Topic: How to install an unsupported package?

[raid517]

Hi, OK, I know this is going to sound like a horribly n00bish question. But that's possibly because I am a bit of a n00b.

However I was wondering is it possible to install Webmin in CentOS? I ask as it doesn't seem to be available on any of the official repositories and really while the included web interface gives me very good control, it doesn't give me quite the level of fine control I want. The same is also True to an extent with Webmin however, in that the Web Interface of SME Server offers many facilities that WebMin lacks.

The ideal set up I feel would be an integration/compromise between both of these.

I asking also (and here I will show my n00bishness) because I am not certain how to go about downloading and installing WebMin in CentOS without a GUI, or a Web Browser. Before you shout at me however, please be aware that I am installing and configuring SME server for a charity who desperately need a facility like this in order to organize the several machines they have more effectively and to allow them to focus more of their time helping people in genuine need.

Also while I have used Linux for a while, it's always been with a GUI and a web browser - and I have never used an RPM distro before at all.

So given this, I hope you will forgive also if I ask once it's installed, how do I ensure that it gets started after every reboot?

Thanks in advance!

GJ

[mmccarn]

I think you can install webmin --- but most of what it changes is going to conflict with the SME template system.  So you'll be able to change things, but they'll change back the next time you do 'signal-event post-upgrade'...

If you build a list of settings that is not controlled by the templating system, you could use webmin to manage those settings... but so far all I've found that isn't templated are some of the qpsmtpd plugins and grub.conf...

[raem]

raid517

The general recommendation is NOT to install webmin on a sme server due to the serious configuration conflicts that can ocur.
Many system events (not just post-upgrade) will change config settings made by webmin, so don't use it.

A good compatible alternative is the sme7admin package from
http://sme.firewall-services.com

[raem]

raid517

There are other very useful tools that put a panel into the GUI server manager eg
print queue monitor
mail queue monitor
& more if you look & search & ask

[raid517]

Well in any case, it is slightly frustrating that some or a lot) of the advanced/fine tuning functionality of WebMin is missing from the standard SME Server Web Administration package.

As I said, a much better solution anyway, would be if much (if not all) of the combined functionality of both of these could be combined into a single package.

Webmin maintains the KISS mentality - while affording much more specific levels of control and fine tuning than the current server configutation application does on its own.

[raem]

raid517

>.....some or a lot) of the advanced/fine tuning functionality of WebMin is missing
> from the standard SME Server Web Administration package.

You should submit a New Feature Request in bugzilla.
If the developers agree with you, it will probably be a case of funding being needed for the amount of development work needed to integrate webmin (if it's possible that is).


> Webmin maintains the KISS mentality

sme server maintains the KISS principle, and it's design scope keeps the technicalities of configuration away from end user/administrators, by only having what is typically needed by small to medium enterprises in a server manager GUI panel.
ie
turn on ftp and the appropriate services are enabled and ports opened in the firewall,
turn on secure remote access and again the required sevices are enabled and ports opened in the firewall.
etc etc

Direct control of the firewall has been deliberately left out of the server manager for the same reasons, to end users it's not necessary and they would only end up tweaking settings that create security risks due to their own ignorance and foolish choices in configuration.
The firewall has very complex (& interdependent) rule sets in place that could easily be corrupted by a knowledgable enough well meaning technician who is ignorant of that compexity and the reasons for it being that way.

The server as designed is very secure, and the developers don't want to unleash tools that would easily allow this strong security model to be corrupted.

Of course there is virtually unlimited control available of all system settings via command prompt, either directly or via editing custom templates. See the Developers Manual re custom templates.
The underlying code also caters for additional scenarios (beyond those offered in the GUI server manager) with specific db commands, which are relatively simple to implement.

There are many settings that are very easily implemented by these generic statements
db databasename setprop servicename key value
expand template
restart service

Read the FAQ
http://wiki.contribs.org/SME_Server:Documentation:FAQ

& the Technical manual
http://wiki.contribs.org/SME_Server:Documentation:Technical_Manual

& the Howtos
http://wiki.contribs.org/Category:Howto
(many are hosted elsewhere too so search)

and examine the code to discover what these db settings are.
For clues use
rpm -ql packagename

You should also have a very slow read & a re-read (or two or three) of the Developers Manual (aka devguide)
http://wiki.contribs.org/SME_Server:Documentation:Developers_Manual

There's nothing stopping you from building your own server manager panel to implement additional features you think are missing/desirable.
You will need to learn how of course, but the devguide gives basic worked examples, and you can hack existing & other peoples code to make life easier.

[raem]

raid517

By the way, have you installed the sme7admin package and those other add on server manager tools I suggested ?
They add a good bit of usefulness to the server manager and are perhaps what you are looking for anyway.

