mariadb.service ``` Then add the following to the file in between these lines ```shell ### Editing /etc/systemd/system/mariadb.service.d/override.conf ### Anything between here and the comment below will become the new contents of the file [Service] LimitNOFILE=32768 ### Lines below this comment will be discarded ``` Run the following ```shell vi /etc/my.cnf.d/client.cnf ``` Add the following below the **\[client\]** section ```shell socket=/var/lib/mysql/mysql.sock ``` Run the following ```shell vi /etc/my.cnf.d/mariadb-server.cnf ```If you used the optional above use the following link
```bash vi /etc/my.cnf.d/server.cnf ```Done with Optional
Add the following below the **\[mysqld\]** section and you will have to use the **:set paste** command or it will not paste correctly ```shell #Custom performance_schema = ON tmpdir = /run/mariadb thread_cache_size = 4 table_open_cache = 16384 table_definition_cache = 8384 sql_mode = ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION query_cache_type = 0 query_cache_size = 0 query_cache_limit = 128M query_cache_strip_comments = 1 tmp_table_size = 512M max_heap_table_size = 512M max_connections = 512 max_allowed_packet = 24M sort_buffer_size = 24M join_buffer_size = 48M innodb_buffer_pool_size = 4G innodb_buffer_pool_instances = 4 innodb_use_native_aio = 1 innodb_flush_log_at_trx_commit = 0 innodb_file_per_table innodb_log_file_size = 512M #Optional configuration for transaction loggin log_bin = /var/log/mariadb/mariadb.log expire_logs_days = 2 ``` Reload the changes ```shell systemctl daemon-reload ``` Enable and start MySQL/MariaDB on boot ```shell systemctl enable --now mariadb.service echo > /etc/logrotate.d/mariadb ``` Run the following ```shell mysql ``` Then execute the following statements also make sure to (**change passwords as needed XXXXXXXXXX but NOT the users names**) ```shell CREATE USER 'kiwisql'@'%' IDENTIFIED BY '800486kiwi'; GRANT all ON *.* TO 'kiwisql'@'%' WITH GRANT OPTION; CREATE USER 'kiwisql'@'localhost' IDENTIFIED BY '800486kiwi'; GRANT all ON *.* TO 'kiwisql'@'localhost' WITH GRANT OPTION; CREATE USER 'kiwilive'@'localhost' IDENTIFIED BY '5541500kiwi'; GRANT all ON *.* TO 'kiwilive'@'localhost'; CREATE USER 'remuser'@'localhost' IDENTIFIED BY '5541500kiwi'; GRANT all ON *.* TO 'remuser'@'localhost' WITH GRANT OPTION; CREATE USER 'reports'@'%' IDENTIFIED BY 'readonly'; GRANT SHOW DATABASES, SELECT, EXECUTE, PROCESS, SHOW VIEW ON *.* TO 'reports'@'%'; FLUSH PRIVILEGES; Quit ``` ### Build skeleton for the Kiwiplan Environment ### Command to Run Setup the user environment Remember to change the **remuser** & **esp** password ESP username password is the global password store in ESP to let it connect and is *unfortunately *visible to an admin user but please make sure to (**change passwords as needed XXXXXXXXXX but NOT the users names**) ``` groupadd kiwiplan mkdir /opt/kiwi ln -s /opt/kiwi/ /KIWI mkdir /opt/kiwi/{home,rev} mkdir /opt/kiwi/rev/{map,mes} useradd -g kiwiplan -G wheel -d /KIWI/home/remuser/ remuser echo NewDssP@$$RemRhel193 | passwd --stdin remuser useradd -g kiwiplan -d /KIWI/home/esp/ esp echo esp2map | passwd --stdin esp chown -R remuser:kiwiplan /opt/kiwi mkdir /etc/kiwiplan chown remuser:kiwiplan /etc/kiwiplan ``` ### Systemd Socket Implementation For KIDD ### Configure kidd.stocket Remember your **:set paste** command Create a socket file and the following ```shell vi /lib/systemd/system/kidd.socket ``` Then add the following ```shell [Unit] Description=KIDD [Socket] ListenStream=2326 Accept=yes [Install] WantedBy=sockets.target ``` Create a service file by editing the following ```shell vi /lib/systemd/system/kidd@.service ``` Then add the following ```shell [Unit] Description=Kidd Server [Service] ExecStart=/KIWI/rev/current/progs/kidd -a -p -F 1 User=root Group=root StandardInput=socket StandardOutput=socket # Resource configuration LimitNOFILE=8192 LimitNPROC=4096 # MaxConnections=nnn - The maximum number of connections to simultaneously run services instances for # when Accept=true is set. nnn should be sized accordingly for the implementation. MaxConnections=200 # The maximum number of connections for a service per source IP