« back to all changes in this revision
Viewing changes to serverguide/po/en_AU.po
- browse files at revision 1
- compare with another revision
- download diff
- download tarball
- view history from revision 1
- Committer: Matthew East
- Date: 2011-05-03 07:11:18 UTC
- Revision ID: mdke@ubuntu.com-20110503071118-081aatibsr9k2yqy
Add files from ubuntu-docs natty branch, trim to use only those necessary for serverguide
- files added:
- build
- build/libs
- build/libs/admon
- build/libs/callouts
- build/libs/img
- build/libs/navig
- build/serverguide
- build/serverguide/C
- build/serverguide/sample
- libs
- libs/C
- libs/admon
- libs/authors
- libs/callouts
- libs/img
- libs/navig
- scripts
- serverguide
- serverguide/C
- serverguide/po
- serverguide/sample
added
removed
serverguide/po/en_AU.po
1
# English (Australia) translation for ubuntu-docs
2
# Copyright (c) 2009 Rosetta Contributors and Canonical Ltd 2009
3
# This file is distributed under the same license as the ubuntu-docs package.
4
# FIRST AUTHOR <EMAIL@ADDRESS>, 2009.
5
#
6
msgid ""
7
msgstr ""
8
"Project-Id-Version: ubuntu-docs\n"
9
"Report-Msgid-Bugs-To: FULL NAME <EMAIL@ADDRESS>\n"
10
"POT-Creation-Date: 2010-08-14 22:34+0100\n"
11
"PO-Revision-Date: 2010-09-14 22:06+0000\n"
12
"Last-Translator: Matthew East <matt@mdke.org>\n"
13
"Language-Team: English (Australia) <en_AU@li.org>\n"
14
"MIME-Version: 1.0\n"
15
"Content-Type: text/plain; charset=UTF-8\n"
16
"Content-Transfer-Encoding: 8bit\n"
17
"X-Launchpad-Export-Date: 2010-09-18 10:47+0000\n"
18
"X-Generator: Launchpad (build Unknown)\n"
19
20
#: serverguide/C/serverguide-C.omf:6(creator) serverguide/C/serverguide-C.omf:7(maintainer)
21
msgid "ubuntu-doc@lists.ubuntu.com (Ubuntu Documentation Project)"
22
msgstr "ubuntu-doc@lists.ubuntu.com (Ubuntu Documentation Project)"
23
24
#: serverguide/C/serverguide-C.omf:8(title) serverguide/C/serverguide-C.omf:11(description) serverguide/C/serverguide.xml:14(title) serverguide/C/bookinfo.xml:13(title)
25
msgid "Ubuntu Server Guide"
26
msgstr "Ubuntu Server Guide"
27
28
#: serverguide/C/serverguide-C.omf:9(date)
29
msgid "2007-09-30"
30
msgstr "30/09/2007"
31
32
#: serverguide/C/windows-networking.xml:13(title)
33
msgid "Windows Networking"
34
msgstr "Windows Networking"
35
36
#: serverguide/C/windows-networking.xml:15(para)
37
msgid ""
38
"Computer networks are often comprised of diverse systems, and while "
39
"operating a network made up entirely of Ubuntu desktop and server computers "
40
"would certainly be fun, some network environments must consist of both "
41
"Ubuntu and <trademark class=\"registered\">Microsoft</trademark><trademark "
42
"class=\"registered\">Windows</trademark> systems working together in "
43
"harmony. This section of the <phrase>Ubuntu</phrase> Server Guide introduces "
44
"principles and tools used in configuring your Ubuntu Server for sharing "
45
"network resources with Windows computers."
46
msgstr ""
47
"Computer networks are often comprised of diverse systems, and while "
48
"operating a network made up entirely of Ubuntu desktop and server computers "
49
"would certainly be fun, some network environments must consist of both "
50
"Ubuntu and <trademark class=\"registered\">Microsoft</trademark><trademark "
51
"class=\"registered\">Windows</trademark> systems working together in "
52
"harmony. This section of the <phrase>Ubuntu</phrase> Server Guide introduces "
53
"principles and tools used in configuring your Ubuntu Server for sharing "
54
"network resources with Windows computers."
55
56
#: serverguide/C/windows-networking.xml:25(title) serverguide/C/virtualization.xml:402(title) serverguide/C/security.xml:349(title) serverguide/C/remote-administration.xml:21(title) serverguide/C/package-management.xml:20(title) serverguide/C/introduction.xml:13(title)
57
msgid "Introduction"
58
msgstr "Introduction"
59
60
#: serverguide/C/windows-networking.xml:27(para)
61
msgid ""
62
"Successfully networking your Ubuntu system with Windows clients involves "
63
"providing and integrating with services common to Windows environments. Such "
64
"services assist the sharing of data and information about the computers and "
65
"users involved in the network, and may be classified under three major "
66
"categories of functionality:"
67
msgstr ""
68
"Successfully networking your Ubuntu system with Windows clients involves "
69
"providing and integrating with services common to Windows environments. Such "
70
"services assist the sharing of data and information about the computers and "
71
"users involved in the network, and may be classified under three major "
72
"categories of functionality:"
73
74
#: serverguide/C/windows-networking.xml:35(para)
75
msgid ""
76
"<emphasis role=\"bold\">File and Printer Sharing Services</emphasis>. Using "
77
"the Server Message Block (SMB) protocol to facilitate the sharing of files, "
78
"folders, volumes, and the sharing of printers throughout the network."
79
msgstr ""
80
"<emphasis role=\"bold\">File and Printer Sharing Services</emphasis>. Using "
81
"the Server Message Block (SMB) protocol to facilitate the sharing of files, "
82
"folders, volumes, and the sharing of printers throughout the network."
83
84
#: serverguide/C/windows-networking.xml:41(para)
85
msgid ""
86
"<emphasis role=\"bold\">Directory Services</emphasis>. Sharing vital "
87
"information about the computers and users of the network with such "
88
"technologies as the Lightweight Directory Access Protocol (LDAP) and "
89
"Microsoft <trademark class=\"registered\">Active Directory</trademark>."
90
msgstr ""
91
"<emphasis role=\"bold\">Directory Services</emphasis>. Sharing vital "
92
"information about the computers and users of the network with such "
93
"technologies as the Lightweight Directory Access Protocol (LDAP) and "
94
"Microsoft <trademark class=\"registered\">Active Directory</trademark>."
95
96
#: serverguide/C/windows-networking.xml:48(para)
97
msgid ""
98
"<emphasis role=\"bold\">Authentication and Access</emphasis>. Establishing "
99
"the identity of a computer or user of the network and determining the "
100
"information the computer or user is authorized to access using such "
101
"principles and technologies as file permissions, group policies, and the "
102
"Kerberos authentication service."
103
msgstr ""
104
"<emphasis role=\"bold\">Authentication and Access</emphasis>. Establishing "
105
"the identity of a computer or user of the network and determining the "
106
"information the computer or user is authorised to access using such "
107
"principles and technologies as file permissions, group policies, and the "
108
"Kerberos authentication service."
109
110
#: serverguide/C/windows-networking.xml:56(para)
111
msgid ""
112
"Fortunately, your Ubuntu system may provide all such facilities to Windows "
113
"clients and share network resources among them. One of the principal pieces "
114
"of software your Ubuntu system includes for Windows networking is the Samba "
115
"suite of SMB server applications and tools."
116
msgstr ""
117
"Fortunately, your Ubuntu system may provide all such facilities to Windows "
118
"clients and share network resources among them. One of the principal pieces "
119
"of software your Ubuntu system includes for Windows networking is the Samba "
120
"suite of SMB server applications and tools."
121
122
#: serverguide/C/windows-networking.xml:62(para)
123
msgid ""
124
"This section of the <phrase>Ubuntu</phrase> Server Guide will introduce some "
125
"of the common Samba use cases, and how to install and configure the "
126
"necessary packages. Additional detailed documentation and information on "
127
"Samba can be found on the <ulink url=\"http://www.samba.org\">Samba "
128
"website</ulink>."
129
msgstr ""
130
"This section of the <phrase>Ubuntu</phrase> Server Guide will introduce some "
131
"of the common Samba use cases, and how to install and configure the "
132
"necessary packages. Additional detailed documentation and information on "
133
"Samba can be found on the <ulink url=\"http://www.samba.org\">Samba "
134
"website</ulink>."
135
136
#: serverguide/C/windows-networking.xml:70(title)
137
msgid "Samba File Server"
138
msgstr "Samba File Server"
139
140
#: serverguide/C/windows-networking.xml:72(para)
141
msgid ""
142
"One of the most common ways to network Ubuntu and Windows computers is to "
143
"configure Samba as a File Server. This section covers setting up a "
144
"<application>Samba</application> server to share files with Windows clients."
145
msgstr ""
146
"One of the most common ways to network Ubuntu and Windows computers is to "
147
"configure Samba as a File Server. This section covers setting up a "
148
"<application>Samba</application> server to share files with Windows clients."
149
150
#: serverguide/C/windows-networking.xml:77(para)
151
msgid ""
152
"The server will be configured to share files with any client on the network "
153
"without prompting for a password. If your environment requires stricter "
154
"Access Controls see <xref linkend=\"samba-fileprint-security\"/>"
155
msgstr ""
156
"The server will be configured to share files with any client on the network "
157
"without prompting for a password. If your environment requires stricter "
158
"Access Controls see <xref linkend=\"samba-fileprint-security\"/>"
159
160
#: serverguide/C/windows-networking.xml:83(title) serverguide/C/windows-networking.xml:288(title) serverguide/C/windows-networking.xml:1317(title) serverguide/C/web-servers.xml:41(title) serverguide/C/web-servers.xml:675(title) serverguide/C/web-servers.xml:816(title) serverguide/C/web-servers.xml:940(title) serverguide/C/vpn.xml:33(title) serverguide/C/virtualization.xml:62(title) serverguide/C/vcs.xml:28(title) serverguide/C/vcs.xml:86(title) serverguide/C/vcs.xml:405(title) serverguide/C/remote-administration.xml:51(title) serverguide/C/network-config.xml:937(title) serverguide/C/network-auth.xml:52(title) serverguide/C/network-auth.xml:1590(title) serverguide/C/network-auth.xml:2102(title) serverguide/C/network-auth.xml:2493(title) serverguide/C/monitoring.xml:42(title) serverguide/C/monitoring.xml:428(title) serverguide/C/mail.xml:40(title) serverguide/C/mail.xml:496(title) serverguide/C/mail.xml:674(title) serverguide/C/mail.xml:823(title) serverguide/C/mail.xml:1315(title) serverguide/C/lamp-applications.xml:108(title) serverguide/C/lamp-applications.xml:287(title) serverguide/C/lamp-applications.xml:423(title) serverguide/C/installation.xml:13(title) serverguide/C/installation.xml:957(title) serverguide/C/file-server.xml:347(title) serverguide/C/file-server.xml:462(title) serverguide/C/dns.xml:23(title) serverguide/C/databases.xml:40(title) serverguide/C/databases.xml:164(title) serverguide/C/chat.xml:37(title) serverguide/C/chat.xml:141(title) serverguide/C/backups.xml:593(title)
161
msgid "Installation"
162
msgstr "Installation"
163
164
#: serverguide/C/windows-networking.xml:85(para)
165
msgid ""
166
"The first step is to install the <application>samba</application> package. "
167
"From a terminal prompt enter:"
168
msgstr ""
169
"The first step is to install the <application>samba</application> package. "
170
"From a terminal prompt enter:"
171
172
#: serverguide/C/windows-networking.xml:90(command) serverguide/C/windows-networking.xml:300(command)
173
msgid "sudo apt-get install samba"
174
msgstr "sudo apt-get install samba"
175
176
#: serverguide/C/windows-networking.xml:93(para)
177
msgid ""
178
"That's all there is to it; you are now ready to configure Samba to share "
179
"files."
180
msgstr ""
181
"That's all there is to it; you are now ready to configure Samba to share "
182
"files."
183
184
#: serverguide/C/windows-networking.xml:99(title) serverguide/C/windows-networking.xml:305(title) serverguide/C/web-servers.xml:61(title) serverguide/C/web-servers.xml:726(title) serverguide/C/web-servers.xml:827(title) serverguide/C/web-servers.xml:967(title) serverguide/C/web-servers.xml:1067(title) serverguide/C/vpn.xml:138(title) serverguide/C/vcs.xml:39(title) serverguide/C/vcs.xml:423(title) serverguide/C/remote-administration.xml:73(title) serverguide/C/package-management.xml:387(title) serverguide/C/network-config.xml:959(title) serverguide/C/network-auth.xml:2141(title) serverguide/C/network-auth.xml:2514(title) serverguide/C/monitoring.xml:187(title) serverguide/C/monitoring.xml:454(title) serverguide/C/mail.xml:505(title) serverguide/C/mail.xml:684(title) serverguide/C/mail.xml:908(title) serverguide/C/mail.xml:1344(title) serverguide/C/lamp-applications.xml:128(title) serverguide/C/lamp-applications.xml:314(title) serverguide/C/lamp-applications.xml:453(title) serverguide/C/file-server.xml:360(title) serverguide/C/file-server.xml:488(title) serverguide/C/dns.xml:39(title) serverguide/C/databases.xml:84(title) serverguide/C/databases.xml:183(title) serverguide/C/clustering.xml:47(title) serverguide/C/chat.xml:57(title) serverguide/C/chat.xml:153(title) serverguide/C/backups.xml:616(title)
185
msgid "Configuration"
186
msgstr "Configuration"
187
188
#: serverguide/C/windows-networking.xml:101(para)
189
msgid ""
190
"The main Samba configuration file is located in "
191
"<filename>/etc/samba/smb.conf</filename>. The default configuration file has "
192
"a significant amount of comments in order to document various configuration "
193
"directives."
194
msgstr ""
195
"The main Samba configuration file is located in "
196
"<filename>/etc/samba/smb.conf</filename>. The default configuration file has "
197
"a significant amount of comments in order to document various configuration "
198
"directives."
199
200
#: serverguide/C/windows-networking.xml:106(para)
201
msgid ""
202
"Not all the available options are included in the default configuration "
203
"file. See the <filename>smb.conf</filename><application>man</application> "
204
"page or the <ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
205
"Collection/\">Samba HOWTO Collection</ulink> for more details."
206
msgstr ""
207
"Not all the available options are included in the default configuration "
208
"file. See the <filename>smb.conf</filename><application>man</application> "
209
"page or the <ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
210
"Collection/\">Samba HOWTO Collection</ulink> for more details."
211
212
#: serverguide/C/windows-networking.xml:116(para)
213
msgid ""
214
"First, edit the following key/value pairs in the "
215
"<emphasis>[global]</emphasis> section of "
216
"<filename>/etc/samba/smb.conf</filename>:"
217
msgstr ""
218
"First, edit the following key/value pairs in the "
219
"<emphasis>[global]</emphasis> section of "
220
"<filename>/etc/samba/smb.conf</filename>:"
221
222
#: serverguide/C/windows-networking.xml:121(programlisting) serverguide/C/windows-networking.xml:312(programlisting) serverguide/C/windows-networking.xml:780(programlisting) serverguide/C/windows-networking.xml:1003(programlisting)
223
#, no-wrap
224
msgid ""
225
"\n"
226
" workgroup = EXAMPLE\n"
227
" ...\n"
228
" security = user\n"
229
msgstr ""
230
"\n"
231
" workgroup = EXAMPLE\n"
232
" ...\n"
233
" security = user\n"
234
235
#: serverguide/C/windows-networking.xml:127(para)
236
msgid ""
237
"The <emphasis>security</emphasis> parameter is farther down in the [global] "
238
"section, and is commented by default. Also, change "
239
"<emphasis>EXAMPLE</emphasis> to better match your environment."
240
msgstr ""
241
"The <emphasis>security</emphasis> parameter is farther down in the [global] "
242
"section, and is commented by default. Also, change "
243
"<emphasis>EXAMPLE</emphasis> to better match your environment."
244
245
#: serverguide/C/windows-networking.xml:135(para)
246
msgid ""
247
"Create a new section at the bottom of the file, or uncomment one of the "
248
"examples, for the directory to be shared:"
249
msgstr ""
250
"Create a new section at the bottom of the file, or uncomment one of the "
251
"examples, for the directory to be shared:"
252
253
#: serverguide/C/windows-networking.xml:139(programlisting)
254
#, no-wrap
255
msgid ""
256
"\n"
257
"[share]\n"
258
" comment = Ubuntu File Server Share\n"
259
" path = /srv/samba/share\n"
260
" browsable = yes\n"
261
" guest ok = yes\n"
262
" read only = no\n"
263
" create mask = 0755\n"
264
msgstr ""
265
"\n"
266
"[share]\n"
267
" comment = Ubuntu File Server Share\n"
268
" path = /srv/samba/share\n"
269
" browsable = yes\n"
270
" guest ok = yes\n"
271
" read only = no\n"
272
" create mask = 0755\n"
273
274
#: serverguide/C/windows-networking.xml:151(para)
275
msgid ""
276
"<emphasis>comment:</emphasis> a short description of the share. Adjust to "
277
"fit your needs."
278
msgstr ""
279
"<emphasis>comment:</emphasis> a short description of the share. Adjust to "
280
"fit your needs."
281
282
#: serverguide/C/windows-networking.xml:156(para)
283
msgid "<emphasis>path:</emphasis> the path to the directory to share."
284
msgstr "<emphasis>path:</emphasis> the path to the directory to share."
285
286
#: serverguide/C/windows-networking.xml:159(para)
287
msgid ""
288
"This example uses <filename>/srv/samba/sharename</filename> because, "
289
"according to the <emphasis>Filesystem Hierarchy Standard (FHS)</emphasis>, "
290
"<ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
291
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is where site-"
292
"specific data should be served. Technically Samba shares can be placed "
293
"anywhere on the filesystem as long as the permissions are correct, but "
294
"adhering to standards is recommended."
295
msgstr ""
296
"This example uses <filename>/srv/samba/sharename</filename> because, "
297
"according to the <emphasis>File system Hierarchy Standard (FHS)</emphasis>, "
298
"<ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
299
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is where site-"
300
"specific data should be served. Technically Samba shares can be placed "
301
"anywhere on the file system as long as the permissions are correct, but "
302
"adhering to standards is recommended."
303
304
#: serverguide/C/windows-networking.xml:168(para)
305
msgid ""
306
"<emphasis>browsable:</emphasis> enables Windows clients to browse the shared "
307
"directory using <application>Windows Explorer</application>."
308
msgstr ""
309
"<emphasis>browsable:</emphasis> enables Windows clients to browse the shared "
310
"directory using <application>Windows Explorer</application>."
311
312
#: serverguide/C/windows-networking.xml:174(para)
313
msgid ""
314
"<emphasis>guest ok:</emphasis> allows clients to connect to the share "
315
"without supplying a password."
316
msgstr ""
317
"<emphasis>guest ok:</emphasis> allows clients to connect to the share "
318
"without supplying a password."
319
320
#: serverguide/C/windows-networking.xml:179(para)
321
msgid ""
322
"<emphasis>read only:</emphasis> determines if the share is read only or if "
323
"write privileges are granted. Write privileges are allowed only when the "
324
"value is <emphasis>no</emphasis>, as is seen in this example. If the value "
325
"is <emphasis>yes</emphasis>, then access to the share is read only."
326
msgstr ""
327
"<emphasis>read only:</emphasis> determines if the share is read only or if "
328
"write privileges are granted. Write privileges are allowed only when the "
329
"value is <emphasis>no</emphasis>, as is seen in this example. If the value "
330
"is <emphasis>yes</emphasis>, then access to the share is read only."
331
332
#: serverguide/C/windows-networking.xml:184(para)
333
msgid ""
334
"<emphasis>create mask:</emphasis> determines the permissions new files will "
335
"have when created."
336
msgstr ""
337
"<emphasis>create mask:</emphasis> determines the permissions new files will "
338
"have when created."
339
340
#: serverguide/C/windows-networking.xml:193(para)
341
msgid ""
342
"Now that <application>Samba</application> is configured, the directory needs "
343
"to be created and the permissions changed. From a terminal enter:"
344
msgstr ""
345
"Now that <application>Samba</application> is configured, the directory needs "
346
"to be created and the permissions changed. From a terminal enter:"
347
348
#: serverguide/C/windows-networking.xml:199(command)
349
msgid "sudo mkdir -p /srv/samba/share"
350
msgstr "sudo mkdir -p /srv/samba/share"
351
352
#: serverguide/C/windows-networking.xml:200(command)
353
msgid "sudo chown nobody.nogroup /srv/samba/share/"
354
msgstr "sudo chown nobody.nogroup /srv/samba/share/"
355
356
#: serverguide/C/windows-networking.xml:204(para)
357
msgid ""
358
"The <emphasis>-p</emphasis> switch tells mkdir to create the entire "
359
"directory tree if it doesn't exist. Change the share name to fit your "
360
"environment."
361
msgstr ""
362
"The <emphasis>-p</emphasis> switch tells mkdir to create the entire "
363
"directory tree if it doesn't exist. Change the share name to fit your "
364
"environment."
365
366
#: serverguide/C/windows-networking.xml:213(para)
367
msgid ""
368
"Finally, restart the <application>samba</application> services to enable the "
369
"new configuration:"
370
msgstr ""
371
"Finally, restart the <application>samba</application> services to enable the "
372
"new configuration:"
373
374
#: serverguide/C/windows-networking.xml:218(command) serverguide/C/windows-networking.xml:332(command) serverguide/C/windows-networking.xml:470(command) serverguide/C/windows-networking.xml:570(command) serverguide/C/windows-networking.xml:949(command) serverguide/C/windows-networking.xml:1060(command) serverguide/C/windows-networking.xml:1176(command) serverguide/C/network-auth.xml:1869(command)
375
msgid "sudo restart smbd"
376
msgstr ""
377
378
#: serverguide/C/windows-networking.xml:219(command) serverguide/C/windows-networking.xml:333(command) serverguide/C/windows-networking.xml:471(command) serverguide/C/windows-networking.xml:571(command) serverguide/C/windows-networking.xml:950(command) serverguide/C/windows-networking.xml:1061(command) serverguide/C/windows-networking.xml:1177(command) serverguide/C/network-auth.xml:1870(command)
379
msgid "sudo restart nmbd"
380
msgstr ""
381
382
#: serverguide/C/windows-networking.xml:226(para)
383
msgid ""
384
"Once again, the above configuration gives all access to any client on the "
385
"local network. For a more secure configuration see <xref linkend=\"samba-"
386
"fileprint-security\"/>."
387
msgstr ""
388
"Once again, the above configuration gives all access to any client on the "
389
"local network. For a more secure configuration see <xref linkend=\"samba-"
390
"fileprint-security\"/>."
391
392
#: serverguide/C/windows-networking.xml:232(para)
393
msgid ""
394
"From a Windows client you should now be able to browse to the Ubuntu file "
395
"server and see the shared directory. To check that everything is working try "
396
"creating a directory from Windows."
397
msgstr ""
398
"From a Windows client you should now be able to browse to the Ubuntu file "
399
"server and see the shared directory. To check that everything is working try "
400
"creating a directory from Windows."
401
402
#: serverguide/C/windows-networking.xml:237(para)
403
msgid ""
404
"To create additional shares simply create new <emphasis>[dir]</emphasis> "
405
"sections in <filename>/etc/samba/smb.conf</filename>, and restart "
406
"<emphasis>Samba</emphasis>. Just make sure that the directory you want to "
407
"share actually exists and the permissions are correct."
408
msgstr ""
409
"To create additional shares simply create new <emphasis>[dir]</emphasis> "
410
"sections in <filename>/etc/samba/smb.conf</filename>, and restart "
411
"<emphasis>Samba</emphasis>. Just make sure that the directory you want to "
412
"share actually exists and the permissions are correct."
413
414
#: serverguide/C/windows-networking.xml:244(title) serverguide/C/windows-networking.xml:343(title) serverguide/C/windows-networking.xml:700(title) serverguide/C/windows-networking.xml:1080(title) serverguide/C/windows-networking.xml:1288(title) serverguide/C/virtualization.xml:366(title) serverguide/C/virtualization.xml:1168(title) serverguide/C/reporting-bugs.xml:304(title) serverguide/C/network-config.xml:569(title) serverguide/C/network-config.xml:824(title) serverguide/C/network-auth.xml:1540(title) serverguide/C/network-auth.xml:1985(title) serverguide/C/network-auth.xml:2589(title) serverguide/C/network-auth.xml:3097(title) serverguide/C/installation.xml:892(title) serverguide/C/installation.xml:1173(title) serverguide/C/databases.xml:122(title) serverguide/C/databases.xml:273(title) serverguide/C/backups.xml:855(title)
415
msgid "Resources"
416
msgstr "Resources"
417
418
#: serverguide/C/windows-networking.xml:248(para) serverguide/C/windows-networking.xml:347(para) serverguide/C/windows-networking.xml:704(para) serverguide/C/windows-networking.xml:1084(para)
419
msgid ""
420
"For in depth Samba configurations see the <ulink "
421
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
422
"Collection</ulink>"
423
msgstr ""
424
"For in depth Samba configurations see the <ulink "
425
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
426
"Collection</ulink>"
427
428
#: serverguide/C/windows-networking.xml:254(para) serverguide/C/windows-networking.xml:353(para) serverguide/C/windows-networking.xml:710(para) serverguide/C/windows-networking.xml:1090(para)
429
msgid ""
430
"The guide is also available in <ulink "
431
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">printed "
432
"format</ulink>."
433
msgstr ""
434
"The guide is also available in <ulink "
435
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">printed "
436
"format</ulink>."
437
438
#: serverguide/C/windows-networking.xml:260(para) serverguide/C/windows-networking.xml:359(para)
439
msgid ""
440
"O'Reilly's <ulink "
441
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
442
"another good reference."
443
msgstr ""
444
"O'Reilly's <ulink "
445
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
446
"another good reference."
447
448
#: serverguide/C/windows-networking.xml:266(para) serverguide/C/windows-networking.xml:370(para) serverguide/C/windows-networking.xml:735(para) serverguide/C/windows-networking.xml:1114(para) serverguide/C/windows-networking.xml:1301(para)
449
msgid ""
450
"The <ulink url=\"https://help.ubuntu.com/community/Samba\">Ubuntu Wiki Samba "
451
"</ulink> page."
452
msgstr ""
453
454
#: serverguide/C/windows-networking.xml:275(title)
455
msgid "Samba Print Server"
456
msgstr "Samba Print Server"
457
458
#: serverguide/C/windows-networking.xml:277(para)
459
msgid ""
460
"Another common use of Samba is to configure it to share printers installed, "
461
"either locally or over the network, on an Ubuntu server. Similar to <xref "
462
"linkend=\"samba-fileserver\"/> this section will configure Samba to allow "
463
"any client on the local network to use the installed printers without "
464
"prompting for a username and password."
465
msgstr ""
466
"Another common use of Samba is to configure it to share printers installed, "
467
"either locally or over the network, on an Ubuntu server. Similar to <xref "
468
"linkend=\"samba-fileserver\"/> this section will configure Samba to allow "
469
"any client on the local network to use the installed printers without "
470
"prompting for a user name and password."
471
472
#: serverguide/C/windows-networking.xml:283(para)
473
msgid ""
474
"For a more secure configuration see <xref linkend=\"samba-fileprint-"
475
"security\"/>."
476
msgstr ""
477
"For a more secure configuration see <xref linkend=\"samba-fileprint-"
478
"security\"/>."
479
480
#: serverguide/C/windows-networking.xml:290(para)
481
msgid ""
482
"Before installing and configuring Samba it is best to already have a working "
483
"<application>CUPS</application> installation. See <xref linkend=\"cups\"/> "
484
"for details."
485
msgstr ""
486
"Before installing and configuring Samba it is best to already have a working "
487
"<application>CUPS</application> installation. See <xref linkend=\"cups\"/> "
488
"for details."
489
490
#: serverguide/C/windows-networking.xml:295(para)
491
msgid ""
492
"To install the <application>samba</application> package, from a terminal "
493
"enter:"
494
msgstr ""
495
"To install the <application>samba</application> package, from a terminal "
496
"enter:"
497
498
#: serverguide/C/windows-networking.xml:306(para)
499
msgid ""
500
"After installing samba edit <filename>/etc/samba/smb.conf</filename>. Change "
501
"the <emphasis>workgroup</emphasis> attribute to what is appropriate for your "
502
"network, and change <emphasis>security</emphasis> to <emphasis "
503
"role=\"italic\">share</emphasis>:"
504
msgstr ""
505
"After installing samba edit <filename>/etc/samba/smb.conf</filename>. Change "
506
"the <emphasis>workgroup</emphasis> attribute to what is appropriate for your "
507
"network, and change <emphasis>security</emphasis> to <emphasis "
508
"role=\"italic\">share</emphasis>:"
509
510
#: serverguide/C/windows-networking.xml:318(para)
511
msgid ""
512
"In the <emphasis>[printers]</emphasis> section change the <emphasis>guest "
513
"ok</emphasis> option to <emphasis role=\"italic\">yes</emphasis>:"
514
msgstr ""
515
"In the <emphasis>[printers]</emphasis> section change the <emphasis>guest "
516
"ok</emphasis> option to <emphasis role=\"italic\">yes</emphasis>:"
517
518
#: serverguide/C/windows-networking.xml:322(programlisting)
519
#, no-wrap
520
msgid ""
521
"\n"
522
" browsable = yes\n"
523
" guest ok = yes\n"
524
msgstr ""
525
"\n"
526
" browsable = yes\n"
527
" guest ok = yes\n"
528
529
#: serverguide/C/windows-networking.xml:327(para)
530
msgid "After editing <filename>smb.conf</filename> restart Samba:"
531
msgstr "After editing <filename>smb.conf</filename> restart Samba:"
532
533
#: serverguide/C/windows-networking.xml:336(para)
534
msgid ""
535
"The default Samba configuration will automatically share any printers "
536
"installed. Simply install the printer locally on your Windows clients."
537
msgstr ""
538
"The default Samba configuration will automatically share any printers "
539
"installed. Simply install the printer locally on your Windows clients."
540
541
#: serverguide/C/windows-networking.xml:365(para)
542
msgid ""
543
"Also, see the <ulink url=\"http://www.cups.org/\">CUPS Website</ulink> for "
544
"more information on configuring CUPS."
545
msgstr ""
546
"Also, see the <ulink url=\"http://www.cups.org/\">CUPS Website</ulink> for "
547
"more information on configuring CUPS."
548
549
#: serverguide/C/windows-networking.xml:379(title)
550
msgid "Securing a Samba File and Print Server"
551
msgstr "Securing a Samba File and Print Server"
552
553
#: serverguide/C/windows-networking.xml:382(title)
554
msgid "Samba Security Modes"
555
msgstr "Samba Security Modes"
556
557
#: serverguide/C/windows-networking.xml:384(para)
558
msgid ""
559
"There are two security levels available to the Common Internet Filesystem "
560
"(CIFS) network protocol <emphasis>user-level</emphasis> and <emphasis>share-"
561
"level</emphasis>. Samba's <emphasis>security mode</emphasis> implementation "
562
"allows more flexibility, providing four ways of implementing user-level "
563
"security and one way to implement share-level:"
564
msgstr ""
565
"There are two security levels available to the Common Internet Filesystem "
566
"(CIFS) network protocol <emphasis>user-level</emphasis> and <emphasis>share-"
567
"level</emphasis>. Samba's <emphasis>security mode</emphasis> implementation "
568
"allows more flexibility, providing four ways of implementing user-level "
569
"security and one way to implement share-level:"
570
571
#: serverguide/C/windows-networking.xml:393(para)
572
msgid ""
573
"<emphasis>security = user:</emphasis> requires clients to supply a username "
574
"and password to connect to shares. Samba user accounts are separate from "
575
"system accounts, but the <application>libpam-smbpass</application> package "
576
"will sync system users and passwords with the Samba user database."
577
msgstr ""
578
"<emphasis>security = user:</emphasis> requires clients to supply a user name "
579
"and password to connect to shares. Samba user accounts are separate from "
580
"system accounts, but the <application>libpam-smbpass</application> package "
581
"will sync system users and passwords with the Samba user database."
582
583
#: serverguide/C/windows-networking.xml:400(para)
584
msgid ""
585
"<emphasis>security = domain:</emphasis> this mode allows the Samba server to "
586
"appear to Windows clients as a Primary Domain Controller (PDC), Backup "
587
"Domain Controller (BDC), or a Domain Member Server (DMS). See <xref "
588
"linkend=\"samba-dc\"/> for further information."
589
msgstr ""
590
"<emphasis>security = domain:</emphasis> this mode allows the Samba server to "
591
"appear to Windows clients as a Primary Domain Controller (PDC), Backup "
592
"Domain Controller (BDC), or a Domain Member Server (DMS). See <xref "
593
"linkend=\"samba-dc\"/> for further information."
594
595
#: serverguide/C/windows-networking.xml:407(para)
596
msgid ""
597
"<emphasis>security = ADS:</emphasis> allows the Samba server to join an "
598
"Active Directory domain as a native member. See <xref linkend=\"samba-ad-"
599
"integration\"/> for details."
600
msgstr ""
601
"<emphasis>security = ADS:</emphasis> allows the Samba server to join an "
602
"Active Directory domain as a native member. See <xref linkend=\"samba-ad-"
603
"integration\"/> for details."
604
605
#: serverguide/C/windows-networking.xml:413(para)
606
msgid ""
607
"<emphasis>security = server:</emphasis> this mode is left over from before "
608
"Samba could become a member server, and due to some security issues should "
609
"not be used. See the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
610
"HOWTO-Collection/ServerType.html#id349531\">Server Security</ulink> section "
611
"of the Samba guide for more details."
612
msgstr ""
613
"<emphasis>security = server:</emphasis> this mode is left over from before "
614
"Samba could become a member server, and due to some security issues should "
615
"not be used. See the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
616
"HOWTO-Collection/ServerType.html#id349531\">Server Security</ulink> section "
617
"of the Samba guide for more details."
618
619
#: serverguide/C/windows-networking.xml:421(para)
620
msgid ""
621
"<emphasis>security = share:</emphasis> allows clients to connect to shares "
622
"without supplying a username and password."
623
msgstr ""
624
"<emphasis>security = share:</emphasis> allows clients to connect to shares "
625
"without supplying a user name and password."
626
627
#: serverguide/C/windows-networking.xml:428(para)
628
msgid ""
629
"The security mode you choose will depend on your environment and what you "
630
"need the Samba server to accomplish."
631
msgstr ""
632
"The security mode you choose will depend on your environment and what you "
633
"need the Samba server to accomplish."
634
635
#: serverguide/C/windows-networking.xml:434(title)
636
msgid "Security = User"
637
msgstr "Security = User"
638
639
#: serverguide/C/windows-networking.xml:436(para)
640
msgid ""
641
"This section will reconfigure the Samba file and print server, from <xref "
642
"linkend=\"samba-fileserver\"/> and <xref linkend=\"samba-printserver\"/>, to "
643
"require authentication."
644
msgstr ""
645
"This section will reconfigure the Samba file and print server, from <xref "
646
"linkend=\"samba-fileserver\"/> and <xref linkend=\"samba-printserver\"/>, to "
647
"require authentication."
648
649
#: serverguide/C/windows-networking.xml:441(para)
650
msgid ""
651
"First, install the <application>libpam-smbpass</application> package which "
652
"will sync the system users to the Samba user database:"
653
msgstr ""
654
"First, install the <application>libpam-smbpass</application> package which "
655
"will sync the system users to the Samba user database:"
656
657
#: serverguide/C/windows-networking.xml:447(command)
658
msgid "sudo apt-get install libpam-smbpass"
659
msgstr "sudo apt-get install libpam-smbpass"
660
661
#: serverguide/C/windows-networking.xml:451(para)
662
msgid ""
663
"If you chose the <emphasis>Samba Server</emphasis> task during installation "
664
"<application>libpam-smbpass</application> is already installed."
665
msgstr ""
666
"If you chose the <emphasis>Samba Server</emphasis> task during installation "
667
"<application>libpam-smbpass</application> is already installed."
668
669
#: serverguide/C/windows-networking.xml:457(para)
670
msgid ""
671
"Edit <filename>/etc/samba/smb.conf</filename>, and in the "
672
"<emphasis>[share]</emphasis> section change:"
673
msgstr ""
674
"Edit <filename>/etc/samba/smb.conf</filename>, and in the "
675
"<emphasis>[share]</emphasis> section change:"
676
677
#: serverguide/C/windows-networking.xml:461(programlisting)
678
#, no-wrap
679
msgid ""
680
"\n"
681
" guest ok = no\n"
682
msgstr ""
683
"\n"
684
" guest ok = no\n"
685
686
#: serverguide/C/windows-networking.xml:465(para)
687
msgid "Finally, restart Samba for the new settings to take effect:"
688
msgstr "Finally, restart Samba for the new settings to take effect:"
689
690
#: serverguide/C/windows-networking.xml:474(para)
691
msgid ""
692
"Now when connecting to the shared directories or printers you should be "
693
"prompted for a username and password."
694
msgstr ""
695
"Now when connecting to the shared directories or printers you should be "
696
"prompted for a user name and password."
697
698
#: serverguide/C/windows-networking.xml:479(para)
699
msgid ""
700
"If you choose to map a network drive to the share you can check the "
701
"<quote>Reconnect at Logon</quote> check box, which will require you to only "
702
"enter the username and password once, at least until the password changes."
703
msgstr ""
704
"If you choose to map a network drive to the share you can tick the "
705
"<quote>Reconnect at Logon</quote> tick box, which will require you to only "
706
"enter the user name and password once, at least until the password changes."
707
708
#: serverguide/C/windows-networking.xml:487(title)
709
msgid "Share Security"
710
msgstr "Share Security"
711
712
#: serverguide/C/windows-networking.xml:489(para)
713
msgid ""
714
"There are several options available to increase the security for each "
715
"individual shared directory. Using the <emphasis>[share]</emphasis> example, "
716
"this section will cover some common options."
717
msgstr ""
718
"There are several options available to increase the security for each "
719
"individual shared directory. Using the <emphasis>[share]</emphasis> example, "
720
"this section will cover some common options."
721
722
#: serverguide/C/windows-networking.xml:495(title)
723
msgid "Groups"
724
msgstr "Groups"
725
726
#: serverguide/C/windows-networking.xml:497(para)
727
msgid ""
728
"Groups define a collection of computers or users which have a common level "
729
"of access to particular network resources and offer a level of granularity "
730
"in controlling access to such resources. For example, if a group <emphasis "
731
"role=\"italic\">qa</emphasis> is defined and contains the users <emphasis "
732
"role=\"italic\">freda</emphasis>, <emphasis "
733
"role=\"italic\">danika</emphasis>, and <emphasis "
734
"role=\"italic\">rob</emphasis> and a second group <emphasis "
735
"role=\"italic\">support</emphasis> is defined and consists of users "
736
"<emphasis role=\"italic\">danika</emphasis>, <emphasis "
737
"role=\"italic\">jeremy</emphasis>, and <emphasis "
738
"role=\"italic\">vincent</emphasis> then certain network resources configured "
739
"to allow access by the <emphasis role=\"italic\">qa</emphasis> group will "
740
"subsequently enable access by freda, danika, and rob, but not jeremy or "
741
"vincent. Since the user <emphasis role=\"italic\">danika</emphasis> belongs "
742
"to both the <emphasis role=\"italic\">qa</emphasis> and <emphasis "
743
"role=\"italic\">support</emphasis> groups, she will be able to access "
744
"resources configured for access by both groups, whereas all other users will "
745
"have only access to resources explicitly allowing the group they are part of."
746
msgstr ""
747
"Groups define a collection of computers or users which have a common level "
748
"of access to particular network resources and offer a level of granularity "
749
"in controlling access to such resources. For example, if a group <emphasis "
750
"role=\"italic\">qa</emphasis> is defined and contains the users <emphasis "
751
"role=\"italic\">freda</emphasis>, <emphasis "
752
"role=\"italic\">danika</emphasis>, and <emphasis "
753
"role=\"italic\">rob</emphasis> and a second group <emphasis "
754
"role=\"italic\">support</emphasis> is defined and consists of users "
755
"<emphasis role=\"italic\">danika</emphasis>, <emphasis "
756
"role=\"italic\">jeremy</emphasis>, and <emphasis "
757
"role=\"italic\">vincent</emphasis> then certain network resources configured "
758
"to allow access by the <emphasis role=\"italic\">qa</emphasis> group will "
759
"subsequently enable access by freda, danika, and rob, but not jeremy or "
760
"vincent. Since the user <emphasis role=\"italic\">danika</emphasis> belongs "
761
"to both the <emphasis role=\"italic\">qa</emphasis> and <emphasis "
762
"role=\"italic\">support</emphasis> groups, she will be able to access "
763
"resources configured for access by both groups, whereas all other users will "
764
"have only access to resources explicitly allowing the group they are part of."
765
766
#: serverguide/C/windows-networking.xml:511(para)
767
msgid ""
768
"By default Samba looks for the local system groups defined in "
769
"<filename>/etc/group</filename> to determine which users belong to which "
770
"groups. For more information on adding and removing users from groups see "
771
"<xref linkend=\"adding-deleting-users\"/>."
772
msgstr ""
773
"By default Samba looks for the local system groups defined in "
774
"<filename>/etc/group</filename> to determine which users belong to which "
775
"groups. For more information on adding and removing users from groups see "
776
"<xref linkend=\"adding-deleting-users\"/>."
777
778
#: serverguide/C/windows-networking.xml:517(para)
779
msgid ""
780
"When defining groups in the Samba configuration file, "
781
"<filename>/etc/samba/smb.conf</filename>, the recognized syntax is to "
782
"preface the group name with an \"@\" symbol. For example, if you wished to "
783
"define a group named <emphasis role=\"italic\">sysadmin</emphasis> in a "
784
"certain section of the <filename>/etc/samba/smb.conf</filename>, you would "
785
"do so by entering the group name as <emphasis "
786
"role=\"bold\">@sysadmin</emphasis>."
787
msgstr ""
788
"When defining groups in the Samba configuration file, "
789
"<filename>/etc/samba/smb.conf</filename>, the recognised syntax is to "
790
"preface the group name with an \"@\" symbol. For example, if you wished to "
791
"define a group named <emphasis role=\"italic\">sysadmin</emphasis> in a "
792
"certain section of the <filename>/etc/samba/smb.conf</filename>, you would "
793
"do so by entering the group name as <emphasis "
794
"role=\"bold\">@sysadmin</emphasis>."
795
796
#: serverguide/C/windows-networking.xml:526(title)
797
msgid "File Permissions"
798
msgstr "File Permissions"
799
800
#: serverguide/C/windows-networking.xml:528(para)
801
msgid ""
802
"File Permissions define the explicit rights a computer or user has to a "
803
"particular directory, file, or set of files. Such permissions may be defined "
804
"by editing the <filename>/etc/samba/smb.conf</filename> file and specifying "
805
"the explicit permissions of a defined file share."
806
msgstr ""
807
"File Permissions define the explicit rights a computer or user has to a "
808
"particular directory, file, or set of files. Such permissions may be defined "
809
"by editing the <filename>/etc/samba/smb.conf</filename> file and specifying "
810
"the explicit permissions of a defined file share."
811
812
#: serverguide/C/windows-networking.xml:534(para)
813
msgid ""
814
"For example, if you have defined a Samba share called "
815
"<emphasis>share</emphasis> and wish to give <emphasis role=\"italic\">read-"
816
"only</emphasis> permissions to the group of users known as <emphasis "
817
"role=\"italic\">qa</emphasis>, but wanted to allow writing to the share by "
818
"the group called <emphasis role=\"italic\">sysadmin</emphasis> and the user "
819
"named <emphasis role=\"italic\">vincent</emphasis>, then you could edit the "
820
"<filename>/etc/samba/smb.conf</filename> file, and add the following entries "
821
"under the <emphasis>[share]</emphasis> entry:"
822
msgstr ""
823
"For example, if you have defined a Samba share called "
824
"<emphasis>share</emphasis> and wish to give <emphasis role=\"italic\">read-"
825
"only</emphasis> permissions to the group of users known as <emphasis "
826
"role=\"italic\">qa</emphasis>, but wanted to allow writing to the share by "
827
"the group called <emphasis role=\"italic\">sysadmin</emphasis> and the user "
828
"named <emphasis role=\"italic\">vincent</emphasis>, then you could edit the "
829
"<filename>/etc/samba/smb.conf</filename> file, and add the following entries "
830
"under the <emphasis>[share]</emphasis> entry:"
831
832
#: serverguide/C/windows-networking.xml:543(programlisting)
833
#, no-wrap
834
msgid ""
835
"\n"
836
" read list = @qa\n"
837
" write list = @sysadmin, vincent\n"
838
msgstr ""
839
"\n"
840
" read list = @qa\n"
841
" write list = @sysadmin, vincent\n"
842
843
#: serverguide/C/windows-networking.xml:548(para)
844
msgid ""
845
"Another possible Samba permission is to declare "
846
"<emphasis>administrative</emphasis> permissions to a particular shared "
847
"resource. Users having administrative permissions may read, write, or modify "
848
"any information contained in the resource the user has been given explicit "
849
"administrative permissions to."
850
msgstr ""
851
"Another possible Samba permission is to declare "
852
"<emphasis>administrative</emphasis> permissions to a particular shared "
853
"resource. Users having administrative permissions may read, write, or modify "
854
"any information contained in the resource the user has been given explicit "
855
"administrative permissions to."
856
857
#: serverguide/C/windows-networking.xml:554(para)
858
msgid ""
859
"For example, if you wanted to give the user <emphasis "
860
"role=\"italic\">melissa</emphasis> administrative permissions to the "
861
"<emphasis role=\"italic\">share</emphasis> example, you would edit the "
862
"<filename>/etc/samba/smb.conf</filename> file, and add the following line "
863
"under the <emphasis>[share]</emphasis> entry:"
864
msgstr ""
865
"For example, if you wanted to give the user <emphasis "
866
"role=\"italic\">melissa</emphasis> administrative permissions to the "
867
"<emphasis role=\"italic\">share</emphasis> example, you would edit the "
868
"<filename>/etc/samba/smb.conf</filename> file, and add the following line "
869
"under the <emphasis>[share]</emphasis> entry:"
870
871
#: serverguide/C/windows-networking.xml:561(programlisting)
872
#, no-wrap
873
msgid ""
874
"\n"
875
" admin users = melissa\n"
876
msgstr ""
877
"\n"
878
" admin users = melissa\n"
879
880
#: serverguide/C/windows-networking.xml:565(para)
881
msgid ""
882
"After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for "
883
"the changes to take effect:"
884
msgstr ""
885
"After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for "
886
"the changes to take effect:"
887
888
#: serverguide/C/windows-networking.xml:575(para)
889
msgid ""
890
"For the <emphasis>read list</emphasis> and <emphasis>write list</emphasis> "
891
"to work the Samba security mode must <emphasis>not</emphasis> be set to "
892
"<emphasis role=\"italic\">security = share</emphasis>"
893
msgstr ""
894
"For the <emphasis>read list</emphasis> and <emphasis>write list</emphasis> "
895
"to work the Samba security mode must <emphasis>not</emphasis> be set to "
896
"<emphasis role=\"italic\">security = share</emphasis>"
897
898
#: serverguide/C/windows-networking.xml:581(para)
899
msgid ""
900
"Now that Samba has been configured to limit which groups have access to the "
901
"shared directory, the filesystem permissions need to be updated."
902
msgstr ""
903
"Now that Samba has been configured to limit which groups have access to the "
904
"shared directory, the filesystem permissions need to be updated."
905
906
#: serverguide/C/windows-networking.xml:586(para)
907
msgid ""
908
"Traditional Linux file permissions do not map well to Windows NT Access "
909
"Control Lists (ACLs). Fortunately POSIX ACLs are available on Ubuntu servers "
910
"providing more fine grained control. For example, to enable ACLs on "
911
"<filename>/srv</filename> an EXT3 filesystem, edit "
912
"<filename>/etc/fstab</filename> adding the <emphasis>acl</emphasis> option:"
913
msgstr ""
914
"Traditional Linux file permissions do not map well to Windows NT Access "
915
"Control Lists (ACLs). Fortunately POSIX ACLs are available on Ubuntu servers "
916
"providing more fine grained control. For example, to enable ACLs on "
917
"<filename>/srv</filename> an EXT3 filesystem, edit "
918
"<filename>/etc/fstab</filename> adding the <emphasis>acl</emphasis> option:"
919
920
#: serverguide/C/windows-networking.xml:593(programlisting)
921
#, no-wrap
922
msgid ""
923
"\n"
924
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
925
"0 1\n"
926
msgstr ""
927
"\n"
928
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
929
"0 1\n"
930
931
#: serverguide/C/windows-networking.xml:597(para)
932
msgid "Then remount the partition:"
933
msgstr "Then remount the partition:"
934
935
#: serverguide/C/windows-networking.xml:602(command)
936
msgid "sudo mount -v -o remount /srv"
937
msgstr "sudo mount -v -o remount /srv"
938
939
#: serverguide/C/windows-networking.xml:606(para)
940
msgid ""
941
"The above example assumes <filename>/srv</filename> on a separate partition. "
942
"If <filename>/srv</filename>, or wherever you have configured your share "
943
"path, is part of the <filename>/</filename> partition a reboot may be "
944
"required."
945
msgstr ""
946
"The above example assumes <filename>/srv</filename> on a separate partition. "
947
"If <filename>/srv</filename>, or wherever you have configured your share "
948
"path, is part of the <filename>/</filename> partition a reboot may be "
949
"required."
950
951
#: serverguide/C/windows-networking.xml:613(para)
952
msgid ""
953
"To match the Samba configuration above the <emphasis>sysadmin</emphasis> "
954
"group will be given read, write, and execute permissions to "
955
"<filename>/srv/samba/share</filename>, the <emphasis>qa</emphasis> group "
956
"will be given read and execute permissions, and the files will be owned by "
957
"the username <emphasis>melissa</emphasis>. Enter the following in a terminal:"
958
msgstr ""
959
"To match the Samba configuration above the <emphasis>sysadmin</emphasis> "
960
"group will be given read, write, and execute permissions to "
961
"<filename>/srv/samba/share</filename>, the <emphasis>qa</emphasis> group "
962
"will be given read and execute permissions, and the files will be owned by "
963
"the user name <emphasis>melissa</emphasis>. Enter the following in a "
964
"terminal:"
965
966
#: serverguide/C/windows-networking.xml:621(command)
967
msgid "sudo chown -R melissa /srv/samba/share/"
968
msgstr "sudo chown -R melissa /srv/samba/share/"
969
970
#: serverguide/C/windows-networking.xml:622(command)
971
msgid "sudo chgrp -R sysadmin /srv/samba/share/"
972
msgstr "sudo chgrp -R sysadmin /srv/samba/share/"
973
974
#: serverguide/C/windows-networking.xml:623(command)
975
msgid "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
976
msgstr "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
977
978
#: serverguide/C/windows-networking.xml:627(para)
979
msgid ""
980
"The <application>setfacl</application> command above gives "
981
"<emphasis>execute</emphasis> permissions to all files in the "
982
"<filename>/srv/samba/share</filename> directory, which you may or may not "
983
"want."
984
msgstr ""
985
"The <application>setfacl</application> command above gives "
986
"<emphasis>execute</emphasis> permissions to all files in the "
987
"<filename>/srv/samba/share</filename> directory, which you may or may not "
988
"want."
989
990
#: serverguide/C/windows-networking.xml:633(para)
991
msgid ""
992
"Now from a Windows client you should notice the new file permissions are "
993
"implemented. See the <application>acl</application> and "
994
"<application>setfacl</application> man pages for more information on POSIX "
995
"ACLs."
996
msgstr ""
997
"Now from a Windows client you should notice the new file permissions are "
998
"implemented. See the <application>acl</application> and "
999
"<application>setfacl</application> man pages for more information on POSIX "
1000
"ACLs."
1001
1002
#: serverguide/C/windows-networking.xml:641(title)
1003
msgid "Samba AppArmor Profile"
1004
msgstr "Samba AppArmor Profile"
1005
1006
#: serverguide/C/windows-networking.xml:643(para)
1007
msgid ""
1008
"Ubuntu comes with the <application>AppArmor</application> security module, "
1009
"which provides mandatory access controls. The default AppArmor profile for "
1010
"Samba will need to be adapted to your configuration. For more details on "
1011
"using AppArmor see <xref linkend=\"apparmor\"/>."
1012
msgstr ""
1013
"Ubuntu comes with the <application>AppArmor</application> security module, "
1014
"which provides mandatory access controls. The default AppArmor profile for "
1015
"Samba will need to be adapted to your configuration. For more details on "
1016
"using AppArmor see <xref linkend=\"apparmor\"/>."
1017
1018
#: serverguide/C/windows-networking.xml:649(para)
1019
msgid ""
1020
"There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> "
1021
"and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part "
1022
"of the <application>apparmor-profiles</application> packages. To install the "
1023
"package, from a terminal prompt enter:"
1024
msgstr ""
1025
"There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> "
1026
"and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part "
1027
"of the <application>apparmor-profiles</application> packages. To install the "
1028
"package, from a terminal prompt enter:"
1029
1030
#: serverguide/C/windows-networking.xml:656(command) serverguide/C/security.xml:920(command)
1031
msgid "sudo apt-get install apparmor-profiles"
1032
msgstr "sudo apt-get install apparmor-profiles"
1033
1034
#: serverguide/C/windows-networking.xml:660(para)
1035
msgid "This package contains profiles for several other binaries."
1036
msgstr "This package contains profiles for several other binaries."
1037
1038
#: serverguide/C/windows-networking.xml:665(para)
1039
msgid ""
1040
"By default the profiles for <application>smbd</application> and "
1041
"<application>nmbd</application> are in <emphasis>complain</emphasis> mode "
1042
"allowing Samba to work without modifying the profile, and only logging "
1043
"errors. To place the <application>smbd</application> profile into "
1044
"<emphasis>enforce</emphasis> mode, and have Samba work as expected, the "
1045
"profile will need to be modified to reflect any directories that are shared."
1046
msgstr ""
1047
"By default the profiles for <application>smbd</application> and "
1048
"<application>nmbd</application> are in <emphasis>complain</emphasis> mode "
1049
"allowing Samba to work without modifying the profile, and only logging "
1050
"errors. To place the <application>smbd</application> profile into "
1051
"<emphasis>enforce</emphasis> mode, and have Samba work as expected, the "
1052
"profile will need to be modified to reflect any directories that are shared."
1053
1054
#: serverguide/C/windows-networking.xml:672(para)
1055
msgid ""
1056
"Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information "
1057
"for <emphasis>[share]</emphasis> from the file server example:"
1058
msgstr ""
1059
"Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information "
1060
"for <emphasis>[share]</emphasis> from the file server example:"
1061
1062
#: serverguide/C/windows-networking.xml:677(programlisting)
1063
#, no-wrap
1064
msgid ""
1065
"\n"
1066
" /srv/samba/share/ r,\n"
1067
" /srv/samba/share/** rwkix,\n"
1068
msgstr ""
1069
"\n"
1070
" /srv/samba/share/ r,\n"
1071
" /srv/samba/share/** rwkix,\n"
1072
1073
#: serverguide/C/windows-networking.xml:682(para)
1074
msgid ""
1075
"Now place the profile into <emphasis>enforce</emphasis> and reload it:"
1076
msgstr ""
1077
"Now place the profile into <emphasis>enforce</emphasis> and reload it:"
1078
1079
#: serverguide/C/windows-networking.xml:687(command)
1080
msgid "sudo aa-enforce /usr/sbin/smbd"
1081
msgstr "sudo aa-enforce /usr/sbin/smbd"
1082
1083
#: serverguide/C/windows-networking.xml:688(command)
1084
msgid "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
1085
msgstr "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
1086
1087
#: serverguide/C/windows-networking.xml:691(para)
1088
msgid ""
1089
"You should now be able to read, write, and execute files in the shared "
1090
"directory as normal, and the <application>smbd</application> binary will "
1091
"have access to only the configured files and directories. Be sure to add "
1092
"entries for each directory you configure Samba to share. Also, any errors "
1093
"will be logged to <filename>/var/log/syslog</filename>."
1094
msgstr ""
1095
"You should now be able to read, write, and execute files in the shared "
1096
"directory as normal, and the <application>smbd</application> binary will "
1097
"have access to only the configured files and directories. Be sure to add "
1098
"entries for each directory you configure Samba to share. Also, any errors "
1099
"will be logged to <filename>/var/log/syslog</filename>."
1100
1101
#: serverguide/C/windows-networking.xml:716(para) serverguide/C/windows-networking.xml:1096(para)
1102
msgid ""
1103
"O'Reilly's <ulink "
1104
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
1105
"also a good reference."
1106
msgstr ""
1107
"O'Reilly's <ulink "
1108
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
1109
"also a good reference."
1110
1111
#: serverguide/C/windows-networking.xml:722(para)
1112
msgid ""
1113
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-"
1114
"samba.html\">Chapter 18</ulink> of the Samba HOWTO Collection is devoted to "
1115
"security."
1116
msgstr ""
1117
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-"
1118
"samba.html\">Chapter 18</ulink> of the Samba HOWTO Collection is devoted to "
1119
"security."
1120
1121
#: serverguide/C/windows-networking.xml:728(para)
1122
msgid ""
1123
"For more information on Samba and ACLs see the <ulink "
1124
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
1125
"Collection/AccessControls.html#id397568\">Samba ACLs page </ulink>."
1126
msgstr ""
1127
"For more information on Samba and ACLs see the <ulink "
1128
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
1129
"Collection/AccessControls.html#id397568\">Samba ACLs page </ulink>."
1130
1131
#: serverguide/C/windows-networking.xml:744(title)
1132
msgid "Samba as a Domain Controller"
1133
msgstr "Samba as a Domain Controller"
1134
1135
#: serverguide/C/windows-networking.xml:746(para)
1136
msgid ""
1137
"Although it cannot act as an Active Directory Primary Domain Controller "
1138
"(PDC), a Samba server can be configured to appear as a Windows NT4-style "
1139
"domain controller. A major advantage of this configuration is the ability to "
1140
"centralize user and machine credentials. Samba can also use multiple "
1141
"backends to store the user information."
1142
msgstr ""
1143
"Although it cannot act as an Active Directory Primary Domain Controller "
1144
"(PDC), a Samba server can be configured to appear as a Windows NT4-style "
1145
"domain controller. A major advantage of this configuration is the ability to "
1146
"centralise user and machine credentials. Samba can also use multiple "
1147
"backends to store the user information."
1148
1149
#: serverguide/C/windows-networking.xml:753(title)
1150
msgid "Primary Domain Controller"
1151
msgstr "Primary Domain Controller"
1152
1153
#: serverguide/C/windows-networking.xml:755(para)
1154
msgid ""
1155
"This section covers configuring Samba as a Primary Domain Controller (PDC) "
1156
"using the default smbpasswd backend."
1157
msgstr ""
1158
"This section covers configuring Samba as a Primary Domain Controller (PDC) "
1159
"using the default smbpasswd backend."
1160
1161
#: serverguide/C/windows-networking.xml:762(para)
1162
msgid ""
1163
"First, install Samba, and <application>libpam-smbpass</application> to sync "
1164
"the user accounts, by entering the following in a terminal prompt:"
1165
msgstr ""
1166
"First, install Samba, and <application>libpam-smbpass</application> to sync "
1167
"the user accounts, by entering the following in a terminal prompt:"
1168
1169
#: serverguide/C/windows-networking.xml:768(command) serverguide/C/windows-networking.xml:993(command)
1170
msgid "sudo apt-get install samba libpam-smbpass"
1171
msgstr "sudo apt-get install samba libpam-smbpass"
1172
1173
#: serverguide/C/windows-networking.xml:774(para)
1174
msgid ""
1175
"Next, configure Samba by editing <filename>/etc/samba/smb.conf</filename>. "
1176
"The <emphasis>security</emphasis> mode should be set to <emphasis "
1177
"role=\"italic\">user</emphasis>, and the <emphasis>workgroup</emphasis> "
1178
"should relate to your organization:"
1179
msgstr ""
1180
"Next, configure Samba by editing <filename>/etc/samba/smb.conf</filename>. "
1181
"The <emphasis>security</emphasis> mode should be set to <emphasis "
1182
"role=\"italic\">user</emphasis>, and the <emphasis>workgroup</emphasis> "
1183
"should relate to your organisation:"
1184
1185
#: serverguide/C/windows-networking.xml:789(para)
1186
msgid ""
1187
"In the commented <quote>Domains</quote> section add or uncomment the "
1188
"following:"
1189
msgstr ""
1190
"In the commented <quote>Domains</quote> section add or uncomment the "
1191
"following:"
1192
1193
#: serverguide/C/windows-networking.xml:793(programlisting)
1194
#, no-wrap
1195
msgid ""
1196
"\n"
1197
" domain logons = yes\n"
1198
" logon path = \\\\%N\\%U\\profile\n"
1199
" logon drive = H:\n"
1200
" logon home = \\\\%N\\%U\n"
1201
" logon script = logon.cmd\n"
1202
" add machine script = sudo /usr/sbin/useradd -N -g machines -c Machine -d "
1203
"/var/lib/samba -s /bin/false %u\n"
1204
msgstr ""
1205
"\n"
1206
" domain logons = yes\n"
1207
" logon path = \\\\%N\\%U\\profile\n"
1208
" logon drive = H:\n"
1209
" logon home = \\\\%N\\%U\n"
1210
" logon script = logon.cmd\n"
1211
" add machine script = sudo /usr/sbin/useradd -N -g machines -c Machine -d "
1212
"/var/lib/samba -s /bin/false %u\n"
1213
1214
#: serverguide/C/windows-networking.xml:804(para)
1215
msgid ""
1216
"<emphasis>domain logons:</emphasis> provides the netlogon service causing "
1217
"Samba to act as a domain controller."
1218
msgstr ""
1219
"<emphasis>domain logons:</emphasis> provides the netlogon service causing "
1220
"Samba to act as a domain controller."
1221
1222
#: serverguide/C/windows-networking.xml:809(para)
1223
msgid ""
1224
"<emphasis>logon path:</emphasis> places the user's Windows profile into "
1225
"their home directory. It is also possible to configure a "
1226
"<emphasis>[profiles]</emphasis> share placing all profiles under a single "
1227
"directory."
1228
msgstr ""
1229
"<emphasis>logon path:</emphasis> places the user's Windows profile into "
1230
"their home directory. It is also possible to configure a "
1231
"<emphasis>[profiles]</emphasis> share placing all profiles under a single "
1232
"directory."
1233
1234
#: serverguide/C/windows-networking.xml:815(para)
1235
msgid ""
1236
"<emphasis>logon drive:</emphasis> specifies the home directory local path."
1237
msgstr ""
1238
"<emphasis>logon drive:</emphasis> specifies the home directory local path."
1239
1240
#: serverguide/C/windows-networking.xml:820(para)
1241
msgid ""
1242
"<emphasis>logon home:</emphasis> specifies the home directory location."
1243
msgstr ""
1244
"<emphasis>logon home:</emphasis> specifies the home directory location."
1245
1246
#: serverguide/C/windows-networking.xml:825(para)
1247
msgid ""
1248
"<emphasis>logon script:</emphasis> determines the script to be run locally "
1249
"once a user has logged in. The script needs to be placed in the "
1250
"<emphasis>[netlogon]</emphasis> share."
1251
msgstr ""
1252
"<emphasis>logon script:</emphasis> determines the script to be run locally "
1253
"once a user has logged in. The script needs to be placed in the "
1254
"<emphasis>[netlogon]</emphasis> share."
1255
1256
#: serverguide/C/windows-networking.xml:831(para)
1257
msgid ""
1258
"<emphasis>add machine script:</emphasis> a script that will automatically "
1259
"create the <emphasis>Machine Trust Account</emphasis> needed for a "
1260
"workstation to join the domain."
1261
msgstr ""
1262
"<emphasis>add machine script:</emphasis> a script that will automatically "
1263
"create the <emphasis>Machine Trust Account</emphasis> needed for a "
1264
"workstation to join the domain."
1265
1266
#: serverguide/C/windows-networking.xml:835(para)
1267
msgid ""
1268
"In this example the <emphasis>machines</emphasis> group will need to be "
1269
"created using the <application>addgroup</application> utility see <xref "
1270
"linkend=\"adding-deleting-users\"/> for details."
1271
msgstr ""
1272
"In this example the <emphasis>machines</emphasis> group will need to be "
1273
"created using the <application>addgroup</application> utility see <xref "
1274
"linkend=\"adding-deleting-users\"/> for details."
1275
1276
#: serverguide/C/windows-networking.xml:839(para)
1277
msgid ""
1278
"Also, rights need to be explicitly provided to the <emphasis>Domain "
1279
"Admins</emphasis> group to allow the <emphasis>add machine script</emphasis> "
1280
"(and other admin functions) to work. This is achieved by executing:"
1281
msgstr ""
1282
1283
#: serverguide/C/windows-networking.xml:844(command)
1284
msgid ""
1285
"net rpc rights grant \"EXAMPLE\\Domain Admins\" SeMachineAccountPrivilege "
1286
"SePrintOperatorPrivilege \\ SeAddUsersPrivilege SeDiskOperatorPrivilege "
1287
"SeRemoteShutdownPrivilege"
1288
msgstr ""
1289
1290
#: serverguide/C/windows-networking.xml:851(para)
1291
msgid ""
1292
"If you wish to not use <emphasis>Roaming Profiles</emphasis> leave the "
1293
"<emphasis>logon home</emphasis> and <emphasis>logon path</emphasis> options "
1294
"commented."
1295
msgstr ""
1296
"If you wish to not use <emphasis>Roaming Profiles</emphasis> leave the "
1297
"<emphasis>logon home</emphasis> and <emphasis>logon path</emphasis> options "
1298
"commented."
1299
1300
#: serverguide/C/windows-networking.xml:860(para)
1301
msgid ""
1302
"Uncomment the <emphasis>[homes]</emphasis> share to allow the <emphasis "
1303
"role=\"italic\">logon home</emphasis> to be mapped:"
1304
msgstr ""
1305
"Uncomment the <emphasis>[homes]</emphasis> share to allow the <emphasis "
1306
"role=\"italic\">logon home</emphasis> to be mapped:"
1307
1308
#: serverguide/C/windows-networking.xml:865(programlisting)
1309
#, no-wrap
1310
msgid ""
1311
"\n"
1312
"[homes]\n"
1313
" comment = Home Directories\n"
1314
" browseable = no\n"
1315
" read only = no\n"
1316
" create mask = 0700\n"
1317
" directory mask = 0700\n"
1318
" valid users = %S\n"
1319
msgstr ""
1320
"\n"
1321
"[homes]\n"
1322
" comment = Home Directories\n"
1323
" browseable = no\n"
1324
" read only = no\n"
1325
" create mask = 0700\n"
1326
" directory mask = 0700\n"
1327
" valid users = %S\n"
1328
1329
#: serverguide/C/windows-networking.xml:878(para)
1330
msgid ""
1331
"When configured as a domain controller a <emphasis>[netlogon]</emphasis> "
1332
"share needs to be configured. To enable the share, uncomment:"
1333
msgstr ""
1334
"When configured as a domain controller a <emphasis>[netlogon]</emphasis> "
1335
"share needs to be configured. To enable the share, uncomment:"
1336
1337
#: serverguide/C/windows-networking.xml:883(programlisting)
1338
#, no-wrap
1339
msgid ""
1340
"\n"
1341
"[netlogon]\n"
1342
" comment = Network Logon Service\n"
1343
" path = /srv/samba/netlogon\n"
1344
" guest ok = yes\n"
1345
" read only = yes\n"
1346
" share modes = no\n"
1347
msgstr ""
1348
"\n"
1349
"[netlogon]\n"
1350
" comment = Network Logon Service\n"
1351
" path = /srv/samba/netlogon\n"
1352
" guest ok = yes\n"
1353
" read only = yes\n"
1354
" share modes = no\n"
1355
1356
#: serverguide/C/windows-networking.xml:893(para)
1357
msgid ""
1358
"The original <emphasis>netlogon</emphasis> share path is "
1359
"<filename>/home/samba/netlogon</filename>, but according to the Filesystem "
1360
"Hierarchy Standard (FHS), <ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
1361
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is the correct "
1362
"location for site-specific data provided by the system."
1363
msgstr ""
1364
"The original <emphasis>netlogon</emphasis> share path is "
1365
"<filename>/home/samba/netlogon</filename>, but according to the Filesystem "
1366
"Hierarchy Standard (FHS), <ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
1367
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is the correct "
1368
"location for site-specific data provided by the system."
1369
1370
#: serverguide/C/windows-networking.xml:904(para)
1371
msgid ""
1372
"Now create the <filename role=\"directory\">netlogon</filename> directory, "
1373
"and an empty (for now) <filename>logon.cmd</filename> script file:"
1374
msgstr ""
1375
"Now create the <filename role=\"directory\">netlogon</filename> directory, "
1376
"and an empty (for now) <filename>logon.cmd</filename> script file:"
1377
1378
#: serverguide/C/windows-networking.xml:910(command)
1379
msgid "sudo mkdir -p /srv/samba/netlogon"
1380
msgstr "sudo mkdir -p /srv/samba/netlogon"
1381
1382
#: serverguide/C/windows-networking.xml:911(command)
1383
msgid "sudo touch /srv/samba/netlogon/logon.cmd"
1384
msgstr "sudo touch /srv/samba/netlogon/logon.cmd"
1385
1386
#: serverguide/C/windows-networking.xml:914(para)
1387
msgid ""
1388
"You can enter any normal Windows logon script commands in "
1389
"<filename>logon.cmd</filename> to customize the client's environment."
1390
msgstr ""
1391
"You can enter any normal Windows logon script commands in "
1392
"<filename>logon.cmd</filename> to customise the client's environment."
1393
1394
#: serverguide/C/windows-networking.xml:922(para)
1395
msgid ""
1396
"With <emphasis>root</emphasis> being disabled by default, in order to join a "
1397
"workstation to the domain, a system group needs to be mapped to the Windows "
1398
"<emphasis>Domain Admins</emphasis> group. Using the "
1399
"<application>net</application> utility, from a terminal enter:"
1400
msgstr ""
1401
"With <emphasis>root</emphasis> being disabled by default, in order to join a "
1402
"workstation to the domain, a system group needs to be mapped to the Windows "
1403
"<emphasis>Domain Admins</emphasis> group. Using the "
1404
"<application>net</application> utility, from a terminal enter:"
1405
1406
#: serverguide/C/windows-networking.xml:929(command)
1407
msgid ""
1408
"sudo net groupmap add ntgroup=\"Domain Admins\" unixgroup=sysadmin rid=512 "
1409
"type=d"
1410
msgstr ""
1411
"sudo net groupmap add ntgroup=\"Domain Admins\" unixgroup=sysadmin rid=512 "
1412
"type=d"
1413
1414
#: serverguide/C/windows-networking.xml:933(para)
1415
msgid ""
1416
"Change <emphasis role=\"italic\">sysadmin</emphasis> to whichever group you "
1417
"prefer. Also, the user used to join the domain needs to be a member of the "
1418
"<emphasis>sysadmin</emphasis> group, as well as a member of the system "
1419
"<emphasis>admin</emphasis> group. The <emphasis>admin</emphasis> group "
1420
"allows <application>sudo</application> use."
1421
msgstr ""
1422
"Change <emphasis role=\"italic\">sysadmin</emphasis> to whichever group you "
1423
"prefer. Also, the user used to join the domain needs to be a member of the "
1424
"<emphasis>sysadmin</emphasis> group, as well as a member of the system "
1425
"<emphasis>admin</emphasis> group. The <emphasis>admin</emphasis> group "
1426
"allows <application>sudo</application> use."
1427
1428
#: serverguide/C/windows-networking.xml:944(para)
1429
msgid "Finally, restart Samba to enable the new domain controller:"
1430
msgstr "Finally, restart Samba to enable the new domain controller:"
1431
1432
#: serverguide/C/windows-networking.xml:956(para)
1433
msgid ""
1434
"You should now be able to join Windows clients to the Domain in the same "
1435
"manner as joining them to an NT4 domain running on a Windows server."
1436
msgstr ""
1437
"You should now be able to join Windows clients to the Domain in the same "
1438
"manner as joining them to an NT4 domain running on a Windows server."
1439
1440
#: serverguide/C/windows-networking.xml:966(title)
1441
msgid "Backup Domain Controller"
1442
msgstr "Backup Domain Controller"
1443
1444
#: serverguide/C/windows-networking.xml:968(para)
1445
msgid ""
1446
"With a Primary Domain Controller (PDC) on the network it is best to have a "
1447
"Backup Domain Controller (BDC) as well. This will allow clients to "
1448
"authenticate in case the PDC becomes unavailable."
1449
msgstr ""
1450
"With a Primary Domain Controller (PDC) on the network it is best to have a "
1451
"Backup Domain Controller (BDC) as well. This will allow clients to "
1452
"authenticate in case the PDC becomes unavailable."
1453
1454
#: serverguide/C/windows-networking.xml:973(para)
1455
msgid ""
1456
"When configuring Samba as a BDC you need a way to sync account information "
1457
"with the PDC. There are multiple ways of accomplishing this "
1458
"<application>scp</application>, <application>rsync</application>, or by "
1459
"using <application>LDAP</application> as the <emphasis>passdb "
1460
"backend</emphasis>."
1461
msgstr ""
1462
"When configuring Samba as a BDC you need a way to sync account information "
1463
"with the PDC. There are multiple ways of accomplishing this "
1464
"<application>scp</application>, <application>rsync</application>, or by "
1465
"using <application>LDAP</application> as the <emphasis>passdb "
1466
"backend</emphasis>."
1467
1468
#: serverguide/C/windows-networking.xml:979(para)
1469
msgid ""
1470
"Using LDAP is the most robust way to sync account information, because both "
1471
"domain controllers can use the same information in real time. However, "
1472
"setting up a LDAP server may be overly complicated for a small number of "
1473
"user and computer accounts. See <xref linkend=\"samba-ldap\"/> for details."
1474
msgstr ""
1475
"Using LDAP is the most robust way to sync account information, because both "
1476
"domain controllers can use the same information in real time. However, "
1477
"setting up a LDAP server may be overly complicated for a small number of "
1478
"user and computer accounts. See <xref linkend=\"samba-ldap\"/> for details."
1479
1480
#: serverguide/C/windows-networking.xml:988(para)
1481
msgid ""
1482
"First, install <application>samba</application> and <application>libpam-"
1483
"smbpass</application>. From a terminal enter:"
1484
msgstr ""
1485
"First, install <application>samba</application> and <application>libpam-"
1486
"smbpass</application>. From a terminal enter:"
1487
1488
#: serverguide/C/windows-networking.xml:999(para)
1489
msgid ""
1490
"Now, edit <filename>/etc/samba/smb.conf</filename> and uncomment the "
1491
"following in the <emphasis>[global]</emphasis>:"
1492
msgstr ""
1493
"Now, edit <filename>/etc/samba/smb.conf</filename> and uncomment the "
1494
"following in the <emphasis>[global]</emphasis>:"
1495
1496
#: serverguide/C/windows-networking.xml:1012(para)
1497
msgid "In the commented <emphasis>Domains</emphasis> uncomment or add:"
1498
msgstr "In the commented <emphasis>Domains</emphasis> uncomment or add:"
1499
1500
#: serverguide/C/windows-networking.xml:1016(programlisting)
1501
#, no-wrap
1502
msgid ""
1503
"\n"
1504
" domain logons = yes\n"
1505
" domain master = no\n"
1506
msgstr ""
1507
"\n"
1508
" domain logons = yes\n"
1509
" domain master = no\n"
1510
1511
#: serverguide/C/windows-networking.xml:1024(para)
1512
msgid ""
1513
"Make sure a user has rights to read the files in "
1514
"<filename>/var/lib/samba</filename>. For example, to allow users in the "
1515
"<emphasis>admin</emphasis> group to <application>scp</application> the "
1516
"files, enter:"
1517
msgstr ""
1518
"Make sure a user has rights to read the files in "
1519
"<filename>/var/lib/samba</filename>. For example, to allow users in the "
1520
"<emphasis>admin</emphasis> group to <application>scp</application> the "
1521
"files, enter:"
1522
1523
#: serverguide/C/windows-networking.xml:1030(command)
1524
msgid "sudo chgrp -R admin /var/lib/samba"
1525
msgstr "sudo chgrp -R admin /var/lib/samba"
1526
1527
#: serverguide/C/windows-networking.xml:1036(para)
1528
msgid ""
1529
"Next, sync the user accounts, using <application>scp</application> to copy "
1530
"the <filename>/var/lib/samba</filename> directory from the PDC:"
1531
msgstr ""
1532
"Next, sync the user accounts, using <application>scp</application> to copy "
1533
"the <filename>/var/lib/samba</filename> directory from the PDC:"
1534
1535
#: serverguide/C/windows-networking.xml:1042(command)
1536
msgid "sudo scp -r username@pdc:/var/lib/samba /var/lib"
1537
msgstr "sudo scp -r username@pdc:/var/lib/samba /var/lib"
1538
1539
#: serverguide/C/windows-networking.xml:1046(para)
1540
msgid ""
1541
"Replace <emphasis>username</emphasis> with a valid username and "
1542
"<emphasis>pdc</emphasis> with the hostname or IP Address of your actual PDC."
1543
msgstr ""
1544
"Replace <emphasis>username</emphasis> with a valid username and "
1545
"<emphasis>pdc</emphasis> with the hostname or IP Address of your actual PDC."
1546
1547
#: serverguide/C/windows-networking.xml:1055(para)
1548
msgid "Finally, restart <application>samba</application>:"
1549
msgstr "Finally, restart <application>samba</application>:"
1550
1551
#: serverguide/C/windows-networking.xml:1067(para)
1552
msgid ""
1553
"You can test that your Backup Domain controller is working by stopping the "
1554
"Samba daemon on the PDC, then trying to login to a Windows client joined to "
1555
"the domain."
1556
msgstr ""
1557
"You can test that your Backup Domain controller is working by stopping the "
1558
"Samba daemon on the PDC, then trying to login to a Windows client joined to "
1559
"the domain."
1560
1561
#: serverguide/C/windows-networking.xml:1072(para)
1562
msgid ""
1563
"Another thing to keep in mind is if you have configured the <emphasis>logon "
1564
"home</emphasis> option as a directory on the PDC, and the PDC becomes "
1565
"unavailable, access to the user's <emphasis>Home</emphasis> drive will also "
1566
"be unavailable. For this reason it is best to configure the <emphasis>logon "
1567
"home</emphasis> to reside on a separate file server from the PDC and BDC."
1568
msgstr ""
1569
"Another thing to keep in mind is if you have configured the <emphasis>logon "
1570
"home</emphasis> option as a directory on the PDC, and the PDC becomes "
1571
"unavailable, access to the user's <emphasis>Home</emphasis> drive will also "
1572
"be unavailable. For this reason it is best to configure the <emphasis>logon "
1573
"home</emphasis> to reside on a separate file server from the PDC and BDC."
1574
1575
#: serverguide/C/windows-networking.xml:1102(para)
1576
msgid ""
1577
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-"
1578
"pdc.html\">Chapter 4</ulink> of the Samba HOWTO Collection explains setting "
1579
"up a Primary Domain Controller."
1580
msgstr ""
1581
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-"
1582
"pdc.html\">Chapter 4</ulink> of the Samba HOWTO Collection explains setting "
1583
"up a Primary Domain Controller."
1584
1585
#: serverguide/C/windows-networking.xml:1108(para)
1586
msgid ""
1587
"<ulink url=\"http://us3.samba.org/samba/docs/man/Samba-HOWTO-"
1588
"Collection/samba-bdc.html\">Chapter 5</ulink> of the Samba HOWTO Collection "
1589
"explains setting up a Backup Domain Controller."
1590
msgstr ""
1591
"<ulink url=\"http://us3.samba.org/samba/docs/man/Samba-HOWTO-"
1592
"Collection/samba-bdc.html\">Chapter 5</ulink> of the Samba HOWTO Collection "
1593
"explains setting up a Backup Domain Controller."
1594
1595
#: serverguide/C/windows-networking.xml:1123(title)
1596
msgid "Samba Active Directory Integration"
1597
msgstr "Samba Active Directory Integration"
1598
1599
#: serverguide/C/windows-networking.xml:1126(title)
1600
msgid "Accessing a Samba Share"
1601
msgstr "Accessing a Samba Share"
1602
1603
#: serverguide/C/windows-networking.xml:1128(para)
1604
msgid ""
1605
"Another, use for Samba is to integrate into an existing Windows network. "
1606
"Once part of an Active Directory domain, Samba can provide file and print "
1607
"services to AD users."
1608
msgstr ""
1609
"Another, use for Samba is to integrate into an existing Windows network. "
1610
"Once part of an Active Directory domain, Samba can provide file and print "
1611
"services to AD users."
1612
1613
#: serverguide/C/windows-networking.xml:1133(para)
1614
msgid ""
1615
"The simplest way to join an AD domain is to use <application>Likewise-"
1616
"open</application>. For detailed instructions see <xref linkend=\"likewise-"
1617
"open\"/>."
1618
msgstr ""
1619
"The simplest way to join an AD domain is to use <application>Likewise-"
1620
"open</application>. For detailed instructions see <xref linkend=\"likewise-"
1621
"open\"/>."
1622
1623
#: serverguide/C/windows-networking.xml:1138(para)
1624
msgid ""
1625
"Once part of the domain, enter the following command in the terminal prompt:"
1626
msgstr ""
1627
"Once part of the domain, enter the following command in the terminal prompt:"
1628
1629
#: serverguide/C/windows-networking.xml:1143(command)
1630
msgid "sudo apt-get install samba smbfs smbclient"
1631
msgstr "sudo apt-get install samba smbfs smbclient"
1632
1633
#: serverguide/C/windows-networking.xml:1146(para)
1634
msgid ""
1635
"Since the <application>likewise-open</application> and "
1636
"<application>samba</application> packages use separate "
1637
"<filename>secrets.tdb</filename> files, a symlink will need to be created in "
1638
"<filename role=\"directory\">/var/lib/samba</filename>:"
1639
msgstr ""
1640
"Since the <application>likewise-open</application> and "
1641
"<application>samba</application> packages use separate "
1642
"<filename>secrets.tdb</filename> files, a symlink will need to be created in "
1643
"<filename role=\"directory\">/var/lib/samba</filename>:"
1644
1645
#: serverguide/C/windows-networking.xml:1152(command)
1646
msgid "sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig"
1647
msgstr "sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig"
1648
1649
#: serverguide/C/windows-networking.xml:1153(command)
1650
msgid "sudo ln -s /etc/samba/secrets.tdb /var/lib/samba"
1651
msgstr "sudo ln -s /etc/samba/secrets.tdb /var/lib/samba"
1652
1653
#: serverguide/C/windows-networking.xml:1156(para)
1654
msgid "Next, edit <filename>/etc/samba/smb.conf</filename> changing:"
1655
msgstr "Next, edit <filename>/etc/samba/smb.conf</filename> changing:"
1656
1657
#: serverguide/C/windows-networking.xml:1160(programlisting)
1658
#, no-wrap
1659
msgid ""
1660
"\n"
1661
" workgroup = EXAMPLE\n"
1662
" ...\n"
1663
" security = ads\n"
1664
" realm = EXAMPLE.COM\n"
1665
" ...\n"
1666
" idmap backend = lwopen\n"
1667
" idmap uid = 50-9999999999\n"
1668
" idmap gid = 50-9999999999\n"
1669
msgstr ""
1670
"\n"
1671
" workgroup = EXAMPLE\n"
1672
" ...\n"
1673
" security = ads\n"
1674
" realm = EXAMPLE.COM\n"
1675
" ...\n"
1676
" idmap backend = lwopen\n"
1677
" idmap uid = 50-9999999999\n"
1678
" idmap gid = 50-9999999999\n"
1679
1680
#: serverguide/C/windows-networking.xml:1171(para)
1681
msgid ""
1682
"Restart <application>samba</application> for the new settings to take effect:"
1683
msgstr ""
1684
"Restart <application>samba</application> for the new settings to take effect:"
1685
1686
#: serverguide/C/windows-networking.xml:1180(para)
1687
msgid ""
1688
"You should now be able to access any <application>Samba</application> shares "
1689
"from a Windows client. However, be sure to give the appropriate AD users or "
1690
"groups access to the share directory. See <xref linkend=\"samba-fileprint-"
1691
"security\"/> for more details."
1692
msgstr ""
1693
"You should now be able to access any <application>Samba</application> shares "
1694
"from a Windows client. However, be sure to give the appropriate AD users or "
1695
"groups access to the share directory. See <xref linkend=\"samba-fileprint-"
1696
"security\"/> for more details."
1697
1698
#: serverguide/C/windows-networking.xml:1188(title)
1699
msgid "Accessing a Windows Share"
1700
msgstr "Accessing a Windows Share"
1701
1702
#: serverguide/C/windows-networking.xml:1190(para)
1703
msgid ""
1704
"Now that the Samba server is part of the Active Directory domain you can "
1705
"access any Windows server shares:"
1706
msgstr ""
1707
"Now that the Samba server is part of the Active Directory domain you can "
1708
"access any Windows server shares:"
1709
1710
#: serverguide/C/windows-networking.xml:1197(para)
1711
msgid ""
1712
"To mount a Windows file share enter the following in a terminal prompt:"
1713
msgstr ""
1714
"To mount a Windows file share enter the following in a terminal prompt:"
1715
1716
#: serverguide/C/windows-networking.xml:1201(command)
1717
msgid "mount.cifs //fs01.example.com/share mount_point"
1718
msgstr "mount.cifs //fs01.example.com/share mount_point"
1719
1720
#: serverguide/C/windows-networking.xml:1204(para)
1721
msgid ""
1722
"It is also possible to access shares on computers not part of an AD domain, "
1723
"but a username and password will need to be provided."
1724
msgstr ""
1725
"It is also possible to access shares on computers not part of an AD domain, "
1726
"but a username and password will need to be provided."
1727
1728
#: serverguide/C/windows-networking.xml:1212(para)
1729
msgid ""
1730
"To mount the share during boot place an entry in "
1731
"<filename>/etc/fstab</filename>, for example:"
1732
msgstr ""
1733
"To mount the share during boot place an entry in "
1734
"<filename>/etc/fstab</filename>, for example:"
1735
1736
#: serverguide/C/windows-networking.xml:1216(programlisting)
1737
#, no-wrap
1738
msgid ""
1739
"\n"
1740
"//192.168.0.5/share /mnt/windows cifs auto,username=steve,password=secret,rw "
1741
"0 0\n"
1742
msgstr ""
1743
"\n"
1744
"//192.168.0.5/share /mnt/windows cifs auto,username=steve,password=secret,rw "
1745
"0 0\n"
1746
1747
#: serverguide/C/windows-networking.xml:1223(para)
1748
msgid ""
1749
"Another way to copy files from a Windows server is to use the "
1750
"<application>smbclient</application> utility. To list the files in a Windows "
1751
"share:"
1752
msgstr ""
1753
"Another way to copy files from a Windows server is to use the "
1754
"<application>smbclient</application> utility. To list the files in a Windows "
1755
"share:"
1756
1757
#: serverguide/C/windows-networking.xml:1229(command)
1758
msgid "smbclient //fs01.example.com/share -k -c \"ls\""
1759
msgstr "smbclient //fs01.example.com/share -k -c \"ls\""
1760
1761
#: serverguide/C/windows-networking.xml:1235(para)
1762
msgid "To copy a file from the share, enter:"
1763
msgstr "To copy a file from the share, enter:"
1764
1765
#: serverguide/C/windows-networking.xml:1240(command)
1766
msgid "smbclient //fs01.example.com/share -k -c \"get file.txt\""
1767
msgstr "smbclient //fs01.example.com/share -k -c \"get file.txt\""
1768
1769
#: serverguide/C/windows-networking.xml:1243(para)
1770
msgid ""
1771
"This will copy the <filename>file.txt</filename> into the current directory."
1772
msgstr ""
1773
"This will copy the <filename>file.txt</filename> into the current directory."
1774
1775
#: serverguide/C/windows-networking.xml:1250(para)
1776
msgid "And to copy a file to the share:"
1777
msgstr "And to copy a file to the share:"
1778
1779
#: serverguide/C/windows-networking.xml:1255(command)
1780
msgid "smbclient //fs01.example.com/share -k -c \"put /etc/hosts hosts\""
1781
msgstr "smbclient //fs01.example.com/share -k -c \"put /etc/hosts hosts\""
1782
1783
#: serverguide/C/windows-networking.xml:1258(para)
1784
msgid ""
1785
"This will copy the <filename>/etc/hosts</filename> to "
1786
"<filename>//fs01.example.com/share/hosts</filename>."
1787
msgstr ""
1788
"This will copy the <filename>/etc/hosts</filename> to "
1789
"<filename>//fs01.example.com/share/hosts</filename>."
1790
1791
#: serverguide/C/windows-networking.xml:1265(para)
1792
msgid ""
1793
"The <emphasis>-c</emphasis> option used above allows you to execute the "
1794
"<application>smbclient</application> command all at once. This is useful for "
1795
"scripting and minor file operations. To enter the <emphasis>smb: \\"
1796
"></emphasis> prompt, a FTP like prompt where you can execute normal file "
1797
"and directory commands, simply execute:"
1798
msgstr ""
1799
"The <emphasis>-c</emphasis> option used above allows you to execute the "
1800
"<application>smbclient</application> command all at once. This is useful for "
1801
"scripting and minor file operations. To enter the <emphasis>smb: \\"
1802
"></emphasis> prompt, a FTP like prompt where you can execute normal file "
1803
"and directory commands, simply execute:"
1804
1805
#: serverguide/C/windows-networking.xml:1272(command)
1806
msgid "smbclient //fs01.example.com/share -k"
1807
msgstr "smbclient //fs01.example.com/share -k"
1808
1809
#: serverguide/C/windows-networking.xml:1279(para)
1810
msgid ""
1811
"Replace all instances of <emphasis>fs01.example.com/share</emphasis>, "
1812
"<emphasis>//192.168.0.5/share</emphasis>, "
1813
"<emphasis>username=steve,password=secret</emphasis>, and "
1814
"<emphasis>file.txt</emphasis> with your server's IP, hostname, share name, "
1815
"file name, and an actual username and password with rights to the share."
1816
msgstr ""
1817
"Replace all instances of <emphasis>fs01.example.com/share</emphasis>, "
1818
"<emphasis>//192.168.0.5/share</emphasis>, "
1819
"<emphasis>username=steve,password=secret</emphasis>, and "
1820
"<emphasis>file.txt</emphasis> with your server's IP, hostname, share name, "
1821
"file name, and an actual username and password with rights to the share."
1822
1823
#: serverguide/C/windows-networking.xml:1290(para)
1824
msgid ""
1825
"For more <application>smbclient</application> options see the man page: "
1826
"<command>man smbclient</command>, also available <ulink "
1827
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man1/smbclient.1.html\""
1828
">online</ulink>."
1829
msgstr ""
1830
1831
#: serverguide/C/windows-networking.xml:1295(para)
1832
msgid ""
1833
"The <application>mount.cifs</application><ulink "
1834
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man8/mount.cifs.8.html"
1835
"\">man page</ulink> is also useful for more detailed information."
1836
msgstr ""
1837
1838
#: serverguide/C/windows-networking.xml:1308(title)
1839
msgid "Likewise Open"
1840
msgstr "Likewise Open"
1841
1842
#: serverguide/C/windows-networking.xml:1310(para)
1843
msgid ""
1844
"<application>Likewise Open</application> simplifies the necessary "
1845
"configuration needed to authenticate a Linux machine to an Active Directory "
1846
"domain. Based on <application>winbind</application>, the "
1847
"<application>likewise-open</application> package takes the pain out of "
1848
"integrating Ubuntu authentication into an existing Windows network."
