« back to all changes in this revision
Viewing changes to serverguide/po/oc.po
- browse files at revision 94
- compare with another revision
- download diff
- download tarball
- view history from revision 94
- Committer: Bazaar Package Importer
- Author(s): Matthew East
- Date: 2010-09-19 11:35:42 UTC
- Revision ID: james.westby@ubuntu.com-20100919113542-mbxqe7yuo4ggnrw3
Tags: 10.10.3
* Amend font-family for browser startpage (LP: #195590)
* Add translations from Launchpad
* Add translations from Launchpad
- files added:
- internet/po/nn.po
- files removed:
- serverguide
- serverguide/C
- serverguide/po
- serverguide/sample
- files modified:
- about-ubuntu/po/ace.po
added
removed
serverguide/po/oc.po
1
# Occitan (post 1500) translation for ubuntu-docs
2
# Copyright (c) 2007 Rosetta Contributors and Canonical Ltd 2007
3
# This file is distributed under the same license as the ubuntu-docs package.
4
# Yannig MARCHEGAY <yannig@marchegay.org>, 2007.
5
# , fuzzy
6
#
7
#
8
msgid ""
9
msgstr ""
10
"Project-Id-Version: ubuntu-docs\n"
11
"Report-Msgid-Bugs-To: \n"
12
"POT-Creation-Date: 2010-03-29 08:26+0100\n"
13
"PO-Revision-Date: 2010-03-29 21:09+0000\n"
14
"Last-Translator: Yannig MARCHEGAY (Kokoyaya) <yannig@marchegay.org>\n"
15
"Language-Team: Occitan (post 1500) <ubuntu-l10n-oci@lists.ubuntu.com>\n"
16
"MIME-Version: 1.0\n"
17
"Content-Type: text/plain; charset=UTF-8\n"
18
"Content-Transfer-Encoding: 8bit\n"
19
"X-Launchpad-Export-Date: 2010-04-17 14:52+0000\n"
20
"X-Generator: Launchpad (build Unknown)\n"
21
22
#: serverguide/C/serverguide-C.omf:6(creator) serverguide/C/serverguide-C.omf:7(maintainer)
23
msgid "ubuntu-doc@lists.ubuntu.com (Ubuntu Documentation Project)"
24
msgstr "ubuntu-doc@lists.ubuntu.com (projècte de documentacion d'Ubuntu)"
25
26
#: serverguide/C/serverguide-C.omf:8(title) serverguide/C/serverguide-C.omf:11(description) serverguide/C/serverguide.xml:14(title) serverguide/C/bookinfo.xml:13(title)
27
msgid "Ubuntu Server Guide"
28
msgstr "Guida del servidor Ubuntu"
29
30
#: serverguide/C/serverguide-C.omf:9(date)
31
msgid "2007-09-30"
32
msgstr "30/09/2007"
33
34
#: serverguide/C/windows-networking.xml:13(title)
35
msgid "Windows Networking"
36
msgstr "Rets Windows"
37
38
#: serverguide/C/windows-networking.xml:15(para)
39
msgid ""
40
"Computer networks are often comprised of diverse systems, and while "
41
"operating a network made up entirely of Ubuntu desktop and server computers "
42
"would certainly be fun, some network environments must consist of both "
43
"Ubuntu and <trademark class=\"registered\">Microsoft</trademark><trademark "
44
"class=\"registered\">Windows</trademark> systems working together in "
45
"harmony. This section of the <phrase>Ubuntu</phrase> Server Guide introduces "
46
"principles and tools used in configuring your Ubuntu Server for sharing "
47
"network resources with Windows computers."
48
msgstr ""
49
"Las rets informaticas son sovent compausadas de sistèmas divèrses e "
50
"quitament se operar una ret constituida exclusivament d'estacions de trabalh "
51
"e de servidors Ubuntu seriá segurament plasent, d'unes environaments de ret "
52
"son constituits a l'encòp de sistèmas Ubuntu e de sistèmas <trademark "
53
"class=\"registered\">Microsoft</trademark><trademark "
54
"class=\"registered\">Windows</trademark> que trabalhan amassa en armonia. "
55
"Aquesta seccion del guida del servidor <phrase>Ubuntu</phrase> presenta los "
56
"principis e los espleches utilizats per configurar vòstre servidor Ubuntu "
57
"per partejar de ressorsas de ret amb d'ordenadors Windows."
58
59
#: serverguide/C/windows-networking.xml:25(title) serverguide/C/virtualization.xml:402(title) serverguide/C/security.xml:354(title) serverguide/C/remote-administration.xml:22(title) serverguide/C/package-management.xml:20(title) serverguide/C/introduction.xml:13(title)
60
msgid "Introduction"
61
msgstr "Introduccion"
62
63
#: serverguide/C/windows-networking.xml:27(para)
64
msgid ""
65
"Successfully networking your Ubuntu system with Windows clients involves "
66
"providing and integrating with services common to Windows environments. Such "
67
"services assist the sharing of data and information about the computers and "
68
"users involved in the network, and may be classified under three major "
69
"categories of functionality:"
70
msgstr ""
71
"Per capitar la mesa en ret de vòstre sistèma Ubuntu amb de clients Windows, "
72
"vos cal provesir e integrar los servicis utilizats frequentament dins los "
73
"environaments Windows. Aqueles servicis permeton lo partiment de las donadas "
74
"e de las informacions suls ordenadors e los utilizaires presents sus la ret. "
75
"Pòdon èsser classats segon tres categorias principalas segon lor ròtle :"
76
77
#: serverguide/C/windows-networking.xml:35(para)
78
msgid ""
79
"<emphasis role=\"bold\">File and Printer Sharing Services</emphasis>. Using "
80
"the Server Message Block (SMB) protocol to facilitate the sharing of files, "
81
"folders, volumes, and the sharing of printers throughout the network."
82
msgstr ""
83
"<emphasis role=\"bold\">Servicis de partiments de fichièrs e "
84
"d'etampadoiras</ emphasis>. L'utilizacion del protocòl Server Message Block "
85
"(SMB) facilita lo partiment de fichièrs, de dorsièrs, de volums, e le "
86
"partiment de las estampadoiras sus la ret."
87
88
#: serverguide/C/windows-networking.xml:41(para)
89
msgid ""
90
"<emphasis role=\"bold\">Directory Services</emphasis>. Sharing vital "
91
"information about the computers and users of the network with such "
92
"technologies as the Lightweight Directory Access Protocol (LDAP) and "
93
"Microsoft <trademark class=\"registered\">Active Directory</trademark>."
94
msgstr ""
95
"<emphasis role=\"bold\">Servicis d'annuari</emphasis>. Partiment de las "
96
"informacions vitalas suls ordenadors e los utilizaires de la ret amb de "
97
"tecnologias coma LDAP (Lightweight Directory Access Protocol) e l'<trademark "
98
"class=\"registered\">Active Directory</trademark> de Microsoft (servicis "
99
"d'annuari)."
100
101
#: serverguide/C/windows-networking.xml:48(para)
102
msgid ""
103
"<emphasis role=\"bold\">Authentication and Access</emphasis>. Establishing "
104
"the identity of a computer or user of the network and determining the "
105
"information the computer or user is authorized to access using such "
106
"principles and technologies as file permissions, group policies, and the "
107
"Kerberos authentication service."
108
msgstr ""
109
"<emphasis role=\"bold\">Autentificacion e Accès</ emphasis>. Establir "
110
"l'identitat d'un ordenador o un utilizaire de la ret e determinar las "
111
"informacions a las qualas l'ordenador o l'utilizaire es autorizat a accedir "
112
"amb l'ajuda d'aquestes principis e de tecnologias coma las permissions de "
113
"fichièrs, de politicas de grop e lo servici d'autentificacion Kerberos."
114
115
#: serverguide/C/windows-networking.xml:56(para)
116
msgid ""
117
"Fortunately, your Ubuntu system may provide all such facilities to Windows "
118
"clients and share network resources among them. One of the principal pieces "
119
"of software your Ubuntu system includes for Windows networking is the Samba "
120
"suite of SMB server applications and tools."
121
msgstr ""
122
"Urosament, vòstre sistèma Ubuntu pòt provesir totas aquestas foncionalitats "
123
"des clients Windows e partejar las ressorsas de la ret amb eles. Un dels "
124
"principals logicials incluses dins vòstre sistèma Ubuntu que permet la mesa "
125
"en ret amb Windows es la seguida Samba compausada de las aplicacions e "
126
"espleches per servidor SMB."
127
128
#: serverguide/C/windows-networking.xml:62(para)
129
msgid ""
130
"This section of the <phrase>Ubuntu</phrase> Server Guide will introduce some "
131
"of the common Samba use cases, and how to install and configure the "
132
"necessary packages. Additional detailed documentation and information on "
133
"Samba can be found on the <ulink url=\"http://www.samba.org\">Samba "
134
"website</ulink>."
135
msgstr ""
136
"Aquesta partida del guida servdor <phrase>Ubuntu</phrase> vos presentarà "
137
"qualques cases d'utilizacion de Samba e cossí installar e configurar los "
138
"paquets necessaris. Trobaretz mai d'informacions e una documentacion "
139
"completa sus Samba sul site de <ulink "
140
"url=\"http://www.samba.org\">Samba</ulink>."
141
142
#: serverguide/C/windows-networking.xml:70(title)
143
msgid "Samba File Server"
144
msgstr "Servidor de fichièrs Samba"
145
146
#: serverguide/C/windows-networking.xml:72(para)
147
msgid ""
148
"One of the most common ways to network Ubuntu and Windows computers is to "
149
"configure Samba as a File Server. This section covers setting up a "
150
"<application>Samba</application> server to share files with Windows clients."
151
msgstr ""
152
"Un dels metòdes mai corrents per metre Ubuntu e Windows en ret es de "
153
"configurar Samba en servidor de fichièrs. Aquesta seccion descriu "
154
"l'installacion d'un servidor <application>Samba</application> pet partejar "
155
"de fichièrs amb de clients Windows."
156
157
#: serverguide/C/windows-networking.xml:77(para)
158
msgid ""
159
"The server will be configured to share files with any client on the network "
160
"without prompting for a password. If your environment requires stricter "
161
"Access Controls see <xref linkend=\"samba-fileprint-security\"/>"
162
msgstr ""
163
"Lo servidor serà configurat per partejar de fichièrs amb un client quin que "
164
"siá sus la ret sens demandar de senhal. Se vòstre environament necessita de "
165
"contraròtles d'accès mai estricts, consultatz <xref linkend=\"samba-"
166
"fileprint-security\"/>"
167
168
#: serverguide/C/windows-networking.xml:83(title) serverguide/C/windows-networking.xml:287(title) serverguide/C/windows-networking.xml:1302(title) serverguide/C/web-servers.xml:41(title) serverguide/C/web-servers.xml:675(title) serverguide/C/web-servers.xml:816(title) serverguide/C/web-servers.xml:940(title) serverguide/C/vpn.xml:33(title) serverguide/C/virtualization.xml:62(title) serverguide/C/virtualization.xml:2014(title) serverguide/C/vcs.xml:28(title) serverguide/C/vcs.xml:86(title) serverguide/C/vcs.xml:405(title) serverguide/C/remote-administration.xml:52(title) serverguide/C/remote-administration.xml:233(title) serverguide/C/network-config.xml:937(title) serverguide/C/network-auth.xml:52(title) serverguide/C/network-auth.xml:1581(title) serverguide/C/network-auth.xml:2092(title) serverguide/C/network-auth.xml:2483(title) serverguide/C/monitoring.xml:42(title) serverguide/C/monitoring.xml:428(title) serverguide/C/mail.xml:40(title) serverguide/C/mail.xml:496(title) serverguide/C/mail.xml:674(title) serverguide/C/mail.xml:823(title) serverguide/C/mail.xml:1315(title) serverguide/C/lamp-applications.xml:108(title) serverguide/C/lamp-applications.xml:287(title) serverguide/C/lamp-applications.xml:423(title) serverguide/C/installation.xml:13(title) serverguide/C/installation.xml:957(title) serverguide/C/file-server.xml:347(title) serverguide/C/file-server.xml:462(title) serverguide/C/dns.xml:23(title) serverguide/C/databases.xml:40(title) serverguide/C/databases.xml:164(title) serverguide/C/chat.xml:37(title) serverguide/C/chat.xml:141(title) serverguide/C/backups.xml:593(title)
169
msgid "Installation"
170
msgstr "Installacion"
171
172
#: serverguide/C/windows-networking.xml:85(para)
173
msgid ""
174
"The first step is to install the <application>samba</application> package. "
175
"From a terminal prompt enter:"
176
msgstr ""
177
"La primièra etapa consistís a installar lo paquet "
178
"<application>samba</application>. Dins un terminal picatz :"
179
180
#: serverguide/C/windows-networking.xml:90(command) serverguide/C/windows-networking.xml:299(command)
181
msgid "sudo apt-get install samba"
182
msgstr "sudo apt-get install samba"
183
184
#: serverguide/C/windows-networking.xml:93(para)
185
msgid ""
186
"That's all there is to it; you are now ready to configure Samba to share "
187
"files."
188
msgstr ""
189
"Es tot çò que vos cal far. Ara, sètz prèst a configurar Samba per partejar "
190
"de fichièrs."
191
192
#: serverguide/C/windows-networking.xml:99(title) serverguide/C/windows-networking.xml:304(title) serverguide/C/web-servers.xml:61(title) serverguide/C/web-servers.xml:726(title) serverguide/C/web-servers.xml:827(title) serverguide/C/web-servers.xml:967(title) serverguide/C/web-servers.xml:1067(title) serverguide/C/vpn.xml:138(title) serverguide/C/virtualization.xml:2088(title) serverguide/C/vcs.xml:39(title) serverguide/C/vcs.xml:423(title) serverguide/C/remote-administration.xml:74(title) serverguide/C/remote-administration.xml:258(title) serverguide/C/package-management.xml:387(title) serverguide/C/network-config.xml:959(title) serverguide/C/network-auth.xml:2131(title) serverguide/C/network-auth.xml:2504(title) serverguide/C/monitoring.xml:187(title) serverguide/C/monitoring.xml:454(title) serverguide/C/mail.xml:505(title) serverguide/C/mail.xml:684(title) serverguide/C/mail.xml:908(title) serverguide/C/mail.xml:1344(title) serverguide/C/lamp-applications.xml:128(title) serverguide/C/lamp-applications.xml:314(title) serverguide/C/lamp-applications.xml:453(title) serverguide/C/file-server.xml:360(title) serverguide/C/file-server.xml:488(title) serverguide/C/dns.xml:39(title) serverguide/C/databases.xml:84(title) serverguide/C/databases.xml:183(title) serverguide/C/clustering.xml:47(title) serverguide/C/chat.xml:57(title) serverguide/C/chat.xml:153(title) serverguide/C/backups.xml:616(title)
193
msgid "Configuration"
194
msgstr "Configuracion"
195
196
#: serverguide/C/windows-networking.xml:101(para)
197
msgid ""
198
"The main Samba configuration file is located in "
199
"<filename>/etc/samba/smb.conf</filename>. The default configuration file has "
200
"a significant amount of comments in order to document various configuration "
201
"directives."
202
msgstr ""
203
"Lo fichièr de configuracion principal de Samba es "
204
"<filename>/etc/samba/smb.conf</filename>. Lo fichièr de configuracion per "
205
"defaut es amplament comentat per explicar las nombrosas directivas de "
206
"configuracion."
207
208
#: serverguide/C/windows-networking.xml:106(para)
209
msgid ""
210
"Not all the available options are included in the default configuration "
211
"file. See the <filename>smb.conf</filename><application>man</application> "
212
"page or the <ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
213
"Collection/\">Samba HOWTO Collection</ulink> for more details."
214
msgstr ""
215
"Lo fichièr de configuracion conten pas totas las opcions disponiblas. "
216
"Consultatz la pagina <application>man</application> de "
217
"<filename>smb.conf</filename> o <ulink "
218
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\"> Samba HOWTO "
219
"Colleccion (en)</ ulink> per mai de detalhs."
220
221
#: serverguide/C/windows-networking.xml:116(para)
222
msgid ""
223
"First, edit the following key/value pairs in the "
224
"<emphasis>[global]</emphasis> section of "
225
"<filename>/etc/samba/smb.conf</filename>:"
226
msgstr ""
227
"D'en primièr, modificatz los parèlhs clau/valor seguentas dins la seccion "
228
"<emphasis>[global]</emphasis> de <filename>/etc/samba/smb.conf</filename> :"
229
230
#: serverguide/C/windows-networking.xml:121(programlisting) serverguide/C/windows-networking.xml:311(programlisting) serverguide/C/windows-networking.xml:776(programlisting) serverguide/C/windows-networking.xml:990(programlisting)
231
#, no-wrap
232
msgid ""
233
"\n"
234
" workgroup = EXAMPLE\n"
235
" ...\n"
236
" security = user\n"
237
msgstr ""
238
"\n"
239
" workgroup = EXAMPLE\n"
240
" ... \n"
241
" security = user\n"
242
243
#: serverguide/C/windows-networking.xml:127(para)
244
msgid ""
245
"The <emphasis>security</emphasis> parameter is farther down in the [global] "
246
"section, and is commented by default. Also, change "
247
"<emphasis>EXAMPLE</emphasis> to better match your environment."
248
msgstr ""
249
"Lo paramètre <emphasis>security</ emphasis> situat mai bas dins la seccion "
250
"[global] es comentat per defaut. Modificatz tanben <emphasis>EXEMPLE</ "
251
"emphasis> per l'adaptar a vòstre environament."
252
253
#: serverguide/C/windows-networking.xml:135(para)
254
msgid ""
255
"Create a new section at the bottom of the file, or uncomment one of the "
256
"examples, for the directory to be shared:"
257
msgstr ""
258
"Creatz una seccion novèla a la fin del fichièr (o descomentatz un dels "
259
"exemples) pel dorsièr de partejar :"
260
261
#: serverguide/C/windows-networking.xml:139(programlisting)
262
#, no-wrap
263
msgid ""
264
"\n"
265
"[share]\n"
266
" comment = Ubuntu File Server Share\n"
267
" path = /srv/samba/share\n"
268
" browsable = yes\n"
269
" guest ok = yes\n"
270
" read only = no\n"
271
" create mask = 0755\n"
272
msgstr ""
273
"\n"
274
"[share]\n"
275
"comment = Dorsièr partejat sul servidor Ubuntu\n"
276
"path = /srv/samba/share\n"
277
"browsable = yes\n"
278
"guest ok = yes\n"
279
"read only = no\n"
280
"create mask = 0755\n"
281
282
#: serverguide/C/windows-networking.xml:151(para)
283
msgid ""
284
"<emphasis>comment:</emphasis> a short description of the share. Adjust to "
285
"fit your needs."
286
msgstr ""
287
"<emphasis>comment :</emphasis> una brèva descripcion del partiment. Adaptatz-"
288
"lo a vòstres besonhs."
289
290
#: serverguide/C/windows-networking.xml:156(para)
291
msgid "<emphasis>path:</emphasis> the path to the directory to share."
292
msgstr "<emphasis>path :</emphasis> l'emplaçament del dorsièr de partejar."
293
294
#: serverguide/C/windows-networking.xml:159(para)
295
msgid ""
296
"This example uses <filename>/srv/samba/sharename</filename> because, "
297
"according to the <emphasis>Filesystem Hierarchy Standard (FHS)</emphasis>, "
298
"<ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
299
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is where site-"
300
"specific data should be served. Technically Samba shares can be placed "
301
"anywhere on the filesystem as long as the permissions are correct, but "
302
"adhering to standards is recommended."
303
msgstr ""
304
"Aqueste exemple utiliza <filename>/srv/samba/nom_partiment</ filename> "
305
"perque segon la nòrma de la ierarquia dels sistèmas de fichièrs "
306
"(<emphasis>Filesystem Hierarchy Standard (FHS)</emphasis>), <ulink "
307
"url=\"http://www.pathname.com/fhs/pub/fhs-"
308
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> es l'emplaçament "
309
"ont se devon trobar las donadas de servir sus la ret. Tecnicament, los "
310
"partiments Samba pòdon èsser plaçats ont que siá sul sistèma de fichiers "
311
"tant que las permissions son corrèctas, mas lo respièch dels estandards es "
312
"recomandat."
313
314
#: serverguide/C/windows-networking.xml:168(para)
315
msgid ""
316
"<emphasis>browsable:</emphasis> enables Windows clients to browse the shared "
317
"directory using <application>Windows Explorer</application>."
318
msgstr ""
319
"<emphasis>browsable :</emphasis> autoriza los clients Windows a percórrer lo "
320
"repertòri partejat en utilizant l'<application>explorador de fichièrs de "
321
"Windows</application>."
322
323
#: serverguide/C/windows-networking.xml:174(para)
324
msgid ""
325
"<emphasis>guest ok:</emphasis> allows clients to connect to the share "
326
"without supplying a password."
327
msgstr ""
328
"<emphasis>guest ok :</emphasis> permet als clients de se connectar al "
329
"repertòri partejat sens provesir de senhal."
330
331
#: serverguide/C/windows-networking.xml:179(para)
332
msgid ""
333
"<emphasis>read only:</emphasis> determines if the share is read only or if "
334
"write privileges are granted. Write privileges are allowed only when the "
335
"value is <emphasis>no</emphasis>, as is seen in this example. If the value "
336
"is <emphasis>yes</emphasis>, then access to the share is read only."
337
msgstr ""
338
"<emphasis>read only :</emphasis> determina se lo partiment es en lectura "
339
"sola o se los privilègis en escritura son acordats. Los dreches d'escritura "
340
"son acordats solament se la valor es <emphasis>no</emphasis>. Coma òm lo veu "
341
"dins aqueste exemple, se la valor es <emphasis>yes</emphasis>, alara l'accès "
342
"al partimente es en lectura sola."
343
344
#: serverguide/C/windows-networking.xml:184(para)
345
msgid ""
346
"<emphasis>create mask:</emphasis> determines the permissions new files will "
347
"have when created."
348
msgstr ""
349
"<emphasis>create mask :</emphasis> determina las permissions dels fichièrs "
350
"creats novèlament."
351
352
#: serverguide/C/windows-networking.xml:193(para)
353
msgid ""
354
"Now that <application>Samba</application> is configured, the directory needs "
355
"to be created and the permissions changed. From a terminal enter:"
356
msgstr ""
357
"Ara que <application>Samba</application> es configurat, lo repertòri deu "
358
"èsser creat e las permissions modificadas. Dempuèi un terminal, picatz :"
359
360
#: serverguide/C/windows-networking.xml:199(command)
361
msgid "sudo mkdir -p /srv/samba/share"
362
msgstr "sudo mkdir -p /srv/samba/share"
363
364
#: serverguide/C/windows-networking.xml:200(command)
365
msgid "sudo chown nobody.nogroup /srv/samba/share/"
366
msgstr "sudo chown nobody.nogroup /srv/samba/share/"
367
368
#: serverguide/C/windows-networking.xml:204(para)
369
msgid ""
370
"The <emphasis>-p</emphasis> switch tells mkdir to create the entire "
371
"directory tree if it doesn't exist. Change the share name to fit your "
372
"environment."
373
msgstr ""
374
"L'opcion<emphasis>-p</emphasis> indica a mkdir de crear l'arborescéncia "
375
"completa s'existís pas ja. Adaptatz lo nom del partiment en foncion de "
376
"vòstre environament."
377
378
#: serverguide/C/windows-networking.xml:213(para)
379
msgid ""
380
"Finally, restart the <application>samba</application> services to enable the "
381
"new configuration:"
382
msgstr ""
383
"Per acabar, reaviatz los servicis <application>samba</application> per "
384
"activar la configuracion novèla :"
385
386
#: serverguide/C/windows-networking.xml:218(command) serverguide/C/windows-networking.xml:331(command) serverguide/C/windows-networking.xml:468(command) serverguide/C/windows-networking.xml:567(command) serverguide/C/windows-networking.xml:937(command) serverguide/C/windows-networking.xml:1047(command) serverguide/C/windows-networking.xml:1162(command) serverguide/C/network-auth.xml:1860(command)
387
msgid "sudo /etc/init.d/samba restart"
388
msgstr "sudo /etc/init.d/samba restart"
389
390
#: serverguide/C/windows-networking.xml:225(para)
391
msgid ""
392
"Once again, the above configuration gives all access to any client on the "
393
"local network. For a more secure configuration see <xref linkend=\"samba-"
394
"fileprint-security\"/>."
395
msgstr ""
396
"Notatz plan que la configuracion çaisús balha un accès complet a un client "
397
"quin que siá sus la ret locala. Per una configuracion mai securizada, "
398
"consultatz <xref linkend=\"samba-fileprint-security\"/>."
399
400
#: serverguide/C/windows-networking.xml:231(para)
401
msgid ""
402
"From a Windows client you should now be able to browse to the Ubuntu file "
403
"server and see the shared directory. To check that everything is working try "
404
"creating a directory from Windows."
405
msgstr ""
406
"Ara, vos caldriá èsser en mesura de percórrer lo servidor de fichièrs Ubuntu "
407
"e de veire lo repertòri partejat dempuèi un client Windows. Per verificar "
408
"que tot fonciona, ensajatz de crear un repertòri dempuèi Windows."
409
410
#: serverguide/C/windows-networking.xml:236(para)
411
msgid ""
412
"To create additional shares simply create new <emphasis>[dir]</emphasis> "
413
"sections in <filename>/etc/samba/smb.conf</filename>, and restart "
414
"<emphasis>Samba</emphasis>. Just make sure that the directory you want to "
415
"share actually exists and the permissions are correct."
416
msgstr ""
417
"Per crear d'autres partiments, apondètz de seccions novèlas "
418
"<emphasis>[dir]</emphasis> dins <filename>/etc/samba/smb.conf</filename> e "
419
"reaviatz <emphasis>Samba</emphasis>. Asseguratz-vos solament que lo "
420
"repertòri que volètz partejar existís e que possedís las permissions "
421
"necessàrias."
422
423
#: serverguide/C/windows-networking.xml:243(title) serverguide/C/windows-networking.xml:341(title) serverguide/C/windows-networking.xml:696(title) serverguide/C/windows-networking.xml:1066(title) serverguide/C/windows-networking.xml:1273(title) serverguide/C/virtualization.xml:366(title) serverguide/C/virtualization.xml:1168(title) serverguide/C/reporting-bugs.xml:304(title) serverguide/C/remote-administration.xml:491(title) serverguide/C/network-config.xml:569(title) serverguide/C/network-config.xml:824(title) serverguide/C/network-auth.xml:1531(title) serverguide/C/network-auth.xml:1975(title) serverguide/C/network-auth.xml:2579(title) serverguide/C/network-auth.xml:3087(title) serverguide/C/installation.xml:892(title) serverguide/C/installation.xml:1173(title) serverguide/C/databases.xml:122(title) serverguide/C/databases.xml:273(title) serverguide/C/backups.xml:855(title)
424
msgid "Resources"
425
msgstr "Ressorsas"
426
427
#: serverguide/C/windows-networking.xml:247(para) serverguide/C/windows-networking.xml:345(para) serverguide/C/windows-networking.xml:700(para) serverguide/C/windows-networking.xml:1070(para)
428
msgid ""
429
"For in depth Samba configurations see the <ulink "
430
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
431
"Collection</ulink>"
432
msgstr ""
433
"Per de configuracions mai elaboradas de Samba, consultatz los <ulink "
434
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">guidas "
435
"practics Samba (en)</ulink>"
436
437
#: serverguide/C/windows-networking.xml:253(para) serverguide/C/windows-networking.xml:351(para) serverguide/C/windows-networking.xml:706(para) serverguide/C/windows-networking.xml:1076(para)
438
msgid ""
439
"The guide is also available in <ulink "
440
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">printed "
441
"format</ulink>."
442
msgstr ""
443
"Aqueste guida es tanben disponible en <ulink "
444
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">format "
445
"papièr</ulink>."
446
447
#: serverguide/C/windows-networking.xml:259(para) serverguide/C/windows-networking.xml:357(para)
448
msgid ""
449
"O'Reilly's <ulink "
450
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
451
"another good reference."
452
msgstr ""
453
"<ulink url=\"http://www.oreilly.com/catalog/9780596007690/\">Using "
454
"Samba</ulink> d'O'Reilly es una autra bona font d'informacions."
455
456
#: serverguide/C/windows-networking.xml:265(para) serverguide/C/windows-networking.xml:368(para) serverguide/C/windows-networking.xml:731(para) serverguide/C/windows-networking.xml:1100(para) serverguide/C/windows-networking.xml:1286(para)
457
msgid ""
458
"The <ulink url=\"https://help.ubuntu.com/community/Samba\">Ubuntu Wiki Samba "
459
"</ulink> page."
460
msgstr ""
461
462
#: serverguide/C/windows-networking.xml:274(title)
463
msgid "Samba Print Server"
464
msgstr "Servidor d'estampatge Samba"
465
466
#: serverguide/C/windows-networking.xml:276(para)
467
msgid ""
468
"Another common use of Samba is to configure it to share printers installed, "
469
"either locally or over the network, on an Ubuntu server. Similar to <xref "
470
"linkend=\"samba-fileserver\"/> this section will configure Samba to allow "
471
"any client on the local network to use the installed printers without "
472
"prompting for a username and password."
473
msgstr ""
474
"Una autra utilizacion classica de Samba es de lo configurar per partejar las "
475
"estampadoiras installadas sus un servidor Ubuntu, que siá localament o sus "
476
"la ret. Amai <xref linkend=\"samba-fileserver\"/>, aquesta seccion permet de "
477
"configurar Samba per permetre a un client quin que siá sus la ret d'utilizar "
478
"las estampadoiras sens demanda de senhal."
479
480
#: serverguide/C/windows-networking.xml:282(para)
481
msgid ""
482
"For a more secure configuration see <xref linkend=\"samba-fileprint-"
483
"security\"/>."
484
msgstr ""
485
"Per una configuracion mai securizada, vejatz <xref linkend=\"samba-fileprint-"
486
"security\"/>."
487
488
#: serverguide/C/windows-networking.xml:289(para)
489
msgid ""
490
"Before installing and configuring Samba it is best to already have a working "
491
"<application>CUPS</application> installation. See <xref linkend=\"cups\"/> "
492
"for details."
493
msgstr ""
494
"Abans d'installar e de configurar Samba, es preferible de dispausar d'una "
495
"installacion foncionala de <application>CUPS</application>. Vejatz <xref "
496
"linkend=\"cups\"/> per mai de detalhs."
497
498
#: serverguide/C/windows-networking.xml:294(para)
499
msgid ""
500
"To install the <application>samba</application> package, from a terminal "
501
"enter:"
502
msgstr ""
503
"Per installar lo paquet <application>samba</application>, entratz la comanda "
504
"seguenta dempuèi un terminal :"
505
506
#: serverguide/C/windows-networking.xml:305(para)
507
msgid ""
508
"After installing samba edit <filename>/etc/samba/smb.conf</filename>. Change "
509
"the <emphasis>workgroup</emphasis> attribute to what is appropriate for your "
510
"network, and change <emphasis>security</emphasis> to <emphasis "
511
"role=\"italic\">share</emphasis>:"
512
msgstr ""
513
"Aprèp aver installat Samba, modificatz lo fichièr "
514
"<filename>/etc/samba/smb.conf</filename> e cambiatz l'atribut "
515
"<emphasis>workgroup</emphasis> per l'adaptar a vòstra ret. Metètz tanben "
516
"l'atribut <emphasis>security</emphasis> a <emphasis "
517
"role=\"italic\">share</emphasis> :"
518
519
#: serverguide/C/windows-networking.xml:317(para)
520
msgid ""
521
"In the <emphasis>[printers]</emphasis> section change the <emphasis>guest "
522
"ok</emphasis> option to <emphasis role=\"italic\">yes</emphasis>:"
523
msgstr ""
524
"Dins la seccion <emphasis>[printers]</emphasis>, metètz l'opcion "
525
"<emphasis>guest ok</emphasis> a <emphasis role=\"italic\">yes</emphasis> :"
526
527
#: serverguide/C/windows-networking.xml:321(programlisting)
528
#, no-wrap
529
msgid ""
530
"\n"
531
" browsable = yes\n"
532
" guest ok = yes\n"
533
msgstr ""
534
535
#: serverguide/C/windows-networking.xml:326(para)
536
msgid "After editing <filename>smb.conf</filename> restart Samba:"
537
msgstr "Reaviatz Samba aprèp aver modificat <filename>smb.conf</filename>"
538
539
#: serverguide/C/windows-networking.xml:334(para)
540
msgid ""
541
"The default Samba configuration will automatically share any printers "
542
"installed. Simply install the printer locally on your Windows clients."
543
msgstr ""
544
"La configuracion per defaut de Samba partejarà automaticament tota "
545
"estampadoira installada. Installatz simplament l'estampadoira localament sus "
546
"vòstres clients Windows."
547
548
#: serverguide/C/windows-networking.xml:363(para)
549
msgid ""
550
"Also, see the <ulink url=\"http://www.cups.org/\">CUPS Website</ulink> for "
551
"more information on configuring CUPS."
552
msgstr ""
553
"Vejatz tanben lo <ulink url=\"http://www.cups.org/\">site Web CUPS</ulink> "
554
"per mai d'informacions sul biais de configurar CUPS."
555
556
#: serverguide/C/windows-networking.xml:377(title)
557
msgid "Securing a Samba File and Print Server"
558
msgstr "Securizar un servidor de fichièrs e d'estampatge Samba"
559
560
#: serverguide/C/windows-networking.xml:380(title)
561
msgid "Samba Security Modes"
562
msgstr "Perfils de seguretat de Samba"
563
564
#: serverguide/C/windows-networking.xml:382(para)
565
msgid ""
566
"There are two security levels available to the Common Internet Filesystem "
567
"(CIFS) network protocol <emphasis>user-level</emphasis> and <emphasis>share-"
568
"level</emphasis>. Samba's <emphasis>security mode</emphasis> implementation "
569
"allows more flexibility, providing four ways of implementing user-level "
570
"security and one way to implement share-level:"
571
msgstr ""
572
"Los dos nivèls de seguretat disponibles pel protocòl de ret CIFS (Common "
573
"Internet Filesystem) son <emphasis>user-level</emphasis> e <emphasis>share-"
574
"level</emphasis>. La mesa en òbra de las <emphasis>opcions de "
575
"seguretat</emphasis> de Samba permet mai de flexibilitat en provesissent "
576
"quatre possibilitat de seguretat al nivèl de l'utilizaire mai una al nivèl "
577
"del partiment :"
578
579
#: serverguide/C/windows-networking.xml:391(para)
580
msgid ""
581
"<emphasis>security = user:</emphasis> requires clients to supply a username "
582
"and password to connect to shares. Samba user accounts are separate from "
583
"system accounts, but the <application>libpam-smbpass</application> package "
584
"will sync system users and passwords with the Samba user database."
585
msgstr ""
586
"<emphasis>security = user:</emphasis> impausa als clients de provesir un nom "
587
"d'utilizaire e un senhal per se connectar als partiments. Los comptes "
588
"d'utilizaires Samba son diferents dels comptes de sistèma, mas lo paquet "
589
"<application>libpam-smbpass</application> permet de sincronizar los "
590
"utilizaires e senhal del sistèma amb la banca de donadas dels utilizaires "
591
"Samba."
592
593
#: serverguide/C/windows-networking.xml:398(para)
594
msgid ""
595
"<emphasis>security = domain:</emphasis> this mode allows the Samba server to "
596
"appear to Windows clients as a Primary Domain Controller (PDC), Backup "
597
"Domain Controller (BDC), or a Domain Member Server (DMS). See <xref "
598
"linkend=\"samba-dc\"/> for further information."
599
msgstr ""
600
601
#: serverguide/C/windows-networking.xml:405(para)
602
msgid ""
603
"<emphasis>security = ADS:</emphasis> allows the Samba server to join an "
604
"Active Directory domain as a native member. See <xref linkend=\"samba-ad-"
605
"integration\"/> for details."
606
msgstr ""
607
608
#: serverguide/C/windows-networking.xml:411(para)
609
msgid ""
610
"<emphasis>security = server:</emphasis> this mode is left over from before "
611
"Samba could become a member server, and due to some security issues should "
612
"not be used. See the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
613
"HOWTO-Collection/ServerType.html#id349531\">Server Security</ulink> section "
614
"of the Samba guide for more details."
615
msgstr ""
616
617
#: serverguide/C/windows-networking.xml:419(para)
618
msgid ""
619
"<emphasis>security = share:</emphasis> allows clients to connect to shares "
620
"without supplying a username and password."
621
msgstr ""
622
623
#: serverguide/C/windows-networking.xml:426(para)
624
msgid ""
625
"The security mode you choose will depend on your environment and what you "
626
"need the Samba server to accomplish."
627
msgstr ""
628
629
#: serverguide/C/windows-networking.xml:432(title)
630
msgid "Security = User"
631
msgstr "Security = User"
632
633
#: serverguide/C/windows-networking.xml:434(para)
634
msgid ""
635
"This section will reconfigure the Samba file and print server, from <xref "
636
"linkend=\"samba-fileserver\"/> and <xref linkend=\"samba-printserver\"/>, to "
637
"require authentication."
638
msgstr ""
639
640
#: serverguide/C/windows-networking.xml:439(para)
641
msgid ""
642
"First, install the <application>libpam-smbpass</application> package which "
643
"will sync the system users to the Samba user database:"
644
msgstr ""
645
646
#: serverguide/C/windows-networking.xml:445(command)
647
msgid "sudo apt-get install libpam-smbpass"
648
msgstr "sudo apt-get install libpam-smbpass"
649
650
#: serverguide/C/windows-networking.xml:449(para)
651
msgid ""
652
"If you chose the <emphasis>Samba Server</emphasis> task during installation "
653
"<application>libpam-smbpass</application> is already installed."
654
msgstr ""
655
656
#: serverguide/C/windows-networking.xml:455(para)
657
msgid ""
658
"Edit <filename>/etc/samba/smb.conf</filename>, and in the "
659
"<emphasis>[share]</emphasis> section change:"
660
msgstr ""
661
"Modificatz la seccion <emphasis>[share]</emphasis> del fichièr "
662
"<filename>/etc/samba/smb.conf</filename> :"
663
664
#: serverguide/C/windows-networking.xml:459(programlisting)
665
#, no-wrap
666
msgid ""
667
"\n"
668
" guest ok = no\n"
669
msgstr ""
670
"\n"
671
" guest ok = no\n"
672
673
#: serverguide/C/windows-networking.xml:463(para)
674
msgid "Finally, restart Samba for the new settings to take effect:"
675
msgstr ""
676
"Per acabar, reaviatz Samba per que los paramètres novèls sián preses en "
677
"compte :"
678
679
#: serverguide/C/windows-networking.xml:471(para)
680
msgid ""
681
"Now when connecting to the shared directories or printers you should be "
682
"prompted for a username and password."
683
msgstr ""
684
685
#: serverguide/C/windows-networking.xml:476(para)
686
msgid ""
687
"If you choose to map a network drive to the share you can check the "
688
"<quote>Reconnect at Logon</quote> check box, which will require you to only "
689
"enter the username and password once, at least until the password changes."
690
msgstr ""
691
692
#: serverguide/C/windows-networking.xml:484(title)
693
msgid "Share Security"
694
msgstr "Seguretat dels Partiments"
695
696
#: serverguide/C/windows-networking.xml:486(para)
697
msgid ""
698
"There are several options available to increase the security for each "
699
"individual shared directory. Using the <emphasis>[share]</emphasis> example, "
700
"this section will cover some common options."
701
msgstr ""
702
703
#: serverguide/C/windows-networking.xml:492(title)
704
msgid "Groups"
705
msgstr "Gropes"
706
707
#: serverguide/C/windows-networking.xml:494(para)
708
msgid ""
709
"Groups define a collection of computers or users which have a common level "
710
"of access to particular network resources and offer a level of granularity "
711
"in controlling access to such resources. For example, if a group <emphasis "
712
"role=\"italic\">qa</emphasis> is defined and contains the users <emphasis "
713
"role=\"italic\">freda</emphasis>, <emphasis "
714
"role=\"italic\">danika</emphasis>, and <emphasis "
715
"role=\"italic\">rob</emphasis> and a second group <emphasis "
716
"role=\"italic\">support</emphasis> is defined and consists of users "
717
"<emphasis role=\"italic\">danika</emphasis>, <emphasis "
718
"role=\"italic\">jeremy</emphasis>, and <emphasis "
719
"role=\"italic\">vincent</emphasis> then certain network resources configured "
720
"to allow access by the <emphasis role=\"italic\">qa</emphasis> group will "
721
"subsequently enable access by freda, danika, and rob, but not jeremy or "
722
"vincent. Since the user <emphasis role=\"italic\">danika</emphasis> belongs "
723
"to both the <emphasis role=\"italic\">qa</emphasis> and <emphasis "
724
"role=\"italic\">support</emphasis> groups, she will be able to access "
725
"resources configured for access by both groups, whereas all other users will "
726
"have only access to resources explicitly allowing the group they are part of."
727
msgstr ""
728
729
#: serverguide/C/windows-networking.xml:508(para)
730
msgid ""
731
"By default Samba looks for the local system groups defined in "
732
"<filename>/etc/group</filename> to determine which users belong to which "
733
"groups. For more information on adding and removing users from groups see "
734
"<xref linkend=\"adding-deleting-users\"/>."
735
msgstr ""
736
737
#: serverguide/C/windows-networking.xml:514(para)
738
msgid ""
739
"When defining groups in the Samba configuration file, "
740
"<filename>/etc/samba/smb.conf</filename>, the recognized syntax is to "
741
"preface the group name with an \"@\" symbol. For example, if you wished to "
742
"define a group named <emphasis role=\"italic\">sysadmin</emphasis> in a "
743
"certain section of the <filename>/etc/samba/smb.conf</filename>, you would "
744
"do so by entering the group name as <emphasis "
745
"role=\"bold\">@sysadmin</emphasis>."
746
msgstr ""
747
748
#: serverguide/C/windows-networking.xml:523(title)
749
msgid "File Permissions"
750
msgstr "Dreches d'accès als fichièrs"
751
752
#: serverguide/C/windows-networking.xml:525(para)
753
msgid ""
754
"File Permissions define the explicit rights a computer or user has to a "
755
"particular directory, file, or set of files. Such permissions may be defined "
756
"by editing the <filename>/etc/samba/smb.conf</filename> file and specifying "
757
"the explicit permissions of a defined file share."
758
msgstr ""
759
760
#: serverguide/C/windows-networking.xml:531(para)
761
msgid ""
762
"For example, if you have defined a Samba share called "
763
"<emphasis>share</emphasis> and wish to give <emphasis role=\"italic\">read-"
764
"only</emphasis> permissions to the group of users known as <emphasis "
765
"role=\"italic\">qa</emphasis>, but wanted to allow writing to the share by "
766
"the group called <emphasis role=\"italic\">sysadmin</emphasis> and the user "
767
"named <emphasis role=\"italic\">vincent</emphasis>, then you could edit the "
768
"<filename>/etc/samba/smb.conf</filename> file, and add the following entries "
769
"under the <emphasis>[share]</emphasis> entry:"
770
msgstr ""
771
772
#: serverguide/C/windows-networking.xml:540(programlisting)
773
#, no-wrap
774
msgid ""
775
"\n"
776
" read list = @qa\n"
777
" write list = @sysadmin, vincent\n"
778
msgstr ""
779
"\n"
780
" read list = @qa\n"
781
"write list = @sysadmin, vincent\n"
782
783
#: serverguide/C/windows-networking.xml:545(para)
784
msgid ""
785
"Another possible Samba permission is to declare "
786
"<emphasis>administrative</emphasis> permissions to a particular shared "
787
"resource. Users having administrative permissions may read, write, or modify "
788
"any information contained in the resource the user has been given explicit "
789
"administrative permissions to."
790
msgstr ""
791
792
#: serverguide/C/windows-networking.xml:551(para)
793
msgid ""
794
"For example, if you wanted to give the user <emphasis "
795
"role=\"italic\">melissa</emphasis> administrative permissions to the "
796
"<emphasis role=\"italic\">share</emphasis> example, you would edit the "
797
"<filename>/etc/samba/smb.conf</filename> file, and add the following line "
798
"under the <emphasis>[share]</emphasis> entry:"
799
msgstr ""
800
801
#: serverguide/C/windows-networking.xml:558(programlisting)
802
#, no-wrap
803
msgid ""
804
"\n"
805
" admin users = melissa\n"
806
msgstr ""
807
"\n"
808
" admin users = melissa\n"
809
810
#: serverguide/C/windows-networking.xml:562(para)
811
msgid ""
812
"After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for "
813
"the changes to take effect:"
814
msgstr ""
815
816
#: serverguide/C/windows-networking.xml:571(para)
817
msgid ""
818
"For the <emphasis>read list</emphasis> and <emphasis>write list</emphasis> "
819
"to work the Samba security mode must <emphasis>not</emphasis> be set to "
820
"<emphasis role=\"italic\">security = share</emphasis>"
821
msgstr ""
822
823
#: serverguide/C/windows-networking.xml:577(para)
824
msgid ""
825
"Now that Samba has been configured to limit which groups have access to the "
826
"shared directory, the filesystem permissions need to be updated."
827
msgstr ""
828
829
#: serverguide/C/windows-networking.xml:582(para)
830
msgid ""
831
"Traditional Linux file permissions do not map well to Windows NT Access "
832
"Control Lists (ACLs). Fortunately POSIX ACLs are available on Ubuntu servers "
833
"providing more fine grained control. For example, to enable ACLs on "
834
"<filename>/srv</filename> an EXT3 filesystem, edit "
835
"<filename>/etc/fstab</filename> adding the <emphasis>acl</emphasis> option:"
836
msgstr ""
837
838
#: serverguide/C/windows-networking.xml:589(programlisting)
839
#, no-wrap
840
msgid ""
841
"\n"
842
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
843
"0 1\n"
844
msgstr ""
845
"\n"
846
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl 0 "
847
"1\n"
848
849
#: serverguide/C/windows-networking.xml:593(para)
850
msgid "Then remount the partition:"
851
msgstr "Puèi remontatz la particion :"
852
853
#: serverguide/C/windows-networking.xml:598(command)
854
msgid "sudo mount -v -o remount /srv"
855
msgstr "sudo mount -v -o remount /srv"
856
857
#: serverguide/C/windows-networking.xml:602(para)
858
msgid ""
859
"The above example assumes <filename>/srv</filename> on a separate partition. "
860
"If <filename>/srv</filename>, or wherever you have configured your share "
861
"path, is part of the <filename>/</filename> partition a reboot may be "
862
"required."
863
msgstr ""
864
865
#: serverguide/C/windows-networking.xml:609(para)
866
msgid ""
867
"To match the Samba configuration above the <emphasis>sysadmin</emphasis> "
868
"group will be given read, write, and execute permissions to "
869
"<filename>/srv/samba/share</filename>, the <emphasis>qa</emphasis> group "
870
"will be given read and execute permissions, and the files will be owned by "
871
"the username <emphasis>melissa</emphasis>. Enter the following in a terminal:"
872
msgstr ""
873
874
#: serverguide/C/windows-networking.xml:617(command)
875
msgid "sudo chown -R melissa /srv/samba/share/"
876
msgstr "sudo chown -R melissa /srv/samba/share/"
877
878
#: serverguide/C/windows-networking.xml:618(command)
879
msgid "sudo chgrp -R sysadmin /srv/samba/share/"
880
msgstr "sudo chgrp -R sysadmin /srv/samba/share/"
881
882
#: serverguide/C/windows-networking.xml:619(command)
883
msgid "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
884
msgstr "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
885
886
#: serverguide/C/windows-networking.xml:623(para)
887
msgid ""
888
"The <application>setfacl</application> command above gives "
889
"<emphasis>execute</emphasis> permissions to all files in the "
890
"<filename>/srv/samba/share</filename> directory, which you may or may not "
891
"want."
892
msgstr ""
893
894
#: serverguide/C/windows-networking.xml:629(para)
895
msgid ""
896
"Now from a Windows client you should notice the new file permissions are "
897
"implemented. See the <application>acl</application> and "
898
"<application>setfacl</application> man pages for more information on POSIX "
899
"ACLs."
900
msgstr ""
901
902
#: serverguide/C/windows-networking.xml:637(title)
903
msgid "Samba AppArmor Profile"
904
msgstr "Perfil AppArmor per Samba"
905
906
#: serverguide/C/windows-networking.xml:639(para)
907
msgid ""
908
"Ubuntu comes with the <application>AppArmor</application> security module, "
909
"which provides mandatory access controls. The default AppArmor profile for "
910
"Samba will need to be adapted to your configuration. For more details on "
911
"using AppArmor see <xref linkend=\"apparmor\"/>."
912
msgstr ""
913
914
#: serverguide/C/windows-networking.xml:645(para)
915
msgid ""
916
"There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> "
917
"and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part "
918
"of the <application>apparmor-profiles</application> packages. To install the "
919
"package, from a terminal prompt enter:"
920
msgstr ""
921
922
#: serverguide/C/windows-networking.xml:652(command) serverguide/C/security.xml:925(command)
923
msgid "sudo apt-get install apparmor-profiles"
924
msgstr "sudo apt-get install apparmor-profiles"
925
926
#: serverguide/C/windows-networking.xml:656(para)
927
msgid "This package contains profiles for several other binaries."
928
msgstr ""
929
930
#: serverguide/C/windows-networking.xml:661(para)
931
msgid ""
932
"By default the profiles for <application>smbd</application> and "
933
"<application>nmbd</application> are in <emphasis>complain</emphasis> mode "
934
"allowing Samba to work without modifying the profile, and only logging "
935
"errors. To place the <application>smbd</application> profile into "
936
"<emphasis>enforce</emphasis> mode, and have Samba work as expected, the "
937
"profile will need to be modified to reflect any directories that are shared."
938
msgstr ""
939
940
#: serverguide/C/windows-networking.xml:668(para)
941
msgid ""
942
"Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information "
943
"for <emphasis>[share]</emphasis> from the file server example:"
944
msgstr ""
945
946
#: serverguide/C/windows-networking.xml:673(programlisting)
947
#, no-wrap
948
msgid ""
949
"\n"
950
" /srv/samba/share/ r,\n"
951
" /srv/samba/share/** rwkix,\n"
952
msgstr ""
953
"\n"
954
" /srv/samba/share/ r,\n"
955
"/srv/samba/share/** rwkix,\n"
956
957
#: serverguide/C/windows-networking.xml:678(para)
958
msgid ""
959
"Now place the profile into <emphasis>enforce</emphasis> and reload it:"
960
msgstr ""
961
962
#: serverguide/C/windows-networking.xml:683(command)
963
msgid "sudo aa-enforce /usr/sbin/smbd"
964
msgstr "sudo aa-enforce /usr/sbin/smbd"
965
966
#: serverguide/C/windows-networking.xml:684(command)
967
msgid "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
968
msgstr "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
969
970
#: serverguide/C/windows-networking.xml:687(para)
971
msgid ""
972
"You should now be able to read, write, and execute files in the shared "
973
"directory as normal, and the <application>smbd</application> binary will "
974
"have access to only the configured files and directories. Be sure to add "
975
"entries for each directory you configure Samba to share. Also, any errors "
976
"will be logged to <filename>/var/log/syslog</filename>."
977
msgstr ""
978
979
#: serverguide/C/windows-networking.xml:712(para) serverguide/C/windows-networking.xml:1082(para)
980
msgid ""
981
"O'Reilly's <ulink "
982
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
983
"also a good reference."
984
msgstr ""
985
986
#: serverguide/C/windows-networking.xml:718(para)
987
msgid ""
988
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-"
989
"samba.html\">Chapter 18</ulink> of the Samba HOWTO Collection is devoted to "
990
"security."
991
msgstr ""
992
993
#: serverguide/C/windows-networking.xml:724(para)
994
msgid ""
995
"For more information on Samba and ACLs see the <ulink "
996
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
997
"Collection/AccessControls.html#id397568\">Samba ACLs page </ulink>."
998
msgstr ""
999
1000
#: serverguide/C/windows-networking.xml:740(title)
1001
msgid "Samba as a Domain Controller"
1002
msgstr "Samba coma contrarotlador de domeni"
1003
1004
#: serverguide/C/windows-networking.xml:742(para)
1005
msgid ""
1006
"Although it cannot act as an Active Directory Primary Domain Controller "
1007
"(PDC), a Samba server can be configured to appear as a Windows NT4-style "
1008
"domain controller. A major advantage of this configuration is the ability to "
1009
"centralize user and machine credentials. Samba can also use multiple "
1010
"backends to store the user information."
1011
msgstr ""
1012
1013
#: serverguide/C/windows-networking.xml:749(title)
1014
msgid "Primary Domain Controller"
1015
msgstr "Contrarotlador principal de domeni"
1016
1017
#: serverguide/C/windows-networking.xml:751(para)
1018
msgid ""
1019
"This section covers configuring Samba as a Primary Domain Controller (PDC) "
1020
"using the default smbpasswd backend."
1021
msgstr ""
1022
1023
#: serverguide/C/windows-networking.xml:758(para)
1024
msgid ""
1025
"First, install Samba, and <application>libpam-smbpass</application> to sync "
1026
"the user accounts, by entering the following in a terminal prompt:"
1027
msgstr ""
1028
1029
#: serverguide/C/windows-networking.xml:764(command) serverguide/C/windows-networking.xml:980(command)
1030
msgid "sudo apt-get install samba libpam-smbpass"
1031
msgstr "sudo apt-get install samba libpam-smbpass"
1032
1033
#: serverguide/C/windows-networking.xml:770(para)
1034
msgid ""
1035
"Next, configure Samba by editing <filename>/etc/samba/smb.conf</filename>. "
1036
"The <emphasis>security</emphasis> mode should be set to <emphasis "
1037
"role=\"italic\">user</emphasis>, and the <emphasis>workgroup</emphasis> "
1038
"should relate to your organization:"
1039
msgstr ""
1040
1041
#: serverguide/C/windows-networking.xml:785(para)
1042
msgid ""
1043
"In the commented <quote>Domains</quote> section add or uncomment the "
1044
"following:"
1045
msgstr ""
1046
1047
#: serverguide/C/windows-networking.xml:789(programlisting)
1048
#, no-wrap
1049
msgid ""
1050
"\n"
1051
" domain logons = yes\n"
1052
" logon path = \\\\%N\\%U\\profile\n"
1053
" logon drive = H:\n"
1054
" logon home = \\\\%N\\%U\n"
1055
" logon script = logon.cmd\n"
1056
" add machine script = sudo /usr/sbin/useradd -N -g machines -c Machine -d "
1057
"/var/lib/samba -s /bin/false %u\n"
1058
msgstr ""
1059
1060
#: serverguide/C/windows-networking.xml:800(para)
1061
msgid ""
1062
"<emphasis>domain logons:</emphasis> provides the netlogon service causing "
1063
"Samba to act as a domain controller."
1064
msgstr ""
1065
"<emphasis>domain logons :</emphasis> permet a Samba d'agir coma un "
1066
"contrarotlador de domeni"
1067
1068
#: serverguide/C/windows-networking.xml:805(para)
1069
msgid ""
1070
"<emphasis>logon path:</emphasis> places the user's Windows profile into "
1071
"their home directory. It is also possible to configure a "
1072
"<emphasis>[profiles]</emphasis> share placing all profiles under a single "
1073
"directory."
1074
msgstr ""
1075
1076
#: serverguide/C/windows-networking.xml:811(para)
1077
msgid ""
1078
"<emphasis>logon drive:</emphasis> specifies the home directory local path."
1079
msgstr ""
1080
1081
#: serverguide/C/windows-networking.xml:816(para)
1082
msgid ""
1083
"<emphasis>logon home:</emphasis> specifies the home directory location."
1084
msgstr ""
1085
1086
#: serverguide/C/windows-networking.xml:821(para)
1087
msgid ""
1088
"<emphasis>logon script:</emphasis> determines the script to be run locally "
1089
"once a user has logged in. The script needs to be placed in the "
1090
"<emphasis>[netlogon]</emphasis> share."
1091
msgstr ""
1092
1093
#: serverguide/C/windows-networking.xml:827(para)
1094
msgid ""
1095
"<emphasis>add machine script:</emphasis> a script that will automatically "
1096
"create the <emphasis>Machine Trust Account</emphasis> needed for a "
1097
"workstation to join the domain."
1098
msgstr ""
1099
1100
#: serverguide/C/windows-networking.xml:831(para)
1101
msgid ""
1102
"In this example the <emphasis>machines</emphasis> group will need to be "
1103
"created using the <application>addgroup</application> utility see <xref "
1104
"linkend=\"adding-deleting-users\"/> for details."
1105
msgstr ""
1106
1107
#: serverguide/C/windows-networking.xml:839(para)
1108
msgid ""
1109
"If you wish to not use <emphasis>Roaming Profiles</emphasis> leave the "
1110
"<emphasis>logon home</emphasis> and <emphasis>logon path</emphasis> options "
1111
"commented."
1112
msgstr ""
1113
1114
#: serverguide/C/windows-networking.xml:848(para)
1115
msgid ""
1116
"Uncomment the <emphasis>[homes]</emphasis> share to allow the <emphasis "
1117
"role=\"italic\">logon home</emphasis> to be mapped:"
1118
msgstr ""
1119
1120
#: serverguide/C/windows-networking.xml:853(programlisting)
1121
#, no-wrap
1122
msgid ""
1123
"\n"
1124
"[homes]\n"
1125
" comment = Home Directories\n"
1126
" browseable = no\n"
1127
" read only = no\n"
1128
" create mask = 0700\n"
1129
" directory mask = 0700\n"
1130
" valid users = %S\n"
1131
msgstr ""
1132
"\n"
1133
"[homes]\n"
1134
" comment = Home Directories\n"
1135
" browseable = no\n"
1136
" read only = no\n"
1137
" create mask = 0700\n"
1138
" directory mask = 0700\n"
1139
" valid users = %S\n"
1140
1141
#: serverguide/C/windows-networking.xml:866(para)
1142
msgid ""
1143
"When configured as a domain controller a <emphasis>[netlogon]</emphasis> "
1144
"share needs to be configured. To enable the share, uncomment:"
1145
msgstr ""
1146
1147
#: serverguide/C/windows-networking.xml:871(programlisting)
1148
#, no-wrap
1149
msgid ""
1150
"\n"
1151
"[netlogon]\n"
1152
" comment = Network Logon Service\n"
1153
" path = /srv/samba/netlogon\n"
1154
" guest ok = yes\n"
1155
" read only = yes\n"
1156
" share modes = no\n"
1157
msgstr ""
1158
"\n"
1159
"[netlogon]\n"
1160
"comment = Servici d'autentificacion de la ret (netlogon)\n"
1161
"path = /srv/samba/netlogon\n"
1162
"guest ok = yes\n"
1163
"read only = yes\n"
1164
"share modes = no\n"
1165
1166
#: serverguide/C/windows-networking.xml:881(para)
1167
msgid ""
1168
"The original <emphasis>netlogon</emphasis> share path is "
1169
"<filename>/home/samba/netlogon</filename>, but according to the Filesystem "
1170
"Hierarchy Standard (FHS), <ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
1171
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is the correct "
1172
"location for site-specific data provided by the system."
1173
msgstr ""
1174
1175
#: serverguide/C/windows-networking.xml:892(para)
1176
msgid ""
1177
"Now create the <filename role=\"directory\">netlogon</filename> directory, "
1178
"and an empty (for now) <filename>logon.cmd</filename> script file:"
1179
msgstr ""
1180
1181
#: serverguide/C/windows-networking.xml:898(command)
1182
msgid "sudo mkdir -p /srv/samba/netlogon"
1183
msgstr "sudo mkdir -p /srv/samba/netlogon"
1184
1185
#: serverguide/C/windows-networking.xml:899(command)
1186
msgid "sudo touch /srv/samba/netlogon/logon.cmd"
1187
msgstr "sudo touch /srv/samba/netlogon/logon.cmd"
1188
1189
#: serverguide/C/windows-networking.xml:902(para)
1190
msgid ""
1191
"You can enter any normal Windows logon script commands in "
1192
"<filename>logon.cmd</filename> to customize the client's environment."
1193
msgstr ""
1194
1195
#: serverguide/C/windows-networking.xml:910(para)
1196
msgid ""
1197
"With <emphasis>root</emphasis> being disabled by default, in order to join a "
1198
"workstation to the domain, a system group needs to be mapped to the Windows "
1199
"<emphasis>Domain Admins</emphasis> group. Using the "
1200
"<application>net</application> utility, from a terminal enter:"
1201
msgstr ""
1202
1203
#: serverguide/C/windows-networking.xml:917(command)
1204
msgid ""
1205
"sudo net groupmap add ntgroup=\"Domain Admins\" unixgroup=sysadmin rid=512 "
1206
"type=d"
1207
msgstr ""
1208
"sudo net groupmap add ntgroup=\"Domain Admins\" unixgroup=sysadmin rid=512 "
1209
"type=d"
1210
1211
#: serverguide/C/windows-networking.xml:921(para)
1212
msgid ""
1213
"Change <emphasis role=\"italic\">sysadmin</emphasis> to whichever group you "
1214
"prefer. Also, the user used to join the domain needs to be a member of the "
1215
"<emphasis>sysadmin</emphasis> group, as well as a member of the system "
1216
"<emphasis>admin</emphasis> group. The <emphasis>admin</emphasis> group "
1217
"allows <application>sudo</application> use."
1218
msgstr ""
1219
1220
#: serverguide/C/windows-networking.xml:932(para)
1221
msgid "Finally, restart Samba to enable the new domain controller:"
1222
msgstr ""
1223
1224
#: serverguide/C/windows-networking.xml:943(para)
1225
msgid ""
1226
"You should now be able to join Windows clients to the Domain in the same "
1227
"manner as joining them to an NT4 domain running on a Windows server."
1228
msgstr ""
1229
1230
#: serverguide/C/windows-networking.xml:953(title)
1231
msgid "Backup Domain Controller"
1232
msgstr "Contrarotlador segondari de domeni"
1233
1234
#: serverguide/C/windows-networking.xml:955(para)
1235
msgid ""
1236
"With a Primary Domain Controller (PDC) on the network it is best to have a "
1237
"Backup Domain Controller (BDC) as well. This will allow clients to "
1238
"authenticate in case the PDC becomes unavailable."
1239
msgstr ""
1240
1241
#: serverguide/C/windows-networking.xml:960(para)
1242
msgid ""
1243
"When configuring Samba as a BDC you need a way to sync account information "
1244
"with the PDC. There are multiple ways of accomplishing this "
1245
"<application>scp</application>, <application>rsync</application>, or by "
1246
"using <application>LDAP</application> as the <emphasis>passdb "
1247
"backend</emphasis>."
1248
msgstr ""
1249
1250
#: serverguide/C/windows-networking.xml:966(para)
1251
msgid ""
1252
"Using LDAP is the most robust way to sync account information, because both "
1253
"domain controllers can use the same information in real time. However, "
1254
"setting up a LDAP server may be overly complicated for a small number of "
1255
"user and computer accounts. See <xref linkend=\"samba-ldap\"/> for details."
1256
msgstr ""
1257
1258
#: serverguide/C/windows-networking.xml:975(para)
1259
msgid ""
1260
"First, install <application>samba</application> and <application>libpam-"
1261
"smbpass</application>. From a terminal enter:"
1262
msgstr ""
1263
"Per començar, installatz <application>samba</application> e "
1264
"<application>libpam-smbpass</application>. Picatz dins un terminal :"
1265
1266
#: serverguide/C/windows-networking.xml:986(para)
1267
msgid ""
1268
"Now, edit <filename>/etc/samba/smb.conf</filename> and uncomment the "
1269
"following in the <emphasis>[global]</emphasis>:"
1270
msgstr ""
1271
1272
#: serverguide/C/windows-networking.xml:999(para)
1273
msgid "In the commented <emphasis>Domains</emphasis> uncomment or add:"
1274
msgstr ""
1275
1276
#: serverguide/C/windows-networking.xml:1003(programlisting)
1277
#, no-wrap
1278
msgid ""
1279
"\n"
1280
" domain logons = yes\n"
1281
" domain master = no\n"
1282
msgstr ""
1283
"\n"
1284
" domain logons = yes\n"
1285
" domain master = no\n"
1286
1287
#: serverguide/C/windows-networking.xml:1011(para)
1288
msgid ""
1289
"Make sure a user has rights to read the files in "
1290
"<filename>/var/lib/samba</filename>. For example, to allow users in the "
1291
"<emphasis>admin</emphasis> group to <application>scp</application> the "
1292
"files, enter:"
1293
msgstr ""
1294
1295
#: serverguide/C/windows-networking.xml:1017(command)
1296
msgid "sudo chgrp -R admin /var/lib/samba"
1297
msgstr "sudo chgrp -R admin /var/lib/samba"
1298
1299
#: serverguide/C/windows-networking.xml:1023(para)
1300
msgid ""
1301
"Next, sync the user accounts, using <application>scp</application> to copy "
1302
"the <filename>/var/lib/samba</filename> directory from the PDC:"
1303
msgstr ""
1304
1305
#: serverguide/C/windows-networking.xml:1029(command)
1306
msgid "sudo scp -r username@pdc:/var/lib/samba /var/lib"
1307
msgstr "sudo scp -r username@pdc:/var/lib/samba /var/lib"
1308
1309
#: serverguide/C/windows-networking.xml:1033(para)
1310
msgid ""
1311
"Replace <emphasis>username</emphasis> with a valid username and "
1312
"<emphasis>pdc</emphasis> with the hostname or IP Address of your actual PDC."
1313
msgstr ""
1314
1315
#: serverguide/C/windows-networking.xml:1042(para)
1316
msgid "Finally, restart <application>samba</application>:"
1317
msgstr ""
1318
1319
#: serverguide/C/windows-networking.xml:1053(para)
1320
msgid ""
1321
"You can test that your Backup Domain controller is working by stopping the "
1322
"Samba daemon on the PDC, then trying to login to a Windows client joined to "
1323
"the domain."
1324
msgstr ""
1325
1326
#: serverguide/C/windows-networking.xml:1058(para)
1327
msgid ""
1328
"Another thing to keep in mind is if you have configured the <emphasis>logon "
1329
"home</emphasis> option as a directory on the PDC, and the PDC becomes "
1330
"unavailable, access to the user's <emphasis>Home</emphasis> drive will also "
1331
"be unavailable. For this reason it is best to configure the <emphasis>logon "
1332
"home</emphasis> to reside on a separate file server from the PDC and BDC."
1333
msgstr ""
1334
1335
#: serverguide/C/windows-networking.xml:1088(para)
1336
msgid ""
1337
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-"
1338
"pdc.html\">Chapter 4</ulink> of the Samba HOWTO Collection explains setting "
1339
"up a Primary Domain Controller."
1340
msgstr ""
1341
1342
#: serverguide/C/windows-networking.xml:1094(para)
1343
msgid ""
1344
"<ulink url=\"http://us3.samba.org/samba/docs/man/Samba-HOWTO-"
1345
"Collection/samba-bdc.html\">Chapter 5</ulink> of the Samba HOWTO Collection "
1346
"explains setting up a Backup Domain Controller."
1347
msgstr ""
1348
1349
#: serverguide/C/windows-networking.xml:1109(title)
1350
msgid "Samba Active Directory Integration"
1351
msgstr "Integracion de Samba a l'Active Directory."
1352
1353
#: serverguide/C/windows-networking.xml:1112(title)
1354
msgid "Accessing a Samba Share"
1355
msgstr "Accedir a un partiment Samba"
1356
1357
#: serverguide/C/windows-networking.xml:1114(para)
1358
msgid ""
1359
"Another, use for Samba is to integrate into an existing Windows network. "
1360
"Once part of an Active Directory domain, Samba can provide file and print "
1361
"services to AD users."
1362
msgstr ""
1363
1364
#: serverguide/C/windows-networking.xml:1119(para)
1365
msgid ""
1366
"The simplest way to join an AD domain is to use <application>Likewise-"
1367
"open</application>. For detailed instructions see <xref linkend=\"likewise-"
1368
"open\"/>."
1369
msgstr ""
1370
1371
#: serverguide/C/windows-networking.xml:1124(para)
1372
msgid ""
1373
"Once part of the domain, enter the following command in the terminal prompt:"
1374
msgstr ""
1375
1376
#: serverguide/C/windows-networking.xml:1129(command)
1377
msgid "sudo apt-get install samba smbfs smbclient"
1378
msgstr "sudo apt-get install samba smbfs smbclient"
1379
1380
#: serverguide/C/windows-networking.xml:1132(para)
1381
msgid ""
1382
"Since the <application>likewise-open</application> and "
1383
"<application>samba</application> packages use separate "
1384
"<filename>secrets.tdb</filename> files, a symlink will need to be created in "
1385
"<filename role=\"directory\">/var/lib/samba</filename>:"
1386
msgstr ""
1387
1388
#: serverguide/C/windows-networking.xml:1138(command)
1389
msgid "sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig"
1390
msgstr "sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig"
1391
1392
#: serverguide/C/windows-networking.xml:1139(command)
1393
msgid "sudo ln -s /etc/samba/secrets.tdb /var/lib/samba"
1394
msgstr "sudo ln -s /etc/samba/secrets.tdb /var/lib/samba"
1395
1396
#: serverguide/C/windows-networking.xml:1142(para)
1397
msgid "Next, edit <filename>/etc/samba/smb.conf</filename> changing:"
1398
msgstr ""
1399
1400
#: serverguide/C/windows-networking.xml:1146(programlisting)
1401
#, no-wrap
1402
msgid ""
1403
"\n"
1404
" workgroup = EXAMPLE\n"
1405
" ...\n"
1406
" security = ads\n"
1407
" realm = EXAMPLE.COM\n"
1408
" ...\n"
1409
" idmap backend = lwopen\n"
1410
" idmap uid = 50-9999999999\n"
1411
" idmap gid = 50-9999999999\n"
1412
msgstr ""
1413
"\n"
1414
" workgroup = EXAMPLE\n"
1415
"...\n"
1416
"security = ads\n"
1417
"realm = EXAMPLE.COM\n"
1418
"...\n"
1419
"idmap backend = lwopen\n"
1420
"idmap uid = 50-9999999999\n"
1421
"idmap gid = 50-9999999999\n"
1422
1423
#: serverguide/C/windows-networking.xml:1157(para)
1424
msgid ""
1425
"Restart <application>samba</application> for the new settings to take effect:"
1426
msgstr ""
1427
1428
#: serverguide/C/windows-networking.xml:1165(para)
1429
msgid ""
1430
"You should now be able to access any <application>Samba</application> shares "
1431
"from a Windows client. However, be sure to give the appropriate AD users or "
1432
"groups access to the share directory. See <xref linkend=\"samba-fileprint-"
1433
"security\"/> for more details."
1434
msgstr ""
1435
1436
#: serverguide/C/windows-networking.xml:1173(title)
1437
msgid "Accessing a Windows Share"
1438
msgstr "Accedir a un partiment Windows"
1439
1440
#: serverguide/C/windows-networking.xml:1175(para)
1441
msgid ""
1442
"Now that the Samba server is part of the Active Directory domain you can "
1443
"access any Windows server shares:"
1444
msgstr ""
1445
1446
#: serverguide/C/windows-networking.xml:1182(para)
1447
msgid ""
1448
"To mount a Windows file share enter the following in a terminal prompt:"
1449
msgstr ""
1450
1451
#: serverguide/C/windows-networking.xml:1186(command)
1452
msgid "mount.cifs //fs01.example.com/share mount_point"
1453
msgstr "mount.cifs //fs01.example.com/partage punt_de_montatge"
1454
1455
#: serverguide/C/windows-networking.xml:1189(para)
1456
msgid ""
1457
"It is also possible to access shares on computers not part of an AD domain, "
1458
"but a username and password will need to be provided."
1459
msgstr ""
1460
1461
#: serverguide/C/windows-networking.xml:1197(para)
1462
msgid ""
1463
"To mount the share during boot place an entry in "
1464
"<filename>/etc/fstab</filename>, for example:"
1465
msgstr ""
1466
1467
#: serverguide/C/windows-networking.xml:1201(programlisting)
1468
#, no-wrap
1469
msgid ""
1470
"\n"
1471
"//192.168.0.5/share /mnt/windows cifs auto,username=steve,password=secret,rw "
1472
"0 0\n"
1473
msgstr ""
1474
"\n"
1475
"//192.168.0.5/share /mnt/windows cifs auto,username=steve,password=secret,rw "
1476
"0 0\n"
1477
1478
#: serverguide/C/windows-networking.xml:1208(para)
1479
msgid ""
1480
"Another way to copy files from a Windows server is to use the "
1481
"<application>smbclient</application> utility. To list the files in a Windows "
1482
"share:"
1483
msgstr ""
1484
1485
#: serverguide/C/windows-networking.xml:1214(command)
1486
msgid "smbclient //fs01.example.com/share -k -c \"ls\""
1487
msgstr "smbclient //fs01.example.com/share -k -c \"ls\""
1488
1489
#: serverguide/C/windows-networking.xml:1220(para)
1490
msgid "To copy a file from the share, enter:"
1491
msgstr ""
1492
1493
#: serverguide/C/windows-networking.xml:1225(command)
1494
msgid "smbclient //fs01.example.com/share -k -c \"get file.txt\""
1495
msgstr "smbclient //fs01.example.com/partage -k -c \"get fichièr.txt\""
1496
1497
#: serverguide/C/windows-networking.xml:1228(para)
1498
msgid ""
1499
"This will copy the <filename>file.txt</filename> into the current directory."
1500
msgstr ""
1501
1502
#: serverguide/C/windows-networking.xml:1235(para)
1503
msgid "And to copy a file to the share:"
1504
msgstr "Per copiar un fichièr cap al partiment :"
1505
1506
#: serverguide/C/windows-networking.xml:1240(command)
1507
msgid "smbclient //fs01.example.com/share -k -c \"put /etc/hosts hosts\""
1508
msgstr "smbclient //fs01.example.com/share -k -c \"put /etc/hosts hosts\""
1509
1510
#: serverguide/C/windows-networking.xml:1243(para)
1511
msgid ""
1512
"This will copy the <filename>/etc/hosts</filename> to "
1513
"<filename>//fs01.example.com/share/hosts</filename>."
1514
msgstr ""
1515
1516
#: serverguide/C/windows-networking.xml:1250(para)
1517
msgid ""
1518
"The <emphasis>-c</emphasis> option used above allows you to execute the "
1519
"<application>smbclient</application> command all at once. This is useful for "
1520
"scripting and minor file operations. To enter the <emphasis>smb: \\"
1521
"></emphasis> prompt, a FTP like prompt where you can execute normal file "
1522
"and directory commands, simply execute:"
1523
msgstr ""
1524
1525
#: serverguide/C/windows-networking.xml:1257(command)
1526
msgid "smbclient //fs01.example.com/share -k"
1527
msgstr "smbclient //fs01.example.com/partiment -k"
1528
1529
#: serverguide/C/windows-networking.xml:1264(para)
1530
msgid ""
1531
"Replace all instances of <emphasis>fs01.example.com/share</emphasis>, "
1532
"<emphasis>//192.168.0.5/share</emphasis>, "
1533
"<emphasis>username=steve,password=secret</emphasis>, and "
1534
"<emphasis>file.txt</emphasis> with your server's IP, hostname, share name, "
1535
"file name, and an actual username and password with rights to the share."
1536
msgstr ""
1537
1538
#: serverguide/C/windows-networking.xml:1275(para)
1539
msgid ""
1540
"For more <application>smbclient</application> options see the man page: "
1541
"<command>man smbclient</command>, also available <ulink "
1542
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/smbclient.1.html\">on"
1543
"line</ulink>."
1544
msgstr ""
1545
1546
#: serverguide/C/windows-networking.xml:1280(para)
1547
msgid ""
1548
"The <application>mount.cifs</application><ulink "
1549
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/mount.cifs.8.html\">m"
1550
"an page</ulink> is also useful for more detailed information."
1551
msgstr ""
1552
1553
#: serverguide/C/windows-networking.xml:1293(title)
1554
msgid "Likewise Open"
1555
msgstr "Likewise Open"
1556
1557
#: serverguide/C/windows-networking.xml:1295(para)
1558
msgid ""
1559
"<application>Likewise Open</application> simplifies the necessary "
1560
"configuration needed to authenticate a Linux machine to an Active Directory "
1561
"domain. Based on <application>winbind</application>, the "
1562
"<application>likewise-open</application> package takes the pain out of "
1563
"integrating Ubuntu authentication into an existing Windows network."
1564
msgstr ""
1565
1566
#: serverguide/C/windows-networking.xml:1304(para)
1567
msgid ""
1568
"There are two ways to use Likewise Open, <application>likewise-"
1569
"open</application> the command line utility and <application>likewise-open-"
1570
"gui</application>. This section focuses on the command line utility."
1571
msgstr ""
1572
1573
#: serverguide/C/windows-networking.xml:1309(para)
1574
msgid ""
1575
"To install the <application>likewise-open</application> package, open a "
1576
"terminal prompt and enter:"
1577
msgstr ""
1578
1579
#: serverguide/C/windows-networking.xml:1314(command)
1580
msgid "sudo apt-get install likewise-open"
1581
msgstr "sudo apt-get install likewise-open"
1582
1583
#: serverguide/C/windows-networking.xml:1319(title)
1584
msgid "Joining a Domain"
1585
msgstr "Rejónher un domeni"
1586
1587
#: serverguide/C/windows-networking.xml:1321(para)
1588
msgid ""
1589
"The main executable file of the <application>likewise-open</application> "
1590
"package is <filename>/usr/bin/domainjoin-cli</filename>, which is used to "
1591
"join your computer to the domain. Before you join a domain you will need to "
1592
"make sure you have:"
1593
msgstr ""
1594
1595
#: serverguide/C/windows-networking.xml:1329(para)
1596
msgid ""
1597
"Access to an Active Directory user with appropriate rights to join the "
1598
"domain."
1599
msgstr ""
1600
1601
#: serverguide/C/windows-networking.xml:1334(para)
1602
msgid ""
1603
"The <emphasis>Fully Qualified Domain Name</emphasis> (FQDN) of the domain "
1604
"you want to join. If your AD domain does not match a valid domain such as "
1605
"<emphasis role=\"italic\">example.com</emphasis>, it is likely that it has "
1606
"the form of <emphasis>domainname.local</emphasis>."
1607
msgstr ""
1608
1609
#: serverguide/C/windows-networking.xml:1341(para)
1610
msgid ""
1611
"DNS for the domain setup properly. In a production AD environment this "
1612
"should be the case. Proper Microsoft DNS is needed so that client "
1613
"workstations can determine the Active Directory domain is available."
1614
msgstr ""
1615
1616
#: serverguide/C/windows-networking.xml:1345(para)
1617
msgid ""
1618
"If you don't have a Windows DNS server on your network, see <xref "
1619
"linkend=\"likewise-open-ms-dns\"/> for details."
1620
msgstr ""
1621
1622
#: serverguide/C/windows-networking.xml:1352(para)
1623
msgid "To join a domain, from a terminal prompt enter:"
1624
msgstr ""
1625
1626
#: serverguide/C/windows-networking.xml:1357(command)
1627
msgid "sudo domainjoin-cli join example.com Administrator"
1628
msgstr "sudo domainjoin-cli join example.com Administrator"
1629
1630
#: serverguide/C/windows-networking.xml:1361(para)
1631
msgid ""
1632
"Replace <emphasis>example.com</emphasis> with your domain name, and "
1633
"<emphasis>Administrator</emphasis> with the appropriate user name."
1634
msgstr ""
1635
1636
#: serverguide/C/windows-networking.xml:1367(para)
1637
msgid ""
1638
"You will then be prompted for the user's password. If all goes well a "
1639
"<emphasis>SUCCESS</emphasis> message should be printed to the console."
1640
msgstr ""
1641
1642
#: serverguide/C/windows-networking.xml:1373(para)
1643
msgid ""
1644
"After joining the domain, it is necessary to reboot before attempting to "
1645
"authenticate against the domain."
1646
msgstr ""
1647
1648
#: serverguide/C/windows-networking.xml:1379(para)
1649
msgid ""
1650
"After successfully joining an Ubuntu machine to an Active Directory domain "
1651
"you can authenticate using any valid AD user. To login you will need to "
1652
"enter the user name as 'domain\\username'. For example to ssh to a server "
1653
"joined to the domain enter:"
1654
msgstr ""
1655
1656
#: serverguide/C/windows-networking.xml:1386(command)
1657
msgid "ssh 'example\\steve'@hostname"
1658
msgstr "ssh 'example\\steve'@hostname"
1659
1660
#: serverguide/C/windows-networking.xml:1390(para)
1661
msgid ""
1662
"If configuring a Desktop the user name will need to be prefixed with "
1663
"<emphasis role=\"italic\">domain\\</emphasis> in the graphical logon as well."
1664
msgstr ""
1665
1666
#: serverguide/C/windows-networking.xml:1396(para)
1667
msgid ""
1668
"To make likewise-open use a default domain, you can add the following "
1669
"statement to <filename>/etc/samba/lwiauthd.conf</filename>:"
1670
msgstr ""
1671
1672
#: serverguide/C/windows-networking.xml:1400(programlisting)
1673
#, no-wrap
1674
msgid ""
1675
"\n"
1676
"winbind use default domain = yes\n"
1677
msgstr ""
1678
"\n"
1679
"winbind use default domain = yes\n"
1680
1681
#: serverguide/C/windows-networking.xml:1404(para)
1682
msgid "Then restart the <application>likewise-open</application> daemons:"
1683
msgstr ""
1684
1685
#: serverguide/C/windows-networking.xml:1409(command)
1686
msgid "sudo /etc/init.d/likewise-open restart"
1687
msgstr "sudo /etc/init.d/likewise-open restart"
1688
1689
#: serverguide/C/windows-networking.xml:1413(para)
1690
msgid ""
1691
"Once configured for a <emphasis>default domain</emphasis> the <emphasis "
1692
"role=\"italic\">'domain\\'</emphasis> is no longer required, users can login "
1693
"using only their username."
1694
msgstr ""
1695
1696
#: serverguide/C/windows-networking.xml:1419(para)
1697
msgid ""
1698
"The <application>domainjoin-cli</application> utility can also be used to "
1699
"leave the domain. From a terminal:"
1700
msgstr ""
1701
1702
#: serverguide/C/windows-networking.xml:1424(command)
1703
msgid "sudo domainjoin-cli leave"
1704
msgstr "sudo domainjoin-cli leave"
1705
1706
#: serverguide/C/windows-networking.xml:1429(title) serverguide/C/security.xml:1777(title)
1707
msgid "Other Utilities"
1708
msgstr "Autres utilitaris"
1709
1710
#: serverguide/C/windows-networking.xml:1431(para)
1711
msgid ""
1712
"The <application>likewise-open</application> package comes with a few other "
1713
"utilities that may be useful for gathering information about the Active "
1714
"Directory environment. These utilities are used to join the machine to the "
1715
"domain, and are the same as those available in the <application>samba-"
1716
"common</application> and <application>winbind</application> packages:"
1717
msgstr ""
1718
1719
#: serverguide/C/windows-networking.xml:1440(para)
1720
msgid ""
1721
"<application>lwinet</application>: Returns information about the network and "
1722
"the domain."
1723
msgstr ""
1724
"<application>lwinet</application> : renvia d'informacions sus la ret e lo "
1725
"domeni."
1726
1727
#: serverguide/C/windows-networking.xml:1445(para)
1728
msgid ""
1729
"<application>lwimsg</application>: Allows interaction with the "
1730
"<application>likewise-winbindd</application> daemon."
1731
msgstr ""
1732
1733
#: serverguide/C/windows-networking.xml:1450(para)
1734
msgid ""
1735
"<application>lwiinfo</application>: Displays information about various parts "
1736
"of the Domain."
1737
msgstr ""
1738
1739
#: serverguide/C/windows-networking.xml:1456(para)
1740
msgid "Please refer to each utility's man page specific for details."
1741
msgstr ""
1742
1743
#: serverguide/C/windows-networking.xml:1462(title) serverguide/C/mail.xml:351(title) serverguide/C/mail.xml:1598(title) serverguide/C/dns.xml:338(title)
1744
msgid "Troubleshooting"
1745
msgstr "Depanatge"
1746
1747
#: serverguide/C/windows-networking.xml:1466(para)
1748
msgid ""
1749
"If the client has trouble joining the domain, double check that the "
1750
"Microsoft DNS is listed first in <filename>/etc/resolv.conf</filename>. For "
1751
"example:"
1752
msgstr ""
1753
1754
#: serverguide/C/windows-networking.xml:1471(programlisting)
1755
#, no-wrap
1756
msgid ""
1757
"\n"
1758
"nameserver 192.168.0.1\n"
1759
msgstr ""
1760
"\n"
1761
"nameserver 192.168.0.1\n"
1762
1763
#: serverguide/C/windows-networking.xml:1476(para)
1764
msgid ""
1765
"For more information when joining a domain, use the <emphasis>--loglevel "
1766
"verbose</emphasis> or <emphasis>--advanced</emphasis> option of the "
1767
"<application>domainjoin-cli</application> utility:"
1768
msgstr ""
1769
1770
#: serverguide/C/windows-networking.xml:1482(command)
1771
msgid "sudo domainjoin-cli --loglevel verbose join example.com Administrator"
1772
msgstr ""
1773
"sudo domainjoin-cli --loglevel verbose join example.com Administrator"
1774
1775
#: serverguide/C/windows-networking.xml:1486(para)
1776
msgid ""
1777
"If an Active Directory user has trouble logging in, check the "
1778
"<filename>/var/log/auth.log</filename> for details."
1779
msgstr ""
1780
1781
#: serverguide/C/windows-networking.xml:1491(para)
1782
msgid ""
1783
"When joining an Ubuntu Desktop workstation to a domain, you may need to edit "
1784
"<filename>/etc/nsswitch.conf</filename> if your AD domain uses the <emphasis "
1785
"role=\"italic\">.local</emphasis> syntax. In order to join the domain the "
1786
"<emphasis>\"mdns4\"</emphasis> entry should be removed from the "
1787
"<emphasis>hosts</emphasis> option. For example:"
1788
msgstr ""
1789
1790
#: serverguide/C/windows-networking.xml:1497(programlisting)
1791
#, no-wrap
1792
msgid ""
1793
"\n"
1794
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
1795
msgstr ""
1796
"\n"
1797
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
1798
1799
#: serverguide/C/windows-networking.xml:1501(para)
1800
msgid "Change the above to:"
1801
msgstr "Transformatz la linha çaisús en :"
1802
1803
#: serverguide/C/windows-networking.xml:1505(programlisting)
1804
#, no-wrap
1805
msgid ""
1806
"\n"
1807
"hosts: files dns [NOTFOUND=return]\n"
1808
msgstr ""
1809
"\n"
1810
"hosts: files dns [NOTFOUND=return]\n"
1811
1812
#: serverguide/C/windows-networking.xml:1509(para)
1813
msgid "Then restart networking by entering:"
1814
msgstr ""
1815
1816
#: serverguide/C/windows-networking.xml:1514(command) serverguide/C/network-config.xml:559(command)
1817
msgid "sudo /etc/init.d/networking restart"
1818
msgstr "sudo /etc/init.d/networking restart"
1819
1820
#: serverguide/C/windows-networking.xml:1517(para)
1821
msgid "You should now be able to join the Active Directory domain."
1822
msgstr ""
1823
1824
#: serverguide/C/windows-networking.xml:1525(title)
1825
msgid "Microsoft DNS"
1826
msgstr "DNS Microsoft"
1827
1828
#: serverguide/C/windows-networking.xml:1527(para)
1829
msgid ""
1830
"The following are instructions for installing DNS on an Active Directory "
1831
"domain controller running Windows Server 2003, but the instructions should "
1832
"be similar for other versions:"
1833
msgstr ""
1834
1835
#: serverguide/C/windows-networking.xml:1536(para)
1836
msgid ""
1837
"Click "
1838
"<menuchoice><guimenuitem>Start</guimenuitem><guimenuitem>Administrative Tools"
1839
"</guimenuitem><guimenuitem>Manage Your Server</guimenuitem></menuchoice>. "
1840
"This will open the <application>Server Role Mangement</application> utility."
1841
msgstr ""
1842
1843
#: serverguide/C/windows-networking.xml:1544(para)
1844
msgid "Click <guilabel>Add or remove a role</guilabel>"
1845
msgstr ""
1846
1847
#: serverguide/C/windows-networking.xml:1545(para) serverguide/C/windows-networking.xml:1547(para) serverguide/C/windows-networking.xml:1550(para)
1848
msgid "Click Next"
1849
msgstr "Clicatz sus « Seguent »"
1850
1851
#: serverguide/C/windows-networking.xml:1546(para)
1852
msgid "Select \"DNS Server\""
1853
msgstr "Seleccionatz « Servidor DNS »"
1854
1855
#: serverguide/C/windows-networking.xml:1548(para)
1856
msgid "Click Next again to proceed"
1857
msgstr ""
1858
1859
#: serverguide/C/windows-networking.xml:1549(para)
1860
msgid "Select \"Create a forward lookup zone\" if it is not selected."
1861
msgstr "Marcatz « Crear una zòna de recèrca dirècta » s'es pas fach ja."
1862
1863
#: serverguide/C/windows-networking.xml:1551(para)
1864
msgid ""
1865
"Make sure \"This server maintains the zone\" is selected and click Next."
1866
msgstr ""
1867
1868
#: serverguide/C/windows-networking.xml:1552(para)
1869
msgid "Enter your domain name and click Next"
1870
msgstr ""
1871
1872
#: serverguide/C/windows-networking.xml:1553(para)
1873
msgid "Click Next to \"Allow only secure dynamic updates\""
1874
msgstr ""
1875
1876
#: serverguide/C/windows-networking.xml:1555(para)
1877
msgid ""
1878
"Enter the IP for DNS servers to forward queries to, or Select \"No, it "
1879
"should not forward queries\" and click Next."
1880
msgstr ""
1881
1882
#: serverguide/C/windows-networking.xml:1559(para) serverguide/C/windows-networking.xml:1560(para)
1883
msgid "Click Finish"
1884
msgstr "Clicatz sus Acabar"
1885
1886
#: serverguide/C/windows-networking.xml:1562(para)
1887
msgid ""
1888
"DNS is now installed and can be further configured using the "
1889
"<application>Microsoft Management Console</application> DNS snap-in."
1890
msgstr ""
1891
1892
#: serverguide/C/windows-networking.xml:1570(para)
1893
msgid "Click Start"
1894
msgstr "Clicatz sus « Aviar »"
1895
1896
#: serverguide/C/windows-networking.xml:1571(para)
1897
msgid "Control Panel"
1898
msgstr "Panèl de configuracion"
1899
1900
#: serverguide/C/windows-networking.xml:1572(para)
1901
msgid "Network Connections"
1902
msgstr "Connexions a la ret"
1903
1904
#: serverguide/C/windows-networking.xml:1573(para)
1905
msgid "Right Click \"Local Area Connection\""
1906
msgstr ""
1907
1908
#: serverguide/C/windows-networking.xml:1574(para)
1909
msgid "Click Properties"
1910
msgstr "Clicatz sus « Proprietats »"
1911
1912
#: serverguide/C/windows-networking.xml:1575(para)
1913
msgid "Double click \"Internet Protocol (TCP/IP)\""
1914
msgstr ""
1915
1916
#: serverguide/C/windows-networking.xml:1576(para)
1917
msgid "Enter the Server's IP Address as the \"Preferred DNS server\""
1918
msgstr ""
1919
1920
#: serverguide/C/windows-networking.xml:1577(para)
1921
msgid "Click Ok"
1922
msgstr "Clicatz sus Ok"
1923
1924
#: serverguide/C/windows-networking.xml:1578(para)
1925
msgid "Click Ok again to save the settings"
1926
msgstr ""
1927
1928
#: serverguide/C/windows-networking.xml:1567(para)
1929
msgid ""
1930
"Next, configure the Server to use itself for DNS queries: <placeholder-1/>"
1931
msgstr ""
1932
1933
#: serverguide/C/windows-networking.xml:1585(title) serverguide/C/web-servers.xml:624(title) serverguide/C/web-servers.xml:772(title) serverguide/C/web-servers.xml:922(title) serverguide/C/web-servers.xml:1017(title) serverguide/C/web-servers.xml:1239(title) serverguide/C/vpn.xml:303(title) serverguide/C/virtualization.xml:1840(title) serverguide/C/virtualization.xml:2165(title) serverguide/C/vcs.xml:539(title) serverguide/C/security.xml:877(title) serverguide/C/security.xml:1211(title) serverguide/C/security.xml:1626(title) serverguide/C/security.xml:1817(title) serverguide/C/remote-administration.xml:203(title) serverguide/C/package-management.xml:454(title) serverguide/C/other-apps.xml:330(title) serverguide/C/network-config.xml:1006(title) serverguide/C/network-config.xml:1107(title) serverguide/C/monitoring.xml:391(title) serverguide/C/monitoring.xml:527(title) serverguide/C/mail.xml:459(title) serverguide/C/mail.xml:643(title) serverguide/C/mail.xml:795(title) serverguide/C/mail.xml:1217(title) serverguide/C/mail.xml:1646(title) serverguide/C/lamp-applications.xml:259(title) serverguide/C/lamp-applications.xml:388(title) serverguide/C/lamp-applications.xml:496(title) serverguide/C/file-server.xml:284(title) serverguide/C/file-server.xml:436(title) serverguide/C/file-server.xml:619(title) serverguide/C/dns.xml:572(title) serverguide/C/clustering.xml:234(title) serverguide/C/chat.xml:107(title) serverguide/C/chat.xml:221(title) serverguide/C/backups.xml:297(title)
1934
msgid "References"
1935
msgstr "Referéncias"
1936
1937
#: serverguide/C/windows-networking.xml:1587(para)
1938
msgid ""
1939
"Please refer to the <ulink "
1940
"url=\"http://www.likewisesoftware.com/\">Likewise</ulink> home page for "
1941
"further information."
1942
msgstr ""
1943
1944
#: serverguide/C/windows-networking.xml:1591(para)
1945
msgid ""
1946
"For more <application>domainjoin-cli</application> options see the man page: "
1947
"<command>man domainjoin-cli</command>."
1948
msgstr ""
1949
1950
#: serverguide/C/windows-networking.xml:1595(para)
1951
msgid ""
1952
"Also, see the <ulink "
1953
"url=\"https://help.ubuntu.com/community/LikewiseOpen\">Ubuntu Wiki "
1954
"LikewiseOpen</ulink> page."
1955
msgstr ""
1956
1957
#: serverguide/C/web-servers.xml:13(title)
1958
msgid "Web Servers"
1959
msgstr "Servidors Web"
1960
1961
#: serverguide/C/web-servers.xml:14(para)
1962
msgid ""
1963
"A Web server is a software responsible for accepting HTTP requests from "
1964
"clients, which are known as Web browsers, and serving them HTTP responses "
1965
"along with optional data contents, which usually are Web pages such as HTML "
1966
"documents and linked objects (images, etc.)."
1967
msgstr ""
1968
1969
#: serverguide/C/web-servers.xml:19(title)
1970
msgid "HTTPD - Apache2 Web Server"
1971
msgstr "HTTPD - servidor Web Apache2"
1972
1973
#: serverguide/C/web-servers.xml:20(para)
1974
msgid ""
1975
"Apache is the most commonly used Web Server on Linux systems. Web Servers "
1976
"are used to serve Web Pages requested by client computers. Clients typically "
1977
"request and view Web Pages using Web Browser applications such as "
1978
"<application>Firefox</application>, <application>Opera</application>, or "
1979
"<application>Mozilla</application>."
1980
msgstr ""
1981
1982
#: serverguide/C/web-servers.xml:24(para)
1983
msgid ""
1984
"Users enter a Uniform Resource Locator (URL) to point to a Web server by "
1985
"means of its Fully Qualified Domain Name (FQDN) and a path to the required "
1986
"resource. For example, to view the home page of the <ulink "
1987
"url=\"http://www.ubuntu.com\">Ubuntu Web site</ulink> a user will enter only "
1988
"the FQDN. To request specific information about <ulink "
1989
"url=\"http://www.ubuntu.com/support/paid\">paid support</ulink>, a user will "
1990
"enter the FQDN followed by a path."
1991
msgstr ""
1992
1993
#: serverguide/C/web-servers.xml:29(para)
1994
msgid ""
1995
"The most common protocol used to transfer Web pages is the Hyper Text "
1996
"Transfer Protocol (HTTP). Protocols such as Hyper Text Transfer Protocol "
1997
"over Secure Sockets Layer (HTTPS), and File Transfer Protocol (FTP), a "
1998
"protocol for uploading and downloading files, are also supported."
1999
msgstr ""
2000
2001
#: serverguide/C/web-servers.xml:33(para)
2002
msgid ""
2003
"Apache Web Servers are often used in combination with the "
2004
"<application>MySQL</application> database engine, the HyperText Preprocessor "
2005
"(<application>PHP</application>) scripting language, and other popular "
2006
"scripting languages such as <application>Python</application> and "
2007
"<application>Perl</application>. This configuration is termed LAMP (Linux, "
2008
"Apache, MySQL and Perl/Python/PHP) and forms a powerful and robust platform "
2009
"for the development and deployment of Web-based applications."
2010
msgstr ""
2011
2012
#: serverguide/C/web-servers.xml:42(para)
2013
msgid ""
2014
"The <application>Apache2</application> web server is available in Ubuntu "
2015
"Linux. To install Apache2:"
2016
msgstr ""
2017
2018
#: serverguide/C/web-servers.xml:48(para)
2019
msgid "At a terminal prompt enter the following command:"
2020
msgstr ""
2021
2022
#: serverguide/C/web-servers.xml:53(command)
2023
msgid "sudo apt-get install apache2"
2024
msgstr "sudo apt-get install apache2"
2025
2026
#: serverguide/C/web-servers.xml:63(para)
2027
msgid ""
2028
"Apache2 is configured by placing <emphasis>directives</emphasis> in plain "
2029
"text configuration files. These <emphasis>directives</emphasis> are "
2030
"separated between the following files and directories:"
2031
msgstr ""
2032
2033
#: serverguide/C/web-servers.xml:71(para)
2034
msgid ""
2035
"<emphasis>apache2.conf:</emphasis> the main Apache2 configuration file. "
2036
"Contains settings that are <emphasis>global</emphasis> to Apache2."
2037
msgstr ""
2038
2039
#: serverguide/C/web-servers.xml:77(para)
2040
msgid ""
2041
"<emphasis>conf.d:</emphasis> contains configuration files which apply "
2042
"<emphasis>globally</emphasis> to Apache2. Other packages that use Apache2 to "
2043
"serve content may add files, or symlinks, to this directory."
2044
msgstr ""
2045
2046
#: serverguide/C/web-servers.xml:83(para)
2047
msgid ""
2048
"<emphasis>envvars:</emphasis> file where Apache2 "
2049
"<emphasis>environment</emphasis> variables are set."
2050
msgstr ""
2051
2052
#: serverguide/C/web-servers.xml:88(para)
2053
msgid ""
2054
"<emphasis>httpd.conf:</emphasis> historically the main Apache2 configuration "
2055
"file, named after the <application>httpd</application> daemon. The file can "
2056
"be used for <emphasis>user specific</emphasis> configuration options that "
2057
"globally effect Apache2."
2058
msgstr ""
2059
2060
#: serverguide/C/web-servers.xml:95(para)
2061
msgid ""
2062
"<emphasis>mods-available:</emphasis> this directory contains configuration "
2063
"files to both load <emphasis>modules</emphasis> and configure them. Not all "
2064
"modules will have specific configuration files, however."
2065
msgstr ""
2066
2067
#: serverguide/C/web-servers.xml:101(para)
2068
msgid ""
2069
"<emphasis>mods-enabled:</emphasis> holds <emphasis>symlinks</emphasis> to "
2070
"the files in <filename>/etc/apache2/mods-available</filename>. When a module "
2071
"configuration file is symlinked it will be enabled the next time "
2072
"<application>apache2</application> is restarted."
2073
msgstr ""
2074
2075
#: serverguide/C/web-servers.xml:108(para)
2076
msgid ""
2077
"<emphasis>ports.conf:</emphasis> houses the directives that determine which "
2078
"TCP ports Apache2 is listening on."
2079
msgstr ""
2080
2081
#: serverguide/C/web-servers.xml:113(para)
2082
msgid ""
2083
"<emphasis>sites-available:</emphasis> this directory has configuration files "
2084
"for Apache2 <emphasis>Virtual Hosts</emphasis>. Virtual Hosts allow Apache2 "
2085
"to be configured for multiple sites that have separate configurations."
2086
msgstr ""
2087
2088
#: serverguide/C/web-servers.xml:119(para)
2089
msgid ""
2090
"<emphasis>sites-enabled:</emphasis> like mods-enabled, <filename "
2091
"role=\"directory\">sites-enabled</filename> contains symlinks to the "
2092
"<filename>/etc/apache2/sites-available</filename> directory. Similarly when "
2093
"a configuration file in sites-available is symlinked, the site configured by "
2094
"it will be active once Apache2 is restarted."
2095
msgstr ""
2096
2097
#: serverguide/C/web-servers.xml:127(para)
2098
msgid ""
2099
"In addition, other configuration files may be added using the "
2100
"<emphasis>Include</emphasis> directive, and wildcards can be used to include "
2101
"many configuration files. Any directive may be placed in any of these "
2102
"configuration files. Changes to the main configuration files are only "
2103
"recognized by Apache2 when it is started or restarted."
2104
msgstr ""
2105
2106
#: serverguide/C/web-servers.xml:136(para)
2107
msgid ""
2108
"The server also reads a file containing mime document types; the filename is "
2109
"set by the <emphasis>TypesConfig</emphasis> directive, and is "
2110
"<filename>/etc/mime.types</filename> by default."
2111
msgstr ""
2112
2113
#: serverguide/C/web-servers.xml:141(title)
2114
msgid "Basic Settings"
2115
msgstr "Reglatges de basa"
2116
2117
#: serverguide/C/web-servers.xml:142(para)
2118
msgid ""
2119
"This section explains Apache2 server essential configuration parameters. "
2120
"Refer to the <ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2121
"Documentation</ulink> for more details."
2122
msgstr ""
2123
2124
#: serverguide/C/web-servers.xml:150(para)
2125
msgid ""
2126
"Apache2 ships with a virtual-host-friendly default configuration. That is, "
2127
"it is configured with a single default virtual host (using the "
2128
"<emphasis>VirtualHost</emphasis> directive) which can modified or used as-is "
2129
"if you have a single site, or used as a template for additional virtual "
2130
"hosts if you have multiple sites. If left alone, the default virtual host "
2131
"will serve as your default site, or the site users will see if the URL they "
2132
"enter does not match the <emphasis>ServerName</emphasis> directive of any of "
2133
"your custom sites. To modify the default virtual host, edit the file "
2134
"<filename>/etc/apache2/sites-available/default</filename>."
2135
msgstr ""
2136
2137
#: serverguide/C/web-servers.xml:163(para)
2138
msgid ""
2139
"The directives set for a virtual host only apply to that particular virtual "
2140
"host. If a directive is set server-wide and not defined within the virtual "
2141
"host settings, the default setting is used. For example, you can define a "
2142
"Webmaster email address and not define individual email addresses for each "
2143
"virtual host."
2144
msgstr ""
2145
2146
#: serverguide/C/web-servers.xml:171(para)
2147
msgid ""
2148
"If you wish to configure a new virtual host or site, copy that file into the "
2149
"same directory with a name you choose. For example:"
2150
msgstr ""
2151
2152
#: serverguide/C/web-servers.xml:177(command)
2153
msgid ""
2154
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
2155
"available/mynewsite"
2156
msgstr ""
2157
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
2158
"available/mon_site_novèl"
2159
2160
#: serverguide/C/web-servers.xml:180(para)
2161
msgid ""
2162
"Edit the new file to configure the new site using some of the directives "
2163
"described below."
2164
msgstr ""
2165
2166
#: serverguide/C/web-servers.xml:187(para)
2167
msgid ""
2168
"The <emphasis>ServerAdmin</emphasis> directive specifies the email address "
2169
"to be advertised for the server's administrator. The default value is "
2170
"webmaster@localhost. This should be changed to an email address that is "
2171
"delivered to you (if you are the server's administrator). If your website "
2172
"has a problem, Apache2 will display an error message containing this email "
2173
"address to report the problem to. Find this directive in your site's "
2174
"configuration file in /etc/apache2/sites-available."
2175
msgstr ""
2176
2177
#: serverguide/C/web-servers.xml:198(para)
2178
msgid ""
2179
"The <emphasis>Listen</emphasis> directive specifies the port, and optionally "
2180
"the IP address, Apache2 should listen on. If the IP address is not "
2181
"specified, Apache2 will listen on all IP addresses assigned to the machine "
2182
"it runs on. The default value for the Listen directive is 80. Change this to "
2183
"127.0.0.1:80 to cause Apache2 to listen only on your loopback interface so "
2184
"that it will not be available to the Internet, to (for example) 81 to change "
2185
"the port that it listens on, or leave it as is for normal operation. This "
2186
"directive can be found and changed in its own file, "
2187
"<filename>/etc/apache2/ports.conf</filename>"
2188
msgstr ""
2189
2190
#: serverguide/C/web-servers.xml:211(para)
2191
msgid ""
2192
"The <emphasis>ServerName</emphasis> directive is optional and specifies what "
2193
"FQDN your site should answer to. The default virtual host has no ServerName "
2194
"directive specified, so it will respond to all requests that do not match a "
2195
"ServerName directive in another virtual host. If you have just acquired the "
2196
"domain name ubunturocks.com and wish to host it on your Ubuntu server, the "
2197
"value of the ServerName directive in your virtual host configuration file "
2198
"should be ubunturocks.com. Add this directive to the new virtual host file "
2199
"you created earlier (<filename>/etc/apache2/sites-"
2200
"available/mynewsite</filename>)."
2201
msgstr ""
2202
2203
#: serverguide/C/web-servers.xml:223(para)
2204
msgid ""
2205
"You may also want your site to respond to www.ubunturocks.com, since many "
2206
"users will assume the www prefix is appropriate. Use the "
2207
"<emphasis>ServerAlias</emphasis> directive for this. You may also use "
2208
"wildcards in the ServerAlias directive."
2209
msgstr ""
2210
2211
#: serverguide/C/web-servers.xml:230(para)
2212
msgid ""
2213
"For example, the following configuration will cause your site to respond to "
2214
"any domain request ending in <emphasis>.ubunturocks.com</emphasis>."
2215
msgstr ""
2216
2217
#: serverguide/C/web-servers.xml:236(programlisting)
2218
#, no-wrap
2219
msgid ""
2220
"\n"
2221
"ServerAlias *.ubunturocks.com\n"
2222
msgstr ""
2223
"\n"
2224
"ServerAlias *.ubunturocks.com\n"
2225
2226
#: serverguide/C/web-servers.xml:242(para)
2227
msgid ""
2228
"The <emphasis>DocumentRoot</emphasis> directive specifies where Apache2 "
2229
"should look for the files that make up the site. The default value is "
2230
"/var/www. No site is configured there, but if you uncomment the "
2231
"<emphasis>RedirectMatch</emphasis> directive in "
2232
"<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
2233
"to /var/www/apache2-default where the default Apache2 site awaits. Change "
2234
"this value in your site's virtual host file, and remember to create that "
2235
"directory if necessary!"
2236
msgstr ""
2237
2238
#: serverguide/C/web-servers.xml:254(para)
2239
msgid ""
2240
"The /etc/apache2/sites-available directory is <emphasis role=\"bold\"> "
2241
"not</emphasis> parsed by Apache2. Symbolic links in /etc/apache2/sites-"
2242
"enabled point to \"available\" sites."
2243
msgstr ""
2244
2245
#: serverguide/C/web-servers.xml:260(para)
2246
msgid ""
2247
"Enable the new <emphasis>VirtualHost</emphasis> using the "
2248
"<application>a2ensite</application> utility and restart Apache2:"
2249
msgstr ""
2250
2251
#: serverguide/C/web-servers.xml:266(command)
2252
msgid "sudo a2ensite mynewsite"
2253
msgstr "sudo a2ensite mynewsite"
2254
2255
#: serverguide/C/web-servers.xml:267(command) serverguide/C/web-servers.xml:285(command) serverguide/C/web-servers.xml:538(command) serverguide/C/web-servers.xml:547(command) serverguide/C/web-servers.xml:606(command) serverguide/C/mail.xml:932(command) serverguide/C/lamp-applications.xml:228(command)
2256
msgid "sudo /etc/init.d/apache2 restart"
2257
msgstr "sudo /etc/init.d/apache2 restart"
2258
2259
#: serverguide/C/web-servers.xml:271(para)
2260
msgid ""
2261
"Be sure to replace <emphasis>mynewsite</emphasis> with a more descriptive "
2262
"name for the VirtualHost. One method is to name the file after the "
2263
"<emphasis>ServerName</emphasis> directive of the VirtualHost."
2264
msgstr ""
2265
2266
#: serverguide/C/web-servers.xml:278(para)
2267
msgid ""
2268
"Similarly, use the <application>a2dissite</application> utility to disable "
2269
"sites. This is can be useful when troubleshooting configuration problems "
2270
"with multiple VirtualHosts:"
2271
msgstr ""
2272
2273
#: serverguide/C/web-servers.xml:284(command)
2274
msgid "sudo a2dissite mynewsite"
2275
msgstr "sudo a2dissite mon_site_novèl"
2276
2277
#: serverguide/C/web-servers.xml:290(title)
2278
msgid "Default Settings"
2279
msgstr "Paramètres per defaut"
2280
2281
#: serverguide/C/web-servers.xml:292(para)
2282
msgid ""
2283
"This section explains configuration of the Apache2 server default settings. "
2284
"For example, if you add a virtual host, the settings you configure for the "
2285
"virtual host take precedence for that virtual host. For a directive not "
2286
"defined within the virtual host settings, the default value is used."
2287
msgstr ""
2288
2289
#: serverguide/C/web-servers.xml:304(para)
2290
msgid ""
2291
"The <emphasis>DirectoryIndex</emphasis> is the default page served by the "
2292
"server when a user requests an index of a directory by specifying a forward "
2293
"slash (/) at the end of the directory name."
2294
msgstr ""
2295
2296
#: serverguide/C/web-servers.xml:311(para)
2297
msgid ""
2298
"For example, when a user requests the page "
2299
"http://www.example.com/this_directory/, he or she will get either the "
2300
"DirectoryIndex page if it exists, a server-generated directory list if it "
2301
"does not and the Indexes option is specified, or a Permission Denied page if "
2302
"neither is true. The server will try to find one of the files listed in the "
2303
"DirectoryIndex directive and will return the first one it finds. If it does "
2304
"not find any of these files and if <emphasis>Options Indexes</emphasis> is "
2305
"set for that directory, the server will generate and return a list, in HTML "
2306
"format, of the subdirectories and files in the directory. The default value, "
2307
"found in <filename>/etc/apache2/mods-available/dir.conf</filename> is "
2308
"\"index.html index.cgi index.pl index.php index.xhtml index.htm\". Thus, if "
2309
"Apache2 finds a file in a requested directory matching any of these names, "
2310
"the first will be displayed."
2311
msgstr ""
2312
2313
#: serverguide/C/web-servers.xml:332(para)
2314
msgid ""
2315
"The <emphasis>ErrorDocument</emphasis> directive allows you to specify a "
2316
"file for Apache2 to use for specific error events. For example, if a user "
2317
"requests a resource that does not exist, a 404 error will occur, and per "
2318
"Apache2's default configuration, the file "
2319
"<filename>/usr/share/apache2/error/HTTP_NOT_FOUND.html.var </filename> will "
2320
"be displayed. That file is not in the server's DocumentRoot, but there is an "
2321
"Alias directive in <filename>/etc/apache2/apache2.conf</filename> that "
2322
"redirects requests to the /error directory to "
2323
"<filename>/usr/share/apache2/error/</filename>."
2324
msgstr ""
2325
2326
#: serverguide/C/web-servers.xml:344(para)
2327
msgid ""
2328
"To see a list of the default ErrorDocument directives, use this command:"
2329
msgstr ""
2330
2331
#: serverguide/C/web-servers.xml:350(command)
2332
msgid "grep ErrorDocument /etc/apache2/apache2.conf"
2333
msgstr "grep ErrorDocument /etc/apache2/apache2.conf"
2334
2335
#: serverguide/C/web-servers.xml:355(para)
2336
msgid ""
2337
"By default, the server writes the transfer log to the file "
2338
"<filename>/var/log/apache2/access.log</filename>. You can change this on a "
2339
"per-site basis in your virtual host configuration files with the "
2340
"<emphasis>CustomLog</emphasis> directive, or omit it to accept the default, "
2341
"specified in <filename> /etc/apache2/apache2.conf</filename>. You may also "
2342
"specify the file to which errors are logged, via the "
2343
"<emphasis>ErrorLog</emphasis> directive, whose default is "
2344
"<filename>/var/log/apache2/error.log</filename>. These are kept separate "
2345
"from the transfer logs to aid in troubleshooting problems with your Apache2 "
2346
"server. You may also specify the <emphasis>LogLevel</emphasis> (the default "
2347
"value is \"warn\") and the <emphasis>LogFormat</emphasis> (see <filename> "
2348
"/etc/apache2/apache2.conf</filename> for the default value)."
2349
msgstr ""
2350
2351
#: serverguide/C/web-servers.xml:370(para)
2352
msgid ""
2353
"Some options are specified on a per-directory basis rather than per-server. "
2354
"<emphasis>Options</emphasis> is one of these directives. A Directory stanza "
2355
"is enclosed in XML-like tags, like so:"
2356
msgstr ""
2357
2358
#: serverguide/C/web-servers.xml:376(programlisting)
2359
#, no-wrap
2360
msgid ""
2361
"\n"
2362
"<Directory /var/www/mynewsite>\n"
2363
"...\n"
2364
"</Directory>\n"
2365
msgstr ""
2366
2367
#: serverguide/C/web-servers.xml:382(para)
2368
msgid ""
2369
"The <emphasis>Options</emphasis> directive within a Directory stanza accepts "
2370
"one or more of the following values (among others), separated by spaces:"
2371
msgstr ""
2372
2373
#: serverguide/C/web-servers.xml:394(para)
2374
msgid ""
2375
"Most files should not be executed as CGI scripts. This would be very "
2376
"dangerous. CGI scripts should kept in a directory separate from and outside "
2377
"your DocumentRoot, and only this directory should have the ExecCGI option "
2378
"set. This is the default, and the default location for CGI scripts is "
2379
"<filename>/usr/lib/cgi-bin</filename>."
2380
msgstr ""
2381
2382
#: serverguide/C/web-servers.xml:389(para)
2383
msgid ""
2384
"<emphasis role=\"bold\">ExecCGI</emphasis> - Allow execution of CGI scripts. "
2385
"CGI scripts are not executed if this option is not chosen. <placeholder-1/>"
2386
msgstr ""
2387
2388
#: serverguide/C/web-servers.xml:405(para)
2389
msgid ""
2390
"<emphasis role=\"bold\">Includes</emphasis> - Allow server-side includes. "
2391
"Server-side includes allow an HTML file to <emphasis> include</emphasis> "
2392
"other files. This is not a common option. See <ulink "
2393
"url=\"http://httpd.apache.org/docs/2.2/howto/ssi.html\">the Apache2 SSI "
2394
"HOWTO</ulink> for more information."
2395
msgstr ""
2396
2397
#: serverguide/C/web-servers.xml:414(para)
2398
msgid ""
2399
"<emphasis role=\"bold\">IncludesNOEXEC</emphasis> - Allow server-side "
2400
"includes, but disable the <emphasis>#exec</emphasis> and "
2401
"<emphasis>#include</emphasis> commands in CGI scripts."
2402
msgstr ""
2403
2404
#: serverguide/C/web-servers.xml:426(para)
2405
msgid ""
2406
"For security reasons, this should usually not be set, and certainly should "
2407
"not be set on your DocumentRoot directory. Enable this option carefully on a "
2408
"per-directory basis only if you are certain you want users to see the entire "
2409
"contents of the directory."
2410
msgstr ""
2411
2412
#: serverguide/C/web-servers.xml:421(para)
2413
msgid ""
2414
"<emphasis role=\"bold\">Indexes</emphasis> - Display a formatted list of the "
2415
"directory's contents, if no <emphasis>DirectoryIndex</emphasis> (such as "
2416
"index.html) exists in the requested directory. <placeholder-1/>"
2417
msgstr ""
2418
2419
#: serverguide/C/web-servers.xml:436(para)
2420
msgid ""
2421
"<emphasis role=\"bold\">Multiview</emphasis> - Support content-negotiated "
2422
"multiviews; this option is disabled by default for security reasons. See the "
2423
"<ulink "
2424
"url=\"http://httpd.apache.org/docs/2.2/mod/mod_negotiation.html#multiviews\">"
2425
"Apache2 documentation on this option</ulink>."
2426
msgstr ""
2427
2428
#: serverguide/C/web-servers.xml:444(para)
2429
msgid ""
2430
"<emphasis role=\"bold\">SymLinksIfOwnerMatch</emphasis> - Only follow "
2431
"symbolic links if the target file or directory has the same owner as the "
2432
"link."
2433
msgstr ""
2434
2435
#: serverguide/C/web-servers.xml:456(title)
2436
msgid "httpd Settings"
2437
msgstr "Paramètres httpd"
2438
2439
#: serverguide/C/web-servers.xml:458(para)
2440
msgid ""
2441
"This section explains some basic <application>httpd</application> daemon "
2442
"configuration settings."
2443
msgstr ""
2444
2445
#: serverguide/C/web-servers.xml:462(para)
2446
msgid ""
2447
"<emphasis role=\"bold\">LockFile</emphasis> - The LockFile directive sets "
2448
"the path to the lockfile used when the server is compiled with either "
2449
"USE_FCNTL_SERIALIZED_ACCEPT or USE_FLOCK_SERIALIZED_ACCEPT. It must be "
2450
"stored on the local disk. It should be left to the default value unless the "
2451
"logs directory is located on an NFS share. If this is the case, the default "
2452
"value should be changed to a location on the local disk and to a directory "
2453
"that is readable only by root."
2454
msgstr ""
2455
2456
#: serverguide/C/web-servers.xml:471(para)
2457
msgid ""
2458
"<emphasis role=\"bold\">PidFile</emphasis> - The PidFile directive sets the "
2459
"file in which the server records its process ID (pid). This file should only "
2460
"be readable by root. In most cases, it should be left to the default value."
2461
msgstr ""
2462
2463
#: serverguide/C/web-servers.xml:477(para)
2464
msgid ""
2465
"<emphasis role=\"bold\">User</emphasis> - The User directive sets the userid "
2466
"used by the server to answer requests. This setting determines the server's "
2467
"access. Any files inaccessible to this user will also be inaccessible to "
2468
"your website's visitors. The default value for User is www-data."
2469
msgstr ""
2470
2471
#: serverguide/C/web-servers.xml:484(para)
2472
msgid ""
2473
"Unless you know exactly what you are doing, do not set the User directive to "
2474
"root. Using root as the User will create large security holes for your Web "
2475
"server."
2476
msgstr ""
2477
2478
#: serverguide/C/web-servers.xml:490(para)
2479
msgid ""
2480
"The Group directive is similar to the User directive. Group sets the group "
2481
"under which the server will answer requests. The default group is also www-"
2482
"data."
2483
msgstr ""
2484
2485
#: serverguide/C/web-servers.xml:496(title)
2486
msgid "Apache2 Modules"
2487
msgstr ""
2488
2489
#: serverguide/C/web-servers.xml:498(para)
2490
msgid ""
2491
"Apache2 is a modular server. This implies that only the most basic "
2492
"functionality is included in the core server. Extended features are "
2493
"available through modules which can be loaded into Apache2. By default, a "
2494
"base set of modules is included in the server at compile-time. If the server "
2495
"is compiled to use dynamically loaded modules, then modules can be compiled "
2496
"separately, and added at any time using the LoadModule directive. Otherwise, "
2497
"Apache2 must be recompiled to add or remove modules."
2498
msgstr ""
2499
2500
#: serverguide/C/web-servers.xml:510(para)
2501
msgid ""
2502
"Ubuntu compiles Apache2 to allow the dynamic loading of modules. "
2503
"Configuration directives may be conditionally included on the presence of a "
2504
"particular module by enclosing them in an "
2505
"<emphasis><IfModule></emphasis> block."
2506
msgstr ""
2507
2508
#: serverguide/C/web-servers.xml:517(para)
2509
msgid ""
2510
"You can install additional Apache2 modules and use them with your Web "
2511
"server. For example, run the following command from a terminal prompt to "
2512
"install the <emphasis>MySQL Authentication</emphasis> module:"
2513
msgstr ""
2514
2515
#: serverguide/C/web-servers.xml:524(command)
2516
msgid "sudo apt-get install libapache2-mod-auth-mysql"
2517
msgstr "sudo apt-get install libapache2-mod-auth-mysql"
2518
2519
#: serverguide/C/web-servers.xml:527(para)
2520
msgid ""
2521
"See the <filename>/etc/apache2/mods-available</filename> directory, for "
2522
"additional modules."
2523
msgstr ""
2524
2525
#: serverguide/C/web-servers.xml:531(para)
2526
msgid ""
2527
"Use the <application>a2enmod</application> utility to enable a module:"
2528
msgstr ""
2529
2530
#: serverguide/C/web-servers.xml:537(command)
2531
msgid "sudo a2enmod auth_mysql"
2532
msgstr "sudo a2enmod auth_mysql"
2533
2534
#: serverguide/C/web-servers.xml:541(para)
2535
msgid "Similarly, <application>a2dismod</application> will disable a module:"
2536
msgstr ""
2537
2538
#: serverguide/C/web-servers.xml:546(command)
2539
msgid "sudo a2dismod auth_mysql"
2540
msgstr "sudo a2dismod auth_mysql"
2541
2542
#: serverguide/C/web-servers.xml:553(title)
2543
msgid "HTTPS Configuration"
2544
msgstr "Configuracion HTTPS"
2545
2546
#: serverguide/C/web-servers.xml:555(para)
2547
msgid ""
2548
"The <application>mod_ssl</application> module adds an important feature to "
2549
"the Apache2 server - the ability to encrypt communications. Thus, when your "
2550
"browser is communicating using SSL, the https:// prefix is used at the "
2551
"beginning of the Uniform Resource Locator (URL) in the browser navigation "
2552
"bar."
2553
msgstr ""
2554
2555
#: serverguide/C/web-servers.xml:564(para)
2556
msgid ""
2557
"The <application>mod_ssl</application> module is available in "
2558
"<application>apache2-common</application> package. Execute the following "
2559
"command from a terminal prompt to enable the "
2560
"<application>mod_ssl</application> module:"
2561
msgstr ""
2562
2563
#: serverguide/C/web-servers.xml:571(command)
2564
msgid "sudo a2enmod ssl"
2565
msgstr "sudo a2enmod ssl"
2566
2567
#: serverguide/C/web-servers.xml:574(para)
2568
msgid ""
2569
"There is a default HTTPS configuration file in <filename>/etc/apache2/sites-"
2570
"available/default-ssl</filename>. In order for "
2571
"<application>Apache2</application> to provide HTTPS, a "
2572
"<emphasis>certificate</emphasis> and <emphasis>key</emphasis> file are also "
2573
"needed. The default HTTPS configuration will use a certificate and key "
2574
"generated by the <application>ssl-cert</application> package. They are good "
2575
"for testing, but the auto-generated certificate and key should be replaced "
2576
"by a certificate specific to the site or server. For information on "
2577
"generating a key and obtaining a certificate see <xref "
2578
"linkend=\"certificates-and-security\"/>"
2579
msgstr ""
2580
2581
#: serverguide/C/web-servers.xml:584(para)
2582
msgid ""
2583
"To configure <application>Apache2</application> for HTTPS, enter the "
2584
"following:"
2585
msgstr ""
2586
2587
#: serverguide/C/web-servers.xml:589(command)
2588
msgid "sudo a2ensite default-ssl"
2589
msgstr "sudo a2ensite default-ssl"
2590
2591
#: serverguide/C/web-servers.xml:593(para)
2592
msgid ""
2593
"The directories <filename>/etc/ssl/certs</filename> and "
2594
"<filename>/etc/ssl/private</filename> are the default locations. If you "
2595
"install the certificate and key in another directory make sure to change "
2596
"<emphasis>SSLCertificateFile</emphasis> and "
2597
"<emphasis>SSLCertificateKeyFile</emphasis> appropriately."
2598
msgstr ""
2599
2600
#: serverguide/C/web-servers.xml:600(para)
2601
msgid ""
2602
"With Apache2 now configured for HTTPS, restart the service to enable the new "
2603
"settings:"
2604
msgstr ""
2605
2606
#: serverguide/C/web-servers.xml:611(para)
2607
msgid ""
2608
"Depending on how you obtained your certificate you may need to enter a "
2609
"passphrase when <application>Apache2</application> starts."
2610
msgstr ""
2611
2612
#: serverguide/C/web-servers.xml:617(para)
2613
msgid ""
2614
"You can access the secure server pages by typing https://your_hostname/url/ "
2615
"in your browser address bar."
2616
msgstr ""
2617
2618
#: serverguide/C/web-servers.xml:628(para)
2619
msgid ""
2620
"<ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2621
"Documentation</ulink> contains in depth information on Apache2 configuration "
2622
"directives. Also, see the <application>apache2-doc</application> package for "
2623
"the official Apache2 docs."
2624
msgstr ""
2625
2626
#: serverguide/C/web-servers.xml:635(para)
2627
msgid ""
2628
"See the <ulink url=\"http://www.modssl.org/docs/\">Mod SSL "
2629
"Documentation</ulink> site for more SSL related information."
2630
msgstr ""
2631
2632
#: serverguide/C/web-servers.xml:641(para)
2633
msgid ""
2634
"O'Reilly's <ulink url=\"http://oreilly.com/catalog/9780596001919/\">Apache "
2635
"Cookbook</ulink> is a good resource for accomplishing specific Apache2 "
2636
"configurations."
2637
msgstr ""
2638
2639
#: serverguide/C/web-servers.xml:647(para)
2640
msgid ""
2641
"For Ubuntu specific Apache2 questions, ask in the <emphasis>#ubuntu-"
2642
"server</emphasis> IRC channel on <ulink "
2643
"url=\"http://freenode.net/\">freenode.net</ulink>."
2644
msgstr ""
2645
2646
#: serverguide/C/web-servers.xml:653(para)
2647
msgid ""
2648
"Usually integrated with PHP and MySQL the <ulink "
2649
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2650
"Ubuntu Wiki </ulink> page is a good resource."
2651
msgstr ""
2652
2653
#: serverguide/C/web-servers.xml:664(title)
2654
msgid "PHP5 - Scripting Language"
2655
msgstr "PHP5 - Lengatge d'escript"
2656
2657
#: serverguide/C/web-servers.xml:665(para)
2658
msgid ""
2659
"PHP is a general-purpose scripting language suited for Web development. The "
2660
"PHP script can be embedded into HTML. This section explains how to install "
2661
"and configure PHP5 in Ubuntu System with Apache2 and MySQL."
2662
msgstr ""
2663
2664
#: serverguide/C/web-servers.xml:669(para)
2665
msgid ""
2666
"This section assumes you have installed and configured Apache2 Web Server "
2667
"and MySQL Database Server. You can refer to Apache2 section and MySQL "
2668
"sections in this document to install and configure Apache2 and MySQL "
2669
"respectively."
2670
msgstr ""
2671
2672
#: serverguide/C/web-servers.xml:676(para)
2673
msgid "The PHP5 is available in Ubuntu Linux."
2674
msgstr "PHP5 es disponible sus Ubuntu Linux."