address. # This is very similar to the MaxConnections= directive above. Disabled by default. MaxConnectionsPerSource=80 ``` Start the service and enable on reboot ```shell systemctl start kidd.socket systemctl enable kidd.socket ``` This will only work once you have the Kiwiplan environment configured/installed ### VUE Installation Configurations ### Adjust system limits for VUE products Edit the following ```shell vi /etc/security/limits.d/20-nproc.conf ``` Add the following ```shell @kiwiplan soft nproc 32768 ``` Edit the following ```shell vi /etc/security/limits.conf ``` Then add the following before the **\#End of file** ```shell @kiwiplan - nofile 32768 ``` ### Installing MsSQL Tool #### Configure MsSQL tools Install the repo for the MsSQL service/connection ```shell curl https://packages.microsoft.com/config/rhel/9/prod.repo > /etc/yum.repos.d/msprod.repo ``` This will only work once you have the Kiwiplan environment configured/installed Install the packages make sure you answer/type **YES** to all ```shell dnf remove mssql-tools unixODBC-utf16-devel dnf install mssql-tools unixODBC-devel -y ``` ### Activate Directory Setup #### Using SSSD Install the following packages ```shell yum install sssd sssd-tools realmd samba-common-tools oddjob oddjob-mkhomedir adcli samba -y ``` Run this just in-case your domain is still using RC4 ```shell update-crypto-policies --set DEFAULT:AD-SUPPORT ``` #### Configure KRB5 Edit the following file and make sure the following is added/changed ```shell vi /etc/krb5.conf ``` Add or changed the following below| \# To opt out of the system crypto-policies configuration of krb5, remove the \# symlink at /etc/krb5.conf.d/crypto-policies which will not be recreated. includedir /etc/krb5.conf.d/ \[logging\] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin\_server = FILE:/var/log/kadmind.log \[libdefaults\] dns\_lookup\_realm = true ticket\_lifetime = 24h renew\_lifetime = 7d forwardable = true rdns = true pkinit\_anchors = FILE:/etc/pki/tls/certs/ca-bundle.crt spake\_preauth\_groups = edwards25519 dns\_canonicalize\_hostname = fallback qualify\_shortname = "" default\_realm = ONLING.COM default\_ccache\_name = KEYRING:persistent:%{uid} udp\_preference\_limit = 0 \[realms\] ONLING.COM = { kdc = domain\_controller.onling.com admin\_server = domain\_controller.onling.com } \[domain\_realm\] .onling.com = ONLING.COM onling.com = ONLING.COM |
For the join you may need to specify the -OU's for the specific location
| \# realm discover onling.com \# realm join -U [administrator@ONLING.COM](mailto:administrator@ONLING.COM) --verbose domain\_controller.onling.com \# authselect select sssd with-mkhomedir \# authselect apply-changes |
| \[sssd\] domains = onling.com config\_file\_version = 2 services = nss, pam \[domain/onling.com\] default\_shell = /bin/bash ad\_server = sfl-dom-001.onling.com krb5\_store\_password\_if\_offline = True cache\_credentials = True krb5\_realm = ONLING.COM realmd\_tags = manages-system joined-with-adcli id\_provider = ad fallback\_homedir = /home/%d/%u ad\_domain = onling.com use\_fully\_qualified\_names = false ldap\_id\_mapping = True access\_provider = ad override\_gid = 1000 ad\_gpo\_ignore\_unreadable = true ad\_gpo\_access\_control = disabled timeout = 300 |
| simple\_allow\_groups = sssd-users OR simple\_allow\_groups = gg-C3193???-KiwiTS\_access |
| System Description View\_or\_Maintain GEN General for many systems Maintain Prefix Description View\_or\_Maintain Default\_key Many\_records\_allowed PP Purge Control Parameters Maintain PARAMS Y Description Contents \----------- -------- Key PARAMS Produce filefull before purge Y Purge orders daily (Y/N) Y Purge orders weekly (0-7) 0=No 7 Number of days orders to keep 800 Repair file if errors found Y Purge details daily (Y/N) Y Purge details weekly (0-7)0=No 7 Number of days details to keep 800 Repair file if errors found Y Purge history daily (Y/N) Y Purge history weekly (0-7)0=No 7 Number of days history to keep 800 Repair file if errors found Y Purge specifications daily Y/N Y Purge specs weekly (0-7) 0=No 7 No.days specifications to keep 800 Repair file if errors found Y |