1849
msgstr ""
1850
"<application>Likewise Open</application> simplifies the necessary "
1851
"configuration needed to authenticate a Linux machine to an Active Directory "
1852
"domain. Based on <application>winbind</application>, the "
1853
"<application>likewise-open</application> package takes the pain out of "
1854
"integrating Ubuntu authentication into an existing Windows network."
1855
1856
#: serverguide/C/windows-networking.xml:1319(para)
1857
msgid ""
1858
"There are two ways to use Likewise Open, <application>likewise-"
1859
"open</application> the command line utility and <application>likewise-open-"
1860
"gui</application>. This section focuses on the command line utility."
1861
msgstr ""
1862
"There are two ways to use Likewise Open, <application>likewise-"
1863
"open</application> the command line utility and <application>likewise-open-"
1864
"gui</application>. This section focuses on the command line utility."
1865
1866
#: serverguide/C/windows-networking.xml:1324(para)
1867
msgid ""
1868
"To install the <application>likewise-open</application> package, open a "
1869
"terminal prompt and enter:"
1870
msgstr ""
1871
"To install the <application>likewise-open</application> package, open a "
1872
"terminal prompt and enter:"
1873
1874
#: serverguide/C/windows-networking.xml:1329(command)
1875
msgid "sudo apt-get install likewise-open"
1876
msgstr "sudo apt-get install likewise-open"
1877
1878
#: serverguide/C/windows-networking.xml:1334(title)
1879
msgid "Joining a Domain"
1880
msgstr "Joining a Domain"
1881
1882
#: serverguide/C/windows-networking.xml:1336(para)
1883
msgid ""
1884
"The main executable file of the <application>likewise-open</application> "
1885
"package is <filename>/usr/bin/domainjoin-cli</filename>, which is used to "
1886
"join your computer to the domain. Before you join a domain you will need to "
1887
"make sure you have:"
1888
msgstr ""
1889
"The main executable file of the <application>likewise-open</application> "
1890
"package is <filename>/usr/bin/domainjoin-cli</filename>, which is used to "
1891
"join your computer to the domain. Before you join a domain you will need to "
1892
"make sure you have:"
1893
1894
#: serverguide/C/windows-networking.xml:1344(para)
1895
msgid ""
1896
"Access to an Active Directory user with appropriate rights to join the "
1897
"domain."
1898
msgstr ""
1899
"Access to an Active Directory user with appropriate rights to join the "
1900
"domain."
1901
1902
#: serverguide/C/windows-networking.xml:1349(para)
1903
msgid ""
1904
"The <emphasis>Fully Qualified Domain Name</emphasis> (FQDN) of the domain "
1905
"you want to join. If your AD domain does not match a valid domain such as "
1906
"<emphasis role=\"italic\">example.com</emphasis>, it is likely that it has "
1907
"the form of <emphasis>domainname.local</emphasis>."
1908
msgstr ""
1909
"The <emphasis>Fully Qualified Domain Name</emphasis> (FQDN) of the domain "
1910
"you want to join. If your AD domain does not match a valid domain such as "
1911
"<emphasis role=\"italic\">example.com</emphasis>, it is likely that it has "
1912
"the form of <emphasis>domainname.local</emphasis>."
1913
1914
#: serverguide/C/windows-networking.xml:1356(para)
1915
msgid ""
1916
"DNS for the domain setup properly. In a production AD environment this "
1917
"should be the case. Proper Microsoft DNS is needed so that client "
1918
"workstations can determine the Active Directory domain is available."
1919
msgstr ""
1920
"DNS for the domain setup properly. In a production AD environment this "
1921
"should be the case. Proper Microsoft DNS is needed so that client "
1922
"workstations can determine the Active Directory domain is available."
1923
1924
#: serverguide/C/windows-networking.xml:1360(para)
1925
msgid ""
1926
"If you don't have a Windows DNS server on your network, see <xref "
1927
"linkend=\"likewise-open-ms-dns\"/> for details."
1928
msgstr ""
1929
"If you don't have a Windows DNS server on your network, see <xref "
1930
"linkend=\"likewise-open-ms-dns\"/> for details."
1931
1932
#: serverguide/C/windows-networking.xml:1367(para)
1933
msgid "To join a domain, from a terminal prompt enter:"
1934
msgstr "To join a domain, from a terminal prompt enter:"
1935
1936
#: serverguide/C/windows-networking.xml:1372(command)
1937
msgid "sudo domainjoin-cli join example.com Administrator"
1938
msgstr "sudo domainjoin-cli join example.com Administrator"
1939
1940
#: serverguide/C/windows-networking.xml:1376(para)
1941
msgid ""
1942
"Replace <emphasis>example.com</emphasis> with your domain name, and "
1943
"<emphasis>Administrator</emphasis> with the appropriate user name."
1944
msgstr ""
1945
"Replace <emphasis>example.com</emphasis> with your domain name, and "
1946
"<emphasis>Administrator</emphasis> with the appropriate user name."
1947
1948
#: serverguide/C/windows-networking.xml:1382(para)
1949
msgid ""
1950
"You will then be prompted for the user's password. If all goes well a "
1951
"<emphasis>SUCCESS</emphasis> message should be printed to the console."
1952
msgstr ""
1953
"You will then be prompted for the user's password. If all goes well a "
1954
"<emphasis>SUCCESS</emphasis> message should be printed to the console."
1955
1956
#: serverguide/C/windows-networking.xml:1388(para)
1957
msgid ""
1958
"After joining the domain, it is necessary to reboot before attempting to "
1959
"authenticate against the domain."
1960
msgstr ""
1961
"After joining the domain, it is necessary to reboot before attempting to "
1962
"authenticate against the domain."
1963
1964
#: serverguide/C/windows-networking.xml:1394(para)
1965
msgid ""
1966
"After successfully joining an Ubuntu machine to an Active Directory domain "
1967
"you can authenticate using any valid AD user. To login you will need to "
1968
"enter the user name as 'domain\\username'. For example to ssh to a server "
1969
"joined to the domain enter:"
1970
msgstr ""
1971
"After successfully joining an Ubuntu machine to an Active Directory domain "
1972
"you can authenticate using any valid AD user. To login you will need to "
1973
"enter the user name as 'domain\\username'. For example to ssh to a server "
1974
"joined to the domain enter:"
1975
1976
#: serverguide/C/windows-networking.xml:1401(command)
1977
msgid "ssh 'example\\steve'@hostname"
1978
msgstr "ssh 'example\\steve'@hostname"
1979
1980
#: serverguide/C/windows-networking.xml:1405(para)
1981
msgid ""
1982
"If configuring a Desktop the user name will need to be prefixed with "
1983
"<emphasis role=\"italic\">domain\\</emphasis> in the graphical logon as well."
1984
msgstr ""
1985
"If configuring a Desktop the user name will need to be prefixed with "
1986
"<emphasis role=\"italic\">domain\\</emphasis> in the graphical logon as well."
1987
1988
#: serverguide/C/windows-networking.xml:1411(para)
1989
msgid ""
1990
"To make likewise-open use a default domain, you can add the following "
1991
"statement to <filename>/etc/samba/lwiauthd.conf</filename>:"
1992
msgstr ""
1993
"To make likewise-open use a default domain, you can add the following "
1994
"statement to <filename>/etc/samba/lwiauthd.conf</filename>:"
1995
1996
#: serverguide/C/windows-networking.xml:1415(programlisting)
1997
#, no-wrap
1998
msgid ""
1999
"\n"
2000
"winbind use default domain = yes\n"
2001
msgstr ""
2002
"\n"
2003
"winbind use default domain = yes\n"
2004
2005
#: serverguide/C/windows-networking.xml:1419(para)
2006
msgid "Then restart the <application>likewise-open</application> daemons:"
2007
msgstr "Then restart the <application>likewise-open</application> daemons:"
2008
2009
#: serverguide/C/windows-networking.xml:1424(command)
2010
msgid "sudo /etc/init.d/likewise-open restart"
2011
msgstr "sudo /etc/init.d/likewise-open restart"
2012
2013
#: serverguide/C/windows-networking.xml:1428(para)
2014
msgid ""
2015
"Once configured for a <emphasis>default domain</emphasis> the <emphasis "
2016
"role=\"italic\">'domain\\'</emphasis> is no longer required, users can login "
2017
"using only their username."
2018
msgstr ""
2019
"Once configured for a <emphasis>default domain</emphasis> the <emphasis "
2020
"role=\"italic\">'domain\\'</emphasis> is no longer required, users can login "
2021
"using only their username."
2022
2023
#: serverguide/C/windows-networking.xml:1434(para)
2024
msgid ""
2025
"The <application>domainjoin-cli</application> utility can also be used to "
2026
"leave the domain. From a terminal:"
2027
msgstr ""
2028
"The <application>domainjoin-cli</application> utility can also be used to "
2029
"leave the domain. From a terminal:"
2030
2031
#: serverguide/C/windows-networking.xml:1439(command)
2032
msgid "sudo domainjoin-cli leave"
2033
msgstr "sudo domainjoin-cli leave"
2034
2035
#: serverguide/C/windows-networking.xml:1444(title) serverguide/C/security.xml:1772(title)
2036
msgid "Other Utilities"
2037
msgstr "Other Utilities"
2038
2039
#: serverguide/C/windows-networking.xml:1446(para)
2040
msgid ""
2041
"The <application>likewise-open</application> package comes with a few other "
2042
"utilities that may be useful for gathering information about the Active "
2043
"Directory environment. These utilities are used to join the machine to the "
2044
"domain, and are the same as those available in the <application>samba-"
2045
"common</application> and <application>winbind</application> packages:"
2046
msgstr ""
2047
"The <application>likewise-open</application> package comes with a few other "
2048
"utilities that may be useful for gathering information about the Active "
2049
"Directory environment. These utilities are used to join the machine to the "
2050
"domain, and are the same as those available in the <application>samba-"
2051
"common</application> and <application>winbind</application> packages:"
2052
2053
#: serverguide/C/windows-networking.xml:1455(para)
2054
msgid ""
2055
"<application>lwinet</application>: Returns information about the network and "
2056
"the domain."
2057
msgstr ""
2058
"<application>lwinet</application>: Returns information about the network and "
2059
"the domain."
2060
2061
#: serverguide/C/windows-networking.xml:1460(para)
2062
msgid ""
2063
"<application>lwimsg</application>: Allows interaction with the "
2064
"<application>likewise-winbindd</application> daemon."
2065
msgstr ""
2066
"<application>lwimsg</application>: Allows interaction with the "
2067
"<application>likewise-winbindd</application> daemon."
2068
2069
#: serverguide/C/windows-networking.xml:1465(para)
2070
msgid ""
2071
"<application>lwiinfo</application>: Displays information about various parts "
2072
"of the Domain."
2073
msgstr ""
2074
"<application>lwiinfo</application>: Displays information about various parts "
2075
"of the Domain."
2076
2077
#: serverguide/C/windows-networking.xml:1471(para)
2078
msgid "Please refer to each utility's man page specific for details."
2079
msgstr "Please refer to each utility's man page specific for details."
2080
2081
#: serverguide/C/windows-networking.xml:1477(title) serverguide/C/mail.xml:351(title) serverguide/C/mail.xml:1631(title) serverguide/C/dns.xml:338(title)
2082
msgid "Troubleshooting"
2083
msgstr "Troubleshooting"
2084
2085
#: serverguide/C/windows-networking.xml:1481(para)
2086
msgid ""
2087
"If the client has trouble joining the domain, double check that the "
2088
"Microsoft DNS is listed first in <filename>/etc/resolv.conf</filename>. For "
2089
"example:"
2090
msgstr ""
2091
"If the client has trouble joining the domain, double check that the "
2092
"Microsoft DNS is listed first in <filename>/etc/resolv.conf</filename>. For "
2093
"example:"
2094
2095
#: serverguide/C/windows-networking.xml:1486(programlisting)
2096
#, no-wrap
2097
msgid ""
2098
"\n"
2099
"nameserver 192.168.0.1\n"
2100
msgstr ""
2101
"\n"
2102
"nameserver 192.168.0.1\n"
2103
2104
#: serverguide/C/windows-networking.xml:1491(para)
2105
msgid ""
2106
"For more information when joining a domain, use the <emphasis>--loglevel "
2107
"verbose</emphasis> or <emphasis>--advanced</emphasis> option of the "
2108
"<application>domainjoin-cli</application> utility:"
2109
msgstr ""
2110
"For more information when joining a domain, use the <emphasis>--loglevel "
2111
"verbose</emphasis> or <emphasis>--advanced</emphasis> option of the "
2112
"<application>domainjoin-cli</application> utility:"
2113
2114
#: serverguide/C/windows-networking.xml:1497(command)
2115
msgid "sudo domainjoin-cli --loglevel verbose join example.com Administrator"
2116
msgstr ""
2117
"sudo domainjoin-cli --loglevel verbose join example.com Administrator"
2118
2119
#: serverguide/C/windows-networking.xml:1501(para)
2120
msgid ""
2121
"If an Active Directory user has trouble logging in, check the "
2122
"<filename>/var/log/auth.log</filename> for details."
2123
msgstr ""
2124
"If an Active Directory user has trouble logging in, check the "
2125
"<filename>/var/log/auth.log</filename> for details."
2126
2127
#: serverguide/C/windows-networking.xml:1506(para)
2128
msgid ""
2129
"When joining an Ubuntu Desktop workstation to a domain, you may need to edit "
2130
"<filename>/etc/nsswitch.conf</filename> if your AD domain uses the <emphasis "
2131
"role=\"italic\">.local</emphasis> syntax. In order to join the domain the "
2132
"<emphasis>\"mdns4\"</emphasis> entry should be removed from the "
2133
"<emphasis>hosts</emphasis> option. For example:"
2134
msgstr ""
2135
"When joining an Ubuntu Desktop workstation to a domain, you may need to edit "
2136
"<filename>/etc/nsswitch.conf</filename> if your AD domain uses the <emphasis "
2137
"role=\"italic\">.local</emphasis> syntax. In order to join the domain the "
2138
"<emphasis>\"mdns4\"</emphasis> entry should be removed from the "
2139
"<emphasis>hosts</emphasis> option. For example:"
2140
2141
#: serverguide/C/windows-networking.xml:1512(programlisting)
2142
#, no-wrap
2143
msgid ""
2144
"\n"
2145
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
2146
msgstr ""
2147
"\n"
2148
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
2149
2150
#: serverguide/C/windows-networking.xml:1516(para)
2151
msgid "Change the above to:"
2152
msgstr "Change the above to:"
2153
2154
#: serverguide/C/windows-networking.xml:1520(programlisting)
2155
#, no-wrap
2156
msgid ""
2157
"\n"
2158
"hosts: files dns [NOTFOUND=return]\n"
2159
msgstr ""
2160
"\n"
2161
"hosts: files dns [NOTFOUND=return]\n"
2162
2163
#: serverguide/C/windows-networking.xml:1524(para)
2164
msgid "Then restart networking by entering:"
2165
msgstr "Then restart networking by entering:"
2166
2167
#: serverguide/C/windows-networking.xml:1529(command) serverguide/C/network-config.xml:559(command)
2168
msgid "sudo /etc/init.d/networking restart"
2169
msgstr "sudo /etc/init.d/networking restart"
2170
2171
#: serverguide/C/windows-networking.xml:1532(para)
2172
msgid "You should now be able to join the Active Directory domain."
2173
msgstr "You should now be able to join the Active Directory domain."
2174
2175
#: serverguide/C/windows-networking.xml:1540(title)
2176
msgid "Microsoft DNS"
2177
msgstr "Microsoft DNS"
2178
2179
#: serverguide/C/windows-networking.xml:1542(para)
2180
msgid ""
2181
"The following are instructions for installing DNS on an Active Directory "
2182
"domain controller running Windows Server 2003, but the instructions should "
2183
"be similar for other versions:"
2184
msgstr ""
2185
"The following are instructions for installing DNS on an Active Directory "
2186
"domain controller running Windows Server 2003, but the instructions should "
2187
"be similar for other versions:"
2188
2189
#: serverguide/C/windows-networking.xml:1551(para)
2190
msgid ""
2191
"Click "
2192
"<menuchoice><guimenuitem>Start</guimenuitem><guimenuitem>Administrative Tools"
2193
"</guimenuitem><guimenuitem>Manage Your Server</guimenuitem></menuchoice>. "
2194
"This will open the <application>Server Role Mangement</application> utility."
2195
msgstr ""
2196
"Click "
2197
"<menuchoice><guimenuitem>Start</guimenuitem><guimenuitem>Administrative Tools"
2198
"</guimenuitem><guimenuitem>Manage Your Server</guimenuitem></menuchoice>. "
2199
"This will open the <application>Server Role Mangement</application> utility."
2200
2201
#: serverguide/C/windows-networking.xml:1559(para)
2202
msgid "Click <guilabel>Add or remove a role</guilabel>"
2203
msgstr "Click <guilabel>Add or remove a role</guilabel>"
2204
2205
#: serverguide/C/windows-networking.xml:1560(para) serverguide/C/windows-networking.xml:1562(para) serverguide/C/windows-networking.xml:1565(para)
2206
msgid "Click Next"
2207
msgstr "Click Next"
2208
2209
#: serverguide/C/windows-networking.xml:1561(para)
2210
msgid "Select \"DNS Server\""
2211
msgstr "Select \"DNS Server\""
2212
2213
#: serverguide/C/windows-networking.xml:1563(para)
2214
msgid "Click Next again to proceed"
2215
msgstr "Click Next again to proceed"
2216
2217
#: serverguide/C/windows-networking.xml:1564(para)
2218
msgid "Select \"Create a forward lookup zone\" if it is not selected."
2219
msgstr "Select \"Create a forward lookup zone\" if it is not selected."
2220
2221
#: serverguide/C/windows-networking.xml:1566(para)
2222
msgid ""
2223
"Make sure \"This server maintains the zone\" is selected and click Next."
2224
msgstr ""
2225
"Make sure \"This server maintains the zone\" is selected and click Next."
2226
2227
#: serverguide/C/windows-networking.xml:1567(para)
2228
msgid "Enter your domain name and click Next"
2229
msgstr "Enter your domain name and click Next"
2230
2231
#: serverguide/C/windows-networking.xml:1568(para)
2232
msgid "Click Next to \"Allow only secure dynamic updates\""
2233
msgstr "Click Next to \"Allow only secure dynamic updates\""
2234
2235
#: serverguide/C/windows-networking.xml:1570(para)
2236
msgid ""
2237
"Enter the IP for DNS servers to forward queries to, or Select \"No, it "
2238
"should not forward queries\" and click Next."
2239
msgstr ""
2240
"Enter the IP for DNS servers to forward queries to, or Select \"No, it "
2241
"should not forward queries\" and click Next."
2242
2243
#: serverguide/C/windows-networking.xml:1574(para) serverguide/C/windows-networking.xml:1575(para)
2244
msgid "Click Finish"
2245
msgstr "Click Finish"
2246
2247
#: serverguide/C/windows-networking.xml:1577(para)
2248
msgid ""
2249
"DNS is now installed and can be further configured using the "
2250
"<application>Microsoft Management Console</application> DNS snap-in."
2251
msgstr ""
2252
"DNS is now installed and can be further configured using the "
2253
"<application>Microsoft Management Console</application> DNS snap-in."
2254
2255
#: serverguide/C/windows-networking.xml:1585(para)
2256
msgid "Click Start"
2257
msgstr "Click Start"
2258
2259
#: serverguide/C/windows-networking.xml:1586(para)
2260
msgid "Control Panel"
2261
msgstr "Control Panel"
2262
2263
#: serverguide/C/windows-networking.xml:1587(para)
2264
msgid "Network Connections"
2265
msgstr "Network Connections"
2266
2267
#: serverguide/C/windows-networking.xml:1588(para)
2268
msgid "Right Click \"Local Area Connection\""
2269
msgstr "Right Click \"Local Area Connection\""
2270
2271
#: serverguide/C/windows-networking.xml:1589(para)
2272
msgid "Click Properties"
2273
msgstr "Click Properties"
2274
2275
#: serverguide/C/windows-networking.xml:1590(para)
2276
msgid "Double click \"Internet Protocol (TCP/IP)\""
2277
msgstr "Double click \"Internet Protocol (TCP/IP)\""
2278
2279
#: serverguide/C/windows-networking.xml:1591(para)
2280
msgid "Enter the Server's IP Address as the \"Preferred DNS server\""
2281
msgstr "Enter the Server's IP Address as the \"Preferred DNS server\""
2282
2283
#: serverguide/C/windows-networking.xml:1592(para)
2284
msgid "Click Ok"
2285
msgstr "Click Ok"
2286
2287
#: serverguide/C/windows-networking.xml:1593(para)
2288
msgid "Click Ok again to save the settings"
2289
msgstr "Click Ok again to save the settings"
2290
2291
#: serverguide/C/windows-networking.xml:1582(para)
2292
msgid ""
2293
"Next, configure the Server to use itself for DNS queries: <placeholder-1/>"
2294
msgstr ""
2295
"Next, configure the Server to use itself for DNS queries: <placeholder-1/>"
2296
2297
#: serverguide/C/windows-networking.xml:1600(title) serverguide/C/web-servers.xml:624(title) serverguide/C/web-servers.xml:772(title) serverguide/C/web-servers.xml:922(title) serverguide/C/web-servers.xml:1017(title) serverguide/C/web-servers.xml:1239(title) serverguide/C/vpn.xml:303(title) serverguide/C/virtualization.xml:2154(title) serverguide/C/vcs.xml:539(title) serverguide/C/security.xml:872(title) serverguide/C/security.xml:1206(title) serverguide/C/security.xml:1621(title) serverguide/C/security.xml:1812(title) serverguide/C/remote-administration.xml:202(title) serverguide/C/package-management.xml:454(title) serverguide/C/other-apps.xml:330(title) serverguide/C/network-config.xml:1006(title) serverguide/C/network-config.xml:1107(title) serverguide/C/monitoring.xml:391(title) serverguide/C/monitoring.xml:527(title) serverguide/C/mail.xml:459(title) serverguide/C/mail.xml:643(title) serverguide/C/mail.xml:795(title) serverguide/C/mail.xml:1217(title) serverguide/C/mail.xml:1679(title) serverguide/C/lamp-applications.xml:259(title) serverguide/C/lamp-applications.xml:388(title) serverguide/C/lamp-applications.xml:496(title) serverguide/C/file-server.xml:284(title) serverguide/C/file-server.xml:436(title) serverguide/C/file-server.xml:619(title) serverguide/C/dns.xml:572(title) serverguide/C/clustering.xml:234(title) serverguide/C/chat.xml:107(title) serverguide/C/chat.xml:221(title) serverguide/C/backups.xml:297(title)
2298
msgid "References"
2299
msgstr "References"
2300
2301
#: serverguide/C/windows-networking.xml:1602(para)
2302
msgid ""
2303
"Please refer to the <ulink "
2304
"url=\"http://www.likewisesoftware.com/\">Likewise</ulink> home page for "
2305
"further information."
2306
msgstr ""
2307
"Please refer to the <ulink "
2308
"url=\"http://www.likewisesoftware.com/\">Likewise</ulink> home page for "
2309
"further information."
2310
2311
#: serverguide/C/windows-networking.xml:1606(para)
2312
msgid ""
2313
"For more <application>domainjoin-cli</application> options see the man page: "
2314
"<command>man domainjoin-cli</command>."
2315
msgstr ""
2316
"For more <application>domainjoin-cli</application> options see the man page: "
2317
"<command>man domainjoin-cli</command>."
2318
2319
#: serverguide/C/windows-networking.xml:1610(para)
2320
msgid ""
2321
"Also, see the <ulink "
2322
"url=\"https://help.ubuntu.com/community/LikewiseOpen\">Ubuntu Wiki "
2323
"LikewiseOpen</ulink> page."
2324
msgstr ""
2325
2326
#: serverguide/C/web-servers.xml:13(title)
2327
msgid "Web Servers"
2328
msgstr "Web Servers"
2329
2330
#: serverguide/C/web-servers.xml:14(para)
2331
msgid ""
2332
"A Web server is a software responsible for accepting HTTP requests from "
2333
"clients, which are known as Web browsers, and serving them HTTP responses "
2334
"along with optional data contents, which usually are Web pages such as HTML "
2335
"documents and linked objects (images, etc.)."
2336
msgstr ""
2337
"A Web server is a software responsible for accepting HTTP requests from "
2338
"clients, which are known as Web browsers, and serving them HTTP responses "
2339
"along with optional data contents, which usually are Web pages such as HTML "
2340
"documents and linked objects (images, etc.)."
2341
2342
#: serverguide/C/web-servers.xml:19(title)
2343
msgid "HTTPD - Apache2 Web Server"
2344
msgstr "HTTPD - Apache2 Web Server"
2345
2346
#: serverguide/C/web-servers.xml:20(para)
2347
msgid ""
2348
"Apache is the most commonly used Web Server on Linux systems. Web Servers "
2349
"are used to serve Web Pages requested by client computers. Clients typically "
2350
"request and view Web Pages using Web Browser applications such as "
2351
"<application>Firefox</application>, <application>Opera</application>, or "
2352
"<application>Mozilla</application>."
2353
msgstr ""
2354
"Apache is the most commonly used Web Server on Linux systems. Web Servers "
2355
"are used to serve Web Pages requested by client computers. Clients typically "
2356
"request and view Web Pages using Web Browser applications such as "
2357
"<application>Firefox</application>, <application>Opera</application>, or "
2358
"<application>Mozilla</application>."
2359
2360
#: serverguide/C/web-servers.xml:24(para)
2361
msgid ""
2362
"Users enter a Uniform Resource Locator (URL) to point to a Web server by "
2363
"means of its Fully Qualified Domain Name (FQDN) and a path to the required "
2364
"resource. For example, to view the home page of the <ulink "
2365
"url=\"http://www.ubuntu.com\">Ubuntu Web site</ulink> a user will enter only "
2366
"the FQDN. To request specific information about <ulink "
2367
"url=\"http://www.ubuntu.com/support/paid\">paid support</ulink>, a user will "
2368
"enter the FQDN followed by a path."
2369
msgstr ""
2370
"Users enter a Uniform Resource Locator (URL) to point to a Web server by "
2371
"means of its Fully Qualified Domain Name (FQDN) and a path to the required "
2372
"resource. For example, to view the home page of the <ulink "
2373
"url=\"http://www.ubuntu.com\">Ubuntu Web site</ulink> a user will enter only "
2374
"the FQDN. To request specific information about <ulink "
2375
"url=\"http://www.ubuntu.com/support/paid\">paid support</ulink>, a user will "
2376
"enter the FQDN followed by a path."
2377
2378
#: serverguide/C/web-servers.xml:29(para)
2379
msgid ""
2380
"The most common protocol used to transfer Web pages is the Hyper Text "
2381
"Transfer Protocol (HTTP). Protocols such as Hyper Text Transfer Protocol "
2382
"over Secure Sockets Layer (HTTPS), and File Transfer Protocol (FTP), a "
2383
"protocol for uploading and downloading files, are also supported."
2384
msgstr ""
2385
"The most common protocol used to transfer Web pages is the Hyper Text "
2386
"Transfer Protocol (HTTP). Protocols such as Hyper Text Transfer Protocol "
2387
"over Secure Sockets Layer (HTTPS), and File Transfer Protocol (FTP), a "
2388
"protocol for uploading and downloading files, are also supported."
2389
2390
#: serverguide/C/web-servers.xml:33(para)
2391
msgid ""
2392
"Apache Web Servers are often used in combination with the "
2393
"<application>MySQL</application> database engine, the HyperText Preprocessor "
2394
"(<application>PHP</application>) scripting language, and other popular "
2395
"scripting languages such as <application>Python</application> and "
2396
"<application>Perl</application>. This configuration is termed LAMP (Linux, "
2397
"Apache, MySQL and Perl/Python/PHP) and forms a powerful and robust platform "
2398
"for the development and deployment of Web-based applications."
2399
msgstr ""
2400
"Apache Web Servers are often used in combination with the "
2401
"<application>MySQL</application> database engine, the HyperText Preprocessor "
2402
"(<application>PHP</application>) scripting language, and other popular "
2403
"scripting languages such as <application>Python</application> and "
2404
"<application>Perl</application>. This configuration is termed LAMP (Linux, "
2405
"Apache, MySQL and Perl/Python/PHP) and forms a powerful and robust platform "
2406
"for the development and deployment of Web-based applications."
2407
2408
#: serverguide/C/web-servers.xml:42(para)
2409
msgid ""
2410
"The <application>Apache2</application> web server is available in Ubuntu "
2411
"Linux. To install Apache2:"
2412
msgstr ""
2413
"The <application>Apache2</application> web server is available in Ubuntu "
2414
"Linux. To install Apache2:"
2415
2416
#: serverguide/C/web-servers.xml:48(para)
2417
msgid "At a terminal prompt enter the following command:"
2418
msgstr "At a terminal prompt enter the following command:"
2419
2420
#: serverguide/C/web-servers.xml:53(command)
2421
msgid "sudo apt-get install apache2"
2422
msgstr "sudo apt-get install apache2"
2423
2424
#: serverguide/C/web-servers.xml:63(para)
2425
msgid ""
2426
"Apache2 is configured by placing <emphasis>directives</emphasis> in plain "
2427
"text configuration files. These <emphasis>directives</emphasis> are "
2428
"separated between the following files and directories:"
2429
msgstr ""
2430
"Apache2 is configured by placing <emphasis>directives</emphasis> in plain "
2431
"text configuration files. These <emphasis>directives</emphasis> are "
2432
"separated between the following files and directories:"
2433
2434
#: serverguide/C/web-servers.xml:71(para)
2435
msgid ""
2436
"<emphasis>apache2.conf:</emphasis> the main Apache2 configuration file. "
2437
"Contains settings that are <emphasis>global</emphasis> to Apache2."
2438
msgstr ""
2439
"<emphasis>apache2.conf:</emphasis> the main Apache2 configuration file. "
2440
"Contains settings that are <emphasis>global</emphasis> to Apache2."
2441
2442
#: serverguide/C/web-servers.xml:77(para)
2443
msgid ""
2444
"<emphasis>conf.d:</emphasis> contains configuration files which apply "
2445
"<emphasis>globally</emphasis> to Apache2. Other packages that use Apache2 to "
2446
"serve content may add files, or symlinks, to this directory."
2447
msgstr ""
2448
"<emphasis>conf.d:</emphasis> contains configuration files which apply "
2449
"<emphasis>globally</emphasis> to Apache2. Other packages that use Apache2 to "
2450
"serve content may add files, or symlinks, to this directory."
2451
2452
#: serverguide/C/web-servers.xml:83(para)
2453
msgid ""
2454
"<emphasis>envvars:</emphasis> file where Apache2 "
2455
"<emphasis>environment</emphasis> variables are set."
2456
msgstr ""
2457
"<emphasis>envvars:</emphasis> file where Apache2 "
2458
"<emphasis>environment</emphasis> variables are set."
2459
2460
#: serverguide/C/web-servers.xml:88(para)
2461
msgid ""
2462
"<emphasis>httpd.conf:</emphasis> historically the main Apache2 configuration "
2463
"file, named after the <application>httpd</application> daemon. The file can "
2464
"be used for <emphasis>user specific</emphasis> configuration options that "
2465
"globally effect Apache2."
2466
msgstr ""
2467
"<emphasis>httpd.conf:</emphasis> historically the main Apache2 configuration "
2468
"file, named after the <application>httpd</application> daemon. The file can "
2469
"be used for <emphasis>user specific</emphasis> configuration options that "
2470
"globally effect Apache2."
2471
2472
#: serverguide/C/web-servers.xml:95(para)
2473
msgid ""
2474
"<emphasis>mods-available:</emphasis> this directory contains configuration "
2475
"files to both load <emphasis>modules</emphasis> and configure them. Not all "
2476
"modules will have specific configuration files, however."
2477
msgstr ""
2478
"<emphasis>mods-available:</emphasis> this directory contains configuration "
2479
"files to both load <emphasis>modules</emphasis> and configure them. Not all "
2480
"modules will have specific configuration files, however."
2481
2482
#: serverguide/C/web-servers.xml:101(para)
2483
msgid ""
2484
"<emphasis>mods-enabled:</emphasis> holds <emphasis>symlinks</emphasis> to "
2485
"the files in <filename>/etc/apache2/mods-available</filename>. When a module "
2486
"configuration file is symlinked it will be enabled the next time "
2487
"<application>apache2</application> is restarted."
2488
msgstr ""
2489
"<emphasis>mods-enabled:</emphasis> holds <emphasis>symlinks</emphasis> to "
2490
"the files in <filename>/etc/apache2/mods-available</filename>. When a module "
2491
"configuration file is symlinked it will be enabled the next time "
2492
"<application>apache2</application> is restarted."
2493
2494
#: serverguide/C/web-servers.xml:108(para)
2495
msgid ""
2496
"<emphasis>ports.conf:</emphasis> houses the directives that determine which "
2497
"TCP ports Apache2 is listening on."
2498
msgstr ""
2499
"<emphasis>ports.conf:</emphasis> houses the directives that determine which "
2500
"TCP ports Apache2 is listening on."
2501
2502
#: serverguide/C/web-servers.xml:113(para)
2503
msgid ""
2504
"<emphasis>sites-available:</emphasis> this directory has configuration files "
2505
"for Apache2 <emphasis>Virtual Hosts</emphasis>. Virtual Hosts allow Apache2 "
2506
"to be configured for multiple sites that have separate configurations."
2507
msgstr ""
2508
"<emphasis>sites-available:</emphasis> this directory has configuration files "
2509
"for Apache2 <emphasis>Virtual Hosts</emphasis>. Virtual Hosts allow Apache2 "
2510
"to be configured for multiple sites that have separate configurations."
2511
2512
#: serverguide/C/web-servers.xml:119(para)
2513
msgid ""
2514
"<emphasis>sites-enabled:</emphasis> like mods-enabled, <filename "
2515
"role=\"directory\">sites-enabled</filename> contains symlinks to the "
2516
"<filename>/etc/apache2/sites-available</filename> directory. Similarly when "
2517
"a configuration file in sites-available is symlinked, the site configured by "
2518
"it will be active once Apache2 is restarted."
2519
msgstr ""
2520
"<emphasis>sites-enabled:</emphasis> like mods-enabled, <filename "
2521
"role=\"directory\">sites-enabled</filename> contains symlinks to the "
2522
"<filename>/etc/apache2/sites-available</filename> directory. Similarly when "
2523
"a configuration file in sites-available is symlinked, the site configured by "
2524
"it will be active once Apache2 is restarted."
2525
2526
#: serverguide/C/web-servers.xml:127(para)
2527
msgid ""
2528
"In addition, other configuration files may be added using the "
2529
"<emphasis>Include</emphasis> directive, and wildcards can be used to include "
2530
"many configuration files. Any directive may be placed in any of these "
2531
"configuration files. Changes to the main configuration files are only "
2532
"recognized by Apache2 when it is started or restarted."
2533
msgstr ""
2534
"In addition, other configuration files may be added using the "
2535
"<emphasis>Include</emphasis> directive, and wildcards can be used to include "
2536
"many configuration files. Any directive may be placed in any of these "
2537
"configuration files. Changes to the main configuration files are only "
2538
"recognised by Apache2 when it is started or restarted."
2539
2540
#: serverguide/C/web-servers.xml:136(para)
2541
msgid ""
2542
"The server also reads a file containing mime document types; the filename is "
2543
"set by the <emphasis>TypesConfig</emphasis> directive, and is "
2544
"<filename>/etc/mime.types</filename> by default."
2545
msgstr ""
2546
"The server also reads a file containing mime document types; the filename is "
2547
"set by the <emphasis>TypesConfig</emphasis> directive, and is "
2548
"<filename>/etc/mime.types</filename> by default."
2549
2550
#: serverguide/C/web-servers.xml:141(title)
2551
msgid "Basic Settings"
2552
msgstr "Basic Settings"
2553
2554
#: serverguide/C/web-servers.xml:142(para)
2555
msgid ""
2556
"This section explains Apache2 server essential configuration parameters. "
2557
"Refer to the <ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2558
"Documentation</ulink> for more details."
2559
msgstr ""
2560
"This section explains Apache2 server essential configuration parameters. "
2561
"Refer to the <ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2562
"Documentation</ulink> for more details."
2563
2564
#: serverguide/C/web-servers.xml:150(para)
2565
msgid ""
2566
"Apache2 ships with a virtual-host-friendly default configuration. That is, "
2567
"it is configured with a single default virtual host (using the "
2568
"<emphasis>VirtualHost</emphasis> directive) which can modified or used as-is "
2569
"if you have a single site, or used as a template for additional virtual "
2570
"hosts if you have multiple sites. If left alone, the default virtual host "
2571
"will serve as your default site, or the site users will see if the URL they "
2572
"enter does not match the <emphasis>ServerName</emphasis> directive of any of "
2573
"your custom sites. To modify the default virtual host, edit the file "
2574
"<filename>/etc/apache2/sites-available/default</filename>."
2575
msgstr ""
2576
"Apache2 ships with a virtual-host-friendly default configuration. That is, "
2577
"it is configured with a single default virtual host (using the "
2578
"<emphasis>VirtualHost</emphasis> directive) which can modified or used as-is "
2579
"if you have a single site, or used as a template for additional virtual "
2580
"hosts if you have multiple sites. If left alone, the default virtual host "
2581
"will serve as your default site, or the site users will see if the URL they "
2582
"enter does not match the <emphasis>ServerName</emphasis> directive of any of "
2583
"your custom sites. To modify the default virtual host, edit the file "
2584
"<filename>/etc/apache2/sites-available/default</filename>."
2585
2586
#: serverguide/C/web-servers.xml:163(para)
2587
msgid ""
2588
"The directives set for a virtual host only apply to that particular virtual "
2589
"host. If a directive is set server-wide and not defined within the virtual "
2590
"host settings, the default setting is used. For example, you can define a "
2591
"Webmaster email address and not define individual email addresses for each "
2592
"virtual host."
2593
msgstr ""
2594
"The directives set for a virtual host only apply to that particular virtual "
2595
"host. If a directive is set server-wide and not defined within the virtual "
2596
"host settings, the default setting is used. For example, you can define a "
2597
"Webmaster e-mail address and not define individual e-mail addresses for each "
2598
"virtual host."
2599
2600
#: serverguide/C/web-servers.xml:171(para)
2601
msgid ""
2602
"If you wish to configure a new virtual host or site, copy that file into the "
2603
"same directory with a name you choose. For example:"
2604
msgstr ""
2605
"If you wish to configure a new virtual host or site, copy that file into the "
2606
"same directory with a name you choose. For example:"
2607
2608
#: serverguide/C/web-servers.xml:177(command)
2609
msgid ""
2610
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
2611
"available/mynewsite"
2612
msgstr ""
2613
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
2614
"available/mynewsite"
2615
2616
#: serverguide/C/web-servers.xml:180(para)
2617
msgid ""
2618
"Edit the new file to configure the new site using some of the directives "
2619
"described below."
2620
msgstr ""
2621
"Edit the new file to configure the new site using some of the directives "
2622
"described below."
2623
2624
#: serverguide/C/web-servers.xml:187(para)
2625
msgid ""
2626
"The <emphasis>ServerAdmin</emphasis> directive specifies the email address "
2627
"to be advertised for the server's administrator. The default value is "
2628
"webmaster@localhost. This should be changed to an email address that is "
2629
"delivered to you (if you are the server's administrator). If your website "
2630
"has a problem, Apache2 will display an error message containing this email "
2631
"address to report the problem to. Find this directive in your site's "
2632
"configuration file in /etc/apache2/sites-available."
2633
msgstr ""
2634
"The <emphasis>ServerAdmin</emphasis> directive specifies the e-mail address "
2635
"to be advertised for the server's administrator. The default value is "
2636
"webmaster@localhost. This should be changed to an e-mail address that is "
2637
"delivered to you (if you are the server's administrator). If your website "
2638
"has a problem, Apache2 will display an error message containing this e-mail "
2639
"address to report the problem to. Find this directive in your site's "
2640
"configuration file in /etc/apache2/sites-available."
2641
2642
#: serverguide/C/web-servers.xml:198(para)
2643
msgid ""
2644
"The <emphasis>Listen</emphasis> directive specifies the port, and optionally "
2645
"the IP address, Apache2 should listen on. If the IP address is not "
2646
"specified, Apache2 will listen on all IP addresses assigned to the machine "
2647
"it runs on. The default value for the Listen directive is 80. Change this to "
2648
"127.0.0.1:80 to cause Apache2 to listen only on your loopback interface so "
2649
"that it will not be available to the Internet, to (for example) 81 to change "
2650
"the port that it listens on, or leave it as is for normal operation. This "
2651
"directive can be found and changed in its own file, "
2652
"<filename>/etc/apache2/ports.conf</filename>"
2653
msgstr ""
2654
"The <emphasis>Listen</emphasis> directive specifies the port, and optionally "
2655
"the IP address, Apache2 should listen on. If the IP address is not "
2656
"specified, Apache2 will listen on all IP addresses assigned to the machine "
2657
"it runs on. The default value for the Listen directive is 80. Change this to "
2658
"127.0.0.1:80 to cause Apache2 to listen only on your loopback interface so "
2659
"that it will not be available to the Internet, to (for example) 81 to change "
2660
"the port that it listens on, or leave it as is for normal operation. This "
2661
"directive can be found and changed in its own file, "
2662
"<filename>/etc/apache2/ports.conf</filename>"
2663
2664
#: serverguide/C/web-servers.xml:211(para)
2665
msgid ""
2666
"The <emphasis>ServerName</emphasis> directive is optional and specifies what "
2667
"FQDN your site should answer to. The default virtual host has no ServerName "
2668
"directive specified, so it will respond to all requests that do not match a "
2669
"ServerName directive in another virtual host. If you have just acquired the "
2670
"domain name ubunturocks.com and wish to host it on your Ubuntu server, the "
2671
"value of the ServerName directive in your virtual host configuration file "
2672
"should be ubunturocks.com. Add this directive to the new virtual host file "
2673
"you created earlier (<filename>/etc/apache2/sites-"
2674
"available/mynewsite</filename>)."
2675
msgstr ""
2676
"The <emphasis>ServerName</emphasis> directive is optional and specifies what "
2677
"FQDN your site should answer to. The default virtual host has no ServerName "
2678
"directive specified, so it will respond to all requests that do not match a "
2679
"ServerName directive in another virtual host. If you have just acquired the "
2680
"domain name ubunturocks.com and wish to host it on your Ubuntu server, the "
2681
"value of the ServerName directive in your virtual host configuration file "
2682
"should be ubunturocks.com. Add this directive to the new virtual host file "
2683
"you created earlier (<filename>/etc/apache2/sites-"
2684
"available/mynewsite</filename>)."
2685
2686
#: serverguide/C/web-servers.xml:223(para)
2687
msgid ""
2688
"You may also want your site to respond to www.ubunturocks.com, since many "
2689
"users will assume the www prefix is appropriate. Use the "
2690
"<emphasis>ServerAlias</emphasis> directive for this. You may also use "
2691
"wildcards in the ServerAlias directive."
2692
msgstr ""
2693
"You may also want your site to respond to www.ubunturocks.com, since many "
2694
"users will assume the www prefix is appropriate. Use the "
2695
"<emphasis>ServerAlias</emphasis> directive for this. You may also use "
2696
"wildcards in the ServerAlias directive."
2697
2698
#: serverguide/C/web-servers.xml:230(para)
2699
msgid ""
2700
"For example, the following configuration will cause your site to respond to "
2701
"any domain request ending in <emphasis>.ubunturocks.com</emphasis>."
2702
msgstr ""
2703
"For example, the following configuration will cause your site to respond to "
2704
"any domain request ending in <emphasis>.ubunturocks.com</emphasis>."
2705
2706
#: serverguide/C/web-servers.xml:236(programlisting)
2707
#, no-wrap
2708
msgid ""
2709
"\n"
2710
"ServerAlias *.ubunturocks.com\n"
2711
msgstr ""
2712
"\n"
2713
"ServerAlias *.ubunturocks.com\n"
2714
2715
#: serverguide/C/web-servers.xml:242(para)
2716
msgid ""
2717
"The <emphasis>DocumentRoot</emphasis> directive specifies where Apache2 "
2718
"should look for the files that make up the site. The default value is "
2719
"/var/www. No site is configured there, but if you uncomment the "
2720
"<emphasis>RedirectMatch</emphasis> directive in "
2721
"<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
2722
"to /var/www/apache2-default where the default Apache2 site awaits. Change "
2723
"this value in your site's virtual host file, and remember to create that "
2724
"directory if necessary!"
2725
msgstr ""
2726
"The <emphasis>DocumentRoot</emphasis> directive specifies where Apache2 "
2727
"should look for the files that make up the site. The default value is "
2728
"/var/www. No site is configured there, but if you uncomment the "
2729
"<emphasis>RedirectMatch</emphasis> directive in "
2730
"<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
2731
"to /var/www/apache2-default where the default Apache2 site awaits. Change "
2732
"this value in your site's virtual host file, and remember to create that "
2733
"directory if necessary!"
2734
2735
#: serverguide/C/web-servers.xml:254(para)
2736
msgid ""
2737
"The /etc/apache2/sites-available directory is <emphasis role=\"bold\"> "
2738
"not</emphasis> parsed by Apache2. Symbolic links in /etc/apache2/sites-"
2739
"enabled point to \"available\" sites."
2740
msgstr ""
2741
"The /etc/apache2/sites-available directory is <emphasis role=\"bold\"> "
2742
"not</emphasis> parsed by Apache2. Symbolic links in /etc/apache2/sites-"
2743
"enabled point to \"available\" sites."
2744
2745
#: serverguide/C/web-servers.xml:260(para)
2746
msgid ""
2747
"Enable the new <emphasis>VirtualHost</emphasis> using the "
2748
"<application>a2ensite</application> utility and restart Apache2:"
2749
msgstr ""
2750
"Enable the new <emphasis>VirtualHost</emphasis> using the "
2751
"<application>a2ensite</application> utility and restart Apache2:"
2752
2753
#: serverguide/C/web-servers.xml:266(command)
2754
msgid "sudo a2ensite mynewsite"
2755
msgstr "sudo a2ensite mynewsite"
2756
2757
#: serverguide/C/web-servers.xml:267(command) serverguide/C/web-servers.xml:285(command) serverguide/C/web-servers.xml:538(command) serverguide/C/web-servers.xml:547(command) serverguide/C/web-servers.xml:606(command) serverguide/C/mail.xml:932(command) serverguide/C/lamp-applications.xml:228(command)
2758
msgid "sudo /etc/init.d/apache2 restart"
2759
msgstr "sudo /etc/init.d/apache2 restart"
2760
2761
#: serverguide/C/web-servers.xml:271(para)
2762
msgid ""
2763
"Be sure to replace <emphasis>mynewsite</emphasis> with a more descriptive "
2764
"name for the VirtualHost. One method is to name the file after the "
2765
"<emphasis>ServerName</emphasis> directive of the VirtualHost."
2766
msgstr ""
2767
"Be sure to replace <emphasis>mynewsite</emphasis> with a more descriptive "
2768
"name for the VirtualHost. One method is to name the file after the "
2769
"<emphasis>ServerName</emphasis> directive of the VirtualHost."
2770
2771
#: serverguide/C/web-servers.xml:278(para)
2772
msgid ""
2773
"Similarly, use the <application>a2dissite</application> utility to disable "
2774
"sites. This is can be useful when troubleshooting configuration problems "
2775
"with multiple VirtualHosts:"
2776
msgstr ""
2777
"Similarly, use the <application>a2dissite</application> utility to disable "
2778
"sites. This is can be useful when troubleshooting configuration problems "
2779
"with multiple VirtualHosts:"
2780
2781
#: serverguide/C/web-servers.xml:284(command)
2782
msgid "sudo a2dissite mynewsite"
2783
msgstr "sudo a2dissite mynewsite"
2784
2785
#: serverguide/C/web-servers.xml:290(title)
2786
msgid "Default Settings"
2787
msgstr "Default Settings"
2788
2789
#: serverguide/C/web-servers.xml:292(para)
2790
msgid ""
2791
"This section explains configuration of the Apache2 server default settings. "
2792
"For example, if you add a virtual host, the settings you configure for the "
2793
"virtual host take precedence for that virtual host. For a directive not "
2794
"defined within the virtual host settings, the default value is used."
2795
msgstr ""
2796
"This section explains configuration of the Apache2 server default settings. "
2797
"For example, if you add a virtual host, the settings you configure for the "
2798
"virtual host take precedence for that virtual host. For a directive not "
2799
"defined within the virtual host settings, the default value is used."
2800
2801
#: serverguide/C/web-servers.xml:304(para)
2802
msgid ""
2803
"The <emphasis>DirectoryIndex</emphasis> is the default page served by the "
2804
"server when a user requests an index of a directory by specifying a forward "
2805
"slash (/) at the end of the directory name."
2806
msgstr ""
2807
"The <emphasis>DirectoryIndex</emphasis> is the default page served by the "
2808
"server when a user requests an index of a directory by specifying a forward "
2809
"slash (/) at the end of the directory name."
2810
2811
#: serverguide/C/web-servers.xml:311(para)
2812
msgid ""
2813
"For example, when a user requests the page "
2814
"http://www.example.com/this_directory/, he or she will get either the "
2815
"DirectoryIndex page if it exists, a server-generated directory list if it "
2816
"does not and the Indexes option is specified, or a Permission Denied page if "
2817
"neither is true. The server will try to find one of the files listed in the "
2818
"DirectoryIndex directive and will return the first one it finds. If it does "
2819
"not find any of these files and if <emphasis>Options Indexes</emphasis> is "
2820
"set for that directory, the server will generate and return a list, in HTML "
2821
"format, of the subdirectories and files in the directory. The default value, "
2822
"found in <filename>/etc/apache2/mods-available/dir.conf</filename> is "
2823
"\"index.html index.cgi index.pl index.php index.xhtml index.htm\". Thus, if "
2824
"Apache2 finds a file in a requested directory matching any of these names, "
2825
"the first will be displayed."
2826
msgstr ""
2827
"For example, when a user requests the page "
2828
"http://www.example.com/this_directory/, he or she will get either the "
2829
"DirectoryIndex page if it exists, a server-generated directory list if it "
2830
"does not and the Indexes option is specified, or a Permission Denied page if "
2831
"neither is true. The server will try to find one of the files listed in the "
2832
"DirectoryIndex directive and will return the first one it finds. If it does "
2833
"not find any of these files and if <emphasis>Options Indexes</emphasis> is "
2834
"set for that directory, the server will generate and return a list, in HTML "
2835
"format, of the subdirectories and files in the directory. The default value, "
2836
"found in <filename>/etc/apache2/mods-available/dir.conf</filename> is "
2837
"\"index.html index.cgi index.pl index.php index.xhtml index.htm\". Thus, if "
2838
"Apache2 finds a file in a requested directory matching any of these names, "
2839
"the first will be displayed."
2840
2841
#: serverguide/C/web-servers.xml:332(para)
2842
msgid ""
2843
"The <emphasis>ErrorDocument</emphasis> directive allows you to specify a "
2844
"file for Apache2 to use for specific error events. For example, if a user "
2845
"requests a resource that does not exist, a 404 error will occur, and per "
2846
"Apache2's default configuration, the file "
2847
"<filename>/usr/share/apache2/error/HTTP_NOT_FOUND.html.var </filename> will "
2848
"be displayed. That file is not in the server's DocumentRoot, but there is an "
2849
"Alias directive in <filename>/etc/apache2/apache2.conf</filename> that "
2850
"redirects requests to the /error directory to "
2851
"<filename>/usr/share/apache2/error/</filename>."
2852
msgstr ""
2853
"The <emphasis>ErrorDocument</emphasis> directive allows you to specify a "
2854
"file for Apache2 to use for specific error events. For example, if a user "
2855
"requests a resource that does not exist, a 404 error will occur, and per "
2856
"Apache2's default configuration, the file "
2857
"<filename>/usr/share/apache2/error/HTTP_NOT_FOUND.html.var </filename> will "
2858
"be displayed. That file is not in the server's DocumentRoot, but there is an "
2859
"Alias directive in <filename>/etc/apache2/apache2.conf</filename> that "
2860
"redirects requests to the /error directory to "
2861
"<filename>/usr/share/apache2/error/</filename>."
2862
2863
#: serverguide/C/web-servers.xml:344(para)
2864
msgid ""
2865
"To see a list of the default ErrorDocument directives, use this command:"
2866
msgstr ""
2867
"To see a list of the default ErrorDocument directives, use this command:"
2868
2869
#: serverguide/C/web-servers.xml:350(command)
2870
msgid "grep ErrorDocument /etc/apache2/apache2.conf"
2871
msgstr "grep ErrorDocument /etc/apache2/apache2.conf"
2872
2873
#: serverguide/C/web-servers.xml:355(para)
2874
msgid ""
2875
"By default, the server writes the transfer log to the file "
2876
"<filename>/var/log/apache2/access.log</filename>. You can change this on a "
2877
"per-site basis in your virtual host configuration files with the "
2878
"<emphasis>CustomLog</emphasis> directive, or omit it to accept the default, "
2879
"specified in <filename> /etc/apache2/apache2.conf</filename>. You may also "
2880
"specify the file to which errors are logged, via the "
2881
"<emphasis>ErrorLog</emphasis> directive, whose default is "
2882
"<filename>/var/log/apache2/error.log</filename>. These are kept separate "
2883
"from the transfer logs to aid in troubleshooting problems with your Apache2 "
2884
"server. You may also specify the <emphasis>LogLevel</emphasis> (the default "
2885
"value is \"warn\") and the <emphasis>LogFormat</emphasis> (see <filename> "
2886
"/etc/apache2/apache2.conf</filename> for the default value)."
2887
msgstr ""
2888
"By default, the server writes the transfer log to the file "
2889
"<filename>/var/log/apache2/access.log</filename>. You can change this on a "
2890
"per-site basis in your virtual host configuration files with the "
2891
"<emphasis>CustomLog</emphasis> directive, or omit it to accept the default, "
2892
"specified in <filename> /etc/apache2/apache2.conf</filename>. You may also "
2893
"specify the file to which errors are logged, via the "
2894
"<emphasis>ErrorLog</emphasis> directive, whose default is "
2895
"<filename>/var/log/apache2/error.log</filename>. These are kept separate "
2896
"from the transfer logs to aid in troubleshooting problems with your Apache2 "
2897
"server. You may also specify the <emphasis>LogLevel</emphasis> (the default "
2898
"value is \"warn\") and the <emphasis>LogFormat</emphasis> (see <filename> "
2899
"/etc/apache2/apache2.conf</filename> for the default value)."
2900
2901
#: serverguide/C/web-servers.xml:370(para)
2902
msgid ""
2903
"Some options are specified on a per-directory basis rather than per-server. "
2904
"<emphasis>Options</emphasis> is one of these directives. A Directory stanza "
2905
"is enclosed in XML-like tags, like so:"
2906
msgstr ""
2907
"Some options are specified on a per-directory basis rather than per-server. "
2908
"<emphasis>Options</emphasis> is one of these directives. A Directory stanza "
2909
"is enclosed in XML-like tags, like so:"
2910
2911
#: serverguide/C/web-servers.xml:376(programlisting)
2912
#, no-wrap
2913
msgid ""
2914
"\n"
2915
"<Directory /var/www/mynewsite>\n"
2916
"...\n"
2917
"</Directory>\n"
2918
msgstr ""
2919
"\n"
2920
"<Directory /var/www/mynewsite>\n"
2921
"...\n"
2922
"</Directory>\n"
2923
2924
#: serverguide/C/web-servers.xml:382(para)
2925
msgid ""
2926
"The <emphasis>Options</emphasis> directive within a Directory stanza accepts "
2927
"one or more of the following values (among others), separated by spaces:"
2928
msgstr ""
2929
"The <emphasis>Options</emphasis> directive within a Directory stanza accepts "
2930
"one or more of the following values (among others), separated by spaces:"
2931
2932
#: serverguide/C/web-servers.xml:394(para)
2933
msgid ""
2934
"Most files should not be executed as CGI scripts. This would be very "
2935
"dangerous. CGI scripts should kept in a directory separate from and outside "
2936
"your DocumentRoot, and only this directory should have the ExecCGI option "
2937
"set. This is the default, and the default location for CGI scripts is "
2938
"<filename>/usr/lib/cgi-bin</filename>."
2939
msgstr ""
2940
"Most files should not be executed as CGI scripts. This would be very "
2941
"dangerous. CGI scripts should kept in a directory separate from and outside "
2942
"your DocumentRoot, and only this directory should have the ExecCGI option "
2943
"set. This is the default, and the default location for CGI scripts is "
2944
"<filename>/usr/lib/cgi-bin</filename>."
2945
2946
#: serverguide/C/web-servers.xml:389(para)
2947
msgid ""
2948
"<emphasis role=\"bold\">ExecCGI</emphasis> - Allow execution of CGI scripts. "
2949
"CGI scripts are not executed if this option is not chosen. <placeholder-1/>"
2950
msgstr ""
2951
"<emphasis role=\"bold\">ExecCGI</emphasis> - Allow execution of CGI scripts. "
2952
"CGI scripts are not executed if this option is not chosen. <placeholder-1/>"
2953
2954
#: serverguide/C/web-servers.xml:405(para)
2955
msgid ""
2956
"<emphasis role=\"bold\">Includes</emphasis> - Allow server-side includes. "
2957
"Server-side includes allow an HTML file to <emphasis> include</emphasis> "
2958
"other files. This is not a common option. See <ulink "
2959
"url=\"http://httpd.apache.org/docs/2.2/howto/ssi.html\">the Apache2 SSI "
2960
"HOWTO</ulink> for more information."
2961
msgstr ""
2962
"<emphasis role=\"bold\">Includes</emphasis> - Allow server-side includes. "
2963
"Server-side includes allow an HTML file to <emphasis> include</emphasis> "
2964
"other files. This is not a common option. See <ulink "
2965
"url=\"http://httpd.apache.org/docs/2.2/howto/ssi.html\">the Apache2 SSI "
2966
"HOWTO</ulink> for more information."
2967
2968
#: serverguide/C/web-servers.xml:414(para)
2969
msgid ""
2970
"<emphasis role=\"bold\">IncludesNOEXEC</emphasis> - Allow server-side "
2971
"includes, but disable the <emphasis>#exec</emphasis> and "
2972
"<emphasis>#include</emphasis> commands in CGI scripts."
2973
msgstr ""
2974
"<emphasis role=\"bold\">IncludesNOEXEC</emphasis> - Allow server-side "
2975
"includes, but disable the <emphasis>#exec</emphasis> and "
2976
"<emphasis>#include</emphasis> commands in CGI scripts."
2977
2978
#: serverguide/C/web-servers.xml:426(para)
2979
msgid ""
2980
"For security reasons, this should usually not be set, and certainly should "
2981
"not be set on your DocumentRoot directory. Enable this option carefully on a "
2982
"per-directory basis only if you are certain you want users to see the entire "
2983
"contents of the directory."
2984
msgstr ""
2985
"For security reasons, this should usually not be set, and certainly should "
2986
"not be set on your DocumentRoot directory. Enable this option carefully on a "
2987
"per-directory basis only if you are certain you want users to see the entire "
2988
"contents of the directory."
2989
2990
#: serverguide/C/web-servers.xml:421(para)
2991
msgid ""
2992
"<emphasis role=\"bold\">Indexes</emphasis> - Display a formatted list of the "
2993
"directory's contents, if no <emphasis>DirectoryIndex</emphasis> (such as "
2994
"index.html) exists in the requested directory. <placeholder-1/>"
2995
msgstr ""
2996
"<emphasis role=\"bold\">Indexes</emphasis> - Display a formatted list of the "
2997
"directory's contents, if no <emphasis>DirectoryIndex</emphasis> (such as "
2998
"index.html) exists in the requested directory. <placeholder-1/>"
2999
3000
#: serverguide/C/web-servers.xml:436(para)
3001
msgid ""
3002
"<emphasis role=\"bold\">Multiview</emphasis> - Support content-negotiated "
3003
"multiviews; this option is disabled by default for security reasons. See the "
3004
"<ulink "
3005
"url=\"http://httpd.apache.org/docs/2.2/mod/mod_negotiation.html#multiviews\">"
3006
"Apache2 documentation on this option</ulink>."
3007
msgstr ""
3008
"<emphasis role=\"bold\">Multiview</emphasis> - Support content-negotiated "
3009
"multiviews; this option is disabled by default for security reasons. See the "
3010
"<ulink "
3011
"url=\"http://httpd.apache.org/docs/2.2/mod/mod_negotiation.html#multiviews\">"
3012
"Apache2 documentation on this option</ulink>."
3013
3014
#: serverguide/C/web-servers.xml:444(para)
3015
msgid ""
3016
"<emphasis role=\"bold\">SymLinksIfOwnerMatch</emphasis> - Only follow "
3017
"symbolic links if the target file or directory has the same owner as the "
3018
"link."
3019
msgstr ""
3020
"<emphasis role=\"bold\">SymLinksIfOwnerMatch</emphasis> - Only follow "
3021
"symbolic links if the target file or directory has the same owner as the "
3022
"link."
3023
3024
#: serverguide/C/web-servers.xml:456(title)
3025
msgid "httpd Settings"
3026
msgstr "httpd Settings"
3027
3028
#: serverguide/C/web-servers.xml:458(para)
3029
msgid ""
3030
"This section explains some basic <application>httpd</application> daemon "
3031
"configuration settings."
3032
msgstr ""
3033
"This section explains some basic <application>httpd</application> daemon "
3034
"configuration settings."
3035
3036
#: serverguide/C/web-servers.xml:462(para)
3037
msgid ""
3038
"<emphasis role=\"bold\">LockFile</emphasis> - The LockFile directive sets "
3039
"the path to the lockfile used when the server is compiled with either "
3040
"USE_FCNTL_SERIALIZED_ACCEPT or USE_FLOCK_SERIALIZED_ACCEPT. It must be "
3041
"stored on the local disk. It should be left to the default value unless the "
3042
"logs directory is located on an NFS share. If this is the case, the default "
3043
"value should be changed to a location on the local disk and to a directory "
3044
"that is readable only by root."
3045
msgstr ""
3046
"<emphasis role=\"bold\">LockFile</emphasis> - The LockFile directive sets "
3047
"the path to the lockfile used when the server is compiled with either "
3048
"USE_FCNTL_SERIALIZED_ACCEPT or USE_FLOCK_SERIALIZED_ACCEPT. It must be "
3049
"stored on the local disk. It should be left to the default value unless the "
3050
"logs directory is located on an NFS share. If this is the case, the default "
3051
"value should be changed to a location on the local disk and to a directory "
3052
"that is readable only by root."
3053
3054
#: serverguide/C/web-servers.xml:471(para)
3055
msgid ""
3056
"<emphasis role=\"bold\">PidFile</emphasis> - The PidFile directive sets the "
3057
"file in which the server records its process ID (pid). This file should only "
3058
"be readable by root. In most cases, it should be left to the default value."
3059
msgstr ""
3060
"<emphasis role=\"bold\">PidFile</emphasis> - The PidFile directive sets the "
3061
"file in which the server records its process ID (pid). This file should only "
3062
"be readable by root. In most cases, it should be left to the default value."
3063
3064
#: serverguide/C/web-servers.xml:477(para)
3065
msgid ""
3066
"<emphasis role=\"bold\">User</emphasis> - The User directive sets the userid "
3067
"used by the server to answer requests. This setting determines the server's "
3068
"access. Any files inaccessible to this user will also be inaccessible to "
3069
"your website's visitors. The default value for User is www-data."
3070
msgstr ""
3071
"<emphasis role=\"bold\">User</emphasis> - The User directive sets the userid "
3072
"used by the server to answer requests. This setting determines the server's "
3073
"access. Any files inaccessible to this user will also be inaccessible to "
3074
"your website's visitors. The default value for User is www-data."
3075
3076
#: serverguide/C/web-servers.xml:484(para)
3077
msgid ""
3078
"Unless you know exactly what you are doing, do not set the User directive to "
3079
"root. Using root as the User will create large security holes for your Web "
3080
"server."
3081
msgstr ""
3082
"Unless you know exactly what you are doing, do not set the User directive to "
3083
"root. Using root as the User will create large security holes for your Web "
3084
"server."
3085
3086
#: serverguide/C/web-servers.xml:490(para)
3087
msgid ""
3088
"The Group directive is similar to the User directive. Group sets the group "
3089
"under which the server will answer requests. The default group is also www-"
3090
"data."
3091
msgstr ""
3092
"The Group directive is similar to the User directive. Group sets the group "
3093
"under which the server will answer requests. The default group is also www-"
3094
"data."
3095
3096
#: serverguide/C/web-servers.xml:496(title)
3097
msgid "Apache2 Modules"
3098
msgstr "Apache2 Modules"
3099
3100
#: serverguide/C/web-servers.xml:498(para)
3101
msgid ""
3102
"Apache2 is a modular server. This implies that only the most basic "
3103
"functionality is included in the core server. Extended features are "
3104
"available through modules which can be loaded into Apache2. By default, a "
3105
"base set of modules is included in the server at compile-time. If the server "
3106
"is compiled to use dynamically loaded modules, then modules can be compiled "
3107
"separately, and added at any time using the LoadModule directive. Otherwise, "
3108
"Apache2 must be recompiled to add or remove modules."
3109
msgstr ""
3110
"Apache2 is a modular server. This implies that only the most basic "
3111
"functionality is included in the core server. Extended features are "
3112
"available through modules which can be loaded into Apache2. By default, a "
3113
"base set of modules is included in the server at compile-time. If the server "
3114
"is compiled to use dynamically loaded modules, then modules can be compiled "
3115
"separately, and added at any time using the LoadModule directive. Otherwise, "
3116
"Apache2 must be recompiled to add or remove modules."
3117
3118
#: serverguide/C/web-servers.xml:510(para)
3119
msgid ""
3120
"Ubuntu compiles Apache2 to allow the dynamic loading of modules. "
3121
"Configuration directives may be conditionally included on the presence of a "
3122
"particular module by enclosing them in an "
3123
"<emphasis><IfModule></emphasis> block."
3124
msgstr ""
3125
"Ubuntu compiles Apache2 to allow the dynamic loading of modules. "
3126
"Configuration directives may be conditionally included on the presence of a "
3127
"particular module by enclosing them in an "
3128
"<emphasis><IfModule></emphasis> block."
3129
3130
#: serverguide/C/web-servers.xml:517(para)
3131
msgid ""
3132
"You can install additional Apache2 modules and use them with your Web "
3133
"server. For example, run the following command from a terminal prompt to "
3134
"install the <emphasis>MySQL Authentication</emphasis> module:"
3135
msgstr ""
3136
"You can install additional Apache2 modules and use them with your Web "
3137
"server. For example, run the following command from a terminal prompt to "
3138
"install the <emphasis>MySQL Authentication</emphasis> module:"
3139
3140
#: serverguide/C/web-servers.xml:524(command)
3141
msgid "sudo apt-get install libapache2-mod-auth-mysql"
3142
msgstr "sudo apt-get install libapache2-mod-auth-mysql"
3143
3144
#: serverguide/C/web-servers.xml:527(para)
3145
msgid ""
3146
"See the <filename>/etc/apache2/mods-available</filename> directory, for "
3147
"additional modules."
3148
msgstr ""
3149
"See the <filename>/etc/apache2/mods-available</filename> directory, for "
3150
"additional modules."
3151
3152
#: serverguide/C/web-servers.xml:531(para)
3153
msgid ""
3154
"Use the <application>a2enmod</application> utility to enable a module:"
3155
msgstr ""
3156
"Use the <application>a2enmod</application> utility to enable a module:"
3157
3158
#: serverguide/C/web-servers.xml:537(command)
3159
msgid "sudo a2enmod auth_mysql"
3160
msgstr "sudo a2enmod auth_mysql"
3161
3162
#: serverguide/C/web-servers.xml:541(para)
3163
msgid "Similarly, <application>a2dismod</application> will disable a module:"
3164
msgstr ""
3165
"Similarly, <application>a2dismod</application> will disable a module:"
3166
3167
#: serverguide/C/web-servers.xml:546(command)
3168
msgid "sudo a2dismod auth_mysql"
3169
msgstr "sudo a2dismod auth_mysql"
3170
3171
#: serverguide/C/web-servers.xml:553(title)
3172
msgid "HTTPS Configuration"
3173
msgstr "HTTPS Configuration"
3174
3175
#: serverguide/C/web-servers.xml:555(para)
3176
msgid ""
3177
"The <application>mod_ssl</application> module adds an important feature to "
3178
"the Apache2 server - the ability to encrypt communications. Thus, when your "
3179
"browser is communicating using SSL, the https:// prefix is used at the "
3180
"beginning of the Uniform Resource Locator (URL) in the browser navigation "
3181
"bar."
3182
msgstr ""
3183
"The <application>mod_ssl</application> module adds an important feature to "
3184
"the Apache2 server - the ability to encrypt communications. Thus, when your "
3185
"browser is communicating using SSL, the https:// prefix is used at the "
3186
"beginning of the Uniform Resource Locator (URL) in the browser navigation "
3187
"bar."
3188
3189
#: serverguide/C/web-servers.xml:564(para)
3190
msgid ""
3191
"The <application>mod_ssl</application> module is available in "
3192
"<application>apache2-common</application> package. Execute the following "
3193
"command from a terminal prompt to enable the "
3194
"<application>mod_ssl</application> module:"
3195
msgstr ""
3196
"The <application>mod_ssl</application> module is available in "
3197
"<application>apache2-common</application> package. Execute the following "
3198
"command from a terminal prompt to enable the "
3199
"<application>mod_ssl</application> module:"
3200
3201
#: serverguide/C/web-servers.xml:571(command)
3202
msgid "sudo a2enmod ssl"
3203
msgstr "sudo a2enmod ssl"
3204
3205
#: serverguide/C/web-servers.xml:574(para)
3206
msgid ""
3207
"There is a default HTTPS configuration file in <filename>/etc/apache2/sites-"
3208
"available/default-ssl</filename>. In order for "
3209
"<application>Apache2</application> to provide HTTPS, a "
3210
"<emphasis>certificate</emphasis> and <emphasis>key</emphasis> file are also "
3211
"needed. The default HTTPS configuration will use a certificate and key "
3212
"generated by the <application>ssl-cert</application> package. They are good "
3213
"for testing, but the auto-generated certificate and key should be replaced "
3214
"by a certificate specific to the site or server. For information on "
3215
"generating a key and obtaining a certificate see <xref "
3216
"linkend=\"certificates-and-security\"/>"
3217
msgstr ""
3218
"There is a default HTTPS configuration file in <filename>/etc/apache2/sites-"
3219
"available/default-ssl</filename>. In order for "
3220
"<application>Apache2</application> to provide HTTPS, a "
3221
"<emphasis>certificate</emphasis> and <emphasis>key</emphasis> file are also "
3222
"needed. The default HTTPS configuration will use a certificate and key "
3223
"generated by the <application>ssl-cert</application> package. They are good "
3224
"for testing, but the auto-generated certificate and key should be replaced "
3225
"by a certificate specific to the site or server. For information on "
3226
"generating a key and obtaining a certificate see <xref "
3227
"linkend=\"certificates-and-security\"/>"
3228
3229
#: serverguide/C/web-servers.xml:584(para)
3230
msgid ""
3231
"To configure <application>Apache2</application> for HTTPS, enter the "
3232
"following:"
3233
msgstr ""
3234
"To configure <application>Apache2</application> for HTTPS, enter the "
3235
"following:"
3236
3237
#: serverguide/C/web-servers.xml:589(command)
3238
msgid "sudo a2ensite default-ssl"
3239
msgstr "sudo a2ensite default-ssl"
3240
3241
#: serverguide/C/web-servers.xml:593(para)
3242
msgid ""
3243
"The directories <filename>/etc/ssl/certs</filename> and "
3244
"<filename>/etc/ssl/private</filename> are the default locations. If you "
3245
"install the certificate and key in another directory make sure to change "
3246
"<emphasis>SSLCertificateFile</emphasis> and "
3247
"<emphasis>SSLCertificateKeyFile</emphasis> appropriately."
3248
msgstr ""
3249
"The directories <filename>/etc/ssl/certs</filename> and "
3250
"<filename>/etc/ssl/private</filename> are the default locations. If you "
3251
"install the certificate and key in another directory make sure to change "
3252
"<emphasis>SSLCertificateFile</emphasis> and "
3253
"<emphasis>SSLCertificateKeyFile</emphasis> appropriately."
3254
3255
#: serverguide/C/web-servers.xml:600(para)
3256
msgid ""
3257
"With Apache2 now configured for HTTPS, restart the service to enable the new "
3258
"settings:"
3259
msgstr ""
3260
"With Apache2 now configured for HTTPS, restart the service to enable the new "
3261
"settings:"
3262
3263
#: serverguide/C/web-servers.xml:611(para)
3264
msgid ""
3265
"Depending on how you obtained your certificate you may need to enter a "
3266
"passphrase when <application>Apache2</application> starts."
3267
msgstr ""
3268
"Depending on how you obtained your certificate you may need to enter a "
3269
"passphrase when <application>Apache2</application> starts."
3270
3271
#: serverguide/C/web-servers.xml:617(para)
3272
msgid ""
3273
"You can access the secure server pages by typing https://your_hostname/url/ "
3274
"in your browser address bar."
3275
msgstr ""
3276
"You can access the secure server pages by typing https://your_hostname/url/ "
3277
"in your browser address bar."
3278
3279
#: serverguide/C/web-servers.xml:628(para)
3280
msgid ""
3281
"<ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
3282
"Documentation</ulink> contains in depth information on Apache2 configuration "
3283
"directives. Also, see the <application>apache2-doc</application> package for "
3284
"the official Apache2 docs."
3285
msgstr ""
3286
"<ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
3287
"Documentation</ulink> contains in depth information on Apache2 configuration "
3288
"directives. Also, see the <application>apache2-doc</application> package for "
3289
"the official Apache2 docs."
3290
3291
#: serverguide/C/web-servers.xml:635(para)
3292
msgid ""
3293
"See the <ulink url=\"http://www.modssl.org/docs/\">Mod SSL "
3294
"Documentation</ulink> site for more SSL related information."
3295
msgstr ""
3296
"See the <ulink url=\"http://www.modssl.org/docs/\">Mod SSL "
3297
"Documentation</ulink> site for more SSL related information."
3298
3299
#: serverguide/C/web-servers.xml:641(para)
3300
msgid ""
3301
"O'Reilly's <ulink url=\"http://oreilly.com/catalog/9780596001919/\">Apache "
3302
"Cookbook</ulink> is a good resource for accomplishing specific Apache2 "
3303
"configurations."
3304
msgstr ""
3305
"O'Reilly's <ulink url=\"http://oreilly.com/catalog/9780596001919/\">Apache "
3306
"Cookbook</ulink> is a good resource for accomplishing specific Apache2 "
3307
"configurations."
3308
3309
#: serverguide/C/web-servers.xml:647(para)
3310
msgid ""
3311
"For Ubuntu specific Apache2 questions, ask in the <emphasis>#ubuntu-"
3312
"server</emphasis> IRC channel on <ulink "
3313
"url=\"http://freenode.net/\">freenode.net</ulink>."
3314
msgstr ""
3315
"For Ubuntu specific Apache2 questions, ask in the <emphasis>#ubuntu-"
3316
"server</emphasis> IRC channel on <ulink "
3317
"url=\"http://freenode.net/\">freenode.net</ulink>."
3318
3319
#: serverguide/C/web-servers.xml:653(para)
3320
msgid ""
3321
"Usually integrated with PHP and MySQL the <ulink "
3322
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
3323
"Ubuntu Wiki </ulink> page is a good resource."
3324
msgstr ""
3325
3326
#: serverguide/C/web-servers.xml:664(title)
3327
msgid "PHP5 - Scripting Language"
3328
msgstr "PHP5 - Scripting Language"
3329
3330
#: serverguide/C/web-servers.xml:665(para)
3331
msgid ""
3332
"PHP is a general-purpose scripting language suited for Web development. The "
3333
"PHP script can be embedded into HTML. This section explains how to install "
3334
"and configure PHP5 in Ubuntu System with Apache2 and MySQL."
3335
msgstr ""
3336
"PHP is a general-purpose scripting language suited for Web development. The "
3337
"PHP script can be embedded into HTML. This section explains how to install "
3338
"and configure PHP5 in Ubuntu System with Apache2 and MySQL."
3339
3340
#: serverguide/C/web-servers.xml:669(para)
3341
msgid ""
3342
"This section assumes you have installed and configured Apache2 Web Server "
3343
"and MySQL Database Server. You can refer to Apache2 section and MySQL "
3344
"sections in this document to install and configure Apache2 and MySQL "
3345
"respectively."
3346
msgstr ""
3347
"This section assumes you have installed and configured Apache2 Web Server "
3348
"and MySQL Database Server. You can refer to Apache2 section and MySQL "
3349
"sections in this document to install and configure Apache2 and MySQL "
3350
"respectively."
3351
3352
#: serverguide/C/web-servers.xml:676(para)
3353
msgid "The PHP5 is available in Ubuntu Linux."
3354
msgstr "The PHP5 is available in Ubuntu Linux."
3355
3356
#: serverguide/C/web-servers.xml:678(para)
3357
msgid ""
3358
"To install PHP5 you can enter the following command in the terminal prompt: "
3359
"<screen>\n"
3360
"<command>sudo apt-get install php5 libapache2-mod-php5</command>\n"
3361
"</screen>"
3362
msgstr ""
3363
"To install PHP5 you can enter the following command in the terminal prompt: "
3364
"<screen>\n"
3365
"<command>sudo apt-get install php5 libapache2-mod-php5</command>\n"
3366
"</screen>"
3367
3368
#: serverguide/C/web-servers.xml:687(para)
3369
msgid ""
3370
"You can run PHP5 scripts from command line. To run PHP5 scripts from command "
3371
"line you should install <application>php5-cli</application> package. To "
3372
"install <application>php5-cli</application> you can enter the following "
3373
"command in the terminal prompt: <screen>\n"
3374
"<command>sudo apt-get install php5-cli</command>\n"
3375
"</screen>"
3376
msgstr ""
3377
"You can run PHP5 scripts from command line. To run PHP5 scripts from command "
3378
"line you should install <application>php5-cli</application> package. To "
3379
"install <application>php5-cli</application> you can enter the following "
3380
"command in the terminal prompt: <screen>\n"
3381
"<command>sudo apt-get install php5-cli</command>\n"
3382
"</screen>"
3383
3384
#: serverguide/C/web-servers.xml:696(para)
3385
msgid ""
3386
"You can also execute PHP5 scripts without installing PHP5 Apache module. To "
3387
"accomplish this, you should install <application>php5-cgi</application> "
3388
"package. You can run the following command in a terminal prompt to install "
3389
"<application>php5-cgi</application> package: <screen>\n"
3390
"<command>sudo apt-get install php5-cgi</command>\n"
3391
"</screen>"
3392
msgstr ""
3393
"You can also execute PHP5 scripts without installing PHP5 Apache module. To "
3394
"accomplish this, you should install <application>php5-cgi</application> "
3395
"package. You can run the following command in a terminal prompt to install "
3396
"<application>php5-cgi</application> package: <screen>\n"
3397
"<command>sudo apt-get install php5-cgi</command>\n"
3398
"</screen>"
3399
3400
#: serverguide/C/web-servers.xml:706(para)
3401
msgid ""
3402
"To use <application>MySQL</application> with PHP5 you should install "
3403
"<application>php5-mysql</application> package. To install <application>php5-"
3404
"mysql</application> you can enter the following command in the terminal "
3405
"prompt: <screen>\n"
3406
"<command>sudo apt-get install php5-mysql</command>\n"
3407
"</screen>"
3408
msgstr ""
3409
"To use <application>MySQL</application> with PHP5 you should install "
3410
"<application>php5-mysql</application> package. To install <application>php5-"
3411
"mysql</application> you can enter the following command in the terminal "
3412
"prompt: <screen>\n"
3413
"<command>sudo apt-get install php5-mysql</command>\n"
3414
"</screen>"
3415
3416
#: serverguide/C/web-servers.xml:714(para)
3417
msgid ""
3418
"Similarly, to use <application>PostgreSQL</application> with PHP5 you should "
3419
"install <application>php5-pgsql</application> package. To install "
3420
"<application>php5-pgsql</application> you can enter the following command in "
3421
"the terminal prompt: <screen>\n"
3422
"<command>sudo apt-get install php5-pgsql</command>\n"
3423
"</screen>"
3424
msgstr ""
3425
"Similarly, to use <application>PostgreSQL</application> with PHP5 you should "
3426
"install <application>php5-pgsql</application> package. To install "
3427
"<application>php5-pgsql</application> you can enter the following command in "
3428
"the terminal prompt: <screen>\n"
3429
"<command>sudo apt-get install php5-pgsql</command>\n"
3430
"</screen>"
3431
3432
#: serverguide/C/web-servers.xml:727(para)
3433
msgid ""
3434
"Once you install PHP5, you can run PHP5 scripts from your web browser. If "
3435
"you have installed <application>php5-cli</application> package, you can run "
3436
"PHP5 scripts from your command prompt."
3437
msgstr ""
3438
"Once you install PHP5, you can run PHP5 scripts from your web browser. If "
3439
"you have installed <application>php5-cli</application> package, you can run "
3440
"PHP5 scripts from your command prompt."
3441
3442
#: serverguide/C/web-servers.xml:734(para)
3443
msgid ""
3444
"By default, the Apache 2 Web server is configured to run PHP5 scripts. In "
3445
"other words, the PHP5 module is enabled in Apache2 Web server automatically "
3446
"when you install the module. Please verify if the files "
3447
"<filename>/etc/apache2/mods-enabled/php5.conf</filename> and "
3448
"<filename>/etc/apache2/mods-enabled/php5.load</filename> exist. If they do "
3449
"not exists, you can enable the module using <command>a2enmod</command> "
3450
"command."
3451
msgstr ""
3452
"By default, the Apache 2 Web server is configured to run PHP5 scripts. In "
3453
"other words, the PHP5 module is enabled in Apache2 Web server automatically "
3454
"when you install the module. Please verify if the files "
3455
"<filename>/etc/apache2/mods-enabled/php5.conf</filename> and "
3456
"<filename>/etc/apache2/mods-enabled/php5.load</filename> exist. If they do "
3457
"not exists, you can enable the module using <command>a2enmod</command> "
3458
"command."
3459
3460
#: serverguide/C/web-servers.xml:745(para)
3461
msgid ""
3462
"Once you install PHP5 related packages and enabled PHP5 Apache 2 module, you "
3463
"should restart Apache2 Web server to run PHP5 scripts. You can run the "
3464
"following command at a terminal prompt to restart your web server: "
3465
"<screen><command>sudo /etc/init.d/apache2 restart</command> </screen>"
3466
msgstr ""
3467
"Once you install PHP5 related packages and enabled PHP5 Apache 2 module, you "
3468
"should restart Apache2 Web server to run PHP5 scripts. You can run the "
3469
"following command at a terminal prompt to restart your Web server: "
3470
"<screen><command>sudo /etc/init.d/apache2 restart</command> </screen>"
3471
3472
#: serverguide/C/web-servers.xml:753(title) serverguide/C/mail.xml:320(title) serverguide/C/mail.xml:1602(title) serverguide/C/dns.xml:343(title) serverguide/C/clustering.xml:184(title)
3473
msgid "Testing"
3474
msgstr "Testing"
3475
3476
#: serverguide/C/web-servers.xml:754(para)
3477
msgid ""
3478
"To verify your installation, you can run following PHP5 phpinfo script:"
3479
msgstr ""
3480
"To verify your installation, you can run following PHP5 phpinfo script:"
3481
3482
#: serverguide/C/web-servers.xml:757(programlisting)
3483
#, no-wrap
3484
msgid ""
3485
"\n"
3486
"<?php\n"
3487
" phpinfo();\n"
3488
"?>\n"
3489
msgstr ""
3490
"\n"
3491
"<?php\n"
3492
" phpinfo();\n"
3493
"?>\n"
3494
3495
#: serverguide/C/web-servers.xml:762(para)
3496
msgid ""
3497
"You can save the content in a file <filename>phpinfo.php</filename> and "
3498
"place it under <command>DocumentRoot</command> directory of Apache2 Web "
3499
"server. When point your browser to "
3500
"<filename>http://hostname/phpinfo.php</filename>, it would display values of "
3501
"various PHP5 configuration parameters."
3502
msgstr ""
3503
"You can save the content in a file <filename>phpinfo.php</filename> and "
3504
"place it under <command>DocumentRoot</command> directory of Apache2 Web "
3505
"server. When point your browser to "
3506
"<filename>http://hostname/phpinfo.php</filename>, it would display values of "
3507
"various PHP5 configuration parameters."
3508
3509
#: serverguide/C/web-servers.xml:776(para)
3510
msgid ""
3511
"For more in depth information see <ulink "
3512
"url=\"http://www.php.net/docs.php\">php.net</ulink> documentation."
3513
msgstr ""
3514
"For more in depth information see <ulink "
3515
"url=\"http://www.php.net/docs.php\">php.net</ulink> documentation."
3516
3517
#: serverguide/C/web-servers.xml:781(para)
3518
msgid ""
3519
"There are a plethora of books on PHP. Two good books from O'Reilly are "
3520
"<ulink url=\"http://oreilly.com/catalog/9780596005603/\">Learning PHP "
3521
"5</ulink> and the <ulink "
3522
"url=\"http://oreilly.com/catalog/9781565926813/\">PHP Cook Book</ulink>."
3523
msgstr ""
3524
"There are a plethora of books on PHP. Two good books from O'Reilly are "
3525
"<ulink url=\"http://oreilly.com/catalog/9780596005603/\">Learning PHP "
3526
"5</ulink> and the <ulink "
3527
"url=\"http://oreilly.com/catalog/9781565926813/\">PHP Cook Book</ulink>."
3528
3529
#: serverguide/C/web-servers.xml:788(para)
3530
msgid ""
3531
"Also, see the <ulink "
3532
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
3533
"Ubuntu Wiki</ulink> page for more information."
3534
msgstr ""
3535
3536
#: serverguide/C/web-servers.xml:799(title)
3537
msgid "Squid - Proxy Server"
3538
msgstr "Squid - Proxy Server"
3539
3540
#: serverguide/C/web-servers.xml:800(para)
3541
msgid ""
3542
"Squid is a full-featured web proxy cache server application which provides "
3543
"proxy and cache services for Hyper Text Transport Protocol (HTTP), File "
3544
"Transfer Protocol (FTP), and other popular network protocols. Squid can "
3545
"implement caching and proxying of Secure Sockets Layer (SSL) requests and "
3546
"caching of Domain Name Server (DNS) lookups, and perform transparent "
3547
"caching. Squid also supports a wide variety of caching protocols, such as "
3548
"Internet Cache Protocol, (ICP) the Hyper Text Caching Protocol, (HTCP) the "
3549
"Cache Array Routing Protocol (CARP), and the Web Cache Coordination "
3550
"Protocol. (WCCP)"
3551
msgstr ""
3552
"Squid is a full-featured Web proxy cache server application which provides "
3553
"proxy and cache services for Hyper Text Transport Protocol (HTTP), File "
3554
"Transfer Protocol (FTP), and other popular network protocols. Squid can "
3555
"implement caching and proxying of Secure Sockets Layer (SSL) requests and "
3556
"caching of Domain Name Server (DNS) lookups, and perform transparent "
3557
"caching. Squid also supports a wide variety of caching protocols, such as "
3558
"Internet Cache Protocol, (ICP) the Hyper Text Caching Protocol, (HTCP) the "
3559
"Cache Array Routing Protocol (CARP), and the Web Cache Coordination "
3560
"Protocol. (WCCP)"
3561
3562
#: serverguide/C/web-servers.xml:808(para)
3563
msgid ""
3564
"The Squid proxy cache server is an excellent solution to a variety of proxy "
3565
"and caching server needs, and scales from the branch office to enterprise "
3566
"level networks while providing extensive, granular access control mechanisms "
3567
"and monitoring of critical parameters via the Simple Network Management "
3568
"Protocol (SNMP). When selecting a computer system for use as a dedicated "
3569
"Squid proxy, or caching servers, ensure your system is configured with a "
3570
"large amount of physical memory, as Squid maintains an in-memory cache for "
3571
"increased performance."
3572
msgstr ""
3573
"The Squid proxy cache server is an excellent solution to a variety of proxy "
3574
"and caching server needs, and scales from the branch office to enterprise "
3575
"level networks while providing extensive, granular access control mechanisms "
3576
"and monitoring of critical parameters via the Simple Network Management "
3577
"Protocol (SNMP). When selecting a computer system for use as a dedicated "
3578
"Squid proxy, or caching servers, ensure your system is configured with a "
3579
"large amount of physical memory, as Squid maintains an in-memory cache for "
3580
"increased performance."
3581
3582
#: serverguide/C/web-servers.xml:817(para)
3583
msgid ""
3584
"At a terminal prompt, enter the following command to install the Squid "
3585
"server:"
3586
msgstr ""
3587
"At a terminal prompt, enter the following command to install the Squid "
3588
"server:"
3589
3590
#: serverguide/C/web-servers.xml:822(command)
3591
msgid "sudo apt-get install squid"
3592
msgstr "sudo apt-get install squid"
3593
3594
#: serverguide/C/web-servers.xml:828(para)
3595
msgid ""
3596
"Squid is configured by editing the directives contained within the "
3597
"<filename>/etc/squid/squid.conf</filename> configuration file. The following "
3598
"examples illustrate some of the directives which may be modified to affect "
3599
"the behavior of the Squid server. For more in-depth configuration of Squid, "
3600
"see the References section."
3601
msgstr ""
3602
"Squid is configured by editing the directives contained within the "
3603
"<filename>/etc/squid/squid.conf</filename> configuration file. The following "
3604
"examples illustrate some of the directives which may be modified to affect "
3605
"the behaviour of the Squid server. For more in-depth configuration of Squid, "
3606
"see the References section."
3607
3608
#: serverguide/C/web-servers.xml:834(para)
3609
msgid ""
3610
"Prior to editing the configuration file, you should make a copy of the "
3611
"original file and protect it from writing so you will have the original "
3612
"settings as a reference, and to re-use as necessary."
3613
msgstr ""
3614
"Prior to editing the configuration file, you should make a copy of the "
3615
"original file and protect it from writing so you will have the original "
3616
"settings as a reference, and to re-use as necessary."
