Scientific Linux Fermi 5.1  x86_64	     February 27, 2007	

Please send bug reports to dawson@fnal.gov,csieh@fnal.gov

Please read the Release Notes for Scientific Linux.  It is located at
SL.releasenote

Also read the Upstream Vendor release notes . They are located in
Upstream.vendor.releasenote  

All of the info in the SL.releasenote is valid unless this document
states otherwise.  This document only contains info that is specific
to the Fermi site.  Any reference to SL.releasenote is done to emphasis 
that it contains important information.


----------------------------------------------------------------------------

This is based on the rebuilding of RPMS out of SRPMS's that form Scientific
Linux.  Please read this entire document before installing.  

Table of contents

	INSTALLATION INFO
  	ADDED compared to Scientific Linux 5.1 
  	UPDATED compared to  Scientific Linux 5.1
	Installer modifications
	/contrib 
	/docs
	/notsupported 
	MISC Notes
	HARDWARE SPECIFIC ISSUES
	SOFTWARE ISSUES/BUGS
	SUPPORT INFO
	vendor ERRATA

Each has a "---" line above and below it.
_____________________________________________________________________________
INSTALLATION INFO
_____________________________________________________________________________
Installation Locations

Via NETWORK: 

  nfs:
  	linux.fnal.gov:/export/linux/slf51/x86_64/
  ftp:
  	linux.fnal.gov  /linux/slf51/x86_64
  http:
  	linux1.fnal.gov  /linux/slf51/x86_64
  
 network install with floppy

  There is no floppy install as the kernel is too big to fit on a floppy.

 network install with cdrom

  There is a boot.iso which is small iso image which includes all the 
  drivers.  After download you can use cdrecord to create a cdr with this 
  image on it.

    ftp://linux.fnal.gov/download/slf51/network.install.x86_64/boot.iso

Via CDROM/DVD:  There is no cdrom images at this time.
But there is a DVD image

  Download and then burn the dvd iso image from

    ftp://linux.fnal.gov/download/slf51/dvd.install.x86_64/


Installing a Xen Paravirtualized Guest

When installing a Xen Paravirtualized Guest, the location is

  http://linux1.fnal.gov/linux/slf51/x86_64/sites/Fermi


-----------------------------------------------------------------------------
ADDED compared to Scientific Linux 51 x86_64 
-----------------------------------------------------------------------------
Fermi-release-notes

       Made change so that /etc/redhat-release, /etc/issue and /etc/issue.net 
       show Scientific Linux Fermi instead of just Scientific  Linux.

Clam Anti Virus
 
 	Clam Anti-Virus.  Obtained from the DAG repository and rebuilt from
 	src.rpm.  http://www.clamav.net
 
 		clamav-0.91.2-1.rf.x86_64.rpm
 		clamav-db-0.91.2-1.rf.x86_64.rpm
 		clamav-devel-0.91.2-1.rf.x86_64.rpm
 		clamav-milter-0.91.2-1.rf.x86_64.rpm
 		clamd-0.91.2-1.rf.x86_64.rpm
 		clamtk-2.32-1.rf.x86_64.rpm


flpr
	
	Installed by default.  This does NOT require ups/upd.  
	The flpr binary will reside in /usr/local/bin/ 

		flpr-2.4-4f.9x.i386.rpm

Kerberos

	For SLF 5, we no longer need Fermi's kerberos.  We are only including
	packages for configuring krb5.conf, as well as some utilities.
	
* 		krb5-fermi-config-2.7-4.noarch.rpm
		krb5-getcert-1.9-5.slf5.noarch.rpm

OpenAFS 
	
	See SL.releasenote

	Here is the procedure for installing openafs, using yum
      
	yum install openafs-client openafs-thiscell kernel-module-openafs-`uname -r` 

		openafs-thiscell-FNAL-5.noarch.rpm 

redhat-logos-1.1.25-1.LTS.6.noarch.rpm

	This version of redhat-logo's has all of the generic changes
	that were made with Scientific Linux as well as changes to make
	it look like SLF.
	
 	redhat-logos-4.9.16-1.SLF.4.noarch.rpm

SLIP
  	Scientific Linux Inventory Project client 
  
          ocsinventory-client-0.9.9-9.noarch.rpm

upsupdbootstrap
  
	Not installed by default.
	Links from /usr/local/bin are NOT made anymore.
 