| System Description View\_or\_Maintain GEN General for many systems Maintain Prefix Description View\_or\_Maintain Default\_key Many\_records\_allowed PP Purge Control Parameters Maintain PARAMS Y Description Contents \----------- -------- Key CSC Produce filefull before purge Y Purge orders daily (Y/N) Y Purge orders weekly (0-7) 0=No 0 Number of days orders to keep 800 Repair file if errors found Y Purge details daily (Y/N) Y Purge details weekly (0-7)0=No 0 Number of days details to keep 800 Repair file if errors found Y Purge history daily (Y/N) Y Purge history weekly (0-7)0=No 0 Number of days history to keep 800 Repair file if errors found Y Purge specifications daily Y/N Y Purge specs weekly (0-7) 0=No 0 No.days specifications to keep 800 Repair file if errors found Y |
| System Description View\_or\_Maintain GEN General for many systems Maintain Prefix Description View\_or\_Maintain Default\_key Many\_records\_allowed PP Purge Control Parameters Maintain PARAMS Y Description Contents \----------- -------- Key RSS Produce filefull before purge Y Purge orders daily (Y/N) Y Purge orders weekly (0-7) 0=No 0 Number of days orders to keep 400 Repair file if errors found Y Purge details daily (Y/N) Y Purge details weekly (0-7)0=No 0 Number of days details to keep 400 Repair file if errors found Y Purge history daily (Y/N) Y Purge history weekly (0-7)0=No 0 Number of days history to keep 400 Repair file if errors found Y Purge specifications daily Y/N Y Purge specs weekly (0-7) 0=No 0 No.days specifications to keep 400 Repair file if errors found Y |
| System Description View\_or\_Maintain GEN General for many systems Maintain Prefix Description View\_or\_Maintain Default\_key Many\_records\_allowed PP Purge Control Parameters Maintain PARAMS Y Description Contents \----------- -------- Key ULT Produce filefull before purge Y Purge orders daily (Y/N) Y Purge orders weekly (0-7) 0=No 0 Number of days orders to keep 400 Repair file if errors found Y Purge details daily (Y/N) Y Purge details weekly (0-7)0=No 0 Number of days details to keep 200 Repair file if errors found Y Purge history daily (Y/N) Y Purge history weekly (0-7)0=No 0 Number of days history to keep 400 Repair file if errors found Y Purge specifications daily Y/N Y Purge specs weekly (0-7) 0=No 0 No.days specifications to keep 800 Repair file if errors found Y |
| System Description View\_or\_Maintain GEN General for many systems Maintain Prefix Description View\_or\_Maintain Default\_key Many\_records\_allowed PP Purge Control Parameters Maintain PARAMS Y Description Contents \----------- -------- Key WIP Produce filefull before purge N Purge orders daily (Y/N) N Purge orders weekly (0-7) 0=No 0 Number of days orders to keep 60 Repair file if errors found Y Purge details daily (Y/N) N Purge details weekly (0-7)0=No 0 Number of days details to keep 60 Repair file if errors found Y Purge history daily (Y/N) Y Purge history weekly (0-7)0=No 0 Number of days history to keep 120 Repair file if errors found Y Purge specifications daily Y/N Purge specs weekly (0-7) 0=No 0 No.days specifications to keep 100 Repair file if errors found Y |
| **Below - PCS Classic** | **Below - PCS VUE** |
| **Above - PCS Classic** | **Above - PCS VUE** |
| **ReFresh** | ||||
| **Setup In** | ||||
| Classic | VUE | Option | Vue Script | Comments |
| Yes | Material > Material Group > Board Group | |||
| Yes | Configuration > Organization > Score Types | Make sure default in VUE is set but also set CORR-CP & PCS-QB | ||
| Yes | Yes | Configuration > Organization > Score Types & PCS-QB & CORR-CP | Make sure that classic has the default converting score set | |
| Yes | Materials > Flute Types | |||
| Yes | Materials > Material Group > Board Group | |||
| Yes | Materials > Material Groups > Paper Classes | |||
| Yes | Yes | CSC00 > P > CSC > UD | ||
| Yes | Configuration > Downtime > Downtime Classes | |||
| Yes | Yes | Materials > Materials > Shippers & GEN-SN | VUE only needed for COMMS. Classic for everything else | |
| Yes | PCS00 > P > GEN > TB | |||
| Yes | PCS00 > P > GEN > TU | |||
| Yes | Yes | Configuration > Parameters > Manufacturing > COMMS & GEN-UM | ||
| Yes | GEN-UP | Not used in VUE but stored on the unitising table | ||