2675
2676
#: serverguide/C/web-servers.xml:678(para)
2677
msgid ""
2678
"To install PHP5 you can enter the following command in the terminal prompt: "
2679
"<screen>\n"
2680
"<command>sudo apt-get install php5 libapache2-mod-php5</command>\n"
2681
"</screen>"
2682
msgstr ""
2683
2684
#: serverguide/C/web-servers.xml:687(para)
2685
msgid ""
2686
"You can run PHP5 scripts from command line. To run PHP5 scripts from command "
2687
"line you should install <application>php5-cli</application> package. To "
2688
"install <application>php5-cli</application> you can enter the following "
2689
"command in the terminal prompt: <screen>\n"
2690
"<command>sudo apt-get install php5-cli</command>\n"
2691
"</screen>"
2692
msgstr ""
2693
2694
#: serverguide/C/web-servers.xml:696(para)
2695
msgid ""
2696
"You can also execute PHP5 scripts without installing PHP5 Apache module. To "
2697
"accomplish this, you should install <application>php5-cgi</application> "
2698
"package. You can run the following command in a terminal prompt to install "
2699
"<application>php5-cgi</application> package: <screen>\n"
2700
"<command>sudo apt-get install php5-cgi</command>\n"
2701
"</screen>"
2702
msgstr ""
2703
2704
#: serverguide/C/web-servers.xml:706(para)
2705
msgid ""
2706
"To use <application>MySQL</application> with PHP5 you should install "
2707
"<application>php5-mysql</application> package. To install <application>php5-"
2708
"mysql</application> you can enter the following command in the terminal "
2709
"prompt: <screen>\n"
2710
"<command>sudo apt-get install php5-mysql</command>\n"
2711
"</screen>"
2712
msgstr ""
2713
2714
#: serverguide/C/web-servers.xml:714(para)
2715
msgid ""
2716
"Similarly, to use <application>PostgreSQL</application> with PHP5 you should "
2717
"install <application>php5-pgsql</application> package. To install "
2718
"<application>php5-pgsql</application> you can enter the following command in "
2719
"the terminal prompt: <screen>\n"
2720
"<command>sudo apt-get install php5-pgsql</command>\n"
2721
"</screen>"
2722
msgstr ""
2723
2724
#: serverguide/C/web-servers.xml:727(para)
2725
msgid ""
2726
"Once you install PHP5, you can run PHP5 scripts from your web browser. If "
2727
"you have installed <application>php5-cli</application> package, you can run "
2728
"PHP5 scripts from your command prompt."
2729
msgstr ""
2730
2731
#: serverguide/C/web-servers.xml:734(para)
2732
msgid ""
2733
"By default, the Apache 2 Web server is configured to run PHP5 scripts. In "
2734
"other words, the PHP5 module is enabled in Apache2 Web server automatically "
2735
"when you install the module. Please verify if the files "
2736
"<filename>/etc/apache2/mods-enabled/php5.conf</filename> and "
2737
"<filename>/etc/apache2/mods-enabled/php5.load</filename> exist. If they do "
2738
"not exists, you can enable the module using <command>a2enmod</command> "
2739
"command."
2740
msgstr ""
2741
2742
#: serverguide/C/web-servers.xml:745(para)
2743
msgid ""
2744
"Once you install PHP5 related packages and enabled PHP5 Apache 2 module, you "
2745
"should restart Apache2 Web server to run PHP5 scripts. You can run the "
2746
"following command at a terminal prompt to restart your web server: "
2747
"<screen><command>sudo /etc/init.d/apache2 restart</command> </screen>"
2748
msgstr ""
2749
2750
#: serverguide/C/web-servers.xml:753(title) serverguide/C/mail.xml:320(title) serverguide/C/mail.xml:1569(title) serverguide/C/dns.xml:343(title) serverguide/C/clustering.xml:184(title)
2751
msgid "Testing"
2752
msgstr "Tèsts"
2753
2754
#: serverguide/C/web-servers.xml:754(para)
2755
msgid ""
2756
"To verify your installation, you can run following PHP5 phpinfo script:"
2757
msgstr ""
2758
2759
#: serverguide/C/web-servers.xml:757(programlisting)
2760
#, no-wrap
2761
msgid ""
2762
"\n"
2763
"<?php\n"
2764
" phpinfo();\n"
2765
"?>\n"
2766
msgstr ""
2767
2768
#: serverguide/C/web-servers.xml:762(para)
2769
msgid ""
2770
"You can save the content in a file <filename>phpinfo.php</filename> and "
2771
"place it under <command>DocumentRoot</command> directory of Apache2 Web "
2772
"server. When point your browser to "
2773
"<filename>http://hostname/phpinfo.php</filename>, it would display values of "
2774
"various PHP5 configuration parameters."
2775
msgstr ""
2776
2777
#: serverguide/C/web-servers.xml:776(para)
2778
msgid ""
2779
"For more in depth information see <ulink "
2780
"url=\"http://www.php.net/docs.php\">php.net</ulink> documentation."
2781
msgstr ""
2782
2783
#: serverguide/C/web-servers.xml:781(para)
2784
msgid ""
2785
"There are a plethora of books on PHP. Two good books from O'Reilly are "
2786
"<ulink url=\"http://oreilly.com/catalog/9780596005603/\">Learning PHP "
2787
"5</ulink> and the <ulink "
2788
"url=\"http://oreilly.com/catalog/9781565926813/\">PHP Cook Book</ulink>."
2789
msgstr ""
2790
2791
#: serverguide/C/web-servers.xml:788(para)
2792
msgid ""
2793
"Also, see the <ulink "
2794
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
2795
"Ubuntu Wiki</ulink> page for more information."
2796
msgstr ""
2797
2798
#: serverguide/C/web-servers.xml:799(title)
2799
msgid "Squid - Proxy Server"
2800
msgstr "Squid - Servidor mandatari (proxy)"
2801
2802
#: serverguide/C/web-servers.xml:800(para)
2803
msgid ""
2804
"Squid is a full-featured web proxy cache server application which provides "
2805
"proxy and cache services for Hyper Text Transport Protocol (HTTP), File "
2806
"Transfer Protocol (FTP), and other popular network protocols. Squid can "
2807
"implement caching and proxying of Secure Sockets Layer (SSL) requests and "
2808
"caching of Domain Name Server (DNS) lookups, and perform transparent "
2809
"caching. Squid also supports a wide variety of caching protocols, such as "
2810
"Internet Cache Protocol, (ICP) the Hyper Text Caching Protocol, (HTCP) the "
2811
"Cache Array Routing Protocol (CARP), and the Web Cache Coordination "
2812
"Protocol. (WCCP)"
2813
msgstr ""
2814
2815
#: serverguide/C/web-servers.xml:808(para)
2816
msgid ""
2817
"The Squid proxy cache server is an excellent solution to a variety of proxy "
2818
"and caching server needs, and scales from the branch office to enterprise "
2819
"level networks while providing extensive, granular access control mechanisms "
2820
"and monitoring of critical parameters via the Simple Network Management "
2821
"Protocol (SNMP). When selecting a computer system for use as a dedicated "
2822
"Squid proxy, or caching servers, ensure your system is configured with a "
2823
"large amount of physical memory, as Squid maintains an in-memory cache for "
2824
"increased performance."
2825
msgstr ""
2826
2827
#: serverguide/C/web-servers.xml:817(para)
2828
msgid ""
2829
"At a terminal prompt, enter the following command to install the Squid "
2830
"server:"
2831
msgstr ""
2832
2833
#: serverguide/C/web-servers.xml:822(command)
2834
msgid "sudo apt-get install squid"
2835
msgstr "sudo apt-get install squid"
2836
2837
#: serverguide/C/web-servers.xml:828(para)
2838
msgid ""
2839
"Squid is configured by editing the directives contained within the "
2840
"<filename>/etc/squid/squid.conf</filename> configuration file. The following "
2841
"examples illustrate some of the directives which may be modified to affect "
2842
"the behavior of the Squid server. For more in-depth configuration of Squid, "
2843
"see the References section."
2844
msgstr ""
2845
2846
#: serverguide/C/web-servers.xml:834(para)
2847
msgid ""
2848
"Prior to editing the configuration file, you should make a copy of the "
2849
"original file and protect it from writing so you will have the original "
2850
"settings as a reference, and to re-use as necessary."
2851
msgstr ""
2852
2853
#: serverguide/C/web-servers.xml:837(para)
2854
msgid ""
2855
"Copy the <filename>/etc/squid/squid.conf</filename> file and protect it from "
2856
"writing with the following commands entered at a terminal prompt:"
2857
msgstr ""
2858
2859
#: serverguide/C/web-servers.xml:842(command)
2860
msgid "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"
2861
msgstr "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"
2862
2863
#: serverguide/C/web-servers.xml:843(command)
2864
msgid "sudo chmod a-w /etc/squid/squid.conf.original"
2865
msgstr "sudo chmod a-w /etc/squid/squid.conf.original"
2866
2867
#: serverguide/C/web-servers.xml:849(para)
2868
msgid ""
2869
"To set your Squid server to listen on TCP port 8888 instead of the default "
2870
"TCP port 3128, change the http_port directive as such:"
2871
msgstr ""
2872
2873
#: serverguide/C/web-servers.xml:853(programlisting)
2874
#, no-wrap
2875
msgid ""
2876
"\n"
2877
"http_port 8888\n"
2878
msgstr ""
2879
"\n"
2880
"http_port 8888\n"
2881
2882
#: serverguide/C/web-servers.xml:858(para)
2883
msgid ""
2884
"Change the visible_hostname directive in order to give the Squid server a "
2885
"specific hostname. This hostname does not necessarily need to be the "
2886
"computer's hostname. In this example it is set to <emphasis>weezie</emphasis>"
2887
msgstr ""
2888
2889
#: serverguide/C/web-servers.xml:862(programlisting)
2890
#, no-wrap
2891
msgid ""
2892
"\n"
2893
"visible_hostname weezie\n"
2894
msgstr ""
2895
"\n"
2896
"visible_hostname weezie\n"
2897
2898
#: serverguide/C/web-servers.xml:867(para)
2899
msgid ""
2900
"Using Squid's access control, you may configure use of Internet services "
2901
"proxied by Squid to be available only users with certain Internet Protocol "
2902
"(IP) addresses. For example, we will illustrate access by users of the "
2903
"192.168.42.0/24 subnetwork only:"
2904
msgstr ""
2905
2906
#: serverguide/C/web-servers.xml:872(para) serverguide/C/web-servers.xml:892(para)
2907
msgid ""
2908
"Add the following to the <emphasis role=\"bold\">bottom</emphasis> of the "
2909
"ACL section of your <filename>/etc/squid/squid.conf</filename> file:"
2910
msgstr ""
2911
2912
#: serverguide/C/web-servers.xml:875(programlisting)
2913
#, no-wrap
2914
msgid ""
2915
"\n"
2916
"acl fortytwo_network src 192.168.42.0/24\n"
2917
msgstr ""
2918
"\n"
2919
"acl fortytwo_network src 192.168.42.0/24\n"
2920
2921
#: serverguide/C/web-servers.xml:878(para) serverguide/C/web-servers.xml:899(para)
2922
msgid ""
2923
"Then, add the following to the <emphasis role=\"bold\">top</emphasis> of the "
2924
"http_access section of your <filename>/etc/squid/squid.conf</filename> file:"
2925
msgstr ""
2926
2927
#: serverguide/C/web-servers.xml:882(programlisting)
2928
#, no-wrap
2929
msgid ""
2930
"\n"
2931
"http_access allow fortytwo_network\n"
2932
msgstr ""
2933
"\n"
2934
"http_access allow fortytwo_network\n"
2935
2936
#: serverguide/C/web-servers.xml:887(para)
2937
msgid ""
2938
"Using the excellent access control features of Squid, you may configure use "
2939
"of Internet services proxied by Squid to be available only during normal "
2940
"business hours. For example, we'll illustrate access by employees of a "
2941
"business which is operating between 9:00AM and 5:00PM, Monday through "
2942
"Friday, and which uses the 10.1.42.0/42 subnetwork:"
2943
msgstr ""
2944
2945
#: serverguide/C/web-servers.xml:895(programlisting)
2946
#, no-wrap
2947
msgid ""
2948
"\n"
2949
"acl biz_network src 10.1.42.0/24\n"
2950
"acl biz_hours time M T W T F 9:00-17:00\n"
2951
msgstr ""
2952
"\n"
2953
"acl biz_network src 10.1.42.0/24\n"
2954
"acl biz_hours time M T W T F 9:00-17:00\n"
2955
2956
#: serverguide/C/web-servers.xml:903(programlisting)
2957
#, no-wrap
2958
msgid ""
2959
"\n"
2960
"http_access allow biz_network biz_hours\n"
2961
msgstr ""
2962
"\n"
2963
"http_access allow biz_network biz_hours\n"
2964
2965
#: serverguide/C/web-servers.xml:910(para)
2966
msgid ""
2967
"After making changes to the <filename>/etc/squid/squid.conf</filename> file, "
2968
"save the file and restart the <application>squid</application> server "
2969
"application to effect the changes using the following command entered at a "
2970
"terminal prompt:"
2971
msgstr ""
2972
2973
#: serverguide/C/web-servers.xml:917(command)
2974
msgid "sudo /etc/init.d/squid restart"
2975
msgstr "sudo /etc/init.d/squid restart"
2976
2977
#: serverguide/C/web-servers.xml:924(ulink)
2978
msgid "Squid Website"
2979
msgstr "Site internet de Squid"
2980
2981
#: serverguide/C/web-servers.xml:926(para)
2982
msgid ""
2983
"<ulink url=\"https://help.ubuntu.com/community/Squid\">Ubuntu Wiki "
2984
"Squid</ulink> page."
2985
msgstr ""
2986
2987
#: serverguide/C/web-servers.xml:933(title)
2988
msgid "Ruby on Rails"
2989
msgstr "Ruby on Rails"
2990
2991
#: serverguide/C/web-servers.xml:934(para)
2992
msgid ""
2993
"Ruby on Rails is an open source web framework for developing database backed "
2994
"web applications. It is optimized for sustainable productivity of the "
2995
"programmer since it lets the programmer to write code by favouring "
2996
"convention over configuration."
2997
msgstr ""
2998
2999
#: serverguide/C/web-servers.xml:941(para)
3000
msgid ""
3001
"Before installing <application>Rails</application> you should install "
3002
"<application>Apache</application> and <application>MySQL</application>. To "
3003
"install the <application>Apache</application> package, please refer to <xref "
3004
"linkend=\"httpd\"/>. For instructions on installing "
3005
"<application>MySQL</application> refer to <xref linkend=\"mysql\"/>."
3006
msgstr ""
3007
3008
#: serverguide/C/web-servers.xml:949(para)
3009
msgid ""
3010
"Once you have <application>Apache</application> and "
3011
"<application>MySQL</application> packages installed, you are ready to "
3012
"install <application>Ruby on Rails</application> package."
3013
msgstr ""
3014
3015
#: serverguide/C/web-servers.xml:956(para)
3016
msgid ""
3017
"To install the <application>Ruby</application> base packages and "
3018
"<application>Ruby on Rails</application>, you can enter the following "
3019
"command in the terminal prompt:"
3020
msgstr ""
3021
3022
#: serverguide/C/web-servers.xml:962(command)
3023
msgid "sudo apt-get install rails"
3024
msgstr "sudo apt-get install rails"
3025
3026
#: serverguide/C/web-servers.xml:968(para)
3027
msgid ""
3028
"Modify the <filename>/etc/apache2/sites-available/default</filename> "
3029
"configuration file to setup your domains."
3030
msgstr ""
3031
3032
#: serverguide/C/web-servers.xml:972(para)
3033
msgid ""
3034
"The first thing to change is the <emphasis>DocumentRoot</emphasis> directive:"
3035
msgstr ""
3036
3037
#: serverguide/C/web-servers.xml:976(programlisting)
3038
#, no-wrap
3039
msgid ""
3040
"\n"
3041
"DocumentRoot /path/to/rails/application/public\n"
3042
msgstr ""
3043
"\n"
3044
"DocumentRoot /path/to/rails/application/public\n"
3045
3046
#: serverguide/C/web-servers.xml:979(para)
3047
msgid ""
3048
"Next, change the <Directory \"/path/to/rails/application/public\"> "
3049
"directive:"
3050
msgstr ""
3051
3052
#: serverguide/C/web-servers.xml:983(programlisting)
3053
#, no-wrap
3054
msgid ""
3055
"\n"
3056
"<Directory \"/path/to/rails/application/public\">\n"
3057
" Options Indexes FollowSymLinks MultiViews ExecCGI\n"
3058
" AllowOverride All\n"
3059
" Order allow,deny\n"
3060
" allow from all\n"
3061
" AddHandler cgi-script .cgi\n"
3062
"</Directory>\n"
3063
msgstr ""
3064
"\n"
3065
"<Directory \"/path/to/rails/application/public\">\n"
3066
"Options Indexes FollowSymLinks MultiViews ExecCGI\n"
3067
"AllowOverride All\n"
3068
"Order allow,deny\n"
3069
"allow from all\n"
3070
"AddHandler cgi-script .cgi\n"
3071
"</Directory>\n"
3072
3073
#: serverguide/C/web-servers.xml:993(para)
3074
msgid ""
3075
"You should also enable the <application>mod_rewrite</application> module for "
3076
"Apache. To enable <application>mod_rewrite</application> module, please "
3077
"enter the following command in a terminal prompt:"
3078
msgstr ""
3079
3080
#: serverguide/C/web-servers.xml:999(command)
3081
msgid "sudo a2enmod rewrite"
3082
msgstr "sudo a2enmod rewrite"
3083
3084
#: serverguide/C/web-servers.xml:1002(para)
3085
msgid ""
3086
"Finally you will need to change the ownership of the "
3087
"<filename>/path/to/rails/application/public</filename> and "
3088
"<filename>/path/to/rails/application/tmp</filename> directories to the user "
3089
"used to run the <application>Apache</application> process:"
3090
msgstr ""
3091
3092
#: serverguide/C/web-servers.xml:1008(command)
3093
msgid "sudo chown -R www-data:www-data /path/to/rails/application/public"
3094
msgstr "sudo chown -R www-data:www-data /path/to/rails/application/public"
3095
3096
#: serverguide/C/web-servers.xml:1009(command)
3097
msgid "sudo chown -R www-data:www-data /path/to/rails/application/tmp"
3098
msgstr "sudo chown -R www-data:www-data /path/to/rails/application/tmp"
3099
3100
#: serverguide/C/web-servers.xml:1012(para)
3101
msgid ""
3102
"That's it! Now you have your Server ready for your <application>Ruby on "
3103
"Rails</application> applications."
3104
msgstr ""
3105
3106
#: serverguide/C/web-servers.xml:1021(para)
3107
msgid ""
3108
"See the <ulink url=\"http://rubyonrails.org/\">Ruby on Rails</ulink> website "
3109
"for more information."
3110
msgstr ""
3111
3112
#: serverguide/C/web-servers.xml:1026(para)
3113
msgid ""
3114
"Also <ulink url=\"http://pragprog.com/titles/rails3/agile-web-development-"
3115
"with-rails-third-edition\">Agile Development with Rails</ulink> is a great "
3116
"resource."
3117
msgstr ""
3118
3119
#: serverguide/C/web-servers.xml:1032(para)
3120
msgid ""
3121
"Another place for more information is the <ulink "
3122
"url=\"https://help.ubuntu.com/community/RubyOnRails\">Ruby on Rails Ubuntu "
3123
"Wiki</ulink> page."
3124
msgstr ""
3125
3126
#: serverguide/C/web-servers.xml:1043(title)
3127
msgid "Apache Tomcat"
3128
msgstr "Apache Tomcat"
3129
3130
#: serverguide/C/web-servers.xml:1044(para)
3131
msgid ""
3132
"Apache Tomcat is a web container that allows you to serve Java Servlets and "
3133
"JSP (Java Server Pages) web applications."
3134
msgstr ""
3135
3136
#: serverguide/C/web-servers.xml:1046(para)
3137
msgid ""
3138
"The <application>Tomcat 6.0</application> packages in Ubuntu support two "
3139
"different ways of running Tomcat. You can install them as a classic unique "
3140
"system-wide instance, that will be started at boot time and will run as the "
3141
"tomcat6 unpriviledged user. But you can also deploy private instances that "
3142
"will run with your own user rights, and that you should start and stop by "
3143
"yourself. This second way is particularly useful in a development server "
3144
"context where multiple users need to test on their own private Tomcat "
3145
"instances."
3146
msgstr ""
3147
3148
#: serverguide/C/web-servers.xml:1056(title)
3149
msgid "System-wide installation"
3150
msgstr "Installacion per tot lo sistèma"
3151
3152
#: serverguide/C/web-servers.xml:1057(para)
3153
msgid ""
3154
"To install the <application>Tomcat</application> server, you can enter the "
3155
"following command in the terminal prompt:"
3156
msgstr ""
3157
3158
#: serverguide/C/web-servers.xml:1060(command)
3159
msgid "sudo apt-get install tomcat6"
3160
msgstr "sudo apt-get install tomcat6"
3161
3162
#: serverguide/C/web-servers.xml:1062(para)
3163
msgid ""
3164
"This will install a Tomcat server with just a default ROOT webapp that "
3165
"displays a minimal \"It works\" page by default."
3166
msgstr ""
3167
3168
#: serverguide/C/web-servers.xml:1068(para)
3169
msgid ""
3170
"Tomcat configuration files can be found in "
3171
"<filename>/etc/tomcat6</filename>. Only a few common configuration tweaks "
3172
"will be described here, please see <ulink "
3173
"url=\"http://tomcat.apache.org/tomcat-6.0-doc/index.html\">Tomcat 6.0 "
3174
"documentation</ulink> for more."
3175
msgstr ""
3176
3177
#: serverguide/C/web-servers.xml:1074(title)
3178
msgid "Changing default ports"
3179
msgstr "Modificacion dels pòrts per defaut"
3180
3181
#: serverguide/C/web-servers.xml:1075(para)
3182
msgid ""
3183
"By default Tomcat 6.0 runs a HTTP connector on port 8080 and an AJP "
3184
"connector on port 8009. You might want to change those default ports to "
3185
"avoid conflict with another server on the system. This is done by changing "
3186
"the following lines in <filename>/etc/tomcat6/server.xml</filename>:"
3187
msgstr ""
3188
3189
#: serverguide/C/web-servers.xml:1080(programlisting)
3190
#, no-wrap
3191
msgid ""
3192
"\n"
3193
"<Connector port=\"8080\" protocol=\"HTTP/1.1\" \n"
3194
" connectionTimeout=\"20000\" \n"
3195
" redirectPort=\"8443\" />\n"
3196
"...\n"
3197
"<Connector port=\"8009\" protocol=\"AJP/1.3\" redirectPort=\"8443\" "
3198
"/>\n"
3199
msgstr ""
3200
"\n"
3201
"<Connector port=\"8080\" protocol=\"HTTP/1.1\" \n"
3202
"connectionTimeout=\"20000\" \n"
3203
"redirectPort=\"8443\" />\n"
3204
"...\n"
3205
"<Connector port=\"8009\" protocol=\"AJP/1.3\" redirectPort=\"8443\" "
3206
"/>\n"
3207
3208
#: serverguide/C/web-servers.xml:1089(title)
3209
msgid "Changing JVM used"
3210
msgstr "Modificacion de la maquina virtuala Java utilizada"
3211
3212
#: serverguide/C/web-servers.xml:1090(para)
3213
msgid ""
3214
"By default Tomcat will run preferably with OpenJDK-6, then try Sun's JVM, "
3215
"then try some other JVMs. If you have various JVMs installed, you can set "
3216
"which should be used by setting JAVA_HOME in "
3217
"<filename>/etc/default/tomcat6</filename>:"
3218
msgstr ""
3219
3220
#: serverguide/C/web-servers.xml:1094(programlisting)
3221
#, no-wrap
3222
msgid ""
3223
"\n"
3224
"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"
3225
msgstr ""
3226
"\n"
3227
"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"
3228
3229
#: serverguide/C/web-servers.xml:1099(title)
3230
msgid "Declaring users and roles"
3231
msgstr "Declaracion dels utilizaires e dels ròtles"
3232
3233
#: serverguide/C/web-servers.xml:1100(para)
3234
msgid ""
3235
"Usernames, passwords and roles (groups) can be defined centrally in a "
3236
"Servlet container. In Tomcat 6.0 this is done in the "
3237
"<filename>/etc/tomcat6/tomcat-users.xml</filename> file:"
3238
msgstr ""
3239
3240
#: serverguide/C/web-servers.xml:1103(programlisting)
3241
#, no-wrap
3242
msgid ""
3243
"\n"
3244
"<role rolename=\"admin\"/>\n"
3245
"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"
3246
msgstr ""
3247
"\n"
3248
"<role rolename=\"admin\"/>\n"
3249
"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"
3250
3251
#: serverguide/C/web-servers.xml:1111(title)
3252
msgid "Using Tomcat standard webapps"
3253
msgstr "Utilizacions de las aplicacions Web estandardas de Tomcat"
3254
3255
#: serverguide/C/web-servers.xml:1112(para)
3256
msgid ""
3257
"Tomcat is shipped with webapps that you can install for documentation, "
3258
"administration or demo purposes."
3259
msgstr ""
3260
3261
#: serverguide/C/web-servers.xml:1115(title)
3262
msgid "Tomcat documentation"
3263
msgstr "Documentacion Tomcat"
3264
3265
#: serverguide/C/web-servers.xml:1116(para)
3266
msgid ""
3267
"The <application>tomcat6-docs</application> package contains Tomcat 6.0 "
3268
"documentation, packaged as a webapp that you can access by default at "
3269
"http://yourserver:8080/docs. You can install it by entering the following "
3270
"command in the terminal prompt:"
3271
msgstr ""
3272
3273
#: serverguide/C/web-servers.xml:1121(command)
3274
msgid "sudo apt-get install tomcat6-docs"
3275
msgstr "sudo apt-get install tomcat6-docs"
3276
3277
#: serverguide/C/web-servers.xml:1125(title)
3278
msgid "Tomcat administration webapps"
3279
msgstr "Las aplicacions Web d'administracion per Tomcat"
3280
3281
#: serverguide/C/web-servers.xml:1126(para)
3282
msgid ""
3283
"The <application>tomcat6-admin</application> package contains two webapps "
3284
"that can be used to administer the Tomcat server using a web interface. You "
3285
"can install them by entering the following command in the terminal prompt:"
3286
msgstr ""
3287
3288
#: serverguide/C/web-servers.xml:1131(command)
3289
msgid "sudo apt-get install tomcat6-admin"
3290
msgstr "sudo apt-get install tomcat6-admin"
3291
3292
#: serverguide/C/web-servers.xml:1133(para)
3293
msgid ""
3294
"The first one is the <emphasis>manager</emphasis> webapp, which you can "
3295
"access by default at http://yourserver:8080/manager/html. It is primarily "
3296
"used to get server status and restart webapps."
3297
msgstr ""
3298
3299
#: serverguide/C/web-servers.xml:1136(para)
3300
msgid ""
3301
"Access to the <emphasis>manager</emphasis> application is protected by "
3302
"default: you need to define a user with the role \"manager\" in "
3303
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3304
msgstr ""
3305
3306
#: serverguide/C/web-servers.xml:1140(para)
3307
msgid ""
3308
"The second one is the <emphasis>host-manager</emphasis> webapp, which you "
3309
"can access by default at http://yourserver:8080/host-manager/html. It can be "
3310
"used to create virtual hosts dynamically."
3311
msgstr ""
3312
3313
#: serverguide/C/web-servers.xml:1144(para)
3314
msgid ""
3315
"Access to the <emphasis>host-manager</emphasis> application is also "
3316
"protected by default: you need to define a user with the role \"admin\" in "
3317
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
3318
msgstr ""
3319
3320
#: serverguide/C/web-servers.xml:1149(para)
3321
msgid ""
3322
"For security reasons, the tomcat6 user cannot write to the "
3323
"<filename>/etc/tomcat6</filename> directory by default. Some features in "
3324
"these admin webapps (application deployment, virtual host creation) need "
3325
"write access to that directory. If you want to use these features execute "
3326
"the following, to give users in the tomcat6 group the necessary rights:"
3327
msgstr ""
3328
3329
#: serverguide/C/web-servers.xml:1156(command)
3330
msgid "sudo chgrp -R tomcat6 /etc/tomcat6"
3331
msgstr "sudo chgrp -R tomcat6 /etc/tomcat6"
3332
3333
#: serverguide/C/web-servers.xml:1157(command)
3334
msgid "sudo chmod -R g+w /etc/tomcat6"
3335
msgstr "sudo chmod -R g+w /etc/tomcat6"
3336
3337
#: serverguide/C/web-servers.xml:1162(title)
3338
msgid "Tomcat examples webapps"
3339
msgstr "Exemples d'aplicacions Web Tomcat"
3340
3341
#: serverguide/C/web-servers.xml:1163(para)
3342
msgid ""
3343
"The <application>tomcat6-examples</application> package contains two webapps "
3344
"that can be used to test or demonstrate Servlets and JSP features, which you "
3345
"can access them by default at http://yourserver:8080/examples. You can "
3346
"install them by entering the following command in the terminal prompt:"
3347
msgstr ""
3348
3349
#: serverguide/C/web-servers.xml:1169(command)
3350
msgid "sudo apt-get install tomcat6-examples"
3351
msgstr "sudo apt-get install tomcat6-examples"
3352
3353
#: serverguide/C/web-servers.xml:1175(title)
3354
msgid "Using private instances"
3355
msgstr "Utilizacion de las instàncias privadas"
3356
3357
#: serverguide/C/web-servers.xml:1176(para)
3358
msgid ""
3359
"Tomcat is heavily used in development and testing scenarios where using a "
3360
"single system-wide instance doesn't meet the requirements of multiple users "
3361
"on a single system. The Tomcat 6.0 packages in Ubuntu come with tools to "
3362
"help deploy your own user-oriented instances, allowing every user on a "
3363
"system to run (without root rights) separate private instances while still "
3364
"using the system-installed libraries."
3365
msgstr ""
3366
3367
#: serverguide/C/web-servers.xml:1183(para)
3368
msgid ""
3369
"It is possible to run the system-wide instance and the private instances in "
3370
"parallel, as long as they do not use the same TCP ports."
3371
msgstr ""
3372
3373
#: serverguide/C/web-servers.xml:1187(title)
3374
msgid "Installing private instance support"
3375
msgstr "Installacion de la gestion de las instaàncias privadas"
3376
3377
#: serverguide/C/web-servers.xml:1188(para)
3378
msgid ""
3379
"You can install everything necessary to run private instances by entering "
3380
"the following command in the terminal prompt:"
3381
msgstr ""
3382
3383
#: serverguide/C/web-servers.xml:1191(command)
3384
msgid "sudo apt-get install tomcat6-user"
3385
msgstr "sudo apt-get install tomcat6-user"
3386
3387
#: serverguide/C/web-servers.xml:1195(title)
3388
msgid "Creating a private instance"
3389
msgstr "Creacion d'una instància privada"
3390
3391
#: serverguide/C/web-servers.xml:1196(para)
3392
msgid ""
3393
"You can create a private instance directory by entering the following "
3394
"command in the terminal prompt:"
3395
msgstr ""
3396
3397
#: serverguide/C/web-servers.xml:1199(command)
3398
msgid "tomcat6-instance-create my-instance"
3399
msgstr "tomcat6-instance-create my-instance"
3400
3401
#: serverguide/C/web-servers.xml:1201(para)
3402
msgid ""
3403
"This will create a new <filename>my-instance</filename> directory with all "
3404
"the necessary subdirectories and scripts. You can for example install your "
3405
"common libraries in the <filename>lib/</filename> subdirectory and deploy "
3406
"your webapps in the <filename>webapps/</filename> subdirectory. No webapps "
3407
"are deployed by default."
3408
msgstr ""
3409
3410
#: serverguide/C/web-servers.xml:1209(title)
3411
msgid "Configuring your private instance"
3412
msgstr "Configuracion de vòstra instància privada"
3413
3414
#: serverguide/C/web-servers.xml:1210(para)
3415
msgid ""
3416
"You will find the classic Tomcat configuration files for your private "
3417
"instance in the <filename>conf/</filename> subdirectory. You should for "
3418
"example certainly edit the <filename>conf/server.xml</filename> file to "
3419
"change the default ports used by your private Tomcat instance to avoid "
3420
"conflict with other instances that might be running."
3421
msgstr ""
3422
3423
#: serverguide/C/web-servers.xml:1218(title)
3424
msgid "Starting/stopping your private instance"
3425
msgstr ""
3426
3427
#: serverguide/C/web-servers.xml:1219(para)
3428
msgid ""
3429
"You can start your private instance by entering the following command in the "
3430
"terminal prompt (supposing your instance is located in the <filename>my-"
3431
"instance</filename> directory):"
3432
msgstr ""
3433
3434
#: serverguide/C/web-servers.xml:1223(command)
3435
msgid "my-instance/bin/startup.sh"
3436
msgstr "my-instance/bin/startup.sh"
3437
3438
#: serverguide/C/web-servers.xml:1225(para)
3439
msgid ""
3440
"You should check the <filename>logs/</filename> subdirectory for any error. "
3441
"If you have a <emphasis>java.net.BindException: Address already in "
3442
"use<null>:8080</emphasis> error, it means that the port you're using "
3443
"is already taken and that you should change it."
3444
msgstr ""
3445
3446
#: serverguide/C/web-servers.xml:1230(para)
3447
msgid ""
3448
"You can stop your instance by entering the following command in the terminal "
3449
"prompt (supposing your instance is located in the <filename>my-"
3450
"instance</filename> directory):"
3451
msgstr ""
3452
3453
#: serverguide/C/web-servers.xml:1234(command)
3454
msgid "my-instance/bin/shutdown.sh"
3455
msgstr "my-instance/bin/shutdown.sh"
3456
3457
#: serverguide/C/web-servers.xml:1243(para)
3458
msgid ""
3459
"See the <ulink url=\"http://tomcat.apache.org/\">Apache Tomcat</ulink> "
3460
"website for more information."
3461
msgstr ""
3462
3463
#: serverguide/C/web-servers.xml:1248(para)
3464
msgid ""
3465
"<ulink url=\"http://oreilly.com/catalog/9780596003180/\">Tomcat: The "
3466
"Definitive Guide</ulink> is a good resource for building web applications "
3467
"with Tomcat."
3468
msgstr ""
3469
3470
#: serverguide/C/web-servers.xml:1254(para)
3471
msgid ""
3472
"For additional books see the <ulink "
3473
"url=\"http://wiki.apache.org/tomcat/Tomcat/Books\">Tomcat Books</ulink> list "
3474
"page."
3475
msgstr ""
3476
3477
#: serverguide/C/web-servers.xml:1259(para)
3478
msgid ""
3479
"Also, see the<ulink "
3480
"url=\"https://help.ubuntu.com/community/ApacheTomcat5\">Ubuntu Wiki Apache "
3481
"Tomcat</ulink> page."
3482
msgstr ""
3483
3484
#: serverguide/C/vpn.xml:13(title)
3485
msgid "VPN"
3486
msgstr ""
3487
3488
#: serverguide/C/vpn.xml:15(para)
3489
msgid ""
3490
"A Virtual Private Network, or <emphasis>VPN</emphasis>, is an encrypted "
3491
"network connection between two or more networks. There are several ways to "
3492
"create a VPN using software as well as dedicated hardware appliances. This "
3493
"chapter will cover installing and configuring "
3494
"<application>OpenVPN</application> to create a VPN between two servers."
3495
msgstr ""
3496
3497
#: serverguide/C/vpn.xml:23(title)
3498
msgid "OpenVPN"
3499
msgstr ""
3500
3501
#: serverguide/C/vpn.xml:25(para)
3502
msgid ""
3503
"OpenVPN uses Public Key Infrastructure (PKI) to encrypt VPN traffic between "
3504
"nodes. A simple way of setting up a VPN with OpenVPN is to connect the "
3505
"clients through a bridge interface on the VPN server. This guide will assume "
3506
"that one VPN node, the server in this case, has a bridge interface "
3507
"configured. For more information on setting up a bridge see <xref "
3508
"linkend=\"bridging\"/>."
3509
msgstr ""
3510
3511
#: serverguide/C/vpn.xml:35(para)
3512
msgid "To install <application>openvpn</application> in a terminal enter:"
3513
msgstr ""
3514
3515
#: serverguide/C/vpn.xml:41(command) serverguide/C/vpn.xml:257(command)
3516
msgid "sudo apt-get install openvpn"
3517
msgstr ""
3518
3519
#: serverguide/C/vpn.xml:45(title)
3520
msgid "Server Certificates"
3521
msgstr ""
3522
3523
#: serverguide/C/vpn.xml:47(para)
3524
msgid ""
3525
"Now that the <application>openvpn</application> package is installed, the "
3526
"certificates for the VPN server need to be created."
3527
msgstr ""
3528
3529
#: serverguide/C/vpn.xml:52(para)
3530
msgid ""
3531
"First, copy the <filename>easy-rsa</filename> directory to "
3532
"<filename>/etc/openvpn</filename>. This will ensure that any changes to the "
3533
"scripts will not be lost when the package is updated. You will also need to "
3534
"adjust permissions in the <filename>easy-rsa</filename> directory to allow "
3535
"the current user permission to create files. From a terminal enter:"
3536
msgstr ""
3537
3538
#: serverguide/C/vpn.xml:59(command)
3539
msgid "sudo mkdir /etc/openvpn/easy-rsa/"
3540
msgstr ""
3541
3542
#: serverguide/C/vpn.xml:60(command)
3543
msgid ""
3544
"sudo cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-"
3545
"rsa/"
3546
msgstr ""
3547
3548
#: serverguide/C/vpn.xml:61(command)
3549
msgid "sudo chown -R $USER /etc/openvpn/easy-rsa/"
3550
msgstr ""
3551
3552
#: serverguide/C/vpn.xml:64(para)
3553
msgid ""
3554
"Next, edit <filename>/etc/openvpn/easy-rsa/vars</filename> adjusting the "
3555
"following to your environment:"
3556
msgstr ""
3557
3558
#: serverguide/C/vpn.xml:68(programlisting)
3559
#, no-wrap
3560
msgid ""
3561
"\n"
3562
"export KEY_COUNTRY=\"US\"\n"
3563
"export KEY_PROVINCE=\"NC\"\n"
3564
"export KEY_CITY=\"Winston-Salem\"\n"
3565
"export KEY_ORG=\"Example Company\"\n"
3566
"export KEY_EMAIL=\"steve@example.com\"\n"
3567
msgstr ""
3568
3569
#: serverguide/C/vpn.xml:76(para)
3570
msgid "Enter the following to create the server certificates:"
3571
msgstr ""
3572
3573
#: serverguide/C/vpn.xml:81(command) serverguide/C/vpn.xml:102(command)
3574
msgid "cd /etc/openvpn/easy-rsa/"
3575
msgstr ""
3576
3577
#: serverguide/C/vpn.xml:82(command) serverguide/C/vpn.xml:103(command)
3578
msgid "source vars"
3579
msgstr ""
3580
3581
#: serverguide/C/vpn.xml:83(command)
3582
msgid "./clean-all"
3583
msgstr ""
3584
3585
#: serverguide/C/vpn.xml:84(command)
3586
msgid "./build-dh"
3587
msgstr ""
3588
3589
#: serverguide/C/vpn.xml:85(command)
3590
msgid "./pkitool --initca"
3591
msgstr ""
3592
3593
#: serverguide/C/vpn.xml:86(command)
3594
msgid "./pkitool --server server"
3595
msgstr ""
3596
3597
#: serverguide/C/vpn.xml:87(command)
3598
msgid "cd keys"
3599
msgstr ""
3600
3601
#: serverguide/C/vpn.xml:88(command)
3602
msgid "openvpn --genkey --secret ta.key"
3603
msgstr ""
3604
3605
#: serverguide/C/vpn.xml:89(command)
3606
msgid "sudo cp server.crt server.key ca.crt dh1024.pem ta.key /etc/openvpn/"
3607
msgstr ""
3608
3609
#: serverguide/C/vpn.xml:94(title)
3610
msgid "Client Certificates"
3611
msgstr ""
3612
3613
#: serverguide/C/vpn.xml:96(para)
3614
msgid ""
3615
"The VPN client will also need a certificate to authenticate itself to the "
3616
"server. To create the certificate, enter the following in a terminal:"
3617
msgstr ""
3618
3619
#: serverguide/C/vpn.xml:104(command)
3620
msgid "./pkitool hostname"
3621
msgstr ""
3622
3623
#: serverguide/C/vpn.xml:108(para)
3624
msgid ""
3625
"Replace <emphasis>hostname</emphasis> with the actual hostname of the "
3626
"machine connecting to the VPN."
3627
msgstr ""
3628
3629
#: serverguide/C/vpn.xml:113(para)
3630
msgid "Copy the following files to the client:"
3631
msgstr ""
3632
3633
#: serverguide/C/vpn.xml:118(para)
3634
msgid "/etc/openvpn/ca.crt"
3635
msgstr ""
3636
3637
#: serverguide/C/vpn.xml:119(para)
3638
msgid "/etc/openvpn/easy-rsa/keys/hostname.crt"
3639
msgstr ""
3640
3641
#: serverguide/C/vpn.xml:120(para)
3642
msgid "/etc/openvpn/easy-rsa/keys/hostname.key"
3643
msgstr ""
3644
3645
#: serverguide/C/vpn.xml:121(para)
3646
msgid "/etc/openvpn/ta.key"
3647
msgstr ""
3648
3649
#: serverguide/C/vpn.xml:125(para)
3650
msgid ""
3651
"Remember to adjust the above file names for your client machine's "
3652
"<emphasis>hostname</emphasis>."
3653
msgstr ""
3654
3655
#: serverguide/C/vpn.xml:130(para)
3656
msgid ""
3657
"It is best to use a secure method to copy the certificate and key files. The "
3658
"<application>scp</application> utility is a good choice, but copying the "
3659
"files to removable media then to the client, also works well."
3660
msgstr ""
3661
3662
#: serverguide/C/vpn.xml:141(title) serverguide/C/vcs.xml:107(title)
3663
msgid "Server Configuration"
3664
msgstr ""
3665
3666
#: serverguide/C/vpn.xml:143(para)
3667
msgid ""
3668
"Now configure the <application>openvpn</application> server by creating "
3669
"<filename>/etc/openvpn/server.conf</filename> from the example file. In a "
3670
"terminal enter:"
3671
msgstr ""
3672
3673
#: serverguide/C/vpn.xml:149(command)
3674
msgid ""
3675
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz "
3676
"/etc/openvpn/"
3677
msgstr ""
3678
3679
#: serverguide/C/vpn.xml:150(command)
3680
msgid "sudo gzip -d /etc/openvpn/server.conf.gz"
3681
msgstr ""
3682
3683
#: serverguide/C/vpn.xml:153(para)
3684
msgid ""
3685
"Edit <filename>/etc/openvpn/server.conf</filename> changing the following "
3686
"options to:"
3687
msgstr ""
3688
3689
#: serverguide/C/vpn.xml:157(programlisting)
3690
#, no-wrap
3691
msgid ""
3692
"\n"
3693
"local 172.18.100.101\n"
3694
"dev tap0\n"
3695
"up \"/etc/openvpn/up.sh br0\"\n"
3696
"down \"/etc/openvpn/down.sh br0\"\n"
3697
";server 10.8.0.0 255.255.255.0\n"
3698
"server-bridge 172.18.100.101 255.255.255.0 172.18.100.105 172.18.100.200\n"
3699
"push \"route 172.18.100.1 255.255.255.0\"\n"
3700
"push \"dhcp-option DNS 172.18.100.20\"\n"
3701
"push \"dhcp-option DOMAIN example.com\"\n"
3702
"tls-auth ta.key 0 # This file is secret\n"
3703
"user nobody\n"
3704
"group nogroup\n"
3705
msgstr ""
3706
3707
#: serverguide/C/vpn.xml:174(para)
3708
msgid ""
3709
"<emphasis>local</emphasis>: is the IP address of the bridge interface."
3710
msgstr ""
3711
3712
#: serverguide/C/vpn.xml:179(para)
3713
msgid ""
3714
"<emphasis>server-bridge</emphasis>: needed when the configuration uses "
3715
"bridging. The <emphasis>172.18.100.101 255.255.255.0</emphasis> portion is "
3716
"the bridge interface and mask. The IP range <emphasis>172.18.100.105 "
3717
"172.18.100.200</emphasis> is the range of IP addresses that will be assigned "
3718
"to clients."
3719
msgstr ""
3720
3721
#: serverguide/C/vpn.xml:186(para)
3722
msgid ""
3723
"<emphasis>push</emphasis>: are directives to add networking options for "
3724
"clients."
3725
msgstr ""
3726
3727
#: serverguide/C/vpn.xml:191(para)
3728
msgid ""
3729
"<emphasis>user and group</emphasis>: configure which user and group the "
3730
"<application>openvpn</application> daemon executes as."
3731
msgstr ""
3732
3733
#: serverguide/C/vpn.xml:198(para)
3734
msgid ""
3735
"Replace all IP addresses and domain names above with those of your network."
3736
msgstr ""
3737
3738
#: serverguide/C/vpn.xml:203(para)
3739
msgid ""
3740
"Next, create a couple of helper scripts to add the <emphasis>tap</emphasis> "
3741
"interface to the bridge. Create <filename>/etc/openvpn/up.sh</filename>:"
3742
msgstr ""
3743
3744
#: serverguide/C/vpn.xml:207(programlisting)
3745
#, no-wrap
3746
msgid ""
3747
"\n"
3748
"#!/bin/sh\n"
3749
"\n"
3750
"BR=$1\n"
3751
"DEV=$2\n"
3752
"MTU=$3\n"
3753
"/sbin/ifconfig $DEV mtu $MTU promisc up\n"
3754
"/usr/sbin/brctl addif $BR $DEV\n"
3755
msgstr ""
3756
3757
#: serverguide/C/vpn.xml:217(para)
3758
msgid "And <filename>/etc/openvpn/down.sh</filename>:"
3759
msgstr ""
3760
3761
#: serverguide/C/vpn.xml:221(programlisting)
3762
#, no-wrap
3763
msgid ""
3764
"\n"
3765
"#!/bin/sh\n"
3766
"\n"
3767
"BR=$1\n"
3768
"DEV=$2\n"
3769
"\n"
3770
"/usr/sbin/brctl delif $BR $DEV\n"
3771
"/sbin/ifconfig $DEV down\n"
3772
msgstr ""
3773
3774
#: serverguide/C/vpn.xml:231(para)
3775
msgid "Then make them executable:"
3776
msgstr ""
3777
3778
#: serverguide/C/vpn.xml:236(command)
3779
msgid "sudo chmod 755 /etc/openvpn/down.sh"
3780
msgstr ""
3781
3782
#: serverguide/C/vpn.xml:237(command)
3783
msgid "sudo chmod 755 /etc/openvpn/up.sh"
3784
msgstr ""
3785
3786
#: serverguide/C/vpn.xml:240(para)
3787
msgid ""
3788
"After configuring the server, restart <application>openvpn</application> by "
3789
"entering:"
3790
msgstr ""
3791
3792
#: serverguide/C/vpn.xml:245(command) serverguide/C/vpn.xml:293(command)
3793
msgid "sudo /etc/init.d/openvpn restart"
3794
msgstr ""
3795
3796
#: serverguide/C/vpn.xml:250(title)
3797
msgid "Client Configuration"
3798
msgstr ""
3799
3800
#: serverguide/C/vpn.xml:252(para)
3801
msgid "First, install <application>openvpn</application> on the client:"
3802
msgstr ""
3803
3804
#: serverguide/C/vpn.xml:260(para)
3805
msgid ""
3806
"Then with the server configured and the client certificates copied to the "
3807
"<filename>/etc/openvpn/</filename> directory, create a client configuration "
3808
"file by copying the example. In a terminal on the client machine enter:"
3809
msgstr ""
3810
3811
#: serverguide/C/vpn.xml:266(command)
3812
msgid ""
3813
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf "
3814
"/etc/openvpn"
3815
msgstr ""
3816
3817
#: serverguide/C/vpn.xml:269(para)
3818
msgid ""
3819
"Now edit <filename>/etc/openvpn/client.conf</filename> changing the "
3820
"following options:"
3821
msgstr ""
3822
3823
#: serverguide/C/vpn.xml:273(programlisting)
3824
#, no-wrap
3825
msgid ""
3826
"\n"
3827
"dev tap\n"
3828
"remote vpn.example.com 1194\n"
3829
"cert hostname.crt\n"
3830
"key hostname.key\n"
3831
"tls-auth ta.key 1\n"
3832
msgstr ""
3833
3834
#: serverguide/C/vpn.xml:282(para)
3835
msgid ""
3836
"Replace <emphasis>vpn.example.com</emphasis> with the hostname of your VPN "
3837
"server, and <emphasis>hostname.*</emphasis> with the actual certificate and "
3838
"key filenames."
3839
msgstr ""
3840
3841
#: serverguide/C/vpn.xml:288(para)
3842
msgid "Finally, restart <application>openvpn</application>:"
3843
msgstr ""
3844
3845
#: serverguide/C/vpn.xml:296(para)
3846
msgid "You should now be able to connect to the remote LAN through the VPN."
3847
msgstr ""
3848
3849
#: serverguide/C/vpn.xml:307(para)
3850
msgid ""
3851
"See the <ulink url=\"http://openvpn.net/\">OpenVPN</ulink> website for "
3852
"additional information."
3853
msgstr ""
3854
3855
#: serverguide/C/vpn.xml:312(para)
3856
msgid ""
3857
"Also, Pakt's <ulink url=\"http://www.packtpub.com/openvpn/book\">OpenVPN: "
3858
"Building and Integrating Virtual Private Networks</ulink> is a good resource."
3859
msgstr ""
3860
3861
#: serverguide/C/vpn.xml:318(para)
3862
msgid ""
3863
"Another source of further information is the <ulink "
3864
"url=\"https://help.ubuntu.com/community/OpenVPN\">Ubuntu Wiki "
3865
"OpenVPN</ulink> page."
3866
msgstr ""
3867
3868
#: serverguide/C/virtualization.xml:13(title)
3869
msgid "Virtualization"
3870
msgstr "Virtualizacion"
3871
3872
#: serverguide/C/virtualization.xml:14(para)
3873
msgid ""
3874
"Virtualization is being adopted in many different environments and "
3875
"situations. If you are a developer, virtualization can provide you with a "
3876
"contained environment where you can safely do almost any sort of development "
3877
"safe from messing up your main working environment. If you are a systems "
3878
"administrator, you can use virtualization to more easily separate your "
3879
"services and move them around based on demand."
3880
msgstr ""
3881
3882
#: serverguide/C/virtualization.xml:20(para)
3883
msgid ""
3884
"The default virtualization technology supported in Ubuntu is "
3885
"<application>KVM</application>, a technology that takes advantage of "
3886
"virtualization extensions built into Intel and AMD hardware. For hardware "
3887
"without virtualization extensions <application>Xen</application> and "
3888
"<application>Qemu</application> are popular solutions."
3889
msgstr ""
3890
3891
#: serverguide/C/virtualization.xml:27(title)
3892
msgid "libvirt"
3893
msgstr "libvirt"
3894
3895
#: serverguide/C/virtualization.xml:28(para)
3896
msgid ""
3897
"The <application>libvirt</application> library is used to interface with "
3898
"different virtualization technologies. Before getting started with "
3899
"<application>libvirt</application> it is best to make sure your hardware "
3900
"supports the necessary virtualization extensions for "
3901
"<application>KVM</application>. Enter the following from a terminal prompt:"
3902
msgstr ""
3903
3904
#: serverguide/C/virtualization.xml:35(command)
3905
msgid "kvm-ok"
3906
msgstr ""
3907
3908
#: serverguide/C/virtualization.xml:37(para)
3909
msgid ""
3910
"A message will be printed informing you if your CPU "
3911
"<emphasis>does</emphasis> or <emphasis>does not</emphasis> support hardware "
3912
"virtualization."
3913
msgstr ""
3914
3915
#: serverguide/C/virtualization.xml:41(para)
3916
msgid ""
3917
"On most computer whose processor supports virtualization, it is necessary to "
3918
"activate an option in the BIOS to enable it."
3919
msgstr ""
3920
3921
#: serverguide/C/virtualization.xml:47(title)
3922
msgid "Virtual Networking"
3923
msgstr "Virtualizacion de la ret"
3924
3925
#: serverguide/C/virtualization.xml:49(para)
3926
msgid ""
3927
"There are a few different ways to allow a virtual machine access to the "
3928
"external network. The default virtual network configuration is "
3929
"<emphasis>usermode</emphasis> networking, which uses the SLIRP protocol and "
3930
"traffic is NATed through the host interface to the outside network."
3931
msgstr ""
3932
3933
#: serverguide/C/virtualization.xml:54(para)
3934
msgid ""
3935
"To enable external hosts to directly access services on virtual machines a "
3936
"<emphasis>bridge</emphasis> needs to be configured. This allows the virtual "
3937
"interfaces to connect to the outside network through the physical interface, "
3938
"making them appear as normal hosts to the rest of the network. For "
3939
"information on setting up a bridge see <xref linkend=\"bridging\"/>."
3940
msgstr ""
3941
3942
#: serverguide/C/virtualization.xml:63(para)
3943
msgid "To install the necessary packages, from a terminal prompt enter:"
3944
msgstr "Per installar los paquets necessaris, picatz dins un terminal :"
3945
3946
#: serverguide/C/virtualization.xml:67(command)
3947
msgid "sudo apt-get install kvm libvirt-bin"
3948
msgstr "sudo apt-get install kvm libvirt-bin"
3949
3950
#: serverguide/C/virtualization.xml:69(para)
3951
msgid ""
3952
"After installing <application>libvirt-bin</application>, the user used to "
3953
"manage virtual machines will need to be added to the "
3954
"<emphasis>libvirtd</emphasis> group. Doing so will grant the user access to "
3955
"the advanced networking options."
3956
msgstr ""
3957
3958
#: serverguide/C/virtualization.xml:73(para)
3959
msgid "In a terminal enter:"
3960
msgstr "Dins un terminal picatz :"
3961
3962
#: serverguide/C/virtualization.xml:77(command)
3963
msgid "sudo adduser $USER libvirtd"
3964
msgstr "sudo adduser $USER libvirtd"
3965
3966
#: serverguide/C/virtualization.xml:80(para)
3967
msgid ""
3968
"If the user chosen is the current user, you will need to log out and back in "
3969
"for the new group membership to take effect."
3970
msgstr ""
3971
3972
#: serverguide/C/virtualization.xml:84(para)
3973
msgid ""
3974
"You are now ready to install a <emphasis>Guest</emphasis> operating system. "
3975
"Installing a virtual machine follows the same process as installing the "
3976
"operating system directly on the hardware. You either need a way to automate "
3977
"the installation, or a keyboard and monitor will need to be attached to the "
3978
"physical machine."
3979
msgstr ""
3980
3981
#: serverguide/C/virtualization.xml:89(para)
3982
msgid ""
3983
"In the case of virtual machines a Graphical User Interface (GUI) is "
3984
"analogous to using a physical keyboard and mouse. Instead of installing a "
3985
"GUI the <application>virt-viewer</application> application can be used to "
3986
"connect to a virtual machine's console using <application>VNC</application>. "
3987
"See <xref linkend=\"libvirt-virt-viewer\"/> for more information."
3988
msgstr ""
3989
3990
#: serverguide/C/virtualization.xml:94(para)
3991
msgid ""
3992
"There are several ways to automate the Ubuntu installation process, for "
3993
"example using preseeds, kickstart, etc. Refer to the <ulink "
3994
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
3995
"Installation Guide</ulink> for details."
3996
msgstr ""
3997
3998
#: serverguide/C/virtualization.xml:98(para)
3999
msgid ""
4000
"Yet another way to install an Ubuntu virtual machine is to use "
4001
"<application>ubuntu-vm-builder</application>. <application>ubuntu-vm-"
4002
"builder</application> allows you to setup advanced partitions, execute "
4003
"custom post-install scripts, etc. For details see <xref linkend=\"jeos-and-"
4004
"vmbuilder\"/>"
4005
msgstr ""
4006
4007
#: serverguide/C/virtualization.xml:104(title)
4008
msgid "virt-install"
4009
msgstr "virt-install"
4010
4011
#: serverguide/C/virtualization.xml:105(para)
4012
msgid ""
4013
"<application>virt-install</application> is part of the <application>python-"
4014
"virtinst</application> package. To install it, from a terminal prompt enter:"
4015
msgstr ""
4016
4017
#: serverguide/C/virtualization.xml:109(command)
4018
msgid "sudo apt-get install python-virtinst"
4019
msgstr "sudo apt-get install python-virtinst"
4020
4021
#: serverguide/C/virtualization.xml:111(para)
4022
msgid ""
4023
"There are several options available when using <application>virt-"
4024
"install</application>. For example:"
4025
msgstr ""
4026
4027
#: serverguide/C/virtualization.xml:115(command)
4028
msgid ""
4029
"sudo virt-install -n web_devel -r 256 -f web_devel.img \\ -s 4 -c jeos.iso --"
4030
"accelerate \\ --connect=qemu:///system --vnc \\ --noautoconsole -v"
4031
msgstr ""
4032
"sudo virt-install -n web_devel -r 256 -f web_devel.img \\ -s 4 -c jeos.iso --"
4033
"accelerate \\ --connect=qemu:///system --vnc \\ --noautoconsole -v"
4034
4035
#: serverguide/C/virtualization.xml:122(para)
4036
msgid ""
4037
"<emphasis>-n web_devel:</emphasis> the name of the new virtual machine will "
4038
"be <emphasis>web_devel</emphasis> in this example."
4039
msgstr ""
4040
4041
#: serverguide/C/virtualization.xml:127(para)
4042
msgid ""
4043
"<emphasis>-r 256:</emphasis> specifies the amount of memory the virtual "
4044
"machine will use."
4045
msgstr ""
4046
4047
#: serverguide/C/virtualization.xml:132(para)
4048
msgid ""
4049
"<emphasis>-f web_devel.img:</emphasis> indicates the path to the virtual "
4050
"disk which can be a file, partition, or logical volume. In this example a "
4051
"file named <filename>web_devel.img</filename>."
4052
msgstr ""
4053
4054
#: serverguide/C/virtualization.xml:138(para)
4055
msgid "<emphasis>-s 4:</emphasis> the size of the virtual disk."
4056
msgstr "<emphasis>-s 4 :</emphasis> la talha del disc virtual."
4057
4058
#: serverguide/C/virtualization.xml:143(para)
4059
msgid ""
4060
"<emphasis>-c jeos.iso:</emphasis> file to be used as a virtual CDROM. The "
4061
"file can be either an ISO file or the path to the host's CDROM device."
4062
msgstr ""
4063
4064
#: serverguide/C/virtualization.xml:149(para)
4065
msgid ""
4066
"<emphasis>--accelerate:</emphasis> enables the kernel's acceleration "
4067
"technologies."
4068
msgstr ""
4069
4070
#: serverguide/C/virtualization.xml:154(para)
4071
msgid ""
4072
"<emphasis>--vnc:</emphasis> exports the guest's virtual console using VNC."
4073
msgstr ""
4074
4075
#: serverguide/C/virtualization.xml:159(para)
4076
msgid ""
4077
"<emphasis>--noautoconsole:</emphasis> will not automatically connect to the "
4078
"virtual machine's console."
4079
msgstr ""
4080
4081
#: serverguide/C/virtualization.xml:164(para)
4082
msgid "<emphasis>-v:</emphasis> creates a fully virtualized guest."
4083
msgstr ""
4084
4085
#: serverguide/C/virtualization.xml:169(para)
4086
msgid ""
4087
"After launching <application>virt-install</application> you can connect to "
4088
"the virtual machine's console either locally using a GUI or with the "
4089
"<application>virt-viewer</application> utility."
4090
msgstr ""
4091
4092
#: serverguide/C/virtualization.xml:175(title)
4093
msgid "virt-clone"
4094
msgstr "virt-clone"
4095
4096
#: serverguide/C/virtualization.xml:176(para)
4097
msgid ""
4098
"The <application>virt-clone</application> application can be used to copy "
4099
"one virtual machine to another. For example:"
4100
msgstr ""
4101
4102
#: serverguide/C/virtualization.xml:180(command)
4103
msgid ""
4104
"sudo virt-clone -o web_devel -n database_devel -f "
4105
"/path/to/database_devel.img --connect=qemu:///system"
4106
msgstr ""
4107
4108
#: serverguide/C/virtualization.xml:184(para)
4109
msgid "<emphasis>-o:</emphasis> original virtual machine."
4110
msgstr ""
4111
4112
#: serverguide/C/virtualization.xml:189(para)
4113
msgid "<emphasis>-n:</emphasis> name of the new virtual machine."
4114
msgstr ""
4115
4116
#: serverguide/C/virtualization.xml:194(para)
4117
msgid ""
4118
"<emphasis>-f:</emphasis> path to the file, logical volume, or partition to "
4119
"be used by the new virtual machine."
4120
msgstr ""
4121
4122
#: serverguide/C/virtualization.xml:199(para)
4123
msgid ""
4124
"<emphasis>--connect:</emphasis> specifies which hypervisor to connect to."
4125
msgstr ""
4126
4127
#: serverguide/C/virtualization.xml:204(para)
4128
msgid ""
4129
"Also, use <emphasis>-d</emphasis> or <emphasis>--debug</emphasis> option to "
4130
"help troubleshoot problems with <application>virt-clone</application>."
4131
msgstr ""
4132
4133
#: serverguide/C/virtualization.xml:209(para)
4134
msgid ""
4135
"Replace <emphasis>web_devel</emphasis> and "
4136
"<emphasis>database_devel</emphasis> with appropriate virtual machine names."
4137
msgstr ""
4138
4139
#: serverguide/C/virtualization.xml:215(title)
4140
msgid "Virtual Machine Management"
4141
msgstr ""
4142
4143
#: serverguide/C/virtualization.xml:217(title)
4144
msgid "virsh"
4145
msgstr "virsh"
4146
4147
#: serverguide/C/virtualization.xml:218(para)
4148
msgid ""
4149
"There are several utilities available to manage virtual machines and "
4150
"<application>libvirt</application>. The <application>virsh</application> "
4151
"utility can be used from the command line. Some examples:"
4152
msgstr ""
4153
4154
#: serverguide/C/virtualization.xml:224(para)
4155
msgid "To list running virtual machines:"
4156
msgstr ""
4157
4158
#: serverguide/C/virtualization.xml:228(command)
4159
msgid "virsh -c qemu:///system list"
4160
msgstr "virsh -c qemu:///system list"
4161
4162
#: serverguide/C/virtualization.xml:232(para)
4163
msgid "To start a virtual machine:"
4164
msgstr "Per amodar una maquina virtuala :"
4165
4166
#: serverguide/C/virtualization.xml:236(command)
4167
msgid "virsh -c qemu:///system start web_devel"
4168
msgstr "virsh -c qemu:///system start web_devel"
4169
4170
#: serverguide/C/virtualization.xml:240(para)
4171
msgid "Similarly, to start a virtual machine at boot:"
4172
msgstr ""
4173
4174
#: serverguide/C/virtualization.xml:244(command)
4175
msgid "virsh -c qemu:///system autostart web_devel"
4176
msgstr "virsh -c qemu:///system autostart web_devel"
4177
4178
#: serverguide/C/virtualization.xml:248(para)
4179
msgid "Reboot a virtual machine with:"
4180
msgstr ""
4181
4182
#: serverguide/C/virtualization.xml:252(command)
4183
msgid "virsh -c qemu:///system reboot web_devel"
4184
msgstr "virsh -c qemu:///system reboot web_devel"
4185
4186
#: serverguide/C/virtualization.xml:256(para)
4187
msgid ""
4188
"The <emphasis>state</emphasis> of virtual machines can be saved to a file in "
4189
"order to be restored later. The following will save the virtual machine "
4190
"state into a file named according to the date:"
4191
msgstr ""
4192
4193
#: serverguide/C/virtualization.xml:261(command)
4194
msgid "virsh -c qemu:///system save web_devel web_devel-022708.state"
4195
msgstr "virsh -c qemu:///system save web_devel web_devel-022708.state"
4196
4197
#: serverguide/C/virtualization.xml:263(para)
4198
msgid "Once saved the virtual machine will no longer be running."
4199
msgstr ""
4200
4201
#: serverguide/C/virtualization.xml:268(para)
4202
msgid "A saved virtual machine can be restored using:"
4203
msgstr ""
4204
4205
#: serverguide/C/virtualization.xml:272(command)
4206
msgid "virsh -c qemu:///system restore web_devel-022708.state"
4207
msgstr ""
4208
4209
#: serverguide/C/virtualization.xml:276(para)
4210
msgid "To shutdown a virtual machine do:"
4211
msgstr "Per arrestar una maquina virtuala :"
4212
4213
#: serverguide/C/virtualization.xml:280(command)
4214
msgid "virsh -c qemu:///system shutdown web_devel"
4215
msgstr "virsh -c qemu:///system shutdown web_devel"
4216
4217
#: serverguide/C/virtualization.xml:284(para)
4218
msgid "A CDROM device can be mounted in a virtual machine by entering:"
4219
msgstr ""
4220
4221
#: serverguide/C/virtualization.xml:288(command)
4222
msgid "virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"
4223
msgstr ""
4224
"virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"
4225
4226
#: serverguide/C/virtualization.xml:293(para)
4227
msgid ""
4228
"In the above examples replace <emphasis>web_devel</emphasis> with the "
4229
"appropriate virtual machine name, and <filename>web_devel-"
4230
"022708.state</filename> with a descriptive file name."
4231
msgstr ""
4232
4233
#: serverguide/C/virtualization.xml:300(title)
4234
msgid "Virtual Machine Manager"
4235
msgstr "Gestionari de maquina virtuala"
4236
4237
#: serverguide/C/virtualization.xml:301(para)
4238
msgid ""
4239
"The <application>virt-manager</application> package contains a graphical "
4240
"utility to manage local and remote virtual machines. To install virt-manager "
4241
"enter:"
4242
msgstr ""
4243
4244
#: serverguide/C/virtualization.xml:306(command)
4245
msgid "sudo apt-get install virt-manager"
4246
msgstr "sudo apt-get install virt-manager"
4247
4248
#: serverguide/C/virtualization.xml:308(para)
4249
msgid ""
4250
"Since <application>virt-manager</application> requires a Graphical User "
4251
"Interface (GUI) environment it is recommended to be installed on a "
4252
"workstation or test machine instead of a production server. To connect to "
4253
"the local <application>libvirt</application> service enter:"
4254
msgstr ""
4255
4256
#: serverguide/C/virtualization.xml:314(command)
4257
msgid "virt-manager -c qemu:///system"
4258
msgstr "virt-manager -c qemu:///system"
4259
4260
#: serverguide/C/virtualization.xml:316(para)
4261
msgid ""
4262
"You can connect to the <application>libvirt</application> service running on "
4263
"another host by entering the following in a terminal prompt:"
4264
msgstr ""
4265
4266
#: serverguide/C/virtualization.xml:320(command)
4267
msgid "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"
4268
msgstr "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"
4269
4270
#: serverguide/C/virtualization.xml:323(para)
4271
msgid ""
4272
"The above example assumes that <application>SSH</application> connectivity "
4273
"between the management system and virtnode1.mydomain.com has already been "
4274
"configured, and uses SSH keys for authentication. SSH "
4275
"<emphasis>keys</emphasis> are needed because "
4276
"<application>libvirt</application> sends the password prompt to another "
4277
"process. For details on configuring <application>SSH</application> see <xref "
4278
"linkend=\"openssh-server\"/>"
4279
msgstr ""
4280
4281
#: serverguide/C/virtualization.xml:333(title)
4282
msgid "Virtual Machine Viewer"
4283
msgstr "Afichador de maquina virtuala"
4284
4285
#: serverguide/C/virtualization.xml:334(para)
4286
msgid ""
4287
"The <application>virt-viewer</application> application allows you to connect "
4288
"to a virtual machine's console. <application>virt-viewer</application> does "
4289
"require a Graphical User Interface (GUI) to interface with the virtual "
4290
"machine."
4291
msgstr ""
4292
4293
#: serverguide/C/virtualization.xml:338(para)
4294
msgid ""
4295
"To install <application>virt-viewer</application> from a terminal enter:"
4296
msgstr ""
4297
4298
#: serverguide/C/virtualization.xml:342(command)
4299
msgid "sudo apt-get install virt-viewer"
4300
msgstr "sudo apt-get install virt-viewer"
4301
4302
#: serverguide/C/virtualization.xml:344(para)
4303
msgid ""
4304
"Once a virtual machine is installed and running you can connect to the "
4305
"virtual machine's console by using:"
4306
msgstr ""
4307
4308
#: serverguide/C/virtualization.xml:348(command)
4309
msgid "virt-viewer -c qemu:///system web_devel"
4310
msgstr "virt-viewer -c qemu:///system web_devel"
4311
4312
#: serverguide/C/virtualization.xml:350(para)
4313
msgid ""
4314
"Similar to <application>virt-manager</application>, <application>virt-"
4315
"viewer</application> can connect to a remote host using "
4316
"<emphasis>SSH</emphasis> with key authentication, as well:"
4317
msgstr ""
4318
4319
#: serverguide/C/virtualization.xml:355(command)
4320
msgid "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"
4321
msgstr "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"
4322
4323
#: serverguide/C/virtualization.xml:357(para)
4324
msgid ""
4325
"Be sure to replace <emphasis role=\"italic\">web_devel</emphasis> with the "
4326
"appropriate virtual machine name."
4327
msgstr ""
4328
4329
#: serverguide/C/virtualization.xml:360(para)
4330
msgid ""
4331
"If configured to use a <emphasis>bridged</emphasis> network interface you "
4332
"can also setup <application>SSH</application> access to the virtual machine. "
4333
"See <xref linkend=\"openssh-server\"/> and <xref linkend=\"bridging\"/> for "
4334
"more details."
4335
msgstr ""
4336
4337
#: serverguide/C/virtualization.xml:369(para)
4338
msgid ""
4339
"See the <ulink url=\"http://kvm.qumranet.com/kvmwiki\">KVM</ulink> home page "
4340
"for more details."
4341
msgstr ""
4342
4343
#: serverguide/C/virtualization.xml:374(para)
4344
msgid ""
4345
"For more information on <application>libvirt</application> see the <ulink "
4346
"url=\"http://libvirt.org/\">libvirt home page</ulink>"
4347
msgstr ""
4348
4349
#: serverguide/C/virtualization.xml:379(para)
4350
msgid ""
4351
"The <ulink url=\"http://virt-manager.et.redhat.com/\">Virtual Machine "
4352
"Manager</ulink> site has more information on <application>virt-"
4353
"manager</application> development."
4354
msgstr ""
4355
4356
#: serverguide/C/virtualization.xml:385(para)
4357
msgid ""
4358
"Also, stop by the <emphasis>#ubuntu-virt</emphasis> IRC channel on <ulink "
4359
"url=\"http://freenode.net/\">freenode</ulink> to discuss virtualization "
4360
"technology in Ubuntu."
4361
msgstr ""
4362
4363
#: serverguide/C/virtualization.xml:391(para)
4364
msgid ""
4365
"Another good resource is the <ulink "
4366
"url=\"https://help.ubuntu.com/community/KVM\">Ubuntu Wiki KVM</ulink> page."
4367
msgstr ""
4368
4369
#: serverguide/C/virtualization.xml:399(title)
4370
msgid "JeOS and vmbuilder"
4371
msgstr "JeOS e vmbuilder"
4372
4373
#: serverguide/C/virtualization.xml:405(title)
4374
msgid "What is JeOS"
4375
msgstr "Qu'es aquò JeOS ?"
4376
4377
#: serverguide/C/virtualization.xml:407(para)
4378
msgid ""
4379
"Ubuntu <emphasis>JeOS</emphasis> (pronounced \"Juice\") is an efficient "
4380
"variant of the Ubuntu Server operating system, configured specifically for "
4381
"virtual appliances. No longer available as a CD-ROM ISO for download, but "
4382
"only as an option either:"
4383
msgstr ""
4384
4385
#: serverguide/C/virtualization.xml:414(para)
4386
msgid ""
4387
"While installing from the Server Edition ISO (pressing "
4388
"<emphasis>F4</emphasis> on the first screen will allow you to pick \"Minimal "
4389
"installation\", which is the package selection equivalent to JeOS)."
4390
msgstr ""
4391
4392
#: serverguide/C/virtualization.xml:420(para)
4393
msgid "Or to be built using Ubuntu's vmbuilder, which is described here."
4394
msgstr ""
4395
4396
#: serverguide/C/virtualization.xml:426(para)
4397
msgid ""
4398
"JeOS is a specialized installation of Ubuntu Server Edition with a tuned "
4399
"kernel that only contains the base elements needed to run within a "
4400
"virtualized environment."
4401
msgstr ""
4402
4403
#: serverguide/C/virtualization.xml:431(para)
4404
msgid ""
4405
"Ubuntu JeOS has been tuned to take advantage of key performance technologies "
4406
"in the latest virtualization products from VMware. This combination of "
4407
"reduced size and optimized performance ensures that Ubuntu JeOS Edition "
4408
"delivers a highly efficient use of server resources in large virtual "
4409
"deployments."
4410
msgstr ""
4411
4412
#: serverguide/C/virtualization.xml:437(para)
4413
msgid ""
4414
"Without unnecessary drivers, and only the minimal required packages, ISVs "
4415
"can configure their supporting OS exactly as they require. They have the "
4416
"peace of mind that updates, whether for security or enhancement reasons, "
4417
"will be limited to the bare minimum of what is required in their specific "
4418
"environment. In turn, users deploying virtual appliances built on top of "
4419
"JeOS will have to go through fewer updates and therefore less maintenance "
4420
"than they would have had to with a standard full installation of a server."
4421
msgstr ""
4422
4423
#: serverguide/C/virtualization.xml:446(title)
4424
msgid "What is vmbuilder"
4425
msgstr "Qu'es aquò vmbuilder ?"
4426
4427
#: serverguide/C/virtualization.xml:448(para)
4428
msgid ""
4429
"With vmbuilder, there is no need to download a JeOS ISO anymore. vmbuilder "
4430
"will fetch the various package and build a virtual machine tailored for your "
4431
"needs in about a minute. vmbuilder is a script that automates the process of "
4432
"creating a ready to use Linux based VM. The currently supported hypervisors "
4433
"are KVM and Xen."
4434
msgstr ""
4435
4436
#: serverguide/C/virtualization.xml:454(para)
4437
msgid ""
4438
"You can pass command line options to add extra packages, remove packages, "
4439
"choose which version of Ubuntu, which mirror etc. On recent hardware with "
4440
"plenty of RAM, tmpdir in <filename>/dev/shm</filename> or using a tmpfs, and "
4441
"a local mirror, you can bootstrap a VM in less than a minute."
4442
msgstr ""
4443
4444
#: serverguide/C/virtualization.xml:460(para)
4445
msgid ""
4446
"First introduced as a shell script in Ubuntu 8.04 LTS, <application>ubuntu-"
4447
"vm-builder</application> started with little emphasis as a hack to help "
4448
"developers test their new code in a virtual machine without having to "
4449
"restart from scratch each time. As a few Ubuntu administrators started to "
4450
"notice this script, a few of them went on improving it and adapting it for "
4451
"so many use case that Soren Hansen (the author of the script and Ubuntu "
4452
"virtualization specialist, not the golf player) decided to rewrite it from "
4453
"scratch for Intrepid as a python script with a few new design goals:"
4454
msgstr ""
4455
4456
#: serverguide/C/virtualization.xml:470(para)
4457
msgid "Develop it so that it can be reused by other distributions."
4458
msgstr ""
4459
4460
#: serverguide/C/virtualization.xml:475(para)
4461
msgid ""
4462
"Use a plugin mechanisms for all virtualization interactions so that others "
4463
"can easily add logic for other virtualization environments."
4464
msgstr ""
4465
4466
#: serverguide/C/virtualization.xml:480(para)
4467
msgid ""
4468
"Provide an easy to maintain web interface as an option to the command line "
4469
"interface."
4470
msgstr ""
4471
4472
#: serverguide/C/virtualization.xml:486(para)
4473
msgid "But the general principles and commands remain the same."
4474
msgstr ""
4475
4476
#: serverguide/C/virtualization.xml:493(title)
4477
msgid "Initial Setup"
4478
msgstr "Configuracion iniciala"
4479
4480
#: serverguide/C/virtualization.xml:495(para)
4481
msgid ""
4482
"It is assumed that you have installed and configured "
4483
"<application>libvirt</application> and <application>KVM</application> "
4484
"locally on the machine you are using. For details on how to perform this, "
4485
"please refer to:"
4486
msgstr ""
4487
4488
#: serverguide/C/virtualization.xml:507(para)
4489
msgid ""
4490
"The <ulink url=\"https://help.ubuntu.com/community/KVM\">KVM</ulink> Wiki "
4491
"page."
4492
msgstr ""
4493
"La pagina Wiki de <ulink "
4494
"url=\"https://help.ubuntu.com/community/KVM\">KVM</ulink>"
4495
4496
#: serverguide/C/virtualization.xml:513(para)
4497
msgid ""
4498
"We also assume that you know how to use a text based text editor such as "
4499
"nano or vi. If you have not used any of them before, you can get an overview "
4500
"of the various text editors available by reading the <ulink "
4501
"url=\"https://help.ubuntu.com/community/PowerUsersTextEditors\">PowerUsersTex"
4502
"tEditors</ulink> page. This tutorial has been done on KVM, but the general "
4503
"principle should remain on other virtualization technologies."
4504
msgstr ""
4505
4506
#: serverguide/C/virtualization.xml:521(title)
4507
msgid "Install vmbuilder"
4508
msgstr "Installatz vmbuilder"
4509
4510
#: serverguide/C/virtualization.xml:523(para)
4511
msgid ""
4512
"The name of the package that we need to install is <application>python-vm-"
4513
"builder</application>. In a terminal prompt enter:"
4514
msgstr ""
4515
4516
#: serverguide/C/virtualization.xml:528(command)
4517
msgid "sudo apt-get install python-vm-builder"
4518
msgstr "sudo apt-get install python-vm-builder"
4519
4520
#: serverguide/C/virtualization.xml:532(para)
4521
msgid ""
4522
"If you are running Hardy, you can still perform most of this using the older "
4523
"version of the package named <application>ubuntu-vm-builder</application>, "
4524
"there are only a few changes to the syntax of the tool."
4525
msgstr ""
4526
4527
#: serverguide/C/virtualization.xml:541(title)
4528
msgid "Defining Your Virtual Machine"
4529
msgstr "Definissètz Vòstra Maquina Virtuala"
4530
4531
#: serverguide/C/virtualization.xml:543(para)
4532
msgid ""
4533
"Defining a virtual machine with Ubuntu's vmbuilder is quite simple, but here "
4534
"are a few thing to consider:"
4535
msgstr ""
4536
4537
#: serverguide/C/virtualization.xml:549(para)
4538
msgid ""
4539
"If you plan on shipping a virtual appliance, do not assume that the end-user "
4540
"will know how to extend disk size to fit their need, so either plan for a "
4541
"large virtual disk to allow for your appliance to grow, or explain fairly "
4542
"well in your documentation how to allocate more space. It might actually be "
4543
"a good idea to store data on some separate external storage."
4544
msgstr ""
4545
4546
#: serverguide/C/virtualization.xml:556(para)
4547
msgid ""
4548
"Given that RAM is much easier to allocate in a VM, RAM size should be set to "
4549
"whatever you think is a safe minimum for your appliance."
4550
msgstr ""
4551
4552
#: serverguide/C/virtualization.xml:562(para)
4553
msgid ""
4554
"The <application>vmbuilder</application> command has 2 main parameters: the "
4555
"<emphasis>virtualization technology (hypervisor)</emphasis> and the targeted "
4556
"<emphasis>distribution</emphasis>. Optional parameters are quite numerous "
4557
"and can be found using the following command:"
4558
msgstr ""
4559
4560
#: serverguide/C/virtualization.xml:568(command)
4561
msgid "vmbuilder --help"
4562
msgstr "vmbuilder --help"
4563
4564
#: serverguide/C/virtualization.xml:572(title)
4565
msgid "Base Parameters"
4566
msgstr "Paramètres de basa"
4567
4568
#: serverguide/C/virtualization.xml:574(para)
4569
msgid ""
4570
"As this example is based on <application>KVM</application> and Ubuntu 10.04 "
4571
"LTS (Lucid Lynx), and we are likely to rebuild the same virtual machine "
4572
"multiple time, we'll invoke vmbuilder with the following first parameters:"
4573
msgstr ""
4574
4575
#: serverguide/C/virtualization.xml:580(command)
4576
msgid ""
4577
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4578
"libvirt qemu:///system"
4579
msgstr ""
4580
4581
#: serverguide/C/virtualization.xml:583(para)
4582
msgid ""
4583
"The <emphasis>--suite</emphasis> defines the Ubuntu release, the <emphasis>--"
4584
"flavour</emphasis> specifies that we want to use the virtual kernel (that's "
4585
"the one used to build a JeOS image), the <emphasis>--arch</emphasis> tells "
4586
"that we want to use a 32 bit machine, the <emphasis>-o</emphasis> tells "
4587
"vmbuilder to overwrite the previous version of the VM and the <emphasis>--"
4588
"libvirt</emphasis> tells to inform the local virtualization environment to "
4589
"add the resulting VM to the list of available machines."
4590
msgstr ""
4591
4592
#: serverguide/C/virtualization.xml:591(para)
4593
msgid "Notes:"
4594
msgstr "Nòtas :"
4595
4596
#: serverguide/C/virtualization.xml:597(para)
4597
msgid ""
4598
"Because of the nature of operations performed by vmbuilder, it needs to have "
4599
"root privilege, hence the use of sudo."
4600
msgstr ""
4601
4602
#: serverguide/C/virtualization.xml:602(para)
4603
msgid ""
4604
"If your virtual machine needs to use more than 3Gb of ram, you should build "
4605
"a 64 bit machine (--arch amd64)."
4606
msgstr ""
4607
4608
#: serverguide/C/virtualization.xml:607(para)
4609
msgid ""
4610
"Until Ubuntu 8.10, the virtual kernel was only built for 32 bit "
4611
"architecture, so if you want to define an amd64 machine on Hardy, you should "
4612
"use <emphasis>--flavour</emphasis> server instead."
4613
msgstr ""
4614
4615
#: serverguide/C/virtualization.xml:615(title)
4616
msgid "JeOS Installation Parameters"
4617
msgstr "Paramètres d'installacion de JeOS"
4618
4619
#: serverguide/C/virtualization.xml:618(title)
4620
msgid "JeOS Networking"
4621
msgstr "Ret JeOS"
4622
4623
#: serverguide/C/virtualization.xml:621(title)
4624
msgid "Assigning a fixed IP address"
4625
msgstr "Attribuir una adreça IP fixa"
4626
4627
#: serverguide/C/virtualization.xml:623(para)
4628
msgid ""
4629
"As a virtual appliance that may be deployed on various very different "
4630
"networks, it is very difficult to know what the actual network will look "
4631
"like. In order to simplify configuration, it is a good idea to take an "
4632
"approach similar to what network hardware vendors usually do, namely "
4633
"assigning an initial fixed IP address to the appliance in a private class "
4634
"network that you will provide in your documentation. An address in the range "
4635
"192.168.0.0/255 is usually a good choice."
4636
msgstr ""
4637
4638
#: serverguide/C/virtualization.xml:630(para)
4639
msgid "To do this we'll use the following parameters:"
4640
msgstr ""
4641
4642
#: serverguide/C/virtualization.xml:636(para)
4643
msgid ""
4644
"<emphasis>--ip ADDRESS</emphasis>: IP address in dotted form (defaults to "
4645
"dhcp if not specified)"
4646
msgstr ""
4647
4648
#: serverguide/C/virtualization.xml:641(para)
4649
msgid ""
4650
"<emphasis>--mask VALUE</emphasis>: IP mask in dotted form (default: "
4651
"255.255.255.0)"
4652
msgstr ""
4653
4654
#: serverguide/C/virtualization.xml:646(para)
4655
msgid "<emphasis>--net VALUE</emphasis>: IP net address (default: X.X.X.0)"
4656
msgstr ""
4657
4658
#: serverguide/C/virtualization.xml:651(para)
4659
msgid "<emphasis>--bcast VALUE</emphasis>: IP broadcast (default: X.X.X.255)"
4660
msgstr ""
4661
4662
#: serverguide/C/virtualization.xml:656(para)
4663
msgid "<emphasis>--gw ADDRESS</emphasis>: Gateway address (default: X.X.X.1)"
4664
msgstr ""
4665
4666
#: serverguide/C/virtualization.xml:661(para)
4667
msgid ""
4668
"<emphasis>--dns ADDRESS</emphasis>: Name server address (default: X.X.X.1)"
4669
msgstr ""
4670
4671
#: serverguide/C/virtualization.xml:667(para)
4672
msgid ""
4673
"We assume for now that default values are good enough, so the resulting "
4674
"invocation becomes:"
4675
msgstr ""
4676
4677
#: serverguide/C/virtualization.xml:672(command)
4678
msgid ""
4679
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
4680
"libvirt qemu:///system --ip 192.168.0.100"
4681
msgstr ""
4682
4683
#: serverguide/C/virtualization.xml:677(title)
4684
msgid "Modifying the libvirt Template to use Bridging"
4685
msgstr ""
4686
4687
#: serverguide/C/virtualization.xml:679(para)
4688
msgid ""
4689
"Because our appliance will be likely to need to be accessed by remote hosts, "
4690
"we need to configure libvirt so that the appliance uses bridge networking. "
4691
"To do this we use vmbuilder template mechanism to modify the default one."
4692
msgstr ""
4693
4694
#: serverguide/C/virtualization.xml:684(para)
4695
msgid ""
4696
"In our working directory we create the template hierarchy and copy the "
4697
"default template:"
4698
msgstr ""
4699
4700
#: serverguide/C/virtualization.xml:689(command)
4701
msgid "mkdir -p VMBuilder/plugins/libvirt/templates"
4702
msgstr ""
4703
4704
#: serverguide/C/virtualization.xml:690(command)
4705
msgid "cp /etc/vmbuilder/libvirt/* VMBuilder/plugins/libvirt/templates/"
4706
msgstr ""
4707
4708
#: serverguide/C/virtualization.xml:693(para)
4709
msgid ""
4710
"We can then edit "
4711
"<filename>VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl</filename> to "
4712
"change:"
4713
msgstr ""
4714
4715
#: serverguide/C/virtualization.xml:697(programlisting)
4716
#, no-wrap
4717
msgid ""
4718
"\n"
4719
" <interface type='network'>\n"
4720
" <source network='default'/>\n"
4721
" </interface>\n"
4722
msgstr ""
4723
4724
#: serverguide/C/virtualization.xml:703(para)
4725
msgid "To:"
4726
msgstr ""
4727
4728
#: serverguide/C/virtualization.xml:707(programlisting)
4729
#, no-wrap
4730
msgid ""
4731
"\n"
4732
" <interface type='bridge'>\n"
4733
" <source bridge='br0'/>\n"
4734
" </interface>\n"
4735
msgstr ""
4736
4737
#: serverguide/C/virtualization.xml:717(title) serverguide/C/installation.xml:459(title)
4738
msgid "Partitioning"
4739
msgstr ""
4740
4741
#: serverguide/C/virtualization.xml:719(para)
4742
msgid ""
4743
"Partitioning of the virtual appliance will have to take into consideration "
4744
"what you are planning to do with is. Because most appliances want to have a "
4745
"separate storage for data, having a separate <filename>/var</filename> would "
4746
"make sense."
4747
msgstr ""
4748
4749
#: serverguide/C/virtualization.xml:724(para)
4750
msgid ""
4751
"In order to do this vmbuilder provides us with <emphasis>--part</emphasis>:"
4752
msgstr ""
4753
4754
#: serverguide/C/virtualization.xml:728(programlisting)
4755
#, no-wrap
4756
msgid ""
4757
"\n"
4758
"--part PATH\n"
4759
" Allows you to specify a partition table in a partition file, located at "
4760
"PATH. Each line of the partition file should specify\n"
4761
" (root first):\n"
4762
" mountpoint size\n"
4763
" where size is in megabytes. You can have up to 4 virtual disks, a new "
4764
"disk starts on a\n"
4765
" line with ’---’. ie :\n"
4766
" root 1000\n"
4767
" /opt 1000\n"
4768
" swap 256\n"
4769
" ---\n"
4770
" /var 2000\n"
4771
" /log 1500\n"
4772
msgstr ""
4773
4774
#: serverguide/C/virtualization.xml:743(para)
4775
msgid ""
4776
"In our case we will define a text file name "
4777
"<filename>vmbuilder.partition</filename> which will contain the following:"
4778
msgstr ""
4779
4780
#: serverguide/C/virtualization.xml:747(programlisting)
4781
#, no-wrap
4782
msgid ""
4783
"\n"
4784
"root 8000\n"
4785
"swap 4000\n"
4786
"---\n"
4787
"/var 20000\n"
4788
msgstr ""
4789
4790
#: serverguide/C/virtualization.xml:755(para)
4791
msgid ""
4792
"Note that as we are using virtual disk images, the actual sizes that we put "
4793
"here are maximum sizes for these volumes."
4794
msgstr ""
4795
4796
#: serverguide/C/virtualization.xml:760(para)
4797
msgid "Our command line now looks like:"
4798
msgstr ""
4799
4800
#: serverguide/C/virtualization.xml:765(command)
4801
msgid ""
4802
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4803
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition"
4804
msgstr ""
4805
4806
#: serverguide/C/virtualization.xml:770(para)
4807
msgid ""
4808
"Using a \"\\\" in a command will allow long command strings to wrap to the "
4809
"next line."
4810
msgstr ""
4811
4812
#: serverguide/C/virtualization.xml:777(title)
4813
msgid "User and Password"
4814
msgstr ""
4815
4816
#: serverguide/C/virtualization.xml:779(para)
4817
msgid ""
4818
"Again setting up a virtual appliance, you will need to provide a default "
4819
"user and password that is generic so that you can include it in your "
4820
"documentation. We will see later on in this tutorial how we will provide "
4821
"some security by defining a script that will be run the first time a user "
4822
"actually logs in the appliance, that will, among other things, ask him to "
4823
"change his password. In this example I will use <emphasis>'user'</emphasis> "
4824
"as my user name, and <emphasis>'default'</emphasis> as the password."
4825
msgstr ""
4826
4827
#: serverguide/C/virtualization.xml:787(para)
4828
msgid "To do this we use the following optional parameters:"
4829
msgstr ""
4830
4831
#: serverguide/C/virtualization.xml:793(para)
4832
msgid ""
4833
"<emphasis>--user USERNAME:</emphasis> Sets the name of the user to be added. "
4834
"Default: ubuntu."
4835
msgstr ""
4836
4837
#: serverguide/C/virtualization.xml:798(para)
4838
msgid ""
4839
"<emphasis>--name FULLNAME:</emphasis> Sets the full name of the user to be "
4840
"added. Default: Ubuntu."
4841
msgstr ""
4842
4843
#: serverguide/C/virtualization.xml:803(para)
4844
msgid ""
4845
"<emphasis>--pass PASSWORD:</emphasis> Sets the password for the user. "
4846
"Default: ubuntu."
4847
msgstr ""
4848
4849
#: serverguide/C/virtualization.xml:809(para)
4850
msgid "Our resulting command line becomes:"
4851
msgstr ""
4852
4853
#: serverguide/C/virtualization.xml:814(command)
4854
msgid ""
4855
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
4856
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition \\ --"
4857
"user user --name user --pass default"
4858
msgstr ""
4859
4860
#: serverguide/C/virtualization.xml:822(title)
4861
msgid "Installing Required Packages"
4862
msgstr ""
4863
4864
#: serverguide/C/virtualization.xml:824(para)
4865
msgid ""
4866
"In this example we will be installing a package "
4867
"<application>(Limesurvey)</application> that accesses a "
4868
"<application>MySQL</application> database and has a web interface. We will "
4869
"therefore require our OS to provide us with:"
4870
msgstr ""
4871
4872
#: serverguide/C/virtualization.xml:831(para)
4873
msgid "Apache"
4874
msgstr ""
4875
4876
#: serverguide/C/virtualization.xml:832(para)
4877
msgid "PHP"
4878
msgstr ""
4879
4880
#: serverguide/C/virtualization.xml:833(para) serverguide/C/databases.xml:19(trademark) serverguide/C/databases.xml:31(title)
4881
msgid "MySQL"
4882
msgstr "MySQL"
4883
4884
#: serverguide/C/virtualization.xml:834(para) serverguide/C/remote-administration.xml:20(title)
4885
msgid "OpenSSH Server"
4886
msgstr ""
4887
4888
#: serverguide/C/virtualization.xml:835(para)
4889
msgid "Limesurvey (as an example application that we have packaged)"
4890
msgstr ""
4891
4892
#: serverguide/C/virtualization.xml:838(para)
4893
msgid ""
4894
"This is done using vmbuilder by specifying the --addpkg option multiple "
4895
"times:"
4896
msgstr ""
4897
4898
#: serverguide/C/virtualization.xml:842(programlisting)
4899
#, no-wrap
4900
msgid ""
4901
"\n"
4902
"--addpkg PKG\n"
4903
" Install PKG into the guest (can be specfied multiple times)\n"
4904
msgstr ""
4905
4906
#: serverguide/C/virtualization.xml:847(para)
4907
msgid ""
4908
"However, due to the way vmbuilder operates, packages that have to ask "
4909
"questions to the user during the post install phase are not supported and "
4910
"should instead be installed while interactivity can occur. This is the case "
4911
"of Limesurvey, which we will have to install later, once the user logs in."
4912
msgstr ""
4913
4914
#: serverguide/C/virtualization.xml:853(para)
4915
msgid ""
4916
"Other packages that ask simple debconf question, such as <application>mysql-"
4917
"server</application> asking to set a password, the package can be installed "
4918
"immediately, but we will have to reconfigure it the first time the user logs "
4919
"in."
4920
msgstr ""
4921
4922
#: serverguide/C/virtualization.xml:859(para)
4923
msgid ""
4924
"If some packages that we need to install are not in main, we need to enable "
4925
"the additional repositories using --comp and --ppa:"
4926
msgstr ""
4927
4928
#: serverguide/C/virtualization.xml:863(programlisting)
4929
#, no-wrap
4930
msgid ""
4931
"\n"
4932
"--components COMP1,COMP2,...,COMPN\n"
4933
" A comma separated list of distro components to include (e.g. "
4934
"main,universe). This defaults\n"
4935
" to \"main\"\n"
4936
"--ppa=PPA Add ppa belonging to PPA to the vm's sources.list.\n"
4937
msgstr ""
4938
4939
#: serverguide/C/virtualization.xml:870(para)
4940
msgid ""
4941
"Limesurvey not being part of the archive at the moment, we'll specify it's "
4942
"PPA (personal package archive) address so that it is added to the VM "
4943
"<filename>/etc/apt/source.list</filename>, so we add the following options "
4944
"to the command line:"
4945
msgstr ""
4946
4947
#: serverguide/C/virtualization.xml:876(command)
4948
msgid ""
4949
"--addpkg apache2 --addpkg apache2-mpm-prefork --addpkg apache2-utils --"
4950
"addpkg apache2.2-common \\ --addpkg dbconfig-common --addpkg libapache2-mod-"
4951
"php5 --addpkg mysql-client --addpkg php5-cli \\ --addpkg php5-gd --addpkg "
4952
"php5-ldap --addpkg php5-mysql --addpkg wwwconfig-common \\ --addpkg mysql-"
4953
"server --ppa nijaba"
4954
msgstr ""
4955
4956
#: serverguide/C/virtualization.xml:883(title)
4957
msgid "OpenSSH"
4958
msgstr ""
4959
4960
#: serverguide/C/virtualization.xml:885(para)
4961
msgid ""
4962
"Another convenient tool that we want to have on our appliance is OpenSSH, as "
4963
"it will allow our admins to access the appliance remotely. However, pushing "
4964
"in the wild an appliance with a pre-installed OpenSSH server is a big "
4965
"security risk as all these server will share the same secret key, making it "
4966
"very easy for hackers to target our appliance with all the tools they need "
4967
"to crack it open in a breeze. As for the user password, we will instead rely "
4968
"on a script that will install OpenSSH the first time a user logs in so that "
4969
"the key generated will be different for each appliance. For this we'll use a "
4970
"<emphasis>--firstboot</emphasis> script, as it does not need any user "
4971
"interaction."
4972
msgstr ""
4973
4974
#: serverguide/C/virtualization.xml:897(title)
4975
msgid "Speed Considerations"
4976
msgstr ""
4977
4978
#: serverguide/C/virtualization.xml:900(title)
4979
msgid "Package Caching"
4980
msgstr ""
4981
4982
#: serverguide/C/virtualization.xml:902(para)
4983
msgid ""
4984
"When vmbuilder creates builds your system, it has to go fetch each one of "
4985
"the packages that composes it over the network to one of the official "
4986
"repositories, which, depending on your internet connection speed and the "
4987
"load of the mirror, can have a big impact on the actual build time. In order "
4988
"to reduce this, it is recommended to either have a local repository (which "
4989
"can be created using <application>apt-mirror</application>) or using a "
4990
"caching proxy such as <application>apt-proxy</application>. The later option "
4991
"being much simpler to implement and requiring less disk space, it is the one "
4992
"we will pick in this tutorial. To install it, simply type:"
4993
msgstr ""
4994
4995
#: serverguide/C/virtualization.xml:912(command)
4996
msgid "sudo apt-get install apt-proxy"
4997
msgstr ""
4998
4999
#: serverguide/C/virtualization.xml:915(para)
5000
msgid ""
5001
"Once this is complete, your (empty) proxy is ready for use on "
5002
"http://mirroraddress:9999 and will find ubuntu repository under /ubuntu. For "
5003
"vmbuilder to use it, we'll have to use the <emphasis>--mirror</emphasis> "
5004
"option:"
5005
msgstr ""
5006
5007
#: serverguide/C/virtualization.xml:920(programlisting)
5008
#, no-wrap
5009
msgid ""
5010
"\n"
5011
"--mirror=URL Use Ubuntu mirror at URL instead of the default, which\n"
5012
" is http://archive.ubuntu.com/ubuntu for official\n"
5013
" arches and http://ports.ubuntu.com/ubuntu-ports\n"
5014
" otherwise\n"
5015
msgstr ""
5016
5017
#: serverguide/C/virtualization.xml:927(para)
5018
msgid "So we add to the command line:"
5019
msgstr ""
5020
5021
#: serverguide/C/virtualization.xml:932(command)
5022
msgid "--mirror http://mirroraddress:9999/ubuntu"
5023
msgstr ""
5024
5025
#: serverguide/C/virtualization.xml:936(para)
5026
msgid ""
5027
"The mirror address specified here will also be used in the "
5028
"<filename>/etc/apt/sources.list</filename> of the newly created guest, so it "
5029
"is useful to specify here an address that can be resolved by the guest or to "
5030
"plan on reseting this address later on, such as in a <emphasis>--"
5031
"firstboot</emphasis> script."
5032
msgstr ""
5033
5034
#: serverguide/C/virtualization.xml:945(title)
5035
msgid "Install a Local Mirror"
5036
msgstr ""
5037
5038
#: serverguide/C/virtualization.xml:947(para)
5039
msgid ""
5040
"If we are in a larger environment, it may make sense to setup a local mirror "
5041
"of the Ubuntu repositories. The package apt-mirror provides you with a "
5042
"script that will handle the mirroring for you. You should plan on having "
5043
"about 20 gigabyte of free space per supported release and architecture."
5044
msgstr ""
5045
5046
#: serverguide/C/virtualization.xml:953(para)
5047
msgid ""
5048
"By default, <application>apt-mirror</application> uses the configuration "
5049
"file in <filename>/etc/apt/mirror.list</filename>. As it is set up, it will "
5050
"replicate only the architecture of the local machine. If you would like to "
5051
"support other architectures on your mirror, simply duplicate the lines "
5052
"starting with “deb”, replacing the deb keyword by /deb-{arch} where arch can "
5053
"be i386, amd64, etc... For example, on an amd64 machine, to have the i386 "
5054
"archives as well, you will have:"
5055
msgstr ""
5056
5057
#: serverguide/C/virtualization.xml:960(programlisting)
5058
#, no-wrap
5059
msgid ""
5060
"\n"
5061
"deb http://archive.ubuntu.com/ubuntu lucid main restricted universe "
5062
"multiverse \n"
5063
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main restricted universe "
5064
"multiverse\n"
5065
"\n"
5066
"deb http://archive.ubuntu.com/ubuntu lucid-updates main restricted universe "
5067
"multiverse \n"
5068
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-updates main restricted "
5069
"universe multiverse \n"
5070
"\n"
5071
"deb http://archive.ubuntu.com/ubuntu/ lucid-backports main restricted "
5072
"universe multiverse \n"
5073
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-backports main restricted "
5074
"universe multiverse \n"
5075
"\n"
5076
"deb http://security.ubuntu.com/ubuntu lucid-security main restricted "
5077
"universe multiverse \n"
5078
"/deb-i386 http://security.ubuntu.com/ubuntu lucid-security main restricted "
5079
"universe multiverse \n"
5080
"\n"
5081
"deb http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
5082
"restricted/debian-installer universe/debian-installer multiverse/debian-"
5083
"installer \n"
5084
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
5085
"restricted/debian-installer universe/debian-installer multiverse/debian-"
5086
"installer \n"
5087
msgstr ""
5088
5089
#: serverguide/C/virtualization.xml:977(para)
5090
msgid ""
5091
"Notice that the source packages are not mirrored as they are seldom used "
5092
"compared to the binaries and they do take a lot more space, but they can be "
5093
"easily added to the list."
5094
msgstr ""
5095
5096
#: serverguide/C/virtualization.xml:982(para)
5097
msgid ""
5098
"Once the mirror has finished replicating (and this can be quite long), you "
5099
"need to configure Apache so that your mirror files (in "
5100
"<filename>/var/spool/apt-mirror</filename> if you did not change the "
5101
"default), are published by your Apache server. For more information on "
5102
"Apache see <xref linkend=\"httpd\"/>."
5103
msgstr ""
5104
5105
#: serverguide/C/virtualization.xml:991(title)
5106
msgid "Installing in a RAM Disk"
5107
msgstr ""
5108
5109
#: serverguide/C/virtualization.xml:993(para)
5110
msgid ""
5111
"As you can easily imagine, writing to RAM is a <emphasis>LOT</emphasis> "
5112
"faster than writing to disk. If you have some free memory, letting vmbuilder "
5113
"perform its operation in a RAMdisk will help a lot and the option <emphasis>-"
5114
"-tmpfs</emphasis> will help you do just that:"
5115
msgstr ""
5116
5117
#: serverguide/C/virtualization.xml:999(programlisting)
5118
#, no-wrap
5119
msgid ""
5120
"\n"
5121
"--tmpfs OPTS Use a tmpfs as the working directory, specifying its\n"
5122
" size or \"-\" to use tmpfs default (suid,dev,size=1G).\n"
5123
msgstr ""
5124
5125
#: serverguide/C/virtualization.xml:1004(para)
5126
msgid ""
5127
"So adding <command>--tmpfs -</command> sounds like a very good idea if you "
5128
"have 1G of free ram."
5129
msgstr ""
5130
5131
#: serverguide/C/virtualization.xml:1011(title)
5132
msgid "Package the Application"
5133
msgstr ""
5134
5135
#: serverguide/C/virtualization.xml:1013(para)
5136
msgid "Two option are available to us:"
5137
msgstr ""
5138
5139
#: serverguide/C/virtualization.xml:1019(para)
5140
msgid ""
5141
"The recommended method to do so is to make a <emphasis>Debian</emphasis> "
5142
"package. Since this is outside of the scope of this tutorial, we will not "
5143
"perform this here and invite the reader to read the documentation on how to "
5144
"do this in the <ulink url=\"https://wiki.ubuntu.com/PackagingGuide\">Ubuntu "
5145
"Packaging Guide</ulink>. In this case it is also a good idea to setup a "
5146
"repository for your package so that updates can be conveniently pulled from "
5147
"it. See the <ulink url=\"http://www.debian-"
5148
"administration.org/articles/286\">Debian Administration</ulink> article for "
5149
"a tutorial on this."
5150
msgstr ""
5151
5152
#: serverguide/C/virtualization.xml:1028(para)
5153
msgid ""
5154
"Manually install the application under <filename>/opt</filename> as "
5155
"recommended by the <ulink url=\"http://www.pathname.com/fhs/\">FHS "
5156
"guidelines</ulink>."
5157
msgstr ""
5158
5159
#: serverguide/C/virtualization.xml:1035(para)
5160
msgid ""
5161
"In our case we'll use <application>Limesurvey</application> as example web "
5162
"application for which we wish to provide a virtual appliance. As noted "
5163
"before, we've made a version of the package available in a PPA (Personal "
5164
"Package Archive)."
5165
msgstr ""
5166
5167
#: serverguide/C/virtualization.xml:1042(title)
5168
msgid "Finishing Install"
5169
msgstr ""
5170
5171
#: serverguide/C/virtualization.xml:1045(title)
5172
msgid "First Boot"
5173
msgstr ""
5174
5175
#: serverguide/C/virtualization.xml:1047(para)
5176
msgid ""
5177
"As we mentioned earlier, the first time the machine boots we'll need to "
5178
"install <application>openssh-server</application> so that the key generated "
5179
"for it is unique for each machine. To do this, we'll write a script called "
5180
"<filename>boot.sh</filename> as follows:"
5181
msgstr ""
5182
5183
#: serverguide/C/virtualization.xml:1053(programlisting)
5184
#, no-wrap
5185
msgid ""
5186
"\n"
5187
"# This script will run the first time the virtual machine boots\n"
5188
"# It is ran as root.\n"
5189
"\n"
5190
"apt-get update\n"
5191
"apt-get install -qqy --force-yes openssh-server\n"
5192
msgstr ""
5193
5194
#: serverguide/C/virtualization.xml:1061(para)
5195
msgid ""
5196
"And we add the <command>--firstboot boot.sh</command> option to our command "
5197
"line."
5198
msgstr ""
5199
5200
#: serverguide/C/virtualization.xml:1067(title)
5201
msgid "First Login"
5202
msgstr ""
5203
5204
#: serverguide/C/virtualization.xml:1069(para)
5205
msgid ""
5206
"Mysql and Limesurvey needing some user interaction during their setup, we'll "
5207
"set them up the first time a user logs in using a script named login.sh. "
5208
"We'll also use this script to let the user specify:"
5209
msgstr ""
5210
5211
#: serverguide/C/virtualization.xml:1075(para)
5212
msgid "His own password"
5213
msgstr ""
5214
5215
#: serverguide/C/virtualization.xml:1076(para)
5216
msgid "Define the keyboard and other locale info he wants to use"
5217
msgstr ""
5218
5219
#: serverguide/C/virtualization.xml:1079(para)
5220
msgid "So we'll define <filename>login.sh</filename> as follows:"
5221
msgstr ""
5222
5223
#: serverguide/C/virtualization.xml:1083(programlisting)
5224
#, no-wrap
5225
msgid ""
5226
"\n"
5227
"# This script is ran the first time a user logs in\n"
5228
"\n"
5229
"echo \"Your appliance is about to be finished to be set up.\"\n"
5230
"echo \"In order to do it, we'll need to ask you a few questions,\"\n"
5231
"echo \"starting by changing your user password.\"\n"
5232
"\n"
5233
"passwd\n"
5234
"\n"
5235
"#give the opportunity to change the keyboard\n"
5236
"sudo dpkg-reconfigure console-setup\n"
5237
"\n"
5238
"#configure the mysql server root password\n"
5239
"sudo dpkg-reconfigure mysql-server-5.0\n"
5240
"\n"
5241
"#install limesurvey\n"
5242
"sudo apt-get install -qqy --force-yes limesurvey\n"
5243
"\n"
5244
"echo \"Your appliance is now configured. To use it point your\"\n"
5245
"echo \"browser to http://serverip/limesurvey/admin\"\n"
5246
msgstr ""
5247
5248
#: serverguide/C/virtualization.xml:1105(para)
5249
msgid ""
5250
"And we add the <command>--firstlogin login.sh</command> option to our "
5251
"command line."
5252
msgstr ""
5253
5254
#: serverguide/C/virtualization.xml:1112(title)
5255
msgid "Useful Additions"
5256
msgstr ""
5257
5258
#: serverguide/C/virtualization.xml:1115(title)
5259
msgid "Configuring Automatic Updates"
5260
msgstr ""
5261
5262
#: serverguide/C/virtualization.xml:1117(para)
5263
msgid ""
5264
"To have your system be configured to update itself on a regular basis, we "
5265
"will just install <application>unattended-upgrades</application>, so we add "
5266
"the following option to our command line:"
5267
msgstr ""
5268
5269
#: serverguide/C/virtualization.xml:1123(command)
5270
msgid "--addpkg unattended-upgrades"
5271
msgstr ""
5272
5273
#: serverguide/C/virtualization.xml:1126(para)
5274
msgid ""
5275
"As we have put our application package in a PPA, the process will update not "
5276
"only the system, but also the application each time we update the version in "
5277
"the PPA."
5278
msgstr ""
5279
5280
#: serverguide/C/virtualization.xml:1133(title)
5281
msgid "ACPI Event Handling"
5282
msgstr ""
5283
5284
#: serverguide/C/virtualization.xml:1135(para)
5285
msgid ""
5286
"For your virtual machine to be able to handle restart and shutdown events it "
5287
"is being sent, it is a good idea to install the acpid package as well. To do "
5288
"this we just add the following option:"
5289
msgstr ""
5290
5291
#: serverguide/C/virtualization.xml:1141(command)
5292
msgid "--addpkg acpid"
5293
msgstr ""
5294
5295
#: serverguide/C/virtualization.xml:1147(title)
5296
msgid "Final Command"
5297
msgstr ""
5298
5299
#: serverguide/C/virtualization.xml:1149(para)
5300
msgid "Here is the command with all the options discussed above:"
5301
msgstr ""
5302
5303
#: serverguide/C/virtualization.xml:1154(command)
5304
msgid ""
5305
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o \\ -"
5306
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition --user "
5307
"user \\ --name user --pass default --addpkg apache2 --addpkg apache2-mpm-"
5308
"prefork \\ --addpkg apache2-utils --addpkg apache2.2-common --addpkg "
5309
"dbconfig-common \\ --addpkg libapache2-mod-php5 --addpkg mysql-client --"
5310
"addpkg php5-cli \\ --addpkg php5-gd --addpkg php5-ldap --addpkg php5-mysql --"
5311
"addpkg wwwconfig-common \\ --addpkg mysql-server --addpkg unattended-"
5312
"upgrades --addpkg acpid --ppa nijaba \\ --mirror "
5313
"http://mirroraddress:9999/ubuntu --tmpfs - --firstboot boot.sh \\ --"
5314
"firstlogin login.sh es"
5315
msgstr ""
5316
5317
#: serverguide/C/virtualization.xml:1169(para)
5318
msgid ""
5319
"If you are interested in learning more, have questions or suggestions, "
5320
"please contact the Ubuntu Server Team at:"
5321
msgstr ""
5322
5323
#: serverguide/C/virtualization.xml:1174(para)
5324
msgid "IRC: #ubuntu-server on freenode"
5325
msgstr ""
5326
5327
#: serverguide/C/virtualization.xml:1179(para)
5328
msgid ""
5329
"Mailing list: <ulink url=\"https://lists.ubuntu.com/mailman/listinfo/ubuntu-"
5330
"server\">ubuntu-server at lists.ubuntu.com</ulink>"
5331
msgstr ""
5332
5333
#: serverguide/C/virtualization.xml:1184(para)
5334
msgid ""
5335
"Also, see the <ulink "
5336
"url=\"https://help.ubuntu.com/community/JeOSVMBuilder\">JeOSVMBuilder Ubuntu "
5337
"Wiki</ulink> page."
5338
msgstr ""
5339
5340
#: serverguide/C/virtualization.xml:1192(title)
5341
msgid "UEC"
5342
msgstr ""
5343
5344
#: serverguide/C/virtualization.xml:1195(title) serverguide/C/network-auth.xml:2026(title) serverguide/C/monitoring.xml:15(title) serverguide/C/lamp-applications.xml:17(title) serverguide/C/installation.xml:928(title) serverguide/C/dns.xml:64(title) serverguide/C/chat.xml:17(title) serverguide/C/backups.xml:541(title)
5345
msgid "Overview"
5346
msgstr ""
5347
5348
#: serverguide/C/virtualization.xml:1197(para)
5349
msgid ""
5350
"This tutorial covers <application>UEC</application> installation from the "
5351
"Ubuntu 10.04 LTS Server Edition CD, and assumes a basic network topology, "
5352
"with a single system serving as the <emphasis>\"all-in-one "
5353
"controller\"</emphasis>, and one or more nodes attached."
5354
msgstr ""
5355
5356
#: serverguide/C/virtualization.xml:1202(para)
5357
msgid ""
5358
"From this Tutorial you will learn how to install, configure, register and "
5359
"perform several operations on a basic <application>UEC</application> setup "
5360
"that results in a cloud with a one controller <emphasis>\"front-"
5361
"end\"</emphasis> and one or several node(s) for running Virtual Machine (VM) "
5362
"instances. You will also use examples to help get you started using your own "
5363
"private compute cloud."
5364
msgstr ""
5365
5366
#: serverguide/C/virtualization.xml:1210(title)
5367
msgid "Prerequisites"
5368
msgstr ""
5369
5370
#: serverguide/C/virtualization.xml:1212(para)
5371
msgid ""
5372
"To deploy a minimal cloud infrastructure, you’ll need at least "
5373
"<emphasis>two</emphasis> dedicated systems:"
5374
msgstr ""
5375
5376
#: serverguide/C/virtualization.xml:1218(para)
5377
msgid "A front end."
5378
msgstr ""
5379
5380
#: serverguide/C/virtualization.xml:1223(para)
5381
msgid "One or more node(s)."
5382
msgstr ""
5383
5384
#: serverguide/C/virtualization.xml:1229(para)
5385
msgid ""
5386
"The following are recommendations, rather than fixed requirements. However, "
5387
"our experience in developing this documentation indicated the following "
5388
"suggestions."
5389
msgstr ""
5390
5391
#: serverguide/C/virtualization.xml:1234(title)
5392
msgid "Front End Requirements"
5393
msgstr ""
5394
5395
#: serverguide/C/virtualization.xml:1236(para)
5396
msgid "Use the following table for a system that will run one or more of:"
5397
msgstr ""
5398
5399
#: serverguide/C/virtualization.xml:1241(para)
5400
msgid "Cloud Controller (CLC)"
5401
msgstr ""
5402
5403
#: serverguide/C/virtualization.xml:1242(para)
5404
msgid "Cluster Controller (CC)"
5405
msgstr ""
5406
5407
#: serverguide/C/virtualization.xml:1243(para)
5408
msgid "Walrus (the S3-like storage service)"
5409
msgstr ""
5410
5411
#: serverguide/C/virtualization.xml:1244(para)
5412
msgid "Storage Controller (SC)"
5413
msgstr ""
5414
5415
#: serverguide/C/virtualization.xml:1248(title)
5416
msgid "UEC Front End Requirements"
5417
msgstr ""
5418
5419
#: serverguide/C/virtualization.xml:1256(para) serverguide/C/virtualization.xml:1318(para)
5420
msgid "Hardware"
5421
msgstr ""
5422
5423
#: serverguide/C/virtualization.xml:1257(para) serverguide/C/virtualization.xml:1319(para)
5424
msgid "Minimum"
5425
msgstr ""
5426
5427
#: serverguide/C/virtualization.xml:1258(para) serverguide/C/virtualization.xml:1320(para)
5428
msgid "Suggested"
5429
msgstr ""
5430
5431
#: serverguide/C/virtualization.xml:1259(para) serverguide/C/virtualization.xml:1321(para)
5432
msgid "Notes"
5433
msgstr ""
5434
5435
#: serverguide/C/virtualization.xml:1264(para) serverguide/C/virtualization.xml:1326(para)
5436
msgid "CPU"
5437
msgstr ""
5438
5439
#: serverguide/C/virtualization.xml:1265(para)
5440
msgid "1 GHz"
5441
msgstr ""
5442
5443
#: serverguide/C/virtualization.xml:1266(para)
5444
msgid "2 x 2 GHz"
5445
msgstr ""
5446
5447
#: serverguide/C/virtualization.xml:1267(para)
5448
msgid ""
5449
"For an <emphasis>all-in-one</emphasis> front end, it helps to have at least "
5450
"a dual core processor."
5451
msgstr ""
5452
5453
#: serverguide/C/virtualization.xml:1270(para) serverguide/C/virtualization.xml:1332(para)
5454
msgid "Memory"
5455
msgstr ""
5456
5457
#: serverguide/C/virtualization.xml:1271(para)
5458
msgid "512 MB"
5459
msgstr ""
5460
5461
#: serverguide/C/virtualization.xml:1272(para)
5462
msgid "2 GB"
5463
msgstr ""
5464
5465
#: serverguide/C/virtualization.xml:1273(para)
5466
msgid "The Java web front end benefits from lots of available memory."
5467
msgstr ""
5468
5469
#: serverguide/C/virtualization.xml:1276(para) serverguide/C/virtualization.xml:1338(para)
5470
msgid "Disk"
5471
msgstr ""
5472
5473
#: serverguide/C/virtualization.xml:1277(para) serverguide/C/virtualization.xml:1339(para)
5474
msgid "5400 RPM IDE"
5475
msgstr ""
5476
5477
#: serverguide/C/virtualization.xml:1278(para)
5478
msgid "7200 RPM SATA"
5479
msgstr ""
5480
5481
#: serverguide/C/virtualization.xml:1279(para)
5482
msgid ""
5483
"Slower disks will work, but will yield much longer instance startup times."
5484
msgstr ""
5485
5486
#: serverguide/C/virtualization.xml:1282(para) serverguide/C/virtualization.xml:1344(para)
5487
msgid "Disk Space"
5488
msgstr ""
5489
5490
#: serverguide/C/virtualization.xml:1283(para) serverguide/C/virtualization.xml:1345(para)
5491
msgid "40 GB"
5492
msgstr ""
5493
5494
#: serverguide/C/virtualization.xml:1284(para)
5495
msgid "200 GB"
5496
msgstr ""
5497
5498
#: serverguide/C/virtualization.xml:1285(para)
5499
msgid ""
5500
"40GB is only enough space for only a single image, cache, etc., Eucalyptus "
5501
"does not like to run out of disk space."
5502
msgstr ""
5503
5504
#: serverguide/C/virtualization.xml:1288(para) serverguide/C/virtualization.xml:1350(para) serverguide/C/network-config.xml:13(title)
5505
msgid "Networking"
5506
msgstr "Ret"
5507
5508
#: serverguide/C/virtualization.xml:1289(para) serverguide/C/virtualization.xml:1351(para)
5509
msgid "100 Mbps"
5510
msgstr ""
5511
5512
#: serverguide/C/virtualization.xml:1290(para) serverguide/C/virtualization.xml:1352(para)
5513
msgid "1000 Mbps"
5514
msgstr ""
5515
5516
#: serverguide/C/virtualization.xml:1291(para) serverguide/C/virtualization.xml:1353(para)
5517
msgid ""
5518
"Machine images are hundreds of MB, and need to be copied over the network to "
5519
"nodes."
5520
msgstr ""
5521
5522
#: serverguide/C/virtualization.xml:1299(title)
5523
msgid "Node Requirements"
5524
msgstr ""
5525
5526
#: serverguide/C/virtualization.xml:1301(para)
5527
msgid "The other system(s) are <emphasis>nodes</emphasis>, which will run::"
5528
msgstr ""
5529
5530
#: serverguide/C/virtualization.xml:1306(para)
5531
msgid "the Node Controller (NC)"
5532
msgstr ""
5533
5534
#: serverguide/C/virtualization.xml:1310(title)
5535
msgid "UEC Node Requirements"
5536
msgstr ""
5537
5538
#: serverguide/C/virtualization.xml:1327(para)
5539
msgid "VT Extensions"
5540
msgstr ""
5541
5542
#: serverguide/C/virtualization.xml:1328(para)
5543
msgid "VT, 64-bit, Multicore"
5544
msgstr ""
5545
5546
#: serverguide/C/virtualization.xml:1329(para)
5547
msgid ""
5548
"64-bit can run both i386, and amd64 instances; by default, Eucalyptus will "
5549
"only run 1 VM per CPU core on a Node."
5550
msgstr ""
5551
5552
#: serverguide/C/virtualization.xml:1333(para)
5553
msgid "1 GB"
5554
msgstr ""
5555
5556
#: serverguide/C/virtualization.xml:1334(para)
5557
msgid "4 GB"
5558
msgstr ""
5559
5560
#: serverguide/C/virtualization.xml:1335(para)
5561
msgid "Additional memory means more, and larger guests."
5562
msgstr ""
5563
5564
#: serverguide/C/virtualization.xml:1340(para)
5565
msgid "7200 RPM SATA or SCSI"
5566
msgstr ""
5567
5568
#: serverguide/C/virtualization.xml:1341(para)
5569
msgid ""
5570
"Eucalyptus nodes are disk-intensive; I/O wait will likely be the performance "
5571
"bottleneck."
5572
msgstr ""
5573
5574
#: serverguide/C/virtualization.xml:1346(para)
5575
msgid "100 GB"
5576
msgstr ""
5577
5578
#: serverguide/C/virtualization.xml:1347(para)
5579
msgid ""
5580
"Images will be cached locally, Eucalyptus does not like to run out of disk "
5581
"space."
5582
msgstr ""
5583
5584
#: serverguide/C/virtualization.xml:1363(title)
5585
msgid "Installing the Cloud/Cluster/Storage/Walrus Front End Server"
5586
msgstr ""
5587
5588
#: serverguide/C/virtualization.xml:1367(para)
5589
msgid "Download the Ubuntu 10.04 LTS Server ISO file, and burn it to a CD."
5590
msgstr ""
5591
5592
#: serverguide/C/virtualization.xml:1372(para) serverguide/C/virtualization.xml:1418(para)
5593
msgid ""
5594
"When you boot, select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5595
msgstr ""
5596
5597
#: serverguide/C/virtualization.xml:1377(para)
5598
msgid ""
5599
"When asked whether you want a <emphasis>“Cluster”</emphasis> or a "
5600
"<emphasis>“Node”</emphasis> install, select <emphasis>“Cluster”</emphasis>."
5601
msgstr ""
5602
5603
#: serverguide/C/virtualization.xml:1383(para)
5604
msgid ""
5605
"It will ask two other cloud-specific questions during the course of the "
5606
"install:"
5607
msgstr ""
5608
5609
#: serverguide/C/virtualization.xml:1388(para)
5610
msgid "Name of your cluster."
5611
msgstr ""
5612
5613
#: serverguide/C/virtualization.xml:1391(para)
5614
msgid "e.g. <emphasis>cluster1</emphasis>."
5615
msgstr ""
5616
5617
#: serverguide/C/virtualization.xml:1394(para)
5618
msgid ""
5619
"A range of public IP addresses on the LAN that the cloud can allocate to "
5620
"instances."
5621
msgstr ""
5622
5623
#: serverguide/C/virtualization.xml:1397(para)
5624
msgid "e.g. <emphasis>192.168.1.200-192.168.1.249</emphasis>."
5625
msgstr ""
5626
5627
#: serverguide/C/virtualization.xml:1405(title)
5628
msgid "Installing the Node Controller(s)"
5629
msgstr ""
5630
5631
#: serverguide/C/virtualization.xml:1407(para)
5632
msgid ""
5633
"The node controller install is even simpler. Just make sure that you are "
5634
"connected to the network on which the cloud/cluster controller is already "
5635
"running."
5636
msgstr ""
5637
5638
#: serverguide/C/virtualization.xml:1413(para)
5639
msgid "Boot from the same ISO on the node(s)."
5640
msgstr ""
5641
5642
#: serverguide/C/virtualization.xml:1423(para)
5643
msgid "Select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
5644
msgstr ""
5645
5646
#: serverguide/C/virtualization.xml:1428(para)
5647
msgid ""
5648
"It should detect the Cluster and preselect <emphasis>“Node”</emphasis> "
5649
"install for you."
5650
msgstr ""
5651
5652
#: serverguide/C/virtualization.xml:1433(para)
5653
msgid "Confirm the partitioning scheme."
5654
msgstr ""
5655
5656
#: serverguide/C/virtualization.xml:1438(para)
5657
msgid ""
5658
"The rest of the installation should proceed uninterrupted; complete the "
5659
"installation and reboot the node."
5660
msgstr ""
5661
5662
#: serverguide/C/virtualization.xml:1446(title)
5663
msgid "Register the Node(s)"
5664
msgstr ""
5665
5666
#: serverguide/C/virtualization.xml:1448(para)
5667
msgid ""
5668
"Nodes are the physical systems within <application>UEC</application> that "
5669
"actually run the virtual machine instances of the cloud."
5670
msgstr ""
5671
5672
#: serverguide/C/virtualization.xml:1452(para)
5673
msgid ""
5674
"Once one or more Ubuntu Server node(s) are installed and running the "
5675
"<application>eucalyptus-nc</application> service, log onto the "
5676
"<emphasis>Cloud Controller (CLC)</emphasis> and run:"
5677
msgstr ""
5678
5679
#: serverguide/C/virtualization.xml:1458(command)
5680
msgid "sudo euca_conf --no-rsync --discover-nodes"
5681
msgstr ""
5682
5683
#: serverguide/C/virtualization.xml:1461(para)
5684
msgid ""
5685
"This will discover the systems on the network running the "
5686
"<application>eucalyptus-nc</application> service, and the administrator can "
5687
"confirm the registration of each node by its IP address."
5688
msgstr ""
5689
5690
#: serverguide/C/virtualization.xml:1467(para)
5691
msgid ""
5692
"If you get prompted for passwords, or receive errors from scp, you may need "
5693
"to revisit the key synchronization instructions at <ulink "
5694
"url=\"https://help.ubuntu.com/community/UEC/NodeInstallation\">UEC/NodeInstal"
5695
"lation</ulink>."
5696
msgstr ""
5697
5698
#: serverguide/C/virtualization.xml:1475(title)
5699
msgid "Obtain Credentials"
5700
msgstr ""
5701
5702
#: serverguide/C/virtualization.xml:1477(para)
5703
msgid ""
5704
"After installing and booting the <emphasis>Cloud Controller</emphasis>, "
5705
"users of the cloud will need to retrieve their credentials. This can be done "
5706
"either through a web browser, or at the command line."
5707
msgstr ""
5708
5709
#: serverguide/C/virtualization.xml:1483(title)
5710
msgid "From a Web Browser"
5711
msgstr ""
5712
5713
#: serverguide/C/virtualization.xml:1487(para)
5714
msgid ""
5715
"From your web browser (either remotely or on your Ubuntu server) access the "
5716
"following URL:"
5717
msgstr ""
5718
5719
#: serverguide/C/virtualization.xml:1490(programlisting) serverguide/C/virtualization.xml:1743(programlisting)
5720
#, no-wrap
5721
msgid ""
5722
"\n"
5723
"https://<cloud-controller-ip-address>:8443/\n"
5724
msgstr ""
5725
5726
#: serverguide/C/virtualization.xml:1495(para)
5727
msgid ""
5728
"You must use a secure connection, so make sure you use \"https\" not "
5729
"\"http\" in your URL. You will get a security certificate warning. You will "
5730
"have to add an exception to view the page. If you do not accept it you will "
5731
"not be able to view the Eucalyptus configuration page."
5732
msgstr ""
5733
5734
#: serverguide/C/virtualization.xml:1503(para)
5735
msgid ""
5736
"Use username <emphasis>'admin'</emphasis> and password "
5737
"<emphasis>'admin'</emphasis> for the first time login (you will be prompted "
5738
"to change your password)."
5739
msgstr ""
5740
5741
#: serverguide/C/virtualization.xml:1509(para)
5742
msgid ""
5743
"Then follow the on-screen instructions to update the admin password and "
5744
"email address."
5745
msgstr ""
5746
5747
#: serverguide/C/virtualization.xml:1514(para)
5748
msgid ""
5749
"Once the first time configuration process is completed, click the "
5750
"<emphasis>'credentials'</emphasis> tab located in the top-left portion of "
5751
"the screen."
5752
msgstr ""
5753
5754
#: serverguide/C/virtualization.xml:1520(para)
5755
msgid ""
5756
"Click the <emphasis>'Download Credentials'</emphasis> button to get your "
5757
"certificates."
5758
msgstr ""
5759
5760
#: serverguide/C/virtualization.xml:1525(para)
5761
msgid "Save them to <filename>~/.euca</filename>."
5762
msgstr ""
5763
5764
#: serverguide/C/virtualization.xml:1530(para)
5765
msgid ""
5766
"Unzip the downloaded zip file into a safe location "
5767
"(<filename>~/.euca</filename>)."
5768
msgstr ""
5769
5770
#: serverguide/C/virtualization.xml:1534(command)
5771
msgid "unzip -d ~/.euca mycreds.zip"
5772
msgstr ""
5773
5774
#: serverguide/C/virtualization.xml:1541(title)
5775
msgid "From a Command Line"
5776
msgstr ""
5777
5778
#: serverguide/C/virtualization.xml:1545(para)
5779
msgid ""
5780
"Alternatively, if you are on the command line of the <emphasis>Cloud "
5781
"Controller</emphasis>, you can run:"
5782
msgstr ""
5783
5784
#: serverguide/C/virtualization.xml:1549(command)
5785
msgid "mkdir -p ~/.euca"
5786
msgstr ""
5787
5788
#: serverguide/C/virtualization.xml:1550(command)
5789
msgid "chmod 700 ~/.euca"
5790
msgstr ""
5791
5792
#: serverguide/C/virtualization.xml:1551(command)
5793
msgid "cd ~/.euca"
5794
msgstr ""
5795
5796
#: serverguide/C/virtualization.xml:1552(command)
5797
msgid "sudo euca_conf --get-credentials mycreds.zip"
5798
msgstr ""
5799
5800
#: serverguide/C/virtualization.xml:1553(command)
5801
msgid "unzip mycreds.zip"
5802
msgstr ""
5803
5804
#: serverguide/C/virtualization.xml:1554(command)
5805
msgid "cd -"
5806
msgstr ""
5807
5808
#: serverguide/C/virtualization.xml:1561(title)
5809
msgid "Extracting and Using Your Credentials"
5810
msgstr ""
5811
5812
#: serverguide/C/virtualization.xml:1563(para)
5813
msgid ""
5814
"Now you will need to setup EC2 API and AMI tools on your server using X.509 "
5815
"certificates."