		upsupdbootstrap-5.0-0.i386.rpm
* 		upsupdbootstrap-fnal-5.0-0.i386.rpm
			conflicts with upsupdbootstrap-local 
			Installs ups/upd to /fnal/ups
* 		upsupdbootstrap-local-5.0-0.i386.rpm
			conflicts with upsupdbootstrap-fnal
			Installs ups/upd to /local/ups

yum-conf
 
 	Modified to give Fermi's rpm's a priority, as well as point to
 	Fermi's linux distribution servers instead of scientific linux's.
 
*   		yum-conf-51-1.SLF.noarch.rpm

yum-conf-5x-2-1.SLF.noarch.rpm
 
  	Will keep you at 5x which is the current stable 5x release.  So when
  	we release the next 5 release yum will automatically yum install it
  	except for the kernel.  
  
 		yum install yum-conf-5x

yum-autoupdate-1-1.SLF.noarch.rpm

	yum-autoupdate has the nightly yum cron job in it.
	The nightly cron job has been modified to check the add-ons directory.

zz_dhcp_resolv-3.0.5-1.noarch.rpm

	This rpm fixes that so that when your network starts, as it checks 
	your resolv.conf, if you have dhcp.fnal.gov, but not fnal.gov it will
	put it in, so that you will have "search fnal.gov dhcp.fnal.gov" in 
	your /etc/resolv.conf file.

*zz_lang_collate-1.0-4.noarch.rpm
*
*	Changes LANG so that sorting is done the same as 6.1 and
*	earlier.  (ABCabc instead of AaBbCc).
*	Can speed up programs that sort.

zz_local_dns_cache-1.0-3.noarch.rpm

	This rpm will change your machine to use a local dns cache before
	looking for the standard dns servers  
	
zz_logwatch_df-1.1-2.noarch.rpm
 
 	By default logwatch does a df -h when looking at disk usage.  
 	This can be unwanted if you have alot of NFS mounted disks.  
 	This rpm changes that command to be df -lP -h, which looks at 
 	local disks only, and the output is in the POSIX output format.

zz_ntp_configure-4.2.0-6.noarch.rpm
 
	Configure ntp for Fermi site network.
  	Startup script now pokes hole in the firewall for itself
 	One can manually change the script by editing the file 
 	/etc/sysconfig/ntpd.fermi

zz_pine_user_domain-1.0-2.noarch.rpm

	By default when a user sends mail from pine their email address
	is myname@mycomputer.fnal.gov.  This rpm changes it so that the
	default is myname@fnal.gov by modifying the /etc/pine.conf config file.

zz_sendmail_fermi_gateway-2.0-1.noarch.rpm
 
 	This rpm is designed to send outbound sendmail e-mail through 
 	the fermilab e-mail gateway(smtp.fnal.gov). 

*zz_sshd_pam-3.9-3.noarch.rpm - Removed
 
zz_tcp_wrappers_change-3.0-3.noarch.rpm

	Disable all offsite access to common network services.  Also
	puts in the "DOE required login banners".  If it determines that
	you have already modified /etc/hosts.allow or host.deny it leaves
	them alone.
	Change to add perl to requires as %post uses perl
  
zz_tex_tweaks-1.0-1.noarch.rpm

        Changes the default paper size to 8.5 x 11 vs A3
 	
---------------------------------------------------------------------------
UPDATED compared to Scientific Linux 50 x86_64 
----------------------------------------------------------------------------
OpenSSH 

  	This is the openssh from S.L. 5.x with some patches and modifications.
  
  	The client does kerberos with both fermi's old openssh(old gssapi), 
	as well as generic new openssh's(new gssapi)

	The server only does the kerberos with the newer versions of openssh
  
  	It does 'kerberos only' by default
  
  	It does not do cryptocard.
  
	It is not installed by default.