| Yes | PCS00 > P > GEN > WC | |||
| Yes | INV-SM | Not used in VUE but stored on the shipmethod and job table | ||
| Yes | PCS00 > P > PCS > CC | Yes | ||
| Yes | PCS00 > P > PCS > CE | Yes | ||
| Yes | PCS-CN, GEN-CM, GEN-CN | |||
| Yes | Configuration > Parameters > PCS > Feedback | |||
| Yes | PCS00 > P > PCS > IC | Yes | ||
| Yes | Configuration > Tool > Tool Types & PCS-PD | VUE needs these for tooling but ESP reads classic for type | ||
| Yes | PCS00 > P > PCS > QD | |||
| Yes | PCS00 > P > PCS > QS | |||
| Yes | Configuration > Organization > Machine Groups & PCS-QE | Classic & ESP reads the group description from classic | ||
| Yes | Configuration > Machine > Machine Operations & PCS-QK | |||
| Yes | Configuration > Order > Hold Statuses | |||
| Yes | Configuration > Order > Hold Statuses | |||
| Yes | PCS00 > P > PCS > QP | |||
| Yes | Configuration > Machine > Slot WidthCodes | |||
| Data Fields | ||||
| Yes | Materials > Materials > Papers | |||
| Yes | Materials > Materials > Starch | |||
| Yes | Materials > Materials > Corrugated Boards | |||
| Yes | Materials > Materials > Corrugator Coatings | |||
| Yes | PCS00 > L > D | |||
| Materials > Material Group > Ink Groups | ||||
| Yes | Configuration > Organization > Plant > Stores and invmenu | Only machine in and out feed locations need to be in VUE | ||
| Yes | Configuration > Organization > Plant > Stores and invmenu | Only machine in and out feed locations need to be in VUE | ||
| Yes | Yes | Configuration > KDG Templates & lbs00:A | Just code needs to exist in classic, label defined in VUE | |
| Yes | Configuration > Organization > Plant > Machines | |||
| Calendars > Shift Names | ||||
| Calendars > Calendars | ||||
| PICS and ESP | Must enter in ESP and PICS and must match | |||
| Sheet Plants / Box Plant Full VUE | |||||
| Setup In | |||||
| Parameter | Description | Classic | VUE | Option | Comments |
| CORR-BB | Board Codes | Yes | Material > Material Group > Board Group | ||
| CORR-CT | Score Codes | Yes | Configuration > Organization > Score Types | Make sure default in VUE is set but also set CORR-CP & PCS-QB | |
| CORR-CP & PCS-QB | Default Score Code | Yes | Yes | Configuration > Organization > Score Types & PCS-QB & CORR-CP | Make sure that classic has the default converting score set |
| CORR-FL | Flutes | Yes | Materials > Flute Types | ||
| CSC-BS | Board Structure | Yes | Materials > Material Group > Board Group | ||
| CSC-PC | Paper Classes | Not required for sheetplants | |||
| CSC-UD | Unit Descriptions | Yes | Configuration > Order > Groups | ||
| GEN-QC | Downtime Classes | Yes | Configuration > Downtime > Downtime Classes | ||
| GEN-SN | Shipper types | Yes | Yes | Materials > Materials > Shippers & GEN-SN | VUE only needed for COMMS. Classic for everything else |
| GEN-TB | Top Boards | Yes | Materials > Materials > Top Board | ||
| GEN-TU | Pallets | Yes | Materials > Materials > Pallets Materials > Unit Load Types < -- After version 10 Box Plant | ||
| GEN-UM | Units of Measure | Yes | Yes | Configuration > Parameters > Manufacturing > COMMS & GEN-UM | |
| GEN-UP | Label/Sample Placement | Yes | GEN-UP | Not used in VUE but stored on the unitising table | |
| GEN-WC | Waste Classes | Yes | Configuration > Waste - Categories | ||
| INV-SM | Shipment Method | Yes | INV-SM | Not used in VUE but stored on the shipmethod and job table | |
| PCS-CC | Closure Codes | Yes | Configuration > Machine > Closure Codes | ||
| PCS-CE | Flap Types | Yes | Configuration > Machine > Closure Type | ||
| PCS/GEN-CM/CN | Communications | Yes | PCS-CN, GEN-CM, GEN-CN | ||
| PCS-FB | Feedback | Yes | Configuration > Parameters > PCS > Feedback | ||
| PCS-IC | Inks & Coatings | Yes | Configuration > Material Group > Ink types | ||
| PCS-PD | Tooling Definitions | Yes | Yes | Configuration > Tool > Tool Types & PCS-PD | VUE needs these for tooling but ESP reads classic for type |
| PCS-QD | Tooling Die Status | Yes | Configuration > Tool > Tool Statuses | ||
| PCS-QS | Tooling Print Status | Yes | Configuration > Tool > Tool Statuses | ||
| PCS-QE | Machine Groups | Yes | Yes | Configuration > Organization > Machine Groups & PCS-QE | Classic & ESP reads the group description from classic |