3617
3618
#: serverguide/C/web-servers.xml:837(para)
3619
msgid ""
3620
"Copy the <filename>/etc/squid/squid.conf</filename> file and protect it from "
3621
"writing with the following commands entered at a terminal prompt:"
3622
msgstr ""
3623
"Copy the <filename>/etc/squid/squid.conf</filename> file and protect it from "
3624
"writing with the following commands entered at a terminal prompt:"
3625
3626
#: serverguide/C/web-servers.xml:842(command)
3627
msgid "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"
3628
msgstr "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"
3629
3630
#: serverguide/C/web-servers.xml:843(command)
3631
msgid "sudo chmod a-w /etc/squid/squid.conf.original"
3632
msgstr "sudo chmod a-w /etc/squid/squid.conf.original"
3633
3634
#: serverguide/C/web-servers.xml:849(para)
3635
msgid ""
3636
"To set your Squid server to listen on TCP port 8888 instead of the default "
3637
"TCP port 3128, change the http_port directive as such:"
3638
msgstr ""
3639
"To set your Squid server to listen on TCP port 8888 instead of the default "
3640
"TCP port 3128, change the http_port directive as such:"
3641
3642
#: serverguide/C/web-servers.xml:853(programlisting)
3643
#, no-wrap
3644
msgid ""
3645
"\n"
3646
"http_port 8888\n"
3647
msgstr ""
3648
"\n"
3649
"http_port 8888\n"
3650
3651
#: serverguide/C/web-servers.xml:858(para)
3652
msgid ""
3653
"Change the visible_hostname directive in order to give the Squid server a "
3654
"specific hostname. This hostname does not necessarily need to be the "
3655
"computer's hostname. In this example it is set to <emphasis>weezie</emphasis>"
3656
msgstr ""
3657
"Change the visible_hostname directive in order to give the Squid server a "
3658
"specific hostname. This hostname does not necessarily need to be the "
3659
"computer's hostname. In this example it is set to <emphasis>weezie</emphasis>"
3660
3661
#: serverguide/C/web-servers.xml:862(programlisting)
3662
#, no-wrap
3663
msgid ""
3664
"\n"
3665
"visible_hostname weezie\n"
3666
msgstr ""
3667
"\n"
3668
"visible_hostname weezie\n"
3669
3670
#: serverguide/C/web-servers.xml:867(para)
3671
msgid ""
3672
"Using Squid's access control, you may configure use of Internet services "
3673
"proxied by Squid to be available only users with certain Internet Protocol "
3674
"(IP) addresses. For example, we will illustrate access by users of the "
3675
"192.168.42.0/24 subnetwork only:"
3676
msgstr ""
3677
"Using Squid's access control, you may configure use of Internet services "
3678
"proxied by Squid to be available only users with certain Internet Protocol "
3679
"(IP) addresses. For example, we will illustrate access by users of the "
3680
"192.168.42.0/24 subnetwork only:"
3681
3682
#: serverguide/C/web-servers.xml:872(para) serverguide/C/web-servers.xml:892(para)
3683
msgid ""
3684
"Add the following to the <emphasis role=\"bold\">bottom</emphasis> of the "
3685
"ACL section of your <filename>/etc/squid/squid.conf</filename> file:"
3686
msgstr ""
3687
"Add the following to the <emphasis role=\"bold\">bottom</emphasis> of the "
3688
"ACL section of your <filename>/etc/squid/squid.conf</filename> file:"
3689
3690
#: serverguide/C/web-servers.xml:875(programlisting)
3691
#, no-wrap
3692
msgid ""
3693
"\n"
3694
"acl fortytwo_network src 192.168.42.0/24\n"
3695
msgstr ""
3696
"\n"
3697
"acl fortytwo_network src 192.168.42.0/24\n"
3698
3699
#: serverguide/C/web-servers.xml:878(para) serverguide/C/web-servers.xml:899(para)
3700
msgid ""
3701
"Then, add the following to the <emphasis role=\"bold\">top</emphasis> of the "
3702
"http_access section of your <filename>/etc/squid/squid.conf</filename> file:"
3703
msgstr ""
3704
"Then, add the following to the <emphasis role=\"bold\">top</emphasis> of the "
3705
"http_access section of your <filename>/etc/squid/squid.conf</filename> file:"
3706
3707
#: serverguide/C/web-servers.xml:882(programlisting)
3708
#, no-wrap
3709
msgid ""
3710
"\n"
3711
"http_access allow fortytwo_network\n"
3712
msgstr ""
3713
"\n"
3714
"http_access allow fortytwo_network\n"
3715
3716
#: serverguide/C/web-servers.xml:887(para)
3717
msgid ""
3718
"Using the excellent access control features of Squid, you may configure use "
3719
"of Internet services proxied by Squid to be available only during normal "
3720
"business hours. For example, we'll illustrate access by employees of a "
3721
"business which is operating between 9:00AM and 5:00PM, Monday through "
3722
"Friday, and which uses the 10.1.42.0/42 subnetwork:"
3723
msgstr ""
3724
"Using the excellent access control features of Squid, you may configure use "
3725
"of Internet services proxied by Squid to be available only during normal "
3726
"business hours. For example, we'll illustrate access by employees of a "
3727
"business which is operating between 9:00AM and 5:00PM, Monday through "
3728
"Friday, and which uses the 10.1.42.0/42 subnetwork:"
3729
3730
#: serverguide/C/web-servers.xml:895(programlisting)
3731
#, no-wrap
3732
msgid ""
3733
"\n"
3734
"acl biz_network src 10.1.42.0/24\n"
3735
"acl biz_hours time M T W T F 9:00-17:00\n"
3736
msgstr ""
3737
"\n"
3738
"acl biz_network src 10.1.42.0/24\n"
3739
"acl biz_hours time M T W T F 9:00-17:00\n"
3740
3741
#: serverguide/C/web-servers.xml:903(programlisting)
3742
#, no-wrap
3743
msgid ""
3744
"\n"
3745
"http_access allow biz_network biz_hours\n"
3746
msgstr ""
3747
"\n"
3748
"http_access allow biz_network biz_hours\n"
3749
3750
#: serverguide/C/web-servers.xml:910(para)
3751
msgid ""
3752
"After making changes to the <filename>/etc/squid/squid.conf</filename> file, "
3753
"save the file and restart the <application>squid</application> server "
3754
"application to effect the changes using the following command entered at a "
3755
"terminal prompt:"
3756
msgstr ""
3757
"After making changes to the <filename>/etc/squid/squid.conf</filename> file, "
3758
"save the file and restart the <application>squid</application> server "
3759
"application to effect the changes using the following command entered at a "
3760
"terminal prompt:"
3761
3762
#: serverguide/C/web-servers.xml:917(command)
3763
msgid "sudo /etc/init.d/squid restart"
3764
msgstr "sudo /etc/init.d/squid restart"
3765
3766
#: serverguide/C/web-servers.xml:924(ulink)
3767
msgid "Squid Website"
3768
msgstr "Squid Website"
3769
3770
#: serverguide/C/web-servers.xml:926(para)
3771
msgid ""
3772
"<ulink url=\"https://help.ubuntu.com/community/Squid\">Ubuntu Wiki "
3773
"Squid</ulink> page."
3774
msgstr ""
3775
3776
#: serverguide/C/web-servers.xml:933(title)
3777
msgid "Ruby on Rails"
3778
msgstr "Ruby on Rails"
3779
3780
#: serverguide/C/web-servers.xml:934(para)
3781
msgid ""
3782
"Ruby on Rails is an open source web framework for developing database backed "
3783
"web applications. It is optimized for sustainable productivity of the "
3784
"programmer since it lets the programmer to write code by favouring "
3785
"convention over configuration."
3786
msgstr ""
3787
"Ruby on Rails is an open source Web framework for developing database backed "
3788
"Web applications. It is optimised for sustainable productivity of the "
3789
"programmer since it lets the programmer to write code by favouring "
3790
"convention over configuration."
3791
3792
#: serverguide/C/web-servers.xml:941(para)
3793
msgid ""
3794
"Before installing <application>Rails</application> you should install "
3795
"<application>Apache</application> and <application>MySQL</application>. To "
3796
"install the <application>Apache</application> package, please refer to <xref "
3797
"linkend=\"httpd\"/>. For instructions on installing "
3798
"<application>MySQL</application> refer to <xref linkend=\"mysql\"/>."
3799
msgstr ""
3800
"Before installing <application>Rails</application> you should install "
3801
"<application>Apache</application> and <application>MySQL</application>. To "
3802
"install the <application>Apache</application> package, please refer to <xref "
3803
"linkend=\"httpd\"/>. For instructions on installing "
3804
"<application>MySQL</application> refer to <xref linkend=\"mysql\"/>."
3805
3806
#: serverguide/C/web-servers.xml:949(para)
3807
msgid ""
3808
"Once you have <application>Apache</application> and "
3809
"<application>MySQL</application> packages installed, you are ready to "
3810
"install <application>Ruby on Rails</application> package."
3811
msgstr ""
3812
"Once you have <application>Apache</application> and "
3813
"<application>MySQL</application> packages installed, you are ready to "
3814
"install <application>Ruby on Rails</application> package."
3815
3816
#: serverguide/C/web-servers.xml:956(para)
3817
msgid ""
3818
"To install the <application>Ruby</application> base packages and "
3819
"<application>Ruby on Rails</application>, you can enter the following "
3820
"command in the terminal prompt:"
3821
msgstr ""
3822
"To install the <application>Ruby</application> base packages and "
3823
"<application>Ruby on Rails</application>, you can enter the following "
3824
"command in the terminal prompt:"
3825
3826
#: serverguide/C/web-servers.xml:962(command)
3827
msgid "sudo apt-get install rails"
3828
msgstr "sudo apt-get install rails"
3829
3830
#: serverguide/C/web-servers.xml:968(para)
3831
msgid ""
3832
"Modify the <filename>/etc/apache2/sites-available/default</filename> "
3833
"configuration file to setup your domains."
3834
msgstr ""
3835
"Modify the <filename>/etc/apache2/sites-available/default</filename> "
3836
"configuration file to setup your domains."
3837
3838
#: serverguide/C/web-servers.xml:972(para)
3839
msgid ""
3840
"The first thing to change is the <emphasis>DocumentRoot</emphasis> directive:"
3841
msgstr ""
3842
"The first thing to change is the <emphasis>DocumentRoot</emphasis> directive:"
3843
3844
#: serverguide/C/web-servers.xml:976(programlisting)
3845
#, no-wrap
3846
msgid ""
3847
"\n"
3848
"DocumentRoot /path/to/rails/application/public\n"
3849
msgstr ""
3850
"\n"
3851
"DocumentRoot /path/to/rails/application/public\n"
3852
3853
#: serverguide/C/web-servers.xml:979(para)
3854
msgid ""
3855
"Next, change the <Directory \"/path/to/rails/application/public\"> "
3856
"directive:"
3857
msgstr ""
3858
"Next, change the <Directory \"/path/to/rails/application/public\"> "
3859
"directive:"
3860
3861
#: serverguide/C/web-servers.xml:983(programlisting)
3862
#, no-wrap
3863
msgid ""
3864
"\n"
3865
"<Directory \"/path/to/rails/application/public\">\n"
3866
" Options Indexes FollowSymLinks MultiViews ExecCGI\n"
3867
" AllowOverride All\n"
3868
" Order allow,deny\n"
3869
" allow from all\n"
3870
" AddHandler cgi-script .cgi\n"
3871
"</Directory>\n"
3872
msgstr ""
3873
"\n"
3874
"<Directory \"/path/to/rails/application/public\">\n"
3875
" Options Indexes FollowSymLinks MultiViews ExecCGI\n"
3876
" AllowOverride All\n"
3877
" Order allow,deny\n"
3878
" allow from all\n"
3879
" AddHandler cgi-script .cgi\n"
3880
"</Directory>\n"
3881
3882
#: serverguide/C/web-servers.xml:993(para)
3883
msgid ""
3884
"You should also enable the <application>mod_rewrite</application> module for "
3885
"Apache. To enable <application>mod_rewrite</application> module, please "
3886
"enter the following command in a terminal prompt:"
3887
msgstr ""
3888
"You should also enable the <application>mod_rewrite</application> module for "
3889
"Apache. To enable <application>mod_rewrite</application> module, please "
3890
"enter the following command in a terminal prompt:"
3891
3892
#: serverguide/C/web-servers.xml:999(command)
3893
msgid "sudo a2enmod rewrite"
3894
msgstr "sudo a2enmod rewrite"
3895
3896
#: serverguide/C/web-servers.xml:1002(para)
3897
msgid ""
3898
"Finally you will need to change the ownership of the "
3899
"<filename>/path/to/rails/application/public</filename> and "
3900
"<filename>/path/to/rails/application/tmp</filename> directories to the user "
3901
"used to run the <application>Apache</application> process:"
3902
msgstr ""
3903
"Finally you will need to change the ownership of the "
3904
"<filename>/path/to/rails/application/public</filename> and "
3905
"<filename>/path/to/rails/application/tmp</filename> directories to the user "
3906
"used to run the <application>Apache</application> process:"
3907
3908
#: serverguide/C/web-servers.xml:1008(command)
3909
msgid "sudo chown -R www-data:www-data /path/to/rails/application/public"
3910
msgstr "sudo chown -R www-data:www-data /path/to/rails/application/public"
3911
3912
#: serverguide/C/web-servers.xml:1009(command)
3913
msgid "sudo chown -R www-data:www-data /path/to/rails/application/tmp"
3914
msgstr "sudo chown -R www-data:www-data /path/to/rails/application/tmp"
3915
3916
#: serverguide/C/web-servers.xml:1012(para)
3917
msgid ""
3918
"That's it! Now you have your Server ready for your <application>Ruby on "
3919
"Rails</application> applications."
3920
msgstr ""
3921
"That's it! Now you have your Server ready for your <application>Ruby on "
3922
"Rails</application> applications."
3923
3924
#: serverguide/C/web-servers.xml:1021(para)
3925
msgid ""
3926
"See the <ulink url=\"http://rubyonrails.org/\">Ruby on Rails</ulink> website "
3927
"for more information."
3928
msgstr ""
3929
"See the <ulink url=\"http://rubyonrails.org/\">Ruby on Rails</ulink> website "
3930
"for more information."
3931
3932
#: serverguide/C/web-servers.xml:1026(para)
3933
msgid ""
3934
"Also <ulink url=\"http://pragprog.com/titles/rails3/agile-web-development-"
3935
"with-rails-third-edition\">Agile Development with Rails</ulink> is a great "
3936
"resource."
3937
msgstr ""
3938
"Also <ulink url=\"http://pragprog.com/titles/rails3/agile-web-development-"
3939
"with-rails-third-edition\">Agile Development with Rails</ulink> is a great "
3940
"resource."
3941
3942
#: serverguide/C/web-servers.xml:1032(para)
3943
msgid ""
3944
"Another place for more information is the <ulink "
3945
"url=\"https://help.ubuntu.com/community/RubyOnRails\">Ruby on Rails Ubuntu "
3946
"Wiki</ulink> page."
3947
msgstr ""
3948
3949
#: serverguide/C/web-servers.xml:1043(title)
3950
msgid "Apache Tomcat"
3951
msgstr "Apache Tomcat"
3952
3953
#: serverguide/C/web-servers.xml:1044(para)
3954
msgid ""
3955
"Apache Tomcat is a web container that allows you to serve Java Servlets and "
3956
"JSP (Java Server Pages) web applications."
3957
msgstr ""
3958
"Apache Tomcat is a web container that allows you to serve Java Servlets and "
3959
"JSP (Java Server Pages) web applications."
3960
3961
#: serverguide/C/web-servers.xml:1046(para)
3962
msgid ""
3963
"The <application>Tomcat 6.0</application> packages in Ubuntu support two "
3964
"different ways of running Tomcat. You can install them as a classic unique "
3965
"system-wide instance, that will be started at boot time and will run as the "
3966
"tomcat6 unpriviledged user. But you can also deploy private instances that "
3967
"will run with your own user rights, and that you should start and stop by "
3968
"yourself. This second way is particularly useful in a development server "
3969
"context where multiple users need to test on their own private Tomcat "
3970
"instances."
3971
msgstr ""
3972
"The <application>Tomcat 6.0</application> packages in Ubuntu support two "
3973
"different ways of running Tomcat. You can install them as a classic unique "
3974
"system-wide instance, that will be started at boot time and will run as the "
3975
"tomcat6 unpriviledged user. But you can also deploy private instances that "
3976
"will run with your own user rights, and that you should start and stop by "
3977
"yourself. This second way is particularly useful in a development server "
3978
"context where multiple users need to test on their own private Tomcat "
3979
"instances."
3980
3981
#: serverguide/C/web-servers.xml:1056(title)
3982
msgid "System-wide installation"
3983
msgstr "System-wide installation"
3984
3985
#: serverguide/C/web-servers.xml:1057(para)
3986
msgid ""
3987
"To install the <application>Tomcat</application> server, you can enter the "
3988
"following command in the terminal prompt:"
3989
msgstr ""
3990
"To install the <application>Tomcat</application> server, you can enter the "
3991
"following command in the terminal prompt:"
3992
3993
#: serverguide/C/web-servers.xml:1060(command)
3994
msgid "sudo apt-get install tomcat6"
3995
msgstr "sudo apt-get install tomcat6"
3996
3997
#: serverguide/C/web-servers.xml:1062(para)
3998
msgid ""
3999
"This will install a Tomcat server with just a default ROOT webapp that "
4000
"displays a minimal \"It works\" page by default."
4001
msgstr ""
4002
"This will install a Tomcat server with just a default ROOT webapp that "
4003
"displays a minimal \"It works\" page by default."
4004
4005
#: serverguide/C/web-servers.xml:1068(para)
4006
msgid ""
4007
"Tomcat configuration files can be found in "
4008
"<filename>/etc/tomcat6</filename>. Only a few common configuration tweaks "
4009
"will be described here, please see <ulink "
4010
"url=\"http://tomcat.apache.org/tomcat-6.0-doc/index.html\">Tomcat 6.0 "
4011
"documentation</ulink> for more."
4012
msgstr ""
4013
"Tomcat configuration files can be found in "
4014
"<filename>/etc/tomcat6</filename>. Only a few common configuration tweaks "
4015
"will be described here, please see <ulink "
4016
"url=\"http://tomcat.apache.org/tomcat-6.0-doc/index.html\">Tomcat 6.0 "
4017
"documentation</ulink> for more."
4018
4019
#: serverguide/C/web-servers.xml:1074(title)
4020
msgid "Changing default ports"
4021
msgstr "Changing default ports"
4022
4023
#: serverguide/C/web-servers.xml:1075(para)
4024
msgid ""
4025
"By default Tomcat 6.0 runs a HTTP connector on port 8080 and an AJP "
4026
"connector on port 8009. You might want to change those default ports to "
4027
"avoid conflict with another server on the system. This is done by changing "
4028
"the following lines in <filename>/etc/tomcat6/server.xml</filename>:"
4029
msgstr ""
4030
"By default Tomcat 6.0 runs a HTTP connector on port 8080 and an AJP "
4031
"connector on port 8009. You might want to change those default ports to "
4032
"avoid conflict with another server on the system. This is done by changing "
4033
"the following lines in <filename>/etc/tomcat6/server.xml</filename>:"
4034
4035
#: serverguide/C/web-servers.xml:1080(programlisting)
4036
#, no-wrap
4037
msgid ""
4038
"\n"
4039
"<Connector port=\"8080\" protocol=\"HTTP/1.1\" \n"
4040
" connectionTimeout=\"20000\" \n"
4041
" redirectPort=\"8443\" />\n"
4042
"...\n"
4043
"<Connector port=\"8009\" protocol=\"AJP/1.3\" redirectPort=\"8443\" "
4044
"/>\n"
4045
msgstr ""
4046
"\n"
4047
"<Connector port=\"8080\" protocol=\"HTTP/1.1\" \n"
4048
" connectionTimeout=\"20000\" \n"
4049
" redirectPort=\"8443\" />\n"
4050
"...\n"
4051
"<Connector port=\"8009\" protocol=\"AJP/1.3\" redirectPort=\"8443\" "
4052
"/>\n"
4053
4054
#: serverguide/C/web-servers.xml:1089(title)
4055
msgid "Changing JVM used"
4056
msgstr "Changing JVM used"
4057
4058
#: serverguide/C/web-servers.xml:1090(para)
4059
msgid ""
4060
"By default Tomcat will run preferably with OpenJDK-6, then try Sun's JVM, "
4061
"then try some other JVMs. If you have various JVMs installed, you can set "
4062
"which should be used by setting JAVA_HOME in "
4063
"<filename>/etc/default/tomcat6</filename>:"
4064
msgstr ""
4065
"By default Tomcat will run preferably with OpenJDK-6, then try Sun's JVM, "
4066
"then try some other JVMs. If you have various JVMs installed, you can set "
4067
"which should be used by setting JAVA_HOME in "
4068
"<filename>/etc/default/tomcat6</filename>:"
4069
4070
#: serverguide/C/web-servers.xml:1094(programlisting)
4071
#, no-wrap
4072
msgid ""
4073
"\n"
4074
"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"
4075
msgstr ""
4076
"\n"
4077
"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"
4078
4079
#: serverguide/C/web-servers.xml:1099(title)
4080
msgid "Declaring users and roles"
4081
msgstr "Declaring users and roles"
4082
4083
#: serverguide/C/web-servers.xml:1100(para)
4084
msgid ""
4085
"Usernames, passwords and roles (groups) can be defined centrally in a "
4086
"Servlet container. In Tomcat 6.0 this is done in the "
4087
"<filename>/etc/tomcat6/tomcat-users.xml</filename> file:"
4088
msgstr ""
4089
"Usernames, passwords and roles (groups) can be defined centrally in a "
4090
"Servlet container. In Tomcat 6.0 this is done in the "
4091
"<filename>/etc/tomcat6/tomcat-users.xml</filename> file:"
4092
4093
#: serverguide/C/web-servers.xml:1103(programlisting)
4094
#, no-wrap
4095
msgid ""
4096
"\n"
4097
"<role rolename=\"admin\"/>\n"
4098
"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"
4099
msgstr ""
4100
"\n"
4101
"<role rolename=\"admin\"/>\n"
4102
"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"
4103
4104
#: serverguide/C/web-servers.xml:1111(title)
4105
msgid "Using Tomcat standard webapps"
4106
msgstr "Using Tomcat standard webapps"
4107
4108
#: serverguide/C/web-servers.xml:1112(para)
4109
msgid ""
4110
"Tomcat is shipped with webapps that you can install for documentation, "
4111
"administration or demo purposes."
4112
msgstr ""
4113
"Tomcat is shipped with webapps that you can install for documentation, "
4114
"administration or demo purposes."
4115
4116
#: serverguide/C/web-servers.xml:1115(title)
4117
msgid "Tomcat documentation"
4118
msgstr "Tomcat documentation"
4119
4120
#: serverguide/C/web-servers.xml:1116(para)
4121
msgid ""
4122
"The <application>tomcat6-docs</application> package contains Tomcat 6.0 "
4123
"documentation, packaged as a webapp that you can access by default at "
4124
"http://yourserver:8080/docs. You can install it by entering the following "
4125
"command in the terminal prompt:"
4126
msgstr ""
4127
"The <application>tomcat6-docs</application> package contains Tomcat 6.0 "
4128
"documentation, packaged as a webapp that you can access by default at "
4129
"http://yourserver:8080/docs. You can install it by entering the following "
4130
"command in the terminal prompt:"
4131
4132
#: serverguide/C/web-servers.xml:1121(command)
4133
msgid "sudo apt-get install tomcat6-docs"
4134
msgstr "sudo apt-get install tomcat6-docs"
4135
4136
#: serverguide/C/web-servers.xml:1125(title)
4137
msgid "Tomcat administration webapps"
4138
msgstr "Tomcat administration webapps"
4139
4140
#: serverguide/C/web-servers.xml:1126(para)
4141
msgid ""
4142
"The <application>tomcat6-admin</application> package contains two webapps "
4143
"that can be used to administer the Tomcat server using a web interface. You "
4144
"can install them by entering the following command in the terminal prompt:"
4145
msgstr ""
4146
"The <application>tomcat6-admin</application> package contains two webapps "
4147
"that can be used to administer the Tomcat server using a web interface. You "
4148
"can install them by entering the following command in the terminal prompt:"
4149
4150
#: serverguide/C/web-servers.xml:1131(command)
4151
msgid "sudo apt-get install tomcat6-admin"
4152
msgstr "sudo apt-get install tomcat6-admin"
4153
4154
#: serverguide/C/web-servers.xml:1133(para)
4155
msgid ""
4156
"The first one is the <emphasis>manager</emphasis> webapp, which you can "
4157
"access by default at http://yourserver:8080/manager/html. It is primarily "
4158
"used to get server status and restart webapps."
4159
msgstr ""
4160
"The first one is the <emphasis>manager</emphasis> webapp, which you can "
4161
"access by default at http://yourserver:8080/manager/html. It is primarily "
4162
"used to get server status and restart webapps."
4163
4164
#: serverguide/C/web-servers.xml:1136(para)
4165
msgid ""
4166
"Access to the <emphasis>manager</emphasis> application is protected by "
4167
"default: you need to define a user with the role \"manager\" in "
4168
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
4169
msgstr ""
4170
"Access to the <emphasis>manager</emphasis> application is protected by "
4171
"default: you need to define a user with the role \"manager\" in "
4172
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
4173
4174
#: serverguide/C/web-servers.xml:1140(para)
4175
msgid ""
4176
"The second one is the <emphasis>host-manager</emphasis> webapp, which you "
4177
"can access by default at http://yourserver:8080/host-manager/html. It can be "
4178
"used to create virtual hosts dynamically."
4179
msgstr ""
4180
"The second one is the <emphasis>host-manager</emphasis> webapp, which you "
4181
"can access by default at http://yourserver:8080/host-manager/html. It can be "
4182
"used to create virtual hosts dynamically."
4183
4184
#: serverguide/C/web-servers.xml:1144(para)
4185
msgid ""
4186
"Access to the <emphasis>host-manager</emphasis> application is also "
4187
"protected by default: you need to define a user with the role \"admin\" in "
4188
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
4189
msgstr ""
4190
"Access to the <emphasis>host-manager</emphasis> application is also "
4191
"protected by default: you need to define a user with the role \"admin\" in "
4192
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
4193
4194
#: serverguide/C/web-servers.xml:1149(para)
4195
msgid ""
4196
"For security reasons, the tomcat6 user cannot write to the "
4197
"<filename>/etc/tomcat6</filename> directory by default. Some features in "
4198
"these admin webapps (application deployment, virtual host creation) need "
4199
"write access to that directory. If you want to use these features execute "
4200
"the following, to give users in the tomcat6 group the necessary rights:"
4201
msgstr ""
4202
"For security reasons, the tomcat6 user cannot write to the "
4203
"<filename>/etc/tomcat6</filename> directory by default. Some features in "
4204
"these admin webapps (application deployment, virtual host creation) need "
4205
"write access to that directory. If you want to use these features execute "
4206
"the following, to give users in the tomcat6 group the necessary rights:"
4207
4208
#: serverguide/C/web-servers.xml:1156(command)
4209
msgid "sudo chgrp -R tomcat6 /etc/tomcat6"
4210
msgstr "sudo chgrp -R tomcat6 /etc/tomcat6"
4211
4212
#: serverguide/C/web-servers.xml:1157(command)
4213
msgid "sudo chmod -R g+w /etc/tomcat6"
4214
msgstr "sudo chmod -R g+w /etc/tomcat6"
4215
4216
#: serverguide/C/web-servers.xml:1162(title)
4217
msgid "Tomcat examples webapps"
4218
msgstr "Tomcat examples webapps"
4219
4220
#: serverguide/C/web-servers.xml:1163(para)
4221
msgid ""
4222
"The <application>tomcat6-examples</application> package contains two webapps "
4223
"that can be used to test or demonstrate Servlets and JSP features, which you "
4224
"can access them by default at http://yourserver:8080/examples. You can "
4225
"install them by entering the following command in the terminal prompt:"
4226
msgstr ""
4227
"The <application>tomcat6-examples</application> package contains two webapps "
4228
"that can be used to test or demonstrate Servlets and JSP features, which you "
4229
"can access them by default at http://yourserver:8080/examples. You can "
4230
"install them by entering the following command in the terminal prompt:"
4231
4232
#: serverguide/C/web-servers.xml:1169(command)
4233
msgid "sudo apt-get install tomcat6-examples"
4234
msgstr "sudo apt-get install tomcat6-examples"
4235
4236
#: serverguide/C/web-servers.xml:1175(title)
4237
msgid "Using private instances"
4238
msgstr "Using private instances"
4239
4240
#: serverguide/C/web-servers.xml:1176(para)
4241
msgid ""
4242
"Tomcat is heavily used in development and testing scenarios where using a "
4243
"single system-wide instance doesn't meet the requirements of multiple users "
4244
"on a single system. The Tomcat 6.0 packages in Ubuntu come with tools to "
4245
"help deploy your own user-oriented instances, allowing every user on a "
4246
"system to run (without root rights) separate private instances while still "
4247
"using the system-installed libraries."
4248
msgstr ""
4249
"Tomcat is heavily used in development and testing scenarios where using a "
4250
"single system-wide instance doesn't meet the requirements of multiple users "
4251
"on a single system. The Tomcat 6.0 packages in Ubuntu come with tools to "
4252
"help deploy your own user-oriented instances, allowing every user on a "
4253
"system to run (without root rights) separate private instances while still "
4254
"using the system-installed libraries."
4255
4256
#: serverguide/C/web-servers.xml:1183(para)
4257
msgid ""
4258
"It is possible to run the system-wide instance and the private instances in "
4259
"parallel, as long as they do not use the same TCP ports."
4260
msgstr ""
4261
"It is possible to run the system-wide instance and the private instances in "
4262
"parallel, as long as they do not use the same TCP ports."
4263
4264
#: serverguide/C/web-servers.xml:1187(title)
4265
msgid "Installing private instance support"
4266
msgstr "Installing private instance support"
4267
4268
#: serverguide/C/web-servers.xml:1188(para)
4269
msgid ""
4270
"You can install everything necessary to run private instances by entering "
4271
"the following command in the terminal prompt:"
4272
msgstr ""
4273
"You can install everything necessary to run private instances by entering "
4274
"the following command in the terminal prompt:"
4275
4276
#: serverguide/C/web-servers.xml:1191(command)
4277
msgid "sudo apt-get install tomcat6-user"
4278
msgstr "sudo apt-get install tomcat6-user"
4279
4280
#: serverguide/C/web-servers.xml:1195(title)
4281
msgid "Creating a private instance"
4282
msgstr "Creating a private instance"
4283
4284
#: serverguide/C/web-servers.xml:1196(para)
4285
msgid ""
4286
"You can create a private instance directory by entering the following "
4287
"command in the terminal prompt:"
4288
msgstr ""
4289
"You can create a private instance directory by entering the following "
4290
"command in the terminal prompt:"
4291
4292
#: serverguide/C/web-servers.xml:1199(command)
4293
msgid "tomcat6-instance-create my-instance"
4294
msgstr "tomcat6-instance-create my-instance"
4295
4296
#: serverguide/C/web-servers.xml:1201(para)
4297
msgid ""
4298
"This will create a new <filename>my-instance</filename> directory with all "
4299
"the necessary subdirectories and scripts. You can for example install your "
4300
"common libraries in the <filename>lib/</filename> subdirectory and deploy "
4301
"your webapps in the <filename>webapps/</filename> subdirectory. No webapps "
4302
"are deployed by default."
4303
msgstr ""
4304
"This will create a new <filename>my-instance</filename> directory with all "
4305
"the necessary subdirectories and scripts. You can for example install your "
4306
"common libraries in the <filename>lib/</filename> subdirectory and deploy "
4307
"your webapps in the <filename>webapps/</filename> subdirectory. No webapps "
4308
"are deployed by default."
4309
4310
#: serverguide/C/web-servers.xml:1209(title)
4311
msgid "Configuring your private instance"
4312
msgstr "Configuring your private instance"
4313
4314
#: serverguide/C/web-servers.xml:1210(para)
4315
msgid ""
4316
"You will find the classic Tomcat configuration files for your private "
4317
"instance in the <filename>conf/</filename> subdirectory. You should for "
4318
"example certainly edit the <filename>conf/server.xml</filename> file to "
4319
"change the default ports used by your private Tomcat instance to avoid "
4320
"conflict with other instances that might be running."
4321
msgstr ""
4322
"You will find the classic Tomcat configuration files for your private "
4323
"instance in the <filename>conf/</filename> subdirectory. You should for "
4324
"example certainly edit the <filename>conf/server.xml</filename> file to "
4325
"change the default ports used by your private Tomcat instance to avoid "
4326
"conflict with other instances that might be running."
4327
4328
#: serverguide/C/web-servers.xml:1218(title)
4329
msgid "Starting/stopping your private instance"
4330
msgstr "Starting/stopping your private instance"
4331
4332
#: serverguide/C/web-servers.xml:1219(para)
4333
msgid ""
4334
"You can start your private instance by entering the following command in the "
4335
"terminal prompt (supposing your instance is located in the <filename>my-"
4336
"instance</filename> directory):"
4337
msgstr ""
4338
"You can start your private instance by entering the following command in the "
4339
"terminal prompt (supposing your instance is located in the <filename>my-"
4340
"instance</filename> directory):"
4341
4342
#: serverguide/C/web-servers.xml:1223(command)
4343
msgid "my-instance/bin/startup.sh"
4344
msgstr "my-instance/bin/startup.sh"
4345
4346
#: serverguide/C/web-servers.xml:1225(para)
4347
msgid ""
4348
"You should check the <filename>logs/</filename> subdirectory for any error. "
4349
"If you have a <emphasis>java.net.BindException: Address already in "
4350
"use<null>:8080</emphasis> error, it means that the port you're using "
4351
"is already taken and that you should change it."
4352
msgstr ""
4353
"You should check the <filename>logs/</filename> subdirectory for any error. "
4354
"If you have a <emphasis>java.net.BindException: Address already in "
4355
"use<null>:8080</emphasis> error, it means that the port you're using "
4356
"is already taken and that you should change it."
4357
4358
#: serverguide/C/web-servers.xml:1230(para)
4359
msgid ""
4360
"You can stop your instance by entering the following command in the terminal "
4361
"prompt (supposing your instance is located in the <filename>my-"
4362
"instance</filename> directory):"
4363
msgstr ""
4364
"You can stop your instance by entering the following command in the terminal "
4365
"prompt (supposing your instance is located in the <filename>my-"
4366
"instance</filename> directory):"
4367
4368
#: serverguide/C/web-servers.xml:1234(command)
4369
msgid "my-instance/bin/shutdown.sh"
4370
msgstr "my-instance/bin/shutdown.sh"
4371
4372
#: serverguide/C/web-servers.xml:1243(para)
4373
msgid ""
4374
"See the <ulink url=\"http://tomcat.apache.org/\">Apache Tomcat</ulink> "
4375
"website for more information."
4376
msgstr ""
4377
"See the <ulink url=\"http://tomcat.apache.org/\">Apache Tomcat</ulink> "
4378
"website for more information."
4379
4380
#: serverguide/C/web-servers.xml:1248(para)
4381
msgid ""
4382
"<ulink url=\"http://oreilly.com/catalog/9780596003180/\">Tomcat: The "
4383
"Definitive Guide</ulink> is a good resource for building web applications "
4384
"with Tomcat."
4385
msgstr ""
4386
"<ulink url=\"http://oreilly.com/catalog/9780596003180/\">Tomcat: The "
4387
"Definitive Guide</ulink> is a good resource for building web applications "
4388
"with Tomcat."
4389
4390
#: serverguide/C/web-servers.xml:1254(para)
4391
msgid ""
4392
"For additional books see the <ulink "
4393
"url=\"http://wiki.apache.org/tomcat/Tomcat/Books\">Tomcat Books</ulink> list "
4394
"page."
4395
msgstr ""
4396
"For additional books see the <ulink "
4397
"url=\"http://wiki.apache.org/tomcat/Tomcat/Books\">Tomcat Books</ulink> list "
4398
"page."
4399
4400
#: serverguide/C/web-servers.xml:1259(para)
4401
msgid ""
4402
"Also, see the<ulink "
4403
"url=\"https://help.ubuntu.com/community/ApacheTomcat5\">Ubuntu Wiki Apache "
4404
"Tomcat</ulink> page."
4405
msgstr ""
4406
4407
#: serverguide/C/vpn.xml:13(title)
4408
msgid "VPN"
4409
msgstr "VPN"
4410
4411
#: serverguide/C/vpn.xml:15(para)
4412
msgid ""
4413
"A Virtual Private Network, or <emphasis>VPN</emphasis>, is an encrypted "
4414
"network connection between two or more networks. There are several ways to "
4415
"create a VPN using software as well as dedicated hardware appliances. This "
4416
"chapter will cover installing and configuring "
4417
"<application>OpenVPN</application> to create a VPN between two servers."
4418
msgstr ""
4419
"A Virtual Private Network, or <emphasis>VPN</emphasis>, is an encrypted "
4420
"network connection between two or more networks. There are several ways to "
4421
"create a VPN using software as well as dedicated hardware appliances. This "
4422
"chapter will cover installing and configuring "
4423
"<application>OpenVPN</application> to create a VPN between two servers."
4424
4425
#: serverguide/C/vpn.xml:23(title)
4426
msgid "OpenVPN"
4427
msgstr "OpenVPN"
4428
4429
#: serverguide/C/vpn.xml:25(para)
4430
msgid ""
4431
"OpenVPN uses Public Key Infrastructure (PKI) to encrypt VPN traffic between "
4432
"nodes. A simple way of setting up a VPN with OpenVPN is to connect the "
4433
"clients through a bridge interface on the VPN server. This guide will assume "
4434
"that one VPN node, the server in this case, has a bridge interface "
4435
"configured. For more information on setting up a bridge see <xref "
4436
"linkend=\"bridging\"/>."
4437
msgstr ""
4438
"OpenVPN uses Public Key Infrastructure (PKI) to encrypt VPN traffic between "
4439
"nodes. A simple way of setting up a VPN with OpenVPN is to connect the "
4440
"clients through a bridge interface on the VPN server. This guide will assume "
4441
"that one VPN node, the server in this case, has a bridge interface "
4442
"configured. For more information on setting up a bridge see <xref "
4443
"linkend=\"bridging\"/>."
4444
4445
#: serverguide/C/vpn.xml:35(para)
4446
msgid "To install <application>openvpn</application> in a terminal enter:"
4447
msgstr "To install <application>openvpn</application> in a terminal enter:"
4448
4449
#: serverguide/C/vpn.xml:41(command) serverguide/C/vpn.xml:257(command)
4450
msgid "sudo apt-get install openvpn"
4451
msgstr "sudo apt-get install openvpn"
4452
4453
#: serverguide/C/vpn.xml:45(title)
4454
msgid "Server Certificates"
4455
msgstr "Server Certificates"
4456
4457
#: serverguide/C/vpn.xml:47(para)
4458
msgid ""
4459
"Now that the <application>openvpn</application> package is installed, the "
4460
"certificates for the VPN server need to be created."
4461
msgstr ""
4462
"Now that the <application>openvpn</application> package is installed, the "
4463
"certificates for the VPN server need to be created."
4464
4465
#: serverguide/C/vpn.xml:52(para)
4466
msgid ""
4467
"First, copy the <filename>easy-rsa</filename> directory to "
4468
"<filename>/etc/openvpn</filename>. This will ensure that any changes to the "
4469
"scripts will not be lost when the package is updated. You will also need to "
4470
"adjust permissions in the <filename>easy-rsa</filename> directory to allow "
4471
"the current user permission to create files. From a terminal enter:"
4472
msgstr ""
4473
4474
#: serverguide/C/vpn.xml:59(command)
4475
msgid "sudo mkdir /etc/openvpn/easy-rsa/"
4476
msgstr "sudo mkdir /etc/openvpn/easy-rsa/"
4477
4478
#: serverguide/C/vpn.xml:60(command)
4479
msgid ""
4480
"sudo cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-"
4481
"rsa/"
4482
msgstr ""
4483
4484
#: serverguide/C/vpn.xml:61(command)
4485
msgid "sudo chown -R $USER /etc/openvpn/easy-rsa/"
4486
msgstr ""
4487
4488
#: serverguide/C/vpn.xml:64(para)
4489
msgid ""
4490
"Next, edit <filename>/etc/openvpn/easy-rsa/vars</filename> adjusting the "
4491
"following to your environment:"
4492
msgstr ""
4493
"Next, edit <filename>/etc/openvpn/easy-rsa/vars</filename> adjusting the "
4494
"following to your environment:"
4495
4496
#: serverguide/C/vpn.xml:68(programlisting)
4497
#, no-wrap
4498
msgid ""
4499
"\n"
4500
"export KEY_COUNTRY=\"US\"\n"
4501
"export KEY_PROVINCE=\"NC\"\n"
4502
"export KEY_CITY=\"Winston-Salem\"\n"
4503
"export KEY_ORG=\"Example Company\"\n"
4504
"export KEY_EMAIL=\"steve@example.com\"\n"
4505
msgstr ""
4506
"\n"
4507
"export KEY_COUNTRY=\"US\"\n"
4508
"export KEY_PROVINCE=\"NC\"\n"
4509
"export KEY_CITY=\"Winston-Salem\"\n"
4510
"export KEY_ORG=\"Example Company\"\n"
4511
"export KEY_EMAIL=\"steve@example.com\"\n"
4512
4513
#: serverguide/C/vpn.xml:76(para)
4514
msgid "Enter the following to create the server certificates:"
4515
msgstr "Enter the following to create the server certificates:"
4516
4517
#: serverguide/C/vpn.xml:81(command) serverguide/C/vpn.xml:102(command)
4518
msgid "cd /etc/openvpn/easy-rsa/"
4519
msgstr "cd /etc/openvpn/easy-rsa/"
4520
4521
#: serverguide/C/vpn.xml:82(command) serverguide/C/vpn.xml:103(command)
4522
msgid "source vars"
4523
msgstr "source vars"
4524
4525
#: serverguide/C/vpn.xml:83(command)
4526
msgid "./clean-all"
4527
msgstr "./clean-all"
4528
4529
#: serverguide/C/vpn.xml:84(command)
4530
msgid "./build-dh"
4531
msgstr "./build-dh"
4532
4533
#: serverguide/C/vpn.xml:85(command)
4534
msgid "./pkitool --initca"
4535
msgstr "./pkitool --initca"
4536
4537
#: serverguide/C/vpn.xml:86(command)
4538
msgid "./pkitool --server server"
4539
msgstr "./pkitool --server server"
4540
4541
#: serverguide/C/vpn.xml:87(command)
4542
msgid "cd keys"
4543
msgstr "cd keys"
4544
4545
#: serverguide/C/vpn.xml:88(command)
4546
msgid "openvpn --genkey --secret ta.key"
4547
msgstr "openvpn --genkey --secret ta.key"
4548
4549
#: serverguide/C/vpn.xml:89(command)
4550
msgid "sudo cp server.crt server.key ca.crt dh1024.pem ta.key /etc/openvpn/"
4551
msgstr "sudo cp server.crt server.key ca.crt dh1024.pem ta.key /etc/openvpn/"
4552
4553
#: serverguide/C/vpn.xml:94(title)
4554
msgid "Client Certificates"
4555
msgstr "Client Certificates"
4556
4557
#: serverguide/C/vpn.xml:96(para)
4558
msgid ""
4559
"The VPN client will also need a certificate to authenticate itself to the "
4560
"server. To create the certificate, enter the following in a terminal:"
4561
msgstr ""
4562
"The VPN client will also need a certificate to authenticate itself to the "
4563
"server. To create the certificate, enter the following in a terminal:"
4564
4565
#: serverguide/C/vpn.xml:104(command)
4566
msgid "./pkitool hostname"
4567
msgstr "./pkitool hostname"
4568
4569
#: serverguide/C/vpn.xml:108(para)
4570
msgid ""
4571
"Replace <emphasis>hostname</emphasis> with the actual hostname of the "
4572
"machine connecting to the VPN."
4573
msgstr ""
4574
"Replace <emphasis>hostname</emphasis> with the actual hostname of the "
4575
"machine connecting to the VPN."
4576
4577
#: serverguide/C/vpn.xml:113(para)
4578
msgid "Copy the following files to the client:"
4579
msgstr "Copy the following files to the client:"
4580
4581
#: serverguide/C/vpn.xml:118(para)
4582
msgid "/etc/openvpn/ca.crt"
4583
msgstr ""
4584
4585
#: serverguide/C/vpn.xml:119(para)
4586
msgid "/etc/openvpn/easy-rsa/keys/hostname.crt"
4587
msgstr ""
4588
4589
#: serverguide/C/vpn.xml:120(para)
4590
msgid "/etc/openvpn/easy-rsa/keys/hostname.key"
4591
msgstr ""
4592
4593
#: serverguide/C/vpn.xml:121(para)
4594
msgid "/etc/openvpn/ta.key"
4595
msgstr ""
4596
4597
#: serverguide/C/vpn.xml:125(para)
4598
msgid ""
4599
"Remember to adjust the above file names for your client machine's "
4600
"<emphasis>hostname</emphasis>."
4601
msgstr ""
4602
"Remember to adjust the above file names for your client machine's "
4603
"<emphasis>hostname</emphasis>."
4604
4605
#: serverguide/C/vpn.xml:130(para)
4606
msgid ""
4607
"It is best to use a secure method to copy the certificate and key files. The "
4608
"<application>scp</application> utility is a good choice, but copying the "
4609
"files to removable media then to the client, also works well."
4610
msgstr ""
4611
"It is best to use a secure method to copy the certificate and key files. The "
4612
"<application>scp</application> utility is a good choice, but copying the "
4613
"files to removable media then to the client, also works well."
4614
4615
#: serverguide/C/vpn.xml:141(title) serverguide/C/vcs.xml:107(title)
4616
msgid "Server Configuration"
4617
msgstr "Server Configuration"
4618
4619
#: serverguide/C/vpn.xml:143(para)
4620
msgid ""
4621
"Now configure the <application>openvpn</application> server by creating "
4622
"<filename>/etc/openvpn/server.conf</filename> from the example file. In a "
4623
"terminal enter:"
4624
msgstr ""
4625
"Now configure the <application>openvpn</application> server by creating "
4626
"<filename>/etc/openvpn/server.conf</filename> from the example file. In a "
4627
"terminal enter:"
4628
4629
#: serverguide/C/vpn.xml:149(command)
4630
msgid ""
4631
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz "
4632
"/etc/openvpn/"
4633
msgstr ""
4634
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz "
4635
"/etc/openvpn/"
4636
4637
#: serverguide/C/vpn.xml:150(command)
4638
msgid "sudo gzip -d /etc/openvpn/server.conf.gz"
4639
msgstr "sudo gzip -d /etc/openvpn/server.conf.gz"
4640
4641
#: serverguide/C/vpn.xml:153(para)
4642
msgid ""
4643
"Edit <filename>/etc/openvpn/server.conf</filename> changing the following "
4644
"options to:"
4645
msgstr ""
4646
4647
#: serverguide/C/vpn.xml:157(programlisting)
4648
#, no-wrap
4649
msgid ""
4650
"\n"
4651
"local 172.18.100.101\n"
4652
"dev tap0\n"
4653
"up \"/etc/openvpn/up.sh br0\"\n"
4654
"down \"/etc/openvpn/down.sh br0\"\n"
4655
";server 10.8.0.0 255.255.255.0\n"
4656
"server-bridge 172.18.100.101 255.255.255.0 172.18.100.105 172.18.100.200\n"
4657
"push \"route 172.18.100.1 255.255.255.0\"\n"
4658
"push \"dhcp-option DNS 172.18.100.20\"\n"
4659
"push \"dhcp-option DOMAIN example.com\"\n"
4660
"tls-auth ta.key 0 # This file is secret\n"
4661
"user nobody\n"
4662
"group nogroup\n"
4663
msgstr ""
4664
4665
#: serverguide/C/vpn.xml:174(para)
4666
msgid ""
4667
"<emphasis>local</emphasis>: is the IP address of the bridge interface."
4668
msgstr ""
4669
"<emphasis>local</emphasis>: is the IP address of the bridge interface."
4670
4671
#: serverguide/C/vpn.xml:179(para)
4672
msgid ""
4673
"<emphasis>server-bridge</emphasis>: needed when the configuration uses "
4674
"bridging. The <emphasis>172.18.100.101 255.255.255.0</emphasis> portion is "
4675
"the bridge interface and mask. The IP range <emphasis>172.18.100.105 "
4676
"172.18.100.200</emphasis> is the range of IP addresses that will be assigned "
4677
"to clients."
4678
msgstr ""
4679
"<emphasis>server-bridge</emphasis>: needed when the configuration uses "
4680
"bridging. The <emphasis>172.18.100.101 255.255.255.0</emphasis> portion is "
4681
"the bridge interface and mask. The IP range <emphasis>172.18.100.105 "
4682
"172.18.100.200</emphasis> is the range of IP addresses that will be assigned "
4683
"to clients."
4684
4685
#: serverguide/C/vpn.xml:186(para)
4686
msgid ""
4687
"<emphasis>push</emphasis>: are directives to add networking options for "
4688
"clients."
4689
msgstr ""
4690
"<emphasis>push</emphasis>: are directives to add networking options for "
4691
"clients."
4692
4693
#: serverguide/C/vpn.xml:191(para)
4694
msgid ""
4695
"<emphasis>user and group</emphasis>: configure which user and group the "
4696
"<application>openvpn</application> daemon executes as."
4697
msgstr ""
4698
"<emphasis>user and group</emphasis>: configure which user and group the "
4699
"<application>openvpn</application> daemon executes as."
4700
4701
#: serverguide/C/vpn.xml:198(para)
4702
msgid ""
4703
"Replace all IP addresses and domain names above with those of your network."
4704
msgstr ""
4705
"Replace all IP addresses and domain names above with those of your network."
4706
4707
#: serverguide/C/vpn.xml:203(para)
4708
msgid ""
4709
"Next, create a couple of helper scripts to add the <emphasis>tap</emphasis> "
4710
"interface to the bridge. Create <filename>/etc/openvpn/up.sh</filename>:"
4711
msgstr ""
4712
"Next, create a couple of helper scripts to add the <emphasis>tap</emphasis> "
4713
"interface to the bridge. Create <filename>/etc/openvpn/up.sh</filename>:"
4714
4715
#: serverguide/C/vpn.xml:207(programlisting)
4716
#, no-wrap
4717
msgid ""
4718
"\n"
4719
"#!/bin/sh\n"
4720
"\n"
4721
"BR=$1\n"
4722
"DEV=$2\n"
4723
"MTU=$3\n"
4724
"/sbin/ifconfig $DEV mtu $MTU promisc up\n"
4725
"/usr/sbin/brctl addif $BR $DEV\n"
4726
msgstr ""
4727
"\n"
4728
"#!/bin/sh\n"
4729
"\n"
4730
"BR=$1\n"
4731
"DEV=$2\n"
4732
"MTU=$3\n"
4733
"/sbin/ifconfig $DEV mtu $MTU promisc up\n"
4734
"/usr/sbin/brctl addif $BR $DEV\n"
4735
4736
#: serverguide/C/vpn.xml:217(para)
4737
msgid "And <filename>/etc/openvpn/down.sh</filename>:"
4738
msgstr "And <filename>/etc/openvpn/down.sh</filename>:"
4739
4740
#: serverguide/C/vpn.xml:221(programlisting)
4741
#, no-wrap
4742
msgid ""
4743
"\n"
4744
"#!/bin/sh\n"
4745
"\n"
4746
"BR=$1\n"
4747
"DEV=$2\n"
4748
"\n"
4749
"/usr/sbin/brctl delif $BR $DEV\n"
4750
"/sbin/ifconfig $DEV down\n"
4751
msgstr ""
4752
"\n"
4753
"#!/bin/sh\n"
4754
"\n"
4755
"BR=$1\n"
4756
"DEV=$2\n"
4757
"\n"
4758
"/usr/sbin/brctl delif $BR $DEV\n"
4759
"/sbin/ifconfig $DEV down\n"
4760
4761
#: serverguide/C/vpn.xml:231(para)
4762
msgid "Then make them executable:"
4763
msgstr "Then make them executable:"
4764
4765
#: serverguide/C/vpn.xml:236(command)
4766
msgid "sudo chmod 755 /etc/openvpn/down.sh"
4767
msgstr "sudo chmod 755 /etc/openvpn/down.sh"
4768
4769
#: serverguide/C/vpn.xml:237(command)
4770
msgid "sudo chmod 755 /etc/openvpn/up.sh"
4771
msgstr "sudo chmod 755 /etc/openvpn/up.sh"
4772
4773
#: serverguide/C/vpn.xml:240(para)
4774
msgid ""
4775
"After configuring the server, restart <application>openvpn</application> by "
4776
"entering:"
4777
msgstr ""
4778
"After configuring the server, restart <application>openvpn</application> by "
4779
"entering:"
4780
4781
#: serverguide/C/vpn.xml:245(command) serverguide/C/vpn.xml:293(command)
4782
msgid "sudo /etc/init.d/openvpn restart"
4783
msgstr "sudo /etc/init.d/openvpn restart"
4784
4785
#: serverguide/C/vpn.xml:250(title)
4786
msgid "Client Configuration"
4787
msgstr "Client Configuration"
4788
4789
#: serverguide/C/vpn.xml:252(para)
4790
msgid "First, install <application>openvpn</application> on the client:"
4791
msgstr ""
4792
4793
#: serverguide/C/vpn.xml:260(para)
4794
msgid ""
4795
"Then with the server configured and the client certificates copied to the "
4796
"<filename>/etc/openvpn/</filename> directory, create a client configuration "
4797
"file by copying the example. In a terminal on the client machine enter:"
4798
msgstr ""
4799
4800
#: serverguide/C/vpn.xml:266(command)
4801
msgid ""
4802
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf "
4803
"/etc/openvpn"
4804
msgstr ""
4805
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf "
4806
"/etc/openvpn"
4807
4808
#: serverguide/C/vpn.xml:269(para)
4809
msgid ""
4810
"Now edit <filename>/etc/openvpn/client.conf</filename> changing the "
4811
"following options:"
4812
msgstr ""
4813
"Now edit <filename>/etc/openvpn/client.conf</filename> changing the "
4814
"following options:"
4815
4816
#: serverguide/C/vpn.xml:273(programlisting)
4817
#, no-wrap
4818
msgid ""
4819
"\n"
4820
"dev tap\n"
4821
"remote vpn.example.com 1194\n"
4822
"cert hostname.crt\n"
4823
"key hostname.key\n"
4824
"tls-auth ta.key 1\n"
4825
msgstr ""
4826
"\n"
4827
"dev tap\n"
4828
"remote vpn.example.com 1194\n"
4829
"cert hostname.crt\n"
4830
"key hostname.key\n"
4831
"tls-auth ta.key 1\n"
4832
4833
#: serverguide/C/vpn.xml:282(para)
4834
msgid ""
4835
"Replace <emphasis>vpn.example.com</emphasis> with the hostname of your VPN "
4836
"server, and <emphasis>hostname.*</emphasis> with the actual certificate and "
4837
"key filenames."
4838
msgstr ""
4839
"Replace <emphasis>vpn.example.com</emphasis> with the hostname of your VPN "
4840
"server, and <emphasis>hostname.*</emphasis> with the actual certificate and "
4841
"key filenames."
4842
4843
#: serverguide/C/vpn.xml:288(para)
4844
msgid "Finally, restart <application>openvpn</application>:"
4845
msgstr "Finally, restart <application>openvpn</application>:"
4846
4847
#: serverguide/C/vpn.xml:296(para)
4848
msgid "You should now be able to connect to the remote LAN through the VPN."
4849
msgstr "You should now be able to connect to the remote LAN through the VPN."
4850
4851
#: serverguide/C/vpn.xml:307(para)
4852
msgid ""
4853
"See the <ulink url=\"http://openvpn.net/\">OpenVPN</ulink> website for "
4854
"additional information."
4855
msgstr ""
4856
"See the <ulink url=\"http://openvpn.net/\">OpenVPN</ulink> website for "
4857
"additional information."
4858
4859
#: serverguide/C/vpn.xml:312(para)
4860
msgid ""
4861
"Also, Pakt's <ulink url=\"http://www.packtpub.com/openvpn/book\">OpenVPN: "
4862
"Building and Integrating Virtual Private Networks</ulink> is a good resource."
4863
msgstr ""
4864
"Also, Pakt's <ulink url=\"http://www.packtpub.com/openvpn/book\">OpenVPN: "
4865
"Building and Integrating Virtual Private Networks</ulink> is a good resource."
4866
4867
#: serverguide/C/vpn.xml:318(para)
4868
msgid ""
4869
"Another source of further information is the <ulink "
4870
"url=\"https://help.ubuntu.com/community/OpenVPN\">Ubuntu Wiki "
4871
"OpenVPN</ulink> page."
4872
msgstr ""
4873
4874
#: serverguide/C/virtualization.xml:13(title)
4875
msgid "Virtualization"
4876
msgstr "Virtualisation"
4877
4878
#: serverguide/C/virtualization.xml:14(para)
4879
msgid ""
4880
"Virtualization is being adopted in many different environments and "
4881
"situations. If you are a developer, virtualization can provide you with a "
4882
"contained environment where you can safely do almost any sort of development "
4883
"safe from messing up your main working environment. If you are a systems "
4884
"administrator, you can use virtualization to more easily separate your "
4885
"services and move them around based on demand."
4886
msgstr ""
4887
"Virtualisation is being adopted in many different environments and "
4888
"situations. If you are a developer, virtualisation can provide you with a "
4889
"contained environment where you can safely do almost any sort of development "
4890
"safe from messing up your main working environment. If you are a systems "
4891
"administrator, you can use virtualisation to more easily separate your "
4892
"services and move them around based on demand."
4893
4894
#: serverguide/C/virtualization.xml:20(para)
4895
msgid ""
4896
"The default virtualization technology supported in Ubuntu is "
4897
"<application>KVM</application>, a technology that takes advantage of "
4898
"virtualization extensions built into Intel and AMD hardware. For hardware "
4899
"without virtualization extensions <application>Xen</application> and "
4900
"<application>Qemu</application> are popular solutions."
4901
msgstr ""
4902
"The default virtualisation technology supported in Ubuntu is "
4903
"<application>KVM</application>, a technology that takes advantage of "
4904
"virtualisation extensions built into Intel and AMD hardware. For hardware "
4905
"without virtualisation extensions <application>Xen</application> and "
4906
"<application>Qemu</application> are popular solutions."
4907
4908
#: serverguide/C/virtualization.xml:27(title)
4909
msgid "libvirt"
4910
msgstr "libvirt"
4911
4912
#: serverguide/C/virtualization.xml:28(para)
4913
msgid ""
4914
"The <application>libvirt</application> library is used to interface with "
4915
"different virtualization technologies. Before getting started with "
4916
"<application>libvirt</application> it is best to make sure your hardware "
4917
"supports the necessary virtualization extensions for "
4918
"<application>KVM</application>. Enter the following from a terminal prompt:"
4919
msgstr ""
4920
"The <application>libvirt</application> library is used to interface with "
4921
"different virtualisation technologies. Before getting started with "
4922
"<application>libvirt</application> it is best to make sure your hardware "
4923
"supports the necessary virtualisation extensions for "
4924
"<application>KVM</application>. Enter the following from a terminal prompt:"
4925
4926
#: serverguide/C/virtualization.xml:35(command)
4927
msgid "kvm-ok"
4928
msgstr ""
4929
4930
#: serverguide/C/virtualization.xml:37(para)
4931
msgid ""
4932
"A message will be printed informing you if your CPU "
4933
"<emphasis>does</emphasis> or <emphasis>does not</emphasis> support hardware "
4934
"virtualization."
4935
msgstr ""
4936
4937
#: serverguide/C/virtualization.xml:41(para)
4938
msgid ""
4939
"On most computer whose processor supports virtualization, it is necessary to "
4940
"activate an option in the BIOS to enable it."
4941
msgstr ""
4942
4943
#: serverguide/C/virtualization.xml:47(title)
4944
msgid "Virtual Networking"
4945
msgstr "Virtual Networking"
4946
4947
#: serverguide/C/virtualization.xml:49(para)
4948
msgid ""
4949
"There are a few different ways to allow a virtual machine access to the "
4950
"external network. The default virtual network configuration is "
4951
"<emphasis>usermode</emphasis> networking, which uses the SLIRP protocol and "
4952
"traffic is NATed through the host interface to the outside network."
4953
msgstr ""
4954
"There are a few different ways to allow a virtual machine access to the "
4955
"external network. The default virtual network configuration is "
4956
"<emphasis>usermode</emphasis> networking, which uses the SLIRP protocol and "
4957
"traffic is NATed through the host interface to the outside network."
4958
4959
#: serverguide/C/virtualization.xml:54(para)
4960
msgid ""
4961
"To enable external hosts to directly access services on virtual machines a "
4962
"<emphasis>bridge</emphasis> needs to be configured. This allows the virtual "
4963
"interfaces to connect to the outside network through the physical interface, "
4964
"making them appear as normal hosts to the rest of the network. For "
4965
"information on setting up a bridge see <xref linkend=\"bridging\"/>."
4966
msgstr ""
4967
"To enable external hosts to directly access services on virtual machines a "
4968
"<emphasis>bridge</emphasis> needs to be configured. This allows the virtual "
4969
"interfaces to connect to the outside network through the physical interface, "
4970
"making them appear as normal hosts to the rest of the network. For "
4971
"information on setting up a bridge see <xref linkend=\"bridging\"/>."
4972
4973
#: serverguide/C/virtualization.xml:63(para)
4974
msgid "To install the necessary packages, from a terminal prompt enter:"
4975
msgstr "To install the necessary packages, from a terminal prompt enter:"
4976
4977
#: serverguide/C/virtualization.xml:67(command)
4978
msgid "sudo apt-get install kvm libvirt-bin"
4979
msgstr "sudo apt-get install kvm libvirt-bin"
4980
4981
#: serverguide/C/virtualization.xml:69(para)
4982
msgid ""
4983
"After installing <application>libvirt-bin</application>, the user used to "
4984
"manage virtual machines will need to be added to the "
4985
"<emphasis>libvirtd</emphasis> group. Doing so will grant the user access to "
4986
"the advanced networking options."
4987
msgstr ""
4988
"After installing <application>libvirt-bin</application>, the user used to "
4989
"manage virtual machines will need to be added to the "
4990
"<emphasis>libvirtd</emphasis> group. Doing so will grant the user access to "
4991
"the advanced networking options."
4992
4993
#: serverguide/C/virtualization.xml:73(para)
4994
msgid "In a terminal enter:"
4995
msgstr "In a terminal enter:"
4996
4997
#: serverguide/C/virtualization.xml:77(command)
4998
msgid "sudo adduser $USER libvirtd"
4999
msgstr "sudo adduser $USER libvirtd"
5000
5001
#: serverguide/C/virtualization.xml:80(para)
5002
msgid ""
5003
"If the user chosen is the current user, you will need to log out and back in "
5004
"for the new group membership to take effect."
5005
msgstr ""
5006
"If the user chosen is the current user, you will need to log out and back in "
5007
"for the new group membership to take effect."
5008
5009
#: serverguide/C/virtualization.xml:84(para)
5010
msgid ""
5011
"You are now ready to install a <emphasis>Guest</emphasis> operating system. "
5012
"Installing a virtual machine follows the same process as installing the "
5013
"operating system directly on the hardware. You either need a way to automate "
5014
"the installation, or a keyboard and monitor will need to be attached to the "
5015
"physical machine."
5016
msgstr ""
5017
"You are now ready to install a <emphasis>Guest</emphasis> operating system. "
5018
"Installing a virtual machine follows the same process as installing the "
5019
"operating system directly on the hardware. You either need a way to automate "
5020
"the installation, or a keyboard and monitor will need to be attached to the "
5021
"physical machine."
5022
5023
#: serverguide/C/virtualization.xml:89(para)
5024
msgid ""
5025
"In the case of virtual machines a Graphical User Interface (GUI) is "
5026
"analogous to using a physical keyboard and mouse. Instead of installing a "
5027
"GUI the <application>virt-viewer</application> application can be used to "
5028
"connect to a virtual machine's console using <application>VNC</application>. "
5029
"See <xref linkend=\"libvirt-virt-viewer\"/> for more information."
5030
msgstr ""
5031
"In the case of virtual machines a Graphical User Interface (GUI) is "
5032
"analogous to using a physical keyboard and mouse. Instead of installing a "
5033
"GUI the <application>virt-viewer</application> application can be used to "
5034
"connect to a virtual machine's console using <application>VNC</application>. "
5035
"See <xref linkend=\"libvirt-virt-viewer\"/> for more information."
5036
5037
#: serverguide/C/virtualization.xml:94(para)
5038
msgid ""
5039
"There are several ways to automate the Ubuntu installation process, for "
5040
"example using preseeds, kickstart, etc. Refer to the <ulink "
5041
"url=\"https://help.ubuntu.com/10.04/installation-guide/\">Ubuntu "
5042
"Installation Guide</ulink> for details."
5043
msgstr ""
5044
5045
#: serverguide/C/virtualization.xml:98(para)
5046
msgid ""
5047
"Yet another way to install an Ubuntu virtual machine is to use "
5048
"<application>ubuntu-vm-builder</application>. <application>ubuntu-vm-"
5049
"builder</application> allows you to setup advanced partitions, execute "
5050
"custom post-install scripts, etc. For details see <xref linkend=\"jeos-and-"
5051
"vmbuilder\"/>"
5052
msgstr ""
5053
"Yet another way to install an Ubuntu virtual machine is to use "
5054
"<application>ubuntu-vm-builder</application>. <application>ubuntu-vm-"
5055
"builder</application> allows you to setup advanced partitions, execute "
5056
"custom post-install scripts, etc. For details see <xref linkend=\"jeos-and-"
5057
"vmbuilder\"/>"
5058
5059
#: serverguide/C/virtualization.xml:104(title)
5060
msgid "virt-install"
5061
msgstr "virt-install"
5062
5063
#: serverguide/C/virtualization.xml:105(para)
5064
msgid ""
5065
"<application>virt-install</application> is part of the <application>python-"
5066
"virtinst</application> package. To install it, from a terminal prompt enter:"
5067
msgstr ""
5068
"<application>virt-install</application> is part of the <application>python-"
5069
"virtinst</application> package. To install it, from a terminal prompt enter:"
5070
5071
#: serverguide/C/virtualization.xml:109(command)
5072
msgid "sudo apt-get install python-virtinst"
5073
msgstr "sudo apt-get install python-virtinst"
5074
5075
#: serverguide/C/virtualization.xml:111(para)
5076
msgid ""
5077
"There are several options available when using <application>virt-"
5078
"install</application>. For example:"
5079
msgstr ""
5080
"There are several options available when using <application>virt-"
5081
"install</application>. For example:"
5082
5083
#: serverguide/C/virtualization.xml:115(command)
5084
msgid ""
5085
"sudo virt-install -n web_devel -r 256 -f web_devel.img \\ -s 4 -c jeos.iso --"
5086
"accelerate \\ --connect=qemu:///system --vnc \\ --noautoconsole -v"
5087
msgstr ""
5088
"sudo virt-install -n web_devel -r 256 -f web_devel.img \\ -s 4 -c jeos.iso --"
5089
"accelerate \\ --connect=qemu:///system --vnc \\ --noautoconsole -v"
5090
5091
#: serverguide/C/virtualization.xml:122(para)
5092
msgid ""
5093
"<emphasis>-n web_devel:</emphasis> the name of the new virtual machine will "
5094
"be <emphasis>web_devel</emphasis> in this example."
5095
msgstr ""
5096
"<emphasis>-n web_devel:</emphasis> the name of the new virtual machine will "
5097
"be <emphasis>web_devel</emphasis> in this example."
5098
5099
#: serverguide/C/virtualization.xml:127(para)
5100
msgid ""
5101
"<emphasis>-r 256:</emphasis> specifies the amount of memory the virtual "
5102
"machine will use."
5103
msgstr ""
5104
"<emphasis>-r 256:</emphasis> specifies the amount of memory the virtual "
5105
"machine will use."
5106
5107
#: serverguide/C/virtualization.xml:132(para)
5108
msgid ""
5109
"<emphasis>-f web_devel.img:</emphasis> indicates the path to the virtual "
5110
"disk which can be a file, partition, or logical volume. In this example a "
5111
"file named <filename>web_devel.img</filename>."
5112
msgstr ""
5113
"<emphasis>-f web_devel.img:</emphasis> indicates the path to the virtual "
5114
"disk which can be a file, partition, or logical volume. In this example a "
5115
"file named <filename>web_devel.img</filename>."
5116
5117
#: serverguide/C/virtualization.xml:138(para)
5118
msgid "<emphasis>-s 4:</emphasis> the size of the virtual disk."
5119
msgstr "<emphasis>-s 4:</emphasis> the size of the virtual disk."
5120
5121
#: serverguide/C/virtualization.xml:143(para)
5122
msgid ""
5123
"<emphasis>-c jeos.iso:</emphasis> file to be used as a virtual CDROM. The "
5124
"file can be either an ISO file or the path to the host's CDROM device."
5125
msgstr ""
5126
"<emphasis>-c jeos.iso:</emphasis> file to be used as a virtual CDROM. The "
5127
"file can be either an ISO file or the path to the host's CDROM device."
5128
5129
#: serverguide/C/virtualization.xml:149(para)
5130
msgid ""
5131
"<emphasis>--accelerate:</emphasis> enables the kernel's acceleration "
5132
"technologies."
5133
msgstr ""
5134
"<emphasis>--accelerate:</emphasis> enables the kernel's acceleration "
5135
"technologies."
5136
5137
#: serverguide/C/virtualization.xml:154(para)
5138
msgid ""
5139
"<emphasis>--vnc:</emphasis> exports the guest's virtual console using VNC."
5140
msgstr ""
5141
"<emphasis>--vnc:</emphasis> exports the guest's virtual console using VNC."
5142
5143
#: serverguide/C/virtualization.xml:159(para)
5144
msgid ""
5145
"<emphasis>--noautoconsole:</emphasis> will not automatically connect to the "
5146
"virtual machine's console."
5147
msgstr ""
5148
"<emphasis>--noautoconsole:</emphasis> will not automatically connect to the "
5149
"virtual machine's console."
5150
5151
#: serverguide/C/virtualization.xml:164(para)
5152
msgid "<emphasis>-v:</emphasis> creates a fully virtualized guest."
5153
msgstr "<emphasis>-v:</emphasis> creates a fully virtualised guest."
5154
5155
#: serverguide/C/virtualization.xml:169(para)
5156
msgid ""
5157
"After launching <application>virt-install</application> you can connect to "
5158
"the virtual machine's console either locally using a GUI or with the "
5159
"<application>virt-viewer</application> utility."
5160
msgstr ""
5161
"After launching <application>virt-install</application> you can connect to "
5162
"the virtual machine's console either locally using a GUI or with the "
5163
"<application>virt-viewer</application> utility."
5164
5165
#: serverguide/C/virtualization.xml:175(title)
5166
msgid "virt-clone"
5167
msgstr "virt-clone"
5168
5169
#: serverguide/C/virtualization.xml:176(para)
5170
msgid ""
5171
"The <application>virt-clone</application> application can be used to copy "
5172
"one virtual machine to another. For example:"
5173
msgstr ""
5174
"The <application>virt-clone</application> application can be used to copy "
5175
"one virtual machine to another. For example:"
5176
5177
#: serverguide/C/virtualization.xml:180(command)
5178
msgid ""
5179
"sudo virt-clone -o web_devel -n database_devel -f "
5180
"/path/to/database_devel.img --connect=qemu:///system"
5181
msgstr ""
5182
"sudo virt-clone -o web_devel -n database_devel -f "
5183
"/path/to/database_devel.img --connect=qemu:///system"
5184
5185
#: serverguide/C/virtualization.xml:184(para)
5186
msgid "<emphasis>-o:</emphasis> original virtual machine."
5187
msgstr "<emphasis>-o:</emphasis> original virtual machine."
5188
5189
#: serverguide/C/virtualization.xml:189(para)
5190
msgid "<emphasis>-n:</emphasis> name of the new virtual machine."
5191
msgstr "<emphasis>-n:</emphasis> name of the new virtual machine."
5192
5193
#: serverguide/C/virtualization.xml:194(para)
5194
msgid ""
5195
"<emphasis>-f:</emphasis> path to the file, logical volume, or partition to "
5196
"be used by the new virtual machine."
5197
msgstr ""
5198
"<emphasis>-f:</emphasis> path to the file, logical volume, or partition to "
5199
"be used by the new virtual machine."
5200
5201
#: serverguide/C/virtualization.xml:199(para)
5202
msgid ""
5203
"<emphasis>--connect:</emphasis> specifies which hypervisor to connect to."
5204
msgstr ""
5205
"<emphasis>--connect:</emphasis> specifies which hypervisor to connect to."
5206
5207
#: serverguide/C/virtualization.xml:204(para)
5208
msgid ""
5209
"Also, use <emphasis>-d</emphasis> or <emphasis>--debug</emphasis> option to "
5210
"help troubleshoot problems with <application>virt-clone</application>."
5211
msgstr ""
5212
"Also, use <emphasis>-d</emphasis> or <emphasis>--debug</emphasis> option to "
5213
"help troubleshoot problems with <application>virt-clone</application>."
5214
5215
#: serverguide/C/virtualization.xml:209(para)
5216
msgid ""
5217
"Replace <emphasis>web_devel</emphasis> and "
5218
"<emphasis>database_devel</emphasis> with appropriate virtual machine names."
5219
msgstr ""
5220
"Replace <emphasis>web_devel</emphasis> and "
5221
"<emphasis>database_devel</emphasis> with appropriate virtual machine names."
5222
5223
#: serverguide/C/virtualization.xml:215(title)
5224
msgid "Virtual Machine Management"
5225
msgstr "Virtual Machine Management"
5226
5227
#: serverguide/C/virtualization.xml:217(title)
5228
msgid "virsh"
5229
msgstr "virsh"
5230
5231
#: serverguide/C/virtualization.xml:218(para)
5232
msgid ""
5233
"There are several utilities available to manage virtual machines and "
5234
"<application>libvirt</application>. The <application>virsh</application> "
5235
"utility can be used from the command line. Some examples:"
5236
msgstr ""
5237
"There are several utilities available to manage virtual machines and "
5238
"<application>libvirt</application>. The <application>virsh</application> "
5239
"utility can be used from the command line. Some examples:"
5240
5241
#: serverguide/C/virtualization.xml:224(para)
5242
msgid "To list running virtual machines:"
5243
msgstr "To list running virtual machines:"
5244
5245
#: serverguide/C/virtualization.xml:228(command)
5246
msgid "virsh -c qemu:///system list"
5247
msgstr "virsh -c qemu:///system list"
5248
5249
#: serverguide/C/virtualization.xml:232(para)
5250
msgid "To start a virtual machine:"
5251
msgstr "To start a virtual machine:"
5252
5253
#: serverguide/C/virtualization.xml:236(command)
5254
msgid "virsh -c qemu:///system start web_devel"
5255
msgstr "virsh -c qemu:///system start web_devel"
5256
5257
#: serverguide/C/virtualization.xml:240(para)
5258
msgid "Similarly, to start a virtual machine at boot:"
5259
msgstr "Similarly, to start a virtual machine at boot:"
5260
5261
#: serverguide/C/virtualization.xml:244(command)
5262
msgid "virsh -c qemu:///system autostart web_devel"
5263
msgstr "virsh -c qemu:///system autostart web_devel"
5264
5265
#: serverguide/C/virtualization.xml:248(para)
5266
msgid "Reboot a virtual machine with:"
5267
msgstr "Reboot a virtual machine with:"
5268
5269
#: serverguide/C/virtualization.xml:252(command)
5270
msgid "virsh -c qemu:///system reboot web_devel"
5271
msgstr "virsh -c qemu:///system reboot web_devel"
5272
5273
#: serverguide/C/virtualization.xml:256(para)
5274
msgid ""
5275
"The <emphasis>state</emphasis> of virtual machines can be saved to a file in "
5276
"order to be restored later. The following will save the virtual machine "
5277
"state into a file named according to the date:"
5278
msgstr ""
5279
"The <emphasis>state</emphasis> of virtual machines can be saved to a file in "
5280
"order to be restored later. The following will save the virtual machine "
5281
"state into a file named according to the date:"
5282
5283
#: serverguide/C/virtualization.xml:261(command)
5284
msgid "virsh -c qemu:///system save web_devel web_devel-022708.state"
5285
msgstr "virsh -c qemu:///system save web_devel web_devel-022708.state"
5286
5287
#: serverguide/C/virtualization.xml:263(para)
5288
msgid "Once saved the virtual machine will no longer be running."
5289
msgstr "Once saved the virtual machine will no longer be running."
5290
5291
#: serverguide/C/virtualization.xml:268(para)
5292
msgid "A saved virtual machine can be restored using:"
5293
msgstr "A saved virtual machine can be restored using:"
5294
5295
#: serverguide/C/virtualization.xml:272(command)
5296
msgid "virsh -c qemu:///system restore web_devel-022708.state"
5297
msgstr "virsh -c qemu:///system restore web_devel-022708.state"
5298
5299
#: serverguide/C/virtualization.xml:276(para)
5300
msgid "To shutdown a virtual machine do:"
5301
msgstr "To shutdown a virtual machine do:"
5302
5303
#: serverguide/C/virtualization.xml:280(command)
5304
msgid "virsh -c qemu:///system shutdown web_devel"
5305
msgstr "virsh -c qemu:///system shutdown web_devel"
5306
5307
#: serverguide/C/virtualization.xml:284(para)
5308
msgid "A CDROM device can be mounted in a virtual machine by entering:"
5309
msgstr "A CDROM device can be mounted in a virtual machine by entering:"
5310
5311
#: serverguide/C/virtualization.xml:288(command)
5312
msgid "virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"
5313
msgstr ""
5314
"virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"
5315
5316
#: serverguide/C/virtualization.xml:293(para)
5317
msgid ""
5318
"In the above examples replace <emphasis>web_devel</emphasis> with the "
5319
"appropriate virtual machine name, and <filename>web_devel-"
5320
"022708.state</filename> with a descriptive file name."
5321
msgstr ""
5322
"In the above examples replace <emphasis>web_devel</emphasis> with the "
5323
"appropriate virtual machine name, and <filename>web_devel-"
5324
"022708.state</filename> with a descriptive file name."
5325
5326
#: serverguide/C/virtualization.xml:300(title)
5327
msgid "Virtual Machine Manager"
5328
msgstr "Virtual Machine Manager"
5329
5330
#: serverguide/C/virtualization.xml:301(para)
5331
msgid ""
5332
"The <application>virt-manager</application> package contains a graphical "
5333
"utility to manage local and remote virtual machines. To install virt-manager "
5334
"enter:"
5335
msgstr ""
5336
"The <application>virt-manager</application> package contains a graphical "
5337
"utility to manage local and remote virtual machines. To install virt-manager "
5338
"enter:"
5339
5340
#: serverguide/C/virtualization.xml:306(command)
5341
msgid "sudo apt-get install virt-manager"
5342
msgstr "sudo apt-get install virt-manager"
5343
5344
#: serverguide/C/virtualization.xml:308(para)
5345
msgid ""
5346
"Since <application>virt-manager</application> requires a Graphical User "
5347
"Interface (GUI) environment it is recommended to be installed on a "
5348
"workstation or test machine instead of a production server. To connect to "
5349
"the local <application>libvirt</application> service enter:"
5350
msgstr ""
5351
"Since <application>virt-manager</application> requires a Graphical User "
5352
"Interface (GUI) environment it is recommended to be installed on a "
5353
"workstation or test machine instead of a production server. To connect to "
5354
"the local <application>libvirt</application> service enter:"
5355
5356
#: serverguide/C/virtualization.xml:314(command)
5357
msgid "virt-manager -c qemu:///system"
5358
msgstr "virt-manager -c qemu:///system"
5359
5360
#: serverguide/C/virtualization.xml:316(para)
5361
msgid ""
5362
"You can connect to the <application>libvirt</application> service running on "
5363
"another host by entering the following in a terminal prompt:"
5364
msgstr ""
5365
"You can connect to the <application>libvirt</application> service running on "
5366
"another host by entering the following in a terminal prompt:"
5367
5368
#: serverguide/C/virtualization.xml:320(command)
5369
msgid "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"
5370
msgstr "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"
5371
5372
#: serverguide/C/virtualization.xml:323(para)
5373
msgid ""
5374
"The above example assumes that <application>SSH</application> connectivity "
5375
"between the management system and virtnode1.mydomain.com has already been "
5376
"configured, and uses SSH keys for authentication. SSH "
5377
"<emphasis>keys</emphasis> are needed because "
5378
"<application>libvirt</application> sends the password prompt to another "
5379
"process. For details on configuring <application>SSH</application> see <xref "
5380
"linkend=\"openssh-server\"/>"
5381
msgstr ""
5382
"The above example assumes that <application>SSH</application> connectivity "
5383
"between the management system and virtnode1.mydomain.com has already been "
5384
"configured, and uses SSH keys for authentication. SSH "
5385
"<emphasis>keys</emphasis> are needed because "
5386
"<application>libvirt</application> sends the password prompt to another "
5387
"process. For details on configuring <application>SSH</application> see <xref "
5388
"linkend=\"openssh-server\"/>"
5389
5390
#: serverguide/C/virtualization.xml:333(title)
5391
msgid "Virtual Machine Viewer"
5392
msgstr "Virtual Machine Viewer"
5393
5394
#: serverguide/C/virtualization.xml:334(para)
5395
msgid ""
5396
"The <application>virt-viewer</application> application allows you to connect "
5397
"to a virtual machine's console. <application>virt-viewer</application> does "
5398
"require a Graphical User Interface (GUI) to interface with the virtual "
5399
"machine."
5400
msgstr ""
5401
"The <application>virt-viewer</application> application allows you to connect "
5402
"to a virtual machine's console. <application>virt-viewer</application> does "
5403
"require a Graphical User Interface (GUI) to interface with the virtual "
5404
"machine."
5405
5406
#: serverguide/C/virtualization.xml:338(para)
5407
msgid ""
5408
"To install <application>virt-viewer</application> from a terminal enter:"
5409
msgstr ""
5410
"To install <application>virt-viewer</application> from a terminal enter:"
5411
5412
#: serverguide/C/virtualization.xml:342(command)
5413
msgid "sudo apt-get install virt-viewer"
5414
msgstr "sudo apt-get install virt-viewer"
5415
5416
#: serverguide/C/virtualization.xml:344(para)
5417
msgid ""
5418
"Once a virtual machine is installed and running you can connect to the "
5419
"virtual machine's console by using:"
5420
msgstr ""
5421
"Once a virtual machine is installed and running you can connect to the "
5422
"virtual machine's console by using:"
5423
5424
#: serverguide/C/virtualization.xml:348(command)
5425
msgid "virt-viewer -c qemu:///system web_devel"
5426
msgstr "virt-viewer -c qemu:///system web_devel"
5427
5428
#: serverguide/C/virtualization.xml:350(para)
5429
msgid ""
5430
"Similar to <application>virt-manager</application>, <application>virt-"
5431
"viewer</application> can connect to a remote host using "
5432
"<emphasis>SSH</emphasis> with key authentication, as well:"
5433
msgstr ""
5434
"Similar to <application>virt-manager</application>, <application>virt-"
5435
"viewer</application> can connect to a remote host using "
5436
"<emphasis>SSH</emphasis> with key authentication, as well:"
5437
5438
#: serverguide/C/virtualization.xml:355(command)
5439
msgid "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"
5440
msgstr "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"
5441
5442
#: serverguide/C/virtualization.xml:357(para)
5443
msgid ""
5444
"Be sure to replace <emphasis role=\"italic\">web_devel</emphasis> with the "
5445
"appropriate virtual machine name."
5446
msgstr ""
5447
"Be sure to replace <emphasis role=\"italic\">web_devel</emphasis> with the "
5448
"appropriate virtual machine name."
5449
5450
#: serverguide/C/virtualization.xml:360(para)
5451
msgid ""
5452
"If configured to use a <emphasis>bridged</emphasis> network interface you "
5453
"can also setup <application>SSH</application> access to the virtual machine. "
5454
"See <xref linkend=\"openssh-server\"/> and <xref linkend=\"bridging\"/> for "
5455
"more details."
5456
msgstr ""
5457
"If configured to use a <emphasis>bridged</emphasis> network interface you "
5458
"can also setup <application>SSH</application> access to the virtual machine. "
5459
"See <xref linkend=\"openssh-server\"/> and <xref linkend=\"bridging\"/> for "
5460
"more details."
5461
5462
#: serverguide/C/virtualization.xml:369(para)
5463
msgid ""
5464
"See the <ulink url=\"http://kvm.qumranet.com/kvmwiki\">KVM</ulink> home page "
5465
"for more details."
5466
msgstr ""
5467
"See the <ulink url=\"http://kvm.qumranet.com/kvmwiki\">KVM</ulink> home page "
5468
"for more details."
5469
5470
#: serverguide/C/virtualization.xml:374(para)
5471
msgid ""
5472
"For more information on <application>libvirt</application> see the <ulink "
5473
"url=\"http://libvirt.org/\">libvirt home page</ulink>"
5474
msgstr ""
5475
"For more information on <application>libvirt</application> see the <ulink "
5476
"url=\"http://libvirt.org/\">libvirt home page</ulink>"
5477
5478
#: serverguide/C/virtualization.xml:379(para)
5479
msgid ""
5480
"The <ulink url=\"http://virt-manager.et.redhat.com/\">Virtual Machine "
5481
"Manager</ulink> site has more information on <application>virt-"
5482
"manager</application> development."
5483
msgstr ""
5484
"The <ulink url=\"http://virt-manager.et.redhat.com/\">Virtual Machine "
5485
"Manager</ulink> site has more information on <application>virt-"
5486
"manager</application> development."
5487
5488
#: serverguide/C/virtualization.xml:385(para)
5489
msgid ""
5490
"Also, stop by the <emphasis>#ubuntu-virt</emphasis> IRC channel on <ulink "
5491
"url=\"http://freenode.net/\">freenode</ulink> to discuss virtualization "
5492
"technology in Ubuntu."
5493
msgstr ""
5494
"Also, stop by the <emphasis>#ubuntu-virt</emphasis> IRC channel on <ulink "
5495
"url=\"http://freenode.net/\">freenode</ulink> to discuss virtualisation "
5496
"technology in Ubuntu."
5497
5498
#: serverguide/C/virtualization.xml:391(para)
5499
msgid ""
5500
"Another good resource is the <ulink "
5501
"url=\"https://help.ubuntu.com/community/KVM\">Ubuntu Wiki KVM</ulink> page."
5502
msgstr ""
5503
5504
#: serverguide/C/virtualization.xml:399(title)
5505
msgid "JeOS and vmbuilder"
5506
msgstr "JeOS and vmbuilder"
5507
5508
#: serverguide/C/virtualization.xml:405(title)
5509
msgid "What is JeOS"
5510
msgstr "What is JeOS"
5511
5512
#: serverguide/C/virtualization.xml:407(para)
5513
msgid ""
5514
"Ubuntu <emphasis>JeOS</emphasis> (pronounced \"Juice\") is an efficient "
5515
"variant of the Ubuntu Server operating system, configured specifically for "
5516
"virtual appliances. No longer available as a CD-ROM ISO for download, but "
5517
"only as an option either:"
5518
msgstr ""
5519
"Ubuntu <emphasis>JeOS</emphasis> (pronounced \"Juice\") is an efficient "
5520
"variant of the Ubuntu Server operating system, configured specifically for "
5521
"virtual appliances. No longer available as a CD-ROM ISO for download, but "
5522
"only as an option either:"
5523
5524
#: serverguide/C/virtualization.xml:414(para)
5525
msgid ""
5526
"While installing from the Server Edition ISO (pressing "
5527
"<emphasis>F4</emphasis> on the first screen will allow you to pick \"Minimal "
5528
"installation\", which is the package selection equivalent to JeOS)."
5529
msgstr ""
5530
"While installing from the Server Edition ISO (pressing "
5531
"<emphasis>F4</emphasis> on the first screen will allow you to pick \"Minimal "
5532
"installation\", which is the package selection equivalent to JeOS)."
5533
5534
#: serverguide/C/virtualization.xml:420(para)
5535
msgid "Or to be built using Ubuntu's vmbuilder, which is described here."
5536
msgstr "Or to be built using Ubuntu's vmbuilder, which is described here."
5537
5538
#: serverguide/C/virtualization.xml:426(para)
5539
msgid ""
5540
"JeOS is a specialized installation of Ubuntu Server Edition with a tuned "
5541
"kernel that only contains the base elements needed to run within a "
5542
"virtualized environment."
5543
msgstr ""
5544
"JeOS is a specialised installation of Ubuntu Server Edition with a tuned "
5545
"kernel that only contains the base elements needed to run within a "
5546
"virtualised environment."
5547
5548
#: serverguide/C/virtualization.xml:431(para)
5549
msgid ""
5550
"Ubuntu JeOS has been tuned to take advantage of key performance technologies "
5551
"in the latest virtualization products from VMware. This combination of "
5552
"reduced size and optimized performance ensures that Ubuntu JeOS Edition "
5553
"delivers a highly efficient use of server resources in large virtual "
5554
"deployments."
5555
msgstr ""
5556
"Ubuntu JeOS has been tuned to take advantage of key performance technologies "
5557
"in the latest virtualisation products from VMware. This combination of "
5558
"reduced size and optimised performance ensures that Ubuntu JeOS Edition "
5559
"delivers a highly efficient use of server resources in large virtual "
5560
"deployments."
5561
5562
#: serverguide/C/virtualization.xml:437(para)
5563
msgid ""
5564
"Without unnecessary drivers, and only the minimal required packages, ISVs "
5565
"can configure their supporting OS exactly as they require. They have the "
5566
"peace of mind that updates, whether for security or enhancement reasons, "
5567
"will be limited to the bare minimum of what is required in their specific "
5568
"environment. In turn, users deploying virtual appliances built on top of "
5569
"JeOS will have to go through fewer updates and therefore less maintenance "
5570
"than they would have had to with a standard full installation of a server."
5571
msgstr ""
5572
"Without unnecessary drivers, and only the minimal required packages, ISVs "
5573
"can configure their supporting OS exactly as they require. They have the "
5574
"peace of mind that updates, whether for security or enhancement reasons, "
5575
"will be limited to the bare minimum of what is required in their specific "
5576
"environment. In turn, users deploying virtual appliances built on top of "
5577
"JeOS will have to go through fewer updates and therefore less maintenance "
5578
"than they would have had to with a standard full installation of a server."
5579
5580
#: serverguide/C/virtualization.xml:446(title)
5581
msgid "What is vmbuilder"
5582
msgstr "What is vmbuilder"
5583
5584
#: serverguide/C/virtualization.xml:448(para)
5585
msgid ""
5586
"With vmbuilder, there is no need to download a JeOS ISO anymore. vmbuilder "
5587
"will fetch the various package and build a virtual machine tailored for your "
5588
"needs in about a minute. vmbuilder is a script that automates the process of "
5589
"creating a ready to use Linux based VM. The currently supported hypervisors "
5590
"are KVM and Xen."
5591
msgstr ""
5592
5593
#: serverguide/C/virtualization.xml:454(para)
5594
msgid ""
5595
"You can pass command line options to add extra packages, remove packages, "
5596
"choose which version of Ubuntu, which mirror etc. On recent hardware with "
5597
"plenty of RAM, tmpdir in <filename>/dev/shm</filename> or using a tmpfs, and "
5598
"a local mirror, you can bootstrap a VM in less than a minute."
5599
msgstr ""
5600
"You can pass command line options to add extra packages, remove packages, "
5601
"choose which version of Ubuntu, which mirror etc. On recent hardware with "
5602
"plenty of RAM, tmpdir in <filename>/dev/shm</filename> or using a tmpfs, and "
5603
"a local mirror, you can bootstrap a VM in less than a minute."
5604
5605
#: serverguide/C/virtualization.xml:460(para)
5606
msgid ""
5607
"First introduced as a shell script in Ubuntu 8.04 LTS, <application>ubuntu-"
5608
"vm-builder</application> started with little emphasis as a hack to help "
5609
"developers test their new code in a virtual machine without having to "
5610
"restart from scratch each time. As a few Ubuntu administrators started to "
5611
"notice this script, a few of them went on improving it and adapting it for "
5612
"so many use case that Soren Hansen (the author of the script and Ubuntu "
5613
"virtualization specialist, not the golf player) decided to rewrite it from "
5614
"scratch for Intrepid as a python script with a few new design goals:"
5615
msgstr ""
5616
5617
#: serverguide/C/virtualization.xml:470(para)
5618
msgid "Develop it so that it can be reused by other distributions."
5619
msgstr "Develop it so that it can be reused by other distributions."
5620
5621
#: serverguide/C/virtualization.xml:475(para)
5622
msgid ""
5623
"Use a plugin mechanisms for all virtualization interactions so that others "
5624
"can easily add logic for other virtualization environments."
5625
msgstr ""
5626
"Use a plug-in mechanisms for all virtualisation interactions so that others "
5627
"can easily add logic for other virtualisation environments."
5628
5629
#: serverguide/C/virtualization.xml:480(para)
5630
msgid ""
5631
"Provide an easy to maintain web interface as an option to the command line "
5632
"interface."
5633
msgstr ""
5634
"Provide an easy to maintain web interface as an option to the command line "
5635
"interface."
5636
5637
#: serverguide/C/virtualization.xml:486(para)
5638
msgid "But the general principles and commands remain the same."