5816
msgstr ""
5817
5818
#: serverguide/C/virtualization.xml:1569(para)
5819
msgid ""
5820
"Source the included <emphasis>\"eucarc\"</emphasis> file to set up your "
5821
"Eucalyptus environment:"
5822
msgstr ""
5823
5824
#: serverguide/C/virtualization.xml:1573(command) serverguide/C/virtualization.xml:1600(command)
5825
msgid ". ~/.euca/eucarc"
5826
msgstr ""
5827
5828
#: serverguide/C/virtualization.xml:1577(para)
5829
msgid ""
5830
"You may additionally wish to add this command to your "
5831
"<filename>~/.bashrc</filename> file so that your Eucalyptus environment is "
5832
"set up automatically when you log in. Eucalyptus treats this set of "
5833
"credentials as <emphasis>'administrator'</emphasis> credentials that allow "
5834
"the holder global privileges across the cloud. As such, they should be "
5835
"protected in the same way that other elevated-priority access is protected "
5836
"(e.g. should not be made visible to the general user population)."
5837
msgstr ""
5838
5839
#: serverguide/C/virtualization.xml:1584(command)
5840
msgid ""
5841
"echo \"[ -r ~/.euca/eucarc ] && . ~/.euca/eucarc\" >> ~/.bashrc"
5842
msgstr ""
5843
5844
#: serverguide/C/virtualization.xml:1588(para)
5845
msgid "Install the required cloud user tools:"
5846
msgstr ""
5847
5848
#: serverguide/C/virtualization.xml:1592(command)
5849
msgid "sudo apt-get install euca2ools"
5850
msgstr ""
5851
5852
#: serverguide/C/virtualization.xml:1596(para)
5853
msgid ""
5854
"To validate that everything is working correctly, get the local cluster "
5855
"availability details:"
5856
msgstr ""
5857
5858
#: serverguide/C/virtualization.xml:1601(command)
5859
msgid "euca-describe-availability-zones verbose"
5860
msgstr ""
5861
5862
#: serverguide/C/virtualization.xml:1602(computeroutput)
5863
#, no-wrap
5864
msgid ""
5865
"AVAILABILITYZONE myowncloud 192.168.1.1\n"
5866
"AVAILABILITYZONE |- vm types free / max cpu ram disk\n"
5867
"AVAILABILITYZONE |- m1.small 0004 / 0004 1 128 2\n"
5868
"AVAILABILITYZONE |- c1.medium 0004 / 0004 1 256 5\n"
5869
"AVAILABILITYZONE |- m1.large 0002 / 0002 2 512 10\n"
5870
"AVAILABILITYZONE |- m1.xlarge 0002 / 0002 2 1024 20\n"
5871
"AVAILABILITYZONE |- c1.xlarge 0001 / 0001 4 2048 20"
5872
msgstr ""
5873
5874
#: serverguide/C/virtualization.xml:1612(para)
5875
msgid "Your output from the above command will vary."
5876
msgstr ""
5877
5878
#: serverguide/C/virtualization.xml:1622(title)
5879
msgid "Running an Image"
5880
msgstr ""
5881
5882
#: serverguide/C/virtualization.xml:1624(para)
5883
msgid "There are multiple ways to instantiate an image in UEC:"
5884
msgstr ""
5885
5886
#: serverguide/C/virtualization.xml:1629(para)
5887
msgid "Use the command line."
5888
msgstr ""
5889
5890
#: serverguide/C/virtualization.xml:1630(para)
5891
msgid ""
5892
"Use one of the UEC compatible management tools such as "
5893
"<emphasis>Landscape</emphasis>."
5894
msgstr ""
5895
5896
#: serverguide/C/virtualization.xml:1632(para)
5897
msgid ""
5898
"Use the <ulink "
5899
"url=\"https://help.ubuntu.com/community/UEC/ElasticFox\">ElasticFox</ulink> "
5900
"extension to Firefox."
5901
msgstr ""
5902
5903
#: serverguide/C/virtualization.xml:1638(para)
5904
msgid "Here we will describe the process from the command line:"
5905
msgstr ""
5906
5907
#: serverguide/C/virtualization.xml:1644(para)
5908
msgid ""
5909
"Before running an instance of your image, you should first create a "
5910
"<emphasis>keypair</emphasis> (ssh key) that you can use to log into your "
5911
"instance as root, once it boots. The key is stored, so you will only have to "
5912
"do this once."
5913
msgstr ""
5914
5915
#: serverguide/C/virtualization.xml:1648(para)
5916
msgid "Run the following command:"
5917
msgstr ""
5918
5919
#: serverguide/C/virtualization.xml:1651(programlisting)
5920
#, no-wrap
5921
msgid ""
5922
"\n"
5923
"if [ ! -e ~/.euca/mykey.priv ]; then\n"
5924
" touch ~/.euca/mykey.priv\n"
5925
" chmod 0600 ~/.euca/mykey.priv\n"
5926
" euca-add-keypair mykey > ~/.euca/mykey.priv\n"
5927
"fi\n"
5928
msgstr ""
5929
5930
#: serverguide/C/virtualization.xml:1659(para)
5931
msgid ""
5932
"You can call your key whatever you like (in this example, the key is called "
5933
"<emphasis>'mykey'</emphasis>), but remember what it is called. If you "
5934
"forget, you can always run <command>euca-describe-keypairs</command> to get "
5935
"a list of created keys stored in the system."
5936
msgstr ""
5937
5938
#: serverguide/C/virtualization.xml:1666(para)
5939
msgid "You must also allow access to port 22 in your instances:"
5940
msgstr ""
5941
5942
#: serverguide/C/virtualization.xml:1670(command)
5943
msgid "euca-describe-groups"
5944
msgstr ""
5945
5946
#: serverguide/C/virtualization.xml:1671(command)
5947
msgid "euca-authorize default -P tcp -p 22 -s 0.0.0.0/0"
5948
msgstr ""
5949
5950
#: serverguide/C/virtualization.xml:1675(para)
5951
msgid "Next, you can create instances of your registered image:"
5952
msgstr ""
5953
5954
#: serverguide/C/virtualization.xml:1679(command)
5955
msgid "euca-run-instances $EMI -k mykey -t c1.medium"
5956
msgstr ""
5957
5958
#: serverguide/C/virtualization.xml:1682(para)
5959
msgid ""
5960
"If you receive an error regarding <emphasis>image_id</emphasis>, you may "
5961
"find it by viewing Images page or click <emphasis>\"How to Run\"</emphasis> "
5962
"on the <emphasis>Store</emphasis> page to see the sample command."
5963
msgstr ""
5964
5965
#: serverguide/C/virtualization.xml:1689(para)
5966
msgid ""
5967
"The first time you run an instance, the system will be setting up caches for "
5968
"the image from which it will be created. This can often take some time the "
5969
"first time an instance is run given that VM images are usually quite large."
5970
msgstr ""
5971
5972
#: serverguide/C/virtualization.xml:1693(para)
5973
msgid "To monitor the state of your instance, run:"
5974
msgstr ""
5975
5976
#: serverguide/C/virtualization.xml:1697(command)
5977
msgid "watch -n5 euca-describe-instances"
5978
msgstr ""
5979
5980
#: serverguide/C/virtualization.xml:1699(para)
5981
msgid ""
5982
"In the output, you should see information about the instance, including its "
5983
"state. While first-time caching is being performed, the instance's state "
5984
"will be <emphasis>'pending'</emphasis>."
5985
msgstr ""
5986
5987
#: serverguide/C/virtualization.xml:1705(para)
5988
msgid ""
5989
"When the instance is fully started, the above state will become "
5990
"<emphasis>'running'</emphasis>. Look at the IP address assigned to your "
5991
"instance in the output, then connect to it:"
5992
msgstr ""
5993
5994
#: serverguide/C/virtualization.xml:1710(command)
5995
msgid ""
5996
"IPADDR=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | awk "
5997
"'{print $4}')"
5998
msgstr ""
5999
6000
#: serverguide/C/virtualization.xml:1711(command)
6001
msgid "ssh -i ~/.euca/mykey.priv ubuntu@$IPADDR"
6002
msgstr ""
6003
6004
#: serverguide/C/virtualization.xml:1715(para)
6005
msgid ""
6006
"And when you are done with this instance, exit your SSH connection, then "
6007
"terminate your instance:"
6008
msgstr ""
6009
6010
#: serverguide/C/virtualization.xml:1719(command)
6011
msgid ""
6012
"INSTANCEID=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | "
6013
"awk '{print $2}')"
6014
msgstr ""
6015
6016
#: serverguide/C/virtualization.xml:1720(command)
6017
msgid "euca-terminate-instances $INSTANCEID"
6018
msgstr ""
6019
6020
#: serverguide/C/virtualization.xml:1727(title)
6021
msgid "Install an Image from the Store"
6022
msgstr ""
6023
6024
#: serverguide/C/virtualization.xml:1729(para)
6025
msgid ""
6026
"The following is by far the simplest way to install an image. However, "
6027
"advanced users may be interested in learning how to <ulink "
6028
"url=\"https://help.ubuntu.com/community/UEC/BundlingImages\">Bundle their "
6029
"own image</ulink>."
6030
msgstr ""
6031
6032
#: serverguide/C/virtualization.xml:1734(para)
6033
msgid ""
6034
"The simplest way to add an image to <application>UEC</application> is to "
6035
"install it from the Image Store on the UEC web interface."
6036
msgstr ""
6037
6038
#: serverguide/C/virtualization.xml:1740(para)
6039
msgid ""
6040
"Access the web interface at the following URL (Make sure you specify https):"
6041
msgstr ""
6042
6043
#: serverguide/C/virtualization.xml:1748(para)
6044
msgid ""
6045
"Enter your login and password (if requested, as you may still be logged in "
6046
"from earlier)."
6047
msgstr ""
6048
6049
#: serverguide/C/virtualization.xml:1753(para)
6050
msgid "Click on the <emphasis>Store</emphasis> tab."
6051
msgstr ""
6052
6053
#: serverguide/C/virtualization.xml:1758(para)
6054
msgid "Browse available images."
6055
msgstr ""
6056
6057
#: serverguide/C/virtualization.xml:1763(para)
6058
msgid "Click on <emphasis>install</emphasis> for the image you want."
6059
msgstr ""
6060
6061
#: serverguide/C/virtualization.xml:1769(para)
6062
msgid ""
6063
"Once the image has been downloaded and installed, you can click on "
6064
"<emphasis>\"How to run?\"</emphasis> that will be displayed below the image "
6065
"button to view the command to execute to instantiate (start) this image. The "
6066
"image will also appear on the list given on the <emphasis>Image</emphasis> "
6067
"tab."
6068
msgstr ""
6069
6070
#: serverguide/C/virtualization.xml:1777(title) serverguide/C/dns.xml:619(title)
6071
msgid "More Information"
6072
msgstr ""
6073
6074
#: serverguide/C/virtualization.xml:1779(para)
6075
msgid ""
6076
"How to use the <ulink "
6077
"url=\"https://help.ubuntu.com/community/UEC/StorageController\">Storage "
6078
"Controller</ulink>"
6079
msgstr ""
6080
6081
#: serverguide/C/virtualization.xml:1783(para)
6082
msgid "Controlling eucalyptus services:"
6083
msgstr ""
6084
6085
#: serverguide/C/virtualization.xml:1788(para)
6086
msgid ""
6087
"sudo service eucalyptus [start|stop|restart] (on the CLC/CC/SC/Walrus side)"
6088
msgstr ""
6089
6090
#: serverguide/C/virtualization.xml:1789(para)
6091
msgid "sudo service eucalyptus-nc [start|stop|restart] (on the Node side)"
6092
msgstr ""
6093
6094
#: serverguide/C/virtualization.xml:1792(para)
6095
msgid "Locations of some important files:"
6096
msgstr ""
6097
6098
#: serverguide/C/virtualization.xml:1799(emphasis)
6099
msgid "Log files:"
6100
msgstr ""
6101
6102
#: serverguide/C/virtualization.xml:1802(para)
6103
msgid "/var/log/eucalyptus"
6104
msgstr ""
6105
6106
#: serverguide/C/virtualization.xml:1807(emphasis)
6107
msgid "Configuration files:"
6108
msgstr ""
6109
6110
#: serverguide/C/virtualization.xml:1810(para)
6111
msgid "/etc/eucalyptus"
6112
msgstr ""
6113
6114
#: serverguide/C/virtualization.xml:1815(emphasis)
6115
msgid "Database:"
6116
msgstr ""
6117
6118
#: serverguide/C/virtualization.xml:1818(para)
6119
msgid "/var/lib/eucalyptus/db"
6120
msgstr ""
6121
6122
#: serverguide/C/virtualization.xml:1823(emphasis)
6123
msgid "Keys:"
6124
msgstr ""
6125
6126
#: serverguide/C/virtualization.xml:1826(para)
6127
msgid "/var/lib/eucalyptus"
6128
msgstr ""
6129
6130
#: serverguide/C/virtualization.xml:1827(para)
6131
msgid "/var/lib/eucalyptus/.ssh"
6132
msgstr ""
6133
6134
#: serverguide/C/virtualization.xml:1833(para)
6135
msgid ""
6136
"Don't forget to source your <filename>~/.euca/eucarc</filename> before "
6137
"running the client tools."
6138
msgstr ""
6139
6140
#: serverguide/C/virtualization.xml:1844(para)
6141
msgid ""
6142
"For information on loading instances see the <ulink "
6143
"url=\"https://help.ubuntu.com/community/Eucalyptus\">Eucalyptus Wiki</ulink> "
6144
"page."
6145
msgstr ""
6146
6147
#: serverguide/C/virtualization.xml:1849(para)
6148
msgid ""
6149
"<ulink url=\"http://open.eucalyptus.com/\">Eucalyptus Project Site (forums, "
6150
"documentation, downloads)</ulink>."
6151
msgstr ""
6152
6153
#: serverguide/C/virtualization.xml:1854(para)
6154
msgid ""
6155
"<ulink url=\"https://launchpad.net/eucalyptus/\">Eucalyptus on Launchpad "
6156
"(bugs, code)</ulink>."
6157
msgstr ""
6158
6159
#: serverguide/C/virtualization.xml:1859(para)
6160
msgid ""
6161
"<ulink "
6162
"url=\"http://open.eucalyptus.com/wiki/EucalyptusTroubleshooting_v1.5\">Eucaly"
6163
"ptus Troubleshooting (1.5)</ulink>."
6164
msgstr ""
6165
6166
#: serverguide/C/virtualization.xml:1864(para)
6167
msgid ""
6168
"<ulink url=\"http://support.rightscale.com/2._References/02-"
6169
"Cloud_Infrastructures/Eucalyptus/03-"
6170
"Administration_Guide/Register_with_RightScale\"> Register your cloud with "
6171
"RightScale</ulink>."
6172
msgstr ""
6173
6174
#: serverguide/C/virtualization.xml:1870(para)
6175
msgid ""
6176
"You can also find help in the <emphasis>#ubuntu-virt</emphasis>, "
6177
"<emphasis>#eucalyptus</emphasis>, and <emphasis>#ubuntu-server</emphasis> "
6178
"IRC channels on <ulink url=\"http://freenode.net\">Freenode</ulink>."
6179
msgstr ""
6180
6181
#: serverguide/C/virtualization.xml:1879(title)
6182
msgid "Glossary"
6183
msgstr ""
6184
6185
#: serverguide/C/virtualization.xml:1881(para)
6186
msgid ""
6187
"The Ubuntu Enterprise Cloud documentation uses terminology that might be "
6188
"unfamiliar to some readers. This page is intended to provide a glossary of "
6189
"such terms and acronyms."
6190
msgstr ""
6191
6192
#: serverguide/C/virtualization.xml:1888(para)
6193
msgid ""
6194
"<emphasis>Cloud</emphasis> - A federated set of physical machines that offer "
6195
"computing resources through virtual machines, provisioned and recollected "
6196
"dynamically."
6197
msgstr ""
6198
6199
#: serverguide/C/virtualization.xml:1894(para)
6200
msgid ""
6201
"<emphasis>Cloud Controller (CLC)</emphasis> - Eucalyptus component that "
6202
"provides the web UI (an https server on port 8443), and implements the "
6203
"Amazon EC2 API. There should be only one Cloud Controller in an installation "
6204
"of UEC. This service is provided by the Ubuntu <application>eucalyptus-"
6205
"cloud</application> package."
6206
msgstr ""
6207
6208
#: serverguide/C/virtualization.xml:1901(para)
6209
msgid ""
6210
"<emphasis>Cluster</emphasis> - A collection of nodes, associated with a "
6211
"Cluster Controller. There can be more than one Cluster in an installation of "
6212
"UEC. Clusters are sometimes physically separate sets of nodes. (e.g. floor1, "
6213
"floor2, floor2)."
6214
msgstr ""
6215
6216
#: serverguide/C/virtualization.xml:1907(para)
6217
msgid ""
6218
"<emphasis>Cluster Controller (CC)</emphasis> - Eucalyptus component that "
6219
"manages collections of node resources. This service is provided by the "
6220
"Ubuntu <application>eucalyptus-cc</application> package."
6221
msgstr ""
6222
6223
#: serverguide/C/virtualization.xml:1913(para)
6224
msgid "<emphasis>EBS</emphasis> - Elastic Block Storage."
6225
msgstr ""
6226
6227
#: serverguide/C/virtualization.xml:1918(para)
6228
msgid ""
6229
"<emphasis>EC2</emphasis> - Elastic Compute Cloud. Amazon's pay-by-the-hour, "
6230
"pay-by-the-gigabyte public cloud computing offering."
6231
msgstr ""
6232
6233
#: serverguide/C/virtualization.xml:1923(para)
6234
msgid "<emphasis>EKI</emphasis> - Eucalyptus Kernel Image."
6235
msgstr ""
6236
6237
#: serverguide/C/virtualization.xml:1928(para)
6238
msgid "<emphasis>EMI</emphasis> - Eucalyptus Machine Image."
6239
msgstr ""
6240
6241
#: serverguide/C/virtualization.xml:1933(para)
6242
msgid "<emphasis>ERI</emphasis> - Eucalyptus Ramdisk Image."
6243
msgstr ""
6244
6245
#: serverguide/C/virtualization.xml:1938(para)
6246
msgid ""
6247
"<emphasis>Eucalyptus</emphasis> - Elastic Utility Computing Architecture for "
6248
"Linking Your Programs To Useful Systems. An open source project originally "
6249
"from the University of California at Santa Barbara, now supported by "
6250
"Eucalyptus Systems, a Canonical Partner."
6251
msgstr ""
6252
6253
#: serverguide/C/virtualization.xml:1945(para)
6254
msgid ""
6255
"<emphasis>Front-end</emphasis> - Physical machine hosting one (or more) of "
6256
"the high level Eucalyptus components (cloud, walrus, storage controller, "
6257
"cluster controller)."
6258
msgstr ""
6259
6260
#: serverguide/C/virtualization.xml:1951(para)
6261
msgid ""
6262
"<emphasis>Node</emphasis> - A node is a physical machine that's capable of "
6263
"running virtual machines, running a node controller. Within Ubuntu, this "
6264
"generally means that the CPU has VT extensions, and can run the KVM "
6265
"hypervisor."
6266
msgstr ""
6267
6268
#: serverguide/C/virtualization.xml:1957(para)
6269
msgid ""
6270
"<emphasis>Node Controller (NC)</emphasis> - Eucalyptus component that runs "
6271
"on nodes which host the virtual machines that comprise the cloud. This "
6272
"service is provided by the Ubuntu package <application>eucalyptus-"
6273
"nc</application>."
6274
msgstr ""
6275
6276
#: serverguide/C/virtualization.xml:1963(para)
6277
msgid ""
6278
"<emphasis>S3</emphasis> - Simple Storage Service. Amazon's pay-by-the-"
6279
"gigabyte persistent storage solution for EC2."
6280
msgstr ""
6281
6282
#: serverguide/C/virtualization.xml:1968(para)
6283
msgid ""
6284
"<emphasis>Storage Controller (SC)</emphasis> - Eucalyptus component that "
6285
"manages dynamic block storage services (EBS). Each 'cluster' in a Eucalyptus "
6286
"installation can have its own Storage Controller. This component is provided "
6287
"by the <application>eucalyptus-sc</application> package."
6288
msgstr ""
6289
6290
#: serverguide/C/virtualization.xml:1975(para)
6291
msgid ""
6292
"<emphasis>UEC</emphasis> - Ubuntu Enterprise Cloud. Ubuntu's cloud computing "
6293
"solution, based on Eucalyptus."
6294
msgstr ""
6295
6296
#: serverguide/C/virtualization.xml:1980(para)
6297
msgid "<emphasis>VM</emphasis> - Virtual Machine."
6298
msgstr ""
6299
6300
#: serverguide/C/virtualization.xml:1985(para)
6301
msgid ""
6302
"<emphasis>VT</emphasis> - Virtualization Technology. An optional feature of "
6303
"some modern CPUs, allowing for accelerated virtual machine hosting."
6304
msgstr ""
6305
6306
#: serverguide/C/virtualization.xml:1990(para)
6307
msgid ""
6308
"<emphasis>Walrus</emphasis> - Eucalyptus component that implements the "
6309
"Amazon S3 API, used for storing VM images and user storage using S3 bucket "
6310
"put/get abstractions."
6311
msgstr ""
6312
6313
#: serverguide/C/virtualization.xml:2000(title)
6314
msgid "OpenNebula"
6315
msgstr ""
6316
6317
#: serverguide/C/virtualization.xml:2002(para)
6318
msgid ""
6319
"<application>OpenNebula</application> allows virtual machines to be placed "
6320
"and re-placed dynamically on a pool of physical resources. This allows a "
6321
"virtual machine to be hosted from any location available."
6322
msgstr ""
6323
6324
#: serverguide/C/virtualization.xml:2007(para)
6325
msgid ""
6326
"This section will detail configuring an OpenNebula cluster using three "
6327
"machines: one <emphasis>Front-End</emphasis> host, and two <emphasis>Compute "
6328
"Nodes</emphasis> used to run the virtual machines. The Compute Nodes will "
6329
"also need a bridge configured to allow the virtual machines access to the "
6330
"local network. For details see <xref linkend=\"bridging\"/>."
6331
msgstr ""
6332
6333
#: serverguide/C/virtualization.xml:2016(para)
6334
msgid "First, from a terminal on the Front-End enter:"
6335
msgstr ""
6336
6337
#: serverguide/C/virtualization.xml:2021(command)
6338
msgid "sudo apt-get install opennebula"
6339
msgstr ""
6340
6341
#: serverguide/C/virtualization.xml:2024(para)
6342
msgid "On each Compute Node install:"
6343
msgstr ""
6344
6345
#: serverguide/C/virtualization.xml:2029(command)
6346
msgid "sudo apt-get install opennebula-node"
6347
msgstr ""
6348
6349
#: serverguide/C/virtualization.xml:2032(para)
6350
msgid ""
6351
"In order to copy SSH keys, the <emphasis>oneadmin</emphasis> user will need "
6352
"to have a password. On each machine execute:"
6353
msgstr ""
6354
6355
#: serverguide/C/virtualization.xml:2037(command)
6356
msgid "sudo passwd oneadmin"
6357
msgstr ""
6358
6359
#: serverguide/C/virtualization.xml:2040(para)
6360
msgid ""
6361
"Next, copy the <emphasis>oneadmin</emphasis> user's SSH key to the Compute "
6362
"Nodes, and to the Front-End's <filename>authorized_keys</filename> file:"
6363
msgstr ""
6364
6365
#: serverguide/C/virtualization.xml:2045(command)
6366
msgid ""
6367
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6368
"oneadmin@node01:/var/lib/one/.ssh/authorized_keys"
6369
msgstr ""
6370
6371
#: serverguide/C/virtualization.xml:2046(command)
6372
msgid ""
6373
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
6374
"oneadmin@node02:/var/lib/one/.ssh/authorized_keys"
6375
msgstr ""
6376
6377
#: serverguide/C/virtualization.xml:2047(command)
6378
msgid ""
6379
"sudo sh -c \"cat /var/lib/one/.ssh/id_rsa.pub >> "
6380
"/var/lib/one/.ssh/authorized_keys\""
6381
msgstr ""
6382
6383
#: serverguide/C/virtualization.xml:2050(para)
6384
msgid ""
6385
"The SSH key for the Compute Nodes needs to be added to the "
6386
"<filename>/etc/ssh/ssh_known_hosts</filename> file on the Front-End host. To "
6387
"accomplish this <application>ssh</application> to each Compute Node as a "
6388
"user other than <emphasis>oneadmin</emphasis>. Then exit from the SSH "
6389
"session, and execute the following to copy the SSH key from "
6390
"<filename>~/.ssh/known_hosts</filename> to "
6391
"<filename>/etc/ssh/ssh_known_hosts</filename>:"
6392
msgstr ""
6393
6394
#: serverguide/C/virtualization.xml:2057(command)
6395
msgid ""
6396
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node01 1>> "
6397
"/etc/ssh/ssh_known_hosts\""
6398
msgstr ""
6399
6400
#: serverguide/C/virtualization.xml:2058(command)
6401
msgid ""
6402
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node02 1>> "
6403
"/etc/ssh/ssh_known_hosts\""
6404
msgstr ""
6405
6406
#: serverguide/C/virtualization.xml:2062(para)
6407
msgid ""
6408
"Replace <emphasis>node01</emphasis> and <emphasis>node02</emphasis> with the "
6409
"appropriate host names."
6410
msgstr ""
6411
6412
#: serverguide/C/virtualization.xml:2067(para)
6413
msgid ""
6414
"This allows the <emphasis>oneadmin</emphasis> to use "
6415
"<application>scp</application>, without a password or manual intervention, "
6416
"to deploy an image to the Compute Nodes."
6417
msgstr ""
6418
6419
#: serverguide/C/virtualization.xml:2072(para)
6420
msgid ""
6421
"On the Front-End create a directory to store the VM images, giving the "
6422
"<emphasis>oneadmin</emphasis> user access to the directory:"
6423
msgstr ""
6424
6425
#: serverguide/C/virtualization.xml:2077(command)
6426
msgid "sudo mkdir /var/lib/one/images"
6427
msgstr ""
6428
6429
#: serverguide/C/virtualization.xml:2078(command)
6430
msgid "sudo chown oneadmin /var/lib/one/images/"
6431
msgstr ""
6432
6433
#: serverguide/C/virtualization.xml:2081(para)
6434
msgid ""
6435
"Finally, copy a virtual machine disk file into "
6436
"<filename>/var/lib/one/images</filename>. You can create an Ubuntu virtual "
6437
"machine using <application>vmbuilder</application>, see <xref linkend=\"jeos-"
6438
"and-vmbuilder\"/> for details."
6439
msgstr ""
6440
6441
#: serverguide/C/virtualization.xml:2090(para)
6442
msgid ""
6443
"The <emphasis>OpenNebula Cluster</emphasis> is now ready to be configured, "
6444
"and virtual machines added to the cluster."
6445
msgstr ""
6446
6447
#: serverguide/C/virtualization.xml:2094(para)
6448
msgid "From a terminal prompt enter:"
6449
msgstr ""
6450
6451
#: serverguide/C/virtualization.xml:2099(command)
6452
msgid "onehost create node01 im_kvm vmm_kvm tm_ssh"
6453
msgstr ""
6454
6455
#: serverguide/C/virtualization.xml:2100(command)
6456
msgid "onehost create node02 im_kvm vmm_kvm tm_ssh"
6457
msgstr ""
6458
6459
#: serverguide/C/virtualization.xml:2103(para)
6460
msgid ""
6461
"Next, create a <emphasis>Virtual Network</emphasis> template file named "
6462
"<filename>vnet01.template</filename>:"
6463
msgstr ""
6464
6465
#: serverguide/C/virtualization.xml:2107(programlisting)
6466
#, no-wrap
6467
msgid ""
6468
"\n"
6469
"NAME = \"LAN\"\n"
6470
"TYPE = RANGED\n"
6471
"BRIDGE = br0\n"
6472
"NETWORK_SIZE = C\n"
6473
"NETWORK_ADDRESS = 192.168.0.0\n"
6474
msgstr ""
6475
6476
#: serverguide/C/virtualization.xml:2116(para)
6477
msgid ""
6478
"Be sure to change <emphasis>192.168.0.0</emphasis> to your local network."
6479
msgstr ""
6480
6481
#: serverguide/C/virtualization.xml:2121(para)
6482
msgid ""
6483
"Using the <application>onevnet</application> utility, add the virtual "
6484
"network to OpenNebula:"
6485
msgstr ""
6486
6487
#: serverguide/C/virtualization.xml:2126(command)
6488
msgid "onevnet create vnet01.template"
6489
msgstr ""
6490
6491
#: serverguide/C/virtualization.xml:2129(para)
6492
msgid ""
6493
"Now create a <emphasis>VM Template</emphasis> file named "
6494
"<filename>vm01.template</filename>:"
6495
msgstr ""
6496
6497
#: serverguide/C/virtualization.xml:2133(programlisting)
6498
#, no-wrap
6499
msgid ""
6500
"\n"
6501
"NAME = vm01\n"
6502
"CPU = 0.5\n"
6503
"MEMORY = 512\n"
6504
"\n"
6505
"OS = [ BOOT = hd ]\n"
6506
"\n"
6507
"DISK = [\n"
6508
" source = \"/var/lib/one/images/vm01.qcow2\",\n"
6509
" target = \"hda\",\n"
6510
" readonly = \"no\" ]\n"
6511
"\n"
6512
"NIC = [ NETWORK=\"LAN\" ]\n"
6513
"\n"
6514
"GRAPHICS = [type=\"vnc\",listen=\"127.0.0.1\",port=\"-1\"]\n"
6515
msgstr ""
6516
6517
#: serverguide/C/virtualization.xml:2150(para)
6518
msgid "Start the virtual machine using <application>onevm</application>:"
6519
msgstr ""
6520
6521
#: serverguide/C/virtualization.xml:2155(command)
6522
msgid "onevm submit vm01.template"
6523
msgstr ""
6524
6525
#: serverguide/C/virtualization.xml:2158(para)
6526
msgid ""
6527
"Use the <application>onevm list</application> option to view information "
6528
"about virtual machines. Also, the <application>onevm show vm01</application> "
6529
"option will display more details about a specific virtual machine."
6530
msgstr ""
6531
6532
#: serverguide/C/virtualization.xml:2169(para)
6533
msgid ""
6534
"See the <ulink "
6535
"url=\"http://www.opennebula.org/doku.php?id=start\">OpenNebula website</ulink"
6536
"> for more information."
6537
msgstr ""
6538
6539
#: serverguide/C/virtualization.xml:2174(para)
6540
msgid ""
6541
"You can also find help in the <emphasis>#ubuntu-virt</emphasis> and "
6542
"<emphasis>#ubuntu-server</emphasis> IRC channels on <ulink "
6543
"url=\"http://freenode.net\">Freenode</ulink>."
6544
msgstr ""
6545
6546
#: serverguide/C/virtualization.xml:2180(para)
6547
msgid ""
6548
"Also, the <ulink "
6549
"url=\"https://help.ubuntu.com/community/OpenNebula\">OpenNebula Ubuntu "
6550
"Wiki</ulink> page has more details."
6551
msgstr ""
6552
6553
#: serverguide/C/vcs.xml:13(title)
6554
msgid "Version Control System"
6555
msgstr ""
6556
6557
#: serverguide/C/vcs.xml:14(para)
6558
msgid ""
6559
"Version control is the art of managing changes to information. It has long "
6560
"been a critical tool for programmers, who typically spend their time making "
6561
"small changes to software and then undoing those changes the next day. But "
6562
"the usefulness of version control software extends far beyond the bounds of "
6563
"the software development world. Anywhere you can find people using computers "
6564
"to manage information that changes often, there is room for version control."
6565
msgstr ""
6566
6567
#: serverguide/C/vcs.xml:17(title)
6568
msgid "Bazaar"
6569
msgstr ""
6570
6571
#: serverguide/C/vcs.xml:18(para)
6572
msgid ""
6573
"Bazaar is a new version control system sponsored by Canonical, the "
6574
"commercial company behind Ubuntu. Unlike Subversion and CVS that only "
6575
"support a central repository model, Bazaar also supports "
6576
"<emphasis>distributed version control</emphasis>, giving people the ability "
6577
"to collaborate more efficiently. In particular, Bazaar is designed to "
6578
"maximize the level of community participation in open source projects."
6579
msgstr ""
6580
6581
#: serverguide/C/vcs.xml:29(para)
6582
msgid ""
6583
"At a terminal prompt, enter the following command to install "
6584
"<application>bzr</application>: <screen>\n"
6585
"<command>sudo apt-get install bzr</command>\n"
6586
"</screen>"
6587
msgstr ""
6588
6589
#: serverguide/C/vcs.xml:40(para)
6590
msgid ""
6591
"To introduce yourself to <application>bzr</application>, use the "
6592
"<emphasis>whoami</emphasis> command like this: <screen>\n"
6593
"<command>$ bzr whoami 'Joe Doe <joe.doe@gmail.com>'</command>\n"
6594
"</screen>"
6595
msgstr ""
6596
6597
#: serverguide/C/vcs.xml:49(title)
6598
msgid "Learning Bazaar"
6599
msgstr ""
6600
6601
#: serverguide/C/vcs.xml:50(para)
6602
msgid ""
6603
"Bazaar comes with bundled documentation installed into "
6604
"<application>/usr/share/doc/bzr/html</application> by default. The tutorial "
6605
"is a good place to start. The <application>bzr</application> command also "
6606
"comes with built-in help: <screen>\n"
6607
"<command>$ bzr help</command>\n"
6608
"</screen>"
6609
msgstr ""
6610
6611
#: serverguide/C/vcs.xml:60(para)
6612
msgid ""
6613
"To learn more about the <emphasis>foo</emphasis> command: <screen>\n"
6614
"<command>$ bzr help foo</command>\n"
6615
"</screen>"
6616
msgstr ""
6617
6618
#: serverguide/C/vcs.xml:68(title)
6619
msgid "Launchpad Integration"
6620
msgstr ""
6621
6622
#: serverguide/C/vcs.xml:69(para)
6623
msgid ""
6624
"While highly useful as a stand-alone system, Bazaar has good, optional "
6625
"integration with <ulink url=\"https://launchpad.net/\">Launchpad</ulink>, "
6626
"the collaborative development system used by Canonical and the broader open "
6627
"source community to manage and extend Ubuntu itself. For information on how "
6628
"Bazaar can be used with Launchpad to collaborate on open source projects, "
6629
"see <ulink url=\"http://bazaar-vcs.org/LaunchpadIntegration/\"> "
6630
"http://bazaar-vcs.org/LaunchpadIntegration</ulink>."
6631
msgstr ""
6632
6633
#: serverguide/C/vcs.xml:81(title)
6634
msgid "Subversion"
6635
msgstr ""
6636
6637
#: serverguide/C/vcs.xml:82(para)
6638
msgid ""
6639
"Subversion is an open source version control system. Using Subversion, you "
6640
"can record the history of source files and documents. It manages files and "
6641
"directories over time. A tree of files is placed into a central repository. "
6642
"The repository is much like an ordinary file server, except that it "
6643
"remembers every change ever made to files and directories."
6644
msgstr ""
6645
6646
#: serverguide/C/vcs.xml:87(para)
6647
msgid ""
6648
"To access Subversion repository using the HTTP protocol, you must install "
6649
"and configure a web server. Apache2 is proven to work with Subversion. "
6650
"Please refer to the HTTP subsection in the Apache2 section to install and "
6651
"configure Apache2. To access the Subversion repository using the HTTPS "
6652
"protocol, you must install and configure a digital certificate in your "
6653
"Apache 2 web server. Please refer to the HTTPS subsection in the Apache2 "
6654
"section to install and configure the digital certificate."
6655
msgstr ""
6656
6657
#: serverguide/C/vcs.xml:96(para)
6658
msgid ""
6659
"To install Subversion, run the following command from a terminal prompt:"
6660
msgstr ""
6661
6662
#: serverguide/C/vcs.xml:101(command)
6663
msgid "sudo apt-get install subversion libapache2-svn"
6664
msgstr ""
6665
6666
#: serverguide/C/vcs.xml:108(para)
6667
msgid ""
6668
"This step assumes you have installed above mentioned packages on your "
6669
"system. This section explains how to create a Subversion repository and "
6670
"access the project."
6671
msgstr ""
6672
6673
#: serverguide/C/vcs.xml:111(title)
6674
msgid "Create Subversion Repository"
6675
msgstr ""
6676
6677
#: serverguide/C/vcs.xml:112(para)
6678
msgid ""
6679
"The Subversion repository can be created using the following command from a "
6680
"terminal prompt:"
6681
msgstr ""
6682
6683
#: serverguide/C/vcs.xml:116(command)
6684
msgid "svnadmin create /path/to/repos/project"
6685
msgstr ""
6686
6687
#: serverguide/C/vcs.xml:121(title)
6688
msgid "Importing Files"
6689
msgstr ""
6690
6691
#: serverguide/C/vcs.xml:122(para)
6692
msgid ""
6693
"Once you create the repository you can <emphasis>import</emphasis> files "
6694
"into the repository. To import a directory, enter the following from a "
6695
"terminal prompt: <screen>\n"
6696
"<command>svn import /path/to/import/directory "
6697
"file:///path/to/repos/project</command>\n"
6698
"</screen>"
6699
msgstr ""
6700
6701
#: serverguide/C/vcs.xml:134(title) serverguide/C/vcs.xml:139(title)
6702
msgid "Access Methods"
6703
msgstr ""
6704
6705
#: serverguide/C/vcs.xml:135(para)
6706
msgid ""
6707
"Subversion repositories can be accessed (checked out) through many different "
6708
"methods --on local disk, or through various network protocols. A repository "
6709
"location, however, is always a URL. The table describes how different URL "
6710
"schemes map to the available access methods."
6711
msgstr ""
6712
6713
#: serverguide/C/vcs.xml:146(para)
6714
msgid "Schema"
6715
msgstr ""
6716
6717
#: serverguide/C/vcs.xml:147(para)
6718
msgid "Access Method"
6719
msgstr ""
6720
6721
#: serverguide/C/vcs.xml:152(para)
6722
msgid "file://"
6723
msgstr ""
6724
6725
#: serverguide/C/vcs.xml:153(para)
6726
msgid "direct repository access (on local disk)"
6727
msgstr ""
6728
6729
#: serverguide/C/vcs.xml:156(para)
6730
msgid "http://"
6731
msgstr ""
6732
6733
#: serverguide/C/vcs.xml:157(para)
6734
msgid "Access via WebDAV protocol to Subversion-aware Apache2 web server"
6735
msgstr ""
6736
6737
#: serverguide/C/vcs.xml:160(para)
6738
msgid "https://"
6739
msgstr ""
6740
6741
#: serverguide/C/vcs.xml:161(para)
6742
msgid "Same as http://, but with SSL encryption"
6743
msgstr ""
6744
6745
#: serverguide/C/vcs.xml:164(para)
6746
msgid "svn://"
6747
msgstr ""
6748
6749
#: serverguide/C/vcs.xml:165(para)
6750
msgid "Access via custom protocol to an svnserve server"
6751
msgstr ""
6752
6753
#: serverguide/C/vcs.xml:168(para)
6754
msgid "svn+ssh://"
6755
msgstr ""
6756
6757
#: serverguide/C/vcs.xml:169(para)
6758
msgid "Same as svn://, but through an SSH tunnel"
6759
msgstr ""
6760
6761
#: serverguide/C/vcs.xml:175(para)
6762
msgid ""
6763
"In this section, we will see how to configure Subversion for all these "
6764
"access methods. Here, we cover the basics. For more advanced usage details, "
6765
"refer to the <ulink url=\"http://svnbook.red-bean.com/\">svn book</ulink>."
6766
msgstr ""
6767
6768
#: serverguide/C/vcs.xml:182(title)
6769
msgid "Direct repository access (file://)"
6770
msgstr ""
6771
6772
#: serverguide/C/vcs.xml:183(para)
6773
msgid ""
6774
"This is the simplest of all access methods. It does not require any "
6775
"Subversion server process to be running. This access method is used to "
6776
"access Subversion from the same machine. The syntax of the command, entered "
6777
"at a terminal prompt, is as follows:"
6778
msgstr ""
6779
6780
#: serverguide/C/vcs.xml:190(command)
6781
msgid "svn co file:///path/to/repos/project"
6782
msgstr ""
6783
6784
#: serverguide/C/vcs.xml:193(para)
6785
msgid "or"
6786
msgstr "o"
6787
6788
#: serverguide/C/vcs.xml:196(command)
6789
msgid "svn co file://localhost/path/to/repos/project"
6790
msgstr ""
6791
6792
#: serverguide/C/vcs.xml:200(para)
6793
msgid ""
6794
"If you do not specify the hostname, there are three forward slashes (///) -- "
6795
"two for the protocol (file, in this case) plus the leading slash in the "
6796
"path. If you specify the hostname, you must use two forward slashes (//)."
6797
msgstr ""
6798
6799
#: serverguide/C/vcs.xml:202(para)
6800
msgid ""
6801
"The repository permissions depend on filesystem permissions. If the user has "
6802
"read/write permission, he can checkout from and commit to the repository."
6803
msgstr ""
6804
6805
#: serverguide/C/vcs.xml:205(title)
6806
msgid "Access via WebDAV protocol (http://)"
6807
msgstr ""
6808
6809
#: serverguide/C/vcs.xml:206(para)
6810
msgid ""
6811
"To access the Subversion repository via WebDAV protocol, you must configure "
6812
"your Apache 2 web server. Add the following snippet between the "
6813
"<emphasis><VirtualHost></emphasis> and "
6814
"<emphasis></VirtualHost></emphasis> elements in "
6815
"<filename>/etc/apache2/sites-available/default</filename>, or another "
6816
"VirtualHost file:"
6817
msgstr ""
6818
6819
#: serverguide/C/vcs.xml:212(programlisting)
6820
#, no-wrap
6821
msgid ""
6822
"\n"
6823
" <Location /svn>\n"
6824
" DAV svn\n"
6825
" SVNPath /home/svn\n"
6826
" AuthType Basic\n"
6827
" AuthName \"Your repository name\"\n"
6828
" AuthUserFile /etc/subversion/passwd\n"
6829
" Require valid-user\n"
6830
" </Location> \n"
6831
msgstr ""
6832
6833
#: serverguide/C/vcs.xml:223(para)
6834
msgid ""
6835
"The above configuration snippet assumes that Subversion repositories are "
6836
"created under <filename>/home/svn/</filename> directory using "
6837
"<command>svnadmin</command> command. They can be accessible using "
6838
"<command>http://hostname/svn/repos_name</command> url."
6839
msgstr ""
6840
6841
#: serverguide/C/vcs.xml:229(para)
6842
msgid ""
6843
"To import or commit files to your Subversion repository over HTTP, the "
6844
"repository should be owned by the HTTP user. In Ubuntu systems, normally the "
6845
"HTTP user is <command>www-data</command>. To change the ownership of the "
6846
"repository files enter the following command from terminal prompt:"
6847
msgstr ""
6848
6849
#: serverguide/C/vcs.xml:238(command)
6850
msgid "sudo chown -R www-data:www-data /path/to/repos"
6851
msgstr ""
6852
6853
#: serverguide/C/vcs.xml:241(para)
6854
msgid ""
6855
"By changing the ownership of repository as <command>www-data</command> you "
6856
"will not be able to import or commit files into the repository by running "
6857
"<command>svn import file:///</command> command as any user other than "
6858
"<command>www-data</command>."
6859
msgstr ""
6860
6861
#: serverguide/C/vcs.xml:250(para)
6862
msgid ""
6863
"Next, you must create the <filename>/etc/subversion/passwd</filename> file "
6864
"that will contain user authentication details. To create a file issue the "
6865
"following command at a command prompt (which will create the file and add "
6866
"the first user):"
6867
msgstr ""
6868
6869
#: serverguide/C/vcs.xml:256(command)
6870
msgid "sudo htpasswd -c /etc/subversion/passwd user_name"
6871
msgstr ""
6872
6873
#: serverguide/C/vcs.xml:259(para)
6874
msgid ""
6875
"To add additional users omit the <emphasis>\"-c\"</emphasis> option as this "
6876
"option replaces the old file. Instead use this form:"
6877
msgstr ""
6878
6879
#: serverguide/C/vcs.xml:264(command)
6880
msgid "sudo htpasswd /etc/subversion/password user_name"
6881
msgstr ""
6882
6883
#: serverguide/C/vcs.xml:268(para)
6884
msgid ""
6885
"This command will prompt you to enter the password. Once you enter the "
6886
"password, the user is added. Now, to access the repository you can run the "
6887
"following command:"
6888
msgstr ""
6889
6890
#: serverguide/C/vcs.xml:269(command)
6891
msgid "svn co http://servername/svn"
6892
msgstr ""
6893
6894
#: serverguide/C/vcs.xml:271(para)
6895
msgid ""
6896
"The password is transmitted as plain text. If you are worried about password "
6897
"snooping, you are advised to use SSL encryption. For details, please refer "
6898
"next section."
6899
msgstr ""
6900
6901
#: serverguide/C/vcs.xml:277(title)
6902
msgid "Access via WebDAV protocol with SSL encryption (https://)"
6903
msgstr ""
6904
6905
#: serverguide/C/vcs.xml:278(para)
6906
msgid ""
6907
"Accessing Subversion repository via WebDAV protocol with SSL encryption "
6908
"(https://) is similar to http:// except that you must install and configure "
6909
"the digital certificate in your Apache2 web server. To use SSL with "
6910
"Subversion add the above Apache2 configuration to "
6911
"<filename>/etc/apache2/sites-available/default-ssl</filename>. For more "
6912
"information on setting up Apache2 with SSL see <xref linkend=\"https-"
6913
"configuration\"/>."
6914
msgstr ""
6915
6916
#: serverguide/C/vcs.xml:287(para)
6917
msgid ""
6918
"You can install a digital certificate issued by a signing authority. "
6919
"Alternatively, you can install your own self-signed certificate."
6920
msgstr ""
6921
6922
#: serverguide/C/vcs.xml:292(para)
6923
msgid ""
6924
"This step assumes you have installed and configured a digital certificate in "
6925
"your Apache 2 web server. Now, to access the Subversion repository, please "
6926
"refer to the above section! The access methods are exactly the same, except "
6927
"the protocol. You must use https:// to access the Subversion repository."
6928
msgstr ""
6929
6930
#: serverguide/C/vcs.xml:302(title)
6931
msgid "Access via custom protocol (svn://)"
6932
msgstr ""
6933
6934
#: serverguide/C/vcs.xml:303(para)
6935
msgid ""
6936
"Once the Subversion repository is created, you can configure the access "
6937
"control. You can edit the <filename> "
6938
"/path/to/repos/project/conf/svnserve.conf</filename> file to configure the "
6939
"access control. For example, to set up authentication, you can uncomment the "
6940
"following lines in the configuration file:"
6941
msgstr ""
6942
6943
#: serverguide/C/vcs.xml:310(programlisting)
6944
#, no-wrap
6945
msgid ""
6946
"# [general]\n"
6947
"# password-db = passwd"
6948
msgstr ""
6949
6950
#: serverguide/C/vcs.xml:313(para)
6951
msgid ""
6952
"After uncommenting the above lines, you can maintain the user list in the "
6953
"passwd file. So, edit the file <filename>passwd </filename> in the same "
6954
"directory and add the new user. The syntax is as follows:"
6955
msgstr ""
6956
6957
#: serverguide/C/vcs.xml:319(programlisting)
6958
#, no-wrap
6959
msgid "username = password"
6960
msgstr ""
6961
6962
#: serverguide/C/vcs.xml:320(para)
6963
msgid "For more details, please refer to the file."
6964
msgstr ""
6965
6966
#: serverguide/C/vcs.xml:324(para)
6967
msgid ""
6968
"Now, to access Subversion via the svn:// custom protocol, either from the "
6969
"same machine or a different machine, you can run svnserver using svnserve "
6970
"command. The syntax is as follows:"
6971
msgstr ""
6972
6973
#: serverguide/C/vcs.xml:329(programlisting)
6974
#, no-wrap
6975
msgid ""
6976
"$ svnserve -d --foreground -r /path/to/repos\n"
6977
"# -d -- daemon mode\n"
6978
"# --foreground -- run in foreground (useful for debugging)\n"
6979
"# -r -- root of directory to serve\n"
6980
"\n"
6981
"For more usage details, please refer to:\n"
6982
"$ svnserve --help"
6983
msgstr ""
6984
6985
#: serverguide/C/vcs.xml:337(para)
6986
msgid ""
6987
"Once you run this command, Subversion starts listening on default port "
6988
"(3690). To access the project repository, you must run the following command "
6989
"from a terminal prompt:"
6990
msgstr ""
6991
6992
#: serverguide/C/vcs.xml:340(command)
6993
msgid "svn co svn://hostname/project project --username user_name"
6994
msgstr ""
6995
6996
#: serverguide/C/vcs.xml:343(para)
6997
msgid ""
6998
"Based on server configuration, it prompts for password. Once you are "
6999
"authenticated, it checks out the code from Subversion repository. To "
7000
"synchronize the project repository with the local copy, you can run the "
7001
"<command>update</command> sub-command. The syntax of the command, entered at "
7002
"a terminal prompt, is as follows:"
7003
msgstr ""
7004
7005
#: serverguide/C/vcs.xml:351(command)
7006
msgid "cd project_dir ; svn update"
7007
msgstr ""
7008
7009
#: serverguide/C/vcs.xml:354(para)
7010
msgid ""
7011
"For more details about using each Subversion sub-command, you can refer to "
7012
"the manual. For example, to learn more about the co (checkout) command, "
7013
"please run the following command from a terminal prompt:"
7014
msgstr ""
7015
7016
#: serverguide/C/vcs.xml:358(command)
7017
msgid "svn co help"
7018
msgstr ""
7019
7020
#: serverguide/C/vcs.xml:362(title)
7021
msgid "Access via custom protocol with SSL encryption (svn+ssh://)"
7022
msgstr ""
7023
7024
#: serverguide/C/vcs.xml:363(para)
7025
msgid ""
7026
"The configuration and server process is same as in the svn:// method. For "
7027
"details, please refer to the above section. This step assumes you have "
7028
"followed the above step and started the Subversion server using "
7029
"<application>svnserve</application> command."
7030
msgstr ""
7031
7032
#: serverguide/C/vcs.xml:369(para)
7033
msgid ""
7034
"It is also assumed that the ssh server is running on that machine and that "
7035
"it is allowing incoming connections. To confirm, please try to login to that "
7036
"machine using ssh. If you can login, everything is perfect. If you cannot "
7037
"login, please address it before continuing further."
7038
msgstr ""
7039
7040
#: serverguide/C/vcs.xml:375(para)
7041
msgid ""
7042
"The svn+ssh:// protocol is used to access the Subversion repository using "
7043
"SSL encryption. The data transfer is encrypted using this method. To access "
7044
"the project repository (for example with a checkout), you must use the "
7045
"following command syntax:"
7046
msgstr ""
7047
7048
#: serverguide/C/vcs.xml:382(command)
7049
msgid "svn co svn+ssh://hostname/var/svn/repos/project"
7050
msgstr ""
7051
7052
#: serverguide/C/vcs.xml:386(para)
7053
msgid ""
7054
"You must use the full path (/path/to/repos/project) to access the Subversion "
7055
"repository using this access method."
7056
msgstr ""
7057
7058
#: serverguide/C/vcs.xml:389(para)
7059
msgid ""
7060
"Based on server configuration, it prompts for password. You must enter the "
7061
"password you use to login via ssh. Once you are authenticated, it checks out "
7062
"the code from the Subversion repository."
7063
msgstr ""
7064
7065
#: serverguide/C/vcs.xml:399(title)
7066
msgid "CVS Server"
7067
msgstr ""
7068
7069
#: serverguide/C/vcs.xml:400(para)
7070
msgid ""
7071
"CVS is a version control system. You can use it to record the history of "
7072
"source files."
7073
msgstr ""
7074
7075
#: serverguide/C/vcs.xml:406(para)
7076
msgid ""
7077
"To install <application>CVS</application>, run the following command from a "
7078
"terminal prompt: <screen>\n"
7079
"<command>sudo apt-get install cvs</command>\n"
7080
"</screen> After you install <application>cvs</application>, you should "
7081
"install <application>xinetd</application> to start/stop the cvs server. At "
7082
"the prompt, enter the following command to install "
7083
"<application>xinetd</application>: <screen>\n"
7084
"<command>sudo apt-get install xinetd</command>\n"
7085
"</screen>"
7086
msgstr ""
7087
7088
#: serverguide/C/vcs.xml:439(programlisting)
7089
#, no-wrap
7090
msgid ""
7091
"\n"
7092
"service cvspserver\n"
7093
"{\n"
7094
" port = 2401\n"
7095
" socket_type = stream\n"
7096
" protocol = tcp\n"
7097
" user = root\n"
7098
" wait = no\n"
7099
" type = UNLISTED\n"
7100
" server = /usr/bin/cvs\n"
7101
" server_args = -f --allow-root /var/lib/cvs pserver\n"
7102
" disable = no\n"
7103
"}\n"
7104
msgstr ""
7105
7106
#: serverguide/C/vcs.xml:455(para)
7107
msgid ""
7108
"Be sure to edit the repository if you have changed the default repository "
7109
"(<application>/var/lib/cvs</application>) directory."
7110
msgstr ""
7111
7112
#: serverguide/C/vcs.xml:424(para)
7113
msgid ""
7114
"Once you install cvs, the repository will be automatically initialized. By "
7115
"default, the repository resides under the "
7116
"<application>/var/lib/cvs</application> directory. You can change this path "
7117
"by running following command: <screen>\n"
7118
"<command>cvs -d /your/new/cvs/repo init</command>\n"
7119
"</screen> Once the initial repository is set up, you can configure "
7120
"<application>xinetd</application> to start the CVS server. You can copy the "
7121
"following lines to the <filename> /etc/xinetd.d/cvspserver</filename> file. "
7122
"<placeholder-1/><placeholder-2/> Once you have configured "
7123
"<application>xinetd</application> you can start the cvs server by running "
7124
"following command: <screen>\n"
7125
"<command>sudo /etc/init.d/xinetd restart</command>\n"
7126
"</screen>"
7127
msgstr ""
7128
7129
#: serverguide/C/vcs.xml:468(para)
7130
msgid ""
7131
"You can confirm that the CVS server is running by issuing the following "
7132
"command:"
7133
msgstr ""
7134
7135
#: serverguide/C/vcs.xml:475(command)
7136
msgid "sudo netstat -tap | grep cvs"
7137
msgstr ""
7138
7139
#: serverguide/C/vcs.xml:479(para) serverguide/C/databases.xml:65(para)
7140
msgid ""
7141
"When you run this command, you should see the following line or something "
7142
"similar:"
7143
msgstr ""
7144
7145
#: serverguide/C/vcs.xml:484(programlisting)
7146
#, no-wrap
7147
msgid ""
7148
"\n"
7149
"tcp 0 0 *:cvspserver *:* LISTEN \n"
7150
msgstr ""
7151
7152
#: serverguide/C/vcs.xml:488(para)
7153
msgid ""
7154
"From here you can continue to add users, add new projects, and manage the "
7155
"CVS server."
7156
msgstr ""
7157
7158
#: serverguide/C/vcs.xml:493(para)
7159
msgid ""
7160
"CVS allows the user to add users independently of the underlying OS "
7161
"installation. Probably the easiest way is to use the Linux Users for CVS, "
7162
"although it has potential security issues. Please refer to the CVS manual "
7163
"for details."
7164
msgstr ""
7165
7166
#: serverguide/C/vcs.xml:503(title)
7167
msgid "Add Projects"
7168
msgstr ""
7169
7170
#: serverguide/C/vcs.xml:515(para)
7171
msgid ""
7172
"You can use the CVSROOT environment variable to store the CVS root "
7173
"directory. Once you export the CVSROOT environment variable, you can avoid "
7174
"using -d option in the above cvs command."
7175
msgstr ""
7176
7177
#: serverguide/C/vcs.xml:527(para)
7178
msgid ""
7179
"When you add a new project, the CVS user you use must have write access to "
7180
"the CVS repository (<application>/var/lib/cvs</application>). By default, "
7181
"the <application>src</application> group has write access to the CVS "
7182
"repository. So, you can add the user to this group, and he can then add and "
7183
"manage projects in the CVS repository."
7184
msgstr ""
7185
7186
#: serverguide/C/vcs.xml:504(para)
7187
msgid ""
7188
"This section explains how to add new project to the CVS repository. Create "
7189
"the directory and add necessary document and source files to the directory. "
7190
"Now, run the following command to add this project to CVS repository: "
7191
"<screen>\n"
7192
"<command>cd your/project</command>\n"
7193
"<command>cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "
7194
"\"Importing my project to CVS repository\" . new_project start</command>\n"
7195
"</screen><placeholder-1/> The string <emphasis>new_project</emphasis> is a "
7196
"vendor tag, and <emphasis>start</emphasis> is a release tag. They serve no "
7197
"purpose in this context, but since CVS requires them, they must be present. "
7198
"<placeholder-2/>"
7199
msgstr ""
7200
7201
#: serverguide/C/vcs.xml:540(ulink)
7202
msgid "Bazaar Home Page"
7203
msgstr ""
7204
7205
#: serverguide/C/vcs.xml:541(ulink)
7206
msgid "Launchpad"
7207
msgstr ""
7208
7209
#: serverguide/C/vcs.xml:542(ulink)
7210
msgid "Subversion Home Page"
7211
msgstr ""
7212
7213
#: serverguide/C/vcs.xml:543(ulink)
7214
msgid "Subversion Book"
7215
msgstr ""
7216
7217
#: serverguide/C/vcs.xml:545(ulink)
7218
msgid "CVS Manual"
7219
msgstr ""
7220
7221
#: serverguide/C/vcs.xml:546(ulink)
7222
msgid "Easy Bazaar Ubuntu Wiki page"
7223
msgstr ""
7224
7225
#: serverguide/C/vcs.xml:547(ulink)
7226
msgid "Ubuntu Wiki Subversion page"
7227
msgstr ""
7228
7229
#: serverguide/C/serverguide.xml:3(title) serverguide/C/bookinfo.xml:3(title)
7230
msgid "Credits and License"
7231
msgstr "Mercejaments e licéncia"
7232
7233
#: serverguide/C/serverguide.xml:4(para) serverguide/C/bookinfo.xml:4(para)
7234
msgid ""
7235
"This document is maintained by the Ubuntu documentation team "
7236
"(https://wiki.ubuntu.com/DocumentationTeam). For a list of contributors, see "
7237
"the <ulink url=\"../../libs/C/contributors.xml\">contributors page</ulink>"
7238
msgstr ""
7239
7240
#: serverguide/C/serverguide.xml:5(para) serverguide/C/bookinfo.xml:5(para)
7241
msgid ""
7242
"This document is made available under the Creative Commons ShareAlike 2.5 "
7243
"License (CC-BY-SA)."
7244
msgstr ""
7245
7246
#: serverguide/C/serverguide.xml:6(para) serverguide/C/bookinfo.xml:6(para)
7247
msgid ""
7248
"You are free to modify, extend, and improve the Ubuntu documentation source "
7249
"code under the terms of this license. All derivative works must be released "
7250
"under this license."
7251
msgstr ""
7252
7253
#: serverguide/C/serverguide.xml:8(para) serverguide/C/bookinfo.xml:8(para)
7254
msgid ""
7255
"This documentation is distributed in the hope that it will be useful, but "
7256
"WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY "
7257
"or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER."
7258
msgstr ""
7259
7260
#: serverguide/C/serverguide.xml:11(para) serverguide/C/bookinfo.xml:11(para)
7261
msgid ""
7262
"A copy of the license is available here: <ulink url=\"/usr/share/ubuntu-"
7263
"docs/libs/C/ccbysa.xml\">Creative Commons ShareAlike License</ulink>."
7264
msgstr ""
7265
7266
#: serverguide/C/serverguide.xml:14(year) serverguide/C/bookinfo.xml:14(year)
7267
msgid "2008"
7268
msgstr ""
7269
7270
#: serverguide/C/serverguide.xml:15(ulink) serverguide/C/bookinfo.xml:15(ulink)
7271
msgid "Ubuntu Documentation Project"
7272
msgstr ""
7273
7274
#: serverguide/C/serverguide.xml:15(holder) serverguide/C/bookinfo.xml:15(holder)
7275
msgid "Canonical Ltd. and members of the <placeholder-1/>"
7276
msgstr ""
7277
7278
#: serverguide/C/serverguide.xml:18(publishername) serverguide/C/bookinfo.xml:18(publishername)
7279
msgid "The Ubuntu Documentation Project"
7280
msgstr ""
7281
7282
#: serverguide/C/serverguide.xml:17(para)
7283
msgid ""
7284
"Welcome to the <emphasis>Ubuntu Server Guide</emphasis>! It contains "
7285
"information on how to install and configure various server applications on "
7286
"your Ubuntu system to fit your needs. It is a step-by-step, task-oriented "
7287
"guide for configuring and customizing your system."
7288
msgstr ""
7289
7290
#: serverguide/C/security.xml:13(title)
7291
msgid "Security"
7292
msgstr ""
7293
7294
#: serverguide/C/security.xml:14(para)
7295
msgid ""
7296
"Security should always be considered when installing, deploying, and using "
7297
"any type of computer system. Although a fresh installation of Ubuntu is "
7298
"relatively safe for immediate use on the Internet, it is important to have a "
7299
"balanced understanding of your systems security posture based on how it will "
7300
"be used after deployment."
7301
msgstr ""
7302
7303
#: serverguide/C/security.xml:17(para)
7304
msgid ""
7305
"This chapter provides an overview of security related topics as they pertain "
7306
"to Ubuntu 10.04 LTS Server Edition, and outlines simple measures you may use "
7307
"to protect your server and network from any number of potential security "
7308
"threats."
7309
msgstr ""
7310
7311
#: serverguide/C/security.xml:21(title)
7312
msgid "User Management"
7313
msgstr ""
7314
7315
#: serverguide/C/security.xml:22(para)
7316
msgid ""
7317
"User management is a critical part of maintaining a secure system. "
7318
"Ineffective user and privilege management often lead many systems into being "
7319
"compromised. Therefore, it is important that you understand how you can "
7320
"protect your server through simple and effective user account management "
7321
"techniques."
7322
msgstr ""
7323
7324
#: serverguide/C/security.xml:26(title)
7325
msgid "Where is root?"
7326
msgstr ""
7327
7328
#: serverguide/C/security.xml:27(para)
7329
msgid ""
7330
"Ubuntu developers made a conscientious decision to disable the "
7331
"administrative root account by default in all Ubuntu installations. This "
7332
"does not mean that the root account has been deleted or that it may not be "
7333
"accessed. It merely has been given a password which matches no possible "
7334
"encrypted value, therefore may not log in directly by itself."
7335
msgstr ""
7336
7337
#: serverguide/C/security.xml:30(para)
7338
msgid ""
7339
"Instead, users are encouraged to make use of a tool by the name of "
7340
"<application>sudo</application> to carry out system administrative duties. "
7341
"<application>Sudo</application> allows an authorized user to temporarily "
7342
"elevate their privileges using their own password instead of having to know "
7343
"the password belonging to the root account. This simple yet effective "
7344
"methodology provides accountability for all user actions, and gives the "
7345
"administrator granular control over which actions a user can perform with "
7346
"said privileges."
7347
msgstr ""
7348
7349
#: serverguide/C/security.xml:35(para)
7350
msgid ""
7351
"If for some reason you wish to enable the root account, simply give it a "
7352
"password:"
7353
msgstr ""
7354
7355
#: serverguide/C/security.xml:39(command)
7356
msgid "sudo passwd"
7357
msgstr ""
7358
7359
#: serverguide/C/security.xml:41(para)
7360
msgid ""
7361
"Sudo will prompt you for your password, and then ask you to supply a new "
7362
"password for root as shown below:"
7363
msgstr ""
7364
7365
#: serverguide/C/security.xml:44(userinput)
7366
#, no-wrap
7367
msgid "(enter your own password)"
7368
msgstr ""
7369
7370
#: serverguide/C/security.xml:45(userinput)
7371
#, no-wrap
7372
msgid "(enter a new password for root)"
7373
msgstr ""
7374
7375
#: serverguide/C/security.xml:46(userinput)
7376
#, no-wrap
7377
msgid "(repeat new password for root)"
7378
msgstr ""
7379
7380
#: serverguide/C/security.xml:44(computeroutput)
7381
#, no-wrap
7382
msgid ""
7383
"[sudo] password for username: <placeholder-1/>\n"
7384
"Enter new UNIX password: <placeholder-2/>\n"
7385
"Retype new UNIX password: <placeholder-3/>\n"
7386
"passwd: password updated successfully"
7387
msgstr ""
7388
7389
#: serverguide/C/security.xml:51(para)
7390
msgid "To disable the root account, use the following passwd syntax:"
7391
msgstr ""
7392
7393
#: serverguide/C/security.xml:55(command)
7394
msgid "sudo passwd -l root"
7395
msgstr ""
7396
7397
#: serverguide/C/security.xml:59(para)
7398
msgid ""
7399
"You should read more on <application>Sudo</application> by checking out it's "
7400
"man page:"
7401
msgstr ""
7402
7403
#: serverguide/C/security.xml:63(command)
7404
msgid "man sudo"
7405
msgstr ""
7406
7407
#: serverguide/C/security.xml:67(para)
7408
msgid ""
7409
"By default, the initial user created by the Ubuntu installer is a member of "
7410
"the group \"admin\" which is added to the file "
7411
"<filename>/etc/sudoers</filename> as an authorized sudo user. If you wish to "
7412
"give any other account full root access through "
7413
"<application>sudo</application>, simply add them to the admin group."
7414
msgstr ""
7415
7416
#: serverguide/C/security.xml:73(title)
7417
msgid "Adding and Deleting Users"
7418
msgstr ""
7419
7420
#: serverguide/C/security.xml:74(para)
7421
msgid ""
7422
"The process for managing local users and groups is straight forward and "
7423
"differs very little from most other GNU/Linux operating systems. Ubuntu and "
7424
"other Debian based distributions, encourage the use of the \"adduser\" "
7425
"package for account management."
7426
msgstr ""
7427
7428
#: serverguide/C/security.xml:79(para)
7429
msgid ""
7430
"To add a user account, use the following syntax, and follow the prompts to "
7431
"give the account a password and identifiable characteristics such as a full "
7432
"name, phone number, etc."
7433
msgstr ""
7434
7435
#: serverguide/C/security.xml:83(command)
7436
msgid "sudo adduser username"
7437
msgstr ""
7438
7439
#: serverguide/C/security.xml:87(para)
7440
msgid ""
7441
"To delete a user account and its primary group, use the following syntax:"
7442
msgstr ""
7443
7444
#: serverguide/C/security.xml:91(command)
7445
msgid "sudo deluser username"
7446
msgstr ""
7447
7448
#: serverguide/C/security.xml:93(para)
7449
msgid ""
7450
"Deleting an account does not remove their respective home folder. It is up "
7451
"to you whether or not you wish to delete the folder manually or keep it "
7452
"according to your desired retention policies."
7453
msgstr ""
7454
7455
#: serverguide/C/security.xml:96(para)
7456
msgid ""
7457
"Remember, any user added later on with the same UID/GID as the previous "
7458
"owner will now have access to this folder if you have not taken the "
7459
"necessary precautions."
7460
msgstr ""
7461
7462
#: serverguide/C/security.xml:99(para)
7463
msgid ""
7464
"You may want to change these UID/GID values to something more appropriate, "
7465
"such as the root account, and perhaps even relocate the folder to avoid "
7466
"future conflicts:"
7467
msgstr ""
7468
7469
#: serverguide/C/security.xml:103(command)
7470
msgid "sudo chown -R root:root /home/username/"
7471
msgstr ""
7472
7473
#: serverguide/C/security.xml:104(command)
7474
msgid "sudo mkdir /home/archived_users/"
7475
msgstr ""
7476
7477
#: serverguide/C/security.xml:105(command)
7478
msgid "sudo mv /home/username /home/archived_users/"
7479
msgstr ""
7480
7481
#: serverguide/C/security.xml:109(para)
7482
msgid ""
7483
"To temporarily lock or unlock a user account, use the following syntax, "
7484
"respectively:"
7485
msgstr ""
7486
7487
#: serverguide/C/security.xml:113(command)
7488
msgid "sudo passwd -l username"
7489
msgstr ""
7490
7491
#: serverguide/C/security.xml:114(command)
7492
msgid "sudo passwd -u username"
7493
msgstr ""
7494
7495
#: serverguide/C/security.xml:118(para)
7496
msgid ""
7497
"To add or delete a personalized group, use the following syntax, "
7498
"respectively:"
7499
msgstr ""
7500
7501
#: serverguide/C/security.xml:122(command)
7502
msgid "sudo addgroup groupname"
7503
msgstr ""
7504
7505
#: serverguide/C/security.xml:123(command)
7506
msgid "sudo delgroup groupname"
7507
msgstr ""
7508
7509
#: serverguide/C/security.xml:127(para)
7510
msgid "To add a user to a group, use the following syntax:"
7511
msgstr ""
7512
7513
#: serverguide/C/security.xml:131(command)
7514
msgid "sudo adduser username groupname"
7515
msgstr ""
7516
7517
#: serverguide/C/security.xml:138(title)
7518
msgid "User Profile Security"
7519
msgstr ""
7520
7521
#: serverguide/C/security.xml:139(para)
7522
msgid ""
7523
"When a new user is created, the adduser utility creates a brand new home "
7524
"directory named <filename class=\"directory\">/home/username</filename>, "
7525
"respectively. The default profile is modeled after the contents found in the "
7526
"directory of <filename class=\"directory\">/etc/skel</filename>, which "
7527
"includes all profile basics."
7528
msgstr ""
7529
7530
#: serverguide/C/security.xml:142(para)
7531
msgid ""
7532
"If your server will be home to multiple users, you should pay close "
7533
"attention to the user home directory permissions to ensure confidentiality. "
7534
"By default, user home directories in Ubuntu are created with world "
7535
"read/execute permissions. This means that all users can browse and access "
7536
"the contents of other users home directories. This may not be suitable for "
7537
"your environment."
7538
msgstr ""
7539
7540
#: serverguide/C/security.xml:147(para)
7541
msgid ""
7542
"To verify your current users home directory permissions, use the following "
7543
"syntax:"
7544
msgstr ""
7545
7546
#: serverguide/C/security.xml:151(command) serverguide/C/security.xml:183(command)
7547
msgid "ls -ld /home/username"
7548
msgstr ""
7549
7550
#: serverguide/C/security.xml:153(para)
7551
msgid ""
7552
"The following output shows that the directory <filename "
7553
"class=\"directory\">/home/username</filename> has world readable permissions:"
7554
msgstr ""
7555
7556
#: serverguide/C/security.xml:156(computeroutput)
7557
#, no-wrap
7558
msgid "drwxr-xr-x 2 username username 4096 2007-10-02 20:03 username"
7559
msgstr ""
7560
7561
#: serverguide/C/security.xml:160(para)
7562
msgid ""
7563
"You can remove the world readable permissions using the following syntax:"
7564
msgstr ""
7565
7566
#: serverguide/C/security.xml:164(command)
7567
msgid "sudo chmod 0750 /home/username"
7568
msgstr ""
7569
7570
#: serverguide/C/security.xml:167(para)
7571
msgid ""
7572
"Some people tend to use the recursive option (-R) indiscriminately which "
7573
"modifies all child folders and files, but this is not necessary, and may "
7574
"yield other undesirable results. The parent directory alone is sufficient "
7575
"for preventing unauthorized access to anything below the parent."
7576
msgstr ""
7577
7578
#: serverguide/C/security.xml:171(para)
7579
msgid ""
7580
"A much more efficient approach to the matter would be to modify the "
7581
"<application>adduser</application> global default permissions when creating "
7582
"user home folders. Simply edit the file "
7583
"<filename>/etc/adduser.conf</filename> and modify the "
7584
"<varname>DIR_MODE</varname> variable to something appropriate, so that all "
7585
"new home directories will receive the correct permissions."
7586
msgstr ""
7587
7588
#: serverguide/C/security.xml:174(programlisting)
7589
#, no-wrap
7590
msgid ""
7591
"\n"
7592
"DIR_MODE=0750\n"
7593
msgstr ""
7594
7595
#: serverguide/C/security.xml:179(para)
7596
msgid ""
7597
"After correcting the directory permissions using any of the previously "
7598
"mentioned techniques, verify the results using the following syntax:"
7599
msgstr ""
7600
7601
#: serverguide/C/security.xml:185(para)
7602
msgid ""
7603
"The results below show that world readable permissions have been removed:"
7604
msgstr ""
7605
7606
#: serverguide/C/security.xml:188(computeroutput)
7607
#, no-wrap
7608
msgid "drwxr-x--- 2 username username 4096 2007-10-02 20:03 username"
7609
msgstr ""
7610
7611
#: serverguide/C/security.xml:195(title)
7612
msgid "Password Policy"
7613
msgstr ""
7614
7615
#: serverguide/C/security.xml:196(para)
7616
msgid ""
7617
"A strong password policy is one of the most important aspects of your "
7618
"security posture. Many successful security breaches involve simple brute "
7619
"force and dictionary attacks against weak passwords. If you intend to offer "
7620
"any form of remote access involving your local password system, make sure "
7621
"you adequately address minimum password complexity requirements, maximum "
7622
"password lifetimes, and frequent audits of your authentication systems."
7623
msgstr ""
7624
7625
#: serverguide/C/security.xml:200(title)
7626
msgid "Minimum Password Length"
7627
msgstr ""
7628
7629
#: serverguide/C/security.xml:201(para)
7630
msgid ""
7631
"By default, Ubuntu requires a minimum password length of 4 characters, as "
7632
"well as some basic entropy checks. These values are controlled in the file "
7633
"<filename>/etc/pam.d/common-password</filename>, which is outlined below."
7634
msgstr ""
7635
7636
#: serverguide/C/security.xml:204(programlisting)
7637
#, no-wrap
7638
msgid ""
7639
"\n"
7640
"password required pam_unix.so nullok obscure min=4 max=8 md5\n"
7641
msgstr ""
7642
7643
#: serverguide/C/security.xml:207(para)
7644
msgid ""
7645
"If you would like to adjust the minimum length to 6 characters, change the "
7646
"appropriate variable to min=6. The modification is outlined below."
7647
msgstr ""
7648
7649
#: serverguide/C/security.xml:210(programlisting)
7650
#, no-wrap
7651
msgid ""
7652
"\n"
7653
"password required pam_unix.so nullok obscure min=6 max=8 md5\n"
7654
msgstr ""
7655
7656
#: serverguide/C/security.xml:214(para)
7657
msgid ""
7658
"The <varname>max=8</varname> variable does not represent the maximum length "
7659
"of a password. It only means that complexity requirements will not be "
7660
"checked on passwords over 8 characters. You may want to look at the "
7661
"<application>libpam-cracklib</application> package for additional password "
7662
"entropy assistance."
7663
msgstr ""
7664
7665
#: serverguide/C/security.xml:220(title)
7666
msgid "Password Expiration"
7667
msgstr ""
7668
7669
#: serverguide/C/security.xml:221(para)
7670
msgid ""
7671
"When creating user accounts, you should make it a policy to have a minimum "
7672
"and maximum password age forcing users to change their passwords when they "
7673
"expire."
7674
msgstr ""
7675
7676
#: serverguide/C/security.xml:226(para)
7677
msgid ""
7678
"To easily view the current status of a user account, use the following "
7679
"syntax:"
7680
msgstr ""
7681
7682
#: serverguide/C/security.xml:230(command) serverguide/C/security.xml:263(command)
7683
msgid "sudo chage -l username"
7684
msgstr ""
7685
7686
#: serverguide/C/security.xml:232(para)
7687
msgid ""
7688
"The output below shows interesting facts about the user account, namely that "
7689
"there are no policies applied:"
7690
msgstr ""
7691
7692
#: serverguide/C/security.xml:235(computeroutput)
7693
#, no-wrap
7694
msgid ""
7695
"Last password change : Jan 20, 2008\n"
7696
"Password expires : never\n"
7697
"Password inactive : never\n"
7698
"Account expires : never\n"
7699
"Minimum number of days between password change : 0\n"
7700
"Maximum number of days between password change : 99999\n"
7701
"Number of days of warning before password expires : 7"
7702
msgstr ""
7703
7704
#: serverguide/C/security.xml:245(para)
7705
msgid ""
7706
"To set any of these values, simply use the following syntax, and follow the "
7707
"interactive prompts:"
7708
msgstr ""
7709
7710
#: serverguide/C/security.xml:249(command)
7711
msgid "sudo chage username"
7712
msgstr ""
7713
7714
#: serverguide/C/security.xml:251(para)
7715
msgid ""
7716
"The following is also an example of how you can manually change the explicit "
7717
"expiration date (-E) to 01/31/2008, minimum password age (-m) of 5 days, "
7718
"maximum password age (-M) of 90 days, inactivity period (-I) of 5 days after "
7719
"password expiration, and a warning time period (-W) of 14 days before "
7720
"password expiration."
7721
msgstr ""
7722
7723
#: serverguide/C/security.xml:255(command)
7724
msgid "sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username"
7725
msgstr ""
7726
7727
#: serverguide/C/security.xml:259(para)
7728
msgid "To verify changes, use the same syntax as mentioned previously:"
7729
msgstr ""
7730
7731
#: serverguide/C/security.xml:265(para)
7732
msgid ""
7733
"The output below shows the new policies that have been established for the "
7734
"account:"
7735
msgstr ""
7736
7737
#: serverguide/C/security.xml:268(computeroutput)
7738
#, no-wrap
7739
msgid ""
7740
"Last password change : Jan 20, 2008\n"
7741
"Password expires : Apr 19, 2008\n"
7742
"Password inactive : May 19, 2008\n"
7743
"Account expires : Jan 31, 2008\n"
7744
"Minimum number of days between password change : 5\n"
7745
"Maximum number of days between password change : 90\n"
7746
"Number of days of warning before password expires : 14"
7747
msgstr ""
7748
7749
#: serverguide/C/security.xml:284(title)
7750
msgid "Other Security Considerations"
7751
msgstr ""
7752
7753
#: serverguide/C/security.xml:285(para)
7754
msgid ""
7755
"Many applications use alternate authentication mechanisms that can be easily "
7756
"overlooked by even experienced system administrators. Therefore, it is "
7757
"important to understand and control how users authenticate and gain access "
7758
"to services and applications on your server."
7759
msgstr ""
7760
7761
#: serverguide/C/security.xml:290(title)
7762
msgid "SSH Access by Disabled Users"
7763
msgstr ""
7764
7765
#: serverguide/C/security.xml:291(para)
7766
msgid ""
7767
"Simply disabling/locking a user account will not prevent a user from logging "
7768
"into your server remotely if they have previously set up RSA public key "
7769
"authentication. They will still be able to gain shell access to the server, "
7770
"without the need for any password. Remember to check the users home "
7771
"directory for files that will allow for this type of authenticated SSH "
7772
"access. e.g. <filename>/home/username/.ssh/authorized_keys</filename>."
7773
msgstr ""
7774
7775
#: serverguide/C/security.xml:294(para)
7776
msgid ""
7777
"Remove or rename the directory <filename "
7778
"class=\"directory\">.ssh/</filename> in the user's home folder to prevent "
7779
"further SSH authentication capabilities."
7780
msgstr ""
7781
7782
#: serverguide/C/security.xml:297(para)
7783
msgid ""
7784
"Be sure to check for any established SSH connections by the disabled user, "
7785
"as it is possible they may have existing inbound or outbound connections. "
7786
"Kill any that are found."
7787
msgstr ""
7788
7789
#: serverguide/C/security.xml:300(para)
7790
msgid ""
7791
"Restrict SSH access to only user accounts that should have it. For example, "
7792
"you may create a group called \"sshlogin\" and add the group name as the "
7793
"value associated with the <varname>AllowGroups</varname> variable located in "
7794
"the file <filename>/etc/ssh/sshd_config</filename>."
7795
msgstr ""
7796
7797
#: serverguide/C/security.xml:303(programlisting)
7798
#, no-wrap
7799
msgid ""
7800
"\n"
7801
"AllowGroups sshlogin\n"
7802
msgstr ""
7803
7804
#: serverguide/C/security.xml:306(para)
7805
msgid ""
7806
"Then add your permitted SSH users to the group \"sshlogin\", and restart the "
7807
"SSH service."
7808
msgstr ""
7809
7810
#: serverguide/C/security.xml:310(command)
7811
msgid "sudo adduser username sshlogin"
7812
msgstr ""
7813
7814
#: serverguide/C/security.xml:311(command) serverguide/C/remote-administration.xml:150(command)
7815
msgid "sudo /etc/init.d/ssh restart"
7816
msgstr ""
7817
7818
#: serverguide/C/security.xml:315(title)
7819
msgid "External User Database Authentication"
7820
msgstr ""
7821
7822
#: serverguide/C/security.xml:316(para)
7823
msgid ""
7824
"Most enterprise networks require centralized authentication and access "
7825
"controls for all system resources. If you have configured your server to "
7826
"authenticate users against external databases, be sure to disable the user "
7827
"accounts both externally and locally, this way you ensure that local "
7828
"fallback authentication is not possible."
7829
msgstr ""
7830
7831
#: serverguide/C/security.xml:325(title)
7832
msgid "Console Security"
7833
msgstr ""
7834
7835
#: serverguide/C/security.xml:326(para)
7836
msgid ""
7837
"As with any other security barrier you put in place to protect your server, "
7838
"it is pretty tough to defend against untold damage caused by someone with "
7839
"physical access to your environment, for example, theft of hard drives, "
7840
"power or service disruption and so on. Therefore, console security should be "
7841
"addressed merely as one component of your overall physical security "
7842
"strategy. A locked \"screen door\" may deter a casual criminal, or at the "
7843
"very least slow down a determined one, so it is still advisable to perform "
7844
"basic precautions with regard to console security."
7845
msgstr ""
7846
7847
#: serverguide/C/security.xml:329(para)
7848
msgid ""
7849
"The following instructions will help defend your server against issues that "
7850
"could otherwise yield very serious consequences."
7851
msgstr ""
7852
7853
#: serverguide/C/security.xml:334(title)
7854
msgid "Disable Ctrl+Alt+Delete"
7855
msgstr ""
7856
7857
#: serverguide/C/security.xml:335(para)
7858
msgid ""
7859
"First and foremost, anyone that has physical access to the keyboard can "
7860
"simply use the "
7861
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7862
"eycombo> key combination to reboot the server without having to log on. "
7863
"Sure, someone could simply unplug the power source, but you should still "
7864
"prevent the use of this key combination on a production server. This forces "
7865
"an attacker to take more drastic measures to reboot the server, and will "
7866
"prevent accidental reboots at the same time."
7867
msgstr ""
7868
7869
#: serverguide/C/security.xml:340(para)
7870
msgid ""
7871
"To disable the reboot action taken by pressing the "
7872
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
7873
"eycombo> key combination, comment out the following line in the file "
7874
"<filename>/etc/init/control-alt-delete.conf</filename>."
7875
msgstr ""
7876
7877
#: serverguide/C/security.xml:343(programlisting)
7878
#, no-wrap
7879
msgid ""
7880
"\n"
7881
"#exec shutdown -r now \"Control-Alt-Delete pressed\"\n"
7882
msgstr ""
7883
7884
#: serverguide/C/security.xml:352(title)
7885
msgid "Firewall"
7886
msgstr ""
7887
7888
#: serverguide/C/security.xml:355(para)
7889
msgid ""
7890
"The Linux kernel includes the <emphasis>Netfilter</emphasis> subsystem, "
7891
"which is used to manipulate or decide the fate of network traffic headed "
7892
"into or through your server. All modern Linux firewall solutions use this "
7893
"system for packet filtering."
7894
msgstr ""
7895
7896
#: serverguide/C/security.xml:360(para)
7897
msgid ""
7898
"The kernel's packet filtering system would be of little use to "
7899
"administrators without a userspace interface to manage it. This is the "
7900
"purpose of iptables. When a packet reaches your server, it will be handed "
7901
"off to the Netfilter subsystem for acceptance, manipulation, or rejection "
7902
"based on the rules supplied to it from userspace via iptables. Thus, "
7903
"iptables is all you need to manage your firewall if you're familiar with it, "
7904
"but many frontends are available to simplify the task."
7905
msgstr ""
7906
7907
#: serverguide/C/security.xml:370(title)
7908
msgid "ufw - Uncomplicated Firewall"
7909
msgstr ""
7910
7911
#: serverguide/C/security.xml:371(para)
7912
msgid ""
7913
"The default firewall configuration tool for Ubuntu is "
7914
"<application>ufw</application>. Developed to ease iptables firewall "
7915
"configuration, <application>ufw</application> provides a user friendly way "
7916
"to create an IPv4 or IPv6 host-based firewall."
7917
msgstr ""
7918
7919
#: serverguide/C/security.xml:375(para)
7920
msgid ""
7921
"<application>ufw</application> by default is initially disabled. From the "
7922
"<application>ufw</application> man page:"
7923
msgstr ""
7924
7925
#: serverguide/C/security.xml:379(quote)
7926
msgid ""
7927
"ufw is not intended to provide complete firewall functionality via its "
7928
"command interface, but instead provides an easy way to add or remove simple "
7929
"rules. It is currently mainly used for host-based firewalls."
7930
msgstr ""
7931
7932
#: serverguide/C/security.xml:383(para)
7933
msgid ""
7934
"The following are some examples of how to use <application>ufw</application>:"
7935
msgstr ""
7936
7937
#: serverguide/C/security.xml:388(para)
7938
msgid ""
7939
"First, <application>ufw</application> needs to be enabled. From a terminal "
7940
"prompt enter:"
7941
msgstr ""
7942
7943
#: serverguide/C/security.xml:392(command)
7944
msgid "sudo ufw enable"
7945
msgstr ""
7946
7947
#: serverguide/C/security.xml:396(para)
7948
msgid "To open a port (ssh in this example):"
7949
msgstr ""
7950
7951
#: serverguide/C/security.xml:400(command)
7952
msgid "sudo ufw allow 22"
7953
msgstr ""
7954
7955
#: serverguide/C/security.xml:404(para)
7956
msgid "Rules can also be added using a <emphasis>numbered</emphasis> format:"
7957
msgstr ""
7958
7959
#: serverguide/C/security.xml:408(command)
7960
msgid "sudo ufw insert 1 allow 80"
7961
msgstr ""
7962
7963
#: serverguide/C/security.xml:412(para)
7964
msgid "Similarly, to close an opened port:"
7965
msgstr ""
7966
7967
#: serverguide/C/security.xml:416(command)
7968
msgid "sudo ufw deny 22"
7969
msgstr ""
7970
7971
#: serverguide/C/security.xml:420(para)
7972
msgid "To remove a rule, use delete followed by the rule:"
7973
msgstr ""
7974
7975
#: serverguide/C/security.xml:424(command)
7976
msgid "sudo ufw delete deny 22"
7977
msgstr ""
7978
7979
#: serverguide/C/security.xml:428(para)
7980
msgid ""
7981
"It is also possible to allow access from specific hosts or networks to a "
7982
"port. The following example allows ssh access from host 192.168.0.2 to any "
7983
"ip address on this host:"
7984
msgstr ""
7985
7986
#: serverguide/C/security.xml:433(command)
7987
msgid "sudo ufw allow proto tcp from 192.168.0.2 to any port 22"
7988
msgstr ""
7989
7990
#: serverguide/C/security.xml:435(para)
7991
msgid ""
7992
"Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh access from the entire "
7993
"subnet."
7994
msgstr ""
7995
7996
#: serverguide/C/security.xml:441(para)
7997
msgid ""
7998
"Adding the <emphasis>--dry-run</emphasis> option to a "
7999
"<emphasis>ufw</emphasis> command will output the resulting rules, but not "
8000
"apply them. For example, the following is what would be applied if opening "
8001
"the HTTP port:"
8002
msgstr ""
8003
8004
#: serverguide/C/security.xml:447(command)
8005
msgid "sudo ufw --dry-run allow http"
8006
msgstr ""
8007
8008
#: serverguide/C/security.xml:451(computeroutput)
8009
#, no-wrap
8010
msgid ""
8011
"*filter\n"
8012
":ufw-user-input - [0:0]\n"
8013
":ufw-user-output - [0:0]\n"
8014
":ufw-user-forward - [0:0]\n"
8015
":ufw-user-limit - [0:0]\n"
8016
":ufw-user-limit-accept - [0:0]\n"
8017
"### RULES ###\n"
8018
"\n"
8019
"### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0\n"
8020
"-A ufw-user-input -p tcp --dport 80 -j ACCEPT\n"
8021
"\n"
8022
"### END RULES ###\n"
8023
"-A ufw-user-input -j RETURN\n"
8024
"-A ufw-user-output -j RETURN\n"
8025
"-A ufw-user-forward -j RETURN\n"
8026
"-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix \"[UFW "
8027
"LIMIT]: \"\n"
8028
"-A ufw-user-limit -j REJECT\n"
8029
"-A ufw-user-limit-accept -j ACCEPT\n"
8030
"COMMIT\n"
8031
"Rules updated"
8032
msgstr ""
8033
8034
#: serverguide/C/security.xml:475(para)
8035
msgid "<application>ufw</application> can be disabled by:"
8036
msgstr ""
8037
8038
#: serverguide/C/security.xml:479(command)
8039
msgid "sudo ufw disable"
8040
msgstr ""
8041
8042
#: serverguide/C/security.xml:483(para)
8043
msgid "To see the firewall status, enter:"
8044
msgstr ""
8045
8046
#: serverguide/C/security.xml:487(command)
8047
msgid "sudo ufw status"
8048
msgstr ""
8049
8050
#: serverguide/C/security.xml:491(para)
8051
msgid "And for more verbose status information use:"
8052
msgstr ""
8053
8054
#: serverguide/C/security.xml:495(command)
8055
msgid "sudo ufw status verbose"
8056
msgstr ""
8057
8058
#: serverguide/C/security.xml:499(para)
8059
msgid "To view the <emphasis>numbered</emphasis> format:"
8060
msgstr ""
8061
8062
#: serverguide/C/security.xml:503(command)
8063
msgid "sudo ufw status numbered"
8064
msgstr ""
8065
8066
#: serverguide/C/security.xml:508(para)
8067
msgid ""
8068
"If the port you want to open or close is defined in "
8069
"<filename>/etc/services</filename>, you can use the port name instead of the "
8070
"number. In the above examples, replace <emphasis>22</emphasis> with "
8071
"<emphasis>ssh</emphasis>."
8072
msgstr ""
8073
8074
#: serverguide/C/security.xml:514(para)
8075
msgid ""
8076
"This is a quick introduction to using <application>ufw</application>. Please "
8077
"refer to the <application>ufw</application> man page for more information."
8078
msgstr ""
8079
8080
#: serverguide/C/security.xml:520(title)
8081
msgid "ufw Application Integration"
8082
msgstr ""
8083
8084
#: serverguide/C/security.xml:522(para)
8085
msgid ""
8086
"Applications that open ports can include an <application>ufw</application> "
8087
"profile, which details the ports needed for the application to function "
8088
"properly. The profiles are kept in <filename "
8089
"role=\"directory\">/etc/ufw/applications.d</filename>, and can be edited if "
8090
"the default ports have been changed."
8091
msgstr ""
8092
8093
#: serverguide/C/security.xml:531(para)
8094
msgid ""
8095
"To view which applications have installed a profile, enter the following in "
8096
"a terminal:"
8097
msgstr ""
8098
8099
#: serverguide/C/security.xml:536(command)
8100
msgid "sudo ufw app list"
8101
msgstr ""
8102
8103
#: serverguide/C/security.xml:542(para)
8104
msgid ""
8105
"Similar to allowing traffic to a port, using an application profile is "
8106
"accomplished by entering:"
8107
msgstr ""
8108
8109
#: serverguide/C/security.xml:547(command)
8110
msgid "sudo ufw allow Samba"
8111
msgstr ""
8112
8113
#: serverguide/C/security.xml:553(para)
8114
msgid "An extended syntax is available as well:"
8115
msgstr ""
8116
8117
#: serverguide/C/security.xml:558(command)
8118
msgid "ufw allow from 192.168.0.0/24 to any app Samba"
8119
msgstr ""
8120
8121
#: serverguide/C/security.xml:561(para)
8122
msgid ""
8123
"Replace <emphasis>Samba</emphasis> and <emphasis>192.168.0.0/24</emphasis> "
8124
"with the application profile you are using and the IP range for your network."
8125
msgstr ""
8126
8127
#: serverguide/C/security.xml:567(para)
8128
msgid ""
8129
"There is no need to specify the <emphasis>protocol</emphasis> for the "
8130
"application, because that information is detailed in the profile. Also, note "
8131
"that the <emphasis>app</emphasis> name replaces the "
8132
"<emphasis>port</emphasis> number."
8133
msgstr ""
8134
8135
#: serverguide/C/security.xml:576(para)
8136
msgid ""
8137
"To view details about which ports, protocols, etc are defined for an "
8138
"application, enter:"
8139
msgstr ""
8140
8141
#: serverguide/C/security.xml:581(command)
8142
msgid "sudo ufw app info Samba"
8143
msgstr ""
8144
8145
#: serverguide/C/security.xml:587(para)
8146
msgid ""
8147
"Not all applications that require opening a network port come with "
8148
"<application>ufw</application> profiles, but if you have profiled an "
8149
"application and want the file to be included with the package, please file a "
8150
"bug against the package in <ulink "
8151
"url=\"https://launchpad.net/\">Launchpad</ulink>."
8152
msgstr ""
8153
8154
#: serverguide/C/security.xml:596(title)
8155
msgid "IP Masquerading"
8156
msgstr ""
8157
8158
#: serverguide/C/security.xml:597(para)
8159
msgid ""
8160
"The purpose of IP Masquerading is to allow machines with private, non-"
8161
"routable IP addresses on your network to access the Internet through the "
8162
"machine doing the masquerading. Traffic from your private network destined "
8163
"for the Internet must be manipulated for replies to be routable back to the "
8164
"machine that made the request. To do this, the kernel must modify the "
8165
"<emphasis>source</emphasis> IP address of each packet so that replies will "
8166
"be routed back to it, rather than to the private IP address that made the "
8167
"request, which is impossible over the Internet. Linux uses "
8168
"<emphasis>Connection Tracking</emphasis> (conntrack) to keep track of which "
8169
"connections belong to which machines and reroute each return packet "
8170
"accordingly. Traffic leaving your private network is thus \"masqueraded\" as "
8171
"having originated from your Ubuntu gateway machine. This process is referred "
8172
"to in Microsoft documentation as Internet Connection Sharing."
8173
msgstr ""
8174
8175
#: serverguide/C/security.xml:613(title)
8176
msgid "ufw Masquerading"
8177
msgstr ""
8178
8179
#: serverguide/C/security.xml:614(para)
8180
msgid ""
8181
"IP Masquerading can be achieved using custom <application>ufw</application> "
8182
"rules. This is possible because the current back-end for "
8183
"<application>ufw</application> is <application>iptables-"
8184
"restore</application> with the rules files located in "
8185
"<filename>/etc/ufw/*.rules</filename>. These files are a great place to add "
8186
"legacy iptables rules used without <application>ufw</application>, and rules "
8187
"that are more network gateway or bridge related."
8188
msgstr ""
8189
8190
#: serverguide/C/security.xml:620(para)
8191
msgid ""
8192
"The rules are split into two different files, rules that should be executed "
8193
"before <application>ufw</application> command line rules, and rules that are "
8194
"executed after <application>ufw</application> command line rules."
8195
msgstr ""
8196
8197
#: serverguide/C/security.xml:626(para)
8198
msgid ""
8199
"First, packet forwarding needs to be enabled in "
8200
"<application>ufw</application>. Two configuration files will need to be "
8201
"adjusted, in <filename>/etc/default/ufw</filename> change the "
8202
"<emphasis>DEFAULT_FORWARD_POLICY</emphasis> to <quote>ACCEPT</quote>:"
8203
msgstr ""
8204
8205
#: serverguide/C/security.xml:630(programlisting)
8206
#, no-wrap
8207
msgid ""
8208
"\n"
8209
"DEFAULT_FORWARD_POLICY=\"ACCEPT\"\n"
8210
msgstr ""
8211
8212
#: serverguide/C/security.xml:633(para)
8213
msgid "Then edit <filename>/etc/ufw/sysctl.conf</filename> and uncomment:"
8214
msgstr ""
8215
8216
#: serverguide/C/security.xml:636(programlisting)
8217
#, no-wrap
8218
msgid ""
8219
"\n"
8220
"net/ipv4/ip_forward=1\n"
8221
msgstr ""
8222
8223
#: serverguide/C/security.xml:639(para)
8224
msgid "Similarly, for IPv6 forwarding uncomment:"
8225
msgstr ""
8226
8227
#: serverguide/C/security.xml:642(programlisting)
8228
#, no-wrap
8229
msgid ""
8230
"\n"
8231
"net/ipv6/conf/default/forwarding=1\n"
8232
msgstr ""
8233
8234
#: serverguide/C/security.xml:647(para)
8235
msgid ""
8236
"Now we will add rules to the <filename>/etc/ufw/before.rules</filename> "
8237
"file. The default rules only configure the <emphasis>filter</emphasis> "
8238
"table, and to enable masquerading the <emphasis>nat</emphasis> table will "
8239
"need to be configured. Add the following to the top of the file just after "
8240
"the header comments:"
8241
msgstr ""
8242
8243
#: serverguide/C/security.xml:652(programlisting)
8244
#, no-wrap
8245
msgid ""
8246
"\n"
8247
"# nat Table rules\n"
8248
"*nat\n"
8249
":POSTROUTING ACCEPT [0:0]\n"
8250
"\n"
8251
"# Forward traffic from eth1 through eth0.\n"
8252
"-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE\n"
8253
"\n"
8254
"# don't delete the 'COMMIT' line or these nat table rules won't be "
8255
"processed\n"
8256
"COMMIT\n"
8257
msgstr ""
8258
8259
#: serverguide/C/security.xml:663(para)
8260
msgid ""
8261
"The comments are not strictly necessary, but it is considered good practice "
8262
"to document your configuration. Also, when modifying any of the "
8263
"<emphasis>rules</emphasis> files in <filename "
8264
"class=\"directory\">/etc/ufw</filename>, make sure these lines are the last "
8265
"line for each table modified:"
8266
msgstr ""
8267
8268
#: serverguide/C/security.xml:669(programlisting)
8269
#, no-wrap
8270
msgid ""
8271
"\n"
8272
"# don't delete the 'COMMIT' line or these rules won't be processed\n"
8273
"COMMIT\n"
8274
msgstr ""
8275
8276
#: serverguide/C/security.xml:674(para)
8277
msgid ""
8278
"For each <emphasis>Table</emphasis> a corresponding "
8279
"<emphasis>COMMIT</emphasis> statement is required. In these examples only "
8280
"the <emphasis>nat</emphasis> and <emphasis>filter</emphasis> tables are "
8281
"shown, but you can also add rules for the <emphasis>raw</emphasis> and "
8282
"<emphasis>mangle</emphasis> tables."
8283
msgstr ""
8284
8285
#: serverguide/C/security.xml:681(para)
8286
msgid ""
8287
"In the above example replace <emphasis>eth0</emphasis>, "
8288
"<emphasis>eth1</emphasis>, and <emphasis>192.168.0.0/24</emphasis> with the "
8289
"appropriate interfaces and IP range for your network."
8290
msgstr ""
8291
8292
#: serverguide/C/security.xml:689(para)
8293
msgid ""
8294
"Finally, disable and re-enable <application>ufw</application> to apply the "
8295
"changes:"
8296
msgstr ""
8297
8298
#: serverguide/C/security.xml:693(command)
8299
msgid "sudo ufw disable && sudo ufw enable"
8300
msgstr ""
8301
8302
#: serverguide/C/security.xml:697(para)
8303
msgid ""
8304
"IP Masquerading should now be enabled. You can also add any additional "
8305
"FORWARD rules to the <filename>/etc/ufw/before.rules</filename>. It is "
8306
"recommended that these additional rules be added to the <emphasis>ufw-before-"
8307
"forward</emphasis> chain."
8308
msgstr ""
8309
8310
#: serverguide/C/security.xml:704(title)
8311
msgid "iptables Masquerading"
8312
msgstr ""
8313
8314
#: serverguide/C/security.xml:705(para)
8315
msgid ""
8316
"<application>iptables</application> can also be used to enable masquerading."
8317
msgstr ""
8318
8319
#: serverguide/C/security.xml:710(para)
8320
msgid ""
8321
"Similar to <application>ufw</application>, the first step is to enable IPv4 "
8322
"packet forwarding by editing <filename>/etc/sysctl.conf</filename> and "
8323
"uncomment the following line"
8324
msgstr ""
8325
8326
#: serverguide/C/security.xml:714(programlisting)
8327
#, no-wrap
8328
msgid ""
8329
"\n"
8330
"net.ipv4.ip_forward=1\n"
8331
msgstr ""
8332
8333
#: serverguide/C/security.xml:717(para)
8334
msgid "If you wish to enable IPv6 forwarding also uncomment:"
8335
msgstr ""
8336
8337
#: serverguide/C/security.xml:720(programlisting)
8338
#, no-wrap
8339
msgid ""
8340
"\n"
8341
"net.ipv6.conf.default.forwarding=1\n"
8342
msgstr ""
8343
8344
#: serverguide/C/security.xml:725(para)
8345
msgid ""
8346
"Next, execute the <application>sysctl</application> command to enable the "
8347
"new settings in the configuration file:"
8348
msgstr ""
8349
8350
#: serverguide/C/security.xml:729(command)
8351
msgid "sudo sysctl -p"
8352
msgstr ""
8353
8354
#: serverguide/C/security.xml:733(para)
8355
msgid ""
8356
"IP Masquerading can now be accomplished with a single iptables rule, which "
8357
"may differ slightly based on your network configuration:"
8358
msgstr ""
8359
8360
#: serverguide/C/security.xml:736(screen)
8361
#, no-wrap
8362
msgid ""
8363
"\n"
8364
"sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8365
msgstr ""
8366
8367
#: serverguide/C/security.xml:739(para)
8368
msgid ""
8369
"The above command assumes that your private address space is 192.168.0.0/16 "
8370
"and that your Internet-facing device is ppp0. The syntax is broken down as "
8371
"follows:"
8372
msgstr ""
8373
8374
#: serverguide/C/security.xml:744(para)
8375
msgid "-t nat -- the rule is to go into the nat table"
8376
msgstr ""
8377
8378
#: serverguide/C/security.xml:745(para)
8379
msgid ""
8380
"-A POSTROUTING -- the rule is to be appended (-A) to the POSTROUTING chain"
8381
msgstr ""
8382
8383
#: serverguide/C/security.xml:746(para)
8384
msgid ""
8385
"-s 192.168.0.0/16 -- the rule applies to traffic originating from the "
8386
"specified address space"
8387
msgstr ""
8388
8389
#: serverguide/C/security.xml:747(para)
8390
msgid ""
8391
"-o ppp0 -- the rule applies to traffic scheduled to be routed through the "
8392
"specified network device"
8393
msgstr ""
8394
8395
#: serverguide/C/security.xml:749(para)
8396
msgid ""
8397
"-j MASQUERADE -- traffic matching this rule is to \"jump\" (-j) to the "
8398
"MASQUERADE target to be manipulated as described above"
8399
msgstr ""
8400
8401
#: serverguide/C/security.xml:757(para)
8402
msgid ""
8403
"Also, each chain in the filter table (the default table, and where most or "
8404
"all packet filtering occurs) has a default <emphasis>policy</emphasis> of "
8405
"ACCEPT, but if you are creating a firewall in addition to a gateway device, "
8406
"you may have set the policies to DROP or REJECT, in which case your "
8407
"masqueraded traffic needs to be allowed through the FORWARD chain for the "
8408
"above rule to work:"
8409
msgstr ""
8410
8411
#: serverguide/C/security.xml:764(screen)
8412
#, no-wrap
8413
msgid ""
8414
"\n"
8415
"sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT\n"
8416
"sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state "
8417
"ESTABLISHED,RELATED -i ppp0 -j ACCEPT\n"
8418
msgstr ""
8419
8420
#: serverguide/C/security.xml:768(para)
8421
msgid ""
8422
"The above commands will allow all connections from your local network to the "
8423
"Internet and all traffic related to those connections to return to the "
8424
"machine that initiated them."
8425
msgstr ""
8426
8427
#: serverguide/C/security.xml:775(para)
8428
msgid ""
8429
"If you want masquerading to be enabled on reboot, which you probably do, "
8430
"edit <filename>/etc/rc.local</filename> and add any commands used above. For "
8431
"example add the first command with no filtering:"
8432
msgstr ""
8433
8434
#: serverguide/C/security.xml:779(screen)
8435
#, no-wrap
8436
msgid ""
8437
"\n"
8438
"iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
8439
msgstr ""
8440
8441
#: serverguide/C/security.xml:787(title)
8442
msgid "Logs"
8443
msgstr ""
8444
8445
#: serverguide/C/security.xml:788(para)
8446
msgid ""
8447
"Firewall logs are essential for recognizing attacks, troubleshooting your "
8448
"firewall rules, and noticing unusual activity on your network. You must "
8449
"include logging rules in your firewall for them to be generated, though, and "
8450
"logging rules must come before any applicable terminating rule (a rule with "
8451
"a target that decides the fate of the packet, such as ACCEPT, DROP, or "
8452
"REJECT)."
8453
msgstr ""
8454
8455
#: serverguide/C/security.xml:795(para)
8456
msgid ""
8457
"If you are using <application>ufw</application>, you can turn on logging by "
8458
"entering the following in a terminal:"
8459
msgstr ""
8460
8461
#: serverguide/C/security.xml:799(command)
8462
msgid "sudo ufw logging on"
8463
msgstr ""
8464
8465
#: serverguide/C/security.xml:801(para)
8466
msgid ""
8467
"To turn logging off in <application>ufw</application>, simply replace "
8468
"<emphasis role=\"italic\">on</emphasis> with <emphasis "
8469
"role=\"italic\">off</emphasis> in the above command."
8470
msgstr ""
8471
8472
#: serverguide/C/security.xml:804(para)
8473
msgid ""
8474
"If using <application>iptables</application> instead of "
8475
"<application>ufw</application>, enter:"
8476
msgstr ""
8477
8478
#: serverguide/C/security.xml:807(screen)
8479
#, no-wrap
8480
msgid ""
8481
"\n"
8482
"sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-"
8483
"prefix \"NEW_HTTP_CONN: \"\n"
8484
msgstr ""
8485
8486
#: serverguide/C/security.xml:810(para)
8487
msgid ""
8488
"A request on port 80 from the local machine, then, would generate a log in "
8489
"dmesg that looks like this:"
8490
msgstr ""
8491
8492
#: serverguide/C/security.xml:815(programlisting)
8493
#, no-wrap
8494
msgid ""
8495
"[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= "
8496
"MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 "
8497
"LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 "
8498
"WINDOW=32767 RES=0x00 SYN URGP=0"
8499
msgstr ""
8500
8501
#: serverguide/C/security.xml:817(para)
8502
msgid ""
8503
"The above log will also appear in <filename>/var/log/messages</filename>, "
8504
"<filename>/var/log/syslog</filename>, and "
8505
"<filename>/var/log/kern.log</filename>. This behavior can be modified by "
8506
"editing <filename>/etc/syslog.conf</filename> appropriately or by installing "
8507
"and configuring <application>ulogd</application> and using the ULOG target "
8508
"instead of LOG. The <application>ulogd</application> daemon is a userspace "
8509
"server that listens for logging instructions from the kernel specifically "
8510
"for firewalls, and can log to any file you like, or even to a "
8511
"<application>PostgreSQL</application> or <application>MySQL</application> "
8512
"database. Making sense of your firewall logs can be simplified by using a "
8513
"log analyzing tool such as <application>fwanalog</application>, "
8514
"<application> fwlogwatch</application>, or <application>lire</application>."
8515
msgstr ""
8516
8517
#: serverguide/C/security.xml:832(title)
8518
msgid "Other Tools"
8519
msgstr ""
8520
8521
#: serverguide/C/security.xml:833(para)
8522
msgid ""
8523
"There are many tools available to help you construct a complete firewall "
8524
"without intimate knowledge of iptables. For the GUI-inclined:"
8525
msgstr ""
8526
8527
#: serverguide/C/security.xml:839(para)
8528
msgid ""
8529
"<ulink url=\"http://www.fs-security.com/\">Firestarter</ulink> is quite "
8530
"popular and easy to use."
8531
msgstr ""
8532
8533
#: serverguide/C/security.xml:844(para)
8534
msgid ""
8535
"<ulink url=\"http://www.fwbuilder.org/\">fwbuilder</ulink> is very powerful "
8536
"and will look familiar to an administrator who has used a commercial "
8537
"firewall utility such as <application>Checkpoint FireWall-1</application>."
8538
msgstr ""
8539
8540
#: serverguide/C/security.xml:850(para)
8541
msgid ""
8542
"If you prefer a command-line tool with plain-text configuration files:"
8543
msgstr ""
8544
8545
#: serverguide/C/security.xml:855(para)
8546
msgid ""
8547
"<ulink url=\"http://www.shorewall.net/\">Shorewall</ulink> is a very "
8548
"powerful solution to help you configure an advanced firewall for any network."
8549
msgstr ""
8550
8551
#: serverguide/C/security.xml:861(para)
8552
msgid ""
8553
"<ulink url=\"http://www.linuxkungfu.org/\">ipkungfu</ulink> should give you "
8554
"a working firewall \"out of the box\" with zero configuration, and will "
8555
"allow you to easily set up a more advanced firewall by editing simple, well-"
8556
"documented configuration files."
8557
msgstr ""
8558
8559
#: serverguide/C/security.xml:868(para)
8560
msgid ""
8561
"<ulink url=\"http://fireflier.sourceforge.net/\">fireflier</ulink> is "
8562
"designed to be a desktop firewall application. It is made up of a server "
8563
"(fireflier-server) and your choice of GUI clients (GTK or QT), and behaves "
8564
"like many popular interactive firewall applications for Windows."
8565
msgstr ""
8566
8567
#: serverguide/C/security.xml:880(para)
8568
msgid ""
8569
"The <ulink url=\"https://wiki.ubuntu.com/UbuntuFirewall\">Ubuntu "
8570
"Firewall</ulink> wiki page contains information on the development of "
8571
"<application>ufw</application>."
8572
msgstr ""
8573
8574
#: serverguide/C/security.xml:886(para)
8575
msgid ""
8576
"Also, the <application>ufw</application> manual page contains some very "
8577
"useful information: <command>man ufw</command>."
8578
msgstr ""
8579
8580
#: serverguide/C/security.xml:891(para)
8581
msgid ""
8582
"See the <ulink url=\"http://www.netfilter.org/documentation/HOWTO/packet-"
8583
"filtering-HOWTO.html\">packet-filtering-HOWTO</ulink> for more information "
8584
"on using <application>iptables</application>."
8585
msgstr ""
8586
8587
#: serverguide/C/security.xml:897(para)
8588
msgid ""
8589
"The <ulink url=\"http://www.netfilter.org/documentation/HOWTO/NAT-"
8590
"HOWTO.html\">nat-HOWTO</ulink> contains further details on masquerading."
8591
msgstr ""
8592
8593
#: serverguide/C/security.xml:903(para)
8594
msgid ""
8595
"The <ulink url=\"https://help.ubuntu.com/community/IptablesHowTo\">IPTables "
8596
"HowTo</ulink> in the Ubuntu wiki is a great resource."
8597
msgstr ""
8598
8599
#: serverguide/C/security.xml:911(title)
8600
msgid "AppArmor"
8601
msgstr ""
8602
8603
#: serverguide/C/security.xml:912(para)
8604
msgid ""
8605
"<application>AppArmor</application> is a Linux Security Module "
8606
"implementation of name-based mandatory access controls. AppArmor confines "
8607
"individual programs to a set of listed files and posix 1003.1e draft "
8608
"capabilities."
8609
msgstr ""
8610
8611
#: serverguide/C/security.xml:916(para)
8612
msgid ""
8613
"<application>AppArmor</application> is installed and loaded by default. It "
8614
"uses <emphasis>profiles</emphasis> of an application to determine what files "
8615
"and permissions the application requires. Some packages will install their "
8616
"own profiles, and additional profiles can be found in the "
8617
"<application>apparmor-profiles</application> package."
8618
msgstr ""
8619
8620
#: serverguide/C/security.xml:921(para)
8621
msgid ""
8622
"To install the <application>apparmor-profiles</application> package from a "
8623
"terminal prompt:"
8624
msgstr ""
8625
8626
#: serverguide/C/security.xml:927(para)
8627
msgid "AppArmor profiles have two modes of execution:"
8628
msgstr ""
8629
8630
#: serverguide/C/security.xml:932(para)
8631
msgid ""
8632
"Complaining/Learning: profile violations are permitted and logged. Useful "
8633
"for testing and developing new profiles."
8634
msgstr ""
8635
8636
#: serverguide/C/security.xml:937(para)
8637
msgid ""
8638
"Enforced/Confined: enforces profile policy as well as logging the violation."
8639
msgstr ""
8640
8641
#: serverguide/C/security.xml:943(title)
8642
msgid "Using AppArmor"
8643
msgstr ""
8644
8645
#: serverguide/C/security.xml:944(para)
8646
msgid ""
8647
"The <application>apparmor-utils</application> package contains command line "
8648
"utilities that you can use to change the <application>AppArmor</application> "
8649
"execution mode, find the status of a profile, create new profiles, etc."
8650
msgstr ""
8651
8652
#: serverguide/C/security.xml:950(para)
8653
msgid ""
8654
"<application>apparmor_status</application> is used to view the current "
8655
"status of AppArmor profiles."
8656
msgstr ""
8657
8658
#: serverguide/C/security.xml:954(command)
8659
msgid "sudo apparmor_status"
8660
msgstr ""
8661
8662
#: serverguide/C/security.xml:958(para)
8663
msgid ""
8664
"<application>aa-complain</application> places a profile into "
8665
"<emphasis>complain</emphasis> mode."
8666
msgstr ""
8667
8668
#: serverguide/C/security.xml:962(command)
8669
msgid "sudo aa-complain /path/to/bin"
8670
msgstr ""
8671
8672
#: serverguide/C/security.xml:966(para)
8673
msgid ""
8674
"<application>aa-enforce</application> places a profile into "
8675
"<emphasis>enforce</emphasis> mode."
8676
msgstr ""
8677
8678
#: serverguide/C/security.xml:970(command)
8679
msgid "sudo aa-enforce /path/to/bin"
8680
msgstr ""
8681
8682
#: serverguide/C/security.xml:974(para)
8683
msgid ""
8684
"The <filename>/etc/apparmor.d</filename> directory is where the AppArmor "
8685
"profiles are located. It can be used to manipulate the "
8686
"<emphasis>mode</emphasis> of all profiles."
8687
msgstr ""
8688
8689
#: serverguide/C/security.xml:978(para)
8690
msgid "Enter the following to place all profiles into complain mode:"
8691
msgstr ""
8692
8693
#: serverguide/C/security.xml:982(command)
8694
msgid "sudo aa-complain /etc/apparmor.d/*"
8695
msgstr ""
8696
8697
#: serverguide/C/security.xml:984(para)
8698
msgid "To place all profiles in enforce mode:"
8699
msgstr ""
8700
8701
#: serverguide/C/security.xml:988(command)
8702
msgid "sudo aa-enforce /etc/apparmor.d/*"
8703
msgstr ""
8704
8705
#: serverguide/C/security.xml:992(para)
8706
msgid ""
8707
"<application>apparmor_parser</application> is used to load a profile into "
8708
"the kernel. It can also be used to reload a currently loaded profile using "
8709
"the <emphasis>-r</emphasis> option. To load a profile:"
8710
msgstr ""
8711
8712
#: serverguide/C/security.xml:997(command) serverguide/C/security.xml:1029(command)
8713
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a"
8714
msgstr ""
8715
8716
#: serverguide/C/security.xml:999(para)
8717
msgid "To reload a profile:"
8718
msgstr ""
8719
8720
#: serverguide/C/security.xml:1003(command)
8721
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r"
8722
msgstr ""
8723
8724
#: serverguide/C/security.xml:1007(para)
8725
msgid ""
8726
"<filename>/etc/init.d/apparmor</filename> can be used to "
8727
"<emphasis>reload</emphasis> all profiles:"
8728
msgstr ""
8729
8730
#: serverguide/C/security.xml:1011(command) serverguide/C/network-auth.xml:632(command)
8731
msgid "sudo /etc/init.d/apparmor reload"
8732
msgstr ""
8733
8734
#: serverguide/C/security.xml:1015(para)
8735
msgid ""
8736
"The <filename>/etc/apparmor.d/disable</filename> directory can be used along "
8737
"with the <application>apparmor_parser -R</application> option to "
8738
"<emphasis>disable</emphasis> a profile."
8739
msgstr ""
8740
8741
#: serverguide/C/security.xml:1020(command)
8742
msgid "sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/"
8743
msgstr ""
8744
8745
#: serverguide/C/security.xml:1021(command)
8746
msgid "sudo apparmor_parser -R /etc/apparmor.d/profile.name"
8747
msgstr ""
8748
8749
#: serverguide/C/security.xml:1023(para)
8750
msgid ""
8751
"To <emphasis>re-enable</emphasis> a disabled profile remove the symbolic "
8752
"link to the profile in <filename>/etc/apparmor.d/disable/</filename>. Then "
8753
"load the profile using the <emphasis>-a</emphasis> option."
8754
msgstr ""
8755
8756
#: serverguide/C/security.xml:1028(command)
8757
msgid "sudo rm /etc/apparmor.d/disable/profile.name"
8758
msgstr ""
8759
8760
#: serverguide/C/security.xml:1033(para)
8761
msgid ""
8762
"<application>AppArmor</application> can be disabled, and the kernel module "
8763
"unloaded by entering the following:"
8764
msgstr ""
8765
8766
#: serverguide/C/security.xml:1037(command)
8767
msgid "sudo /etc/init.d/apparmor stop"
8768
msgstr ""
8769
8770
#: serverguide/C/security.xml:1038(command)
8771
msgid "sudo update-rc.d -f apparmor remove"
8772
msgstr ""
8773
8774
#: serverguide/C/security.xml:1042(para)
8775
msgid "To re-enable <application>AppArmor</application> enter:"
8776
msgstr ""
8777
8778
#: serverguide/C/security.xml:1046(command)
8779
msgid "sudo /etc/init.d/apparmor start"
8780
msgstr ""
8781
8782
#: serverguide/C/security.xml:1047(command)
8783
msgid "sudo update-rc.d apparmor defaults"
8784
msgstr ""
8785
8786
#: serverguide/C/security.xml:1052(para)
8787
msgid ""
8788
"Replace <emphasis>profile.name</emphasis> with the name of the profile you "
8789
"want to manipulate. Also, replace <filename>/path/to/bin/</filename> with "
8790
"the actual executable file path. For example for the "
8791
"<application>ping</application> command use <filename>/bin/ping</filename>"
8792
msgstr ""
8793
8794
#: serverguide/C/security.xml:1060(title)
8795
msgid "Profiles"
8796
msgstr ""
8797
8798
#: serverguide/C/security.xml:1061(para)
8799
msgid ""
8800
"<application>AppArmor</application> profiles are simple text files located "
8801
"in <filename>/etc/apparmor.d/</filename>. The files are named after the full "
8802
"path to the executable they profile replacing the \"/\" with \".\". For "
8803
"example <filename>/etc/apparmor.d/bin.ping</filename> is the AppArmor "
8804
"profile for the <filename>/bin/ping</filename> command."
8805
msgstr ""
8806
8807
#: serverguide/C/security.xml:1067(para)
8808
msgid "There are two main type of rules used in profiles:"
8809
msgstr ""
8810
8811
#: serverguide/C/security.xml:1072(para)
8812
msgid ""
8813
"<emphasis>Path entries:</emphasis> which detail which files an application "
8814
"can access in the file system."
8815
msgstr ""
8816
8817
#: serverguide/C/security.xml:1077(para)
8818
msgid ""
8819
"<emphasis>Capability entries:</emphasis> determine what privileges a "
8820
"confined process is allowed to use."
8821
msgstr ""
8822
8823
#: serverguide/C/security.xml:1082(para)
8824
msgid ""
8825
"As an example take a look at <filename>/etc/apparmor.d/bin.ping</filename>:"
8826
msgstr ""
8827
8828
#: serverguide/C/security.xml:1085(programlisting)
8829
#, no-wrap
8830
msgid ""
8831
"\n"
8832
"#include <tunables/global>\n"
8833
"/bin/ping flags=(complain) {\n"
8834
" #include <abstractions/base>\n"
8835
" #include <abstractions/consoles>\n"
8836
" #include <abstractions/nameservice>\n"
8837
"\n"
8838
" capability net_raw,\n"
8839
" capability setuid,\n"
8840
" network inet raw,\n"
8841
" \n"
8842
" /bin/ping mixr,\n"
8843
" /etc/modules.conf r,\n"
8844
"}\n"
8845
msgstr ""
8846
8847
#: serverguide/C/security.xml:1102(para)
8848
msgid ""
8849
"<emphasis>#include <tunables/global>:</emphasis> include statements "
8850
"from other files. This allows statements pertaining to multiple applications "
8851
"to be placed in a common file."
8852
msgstr ""
8853
8854
#: serverguide/C/security.xml:1108(para)
8855
msgid ""
8856
"<emphasis>/bin/ping flags=(complain):</emphasis> path to the profiled "
8857
"program, also setting the mode to <emphasis>complain</emphasis>."
8858
msgstr ""
8859
8860
#: serverguide/C/security.xml:1114(para)
8861
msgid ""
8862
"<emphasis>capability net_raw,:</emphasis> allows the application access to "
8863
"the CAP_NET_RAW Posix.1e capability."
8864
msgstr ""
8865
8866
#: serverguide/C/security.xml:1119(para)
8867
msgid ""
8868
"<emphasis>/bin/ping mixr,:</emphasis> allows the application read and "
8869
"execute access to the file."
8870
msgstr ""
8871
8872
#: serverguide/C/security.xml:1125(para)
8873
msgid ""
8874
"After editing a profile file the profile must be reloaded. See <xref "
8875
"linkend=\"apparmor-usage\"/> for details."
8876
msgstr ""
8877
8878
#: serverguide/C/security.xml:1130(title)
8879
msgid "Creating a Profile"
8880
msgstr ""
8881
8882
#: serverguide/C/security.xml:1133(para)
8883
msgid ""
8884
"<emphasis>Design a test plan:</emphasis> Try to think about how the "
8885
"application should be exercised. The test plan should be divided into small "
8886
"test cases. Each test case should have a small description and list the "
8887
"steps to follow."
8888
msgstr ""
8889
8890
#: serverguide/C/security.xml:1137(para)
8891
msgid "Some standard test cases are:"
8892
msgstr ""
8893
8894
#: serverguide/C/security.xml:1142(para)
8895
msgid "Starting the program."
8896
msgstr ""
8897
8898
#: serverguide/C/security.xml:1147(para)
8899
msgid "Stopping the program."
8900
msgstr ""
8901
8902
#: serverguide/C/security.xml:1152(para)
8903
msgid "Reloading the program."
8904
msgstr ""
8905
8906
#: serverguide/C/security.xml:1157(para)
8907
msgid "Testing all the commands supported by the init script."
8908
msgstr ""
8909
8910
#: serverguide/C/security.xml:1164(para)
8911
msgid ""
8912
"<emphasis>Generate the new profile:</emphasis> Use <application>aa-"
8913
"genprof</application> to generate a new profile. From a terminal:"
8914
msgstr ""
8915
8916
#: serverguide/C/security.xml:1169(command)
8917
msgid "sudo aa-genprof executable"
8918
msgstr ""
8919
8920
#: serverguide/C/security.xml:1171(para)
8921
msgid "For example:"
8922
msgstr ""
8923
8924
#: serverguide/C/security.xml:1175(command)
8925
msgid "sudo aa-genprof slapd"
8926
msgstr ""
8927
8928
#: serverguide/C/security.xml:1179(para)
8929
msgid ""
8930
"To get your new profile included in the <application>apparmor-"
8931
"profiles</application> package, file a bug in <emphasis>Launchpad</emphasis> "
8932
"against the <ulink "
8933
"url=\"https://bugs.launchpad.net/ubuntu/+source/apparmor/+filebug\">AppArmor<"
8934
"/ulink> package:"
8935
msgstr ""
8936
8937
#: serverguide/C/security.xml:1186(para)
8938
msgid "Include your test plan and test cases."
8939
msgstr ""
8940
8941
#: serverguide/C/security.xml:1191(para)
8942
msgid "Attach your new profile to the bug."
8943
msgstr ""
8944
8945
#: serverguide/C/security.xml:1200(title)
8946
msgid "Updating Profiles"
8947
msgstr ""
8948
8949
#: serverguide/C/security.xml:1201(para)
8950
msgid ""
8951
"When the program is misbehaving, audit messages are sent to the log files. "
8952
"The program <application>aa-logprof</application> can be used to scan log "
8953
"files for <application>AppArmor</application> audit messages, review them "
8954
"and update the profiles. From a terminal:"
8955
msgstr ""
8956
8957
#: serverguide/C/security.xml:1206(command)
8958
msgid "sudo aa-logprof"
8959
msgstr ""
8960
8961
#: serverguide/C/security.xml:1214(para)
8962
msgid ""
8963
"See the <ulink "
8964
"url=\"http://www.novell.com/documentation/apparmor/apparmor201_sp10_admin/ind"
8965
"ex.html?page=/documentation/apparmor/apparmor201_sp10_admin/data/book_apparmo"
8966
"r_admin.html\">AppArmor Administration Guide</ulink> for advanced "
8967
"configuration options."
8968
msgstr ""
8969
8970
#: serverguide/C/security.xml:1221(para)
8971
msgid ""
8972
"For details using AppArmor with other Ubuntu releases see the <ulink "
8973
"url=\"https://help.ubuntu.com/community/AppArmor\"> AppArmor Community "
8974
"Wiki</ulink> page."
8975
msgstr ""
8976
8977
#: serverguide/C/security.xml:1229(para)
8978
msgid ""
8979
"The <ulink url=\"http://en.opensuse.org/AppArmor\">OpenSUSE AppArmor</ulink> "
8980
"page is another introduction to AppArmor."
8981
msgstr ""
8982
8983
#: serverguide/C/security.xml:1236(para)
8984
msgid ""
8985
"A great place to ask for <application>AppArmor</application> assistance, and "
8986
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
8987
"server</emphasis> IRC channel on <ulink "
8988
"url=\"http://freenode.net\">freenode</ulink>."
8989
msgstr ""
8990
8991
#: serverguide/C/security.xml:1246(title)
8992
msgid "Certificates"
8993
msgstr ""
8994
8995
#: serverguide/C/security.xml:1247(para)
8996
msgid ""
8997
"One of the most common forms of cryptography today is <emphasis>public-"
8998
"key</emphasis> cryptography. Public-key cryptography utilizes a "
8999
"<emphasis>public key</emphasis> and a <emphasis>private key</emphasis>. The "
9000
"system works by <emphasis>encrypting</emphasis> information using the public "
9001
"key. The information can then only be <emphasis>decrypted</emphasis> using "
9002
"the private key."
9003
msgstr ""
9004
9005
#: serverguide/C/security.xml:1253(para)
9006
msgid ""
9007
"A common use for public-key cryptography is encrypting application traffic "
9008
"using a Secure Socket Layer (SSL) or Transport Layer Security (TLS) "
9009
"connection. For example, configuring Apache to provide "
9010
"<emphasis>HTTPS</emphasis>, the HTTP protocol over SSL. This allows a way to "
9011
"encrypt traffic using a protocol that does not itself provide encryption."