* 		openssh-4.3p2-41.slf5.x86_64.rpm
* 		openssh-askpass-4.3p2-41.slf5.x86_64.rpm
* 		openssh-clients-4.3p2-41.slf5.x86_64.rpm
* 		openssh-server-4.3p2-41.slf5.x86_64.rpm

*pam_krb5
* 
* 	This is a modified version of the pam_krb5 that comes with SL5.
* 	This pam module has the ability to do cryptocard authentication.
* 	
* 		pam_krb5-2.2.11-5.slf5.i386.rpm
* 		pam_krb5-2.2.11-5.slf5.x86_64.rpm

----------------------------------------------------------------------------
Installer modifications
---------------------------------------------------------------------------
Anaconda (installer)
	       

     Changes to "defaults" from vendor installer.

  	Firewall is on by default. 
	The zz_ntp_configure-4.2.0-6 rpm pokes a hole for inbound ntp.

	US/Central is default timezone.  vendor default was New York.

	Kerberos is on by default with a realm of FNAL.GOV .  vendor default
	was off.

 	Default install is via http.  If one wishes to use nfs then type 
 	nfs at the isolinux prompt.  If one wshes to use ftp then type ftp
	at the isolinux prompt.

	Support for "sites" was added.

* 	Support for workgroups was added
---------------------------------------------------------------------------
/contrib/ 
---------------------------------------------------------------------------
The packages in this section have been contributed by various people.  They
are presented AS IS and there is no guarantee of them working.  These packages
are NOT supported by us.  They will only get security updates if the
contributor provides them.  If you have questions about them then ask the
contributor.

To use with yum:
For one time only (prefered method)
  yum --enablerepo=Fermi-contrib install <package>

To enable for all yum updates/install (including autoyum)

  edit the file /etc/yum.repos.d/fermi-contrib.repo
  and change the line
        enabled=0
  to
  	enabled=1

See README's in the RPMS/ directorys for specific package info.

/sites/Fermi/contrib/RPMS/

---------------------------------------------------------------------------
KNOWN LIMITATIONS/BUGS
---------------------------------------------------------------------------
The estimated time to install is not even close.

*After you have picked a workgroup on the workgroup selection page and moved
* to the next back, you cannot go back to that page.  The installer will die.

---------------------------------------------------------------------------
MISC NOTES
---------------------------------------------------------------------------
If you select "linux text" or you might want to type
   "linux text noipv6"
   because the install trys to do ipv6 and since there is no support
   at FNAL for ipv6 it takes a long time to timeout

kickstart users might want to add the "noipv6" option to their ks.cfg file
---------------------------------------------------------------------------
SUPPORT INFO
---------------------------------------------------------------------------
Fermi site users should start with the "Fermi" specific support areas and
use the Scientific Linux next.

Scientific Linux Fermi web pages

	http://www.fnal.gov/cd/unix/linux

Fermi Linux Community support mailing list

  linux-users@fnal.gov

	Which is archived at 

		http://listserv.fnal.gov/archives/linux-users.html

Scientific Linux web page

	http://www.scientificlinux.org	
----------------------------------------------------------------------------
SECURITY ERRATA included which was released after SL5.1
----------------------------------------------------------------------------