5639
msgstr "But the general principles and commands remain the same."
5640
5641
#: serverguide/C/virtualization.xml:493(title)
5642
msgid "Initial Setup"
5643
msgstr "Initial Setup"
5644
5645
#: serverguide/C/virtualization.xml:495(para)
5646
msgid ""
5647
"It is assumed that you have installed and configured "
5648
"<application>libvirt</application> and <application>KVM</application> "
5649
"locally on the machine you are using. For details on how to perform this, "
5650
"please refer to:"
5651
msgstr ""
5652
"It is assumed that you have installed and configured "
5653
"<application>libvirt</application> and <application>KVM</application> "
5654
"locally on the machine you are using. For details on how to perform this, "
5655
"please refer to:"
5656
5657
#: serverguide/C/virtualization.xml:507(para)
5658
msgid ""
5659
"The <ulink url=\"https://help.ubuntu.com/community/KVM\">KVM</ulink> Wiki "
5660
"page."
5661
msgstr ""
5662
"The <ulink url=\"https://help.ubuntu.com/community/KVM\">KVM</ulink> Wiki "
5663
"page."
5664
5665
#: serverguide/C/virtualization.xml:513(para)
5666
msgid ""
5667
"We also assume that you know how to use a text based text editor such as "
5668
"nano or vi. If you have not used any of them before, you can get an overview "
5669
"of the various text editors available by reading the <ulink "
5670
"url=\"https://help.ubuntu.com/community/PowerUsersTextEditors\">PowerUsersTex"
5671
"tEditors</ulink> page. This tutorial has been done on KVM, but the general "
5672
"principle should remain on other virtualization technologies."
5673
msgstr ""
5674
"We also assume that you know how to use a text based text editor such as "
5675
"nano or vi. If you have not used any of them before, you can get an overview "
5676
"of the various text editors available by reading the <ulink "
5677
"url=\"https://help.ubuntu.com/community/PowerUsersTextEditors\">PowerUsersTex"
5678
"tEditors</ulink> page. This tutorial has been done on KVM, but the general "
5679
"principle should remain on other virtualisation technologies."
5680
5681
#: serverguide/C/virtualization.xml:521(title)
5682
msgid "Install vmbuilder"
5683
msgstr "Install vmbuilder"
5684
5685
#: serverguide/C/virtualization.xml:523(para)
5686
msgid ""
5687
"The name of the package that we need to install is <application>python-vm-"
5688
"builder</application>. In a terminal prompt enter:"
5689
msgstr ""
5690
"The name of the package that we need to install is <application>python-vm-"
5691
"builder</application>. In a terminal prompt enter:"
5692
5693
#: serverguide/C/virtualization.xml:528(command)
5694
msgid "sudo apt-get install python-vm-builder"
5695
msgstr "sudo apt-get install python-vm-builder"
5696
5697
#: serverguide/C/virtualization.xml:532(para)
5698
msgid ""
5699
"If you are running Hardy, you can still perform most of this using the older "
5700
"version of the package named <application>ubuntu-vm-builder</application>, "
5701
"there are only a few changes to the syntax of the tool."
5702
msgstr ""
5703
"If you are running Hardy, you can still perform most of this using the older "
5704
"version of the package named <application>ubuntu-vm-builder</application>, "
5705
"there are only a few changes to the syntax of the tool."
5706
5707
#: serverguide/C/virtualization.xml:541(title)
5708
msgid "Defining Your Virtual Machine"
5709
msgstr "Defining Your Virtual Machine"
5710
5711
#: serverguide/C/virtualization.xml:543(para)
5712
msgid ""
5713
"Defining a virtual machine with Ubuntu's vmbuilder is quite simple, but here "
5714
"are a few thing to consider:"
5715
msgstr ""
5716
"Defining a virtual machine with Ubuntu's vmbuilder is quite simple, but here "
5717
"are a few thing to consider:"
5718
5719
#: serverguide/C/virtualization.xml:549(para)
5720
msgid ""
5721
"If you plan on shipping a virtual appliance, do not assume that the end-user "
5722
"will know how to extend disk size to fit their need, so either plan for a "
5723
"large virtual disk to allow for your appliance to grow, or explain fairly "
5724
"well in your documentation how to allocate more space. It might actually be "
5725
"a good idea to store data on some separate external storage."
5726
msgstr ""
5727
"If you plan on shipping a virtual appliance, do not assume that the end-user "
5728
"will know how to extend disk size to fit their need, so either plan for a "
5729
"large virtual disk to allow for your appliance to grow, or explain fairly "
5730
"well in your documentation how to allocate more space. It might actually be "
5731
"a good idea to store data on some separate external storage."
5732
5733
#: serverguide/C/virtualization.xml:556(para)
5734
msgid ""
5735
"Given that RAM is much easier to allocate in a VM, RAM size should be set to "
5736
"whatever you think is a safe minimum for your appliance."
5737
msgstr ""
5738
"Given that RAM is much easier to allocate in a VM, RAM size should be set to "
5739
"whatever you think is a safe minimum for your appliance."
5740
5741
#: serverguide/C/virtualization.xml:562(para)
5742
msgid ""
5743
"The <application>vmbuilder</application> command has 2 main parameters: the "
5744
"<emphasis>virtualization technology (hypervisor)</emphasis> and the targeted "
5745
"<emphasis>distribution</emphasis>. Optional parameters are quite numerous "
5746
"and can be found using the following command:"
5747
msgstr ""
5748
"The <application>vmbuilder</application> command has 2 main parameters: the "
5749
"<emphasis>virtualisation technology (hypervisor)</emphasis> and the targeted "
5750
"<emphasis>distribution</emphasis>. Optional parameters are quite numerous "
5751
"and can be found using the following command:"
5752
5753
#: serverguide/C/virtualization.xml:568(command)
5754
msgid "vmbuilder --help"
5755
msgstr "vmbuilder --help"
5756
5757
#: serverguide/C/virtualization.xml:572(title)
5758
msgid "Base Parameters"
5759
msgstr "Base Parameters"
5760
5761
#: serverguide/C/virtualization.xml:574(para)
5762
msgid ""
5763
"As this example is based on <application>KVM</application> and Ubuntu 10.10 "
5764
"(Maverick Meerkat), and we are likely to rebuild the same virtual machine "
5765
"multiple time, we'll invoke vmbuilder with the following first parameters:"
5766
msgstr ""
5767
5768
#: serverguide/C/virtualization.xml:580(command)
5769
msgid ""
5770
"sudo vmbuilder kvm ubuntu --suite maverick --flavour virtual --arch i386 -o -"
5771
"-libvirt qemu:///system"
5772
msgstr ""
5773
5774
#: serverguide/C/virtualization.xml:583(para)
5775
msgid ""
5776
"The <emphasis>--suite</emphasis> defines the Ubuntu release, the <emphasis>--"
5777
"flavour</emphasis> specifies that we want to use the virtual kernel (that's "
5778
"the one used to build a JeOS image), the <emphasis>--arch</emphasis> tells "
5779
"that we want to use a 32 bit machine, the <emphasis>-o</emphasis> tells "
5780
"vmbuilder to overwrite the previous version of the VM and the <emphasis>--"
5781
"libvirt</emphasis> tells to inform the local virtualization environment to "
5782
"add the resulting VM to the list of available machines."
5783
msgstr ""
5784
"The <emphasis>--suite</emphasis> defines the Ubuntu release, the <emphasis>--"
5785
"flavour</emphasis> specifies that we want to use the virtual kernel (that's "
5786
"the one used to build a JeOS image), the <emphasis>--arch</emphasis> tells "
5787
"that we want to use a 32 bit machine, the <emphasis>-o</emphasis> tells "
5788
"vmbuilder to overwrite the previous version of the VM and the <emphasis>--"
5789
"libvirt</emphasis> tells to inform the local virtualisation environment to "
5790
"add the resulting VM to the list of available machines."
5791
5792
#: serverguide/C/virtualization.xml:591(para)
5793
msgid "Notes:"
5794
msgstr "Notes:"
5795
5796
#: serverguide/C/virtualization.xml:597(para)
5797
msgid ""
5798
"Because of the nature of operations performed by vmbuilder, it needs to have "
5799
"root privilege, hence the use of sudo."
5800
msgstr ""
5801
"Because of the nature of operations performed by vmbuilder, it needs to have "
5802
"root privilege, hence the use of sudo."
5803
5804
#: serverguide/C/virtualization.xml:602(para)
5805
msgid ""
5806
"If your virtual machine needs to use more than 3Gb of ram, you should build "
5807
"a 64 bit machine (--arch amd64)."
5808
msgstr ""
5809
"If your virtual machine needs to use more than 3Gb of ram, you should build "
5810
"a 64 bit machine (--arch amd64)."
5811
5812
#: serverguide/C/virtualization.xml:607(para)
5813
msgid ""
5814
"Until Ubuntu 8.10, the virtual kernel was only built for 32 bit "
5815
"architecture, so if you want to define an amd64 machine on Hardy, you should "
5816
"use <emphasis>--flavour</emphasis> server instead."
5817
msgstr ""
5818
"Until Ubuntu 8.10, the virtual kernel was only built for 32 bit "
5819
"architecture, so if you want to define an amd64 machine on Hardy, you should "
5820
"use <emphasis>--flavour</emphasis> server instead."
5821
5822
#: serverguide/C/virtualization.xml:615(title)
5823
msgid "JeOS Installation Parameters"
5824
msgstr "JeOS Installation Parameters"
5825
5826
#: serverguide/C/virtualization.xml:618(title)
5827
msgid "JeOS Networking"
5828
msgstr "JeOS Networking"
5829
5830
#: serverguide/C/virtualization.xml:621(title)
5831
msgid "Assigning a fixed IP address"
5832
msgstr "Assigning a fixed IP address"
5833
5834
#: serverguide/C/virtualization.xml:623(para)
5835
msgid ""
5836
"As a virtual appliance that may be deployed on various very different "
5837
"networks, it is very difficult to know what the actual network will look "
5838
"like. In order to simplify configuration, it is a good idea to take an "
5839
"approach similar to what network hardware vendors usually do, namely "
5840
"assigning an initial fixed IP address to the appliance in a private class "
5841
"network that you will provide in your documentation. An address in the range "
5842
"192.168.0.0/255 is usually a good choice."
5843
msgstr ""
5844
"As a virtual appliance that may be deployed on various very different "
5845
"networks, it is very difficult to know what the actual network will look "
5846
"like. In order to simplify configuration, it is a good idea to take an "
5847
"approach similar to what network hardware vendors usually do, namely "
5848
"assigning an initial fixed IP address to the appliance in a private class "
5849
"network that you will provide in your documentation. An address in the range "
5850
"192.168.0.0/255 is usually a good choice."
5851
5852
#: serverguide/C/virtualization.xml:630(para)
5853
msgid "To do this we'll use the following parameters:"
5854
msgstr "To do this we'll use the following parameters:"
5855
5856
#: serverguide/C/virtualization.xml:636(para)
5857
msgid ""
5858
"<emphasis>--ip ADDRESS</emphasis>: IP address in dotted form (defaults to "
5859
"dhcp if not specified)"
5860
msgstr ""
5861
"<emphasis>--ip ADDRESS</emphasis>: IP address in dotted form (defaults to "
5862
"dhcp if not specified)"
5863
5864
#: serverguide/C/virtualization.xml:641(para)
5865
msgid ""
5866
"<emphasis>--mask VALUE</emphasis>: IP mask in dotted form (default: "
5867
"255.255.255.0)"
5868
msgstr ""
5869
"<emphasis>--mask VALUE</emphasis>: IP mask in dotted form (default: "
5870
"255.255.255.0)"
5871
5872
#: serverguide/C/virtualization.xml:646(para)
5873
msgid "<emphasis>--net VALUE</emphasis>: IP net address (default: X.X.X.0)"
5874
msgstr "<emphasis>--net VALUE</emphasis>: IP net address (default: X.X.X.0)"
5875
5876
#: serverguide/C/virtualization.xml:651(para)
5877
msgid "<emphasis>--bcast VALUE</emphasis>: IP broadcast (default: X.X.X.255)"
5878
msgstr ""
5879
"<emphasis>--bcast VALUE</emphasis>: IP broadcast (default: X.X.X.255)"
5880
5881
#: serverguide/C/virtualization.xml:656(para)
5882
msgid "<emphasis>--gw ADDRESS</emphasis>: Gateway address (default: X.X.X.1)"
5883
msgstr ""
5884
"<emphasis>--gw ADDRESS</emphasis>: Gateway address (default: X.X.X.1)"
5885
5886
#: serverguide/C/virtualization.xml:661(para)
5887
msgid ""
5888
"<emphasis>--dns ADDRESS</emphasis>: Name server address (default: X.X.X.1)"
5889
msgstr ""
5890
"<emphasis>--dns ADDRESS</emphasis>: Name server address (default: X.X.X.1)"
5891
5892
#: serverguide/C/virtualization.xml:667(para)
5893
msgid ""
5894
"We assume for now that default values are good enough, so the resulting "
5895
"invocation becomes:"
5896
msgstr ""
5897
"We assume for now that default values are good enough, so the resulting "
5898
"invocation becomes:"
5899
5900
#: serverguide/C/virtualization.xml:672(command)
5901
msgid ""
5902
"sudo vmbuilder kvm ubuntu --suite maverick --flavour virtual --arch i386 -o -"
5903
"-libvirt qemu:///system --ip 192.168.0.100"
5904
msgstr ""
5905
5906
#: serverguide/C/virtualization.xml:677(title)
5907
msgid "Modifying the libvirt Template to use Bridging"
5908
msgstr "Modifying the libvirt Template to use Bridging"
5909
5910
#: serverguide/C/virtualization.xml:679(para)
5911
msgid ""
5912
"Because our appliance will be likely to need to be accessed by remote hosts, "
5913
"we need to configure libvirt so that the appliance uses bridge networking. "
5914
"To do this we use vmbuilder template mechanism to modify the default one."
5915
msgstr ""
5916
"Because our appliance will be likely to need to be accessed by remote hosts, "
5917
"we need to configure libvirt so that the appliance uses bridge networking. "
5918
"To do this we use vmbuilder template mechanism to modify the default one."
5919
5920
#: serverguide/C/virtualization.xml:684(para)
5921
msgid ""
5922
"In our working directory we create the template hierarchy and copy the "
5923
"default template:"
5924
msgstr ""
5925
"In our working directory we create the template hierarchy and copy the "
5926
"default template:"
5927
5928
#: serverguide/C/virtualization.xml:689(command)
5929
msgid "mkdir -p VMBuilder/plugins/libvirt/templates"
5930
msgstr "mkdir -p VMBuilder/plugins/libvirt/templates"
5931
5932
#: serverguide/C/virtualization.xml:690(command)
5933
msgid "cp /etc/vmbuilder/libvirt/* VMBuilder/plugins/libvirt/templates/"
5934
msgstr "cp /etc/vmbuilder/libvirt/* VMBuilder/plugins/libvirt/templates/"
5935
5936
#: serverguide/C/virtualization.xml:693(para)
5937
msgid ""
5938
"We can then edit "
5939
"<filename>VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl</filename> to "
5940
"change:"
5941
msgstr ""
5942
"We can then edit "
5943
"<filename>VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl</filename> to "
5944
"change:"
5945
5946
#: serverguide/C/virtualization.xml:697(programlisting)
5947
#, no-wrap
5948
msgid ""
5949
"\n"
5950
" <interface type='network'>\n"
5951
" <source network='default'/>\n"
5952
" </interface>\n"
5953
msgstr ""
5954
"\n"
5955
" <interface type='network'>\n"
5956
" <source network='default'/>\n"
5957
" </interface>\n"
5958
5959
#: serverguide/C/virtualization.xml:703(para)
5960
msgid "To:"
5961
msgstr "To:"
5962
5963
#: serverguide/C/virtualization.xml:707(programlisting)
5964
#, no-wrap
5965
msgid ""
5966
"\n"
5967
" <interface type='bridge'>\n"
5968
" <source bridge='br0'/>\n"
5969
" </interface>\n"
5970
msgstr ""
5971
"\n"
5972
" <interface type='bridge'>\n"
5973
" <source bridge='br0'/>\n"
5974
" </interface>\n"
5975
5976
#: serverguide/C/virtualization.xml:717(title) serverguide/C/installation.xml:459(title)
5977
msgid "Partitioning"
5978
msgstr "Partitioning"
5979
5980
#: serverguide/C/virtualization.xml:719(para)
5981
msgid ""
5982
"Partitioning of the virtual appliance will have to take into consideration "
5983
"what you are planning to do with is. Because most appliances want to have a "
5984
"separate storage for data, having a separate <filename>/var</filename> would "
5985
"make sense."
5986
msgstr ""
5987
"Partitioning of the virtual appliance will have to take into consideration "
5988
"what you are planning to do with is. Because most appliances want to have a "
5989
"separate storage for data, having a separate <filename>/var</filename> would "
5990
"make sense."
5991
5992
#: serverguide/C/virtualization.xml:724(para)
5993
msgid ""
5994
"In order to do this vmbuilder provides us with <emphasis>--part</emphasis>:"
5995
msgstr ""
5996
"In order to do this vmbuilder provides us with <emphasis>--part</emphasis>:"
5997
5998
#: serverguide/C/virtualization.xml:728(programlisting)
5999
#, no-wrap
6000
msgid ""
6001
"\n"
6002
"--part PATH\n"
6003
" Allows you to specify a partition table in a partition file, located at "
6004
"PATH. Each line of the partition file should specify\n"
6005
" (root first):\n"
6006
" mountpoint size\n"
6007
" where size is in megabytes. You can have up to 4 virtual disks, a new "
6008
"disk starts on a\n"
6009
" line with ’---’. ie :\n"
6010
" root 1000\n"
6011
" /opt 1000\n"
6012
" swap 256\n"
6013
" ---\n"
6014
" /var 2000\n"
6015
" /log 1500\n"
6016
msgstr ""
6017
6018
#: serverguide/C/virtualization.xml:743(para)
6019
msgid ""
6020
"In our case we will define a text file name "
6021
"<filename>vmbuilder.partition</filename> which will contain the following:"
6022
msgstr ""
6023
"In our case we will define a text file name "
6024
"<filename>vmbuilder.partition</filename> which will contain the following:"
6025
6026
#: serverguide/C/virtualization.xml:747(programlisting)
6027
#, no-wrap
6028
msgid ""
6029
"\n"
6030
"root 8000\n"
6031
"swap 4000\n"
6032
"---\n"
6033
"/var 20000\n"
6034
msgstr ""
6035
"\n"
6036
"root 8000\n"
6037
"swap 4000\n"
6038
"---\n"
6039
"/var 20000\n"
6040
6041
#: serverguide/C/virtualization.xml:755(para)
6042
msgid ""
6043
"Note that as we are using virtual disk images, the actual sizes that we put "
6044
"here are maximum sizes for these volumes."
6045
msgstr ""
6046
"Note that as we are using virtual disk images, the actual sizes that we put "
6047
"here are maximum sizes for these volumes."
6048
6049
#: serverguide/C/virtualization.xml:760(para)
6050
msgid "Our command line now looks like:"
6051
msgstr "Our command line now looks like:"
6052
6053
#: serverguide/C/virtualization.xml:765(command)
6054
msgid ""
6055
"sudo vmbuilder kvm ubuntu --suite maverick --flavour virtual --arch i386 \\ -"
6056
"o --libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition"
6057
msgstr ""
6058
6059
#: serverguide/C/virtualization.xml:770(para)
6060
msgid ""
6061
"Using a \"\\\" in a command will allow long command strings to wrap to the "
6062
"next line."
6063
msgstr ""
6064
"Using a \"\\\" in a command will allow long command strings to wrap to the "
6065
"next line."
6066
6067
#: serverguide/C/virtualization.xml:777(title)
6068
msgid "User and Password"
6069
msgstr "User and Password"
6070
6071
#: serverguide/C/virtualization.xml:779(para)
6072
msgid ""
6073
"Again setting up a virtual appliance, you will need to provide a default "
6074
"user and password that is generic so that you can include it in your "
6075
"documentation. We will see later on in this tutorial how we will provide "
6076
"some security by defining a script that will be run the first time a user "
6077
"actually logs in the appliance, that will, among other things, ask him to "
6078
"change his password. In this example I will use <emphasis>'user'</emphasis> "
6079
"as my user name, and <emphasis>'default'</emphasis> as the password."
6080
msgstr ""
6081
"Again setting up a virtual appliance, you will need to provide a default "
6082
"user and password that is generic so that you can include it in your "
6083
"documentation. We will see later on in this tutorial how we will provide "
6084
"some security by defining a script that will be run the first time a user "
6085
"actually logs in the appliance, that will, among other things, ask him to "
6086
"change his password. In this example I will use <emphasis>'user'</emphasis> "
6087
"as my user name, and <emphasis>'default'</emphasis> as the password."
6088
6089
#: serverguide/C/virtualization.xml:787(para)
6090
msgid "To do this we use the following optional parameters:"
6091
msgstr "To do this we use the following optional parameters:"
6092
6093
#: serverguide/C/virtualization.xml:793(para)
6094
msgid ""
6095
"<emphasis>--user USERNAME:</emphasis> Sets the name of the user to be added. "
6096
"Default: ubuntu."
6097
msgstr ""
6098
"<emphasis>--user USERNAME:</emphasis> Sets the name of the user to be added. "
6099
"Default: ubuntu."
6100
6101
#: serverguide/C/virtualization.xml:798(para)
6102
msgid ""
6103
"<emphasis>--name FULLNAME:</emphasis> Sets the full name of the user to be "
6104
"added. Default: Ubuntu."
6105
msgstr ""
6106
"<emphasis>--name FULLNAME:</emphasis> Sets the full name of the user to be "
6107
"added. Default: Ubuntu."
6108
6109
#: serverguide/C/virtualization.xml:803(para)
6110
msgid ""
6111
"<emphasis>--pass PASSWORD:</emphasis> Sets the password for the user. "
6112
"Default: ubuntu."
6113
msgstr ""
6114
"<emphasis>--pass PASSWORD:</emphasis> Sets the password for the user. "
6115
"Default: ubuntu."
6116
6117
#: serverguide/C/virtualization.xml:809(para)
6118
msgid "Our resulting command line becomes:"
6119
msgstr "Our resulting command line becomes:"
6120
6121
#: serverguide/C/virtualization.xml:814(command)
6122
msgid ""
6123
"sudo vmbuilder kvm ubuntu --suite maverick --flavour virtual --arch i386 \\ -"
6124
"o --libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition \\ -"
6125
"-user user --name user --pass default"
6126
msgstr ""
6127
6128
#: serverguide/C/virtualization.xml:822(title)
6129
msgid "Installing Required Packages"
6130
msgstr "Installing Required Packages"
6131
6132
#: serverguide/C/virtualization.xml:824(para)
6133
msgid ""
6134
"In this example we will be installing a package "
6135
"<application>(Limesurvey)</application> that accesses a "
6136
"<application>MySQL</application> database and has a web interface. We will "
6137
"therefore require our OS to provide us with:"
6138
msgstr ""
6139
"In this example we will be installing a package "
6140
"<application>(Limesurvey)</application> that accesses a "
6141
"<application>MySQL</application> database and has a web interface. We will "
6142
"therefore require our OS to provide us with:"
6143
6144
#: serverguide/C/virtualization.xml:831(para)
6145
msgid "Apache"
6146
msgstr "Apache"
6147
6148
#: serverguide/C/virtualization.xml:832(para)
6149
msgid "PHP"
6150
msgstr "PHP"
6151
6152
#: serverguide/C/virtualization.xml:833(para) serverguide/C/databases.xml:19(trademark) serverguide/C/databases.xml:31(title)
6153
msgid "MySQL"
6154
msgstr "MySQL"
6155
6156
#: serverguide/C/virtualization.xml:834(para) serverguide/C/remote-administration.xml:19(title)
6157
msgid "OpenSSH Server"
6158
msgstr "OpenSSH Server"
6159
6160
#: serverguide/C/virtualization.xml:835(para)
6161
msgid "Limesurvey (as an example application that we have packaged)"
6162
msgstr "Limesurvey (as an example application that we have packaged)"
6163
6164
#: serverguide/C/virtualization.xml:838(para)
6165
msgid ""
6166
"This is done using vmbuilder by specifying the --addpkg option multiple "
6167
"times:"
6168
msgstr ""
6169
6170
#: serverguide/C/virtualization.xml:842(programlisting)
6171
#, no-wrap
6172
msgid ""
6173
"\n"
6174
"--addpkg PKG\n"
6175
" Install PKG into the guest (can be specfied multiple times)\n"
6176
msgstr ""
6177
"\n"
6178
"--addpkg PKG\n"
6179
" Install PKG into the guest (can be specfied multiple times)\n"
6180
6181
#: serverguide/C/virtualization.xml:847(para)
6182
msgid ""
6183
"However, due to the way vmbuilder operates, packages that have to ask "
6184
"questions to the user during the post install phase are not supported and "
6185
"should instead be installed while interactivity can occur. This is the case "
6186
"of Limesurvey, which we will have to install later, once the user logs in."
6187
msgstr ""
6188
"However, due to the way vmbuilder operates, packages that have to ask "
6189
"questions to the user during the post install phase are not supported and "
6190
"should instead be installed while interactivity can occur. This is the case "
6191
"of Limesurvey, which we will have to install later, once the user logs in."
6192
6193
#: serverguide/C/virtualization.xml:853(para)
6194
msgid ""
6195
"Other packages that ask simple debconf question, such as <application>mysql-"
6196
"server</application> asking to set a password, the package can be installed "
6197
"immediately, but we will have to reconfigure it the first time the user logs "
6198
"in."
6199
msgstr ""
6200
"Other packages that ask simple debconf question, such as <application>mysql-"
6201
"server</application> asking to set a password, the package can be installed "
6202
"immediately, but we will have to reconfigure it the first time the user logs "
6203
"in."
6204
6205
#: serverguide/C/virtualization.xml:859(para)
6206
msgid ""
6207
"If some packages that we need to install are not in main, we need to enable "
6208
"the additional repositories using --comp and --ppa:"
6209
msgstr ""
6210
"If some packages that we need to install are not in main, we need to enable "
6211
"the additional repositories using --comp and --ppa:"
6212
6213
#: serverguide/C/virtualization.xml:863(programlisting)
6214
#, no-wrap
6215
msgid ""
6216
"\n"
6217
"--components COMP1,COMP2,...,COMPN\n"
6218
" A comma separated list of distro components to include (e.g. "
6219
"main,universe). This defaults\n"
6220
" to \"main\"\n"
6221
"--ppa=PPA Add ppa belonging to PPA to the vm's sources.list.\n"
6222
msgstr ""
6223
"\n"
6224
"--components COMP1,COMP2,...,COMPN\n"
6225
" A comma separated list of distro components to include (e.g. "
6226
"main,universe). This defaults\n"
6227
" to \"main\"\n"
6228
"--ppa=PPA Add ppa belonging to PPA to the vm's sources.list.\n"
6229
6230
#: serverguide/C/virtualization.xml:870(para)
6231
msgid ""
6232
"Limesurvey not being part of the archive at the moment, we'll specify it's "
6233
"PPA (personal package archive) address so that it is added to the VM "
6234
"<filename>/etc/apt/source.list</filename>, so we add the following options "
6235
"to the command line:"
6236
msgstr ""
6237
"Limesurvey not being part of the archive at the moment, we'll specify it's "
6238
"PPA (personal package archive) address so that it is added to the VM "
6239
"<filename>/etc/apt/source.list</filename>, so we add the following options "
6240
"to the command line:"
6241
6242
#: serverguide/C/virtualization.xml:876(command)
6243
msgid ""
6244
"--addpkg apache2 --addpkg apache2-mpm-prefork --addpkg apache2-utils --"
6245
"addpkg apache2.2-common \\ --addpkg dbconfig-common --addpkg libapache2-mod-"
6246
"php5 --addpkg mysql-client --addpkg php5-cli \\ --addpkg php5-gd --addpkg "
6247
"php5-ldap --addpkg php5-mysql --addpkg wwwconfig-common \\ --addpkg mysql-"
6248
"server --ppa nijaba"
6249
msgstr ""
6250
"--addpkg apache2 --addpkg apache2-mpm-prefork --addpkg apache2-utils --"
6251
"addpkg apache2.2-common \\ --addpkg dbconfig-common --addpkg libapache2-mod-"
6252
"php5 --addpkg mysql-client --addpkg php5-cli \\ --addpkg php5-gd --addpkg "
6253
"php5-ldap --addpkg php5-mysql --addpkg wwwconfig-common \\ --addpkg mysql-"
6254
"server --ppa nijaba"
6255
6256
#: serverguide/C/virtualization.xml:883(title)
6257
msgid "OpenSSH"
6258
msgstr "OpenSSH"
6259
6260
#: serverguide/C/virtualization.xml:885(para)
6261
msgid ""
6262
"Another convenient tool that we want to have on our appliance is OpenSSH, as "
6263
"it will allow our admins to access the appliance remotely. However, pushing "
6264
"in the wild an appliance with a pre-installed OpenSSH server is a big "
6265
"security risk as all these server will share the same secret key, making it "
6266
"very easy for hackers to target our appliance with all the tools they need "
6267
"to crack it open in a breeze. As for the user password, we will instead rely "
6268
"on a script that will install OpenSSH the first time a user logs in so that "
6269
"the key generated will be different for each appliance. For this we'll use a "
6270
"<emphasis>--firstboot</emphasis> script, as it does not need any user "
6271
"interaction."
6272
msgstr ""
6273
"Another convenient tool that we want to have on our appliance is OpenSSH, as "
6274
"it will allow our admins to access the appliance remotely. However, pushing "
6275
"in the wild an appliance with a pre-installed OpenSSH server is a big "
6276
"security risk as all these server will share the same secret key, making it "
6277
"very easy for hackers to target our appliance with all the tools they need "
6278
"to crack it open in a breeze. As for the user password, we will instead rely "
6279
"on a script that will install OpenSSH the first time a user logs in so that "
6280
"the key generated will be different for each appliance. For this we'll use a "
6281
"<emphasis>--firstboot</emphasis> script, as it does not need any user "
6282
"interaction."
6283
6284
#: serverguide/C/virtualization.xml:897(title)
6285
msgid "Speed Considerations"
6286
msgstr "Speed Considerations"
6287
6288
#: serverguide/C/virtualization.xml:900(title)
6289
msgid "Package Caching"
6290
msgstr "Package Caching"
6291
6292
#: serverguide/C/virtualization.xml:902(para)
6293
msgid ""
6294
"When vmbuilder creates builds your system, it has to go fetch each one of "
6295
"the packages that composes it over the network to one of the official "
6296
"repositories, which, depending on your internet connection speed and the "
6297
"load of the mirror, can have a big impact on the actual build time. In order "
6298
"to reduce this, it is recommended to either have a local repository (which "
6299
"can be created using <application>apt-mirror</application>) or using a "
6300
"caching proxy such as <application>apt-proxy</application>. The later option "
6301
"being much simpler to implement and requiring less disk space, it is the one "
6302
"we will pick in this tutorial. To install it, simply type:"
6303
msgstr ""
6304
6305
#: serverguide/C/virtualization.xml:912(command)
6306
msgid "sudo apt-get install apt-proxy"
6307
msgstr "sudo apt-get install apt-proxy"
6308
6309
#: serverguide/C/virtualization.xml:915(para)
6310
msgid ""
6311
"Once this is complete, your (empty) proxy is ready for use on "
6312
"http://mirroraddress:9999 and will find ubuntu repository under /ubuntu. For "
6313
"vmbuilder to use it, we'll have to use the <emphasis>--mirror</emphasis> "
6314
"option:"
6315
msgstr ""
6316
"Once this is complete, your (empty) proxy is ready for use on "
6317
"http://mirroraddress:9999 and will find ubuntu repository under /ubuntu. For "
6318
"vmbuilder to use it, we'll have to use the <emphasis>--mirror</emphasis> "
6319
"option:"
6320
6321
#: serverguide/C/virtualization.xml:920(programlisting)
6322
#, no-wrap
6323
msgid ""
6324
"\n"
6325
"--mirror=URL Use Ubuntu mirror at URL instead of the default, which\n"
6326
" is http://archive.ubuntu.com/ubuntu for official\n"
6327
" arches and http://ports.ubuntu.com/ubuntu-ports\n"
6328
" otherwise\n"
6329
msgstr ""
6330
"\n"
6331
"--mirror=URL Use Ubuntu mirror at URL instead of the default, which\n"
6332
" is http://archive.ubuntu.com/ubuntu for official\n"
6333
" arches and http://ports.ubuntu.com/ubuntu-ports\n"
6334
" otherwise\n"
6335
6336
#: serverguide/C/virtualization.xml:927(para)
6337
msgid "So we add to the command line:"
6338
msgstr "So we add to the command line:"
6339
6340
#: serverguide/C/virtualization.xml:932(command)
6341
msgid "--mirror http://mirroraddress:9999/ubuntu"
6342
msgstr "--mirror http://mirroraddress:9999/ubuntu"
6343
6344
#: serverguide/C/virtualization.xml:936(para)
6345
msgid ""
6346
"The mirror address specified here will also be used in the "
6347
"<filename>/etc/apt/sources.list</filename> of the newly created guest, so it "
6348
"is useful to specify here an address that can be resolved by the guest or to "
6349
"plan on reseting this address later on, such as in a <emphasis>--"
6350
"firstboot</emphasis> script."
6351
msgstr ""
6352
6353
#: serverguide/C/virtualization.xml:945(title)
6354
msgid "Install a Local Mirror"
6355
msgstr "Install a Local Mirror"
6356
6357
#: serverguide/C/virtualization.xml:947(para)
6358
msgid ""
6359
"If we are in a larger environment, it may make sense to setup a local mirror "
6360
"of the Ubuntu repositories. The package apt-mirror provides you with a "
6361
"script that will handle the mirroring for you. You should plan on having "
6362
"about 20 gigabyte of free space per supported release and architecture."
6363
msgstr ""
6364
"If we are in a larger environment, it may make sense to setup a local mirror "
6365
"of the Ubuntu repositories. The package apt-mirror provides you with a "
6366
"script that will handle the mirroring for you. You should plan on having "
6367
"about 20 gigabyte of free space per supported release and architecture."
6368
6369
#: serverguide/C/virtualization.xml:953(para)
6370
msgid ""
6371
"By default, <application>apt-mirror</application> uses the configuration "
6372
"file in <filename>/etc/apt/mirror.list</filename>. As it is set up, it will "
6373
"replicate only the architecture of the local machine. If you would like to "
6374
"support other architectures on your mirror, simply duplicate the lines "
6375
"starting with “deb”, replacing the deb keyword by /deb-{arch} where arch can "
6376
"be i386, amd64, etc... For example, on an amd64 machine, to have the i386 "
6377
"archives as well, you will have:"
6378
msgstr ""
6379
"By default, <application>apt-mirror</application> uses the configuration "
6380
"file in <filename>/etc/apt/mirror.list</filename>. As it is set up, it will "
6381
"replicate only the architecture of the local machine. If you would like to "
6382
"support other architectures on your mirror, simply duplicate the lines "
6383
"starting with “deb”, replacing the deb keyword by /deb-{arch} where arch can "
6384
"be i386, amd64, etc... For example, on an amd64 machine, to have the i386 "
6385
"archives as well, you will have:"
6386
6387
#: serverguide/C/virtualization.xml:960(programlisting)
6388
#, no-wrap
6389
msgid ""
6390
"\n"
6391
"deb http://archive.ubuntu.com/ubuntu maverick main restricted universe "
6392
"multiverse \n"
6393
"/deb-i386 http://archive.ubuntu.com/ubuntu maverick main restricted "
6394
"universe multiverse\n"
6395
"\n"
6396
"deb http://archive.ubuntu.com/ubuntu maverick-updates main restricted "
6397
"universe multiverse \n"
6398
"/deb-i386 http://archive.ubuntu.com/ubuntu maverick-updates main restricted "
6399
"universe multiverse \n"
6400
"\n"
6401
"deb http://archive.ubuntu.com/ubuntu/ maverick-backports main restricted "
6402
"universe multiverse \n"
6403
"/deb-i386 http://archive.ubuntu.com/ubuntu maverick-backports main "
6404
"restricted universe multiverse \n"
6405
"\n"
6406
"deb http://security.ubuntu.com/ubuntu maverick-security main restricted "
6407
"universe multiverse \n"
6408
"/deb-i386 http://security.ubuntu.com/ubuntu maverick-security main "
6409
"restricted universe multiverse \n"
6410
"\n"
6411
"deb http://archive.ubuntu.com/ubuntu maverick main/debian-installer "
6412
"restricted/debian-installer universe/debian-installer multiverse/debian-"
6413
"installer \n"
6414
"/deb-i386 http://archive.ubuntu.com/ubuntu maverick main/debian-installer "
6415
"restricted/debian-installer universe/debian-installer multiverse/debian-"
6416
"installer \n"
6417
msgstr ""
6418
6419
#: serverguide/C/virtualization.xml:977(para)
6420
msgid ""
6421
"Notice that the source packages are not mirrored as they are seldom used "
6422
"compared to the binaries and they do take a lot more space, but they can be "
6423
"easily added to the list."
6424
msgstr ""
6425
"Notice that the source packages are not mirrored as they are seldom used "
6426
"compared to the binaries and they do take a lot more space, but they can be "
6427
"easily added to the list."
6428
6429
#: serverguide/C/virtualization.xml:982(para)
6430
msgid ""
6431
"Once the mirror has finished replicating (and this can be quite long), you "
6432
"need to configure Apache so that your mirror files (in "
6433
"<filename>/var/spool/apt-mirror</filename> if you did not change the "
6434
"default), are published by your Apache server. For more information on "
6435
"Apache see <xref linkend=\"httpd\"/>."
6436
msgstr ""
6437
"Once the mirror has finished replicating (and this can be quite long), you "
6438
"need to configure Apache so that your mirror files (in "
6439
"<filename>/var/spool/apt-mirror</filename> if you did not change the "
6440
"default), are published by your Apache server. For more information on "
6441
"Apache see <xref linkend=\"httpd\"/>."
6442
6443
#: serverguide/C/virtualization.xml:991(title)
6444
msgid "Installing in a RAM Disk"
6445
msgstr "Installing in a RAM Disk"
6446
6447
#: serverguide/C/virtualization.xml:993(para)
6448
msgid ""
6449
"As you can easily imagine, writing to RAM is a <emphasis>LOT</emphasis> "
6450
"faster than writing to disk. If you have some free memory, letting vmbuilder "
6451
"perform its operation in a RAMdisk will help a lot and the option <emphasis>-"
6452
"-tmpfs</emphasis> will help you do just that:"
6453
msgstr ""
6454
"As you can easily imagine, writing to RAM is a <emphasis>LOT</emphasis> "
6455
"faster than writing to disk. If you have some free memory, letting vmbuilder "
6456
"perform its operation in a RAMdisk will help a lot and the option <emphasis>-"
6457
"-tmpfs</emphasis> will help you do just that:"
6458
6459
#: serverguide/C/virtualization.xml:999(programlisting)
6460
#, no-wrap
6461
msgid ""
6462
"\n"
6463
"--tmpfs OPTS Use a tmpfs as the working directory, specifying its\n"
6464
" size or \"-\" to use tmpfs default (suid,dev,size=1G).\n"
6465
msgstr ""
6466
"\n"
6467
"--tmpfs OPTS Use a tmpfs as the working directory, specifying its\n"
6468
" size or \"-\" to use tmpfs default (suid,dev,size=1G).\n"
6469
6470
#: serverguide/C/virtualization.xml:1004(para)
6471
msgid ""
6472
"So adding <command>--tmpfs -</command> sounds like a very good idea if you "
6473
"have 1G of free ram."
6474
msgstr ""
6475
"So adding <command>--tmpfs -</command> sounds like a very good idea if you "
6476
"have 1G of free ram."
6477
6478
#: serverguide/C/virtualization.xml:1011(title)
6479
msgid "Package the Application"
6480
msgstr "Package the Application"
6481
6482
#: serverguide/C/virtualization.xml:1013(para)
6483
msgid "Two option are available to us:"
6484
msgstr "Two option are available to us:"
6485
6486
#: serverguide/C/virtualization.xml:1019(para)
6487
msgid ""
6488
"The recommended method to do so is to make a <emphasis>Debian</emphasis> "
6489
"package. Since this is outside of the scope of this tutorial, we will not "
6490
"perform this here and invite the reader to read the documentation on how to "
6491
"do this in the <ulink url=\"https://wiki.ubuntu.com/PackagingGuide\">Ubuntu "
6492
"Packaging Guide</ulink>. In this case it is also a good idea to setup a "
6493
"repository for your package so that updates can be conveniently pulled from "
6494
"it. See the <ulink url=\"http://www.debian-"
6495
"administration.org/articles/286\">Debian Administration</ulink> article for "
6496
"a tutorial on this."
6497
msgstr ""
6498
"The recommended method to do so is to make a <emphasis>Debian</emphasis> "
6499
"package. Since this is outside of the scope of this tutorial, we will not "
6500
"perform this here and invite the reader to read the documentation on how to "
6501
"do this in the <ulink url=\"https://wiki.ubuntu.com/PackagingGuide\">Ubuntu "
6502
"Packaging Guide</ulink>. In this case it is also a good idea to setup a "
6503
"repository for your package so that updates can be conveniently pulled from "
6504
"it. See the <ulink url=\"http://www.debian-"
6505
"administration.org/articles/286\">Debian Administration</ulink> article for "
6506
"a tutorial on this."
6507
6508
#: serverguide/C/virtualization.xml:1028(para)
6509
msgid ""
6510
"Manually install the application under <filename>/opt</filename> as "
6511
"recommended by the <ulink url=\"http://www.pathname.com/fhs/\">FHS "
6512
"guidelines</ulink>."
6513
msgstr ""
6514
"Manually install the application under <filename>/opt</filename> as "
6515
"recommended by the <ulink url=\"http://www.pathname.com/fhs/\">FHS "
6516
"guidelines</ulink>."
6517
6518
#: serverguide/C/virtualization.xml:1035(para)
6519
msgid ""
6520
"In our case we'll use <application>Limesurvey</application> as example web "
6521
"application for which we wish to provide a virtual appliance. As noted "
6522
"before, we've made a version of the package available in a PPA (Personal "
6523
"Package Archive)."
6524
msgstr ""
6525
"In our case we'll use <application>Limesurvey</application> as example web "
6526
"application for which we wish to provide a virtual appliance. As noted "
6527
"before, we've made a version of the package available in a PPA (Personal "
6528
"Package Archive)."
6529
6530
#: serverguide/C/virtualization.xml:1042(title)
6531
msgid "Finishing Install"
6532
msgstr "Finishing Install"
6533
6534
#: serverguide/C/virtualization.xml:1045(title) serverguide/C/virtualization.xml:1942(title)
6535
msgid "First Boot"
6536
msgstr "First Boot"
6537
6538
#: serverguide/C/virtualization.xml:1047(para)
6539
msgid ""
6540
"As we mentioned earlier, the first time the machine boots we'll need to "
6541
"install <application>openssh-server</application> so that the key generated "
6542
"for it is unique for each machine. To do this, we'll write a script called "
6543
"<filename>boot.sh</filename> as follows:"
6544
msgstr ""
6545
"As we mentioned earlier, the first time the machine boots we'll need to "
6546
"install <application>openssh-server</application> so that the key generated "
6547
"for it is unique for each machine. To do this, we'll write a script called "
6548
"<filename>boot.sh</filename> as follows:"
6549
6550
#: serverguide/C/virtualization.xml:1053(programlisting)
6551
#, no-wrap
6552
msgid ""
6553
"\n"
6554
"# This script will run the first time the virtual machine boots\n"
6555
"# It is ran as root.\n"
6556
"\n"
6557
"apt-get update\n"
6558
"apt-get install -qqy --force-yes openssh-server\n"
6559
msgstr ""
6560
"\n"
6561
"# This script will run the first time the virtual machine boots\n"
6562
"# It is ran as root.\n"
6563
"\n"
6564
"apt-get update\n"
6565
"apt-get install -qqy --force-yes openssh-server\n"
6566
6567
#: serverguide/C/virtualization.xml:1061(para)
6568
msgid ""
6569
"And we add the <command>--firstboot boot.sh</command> option to our command "
6570
"line."
6571
msgstr ""
6572
"And we add the <command>--firstboot boot.sh</command> option to our command "
6573
"line."
6574
6575
#: serverguide/C/virtualization.xml:1067(title)
6576
msgid "First Login"
6577
msgstr "First Login"
6578
6579
#: serverguide/C/virtualization.xml:1069(para)
6580
msgid ""
6581
"Mysql and Limesurvey needing some user interaction during their setup, we'll "
6582
"set them up the first time a user logs in using a script named login.sh. "
6583
"We'll also use this script to let the user specify:"
6584
msgstr ""
6585
"Mysql and Limesurvey needing some user interaction during their setup, we'll "
6586
"set them up the first time a user logs in using a script named login.sh. "
6587
"We'll also use this script to let the user specify:"
6588
6589
#: serverguide/C/virtualization.xml:1075(para)
6590
msgid "His own password"
6591
msgstr "His own password"
6592
6593
#: serverguide/C/virtualization.xml:1076(para)
6594
msgid "Define the keyboard and other locale info he wants to use"
6595
msgstr "Define the keyboard and other locale info he wants to use"
6596
6597
#: serverguide/C/virtualization.xml:1079(para)
6598
msgid "So we'll define <filename>login.sh</filename> as follows:"
6599
msgstr "So we'll define <filename>login.sh</filename> as follows:"
6600
6601
#: serverguide/C/virtualization.xml:1083(programlisting)
6602
#, no-wrap
6603
msgid ""
6604
"\n"
6605
"# This script is ran the first time a user logs in\n"
6606
"\n"
6607
"echo \"Your appliance is about to be finished to be set up.\"\n"
6608
"echo \"In order to do it, we'll need to ask you a few questions,\"\n"
6609
"echo \"starting by changing your user password.\"\n"
6610
"\n"
6611
"passwd\n"
6612
"\n"
6613
"#give the opportunity to change the keyboard\n"
6614
"sudo dpkg-reconfigure console-setup\n"
6615
"\n"
6616
"#configure the mysql server root password\n"
6617
"sudo dpkg-reconfigure mysql-server-5.0\n"
6618
"\n"
6619
"#install limesurvey\n"
6620
"sudo apt-get install -qqy --force-yes limesurvey\n"
6621
"\n"
6622
"echo \"Your appliance is now configured. To use it point your\"\n"
6623
"echo \"browser to http://serverip/limesurvey/admin\"\n"
6624
msgstr ""
6625
"\n"
6626
"# This script is ran the first time a user logs in\n"
6627
"\n"
6628
"echo \"Your appliance is about to be finished to be set up.\"\n"
6629
"echo \"In order to do it, we'll need to ask you a few questions,\"\n"
6630
"echo \"starting by changing your user password.\"\n"
6631
"\n"
6632
"passwd\n"
6633
"\n"
6634
"#give the opportunity to change the keyboard\n"
6635
"sudo dpkg-reconfigure console-setup\n"
6636
"\n"
6637
"#configure the mysql server root password\n"
6638
"sudo dpkg-reconfigure mysql-server-5.0\n"
6639
"\n"
6640
"#install limesurvey\n"
6641
"sudo apt-get install -qqy --force-yes limesurvey\n"
6642
"\n"
6643
"echo \"Your appliance is now configured. To use it point your\"\n"
6644
"echo \"browser to http://serverip/limesurvey/admin\"\n"
6645
6646
#: serverguide/C/virtualization.xml:1105(para)
6647
msgid ""
6648
"And we add the <command>--firstlogin login.sh</command> option to our "
6649
"command line."
6650
msgstr ""
6651
"And we add the <command>--firstlogin login.sh</command> option to our "
6652
"command line."
6653
6654
#: serverguide/C/virtualization.xml:1112(title)
6655
msgid "Useful Additions"
6656
msgstr "Useful Additions"
6657
6658
#: serverguide/C/virtualization.xml:1115(title)
6659
msgid "Configuring Automatic Updates"
6660
msgstr "Configuring Automatic Updates"
6661
6662
#: serverguide/C/virtualization.xml:1117(para)
6663
msgid ""
6664
"To have your system be configured to update itself on a regular basis, we "
6665
"will just install <application>unattended-upgrades</application>, so we add "
6666
"the following option to our command line:"
6667
msgstr ""
6668
"To have your system be configured to update itself on a regular basis, we "
6669
"will just install <application>unattended-upgrades</application>, so we add "
6670
"the following option to our command line:"
6671
6672
#: serverguide/C/virtualization.xml:1123(command)
6673
msgid "--addpkg unattended-upgrades"
6674
msgstr "--addpkg unattended-upgrades"
6675
6676
#: serverguide/C/virtualization.xml:1126(para)
6677
msgid ""
6678
"As we have put our application package in a PPA, the process will update not "
6679
"only the system, but also the application each time we update the version in "
6680
"the PPA."
6681
msgstr ""
6682
"As we have put our application package in a PPA, the process will update not "
6683
"only the system, but also the application each time we update the version in "
6684
"the PPA."
6685
6686
#: serverguide/C/virtualization.xml:1133(title)
6687
msgid "ACPI Event Handling"
6688
msgstr "ACPI Event Handling"
6689
6690
#: serverguide/C/virtualization.xml:1135(para)
6691
msgid ""
6692
"For your virtual machine to be able to handle restart and shutdown events it "
6693
"is being sent, it is a good idea to install the acpid package as well. To do "
6694
"this we just add the following option:"
6695
msgstr ""
6696
"For your virtual machine to be able to handle restart and shutdown events it "
6697
"is being sent, it is a good idea to install the acpid package as well. To do "
6698
"this we just add the following option:"
6699
6700
#: serverguide/C/virtualization.xml:1141(command)
6701
msgid "--addpkg acpid"
6702
msgstr "--addpkg acpid"
6703
6704
#: serverguide/C/virtualization.xml:1147(title)
6705
msgid "Final Command"
6706
msgstr "Final Command"
6707
6708
#: serverguide/C/virtualization.xml:1149(para)
6709
msgid "Here is the command with all the options discussed above:"
6710
msgstr "Here is the command with all the options discussed above:"
6711
6712
#: serverguide/C/virtualization.xml:1154(command)
6713
msgid ""
6714
"sudo vmbuilder kvm ubuntu --suite maverick --flavour virtual --arch i386 -o "
6715
"\\ --libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition --"
6716
"user user \\ --name user --pass default --addpkg apache2 --addpkg apache2-"
6717
"mpm-prefork \\ --addpkg apache2-utils --addpkg apache2.2-common --addpkg "
6718
"dbconfig-common \\ --addpkg libapache2-mod-php5 --addpkg mysql-client --"
6719
"addpkg php5-cli \\ --addpkg php5-gd --addpkg php5-ldap --addpkg php5-mysql --"
6720
"addpkg wwwconfig-common \\ --addpkg mysql-server --addpkg unattended-"
6721
"upgrades --addpkg acpid --ppa nijaba \\ --mirror "
6722
"http://mirroraddress:9999/ubuntu --tmpfs - --firstboot boot.sh \\ --"
6723
"firstlogin login.sh"
6724
msgstr ""
6725
6726
#: serverguide/C/virtualization.xml:1169(para)
6727
msgid ""
6728
"If you are interested in learning more, have questions or suggestions, "
6729
"please contact the Ubuntu Server Team at:"
6730
msgstr ""
6731
"If you are interested in learning more, have questions or suggestions, "
6732
"please contact the Ubuntu Server Team at:"
6733
6734
#: serverguide/C/virtualization.xml:1174(para)
6735
msgid "IRC: #ubuntu-server on freenode"
6736
msgstr "IRC: #ubuntu-server on freenode"
6737
6738
#: serverguide/C/virtualization.xml:1179(para)
6739
msgid ""
6740
"Mailing list: <ulink url=\"https://lists.ubuntu.com/mailman/listinfo/ubuntu-"
6741
"server\">ubuntu-server at lists.ubuntu.com</ulink>"
6742
msgstr ""
6743
"Mailing list: <ulink url=\"https://lists.ubuntu.com/mailman/listinfo/ubuntu-"
6744
"server\">ubuntu-server at lists.ubuntu.com</ulink>"
6745
6746
#: serverguide/C/virtualization.xml:1184(para)
6747
msgid ""
6748
"Also, see the <ulink "
6749
"url=\"https://help.ubuntu.com/community/JeOSVMBuilder\">JeOSVMBuilder Ubuntu "
6750
"Wiki</ulink> page."
6751
msgstr ""
6752
6753
#: serverguide/C/virtualization.xml:1192(title)
6754
msgid "UEC"
6755
msgstr ""
6756
6757
#: serverguide/C/virtualization.xml:1195(title) serverguide/C/network-auth.xml:2036(title) serverguide/C/monitoring.xml:15(title) serverguide/C/lamp-applications.xml:17(title) serverguide/C/installation.xml:928(title) serverguide/C/dns.xml:64(title) serverguide/C/chat.xml:17(title) serverguide/C/backups.xml:541(title)
6758
msgid "Overview"
6759
msgstr "Overview"
6760
6761
#: serverguide/C/virtualization.xml:1197(para)
6762
msgid ""
6763
"This tutorial covers <application>UEC</application> installation from the "
6764
"Ubuntu 10.10 Server Edition CD, and assumes a basic network topology, with a "
6765
"single system serving as the <emphasis>\"all-in-one controller\"</emphasis>, "
6766
"and one or more nodes attached."
6767
msgstr ""
6768
6769
#: serverguide/C/virtualization.xml:1202(para)
6770
msgid ""
6771
"From this Tutorial you will learn how to install, configure, register and "
6772
"perform several operations on a basic <application>UEC</application> setup "
6773
"that results in a cloud with a one controller <emphasis>\"front-"
6774
"end\"</emphasis> and one or several node(s) for running Virtual Machine (VM) "
6775
"instances. You will also use examples to help get you started using your own "
6776
"private compute cloud."
6777
msgstr ""
6778
6779
#: serverguide/C/virtualization.xml:1210(title)
6780
msgid "Prerequisites"
6781
msgstr ""
6782
6783
#: serverguide/C/virtualization.xml:1212(para)
6784
msgid ""
6785
"To deploy a minimal cloud infrastructure, you’ll need at least "
6786
"<emphasis>two</emphasis> dedicated systems:"
6787
msgstr ""
6788
6789
#: serverguide/C/virtualization.xml:1218(para)
6790
msgid "A front end."
6791
msgstr ""
6792
6793
#: serverguide/C/virtualization.xml:1223(para)
6794
msgid "One or more node(s)."
6795
msgstr ""
6796
6797
#: serverguide/C/virtualization.xml:1229(para)
6798
msgid ""
6799
"The following are recommendations, rather than fixed requirements. However, "
6800
"our experience in developing this documentation indicated the following "
6801
"suggestions."
6802
msgstr ""
6803
6804
#: serverguide/C/virtualization.xml:1234(title)
6805
msgid "Front End Requirements"
6806
msgstr ""
6807
6808
#: serverguide/C/virtualization.xml:1236(para)
6809
msgid "Use the following table for a system that will run one or more of:"
6810
msgstr ""
6811
6812
#: serverguide/C/virtualization.xml:1241(para)
6813
msgid "Cloud Controller (CLC)"
6814
msgstr ""
6815
6816
#: serverguide/C/virtualization.xml:1242(para)
6817
msgid "Cluster Controller (CC)"
6818
msgstr ""
6819
6820
#: serverguide/C/virtualization.xml:1243(para)
6821
msgid "Walrus (the S3-like storage service)"
6822
msgstr ""
6823
6824
#: serverguide/C/virtualization.xml:1244(para)
6825
msgid "Storage Controller (SC)"
6826
msgstr ""
6827
6828
#: serverguide/C/virtualization.xml:1248(title)
6829
msgid "UEC Front End Requirements"
6830
msgstr ""
6831
6832
#: serverguide/C/virtualization.xml:1256(para) serverguide/C/virtualization.xml:1318(para)
6833
msgid "Hardware"
6834
msgstr ""
6835
6836
#: serverguide/C/virtualization.xml:1257(para) serverguide/C/virtualization.xml:1319(para)
6837
msgid "Minimum"
6838
msgstr ""
6839
6840
#: serverguide/C/virtualization.xml:1258(para) serverguide/C/virtualization.xml:1320(para)
6841
msgid "Suggested"
6842
msgstr ""
6843
6844
#: serverguide/C/virtualization.xml:1259(para) serverguide/C/virtualization.xml:1321(para)
6845
msgid "Notes"
6846
msgstr ""
6847
6848
#: serverguide/C/virtualization.xml:1264(para) serverguide/C/virtualization.xml:1326(para)
6849
msgid "CPU"
6850
msgstr ""
6851
6852
#: serverguide/C/virtualization.xml:1265(para)
6853
msgid "1 GHz"
6854
msgstr ""
6855
6856
#: serverguide/C/virtualization.xml:1266(para)
6857
msgid "2 x 2 GHz"
6858
msgstr ""
6859
6860
#: serverguide/C/virtualization.xml:1267(para)
6861
msgid ""
6862
"For an <emphasis>all-in-one</emphasis> front end, it helps to have at least "
6863
"a dual core processor."
6864
msgstr ""
6865
6866
#: serverguide/C/virtualization.xml:1270(para) serverguide/C/virtualization.xml:1332(para)
6867
msgid "Memory"
6868
msgstr ""
6869
6870
#: serverguide/C/virtualization.xml:1271(para)
6871
msgid "2 GB"
6872
msgstr ""
6873
6874
#: serverguide/C/virtualization.xml:1272(para) serverguide/C/virtualization.xml:1334(para)
6875
msgid "4 GB"
6876
msgstr ""
6877
6878
#: serverguide/C/virtualization.xml:1273(para)
6879
msgid "The Java web front end benefits from lots of available memory."
6880
msgstr ""
6881
6882
#: serverguide/C/virtualization.xml:1276(para) serverguide/C/virtualization.xml:1338(para)
6883
msgid "Disk"
6884
msgstr ""
6885
6886
#: serverguide/C/virtualization.xml:1277(para) serverguide/C/virtualization.xml:1339(para)
6887
msgid "5400 RPM IDE"
6888
msgstr ""
6889
6890
#: serverguide/C/virtualization.xml:1278(para)
6891
msgid "7200 RPM SATA"
6892
msgstr ""
6893
6894
#: serverguide/C/virtualization.xml:1279(para)
6895
msgid ""
6896
"Slower disks will work, but will yield much longer instance startup times."
6897
msgstr ""
6898
6899
#: serverguide/C/virtualization.xml:1282(para) serverguide/C/virtualization.xml:1344(para)
6900
msgid "Disk Space"
6901
msgstr ""
6902
6903
#: serverguide/C/virtualization.xml:1283(para) serverguide/C/virtualization.xml:1345(para)
6904
msgid "40 GB"
6905
msgstr ""
6906
6907
#: serverguide/C/virtualization.xml:1284(para)
6908
msgid "200 GB"
6909
msgstr ""
6910
6911
#: serverguide/C/virtualization.xml:1285(para)
6912
msgid ""
6913
"40GB is only enough space for only a single image, cache, etc., Eucalyptus "
6914
"does not like to run out of disk space."
6915
msgstr ""
6916
6917
#: serverguide/C/virtualization.xml:1288(para) serverguide/C/virtualization.xml:1350(para) serverguide/C/network-config.xml:13(title)
6918
msgid "Networking"
6919
msgstr "Networking"
6920
6921
#: serverguide/C/virtualization.xml:1289(para) serverguide/C/virtualization.xml:1351(para)
6922
msgid "100 Mbps"
6923
msgstr ""
6924
6925
#: serverguide/C/virtualization.xml:1290(para) serverguide/C/virtualization.xml:1352(para)
6926
msgid "1000 Mbps"
6927
msgstr ""
6928
6929
#: serverguide/C/virtualization.xml:1291(para) serverguide/C/virtualization.xml:1353(para)
6930
msgid ""
6931
"Machine images are hundreds of MB, and need to be copied over the network to "
6932
"nodes."
6933
msgstr ""
6934
6935
#: serverguide/C/virtualization.xml:1299(title)
6936
msgid "Node Requirements"
6937
msgstr ""
6938
6939
#: serverguide/C/virtualization.xml:1301(para)
6940
msgid "The other system(s) are <emphasis>nodes</emphasis>, which will run::"
6941
msgstr ""
6942
6943
#: serverguide/C/virtualization.xml:1306(para)
6944
msgid "the Node Controller (NC)"
6945
msgstr ""
6946
6947
#: serverguide/C/virtualization.xml:1310(title)
6948
msgid "UEC Node Requirements"
6949
msgstr ""
6950
6951
#: serverguide/C/virtualization.xml:1327(para)
6952
msgid "VT Extensions"
6953
msgstr ""
6954
6955
#: serverguide/C/virtualization.xml:1328(para)
6956
msgid "VT, 64-bit, Multicore"
6957
msgstr ""
6958
6959
#: serverguide/C/virtualization.xml:1329(para)
6960
msgid ""
6961
"64-bit can run both i386, and amd64 instances; by default, Eucalyptus will "
6962
"only run 1 VM per CPU core on a Node."
6963
msgstr ""
6964
6965
#: serverguide/C/virtualization.xml:1333(para)
6966
msgid "1 GB"
6967
msgstr ""
6968
6969
#: serverguide/C/virtualization.xml:1335(para)
6970
msgid "Additional memory means more, and larger guests."
6971
msgstr ""
6972
6973
#: serverguide/C/virtualization.xml:1340(para)
6974
msgid "7200 RPM SATA or SCSI"
6975
msgstr ""
6976
6977
#: serverguide/C/virtualization.xml:1341(para)
6978
msgid ""
6979
"Eucalyptus nodes are disk-intensive; I/O wait will likely be the performance "
6980
"bottleneck."
6981
msgstr ""
6982
6983
#: serverguide/C/virtualization.xml:1346(para)
6984
msgid "100 GB"
6985
msgstr ""
6986
6987
#: serverguide/C/virtualization.xml:1347(para)
6988
msgid ""
6989
"Images will be cached locally, Eucalyptus does not like to run out of disk "
6990
"space."
6991
msgstr ""
6992
6993
#: serverguide/C/virtualization.xml:1363(title)
6994
msgid "Installing the Cloud/Cluster/Storage/Walrus Front End Server"
6995
msgstr ""
6996
6997
#: serverguide/C/virtualization.xml:1367(para)
6998
msgid "Download the Ubuntu 10.10 Server ISO file, and burn it to a CD."
6999
msgstr ""
7000
7001
#: serverguide/C/virtualization.xml:1372(para)
7002
msgid ""
7003
"When you boot, select <emphasis>“Install Ubuntu Enterprise "
7004
"Cloud”</emphasis>. The installer will detect if any other Eucalyptus "
7005
"components are present."
7006
msgstr ""
7007
7008
#: serverguide/C/virtualization.xml:1377(para)
7009
msgid ""
7010
"You can then choose which components to install, based on your chosen <ulink "
7011
"url=\"https://help.ubuntu.com/community/UEC/Topologies\">topology</ulink>."
7012
msgstr ""
7013
7014
#: serverguide/C/virtualization.xml:1382(para)
7015
msgid ""
7016
"When asked whether you want a <emphasis>“Cluster”</emphasis> or a "
7017
"<emphasis>“Node”</emphasis> install, select <emphasis>“Cluster”</emphasis>."
7018
msgstr ""
7019
7020
#: serverguide/C/virtualization.xml:1388(para)
7021
msgid ""
7022
"It will ask two other cloud-specific questions during the course of the "
7023
"install:"
7024
msgstr ""
7025
7026
#: serverguide/C/virtualization.xml:1393(para)
7027
msgid "Name of your cluster."
7028
msgstr ""
7029
7030
#: serverguide/C/virtualization.xml:1396(para)
7031
msgid "e.g. <emphasis>cluster1</emphasis>."
7032
msgstr ""
7033
7034
#: serverguide/C/virtualization.xml:1399(para)
7035
msgid ""
7036
"A range of public IP addresses on the LAN that the cloud can allocate to "
7037
"instances."
7038
msgstr ""
7039
7040
#: serverguide/C/virtualization.xml:1402(para)
7041
msgid "e.g. <emphasis>192.168.1.200-192.168.1.249</emphasis>."
7042
msgstr ""
7043
7044
#: serverguide/C/virtualization.xml:1410(title)
7045
msgid "Installing the Node Controller(s)"
7046
msgstr ""
7047
7048
#: serverguide/C/virtualization.xml:1412(para)
7049
msgid ""
7050
"The node controller install is even simpler. Just make sure that you are "
7051
"connected to the network on which the cloud/cluster controller is already "
7052
"running."
7053
msgstr ""
7054
7055
#: serverguide/C/virtualization.xml:1418(para)
7056
msgid "Boot from the same ISO on the node(s)."
7057
msgstr ""
7058
7059
#: serverguide/C/virtualization.xml:1423(para)
7060
msgid ""
7061
"When you boot, select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
7062
msgstr ""
7063
7064
#: serverguide/C/virtualization.xml:1428(para)
7065
msgid "Select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
7066
msgstr ""
7067
7068
#: serverguide/C/virtualization.xml:1433(para)
7069
msgid ""
7070
"It should detect the Cluster and preselect <emphasis>“Node”</emphasis> "
7071
"install for you."
7072
msgstr ""
7073
7074
#: serverguide/C/virtualization.xml:1438(para)
7075
msgid "Confirm the partitioning scheme."
7076
msgstr ""
7077
7078
#: serverguide/C/virtualization.xml:1443(para)
7079
msgid ""
7080
"The rest of the installation should proceed uninterrupted; complete the "
7081
"installation and reboot the node."
7082
msgstr ""
7083
7084
#: serverguide/C/virtualization.xml:1451(title)
7085
msgid "Register the Node(s)"
7086
msgstr ""
7087
7088
#: serverguide/C/virtualization.xml:1456(para)
7089
msgid ""
7090
"Nodes are the physical systems within <application>UEC</application> that "
7091
"actually run the virtual machine instances of the cloud."
7092
msgstr ""
7093
7094
#: serverguide/C/virtualization.xml:1460(para)
7095
msgid "All component registration should be automatic, assuming:"
7096
msgstr ""
7097
7098
#: serverguide/C/virtualization.xml:1466(para)
7099
msgid "Public SSH keys have been exchanged properly."
7100
msgstr ""
7101
7102
#: serverguide/C/virtualization.xml:1471(para)
7103
msgid "The services are configured properly."
7104
msgstr ""
7105
7106
#: serverguide/C/virtualization.xml:1476(para)
7107
msgid ""
7108
"The appropriate <emphasis>uec-component-listener</emphasis> is running."
7109
msgstr ""
7110
7111
#: serverguide/C/virtualization.xml:1481(para)
7112
msgid "Verify Registration."
7113
msgstr ""
7114
7115
#: serverguide/C/virtualization.xml:1487(para)
7116
msgid ""
7117
"Steps a to e should only be required if you're using the <ulink "
7118
"url=\"https://help.ubuntu.com/community/UEC/PackageInstall\">UEC/PackageInsta"
7119
"ll</ulink> method. Otherwise, if you are following this guide, these steps "
7120
"should already be completed automatically for you, and therefore you can "
7121
"skip <emphasis>\"a\"</emphasis> to <emphasis>\"e\"</emphasis>."
7122
msgstr ""
7123
7124
#: serverguide/C/virtualization.xml:1495(para)
7125
msgid "Exchange Public Keys"
7126
msgstr ""
7127
7128
#: serverguide/C/virtualization.xml:1497(para)
7129
msgid ""
7130
"The Cloud Controller's <emphasis>eucalyptus</emphasis> user needs to have "
7131
"SSH access to the Walrus Controller, Cluster Controller, and Storage "
7132
"Controller as the eucalyptus user."
7133
msgstr ""
7134
7135
#: serverguide/C/virtualization.xml:1502(para)
7136
msgid ""
7137
"Install the Cloud Controller's <emphasis>eucalyptus</emphasis> user's public "
7138
"ssh key by:"
7139
msgstr ""
7140
7141
#: serverguide/C/virtualization.xml:1508(para)
7142
msgid ""
7143
"On the target controller, temporarily set a password for the eucalyptus user:"
7144
msgstr ""
7145
7146
#: serverguide/C/virtualization.xml:1512(command)
7147
msgid "sudo passwd eucalyptus"
7148
msgstr ""
7149
7150
#: serverguide/C/virtualization.xml:1516(para)
7151
msgid "Then, on the Cloud Controller:"
7152
msgstr ""
7153
7154
#: serverguide/C/virtualization.xml:1520(command)
7155
msgid ""
7156
"sudo -u eucalyptus ssh-copy-id -i ~eucalyptus/.ssh/id_rsa.pub "
7157
"eucalyptus@<IP_OF_NODE>"
7158
msgstr ""
7159
7160
#: serverguide/C/virtualization.xml:1524(para)
7161
msgid ""
7162
"You can now remove the password of the eucalyptus account on the target "
7163
"controller, if you wish:"
7164
msgstr ""
7165
7166
#: serverguide/C/virtualization.xml:1528(command)
7167
msgid "sudo passwd -d eucalyptus"
7168
msgstr ""
7169
7170
#: serverguide/C/virtualization.xml:1535(para)
7171
msgid "Configuring the Services"
7172
msgstr ""
7173
7174
#: serverguide/C/virtualization.xml:1537(para)
7175
msgid "On the <emphasis>Cloud Controller</emphasis>:"
7176
msgstr ""
7177
7178
#: serverguide/C/virtualization.xml:1543(para)
7179
msgid "For the <emphasis>Cluster Controller</emphasis> Registration:"
7180
msgstr ""
7181
7182
#: serverguide/C/virtualization.xml:1547(para) serverguide/C/virtualization.xml:1575(para)
7183
msgid ""
7184
"Define the shell variable CC_NAME in <filename>/etc/eucalyptus/eucalyptus-"
7185
"cc.conf</filename>"
7186
msgstr ""
7187
7188
#: serverguide/C/virtualization.xml:1549(para)
7189
msgid ""
7190
"Define the shell variable CC_IP_ADDR in <filename>/etc/eucalyptus/eucalyptus-"
7191
"ipaddr.conf</filename>, as a space separated list of one or more IP "
7192
"addresses."
7193
msgstr ""
7194
7195
#: serverguide/C/virtualization.xml:1556(para)
7196
msgid "For the <emphasis>Walrus Controller</emphasis> Registration:"
7197
msgstr ""
7198
7199
#: serverguide/C/virtualization.xml:1560(para)
7200
msgid ""
7201
"Define the shell variable WALRUS_IP_ADDR in "
7202
"<filename>/etc/eucalyptus/eucalyptus-ipaddr.conf</filename>, as a single IP "
7203
"address."
7204
msgstr ""
7205
7206
#: serverguide/C/virtualization.xml:1565(para)
7207
msgid "On the <emphasis>Cluster Controller</emphasis>:"
7208
msgstr ""
7209
7210
#: serverguide/C/virtualization.xml:1571(para)
7211
msgid "For <emphasis>Storage Controller</emphasis> Registration:"
7212
msgstr ""
7213
7214
#: serverguide/C/virtualization.xml:1577(para)
7215
msgid ""
7216
"Define the shell variable SC_IP_ADDR in <filename>/etc/eucalyptus/eucalyptus-"
7217
"ipaddr.conf</filename>, as a space separated list of one or more IP "
7218
"addresses."
7219
msgstr ""
7220
7221
#: serverguide/C/virtualization.xml:1587(para)
7222
msgid "Publish"
7223
msgstr ""
7224
7225
#: serverguide/C/virtualization.xml:1589(para)
7226
msgid "Now start the publication services."
7227
msgstr ""
7228
7229
#: serverguide/C/virtualization.xml:1595(emphasis)
7230
msgid "Walrus Controller:"
7231
msgstr ""
7232
7233
#: serverguide/C/virtualization.xml:1597(command)
7234
msgid "sudo start eucalyptus-walrus-publication"
7235
msgstr ""
7236
7237
#: serverguide/C/virtualization.xml:1601(emphasis)
7238
msgid "Cluster Controller:"
7239
msgstr ""
7240
7241
#: serverguide/C/virtualization.xml:1603(command)
7242
msgid "sudo start eucalyptus-cc-publication"
7243
msgstr ""
7244
7245
#: serverguide/C/virtualization.xml:1607(emphasis)
7246
msgid "Storage Controller:"
7247
msgstr ""
7248
7249
#: serverguide/C/virtualization.xml:1609(command)
7250
msgid "sudo start eucalyptus-sc-publication"
7251
msgstr ""
7252
7253
#: serverguide/C/virtualization.xml:1613(emphasis)
7254
msgid "Node Controller:"
7255
msgstr ""
7256
7257
#: serverguide/C/virtualization.xml:1615(command)
7258
msgid "sudo start eucalyptus-nc-publication"
7259
msgstr ""
7260
7261
#: serverguide/C/virtualization.xml:1622(para)
7262
msgid "Start the Listener"
7263
msgstr ""
7264
7265
#: serverguide/C/virtualization.xml:1624(para)
7266
msgid ""
7267
"On the <emphasis>Cloud Controller</emphasis> and the <emphasis>Cluster "
7268
"Controller(s)</emphasis>, run:"
7269
msgstr ""
7270
7271
#: serverguide/C/virtualization.xml:1629(command)
7272
msgid "sudo start uec-component-listener"
7273
msgstr ""
7274
7275
#: serverguide/C/virtualization.xml:1634(para)
7276
msgid "Verify Registration"
7277
msgstr ""
7278
7279
#: serverguide/C/virtualization.xml:1637(command)
7280
msgid "cat /var/log/eucalyptus/registration.log"
7281
msgstr ""
7282
7283
#: serverguide/C/virtualization.xml:1638(computeroutput)
7284
#, no-wrap
7285
msgid ""
7286
"2010-04-08 15:46:36-05:00 | 24243 -> Calling node cluster1 node "
7287
"10.1.1.75\n"
7288
"2010-04-08 15:46:36-05:00 | 24243 -> euca_conf --register-nodes returned "
7289
"0\n"
7290
"2010-04-08 15:48:47-05:00 | 25858 -> Calling walrus Walrus 10.1.1.71\n"
7291
"2010-04-08 15:48:51-05:00 | 25858 -> euca_conf --register-walrus returned "
7292
"0\n"
7293
"2010-04-08 15:49:04-05:00 | 26237 -> Calling cluster cluster1 10.1.1.71\n"
7294
"2010-04-08 15:49:08-05:00 | 26237 -> euca_conf --register-cluster "
7295
"returned 0\n"
7296
"2010-04-08 15:49:17-05:00 | 26644 -> Calling storage cluster1 storage "
7297
"10.1.1.71\n"
7298
"2010-04-08 15:49:18-05:00 | 26644 -> euca_conf --register-sc returned 0"
7299
msgstr ""
7300
7301
#: serverguide/C/virtualization.xml:1649(para)
7302
msgid "The output on your machine will vary from the example above."
7303
msgstr ""
7304
7305
#: serverguide/C/virtualization.xml:1659(title)
7306
msgid "Obtain Credentials"
7307
msgstr ""
7308
7309
#: serverguide/C/virtualization.xml:1661(para)
7310
msgid ""
7311
"After installing and booting the <emphasis>Cloud Controller</emphasis>, "
7312
"users of the cloud will need to retrieve their credentials. This can be done "
7313
"either through a web browser, or at the command line."
7314
msgstr ""
7315
7316
#: serverguide/C/virtualization.xml:1667(title)
7317
msgid "From a Web Browser"
7318
msgstr ""
7319
7320
#: serverguide/C/virtualization.xml:1671(para)
7321
msgid ""
7322
"From your web browser (either remotely or on your Ubuntu server) access the "
7323
"following URL:"
7324
msgstr ""
7325
7326
#: serverguide/C/virtualization.xml:1674(programlisting) serverguide/C/virtualization.xml:1804(programlisting)
7327
#, no-wrap
7328
msgid ""
7329
"\n"
7330
"https://<cloud-controller-ip-address>:8443/\n"
7331
msgstr ""
7332
7333
#: serverguide/C/virtualization.xml:1679(para)
7334
msgid ""
7335
"You must use a secure connection, so make sure you use \"https\" not "
7336
"\"http\" in your URL. You will get a security certificate warning. You will "
7337
"have to add an exception to view the page. If you do not accept it you will "
7338
"not be able to view the Eucalyptus configuration page."
7339
msgstr ""
7340
7341
#: serverguide/C/virtualization.xml:1687(para)
7342
msgid ""
7343
"Use username <emphasis>'admin'</emphasis> and password "
7344
"<emphasis>'admin'</emphasis> for the first time login (you will be prompted "
7345
"to change your password)."
7346
msgstr ""
7347
7348
#: serverguide/C/virtualization.xml:1693(para)
7349
msgid ""
7350
"Then follow the on-screen instructions to update the admin password and "
7351
"email address."
7352
msgstr ""
7353
7354
#: serverguide/C/virtualization.xml:1698(para)
7355
msgid ""
7356
"Once the first time configuration process is completed, click the "
7357
"<emphasis>'credentials'</emphasis> tab located in the top-left portion of "
7358
"the screen."
7359
msgstr ""
7360
7361
#: serverguide/C/virtualization.xml:1704(para)
7362
msgid ""
7363
"Click the <emphasis>'Download Credentials'</emphasis> button to get your "
7364
"certificates."
7365
msgstr ""
7366
7367
#: serverguide/C/virtualization.xml:1709(para)
7368
msgid "Save them to <filename>~/.euca</filename>."
7369
msgstr ""
7370
7371
#: serverguide/C/virtualization.xml:1714(para)
7372
msgid ""
7373
"Unzip the downloaded zip file into a safe location "
7374
"(<filename>~/.euca</filename>)."
7375
msgstr ""
7376
7377
#: serverguide/C/virtualization.xml:1718(command)
7378
msgid "unzip -d ~/.euca mycreds.zip"
7379
msgstr ""
7380
7381
#: serverguide/C/virtualization.xml:1725(title)
7382
msgid "From a Command Line"
7383
msgstr ""
7384
7385
#: serverguide/C/virtualization.xml:1729(para)
7386
msgid ""
7387
"Alternatively, if you are on the command line of the <emphasis>Cloud "
7388
"Controller</emphasis>, you can run:"
7389
msgstr ""
7390
7391
#: serverguide/C/virtualization.xml:1733(command)
7392
msgid "mkdir -p ~/.euca"
7393
msgstr ""
7394
7395
#: serverguide/C/virtualization.xml:1734(command)
7396
msgid "chmod 700 ~/.euca"
7397
msgstr ""
7398
7399
#: serverguide/C/virtualization.xml:1735(command)
7400
msgid "cd ~/.euca"
7401
msgstr ""
7402
7403
#: serverguide/C/virtualization.xml:1736(command)
7404
msgid "sudo euca_conf --get-credentials mycreds.zip"
7405
msgstr ""
7406
7407
#: serverguide/C/virtualization.xml:1737(command)
7408
msgid "unzip mycreds.zip"
7409
msgstr ""
7410
7411
#: serverguide/C/virtualization.xml:1738(command)
7412
msgid "ln -s ~/.euca/eucarc ~/.eucarc"
7413
msgstr ""
7414
7415
#: serverguide/C/virtualization.xml:1739(command)
7416
msgid "cd -"
7417
msgstr ""
7418
7419
#: serverguide/C/virtualization.xml:1746(title)
7420
msgid "Extracting and Using Your Credentials"
7421
msgstr ""
7422
7423
#: serverguide/C/virtualization.xml:1748(para)
7424
msgid ""
7425
"Now you will need to setup EC2 API and AMI tools on your server using X.509 "
7426
"certificates."
7427
msgstr ""
7428
7429
#: serverguide/C/virtualization.xml:1754(para)
7430
msgid "Install the required cloud user tools:"
7431
msgstr ""
7432
7433
#: serverguide/C/virtualization.xml:1758(command)
7434
msgid "sudo apt-get install euca2ools"
7435
msgstr ""
7436
7437
#: serverguide/C/virtualization.xml:1762(para)
7438
msgid ""
7439
"To validate that everything is working correctly, get the local cluster "
7440
"availability details:"
7441
msgstr ""
7442
7443
#: serverguide/C/virtualization.xml:1766(command)
7444
msgid ". ~/.euca/eucarc"
7445
msgstr ""
7446
7447
#: serverguide/C/virtualization.xml:1767(command)
7448
msgid "euca-describe-availability-zones verbose"
7449
msgstr ""
7450
7451
#: serverguide/C/virtualization.xml:1768(computeroutput)
7452
#, no-wrap
7453
msgid ""
7454
"AVAILABILITYZONE myowncloud 192.168.1.1\n"
7455
"AVAILABILITYZONE |- vm types free / max cpu ram disk\n"
7456
"AVAILABILITYZONE |- m1.small 0004 / 0004 1 128 2\n"
7457
"AVAILABILITYZONE |- c1.medium 0004 / 0004 1 256 5\n"
7458
"AVAILABILITYZONE |- m1.large 0002 / 0002 2 512 10\n"
7459
"AVAILABILITYZONE |- m1.xlarge 0002 / 0002 2 1024 20\n"
7460
"AVAILABILITYZONE |- c1.xlarge 0001 / 0001 4 2048 20"
7461
msgstr ""
7462
7463
#: serverguide/C/virtualization.xml:1778(para)
7464
msgid "Your output from the above command will vary."
7465
msgstr ""
7466
7467
#: serverguide/C/virtualization.xml:1788(title)
7468
msgid "Install an Image from the Store"
7469
msgstr ""
7470
7471
#: serverguide/C/virtualization.xml:1790(para)
7472
msgid ""
7473
"The following is by far the simplest way to install an image. However, "
7474
"advanced users may be interested in learning how to <ulink "
7475
"url=\"https://help.ubuntu.com/community/UEC/BundlingImages\">Bundle their "
7476
"own image</ulink>."
7477
msgstr ""
7478
7479
#: serverguide/C/virtualization.xml:1795(para)
7480
msgid ""
7481
"The simplest way to add an image to <application>UEC</application> is to "
7482
"install it from the Image Store on the UEC web interface."
7483
msgstr ""
7484
7485
#: serverguide/C/virtualization.xml:1801(para)
7486
msgid ""
7487
"Access the web interface at the following URL (Make sure you specify https):"
7488
msgstr ""
7489
7490
#: serverguide/C/virtualization.xml:1809(para)
7491
msgid ""
7492
"Enter your login and password (if requested, as you may still be logged in "
7493
"from earlier)."
7494
msgstr ""
7495
7496
#: serverguide/C/virtualization.xml:1814(para)
7497
msgid "Click on the <emphasis>Store</emphasis> tab."
7498
msgstr ""
7499
7500
#: serverguide/C/virtualization.xml:1819(para)
7501
msgid "Browse available images."
7502
msgstr ""
7503
7504
#: serverguide/C/virtualization.xml:1824(para)
7505
msgid "Click on <emphasis>install</emphasis> for the image you want."
7506
msgstr ""
7507
7508
#: serverguide/C/virtualization.xml:1830(para)
7509
msgid ""
7510
"Once the image has been downloaded and installed, you can click on "
7511
"<emphasis>\"How to run?\"</emphasis> that will be displayed below the image "
7512
"button to view the command to execute to instantiate (start) this image. The "
7513
"image will also appear on the list given on the <emphasis>Image</emphasis> "
7514
"tab."
7515
msgstr ""
7516
7517
#: serverguide/C/virtualization.xml:1838(title)
7518
msgid "Run an Image"
7519
msgstr ""
7520
7521
#: serverguide/C/virtualization.xml:1840(para)
7522
msgid "There are multiple ways to instantiate an image in UEC:"
7523
msgstr ""
7524
7525
#: serverguide/C/virtualization.xml:1845(para)
7526
msgid "Use the command line."
7527
msgstr ""
7528
7529
#: serverguide/C/virtualization.xml:1846(para)
7530
msgid ""
7531
"Use one of the UEC compatible management tools such as "
7532
"<emphasis>Landscape</emphasis>."
7533
msgstr ""
7534
7535
#: serverguide/C/virtualization.xml:1848(para)
7536
msgid ""
7537
"Use the <ulink "
7538
"url=\"https://help.ubuntu.com/community/UEC/ElasticFox\">ElasticFox</ulink> "
7539
"extension to Firefox."
7540
msgstr ""
7541
7542
#: serverguide/C/virtualization.xml:1854(para)
7543
msgid "Here we will describe the process from the command line:"
7544
msgstr ""
7545
7546
#: serverguide/C/virtualization.xml:1860(para)
7547
msgid ""
7548
"Before running an instance of your image, you should first create a "
7549
"<emphasis>keypair</emphasis> (ssh key) that you can use to log into your "
7550
"instance as root, once it boots. The key is stored, so you will only have to "
7551
"do this once."
7552
msgstr ""
7553
7554
#: serverguide/C/virtualization.xml:1864(para)
7555
msgid "Run the following command:"
7556
msgstr ""
7557
7558
#: serverguide/C/virtualization.xml:1867(programlisting)
7559
#, no-wrap
7560
msgid ""
7561
"\n"
7562
"if [ ! -e ~/.euca/mykey.priv ]; then\n"
7563
" mkdir -p -m 700 ~/.euca\n"
7564
" touch ~/.euca/mykey.priv\n"
7565
" chmod 0600 ~/.euca/mykey.priv\n"
7566
" euca-add-keypair mykey > ~/.euca/mykey.priv\n"
7567
"fi\n"
7568
msgstr ""
7569
7570
#: serverguide/C/virtualization.xml:1876(para)
7571
msgid ""
7572
"You can call your key whatever you like (in this example, the key is called "
7573
"<emphasis>'mykey'</emphasis>), but remember what it is called. If you "
7574
"forget, you can always run <command>euca-describe-keypairs</command> to get "
7575
"a list of created keys stored in the system."
7576
msgstr ""
7577
7578
#: serverguide/C/virtualization.xml:1883(para)
7579
msgid "You must also allow access to port 22 in your instances:"
7580
msgstr ""
7581
7582
#: serverguide/C/virtualization.xml:1887(command)
7583
msgid "euca-authorize default -P tcp -p 22 -s 0.0.0.0/0"
7584
msgstr ""
7585
7586
#: serverguide/C/virtualization.xml:1891(para)
7587
msgid "Next, you can create instances of your registered image:"
7588
msgstr ""
7589
7590
#: serverguide/C/virtualization.xml:1895(command)
7591
msgid "euca-run-instances $EMI -k mykey -t m1.small"
7592
msgstr ""
7593
7594
#: serverguide/C/virtualization.xml:1898(para)
7595
msgid ""
7596
"If you receive an error regarding <emphasis>image_id</emphasis>, you may "
7597
"find it by viewing Images page or click <emphasis>\"How to Run\"</emphasis> "
7598
"on the <emphasis>Store</emphasis> page to see the sample command."
7599
msgstr ""
7600
7601
#: serverguide/C/virtualization.xml:1905(para)
7602
msgid ""
7603
"The first time you run an instance, the system will be setting up caches for "
7604
"the image from which it will be created. This can often take some time the "
7605
"first time an instance is run given that VM images are usually quite large."
7606
msgstr ""
7607
7608
#: serverguide/C/virtualization.xml:1909(para)
7609
msgid "To monitor the state of your instance, run:"
7610
msgstr ""
7611
7612
#: serverguide/C/virtualization.xml:1913(command)
7613
msgid "watch -n5 euca-describe-instances"
7614
msgstr ""
7615
7616
#: serverguide/C/virtualization.xml:1915(para)
7617
msgid ""
7618
"In the output, you should see information about the instance, including its "
7619
"state. While first-time caching is being performed, the instance's state "
7620
"will be <emphasis>'pending'</emphasis>."
7621
msgstr ""
7622
7623
#: serverguide/C/virtualization.xml:1921(para)
7624
msgid ""
7625
"When the instance is fully started, the above state will become "
7626
"<emphasis>'running'</emphasis>. Look at the IP address assigned to your "
7627
"instance in the output, then connect to it:"
7628
msgstr ""
7629
7630
#: serverguide/C/virtualization.xml:1926(command)
7631
msgid ""
7632
"IPADDR=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | awk "
7633
"'{print $4}')"
7634
msgstr ""
7635
7636
#: serverguide/C/virtualization.xml:1927(command)
7637
msgid "ssh -i ~/.euca/mykey.priv ubuntu@$IPADDR"
7638
msgstr ""
7639
7640
#: serverguide/C/virtualization.xml:1931(para)
7641
msgid ""
7642
"And when you are done with this instance, exit your SSH connection, then "
7643
"terminate your instance:"
7644
msgstr ""
7645
7646
#: serverguide/C/virtualization.xml:1935(command)
7647
msgid ""
7648
"INSTANCEID=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | "
7649
"awk '{print $2}')"
7650
msgstr ""
7651
7652
#: serverguide/C/virtualization.xml:1936(command)
7653
msgid "euca-terminate-instances $INSTANCEID"
7654
msgstr ""
7655
7656
#: serverguide/C/virtualization.xml:1944(para)
7657
msgid ""
7658
"The <application>cloud-init</application> package provides \"first boot\" "
7659
"functionality for the Ubuntu UEC images. It is in charge of taking the "
7660
"generic filesystem image that is booting and customizing it for this "
7661
"particular instance. That includes things like:"
7662
msgstr ""
7663
7664
#: serverguide/C/virtualization.xml:1952(para)
7665
msgid "Setting the hostname."
7666
msgstr ""
7667
7668
#: serverguide/C/virtualization.xml:1957(para)
7669
msgid ""
7670
"Putting the provided ssh public keys into "
7671
"<filename>~ubuntu/.ssh/authorized_keys</filename>."
7672
msgstr ""
7673
7674
#: serverguide/C/virtualization.xml:1962(para)
7675
msgid "Running a user provided script, or otherwise modifying the image."
7676
msgstr ""
7677
7678
#: serverguide/C/virtualization.xml:1968(para)
7679
msgid ""
7680
"Setting hostname and configuring a system so the person who launched it can "
7681
"actually log into it are not terribly interesting. The interesting things "
7682
"that can be done with <application>cloud-init</application> are made "
7683
"possible by data provided at launch time called <ulink "
7684
"url=\"http://developer.amazonwebservices.com/connect/entry.jspa?externalID=10"
7685
"85\">user-data</ulink>."
7686
msgstr ""
7687
7688
#: serverguide/C/virtualization.xml:1974(para)
7689
msgid "First, install the <application>cloud-init</application> package:"
7690
msgstr ""
7691
7692
#: serverguide/C/virtualization.xml:1979(command)
7693
msgid "sudo apt-get install cloud-init"
7694
msgstr ""
7695
7696
#: serverguide/C/virtualization.xml:1982(para)
7697
msgid ""
7698
"If the user-data starts with <emphasis>'#!'</emphasis>, then it will be "
7699
"stored and executed as root late in the boot process of the instance's first "
7700
"boot (similar to a traditional 'rc.local' script). Output from the script is "
7701
"directed to the console."
7702
msgstr ""
7703
7704
#: serverguide/C/virtualization.xml:1987(para)
7705
msgid ""
7706
"For example, create a file named <filename>ud.txt</filename> containing:"
7707
msgstr ""
7708
7709
#: serverguide/C/virtualization.xml:1991(programlisting)
7710
#, no-wrap
7711
msgid ""
7712
"\n"
7713
"#!/bin/sh\n"
7714
"echo ========== Hello World: $(date) ==========\n"
7715
"echo \"I have been up for $(cut -d\\ -f 1 < /proc/uptime) sec\"\n"
7716
msgstr ""
7717
7718
#: serverguide/C/virtualization.xml:1997(para)
7719
msgid ""
7720
"Now start an instance with the <emphasis>--user-data-file</emphasis> option:"
7721
msgstr ""
7722
7723
#: serverguide/C/virtualization.xml:2002(command)
7724
msgid "euca-run-instances $EMI -k mykey -t m1.small --user-data-file=ud.txt"
7725
msgstr ""
7726
7727
#: serverguide/C/virtualization.xml:2005(para)
7728
msgid ""
7729
"Wait now for the system to come up and console to be available. To see the "
7730
"result of the data file commands enter:"
7731
msgstr ""
7732
7733
#: serverguide/C/virtualization.xml:2010(command)
7734
msgid "euca-get-console-output $EMI | grep --after-context=1 Hello"
7735
msgstr ""
7736
7737
#: serverguide/C/virtualization.xml:2011(computeroutput)
7738
#, no-wrap
7739
msgid ""
7740
"========== Hello World: Mon Mar 29 18:05:05 UTC 2010 ==========\n"
7741
"I have been up for 28.26 sec"
7742
msgstr ""
7743
7744
#: serverguide/C/virtualization.xml:2016(para)
7745
msgid "Your output may vary."