| PCS-QK | Machine Operations | Yes | Yes | Configuration > Machine > Machine Operations & PCS-QK | |
| PCS-QO | Order Status | Yes | Configuration > Order > Hold Statuses | ||
| CSC-OS | Order Status | Yes | Configuration > Order > Hold Statuses | ||
| PCS-QP | PCS-QP | Not required for sheetplants | |||
| PCS-SW | Slot Widths | Yes | Configuration > Machine > Slot WidthCodes | ||
| Data Fields | |||||
| Papers | Not required for sheetplants | ||||
| Starch | Not required for sheetplants | ||||
| Board Grades | Yes | Materials > Materials > Corrugated Boards | |||
| Coatings | Yes | Materials > Materials > Coatings | |||
| Inks | Yes | Materials > Materials > Inks | |||
| Ink Groups | Yes | Materials > Material Group > Ink Groups | |||
| Locations | Yes | Yes | Configuration > Organization > Plant > Stores and invmenu | Only machine in and out feed locations need to be in VUE | |
| Stores | Yes | Yes | Configuration > Organization > Plant > Stores and invmenu | Only machine in and out feed locations need to be in VUE | |
| Label Formats | Yes | Yes | Configuration > KDG Templates & lbs00:A | Just code needs to exist in classic, label defined in VUE | |
| Machines | Yes | Configuration > Organization > Plant > Machines | |||
| Shift Names | Yes | Calendars > Shift Names | |||
| Calendars | Yes | Calendars > Calendars | |||
| Purchase Category | Yes | PICS and ESP | Must enter in ESP and PICS and must match | ||
| System aka's | Name | Yes/No |
| CSC | Corrugator Control Scheduling | |
| SCS | Supply Chain Simulator | |
| PCS | Production Control System | |
| ESP | Enterprise Sales Processing | |
| ULT | Unit Load Tracking | |
| VUE PCS | Visual GUI version of Production Control System | |
| VUE CSC | Visual GUI version of Corrugator Control Scheduling | |
| VUE ULT | Visual GUI version of Unit Load Tracking | |
| KDW | Kiwiplan Data Warehouse | |
| TSS | Truck Scheduling System | |
| QMS | Quality Management System | |
| MMS | Material Management System | |
| What system did the plant use before the installation | |
| Was there use of spreadsheet before the installation | |
| What was the driver to change the system for the plant | |
| Do you have a unitizing system for optimizing stacking | |
| Do you have a CAD system for creating products | |
| What is your accounting software | |
| Machine# | Detailed Degrade Rules Set Y/N (Y for detailed N for Standards Only) |
| Owned/Leased | Name | Consignment Y/N | EDI Y/N |
| Purchasing | |
| Rotations | |
| Discarding |
| Purchasing | |
| Rotations | |
| Discarding |
| System | Integration |
| System | Integration |
| **Date** | **Version** | **Document** | **Created / Modified** | **Comments** |
| 08.11.2018 | 1.0 | Kiwiplan Site Audit | Steve Ling | Creation |
| 02.07.2025 | 1.1 | Added to the docs site for ease of sharing | Steve Ling |
| Value | Into | Factor | Feet | Inches | 16ths | Formula |
| 17729644500 | Lineal Feet | 3048000 | 5817 | ROUND(\[value\]/3048000) | ||
| 27178000 | Roll Width | 25400 | 66.8750 | 1070 | ROUND(\[value\]/25400)/16 |
| **Function name** | **Parameter(s)** | **Returns** | **Description** |
|---|---|---|---|
| **Date Functions -Calendar dates** | |||
| dbo.fn\_getstartday | datetime | datetime | Given a datetime value, returns the “zero hour” value for that date |
| dbo.fn\_getendday | datetime | datetime | Given a datetime returns the “midnight hour” value for that day |
| dbo.fn\_getstartmonth | datetime | datetime | Given a datetime returns the “zero hour” value for the first of the month |
| dbo.fn\_getendmonth | datetime | datetime | Given a datetime returns the “midnight hour” value for the last day of the month |
| dbo.fn\_getstartyear | datetime | datetime | Given a datetime returns the “zero hour” value for the first of January for that year |
| dbo.fn\_getendyear | datetime | datetime | Given a datetime returns the “midnight hour” value for the 31st of December for that year |
| **Date Functions - Financial dates** | **These need the financial year and financial periods to be set up in ESP to work, otherwise they fall back to calendar months and years** | ||