9012
msgstr ""
9013
9014
#: serverguide/C/security.xml:1258(para)
9015
msgid ""
9016
"A <emphasis>Certificate</emphasis> is a method used to distribute a "
9017
"<emphasis>public key</emphasis> and other information about a server and the "
9018
"organization who is responsible for it. Certificates can be digitally signed "
9019
"by a <emphasis>Certification Authority</emphasis> or CA. A CA is a trusted "
9020
"third party that has confirmed that the information contained in the "
9021
"certificate is accurate."
9022
msgstr ""
9023
9024
#: serverguide/C/security.xml:1265(title)
9025
msgid "Types of Certificates"
9026
msgstr ""
9027
9028
#: serverguide/C/security.xml:1266(para)
9029
msgid ""
9030
"To set up a secure server using public-key cryptography, in most cases, you "
9031
"send your certificate request (including your public key), proof of your "
9032
"company's identity, and payment to a CA. The CA verifies the certificate "
9033
"request and your identity, and then sends back a certificate for your secure "
9034
"server. Alternatively, you can create your own <emphasis>self-"
9035
"signed</emphasis> certificate."
9036
msgstr ""
9037
9038
#: serverguide/C/security.xml:1276(para)
9039
msgid ""
9040
"Note, that self-signed certificates should not be used in most production "
9041
"environments."
9042
msgstr ""
9043
9044
#: serverguide/C/security.xml:1280(para)
9045
msgid ""
9046
"Continuing the HTTPS example, a CA-signed certificate provides two important "
9047
"capabilities that a self-signed certificate does not:"
9048
msgstr ""
9049
9050
#: serverguide/C/security.xml:1287(para)
9051
msgid ""
9052
"Browsers (usually) automatically recognize the certificate and allow a "
9053
"secure connection to be made without prompting the user."
9054
msgstr ""
9055
9056
#: serverguide/C/security.xml:1294(para)
9057
msgid ""
9058
"When a CA issues a signed certificate, it is guaranteeing the identity of "
9059
"the organization that is providing the web pages to the browser."
9060
msgstr ""
9061
9062
#: serverguide/C/security.xml:1302(para)
9063
msgid ""
9064
"Most Web browsers, and computers, that support SSL have a list of CAs whose "
9065
"certificates they automatically accept. If a browser encounters a "
9066
"certificate whose authorizing CA is not in the list, the browser asks the "
9067
"user to either accept or decline the connection. Also, other applications "
9068
"may generate an error message when using a self-singed certificate."
9069
msgstr ""
9070
9071
#: serverguide/C/security.xml:1310(para)
9072
msgid ""
9073
"The process of getting a certificate from a CA is fairly easy. A quick "
9074
"overview is as follows:"
9075
msgstr ""
9076
9077
#: serverguide/C/security.xml:1317(para)
9078
msgid "Create a private and public encryption key pair."
9079
msgstr ""
9080
9081
#: serverguide/C/security.xml:1320(para)
9082
msgid ""
9083
"Create a certificate request based on the public key. The certificate "
9084
"request contains information about your server and the company hosting it."
9085
msgstr ""
9086
9087
#: serverguide/C/security.xml:1325(para)
9088
msgid ""
9089
"Send the certificate request, along with documents proving your identity, to "
9090
"a CA. We cannot tell you which certificate authority to choose. Your "
9091
"decision may be based on your past experiences, or on the experiences of "
9092
"your friends or colleagues, or purely on monetary factors."
9093
msgstr ""
9094
9095
#: serverguide/C/security.xml:1331(para)
9096
msgid ""
9097
"Once you have decided upon a CA, you need to follow the instructions they "
9098
"provide on how to obtain a certificate from them."
9099
msgstr ""
9100
9101
#: serverguide/C/security.xml:1336(para)
9102
msgid ""
9103
"When the CA is satisfied that you are indeed who you claim to be, they send "
9104
"you a digital certificate."
9105
msgstr ""
9106
9107
#: serverguide/C/security.xml:1340(para)
9108
msgid ""
9109
"Install this certificate on your secure server, and configure the "
9110
"appropriate applications to use the certificate."
9111
msgstr ""
9112
9113
#: serverguide/C/security.xml:1349(title)
9114
msgid "Generating a Certificate Signing Request (CSR)"
9115
msgstr ""
9116
9117
#: serverguide/C/security.xml:1351(para)
9118
msgid ""
9119
"Whether you are getting a certificate from a CA or generating your own self-"
9120
"signed certificate, the first step is to generate a key."
9121
msgstr ""
9122
9123
#: serverguide/C/security.xml:1356(para)
9124
msgid ""
9125
"If the certificate will be used by service daemons, such as Apache, Postfix, "
9126
"Dovecot, etc, a key without a passphrase is often appropriate. Not having a "
9127
"passphrase allows the services to start without manual intervention, usually "
9128
"the preferred way to start a daemon."
9129
msgstr ""
9130
9131
#: serverguide/C/security.xml:1362(para)
9132
msgid ""
9133
"This section will cover generating a key with a passphrase, and one without. "
9134
"The non-passphrase key will then be used to generate a certificate that can "
9135
"be used with various service daemons."
9136
msgstr ""
9137
9138
#: serverguide/C/security.xml:1368(para)
9139
msgid ""
9140
"Running your secure service without a passphrase is convenient because you "
9141
"will not need to enter the passphrase every time you start your secure "
9142
"service. But it is insecure and a compromise of the key means a compromise "
9143
"of the server as well."
9144
msgstr ""
9145
9146
#: serverguide/C/security.xml:1375(para)
9147
msgid ""
9148
"To generate the <emphasis>keys</emphasis> for the Certificate Signing "
9149
"Request (CSR) run the following command from a terminal prompt:"
9150
msgstr ""
9151
9152
#: serverguide/C/security.xml:1381(command)
9153
msgid "openssl genrsa -des3 -out server.key 1024"
9154
msgstr ""
9155
9156
#: serverguide/C/security.xml:1384(programlisting)
9157
#, no-wrap
9158
msgid ""
9159
"\n"
9160
"Generating RSA private key, 1024 bit long modulus\n"
9161
".....................++++++\n"
9162
".................++++++\n"
9163
"unable to write 'random state'\n"
9164
"e is 65537 (0x10001)\n"
9165
"Enter pass phrase for server.key:\n"
9166
msgstr ""
9167
9168
#: serverguide/C/security.xml:1393(para)
9169
msgid ""
9170
"You can now enter your passphrase. For best security, it should at least "
9171
"contain eight characters. The minimum length when specifying -des3 is four "
9172
"characters. It should include numbers and/or punctuation and not be a word "
9173
"in a dictionary. Also remember that your passphrase is case-sensitive."
9174
msgstr ""
9175
9176
#: serverguide/C/security.xml:1401(para)
9177
msgid ""
9178
"Re-type the passphrase to verify. Once you have re-typed it correctly, the "
9179
"server key is generated and stored in the <filename>server.key</filename> "
9180
"file."
9181
msgstr ""
9182
9183
#: serverguide/C/security.xml:1407(para)
9184
msgid ""
9185
"Now create the insecure key, the one without a passphrase, and shuffle the "
9186
"key names:"
9187
msgstr ""
9188
9189
#: serverguide/C/security.xml:1413(command)
9190
msgid "openssl rsa -in server.key -out server.key.insecure"
9191
msgstr ""
9192
9193
#: serverguide/C/security.xml:1414(command)
9194
msgid "mv server.key server.key.secure"
9195
msgstr ""
9196
9197
#: serverguide/C/security.xml:1415(command)
9198
msgid "mv server.key.insecure server.key"
9199
msgstr ""
9200
9201
#: serverguide/C/security.xml:1418(para)
9202
msgid ""
9203
"The insecure key is now named <filename>server.key</filename>, and you can "
9204
"use this file to generate the CSR without passphrase."
9205
msgstr ""
9206
9207
#: serverguide/C/security.xml:1423(para)
9208
msgid "To create the CSR, run the following command at a terminal prompt:"
9209
msgstr ""
9210
9211
#: serverguide/C/security.xml:1428(command)
9212
msgid "openssl req -new -key server.key -out server.csr"
9213
msgstr ""
9214
9215
#: serverguide/C/security.xml:1431(para)
9216
msgid ""
9217
"It will prompt you enter the passphrase. If you enter the correct "
9218
"passphrase, it will prompt you to enter Company Name, Site Name, Email Id, "
9219
"etc. Once you enter all these details, your CSR will be created and it will "
9220
"be stored in the <filename>server.csr</filename> file."
9221
msgstr ""
9222
9223
#: serverguide/C/security.xml:1439(para)
9224
msgid ""
9225
"You can now submit this CSR file to a CA for processing. The CA will use "
9226
"this CSR file and issue the certificate. On the other hand, you can create "
9227
"self-signed certificate using this CSR."
9228
msgstr ""
9229
9230
#: serverguide/C/security.xml:1447(title)
9231
msgid "Creating a Self-Signed Certificate"
9232
msgstr ""
9233
9234
#: serverguide/C/security.xml:1448(para)
9235
msgid ""
9236
"To create the self-signed certificate, run the following command at a "
9237
"terminal prompt:"
9238
msgstr ""
9239
9240
#: serverguide/C/security.xml:1453(command)
9241
msgid ""
9242
"openssl x509 -req -days 365 -in server.csr -signkey server.key -out "
9243
"server.crt"
9244
msgstr ""
9245
9246
#: serverguide/C/security.xml:1456(para)
9247
msgid ""
9248
"The above command will prompt you to enter the passphrase. Once you enter "
9249
"the correct passphrase, your certificate will be created and it will be "
9250
"stored in the <filename>server.crt</filename> file."
9251
msgstr ""
9252
9253
#: serverguide/C/security.xml:1461(para)
9254
msgid ""
9255
"If your secure server is to be used in a production environment, you "
9256
"probably need a CA-signed certificate. It is not recommended to use self-"
9257
"signed certificate."
9258
msgstr ""
9259
9260
#: serverguide/C/security.xml:1469(title)
9261
msgid "Installing the Certificate"
9262
msgstr ""
9263
9264
#: serverguide/C/security.xml:1471(para)
9265
msgid ""
9266
"You can install the key file <filename>server.key</filename> and certificate "
9267
"file <filename>server.crt</filename>, or the certificate file issued by your "
9268
"CA, by running following commands at a terminal prompt:"
9269
msgstr ""
9270
9271
#: serverguide/C/security.xml:1477(command)
9272
msgid "sudo cp server.crt /etc/ssl/certs"
9273
msgstr ""
9274
9275
#: serverguide/C/security.xml:1478(command)
9276
msgid "sudo cp server.key /etc/ssl/private"
9277
msgstr ""
9278
9279
#: serverguide/C/security.xml:1480(para)
9280
msgid ""
9281
"Now simply configure any applications, with the ability to use public-key "
9282
"cryptography, to use the <emphasis>certificate</emphasis> and "
9283
"<emphasis>key</emphasis> files. For example, "
9284
"<application>Apache</application> can provide HTTPS, "
9285
"<application>Dovecot</application> can provide IMAPS and POP3S, etc."
9286
msgstr ""
9287
9288
#: serverguide/C/security.xml:1487(title)
9289
msgid "Certification Authority"
9290
msgstr ""
9291
9292
#: serverguide/C/security.xml:1489(para)
9293
msgid ""
9294
"If the services on your network require more than a few self-signed "
9295
"certificates it may be worth the additional effort to setup your own "
9296
"internal <emphasis>Certification Authority (CA)</emphasis>. Using "
9297
"certificates signed by your own CA, allows the various services using the "
9298
"certificates to easily trust other services using certificates issued from "
9299
"the same CA."
9300
msgstr ""
9301
9302
#: serverguide/C/security.xml:1499(para)
9303
msgid ""
9304
"First, create the directories to hold the CA certificate and related files:"
9305
msgstr ""
9306
9307
#: serverguide/C/security.xml:1504(command)
9308
msgid "sudo mkdir /etc/ssl/CA"
9309
msgstr ""
9310
9311
#: serverguide/C/security.xml:1505(command)
9312
msgid "sudo mkdir /etc/ssl/newcerts"
9313
msgstr ""
9314
9315
#: serverguide/C/security.xml:1511(para)
9316
msgid ""
9317
"The CA needs a few additional files to operate, one to keep track of the "
9318
"last serial number used by the CA, each certificate must have a unique "
9319
"serial number, and another file to record which certificates have been "
9320
"issued:"
9321
msgstr ""
9322
9323
#: serverguide/C/security.xml:1518(command)
9324
msgid "sudo sh -c \"echo '01' > /etc/ssl/CA/serial\""
9325
msgstr ""
9326
9327
#: serverguide/C/security.xml:1519(command)
9328
msgid "sudo touch /etc/ssl/CA/index.txt"
9329
msgstr ""
9330
9331
#: serverguide/C/security.xml:1525(para)
9332
msgid ""
9333
"The third file is a CA configuration file. Though not strictly necessary, it "
9334
"is very convenient when issuing multiple certificates. Edit "
9335
"<filename>/etc/ssl/openssl.cnf</filename>, and in the <emphasis>[ CA_default "
9336
"]</emphasis> change:"
9337
msgstr ""
9338
9339
#: serverguide/C/security.xml:1531(programlisting)
9340
#, no-wrap
9341
msgid ""
9342
"\n"
9343
"dir = /etc/ssl/ # Where everything is kept\n"
9344
"database = $dir/CA/index.txt # database index file.\n"
9345
"certificate = $dir/certs/cacert.pem # The CA certificate\n"
9346
"serial = $dir/CA/serial # The current serial number\n"
9347
"private_key = $dir/private/cakey.pem# The private key\n"
9348
msgstr ""
9349
9350
#: serverguide/C/security.xml:1542(para)
9351
msgid "Next, create the self-singed root certificate:"
9352
msgstr ""
9353
9354
#: serverguide/C/security.xml:1547(command)
9355
msgid ""
9356
"openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -"
9357
"days 3650"
9358
msgstr ""
9359
9360
#: serverguide/C/security.xml:1550(para)
9361
msgid "You will then be asked to enter the details about the certificate."
9362
msgstr ""
9363
9364
#: serverguide/C/security.xml:1557(para)
9365
msgid "Now install the root certificate and key:"
9366
msgstr ""
9367
9368
#: serverguide/C/security.xml:1562(command)
9369
msgid "sudo mv cakey.pem /etc/ssl/private/"
9370
msgstr ""
9371
9372
#: serverguide/C/security.xml:1563(command)
9373
msgid "sudo mv cacert.pem /etc/ssl/certs/"
9374
msgstr ""
9375
9376
#: serverguide/C/security.xml:1569(para)
9377
msgid ""
9378
"You are now ready to start signing certificates. The first item needed is a "
9379
"Certificate Signing Request (CSR), see <xref linkend=\"generating-a-csr\"/> "
9380
"for details. Once you have a CSR, enter the following to generate a "
9381
"certificate signed by the CA:"
9382
msgstr ""
9383
9384
#: serverguide/C/security.xml:1576(command)
9385
msgid "sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf"
9386
msgstr ""
9387
9388
#: serverguide/C/security.xml:1579(para)
9389
msgid ""
9390
"After entering the password for the CA key, you will be prompted to sign the "
9391
"certificate, and again to commit the new certificate. You should then see a "
9392
"somewhat large amount of output related to the certificate creation."
9393
msgstr ""
9394
9395
#: serverguide/C/security.xml:1588(para)
9396
msgid ""
9397
"There should now be a new file, "
9398
"<filename>/etc/ssl/newcerts/01.pem</filename>, containing the same output. "
9399
"Copy and paste everything between the <emphasis>-----BEGIN CERTIFICATE-----"
9400
"</emphasis> and <emphasis>----END CERTIFICATE-----</emphasis> lines to a "
9401
"file named after the hostname of the server where the certificate will be "
9402
"installed. For example <filename>mail.example.com.crt</filename>, is a nice "
9403
"descriptive name."
9404
msgstr ""
9405
9406
#: serverguide/C/security.xml:1596(para)
9407
msgid ""
9408
"Subsequent certificates will be named <filename>02.pem</filename>, "
9409
"<filename>03.pem</filename>, etc."
9410
msgstr ""
9411
9412
#: serverguide/C/security.xml:1601(para)
9413
msgid ""
9414
"Replace <emphasis>mail.example.com.crt</emphasis> with your own descriptive "
9415
"name."
9416
msgstr ""
9417
9418
#: serverguide/C/security.xml:1609(para)
9419
msgid ""
9420
"Finally, copy the new certificate to the host that needs it, and configure "
9421
"the appropriate applications to use it. The default location to install "
9422
"certificates is <filename role=\"directory\">/etc/ssl/certs</filename>. This "
9423
"enables multiple services to use the same certificate without overly "
9424
"complicated file permissions."
9425
msgstr ""
9426
9427
#: serverguide/C/security.xml:1615(para)
9428
msgid ""
9429
"For applications that can be configured to use a CA certificate, you should "
9430
"also copy the <filename>/etc/ssl/certs/cacert.pem</filename> file to the "
9431
"<filename role=\"directory\">/etc/ssl/certs/</filename> directory on each "
9432
"server."
9433
msgstr ""
9434
9435
#: serverguide/C/security.xml:1629(para)
9436
msgid ""
9437
"For more detailed instructions on using cryptography see the <ulink "
9438
"url=\"http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html\">SSL "
9439
"Certificates HOWTO</ulink> by tlpd.org"
9440
msgstr ""
9441
9442
#: serverguide/C/security.xml:1635(para)
9443
msgid ""
9444
"<ulink url=\"http://www.pki-page.org/\">The PKI Page</ulink> contains a list "
9445
"of Certificate Authorities."
9446
msgstr ""
9447
9448
#: serverguide/C/security.xml:1640(para)
9449
msgid ""
9450
"The Wikipedia <ulink "
9451
"url=\"http://en.wikipedia.org/wiki/Https\">HTTPS</ulink> page has more "
9452
"information regarding HTTPS."
9453
msgstr ""
9454
9455
#: serverguide/C/security.xml:1645(para)
9456
msgid ""
9457
"For more information on <emphasis>OpenSSL</emphasis> see the <ulink "
9458
"url=\"http://www.openssl.org/\">OpenSSL Home Page</ulink>."
9459
msgstr ""
9460
9461
#: serverguide/C/security.xml:1650(para)
9462
msgid ""
9463
"Also, O'Reilly's <ulink "
9464
"url=\"http://oreilly.com/catalog/9780596002701/\">Network Security with "
9465
"OpenSSL</ulink> is a good in depth reference."
9466
msgstr ""
9467
9468
#: serverguide/C/security.xml:1659(title)
9469
msgid "eCryptfs"
9470
msgstr ""
9471
9472
#: serverguide/C/security.xml:1661(para)
9473
msgid ""
9474
"<emphasis>eCryptfs</emphasis> is a POSIX-compliant enterprise-class stacked "
9475
"cryptographic filesystem for Linux. Layering on top of the filesystem layer "
9476
"<emphasis>eCryptfs</emphasis> protects files no matter the underlying "
9477
"filesystem, partition type, etc."
9478
msgstr ""
9479
9480
#: serverguide/C/security.xml:1667(para)
9481
msgid ""
9482
"During installation there is an option to encrypt the <filename "
9483
"role=\"directory\">/home</filename> partition. This will automatically "
9484
"configure everything needed to encrypt and mount the partition."
9485
msgstr ""
9486
9487
#: serverguide/C/security.xml:1672(para)
9488
msgid ""
9489
"As an example, this section will cover configuring <filename "
9490
"role=\"directory\">/srv</filename> to be encrypted using eCryptfs."
9491
msgstr ""
9492
9493
#: serverguide/C/security.xml:1677(title)
9494
msgid "Using eCryptfs"
9495
msgstr ""
9496
9497
#: serverguide/C/security.xml:1679(para)
9498
msgid "First, install the necessary packages. From a terminal prompt enter:"
9499
msgstr ""
9500
9501
#: serverguide/C/security.xml:1684(command)
9502
msgid "sudo apt-get install ecryptfs-utils"
9503
msgstr ""
9504
9505
#: serverguide/C/security.xml:1687(para)
9506
msgid "Now mount the partition to be encrypted:"
9507
msgstr ""
9508
9509
#: serverguide/C/security.xml:1692(command)
9510
msgid "sudo mount -t ecryptfs /srv /srv"
9511
msgstr ""
9512
9513
#: serverguide/C/security.xml:1695(para)
9514
msgid ""
9515
"You will then be prompted for some details on how "
9516
"<application>ecryptfs</application> should encrypt the data."
9517
msgstr ""
9518
9519
#: serverguide/C/security.xml:1699(para)
9520
msgid ""
9521
"To test that files placed in <filename>/srv</filename> are indeed encrypted "
9522
"copy the <filename>/etc/default</filename> folder to "
9523
"<filename>/srv</filename>:"
9524
msgstr ""
9525
9526
#: serverguide/C/security.xml:1705(command) serverguide/C/clustering.xml:192(command)
9527
msgid "sudo cp -r /etc/default /srv"
9528
msgstr ""
9529
9530
#: serverguide/C/security.xml:1708(para)
9531
msgid "Now unmount <filename>/srv</filename>, and try to view a file:"
9532
msgstr ""
9533
9534
#: serverguide/C/security.xml:1713(command) serverguide/C/installation.xml:1138(command) serverguide/C/clustering.xml:200(command)
9535
msgid "sudo umount /srv"
9536
msgstr ""
9537
9538
#: serverguide/C/security.xml:1714(command)
9539
msgid "cat /srv/default/cron"
9540
msgstr ""
9541
9542
#: serverguide/C/security.xml:1717(para)
9543
msgid ""
9544
"Remounting <filename>/srv</filename> using "
9545
"<application>ecryptfs</application> will make the data viewable once again."
9546
msgstr ""
9547
9548
#: serverguide/C/security.xml:1723(title)
9549
msgid "Automatically Mounting Encrypted Partitions"
9550
msgstr ""
9551
9552
#: serverguide/C/security.xml:1725(para)
9553
msgid ""
9554
"There are a couple of ways to automatically mount an "
9555
"<application>ecryptfs</application> encrypted filesystem at boot. This "
9556
"example will use a <filename>/root/.ecryptfsrc</filename> file containing "
9557
"mount options, along with a passphrase file residing on a USB key."
9558
msgstr ""
9559
9560
#: serverguide/C/security.xml:1731(para)
9561
msgid "First, create <filename>/root/.ecryptfsrc</filename> containing:"
9562
msgstr ""
9563
9564
#: serverguide/C/security.xml:1735(programlisting)
9565
#, no-wrap
9566
msgid ""
9567
"\n"
9568
"key=passphrase:passphrase_passwd_file=/mnt/usb/passwd_file.txt\n"
9569
"ecryptfs_sig=5826dd62cf81c615\n"
9570
"ecryptfs_cipher=aes\n"
9571
"ecryptfs_key_bytes=16\n"
9572
"ecryptfs_passthrough=n\n"
9573
"ecryptfs_enable_filename_crypto=n\n"
9574
msgstr ""
9575
9576
#: serverguide/C/security.xml:1745(para)
9577
msgid ""
9578
"Adjust the <emphasis>ecryptfs_sig</emphasis> to the signature in "
9579
"<filename>/root/.ecryptfs/sig-cache.txt</filename>."
9580
msgstr ""
9581
9582
#: serverguide/C/security.xml:1750(para)
9583
msgid ""
9584
"Next, create the <filename>/mnt/usb/passwd_file.txt</filename> passphrase "
9585
"file:"
9586
msgstr ""
9587
9588
#: serverguide/C/security.xml:1754(programlisting)
9589
#, no-wrap
9590
msgid ""
9591
"\n"
9592
"passphrase_passwd=[secrets]\n"
9593
msgstr ""
9594
9595
#: serverguide/C/security.xml:1758(para)
9596
msgid "Now add the necessary lines to <filename>/etc/fstab</filename>:"
9597
msgstr ""
9598
9599
#: serverguide/C/security.xml:1762(programlisting)
9600
#, no-wrap
9601
msgid ""
9602
"\n"
9603
"/dev/sdb1 /mnt/usb ext3 ro 0 0\n"
9604
"/srv /srv ecryptfs defaults 0 0\n"
9605
msgstr ""
9606
9607
#: serverguide/C/security.xml:1767(para)
9608
msgid "Make sure the USB drive is mounted before the encrypted partition."
9609
msgstr ""
9610
9611
#: serverguide/C/security.xml:1771(para)
9612
msgid ""
9613
"Finally, reboot and the <filename>/srv</filename> should be mounted using "
9614
"ecryptfs."
9615
msgstr ""
9616
9617
#: serverguide/C/security.xml:1779(para)
9618
msgid ""
9619
"The <application>ecryptfs-utils</application> package includes several other "
9620
"useful utilities:"
9621
msgstr ""
9622
9623
#: serverguide/C/security.xml:1785(para)
9624
msgid ""
9625
"<emphasis>ecryptfs-setup-private:</emphasis> creates a "
9626
"<filename>~/Private</filename> directory to contain encrypted information. "
9627
"This utility can be run by unprivileged users to keep data private from "
9628
"other users on the system."
9629
msgstr ""
9630
9631
#: serverguide/C/security.xml:1792(para)
9632
msgid ""
9633
"<emphasis>ecryptfs-mount-private and ecryptfs-umount-private:</emphasis> "
9634
"will mount and unmount respectively, a users <filename>~/Private</filename> "
9635
"directory."
9636
msgstr ""
9637
9638
#: serverguide/C/security.xml:1798(para)
9639
msgid ""
9640
"<emphasis>ecryptfs-add-passphrase:</emphasis> adds a new passphrase to the "
9641
"kernel keyring."
9642
msgstr ""
9643
9644
#: serverguide/C/security.xml:1803(para)
9645
msgid ""
9646
"<emphasis>ecryptfs-manager:</emphasis> manages "
9647
"<application>eCryptfs</application> objects such as keys."
9648
msgstr ""
9649
9650
#: serverguide/C/security.xml:1808(para)
9651
msgid ""
9652
"<emphasis>ecryptfs-stat:</emphasis> allows you to view the "
9653
"<application>ecryptfs</application> meta information for a file."
9654
msgstr ""
9655
9656
#: serverguide/C/security.xml:1821(para)
9657
msgid ""
9658
"For more information on eCryptfs see the <ulink "
9659
"url=\"https://launchpad.net/ecryptfs\">Launchpad project page</ulink>."
9660
msgstr ""
9661
9662
#: serverguide/C/security.xml:1826(para)
9663
msgid ""
9664
"There is also a <ulink "
9665
"url=\"http://www.linuxjournal.com/article/9400\">Linux Journal</ulink> "
9666
"article covering eCryptfs."
9667
msgstr ""
9668
9669
#: serverguide/C/security.xml:1831(para)
9670
msgid ""
9671
"Also, for more <application>ecryptfs</application> options see the <ulink "
9672
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/ecryptfs.7.html\">ecr"
9673
"yptfs man page</ulink>."
9674
msgstr ""
9675
9676
#: serverguide/C/security.xml:1837(para)
9677
msgid ""
9678
"The <ulink url=\"https://help.ubuntu.com/community/eCryptfs\">eCryptfs "
9679
"Ubuntu Wiki</ulink> page also has more details."
9680
msgstr ""
9681
9682
#: serverguide/C/reporting-bugs.xml:13(title)
9683
msgid "Appendix"
9684
msgstr ""
9685
9686
#: serverguide/C/reporting-bugs.xml:16(title)
9687
msgid "Reporting Bugs in Ubuntu Server Edition"
9688
msgstr ""
9689
9690
#: serverguide/C/reporting-bugs.xml:18(para)
9691
msgid ""
9692
"While the Ubuntu Project attempts to release software with as few bugs as "
9693
"possible, they do occur. You can help fix these bugs by reporting ones that "
9694
"you find to the project. The Ubuntu Project uses <ulink "
9695
"url=\"https://launchpad.net/\">Launchpad</ulink> to track its bug reports. "
9696
"In order to file a bug about Ubuntu Server on Launchpad, you will need to "
9697
"<ulink url=\"https://help.launchpad.net/YourAccount/NewAccount\">create an "
9698
"account</ulink>."
9699
msgstr ""
9700
9701
#: serverguide/C/reporting-bugs.xml:30(title)
9702
msgid "Reporting Bugs With ubuntu-bug"
9703
msgstr ""
9704
9705
#: serverguide/C/reporting-bugs.xml:32(para)
9706
msgid ""
9707
"The preferred way to report a bug is with the <application>ubuntu-"
9708
"bug</application> command. The ubuntu-bug tool gathers information about the "
9709
"system useful to developers in diagnosing the reported problem that will "
9710
"then be included in the bug report filed on Launchpad. Bug reports in Ubuntu "
9711
"need to be filed against a specific software package, thus the name of the "
9712
"package that the bug occurs in needs to be given to ubuntu-bug:"
9713
msgstr ""
9714
9715
#: serverguide/C/reporting-bugs.xml:43(command)
9716
msgid "ubuntu-bug PACKAGENAME"
9717
msgstr ""
9718
9719
#: serverguide/C/reporting-bugs.xml:46(para)
9720
msgid ""
9721
"For example, to file a bug against the openssh-server package, you would do:"
9722
msgstr ""
9723
9724
#: serverguide/C/reporting-bugs.xml:51(command)
9725
msgid "ubuntu-bug openssh-server"
9726
msgstr ""
9727
9728
#: serverguide/C/reporting-bugs.xml:54(para)
9729
msgid ""
9730
"You can specify either a binary package or the source package for ubuntu-"
9731
"bug. Again using openssh-server as an example, you could also generate the "
9732
"report against the source package for openssh-server, openssh:"
9733
msgstr ""
9734
9735
#: serverguide/C/reporting-bugs.xml:62(command)
9736
msgid "ubuntu-bug openssh"
9737
msgstr ""
9738
9739
#: serverguide/C/reporting-bugs.xml:66(para)
9740
msgid ""
9741
"See <xref linkend=\"package-management\"/> for more information about "
9742
"packages in Ubuntu."
9743
msgstr ""
9744
9745
#: serverguide/C/reporting-bugs.xml:72(para)
9746
msgid ""
9747
"The ubuntu-bug command will gather information about the system in question, "
9748
"possibly including information specific to the specified package, and then "
9749
"ask you what you would like to do with collected information:"
9750
msgstr ""
9751
9752
#: serverguide/C/reporting-bugs.xml:80(command)
9753
msgid "ubuntu-bug postgresql"
9754
msgstr ""
9755
9756
#: serverguide/C/reporting-bugs.xml:79(screen)
9757
#, no-wrap
9758
msgid ""
9759
"\n"
9760
"<placeholder-1/>\n"
9761
"\n"
9762
"*** Collecting problem information\n"
9763
"\n"
9764
"The collected information can be sent to the developers to improve the\n"
9765
"application. This might take a few minutes.\n"
9766
"..........\n"
9767
"\n"
9768
"*** Send problem report to the developers?\n"
9769
"\n"
9770
"After the problem report has been sent, please fill out the form in the\n"
9771
"automatically opened web browser.\n"
9772
"\n"
9773
"What would you like to do? Your options are:\n"
9774
" S: Send report (1.7 KiB)\n"
9775
" V: View report\n"
9776
" K: Keep report file for sending later or copying to somewhere else\n"
9777
" C: Cancel\n"
9778
"Please choose (S/V/K/C):\n"
9779
msgstr ""
9780
9781
#: serverguide/C/reporting-bugs.xml:101(para)
9782
msgid "The options available are:"
9783
msgstr ""
9784
9785
#: serverguide/C/reporting-bugs.xml:108(para)
9786
msgid ""
9787
"<emphasis role=\"bold\">Send Report</emphasis> Selecting Send Report submits "
9788
"the collected information to Launchpad as part of the the process of filing "
9789
"a bug report. You will be given the opportunity to describe the situation "
9790
"that led up to the occurrance of the bug."
9791
msgstr ""
9792
9793
#: serverguide/C/reporting-bugs.xml:115(screen)
9794
#, no-wrap
9795
msgid ""
9796
"\n"
9797
"*** Uploading problem information\n"
9798
"\n"
9799
"The collected information is being sent to the bug tracking system.\n"
9800
"This might take a few minutes.\n"
9801
"91%\n"
9802
"\n"
9803
"*** To continue, you must visit the following URL:\n"
9804
"\n"
9805
" https://bugs.launchpad.net/ubuntu/+source/postgresql-"
9806
"8.4/+filebug/kc6eSnTLnLxF8u0t3e56EukFeqJ?\n"
9807
"\n"
9808
"You can launch a browser now, or copy this URL into a browser on another\n"
9809
"computer.\n"
9810
"\n"
9811
"Choices:\n"
9812
" 1: Launch a browser now\n"
9813
" C: Cancel\n"
9814
"Please choose (1/C):\n"
9815
msgstr ""
9816
9817
#: serverguide/C/reporting-bugs.xml:135(para)
9818
msgid ""
9819
"If you choose to start a browser, by default the text based web browser "
9820
"<application>w3m</application> will be used to finish filing the bug report. "
9821
"Alternately, you can copy the given URL to a currently running web browser."
9822
msgstr ""
9823
9824
#: serverguide/C/reporting-bugs.xml:144(para)
9825
msgid ""
9826
"<emphasis role=\"bold\">View Report</emphasis> Selecting View Report causes "
9827
"the collected information to be displayed to the terminal for review."
9828
msgstr ""
9829
9830
#: serverguide/C/reporting-bugs.xml:150(screen)
9831
#, no-wrap
9832
msgid ""
9833
"\n"
9834
"Package: postgresql 8.4.2-2\n"
9835
"PackageArchitecture: all\n"
9836
"Tags: lucid\n"
9837
"ProblemType: Bug\n"
9838
"ProcEnviron:\n"
9839
" LANG=en_US.UTF-8\n"
9840
" SHELL=/bin/bash\n"
9841
"Uname: Linux 2.6.32-16-server x86_64\n"
9842
"Dependencies:\n"
9843
" adduser 3.112ubuntu1\n"
9844
" base-files 5.0.0ubuntu10\n"
9845
" base-passwd 3.5.22\n"
9846
" coreutils 7.4-2ubuntu2\n"
9847
"...\n"
9848
msgstr ""
9849
9850
#: serverguide/C/reporting-bugs.xml:167(para)
9851
msgid ""
9852
"After viewing the report, you will be brought back to the same menu asking "
9853
"what you would like to do with the report."
9854
msgstr ""
9855
9856
#: serverguide/C/reporting-bugs.xml:174(para)
9857
msgid ""
9858
"<emphasis role=\"bold\">Keep Report File</emphasis> Selecting Keep Report "
9859
"File causes the gathered information to be written to a file. This file can "
9860
"then be used to later file a bug report or transferred to a different Ubuntu "
9861
"system for reporting. To submit the report file, simply give it as an "
9862
"argument to the ubuntu-bug command:"
9863
msgstr ""
9864
9865
#: serverguide/C/reporting-bugs.xml:189(userinput)
9866
#, no-wrap
9867
msgid "k"
9868
msgstr ""
9869
9870
#: serverguide/C/reporting-bugs.xml:192(command)
9871
msgid "ubuntu-bug /tmp/apport.postgresql.v4MQas.apport"
9872
msgstr ""
9873
9874
#: serverguide/C/reporting-bugs.xml:183(screen)
9875
#, no-wrap
9876
msgid ""
9877
"\n"
9878
"What would you like to do? Your options are:\n"
9879
" S: Send report (1.7 KiB)\n"
9880
" V: View report\n"
9881
" K: Keep report file for sending later or copying to somewhere else\n"
9882
" C: Cancel\n"
9883
"Please choose (S/V/K/C): <placeholder-1/>\n"
9884
"Problem report file: /tmp/apport.postgresql.v4MQas.apport\n"
9885
"\n"
9886
"<placeholder-2/>\n"
9887
"\n"
9888
"*** Send problem report to the developers?\n"
9889
"...\n"
9890
msgstr ""
9891
9892
#: serverguide/C/reporting-bugs.xml:200(para)
9893
msgid ""
9894
"<emphasis role=\"bold\">Cancel</emphasis> Selecting Cancel causes the "
9895
"collected information to be discarded."
9896
msgstr ""
9897
9898
#: serverguide/C/reporting-bugs.xml:210(title)
9899
msgid "Reporting Application Crashes"
9900
msgstr ""
9901
9902
#: serverguide/C/reporting-bugs.xml:212(para)
9903
msgid ""
9904
"The software package that provides the ubuntu-bug utility, "
9905
"<application>apport</application>, can be configured to trigger when "
9906
"applications crash. This is disabled by default, as capturing a crash can be "
9907
"resource intensive depending on how much memory the application that crashed "
9908
"was using as apport captures and processes the core dump."
9909
msgstr ""
9910
9911
#: serverguide/C/reporting-bugs.xml:221(para)
9912
msgid ""
9913
"Configuring apport to capture information about crashing applications "
9914
"requires a couple of steps. First, <application>gdb</application> needs to "
9915
"be installed; it is not installed by default in Ubuntu Server Edition."
9916
msgstr ""
9917
9918
#: serverguide/C/reporting-bugs.xml:229(command)
9919
msgid "sudo apt-get install gdb"
9920
msgstr ""
9921
9922
#: serverguide/C/reporting-bugs.xml:232(para)
9923
msgid ""
9924
"See <xref linkend=\"package-management\"/> for more information about "
9925
"managing packages in Ubuntu."
9926
msgstr ""
9927
9928
#: serverguide/C/reporting-bugs.xml:237(para)
9929
msgid ""
9930
"Once you have ensured that gdb is installed, open the file "
9931
"<filename>/etc/default/apport</filename> in your text editor, and change the "
9932
"<emphasis>enabled</emphasis> setting to be <emphasis "
9933
"role=\"bold\">1</emphasis> like so:"
9934
msgstr ""
9935
9936
#: serverguide/C/reporting-bugs.xml:244(programlisting)
9937
#, no-wrap
9938
msgid ""
9939
"\n"
9940
"# set this to 0 to disable apport, or to 1 to enable it\n"
9941
"# you can temporarily override this with\n"
9942
"# sudo service apport start force_start=1\n"
9943
"enabled=<userinput>1</userinput>\n"
9944
"\n"
9945
"# set maximum core dump file size (default: 209715200 bytes == 200 MB)\n"
9946
"maxsize=209715200\n"
9947
msgstr ""
9948
9949
#: serverguide/C/reporting-bugs.xml:254(para)
9950
msgid ""
9951
"Once you have completed editing <filename>/etc/default/apport</filename>, "
9952
"start the apport service:"
9953
msgstr ""
9954
9955
#: serverguide/C/reporting-bugs.xml:261(command)
9956
msgid "sudo start apport"
9957
msgstr ""
9958
9959
#: serverguide/C/reporting-bugs.xml:264(para)
9960
msgid ""
9961
"After an application crashes, use the <application>apport-cli</application> "
9962
"command to search for the existing saved crash report information:"
9963
msgstr ""
9964
9965
#: serverguide/C/reporting-bugs.xml:271(command)
9966
msgid "apport-cli"
9967
msgstr ""
9968
9969
#: serverguide/C/reporting-bugs.xml:270(screen)
9970
#, no-wrap
9971
msgid ""
9972
"\n"
9973
"<placeholder-1/>\n"
9974
"\n"
9975
"*** dash closed unexpectedly on 2010-03-11 at 21:40:59.\n"
9976
"\n"
9977
"If you were not doing anything confidential (entering passwords or other\n"
9978
"private information), you can help to improve the application by\n"
9979
"reporting\n"
9980
"the problem.\n"
9981
"\n"
9982
"What would you like to do? Your options are:\n"
9983
" R: Report Problem...\n"
9984
" I: Cancel and ignore future crashes of this program version\n"
9985
" C: Cancel\n"
9986
"Please choose (R/I/C):\n"
9987
msgstr ""
9988
9989
#: serverguide/C/reporting-bugs.xml:287(para)
9990
msgid ""
9991
"Selecting <emphasis>Report Problem</emphasis> will walk you through similar "
9992
"steps as when using ubuntu-bug. One important difference is that a crash "
9993
"report will be marked as private when filed on Launchpad, meaning that it "
9994
"will be visible to only a limited set of bug triagers. These triagers will "
9995
"review the gathered data for private information before making the bug "
9996
"report publicly visible."
9997
msgstr ""
9998
9999
#: serverguide/C/reporting-bugs.xml:307(para)
10000
msgid ""
10001
"See the <ulink "
10002
"url=\"https://help.ubuntu.com/community/ReportingBugs\">Reporting "
10003
"Bugs</ulink> Ubuntu wiki page."
10004
msgstr ""
10005
10006
#: serverguide/C/reporting-bugs.xml:313(para)
10007
msgid ""
10008
"Also, the <ulink url=\"https://wiki.ubuntu.com/Apport\">Apport</ulink> page "
10009
"has some useful information. Though some of it pertains to using a GUI."
10010
msgstr ""
10011
10012
#: serverguide/C/remote-administration.xml:13(title)
10013
msgid "Remote Administration"
10014
msgstr ""
10015
10016
#: serverguide/C/remote-administration.xml:14(para)
10017
msgid ""
10018
"There are many ways to remotely administer a Linux server. This chapter will "
10019
"cover one of the most popular <application>SSH</application> as well as "
10020
"<application>eBox</application>, a web based administration framework."
10021
msgstr ""
10022
10023
#: serverguide/C/remote-administration.xml:23(para)
10024
msgid ""
10025
"This section of the Ubuntu Server Guide introduces a powerful collection of "
10026
"tools for the remote control of networked computers and transfer of data "
10027
"between networked computers, called <emphasis>OpenSSH</emphasis>. You will "
10028
"also learn about some of the configuration settings possible with the "
10029
"OpenSSH server application and how to change them on your Ubuntu system."
10030
msgstr ""
10031
10032
#: serverguide/C/remote-administration.xml:30(para)
10033
msgid ""
10034
"OpenSSH is a freely available version of the Secure Shell (SSH) protocol "
10035
"family of tools for remotely controlling a computer or transferring files "
10036
"between computers. Traditional tools used to accomplish these functions, "
10037
"such as <application>telnet</application> or <application>rcp</application>, "
10038
"are insecure and transmit the user's password in cleartext when used. "
10039
"OpenSSH provides a server daemon and client tools to facilitate secure, "
10040
"encrypted remote control and file transfer operations, effectively replacing "
10041
"the legacy tools."
10042
msgstr ""
10043
10044
#: serverguide/C/remote-administration.xml:39(para)
10045
msgid ""
10046
"The OpenSSH server component, <application>sshd</application>, listens "
10047
"continuously for client connections from any of the client tools. When a "
10048
"connection request occurs, <application>sshd</application> sets up the "
10049
"correct connection depending on the type of client tool connecting. For "
10050
"example, if the remote computer is connecting with the "
10051
"<application>ssh</application> client application, the OpenSSH server sets "
10052
"up a remote control session after authentication. If a remote user connects "
10053
"to an OpenSSH server with <application>scp</application>, the OpenSSH server "
10054
"daemon initiates a secure copy of files between the server and client after "
10055
"authentication. OpenSSH can use many authentication methods, including plain "
10056
"password, public key, and <application>Kerberos</application> tickets."
10057
msgstr ""
10058
10059
#: serverguide/C/remote-administration.xml:53(para)
10060
msgid ""
10061
"Installation of the OpenSSH client and server applications is simple. To "
10062
"install the OpenSSH client applications on your Ubuntu system, use this "
10063
"command at a terminal prompt:"
10064
msgstr ""
10065
10066
#: serverguide/C/remote-administration.xml:59(command)
10067
msgid "sudo apt-get install openssh-client"
10068
msgstr ""
10069
10070
#: serverguide/C/remote-administration.xml:61(para)
10071
msgid ""
10072
"To install the OpenSSH server application, and related support files, use "
10073
"this command at a terminal prompt:"
10074
msgstr ""
10075
10076
#: serverguide/C/remote-administration.xml:66(command)
10077
msgid "sudo apt-get install openssh-server"
10078
msgstr ""
10079
10080
#: serverguide/C/remote-administration.xml:68(para)
10081
msgid ""
10082
"The <application>openssh-server</application> package can also be selected "
10083
"to install during the Server Edition installation process."
10084
msgstr ""
10085
10086
#: serverguide/C/remote-administration.xml:75(para)
10087
msgid ""
10088
"You may configure the default behavior of the OpenSSH server application, "
10089
"<application>sshd</application>, by editing the file "
10090
"<filename>/etc/ssh/sshd_config</filename>. For information about the "
10091
"configuration directives used in this file, you may view the appropriate "
10092
"manual page with the following command, issued at a terminal prompt:"
10093
msgstr ""
10094
10095
#: serverguide/C/remote-administration.xml:83(command)
10096
msgid "man sshd_config"
10097
msgstr ""
10098
10099
#: serverguide/C/remote-administration.xml:85(para)
10100
msgid ""
10101
"There are many directives in the <application>sshd</application> "
10102
"configuration file controlling such things as communication settings and "
10103
"authentication modes. The following are examples of configuration directives "
10104
"that can be changed by editing the <filename>/etc/ssh/sshd_config</filename> "
10105
"file."
10106
msgstr ""
10107
10108
#: serverguide/C/remote-administration.xml:92(para)
10109
msgid ""
10110
"Prior to editing the configuration file, you should make a copy of the "
10111
"original file and protect it from writing so you will have the original "
10112
"settings as a reference and to reuse as necessary."
10113
msgstr ""
10114
10115
#: serverguide/C/remote-administration.xml:96(para)
10116
msgid ""
10117
"Copy the <filename>/etc/ssh/sshd_config</filename> file and protect it from "
10118
"writing with the following commands, issued at a terminal prompt:"
10119
msgstr ""
10120
10121
#: serverguide/C/remote-administration.xml:101(command)
10122
msgid "sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original"
10123
msgstr ""
10124
10125
#: serverguide/C/remote-administration.xml:102(command)
10126
msgid "sudo chmod a-w /etc/ssh/sshd_config.original"
10127
msgstr ""
10128
10129
#: serverguide/C/remote-administration.xml:104(para)
10130
msgid ""
10131
"The following are examples of configuration directives you may change:"
10132
msgstr ""
10133
10134
#: serverguide/C/remote-administration.xml:109(para)
10135
msgid ""
10136
"To set your OpenSSH to listen on TCP port 2222 instead of the default TCP "
10137
"port 22, change the Port directive as such:"
10138
msgstr ""
10139
10140
#: serverguide/C/remote-administration.xml:113(para)
10141
msgid "Port 2222"
10142
msgstr ""
10143
10144
#: serverguide/C/remote-administration.xml:118(para)
10145
msgid ""
10146
"To have <application>sshd</application> allow public key-based login "
10147
"credentials, simply add or modify the line:"
10148
msgstr ""
10149
10150
#: serverguide/C/remote-administration.xml:122(para)
10151
msgid "PubkeyAuthentication yes"
10152
msgstr ""
10153
10154
#: serverguide/C/remote-administration.xml:125(para)
10155
msgid ""
10156
"In the <filename>/etc/ssh/sshd_config</filename> file, or if already "
10157
"present, ensure the line is not commented out."
10158
msgstr ""
10159
10160
#: serverguide/C/remote-administration.xml:131(para)
10161
msgid ""
10162
"To make your OpenSSH server display the contents of the "
10163
"<filename>/etc/issue.net</filename> file as a pre-login banner, simply add "
10164
"or modify the line:"
10165
msgstr ""
10166
10167
#: serverguide/C/remote-administration.xml:136(para)
10168
msgid "Banner /etc/issue.net"
10169
msgstr ""
10170
10171
#: serverguide/C/remote-administration.xml:139(para)
10172
msgid "In the <filename>/etc/ssh/sshd_config</filename> file."
10173
msgstr ""
10174
10175
#: serverguide/C/remote-administration.xml:144(para)
10176
msgid ""
10177
"After making changes to the <filename>/etc/ssh/sshd_config</filename> file, "
10178
"save the file, and restart the <application>sshd</application> server "
10179
"application to effect the changes using the following command at a terminal "
10180
"prompt:"
10181
msgstr ""
10182
10183
#: serverguide/C/remote-administration.xml:153(para)
10184
msgid ""
10185
"Many other configuration directives for <application>sshd</application> are "
10186
"available for changing the server application's behavior to fit your needs. "
10187
"Be advised, however, if your only method of access to a server is "
10188
"<application>ssh</application>, and you make a mistake in configuring "
10189
"<application>sshd</application> via the "
10190
"<filename>/etc/ssh/sshd_config</filename> file, you may find you are locked "
10191
"out of the server upon restarting it, or that the "
10192
"<application>sshd</application> server refuses to start due to an incorrect "
10193
"configuration directive, so be extra careful when editing this file on a "
10194
"remote server."
10195
msgstr ""
10196
10197
#: serverguide/C/remote-administration.xml:168(title)
10198
msgid "SSH Keys"
10199
msgstr ""
10200
10201
#: serverguide/C/remote-administration.xml:169(para)
10202
msgid ""
10203
"SSH <emphasis>keys</emphasis> allow authentication between two hosts without "
10204
"the need of a password. SSH key authentication uses two keys a "
10205
"<emphasis>private</emphasis> key and a <emphasis>public</emphasis> key."
10206
msgstr ""
10207
10208
#: serverguide/C/remote-administration.xml:173(para)
10209
msgid "To generate the keys, from a terminal prompt enter:"
10210
msgstr ""
10211
10212
#: serverguide/C/remote-administration.xml:177(command)
10213
msgid "ssh-keygen -t dsa"
10214
msgstr ""
10215
10216
#: serverguide/C/remote-administration.xml:179(para)
10217
msgid ""
10218
"This will generate the keys using a <emphasis>DSA</emphasis> authentication "
10219
"identity of the user. During the process you will be prompted for a "
10220
"password. Simply hit <emphasis>Enter</emphasis> when prompted to create the "
10221
"key."
10222
msgstr ""
10223
10224
#: serverguide/C/remote-administration.xml:183(para)
10225
msgid ""
10226
"By default the <emphasis>public</emphasis> key is saved in the file "
10227
"<filename>~/.ssh/id_dsa.pub</filename>, while "
10228
"<filename>~/.ssh/id_dsa</filename> is the <emphasis>private</emphasis> key. "
10229
"Now copy the <filename>id_dsa.pub</filename> file to the remote host and "
10230
"append it to <filename>~/.ssh/authorized_keys</filename> by entering:"
10231
msgstr ""
10232
10233
#: serverguide/C/remote-administration.xml:189(command)
10234
msgid "ssh-copy-id username@remotehost"
10235
msgstr ""
10236
10237
#: serverguide/C/remote-administration.xml:191(para)
10238
msgid ""
10239
"Finally, double check the permissions on the "
10240
"<filename>authorized_keys</filename> file, only the authenticated user "
10241
"should have read and write permissions. If the permissions are not correct "
10242
"change them by:"
10243
msgstr ""
10244
10245
#: serverguide/C/remote-administration.xml:196(command)
10246
msgid "chmod 600 .ssh/authorized_keys"
10247
msgstr ""
10248
10249
#: serverguide/C/remote-administration.xml:198(para)
10250
msgid ""
10251
"You should now be able to SSH to the host without being prompted for a "
10252
"password."
10253
msgstr ""
10254
10255
#: serverguide/C/remote-administration.xml:207(para)
10256
msgid ""
10257
"<ulink url=\"https://help.ubuntu.com/community/SSH\">Ubuntu Wiki SSH</ulink> "
10258
"page."
10259
msgstr ""
10260
10261
#: serverguide/C/remote-administration.xml:213(ulink)
10262
msgid "OpenSSH Website"
10263
msgstr ""
10264
10265
#: serverguide/C/remote-administration.xml:218(ulink)
10266
msgid "Advanced OpenSSH Wiki Page"
10267
msgstr ""
10268
10269
#: serverguide/C/remote-administration.xml:226(title)
10270
msgid "eBox"
10271
msgstr ""
10272
10273
#: serverguide/C/remote-administration.xml:227(para)
10274
msgid ""
10275
"<application>eBox</application> is a web framework used to manage server "
10276
"application configuration. The modular design of eBox allows you to pick and "
10277
"choose which services you want to configure using eBox."
10278
msgstr ""
10279
10280
#: serverguide/C/remote-administration.xml:234(para)
10281
msgid ""
10282
"The different <application>eBox</application> modules are split into "
10283
"different packages, allowing you to only install those necessary. One way to "
10284
"view the available packages is to enter the following from a terminal:"
10285
msgstr ""
10286
10287
#: serverguide/C/remote-administration.xml:240(command)
10288
msgid "apt-cache rdepends ebox | uniq"
10289
msgstr ""
10290
10291
#: serverguide/C/remote-administration.xml:242(para)
10292
msgid ""
10293
"To install the <application>ebox</application> package, which contains the "
10294
"default modules, enter the following:"
10295
msgstr ""
10296
10297
#: serverguide/C/remote-administration.xml:247(command)
10298
msgid "sudo apt-get install ebox"
10299
msgstr ""
10300
10301
#: serverguide/C/remote-administration.xml:250(para)
10302
msgid ""
10303
"During the installation you will be asked to supply a password for the ebox "
10304
"user. After installing eBox the web interface can be accessed from: "
10305
"<emphasis>https://yourserver/ebox</emphasis>."
10306
msgstr ""
10307
10308
#: serverguide/C/remote-administration.xml:259(para)
10309
msgid ""
10310
"An important thing to remember when using <application>eBox</application> is "
10311
"that when configuring most modules there is a <emphasis>Change</emphasis> "
10312
"button that implements the new configuration. After clicking the Change "
10313
"button most, but not all, modules will then need to be "
10314
"<emphasis>Saved</emphasis>. To save the new configuration click on the "
10315
"<quote>Save changes</quote> link in the top right hand corner."
10316
msgstr ""
10317
10318
#: serverguide/C/remote-administration.xml:267(para)
10319
msgid ""
10320
"Once you make a change that requires a Save, the link will change from green "
10321
"to red."
10322
msgstr ""
10323
10324
#: serverguide/C/remote-administration.xml:273(title)
10325
msgid "eBox Modules"
10326
msgstr ""
10327
10328
#: serverguide/C/remote-administration.xml:274(para)
10329
msgid ""
10330
"By default all eBox <emphasis>Modules</emphasis> are not enabled, and when a "
10331
"new module is installed it will not be automatically enabled."
10332
msgstr ""
10333
10334
#: serverguide/C/remote-administration.xml:278(para)
10335
msgid ""
10336
"To enable a disabled module click on the <emphasis>Module status</emphasis> "
10337
"link in the left hand menu. Then <emphasis role=\"italic\">check</emphasis> "
10338
"which modules you would like to enable and click the <quote>Save</quote> "
10339
"link."
10340
msgstr ""
10341
10342
#: serverguide/C/remote-administration.xml:284(title)
10343
msgid "Default Modules"
10344
msgstr ""
10345
10346
#: serverguide/C/remote-administration.xml:285(para)
10347
msgid ""
10348
"This section provides a quick summary of the default "
10349
"<application>eBox</application> modules."
10350
msgstr ""
10351
10352
#: serverguide/C/remote-administration.xml:291(para)
10353
msgid ""
10354
"<emphasis>System:</emphasis> contains options allowing configuration of "
10355
"general eBox items."
10356
msgstr ""
10357
10358
#: serverguide/C/remote-administration.xml:297(para)
10359
msgid ""
10360
"<emphasis>General:</emphasis> allows you to set the language, port number, "
10361
"and contains a change password form."
10362
msgstr ""
10363
10364
#: serverguide/C/remote-administration.xml:303(para)
10365
msgid ""
10366
"<emphasis>Disk Usage:</emphasis> displays a graph detailing information "
10367
"about disk usage."
10368
msgstr ""
10369
10370
#: serverguide/C/remote-administration.xml:309(para)
10371
msgid ""
10372
"<emphasis>Backup:</emphasis> is used to backup "
10373
"<application>eBox</application> configuration information, and the "
10374
"<emphasis>Full Backup</emphasis> option allows you to save all eBox "
10375
"information not included in the <emphasis>Configuration</emphasis> option "
10376
"such as log files."
10377
msgstr ""
10378
10379
#: serverguide/C/remote-administration.xml:317(para)
10380
msgid ""
10381
"<emphasis>Halt/Reboot:</emphasis> will shutdown the system or reboot it."
10382
msgstr ""
10383
10384
#: serverguide/C/remote-administration.xml:322(para)
10385
msgid ""
10386
"<emphasis>Bug Report:</emphasis> creates a file containing details helpful "
10387
"when reporting bugs to the eBox developers."
10388
msgstr ""
10389
10390
#: serverguide/C/remote-administration.xml:330(para)
10391
msgid ""
10392
"<emphasis>Logs:</emphasis> allows <application>eBox</application> logs to be "
10393
"queried depending on the purge time configured."
10394
msgstr ""
10395
10396
#: serverguide/C/remote-administration.xml:336(para)
10397
msgid ""
10398
"<emphasis>Events:</emphasis> this module has the ability to send alerts "
10399
"through rss, jabber, and log file."
10400
msgstr ""
10401
10402
#: serverguide/C/remote-administration.xml:343(emphasis)
10403
msgid "Available Events:"
10404
msgstr ""
10405
10406
#: serverguide/C/remote-administration.xml:347(para)
10407
msgid ""
10408
"<emphasis>Free Storage Space:</emphasis> will send alert if free disk space "
10409
"drops below a configured percentage, 10% by default."
10410
msgstr ""
10411
10412
#: serverguide/C/remote-administration.xml:353(para)
10413
msgid ""
10414
"<emphasis>Log Observer:</emphasis> sends an alert when a configured logger "
10415
"has logged something."
10416
msgstr ""
10417
10418
#: serverguide/C/remote-administration.xml:359(para)
10419
msgid ""
10420
"<emphasis>RAID:</emphasis> will monitor the RAID system and send alerts if "
10421
"any issues arise."
10422
msgstr ""
10423
10424
#: serverguide/C/remote-administration.xml:365(para)
10425
msgid ""
10426
"<emphasis>Service:</emphasis> sends alerts if a service restarts multiple "
10427
"times in a short time period."
10428
msgstr ""
10429
10430
#: serverguide/C/remote-administration.xml:371(para)
10431
msgid ""
10432
"<emphasis>State:</emphasis> alerts on the state of "
10433
"<application>eBox</application>, either up or down."
10434
msgstr ""
10435
10436
#: serverguide/C/remote-administration.xml:380(emphasis)
10437
msgid "Dispatchers:"
10438
msgstr ""
10439
10440
#: serverguide/C/remote-administration.xml:384(para)
10441
msgid ""
10442
"<emphasis>Log:</emphasis> this dispatcher will send event messages to the "
10443
"<application>eBox</application> log file "
10444
"<filename>/var/log/ebox/ebox.log</filename>."
10445
msgstr ""
10446
10447
#: serverguide/C/remote-administration.xml:391(para)
10448
msgid ""
10449
"<emphasis>Jabber:</emphasis> before enabling this dispatcher you must first "
10450
"configure it by clicking on the <quote>Configure</quote> icon."
10451
msgstr ""
10452
10453
#: serverguide/C/remote-administration.xml:397(para)
10454
msgid ""
10455
"<emphasis>RSS:</emphasis> once this dispatcher is configured you can "
10456
"subscribe to the link in order to view event alerts."
10457
msgstr ""
10458
10459
#: serverguide/C/remote-administration.xml:410(title)
10460
msgid "Additional Modules"
10461
msgstr ""
10462
10463
#: serverguide/C/remote-administration.xml:411(para)
10464
msgid ""
10465
"Here is a quick description of other available "
10466
"<application>eBox</application> modules:"
10467
msgstr ""
10468
10469
#: serverguide/C/remote-administration.xml:416(para)
10470
msgid ""
10471
"<emphasis>Network:</emphasis> allows configuration of the server's network "
10472
"options through eBox."
10473
msgstr ""
10474
10475
#: serverguide/C/remote-administration.xml:422(para)
10476
msgid ""
10477
"<emphasis>Firewall:</emphasis> configures firewall options for the eBox host."
10478
msgstr ""
10479
10480
#: serverguide/C/remote-administration.xml:427(para)
10481
msgid ""
10482
"<emphasis>UsersandGroups:</emphasis> this module will manage users and "
10483
"groups contained in an <application>OpenLDAP</application> LDAP directory."
10484
msgstr ""
10485
10486
#: serverguide/C/remote-administration.xml:433(para)
10487
msgid ""
10488
"<emphasis>DHCP:</emphasis> provides an interface for configuring a DHCP "
10489
"server."
10490
msgstr ""
10491
10492
#: serverguide/C/remote-administration.xml:438(para)
10493
msgid ""
10494
"<emphasis>DNS:</emphasis> provides <application>BIND9</application> DNS "
10495
"server configuration options."
10496
msgstr ""
10497
10498
#: serverguide/C/remote-administration.xml:444(para)
10499
msgid ""
10500
"<emphasis>Objects:</emphasis> allow configuration of eBox <emphasis>Network "
10501
"Objects</emphasis>, which allow you to assign a name to an IP address or "
10502
"group of IPs."
10503
msgstr ""
10504
10505
#: serverguide/C/remote-administration.xml:451(para)
10506
msgid ""
10507
"<emphasis>Services:</emphasis> displays configuration information for "
10508
"services that are available to the network."
10509
msgstr ""
10510
10511
#: serverguide/C/remote-administration.xml:457(para)
10512
msgid ""
10513
"<emphasis>Squid:</emphasis> configuration options for the "
10514
"<application>Squid</application> proxy server."
10515
msgstr ""
10516
10517
#: serverguide/C/remote-administration.xml:463(para)
10518
msgid ""
10519
"<emphasis>CA:</emphasis> configures a Certificate Authority for the server."
10520
msgstr ""
10521
10522
#: serverguide/C/remote-administration.xml:468(para)
10523
msgid "<emphasis>NTP:</emphasis> set Network Time Protocol options."
10524
msgstr ""
10525
10526
#: serverguide/C/remote-administration.xml:473(para)
10527
msgid "<emphasis>Printers:</emphasis> allows the configuration of printers."
10528
msgstr ""
10529
10530
#: serverguide/C/remote-administration.xml:478(para)
10531
msgid "<emphasis>Samba:</emphasis> configuration options for Samba."
10532
msgstr ""
10533
10534
#: serverguide/C/remote-administration.xml:483(para)
10535
msgid ""
10536
"<emphasis>OpenVPN:</emphasis> setup options for OpenVPN Virtual Private "
10537
"Network application."
10538
msgstr ""
10539
10540
#: serverguide/C/remote-administration.xml:494(para)
10541
msgid ""
10542
"The <ulink url=\"https://help.ubuntu.com/community/eBox\">eBox Ubuntu "
10543
"Wiki</ulink> page has more details."
10544
msgstr ""
10545
10546
#: serverguide/C/remote-administration.xml:499(para)
10547
msgid ""
10548
"For more information also see the <ulink url=\"http://ebox-"
10549
"platform.com/\">eBox Home Page</ulink>."
10550
msgstr ""
10551
10552
#: serverguide/C/package-management.xml:13(title)
10553
msgid "Package Management"
10554
msgstr ""
10555
10556
#: serverguide/C/package-management.xml:14(para)
10557
msgid ""
10558
"Ubuntu features a comprehensive package management system for the "
10559
"installation, upgrade, configuration, and removal of software. In addition "
10560
"to providing access to an organized base of over 24,000 software packages "
10561
"for your Ubuntu computer, the package management facilities also feature "
10562
"dependency resolution capabilities and software update checking."
10563
msgstr ""
10564
10565
#: serverguide/C/package-management.xml:16(para)
10566
msgid ""
10567
"Several tools are available for interacting with Ubuntu's package management "
10568
"system, from simple command-line utilities which may be easily automated by "
10569
"system administrators, to a simple graphical interface which is easy to use "
10570
"by those new to Ubuntu."
10571
msgstr ""
10572
10573
#: serverguide/C/package-management.xml:21(para)
10574
msgid ""
10575
"Ubuntu's package management system is derived from the same system used by "
10576
"the Debian GNU/Linux distribution. The package files contain all of the "
10577
"necessary files, meta-data, and instructions to implement a particular "
10578
"functionality or software application on your Ubuntu computer."
10579
msgstr ""
10580
10581
#: serverguide/C/package-management.xml:24(para)
10582
msgid ""
10583
"Debian package files typically have the extension '.deb', and typically "
10584
"exist in <emphasis role=\"italics\">repositories</emphasis> which are "
10585
"collections of packages found on various media, such as CD-ROM discs, or "
10586
"online. Packages are normally of the pre-compiled binary format; thus "
10587
"installation is quick and requires no compiling of software."
10588
msgstr ""
10589
10590
#: serverguide/C/package-management.xml:27(para)
10591
msgid ""
10592
"Many complex packages use the concept of <emphasis "
10593
"role=\"italics\">dependencies</emphasis>. Dependencies are additional "
10594
"packages required by the principal package in order to function properly. "
10595
"For example, the speech synthesis package "
10596
"<application>Festival</application> depends upon the package "
10597
"<application>libasound2</application>, which is a package supplying the "
10598
"<application>ALSA</application> sound library needed for audio playback. In "
10599
"order for <application>Festival</application> to function, it and all of its "
10600
"dependencies must be installed. The software management tools in Ubuntu will "
10601
"do this automatically."
10602
msgstr ""
10603
10604
#: serverguide/C/package-management.xml:32(title)
10605
msgid "dpkg"
10606
msgstr ""
10607
10608
#: serverguide/C/package-management.xml:34(para)
10609
msgid ""
10610
"<application>dpkg</application> is a package manager for "
10611
"<emphasis>Debian</emphasis> based systems. It can install, remove, and build "
10612
"packages, but unlike other package management system's it can not "
10613
"automatically download and install packages and their dependencies. This "
10614
"section covers using <application>dpkg</application> to manage locally "
10615
"installed packages:"
10616
msgstr ""
10617
10618
#: serverguide/C/package-management.xml:43(para)
10619
msgid ""
10620
"To list all packages installed on the system, from a terminal prompt enter:"
10621
msgstr ""
10622
10623
#: serverguide/C/package-management.xml:48(command)
10624
msgid "dpkg -l"
10625
msgstr ""
10626
10627
#: serverguide/C/package-management.xml:54(para)
10628
msgid ""
10629
"Depending on the amount of packages on your system, this can generate a "
10630
"large amount of output. Pipe the output through "
10631
"<application>grep</application> to see if a specific package is installed:"
10632
msgstr ""
10633
10634
#: serverguide/C/package-management.xml:60(command)
10635
msgid "dpkg -l | grep apache2"
10636
msgstr ""
10637
10638
#: serverguide/C/package-management.xml:63(para)
10639
msgid ""
10640
"Replace <emphasis>apache2</emphasis> with any package name, part of a "
10641
"package name, or other regular expression."
10642
msgstr ""
10643
10644
#: serverguide/C/package-management.xml:70(para)
10645
msgid ""
10646
"To list the files installed by a package, in this case the "
10647
"<application>ufw</application> package, enter:"
10648
msgstr ""
10649
10650
#: serverguide/C/package-management.xml:75(command)
10651
msgid "dpkg -L ufw"
10652
msgstr ""
10653
10654
#: serverguide/C/package-management.xml:81(para)
10655
msgid ""
10656
"If you are not sure which package installed a file, <application>dpkg -"
10657
"S</application> may be able to tell you. For example:"
10658
msgstr ""
10659
10660
#: serverguide/C/package-management.xml:87(command)
10661
msgid "dpkg -S /etc/host.conf"
10662
msgstr ""
10663
10664
#: serverguide/C/package-management.xml:88(computeroutput)
10665
#, no-wrap
10666
msgid "base-files: /etc/host.conf"
10667
msgstr ""
10668
10669
#: serverguide/C/package-management.xml:91(para)
10670
msgid ""
10671
"The output shows that the <filename>/etc/host.conf</filename> belongs to the "
10672
"<application>base-files</application> package."
10673
msgstr ""
10674
10675
#: serverguide/C/package-management.xml:96(para)
10676
msgid ""
10677
"Many files are automatically generated during the package install process, "
10678
"and even though they are on the filesystem <command>dpkg -S</command> may "
10679
"not know which package they belong to."
10680
msgstr ""
10681
10682
#: serverguide/C/package-management.xml:105(para)
10683
msgid "You can install a local <emphasis>.deb</emphasis> file by entering:"
10684
msgstr ""
10685
10686
#: serverguide/C/package-management.xml:110(command)
10687
msgid "sudo dpkg -i zip_2.32-1_i386.deb"
10688
msgstr ""
10689
10690
#: serverguide/C/package-management.xml:113(para)
10691
msgid ""
10692
"Change <filename>zip_2.32-1_i386.deb</filename> to the actual file name of "
10693
"the local .deb file."
10694
msgstr ""
10695
10696
#: serverguide/C/package-management.xml:120(para)
10697
msgid "Uninstalling a package can be accomplished by:"
10698
msgstr ""
10699
10700
#: serverguide/C/package-management.xml:125(command)
10701
msgid "sudo dpkg -r zip"
10702
msgstr ""
10703
10704
#: serverguide/C/package-management.xml:129(para)
10705
msgid ""
10706
"Uninstalling packages using <application>dpkg</application>, in most cases, "
10707
"is <emphasis>NOT</emphasis> recommended. It is better to use a package "
10708
"manager that handles dependencies, to ensure that the system is in a "
10709
"consistent state. For example using <command>dpkg -r</command> you can "
10710
"remove the <application>zip</application> package, but any packages that "
10711
"depend on it will still be installed and may no longer function correctly."
10712
msgstr ""
10713
10714
#: serverguide/C/package-management.xml:140(para)
10715
msgid ""
10716
"For more <application>dpkg</application> options see the man page: "
10717
"<command>man dpkg</command>."
10718
msgstr ""
10719
10720
#: serverguide/C/package-management.xml:146(title)
10721
msgid "Apt-Get"
10722
msgstr ""
10723
10724
#: serverguide/C/package-management.xml:147(para)
10725
msgid ""
10726
"The <application>apt-get</application> command is a powerful command-line "
10727
"tool used to work with Ubuntu's <emphasis>Advanced Packaging Tool</emphasis> "
10728
"(APT) performing such functions as installation of new software packages, "
10729
"upgrade of existing software packages, updating of the package list index, "
10730
"and even upgrading the entire Ubuntu system."
10731
msgstr ""
10732
10733
#: serverguide/C/package-management.xml:150(para)
10734
msgid ""
10735
"Being a simple command-line tool, <application>apt-get</application> has "
10736
"numerous advantages over other package management tools available in Ubuntu "
10737
"for server administrators. Some of these advantages include ease of use over "
10738
"simple terminal connections (SSH) and the ability to be used in system "
10739
"administration scripts, which can in turn be automated by the "
10740
"<application>cron</application> scheduling utility."
10741
msgstr ""
10742
10743
#: serverguide/C/package-management.xml:157(para)
10744
msgid ""
10745
"<emphasis role=\"bold\">Install a Package</emphasis>: Installation of "
10746
"packages using the <application>apt-get</application> tool is quite simple. "
10747
"For example, to install the network scanner <emphasis "
10748
"role=\"italics\">nmap</emphasis>, type the following: <screen>\n"
10749
"<command>sudo apt-get install nmap</command>\n"
10750
"</screen>"
10751
msgstr ""
10752
10753
#: serverguide/C/package-management.xml:165(para)
10754
msgid ""
10755
"<emphasis role=\"bold\">Remove a Package</emphasis>: Removal of a package or "
10756
"packages is also a straightforward and simple process. To remove the nmap "
10757
"package installed in the previous example, type the following: <screen>\n"
10758
"<command>sudo apt-get remove nmap</command>\n"
10759
"</screen>"
10760
msgstr ""
10761
10762
#: serverguide/C/package-management.xml:172(para)
10763
msgid ""
10764
"<emphasis role=\"bold\">Multiple Packages</emphasis>: You may specify "
10765
"multiple packages to be installed or removed, separated by spaces."
10766
msgstr ""
10767
10768
#: serverguide/C/package-management.xml:175(para)
10769
msgid ""
10770
"Also, adding the <emphasis>--purge</emphasis> options to <command>apt-get "
10771
"remove</command> will remove the package configuration files as well. This "
10772
"may or may not be the desired effect so use with caution."
10773
msgstr ""
10774
10775
#: serverguide/C/package-management.xml:181(para)
10776
msgid ""
10777
"<emphasis role=\"bold\">Update the Package Index</emphasis>: The APT package "
10778
"index is essentially a database of available packages from the repositories "
10779
"defined in the <filename>/etc/apt/sources.list</filename> file. To update "
10780
"the local package index with the latest changes made in repositories, type "
10781
"the following: <screen>\n"
10782
"<command>sudo apt-get update</command>\n"
10783
"</screen>"
10784
msgstr ""
10785
10786
#: serverguide/C/package-management.xml:189(para)
10787
msgid ""
10788
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: Over time, updated "
10789
"versions of packages currently installed on your computer may become "
10790
"available from the package repositories (for example security updates). To "
10791
"upgrade your system, first update your package index as outlined above, and "
10792
"then type: <screen>\n"
10793
"<command>sudo apt-get upgrade</command>\n"
10794
"</screen>"
10795
msgstr ""
10796
10797
#: serverguide/C/package-management.xml:195(para)
10798
msgid ""
10799
"For information on upgrading to a new Ubuntu release see <xref "
10800
"linkend=\"installing-upgrading\"/>."
10801
msgstr ""
10802
10803
#: serverguide/C/package-management.xml:153(para)
10804
msgid ""
10805
"Some examples of popular uses for the <application>apt-get</application> "
10806
"utility: <placeholder-1/>"
10807
msgstr ""
10808
10809
#: serverguide/C/package-management.xml:201(para)
10810
msgid ""
10811
"Actions of the <application>apt-get</application> command, such as "
10812
"installation and removal of packages, are logged in the /var/log/dpkg.log "
10813
"log file."
10814
msgstr ""
10815
10816
#: serverguide/C/package-management.xml:204(para)
10817
msgid ""
10818
"For further information about the use of <application>APT</application>, "
10819
"read the comprehensive <ulink url=\"http://www.debian.org/doc/user-"
10820
"manuals#apt-howto\">Debian APT User Manual</ulink> or type: <screen>apt-get "
10821
"help</screen>"
10822
msgstr ""
10823
10824
#: serverguide/C/package-management.xml:208(title)
10825
msgid "Aptitude"
10826
msgstr ""
10827
10828
#: serverguide/C/package-management.xml:209(para)
10829
msgid ""
10830
"<application>Aptitude</application> is a menu-driven, text-based front-end "
10831
"to the <emphasis>Advanced Packaging Tool</emphasis> (APT) system. Many of "
10832
"the common package management functions, such as installation, removal, and "
10833
"upgrade, are performed in <application>Aptitude</application> with single-"
10834
"key commands, which are typically lowercase letters."
10835
msgstr ""
10836
10837
#: serverguide/C/package-management.xml:212(para)
10838
msgid ""
10839
"<application>Aptitude</application> is best suited for use in a non-"
10840
"graphical terminal environment to ensure proper functioning of the command "
10841
"keys. You may start <application>Aptitude</application> as a normal user "
10842
"with the following command at a terminal prompt: <screen>\n"
10843
"<command>sudo aptitude</command>\n"
10844
"</screen>"
10845
msgstr ""
10846
10847
#: serverguide/C/package-management.xml:219(para)
10848
msgid ""
10849
"When <application>Aptitude</application> starts, you will see a menu bar at "
10850
"the top of the screen and two panes below the menu bar. The top pane "
10851
"contains package categories, such as <emphasis role=\"italics\">New "
10852
"Packages</emphasis> and <emphasis role=\"italics\">Not Installed "
10853
"Packages</emphasis>. The bottom pane contains information related to the "
10854
"packages and package categories."
10855
msgstr ""
10856
10857
#: serverguide/C/package-management.xml:222(para)
10858
msgid ""
10859
"Using <application>Aptitude</application> for package management is "
10860
"relatively straightforward, and the user interface makes common tasks simple "
10861
"to perform. The following are examples of common package management "
10862
"functions as performed in <application>Aptitude</application>:"
10863
msgstr ""
10864
10865
#: serverguide/C/package-management.xml:226(para)
10866
msgid ""
10867
"<emphasis role=\"bold\">Install Packages</emphasis>: To install a package, "
10868
"locate the package via the Not Installed Packages package category, for "
10869
"example, by using the keyboard arrow keys and the <keycap>ENTER</keycap> "
10870
"key, and highlight the package you wish to install. After highlighting the "
10871
"package you wish to install, press the <keycap>+</keycap> key, and the "
10872
"package entry should turn <emphasis role=\"italics\">green</emphasis>, "
10873
"indicating it has been marked for installation. Now press <keycap>g</keycap> "
10874
"to be presented with a summary of package actions. Press <keycap>g</keycap> "
10875
"again, and you will be prompted to become root to complete the installation. "
10876
"Press <keycap>ENTER</keycap> which will result in a Password: prompt. Enter "
10877
"your user password to become root. Finally, press <keycap>g</keycap> once "
10878
"more and you'll be prompted to download the package. Press "
10879
"<keycap>ENTER</keycap> on the <emphasis role=\"italics\">Continue</emphasis> "
10880
"prompt, and downloading and installation of the package will commence."
10881
msgstr ""
10882
10883
#: serverguide/C/package-management.xml:230(para)
10884
msgid ""
10885
"<emphasis role=\"bold\">Remove Packages</emphasis>: To remove a package, "
10886
"locate the package via the Installed Packages package category, for example, "
10887
"by using the keyboard arrow keys and the <keycap>ENTER</keycap> key, and "
10888
"highlight the package you wish to remove. After highlighting the package you "
10889
"wish to install, press the <keycap>-</keycap> key, and the package entry "
10890
"should turn <emphasis role=\"italics\">pink</emphasis>, indicating it has "
10891
"been marked for removal. Now press <keycap>g</keycap> to be presented with a "
10892
"summary of package actions. Press <keycap>g</keycap> again, and you will be "
10893
"prompted to become root to complete the installation. Press "
10894
"<keycap>ENTER</keycap> which will result in a Password: prompt. Enter your "
10895
"user password to become root. Finally, press <keycap>g</keycap> once more, "
10896
"and you'll be prompted to download the package. Press <keycap>ENTER</keycap> "
10897
"on the <emphasis role=\"italics\">Continue</emphasis> prompt, and removal of "
10898
"the package will commence."
10899
msgstr ""
10900
10901
#: serverguide/C/package-management.xml:234(para)
10902
msgid ""
10903
"<emphasis role=\"bold\">Update Package Index</emphasis>: To update the "
10904
"package index, simply press the <keycap>u</keycap> key and you will be "
10905
"prompted to become root to complete the update. Press <keycap>ENTER</keycap> "
10906
"which will result in a Password: prompt. Enter your user password to become "
10907
"root. Updating of the package index will commence. Press "
10908
"<keycap>ENTER</keycap> on the OK prompt when the download dialog is "
10909
"presented to complete the process."
10910
msgstr ""
10911
10912
#: serverguide/C/package-management.xml:238(para)
10913
msgid ""
10914
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: To upgrade packages, "
10915
"perform the update of the package index as detailed above, and then press "
10916
"the <keycap>U</keycap> key to mark all packages with updates. Now press "
10917
"<keycap>g</keycap> whereby you'll be presented with a summary of package "
10918
"actions. Press <keycap>g</keycap> again, and you will be prompted to become "
10919
"root to complete the installation. Press <keycap>ENTER</keycap> which will "
10920
"result in a Password: prompt. Enter your user password to become root. "
10921
"Finally, press <keycap>g</keycap> once more, and you'll be prompted to "
10922
"download the packages. Press <keycap>ENTER</keycap> on the <emphasis "
10923
"role=\"italics\">Continue</emphasis> prompt, and upgrade of the packages "
10924
"will commence."
10925
msgstr ""
10926
10927
#: serverguide/C/package-management.xml:245(para)
10928
msgid "<emphasis role=\"bold\">i</emphasis>: Installed package"
10929
msgstr ""
10930
10931
#: serverguide/C/package-management.xml:250(para)
10932
msgid ""
10933
"<emphasis role=\"bold\">c</emphasis>: Package not installed, but package "
10934
"configuration remains on system"
10935
msgstr ""
10936
10937
#: serverguide/C/package-management.xml:254(para)
10938
msgid "<emphasis role=\"bold\">p</emphasis>: Purged from system"
10939
msgstr ""
10940
10941
#: serverguide/C/package-management.xml:258(para)
10942
msgid "<emphasis role=\"bold\">v</emphasis>: Virtual package"
10943
msgstr ""
10944
10945
#: serverguide/C/package-management.xml:262(para)
10946
msgid "<emphasis role=\"bold\">B</emphasis>: Broken package"
10947
msgstr ""
10948
10949
#: serverguide/C/package-management.xml:266(para)
10950
msgid ""
10951
"<emphasis role=\"bold\">u</emphasis>: Unpacked files, but package not yet "
10952
"configured"
10953
msgstr ""
10954
10955
#: serverguide/C/package-management.xml:270(para)
10956
msgid ""
10957
"<emphasis role=\"bold\">C</emphasis>: Half-configured - Configuration failed "
10958
"and requires fix"
10959
msgstr ""
10960
10961
#: serverguide/C/package-management.xml:274(para)
10962
msgid ""
10963
"<emphasis role=\"bold\">H</emphasis>: Half-installed - Removal failed and "
10964
"requires fix"
10965
msgstr ""
10966
10967
#: serverguide/C/package-management.xml:242(para)
10968
msgid ""
10969
"The first column of information displayed in the package list in the top "
10970
"pane, when actually viewing packages lists the current state of the package, "
10971
"and uses the following key to describe the state of the package: "
10972
"<placeholder-1/>"
10973
msgstr ""
10974
10975
#: serverguide/C/package-management.xml:280(para)
10976
msgid ""
10977
"To exit Aptitude, simply press the <keycap>q</keycap> key and confirm you "
10978
"wish to exit. Many other functions are available from the Aptitude menu by "
10979
"pressing the <keycap>F10</keycap> key."
10980
msgstr ""
10981
10982
#: serverguide/C/package-management.xml:285(title)
10983
msgid "Automatic Updates"
10984
msgstr ""
10985
10986
#: serverguide/C/package-management.xml:287(para)
10987
msgid ""
10988
"The <application>unattended-upgrades</application> package can be used to "
10989
"automatically install updated packages, and can be configured to update all "
10990
"packages or just install security updates. First, install the package by "
10991
"entering the following in a terminal:"
10992
msgstr ""
10993
10994
#: serverguide/C/package-management.xml:293(command)
10995
msgid "sudo apt-get install unattended-upgrades"
10996
msgstr ""
10997
10998
#: serverguide/C/package-management.xml:296(para)
10999
msgid ""
11000
"To configure <application>unattended-upgrades</application>, edit "
11001
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> and adjust "
11002
"the following to fit your needs:"
11003
msgstr ""
11004
11005
#: serverguide/C/package-management.xml:301(programlisting)
11006
#, no-wrap
11007
msgid ""
11008
"\n"
11009
"Unattended-Upgrade::Allowed-Origins {\n"
11010
" \"Ubuntu lucid-security\";\n"
11011
"// \"Ubuntu lucid-updates\";\n"
11012
"};\n"
11013
msgstr ""
11014
11015
#: serverguide/C/package-management.xml:308(para)
11016
msgid ""
11017
"Certain packages can also be <emphasis>blacklisted</emphasis> and therefore "
11018
"will not be automatically updated. To blacklist a package, add it to the "
11019
"list:"
11020
msgstr ""
11021
11022
#: serverguide/C/package-management.xml:313(programlisting)
11023
#, no-wrap
11024
msgid ""
11025
"\n"
11026
"Unattended-Upgrade::Package-Blacklist {\n"
11027
"// \"vim\";\n"
11028
"// \"libc6\";\n"
11029
"// \"libc6-dev\";\n"
11030
"// \"libc6-i686\";\n"
11031
"};\n"
11032
msgstr ""
11033
11034
#: serverguide/C/package-management.xml:323(para)
11035
msgid ""
11036
"The double <emphasis><quote>//</quote></emphasis> serve as comments, so "
11037
"whatever follows \"//\" will not be evaluated."
11038
msgstr ""
11039
11040
#: serverguide/C/package-management.xml:328(para)
11041
msgid ""
11042
"To enable automatic updates, edit "
11043
"<filename>/etc/apt/apt.conf.d/10periodic</filename> and set the appropriate "
11044
"<application>apt</application> configuration options:"
11045
msgstr ""
11046
11047
#: serverguide/C/package-management.xml:332(programlisting)
11048
#, no-wrap
11049
msgid ""
11050
"\n"
11051
"APT::Periodic::Update-Package-Lists \"1\";\n"
11052
"APT::Periodic::Download-Upgradeable-Packages \"1\";\n"
11053
"APT::Periodic::AutocleanInterval \"7\";\n"
11054
"APT::Periodic::Unattended-Upgrade \"1\";\n"
11055
msgstr ""
11056
11057
#: serverguide/C/package-management.xml:339(para)
11058
msgid ""
11059
"The above configuration updates the package list, downloads, and installs "
11060
"available upgrades every day. The local download archive is cleaned every "
11061
"week."
11062
msgstr ""
11063
11064
#: serverguide/C/package-management.xml:345(para)
11065
msgid ""
11066
"You can read more about <application>apt</application> Periodic "
11067
"configuration options in the <filename>/etc/cron.daily/apt</filename> script "
11068
"header."
11069
msgstr ""
11070
11071
#: serverguide/C/package-management.xml:350(para)
11072
msgid ""
11073
"The results of <application>unattended-upgrades</application> will be logged "
11074
"to <filename>/var/log/unattended-upgrades</filename>."
11075
msgstr ""
11076
11077
#: serverguide/C/package-management.xml:355(title)
11078
msgid "Notifications"
11079
msgstr ""
11080
11081
#: serverguide/C/package-management.xml:357(para)
11082
msgid ""
11083
"Configuring <emphasis>Unattended-Upgrade::Mail</emphasis> in "
11084
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> will enable "
11085
"<application>unattended-upgrades</application> to email an administrator "
11086
"detailing any packages that need upgrading or have problems."
11087
msgstr ""
11088
11089
#: serverguide/C/package-management.xml:362(para)
11090
msgid ""
11091
"Another useful package is <application>apticron</application>. "
11092
"<application>apticron</application> will configure a "
11093
"<application>cron</application> job to email an administrator information "
11094
"about any packages on the system that have updates available, as well as a "
11095
"summary of changes in each package."
11096
msgstr ""
11097
11098
#: serverguide/C/package-management.xml:368(para)
11099
msgid ""
11100
"To install the <application>apticron</application> package, in a terminal "
11101
"enter:"
11102
msgstr ""
11103
11104
#: serverguide/C/package-management.xml:373(command)
11105
msgid "sudo apt-get install apticron"
11106
msgstr ""
11107
11108
#: serverguide/C/package-management.xml:376(para)
11109
msgid ""
11110
"Once the package is installed edit "
11111
"<filename>/etc/apticron/apticron.conf</filename>, to set the email address "
11112
"and other options:"
11113
msgstr ""
11114
11115
#: serverguide/C/package-management.xml:380(programlisting)
11116
#, no-wrap
11117
msgid ""
11118
"\n"
11119
"EMAIL=\"root@example.com\"\n"
11120
msgstr ""
11121
11122
#: serverguide/C/package-management.xml:389(para)
11123
msgid ""
11124
"Configuration of the <emphasis>Advanced Packaging Tool</emphasis> (APT) "
11125
"system repositories is stored in the /etc/apt/sources.list configuration "
11126
"file. An example of this file is referenced here, along with information on "
11127
"adding or removing repository references from the file."
11128
msgstr ""
11129
11130
#: serverguide/C/package-management.xml:395(para)
11131
msgid ""
11132
"<ulink url=\"../sample/sources.list\">Here</ulink> is a simple example of a "
11133
"typical <filename>/etc/apt/sources.list</filename> file."
11134
msgstr ""
11135
11136
#: serverguide/C/package-management.xml:399(para)
11137
msgid ""
11138
"You may edit the file to enable repositories or disable them. For example, "
11139
"to disable the requirement of inserting the Ubuntu CD-ROM whenever package "
11140
"operations occur, simply comment out the appropriate line for the CD-ROM, "
11141
"which appears at the top of the file:"
11142
msgstr ""
11143
11144
#: serverguide/C/package-management.xml:404(screen)
11145
#, no-wrap
11146
msgid ""
11147
"\n"
11148
"# no more prompting for CD-ROM please\n"
11149
"# deb cdrom:[Ubuntu 10.04_Lucid_Lynx - Release i386 (20070419.1)]/ lucid "
11150
"main restricted\n"
11151
msgstr ""
11152
11153
#: serverguide/C/package-management.xml:410(title)
11154
msgid "Extra Repositories"
11155
msgstr ""
11156
11157
#: serverguide/C/package-management.xml:411(para)
11158
msgid ""
11159
"In addition to the officially supported package repositories available for "
11160
"Ubuntu, there exist additional community-maintained repositories which add "
11161
"thousands more potential packages for installation. Two of the most popular "
11162
"are the <emphasis>Universe</emphasis> and <emphasis>Multiverse</emphasis> "
11163
"repositories. These repositories are not officially supported by Ubuntu, but "
11164
"because they are maintained by the community they generally provide packages "
11165
"which are safe for use with your Ubuntu computer."
11166
msgstr ""
11167
11168
#: serverguide/C/package-management.xml:414(para)
11169
msgid ""
11170
"Packages in the <emphasis>Multiverse</emphasis> repository often have "
11171
"licensing issues that prevent them from being distributed with a free "
11172
"operating system, and they may be illegal in your locality."
11173
msgstr ""
11174
11175
#: serverguide/C/package-management.xml:416(para)
11176
msgid ""
11177
"Be advised that neither the <emphasis>Universe</emphasis> or "
11178
"<emphasis>Multiverse</emphasis> repositories contain officially supported "
11179
"packages. In particular, there may not be security updates for these "
11180
"packages."
11181
msgstr ""
11182
11183
#: serverguide/C/package-management.xml:420(para)
11184
msgid ""
11185
"Many other package sources are available, sometimes even offering only one "
11186
"package, as in the case of package sources provided by the developer of a "
11187
"single application. You should always be very careful and cautious when "
11188
"using non-standard package sources, however. Research the source and "
11189
"packages carefully before performing any installation, as some package "
11190
"sources and their packages could render your system unstable or non-"
11191
"functional in some respects."
11192
msgstr ""
11193
11194
#: serverguide/C/package-management.xml:423(para)
11195
msgid ""
11196
"By default, the <emphasis>Universe</emphasis> and "
11197
"<emphasis>Multiverse</emphasis> repositories are enabled but if you would "
11198
"like to disable them edit <filename>/etc/apt/sources.list</filename> and "
11199
"comment the following lines:"
11200
msgstr ""
11201
11202
#: serverguide/C/package-management.xml:430(programlisting)
11203
#, no-wrap
11204
msgid ""
11205
"\n"
11206
"deb http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
11207
"deb-src http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
11208
"\n"
11209
"deb http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
11210
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
11211
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
11212
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
11213
"\n"
11214
"deb http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
11215
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
11216
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
11217
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
11218
"\n"
11219
"deb http://security.ubuntu.com/ubuntu lucid-security universe\n"
11220
"deb-src http://security.ubuntu.com/ubuntu lucid-security universe\n"
11221
"deb http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
11222
"deb-src http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
11223
msgstr ""
11224
11225
#: serverguide/C/package-management.xml:456(para)
11226
msgid ""
11227
"Most of the material covered in this chapter is available in "
11228
"<application>man</application> pages, many of which are available online."
11229
msgstr ""
11230
11231
#: serverguide/C/package-management.xml:463(para)
11232
msgid ""
11233
"The <ulink "
11234
"url=\"https://help.ubuntu.com/community/InstallingSoftware\">InstallingSoftwa"
11235
"re</ulink> Ubuntu wiki page has more information."
11236
msgstr ""
11237
11238
#: serverguide/C/package-management.xml:468(para)
11239
msgid ""
11240
"For more <application>dpkg</application> details see the <ulink "
11241
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/dpkg.1.html\">dpkg "
11242
"man page</ulink>."
11243
msgstr ""
11244
11245
#: serverguide/C/package-management.xml:474(para)
11246
msgid ""
11247
"The <ulink url=\"http://www.debian.org/doc/manuals/apt-howto/\">APT "
11248
"HOWTO</ulink> and <ulink "
11249
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/apt-get.8.html\">apt-"
11250
"get man page</ulink> contain useful information regarding <application>apt-"
11251
"get</application> usage."
11252
msgstr ""
11253
11254
#: serverguide/C/package-management.xml:481(para)
11255
msgid ""
11256
"See the <ulink "
11257
"url=\"http://manpages.ubuntu.com/manpages/lucid/man8/aptitude.8.html\">aptitu"
11258
"de man page</ulink> for more <application>aptitude</application> options."
11259
msgstr ""
11260
11261
#: serverguide/C/package-management.xml:487(para)
11262
msgid ""
11263
"The <ulink "
11264
"url=\"https://help.ubuntu.com/community/Repositories/Ubuntu\">Adding "
11265
"Repositories HOWTO (Ubuntu Wiki)</ulink> page contains more details on "
11266
"adding repositories."
11267
msgstr ""
11268
11269
#: serverguide/C/other-apps.xml:13(title)
11270
msgid "Other Useful Applications"
11271
msgstr ""
11272
11273
#: serverguide/C/other-apps.xml:15(para)
11274
msgid ""
11275
"There are many very useful applications developed by the Ubuntu Server Team, "
11276
"and others that are well integrated with Ubuntu Server Edition, that might "
11277
"not be well known. This chapter will showcase some useful applications that "
11278
"can make administering an Ubuntu server, or many Ubuntu servers, that much "
11279
"easier."
11280
msgstr ""
11281
11282
#: serverguide/C/other-apps.xml:23(title)
11283
msgid "pam_motd"
11284
msgstr ""
11285
11286
#: serverguide/C/other-apps.xml:25(para)
11287
msgid ""
11288
"When logging into an Ubuntu server you may have noticed the informative "
11289
"Message Of The Day (MOTD). This information is obtained and displayed using "
11290
"a couple of packages:"
11291
msgstr ""
11292
11293
#: serverguide/C/other-apps.xml:32(para)
11294
msgid ""
11295
"<emphasis>landscape-common:</emphasis> provides the core libraries of "
11296
"<application>landscape-client</application>, which can be used to manage "
11297
"systems using the web based <emphasis>Landscape</emphasis> application. The "
11298
"package includes the <application>/usr/bin/landscape-sysinfo</application> "
11299
"utility which is used to gather the information displayed in the MOTD."
11300
msgstr ""
11301
11302
#: serverguide/C/other-apps.xml:40(para)
11303
msgid ""
11304
"<emphasis>update-notifier-common:</emphasis> is used to automatically update "
11305
"the MOTD via <application>pam_motd</application> module."
11306
msgstr ""
11307
11308
#: serverguide/C/other-apps.xml:46(para)
11309
msgid ""
11310
"<application>pam_motd</application> executes the scripts in "
11311
"<filename>/etc/update-motd.d</filename> in order based on the number "
11312
"prepended to the script. The output of the scripts is written to "
11313
"<filename>/var/run/motd</filename>, keeping the numerical order, then "
11314
"concatenated with <filename>/etc/motd.tail</filename>."
11315
msgstr ""
11316
11317
#: serverguide/C/other-apps.xml:52(para)
11318
msgid ""
11319
"You can add your own dynamic information to the MOTD. For example, to add "
11320
"local weather information:"
11321
msgstr ""
11322
11323
#: serverguide/C/other-apps.xml:58(para)
11324
msgid "First, install the <application>weather-util</application> package:"
11325
msgstr ""
11326
11327
#: serverguide/C/other-apps.xml:63(command)
11328
msgid "sudo apt-get install weather-util"
11329
msgstr ""
11330
11331
#: serverguide/C/other-apps.xml:68(para)
11332
msgid ""
11333
"The <application>weather</application> utility uses METAR data from the "
11334
"National Oceanic and Atmospheric Administration and forecasts from the "
11335
"National Weather Service. In order to find local information you will need "
11336
"the 4-character ICAO location indicator. This can be determined by browsing "
11337
"to the <ulink url=\"http://www.weather.gov/tg/siteloc.shtml\">National "
11338
"Weather Service</ulink> site."
11339
msgstr ""
11340
11341
#: serverguide/C/other-apps.xml:75(para)
11342
msgid ""
11343
"Although the National Weather Service is a United States government agency "
11344
"there are weather stations available world wide. However, local weather "
11345
"information for all locations outside the U.S. may not be available."
11346
msgstr ""
11347
11348
#: serverguide/C/other-apps.xml:81(para)
11349
msgid ""
11350
"Create <filename>/usr/local/bin/local-weather</filename>, a simple shell "
11351
"script to use <application>weather</application> with your local ICAO "
11352
"indicator:"
11353
msgstr ""
11354
11355
#: serverguide/C/other-apps.xml:86(programlisting)
11356
#, no-wrap
11357
msgid ""
11358
"\n"
11359
"#!/bin/sh\n"
11360
"#\n"
11361
"#\n"
11362
"# Prints the local weather information for the MOTD.\n"
11363
"#\n"
11364
"#\n"
11365
"\n"
11366
"# Replace KINT with your local weather station.\n"
11367
"# Local stations can be found here: http://www.weather.gov/tg/siteloc.shtml\n"
11368
"\n"
11369
"echo\n"
11370
"weather -i KINT\n"
11371
"echo\n"
11372
"\n"
11373
msgstr ""
11374
11375
#: serverguide/C/other-apps.xml:104(para)
11376
msgid "Make the script executable:"
11377
msgstr ""
11378
11379
#: serverguide/C/other-apps.xml:109(command)
11380
msgid "sudo chmod 755 /usr/local/bin/local-weather"
11381
msgstr ""
11382
11383
#: serverguide/C/other-apps.xml:113(para)
11384
msgid ""
11385
"Next, create a symlink to <filename>/etc/update-motd.d/98-local-"
11386
"weather</filename>:"
11387
msgstr ""
11388
11389
#: serverguide/C/other-apps.xml:118(command)
11390
msgid ""
11391
"sudo ln -s /usr/local/bin/local-weather /etc/update-motd.d/98-local-weather"
11392
msgstr ""
11393
11394
#: serverguide/C/other-apps.xml:122(para)
11395
msgid "Finally, exit the server and re-login to view the new MOTD."
11396
msgstr ""
11397
11398
#: serverguide/C/other-apps.xml:128(para)
11399
msgid ""
11400
"You should now be greeted with some useful information, and some information "
11401
"about the local weather that may not be quite so useful. Hopefully the "
11402
"<application>local-weather</application> example demonstrates the "
11403
"flexibility of <application>pam_motd</application>."
11404
msgstr ""
11405
11406
#: serverguide/C/other-apps.xml:136(title)
11407
msgid "etckeeper"
11408
msgstr ""
11409
11410
#: serverguide/C/other-apps.xml:138(para)
11411
msgid ""
11412
"<application>etckeeper</application> allows the contents of <filename "
11413
"role=\"directory\">/etc</filename> be easily stored in Version Control "
11414
"System (VCS) repository. It hooks into <application>apt</application> to "
11415
"automatically commit changes to <filename>/etc</filename> when packages are "
11416
"installed or upgraded. Placing <filename>/etc</filename> under version "
11417
"control is considered an industry best practice, and the goal of "
11418
"<application>etckeeper</application> is to make this process as painless as "
11419
"possible."
11420
msgstr ""
11421
11422
#: serverguide/C/other-apps.xml:146(para)
11423
msgid ""
11424
"Install <application>etckeeper</application> by entering the following in a "
11425
"terminal:"
11426
msgstr ""
11427
11428
#: serverguide/C/other-apps.xml:151(command)
11429
msgid "sudo apt-get install etckeeper"
11430
msgstr ""
11431
11432
#: serverguide/C/other-apps.xml:154(para)
11433
msgid ""
11434
"The main configuration file, "
11435
"<filename>/etc/etckeeper/etckeeper.conf</filename>, is fairly simple. The "
11436
"main option is which VCS to use. By default "
11437
"<application>etckeeper</application> is configured to use "
11438
"<application>bzr</application> for version control. The repository is "
11439
"automatically initialized (and committed for the first time) during package "
11440
"installation. It is possible to undo this by entering the following command:"
11441
msgstr ""
11442
11443
#: serverguide/C/other-apps.xml:164(command)
11444
msgid "sudo etckeeper uninit"
11445
msgstr ""
11446
11447
#: serverguide/C/other-apps.xml:167(para)
11448
msgid ""
11449
"By default, etckeeper will commit uncommitted changes made to /etc daily. "
11450
"This can be disabled using the AVOID_DAILY_AUTOCOMMITS configuration option. "
11451
"It will also automatically commit changes before and after package "
11452
"installation. For a more precise tracking of changes, it is recommended to "
11453
"commit your changes manually, together with a commit message, using:"
11454
msgstr ""
11455
11456
#: serverguide/C/other-apps.xml:176(command)
11457
msgid "sudo etckeeper commit \"..Reason for configuration change..\""
11458
msgstr ""
11459
11460
#: serverguide/C/other-apps.xml:179(para)
11461
msgid ""
11462
"Using the VCS commands you can view log information about files in "
11463
"<filename>/etc</filename>:"
11464
msgstr ""
11465
11466
#: serverguide/C/other-apps.xml:184(command)
11467
msgid "sudo bzr log /etc/passwd"
11468
msgstr ""
11469
11470
#: serverguide/C/other-apps.xml:187(para)
11471
msgid ""
11472
"To demonstrate the integration with the package management system, install "
11473
"<application>postfix</application>:"
11474
msgstr ""
11475
11476
#: serverguide/C/other-apps.xml:192(command) serverguide/C/mail.xml:45(command)
11477
msgid "sudo apt-get install postfix"
11478
msgstr ""
11479
11480
#: serverguide/C/other-apps.xml:195(para)
11481
msgid ""
11482
"When the installation is finished, all the "
11483
"<application>postfix</application> configuration files should be committed "
11484
"to the repository:"
11485
msgstr ""
11486
11487
#: serverguide/C/other-apps.xml:201(computeroutput)
11488
#, no-wrap
11489
msgid ""
11490
"Committing to: /etc/\n"
11491
"added aliases.db\n"
11492
"modified group\n"
11493
"modified group-\n"
11494
"modified gshadow\n"
11495
"modified gshadow-\n"
11496
"modified passwd\n"
11497
"modified passwd-\n"
11498
"added postfix\n"
11499
"added resolvconf\n"
11500
"added rsyslog.d\n"
11501
"modified shadow\n"
11502
"modified shadow-\n"
11503
"added init.d/postfix\n"
11504
"added network/if-down.d/postfix\n"
11505
"added network/if-up.d/postfix\n"
11506
"added postfix/dynamicmaps.cf\n"
11507
"added postfix/main.cf\n"
11508
"added postfix/master.cf\n"
11509
"added postfix/post-install\n"
11510
"added postfix/postfix-files\n"
11511
"added postfix/postfix-script\n"
11512
"added postfix/sasl\n"
11513
"added ppp/ip-down.d\n"
11514
"added ppp/ip-down.d/postfix\n"
11515
"added ppp/ip-up.d/postfix\n"
11516
"added rc0.d/K20postfix\n"
11517
"added rc1.d/K20postfix\n"
11518
"added rc2.d/S20postfix\n"
11519
"added rc3.d/S20postfix\n"
11520
"added rc4.d/S20postfix\n"
11521
"added rc5.d/S20postfix\n"
11522
"added rc6.d/K20postfix\n"
11523
"added resolvconf/update-libc.d\n"
11524
"added resolvconf/update-libc.d/postfix\n"
11525
"added rsyslog.d/postfix.conf\n"
11526
"added ufw/applications.d/postfix\n"
11527
"Committed revision 2."
11528
msgstr ""
11529
11530
#: serverguide/C/other-apps.xml:241(para)
11531
msgid ""
11532
"For an example of how <application>etckeeper</application> tracks manual "
11533
"changes, add new a host to <filename>/etc/hosts</filename>. Using "
11534
"<application>bzr</application> you can see which files have been modified:"
11535
msgstr ""
11536
11537
#: serverguide/C/other-apps.xml:247(command)
11538
msgid "sudo bzr status /etc/"
11539
msgstr ""
11540
11541
#: serverguide/C/other-apps.xml:248(computeroutput)
11542
#, no-wrap
11543
msgid ""
11544
"modified:\n"
11545
" hosts"
11546
msgstr ""
11547
11548
#: serverguide/C/other-apps.xml:252(para)
11549
msgid "Now commit the changes:"
11550
msgstr ""
11551
11552
#: serverguide/C/other-apps.xml:257(command)
11553
msgid "sudo etckeeper commit \"new host\""
11554
msgstr ""
11555
11556
#: serverguide/C/other-apps.xml:260(para)
11557
msgid ""
11558
"For more information on <application>bzr</application> see <xref "
11559
"linkend=\"bazaar\"/>."
11560
msgstr ""
11561
11562
#: serverguide/C/other-apps.xml:266(title)
11563
msgid "Byobu"
11564
msgstr ""
11565
11566
#: serverguide/C/other-apps.xml:268(para)
11567
msgid ""
11568
"One of the most useful applications for any system administrator is "
11569
"<application>screen</application>. It allows the execution of multiple "
11570
"shells in one terminal. To make some of the advanced "
11571
"<application>screen</application> features more user friendly, and provide "
11572
"some useful information about the system, the "
11573
"<application>byobu</application> package was created."
11574
msgstr ""
11575
11576
#: serverguide/C/other-apps.xml:275(para)
11577
msgid ""
11578
"When executing <application>byobu</application> pressing the "
11579
"<emphasis>F9</emphasis> key will bring up the "
11580
"<application>Configuration</application> menu. This menu will allow you to:"
11581
msgstr ""
11582
11583
#: serverguide/C/other-apps.xml:281(para)
11584
msgid "View the Help menu"
11585
msgstr ""
11586
11587
#: serverguide/C/other-apps.xml:282(para)
11588
msgid "Change Byobu's background color"
11589
msgstr ""
11590
11591
#: serverguide/C/other-apps.xml:283(para)
11592
msgid "Change Byobu's foreground color"
11593
msgstr ""
11594
11595
#: serverguide/C/other-apps.xml:284(para)
11596
msgid "Toggle status notifications"
11597
msgstr ""
11598
11599
#: serverguide/C/other-apps.xml:285(para)
11600
msgid "Change the key binding set"
11601
msgstr ""
11602
11603
#: serverguide/C/other-apps.xml:286(para)
11604
msgid "Change the escape sequence"
11605
msgstr ""
11606
11607
#: serverguide/C/other-apps.xml:287(para)
11608
msgid "Create new windows"
11609
msgstr ""
11610
11611
#: serverguide/C/other-apps.xml:288(para)
11612
msgid "Manage the default windows"
11613
msgstr ""
11614
11615
#: serverguide/C/other-apps.xml:289(para)
11616
msgid "Byobu currently does not launch at login (toggle on)"
11617
msgstr ""
11618
11619
#: serverguide/C/other-apps.xml:292(para)
11620
msgid ""
11621
"The <emphasis>key bindings</emphasis> determine such things as the escape "
11622
"sequence, new window, change window, etc. There are two key binding sets to "
11623
"choose from <emphasis>f-keys</emphasis> and <emphasis>screen-escape-"
11624
"keys</emphasis>. If you wish to use the original key bindings choose the "
11625
"<emphasis>none</emphasis> set."
11626
msgstr ""
11627
11628
#: serverguide/C/other-apps.xml:298(para)
11629
msgid ""
11630
"<application>byobu</application> provides a menu which displays the Ubuntu "
11631
"release, processor information, memory information, and the time and date. "
11632
"The effect is similar to a desktop menu."
11633
msgstr ""
11634
11635
#: serverguide/C/other-apps.xml:303(para)
11636
msgid ""
11637
"Using the <emphasis>\"Byobu currently does not launch at login (toggle "
11638
"on)\"</emphasis> option will cause <application>byobu</application> to be "
11639
"executed any time a terminal is opened. Changes made to "
11640
"<application>byobu</application> are on a per user basis, and will not "
11641
"affect other users on the system."
11642
msgstr ""
11643
11644
#: serverguide/C/other-apps.xml:309(para)
11645
msgid ""
11646
"One difference when using byobu is the <emphasis>scrollback</emphasis> mode. "
11647
"Press the <emphasis>F7</emphasis> key to enter scrollback mode. Scrollback "
11648
"mode allows you to navigate past output using <emphasis>vi</emphasis> like "
11649
"commands. Here is a quick list of movement commands:"
11650
msgstr ""
11651
11652
#: serverguide/C/other-apps.xml:316(para)
11653
msgid "<emphasis>h</emphasis> - Move the cursor left by one character"
11654
msgstr ""
11655
11656
#: serverguide/C/other-apps.xml:317(para)
11657
msgid "<emphasis>j</emphasis> - Move the cursor down by one line"
11658
msgstr ""
11659
11660
#: serverguide/C/other-apps.xml:318(para)
11661
msgid "<emphasis>k</emphasis> - Move the cursor up by one line"
11662
msgstr ""
11663
11664
#: serverguide/C/other-apps.xml:319(para)
11665
msgid "<emphasis>l</emphasis> - Move the cursor right by one character"
11666
msgstr ""
11667
11668
#: serverguide/C/other-apps.xml:320(para)
11669
msgid "<emphasis>0</emphasis> - Move to the beginning of the current line"
11670
msgstr ""
11671
11672
#: serverguide/C/other-apps.xml:321(para)
11673
msgid "<emphasis>$</emphasis> - Move to the end of the current line"
11674
msgstr ""
11675
11676
#: serverguide/C/other-apps.xml:322(para)
11677
msgid ""
11678
"<emphasis>G</emphasis> - Moves to the specified line (defaults to the end of "
11679
"the buffer)"
11680
msgstr ""
11681
11682
#: serverguide/C/other-apps.xml:323(para)
11683
msgid "<emphasis>/</emphasis> - Search forward"
11684
msgstr ""
11685
11686
#: serverguide/C/other-apps.xml:324(para)
11687
msgid "<emphasis>?</emphasis> - Search backward"
11688
msgstr ""
11689
11690
#: serverguide/C/other-apps.xml:325(para)
11691
msgid ""
11692
"<emphasis>n</emphasis> - Moves to the next match, either forward or backword"
11693
msgstr ""
11694
11695
#: serverguide/C/other-apps.xml:334(para)
11696
msgid ""
11697
"See the <ulink "
11698
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/update-motd.1.html\">"
11699
"update-motd man page</ulink> for more options available to "
11700
"<application>update-motd</application>."
11701
msgstr ""
11702
11703
#: serverguide/C/other-apps.xml:340(para)
11704
msgid ""
11705
"The Debian Package of the Day <ulink "
11706
"url=\"http://debaday.debian.net/2007/10/04/weather-check-weather-conditions-"
11707
"and-forecasts-on-the-command-line/\">weather</ulink> article has more "
11708
"details about using the <application>weather</application>utility."
11709
msgstr ""
11710
11711
#: serverguide/C/other-apps.xml:347(para)
11712
msgid ""
11713
"See the <ulink "
11714
"url=\"http://kitenet.net/~joey/code/etckeeper/\">etckeeper</ulink> site for "
11715
"more details on using <application>etckeeper</application>."
11716
msgstr ""
11717
11718
#: serverguide/C/other-apps.xml:353(para)
11719
msgid ""
11720
"The <ulink url=\"https://help.ubuntu.com/community/etckeeper\">etckeeper "
11721
"Ubuntu Wiki</ulink> page."
11722
msgstr ""
11723
11724
#: serverguide/C/other-apps.xml:358(para)
11725
msgid ""
11726
"For the latest news and information about <application>bzr</application> see "
11727
"the <ulink url=\"http://bazaar-vcs.org/\">bzr</ulink> web site."
11728
msgstr ""
11729
11730
#: serverguide/C/other-apps.xml:363(para)
11731
msgid ""
11732
"For more information on <application>screen</application> see the <ulink "
11733
"url=\"http://www.gnu.org/software/screen/\">screen web site</ulink>."
11734
msgstr ""
11735
11736
#: serverguide/C/other-apps.xml:368(para)
11737
msgid ""
11738
"And the <ulink url=\"https://help.ubuntu.com/community/Screen\">Ubuntu Wiki "
11739
"screen</ulink> page."
11740
msgstr ""
11741
11742
#: serverguide/C/other-apps.xml:373(para)
11743
msgid ""
11744
"Also, see the <application>byobu</application><ulink "
11745
"url=\"https://launchpad.net/byobu\">project page</ulink> for more "
11746
"information."
11747
msgstr ""
11748
11749
#: serverguide/C/network-config.xml:14(para)
11750
msgid ""
11751
"Networks consist of two or more devices, such as computer systems, printers, "
11752
"and related equipment which are connected by either physical cabling or "
11753
"wireless links for the purpose of sharing and distributing information among "
11754
"the connected devices."
11755
msgstr ""
11756
11757
#: serverguide/C/network-config.xml:20(para)
11758
msgid ""
11759
"This section provides general and specific information pertaining to "
11760
"networking, including an overview of network concepts and detailed "
11761
"discussion of popular network protocols."
11762
msgstr ""
11763
11764
#: serverguide/C/network-config.xml:27(title)
11765
msgid "Network Configuration"
11766
msgstr ""
11767
11768
#: serverguide/C/network-config.xml:28(para)
11769
msgid ""
11770
"Ubuntu ships with a number of graphical utilities to configure your network "
11771
"devices. This document is geared toward server administrators and will focus "
11772
"on managing your network on the command line."
11773
msgstr ""
11774
11775
#: serverguide/C/network-config.xml:35(title)
11776
msgid "Ethernet Interfaces"
11777
msgstr ""
11778
11779
#: serverguide/C/network-config.xml:36(para)
11780
msgid ""
11781
"Ethernet interfaces are identified by the system using the naming convention "
11782
"of <emphasis role=\"italix\">ethX</emphasis>, where <emphasis "
11783
"role=\"italic\">X</emphasis> represents a numeric value. The first Ethernet "
11784
"interface is typically identified as <emphasis "
11785
"role=\"italic\">eth0</emphasis>, the second as <emphasis "
11786
"role=\"italic\">eth1</emphasis>, and all others should move up in numerical "
11787
"order."
11788
msgstr ""
11789
11790
#: serverguide/C/network-config.xml:46(title)
11791
msgid "Identify Ethernet Interfaces"
11792
msgstr ""
11793
11794
#: serverguide/C/network-config.xml:47(para)
11795
msgid ""
11796
"To quickly identify all available Ethernet interfaces, you can use the "
11797
"<application>ifconfig</application> command as shown below."
11798
msgstr ""
11799
11800
#: serverguide/C/network-config.xml:52(userinput)
11801
#, no-wrap
11802
msgid "ifconfig -a | grep eth"
11803
msgstr ""
11804
11805
#: serverguide/C/network-config.xml:51(screen)
11806
#, no-wrap
11807
msgid ""
11808
"\n"
11809
"<placeholder-1/>\n"
11810
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a\n"
11811
msgstr ""
11812
11813
#: serverguide/C/network-config.xml:55(para)
11814
msgid ""
11815
"Another application that can help identify all network interfaces available "
11816
"to your system is the <application>lshw</application> command. In the "
11817
"example below, <application>lshw</application> shows a single Ethernet "
11818
"interface with the logical name of <emphasis role=\"italic\">eth0</emphasis> "
11819
"along with bus information, driver details and all supported capabilities."
11820
msgstr ""
11821
11822
#: serverguide/C/network-config.xml:62(userinput)
11823
#, no-wrap
11824
msgid "sudo lshw -class network"
11825
msgstr ""
11826
11827
#: serverguide/C/network-config.xml:61(screen)
11828
#, no-wrap
11829
msgid ""
11830
"\n"
11831
"<placeholder-1/>\n"
11832
" *-network\n"
11833
" description: Ethernet interface\n"
11834
" product: BCM4401-B0 100Base-TX\n"
11835
" vendor: Broadcom Corporation\n"
11836
" physical id: 0\n"
11837
" bus info: pci@0000:03:00.0\n"
11838
" logical name: eth0\n"
11839
" version: 02\n"
11840
" serial: 00:15:c5:4a:16:5a\n"
11841
" size: 10MB/s\n"
11842
" capacity: 100MB/s\n"
11843
" width: 32 bits\n"
11844
" clock: 33MHz\n"
11845
" capabilities: (snipped for brevity)\n"
11846
" configuration: (snipped for brevity)\n"
11847
" resources: irq:17 memory:ef9fe000-ef9fffff\n"
11848
msgstr ""
11849
11850
#: serverguide/C/network-config.xml:83(title)
11851
msgid "Ethernet Interface Logical Names"
11852
msgstr ""
11853
11854
#: serverguide/C/network-config.xml:84(para)
11855
msgid ""
11856
"Interface logical names are configured in the file "
11857
"<filename>/etc/udev/rules.d/70-persistent-net.rules.</filename> If you would "
11858
"like control which interface receives a particular logical name, find the "
11859
"line matching the interfaces physical MAC address and modify the value of "
11860
"<emphasis role=\"italic\">NAME=ethX</emphasis> to the desired logical name. "
11861
"Reboot the system to commit your changes."
11862
msgstr ""
11863
11864
#: serverguide/C/network-config.xml:92(programlisting)
11865
#, no-wrap
11866
msgid ""
11867
"\n"
11868
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11869
"ATTR{address}==\"00:15:c5:4a:16:5a\", ATTR{dev_id}==\"0x0\", "
11870
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth0\"\n"
11871
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
11872
"ATTR{address}==\"00:15:c5:4a:16:5b\", ATTR{dev_id}==\"0x0\", "
11873
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth1\"\n"
11874
msgstr ""
11875
11876
#: serverguide/C/network-config.xml:99(title)
11877
msgid "Ethernet Interface Settings"
11878
msgstr ""
11879
11880
#: serverguide/C/network-config.xml:100(para)
11881
msgid ""
11882
"<application>ethtool</application> is a program that displays and changes "
11883
"Ethernet card settings such as auto-negotiation, port speed, duplex mode, "
11884
"and Wake-on-LAN. It is not installed by default, but is available for "
11885
"installation in the repositories."
11886
msgstr ""
11887
11888
#: serverguide/C/network-config.xml:106(userinput)
11889
#, no-wrap
11890
msgid "sudo apt-get install ethtool"
11891
msgstr ""
11892
11893
#: serverguide/C/network-config.xml:108(para)
11894
msgid ""
11895
"The following is an example of how to view supported features and configured "
11896
"settings of an Ethernet interface."
11897
msgstr ""
11898
11899
#: serverguide/C/network-config.xml:113(userinput)
11900
#, no-wrap
11901
msgid "sudo ethtool eth0"
11902
msgstr ""
11903
11904
#: serverguide/C/network-config.xml:112(screen)
11905
#, no-wrap
11906
msgid ""
11907
"\n"
11908
"<placeholder-1/>\n"
11909
"Settings for eth0:\n"
11910
" Supported ports: [ TP ]\n"
11911
" Supported link modes: 10baseT/Half 10baseT/Full \n"
11912
" 100baseT/Half 100baseT/Full \n"
11913
" 1000baseT/Half 1000baseT/Full \n"
11914
" Supports auto-negotiation: Yes\n"
11915
" Advertised link modes: 10baseT/Half 10baseT/Full \n"
11916
" 100baseT/Half 100baseT/Full \n"
11917
" 1000baseT/Half 1000baseT/Full \n"
11918
" Advertised auto-negotiation: Yes\n"
11919
" Speed: 1000Mb/s\n"
11920
" Duplex: Full\n"
11921
" Port: Twisted Pair\n"
11922
" PHYAD: 1\n"
11923
" Transceiver: internal\n"
11924
" Auto-negotiation: on\n"
11925
" Supports Wake-on: g\n"
11926
" Wake-on: d\n"
11927
" Current message level: 0x000000ff (255)\n"
11928
" Link detected: yes\n"
11929
msgstr ""
11930
11931
#: serverguide/C/network-config.xml:135(para)
11932
msgid ""
11933
"Changes made with the <application>ethtool</application> command are "
11934
"temporary and will be lost after a reboot. If you would like to retain "
11935
"settings, simply add the desired <application>ethtool</application> command "
11936
"to a <emphasis role=\"italic\">pre-up</emphasis> statement in the interface "
11937
"configuration file <filename>/etc/network/interfaces</filename>."
11938
msgstr ""
11939
11940
#: serverguide/C/network-config.xml:141(para)
11941
msgid ""
11942
"The following is an example of how the interface identified as <emphasis "
11943
"role=\"italic\">eth0</emphasis> could be permanently configured with a port "
11944
"speed of 1000Mb/s running in full duplex mode."
11945
msgstr ""
11946
11947
#: serverguide/C/network-config.xml:145(programlisting)
11948
#, no-wrap
11949
msgid ""
11950
"\n"
11951
"auto eth0\n"
11952
"iface eth0 inet static\n"
11953
"pre-up /usr/sbin/ethtool -s eth0 speed 1000 duplex full\n"
11954
msgstr ""
11955
11956
#: serverguide/C/network-config.xml:151(para)
11957
msgid ""
11958
"Although the example above shows the interface configured to use the "
11959
"<emphasis role=\"italic\">static</emphasis> method, it actually works with "
11960
"other methods as well, such as DHCP. The example is meant to demonstrate "
11961
"only proper placement of the <emphasis role=\"italic\">pre-up</emphasis> "
11962
"statement in relation to the rest of the interface configuration."
11963
msgstr ""
11964
11965
#: serverguide/C/network-config.xml:163(title)
11966
msgid "IP Addressing"
11967
msgstr ""
11968
11969
#: serverguide/C/network-config.xml:164(para)
11970
msgid ""
11971
"The following section describes the process of configuring your systems IP "
11972
"address and default gateway needed for communicating on a local area network "
11973
"and the Internet."
11974
msgstr ""
11975
11976
#: serverguide/C/network-config.xml:171(title)
11977
msgid "Temporary IP Address Assignment"
11978
msgstr ""
11979
11980
#: serverguide/C/network-config.xml:172(para)
11981
msgid ""
11982
"For temporary network configurations, you can use standard commands such as "
11983
"<application>ip</application>, <application>ifconfig</application> and "
11984
"<application>route</application>, which are also found on most other "
11985
"GNU/Linux operating systems. These commands allow you to configure settings "
11986
"which take effect immediately, however they are not persistent and will be "
11987
"lost after a reboot."
11988
msgstr ""
11989
11990
#: serverguide/C/network-config.xml:180(para)
11991
msgid ""
11992
"To temporarily configure an IP address, you can use the "
11993
"<application>ifconfig</application> command in the following manner. Just "
11994
"modify the IP address and subnet mask to match your network requirements."
11995
msgstr ""
11996
11997
#: serverguide/C/network-config.xml:186(userinput)
11998
#, no-wrap
11999
msgid "sudo ifconfig eth0 10.0.0.100 netmask 255.255.255.0"
12000
msgstr ""
12001
12002
#: serverguide/C/network-config.xml:188(para)
12003
msgid ""
12004
"To verify the IP address configuration of <application>eth0</application>, "
12005
"you can use the <application>ifconfig</application> command in the following "
12006
"manner."
12007
msgstr ""
12008
12009
#: serverguide/C/network-config.xml:193(userinput)
12010
#, no-wrap
12011
msgid "ifconfig eth0"
12012
msgstr ""
12013
12014
#: serverguide/C/network-config.xml:192(screen)
12015
#, no-wrap
12016
msgid ""
12017
"\n"
12018
"<placeholder-1/>\n"
12019
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a \n"
12020
" inet addr:10.0.0.100 Bcast:10.0.0.255 Mask:255.255.255.0\n"
12021
" inet6 addr: fe80::215:c5ff:fe4a:165a/64 Scope:Link\n"
12022
" UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1\n"
12023
" RX packets:466475604 errors:0 dropped:0 overruns:0 frame:0\n"
12024
" TX packets:403172654 errors:0 dropped:0 overruns:0 carrier:0\n"
12025
" collisions:0 txqueuelen:1000 \n"
12026
" RX bytes:2574778386 (2.5 GB) TX bytes:1618367329 (1.6 GB)\n"
12027
" Interrupt:16 \n"
12028
msgstr ""
12029
12030
#: serverguide/C/network-config.xml:204(para)
12031
msgid ""
12032
"To configure a default gateway, you can use the "
12033
"<application>route</application> command in the following manner. Modify the "
12034
"default gateway address to match your network requirements."
12035
msgstr ""
12036
12037
#: serverguide/C/network-config.xml:210(userinput)
12038
#, no-wrap
12039
msgid "sudo route add default gw 10.0.0.1 eth0"
12040
msgstr ""
12041
12042
#: serverguide/C/network-config.xml:212(para)
12043
msgid ""
12044
"To verify your default gateway configuration, you can use the "
12045
"<application>route</application> command in the following manner."
12046
msgstr ""
12047
12048
#: serverguide/C/network-config.xml:217(userinput)
12049
#, no-wrap
12050
msgid "route -n"
12051
msgstr ""
12052
12053
#: serverguide/C/network-config.xml:216(screen)
12054
#, no-wrap
12055
msgid ""
12056
"\n"
12057
"<placeholder-1/>\n"
12058
"Kernel IP routing table\n"
12059
"Destination Gateway Genmask Flags Metric Ref Use "
12060
"Iface\n"
12061
"10.0.0.0 0.0.0.0 255.255.255.0 U 1 0 0 "
12062
"eth0\n"
12063
"0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 "
12064
"eth0\n"
12065
msgstr ""
12066
12067
#: serverguide/C/network-config.xml:223(para)
12068
msgid ""
12069
"If you require DNS for your temporary network configuration, you can add DNS "
12070
"server IP addresses in the file <filename>/etc/resolv.conf</filename>. The "
12071
"example below shows how to enter two DNS servers to "
12072
"<filename>/etc/resolv.conf</filename>, which should be changed to servers "
12073
"appropriate for your network. A more lengthy description of DNS client "
12074
"configuration is in a following section."
12075
msgstr ""
12076
12077
#: serverguide/C/network-config.xml:230(programlisting)
12078
#, no-wrap
12079
msgid ""
12080
"\n"
12081
"nameserver 8.8.8.8\n"
12082
"nameserver 8.8.4.4\n"
12083
msgstr ""
12084
12085
#: serverguide/C/network-config.xml:234(para)
12086
msgid ""
12087
"If you no longer need this configuration and wish to purge all IP "
12088
"configuration from an interface, you can use the "
12089
"<application>ip</application> command with the flush option as shown below."
12090
msgstr ""
12091
12092
#: serverguide/C/network-config.xml:240(userinput)
12093
#, no-wrap
12094
msgid "ip addr flush eth0"
12095
msgstr ""
12096
12097
#: serverguide/C/network-config.xml:243(para)
12098
msgid ""
12099
"Flushing the IP configuration using the <application>ip</application> "
12100
"command does not clear the contents of "
12101
"<filename>/etc/resolv.conf</filename>. You must remove or modify those "
12102
"entries manually."
12103
msgstr ""
12104
12105
#: serverguide/C/network-config.xml:251(title)
12106
msgid "Dynamic IP Address Assignment (DHCP Client)"
12107
msgstr ""
12108
12109
#: serverguide/C/network-config.xml:252(para)
12110
msgid ""
12111
"To configure your server to use DHCP for dynamic address assignment, add the "
12112
"<emphasis role=\"italic\">dhcp</emphasis> method to the inet address family "
12113
"statement for the appropriate interface in the file "
12114
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
12115
"are configuring your first Ethernet interface identified as <emphasis "
12116
"role=\"italic\">eth0</emphasis>."
12117
msgstr ""
12118
12119
#: serverguide/C/network-config.xml:259(programlisting)
12120
#, no-wrap
12121
msgid ""
12122
"\n"
12123
"auto eth0\n"
12124
"iface eth0 inet dhcp\n"
12125
msgstr ""
12126
12127
#: serverguide/C/network-config.xml:263(para)
12128
msgid ""
12129
"By adding an interface configuration as shown above, you can manually enable "
12130
"the interface through the <application>ifup</application> command which "
12131
"initiates the DHCP process via <application>dhclient</application>."
12132
msgstr ""
12133
12134
#: serverguide/C/network-config.xml:269(userinput) serverguide/C/network-config.xml:304(userinput)
12135
#, no-wrap
12136
msgid "sudo ifup eth0"
12137
msgstr ""
12138
12139
#: serverguide/C/network-config.xml:271(para)
12140
msgid ""
12141
"To manually disable the interface, you can use the "
12142
"<application>ifdown</application> command, which in turn will initiate the "
12143
"DHCP release process and shut down the interface."