7746
msgstr ""
7747
7748
#: serverguide/C/virtualization.xml:2021(para)
7749
msgid ""
7750
"The simple approach shown above gives a great deal of power. The user-data "
7751
"can contain a script in any language where an interpreter already exists in "
7752
"the image (#!/bin/sh, #!/usr/bin/python, #!/usr/bin/perl, #!/usr/bin/awk ... "
7753
")."
7754
msgstr ""
7755
7756
#: serverguide/C/virtualization.xml:2026(para)
7757
msgid ""
7758
"For many cases, the user may not be interested in writing a program. For "
7759
"this case, cloud-init provides <emphasis>\"cloud-config\"</emphasis>, a "
7760
"configuration based approach towards customization. To utilize the cloud-"
7761
"config syntax, the supplied user-data must start with a <emphasis>'#cloud-"
7762
"config'</emphasis>."
7763
msgstr ""
7764
7765
#: serverguide/C/virtualization.xml:2031(para)
7766
msgid ""
7767
"For example, create a text file named <filename>clout-config.txt</filename> "
7768
"containing:"
7769
msgstr ""
7770
7771
#: serverguide/C/virtualization.xml:2035(programlisting)
7772
#, no-wrap
7773
msgid ""
7774
"\n"
7775
"#cloud-config\n"
7776
"apt_upgrade: true\n"
7777
"apt_sources:\n"
7778
"- source: \"ppa:ubuntu-server-edgers/server-edgers-apache \"\n"
7779
"\n"
7780
"packages:\n"
7781
"- build-essential\n"
7782
"- pastebinit\n"
7783
"\n"
7784
"runcmd:\n"
7785
"- echo ======= Hello World =====\n"
7786
"- echo \"I have been up for $(cut -d\\ -f 1 < /proc/uptime) sec\"\n"
7787
msgstr ""
7788
7789
#: serverguide/C/virtualization.xml:2050(para)
7790
msgid "Create a new instance:"
7791
msgstr ""
7792
7793
#: serverguide/C/virtualization.xml:2055(command)
7794
msgid ""
7795
"euca-run-instances $EMI -k mykey -t m1.small --user-data-file=cloud-"
7796
"config.txt"
7797
msgstr ""
7798
7799
#: serverguide/C/virtualization.xml:2058(para)
7800
msgid "Now, when the above system is booted, it will have:"
7801
msgstr ""
7802
7803
#: serverguide/C/virtualization.xml:2063(para)
7804
msgid "Added the Apache Edgers PPA."
7805
msgstr ""
7806
7807
#: serverguide/C/virtualization.xml:2064(para)
7808
msgid "Run an upgrade to get all updates available"
7809
msgstr ""
7810
7811
#: serverguide/C/virtualization.xml:2065(para)
7812
msgid "Installed the 'build-essential' and 'pastebinit' packages"
7813
msgstr ""
7814
7815
#: serverguide/C/virtualization.xml:2066(para)
7816
msgid "Printed a similar message to the script above"
7817
msgstr ""
7818
7819
#: serverguide/C/virtualization.xml:2070(para)
7820
msgid ""
7821
"The <emphasis>Apache Edgers PPA</emphasis>, in the above example, contains "
7822
"the latest version of Apache from upstream source repositories. Package "
7823
"versions in the PPA are unsupported, and depending on your situation, this "
7824
"may or may not be desirable. See the <ulink "
7825
"url=\"https://launchpad.net/~ubuntu-server-edgers\">Ubuntu Server "
7826
"Edgers</ulink> web page for more details."
7827
msgstr ""
7828
7829
#: serverguide/C/virtualization.xml:2077(para)
7830
msgid ""
7831
"The <emphasis>'runcmd'</emphasis> commands are run at the same point in boot "
7832
"that the <emphasis>'#!'</emphasis> script would run in the previous example. "
7833
"It is present to allow you to get the full power of a scripting language if "
7834
"you need it without abandoning <emphasis>cloud-config</emphasis>."
7835
msgstr ""
7836
7837
#: serverguide/C/virtualization.xml:2082(para)
7838
msgid ""
7839
"For more information on what kinds of things can be done with "
7840
"<application>cloud-config</application>, see <ulink "
7841
"url=\"http://bazaar.launchpad.net/~cloud-init-dev/cloud-"
7842
"init/trunk/files/head:/doc/examples/\">doc/examples</ulink> in the source."
7843
msgstr ""
7844
7845
#: serverguide/C/virtualization.xml:2091(title) serverguide/C/dns.xml:619(title)
7846
msgid "More Information"
7847
msgstr "More Information"
7848
7849
#: serverguide/C/virtualization.xml:2093(para)
7850
msgid ""
7851
"How to use the <ulink "
7852
"url=\"https://help.ubuntu.com/community/UEC/StorageController\">Storage "
7853
"Controller</ulink>"
7854
msgstr ""
7855
7856
#: serverguide/C/virtualization.xml:2097(para)
7857
msgid "Controlling eucalyptus services:"
7858
msgstr ""
7859
7860
#: serverguide/C/virtualization.xml:2102(para)
7861
msgid ""
7862
"sudo service eucalyptus [start|stop|restart] (on the CLC/CC/SC/Walrus side)"
7863
msgstr ""
7864
7865
#: serverguide/C/virtualization.xml:2103(para)
7866
msgid "sudo service eucalyptus-nc [start|stop|restart] (on the Node side)"
7867
msgstr ""
7868
7869
#: serverguide/C/virtualization.xml:2106(para)
7870
msgid "Locations of some important files:"
7871
msgstr ""
7872
7873
#: serverguide/C/virtualization.xml:2113(emphasis)
7874
msgid "Log files:"
7875
msgstr ""
7876
7877
#: serverguide/C/virtualization.xml:2116(para)
7878
msgid "/var/log/eucalyptus"
7879
msgstr ""
7880
7881
#: serverguide/C/virtualization.xml:2121(emphasis)
7882
msgid "Configuration files:"
7883
msgstr ""
7884
7885
#: serverguide/C/virtualization.xml:2124(para)
7886
msgid "/etc/eucalyptus"
7887
msgstr ""
7888
7889
#: serverguide/C/virtualization.xml:2129(emphasis)
7890
msgid "Database:"
7891
msgstr ""
7892
7893
#: serverguide/C/virtualization.xml:2132(para)
7894
msgid "/var/lib/eucalyptus/db"
7895
msgstr ""
7896
7897
#: serverguide/C/virtualization.xml:2137(emphasis)
7898
msgid "Keys:"
7899
msgstr ""
7900
7901
#: serverguide/C/virtualization.xml:2140(para)
7902
msgid "/var/lib/eucalyptus"
7903
msgstr ""
7904
7905
#: serverguide/C/virtualization.xml:2141(para)
7906
msgid "/var/lib/eucalyptus/.ssh"
7907
msgstr ""
7908
7909
#: serverguide/C/virtualization.xml:2147(para)
7910
msgid ""
7911
"Don't forget to source your <filename>~/.euca/eucarc</filename> before "
7912
"running the client tools."
7913
msgstr ""
7914
7915
#: serverguide/C/virtualization.xml:2158(para)
7916
msgid ""
7917
"For information on loading instances see the <ulink "
7918
"url=\"https://help.ubuntu.com/community/Eucalyptus\">Eucalyptus Wiki</ulink> "
7919
"page."
7920
msgstr ""
7921
"For information on loading instances see the <ulink "
7922
"url=\"https://help.ubuntu.com/community/Eucalyptus\">Eucalyptus Wiki</ulink> "
7923
"page."
7924
7925
#: serverguide/C/virtualization.xml:2163(para)
7926
msgid ""
7927
"<ulink url=\"http://open.eucalyptus.com/\">Eucalyptus Project Site (forums, "
7928
"documentation, downloads)</ulink>."
7929
msgstr ""
7930
7931
#: serverguide/C/virtualization.xml:2168(para)
7932
msgid ""
7933
"<ulink url=\"https://launchpad.net/eucalyptus/\">Eucalyptus on Launchpad "
7934
"(bugs, code)</ulink>."
7935
msgstr ""
7936
7937
#: serverguide/C/virtualization.xml:2173(para)
7938
msgid ""
7939
"<ulink "
7940
"url=\"http://open.eucalyptus.com/wiki/EucalyptusTroubleshooting_v1.5\">Eucaly"
7941
"ptus Troubleshooting (1.5)</ulink>."
7942
msgstr ""
7943
7944
#: serverguide/C/virtualization.xml:2178(para)
7945
msgid ""
7946
"<ulink url=\"http://support.rightscale.com/2._References/02-"
7947
"Cloud_Infrastructures/Eucalyptus/03-"
7948
"Administration_Guide/Register_with_RightScale\"> Register your cloud with "
7949
"RightScale</ulink>."
7950
msgstr ""
7951
7952
#: serverguide/C/virtualization.xml:2184(para)
7953
msgid ""
7954
"You can also find help in the <emphasis>#ubuntu-virt</emphasis>, "
7955
"<emphasis>#eucalyptus</emphasis>, and <emphasis>#ubuntu-server</emphasis> "
7956
"IRC channels on <ulink url=\"http://freenode.net\">Freenode</ulink>."
7957
msgstr ""
7958
"You can also find help in the <emphasis>#ubuntu-virt</emphasis>, "
7959
"<emphasis>#eucalyptus</emphasis>, and <emphasis>#ubuntu-server</emphasis> "
7960
"IRC channels on <ulink url=\"http://freenode.net\">Freenode</ulink>."
7961
7962
#: serverguide/C/virtualization.xml:2193(title)
7963
msgid "Glossary"
7964
msgstr ""
7965
7966
#: serverguide/C/virtualization.xml:2195(para)
7967
msgid ""
7968
"The Ubuntu Enterprise Cloud documentation uses terminology that might be "
7969
"unfamiliar to some readers. This page is intended to provide a glossary of "
7970
"such terms and acronyms."
7971
msgstr ""
7972
7973
#: serverguide/C/virtualization.xml:2202(para)
7974
msgid ""
7975
"<emphasis>Cloud</emphasis> - A federated set of physical machines that offer "
7976
"computing resources through virtual machines, provisioned and recollected "
7977
"dynamically."
7978
msgstr ""
7979
7980
#: serverguide/C/virtualization.xml:2208(para)
7981
msgid ""
7982
"<emphasis>Cloud Controller (CLC)</emphasis> - Eucalyptus component that "
7983
"provides the web UI (an https server on port 8443), and implements the "
7984
"Amazon EC2 API. There should be only one Cloud Controller in an installation "
7985
"of UEC. This service is provided by the Ubuntu <application>eucalyptus-"
7986
"cloud</application> package."
7987
msgstr ""
7988
7989
#: serverguide/C/virtualization.xml:2215(para)
7990
msgid ""
7991
"<emphasis>Cluster</emphasis> - A collection of nodes, associated with a "
7992
"Cluster Controller. There can be more than one Cluster in an installation of "
7993
"UEC. Clusters are sometimes physically separate sets of nodes. (e.g. floor1, "
7994
"floor2, floor2)."
7995
msgstr ""
7996
7997
#: serverguide/C/virtualization.xml:2221(para)
7998
msgid ""
7999
"<emphasis>Cluster Controller (CC)</emphasis> - Eucalyptus component that "
8000
"manages collections of node resources. This service is provided by the "
8001
"Ubuntu <application>eucalyptus-cc</application> package."
8002
msgstr ""
8003
8004
#: serverguide/C/virtualization.xml:2227(para)
8005
msgid "<emphasis>EBS</emphasis> - Elastic Block Storage."
8006
msgstr ""
8007
8008
#: serverguide/C/virtualization.xml:2232(para)
8009
msgid ""
8010
"<emphasis>EC2</emphasis> - Elastic Compute Cloud. Amazon's pay-by-the-hour, "
8011
"pay-by-the-gigabyte public cloud computing offering."
8012
msgstr ""
8013
8014
#: serverguide/C/virtualization.xml:2237(para)
8015
msgid "<emphasis>EKI</emphasis> - Eucalyptus Kernel Image."
8016
msgstr ""
8017
8018
#: serverguide/C/virtualization.xml:2242(para)
8019
msgid "<emphasis>EMI</emphasis> - Eucalyptus Machine Image."
8020
msgstr ""
8021
8022
#: serverguide/C/virtualization.xml:2247(para)
8023
msgid "<emphasis>ERI</emphasis> - Eucalyptus Ramdisk Image."
8024
msgstr ""
8025
8026
#: serverguide/C/virtualization.xml:2252(para)
8027
msgid ""
8028
"<emphasis>Eucalyptus</emphasis> - Elastic Utility Computing Architecture for "
8029
"Linking Your Programs To Useful Systems. An open source project originally "
8030
"from the University of California at Santa Barbara, now supported by "
8031
"Eucalyptus Systems, a Canonical Partner."
8032
msgstr ""
8033
8034
#: serverguide/C/virtualization.xml:2259(para)
8035
msgid ""
8036
"<emphasis>Front-end</emphasis> - Physical machine hosting one (or more) of "
8037
"the high level Eucalyptus components (cloud, walrus, storage controller, "
8038
"cluster controller)."
8039
msgstr ""
8040
8041
#: serverguide/C/virtualization.xml:2265(para)
8042
msgid ""
8043
"<emphasis>Node</emphasis> - A node is a physical machine that's capable of "
8044
"running virtual machines, running a node controller. Within Ubuntu, this "
8045
"generally means that the CPU has VT extensions, and can run the KVM "
8046
"hypervisor."
8047
msgstr ""
8048
8049
#: serverguide/C/virtualization.xml:2271(para)
8050
msgid ""
8051
"<emphasis>Node Controller (NC)</emphasis> - Eucalyptus component that runs "
8052
"on nodes which host the virtual machines that comprise the cloud. This "
8053
"service is provided by the Ubuntu package <application>eucalyptus-"
8054
"nc</application>."
8055
msgstr ""
8056
8057
#: serverguide/C/virtualization.xml:2277(para)
8058
msgid ""
8059
"<emphasis>S3</emphasis> - Simple Storage Service. Amazon's pay-by-the-"
8060
"gigabyte persistent storage solution for EC2."
8061
msgstr ""
8062
8063
#: serverguide/C/virtualization.xml:2282(para)
8064
msgid ""
8065
"<emphasis>Storage Controller (SC)</emphasis> - Eucalyptus component that "
8066
"manages dynamic block storage services (EBS). Each 'cluster' in a Eucalyptus "
8067
"installation can have its own Storage Controller. This component is provided "
8068
"by the <application>eucalyptus-sc</application> package."
8069
msgstr ""
8070
8071
#: serverguide/C/virtualization.xml:2289(para)
8072
msgid ""
8073
"<emphasis>UEC</emphasis> - Ubuntu Enterprise Cloud. Ubuntu's cloud computing "
8074
"solution, based on Eucalyptus."
8075
msgstr ""
8076
8077
#: serverguide/C/virtualization.xml:2294(para)
8078
msgid "<emphasis>VM</emphasis> - Virtual Machine."
8079
msgstr ""
8080
8081
#: serverguide/C/virtualization.xml:2299(para)
8082
msgid ""
8083
"<emphasis>VT</emphasis> - Virtualization Technology. An optional feature of "
8084
"some modern CPUs, allowing for accelerated virtual machine hosting."
8085
msgstr ""
8086
8087
#: serverguide/C/virtualization.xml:2304(para)
8088
msgid ""
8089
"<emphasis>Walrus</emphasis> - Eucalyptus component that implements the "
8090
"Amazon S3 API, used for storing VM images and user storage using S3 bucket "
8091
"put/get abstractions."
8092
msgstr ""
8093
8094
#: serverguide/C/vcs.xml:13(title)
8095
msgid "Version Control System"
8096
msgstr "Version Control System"
8097
8098
#: serverguide/C/vcs.xml:14(para)
8099
msgid ""
8100
"Version control is the art of managing changes to information. It has long "
8101
"been a critical tool for programmers, who typically spend their time making "
8102
"small changes to software and then undoing those changes the next day. But "
8103
"the usefulness of version control software extends far beyond the bounds of "
8104
"the software development world. Anywhere you can find people using computers "
8105
"to manage information that changes often, there is room for version control."
8106
msgstr ""
8107
"Version control is the art of managing changes to information. It has long "
8108
"been a critical tool for programmers, who typically spend their time making "
8109
"small changes to software and then undoing those changes the next day. But "
8110
"the usefulness of version control software extends far beyond the bounds of "
8111
"the software development world. Anywhere you can find people using computers "
8112
"to manage information that changes often, there is room for version control."
8113
8114
#: serverguide/C/vcs.xml:17(title)
8115
msgid "Bazaar"
8116
msgstr "Bazaar"
8117
8118
#: serverguide/C/vcs.xml:18(para)
8119
msgid ""
8120
"Bazaar is a new version control system sponsored by Canonical, the "
8121
"commercial company behind Ubuntu. Unlike Subversion and CVS that only "
8122
"support a central repository model, Bazaar also supports "
8123
"<emphasis>distributed version control</emphasis>, giving people the ability "
8124
"to collaborate more efficiently. In particular, Bazaar is designed to "
8125
"maximize the level of community participation in open source projects."
8126
msgstr ""
8127
"Bazaar is a new version control system sponsored by Canonical, the "
8128
"commercial company behind Ubuntu. Unlike Subversion and CVS that only "
8129
"support a central repository model, Bazaar also supports "
8130
"<emphasis>distributed version control</emphasis>, giving people the ability "
8131
"to collaborate more efficiently. In particular, Bazaar is designed to "
8132
"maximise the level of community participation in open source projects."
8133
8134
#: serverguide/C/vcs.xml:29(para)
8135
msgid ""
8136
"At a terminal prompt, enter the following command to install "
8137
"<application>bzr</application>: <screen>\n"
8138
"<command>sudo apt-get install bzr</command>\n"
8139
"</screen>"
8140
msgstr ""
8141
"At a terminal prompt, enter the following command to install "
8142
"<application>bzr</application>: <screen>\n"
8143
"<command>sudo apt-get install bzr</command>\n"
8144
"</screen>"
8145
8146
#: serverguide/C/vcs.xml:40(para)
8147
msgid ""
8148
"To introduce yourself to <application>bzr</application>, use the "
8149
"<emphasis>whoami</emphasis> command like this: <screen>\n"
8150
"<command>$ bzr whoami 'Joe Doe <joe.doe@gmail.com>'</command>\n"
8151
"</screen>"
8152
msgstr ""
8153
"To introduce yourself to <application>bzr</application>, use the "
8154
"<emphasis>whoami</emphasis> command like this: <screen>\n"
8155
"<command>$ bzr whoami 'Joe Doe <joe.doe@gmail.com>'</command>\n"
8156
"</screen>"
8157
8158
#: serverguide/C/vcs.xml:49(title)
8159
msgid "Learning Bazaar"
8160
msgstr "Learning Bazaar"
8161
8162
#: serverguide/C/vcs.xml:50(para)
8163
msgid ""
8164
"Bazaar comes with bundled documentation installed into "
8165
"<application>/usr/share/doc/bzr/html</application> by default. The tutorial "
8166
"is a good place to start. The <application>bzr</application> command also "
8167
"comes with built-in help: <screen>\n"
8168
"<command>$ bzr help</command>\n"
8169
"</screen>"
8170
msgstr ""
8171
"Bazaar comes with bundled documentation installed into "
8172
"<application>/usr/share/doc/bzr/html</application> by default. The tutorial "
8173
"is a good place to start. The <application>bzr</application> command also "
8174
"comes with built-in help: <screen>\n"
8175
"<command>$ bzr help</command>\n"
8176
"</screen>"
8177
8178
#: serverguide/C/vcs.xml:60(para)
8179
msgid ""
8180
"To learn more about the <emphasis>foo</emphasis> command: <screen>\n"
8181
"<command>$ bzr help foo</command>\n"
8182
"</screen>"
8183
msgstr ""
8184
"To learn more about the <emphasis>foo</emphasis> command: <screen>\n"
8185
"<command>$ bzr help foo</command>\n"
8186
"</screen>"
8187
8188
#: serverguide/C/vcs.xml:68(title)
8189
msgid "Launchpad Integration"
8190
msgstr "Launchpad Integration"
8191
8192
#: serverguide/C/vcs.xml:69(para)
8193
msgid ""
8194
"While highly useful as a stand-alone system, Bazaar has good, optional "
8195
"integration with <ulink url=\"https://launchpad.net/\">Launchpad</ulink>, "
8196
"the collaborative development system used by Canonical and the broader open "
8197
"source community to manage and extend Ubuntu itself. For information on how "
8198
"Bazaar can be used with Launchpad to collaborate on open source projects, "
8199
"see <ulink url=\"http://bazaar-vcs.org/LaunchpadIntegration/\"> "
8200
"http://bazaar-vcs.org/LaunchpadIntegration</ulink>."
8201
msgstr ""
8202
"While highly useful as a stand-alone system, Bazaar has good, optional "
8203
"integration with <ulink url=\"https://launchpad.net/\">Launchpad</ulink>, "
8204
"the collaborative development system used by Canonical and the broader open "
8205
"source community to manage and extend Ubuntu itself. For information on how "
8206
"Bazaar can be used with Launchpad to collaborate on open source projects, "
8207
"see <ulink url=\"http://bazaar-vcs.org/LaunchpadIntegration/\"> "
8208
"http://bazaar-vcs.org/LaunchpadIntegration</ulink>."
8209
8210
#: serverguide/C/vcs.xml:81(title)
8211
msgid "Subversion"
8212
msgstr "Subversion"
8213
8214
#: serverguide/C/vcs.xml:82(para)
8215
msgid ""
8216
"Subversion is an open source version control system. Using Subversion, you "
8217
"can record the history of source files and documents. It manages files and "
8218
"directories over time. A tree of files is placed into a central repository. "
8219
"The repository is much like an ordinary file server, except that it "
8220
"remembers every change ever made to files and directories."
8221
msgstr ""
8222
"Subversion is an open source version control system. Using Subversion, you "
8223
"can record the history of source files and documents. It manages files and "
8224
"directories over time. A tree of files is placed into a central repository. "
8225
"The repository is much like an ordinary file server, except that it "
8226
"remembers every change ever made to files and directories."
8227
8228
#: serverguide/C/vcs.xml:87(para)
8229
msgid ""
8230
"To access Subversion repository using the HTTP protocol, you must install "
8231
"and configure a web server. Apache2 is proven to work with Subversion. "
8232
"Please refer to the HTTP subsection in the Apache2 section to install and "
8233
"configure Apache2. To access the Subversion repository using the HTTPS "
8234
"protocol, you must install and configure a digital certificate in your "
8235
"Apache 2 web server. Please refer to the HTTPS subsection in the Apache2 "
8236
"section to install and configure the digital certificate."
8237
msgstr ""
8238
"To access Subversion repository using the HTTP protocol, you must install "
8239
"and configure a web server. Apache2 is proven to work with Subversion. "
8240
"Please refer to the HTTP subsection in the Apache2 section to install and "
8241
"configure Apache2. To access the Subversion repository using the HTTPS "
8242
"protocol, you must install and configure a digital certificate in your "
8243
"Apache 2 Web server. Please refer to the HTTPS subsection in the Apache2 "
8244
"section to install and configure the digital certificate."
8245
8246
#: serverguide/C/vcs.xml:96(para)
8247
msgid ""
8248
"To install Subversion, run the following command from a terminal prompt:"
8249
msgstr ""
8250
"To install Subversion, run the following command from a terminal prompt:"
8251
8252
#: serverguide/C/vcs.xml:101(command)
8253
msgid "sudo apt-get install subversion libapache2-svn"
8254
msgstr "sudo apt-get install subversion libapache2-svn"
8255
8256
#: serverguide/C/vcs.xml:108(para)
8257
msgid ""
8258
"This step assumes you have installed above mentioned packages on your "
8259
"system. This section explains how to create a Subversion repository and "
8260
"access the project."
8261
msgstr ""
8262
"This step assumes you have installed above mentioned packages on your "
8263
"system. This section explains how to create a Subversion repository and "
8264
"access the project."
8265
8266
#: serverguide/C/vcs.xml:111(title)
8267
msgid "Create Subversion Repository"
8268
msgstr "Create Subversion Repository"
8269
8270
#: serverguide/C/vcs.xml:112(para)
8271
msgid ""
8272
"The Subversion repository can be created using the following command from a "
8273
"terminal prompt:"
8274
msgstr ""
8275
"The Subversion repository can be created using the following command from a "
8276
"terminal prompt:"
8277
8278
#: serverguide/C/vcs.xml:116(command)
8279
msgid "svnadmin create /path/to/repos/project"
8280
msgstr "svnadmin create /path/to/repos/project"
8281
8282
#: serverguide/C/vcs.xml:121(title)
8283
msgid "Importing Files"
8284
msgstr "Importing Files"
8285
8286
#: serverguide/C/vcs.xml:122(para)
8287
msgid ""
8288
"Once you create the repository you can <emphasis>import</emphasis> files "
8289
"into the repository. To import a directory, enter the following from a "
8290
"terminal prompt: <screen>\n"
8291
"<command>svn import /path/to/import/directory "
8292
"file:///path/to/repos/project</command>\n"
8293
"</screen>"
8294
msgstr ""
8295
"Once you create the repository you can <emphasis>import</emphasis> files "
8296
"into the repository. To import a directory, enter the following from a "
8297
"terminal prompt: <screen>\n"
8298
"<command>svn import /path/to/import/directory "
8299
"file:///path/to/repos/project</command>\n"
8300
"</screen>"
8301
8302
#: serverguide/C/vcs.xml:134(title) serverguide/C/vcs.xml:139(title)
8303
msgid "Access Methods"
8304
msgstr "Access Methods"
8305
8306
#: serverguide/C/vcs.xml:135(para)
8307
msgid ""
8308
"Subversion repositories can be accessed (checked out) through many different "
8309
"methods --on local disk, or through various network protocols. A repository "
8310
"location, however, is always a URL. The table describes how different URL "
8311
"schemes map to the available access methods."
8312
msgstr ""
8313
"Subversion repositories can be accessed (checked out) through many different "
8314
"methods --on local disk, or through various network protocols. A repository "
8315
"location, however, is always a URL. The table describes how different URL "
8316
"schemes map to the available access methods."
8317
8318
#: serverguide/C/vcs.xml:146(para)
8319
msgid "Schema"
8320
msgstr "Schema"
8321
8322
#: serverguide/C/vcs.xml:147(para)
8323
msgid "Access Method"
8324
msgstr "Access Method"
8325
8326
#: serverguide/C/vcs.xml:152(para)
8327
msgid "file://"
8328
msgstr "file://"
8329
8330
#: serverguide/C/vcs.xml:153(para)
8331
msgid "direct repository access (on local disk)"
8332
msgstr "direct repository access (on local disk)"
8333
8334
#: serverguide/C/vcs.xml:156(para)
8335
msgid "http://"
8336
msgstr "http://"
8337
8338
#: serverguide/C/vcs.xml:157(para)
8339
msgid "Access via WebDAV protocol to Subversion-aware Apache2 web server"
8340
msgstr "Access via WebDAV protocol to Subversion-aware Apache2 Web server"
8341
8342
#: serverguide/C/vcs.xml:160(para)
8343
msgid "https://"
8344
msgstr "https://"
8345
8346
#: serverguide/C/vcs.xml:161(para)
8347
msgid "Same as http://, but with SSL encryption"
8348
msgstr "Same as http://, but with SSL encryption"
8349
8350
#: serverguide/C/vcs.xml:164(para)
8351
msgid "svn://"
8352
msgstr "svn://"
8353
8354
#: serverguide/C/vcs.xml:165(para)
8355
msgid "Access via custom protocol to an svnserve server"
8356
msgstr "Access via custom protocol to an svnserve server"
8357
8358
#: serverguide/C/vcs.xml:168(para)
8359
msgid "svn+ssh://"
8360
msgstr "svn+ssh://"
8361
8362
#: serverguide/C/vcs.xml:169(para)
8363
msgid "Same as svn://, but through an SSH tunnel"
8364
msgstr "Same as svn://, but through an SSH tunnel"
8365
8366
#: serverguide/C/vcs.xml:175(para)
8367
msgid ""
8368
"In this section, we will see how to configure Subversion for all these "
8369
"access methods. Here, we cover the basics. For more advanced usage details, "
8370
"refer to the <ulink url=\"http://svnbook.red-bean.com/\">svn book</ulink>."
8371
msgstr ""
8372
"In this section, we will see how to configure Subversion for all these "
8373
"access methods. Here, we cover the basics. For more advanced usage details, "
8374
"refer to the <ulink url=\"http://svnbook.red-bean.com/\">svn book</ulink>."
8375
8376
#: serverguide/C/vcs.xml:182(title)
8377
msgid "Direct repository access (file://)"
8378
msgstr "Direct repository access (file://)"
8379
8380
#: serverguide/C/vcs.xml:183(para)
8381
msgid ""
8382
"This is the simplest of all access methods. It does not require any "
8383
"Subversion server process to be running. This access method is used to "
8384
"access Subversion from the same machine. The syntax of the command, entered "
8385
"at a terminal prompt, is as follows:"
8386
msgstr ""
8387
"This is the simplest of all access methods. It does not require any "
8388
"Subversion server process to be running. This access method is used to "
8389
"access Subversion from the same machine. The syntax of the command, entered "
8390
"at a terminal prompt, is as follows:"
8391
8392
#: serverguide/C/vcs.xml:190(command)
8393
msgid "svn co file:///path/to/repos/project"
8394
msgstr "svn co file:///path/to/repos/project"
8395
8396
#: serverguide/C/vcs.xml:193(para)
8397
msgid "or"
8398
msgstr "or"
8399
8400
#: serverguide/C/vcs.xml:196(command)
8401
msgid "svn co file://localhost/path/to/repos/project"
8402
msgstr "svn co file://localhost/path/to/repos/project"
8403
8404
#: serverguide/C/vcs.xml:200(para)
8405
msgid ""
8406
"If you do not specify the hostname, there are three forward slashes (///) -- "
8407
"two for the protocol (file, in this case) plus the leading slash in the "
8408
"path. If you specify the hostname, you must use two forward slashes (//)."
8409
msgstr ""
8410
"If you do not specify the hostname, there are three forward slashes (///) -- "
8411
"two for the protocol (file, in this case) plus the leading slash in the "
8412
"path. If you specify the hostname, you must use two forward slashes (//)."
8413
8414
#: serverguide/C/vcs.xml:202(para)
8415
msgid ""
8416
"The repository permissions depend on filesystem permissions. If the user has "
8417
"read/write permission, he can checkout from and commit to the repository."
8418
msgstr ""
8419
"The repository permissions depend on filesystem permissions. If the user has "
8420
"read/write permission, he can checkout from and commit to the repository."
8421
8422
#: serverguide/C/vcs.xml:205(title)
8423
msgid "Access via WebDAV protocol (http://)"
8424
msgstr "Access via WebDAV protocol (http://)"
8425
8426
#: serverguide/C/vcs.xml:206(para)
8427
msgid ""
8428
"To access the Subversion repository via WebDAV protocol, you must configure "
8429
"your Apache 2 web server. Add the following snippet between the "
8430
"<emphasis><VirtualHost></emphasis> and "
8431
"<emphasis></VirtualHost></emphasis> elements in "
8432
"<filename>/etc/apache2/sites-available/default</filename>, or another "
8433
"VirtualHost file:"
8434
msgstr ""
8435
8436
#: serverguide/C/vcs.xml:212(programlisting)
8437
#, no-wrap
8438
msgid ""
8439
"\n"
8440
" <Location /svn>\n"
8441
" DAV svn\n"
8442
" SVNPath /home/svn\n"
8443
" AuthType Basic\n"
8444
" AuthName \"Your repository name\"\n"
8445
" AuthUserFile /etc/subversion/passwd\n"
8446
" Require valid-user\n"
8447
" </Location> \n"
8448
msgstr ""
8449
8450
#: serverguide/C/vcs.xml:223(para)
8451
msgid ""
8452
"The above configuration snippet assumes that Subversion repositories are "
8453
"created under <filename>/home/svn/</filename> directory using "
8454
"<command>svnadmin</command> command. They can be accessible using "
8455
"<command>http://hostname/svn/repos_name</command> url."
8456
msgstr ""
8457
"The above configuration snippet assumes that Subversion repositories are "
8458
"created under <filename>/home/svn/</filename> directory using "
8459
"<command>svnadmin</command> command. They can be accessible using "
8460
"<command>http://hostname/svn/repos_name</command> url."
8461
8462
#: serverguide/C/vcs.xml:229(para)
8463
msgid ""
8464
"To import or commit files to your Subversion repository over HTTP, the "
8465
"repository should be owned by the HTTP user. In Ubuntu systems, normally the "
8466
"HTTP user is <command>www-data</command>. To change the ownership of the "
8467
"repository files enter the following command from terminal prompt:"
8468
msgstr ""
8469
"To import or commit files to your Subversion repository over HTTP, the "
8470
"repository should be owned by the HTTP user. In Ubuntu systems, normally the "
8471
"HTTP user is <command>www-data</command>. To change the ownership of the "
8472
"repository files enter the following command from terminal prompt:"
8473
8474
#: serverguide/C/vcs.xml:238(command)
8475
msgid "sudo chown -R www-data:www-data /path/to/repos"
8476
msgstr "sudo chown -R www-data:www-data /path/to/repos"
8477
8478
#: serverguide/C/vcs.xml:241(para)
8479
msgid ""
8480
"By changing the ownership of repository as <command>www-data</command> you "
8481
"will not be able to import or commit files into the repository by running "
8482
"<command>svn import file:///</command> command as any user other than "
8483
"<command>www-data</command>."
8484
msgstr ""
8485
"By changing the ownership of repository as <command>www-data</command> you "
8486
"will not be able to import or commit files into the repository by running "
8487
"<command>svn import file:///</command> command as any user other than "
8488
"<command>www-data</command>."
8489
8490
#: serverguide/C/vcs.xml:250(para)
8491
msgid ""
8492
"Next, you must create the <filename>/etc/subversion/passwd</filename> file "
8493
"that will contain user authentication details. To create a file issue the "
8494
"following command at a command prompt (which will create the file and add "
8495
"the first user):"
8496
msgstr ""
8497
"Next, you must create the <filename>/etc/subversion/passwd</filename> file "
8498
"that will contain user authentication details. To create a file issue the "
8499
"following command at a command prompt (which will create the file and add "
8500
"the first user):"
8501
8502
#: serverguide/C/vcs.xml:256(command)
8503
msgid "sudo htpasswd -c /etc/subversion/passwd user_name"
8504
msgstr "sudo htpasswd -c /etc/subversion/passwd user_name"
8505
8506
#: serverguide/C/vcs.xml:259(para)
8507
msgid ""
8508
"To add additional users omit the <emphasis>\"-c\"</emphasis> option as this "
8509
"option replaces the old file. Instead use this form:"
8510
msgstr ""
8511
"To add additional users omit the <emphasis>\"-c\"</emphasis> option as this "
8512
"option replaces the old file. Instead use this form:"
8513
8514
#: serverguide/C/vcs.xml:264(command)
8515
msgid "sudo htpasswd /etc/subversion/password user_name"
8516
msgstr "sudo htpasswd /etc/subversion/password user_name"
8517
8518
#: serverguide/C/vcs.xml:268(para)
8519
msgid ""
8520
"This command will prompt you to enter the password. Once you enter the "
8521
"password, the user is added. Now, to access the repository you can run the "
8522
"following command:"
8523
msgstr ""
8524
"This command will prompt you to enter the password. Once you enter the "
8525
"password, the user is added. Now, to access the repository you can run the "
8526
"following command:"
8527
8528
#: serverguide/C/vcs.xml:269(command)
8529
msgid "svn co http://servername/svn"
8530
msgstr "svn co http://servername/svn"
8531
8532
#: serverguide/C/vcs.xml:271(para)
8533
msgid ""
8534
"The password is transmitted as plain text. If you are worried about password "
8535
"snooping, you are advised to use SSL encryption. For details, please refer "
8536
"next section."
8537
msgstr ""
8538
"The password is transmitted as plain text. If you are worried about password "
8539
"snooping, you are advised to use SSL encryption. For details, please refer "
8540
"next section."
8541
8542
#: serverguide/C/vcs.xml:277(title)
8543
msgid "Access via WebDAV protocol with SSL encryption (https://)"
8544
msgstr "Access via WebDAV protocol with SSL encryption (https://)"
8545
8546
#: serverguide/C/vcs.xml:278(para)
8547
msgid ""
8548
"Accessing Subversion repository via WebDAV protocol with SSL encryption "
8549
"(https://) is similar to http:// except that you must install and configure "
8550
"the digital certificate in your Apache2 web server. To use SSL with "
8551
"Subversion add the above Apache2 configuration to "
8552
"<filename>/etc/apache2/sites-available/default-ssl</filename>. For more "
8553
"information on setting up Apache2 with SSL see <xref linkend=\"https-"
8554
"configuration\"/>."
8555
msgstr ""
8556
"Accessing Subversion repository via WebDAV protocol with SSL encryption "
8557
"(https://) is similar to http:// except that you must install and configure "
8558
"the digital certificate in your Apache2 web server. To use SSL with "
8559
"Subversion add the above Apache2 configuration to "
8560
"<filename>/etc/apache2/sites-available/default-ssl</filename>. For more "
8561
"information on setting up Apache2 with SSL see <xref linkend=\"https-"
8562
"configuration\"/>."
8563
8564
#: serverguide/C/vcs.xml:287(para)
8565
msgid ""
8566
"You can install a digital certificate issued by a signing authority. "
8567
"Alternatively, you can install your own self-signed certificate."
8568
msgstr ""
8569
"You can install a digital certificate issued by a signing authority. "
8570
"Alternatively, you can install your own self-signed certificate."
8571
8572
#: serverguide/C/vcs.xml:292(para)
8573
msgid ""
8574
"This step assumes you have installed and configured a digital certificate in "
8575
"your Apache 2 web server. Now, to access the Subversion repository, please "
8576
"refer to the above section! The access methods are exactly the same, except "
8577
"the protocol. You must use https:// to access the Subversion repository."
8578
msgstr ""
8579
"This step assumes you have installed and configured a digital certificate in "
8580
"your Apache 2 Web server. Now, to access the Subversion repository, please "
8581
"refer to the above section! The access methods are exactly the same, except "
8582
"the protocol. You must use https:// to access the Subversion repository."
8583
8584
#: serverguide/C/vcs.xml:302(title)
8585
msgid "Access via custom protocol (svn://)"
8586
msgstr "Access via custom protocol (svn://)"
8587
8588
#: serverguide/C/vcs.xml:303(para)
8589
msgid ""
8590
"Once the Subversion repository is created, you can configure the access "
8591
"control. You can edit the <filename> "
8592
"/path/to/repos/project/conf/svnserve.conf</filename> file to configure the "
8593
"access control. For example, to set up authentication, you can uncomment the "
8594
"following lines in the configuration file:"
8595
msgstr ""
8596
"Once the Subversion repository is created, you can configure the access "
8597
"control. You can edit the <filename> "
8598
"/path/to/repos/project/conf/svnserve.conf</filename> file to configure the "
8599
"access control. For example, to set up authentication, you can uncomment the "
8600
"following lines in the configuration file:"
8601
8602
#: serverguide/C/vcs.xml:310(programlisting)
8603
#, no-wrap
8604
msgid ""
8605
"# [general]\n"
8606
"# password-db = passwd"
8607
msgstr ""
8608
"# [general]\n"
8609
"# password-db = passwd"
8610
8611
#: serverguide/C/vcs.xml:313(para)
8612
msgid ""
8613
"After uncommenting the above lines, you can maintain the user list in the "
8614
"passwd file. So, edit the file <filename>passwd </filename> in the same "
8615
"directory and add the new user. The syntax is as follows:"
8616
msgstr ""
8617
"After uncommenting the above lines, you can maintain the user list in the "
8618
"passwd file. So, edit the file <filename>passwd </filename> in the same "
8619
"directory and add the new user. The syntax is as follows:"
8620
8621
#: serverguide/C/vcs.xml:319(programlisting)
8622
#, no-wrap
8623
msgid "username = password"
8624
msgstr "username = password"
8625
8626
#: serverguide/C/vcs.xml:320(para)
8627
msgid "For more details, please refer to the file."
8628
msgstr "For more details, please refer to the file."
8629
8630
#: serverguide/C/vcs.xml:324(para)
8631
msgid ""
8632
"Now, to access Subversion via the svn:// custom protocol, either from the "
8633
"same machine or a different machine, you can run svnserver using svnserve "
8634
"command. The syntax is as follows:"
8635
msgstr ""
8636
"Now, to access Subversion via the svn:// custom protocol, either from the "
8637
"same machine or a different machine, you can run svnserver using svnserve "
8638
"command. The syntax is as follows:"
8639
8640
#: serverguide/C/vcs.xml:329(programlisting)
8641
#, no-wrap
8642
msgid ""
8643
"$ svnserve -d --foreground -r /path/to/repos\n"
8644
"# -d -- daemon mode\n"
8645
"# --foreground -- run in foreground (useful for debugging)\n"
8646
"# -r -- root of directory to serve\n"
8647
"\n"
8648
"For more usage details, please refer to:\n"
8649
"$ svnserve --help"
8650
msgstr ""
8651
"$ svnserve -d --foreground -r /path/to/repos\n"
8652
"# -d -- daemon mode\n"
8653
"# --foreground -- run in foreground (useful for debugging)\n"
8654
"# -r -- root of directory to serve\n"
8655
"\n"
8656
"For more usage details, please refer to:\n"
8657
"$ svnserve --help"
8658
8659
#: serverguide/C/vcs.xml:337(para)
8660
msgid ""
8661
"Once you run this command, Subversion starts listening on default port "
8662
"(3690). To access the project repository, you must run the following command "
8663
"from a terminal prompt:"
8664
msgstr ""
8665
"Once you run this command, Subversion starts listening on default port "
8666
"(3690). To access the project repository, you must run the following command "
8667
"from a terminal prompt:"
8668
8669
#: serverguide/C/vcs.xml:340(command)
8670
msgid "svn co svn://hostname/project project --username user_name"
8671
msgstr "svn co svn://hostname/project project --username user_name"
8672
8673
#: serverguide/C/vcs.xml:343(para)
8674
msgid ""
8675
"Based on server configuration, it prompts for password. Once you are "
8676
"authenticated, it checks out the code from Subversion repository. To "
8677
"synchronize the project repository with the local copy, you can run the "
8678
"<command>update</command> sub-command. The syntax of the command, entered at "
8679
"a terminal prompt, is as follows:"
8680
msgstr ""
8681
"Based on server configuration, it prompts for password. Once you are "
8682
"authenticated, it checks out the code from Subversion repository. To "
8683
"synchronise the project repository with the local copy, you can run the "
8684
"<command>update</command> sub-command. The syntax of the command, entered at "
8685
"a terminal prompt, is as follows:"
8686
8687
#: serverguide/C/vcs.xml:351(command)
8688
msgid "cd project_dir ; svn update"
8689
msgstr "cd project_dir ; svn update"
8690
8691
#: serverguide/C/vcs.xml:354(para)
8692
msgid ""
8693
"For more details about using each Subversion sub-command, you can refer to "
8694
"the manual. For example, to learn more about the co (checkout) command, "
8695
"please run the following command from a terminal prompt:"
8696
msgstr ""
8697
"For more details about using each Subversion sub-command, you can refer to "
8698
"the manual. For example, to learn more about the co (checkout) command, "
8699
"please run the following command from a terminal prompt:"
8700
8701
#: serverguide/C/vcs.xml:358(command)
8702
msgid "svn co help"
8703
msgstr "svn co help"
8704
8705
#: serverguide/C/vcs.xml:362(title)
8706
msgid "Access via custom protocol with SSL encryption (svn+ssh://)"
8707
msgstr "Access via custom protocol with SSL encryption (svn+ssh://)"
8708
8709
#: serverguide/C/vcs.xml:363(para)
8710
msgid ""
8711
"The configuration and server process is same as in the svn:// method. For "
8712
"details, please refer to the above section. This step assumes you have "
8713
"followed the above step and started the Subversion server using "
8714
"<application>svnserve</application> command."
8715
msgstr ""
8716
"The configuration and server process is same as in the svn:// method. For "
8717
"details, please refer to the above section. This step assumes you have "
8718
"followed the above step and started the Subversion server using "
8719
"<application>svnserve</application> command."
8720
8721
#: serverguide/C/vcs.xml:369(para)
8722
msgid ""
8723
"It is also assumed that the ssh server is running on that machine and that "
8724
"it is allowing incoming connections. To confirm, please try to login to that "
8725
"machine using ssh. If you can login, everything is perfect. If you cannot "
8726
"login, please address it before continuing further."
8727
msgstr ""
8728
"It is also assumed that the ssh server is running on that machine and that "
8729
"it is allowing incoming connections. To confirm, please try to login to that "
8730
"machine using ssh. If you can login, everything is perfect. If you cannot "
8731
"login, please address it before continuing further."
8732
8733
#: serverguide/C/vcs.xml:375(para)
8734
msgid ""
8735
"The svn+ssh:// protocol is used to access the Subversion repository using "
8736
"SSL encryption. The data transfer is encrypted using this method. To access "
8737
"the project repository (for example with a checkout), you must use the "
8738
"following command syntax:"
8739
msgstr ""
8740
"The svn+ssh:// protocol is used to access the Subversion repository using "
8741
"SSL encryption. The data transfer is encrypted using this method. To access "
8742
"the project repository (for example with a checkout), you must use the "
8743
"following command syntax:"
8744
8745
#: serverguide/C/vcs.xml:382(command)
8746
msgid "svn co svn+ssh://hostname/var/svn/repos/project"
8747
msgstr "svn co svn+ssh://hostname/var/svn/repos/project"
8748
8749
#: serverguide/C/vcs.xml:386(para)
8750
msgid ""
8751
"You must use the full path (/path/to/repos/project) to access the Subversion "
8752
"repository using this access method."
8753
msgstr ""
8754
"You must use the full path (/path/to/repos/project) to access the Subversion "
8755
"repository using this access method."
8756
8757
#: serverguide/C/vcs.xml:389(para)
8758
msgid ""
8759
"Based on server configuration, it prompts for password. You must enter the "
8760
"password you use to login via ssh. Once you are authenticated, it checks out "
8761
"the code from the Subversion repository."
8762
msgstr ""
8763
"Based on server configuration, it prompts for password. You must enter the "
8764
"password you use to login via ssh. Once you are authenticated, it checks out "
8765
"the code from the Subversion repository."
8766
8767
#: serverguide/C/vcs.xml:399(title)
8768
msgid "CVS Server"
8769
msgstr "CVS Server"
8770
8771
#: serverguide/C/vcs.xml:400(para)
8772
msgid ""
8773
"CVS is a version control system. You can use it to record the history of "
8774
"source files."
8775
msgstr ""
8776
"CVS is a version control system. You can use it to record the history of "
8777
"source files."
8778
8779
#: serverguide/C/vcs.xml:406(para)
8780
msgid ""
8781
"To install <application>CVS</application>, run the following command from a "
8782
"terminal prompt: <screen>\n"
8783
"<command>sudo apt-get install cvs</command>\n"
8784
"</screen> After you install <application>cvs</application>, you should "
8785
"install <application>xinetd</application> to start/stop the cvs server. At "
8786
"the prompt, enter the following command to install "
8787
"<application>xinetd</application>: <screen>\n"
8788
"<command>sudo apt-get install xinetd</command>\n"
8789
"</screen>"
8790
msgstr ""
8791
"To install <application>CVS</application>, run the following command from a "
8792
"terminal prompt: <screen>\n"
8793
"<command>sudo apt-get install cvs</command>\n"
8794
"</screen> After you install <application>cvs</application>, you should "
8795
"install <application>xinetd</application> to start/stop the cvs server. At "
8796
"the prompt, enter the following command to install "
8797
"<application>xinetd</application>: <screen>\n"
8798
"<command>sudo apt-get install xinetd</command>\n"
8799
"</screen>"
8800
8801
#: serverguide/C/vcs.xml:439(programlisting)
8802
#, no-wrap
8803
msgid ""
8804
"\n"
8805
"service cvspserver\n"
8806
"{\n"
8807
" port = 2401\n"
8808
" socket_type = stream\n"
8809
" protocol = tcp\n"
8810
" user = root\n"
8811
" wait = no\n"
8812
" type = UNLISTED\n"
8813
" server = /usr/bin/cvs\n"
8814
" server_args = -f --allow-root /var/lib/cvs pserver\n"
8815
" disable = no\n"
8816
"}\n"
8817
msgstr ""
8818
"\n"
8819
"service cvspserver\n"
8820
"{\n"
8821
" port = 2401\n"
8822
" socket_type = stream\n"
8823
" protocol = tcp\n"
8824
" user = root\n"
8825
" wait = no\n"
8826
" type = UNLISTED\n"
8827
" server = /usr/bin/cvs\n"
8828
" server_args = -f --allow-root /var/lib/cvs pserver\n"
8829
" disable = no\n"
8830
"}\n"
8831
8832
#: serverguide/C/vcs.xml:455(para)
8833
msgid ""
8834
"Be sure to edit the repository if you have changed the default repository "
8835
"(<application>/var/lib/cvs</application>) directory."
8836
msgstr ""
8837
"Be sure to edit the repository if you have changed the default repository "
8838
"(<application>/var/lib/cvs</application>) directory."
8839
8840
#: serverguide/C/vcs.xml:424(para)
8841
msgid ""
8842
"Once you install cvs, the repository will be automatically initialized. By "
8843
"default, the repository resides under the "
8844
"<application>/var/lib/cvs</application> directory. You can change this path "
8845
"by running following command: <screen>\n"
8846
"<command>cvs -d /your/new/cvs/repo init</command>\n"
8847
"</screen> Once the initial repository is set up, you can configure "
8848
"<application>xinetd</application> to start the CVS server. You can copy the "
8849
"following lines to the <filename> /etc/xinetd.d/cvspserver</filename> file. "
8850
"<placeholder-1/><placeholder-2/> Once you have configured "
8851
"<application>xinetd</application> you can start the cvs server by running "
8852
"following command: <screen>\n"
8853
"<command>sudo /etc/init.d/xinetd restart</command>\n"
8854
"</screen>"
8855
msgstr ""
8856
"Once you install cvs, the repository will be automatically initialised. By "
8857
"default, the repository resides under the "
8858
"<application>/var/lib/cvs</application> directory. You can change this path "
8859
"by running following command: <screen>\n"
8860
"<command>cvs -d /your/new/cvs/repo init</command>\n"
8861
"</screen> Once the initial repository is set up, you can configure "
8862
"<application>xinetd</application> to start the CVS server. You can copy the "
8863
"following lines to the <filename> /etc/xinetd.d/cvspserver</filename> file. "
8864
"<placeholder-1/><placeholder-2/> Once you have configured "
8865
"<application>xinetd</application> you can start the cvs server by running "
8866
"following command: <screen>\n"
8867
"<command>sudo /etc/init.d/xinetd restart</command>\n"
8868
"</screen>"
8869
8870
#: serverguide/C/vcs.xml:468(para)
8871
msgid ""
8872
"You can confirm that the CVS server is running by issuing the following "
8873
"command:"
8874
msgstr ""
8875
"You can confirm that the CVS server is running by issuing the following "
8876
"command:"
8877
8878
#: serverguide/C/vcs.xml:475(command)
8879
msgid "sudo netstat -tap | grep cvs"
8880
msgstr "sudo netstat -tap | grep cvs"
8881
8882
#: serverguide/C/vcs.xml:479(para) serverguide/C/databases.xml:65(para)
8883
msgid ""
8884
"When you run this command, you should see the following line or something "
8885
"similar:"
8886
msgstr ""
8887
"When you run this command, you should see the following line or something "
8888
"similar:"
8889
8890
#: serverguide/C/vcs.xml:484(programlisting)
8891
#, no-wrap
8892
msgid ""
8893
"\n"
8894
"tcp 0 0 *:cvspserver *:* LISTEN \n"
8895
msgstr ""
8896
"\n"
8897
"tcp 0 0 *:cvspserver *:* LISTEN \n"
8898
8899
#: serverguide/C/vcs.xml:488(para)
8900
msgid ""
8901
"From here you can continue to add users, add new projects, and manage the "
8902
"CVS server."
8903
msgstr ""
8904
"From here you can continue to add users, add new projects, and manage the "
8905
"CVS server."
8906
8907
#: serverguide/C/vcs.xml:493(para)
8908
msgid ""
8909
"CVS allows the user to add users independently of the underlying OS "
8910
"installation. Probably the easiest way is to use the Linux Users for CVS, "
8911
"although it has potential security issues. Please refer to the CVS manual "
8912
"for details."
8913
msgstr ""
8914
"CVS allows the user to add users independently of the underlying OS "
8915
"installation. Probably the easiest way is to use the Linux Users for CVS, "
8916
"although it has potential security issues. Please refer to the CVS manual "
8917
"for details."
8918
8919
#: serverguide/C/vcs.xml:503(title)
8920
msgid "Add Projects"
8921
msgstr "Add Projects"
8922
8923
#: serverguide/C/vcs.xml:515(para)
8924
msgid ""
8925
"You can use the CVSROOT environment variable to store the CVS root "
8926
"directory. Once you export the CVSROOT environment variable, you can avoid "
8927
"using -d option in the above cvs command."
8928
msgstr ""
8929
"You can use the CVSROOT environment variable to store the CVS root "
8930
"directory. Once you export the CVSROOT environment variable, you can avoid "
8931
"using -d option in the above cvs command."
8932
8933
#: serverguide/C/vcs.xml:527(para)
8934
msgid ""
8935
"When you add a new project, the CVS user you use must have write access to "
8936
"the CVS repository (<application>/var/lib/cvs</application>). By default, "
8937
"the <application>src</application> group has write access to the CVS "
8938
"repository. So, you can add the user to this group, and he can then add and "
8939
"manage projects in the CVS repository."
8940
msgstr ""
8941
"When you add a new project, the CVS user you use must have write access to "
8942
"the CVS repository (<application>/var/lib/cvs</application>). By default, "
8943
"the <application>src</application> group has write access to the CVS "
8944
"repository. So, you can add the user to this group, and he can then add and "
8945
"manage projects in the CVS repository."
8946
8947
#: serverguide/C/vcs.xml:504(para)
8948
msgid ""
8949
"This section explains how to add new project to the CVS repository. Create "
8950
"the directory and add necessary document and source files to the directory. "
8951
"Now, run the following command to add this project to CVS repository: "
8952
"<screen>\n"
8953
"<command>cd your/project</command>\n"
8954
"<command>cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "
8955
"\"Importing my project to CVS repository\" . new_project start</command>\n"
8956
"</screen><placeholder-1/> The string <emphasis>new_project</emphasis> is a "
8957
"vendor tag, and <emphasis>start</emphasis> is a release tag. They serve no "
8958
"purpose in this context, but since CVS requires them, they must be present. "
8959
"<placeholder-2/>"
8960
msgstr ""
8961
"This section explains how to add new project to the CVS repository. Create "
8962
"the directory and add necessary document and source files to the directory. "
8963
"Now, run the following command to add this project to CVS repository: "
8964
"<screen>\n"
8965
"<command>cd your/project</command>\n"
8966
"<command>cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "
8967
"\"Importing my project to CVS repository\" . new_project start</command>\n"
8968
"</screen><placeholder-1/> The string <emphasis>new_project</emphasis> is a "
8969
"vendor tag, and <emphasis>start</emphasis> is a release tag. They serve no "
8970
"purpose in this context, but since CVS requires them, they must be present. "
8971
"<placeholder-2/>"
8972
8973
#: serverguide/C/vcs.xml:540(ulink)
8974
msgid "Bazaar Home Page"
8975
msgstr "Bazaar Home Page"
8976
8977
#: serverguide/C/vcs.xml:541(ulink)
8978
msgid "Launchpad"
8979
msgstr "Launchpad"
8980
8981
#: serverguide/C/vcs.xml:542(ulink)
8982
msgid "Subversion Home Page"
8983
msgstr "Subversion Home Page"
8984
8985
#: serverguide/C/vcs.xml:543(ulink)
8986
msgid "Subversion Book"
8987
msgstr "Subversion Book"
8988
8989
#: serverguide/C/vcs.xml:545(ulink)
8990
msgid "CVS Manual"
8991
msgstr "CVS Manual"
8992
8993
#: serverguide/C/vcs.xml:546(ulink)
8994
msgid "Easy Bazaar Ubuntu Wiki page"
8995
msgstr ""
8996
8997
#: serverguide/C/vcs.xml:547(ulink)
8998
msgid "Ubuntu Wiki Subversion page"
8999
msgstr ""
9000
9001
#: serverguide/C/serverguide.xml:3(title) serverguide/C/bookinfo.xml:3(title)
9002
msgid "Credits and License"
9003
msgstr "Credits and Licence"
9004
9005
#: serverguide/C/serverguide.xml:4(para) serverguide/C/bookinfo.xml:4(para)
9006
msgid ""
9007
"This document is maintained by the Ubuntu documentation team "
9008
"(https://wiki.ubuntu.com/DocumentationTeam). For a list of contributors, see "
9009
"the <ulink url=\"../../libs/C/contributors.xml\">contributors page</ulink>"
9010
msgstr ""
9011
"This document is maintained by the Ubuntu documentation team "
9012
"(https://wiki.ubuntu.com/DocumentationTeam). For a list of contributors, see "
9013
"the <ulink url=\"../../libs/C/contributors.xml\">contributors page</ulink>"
9014
9015
#: serverguide/C/serverguide.xml:5(para) serverguide/C/bookinfo.xml:5(para)
9016
msgid ""
9017
"This document is made available under the Creative Commons ShareAlike 2.5 "
9018
"License (CC-BY-SA)."
9019
msgstr ""
9020
"This document is made available under the Creative Commons ShareAlike 2.5 "
9021
"Licence (CC-BY-SA)."
9022
9023
#: serverguide/C/serverguide.xml:6(para) serverguide/C/bookinfo.xml:6(para)
9024
msgid ""
9025
"You are free to modify, extend, and improve the Ubuntu documentation source "
9026
"code under the terms of this license. All derivative works must be released "
9027
"under this license."
9028
msgstr ""
9029
"You are free to modify, extend, and improve the Ubuntu documentation source "
9030
"code under the terms of this licence. All derivative works must be released "
9031
"under this licence."
9032
9033
#: serverguide/C/serverguide.xml:8(para) serverguide/C/bookinfo.xml:8(para)
9034
msgid ""
9035
"This documentation is distributed in the hope that it will be useful, but "
9036
"WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY "
9037
"or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER."
9038
msgstr ""
9039
"This documentation is distributed in the hope that it will be useful, but "
9040
"WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY "
9041
"or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER."
9042
9043
#: serverguide/C/serverguide.xml:11(para) serverguide/C/bookinfo.xml:11(para)
9044
msgid ""
9045
"A copy of the license is available here: <ulink url=\"/usr/share/ubuntu-"
9046
"docs/libs/C/ccbysa.xml\">Creative Commons ShareAlike License</ulink>."
9047
msgstr ""
9048
"A copy of the license is available here: <ulink url=\"/usr/share/ubuntu-"
9049
"docs/libs/C/ccbysa.xml\">Creative Commons ShareAlike License</ulink>."
9050
9051
#: serverguide/C/serverguide.xml:14(year) serverguide/C/bookinfo.xml:14(year)
9052
msgid "2010"
9053
msgstr ""
9054
9055
#: serverguide/C/serverguide.xml:15(ulink) serverguide/C/bookinfo.xml:15(ulink)
9056
msgid "Ubuntu Documentation Project"
9057
msgstr "Ubuntu Documentation Project"
9058
9059
#: serverguide/C/serverguide.xml:15(holder) serverguide/C/bookinfo.xml:15(holder)
9060
msgid "Canonical Ltd. and members of the <placeholder-1/>"
9061
msgstr "Canonical Ltd. and members of the <placeholder-1/>"
9062
9063
#: serverguide/C/serverguide.xml:18(publishername) serverguide/C/bookinfo.xml:18(publishername)
9064
msgid "The Ubuntu Documentation Project"
9065
msgstr "The Ubuntu Documentation Project"
9066
9067
#: serverguide/C/serverguide.xml:17(para)
9068
msgid ""
9069
"Welcome to the <emphasis>Ubuntu Server Guide</emphasis>! It contains "
9070
"information on how to install and configure various server applications on "
9071
"your Ubuntu system to fit your needs. It is a step-by-step, task-oriented "
9072
"guide for configuring and customizing your system."
9073
msgstr ""
9074
"Welcome to the <emphasis>Ubuntu Server Guide</emphasis>! It contains "
9075
"information on how to install and configure various server applications on "
9076
"your Ubuntu system to fit your needs. It is a step-by-step, task-oriented "
9077
"guide for configuring and customising your system."
9078
9079
#: serverguide/C/security.xml:13(title)
9080
msgid "Security"
9081
msgstr "Security"
9082
9083
#: serverguide/C/security.xml:14(para)
9084
msgid ""
9085
"Security should always be considered when installing, deploying, and using "
9086
"any type of computer system. Although a fresh installation of Ubuntu is "
9087
"relatively safe for immediate use on the Internet, it is important to have a "
9088
"balanced understanding of your systems security posture based on how it will "
9089
"be used after deployment."
9090
msgstr ""
9091
"Security should always be considered when installing, deploying, and using "
9092
"any type of computer system. Although a fresh installation of Ubuntu is "
9093
"relatively safe for immediate use on the Internet, it is important to have a "
9094
"balanced understanding of your systems security posture based on how it will "
9095
"be used after deployment."
9096
9097
#: serverguide/C/security.xml:17(para)
9098
msgid ""
9099
"This chapter provides an overview of security related topics as they pertain "
9100
"to Ubuntu 10.10 Server Edition, and outlines simple measures you may use to "
9101
"protect your server and network from any number of potential security "
9102
"threats."
9103
msgstr ""
9104
9105
#: serverguide/C/security.xml:21(title)
9106
msgid "User Management"
9107
msgstr "User Management"
9108
9109
#: serverguide/C/security.xml:22(para)
9110
msgid ""
9111
"User management is a critical part of maintaining a secure system. "
9112
"Ineffective user and privilege management often lead many systems into being "
9113
"compromised. Therefore, it is important that you understand how you can "
9114
"protect your server through simple and effective user account management "
9115
"techniques."
9116
msgstr ""
9117
"User management is a critical part of maintaining a secure system. "
9118
"Ineffective user and privilege management often lead many systems into being "
9119
"compromised. Therefore, it is important that you understand how you can "
9120
"protect your server through simple and effective user account management "
9121
"techniques."
9122
9123
#: serverguide/C/security.xml:26(title)
9124
msgid "Where is root?"
9125
msgstr "Where is root?"
9126
9127
#: serverguide/C/security.xml:27(para)
9128
msgid ""
9129
"Ubuntu developers made a conscientious decision to disable the "
9130
"administrative root account by default in all Ubuntu installations. This "
9131
"does not mean that the root account has been deleted or that it may not be "
9132
"accessed. It merely has been given a password which matches no possible "
9133
"encrypted value, therefore may not log in directly by itself."
9134
msgstr ""
9135
"Ubuntu developers made a conscientious decision to disable the "
9136
"administrative root account by default in all Ubuntu installations. This "
9137
"does not mean that the root account has been deleted or that it may not be "
9138
"accessed. It merely has been given a password which matches no possible "
9139
"encrypted value, therefore may not log in directly by itself."
9140
9141
#: serverguide/C/security.xml:30(para)
9142
msgid ""
9143
"Instead, users are encouraged to make use of a tool by the name of "
9144
"<application>sudo</application> to carry out system administrative duties. "
9145
"<application>Sudo</application> allows an authorized user to temporarily "
9146
"elevate their privileges using their own password instead of having to know "
9147
"the password belonging to the root account. This simple yet effective "
9148
"methodology provides accountability for all user actions, and gives the "
9149
"administrator granular control over which actions a user can perform with "
9150
"said privileges."
9151
msgstr ""
9152
"Instead, users are encouraged to make use of a tool by the name of "
9153
"<application>sudo</application> to carry out system administrative duties. "
9154
"<application>Sudo</application> allows an authorised user to temporarily "
9155
"elevate their privileges using their own password instead of having to know "
9156
"the password belonging to the root account. This simple yet effective "
9157
"methodology provides accountability for all user actions, and gives the "
9158
"administrator granular control over which actions a user can perform with "
9159
"said privileges."
9160
9161
#: serverguide/C/security.xml:35(para)
9162
msgid ""
9163
"If for some reason you wish to enable the root account, simply give it a "
9164
"password:"
9165
msgstr ""
9166
"If for some reason you wish to enable the root account, simply give it a "
9167
"password:"
9168
9169
#: serverguide/C/security.xml:39(command)
9170
msgid "sudo passwd"
9171
msgstr "sudo passwd"
9172
9173
#: serverguide/C/security.xml:41(para)
9174
msgid ""
9175
"Sudo will prompt you for your password, and then ask you to supply a new "
9176
"password for root as shown below:"
9177
msgstr ""
9178
"Sudo will prompt you for your password, and then ask you to supply a new "
9179
"password for root as shown below:"
9180
9181
#: serverguide/C/security.xml:44(userinput)
9182
#, no-wrap
9183
msgid "(enter your own password)"
9184
msgstr "(enter your own password)"
9185
9186
#: serverguide/C/security.xml:45(userinput)
9187
#, no-wrap
9188
msgid "(enter a new password for root)"
9189
msgstr "(enter a new password for root)"
9190
9191
#: serverguide/C/security.xml:46(userinput)
9192
#, no-wrap
9193
msgid "(repeat new password for root)"
9194
msgstr "(repeat new password for root)"
9195
9196
#: serverguide/C/security.xml:44(computeroutput)
9197
#, no-wrap
9198
msgid ""
9199
"[sudo] password for username: <placeholder-1/>\n"
9200
"Enter new UNIX password: <placeholder-2/>\n"
9201
"Retype new UNIX password: <placeholder-3/>\n"
9202
"passwd: password updated successfully"
9203
msgstr ""
9204
"[sudo] password for username: <placeholder-1/>\n"
9205
"Enter new UNIX password: <placeholder-2/>\n"
9206
"Retype new UNIX password: <placeholder-3/>\n"
9207
"passwd: password updated successfully"
9208
9209
#: serverguide/C/security.xml:51(para)
9210
msgid "To disable the root account, use the following passwd syntax:"
9211
msgstr "To disable the root account, use the following passwd syntax:"
9212
9213
#: serverguide/C/security.xml:55(command)
9214
msgid "sudo passwd -l root"
9215
msgstr "sudo passwd -l root"
9216
9217
#: serverguide/C/security.xml:59(para)
9218
msgid ""
9219
"You should read more on <application>Sudo</application> by checking out it's "
9220
"man page:"
9221
msgstr ""
9222
"You should read more on <application>Sudo</application> by checking out it's "
9223
"man page:"
9224
9225
#: serverguide/C/security.xml:63(command)
9226
msgid "man sudo"
9227
msgstr "man sudo"
9228
9229
#: serverguide/C/security.xml:67(para)
9230
msgid ""
9231
"By default, the initial user created by the Ubuntu installer is a member of "
9232
"the group \"admin\" which is added to the file "
9233
"<filename>/etc/sudoers</filename> as an authorized sudo user. If you wish to "
9234
"give any other account full root access through "
9235
"<application>sudo</application>, simply add them to the admin group."
9236
msgstr ""
9237
"By default, the initial user created by the Ubuntu installer is a member of "
9238
"the group \"admin\" which is added to the file "
9239
"<filename>/etc/sudoers</filename> as an authorised sudo user. If you wish to "
9240
"give any other account full root access through "
9241
"<application>sudo</application>, simply add them to the admin group."
9242
9243
#: serverguide/C/security.xml:73(title)
9244
msgid "Adding and Deleting Users"
9245
msgstr "Adding and Deleting Users"
9246
9247
#: serverguide/C/security.xml:74(para)
9248
msgid ""
9249
"The process for managing local users and groups is straight forward and "
9250
"differs very little from most other GNU/Linux operating systems. Ubuntu and "
9251
"other Debian based distributions, encourage the use of the \"adduser\" "
9252
"package for account management."
9253
msgstr ""
9254
"The process for managing local users and groups is straight forward and "
9255
"differs very little from most other GNU/Linux operating systems. Ubuntu and "
9256
"other Debian based distributions, encourage the use of the \"adduser\" "
9257
"package for account management."
9258
9259
#: serverguide/C/security.xml:79(para)
9260
msgid ""
9261
"To add a user account, use the following syntax, and follow the prompts to "
9262
"give the account a password and identifiable characteristics such as a full "
9263
"name, phone number, etc."
9264
msgstr ""
9265
"To add a user account, use the following syntax, and follow the prompts to "
9266
"give the account a password and identifiable characteristics such as a full "
9267
"name, phone number, etc."
9268
9269
#: serverguide/C/security.xml:83(command)
9270
msgid "sudo adduser username"
9271
msgstr "sudo adduser username"
9272
9273
#: serverguide/C/security.xml:87(para)
9274
msgid ""
9275
"To delete a user account and its primary group, use the following syntax:"
9276
msgstr ""
9277
"To delete a user account and its primary group, use the following syntax:"
9278
9279
#: serverguide/C/security.xml:91(command)
9280
msgid "sudo deluser username"
9281
msgstr "sudo deluser username"
9282
9283
#: serverguide/C/security.xml:93(para)
9284
msgid ""
9285
"Deleting an account does not remove their respective home folder. It is up "
9286
"to you whether or not you wish to delete the folder manually or keep it "
9287
"according to your desired retention policies."
9288
msgstr ""
9289
"Deleting an account does not remove their respective home folder. It is up "
9290
"to you whether or not you wish to delete the folder manually or keep it "
9291
"according to your desired retention policies."
9292
9293
#: serverguide/C/security.xml:96(para)
9294
msgid ""
9295
"Remember, any user added later on with the same UID/GID as the previous "
9296
"owner will now have access to this folder if you have not taken the "
9297
"necessary precautions."
9298
msgstr ""
9299
"Remember, any user added later on with the same UID/GID as the previous "
9300
"owner will now have access to this folder if you have not taken the "
9301
"necessary precautions."
9302
9303
#: serverguide/C/security.xml:99(para)
9304
msgid ""
9305
"You may want to change these UID/GID values to something more appropriate, "
9306
"such as the root account, and perhaps even relocate the folder to avoid "
9307
"future conflicts:"
9308
msgstr ""
9309
"You may want to change these UID/GID values to something more appropriate, "
9310
"such as the root account, and perhaps even relocate the folder to avoid "
9311
"future conflicts:"
9312
9313
#: serverguide/C/security.xml:103(command)
9314
msgid "sudo chown -R root:root /home/username/"
9315
msgstr "sudo chown -R root:root /home/username/"
9316
9317
#: serverguide/C/security.xml:104(command)
9318
msgid "sudo mkdir /home/archived_users/"
9319
msgstr "sudo mkdir /home/archived_users/"
9320
9321
#: serverguide/C/security.xml:105(command)
9322
msgid "sudo mv /home/username /home/archived_users/"
9323
msgstr "sudo mv /home/username /home/archived_users/"
9324
9325
#: serverguide/C/security.xml:109(para)
9326
msgid ""
9327
"To temporarily lock or unlock a user account, use the following syntax, "
9328
"respectively:"
9329
msgstr ""
9330
"To temporarily lock or unlock a user account, use the following syntax, "
9331
"respectively:"
9332
9333
#: serverguide/C/security.xml:113(command)
9334
msgid "sudo passwd -l username"
9335
msgstr "sudo passwd -l username"
9336
9337
#: serverguide/C/security.xml:114(command)
9338
msgid "sudo passwd -u username"
9339
msgstr "sudo passwd -u username"
9340
9341
#: serverguide/C/security.xml:118(para)
9342
msgid ""
9343
"To add or delete a personalized group, use the following syntax, "
9344
"respectively:"
9345
msgstr ""
9346
"To add or delete a personalised group, use the following syntax, "
9347
"respectively:"
9348
9349
#: serverguide/C/security.xml:122(command)
9350
msgid "sudo addgroup groupname"
9351
msgstr "sudo addgroup groupname"
9352
9353
#: serverguide/C/security.xml:123(command)
9354
msgid "sudo delgroup groupname"
9355
msgstr "sudo delgroup groupname"
9356
9357
#: serverguide/C/security.xml:127(para)
9358
msgid "To add a user to a group, use the following syntax:"
9359
msgstr "To add a user to a group, use the following syntax:"
9360
9361
#: serverguide/C/security.xml:131(command)
9362
msgid "sudo adduser username groupname"
9363
msgstr "sudo adduser username groupname"
9364
9365
#: serverguide/C/security.xml:138(title)
9366
msgid "User Profile Security"
9367
msgstr "User Profile Security"
9368
9369
#: serverguide/C/security.xml:139(para)
9370
msgid ""
9371
"When a new user is created, the adduser utility creates a brand new home "
9372
"directory named <filename class=\"directory\">/home/username</filename>, "
9373
"respectively. The default profile is modeled after the contents found in the "
9374
"directory of <filename class=\"directory\">/etc/skel</filename>, which "
9375
"includes all profile basics."
9376
msgstr ""
9377
"When a new user is created, the adduser utility creates a brand new home "
9378
"directory named <filename class=\"directory\">/home/username</filename>, "
9379
"respectively. The default profile is modelled after the contents found in "
9380
"the directory of <filename class=\"directory\">/etc/skel</filename>, which "
9381
"includes all profile basics."
9382
9383
#: serverguide/C/security.xml:142(para)
9384
msgid ""
9385
"If your server will be home to multiple users, you should pay close "
9386
"attention to the user home directory permissions to ensure confidentiality. "
9387
"By default, user home directories in Ubuntu are created with world "
9388
"read/execute permissions. This means that all users can browse and access "
9389
"the contents of other users home directories. This may not be suitable for "
9390
"your environment."
9391
msgstr ""
9392
"If your server will be home to multiple users, you should pay close "
9393
"attention to the user home directory permissions to ensure confidentiality. "
9394
"By default, user home directories in Ubuntu are created with world "
9395
"read/execute permissions. This means that all users can browse and access "
9396
"the contents of other users home directories. This may not be suitable for "
9397
"your environment."
9398
9399
#: serverguide/C/security.xml:147(para)
9400
msgid ""
9401
"To verify your current users home directory permissions, use the following "
9402
"syntax:"
9403
msgstr ""
9404
"To verify your current users home directory permissions, use the following "
9405
"syntax:"
9406
9407
#: serverguide/C/security.xml:151(command) serverguide/C/security.xml:183(command)
9408
msgid "ls -ld /home/username"
9409
msgstr "ls -ld /home/username"
9410
9411
#: serverguide/C/security.xml:153(para)
9412
msgid ""
9413
"The following output shows that the directory <filename "
9414
"class=\"directory\">/home/username</filename> has world readable permissions:"
9415
msgstr ""
9416
"The following output shows that the directory <filename "
9417
"class=\"directory\">/home/username</filename> has world readable permissions:"
9418
9419
#: serverguide/C/security.xml:156(computeroutput)
9420
#, no-wrap
9421
msgid "drwxr-xr-x 2 username username 4096 2007-10-02 20:03 username"
9422
msgstr "drwxr-xr-x 2 username username 4096 2007-10-02 20:03 username"
9423
9424
#: serverguide/C/security.xml:160(para)
9425
msgid ""
9426
"You can remove the world readable permissions using the following syntax:"
9427
msgstr ""
9428
"You can remove the world readable permissions using the following syntax:"
9429
9430
#: serverguide/C/security.xml:164(command)
9431
msgid "sudo chmod 0750 /home/username"
9432
msgstr "sudo chmod 0750 /home/username"
9433
9434
#: serverguide/C/security.xml:167(para)
9435
msgid ""
9436
"Some people tend to use the recursive option (-R) indiscriminately which "
9437
"modifies all child folders and files, but this is not necessary, and may "
9438
"yield other undesirable results. The parent directory alone is sufficient "
9439
"for preventing unauthorized access to anything below the parent."
9440
msgstr ""
9441
"Some people tend to use the recursive option (-R) indiscriminately which "
9442
"modifies all child folders and files, but this is not necessary, and may "
9443
"yield other undesirable results. The parent directory alone is sufficient "
9444
"for preventing unauthorised access to anything below the parent."
9445
9446
#: serverguide/C/security.xml:171(para)
9447
msgid ""
9448
"A much more efficient approach to the matter would be to modify the "
9449
"<application>adduser</application> global default permissions when creating "
9450
"user home folders. Simply edit the file "
9451
"<filename>/etc/adduser.conf</filename> and modify the "
9452
"<varname>DIR_MODE</varname> variable to something appropriate, so that all "
9453
"new home directories will receive the correct permissions."
9454
msgstr ""
9455
"A much more efficient approach to the matter would be to modify the "
9456
"<application>adduser</application> global default permissions when creating "
9457
"user home folders. Simply edit the file "
9458
"<filename>/etc/adduser.conf</filename> and modify the "
9459
"<varname>DIR_MODE</varname> variable to something appropriate, so that all "
9460
"new home directories will receive the correct permissions."
9461
9462
#: serverguide/C/security.xml:174(programlisting)
9463
#, no-wrap
9464
msgid ""
9465
"\n"
9466
"DIR_MODE=0750\n"
9467
msgstr ""
9468
"\n"
9469
"DIR_MODE=0750\n"
9470
9471
#: serverguide/C/security.xml:179(para)
9472
msgid ""
9473
"After correcting the directory permissions using any of the previously "
9474
"mentioned techniques, verify the results using the following syntax:"
9475
msgstr ""
9476
"After correcting the directory permissions using any of the previously "
9477
"mentioned techniques, verify the results using the following syntax:"
9478
9479
#: serverguide/C/security.xml:185(para)
9480
msgid ""
9481
"The results below show that world readable permissions have been removed:"
9482
msgstr ""
9483
"The results below show that world readable permissions have been removed:"
9484
9485
#: serverguide/C/security.xml:188(computeroutput)
9486
#, no-wrap
9487
msgid "drwxr-x--- 2 username username 4096 2007-10-02 20:03 username"
9488
msgstr "drwxr-x--- 2 username username 4096 2007-10-02 20:03 username"
9489
9490
#: serverguide/C/security.xml:195(title)
9491
msgid "Password Policy"
9492
msgstr "Password Policy"
9493
9494
#: serverguide/C/security.xml:196(para)
9495
msgid ""
9496
"A strong password policy is one of the most important aspects of your "
9497
"security posture. Many successful security breaches involve simple brute "
9498
"force and dictionary attacks against weak passwords. If you intend to offer "
9499
"any form of remote access involving your local password system, make sure "
9500
"you adequately address minimum password complexity requirements, maximum "
9501
"password lifetimes, and frequent audits of your authentication systems."
9502
msgstr ""
9503
"A strong password policy is one of the most important aspects of your "
9504
"security posture. Many successful security breaches involve simple brute "
9505
"force and dictionary attacks against weak passwords. If you intend to offer "
9506
"any form of remote access involving your local password system, make sure "
9507
"you adequately address minimum password complexity requirements, maximum "
9508
"password lifetimes, and frequent audits of your authentication systems."
9509
9510
#: serverguide/C/security.xml:200(title)
9511
msgid "Minimum Password Length"
9512
msgstr "Minimum Password Length"
9513
9514
#: serverguide/C/security.xml:201(para)
9515
msgid ""
9516
"By default, Ubuntu requires a minimum password length of 6 characters, as "
9517
"well as some basic entropy checks. These values are controlled in the file "
9518
"<filename>/etc/pam.d/common-password</filename>, which is outlined below."
9519
msgstr ""
9520
9521
#: serverguide/C/security.xml:204(programlisting)
9522
#, no-wrap
9523
msgid ""
9524
"\n"
9525
"password [success=2 default=ignore] pam_unix.so obscure sha512\n"
9526
msgstr ""
9527
9528
#: serverguide/C/security.xml:207(para)
9529
msgid ""
9530
"If you would like to adjust the minimum length to 8 characters, change the "
9531
"appropriate variable to min=8. The modification is outlined below."
9532
msgstr ""
9533
9534
#: serverguide/C/security.xml:210(programlisting)
9535
#, no-wrap
9536
msgid ""
9537
"\n"
9538
"password [success=2 default=ignore] pam_unix.so obscure sha512 "
9539
"min=8\n"
9540
msgstr ""
9541
9542
#: serverguide/C/security.xml:215(title)
9543
msgid "Password Expiration"
9544
msgstr "Password Expiration"
9545
9546
#: serverguide/C/security.xml:216(para)
9547
msgid ""
9548
"When creating user accounts, you should make it a policy to have a minimum "
9549
"and maximum password age forcing users to change their passwords when they "
9550
"expire."
9551
msgstr ""
9552
"When creating user accounts, you should make it a policy to have a minimum "
9553
"and maximum password age forcing users to change their passwords when they "
9554
"expire."
9555
9556
#: serverguide/C/security.xml:221(para)
9557
msgid ""
9558
"To easily view the current status of a user account, use the following "
9559
"syntax:"
9560
msgstr ""
9561
"To easily view the current status of a user account, use the following "
9562
"syntax:"
9563
9564
#: serverguide/C/security.xml:225(command) serverguide/C/security.xml:258(command)
9565
msgid "sudo chage -l username"
9566
msgstr "sudo chage -l username"
9567
9568
#: serverguide/C/security.xml:227(para)
9569
msgid ""
9570
"The output below shows interesting facts about the user account, namely that "
9571
"there are no policies applied:"
9572
msgstr ""
9573
"The output below shows interesting facts about the user account, namely that "
9574
"there are no policies applied:"
9575
9576
#: serverguide/C/security.xml:230(computeroutput)
9577
#, no-wrap
9578
msgid ""
9579
"Last password change : Jan 20, 2008\n"
9580
"Password expires : never\n"
9581
"Password inactive : never\n"
9582
"Account expires : never\n"
9583
"Minimum number of days between password change : 0\n"
9584
"Maximum number of days between password change : 99999\n"
9585
"Number of days of warning before password expires : 7"
9586
msgstr ""
9587
"Last password change : Jan 20, 2008\n"
9588
"Password expires : never\n"
9589
"Password inactive : never\n"
9590
"Account expires : never\n"
9591
"Minimum number of days between password change : 0\n"
9592
"Maximum number of days between password change : 99999\n"
9593
"Number of days of warning before password expires : 7"
9594
9595
#: serverguide/C/security.xml:240(para)
9596
msgid ""
9597
"To set any of these values, simply use the following syntax, and follow the "
9598
"interactive prompts:"
9599
msgstr ""
9600
"To set any of these values, simply use the following syntax, and follow the "
9601
"interactive prompts:"
9602
9603
#: serverguide/C/security.xml:244(command)
9604
msgid "sudo chage username"
9605
msgstr "sudo chage username"
9606
9607
#: serverguide/C/security.xml:246(para)
9608
msgid ""
9609
"The following is also an example of how you can manually change the explicit "
9610
"expiration date (-E) to 01/31/2008, minimum password age (-m) of 5 days, "
9611
"maximum password age (-M) of 90 days, inactivity period (-I) of 5 days after "
9612
"password expiration, and a warning time period (-W) of 14 days before "
9613
"password expiration."
9614
msgstr ""
9615
"The following is also an example of how you can manually change the explicit "
9616
"expiration date (-E) to 01/31/2008, minimum password age (-m) of 5 days, "
9617
"maximum password age (-M) of 90 days, inactivity period (-I) of 5 days after "
9618
"password expiration, and a warning time period (-W) of 14 days before "
9619
"password expiration."
9620
9621
#: serverguide/C/security.xml:250(command)
9622
msgid "sudo chage -E 01/31/2011 -m 5 -M 90 -I 30 -W 14 username"
9623
msgstr ""
9624
9625
#: serverguide/C/security.xml:254(para)
9626
msgid "To verify changes, use the same syntax as mentioned previously:"
9627
msgstr "To verify changes, use the same syntax as mentioned previously:"
9628
9629
#: serverguide/C/security.xml:260(para)
9630
msgid ""
9631
"The output below shows the new policies that have been established for the "
9632
"account:"
9633
msgstr ""
9634
"The output below shows the new policies that have been established for the "
9635
"account:"
9636
9637
#: serverguide/C/security.xml:263(computeroutput)
9638
#, no-wrap
9639
msgid ""
9640
"Last password change : Jan 20, 2008\n"
9641
"Password expires : Apr 19, 2008\n"
9642
"Password inactive : May 19, 2008\n"
9643
"Account expires : Jan 31, 2008\n"
9644
"Minimum number of days between password change : 5\n"
9645
"Maximum number of days between password change : 90\n"
9646
"Number of days of warning before password expires : 14"
9647
msgstr ""
9648
"Last password change : Jan 20, 2008\n"
9649
"Password expires : Apr 19, 2008\n"
9650
"Password inactive : May 19, 2008\n"
9651
"Account expires : Jan 31, 2008\n"
9652
"Minimum number of days between password change : 5\n"
9653
"Maximum number of days between password change : 90\n"
9654
"Number of days of warning before password expires : 14"
9655
9656
#: serverguide/C/security.xml:279(title)
9657
msgid "Other Security Considerations"
9658
msgstr "Other Security Considerations"
9659
9660
#: serverguide/C/security.xml:280(para)
9661
msgid ""
9662
"Many applications use alternate authentication mechanisms that can be easily "
9663
"overlooked by even experienced system administrators. Therefore, it is "
9664
"important to understand and control how users authenticate and gain access "
9665
"to services and applications on your server."
9666
msgstr ""
9667
"Many applications use alternate authentication mechanisms that can be easily "
9668
"overlooked by even experienced system administrators. Therefore, it is "
9669
"important to understand and control how users authenticate and gain access "
9670
"to services and applications on your server."
9671
9672
#: serverguide/C/security.xml:285(title)
9673
msgid "SSH Access by Disabled Users"
9674
msgstr "SSH Access by Disabled Users"
9675
9676
#: serverguide/C/security.xml:286(para)
9677
msgid ""
9678
"Simply disabling/locking a user account will not prevent a user from logging "
9679
"into your server remotely if they have previously set up RSA public key "
9680
"authentication. They will still be able to gain shell access to the server, "
9681
"without the need for any password. Remember to check the users home "
9682
"directory for files that will allow for this type of authenticated SSH "
9683
"access. e.g. <filename>/home/username/.ssh/authorized_keys</filename>."
9684
msgstr ""
9685
"Simply disabling/locking a user account will not prevent a user from logging "
9686
"into your server remotely if they have previously set up RSA public key "
9687
"authentication. They will still be able to gain shell access to the server, "
9688
"without the need for any password. Remember to check the users home "
9689
"directory for files that will allow for this type of authenticated SSH "
9690
"access. e.g. <filename>/home/username/.ssh/authorized_keys</filename>."
9691
9692
#: serverguide/C/security.xml:289(para)
9693
msgid ""
9694
"Remove or rename the directory <filename "
9695
"class=\"directory\">.ssh/</filename> in the user's home folder to prevent "
9696
"further SSH authentication capabilities."
9697
msgstr ""
9698
"Remove or rename the directory <filename "
9699
"class=\"directory\">.ssh/</filename> in the user's home folder to prevent "
9700
"further SSH authentication capabilities."
9701
9702
#: serverguide/C/security.xml:292(para)
9703
msgid ""
9704
"Be sure to check for any established SSH connections by the disabled user, "
9705
"as it is possible they may have existing inbound or outbound connections. "
9706
"Kill any that are found."
9707
msgstr ""
9708
"Be sure to check for any established SSH connections by the disabled user, "
9709
"as it is possible they may have existing inbound or outbound connections. "
9710
"Kill any that are found."
9711
9712
#: serverguide/C/security.xml:295(para)
9713
msgid ""
9714
"Restrict SSH access to only user accounts that should have it. For example, "
9715
"you may create a group called \"sshlogin\" and add the group name as the "
9716
"value associated with the <varname>AllowGroups</varname> variable located in "
9717
"the file <filename>/etc/ssh/sshd_config</filename>."
9718
msgstr ""
9719
"Restrict SSH access to only user accounts that should have it. For example, "
9720
"you may create a group called \"sshlogin\" and add the group name as the "
9721
"value associated with the <varname>AllowGroups</varname> variable located in "
9722
"the file <filename>/etc/ssh/sshd_config</filename>."
9723
9724
#: serverguide/C/security.xml:298(programlisting)
9725
#, no-wrap
9726
msgid ""
9727
"\n"
9728
"AllowGroups sshlogin\n"
9729
msgstr ""
9730
"\n"
9731
"AllowGroups sshlogin\n"
9732
9733
#: serverguide/C/security.xml:301(para)
9734
msgid ""
9735
"Then add your permitted SSH users to the group \"sshlogin\", and restart the "
9736
"SSH service."
9737
msgstr ""
9738
"Then add your permitted SSH users to the group \"sshlogin\", and restart the "
9739
"SSH service."
9740
9741
#: serverguide/C/security.xml:305(command)
9742
msgid "sudo adduser username sshlogin"
9743
msgstr "sudo adduser username sshlogin"
9744
9745
#: serverguide/C/security.xml:306(command) serverguide/C/remote-administration.xml:149(command)
9746
msgid "sudo /etc/init.d/ssh restart"
9747
msgstr "sudo /etc/init.d/ssh restart"
9748
9749
#: serverguide/C/security.xml:310(title)
9750
msgid "External User Database Authentication"
9751
msgstr "External User Database Authentication"
9752
9753
#: serverguide/C/security.xml:311(para)
9754
msgid ""
9755
"Most enterprise networks require centralized authentication and access "
9756
"controls for all system resources. If you have configured your server to "
9757
"authenticate users against external databases, be sure to disable the user "
9758
"accounts both externally and locally, this way you ensure that local "
9759
"fallback authentication is not possible."
9760
msgstr ""
9761
"Most enterprise networks require centralised authentication and access "
9762
"controls for all system resources. If you have configured your server to "
9763
"authenticate users against external databases, be sure to disable the user "
9764
"accounts both externally and locally, this way you ensure that local "
9765
"fallback authentication is not possible."
9766
9767
#: serverguide/C/security.xml:320(title)
9768
msgid "Console Security"
9769
msgstr "Console Security"
9770
9771
#: serverguide/C/security.xml:321(para)
9772
msgid ""
9773
"As with any other security barrier you put in place to protect your server, "
9774
"it is pretty tough to defend against untold damage caused by someone with "
9775
"physical access to your environment, for example, theft of hard drives, "
9776
"power or service disruption and so on. Therefore, console security should be "
9777
"addressed merely as one component of your overall physical security "
9778
"strategy. A locked \"screen door\" may deter a casual criminal, or at the "
9779
"very least slow down a determined one, so it is still advisable to perform "
9780
"basic precautions with regard to console security."
9781
msgstr ""
9782
"As with any other security barrier you put in place to protect your server, "
9783
"it is pretty tough to defend against untold damage caused by someone with "
9784
"physical access to your environment, for example, theft of hard drives, "
9785
"power or service disruption and so on. Therefore, console security should be "
9786
"addressed merely as one component of your overall physical security "
9787
"strategy. A locked \"screen door\" may deter a casual criminal, or at the "
9788
"very least slow down a determined one, so it is still advisable to perform "
9789
"basic precautions with regard to console security."