a2ps-4.13b-57.2.el5.x86_64.rpm
amtu-1.0.6-1.el5.x86_64.rpm
apr-util-1.2.7-7.el5.i386.rpm
apr-util-1.2.7-7.el5.x86_64.rpm
apr-util-devel-1.2.7-7.el5.i386.rpm
apr-util-devel-1.2.7-7.el5.x86_64.rpm
apr-util-docs-1.2.7-7.el5.x86_64.rpm
crypto-utils-2.3-2.el5.x86_64.rpm
diffutils-2.8.1-15.2.3.el5.x86_64.rpm
gedit-2.16.0-9.el5.x86_64.rpm
gedit-devel-2.16.0-9.el5.i386.rpm
gedit-devel-2.16.0-9.el5.x86_64.rpm
gnome-panel-2.16.1-7.el5.i386.rpm
gnome-panel-2.16.1-7.el5.x86_64.rpm
gnome-panel-devel-2.16.1-7.el5.i386.rpm
gnome-panel-devel-2.16.1-7.el5.x86_64.rpm
gnome-screensaver-2.16.1-6.el5.x86_64.rpm
gnome-utils-2.16.0-5.el5.i386.rpm
gnome-utils-2.16.0-5.el5.x86_64.rpm
gnome-utils-devel-2.16.0-5.el5.i386.rpm
gnome-utils-devel-2.16.0-5.el5.x86_64.rpm
hwbrowser-0.30-2.el5.noarch.rpm
icu-3.6-5.11.1.x86_64.rpm
kdeadmin-3.5.4-3.el5.x86_64.rpm
kernel-2.6.18-53.1.6.el5.x86_64.rpm
kernel-debug-2.6.18-53.1.6.el5.x86_64.rpm
kernel-debug-devel-2.6.18-53.1.6.el5.x86_64.rpm
kernel-devel-2.6.18-53.1.6.el5.x86_64.rpm
kernel-doc-2.6.18-53.1.6.el5.noarch.rpm
kernel-headers-2.6.18-53.1.6.el5.x86_64.rpm
kernel-module-fuse-2.6.18-53.1.6.el5-2.6.3-1.el5_1.x86_64.rpm
kernel-module-fuse-2.6.18-53.1.6.el5xen-2.6.3-1.el5_1.x86_64.rpm
kernel-module-fuse-2.6.18-8.1.8.el5-2.6.3-1.SL.x86_64.rpm
kernel-module-fuse-2.6.18-8.1.8.el5-2.6.3-1SL.x86_64.rpm
kernel-module-ipw3945-2.6.18-53.1.6.el5-1.2.0-2.el5_1.x86_64.rpm
kernel-module-ipw3945-2.6.18-53.1.6.el5xen-1.2.0-2.el5_1.x86_64.rpm
kernel-module-madwifi-2.6.18-53.1.6.el5-0.9.3.3-12.el5_1.x86_64.rpm
kernel-module-madwifi-2.6.18-53.1.6.el5xen-0.9.3.3-12.el5_1.x86_64.rpm
kernel-module-madwifi-hal-2.6.18-53.1.6.el5-0.9.3.3-12.el5_1.x86_64.rpm
kernel-module-madwifi-hal-2.6.18-53.1.6.el5xen-0.9.3.3-12.el5_1.x86_64.rpm
kernel-module-ndiswrapper-2.6.18-53.1.6.el5-1.41-1.SL.x86_64.rpm
kernel-module-ndiswrapper-2.6.18-53.1.6.el5xen-1.41-1.SL.x86_64.rpm
kernel-module-openafs-2.6.18-53.1.6.el5-1.4.6-58.SL5.x86_64.rpm
kernel-module-openafs-2.6.18-53.1.6.el5xen-1.4.6-58.SL5.x86_64.rpm
kernel-module-r1000-2.6.18-53.1.6.el5-1.05-1.sl.x86_64.rpm
kernel-module-r1000-2.6.18-53.1.6.el5xen-1.05-1.sl.x86_64.rpm
kernel-xen-2.6.18-53.1.6.el5.x86_64.rpm
kernel-xen-devel-2.6.18-53.1.6.el5.x86_64.rpm
libicu-3.6-5.11.1.i386.rpm
libicu-3.6-5.11.1.x86_64.rpm
libicu-devel-3.6-5.11.1.i386.rpm
libicu-devel-3.6-5.11.1.x86_64.rpm
libicu-doc-3.6-5.11.1.x86_64.rpm
libsmi-0.4.5-2.el5.x86_64.rpm
libsmi-devel-0.4.5-2.el5.x86_64.rpm
libXfont-1.2.2-1.0.3.el5_1.i386.rpm
libXfont-1.2.2-1.0.3.el5_1.x86_64.rpm
libXfont-devel-1.2.2-1.0.3.el5_1.i386.rpm
libXfont-devel-1.2.2-1.0.3.el5_1.x86_64.rpm
m17n-db-1.3.3-48.el5.noarch.rpm