12144
msgstr ""
12145
12146
#: serverguide/C/network-config.xml:277(userinput) serverguide/C/network-config.xml:311(userinput)
12147
#, no-wrap
12148
msgid "sudo ifdown eth0"
12149
msgstr ""
12150
12151
#: serverguide/C/network-config.xml:282(title)
12152
msgid "Static IP Address Assignment"
12153
msgstr ""
12154
12155
#: serverguide/C/network-config.xml:283(para)
12156
msgid ""
12157
"To configure your system to use a static IP address assignment, add the "
12158
"<emphasis role=\"italic\">static</emphasis> method to the inet address "
12159
"family statement for the appropriate interface in the file "
12160
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
12161
"are configuring your first Ethernet interface identified as <emphasis "
12162
"role=\"italic\">eth0</emphasis>. Change the <emphasis "
12163
"role=\"italic\">address</emphasis>, <emphasis "
12164
"role=\"italic\">netmask</emphasis>, and <emphasis "
12165
"role=\"italic\">gateway</emphasis> values to meet the requirements of your "
12166
"network."
12167
msgstr ""
12168
12169
#: serverguide/C/network-config.xml:292(programlisting)
12170
#, no-wrap
12171
msgid ""
12172
"\n"
12173
"auto eth0\n"
12174
"iface eth0 inet static\n"
12175
"address 10.0.0.100\n"
12176
"netmask 255.255.255.0\n"
12177
"gateway 10.0.0.1\n"
12178
msgstr ""
12179
12180
#: serverguide/C/network-config.xml:299(para)
12181
msgid ""
12182
"By adding an interface configuration as shown above, you can manually enable "
12183
"the interface through the <application>ifup</application> command."
12184
msgstr ""
12185
12186
#: serverguide/C/network-config.xml:306(para)
12187
msgid ""
12188
"To manually disable the interface, you can use the "
12189
"<application>ifdown</application> command."
12190
msgstr ""
12191
12192
#: serverguide/C/network-config.xml:316(title)
12193
msgid "Loopback Interface"
12194
msgstr ""
12195
12196
#: serverguide/C/network-config.xml:317(para)
12197
msgid ""
12198
"The loopback interface is identified by the system as <emphasis "
12199
"role=\"italic\">lo</emphasis> and has a default IP address of 127.0.0.1. It "
12200
"can be viewed using the ifconfig command."
12201
msgstr ""
12202
12203
#: serverguide/C/network-config.xml:322(userinput)
12204
#, no-wrap
12205
msgid "ifconfig lo"
12206
msgstr ""
12207
12208
#: serverguide/C/network-config.xml:321(screen)
12209
#, no-wrap
12210
msgid ""
12211
"\n"
12212
"<placeholder-1/>\n"
12213
"lo Link encap:Local Loopback \n"
12214
" inet addr:127.0.0.1 Mask:255.0.0.0\n"
12215
" inet6 addr: ::1/128 Scope:Host\n"
12216
" UP LOOPBACK RUNNING MTU:16436 Metric:1\n"
12217
" RX packets:2718 errors:0 dropped:0 overruns:0 frame:0\n"
12218
" TX packets:2718 errors:0 dropped:0 overruns:0 carrier:0\n"
12219
" collisions:0 txqueuelen:0 \n"
12220
" RX bytes:183308 (183.3 KB) TX bytes:183308 (183.3 KB)\n"
12221
msgstr ""
12222
12223
#: serverguide/C/network-config.xml:332(para)
12224
msgid ""
12225
"By default, there should be two lines in "
12226
"<filename>/etc/network/interfaces</filename> responsible for automatically "
12227
"configuring your loopback interface. It is recommended that you keep the "
12228
"default settings unless you have a specific purpose for changing them. An "
12229
"example of the two default lines are shown below."
12230
msgstr ""
12231
12232
#: serverguide/C/network-config.xml:338(programlisting)
12233
#, no-wrap
12234
msgid ""
12235
"\n"
12236
"auto lo\n"
12237
"iface lo inet loopback\n"
12238
msgstr ""
12239
12240
#: serverguide/C/network-config.xml:347(title)
12241
msgid "Name Resolution"
12242
msgstr ""
12243
12244
#: serverguide/C/network-config.xml:348(para)
12245
msgid ""
12246
"Name resolution as it relates to IP networking is the process of mapping IP "
12247
"addresses to hostnames, making it easier to identify resources on a network. "
12248
"The following section will explain how to properly configure your system for "
12249
"name resolution using DNS and static hostname records."
12250
msgstr ""
12251
12252
#: serverguide/C/network-config.xml:356(title)
12253
msgid "DNS Client Configuration"
12254
msgstr ""
12255
12256
#: serverguide/C/network-config.xml:357(para)
12257
msgid ""
12258
"To configure your system to use DNS for name resolution, add the IP "
12259
"addresses of the DNS servers that are appropriate for your network in the "
12260
"file <filename>/etc/resolv.conf</filename>. You can also add an optional DNS "
12261
"suffix search-lists to match your network domain names."
12262
msgstr ""
12263
12264
#: serverguide/C/network-config.xml:362(para)
12265
msgid ""
12266
"Below is an example of a typical configuration of "
12267
"<filename>/etc/resolv.conf</filename> for a server on the domain \"<emphasis "
12268
"role=\"italic\">example.com</emphasis>\" and using two public DNS servers."
12269
msgstr ""
12270
12271
#: serverguide/C/network-config.xml:367(programlisting)
12272
#, no-wrap
12273
msgid ""
12274
"\n"
12275
"search example.com\n"
12276
"nameserver 8.8.8.8\n"
12277
"nameserver 8.8.4.4\n"
12278
msgstr ""
12279
12280
#: serverguide/C/network-config.xml:372(para)
12281
msgid ""
12282
"The <emphasis role=\"italic\">search</emphasis> option can also be used with "
12283
"multiple domain names so that DNS queries will be appended in the order in "
12284
"which they are entered. For example, your network may have multiple sub-"
12285
"domains to search; a parent domain of <emphasis "
12286
"role=\"italic\">example.com</emphasis>, and two sub-domains, <emphasis "
12287
"role=\"italic\">sales.example.com</emphasis> and <emphasis "
12288
"role=\"italic\">dev.example.com</emphasis>."
12289
msgstr ""
12290
12291
#: serverguide/C/network-config.xml:380(para)
12292
msgid ""
12293
"If you have multiple domains you wish to search, your configuration might "
12294
"look like the following."
12295
msgstr ""
12296
12297
#: serverguide/C/network-config.xml:383(programlisting)
12298
#, no-wrap
12299
msgid ""
12300
"\n"
12301
"search example.com sales.example.com dev.example.com\n"
12302
"nameserver 8.8.8.8\n"
12303
"nameserver 8.8.4.4\n"
12304
msgstr ""
12305
12306
#: serverguide/C/network-config.xml:388(para)
12307
msgid ""
12308
"If you try to ping a host with the name of <emphasis "
12309
"role=\"italic\">server1</emphasis>, your system will automatically query DNS "
12310
"for its Fully Qualified Domain Name (FQDN) in the following order:"
12311
msgstr ""
12312
12313
#: serverguide/C/network-config.xml:394(para)
12314
msgid "server1<emphasis role=\"bold\">.example.com</emphasis>"
12315
msgstr ""
12316
12317
#: serverguide/C/network-config.xml:399(para)
12318
msgid "server1<emphasis role=\"bold\">.sales.example.com</emphasis>"
12319
msgstr ""
12320
12321
#: serverguide/C/network-config.xml:404(para)
12322
msgid "server1<emphasis role=\"bold\">.dev.example.com</emphasis>"
12323
msgstr ""
12324
12325
#: serverguide/C/network-config.xml:409(para)
12326
msgid ""
12327
"If no matches are found, the DNS server will provide a result of <emphasis "
12328
"role=\"italic\">notfound</emphasis> and the DNS query will fail."
12329
msgstr ""
12330
12331
#: serverguide/C/network-config.xml:416(title)
12332
msgid "Static Hostnames"
12333
msgstr ""
12334
12335
#: serverguide/C/network-config.xml:417(para)
12336
msgid ""
12337
"Static hostnames are locally defined hostname-to-IP mappings located in the "
12338
"file <filename>/etc/hosts</filename>. Entries in the "
12339
"<filename>hosts</filename> file will have precedence over DNS by default. "
12340
"This means that if your system tries to resolve a hostname and it matches an "
12341
"entry in /etc/hosts, it will not attempt to look up the record in DNS. In "
12342
"some configurations, especially when Internet access is not required, "
12343
"servers that communicate with a limited number of resources can be "
12344
"conveniently set to use static hostnames instead of DNS."
12345
msgstr ""
12346
12347
#: serverguide/C/network-config.xml:424(para)
12348
msgid ""
12349
"The following is an example of a <filename>hosts</filename> file where a "
12350
"number of local servers have been identified by simple hostnames, aliases "
12351
"and their equivalent Fully Qualified Domain Names (FQDN's)."
12352
msgstr ""
12353
12354
#: serverguide/C/network-config.xml:428(programlisting)
12355
#, no-wrap
12356
msgid ""
12357
"\n"
12358
"127.0.0.1\tlocalhost\n"
12359
"127.0.1.1\tubuntu-server\n"
12360
"10.0.0.11\tserver1 vpn server1.example.com\n"
12361
"10.0.0.12\tserver2 mail server2.example.com\n"
12362
"10.0.0.13\tserver3 www server3.example.com\n"
12363
"10.0.0.14\tserver4 file server4.example.com\n"
12364
msgstr ""
12365
12366
#: serverguide/C/network-config.xml:437(para)
12367
msgid ""
12368
"In the above example, notice that each of the servers have been given "
12369
"aliases in addition to their proper names and FQDN's. <emphasis "
12370
"role=\"italic\">Server1</emphasis> has been mapped to the name <emphasis "
12371
"role=\"italic\">vpn</emphasis>, <emphasis role=\"italic\">server2</emphasis> "
12372
"is referred to as <emphasis role=\"italic\">mail</emphasis>, <emphasis "
12373
"role=\"italic\">server3</emphasis> as <emphasis "
12374
"role=\"italic\">www</emphasis>, and <emphasis "
12375
"role=\"italic\">server4</emphasis> as <emphasis "
12376
"role=\"italic\">file</emphasis>."
12377
msgstr ""
12378
12379
#: serverguide/C/network-config.xml:449(title)
12380
msgid "Name Service Switch Configuration"
12381
msgstr ""
12382
12383
#: serverguide/C/network-config.xml:450(para)
12384
msgid ""
12385
"The order in which your system selects a method of resolving hostnames to IP "
12386
"addresses is controlled by the Name Service Switch (NSS) configuration file "
12387
"<filename>/etc/nsswitch.conf</filename>. As mentioned in the previous "
12388
"section, typically static hostnames defined in the systems "
12389
"<filename>/etc/hosts</filename> file have precedence over names resolved "
12390
"from DNS. The following is an example of the line responsible for this order "
12391
"of hostname lookups in the file <filename>/etc/nsswitch.conf</filename>."
12392
msgstr ""
12393
12394
#: serverguide/C/network-config.xml:458(programlisting)
12395
#, no-wrap
12396
msgid ""
12397
"\n"
12398
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
12399
msgstr ""
12400
12401
#: serverguide/C/network-config.xml:464(para)
12402
msgid ""
12403
"<emphasis role=\"bold\">files</emphasis> first tries to resolve static "
12404
"hostnames located in <filename>/etc/hosts</filename>."
12405
msgstr ""
12406
12407
#: serverguide/C/network-config.xml:470(para)
12408
msgid ""
12409
"<emphasis role=\"bold\">mdns4_minimal</emphasis> attempts to resolve the "
12410
"name using Multicast DNS."
12411
msgstr ""
12412
12413
#: serverguide/C/network-config.xml:475(para)
12414
msgid ""
12415
"<emphasis role=\"bold\">[NOTFOUND=return]</emphasis> means that any response "
12416
"of <emphasis role=\"italic\">notfound</emphasis> by the preceeding <emphasis "
12417
"role=\"italic\">mdns4_minimal</emphasis> process should be treated as "
12418
"authoritative and that the system should not try to continue hunting for an "
12419
"answer."
12420
msgstr ""
12421
12422
#: serverguide/C/network-config.xml:483(para)
12423
msgid ""
12424
"<emphasis role=\"bold\">dns</emphasis> represents a legacy unicast DNS query."
12425
msgstr ""
12426
12427
#: serverguide/C/network-config.xml:488(para)
12428
msgid ""
12429
"<emphasis role=\"bold\">mdns4</emphasis> represents a Multicast DNS query."
12430
msgstr ""
12431
12432
#: serverguide/C/network-config.xml:494(para)
12433
msgid ""
12434
"To modify the order of the above mentioned name resolution methods, you can "
12435
"simply change the <emphasis role=\"italic\">hosts:</emphasis> string to the "
12436
"value of your choosing. For example, if you prefer to use legacy Unicast DNS "
12437
"versus Multicast DNS, you can change the string in "
12438
"<filename>/etc/nsswitch.conf</filename> as shown below."
12439
msgstr ""
12440
12441
#: serverguide/C/network-config.xml:501(programlisting)
12442
#, no-wrap
12443
msgid ""
12444
"\n"
12445
"hosts: files dns [NOTFOUND=return] mdns4_minimal mdns4\n"
12446
msgstr ""
12447
12448
#: serverguide/C/network-config.xml:508(title)
12449
msgid "Bridging"
12450
msgstr ""
12451
12452
#: serverguide/C/network-config.xml:510(para)
12453
msgid ""
12454
"Bridging multiple interfaces is a more advanced configuration, but is very "
12455
"useful in multiple scenarios. One scenario is setting up a bridge with "
12456
"multiple network interfaces, then using a firewall to filter traffic between "
12457
"two network segments. Another scenario is using bridge on a system with one "
12458
"interface to allow virtual machines direct access to the outside network. "
12459
"The following example covers the latter scenario."
12460
msgstr ""
12461
12462
#: serverguide/C/network-config.xml:517(para)
12463
msgid ""
12464
"Before configuring a bridge you will need to install the <application>bridge-"
12465
"utils</application> package. To install the package, in a terminal enter:"
12466
msgstr ""
12467
12468
#: serverguide/C/network-config.xml:523(command)
12469
msgid "sudo apt-get install bridge-utils"
12470
msgstr ""
12471
12472
#: serverguide/C/network-config.xml:526(para)
12473
msgid ""
12474
"Next, configure the bridge by editing "
12475
"<filename>/etc/network/interfaces</filename>:"
12476
msgstr ""
12477
12478
#: serverguide/C/network-config.xml:530(programlisting)
12479
#, no-wrap
12480
msgid ""
12481
"\n"
12482
"auto lo\n"
12483
"iface lo inet loopback\n"
12484
"\n"
12485
"auto br0\n"
12486
"iface br0 inet static\n"
12487
" address 192.168.0.10\n"
12488
" network 192.168.0.0\n"
12489
" netmask 255.255.255.0\n"
12490
" broadcast 192.168.0.255\n"
12491
" gateway 192.168.0.1\n"
12492
" bridge_ports eth0\n"
12493
" bridge_fd 9\n"
12494
" bridge_hello 2\n"
12495
" bridge_maxage 12\n"
12496
" bridge_stp off\n"
12497
msgstr ""
12498
12499
#: serverguide/C/network-config.xml:549(para)
12500
msgid "Enter the appropriate values for your physical interface and network."
12501
msgstr ""
12502
12503
#: serverguide/C/network-config.xml:554(para)
12504
msgid "Now restart networking to enable the bridge interface:"
12505
msgstr ""
12506
12507
#: serverguide/C/network-config.xml:561(para)
12508
msgid ""
12509
"The new bridge interface should now be up and running. The "
12510
"<application>brctl</application> provides useful information about the state "
12511
"of the bridge, controls which interfaces are part of the bridge, etc. See "
12512
"<command>man brctl</command> for more information."
12513
msgstr ""
12514
12515
#: serverguide/C/network-config.xml:577(para)
12516
msgid ""
12517
"The <ulink url=\"https://help.ubuntu.com/community/Network\">Ubuntu Wiki "
12518
"Network page</ulink> has links to articles covering more advanced network "
12519
"configuration."
12520
msgstr ""
12521
12522
#: serverguide/C/network-config.xml:583(para)
12523
msgid ""
12524
"The <ulink "
12525
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/interfaces.5.html\">i"
12526
"nterfaces man page</ulink> has details on more options for "
12527
"<filename>/etc/network/interfaces</filename>."
12528
msgstr ""
12529
12530
#: serverguide/C/network-config.xml:589(para)
12531
msgid ""
12532
"The <ulink "
12533
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/dhclient.8.html\">dhc"
12534
"lient man page</ulink> has details on more options for configuring DHCP "
12535
"client settings."
12536
msgstr ""
12537
12538
#: serverguide/C/network-config.xml:595(para)
12539
msgid ""
12540
"For more information on DNS client configuration see the <ulink "
12541
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/resolver.5.html\">res"
12542
"olver man page</ulink>. Also, Chapter 6 of O'Reilly's <ulink "
12543
"url=\"http://oreilly.com/catalog/linag2/book/ch06.html\">Linux Network "
12544
"Administrator's Guide</ulink> is a good source of resolver and name service "
12545
"configuration information."
12546
msgstr ""
12547
12548
#: serverguide/C/network-config.xml:603(para)
12549
msgid ""
12550
"For more information on <emphasis>bridging</emphasis> see the <ulink "
12551
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/brctl.8.html\">brctl "
12552
"man page</ulink> and the Linux Foundation's <ulink "
12553
"url=\"http://www.linuxfoundation.org/en/Net:Bridge\">Net:Bridge</ulink> page."
12554
msgstr ""
12555
12556
#: serverguide/C/network-config.xml:614(title)
12557
msgid "TCP/IP"
12558
msgstr ""
12559
12560
#: serverguide/C/network-config.xml:615(para)
12561
msgid ""
12562
"The Transmission Control Protocol and Internet Protocol (TCP/IP) is a "
12563
"standard set of protocols developed in the late 1970s by the Defense "
12564
"Advanced Research Projects Agency (DARPA) as a means of communication "
12565
"between different types of computers and computer networks. TCP/IP is the "
12566
"driving force of the Internet, and thus it is the most popular set of "
12567
"network protocols on Earth."
12568
msgstr ""
12569
12570
#: serverguide/C/network-config.xml:623(title)
12571
msgid "TCP/IP Introduction"
12572
msgstr ""
12573
12574
#: serverguide/C/network-config.xml:624(para)
12575
msgid ""
12576
"The two protocol components of TCP/IP deal with different aspects of "
12577
"computer networking. <emphasis>Internet Protocol</emphasis>, the \"IP\" of "
12578
"TCP/IP is a connectionless protocol which deals only with network packet "
12579
"routing using the <emphasis role=\"italics\">IP Datagram</emphasis> as the "
12580
"basic unit of networking information. The IP Datagram consists of a header "
12581
"followed by a message. The <emphasis> Transmission Control "
12582
"Protocol</emphasis> is the \"TCP\" of TCP/IP and enables network hosts to "
12583
"establish connections which may be used to exchange data streams. TCP also "
12584
"guarantees that the data between connections is delivered and that it "
12585
"arrives at one network host in the same order as sent from another network "
12586
"host."
12587
msgstr ""
12588
12589
#: serverguide/C/network-config.xml:637(title)
12590
msgid "TCP/IP Configuration"
12591
msgstr ""
12592
12593
#: serverguide/C/network-config.xml:638(para)
12594
msgid ""
12595
"The TCP/IP protocol configuration consists of several elements which must be "
12596
"set by editing the appropriate configuration files, or deploying solutions "
12597
"such as the Dynamic Host Configuration Protocol (DHCP) server which in turn, "
12598
"can be configured to provide the proper TCP/IP configuration settings to "
12599
"network clients automatically. These configuration values must be set "
12600
"correctly in order to facilitate the proper network operation of your Ubuntu "
12601
"system."
12602
msgstr ""
12603
12604
#: serverguide/C/network-config.xml:650(para)
12605
msgid ""
12606
"<emphasis role=\"bold\">IP address</emphasis> The IP address is a unique "
12607
"identifying string expressed as four decimal numbers ranging from zero (0) "
12608
"to two-hundred and fifty-five (255), separated by periods, with each of the "
12609
"four numbers representing eight (8) bits of the address for a total length "
12610
"of thirty-two (32) bits for the whole address. This format is called "
12611
"<emphasis>dotted quad notation</emphasis>."
12612
msgstr ""
12613
12614
#: serverguide/C/network-config.xml:660(para)
12615
msgid ""
12616
"<emphasis role=\"bold\">Netmask</emphasis> The Subnet Mask (or simply, "
12617
"<emphasis>netmask</emphasis>) is a local bit mask, or set of flags which "
12618
"separate the portions of an IP address significant to the network from the "
12619
"bits significant to the <emphasis>subnetwork</emphasis>. For example, in a "
12620
"Class C network, the standard netmask is 255.255.255.0 which masks the first "
12621
"three bytes of the IP address and allows the last byte of the IP address to "
12622
"remain available for specifying hosts on the subnetwork."
12623
msgstr ""
12624
12625
#: serverguide/C/network-config.xml:671(para)
12626
msgid ""
12627
"<emphasis role=\"bold\">Network Address</emphasis> The Network Address "
12628
"represents the bytes comprising the network portion of an IP address. For "
12629
"example, the host 12.128.1.2 in a Class A network would use 12.0.0.0 as the "
12630
"network address, where twelve (12) represents the first byte of the IP "
12631
"address, (the network part) and zeroes (0) in all of the remaining three "
12632
"bytes to represent the potential host values. A network host using the "
12633
"private IP address 192.168.1.100 would in turn use a Network Address of "
12634
"192.168.1.0, which specifies the first three bytes of the Class C 192.168.1 "
12635
"network and a zero (0) for all the possible hosts on the network."
12636
msgstr ""
12637
12638
#: serverguide/C/network-config.xml:684(para)
12639
msgid ""
12640
"<emphasis role=\"bold\">Broadcast Address</emphasis> The Broadcast Address "
12641
"is an IP address which allows network data to be sent simultaneously to all "
12642
"hosts on a given subnetwork rather than specifying a particular host. The "
12643
"standard general broadcast address for IP networks is 255.255.255.255, but "
12644
"this broadcast address cannot be used to send a broadcast message to every "
12645
"host on the Internet because routers block it. A more appropriate broadcast "
12646
"address is set to match a specific subnetwork. For example, on the private "
12647
"Class C IP network, 192.168.1.0, the broadcast address is 192.168.1.255. "
12648
"Broadcast messages are typically produced by network protocols such as the "
12649
"Address Resolution Protocol (ARP) and the Routing Information Protocol (RIP)."
12650
msgstr ""
12651
12652
#: serverguide/C/network-config.xml:697(para)
12653
msgid ""
12654
"<emphasis role=\"bold\">Gateway Address</emphasis> A Gateway Address is the "
12655
"IP address through which a particular network, or host on a network, may be "
12656
"reached. If one network host wishes to communicate with another network "
12657
"host, and that host is not located on the same network, then a "
12658
"<emphasis>gateway</emphasis> must be used. In many cases, the Gateway "
12659
"Address will be that of a router on the same network, which will in turn "
12660
"pass traffic on to other networks or hosts, such as Internet hosts. The "
12661
"value of the Gateway Address setting must be correct, or your system will "
12662
"not be able to reach any hosts beyond those on the same network."
12663
msgstr ""
12664
12665
#: serverguide/C/network-config.xml:708(para)
12666
msgid ""
12667
"<emphasis role=\"bold\">Nameserver Address</emphasis> Nameserver Addresses "
12668
"represent the IP addresses of Domain Name Service (DNS) systems, which "
12669
"resolve network hostnames into IP addresses. There are three levels of "
12670
"Nameserver Addresses, which may be specified in order of precedence: The "
12671
"<emphasis>Primary</emphasis> Nameserver, the <emphasis>Secondary</emphasis> "
12672
"Nameserver, and the <emphasis>Tertiary</emphasis> Nameserver. In order for "
12673
"your system to be able to resolve network hostnames into their corresponding "
12674
"IP addresses, you must specify valid Nameserver Addresses which you are "
12675
"authorized to use in your system's TCP/IP configuration. In many cases these "
12676
"addresses can and will be provided by your network service provider, but "
12677
"many free and publicly accessible nameservers are available for use, such as "
12678
"the Level3 (Verizon) servers with IP addresses from 4.2.2.1 to 4.2.2.6."
12679
msgstr ""
12680
12681
#: serverguide/C/network-config.xml:722(para)
12682
msgid ""
12683
"The IP address, Netmask, Network Address, Broadcast Address, and Gateway "
12684
"Address are typically specified via the appropriate directives in the file "
12685
"<filename>/etc/network/interfaces</filename>. The Nameserver Addresses are "
12686
"typically specified via <emphasis>nameserver</emphasis> directives in the "
12687
"file <filename>/etc/resolv.conf</filename>. For more information, view the "
12688
"system manual page for <filename>interfaces</filename> or "
12689
"<filename>resolv.conf</filename> respectively, with the following commands "
12690
"typed at a terminal prompt:"
12691
msgstr ""
12692
12693
#: serverguide/C/network-config.xml:729(para)
12694
msgid ""
12695
"Access the system manual page for <filename>interfaces</filename> with the "
12696
"following command:"
12697
msgstr ""
12698
12699
#: serverguide/C/network-config.xml:734(command)
12700
msgid "man interfaces"
12701
msgstr ""
12702
12703
#: serverguide/C/network-config.xml:737(para)
12704
msgid ""
12705
"Access the system manual page for <filename>resolv.conf</filename> with the "
12706
"following command:"
12707
msgstr ""
12708
12709
#: serverguide/C/network-config.xml:741(command)
12710
msgid "man resolv.conf"
12711
msgstr ""
12712
12713
#: serverguide/C/network-config.xml:646(para)
12714
msgid ""
12715
"The common configuration elements of TCP/IP and their purposes are as "
12716
"follows: <placeholder-1/>"
12717
msgstr ""
12718
12719
#: serverguide/C/network-config.xml:748(title)
12720
msgid "IP Routing"
12721
msgstr ""
12722
12723
#: serverguide/C/network-config.xml:749(para)
12724
msgid ""
12725
"IP routing is a means of specifying and discovering paths in a TCP/IP "
12726
"network along which network data may be sent. Routing uses a set of "
12727
"<emphasis>routing tables</emphasis> to direct the forwarding of network data "
12728
"packets from their source to the destination, often via many intermediary "
12729
"network nodes known as <emphasis>routers</emphasis>. There are two primary "
12730
"forms of IP routing: <emphasis>Static Routing</emphasis> and "
12731
"<emphasis>Dynamic Routing.</emphasis>"
12732
msgstr ""
12733
12734
#: serverguide/C/network-config.xml:758(para)
12735
msgid ""
12736
"Static routing involves manually adding IP routes to the system's routing "
12737
"table, and this is usually done by manipulating the routing table with the "
12738
"<application>route</application> command. Static routing enjoys many "
12739
"advantages over dynamic routing, such as simplicity of implementation on "
12740
"smaller networks, predictability (the routing table is always computed in "
12741
"advance, and thus the route is precisely the same each time it is used), and "
12742
"low overhead on other routers and network links due to the lack of a dynamic "
12743
"routing protocol. However, static routing does present some disadvantages as "
12744
"well. For example, static routing is limited to small networks and does not "
12745
"scale well. Static routing also fails completely to adapt to network outages "
12746
"and failures along the route due to the fixed nature of the route."
12747
msgstr ""
12748
12749
#: serverguide/C/network-config.xml:768(para)
12750
msgid ""
12751
"Dynamic routing depends on large networks with multiple possible IP routes "
12752
"from a source to a destination and makes use of special routing protocols, "
12753
"such as the Router Information Protocol (RIP), which handle the automatic "
12754
"adjustments in routing tables that make dynamic routing possible. Dynamic "
12755
"routing has several advantages over static routing, such as superior "
12756
"scalability and the ability to adapt to failures and outages along network "
12757
"routes. Additionally, there is less manual configuration of the routing "
12758
"tables, since routers learn from one another about their existence and "
12759
"available routes. This trait also eliminates the possibility of introducing "
12760
"mistakes in the routing tables via human error. Dynamic routing is not "
12761
"perfect, however, and presents disadvantages such as heightened complexity "
12762
"and additional network overhead from router communications, which does not "
12763
"immediately benefit the end users, but still consumes network bandwidth."
12764
msgstr ""
12765
12766
#: serverguide/C/network-config.xml:782(title)
12767
msgid "TCP and UDP"
12768
msgstr ""
12769
12770
#: serverguide/C/network-config.xml:783(para)
12771
msgid ""
12772
"TCP is a connection-based protocol, offering error correction and guaranteed "
12773
"delivery of data via what is known as <emphasis>flow control</emphasis>. "
12774
"Flow control determines when the flow of a data stream needs to be stopped, "
12775
"and previously sent data packets should to be re-sent due to problems such "
12776
"as <emphasis>collisions</emphasis>, for example, thus ensuring complete and "
12777
"accurate delivery of the data. TCP is typically used in the exchange of "
12778
"important information such as database transactions."
12779
msgstr ""
12780
12781
#: serverguide/C/network-config.xml:791(para)
12782
msgid ""
12783
"The User Datagram Protocol (UDP), on the other hand, is a "
12784
"<emphasis>connectionless</emphasis> protocol which seldom deals with the "
12785
"transmission of important data because it lacks flow control or any other "
12786
"method to ensure reliable delivery of the data. UDP is commonly used in such "
12787
"applications as audio and video streaming, where it is considerably faster "
12788
"than TCP due to the lack of error correction and flow control, and where the "
12789
"loss of a few packets is not generally catastrophic."
12790
msgstr ""
12791
12792
#: serverguide/C/network-config.xml:801(title)
12793
msgid "ICMP"
12794
msgstr ""
12795
12796
#: serverguide/C/network-config.xml:802(para)
12797
msgid ""
12798
"The Internet Control Messaging Protocol (ICMP) is an extension to the "
12799
"Internet Protocol (IP) as defined in the Request For Comments (RFC) #792 and "
12800
"supports network packets containing control, error, and informational "
12801
"messages. ICMP is used by such network applications as the "
12802
"<application>ping</application> utility, which can determine the "
12803
"availability of a network host or device. Examples of some error messages "
12804
"returned by ICMP which are useful to both network hosts and devices such as "
12805
"routers, include <emphasis>Destination Unreachable</emphasis> and "
12806
"<emphasis>Time Exceeded</emphasis>."
12807
msgstr ""
12808
12809
#: serverguide/C/network-config.xml:812(title)
12810
msgid "Daemons"
12811
msgstr ""
12812
12813
#: serverguide/C/network-config.xml:813(para)
12814
msgid ""
12815
"Daemons are special system applications which typically execute continuously "
12816
"in the background and await requests for the functions they provide from "
12817
"other applications. Many daemons are network-centric; that is, a large "
12818
"number of daemons executing in the background on an Ubuntu system may "
12819
"provide network-related functionality. Some examples of such network daemons "
12820
"include the <emphasis>Hyper Text Transport Protocol Daemon</emphasis> "
12821
"(httpd), which provides web server functionality; the <emphasis>Secure SHell "
12822
"Daemon</emphasis> (sshd), which provides secure remote login shell and file "
12823
"transfer capabilities; and the <emphasis>Internet Message Access Protocol "
12824
"Daemon</emphasis> (imapd), which provides E-Mail services."
12825
msgstr ""
12826
12827
#: serverguide/C/network-config.xml:828(para)
12828
msgid ""
12829
"There are man pages for <ulink "
12830
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/tcp.7.html\">TCP</uli"
12831
"nk> and <ulink "
12832
"url=\"http://manpages.ubuntu.com/manpages/lucid/man7/ip.7.html\">IP</ulink> "
12833
"that contain more useful information."
12834
msgstr ""
12835
12836
#: serverguide/C/network-config.xml:834(para)
12837
msgid ""
12838
"Also, see the <ulink "
12839
"url=\"http://www.redbooks.ibm.com/abstracts/gg243376.html\">TCP/IP Tutorial "
12840
"and Technical Overview</ulink> IBM Redbook."
12841
msgstr ""
12842
12843
#: serverguide/C/network-config.xml:840(para)
12844
msgid ""
12845
"Another resource is O'Reilly's <ulink "
12846
"url=\"http://oreilly.com/catalog/9780596002978/\">TCP/IP Network "
12847
"Administration</ulink>."
12848
msgstr ""
12849
12850
#: serverguide/C/network-config.xml:849(title)
12851
msgid "Dynamic Host Configuration Protocol (DHCP)"
12852
msgstr ""
12853
12854
#: serverguide/C/network-config.xml:850(para)
12855
msgid ""
12856
"The Dynamic Host Configuration Protocol (DHCP) is a network service that "
12857
"enables host computers to be automatically assigned settings from a server "
12858
"as opposed to manually configuring each network host. Computers configured "
12859
"to be DHCP clients have no control over the settings they receive from the "
12860
"DHCP server, and the configuration is transparent to the computer's user."
12861
msgstr ""
12862
12863
#: serverguide/C/network-config.xml:857(para)
12864
msgid ""
12865
"The most common settings provided by a DHCP server to DHCP clients include:"
12866
msgstr ""
12867
12868
#: serverguide/C/network-config.xml:862(para)
12869
msgid "IP-Address and Netmask"
12870
msgstr ""
12871
12872
#: serverguide/C/network-config.xml:865(para)
12873
msgid "DNS"
12874
msgstr "DNS"
12875
12876
#: serverguide/C/network-config.xml:868(para)
12877
msgid "WINS"
12878
msgstr ""
12879
12880
#: serverguide/C/network-config.xml:871(para)
12881
msgid ""
12882
"However, a DHCP server can also supply configuration properties such as:"
12883
msgstr ""
12884
12885
#: serverguide/C/network-config.xml:876(para)
12886
msgid "Host Name"
12887
msgstr ""
12888
12889
#: serverguide/C/network-config.xml:879(para)
12890
msgid "Domain Name"
12891
msgstr ""
12892
12893
#: serverguide/C/network-config.xml:882(para)
12894
msgid "Default Gateway"
12895
msgstr ""
12896
12897
#: serverguide/C/network-config.xml:885(para)
12898
msgid "Time Server"
12899
msgstr ""
12900
12901
#: serverguide/C/network-config.xml:888(para)
12902
msgid "Print Server"
12903
msgstr ""
12904
12905
#: serverguide/C/network-config.xml:891(para)
12906
msgid ""
12907
"The advantage of using DHCP is that changes to the network, for example a "
12908
"change in the address of the DNS server, need only be changed at the DHCP "
12909
"server, and all network hosts will be reconfigured the next time their DHCP "
12910
"clients poll the DHCP server. As an added advantage, it is also easier to "
12911
"integrate new computers into the network, as there is no need to check for "
12912
"the availability of an IP address. Conflicts in IP address allocation are "
12913
"also reduced."
12914
msgstr ""
12915
12916
#: serverguide/C/network-config.xml:899(para)
12917
msgid "A DHCP server can provide configuration settings using two methods:"
12918
msgstr ""
12919
12920
#: serverguide/C/network-config.xml:904(term)
12921
msgid "MAC Address"
12922
msgstr ""
12923
12924
#: serverguide/C/network-config.xml:906(para)
12925
msgid ""
12926
"This method entails using DHCP to identify the unique hardware address of "
12927
"each network card connected to the network and then continually supplying a "
12928
"constant configuration each time the DHCP client makes a request to the DHCP "
12929
"server using that network device."
12930
msgstr ""
12931
12932
#: serverguide/C/network-config.xml:915(term)
12933
msgid "Address Pool"
12934
msgstr ""
12935
12936
#: serverguide/C/network-config.xml:917(para)
12937
msgid ""
12938
"This method entails defining a pool (sometimes also called a range or scope) "
12939
"of IP addresses from which DHCP clients are supplied their configuration "
12940
"properties dynamically and on a \"first come, first served\" basis. When a "
12941
"DHCP client is no longer on the network for a specified period, the "
12942
"configuration is expired and released back to the address pool for use by "
12943
"other DHCP Clients."
12944
msgstr ""
12945
12946
#: serverguide/C/network-config.xml:928(para)
12947
msgid ""
12948
"Ubuntu is shipped with both DHCP server and client. The server is "
12949
"<application>dhcpd</application> (dynamic host configuration protocol "
12950
"daemon). The client provided with Ubuntu is "
12951
"<application>dhclient</application> and should be installed on all computers "
12952
"required to be automatically configured. Both programs are easy to install "
12953
"and configure and will be automatically started at system boot."
12954
msgstr ""
12955
12956
#: serverguide/C/network-config.xml:938(para)
12957
msgid ""
12958
"At a terminal prompt, enter the following command to install "
12959
"<application>dhcpd</application>:"
12960
msgstr ""
12961
12962
#: serverguide/C/network-config.xml:943(command)
12963
msgid "sudo apt-get install dhcp3-server"
12964
msgstr ""
12965
12966
#: serverguide/C/network-config.xml:945(para)
12967
msgid ""
12968
"You will probably need to change the default configuration by editing "
12969
"/etc/dhcp3/dhcpd.conf to suit your needs and particular configuration."
12970
msgstr ""
12971
12972
#: serverguide/C/network-config.xml:949(para)
12973
msgid ""
12974
"You also need to edit /etc/default/dhcp3-server to specify the interfaces "
12975
"dhcpd should listen to. By default it listens to eth0."
12976
msgstr ""
12977
12978
#: serverguide/C/network-config.xml:953(para)
12979
msgid ""
12980
"NOTE: dhcpd's messages are being sent to syslog. Look there for diagnostics "
12981
"messages."
12982
msgstr ""
12983
12984
#: serverguide/C/network-config.xml:960(para)
12985
msgid ""
12986
"The error message the installation ends with might be a little confusing, "
12987
"but the following steps will help you configure the service:"
12988
msgstr ""
12989
12990
#: serverguide/C/network-config.xml:964(para)
12991
msgid ""
12992
"Most commonly, what you want to do is assign an IP address randomly. This "
12993
"can be done with settings as follows:"
12994
msgstr ""
12995
12996
#: serverguide/C/network-config.xml:968(programlisting)
12997
#, no-wrap
12998
msgid ""
12999
"\n"
13000
"# Sample /etc/dhcpd.conf\n"
13001
"# (add your comments here) \n"
13002
"default-lease-time 600;\n"
13003
"max-lease-time 7200;\n"
13004
"option subnet-mask 255.255.255.0;\n"
13005
"option broadcast-address 192.168.1.255;\n"
13006
"option routers 192.168.1.254;\n"
13007
"option domain-name-servers 192.168.1.1, 192.168.1.2;\n"
13008
"option domain-name \"mydomain.example\";\n"
13009
"\n"
13010
"subnet 192.168.1.0 netmask 255.255.255.0 {\n"
13011
"range 192.168.1.10 192.168.1.100;\n"
13012
"range 192.168.1.150 192.168.1.200;\n"
13013
"} \n"
13014
msgstr ""
13015
13016
#: serverguide/C/network-config.xml:984(para)
13017
msgid ""
13018
"This will result in the DHCP server giving a client an IP address from the "
13019
"range 192.168.1.10-192.168.1.100 or 192.168.1.150-192.168.1.200. It will "
13020
"lease an IP address for 600 seconds if the client doesn't ask for a specific "
13021
"time frame. Otherwise the maximum (allowed) lease will be 7200 seconds. The "
13022
"server will also \"advise\" the client that it should use 255.255.255.0 as "
13023
"its subnet mask, 192.168.1.255 as its broadcast address, 192.168.1.254 as "
13024
"the router/gateway and 192.168.1.1 and 192.168.1.2 as its DNS servers."
13025
msgstr ""
13026
13027
#: serverguide/C/network-config.xml:993(para)
13028
msgid ""
13029
"If you need to specify a WINS server for your Windows clients, you will need "
13030
"to include the netbios-name-servers option, e.g."
13031
msgstr ""
13032
13033
#: serverguide/C/network-config.xml:997(programlisting)
13034
#, no-wrap
13035
msgid ""
13036
"\n"
13037
"option netbios-name-servers 192.168.1.1; \n"
13038
msgstr ""
13039
13040
#: serverguide/C/network-config.xml:1000(para)
13041
msgid ""
13042
"Dhcpd configuration settings are taken from the DHCP mini-HOWTO, which can "
13043
"be found <ulink "
13044
"url=\"http://www.tldp.org/HOWTO/DHCP/index.html\">here</ulink>."
13045
msgstr ""
13046
13047
#: serverguide/C/network-config.xml:1010(para)
13048
msgid ""
13049
"The <ulink url=\"https://help.ubuntu.com/community/dhcp3-server\">dhcp3-"
13050
"server Ubuntu Wiki</ulink> page has more information."
13051
msgstr ""
13052
13053
#: serverguide/C/network-config.xml:1015(para)
13054
msgid ""
13055
"For more <filename>/etc/dhcp3/dchpd.conf</filename> options see the <ulink "
13056
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/dhcpd.conf.5.html\">d"
13057
"hcpd.conf man page</ulink>."
13058
msgstr ""
13059
13060
#: serverguide/C/network-config.xml:1021(para)
13061
msgid ""
13062
"Also see the <ulink url=\"http://www.dhcp-handbook.com/dhcp_faq.html\">DHCP "
13063
"FAQ</ulink>"
13064
msgstr ""
13065
13066
#: serverguide/C/network-config.xml:1031(title)
13067
msgid "Time Synchronisation with NTP"
13068
msgstr ""
13069
13070
#: serverguide/C/network-config.xml:1032(para)
13071
msgid ""
13072
"This page describes methods for keeping your computer's time accurate. This "
13073
"is useful for servers, but is not necessary (or desirable) for desktop "
13074
"machines."
13075
msgstr ""
13076
13077
#: serverguide/C/network-config.xml:1035(para)
13078
msgid ""
13079
"NTP is a TCP/IP protocol for synchronising time over a network. Basically a "
13080
"client requests the current time from a server, and uses it to set its own "
13081
"clock."
13082
msgstr ""
13083
13084
#: serverguide/C/network-config.xml:1038(para)
13085
msgid ""
13086
"Behind this simple description, there is a lot of complexity - there are "
13087
"tiers of NTP servers, with the tier one NTP servers connected to atomic "
13088
"clocks (often via GPS), and tier two and three servers spreading the load of "
13089
"actually handling requests across the Internet. Also the client software is "
13090
"a lot more complex than you might think - it has to factor out communication "
13091
"delays, and adjust the time in a way that does not upset all the other "
13092
"processes that run on the server. But luckily all that complexity is hidden "
13093
"from you!"
13094
msgstr ""
13095
13096
#: serverguide/C/network-config.xml:1041(para)
13097
msgid ""
13098
"Ubuntu has two ways of automatically setting your time: ntpdate and ntpd."
13099
msgstr ""
13100
13101
#: serverguide/C/network-config.xml:1046(title)
13102
msgid "ntpdate"
13103
msgstr ""
13104
13105
#: serverguide/C/network-config.xml:1047(para)
13106
msgid ""
13107
"Ubuntu comes with ntpdate as standard, and will run it once at boot time to "
13108
"set up your time according to Ubuntu's NTP server. However, a server's clock "
13109
"is likely to drift considerably between reboots, so it makes sense to "
13110
"correct the time occasionally. The easiest way to do this is to get cron to "
13111
"run ntpdate every day. With your favorite editor, as root, create a file "
13112
"<code>/etc/cron.daily/ntpdate</code> containing:"
13113
msgstr ""
13114
13115
#: serverguide/C/network-config.xml:1052(screen)
13116
#, no-wrap
13117
msgid "ntpdate ntp.ubuntu.com\n"
13118
msgstr ""
13119
13120
#: serverguide/C/network-config.xml:1054(para)
13121
msgid ""
13122
"The file <code>/etc/cron.daily/ntpdate</code> must also be executable."
13123
msgstr ""
13124
13125
#: serverguide/C/network-config.xml:1057(screen)
13126
#, no-wrap
13127
msgid "sudo chmod 755 /etc/cron.daily/ntpdate\n"
13128
msgstr ""
13129
13130
#: serverguide/C/network-config.xml:1061(title)
13131
msgid "ntpd"
13132
msgstr ""
13133
13134
#: serverguide/C/network-config.xml:1062(para)
13135
msgid ""
13136
"ntpdate is a bit of a blunt instrument - it can only adjust the time once a "
13137
"day, in one big correction. The ntp daemon ntpd is far more subtle. It "
13138
"calculates the drift of your system clock and continuously adjusts it, so "
13139
"there are no large corrections that could lead to inconsistent logs for "
13140
"instance. The cost is a little processing power and memory, but for a modern "
13141
"server this is negligible."
13142
msgstr ""
13143
13144
#: serverguide/C/network-config.xml:1065(para)
13145
msgid "To set up ntpd:"
13146
msgstr ""
13147
13148
#: serverguide/C/network-config.xml:1066(screen)
13149
#, no-wrap
13150
msgid "sudo apt-get install ntp\n"
13151
msgstr ""
13152
13153
#: serverguide/C/network-config.xml:1071(title)
13154
msgid "Changing Time Servers"
13155
msgstr ""
13156
13157
#: serverguide/C/network-config.xml:1072(para)
13158
msgid ""
13159
"In both cases above, your system will use Ubuntu's NTP server at "
13160
"<code>ntp.ubuntu.com</code> by default. This is OK, but you might want to "
13161
"use several servers to increase accuracy and resilience, and you may want to "
13162
"use time servers that are geographically closer to you. to do this for "
13163
"ntpdate, change the contents of <code>/etc/cron.daily/ntpdate</code> to:"
13164
msgstr ""
13165
13166
#: serverguide/C/network-config.xml:1079(screen)
13167
#, no-wrap
13168
msgid "ntpdate ntp.ubuntu.com pool.ntp.org \n"
13169
msgstr ""
13170
13171
#: serverguide/C/network-config.xml:1081(para)
13172
msgid ""
13173
"And for ntpd edit <code>/etc/ntp.conf</code> to include additional server "
13174
"lines:"
13175
msgstr ""
13176
13177
#: serverguide/C/network-config.xml:1086(screen)
13178
#, no-wrap
13179
msgid ""
13180
"server ntp.ubuntu.com\n"
13181
"server pool.ntp.org\n"
13182
msgstr ""
13183
13184
#: serverguide/C/network-config.xml:1089(para)
13185
msgid ""
13186
"You may notice <code>pool.ntp.org</code> in the examples above. This is a "
13187
"really good idea which uses round-robin DNS to return an NTP server from a "
13188
"pool, spreading the load between several different servers. Even better, "
13189
"they have pools for different regions - for instance, if you are in New "
13190
"Zealand, so you could use <code>nz.pool.ntp.org</code> instead of "
13191
"<code>pool.ntp.org</code> . Look at <ulink "
13192
"url=\"http://www.pool.ntp.org/\">http://www.pool.ntp.org/</ulink> for more "
13193
"details."
13194
msgstr ""
13195
13196
#: serverguide/C/network-config.xml:1100(para)
13197
msgid ""
13198
"You can also Google for NTP servers in your region, and add these to your "
13199
"configuration. To test that a server works, just type <code>sudo ntpdate "
13200
"ntp.server.name</code> and see what happens."
13201
msgstr ""
13202
13203
#: serverguide/C/network-config.xml:1111(para)
13204
msgid ""
13205
"See the <ulink url=\"https://help.ubuntu.com/community/UbuntuTime\">Ubuntu "
13206
"Time</ulink> wiki page for more information."
13207
msgstr ""
13208
13209
#: serverguide/C/network-config.xml:1117(ulink)
13210
msgid "NTP Support"
13211
msgstr ""
13212
13213
#: serverguide/C/network-config.xml:1122(ulink)
13214
msgid "The NTP FAQ and HOWTO"
13215
msgstr ""
13216
13217
#: serverguide/C/network-auth.xml:13(title)
13218
msgid "Network Authentication"
13219
msgstr ""
13220
13221
#: serverguide/C/network-auth.xml:15(para)
13222
msgid "This section explains various Network Authentication protocols."
13223
msgstr ""
13224
13225
#: serverguide/C/network-auth.xml:19(title)
13226
msgid "OpenLDAP Server"
13227
msgstr ""
13228
13229
#: serverguide/C/network-auth.xml:20(para)
13230
msgid ""
13231
"LDAP is an acronym for Lightweight Directory Access Protocol, it is a "
13232
"simplified version of the X.500 protocol. The directory setup in this "
13233
"section will be used for authentication. Nevertheless, LDAP can be used in "
13234
"numerous ways: authentication, shared directory (for mail clients), address "
13235
"book, etc."
13236
msgstr ""
13237
13238
#: serverguide/C/network-auth.xml:28(para)
13239
msgid ""
13240
"To describe LDAP quickly, all information is stored in a tree structure. "
13241
"With <application>OpenLDAP</application> you have freedom to determine the "
13242
"directory arborescence (the Directory Information Tree: the DIT) yourself. "
13243
"We will begin with a basic tree containing two nodes below the root:"
13244
msgstr ""
13245
13246
#: serverguide/C/network-auth.xml:37(para)
13247
msgid "\"People\" node where your users will be stored"
13248
msgstr ""
13249
13250
#: serverguide/C/network-auth.xml:40(para)
13251
msgid "\"Groups\" node where your groups will be stored"
13252
msgstr ""
13253
13254
#: serverguide/C/network-auth.xml:44(para)
13255
msgid ""
13256
"Before beginning, you should determine what the root of your LDAP directory "
13257
"will be. By default, your tree will be determined by your Fully Qualified "
13258
"Domain Name (FQDN). If your domain is example.com (which we will use in this "
13259
"example), your root node will be dc=example,dc=com."
13260
msgstr ""
13261
13262
#: serverguide/C/network-auth.xml:54(para)
13263
msgid ""
13264
"First, install the <application>OpenLDAP</application> server daemon "
13265
"<application>slapd</application> and <application>ldap-utils</application>, "
13266
"a package containing LDAP management utilities:"
13267
msgstr ""
13268
13269
#: serverguide/C/network-auth.xml:60(command)
13270
msgid "sudo apt-get install slapd ldap-utils"
13271
msgstr ""
13272
13273
#: serverguide/C/network-auth.xml:63(para)
13274
msgid ""
13275
"By default <application>slapd</application> is configured with minimal "
13276
"options needed to run the <application>slapd</application> daemon."
13277
msgstr ""
13278
13279
#: serverguide/C/network-auth.xml:68(para)
13280
msgid ""
13281
"The configuration example in the following sections will match the domain "
13282
"name of the server. For example, if the machine's Fully Qualified Domain "
13283
"Name (FQDN) is ldap.example.com, the default suffix will be "
13284
"<emphasis>dc=example,dc=com</emphasis>."
13285
msgstr ""
13286
13287
#: serverguide/C/network-auth.xml:76(title)
13288
msgid "Populating LDAP"
13289
msgstr ""
13290
13291
#: serverguide/C/network-auth.xml:78(para)
13292
msgid ""
13293
"<application>OpenLDAP</application> uses a separate directory which contains "
13294
"the <emphasis>cn=config</emphasis> Directory Information Tree (DIT). The "
13295
"<emphasis>cn=config</emphasis> DIT is used to dynamically configure the "
13296
"<application>slapd</application> daemon, allowing the modification of schema "
13297
"definitions, indexes, ACLs, etc without stopping the service."
13298
msgstr ""
13299
13300
#: serverguide/C/network-auth.xml:86(para)
13301
msgid ""
13302
"The backend <emphasis>cn=config</emphasis> directory has only a minimal "
13303
"configuration and will need additional configuration options in order to "
13304
"populate the frontend directory. The frontend will be populated with a "
13305
"\"classical\" scheme that will be compatible with address book applications "
13306
"and with Unix Posix accounts. Posix accounts will allow authentication to "
13307
"various applications, such as web applications, email Mail Transfer Agent "
13308
"(MTA) applications, etc."
13309
msgstr ""
13310
13311
#: serverguide/C/network-auth.xml:95(para)
13312
msgid ""
13313
"For external applications to authenticate using LDAP they will each need to "
13314
"be specifically configured to do so. Refer to the individual application "
13315
"documentation for details."
13316
msgstr ""
13317
13318
#: serverguide/C/network-auth.xml:103(para)
13319
msgid ""
13320
"Remember to change <emphasis>dc=example,dc=com</emphasis> in the following "
13321
"examples to match your LDAP configuration."
13322
msgstr ""
13323
13324
#: serverguide/C/network-auth.xml:108(para)
13325
msgid ""
13326
"First, some additional schema files need to be loaded. In a terminal enter:"
13327
msgstr ""
13328
13329
#: serverguide/C/network-auth.xml:113(command) serverguide/C/network-auth.xml:702(command)
13330
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif"
13331
msgstr ""
13332
13333
#: serverguide/C/network-auth.xml:114(command) serverguide/C/network-auth.xml:703(command)
13334
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif"
13335
msgstr ""
13336
13337
#: serverguide/C/network-auth.xml:115(command) serverguide/C/network-auth.xml:704(command)
13338
msgid ""
13339
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif"
13340
msgstr ""
13341
13342
#: serverguide/C/network-auth.xml:118(para)
13343
msgid ""
13344
"Next, copy the following example LDIF file, naming it "
13345
"<filename>backend.example.com.ldif</filename>, somewhere on your system:"
13346
msgstr ""
13347
13348
#: serverguide/C/network-auth.xml:123(programlisting)
13349
#, no-wrap
13350
msgid ""
13351
"\n"
13352
"# Load dynamic backend modules\n"
13353
"dn: cn=module,cn=config\n"
13354
"objectClass: olcModuleList\n"
13355
"cn: module\n"
13356
"olcModulepath: /usr/lib/ldap\n"
13357
"olcModuleload: back_hdb\n"
13358
"\n"
13359
"# Database settings\n"
13360
"dn: olcDatabase=hdb,cn=config\n"
13361
"objectClass: olcDatabaseConfig\n"
13362
"objectClass: olcHdbConfig\n"
13363
"olcDatabase: {1}hdb\n"
13364
"olcSuffix: dc=example,dc=com\n"
13365
"olcDbDirectory: /var/lib/ldap\n"
13366
"olcRootDN: cn=admin,dc=example,dc=com\n"
13367
"olcRootPW: secret\n"
13368
"olcDbConfig: set_cachesize 0 2097152 0\n"
13369
"olcDbConfig: set_lk_max_objects 1500\n"
13370
"olcDbConfig: set_lk_max_locks 1500\n"
13371
"olcDbConfig: set_lk_max_lockers 1500\n"
13372
"olcDbIndex: objectClass eq\n"
13373
"olcLastMod: TRUE\n"
13374
"olcDbCheckpoint: 512 30\n"
13375
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
13376
"by anonymous auth by self write by * none\n"
13377
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
13378
"olcAccess: to dn.base=\"\" by * read\n"
13379
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13380
"\n"
13381
msgstr ""
13382
13383
#: serverguide/C/network-auth.xml:155(para)
13384
msgid ""
13385
"Change <emphasis>olcRootPW: secret</emphasis> to a password of your choosing."
13386
msgstr ""
13387
13388
#: serverguide/C/network-auth.xml:160(para)
13389
msgid "Now add the LDIF to the directory:"
13390
msgstr ""
13391
13392
#: serverguide/C/network-auth.xml:165(command) serverguide/C/network-auth.xml:746(command)
13393
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif"
13394
msgstr ""
13395
13396
#: serverguide/C/network-auth.xml:168(para)
13397
msgid ""
13398
"The frontend directory is now ready to be populated. Create a "
13399
"<filename>frontend.example.com.ldif</filename> with the following contents:"
13400
msgstr ""
13401
13402
#: serverguide/C/network-auth.xml:173(programlisting)
13403
#, no-wrap
13404
msgid ""
13405
"\n"
13406
"# Create top-level object in domain\n"
13407
"dn: dc=example,dc=com\n"
13408
"objectClass: top\n"
13409
"objectClass: dcObject\n"
13410
"objectclass: organization\n"
13411
"o: Example Organization\n"
13412
"dc: Example\n"
13413
"description: LDAP Example \n"
13414
"\n"
13415
"# Admin user.\n"
13416
"dn: cn=admin,dc=example,dc=com\n"
13417
"objectClass: simpleSecurityObject\n"
13418
"objectClass: organizationalRole\n"
13419
"cn: admin\n"
13420
"description: LDAP administrator\n"
13421
"userPassword: secret\n"
13422
"\n"
13423
"dn: ou=people,dc=example,dc=com\n"
13424
"objectClass: organizationalUnit\n"
13425
"ou: people\n"
13426
"\n"
13427
"dn: ou=groups,dc=example,dc=com\n"
13428
"objectClass: organizationalUnit\n"
13429
"ou: groups\n"
13430
"\n"
13431
"dn: uid=john,ou=people,dc=example,dc=com\n"
13432
"objectClass: inetOrgPerson\n"
13433
"objectClass: posixAccount\n"
13434
"objectClass: shadowAccount\n"
13435
"uid: john\n"
13436
"sn: Doe\n"
13437
"givenName: John\n"
13438
"cn: John Doe\n"
13439
"displayName: John Doe\n"
13440
"uidNumber: 1000\n"
13441
"gidNumber: 10000\n"
13442
"userPassword: password\n"
13443
"gecos: John Doe\n"
13444
"loginShell: /bin/bash\n"
13445
"homeDirectory: /home/john\n"
13446
"shadowExpire: -1\n"
13447
"shadowFlag: 0\n"
13448
"shadowWarning: 7\n"
13449
"shadowMin: 8\n"
13450
"shadowMax: 999999\n"
13451
"shadowLastChange: 10877\n"
13452
"mail: john.doe@example.com\n"
13453
"postalCode: 31000\n"
13454
"l: Toulouse\n"
13455
"o: Example\n"
13456
"mobile: +33 (0)6 xx xx xx xx\n"
13457
"homePhone: +33 (0)5 xx xx xx xx\n"
13458
"title: System Administrator\n"
13459
"postalAddress: \n"
13460
"initials: JD\n"
13461
"\n"
13462
"dn: cn=example,ou=groups,dc=example,dc=com\n"
13463
"objectClass: posixGroup\n"
13464
"cn: example\n"
13465
"gidNumber: 10000\n"
13466
msgstr ""
13467
13468
#: serverguide/C/network-auth.xml:236(para)
13469
msgid ""
13470
"In this example the directory structure, a user, and a group have been "
13471
"setup. In other examples you might see the <emphasis>objectClass: "
13472
"top</emphasis> added in every entry, but that is the default behaviour so "
13473
"you do not have to add it explicitly."
13474
msgstr ""
13475
13476
#: serverguide/C/network-auth.xml:243(para)
13477
msgid "Add the entries to the LDAP directory:"
13478
msgstr ""
13479
13480
#: serverguide/C/network-auth.xml:249(command) serverguide/C/network-auth.xml:757(command)
13481
msgid ""
13482
"sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif"
13483
msgstr ""
13484
13485
#: serverguide/C/network-auth.xml:252(para)
13486
msgid ""
13487
"We can check that the content has been correctly added with the "
13488
"<application>ldapsearch</application> utility. Execute a search of the LDAP "
13489
"directory:"
13490
msgstr ""
13491
13492
#: serverguide/C/network-auth.xml:258(command)
13493
msgid "ldapsearch -xLLL -b \"dc=example,dc=com\" uid=john sn givenName cn"
13494
msgstr ""
13495
13496
#: serverguide/C/network-auth.xml:259(computeroutput)
13497
#, no-wrap
13498
msgid ""
13499
"\n"
13500
"dn: uid=john,ou=people,dc=example,dc=com\n"
13501
"cn: John Doe\n"
13502
"sn: Doe\n"
13503
"givenName: John\n"
13504
msgstr ""
13505
13506
#: serverguide/C/network-auth.xml:267(para)
13507
msgid "Just a quick explanation:"
13508
msgstr ""
13509
13510
#: serverguide/C/network-auth.xml:273(para)
13511
msgid ""
13512
"<emphasis>-x:</emphasis> will not use SASL authentication method, which is "
13513
"the default."
13514
msgstr ""
13515
13516
#: serverguide/C/network-auth.xml:279(para)
13517
msgid "<emphasis>-LLL:</emphasis> disable printing LDIF schema information."
13518
msgstr ""
13519
13520
#: serverguide/C/network-auth.xml:287(title)
13521
msgid "Further Configuration"
13522
msgstr ""
13523
13524
#: serverguide/C/network-auth.xml:290(para)
13525
msgid ""
13526
"The <emphasis>cn=config</emphasis> tree can be manipulated using the "
13527
"utilities in the <application>ldap-utils</application> package. For example:"
13528
msgstr ""
13529
13530
#: serverguide/C/network-auth.xml:298(para)
13531
msgid ""
13532
"Use <application>ldapsearch</application> to view the tree, entering the "
13533
"admin password set during installation or reconfiguration:"
13534
msgstr ""
13535
13536
#: serverguide/C/network-auth.xml:304(command)
13537
msgid "sudo ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn"
13538
msgstr ""
13539
13540
#: serverguide/C/network-auth.xml:308(computeroutput)
13541
#, no-wrap
13542
msgid ""
13543
"\n"
13544
"SASL/EXTERNAL authentication started\n"
13545
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13546
"SASL SSF: 0\n"
13547
"dn: cn=config\n"
13548
"\n"
13549
"dn: cn=module{0},cn=config\n"
13550
"\n"
13551
"dn: cn=schema,cn=config\n"
13552
"\n"
13553
"dn: cn={0}core,cn=schema,cn=config\n"
13554
"\n"
13555
"dn: cn={1}cosine,cn=schema,cn=config\n"
13556
"\n"
13557
"dn: cn={2}nis,cn=schema,cn=config\n"
13558
"\n"
13559
"dn: cn={3}inetorgperson,cn=schema,cn=config\n"
13560
"\n"
13561
"dn: olcDatabase={-1}frontend,cn=config\n"
13562
"\n"
13563
"dn: olcDatabase={0}config,cn=config\n"
13564
"\n"
13565
"dn: olcDatabase={1}hdb,cn=config\n"
13566
msgstr ""
13567
13568
#: serverguide/C/network-auth.xml:334(para)
13569
msgid ""
13570
"The output above is the current configuration options for the "
13571
"<emphasis>cn=config</emphasis> backend database. Your output may be vary."
13572
msgstr ""
13573
13574
#: serverguide/C/network-auth.xml:342(para)
13575
msgid ""
13576
"As an example of modifying the <emphasis>cn=config</emphasis> tree, add "
13577
"another attribute to the index list using "
13578
"<application>ldapmodify</application>:"
13579
msgstr ""
13580
13581
#: serverguide/C/network-auth.xml:348(command) serverguide/C/network-auth.xml:984(command) serverguide/C/network-auth.xml:1155(command) serverguide/C/network-auth.xml:1191(command)
13582
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:///"
13583
msgstr ""
13584
13585
#: serverguide/C/network-auth.xml:356(userinput)
13586
#, no-wrap
13587
msgid ""
13588
"dn: olcDatabase={1}hdb,cn=config\n"
13589
"add: olcDbIndex\n"
13590
"olcDbIndex: uidNumber eq"
13591
msgstr ""
13592
13593
#: serverguide/C/network-auth.xml:352(computeroutput)
13594
#, no-wrap
13595
msgid ""
13596
"\n"
13597
"SASL/EXTERNAL authentication started\n"
13598
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13599
"SASL SSF: 0\n"
13600
"<placeholder-1/>\n"
13601
"\n"
13602
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13603
msgstr ""
13604
13605
#: serverguide/C/network-auth.xml:364(para)
13606
msgid ""
13607
"Once the modification has completed, press <emphasis>Ctrl+D</emphasis> to "
13608
"exit the utility."
13609
msgstr ""
13610
13611
#: serverguide/C/network-auth.xml:371(para)
13612
msgid ""
13613
"<application>ldapmodify</application> can also read the changes from a file. "
13614
"Copy and paste the following into a file named "
13615
"<filename>uid_index.ldif</filename>:"
13616
msgstr ""
13617
13618
#: serverguide/C/network-auth.xml:376(programlisting)
13619
#, no-wrap
13620
msgid ""
13621
"\n"
13622
"dn: olcDatabase={1}hdb,cn=config\n"
13623
"add: olcDbIndex\n"
13624
"olcDbIndex: uid eq,pres,sub\n"
13625
msgstr ""
13626
13627
#: serverguide/C/network-auth.xml:382(para)
13628
msgid "Then execute <application>ldapmodify</application>:"
13629
msgstr ""
13630
13631
#: serverguide/C/network-auth.xml:387(command)
13632
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f uid_index.ldif"
13633
msgstr ""
13634
13635
#: serverguide/C/network-auth.xml:391(computeroutput)
13636
#, no-wrap
13637
msgid ""
13638
"\n"
13639
"SASL/EXTERNAL authentication started\n"
13640
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
13641
"SASL SSF: 0\n"
13642
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
13643
msgstr ""
13644
13645
#: serverguide/C/network-auth.xml:399(para)
13646
msgid "The file method is very useful for large changes."
13647
msgstr ""
13648
13649
#: serverguide/C/network-auth.xml:406(para)
13650
msgid ""
13651
"Adding additional <emphasis>schemas</emphasis> to "
13652
"<application>slapd</application> requires the schema to be converted to LDIF "
13653
"format. The <filename role=\"directory\">/etc/ldap/schema</filename> "
13654
"directory contains some schema files already converted to LDIF format as "
13655
"demonstrated in the previous section. Fortunately, the "
13656
"<application>slapd</application> program can be used to automate the "
13657
"conversion. The following example will add the "
13658
"<emphasis>dyngoup.schema</emphasis>:"
13659
msgstr ""
13660
13661
#: serverguide/C/network-auth.xml:416(para)
13662
msgid ""
13663
"First, create a conversion <filename>schema_convert.conf</filename> file "
13664
"containing the following lines:"
13665
msgstr ""
13666
13667
#: serverguide/C/network-auth.xml:421(programlisting)
13668
#, no-wrap
13669
msgid ""
13670
"\n"
13671
"include /etc/ldap/schema/core.schema\n"
13672
"include /etc/ldap/schema/collective.schema\n"
13673
"include /etc/ldap/schema/corba.schema\n"
13674
"include /etc/ldap/schema/cosine.schema\n"
13675
"include /etc/ldap/schema/duaconf.schema\n"
13676
"include /etc/ldap/schema/dyngroup.schema\n"
13677
"include /etc/ldap/schema/inetorgperson.schema\n"
13678
"include /etc/ldap/schema/java.schema\n"
13679
"include /etc/ldap/schema/misc.schema\n"
13680
"include /etc/ldap/schema/nis.schema\n"
13681
"include /etc/ldap/schema/openldap.schema\n"
13682
"include /etc/ldap/schema/ppolicy.schema\n"
13683
msgstr ""
13684
13685
#: serverguide/C/network-auth.xml:439(para) serverguide/C/network-auth.xml:1655(para)
13686
msgid "Next, create a temporary directory to hold the output:"
13687
msgstr ""
13688
13689
#: serverguide/C/network-auth.xml:444(command) serverguide/C/network-auth.xml:1660(command) serverguide/C/network-auth.xml:2695(command)
13690
msgid "mkdir /tmp/ldif_output"
13691
msgstr ""
13692
13693
#: serverguide/C/network-auth.xml:450(para)
13694
msgid ""
13695
"Now using <application>slapcat</application> convert the schema files to "
13696
"LDIF:"
13697
msgstr ""
13698
13699
#: serverguide/C/network-auth.xml:455(command)
13700
msgid ""
13701
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
13702
"\"cn={5}dyngroup,cn=schema,cn=config\" > /tmp/cn=dyngroup.ldif"
13703
msgstr ""
13704
13705
#: serverguide/C/network-auth.xml:458(para)
13706
msgid ""
13707
"Adjust the configuration file name and temporary directory names if yours "
13708
"are different. Also, it may be worthwhile to keep the "
13709
"<filename>ldif_output</filename> directory around in case you want to add "
13710
"additional schemas in the future."
13711
msgstr ""
13712
13713
#: serverguide/C/network-auth.xml:467(para)
13714
msgid ""
13715
"Edit the <filename>/tmp/cn\\=dyngroup.ldif</filename> file, changing the "
13716
"following attributes:"
13717
msgstr ""
13718
13719
#: serverguide/C/network-auth.xml:471(programlisting)
13720
#, no-wrap
13721
msgid ""
13722
"\n"
13723
"dn: cn=dyngroup,cn=schema,cn=config\n"
13724
"...\n"
13725
"cn: dyngroup\n"
13726
msgstr ""
13727
13728
#: serverguide/C/network-auth.xml:477(para) serverguide/C/network-auth.xml:1691(para)
13729
msgid "And remove the following lines from the bottom of the file:"
13730
msgstr ""
13731
13732
#: serverguide/C/network-auth.xml:481(programlisting)
13733
#, no-wrap
13734
msgid ""
13735
"\n"
13736
"structuralObjectClass: olcSchemaConfig\n"
13737
"entryUUID: 10dae0ea-0760-102d-80d3-f9366b7f7757\n"
13738
"creatorsName: cn=config\n"
13739
"createTimestamp: 20080826021140Z\n"
13740
"entryCSN: 20080826021140.791425Z#000000#000#000000\n"
13741
"modifiersName: cn=config\n"
13742
"modifyTimestamp: 20080826021140Z\n"
13743
msgstr ""
13744
13745
#: serverguide/C/network-auth.xml:492(para) serverguide/C/network-auth.xml:1706(para) serverguide/C/network-auth.xml:2741(para)
13746
msgid ""
13747
"The attribute values will vary, just be sure the attributes are removed."
13748
msgstr ""
13749
13750
#: serverguide/C/network-auth.xml:500(para) serverguide/C/network-auth.xml:1714(para)
13751
msgid ""
13752
"Finally, using the <application>ldapadd</application> utility, add the new "
13753
"schema to the directory:"
13754
msgstr ""
13755
13756
#: serverguide/C/network-auth.xml:506(command)
13757
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /tmp/cn\\=dyngroup.ldif"
13758
msgstr ""
13759
13760
#: serverguide/C/network-auth.xml:512(para)
13761
msgid ""
13762
"There should now be a <emphasis>dn: "
13763
"cn={4}dyngroup,cn=schema,cn=config</emphasis> entry in the cn=config tree."
13764
msgstr ""
13765
13766
#: serverguide/C/network-auth.xml:522(title)
13767
msgid "LDAP Replication"
13768
msgstr ""
13769
13770
#: serverguide/C/network-auth.xml:524(para)
13771
msgid ""
13772
"LDAP often quickly becomes a highly critical service to the network. "
13773
"Multiple systems will come to depend on LDAP for authentication, "
13774
"authorization, configuration, etc. It is a good idea to setup a redundant "
13775
"system through replication."
13776
msgstr ""
13777
13778
#: serverguide/C/network-auth.xml:530(para)
13779
msgid ""
13780
"Replication is achieved using the <emphasis>Syncrepl</emphasis> engine. "
13781
"Syncrepl allows the changes to be synced using a "
13782
"<emphasis>consumer</emphasis>, <emphasis>provider</emphasis> model. A "
13783
"provider sends directory changes to consumers."
13784
msgstr ""
13785
13786
#: serverguide/C/network-auth.xml:537(title)
13787
msgid "Provider Configuration"
13788
msgstr ""
13789
13790
#: serverguide/C/network-auth.xml:539(para)
13791
msgid ""
13792
"The following is an example of a <emphasis>Single-Master</emphasis> "
13793
"configuration. In this configuration one OpenLDAP server is configured as a "
13794
"<emphasis>provider</emphasis> and another as a <emphasis>consumer</emphasis>."
13795
msgstr ""
13796
13797
#: serverguide/C/network-auth.xml:547(para)
13798
msgid ""
13799
"First, configure the provider server. Copy the following to a file named "
13800
"<filename>provider_sync.ldif</filename>:"
13801
msgstr ""
13802
13803
#: serverguide/C/network-auth.xml:552(programlisting)
13804
#, no-wrap
13805
msgid ""
13806
"\n"
13807
"# Add indexes to the frontend db.\n"
13808
"dn: olcDatabase={1}hdb,cn=config\n"
13809
"changetype: modify\n"
13810
"add: olcDbIndex\n"
13811
"olcDbIndex: entryCSN eq\n"
13812
"-\n"
13813
"add: olcDbIndex\n"
13814
"olcDbIndex: entryUUID eq\n"
13815
"\n"
13816
"#Load the syncprov and accesslog modules.\n"
13817
"dn: cn=module{0},cn=config\n"
13818
"changetype: modify\n"
13819
"add: olcModuleLoad\n"
13820
"olcModuleLoad: syncprov\n"
13821
"-\n"
13822
"add: olcModuleLoad\n"
13823
"olcModuleLoad: accesslog\n"
13824
"\n"
13825
"# Accesslog database definitions\n"
13826
"dn: olcDatabase={2}hdb,cn=config\n"
13827
"objectClass: olcDatabaseConfig\n"
13828
"objectClass: olcHdbConfig\n"
13829
"olcDatabase: {2}hdb\n"
13830
"olcDbDirectory: /var/lib/ldap/accesslog\n"
13831
"olcSuffix: cn=accesslog\n"
13832
"olcRootDN: cn=admin,dc=example,dc=com\n"
13833
"olcDbIndex: default eq\n"
13834
"olcDbIndex: entryCSN,objectClass,reqEnd,reqResult,reqStart\n"
13835
"\n"
13836
"# Accesslog db syncprov.\n"
13837
"dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config\n"
13838
"changetype: add\n"
13839
"objectClass: olcOverlayConfig\n"
13840
"objectClass: olcSyncProvConfig\n"
13841
"olcOverlay: syncprov\n"
13842
"olcSpNoPresent: TRUE\n"
13843
"olcSpReloadHint: TRUE\n"
13844
"\n"
13845
"# syncrepl Provider for primary db\n"
13846
"dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config\n"
13847
"changetype: add\n"
13848
"objectClass: olcOverlayConfig\n"
13849
"objectClass: olcSyncProvConfig\n"
13850
"olcOverlay: syncprov\n"
13851
"olcSpNoPresent: TRUE\n"
13852
"\n"
13853
"# accesslog overlay definitions for primary db\n"
13854
"dn: olcOverlay=accesslog,olcDatabase={1}hdb,cn=config\n"
13855
"objectClass: olcOverlayConfig\n"
13856
"objectClass: olcAccessLogConfig\n"
13857
"olcOverlay: accesslog\n"
13858
"olcAccessLogDB: cn=accesslog\n"
13859
"olcAccessLogOps: writes\n"
13860
"olcAccessLogSuccess: TRUE\n"
13861
"# scan the accesslog DB every day, and purge entries older than 7 days\n"
13862
"olcAccessLogPurge: 07+00:00 01+00:00\n"
13863
msgstr ""
13864
13865
#: serverguide/C/network-auth.xml:614(para)
13866
msgid ""
13867
"The <application>AppArmor</application> profile for "
13868
"<application>slapd</application> will need to be adjusted for the accesslog "
13869
"database location. Edit <filename>/etc/apparmor.d/usr.sbin.slapd</filename> "
13870
"adding:"
13871
msgstr ""
13872
13873
#: serverguide/C/network-auth.xml:619(programlisting)
13874
#, no-wrap
13875
msgid ""
13876
"\n"
13877
" /var/lib/ldap/accesslog/ r,\n"
13878
" /var/lib/ldap/accesslog/** rwk,\n"
13879
msgstr ""
13880
13881
#: serverguide/C/network-auth.xml:624(para)
13882
msgid ""
13883
"Then create the directory, reload the <application>apparmor</application> "
13884
"profile, and copy the <filename>DB_CONFIG</filename> file:"
13885
msgstr ""
13886
13887
#: serverguide/C/network-auth.xml:630(command)
13888
msgid "sudo -u openldap mkdir /var/lib/ldap/accesslog"
13889
msgstr ""
13890
13891
#: serverguide/C/network-auth.xml:631(command)
13892
msgid "sudo -u openldap cp /var/lib/ldap/DB_CONFIG /var/lib/ldap/accesslog/"
13893
msgstr ""
13894
13895
#: serverguide/C/network-auth.xml:636(para)
13896
msgid ""
13897
"Using the <emphasis>-u openldap</emphasis> option with the "
13898
"<application>sudo</application> commands above removes the need to adjust "
13899
"permissions for the new directory later."
13900
msgstr ""
13901
13902
#: serverguide/C/network-auth.xml:645(para)
13903
msgid ""
13904
"Edit the file and change the <emphasis>olcRootDN</emphasis> to match your "
13905
"directory:"
13906
msgstr ""
13907
13908
#: serverguide/C/network-auth.xml:649(programlisting)
13909
#, no-wrap
13910
msgid ""
13911
"\n"
13912
"olcRootDN: cn=admin,dc=example,dc=com\n"
13913
msgstr ""
13914
13915
#: serverguide/C/network-auth.xml:657(para)
13916
msgid ""
13917
"Next, add the LDIF file using the <application>ldapadd</application> utility:"
13918
msgstr ""
13919
13920
#: serverguide/C/network-auth.xml:662(command)
13921
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f provider_sync.ldif"
13922
msgstr ""
13923
13924
#: serverguide/C/network-auth.xml:669(para)
13925
msgid "Restart <application>slapd</application>:"
13926
msgstr ""
13927
13928
#: serverguide/C/network-auth.xml:674(command) serverguide/C/network-auth.xml:1040(command) serverguide/C/network-auth.xml:1227(command)
13929
msgid "sudo /etc/init.d/slapd restart"
13930
msgstr ""
13931
13932
#: serverguide/C/network-auth.xml:680(para)
13933
msgid ""
13934
"The <emphasis>Provider</emphasis> server is now configured, and it is time "
13935
"to configure a <emphasis>Consumer</emphasis> server."
13936
msgstr ""
13937
13938
#: serverguide/C/network-auth.xml:687(title)
13939
msgid "Consumer Configuration"
13940
msgstr ""
13941
13942
#: serverguide/C/network-auth.xml:692(para)
13943
msgid ""
13944
"On the <emphasis>Consumer</emphasis> server configure it the same as the "
13945
"<emphasis>Provider</emphasis> except for the <emphasis>Syncrepl</emphasis> "
13946
"configuration steps."
13947
msgstr ""
13948
13949
#: serverguide/C/network-auth.xml:697(para)
13950
msgid "Add the additional schema files:"
13951
msgstr ""
13952
13953
#: serverguide/C/network-auth.xml:707(para)
13954
msgid ""
13955
"Also, create, or copy from the provider server, the "
13956
"<filename>backend.example.com.ldif</filename>"
13957
msgstr ""
13958
13959
#: serverguide/C/network-auth.xml:711(programlisting)
13960
#, no-wrap
13961
msgid ""
13962
"\n"
13963
"# Load dynamic backend modules\n"
13964
"dn: cn=module,cn=config\n"
13965
"objectClass: olcModuleList\n"
13966
"cn: module\n"
13967
"olcModulepath: /usr/lib/ldap\n"
13968
"olcModuleload: back_hdb\n"
13969
"\n"
13970
"# Database settings\n"
13971
"dn: olcDatabase=hdb,cn=config\n"
13972
"objectClass: olcDatabaseConfig\n"
13973
"objectClass: olcHdbConfig\n"
13974
"olcDatabase: {1}hdb\n"
13975
"olcSuffix: dc=example,dc=com\n"
13976
"olcDbDirectory: /var/lib/ldap\n"
13977
"olcRootDN: cn=admin,dc=example,dc=com\n"
13978
"olcRootPW: secret\n"
13979
"olcDbConfig: set_cachesize 0 2097152 0\n"
13980
"olcDbConfig: set_lk_max_objects 1500\n"
13981
"olcDbConfig: set_lk_max_locks 1500\n"
13982
"olcDbConfig: set_lk_max_lockers 1500\n"
13983
"olcDbIndex: objectClass eq\n"
13984
"olcLastMod: TRUE\n"
13985
"olcDbCheckpoint: 512 30\n"
13986
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
13987
"by anonymous auth by self write by * none\n"
13988
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
13989
"olcAccess: to dn.base=\"\" by * read\n"
13990
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
13991
msgstr ""
13992
13993
#: serverguide/C/network-auth.xml:741(para)
13994
msgid "And add the LDIF by entering:"
13995
msgstr ""
13996
13997
#: serverguide/C/network-auth.xml:752(para)
13998
msgid ""
13999
"Do the same with the <filename>frontend.example.com.ldif</filename> file "
14000
"listed above, and add it:"
14001
msgstr ""
14002
14003
#: serverguide/C/network-auth.xml:760(para)
14004
msgid ""
14005
"The two severs should now have the same configuration except for the "
14006
"<emphasis>Syncrepl</emphasis> options."
14007
msgstr ""
14008
14009
#: serverguide/C/network-auth.xml:768(para)
14010
msgid ""
14011
"Now create a file named <filename>consumer_sync.ldif</filename> containing:"
14012
msgstr ""
14013
14014
#: serverguide/C/network-auth.xml:772(programlisting)
14015
#, no-wrap
14016
msgid ""
14017
"\n"
14018
"#Load the syncprov module.\n"
14019
"dn: cn=module{0},cn=config\n"
14020
"changetype: modify\n"
14021
"add: olcModuleLoad\n"
14022
"olcModuleLoad: syncprov\n"
14023
"\n"
14024
"# syncrepl specific indices\n"
14025
"dn: olcDatabase={1}hdb,cn=config\n"
14026
"changetype: modify\n"
14027
"add: olcDbIndex\n"
14028
"olcDbIndex: entryUUID eq\n"
14029
"-\n"
14030
"add: olcSyncRepl\n"
14031
"olcSyncRepl: rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
14032
"binddn=\"cn=admin,dc=example,dc=com\" \n"
14033
" credentials=secret searchbase=\"dc=example,dc=com\" "
14034
"logbase=\"cn=accesslog\" \n"
14035
" logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" "
14036
"schemachecking=on \n"
14037
" type=refreshAndPersist retry=\"60 +\" syncdata=accesslog\n"
14038
"-\n"
14039
"add: olcUpdateRef\n"
14040
"olcUpdateRef: ldap://ldap01.example.com\n"
14041
msgstr ""
14042
14043
#: serverguide/C/network-auth.xml:795(para)
14044
msgid "You will probably want to change the following attributes:"
14045
msgstr ""
14046
14047
#: serverguide/C/network-auth.xml:800(para)
14048
msgid "<emphasis>ldap01.example.com</emphasis> to your server's hostname."
14049
msgstr ""
14050
14051
#: serverguide/C/network-auth.xml:801(emphasis)
14052
msgid "binddn"
14053
msgstr ""
14054
14055
#: serverguide/C/network-auth.xml:802(emphasis)
14056
msgid "credentials"
14057
msgstr ""
14058
14059
#: serverguide/C/network-auth.xml:803(emphasis)
14060
msgid "searchbase"
14061
msgstr ""
14062
14063
#: serverguide/C/network-auth.xml:804(emphasis)
14064
msgid "olcUpdateRef:"
14065
msgstr ""
14066
14067
#: serverguide/C/network-auth.xml:810(para)
14068
msgid "Add the LDIF file to the configuration tree:"
14069
msgstr ""
14070
14071
#: serverguide/C/network-auth.xml:815(command)
14072
msgid "sudo ldapadd -c -Y EXTERNAL -H ldapi:/// -f consumer_sync.ldif"
14073
msgstr ""
14074
14075
#: serverguide/C/network-auth.xml:821(para)
14076
msgid ""
14077
"The frontend database should now sync between servers. You can add "
14078
"additional servers using the steps above as the need arises."
14079
msgstr ""
14080
14081
#: serverguide/C/network-auth.xml:831(programlisting)
14082
#, no-wrap
14083
msgid "127.0.0.1\tldap01.example.com ldap01"
14084
msgstr ""
14085
14086
#: serverguide/C/network-auth.xml:827(para)
14087
msgid ""
14088
"The <application>slapd</application> daemon will send log information to "
14089
"<filename>/var/log/syslog</filename> by default. So if all does "
14090
"<emphasis>not</emphasis> go well check there for errors and other "
14091
"troubleshooting information. Also, be sure that each server knows it's Fully "
14092
"Qualified Domain Name (FQDN). This is configured in "
14093
"<filename>/etc/hosts</filename> with a line similar to: <placeholder-1/>."
14094
msgstr ""
14095
14096
#: serverguide/C/network-auth.xml:839(title)
14097
msgid "Setting up ACL"
14098
msgstr ""
14099
14100
#: serverguide/C/network-auth.xml:841(para)
14101
msgid ""
14102
"Authentication requires access to the password field, that should be not "
14103
"accessible by default. Also, in order for users to change their own "
14104
"password, using <command>passwd</command> or other utilities, "
14105
"<emphasis>shadowLastChange</emphasis> needs to be accessible once a user has "
14106
"authenticated."
14107
msgstr ""
14108
14109
#: serverguide/C/network-auth.xml:848(para)
14110
msgid ""
14111
"To view the Access Control List (ACL), use the "
14112
"<application>ldapsearch</application> utility:"
14113
msgstr ""
14114
14115
#: serverguide/C/network-auth.xml:853(command)
14116
msgid ""
14117
"ldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase=hdb "
14118
"olcAccess"
14119
msgstr ""
14120
14121
#: serverguide/C/network-auth.xml:857(computeroutput)
14122
#, no-wrap
14123
msgid ""
14124
"Enter LDAP Password: \n"
14125
"dn: olcDatabase={1}hdb,cn=config\n"
14126
"olcAccess: {0}to attrs=userPassword,shadowLastChange by "
14127
"dn=\"cn=admin,dc=exampl\n"
14128
" e,dc=com\" write by anonymous auth by self write by * none\n"
14129
"olcAccess: {1}to dn.base=\"\" by * read\n"
14130
"olcAccess: {2}to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
14131
msgstr ""
14132
14133
#: serverguide/C/network-auth.xml:869(title)
14134
msgid "TLS and SSL"
14135
msgstr ""
14136
14137
#: serverguide/C/network-auth.xml:871(para)
14138
msgid ""
14139
"When authenticating to an OpenLDAP server it is best to do so using an "
14140
"encrypted session. This can be accomplished using Transport Layer Security "
14141
"(TLS) and/or Secure Sockets Layer (SSL)."
14142
msgstr ""
14143
14144
#: serverguide/C/network-auth.xml:876(para)
14145
msgid ""
14146
"The first step in the process is to obtain or create a "
14147
"<emphasis>certificate</emphasis>. Because <application>slapd</application> "
14148
"is compiled using the <application>gnutls</application> library, the "
14149
"<application>certtool</application> utility will be used to create "
14150
"certificates."
14151
msgstr ""
14152
14153
#: serverguide/C/network-auth.xml:885(para)
14154
msgid ""
14155
"First, install <application>gnutls-bin</application> by entering the "
14156
"following in a terminal:"
14157
msgstr ""
14158
14159
#: serverguide/C/network-auth.xml:890(command)
14160
msgid "sudo apt-get install gnutls-bin"
14161
msgstr ""
14162
14163
#: serverguide/C/network-auth.xml:896(para)
14164
msgid ""
14165
"Next, create a private key for the <emphasis>Certificate "
14166
"Authority</emphasis> (CA):"
14167
msgstr ""
14168
14169
#: serverguide/C/network-auth.xml:901(command)
14170
msgid ""
14171
"sudo sh -c \"certtool --generate-privkey > /etc/ssl/private/cakey.pem\""
14172
msgstr ""
14173
14174
#: serverguide/C/network-auth.xml:907(para)
14175
msgid ""
14176
"Create a <filename>/etc/ssl/ca.info</filename> details file to self-sign the "
14177
"CA certificate containing:"
14178
msgstr ""
14179
14180
#: serverguide/C/network-auth.xml:911(programlisting)
14181
#, no-wrap
14182
msgid ""
14183
"\n"
14184
"cn = Example Company\n"
14185
"ca\n"
14186
"cert_signing_key\n"
14187
msgstr ""
14188
14189
#: serverguide/C/network-auth.xml:920(para)
14190
msgid "Now create the self-signed CA certificate:"
14191
msgstr ""
14192
14193
#: serverguide/C/network-auth.xml:925(command)
14194
msgid ""
14195
"sudo certtool --generate-self-signed --load-privkey "
14196
"/etc/ssl/private/cakey.pem \\ --template /etc/ssl/ca.info --outfile "
14197
"/etc/ssl/certs/cacert.pem"
14198
msgstr ""
14199
14200
#: serverguide/C/network-auth.xml:932(para)
14201
msgid "Make a private key for the server:"
14202
msgstr ""
14203
14204
#: serverguide/C/network-auth.xml:937(command)
14205
msgid ""
14206
"sudo sh -c \"certtool --generate-privkey > "
14207
"/etc/ssl/private/ldap01_slapd_key.pem\""
14208
msgstr ""
14209
14210
#: serverguide/C/network-auth.xml:941(para)
14211
msgid ""
14212
"Replace <emphasis>ldap01</emphasis> in the filename with your server's "
14213
"hostname. Naming the certificate and key for the host and service that will "
14214
"be using them will help keep filenames and paths straight."
14215
msgstr ""
14216
14217
#: serverguide/C/network-auth.xml:950(para)
14218
msgid ""
14219
"To sign the server's certificate with the CA, create the "
14220
"<filename>/etc/ssl/ldap01.info</filename> info file containing:"
14221
msgstr ""
14222
14223
#: serverguide/C/network-auth.xml:954(programlisting)
14224
#, no-wrap
14225
msgid ""
14226
"\n"
14227
"organization = Example Company\n"
14228
"cn = ldap01.example.com\n"
14229
"tls_www_server\n"
14230
"encryption_key\n"
14231
"signing_key\n"
14232
msgstr ""
14233
14234
#: serverguide/C/network-auth.xml:965(para)
14235
msgid "Create the server's certificate:"
14236
msgstr ""
14237
14238
#: serverguide/C/network-auth.xml:970(command)
14239
msgid ""
14240
"sudo certtool --generate-certificate --load-privkey /etc/ssl/private/x01-"
14241
"test_slapd_key.pem \\ --load-ca-certificate /etc/ssl/certs/cacert.pem --load-"
14242
"ca-privkey /etc/ssl/private/cakey.pem \\ --template /etc/ssl/x01-test.info --"
14243
"outfile /etc/ssl/certs/x01-test_slapd_cert.pem"
14244
msgstr ""
14245
14246
#: serverguide/C/network-auth.xml:978(para)
14247
msgid ""
14248
"Once you have a certificate, key, and CA cert installed, use "
14249
"<application>ldapmodify</application> to add the new configuration options:"
14250
msgstr ""
14251
14252
#: serverguide/C/network-auth.xml:989(userinput)
14253
#, no-wrap
14254
msgid ""
14255
"dn: cn=config\n"
14256
"add: olcTLSCACertificateFile\n"
14257
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
14258
"-\n"
14259
"add: olcTLSCertificateFile\n"
14260
"olcTLSCertificateFile: /etc/ssl/certs/ldap01_slapd_cert.pem\n"
14261
"-\n"
14262
"add: olcTLSCertificateKeyFile\n"
14263
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap01_slapd_key.pem"
14264
msgstr ""
14265
14266
#: serverguide/C/network-auth.xml:988(computeroutput) serverguide/C/network-auth.xml:1159(computeroutput)
14267
#, no-wrap
14268
msgid ""
14269
"Enter LDAP Password:\n"
14270
"<placeholder-1/>\n"
14271
"\n"
14272
"modifying entry \"cn=config\"\n"
14273
msgstr ""
14274
14275
#: serverguide/C/network-auth.xml:1004(para)
14276
msgid ""
14277
"Adjust the <filename>ldap01_slapd_cert.pem</filename>, "
14278
"<filename>ldap01_slapd_key.pem</filename>, and "
14279
"<filename>cacert.pem</filename> names if yours are different."
14280
msgstr ""
14281
14282
#: serverguide/C/network-auth.xml:1010(para)
14283
msgid ""
14284
"Next, edit <filename>/etc/default/slapd</filename> uncomment the "
14285
"<emphasis>SLAPD_SERVICES</emphasis> option:"
14286
msgstr ""
14287
14288
#: serverguide/C/network-auth.xml:1014(programlisting)
14289
#, no-wrap
14290
msgid ""
14291
"\n"
14292
"SLAPD_SERVICES=\"ldap:/// ldapi:/// ldaps:///\"\n"
14293
msgstr ""
14294
14295
#: serverguide/C/network-auth.xml:1018(para)
14296
msgid ""
14297
"Now the <emphasis>openldap</emphasis> user needs access to the certificate:"
14298
msgstr ""
14299
14300
#: serverguide/C/network-auth.xml:1023(command)
14301
msgid "sudo adduser openldap ssl-cert"
14302
msgstr ""
14303
14304
#: serverguide/C/network-auth.xml:1024(command)
14305
msgid "sudo chgrp ssl-cert /etc/ssl/private/ldap01_slapd_key.pem"
14306
msgstr ""
14307
14308
#: serverguide/C/network-auth.xml:1025(command)
14309
msgid "sudo chmod g+r /etc/ssl/private/ldap01_slapd_key.pem"
14310
msgstr ""
14311
14312
#: serverguide/C/network-auth.xml:1029(para)
14313
msgid ""
14314
"If the <filename role=\"directory\">/etc/ssl/private</filename> and "
14315
"<filename>/etc/ssl/private/server.key</filename> have different permissions, "
14316
"adjust the commands appropriately."
14317
msgstr ""
14318
14319
#: serverguide/C/network-auth.xml:1035(para)
14320
msgid "Finally, restart <application>slapd</application>:"
14321
msgstr ""
14322
14323
#: serverguide/C/network-auth.xml:1043(para)
14324
msgid ""
14325
"The <application>slapd</application> daemon should now be listening for "
14326
"LDAPS connections and be able to use STARTTLS during authentication."
14327
msgstr ""
14328
14329
#: serverguide/C/network-auth.xml:1049(para)
14330
msgid ""
14331
"If you run into troubles with the server not starting, check the "
14332
"/var/log/syslog. If you see errors like main: TLS init def ctx failed: -1, "
14333
"it is likely there is a configuration problem. Check that the certificate is "
14334
"signed by the authority from in the files configured, and that the ssl-cert "
14335
"group has read permissions on the private key."
14336
msgstr ""
14337
14338
#: serverguide/C/network-auth.xml:1061(title)
14339
msgid "TLS Replication"
14340
msgstr ""
14341
14342
#: serverguide/C/network-auth.xml:1063(para)
14343
msgid ""
14344
"If you have setup <application>Syncrepl</application> between servers, it is "
14345
"prudent to encrypt the replication traffic using <emphasis>Transport Layer "
14346
"Security (TLS)</emphasis>. For details on setting up replication see <xref "
14347
"linkend=\"openldap-server-replication\"/>."
14348
msgstr ""
14349
14350
#: serverguide/C/network-auth.xml:1069(para)
14351
msgid ""
14352
"Assuming you have followed the above instructions and created a CA "
14353
"certificate and server certificate on the <emphasis>Provider</emphasis> "
14354
"server. Follow the following instructions to create a certificate and key "
14355
"for the <emphasis>Consumer</emphasis> server."
14356
msgstr ""
14357
14358
#: serverguide/C/network-auth.xml:1078(para)
14359
msgid "Create a new key for the Consumer server:"
14360
msgstr ""
14361
14362
#: serverguide/C/network-auth.xml:1083(command)
14363
msgid "mkdir ldap02-ssl"
14364
msgstr ""
14365
14366
#: serverguide/C/network-auth.xml:1084(command)
14367
msgid "cd ldap02-ssl"
14368
msgstr ""
14369
14370
#: serverguide/C/network-auth.xml:1085(command)
14371
msgid "certtool --generate-privkey > ldap02_slapd_key.pem"
14372
msgstr ""
14373
14374
#: serverguide/C/network-auth.xml:1089(para)
14375
msgid ""
14376
"Creating a new directory is not strictly necessary, but it will help keep "
14377
"things organized and make it easier to copy the files to the Consumer server."
14378
msgstr ""
14379
14380
#: serverguide/C/network-auth.xml:1098(para)
14381
msgid ""
14382
"Next, create an info file, <filename>ldap02.info</filename> for the Consumer "
14383
"server, changing the attributes to match your locality and server:"
14384
msgstr ""
14385
14386
#: serverguide/C/network-auth.xml:1103(programlisting)
14387
#, no-wrap
14388
msgid ""
14389
"\n"
14390
"country = US\n"
14391
"state = North Carolina\n"
14392
"locality = Winston-Salem\n"
14393
"organization = Example Company\n"
14394
"cn = ldap02.salem.edu\n"
14395
"tls_www_client\n"
14396
"encryption_key\n"
14397
"signing_key\n"
14398
msgstr ""
14399
14400
#: serverguide/C/network-auth.xml:1117(para)
14401
msgid "Create the certificate:"
14402
msgstr ""
14403
14404
#: serverguide/C/network-auth.xml:1122(command)
14405
msgid ""
14406
"sudo certtool --generate-certificate --load-privkey ldap02_slapd_key.pem \\ -"
14407
"-load-ca-certificate /etc/ssl/certs/cacert.pem --load-ca-privkey "
14408
"/etc/ssl/private/cakey.pem \\ --template ldap02.info --outfile "
14409
"ldap02_slapd_cert.pem"
14410
msgstr ""
14411
14412
#: serverguide/C/network-auth.xml:1130(para)
14413
msgid "Copy the <filename>cacert.pem</filename> to the dicretory:"
14414
msgstr ""
14415
14416
#: serverguide/C/network-auth.xml:1135(command)
14417
msgid "cp /etc/ssl/certs/cacert.pem ."
14418
msgstr ""
14419
14420
#: serverguide/C/network-auth.xml:1141(para)
14421
msgid ""
14422
"The only thing left is to copy the <filename>ldap02-ssl</filename> directory "
14423
"to the Consumer server, then copy <filename>ldap02_slapd_cert.pem</filename> "
14424
"and <filename>cacert.pem</filename> to <filename>/etc/ssl/certs</filename>, "
14425
"and copy <filename>ldap02_slapd_key.pem</filename> to "
14426
"<filename>/etc/ssl/private</filename>."
14427
msgstr ""
14428
14429
#: serverguide/C/network-auth.xml:1150(para)
14430
msgid ""
14431
"Once the files are in place adjust the <emphasis>cn=config</emphasis> tree "
14432
"by entering:"
14433
msgstr ""
14434
14435
#: serverguide/C/network-auth.xml:1160(userinput)
14436
#, no-wrap
14437
msgid ""
14438
"dn: cn=config\n"
14439
"add: olcTLSCACertificateFile\n"
14440
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
14441
"-\n"
14442
"add: olcTLSCertificateFile\n"
14443
"olcTLSCertificateFile: /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14444
"-\n"
14445
"add: olcTLSCertificateKeyFile\n"
14446
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap02_slapd_key.pem"
14447
msgstr ""
14448
14449
#: serverguide/C/network-auth.xml:1177(para)
14450
msgid ""
14451
"As with the Provider you can now edit "
14452
"<filename>/etc/default/slapd</filename> and add the "
14453
"<emphasis>ldaps:///</emphasis> parameter to the "
14454
"<emphasis>SLAPD_SERVICES</emphasis> option."
14455
msgstr ""
14456
14457
#: serverguide/C/network-auth.xml:1185(para)
14458
msgid ""
14459
"Now that <emphasis>TLS</emphasis> has been setup on each server, once again "
14460
"modify the <emphasis>Consumer</emphasis> server's "
14461
"<emphasis>cn=config</emphasis> tree by entering the following in a terminal:"
14462
msgstr ""
14463
14464
#: serverguide/C/network-auth.xml:1198(userinput)
14465
#, no-wrap
14466
msgid ""
14467
"\n"
14468
"dn: olcDatabase={1}hdb,cn=config\n"
14469
"replace: olcSyncrepl\n"
14470
"olcSyncrepl: {0}rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
14471
"binddn=\"cn=ad\n"
14472
" min,dc=example,dc=com\" credentials=secret searchbase=\"dc=example,dc=com\" "
14473
"logbas\n"
14474
" e=\"cn=accesslog\" "
14475
"logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" s\n"
14476
" chemachecking=on type=refreshAndPersist retry=\"60 +\" syncdata=accesslog "
14477
"starttls=yes"
14478
msgstr ""
14479
14480
#: serverguide/C/network-auth.xml:1195(computeroutput)
14481
#, no-wrap
14482
msgid ""
14483
"SASL/EXTERNAL authentication started\n"
14484
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
14485
"SASL SSF: 0\n"
14486
"<placeholder-1/>\n"
14487
"\n"
14488
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
14489
msgstr ""
14490
14491
#: serverguide/C/network-auth.xml:1210(para)
14492
msgid ""
14493
"If the LDAP server hostname does not match the Fully Qualified Domain Name "
14494
"(FQDN) in the certificate, you may have to edit "
14495
"<filename>/etc/ldap/ldap.conf</filename> and add the following TLS options:"
14496
msgstr ""
14497
14498
#: serverguide/C/network-auth.xml:1215(programlisting)
14499
#, no-wrap
14500
msgid ""
14501
"\n"
14502
"TLS_CERT /etc/ssl/certs/ldap02_slapd_cert.pem\n"
14503
"TLS_KEY /etc/ssl/private/ldap02_slapd_key.pem\n"
14504
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
14505
msgstr ""
14506
14507
#: serverguide/C/network-auth.xml:1222(para)
14508
msgid ""
14509
"Finally, restart <application>slapd</application> on each of the servers:"
14510
msgstr ""
14511
14512
#: serverguide/C/network-auth.xml:1235(title)
14513
msgid "LDAP Authentication"
14514
msgstr ""
14515
14516
#: serverguide/C/network-auth.xml:1237(para)
14517
msgid ""
14518
"Once you have a working LDAP server, the <application>auth-client-"
14519
"config</application> and <application>libnss-ldap</application> packages "
14520
"take the pain out of configuring an Ubuntu client to authenticate using "
14521
"LDAP. To install the packages from, a terminal prompt enter:"
14522
msgstr ""
14523
14524
#: serverguide/C/network-auth.xml:1244(command)
14525
msgid "sudo apt-get install libnss-ldap"
14526
msgstr ""
14527
14528
#: serverguide/C/network-auth.xml:1247(para)
14529
msgid ""
14530
"During the install a menu dialog will ask you connection details about your "
14531
"LDAP server."
14532
msgstr ""
14533
14534
#: serverguide/C/network-auth.xml:1251(para)
14535
msgid ""
14536
"If you make a mistake when entering your information you can execute the "
14537
"dialog again using:"
14538
msgstr ""
14539
14540
#: serverguide/C/network-auth.xml:1256(command)
14541
msgid "sudo dpkg-reconfigure ldap-auth-config"
14542
msgstr ""
14543
14544
#: serverguide/C/network-auth.xml:1259(para)
14545
msgid ""
14546
"The results of the dialog can be seen in "
14547
"<filename>/etc/ldap.conf</filename>. If your server requires options not "
14548
"covered in the menu edit this file accordingly."
14549
msgstr ""
14550
14551
#: serverguide/C/network-auth.xml:1264(para)
14552
msgid ""
14553
"Now that <application>libnss-ldap</application> is configured enable the "
14554
"<application>auth-client-config</application> LDAP profile by entering:"
14555
msgstr ""
14556
14557
#: serverguide/C/network-auth.xml:1270(command)
14558
msgid "sudo auth-client-config -t nss -p lac_ldap"
14559
msgstr ""
14560
14561
#: serverguide/C/network-auth.xml:1275(para)
14562
msgid ""
14563
"<emphasis>-t:</emphasis> only modifies "
14564
"<filename>/etc/nsswitch.conf</filename>."
14565
msgstr ""
14566
14567
#: serverguide/C/network-auth.xml:1280(para)
14568
msgid "<emphasis>-p:</emphasis> name of the profile to enable, disable, etc."
14569
msgstr ""
14570
14571
#: serverguide/C/network-auth.xml:1285(para)
14572
msgid ""
14573
"<emphasis>lac_ldap:</emphasis> the <application>auth-client-"
14574
"config</application> profile that is part of the <application>ldap-auth-"
14575
"config</application> package."
14576
msgstr ""
14577
14578
#: serverguide/C/network-auth.xml:1292(para)
14579
msgid ""
14580
"Using the <application>pam-auth-update</application> utility, configure the "
14581
"system to use LDAP for authentication:"
14582
msgstr ""
14583
14584
#: serverguide/C/network-auth.xml:1297(command)
14585
msgid "sudo pam-auth-update"
14586
msgstr ""
14587
14588
#: serverguide/C/network-auth.xml:1300(para)
14589
msgid ""
14590
"From the <application>pam-auth-update</application> menu, choose LDAP and "
14591
"any other authentication mechanisms you need."
14592
msgstr ""
14593
14594
#: serverguide/C/network-auth.xml:1304(para)
14595
msgid ""
14596
"You should now be able to login using user credentials stored in the LDAP "
14597
"directory."
14598
msgstr ""
14599
14600
#: serverguide/C/network-auth.xml:1309(para)
14601
msgid ""
14602
"If you are going to use LDAP to store Samba users you will need to configure "
14603
"the server to authenticate using LDAP. See <xref linkend=\"samba-ldap\"/> "
14604
"for details."
14605
msgstr ""
14606
14607
#: serverguide/C/network-auth.xml:1317(title)
14608
msgid "User and Group Management"
14609
msgstr ""
14610
14611
#: serverguide/C/network-auth.xml:1319(para)
14612
msgid ""
14613
"The <application>ldap-utils</application> package comes with multiple "
14614
"utilities to manage the directory, but the long string of options needed, "
14615
"can make them a burden to use. The <application>ldapscripts</application> "
14616
"package contains configurable scripts to easily manage LDAP users and groups."
14617
msgstr ""
14618
14619
#: serverguide/C/network-auth.xml:1325(para)
14620
msgid "To install the package, from a terminal enter:"
14621
msgstr ""
14622
14623
#: serverguide/C/network-auth.xml:1330(command)
14624
msgid "sudo apt-get install ldapscripts"
14625
msgstr ""
14626
14627
#: serverguide/C/network-auth.xml:1333(para)
14628
msgid ""
14629
"Next, edit the config file "
14630
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> uncommenting and "
14631
"changing the following to match your environment:"
14632
msgstr ""
14633
14634
#: serverguide/C/network-auth.xml:1338(programlisting)
14635
#, no-wrap
14636
msgid ""
14637
"\n"
14638
"SERVER=localhost\n"
14639
"BINDDN='cn=admin,dc=example,dc=com'\n"
14640
"BINDPWDFILE=\"/etc/ldapscripts/ldapscripts.passwd\"\n"
14641
"SUFFIX='dc=example,dc=com'\n"
14642
"GSUFFIX='ou=Groups'\n"
14643
"USUFFIX='ou=People'\n"
14644
"MSUFFIX='ou=Computers'\n"
14645
"GIDSTART=10000\n"
14646
"UIDSTART=10000\n"
14647
"MIDSTART=10000\n"
14648
msgstr ""
14649
14650
#: serverguide/C/network-auth.xml:1351(para)
14651
msgid ""
14652
"Now, create the <filename>ldapscripts.passwd</filename> file to allow "
14653
"authenticated access to the directory:"
14654
msgstr ""
14655
14656
#: serverguide/C/network-auth.xml:1356(command)
14657
msgid ""
14658
"sudo sh -c \"echo -n 'secret' > /etc/ldapscripts/ldapscripts.passwd\""
14659
msgstr ""
14660
14661
#: serverguide/C/network-auth.xml:1357(command)
14662
msgid "sudo chmod 400 /etc/ldapscripts/ldapscripts.passwd"
14663
msgstr ""
14664
14665
#: serverguide/C/network-auth.xml:1361(para)
14666
msgid ""
14667
"Replace <quote>secret</quote> with the actual password for your LDAP admin "
14668
"user."
14669
msgstr ""
14670
14671
#: serverguide/C/network-auth.xml:1366(para)
14672
msgid ""
14673
"The <application>ldapscripts</application> are now ready to help manage your "
14674
"directory. The following are some examples of how to use the scripts:"
14675
msgstr ""
14676
14677
#: serverguide/C/network-auth.xml:1373(para)
14678
msgid "Create a new user:"
14679
msgstr ""
14680
14681
#: serverguide/C/network-auth.xml:1377(command)
14682
msgid "sudo ldapadduser george example"
14683
msgstr ""
14684
14685
#: serverguide/C/network-auth.xml:1379(para)
14686
msgid ""
14687
"This will create a user with uid <emphasis role=\"italic\">george</emphasis> "
14688
"and set the user's primary group (gid) to <emphasis "
14689
"role=\"italic\">example</emphasis>"
14690
msgstr ""
14691
14692
#: serverguide/C/network-auth.xml:1385(para)
14693
msgid "Change a user's password:"
14694
msgstr ""
14695
14696
#: serverguide/C/network-auth.xml:1389(command)
14697
msgid "sudo ldapsetpasswd george"
14698
msgstr ""
14699
14700
#: serverguide/C/network-auth.xml:1390(computeroutput)
14701
#, no-wrap
14702
msgid "Changing password for user uid=george,ou=People,dc=example,dc=com"
14703
msgstr ""
14704
14705
#: serverguide/C/network-auth.xml:1391(userinput)
14706
#, no-wrap
14707
msgid "New Password: "
14708
msgstr ""
14709
14710
#: serverguide/C/network-auth.xml:1392(userinput)
14711
#, no-wrap
14712
msgid "New Password (verify): "
14713
msgstr ""
14714
14715
#: serverguide/C/network-auth.xml:1396(para)
14716
msgid "Delete a user:"
14717
msgstr ""
14718
14719
#: serverguide/C/network-auth.xml:1400(command)
14720
msgid "sudo ldapdeleteuser george"
14721
msgstr ""
14722
14723
#: serverguide/C/network-auth.xml:1405(para)
14724
msgid "Add a group:"
14725
msgstr ""
14726
14727
#: serverguide/C/network-auth.xml:1409(command)
14728
msgid "sudo ldapaddgroup qa"
14729
msgstr ""
14730
14731
#: serverguide/C/network-auth.xml:1413(para)
14732
msgid "Delete a group:"
14733
msgstr ""
14734
14735
#: serverguide/C/network-auth.xml:1417(command)
14736
msgid "sudo ldapdeletegroup qa"
14737
msgstr ""
14738
14739
#: serverguide/C/network-auth.xml:1421(para)
14740
msgid "Add a user to a group:"
14741
msgstr ""
14742
14743
#: serverguide/C/network-auth.xml:1425(command)
14744
msgid "sudo ldapaddusertogroup george qa"
14745
msgstr ""
14746
14747
#: serverguide/C/network-auth.xml:1427(para)
14748
msgid ""
14749
"You should now see a <emphasis>memberUid</emphasis> attribute for the "
14750
"<emphasis role=\"italic\">qa</emphasis> group with a value of <emphasis "
14751
"role=\"italic\">george</emphasis>."
14752
msgstr ""
14753
14754
#: serverguide/C/network-auth.xml:1433(para)
14755
msgid "Remove a user from a group:"
14756
msgstr ""
14757
14758
#: serverguide/C/network-auth.xml:1437(command)
14759
msgid "sudo ldapdeleteuserfromgroup george qa"
14760
msgstr ""
14761
14762
#: serverguide/C/network-auth.xml:1439(para)
14763
msgid ""
14764
"The <emphasis>memberUid</emphasis> attribute should now be removed from the "
14765
"<emphasis role=\"italic\">qa</emphasis> group."
14766
msgstr ""
14767
14768
#: serverguide/C/network-auth.xml:1445(para)
14769
msgid ""
14770
"The <application>ldapmodifyuser</application> script allows you to add, "
14771
"remove, or replace a user's attributes. The script uses the same syntax as "
14772
"the <application>ldapmodify</application> utility. For example:"
14773
msgstr ""
14774
14775
#: serverguide/C/network-auth.xml:1450(command)
14776
msgid "sudo ldapmodifyuser george"
14777
msgstr ""
14778
14779
#: serverguide/C/network-auth.xml:1451(computeroutput)
14780
#, no-wrap
14781
msgid ""
14782
"# About to modify the following entry :\n"
14783
"dn: uid=george,ou=People,dc=example,dc=com\n"
14784
"objectClass: account\n"
14785
"objectClass: posixAccount\n"
14786
"cn: george\n"
14787
"uid: george\n"
14788
"uidNumber: 1001\n"
14789
"gidNumber: 1001\n"
14790
"homeDirectory: /home/george\n"
14791
"loginShell: /bin/bash\n"
14792
"gecos: george\n"
14793
"description: User account\n"
14794
"userPassword:: e1NTSEF9eXFsTFcyWlhwWkF1eGUybVdFWHZKRzJVMjFTSG9vcHk=\n"
14795
"\n"
14796
"# Enter your modifications here, end with CTRL-D.\n"
14797
"dn: uid=george,ou=People,dc=example,dc=com"
14798
msgstr ""
14799
14800
#: serverguide/C/network-auth.xml:1467(userinput)
14801
#, no-wrap
14802
msgid ""
14803
"replace: gecos\n"
14804
"gecos: George Carlin"
14805
msgstr ""
14806
14807
#: serverguide/C/network-auth.xml:1470(para)
14808
msgid ""
14809
"The user's <emphasis>gecos</emphasis> should now be <quote>George "
14810
"Carlin</quote>."
14811
msgstr ""
14812
14813
#: serverguide/C/network-auth.xml:1475(para)
14814
msgid ""
14815
"Another great feature of <application>ldapscripts</application>, is the "
14816
"template system. Templates allow you to customize the attributes of user, "
14817
"group, and machine objectes. For example, to enable the "
14818
"<emphasis>user</emphasis> template edit "
14819
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> changing:"
14820
msgstr ""
14821
14822
#: serverguide/C/network-auth.xml:1482(programlisting)
14823
#, no-wrap
14824
msgid ""
14825
"\n"
14826
"UTEMPLATE=\"/etc/ldapscripts/ldapadduser.template\"\n"
14827
msgstr ""
14828
14829
#: serverguide/C/network-auth.xml:1486(para)
14830
msgid ""
14831
"There are <emphasis role=\"italic\">sample</emphasis> templates in the "
14832
"<filename>/etc/ldapscripts</filename> directory. Copy or rename the "
14833
"<filename>ldapadduser.template.sample</filename> file to "
14834
"<filename>/etc/ldapscripts/ldapadduser.template</filename>:"
14835
msgstr ""
14836
14837
#: serverguide/C/network-auth.xml:1493(command)
14838
msgid ""
14839
"sudo cp /etc/ldapscripts/ldapadduser.template.sample "
14840
"/etc/ldapscripts/ldapadduser.template"
14841
msgstr ""
14842
14843
#: serverguide/C/network-auth.xml:1496(para)
14844
msgid ""
14845
"Edit the new template to add the desired attributes. The following will "
14846
"create new user's as with an <emphasis>objectClass</emphasis> of "
14847
"<emphasis>inetOrgPerson</emphasis>:"
14848
msgstr ""
14849
14850
#: serverguide/C/network-auth.xml:1501(programlisting)
14851
#, no-wrap
14852
msgid ""
14853
"\n"
14854
"dn: uid=<user>,<usuffix>,<suffix>\n"
14855
"objectClass: inetOrgPerson\n"
14856
"objectClass: posixAccount\n"
14857
"cn: <user>\n"
14858
"sn: <ask>\n"
14859
"uid: <user>\n"
14860
"uidNumber: <uid>\n"
14861
"gidNumber: <gid>\n"
14862
"homeDirectory: <home>\n"
14863
"loginShell: <shell>\n"
14864
"gecos: <user>\n"
14865
"description: User account\n"
14866
"title: Employee\n"
14867
msgstr ""
14868
14869
#: serverguide/C/network-auth.xml:1517(para)
14870
msgid ""
14871
"Notice the <emphasis><ask></emphasis> option used for the "
14872
"<emphasis>cn</emphasis> value. Using <ask> will configure "
14873
"<application>ldapadduser</application> to prompt you for the attribute value "
14874
"during user creation."
14875
msgstr ""
14876
14877
#: serverguide/C/network-auth.xml:1525(para)
14878
msgid ""
14879
"There are more useful scripts in the package, to see a full list enter: "
14880
"<command>dpkg -L ldapscripts | grep bin</command>"
14881
msgstr ""
14882
14883
#: serverguide/C/network-auth.xml:1534(para)
14884
msgid ""
14885
"The <ulink url=\"https://help.ubuntu.com/community/OpenLDAPServer\">OpenLDAP "
14886
"Ubuntu Wiki</ulink> page has more details."
14887
msgstr ""
14888
14889
#: serverguide/C/network-auth.xml:1539(para)
14890
msgid ""
14891
"For more information see <ulink url=\"http://www.openldap.org/\">OpenLDAP "
14892
"Home Page</ulink>"
14893
msgstr ""
14894
14895
#: serverguide/C/network-auth.xml:1544(para)
14896
msgid ""
14897
"Though starting to show it's age, a great source for in depth LDAP "
14898
"information is O'Reilly's <ulink "
14899
"url=\"http://www.oreilly.com/catalog/ldapsa/\">LDAP System "
14900
"Administration</ulink>"
14901
msgstr ""
14902
14903
#: serverguide/C/network-auth.xml:1550(para)
14904
msgid ""
14905
"Packt's <ulink url=\"http://www.packtpub.com/OpenLDAP-Developers-Server-Open-"
14906
"Source-Linux/book\">Mastering OpenLDAP</ulink> is a great reference covering "
14907
"newer versions of OpenLDAP."
14908
msgstr ""
14909
14910
#: serverguide/C/network-auth.xml:1556(para)
14911
msgid ""
14912
"For more information on <application>auth-client-config</application> see "
14913
"the man page: <command>man auth-client-config</command>."
14914
msgstr ""
14915
14916
#: serverguide/C/network-auth.xml:1561(para)
14917
msgid ""
14918
"For more details regarding the <application>ldapscripts</application> "
14919
"package see the man pages: <command>man ldapscripts</command>, <command>man "
14920
"ldapadduser</command>, <command>man ldapaddgroup</command>, etc."
14921
msgstr ""
14922
14923
#: serverguide/C/network-auth.xml:1571(title)
14924
msgid "Samba and LDAP"
14925
msgstr ""
14926
14927
#: serverguide/C/network-auth.xml:1573(para)
14928
msgid ""
14929
"This section covers configuring Samba to use LDAP for user, group, and "
14930
"machine account information and authentication. The assumption is, you "
14931
"already have a working OpenLDAP directory installed and the server is "
14932
"configured to use it for authentication. See <xref linkend=\"openldap-"
14933
"server\"/> and <xref linkend=\"openldap-auth-config\"/> for details on "
14934
"setting up OpenLDAP. For more information on installing and configuring "
14935
"Samba see <xref linkend=\"windows-networking\"/>."
14936
msgstr ""
14937
14938
#: serverguide/C/network-auth.xml:1583(para)
14939
msgid ""
14940
"There are three packages needed when integrating Samba with LDAP. "
14941
"<application>samba</application>, <application>samba-doc</application>, and "
14942
"<application>smbldap-tools</application> packages . To install the packages, "
14943
"from a terminal enter:"
14944
msgstr ""
14945
14946
#: serverguide/C/network-auth.xml:1589(command)
14947
msgid "sudo apt-get install samba samba-doc smbldap-tools"
14948
msgstr ""
14949
14950
#: serverguide/C/network-auth.xml:1592(para)
14951
msgid ""
14952
"Strictly speaking the <application>smbldap-tools</application> package isn't "
14953
"needed, but unless you have another package or custom scripts, a method of "
14954
"managing users, groups, and computer accounts is needed."
14955
msgstr ""
14956
14957
#: serverguide/C/network-auth.xml:1599(title)
14958
msgid "OpenLDAP Configuration"
14959
msgstr ""
14960
14961
#: serverguide/C/network-auth.xml:1601(para)
14962
msgid ""
14963
"In order for Samba to use OpenLDAP as a <emphasis>passdb backend</emphasis>, "
14964
"the user objects in the directory will need additional attributes. This "
14965
"section assumes you want Samba to be configured as a Windows NT domain "
14966
"controller, and will add the necessary LDAP objects and attributes."
14967
msgstr ""
14968
14969
#: serverguide/C/network-auth.xml:1609(para)
14970
msgid ""
14971
"The Samba attributes are defined in the <filename>samba.schema</filename> "
14972
"file which is part of the <application>samba-doc</application> package. The "
14973
"schema file needs to be unzipped and copied to "
14974
"<filename>/etc/ldap/schema</filename>. From a terminal prompt enter:"
14975
msgstr ""
14976
14977
#: serverguide/C/network-auth.xml:1616(command)
14978
msgid ""
14979
"sudo cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz "
14980
"/etc/ldap/schema/"
14981
msgstr ""
14982
14983
#: serverguide/C/network-auth.xml:1617(command)
14984
msgid "sudo gzip -d /etc/ldap/schema/samba.schema.gz"
14985
msgstr ""
14986
14987
#: serverguide/C/network-auth.xml:1623(para)
14988
msgid ""
14989
"The <emphasis>samba</emphasis> schema needs to be added to the "
14990
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
14991
"<application>slapd</application> is also detailed in <xref "
14992
"linkend=\"openldap-configuration\"/>."
14993
msgstr ""
14994
14995
#: serverguide/C/network-auth.xml:1631(para) serverguide/C/network-auth.xml:2666(para)
14996
msgid ""
14997
"First, create a configuration file named "
14998
"<filename>schema_convert.conf</filename>, or a similar descriptive name, "
14999
"containing the following lines:"
15000
msgstr ""
15001
15002
#: serverguide/C/network-auth.xml:1636(programlisting)
15003
#, no-wrap
15004
msgid ""
15005
"\n"
15006
"include /etc/ldap/schema/core.schema\n"
15007
"include /etc/ldap/schema/collective.schema\n"
15008
"include /etc/ldap/schema/corba.schema\n"
15009
"include /etc/ldap/schema/cosine.schema\n"
15010
"include /etc/ldap/schema/duaconf.schema\n"
15011
"include /etc/ldap/schema/dyngroup.schema\n"
15012
"include /etc/ldap/schema/inetorgperson.schema\n"
15013
"include /etc/ldap/schema/java.schema\n"
15014
"include /etc/ldap/schema/misc.schema\n"
15015
"include /etc/ldap/schema/nis.schema\n"
15016
"include /etc/ldap/schema/openldap.schema\n"
15017
"include /etc/ldap/schema/ppolicy.schema\n"
15018
"include /etc/ldap/schema/samba.schema\n"
15019
msgstr ""
15020
15021
#: serverguide/C/network-auth.xml:1666(para) serverguide/C/network-auth.xml:2701(para)
15022
msgid ""
15023
"Now use <application>slapcat</application> to convert the schema files:"
15024
msgstr ""
15025
15026
#: serverguide/C/network-auth.xml:1671(command)
15027
msgid ""
15028
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
15029
"\"cn={12}samba,cn=schema,cn=config\" > /tmp/cn=samba.ldif"
15030
msgstr ""
15031
15032
#: serverguide/C/network-auth.xml:1674(para) serverguide/C/network-auth.xml:2709(para)
15033
msgid ""
15034
"Change the above file and path names to match your own if they are different."
15035
msgstr ""
15036
15037
#: serverguide/C/network-auth.xml:1681(para)
15038
msgid ""
15039
"Edit the generated <filename>/tmp/cn\\=samba.ldif</filename> file, changing "
15040
"the following attributes:"
15041
msgstr ""
15042
15043
#: serverguide/C/network-auth.xml:1685(programlisting)
15044
#, no-wrap
15045
msgid ""
15046
"\n"
15047
"dn: cn=samba,cn=schema,cn=config\n"
15048
"...\n"
15049
"cn: samba\n"
15050
msgstr ""
15051
15052
#: serverguide/C/network-auth.xml:1695(programlisting)
15053
#, no-wrap
15054
msgid ""
15055
"\n"
15056
"structuralObjectClass: olcSchemaConfig\n"
15057
"entryUUID: b53b75ca-083f-102d-9fff-2f64fd123c95\n"
15058
"creatorsName: cn=config\n"
15059
"createTimestamp: 20080827045234Z\n"
15060
"entryCSN: 20080827045234.341425Z#000000#000#000000\n"
15061
"modifiersName: cn=config\n"
15062
"modifyTimestamp: 20080827045234Z\n"
15063
msgstr ""
15064
15065
#: serverguide/C/network-auth.xml:1720(command)
15066
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=samba.ldif"
15067
msgstr ""
15068
15069
#: serverguide/C/network-auth.xml:1726(para)
15070
msgid ""
15071
"There should now be a <emphasis>dn: "
15072
"cn={X}misc,cn=schema,cn=config</emphasis>, where \"X\" is the next "
15073
"sequential schema, entry in the cn=config tree."
15074
msgstr ""
15075
15076
#: serverguide/C/network-auth.xml:1734(para)
15077
msgid ""
15078
"Copy and paste the following into a file named "
15079
"<filename>samba_indexes.ldif</filename>:"
15080
msgstr ""
15081
15082
#: serverguide/C/network-auth.xml:1738(programlisting)
15083
#, no-wrap
15084
msgid ""
15085
"\n"
15086
"dn: olcDatabase={1}hdb,cn=config\n"
15087
"changetype: modify\n"
15088
"add: olcDbIndex\n"
15089
"olcDbIndex: uidNumber eq\n"
15090
"olcDbIndex: gidNumber eq\n"
15091
"olcDbIndex: loginShell eq\n"
15092
"olcDbIndex: uid eq,pres,sub\n"
15093
"olcDbIndex: memberUid eq,pres,sub\n"
15094
"olcDbIndex: uniqueMember eq,pres\n"
15095
"olcDbIndex: sambaSID eq\n"
15096
"olcDbIndex: sambaPrimaryGroupSID eq\n"
15097
"olcDbIndex: sambaGroupType eq\n"
15098
"olcDbIndex: sambaSIDList eq\n"
15099
"olcDbIndex: sambaDomainName eq\n"
15100
"olcDbIndex: default sub\n"
15101
msgstr ""
15102
15103
#: serverguide/C/network-auth.xml:1756(para)
15104
msgid ""
15105
"Using the <application>ldapmodify</application> utility load the new indexes:"
15106
msgstr ""
15107
15108
#: serverguide/C/network-auth.xml:1761(command)
15109
msgid "ldapmodify -x -D cn=admin,cn=config -W -f samba_indexes.ldif"
15110
msgstr ""
15111
15112
#: serverguide/C/network-auth.xml:1763(para)
15113
msgid ""
15114
"If all went well you should see the new indexes using "
15115
"<application>ldapsearch</application>:"
15116
msgstr ""
15117
15118
#: serverguide/C/network-auth.xml:1768(command)
15119
msgid ""
15120
"ldapsearch -xLLL -D cn=admin,cn=config -x -b cn=config -W olcDatabase={1}hdb"
15121
msgstr ""
15122
15123
#: serverguide/C/network-auth.xml:1774(para)
15124
msgid ""
15125
"Next, configure the <application>smbldap-tools</application> package to "
15126
"match your environment. The package comes with a configuration script that "
15127
"will ask questions about the needed options. To run the script enter:"
15128
msgstr ""
15129
15130
#: serverguide/C/network-auth.xml:1780(command)
15131
msgid "sudo gzip -d /usr/share/doc/smbldap-tools/configure.pl.gz"
15132
msgstr ""
15133
15134
#: serverguide/C/network-auth.xml:1781(command)
15135
msgid "sudo perl /usr/share/doc/smbldap-tools/configure.pl"
15136
msgstr ""
15137
15138
#: serverguide/C/network-auth.xml:1784(para)
15139
msgid ""
15140
"Once you have answered the questions, there should be <filename>/etc/smbldap-"
15141
"tools/smbldap.conf</filename> and <filename>/etc/smbldap-"
15142
"tools/smbldap_bind.conf</filename> files. These files are generated by the "
15143
"configure script, so if you made any mistakes while executing the script it "
15144
"may be simpler to edit the file appropriately."
15145
msgstr ""
15146
15147
#: serverguide/C/network-auth.xml:1794(para)
15148
msgid ""
15149
"The <application>smbldap-populate</application> script will add the "
15150
"necessary users, groups, and LDAP objects required for Samba. It is a good "
15151
"idea to make a backup LDAP Data Interchange Format (LDIF) file with "
15152
"<application>slapcat</application> before executing the command:"
15153
msgstr ""
15154
15155
#: serverguide/C/network-auth.xml:1801(command)
15156
msgid "sudo slapcat -l backup.ldif"
15157
msgstr ""
15158
15159
#: serverguide/C/network-auth.xml:1807(para)
15160
msgid ""
15161
"Once you have a current backup execute <application>smbldap-"
15162
"populate</application> by entering:"
15163
msgstr ""
15164
15165
#: serverguide/C/network-auth.xml:1812(command)
15166
msgid "sudo smbldap-populate"
15167
msgstr ""
15168
15169
#: serverguide/C/network-auth.xml:1816(para)
15170
msgid ""
15171
"You can create an LDIF file containing the new Samba objects by executing "
15172
"<command>sudo smbldap-populate -e samba.ldif</command>. This allows you to "
15173
"look over the changes making sure everything is correct."
15174
msgstr ""
15175
15176
#: serverguide/C/network-auth.xml:1824(para)
15177
msgid ""
15178
"Your LDAP directory now has the necessary domain information to authenticate "
15179
"Samba users."