9790
9791
#: serverguide/C/security.xml:324(para)
9792
msgid ""
9793
"The following instructions will help defend your server against issues that "
9794
"could otherwise yield very serious consequences."
9795
msgstr ""
9796
"The following instructions will help defend your server against issues that "
9797
"could otherwise yield very serious consequences."
9798
9799
#: serverguide/C/security.xml:329(title)
9800
msgid "Disable Ctrl+Alt+Delete"
9801
msgstr "Disable Ctrl+Alt+Delete"
9802
9803
#: serverguide/C/security.xml:330(para)
9804
msgid ""
9805
"First and foremost, anyone that has physical access to the keyboard can "
9806
"simply use the "
9807
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
9808
"eycombo> key combination to reboot the server without having to log on. "
9809
"Sure, someone could simply unplug the power source, but you should still "
9810
"prevent the use of this key combination on a production server. This forces "
9811
"an attacker to take more drastic measures to reboot the server, and will "
9812
"prevent accidental reboots at the same time."
9813
msgstr ""
9814
"First and foremost, anyone that has physical access to the keyboard can "
9815
"simply use the "
9816
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
9817
"eycombo> key combination to reboot the server without having to log on. "
9818
"Sure, someone could simply unplug the power source, but you should still "
9819
"prevent the use of this key combination on a production server. This forces "
9820
"an attacker to take more drastic measures to reboot the server, and will "
9821
"prevent accidental reboots at the same time."
9822
9823
#: serverguide/C/security.xml:335(para)
9824
msgid ""
9825
"To disable the reboot action taken by pressing the "
9826
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
9827
"eycombo> key combination, comment out the following line in the file "
9828
"<filename>/etc/init/control-alt-delete.conf</filename>."
9829
msgstr ""
9830
"To disable the reboot action taken by pressing the "
9831
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
9832
"eycombo> key combination, comment out the following line in the file "
9833
"<filename>/etc/init/control-alt-delete.conf</filename>."
9834
9835
#: serverguide/C/security.xml:338(programlisting)
9836
#, no-wrap
9837
msgid ""
9838
"\n"
9839
"#exec shutdown -r now \"Control-Alt-Delete pressed\"\n"
9840
msgstr ""
9841
"\n"
9842
"#exec shutdown -r now \"Control-Alt-Delete pressed\"\n"
9843
9844
#: serverguide/C/security.xml:347(title)
9845
msgid "Firewall"
9846
msgstr "Firewall"
9847
9848
#: serverguide/C/security.xml:350(para)
9849
msgid ""
9850
"The Linux kernel includes the <emphasis>Netfilter</emphasis> subsystem, "
9851
"which is used to manipulate or decide the fate of network traffic headed "
9852
"into or through your server. All modern Linux firewall solutions use this "
9853
"system for packet filtering."
9854
msgstr ""
9855
"The Linux kernel includes the <emphasis>Netfilter</emphasis> subsystem, "
9856
"which is used to manipulate or decide the fate of network traffic headed "
9857
"into or through your server. All modern Linux firewall solutions use this "
9858
"system for packet filtering."
9859
9860
#: serverguide/C/security.xml:355(para)
9861
msgid ""
9862
"The kernel's packet filtering system would be of little use to "
9863
"administrators without a userspace interface to manage it. This is the "
9864
"purpose of iptables. When a packet reaches your server, it will be handed "
9865
"off to the Netfilter subsystem for acceptance, manipulation, or rejection "
9866
"based on the rules supplied to it from userspace via iptables. Thus, "
9867
"iptables is all you need to manage your firewall if you're familiar with it, "
9868
"but many frontends are available to simplify the task."
9869
msgstr ""
9870
"The kernel's packet filtering system would be of little use to "
9871
"administrators without a userspace interface to manage it. This is the "
9872
"purpose of iptables. When a packet reaches your server, it will be handed "
9873
"off to the Netfilter subsystem for acceptance, manipulation, or rejection "
9874
"based on the rules supplied to it from userspace via iptables. Thus, "
9875
"iptables is all you need to manage your firewall if you're familiar with it, "
9876
"but many frontends are available to simplify the task."
9877
9878
#: serverguide/C/security.xml:365(title)
9879
msgid "ufw - Uncomplicated Firewall"
9880
msgstr "ufw - Uncomplicated Firewall"
9881
9882
#: serverguide/C/security.xml:366(para)
9883
msgid ""
9884
"The default firewall configuration tool for Ubuntu is "
9885
"<application>ufw</application>. Developed to ease iptables firewall "
9886
"configuration, <application>ufw</application> provides a user friendly way "
9887
"to create an IPv4 or IPv6 host-based firewall."
9888
msgstr ""
9889
"The default firewall configuration tool for Ubuntu is "
9890
"<application>ufw</application>. Developed to ease iptables firewall "
9891
"configuration, <application>ufw</application> provides a user friendly way "
9892
"to create an IPv4 or IPv6 host-based firewall."
9893
9894
#: serverguide/C/security.xml:370(para)
9895
msgid ""
9896
"<application>ufw</application> by default is initially disabled. From the "
9897
"<application>ufw</application> man page:"
9898
msgstr ""
9899
"<application>ufw</application> by default is initially disabled. From the "
9900
"<application>ufw</application> man page:"
9901
9902
#: serverguide/C/security.xml:374(quote)
9903
msgid ""
9904
"ufw is not intended to provide complete firewall functionality via its "
9905
"command interface, but instead provides an easy way to add or remove simple "
9906
"rules. It is currently mainly used for host-based firewalls."
9907
msgstr ""
9908
"ufw is not intended to provide complete firewall functionality via its "
9909
"command interface, but instead provides an easy way to add or remove simple "
9910
"rules. It is currently mainly used for host-based firewalls."
9911
9912
#: serverguide/C/security.xml:378(para)
9913
msgid ""
9914
"The following are some examples of how to use <application>ufw</application>:"
9915
msgstr ""
9916
"The following are some examples of how to use <application>ufw</application>:"
9917
9918
#: serverguide/C/security.xml:383(para)
9919
msgid ""
9920
"First, <application>ufw</application> needs to be enabled. From a terminal "
9921
"prompt enter:"
9922
msgstr ""
9923
"First, <application>ufw</application> needs to be enabled. From a terminal "
9924
"prompt enter:"
9925
9926
#: serverguide/C/security.xml:387(command)
9927
msgid "sudo ufw enable"
9928
msgstr "sudo ufw enable"
9929
9930
#: serverguide/C/security.xml:391(para)
9931
msgid "To open a port (ssh in this example):"
9932
msgstr "To open a port (ssh in this example):"
9933
9934
#: serverguide/C/security.xml:395(command)
9935
msgid "sudo ufw allow 22"
9936
msgstr "sudo ufw allow 22"
9937
9938
#: serverguide/C/security.xml:399(para)
9939
msgid "Rules can also be added using a <emphasis>numbered</emphasis> format:"
9940
msgstr ""
9941
"Rules can also be added using a <emphasis>numbered</emphasis> format:"
9942
9943
#: serverguide/C/security.xml:403(command)
9944
msgid "sudo ufw insert 1 allow 80"
9945
msgstr "sudo ufw insert 1 allow 80"
9946
9947
#: serverguide/C/security.xml:407(para)
9948
msgid "Similarly, to close an opened port:"
9949
msgstr "Similarly, to close an opened port:"
9950
9951
#: serverguide/C/security.xml:411(command)
9952
msgid "sudo ufw deny 22"
9953
msgstr "sudo ufw deny 22"
9954
9955
#: serverguide/C/security.xml:415(para)
9956
msgid "To remove a rule, use delete followed by the rule:"
9957
msgstr "To remove a rule, use delete followed by the rule:"
9958
9959
#: serverguide/C/security.xml:419(command)
9960
msgid "sudo ufw delete deny 22"
9961
msgstr "sudo ufw delete deny 22"
9962
9963
#: serverguide/C/security.xml:423(para)
9964
msgid ""
9965
"It is also possible to allow access from specific hosts or networks to a "
9966
"port. The following example allows ssh access from host 192.168.0.2 to any "
9967
"ip address on this host:"
9968
msgstr ""
9969
"It is also possible to allow access from specific hosts or networks to a "
9970
"port. The following example allows ssh access from host 192.168.0.2 to any "
9971
"ip address on this host:"
9972
9973
#: serverguide/C/security.xml:428(command)
9974
msgid "sudo ufw allow proto tcp from 192.168.0.2 to any port 22"
9975
msgstr "sudo ufw allow proto tcp from 192.168.0.2 to any port 22"
9976
9977
#: serverguide/C/security.xml:430(para)
9978
msgid ""
9979
"Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh access from the entire "
9980
"subnet."
9981
msgstr ""
9982
"Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh access from the entire "
9983
"subnet."
9984
9985
#: serverguide/C/security.xml:436(para)
9986
msgid ""
9987
"Adding the <emphasis>--dry-run</emphasis> option to a "
9988
"<emphasis>ufw</emphasis> command will output the resulting rules, but not "
9989
"apply them. For example, the following is what would be applied if opening "
9990
"the HTTP port:"
9991
msgstr ""
9992
"Adding the <emphasis>--dry-run</emphasis> option to a "
9993
"<emphasis>ufw</emphasis> command will output the resulting rules, but not "
9994
"apply them. For example, the following is what would be applied if opening "
9995
"the HTTP port:"
9996
9997
#: serverguide/C/security.xml:442(command)
9998
msgid "sudo ufw --dry-run allow http"
9999
msgstr "sudo ufw --dry-run allow http"
10000
10001
#: serverguide/C/security.xml:446(computeroutput)
10002
#, no-wrap
10003
msgid ""
10004
"*filter\n"
10005
":ufw-user-input - [0:0]\n"
10006
":ufw-user-output - [0:0]\n"
10007
":ufw-user-forward - [0:0]\n"
10008
":ufw-user-limit - [0:0]\n"
10009
":ufw-user-limit-accept - [0:0]\n"
10010
"### RULES ###\n"
10011
"\n"
10012
"### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0\n"
10013
"-A ufw-user-input -p tcp --dport 80 -j ACCEPT\n"
10014
"\n"
10015
"### END RULES ###\n"
10016
"-A ufw-user-input -j RETURN\n"
10017
"-A ufw-user-output -j RETURN\n"
10018
"-A ufw-user-forward -j RETURN\n"
10019
"-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix \"[UFW "
10020
"LIMIT]: \"\n"
10021
"-A ufw-user-limit -j REJECT\n"
10022
"-A ufw-user-limit-accept -j ACCEPT\n"
10023
"COMMIT\n"
10024
"Rules updated"
10025
msgstr ""
10026
"*filter\n"
10027
":ufw-user-input - [0:0]\n"
10028
":ufw-user-output - [0:0]\n"
10029
":ufw-user-forward - [0:0]\n"
10030
":ufw-user-limit - [0:0]\n"
10031
":ufw-user-limit-accept - [0:0]\n"
10032
"### RULES ###\n"
10033
"\n"
10034
"### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0\n"
10035
"-A ufw-user-input -p tcp --dport 80 -j ACCEPT\n"
10036
"\n"
10037
"### END RULES ###\n"
10038
"-A ufw-user-input -j RETURN\n"
10039
"-A ufw-user-output -j RETURN\n"
10040
"-A ufw-user-forward -j RETURN\n"
10041
"-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix \"[UFW "
10042
"LIMIT]: \"\n"
10043
"-A ufw-user-limit -j REJECT\n"
10044
"-A ufw-user-limit-accept -j ACCEPT\n"
10045
"COMMIT\n"
10046
"Rules updated"
10047
10048
#: serverguide/C/security.xml:470(para)
10049
msgid "<application>ufw</application> can be disabled by:"
10050
msgstr "<application>ufw</application> can be disabled by:"
10051
10052
#: serverguide/C/security.xml:474(command)
10053
msgid "sudo ufw disable"
10054
msgstr "sudo ufw disable"
10055
10056
#: serverguide/C/security.xml:478(para)
10057
msgid "To see the firewall status, enter:"
10058
msgstr "To see the firewall status, enter:"
10059
10060
#: serverguide/C/security.xml:482(command)
10061
msgid "sudo ufw status"
10062
msgstr "sudo ufw status"
10063
10064
#: serverguide/C/security.xml:486(para)
10065
msgid "And for more verbose status information use:"
10066
msgstr "And for more verbose status information use:"
10067
10068
#: serverguide/C/security.xml:490(command)
10069
msgid "sudo ufw status verbose"
10070
msgstr "sudo ufw status verbose"
10071
10072
#: serverguide/C/security.xml:494(para)
10073
msgid "To view the <emphasis>numbered</emphasis> format:"
10074
msgstr "To view the <emphasis>numbered</emphasis> format:"
10075
10076
#: serverguide/C/security.xml:498(command)
10077
msgid "sudo ufw status numbered"
10078
msgstr "sudo ufw status numbered"
10079
10080
#: serverguide/C/security.xml:503(para)
10081
msgid ""
10082
"If the port you want to open or close is defined in "
10083
"<filename>/etc/services</filename>, you can use the port name instead of the "
10084
"number. In the above examples, replace <emphasis>22</emphasis> with "
10085
"<emphasis>ssh</emphasis>."
10086
msgstr ""
10087
"If the port you want to open or close is defined in "
10088
"<filename>/etc/services</filename>, you can use the port name instead of the "
10089
"number. In the above examples, replace <emphasis>22</emphasis> with "
10090
"<emphasis>ssh</emphasis>."
10091
10092
#: serverguide/C/security.xml:509(para)
10093
msgid ""
10094
"This is a quick introduction to using <application>ufw</application>. Please "
10095
"refer to the <application>ufw</application> man page for more information."
10096
msgstr ""
10097
"This is a quick introduction to using <application>ufw</application>. Please "
10098
"refer to the <application>ufw</application> man page for more information."
10099
10100
#: serverguide/C/security.xml:515(title)
10101
msgid "ufw Application Integration"
10102
msgstr "ufw Application Integration"
10103
10104
#: serverguide/C/security.xml:517(para)
10105
msgid ""
10106
"Applications that open ports can include an <application>ufw</application> "
10107
"profile, which details the ports needed for the application to function "
10108
"properly. The profiles are kept in <filename "
10109
"role=\"directory\">/etc/ufw/applications.d</filename>, and can be edited if "
10110
"the default ports have been changed."
10111
msgstr ""
10112
"Applications that open ports can include an <application>ufw</application> "
10113
"profile, which details the ports needed for the application to function "
10114
"properly. The profiles are kept in <filename "
10115
"role=\"directory\">/etc/ufw/applications.d</filename>, and can be edited if "
10116
"the default ports have been changed."
10117
10118
#: serverguide/C/security.xml:526(para)
10119
msgid ""
10120
"To view which applications have installed a profile, enter the following in "
10121
"a terminal:"
10122
msgstr ""
10123
"To view which applications have installed a profile, enter the following in "
10124
"a terminal:"
10125
10126
#: serverguide/C/security.xml:531(command)
10127
msgid "sudo ufw app list"
10128
msgstr "sudo ufw app list"
10129
10130
#: serverguide/C/security.xml:537(para)
10131
msgid ""
10132
"Similar to allowing traffic to a port, using an application profile is "
10133
"accomplished by entering:"
10134
msgstr ""
10135
"Similar to allowing traffic to a port, using an application profile is "
10136
"accomplished by entering:"
10137
10138
#: serverguide/C/security.xml:542(command)
10139
msgid "sudo ufw allow Samba"
10140
msgstr "sudo ufw allow Samba"
10141
10142
#: serverguide/C/security.xml:548(para)
10143
msgid "An extended syntax is available as well:"
10144
msgstr "An extended syntax is available as well:"
10145
10146
#: serverguide/C/security.xml:553(command)
10147
msgid "ufw allow from 192.168.0.0/24 to any app Samba"
10148
msgstr "ufw allow from 192.168.0.0/24 to any app Samba"
10149
10150
#: serverguide/C/security.xml:556(para)
10151
msgid ""
10152
"Replace <emphasis>Samba</emphasis> and <emphasis>192.168.0.0/24</emphasis> "
10153
"with the application profile you are using and the IP range for your network."
10154
msgstr ""
10155
"Replace <emphasis>Samba</emphasis> and <emphasis>192.168.0.0/24</emphasis> "
10156
"with the application profile you are using and the IP range for your network."
10157
10158
#: serverguide/C/security.xml:562(para)
10159
msgid ""
10160
"There is no need to specify the <emphasis>protocol</emphasis> for the "
10161
"application, because that information is detailed in the profile. Also, note "
10162
"that the <emphasis>app</emphasis> name replaces the "
10163
"<emphasis>port</emphasis> number."
10164
msgstr ""
10165
"There is no need to specify the <emphasis>protocol</emphasis> for the "
10166
"application, because that information is detailed in the profile. Also, note "
10167
"that the <emphasis>app</emphasis> name replaces the "
10168
"<emphasis>port</emphasis> number."
10169
10170
#: serverguide/C/security.xml:571(para)
10171
msgid ""
10172
"To view details about which ports, protocols, etc are defined for an "
10173
"application, enter:"
10174
msgstr ""
10175
"To view details about which ports, protocols, etc are defined for an "
10176
"application, enter:"
10177
10178
#: serverguide/C/security.xml:576(command)
10179
msgid "sudo ufw app info Samba"
10180
msgstr "sudo ufw app info Samba"
10181
10182
#: serverguide/C/security.xml:582(para)
10183
msgid ""
10184
"Not all applications that require opening a network port come with "
10185
"<application>ufw</application> profiles, but if you have profiled an "
10186
"application and want the file to be included with the package, please file a "
10187
"bug against the package in <ulink "
10188
"url=\"https://launchpad.net/\">Launchpad</ulink>."
10189
msgstr ""
10190
"Not all applications that require opening a network port come with "
10191
"<application>ufw</application> profiles, but if you have profiled an "
10192
"application and want the file to be included with the package, please file a "
10193
"bug against the package in <ulink "
10194
"url=\"https://launchpad.net/\">Launchpad</ulink>."
10195
10196
#: serverguide/C/security.xml:591(title)
10197
msgid "IP Masquerading"
10198
msgstr "IP Masquerading"
10199
10200
#: serverguide/C/security.xml:592(para)
10201
msgid ""
10202
"The purpose of IP Masquerading is to allow machines with private, non-"
10203
"routable IP addresses on your network to access the Internet through the "
10204
"machine doing the masquerading. Traffic from your private network destined "
10205
"for the Internet must be manipulated for replies to be routable back to the "
10206
"machine that made the request. To do this, the kernel must modify the "
10207
"<emphasis>source</emphasis> IP address of each packet so that replies will "
10208
"be routed back to it, rather than to the private IP address that made the "
10209
"request, which is impossible over the Internet. Linux uses "
10210
"<emphasis>Connection Tracking</emphasis> (conntrack) to keep track of which "
10211
"connections belong to which machines and reroute each return packet "
10212
"accordingly. Traffic leaving your private network is thus \"masqueraded\" as "
10213
"having originated from your Ubuntu gateway machine. This process is referred "
10214
"to in Microsoft documentation as Internet Connection Sharing."
10215
msgstr ""
10216
"The purpose of IP Masquerading is to allow machines with private, non-"
10217
"routable IP addresses on your network to access the Internet through the "
10218
"machine doing the masquerading. Traffic from your private network destined "
10219
"for the Internet must be manipulated for replies to be routable back to the "
10220
"machine that made the request. To do this, the kernel must modify the "
10221
"<emphasis>source</emphasis> IP address of each packet so that replies will "
10222
"be routed back to it, rather than to the private IP address that made the "
10223
"request, which is impossible over the Internet. Linux uses "
10224
"<emphasis>Connection Tracking</emphasis> (conntrack) to keep track of which "
10225
"connections belong to which machines and reroute each return packet "
10226
"accordingly. Traffic leaving your private network is thus \"masqueraded\" as "
10227
"having originated from your Ubuntu gateway machine. This process is referred "
10228
"to in Microsoft documentation as Internet Connection Sharing."
10229
10230
#: serverguide/C/security.xml:608(title)
10231
msgid "ufw Masquerading"
10232
msgstr "ufw Masquerading"
10233
10234
#: serverguide/C/security.xml:609(para)
10235
msgid ""
10236
"IP Masquerading can be achieved using custom <application>ufw</application> "
10237
"rules. This is possible because the current back-end for "
10238
"<application>ufw</application> is <application>iptables-"
10239
"restore</application> with the rules files located in "
10240
"<filename>/etc/ufw/*.rules</filename>. These files are a great place to add "
10241
"legacy iptables rules used without <application>ufw</application>, and rules "
10242
"that are more network gateway or bridge related."
10243
msgstr ""
10244
"IP Masquerading can be achieved using custom <application>ufw</application> "
10245
"rules. This is possible because the current back-end for "
10246
"<application>ufw</application> is <application>iptables-"
10247
"restore</application> with the rules files located in "
10248
"<filename>/etc/ufw/*.rules</filename>. These files are a great place to add "
10249
"legacy iptables rules used without <application>ufw</application>, and rules "
10250
"that are more network gateway or bridge related."
10251
10252
#: serverguide/C/security.xml:615(para)
10253
msgid ""
10254
"The rules are split into two different files, rules that should be executed "
10255
"before <application>ufw</application> command line rules, and rules that are "
10256
"executed after <application>ufw</application> command line rules."
10257
msgstr ""
10258
"The rules are split into two different files, rules that should be executed "
10259
"before <application>ufw</application> command line rules, and rules that are "
10260
"executed after <application>ufw</application> command line rules."
10261
10262
#: serverguide/C/security.xml:621(para)
10263
msgid ""
10264
"First, packet forwarding needs to be enabled in "
10265
"<application>ufw</application>. Two configuration files will need to be "
10266
"adjusted, in <filename>/etc/default/ufw</filename> change the "
10267
"<emphasis>DEFAULT_FORWARD_POLICY</emphasis> to <quote>ACCEPT</quote>:"
10268
msgstr ""
10269
"First, packet forwarding needs to be enabled in "
10270
"<application>ufw</application>. Two configuration files will need to be "
10271
"adjusted, in <filename>/etc/default/ufw</filename> change the "
10272
"<emphasis>DEFAULT_FORWARD_POLICY</emphasis> to <quote>ACCEPT</quote>:"
10273
10274
#: serverguide/C/security.xml:625(programlisting)
10275
#, no-wrap
10276
msgid ""
10277
"\n"
10278
"DEFAULT_FORWARD_POLICY=\"ACCEPT\"\n"
10279
msgstr ""
10280
"\n"
10281
"DEFAULT_FORWARD_POLICY=\"ACCEPT\"\n"
10282
10283
#: serverguide/C/security.xml:628(para)
10284
msgid "Then edit <filename>/etc/ufw/sysctl.conf</filename> and uncomment:"
10285
msgstr "Then edit <filename>/etc/ufw/sysctl.conf</filename> and uncomment:"
10286
10287
#: serverguide/C/security.xml:631(programlisting)
10288
#, no-wrap
10289
msgid ""
10290
"\n"
10291
"net/ipv4/ip_forward=1\n"
10292
msgstr ""
10293
"\n"
10294
"net/ipv4/ip_forward=1\n"
10295
10296
#: serverguide/C/security.xml:634(para)
10297
msgid "Similarly, for IPv6 forwarding uncomment:"
10298
msgstr "Similarly, for IPv6 forwarding uncomment:"
10299
10300
#: serverguide/C/security.xml:637(programlisting)
10301
#, no-wrap
10302
msgid ""
10303
"\n"
10304
"net/ipv6/conf/default/forwarding=1\n"
10305
msgstr ""
10306
"\n"
10307
"net/ipv6/conf/default/forwarding=1\n"
10308
10309
#: serverguide/C/security.xml:642(para)
10310
msgid ""
10311
"Now we will add rules to the <filename>/etc/ufw/before.rules</filename> "
10312
"file. The default rules only configure the <emphasis>filter</emphasis> "
10313
"table, and to enable masquerading the <emphasis>nat</emphasis> table will "
10314
"need to be configured. Add the following to the top of the file just after "
10315
"the header comments:"
10316
msgstr ""
10317
"Now we will add rules to the <filename>/etc/ufw/before.rules</filename> "
10318
"file. The default rules only configure the <emphasis>filter</emphasis> "
10319
"table, and to enable masquerading the <emphasis>nat</emphasis> table will "
10320
"need to be configured. Add the following to the top of the file just after "
10321
"the header comments:"
10322
10323
#: serverguide/C/security.xml:647(programlisting)
10324
#, no-wrap
10325
msgid ""
10326
"\n"
10327
"# nat Table rules\n"
10328
"*nat\n"
10329
":POSTROUTING ACCEPT [0:0]\n"
10330
"\n"
10331
"# Forward traffic from eth1 through eth0.\n"
10332
"-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE\n"
10333
"\n"
10334
"# don't delete the 'COMMIT' line or these nat table rules won't be "
10335
"processed\n"
10336
"COMMIT\n"
10337
msgstr ""
10338
"\n"
10339
"# nat Table rules\n"
10340
"*nat\n"
10341
":POSTROUTING ACCEPT [0:0]\n"
10342
"\n"
10343
"# Forward traffic from eth1 through eth0.\n"
10344
"-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE\n"
10345
"\n"
10346
"# don't delete the 'COMMIT' line or these nat table rules won't be "
10347
"processed\n"
10348
"COMMIT\n"
10349
10350
#: serverguide/C/security.xml:658(para)
10351
msgid ""
10352
"The comments are not strictly necessary, but it is considered good practice "
10353
"to document your configuration. Also, when modifying any of the "
10354
"<emphasis>rules</emphasis> files in <filename "
10355
"class=\"directory\">/etc/ufw</filename>, make sure these lines are the last "
10356
"line for each table modified:"
10357
msgstr ""
10358
"The comments are not strictly necessary, but it is considered good practice "
10359
"to document your configuration. Also, when modifying any of the "
10360
"<emphasis>rules</emphasis> files in <filename "
10361
"class=\"directory\">/etc/ufw</filename>, make sure these lines are the last "
10362
"line for each table modified:"
10363
10364
#: serverguide/C/security.xml:664(programlisting)
10365
#, no-wrap
10366
msgid ""
10367
"\n"
10368
"# don't delete the 'COMMIT' line or these rules won't be processed\n"
10369
"COMMIT\n"
10370
msgstr ""
10371
"\n"
10372
"# don't delete the 'COMMIT' line or these rules won't be processed\n"
10373
"COMMIT\n"
10374
10375
#: serverguide/C/security.xml:669(para)
10376
msgid ""
10377
"For each <emphasis>Table</emphasis> a corresponding "
10378
"<emphasis>COMMIT</emphasis> statement is required. In these examples only "
10379
"the <emphasis>nat</emphasis> and <emphasis>filter</emphasis> tables are "
10380
"shown, but you can also add rules for the <emphasis>raw</emphasis> and "
10381
"<emphasis>mangle</emphasis> tables."
10382
msgstr ""
10383
"For each <emphasis>Table</emphasis> a corresponding "
10384
"<emphasis>COMMIT</emphasis> statement is required. In these examples only "
10385
"the <emphasis>nat</emphasis> and <emphasis>filter</emphasis> tables are "
10386
"shown, but you can also add rules for the <emphasis>raw</emphasis> and "
10387
"<emphasis>mangle</emphasis> tables."
10388
10389
#: serverguide/C/security.xml:676(para)
10390
msgid ""
10391
"In the above example replace <emphasis>eth0</emphasis>, "
10392
"<emphasis>eth1</emphasis>, and <emphasis>192.168.0.0/24</emphasis> with the "
10393
"appropriate interfaces and IP range for your network."
10394
msgstr ""
10395
"In the above example replace <emphasis>eth0</emphasis>, "
10396
"<emphasis>eth1</emphasis>, and <emphasis>192.168.0.0/24</emphasis> with the "
10397
"appropriate interfaces and IP range for your network."
10398
10399
#: serverguide/C/security.xml:684(para)
10400
msgid ""
10401
"Finally, disable and re-enable <application>ufw</application> to apply the "
10402
"changes:"
10403
msgstr ""
10404
"Finally, disable and re-enable <application>ufw</application> to apply the "
10405
"changes:"
10406
10407
#: serverguide/C/security.xml:688(command)
10408
msgid "sudo ufw disable && sudo ufw enable"
10409
msgstr "sudo ufw disable && sudo ufw enable"
10410
10411
#: serverguide/C/security.xml:692(para)
10412
msgid ""
10413
"IP Masquerading should now be enabled. You can also add any additional "
10414
"FORWARD rules to the <filename>/etc/ufw/before.rules</filename>. It is "
10415
"recommended that these additional rules be added to the <emphasis>ufw-before-"
10416
"forward</emphasis> chain."
10417
msgstr ""
10418
"IP Masquerading should now be enabled. You can also add any additional "
10419
"FORWARD rules to the <filename>/etc/ufw/before.rules</filename>. It is "
10420
"recommended that these additional rules be added to the <emphasis>ufw-before-"
10421
"forward</emphasis> chain."
10422
10423
#: serverguide/C/security.xml:699(title)
10424
msgid "iptables Masquerading"
10425
msgstr "iptables Masquerading"
10426
10427
#: serverguide/C/security.xml:700(para)
10428
msgid ""
10429
"<application>iptables</application> can also be used to enable masquerading."
10430
msgstr ""
10431
"<application>iptables</application> can also be used to enable masquerading."
10432
10433
#: serverguide/C/security.xml:705(para)
10434
msgid ""
10435
"Similar to <application>ufw</application>, the first step is to enable IPv4 "
10436
"packet forwarding by editing <filename>/etc/sysctl.conf</filename> and "
10437
"uncomment the following line"
10438
msgstr ""
10439
"Similar to <application>ufw</application>, the first step is to enable IPv4 "
10440
"packet forwarding by editing <filename>/etc/sysctl.conf</filename> and "
10441
"uncomment the following line"
10442
10443
#: serverguide/C/security.xml:709(programlisting)
10444
#, no-wrap
10445
msgid ""
10446
"\n"
10447
"net.ipv4.ip_forward=1\n"
10448
msgstr ""
10449
"\n"
10450
"net.ipv4.ip_forward=1\n"
10451
10452
#: serverguide/C/security.xml:712(para)
10453
msgid "If you wish to enable IPv6 forwarding also uncomment:"
10454
msgstr "If you wish to enable IPv6 forwarding also uncomment:"
10455
10456
#: serverguide/C/security.xml:715(programlisting)
10457
#, no-wrap
10458
msgid ""
10459
"\n"
10460
"net.ipv6.conf.default.forwarding=1\n"
10461
msgstr ""
10462
"\n"
10463
"net.ipv6.conf.default.forwarding=1\n"
10464
10465
#: serverguide/C/security.xml:720(para)
10466
msgid ""
10467
"Next, execute the <application>sysctl</application> command to enable the "
10468
"new settings in the configuration file:"
10469
msgstr ""
10470
"Next, execute the <application>sysctl</application> command to enable the "
10471
"new settings in the configuration file:"
10472
10473
#: serverguide/C/security.xml:724(command)
10474
msgid "sudo sysctl -p"
10475
msgstr "sudo sysctl -p"
10476
10477
#: serverguide/C/security.xml:728(para)
10478
msgid ""
10479
"IP Masquerading can now be accomplished with a single iptables rule, which "
10480
"may differ slightly based on your network configuration:"
10481
msgstr ""
10482
"IP Masquerading can now be accomplished with a single iptables rule, which "
10483
"may differ slightly based on your network configuration:"
10484
10485
#: serverguide/C/security.xml:731(screen)
10486
#, no-wrap
10487
msgid ""
10488
"\n"
10489
"sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
10490
msgstr ""
10491
"\n"
10492
"sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
10493
10494
#: serverguide/C/security.xml:734(para)
10495
msgid ""
10496
"The above command assumes that your private address space is 192.168.0.0/16 "
10497
"and that your Internet-facing device is ppp0. The syntax is broken down as "
10498
"follows:"
10499
msgstr ""
10500
"The above command assumes that your private address space is 192.168.0.0/16 "
10501
"and that your Internet-facing device is ppp0. The syntax is broken down as "
10502
"follows:"
10503
10504
#: serverguide/C/security.xml:739(para)
10505
msgid "-t nat -- the rule is to go into the nat table"
10506
msgstr "-t nat -- the rule is to go into the nat table"
10507
10508
#: serverguide/C/security.xml:740(para)
10509
msgid ""
10510
"-A POSTROUTING -- the rule is to be appended (-A) to the POSTROUTING chain"
10511
msgstr ""
10512
"-A POSTROUTING -- the rule is to be appended (-A) to the POSTROUTING chain"
10513
10514
#: serverguide/C/security.xml:741(para)
10515
msgid ""
10516
"-s 192.168.0.0/16 -- the rule applies to traffic originating from the "
10517
"specified address space"
10518
msgstr ""
10519
"-s 192.168.0.0/16 -- the rule applies to traffic originating from the "
10520
"specified address space"
10521
10522
#: serverguide/C/security.xml:742(para)
10523
msgid ""
10524
"-o ppp0 -- the rule applies to traffic scheduled to be routed through the "
10525
"specified network device"
10526
msgstr ""
10527
"-o ppp0 -- the rule applies to traffic scheduled to be routed through the "
10528
"specified network device"
10529
10530
#: serverguide/C/security.xml:744(para)
10531
msgid ""
10532
"-j MASQUERADE -- traffic matching this rule is to \"jump\" (-j) to the "
10533
"MASQUERADE target to be manipulated as described above"
10534
msgstr ""
10535
"-j MASQUERADE -- traffic matching this rule is to \"jump\" (-j) to the "
10536
"MASQUERADE target to be manipulated as described above"
10537
10538
#: serverguide/C/security.xml:752(para)
10539
msgid ""
10540
"Also, each chain in the filter table (the default table, and where most or "
10541
"all packet filtering occurs) has a default <emphasis>policy</emphasis> of "
10542
"ACCEPT, but if you are creating a firewall in addition to a gateway device, "
10543
"you may have set the policies to DROP or REJECT, in which case your "
10544
"masqueraded traffic needs to be allowed through the FORWARD chain for the "
10545
"above rule to work:"
10546
msgstr ""
10547
"Also, each chain in the filter table (the default table, and where most or "
10548
"all packet filtering occurs) has a default <emphasis>policy</emphasis> of "
10549
"ACCEPT, but if you are creating a firewall in addition to a gateway device, "
10550
"you may have set the policies to DROP or REJECT, in which case your "
10551
"masqueraded traffic needs to be allowed through the FORWARD chain for the "
10552
"above rule to work:"
10553
10554
#: serverguide/C/security.xml:759(screen)
10555
#, no-wrap
10556
msgid ""
10557
"\n"
10558
"sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT\n"
10559
"sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state "
10560
"ESTABLISHED,RELATED -i ppp0 -j ACCEPT\n"
10561
msgstr ""
10562
"\n"
10563
"sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT\n"
10564
"sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state "
10565
"ESTABLISHED,RELATED -i ppp0 -j ACCEPT\n"
10566
10567
#: serverguide/C/security.xml:763(para)
10568
msgid ""
10569
"The above commands will allow all connections from your local network to the "
10570
"Internet and all traffic related to those connections to return to the "
10571
"machine that initiated them."
10572
msgstr ""
10573
"The above commands will allow all connections from your local network to the "
10574
"Internet and all traffic related to those connections to return to the "
10575
"machine that initiated them."
10576
10577
#: serverguide/C/security.xml:770(para)
10578
msgid ""
10579
"If you want masquerading to be enabled on reboot, which you probably do, "
10580
"edit <filename>/etc/rc.local</filename> and add any commands used above. For "
10581
"example add the first command with no filtering:"
10582
msgstr ""
10583
"If you want masquerading to be enabled on reboot, which you probably do, "
10584
"edit <filename>/etc/rc.local</filename> and add any commands used above. For "
10585
"example add the first command with no filtering:"
10586
10587
#: serverguide/C/security.xml:774(screen)
10588
#, no-wrap
10589
msgid ""
10590
"\n"
10591
"iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
10592
msgstr ""
10593
"\n"
10594
"iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
10595
10596
#: serverguide/C/security.xml:782(title)
10597
msgid "Logs"
10598
msgstr "Logs"
10599
10600
#: serverguide/C/security.xml:783(para)
10601
msgid ""
10602
"Firewall logs are essential for recognizing attacks, troubleshooting your "
10603
"firewall rules, and noticing unusual activity on your network. You must "
10604
"include logging rules in your firewall for them to be generated, though, and "
10605
"logging rules must come before any applicable terminating rule (a rule with "
10606
"a target that decides the fate of the packet, such as ACCEPT, DROP, or "
10607
"REJECT)."
10608
msgstr ""
10609
"Firewall logs are essential for recognising attacks, troubleshooting your "
10610
"firewall rules, and noticing unusual activity on your network. You must "
10611
"include logging rules in your firewall for them to be generated, though, and "
10612
"logging rules must come before any applicable terminating rule (a rule with "
10613
"a target that decides the fate of the packet, such as ACCEPT, DROP, or "
10614
"REJECT)."
10615
10616
#: serverguide/C/security.xml:790(para)
10617
msgid ""
10618
"If you are using <application>ufw</application>, you can turn on logging by "
10619
"entering the following in a terminal:"
10620
msgstr ""
10621
"If you are using <application>ufw</application>, you can turn on logging by "
10622
"entering the following in a terminal:"
10623
10624
#: serverguide/C/security.xml:794(command)
10625
msgid "sudo ufw logging on"
10626
msgstr "sudo ufw logging on"
10627
10628
#: serverguide/C/security.xml:796(para)
10629
msgid ""
10630
"To turn logging off in <application>ufw</application>, simply replace "
10631
"<emphasis role=\"italic\">on</emphasis> with <emphasis "
10632
"role=\"italic\">off</emphasis> in the above command."
10633
msgstr ""
10634
"To turn logging off in <application>ufw</application>, simply replace "
10635
"<emphasis role=\"italic\">on</emphasis> with <emphasis "
10636
"role=\"italic\">off</emphasis> in the above command."
10637
10638
#: serverguide/C/security.xml:799(para)
10639
msgid ""
10640
"If using <application>iptables</application> instead of "
10641
"<application>ufw</application>, enter:"
10642
msgstr ""
10643
"If using <application>iptables</application> instead of "
10644
"<application>ufw</application>, enter:"
10645
10646
#: serverguide/C/security.xml:802(screen)
10647
#, no-wrap
10648
msgid ""
10649
"\n"
10650
"sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-"
10651
"prefix \"NEW_HTTP_CONN: \"\n"
10652
msgstr ""
10653
"\n"
10654
"sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-"
10655
"prefix \"NEW_HTTP_CONN: \"\n"
10656
10657
#: serverguide/C/security.xml:805(para)
10658
msgid ""
10659
"A request on port 80 from the local machine, then, would generate a log in "
10660
"dmesg that looks like this:"
10661
msgstr ""
10662
"A request on port 80 from the local machine, then, would generate a log in "
10663
"dmesg that looks like this:"
10664
10665
#: serverguide/C/security.xml:810(programlisting)
10666
#, no-wrap
10667
msgid ""
10668
"[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= "
10669
"MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 "
10670
"LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 "
10671
"WINDOW=32767 RES=0x00 SYN URGP=0"
10672
msgstr ""
10673
"[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= "
10674
"MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 "
10675
"LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 "
10676
"WINDOW=32767 RES=0x00 SYN URGP=0"
10677
10678
#: serverguide/C/security.xml:812(para)
10679
msgid ""
10680
"The above log will also appear in <filename>/var/log/messages</filename>, "
10681
"<filename>/var/log/syslog</filename>, and "
10682
"<filename>/var/log/kern.log</filename>. This behavior can be modified by "
10683
"editing <filename>/etc/syslog.conf</filename> appropriately or by installing "
10684
"and configuring <application>ulogd</application> and using the ULOG target "
10685
"instead of LOG. The <application>ulogd</application> daemon is a userspace "
10686
"server that listens for logging instructions from the kernel specifically "
10687
"for firewalls, and can log to any file you like, or even to a "
10688
"<application>PostgreSQL</application> or <application>MySQL</application> "
10689
"database. Making sense of your firewall logs can be simplified by using a "
10690
"log analyzing tool such as <application>fwanalog</application>, "
10691
"<application> fwlogwatch</application>, or <application>lire</application>."
10692
msgstr ""
10693
"The above log will also appear in <filename>/var/log/messages</filename>, "
10694
"<filename>/var/log/syslog</filename>, and "
10695
"<filename>/var/log/kern.log</filename>. This behaviour can be modified by "
10696
"editing <filename>/etc/syslog.conf</filename> appropriately or by installing "
10697
"and configuring <application>ulogd</application> and using the ULOG target "
10698
"instead of LOG. The <application>ulogd</application> daemon is a userspace "
10699
"server that listens for logging instructions from the kernel specifically "
10700
"for firewalls, and can log to any file you like, or even to a "
10701
"<application>PostgreSQL</application> or <application>MySQL</application> "
10702
"database. Making sense of your firewall logs can be simplified by using a "
10703
"log analysing tool such as <application>fwanalog</application>, "
10704
"<application> fwlogwatch</application>, or <application>lire</application>."
10705
10706
#: serverguide/C/security.xml:827(title)
10707
msgid "Other Tools"
10708
msgstr "Other Tools"
10709
10710
#: serverguide/C/security.xml:828(para)
10711
msgid ""
10712
"There are many tools available to help you construct a complete firewall "
10713
"without intimate knowledge of iptables. For the GUI-inclined:"
10714
msgstr ""
10715
"There are many tools available to help you construct a complete firewall "
10716
"without intimate knowledge of iptables. For the GUI-inclined:"
10717
10718
#: serverguide/C/security.xml:834(para)
10719
msgid ""
10720
"<ulink url=\"http://www.fs-security.com/\">Firestarter</ulink> is quite "
10721
"popular and easy to use."
10722
msgstr ""
10723
"<ulink url=\"http://www.fs-security.com/\">Firestarter</ulink> is quite "
10724
"popular and easy to use."
10725
10726
#: serverguide/C/security.xml:839(para)
10727
msgid ""
10728
"<ulink url=\"http://www.fwbuilder.org/\">fwbuilder</ulink> is very powerful "
10729
"and will look familiar to an administrator who has used a commercial "
10730
"firewall utility such as <application>Checkpoint FireWall-1</application>."
10731
msgstr ""
10732
"<ulink url=\"http://www.fwbuilder.org/\">fwbuilder</ulink> is very powerful "
10733
"and will look familiar to an administrator who has used a commercial "
10734
"firewall utility such as <application>Checkpoint FireWall-1</application>."
10735
10736
#: serverguide/C/security.xml:845(para)
10737
msgid ""
10738
"If you prefer a command-line tool with plain-text configuration files:"
10739
msgstr ""
10740
"If you prefer a command-line tool with plain-text configuration files:"
10741
10742
#: serverguide/C/security.xml:850(para)
10743
msgid ""
10744
"<ulink url=\"http://www.shorewall.net/\">Shorewall</ulink> is a very "
10745
"powerful solution to help you configure an advanced firewall for any network."
10746
msgstr ""
10747
"<ulink url=\"http://www.shorewall.net/\">Shorewall</ulink> is a very "
10748
"powerful solution to help you configure an advanced firewall for any network."
10749
10750
#: serverguide/C/security.xml:856(para)
10751
msgid ""
10752
"<ulink url=\"http://www.linuxkungfu.org/\">ipkungfu</ulink> should give you "
10753
"a working firewall \"out of the box\" with zero configuration, and will "
10754
"allow you to easily set up a more advanced firewall by editing simple, well-"
10755
"documented configuration files."
10756
msgstr ""
10757
"<ulink url=\"http://www.linuxkungfu.org/\">ipkungfu</ulink> should give you "
10758
"a working firewall \"out of the box\" with zero configuration, and will "
10759
"allow you to easily set up a more advanced firewall by editing simple, well-"
10760
"documented configuration files."
10761
10762
#: serverguide/C/security.xml:863(para)
10763
msgid ""
10764
"<ulink url=\"http://fireflier.sourceforge.net/\">fireflier</ulink> is "
10765
"designed to be a desktop firewall application. It is made up of a server "
10766
"(fireflier-server) and your choice of GUI clients (GTK or QT), and behaves "
10767
"like many popular interactive firewall applications for Windows."
10768
msgstr ""
10769
"<ulink url=\"http://fireflier.sourceforge.net/\">fireflier</ulink> is "
10770
"designed to be a desktop firewall application. It is made up of a server "
10771
"(fireflier-server) and your choice of GUI clients (GTK or QT), and behaves "
10772
"like many popular interactive firewall applications for Windows."
10773
10774
#: serverguide/C/security.xml:875(para)
10775
msgid ""
10776
"The <ulink url=\"https://wiki.ubuntu.com/UbuntuFirewall\">Ubuntu "
10777
"Firewall</ulink> wiki page contains information on the development of "
10778
"<application>ufw</application>."
10779
msgstr ""
10780
"The <ulink url=\"https://wiki.ubuntu.com/UbuntuFirewall\">Ubuntu "
10781
"Firewall</ulink> wiki page contains information on the development of "
10782
"<application>ufw</application>."
10783
10784
#: serverguide/C/security.xml:881(para)
10785
msgid ""
10786
"Also, the <application>ufw</application> manual page contains some very "
10787
"useful information: <command>man ufw</command>."
10788
msgstr ""
10789
"Also, the <application>ufw</application> manual page contains some very "
10790
"useful information: <command>man ufw</command>."
10791
10792
#: serverguide/C/security.xml:886(para)
10793
msgid ""
10794
"See the <ulink url=\"http://www.netfilter.org/documentation/HOWTO/packet-"
10795
"filtering-HOWTO.html\">packet-filtering-HOWTO</ulink> for more information "
10796
"on using <application>iptables</application>."
10797
msgstr ""
10798
"See the <ulink url=\"http://www.netfilter.org/documentation/HOWTO/packet-"
10799
"filtering-HOWTO.html\">packet-filtering-HOWTO</ulink> for more information "
10800
"on using <application>iptables</application>."
10801
10802
#: serverguide/C/security.xml:892(para)
10803
msgid ""
10804
"The <ulink url=\"http://www.netfilter.org/documentation/HOWTO/NAT-"
10805
"HOWTO.html\">nat-HOWTO</ulink> contains further details on masquerading."
10806
msgstr ""
10807
"The <ulink url=\"http://www.netfilter.org/documentation/HOWTO/NAT-"
10808
"HOWTO.html\">nat-HOWTO</ulink> contains further details on masquerading."
10809
10810
#: serverguide/C/security.xml:898(para)
10811
msgid ""
10812
"The <ulink url=\"https://help.ubuntu.com/community/IptablesHowTo\">IPTables "
10813
"HowTo</ulink> in the Ubuntu wiki is a great resource."
10814
msgstr ""
10815
10816
#: serverguide/C/security.xml:906(title)
10817
msgid "AppArmor"
10818
msgstr "AppArmor"
10819
10820
#: serverguide/C/security.xml:907(para)
10821
msgid ""
10822
"<application>AppArmor</application> is a Linux Security Module "
10823
"implementation of name-based mandatory access controls. AppArmor confines "
10824
"individual programs to a set of listed files and posix 1003.1e draft "
10825
"capabilities."
10826
msgstr ""
10827
"<application>AppArmor</application> is a Linux Security Module "
10828
"implementation of name-based mandatory access controls. AppArmor confines "
10829
"individual programs to a set of listed files and POSIX 1003.1e draft "
10830
"capabilities."
10831
10832
#: serverguide/C/security.xml:911(para)
10833
msgid ""
10834
"<application>AppArmor</application> is installed and loaded by default. It "
10835
"uses <emphasis>profiles</emphasis> of an application to determine what files "
10836
"and permissions the application requires. Some packages will install their "
10837
"own profiles, and additional profiles can be found in the "
10838
"<application>apparmor-profiles</application> package."
10839
msgstr ""
10840
"<application>AppArmor</application> is installed and loaded by default. It "
10841
"uses <emphasis>profiles</emphasis> of an application to determine what files "
10842
"and permissions the application requires. Some packages will install their "
10843
"own profiles, and additional profiles can be found in the "
10844
"<application>apparmor-profiles</application> package."
10845
10846
#: serverguide/C/security.xml:916(para)
10847
msgid ""
10848
"To install the <application>apparmor-profiles</application> package from a "
10849
"terminal prompt:"
10850
msgstr ""
10851
"To install the <application>apparmor-profiles</application> package from a "
10852
"terminal prompt:"
10853
10854
#: serverguide/C/security.xml:922(para)
10855
msgid "AppArmor profiles have two modes of execution:"
10856
msgstr "AppArmor profiles have two modes of execution:"
10857
10858
#: serverguide/C/security.xml:927(para)
10859
msgid ""
10860
"Complaining/Learning: profile violations are permitted and logged. Useful "
10861
"for testing and developing new profiles."
10862
msgstr ""
10863
"Complaining/Learning: profile violations are permitted and logged. Useful "
10864
"for testing and developing new profiles."
10865
10866
#: serverguide/C/security.xml:932(para)
10867
msgid ""
10868
"Enforced/Confined: enforces profile policy as well as logging the violation."
10869
msgstr ""
10870
"Enforced/Confined: enforces profile policy as well as logging the violation."
10871
10872
#: serverguide/C/security.xml:938(title)
10873
msgid "Using AppArmor"
10874
msgstr "Using AppArmor"
10875
10876
#: serverguide/C/security.xml:939(para)
10877
msgid ""
10878
"The <application>apparmor-utils</application> package contains command line "
10879
"utilities that you can use to change the <application>AppArmor</application> "
10880
"execution mode, find the status of a profile, create new profiles, etc."
10881
msgstr ""
10882
"The <application>apparmor-utils</application> package contains command line "
10883
"utilities that you can use to change the <application>AppArmor</application> "
10884
"execution mode, find the status of a profile, create new profiles, etc."
10885
10886
#: serverguide/C/security.xml:945(para)
10887
msgid ""
10888
"<application>apparmor_status</application> is used to view the current "
10889
"status of AppArmor profiles."
10890
msgstr ""
10891
"<application>apparmor_status</application> is used to view the current "
10892
"status of AppArmor profiles."
10893
10894
#: serverguide/C/security.xml:949(command)
10895
msgid "sudo apparmor_status"
10896
msgstr "sudo apparmor_status"
10897
10898
#: serverguide/C/security.xml:953(para)
10899
msgid ""
10900
"<application>aa-complain</application> places a profile into "
10901
"<emphasis>complain</emphasis> mode."
10902
msgstr ""
10903
"<application>aa-complain</application> places a profile into "
10904
"<emphasis>complain</emphasis> mode."
10905
10906
#: serverguide/C/security.xml:957(command)
10907
msgid "sudo aa-complain /path/to/bin"
10908
msgstr "sudo aa-complain /path/to/bin"
10909
10910
#: serverguide/C/security.xml:961(para)
10911
msgid ""
10912
"<application>aa-enforce</application> places a profile into "
10913
"<emphasis>enforce</emphasis> mode."
10914
msgstr ""
10915
"<application>aa-enforce</application> places a profile into "
10916
"<emphasis>enforce</emphasis> mode."
10917
10918
#: serverguide/C/security.xml:965(command)
10919
msgid "sudo aa-enforce /path/to/bin"
10920
msgstr "sudo aa-enforce /path/to/bin"
10921
10922
#: serverguide/C/security.xml:969(para)
10923
msgid ""
10924
"The <filename>/etc/apparmor.d</filename> directory is where the AppArmor "
10925
"profiles are located. It can be used to manipulate the "
10926
"<emphasis>mode</emphasis> of all profiles."
10927
msgstr ""
10928
"The <filename>/etc/apparmor.d</filename> directory is where the AppArmor "
10929
"profiles are located. It can be used to manipulate the "
10930
"<emphasis>mode</emphasis> of all profiles."
10931
10932
#: serverguide/C/security.xml:973(para)
10933
msgid "Enter the following to place all profiles into complain mode:"
10934
msgstr "Enter the following to place all profiles into complain mode:"
10935
10936
#: serverguide/C/security.xml:977(command)
10937
msgid "sudo aa-complain /etc/apparmor.d/*"
10938
msgstr "sudo aa-complain /etc/apparmor.d/*"
10939
10940
#: serverguide/C/security.xml:979(para)
10941
msgid "To place all profiles in enforce mode:"
10942
msgstr "To place all profiles in enforce mode:"
10943
10944
#: serverguide/C/security.xml:983(command)
10945
msgid "sudo aa-enforce /etc/apparmor.d/*"
10946
msgstr "sudo aa-enforce /etc/apparmor.d/*"
10947
10948
#: serverguide/C/security.xml:987(para)
10949
msgid ""
10950
"<application>apparmor_parser</application> is used to load a profile into "
10951
"the kernel. It can also be used to reload a currently loaded profile using "
10952
"the <emphasis>-r</emphasis> option. To load a profile:"
10953
msgstr ""
10954
"<application>apparmor_parser</application> is used to load a profile into "
10955
"the kernel. It can also be used to reload a currently loaded profile using "
10956
"the <emphasis>-r</emphasis> option. To load a profile:"
10957
10958
#: serverguide/C/security.xml:992(command) serverguide/C/security.xml:1024(command)
10959
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a"
10960
msgstr "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a"
10961
10962
#: serverguide/C/security.xml:994(para)
10963
msgid "To reload a profile:"
10964
msgstr "To reload a profile:"
10965
10966
#: serverguide/C/security.xml:998(command)
10967
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r"
10968
msgstr "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r"
10969
10970
#: serverguide/C/security.xml:1002(para)
10971
msgid ""
10972
"<filename>/etc/init.d/apparmor</filename> can be used to "
10973
"<emphasis>reload</emphasis> all profiles:"
10974
msgstr ""
10975
"<filename>/etc/init.d/apparmor</filename> can be used to "
10976
"<emphasis>reload</emphasis> all profiles:"
10977
10978
#: serverguide/C/security.xml:1006(command) serverguide/C/network-auth.xml:632(command)
10979
msgid "sudo /etc/init.d/apparmor reload"
10980
msgstr "sudo /etc/init.d/apparmor reload"
10981
10982
#: serverguide/C/security.xml:1010(para)
10983
msgid ""
10984
"The <filename>/etc/apparmor.d/disable</filename> directory can be used along "
10985
"with the <application>apparmor_parser -R</application> option to "
10986
"<emphasis>disable</emphasis> a profile."
10987
msgstr ""
10988
"The <filename>/etc/apparmor.d/disable</filename> directory can be used along "
10989
"with the <application>apparmor_parser -R</application> option to "
10990
"<emphasis>disable</emphasis> a profile."
10991
10992
#: serverguide/C/security.xml:1015(command)
10993
msgid "sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/"
10994
msgstr "sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/"
10995
10996
#: serverguide/C/security.xml:1016(command)
10997
msgid "sudo apparmor_parser -R /etc/apparmor.d/profile.name"
10998
msgstr "sudo apparmor_parser -R /etc/apparmor.d/profile.name"
10999
11000
#: serverguide/C/security.xml:1018(para)
11001
msgid ""
11002
"To <emphasis>re-enable</emphasis> a disabled profile remove the symbolic "
11003
"link to the profile in <filename>/etc/apparmor.d/disable/</filename>. Then "
11004
"load the profile using the <emphasis>-a</emphasis> option."
11005
msgstr ""
11006
"To <emphasis>re-enable</emphasis> a disabled profile remove the symbolic "
11007
"link to the profile in <filename>/etc/apparmor.d/disable/</filename>. Then "
11008
"load the profile using the <emphasis>-a</emphasis> option."
11009
11010
#: serverguide/C/security.xml:1023(command)
11011
msgid "sudo rm /etc/apparmor.d/disable/profile.name"
11012
msgstr "sudo rm /etc/apparmor.d/disable/profile.name"
11013
11014
#: serverguide/C/security.xml:1028(para)
11015
msgid ""
11016
"<application>AppArmor</application> can be disabled, and the kernel module "
11017
"unloaded by entering the following:"
11018
msgstr ""
11019
"<application>AppArmor</application> can be disabled, and the kernel module "
11020
"unloaded by entering the following:"
11021
11022
#: serverguide/C/security.xml:1032(command)
11023
msgid "sudo /etc/init.d/apparmor stop"
11024
msgstr "sudo /etc/init.d/apparmor stop"
11025
11026
#: serverguide/C/security.xml:1033(command)
11027
msgid "sudo update-rc.d -f apparmor remove"
11028
msgstr "sudo update-rc.d -f apparmor remove"
11029
11030
#: serverguide/C/security.xml:1037(para)
11031
msgid "To re-enable <application>AppArmor</application> enter:"
11032
msgstr "To re-enable <application>AppArmor</application> enter:"
11033
11034
#: serverguide/C/security.xml:1041(command)
11035
msgid "sudo /etc/init.d/apparmor start"
11036
msgstr "sudo /etc/init.d/apparmor start"
11037
11038
#: serverguide/C/security.xml:1042(command)
11039
msgid "sudo update-rc.d apparmor defaults"
11040
msgstr "sudo update-rc.d apparmor defaults"
11041
11042
#: serverguide/C/security.xml:1047(para)
11043
msgid ""
11044
"Replace <emphasis>profile.name</emphasis> with the name of the profile you "
11045
"want to manipulate. Also, replace <filename>/path/to/bin/</filename> with "
11046
"the actual executable file path. For example for the "
11047
"<application>ping</application> command use <filename>/bin/ping</filename>"
11048
msgstr ""
11049
"Replace <emphasis>profile.name</emphasis> with the name of the profile you "
11050
"want to manipulate. Also, replace <filename>/path/to/bin/</filename> with "
11051
"the actual executable file path. For example for the "
11052
"<application>ping</application> command use <filename>/bin/ping</filename>"
11053
11054
#: serverguide/C/security.xml:1055(title)
11055
msgid "Profiles"
11056
msgstr "Profiles"
11057
11058
#: serverguide/C/security.xml:1056(para)
11059
msgid ""
11060
"<application>AppArmor</application> profiles are simple text files located "
11061
"in <filename>/etc/apparmor.d/</filename>. The files are named after the full "
11062
"path to the executable they profile replacing the \"/\" with \".\". For "
11063
"example <filename>/etc/apparmor.d/bin.ping</filename> is the AppArmor "
11064
"profile for the <filename>/bin/ping</filename> command."
11065
msgstr ""
11066
"<application>AppArmor</application> profiles are simple text files located "
11067
"in <filename>/etc/apparmor.d/</filename>. The files are named after the full "
11068
"path to the executable they profile replacing the \"/\" with \".\". For "
11069
"example <filename>/etc/apparmor.d/bin.ping</filename> is the AppArmor "
11070
"profile for the <filename>/bin/ping</filename> command."
11071
11072
#: serverguide/C/security.xml:1062(para)
11073
msgid "There are two main type of rules used in profiles:"
11074
msgstr "There are two main type of rules used in profiles:"
11075
11076
#: serverguide/C/security.xml:1067(para)
11077
msgid ""
11078
"<emphasis>Path entries:</emphasis> which detail which files an application "
11079
"can access in the file system."
11080
msgstr ""
11081
"<emphasis>Path entries:</emphasis> which detail which files an application "
11082
"can access in the file system."
11083
11084
#: serverguide/C/security.xml:1072(para)
11085
msgid ""
11086
"<emphasis>Capability entries:</emphasis> determine what privileges a "
11087
"confined process is allowed to use."
11088
msgstr ""
11089
"<emphasis>Capability entries:</emphasis> determine what privileges a "
11090
"confined process is allowed to use."
11091
11092
#: serverguide/C/security.xml:1077(para)
11093
msgid ""
11094
"As an example take a look at <filename>/etc/apparmor.d/bin.ping</filename>:"
11095
msgstr ""
11096
"As an example take a look at <filename>/etc/apparmor.d/bin.ping</filename>:"
11097
11098
#: serverguide/C/security.xml:1080(programlisting)
11099
#, no-wrap
11100
msgid ""
11101
"\n"
11102
"#include <tunables/global>\n"
11103
"/bin/ping flags=(complain) {\n"
11104
" #include <abstractions/base>\n"
11105
" #include <abstractions/consoles>\n"
11106
" #include <abstractions/nameservice>\n"
11107
"\n"
11108
" capability net_raw,\n"
11109
" capability setuid,\n"
11110
" network inet raw,\n"
11111
" \n"
11112
" /bin/ping mixr,\n"
11113
" /etc/modules.conf r,\n"
11114
"}\n"
11115
msgstr ""
11116
"\n"
11117
"#include <tunables/global>\n"
11118
"/bin/ping flags=(complain) {\n"
11119
" #include <abstractions/base>\n"
11120
" #include <abstractions/consoles>\n"
11121
" #include <abstractions/nameservice>\n"
11122
"\n"
11123
" capability net_raw,\n"
11124
" capability setuid,\n"
11125
" network inet raw,\n"
11126
" \n"
11127
" /bin/ping mixr,\n"
11128
" /etc/modules.conf r,\n"
11129
"}\n"
11130
11131
#: serverguide/C/security.xml:1097(para)
11132
msgid ""
11133
"<emphasis>#include <tunables/global>:</emphasis> include statements "
11134
"from other files. This allows statements pertaining to multiple applications "
11135
"to be placed in a common file."
11136
msgstr ""
11137
"<emphasis>#include <tunables/global>:</emphasis> include statements "
11138
"from other files. This allows statements pertaining to multiple applications "
11139
"to be placed in a common file."
11140
11141
#: serverguide/C/security.xml:1103(para)
11142
msgid ""
11143
"<emphasis>/bin/ping flags=(complain):</emphasis> path to the profiled "
11144
"program, also setting the mode to <emphasis>complain</emphasis>."
11145
msgstr ""
11146
"<emphasis>/bin/ping flags=(complain):</emphasis> path to the profiled "
11147
"program, also setting the mode to <emphasis>complain</emphasis>."
11148
11149
#: serverguide/C/security.xml:1109(para)
11150
msgid ""
11151
"<emphasis>capability net_raw,:</emphasis> allows the application access to "
11152
"the CAP_NET_RAW Posix.1e capability."
11153
msgstr ""
11154
"<emphasis>capability net_raw,:</emphasis> allows the application access to "
11155
"the CAP_NET_RAW Posix.1e capability."
11156
11157
#: serverguide/C/security.xml:1114(para)
11158
msgid ""
11159
"<emphasis>/bin/ping mixr,:</emphasis> allows the application read and "
11160
"execute access to the file."
11161
msgstr ""
11162
"<emphasis>/bin/ping mixr,:</emphasis> allows the application read and "
11163
"execute access to the file."
11164
11165
#: serverguide/C/security.xml:1120(para)
11166
msgid ""
11167
"After editing a profile file the profile must be reloaded. See <xref "
11168
"linkend=\"apparmor-usage\"/> for details."
11169
msgstr ""
11170
"After editing a profile file the profile must be reloaded. See <xref "
11171
"linkend=\"apparmor-usage\"/> for details."
11172
11173
#: serverguide/C/security.xml:1125(title)
11174
msgid "Creating a Profile"
11175
msgstr "Creating a Profile"
11176
11177
#: serverguide/C/security.xml:1128(para)
11178
msgid ""
11179
"<emphasis>Design a test plan:</emphasis> Try to think about how the "
11180
"application should be exercised. The test plan should be divided into small "
11181
"test cases. Each test case should have a small description and list the "
11182
"steps to follow."
11183
msgstr ""
11184
"<emphasis>Design a test plan:</emphasis> Try to think about how the "
11185
"application should be exercised. The test plan should be divided into small "
11186
"test cases. Each test case should have a small description and list the "
11187
"steps to follow."
11188
11189
#: serverguide/C/security.xml:1132(para)
11190
msgid "Some standard test cases are:"
11191
msgstr "Some standard test cases are:"
11192
11193
#: serverguide/C/security.xml:1137(para)
11194
msgid "Starting the program."
11195
msgstr "Starting the program."
11196
11197
#: serverguide/C/security.xml:1142(para)
11198
msgid "Stopping the program."
11199
msgstr "Stopping the program."
11200
11201
#: serverguide/C/security.xml:1147(para)
11202
msgid "Reloading the program."
11203
msgstr "Reloading the program."
11204
11205
#: serverguide/C/security.xml:1152(para)
11206
msgid "Testing all the commands supported by the init script."
11207
msgstr "Testing all the commands supported by the init script."
11208
11209
#: serverguide/C/security.xml:1159(para)
11210
msgid ""
11211
"<emphasis>Generate the new profile:</emphasis> Use <application>aa-"
11212
"genprof</application> to generate a new profile. From a terminal:"
11213
msgstr ""
11214
"<emphasis>Generate the new profile:</emphasis> Use <application>aa-"
11215
"genprof</application> to generate a new profile. From a terminal:"
11216
11217
#: serverguide/C/security.xml:1164(command)
11218
msgid "sudo aa-genprof executable"
11219
msgstr "sudo aa-genprof executable"
11220
11221
#: serverguide/C/security.xml:1166(para)
11222
msgid "For example:"
11223
msgstr "For example:"
11224
11225
#: serverguide/C/security.xml:1170(command)
11226
msgid "sudo aa-genprof slapd"
11227
msgstr "sudo aa-genprof slapd"
11228
11229
#: serverguide/C/security.xml:1174(para)
11230
msgid ""
11231
"To get your new profile included in the <application>apparmor-"
11232
"profiles</application> package, file a bug in <emphasis>Launchpad</emphasis> "
11233
"against the <ulink "
11234
"url=\"https://bugs.launchpad.net/ubuntu/+source/apparmor/+filebug\">AppArmor<"
11235
"/ulink> package:"
11236
msgstr ""
11237
"To get your new profile included in the <application>apparmor-"
11238
"profiles</application> package, file a bug in <emphasis>Launchpad</emphasis> "
11239
"against the <ulink "
11240
"url=\"https://bugs.launchpad.net/ubuntu/+source/apparmor/+filebug\">AppArmor<"
11241
"/ulink> package:"
11242
11243
#: serverguide/C/security.xml:1181(para)
11244
msgid "Include your test plan and test cases."
11245
msgstr "Include your test plan and test cases."
11246
11247
#: serverguide/C/security.xml:1186(para)
11248
msgid "Attach your new profile to the bug."
11249
msgstr "Attach your new profile to the bug."
11250
11251
#: serverguide/C/security.xml:1195(title)
11252
msgid "Updating Profiles"
11253
msgstr "Updating Profiles"
11254
11255
#: serverguide/C/security.xml:1196(para)
11256
msgid ""
11257
"When the program is misbehaving, audit messages are sent to the log files. "
11258
"The program <application>aa-logprof</application> can be used to scan log "
11259
"files for <application>AppArmor</application> audit messages, review them "
11260
"and update the profiles. From a terminal:"
11261
msgstr ""
11262
"When the program is misbehaving, audit messages are sent to the log files. "
11263
"The program <application>aa-logprof</application> can be used to scan log "
11264
"files for <application>AppArmor</application> audit messages, review them "
11265
"and update the profiles. From a terminal:"
11266
11267
#: serverguide/C/security.xml:1201(command)
11268
msgid "sudo aa-logprof"
11269
msgstr "sudo aa-logprof"
11270
11271
#: serverguide/C/security.xml:1209(para)
11272
msgid ""
11273
"See the <ulink "
11274
"url=\"http://www.novell.com/documentation/apparmor/apparmor201_sp10_admin/ind"
11275
"ex.html?page=/documentation/apparmor/apparmor201_sp10_admin/data/book_apparmo"
11276
"r_admin.html\">AppArmor Administration Guide</ulink> for advanced "
11277
"configuration options."
11278
msgstr ""
11279
"See the <ulink "
11280
"url=\"http://www.novell.com/documentation/apparmor/apparmor201_sp10_admin/ind"
11281
"ex.html?page=/documentation/apparmor/apparmor201_sp10_admin/data/book_apparmo"
11282
"r_admin.html\">AppArmor Administration Guide</ulink> for advanced "
11283
"configuration options."
11284
11285
#: serverguide/C/security.xml:1216(para)
11286
msgid ""
11287
"For details using AppArmor with other Ubuntu releases see the <ulink "
11288
"url=\"https://help.ubuntu.com/community/AppArmor\"> AppArmor Community "
11289
"Wiki</ulink> page."
11290
msgstr ""
11291
"For details using AppArmor with other Ubuntu releases see the <ulink "
11292
"url=\"https://help.ubuntu.com/community/AppArmor\"> AppArmor Community "
11293
"Wiki</ulink> page."
11294
11295
#: serverguide/C/security.xml:1224(para)
11296
msgid ""
11297
"The <ulink url=\"http://en.opensuse.org/AppArmor\">OpenSUSE AppArmor</ulink> "
11298
"page is another introduction to AppArmor."
11299
msgstr ""
11300
"The <ulink url=\"http://en.opensuse.org/AppArmor\">OpenSUSE AppArmor</ulink> "
11301
"page is another introduction to AppArmor."
11302
11303
#: serverguide/C/security.xml:1231(para)
11304
msgid ""
11305
"A great place to ask for <application>AppArmor</application> assistance, and "
11306
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
11307
"server</emphasis> IRC channel on <ulink "
11308
"url=\"http://freenode.net\">freenode</ulink>."
11309
msgstr ""
11310
"A great place to ask for <application>AppArmor</application> assistance, and "
11311
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
11312
"server</emphasis> IRC channel on <ulink "
11313
"url=\"http://freenode.net\">freenode</ulink>."
11314
11315
#: serverguide/C/security.xml:1241(title)
11316
msgid "Certificates"
11317
msgstr "Certificates"
11318
11319
#: serverguide/C/security.xml:1242(para)
11320
msgid ""
11321
"One of the most common forms of cryptography today is <emphasis>public-"
11322
"key</emphasis> cryptography. Public-key cryptography utilizes a "
11323
"<emphasis>public key</emphasis> and a <emphasis>private key</emphasis>. The "
11324
"system works by <emphasis>encrypting</emphasis> information using the public "
11325
"key. The information can then only be <emphasis>decrypted</emphasis> using "
11326
"the private key."
11327
msgstr ""
11328
"One of the most common forms of cryptography today is <emphasis>public-"
11329
"key</emphasis> cryptography. Public-key cryptography utilises a "
11330
"<emphasis>public key</emphasis> and a <emphasis>private key</emphasis>. The "
11331
"system works by <emphasis>encrypting</emphasis> information using the public "
11332
"key. The information can then only be <emphasis>decrypted</emphasis> using "
11333
"the private key."
11334
11335
#: serverguide/C/security.xml:1248(para)
11336
msgid ""
11337
"A common use for public-key cryptography is encrypting application traffic "
11338
"using a Secure Socket Layer (SSL) or Transport Layer Security (TLS) "
11339
"connection. For example, configuring Apache to provide "
11340
"<emphasis>HTTPS</emphasis>, the HTTP protocol over SSL. This allows a way to "
11341
"encrypt traffic using a protocol that does not itself provide encryption."
11342
msgstr ""
11343
"A common use for public-key cryptography is encrypting application traffic "
11344
"using a Secure Socket Layer (SSL) or Transport Layer Security (TLS) "
11345
"connection. For example, configuring Apache to provide "
11346
"<emphasis>HTTPS</emphasis>, the HTTP protocol over SSL. This allows a way to "
11347
"encrypt traffic using a protocol that does not itself provide encryption."
11348
11349
#: serverguide/C/security.xml:1253(para)
11350
msgid ""
11351
"A <emphasis>Certificate</emphasis> is a method used to distribute a "
11352
"<emphasis>public key</emphasis> and other information about a server and the "
11353
"organization who is responsible for it. Certificates can be digitally signed "
11354
"by a <emphasis>Certification Authority</emphasis> or CA. A CA is a trusted "
11355
"third party that has confirmed that the information contained in the "
11356
"certificate is accurate."
11357
msgstr ""
11358
"A <emphasis>Certificate</emphasis> is a method used to distribute a "
11359
"<emphasis>public key</emphasis> and other information about a server and the "
11360
"organisation who is responsible for it. Certificates can be digitally signed "
11361
"by a <emphasis>Certification Authority</emphasis> or CA. A CA is a trusted "
11362
"third party that has confirmed that the information contained in the "
11363
"certificate is accurate."
11364
11365
#: serverguide/C/security.xml:1260(title)
11366
msgid "Types of Certificates"
11367
msgstr "Types of Certificates"
11368
11369
#: serverguide/C/security.xml:1261(para)
11370
msgid ""
11371
"To set up a secure server using public-key cryptography, in most cases, you "
11372
"send your certificate request (including your public key), proof of your "
11373
"company's identity, and payment to a CA. The CA verifies the certificate "
11374
"request and your identity, and then sends back a certificate for your secure "
11375
"server. Alternatively, you can create your own <emphasis>self-"
11376
"signed</emphasis> certificate."
11377
msgstr ""
11378
"To set up a secure server using public-key cryptography, in most cases, you "
11379
"send your certificate request (including your public key), proof of your "
11380
"company's identity, and payment to a CA. The CA verifies the certificate "
11381
"request and your identity, and then sends back a certificate for your secure "
11382
"server. Alternatively, you can create your own <emphasis>self-"
11383
"signed</emphasis> certificate."
11384
11385
#: serverguide/C/security.xml:1271(para)
11386
msgid ""
11387
"Note, that self-signed certificates should not be used in most production "
11388
"environments."
11389
msgstr ""
11390
"Note, that self-signed certificates should not be used in most production "
11391
"environments."
11392
11393
#: serverguide/C/security.xml:1275(para)
11394
msgid ""
11395
"Continuing the HTTPS example, a CA-signed certificate provides two important "
11396
"capabilities that a self-signed certificate does not:"
11397
msgstr ""
11398
"Continuing the HTTPS example, a CA-signed certificate provides two important "
11399
"capabilities that a self-signed certificate does not:"
11400
11401
#: serverguide/C/security.xml:1282(para)
11402
msgid ""
11403
"Browsers (usually) automatically recognize the certificate and allow a "
11404
"secure connection to be made without prompting the user."
11405
msgstr ""
11406
"Browsers (usually) automatically recognise the certificate and allow a "
11407
"secure connection to be made without prompting the user."
11408
11409
#: serverguide/C/security.xml:1289(para)
11410
msgid ""
11411
"When a CA issues a signed certificate, it is guaranteeing the identity of "
11412
"the organization that is providing the web pages to the browser."
11413
msgstr ""
11414
"When a CA issues a signed certificate, it is guaranteeing the identity of "
11415
"the organisation that is providing the web pages to the browser."
11416
11417
#: serverguide/C/security.xml:1297(para)
11418
msgid ""
11419
"Most Web browsers, and computers, that support SSL have a list of CAs whose "
11420
"certificates they automatically accept. If a browser encounters a "
11421
"certificate whose authorizing CA is not in the list, the browser asks the "
11422
"user to either accept or decline the connection. Also, other applications "
11423
"may generate an error message when using a self-singed certificate."
11424
msgstr ""
11425
"Most Web browsers, and computers, that support SSL have a list of CAs whose "
11426
"certificates they automatically accept. If a browser encounters a "
11427
"certificate whose authorising CA is not in the list, the browser asks the "
11428
"user to either accept or decline the connection. Also, other applications "
11429
"may generate an error message when using a self-signed certificate."
11430
11431
#: serverguide/C/security.xml:1305(para)
11432
msgid ""
11433
"The process of getting a certificate from a CA is fairly easy. A quick "
11434
"overview is as follows:"
11435
msgstr ""
11436
"The process of getting a certificate from a CA is fairly easy. A quick "
11437
"overview is as follows:"
11438
11439
#: serverguide/C/security.xml:1312(para)
11440
msgid "Create a private and public encryption key pair."
11441
msgstr "Create a private and public encryption key pair."
11442
11443
#: serverguide/C/security.xml:1315(para)
11444
msgid ""
11445
"Create a certificate request based on the public key. The certificate "
11446
"request contains information about your server and the company hosting it."
11447
msgstr ""
11448
"Create a certificate request based on the public key. The certificate "
11449
"request contains information about your server and the company hosting it."
11450
11451
#: serverguide/C/security.xml:1320(para)
11452
msgid ""
11453
"Send the certificate request, along with documents proving your identity, to "
11454
"a CA. We cannot tell you which certificate authority to choose. Your "
11455
"decision may be based on your past experiences, or on the experiences of "
11456
"your friends or colleagues, or purely on monetary factors."
11457
msgstr ""
11458
"Send the certificate request, along with documents proving your identity, to "
11459
"a CA. We cannot tell you which certificate authority to choose. Your "
11460
"decision may be based on your past experiences, or on the experiences of "
11461
"your friends or colleagues, or purely on monetary factors."
11462
11463
#: serverguide/C/security.xml:1326(para)
11464
msgid ""
11465
"Once you have decided upon a CA, you need to follow the instructions they "
11466
"provide on how to obtain a certificate from them."
11467
msgstr ""
11468
"Once you have decided upon a CA, you need to follow the instructions they "
11469
"provide on how to obtain a certificate from them."
11470
11471
#: serverguide/C/security.xml:1331(para)
11472
msgid ""
11473
"When the CA is satisfied that you are indeed who you claim to be, they send "
11474
"you a digital certificate."
11475
msgstr ""
11476
"When the CA is satisfied that you are indeed who you claim to be, they send "
11477
"you a digital certificate."
11478
11479
#: serverguide/C/security.xml:1335(para)
11480
msgid ""
11481
"Install this certificate on your secure server, and configure the "
11482
"appropriate applications to use the certificate."
11483
msgstr ""
11484
"Install this certificate on your secure server, and configure the "
11485
"appropriate applications to use the certificate."
11486
11487
#: serverguide/C/security.xml:1344(title)
11488
msgid "Generating a Certificate Signing Request (CSR)"
11489
msgstr "Generating a Certificate Signing Request (CSR)"
11490
11491
#: serverguide/C/security.xml:1346(para)
11492
msgid ""
11493
"Whether you are getting a certificate from a CA or generating your own self-"
11494
"signed certificate, the first step is to generate a key."
11495
msgstr ""
11496
"Whether you are getting a certificate from a CA or generating your own self-"
11497
"signed certificate, the first step is to generate a key."
11498
11499
#: serverguide/C/security.xml:1351(para)
11500
msgid ""
11501
"If the certificate will be used by service daemons, such as Apache, Postfix, "
11502
"Dovecot, etc, a key without a passphrase is often appropriate. Not having a "
11503
"passphrase allows the services to start without manual intervention, usually "
11504
"the preferred way to start a daemon."
11505
msgstr ""
11506
"If the certificate will be used by service daemons, such as Apache, Postfix, "
11507
"Dovecot, etc, a key without a passphrase is often appropriate. Not having a "
11508
"passphrase allows the services to start without manual intervention, usually "
11509
"the preferred way to start a daemon."
11510
11511
#: serverguide/C/security.xml:1357(para)
11512
msgid ""
11513
"This section will cover generating a key with a passphrase, and one without. "
11514
"The non-passphrase key will then be used to generate a certificate that can "
11515
"be used with various service daemons."
11516
msgstr ""
11517
"This section will cover generating a key with a passphrase, and one without. "
11518
"The non-passphrase key will then be used to generate a certificate that can "
11519
"be used with various service daemons."
11520
11521
#: serverguide/C/security.xml:1363(para)
11522
msgid ""
11523
"Running your secure service without a passphrase is convenient because you "
11524
"will not need to enter the passphrase every time you start your secure "
11525
"service. But it is insecure and a compromise of the key means a compromise "
11526
"of the server as well."
11527
msgstr ""
11528
"Running your secure service without a passphrase is convenient because you "
11529
"will not need to enter the passphrase every time you start your secure "
11530
"service. But it is insecure and a compromise of the key means a compromise "
11531
"of the server as well."
11532
11533
#: serverguide/C/security.xml:1370(para)
11534
msgid ""
11535
"To generate the <emphasis>keys</emphasis> for the Certificate Signing "
11536
"Request (CSR) run the following command from a terminal prompt:"
11537
msgstr ""
11538
"To generate the <emphasis>keys</emphasis> for the Certificate Signing "
11539
"Request (CSR) run the following command from a terminal prompt:"
11540
11541
#: serverguide/C/security.xml:1376(command)
11542
msgid "openssl genrsa -des3 -out server.key 1024"
11543
msgstr "openssl genrsa -des3 -out server.key 1024"
11544
11545
#: serverguide/C/security.xml:1379(programlisting)
11546
#, no-wrap
11547
msgid ""
11548
"\n"
11549
"Generating RSA private key, 1024 bit long modulus\n"
11550
".....................++++++\n"
11551
".................++++++\n"
11552
"unable to write 'random state'\n"
11553
"e is 65537 (0x10001)\n"
11554
"Enter pass phrase for server.key:\n"
11555
msgstr ""
11556
"\n"
11557
"Generating RSA private key, 1024 bit long modulus\n"
11558
".....................++++++\n"
11559
".................++++++\n"
11560
"unable to write 'random state'\n"
11561
"e is 65537 (0x10001)\n"
11562
"Enter pass phrase for server.key:\n"
11563
11564
#: serverguide/C/security.xml:1388(para)
11565
msgid ""
11566
"You can now enter your passphrase. For best security, it should at least "
11567
"contain eight characters. The minimum length when specifying -des3 is four "
11568
"characters. It should include numbers and/or punctuation and not be a word "
11569
"in a dictionary. Also remember that your passphrase is case-sensitive."
11570
msgstr ""
11571
"You can now enter your passphrase. For best security, it should at least "
11572
"contain eight characters. The minimum length when specifying -des3 is four "
11573
"characters. It should include numbers and/or punctuation and not be a word "
11574
"in a dictionary. Also remember that your passphrase is case-sensitive."
11575
11576
#: serverguide/C/security.xml:1396(para)
11577
msgid ""
11578
"Re-type the passphrase to verify. Once you have re-typed it correctly, the "
11579
"server key is generated and stored in the <filename>server.key</filename> "
11580
"file."
11581
msgstr ""
11582
"Re-type the passphrase to verify. Once you have re-typed it correctly, the "
11583
"server key is generated and stored in the <filename>server.key</filename> "
11584
"file."
11585
11586
#: serverguide/C/security.xml:1402(para)
11587
msgid ""
11588
"Now create the insecure key, the one without a passphrase, and shuffle the "
11589
"key names:"
11590
msgstr ""
11591
"Now create the insecure key, the one without a passphrase, and shuffle the "
11592
"key names:"
11593
11594
#: serverguide/C/security.xml:1408(command)
11595
msgid "openssl rsa -in server.key -out server.key.insecure"
11596
msgstr "openssl rsa -in server.key -out server.key.insecure"
11597
11598
#: serverguide/C/security.xml:1409(command)
11599
msgid "mv server.key server.key.secure"
11600
msgstr "mv server.key server.key.secure"
11601
11602
#: serverguide/C/security.xml:1410(command)
11603
msgid "mv server.key.insecure server.key"
11604
msgstr "mv server.key.insecure server.key"
11605
11606
#: serverguide/C/security.xml:1413(para)
11607
msgid ""
11608
"The insecure key is now named <filename>server.key</filename>, and you can "
11609
"use this file to generate the CSR without passphrase."
11610
msgstr ""
11611
"The insecure key is now named <filename>server.key</filename>, and you can "
11612
"use this file to generate the CSR without passphrase."
11613
11614
#: serverguide/C/security.xml:1418(para)
11615
msgid "To create the CSR, run the following command at a terminal prompt:"
11616
msgstr "To create the CSR, run the following command at a terminal prompt:"
11617
11618
#: serverguide/C/security.xml:1423(command)
11619
msgid "openssl req -new -key server.key -out server.csr"
11620
msgstr "openssl req -new -key server.key -out server.csr"
11621
11622
#: serverguide/C/security.xml:1426(para)
11623
msgid ""
11624
"It will prompt you enter the passphrase. If you enter the correct "
11625
"passphrase, it will prompt you to enter Company Name, Site Name, Email Id, "
11626
"etc. Once you enter all these details, your CSR will be created and it will "
11627
"be stored in the <filename>server.csr</filename> file."
11628
msgstr ""
11629
11630
#: serverguide/C/security.xml:1434(para)
11631
msgid ""
11632
"You can now submit this CSR file to a CA for processing. The CA will use "
11633
"this CSR file and issue the certificate. On the other hand, you can create "
11634
"self-signed certificate using this CSR."
11635
msgstr ""
11636
"You can now submit this CSR file to a CA for processing. The CA will use "
11637
"this CSR file and issue the certificate. On the other hand, you can create "
11638
"self-signed certificate using this CSR."
11639
11640
#: serverguide/C/security.xml:1442(title)
11641
msgid "Creating a Self-Signed Certificate"
11642
msgstr "Creating a Self-Signed Certificate"
11643
11644
#: serverguide/C/security.xml:1443(para)
11645
msgid ""
11646
"To create the self-signed certificate, run the following command at a "
11647
"terminal prompt:"
11648
msgstr ""
11649
"To create the self-signed certificate, run the following command at a "
11650
"terminal prompt:"
11651
11652
#: serverguide/C/security.xml:1448(command)
11653
msgid ""
11654
"openssl x509 -req -days 365 -in server.csr -signkey server.key -out "
11655
"server.crt"
11656
msgstr ""
11657
"openssl x509 -req -days 365 -in server.csr -signkey server.key -out "
11658
"server.crt"
11659
11660
#: serverguide/C/security.xml:1451(para)
11661
msgid ""
11662
"The above command will prompt you to enter the passphrase. Once you enter "
11663
"the correct passphrase, your certificate will be created and it will be "
11664
"stored in the <filename>server.crt</filename> file."
11665
msgstr ""
11666
"The above command will prompt you to enter the passphrase. Once you enter "
11667
"the correct passphrase, your certificate will be created and it will be "
11668
"stored in the <filename>server.crt</filename> file."
11669
11670
#: serverguide/C/security.xml:1456(para)
11671
msgid ""
11672
"If your secure server is to be used in a production environment, you "
11673
"probably need a CA-signed certificate. It is not recommended to use self-"
11674
"signed certificate."
11675
msgstr ""
11676
"If your secure server is to be used in a production environment, you "
11677
"probably need a CA-signed certificate. It is not recommended to use self-"
11678
"signed certificate."
11679
11680
#: serverguide/C/security.xml:1464(title)
11681
msgid "Installing the Certificate"
11682
msgstr "Installing the Certificate"
11683
11684
#: serverguide/C/security.xml:1466(para)
11685
msgid ""
11686
"You can install the key file <filename>server.key</filename> and certificate "
11687
"file <filename>server.crt</filename>, or the certificate file issued by your "
11688
"CA, by running following commands at a terminal prompt:"
11689
msgstr ""
11690
"You can install the key file <filename>server.key</filename> and certificate "
11691
"file <filename>server.crt</filename>, or the certificate file issued by your "
11692
"CA, by running following commands at a terminal prompt:"
11693
11694
#: serverguide/C/security.xml:1472(command)
11695
msgid "sudo cp server.crt /etc/ssl/certs"
11696
msgstr "sudo cp server.crt /etc/ssl/certs"
11697
11698
#: serverguide/C/security.xml:1473(command)
11699
msgid "sudo cp server.key /etc/ssl/private"
11700
msgstr "sudo cp server.key /etc/ssl/private"
11701
11702
#: serverguide/C/security.xml:1475(para)
11703
msgid ""
11704
"Now simply configure any applications, with the ability to use public-key "
11705
"cryptography, to use the <emphasis>certificate</emphasis> and "
11706
"<emphasis>key</emphasis> files. For example, "
11707
"<application>Apache</application> can provide HTTPS, "
11708
"<application>Dovecot</application> can provide IMAPS and POP3S, etc."
11709
msgstr ""
11710
"Now simply configure any applications, with the ability to use public-key "
11711
"cryptography, to use the <emphasis>certificate</emphasis> and "
11712
"<emphasis>key</emphasis> files. For example, "
11713
"<application>Apache</application> can provide HTTPS, "
11714
"<application>Dovecot</application> can provide IMAPS and POP3S, etc."
11715
11716
#: serverguide/C/security.xml:1482(title)
11717
msgid "Certification Authority"
11718
msgstr "Certification Authority"
11719
11720
#: serverguide/C/security.xml:1484(para)
11721
msgid ""
11722
"If the services on your network require more than a few self-signed "
11723
"certificates it may be worth the additional effort to setup your own "
11724
"internal <emphasis>Certification Authority (CA)</emphasis>. Using "
11725
"certificates signed by your own CA, allows the various services using the "
11726
"certificates to easily trust other services using certificates issued from "
11727
"the same CA."
11728
msgstr ""
11729
"If the services on your network require more than a few self-signed "
11730
"certificates it may be worth the additional effort to setup your own "
11731
"internal <emphasis>Certification Authority (CA)</emphasis>. Using "
11732
"certificates signed by your own CA, allows the various services using the "
11733
"certificates to easily trust other services using certificates issued from "
11734
"the same CA."
11735
11736
#: serverguide/C/security.xml:1494(para)
11737
msgid ""
11738
"First, create the directories to hold the CA certificate and related files:"
11739
msgstr ""
11740
"First, create the directories to hold the CA certificate and related files:"
11741
11742
#: serverguide/C/security.xml:1499(command)
11743
msgid "sudo mkdir /etc/ssl/CA"
11744
msgstr "sudo mkdir /etc/ssl/CA"
11745
11746
#: serverguide/C/security.xml:1500(command)
11747
msgid "sudo mkdir /etc/ssl/newcerts"
11748
msgstr "sudo mkdir /etc/ssl/newcerts"
11749
11750
#: serverguide/C/security.xml:1506(para)
11751
msgid ""
11752
"The CA needs a few additional files to operate, one to keep track of the "
11753
"last serial number used by the CA, each certificate must have a unique "
11754
"serial number, and another file to record which certificates have been "
11755
"issued:"
11756
msgstr ""
11757
"The CA needs a few additional files to operate, one to keep track of the "
11758
"last serial number used by the CA, each certificate must have a unique "
11759
"serial number, and another file to record which certificates have been "
11760
"issued:"
11761
11762
#: serverguide/C/security.xml:1513(command)
11763
msgid "sudo sh -c \"echo '01' > /etc/ssl/CA/serial\""
11764
msgstr "sudo sh -c \"echo '01' > /etc/ssl/CA/serial\""
11765
11766
#: serverguide/C/security.xml:1514(command)
11767
msgid "sudo touch /etc/ssl/CA/index.txt"
11768
msgstr "sudo touch /etc/ssl/CA/index.txt"
11769
11770
#: serverguide/C/security.xml:1520(para)
11771
msgid ""
11772
"The third file is a CA configuration file. Though not strictly necessary, it "
11773
"is very convenient when issuing multiple certificates. Edit "
11774
"<filename>/etc/ssl/openssl.cnf</filename>, and in the <emphasis>[ CA_default "
11775
"]</emphasis> change:"
11776
msgstr ""
11777
"The third file is a CA configuration file. Though not strictly necessary, it "
11778
"is very convenient when issuing multiple certificates. Edit "
11779
"<filename>/etc/ssl/openssl.cnf</filename>, and in the <emphasis>[ CA_default "
11780
"]</emphasis> change:"
11781
11782
#: serverguide/C/security.xml:1526(programlisting)
11783
#, no-wrap
11784
msgid ""
11785
"\n"
11786
"dir = /etc/ssl/ # Where everything is kept\n"
11787
"database = $dir/CA/index.txt # database index file.\n"
11788
"certificate = $dir/certs/cacert.pem # The CA certificate\n"
11789
"serial = $dir/CA/serial # The current serial number\n"
11790
"private_key = $dir/private/cakey.pem# The private key\n"
11791
msgstr ""
11792
"\n"
11793
"dir = /etc/ssl/ # Where everything is kept\n"
11794
"database = $dir/CA/index.txt # database index file.\n"
11795
"certificate = $dir/certs/cacert.pem # The CA certificate\n"
11796
"serial = $dir/CA/serial # The current serial number\n"
11797
"private_key = $dir/private/cakey.pem# The private key\n"
11798
11799
#: serverguide/C/security.xml:1537(para)
11800
msgid "Next, create the self-singed root certificate:"
11801
msgstr "Next, create the self-singed root certificate:"
11802
11803
#: serverguide/C/security.xml:1542(command)
11804
msgid ""
11805
"openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -"
11806
"days 3650"
11807
msgstr ""
11808
"openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -"
11809
"days 3650"
11810
11811
#: serverguide/C/security.xml:1545(para)
11812
msgid "You will then be asked to enter the details about the certificate."