m17n-db-amharic-1.3.3-48.el5.noarch.rpm
m17n-db-arabic-1.3.3-48.el5.noarch.rpm
m17n-db-armenian-1.3.3-48.el5.noarch.rpm
m17n-db-assamese-1.3.3-48.el5.noarch.rpm
m17n-db-bengali-1.3.3-48.el5.noarch.rpm
m17n-db-chinese-1.3.3-48.el5.noarch.rpm
m17n-db-common-cjk-1.3.3-48.el5.noarch.rpm
m17n-db-croatian-1.3.3-48.el5.noarch.rpm
m17n-db-datafiles-1.3.3-48.el5.noarch.rpm
m17n-db-dhivehi-1.3.3-48.el5.noarch.rpm
m17n-db-farsi-1.3.3-48.el5.noarch.rpm
m17n-db-generic-1.3.3-48.el5.noarch.rpm
m17n-db-georgian-1.3.3-48.el5.noarch.rpm
m17n-db-greek-1.3.3-48.el5.noarch.rpm
m17n-db-gujarati-1.3.3-48.el5.noarch.rpm
m17n-db-hebrew-1.3.3-48.el5.noarch.rpm
m17n-db-hindi-1.3.3-48.el5.noarch.rpm
m17n-db-japanese-1.3.3-48.el5.noarch.rpm
m17n-db-kannada-1.3.3-48.el5.noarch.rpm
m17n-db-kazakh-1.3.3-48.el5.noarch.rpm
m17n-db-khmer-1.3.3-48.el5.noarch.rpm
m17n-db-korean-1.3.3-48.el5.noarch.rpm
m17n-db-lao-1.3.3-48.el5.noarch.rpm
m17n-db-latin-1.3.3-48.el5.noarch.rpm
m17n-db-malayalam-1.3.3-48.el5.noarch.rpm
m17n-db-marathi-1.3.3-48.el5.noarch.rpm
m17n-db-myanmar-1.3.3-48.el5.noarch.rpm
m17n-db-nepali-1.3.3-48.el5.noarch.rpm
m17n-db-oriya-1.3.3-48.el5.noarch.rpm
m17n-db-punjabi-1.3.3-48.el5.noarch.rpm
m17n-db-russian-1.3.3-48.el5.noarch.rpm
m17n-db-serbian-1.3.3-48.el5.noarch.rpm
m17n-db-sinhala-1.3.3-48.el5.noarch.rpm
m17n-db-slovak-1.3.3-48.el5.noarch.rpm
m17n-db-swedish-1.3.3-48.el5.noarch.rpm
m17n-db-syriac-1.3.3-48.el5.noarch.rpm
m17n-db-tamil-1.3.3-48.el5.noarch.rpm
m17n-db-telugu-1.3.3-48.el5.noarch.rpm
m17n-db-thai-1.3.3-48.el5.noarch.rpm
m17n-db-tibetan-1.3.3-48.el5.noarch.rpm
m17n-db-urdu-1.3.3-48.el5.noarch.rpm
m17n-db-vietnamese-1.3.3-48.el5.noarch.rpm
m2crypto-0.16-6.el5.2.x86_64.rpm
ntp-4.2.2p1-8.el5.x86_64.rpm
oddjob-0.27-9.el5.x86_64.rpm
oddjob-devel-0.27-9.el5.i386.rpm
oddjob-devel-0.27-9.el5.x86_64.rpm
oddjob-libs-0.27-9.el5.i386.rpm
oddjob-libs-0.27-9.el5.x86_64.rpm
pygtk2-2.10.1-11.el5.x86_64.rpm
pygtk2-codegen-2.10.1-11.el5.x86_64.rpm
pygtk2-devel-2.10.1-11.el5.i386.rpm
pygtk2-devel-2.10.1-11.el5.x86_64.rpm
pygtk2-libglade-2.10.1-11.el5.x86_64.rpm
scim-chewing-0.3.1-11.el5.x86_64.rpm
scim-pinyin-0.5.91-16.el5.x86_64.rpm
sysklogd-1.4.1-42.el5.x86_64.rpm
wireshark-0.99.7-1.el5.x86_64.rpm
wireshark-gnome-0.99.7-1.el5.x86_64.rpm
xorg-x11-server-sdk-1.1.1-48.26.el5_1.5.x86_64.rpm
xorg-x11-server-Xdmx-1.1.1-48.26.el5_1.5.x86_64.rpm
xorg-x11-server-Xephyr-1.1.1-48.26.el5_1.5.x86_64.rpm
xorg-x11-server-Xnest-1.1.1-48.26.el5_1.5.x86_64.rpm
xorg-x11-server-Xorg-1.1.1-48.26.el5_1.5.x86_64.rpm
xorg-x11-server-Xvfb-1.1.1-48.26.el5_1.5.x86_64.rpm
yum-rhn-plugin-0.5.2-5.el5_1.2.noarch.rpm