15180
msgstr ""
15181
15182
#: serverguide/C/network-auth.xml:1830(title)
15183
msgid "Samba Configuration"
15184
msgstr ""
15185
15186
#: serverguide/C/network-auth.xml:1832(para)
15187
msgid ""
15188
"There a multiple ways to configure Samba for details on some common "
15189
"configurations see <xref linkend=\"windows-networking\"/>. To configure "
15190
"Samba to use LDAP, edit the main Samba configuration file "
15191
"<filename>/etc/samba/smb.conf</filename> commenting the <emphasis>passdb "
15192
"backend</emphasis> option and adding the following:"
15193
msgstr ""
15194
15195
#: serverguide/C/network-auth.xml:1838(programlisting)
15196
#, no-wrap
15197
msgid ""
15198
"\n"
15199
"# passdb backend = tdbsam\n"
15200
"\n"
15201
"# LDAP Settings\n"
15202
" passdb backend = ldapsam:ldap://hostname\n"
15203
" ldap suffix = dc=example,dc=com\n"
15204
" ldap user suffix = ou=People\n"
15205
" ldap group suffix = ou=Groups\n"
15206
" ldap machine suffix = ou=Computers\n"
15207
" ldap idmap suffix = ou=Idmap\n"
15208
" ldap admin dn = cn=admin,dc=example,dc=com\n"
15209
" ldap ssl = start tls\n"
15210
" ldap passwd sync = yes\n"
15211
"...\n"
15212
" add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w \"%u\"\n"
15213
msgstr ""
15214
15215
#: serverguide/C/network-auth.xml:1855(para)
15216
msgid "Restart <application>samba</application> to enable the new settings:"
15217
msgstr ""
15218
15219
#: serverguide/C/network-auth.xml:1863(para)
15220
msgid ""
15221
"Now Samba needs to know the LDAP admin password. From a terminal prompt "
15222
"enter:"
15223
msgstr ""
15224
15225
#: serverguide/C/network-auth.xml:1868(command)
15226
msgid "sudo smbpasswd -w secret"
15227
msgstr ""
15228
15229
#: serverguide/C/network-auth.xml:1872(para)
15230
msgid ""
15231
"Replacing <emphasis role=\"italic\">secret</emphasis> with your LDAP admin "
15232
"password."
15233
msgstr ""
15234
15235
#: serverguide/C/network-auth.xml:1877(para)
15236
msgid ""
15237
"If you currently have users in LDAP, and you want them to authenticate using "
15238
"Samba, they will need some Samba attributes defined in the "
15239
"<filename>samba.schema</filename> file. Add the Samba attributes to existing "
15240
"users using the <application>smbpasswd</application> utility, replacing "
15241
"<emphasis role=\"italic\">username</emphasis> with an actual user:"
15242
msgstr ""
15243
15244
#: serverguide/C/network-auth.xml:1885(command)
15245
msgid "sudo smbpasswd -a username"
15246
msgstr ""
15247
15248
#: serverguide/C/network-auth.xml:1888(para)
15249
msgid "You will then be asked to enter the user's password."
15250
msgstr ""
15251
15252
#: serverguide/C/network-auth.xml:1892(para)
15253
msgid ""
15254
"To add new user, group, and machine accounts use the utilities from the "
15255
"<application>smbldap-tools</application> package. Here are some examples:"
15256
msgstr ""
15257
15258
#: serverguide/C/network-auth.xml:1899(para)
15259
msgid ""
15260
"To add a new user to LDAP with Samba attributes enter the following, "
15261
"replacing username with an actual username:"
15262
msgstr ""
15263
15264
#: serverguide/C/network-auth.xml:1903(command)
15265
msgid "sudo smbldap-useradd -a -P username"
15266
msgstr ""
15267
15268
#: serverguide/C/network-auth.xml:1905(para)
15269
msgid ""
15270
"The <emphasis>-a</emphasis> option adds the Samba attributes, and the "
15271
"<emphasis>-P</emphasis> options calls the <application>smbldap-"
15272
"passwd</application> utility after the user is created allowing you to enter "
15273
"a password for the user."
15274
msgstr ""
15275
15276
#: serverguide/C/network-auth.xml:1911(para)
15277
msgid "To remove a user from the directory enter:"
15278
msgstr ""
15279
15280
#: serverguide/C/network-auth.xml:1915(command)
15281
msgid "sudo smbldap-userdel username"
15282
msgstr ""
15283
15284
#: serverguide/C/network-auth.xml:1917(para)
15285
msgid ""
15286
"The <application>smbldap-userdel</application> utility also has a <emphasis>-"
15287
"r</emphasis> option to remove the user's home directory."
15288
msgstr ""
15289
15290
#: serverguide/C/network-auth.xml:1922(para)
15291
msgid ""
15292
"Use <application>smbldap-groupadd</application> to add a group, replacing "
15293
"groupname with an appropriate group:"
15294
msgstr ""
15295
15296
#: serverguide/C/network-auth.xml:1926(command)
15297
msgid "sudo smbldap-groupadd -a groupname"
15298
msgstr ""
15299
15300
#: serverguide/C/network-auth.xml:1928(para)
15301
msgid ""
15302
"Similar to <application>smbldap-useradd</application>, the <emphasis>-"
15303
"a</emphasis> adds the Samba attributes."
15304
msgstr ""
15305
15306
#: serverguide/C/network-auth.xml:1933(para)
15307
msgid ""
15308
"To add a user to a group use <application>smbldap-groupmod</application>:"
15309
msgstr ""
15310
15311
#: serverguide/C/network-auth.xml:1937(command)
15312
msgid "sudo smbldap-groupmod -m username groupname"
15313
msgstr ""
15314
15315
#: serverguide/C/network-auth.xml:1939(para)
15316
msgid ""
15317
"Be sure to replace <emphasis>username</emphasis> with a real user. Also, the "
15318
"<emphasis>-m</emphasis> option can add more than one user at a time by "
15319
"listing them in <emphasis>comma separated</emphasis> format."
15320
msgstr ""
15321
15322
#: serverguide/C/network-auth.xml:1945(para)
15323
msgid ""
15324
"<application>smbldap-groupmod</application> can also be used to remove a "
15325
"user from a group:"
15326
msgstr ""
15327
15328
#: serverguide/C/network-auth.xml:1949(command)
15329
msgid "sudo smbldap-groupmod -x username groupname"
15330
msgstr ""
15331
15332
#: serverguide/C/network-auth.xml:1953(para)
15333
msgid ""
15334
"Additionally, the <application>smbldap-useradd</application> utility can add "
15335
"Samba machine accounts:"
15336
msgstr ""
15337
15338
#: serverguide/C/network-auth.xml:1957(command)
15339
msgid "sudo smbldap-useradd -t 0 -w username"
15340
msgstr ""
15341
15342
#: serverguide/C/network-auth.xml:1959(para)
15343
msgid ""
15344
"Replace <emphasis>username</emphasis> with the name of the workstation. The "
15345
"<emphasis>-t 0</emphasis> option creates the machine account without a "
15346
"delay, while the <emphasis>-w</emphasis> option specifies the user as a "
15347
"machine account. Also, note the <emphasis>add machine script</emphasis> "
15348
"option in <filename>/etc/samba/smb.conf</filename> was changed to use "
15349
"<application>smbldap-useradd</application>."
15350
msgstr ""
15351
15352
#: serverguide/C/network-auth.xml:1968(para)
15353
msgid ""
15354
"There are more useful utilities and options in the <application>smbldap-"
15355
"tools</application> package. The man page for each utility provides more "
15356
"details."
15357
msgstr ""
15358
15359
#: serverguide/C/network-auth.xml:1979(para)
15360
msgid ""
15361
"There are multiple places where LDAP and Samba is documented in the <ulink "
15362
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
15363
"Collection</ulink>."
15364
msgstr ""
15365
15366
#: serverguide/C/network-auth.xml:1985(para)
15367
msgid ""
15368
"Specifically see the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
15369
"HOWTO-Collection/passdb.html\">passdb section</ulink>."
15370
msgstr ""
15371
15372
#: serverguide/C/network-auth.xml:1991(para)
15373
msgid ""
15374
"Another good site is <ulink url=\"http://www.iallanis.info/smbldap-"
15375
"tools/docs/samba-ldap-howto/\">Samba OpenLDAP HOWTO</ulink>."
15376
msgstr ""
15377
15378
#: serverguide/C/network-auth.xml:1997(para)
15379
msgid ""
15380
"Again, for more information on <application>smbldap-tools</application> see "
15381
"the man pages: <command>man smbldap-useradd</command>, <command>man smbldap-"
15382
"groupadd</command>, <command>man smbldap-populate</command>, etc."
15383
msgstr ""
15384
15385
#: serverguide/C/network-auth.xml:2004(para)
15386
msgid ""
15387
"Also, there is a list of <ulink "
15388
"url=\"https://help.ubuntu.com/community/Samba#samba-ldap\">Ubuntu "
15389
"wiki</ulink> articles with more information."
15390
msgstr ""
15391
15392
#: serverguide/C/network-auth.xml:2013(title)
15393
msgid "Kerberos"
15394
msgstr "Kerberos"
15395
15396
#: serverguide/C/network-auth.xml:2015(para)
15397
msgid ""
15398
"<application>Kerberos</application> is a network authentication system based "
15399
"on the principal of a trusted third party. The other two parties being the "
15400
"user and the service the user wishes to authenticate to. Not all services "
15401
"and applications can use Kerberos, but for those that can, it brings the "
15402
"network environment one step closer to being Single Sign On (SSO)."
15403
msgstr ""
15404
15405
#: serverguide/C/network-auth.xml:2021(para)
15406
msgid ""
15407
"This section covers installation and configuration of a Kerberos server, and "
15408
"some example client configurations."
15409
msgstr ""
15410
15411
#: serverguide/C/network-auth.xml:2028(para)
15412
msgid ""
15413
"If you are new to Kerberos there are a few terms that are good to understand "
15414
"before setting up a Kerberos server. Most of the terms will relate to things "
15415
"you may be familiar with in other environments:"
15416
msgstr ""
15417
15418
#: serverguide/C/network-auth.xml:2035(para)
15419
msgid ""
15420
"<emphasis>Principal:</emphasis> any users, computers, and services provided "
15421
"by servers need to be defined as Kerberos Principals."
15422
msgstr ""
15423
15424
#: serverguide/C/network-auth.xml:2040(para)
15425
msgid ""
15426
"<emphasis>Instances:</emphasis> are used for service principals and special "
15427
"administrative principals."
15428
msgstr ""
15429
15430
#: serverguide/C/network-auth.xml:2045(para)
15431
msgid ""
15432
"<emphasis>Realms:</emphasis> the unique realm of control provided by the "
15433
"Kerberos installation. Usually the DNS domain converted to uppercase "
15434
"(EXAMPLE.COM)."
15435
msgstr ""
15436
15437
#: serverguide/C/network-auth.xml:2051(para)
15438
msgid ""
15439
"<emphasis>Key Distribution Center:</emphasis> (KDC) consist of three parts, "
15440
"a database of all principals, the authentication server, and the ticket "
15441
"granting server. For each realm there must be at least one KDC."
15442
msgstr ""
15443
15444
#: serverguide/C/network-auth.xml:2057(para)
15445
msgid ""
15446
"<emphasis>Ticket Granting Ticket:</emphasis> issued by the Authentication "
15447
"Server (AS), the Ticket Granting Ticket (TGT) is encrypted in the user's "
15448
"password which is known only to the user and the KDC."
15449
msgstr ""
15450
15451
#: serverguide/C/network-auth.xml:2063(para)
15452
msgid ""
15453
"<emphasis>Ticket Granting Server:</emphasis> (TGS) issues service tickets to "
15454
"clients upon request."
15455
msgstr ""
15456
15457
#: serverguide/C/network-auth.xml:2068(para)
15458
msgid ""
15459
"<emphasis>Tickets:</emphasis> confirm the identity of the two principals. "
15460
"One principal being a user and the other a service requested by the user. "
15461
"Tickets establish an encryption key used for secure communication during the "
15462
"authenticated session."
15463
msgstr ""
15464
15465
#: serverguide/C/network-auth.xml:2074(para)
15466
msgid ""
15467
"<emphasis>Keytab Files:</emphasis> are files extracted from the KDC "
15468
"principal database and contain the encryption key for a service or host."
15469
msgstr ""
15470
15471
#: serverguide/C/network-auth.xml:2081(para)
15472
msgid ""
15473
"To put the pieces together, a Realm has at least one KDC, preferably two for "
15474
"redundancy, which contains a database of Principals. When a user principal "
15475
"logs into a workstation, configured for Kerberos authentication, the KDC "
15476
"issues a Ticket Granting Ticket (TGT). If the user supplied credentials "
15477
"match, the user is authenticated and can then request tickets for Kerberized "
15478
"services from the Ticket Granting Server (TGS). The service tickets allow "
15479
"the user to authenticate to the service without entering another username "
15480
"and password."
15481
msgstr ""
15482
15483
#: serverguide/C/network-auth.xml:2090(title)
15484
msgid "Kerberos Server"
15485
msgstr ""
15486
15487
#: serverguide/C/network-auth.xml:2094(para)
15488
msgid ""
15489
"Before installing the Kerberos server a properly configured DNS server is "
15490
"needed for your domain. Since the Kerberos Realm by convention matches the "
15491
"domain name, this section uses the <emphasis>example.com</emphasis> domain "
15492
"configured in <xref linkend=\"dns-primarymaster-configuration\"/>."
15493
msgstr ""
15494
15495
#: serverguide/C/network-auth.xml:2100(para)
15496
msgid ""
15497
"Also, Kerberos is a time sensitive protocol. So if the local system time "
15498
"between a client machine and the server differs by more than five minutes "
15499
"(by default), the workstation will not be able to authenticate. To correct "
15500
"the problem all hosts should have their time synchronized using the "
15501
"<emphasis>Network Time Protocol (NTP)</emphasis>. For details on setting up "
15502
"NTP see <xref linkend=\"NTP\"/>."
15503
msgstr ""
15504
15505
#: serverguide/C/network-auth.xml:2107(para)
15506
msgid ""
15507
"The first step in installing a Kerberos Realm is to install the "
15508
"<application>krb5-kdc</application> and <application>krb5-admin-"
15509
"server</application> packages. From a terminal enter:"
15510
msgstr ""
15511
15512
#: serverguide/C/network-auth.xml:2113(command) serverguide/C/network-auth.xml:2288(command)
15513
msgid "sudo apt-get install krb5-kdc krb5-admin-server"
15514
msgstr ""
15515
15516
#: serverguide/C/network-auth.xml:2116(para)
15517
msgid ""
15518
"You will be asked at the end of the install to supply a name for the "
15519
"Kerberos and Admin servers, which may or may not be the same server, for the "
15520
"realm."
15521
msgstr ""
15522
15523
#: serverguide/C/network-auth.xml:2121(para)
15524
msgid ""
15525
"Next, create the new realm with the <application>kdb5_newrealm</application> "
15526
"utility:"
15527
msgstr ""
15528
15529
#: serverguide/C/network-auth.xml:2126(command)
15530
msgid "sudo krb5_newrealm"
15531
msgstr ""
15532
15533
#: serverguide/C/network-auth.xml:2133(para)
15534
msgid ""
15535
"The questions asked during installation are used to configure the "
15536
"<filename>/etc/krb5.conf</filename> file. If you need to adjust the Key "
15537
"Distribution Center (KDC) settings simply edit the file and restart the "
15538
"<application>krb5-kdc</application> daemon."
15539
msgstr ""
15540
15541
#: serverguide/C/network-auth.xml:2141(para)
15542
msgid ""
15543
"Now that the KDC running an admin user is needed. It is recommended to use a "
15544
"different username from your everyday username. Using the "
15545
"<application>kadmin.local</application> utility in a terminal prompt enter:"
15546
msgstr ""
15547
15548
#: serverguide/C/network-auth.xml:2147(command) serverguide/C/network-auth.xml:2943(command)
15549
msgid "sudo kadmin.local"
15550
msgstr ""
15551
15552
#: serverguide/C/network-auth.xml:2148(computeroutput)
15553
#, no-wrap
15554
msgid ""
15555
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
15556
"kadmin.local:"
15557
msgstr ""
15558
15559
#: serverguide/C/network-auth.xml:2149(userinput)
15560
#, no-wrap
15561
msgid " addprinc steve/admin"
15562
msgstr ""
15563
15564
#: serverguide/C/network-auth.xml:2150(computeroutput)
15565
#, no-wrap
15566
msgid ""
15567
"WARNING: no policy specified for steve/admin@EXAMPLE.COM; defaulting to no "
15568
"policy\n"
15569
"Enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15570
"Re-enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
15571
"Principal \"steve/admin@EXAMPLE.COM\" created.\n"
15572
"kadmin.local:"
15573
msgstr ""
15574
15575
#: serverguide/C/network-auth.xml:2154(userinput)
15576
#, no-wrap
15577
msgid " quit"
15578
msgstr ""
15579
15580
#: serverguide/C/network-auth.xml:2157(para)
15581
msgid ""
15582
"In the above example <emphasis role=\"italic\">steve</emphasis> is the "
15583
"<emphasis>Principal</emphasis>, <emphasis role=\"italic\">/admin</emphasis> "
15584
"is an <emphasis>Instance</emphasis>, and <emphasis "
15585
"role=\"italic\">@EXAMPLE.COM</emphasis> signifies the realm. The <emphasis "
15586
"role=\"italic\">\"every day\"</emphasis> Principal would be "
15587
"<emphasis>steve@EXAMPLE.COM</emphasis>, and should have only normal user "
15588
"rights."
15589
msgstr ""
15590
15591
#: serverguide/C/network-auth.xml:2165(para)
15592
msgid ""
15593
"Replace <emphasis>EXAMPLE.COM</emphasis> and <emphasis>steve</emphasis> with "
15594
"your Realm and admin username."
15595
msgstr ""
15596
15597
#: serverguide/C/network-auth.xml:2173(para)
15598
msgid ""
15599
"Next, the new admin user needs to have the appropriate Access Control List "
15600
"(ACL) permissions. The permissions are configured in the "
15601
"<filename>/etc/krb5kdc/kadm5.acl</filename> file:"
15602
msgstr ""
15603
15604
#: serverguide/C/network-auth.xml:2178(programlisting)
15605
#, no-wrap
15606
msgid ""
15607
"\n"
15608
"steve/admin@EXAMPLE.COM *\n"
15609
msgstr ""
15610
15611
#: serverguide/C/network-auth.xml:2182(para)
15612
msgid ""
15613
"This entry grants <emphasis>steve/admin</emphasis> the ability to perform "
15614
"any operation on all principals in the realm."
15615
msgstr ""
15616
15617
#: serverguide/C/network-auth.xml:2189(para)
15618
msgid ""
15619
"Now restart the <application>krb5-admin-server</application> for the new ACL "
15620
"to take affect:"
15621
msgstr ""
15622
15623
#: serverguide/C/network-auth.xml:2194(command)
15624
msgid "sudo /etc/init.d/krb5-admin-server restart"
15625
msgstr ""
15626
15627
#: serverguide/C/network-auth.xml:2200(para)
15628
msgid ""
15629
"The new user principal can be tested using the <application>kinit "
15630
"utility</application>:"
15631
msgstr ""
15632
15633
#: serverguide/C/network-auth.xml:2205(command)
15634
msgid "kinit steve/admin"
15635
msgstr ""
15636
15637
#: serverguide/C/network-auth.xml:2206(computeroutput)
15638
#, no-wrap
15639
msgid "steve/admin@EXAMPLE.COM's Password:"
15640
msgstr ""
15641
15642
#: serverguide/C/network-auth.xml:2209(para)
15643
msgid ""
15644
"After entering the password, use the <application>klist</application> "
15645
"utility to view information about the Ticket Granting Ticket (TGT):"
15646
msgstr ""
15647
15648
#: serverguide/C/network-auth.xml:2215(command) serverguide/C/network-auth.xml:2550(command)
15649
msgid "klist"
15650
msgstr ""
15651
15652
#: serverguide/C/network-auth.xml:2216(computeroutput)
15653
#, no-wrap
15654
msgid ""
15655
"Credentials cache: FILE:/tmp/krb5cc_1000\n"
15656
" Principal: steve/admin@EXAMPLE.COM\n"
15657
"\n"
15658
" Issued Expires Principal\n"
15659
"Jul 13 17:53:34 Jul 14 03:53:34 krbtgt/EXAMPLE.COM@EXAMPLE.COM"
15660
msgstr ""
15661
15662
#: serverguide/C/network-auth.xml:2223(para)
15663
msgid ""
15664
"You may need to add an entry into the <filename>/etc/hosts</filename> for "
15665
"the KDC. For example:"
15666
msgstr ""
15667
15668
#: serverguide/C/network-auth.xml:2227(programlisting)
15669
#, no-wrap
15670
msgid ""
15671
"\n"
15672
"192.168.0.1 kdc01.example.com kdc01\n"
15673
msgstr ""
15674
15675
#: serverguide/C/network-auth.xml:2231(para)
15676
msgid ""
15677
"Replacing <emphasis>192.168.0.1</emphasis> with the IP address of your KDC."
15678
msgstr ""
15679
15680
#: serverguide/C/network-auth.xml:2238(para)
15681
msgid ""
15682
"In order for clients to determine the KDC for the Realm some DNS SRV records "
15683
"are needed. Add the following to "
15684
"<filename>/etc/named/db.example.com</filename>:"
15685
msgstr ""
15686
15687
#: serverguide/C/network-auth.xml:2243(programlisting)
15688
#, no-wrap
15689
msgid ""
15690
"\n"
15691
"_kerberos._udp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15692
"_kerberos._tcp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
15693
"_kerberos._udp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15694
"_kerberos._tcp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
15695
"_kerberos-adm._tcp.EXAMPLE.COM. IN SRV 1 0 749 kdc01.example.com.\n"
15696
"_kpasswd._udp.EXAMPLE.COM. IN SRV 1 0 464 kdc01.example.com.\n"
15697
msgstr ""
15698
15699
#: serverguide/C/network-auth.xml:2253(para)
15700
msgid ""
15701
"Replace <emphasis>EXAMPLE.COM</emphasis>, <emphasis>kdc01</emphasis>, and "
15702
"<emphasis>kdc02</emphasis> with your domain name, primary KDC, and secondary "
15703
"KDC."
15704
msgstr ""
15705
15706
#: serverguide/C/network-auth.xml:2259(para)
15707
msgid ""
15708
"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."
15709
msgstr ""
15710
15711
#: serverguide/C/network-auth.xml:2266(para)
15712
msgid "Your new Kerberos Realm is now ready to authenticate clients."
15713
msgstr ""
15714
15715
#: serverguide/C/network-auth.xml:2273(title)
15716
msgid "Secondary KDC"
15717
msgstr ""
15718
15719
#: serverguide/C/network-auth.xml:2275(para)
15720
msgid ""
15721
"Once you have one Key Distribution Center (KDC) on your network, it is good "
15722
"practice to have a Secondary KDC in case the primary becomes unavailable."
15723
msgstr ""
15724
15725
#: serverguide/C/network-auth.xml:2283(para)
15726
msgid ""
15727
"First, install the packages, and when asked for the Kerberos and Admin "
15728
"server names enter the name of the Primary KDC:"
15729
msgstr ""
15730
15731
#: serverguide/C/network-auth.xml:2294(para)
15732
msgid ""
15733
"Once you have the packages installed, create the Secondary KDC's host "
15734
"principal. From a terminal prompt, enter:"
15735
msgstr ""
15736
15737
#: serverguide/C/network-auth.xml:2299(command)
15738
msgid "kadmin -q \"addprinc -randkey host/kdc02.example.com\""
15739
msgstr ""
15740
15741
#: serverguide/C/network-auth.xml:2303(para)
15742
msgid ""
15743
"After, issuing any <application>kadmin</application> commands you will be "
15744
"prompted for your <emphasis>username/admin@EXAMPLE.COM</emphasis> principal "
15745
"password."
15746
msgstr ""
15747
15748
#: serverguide/C/network-auth.xml:2312(para)
15749
msgid "Extract the <emphasis>keytab</emphasis> file:"
15750
msgstr ""
15751
15752
#: serverguide/C/network-auth.xml:2317(command)
15753
msgid "kadmin -q \"ktadd -k keytab.kdc02 host/kdc02.example.com\""
15754
msgstr ""
15755
15756
#: serverguide/C/network-auth.xml:2323(para)
15757
msgid ""
15758
"There should now be a <filename>keytab.kdc02</filename> in the current "
15759
"directory, move the file to <filename>/etc/krb5.keytab</filename>:"
15760
msgstr ""
15761
15762
#: serverguide/C/network-auth.xml:2329(command)
15763
msgid "sudo mv keytab.kdc02 /etc/krb5.keytab"
15764
msgstr ""
15765
15766
#: serverguide/C/network-auth.xml:2333(para)
15767
msgid ""
15768
"If the path to the <filename>keytab.kdc02</filename> file is different "
15769
"adjust accordingly."
15770
msgstr ""
15771
15772
#: serverguide/C/network-auth.xml:2338(para)
15773
msgid ""
15774
"Also, you can list the principals in a Keytab file, which can be useful when "
15775
"troubleshooting, using the <application>klist</application> utility:"
15776
msgstr ""
15777
15778
#: serverguide/C/network-auth.xml:2344(command)
15779
msgid "sudo klist -k /etc/krb5.keytab"
15780
msgstr ""
15781
15782
#: serverguide/C/network-auth.xml:2350(para)
15783
msgid ""
15784
"Next, there needs to be a <filename>kpropd.acl</filename> file on each KDC "
15785
"that lists all KDCs for the Realm. For example, on both primary and "
15786
"secondary KDC, create <filename>/etc/krb5kdc/kpropd.acl</filename>:"
15787
msgstr ""
15788
15789
#: serverguide/C/network-auth.xml:2355(programlisting)
15790
#, no-wrap
15791
msgid ""
15792
"\n"
15793
"host/kdc01.example.com@EXAMPLE.COM\n"
15794
"host/kdc02.example.com@EXAMPLE.COM\n"
15795
msgstr ""
15796
15797
#: serverguide/C/network-auth.xml:2363(para)
15798
msgid "Create an empty database on the <emphasis>Secondary KDC</emphasis>:"
15799
msgstr ""
15800
15801
#: serverguide/C/network-auth.xml:2368(command)
15802
msgid "sudo kdb5_util -s create"
15803
msgstr ""
15804
15805
#: serverguide/C/network-auth.xml:2374(para)
15806
msgid ""
15807
"Now start the <application>kpropd</application> daemon, which listens for "
15808
"connections from the <application>kprop</application> utility. "
15809
"<application>kprop</application> is used to transfer dump files:"
15810
msgstr ""
15811
15812
#: serverguide/C/network-auth.xml:2381(command)
15813
msgid "sudo kpropd -S"
15814
msgstr ""
15815
15816
#: serverguide/C/network-auth.xml:2387(para)
15817
msgid ""
15818
"From a terminal on the <emphasis>Primary KDC</emphasis>, create a dump file "
15819
"of the principal database:"
15820
msgstr ""
15821
15822
#: serverguide/C/network-auth.xml:2392(command)
15823
msgid "sudo kdb5_util dump /var/lib/krb5kdc/dump"
15824
msgstr ""
15825
15826
#: serverguide/C/network-auth.xml:2398(para)
15827
msgid ""
15828
"Extract the Primary KDC's <emphasis>keytab</emphasis> file and copy it to "
15829
"<filename>/etc/krb5.keytab</filename>:"
15830
msgstr ""
15831
15832
#: serverguide/C/network-auth.xml:2403(command)
15833
msgid "kadmin -q \"ktadd -k keytab.kdc01 host/kdc01.example.com\""
15834
msgstr ""
15835
15836
#: serverguide/C/network-auth.xml:2404(command)
15837
msgid "sudo mv keytab.kdc01 /etc/kr5b.keytab"
15838
msgstr ""
15839
15840
#: serverguide/C/network-auth.xml:2408(para)
15841
msgid ""
15842
"Make sure there is a <emphasis>host</emphasis> for "
15843
"<emphasis>kdc01.example.com</emphasis> before extracting the Keytab."
15844
msgstr ""
15845
15846
#: serverguide/C/network-auth.xml:2416(para)
15847
msgid ""
15848
"Using the <application>kprop</application> utility push the database to the "
15849
"Secondary KDC:"
15850
msgstr ""
15851
15852
#: serverguide/C/network-auth.xml:2421(command)
15853
msgid "sudo kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com"
15854
msgstr ""
15855
15856
#: serverguide/C/network-auth.xml:2425(para)
15857
msgid ""
15858
"There should be a <emphasis>SUCCEEDED</emphasis> message if the propagation "
15859
"worked. If there is an error message check "
15860
"<filename>/var/log/syslog</filename> on the secondary KDC for more "
15861
"information."
15862
msgstr ""
15863
15864
#: serverguide/C/network-auth.xml:2431(para)
15865
msgid ""
15866
"You may also want to create a <application>cron</application> job to "
15867
"periodically update the database on the Secondary KDC. For example, the "
15868
"following will push the database every hour:"
15869
msgstr ""
15870
15871
#: serverguide/C/network-auth.xml:2436(programlisting)
15872
#, no-wrap
15873
msgid ""
15874
"\n"
15875
"# m h dom mon dow command\n"
15876
"0 * * * * /usr/sbin/kdb5_util dump /var/lib/krb5kdc/dump && "
15877
"/usr/sbin/kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com\n"
15878
msgstr ""
15879
15880
#: serverguide/C/network-auth.xml:2444(para)
15881
msgid ""
15882
"Back on the <emphasis>Secondary KDC</emphasis>, create a "
15883
"<emphasis>stash</emphasis> file to hold the Kerberos master key:"
15884
msgstr ""
15885
15886
#: serverguide/C/network-auth.xml:2450(command)
15887
msgid "sudo kdb5_util stash"
15888
msgstr ""
15889
15890
#: serverguide/C/network-auth.xml:2456(para)
15891
msgid ""
15892
"Finally, start the <application>krb5-kdc</application> daemon on the "
15893
"Secondary KDC:"
15894
msgstr ""
15895
15896
#: serverguide/C/network-auth.xml:2461(command) serverguide/C/network-auth.xml:3073(command)
15897
msgid "sudo /etc/init.d/krb5-kdc start"
15898
msgstr ""
15899
15900
#: serverguide/C/network-auth.xml:2467(para)
15901
msgid ""
15902
"The <emphasis>Secondary KDC</emphasis> should now be able to issue tickets "
15903
"for the Realm. You can test this by stopping the <application>krb5-"
15904
"kdc</application> daemon on the Primary KDC, then use "
15905
"<application>kinit</application> to request a ticket. If all goes well you "
15906
"should receive a ticket from the Secondary KDC."
15907
msgstr ""
15908
15909
#: serverguide/C/network-auth.xml:2475(title)
15910
msgid "Kerberos Linux Client"
15911
msgstr ""
15912
15913
#: serverguide/C/network-auth.xml:2477(para)
15914
msgid ""
15915
"This section covers configuring a Linux system as a "
15916
"<application>Kerberos</application> client. This will allow access to any "
15917
"kerberized services once a user has successfully logged into the system."
15918
msgstr ""
15919
15920
#: serverguide/C/network-auth.xml:2485(para)
15921
msgid ""
15922
"In order to authenticate to a Kerberos Realm, the <application>krb5-"
15923
"user</application> and <application>libpam-krb5</application> packages are "
15924
"needed, along with a few others that are not strictly necessary but make "
15925
"life easier. To install the packages enter the following in a terminal "
15926
"prompt:"
15927
msgstr ""
15928
15929
#: serverguide/C/network-auth.xml:2492(command)
15930
msgid ""
15931
"sudo apt-get install krb5-user libpam-krb5 libpam-ccreds auth-client-config"
15932
msgstr ""
15933
15934
#: serverguide/C/network-auth.xml:2495(para)
15935
msgid ""
15936
"The <application>auth-client-config</application> package allows simple "
15937
"configuration of PAM for authentication from multiple sources, and the "
15938
"<application>libpam-ccreds</application> will cache authentication "
15939
"credentials allowing you to login in case the Key Distribution Center (KDC) "
15940
"is unavailable. This package is also useful for laptops that may "
15941
"authenticate using Kerberos while on the corporate network, but will need to "
15942
"be accessed off the network as well."
15943
msgstr ""
15944
15945
#: serverguide/C/network-auth.xml:2506(para)
15946
msgid "To configure the client in a terminal enter:"
15947
msgstr ""
15948
15949
#: serverguide/C/network-auth.xml:2511(command)
15950
msgid "sudo dpkg-reconfigure krb5-config"
15951
msgstr ""
15952
15953
#: serverguide/C/network-auth.xml:2514(para)
15954
msgid ""
15955
"You will then be prompted to enter the name of the Kerberos Realm. Also, if "
15956
"you don't have DNS configured with Kerberos <emphasis>SRV</emphasis> "
15957
"records, the menu will prompt you for the hostname of the Key Distribution "
15958
"Center (KDC) and Realm Administration server."
15959
msgstr ""
15960
15961
#: serverguide/C/network-auth.xml:2520(para)
15962
msgid ""
15963
"The <application>dpkg-reconfigure</application> adds entries to the "
15964
"<filename>/etc/krb5.conf</filename> file for your Realm. You should have "
15965
"entries similar to the following:"
15966
msgstr ""
15967
15968
#: serverguide/C/network-auth.xml:2525(programlisting)
15969
#, no-wrap
15970
msgid ""
15971
"\n"
15972
"[libdefaults]\n"
15973
" default_realm = EXAMPLE.COM\n"
15974
"...\n"
15975
"[realms]\n"
15976
" EXAMPLE.COM = } \n"
15977
" kdc = 192.168.0.1 \n"
15978
" admin_server = 192.168.0.1\n"
15979
" }\n"
15980
msgstr ""
15981
15982
#: serverguide/C/network-auth.xml:2536(para)
15983
msgid ""
15984
"You can test the configuration by requesting a ticket using the "
15985
"<application>kinit</application> utility. For example:"
15986
msgstr ""
15987
15988
#: serverguide/C/network-auth.xml:2541(command)
15989
msgid "kinit steve@EXAMPLE.COM"
15990
msgstr ""
15991
15992
#: serverguide/C/network-auth.xml:2542(computeroutput)
15993
#, no-wrap
15994
msgid "Password for steve@EXAMPLE.COM:"
15995
msgstr ""
15996
15997
#: serverguide/C/network-auth.xml:2545(para)
15998
msgid ""
15999
"When a ticket has been granted, the details can be viewed using "
16000
"<application>klist</application>:"
16001
msgstr ""
16002
16003
#: serverguide/C/network-auth.xml:2551(computeroutput)
16004
#, no-wrap
16005
msgid ""
16006
"Ticket cache: FILE:/tmp/krb5cc_1000\n"
16007
"Default principal: steve@EXAMPLE.COM\n"
16008
"\n"
16009
"Valid starting Expires Service principal\n"
16010
"07/24/08 05:18:56 07/24/08 15:18:56 krbtgt/EXAMPLE.COM@EXAMPLE.COM\n"
16011
" renew until 07/25/08 05:18:57\n"
16012
"\n"
16013
"\n"
16014
"Kerberos 4 ticket cache: /tmp/tkt1000\n"
16015
"klist: You have no tickets cached"
16016
msgstr ""
16017
16018
#: serverguide/C/network-auth.xml:2563(para)
16019
msgid ""
16020
"Next, use the <application>auth-client-config</application> to configure the "
16021
"<application>libpam-krb5</application> module to request a ticket during "
16022
"login:"
16023
msgstr ""
16024
16025
#: serverguide/C/network-auth.xml:2569(command)
16026
msgid "sudo auth-client-config -a -p kerberos_example"
16027
msgstr ""
16028
16029
#: serverguide/C/network-auth.xml:2572(para)
16030
msgid ""
16031
"You will should now receive a ticket upon successful login authentication."
16032
msgstr ""
16033
16034
#: serverguide/C/network-auth.xml:2583(para)
16035
msgid ""
16036
"For more information on Kerberos see the <ulink "
16037
"url=\"http://web.mit.edu/Kerberos/\">MIT Kerberos</ulink> site."
16038
msgstr ""
16039
16040
#: serverguide/C/network-auth.xml:2588(para)
16041
msgid ""
16042
"The <ulink url=\"https://help.ubuntu.com/community/Kerberos\">Ubuntu Wiki "
16043
"Kerberos</ulink> page has more details."
16044
msgstr ""
16045
16046
#: serverguide/C/network-auth.xml:2593(para)
16047
msgid ""
16048
"O'Reilly's <ulink "
16049
"url=\"http://oreilly.com/catalog/9780596004033/\">Kerberos: The Definitive "
16050
"Guide</ulink> is a great reference when setting up Kerberos."
16051
msgstr ""
16052
16053
#: serverguide/C/network-auth.xml:2599(para)
16054
msgid ""
16055
"Also, feel free to stop by the <emphasis>#ubuntu-server</emphasis> IRC "
16056
"channel on <ulink url=\"http://freenode.net/\">Freenode</ulink> if you have "
16057
"Kerberos questions."
16058
msgstr ""
16059
16060
#: serverguide/C/network-auth.xml:2609(title)
16061
msgid "Kerberos and LDAP"
16062
msgstr ""
16063
16064
#: serverguide/C/network-auth.xml:2611(para)
16065
msgid ""
16066
"Replicating a Kerberos principal database between two servers can be "
16067
"complicated, and adds an additional user database to your network. "
16068
"Fortunately, MIT Kerberos can be configured to use an "
16069
"<application>LDAP</application> directory as a principal database. This "
16070
"section covers configuring a primary and secondary kerberos server to use "
16071
"<application>OpenLDAP</application> for the principal database."
16072
msgstr ""
16073
16074
#: serverguide/C/network-auth.xml:2619(title)
16075
msgid "Configuring OpenLDAP"
16076
msgstr ""
16077
16078
#: serverguide/C/network-auth.xml:2621(para)
16079
msgid ""
16080
"First, the necessary <emphasis>schema</emphasis> needs to be loaded on an "
16081
"<application>OpenLDAP</application> server that has network connectivity to "
16082
"the Primary and Secondary KDCs. The rest of this section assumes that you "
16083
"also have LDAP replication configured between at least two servers. For "
16084
"information on setting up OpenLDAP see <xref linkend=\"openldap-server\"/>."
16085
msgstr ""
16086
16087
#: serverguide/C/network-auth.xml:2628(para)
16088
msgid ""
16089
"It is also required to configure OpenLDAP for TLS and SSL connections, so "
16090
"that traffic between the KDC and LDAP server is encrypted. See <xref "
16091
"linkend=\"openldap-tls\"/> for details."
16092
msgstr ""
16093
16094
#: serverguide/C/network-auth.xml:2635(para)
16095
msgid ""
16096
"To load the schema into LDAP, on the LDAP server install the "
16097
"<application>krb5-kdc-ldap</application> package. From a terminal enter:"
16098
msgstr ""
16099
16100
#: serverguide/C/network-auth.xml:2641(command)
16101
msgid "sudo apt-get install krb5-kdc-ldap"
16102
msgstr ""
16103
16104
#: serverguide/C/network-auth.xml:2646(para)
16105
msgid "Next, extract the <filename>kerberos.schema.gz</filename> file:"
16106
msgstr ""
16107
16108
#: serverguide/C/network-auth.xml:2651(command)
16109
msgid "sudo gzip -d /usr/share/doc/krb5-kdc-ldap/kerberos.schema.gz"
16110
msgstr ""
16111
16112
#: serverguide/C/network-auth.xml:2652(command)
16113
msgid ""
16114
"sudo cp /usr/share/doc/krb5-kdc-ldap/kerberos.schema /etc/ldap/schema/"
16115
msgstr ""
16116
16117
#: serverguide/C/network-auth.xml:2658(para)
16118
msgid ""
16119
"The <emphasis>kerberos</emphasis> schema needs to be added to the "
16120
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
16121
"<application>slapd</application> is also detailed in <xref "
16122
"linkend=\"openldap-configuration\"/>."
16123
msgstr ""
16124
16125
#: serverguide/C/network-auth.xml:2671(programlisting)
16126
#, no-wrap
16127
msgid ""
16128
"\n"
16129
"include /etc/ldap/schema/core.schema\n"
16130
"include /etc/ldap/schema/collective.schema\n"
16131
"include /etc/ldap/schema/corba.schema\n"
16132
"include /etc/ldap/schema/cosine.schema\n"
16133
"include /etc/ldap/schema/duaconf.schema\n"
16134
"include /etc/ldap/schema/dyngroup.schema\n"
16135
"include /etc/ldap/schema/inetorgperson.schema\n"
16136
"include /etc/ldap/schema/java.schema\n"
16137
"include /etc/ldap/schema/misc.schema\n"
16138
"include /etc/ldap/schema/nis.schema\n"
16139
"include /etc/ldap/schema/openldap.schema\n"
16140
"include /etc/ldap/schema/ppolicy.schema\n"
16141
"include /etc/ldap/schema/kerberos.schema\n"
16142
msgstr ""
16143
16144
#: serverguide/C/network-auth.xml:2691(para)
16145
msgid "Create a temporary directory to hold the LDIF files:"
16146
msgstr ""
16147
16148
#: serverguide/C/network-auth.xml:2706(command)
16149
msgid ""
16150
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
16151
"\"cn={12}kerberos,cn=schema,cn=config\" > /tmp/cn=kerberos.ldif"
16152
msgstr ""
16153
16154
#: serverguide/C/network-auth.xml:2716(para)
16155
msgid ""
16156
"Edit the generated <filename>/tmp/cn\\=kerberos.ldif</filename> file, "
16157
"changing the following attributes:"
16158
msgstr ""
16159
16160
#: serverguide/C/network-auth.xml:2720(programlisting)
16161
#, no-wrap
16162
msgid ""
16163
"\n"
16164
"dn: cn=kerberos,cn=schema,cn=config\n"
16165
"...\n"
16166
"cn: kerberos\n"
16167
msgstr ""
16168
16169
#: serverguide/C/network-auth.xml:2726(para)
16170
msgid "And remove the following lines from the end of the file:"
16171
msgstr ""
16172
16173
#: serverguide/C/network-auth.xml:2730(programlisting)
16174
#, no-wrap
16175
msgid ""
16176
"\n"
16177
"structuralObjectClass: olcSchemaConfig\n"
16178
"entryUUID: 18ccd010-746b-102d-9fbe-3760cca765dc\n"
16179
"creatorsName: cn=config\n"
16180
"createTimestamp: 20090111203515Z\n"
16181
"entryCSN: 20090111203515.326445Z#000000#000#000000\n"
16182
"modifiersName: cn=config\n"
16183
"modifyTimestamp: 20090111203515Z\n"
16184
msgstr ""
16185
16186
#: serverguide/C/network-auth.xml:2749(para)
16187
msgid "Load the new schema with <application>ldapadd</application>:"
16188
msgstr ""
16189
16190
#: serverguide/C/network-auth.xml:2754(command)
16191
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=kerberos.ldif"
16192
msgstr ""
16193
16194
#: serverguide/C/network-auth.xml:2760(para)
16195
msgid ""
16196
"Add an index for the <emphasis>krb5principalname</emphasis> attribute:"
16197
msgstr ""
16198
16199
#: serverguide/C/network-auth.xml:2765(command) serverguide/C/network-auth.xml:2782(command)
16200
msgid "ldapmodify -x -D cn=admin,cn=config -W"
16201
msgstr ""
16202
16203
#: serverguide/C/network-auth.xml:2767(userinput)
16204
#, no-wrap
16205
msgid ""
16206
"dn: olcDatabase={1}hdb,cn=config\n"
16207
"add: olcDbIndex\n"
16208
"olcDbIndex: krbPrincipalName eq,pres,sub"
16209
msgstr ""
16210
16211
#: serverguide/C/network-auth.xml:2766(computeroutput)
16212
#, no-wrap
16213
msgid ""
16214
"Enter LDAP Password:\n"
16215
"<placeholder-1/>\n"
16216
"\n"
16217
"modifying entry \"olcDatabase={1}hdb,cn=config\""
16218
msgstr ""
16219
16220
#: serverguide/C/network-auth.xml:2777(para)
16221
msgid "Finally, update the Access Control Lists (ACL):"
16222
msgstr ""
16223
16224
#: serverguide/C/network-auth.xml:2784(userinput)
16225
#, no-wrap
16226
msgid ""
16227
"dn: olcDatabase={1}hdb,cn=config\n"
16228
"replace: olcAccess\n"
16229
"olcAccess: to attrs=userPassword,shadowLastChange,krbPrincipalKey by "
16230
"dn=\"cn=admin,dc=exampl\n"
16231
" e,dc=com\" write by anonymous auth by self write by * none\n"
16232
"-\n"
16233
"add: olcAccess\n"
16234
"olcAccess: to dn.base=\"\" by * read\n"
16235
"-\n"
16236
"add: olcAccess\n"
16237
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read"
16238
msgstr ""
16239
16240
#: serverguide/C/network-auth.xml:2783(computeroutput)
16241
#, no-wrap
16242
msgid ""
16243
"Enter LDAP Password: \n"
16244
"<placeholder-1/>\n"
16245
"\n"
16246
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
16247
msgstr ""
16248
16249
#: serverguide/C/network-auth.xml:2804(para)
16250
msgid ""
16251
"That's it, your LDAP directory is now ready to serve as a Kerberos principal "
16252
"database."
16253
msgstr ""
16254
16255
#: serverguide/C/network-auth.xml:2810(title)
16256
msgid "Primary KDC Configuration"
16257
msgstr ""
16258
16259
#: serverguide/C/network-auth.xml:2812(para)
16260
msgid ""
16261
"With <application>OpenLDAP</application> configured it is time to configure "
16262
"the KDC."
16263
msgstr ""
16264
16265
#: serverguide/C/network-auth.xml:2818(para)
16266
msgid "First, install the necessary packages, from a terminal enter:"
16267
msgstr ""
16268
16269
#: serverguide/C/network-auth.xml:2823(command) serverguide/C/network-auth.xml:2980(command)
16270
msgid "sudo apt-get install krb5-kdc krb5-admin-server krb5-kdc-ldap"
16271
msgstr ""
16272
16273
#: serverguide/C/network-auth.xml:2829(para)
16274
msgid ""
16275
"Now edit <filename>/etc/krb5.conf</filename> adding the following options to "
16276
"under the appropriate sections:"
16277
msgstr ""
16278
16279
#: serverguide/C/network-auth.xml:2833(programlisting)
16280
#, no-wrap
16281
msgid ""
16282
"\n"
16283
"[libdefaults]\n"
16284
" default_realm = EXAMPLE.COM\n"
16285
"\n"
16286
"...\n"
16287
"\n"
16288
"[realms]\n"
16289
" EXAMPLE.COM = {\n"
16290
" kdc = kdc01.example.com\n"
16291
" kdc = kdc02.example.com\n"
16292
" admin_server = kdc01.example.com\n"
16293
" admin_server = kdc02.example.com\n"
16294
" default_domain = example.com\n"
16295
" database_module = openldap_ldapconf\n"
16296
" }\n"
16297
"\n"
16298
"...\n"
16299
"\n"
16300
"[domain_realm]\n"
16301
" .example.com = EXAMPLE.COM\n"
16302
"\n"
16303
"\n"
16304
"...\n"
16305
"\n"
16306
"[dbdefaults]\n"
16307
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16308
"\n"
16309
"[dbmodules]\n"
16310
" openldap_ldapconf = {\n"
16311
" db_library = kldap\n"
16312
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16313
"\n"
16314
" # this object needs to have read rights on\n"
16315
" # the realm container, principal container and realm sub-"
16316
"trees\n"
16317
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16318
"\n"
16319
" # this object needs to have read and write rights on\n"
16320
" # the realm container, principal container and realm sub-"
16321
"trees\n"
16322
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16323
" ldap_servers = ldaps://ldap01.example.com "
16324
"ldaps://ldap02.example.com\n"
16325
" ldap_conns_per_server = 5\n"
16326
" }\n"
16327
msgstr ""
16328
16329
#: serverguide/C/network-auth.xml:2878(para)
16330
msgid ""
16331
"Change <emphasis>example.com</emphasis>, "
16332
"<emphasis>dc=example,dc=com</emphasis>, "
16333
"<emphasis>cn=admin,dc=example,dc=com</emphasis>, and "
16334
"<emphasis>ldap01.example.com</emphasis> to the appropriate domain, LDAP "
16335
"object, and LDAP server for your network."
16336
msgstr ""
16337
16338
#: serverguide/C/network-auth.xml:2887(para)
16339
msgid ""
16340
"Next, use the <application>kdb5_ldap_util</application> utility to create "
16341
"the realm:"
16342
msgstr ""
16343
16344
#: serverguide/C/network-auth.xml:2892(command)
16345
msgid ""
16346
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees "
16347
"dc=example,dc=com -r EXAMPLE.COM -s -H ldap://ldap01.example.com"
16348
msgstr ""
16349
16350
#: serverguide/C/network-auth.xml:2898(para)
16351
msgid ""
16352
"Create a stash of the password used to bind to the LDAP server. This "
16353
"password is used by the <emphasis>ldap_kdc_dn</emphasis> and "
16354
"<emphasis>ldap_kadmin_dn</emphasis> options in "
16355
"<filename>/etc/krb5.conf</filename>:"
16356
msgstr ""
16357
16358
#: serverguide/C/network-auth.xml:2904(command) serverguide/C/network-auth.xml:3042(command)
16359
msgid ""
16360
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com stashsrvpw -f "
16361
"/etc/krb5kdc/service.keyfile cn=admin,dc=example,dc=com"
16362
msgstr ""
16363
16364
#: serverguide/C/network-auth.xml:2910(para)
16365
msgid "Copy the CA certificate from the LDAP server:"
16366
msgstr ""
16367
16368
#: serverguide/C/network-auth.xml:2915(command)
16369
msgid "scp ldap01:/etc/ssl/certs/cacert.pem ."
16370
msgstr ""
16371
16372
#: serverguide/C/network-auth.xml:2916(command)
16373
msgid "sudo cp cacert.pem /etc/ssl/certs"
16374
msgstr ""
16375
16376
#: serverguide/C/network-auth.xml:2919(para)
16377
msgid ""
16378
"And edit <filename>/etc/ldap/ldap.conf</filename> to use the certificate:"
16379
msgstr ""
16380
16381
#: serverguide/C/network-auth.xml:2923(programlisting)
16382
#, no-wrap
16383
msgid ""
16384
"\n"
16385
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
16386
msgstr ""
16387
16388
#: serverguide/C/network-auth.xml:2928(para)
16389
msgid ""
16390
"The certificate will also need to be copied to the Secondary KDC, to allow "
16391
"the connection to the LDAP servers using LDAPS."
16392
msgstr ""
16393
16394
#: serverguide/C/network-auth.xml:2937(para)
16395
msgid ""
16396
"You can now add Kerberos principals to the LDAP database, and they will be "
16397
"copied to any other LDAP servers configured for replication. To add a "
16398
"principal using the <application>kadmin.local</application> utility enter:"
16399
msgstr ""
16400
16401
#: serverguide/C/network-auth.xml:2945(userinput)
16402
#, no-wrap
16403
msgid "addprinc -x dn=\"uid=steve,ou=people,dc=example,dc=com\" steve"
16404
msgstr ""
16405
16406
#: serverguide/C/network-auth.xml:2944(computeroutput)
16407
#, no-wrap
16408
msgid ""
16409
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
16410
"kadmin.local: <placeholder-1/>\n"
16411
"WARNING: no policy specified for steve@EXAMPLE.COM; defaulting to no policy\n"
16412
"Enter password for principal \"steve@EXAMPLE.COM\": \n"
16413
"Re-enter password for principal \"steve@EXAMPLE.COM\": \n"
16414
"Principal \"steve@EXAMPLE.COM\" created."
16415
msgstr ""
16416
16417
#: serverguide/C/network-auth.xml:2952(para)
16418
msgid ""
16419
"There should now be krbPrincipalName, krbPrincipalKey, krbLastPwdChange, and "
16420
"krbExtraData attributes added to the "
16421
"<emphasis>uid=steve,ou=people,dc=example,dc=com</emphasis> user object. Use "
16422
"the <application>kinit</application> and <application>klist</application> "
16423
"utilities to test that the user is indeed issued a ticket."
16424
msgstr ""
16425
16426
#: serverguide/C/network-auth.xml:2959(para)
16427
msgid ""
16428
"If the user object is already created the <emphasis>-x dn=\"...\"</emphasis> "
16429
"option is needed to add the Kerberos attributes. Otherwise a new "
16430
"<emphasis>principal</emphasis> object will be created in the realm subtree."
16431
msgstr ""
16432
16433
#: serverguide/C/network-auth.xml:2967(title)
16434
msgid "Secondary KDC Configuration"
16435
msgstr ""
16436
16437
#: serverguide/C/network-auth.xml:2969(para)
16438
msgid ""
16439
"Configuring a Secondary KDC using the LDAP backend is similar to configuring "
16440
"one using the normal Kerberos database."
16441
msgstr ""
16442
16443
#: serverguide/C/network-auth.xml:2975(para)
16444
msgid "First, install the necessary packages. In a terminal enter:"
16445
msgstr ""
16446
16447
#: serverguide/C/network-auth.xml:2986(para)
16448
msgid ""
16449
"Next, edit <filename>/etc/krb5.conf</filename> to use the LDAP backend:"
16450
msgstr ""
16451
16452
#: serverguide/C/network-auth.xml:2990(programlisting)
16453
#, no-wrap
16454
msgid ""
16455
"\n"
16456
"[libdefaults]\n"
16457
" default_realm = EXAMPLE.COM\n"
16458
"\n"
16459
"...\n"
16460
"\n"
16461
"[realms]\n"
16462
" EXAMPLE.COM = {\n"
16463
" kdc = kdc01.example.com\n"
16464
" kdc = kdc02.example.com\n"
16465
" admin_server = kdc01.example.com\n"
16466
" admin_server = kdc02.example.com\n"
16467
" default_domain = example.com\n"
16468
" database_module = openldap_ldapconf\n"
16469
" }\n"
16470
"\n"
16471
"...\n"
16472
"\n"
16473
"[domain_realm]\n"
16474
" .example.com = EXAMPLE.COM\n"
16475
"\n"
16476
"...\n"
16477
"\n"
16478
"[dbdefaults]\n"
16479
" ldap_kerberos_container_dn = dc=example,dc=com\n"
16480
"\n"
16481
"[dbmodules]\n"
16482
" openldap_ldapconf = {\n"
16483
" db_library = kldap\n"
16484
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
16485
"\n"
16486
" # this object needs to have read rights on\n"
16487
" # the realm container, principal container and realm sub-"
16488
"trees\n"
16489
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
16490
"\n"
16491
" # this object needs to have read and write rights on\n"
16492
" # the realm container, principal container and realm sub-"
16493
"trees\n"
16494
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
16495
" ldap_servers = ldaps://ldap01.example.com "
16496
"ldaps://ldap02.example.com\n"
16497
" ldap_conns_per_server = 5\n"
16498
" }\n"
16499
msgstr ""
16500
16501
#: serverguide/C/network-auth.xml:3037(para)
16502
msgid "Create the stash for the LDAP bind password:"
16503
msgstr ""
16504
16505
#: serverguide/C/network-auth.xml:3048(para)
16506
msgid ""
16507
"Now, on the <emphasis>Primary KDC</emphasis> copy the "
16508
"<filename>/etc/krb5kdc/.k5.EXAMPLE.COM</filename><emphasis>Master "
16509
"Key</emphasis> stash to the Secondary KDC. Be sure to copy the file over an "
16510
"encrypted connection such as <application>scp</application>, or on physical "
16511
"media."
16512
msgstr ""
16513
16514
#: serverguide/C/network-auth.xml:3055(command)
16515
msgid "sudo scp /etc/krb5kdc/.k5.EXAMPLE.COM steve@kdc02.example.com:~"
16516
msgstr ""
16517
16518
#: serverguide/C/network-auth.xml:3056(command)
16519
msgid "sudo mv .k5.EXAMPLE.COM /etc/krb5kdc/"
16520
msgstr ""
16521
16522
#: serverguide/C/network-auth.xml:3060(para)
16523
msgid ""
16524
"Again, replace <emphasis>EXAMPLE.COM</emphasis> with your actual realm."
16525
msgstr ""
16526
16527
#: serverguide/C/network-auth.xml:3068(para)
16528
msgid "Finally, start the <application>krb5-kdc</application> daemon:"
16529
msgstr ""
16530
16531
#: serverguide/C/network-auth.xml:3079(para)
16532
msgid ""
16533
"You now have redundant KDCs on your network, and with redundant LDAP servers "
16534
"you should be able to continue to authenticate users if one LDAP server, one "
16535
"Kerberos server, or one LDAP and one Kerberos server become unavailable."
16536
msgstr ""
16537
16538
#: serverguide/C/network-auth.xml:3091(para)
16539
msgid ""
16540
"The <ulink url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16541
"admin.html#Configuring-Kerberos-with-OpenLDAP-back_002dend\"> Kerberos Admin "
16542
"Guide</ulink> has some additional details."
16543
msgstr ""
16544
16545
#: serverguide/C/network-auth.xml:3097(para)
16546
msgid ""
16547
"For more information on <application>kdb5_ldap_util</application> see <ulink "
16548
"url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
16549
"admin.html#Global-Operations-on-the-Kerberos-LDAP-Database\"> Section "
16550
"5.6</ulink> and the <ulink "
16551
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/kdb5_ldap_util.8.html"
16552
"\">kdb5_ldap_util man page</ulink>."
16553
msgstr ""
16554
16555
#: serverguide/C/network-auth.xml:3105(para)
16556
msgid ""
16557
"Another useful link is the <ulink "
16558
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/krb5.conf.5.html\">kr"
16559
"b5.conf man page</ulink>."
16560
msgstr ""
16561
16562
#: serverguide/C/network-auth.xml:3110(para)
16563
msgid ""
16564
"Also, see the <ulink "
16565
"url=\"https://help.ubuntu.com/community/Kerberos#kerberos-ldap\">Kerberos "
16566
"and LDAP</ulink> Ubuntu wiki page."
16567
msgstr ""
16568
16569
#: serverguide/C/monitoring.xml:13(title)
16570
msgid "Monitoring"
16571
msgstr ""
16572
16573
#: serverguide/C/monitoring.xml:17(para)
16574
msgid ""
16575
"The monitoring of essential servers and services is an important part of "
16576
"system administration. Most network services are monitored for performance, "
16577
"availability, or both. This section will cover installation and "
16578
"configuration of <application>Nagios</application> for availability "
16579
"monitoring, and <application>Munin</application> for performance monitoring."
16580
msgstr ""
16581
16582
#: serverguide/C/monitoring.xml:24(para)
16583
msgid ""
16584
"The examples in this section will use two servers with hostnames "
16585
"<emphasis>server01</emphasis> and <emphasis>server02</emphasis>. "
16586
"<emphasis>Server01</emphasis> will be configured with "
16587
"<application>Nagios</application> to monitor services on itself and "
16588
"<emphasis>server02</emphasis>. Server01 will also be setup with the "
16589
"<application>munin</application> package to gather information from the "
16590
"network. Using the <application>munin-node</application> package, "
16591
"<emphasis>server02</emphasis> will be configured to send information to "
16592
"<emphasis>server01</emphasis>."
16593
msgstr ""
16594
16595
#: serverguide/C/monitoring.xml:33(para)
16596
msgid ""
16597
"Hopefully these simple examples will allow you to monitor additional servers "
16598
"and services on your network."
16599
msgstr ""
16600
16601
#: serverguide/C/monitoring.xml:39(title)
16602
msgid "Nagios"
16603
msgstr ""
16604
16605
#: serverguide/C/monitoring.xml:44(para)
16606
msgid ""
16607
"First, on <emphasis>server01</emphasis> install the "
16608
"<application>nagios</application> package. In a terminal enter:"
16609
msgstr ""
16610
16611
#: serverguide/C/monitoring.xml:50(command)
16612
msgid "sudo apt-get install nagios3 nagios-nrpe-plugin"
16613
msgstr ""
16614
16615
#: serverguide/C/monitoring.xml:53(para)
16616
msgid ""
16617
"You will be asked to enter a password for the "
16618
"<emphasis>nagiosadmin</emphasis> user. The user's credentials are stored in "
16619
"<filename>/etc/nagios3/htpasswd.users</filename>. To change the "
16620
"<emphasis>nagiosadmin</emphasis> password, or add additional users to the "
16621
"Nagios CGI scripts, use the <application>htpasswd</application> that is part "
16622
"of the <application>apache2-utils</application> package."
16623
msgstr ""
16624
16625
#: serverguide/C/monitoring.xml:60(para)
16626
msgid ""
16627
"For example, to change the password for the <emphasis>nagiosadmin</emphasis> "
16628
"user enter:"
16629
msgstr ""
16630
16631
#: serverguide/C/monitoring.xml:65(command)
16632
msgid "sudo htpasswd /etc/nagios3/htpasswd.users nagiosadmin"
16633
msgstr ""
16634
16635
#: serverguide/C/monitoring.xml:68(para)
16636
msgid "To add a user:"
16637
msgstr ""
16638
16639
#: serverguide/C/monitoring.xml:73(command)
16640
msgid "sudo htpasswd /etc/nagios3/htpasswd.users steve"
16641
msgstr ""
16642
16643
#: serverguide/C/monitoring.xml:76(para)
16644
msgid ""
16645
"Next, on <emphasis>server02</emphasis> install the <application>nagios-nrpe-"
16646
"server</application> package. From a terminal on server02 enter:"
16647
msgstr ""
16648
16649
#: serverguide/C/monitoring.xml:82(command)
16650
msgid "sudo apt-get install nagios-nrpe-server"
16651
msgstr ""
16652
16653
#: serverguide/C/monitoring.xml:86(para)
16654
msgid ""
16655
"<application>NRPE</application> allows you to execute local checks on remote "
16656
"hosts. There are other ways of accomplishing this through other Nagios "
16657
"plugins as well as other checks."
16658
msgstr ""
16659
16660
#: serverguide/C/monitoring.xml:94(title)
16661
msgid "Configuration Overview"
16662
msgstr ""
16663
16664
#: serverguide/C/monitoring.xml:96(para)
16665
msgid ""
16666
"There are a couple of directories containing "
16667
"<application>Nagios</application> configuration and check files."
16668
msgstr ""
16669
16670
#: serverguide/C/monitoring.xml:102(para)
16671
msgid ""
16672
"<filename>/etc/nagios3</filename>: contains configuration files for the "
16673
"operation of the <application>nagios</application> daemon, CGI files, hosts, "
16674
"etc."
16675
msgstr ""
16676
16677
#: serverguide/C/monitoring.xml:108(para)
16678
msgid ""
16679
"<filename>/etc/nagios-plugins</filename>: houses configuration files for the "
16680
"service checks."
16681
msgstr ""
16682
16683
#: serverguide/C/monitoring.xml:113(para)
16684
msgid ""
16685
"<filename>/etc/nagios</filename>: on the remote host contains the "
16686
"<application>nagios-nrpe-server</application> configuration files."
16687
msgstr ""
16688
16689
#: serverguide/C/monitoring.xml:118(para)
16690
msgid ""
16691
"<filename>/usr/lib/nagios/plugins/</filename>: where the check binaries are "
16692
"stored. To see the options of a check use the <emphasis>-h</emphasis> option."
16693
msgstr ""
16694
16695
#: serverguide/C/monitoring.xml:123(para)
16696
msgid "For example: <command>/usr/lib/nagios/plugins/check_dhcp -h</command>"
16697
msgstr ""
16698
16699
#: serverguide/C/monitoring.xml:129(para)
16700
msgid ""
16701
"There are a plethora of checks <application>Nagios</application> can be "
16702
"configured to execute for any given host. For this example Nagios will be "
16703
"configured to check disk space, DNS, and a MySQL hostgroup. The DNS check "
16704
"will be on <emphasis>server02</emphasis>, and the MySQL hostgroup will "
16705
"include both <emphasis>server01</emphasis> and <emphasis>server02</emphasis>."
16706
msgstr ""
16707
16708
#: serverguide/C/monitoring.xml:136(para)
16709
msgid ""
16710
"See <xref linkend=\"httpd\"/> for details on setting up Apache, <xref "
16711
"linkend=\"dns\"/> for DNS, and <xref linkend=\"mysql\"/> for MySQL."
16712
msgstr ""
16713
16714
#: serverguide/C/monitoring.xml:141(para)
16715
msgid ""
16716
"Additionally, there are some terms that once explained will hopefully make "
16717
"understanding Nagios configuration easier:"
16718
msgstr ""
16719
16720
#: serverguide/C/monitoring.xml:147(para)
16721
msgid ""
16722
"<emphasis>Host</emphasis>: a server, workstation, network device, etc that "
16723
"is being monitored."
16724
msgstr ""
16725
16726
#: serverguide/C/monitoring.xml:152(para)
16727
msgid ""
16728
"<emphasis>Host Group</emphasis>: a group of similar hosts. For example, you "
16729
"could group all web servers, file server, etc."
16730
msgstr ""
16731
16732
#: serverguide/C/monitoring.xml:157(para)
16733
msgid ""
16734
"<emphasis>Service</emphasis>: the service being monitored on the host. Such "
16735
"as HTTP, DNS, NFS, etc."
16736
msgstr ""
16737
16738
#: serverguide/C/monitoring.xml:162(para)
16739
msgid ""
16740
"<emphasis>Service Group</emphasis>: allows you to group multiple services "
16741
"together. This is useful for grouping multiple HTTP for example."
16742
msgstr ""
16743
16744
#: serverguide/C/monitoring.xml:168(para)
16745
msgid ""
16746
"<emphasis>Contact</emphasis>: person to be notified when an event takes "
16747
"place. Nagios can be configured to send emails, SMS messages, etc."
16748
msgstr ""
16749
16750
#: serverguide/C/monitoring.xml:174(para)
16751
msgid ""
16752
"By default Nagios is configured to check HTTP, disk space, SSH, current "
16753
"users, processes, and load on the <emphasis>localhost</emphasis>. Nagios "
16754
"will also <application>ping</application> check the "
16755
"<emphasis>gateway</emphasis>."
16756
msgstr ""
16757
16758
#: serverguide/C/monitoring.xml:179(para)
16759
msgid ""
16760
"Large Nagios installations can be quite complex to configure. It is usually "
16761
"best to start small, one or two hosts, get things configured the way you "
16762
"like then expand."
16763
msgstr ""
16764
16765
#: serverguide/C/monitoring.xml:194(para)
16766
msgid ""
16767
"First, create a <emphasis>host</emphasis> configuration file for "
16768
"<emphasis>server02</emphasis>. In a terminal enter:"
16769
msgstr ""
16770
16771
#: serverguide/C/monitoring.xml:199(command)
16772
msgid ""
16773
"sudo cp /etc/nagios3/conf.d/localhost_nagios2.cfg "
16774
"/etc/nagios3/conf.d/server02.cfg"
16775
msgstr ""
16776
16777
#: serverguide/C/monitoring.xml:203(para)
16778
msgid ""
16779
"In the above and following command examples, replace "
16780
"<emphasis>\"server01\"</emphasis>, "
16781
"<emphasis>\"server02\"</emphasis><emphasis>172.18.100.100</emphasis>, and "
16782
"<emphasis>172.18.100.101</emphasis> with the host names and IP addresses of "
16783
"your servers."
16784
msgstr ""
16785
16786
#: serverguide/C/monitoring.xml:212(para)
16787
msgid "Next, edit <filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16788
msgstr ""
16789
16790
#: serverguide/C/monitoring.xml:216(programlisting)
16791
#, no-wrap
16792
msgid ""
16793
"\n"
16794
"define host{\n"
16795
" use generic-host ; Name of host "
16796
"template to use\n"
16797
" host_name server02\n"
16798
" alias Server 02\n"
16799
" address 172.18.100.101\n"
16800
"}\n"
16801
"\n"
16802
"# check DNS service.\n"
16803
"define service {\n"
16804
" use generic-service\n"
16805
" host_name server02\n"
16806
" service_description DNS\n"
16807
" check_command check_dns!172.18.100.101\n"
16808
"}\n"
16809
msgstr ""
16810
16811
#: serverguide/C/monitoring.xml:236(para)
16812
msgid ""
16813
"Restart the <application>nagios</application> daemon to enable the new "
16814
"configuration:"
16815
msgstr ""
16816
16817
#: serverguide/C/monitoring.xml:241(command) serverguide/C/monitoring.xml:308(command) serverguide/C/monitoring.xml:375(command)
16818
msgid "sudo /etc/init.d/nagios3 restart"
16819
msgstr ""
16820
16821
#: serverguide/C/monitoring.xml:251(para)
16822
msgid ""
16823
"Now add a service definition for the MySQL check by adding the following to "
16824
"<filename>/etc/nagios3/conf.d/services_nagios2.cfg</filename>:"
16825
msgstr ""
16826
16827
#: serverguide/C/monitoring.xml:255(programlisting)
16828
#, no-wrap
16829
msgid ""
16830
"\n"
16831
"# check MySQL servers.\n"
16832
"define service {\n"
16833
" hostgroup_name mysql-servers\n"
16834
" service_description MySQL\n"
16835
" check_command "
16836
"check_mysql_cmdlinecred!nagios!secret!$HOSTADDRESS\n"
16837
" use generic-service\n"
16838
" notification_interval 0 ; set > 0 if you want to be "
16839
"renotified\n"
16840
"}\n"
16841
msgstr ""
16842
16843
#: serverguide/C/monitoring.xml:269(para)
16844
msgid ""
16845
"A <emphasis>mysqsl-servers</emphasis> hostgroup now needs to be defined. "
16846
"Edit <filename>/etc/nagios3/conf.d/hostgroups_nagios2.cfg</filename> adding:"
16847
msgstr ""
16848
16849
#: serverguide/C/monitoring.xml:274(programlisting)
16850
#, no-wrap
16851
msgid ""
16852
"\n"
16853
"# MySQL hostgroup.\n"
16854
"define hostgroup {\n"
16855
" hostgroup_name mysql-servers\n"
16856
" alias MySQL servers\n"
16857
" members localhost, server02\n"
16858
" }\n"
16859
msgstr ""
16860
16861
#: serverguide/C/monitoring.xml:286(para)
16862
msgid ""
16863
"The Nagios check needs to authenticate to MySQL. To add a "
16864
"<emphasis>nagios</emphasis> user to MySQL enter:"
16865
msgstr ""
16866
16867
#: serverguide/C/monitoring.xml:291(command)
16868
msgid "mysql -u root -p -e \"create user nagios identified by 'secret';\""
16869
msgstr ""
16870
16871
#: serverguide/C/monitoring.xml:295(para)
16872
msgid ""
16873
"The <emphasis>nagios</emphasis> user will need to be added all hosts in the "
16874
"<emphasis>mysql-servers</emphasis> hostgroup."
16875
msgstr ""
16876
16877
#: serverguide/C/monitoring.xml:303(para)
16878
msgid ""
16879
"Restart <application>nagios</application> to start checking the MySQL "
16880
"servers."
16881
msgstr ""
16882
16883
#: serverguide/C/monitoring.xml:318(para)
16884
msgid ""
16885
"Lastly configure NRPE to check the disk space on "
16886
"<emphasis>server02</emphasis>."
16887
msgstr ""
16888
16889
#: serverguide/C/monitoring.xml:322(para)
16890
msgid ""
16891
"On <emphasis>server01</emphasis> add the service check to "
16892
"<filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
16893
msgstr ""
16894
16895
#: serverguide/C/monitoring.xml:327(programlisting)
16896
#, no-wrap
16897
msgid ""
16898
"\n"
16899
"# NRPE disk check.\n"
16900
"define service {\n"
16901
" use generic-service\n"
16902
" host_name server02\n"
16903
" service_description nrpe-disk\n"
16904
" check_command "
16905
"check_nrpe_1arg!check_all_disks!172.18.100.101\n"
16906
"}\n"
16907
msgstr ""
16908
16909
#: serverguide/C/monitoring.xml:340(para)
16910
msgid ""
16911
"Now on <emphasis>server02</emphasis> edit "
16912
"<filename>/etc/nagios/nrpe.cfg</filename> changing:"
16913
msgstr ""
16914
16915
#: serverguide/C/monitoring.xml:344(programlisting)
16916
#, no-wrap
16917
msgid ""
16918
"\n"
16919
"allowed_hosts=172.18.100.100\n"
16920
msgstr ""
16921
16922
#: serverguide/C/monitoring.xml:348(para)
16923
msgid "And below in the command definition area add:"
16924
msgstr ""
16925
16926
#: serverguide/C/monitoring.xml:352(programlisting)
16927
#, no-wrap
16928
msgid ""
16929
"\n"
16930
"command[check_all_disks]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -"
16931
"e\n"
16932
msgstr ""
16933
16934
#: serverguide/C/monitoring.xml:359(para)
16935
msgid "Finally, restart <application>nagios-nrpe-server</application>:"
16936
msgstr ""
16937
16938
#: serverguide/C/monitoring.xml:364(command)
16939
msgid "sudo /etc/init.d/nagios-nrpe-server restart"
16940
msgstr ""
16941
16942
#: serverguide/C/monitoring.xml:370(para)
16943
msgid ""
16944
"Also, on <emphasis>server01</emphasis> restart "
16945
"<application>nagios</application>:"
16946
msgstr ""
16947
16948
#: serverguide/C/monitoring.xml:383(para)
16949
msgid ""
16950
"You should now be able to see the host and service checks in the Nagios CGI "
16951
"files. To access them point a browser to http://server01/nagios3. You will "
16952
"then be prompted for the <emphasis>nagiosadmin</emphasis> username and "
16953
"password."
16954
msgstr ""
16955
16956
#: serverguide/C/monitoring.xml:393(para)
16957
msgid ""
16958
"This section has just scratched the surface of Nagios' features. The "
16959
"<application>nagios-plugins-extra</application> and <application>nagios-snmp-"
16960
"plugins</application> contain many more service checks."
16961
msgstr ""
16962
16963
#: serverguide/C/monitoring.xml:400(para)
16964
msgid ""
16965
"For more information see <ulink "
16966
"url=\"http://www.nagios.org/\">Nagios</ulink> website."
16967
msgstr ""
16968
16969
#: serverguide/C/monitoring.xml:405(para)
16970
msgid ""
16971
"Specifically the <ulink "
16972
"url=\"http://nagios.sourceforge.net/docs/3_0/\">Online Documentation</ulink> "
16973
"site."
16974
msgstr ""
16975
16976
#: serverguide/C/monitoring.xml:410(para)
16977
msgid ""
16978
"There is also a list of <ulink "
16979
"url=\"http://www.nagios.org/propaganda/books/\">books</ulink> related to "
16980
"Nagios and network monitoring:"
16981
msgstr ""
16982
16983
#: serverguide/C/monitoring.xml:416(para)
16984
msgid ""
16985
"The <ulink url=\"https://help.ubuntu.com/community/Nagios\">Nagios Ubuntu "
16986
"Wiki</ulink> page also has more details."
16987
msgstr ""
16988
16989
#: serverguide/C/monitoring.xml:425(title)
16990
msgid "Munin"
16991
msgstr ""
16992
16993
#: serverguide/C/monitoring.xml:430(para)
16994
msgid ""
16995
"Before installing <application>Munin</application> on "
16996
"<emphasis>server01</emphasis><application>apache2</application> will need to "
16997
"be installed. The default configuration is fine for running a "
16998
"<application>munin</application> server. For more information see <xref "
16999
"linkend=\"httpd\"/>."
17000
msgstr ""
17001
17002
#: serverguide/C/monitoring.xml:436(para)
17003
msgid ""
17004
"First, on <emphasis>server01</emphasis> install "
17005
"<application>munin</application>. In a terminal enter:"
17006
msgstr ""
17007
17008
#: serverguide/C/monitoring.xml:441(command)
17009
msgid "sudo apt-get install munin"
17010
msgstr ""
17011
17012
#: serverguide/C/monitoring.xml:444(para)
17013
msgid ""
17014
"Now on <emphasis>server02</emphasis> install the <application>munin-"
17015
"node</application> package:"
17016
msgstr ""
17017
17018
#: serverguide/C/monitoring.xml:449(command)
17019
msgid "sudo apt-get install munin-node"
17020
msgstr ""
17021
17022
#: serverguide/C/monitoring.xml:456(para)
17023
msgid ""
17024
"On <emphasis>server01</emphasis> edit the "
17025
"<filename>/etc/munin/munin.conf</filename> adding the IP address for "
17026
"<emphasis>server02</emphasis>:"
17027
msgstr ""
17028
17029
#: serverguide/C/monitoring.xml:461(programlisting)
17030
#, no-wrap
17031
msgid ""
17032
"\n"
17033
"## First our \"normal\" host.\n"
17034
"[server02]\n"
17035
" address 172.18.100.101\n"
17036
msgstr ""
17037
17038
#: serverguide/C/monitoring.xml:468(para)
17039
msgid ""
17040
"Replace <emphasis>server02</emphasis> and "
17041
"<emphasis>172.18.100.101</emphasis> with the actual hostname and IP address "
17042
"for your server."
17043
msgstr ""
17044
17045
#: serverguide/C/monitoring.xml:474(para)
17046
msgid ""
17047
"Next, configure <application>munin-node</application> on "
17048
"<emphasis>server02</emphasis>. Edit <filename>/etc/munin/munin-"
17049
"node.conf</filename> to allow access by <emphasis>server01</emphasis>:"
17050
msgstr ""
17051
17052
#: serverguide/C/monitoring.xml:479(programlisting)
17053
#, no-wrap
17054
msgid ""
17055
"\n"
17056
"allow ^172\\.18\\.100\\.100$\n"
17057
msgstr ""
17058
17059
#: serverguide/C/monitoring.xml:484(para)
17060
msgid ""
17061
"Replace <emphasis>^172\\.18\\.100\\.100$</emphasis> with IP address for your "
17062
"<application>munin</application> server."
17063
msgstr ""
17064
17065
#: serverguide/C/monitoring.xml:489(para)
17066
msgid ""
17067
"Now restart <application>munin-node</application> on "
17068
"<emphasis>server02</emphasis> for the changes to take effect:"
17069
msgstr ""
17070
17071
#: serverguide/C/monitoring.xml:494(command)
17072
msgid "sudo /etc/init.d/munin-node restart"
17073
msgstr ""
17074
17075
#: serverguide/C/monitoring.xml:497(para)
17076
msgid ""
17077
"Finally, in a browser go to <emphasis>http://server01/munin</emphasis>, and "
17078
"you should see links to nice graphs displaying information from the standard "
17079
"<emphasis>munin-plugins</emphasis> for disk, network, processes, and system."
17080
msgstr ""
17081
17082
#: serverguide/C/monitoring.xml:503(para)
17083
msgid ""
17084
"Since this is a new install it may take some time for the graphs to display "
17085
"anything useful."
17086
msgstr ""
17087
17088
#: serverguide/C/monitoring.xml:510(title)
17089
msgid "Additional Plugins"
17090
msgstr ""
17091
17092
#: serverguide/C/monitoring.xml:512(para)
17093
msgid ""
17094
"The <application>munin-plugins-extra</application> package contains "
17095
"performance checks additional services such as DNS, DHCP, Samba, etc. To "
17096
"install the package, from a terminal enter:"
17097
msgstr ""
17098
17099
#: serverguide/C/monitoring.xml:518(command)
17100
msgid "sudo apt-get install munin-plugins-extra"
17101
msgstr ""
17102
17103
#: serverguide/C/monitoring.xml:521(para)
17104
msgid "Be sure to install the package on both the server and node machines."
17105
msgstr ""
17106
17107
#: serverguide/C/monitoring.xml:531(para)
17108
msgid ""
17109
"See the <ulink url=\"http://munin.projects.linpro.no/\">Munin</ulink> "
17110
"website for more details."
17111
msgstr ""
17112
17113
#: serverguide/C/monitoring.xml:536(para)
17114
msgid ""
17115
"Specifically the <ulink "
17116
"url=\"http://munin.projects.linpro.no/wiki/Documentation\">Munin "
17117
"Documentation</ulink> page includes information on additional plugins, "
17118
"writing plugins, etc."
17119
msgstr ""
17120
17121
#: serverguide/C/monitoring.xml:542(para)
17122
msgid ""
17123
"Also, there is a book in German by Open Source Press: <ulink "
17124
"url=\"https://www.opensourcepress.de/index.php?26&backPID=178&tt_prod"
17125
"ucts=152\">Munin Graphisches Netzwerk- und System-Monitoring</ulink>."
17126
msgstr ""
17127
17128
#: serverguide/C/monitoring.xml:548(para)
17129
msgid ""
17130
"Another resource is the <ulink "
17131
"url=\"https://help.ubuntu.com/community/Munin\">Munin Ubuntu Wiki</ulink> "
17132
"page."
17133
msgstr ""
17134
17135
#: serverguide/C/mail.xml:13(title)
17136
msgid "Email Services"
17137
msgstr ""
17138
17139
#: serverguide/C/mail.xml:14(para)
17140
msgid ""
17141
"The process of getting an email from one person to another over a network or "
17142
"the Internet involves many systems working together. Each of these systems "
17143
"must be correctly configured for the process to work. The sender uses a "
17144
"<emphasis>Mail User Agent</emphasis> (MUA), or email client, to send the "
17145
"message through one or more <emphasis>Mail Transfer Agents</emphasis> (MTA), "
17146
"the last of which will hand it off to a <emphasis>Mail Delivery "
17147
"Agent</emphasis> (MDA) for delivery to the recipient's mailbox, from which "
17148
"it will be retrieved by the recipient's email client, usually via a POP3 or "
17149
"IMAP server."
17150
msgstr ""
17151
17152
#: serverguide/C/mail.xml:24(title) serverguide/C/mail.xml:832(application) serverguide/C/mail.xml:866(title) serverguide/C/mail.xml:944(title) serverguide/C/mail.xml:1510(title)
17153
msgid "Postfix"
17154
msgstr ""
17155
17156
#: serverguide/C/mail.xml:25(para)
17157
msgid ""
17158
"<application>Postfix</application> is the default Mail Transfer Agent (MTA) "
17159
"in Ubuntu. It attempts to be fast and easy to administer and secure. It is "
17160
"compatible with the MTA <application>sendmail</application>. This section "
17161
"explains how to install and configure <application>postfix</application>. It "
17162
"also explains how to set it up as an SMTP server using a secure connection "
17163
"(for sending emails securely)."
17164
msgstr ""
17165
17166
#: serverguide/C/mail.xml:34(para)
17167
msgid ""
17168
"This guide does not cover setting up Postfix <emphasis>Virtual "
17169
"Domains</emphasis>, for information on Virtual Domains and other advanced "
17170
"configurations see <xref linkend=\"postfix-references\"/>."
17171
msgstr ""
17172
17173
#: serverguide/C/mail.xml:41(para)
17174
msgid ""
17175
"To install <application>postfix</application> run the following command:"
17176
msgstr ""
17177
17178
#: serverguide/C/mail.xml:47(para)
17179
msgid ""
17180
"Simply press return when the installation process asks questions, the "
17181
"configuration will be done in greater detail in the next stage."
17182
msgstr ""
17183
17184
#: serverguide/C/mail.xml:52(title)
17185
msgid "Basic Configuration"
17186
msgstr ""
17187
17188
#: serverguide/C/mail.xml:53(para)
17189
msgid ""
17190
"To configure <application>postfix</application>, run the following command:"
17191
msgstr ""
17192
17193
#: serverguide/C/mail.xml:57(command)
17194
msgid "sudo dpkg-reconfigure postfix"
17195
msgstr ""
17196
17197
#: serverguide/C/mail.xml:63(para)
17198
msgid "Internet Site"
17199
msgstr ""
17200
17201
#: serverguide/C/mail.xml:64(para)
17202
msgid "mail.example.com"
17203
msgstr ""
17204
17205
#: serverguide/C/mail.xml:65(para)
17206
msgid "steve"
17207
msgstr ""
17208
17209
#: serverguide/C/mail.xml:66(para)
17210
msgid "mail.example.com, localhost.localdomain, localhost"
17211
msgstr ""
17212
17213
#: serverguide/C/mail.xml:67(para)
17214
msgid "No"
17215
msgstr "Non"
17216
17217
#: serverguide/C/mail.xml:68(para)
17218
msgid "127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.0.0/24"
17219
msgstr ""
17220
17221
#: serverguide/C/mail.xml:69(para)
17222
msgid "0"
17223
msgstr "0"
17224
17225
#: serverguide/C/mail.xml:70(para)
17226
msgid "+"
17227
msgstr "+"
17228
17229
#: serverguide/C/mail.xml:71(para)
17230
msgid "all"
17231
msgstr "totes"
17232
17233
#: serverguide/C/mail.xml:59(para)
17234
msgid ""
17235
"The user interface will be displayed. On each screen, select the following "
17236
"values: <placeholder-1/>"
17237
msgstr ""
17238
17239
#: serverguide/C/mail.xml:75(para)
17240
msgid ""
17241
"Replace mail.example.com with the domain for which you'll accept email, "
17242
"192.168.0.0/24 with the actual network and class range of your mail server, "
17243
"and steve with the appropriate username."
17244
msgstr ""
17245
17246
#: serverguide/C/mail.xml:81(para)
17247
msgid ""
17248
"Now is a good time to decide which mailbox format you want to use. By "
17249
"default Postfix will use <emphasis role=\"strong\">mbox</emphasis> for the "
17250
"mailbox format. Rather than editing the configuration file directly, you can "
17251
"use the <command>postconf</command> command to configure all "
17252
"<application>postfix</application> parameters. The configuration parameters "
17253
"will be stored in <filename>/etc/postfix/main.cf</filename> file. Later if "
17254
"you wish to re-configure a particular parameter, you can either run the "
17255
"command or change it manually in the file."
17256
msgstr ""
17257
17258
#: serverguide/C/mail.xml:92(para)
17259
msgid ""
17260
"To configure the mailbox format for <emphasis "
17261
"role=\"strong\">Maildir:</emphasis>"
17262
msgstr ""
17263
17264
#: serverguide/C/mail.xml:97(command)
17265
msgid "sudo postconf -e 'home_mailbox = Maildir/'"
17266
msgstr ""
17267
17268
#: serverguide/C/mail.xml:100(para)
17269
msgid ""
17270
"This will place new mail in /home/<emphasis "
17271
"role=\"italic\">username</emphasis>/Maildir so you will need to configure "
17272
"your Mail Delivery Agent (MDA) to use the same path."
17273
msgstr ""
17274
17275
#: serverguide/C/mail.xml:108(title) serverguide/C/mail.xml:556(title)
17276
msgid "SMTP Authentication"
17277
msgstr ""
17278
17279
#: serverguide/C/mail.xml:110(para)
17280
msgid ""
17281
"SMTP-AUTH allows a client to identify itself through an authentication "
17282
"mechanism (SASL). Transport Layer Security (TLS) should be used to encrypt "
17283
"the authentication process. Once authenticated the SMTP server will allow "
17284
"the client to relay mail."
17285
msgstr ""
17286
17287
#: serverguide/C/mail.xml:117(para)
17288
msgid "Configure Postfix for SMTP-AUTH using SASL (Dovecot SASL):"
17289
msgstr ""
17290
17291
#: serverguide/C/mail.xml:120(screen)
17292
#, no-wrap
17293
msgid ""
17294
"\n"
17295
"sudo postconf -e 'smtpd_sasl_type = dovecot'\n"
17296
"sudo postconf -e 'smtpd_sasl_path = private/auth-client'\n"
17297
"sudo postconf -e 'smtpd_sasl_local_domain ='\n"
17298
"sudo postconf -e 'smtpd_sasl_security_options = noanonymous'\n"
17299
"sudo postconf -e 'broken_sasl_auth_clients = yes'\n"
17300
"sudo postconf -e 'smtpd_sasl_auth_enable = yes'\n"
17301
"sudo postconf -e 'smtpd_recipient_restrictions = "
17302
"permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\n"
17303
"sudo postconf -e 'inet_interfaces = all'\n"
17304
msgstr ""
17305
17306
#: serverguide/C/mail.xml:131(para)
17307
msgid ""
17308
"The <emphasis>smtpd_sasl_path</emphasis> configuration is a path relative to "
17309
"the Postfix queue directory."
17310
msgstr ""
17311
17312
#: serverguide/C/mail.xml:137(para)
17313
msgid ""
17314
"Next, obtain a digital certificate for TLS. See <xref linkend=\"certificates-"
17315
"and-security\"/> for details. This example also uses a Certificate Authority "
17316
"(CA). For information on generating a CA certificate see <xref "
17317
"linkend=\"certificate-authority\"/>."
17318
msgstr ""
17319
17320
#: serverguide/C/mail.xml:143(para)
17321
msgid ""
17322
"You can get the digital certificate from a certificate authority. But unlike "
17323
"web clients, SMTP clients rarely complain about \"self-signed "
17324
"certificates\", so alternatively, you can create the certificate yourself. "
17325
"Refer to <xref linkend=\"creating-a-self-signed-certificate\"/> for more "
17326
"details."
17327
msgstr ""
17328
17329
#: serverguide/C/mail.xml:155(para)
17330
msgid ""
17331
"Once you have a certificate, configure Postfix to provide TLS encryption for "
17332
"both incoming and outgoing mail:"
17333
msgstr ""
17334
17335
#: serverguide/C/mail.xml:158(screen)
17336
#, no-wrap
17337
msgid ""
17338
"\n"
17339
"sudo postconf -e 'smtpd_tls_auth_only = no'\n"
17340
"sudo postconf -e 'smtp_use_tls = yes'\n"
17341
"sudo postconf -e 'smtpd_use_tls = yes'\n"
17342
"sudo postconf -e 'smtp_tls_note_starttls_offer = yes'\n"
17343
"sudo postconf -e 'smtpd_tls_key_file = /etc/ssl/private/server.key'\n"
17344
"sudo postconf -e 'smtpd_tls_cert_file = /etc/ssl/certs/server.crt'\n"
17345
"sudo postconf -e 'smtpd_tls_loglevel = 1'\n"
17346
"sudo postconf -e 'smtpd_tls_received_header = yes'\n"
17347
"sudo postconf -e 'smtpd_tls_session_cache_timeout = 3600s'\n"
17348
"sudo postconf -e 'tls_random_source = dev:/dev/urandom'\n"
17349
"sudo postconf -e 'myhostname = mail.example.com'\n"
17350
msgstr ""
17351
17352
#: serverguide/C/mail.xml:173(para)
17353
msgid ""
17354
"If you are using your own <emphasis>Certificate Authority</emphasis> to sign "
17355
"the certificate enter:"
17356
msgstr ""
17357
17358
#: serverguide/C/mail.xml:177(command)
17359
msgid "sudo postconf -e 'smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem'"
17360
msgstr ""
17361
17362
#: serverguide/C/mail.xml:180(para)
17363
msgid ""
17364
"Again, for more details about certificates see <xref linkend=\"certificates-"
17365
"and-security\"/>."
17366
msgstr ""
17367
17368
#: serverguide/C/mail.xml:186(para)
17369
msgid ""
17370
"After running all the commands, <application>Postfix</application> is "
17371
"configured for SMTP-AUTH and a self-signed certificate has been created for "
17372
"TLS encryption."
17373
msgstr ""
17374
17375
#: serverguide/C/mail.xml:191(para)
17376
msgid ""
17377
"Now, the file <filename>/etc/postfix/main.cf</filename> should look like "
17378
"<ulink url=\"../sample/postfix_configuration\">this</ulink>."
17379
msgstr ""
17380
17381
#: serverguide/C/mail.xml:195(para)
17382
msgid ""
17383
"The postfix initial configuration is complete. Run the following command to "
17384
"restart the postfix daemon:"
17385
msgstr ""
17386
17387
#: serverguide/C/mail.xml:201(command) serverguide/C/mail.xml:315(command) serverguide/C/mail.xml:378(command) serverguide/C/mail.xml:984(command) serverguide/C/mail.xml:1561(command)
17388
msgid "sudo /etc/init.d/postfix restart"
17389
msgstr ""
17390
17391
#: serverguide/C/mail.xml:204(para)
17392
msgid ""
17393
"<application>Postfix</application> supports SMTP-AUTH as defined in <ulink "
17394
"url=\"ftp://ftp.isi.edu/in-notes/rfc2554.txt\">RFC2554</ulink>. It is based "
17395
"on <ulink url=\"ftp://ftp.isi.edu/in-notes/rfc2222.txt\">SASL</ulink>. "
17396
"However it is still necessary to set up SASL authentication before you can "
17397
"use SMTP-AUTH."
17398
msgstr ""
17399
17400
#: serverguide/C/mail.xml:214(title) serverguide/C/mail.xml:609(title)
17401
msgid "Configuring SASL"
17402
msgstr ""
17403
17404
#: serverguide/C/mail.xml:215(para)
17405
msgid ""
17406
"Postfix supports two SASL implementations Cyrus SASL and Dovecot SASL. To "
17407
"enable Dovecot SASL the <application>dovecot-common</application> package "
17408
"will need to be installed. From a terminal prompt enter the following:"
17409
msgstr ""
17410
17411
#: serverguide/C/mail.xml:221(command)
17412
msgid "sudo apt-get install dovecot-common"
17413
msgstr ""
17414
17415
#: serverguide/C/mail.xml:223(para)
17416
msgid ""
17417
"Next you will need to edit <filename>/etc/dovecot/dovecot.conf</filename>. "
17418
"In the <emphasis>auth default</emphasis> section uncomment the "
17419
"<emphasis>socket listen</emphasis> option and change the following:"
17420
msgstr ""
17421
17422
#: serverguide/C/mail.xml:227(programlisting)
17423
#, no-wrap
17424
msgid ""
17425
"\n"
17426
" socket listen {\n"
17427
" #master {\n"
17428
" # Master socket provides access to userdb information. It's typically\n"
17429
" # used to give Dovecot's local delivery agent access to userdb so it\n"
17430
" # can find mailbox locations.\n"
17431
" #path = /var/run/dovecot/auth-master\n"
17432
" #mode = 0600\n"
17433
" # Default user/group is the one who started dovecot-auth (root)\n"
17434
" #user = \n"
17435
" #group = \n"
17436
" #}\n"
17437
" client {\n"
17438
" # The client socket is generally safe to export to everyone. Typical "
17439
"use\n"
17440
" # is to export it to your SMTP server so it can do SMTP AUTH lookups\n"
17441
" # using it.\n"
17442
" path = /var/spool/postfix/private/auth-client\n"
17443
" mode = 0660\n"
17444
" user = postfix\n"
17445
" group = postfix\n"
17446
" }\n"
17447
" }\n"
17448
msgstr ""
17449
17450
#: serverguide/C/mail.xml:251(para)
17451
msgid ""
17452
"In order to let <application>Outlook</application> clients use SMTPAUTH, in "
17453
"the <emphasis>auth default</emphasis> section of /etc/dovecot/dovecot.conf "
17454
"add <emphasis>\"login\"</emphasis>:"
17455
msgstr ""
17456
17457
#: serverguide/C/mail.xml:256(programlisting)
17458
#, no-wrap
17459
msgid ""
17460
"\n"
17461
" mechanisms = plain login\n"
17462
msgstr ""
17463
17464
#: serverguide/C/mail.xml:260(para)
17465
msgid ""
17466
"Once you have <application>Dovecot</application> configured restart it with:"
17467
msgstr ""
17468
17469
#: serverguide/C/mail.xml:264(command) serverguide/C/mail.xml:735(command)
17470
msgid "sudo /etc/init.d/dovecot restart"
17471
msgstr ""
17472
17473
#: serverguide/C/mail.xml:269(title)
17474
msgid "Postfix-Dovecot"
17475
msgstr ""
17476
17477
#: serverguide/C/mail.xml:271(para)
17478
msgid ""
17479
"Another option for configuring <application>Postfix</application> for SMTP-"
17480
"AUTH is using the <application>dovecot-postfix</application> package. This "
17481
"package will install <application>Dovecot</application> and configure "
17482
"<application>Postfix</application> to use it for both SASL authentication "
17483
"and as a Mail Delivery Agent (MDA). The package also configures "
17484
"<application>Dovecot</application> for IMAP, IMAPS, POP3, and POP3S."
17485
msgstr ""
17486
17487
#: serverguide/C/mail.xml:280(para)
17488
msgid ""
17489
"You may or may not want to run IMAP, IMAPS, POP3, or POP3S on your mail "
17490
"server. For example, if you are configuring your server to be a mail "
17491
"gateway, spam/virus filter, etc. If this is the case it may be easier to use "
17492
"the above commands to configure Postfix for SMTPAUTH."
17493
msgstr ""
17494
17495
#: serverguide/C/mail.xml:287(para)
17496
msgid "To install the package, from a terminal prompt enter:"
17497
msgstr ""
17498
17499
#: serverguide/C/mail.xml:292(command)
17500
msgid "sudo apt-get install dovecot-postfix"
17501
msgstr ""
17502
17503
#: serverguide/C/mail.xml:295(para)
17504
msgid ""
17505
"You should now have a working mail server, but there are a few options that "
17506
"you may wish to further customize. For example, the package uses the "
17507
"certificate and key from the <application>ssl-cert</application> package, "
17508
"and in a production environment you should use a certificate and key "
17509
"generated for the host. See <xref linkend=\"certificates-and-security\"/> "
17510
"for more details."
17511
msgstr ""
17512
17513
#: serverguide/C/mail.xml:301(para)
17514
msgid ""
17515
"Once you have a customized certificate and key for the host, change the "
17516
"following options in <filename>/etc/postfix/main.cf</filename>:"
17517
msgstr ""
17518
17519
#: serverguide/C/mail.xml:305(programlisting)
17520
#, no-wrap
17521
msgid ""
17522
"\n"
17523
"smtpd_tls_cert_file = /etc/ssl/certs/ssl-mail.pem\n"
17524
"smtpd_tls_key_file = /etc/ssl/private/ssl-mail.key\n"
17525
msgstr ""
17526
17527
#: serverguide/C/mail.xml:310(para)
17528
msgid "Then restart Postfix:"
17529
msgstr ""
17530
17531
#: serverguide/C/mail.xml:321(para)
17532
msgid ""
17533
"SMTP-AUTH configuration is complete. Now it is time to test the setup."
17534
msgstr ""
17535
17536
#: serverguide/C/mail.xml:324(para)
17537
msgid "To see if SMTP-AUTH and TLS work properly, run the following command:"
17538
msgstr ""
17539
17540
#: serverguide/C/mail.xml:329(command)
17541
msgid "telnet mail.example.com 25"
17542
msgstr ""
17543
17544
#: serverguide/C/mail.xml:331(para)
17545
msgid ""
17546
"After you have established the connection to the postfix mail server, type:"
17547
msgstr ""
17548
17549
#: serverguide/C/mail.xml:335(screen)
17550
#, no-wrap
17551
msgid ""
17552
"\n"
17553
"ehlo mail.example.com\n"
17554
msgstr ""
17555
17556
#: serverguide/C/mail.xml:338(para)
17557
msgid ""
17558
"If you see the following lines among others, then everything is working "
17559
"perfectly. Type <command>quit</command> to exit."
17560
msgstr ""
17561
17562
#: serverguide/C/mail.xml:342(programlisting)
17563
#, no-wrap
17564
msgid ""
17565
"\n"
17566
"250-STARTTLS\n"
17567
"250-AUTH LOGIN PLAIN\n"
17568
"250-AUTH=LOGIN PLAIN\n"
17569
"250 8BITMIME\n"
17570
msgstr ""
17571
17572
#: serverguide/C/mail.xml:352(para)
17573
msgid ""
17574
"This section introduces some common ways to determine the cause if problems "
17575
"arise."
17576
msgstr ""
17577
17578
#: serverguide/C/mail.xml:356(title)
17579
msgid "Escaping chroot"
17580
msgstr ""
17581
17582
#: serverguide/C/mail.xml:357(para)
17583
msgid ""
17584
"The Ubuntu <application>postfix</application> package will by default "
17585
"install into a <emphasis>chroot</emphasis> environment for security reasons. "
17586
"This can add greater complexity when troubleshooting problems."
17587
msgstr ""
17588
17589
#: serverguide/C/mail.xml:361(para)
17590
msgid ""
17591
"To turn off the chroot operation locate for the following line in the "
17592
"<filename>/etc/postfix/master.cf</filename> configuration file:"
17593
msgstr ""
17594
17595
#: serverguide/C/mail.xml:365(screen)
17596
#, no-wrap
17597
msgid ""
17598
"\n"
17599
"smtp inet n - - - - smtpd\n"
17600
msgstr ""
17601
17602
#: serverguide/C/mail.xml:368(para)
17603
msgid "and modify it as follows:"
17604
msgstr ""
17605
17606
#: serverguide/C/mail.xml:371(screen)
17607
#, no-wrap
17608
msgid ""
17609
"\n"
17610
"smtp inet n - n - - smtpd\n"
17611
msgstr ""
17612
17613
#: serverguide/C/mail.xml:374(para)
17614
msgid ""
17615
"You will then need to restart Postfix to use the new configuration. From a "
17616
"terminal prompt enter:"
17617
msgstr ""
17618
17619
#: serverguide/C/mail.xml:382(title)
17620
msgid "Log Files"
17621
msgstr ""
17622
17623
#: serverguide/C/mail.xml:383(para)
17624
msgid ""
17625
"<application>Postfix</application> sends all log messages to "
17626
"<filename>/var/log/mail.log</filename>. However error and warning messages "
17627
"can sometimes get lost in the normal log output so they are also logged to "
17628
"<filename>/var/log/mail.err</filename> and "
17629
"<filename>/var/log/mail.warn</filename> respectively."
17630
msgstr ""
17631
17632
#: serverguide/C/mail.xml:388(para)
17633
msgid ""
17634
"To see messages entered into the logs in real time you can use the "
17635
"<application>tail -f</application> command:"
17636
msgstr ""
17637
17638
#: serverguide/C/mail.xml:393(command)
17639
msgid "tail -f /var/log/mail.err"
17640
msgstr ""
17641
17642
#: serverguide/C/mail.xml:395(para)
17643
msgid ""
17644
"The amount of detail that is recorded in the logs can be increased. Below "
17645
"are some configuration options for increasing the log level for some of the "
17646
"areas covered above."
17647
msgstr ""
17648
17649
#: serverguide/C/mail.xml:401(para)
17650
msgid ""
17651
"To increase <emphasis>TLS</emphasis> activity logging set the "
17652
"<emphasis>smtpd_tls_loglevel</emphasis> option to a value from 1 to 4."
17653
msgstr ""
17654
17655
#: serverguide/C/mail.xml:405(command)
17656
msgid "sudo postconf -e 'smtpd_tls_loglevel = 4'"
17657
msgstr ""
17658
17659
#: serverguide/C/mail.xml:409(para)
17660
msgid ""
17661
"If you are having trouble sending or receiving mail from a specific domain "
17662
"you can add the domain to the <emphasis>debug_peer_list</emphasis> parameter."
17663
msgstr ""
17664
17665
#: serverguide/C/mail.xml:414(command)
17666
msgid "sudo postconf -e 'debug_peer_list = problem.domain'"
17667
msgstr ""
17668
17669
#: serverguide/C/mail.xml:418(para)
17670
msgid ""
17671
"You can increase the verbosity of any <application>Postfix</application> "
17672
"daemon process by editing the <filename>/etc/postfix/master.cf</filename> "
17673
"and adding a <emphasis>-v</emphasis> after the entry. For example edit the "
17674
"<emphasis>smtp</emphasis> entry:"
17675
msgstr ""
17676
17677
#: serverguide/C/mail.xml:422(programlisting)
17678
#, no-wrap
17679
msgid ""
17680
"\n"
17681
"smtp unix - - - - - smtp -v\n"
17682
msgstr ""
17683
17684
#: serverguide/C/mail.xml:428(para)
17685
msgid ""
17686
"It is important to note that after making one of the logging changes above "
17687
"the <application>Postfix</application> process will need to be reloaded in "
17688
"order to recognize the new configuration: <command>sudo /etc/init.d/postfix "
17689
"reload</command>"
17690
msgstr ""
17691
17692
#: serverguide/C/mail.xml:435(para)
17693
msgid ""
17694
"To increase the amount of information logged when troubleshooting "
17695
"<emphasis>SASL</emphasis> issues you can set the following options in "
17696
"<filename>/etc/dovecot/dovecot.conf</filename>"
17697
msgstr ""
17698
17699
#: serverguide/C/mail.xml:439(programlisting)
17700
#, no-wrap
17701
msgid ""
17702
"\n"
17703
"auth_debug=yes\n"
17704
"auth_debug_passwords=yes\n"
17705
msgstr ""
17706
17707
#: serverguide/C/mail.xml:446(para)
17708
msgid ""
17709
"Just like <application>Postfix</application> if you change a "
17710
"<application>Dovecot</application> configuration the process will need to be "
17711
"reloaded: <command>sudo /etc/init.d/dovecot reload</command>."
17712
msgstr ""
17713
17714
#: serverguide/C/mail.xml:452(para)
17715
msgid ""
17716
"Some of the options above can drastically increase the amount of information "
17717
"sent to the log files. Remember to return the log level back to normal after "
17718
"you have corrected the problem. Then reload the appropriate daemon for the "
17719
"new configuration to take affect."
17720
msgstr ""
17721
17722
#: serverguide/C/mail.xml:460(para)
17723
msgid ""
17724
"Administering a <application>Postfix</application> server can be a very "
17725
"complicated task. At some point you may need to turn to the Ubuntu community "
17726
"for more experienced help."
17727
msgstr ""
17728
17729
#: serverguide/C/mail.xml:464(para)
17730
msgid ""
17731
"A great place to ask for <application>Postfix</application> assistance, and "
17732
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
17733
"server</emphasis> IRC channel on <ulink "
17734
"url=\"http://freenode.net\">freenode</ulink>. You can also post a message to "
17735
"one of the <ulink "
17736
"url=\"http://www.ubuntu.com/support/community/webforums\">Web Forums</ulink>."
17737
msgstr ""
17738
17739
#: serverguide/C/mail.xml:469(para)
17740
msgid ""
17741
"For in depth <application>Postfix</application> information Ubuntu "
17742
"developers highly recommend: <ulink url=\"http://www.postfix-book.com/\">The "
17743
"Book of Postfix</ulink>."
17744
msgstr ""
17745
17746
#: serverguide/C/mail.xml:473(para)
17747
msgid ""
17748
"Finally, the <ulink "
17749
"url=\"http://www.postfix.org/documentation.html\">Postfix</ulink> website "
17750
"also has great documentation on all the different configuration options "
17751
"available."
17752
msgstr ""
17753
17754
#: serverguide/C/mail.xml:477(para)
17755
msgid ""
17756
"Also, the <ulink url=\"https://help.ubuntu.com/community/Postfix\">Ubuntu "
17757
"Wiki Postifx</ulink> page has more information."
17758
msgstr ""
17759
17760
#: serverguide/C/mail.xml:485(title) serverguide/C/mail.xml:872(title) serverguide/C/mail.xml:988(title)
17761
msgid "Exim4"
17762
msgstr ""
17763
17764
#: serverguide/C/mail.xml:486(para)
17765
msgid ""
17766
"<application>Exim4</application> is another Message Transfer Agent (MTA) "
17767
"developed at the University of Cambridge for use on Unix systems connected "
17768
"to the Internet. Exim can be installed in place of "
17769
"<application>sendmail</application>, although the configuration of "
17770
"<application>exim</application> is quite different to that of "
17771
"<application>sendmail</application>."
17772
msgstr ""
17773
17774
#: serverguide/C/mail.xml:497(para)
17775
msgid ""
17776
"To install <application>exim4</application>, run the following command: "
17777
"<screen>\n"
17778
"<command>sudo apt-get install exim4</command>\n"
17779
"</screen>"
17780
msgstr ""
17781
17782
#: serverguide/C/mail.xml:506(para)
17783
msgid ""
17784
"To configure <application>Exim4</application>, run the following command:"
17785
msgstr ""
17786
17787
#: serverguide/C/mail.xml:510(command)
17788
msgid "sudo dpkg-reconfigure exim4-config"
17789
msgstr ""
17790
17791
#: serverguide/C/mail.xml:512(para)
17792
msgid ""
17793
"The user interface will be displayed. The user interface lets you configure "
17794
"many parameters. For example, In <application>Exim4</application> the "
17795
"configuration files are split among multiple files. If you wish to have them "
17796
"in one file you can configure accordingly in this user interface."
17797
msgstr ""
17798
17799
#: serverguide/C/mail.xml:520(para)
17800
msgid ""
17801
"All the parameters you configure in the user interface are stored in "
17802
"<filename>/etc/exim4/update-exim4.conf.conf</filename> file. If you wish to "
17803
"re-configure, either you re-run the configuration wizard or manually edit "
17804
"this file using your favorite editor. Once you configure, you can run the "
17805
"following command to generate the master configuration file:"
17806
msgstr ""
17807
17808
#: serverguide/C/mail.xml:531(command) serverguide/C/mail.xml:604(command)
17809
msgid "sudo update-exim4.conf"
17810
msgstr ""
17811
17812
#: serverguide/C/mail.xml:533(para)
17813
msgid ""
17814
"The master configuration file, is generated and it is stored in "
17815
"<filename>/var/lib/exim4/config.autogenerated</filename>."
17816
msgstr ""
17817
17818
#: serverguide/C/mail.xml:539(para)
17819
msgid ""
17820
"At any time, you should not edit the master configuration file, "
17821
"<filename>/var/lib/exim4/config.autogenerated</filename> manually. It is "
17822
"updated automatically every time you run <command>update-exim4.conf</command>"
17823
msgstr ""
17824
17825
#: serverguide/C/mail.xml:547(para)
17826
msgid ""
17827
"You can run the following command to start <application>Exim4</application> "
17828
"daemon."
17829
msgstr ""
17830
17831
#: serverguide/C/mail.xml:552(command) serverguide/C/mail.xml:994(command)
17832
msgid "sudo /etc/init.d/exim4 start"
17833
msgstr ""
17834
17835
#: serverguide/C/mail.xml:557(para)
17836
msgid ""
17837
"This section covers configuring Exim4 to use SMTP-AUTH with TLS and SASL."
17838
msgstr ""
17839
17840
#: serverguide/C/mail.xml:560(para)
17841
msgid ""
17842
"The first step is to create a certificate for use with TLS. Enter the "
17843
"following into a terminal prompt:"
17844
msgstr ""
17845
17846
#: serverguide/C/mail.xml:564(command)
17847
msgid "sudo /usr/share/doc/exim4-base/examples/exim-gencert"
17848
msgstr ""
17849
17850
#: serverguide/C/mail.xml:566(para)
17851
msgid ""
17852
"Now Exim4 needs to be configured for TLS by editing "
17853
"<filename>/etc/exim4/conf.d/main/03_exim4-config_tlsoptions</filename> add "
17854
"the following:"
17855
msgstr ""
17856
17857
#: serverguide/C/mail.xml:570(programlisting)
17858
#, no-wrap
17859
msgid ""
17860
"\n"
17861
"MAIN_TLS_ENABLE = yes\n"
17862
msgstr ""
17863
17864
#: serverguide/C/mail.xml:573(para)
17865
msgid ""
17866
"Next you need to configure <application>Exim4</application> to use the "
17867
"<application>saslauthd</application> for authentication. Edit "
17868
"<filename>/etc/exim4/conf.d/auth/30_exim4-config_examples</filename> and "
17869
"uncomment the <emphasis>plain_saslauthd_server</emphasis> and "
17870
"<emphasis>login_saslauthd_server</emphasis> sections:"
17871
msgstr ""
17872
17873
#: serverguide/C/mail.xml:578(programlisting)
17874
#, no-wrap
17875
msgid ""
17876
"\n"
17877
" plain_saslauthd_server:\n"
17878
" driver = plaintext\n"
17879
" public_name = PLAIN\n"
17880
" server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}\n"
17881
" server_set_id = $auth2\n"
17882
" server_prompts = :\n"
17883
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
17884
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
17885
" .endif\n"
17886
"#\n"
17887
" login_saslauthd_server:\n"
17888
" driver = plaintext\n"
17889
" public_name = LOGIN\n"
17890
" server_prompts = \"Username:: : Password::\"\n"
17891
" # don't send system passwords over unencrypted connections\n"
17892
" server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}}\n"
17893
" server_set_id = $auth1\n"
17894
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
17895
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
17896
" .endif\n"
17897
msgstr ""
17898
17899
#: serverguide/C/mail.xml:600(para)
17900
msgid "Finally, update the Exim4 configuration and restart the service:"
17901
msgstr ""
17902
17903
#: serverguide/C/mail.xml:605(command)
17904
msgid "sudo /etc/init.d/exim4 restart"
17905
msgstr ""
17906
17907
#: serverguide/C/mail.xml:610(para)
17908
msgid ""
17909
"This section provides details on configuring the saslauthd to provide "
17910
"authentication for <application>Exim4</application>."
17911
msgstr ""
17912
17913
#: serverguide/C/mail.xml:613(para)
17914
msgid ""
17915
"The first step is to install the sasl2-bin package. From a terminal prompt "
17916
"enter the following:"
17917
msgstr ""
17918
17919
#: serverguide/C/mail.xml:617(command)
17920
msgid "sudo apt-get install sasl2-bin"
17921
msgstr ""
17922
17923
#: serverguide/C/mail.xml:619(para)
17924
msgid ""
17925
"To configure saslauthd edit the /etc/default/saslauthd configuration file "
17926
"and set START=no to:"
17927
msgstr ""
17928
17929
#: serverguide/C/mail.xml:622(programlisting)
17930
#, no-wrap
17931
msgid ""
17932
"\n"
17933
"START=yes\n"
17934
msgstr ""
17935
17936
#: serverguide/C/mail.xml:625(para)
17937
msgid ""
17938
"Next the <emphasis>Debian-exim</emphasis> user needs to be part of the "
17939
"<emphasis>sasl</emphasis> group in order for Exim4 to use the saslauthd "
17940
"service:"
17941
msgstr ""
17942
17943
#: serverguide/C/mail.xml:630(command)
17944
msgid "sudo adduser Debian-exim sasl"
17945
msgstr ""
17946
17947
#: serverguide/C/mail.xml:632(para)
17948
msgid "Now start the <application>saslauthd</application> service:"
17949
msgstr ""
17950
17951
#: serverguide/C/mail.xml:636(command)
17952
msgid "sudo /etc/init.d/saslauthd start"
17953
msgstr ""
17954
17955
#: serverguide/C/mail.xml:638(para)
17956
msgid ""
17957
"<application>Exim4</application> is now configured with SMTP-AUTH using TLS "
17958
"and SASL authentication."
17959
msgstr ""
17960
17961
#: serverguide/C/mail.xml:647(para)
17962
msgid ""
17963
"See <ulink url=\"http://www.exim.org/\">exim.org</ulink> for more "
17964
"information."
17965
msgstr ""
17966
17967
#: serverguide/C/mail.xml:652(para)
17968
msgid ""
17969
"There is also an <ulink url=\"http://www.uit.co.uk/content/exim-smtp-mail-"
17970
"server\">Exim4 Book</ulink> available."
17971
msgstr ""
17972
17973
#: serverguide/C/mail.xml:657(para)
17974
msgid ""
17975
"Another resource is the <ulink "
17976
"url=\"https://help.ubuntu.com/community/Exim4\">Exim4 Ubuntu Wiki </ulink> "
17977
"page."
17978
msgstr ""
17979
17980
#: serverguide/C/mail.xml:666(title)
17981
msgid "Dovecot Server"
17982
msgstr ""
17983
17984
#: serverguide/C/mail.xml:667(para)
17985
msgid ""
17986
"<application>Dovecot</application> is a Mail Delivery Agent, written with "
17987
"security primarily in mind. It supports the major mailbox formats: mbox or "
17988
"Maildir. This section explain how to set it up as an imap or pop3 server."
17989
msgstr ""
17990
17991
#: serverguide/C/mail.xml:675(para)
17992
msgid ""
17993
"To install <application>dovecot</application>, run the following command in "
17994
"the command prompt:"
17995
msgstr ""
17996
17997
#: serverguide/C/mail.xml:680(command)
17998
msgid "sudo apt-get install dovecot-imapd dovecot-pop3d"
17999
msgstr ""
18000
18001
#: serverguide/C/mail.xml:685(para)
18002
msgid ""
18003
"To configure <application>dovecot</application>, you can edit the file "
18004
"<filename>/etc/dovecot/dovecot.conf</filename>. You can choose the protocol "
18005
"you use. It could be pop3, pop3s (pop3 secure), imap and imaps (imap "
18006
"secure). A description of these protocols is beyond the scope of this guide. "
18007
"For further information, refer to the Wikipedia articles on <ulink "
18008
"url=\"http://en.wikipedia.org/wiki/POP3\">POP3</ulink> and <ulink "
18009
"url=\"http://en.wikipedia.org/wiki/Internet_Message_Access_Protocol\">IMAP</u"
18010
"link>."
18011
msgstr ""
18012
18013
#: serverguide/C/mail.xml:695(para)
18014
msgid ""
18015
"IMAPS and POP3S are more secure that the simple IMAP and POP3 because they "
18016
"use SSL encryption to connect. Once you have chosen the protocol, amend the "
18017
"following line in the file <filename>/etc/dovecot/dovecot.conf</filename>:"
18018
msgstr ""
18019
18020
#: serverguide/C/mail.xml:701(programlisting)
18021
#, no-wrap
18022
msgid ""
18023
"\n"
18024
"protocols = pop3 pop3s imap imaps\n"
18025
msgstr ""
18026
18027
#: serverguide/C/mail.xml:704(para)
18028
msgid ""
18029
"Next, choose the mailbox you would like to use. "
18030
"<application>Dovecot</application> supports <emphasis "
18031
"role=\"strong\">maildir</emphasis> and <emphasis "
18032
"role=\"strong\">mbox</emphasis> formats. These are the most commonly used "
18033
"mailbox formats. They both have their own benefits and are discussed on "
18034
"<ulink url=\"http://wiki.dovecot.org/MailboxFormat\">the Dovecot web "
18035
"site</ulink>."
18036
msgstr ""
18037
18038
#: serverguide/C/mail.xml:712(para)
18039
msgid ""
18040
"Once you have chosen your mailbox type, edit the file "
18041
"<filename>/etc/dovecot/dovecot.conf</filename> and change the following line:"
18042
msgstr ""
18043
18044
#: serverguide/C/mail.xml:717(programlisting)
18045
#, no-wrap
18046
msgid ""
18047
"\n"
18048
"mail_location = maildir:~/Maildir # (for maildir)\n"
18049
"or\n"
18050
"mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u # (for mbox)\n"
18051
msgstr ""
18052
18053
#: serverguide/C/mail.xml:723(para)
18054
msgid ""
18055
"You should configure your Mail Transport Agent (MTA) to transfer the "
18056
"incoming mail to this type of mailbox if it is different from the one you "
18057
"have configured."
18058
msgstr ""
18059
18060
#: serverguide/C/mail.xml:729(para)
18061
msgid ""
18062
"Once you have configured dovecot, restart the "
18063
"<application>dovecot</application> daemon in order to test your setup:"
18064
msgstr ""
18065
18066
#: serverguide/C/mail.xml:738(para)
18067
msgid ""
18068
"If you have enabled imap, or pop3, you can also try to log in with the "
18069
"commands <command>telnet localhost pop3</command> or <command>telnet "
18070
"localhost imap2</command>. If you see something like the following, the "
18071
"installation has been successful:"
18072
msgstr ""
18073
18074
#: serverguide/C/mail.xml:745(programlisting)
18075
#, no-wrap
18076
msgid ""
18077
"\n"
18078
"bhuvan@rainbow:~$ telnet localhost pop3\n"
18079
"Trying 127.0.0.1...\n"
18080
"Connected to localhost.localdomain.\n"
18081
"Escape character is '^]'.\n"
18082
"+OK Dovecot ready.\n"
18083
msgstr ""
18084
18085
#: serverguide/C/mail.xml:754(title)
18086
msgid "Dovecot SSL Configuration"
18087
msgstr ""
18088
18089
#: serverguide/C/mail.xml:755(para)
18090
msgid ""
18091
"To configure <application>dovecot</application> to use SSL, you can edit the "
18092
"file <filename>/etc/dovecot/dovecot.conf</filename> and amend following "
18093
"lines:"
18094
msgstr ""
18095
18096
#: serverguide/C/mail.xml:760(programlisting)
18097
#, no-wrap
18098
msgid ""
18099
"\n"
18100
"ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem\n"
18101
"ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key\n"
18102
"ssl_disable = no\n"
18103
"disable_plaintext_auth = no\n"
18104
msgstr ""
18105
18106
#: serverguide/C/mail.xml:766(para)
18107
msgid ""
18108
"You can get the SSL certificate from a Certificate Issuing Authority or you "
18109
"can create self signed SSL certificate. The latter is a good option for "
18110
"email, because SMTP clients rarely complain about \"self-signed "
18111
"certificates\". Please refer to <xref linkend=\"certificates-and-"
18112
"security\"/> for details about how to create self signed SSL certificate. "
18113
"Once you create the certificate, you will have a key file and a certificate "
18114
"file. Please copy them to the location pointed in the "
18115
"<filename>/etc/dovecot/dovecot.conf</filename> configuration file."
18116
msgstr ""
18117
18118
#: serverguide/C/mail.xml:781(title)
18119
msgid "Firewall Configuration for an Email Server"
18120
msgstr ""
18121
18122
#: serverguide/C/mail.xml:787(para)
18123
msgid "IMAP - 143"
18124
msgstr ""
18125
18126
#: serverguide/C/mail.xml:788(para)
18127
msgid "IMAPS - 993"
18128
msgstr ""
18129
18130
#: serverguide/C/mail.xml:789(para)
18131
msgid "POP3 - 110"
18132
msgstr ""
18133
18134
#: serverguide/C/mail.xml:790(para)
18135
msgid "POP3S - 995"
18136
msgstr ""
18137
18138
#: serverguide/C/mail.xml:782(para)
18139
msgid ""
18140
"To access your mail server from another computer, you must configure your "
18141
"firewall to allow connections to the server on the necessary ports. "
18142
"<placeholder-1/>"
18143
msgstr ""
18144
18145
#: serverguide/C/mail.xml:799(para)
18146
msgid ""
18147
"See the <ulink url=\"http://www.dovecot.org/\">Dovecot website</ulink> for "
18148
"more information."
18149
msgstr ""
18150
18151
#: serverguide/C/mail.xml:804(para)
18152
msgid ""
18153
"Also, the <ulink url=\"https://help.ubuntu.com/community/Dovecot\">Dovecot "
18154
"Ubuntu Wiki</ulink> page has more details."
18155
msgstr ""
18156
18157
#: serverguide/C/mail.xml:813(title) serverguide/C/mail.xml:890(title) serverguide/C/mail.xml:1113(title)
18158
msgid "Mailman"
18159
msgstr ""
18160
18161
#: serverguide/C/mail.xml:814(para)
18162
msgid ""
18163
"Mailman is an open source program for managing electronic mail discussions "
18164
"and e-newsletter lists. Many open source mailing lists (including all the "
18165
"<ulink url=\"http://lists.ubuntu.com\">Ubuntu mailing lists</ulink>) use "
18166
"Mailman as their mailing list software. It is powerful and easy to install "
18167
"and maintain."
18168
msgstr ""
18169
18170
#: serverguide/C/mail.xml:824(para)
18171
msgid ""
18172
"Mailman provides a web interface for the administrators and users, using an "
18173
"external mail server to send and receive emails. It works perfectly with the "
18174
"following mail servers:"
18175
msgstr ""
18176
18177
#: serverguide/C/mail.xml:835(application)
18178
msgid "Exim"
18179
msgstr ""
18180
18181
#: serverguide/C/mail.xml:838(application)
18182
msgid "Sendmail"
18183
msgstr "Sendmail"
18184
18185
#: serverguide/C/mail.xml:841(application)
18186
msgid "Qmail"
18187
msgstr ""
18188
18189
#: serverguide/C/mail.xml:846(para)
18190
msgid ""
18191
"We will see how to install and configure Mailman with, the Apache web "
18192
"server, and either the Postfix or Exim mail server. If you wish to install "
18193
"Mailman with a different mail server, please refer to the references section."
18194
msgstr ""
18195
18196
#: serverguide/C/mail.xml:853(para)
18197
msgid ""
18198
"You only need to install one mail server and "
18199
"<application>Postfix</application> is the default Ubuntu Mail Transfer Agent."
18200
msgstr ""
18201
18202
#: serverguide/C/mail.xml:858(title) serverguide/C/mail.xml:917(title)
18203
msgid "Apache2"
18204
msgstr ""
18205
18206
#: serverguide/C/mail.xml:859(para)
18207
msgid ""
18208
"To install apache2 you refer to <ulink url=\"./web-servers.xml#http-"
18209
"installation\">HTTPD Installation</ulink> section for details."
18210
msgstr ""
18211
18212
#: serverguide/C/mail.xml:867(para)
18213
msgid ""
18214
"For instructions on installing and configuring Postfix refer to <xref "
18215
"linkend=\"postfix\"/>"
18216
msgstr ""
18217
18218
#: serverguide/C/mail.xml:873(para)
18219
msgid "To install Exim4 refer to <xref linkend=\"exim4\"/>."
18220
msgstr ""
18221
18222
#: serverguide/C/mail.xml:884(application)
18223
msgid "dc_use_split_config='true'"
18224
msgstr ""
18225
18226
#: serverguide/C/mail.xml:876(para)
18227
msgid ""
18228
"Once exim4 is installed, the configuration files are stored in the "
18229
"<filename>/etc/exim4</filename> directory. In Ubuntu, by default, the exim4 "
18230
"configuration files are split across different files. You can change this "
18231
"behavior by changing the following variable in the "
18232
"<filename>/etc/exim4/update-exim4.conf</filename> file: <placeholder-1/>"
18233
msgstr ""
18234
18235
#: serverguide/C/mail.xml:891(para)
18236
msgid ""
18237
"To install <application>Mailman</application>, run following command at a "
18238
"terminal prompt:"
18239
msgstr ""
18240
18241
#: serverguide/C/mail.xml:895(command)
18242
msgid "sudo apt-get install mailman"
18243
msgstr ""
18244
18245
#: serverguide/C/mail.xml:897(para)
18246
msgid ""
18247
"It copies the installation files in "
18248
"<application>/var/lib/mailman</application> directory. It installs the CGI "
18249
"scripts in <application>/usr/lib/cgi-bin/mailman</application> directory. It "
18250
"creates <emphasis>list</emphasis> linux user. It creates the "
18251
"<emphasis>list</emphasis> linux group. The mailman process will be owned by "
18252
"this user."
18253
msgstr ""
18254
18255
#: serverguide/C/mail.xml:909(para)
18256
msgid ""
18257
"This section assumes you have successfully installed "
18258
"<application>mailman</application>, <application>apache2</application>, and "
18259
"<application>postfix</application> or <application>exim4</application>. Now "
18260
"you just need to configure them."
18261
msgstr ""
18262
18263
#: serverguide/C/mail.xml:918(para)
18264
msgid ""
18265
"An example Apache configuration file comes with "
18266
"<application>Mailman</application> and is placed in "
18267
"<filename>/etc/mailman/apache.conf</filename>. In order for Apache to use "
18268
"the config file it needs to be copied to <filename>/etc/apache2/sites-"
18269
"available</filename>:"
18270
msgstr ""
18271
18272
#: serverguide/C/mail.xml:924(command)
18273
msgid ""
18274
"sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf"
18275
msgstr ""
18276
18277
#: serverguide/C/mail.xml:926(para)
18278
msgid ""
18279
"This will setup a new Apache <emphasis>VirtualHost</emphasis> for the "
18280
"Mailman administration site. Now enable the new configuration and restart "
18281
"Apache:"
18282
msgstr ""
18283
18284
#: serverguide/C/mail.xml:931(command)
18285
msgid "sudo a2ensite mailman.conf"
18286
msgstr ""
18287
18288
#: serverguide/C/mail.xml:934(para)
18289
msgid ""
18290
"Mailman uses apache2 to render its CGI scripts. The mailman CGI scripts are "
18291
"installed in the <application>/usr/lib/cgi-bin/mailman</application> "
18292
"directory. So, the mailman url will be http://hostname/cgi-bin/mailman/. You "
18293
"can make changes to the <filename>/etc/apache2/sites-"
18294
"available/mailman.conf</filename> file if you wish to change this behavior."
18295
msgstr ""
18296
18297
#: serverguide/C/mail.xml:945(para)
18298
msgid ""
18299
"For <application>Postfix</application> integration, we will associate the "
18300
"domain lists.example.com with the mailing lists. Please replace "
18301
"<emphasis>lists.example.com</emphasis> with the domain of your choosing."