11813
msgstr "You will then be asked to enter the details about the certificate."
11814
11815
#: serverguide/C/security.xml:1552(para)
11816
msgid "Now install the root certificate and key:"
11817
msgstr "Now install the root certificate and key:"
11818
11819
#: serverguide/C/security.xml:1557(command)
11820
msgid "sudo mv cakey.pem /etc/ssl/private/"
11821
msgstr "sudo mv cakey.pem /etc/ssl/private/"
11822
11823
#: serverguide/C/security.xml:1558(command)
11824
msgid "sudo mv cacert.pem /etc/ssl/certs/"
11825
msgstr "sudo mv cacert.pem /etc/ssl/certs/"
11826
11827
#: serverguide/C/security.xml:1564(para)
11828
msgid ""
11829
"You are now ready to start signing certificates. The first item needed is a "
11830
"Certificate Signing Request (CSR), see <xref linkend=\"generating-a-csr\"/> "
11831
"for details. Once you have a CSR, enter the following to generate a "
11832
"certificate signed by the CA:"
11833
msgstr ""
11834
"You are now ready to start signing certificates. The first item needed is a "
11835
"Certificate Signing Request (CSR), see <xref linkend=\"generating-a-csr\"/> "
11836
"for details. Once you have a CSR, enter the following to generate a "
11837
"certificate signed by the CA:"
11838
11839
#: serverguide/C/security.xml:1571(command)
11840
msgid "sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf"
11841
msgstr "sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf"
11842
11843
#: serverguide/C/security.xml:1574(para)
11844
msgid ""
11845
"After entering the password for the CA key, you will be prompted to sign the "
11846
"certificate, and again to commit the new certificate. You should then see a "
11847
"somewhat large amount of output related to the certificate creation."
11848
msgstr ""
11849
"After entering the password for the CA key, you will be prompted to sign the "
11850
"certificate, and again to commit the new certificate. You should then see a "
11851
"somewhat large amount of output related to the certificate creation."
11852
11853
#: serverguide/C/security.xml:1583(para)
11854
msgid ""
11855
"There should now be a new file, "
11856
"<filename>/etc/ssl/newcerts/01.pem</filename>, containing the same output. "
11857
"Copy and paste everything beginning with the line: <emphasis>-----BEGIN "
11858
"CERTIFICATE-----</emphasis> and continuing through the line: <emphasis>----"
11859
"END CERTIFICATE-----</emphasis> lines to a file named after the hostname of "
11860
"the server where the certificate will be installed. For example "
11861
"<filename>mail.example.com.crt</filename>, is a nice descriptive name."
11862
msgstr ""
11863
11864
#: serverguide/C/security.xml:1591(para)
11865
msgid ""
11866
"Subsequent certificates will be named <filename>02.pem</filename>, "
11867
"<filename>03.pem</filename>, etc."
11868
msgstr ""
11869
"Subsequent certificates will be named <filename>02.pem</filename>, "
11870
"<filename>03.pem</filename>, etc."
11871
11872
#: serverguide/C/security.xml:1596(para)
11873
msgid ""
11874
"Replace <emphasis>mail.example.com.crt</emphasis> with your own descriptive "
11875
"name."
11876
msgstr ""
11877
"Replace <emphasis>mail.example.com.crt</emphasis> with your own descriptive "
11878
"name."
11879
11880
#: serverguide/C/security.xml:1604(para)
11881
msgid ""
11882
"Finally, copy the new certificate to the host that needs it, and configure "
11883
"the appropriate applications to use it. The default location to install "
11884
"certificates is <filename role=\"directory\">/etc/ssl/certs</filename>. This "
11885
"enables multiple services to use the same certificate without overly "
11886
"complicated file permissions."
11887
msgstr ""
11888
"Finally, copy the new certificate to the host that needs it, and configure "
11889
"the appropriate applications to use it. The default location to install "
11890
"certificates is <filename role=\"directory\">/etc/ssl/certs</filename>. This "
11891
"enables multiple services to use the same certificate without overly "
11892
"complicated file permissions."
11893
11894
#: serverguide/C/security.xml:1610(para)
11895
msgid ""
11896
"For applications that can be configured to use a CA certificate, you should "
11897
"also copy the <filename>/etc/ssl/certs/cacert.pem</filename> file to the "
11898
"<filename role=\"directory\">/etc/ssl/certs/</filename> directory on each "
11899
"server."
11900
msgstr ""
11901
"For applications that can be configured to use a CA certificate, you should "
11902
"also copy the <filename>/etc/ssl/certs/cacert.pem</filename> file to the "
11903
"<filename role=\"directory\">/etc/ssl/certs/</filename> directory on each "
11904
"server."
11905
11906
#: serverguide/C/security.xml:1624(para)
11907
msgid ""
11908
"For more detailed instructions on using cryptography see the <ulink "
11909
"url=\"http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html\">SSL "
11910
"Certificates HOWTO</ulink> by tlpd.org"
11911
msgstr ""
11912
"For more detailed instructions on using cryptography see the <ulink "
11913
"url=\"http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html\">SSL "
11914
"Certificates HOWTO</ulink> by tlpd.org"
11915
11916
#: serverguide/C/security.xml:1630(para)
11917
msgid ""
11918
"<ulink url=\"http://www.pki-page.org/\">The PKI Page</ulink> contains a list "
11919
"of Certificate Authorities."
11920
msgstr ""
11921
"<ulink url=\"http://www.pki-page.org/\">The PKI Page</ulink> contains a list "
11922
"of Certificate Authorities."
11923
11924
#: serverguide/C/security.xml:1635(para)
11925
msgid ""
11926
"The Wikipedia <ulink "
11927
"url=\"http://en.wikipedia.org/wiki/Https\">HTTPS</ulink> page has more "
11928
"information regarding HTTPS."
11929
msgstr ""
11930
"The Wikipedia <ulink "
11931
"url=\"http://en.wikipedia.org/wiki/Https\">HTTPS</ulink> page has more "
11932
"information regarding HTTPS."
11933
11934
#: serverguide/C/security.xml:1640(para)
11935
msgid ""
11936
"For more information on <emphasis>OpenSSL</emphasis> see the <ulink "
11937
"url=\"http://www.openssl.org/\">OpenSSL Home Page</ulink>."
11938
msgstr ""
11939
"For more information on <emphasis>OpenSSL</emphasis> see the <ulink "
11940
"url=\"http://www.openssl.org/\">OpenSSL Home Page</ulink>."
11941
11942
#: serverguide/C/security.xml:1645(para)
11943
msgid ""
11944
"Also, O'Reilly's <ulink "
11945
"url=\"http://oreilly.com/catalog/9780596002701/\">Network Security with "
11946
"OpenSSL</ulink> is a good in depth reference."
11947
msgstr ""
11948
"Also, O'Reilly's <ulink "
11949
"url=\"http://oreilly.com/catalog/9780596002701/\">Network Security with "
11950
"OpenSSL</ulink> is a good in depth reference."
11951
11952
#: serverguide/C/security.xml:1654(title)
11953
msgid "eCryptfs"
11954
msgstr "eCryptfs"
11955
11956
#: serverguide/C/security.xml:1656(para)
11957
msgid ""
11958
"<emphasis>eCryptfs</emphasis> is a POSIX-compliant enterprise-class stacked "
11959
"cryptographic filesystem for Linux. Layering on top of the filesystem layer "
11960
"<emphasis>eCryptfs</emphasis> protects files no matter the underlying "
11961
"filesystem, partition type, etc."
11962
msgstr ""
11963
"<emphasis>eCryptfs</emphasis> is a POSIX-compliant enterprise-class stacked "
11964
"cryptographic filesystem for Linux. Layering on top of the filesystem layer "
11965
"<emphasis>eCryptfs</emphasis> protects files no matter the underlying "
11966
"filesystem, partition type, etc."
11967
11968
#: serverguide/C/security.xml:1662(para)
11969
msgid ""
11970
"During installation there is an option to encrypt the <filename "
11971
"role=\"directory\">/home</filename> partition. This will automatically "
11972
"configure everything needed to encrypt and mount the partition."
11973
msgstr ""
11974
"During installation there is an option to encrypt the <filename "
11975
"role=\"directory\">/home</filename> partition. This will automatically "
11976
"configure everything needed to encrypt and mount the partition."
11977
11978
#: serverguide/C/security.xml:1667(para)
11979
msgid ""
11980
"As an example, this section will cover configuring <filename "
11981
"role=\"directory\">/srv</filename> to be encrypted using eCryptfs."
11982
msgstr ""
11983
"As an example, this section will cover configuring <filename "
11984
"role=\"directory\">/srv</filename> to be encrypted using eCryptfs."
11985
11986
#: serverguide/C/security.xml:1672(title)
11987
msgid "Using eCryptfs"
11988
msgstr "Using eCryptfs"
11989
11990
#: serverguide/C/security.xml:1674(para)
11991
msgid "First, install the necessary packages. From a terminal prompt enter:"
11992
msgstr "First, install the necessary packages. From a terminal prompt enter:"
11993
11994
#: serverguide/C/security.xml:1679(command)
11995
msgid "sudo apt-get install ecryptfs-utils"
11996
msgstr "sudo apt-get install ecryptfs-utils"
11997
11998
#: serverguide/C/security.xml:1682(para)
11999
msgid "Now mount the partition to be encrypted:"
12000
msgstr "Now mount the partition to be encrypted:"
12001
12002
#: serverguide/C/security.xml:1687(command)
12003
msgid "sudo mount -t ecryptfs /srv /srv"
12004
msgstr "sudo mount -t ecryptfs /srv /srv"
12005
12006
#: serverguide/C/security.xml:1690(para)
12007
msgid ""
12008
"You will then be prompted for some details on how "
12009
"<application>ecryptfs</application> should encrypt the data."
12010
msgstr ""
12011
"You will then be prompted for some details on how "
12012
"<application>ecryptfs</application> should encrypt the data."
12013
12014
#: serverguide/C/security.xml:1694(para)
12015
msgid ""
12016
"To test that files placed in <filename>/srv</filename> are indeed encrypted "
12017
"copy the <filename>/etc/default</filename> folder to "
12018
"<filename>/srv</filename>:"
12019
msgstr ""
12020
"To test that files placed in <filename>/srv</filename> are indeed encrypted "
12021
"copy the <filename>/etc/default</filename> folder to "
12022
"<filename>/srv</filename>:"
12023
12024
#: serverguide/C/security.xml:1700(command) serverguide/C/clustering.xml:192(command)
12025
msgid "sudo cp -r /etc/default /srv"
12026
msgstr "sudo cp -r /etc/default /srv"
12027
12028
#: serverguide/C/security.xml:1703(para)
12029
msgid "Now unmount <filename>/srv</filename>, and try to view a file:"
12030
msgstr "Now unmount <filename>/srv</filename>, and try to view a file:"
12031
12032
#: serverguide/C/security.xml:1708(command) serverguide/C/installation.xml:1138(command) serverguide/C/clustering.xml:200(command)
12033
msgid "sudo umount /srv"
12034
msgstr "sudo umount /srv"
12035
12036
#: serverguide/C/security.xml:1709(command)
12037
msgid "cat /srv/default/cron"
12038
msgstr "cat /srv/default/cron"
12039
12040
#: serverguide/C/security.xml:1712(para)
12041
msgid ""
12042
"Remounting <filename>/srv</filename> using "
12043
"<application>ecryptfs</application> will make the data viewable once again."
12044
msgstr ""
12045
"Remounting <filename>/srv</filename> using "
12046
"<application>ecryptfs</application> will make the data viewable once again."
12047
12048
#: serverguide/C/security.xml:1718(title)
12049
msgid "Automatically Mounting Encrypted Partitions"
12050
msgstr "Automatically Mounting Encrypted Partitions"
12051
12052
#: serverguide/C/security.xml:1720(para)
12053
msgid ""
12054
"There are a couple of ways to automatically mount an "
12055
"<application>ecryptfs</application> encrypted filesystem at boot. This "
12056
"example will use a <filename>/root/.ecryptfsrc</filename> file containing "
12057
"mount options, along with a passphrase file residing on a USB key."
12058
msgstr ""
12059
"There are a couple of ways to automatically mount an "
12060
"<application>ecryptfs</application> encrypted filesystem at boot. This "
12061
"example will use a <filename>/root/.ecryptfsrc</filename> file containing "
12062
"mount options, along with a passphrase file residing on a USB key."
12063
12064
#: serverguide/C/security.xml:1726(para)
12065
msgid "First, create <filename>/root/.ecryptfsrc</filename> containing:"
12066
msgstr "First, create <filename>/root/.ecryptfsrc</filename> containing:"
12067
12068
#: serverguide/C/security.xml:1730(programlisting)
12069
#, no-wrap
12070
msgid ""
12071
"\n"
12072
"key=passphrase:passphrase_passwd_file=/mnt/usb/passwd_file.txt\n"
12073
"ecryptfs_sig=5826dd62cf81c615\n"
12074
"ecryptfs_cipher=aes\n"
12075
"ecryptfs_key_bytes=16\n"
12076
"ecryptfs_passthrough=n\n"
12077
"ecryptfs_enable_filename_crypto=n\n"
12078
msgstr ""
12079
"\n"
12080
"key=passphrase:passphrase_passwd_file=/mnt/usb/passwd_file.txt\n"
12081
"ecryptfs_sig=5826dd62cf81c615\n"
12082
"ecryptfs_cipher=aes\n"
12083
"ecryptfs_key_bytes=16\n"
12084
"ecryptfs_passthrough=n\n"
12085
"ecryptfs_enable_filename_crypto=n\n"
12086
12087
#: serverguide/C/security.xml:1740(para)
12088
msgid ""
12089
"Adjust the <emphasis>ecryptfs_sig</emphasis> to the signature in "
12090
"<filename>/root/.ecryptfs/sig-cache.txt</filename>."
12091
msgstr ""
12092
"Adjust the <emphasis>ecryptfs_sig</emphasis> to the signature in "
12093
"<filename>/root/.ecryptfs/sig-cache.txt</filename>."
12094
12095
#: serverguide/C/security.xml:1745(para)
12096
msgid ""
12097
"Next, create the <filename>/mnt/usb/passwd_file.txt</filename> passphrase "
12098
"file:"
12099
msgstr ""
12100
"Next, create the <filename>/mnt/usb/passwd_file.txt</filename> passphrase "
12101
"file:"
12102
12103
#: serverguide/C/security.xml:1749(programlisting)
12104
#, no-wrap
12105
msgid ""
12106
"\n"
12107
"passphrase_passwd=[secrets]\n"
12108
msgstr ""
12109
"\n"
12110
"passphrase_passwd=[secrets]\n"
12111
12112
#: serverguide/C/security.xml:1753(para)
12113
msgid "Now add the necessary lines to <filename>/etc/fstab</filename>:"
12114
msgstr "Now add the necessary lines to <filename>/etc/fstab</filename>:"
12115
12116
#: serverguide/C/security.xml:1757(programlisting)
12117
#, no-wrap
12118
msgid ""
12119
"\n"
12120
"/dev/sdb1 /mnt/usb ext3 ro 0 0\n"
12121
"/srv /srv ecryptfs defaults 0 0\n"
12122
msgstr ""
12123
"\n"
12124
"/dev/sdb1 /mnt/usb ext3 ro 0 0\n"
12125
"/srv /srv ecryptfs defaults 0 0\n"
12126
12127
#: serverguide/C/security.xml:1762(para)
12128
msgid "Make sure the USB drive is mounted before the encrypted partition."
12129
msgstr "Make sure the USB drive is mounted before the encrypted partition."
12130
12131
#: serverguide/C/security.xml:1766(para)
12132
msgid ""
12133
"Finally, reboot and the <filename>/srv</filename> should be mounted using "
12134
"ecryptfs."
12135
msgstr ""
12136
"Finally, reboot and the <filename>/srv</filename> should be mounted using "
12137
"ecryptfs."
12138
12139
#: serverguide/C/security.xml:1774(para)
12140
msgid ""
12141
"The <application>ecryptfs-utils</application> package includes several other "
12142
"useful utilities:"
12143
msgstr ""
12144
"The <application>ecryptfs-utils</application> package includes several other "
12145
"useful utilities:"
12146
12147
#: serverguide/C/security.xml:1780(para)
12148
msgid ""
12149
"<emphasis>ecryptfs-setup-private:</emphasis> creates a "
12150
"<filename>~/Private</filename> directory to contain encrypted information. "
12151
"This utility can be run by unprivileged users to keep data private from "
12152
"other users on the system."
12153
msgstr ""
12154
"<emphasis>ecryptfs-setup-private:</emphasis> creates a "
12155
"<filename>~/Private</filename> directory to contain encrypted information. "
12156
"This utility can be run by unprivileged users to keep data private from "
12157
"other users on the system."
12158
12159
#: serverguide/C/security.xml:1787(para)
12160
msgid ""
12161
"<emphasis>ecryptfs-mount-private and ecryptfs-umount-private:</emphasis> "
12162
"will mount and unmount respectively, a users <filename>~/Private</filename> "
12163
"directory."
12164
msgstr ""
12165
"<emphasis>ecryptfs-mount-private and ecryptfs-umount-private:</emphasis> "
12166
"will mount and unmount respectively, a users <filename>~/Private</filename> "
12167
"directory."
12168
12169
#: serverguide/C/security.xml:1793(para)
12170
msgid ""
12171
"<emphasis>ecryptfs-add-passphrase:</emphasis> adds a new passphrase to the "
12172
"kernel keyring."
12173
msgstr ""
12174
"<emphasis>ecryptfs-add-passphrase:</emphasis> adds a new passphrase to the "
12175
"kernel keyring."
12176
12177
#: serverguide/C/security.xml:1798(para)
12178
msgid ""
12179
"<emphasis>ecryptfs-manager:</emphasis> manages "
12180
"<application>eCryptfs</application> objects such as keys."
12181
msgstr ""
12182
"<emphasis>ecryptfs-manager:</emphasis> manages "
12183
"<application>eCryptfs</application> objects such as keys."
12184
12185
#: serverguide/C/security.xml:1803(para)
12186
msgid ""
12187
"<emphasis>ecryptfs-stat:</emphasis> allows you to view the "
12188
"<application>ecryptfs</application> meta information for a file."
12189
msgstr ""
12190
"<emphasis>ecryptfs-stat:</emphasis> allows you to view the "
12191
"<application>ecryptfs</application> meta information for a file."
12192
12193
#: serverguide/C/security.xml:1816(para)
12194
msgid ""
12195
"For more information on eCryptfs see the <ulink "
12196
"url=\"https://launchpad.net/ecryptfs\">Launchpad project page</ulink>."
12197
msgstr ""
12198
12199
#: serverguide/C/security.xml:1821(para)
12200
msgid ""
12201
"There is also a <ulink "
12202
"url=\"http://www.linuxjournal.com/article/9400\">Linux Journal</ulink> "
12203
"article covering eCryptfs."
12204
msgstr ""
12205
"There is also a <ulink "
12206
"url=\"http://www.linuxjournal.com/article/9400\">Linux Journal</ulink> "
12207
"article covering eCryptfs."
12208
12209
#: serverguide/C/security.xml:1826(para)
12210
msgid ""
12211
"Also, for more <application>ecryptfs</application> options see the <ulink "
12212
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man7/ecryptfs.7.html\">"
12213
"ecryptfs man page</ulink>."
12214
msgstr ""
12215
12216
#: serverguide/C/security.xml:1832(para)
12217
msgid ""
12218
"The <ulink url=\"https://help.ubuntu.com/community/eCryptfs\">eCryptfs "
12219
"Ubuntu Wiki</ulink> page also has more details."
12220
msgstr ""
12221
12222
#: serverguide/C/reporting-bugs.xml:13(title)
12223
msgid "Appendix"
12224
msgstr ""
12225
12226
#: serverguide/C/reporting-bugs.xml:16(title)
12227
msgid "Reporting Bugs in Ubuntu Server Edition"
12228
msgstr ""
12229
12230
#: serverguide/C/reporting-bugs.xml:18(para)
12231
msgid ""
12232
"While the Ubuntu Project attempts to release software with as few bugs as "
12233
"possible, they do occur. You can help fix these bugs by reporting ones that "
12234
"you find to the project. The Ubuntu Project uses <ulink "
12235
"url=\"https://launchpad.net/\">Launchpad</ulink> to track its bug reports. "
12236
"In order to file a bug about Ubuntu Server on Launchpad, you will need to "
12237
"<ulink url=\"https://help.launchpad.net/YourAccount/NewAccount\">create an "
12238
"account</ulink>."
12239
msgstr ""
12240
12241
#: serverguide/C/reporting-bugs.xml:30(title)
12242
msgid "Reporting Bugs With ubuntu-bug"
12243
msgstr ""
12244
12245
#: serverguide/C/reporting-bugs.xml:32(para)
12246
msgid ""
12247
"The preferred way to report a bug is with the <application>ubuntu-"
12248
"bug</application> command. The ubuntu-bug tool gathers information about the "
12249
"system useful to developers in diagnosing the reported problem that will "
12250
"then be included in the bug report filed on Launchpad. Bug reports in Ubuntu "
12251
"need to be filed against a specific software package, thus the name of the "
12252
"package that the bug occurs in needs to be given to ubuntu-bug:"
12253
msgstr ""
12254
12255
#: serverguide/C/reporting-bugs.xml:43(command)
12256
msgid "ubuntu-bug PACKAGENAME"
12257
msgstr ""
12258
12259
#: serverguide/C/reporting-bugs.xml:46(para)
12260
msgid ""
12261
"For example, to file a bug against the openssh-server package, you would do:"
12262
msgstr ""
12263
12264
#: serverguide/C/reporting-bugs.xml:51(command)
12265
msgid "ubuntu-bug openssh-server"
12266
msgstr ""
12267
12268
#: serverguide/C/reporting-bugs.xml:54(para)
12269
msgid ""
12270
"You can specify either a binary package or the source package for ubuntu-"
12271
"bug. Again using openssh-server as an example, you could also generate the "
12272
"report against the source package for openssh-server, openssh:"
12273
msgstr ""
12274
12275
#: serverguide/C/reporting-bugs.xml:62(command)
12276
msgid "ubuntu-bug openssh"
12277
msgstr ""
12278
12279
#: serverguide/C/reporting-bugs.xml:66(para)
12280
msgid ""
12281
"See <xref linkend=\"package-management\"/> for more information about "
12282
"packages in Ubuntu."
12283
msgstr ""
12284
12285
#: serverguide/C/reporting-bugs.xml:72(para)
12286
msgid ""
12287
"The ubuntu-bug command will gather information about the system in question, "
12288
"possibly including information specific to the specified package, and then "
12289
"ask you what you would like to do with collected information:"
12290
msgstr ""
12291
12292
#: serverguide/C/reporting-bugs.xml:80(command)
12293
msgid "ubuntu-bug postgresql"
12294
msgstr ""
12295
12296
#: serverguide/C/reporting-bugs.xml:79(screen)
12297
#, no-wrap
12298
msgid ""
12299
"\n"
12300
"<placeholder-1/>\n"
12301
"\n"
12302
"*** Collecting problem information\n"
12303
"\n"
12304
"The collected information can be sent to the developers to improve the\n"
12305
"application. This might take a few minutes.\n"
12306
"..........\n"
12307
"\n"
12308
"*** Send problem report to the developers?\n"
12309
"\n"
12310
"After the problem report has been sent, please fill out the form in the\n"
12311
"automatically opened web browser.\n"
12312
"\n"
12313
"What would you like to do? Your options are:\n"
12314
" S: Send report (1.7 KiB)\n"
12315
" V: View report\n"
12316
" K: Keep report file for sending later or copying to somewhere else\n"
12317
" C: Cancel\n"
12318
"Please choose (S/V/K/C):\n"
12319
msgstr ""
12320
12321
#: serverguide/C/reporting-bugs.xml:101(para)
12322
msgid "The options available are:"
12323
msgstr ""
12324
12325
#: serverguide/C/reporting-bugs.xml:108(para)
12326
msgid ""
12327
"<emphasis role=\"bold\">Send Report</emphasis> Selecting Send Report submits "
12328
"the collected information to Launchpad as part of the the process of filing "
12329
"a bug report. You will be given the opportunity to describe the situation "
12330
"that led up to the occurrence of the bug."
12331
msgstr ""
12332
12333
#: serverguide/C/reporting-bugs.xml:115(screen)
12334
#, no-wrap
12335
msgid ""
12336
"\n"
12337
"*** Uploading problem information\n"
12338
"\n"
12339
"The collected information is being sent to the bug tracking system.\n"
12340
"This might take a few minutes.\n"
12341
"91%\n"
12342
"\n"
12343
"*** To continue, you must visit the following URL:\n"
12344
"\n"
12345
" https://bugs.launchpad.net/ubuntu/+source/postgresql-"
12346
"8.4/+filebug/kc6eSnTLnLxF8u0t3e56EukFeqJ?\n"
12347
"\n"
12348
"You can launch a browser now, or copy this URL into a browser on another\n"
12349
"computer.\n"
12350
"\n"
12351
"Choices:\n"
12352
" 1: Launch a browser now\n"
12353
" C: Cancel\n"
12354
"Please choose (1/C):\n"
12355
msgstr ""
12356
12357
#: serverguide/C/reporting-bugs.xml:135(para)
12358
msgid ""
12359
"If you choose to start a browser, by default the text based web browser "
12360
"<application>w3m</application> will be used to finish filing the bug report. "
12361
"Alternately, you can copy the given URL to a currently running web browser."
12362
msgstr ""
12363
12364
#: serverguide/C/reporting-bugs.xml:144(para)
12365
msgid ""
12366
"<emphasis role=\"bold\">View Report</emphasis> Selecting View Report causes "
12367
"the collected information to be displayed to the terminal for review."
12368
msgstr ""
12369
12370
#: serverguide/C/reporting-bugs.xml:150(screen)
12371
#, no-wrap
12372
msgid ""
12373
"\n"
12374
"Package: postgresql 8.4.2-2\n"
12375
"PackageArchitecture: all\n"
12376
"Tags: lucid\n"
12377
"ProblemType: Bug\n"
12378
"ProcEnviron:\n"
12379
" LANG=en_US.UTF-8\n"
12380
" SHELL=/bin/bash\n"
12381
"Uname: Linux 2.6.32-16-server x86_64\n"
12382
"Dependencies:\n"
12383
" adduser 3.112ubuntu1\n"
12384
" base-files 5.0.0ubuntu10\n"
12385
" base-passwd 3.5.22\n"
12386
" coreutils 7.4-2ubuntu2\n"
12387
"...\n"
12388
msgstr ""
12389
12390
#: serverguide/C/reporting-bugs.xml:167(para)
12391
msgid ""
12392
"After viewing the report, you will be brought back to the same menu asking "
12393
"what you would like to do with the report."
12394
msgstr ""
12395
12396
#: serverguide/C/reporting-bugs.xml:174(para)
12397
msgid ""
12398
"<emphasis role=\"bold\">Keep Report File</emphasis> Selecting Keep Report "
12399
"File causes the gathered information to be written to a file. This file can "
12400
"then be used to later file a bug report or transferred to a different Ubuntu "
12401
"system for reporting. To submit the report file, simply give it as an "
12402
"argument to the ubuntu-bug command:"
12403
msgstr ""
12404
12405
#: serverguide/C/reporting-bugs.xml:189(userinput)
12406
#, no-wrap
12407
msgid "k"
12408
msgstr ""
12409
12410
#: serverguide/C/reporting-bugs.xml:192(command)
12411
msgid "ubuntu-bug /tmp/apport.postgresql.v4MQas.apport"
12412
msgstr ""
12413
12414
#: serverguide/C/reporting-bugs.xml:183(screen)
12415
#, no-wrap
12416
msgid ""
12417
"\n"
12418
"What would you like to do? Your options are:\n"
12419
" S: Send report (1.7 KiB)\n"
12420
" V: View report\n"
12421
" K: Keep report file for sending later or copying to somewhere else\n"
12422
" C: Cancel\n"
12423
"Please choose (S/V/K/C): <placeholder-1/>\n"
12424
"Problem report file: /tmp/apport.postgresql.v4MQas.apport\n"
12425
"\n"
12426
"<placeholder-2/>\n"
12427
"\n"
12428
"*** Send problem report to the developers?\n"
12429
"...\n"
12430
msgstr ""
12431
12432
#: serverguide/C/reporting-bugs.xml:200(para)
12433
msgid ""
12434
"<emphasis role=\"bold\">Cancel</emphasis> Selecting Cancel causes the "
12435
"collected information to be discarded."
12436
msgstr ""
12437
12438
#: serverguide/C/reporting-bugs.xml:210(title)
12439
msgid "Reporting Application Crashes"
12440
msgstr ""
12441
12442
#: serverguide/C/reporting-bugs.xml:212(para)
12443
msgid ""
12444
"The software package that provides the ubuntu-bug utility, "
12445
"<application>apport</application>, can be configured to trigger when "
12446
"applications crash. This is disabled by default, as capturing a crash can be "
12447
"resource intensive depending on how much memory the application that crashed "
12448
"was using as apport captures and processes the core dump."
12449
msgstr ""
12450
12451
#: serverguide/C/reporting-bugs.xml:221(para)
12452
msgid ""
12453
"Configuring apport to capture information about crashing applications "
12454
"requires a couple of steps. First, <application>gdb</application> needs to "
12455
"be installed; it is not installed by default in Ubuntu Server Edition."
12456
msgstr ""
12457
12458
#: serverguide/C/reporting-bugs.xml:229(command)
12459
msgid "sudo apt-get install gdb"
12460
msgstr ""
12461
12462
#: serverguide/C/reporting-bugs.xml:232(para)
12463
msgid ""
12464
"See <xref linkend=\"package-management\"/> for more information about "
12465
"managing packages in Ubuntu."
12466
msgstr ""
12467
12468
#: serverguide/C/reporting-bugs.xml:237(para)
12469
msgid ""
12470
"Once you have ensured that gdb is installed, open the file "
12471
"<filename>/etc/default/apport</filename> in your text editor, and change the "
12472
"<emphasis>enabled</emphasis> setting to be <emphasis "
12473
"role=\"bold\">1</emphasis> like so:"
12474
msgstr ""
12475
12476
#: serverguide/C/reporting-bugs.xml:244(programlisting)
12477
#, no-wrap
12478
msgid ""
12479
"\n"
12480
"# set this to 0 to disable apport, or to 1 to enable it\n"
12481
"# you can temporarily override this with\n"
12482
"# sudo service apport start force_start=1\n"
12483
"enabled=<userinput>1</userinput>\n"
12484
"\n"
12485
"# set maximum core dump file size (default: 209715200 bytes == 200 MB)\n"
12486
"maxsize=209715200\n"
12487
msgstr ""
12488
12489
#: serverguide/C/reporting-bugs.xml:254(para)
12490
msgid ""
12491
"Once you have completed editing <filename>/etc/default/apport</filename>, "
12492
"start the apport service:"
12493
msgstr ""
12494
12495
#: serverguide/C/reporting-bugs.xml:261(command)
12496
msgid "sudo start apport"
12497
msgstr ""
12498
12499
#: serverguide/C/reporting-bugs.xml:264(para)
12500
msgid ""
12501
"After an application crashes, use the <application>apport-cli</application> "
12502
"command to search for the existing saved crash report information:"
12503
msgstr ""
12504
12505
#: serverguide/C/reporting-bugs.xml:271(command)
12506
msgid "apport-cli"
12507
msgstr ""
12508
12509
#: serverguide/C/reporting-bugs.xml:270(screen)
12510
#, no-wrap
12511
msgid ""
12512
"\n"
12513
"<placeholder-1/>\n"
12514
"\n"
12515
"*** dash closed unexpectedly on 2010-03-11 at 21:40:59.\n"
12516
"\n"
12517
"If you were not doing anything confidential (entering passwords or other\n"
12518
"private information), you can help to improve the application by\n"
12519
"reporting\n"
12520
"the problem.\n"
12521
"\n"
12522
"What would you like to do? Your options are:\n"
12523
" R: Report Problem...\n"
12524
" I: Cancel and ignore future crashes of this program version\n"
12525
" C: Cancel\n"
12526
"Please choose (R/I/C):\n"
12527
msgstr ""
12528
12529
#: serverguide/C/reporting-bugs.xml:287(para)
12530
msgid ""
12531
"Selecting <emphasis>Report Problem</emphasis> will walk you through similar "
12532
"steps as when using ubuntu-bug. One important difference is that a crash "
12533
"report will be marked as private when filed on Launchpad, meaning that it "
12534
"will be visible to only a limited set of bug triagers. These triagers will "
12535
"review the gathered data for private information before making the bug "
12536
"report publicly visible."
12537
msgstr ""
12538
12539
#: serverguide/C/reporting-bugs.xml:307(para)
12540
msgid ""
12541
"See the <ulink "
12542
"url=\"https://help.ubuntu.com/community/ReportingBugs\">Reporting "
12543
"Bugs</ulink> Ubuntu wiki page."
12544
msgstr ""
12545
12546
#: serverguide/C/reporting-bugs.xml:313(para)
12547
msgid ""
12548
"Also, the <ulink url=\"https://wiki.ubuntu.com/Apport\">Apport</ulink> page "
12549
"has some useful information. Though some of it pertains to using a GUI."
12550
msgstr ""
12551
12552
#: serverguide/C/remote-administration.xml:13(title)
12553
msgid "Remote Administration"
12554
msgstr "Remote Administration"
12555
12556
#: serverguide/C/remote-administration.xml:14(para)
12557
msgid ""
12558
"There are many ways to remotely administer a Linux server. This chapter will "
12559
"cover one of the most popular <application>OpenSSH</application>."
12560
msgstr ""
12561
12562
#: serverguide/C/remote-administration.xml:22(para)
12563
msgid ""
12564
"This section of the Ubuntu Server Guide introduces a powerful collection of "
12565
"tools for the remote control of networked computers and transfer of data "
12566
"between networked computers, called <emphasis>OpenSSH</emphasis>. You will "
12567
"also learn about some of the configuration settings possible with the "
12568
"OpenSSH server application and how to change them on your Ubuntu system."
12569
msgstr ""
12570
"This section of the Ubuntu Server Guide introduces a powerful collection of "
12571
"tools for the remote control of networked computers and transfer of data "
12572
"between networked computers, called <emphasis>OpenSSH</emphasis>. You will "
12573
"also learn about some of the configuration settings possible with the "
12574
"OpenSSH server application and how to change them on your Ubuntu system."
12575
12576
#: serverguide/C/remote-administration.xml:29(para)
12577
msgid ""
12578
"OpenSSH is a freely available version of the Secure Shell (SSH) protocol "
12579
"family of tools for remotely controlling a computer or transferring files "
12580
"between computers. Traditional tools used to accomplish these functions, "
12581
"such as <application>telnet</application> or <application>rcp</application>, "
12582
"are insecure and transmit the user's password in cleartext when used. "
12583
"OpenSSH provides a server daemon and client tools to facilitate secure, "
12584
"encrypted remote control and file transfer operations, effectively replacing "
12585
"the legacy tools."
12586
msgstr ""
12587
"OpenSSH is a freely available version of the Secure Shell (SSH) protocol "
12588
"family of tools for remotely controlling a computer or transferring files "
12589
"between computers. Traditional tools used to accomplish these functions, "
12590
"such as <application>telnet</application> or <application>rcp</application>, "
12591
"are insecure and transmit the user's password in cleartext when used. "
12592
"OpenSSH provides a server daemon and client tools to facilitate secure, "
12593
"encrypted remote control and file transfer operations, effectively replacing "
12594
"the legacy tools."
12595
12596
#: serverguide/C/remote-administration.xml:38(para)
12597
msgid ""
12598
"The OpenSSH server component, <application>sshd</application>, listens "
12599
"continuously for client connections from any of the client tools. When a "
12600
"connection request occurs, <application>sshd</application> sets up the "
12601
"correct connection depending on the type of client tool connecting. For "
12602
"example, if the remote computer is connecting with the "
12603
"<application>ssh</application> client application, the OpenSSH server sets "
12604
"up a remote control session after authentication. If a remote user connects "
12605
"to an OpenSSH server with <application>scp</application>, the OpenSSH server "
12606
"daemon initiates a secure copy of files between the server and client after "
12607
"authentication. OpenSSH can use many authentication methods, including plain "
12608
"password, public key, and <application>Kerberos</application> tickets."
12609
msgstr ""
12610
"The OpenSSH server component, <application>sshd</application>, listens "
12611
"continuously for client connections from any of the client tools. When a "
12612
"connection request occurs, <application>sshd</application> sets up the "
12613
"correct connection depending on the type of client tool connecting. For "
12614
"example, if the remote computer is connecting with the "
12615
"<application>ssh</application> client application, the OpenSSH server sets "
12616
"up a remote control session after authentication. If a remote user connects "
12617
"to an OpenSSH server with <application>scp</application>, the OpenSSH server "
12618
"daemon initiates a secure copy of files between the server and client after "
12619
"authentication. OpenSSH can use many authentication methods, including plain "
12620
"password, public key, and <application>Kerberos</application> tickets."
12621
12622
#: serverguide/C/remote-administration.xml:52(para)
12623
msgid ""
12624
"Installation of the OpenSSH client and server applications is simple. To "
12625
"install the OpenSSH client applications on your Ubuntu system, use this "
12626
"command at a terminal prompt:"
12627
msgstr ""
12628
"Installation of the OpenSSH client and server applications is simple. To "
12629
"install the OpenSSH client applications on your Ubuntu system, use this "
12630
"command at a terminal prompt:"
12631
12632
#: serverguide/C/remote-administration.xml:58(command)
12633
msgid "sudo apt-get install openssh-client"
12634
msgstr "sudo apt-get install openssh-client"
12635
12636
#: serverguide/C/remote-administration.xml:60(para)
12637
msgid ""
12638
"To install the OpenSSH server application, and related support files, use "
12639
"this command at a terminal prompt:"
12640
msgstr ""
12641
"To install the OpenSSH server application, and related support files, use "
12642
"this command at a terminal prompt:"
12643
12644
#: serverguide/C/remote-administration.xml:65(command)
12645
msgid "sudo apt-get install openssh-server"
12646
msgstr "sudo apt-get install openssh-server"
12647
12648
#: serverguide/C/remote-administration.xml:67(para)
12649
msgid ""
12650
"The <application>openssh-server</application> package can also be selected "
12651
"to install during the Server Edition installation process."
12652
msgstr ""
12653
"The <application>openssh-server</application> package can also be selected "
12654
"to install during the Server Edition installation process."
12655
12656
#: serverguide/C/remote-administration.xml:74(para)
12657
msgid ""
12658
"You may configure the default behavior of the OpenSSH server application, "
12659
"<application>sshd</application>, by editing the file "
12660
"<filename>/etc/ssh/sshd_config</filename>. For information about the "
12661
"configuration directives used in this file, you may view the appropriate "
12662
"manual page with the following command, issued at a terminal prompt:"
12663
msgstr ""
12664
"You may configure the default behaviour of the OpenSSH server application, "
12665
"<application>sshd</application>, by editing the file "
12666
"<filename>/etc/ssh/sshd_config</filename>. For information about the "
12667
"configuration directives used in this file, you may view the appropriate "
12668
"manual page with the following command, issued at a terminal prompt:"
12669
12670
#: serverguide/C/remote-administration.xml:82(command)
12671
msgid "man sshd_config"
12672
msgstr "man sshd_config"
12673
12674
#: serverguide/C/remote-administration.xml:84(para)
12675
msgid ""
12676
"There are many directives in the <application>sshd</application> "
12677
"configuration file controlling such things as communication settings and "
12678
"authentication modes. The following are examples of configuration directives "
12679
"that can be changed by editing the <filename>/etc/ssh/sshd_config</filename> "
12680
"file."
12681
msgstr ""
12682
"There are many directives in the <application>sshd</application> "
12683
"configuration file controlling such things as communication settings and "
12684
"authentication modes. The following are examples of configuration directives "
12685
"that can be changed by editing the <filename>/etc/ssh/sshd_config</filename> "
12686
"file."
12687
12688
#: serverguide/C/remote-administration.xml:91(para)
12689
msgid ""
12690
"Prior to editing the configuration file, you should make a copy of the "
12691
"original file and protect it from writing so you will have the original "
12692
"settings as a reference and to reuse as necessary."
12693
msgstr ""
12694
"Prior to editing the configuration file, you should make a copy of the "
12695
"original file and protect it from writing so you will have the original "
12696
"settings as a reference and to reuse as necessary."
12697
12698
#: serverguide/C/remote-administration.xml:95(para)
12699
msgid ""
12700
"Copy the <filename>/etc/ssh/sshd_config</filename> file and protect it from "
12701
"writing with the following commands, issued at a terminal prompt:"
12702
msgstr ""
12703
"Copy the <filename>/etc/ssh/sshd_config</filename> file and protect it from "
12704
"writing with the following commands, issued at a terminal prompt:"
12705
12706
#: serverguide/C/remote-administration.xml:100(command)
12707
msgid "sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original"
12708
msgstr "sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original"
12709
12710
#: serverguide/C/remote-administration.xml:101(command)
12711
msgid "sudo chmod a-w /etc/ssh/sshd_config.original"
12712
msgstr "sudo chmod a-w /etc/ssh/sshd_config.original"
12713
12714
#: serverguide/C/remote-administration.xml:103(para)
12715
msgid ""
12716
"The following are examples of configuration directives you may change:"
12717
msgstr ""
12718
"The following are examples of configuration directives you may change:"
12719
12720
#: serverguide/C/remote-administration.xml:108(para)
12721
msgid ""
12722
"To set your OpenSSH to listen on TCP port 2222 instead of the default TCP "
12723
"port 22, change the Port directive as such:"
12724
msgstr ""
12725
"To set your OpenSSH to listen on TCP port 2222 instead of the default TCP "
12726
"port 22, change the Port directive as such:"
12727
12728
#: serverguide/C/remote-administration.xml:112(para)
12729
msgid "Port 2222"
12730
msgstr "Port 2222"
12731
12732
#: serverguide/C/remote-administration.xml:117(para)
12733
msgid ""
12734
"To have <application>sshd</application> allow public key-based login "
12735
"credentials, simply add or modify the line:"
12736
msgstr ""
12737
"To have <application>sshd</application> allow public key-based login "
12738
"credentials, simply add or modify the line:"
12739
12740
#: serverguide/C/remote-administration.xml:121(para)
12741
msgid "PubkeyAuthentication yes"
12742
msgstr "PubkeyAuthentication yes"
12743
12744
#: serverguide/C/remote-administration.xml:124(para)
12745
msgid ""
12746
"In the <filename>/etc/ssh/sshd_config</filename> file, or if already "
12747
"present, ensure the line is not commented out."
12748
msgstr ""
12749
"In the <filename>/etc/ssh/sshd_config</filename> file, or if already "
12750
"present, ensure the line is not commented out."
12751
12752
#: serverguide/C/remote-administration.xml:130(para)
12753
msgid ""
12754
"To make your OpenSSH server display the contents of the "
12755
"<filename>/etc/issue.net</filename> file as a pre-login banner, simply add "
12756
"or modify the line:"
12757
msgstr ""
12758
"To make your OpenSSH server display the contents of the "
12759
"<filename>/etc/issue.net</filename> file as a pre-login banner, simply add "
12760
"or modify the line:"
12761
12762
#: serverguide/C/remote-administration.xml:135(para)
12763
msgid "Banner /etc/issue.net"
12764
msgstr "Banner /etc/issue.net"
12765
12766
#: serverguide/C/remote-administration.xml:138(para)
12767
msgid "In the <filename>/etc/ssh/sshd_config</filename> file."
12768
msgstr "In the <filename>/etc/ssh/sshd_config</filename> file."
12769
12770
#: serverguide/C/remote-administration.xml:143(para)
12771
msgid ""
12772
"After making changes to the <filename>/etc/ssh/sshd_config</filename> file, "
12773
"save the file, and restart the <application>sshd</application> server "
12774
"application to effect the changes using the following command at a terminal "
12775
"prompt:"
12776
msgstr ""
12777
"After making changes to the <filename>/etc/ssh/sshd_config</filename> file, "
12778
"save the file, and restart the <application>sshd</application> server "
12779
"application to effect the changes using the following command at a terminal "
12780
"prompt:"
12781
12782
#: serverguide/C/remote-administration.xml:152(para)
12783
msgid ""
12784
"Many other configuration directives for <application>sshd</application> are "
12785
"available for changing the server application's behavior to fit your needs. "
12786
"Be advised, however, if your only method of access to a server is "
12787
"<application>ssh</application>, and you make a mistake in configuring "
12788
"<application>sshd</application> via the "
12789
"<filename>/etc/ssh/sshd_config</filename> file, you may find you are locked "
12790
"out of the server upon restarting it, or that the "
12791
"<application>sshd</application> server refuses to start due to an incorrect "
12792
"configuration directive, so be extra careful when editing this file on a "
12793
"remote server."
12794
msgstr ""
12795
"Many other configuration directives for <application>sshd</application> are "
12796
"available for changing the server application's behaviour to fit your needs. "
12797
"Be advised, however, if your only method of access to a server is "
12798
"<application>ssh</application>, and you make a mistake in configuring "
12799
"<application>sshd</application> via the "
12800
"<filename>/etc/ssh/sshd_config</filename> file, you may find you are locked "
12801
"out of the server upon restarting it, or that the "
12802
"<application>sshd</application> server refuses to start due to an incorrect "
12803
"configuration directive, so be extra careful when editing this file on a "
12804
"remote server."
12805
12806
#: serverguide/C/remote-administration.xml:167(title)
12807
msgid "SSH Keys"
12808
msgstr "SSH Keys"
12809
12810
#: serverguide/C/remote-administration.xml:168(para)
12811
msgid ""
12812
"SSH <emphasis>keys</emphasis> allow authentication between two hosts without "
12813
"the need of a password. SSH key authentication uses two keys a "
12814
"<emphasis>private</emphasis> key and a <emphasis>public</emphasis> key."
12815
msgstr ""
12816
"SSH <emphasis>keys</emphasis> allow authentication between two hosts without "
12817
"the need of a password. SSH key authentication uses two keys a "
12818
"<emphasis>private</emphasis> key and a <emphasis>public</emphasis> key."
12819
12820
#: serverguide/C/remote-administration.xml:172(para)
12821
msgid "To generate the keys, from a terminal prompt enter:"
12822
msgstr "To generate the keys, from a terminal prompt enter:"
12823
12824
#: serverguide/C/remote-administration.xml:176(command)
12825
msgid "ssh-keygen -t dsa"
12826
msgstr "ssh-keygen -t dsa"
12827
12828
#: serverguide/C/remote-administration.xml:178(para)
12829
msgid ""
12830
"This will generate the keys using a <emphasis>DSA</emphasis> authentication "
12831
"identity of the user. During the process you will be prompted for a "
12832
"password. Simply hit <emphasis>Enter</emphasis> when prompted to create the "
12833
"key."
12834
msgstr ""
12835
"This will generate the keys using a <emphasis>DSA</emphasis> authentication "
12836
"identity of the user. During the process you will be prompted for a "
12837
"password. Simply hit <emphasis>Enter</emphasis> when prompted to create the "
12838
"key."
12839
12840
#: serverguide/C/remote-administration.xml:182(para)
12841
msgid ""
12842
"By default the <emphasis>public</emphasis> key is saved in the file "
12843
"<filename>~/.ssh/id_dsa.pub</filename>, while "
12844
"<filename>~/.ssh/id_dsa</filename> is the <emphasis>private</emphasis> key. "
12845
"Now copy the <filename>id_dsa.pub</filename> file to the remote host and "
12846
"append it to <filename>~/.ssh/authorized_keys</filename> by entering:"
12847
msgstr ""
12848
"By default the <emphasis>public</emphasis> key is saved in the file "
12849
"<filename>~/.ssh/id_dsa.pub</filename>, while "
12850
"<filename>~/.ssh/id_dsa</filename> is the <emphasis>private</emphasis> key. "
12851
"Now copy the <filename>id_dsa.pub</filename> file to the remote host and "
12852
"append it to <filename>~/.ssh/authorized_keys</filename> by entering:"
12853
12854
#: serverguide/C/remote-administration.xml:188(command)
12855
msgid "ssh-copy-id username@remotehost"
12856
msgstr "ssh-copy-id username@remotehost"
12857
12858
#: serverguide/C/remote-administration.xml:190(para)
12859
msgid ""
12860
"Finally, double check the permissions on the "
12861
"<filename>authorized_keys</filename> file, only the authenticated user "
12862
"should have read and write permissions. If the permissions are not correct "
12863
"change them by:"
12864
msgstr ""
12865
"Finally, double check the permissions on the "
12866
"<filename>authorized_keys</filename> file, only the authenticated user "
12867
"should have read and write permissions. If the permissions are not correct "
12868
"change them by:"
12869
12870
#: serverguide/C/remote-administration.xml:195(command)
12871
msgid "chmod 600 .ssh/authorized_keys"
12872
msgstr "chmod 600 .ssh/authorized_keys"
12873
12874
#: serverguide/C/remote-administration.xml:197(para)
12875
msgid ""
12876
"You should now be able to SSH to the host without being prompted for a "
12877
"password."
12878
msgstr ""
12879
"You should now be able to SSH to the host without being prompted for a "
12880
"password."
12881
12882
#: serverguide/C/remote-administration.xml:206(para)
12883
msgid ""
12884
"<ulink url=\"https://help.ubuntu.com/community/SSH\">Ubuntu Wiki SSH</ulink> "
12885
"page."
12886
msgstr ""
12887
12888
#: serverguide/C/remote-administration.xml:212(ulink)
12889
msgid "OpenSSH Website"
12890
msgstr "OpenSSH Website"
12891
12892
#: serverguide/C/remote-administration.xml:217(ulink)
12893
msgid "Advanced OpenSSH Wiki Page"
12894
msgstr "Advanced OpenSSH Wiki Page"
12895
12896
#: serverguide/C/package-management.xml:13(title)
12897
msgid "Package Management"
12898
msgstr "Package Management"
12899
12900
#: serverguide/C/package-management.xml:14(para)
12901
msgid ""
12902
"Ubuntu features a comprehensive package management system for the "
12903
"installation, upgrade, configuration, and removal of software. In addition "
12904
"to providing access to an organized base of over 24,000 software packages "
12905
"for your Ubuntu computer, the package management facilities also feature "
12906
"dependency resolution capabilities and software update checking."
12907
msgstr ""
12908
"Ubuntu features a comprehensive package management system for the "
12909
"installation, upgrade, configuration, and removal of software. In addition "
12910
"to providing access to an organised base of over 24,000 software packages "
12911
"for your Ubuntu computer, the package management facilities also feature "
12912
"dependency resolution capabilities and software update checking."
12913
12914
#: serverguide/C/package-management.xml:16(para)
12915
msgid ""
12916
"Several tools are available for interacting with Ubuntu's package management "
12917
"system, from simple command-line utilities which may be easily automated by "
12918
"system administrators, to a simple graphical interface which is easy to use "
12919
"by those new to Ubuntu."
12920
msgstr ""
12921
"Several tools are available for interacting with Ubuntu's package management "
12922
"system, from simple command-line utilities which may be easily automated by "
12923
"system administrators, to a simple graphical interface which is easy to use "
12924
"by those new to Ubuntu."
12925
12926
#: serverguide/C/package-management.xml:21(para)
12927
msgid ""
12928
"Ubuntu's package management system is derived from the same system used by "
12929
"the Debian GNU/Linux distribution. The package files contain all of the "
12930
"necessary files, meta-data, and instructions to implement a particular "
12931
"functionality or software application on your Ubuntu computer."
12932
msgstr ""
12933
"Ubuntu's package management system is derived from the same system used by "
12934
"the Debian GNU/Linux distribution. The package files contain all of the "
12935
"necessary files, meta-data, and instructions to implement a particular "
12936
"functionality or software application on your Ubuntu computer."
12937
12938
#: serverguide/C/package-management.xml:24(para)
12939
msgid ""
12940
"Debian package files typically have the extension '.deb', and typically "
12941
"exist in <emphasis role=\"italics\">repositories</emphasis> which are "
12942
"collections of packages found on various media, such as CD-ROM discs, or "
12943
"online. Packages are normally of the pre-compiled binary format; thus "
12944
"installation is quick and requires no compiling of software."
12945
msgstr ""
12946
"Debian package files typically have the extension '.deb', and typically "
12947
"exist in <emphasis role=\"italics\">repositories</emphasis> which are "
12948
"collections of packages found on various media, such as CD-ROM discs, or "
12949
"online. Packages are normally of the pre-compiled binary format; thus "
12950
"installation is quick and requires no compiling of software."
12951
12952
#: serverguide/C/package-management.xml:27(para)
12953
msgid ""
12954
"Many complex packages use the concept of <emphasis "
12955
"role=\"italics\">dependencies</emphasis>. Dependencies are additional "
12956
"packages required by the principal package in order to function properly. "
12957
"For example, the speech synthesis package "
12958
"<application>Festival</application> depends upon the package "
12959
"<application>libasound2</application>, which is a package supplying the "
12960
"<application>ALSA</application> sound library needed for audio playback. In "
12961
"order for <application>Festival</application> to function, it and all of its "
12962
"dependencies must be installed. The software management tools in Ubuntu will "
12963
"do this automatically."
12964
msgstr ""
12965
"Many complex packages use the concept of <emphasis "
12966
"role=\"italics\">dependencies</emphasis>. Dependencies are additional "
12967
"packages required by the principal package in order to function properly. "
12968
"For example, the speech synthesis package "
12969
"<application>Festival</application> depends upon the package "
12970
"<application>libasound2</application>, which is a package supplying the "
12971
"<application>ALSA</application> sound library needed for audio playback. In "
12972
"order for <application>Festival</application> to function, it and all of its "
12973
"dependencies must be installed. The software management tools in Ubuntu will "
12974
"do this automatically."
12975
12976
#: serverguide/C/package-management.xml:32(title)
12977
msgid "dpkg"
12978
msgstr "dpkg"
12979
12980
#: serverguide/C/package-management.xml:34(para)
12981
msgid ""
12982
"<application>dpkg</application> is a package manager for "
12983
"<emphasis>Debian</emphasis> based systems. It can install, remove, and build "
12984
"packages, but unlike other package management system's it can not "
12985
"automatically download and install packages and their dependencies. This "
12986
"section covers using <application>dpkg</application> to manage locally "
12987
"installed packages:"
12988
msgstr ""
12989
"<application>dpkg</application> is a package manager for "
12990
"<emphasis>Debian</emphasis> based systems. It can install, remove, and build "
12991
"packages, but unlike other package management system's it can not "
12992
"automatically download and install packages and their dependencies. This "
12993
"section covers using <application>dpkg</application> to manage locally "
12994
"installed packages:"
12995
12996
#: serverguide/C/package-management.xml:43(para)
12997
msgid ""
12998
"To list all packages installed on the system, from a terminal prompt enter:"
12999
msgstr ""
13000
"To list all packages installed on the system, from a terminal prompt enter:"
13001
13002
#: serverguide/C/package-management.xml:48(command)
13003
msgid "dpkg -l"
13004
msgstr "dpkg -l"
13005
13006
#: serverguide/C/package-management.xml:54(para)
13007
msgid ""
13008
"Depending on the amount of packages on your system, this can generate a "
13009
"large amount of output. Pipe the output through "
13010
"<application>grep</application> to see if a specific package is installed:"
13011
msgstr ""
13012
"Depending on the amount of packages on your system, this can generate a "
13013
"large amount of output. Pipe the output through "
13014
"<application>grep</application> to see if a specific package is installed:"
13015
13016
#: serverguide/C/package-management.xml:60(command)
13017
msgid "dpkg -l | grep apache2"
13018
msgstr "dpkg -l | grep apache2"
13019
13020
#: serverguide/C/package-management.xml:63(para)
13021
msgid ""
13022
"Replace <emphasis>apache2</emphasis> with any package name, part of a "
13023
"package name, or other regular expression."
13024
msgstr ""
13025
"Replace <emphasis>apache2</emphasis> with any package name, part of a "
13026
"package name, or other regular expression."
13027
13028
#: serverguide/C/package-management.xml:70(para)
13029
msgid ""
13030
"To list the files installed by a package, in this case the "
13031
"<application>ufw</application> package, enter:"
13032
msgstr ""
13033
"To list the files installed by a package, in this case the "
13034
"<application>ufw</application> package, enter:"
13035
13036
#: serverguide/C/package-management.xml:75(command)
13037
msgid "dpkg -L ufw"
13038
msgstr "dpkg -L ufw"
13039
13040
#: serverguide/C/package-management.xml:81(para)
13041
msgid ""
13042
"If you are not sure which package installed a file, <application>dpkg -"
13043
"S</application> may be able to tell you. For example:"
13044
msgstr ""
13045
"If you are not sure which package installed a file, <application>dpkg -"
13046
"S</application> may be able to tell you. For example:"
13047
13048
#: serverguide/C/package-management.xml:87(command)
13049
msgid "dpkg -S /etc/host.conf"
13050
msgstr "dpkg -S /etc/host.conf"
13051
13052
#: serverguide/C/package-management.xml:88(computeroutput)
13053
#, no-wrap
13054
msgid "base-files: /etc/host.conf"
13055
msgstr "base-files: /etc/host.conf"
13056
13057
#: serverguide/C/package-management.xml:91(para)
13058
msgid ""
13059
"The output shows that the <filename>/etc/host.conf</filename> belongs to the "
13060
"<application>base-files</application> package."
13061
msgstr ""
13062
"The output shows that the <filename>/etc/host.conf</filename> belongs to the "
13063
"<application>base-files</application> package."
13064
13065
#: serverguide/C/package-management.xml:96(para)
13066
msgid ""
13067
"Many files are automatically generated during the package install process, "
13068
"and even though they are on the filesystem <command>dpkg -S</command> may "
13069
"not know which package they belong to."
13070
msgstr ""
13071
"Many files are automatically generated during the package install process, "
13072
"and even though they are on the filesystem <command>dpkg -S</command> may "
13073
"not know which package they belong to."
13074
13075
#: serverguide/C/package-management.xml:105(para)
13076
msgid "You can install a local <emphasis>.deb</emphasis> file by entering:"
13077
msgstr "You can install a local <emphasis>.deb</emphasis> file by entering:"
13078
13079
#: serverguide/C/package-management.xml:110(command)
13080
msgid "sudo dpkg -i zip_2.32-1_i386.deb"
13081
msgstr "sudo dpkg -i zip_2.32-1_i386.deb"
13082
13083
#: serverguide/C/package-management.xml:113(para)
13084
msgid ""
13085
"Change <filename>zip_2.32-1_i386.deb</filename> to the actual file name of "
13086
"the local .deb file."
13087
msgstr ""
13088
"Change <filename>zip_2.32-1_i386.deb</filename> to the actual file name of "
13089
"the local .deb file."
13090
13091
#: serverguide/C/package-management.xml:120(para)
13092
msgid "Uninstalling a package can be accomplished by:"
13093
msgstr "Uninstalling a package can be accomplished by:"
13094
13095
#: serverguide/C/package-management.xml:125(command)
13096
msgid "sudo dpkg -r zip"
13097
msgstr "sudo dpkg -r zip"
13098
13099
#: serverguide/C/package-management.xml:129(para)
13100
msgid ""
13101
"Uninstalling packages using <application>dpkg</application>, in most cases, "
13102
"is <emphasis>NOT</emphasis> recommended. It is better to use a package "
13103
"manager that handles dependencies, to ensure that the system is in a "
13104
"consistent state. For example using <command>dpkg -r</command> you can "
13105
"remove the <application>zip</application> package, but any packages that "
13106
"depend on it will still be installed and may no longer function correctly."
13107
msgstr ""
13108
"Uninstalling packages using <application>dpkg</application>, in most cases, "
13109
"is <emphasis>NOT</emphasis> recommended. It is better to use a package "
13110
"manager that handles dependencies, to ensure that the system is in a "
13111
"consistent state. For example using <command>dpkg -r</command> you can "
13112
"remove the <application>zip</application> package, but any packages that "
13113
"depend on it will still be installed and may no longer function correctly."
13114
13115
#: serverguide/C/package-management.xml:140(para)
13116
msgid ""
13117
"For more <application>dpkg</application> options see the man page: "
13118
"<command>man dpkg</command>."
13119
msgstr ""
13120
"For more <application>dpkg</application> options see the man page: "
13121
"<command>man dpkg</command>."
13122
13123
#: serverguide/C/package-management.xml:146(title)
13124
msgid "Apt-Get"
13125
msgstr "Apt-Get"
13126
13127
#: serverguide/C/package-management.xml:147(para)
13128
msgid ""
13129
"The <application>apt-get</application> command is a powerful command-line "
13130
"tool used to work with Ubuntu's <emphasis>Advanced Packaging Tool</emphasis> "
13131
"(APT) performing such functions as installation of new software packages, "
13132
"upgrade of existing software packages, updating of the package list index, "
13133
"and even upgrading the entire Ubuntu system."
13134
msgstr ""
13135
"The <application>apt-get</application> command is a powerful command-line "
13136
"tool used to work with Ubuntu's <emphasis>Advanced Packaging Tool</emphasis> "
13137
"(APT) performing such functions as installation of new software packages, "
13138
"upgrade of existing software packages, updating of the package list index, "
13139
"and even upgrading the entire Ubuntu system."
13140
13141
#: serverguide/C/package-management.xml:150(para)
13142
msgid ""
13143
"Being a simple command-line tool, <application>apt-get</application> has "
13144
"numerous advantages over other package management tools available in Ubuntu "
13145
"for server administrators. Some of these advantages include ease of use over "
13146
"simple terminal connections (SSH) and the ability to be used in system "
13147
"administration scripts, which can in turn be automated by the "
13148
"<application>cron</application> scheduling utility."
13149
msgstr ""
13150
"Being a simple command-line tool, <application>apt-get</application> has "
13151
"numerous advantages over other package management tools available in Ubuntu "
13152
"for server administrators. Some of these advantages include ease of use over "
13153
"simple terminal connections (SSH) and the ability to be used in system "
13154
"administration scripts, which can in turn be automated by the "
13155
"<application>cron</application> scheduling utility."
13156
13157
#: serverguide/C/package-management.xml:157(para)
13158
msgid ""
13159
"<emphasis role=\"bold\">Install a Package</emphasis>: Installation of "
13160
"packages using the <application>apt-get</application> tool is quite simple. "
13161
"For example, to install the network scanner <emphasis "
13162
"role=\"italics\">nmap</emphasis>, type the following: <screen>\n"
13163
"<command>sudo apt-get install nmap</command>\n"
13164
"</screen>"
13165
msgstr ""
13166
"<emphasis role=\"bold\">Install a Package</emphasis>: Installation of "
13167
"packages using the <application>apt-get</application> tool is quite simple. "
13168
"For example, to install the network scanner <emphasis "
13169
"role=\"italics\">nmap</emphasis>, type the following: <screen>\n"
13170
"<command>sudo apt-get install nmap</command>\n"
13171
"</screen>"
13172
13173
#: serverguide/C/package-management.xml:165(para)
13174
msgid ""
13175
"<emphasis role=\"bold\">Remove a Package</emphasis>: Removal of a package or "
13176
"packages is also a straightforward and simple process. To remove the nmap "
13177
"package installed in the previous example, type the following: <screen>\n"
13178
"<command>sudo apt-get remove nmap</command>\n"
13179
"</screen>"
13180
msgstr ""
13181
"<emphasis role=\"bold\">Remove a Package</emphasis>: Removal of a package or "
13182
"packages is also a straightforward and simple process. To remove the nmap "
13183
"package installed in the previous example, type the following: <screen>\n"
13184
"<command>sudo apt-get remove nmap</command>\n"
13185
"</screen>"
13186
13187
#: serverguide/C/package-management.xml:172(para)
13188
msgid ""
13189
"<emphasis role=\"bold\">Multiple Packages</emphasis>: You may specify "
13190
"multiple packages to be installed or removed, separated by spaces."
13191
msgstr ""
13192
"<emphasis role=\"bold\">Multiple Packages</emphasis>: You may specify "
13193
"multiple packages to be installed or removed, separated by spaces."
13194
13195
#: serverguide/C/package-management.xml:175(para)
13196
msgid ""
13197
"Also, adding the <emphasis>--purge</emphasis> options to <command>apt-get "
13198
"remove</command> will remove the package configuration files as well. This "
13199
"may or may not be the desired effect so use with caution."
13200
msgstr ""
13201
"Also, adding the <emphasis>--purge</emphasis> options to <command>apt-get "
13202
"remove</command> will remove the package configuration files as well. This "
13203
"may or may not be the desired effect so use with caution."
13204
13205
#: serverguide/C/package-management.xml:181(para)
13206
msgid ""
13207
"<emphasis role=\"bold\">Update the Package Index</emphasis>: The APT package "
13208
"index is essentially a database of available packages from the repositories "
13209
"defined in the <filename>/etc/apt/sources.list</filename> file. To update "
13210
"the local package index with the latest changes made in repositories, type "
13211
"the following: <screen>\n"
13212
"<command>sudo apt-get update</command>\n"
13213
"</screen>"
13214
msgstr ""
13215
"<emphasis role=\"bold\">Update the Package Index</emphasis>: The APT package "
13216
"index is essentially a database of available packages from the repositories "
13217
"defined in the <filename>/etc/apt/sources.list</filename> file. To update "
13218
"the local package index with the latest changes made in repositories, type "
13219
"the following: <screen>\n"
13220
"<command>sudo apt-get update</command>\n"
13221
"</screen>"
13222
13223
#: serverguide/C/package-management.xml:189(para)
13224
msgid ""
13225
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: Over time, updated "
13226
"versions of packages currently installed on your computer may become "
13227
"available from the package repositories (for example security updates). To "
13228
"upgrade your system, first update your package index as outlined above, and "
13229
"then type: <screen>\n"
13230
"<command>sudo apt-get upgrade</command>\n"
13231
"</screen>"
13232
msgstr ""
13233
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: Over time, updated "
13234
"versions of packages currently installed on your computer may become "
13235
"available from the package repositories (for example security updates). To "
13236
"upgrade your system, first update your package index as outlined above, and "
13237
"then type: <screen>\n"
13238
"<command>sudo apt-get upgrade</command>\n"
13239
"</screen>"
13240
13241
#: serverguide/C/package-management.xml:195(para)
13242
msgid ""
13243
"For information on upgrading to a new Ubuntu release see <xref "
13244
"linkend=\"installing-upgrading\"/>."
13245
msgstr ""
13246
"For information on upgrading to a new Ubuntu release see <xref "
13247
"linkend=\"installing-upgrading\"/>."
13248
13249
#: serverguide/C/package-management.xml:153(para)
13250
msgid ""
13251
"Some examples of popular uses for the <application>apt-get</application> "
13252
"utility: <placeholder-1/>"
13253
msgstr ""
13254
"Some examples of popular uses for the <application>apt-get</application> "
13255
"utility: <placeholder-1/>"
13256
13257
#: serverguide/C/package-management.xml:201(para)
13258
msgid ""
13259
"Actions of the <application>apt-get</application> command, such as "
13260
"installation and removal of packages, are logged in the /var/log/dpkg.log "
13261
"log file."
13262
msgstr ""
13263
"Actions of the <application>apt-get</application> command, such as "
13264
"installation and removal of packages, are logged in the /var/log/dpkg.log "
13265
"log file."
13266
13267
#: serverguide/C/package-management.xml:204(para)
13268
msgid ""
13269
"For further information about the use of <application>APT</application>, "
13270
"read the comprehensive <ulink url=\"http://www.debian.org/doc/user-"
13271
"manuals#apt-howto\">Debian APT User Manual</ulink> or type: <screen>apt-get "
13272
"help</screen>"
13273
msgstr ""
13274
"For further information about the use of <application>APT</application>, "
13275
"read the comprehensive <ulink url=\"http://www.debian.org/doc/user-"
13276
"manuals#apt-howto\">Debian APT User Manual</ulink> or type: <screen>apt-get "
13277
"help</screen>"
13278
13279
#: serverguide/C/package-management.xml:208(title)
13280
msgid "Aptitude"
13281
msgstr "Aptitude"
13282
13283
#: serverguide/C/package-management.xml:209(para)
13284
msgid ""
13285
"<application>Aptitude</application> is a menu-driven, text-based front-end "
13286
"to the <emphasis>Advanced Packaging Tool</emphasis> (APT) system. Many of "
13287
"the common package management functions, such as installation, removal, and "
13288
"upgrade, are performed in <application>Aptitude</application> with single-"
13289
"key commands, which are typically lowercase letters."
13290
msgstr ""
13291
"<application>Aptitude</application> is a menu-driven, text-based front-end "
13292
"to the <emphasis>Advanced Packaging Tool</emphasis> (APT) system. Many of "
13293
"the common package management functions, such as installation, removal, and "
13294
"upgrade, are performed in <application>Aptitude</application> with single-"
13295
"key commands, which are typically lowercase letters."
13296
13297
#: serverguide/C/package-management.xml:212(para)
13298
msgid ""
13299
"<application>Aptitude</application> is best suited for use in a non-"
13300
"graphical terminal environment to ensure proper functioning of the command "
13301
"keys. You may start <application>Aptitude</application> as a normal user "
13302
"with the following command at a terminal prompt: <screen>\n"
13303
"<command>sudo aptitude</command>\n"
13304
"</screen>"
13305
msgstr ""
13306
"<application>Aptitude</application> is best suited for use in a non-"
13307
"graphical terminal environment to ensure proper functioning of the command "
13308
"keys. You may start <application>Aptitude</application> as a normal user "
13309
"with the following command at a terminal prompt: <screen>\n"
13310
"<command>sudo aptitude</command>\n"
13311
"</screen>"
13312
13313
#: serverguide/C/package-management.xml:219(para)
13314
msgid ""
13315
"When <application>Aptitude</application> starts, you will see a menu bar at "
13316
"the top of the screen and two panes below the menu bar. The top pane "
13317
"contains package categories, such as <emphasis role=\"italics\">New "
13318
"Packages</emphasis> and <emphasis role=\"italics\">Not Installed "
13319
"Packages</emphasis>. The bottom pane contains information related to the "
13320
"packages and package categories."
13321
msgstr ""
13322
"When <application>Aptitude</application> starts, you will see a menu bar at "
13323
"the top of the screen and two panes below the menu bar. The top pane "
13324
"contains package categories, such as <emphasis role=\"italics\">New "
13325
"Packages</emphasis> and <emphasis role=\"italics\">Not Installed "
13326
"Packages</emphasis>. The bottom pane contains information related to the "
13327
"packages and package categories."
13328
13329
#: serverguide/C/package-management.xml:222(para)
13330
msgid ""
13331
"Using <application>Aptitude</application> for package management is "
13332
"relatively straightforward, and the user interface makes common tasks simple "
13333
"to perform. The following are examples of common package management "
13334
"functions as performed in <application>Aptitude</application>:"
13335
msgstr ""
13336
"Using <application>Aptitude</application> for package management is "
13337
"relatively straightforward, and the user interface makes common tasks simple "
13338
"to perform. The following are examples of common package management "
13339
"functions as performed in <application>Aptitude</application>:"
13340
13341
#: serverguide/C/package-management.xml:226(para)
13342
msgid ""
13343
"<emphasis role=\"bold\">Install Packages</emphasis>: To install a package, "
13344
"locate the package via the Not Installed Packages package category, for "
13345
"example, by using the keyboard arrow keys and the <keycap>ENTER</keycap> "
13346
"key, and highlight the package you wish to install. After highlighting the "
13347
"package you wish to install, press the <keycap>+</keycap> key, and the "
13348
"package entry should turn <emphasis role=\"italics\">green</emphasis>, "
13349
"indicating it has been marked for installation. Now press <keycap>g</keycap> "
13350
"to be presented with a summary of package actions. Press <keycap>g</keycap> "
13351
"again, and you will be prompted to become root to complete the installation. "
13352
"Press <keycap>ENTER</keycap> which will result in a Password: prompt. Enter "
13353
"your user password to become root. Finally, press <keycap>g</keycap> once "
13354
"more and you'll be prompted to download the package. Press "
13355
"<keycap>ENTER</keycap> on the <emphasis role=\"italics\">Continue</emphasis> "
13356
"prompt, and downloading and installation of the package will commence."
13357
msgstr ""
13358
"<emphasis role=\"bold\">Install Packages</emphasis>: To install a package, "
13359
"locate the package via the Not Installed Packages package category, for "
13360
"example, by using the keyboard arrow keys and the <keycap>ENTER</keycap> "
13361
"key, and highlight the package you wish to install. After highlighting the "
13362
"package you wish to install, press the <keycap>+</keycap> key, and the "
13363
"package entry should turn <emphasis role=\"italics\">green</emphasis>, "
13364
"indicating it has been marked for installation. Now press <keycap>g</keycap> "
13365
"to be presented with a summary of package actions. Press <keycap>g</keycap> "
13366
"again, and you will be prompted to become root to complete the installation. "
13367
"Press <keycap>ENTER</keycap> which will result in a Password: prompt. Enter "
13368
"your user password to become root. Finally, press <keycap>g</keycap> once "
13369
"more and you'll be prompted to download the package. Press "
13370
"<keycap>ENTER</keycap> on the <emphasis role=\"italics\">Continue</emphasis> "
13371
"prompt, and downloading and installation of the package will commence."
13372
13373
#: serverguide/C/package-management.xml:230(para)
13374
msgid ""
13375
"<emphasis role=\"bold\">Remove Packages</emphasis>: To remove a package, "
13376
"locate the package via the Installed Packages package category, for example, "
13377
"by using the keyboard arrow keys and the <keycap>ENTER</keycap> key, and "
13378
"highlight the package you wish to remove. After highlighting the package you "
13379
"wish to install, press the <keycap>-</keycap> key, and the package entry "
13380
"should turn <emphasis role=\"italics\">pink</emphasis>, indicating it has "
13381
"been marked for removal. Now press <keycap>g</keycap> to be presented with a "
13382
"summary of package actions. Press <keycap>g</keycap> again, and you will be "
13383
"prompted to become root to complete the installation. Press "
13384
"<keycap>ENTER</keycap> which will result in a Password: prompt. Enter your "
13385
"user password to become root. Finally, press <keycap>g</keycap> once more, "
13386
"and you'll be prompted to download the package. Press <keycap>ENTER</keycap> "
13387
"on the <emphasis role=\"italics\">Continue</emphasis> prompt, and removal of "
13388
"the package will commence."
13389
msgstr ""
13390
"<emphasis role=\"bold\">Remove Packages</emphasis>: To remove a package, "
13391
"locate the package via the Installed Packages package category, for example, "
13392
"by using the keyboard arrow keys and the <keycap>ENTER</keycap> key, and "
13393
"highlight the package you wish to remove. After highlighting the package you "
13394
"wish to install, press the <keycap>-</keycap> key, and the package entry "
13395
"should turn <emphasis role=\"italics\">pink</emphasis>, indicating it has "
13396
"been marked for removal. Now press <keycap>g</keycap> to be presented with a "
13397
"summary of package actions. Press <keycap>g</keycap> again, and you will be "
13398
"prompted to become root to complete the installation. Press "
13399
"<keycap>ENTER</keycap> which will result in a Password: prompt. Enter your "
13400
"user password to become root. Finally, press <keycap>g</keycap> once more, "
13401
"and you'll be prompted to download the package. Press <keycap>ENTER</keycap> "
13402
"on the <emphasis role=\"italics\">Continue</emphasis> prompt, and removal of "
13403
"the package will commence."
13404
13405
#: serverguide/C/package-management.xml:234(para)
13406
msgid ""
13407
"<emphasis role=\"bold\">Update Package Index</emphasis>: To update the "
13408
"package index, simply press the <keycap>u</keycap> key and you will be "
13409
"prompted to become root to complete the update. Press <keycap>ENTER</keycap> "
13410
"which will result in a Password: prompt. Enter your user password to become "
13411
"root. Updating of the package index will commence. Press "
13412
"<keycap>ENTER</keycap> on the OK prompt when the download dialog is "
13413
"presented to complete the process."
13414
msgstr ""
13415
"<emphasis role=\"bold\">Update Package Index</emphasis>: To update the "
13416
"package index, simply press the <keycap>u</keycap> key and you will be "
13417
"prompted to become root to complete the update. Press <keycap>ENTER</keycap> "
13418
"which will result in a Password: prompt. Enter your user password to become "
13419
"root. Updating of the package index will commence. Press "
13420
"<keycap>ENTER</keycap> on the OK prompt when the download dialogue is "
13421
"presented to complete the process."
13422
13423
#: serverguide/C/package-management.xml:238(para)
13424
msgid ""
13425
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: To upgrade packages, "
13426
"perform the update of the package index as detailed above, and then press "
13427
"the <keycap>U</keycap> key to mark all packages with updates. Now press "
13428
"<keycap>g</keycap> whereby you'll be presented with a summary of package "
13429
"actions. Press <keycap>g</keycap> again, and you will be prompted to become "
13430
"root to complete the installation. Press <keycap>ENTER</keycap> which will "
13431
"result in a Password: prompt. Enter your user password to become root. "
13432
"Finally, press <keycap>g</keycap> once more, and you'll be prompted to "
13433
"download the packages. Press <keycap>ENTER</keycap> on the <emphasis "
13434
"role=\"italics\">Continue</emphasis> prompt, and upgrade of the packages "
13435
"will commence."
13436
msgstr ""
13437
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: To upgrade packages, "
13438
"perform the update of the package index as detailed above, and then press "
13439
"the <keycap>U</keycap> key to mark all packages with updates. Now press "
13440
"<keycap>g</keycap> whereby you'll be presented with a summary of package "
13441
"actions. Press <keycap>g</keycap> again, and you will be prompted to become "
13442
"root to complete the installation. Press <keycap>ENTER</keycap> which will "
13443
"result in a Password: prompt. Enter your user password to become root. "
13444
"Finally, press <keycap>g</keycap> once more, and you'll be prompted to "
13445
"download the packages. Press <keycap>ENTER</keycap> on the <emphasis "
13446
"role=\"italics\">Continue</emphasis> prompt, and upgrade of the packages "
13447
"will commence."
13448
13449
#: serverguide/C/package-management.xml:245(para)
13450
msgid "<emphasis role=\"bold\">i</emphasis>: Installed package"
13451
msgstr "<emphasis role=\"bold\">i</emphasis>: Installed package"
13452
13453
#: serverguide/C/package-management.xml:250(para)
13454
msgid ""
13455
"<emphasis role=\"bold\">c</emphasis>: Package not installed, but package "
13456
"configuration remains on system"
13457
msgstr ""
13458
"<emphasis role=\"bold\">c</emphasis>: Package not installed, but package "
13459
"configuration remains on system"
13460
13461
#: serverguide/C/package-management.xml:254(para)
13462
msgid "<emphasis role=\"bold\">p</emphasis>: Purged from system"
13463
msgstr "<emphasis role=\"bold\">p</emphasis>: Purged from system"
13464
13465
#: serverguide/C/package-management.xml:258(para)
13466
msgid "<emphasis role=\"bold\">v</emphasis>: Virtual package"
13467
msgstr "<emphasis role=\"bold\">v</emphasis>: Virtual package"
13468
13469
#: serverguide/C/package-management.xml:262(para)
13470
msgid "<emphasis role=\"bold\">B</emphasis>: Broken package"
13471
msgstr "<emphasis role=\"bold\">B</emphasis>: Broken package"
13472
13473
#: serverguide/C/package-management.xml:266(para)
13474
msgid ""
13475
"<emphasis role=\"bold\">u</emphasis>: Unpacked files, but package not yet "
13476
"configured"
13477
msgstr ""
13478
"<emphasis role=\"bold\">u</emphasis>: Unpacked files, but package not yet "
13479
"configured"
13480
13481
#: serverguide/C/package-management.xml:270(para)
13482
msgid ""
13483
"<emphasis role=\"bold\">C</emphasis>: Half-configured - Configuration failed "
13484
"and requires fix"
13485
msgstr ""
13486
"<emphasis role=\"bold\">C</emphasis>: Half-configured - Configuration failed "
13487
"and requires fix"
13488
13489
#: serverguide/C/package-management.xml:274(para)
13490
msgid ""
13491
"<emphasis role=\"bold\">H</emphasis>: Half-installed - Removal failed and "
13492
"requires fix"
13493
msgstr ""
13494
"<emphasis role=\"bold\">H</emphasis>: Half-installed - Removal failed and "
13495
"requires fix"
13496
13497
#: serverguide/C/package-management.xml:242(para)
13498
msgid ""
13499
"The first column of information displayed in the package list in the top "
13500
"pane, when actually viewing packages lists the current state of the package, "
13501
"and uses the following key to describe the state of the package: "
13502
"<placeholder-1/>"
13503
msgstr ""
13504
"The first column of information displayed in the package list in the top "
13505
"pane, when actually viewing packages lists the current state of the package, "
13506
"and uses the following key to describe the state of the package: "
13507
"<placeholder-1/>"
13508
13509
#: serverguide/C/package-management.xml:280(para)
13510
msgid ""
13511
"To exit Aptitude, simply press the <keycap>q</keycap> key and confirm you "
13512
"wish to exit. Many other functions are available from the Aptitude menu by "
13513
"pressing the <keycap>F10</keycap> key."
13514
msgstr ""
13515
"To exit Aptitude, simply press the <keycap>q</keycap> key and confirm you "
13516
"wish to exit. Many other functions are available from the Aptitude menu by "
13517
"pressing the <keycap>F10</keycap> key."
13518
13519
#: serverguide/C/package-management.xml:285(title)
13520
msgid "Automatic Updates"
13521
msgstr "Automatic Updates"
13522
13523
#: serverguide/C/package-management.xml:287(para)
13524
msgid ""
13525
"The <application>unattended-upgrades</application> package can be used to "
13526
"automatically install updated packages, and can be configured to update all "
13527
"packages or just install security updates. First, install the package by "
13528
"entering the following in a terminal:"
13529
msgstr ""
13530
"The <application>unattended-upgrades</application> package can be used to "
13531
"automatically install updated packages, and can be configured to update all "
13532
"packages or just install security updates. First, install the package by "
13533
"entering the following in a terminal:"
13534
13535
#: serverguide/C/package-management.xml:293(command)
13536
msgid "sudo apt-get install unattended-upgrades"
13537
msgstr "sudo apt-get install unattended-upgrades"
13538
13539
#: serverguide/C/package-management.xml:296(para)
13540
msgid ""
13541
"To configure <application>unattended-upgrades</application>, edit "
13542
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> and adjust "
13543
"the following to fit your needs:"
13544
msgstr ""
13545
"To configure <application>unattended-upgrades</application>, edit "
13546
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> and adjust "
13547
"the following to fit your needs:"
13548
13549
#: serverguide/C/package-management.xml:301(programlisting)
13550
#, no-wrap
13551
msgid ""
13552
"\n"
13553
"Unattended-Upgrade::Allowed-Origins {\n"
13554
" \"Ubuntu maverick-security\";\n"
13555
"// \"Ubuntu maverick-updates\";\n"
13556
"};\n"
13557
msgstr ""
13558
13559
#: serverguide/C/package-management.xml:308(para)
13560
msgid ""
13561
"Certain packages can also be <emphasis>blacklisted</emphasis> and therefore "
13562
"will not be automatically updated. To blacklist a package, add it to the "
13563
"list:"
13564
msgstr ""
13565
"Certain packages can also be <emphasis>blacklisted</emphasis> and therefore "
13566
"will not be automatically updated. To blacklist a package, add it to the "
13567
"list:"
13568
13569
#: serverguide/C/package-management.xml:313(programlisting)
13570
#, no-wrap
13571
msgid ""
13572
"\n"
13573
"Unattended-Upgrade::Package-Blacklist {\n"
13574
"// \"vim\";\n"
13575
"// \"libc6\";\n"
13576
"// \"libc6-dev\";\n"
13577
"// \"libc6-i686\";\n"
13578
"};\n"
13579
msgstr ""
13580
"\n"
13581
"Unattended-Upgrade::Package-Blacklist {\n"
13582
"// \"vim\";\n"
13583
"// \"libc6\";\n"
13584
"// \"libc6-dev\";\n"
13585
"// \"libc6-i686\";\n"
13586
"};\n"
13587
13588
#: serverguide/C/package-management.xml:323(para)
13589
msgid ""
13590
"The double <emphasis><quote>//</quote></emphasis> serve as comments, so "
13591
"whatever follows \"//\" will not be evaluated."
13592
msgstr ""
13593
"The double <emphasis><quote>//</quote></emphasis> serve as comments, so "
13594
"whatever follows \"//\" will not be evaluated."
13595
13596
#: serverguide/C/package-management.xml:328(para)
13597
msgid ""
13598
"To enable automatic updates, edit "
13599
"<filename>/etc/apt/apt.conf.d/10periodic</filename> and set the appropriate "
13600
"<application>apt</application> configuration options:"
13601
msgstr ""
13602
13603
#: serverguide/C/package-management.xml:332(programlisting)
13604
#, no-wrap
13605
msgid ""
13606
"\n"
13607
"APT::Periodic::Update-Package-Lists \"1\";\n"
13608
"APT::Periodic::Download-Upgradeable-Packages \"1\";\n"
13609
"APT::Periodic::AutocleanInterval \"7\";\n"
13610
"APT::Periodic::Unattended-Upgrade \"1\";\n"
13611
msgstr ""
13612
13613
#: serverguide/C/package-management.xml:339(para)
13614
msgid ""
13615
"The above configuration updates the package list, downloads, and installs "
13616
"available upgrades every day. The local download archive is cleaned every "
13617
"week."
13618
msgstr ""
13619
13620
#: serverguide/C/package-management.xml:345(para)
13621
msgid ""
13622
"You can read more about <application>apt</application> Periodic "
13623
"configuration options in the <filename>/etc/cron.daily/apt</filename> script "
13624
"header."
13625
msgstr ""
13626
13627
#: serverguide/C/package-management.xml:350(para)
13628
msgid ""
13629
"The results of <application>unattended-upgrades</application> will be logged "
13630
"to <filename>/var/log/unattended-upgrades</filename>."
13631
msgstr ""
13632
"The results of <application>unattended-upgrades</application> will be logged "
13633
"to <filename>/var/log/unattended-upgrades</filename>."
13634
13635
#: serverguide/C/package-management.xml:355(title)
13636
msgid "Notifications"
13637
msgstr "Notifications"
13638
13639
#: serverguide/C/package-management.xml:357(para)
13640
msgid ""
13641
"Configuring <emphasis>Unattended-Upgrade::Mail</emphasis> in "
13642
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> will enable "
13643
"<application>unattended-upgrades</application> to email an administrator "
13644
"detailing any packages that need upgrading or have problems."
13645
msgstr ""
13646
"Configuring <emphasis>Unattended-Upgrade::Mail</emphasis> in "
13647
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> will enable "
13648
"<application>unattended-upgrades</application> to e-mail an administrator "
13649
"detailing any packages that need upgrading or have problems."
13650
13651
#: serverguide/C/package-management.xml:362(para)
13652
msgid ""
13653
"Another useful package is <application>apticron</application>. "
13654
"<application>apticron</application> will configure a "
13655
"<application>cron</application> job to email an administrator information "
13656
"about any packages on the system that have updates available, as well as a "
13657
"summary of changes in each package."
13658
msgstr ""
13659
"Another useful package is <application>apticron</application>. "
13660
"<application>apticron</application> will configure a "
13661
"<application>cron</application> job to e-mail an administrator information "
13662
"about any packages on the system that have updates available, as well as a "
13663
"summary of changes in each package."
13664
13665
#: serverguide/C/package-management.xml:368(para)
13666
msgid ""
13667
"To install the <application>apticron</application> package, in a terminal "
13668
"enter:"
13669
msgstr ""
13670
"To install the <application>apticron</application> package, in a terminal "
13671
"enter:"
13672
13673
#: serverguide/C/package-management.xml:373(command)
13674
msgid "sudo apt-get install apticron"
13675
msgstr "sudo apt-get install apticron"
13676
13677
#: serverguide/C/package-management.xml:376(para)
13678
msgid ""
13679
"Once the package is installed edit "
13680
"<filename>/etc/apticron/apticron.conf</filename>, to set the email address "
13681
"and other options:"
13682
msgstr ""
13683
"Once the package is installed edit "
13684
"<filename>/etc/apticron/apticron.conf</filename>, to set the e-mail address "
13685
"and other options:"
13686
13687
#: serverguide/C/package-management.xml:380(programlisting)
13688
#, no-wrap
13689
msgid ""
13690
"\n"
13691
"EMAIL=\"root@example.com\"\n"
13692
msgstr ""
13693
"\n"
13694
"EMAIL=\"root@example.com\"\n"
13695
13696
#: serverguide/C/package-management.xml:389(para)
13697
msgid ""
13698
"Configuration of the <emphasis>Advanced Packaging Tool</emphasis> (APT) "
13699
"system repositories is stored in the /etc/apt/sources.list configuration "
13700
"file. An example of this file is referenced here, along with information on "
13701
"adding or removing repository references from the file."
13702
msgstr ""
13703
"Configuration of the <emphasis>Advanced Packaging Tool</emphasis> (APT) "
13704
"system repositories is stored in the /etc/apt/sources.list configuration "
13705
"file. An example of this file is referenced here, along with information on "
13706
"adding or removing repository references from the file."
13707
13708
#: serverguide/C/package-management.xml:395(para)
13709
msgid ""
13710
"<ulink url=\"../sample/sources.list\">Here</ulink> is a simple example of a "
13711
"typical <filename>/etc/apt/sources.list</filename> file."
13712
msgstr ""
13713
"<ulink url=\"../sample/sources.list\">Here</ulink> is a simple example of a "
13714
"typical <filename>/etc/apt/sources.list</filename> file."
13715
13716
#: serverguide/C/package-management.xml:399(para)
13717
msgid ""
13718
"You may edit the file to enable repositories or disable them. For example, "
13719
"to disable the requirement of inserting the Ubuntu CD-ROM whenever package "
13720
"operations occur, simply comment out the appropriate line for the CD-ROM, "
13721
"which appears at the top of the file:"
13722
msgstr ""
13723
"You may edit the file to enable repositories or disable them. For example, "
13724
"to disable the requirement of inserting the Ubuntu CD-ROM whenever package "
13725
"operations occur, simply comment out the appropriate line for the CD-ROM, "
13726
"which appears at the top of the file:"
13727
13728
#: serverguide/C/package-management.xml:404(screen)
13729
#, no-wrap
13730
msgid ""
13731
"\n"
13732
"# no more prompting for CD-ROM please\n"
13733
"# deb cdrom:[&distro-apt-cd-name; - Release i386 (20070419.1)]/ maverick "
13734
"main restricted\n"
13735
msgstr ""
13736
13737
#: serverguide/C/package-management.xml:410(title)
13738
msgid "Extra Repositories"
13739
msgstr "Extra Repositories"
13740
13741
#: serverguide/C/package-management.xml:411(para)
13742
msgid ""
13743
"In addition to the officially supported package repositories available for "
13744
"Ubuntu, there exist additional community-maintained repositories which add "
13745
"thousands more potential packages for installation. Two of the most popular "
13746
"are the <emphasis>Universe</emphasis> and <emphasis>Multiverse</emphasis> "
13747
"repositories. These repositories are not officially supported by Ubuntu, but "
13748
"because they are maintained by the community they generally provide packages "
13749
"which are safe for use with your Ubuntu computer."
13750
msgstr ""
13751
"In addition to the officially supported package repositories available for "
13752
"Ubuntu, there exists additional community-maintained repositories which add "
13753
"thousands more potential packages for installation. Two of the most popular "
13754
"are the <emphasis>Universe</emphasis> and <emphasis>Multiverse</emphasis> "
13755
"repositories. These repositories are not officially supported by Ubuntu, but "
13756
"because they are maintained by the community they generally provide packages "
13757
"which are safe for use with your Ubuntu computer."
