Index: trunk/server/doc/install-howto.sh
===================================================================
--- trunk/server/doc/install-howto.sh	(revision 1353)
+++ trunk/server/doc/install-howto.sh	(revision 1381)
@@ -36,4 +36,7 @@
     done
 
+# Turn on network, so we can connect at boot
+chkconfig network on
+
 # Edit /etc/selinux/config so it has SELINUX=disabled and reboot.
     sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config
@@ -81,6 +84,9 @@
     \cp -a etc /
 
-# NOTE: You will have just lost DNS resolution and the abilit
-# to do password SSH in
+# NOTE: You will have just lost DNS resolution and the ability
+# to do password SSH in.  If you managed to botch this step without
+# having named setup, you can do a quick fix by frobbing /etc/resolv.conf
+# with a non 127.0.0.1 address for the DNS server.  Be sure to revert it once
+# you have named.
 
     service named start
@@ -108,7 +114,4 @@
     YUM install -y scripts-base
 
-# Install mit-zephyr
-    YUM install -y mit-zephyr
-
 # Remember to set NSS_NONLOCAL_IGNORE=1 anytime you're setting up
 # anything, e.g. using yum. Otherwise useradd will query LDAP in a stupid way
@@ -121,9 +124,15 @@
 # Perhaps a useful change is to remove the default aliases
     # On 2009-07-01, the dotfiles to transfer where:
-    #   .bashrc .ldapvirc .screenrc .ssh (<- directory) .vimrc
+    #   .bashrc .ldapvirc (<- HAS PRIVILEDGED DATA)
+    #   .screenrc .ssh (<- directory) .vimrc
     # Trying to scp from server to server won't work, as scp
     # will attempt to negotiate a server-to-server connection.
     # Instead, scp to your trusted machine as a temporary file,
     # and then push to the other server
+    # You'll need some way to authenticate to the server, and since
+    # password logins are disabled, you'll need some way of
+    # temporarily giving yourself credentials.  On a test server,
+    # reenabling password authentication is ok: frob /etc/pam.d/sshd
+    # and reverse apply r1068.
 
 # Replace rsyslog with syslog-ng by doing:
@@ -161,6 +170,8 @@
     yumdownloader mit-zephyr.i386
     # if deps change, this breaks
-    YUM install -y libXaw.i586 libXext.i586 libXmu.i586 ncurses-libs.i586 readline.i58
+    YUM install -y libXaw.i586 libXext.i586 libXmu.i586 ncurses-libs.i586 readline.i586
     rpm -i --nodeps mit-zephyr-2.1-6-linux.i386.rpm
+    # test if it worked by sending an un-authed message
+    zwrite -d -c scripts -i test
 
 # Install the athena-base, athena-lprng, and athena-lprng-misc RPMs