18302
msgstr ""
18303
18304
#: serverguide/C/mail.xml:949(para)
18305
msgid ""
18306
"You can use the postconf command to add the necessary configuration to "
18307
"<filename>/etc/postfix/main.cf</filename>:"
18308
msgstr ""
18309
18310
#: serverguide/C/mail.xml:953(command)
18311
msgid "sudo postconf -e 'relay_domains = lists.example.com'"
18312
msgstr ""
18313
18314
#: serverguide/C/mail.xml:954(command)
18315
msgid "sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'"
18316
msgstr ""
18317
18318
#: serverguide/C/mail.xml:955(command)
18319
msgid "sudo postconf -e 'mailman_destination_recipient_limit = 1'"
18320
msgstr ""
18321
18322
#: serverguide/C/mail.xml:957(para)
18323
msgid ""
18324
"In <filename>/etc/postfix/master.cf</filename> double check that you have "
18325
"the following transport:"
18326
msgstr ""
18327
18328
#: serverguide/C/mail.xml:960(programlisting)
18329
#, no-wrap
18330
msgid ""
18331
"\n"
18332
"mailman unix - n n - - pipe\n"
18333
" flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py\n"
18334
" ${nexthop} ${user}\n"
18335
msgstr ""
18336
18337
#: serverguide/C/mail.xml:965(para)
18338
msgid ""
18339
"It calls the <emphasis>postfix-to-mailman.py</emphasis> script when a mail "
18340
"is delivered to a list."
18341
msgstr ""
18342
18343
#: serverguide/C/mail.xml:968(para)
18344
msgid ""
18345
"Associate the domain lists.example.com to the Mailman transport with the "
18346
"transport map. Edit the file <filename>/etc/postfix/transport</filename>:"
18347
msgstr ""
18348
18349
#: serverguide/C/mail.xml:971(programlisting)
18350
#, no-wrap
18351
msgid ""
18352
"\n"
18353
"lists.example.com mailman:\n"
18354
msgstr ""
18355
18356
#: serverguide/C/mail.xml:974(para)
18357
msgid ""
18358
"Now have <application>Postfix</application> build the transport map by "
18359
"entering the following from a terminal prompt:"
18360
msgstr ""
18361
18362
#: serverguide/C/mail.xml:978(command)
18363
msgid "sudo postmap -v /etc/postfix/transport"
18364
msgstr ""
18365
18366
#: serverguide/C/mail.xml:980(para)
18367
msgid "Then restart Postfix to enable the new configurations:"
18368
msgstr ""
18369
18370
#: serverguide/C/mail.xml:989(para)
18371
msgid ""
18372
"Once Exim4 is installed, you can start the Exim server using the following "
18373
"command from a terminal prompt:"
18374
msgstr ""
18375
18376
#: serverguide/C/mail.xml:1005(para) serverguide/C/mail.xml:1020(title)
18377
msgid "Main"
18378
msgstr ""
18379
18380
#: serverguide/C/mail.xml:1008(para) serverguide/C/mail.xml:1060(title)
18381
msgid "Transport"
18382
msgstr ""
18383
18384
#: serverguide/C/mail.xml:1011(para) serverguide/C/mail.xml:1083(title)
18385
msgid "Router"
18386
msgstr ""
18387
18388
#: serverguide/C/mail.xml:996(para)
18389
msgid ""
18390
"In order to make mailman work with Exim4, you need to configure Exim4. As "
18391
"mentioned earlier, by default, Exim4 uses multiple configuration files of "
18392
"different types. For details, please refer to the <ulink "
18393
"url=\"http://www.exim.org\">Exim</ulink> web site. To run mailman, we should "
18394
"add new a configuration file to the following configuration types: "
18395
"<placeholder-1/> Exim creates a master configuration file by sorting all "
18396
"these mini configuration files. So, the order of these configuration files "
18397
"is very important."
18398
msgstr ""
18399
18400
#: serverguide/C/mail.xml:1027(programlisting)
18401
#, no-wrap
18402
msgid ""
18403
"\n"
18404
"# start\n"
18405
"# Home dir for your Mailman installation -- aka Mailman's prefix\n"
18406
"# directory.\n"
18407
"# On Ubuntu this should be \"/var/lib/mailman\"\n"
18408
"# This is normally the same as ~mailman\n"
18409
"MM_HOME=/var/lib/mailman\n"
18410
"#\n"
18411
"# User and group for Mailman, should match your --with-mail-gid\n"
18412
"# switch to Mailman's configure script. Value is normally \"mailman\"\n"
18413
"MM_UID=list\n"
18414
"MM_GID=list\n"
18415
"#\n"
18416
"# Domains that your lists are in - colon separated list\n"
18417
"# you may wish to add these into local_domains as well\n"
18418
"domainlist mm_domains=hostname.com\n"
18419
"#\n"
18420
"# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n"
18421
"#\n"
18422
"# These values are derived from the ones above and should not need\n"
18423
"# editing unless you have munged your mailman installation\n"
18424
"#\n"
18425
"# The path of the Mailman mail wrapper script\n"
18426
"MM_WRAP=MM_HOME/mail/mailman\n"
18427
"#\n"
18428
"# The path of the list config file (used as a required file when\n"
18429
"# verifying list addresses)\n"
18430
"MM_LISTCHK=MM_HOME/lists/${lc::$local_part}/config.pck\n"
18431
"# end\n"
18432
msgstr ""
18433
18434
#: serverguide/C/mail.xml:1021(para)
18435
msgid ""
18436
"All the configuration files belonging to the main type are stored in the "
18437
"<filename>/etc/exim4/conf.d/main/</filename> directory. You can add the "
18438
"following content to a new file, named <filename>04_exim4-"
18439
"config_mailman</filename>: <placeholder-1/>"
18440
msgstr ""
18441
18442
#: serverguide/C/mail.xml:1067(programlisting)
18443
#, no-wrap
18444
msgid ""
18445
"\n"
18446
" mailman_transport:\n"
18447
" driver = pipe\n"
18448
" command = MM_WRAP \\\n"
18449
" '${if def:local_part_suffix \\\n"
18450
" {${sg{$local_part_suffix}{-(\\\\w+)(\\\\+.*)?}{\\$1}}} "
18451
"\\\n"
18452
" {post}}' \\\n"
18453
" $local_part\n"
18454
" current_directory = MM_HOME\n"
18455
" home_directory = MM_HOME\n"
18456
" user = MM_UID\n"
18457
" group = MM_GID\n"
18458
msgstr ""
18459
18460
#: serverguide/C/mail.xml:1061(para)
18461
msgid ""
18462
"All the configuration files belonging to transport type are stored in the "
18463
"<filename>/etc/exim4/conf.d/transport/</filename> directory. You can add the "
18464
"following content to a new file named <filename> 40_exim4-"
18465
"config_mailman</filename>: <placeholder-1/>"
18466
msgstr ""
18467
18468
#: serverguide/C/mail.xml:1088(programlisting)
18469
#, no-wrap
18470
msgid ""
18471
"\n"
18472
" mailman_router:\n"
18473
" driver = accept\n"
18474
" require_files = MM_HOME/lists/$local_part/config.pck\n"
18475
" local_part_suffix_optional\n"
18476
" local_part_suffix = -bounces : -bounces+* : \\\n"
18477
" -confirm+* : -join : -leave : \\\n"
18478
" -owner : -request : -admin\n"
18479
" transport = mailman_transport\n"
18480
msgstr ""
18481
18482
#: serverguide/C/mail.xml:1084(para)
18483
msgid ""
18484
"All the configuration files belonging to router type are stored in the "
18485
"<filename>/etc/exim4/conf.d/router/</filename> directory. You can add the "
18486
"following content in to a new file named <filename>101_exim4-"
18487
"config_mailman</filename>: <placeholder-1/>"
18488
msgstr ""
18489
18490
#: serverguide/C/mail.xml:1101(para)
18491
msgid ""
18492
"The order of main and transport configuration files can be in any order. "
18493
"But, the order of router configuration files must be the same. This "
18494
"particular file must appear before the <application>200_exim4-"
18495
"config_primary</application> file. These two configuration files contain "
18496
"same type of information. The first file takes the precedence. For more "
18497
"details, please refer to the references section."
18498
msgstr ""
18499
18500
#: serverguide/C/mail.xml:1114(para)
18501
msgid ""
18502
"Once mailman is installed, you can run it using the following command:"
18503
msgstr ""
18504
18505
#: serverguide/C/mail.xml:1118(command)
18506
msgid "sudo /etc/init.d/mailman start"
18507
msgstr ""
18508
18509
#: serverguide/C/mail.xml:1120(para)
18510
msgid ""
18511
"Once mailman is installed, you should create the default mailing list. Run "
18512
"the following command to create the mailing list:"
18513
msgstr ""
18514
18515
#: serverguide/C/mail.xml:1126(command)
18516
msgid "sudo /usr/sbin/newlist mailman"
18517
msgstr ""
18518
18519
#: serverguide/C/mail.xml:1129(programlisting)
18520
#, no-wrap
18521
msgid ""
18522
"\n"
18523
" Enter the email address of the person running the list: bhuvan at "
18524
"ubuntu.com\n"
18525
" Initial mailman password:\n"
18526
" To finish creating your mailing list, you must edit your "
18527
"<filename>/etc/aliases</filename> (or\n"
18528
" equivalent) file by adding the following lines, and possibly running the\n"
18529
" `newaliases' program:\n"
18530
"\n"
18531
" ## mailman mailing list\n"
18532
" mailman: \"|/var/lib/mailman/mail/mailman post mailman\"\n"
18533
" mailman-admin: \"|/var/lib/mailman/mail/mailman admin mailman\"\n"
18534
" mailman-bounces: \"|/var/lib/mailman/mail/mailman bounces mailman\"\n"
18535
" mailman-confirm: \"|/var/lib/mailman/mail/mailman confirm mailman\"\n"
18536
" mailman-join: \"|/var/lib/mailman/mail/mailman join mailman\"\n"
18537
" mailman-leave: \"|/var/lib/mailman/mail/mailman leave mailman\"\n"
18538
" mailman-owner: \"|/var/lib/mailman/mail/mailman owner mailman\"\n"
18539
" mailman-request: \"|/var/lib/mailman/mail/mailman request mailman\"\n"
18540
" mailman-subscribe: \"|/var/lib/mailman/mail/mailman subscribe "
18541
"mailman\"\n"
18542
" mailman-unsubscribe: \"|/var/lib/mailman/mail/mailman unsubscribe "
18543
"mailman\"\n"
18544
"\n"
18545
" Hit enter to notify mailman owner...\n"
18546
"\n"
18547
" # \n"
18548
msgstr ""
18549
18550
#: serverguide/C/mail.xml:1152(para)
18551
msgid ""
18552
"We have configured either Postfix or Exim4 to recognize all emails from "
18553
"mailman. So, it is not mandatory to make any new entries in "
18554
"<filename>/etc/aliases</filename>. If you have made any changes to the "
18555
"configuration files, please ensure that you restart those services before "
18556
"continuing to next section."
18557
msgstr ""
18558
18559
#: serverguide/C/mail.xml:1160(para)
18560
msgid ""
18561
"The Exim4 does not use the above aliases to forward mails to Mailman, as it "
18562
"uses a <emphasis>discover</emphasis> approach. To suppress the aliases while "
18563
"creating the list, you can add <emphasis>MTA=None</emphasis> line in Mailman "
18564
"configuration file, <filename>/etc/mailman/mm_cfg.py</filename>."
18565
msgstr ""
18566
18567
#: serverguide/C/mail.xml:1171(title)
18568
msgid "Administration"
18569
msgstr "Administracion"
18570
18571
#: serverguide/C/mail.xml:1172(para)
18572
msgid ""
18573
"We assume you have a default installation. The mailman cgi scripts are still "
18574
"in the <application>/usr/lib/cgi-bin/mailman/</application> directory. "
18575
"Mailman provides a web based administration facility. To access this page, "
18576
"point your browser to the following url:"
18577
msgstr ""
18578
18579
#: serverguide/C/mail.xml:1180(para)
18580
msgid "http://hostname/cgi-bin/mailman/admin"
18581
msgstr ""
18582
18583
#: serverguide/C/mail.xml:1184(para)
18584
msgid ""
18585
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18586
"screen. If you click the mailing list name, it will ask for your "
18587
"authentication password. If you enter the correct password, you will be able "
18588
"to change administrative settings of this mailing list. You can create a new "
18589
"mailing list using the command line utility "
18590
"(<command>/usr/sbin/newlist</command>). Alternatively, you can create a new "
18591
"mailing list using the web interface."
18592
msgstr ""
18593
18594
#: serverguide/C/mail.xml:1197(title)
18595
msgid "Users"
18596
msgstr "Utilizaires"
18597
18598
#: serverguide/C/mail.xml:1198(para)
18599
msgid ""
18600
"Mailman provides a web based interface for users. To access this page, point "
18601
"your browser to the following url:"
18602
msgstr ""
18603
18604
#: serverguide/C/mail.xml:1203(para)
18605
msgid "http://hostname/cgi-bin/mailman/listinfo"
18606
msgstr ""
18607
18608
#: serverguide/C/mail.xml:1207(para)
18609
msgid ""
18610
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
18611
"screen. If you click the mailing list name, it will display the subscription "
18612
"form. You can enter your email address, name (optional), and password to "
18613
"subscribe. An email invitation will be sent to you. You can follow the "
18614
"instructions in the email to subscribe."
18615
msgstr ""
18616
18617
#: serverguide/C/mail.xml:1219(ulink)
18618
msgid "GNU Mailman - Installation Manual"
18619
msgstr ""
18620
18621
#: serverguide/C/mail.xml:1223(ulink)
18622
msgid "HOWTO - Using Exim 4 and Mailman 2.1 together"
18623
msgstr ""
18624
18625
#: serverguide/C/mail.xml:1226(para)
18626
msgid ""
18627
"Also, see the <ulink "
18628
"url=\"https://help.ubuntu.com/community/Mailman\">Mailman Ubuntu "
18629
"Wiki</ulink> page."
18630
msgstr ""
18631
18632
#: serverguide/C/mail.xml:1232(title)
18633
msgid "Mail Filtering"
18634
msgstr ""
18635
18636
#: serverguide/C/mail.xml:1233(para)
18637
msgid ""
18638
"One of the largest issues with email today is the problem of Unsolicited "
18639
"Bulk Email (UBE). Also known as SPAM, such messages may also carry viruses "
18640
"and other forms of malware. According to some reports these messages make up "
18641
"the bulk of all email traffic on the Internet."
18642
msgstr ""
18643
18644
#: serverguide/C/mail.xml:1238(para)
18645
msgid ""
18646
"This section will cover integrating <application>Amavisd-new</application>, "
18647
"<application>Spamassassin</application>, and "
18648
"<application>ClamAV</application> with the "
18649
"<application>Postfix</application> Mail Transport Agent (MTA). "
18650
"<application>Postfix</application> can also check email validity by passing "
18651
"it through external content filters. These filters can sometimes determine "
18652
"if a message is spam without needing to process it with more resource "
18653
"intensive applications. Two common filters are <application>dkim-"
18654
"filter</application> and <application>python-policyd-spf</application>."
18655
msgstr ""
18656
18657
#: serverguide/C/mail.xml:1248(para)
18658
msgid ""
18659
"<application>Amavisd-new</application> is a wrapper program that can call "
18660
"any number of content filtering programs for spam detection, antivirus, etc."
18661
msgstr ""
18662
18663
#: serverguide/C/mail.xml:1254(para)
18664
msgid ""
18665
"<application>Spamassassin</application> uses a variety of mechanisms to "
18666
"filter email based on the message content."
18667
msgstr ""
18668
18669
#: serverguide/C/mail.xml:1259(para)
18670
msgid ""
18671
"<application>ClamAV</application> is an open source antivirus application."
18672
msgstr ""
18673
18674
#: serverguide/C/mail.xml:1264(para)
18675
msgid ""
18676
"<application>dkim-filter</application> implements a Sendmail Mail Filter "
18677
"(Milter) for the DomainKeys Identified Mail (DKIM) standard."
18678
msgstr ""
18679
18680
#: serverguide/C/mail.xml:1270(para)
18681
msgid ""
18682
"<application>python-policyd-spf</application> enables Sender Policy "
18683
"Framework (SPF) checking with <application>Postfix</application>."
18684
msgstr ""
18685
18686
#: serverguide/C/mail.xml:1275(para)
18687
msgid "This is how the pieces fit together:"
18688
msgstr ""
18689
18690
#: serverguide/C/mail.xml:1280(para)
18691
msgid "An email message is accepted by <application>Postfix</application>."
18692
msgstr ""
18693
18694
#: serverguide/C/mail.xml:1285(para)
18695
msgid ""
18696
"The message is passed through any external filters <application>dkim-"
18697
"filter</application> and <application>python-policyd-spf</application> in "
18698
"this case."
18699
msgstr ""
18700
18701
#: serverguide/C/mail.xml:1291(para)
18702
msgid "<application>Amavisd-new</application> then processes the message."
18703
msgstr ""
18704
18705
#: serverguide/C/mail.xml:1296(para)
18706
msgid ""
18707
"<application>ClamAV</application> is used to scan the message. If the "
18708
"message contains a virus <application>Postfix</application> will reject the "
18709
"message."
18710
msgstr ""
18711
18712
#: serverguide/C/mail.xml:1302(para)
18713
msgid ""
18714
"Clean messages will then be analyzed by "
18715
"<application>Spamassassin</application> to find out if the message is spam. "
18716
"<application>Spamassassin</application> will then add X-Header lines "
18717
"allowing <application>Amavisd-new</application> to further manipulate the "
18718
"message."
18719
msgstr ""
18720
18721
#: serverguide/C/mail.xml:1309(para)
18722
msgid ""
18723
"For example, if a message has a Spam score of over fifty the message could "
18724
"be automatically dropped from the queue without the recipient ever having to "
18725
"be bothered. Another, way to handle flagged messages is to deliver them to "
18726
"the Mail User Agent (MUA) allowing the user to deal with the message as they "
18727
"see fit."
18728
msgstr ""
18729
18730
#: serverguide/C/mail.xml:1316(para)
18731
msgid ""
18732
"See <xref linkend=\"postfix\"/> for instructions on installing and "
18733
"configuring Postfix."
18734
msgstr ""
18735
18736
#: serverguide/C/mail.xml:1319(para)
18737
msgid ""
18738
"To install the rest of the applications enter the following from a terminal "
18739
"prompt:"
18740
msgstr ""
18741
18742
#: serverguide/C/mail.xml:1323(command)
18743
msgid "sudo apt-get install amavisd-new spamassassin clamav-daemon"
18744
msgstr ""
18745
18746
#: serverguide/C/mail.xml:1324(command)
18747
msgid "sudo apt-get install dkim-filter python-policyd-spf"
18748
msgstr ""
18749
18750
#: serverguide/C/mail.xml:1326(para)
18751
msgid ""
18752
"There are some optional packages that integrate with "
18753
"<application>Spamassassin</application> for better spam detection:"
18754
msgstr ""
18755
18756
#: serverguide/C/mail.xml:1330(command)
18757
msgid "sudo apt-get install pyzor razor"
18758
msgstr ""
18759
18760
#: serverguide/C/mail.xml:1332(para)
18761
msgid ""
18762
"Along with the main filtering applications compression utilities are needed "
18763
"to process some email attachments:"
18764
msgstr ""
18765
18766
#: serverguide/C/mail.xml:1336(command)
18767
msgid ""
18768
"sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip zip"
18769
msgstr ""
18770
18771
#: serverguide/C/mail.xml:1339(para)
18772
msgid ""
18773
"If some packages are not found, check that the "
18774
"<emphasis>multiverse</emphasis> repository is enabled in "
18775
"<filename>/etc/apt/sources.list</filename>"
18776
msgstr ""
18777
18778
#: serverguide/C/mail.xml:1340(para)
18779
msgid ""
18780
"If you make changes to the file, be sure to run <command>sudo apt-get "
18781
"update</command> before trying to install again."
18782
msgstr ""
18783
18784
#: serverguide/C/mail.xml:1345(para)
18785
msgid "Now configure everything to work together and filter email."
18786
msgstr ""
18787
18788
#: serverguide/C/mail.xml:1349(title)
18789
msgid "ClamAV"
18790
msgstr ""
18791
18792
#: serverguide/C/mail.xml:1350(para)
18793
msgid ""
18794
"The default behaviour of <application>ClamAV</application> will fit our "
18795
"needs. For more ClamAV configuration options, check the configuration files "
18796
"in <filename>/etc/clamav</filename>."
18797
msgstr ""
18798
18799
#: serverguide/C/mail.xml:1355(para)
18800
msgid ""
18801
"Add the <emphasis>clamav</emphasis> user to the <emphasis>amavis</emphasis> "
18802
"group in order for <application>Amavisd-new</application> to have the "
18803
"appropriate access to scan files:"
18804
msgstr ""
18805
18806
#: serverguide/C/mail.xml:1360(command)
18807
msgid "sudo adduser clamav amavis"
18808
msgstr ""
18809
18810
#: serverguide/C/mail.xml:1364(title)
18811
msgid "Spamassassin"
18812
msgstr ""
18813
18814
#: serverguide/C/mail.xml:1365(para)
18815
msgid ""
18816
"Spamassassin automatically detects optional components and will use them if "
18817
"they are present. This means that there is no need to configure "
18818
"<application>pyzor</application> and <application>razor</application>."
18819
msgstr ""
18820
18821
#: serverguide/C/mail.xml:1369(para)
18822
msgid ""
18823
"Edit <filename>/etc/default/spamassassin</filename> to activate the "
18824
"<application>Spamassassin</application> daemon. Change "
18825
"<emphasis>ENABLED=0</emphasis> to:"
18826
msgstr ""
18827
18828
#: serverguide/C/mail.xml:1373(programlisting)
18829
#, no-wrap
18830
msgid ""
18831
"\n"
18832
"ENABLED=1\n"
18833
msgstr ""
18834
18835
#: serverguide/C/mail.xml:1376(para)
18836
msgid "Now start the daemon:"
18837
msgstr ""
18838
18839
#: serverguide/C/mail.xml:1380(command)
18840
msgid "sudo /etc/init.d/spamassassin start"
18841
msgstr ""
18842
18843
#: serverguide/C/mail.xml:1384(title)
18844
msgid "Amavisd-new"
18845
msgstr ""
18846
18847
#: serverguide/C/mail.xml:1385(para)
18848
msgid ""
18849
"First activate spam and antivirus detection in <application>Amavisd-"
18850
"new</application> by editing <filename>/etc/amavis/conf.d/15-"
18851
"content_filter_mode</filename>:"
18852
msgstr ""
18853
18854
#: serverguide/C/mail.xml:1389(programlisting)
18855
#, no-wrap
18856
msgid ""
18857
"\n"
18858
"use strict;\n"
18859
"\n"
18860
"# You can modify this file to re-enable SPAM checking through spamassassin\n"
18861
"# and to re-enable antivirus checking.\n"
18862
"\n"
18863
"#\n"
18864
"# Default antivirus checking mode\n"
18865
"# Uncomment the two lines below to enable it\n"
18866
"#\n"
18867
"\n"
18868
"@bypass_virus_checks_maps = (\n"
18869
" \\%bypass_virus_checks, \\@bypass_virus_checks_acl, \\"
18870
"$bypass_virus_checks_re);\n"
18871
"\n"
18872
"\n"
18873
"#\n"
18874
"# Default SPAM checking mode\n"
18875
"# Uncomment the two lines below to enable it\n"
18876
"#\n"
18877
"\n"
18878
"@bypass_spam_checks_maps = (\n"
18879
" \\%bypass_spam_checks, \\@bypass_spam_checks_acl, \\"
18880
"$bypass_spam_checks_re);\n"
18881
"\n"
18882
"1; # insure a defined return\n"
18883
msgstr ""
18884
18885
#: serverguide/C/mail.xml:1414(para)
18886
msgid ""
18887
"Bouncing spam can be a bad idea as the return address is often faked. "
18888
"Consider editing <filename>/etc/amavis/conf.d/20-debian_defaults</filename> "
18889
"to set <emphasis>$final_spam_destiny</emphasis> to D_DISCARD rather than "
18890
"D_BOUNCE, as follows:"
18891
msgstr ""
18892
18893
#: serverguide/C/mail.xml:1420(programlisting)
18894
#, no-wrap
18895
msgid ""
18896
"\n"
18897
"$final_spam_destiny = D_DISCARD;\n"
18898
msgstr ""
18899
18900
#: serverguide/C/mail.xml:1424(para)
18901
msgid ""
18902
"Additionally, you may want to adjust the following options to flag more "
18903
"messages as spam:"
18904
msgstr ""
18905
18906
#: serverguide/C/mail.xml:1428(programlisting)
18907
#, no-wrap
18908
msgid ""
18909
"\n"
18910
"$sa_tag_level_deflt = -999; # add spam info headers if at, or above that "
18911
"level\n"
18912
"$sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level\n"
18913
"$sa_kill_level_deflt = 21.0; # triggers spam evasive actions\n"
18914
"$sa_dsn_cutoff_level = 4; # spam level beyond which a DSN is not sent\n"
18915
msgstr ""
18916
18917
#: serverguide/C/mail.xml:1435(para)
18918
msgid ""
18919
"If the server's <emphasis>hostname</emphasis> is different from the domain's "
18920
"MX record you may need to manually set the <emphasis>$myhostname</emphasis> "
18921
"option. Also, if the server receives mail for multiple domains the "
18922
"<emphasis>@local_domains_acl</emphasis> option will need to be customized. "
18923
"Edit the <filename>/etc/amavis/conf.d/50-user</filename> file:"
18924
msgstr ""
18925
18926
#: serverguide/C/mail.xml:1442(programlisting)
18927
#, no-wrap
18928
msgid ""
18929
"\n"
18930
"$myhostname = 'mail.example.com';\n"
18931
"@local_domains_acl = ( \"example.com\", \"example.org\" );\n"
18932
msgstr ""
18933
18934
#: serverguide/C/mail.xml:1447(para)
18935
msgid ""
18936
"After configuration <application>Amavisd-new</application> needs to be "
18937
"restarted:"
18938
msgstr ""
18939
18940
#: serverguide/C/mail.xml:1451(command) serverguide/C/mail.xml:1497(command)
18941
msgid "sudo /etc/init.d/amavis restart"
18942
msgstr ""
18943
18944
#: serverguide/C/mail.xml:1454(title)
18945
msgid "DKIM Whitelist"
18946
msgstr ""
18947
18948
#: serverguide/C/mail.xml:1456(para)
18949
msgid ""
18950
"<application>Amavisd-new</application> can be configured to automatically "
18951
"<emphasis>Whitelist</emphasis> addresses from domains with valid Domain "
18952
"Keys. There are some pre-configured domains in the "
18953
"<filename>/etc/amavis/conf.d/40-policy_banks</filename>."
18954
msgstr ""
18955
18956
#: serverguide/C/mail.xml:1462(para)
18957
msgid "There are multiple ways to configure the Whitelist for a domain:"
18958
msgstr ""
18959
18960
#: serverguide/C/mail.xml:1468(para)
18961
msgid ""
18962
"<emphasis>'example.com' => 'WHITELIST',</emphasis>: will whitelist any "
18963
"address from the \"example.com\" domain."
18964
msgstr ""
18965
18966
#: serverguide/C/mail.xml:1473(para)
18967
msgid ""
18968
"<emphasis>'.example.com' => 'WHITELIST',</emphasis>: will whitelist any "
18969
"address from any <emphasis>subdomains</emphasis> of \"example.com\" that "
18970
"have a valid signature."
18971
msgstr ""
18972
18973
#: serverguide/C/mail.xml:1479(para)
18974
msgid ""
18975
"<emphasis>'.example.com/@example.com' => 'WHITELIST',</emphasis>: will "
18976
"whitelist subdomains of \"example.com\" that use the signature of <emphasis "
18977
"role=\"italic\">example.com</emphasis> the parent domain."
18978
msgstr ""
18979
18980
#: serverguide/C/mail.xml:1485(para)
18981
msgid ""
18982
"<emphasis>'./@example.com' => 'WHITELIST',</emphasis>: adds addresses "
18983
"that have a valid signature from \"example.com\". This is usually used for "
18984
"discussion groups that sign thier messages."
18985
msgstr ""
18986
18987
#: serverguide/C/mail.xml:1492(para)
18988
msgid ""
18989
"A domain can also have multiple Whitelist configurations. After, editing the "
18990
"file restart <application>amaisd-new</application>:"
18991
msgstr ""
18992
18993
#: serverguide/C/mail.xml:1501(para)
18994
msgid ""
18995
"In this context, once a domain has been added to the Whitelist the message "
18996
"will not receive any anti-virus or spam filtering. This may or may not be "
18997
"the intended behavior you wish for a domain."
18998
msgstr ""
18999
19000
#: serverguide/C/mail.xml:1511(para)
19001
msgid ""
19002
"For <application>Postfix</application> integration, enter the following from "
19003
"a terminal prompt:"
19004
msgstr ""
19005
19006
#: serverguide/C/mail.xml:1515(command)
19007
msgid "sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'"
19008
msgstr ""
19009
19010
#: serverguide/C/mail.xml:1517(para)
19011
msgid ""
19012
"Next edit <filename>/etc/postfix/master.cf</filename> and add the following "
19013
"to the end of the file:"
19014
msgstr ""
19015
19016
#: serverguide/C/mail.xml:1520(programlisting)
19017
#, no-wrap
19018
msgid ""
19019
"\n"
19020
"smtp-amavis unix - - - - 2 smtp\n"
19021
" -o smtp_data_done_timeout=1200\n"
19022
" -o smtp_send_xforward_command=yes\n"
19023
" -o disable_dns_lookups=yes\n"
19024
" -o max_use=20\n"
19025
"\n"
19026
"127.0.0.1:10025 inet n - - - - smtpd\n"
19027
" -o content_filter=\n"
19028
" -o local_recipient_maps=\n"
19029
" -o relay_recipient_maps=\n"
19030
" -o smtpd_restriction_classes=\n"
19031
" -o smtpd_delay_reject=no\n"
19032
" -o smtpd_client_restrictions=permit_mynetworks,reject\n"
19033
" -o smtpd_helo_restrictions=\n"
19034
" -o smtpd_sender_restrictions=\n"
19035
" -o smtpd_recipient_restrictions=permit_mynetworks,reject\n"
19036
" -o smtpd_data_restrictions=reject_unauth_pipelining\n"
19037
" -o smtpd_end_of_data_restrictions=\n"
19038
" -o mynetworks=127.0.0.0/8\n"
19039
" -o smtpd_error_sleep_time=0\n"
19040
" -o smtpd_soft_error_limit=1001\n"
19041
" -o smtpd_hard_error_limit=1000\n"
19042
" -o smtpd_client_connection_count_limit=0\n"
19043
" -o smtpd_client_connection_rate_limit=0\n"
19044
" -o "
19045
"receive_override_options=no_header_body_checks,no_unknown_recipient_checks\n"
19046
msgstr ""
19047
19048
#: serverguide/C/mail.xml:1547(para)
19049
msgid ""
19050
"Also add the following two lines immediately below the "
19051
"<emphasis>\"pickup\"</emphasis> transport service:"
19052
msgstr ""
19053
19054
#: serverguide/C/mail.xml:1550(programlisting)
19055
#, no-wrap
19056
msgid ""
19057
"\n"
19058
" -o content_filter=\n"
19059
" -o receive_override_options=no_header_body_checks\n"
19060
msgstr ""
19061
19062
#: serverguide/C/mail.xml:1554(para)
19063
msgid ""
19064
"This will prevent messages that are generated to report on spam from being "
19065
"classified as spam."
19066
msgstr ""
19067
19068
#: serverguide/C/mail.xml:1557(para)
19069
msgid "Now restart <application>Postfix</application>:"
19070
msgstr ""
19071
19072
#: serverguide/C/mail.xml:1563(para)
19073
msgid "Content filtering with spam and virus detection is now enabled."
19074
msgstr ""
19075
19076
#: serverguide/C/mail.xml:1570(para)
19077
msgid ""
19078
"First, test that the <application>Amavisd-new</application> SMTP is "
19079
"listening:"
19080
msgstr ""
19081
19082
#: serverguide/C/mail.xml:1573(programlisting)
19083
#, no-wrap
19084
msgid ""
19085
"\n"
19086
"telnet localhost 10024\n"
19087
"Trying 127.0.0.1...\n"
19088
"Connected to localhost.\n"
19089
"Escape character is '^]'.\n"
19090
"220 [127.0.0.1] ESMTP amavisd-new service ready\n"
19091
"^]\n"
19092
msgstr ""
19093
19094
#: serverguide/C/mail.xml:1581(para)
19095
msgid ""
19096
"In the Header of messages that go through the content filter you should see:"
19097
msgstr ""
19098
19099
#: serverguide/C/mail.xml:1584(programlisting)
19100
#, no-wrap
19101
msgid ""
19102
"\n"
19103
"X-Spam-Level: \n"
19104
"X-Virus-Scanned: Debian amavisd-new at example.com\n"
19105
"X-Spam-Status: No, hits=-2.3 tagged_above=-1000.0 required=5.0 tests=AWL, "
19106
"BAYES_00\n"
19107
"X-Spam-Level: \n"
19108
msgstr ""
19109
19110
#: serverguide/C/mail.xml:1591(para)
19111
msgid ""
19112
"Your output will vary, but the important thing is that there are <emphasis>X-"
19113
"Virus-Scanned</emphasis> and <emphasis>X-Spam-Status</emphasis> entries."
19114
msgstr ""
19115
19116
#: serverguide/C/mail.xml:1599(para)
19117
msgid ""
19118
"The best way to figure out why something is going wrong is to check the log "
19119
"files."
19120
msgstr ""
19121
19122
#: serverguide/C/mail.xml:1604(para)
19123
msgid ""
19124
"For instructions on <application>Postfix</application> logging see the <xref "
19125
"linkend=\"postfix-troubleshooting\"/> section."
19126
msgstr ""
19127
19128
#: serverguide/C/mail.xml:1610(para)
19129
msgid ""
19130
"<application>Amavisd-new</application> uses "
19131
"<application>Syslog</application> to send messages to "
19132
"<filename>/var/log/mail.log</filename>. The amount of detail can be "
19133
"increased by adding the <emphasis>$log_level</emphasis> option to "
19134
"<filename>/etc/amavis/conf.d/50-user</filename>, and setting the value from "
19135
"1 to 5."
19136
msgstr ""
19137
19138
#: serverguide/C/mail.xml:1615(programlisting)
19139
#, no-wrap
19140
msgid ""
19141
"\n"
19142
"$log_level = 2;\n"
19143
msgstr ""
19144
19145
#: serverguide/C/mail.xml:1619(para)
19146
msgid ""
19147
"When the <application>Amavisd-new</application> log output is increased "
19148
"<application>Spamassassin</application> log output is also increased."
19149
msgstr ""
19150
19151
#: serverguide/C/mail.xml:1626(para)
19152
msgid ""
19153
"The <application>ClamAV</application> log level can be increased by editing "
19154
"<filename>/etc/clamav/clamd.conf</filename> and setting the following option:"
19155
msgstr ""
19156
19157
#: serverguide/C/mail.xml:1630(programlisting)
19158
#, no-wrap
19159
msgid ""
19160
"\n"
19161
"LogVerbose true\n"
19162
msgstr ""
19163
19164
#: serverguide/C/mail.xml:1633(para)
19165
msgid ""
19166
"By default <application>ClamAV</application> will send log messages to "
19167
"<filename>/var/log/clamav/clamav.log</filename>."
19168
msgstr ""
19169
19170
#: serverguide/C/mail.xml:1639(para)
19171
msgid ""
19172
"After changing an applications log settings remember to restart the service "
19173
"for the new settings to take affect. Also, once the issue you are "
19174
"troubleshooting is resolved it is a good idea to change the log settings "
19175
"back to normal."
19176
msgstr ""
19177
19178
#: serverguide/C/mail.xml:1647(para)
19179
msgid "For more information on filtering mail see the following links:"
19180
msgstr ""
19181
19182
#: serverguide/C/mail.xml:1653(ulink)
19183
msgid "Amavisd-new Documentation"
19184
msgstr ""
19185
19186
#: serverguide/C/mail.xml:1657(para)
19187
msgid ""
19188
"<ulink url=\"http://www.clamav.org/doc/latest/html/\">ClamAV "
19189
"Documentation</ulink> and <ulink "
19190
"url=\"http://wiki.clamav.net/Main/WebHome\">ClamAV Wiki</ulink>"
19191
msgstr ""
19192
19193
#: serverguide/C/mail.xml:1664(ulink)
19194
msgid "Spamassassin Wiki"
19195
msgstr ""
19196
19197
#: serverguide/C/mail.xml:1669(ulink)
19198
msgid "Pyzor Homepage"
19199
msgstr ""
19200
19201
#: serverguide/C/mail.xml:1674(ulink)
19202
msgid "Razor Homepage"
19203
msgstr ""
19204
19205
#: serverguide/C/mail.xml:1679(ulink)
19206
msgid "DKIM.org"
19207
msgstr ""
19208
19209
#: serverguide/C/mail.xml:1684(ulink)
19210
msgid "Postfix Amavis New"
19211
msgstr ""
19212
19213
#: serverguide/C/mail.xml:1688(para)
19214
msgid ""
19215
"Also, feel free to ask questions in the <emphasis>#ubuntu-server</emphasis> "
19216
"IRC channel on <ulink url=\"http://freenode.net\">freenode</ulink>."
19217
msgstr ""
19218
19219
#: serverguide/C/lamp-applications.xml:13(title)
19220
msgid "LAMP Applications"
19221
msgstr ""
19222
19223
#: serverguide/C/lamp-applications.xml:19(para)
19224
msgid ""
19225
"LAMP installations (Linux + Apache + MySQL + PHP) are a popular setup for "
19226
"Ubuntu servers. There is a plethora of Open Source applications written "
19227
"using the LAMP application stack. Some popular LAMP applications are Wiki's, "
19228
"Content Management Systems, and Management Software such as phpMyAdmin."
19229
msgstr ""
19230
19231
#: serverguide/C/lamp-applications.xml:26(para)
19232
msgid ""
19233
"One advantage of LAMP is the substantial flexibility for different database, "
19234
"web server, and scripting languages. Popular substitutes for MySQL include "
19235
"Posgresql and SQLite. Python, Perl, and Ruby are also frequently used "
19236
"instead of PHP."
19237
msgstr ""
19238
19239
#: serverguide/C/lamp-applications.xml:32(para)
19240
msgid ""
19241
"The traditional way to install most <emphasis>LAMP</emphasis> applications "
19242
"is:"
19243
msgstr ""
19244
19245
#: serverguide/C/lamp-applications.xml:38(para)
19246
msgid "Download an archive containing the application source files."
19247
msgstr ""
19248
19249
#: serverguide/C/lamp-applications.xml:43(para)
19250
msgid ""
19251
"Unpack the archive, usually in a directory accessible to a web server."
19252
msgstr ""
19253
19254
#: serverguide/C/lamp-applications.xml:48(para)
19255
msgid ""
19256
"Depending on where the source was extracted, configure a web browser to "
19257
"serve the files."
19258
msgstr ""
19259
19260
#: serverguide/C/lamp-applications.xml:53(para)
19261
msgid "Configure the application to connect to the database."
19262
msgstr ""
19263
19264
#: serverguide/C/lamp-applications.xml:58(para)
19265
msgid ""
19266
"Run a script, or browse to a page of the application, to install the "
19267
"database needed by the application."
19268
msgstr ""
19269
19270
#: serverguide/C/lamp-applications.xml:63(para)
19271
msgid ""
19272
"Once the steps above, or similar steps, are completed you are ready to begin "
19273
"using the application."
19274
msgstr ""
19275
19276
#: serverguide/C/lamp-applications.xml:69(para)
19277
msgid ""
19278
"A disadvantage of using this approach is that the application files are not "
19279
"placed in the file system in a standard way, which can cause confusion as to "
19280
"where the application is installed. Another larger disadvantage is updating "
19281
"the application. When a new version is released, the same process used to "
19282
"install the application is needed to apply updates."
19283
msgstr ""
19284
19285
#: serverguide/C/lamp-applications.xml:76(para)
19286
msgid ""
19287
"Fortunately, a number of <emphasis>LAMP</emphasis> applications are already "
19288
"packaged for Ubuntu, and are available for installation in the same way as "
19289
"non-LAMP applications. Depending on the application some extra configuration "
19290
"and setup steps may be needed, however."
19291
msgstr ""
19292
19293
#: serverguide/C/lamp-applications.xml:82(para)
19294
msgid ""
19295
"This section covers howto install and configure the Wiki applications "
19296
"<application>MoinMoin</application>, <application>MediaWiki</application>, "
19297
"and the MySQL management application <application>phpMyAdmin</application>."
19298
msgstr ""
19299
19300
#: serverguide/C/lamp-applications.xml:88(para)
19301
msgid ""
19302
"A Wiki is a website that allows the visitors to easily add, remove and "
19303
"modify available content easily. The ease of interaction and operation makes "
19304
"Wiki an effective tool for mass collaborative authoring. The term Wiki is "
19305
"also referred to the collaborative software."
19306
msgstr ""
19307
19308
#: serverguide/C/lamp-applications.xml:100(title)
19309
msgid "Moin Moin"
19310
msgstr ""
19311
19312
#: serverguide/C/lamp-applications.xml:102(para)
19313
msgid ""
19314
"MoinMoin is a Wiki engine implemented in Python, based on the PikiPiki Wiki "
19315
"engine, and licensed under the GNU GPL."
19316
msgstr ""
19317
19318
#: serverguide/C/lamp-applications.xml:110(para)
19319
msgid ""
19320
"To install <application>MoinMoin</application>, run the following command in "
19321
"the command prompt:"
19322
msgstr ""
19323
19324
#: serverguide/C/lamp-applications.xml:116(command)
19325
msgid "sudo apt-get install python-moinmoin"
19326
msgstr ""
19327
19328
#: serverguide/C/lamp-applications.xml:119(para)
19329
msgid ""
19330
"You should also install <application>apache2</application> web server. For "
19331
"installing <application>apache2</application> web server, please refer to "
19332
"<xref linkend=\"http-installation\"/> sub-section in <xref "
19333
"linkend=\"httpd\"/> section."
19334
msgstr ""
19335
19336
#: serverguide/C/lamp-applications.xml:130(para)
19337
msgid ""
19338
"For configuring your first Wiki application, please run the following set of "
19339
"commands. Let us assume that you are creating a Wiki named "
19340
"<emphasis>mywiki</emphasis>:"
19341
msgstr ""
19342
19343
#: serverguide/C/lamp-applications.xml:137(command)
19344
msgid "cd /usr/share/moin"
19345
msgstr ""
19346
19347
#: serverguide/C/lamp-applications.xml:138(command)
19348
msgid "sudo mkdir mywiki"
19349
msgstr ""
19350
19351
#: serverguide/C/lamp-applications.xml:139(command)
19352
msgid "sudo cp -R data mywiki"
19353
msgstr ""
19354
19355
#: serverguide/C/lamp-applications.xml:140(command)
19356
msgid "sudo cp -R underlay mywiki"
19357
msgstr ""
19358
19359
#: serverguide/C/lamp-applications.xml:141(command)
19360
msgid "sudo cp server/moin.cgi mywiki"
19361
msgstr ""
19362
19363
#: serverguide/C/lamp-applications.xml:142(command)
19364
msgid "sudo chown -R www-data.www-data mywiki"
19365
msgstr ""
19366
19367
#: serverguide/C/lamp-applications.xml:143(command)
19368
msgid "sudo chmod -R ug+rwX mywiki"
19369
msgstr ""
19370
19371
#: serverguide/C/lamp-applications.xml:144(command)
19372
msgid "sudo chmod -R o-rwx mywiki"
19373
msgstr ""
19374
19375
#: serverguide/C/lamp-applications.xml:147(para)
19376
msgid ""
19377
"Now you should configure <application>MoinMoin</application> to find your "
19378
"new Wiki <emphasis>mywiki</emphasis>. To configure "
19379
"<application>MoinMoin</application>, open "
19380
"<filename>/etc/moin/mywiki.py</filename> file and change the following line:"
19381
msgstr ""
19382
19383
#: serverguide/C/lamp-applications.xml:155(programlisting)
19384
#, no-wrap
19385
msgid "data_dir = '/org/mywiki/data'"
19386
msgstr ""
19387
19388
#: serverguide/C/lamp-applications.xml:157(para)
19389
msgid "to"
19390
msgstr ""
19391
19392
#: serverguide/C/lamp-applications.xml:161(programlisting)
19393
#, no-wrap
19394
msgid "data_dir = '/usr/share/moin/mywiki/data'"
19395
msgstr ""
19396
19397
#: serverguide/C/lamp-applications.xml:163(para)
19398
msgid ""
19399
"Also, below the <emphasis>data_dir</emphasis> option add the "
19400
"<emphasis>data_underlay_dir</emphasis>:"
19401
msgstr ""
19402
19403
#: serverguide/C/lamp-applications.xml:167(programlisting)
19404
#, no-wrap
19405
msgid ""
19406
"\n"
19407
"data_underlay_dir='/usr/share/moin/mywiki/underlay'\n"
19408
msgstr ""
19409
19410
#: serverguide/C/lamp-applications.xml:172(para)
19411
msgid ""
19412
"If the <filename>/etc/moin/mywiki.py</filename> file does not exists, you "
19413
"should copy <filename>/etc/moin/moinmaster.py</filename> file to "
19414
"<filename>/etc/moin/mywiki.py</filename> file and do the above mentioned "
19415
"change."
19416
msgstr ""
19417
19418
#: serverguide/C/lamp-applications.xml:181(para)
19419
msgid ""
19420
"If you have named your Wiki as <emphasis>my_wiki_name</emphasis> you should "
19421
"insert a line <quote>(\"my_wiki_name\", r\".*\")</quote> in "
19422
"<filename>/etc/moin/farmconfig.py</filename> file after the line "
19423
"<quote>(\"mywiki\", r\".*\")</quote>."
19424
msgstr ""
19425
19426
#: serverguide/C/lamp-applications.xml:189(para)
19427
msgid ""
19428
"Once you have configured <application>MoinMoin</application> to find your "
19429
"first Wiki application <emphasis>mywiki</emphasis>, you should configure "
19430
"<application>apache2</application> and make it ready for your Wiki "
19431
"application."
19432
msgstr ""
19433
19434
#: serverguide/C/lamp-applications.xml:196(para)
19435
msgid ""
19436
"You should add the following lines in <filename>/etc/apache2/sites-"
19437
"available/default</filename> file inside the <quote><VirtualHost "
19438
"*></quote> tag:"
19439
msgstr ""
19440
19441
#: serverguide/C/lamp-applications.xml:202(programlisting)
19442
#, no-wrap
19443
msgid ""
19444
"\n"
19445
"### moin\n"
19446
" ScriptAlias /mywiki \"/usr/share/moin/mywiki/moin.cgi\"\n"
19447
" alias /moin_static184 \"/usr/share/moin/htdocs\"\n"
19448
" <Directory /usr/share/moin/htdocs>\n"
19449
" Order allow,deny\n"
19450
" allow from all\n"
19451
" </Directory>\n"
19452
"### end moin\n"
19453
msgstr ""
19454
19455
#: serverguide/C/lamp-applications.xml:214(para)
19456
msgid ""
19457
"Adjust the <emphasis>\"moin_static184\"</emphasis> in the "
19458
"<emphasis>alias</emphasis> line above, to the "
19459
"<application>moinmoin</application> version installed."
19460
msgstr ""
19461
19462
#: serverguide/C/lamp-applications.xml:220(para)
19463
msgid ""
19464
"Once you configure the <application>apache2</application> web server and "
19465
"make it ready for your Wiki application, you should restart it. You can run "
19466
"the following command to restart the <application>apache2</application> web "
19467
"server:"
19468
msgstr ""
19469
19470
#: serverguide/C/lamp-applications.xml:233(title)
19471
msgid "Verification"
19472
msgstr ""
19473
19474
#: serverguide/C/lamp-applications.xml:235(para)
19475
msgid ""
19476
"You can verify the Wiki application and see if it works by pointing your web "
19477
"browser to the following URL:"
19478
msgstr ""
19479
19480
#: serverguide/C/lamp-applications.xml:239(programlisting)
19481
#, no-wrap
19482
msgid ""
19483
"\n"
19484
"http://localhost/mywiki\n"
19485
msgstr ""
19486
19487
#: serverguide/C/lamp-applications.xml:243(para)
19488
msgid ""
19489
"You can also run the test command by pointing your web browser to the "
19490
"following URL:"
19491
msgstr ""
19492
19493
#: serverguide/C/lamp-applications.xml:248(programlisting)
19494
#, no-wrap
19495
msgid ""
19496
"\n"
19497
"http://localhost/mywiki?action=test\n"
19498
msgstr ""
19499
19500
#: serverguide/C/lamp-applications.xml:252(para)
19501
msgid ""
19502
"For more details, please refer to the <ulink "
19503
"url=\"http://moinmo.in/\">MoinMoin</ulink> web site."
19504
msgstr ""
19505
19506
#: serverguide/C/lamp-applications.xml:263(para)
19507
msgid ""
19508
"For more information see the <ulink url=\"http://moinmo.in/\">moinmoin "
19509
"Wiki</ulink>."
19510
msgstr ""
19511
19512
#: serverguide/C/lamp-applications.xml:268(para)
19513
msgid ""
19514
"Also, see the <ulink "
19515
"url=\"https://help.ubuntu.com/community/MoinMoin\">Ubuntu Wiki "
19516
"MoinMoin</ulink> page."
19517
msgstr ""
19518
19519
#: serverguide/C/lamp-applications.xml:277(title)
19520
msgid "MediaWiki"
19521
msgstr ""
19522
19523
#: serverguide/C/lamp-applications.xml:279(para)
19524
msgid ""
19525
"MediaWiki is an web based Wiki software written in the PHP language. It can "
19526
"either use <application>MySQL</application> or "
19527
"<application>PostgreSQL</application> Database Management System."
19528
msgstr ""
19529
19530
#: serverguide/C/lamp-applications.xml:289(para)
19531
msgid ""
19532
"Before installing <application>MediaWiki</application> you should also "
19533
"install <application>Apache2</application>, the "
19534
"<application>PHP5</application> scripting language and Database a Management "
19535
"System. <application>MySQL</application> or "
19536
"<application>PostgreSQL</application> are the most common, choose one "
19537
"depending on your need. Please refer to those sections in this manual for "
19538
"installation instructions."
19539
msgstr ""
19540
19541
#: serverguide/C/lamp-applications.xml:297(para)
19542
msgid ""
19543
"To install <application>MediaWiki</application>, run the following command "
19544
"in the command prompt:"
19545
msgstr ""
19546
19547
#: serverguide/C/lamp-applications.xml:303(command)
19548
msgid "sudo apt-get install mediawiki php5-gd"
19549
msgstr ""
19550
19551
#: serverguide/C/lamp-applications.xml:306(para)
19552
msgid ""
19553
"For additional <application>MediaWiki</application> functionality see the "
19554
"<application>mediawiki-extensions</application> package."
19555
msgstr ""
19556
19557
#: serverguide/C/lamp-applications.xml:316(para)
19558
msgid ""
19559
"The Apache configuration file <filename>mediawiki.conf</filename> for "
19560
"MediaWiki is installed in <filename>/etc/apache2/conf.d/</filename> "
19561
"directory. You should uncomment the following line in this file to access "
19562
"MediaWiki application."
19563
msgstr ""
19564
19565
#: serverguide/C/lamp-applications.xml:324(screen)
19566
#, no-wrap
19567
msgid ""
19568
"\n"
19569
"# Alias /mediawiki /var/lib/mediawiki\n"
19570
msgstr ""
19571
19572
#: serverguide/C/lamp-applications.xml:328(para)
19573
msgid ""
19574
"After you uncomment the above line, restart Apache server and access "
19575
"MediaWiki using the following url:"
19576
msgstr ""
19577
19578
#: serverguide/C/lamp-applications.xml:333(programlisting)
19579
#, no-wrap
19580
msgid ""
19581
"\n"
19582
"http://localhost/mediawiki/config/index.php\n"
19583
msgstr ""
19584
19585
#: serverguide/C/lamp-applications.xml:338(para)
19586
msgid ""
19587
"Please read the <quote>Checking environment...</quote> section in this page. "
19588
"You should be able to fix many issues by carefully reading this section."
19589
msgstr ""
19590
19591
#: serverguide/C/lamp-applications.xml:345(para)
19592
msgid ""
19593
"Once the configuration is complete, you should copy the "
19594
"<filename>LocalSettings.php</filename> file to "
19595
"<filename>/etc/mediawiki</filename> directory:"
19596
msgstr ""
19597
19598
#: serverguide/C/lamp-applications.xml:352(command)
19599
msgid "sudo mv /var/lib/mediawiki/config/LocalSettings.php /etc/mediawiki/"
19600
msgstr ""
19601
19602
#: serverguide/C/lamp-applications.xml:355(para)
19603
msgid ""
19604
"You may also want to edit "
19605
"<filename>/etc/mediawiki/LocalSettings.php</filename> adjusting:"
19606
msgstr ""
19607
19608
#: serverguide/C/lamp-applications.xml:360(programlisting)
19609
#, no-wrap
19610
msgid ""
19611
"\n"
19612
"ini_set( 'memory_limit', '64M' );\n"
19613
msgstr ""
19614
19615
#: serverguide/C/lamp-applications.xml:367(title)
19616
msgid "Extensions"
19617
msgstr ""
19618
19619
#: serverguide/C/lamp-applications.xml:368(para)
19620
msgid ""
19621
"The extensions add new features and enhancements for the MediaWiki "
19622
"application. The extensions give wiki administrators and end users the "
19623
"ability to customize MediaWiki to their requirements."
19624
msgstr ""
19625
19626
#: serverguide/C/lamp-applications.xml:374(para)
19627
msgid ""
19628
"You can download MediaWiki extensions as an archive file or checkout from "
19629
"the Subversion repository. You should copy it to "
19630
"<filename>/var/lib/mediawiki/extensions</filename> directory. You should "
19631
"also add the following line at the end of file: "
19632
"<filename>/etc/mediawiki/LocalSettings.php</filename>."
19633
msgstr ""
19634
19635
#: serverguide/C/lamp-applications.xml:382(programlisting)
19636
#, no-wrap
19637
msgid ""
19638
"\n"
19639
"require_once \"$IP/extensions/ExtentionName/ExtentionName.php\";\n"
19640
msgstr ""
19641
19642
#: serverguide/C/lamp-applications.xml:392(para)
19643
msgid ""
19644
"For more details, please refer to the <ulink "
19645
"url=\"http://www.mediawiki.org\">MediaWiki</ulink> web site."
19646
msgstr ""
19647
19648
#: serverguide/C/lamp-applications.xml:398(para)
19649
msgid ""
19650
"The <ulink url=\"http://www.packtpub.com/Mediawiki/book\">MediaWiki "
19651
"Administrators’ Tutorial Guide</ulink> contains a wealth of information for "
19652
"new MediaWiki administrators."
19653
msgstr ""
19654
19655
#: serverguide/C/lamp-applications.xml:404(para)
19656
msgid ""
19657
"Also, the <ulink url=\"https://help.ubuntu.com/community/MediaWiki\">Ubuntu "
19658
"Wiki MediaWiki</ulink> page is a good resource."
19659
msgstr ""
19660
19661
#: serverguide/C/lamp-applications.xml:414(title)
19662
msgid "phpMyAdmin"
19663
msgstr ""
19664
19665
#: serverguide/C/lamp-applications.xml:416(para)
19666
msgid ""
19667
"<application>phpMyAdmin</application> is a LAMP application specifically "
19668
"written for administering <application>MySQL</application> servers. Written "
19669
"in <application>PHP</application>, and accessed through a web browser, "
19670
"phpMyAdmin provides a graphical interface for database administration tasks."
19671
msgstr ""
19672
19673
#: serverguide/C/lamp-applications.xml:425(para)
19674
msgid ""
19675
"Before installing <application>phpMyAdmin</application> you will need access "
19676
"to a <application>MySQL</application> database either on the same host as "
19677
"that phpMyAdmin is installed on, or on a host accessible over the network. "
19678
"For more information see <xref linkend=\"mysql\"/>. From a terminal prompt "
19679
"enter:"
19680
msgstr ""
19681
19682
#: serverguide/C/lamp-applications.xml:432(command)
19683
msgid "sudo apt-get install phpmyadmin"
19684
msgstr ""
19685
19686
#: serverguide/C/lamp-applications.xml:435(para)
19687
msgid ""
19688
"At the prompt choose which web server to be configured for "
19689
"<application>phpMyAdmin</application>. The rest of this section will use "
19690
"<application>Apache2</application> for the web server."
19691
msgstr ""
19692
19693
#: serverguide/C/lamp-applications.xml:440(para)
19694
msgid ""
19695
"In a browser go to <emphasis>http://servername/phpmyadmin</emphasis>, "
19696
"replacing <emphasis role=\"italic\">serveranme</emphasis> with the server's "
19697
"actual hostname. At the login, page enter <emphasis>root</emphasis> for the "
19698
"<emphasis>username</emphasis>, or another <application>MySQL</application> "
19699
"user if you any setup, and enter the <application>MySQL</application> user's "
19700
"password."
19701
msgstr ""
19702
19703
#: serverguide/C/lamp-applications.xml:447(para)
19704
msgid ""
19705
"Once logged in you can reset the <emphasis>root</emphasis> password if "
19706
"needed, create users, create/destroy databases and tables, etc."
19707
msgstr ""
19708
19709
#: serverguide/C/lamp-applications.xml:455(para)
19710
msgid ""
19711
"The configuration files for <application>phpMyAdmin</application> are "
19712
"located in <filename>/etc/phpmyadmin</filename>. The main configuration file "
19713
"is <filename>/etc/phpmyadmin/config.inc.php</filename>. This file contains "
19714
"configuration options that apply globally to "
19715
"<application>phpMyAdmin</application>."
19716
msgstr ""
19717
19718
#: serverguide/C/lamp-applications.xml:461(para)
19719
msgid ""
19720
"To use <application>phpMyAdmin</application> to administer a MySQL database "
19721
"hosted on another server, adjust the following in "
19722
"<filename>/etc/phpmyadmin/config.inc.php</filename>:"
19723
msgstr ""
19724
19725
#: serverguide/C/lamp-applications.xml:466(programlisting)
19726
#, no-wrap
19727
msgid ""
19728
"\n"
19729
"$cfg['Servers'][$i]['host'] = 'db_server';\n"
19730
msgstr ""
19731
19732
#: serverguide/C/lamp-applications.xml:471(para)
19733
msgid ""
19734
"Replace <emphasis role=\"italic\">db_server</emphasis> with the actual "
19735
"remote database server name or IP address. Also, be sure that the "
19736
"<application>phpMyAdmin</application> host has permissions to access the "
19737
"remote database."
19738
msgstr ""
19739
19740
#: serverguide/C/lamp-applications.xml:477(para)
19741
msgid ""
19742
"Once configured, log out of <application>phpMyAdmin</application> and back "
19743
"in, and you should be accessing the new server."
19744
msgstr ""
19745
19746
#: serverguide/C/lamp-applications.xml:481(para)
19747
msgid ""
19748
"The <filename>config.header.inc.php</filename> and "
19749
"<filename>config.footer.inc.php</filename> files are used to add a HTML "
19750
"header and footer to <application>phpMyAdmin</application>."
19751
msgstr ""
19752
19753
#: serverguide/C/lamp-applications.xml:486(para)
19754
msgid ""
19755
"Another important configuration file is "
19756
"<filename>/etc/phpmyadmin/apache.conf</filename>, this file is symlinked to "
19757
"<filename>/etc/apache2/conf.d/phpmyadmin.conf</filename>, and is used to "
19758
"configure <application>Apache2</application> to serve the "
19759
"<application>phpMyAdmin</application> site. The file contains directives for "
19760
"loading <application>PHP</application>, directory permissions, etc. For more "
19761
"information on configuring <application>Apache2</application> see <xref "
19762
"linkend=\"httpd\"/>."
19763
msgstr ""
19764
19765
#: serverguide/C/lamp-applications.xml:500(para)
19766
msgid ""
19767
"The <application>phpMyAdmin</application> documentation comes installed with "
19768
"the package and can be accessed from the <emphasis>phpMyAdmin "
19769
"Documentation</emphasis> link (a question mark with a box around it) under "
19770
"the phpMyAdmin logo. The official docs can also be access on the <ulink "
19771
"url=\"http://www.phpmyadmin.net/home_page/docs.php\">phpMyAdmin</ulink> site."
19772
msgstr ""
19773
19774
#: serverguide/C/lamp-applications.xml:507(para)
19775
msgid ""
19776
"Also, <ulink url=\"http://www.packtpub.com/phpmyadmin-3rd-"
19777
"edition/book\">Mastering phpMyAdmin</ulink> is a great resource."
19778
msgstr ""
19779
19780
#: serverguide/C/lamp-applications.xml:512(para)
19781
msgid ""
19782
"A third resource is the <ulink "
19783
"url=\"https://help.ubuntu.com/community/phpMyAdmin\">phpMyAdmin Ubuntu "
19784
"Wiki</ulink> page."
19785
msgstr ""
19786
19787
#: serverguide/C/introduction.xml:14(para)
19788
msgid "Welcome to the <emphasis>Ubuntu Server Guide</emphasis>!"
19789
msgstr ""
19790
19791
#: serverguide/C/introduction.xml:15(para)
19792
msgid ""
19793
"Here you can find information on how to install and configure various server "
19794
"applications. It is a step-by-step, task-oriented guide for configuring and "
19795
"customizing your system."
19796
msgstr ""
19797
19798
#: serverguide/C/introduction.xml:19(para)
19799
msgid ""
19800
"This guide assumes you have a basic understanding of your Ubuntu system. "
19801
"Some installation details are covered in <xref linkend=\"installation\"/>, "
19802
"but if you need detailed instructions installing Ubuntu please refer to the "
19803
"<ulink url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
19804
"Installation Guide</ulink>."
19805
msgstr ""
19806
19807
#: serverguide/C/introduction.xml:25(para)
19808
msgid ""
19809
"A HTML version of the manual is available online at <ulink "
19810
"url=\"http://help.ubuntu.com\">the Ubuntu Documentation website</ulink>. The "
19811
"HTML files are also available in the <application>ubuntu-"
19812
"serverguide</application> package. See <xref linkend=\"package-"
19813
"management\"/> for details on installing packages."
19814
msgstr ""
19815
19816
#: serverguide/C/introduction.xml:32(para)
19817
msgid ""
19818
"If you choose to install the <application>ubuntu-serverguide</application> "
19819
"you can view this document from a console by:"
19820
msgstr ""
19821
19822
#: serverguide/C/introduction.xml:36(command)
19823
msgid "w3m /usr/share/ubuntu-serverguide/html/C/index.html"
19824
msgstr ""
19825
19826
#: serverguide/C/introduction.xml:39(para)
19827
msgid ""
19828
"If you are using a localized version of Ubuntu, replace "
19829
"<emphasis>C</emphasis> with your language localization (e.g. "
19830
"<emphasis>en_GB</emphasis>)."
19831
msgstr ""
19832
19833
#: serverguide/C/introduction.xml:53(title)
19834
msgid "Support"
19835
msgstr ""
19836
19837
#: serverguide/C/introduction.xml:55(para)
19838
msgid ""
19839
"There are a couple of different ways that Ubuntu Server Edition is "
19840
"supported, commercial support and community support. The main commercial "
19841
"support (and development funding) is available from Canonical Ltd. They "
19842
"supply reasonably priced support contracts on a per desktop or per server "
19843
"basis. For more information see the <ulink "
19844
"url=\"http://www.canonical.com/services/support\">Canonical Services</ulink> "
19845
"page."
19846
msgstr ""
19847
19848
#: serverguide/C/introduction.xml:62(para)
19849
msgid ""
19850
"Community support is also provided by dedicated individuals, and companies, "
19851
"that wish to make Ubuntu the best distribution possible. Support is provided "
19852
"through multiple mailing lists, IRC channels, forums, blogs, wikis, etc. The "
19853
"large amount of information available can be overwhelming, but a good search "
19854
"engine query can usually provide an answer to your questions. See the <ulink "
19855
"url=\"http://www.ubuntu.com/support\">Ubuntu Support</ulink> page for more "
19856
"information."
19857
msgstr ""
19858
19859
#: serverguide/C/installation.xml:14(para)
19860
msgid ""
19861
"This chapter provides a quick overview of installing Ubuntu 10.04 LTS Server "
19862
"Edition. For more detailed instructions, please refer to the <ulink "
19863
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
19864
"Installation Guide</ulink>."
19865
msgstr ""
19866
19867
#: serverguide/C/installation.xml:19(title)
19868
msgid "Preparing to Install"
19869
msgstr ""
19870
19871
#: serverguide/C/installation.xml:20(para)
19872
msgid ""
19873
"This section explains various aspects to consider before starting the "
19874
"installation."
19875
msgstr ""
19876
19877
#: serverguide/C/installation.xml:24(title)
19878
msgid "System Requirements"
19879
msgstr ""
19880
19881
#: serverguide/C/installation.xml:25(para)
19882
msgid ""
19883
"Ubuntu 10.04 LTS Server Edition supports two (2) major architectures: Intel "
19884
"x86 and AMD64. The table below lists recommended hardware specifications. "
19885
"Depending on your needs, you might manage with less than this. However, most "
19886
"users risk being frustrated if they ignore these suggestions."
19887
msgstr ""
19888
19889
#: serverguide/C/installation.xml:27(title)
19890
msgid "Recommended Minimum Requirements"
19891
msgstr ""
19892
19893
#: serverguide/C/installation.xml:35(para)
19894
msgid "Install Type"
19895
msgstr ""
19896
19897
#: serverguide/C/installation.xml:36(para)
19898
msgid "RAM"
19899
msgstr ""
19900
19901
#: serverguide/C/installation.xml:37(para)
19902
msgid "Hard Drive Space"
19903
msgstr ""
19904
19905
#: serverguide/C/installation.xml:40(para)
19906
msgid "Base System"
19907
msgstr ""
19908
19909
#: serverguide/C/installation.xml:41(para)
19910
msgid "All Tasks Installed"
19911
msgstr ""
19912
19913
#: serverguide/C/installation.xml:46(para)
19914
msgid "Server"
19915
msgstr "Servidor"
19916
19917
#: serverguide/C/installation.xml:47(para)
19918
msgid "128 megabytes"
19919
msgstr ""
19920
19921
#: serverguide/C/installation.xml:48(para)
19922
msgid "500 megabytes"
19923
msgstr ""
19924
19925
#: serverguide/C/installation.xml:49(para)
19926
msgid "1 gigabyte"
19927
msgstr ""
19928
19929
#: serverguide/C/installation.xml:54(para)
19930
msgid ""
19931
"The Server Edition provides a common base for all sorts of server "
19932
"applications. It is a minimalist design providing a platform for the desired "
19933
"services, such as file/print services, web hosting, email hosting, etc."
19934
msgstr ""
19935
19936
#: serverguide/C/installation.xml:60(para)
19937
msgid ""
19938
"The requirements for UEC are slightly different for Front End requirements "
19939
"see <xref linkend=\"uec-frontend-requirements\"/> and for UEC Node "
19940
"requirements see <xref linkend=\"uec-node-requirements\"/>."
19941
msgstr ""
19942
19943
#: serverguide/C/installation.xml:68(title)
19944
msgid "Server and Desktop Differences"
19945
msgstr ""
19946
19947
#: serverguide/C/installation.xml:69(para)
19948
msgid ""
19949
"There are a few differences between the <emphasis>Ubuntu Server "
19950
"Edition</emphasis> and the <emphasis>Ubuntu Desktop Edition</emphasis>. It "
19951
"should be noted that both editions use the same "
19952
"<application>apt</application> repositories. Making it just as easy to "
19953
"install a <emphasis role=\"italic\">server</emphasis> application on the "
19954
"Desktop Edition as it is on the Server Edition."
19955
msgstr ""
19956
19957
#: serverguide/C/installation.xml:75(para)
19958
msgid ""
19959
"The differences between the two editions are the lack of an X window "
19960
"environment in the Server Edition, the installation process, and different "
19961
"Kernel options."
19962
msgstr ""
19963
19964
#: serverguide/C/installation.xml:82(title)
19965
msgid "Kernel Differences:"
19966
msgstr ""
19967
19968
#: serverguide/C/installation.xml:85(para)
19969
msgid ""
19970
"The Server Edition uses the <emphasis>Deadline</emphasis> I/O scheduler "
19971
"instead of the <emphasis>CFQ</emphasis> scheduler used by the Desktop "
19972
"Edition."
19973
msgstr ""
19974
19975
#: serverguide/C/installation.xml:91(para)
19976
msgid "<emphasis>Preemption</emphasis> is turned off in the Server Edition."
19977
msgstr ""
19978
19979
#: serverguide/C/installation.xml:96(para)
19980
msgid ""
19981
"The timer interrupt is 100 Hz in the Server Edition and 250 Hz in the "
19982
"Desktop Edition."
19983
msgstr ""
19984
19985
#: serverguide/C/installation.xml:102(para)
19986
msgid ""
19987
"When running a 64-bit version of Ubuntu on 64-bit processors you are not "
19988
"limited by memory addressing space."
19989
msgstr ""
19990
19991
#: serverguide/C/installation.xml:107(para)
19992
msgid ""
19993
"To see all kernel configuration options you can look through "
19994
"<filename>/boot/config-2.6.31-server</filename>. Also, <ulink "
19995
"url=\"http://www.kroah.com/lkn/\">Linux Kernel in a Nutshell</ulink> is a "
19996
"great resource on the options available."
19997
msgstr ""
19998
19999
#: serverguide/C/installation.xml:116(title)
20000
msgid "Backing Up"
20001
msgstr ""
20002
20003
#: serverguide/C/installation.xml:119(para)
20004
msgid ""
20005
"Before installing <application>Ubuntu Server Edition</application> you "
20006
"should make sure all data on the system is backed up. See <xref "
20007
"linkend=\"backups\"/> for backup options."
20008
msgstr ""
20009
20010
#: serverguide/C/installation.xml:123(para)
20011
msgid ""
20012
"If this is not the first time an operating system has been installed on your "
20013
"computer, it is likely you will need to re-partition your disk to make room "
20014
"for Ubuntu."
20015
msgstr ""
20016
20017
#: serverguide/C/installation.xml:127(para)
20018
msgid ""
20019
"Any time you partition your disk, you should be prepared to lose everything "
20020
"on the disk should you make a mistake or something goes wrong during "
20021
"partitioning. The programs used in installation are quite reliable, most "
20022
"have seen years of use, but they also perform destructive actions."
20023
msgstr ""
20024
20025
#: serverguide/C/installation.xml:139(title)
20026
msgid "Installing from CD"
20027
msgstr ""
20028
20029
#: serverguide/C/installation.xml:140(para)
20030
msgid ""
20031
"The basic steps to install Ubuntu Server Edition from CD are the same for "
20032
"installing any operating system from CD. Unlike the <emphasis>Desktop "
20033
"Edition</emphasis> the <emphasis>Server Edition</emphasis> does not include "
20034
"a graphical installation program. Instead the Server Edition uses a console "
20035
"menu based process."
20036
msgstr ""
20037
20038
#: serverguide/C/installation.xml:147(para)
20039
msgid ""
20040
"First, download and burn the appropriate ISO file from the <ulink "
20041
"url=\"http://www.ubuntu.com/getubuntu/download\"> Ubuntu web site</ulink>."
20042
msgstr ""
20043
20044
#: serverguide/C/installation.xml:153(para)
20045
msgid "Boot the system from the CD-ROM drive."
20046
msgstr ""
20047
20048
#: serverguide/C/installation.xml:158(para)
20049
msgid ""
20050
"At the boot prompt you will be asked to select the language. Afterwards the "
20051
"installation process begins by asking for your keyboard layout."
20052
msgstr ""
20053
20054
#: serverguide/C/installation.xml:164(para)
20055
msgid ""
20056
"From the main boot menu there are some additional options to install Ubuntu "
20057
"Server Edition. You can install a basic Ubuntu Server, or install Ubuntu "
20058
"Server as part of a <emphasis>Ubuntu Enterprise Cloud</emphasis>. For more "
20059
"information on UEC see <xref linkend=\"uec\"/>. The rest of this section "
20060
"will cover the basic Ubuntu Server install."
20061
msgstr ""
20062
20063
#: serverguide/C/installation.xml:172(para)
20064
msgid ""
20065
"The installer then discovers your hardware configuration, and configures the "
20066
"network settings using DHCP. If you do not wish to use DHCP at the next "
20067
"screen choose \"Go Back\", and you have the option to \"Configure the "
20068
"network manually\"."
20069
msgstr ""
20070
20071
#: serverguide/C/installation.xml:179(para)
20072
msgid "Next, the installer asks for the system's hostname and Time Zone."
20073
msgstr ""
20074
20075
#: serverguide/C/installation.xml:184(para)
20076
msgid ""
20077
"You can then choose from several options to configure the hard drive layout. "
20078
"For advanced disk options see <xref linkend=\"advanced-installation\"/>."
20079
msgstr ""
20080
20081
#: serverguide/C/installation.xml:190(para)
20082
msgid "The Ubuntu base system is then installed."
20083
msgstr ""
20084
20085
#: serverguide/C/installation.xml:195(para)
20086
msgid ""
20087
"A new user is setup, this user will have <emphasis>root</emphasis> access "
20088
"through the <application>sudo</application> utility."
20089
msgstr ""
20090
20091
#: serverguide/C/installation.xml:201(para)
20092
msgid ""
20093
"After the user is setup, you will be asked to encrypt your <filename "
20094
"role=\"directory\">home</filename> directory."
20095
msgstr ""
20096
20097
#: serverguide/C/installation.xml:207(para)
20098
msgid ""
20099
"The next step in the installation process is to decide how you want to "
20100
"update the system. There are three options:"
20101
msgstr ""
20102
20103
#: serverguide/C/installation.xml:213(para)
20104
msgid ""
20105
"<emphasis>No automatic updates</emphasis>: this requires an administrator to "
20106
"log into the machine and manually install updates."
20107
msgstr ""
20108
20109
#: serverguide/C/installation.xml:219(para)
20110
msgid ""
20111
"<emphasis>Install security updates Automatically</emphasis>: will install "
20112
"the <application>unattended-upgrades</application> package, which will "
20113
"install security updates without the intervention of an administrator. For "
20114
"more details see <xref linkend=\"automatic-updates\"/>."
20115
msgstr ""
20116
20117
#: serverguide/C/installation.xml:226(para)
20118
msgid ""
20119
"<emphasis>Manage the system with Landscape</emphasis>: Landscape is a paid "
20120
"service provided by Canonical to help manage your Ubuntu machines. See the "
20121
"<ulink url=\"http://www.canonical.com/projects/landscape\">Landscape</ulink> "
20122
"site for details."
20123
msgstr ""
20124
20125
#: serverguide/C/installation.xml:235(para)
20126
msgid ""
20127
"You now have the option to install, or not install, several package tasks. "
20128
"See <xref linkend=\"install-tasks\"/> for details. Also, there is an option "
20129
"to launch <application>aptitude</application> to choose specific packages to "
20130
"install. For more information see <xref linkend=\"aptitude\"/>."
20131
msgstr ""
20132
20133
#: serverguide/C/installation.xml:243(para)
20134
msgid "Finally, the last step before rebooting is to set the clock to UTC."
20135
msgstr ""
20136
20137
#: serverguide/C/installation.xml:249(para)
20138
msgid ""
20139
"If at any point during installation you are not satisfied by the default "
20140
"setting, use the \"Go Back\" function at any prompt to be brought to a "
20141
"detailed installation menu that will allow you to modify the default "
20142
"settings."
20143
msgstr ""
20144
20145
#: serverguide/C/installation.xml:254(para)
20146
msgid ""
20147
"At some point during the installation process you may want to read the help "
20148
"screen provided by the installation system. To do this, press F1."
20149
msgstr ""
20150
20151
#: serverguide/C/installation.xml:259(para)
20152
msgid ""
20153
"Once again, for detailed instructions see the <ulink "
20154
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\"> Ubuntu "
20155
"Installation Guide</ulink>."
20156
msgstr ""
20157
20158
#: serverguide/C/installation.xml:265(title)
20159
msgid "Package Tasks"
20160
msgstr ""
20161
20162
#: serverguide/C/installation.xml:266(para)
20163
msgid ""
20164
"During the Server Edition installation you have the option of installing "
20165
"additional packages from the CD. The packages are grouped by the type of "
20166
"service they provide."
20167
msgstr ""
20168
20169
#: serverguide/C/installation.xml:272(para)
20170
msgid "Cloud computing: Walrus storage service"
20171
msgstr ""
20172
20173
#: serverguide/C/installation.xml:277(para)
20174
msgid "Cloud computing: all-in-one cluster"
20175
msgstr ""
20176
20177
#: serverguide/C/installation.xml:282(para)
20178
msgid "Cloud computing: Cluster controller"
20179
msgstr ""
20180
20181
#: serverguide/C/installation.xml:287(para)
20182
msgid "Cloud computing: Node controller"
20183
msgstr ""
20184
20185
#: serverguide/C/installation.xml:292(para)
20186
msgid "Cloud computing: Storage controller"
20187
msgstr ""
20188
20189
#: serverguide/C/installation.xml:297(para)
20190
msgid "Cloud computing: top-level cloud controller"
20191
msgstr ""
20192
20193
#: serverguide/C/installation.xml:302(para)
20194
msgid "DNS server: Selects the BIND DNS server and its documentation."
20195
msgstr ""
20196
20197
#: serverguide/C/installation.xml:307(para)
20198
msgid "LAMP server: Selects a ready-made Linux/Apache/MySQL/PHP server."
20199
msgstr ""
20200
20201
#: serverguide/C/installation.xml:312(para)
20202
msgid ""
20203
"Mail server: This task selects a variety of package useful for a general "
20204
"purpose mail server system."
20205
msgstr ""
20206
20207
#: serverguide/C/installation.xml:317(para)
20208
msgid "OpenSSH server: Selects packages needed for an OpenSSH server."
20209
msgstr ""
20210
20211
#: serverguide/C/installation.xml:322(para)
20212
msgid ""
20213
"PostgreSQL database: This task selects client and server packages for the "
20214
"PostgreSQL database."
20215
msgstr ""
20216
20217
#: serverguide/C/installation.xml:327(para)
20218
msgid "Print server: This task sets up your system to be a print server."
20219
msgstr ""
20220
20221
#: serverguide/C/installation.xml:332(para)
20222
msgid ""
20223
"Samba File server: This task sets up your system to be a Samba file server, "
20224
"which is especially suitable in networks with both Windows and Linux systems."
20225
msgstr ""
20226
20227
#: serverguide/C/installation.xml:338(para)
20228
msgid ""
20229
"Tomcat server: Installs the Apache Tomcat and needed dependencies Java, gcj, "
20230
"etc."
20231
msgstr ""
20232
20233
#: serverguide/C/installation.xml:343(para)
20234
msgid ""
20235
"Virtual machine host: Includes packages needed to run KVM virtual machines."
20236
msgstr ""
20237
20238
#: serverguide/C/installation.xml:348(para)
20239
msgid ""
20240
"Manually select packages: Executes <application>apptitude</application> "
20241
"allowing you to individually select packages."
20242
msgstr ""
20243
20244
#: serverguide/C/installation.xml:353(para)
20245
msgid ""
20246
"Installing the package groups is accomplished using the "
20247
"<application>tasksel</application> utility. One of the important difference "
20248
"between Ubuntu (or Debian) and other GNU/Linux distribution is that, when "
20249
"installed, a package is also configured to reasonable defaults, eventually "
20250
"prompting you for additional required information. Likewise, when installing "
20251
"a task, the packages are not only installed, but also configured to provided "
20252
"a fully integrated service."
20253
msgstr ""
20254
20255
#: serverguide/C/installation.xml:360(para)
20256
msgid ""
20257
"For more information on the <emphasis>Cloud Computing</emphasis> tasks see "
20258
"<xref linkend=\"uec\"/>."
20259
msgstr ""
20260
20261
#: serverguide/C/installation.xml:363(para)
20262
msgid ""
20263
"Once the installation process has finished you can view a list of available "
20264
"tasks by entering the following from a terminal prompt:"
20265
msgstr ""
20266
20267
#: serverguide/C/installation.xml:368(command)
20268
msgid "tasksel --list-tasks"
20269
msgstr ""
20270
20271
#: serverguide/C/installation.xml:371(para)
20272
msgid ""
20273
"The output will list tasks from other Ubuntu based distributions such as "
20274
"Kubuntu and Edubuntu. Note that you can also invoke the "
20275
"<command>tasksel</command> command by itself, which will bring up a menu of "
20276
"the different tasks available."
20277
msgstr ""
20278
20279
#: serverguide/C/installation.xml:377(para)
20280
msgid ""
20281
"You can view a list of which packages are installed with each task using the "
20282
"<emphasis>--task-packages</emphasis> option. For example, to list the "
20283
"packages installed with the <emphasis>DNS Server</emphasis> task enter the "
20284
"following:"
20285
msgstr ""
20286
20287
#: serverguide/C/installation.xml:382(command)
20288
msgid "tasksel --task-packages dns-server"
20289
msgstr ""
20290
20291
#: serverguide/C/installation.xml:384(para)
20292
msgid "The output of the command should list:"
20293
msgstr ""
20294
20295
#: serverguide/C/installation.xml:387(programlisting)
20296
#, no-wrap
20297
msgid ""
20298
"\n"
20299
"bind9-doc \n"
20300
"bind9utils \n"
20301
"bind9\n"
20302
msgstr ""
20303
20304
#: serverguide/C/installation.xml:392(para)
20305
msgid ""
20306
"Also, if you did not install one of the tasks during the installation "
20307
"process, but for example you decide to make your new LAMP server a DNS "
20308
"server as well. Simply insert the installation CD and from a terminal:"
20309
msgstr ""
20310
20311
#: serverguide/C/installation.xml:397(command)
20312
msgid "sudo tasksel install dns-server"
20313
msgstr ""
20314
20315
#: serverguide/C/installation.xml:402(title)
20316
msgid "Upgrading"
20317
msgstr ""
20318
20319
#: serverguide/C/installation.xml:403(para)
20320
msgid ""
20321
"There are several ways to upgrade from one Ubuntu release to another. This "
20322
"section gives an overview of the recommended upgrade method."
20323
msgstr ""
20324
20325
#: serverguide/C/installation.xml:407(title) serverguide/C/installation.xml:422(command)
20326
msgid "do-release-upgrade"
20327
msgstr ""
20328
20329
#: serverguide/C/installation.xml:408(para)
20330
msgid ""
20331
"The recommended way to upgrade a Server Edition installation is to use the "
20332
"<application>do-release-upgrade</application> utility. Part of the "
20333
"<emphasis>update-manager-core</emphasis> package, it does not have any "
20334
"graphical dependencies and is installed by default."
20335
msgstr ""
20336
20337
#: serverguide/C/installation.xml:413(para)
20338
msgid ""
20339
"Debian based systems can also be upgraded by using <command>apt-get dist-"
20340
"upgrade</command>. However, using <application>do-release-"
20341
"upgrade</application> is recommended because it has the ability to handle "
20342
"system configuration changes sometimes needed between releases."
20343
msgstr ""
20344
20345
#: serverguide/C/installation.xml:418(para)
20346
msgid "To upgrade to a newer release, from a terminal prompt enter:"
20347
msgstr ""
20348
20349
#: serverguide/C/installation.xml:424(para)
20350
msgid ""
20351
"It is also possible to use <application>do-release-upgrade</application> to "
20352
"upgrade to a development version of Ubuntu. To accomplish this use the "
20353
"<emphasis>-d</emphasis> switch:"
20354
msgstr ""
20355
20356
#: serverguide/C/installation.xml:429(command)
20357
msgid "do-release-upgrade -d"
20358
msgstr ""
20359
20360
#: serverguide/C/installation.xml:432(para)
20361
msgid ""
20362
"Upgrading to a development release is <emphasis>not</emphasis> recommended "
20363
"for production environments."
20364
msgstr ""
20365
20366
#: serverguide/C/installation.xml:439(title)
20367
msgid "Advanced Installation"
20368
msgstr ""
20369
20370
#: serverguide/C/installation.xml:442(title)
20371
msgid "Software RAID"
20372
msgstr ""
20373
20374
#: serverguide/C/installation.xml:444(para)
20375
msgid ""
20376
"RAID is a method of configuring multiple hard drives to act as one, reducing "
20377
"the probability of catastrophic data loss in case of drive failure. RAID is "
20378
"implemented in either software (where the operating system knows about both "
20379
"drives and actively maintains both of them) or hardware (where a special "
20380
"controller makes the OS think there's only one drive and maintains the "
20381
"drives 'invisibly')."
20382
msgstr ""
20383
20384
#: serverguide/C/installation.xml:451(para)
20385
msgid ""
20386
"The RAID software included with current versions of Linux (and Ubuntu) is "
20387
"based on the <application>'mdadm'</application> driver and works very well, "
20388
"better even than many so-called 'hardware' RAID controllers. This section "
20389
"will guide you through installing Ubuntu Server Edition using two RAID1 "
20390
"partitions on two physical hard drives, one for <emphasis>/</emphasis> and "
20391
"another for <emphasis>swap</emphasis>."
20392
msgstr ""
20393
20394
#: serverguide/C/installation.xml:461(para) serverguide/C/installation.xml:975(para)
20395
msgid ""
20396
"Follow the installation steps until you get to the <emphasis>Partition "
20397
"disks</emphasis> step, then:"
20398
msgstr ""
20399
20400
#: serverguide/C/installation.xml:468(para)
20401
msgid "Select <emphasis>Manual</emphasis> as the partition method."
20402
msgstr ""
20403
20404
#: serverguide/C/installation.xml:475(para)
20405
msgid ""
20406
"Select the first hard drive, and agree to <emphasis>\"Create a new empty "
20407
"partition table on this device?\"</emphasis>."
20408
msgstr ""
20409
20410
#: serverguide/C/installation.xml:479(para)
20411
msgid ""
20412
"Repeat this step for each drive you wish to be part of the RAID array."
20413
msgstr ""
20414
20415
#: serverguide/C/installation.xml:486(para)
20416
msgid ""
20417
"Select the <emphasis>\"FREE SPACE\"</emphasis> on the first drive then "
20418
"select <emphasis>\"Create a new partition\"</emphasis>."
20419
msgstr ""
20420
20421
#: serverguide/C/installation.xml:493(para)
20422
msgid ""
20423
"Next, select the <emphasis>Size</emphasis> of the partition. This partition "
20424
"will be the <emphasis>swap</emphasis> partition, and a general rule for swap "
20425
"size is twice that of RAM. Enter the partition size, then choose "
20426
"<emphasis>Primary</emphasis>, then <emphasis>Beginning</emphasis>."
20427
msgstr ""
20428
20429
#: serverguide/C/installation.xml:502(para)
20430
msgid ""
20431
"Select the <emphasis>\"Use as:\"</emphasis> line at the top. By default this "
20432
"is <emphasis role=\"italic\">\"Ext4 journaling file system\"</emphasis>, "
20433
"change that to <emphasis>\"physical volume for RAID\"</emphasis> then "
20434
"<emphasis>\"Done setting up partition\"</emphasis>."
20435
msgstr ""
20436
20437
#: serverguide/C/installation.xml:511(para)
20438
msgid ""
20439
"For the <emphasis>/</emphasis> partition once again select <emphasis>\"Free "
20440
"Space\"</emphasis> on the first drive then <emphasis>\"Create a new "
20441
"partition\"</emphasis>."
20442
msgstr ""
20443
20444
#: serverguide/C/installation.xml:519(para)
20445
msgid ""
20446
"Use the rest of the free space on the drive and choose "
20447
"<emphasis>Continue</emphasis>, then <emphasis>Primary</emphasis>."
20448
msgstr ""
20449
20450
#: serverguide/C/installation.xml:526(para)
20451
msgid ""
20452
"As with the swap partition, select the <emphasis>\"Use as:\"</emphasis> line "
20453
"at the top, changing it to <emphasis>\"physical volume for "
20454
"RAID\"</emphasis>. Also select the <emphasis>\"Bootable flag:\"</emphasis> "
20455
"line to change the value to <emphasis>\"on\"</emphasis>. Then choose "
20456
"<emphasis>\"Done setting up partition\"</emphasis>."
20457
msgstr ""
20458
20459
#: serverguide/C/installation.xml:536(para)
20460
msgid "Repeat steps three through eight for the other disk and partitions."
20461
msgstr ""
20462
20463
#: serverguide/C/installation.xml:545(title)
20464
msgid "RAID Configuration"
20465
msgstr ""
20466
20467
#: serverguide/C/installation.xml:547(para)
20468
msgid "With the partitions setup the arrays are ready to be configured:"
20469
msgstr ""
20470
20471
#: serverguide/C/installation.xml:554(para)
20472
msgid ""
20473
"Back in the main \"Partition Disks\" page, select <emphasis>\"Configure "
20474
"Software RAID\"</emphasis> at the top."
20475
msgstr ""
20476
20477
#: serverguide/C/installation.xml:561(para)
20478
msgid "Select <emphasis>\"yes\"</emphasis> to write the changes to disk."
20479
msgstr ""
20480
20481
#: serverguide/C/installation.xml:568(para)
20482
msgid "Choose <emphasis>\"Create MD device\"</emphasis>."
20483
msgstr ""
20484
20485
#: serverguide/C/installation.xml:575(para)
20486
msgid ""
20487
"For this example, select <emphasis>\"RAID1\"</emphasis>, but if you are "
20488
"using a different setup choose the appropriate type (RAID0 RAID1 RAID5)."
20489
msgstr ""
20490
20491
#: serverguide/C/installation.xml:581(para)
20492
msgid ""
20493
"In order to use <emphasis>RAID5</emphasis> you need at least "
20494
"<emphasis>three</emphasis> drives. Using RAID0 or RAID1 only "
20495
"<emphasis>two</emphasis> drives are required."
20496
msgstr ""
20497
20498
#: serverguide/C/installation.xml:590(para)
20499
msgid ""
20500
"Enter the number of active devices <emphasis>\"2\"</emphasis>, or the amount "
20501
"of hard drives you have, for the array. Then select "
20502
"<emphasis>\"Continue\"</emphasis>."
20503
msgstr ""
20504
20505
#: serverguide/C/installation.xml:598(para)
20506
msgid ""
20507
"Next, enter the number of spare devices <emphasis>\"0\"</emphasis> by "
20508
"default, then choose <emphasis>\"Continue\"</emphasis>."
20509
msgstr ""
20510
20511
#: serverguide/C/installation.xml:605(para)
20512
msgid ""
20513
"Choose which partitions to use. Generally they will be sda1, sdb1, sdc1, "
20514
"etc. The numbers will usually match and the different letters correspond to "
20515
"different hard drives."
20516
msgstr ""
20517
20518
#: serverguide/C/installation.xml:610(para)
20519
msgid ""
20520
"For the <emphasis>swap</emphasis> partition choose <emphasis>sda1</emphasis> "
20521
"and <emphasis>sdb1</emphasis>. Select <emphasis>\"Continue\"</emphasis> to "
20522
"go to the next step."
20523
msgstr ""
20524
20525
#: serverguide/C/installation.xml:618(para)
20526
msgid ""
20527
"Repeat steps <emphasis>three</emphasis> through <emphasis>seven</emphasis> "
20528
"for the <emphasis>/</emphasis> partition choosing <emphasis>sda2</emphasis> "
20529
"and <emphasis>sdb2</emphasis>."
20530
msgstr ""
20531
20532
#: serverguide/C/installation.xml:626(para)
20533
msgid "Once done select <emphasis>\"Finish\"</emphasis>."
20534
msgstr ""
20535
20536
#: serverguide/C/installation.xml:636(title)
20537
msgid "Formatting"
20538
msgstr ""
20539
20540
#: serverguide/C/installation.xml:638(para)
20541
msgid ""
20542
"There should now be a list of hard drives and RAID devices. The next step is "
20543
"to format and set the mount point for the RAID devices. Treat the RAID "
20544
"device as a local hard drive, format and mount accordingly."
20545
msgstr ""
20546
20547
#: serverguide/C/installation.xml:646(para)
20548
msgid ""
20549
"Select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20550
"#0\"</emphasis> partition."
20551
msgstr ""
20552
20553
#: serverguide/C/installation.xml:653(para)
20554
msgid ""
20555
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"swap "
20556
"area\"</emphasis>, then <emphasis>\"Done setting up partition\"</emphasis>."
20557
msgstr ""
20558
20559
#: serverguide/C/installation.xml:661(para)
20560
msgid ""
20561
"Next, select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
20562
"#1\"</emphasis> partition."
20563
msgstr ""
20564
20565
#: serverguide/C/installation.xml:668(para)
20566
msgid ""
20567
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"Ext4 "
20568
"journaling file system\"</emphasis>."
20569
msgstr ""
20570
20571
#: serverguide/C/installation.xml:675(para)
20572
msgid ""
20573
"Then select the <emphasis>\"Mount point\"</emphasis> and choose "
20574
"<emphasis>\"/ - the root file system\"</emphasis>. Change any of the other "
20575
"options as appropriate, then select <emphasis>\"Done setting up "
20576
"partition\"</emphasis>."
20577
msgstr ""
20578
20579
#: serverguide/C/installation.xml:683(para)
20580
msgid ""
20581
"Finally, select <emphasis>\"Finish partitioning and write changes to "
20582
"disk\"</emphasis>."
20583
msgstr ""
20584
20585
#: serverguide/C/installation.xml:690(para)
20586
msgid ""
20587
"If you choose to place the root partition on a RAID array, the installer "
20588
"will then ask if you would like to boot in a <emphasis>degraded</emphasis> "
20589
"state. See <xref linkend=\"raid-degraded\"/> for further details."
20590
msgstr ""
20591
20592
#: serverguide/C/installation.xml:695(para)
20593
msgid "The installation process will then continue normally."
20594
msgstr ""
20595
20596
#: serverguide/C/installation.xml:701(title)
20597
msgid "Degraded RAID"
20598
msgstr ""
20599
20600
#: serverguide/C/installation.xml:703(para)
20601
msgid ""
20602
"At some point in the life of the computer a disk failure event may occur. "
20603
"When this happens, using Software RAID, the operating system will place the "
20604
"array into what is known as a <emphasis>degraded</emphasis> state."
20605
msgstr ""
20606
20607
#: serverguide/C/installation.xml:708(para)
20608
msgid ""
20609
"If the array has become degraded, due to the chance of data corruption, by "
20610
"default Ubuntu Server Edition will boot to <emphasis>initramfs</emphasis> "
20611
"after thirty seconds. Once the initramfs has booted there is a fifteen "
20612
"second prompt giving you the option to go ahead and boot the system, or "
20613
"attempt manual recover. Booting to the initramfs prompt may or may not be "
20614
"the desired behavior, especially if the machine is in a remote location. "
20615
"Booting to a degraded array can be configured several ways:"
20616
msgstr ""
20617
20618
#: serverguide/C/installation.xml:719(para)
20619
msgid ""
20620
"The <application>dpkg-reconfigure</application> utility can be used to "
20621
"configure the default behavior, and during the process you will be queried "
20622
"about additional settings related to the array. Such as monitoring, email "
20623
"alerts, etc. To reconfigure <application>mdadm</application> enter the "
20624
"following:"
20625
msgstr ""
20626
20627
#: serverguide/C/installation.xml:726(command)
20628
msgid "sudo dpkg-reconfigure mdadm"
20629
msgstr ""
20630
20631
#: serverguide/C/installation.xml:732(para)
20632
msgid ""
20633
"The <command>dpkg-reconfigure mdadm</command> process will change the "
20634
"<filename>/etc/initramfs-tools/conf.d/mdadm</filename> configuration file. "
20635
"The file has the advantage of being able to pre-configure the system's "
20636
"behavior, and can also be manually edited:"
20637
msgstr ""
20638
20639
#: serverguide/C/installation.xml:738(programlisting)
20640
#, no-wrap
20641
msgid ""
20642
"\n"
20643
"BOOT_DEGRADED=true\n"
20644
msgstr ""
20645
20646
#: serverguide/C/installation.xml:743(para)
20647
msgid "The configuration file can be overridden by using a Kernel argument."
20648
msgstr ""
20649
20650
#: serverguide/C/installation.xml:751(para)
20651
msgid ""
20652
"Using a Kernel argument will allow the system to boot to a degraded array as "
20653
"well:"
20654
msgstr ""
20655
20656
#: serverguide/C/installation.xml:757(para)
20657
msgid ""
20658
"When the server is booting press <keycap>Shift</keycap> to open the "
20659
"<application>Grub</application> menu."
20660
msgstr ""
20661
20662
#: serverguide/C/installation.xml:762(para)
20663
msgid "Press <keycap>e</keycap> to edit your kernel command options."
20664
msgstr ""
20665
20666
#: serverguide/C/installation.xml:767(para)
20667
msgid "Press the <keycap>down</keycap> arrow to highlight the kernel line."
20668
msgstr ""
20669
20670
#: serverguide/C/installation.xml:772(para)
20671
msgid ""
20672
"Add <emphasis>\"bootdegraded=true\"</emphasis> (without the quotes) to the "
20673
"end of the line."
20674
msgstr ""
20675
20676
#: serverguide/C/installation.xml:777(para)
20677
msgid ""
20678
"Press <keycombo><keycap>Ctrl</keycap><keycap>x</keycap></keycombo> to boot "
20679
"the system."
20680
msgstr ""
20681
20682
#: serverguide/C/installation.xml:786(para)
20683
msgid ""
20684
"Once the system has booted you can either repair the array see <xref "
20685
"linkend=\"raid-maintenance\"/> for details, or copy important data to "
20686
"another machine due to major hardware failure."
20687
msgstr ""
20688
20689
#: serverguide/C/installation.xml:793(title)
20690
msgid "RAID Maintenance"
20691
msgstr ""
20692
20693
#: serverguide/C/installation.xml:795(para)
20694
msgid ""
20695
"The <application>mdadm</application> utility can be used to view the status "
20696
"of an array, add disks to an array, remove disks, etc:"
20697
msgstr ""
20698
20699
#: serverguide/C/installation.xml:802(para)
20700
msgid "To view the status of an array, from a terminal prompt enter:"
20701
msgstr ""
20702
20703
#: serverguide/C/installation.xml:806(command)
20704
msgid "sudo mdadm -D /dev/md0"
20705
msgstr ""
20706
20707
#: serverguide/C/installation.xml:809(para)
20708
msgid ""
20709
"The <emphasis>-D</emphasis> tells <application>mdadm</application> to "
20710
"display <emphasis>detailed</emphasis> information about the "
20711
"<filename>/dev/md0</filename> device. Replace <filename>/dev/md0</filename> "
20712
"with the appropriate RAID device."
20713
msgstr ""
20714
20715
#: serverguide/C/installation.xml:815(para)
20716
msgid "To view the status of a disk in an array:"
20717
msgstr ""
20718
20719
#: serverguide/C/installation.xml:819(command)
20720
msgid "sudo mdadm -E /dev/sda1"
20721
msgstr ""
20722
20723
#: serverguide/C/installation.xml:821(para)
20724
msgid ""
20725
"The output if very similar to the <command>mdadm -D</command> command, "
20726
"adjust <filename>/dev/sda1</filename> for each disk."
20727
msgstr ""
20728
20729
#: serverguide/C/installation.xml:826(para)
20730
msgid "If a disk fails and needs to be removed from an array enter:"
20731
msgstr ""
20732
20733
#: serverguide/C/installation.xml:830(command)
20734
msgid "sudo mdadm --remove /dev/md0 /dev/sda1"
20735
msgstr ""
20736
20737
#: serverguide/C/installation.xml:832(para)
20738
msgid ""
20739
"Change <filename>/dev/md0</filename> and <filename>/dev/sda1</filename> to "
20740
"the appropriate RAID device and disk."
20741
msgstr ""
20742
20743
#: serverguide/C/installation.xml:837(para)
20744
msgid "Similarly, to add a new disk:"
20745
msgstr ""
20746
20747
#: serverguide/C/installation.xml:841(command)
20748
msgid "sudo mdadm --add /dev/md0 /dev/sda1"
20749
msgstr ""
20750
20751
#: serverguide/C/installation.xml:846(para)
20752
msgid ""
20753
"Sometimes a disk can change to a <emphasis>faulty</emphasis> state even "
20754
"though there is nothing physically wrong with the drive. It is usually "
20755
"worthwhile to remove the drive from the array then re-add it. This will "
20756
"cause the drive to re-sync with the array. If the drive will not sync with "
20757
"the array, it is a good indication of hardware failure."
20758
msgstr ""
20759
20760
#: serverguide/C/installation.xml:852(para)
20761
msgid ""
20762
"The <filename>/proc/mdstat</filename> file also contains useful information "
20763
"about the system's RAID devices:"
20764
msgstr ""
20765
20766
#: serverguide/C/installation.xml:857(command)
20767
msgid "cat /proc/mdstat"
20768
msgstr ""
20769
20770
#: serverguide/C/installation.xml:858(computeroutput)
20771
#, no-wrap
20772
msgid ""
20773
"Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] "
20774
"[raid10] \n"
20775
"md0 : active raid1 sda1[0] sdb1[1]\n"
20776
" 10016384 blocks [2/2] [UU]\n"
20777
" \n"
20778
"unused devices: <none>"
20779
msgstr ""
20780
20781
#: serverguide/C/installation.xml:865(para)
20782
msgid ""
20783
"The following command is great for watching the status of a syncing drive:"
20784
msgstr ""
20785
20786
#: serverguide/C/installation.xml:870(command)
20787
msgid "watch -n1 cat /proc/mdstat"
20788
msgstr ""
20789
20790
#: serverguide/C/installation.xml:873(para)
20791
msgid ""
20792
"Press <emphasis>Ctrl+c</emphasis> to stop the "
20793
"<application>watch</application> command."
20794
msgstr ""
20795
20796
#: serverguide/C/installation.xml:877(para)
20797
msgid ""
20798
"If you do need to replace a faulty drive, after the drive has been replaced "
20799
"and synced, <application>grub</application> will need to be installed. To "
20800
"install <application>grub</application> on the new drive, enter the "
20801
"following:"
20802
msgstr ""
20803
20804
#: serverguide/C/installation.xml:883(command)
20805
msgid "sudo grub-install /dev/md0"
20806
msgstr ""
20807
20808
#: serverguide/C/installation.xml:886(para)
20809
msgid ""
20810
"Replace <filename>/dev/md0</filename> with the appropriate array device name."
20811
msgstr ""
20812
20813
#: serverguide/C/installation.xml:894(para)
20814
msgid ""
20815
"The topic of RAID arrays is a complex one due to the plethora of ways RAID "
20816
"can be configured. Please see the following links for more information:"
20817
msgstr ""
20818
20819
#: serverguide/C/installation.xml:901(para)
20820
msgid ""
20821
"<ulink url=\"https://help.ubuntu.com/community/Installation#raid\">Ubuntu "
20822
"Wiki Articles on RAID</ulink>."
20823
msgstr ""
20824
20825
#: serverguide/C/installation.xml:907(ulink)
20826
msgid "Software RAID HOWTO"
20827
msgstr ""
20828
20829
#: serverguide/C/installation.xml:912(ulink)
20830
msgid "Managing RAID on Linux"
20831
msgstr ""
20832
20833
#: serverguide/C/installation.xml:919(title)
20834
msgid "Logical Volume Manager (LVM)"
20835
msgstr ""
20836
20837
#: serverguide/C/installation.xml:921(para)
20838
msgid ""
20839
"Logical Volume Manger, or <emphasis>LVM</emphasis>, allows administrators to "
20840
"create <emphasis>logical</emphasis> volumes out of one or multiple physical "
20841
"hard disks. LVM volumes can be created on both software RAID partitions and "
20842
"standard partitions residing on a single disk. Volumes can also be extended, "
20843
"giving greater flexibility to systems as requirements change."
20844
msgstr ""
20845
20846
#: serverguide/C/installation.xml:930(para)
20847
msgid ""
20848
"A side effect of LVM's power and flexibility is a greater degree of "
20849
"complication. Before diving into the LVM installation process, it is best to "
20850
"get familiar with some terms."
20851
msgstr ""
20852
20853
#: serverguide/C/installation.xml:937(para)
20854
msgid ""
20855
"<emphasis>Volume Group (VG):</emphasis> contains one or several Logical "
20856
"Volumes (LV)."
20857
msgstr ""
20858
20859
#: serverguide/C/installation.xml:942(para)
20860
msgid ""
20861
"<emphasis>Logical Volume (LV):</emphasis> is similar to a partition in a non-"
20862
"LVM system. Multiple Physical Volumes (PV) can make up one LV, on top of "
20863
"which resides the actual EXT3, XFS, JFS, etc filesystem."
20864
msgstr ""
20865
20866
#: serverguide/C/installation.xml:948(para)
20867
msgid ""
20868
"<emphasis>Physical Volume (PV):</emphasis> physical hard disk or software "
20869
"RAID partition. The Volume Group can be extended by adding more PVs."
20870
msgstr ""
20871
20872
#: serverguide/C/installation.xml:959(para)
20873
msgid ""
20874
"As an example this section covers installing Ubuntu Server Edition with "
20875
"<filename role=\"directory\">/srv</filename> mounted on a LVM volume. During "
20876
"the initial install only one Physical Volume (PV) will be part of the Volume "
20877
"Group (VG). Another PV will be added after install to demonstrate how a VG "
20878
"can be extended."
20879
msgstr ""
20880
20881
#: serverguide/C/installation.xml:965(para)
20882
msgid ""
20883
"There are several installation options for LVM, <emphasis>\"Guided - use the "
20884
"entire disk and setup LVM\"</emphasis> which will also allow you to assign a "
20885
"portion of the available space to LVM, <emphasis>\"Guided - use entire and "
20886
"setup encrypted LVM\"</emphasis>, or <emphasis>Manually</emphasis> setup the "
20887
"partitions and configure LVM. At this time the only way to configure a "
20888
"system with both LVM and standard partitions, during installation, is to use "
20889
"the Manual approach."
20890
msgstr ""
20891
20892
#: serverguide/C/installation.xml:982(para)
20893
msgid ""
20894
"At the <emphasis>\"Partition Disks</emphasis> screen choose "
20895
"<emphasis>\"Manual\"</emphasis>."
20896
msgstr ""
20897
20898
#: serverguide/C/installation.xml:989(para)
20899
msgid ""
20900
"Select the hard disk and on the next screen choose \"yes\" to "
20901
"<emphasis>\"Create a new empty partition table on this device\"</emphasis>."
20902
msgstr ""
20903
20904
#: serverguide/C/installation.xml:996(para)
20905
msgid ""
20906
"Next, create standard <emphasis>/boot</emphasis>, <emphasis>swap</emphasis>, "
20907
"and <emphasis>/</emphasis> partitions with whichever filesystem you prefer."
20908
msgstr ""
20909
20910
#: serverguide/C/installation.xml:1004(para)
20911
msgid ""
20912
"For the LVM <emphasis>/srv</emphasis>, create a new "
20913
"<emphasis>Logical</emphasis> partition. Then change <emphasis>\"Use "
20914
"as\"</emphasis> to <emphasis>\"physical volume for LVM\"</emphasis> then "
20915
"<emphasis>\"Done setting up the partition\"</emphasis>."
20916
msgstr ""
20917
20918
#: serverguide/C/installation.xml:1012(para)
20919
msgid ""
20920
"Now select <emphasis>\"Configure the Logical Volume Manager\"</emphasis> at "
20921
"the top, and choose <emphasis>\"Yes\"</emphasis> to write the changes to "
20922
"disk."
20923
msgstr ""
20924
20925
#: serverguide/C/installation.xml:1020(para)
20926
msgid ""
20927
"For the <emphasis>\"LVM configuration action\"</emphasis> on the next "
20928
"screen, choose <emphasis>\"Create volume group\"</emphasis>. Enter a name "
20929
"for the VG such as <emphasis>vg01</emphasis>, or something more descriptive. "
20930
"After entering a name, select the partition configured for LVM, and choose "
20931
"<emphasis>\"Continue\"</emphasis>."
20932
msgstr ""
20933
20934
#: serverguide/C/installation.xml:1029(para)
20935
msgid ""
20936
"Back at the <emphasis>\"LVM configuration action\"</emphasis> screen, select "
20937
"<emphasis>\"Create logical volume\"</emphasis>. Select the newly created "
20938
"volume group, and enter a name for the new LV, for example "
20939
"<emphasis>srv</emphasis> since that is the intended mount point. Then choose "
20940
"a size, which may be the full partition because it can always be extended "
20941
"later. Choose <emphasis>\"Finish\"</emphasis> and you should be back at the "
20942
"main <emphasis>\"Partition Disks\"</emphasis> screen."
20943
msgstr ""
20944
20945
#: serverguide/C/installation.xml:1039(para)
20946
msgid ""
20947
"Now add a filesystem to the new LVM. Select the partition under "
20948
"<emphasis>\"LVM VG vg01, LV srv\"</emphasis>, or whatever name you have "
20949
"chosen, the choose <emphasis>Use as</emphasis>. Setup a file system as "
20950
"normal selecting <emphasis>/srv</emphasis> as the mount point. Once done, "
20951
"select <emphasis>\"Done setting up the partition\"</emphasis>."
20952
msgstr ""
20953
20954
#: serverguide/C/installation.xml:1048(para)
20955
msgid ""
20956
"Finally, select <emphasis>\"Finish partitioning and write changes to "
20957
"disk\"</emphasis>. Then confirm the changes and continue with the rest of "
20958
"the installation."
20959
msgstr ""
20960
20961
#: serverguide/C/installation.xml:1056(para)
20962
msgid "There are some useful utilities to view information about LVM:"
20963
msgstr ""
20964
20965
#: serverguide/C/installation.xml:1061(para)
20966
msgid ""
20967
"<emphasis>vgdisplay:</emphasis> shows information about Volume Groups."
20968
msgstr ""
20969
20970
#: serverguide/C/installation.xml:1062(para)
20971
msgid ""
20972
"<emphasis>lvdisplay:</emphasis> has information about Logical Volumes."
20973
msgstr ""
20974
20975
#: serverguide/C/installation.xml:1063(para)
20976
msgid ""
20977
"<emphasis>pvdisplay:</emphasis> similarly displays information about "
20978
"Physical Volumes."
20979
msgstr ""
20980
20981
#: serverguide/C/installation.xml:1068(title)
20982
msgid "Extending Volume Groups"
20983
msgstr ""
20984
20985
#: serverguide/C/installation.xml:1070(para)
20986
msgid ""
20987
"Continuing with <emphasis>srv</emphasis> as an LVM volume example, this "
20988
"section covers adding a second hard disk, creating a Physical Volume (PV), "
20989
"adding it to the volume group (VG), extending the logical volume <filename "
20990
"role=\"directory\">srv</filename> and finally extending the filesystem. This "
20991
"example assumes a second hard disk has been added to the system. This hard "
20992
"disk will be named <filename>/dev/sdb</filename> in our example. BEWARE: "
20993
"make sure you don't already have an existing <filename>/dev/sdb</filename> "
20994
"before issuing the commands below. You could lose some data if you issue "
20995
"those commands on a non-empty disk. In our example we will use the entire "
20996
"disk as a physical volume (you could choose to create partitions and use "
20997
"them as different physical volumes)"
20998
msgstr ""
20999
21000
#: serverguide/C/installation.xml:1082(para)
21001
msgid "First, create the physical volume, in a terminal execute:"
21002
msgstr ""
21003
21004
#: serverguide/C/installation.xml:1087(command)
21005
msgid "sudo pvcreate /dev/sdb"
21006
msgstr ""
21007
21008
#: serverguide/C/installation.xml:1093(para)
21009
msgid "Now extend the Volume Group (VG):"
21010
msgstr ""
21011
21012
#: serverguide/C/installation.xml:1098(command)
21013
msgid "sudo vgextend vg01 /dev/sdb"
21014
msgstr ""
21015
21016
#: serverguide/C/installation.xml:1104(para)
21017
msgid ""
21018
"Use <application>vgdisplay</application> to find out the free physical "
21019
"extents - Free PE / size (the size you can allocate). We will assume a free "
21020
"size of 511 PE (equivalent to 2GB with a PE size of 4MB) and we will use the "
21021
"whole free space available. Use your own PE and/or free space."
21022
msgstr ""
21023
21024
#: serverguide/C/installation.xml:1110(para)
21025
msgid ""
21026
"The Logical Volume (LV) can now be extended by different methods, we will "
21027
"only see how to use the PE to extend the LV:"
21028
msgstr ""
21029
21030
#: serverguide/C/installation.xml:1115(command)
21031
msgid "sudo lvextend /dev/vg01/srv -l +511"
21032
msgstr ""
21033
21034
#: serverguide/C/installation.xml:1118(para)
21035
msgid ""
21036
"The <emphasis>-l</emphasis> option allows the LV to be extended using PE. "
21037
"The <emphasis>-L</emphasis> option allows the LV to be extended using Meg, "
21038
"Gig, Tera, etc bytes."
21039
msgstr ""
21040
21041
#: serverguide/C/installation.xml:1126(para)
21042
msgid ""
21043
"Even though you are supposed to be able to <emphasis>expand</emphasis> an "
21044
"ext3 or ext4 filesystem without unmounting it first, it may be a good "
21045
"pratice to unmount it anyway and check the filesystem, so that you don't "
21046
"mess up the day you want to reduce a logical volume (in that case unmounting "
21047
"first is compulsory)."
21048
msgstr ""
21049
21050
#: serverguide/C/installation.xml:1132(para)
21051
msgid ""
21052
"The following commands are for an <emphasis>EXT3</emphasis> or "
21053
"<emphasis>EXT4</emphasis> filesystem. If you are using another filesystem "
21054
"there may be other utilities available."
21055
msgstr ""
21056
21057
#: serverguide/C/installation.xml:1139(command)
21058
msgid "sudo e2fsck -f /dev/vg01/srv"
21059
msgstr ""
21060
21061
#: serverguide/C/installation.xml:1142(para)
21062
msgid ""
21063
"The <emphasis>-f</emphasis> option of <application>e2fsck</application> "
21064
"forces checking even if the system seems clean."
21065
msgstr ""
21066
21067
#: serverguide/C/installation.xml:1149(para)
21068
msgid "Finally, resize the filesystem:"
21069
msgstr ""
21070
21071
#: serverguide/C/installation.xml:1154(command)
21072
msgid "sudo resize2fs /dev/vg01/srv"
21073
msgstr ""
21074
21075
#: serverguide/C/installation.xml:1160(para)
21076
msgid "Now mount the partition and check its size."
21077
msgstr ""
21078
21079
#: serverguide/C/installation.xml:1165(command)
21080
msgid "mount /dev/vg01/srv /srv && df -h /srv"
21081
msgstr ""
21082
21083
#: serverguide/C/installation.xml:1177(para)
21084
msgid ""
21085
"See the <ulink "
21086
"url=\"https://help.ubuntu.com/community/Installation#lvm\">Ubuntu Wiki LVM "
21087
"Articles</ulink>."
21088
msgstr ""
21089
21090
#: serverguide/C/installation.xml:1182(para)
21091
msgid ""
21092
"See the <ulink url=\"http://tldp.org/HOWTO/LVM-HOWTO/index.html\">LVM "
21093
"HOWTO</ulink> for more information."
21094
msgstr ""
21095
21096
#: serverguide/C/installation.xml:1187(para)
21097
msgid ""
21098
"Another good article is <ulink "
21099
"url=\"http://www.linuxdevcenter.com/pub/a/linux/2006/04/27/managing-disk-"
21100
"space-with-lvm.html\">Managing Disk Space with LVM</ulink> on O'Reilly's "
21101
"linuxdevcenter.com site."
21102
msgstr ""
21103
21104
#: serverguide/C/installation.xml:1194(para)
21105
msgid ""
21106
"For more information on <application>fdisk</application> see the <ulink "
21107
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/fdisk.8.html\">fdisk "
21108
"man page</ulink>."
21109
msgstr ""
21110
21111
#: serverguide/C/file-server.xml:13(title)
21112
msgid "File Servers"
21113
msgstr ""
21114
21115
#: serverguide/C/file-server.xml:15(para)
21116
msgid ""
21117
"If you have more than one computer on a single network. At some point you "
21118
"will probably need to share files between them. In this section we cover "
21119
"installing and configuring FTP, NFS, and CUPS."
21120
msgstr ""
21121
21122
#: serverguide/C/file-server.xml:22(title)
21123
msgid "FTP Server"
21124
msgstr ""
21125
21126
#: serverguide/C/file-server.xml:24(para)
21127
msgid ""
21128
"File Transfer Protocol (FTP) is a TCP protocol for uploading and downloading "
21129
"files between computers. FTP works on a client/server model. The server "
21130
"component is called an <emphasis>FTP daemon</emphasis>. It continuously "
21131
"listens for FTP requests from remote clients. When a request is received, it "
21132
"manages the login and sets up the connection. For the duration of the "
21133
"session it executes any of commands sent by the FTP client."
21134
msgstr ""
21135
21136
#: serverguide/C/file-server.xml:33(para)
21137
msgid "Access to an FTP server can be managed in two ways:"
21138
msgstr ""
21139
21140
#: serverguide/C/file-server.xml:37(para)
21141
msgid "Anonymous"
21142
msgstr "Anonim"
21143
21144
#: serverguide/C/file-server.xml:40(para)
21145
msgid "Authenticated"
21146
msgstr ""
21147
21148
#: serverguide/C/file-server.xml:43(para)
21149
msgid ""
21150
"In the Anonymous mode, remote clients can access the FTP server by using the "
21151
"default user account called \"anonymous\" or \"ftp\" and sending an email "
21152
"address as the password. In the Authenticated mode a user must have an "
21153
"account and a password. User access to the FTP server directories and files "
21154
"is dependent on the permissions defined for the account used at login. As a "
21155
"general rule, the FTP daemon will hide the root directory of the FTP server "
21156
"and change it to the FTP Home directory. This hides the rest of the file "
21157
"system from remote sessions."
21158
msgstr ""
21159
21160
#: serverguide/C/file-server.xml:55(title)
21161
msgid "vsftpd - FTP Server Installation"
21162
msgstr ""
21163
21164
#: serverguide/C/file-server.xml:57(para)
21165
msgid ""
21166
"vsftpd is an FTP daemon available in Ubuntu. It is easy to install, set up, "
21167
"and maintain. To install <application>vsftpd</application> you can run the "
21168
"following command:"
21169
msgstr ""
21170
21171
#: serverguide/C/file-server.xml:65(command)
21172
msgid "sudo apt-get install vsftpd"
21173
msgstr ""
21174
21175
#: serverguide/C/file-server.xml:71(title)
21176
msgid "Anonymous FTP Configuration"
21177
msgstr ""
21178
21179
#: serverguide/C/file-server.xml:73(para)
21180
msgid ""
21181
"By default <application>vsftpd</application> is configured to only allow "
21182
"anonymous download. During installation a <emphasis>ftp</emphasis> user is "
21183
"created with a home directory of <filename>/home/ftp</filename>. This is the "
21184
"default FTP directory."
21185
msgstr ""
21186
21187
#: serverguide/C/file-server.xml:80(para)
21188
msgid ""
21189
"If you wish to change this location, to <filename>/srv/ftp</filename> for "
21190
"example, simply create a directory in another location and change the "
21191
"<emphasis>ftp</emphasis> user's home directory:"
21192
msgstr ""
21193
21194
#: serverguide/C/file-server.xml:87(command)
21195
msgid "sudo mkdir /srv/ftp"
21196
msgstr ""
21197
21198
#: serverguide/C/file-server.xml:88(command)
21199
msgid "sudo usermod -d /srv/ftp ftp"
21200
msgstr ""
21201
21202
#: serverguide/C/file-server.xml:91(para)
21203
msgid "After making the change restart <application>vsftpd</application>:"
21204
msgstr ""
21205
21206
#: serverguide/C/file-server.xml:96(command) serverguide/C/file-server.xml:124(command) serverguide/C/file-server.xml:189(command) serverguide/C/file-server.xml:237(command)
21207
msgid "sudo /etc/init.d/vsftpd restart"
21208
msgstr ""
21209
21210
#: serverguide/C/file-server.xml:99(para)
21211
msgid ""
21212
"Finally, copy any files and directories you would like to make available "
21213
"through anonymous FTP to <filename>/srv/ftp</filename>."
21214
msgstr ""
21215
21216
#: serverguide/C/file-server.xml:106(title)
21217
msgid "User Authenticated FTP Configuration"
21218
msgstr ""
21219
21220
#: serverguide/C/file-server.xml:108(para)
21221
msgid ""
21222
"To configure <application>vsftpd</application> to authenticate system users "
21223
"and allow them to upload files edit <filename>/etc/vsftpd.conf</filename>:"
21224
msgstr ""
21225
21226
#: serverguide/C/file-server.xml:114(programlisting)
21227
#, no-wrap
21228
msgid ""
21229
"\n"
21230
"local_enable=YES\n"
21231
"write_enable=YES\n"
21232
msgstr ""
21233
21234
#: serverguide/C/file-server.xml:119(para)
21235
msgid "Now restart <application>vsftpd</application>:"
21236
msgstr ""
21237
21238
#: serverguide/C/file-server.xml:127(para)
21239
msgid ""
21240
"Now when system users login to FTP they will start in their "
21241
"<emphasis>home</emphasis> directories where they can download, upload, "
21242
"create directories, etc."
21243
msgstr ""
21244
21245
#: serverguide/C/file-server.xml:133(para)
21246
msgid ""
21247
"Similarly, by default, the anonymous users are not allowed to upload files "
21248
"to FTP server. To change this setting, you should uncomment the following "
21249
"line, and restart <application>vsftpd</application>:"
21250
msgstr ""
21251
21252
#: serverguide/C/file-server.xml:140(programlisting)
21253
#, no-wrap
21254
msgid ""
21255
"\n"
21256
"anon_upload_enable=YES\n"
21257
msgstr ""
21258
21259
#: serverguide/C/file-server.xml:145(para)
21260
msgid ""
21261
"Enabling anonymous FTP upload can be an extreme security risk. It is best to "
21262
"not enable anonymous upload on servers accessed directly from the Internet."
21263
msgstr ""
21264
21265
#: serverguide/C/file-server.xml:151(para)
21266
msgid ""
21267
"The configuration file consists of many configuration parameters. The "
21268
"information about each parameter is available in the configuration file. "
21269
"Alternatively, you can refer to the man page, <command>man 5 "
21270
"vsftpd.conf</command> for details of each parameter."
21271
msgstr ""
21272
21273
#: serverguide/C/file-server.xml:162(title)
21274
msgid "Securing FTP"
21275
msgstr ""
21276
21277
#: serverguide/C/file-server.xml:164(para)
21278
msgid ""
21279
"There are options in <filename>/etc/vsftpd.conf</filename> to help make "
21280
"<application>vsftpd</application> more secure. For example users can be "
21281
"limited to their home directories by uncommenting:"
21282
msgstr ""
21283
21284
#: serverguide/C/file-server.xml:170(programlisting)
21285
#, no-wrap
21286
msgid ""
21287
"\n"
21288
"chroot_local_user=YES\n"
21289
msgstr ""
21290
21291
#: serverguide/C/file-server.xml:174(para)
21292
msgid ""
21293
"You can also limit a specific list of users to just their home directories:"
21294
msgstr ""
21295
21296
#: serverguide/C/file-server.xml:178(programlisting)
21297
#, no-wrap
21298
msgid ""
21299
"\n"
21300
"chroot_list_enable=YES\n"
21301
"chroot_list_file=/etc/vsftpd.chroot_list\n"
21302
msgstr ""
21303
21304
#: serverguide/C/file-server.xml:183(para)
21305
msgid ""
21306
"After uncommenting the above options, create a "
21307
"<filename>/etc/vsftpd.chroot_list</filename> containing a list of users one "
21308
"per line. Then restart <application>vsftpd</application>:"
21309
msgstr ""
21310
21311
#: serverguide/C/file-server.xml:192(para)
21312
msgid ""
21313
"Also, the <filename>/etc/ftpusers</filename> file is a list of users that "
21314
"are <emphasis>disallowed</emphasis> FTP access. The default list includes "
21315
"root, daemon, nobody, etc. To disable FTP access for additional users simply "
21316
"add them to the list."
21317
msgstr ""
21318
21319
#: serverguide/C/file-server.xml:199(para)
21320
msgid ""
21321
"FTP can also be encrypted using <emphasis>FTPS</emphasis>. Different from "
21322
"<emphasis>SFTP</emphasis>, <emphasis>FTPS</emphasis> is FTP over Secure "
21323
"Socket Layer (SSL). <emphasis>SFTP</emphasis> is a FTP like session over an "
21324
"encrypted <emphasis>SSH</emphasis> connection. A major difference is that "
21325
"users of SFTP need to have a <emphasis>shell</emphasis> account on the "
21326
"system, instead of a <emphasis>nologin</emphasis> shell. Providing all users "
21327
"with a shell may not be ideal for some environments, such as a shared web "
21328
"host."
21329
msgstr ""
21330
21331
#: serverguide/C/file-server.xml:208(para)
21332
msgid ""
21333
"To configure <emphasis>FTPS</emphasis>, edit "
21334
"<filename>/etc/vsftpd.conf</filename> and at the bottom add:"
21335
msgstr ""
21336
21337
#: serverguide/C/file-server.xml:212(programlisting)
21338
#, no-wrap
21339
msgid ""
21340
"\n"
21341
"ssl_enable=Yes\n"
21342
msgstr ""
21343
21344
#: serverguide/C/file-server.xml:216(para)
21345
msgid "Also, notice the certificate and key related options:"
21346
msgstr ""
21347
21348
#: serverguide/C/file-server.xml:220(programlisting)
21349
#, no-wrap
21350
msgid ""
21351
"\n"
21352
"rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem\n"
21353
"rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key\n"
21354
msgstr ""
21355
21356
#: serverguide/C/file-server.xml:225(para)
21357
msgid ""
21358
"By default these options are set the certificate and key provided by the "
21359
"<application>ssl-cert</application> package. In a production environment "
21360
"these should be replaced with a certificate and key generated for the "
21361
"specific host. For more information on certificates see <xref "
21362
"linkend=\"certificates-and-security\"/>."
21363
msgstr ""
21364
21365
#: serverguide/C/file-server.xml:231(para)
21366
msgid ""
21367
"Now restart <application>vsftpd</application>, and non-anonymous users will "
21368
"be forced to use <emphasis>FTPS</emphasis>:"
21369
msgstr ""
21370
21371
#: serverguide/C/file-server.xml:240(para)
21372
msgid ""
21373
"To allow users with a shell of <filename>/usr/sbin/nologin</filename> access "
21374
"to FTP, but have no shell access, edit <filename>/etc/shells</filename> "
21375
"adding the <emphasis>nologin</emphasis> shell:"
21376
msgstr ""
21377
21378
#: serverguide/C/file-server.xml:245(programlisting)
21379
#, no-wrap
21380
msgid ""
21381
"\n"
21382
"# /etc/shells: valid login shells\n"
21383
"/bin/csh\n"
21384
"/bin/sh\n"
21385
"/usr/bin/es\n"
21386
"/usr/bin/ksh\n"
21387
"/bin/ksh\n"
21388
"/usr/bin/rc\n"
21389
"/usr/bin/tcsh\n"
21390
"/bin/tcsh\n"
21391
"/usr/bin/esh\n"
21392
"/bin/dash\n"
21393
"/bin/bash\n"
21394
"/bin/rbash\n"
21395
"/usr/bin/screen\n"
21396
"/usr/sbin/nologin\n"
21397
msgstr ""
21398
21399
#: serverguide/C/file-server.xml:263(para)
21400
msgid ""
21401
"This is necessary because, by default <application>vsftpd</application> uses "
21402
"PAM for authentication, and the <filename>/etc/pam.d/vsftpd</filename> "
21403
"configuration file contains:"
21404
msgstr ""
21405
21406
#: serverguide/C/file-server.xml:268(programlisting)
21407
#, no-wrap
21408
msgid ""
21409
"\n"
21410
"auth required pam_shells.so\n"
21411
msgstr ""
21412
21413
#: serverguide/C/file-server.xml:272(para)
21414
msgid ""
21415
"The <emphasis>shells</emphasis> PAM module restricts access to shells listed "
21416
"in the <filename>/etc/shells</filename> file."
21417
msgstr ""
21418
21419
#: serverguide/C/file-server.xml:277(para)
21420
msgid ""
21421
"Most popular FTP clients can be configured connect using FTPS. The "
21422
"<application>lftp</application> command line FTP client has the ability to "
21423
"use FTPS as well."
21424
msgstr ""
21425
21426
#: serverguide/C/file-server.xml:288(para)
21427
msgid ""
21428
"See the <ulink url=\"http://vsftpd.beasts.org/vsftpd_conf.html\">vsftpd "
21429
"website</ulink> for more information."
21430
msgstr ""
21431
21432
#: serverguide/C/file-server.xml:293(para)
21433
msgid ""
21434
"For detailed <filename>/etc/vsftpd.conf</filename> options see the <ulink "
21435
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/vsftpd.conf.5.html\">"
21436
"vsftpd.conf man page</ulink>."