[raid517]

Yes well I am familiar with the old mantra that 'if you don't like it, fix it on your own. ' However I have never said that I didn't like it. I do think it's unfortunate that in many such cases there is almost a need to qualify every thing that is said with a statement that - of course I am grateful to the developers for their already considerable effort. I do wish that just once this might be taken as read.

However as I work full time in the voluntary sector - am by no means a programmer, have limited time and limited insight into such matters - and am purely attempting to do something that is in this case in many ways outside the normal range of my abilities - which if I am successful may directly help a large number of vulnerable young people in need - any positive contribution towards a hacking effort is likely to be very minimal indeed.

My comment wasn't intended as a criticism - only an observation that WebMin contains perhaps many more options and a greater level of control than probably even the included web interface does - and that even though it does this if anything, it takes the KISS mentality to an even deeper level - and that in an ideal world, if I were a programmer, or a magician or if perhaps I could find an enchanted wishing well, the best solution would probably be a good combination of both of these.

In any Case WebMin offers far more functionality than simple control over the firewall. You are correct that this is a feature that it is easy to live without. Some others are probably less easy - although no doubt SME Server will still remain very usable without them.

PS

I just caught your subsequent post. No - but I will install these and see how they fair. Thanks.

[kruhm]

"I do wish that just once this might be taken as read."
ok

"that some or a lot) of the advanced/fine tuning functionality of WebMin is missing from the standard SME Server Web Administration package."
What functionality were you specifically looking for? Give an example.

"it takes the KISS mentality to an eve deeper level"
How so? Give an example. I don't use WEBMIN so I'm interested in hearing.

[raid517]

Well if you don't mind me saying so, if you can the best way to resolve this (if you have another Linux machine) is simply to look it over, or go to the web site and read the docs, or view the screenshots.

WebMin has far too many features to list here in a single post - many of which would almost undoubtedly be useful (if not vital) in enabling perhaps at least some degree of better administration of SME server.

Install it and check it out! It will do no harm and will change noting if you simply look at it.

[kruhm]

"Well if you don't mind me saying so..."
I'm trying to get your opinion which isn't found in any documentation or test box. It's OK if you don't want to give it. I and the others will simply move on and help others.

"best way to resolve this (if you have another Linux machine) is simply to look it over, or go to the web site and read the docs, or view the screenshots."
The same can be said with any distro, including SMESERVER. Everything is customizable. Ray was kind enough to give you the links.

One core difference between the 2 is that WEBMIN tries to read the config file first & then edit it secondly. SMESERVER rather dictates what the config file is going to be with valid options. Once everything is setup correctly, this brilliant design results in SMESERVER having a reliability advantage. A huge difference when you're talking about running any type of business (for profit or otherwise).

[raid517]

Yes well it's not about the technical superiority of one over the other. Sorry I didn't mean to make this into some kind of proverbial pissing contest - and I certainly didn't mean to hurt anyone's feelings.

I purely commented on the physical feature set - and that there seems to be far more in-depth (although still very easy to manage) options in WEBMIN than are provided by SMEServer - although clearly WEBMIN lacks several features that are vital for the proper administration of SMEServer too.

There is no need for this kind of defensive posturing - since it is simply pure fantasy at this point to say that combining the features of both - while keeping the technically superior aspects of SMEserver and it's web configuration tool would in my own view be really quite awesome.

Again it's not about which is 'better', such arguments are silly and quite pointless anyway. I merely commented that having used Webmin on a number of occasions in the past, it really did seem to have a wide range of really cool features.

Anyway aren't you guys all supposed to be in the same boat together? What's with this dissing other developers anyway? Can't both applications be equally cool and have their own individual merits?

[bpivk]

raid517 don't be so defencive. kruhm want's to know what are you missing in SME. That's all. Sme uses it's own interface so this topic is getting us nowhere fast but it would be great if you'd tell us what are you missing in sme. Not all the features that webmin has only the features that you're missing.

[CharlieBrady]

I purely commented on the physical feature set - and that there seems to be far more in-depth (although still very easy to manage) options in WEBMIN than are provided by SMEServer  ...

Yes, it's true, webmin does provide a many, many, more opportunities for you to misconfigure your system. SMEserver's interface is deliberately sparse. We try to make it very hard for people to misconfigure their systems. webmin also has a bewildering set of features. We choose not to bewilder.

If you prefer to use webmin, go ahead and use it.

If you use webmin and server manager on the same system, expect problems.

If you want server-manager to be more like webmin, then you are welcome to try to make it so.

[raid517]

Yes and this is exactly why it is pointless trying to talk to anyone sensibly about such matters.

I am not completely incapable of taking advice on board that using Webmin with SME will result in serious conflicts. That point was already made several posts ago.

But the open hostility in simply comparing the two is neither justified nor welcome.

Why you should feel that such an innocuous comparison was so threatening is genuinely beyond me.

To be frank as I get older I have less and less time and much less patience for the frequently extremely misplaced puritanical and also often highly counterproductive attitude of many Linux users.