| dbo.fn\_getstartfinperiod | datetime | datetime | Returns the “zero hour” on the first date of the financial period that the given a date is contained in |
| dbo.fn\_getendfinperiod | datetime | datetime | Returns the “midnight hour” on the last date of the financial period that the given a date is contained in |
| dbo.fn\_getstartfinyear | datetime | datetime | Returns the “zero hour” on the first date of the financial year that the given a date is contained in |
| dbo.fn\_getendfinyear | datetime | datetime | Returns the “midnight hour” on the last date of the financial year that the given a date is contained in |
| General Utility Functions | |||
| dbo.fn\_IsInList | @strlist nvarchar(1024) @strsearch nvarchar(100) @joinchar nvarchar(1) | smallint | Given a string containing a list of values (@strlist) separated by a single character(@joinchar) and a value to search for(@strsearch) returns 0 if the exact value is not found or 1 if it is. |
| dbo.fn\_parsecriteria | @sValue nvarchar(200) @fieldname nvarchar(100) @datatype nvarchar(50) | nvarchar(500) | Given a string containing a value to include in a WHERE clause, the name of the field to search on and the data type of the field will return a string that can be concatenated to a SQL statement |
| dbo.fn\_as16s | Int | nvarchar(30) | Given an integer value returns the value formatted as 16ths ie Given 21 will return “1.05”, Given 30 returns “1.14” (Used on sites that use imperial units of measure) |
| dbo.fn\_fixx | Float | Int | Given a number returns the largest integer less than or equal to the given number Given 1.5 returns 1 Given -2.4 returns -3 |
| dbo.fn\_MaskValue | @mask nvarchar(500) @pval int | nvarchar(500) | Returns the given number masked with the given mask |
| dbo.fn\_StripMask | @mask nvarchar(500) @pval vnarchar(500) | Int | Returns the numeric value of a masked string |
| dbo.fnGetFKColumns | @constraintID int, @keyID int, @rf nchar(1) | varchar(2126) | This , and the next function are used to retrieve details on foreign key constraints and indexes. There were written to be used in the stored procedure “dbo.inf\_ResetCollation” (see Utility Stored Procedures section below)which resets and rebuilds all constraints and indexes in a given database to a given collation. |
| dbo.fnGetIndexColumns | @objname sysname @objid int @indid int | varchar(2126) | |
| **ESP Specific Function** | |||
| dbo.fn\_numworkdays | @firstdate datetime @lastdate datetime @id int @idtype nvarchar(1) | int | Return the number of working days between a given start and end date for either a specific address or a plant if the @idtytpe is “P”(uses the plant base address). This uses the “opendays” field from the address. |
| dbo.fn\_getcoatings | @pdid int @coattype varchar(2) | varchar(500) | Returns a comma separated list that contains, for each colour/coating, the sequence, code and coverage. The parameter @coattype can be one of the following: IC – Inside colour OC – Outside colour II - Inside coating OI – Outside coating |
| dbo.fn\_getPDCoating | (@pdid int @isColourorCoating int @inside smallint @coatorcover int | varchar(500) | Returns a comma separated list of either the coating/colour codes or the coverage percent. Data is selected from the table ebxproductdesigncoating based on the parameters: @inside equals the column inside ( can be -1 or 0 ) @isColourOrCoating equals the column @isColourorCoating |
| dbo.fn\_ShipPiecesPerUnit | @pd int @route int | int | For a given route for a product design returns the quantityperunit field from th euntizing data for the last step on the route. |
| dbo.fn\_unitcost | @ceid int @ppid int | float | Returns the “per unit” full cost value from either a cost estimate or product price record. |
| dbo.fn\_UnitSummaryQty | @unitsummary varchar(1000) | int | Returns the total quantity of items as held in the unit summary field |
| dbo.fnGetSetTotalPrice | @CostEstimateID int @CalculationQuantity int, @currdate datetime | money | Returns the total “freight inclusive” price from the product price table for all components (if any) that are part of the set defined by having the supplied cost estimate as their “master” cost estimate. They must also have the same calculation quantity and be active at the given time. |