21437
msgstr ""
21438
21439
#: serverguide/C/file-server.xml:299(para)
21440
msgid ""
21441
"The CodeGurus article <ulink "
21442
"url=\"http://www.codeguru.com/csharp/.net/net_general/internet/article.php/c1"
21443
"4329\"> FTPS vs. SFTP: What to Choose</ulink> has useful information "
21444
"contrasting FTPS and SFTP."
21445
msgstr ""
21446
21447
#: serverguide/C/file-server.xml:305(para)
21448
msgid ""
21449
"Also, for more information see the <ulink "
21450
"url=\"https://help.ubuntu.com/community/vsftpd\">Ubuntu Wiki vsftpd</ulink> "
21451
"page."
21452
msgstr ""
21453
21454
#: serverguide/C/file-server.xml:315(title)
21455
msgid "Network File System (NFS)"
21456
msgstr ""
21457
21458
#: serverguide/C/file-server.xml:316(para)
21459
msgid ""
21460
"NFS allows a system to share directories and files with others over a "
21461
"network. By using NFS, users and programs can access files on remote systems "
21462
"almost as if they were local files."
21463
msgstr ""
21464
21465
#: serverguide/C/file-server.xml:322(para)
21466
msgid "Some of the most notable benefits that NFS can provide are:"
21467
msgstr ""
21468
21469
#: serverguide/C/file-server.xml:328(para)
21470
msgid ""
21471
"Local workstations use less disk space because commonly used data can be "
21472
"stored on a single machine and still remain accessible to others over the "
21473
"network."
21474
msgstr ""
21475
21476
#: serverguide/C/file-server.xml:333(para)
21477
msgid ""
21478
"There is no need for users to have separate home directories on every "
21479
"network machine. Home directories could be set up on the NFS server and made "
21480
"available throughout the network."
21481
msgstr ""
21482
21483
#: serverguide/C/file-server.xml:339(para)
21484
msgid ""
21485
"Storage devices such as floppy disks, CDROM drives, and USB Thumb drives can "
21486
"be used by other machines on the network. This may reduce the number of "
21487
"removable media drives throughout the network."
21488
msgstr ""
21489
21490
#: serverguide/C/file-server.xml:349(para)
21491
msgid ""
21492
"At a terminal prompt enter the following command to install the NFS Server:"
21493
msgstr ""
21494
21495
#: serverguide/C/file-server.xml:355(command)
21496
msgid "sudo apt-get install nfs-kernel-server"
21497
msgstr ""
21498
21499
#: serverguide/C/file-server.xml:361(para)
21500
msgid ""
21501
"You can configure the directories to be exported by adding them to the "
21502
"<filename>/etc/exports</filename> file. For example:"
21503
msgstr ""
21504
21505
#: serverguide/C/file-server.xml:366(screen)
21506
#, no-wrap
21507
msgid ""
21508
"\n"
21509
"/ubuntu *(ro,sync,no_root_squash)\n"
21510
"/home *(rw,sync,no_root_squash)\n"
21511
msgstr ""
21512
21513
#: serverguide/C/file-server.xml:372(para)
21514
msgid ""
21515
"You can replace * with one of the hostname formats. Make the hostname "
21516
"declaration as specific as possible so unwanted systems cannot access the "
21517
"NFS mount."
21518
msgstr ""
21519
21520
#: serverguide/C/file-server.xml:378(para)
21521
msgid ""
21522
"To start the NFS server, you can run the following command at a terminal "
21523
"prompt:"
21524
msgstr ""
21525
21526
#: serverguide/C/file-server.xml:383(command)
21527
msgid "sudo /etc/init.d/nfs-kernel-server start"
21528
msgstr ""
21529
21530
#: serverguide/C/file-server.xml:388(title)
21531
msgid "NFS Client Configuration"
21532
msgstr ""
21533
21534
#: serverguide/C/file-server.xml:389(para)
21535
msgid ""
21536
"Use the <application>mount</application> command to mount a shared NFS "
21537
"directory from another machine, by typing a command line similar to the "
21538
"following at a terminal prompt:"
21539
msgstr ""
21540
21541
#: serverguide/C/file-server.xml:395(command)
21542
msgid "sudo mount example.hostname.com:/ubuntu /local/ubuntu"
21543
msgstr ""
21544
21545
#: serverguide/C/file-server.xml:399(para)
21546
msgid ""
21547
"The mount point directory <filename>/local/ubuntu</filename> must exist. "
21548
"There should be no files or subdirectories in the "
21549
"<filename>/local/ubuntu</filename> directory."
21550
msgstr ""
21551
21552
#: serverguide/C/file-server.xml:406(para)
21553
msgid ""
21554
"An alternate way to mount an NFS share from another machine is to add a line "
21555
"to the <filename>/etc/fstab</filename> file. The line must state the "
21556
"hostname of the NFS server, the directory on the server being exported, and "
21557
"the directory on the local machine where the NFS share is to be mounted."
21558
msgstr ""
21559
21560
#: serverguide/C/file-server.xml:414(para)
21561
msgid ""
21562
"The general syntax for the line in <filename>/etc/fstab</filename> file is "
21563
"as follows:"
21564
msgstr ""
21565
21566
#: serverguide/C/file-server.xml:420(programlisting)
21567
#, no-wrap
21568
msgid ""
21569
"\n"
21570
"example.hostname.com:/ubuntu /local/ubuntu nfs "
21571
"rsize=8192,wsize=8192,timeo=14,intr\n"
21572
msgstr ""
21573
21574
#: serverguide/C/file-server.xml:424(para)
21575
msgid ""
21576
"If you have trouble mounting an NFS share, make sure the <application>nfs-"
21577
"common</application> package is installed on your client. To install "
21578
"<application>nfs-common</application> enter the following command at the "
21579
"terminal prompt: <screen>\n"
21580
"<command>sudo apt-get install nfs-common</command>\n"
21581
"</screen>"
21582
msgstr ""
21583
21584
#: serverguide/C/file-server.xml:437(ulink)
21585
msgid "Linux NFS faq"
21586
msgstr ""
21587
21588
#: serverguide/C/file-server.xml:439(ulink)
21589
msgid "Ubuntu Wiki NFS Howto"
21590
msgstr ""
21591
21592
#: serverguide/C/file-server.xml:445(title)
21593
msgid "CUPS - Print Server"
21594
msgstr ""
21595
21596
#: serverguide/C/file-server.xml:446(para)
21597
msgid ""
21598
"The primary mechanism for Ubuntu printing and print services is the "
21599
"<emphasis role=\"bold\">Common UNIX Printing System</emphasis> (CUPS). This "
21600
"printing system is a freely available, portable printing layer which has "
21601
"become the new standard for printing in most Linux distributions."
21602
msgstr ""
21603
21604
#: serverguide/C/file-server.xml:453(para)
21605
msgid ""
21606
"CUPS manages print jobs and queues and provides network printing using the "
21607
"standard Internet Printing Protocol (IPP), while offering support for a very "
21608
"large range of printers, from dot-matrix to laser and many in between. CUPS "
21609
"also supports PostScript Printer Description (PPD) and auto-detection of "
21610
"network printers, and features a simple web-based configuration and "
21611
"administration tool."
21612
msgstr ""
21613
21614
#: serverguide/C/file-server.xml:463(para)
21615
msgid ""
21616
"To install CUPS on your Ubuntu computer, simply use "
21617
"<application>sudo</application> with the <application>apt-get</application> "
21618
"command and give the packages to install as the first parameter. A complete "
21619
"CUPS install has many package dependencies, but they may all be specified on "
21620
"the same command line. Enter the following at a terminal prompt to install "
21621
"CUPS:"
21622
msgstr ""
21623
21624
#: serverguide/C/file-server.xml:468(command)
21625
msgid "sudo apt-get install cups"
21626
msgstr ""
21627
21628
#: serverguide/C/file-server.xml:471(para)
21629
msgid ""
21630
"Upon authenticating with your user password, the packages should be "
21631
"downloaded and installed without error. Upon the conclusion of installation, "
21632
"the CUPS server will be started automatically."
21633
msgstr ""
21634
21635
#: serverguide/C/file-server.xml:476(para)
21636
msgid ""
21637
"For troubleshooting purposes, you can access CUPS server errors via the "
21638
"error log file at: <filename>/var/log/cups/error_log</filename>. If the "
21639
"error log does not show enough information to troubleshoot any problems you "
21640
"encounter, the verbosity of the CUPS log can be increased by changing the "
21641
"<emphasis role=\"bold\">LogLevel</emphasis> directive in the configuration "
21642
"file (discussed below) to \"debug\" or even \"debug2\", which logs "
21643
"everything, from the default of \"info\". If you make this change, remember "
21644
"to change it back once you've solved your problem, to prevent the log file "
21645
"from becoming overly large."
21646
msgstr ""
21647
21648
#: serverguide/C/file-server.xml:489(para)
21649
msgid ""
21650
"The Common UNIX Printing System server's behavior is configured through the "
21651
"directives contained in the file <filename>/etc/cups/cupsd.conf</filename>. "
21652
"The CUPS configuration file follows the same syntax as the primary "
21653
"configuration file for the Apache HTTP server, so users familiar with "
21654
"editing Apache's configuration file should feel at ease when editing the "
21655
"CUPS configuration file. Some examples of settings you may wish to change "
21656
"initially will be presented here."
21657
msgstr ""
21658
21659
#: serverguide/C/file-server.xml:499(para)
21660
msgid ""
21661
"Prior to editing the configuration file, you should make a copy of the "
21662
"original file and protect it from writing, so you will have the original "
21663
"settings as a reference, and to reuse as necessary."
21664
msgstr ""
21665
21666
#: serverguide/C/file-server.xml:503(para)
21667
msgid ""
21668
"Copy the <filename>/etc/cups/cupsd.conf</filename> file and protect it from "
21669
"writing with the following commands, issued at a terminal prompt:"
21670
msgstr ""
21671
21672
#: serverguide/C/file-server.xml:509(command)
21673
msgid "sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.original"
21674
msgstr ""
21675
21676
#: serverguide/C/file-server.xml:510(command)
21677
msgid "sudo chmod a-w /etc/cups/cupsd.conf.original"
21678
msgstr ""
21679
21680
#: serverguide/C/file-server.xml:515(para)
21681
msgid ""
21682
"<emphasis role=\"bold\">ServerAdmin</emphasis>: To configure the email "
21683
"address of the designated administrator of the CUPS server, simply edit the "
21684
"<filename>/etc/cups/cupsd.conf</filename> configuration file with your "
21685
"preferred text editor, and add or modify the <emphasis "
21686
"role=\"italics\">ServerAdmin</emphasis> line accordingly. For example, if "
21687
"you are the Administrator for the CUPS server, and your e-mail address is "
21688
"'bjoy@somebigco.com', then you would modify the ServerAdmin line to appear "
21689
"as such:"
21690
msgstr ""
21691
21692
#: serverguide/C/file-server.xml:526(screen)
21693
#, no-wrap
21694
msgid ""
21695
"\n"
21696
"ServerAdmin bjoy@somebigco.com\n"
21697
msgstr ""
21698
21699
#: serverguide/C/file-server.xml:532(para)
21700
msgid ""
21701
"<emphasis role=\"bold\">Listen</emphasis>: By default on Ubuntu, the CUPS "
21702
"server installation listens only on the loopback interface at IP address "
21703
"<emphasis>127.0.0.1</emphasis>. In order to instruct the CUPS server to "
21704
"listen on an actual network adapter's IP address, you must specify either a "
21705
"hostname, the IP address, or optionally, an IP address/port pairing via the "
21706
"addition of a Listen directive. For example, if your CUPS server resides on "
21707
"a local network at the IP address <emphasis "
21708
"role=\"italics\">192.168.10.250</emphasis> and you'd like to make it "
21709
"accessible to the other systems on this subnetwork, you would edit the "
21710
"<filename>/etc/cups/cupsd.conf</filename> and add a Listen directive, as "
21711
"such:"
21712
msgstr ""
21713
21714
#: serverguide/C/file-server.xml:546(screen)
21715
#, no-wrap
21716
msgid ""
21717
"\n"
21718
"Listen 127.0.0.1:631 # existing loopback Listen\n"
21719
"Listen /var/run/cups/cups.sock # existing socket Listen\n"
21720
"Listen 192.168.10.250:631 # Listen on the LAN interface, Port 631 "
21721
"(IPP)\n"
21722
msgstr ""
21723
21724
#: serverguide/C/file-server.xml:552(para)
21725
msgid ""
21726
"In the example above, you may comment out or remove the reference to the "
21727
"Loopback address (127.0.0.1) if you do not wish <application>cupsd "
21728
"</application> to listen on that interface, but would rather have it only "
21729
"listen on the Ethernet interfaces of the Local Area Network (LAN). To enable "
21730
"listening for all network interfaces for which a certain hostname is bound, "
21731
"including the Loopback, you could create a Listen entry for the hostname "
21732
"<emphasis>socrates</emphasis> as such:"
21733
msgstr ""
21734
21735
#: serverguide/C/file-server.xml:562(screen)
21736
#, no-wrap
21737
msgid ""
21738
"\n"
21739
"Listen socrates:631 # Listen on all interfaces for the hostname 'socrates'\n"
21740
msgstr ""
21741
21742
#: serverguide/C/file-server.xml:566(para)
21743
msgid ""
21744
"or by omitting the Listen directive and using <emphasis>Port</emphasis> "
21745
"instead, as in:"
21746
msgstr ""
21747
21748
#: serverguide/C/file-server.xml:568(screen)
21749
#, no-wrap
21750
msgid ""
21751
"\n"
21752
"Port 631 # Listen on port 631 on all interfaces\n"
21753
msgstr ""
21754
21755
#: serverguide/C/file-server.xml:575(para)
21756
msgid ""
21757
"For more examples of configuration directives in the CUPS server "
21758
"configuration file, view the associated system manual page by entering the "
21759
"following command at a terminal prompt:"
21760
msgstr ""
21761
21762
#: serverguide/C/file-server.xml:582(command)
21763
msgid "man cupsd.conf"
21764
msgstr ""
21765
21766
#: serverguide/C/file-server.xml:586(para)
21767
msgid ""
21768
"Whenever you make changes to the <filename>/etc/cups/cupsd.conf</filename> "
21769
"configuration file, you'll need to restart the CUPS server by typing the "
21770
"following command at a terminal prompt:"
21771
msgstr ""
21772
21773
#: serverguide/C/file-server.xml:592(command)
21774
msgid "sudo /etc/init.d/cups restart"
21775
msgstr ""
21776
21777
#: serverguide/C/file-server.xml:598(title)
21778
msgid "Web Interface"
21779
msgstr ""
21780
21781
#: serverguide/C/file-server.xml:600(para)
21782
msgid ""
21783
"CUPS can be configured and monitored using a web interface, which by default "
21784
"is available at <ulink "
21785
"url=\"http://localhost:631/admin\">http://localhost:631/admin</ulink>. The "
21786
"web interface can be used to perform all printer management tasks."
21787
msgstr ""
21788
21789
#: serverguide/C/file-server.xml:604(para)
21790
msgid ""
21791
"In order to perform administrative tasks via the web interface, you must "
21792
"either have the root account enabled on your server, or authenticate as a "
21793
"user in the <emphasis role=\"italic\">lpadmin</emphasis> group. For security "
21794
"reasons, CUPS won't authenticate a user that doesn't have a password."
21795
msgstr ""
21796
21797
#: serverguide/C/file-server.xml:607(para)
21798
msgid ""
21799
"To add a user to the <emphasis role=\"italic\">lpadmin</emphasis> group, run "
21800
"at the terminal prompt: <screen>\n"
21801
"<command>sudo usermod -aG lpadmin username</command>\n"
21802
"</screen>"
21803
msgstr ""
21804
21805
#: serverguide/C/file-server.xml:613(para)
21806
msgid ""
21807
"Further documentation is available in the <emphasis "
21808
"role=\"italic\">Documentation/Help</emphasis> tab of the web interface."
21809
msgstr ""
21810
21811
#: serverguide/C/file-server.xml:621(ulink)
21812
msgid "CUPS Website"
21813
msgstr ""
21814
21815
#: serverguide/C/file-server.xml:624(ulink)
21816
msgid "Ubuntu Wiki CUPS page"
21817
msgstr ""
21818
21819
#: serverguide/C/dns.xml:13(title)
21820
msgid "Domain Name Service (DNS)"
21821
msgstr ""
21822
21823
#: serverguide/C/dns.xml:14(para)
21824
msgid ""
21825
"Domain Name Service (DNS) is an Internet service that maps IP addresses and "
21826
"fully qualified domain names (FQDN) to one another. In this way, DNS "
21827
"alleviates the need to remember IP addresses. Computers that run DNS are "
21828
"called <emphasis>name servers</emphasis>. Ubuntu ships with "
21829
"<application>BIND</application> (Berkley Internet Naming Daemon), the most "
21830
"common program used for maintaining a name server on Linux."
21831
msgstr ""
21832
21833
#: serverguide/C/dns.xml:24(para)
21834
msgid ""
21835
"At a terminal prompt, enter the following command to install "
21836
"<application>dns</application>:"
21837
msgstr ""
21838
21839
#: serverguide/C/dns.xml:28(command)
21840
msgid "sudo apt-get install bind9"
21841
msgstr ""
21842
21843
#: serverguide/C/dns.xml:30(para)
21844
msgid ""
21845
"A very useful package for testing and troubleshooting DNS issues is the "
21846
"dnsutils package. To install <application>dnsutils</application> enter the "
21847
"following:"
21848
msgstr ""
21849
21850
#: serverguide/C/dns.xml:35(command)
21851
msgid "sudo apt-get install dnsutils"
21852
msgstr ""
21853
21854
#: serverguide/C/dns.xml:40(para)
21855
msgid ""
21856
"There a many ways to configure <application>BIND9</application>. Some of the "
21857
"most common configurations are a caching nameserver, primary master, and a "
21858
"as a secondary master."
21859
msgstr ""
21860
21861
#: serverguide/C/dns.xml:46(para)
21862
msgid ""
21863
"When configured as a caching nameserver BIND9 will find the answer to name "
21864
"queries and remember the answer when the domain is queried again."
21865
msgstr ""
21866
21867
#: serverguide/C/dns.xml:52(para)
21868
msgid ""
21869
"As a primary master server BIND9 reads the data for a zone from a file on "
21870
"it's host and is authoritative for that zone."
21871
msgstr ""
21872
21873
#: serverguide/C/dns.xml:57(para)
21874
msgid ""
21875
"In a secondary master configuration BIND9 gets the zone data from another "
21876
"nameserver authoritative for the zone."
21877
msgstr ""
21878
21879
#: serverguide/C/dns.xml:65(para)
21880
msgid ""
21881
"The DNS configuration files are stored in the <filename>/etc/bind</filename> "
21882
"directory. The primary configuration file is "
21883
"<filename>/etc/bind/named.conf</filename>."
21884
msgstr ""
21885
21886
#: serverguide/C/dns.xml:72(para)
21887
msgid ""
21888
"The <emphasis>include</emphasis> line specifies the filename which contains "
21889
"the DNS options. The <emphasis>directory</emphasis> line in the "
21890
"<filename>/etc/bind/named.conf.options</filename> file tells DNS where to "
21891
"look for files. All files BIND uses will be relative to this directory."
21892
msgstr ""
21893
21894
#: serverguide/C/dns.xml:80(para)
21895
msgid ""
21896
"The file named <filename>/etc/bind/db.root</filename> describes the root "
21897
"nameservers in the world. The servers change over time, so the "
21898
"<filename>/etc/bind/db.root</filename> file must be maintained now and then. "
21899
"This is usually done as updates to the <application>bind9</application> "
21900
"package. The <emphasis>zone</emphasis> section defines a master server, and "
21901
"it is stored in a file mentioned in the <emphasis>file</emphasis> option."
21902
msgstr ""
21903
21904
#: serverguide/C/dns.xml:90(para)
21905
msgid ""
21906
"It is possible to configure the same server to be a caching name server, "
21907
"primary master, and secondary master. A server can be the Start of Authority "
21908
"(SOA) for one zone, while providing secondary service for another zone. All "
21909
"the while providing caching services for hosts on the local LAN."
21910
msgstr ""
21911
21912
#: serverguide/C/dns.xml:98(title)
21913
msgid "Caching Nameserver"
21914
msgstr ""
21915
21916
#: serverguide/C/dns.xml:99(para)
21917
msgid ""
21918
"The default configuration is setup to act as a caching server. All that is "
21919
"required is simply adding the IP Addresses of your ISP's DNS servers. Simply "
21920
"uncomment and edit the following in "
21921
"<filename>/etc/bind/named.conf.options</filename>:"
21922
msgstr ""
21923
21924
#: serverguide/C/dns.xml:103(programlisting)
21925
#, no-wrap
21926
msgid ""
21927
"\n"
21928
"forwarders {\n"
21929
" 1.2.3.4;\n"
21930
" 5.6.7.8;\n"
21931
" };\n"
21932
msgstr ""
21933
21934
#: serverguide/C/dns.xml:110(para)
21935
msgid ""
21936
"Replace <emphasis>1.2.3.4</emphasis> and <emphasis>5.6.7.8</emphasis> with "
21937
"the IP Adresses of actual nameservers."
21938
msgstr ""
21939
21940
#: serverguide/C/dns.xml:114(para)
21941
msgid ""
21942
"Now restart the DNS server, to enable the new configuration. From a terminal "
21943
"prompt:"
21944
msgstr ""
21945
21946
#: serverguide/C/dns.xml:118(command) serverguide/C/dns.xml:194(command) serverguide/C/dns.xml:253(command) serverguide/C/dns.xml:312(command) serverguide/C/dns.xml:561(command)
21947
msgid "sudo /etc/init.d/bind9 restart"
21948
msgstr ""
21949
21950
#: serverguide/C/dns.xml:120(para)
21951
msgid ""
21952
"See <xref linkend=\"dns-testing-dig\"/> for information on testing a caching "
21953
"DNS server."
21954
msgstr ""
21955
21956
#: serverguide/C/dns.xml:125(title)
21957
msgid "Primary Master"
21958
msgstr ""
21959
21960
#: serverguide/C/dns.xml:126(para)
21961
msgid ""
21962
"In this section <application>BIND9</application> will be configured as the "
21963
"Primary Master for the domain <emphasis>example.com</emphasis>. Simply "
21964
"replace <emphasis role=\"italic\">example.com</emphasis> with your FQDN "
21965
"(Fully Qualified Domain Name)."
21966
msgstr ""
21967
21968
#: serverguide/C/dns.xml:132(title)
21969
msgid "Forward Zone File"
21970
msgstr ""
21971
21972
#: serverguide/C/dns.xml:133(para)
21973
msgid ""
21974
"To add a DNS zone to BIND9, turning BIND9 into a Primary Master server, the "
21975
"first step is to edit <filename>/etc/bind/named.conf.local</filename>:"
21976
msgstr ""
21977
21978
#: serverguide/C/dns.xml:137(programlisting)
21979
#, no-wrap
21980
msgid ""
21981
"\n"
21982
"zone \"example.com\" {\n"
21983
"\ttype master;\n"
21984
" file \"/etc/bind/db.example.com\";\n"
21985
"};\n"
21986
msgstr ""
21987
21988
#: serverguide/C/dns.xml:143(para)
21989
msgid ""
21990
"Now use an existing zone file as a template to create the "
21991
"<filename>/etc/bind/db.example.com</filename> file:"
21992
msgstr ""
21993
21994
#: serverguide/C/dns.xml:147(command)
21995
msgid "sudo cp /etc/bind/db.local /etc/bind/db.example.com"
21996
msgstr ""
21997
21998
#: serverguide/C/dns.xml:149(para)
21999
msgid ""
22000
"Edit the new zone file <filename>/etc/bind/db.example.com</filename> change "
22001
"<emphasis>localhost.</emphasis> to the FQDN of your server, leaving the "
22002
"additional \".\" at the end. Change <emphasis>127.0.0.1</emphasis> to the "
22003
"nameserver's IP Address and <emphasis>root.localhost</emphasis> to a valid "
22004
"email address, but with a \".\" instead of the usual \"@\" symbol, again "
22005
"leaving the \".\" at the end."
22006
msgstr ""
22007
22008
#: serverguide/C/dns.xml:155(para)
22009
msgid ""
22010
"Also, create an <emphasis>A record</emphasis> for <emphasis "
22011
"role=\"italic\">ns.example.com</emphasis>. The name server in this example:"
22012
msgstr ""
22013
22014
#: serverguide/C/dns.xml:159(programlisting)
22015
#, no-wrap
22016
msgid ""
22017
"\n"
22018
";\n"
22019
"; BIND data file for local loopback interface\n"
22020
";\n"
22021
"$TTL 604800\n"
22022
"@ IN SOA ns.example.com. root.example.com. (\n"
22023
" 2 ; Serial\n"
22024
" 604800 ; Refresh\n"
22025
" 86400 ; Retry\n"
22026
" 2419200 ; Expire\n"
22027
" 604800 ) ; Negative Cache TTL\n"
22028
";\n"
22029
"@ IN NS ns.example.com.\n"
22030
"@ IN A 127.0.0.1\n"
22031
"@ IN AAAA ::1\n"
22032
"ns IN A 192.168.1.10\n"
22033
msgstr ""
22034
22035
#: serverguide/C/dns.xml:176(para)
22036
msgid ""
22037
"You must increment the <emphasis>Serial Number</emphasis> every time you "
22038
"make changes to the zone file. If you make multiple changes before "
22039
"restarting BIND9, simply increment the Serial once."
22040
msgstr ""
22041
22042
#: serverguide/C/dns.xml:180(para)
22043
msgid ""
22044
"Now, you can add DNS records to the bottom of the zone file. See <xref "
22045
"linkend=\"dns-record-types\"/> for details."
22046
msgstr ""
22047
22048
#: serverguide/C/dns.xml:184(para)
22049
msgid ""
22050
"Many admins like to use the last date edited as the serial of a zone, such "
22051
"as <emphasis>2007010100</emphasis> which is yyyymmddss (where "
22052
"<emphasis>ss</emphasis> is the Serial Number)"
22053
msgstr ""
22054
22055
#: serverguide/C/dns.xml:189(para)
22056
msgid ""
22057
"Once you have made a change to the zone file "
22058
"<application>BIND9</application> will need to be restarted for the changes "
22059
"to take effect:"
22060
msgstr ""
22061
22062
#: serverguide/C/dns.xml:198(title)
22063
msgid "Reverse Zone File"
22064
msgstr ""
22065
22066
#: serverguide/C/dns.xml:199(para)
22067
msgid ""
22068
"Now that the zone is setup and resolving names to IP Adresses a "
22069
"<emphasis>Reverse zone</emphasis> is also required. A Reverse zone allows "
22070
"DNS to resolve an address to a name."
22071
msgstr ""
22072
22073
#: serverguide/C/dns.xml:203(para)
22074
msgid "Edit /etc/bind/named.conf.local and add the following:"
22075
msgstr ""
22076
22077
#: serverguide/C/dns.xml:206(programlisting)
22078
#, no-wrap
22079
msgid ""
22080
"\n"
22081
"zone \"1.168.192.in-addr.arpa\" {\n"
22082
" type master;\n"
22083
" notify no;\n"
22084
" file \"/etc/bind/db.192\";\n"
22085
"};\n"
22086
msgstr ""
22087
22088
#: serverguide/C/dns.xml:214(para)
22089
msgid ""
22090
"Replace <emphasis>1.168.192</emphasis> with the first three octets of "
22091
"whatever network you are using. Also, name the zone file "
22092
"<filename>/etc/bind/db.192</filename> appropriately. It should match the "
22093
"first octet of your network."
22094
msgstr ""
22095
22096
#: serverguide/C/dns.xml:219(para)
22097
msgid "Now create the <filename>/etc/bind/db.192</filename> file:"
22098
msgstr ""
22099
22100
#: serverguide/C/dns.xml:223(command)
22101
msgid "sudo cp /etc/bind/db.127 /etc/bind/db.192"
22102
msgstr ""
22103
22104
#: serverguide/C/dns.xml:225(para)
22105
msgid ""
22106
"Next edit <filename>/etc/bind/db.192</filename> changing the basically the "
22107
"same options as <filename>/etc/bind/db.example.com</filename>:"
22108
msgstr ""
22109
22110
#: serverguide/C/dns.xml:229(programlisting)
22111
#, no-wrap
22112
msgid ""
22113
"\n"
22114
";\n"
22115
"; BIND reverse data file for local loopback interface\n"
22116
";\n"
22117
"$TTL 604800\n"
22118
"@ IN SOA ns.example.com. root.example.com. (\n"
22119
" 2 ; Serial\n"
22120
" 604800 ; Refresh\n"
22121
" 86400 ; Retry\n"
22122
" 2419200 ; Expire\n"
22123
" 604800 ) ; Negative Cache TTL\n"
22124
";\n"
22125
"@ IN NS ns.\n"
22126
"10 IN PTR ns.example.com.\n"
22127
msgstr ""
22128
22129
#: serverguide/C/dns.xml:244(para)
22130
msgid ""
22131
"The <emphasis>Serial Number</emphasis> in the Reverse zone needs to be "
22132
"incremented on each changes as well. For each <emphasis>A record</emphasis> "
22133
"you configure in <filename>/etc/bind/db.example.com</filename> you need to "
22134
"create a <emphasis>PTR record</emphasis> in "
22135
"<filename>/etc/bind/db.192</filename>."
22136
msgstr ""
22137
22138
#: serverguide/C/dns.xml:249(para)
22139
msgid ""
22140
"After creating the reverse zone file restart "
22141
"<application>BIND9</application>:"
22142
msgstr ""
22143
22144
#: serverguide/C/dns.xml:258(title)
22145
msgid "Secondary Master"
22146
msgstr ""
22147
22148
#: serverguide/C/dns.xml:259(para)
22149
msgid ""
22150
"Once a <emphasis>Primary Master</emphasis> has been configured a "
22151
"<emphasis>Secondary Master</emphasis> is needed in order to maintain the "
22152
"availability of the domain should the Primary become unavailable."
22153
msgstr ""
22154
22155
#: serverguide/C/dns.xml:263(para)
22156
msgid ""
22157
"First, on the Primary Master server, the zone transfer needs to be allowed. "
22158
"Add the <emphasis>allow-transfer</emphasis> option to the example Forward "
22159
"and Reverse zone definitions in "
22160
"<filename>/etc/bind/named.conf.local</filename>:"
22161
msgstr ""
22162
22163
#: serverguide/C/dns.xml:267(programlisting)
22164
#, no-wrap
22165
msgid ""
22166
"\n"
22167
"zone \"example.com\" {\n"
22168
" type master;\n"
22169
"\tfile \"/etc/bind/db.example.com\";\n"
22170
" allow-transfer { 192.168.1.11; };\n"
22171
"};\n"
22172
"\n"
22173
"zone \"1.168.192.in-addr.arpa\" {\n"
22174
" type master;\n"
22175
" notify no;\n"
22176
" file \"/etc/bind/db.192\";\n"
22177
"\tallow-transfer { 192.168.1.11; };\n"
22178
"};\n"
22179
msgstr ""
22180
22181
#: serverguide/C/dns.xml:282(para)
22182
msgid ""
22183
"Replace <emphasis>192.168.1.11</emphasis> with the IP Address of your "
22184
"Secondary nameserver."
22185
msgstr ""
22186
22187
#: serverguide/C/dns.xml:286(para)
22188
msgid ""
22189
"Next, on the Secondary Master, install the <application>bind9</application> "
22190
"package the same way as on the Primary. Then edit the "
22191
"<filename>/etc/bind/named.conf.local</filename> and add the following "
22192
"declarations for the Forward and Reverse zones:"
22193
msgstr ""
22194
22195
#: serverguide/C/dns.xml:290(programlisting)
22196
#, no-wrap
22197
msgid ""
22198
"\n"
22199
"zone \"example.com\" {\n"
22200
"\ttype slave;\n"
22201
" file \"/var/cache/bind/db.example.com\";\n"
22202
" masters { 192.168.1.10; };\n"
22203
"}; \n"
22204
" \n"
22205
"zone \"1.168.192.in-addr.arpa\" {\n"
22206
"\ttype slave;\n"
22207
" file \"/var/cache/bind/db.192\";\n"
22208
" masters { 192.168.1.10; };\n"
22209
"};\n"
22210
msgstr ""
22211
22212
#: serverguide/C/dns.xml:304(para)
22213
msgid ""
22214
"Replace <emphasis>192.168.1.10</emphasis> with the IP Address of your "
22215
"Primary nameserver."
22216
msgstr ""
22217
22218
#: serverguide/C/dns.xml:308(para)
22219
msgid "Restart <application>BIND9</application> on the Secondary Master:"
22220
msgstr ""
22221
22222
#: serverguide/C/dns.xml:314(para)
22223
msgid ""
22224
"In <filename>/var/log/syslog</filename> you should see something similar to:"
22225
msgstr ""
22226
22227
#: serverguide/C/dns.xml:317(programlisting)
22228
#, no-wrap
22229
msgid ""
22230
"\n"
22231
"slave zone \"example.com\" (IN) loaded (serial 6)\n"
22232
"slave zone \"100.18.172.in-addr.arpa\" (IN) loaded (serial 3)\n"
22233
msgstr ""
22234
22235
#: serverguide/C/dns.xml:322(para)
22236
msgid ""
22237
"Note: A zone is only transferred if the <emphasis>Serial Number</emphasis> "
22238
"on the Primary is larger than the one on the Secondary."
22239
msgstr ""
22240
22241
#: serverguide/C/dns.xml:328(para)
22242
msgid ""
22243
"The default directory for non-authoritative zone files is "
22244
"<filename>/var/cache/bind/</filename>. This directory is also configured in "
22245
"<application>AppArmor</application> to allow the "
22246
"<application>named</application> daemon to write to. For more information on "
22247
"AppArmor see <xref linkend=\"apparmor\"/>."
22248
msgstr ""
22249
22250
#: serverguide/C/dns.xml:339(para)
22251
msgid ""
22252
"This section covers ways to help determine the cause when problems happen "
22253
"with DNS and <application>BIND9</application>."
22254
msgstr ""
22255
22256
#: serverguide/C/dns.xml:345(title)
22257
msgid "resolv.conf"
22258
msgstr ""
22259
22260
#: serverguide/C/dns.xml:346(para)
22261
msgid ""
22262
"The first step in testing <application>BIND9</application> is to add the "
22263
"nameserver's IP Address to a hosts resolver. The Primary nameserver should "
22264
"be configured as well as another host to double check things. Simply edit "
22265
"<filename>/etc/resolv.conf</filename> and add the following:"
22266
msgstr ""
22267
22268
#: serverguide/C/dns.xml:351(programlisting)
22269
#, no-wrap
22270
msgid ""
22271
"\n"
22272
"nameserver\t192.168.1.10\n"
22273
"nameserver\t192.168.1.11\n"
22274
msgstr ""
22275
22276
#: serverguide/C/dns.xml:356(para)
22277
msgid ""
22278
"You should also add the IP Address of the Secondary nameserver in case the "
22279
"Primary becomes unavailable."
22280
msgstr ""
22281
22282
#: serverguide/C/dns.xml:362(title)
22283
msgid "dig"
22284
msgstr ""
22285
22286
#: serverguide/C/dns.xml:363(para)
22287
msgid ""
22288
"If you installed the <application>dnsutils</application> package you can "
22289
"test your setup using the DNS lookup utility <application>dig</application>:"
22290
msgstr ""
22291
22292
#: serverguide/C/dns.xml:369(para)
22293
msgid ""
22294
"After installing <application>BIND9</application> use "
22295
"<application>dig</application> against the loopback interface to make sure "
22296
"it is listening on port 53. From a terminal prompt:"
22297
msgstr ""
22298
22299
#: serverguide/C/dns.xml:374(command)
22300
msgid "dig -x 127.0.0.1"
22301
msgstr ""
22302
22303
#: serverguide/C/dns.xml:376(para)
22304
msgid "You should see lines similar to the following in the command output:"
22305
msgstr ""
22306
22307
#: serverguide/C/dns.xml:379(programlisting)
22308
#, no-wrap
22309
msgid ""
22310
"\n"
22311
";; Query time: 1 msec\n"
22312
";; SERVER: 192.168.1.10#53(192.168.1.10)\n"
22313
msgstr ""
22314
22315
#: serverguide/C/dns.xml:385(para)
22316
msgid ""
22317
"If you have configured <application>BIND9</application> as a "
22318
"<emphasis>Caching</emphasis> nameserver \"dig\" an outside domain to check "
22319
"the query time:"
22320
msgstr ""
22321
22322
#: serverguide/C/dns.xml:390(command)
22323
msgid "dig ubuntu.com"
22324
msgstr ""
22325
22326
#: serverguide/C/dns.xml:392(para)
22327
msgid "Note the query time toward the end of the command output:"
22328
msgstr ""
22329
22330
#: serverguide/C/dns.xml:395(programlisting)
22331
#, no-wrap
22332
msgid ""
22333
"\n"
22334
";; Query time: 49 msec\n"
22335
msgstr ""
22336
22337
#: serverguide/C/dns.xml:398(para)
22338
msgid "After a second dig there should be improvement:"
22339
msgstr ""
22340
22341
#: serverguide/C/dns.xml:401(programlisting)
22342
#, no-wrap
22343
msgid ""
22344
"\n"
22345
";; Query time: 1 msec\n"
22346
msgstr ""
22347
22348
#: serverguide/C/dns.xml:408(title)
22349
msgid "ping"
22350
msgstr ""
22351
22352
#: serverguide/C/dns.xml:410(para)
22353
msgid ""
22354
"Now to demonstrate how applications make use of DNS to resolve a host name "
22355
"use the <application>ping</application> utility to send an ICMP echo "
22356
"request. From a terminal prompt enter:"
22357
msgstr ""
22358
22359
#: serverguide/C/dns.xml:416(command)
22360
msgid "ping example.com"
22361
msgstr ""
22362
22363
#: serverguide/C/dns.xml:418(para)
22364
msgid ""
22365
"This tests if the nameserver can resolve the name "
22366
"<emphasis>ns.example.com</emphasis> to an IP Address. The command output "
22367
"should resemble:"
22368
msgstr ""
22369
22370
#: serverguide/C/dns.xml:422(programlisting)
22371
#, no-wrap
22372
msgid ""
22373
"\n"
22374
"PING ns.example.com (192.168.1.10) 56(84) bytes of data.\n"
22375
"64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=0.800 ms\n"
22376
"64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=0.813 ms\n"
22377
msgstr ""
22378
22379
#: serverguide/C/dns.xml:429(title)
22380
msgid "named-checkzone"
22381
msgstr ""
22382
22383
#: serverguide/C/dns.xml:430(para)
22384
msgid ""
22385
"A great way to test your zone files is by using the <application>named-"
22386
"checkzone</application> utility installed with the "
22387
"<application>bind9</application> package. This utility allows you to make "
22388
"sure the configuration is correct before restarting "
22389
"<application>BIND9</application> and making the changes live."
22390
msgstr ""
22391
22392
#: serverguide/C/dns.xml:437(para)
22393
msgid ""
22394
"To test our example Forward zone file enter the following from a command "
22395
"prompt:"
22396
msgstr ""
22397
22398
#: serverguide/C/dns.xml:441(command)
22399
msgid "named-checkzone example.com /etc/bind/db.example.com"
22400
msgstr ""
22401
22402
#: serverguide/C/dns.xml:443(para)
22403
msgid ""
22404
"If everything is configured correctly you should see output similar to:"
22405
msgstr ""
22406
22407
#: serverguide/C/dns.xml:446(programlisting)
22408
#, no-wrap
22409
msgid ""
22410
"\n"
22411
"zone example.com/IN: loaded serial 6\n"
22412
"OK\n"
22413
msgstr ""
22414
22415
#: serverguide/C/dns.xml:452(para)
22416
msgid "Similarly, to test the Reverse zone file enter the following:"
22417
msgstr ""
22418
22419
#: serverguide/C/dns.xml:456(command)
22420
msgid "named-checkzone example.com /etc/bind/db.192"
22421
msgstr ""
22422
22423
#: serverguide/C/dns.xml:458(para)
22424
msgid "The output should be similar to:"
22425
msgstr ""
22426
22427
#: serverguide/C/dns.xml:461(programlisting)
22428
#, no-wrap
22429
msgid ""
22430
"\n"
22431
"zone example.com/IN: loaded serial 3\n"
22432
"OK\n"
22433
msgstr ""
22434
22435
#: serverguide/C/dns.xml:468(para)
22436
msgid ""
22437
"The <emphasis>Serial Number</emphasis> of your zone file will probably be "
22438
"different."
22439
msgstr ""
22440
22441
#: serverguide/C/dns.xml:475(title)
22442
msgid "Logging"
22443
msgstr ""
22444
22445
#: serverguide/C/dns.xml:476(para)
22446
msgid ""
22447
"<application>BIND9</application> has a wide variety of logging configuration "
22448
"options available. There are two main options. The "
22449
"<emphasis>channel</emphasis> option configures where logs go, and the "
22450
"<emphasis>category</emphasis> option determines what information to log."
22451
msgstr ""
22452
22453
#: serverguide/C/dns.xml:480(para)
22454
msgid "If no logging option is configured the default option is:"
22455
msgstr ""
22456
22457
#: serverguide/C/dns.xml:483(programlisting)
22458
#, no-wrap
22459
msgid ""
22460
"\n"
22461
"logging {\n"
22462
" category default { default_syslog; default_debug; };\n"
22463
" category unmatched { null; };\n"
22464
"};\n"
22465
msgstr ""
22466
22467
#: serverguide/C/dns.xml:489(para)
22468
msgid ""
22469
"This section covers configuring <application>BIND9</application> to send "
22470
"<emphasis>debug</emphasis> messages related to DNS queries to a separate "
22471
"file."
22472
msgstr ""
22473
22474
#: serverguide/C/dns.xml:494(para)
22475
msgid ""
22476
"First, we need to configure a channel to specify which file to send the "
22477
"messages to. Edit <filename>/etc/bind/named.conf.local</filename> and add "
22478
"the following:"
22479
msgstr ""
22480
22481
#: serverguide/C/dns.xml:498(programlisting)
22482
#, no-wrap
22483
msgid ""
22484
"\n"
22485
"logging {\n"
22486
" channel query.log { \n"
22487
" file \"/var/log/query.log\";\n"
22488
" severity debug 3; \n"
22489
" }; \n"
22490
"};\n"
22491
msgstr ""
22492
22493
#: serverguide/C/dns.xml:508(para)
22494
msgid "Next, configure a category to send all DNS queries to the query file:"
22495
msgstr ""
22496
22497
#: serverguide/C/dns.xml:511(programlisting)
22498
#, no-wrap
22499
msgid ""
22500
"\n"
22501
"logging {\n"
22502
" channel query.log { \n"
22503
" file \"/var/log/query.log\"; \n"
22504
" severity debug 3; \n"
22505
" }; \n"
22506
" <emphasis>category queries { query.log; };</emphasis> \n"
22507
"};\n"
22508
msgstr ""
22509
22510
#: serverguide/C/dns.xml:523(para)
22511
msgid ""
22512
"Note: the <emphasis>debug</emphasis> option can be set from 1 to 3. If a "
22513
"level isn't specified level 1 is the default."
22514
msgstr ""
22515
22516
#: serverguide/C/dns.xml:529(para)
22517
msgid ""
22518
"Since the <emphasis>named daemon</emphasis> runs as the "
22519
"<emphasis>bind</emphasis> user the <filename>/var/log/query.log</filename> "
22520
"file must be created and the ownership changed:"
22521
msgstr ""
22522
22523
#: serverguide/C/dns.xml:534(command)
22524
msgid "sudo touch /var/log/query.log"
22525
msgstr ""
22526
22527
#: serverguide/C/dns.xml:535(command)
22528
msgid "sudo chown bind /var/log/query.log"
22529
msgstr ""
22530
22531
#: serverguide/C/dns.xml:539(para)
22532
msgid ""
22533
"Before <application>named</application> daemon can write to the new log file "
22534
"the <application>AppArmor</application> profile must be updated. First, edit "
22535
"<filename>/etc/apparmor.d/usr.sbin.named</filename> and add:"
22536
msgstr ""
22537
22538
#: serverguide/C/dns.xml:543(programlisting)
22539
#, no-wrap
22540
msgid ""
22541
"\n"
22542
"/var/log/query.log w,\n"
22543
msgstr ""
22544
22545
#: serverguide/C/dns.xml:546(para)
22546
msgid "Next, reload the profile:"
22547
msgstr ""
22548
22549
#: serverguide/C/dns.xml:550(command)
22550
msgid "cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r"
22551
msgstr ""
22552
22553
#: serverguide/C/dns.xml:552(para)
22554
msgid ""
22555
"For more information on <application>AppArmor</application> see <xref "
22556
"linkend=\"apparmor\"/>"
22557
msgstr ""
22558
22559
#: serverguide/C/dns.xml:557(para)
22560
msgid ""
22561
"Now restart <application>BIND9</application> for the changes to take effect:"
22562
msgstr ""
22563
22564
#: serverguide/C/dns.xml:565(para)
22565
msgid ""
22566
"You should see the file <filename>/var/log/query.log</filename> fill with "
22567
"query information. This is a simple example of the "
22568
"<application>BIND9</application> logging options. For coverage of advanced "
22569
"options see <xref linkend=\"dns-more-info\"/>."
22570
msgstr ""
22571
22572
#: serverguide/C/dns.xml:574(title)
22573
msgid "Common Record Types"
22574
msgstr ""
22575
22576
#: serverguide/C/dns.xml:575(para)
22577
msgid "This section covers some of the most common DNS record types."
22578
msgstr ""
22579
22580
#: serverguide/C/dns.xml:580(para)
22581
msgid ""
22582
"<emphasis>A</emphasis> record: This record maps an IP Address to a hostname."
22583
msgstr ""
22584
22585
#: serverguide/C/dns.xml:583(programlisting)
22586
#, no-wrap
22587
msgid ""
22588
"\n"
22589
"www IN A 192.168.1.12\n"
22590
msgstr ""
22591
22592
#: serverguide/C/dns.xml:588(para)
22593
msgid ""
22594
"<emphasis>CNAME</emphasis> record: Used to create an alias to an existing A "
22595
"record. You cannot create a CNAME record pointing to another CNAME record."
22596
msgstr ""
22597
22598
#: serverguide/C/dns.xml:591(programlisting)
22599
#, no-wrap
22600
msgid ""
22601
"\n"
22602
"web IN CNAME www\n"
22603
msgstr ""
22604
22605
#: serverguide/C/dns.xml:596(para)
22606
msgid ""
22607
"<emphasis>MX</emphasis> record: Used to define where email should be sent "
22608
"to. Must point to an A record, not a CNAME."
22609
msgstr ""
22610
22611
#: serverguide/C/dns.xml:599(programlisting)
22612
#, no-wrap
22613
msgid ""
22614
"\n"
22615
" IN MX 1 mail.example.com.\n"
22616
"mail IN A 192.168.1.13\n"
22617
msgstr ""
22618
22619
#: serverguide/C/dns.xml:605(para)
22620
msgid ""
22621
"<emphasis>NS</emphasis> record: Used to define which servers serve copies of "
22622
"a zone. It must point to an A record, not a CNAME. This is where Primary and "
22623
"Secondary servers are defined."
22624
msgstr ""
22625
22626
#: serverguide/C/dns.xml:609(programlisting)
22627
#, no-wrap
22628
msgid ""
22629
"\n"
22630
" IN NS ns.example.com.\n"
22631
"\tIN NS ns2.example.com.\n"
22632
"ns IN A 192.168.1.10\n"
22633
"ns2\tIN A\t 192.168.1.11\n"
22634
msgstr ""
22635
22636
#: serverguide/C/dns.xml:622(para)
22637
msgid ""
22638
"The <ulink url=\"http://www.tldp.org/HOWTO/DNS-HOWTO.html\">DNS "
22639
"HOWTO</ulink> explains more advanced options for configuring BIND9."
22640
msgstr ""
22641
22642
#: serverguide/C/dns.xml:627(para)
22643
msgid ""
22644
"For in depth coverage of <emphasis>DNS</emphasis> and "
22645
"<application>BIND9</application> see <ulink "
22646
"url=\"http://www.bind9.net/\">Bind9.net</ulink>."
22647
msgstr ""
22648
22649
#: serverguide/C/dns.xml:632(para)
22650
msgid ""
22651
"<ulink url=\"http://www.oreilly.com/catalog/dns5/index.html\">DNS and "
22652
"BIND</ulink> is a popular book now in it's fifth edition."
22653
msgstr ""
22654
22655
#: serverguide/C/dns.xml:637(para)
22656
msgid ""
22657
"A great place to ask for <application>BIND9</application> assistance, and "
22658
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
22659
"server</emphasis> IRC channel on <ulink "
22660
"url=\"http://freenode.net\">freenode</ulink>."
22661
msgstr ""
22662
22663
#: serverguide/C/dns.xml:643(para)
22664
msgid ""
22665
"Also, see the <ulink "
22666
"url=\"https://help.ubuntu.com/community/BIND9ServerHowto\">BIND9 Server "
22667
"HOWTO</ulink> in the Ubuntu Wiki."
22668
msgstr ""
22669
22670
#: serverguide/C/databases.xml:13(title)
22671
msgid "Databases"
22672
msgstr ""
22673
22674
#: serverguide/C/databases.xml:14(para)
22675
msgid "Ubuntu provides two popular database servers. They are:"
22676
msgstr ""
22677
22678
#: serverguide/C/databases.xml:22(application) serverguide/C/databases.xml:157(title)
22679
msgid "PostgreSQL"
22680
msgstr ""
22681
22682
#: serverguide/C/databases.xml:25(para)
22683
msgid ""
22684
"They are available in the main repository. This section explains how to "
22685
"install and configure these database servers."
22686
msgstr ""
22687
22688
#: serverguide/C/databases.xml:32(para)
22689
msgid ""
22690
"MySQL is a fast, multi-threaded, multi-user, and robust SQL database server. "
22691
"It is intended for mission-critical, heavy-load production systems as well "
22692
"as for embedding into mass-deployed software."
22693
msgstr ""
22694
22695
#: serverguide/C/databases.xml:41(para)
22696
msgid "To install MySQL, run the following command from a terminal prompt:"
22697
msgstr ""
22698
22699
#: serverguide/C/databases.xml:46(command)
22700
msgid "sudo apt-get install mysql-server"
22701
msgstr ""
22702
22703
#: serverguide/C/databases.xml:48(para)
22704
msgid ""
22705
"During the installation process you will be prompted to enter a password for "
22706
"the <application>MySQL</application> root user."
22707
msgstr ""
22708
22709
#: serverguide/C/databases.xml:53(para)
22710
msgid ""
22711
"Once the installation is complete, the MySQL server should be started "
22712
"automatically. You can run the following command from a terminal prompt to "
22713
"check whether the MySQL server is running:"
22714
msgstr ""
22715
22716
#: serverguide/C/databases.xml:61(command)
22717
msgid "sudo netstat -tap | grep mysql"
22718
msgstr ""
22719
22720
#: serverguide/C/databases.xml:70(programlisting)
22721
#, no-wrap
22722
msgid ""
22723
"\n"
22724
"tcp 0 0 localhost:mysql *:* LISTEN "
22725
" 2556/mysqld\n"
22726
msgstr ""
22727
22728
#: serverguide/C/databases.xml:74(para)
22729
msgid ""
22730
"If the server is not running correctly, you can type the following command "
22731
"to start it:"
22732
msgstr ""
22733
22734
#: serverguide/C/databases.xml:79(command) serverguide/C/databases.xml:104(command)
22735
msgid "sudo /etc/init.d/mysql restart"
22736
msgstr ""
22737
22738
#: serverguide/C/databases.xml:85(para)
22739
msgid ""
22740
"You can edit the <filename>/etc/mysql/my.cnf</filename> file to configure "
22741
"the basic settings -- log file, port number, etc. For example, to configure "
22742
"<application>MySQL</application> to listen for connections from network "
22743
"hosts, change the <emphasis>bind-address</emphasis> directive to the "
22744
"server's IP address:"
22745
msgstr ""
22746
22747
#: serverguide/C/databases.xml:91(programlisting)
22748
#, no-wrap
22749
msgid ""
22750
"\n"
22751
"bind-address = 192.168.0.5\n"
22752
msgstr ""
22753
22754
#: serverguide/C/databases.xml:95(para)
22755
msgid "Replace 192.168.0.5 with the appropriate address."
22756
msgstr ""
22757
22758
#: serverguide/C/databases.xml:99(para)
22759
msgid ""
22760
"After making a change to <filename>/etc/mysql/my.cnf</filename> the "
22761
"<application>mysql</application> daemon will need to be restarted:"
22762
msgstr ""
22763
22764
#: serverguide/C/databases.xml:107(para)
22765
msgid ""
22766
"If you would like to change the "
22767
"<application>MySQL</application><emphasis>root</emphasis> password, in a "
22768
"terminal enter:"
22769
msgstr ""
22770
22771
#: serverguide/C/databases.xml:113(command)
22772
msgid "sudo dpkg-reconfigure mysql-server-5.1"
22773
msgstr ""
22774
22775
#: serverguide/C/databases.xml:116(para)
22776
msgid ""
22777
"The <application>mysql</application> daemon will be stopped, and you will be "
22778
"prompted to enter a new password."
22779
msgstr ""
22780
22781
#: serverguide/C/databases.xml:125(para)
22782
msgid ""
22783
"See the <ulink url=\"http://www.mysql.com/\">MySQL Home Page</ulink> for "
22784
"more information."
22785
msgstr ""
22786
22787
#: serverguide/C/databases.xml:130(para)
22788
msgid ""
22789
"The <emphasis>MySQL Handbook</emphasis> is also available in the "
22790
"<application>mysql-doc-5.0</application> package. To install the package "
22791
"enter the following in a terminal:"
22792
msgstr ""
22793
22794
#: serverguide/C/databases.xml:135(command)
22795
msgid "sudo apt-get install mysql-doc-5.0"
22796
msgstr ""
22797
22798
#: serverguide/C/databases.xml:137(para)
22799
msgid ""
22800
"The documentation is in HTML format, to view them enter "
22801
"<command>file:///usr/share/doc/mysql-doc-5.0/refman-5.0-en.html-"
22802
"chapter/index.html</command> in your browser's address bar."
22803
msgstr ""
22804
22805
#: serverguide/C/databases.xml:143(para) serverguide/C/databases.xml:290(para)
22806
msgid ""
22807
"For general SQL information see <ulink "
22808
"url=\"http://www.informit.com/store/product.aspx?isbn=0768664128\">Using SQL "
22809
"Special Edition</ulink> by Rafe Colburn."
22810
msgstr ""
22811
22812
#: serverguide/C/databases.xml:149(para)
22813
msgid ""
22814
"The <ulink url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache "
22815
"MySQL PHP Ubuntu Wiki</ulink> page also has useful information."
22816
msgstr ""
22817
22818
#: serverguide/C/databases.xml:158(para)
22819
msgid ""
22820
"PostgreSQL is an object-relational database system that has the features of "
22821
"traditional commercial database systems with enhancements to be found in "
22822
"next-generation DBMS systems."
22823
msgstr ""
22824
22825
#: serverguide/C/databases.xml:165(para)
22826
msgid ""
22827
"To install PostgreSQL, run the following command in the command prompt:"
22828
msgstr ""
22829
22830
#: serverguide/C/databases.xml:172(command)
22831
msgid "sudo apt-get install postgresql"
22832
msgstr ""
22833
22834
#: serverguide/C/databases.xml:176(para)
22835
msgid ""
22836
"Once the installation is complete, you should configure the PostgreSQL "
22837
"server based on your needs, although the default configuration is viable."
22838
msgstr ""
22839
22840
#: serverguide/C/databases.xml:184(para)
22841
msgid ""
22842
"By default, connection via TCP/IP is disabled. PostgreSQL supports multiple "
22843
"client authentication methods. By default, IDENT authentication method is "
22844
"used for <application>postgres</application> and local users. Please refer "
22845
"<ulink url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the "
22846
"PostgreSQL Administrator's Guide</ulink>."
22847
msgstr ""
22848
22849
#: serverguide/C/databases.xml:191(para)
22850
msgid ""
22851
"The following discussion assumes that you wish to enable TCP/IP connections "
22852
"and use the MD5 method for client authentication. PostgreSQL configuration "
22853
"files are stored in the "
22854
"<filename>/etc/postgresql/<version>/main</filename> directory. For "
22855
"example, if you install PostgreSQL 8.4, the configuration files are stored "
22856
"in the <filename>/etc/postgresql/8.4/main</filename> directory."
22857
msgstr ""
22858
22859
#: serverguide/C/databases.xml:201(para)
22860
msgid ""
22861
"To configure <emphasis>ident</emphasis> authentication, add entries to the "
22862
"<filename>/etc/postgresql/8.4/main/pg_ident.conf</filename> file."
22863
msgstr ""
22864
22865
#: serverguide/C/databases.xml:208(para)
22866
msgid ""
22867
"To enable TCP/IP connections, edit the file "
22868
"<filename>/etc/postgresql/8.4/main/postgresql.conf</filename>"
22869
msgstr ""
22870
22871
#: serverguide/C/databases.xml:210(para)
22872
msgid ""
22873
"Locate the line <emphasis>#listen_addresses = 'localhost'</emphasis> and "
22874
"change it to:"
22875
msgstr ""
22876
22877
#: serverguide/C/databases.xml:213(programlisting)
22878
#, no-wrap
22879
msgid ""
22880
"\n"
22881
"listen_addresses = 'localhost'\n"
22882
msgstr ""
22883
22884
#: serverguide/C/databases.xml:217(para)
22885
msgid ""
22886
"To allow other computers to connect to your "
22887
"<application>PostgreSQL</application> server replace 'localhost' with the "
22888
"<emphasis>IP Address</emphasis> of your server."
22889
msgstr ""
22890
22891
#: serverguide/C/databases.xml:222(para)
22892
msgid ""
22893
"You may also edit all other parameters, if you know what you are doing! For "
22894
"details, refer to the configuration file or to the PostgreSQL documentation."
22895
msgstr ""
22896
22897
#: serverguide/C/databases.xml:227(para)
22898
msgid ""
22899
"Now that we can connect to our <application>PostgreSQL</application> server, "
22900
"the next step is to set a password for the <emphasis>postgres</emphasis> "
22901
"user. Run the following command at a terminal prompt to connect to the "
22902
"default PostgreSQL template database:"
22903
msgstr ""
22904
22905
#: serverguide/C/databases.xml:234(command)
22906
msgid "sudo -u postgres psql template1"
22907
msgstr ""
22908
22909
#: serverguide/C/databases.xml:236(para)
22910
msgid ""
22911
"The above command connects to PostgreSQL database "
22912
"<emphasis>template1</emphasis> as user <emphasis>postgres</emphasis>. Once "
22913
"you connect to the PostgreSQL server, you will be at a SQL prompt. You can "
22914
"run the following SQL command at the <application>psql</application> prompt "
22915
"to configure the password for the user <emphasis "
22916
"role=\"italics\">postgres</emphasis>."
22917
msgstr ""
22918
22919
#: serverguide/C/databases.xml:244(command)
22920
msgid "ALTER USER postgres with encrypted password 'your_password';"
22921
msgstr ""
22922
22923
#: serverguide/C/databases.xml:246(para)
22924
msgid ""
22925
"After configuring the password, edit the file "
22926
"<filename>/etc/postgresql/8.4/main/pg_hba.conf</filename> to use "
22927
"<emphasis>MD5</emphasis> authentication with the "
22928
"<emphasis>postgres</emphasis> user:"
22929
msgstr ""
22930
22931
#: serverguide/C/databases.xml:252(programlisting)
22932
#, no-wrap
22933
msgid ""
22934
"\n"
22935
"local all postgres md5\n"
22936
msgstr ""
22937
22938
#: serverguide/C/databases.xml:256(para)
22939
msgid ""
22940
"Finally, you should restart the <application>PostgreSQL</application> "
22941
"service to initialize the new configuration. From a terminal prompt enter "
22942
"the following to restart <application>PostgreSQL</application>:"
22943
msgstr ""
22944
22945
#: serverguide/C/databases.xml:262(command)
22946
msgid "sudo /etc/init.d/postgresql-8.4 restart"
22947
msgstr ""
22948
22949
#: serverguide/C/databases.xml:265(para)
22950
msgid ""
22951
"The above configuration is not complete by any means. Please refer <ulink "
22952
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the PostgreSQL "
22953
"Administrator's Guide</ulink> to configure more parameters."
22954
msgstr ""
22955
22956
#: serverguide/C/databases.xml:276(para)
22957
msgid ""
22958
"As mentioned above the <ulink "
22959
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\">Administrator's "
22960
"Guide</ulink> is an excellent resource. The guide is also available in the "
22961
"<application>postgresql-doc-8.4</application> package. Execute the following "
22962
"in a terminal to install the package:"
22963
msgstr ""
22964
22965
#: serverguide/C/databases.xml:282(command)
22966
msgid "sudo apt-get install postgresql-doc-8.4"
22967
msgstr ""
22968
22969
#: serverguide/C/databases.xml:284(para)
22970
msgid ""
22971
"To view the guide enter <command>file:///usr/share/doc/postgresql-doc-"
22972
"8.4/html/index.html</command> into the address bar of your browser."
22973
msgstr ""
22974
22975
#: serverguide/C/databases.xml:296(para)
22976
msgid ""
22977
"Also, see the <ulink "
22978
"url=\"https://help.ubuntu.com/community/PostgreSQL\">PostgreSQL Ubuntu "
22979
"Wiki</ulink> page for more information."
22980
msgstr ""
22981
22982
#: serverguide/C/clustering.xml:13(title)
22983
msgid "Clustering"
22984
msgstr ""
22985
22986
#: serverguide/C/clustering.xml:16(title)
22987
msgid "DRBD"
22988
msgstr ""
22989
22990
#: serverguide/C/clustering.xml:18(para)
22991
msgid ""
22992
"Distributed Replicated Block Device (DRBD) mirrors block devices between "
22993
"multiple hosts. The replication is transparent to other applications on the "
22994
"host systems. Any block device hard disks, partitions, RAID devices, logical "
22995
"volumes, etc can be mirrored."
22996
msgstr ""
22997
22998
#: serverguide/C/clustering.xml:24(para)
22999
msgid ""
23000
"To get started using <application>drbd</application>, first install the "
23001
"necessary packages. From a terminal enter:"
23002
msgstr ""
23003
23004
#: serverguide/C/clustering.xml:29(command)
23005
msgid "sudo apt-get install drbd8-utils"
23006
msgstr ""
23007
23008
#: serverguide/C/clustering.xml:33(para)
23009
msgid ""
23010
"If you are using the <emphasis>virtual kernel</emphasis> as part of a "
23011
"virtual machine you will need to manually compile the "
23012
"<application>drbd</application> module. It may be easier to install the "
23013
"<application>linux-server</application> package inside the virtual machine."
23014
msgstr ""
23015
23016
#: serverguide/C/clustering.xml:40(para)
23017
msgid ""
23018
"This section covers setting up a <application>drbd</application> to "
23019
"replicate a separate <filename>/srv</filename> partition, with an "
23020
"<application>ext3</application> filesystem between two hosts. The partition "
23021
"size is not particularly relevant, but both partitions need to be the same "
23022
"size."
23023
msgstr ""
23024
23025
#: serverguide/C/clustering.xml:49(para)
23026
msgid ""
23027
"The two hosts in this example will be called <emphasis>drbd01</emphasis> and "
23028
"<emphasis>drbd02</emphasis>. They will need to have name resolution "
23029
"configured either through DNS or the <filename>/etc/hosts</filename> file. "
23030
"See <xref linkend=\"dns\"/> for details."
23031
msgstr ""
23032
23033
#: serverguide/C/clustering.xml:57(para)
23034
msgid ""
23035
"To configure <application>drbd</application>, on the first host edit "
23036
"<filename>/etc/drbd.conf</filename>:"
23037
msgstr ""
23038
23039
#: serverguide/C/clustering.xml:61(programlisting)
23040
#, no-wrap
23041
msgid ""
23042
"\n"
23043
"global { usage-count no; }\n"
23044
"common { syncer { rate 100M; } }\n"
23045
"resource r0 {\n"
23046
" protocol C;\n"
23047
" startup {\n"
23048
" wfc-timeout 15;\n"
23049
" degr-wfc-timeout 60;\n"
23050
" }\n"
23051
" net {\n"
23052
" cram-hmac-alg sha1;\n"
23053
" shared-secret \"secret\";\n"
23054
" }\n"
23055
" on drbd01 {\n"
23056
" device /dev/drbd0;\n"
23057
" disk /dev/sdb1;\n"
23058
" address 192.168.0.1:7788;\n"
23059
" meta-disk internal;\n"
23060
" }\n"
23061
" on drbd02 {\n"
23062
" device /dev/drbd0;\n"
23063
" disk /dev/sdb1;\n"
23064
" address 192.168.0.2:7788;\n"
23065
" meta-disk internal;\n"
23066
" }\n"
23067
"} \n"
23068
msgstr ""
23069
23070
#: serverguide/C/clustering.xml:90(para)
23071
msgid ""
23072
"There are many other options in <filename>/etc/drbd.conf</filename>, but for "
23073
"this example their default values are fine."
23074
msgstr ""
23075
23076
#: serverguide/C/clustering.xml:98(para)
23077
msgid "Now copy <filename>/etc/drbd.conf</filename> to the second host:"
23078
msgstr ""
23079
23080
#: serverguide/C/clustering.xml:103(command)
23081
msgid "scp /etc/drbd.conf drbd02:~"
23082
msgstr ""
23083
23084
#: serverguide/C/clustering.xml:109(para)
23085
msgid ""
23086
"And, on <emphasis>drbd02</emphasis> move the file to "
23087
"<filename>/etc</filename>:"
23088
msgstr ""
23089
23090
#: serverguide/C/clustering.xml:114(command)
23091
msgid "sudo mv drbd.conf /etc/"
23092
msgstr ""
23093
23094
#: serverguide/C/clustering.xml:120(para)
23095
msgid ""
23096
"Next, on both hosts, start the <application>drbd</application> daemon:"
23097
msgstr ""
23098
23099
#: serverguide/C/clustering.xml:125(command)
23100
msgid "sudo /etc/init.d/drbd start"
23101
msgstr ""
23102
23103
#: serverguide/C/clustering.xml:131(para)
23104
msgid ""
23105
"Now using the <application>drbdadm</application> utility initialize the meta "
23106
"data storage. On each server execute:"
23107
msgstr ""
23108
23109
#: serverguide/C/clustering.xml:137(command)
23110
msgid "sudo drbdadm create-md r0"
23111
msgstr ""
23112
23113
#: serverguide/C/clustering.xml:143(para)
23114
msgid ""
23115
"On the <emphasis>drbd01</emphasis>, or whichever host you wish to be the "
23116
"primary, enter the following:"
23117
msgstr ""
23118
23119
#: serverguide/C/clustering.xml:148(command)
23120
msgid "sudo drbdadm -- --overwrite-data-of-peer primary all"
23121
msgstr ""
23122
23123
#: serverguide/C/clustering.xml:154(para)
23124
msgid ""
23125
"After executing the above command, the data will start syncing with the "
23126
"secondary host. To watch the progresss, on <emphasis>drbd02</emphasis> enter "
23127
"the following:"
23128
msgstr ""
23129
23130
#: serverguide/C/clustering.xml:160(command)
23131
msgid "watch -n1 cat /proc/drbd"
23132
msgstr ""
23133
23134
#: serverguide/C/clustering.xml:163(para)
23135
msgid "To stop watching the output press <emphasis>Ctrl+c</emphasis>."
23136
msgstr ""
23137
23138
#: serverguide/C/clustering.xml:170(para)
23139
msgid ""
23140
"Finally, add a filesystem to <filename>/dev/drbd0</filename> and mount it:"
23141
msgstr ""
23142
23143
#: serverguide/C/clustering.xml:175(command)
23144
msgid "sudo mkfs.ext3 /dev/drbd0"
23145
msgstr ""
23146
23147
#: serverguide/C/clustering.xml:176(command) serverguide/C/clustering.xml:224(command)
23148
msgid "sudo mount /dev/drbd0 /srv"
23149
msgstr ""
23150
23151
#: serverguide/C/clustering.xml:186(para)
23152
msgid ""
23153
"To test that the data is actually syncing between the hosts copy some files "
23154
"on the <emphasis>drbd01</emphasis>, the primary, to "
23155
"<filename>/srv</filename>:"
23156
msgstr ""
23157
23158
#: serverguide/C/clustering.xml:195(para)
23159
msgid "Next, unmount <filename>/srv</filename>:"
23160
msgstr ""
23161
23162
#: serverguide/C/clustering.xml:203(para)
23163
msgid ""
23164
"<emphasis>Demote</emphasis> the <emphasis>primary</emphasis> server to the "
23165
"<emphasis>secondary</emphasis> role:"
23166
msgstr ""
23167
23168
#: serverguide/C/clustering.xml:208(command)
23169
msgid "sudo drbdadm secondary r0"
23170
msgstr ""
23171
23172
#: serverguide/C/clustering.xml:211(para)
23173
msgid ""
23174
"Now on the <emphasis>secondary</emphasis> server "
23175
"<emphasis>promote</emphasis> it to the <emphasis>primary</emphasis> role:"
23176
msgstr ""
23177
23178
#: serverguide/C/clustering.xml:216(command)
23179
msgid "sudo drbdadm primary r0"
23180
msgstr ""
23181
23182
#: serverguide/C/clustering.xml:219(para)
23183
msgid "Lastly, mount the partition:"
23184
msgstr ""
23185
23186
#: serverguide/C/clustering.xml:227(para)
23187
msgid ""
23188
"Using <emphasis>ls</emphasis> you should see "
23189
"<filename>/srv/default</filename> copied from the former "
23190
"<emphasis>primary</emphasis> host <emphasis>drbd01</emphasis>."
23191
msgstr ""
23192
23193
#: serverguide/C/clustering.xml:238(para)
23194
msgid ""
23195
"For more information on <application>DRBD</application> see the <ulink "
23196
"url=\"http://www.drbd.org/\">DRBD web site</ulink>."
23197
msgstr ""
23198
23199
#: serverguide/C/clustering.xml:243(para)
23200
msgid ""
23201
"The <ulink "
23202
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/drbd.conf.5.html\">dr"
23203
"bd.conf man page</ulink> contains details on the options not covered in this "
23204
"guide."
23205
msgstr ""
23206
23207
#: serverguide/C/clustering.xml:249(para)
23208
msgid ""
23209
"Also, see the <ulink "
23210
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/drbdadm.8.html\">drbd"
23211
"adm man page</ulink>."
23212
msgstr ""
23213
23214
#: serverguide/C/clustering.xml:254(para)
23215
msgid ""
23216
"The <ulink url=\"https://help.ubuntu.com/community/DRBD\">DRBD Ubuntu "
23217
"Wiki</ulink> page also has more information."
23218
msgstr ""
23219
23220
#: serverguide/C/chat.xml:13(title)
23221
msgid "Chat Applications"
23222
msgstr "Aplicacions de Chat"
23223
23224
#: serverguide/C/chat.xml:19(para)
23225
msgid ""
23226
"In this section, we will discuss how to install and configure a IRC server, "
23227
"<application>ircd-irc2</application>. We will also discuss how to install "
23228
"and configure Jabber, an instance messaging server."
23229
msgstr ""
23230
23231
#: serverguide/C/chat.xml:28(title)
23232
msgid "IRC Server"
23233
msgstr "Servidor IRC"
23234
23235
#: serverguide/C/chat.xml:30(para)
23236
msgid ""
23237
"The Ubuntu repository has many Internet Relay Chat servers. This section "
23238
"explains how to install and configure the original IRC server "
23239
"<application>ircd-irc2</application>."
23240
msgstr ""
23241
23242
#: serverguide/C/chat.xml:39(para)
23243
msgid ""
23244
"To install <application>ircd-irc2</application>, run the following command "
23245
"in the command prompt:"
23246
msgstr ""
23247
23248
#: serverguide/C/chat.xml:45(command)
23249
msgid "sudo apt-get install ircd-irc2"
23250
msgstr "sudo apt-get install ircd-irc2"
23251
23252
#: serverguide/C/chat.xml:48(para)
23253
msgid ""
23254
"The configuration files are stored in <filename>/etc/ircd</filename> "
23255
"directory. The documents are available in <filename>/usr/share/doc/ircd-"
23256
"irc2</filename> directory."
23257
msgstr ""
23258
23259
#: serverguide/C/chat.xml:59(para)
23260
msgid ""
23261
"The IRC settings can be done in the configuration file "
23262
"<filename>/etc/ircd/ircd.conf</filename>. You can set the IRC host name in "
23263
"this file by editing the following line:"
23264
msgstr ""
23265
23266
#: serverguide/C/chat.xml:64(programlisting)
23267
#, no-wrap
23268
msgid ""
23269
"\n"
23270
"M:irc.localhost::Debian ircd default configuration::000A\n"
23271
msgstr ""
23272
"\n"
23273
"M:irc.localhost::Debian ircd default configuration::000A\n"
23274
23275
#: serverguide/C/chat.xml:68(para)
23276
msgid ""
23277
"Please make sure you add DNS aliases for the IRC host name. For instance, if "
23278
"you set irc.livecipher.com as IRC host name, please make sure "
23279
"irc.livecipher.com is resolvable in your Domain Name Server. The IRC host "
23280
"name should not be same as the host name."
23281
msgstr ""
23282
23283
#: serverguide/C/chat.xml:75(para)
23284
msgid ""
23285
"The IRC admin details can be configured by editting the following line:"
23286
msgstr ""
23287
23288
#: serverguide/C/chat.xml:80(programlisting)
23289
#, no-wrap
23290
msgid ""
23291
"\n"
23292
"A:Organization, IRC dept.:Daemon <ircd@example.irc.org>:Client "
23293
"Server::IRCnet:\n"
23294
msgstr ""
23295
"\n"
23296
"A:Organization, IRC dept.:Daemon <ircd@example.irc.org>:Client "
23297
"Server::IRCnet:\n"
23298
23299
#: serverguide/C/chat.xml:84(para)
23300
msgid ""
23301
"You should add specific lines to configure the list of IRC ports to listen "
23302
"on, to configure Operator credentials, to configure client authentication, "
23303
"etc. For details, please refer to the example configuration file "
23304
"<filename>/usr/share/doc/ircd-irc2/ircd.conf.example.gz</filename>."
23305
msgstr ""
23306
23307
#: serverguide/C/chat.xml:92(para)
23308
msgid ""
23309
"The IRC banner to be displayed in the IRC client, when the user connects to "
23310
"the server can be set in <filename>/etc/ircd/ircd.motd</filename> file."
23311
msgstr ""
23312
23313
#: serverguide/C/chat.xml:97(para)
23314
msgid ""
23315
"After making necessary changes to the configuration file, you can restart "
23316
"the IRC server using following command:"
23317
msgstr ""
23318
23319
#: serverguide/C/chat.xml:101(programlisting)
23320
#, no-wrap
23321
msgid ""
23322
"\n"
23323
"sudo /etc/init.d/ircd-irc2 restart\n"
23324
msgstr ""
23325
"\n"
23326
"sudo /etc/init.d/ircd-irc2 restart\n"
23327
23328
#: serverguide/C/chat.xml:109(para)
23329
msgid ""
23330
"You may also be interested to take a look at other IRC servers available in "
23331
"Ubuntu Repository. It includes, <application>ircd-ircu</application> and "
23332
"<application>ircd-hybrid</application>."
23333
msgstr ""
23334
23335
#: serverguide/C/chat.xml:117(para)
23336
msgid ""
23337
"Refer to <ulink url=\"http://www.irc.org/tech_docs/ircnet/faq.html\">IRCD "
23338
"FAQ</ulink> for more details about the IRC Server."
23339
msgstr ""
23340
23341
#: serverguide/C/chat.xml:124(para)
23342
msgid ""
23343
"Also, the <ulink url=\"https://help.ubuntu.com/community/ircd\">Ubuntu Wiki "
23344
"IRCD</ulink> page has more information."
23345
msgstr ""
23346
23347
#: serverguide/C/chat.xml:132(title)
23348
msgid "Jabber Instant Messaging Server"
23349
msgstr ""
23350
23351
#: serverguide/C/chat.xml:134(para)
23352
msgid ""
23353
"<emphasis>Jabber</emphasis> a popular instant message protocol is based on "
23354
"XMPP, an open standard for instant messaging, and used by many popular "
23355
"applications. This section covers setting up a <emphasis>Jabberd "
23356
"2</emphasis> server on a local LAN. This configuration can also be adapted "
23357
"to providing messaging services to users over the Internet."
23358
msgstr ""
23359
23360
#: serverguide/C/chat.xml:143(para)
23361
msgid "To install <application>jabberd2</application>, in a terminal enter:"
23362
msgstr ""
23363
23364
#: serverguide/C/chat.xml:148(command)
23365
msgid "sudo apt-get install jabberd2"
23366
msgstr "sudo apt-get install jabberd2"
23367
23368
#: serverguide/C/chat.xml:155(para)
23369
msgid ""
23370
"A couple of XML configuration files will be used to configure "
23371
"<application>jabberd2</application> for <emphasis>Berkely DB</emphasis> user "
23372
"authentication. This is a very simple form of authentication. However, "
23373
"<application>jabberd2</application> can be configured to use LDAP, MySQL, "
23374
"Postgresql, etc for for user authentication."
23375
msgstr ""
23376
23377
#: serverguide/C/chat.xml:162(para)
23378
msgid "First, edit <filename>/etc/jabberd2/sm.xml</filename> changing:"
23379
msgstr ""
23380
23381
#: serverguide/C/chat.xml:166(programlisting)
23382
#, no-wrap
23383
msgid ""
23384
"\n"
23385
" <id>jabber.example.com</id>\n"
23386
msgstr ""
23387
"\n"
23388
" <id>jabber.example.com</id>\n"
23389
23390
#: serverguide/C/chat.xml:171(para)
23391
msgid ""
23392
"Replace <emphasis>jabber.example.com</emphasis> with the hostname, or other "
23393
"id, of your server."
23394
msgstr ""
23395
23396
#: serverguide/C/chat.xml:176(para)
23397
msgid "Now in the <storage> section change the <driver> to:"
23398
msgstr ""
23399
23400
#: serverguide/C/chat.xml:180(programlisting)
23401
#, no-wrap
23402
msgid ""
23403
"\n"
23404
" <driver>db</driver>\n"
23405
msgstr ""
23406
"\n"
23407
" <driver>db</driver>\n"
23408
23409
#: serverguide/C/chat.xml:184(para)
23410
msgid ""
23411
"Next, edit <filename>/etc/jabberd2/c2s.xml</filename> in the "
23412
"<emphasis><local></emphasis> section change:"
23413
msgstr ""
23414
23415
#: serverguide/C/chat.xml:188(programlisting)
23416
#, no-wrap
23417
msgid ""
23418
"\n"
23419
" <id>jabber.example.com</id>\n"
23420
msgstr ""
23421
"\n"
23422
" <id>jabber.example.com</id>\n"
23423
23424
#: serverguide/C/chat.xml:192(para)
23425
msgid ""
23426
"And in the <authreg> section adjust the <module> section to:"
23427
msgstr ""
23428
23429
#: serverguide/C/chat.xml:196(programlisting)
23430
#, no-wrap
23431
msgid ""
23432
"\n"
23433
" <module>db</module>\n"
23434
msgstr ""
23435
"\n"
23436
" <module>db</module>\n"
23437
23438
#: serverguide/C/chat.xml:200(para)
23439
msgid ""
23440
"Finally, restart <application>jabberd2</application> to enable the new "
23441
"settings:"
23442
msgstr ""
23443
23444
#: serverguide/C/chat.xml:205(command)
23445
msgid "sudo /etc/init.d/jabberd2 restart"
23446
msgstr "sudo /etc/init.d/jabberd2 restart"
23447
23448
#: serverguide/C/chat.xml:208(para)
23449
msgid ""
23450
"You should now be able to connect to the server using a Jabber client like "
23451
"<application>Pidgin</application> for example."
23452
msgstr ""
23453
23454
#: serverguide/C/chat.xml:213(para)
23455
msgid ""
23456
"The advantage of using Berkeley DB for user data is that after being "
23457
"configured no additional maintenance is required. If you need more control "
23458
"over user accounts and credentials another authentication method is "
23459
"recommended."
23460
msgstr ""
23461
23462
#: serverguide/C/chat.xml:225(para)
23463
msgid ""
23464
"The <ulink url=\"http://codex.xiaoka.com/wiki/jabberd2:start\">Jabberd2 Web "
23465
"Site</ulink> contains more details on configuring "
23466
"<application>Jabberd2</application>."
23467
msgstr ""
23468
23469
#: serverguide/C/chat.xml:231(para)
23470
msgid ""
23471
"For more authentication options see the <ulink "
23472
"url=\"http://jabberd2.xiaoka.com/wiki/InstallGuide\">Jabberd2 Install "
23473
"Guide</ulink>."
23474
msgstr ""
23475
23476
#: serverguide/C/chat.xml:236(para)
23477
msgid ""
23478
"Also, the <ulink "
23479
"url=\"https://help.ubuntu.com/community/SettingUpJabberServer\">Setting Up "
23480
"Jabber Server Ubuntu Wiki</ulink> page has more information."
23481
msgstr ""
23482
23483
#: serverguide/C/backups.xml:13(title)
23484
msgid "Backups"
23485
msgstr "Salvaments"
23486
23487
#: serverguide/C/backups.xml:14(para)
23488
msgid ""
23489
"There are many ways to backup an Ubuntu installation. The most important "
23490
"thing about backups is to develop a <emphasis>backup plan</emphasis> "
23491
"consisting of what to backup, where to back it up to, and how to restore it."
23492
msgstr ""
23493
23494
#: serverguide/C/backups.xml:18(para)
23495
msgid ""
23496
"The following sections discuss various ways of accomplishing these tasks."
23497
msgstr ""
23498
23499
#: serverguide/C/backups.xml:22(title)
23500
msgid "Shell Scripts"
23501
msgstr "Escriptes Shell"
23502
23503
#: serverguide/C/backups.xml:23(para)
23504
msgid ""
23505
"One of the simplest ways to backup a system is using a <emphasis>shell "
23506
"script</emphasis>. For example, a script can be used to configure which "
23507
"directories to backup, and use those directories as arguments to the "
23508
"<application>tar</application> utility creating an archive file. The archive "
23509
"file can then be moved or copied to another location. The archive can also "
23510
"be created on a remote file system such as an <emphasis>NFS</emphasis> mount."
23511
msgstr ""
23512
23513
#: serverguide/C/backups.xml:29(para)
23514
msgid ""
23515
"The <application>tar</application> utility creates one archive file out of "
23516
"many files or directories. <application>tar</application> can also filter "
23517
"the files through compression utilities reducing the size of the archive "
23518
"file."
23519
msgstr ""
23520
23521
#: serverguide/C/backups.xml:35(title)
23522
msgid "Simple Shell Script"
23523
msgstr "Escript shell simple"
23524
23525
#: serverguide/C/backups.xml:36(para)
23526
msgid ""
23527
"The following shell script uses <application>tar</application> to create an "
23528
"archive file on a remotely mounted NFS file system. The archive filename is "
23529
"determined using additional command line utilities."
23530
msgstr ""
23531
23532
#: serverguide/C/backups.xml:40(programlisting)
23533
#, no-wrap
23534
msgid ""
23535
"\n"
23536
"#!/bin/sh\n"
23537
"####################################\n"
23538
"#\n"
23539
"# Backup to NFS mount script.\n"
23540
"#\n"
23541
"####################################\n"
23542
"\n"
23543
"# What to backup. \n"
23544
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23545
"\n"
23546
"# Where to backup to.\n"
23547
"dest=\"/mnt/backup\"\n"
23548
"\n"
23549
"# Create archive filename.\n"
23550
"day=$(date +%A)\n"
23551
"hostname=$(hostname -s)\n"
23552
"archive_file=\"$hostname-$day.tgz\"\n"
23553
"\n"
23554
"# Print start status message.\n"
23555
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
23556
"date\n"
23557
"echo\n"
23558
"\n"
23559
"# Backup the files using tar.\n"
23560
"tar czf $dest/$archive_file $backup_files\n"
23561
"\n"
23562
"# Print end status message.\n"
23563
"echo\n"
23564
"echo \"Backup finished\"\n"
23565
"date\n"
23566
"\n"
23567
"# Long listing of files in $dest to check file sizes.\n"
23568
"ls -lh $dest\n"
23569
msgstr ""
23570
23571
#: serverguide/C/backups.xml:77(para)
23572
msgid ""
23573
"<emphasis>$backup_files:</emphasis> a variable listing which directories you "
23574
"would like to backup. The list should be customized to fit your needs."
23575
msgstr ""
23576
23577
#: serverguide/C/backups.xml:83(para)
23578
msgid ""
23579
"<emphasis>$day:</emphasis> a variable holding the day of the week (Monday, "
23580
"Tuesday, Wednesday, etc). This is used to create an archive file for each "
23581
"day of the week, giving a backup history of seven days. There are other ways "
23582
"to accomplish this including other ways using the "
23583
"<application>date</application> utility."
23584
msgstr ""
23585
23586
#: serverguide/C/backups.xml:90(para)
23587
msgid ""
23588
"<emphasis>$hostname:</emphasis> variable containing the "
23589
"<emphasis>short</emphasis> hostname of the system. Using the hostname in the "
23590
"archive filename gives you the option of placing daily archive files from "
23591
"multiple systems in the same directory."
23592
msgstr ""
23593
23594
#: serverguide/C/backups.xml:97(para)
23595
msgid "<emphasis>$archive_file:</emphasis> the full archive filename."
23596
msgstr "<emphasis>$archive_file :</emphasis> lo nom complet de l'archiu."
23597
23598
#: serverguide/C/backups.xml:102(para)
23599
msgid ""
23600
"<emphasis>$dest:</emphasis> destination of the archive file. The directory "
23601
"needs to be created and in this case <emphasis>mounted</emphasis> before "
23602
"executing the backup script. See <xref linkend=\"network-file-system\"/> for "
23603
"details using <emphasis>NFS</emphasis>."
23604
msgstr ""
23605
23606
#: serverguide/C/backups.xml:109(para)
23607
msgid ""
23608
"<emphasis>status messages:</emphasis> optional messages printed to the "
23609
"console using the <application>echo</application> utility."
23610
msgstr ""
23611
23612
#: serverguide/C/backups.xml:115(para)
23613
msgid ""
23614
"<emphasis>tar czf $dest/$archive_file $backup_files:</emphasis> the "
23615
"<application>tar</application> command used to create the archive file."
23616
msgstr ""
23617
23618
#: serverguide/C/backups.xml:121(para)
23619
msgid "<emphasis>c:</emphasis> creates an archive."
23620
msgstr ""
23621
23622
#: serverguide/C/backups.xml:126(para)
23623
msgid ""
23624
"<emphasis>z:</emphasis> filter the archive through the "
23625
"<application>gzip</application> utility compressing the archive."
23626
msgstr ""
23627
23628
#: serverguide/C/backups.xml:131(para)
23629
msgid ""
23630
"<emphasis>f:</emphasis> use archive file. Otherwise the "
23631
"<application>tar</application> output will be sent to STDOUT."
23632
msgstr ""
23633
23634
#: serverguide/C/backups.xml:138(para)
23635
msgid ""
23636
"<emphasis>ls -lh $dest:</emphasis> optional statement prints a <emphasis>-"
23637
"l</emphasis> long listing in <emphasis>-h</emphasis> human readable format "
23638
"of the destination directory. This is useful for a quick file size check of "
23639
"the archive file. This check should not replace testing the archive file."
23640
msgstr ""
23641
23642
#: serverguide/C/backups.xml:145(para)
23643
msgid ""
23644
"This is a simple example of a backup shell script. There are large amount of "
23645
"options that can be included in a backup script. See <xref linkend=\"backup-"
23646
"shellscript-references\"/> for links to resources providing more in depth "
23647
"shell scripting information."
23648
msgstr ""
23649
23650
#: serverguide/C/backups.xml:152(title)
23651
msgid "Executing the Script"
23652
msgstr "Execucion de l'escript"
23653
23654
#: serverguide/C/backups.xml:154(title)
23655
msgid "Executing from a Terminal"
23656
msgstr "Execuicon a partir d'un terminal"
23657
23658
#: serverguide/C/backups.xml:155(para)
23659
msgid ""
23660
"The simplest way of executing the above backup script is to copy and paste "
23661
"the contents into a file. <filename>backup.sh</filename> for example. Then "
23662
"from a terminal prompt:"
23663
msgstr ""
23664
23665
#: serverguide/C/backups.xml:160(command)
23666
msgid "sudo bash backup.sh"
23667
msgstr "sudo bash backup.sh"
23668
23669
#: serverguide/C/backups.xml:162(para)
23670
msgid ""
23671
"This is a great way to test the script to make sure everything works as "
23672
"expected."
23673
msgstr ""
23674
23675
#: serverguide/C/backups.xml:167(title)
23676
msgid "Executing with cron"
23677
msgstr "Execucion amb cron"
23678
23679
#: serverguide/C/backups.xml:168(para)
23680
msgid ""
23681
"The <application>cron</application> utility can be used to automate the "
23682
"script execution. The <application>cron</application> daemon allows the "
23683
"execution of scripts, or commands, at a specified time and date."
23684
msgstr ""
23685
23686
#: serverguide/C/backups.xml:172(para)
23687
msgid ""
23688
"<application>cron</application> is configured through entries in a "
23689
"<filename>crontab</filename> file. <filename>crontab</filename> files are "
23690
"separated into fields:"
23691
msgstr ""
23692
23693
#: serverguide/C/backups.xml:176(programlisting)
23694
#, no-wrap
23695
msgid ""
23696
"\n"
23697
"# m h dom mon dow command\n"
23698
msgstr ""
23699
23700
#: serverguide/C/backups.xml:181(para)
23701
msgid ""
23702
"<emphasis>m:</emphasis> minute the command executes on between 0 and 59."
23703
msgstr ""
23704
23705
#: serverguide/C/backups.xml:186(para)
23706
msgid ""
23707
"<emphasis>h:</emphasis> hour the command executes on between 0 and 23."
23708
msgstr ""
23709
23710
#: serverguide/C/backups.xml:191(para)
23711
msgid "<emphasis>dom:</emphasis> day of month the command executes on."
23712
msgstr ""
23713
23714
#: serverguide/C/backups.xml:196(para)
23715
msgid ""
23716
"<emphasis>mon:</emphasis> the month the command executes on between 1 and 12."
23717
msgstr ""
23718
23719
#: serverguide/C/backups.xml:201(para)
23720
msgid ""
23721
"<emphasis>dow:</emphasis> the day of the week the command executes on "
23722
"between 0 and 7. Sunday may be specified by using 0 or 7, both values are "
23723
"valid."
23724
msgstr ""
23725
23726
#: serverguide/C/backups.xml:206(para)
23727
msgid "<emphasis>command:</emphasis> the command to execute."
23728
msgstr ""
23729
23730
#: serverguide/C/backups.xml:211(para)
23731
msgid ""
23732
"To add or change entries in a <filename>crontab</filename> file the "
23733
"<application>crontab -e</application> command should be used. Also, the "
23734
"contents of a <filename>crontab</filename> file can be viewed using the "
23735
"<application>crontab -l</application> command."
23736
msgstr ""
23737
23738
#: serverguide/C/backups.xml:215(para)
23739
msgid ""
23740
"To execute the <application>backup.sh</application> script listed above "
23741
"using <application>cron</application>. Enter the following from a terminal "
23742
"prompt:"
23743
msgstr ""
23744
23745
#: serverguide/C/backups.xml:220(command)
23746
msgid "sudo crontab -e"
23747
msgstr "sudo crontab -e"
23748
23749
#: serverguide/C/backups.xml:223(para)
23750
msgid ""
23751
"Using <application>sudo</application> with the <application>crontab -"
23752
"e</application> command edits the <emphasis>root</emphasis> user's crontab. "
23753
"This is necessary if you are backing up directories only the root user has "
23754
"access to."
23755
msgstr ""
23756
23757
#: serverguide/C/backups.xml:228(para)
23758
msgid "Add the following entry to the <filename>crontab</filename> file:"
23759
msgstr ""
23760
23761
#: serverguide/C/backups.xml:231(programlisting)
23762
#, no-wrap
23763
msgid ""
23764
"\n"
23765
"# m h dom mon dow command\n"
23766
"0 0 * * * bash /usr/local/bin/backup.sh\n"
23767
msgstr ""
23768
23769
#: serverguide/C/backups.xml:235(para)
23770
msgid ""
23771
"The <application>backup.sh</application> script will now be executed every "
23772
"day at 12:00 am."
23773
msgstr ""
23774
23775
#: serverguide/C/backups.xml:239(para)
23776
msgid ""
23777
"The <application>backup.sh</application> script will need to be copied to "
23778
"the <filename>/usr/local/bin/</filename> directory in order for this entry "
23779
"to execute properly. The script can reside anywhere on the file system "
23780
"simply change the script path appropriately."
23781
msgstr ""
23782
23783
#: serverguide/C/backups.xml:244(para)
23784
msgid ""
23785
"For more in depth <application>crontab</application> options see <xref "
23786
"linkend=\"backup-shellscript-references\"/>."
23787
msgstr ""
23788
23789
#: serverguide/C/backups.xml:250(title)
23790
msgid "Restoring from the Archive"
23791
msgstr ""
23792
23793
#: serverguide/C/backups.xml:251(para)
23794
msgid ""
23795
"Once an archive has been created it is important to test the archive. The "
23796
"archive can be tested by listing the files it contains, but the best test is "
23797
"to <emphasis>restore</emphasis> a file from the archive."
23798
msgstr ""
23799
23800
#: serverguide/C/backups.xml:257(para)
23801
msgid "To see a listing of the archive contents. From a terminal prompt:"
23802
msgstr ""
23803
23804
#: serverguide/C/backups.xml:261(command)
23805
msgid "tar -tzvf /mnt/backup/host-Monday.tgz"
23806
msgstr "tar -tzvf /mnt/backup/host-Monday.tgz"
23807
23808
#: serverguide/C/backups.xml:265(para)
23809
msgid "To restore a file from the archive to a different directory enter:"
23810
msgstr ""
23811
23812
#: serverguide/C/backups.xml:269(command)
23813
msgid "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
23814
msgstr "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
23815
23816
#: serverguide/C/backups.xml:271(para)
23817
msgid ""
23818
"The <emphasis>-C</emphasis> option to <application>tar</application> "
23819
"redirects the extracted files to the specified directory. The above example "
23820
"will extract the <filename>/etc/hosts</filename> file to "
23821
"<filename>/tmp/etc/hosts</filename>. <application>tar</application> "
23822
"recreates the directory structure that it contains."
23823
msgstr ""
23824
23825
#: serverguide/C/backups.xml:276(para)
23826
msgid ""
23827
"Also, notice the leading <emphasis>\"/\"</emphasis> is left off the path of "
23828
"the file to restore."
23829
msgstr ""
23830
23831
#: serverguide/C/backups.xml:281(para)
23832
msgid "To restore all files in the archive enter the following:"
23833
msgstr ""
23834
23835
#: serverguide/C/backups.xml:285(command)
23836
msgid "cd /"
23837
msgstr "cd /"
23838
23839
#: serverguide/C/backups.xml:286(command)
23840
msgid "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
23841
msgstr "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
23842
23843
#: serverguide/C/backups.xml:291(para)
23844
msgid "This will overwrite the files currently on the file system."
23845
msgstr ""
23846
23847
#: serverguide/C/backups.xml:300(para)
23848
msgid ""
23849
"For more information on shell scripting see the <ulink "
23850
"url=\"http://tldp.org/LDP/abs/html/\">Advanced Bash-Scripting Guide</ulink>"
23851
msgstr ""
23852
23853
#: serverguide/C/backups.xml:305(para)
23854
msgid ""
23855
"The book <ulink url=\"http://safari.samspublishing.com/0672323583\">Teach "
23856
"Yourself Shell Programming in 24 Hours</ulink> is available online and a "
23857
"great resource for shell scripting."
23858
msgstr ""
23859
23860
#: serverguide/C/backups.xml:311(para)
23861
msgid ""
23862
"The <ulink url=\"https://help.ubuntu.com/community/CronHowto\">CronHowto "
23863
"Wiki Page</ulink> contains details on advanced "
23864
"<application>cron</application> options."
23865
msgstr ""
23866
23867
#: serverguide/C/backups.xml:318(para)
23868
msgid ""
23869
"See the <ulink url=\"http://www.gnu.org/software/tar/manual/index.html\">GNU "
23870
"tar Manual</ulink> for more <application>tar</application> options."
23871
msgstr ""
23872
23873
#: serverguide/C/backups.xml:324(para)
23874
msgid ""
23875
"The Wikipedia <ulink "
23876
"url=\"http://en.wikipedia.org/wiki/Backup_rotation_scheme\">Backup Rotation "
23877
"Scheme</ulink> article contains information on other backup rotation schemes."
23878
msgstr ""
23879
23880
#: serverguide/C/backups.xml:330(para)
23881
msgid ""
23882
"The shell script uses <application>tar</application> to create the archive, "
23883
"but there many other command line utilities that can be used. For example:"
23884
msgstr ""
23885
23886
#: serverguide/C/backups.xml:336(para)
23887
msgid ""
23888
"<ulink url=\"http://www.gnu.org/software/cpio/\">cpio</ulink>: used to copy "
23889
"files to and from archives."
23890
msgstr ""
23891
23892
#: serverguide/C/backups.xml:341(para)
23893
msgid ""
23894
"<ulink url=\"http://www.gnu.org/software/coreutils/\">dd</ulink>: part of "
23895
"the <application>coreutils</application> package. A low level utility that "
23896
"can copy data from one format to another"
23897
msgstr ""
23898
23899
#: serverguide/C/backups.xml:347(para)
23900
msgid ""
23901
"<ulink url=\"http://www.rsnapshot.org/\">rsnapshot</ulink>: a file system "
23902
"snap shot utility used to create copies of an entire file system."
23903
msgstr ""
23904
23905
#: serverguide/C/backups.xml:358(title)
23906
msgid "Archive Rotation"
23907
msgstr ""
23908
23909
#: serverguide/C/backups.xml:359(para)
23910
msgid ""
23911
"The shell script in section <xref linkend=\"backup-shellscripts\"/> only "
23912
"allows for seven different archives. For a server whose data doesn't change "
23913
"often this may be enough. If the server has a large amount of data a more "
23914
"robust rotation scheme should be used."
23915
msgstr ""
23916
23917
#: serverguide/C/backups.xml:365(title)
23918
msgid "Rotating NFS Archives"
23919
msgstr ""
23920
23921
#: serverguide/C/backups.xml:366(para)
23922
msgid ""
23923
"In this section the shell script will be slightly modified to implement a "
23924
"grandfather-father-son rotation scheme (monthly-weekly-daily):"
23925
msgstr ""
23926
23927
#: serverguide/C/backups.xml:372(para)
23928
msgid ""
23929
"The rotation will do a <emphasis>daily</emphasis> backup Sunday through "
23930
"Friday."
23931
msgstr ""
23932
23933
#: serverguide/C/backups.xml:377(para)
23934
msgid ""
23935
"On Saturday a <emphasis>weekly</emphasis> backup is done giving you four "
23936
"weekly backups a month."
23937
msgstr ""
23938
23939
#: serverguide/C/backups.xml:382(para)
23940
msgid ""
23941
"The <emphasis>monthly</emphasis> backup is done on the first of the month "
23942
"rotating two monthly backups based on if the month is odd or even."
23943
msgstr ""
23944
23945
#: serverguide/C/backups.xml:388(para)
23946
msgid "Here is the new script:"
23947
msgstr ""
23948
23949
#: serverguide/C/backups.xml:391(programlisting)
23950
#, no-wrap
23951
msgid ""
23952
"\n"
23953
"#!/bin/bash\n"
23954
"####################################\n"
23955
"#\n"
23956
"# Backup to NFS mount script with\n"
23957
"# grandfather-father-son rotation.\n"
23958
"#\n"
23959
"####################################\n"
23960
"\n"
23961
"# What to backup. \n"
23962
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
23963
"\n"
23964
"# Where to backup to.\n"
23965
"dest=\"/mnt/backup\"\n"
23966
"\n"
23967
"# Setup variables for the archive filename.\n"
23968
"day=$(date +%A)\n"
23969
"hostname=$(hostname -s)\n"
23970
"\n"
23971
"# Find which week of the month 1-4 it is.\n"
23972
"day_num=$(date +%d)\n"
23973
"if (( $day_num <= 7 )); then\n"
23974
" week_file=\"$hostname-week1.tgz\"\n"
23975
"elif (( $day_num > 7 && $day_num <= 14 )); then\n"
23976
" week_file=\"$hostname-week2.tgz\"\n"
23977
"elif (( $day_num > 14 && $day_num <= 21 )); then\n"
23978
" week_file=\"$hostname-week3.tgz\"\n"
23979
"elif (( $day_num > 21 && $day_num < 32 )); then\n"
23980
" week_file=\"$hostname-week4.tgz\"\n"
23981
"fi\n"
23982
"\n"
23983
"# Find if the Month is odd or even.\n"
23984
"month_num=$(date +%m)\n"
23985
"month=$(expr $month_num % 2)\n"
23986
"if [ $month -eq 0 ]; then\n"
23987
" month_file=\"$hostname-month2.tgz\"\n"
23988
"else\n"
23989
" month_file=\"$hostname-month1.tgz\"\n"
23990
"fi\n"
23991
"\n"
23992
"# Create archive filename.\n"
23993
"if [ $day_num == 1 ]; then\n"
23994
"\tarchive_file=$month_file\n"
23995
"elif [ $day != \"Saturday\" ]; then\n"
23996
" archive_file=\"$hostname-$day.tgz\"\n"
23997
"else \n"
23998
"\tarchive_file=$week_file\n"
23999
"fi\n"
24000
"\n"
24001
"# Print start status message.\n"
24002
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
24003
"date\n"
24004
"echo\n"
24005
"\n"
24006
"# Backup the files using tar.\n"
24007
"tar czf $dest/$archive_file $backup_files\n"
24008
"\n"
24009
"# Print end status message.\n"
24010
"echo\n"
24011
"echo \"Backup finished\"\n"
24012
"date\n"
24013
"\n"
24014
"# Long listing of files in $dest to check file sizes.\n"
24015
"ls -lh $dest/\n"
24016
msgstr ""
24017
24018
#: serverguide/C/backups.xml:456(para)
24019
msgid ""
24020
"The script can be executed using the same methods as in <xref "
24021
"linkend=\"backup-executing-shellscript\"/>."
24022
msgstr ""
24023
24024
#: serverguide/C/backups.xml:459(para)
24025
msgid ""
24026
"It is good practice to take backup media off site in case of a disaster. In "
24027
"the shell script example the backup media is another server providing an NFS "
24028
"share. In all likelihood taking the NFS server to another location would not "
24029
"be practical. Depending upon connection speeds it may be an option to copy "
24030
"the archive file over a WAN link to a server in another location."
24031
msgstr ""
24032
24033
#: serverguide/C/backups.xml:465(para)
24034
msgid ""
24035
"Another option is to copy the archive file to an external hard drive which "
24036
"can then be taken off site. Since the price of external hard drives continue "
24037
"to decrease it may be cost affective to use two drives for each archive "
24038
"level. This would allow you to have one external drive attached to the "
24039
"backup server and one in another location."
24040
msgstr ""
24041
24042
#: serverguide/C/backups.xml:472(title)
24043
msgid "Tape Drives"
24044
msgstr ""
24045
24046
#: serverguide/C/backups.xml:473(para)
24047
msgid ""
24048
"A tape drive attached to the server can be used instead of a NFS share. "
24049
"Using a tape drive simplifies archive rotation, and taking the media off "
24050
"site as well."
24051
msgstr ""
24052
24053
#: serverguide/C/backups.xml:477(para)
24054
msgid ""
24055
"When using a tape drive the filename portions of the script aren't needed "
24056
"because the date is sent directly to the tape device. Some commands to "
24057
"manipulate the tape are needed. This is accomplished using "
24058
"<application>mt</application>, a magnetic tape control utility part of the "
24059
"<application>cpio</application> package."
24060
msgstr ""
24061
24062
#: serverguide/C/backups.xml:482(para)
24063
msgid "Here is the shell script modified to use a tape drive:"
24064
msgstr ""
24065
24066
#: serverguide/C/backups.xml:485(programlisting)
24067
#, no-wrap
24068
msgid ""
24069
"\n"
24070
"#!/bin/bash\n"
24071
"####################################\n"
24072
"#\n"
24073
"# Backup to tape drive script.\n"
24074
"#\n"
24075
"####################################\n"
24076
"\n"
24077
"# What to backup. \n"
24078
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
24079
"\n"
24080
"# Where to backup to.\n"
24081
"dest=\"/dev/st0\"\n"
24082
"\n"
24083
"# Print start status message.\n"
24084
"echo \"Backing up $backup_files to $dest\"\n"
24085
"date\n"
24086
"echo\n"
24087
"\n"
24088
"# Make sure the tape is rewound.\n"
24089
"mt -f $dest rewind\n"
24090
"\n"
24091
"# Backup the files using tar.\n"
24092
"tar czf $dest $backup_files\n"
24093
"\n"
24094
"# Rewind and eject the tape.\n"
24095
"mt -f $dest rewoffl\n"
24096
"\n"
24097
"# Print end status message.\n"
24098
"echo\n"
24099
"echo \"Backup finished\"\n"
24100
"date\n"
24101
msgstr ""
24102
24103
#: serverguide/C/backups.xml:519(para)
24104
msgid ""
24105
"The default device name for a SCSI tape drive is "
24106
"<filename>/dev/st0</filename>. Use the appropriate device path for your "
24107
"system."
24108
msgstr ""
24109
24110
#: serverguide/C/backups.xml:524(para)
24111
msgid ""
24112
"Restoring from a tape drive is basically the same as restoring from a file. "
24113
"Simply rewind the tape and use the device path instead of a file path. For "
24114
"example to restore the <filename>/etc/hosts</filename> file to "
24115
"<filename>/tmp/etc/hosts</filename>:"
24116
msgstr ""
24117
24118
#: serverguide/C/backups.xml:529(command)
24119
msgid "mt -f /dev/st0 rewind"
24120
msgstr ""
24121
24122
#: serverguide/C/backups.xml:530(command)
24123
msgid "tar -xzf /dev/st0 -C /tmp etc/hosts"
24124
msgstr ""
24125
24126
#: serverguide/C/backups.xml:535(title)
24127
msgid "Bacula"
24128
msgstr "Bacula"
24129
24130
#: serverguide/C/backups.xml:536(para)
24131
msgid ""
24132
"<application>Bacula</application> is a backup program enabling you to "
24133
"backup, restore, and verify data across your network. There are Bacula "
24134
"clients for Linux, Windows, and Mac OSX. Making it a cross platform network "
24135
"wide solution."
24136
msgstr ""
24137
24138
#: serverguide/C/backups.xml:542(para)
24139
msgid ""
24140
"<application>Bacula</application> is made up of several components and "
24141
"services used to manage which files to backup and where to back them up to:"
24142
msgstr ""
24143
24144
#: serverguide/C/backups.xml:548(para)
24145
msgid ""
24146
"<application>Bacula Director:</application> a service that controls all "
24147
"backup, restore, verify, and archive operations."
24148
msgstr ""
24149
24150
#: serverguide/C/backups.xml:553(para)
24151
msgid ""
24152
"<application>Bacula Console:</application> an application allowing "
24153
"communication with the Director. There are three versions of the Console:"
24154
msgstr ""
24155
24156
#: serverguide/C/backups.xml:558(para)
24157
msgid "Text based command line version."
24158
msgstr ""
24159
24160
#: serverguide/C/backups.xml:559(para)
24161
msgid "Gnome based GTK+ Graphical User Interface (GUI) interface."
24162
msgstr "Version grafica GTK+ (Gnome)."
24163
24164
#: serverguide/C/backups.xml:560(para)
24165
msgid "wxWidgets GUI interface."
24166
msgstr "Version grafica wxWidgets."
24167
24168
#: serverguide/C/backups.xml:564(para)
24169
msgid ""
24170
"<application>Bacula File:</application> also known as the "
24171
"<application>Bacula Client</application> program. This application is "
24172
"installed on machines to be backed up, and is responsible for the data "
24173
"requested by the Director."
24174
msgstr ""
24175
24176
#: serverguide/C/backups.xml:570(para)
24177
msgid ""
24178
"<application>Bacula Storage:</application> the programs that perform the "
24179
"storage and recovery of data to the physical media."
24180
msgstr ""
24181
24182
#: serverguide/C/backups.xml:575(para)
24183
msgid ""
24184
"<application>Bacula Catalog:</application> is responsible for maintaining "
24185
"the file indexes and volume databases for all files backed up, enabling "
24186
"quick location and restoration of archived files. The Catalog supports three "
24187
"different databases MySQL, PostgreSQL, and SQLite."
24188
msgstr ""
24189
24190
#: serverguide/C/backups.xml:581(para)
24191
msgid ""
24192
"<application>Bacula Monitor:</application> allows the monitoring of the "
24193
"Director, File daemons, and Storage daemons. Currently the Monitor is only "
24194
"available as a GTK+ GUI application."
24195
msgstr ""
24196
24197
#: serverguide/C/backups.xml:587(para)
24198
msgid ""
24199
"These services and applications can be run on multiple servers and clients, "
24200
"or they can be installed on one machine if backing up a single disk or "
24201
"volume."
24202
msgstr ""
24203
24204
#: serverguide/C/backups.xml:594(para)
24205
msgid ""
24206
"There are multiple packages containing the different "
24207
"<application>Bacula</application> components. To install Bacula, from a "
24208
"terminal prompt enter:"
24209
msgstr ""
24210
24211
#: serverguide/C/backups.xml:599(command)
24212
msgid "sudo apt-get install bacula"
24213
msgstr "sudo apt-get install bacula"
24214
24215
#: serverguide/C/backups.xml:601(para)
24216
msgid ""
24217
"By default installing the <application>bacula</application> package will use "
24218
"a <application>MySQL</application> database for the Catalog. If you want to "
24219
"use SQLite or PostgreSQL, for the Catalog, install <application>bacula-"
24220
"director-sqlite3</application> or <application>bacula-director-"
24221
"pgsql</application> respectively."
24222
msgstr ""
24223
24224
#: serverguide/C/backups.xml:607(para)
24225
msgid ""
24226
"During the install process you will be asked to supply credentials for the "
24227
"database <emphasis>administrator</emphasis> and the "
24228
"<emphasis>bacula</emphasis> database <emphasis>owner</emphasis>. The "
24229
"database administrator will need to have the appropriate rights to create a "
24230
"database, see <xref linkend=\"mysql\"/> for more information."
24231
msgstr ""
24232
24233
#: serverguide/C/backups.xml:617(para)
24234
msgid ""
24235
"<application>Bacula</application> configuration files are formatted based on "
24236
"<emphasis>resources</emphasis> comprising of <emphasis>directives</emphasis> "
24237
"surrounded by <quote>{}</quote> braces. Each Bacula component has an "
24238
"individual file in the <filename role=\"directory\">/etc/bacula</filename> "
24239
"directory."
24240
msgstr ""
24241
24242
#: serverguide/C/backups.xml:622(para)
24243
msgid ""
24244
"The various <application>Bacula</application> components must authorize "
24245
"themselves to each other. This is accomplished using the "
24246
"<emphasis>password</emphasis> directive. For example, the "
24247
"<emphasis>Storage</emphasis> resource password in the "
24248
"<filename>/etc/bacula/bacula-dir.conf</filename> file must match the "
24249
"<emphasis>Director</emphasis> resource password in "
24250
"<filename>/etc/bacula/bacula-sd.conf</filename>."
24251
msgstr ""
24252
24253
#: serverguide/C/backups.xml:628(para)
24254
msgid ""
24255
"By default the backup job named <emphasis>Client1</emphasis> is configured "
24256
"to archive the <application>Bacula</application> Catalog. If you plan on "
24257
"using the server to backup more than one client you should change the name "
24258
"of this job to something more descriptive. To change the name edit "
24259
"<filename>/etc/bacula/bacula-dir.conf</filename>:"
24260
msgstr ""
24261
24262
#: serverguide/C/backups.xml:633(programlisting)
24263
#, no-wrap
24264
msgid ""
24265
"\n"
24266
"#\n"
24267
"# Define the main nightly save backup job\n"
24268
"# By default, this job will back up to disk in \n"
24269
"Job {\n"
24270
" Name = \"BackupServer\"\n"
24271
" JobDefs = \"DefaultJob\"\n"
24272
" Write Bootstrap = \"/var/lib/bacula/Client1.bsr\"\n"
24273
"}\n"
24274
msgstr ""
24275
24276
#: serverguide/C/backups.xml:644(para)
24277
msgid ""
24278
"The example above changes the job name to <emphasis>BackupServer</emphasis> "
24279
"matching the machine's host name. Replace <quote>BackupServer</quote> with "
24280
"your appropriate hostname, or other descriptive name."
24281
msgstr ""
24282
24283
#: serverguide/C/backups.xml:649(para)
24284
msgid ""
24285
"The <emphasis>Console</emphasis> can be used to query the "
24286
"<emphasis>Director</emphasis> about jobs, but to use the Console with a "
24287
"<emphasis>non-root</emphasis> user, the user needs to be in the "
24288
"<emphasis>bacula</emphasis> group. To add a user to the bacula group enter "
24289
"the following from a terminal:"
24290
msgstr ""
24291
24292
#: serverguide/C/backups.xml:655(command)
24293
msgid "sudo adduser $username bacula"
24294
msgstr "sudo adduser $username bacula"
24295
24296
#: serverguide/C/backups.xml:658(para)
24297
msgid ""
24298
"Replace <emphasis>$username</emphasis> with the actual username. Also, if "
24299
"you are adding the current user to the group you should log out and back in "
24300
"for the new permissions to take effect."
24301
msgstr ""
24302
24303
#: serverguide/C/backups.xml:665(title)
24304
msgid "Localhost Backup"
24305
msgstr ""
24306
24307
#: serverguide/C/backups.xml:666(para)
24308
msgid ""
24309
"This section describes how to backup specified directories on a single host "
24310
"to a local tape drive."
24311
msgstr ""
24312
24313
#: serverguide/C/backups.xml:671(para)
24314
msgid ""
24315
"First, the <emphasis>Storage</emphasis> device needs to be configured. Edit "
24316
"<filename>/etc/bacula/bacula-sd.conf</filename> add:"
24317
msgstr ""
24318
24319
#: serverguide/C/backups.xml:674(programlisting)
24320
#, no-wrap
24321
msgid ""
24322
"\n"
24323
"Device {\n"
24324
" Name = \"Tape Drive\"\n"
24325
" Device Type = tape\n"
24326
" Media Type = DDS-4\n"
24327
" Archive Device = /dev/st0\n"
24328
" Hardware end of medium = No;\n"
24329
" AutomaticMount = yes; # when device opened, read it\n"
24330
" AlwaysOpen = Yes;\n"
24331
" RemovableMedia = yes;\n"
24332
" RandomAccess = no;\n"
24333
" Alert Command = \"sh -c 'tapeinfo -f %c | grep TapeAlert'\"\n"
24334
"}\n"
24335
msgstr ""
24336
"\n"
24337
"Device {\n"
24338
" Name = \"Tape Drive\"\n"
24339
" Device Type = tape\n"
24340
" Media Type = DDS-4\n"
24341
" Archive Device = /dev/st0\n"
24342
" Hardware end of medium = No;\n"
24343
" AutomaticMount = yes; # when device opened, read it\n"
24344
" AlwaysOpen = Yes;\n"
24345
" RemovableMedia = yes;\n"
24346
" RandomAccess = no;\n"
24347
" Alert Command = \"sh -c 'tapeinfo -f %c | grep TapeAlert'\"\n"
24348
"}\n"
24349
24350
#: serverguide/C/backups.xml:688(para)
24351
msgid ""
24352
"The example is for a <emphasis>DDS-4</emphasis> tape drive. Adjust the Media "
24353
"Type and Archive Device to match your hardware."
24354
msgstr ""
24355
24356
#: serverguide/C/backups.xml:691(para)
24357
msgid "You could also uncomment one of the other examples in the file."
24358
msgstr ""
24359
24360
#: serverguide/C/backups.xml:696(para)
24361
msgid ""
24362
"After editing <filename>/etc/bacula/bacula-sd.conf</filename> the "
24363
"<application>Storage</application> daemon will need to be restarted:"
24364
msgstr ""
24365
24366
#: serverguide/C/backups.xml:701(command)
24367
msgid "sudo /etc/init.d/bacula-sd restart"
24368
msgstr "sudo /etc/init.d/bacula-sd restart"
24369
24370
#: serverguide/C/backups.xml:705(para)
24371
msgid ""
24372
"Now add a <emphasis>Storage</emphasis> resource in "
24373
"<filename>/etc/bacula/bacula-dir.conf</filename> to use the new Device:"
24374
msgstr ""
24375
24376
#: serverguide/C/backups.xml:708(programlisting)
24377
#, no-wrap
24378
msgid ""
24379
"\n"
24380
"# Definition of \"Tape Drive\" storage device\n"
24381
"Storage {\n"
24382
" Name = TapeDrive\n"
24383
" # Do not use \"localhost\" here \n"
24384
" Address = backupserver # N.B. Use a fully qualified name "
24385
"here\n"
24386
" SDPort = 9103\n"
24387
" Password = \"Cv70F6pf1t6pBopT4vQOnigDrR0v3LT3Cgkiyj\"\n"
24388
" Device = \"Tape Drive\"\n"
24389
" Media Type = tape\n"
24390
"}\n"
24391
msgstr ""
24392
24393
#: serverguide/C/backups.xml:720(para)
24394
msgid ""
24395
"The <emphasis>Address</emphasis> directive needs to be the Fully Qualified "
24396
"Domain Name (FQDN) of the server. Change <emphasis>backupserver</emphasis> "
24397
"to the actual host name."
24398
msgstr ""
24399
24400
#: serverguide/C/backups.xml:724(para)
24401
msgid ""
24402
"Also, make sure the <emphasis>Password</emphasis> directive matches the "
24403
"password string in <filename>/etc/bacula/bacula-sd.conf</filename>."
24404
msgstr ""
24405
24406
#: serverguide/C/backups.xml:730(para)
24407
msgid ""
24408
"Create a new <emphasis>FileSet</emphasis>, which will determine what "
24409
"directories to backup, by adding:"
24410
msgstr ""
24411
24412
#: serverguide/C/backups.xml:733(programlisting)
24413
#, no-wrap
24414
msgid ""
24415
"\n"
24416
"# LocalhostBacup FileSet.\n"
24417
"FileSet {\n"
24418
" Name = \"LocalhostFiles\"\n"
24419
" Include {\n"
24420
" Options {\n"
24421
" signature = MD5\n"
24422
" compression=GZIP\n"
24423
" }\n"
24424
" File = /etc\n"
24425
" File = /home\n"
24426
" }\n"
24427
"}\n"
24428
msgstr ""
24429
"\n"
24430
"# FileSet de sauvegarde de l'hôte local.\n"
24431
"FileSet {\n"
24432
" Name = \"LocalhostFiles\"\n"
24433
" Include {\n"
24434
" Options {\n"
24435
" signature = MD5\n"
24436
" compression=GZIP\n"
24437
" }\n"
24438
" File = /etc\n"
24439
" File = /home\n"
24440
" }\n"
24441
"}\n"
24442
24443
#: serverguide/C/backups.xml:747(para)
24444
msgid ""
24445
"This <emphasis>FileSet</emphasis> will backup the <filename "
24446
"role=\"directory\">/etc</filename> and <filename "
24447
"role=\"directory\">/home</filename> directories. The "
24448
"<emphasis>Options</emphasis> resource directives configure the FileSet to "
24449
"create a MD5 signature for each file backed up, and to compress the files "
24450
"using GZIP."
24451
msgstr ""
24452
24453
#: serverguide/C/backups.xml:754(para)
24454
msgid "Next, create a new <emphasis>Schedule</emphasis> for the backup job:"
24455
msgstr ""
24456
24457
#: serverguide/C/backups.xml:757(programlisting)
24458
#, no-wrap
24459
msgid ""
24460
"\n"
24461
"# LocalhostBackup Schedule -- Daily.\n"
24462
"Schedule {\n"
24463
" Name = \"LocalhostDaily\"\n"
24464
" Run = Full daily at 00:01\n"
24465
"}\n"
24466
msgstr ""
24467
"\n"
24468
"# Planification de la sauvegarde de l'hôte local -- quotidienne.\n"
24469
"Schedule {\n"
24470
" Name = \"LocalhostDaily\"\n"
24471
" Run = Full daily at 00:01\n"
24472
"}\n"
24473
24474
#: serverguide/C/backups.xml:764(para)
24475
msgid ""
24476
"The job will run every day at 00:01 or 12:01 am. There are many other "
24477
"scheduling options available."
24478
msgstr ""
24479
24480
#: serverguide/C/backups.xml:769(para)
24481
msgid "Finally create the <emphasis>Job</emphasis>:"
24482
msgstr "Per acabar, creatz lo <emphasis>prètzfach</emphasis> :"
24483
24484
#: serverguide/C/backups.xml:772(programlisting)
24485
#, no-wrap
24486
msgid ""
24487
"\n"
24488
"# Localhost backup.\n"
24489
"Job {\n"
24490
" Name = \"LocalhostBackup\"\n"
24491
" JobDefs = \"DefaultJob\"\n"
24492
" Enabled = yes\n"
24493
" Level = Full\n"
24494
" FileSet = \"LocalhostFiles\"\n"
24495
" Schedule = \"LocalhostDaily\"\n"
24496
" Storage = TapeDrive\n"
24497
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
24498
"} \n"
24499
msgstr ""
24500
"\n"
24501
"# salvament de l'òste local.\n"
24502
"Job {\n"
24503
" Name = \"LocalhostBackup\"\n"
24504
" JobDefs = \"DefaultJob\"\n"
24505
" Enabled = yes\n"
24506
" Level = Full\n"
24507
" FileSet = \"LocalhostFiles\"\n"
24508
" Schedule = \"LocalhostDaily\"\n"
24509
" Storage = TapeDrive\n"
24510
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
24511
"} \n"
24512
24513
#: serverguide/C/backups.xml:785(para)
24514
msgid ""
24515
"The job will do a <emphasis>Full</emphasis> backup every day to the tape "
24516
"drive."
24517
msgstr ""
24518
24519
#: serverguide/C/backups.xml:790(para)
24520
msgid ""
24521
"Each tape used will need to have a <emphasis>Label</emphasis>. If the "
24522
"current tape does not have a label <application>Bacula</application> will "
24523
"send an email letting you know. To label a tape using the "
24524
"<application>Console</application> enter the following from a terminal:"
24525
msgstr ""
24526
24527
#: serverguide/C/backups.xml:796(command)
24528
msgid "bconsole"
24529
msgstr "bconsole"
24530
24531
#: serverguide/C/backups.xml:800(para)
24532
msgid "At the Bacula Console prompt enter:"
24533
msgstr ""
24534
24535
#: serverguide/C/backups.xml:804(command)
24536
msgid "label"
24537
msgstr "etiqueta"
24538
24539
#: serverguide/C/backups.xml:808(para)
24540
msgid ""
24541
"You will then be prompted for the <emphasis>Storage</emphasis> resource:"
24542
msgstr ""
24543
24544
#: serverguide/C/backups.xml:818(userinput)
24545
#, no-wrap
24546
msgid "2"
24547
msgstr "2"
24548
24549
#: serverguide/C/backups.xml:812(computeroutput)
24550
#, no-wrap
24551
msgid ""
24552
"\n"
24553
"Automatically selected Catalog: MyCatalog\n"
24554
"Using Catalog \"MyCatalog\"\n"
24555
"The defined Storage resources are:\n"
24556
" 1: File\n"
24557
" 2: TapeDrive\n"
24558
"Select Storage resource (1-2):<placeholder-1/>\n"
24559
msgstr ""
24560
"\n"
24561
"Automatically selected Catalog: MyCatalog\n"
24562
"Using Catalog \"MyCatalog\"\n"
24563
"The defined Storage resources are:\n"
24564
" 1: File\n"
24565
" 2: TapeDrive\n"
24566
"Select Storage resource (1-2):<placeholder-1/>\n"
24567
24568
#: serverguide/C/backups.xml:823(para)
24569
msgid "Enter the new <emphasis>Volume</emphasis> name:"
24570
msgstr ""
24571
24572
#: serverguide/C/backups.xml:828(userinput)
24573
#, no-wrap
24574
msgid "Sunday"
24575
msgstr "Dimenge"
24576
24577
#: serverguide/C/backups.xml:827(computeroutput)
24578
#, no-wrap
24579
msgid ""
24580
"\n"
24581
"Enter new Volume name: <placeholder-1/>\n"
24582
"Defined Pools:\n"
24583
" 1: Default\n"
24584
" 2: Scratch"
24585
msgstr ""
24586
"\n"
24587
"Enter new Volume name: <placeholder-1/>\n"
24588
"Defined Pools:\n"
24589
"1: Default\n"
24590
"2: Scratch"
24591
24592
#: serverguide/C/backups.xml:833(para)
24593
msgid "Replace <emphasis>Sunday</emphasis> with the desired label."
24594
msgstr "Remplaçatz <emphasis>dimenge</emphasis> per l'etiqueta desirada."
24595
24596
#: serverguide/C/backups.xml:838(para)
24597
msgid "Now, select the <emphasis>Pool</emphasis>:"
24598
msgstr "Seleccionatz ara lo <emphasis>pool</emphasis>:"
24599
24600
#: serverguide/C/backups.xml:843(userinput)
24601
#, no-wrap
24602
msgid "1"
24603
msgstr "1"
24604
24605
#: serverguide/C/backups.xml:842(computeroutput)
24606
#, no-wrap
24607
msgid ""
24608
"\n"
24609
"Select the Pool (1-2): <placeholder-1/>\n"
24610
"Connecting to Storage daemon TapeDrive at backupserver:9103 ...\n"
24611
"Sending label command for Volume \"Sunday\" Slot 0 ...\n"
24612
msgstr ""
24613
"\n"
24614
"Select the Pool (1-2): <placeholder-1/>\n"
24615
"Connecting to Storage daemon TapeDrive at backupserver:9103 ...\n"
24616
"Sending label command for Volume \"Sunday\" Slot 0 ...\n"
24617
24618
#: serverguide/C/backups.xml:850(para)
24619
msgid ""
24620
"Congratulations, you have now configured <emphasis>Bacula</emphasis> to "
24621
"backup the localhost to an attached tape drive."
24622
msgstr ""
24623
"Felicitacions, venètz de configurar <emphasis>Bacula</emphasis> per salvar "
24624
"l'òste local cap a un lector de benda connectat."
24625
24626
#: serverguide/C/backups.xml:858(para)
24627
msgid ""
24628
"For more <emphasis>Bacula</emphasis> configuration options refer to the "
24629
"<ulink url=\"http://www.bacula.org/en/rel-manual/index.html\">Bacula User's "
24630
"Manual</ulink>"
24631
msgstr ""
24632
"Per mai d'opcions de configuracion de <emphasis>Bacula</emphasis>, "
24633
"referissètz-vos al <ulink url=\"http://www.bacula.org/en/rel-"
24634
"manual/index.html\">Manual de l'utilizaire Bacula</ulink> (en anglés)"
24635
24636
#: serverguide/C/backups.xml:864(para)
24637
msgid ""
24638
"The <ulink url=\"http://www.bacula.org/\">Bacula Home Page</ulink> contains "
24639
"the latest Bacula news and developments."
24640
msgstr ""
24641
"La <ulink url=\"http://www.bacula.org/\">pagina d'acuèlh de Bacula</ulink> "
24642
"conten las darrièras informacions e versions de desvolopament."
24643
24644
#: serverguide/C/backups.xml:869(para)
24645
msgid ""
24646
"Also, see the <ulink url=\"https://help.ubuntu.com/community/Bacula\">Bacula "
24647
"Ubuntu Wiki</ulink> page."
24648
msgstr ""
24649
24650
#. Put one translator per line, in the form of NAME <EMAIL>, YEAR1, YEAR2
24651
#: serverguide/C/backups.xml:0(None)
24652
msgid "translator-credits"
24653
msgstr ""
24654
"Launchpad Contributions:\n"
24655
" Cédric VALMARY (Per Tot en òc) https://launchpad.net/~cvalmary\n"
24656
" Yannig MARCHEGAY (Kokoyaya) https://launchpad.net/~yannick-marchegay"
24657
24658
#~ msgid "Ethernet"
24659
#~ msgstr "Ethernet"
Loggerhead is a web-based interface for Breezy
Version: 2.0.1