| **Functions to access MAP/ULT data** | **These functions have been re-written as stored procedures so that they would not be restricted to a “hard coded” linked server. The sored procedures are named under the function names and both take the linked server name as a parameter. Output remains a table/dataset with the same column names.** | ||
| dbo.fn\_GENPL() (Stored procedure dbo.irsGENPL) | plantno varchar(8) plantname varchar(30) defaultCorrugatorMachineNo int defaultDespatchMachineNo int boardTransferMachineNo int pickupGoodsMachineNumber int quarantineMachineNumber int fgsReworkStoreMachineNo int sbsFromStockMachineNumber int sheetBoardStrapperNumber int sheetBoardSlitterMachineNo int supplyFromStockMachineNo int defaultRssReceiptingStore int stockDespatchMachineNo int despatchNotificationMachineNo int defaultBoardReceivingmchNo int defaultOrderingMachineNo int | Returns a table giving, for each plant in the MAP dataset, the default machines as set up in the GEN/PL XLATEP parameter in MAP | |
| dbo.fn\_GENTU() (Stored procedure dbo.irsGENTU) | pallettype varchar(8) pallet varchar(30) width int null length int null height int null weight int null | Returns a table giving, for each pallet type, the width, length, height and weight. These are taken from the GEN/TU XLATEP parameter in MAP | |
| Stored Procedure | Input Parameters | Output | Description |
|---|---|---|---|
| **Procedures to access MAP/ULT data** | **These procedures assume a valid “linked server” to a MySQL database is set up. The syntax of the SQL is MySQL specific.** | ||
| dbo.irsGENPL | nvarchar(500) | See entry above for dbo.fn\_GENPL() | Given a linked server name returns the table described above in the Functions section |
| dbo.fn\_GENTU | nvarchar(500) | See entry above for dbo.fn\_GENTU() | Given a linked server name returns the table described above in the Functions section |
| dbo.irsCORRCP | nvarchar(500) | plant\_number int, corrugatornumber int, corrugatorname nvarchar(30) machinenumber int | Given a linked server name, returns a list of all corrugators with information taken from the CORR/CP parameter in the XLATEP table and the CSCNTR table. |
| dbo.irsmachines | nvarchar(500) | Machineno interactionmachinename nvarchar(40) machinegroup int | Given a linked server name, returns a list of all machines held in the CSCNTR table. |
| Placeholder | |
| @@smallareafull() | Returns the full text of the small area unit from the Unit table |
| @@smallarea() | Returns the abbreviation of the small area unit from the Unit table |
| @@largeareafull() | Returns the full text of the large area unit from the Unit table |
| @@largearea() | Returns the abbreviation of the large area unit from the Unit table |
| @@smallweightfull() | Returns the full text of the small weight unit from the Unit table |
| @@smallweight() | Returns the abbreviation of the small weight unit from the Unit table |
| @@largeweightfull() | Returns the full text of the large weight unit from the Unit table |
| @@largeweight() | Returns the abbreviation of the large weight unit from the Unit table |
| @@smallvolumefull() | Returns the full text of the small volume unit from the Unit table |
| @@smallvolume() | Returns the abbreviation of the small volume unit from the Unit table |
| @@largevolumefull() | Returns the full text of the large volume unit from the Unit table |
| @@largevolume() | Returns the abbreviation of the large volume unit from the Unit table |
| @@smalllinearfull() | Returns the full text of the small linear unit from the Unit table |
| @@smalllinear() | Returns the abbreviation of the small linear unit from the Unit table |
| @@largelinearfull() | Returns the full text of the large linear unit from the Unit table |
| @@largelinear() | Returns the abbreviation of the large linear unit from the Unit table |
| @@currencysymbol() | Returns a dollar sign. To enable translation of this into the local symbol the “$” symbol will need to be defined and have a “Site Text” value in the translation table |
Environment variables point to individual directories and give a shortcut to the Kiwiplan software.
#### Below is a listing of all directory variables. **{DRIVE} = any location :folder or drive location** **$KIWI = /{drive}/kiwi :contains the kiwi environment** **$REV = /KIWI/revisions** **$COMMSDIR = /KIWI/work/cscomm :contains comms logs & audit trails** **$PLANTBIN = /KIWI/site/00xx/bin :contains plant specific menu scripts** **$SITEBIN = /KIWI/site/bin :contains site specific menu scripts** **$PLANTDAT = /KIWI/site/dat :contains plant .MNU, .TOG files** **$SITEDAT = /KIWI/site/dat :contains .MNU, .TOG files** **$DATA ISAM= /KIWI/data\_a :contains revision data files & indexes** **$DATA SQL = /KIWI/site\_sql :contains revision data files** **$WORK = /KIWI/usr/work :contains all user .TM and .LS files** **$SCP = /KIWI/kiwi/scp :contains revision specific scripts ** **$PROGS = /KIWI/kiwi/progs :contains all program files for revision** **$BIN = /KIWI/kiwi/bin :contains unix specific scripts** **$UFD = /KIWI/kiwi/ufd :contains data file definitions** **$TOOLS = /KIWI/site/tools :contains admin tools & menus** **$SCRIPTS = /KIWI/site/SCRIPTS :contains homemade scripts** **NOTE: Some sites use a different base directory for the Kiwiplan software.** **Examples: $KIWI may be /usr/kiwi or /kiwi/kiwi.** ** ** Environmental variables are used to set up the user’s environment, meaning which data, menu, etc… they access when logging in. Below is a list of basic environment variables. **EXEC** = executes a program or script, which in turn will call a specific .MNU file. ** Example: ”kiwimenu menu=csc00”** ** ** **DATA** = which data the user will access when logging in. ** Example: data\_a or site\_sql** ** ** ** ** **TERM** = what terminal type the user will default to when logging in. ** Example: vt220, vt100, & ansi** ** ** **KIWISEA** = the search path for Kiwiplan environment. **UNIX PATH = **the UNIX executing search path. To view what each variable is set to, use the echo command. **Example= echo $TERM** will tell what terminal emulation is being used.** **Below is a directory tree layout to better show the variable locations and directory contents. # Kiwiplan - Add Printer for Classic and Refresh Sites This is how to add a printer in Kiwiplan for KDG to host the printer and for classic label. #### Step1: Add the printer to the server were KDG is running under Control Panel\\Hardware\\Devices and Printers [](https://docs.sflservicesllc.com/uploads/images/gallery/2025-06/bgVimage.png) [](https://docs.sflservicesllc.com/uploads/images/gallery/2025-06/VL6image.png) #### Step2: Verify in KDG top make sure it shows up [](https://docs.sflservicesllc.com/uploads/images/gallery/2025-06/snMimage.png) #### Step3: Once the printer is available you have to add a printer to the PRINTERS file on the Linux server You can use the locate command to find out where the file is located ```bash locate PRINTERS ``` This is what the file would/should look like| \#Other \##Nul Printer LPT90:TEMPLATE:LEGAL LPT90:SCRIPT:print\_kdg \##Non-Physical Printers LPT93:SCRIPT:print\_email LPT97:SCRIPT:pgprint LPT98:SCRIPT:saveprint LPT99:SCRIPT:noprint LPT100:SCRIPT:print\_email LPT100:PRINTER:sales@sflservicesllc.com |
| kdgprint Assign KDG Printers utility 26/Thu 11:17 ================================================================================ Apply filter to server list: .............................. |
| kdgprint Assign KDG Printers utility 26/Thu 11:18 ================================================================================ Total Printers on server:4 Page 1 /1 Indx KDG\_Printer\_name Print\_Tray LegacyPrinters 1 HP\_Office 2 Microsoft Print to PDF 3 Microsoft XPS Document Writer 4 nul (C)hange, (F)ind, (E)xit, or select Index ? E.... |
| ? Printer number already assigned :Office\_CustomerService |
| kdgprint Assign KDG Printers utility 26/Thu 11:22 ================================================================================ Total Printers on server:4 Page 1 /1 Indx KDG\_Printer\_name Print\_Tray LegacyPrinters 1 HP\_Office **1** 2 Microsoft Print to PDF 3 Microsoft XPS Document Writer 4 nul (C)hange, (F)ind, (E)xit, or select Index ? E.... |