13758
13759
#: serverguide/C/package-management.xml:414(para)
13760
msgid ""
13761
"Packages in the <emphasis>Multiverse</emphasis> repository often have "
13762
"licensing issues that prevent them from being distributed with a free "
13763
"operating system, and they may be illegal in your locality."
13764
msgstr ""
13765
"Packages in the <emphasis>Multiverse</emphasis> repository often have "
13766
"licensing issues that prevent them from being distributed with a free "
13767
"operating system, and they may be illegal in your locality."
13768
13769
#: serverguide/C/package-management.xml:416(para)
13770
msgid ""
13771
"Be advised that neither the <emphasis>Universe</emphasis> or "
13772
"<emphasis>Multiverse</emphasis> repositories contain officially supported "
13773
"packages. In particular, there may not be security updates for these "
13774
"packages."
13775
msgstr ""
13776
"Be advised that neither the <emphasis>Universe</emphasis> or "
13777
"<emphasis>Multiverse</emphasis> repositories contain officially supported "
13778
"packages. In particular, there may not be security updates for these "
13779
"packages."
13780
13781
#: serverguide/C/package-management.xml:420(para)
13782
msgid ""
13783
"Many other package sources are available, sometimes even offering only one "
13784
"package, as in the case of package sources provided by the developer of a "
13785
"single application. You should always be very careful and cautious when "
13786
"using non-standard package sources, however. Research the source and "
13787
"packages carefully before performing any installation, as some package "
13788
"sources and their packages could render your system unstable or non-"
13789
"functional in some respects."
13790
msgstr ""
13791
"Many other package sources are available, sometimes even offering only one "
13792
"package, as in the case of package sources provided by the developer of a "
13793
"single application. You should always be very careful and cautious when "
13794
"using non-standard package sources, however. Research the source and "
13795
"packages carefully before performing any installation, as some package "
13796
"sources and their packages could render your system unstable or non-"
13797
"functional in some respects."
13798
13799
#: serverguide/C/package-management.xml:423(para)
13800
msgid ""
13801
"By default, the <emphasis>Universe</emphasis> and "
13802
"<emphasis>Multiverse</emphasis> repositories are enabled but if you would "
13803
"like to disable them edit <filename>/etc/apt/sources.list</filename> and "
13804
"comment the following lines:"
13805
msgstr ""
13806
"By default, the <emphasis>Universe</emphasis> and "
13807
"<emphasis>Multiverse</emphasis> repositories are enabled but if you would "
13808
"like to disable them edit <filename>/etc/apt/sources.list</filename> and "
13809
"comment the following lines:"
13810
13811
#: serverguide/C/package-management.xml:430(programlisting)
13812
#, no-wrap
13813
msgid ""
13814
"\n"
13815
"deb http://archive.ubuntu.com/ubuntu maverick universe multiverse\n"
13816
"deb-src http://archive.ubuntu.com/ubuntu maverick universe multiverse\n"
13817
"\n"
13818
"deb http://us.archive.ubuntu.com/ubuntu/ maverick universe\n"
13819
"deb-src http://us.archive.ubuntu.com/ubuntu/ maverick universe\n"
13820
"deb http://us.archive.ubuntu.com/ubuntu/ maverick-updates universe\n"
13821
"deb-src http://us.archive.ubuntu.com/ubuntu/ maverick-updates universe\n"
13822
"\n"
13823
"deb http://us.archive.ubuntu.com/ubuntu/ maverick multiverse\n"
13824
"deb-src http://us.archive.ubuntu.com/ubuntu/ maverick multiverse\n"
13825
"deb http://us.archive.ubuntu.com/ubuntu/ maverick-updates multiverse\n"
13826
"deb-src http://us.archive.ubuntu.com/ubuntu/ maverick-updates multiverse\n"
13827
"\n"
13828
"deb http://security.ubuntu.com/ubuntu maverick-security universe\n"
13829
"deb-src http://security.ubuntu.com/ubuntu maverick-security universe\n"
13830
"deb http://security.ubuntu.com/ubuntu maverick-security multiverse\n"
13831
"deb-src http://security.ubuntu.com/ubuntu maverick-security multiverse\n"
13832
msgstr ""
13833
13834
#: serverguide/C/package-management.xml:456(para)
13835
msgid ""
13836
"Most of the material covered in this chapter is available in "
13837
"<application>man</application> pages, many of which are available online."
13838
msgstr ""
13839
"Most of the material covered in this chapter is available in "
13840
"<application>man</application> pages, many of which are available online."
13841
13842
#: serverguide/C/package-management.xml:463(para)
13843
msgid ""
13844
"The <ulink "
13845
"url=\"https://help.ubuntu.com/community/InstallingSoftware\">InstallingSoftwa"
13846
"re</ulink> Ubuntu wiki page has more information."
13847
msgstr ""
13848
13849
#: serverguide/C/package-management.xml:468(para)
13850
msgid ""
13851
"For more <application>dpkg</application> details see the <ulink "
13852
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man1/dpkg.1.html\">dpkg"
13853
" man page</ulink>."
13854
msgstr ""
13855
13856
#: serverguide/C/package-management.xml:474(para)
13857
msgid ""
13858
"The <ulink url=\"http://www.debian.org/doc/manuals/apt-howto/\">APT "
13859
"HOWTO</ulink> and <ulink "
13860
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man8/apt-"
13861
"get.8.html\">apt-get man page</ulink> contain useful information regarding "
13862
"<application>apt-get</application> usage."
13863
msgstr ""
13864
13865
#: serverguide/C/package-management.xml:481(para)
13866
msgid ""
13867
"See the <ulink "
13868
"url=\"http://manpages.ubuntu.com/manpages/maverick/man8/aptitude.8.html\">apt"
13869
"itude man page</ulink> for more <application>aptitude</application> options."
13870
msgstr ""
13871
13872
#: serverguide/C/package-management.xml:487(para)
13873
msgid ""
13874
"The <ulink "
13875
"url=\"https://help.ubuntu.com/community/Repositories/Ubuntu\">Adding "
13876
"Repositories HOWTO (Ubuntu Wiki)</ulink> page contains more details on "
13877
"adding repositories."
13878
msgstr ""
13879
"The <ulink "
13880
"url=\"https://help.ubuntu.com/community/Repositories/Ubuntu\">Adding "
13881
"Repositories HOWTO (Ubuntu Wiki)</ulink> page contains more details on "
13882
"adding repositories."
13883
13884
#: serverguide/C/other-apps.xml:13(title)
13885
msgid "Other Useful Applications"
13886
msgstr "Other Useful Applications"
13887
13888
#: serverguide/C/other-apps.xml:15(para)
13889
msgid ""
13890
"There are many very useful applications developed by the Ubuntu Server Team, "
13891
"and others that are well integrated with Ubuntu Server Edition, that might "
13892
"not be well known. This chapter will showcase some useful applications that "
13893
"can make administering an Ubuntu server, or many Ubuntu servers, that much "
13894
"easier."
13895
msgstr ""
13896
"There are many very useful applications developed by the Ubuntu Server Team, "
13897
"and others that are well integrated with Ubuntu Server Edition, that might "
13898
"not be well known. This chapter will showcase some useful applications that "
13899
"can make administering an Ubuntu server, or many Ubuntu servers, that much "
13900
"easier."
13901
13902
#: serverguide/C/other-apps.xml:23(title)
13903
msgid "pam_motd"
13904
msgstr ""
13905
13906
#: serverguide/C/other-apps.xml:25(para)
13907
msgid ""
13908
"When logging into an Ubuntu server you may have noticed the informative "
13909
"Message Of The Day (MOTD). This information is obtained and displayed using "
13910
"a couple of packages:"
13911
msgstr ""
13912
"When logging into an Ubuntu server you may have noticed the informative "
13913
"Message Of The Day (MOTD). This information is obtained and displayed using "
13914
"a couple of packages:"
13915
13916
#: serverguide/C/other-apps.xml:32(para)
13917
msgid ""
13918
"<emphasis>landscape-common:</emphasis> provides the core libraries of "
13919
"<application>landscape-client</application>, which can be used to manage "
13920
"systems using the web based <emphasis>Landscape</emphasis> application. The "
13921
"package includes the <application>/usr/bin/landscape-sysinfo</application> "
13922
"utility which is used to gather the information displayed in the MOTD."
13923
msgstr ""
13924
"<emphasis>landscape-common:</emphasis> provides the core libraries of "
13925
"<application>landscape-client</application>, which can be used to manage "
13926
"systems using the web based <emphasis>Landscape</emphasis> application. The "
13927
"package includes the <application>/usr/bin/landscape-sysinfo</application> "
13928
"utility which is used to gather the information displayed in the MOTD."
13929
13930
#: serverguide/C/other-apps.xml:40(para)
13931
msgid ""
13932
"<emphasis>update-notifier-common:</emphasis> is used to automatically update "
13933
"the MOTD via <application>pam_motd</application> module."
13934
msgstr ""
13935
13936
#: serverguide/C/other-apps.xml:46(para)
13937
msgid ""
13938
"<application>pam_motd</application> executes the scripts in "
13939
"<filename>/etc/update-motd.d</filename> in order based on the number "
13940
"prepended to the script. The output of the scripts is written to "
13941
"<filename>/var/run/motd</filename>, keeping the numerical order, then "
13942
"concatenated with <filename>/etc/motd.tail</filename>."
13943
msgstr ""
13944
13945
#: serverguide/C/other-apps.xml:52(para)
13946
msgid ""
13947
"You can add your own dynamic information to the MOTD. For example, to add "
13948
"local weather information:"
13949
msgstr ""
13950
"You can add your own dynamic information to the MOTD. For example, to add "
13951
"local weather information:"
13952
13953
#: serverguide/C/other-apps.xml:58(para)
13954
msgid "First, install the <application>weather-util</application> package:"
13955
msgstr "First, install the <application>weather-util</application> package:"
13956
13957
#: serverguide/C/other-apps.xml:63(command)
13958
msgid "sudo apt-get install weather-util"
13959
msgstr "sudo apt-get install weather-util"
13960
13961
#: serverguide/C/other-apps.xml:68(para)
13962
msgid ""
13963
"The <application>weather</application> utility uses METAR data from the "
13964
"National Oceanic and Atmospheric Administration and forecasts from the "
13965
"National Weather Service. In order to find local information you will need "
13966
"the 4-character ICAO location indicator. This can be determined by browsing "
13967
"to the <ulink url=\"http://www.weather.gov/tg/siteloc.shtml\">National "
13968
"Weather Service</ulink> site."
13969
msgstr ""
13970
"The <application>weather</application> utility uses METAR data from the "
13971
"National Oceanic and Atmospheric Administration and forecasts from the "
13972
"National Weather Service. In order to find local information you will need "
13973
"the 4-character ICAO location indicator. This can be determined by browsing "
13974
"to the <ulink url=\"http://www.weather.gov/tg/siteloc.shtml\">National "
13975
"Weather Service</ulink> site."
13976
13977
#: serverguide/C/other-apps.xml:75(para)
13978
msgid ""
13979
"Although the National Weather Service is a United States government agency "
13980
"there are weather stations available world wide. However, local weather "
13981
"information for all locations outside the U.S. may not be available."
13982
msgstr ""
13983
"Although the National Weather Service is a United States government agency "
13984
"there are weather stations available world wide. However, local weather "
13985
"information for all locations outside the U.S. may not be available."
13986
13987
#: serverguide/C/other-apps.xml:81(para)
13988
msgid ""
13989
"Create <filename>/usr/local/bin/local-weather</filename>, a simple shell "
13990
"script to use <application>weather</application> with your local ICAO "
13991
"indicator:"
13992
msgstr ""
13993
"Create <filename>/usr/local/bin/local-weather</filename>, a simple shell "
13994
"script to use <application>weather</application> with your local ICAO "
13995
"indicator:"
13996
13997
#: serverguide/C/other-apps.xml:86(programlisting)
13998
#, no-wrap
13999
msgid ""
14000
"\n"
14001
"#!/bin/sh\n"
14002
"#\n"
14003
"#\n"
14004
"# Prints the local weather information for the MOTD.\n"
14005
"#\n"
14006
"#\n"
14007
"\n"
14008
"# Replace KINT with your local weather station.\n"
14009
"# Local stations can be found here: http://www.weather.gov/tg/siteloc.shtml\n"
14010
"\n"
14011
"echo\n"
14012
"weather -i KINT\n"
14013
"echo\n"
14014
"\n"
14015
msgstr ""
14016
14017
#: serverguide/C/other-apps.xml:104(para)
14018
msgid "Make the script executable:"
14019
msgstr "Make the script executable:"
14020
14021
#: serverguide/C/other-apps.xml:109(command)
14022
msgid "sudo chmod 755 /usr/local/bin/local-weather"
14023
msgstr "sudo chmod 755 /usr/local/bin/local-weather"
14024
14025
#: serverguide/C/other-apps.xml:113(para)
14026
msgid ""
14027
"Next, create a symlink to <filename>/etc/update-motd.d/98-local-"
14028
"weather</filename>:"
14029
msgstr ""
14030
14031
#: serverguide/C/other-apps.xml:118(command)
14032
msgid ""
14033
"sudo ln -s /usr/local/bin/local-weather /etc/update-motd.d/98-local-weather"
14034
msgstr ""
14035
14036
#: serverguide/C/other-apps.xml:122(para)
14037
msgid "Finally, exit the server and re-login to view the new MOTD."
14038
msgstr ""
14039
14040
#: serverguide/C/other-apps.xml:128(para)
14041
msgid ""
14042
"You should now be greeted with some useful information, and some information "
14043
"about the local weather that may not be quite so useful. Hopefully the "
14044
"<application>local-weather</application> example demonstrates the "
14045
"flexibility of <application>pam_motd</application>."
14046
msgstr ""
14047
14048
#: serverguide/C/other-apps.xml:136(title)
14049
msgid "etckeeper"
14050
msgstr "etckeeper"
14051
14052
#: serverguide/C/other-apps.xml:138(para)
14053
msgid ""
14054
"<application>etckeeper</application> allows the contents of <filename "
14055
"role=\"directory\">/etc</filename> be easily stored in Version Control "
14056
"System (VCS) repository. It hooks into <application>apt</application> to "
14057
"automatically commit changes to <filename>/etc</filename> when packages are "
14058
"installed or upgraded. Placing <filename>/etc</filename> under version "
14059
"control is considered an industry best practice, and the goal of "
14060
"<application>etckeeper</application> is to make this process as painless as "
14061
"possible."
14062
msgstr ""
14063
"<application>etckeeper</application> allows the contents of <filename "
14064
"role=\"directory\">/etc</filename> be easily stored in Version Control "
14065
"System (VCS) repository. It hooks into <application>apt</application> to "
14066
"automatically commit changes to <filename>/etc</filename> when packages are "
14067
"installed or upgraded. Placing <filename>/etc</filename> under version "
14068
"control is considered an industry best practice, and the goal of "
14069
"<application>etckeeper</application> is to make this process as painless as "
14070
"possible."
14071
14072
#: serverguide/C/other-apps.xml:146(para)
14073
msgid ""
14074
"Install <application>etckeeper</application> by entering the following in a "
14075
"terminal:"
14076
msgstr ""
14077
"Install <application>etckeeper</application> by entering the following in a "
14078
"terminal:"
14079
14080
#: serverguide/C/other-apps.xml:151(command)
14081
msgid "sudo apt-get install etckeeper"
14082
msgstr "sudo apt-get install etckeeper"
14083
14084
#: serverguide/C/other-apps.xml:154(para)
14085
msgid ""
14086
"The main configuration file, "
14087
"<filename>/etc/etckeeper/etckeeper.conf</filename>, is fairly simple. The "
14088
"main option is which VCS to use. By default "
14089
"<application>etckeeper</application> is configured to use "
14090
"<application>bzr</application> for version control. The repository is "
14091
"automatically initialized (and committed for the first time) during package "
14092
"installation. It is possible to undo this by entering the following command:"
14093
msgstr ""
14094
"The main configuration file, "
14095
"<filename>/etc/etckeeper/etckeeper.conf</filename>, is fairly simple. The "
14096
"main option is which VCS to use. By default "
14097
"<application>etckeeper</application> is configured to use "
14098
"<application>bzr</application> for version control. The repository is "
14099
"automatically initialised (and committed for the first time) during package "
14100
"installation. It is possible to undo this by entering the following command:"
14101
14102
#: serverguide/C/other-apps.xml:164(command)
14103
msgid "sudo etckeeper uninit"
14104
msgstr "sudo etckeeper uninit"
14105
14106
#: serverguide/C/other-apps.xml:167(para)
14107
msgid ""
14108
"By default, etckeeper will commit uncommitted changes made to /etc daily. "
14109
"This can be disabled using the AVOID_DAILY_AUTOCOMMITS configuration option. "
14110
"It will also automatically commit changes before and after package "
14111
"installation. For a more precise tracking of changes, it is recommended to "
14112
"commit your changes manually, together with a commit message, using:"
14113
msgstr ""
14114
"By default, etckeeper will commit uncommitted changes made to /etc daily. "
14115
"This can be disabled using the AVOID_DAILY_AUTOCOMMITS configuration option. "
14116
"It will also automatically commit changes before and after package "
14117
"installation. For a more precise tracking of changes, it is recommended to "
14118
"commit your changes manually, together with a commit message, using:"
14119
14120
#: serverguide/C/other-apps.xml:176(command)
14121
msgid "sudo etckeeper commit \"..Reason for configuration change..\""
14122
msgstr "sudo etckeeper commit \"..Reason for configuration change..\""
14123
14124
#: serverguide/C/other-apps.xml:179(para)
14125
msgid ""
14126
"Using the VCS commands you can view log information about files in "
14127
"<filename>/etc</filename>:"
14128
msgstr ""
14129
"Using the VCS commands you can view log information about files in "
14130
"<filename>/etc</filename>:"
14131
14132
#: serverguide/C/other-apps.xml:184(command)
14133
msgid "sudo bzr log /etc/passwd"
14134
msgstr "sudo bzr log /etc/passwd"
14135
14136
#: serverguide/C/other-apps.xml:187(para)
14137
msgid ""
14138
"To demonstrate the integration with the package management system, install "
14139
"<application>postfix</application>:"
14140
msgstr ""
14141
"To demonstrate the integration with the package management system, install "
14142
"<application>postfix</application>:"
14143
14144
#: serverguide/C/other-apps.xml:192(command) serverguide/C/mail.xml:45(command)
14145
msgid "sudo apt-get install postfix"
14146
msgstr "sudo apt-get install postfix"
14147
14148
#: serverguide/C/other-apps.xml:195(para)
14149
msgid ""
14150
"When the installation is finished, all the "
14151
"<application>postfix</application> configuration files should be committed "
14152
"to the repository:"
14153
msgstr ""
14154
"When the installation is finished, all the "
14155
"<application>postfix</application> configuration files should be committed "
14156
"to the repository:"
14157
14158
#: serverguide/C/other-apps.xml:201(computeroutput)
14159
#, no-wrap
14160
msgid ""
14161
"Committing to: /etc/\n"
14162
"added aliases.db\n"
14163
"modified group\n"
14164
"modified group-\n"
14165
"modified gshadow\n"
14166
"modified gshadow-\n"
14167
"modified passwd\n"
14168
"modified passwd-\n"
14169
"added postfix\n"
14170
"added resolvconf\n"
14171
"added rsyslog.d\n"
14172
"modified shadow\n"
14173
"modified shadow-\n"
14174
"added init.d/postfix\n"
14175
"added network/if-down.d/postfix\n"
14176
"added network/if-up.d/postfix\n"
14177
"added postfix/dynamicmaps.cf\n"
14178
"added postfix/main.cf\n"
14179
"added postfix/master.cf\n"
14180
"added postfix/post-install\n"
14181
"added postfix/postfix-files\n"
14182
"added postfix/postfix-script\n"
14183
"added postfix/sasl\n"
14184
"added ppp/ip-down.d\n"
14185
"added ppp/ip-down.d/postfix\n"
14186
"added ppp/ip-up.d/postfix\n"
14187
"added rc0.d/K20postfix\n"
14188
"added rc1.d/K20postfix\n"
14189
"added rc2.d/S20postfix\n"
14190
"added rc3.d/S20postfix\n"
14191
"added rc4.d/S20postfix\n"
14192
"added rc5.d/S20postfix\n"
14193
"added rc6.d/K20postfix\n"
14194
"added resolvconf/update-libc.d\n"
14195
"added resolvconf/update-libc.d/postfix\n"
14196
"added rsyslog.d/postfix.conf\n"
14197
"added ufw/applications.d/postfix\n"
14198
"Committed revision 2."
14199
msgstr ""
14200
"Committing to: /etc/\n"
14201
"added aliases.db\n"
14202
"modified group\n"
14203
"modified group-\n"
14204
"modified gshadow\n"
14205
"modified gshadow-\n"
14206
"modified passwd\n"
14207
"modified passwd-\n"
14208
"added postfix\n"
14209
"added resolvconf\n"
14210
"added rsyslog.d\n"
14211
"modified shadow\n"
14212
"modified shadow-\n"
14213
"added init.d/postfix\n"
14214
"added network/if-down.d/postfix\n"
14215
"added network/if-up.d/postfix\n"
14216
"added postfix/dynamicmaps.cf\n"
14217
"added postfix/main.cf\n"
14218
"added postfix/master.cf\n"
14219
"added postfix/post-install\n"
14220
"added postfix/postfix-files\n"
14221
"added postfix/postfix-script\n"
14222
"added postfix/sasl\n"
14223
"added ppp/ip-down.d\n"
14224
"added ppp/ip-down.d/postfix\n"
14225
"added ppp/ip-up.d/postfix\n"
14226
"added rc0.d/K20postfix\n"
14227
"added rc1.d/K20postfix\n"
14228
"added rc2.d/S20postfix\n"
14229
"added rc3.d/S20postfix\n"
14230
"added rc4.d/S20postfix\n"
14231
"added rc5.d/S20postfix\n"
14232
"added rc6.d/K20postfix\n"
14233
"added resolvconf/update-libc.d\n"
14234
"added resolvconf/update-libc.d/postfix\n"
14235
"added rsyslog.d/postfix.conf\n"
14236
"added ufw/applications.d/postfix\n"
14237
"Committed revision 2."
14238
14239
#: serverguide/C/other-apps.xml:241(para)
14240
msgid ""
14241
"For an example of how <application>etckeeper</application> tracks manual "
14242
"changes, add new a host to <filename>/etc/hosts</filename>. Using "
14243
"<application>bzr</application> you can see which files have been modified:"
14244
msgstr ""
14245
"For an example of how <application>etckeeper</application> tracks manual "
14246
"changes, add new a host to <filename>/etc/hosts</filename>. Using "
14247
"<application>bzr</application> you can see which files have been modified:"
14248
14249
#: serverguide/C/other-apps.xml:247(command)
14250
msgid "sudo bzr status /etc/"
14251
msgstr "sudo bzr status /etc/"
14252
14253
#: serverguide/C/other-apps.xml:248(computeroutput)
14254
#, no-wrap
14255
msgid ""
14256
"modified:\n"
14257
" hosts"
14258
msgstr ""
14259
"modified:\n"
14260
" hosts"
14261
14262
#: serverguide/C/other-apps.xml:252(para)
14263
msgid "Now commit the changes:"
14264
msgstr "Now commit the changes:"
14265
14266
#: serverguide/C/other-apps.xml:257(command)
14267
msgid "sudo etckeeper commit \"new host\""
14268
msgstr "sudo etckeeper commit \"new host\""
14269
14270
#: serverguide/C/other-apps.xml:260(para)
14271
msgid ""
14272
"For more information on <application>bzr</application> see <xref "
14273
"linkend=\"bazaar\"/>."
14274
msgstr ""
14275
"For more information on <application>bzr</application> see <xref "
14276
"linkend=\"bazaar\"/>."
14277
14278
#: serverguide/C/other-apps.xml:266(title)
14279
msgid "Byobu"
14280
msgstr ""
14281
14282
#: serverguide/C/other-apps.xml:268(para)
14283
msgid ""
14284
"One of the most useful applications for any system administrator is "
14285
"<application>screen</application>. It allows the execution of multiple "
14286
"shells in one terminal. To make some of the advanced "
14287
"<application>screen</application> features more user friendly, and provide "
14288
"some useful information about the system, the "
14289
"<application>byobu</application> package was created."
14290
msgstr ""
14291
14292
#: serverguide/C/other-apps.xml:275(para)
14293
msgid ""
14294
"When executing <application>byobu</application> pressing the "
14295
"<emphasis>F9</emphasis> key will bring up the "
14296
"<application>Configuration</application> menu. This menu will allow you to:"
14297
msgstr ""
14298
14299
#: serverguide/C/other-apps.xml:281(para)
14300
msgid "View the Help menu"
14301
msgstr "View the Help menu"
14302
14303
#: serverguide/C/other-apps.xml:282(para)
14304
msgid "Change Byobu's background color"
14305
msgstr ""
14306
14307
#: serverguide/C/other-apps.xml:283(para)
14308
msgid "Change Byobu's foreground color"
14309
msgstr ""
14310
14311
#: serverguide/C/other-apps.xml:284(para)
14312
msgid "Toggle status notifications"
14313
msgstr ""
14314
14315
#: serverguide/C/other-apps.xml:285(para)
14316
msgid "Change the key binding set"
14317
msgstr "Change the key binding set"
14318
14319
#: serverguide/C/other-apps.xml:286(para)
14320
msgid "Change the escape sequence"
14321
msgstr "Change the escape sequence"
14322
14323
#: serverguide/C/other-apps.xml:287(para)
14324
msgid "Create new windows"
14325
msgstr ""
14326
14327
#: serverguide/C/other-apps.xml:288(para)
14328
msgid "Manage the default windows"
14329
msgstr "Manage the default windows"
14330
14331
#: serverguide/C/other-apps.xml:289(para)
14332
msgid "Byobu currently does not launch at login (toggle on)"
14333
msgstr ""
14334
14335
#: serverguide/C/other-apps.xml:292(para)
14336
msgid ""
14337
"The <emphasis>key bindings</emphasis> determine such things as the escape "
14338
"sequence, new window, change window, etc. There are two key binding sets to "
14339
"choose from <emphasis>f-keys</emphasis> and <emphasis>screen-escape-"
14340
"keys</emphasis>. If you wish to use the original key bindings choose the "
14341
"<emphasis>none</emphasis> set."
14342
msgstr ""
14343
14344
#: serverguide/C/other-apps.xml:298(para)
14345
msgid ""
14346
"<application>byobu</application> provides a menu which displays the Ubuntu "
14347
"release, processor information, memory information, and the time and date. "
14348
"The effect is similar to a desktop menu."
14349
msgstr ""
14350
14351
#: serverguide/C/other-apps.xml:303(para)
14352
msgid ""
14353
"Using the <emphasis>\"Byobu currently does not launch at login (toggle "
14354
"on)\"</emphasis> option will cause <application>byobu</application> to be "
14355
"executed any time a terminal is opened. Changes made to "
14356
"<application>byobu</application> are on a per user basis, and will not "
14357
"affect other users on the system."
14358
msgstr ""
14359
14360
#: serverguide/C/other-apps.xml:309(para)
14361
msgid ""
14362
"One difference when using byobu is the <emphasis>scrollback</emphasis> mode. "
14363
"Press the <emphasis>F7</emphasis> key to enter scrollback mode. Scrollback "
14364
"mode allows you to navigate past output using <emphasis>vi</emphasis> like "
14365
"commands. Here is a quick list of movement commands:"
14366
msgstr ""
14367
14368
#: serverguide/C/other-apps.xml:316(para)
14369
msgid "<emphasis>h</emphasis> - Move the cursor left by one character"
14370
msgstr "<emphasis>h</emphasis> - Move the cursor left by one character"
14371
14372
#: serverguide/C/other-apps.xml:317(para)
14373
msgid "<emphasis>j</emphasis> - Move the cursor down by one line"
14374
msgstr "<emphasis>j</emphasis> - Move the cursor down by one line"
14375
14376
#: serverguide/C/other-apps.xml:318(para)
14377
msgid "<emphasis>k</emphasis> - Move the cursor up by one line"
14378
msgstr "<emphasis>k</emphasis> - Move the cursor up by one line"
14379
14380
#: serverguide/C/other-apps.xml:319(para)
14381
msgid "<emphasis>l</emphasis> - Move the cursor right by one character"
14382
msgstr "<emphasis>l</emphasis> - Move the cursor right by one character"
14383
14384
#: serverguide/C/other-apps.xml:320(para)
14385
msgid "<emphasis>0</emphasis> - Move to the beginning of the current line"
14386
msgstr "<emphasis>0</emphasis> - Move to the beginning of the current line"
14387
14388
#: serverguide/C/other-apps.xml:321(para)
14389
msgid "<emphasis>$</emphasis> - Move to the end of the current line"
14390
msgstr "<emphasis>$</emphasis> - Move to the end of the current line"
14391
14392
#: serverguide/C/other-apps.xml:322(para)
14393
msgid ""
14394
"<emphasis>G</emphasis> - Moves to the specified line (defaults to the end of "
14395
"the buffer)"
14396
msgstr ""
14397
"<emphasis>G</emphasis> - Moves to the specified line (defaults to the end of "
14398
"the buffer)"
14399
14400
#: serverguide/C/other-apps.xml:323(para)
14401
msgid "<emphasis>/</emphasis> - Search forward"
14402
msgstr "<emphasis>/</emphasis> - Search forward"
14403
14404
#: serverguide/C/other-apps.xml:324(para)
14405
msgid "<emphasis>?</emphasis> - Search backward"
14406
msgstr "<emphasis>?</emphasis> - Search backward"
14407
14408
#: serverguide/C/other-apps.xml:325(para)
14409
msgid ""
14410
"<emphasis>n</emphasis> - Moves to the next match, either forward or backword"
14411
msgstr ""
14412
"<emphasis>n</emphasis> - Moves to the next match, either forward or backword"
14413
14414
#: serverguide/C/other-apps.xml:334(para)
14415
msgid ""
14416
"See the <ulink "
14417
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man1/update-"
14418
"motd.1.html\">update-motd man page</ulink> for more options available to "
14419
"<application>update-motd</application>."
14420
msgstr ""
14421
14422
#: serverguide/C/other-apps.xml:340(para)
14423
msgid ""
14424
"The Debian Package of the Day <ulink "
14425
"url=\"http://debaday.debian.net/2007/10/04/weather-check-weather-conditions-"
14426
"and-forecasts-on-the-command-line/\">weather</ulink> article has more "
14427
"details about using the <application>weather</application>utility."
14428
msgstr ""
14429
"The Debian Package of the Day <ulink "
14430
"url=\"http://debaday.debian.net/2007/10/04/weather-check-weather-conditions-"
14431
"and-forecasts-on-the-command-line/\">weather</ulink> article has more "
14432
"details about using the <application>weather</application>utility."
14433
14434
#: serverguide/C/other-apps.xml:347(para)
14435
msgid ""
14436
"See the <ulink "
14437
"url=\"http://kitenet.net/~joey/code/etckeeper/\">etckeeper</ulink> site for "
14438
"more details on using <application>etckeeper</application>."
14439
msgstr ""
14440
"See the <ulink "
14441
"url=\"http://kitenet.net/~joey/code/etckeeper/\">etckeeper</ulink> site for "
14442
"more details on using <application>etckeeper</application>."
14443
14444
#: serverguide/C/other-apps.xml:353(para)
14445
msgid ""
14446
"The <ulink url=\"https://help.ubuntu.com/community/etckeeper\">etckeeper "
14447
"Ubuntu Wiki</ulink> page."
14448
msgstr ""
14449
14450
#: serverguide/C/other-apps.xml:358(para)
14451
msgid ""
14452
"For the latest news and information about <application>bzr</application> see "
14453
"the <ulink url=\"http://bazaar-vcs.org/\">bzr</ulink> web site."
14454
msgstr ""
14455
"For the latest news and information about <application>bzr</application> see "
14456
"the <ulink url=\"http://bazaar-vcs.org/\">bzr</ulink> web site."
14457
14458
#: serverguide/C/other-apps.xml:363(para)
14459
msgid ""
14460
"For more information on <application>screen</application> see the <ulink "
14461
"url=\"http://www.gnu.org/software/screen/\">screen web site</ulink>."
14462
msgstr ""
14463
"For more information on <application>screen</application> see the <ulink "
14464
"url=\"http://www.gnu.org/software/screen/\">screen web site</ulink>."
14465
14466
#: serverguide/C/other-apps.xml:368(para)
14467
msgid ""
14468
"And the <ulink url=\"https://help.ubuntu.com/community/Screen\">Ubuntu Wiki "
14469
"screen</ulink> page."
14470
msgstr ""
14471
14472
#: serverguide/C/other-apps.xml:373(para)
14473
msgid ""
14474
"Also, see the <application>byobu</application><ulink "
14475
"url=\"https://launchpad.net/byobu\">project page</ulink> for more "
14476
"information."
14477
msgstr ""
14478
14479
#: serverguide/C/network-config.xml:14(para)
14480
msgid ""
14481
"Networks consist of two or more devices, such as computer systems, printers, "
14482
"and related equipment which are connected by either physical cabling or "
14483
"wireless links for the purpose of sharing and distributing information among "
14484
"the connected devices."
14485
msgstr ""
14486
"Networks consist of two or more devices, such as computer systems, printers, "
14487
"and related equipment which are connected by either physical cabling or "
14488
"wireless links for the purpose of sharing and distributing information among "
14489
"the connected devices."
14490
14491
#: serverguide/C/network-config.xml:20(para)
14492
msgid ""
14493
"This section provides general and specific information pertaining to "
14494
"networking, including an overview of network concepts and detailed "
14495
"discussion of popular network protocols."
14496
msgstr ""
14497
"This section provides general and specific information pertaining to "
14498
"networking, including an overview of network concepts and detailed "
14499
"discussion of popular network protocols."
14500
14501
#: serverguide/C/network-config.xml:27(title)
14502
msgid "Network Configuration"
14503
msgstr "Network Configuration"
14504
14505
#: serverguide/C/network-config.xml:28(para)
14506
msgid ""
14507
"Ubuntu ships with a number of graphical utilities to configure your network "
14508
"devices. This document is geared toward server administrators and will focus "
14509
"on managing your network on the command line."
14510
msgstr ""
14511
"Ubuntu ships with a number of graphical utilities to configure your network "
14512
"devices. This document is geared towards server administrators and will "
14513
"focus on managing your network on the command line."
14514
14515
#: serverguide/C/network-config.xml:35(title)
14516
msgid "Ethernet Interfaces"
14517
msgstr ""
14518
14519
#: serverguide/C/network-config.xml:36(para)
14520
msgid ""
14521
"Ethernet interfaces are identified by the system using the naming convention "
14522
"of <emphasis role=\"italix\">ethX</emphasis>, where <emphasis "
14523
"role=\"italic\">X</emphasis> represents a numeric value. The first Ethernet "
14524
"interface is typically identified as <emphasis "
14525
"role=\"italic\">eth0</emphasis>, the second as <emphasis "
14526
"role=\"italic\">eth1</emphasis>, and all others should move up in numerical "
14527
"order."
14528
msgstr ""
14529
14530
#: serverguide/C/network-config.xml:46(title)
14531
msgid "Identify Ethernet Interfaces"
14532
msgstr ""
14533
14534
#: serverguide/C/network-config.xml:47(para)
14535
msgid ""
14536
"To quickly identify all available Ethernet interfaces, you can use the "
14537
"<application>ifconfig</application> command as shown below."
14538
msgstr ""
14539
14540
#: serverguide/C/network-config.xml:52(userinput)
14541
#, no-wrap
14542
msgid "ifconfig -a | grep eth"
14543
msgstr ""
14544
14545
#: serverguide/C/network-config.xml:51(screen)
14546
#, no-wrap
14547
msgid ""
14548
"\n"
14549
"<placeholder-1/>\n"
14550
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a\n"
14551
msgstr ""
14552
14553
#: serverguide/C/network-config.xml:55(para)
14554
msgid ""
14555
"Another application that can help identify all network interfaces available "
14556
"to your system is the <application>lshw</application> command. In the "
14557
"example below, <application>lshw</application> shows a single Ethernet "
14558
"interface with the logical name of <emphasis role=\"italic\">eth0</emphasis> "
14559
"along with bus information, driver details and all supported capabilities."
14560
msgstr ""
14561
14562
#: serverguide/C/network-config.xml:62(userinput)
14563
#, no-wrap
14564
msgid "sudo lshw -class network"
14565
msgstr ""
14566
14567
#: serverguide/C/network-config.xml:61(screen)
14568
#, no-wrap
14569
msgid ""
14570
"\n"
14571
"<placeholder-1/>\n"
14572
" *-network\n"
14573
" description: Ethernet interface\n"
14574
" product: BCM4401-B0 100Base-TX\n"
14575
" vendor: Broadcom Corporation\n"
14576
" physical id: 0\n"
14577
" bus info: pci@0000:03:00.0\n"
14578
" logical name: eth0\n"
14579
" version: 02\n"
14580
" serial: 00:15:c5:4a:16:5a\n"
14581
" size: 10MB/s\n"
14582
" capacity: 100MB/s\n"
14583
" width: 32 bits\n"
14584
" clock: 33MHz\n"
14585
" capabilities: (snipped for brevity)\n"
14586
" configuration: (snipped for brevity)\n"
14587
" resources: irq:17 memory:ef9fe000-ef9fffff\n"
14588
msgstr ""
14589
14590
#: serverguide/C/network-config.xml:83(title)
14591
msgid "Ethernet Interface Logical Names"
14592
msgstr ""
14593
14594
#: serverguide/C/network-config.xml:84(para)
14595
msgid ""
14596
"Interface logical names are configured in the file "
14597
"<filename>/etc/udev/rules.d/70-persistent-net.rules.</filename> If you would "
14598
"like control which interface receives a particular logical name, find the "
14599
"line matching the interfaces physical MAC address and modify the value of "
14600
"<emphasis role=\"italic\">NAME=ethX</emphasis> to the desired logical name. "
14601
"Reboot the system to commit your changes."
14602
msgstr ""
14603
14604
#: serverguide/C/network-config.xml:92(programlisting)
14605
#, no-wrap
14606
msgid ""
14607
"\n"
14608
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
14609
"ATTR{address}==\"00:15:c5:4a:16:5a\", ATTR{dev_id}==\"0x0\", "
14610
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth0\"\n"
14611
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
14612
"ATTR{address}==\"00:15:c5:4a:16:5b\", ATTR{dev_id}==\"0x0\", "
14613
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth1\"\n"
14614
msgstr ""
14615
14616
#: serverguide/C/network-config.xml:99(title)
14617
msgid "Ethernet Interface Settings"
14618
msgstr ""
14619
14620
#: serverguide/C/network-config.xml:100(para)
14621
msgid ""
14622
"<application>ethtool</application> is a program that displays and changes "
14623
"Ethernet card settings such as auto-negotiation, port speed, duplex mode, "
14624
"and Wake-on-LAN. It is not installed by default, but is available for "
14625
"installation in the repositories."
14626
msgstr ""
14627
14628
#: serverguide/C/network-config.xml:106(userinput)
14629
#, no-wrap
14630
msgid "sudo apt-get install ethtool"
14631
msgstr ""
14632
14633
#: serverguide/C/network-config.xml:108(para)
14634
msgid ""
14635
"The following is an example of how to view supported features and configured "
14636
"settings of an Ethernet interface."
14637
msgstr ""
14638
14639
#: serverguide/C/network-config.xml:113(userinput)
14640
#, no-wrap
14641
msgid "sudo ethtool eth0"
14642
msgstr ""
14643
14644
#: serverguide/C/network-config.xml:112(screen)
14645
#, no-wrap
14646
msgid ""
14647
"\n"
14648
"<placeholder-1/>\n"
14649
"Settings for eth0:\n"
14650
" Supported ports: [ TP ]\n"
14651
" Supported link modes: 10baseT/Half 10baseT/Full \n"
14652
" 100baseT/Half 100baseT/Full \n"
14653
" 1000baseT/Half 1000baseT/Full \n"
14654
" Supports auto-negotiation: Yes\n"
14655
" Advertised link modes: 10baseT/Half 10baseT/Full \n"
14656
" 100baseT/Half 100baseT/Full \n"
14657
" 1000baseT/Half 1000baseT/Full \n"
14658
" Advertised auto-negotiation: Yes\n"
14659
" Speed: 1000Mb/s\n"
14660
" Duplex: Full\n"
14661
" Port: Twisted Pair\n"
14662
" PHYAD: 1\n"
14663
" Transceiver: internal\n"
14664
" Auto-negotiation: on\n"
14665
" Supports Wake-on: g\n"
14666
" Wake-on: d\n"
14667
" Current message level: 0x000000ff (255)\n"
14668
" Link detected: yes\n"
14669
msgstr ""
14670
14671
#: serverguide/C/network-config.xml:135(para)
14672
msgid ""
14673
"Changes made with the <application>ethtool</application> command are "
14674
"temporary and will be lost after a reboot. If you would like to retain "
14675
"settings, simply add the desired <application>ethtool</application> command "
14676
"to a <emphasis role=\"italic\">pre-up</emphasis> statement in the interface "
14677
"configuration file <filename>/etc/network/interfaces</filename>."
14678
msgstr ""
14679
14680
#: serverguide/C/network-config.xml:141(para)
14681
msgid ""
14682
"The following is an example of how the interface identified as <emphasis "
14683
"role=\"italic\">eth0</emphasis> could be permanently configured with a port "
14684
"speed of 1000Mb/s running in full duplex mode."
14685
msgstr ""
14686
14687
#: serverguide/C/network-config.xml:145(programlisting)
14688
#, no-wrap
14689
msgid ""
14690
"\n"
14691
"auto eth0\n"
14692
"iface eth0 inet static\n"
14693
"pre-up /usr/sbin/ethtool -s eth0 speed 1000 duplex full\n"
14694
msgstr ""
14695
14696
#: serverguide/C/network-config.xml:151(para)
14697
msgid ""
14698
"Although the example above shows the interface configured to use the "
14699
"<emphasis role=\"italic\">static</emphasis> method, it actually works with "
14700
"other methods as well, such as DHCP. The example is meant to demonstrate "
14701
"only proper placement of the <emphasis role=\"italic\">pre-up</emphasis> "
14702
"statement in relation to the rest of the interface configuration."
14703
msgstr ""
14704
14705
#: serverguide/C/network-config.xml:163(title)
14706
msgid "IP Addressing"
14707
msgstr ""
14708
14709
#: serverguide/C/network-config.xml:164(para)
14710
msgid ""
14711
"The following section describes the process of configuring your systems IP "
14712
"address and default gateway needed for communicating on a local area network "
14713
"and the Internet."
14714
msgstr ""
14715
14716
#: serverguide/C/network-config.xml:171(title)
14717
msgid "Temporary IP Address Assignment"
14718
msgstr ""
14719
14720
#: serverguide/C/network-config.xml:172(para)
14721
msgid ""
14722
"For temporary network configurations, you can use standard commands such as "
14723
"<application>ip</application>, <application>ifconfig</application> and "
14724
"<application>route</application>, which are also found on most other "
14725
"GNU/Linux operating systems. These commands allow you to configure settings "
14726
"which take effect immediately, however they are not persistent and will be "
14727
"lost after a reboot."
14728
msgstr ""
14729
14730
#: serverguide/C/network-config.xml:180(para)
14731
msgid ""
14732
"To temporarily configure an IP address, you can use the "
14733
"<application>ifconfig</application> command in the following manner. Just "
14734
"modify the IP address and subnet mask to match your network requirements."
14735
msgstr ""
14736
14737
#: serverguide/C/network-config.xml:186(userinput)
14738
#, no-wrap
14739
msgid "sudo ifconfig eth0 10.0.0.100 netmask 255.255.255.0"
14740
msgstr ""
14741
14742
#: serverguide/C/network-config.xml:188(para)
14743
msgid ""
14744
"To verify the IP address configuration of <application>eth0</application>, "
14745
"you can use the <application>ifconfig</application> command in the following "
14746
"manner."
14747
msgstr ""
14748
14749
#: serverguide/C/network-config.xml:193(userinput)
14750
#, no-wrap
14751
msgid "ifconfig eth0"
14752
msgstr ""
14753
14754
#: serverguide/C/network-config.xml:192(screen)
14755
#, no-wrap
14756
msgid ""
14757
"\n"
14758
"<placeholder-1/>\n"
14759
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a \n"
14760
" inet addr:10.0.0.100 Bcast:10.0.0.255 Mask:255.255.255.0\n"
14761
" inet6 addr: fe80::215:c5ff:fe4a:165a/64 Scope:Link\n"
14762
" UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1\n"
14763
" RX packets:466475604 errors:0 dropped:0 overruns:0 frame:0\n"
14764
" TX packets:403172654 errors:0 dropped:0 overruns:0 carrier:0\n"
14765
" collisions:0 txqueuelen:1000 \n"
14766
" RX bytes:2574778386 (2.5 GB) TX bytes:1618367329 (1.6 GB)\n"
14767
" Interrupt:16 \n"
14768
msgstr ""
14769
14770
#: serverguide/C/network-config.xml:204(para)
14771
msgid ""
14772
"To configure a default gateway, you can use the "
14773
"<application>route</application> command in the following manner. Modify the "
14774
"default gateway address to match your network requirements."
14775
msgstr ""
14776
14777
#: serverguide/C/network-config.xml:210(userinput)
14778
#, no-wrap
14779
msgid "sudo route add default gw 10.0.0.1 eth0"
14780
msgstr ""
14781
14782
#: serverguide/C/network-config.xml:212(para)
14783
msgid ""
14784
"To verify your default gateway configuration, you can use the "
14785
"<application>route</application> command in the following manner."
14786
msgstr ""
14787
14788
#: serverguide/C/network-config.xml:217(userinput)
14789
#, no-wrap
14790
msgid "route -n"
14791
msgstr ""
14792
14793
#: serverguide/C/network-config.xml:216(screen)
14794
#, no-wrap
14795
msgid ""
14796
"\n"
14797
"<placeholder-1/>\n"
14798
"Kernel IP routing table\n"
14799
"Destination Gateway Genmask Flags Metric Ref Use "
14800
"Iface\n"
14801
"10.0.0.0 0.0.0.0 255.255.255.0 U 1 0 0 "
14802
"eth0\n"
14803
"0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 "
14804
"eth0\n"
14805
msgstr ""
14806
14807
#: serverguide/C/network-config.xml:223(para)
14808
msgid ""
14809
"If you require DNS for your temporary network configuration, you can add DNS "
14810
"server IP addresses in the file <filename>/etc/resolv.conf</filename>. The "
14811
"example below shows how to enter two DNS servers to "
14812
"<filename>/etc/resolv.conf</filename>, which should be changed to servers "
14813
"appropriate for your network. A more lengthy description of DNS client "
14814
"configuration is in a following section."
14815
msgstr ""
14816
14817
#: serverguide/C/network-config.xml:230(programlisting)
14818
#, no-wrap
14819
msgid ""
14820
"\n"
14821
"nameserver 8.8.8.8\n"
14822
"nameserver 8.8.4.4\n"
14823
msgstr ""
14824
14825
#: serverguide/C/network-config.xml:234(para)
14826
msgid ""
14827
"If you no longer need this configuration and wish to purge all IP "
14828
"configuration from an interface, you can use the "
14829
"<application>ip</application> command with the flush option as shown below."
14830
msgstr ""
14831
14832
#: serverguide/C/network-config.xml:240(userinput)
14833
#, no-wrap
14834
msgid "ip addr flush eth0"
14835
msgstr ""
14836
14837
#: serverguide/C/network-config.xml:243(para)
14838
msgid ""
14839
"Flushing the IP configuration using the <application>ip</application> "
14840
"command does not clear the contents of "
14841
"<filename>/etc/resolv.conf</filename>. You must remove or modify those "
14842
"entries manually."
14843
msgstr ""
14844
14845
#: serverguide/C/network-config.xml:251(title)
14846
msgid "Dynamic IP Address Assignment (DHCP Client)"
14847
msgstr ""
14848
14849
#: serverguide/C/network-config.xml:252(para)
14850
msgid ""
14851
"To configure your server to use DHCP for dynamic address assignment, add the "
14852
"<emphasis role=\"italic\">dhcp</emphasis> method to the inet address family "
14853
"statement for the appropriate interface in the file "
14854
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
14855
"are configuring your first Ethernet interface identified as <emphasis "
14856
"role=\"italic\">eth0</emphasis>."
14857
msgstr ""
14858
14859
#: serverguide/C/network-config.xml:259(programlisting)
14860
#, no-wrap
14861
msgid ""
14862
"\n"
14863
"auto eth0\n"
14864
"iface eth0 inet dhcp\n"
14865
msgstr ""
14866
"\n"
14867
"auto eth0\n"
14868
"iface eth0 inet dhcp\n"
14869
14870
#: serverguide/C/network-config.xml:263(para)
14871
msgid ""
14872
"By adding an interface configuration as shown above, you can manually enable "
14873
"the interface through the <application>ifup</application> command which "
14874
"initiates the DHCP process via <application>dhclient</application>."
14875
msgstr ""
14876
14877
#: serverguide/C/network-config.xml:269(userinput) serverguide/C/network-config.xml:304(userinput)
14878
#, no-wrap
14879
msgid "sudo ifup eth0"
14880
msgstr ""
14881
14882
#: serverguide/C/network-config.xml:271(para)
14883
msgid ""
14884
"To manually disable the interface, you can use the "
14885
"<application>ifdown</application> command, which in turn will initiate the "
14886
"DHCP release process and shut down the interface."
14887
msgstr ""
14888
14889
#: serverguide/C/network-config.xml:277(userinput) serverguide/C/network-config.xml:311(userinput)
14890
#, no-wrap
14891
msgid "sudo ifdown eth0"
14892
msgstr ""
14893
14894
#: serverguide/C/network-config.xml:282(title)
14895
msgid "Static IP Address Assignment"
14896
msgstr ""
14897
14898
#: serverguide/C/network-config.xml:283(para)
14899
msgid ""
14900
"To configure your system to use a static IP address assignment, add the "
14901
"<emphasis role=\"italic\">static</emphasis> method to the inet address "
14902
"family statement for the appropriate interface in the file "
14903
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
14904
"are configuring your first Ethernet interface identified as <emphasis "
14905
"role=\"italic\">eth0</emphasis>. Change the <emphasis "
14906
"role=\"italic\">address</emphasis>, <emphasis "
14907
"role=\"italic\">netmask</emphasis>, and <emphasis "
14908
"role=\"italic\">gateway</emphasis> values to meet the requirements of your "
14909
"network."
14910
msgstr ""
14911
14912
#: serverguide/C/network-config.xml:292(programlisting)
14913
#, no-wrap
14914
msgid ""
14915
"\n"
14916
"auto eth0\n"
14917
"iface eth0 inet static\n"
14918
"address 10.0.0.100\n"
14919
"netmask 255.255.255.0\n"
14920
"gateway 10.0.0.1\n"
14921
msgstr ""
14922
14923
#: serverguide/C/network-config.xml:299(para)
14924
msgid ""
14925
"By adding an interface configuration as shown above, you can manually enable "
14926
"the interface through the <application>ifup</application> command."
14927
msgstr ""
14928
14929
#: serverguide/C/network-config.xml:306(para)
14930
msgid ""
14931
"To manually disable the interface, you can use the "
14932
"<application>ifdown</application> command."
14933
msgstr ""
14934
14935
#: serverguide/C/network-config.xml:316(title)
14936
msgid "Loopback Interface"
14937
msgstr ""
14938
14939
#: serverguide/C/network-config.xml:317(para)
14940
msgid ""
14941
"The loopback interface is identified by the system as <emphasis "
14942
"role=\"italic\">lo</emphasis> and has a default IP address of 127.0.0.1. It "
14943
"can be viewed using the ifconfig command."
14944
msgstr ""
14945
14946
#: serverguide/C/network-config.xml:322(userinput)
14947
#, no-wrap
14948
msgid "ifconfig lo"
14949
msgstr ""
14950
14951
#: serverguide/C/network-config.xml:321(screen)
14952
#, no-wrap
14953
msgid ""
14954
"\n"
14955
"<placeholder-1/>\n"
14956
"lo Link encap:Local Loopback \n"
14957
" inet addr:127.0.0.1 Mask:255.0.0.0\n"
14958
" inet6 addr: ::1/128 Scope:Host\n"
14959
" UP LOOPBACK RUNNING MTU:16436 Metric:1\n"
14960
" RX packets:2718 errors:0 dropped:0 overruns:0 frame:0\n"
14961
" TX packets:2718 errors:0 dropped:0 overruns:0 carrier:0\n"
14962
" collisions:0 txqueuelen:0 \n"
14963
" RX bytes:183308 (183.3 KB) TX bytes:183308 (183.3 KB)\n"
14964
msgstr ""
14965
14966
#: serverguide/C/network-config.xml:332(para)
14967
msgid ""
14968
"By default, there should be two lines in "
14969
"<filename>/etc/network/interfaces</filename> responsible for automatically "
14970
"configuring your loopback interface. It is recommended that you keep the "
14971
"default settings unless you have a specific purpose for changing them. An "
14972
"example of the two default lines are shown below."
14973
msgstr ""
14974
14975
#: serverguide/C/network-config.xml:338(programlisting)
14976
#, no-wrap
14977
msgid ""
14978
"\n"
14979
"auto lo\n"
14980
"iface lo inet loopback\n"
14981
msgstr ""
14982
14983
#: serverguide/C/network-config.xml:347(title)
14984
msgid "Name Resolution"
14985
msgstr ""
14986
14987
#: serverguide/C/network-config.xml:348(para)
14988
msgid ""
14989
"Name resolution as it relates to IP networking is the process of mapping IP "
14990
"addresses to hostnames, making it easier to identify resources on a network. "
14991
"The following section will explain how to properly configure your system for "
14992
"name resolution using DNS and static hostname records."
14993
msgstr ""
14994
14995
#: serverguide/C/network-config.xml:356(title)
14996
msgid "DNS Client Configuration"
14997
msgstr ""
14998
14999
#: serverguide/C/network-config.xml:357(para)
15000
msgid ""
15001
"To configure your system to use DNS for name resolution, add the IP "
15002
"addresses of the DNS servers that are appropriate for your network in the "
15003
"file <filename>/etc/resolv.conf</filename>. You can also add an optional DNS "
15004
"suffix search-lists to match your network domain names."
15005
msgstr ""
15006
15007
#: serverguide/C/network-config.xml:362(para)
15008
msgid ""
15009
"Below is an example of a typical configuration of "
15010
"<filename>/etc/resolv.conf</filename> for a server on the domain \"<emphasis "
15011
"role=\"italic\">example.com</emphasis>\" and using two public DNS servers."
15012
msgstr ""
15013
15014
#: serverguide/C/network-config.xml:367(programlisting)
15015
#, no-wrap
15016
msgid ""
15017
"\n"
15018
"search example.com\n"
15019
"nameserver 8.8.8.8\n"
15020
"nameserver 8.8.4.4\n"
15021
msgstr ""
15022
15023
#: serverguide/C/network-config.xml:372(para)
15024
msgid ""
15025
"The <emphasis role=\"italic\">search</emphasis> option can also be used with "
15026
"multiple domain names so that DNS queries will be appended in the order in "
15027
"which they are entered. For example, your network may have multiple sub-"
15028
"domains to search; a parent domain of <emphasis "
15029
"role=\"italic\">example.com</emphasis>, and two sub-domains, <emphasis "
15030
"role=\"italic\">sales.example.com</emphasis> and <emphasis "
15031
"role=\"italic\">dev.example.com</emphasis>."
15032
msgstr ""
15033
15034
#: serverguide/C/network-config.xml:380(para)
15035
msgid ""
15036
"If you have multiple domains you wish to search, your configuration might "
15037
"look like the following."
15038
msgstr ""
15039
15040
#: serverguide/C/network-config.xml:383(programlisting)
15041
#, no-wrap
15042
msgid ""
15043
"\n"
15044
"search example.com sales.example.com dev.example.com\n"
15045
"nameserver 8.8.8.8\n"
15046
"nameserver 8.8.4.4\n"
15047
msgstr ""
15048
15049
#: serverguide/C/network-config.xml:388(para)
15050
msgid ""
15051
"If you try to ping a host with the name of <emphasis "
15052
"role=\"italic\">server1</emphasis>, your system will automatically query DNS "
15053
"for its Fully Qualified Domain Name (FQDN) in the following order:"
15054
msgstr ""
15055
15056
#: serverguide/C/network-config.xml:394(para)
15057
msgid "server1<emphasis role=\"bold\">.example.com</emphasis>"
15058
msgstr ""
15059
15060
#: serverguide/C/network-config.xml:399(para)
15061
msgid "server1<emphasis role=\"bold\">.sales.example.com</emphasis>"
15062
msgstr ""
15063
15064
#: serverguide/C/network-config.xml:404(para)
15065
msgid "server1<emphasis role=\"bold\">.dev.example.com</emphasis>"
15066
msgstr ""
15067
15068
#: serverguide/C/network-config.xml:409(para)
15069
msgid ""
15070
"If no matches are found, the DNS server will provide a result of <emphasis "
15071
"role=\"italic\">notfound</emphasis> and the DNS query will fail."
15072
msgstr ""
15073
15074
#: serverguide/C/network-config.xml:416(title)
15075
msgid "Static Hostnames"
15076
msgstr ""
15077
15078
#: serverguide/C/network-config.xml:417(para)
15079
msgid ""
15080
"Static hostnames are locally defined hostname-to-IP mappings located in the "
15081
"file <filename>/etc/hosts</filename>. Entries in the "
15082
"<filename>hosts</filename> file will have precedence over DNS by default. "
15083
"This means that if your system tries to resolve a hostname and it matches an "
15084
"entry in /etc/hosts, it will not attempt to look up the record in DNS. In "
15085
"some configurations, especially when Internet access is not required, "
15086
"servers that communicate with a limited number of resources can be "
15087
"conveniently set to use static hostnames instead of DNS."
15088
msgstr ""
15089
15090
#: serverguide/C/network-config.xml:424(para)
15091
msgid ""
15092
"The following is an example of a <filename>hosts</filename> file where a "
15093
"number of local servers have been identified by simple hostnames, aliases "
15094
"and their equivalent Fully Qualified Domain Names (FQDN's)."
15095
msgstr ""
15096
15097
#: serverguide/C/network-config.xml:428(programlisting)
15098
#, no-wrap
15099
msgid ""
15100
"\n"
15101
"127.0.0.1\tlocalhost\n"
15102
"127.0.1.1\tubuntu-server\n"
15103
"10.0.0.11\tserver1 vpn server1.example.com\n"
15104
"10.0.0.12\tserver2 mail server2.example.com\n"
15105
"10.0.0.13\tserver3 www server3.example.com\n"
15106
"10.0.0.14\tserver4 file server4.example.com\n"
15107
msgstr ""
15108
15109
#: serverguide/C/network-config.xml:437(para)
15110
msgid ""
15111
"In the above example, notice that each of the servers have been given "
15112
"aliases in addition to their proper names and FQDN's. <emphasis "
15113
"role=\"italic\">Server1</emphasis> has been mapped to the name <emphasis "
15114
"role=\"italic\">vpn</emphasis>, <emphasis role=\"italic\">server2</emphasis> "
15115
"is referred to as <emphasis role=\"italic\">mail</emphasis>, <emphasis "
15116
"role=\"italic\">server3</emphasis> as <emphasis "
15117
"role=\"italic\">www</emphasis>, and <emphasis "
15118
"role=\"italic\">server4</emphasis> as <emphasis "
15119
"role=\"italic\">file</emphasis>."
15120
msgstr ""
15121
15122
#: serverguide/C/network-config.xml:449(title)
15123
msgid "Name Service Switch Configuration"
15124
msgstr ""
15125
15126
#: serverguide/C/network-config.xml:450(para)
15127
msgid ""
15128
"The order in which your system selects a method of resolving hostnames to IP "
15129
"addresses is controlled by the Name Service Switch (NSS) configuration file "
15130
"<filename>/etc/nsswitch.conf</filename>. As mentioned in the previous "
15131
"section, typically static hostnames defined in the systems "
15132
"<filename>/etc/hosts</filename> file have precedence over names resolved "
15133
"from DNS. The following is an example of the line responsible for this order "
15134
"of hostname lookups in the file <filename>/etc/nsswitch.conf</filename>."
15135
msgstr ""
15136
15137
#: serverguide/C/network-config.xml:458(programlisting)
15138
#, no-wrap
15139
msgid ""
15140
"\n"
15141
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
15142
msgstr ""
15143
15144
#: serverguide/C/network-config.xml:464(para)
15145
msgid ""
15146
"<emphasis role=\"bold\">files</emphasis> first tries to resolve static "
15147
"hostnames located in <filename>/etc/hosts</filename>."
15148
msgstr ""
15149
15150
#: serverguide/C/network-config.xml:470(para)
15151
msgid ""
15152
"<emphasis role=\"bold\">mdns4_minimal</emphasis> attempts to resolve the "
15153
"name using Multicast DNS."
15154
msgstr ""
15155
15156
#: serverguide/C/network-config.xml:475(para)
15157
msgid ""
15158
"<emphasis role=\"bold\">[NOTFOUND=return]</emphasis> means that any response "
15159
"of <emphasis role=\"italic\">notfound</emphasis> by the preceding <emphasis "
15160
"role=\"italic\">mdns4_minimal</emphasis> process should be treated as "
15161
"authoritative and that the system should not try to continue hunting for an "
15162
"answer."
15163
msgstr ""
15164
15165
#: serverguide/C/network-config.xml:483(para)
15166
msgid ""
15167
"<emphasis role=\"bold\">dns</emphasis> represents a legacy unicast DNS query."
15168
msgstr ""
15169
15170
#: serverguide/C/network-config.xml:488(para)
15171
msgid ""
15172
"<emphasis role=\"bold\">mdns4</emphasis> represents a Multicast DNS query."
15173
msgstr ""
15174
15175
#: serverguide/C/network-config.xml:494(para)
15176
msgid ""
15177
"To modify the order of the above mentioned name resolution methods, you can "
15178
"simply change the <emphasis role=\"italic\">hosts:</emphasis> string to the "
15179
"value of your choosing. For example, if you prefer to use legacy Unicast DNS "
15180
"versus Multicast DNS, you can change the string in "
15181
"<filename>/etc/nsswitch.conf</filename> as shown below."
15182
msgstr ""
15183
15184
#: serverguide/C/network-config.xml:501(programlisting)
15185
#, no-wrap
15186
msgid ""
15187
"\n"
15188
"hosts: files dns [NOTFOUND=return] mdns4_minimal mdns4\n"
15189
msgstr ""
15190
15191
#: serverguide/C/network-config.xml:508(title)
15192
msgid "Bridging"
15193
msgstr "Bridging"
15194
15195
#: serverguide/C/network-config.xml:510(para)
15196
msgid ""
15197
"Bridging multiple interfaces is a more advanced configuration, but is very "
15198
"useful in multiple scenarios. One scenario is setting up a bridge with "
15199
"multiple network interfaces, then using a firewall to filter traffic between "
15200
"two network segments. Another scenario is using bridge on a system with one "
15201
"interface to allow virtual machines direct access to the outside network. "
15202
"The following example covers the latter scenario."
15203
msgstr ""
15204
"Bridging multiple interfaces is a more advanced configuration, but is very "
15205
"useful in multiple scenarios. One scenario is setting up a bridge with "
15206
"multiple network interfaces, then using a firewall to filter traffic between "
15207
"two network segments. Another scenario is using bridge on a system with one "
15208
"interface to allow virtual machines direct access to the outside network. "
15209
"The following example covers the latter scenario."
15210
15211
#: serverguide/C/network-config.xml:517(para)
15212
msgid ""
15213
"Before configuring a bridge you will need to install the <application>bridge-"
15214
"utils</application> package. To install the package, in a terminal enter:"
15215
msgstr ""
15216
"Before configuring a bridge you will need to install the <application>bridge-"
15217
"utils</application> package. To install the package, in a terminal enter:"
15218
15219
#: serverguide/C/network-config.xml:523(command)
15220
msgid "sudo apt-get install bridge-utils"
15221
msgstr "sudo apt-get install bridge-utils"
15222
15223
#: serverguide/C/network-config.xml:526(para)
15224
msgid ""
15225
"Next, configure the bridge by editing "
15226
"<filename>/etc/network/interfaces</filename>:"
15227
msgstr ""
15228
"Next, configure the bridge by editing "
15229
"<filename>/etc/network/interfaces</filename>:"
15230
15231
#: serverguide/C/network-config.xml:530(programlisting)
15232
#, no-wrap
15233
msgid ""
15234
"\n"
15235
"auto lo\n"
15236
"iface lo inet loopback\n"
15237
"\n"
15238
"auto br0\n"
15239
"iface br0 inet static\n"
15240
" address 192.168.0.10\n"
15241
" network 192.168.0.0\n"
15242
" netmask 255.255.255.0\n"
15243
" broadcast 192.168.0.255\n"
15244
" gateway 192.168.0.1\n"
15245
" bridge_ports eth0\n"
15246
" bridge_fd 9\n"
15247
" bridge_hello 2\n"
15248
" bridge_maxage 12\n"
15249
" bridge_stp off\n"
15250
msgstr ""
15251
"\n"
15252
"auto lo\n"
15253
"iface lo inet loopback\n"
15254
"\n"
15255
"auto br0\n"
15256
"iface br0 inet static\n"
15257
" address 192.168.0.10\n"
15258
" network 192.168.0.0\n"
15259
" netmask 255.255.255.0\n"
15260
" broadcast 192.168.0.255\n"
15261
" gateway 192.168.0.1\n"
15262
" bridge_ports eth0\n"
15263
" bridge_fd 9\n"
15264
" bridge_hello 2\n"
15265
" bridge_maxage 12\n"
15266
" bridge_stp off\n"
15267
15268
#: serverguide/C/network-config.xml:549(para)
15269
msgid "Enter the appropriate values for your physical interface and network."
15270
msgstr ""
15271
"Enter the appropriate values for your physical interface and network."
15272
15273
#: serverguide/C/network-config.xml:554(para)
15274
msgid "Now restart networking to enable the bridge interface:"
15275
msgstr "Now restart networking to enable the bridge interface:"
15276
15277
#: serverguide/C/network-config.xml:561(para)
15278
msgid ""
15279
"The new bridge interface should now be up and running. The "
15280
"<application>brctl</application> provides useful information about the state "
15281
"of the bridge, controls which interfaces are part of the bridge, etc. See "
15282
"<command>man brctl</command> for more information."
15283
msgstr ""
15284
"The new bridge interface should now be up and running. The "
15285
"<application>brctl</application> provides useful information about the state "
15286
"of the bridge, controls which interfaces are part of the bridge, etc. See "
15287
"<command>man brctl</command> for more information."
15288
15289
#: serverguide/C/network-config.xml:577(para)
15290
msgid ""
15291
"The <ulink url=\"https://help.ubuntu.com/community/Network\">Ubuntu Wiki "
15292
"Network page</ulink> has links to articles covering more advanced network "
15293
"configuration."
15294
msgstr ""
15295
15296
#: serverguide/C/network-config.xml:583(para)
15297
msgid ""
15298
"The <ulink "
15299
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man5/interfaces.5.html"
15300
"\">interfaces man page</ulink> has details on more options for "
15301
"<filename>/etc/network/interfaces</filename>."
15302
msgstr ""
15303
15304
#: serverguide/C/network-config.xml:589(para)
15305
msgid ""
15306
"The <ulink "
15307
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man8/dhclient.8.html\">"
15308
"dhclient man page</ulink> has details on more options for configuring DHCP "
15309
"client settings."
15310
msgstr ""
15311
15312
#: serverguide/C/network-config.xml:595(para)
15313
msgid ""
15314
"For more information on DNS client configuration see the <ulink "
15315
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man5/resolver.5.html\">"
15316
"resolver man page</ulink>. Also, Chapter 6 of O'Reilly's <ulink "
15317
"url=\"http://oreilly.com/catalog/linag2/book/ch06.html\">Linux Network "
15318
"Administrator's Guide</ulink> is a good source of resolver and name service "
15319
"configuration information."
15320
msgstr ""
15321
15322
#: serverguide/C/network-config.xml:603(para)
15323
msgid ""
15324
"For more information on <emphasis>bridging</emphasis> see the <ulink "
15325
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man8/brctl.8.html\">brc"
15326
"tl man page</ulink> and the Linux Foundation's <ulink "
15327
"url=\"http://www.linuxfoundation.org/en/Net:Bridge\">Net:Bridge</ulink> page."
15328
msgstr ""
15329
15330
#: serverguide/C/network-config.xml:614(title)
15331
msgid "TCP/IP"
15332
msgstr "TCP/IP"
15333
15334
#: serverguide/C/network-config.xml:615(para)
15335
msgid ""
15336
"The Transmission Control Protocol and Internet Protocol (TCP/IP) is a "
15337
"standard set of protocols developed in the late 1970s by the Defense "
15338
"Advanced Research Projects Agency (DARPA) as a means of communication "
15339
"between different types of computers and computer networks. TCP/IP is the "
15340
"driving force of the Internet, and thus it is the most popular set of "
15341
"network protocols on Earth."
15342
msgstr ""
15343
"The Transmission Control Protocol and Internet Protocol (TCP/IP) is a "
15344
"standard set of protocols developed in the late 1970s by the Defense "
15345
"Advanced Research Projects Agency (DARPA) as a means of communication "
15346
"between different types of computers and computer networks. TCP/IP is the "
15347
"driving force of the Internet, and thus it is the most popular set of "
15348
"network protocols on Earth."
15349
15350
#: serverguide/C/network-config.xml:623(title)
15351
msgid "TCP/IP Introduction"
15352
msgstr "TCP/IP Introduction"
15353
15354
#: serverguide/C/network-config.xml:624(para)
15355
msgid ""
15356
"The two protocol components of TCP/IP deal with different aspects of "
15357
"computer networking. <emphasis>Internet Protocol</emphasis>, the \"IP\" of "
15358
"TCP/IP is a connectionless protocol which deals only with network packet "
15359
"routing using the <emphasis role=\"italics\">IP Datagram</emphasis> as the "
15360
"basic unit of networking information. The IP Datagram consists of a header "
15361
"followed by a message. The <emphasis> Transmission Control "
15362
"Protocol</emphasis> is the \"TCP\" of TCP/IP and enables network hosts to "
15363
"establish connections which may be used to exchange data streams. TCP also "
15364
"guarantees that the data between connections is delivered and that it "
15365
"arrives at one network host in the same order as sent from another network "
15366
"host."
15367
msgstr ""
15368
"The two protocol components of TCP/IP deal with different aspects of "
15369
"computer networking. <emphasis>Internet Protocol</emphasis>, the \"IP\" of "
15370
"TCP/IP is a connectionless protocol which deals only with network packet "
15371
"routing using the <emphasis role=\"italics\">IP Datagram</emphasis> as the "
15372
"basic unit of networking information. The IP Datagram consists of a header "
15373
"followed by a message. The <emphasis> Transmission Control "
15374
"Protocol</emphasis> is the \"TCP\" of TCP/IP and enables network hosts to "
15375
"establish connections which may be used to exchange data streams. TCP also "
15376
"guarantees that the data between connections is delivered and that it "
15377
"arrives at one network host in the same order as sent from another network "
15378
"host."
15379
15380
#: serverguide/C/network-config.xml:637(title)
15381
msgid "TCP/IP Configuration"
15382
msgstr "TCP/IP Configuration"
15383
15384
#: serverguide/C/network-config.xml:638(para)
15385
msgid ""
15386
"The TCP/IP protocol configuration consists of several elements which must be "
15387
"set by editing the appropriate configuration files, or deploying solutions "
15388
"such as the Dynamic Host Configuration Protocol (DHCP) server which in turn, "
15389
"can be configured to provide the proper TCP/IP configuration settings to "
15390
"network clients automatically. These configuration values must be set "
15391
"correctly in order to facilitate the proper network operation of your Ubuntu "
15392
"system."
15393
msgstr ""
15394
"The TCP/IP protocol configuration consists of several elements which must be "
15395
"set by editing the appropriate configuration files, or deploying solutions "
15396
"such as the Dynamic Host Configuration Protocol (DHCP) server which in turn, "
15397
"can be configured to provide the proper TCP/IP configuration settings to "
15398
"network clients automatically. These configuration values must be set "
15399
"correctly in order to facilitate the proper network operation of your Ubuntu "
15400
"system."
15401
15402
#: serverguide/C/network-config.xml:650(para)
15403
msgid ""
15404
"<emphasis role=\"bold\">IP address</emphasis> The IP address is a unique "
15405
"identifying string expressed as four decimal numbers ranging from zero (0) "
15406
"to two-hundred and fifty-five (255), separated by periods, with each of the "
15407
"four numbers representing eight (8) bits of the address for a total length "
15408
"of thirty-two (32) bits for the whole address. This format is called "
15409
"<emphasis>dotted quad notation</emphasis>."
15410
msgstr ""
15411
"<emphasis role=\"bold\">IP address</emphasis> The IP address is a unique "
15412
"identifying string expressed as four decimal numbers ranging from zero (0) "
15413
"to two-hundred and fifty-five (255), separated by full stops, with each of "
15414
"the four numbers representing eight (8) bits of the address for a total "
15415
"length of thirty-two (32) bits for the whole address. This format is called "
15416
"<emphasis>dotted quad notation</emphasis>."
15417
15418
#: serverguide/C/network-config.xml:660(para)
15419
msgid ""
15420
"<emphasis role=\"bold\">Netmask</emphasis> The Subnet Mask (or simply, "
15421
"<emphasis>netmask</emphasis>) is a local bit mask, or set of flags which "
15422
"separate the portions of an IP address significant to the network from the "
15423
"bits significant to the <emphasis>subnetwork</emphasis>. For example, in a "
15424
"Class C network, the standard netmask is 255.255.255.0 which masks the first "
15425
"three bytes of the IP address and allows the last byte of the IP address to "
15426
"remain available for specifying hosts on the subnetwork."
15427
msgstr ""
15428
"<emphasis role=\"bold\">Netmask</emphasis> The Subnet Mask (or simply, "
15429
"<emphasis>netmask</emphasis>) is a local bit mask, or set of flags which "
15430
"separate the portions of an IP address significant to the network from the "
15431
"bits significant to the <emphasis>subnetwork</emphasis>. For example, in a "
15432
"Class C network, the standard netmask is 255.255.255.0 which masks the first "
15433
"three bytes of the IP address and allows the last byte of the IP address to "
15434
"remain available for specifying hosts on the subnetwork."
15435
15436
#: serverguide/C/network-config.xml:671(para)
15437
msgid ""
15438
"<emphasis role=\"bold\">Network Address</emphasis> The Network Address "
15439
"represents the bytes comprising the network portion of an IP address. For "
15440
"example, the host 12.128.1.2 in a Class A network would use 12.0.0.0 as the "
15441
"network address, where twelve (12) represents the first byte of the IP "
15442
"address, (the network part) and zeroes (0) in all of the remaining three "
15443
"bytes to represent the potential host values. A network host using the "
15444
"private IP address 192.168.1.100 would in turn use a Network Address of "
15445
"192.168.1.0, which specifies the first three bytes of the Class C 192.168.1 "
15446
"network and a zero (0) for all the possible hosts on the network."
15447
msgstr ""
15448
"<emphasis role=\"bold\">Network Address</emphasis> The Network Address "
15449
"represents the bytes comprising the network portion of an IP address. For "
15450
"example, the host 12.128.1.2 in a Class A network would use 12.0.0.0 as the "
15451
"network address, where twelve (12) represents the first byte of the IP "
15452
"address, (the network part) and zeroes (0) in all of the remaining three "
15453
"bytes to represent the potential host values. A network host using the "
15454
"private IP address 192.168.1.100 would in turn use a Network Address of "
15455
"192.168.1.0, which specifies the first three bytes of the Class C 192.168.1 "
15456
"network and a zero (0) for all the possible hosts on the network."
15457
15458
#: serverguide/C/network-config.xml:684(para)
15459
msgid ""
15460
"<emphasis role=\"bold\">Broadcast Address</emphasis> The Broadcast Address "
15461
"is an IP address which allows network data to be sent simultaneously to all "
15462
"hosts on a given subnetwork rather than specifying a particular host. The "
15463
"standard general broadcast address for IP networks is 255.255.255.255, but "
15464
"this broadcast address cannot be used to send a broadcast message to every "
15465
"host on the Internet because routers block it. A more appropriate broadcast "
15466
"address is set to match a specific subnetwork. For example, on the private "
15467
"Class C IP network, 192.168.1.0, the broadcast address is 192.168.1.255. "
15468
"Broadcast messages are typically produced by network protocols such as the "
15469
"Address Resolution Protocol (ARP) and the Routing Information Protocol (RIP)."
15470
msgstr ""
15471
"<emphasis role=\"bold\">Broadcast Address</emphasis> The Broadcast Address "
15472
"is an IP address which allows network data to be sent simultaneously to all "
15473
"hosts on a given subnetwork rather than specifying a particular host. The "
15474
"standard general broadcast address for IP networks is 255.255.255.255, but "
15475
"this broadcast address cannot be used to send a broadcast message to every "
15476
"host on the Internet because routers block it. A more appropriate broadcast "
15477
"address is set to match a specific subnetwork. For example, on the private "
15478
"Class C IP network, 192.168.1.0, the broadcast address is 192.168.1.255. "
15479
"Broadcast messages are typically produced by network protocols such as the "
15480
"Address Resolution Protocol (ARP) and the Routing Information Protocol (RIP)."
15481
15482
#: serverguide/C/network-config.xml:697(para)
15483
msgid ""
15484
"<emphasis role=\"bold\">Gateway Address</emphasis> A Gateway Address is the "
15485
"IP address through which a particular network, or host on a network, may be "
15486
"reached. If one network host wishes to communicate with another network "
15487
"host, and that host is not located on the same network, then a "
15488
"<emphasis>gateway</emphasis> must be used. In many cases, the Gateway "
15489
"Address will be that of a router on the same network, which will in turn "
15490
"pass traffic on to other networks or hosts, such as Internet hosts. The "
15491
"value of the Gateway Address setting must be correct, or your system will "
15492
"not be able to reach any hosts beyond those on the same network."
15493
msgstr ""
15494
"<emphasis role=\"bold\">Gateway Address</emphasis> A Gateway Address is the "
15495
"IP address through which a particular network, or host on a network, may be "
15496
"reached. If one network host wishes to communicate with another network "
15497
"host, and that host is not located on the same network, then a "
15498
"<emphasis>gateway</emphasis> must be used. In many cases, the Gateway "
15499
"Address will be that of a router on the same network, which will in turn "
15500
"pass traffic on to other networks or hosts, such as Internet hosts. The "
15501
"value of the Gateway Address setting must be correct, or your system will "
15502
"not be able to reach any hosts beyond those on the same network."
15503
15504
#: serverguide/C/network-config.xml:708(para)
15505
msgid ""
15506
"<emphasis role=\"bold\">Nameserver Address</emphasis> Nameserver Addresses "
15507
"represent the IP addresses of Domain Name Service (DNS) systems, which "
15508
"resolve network hostnames into IP addresses. There are three levels of "
15509
"Nameserver Addresses, which may be specified in order of precedence: The "
15510
"<emphasis>Primary</emphasis> Nameserver, the <emphasis>Secondary</emphasis> "
15511
"Nameserver, and the <emphasis>Tertiary</emphasis> Nameserver. In order for "
15512
"your system to be able to resolve network hostnames into their corresponding "
15513
"IP addresses, you must specify valid Nameserver Addresses which you are "
15514
"authorized to use in your system's TCP/IP configuration. In many cases these "
15515
"addresses can and will be provided by your network service provider, but "
15516
"many free and publicly accessible nameservers are available for use, such as "
15517
"the Level3 (Verizon) servers with IP addresses from 4.2.2.1 to 4.2.2.6."
15518
msgstr ""
15519
"<emphasis role=\"bold\">Nameserver Address</emphasis> Nameserver Addresses "
15520
"represent the IP addresses of Domain Name Service (DNS) systems, which "
15521
"resolve network hostnames into IP addresses. There are three levels of "
15522
"Nameserver Addresses, which may be specified in order of precedence: The "
15523
"<emphasis>Primary</emphasis> Nameserver, the <emphasis>Secondary</emphasis> "
15524
"Nameserver, and the <emphasis>Tertiary</emphasis> Nameserver. In order for "
15525
"your system to be able to resolve network hostnames into their corresponding "
15526
"IP addresses, you must specify valid Nameserver Addresses which you are "
15527
"authorised to use in your system's TCP/IP configuration. In many cases these "
15528
"addresses can and will be provided by your network service provider, but "
15529
"many free and publicly accessible nameservers are available for use, such as "
15530
"the Level3 (Verizon) servers with IP addresses from 4.2.2.1 to 4.2.2.6."
15531
15532
#: serverguide/C/network-config.xml:722(para)
15533
msgid ""
15534
"The IP address, Netmask, Network Address, Broadcast Address, and Gateway "
15535
"Address are typically specified via the appropriate directives in the file "
15536
"<filename>/etc/network/interfaces</filename>. The Nameserver Addresses are "
15537
"typically specified via <emphasis>nameserver</emphasis> directives in the "
15538
"file <filename>/etc/resolv.conf</filename>. For more information, view the "
15539
"system manual page for <filename>interfaces</filename> or "
15540
"<filename>resolv.conf</filename> respectively, with the following commands "
15541
"typed at a terminal prompt:"
15542
msgstr ""
15543
"The IP address, Netmask, Network Address, Broadcast Address, and Gateway "
15544
"Address are typically specified via the appropriate directives in the file "
15545
"<filename>/etc/network/interfaces</filename>. The Nameserver Addresses are "
15546
"typically specified via <emphasis>nameserver</emphasis> directives in the "
15547
"file <filename>/etc/resolv.conf</filename>. For more information, view the "
15548
"system manual page for <filename>interfaces</filename> or "
15549
"<filename>resolv.conf</filename> respectively, with the following commands "
15550
"typed at a terminal prompt:"
15551
15552
#: serverguide/C/network-config.xml:729(para)
15553
msgid ""
15554
"Access the system manual page for <filename>interfaces</filename> with the "
15555
"following command:"
15556
msgstr ""
15557
"Access the system manual page for <filename>interfaces</filename> with the "
15558
"following command:"
15559
15560
#: serverguide/C/network-config.xml:734(command)
15561
msgid "man interfaces"
15562
msgstr "man interfaces"
15563
15564
#: serverguide/C/network-config.xml:737(para)
15565
msgid ""
15566
"Access the system manual page for <filename>resolv.conf</filename> with the "
15567
"following command:"
15568
msgstr ""
15569
"Access the system manual page for <filename>resolv.conf</filename> with the "
15570
"following command:"
15571
15572
#: serverguide/C/network-config.xml:741(command)
15573
msgid "man resolv.conf"
15574
msgstr "man resolv.conf"
15575
15576
#: serverguide/C/network-config.xml:646(para)
15577
msgid ""
15578
"The common configuration elements of TCP/IP and their purposes are as "
15579
"follows: <placeholder-1/>"
15580
msgstr ""
15581
"The common configuration elements of TCP/IP and their purposes are as "
15582
"follows: <placeholder-1/>"
15583
15584
#: serverguide/C/network-config.xml:748(title)
15585
msgid "IP Routing"
15586
msgstr "IP Routeing"
15587
15588
#: serverguide/C/network-config.xml:749(para)
15589
msgid ""
15590
"IP routing is a means of specifying and discovering paths in a TCP/IP "
15591
"network along which network data may be sent. Routing uses a set of "
15592
"<emphasis>routing tables</emphasis> to direct the forwarding of network data "
15593
"packets from their source to the destination, often via many intermediary "
15594
"network nodes known as <emphasis>routers</emphasis>. There are two primary "
15595
"forms of IP routing: <emphasis>Static Routing</emphasis> and "
15596
"<emphasis>Dynamic Routing.</emphasis>"
15597
msgstr ""
15598
"IP routing is a means of specifying and discovering paths in a TCP/IP "
15599
"network along which network data may be sent. Routing uses a set of "
15600
"<emphasis>routing tables</emphasis> to direct the forwarding of network data "
15601
"packets from their source to the destination, often via many intermediary "
15602
"network nodes known as <emphasis>routers</emphasis>. There are two primary "
15603
"forms of IP routing: <emphasis>Static Routing</emphasis> and "
15604
"<emphasis>Dynamic Routing.</emphasis>"
15605
15606
#: serverguide/C/network-config.xml:758(para)
15607
msgid ""
15608
"Static routing involves manually adding IP routes to the system's routing "
15609
"table, and this is usually done by manipulating the routing table with the "
15610
"<application>route</application> command. Static routing enjoys many "
15611
"advantages over dynamic routing, such as simplicity of implementation on "
15612
"smaller networks, predictability (the routing table is always computed in "
15613
"advance, and thus the route is precisely the same each time it is used), and "
15614
"low overhead on other routers and network links due to the lack of a dynamic "
15615
"routing protocol. However, static routing does present some disadvantages as "
15616
"well. For example, static routing is limited to small networks and does not "
15617
"scale well. Static routing also fails completely to adapt to network outages "
15618
"and failures along the route due to the fixed nature of the route."
15619
msgstr ""
15620
"Static routeing involves manually adding IP routes to the system's routeing "
15621
"table, and this is usually done by manipulating the routeing table with the "
15622
"<application>route</application> command. Static routeing enjoys many "
15623
"advantages over dynamic routeing, such as simplicity of implementation on "
15624
"smaller networks, predictability (the routeing table is always computed in "
15625
"advance, and thus the route is precisely the same each time it is used), and "
15626
"low overhead on other routers and network links due to the lack of a dynamic "
15627
"routing protocol. However, static routeing does present some disadvantages "
15628
"as well. For example, static routeing is limited to small networks and does "
15629
"not scale well. Static routeing also fails completely to adapt to network "
15630
"outages and failures along the route due to the fixed nature of the route."
15631
15632
#: serverguide/C/network-config.xml:768(para)
15633
msgid ""
15634
"Dynamic routing depends on large networks with multiple possible IP routes "
15635
"from a source to a destination and makes use of special routing protocols, "
15636
"such as the Router Information Protocol (RIP), which handle the automatic "
15637
"adjustments in routing tables that make dynamic routing possible. Dynamic "
15638
"routing has several advantages over static routing, such as superior "
15639
"scalability and the ability to adapt to failures and outages along network "
15640
"routes. Additionally, there is less manual configuration of the routing "
15641
"tables, since routers learn from one another about their existence and "
15642
"available routes. This trait also eliminates the possibility of introducing "
15643
"mistakes in the routing tables via human error. Dynamic routing is not "
15644
"perfect, however, and presents disadvantages such as heightened complexity "
15645
"and additional network overhead from router communications, which does not "
15646
"immediately benefit the end users, but still consumes network bandwidth."
15647
msgstr ""
15648
"Dynamic routing depends on large networks with multiple possible IP routes "
15649
"from a source to a destination and makes use of special routing protocols, "
15650
"such as the Router Information Protocol (RIP), which handle the automatic "
15651
"adjustments in routing tables that make dynamic routing possible. Dynamic "
15652
"routing has several advantages over static routing, such as superior "
15653
"scalability and the ability to adapt to failures and outages along network "
15654
"routes. Additionally, there is less manual configuration of the routing "
15655
"tables, since routers learn from one another about their existence and "
15656
"available routes. This trait also eliminates the possibility of introducing "
15657
"mistakes in the routing tables via human error. Dynamic routing is not "
15658
"perfect, however, and presents disadvantages such as heightened complexity "
15659
"and additional network overhead from router communications, which does not "
15660
"immediately benefit the end users, but still consumes network bandwidth."
15661
15662
#: serverguide/C/network-config.xml:782(title)
15663
msgid "TCP and UDP"
15664
msgstr "TCP and UDP"
15665
15666
#: serverguide/C/network-config.xml:783(para)
15667
msgid ""
15668
"TCP is a connection-based protocol, offering error correction and guaranteed "
15669
"delivery of data via what is known as <emphasis>flow control</emphasis>. "
15670
"Flow control determines when the flow of a data stream needs to be stopped, "
15671
"and previously sent data packets should to be re-sent due to problems such "
15672
"as <emphasis>collisions</emphasis>, for example, thus ensuring complete and "
15673
"accurate delivery of the data. TCP is typically used in the exchange of "
15674
"important information such as database transactions."
15675
msgstr ""
15676
"TCP is a connection-based protocol, offering error correction and guaranteed "
15677
"delivery of data via what is known as <emphasis>flow control</emphasis>. "
15678
"Flow control determines when the flow of a data stream needs to be stopped, "
15679
"and previously sent data packets should to be re-sent due to problems such "
15680
"as <emphasis>collisions</emphasis>, for example, thus ensuring complete and "
15681
"accurate delivery of the data. TCP is typically used in the exchange of "
15682
"important information such as database transactions."
15683
15684
#: serverguide/C/network-config.xml:791(para)
15685
msgid ""
15686
"The User Datagram Protocol (UDP), on the other hand, is a "
15687
"<emphasis>connectionless</emphasis> protocol which seldom deals with the "
15688
"transmission of important data because it lacks flow control or any other "
15689
"method to ensure reliable delivery of the data. UDP is commonly used in such "
15690
"applications as audio and video streaming, where it is considerably faster "
15691
"than TCP due to the lack of error correction and flow control, and where the "
15692
"loss of a few packets is not generally catastrophic."
15693
msgstr ""
15694
"The User Datagram Protocol (UDP), on the other hand, is a "
15695
"<emphasis>connectionless</emphasis> protocol which seldom deals with the "
15696
"transmission of important data because it lacks flow control or any other "
15697
"method to ensure reliable delivery of the data. UDP is commonly used in such "
15698
"applications as audio and video streaming, where it is considerably faster "
15699
"than TCP due to the lack of error correction and flow control, and where the "
15700
"loss of a few packets is not generally catastrophic."
15701
15702
#: serverguide/C/network-config.xml:801(title)
15703
msgid "ICMP"
15704
msgstr "ICMP"
15705
15706
#: serverguide/C/network-config.xml:802(para)
15707
msgid ""
15708
"The Internet Control Messaging Protocol (ICMP) is an extension to the "
15709
"Internet Protocol (IP) as defined in the Request For Comments (RFC) #792 and "
15710
"supports network packets containing control, error, and informational "
15711
"messages. ICMP is used by such network applications as the "
15712
"<application>ping</application> utility, which can determine the "
15713
"availability of a network host or device. Examples of some error messages "
15714
"returned by ICMP which are useful to both network hosts and devices such as "
15715
"routers, include <emphasis>Destination Unreachable</emphasis> and "
15716
"<emphasis>Time Exceeded</emphasis>."
15717
msgstr ""
15718
"The Internet Control Messaging Protocol (ICMP) is an extension to the "
15719
"Internet Protocol (IP) as defined in the Request For Comments (RFC) #792 and "
15720
"supports network packets containing control, error, and informational "
15721
"messages. ICMP is used by such network applications as the "
15722
"<application>ping</application> utility, which can determine the "
15723
"availability of a network host or device. Examples of some error messages "
15724
"returned by ICMP which are useful to both network hosts and devices such as "
15725
"routers, include <emphasis>Destination Unreachable</emphasis> and "
15726
"<emphasis>Time Exceeded</emphasis>."
15727
15728
#: serverguide/C/network-config.xml:812(title)
15729
msgid "Daemons"
15730
msgstr "Daemons"
15731
15732
#: serverguide/C/network-config.xml:813(para)
15733
msgid ""
15734
"Daemons are special system applications which typically execute continuously "
15735
"in the background and await requests for the functions they provide from "
15736
"other applications. Many daemons are network-centric; that is, a large "
15737
"number of daemons executing in the background on an Ubuntu system may "
15738
"provide network-related functionality. Some examples of such network daemons "
15739
"include the <emphasis>Hyper Text Transport Protocol Daemon</emphasis> "
15740
"(httpd), which provides web server functionality; the <emphasis>Secure SHell "
15741
"Daemon</emphasis> (sshd), which provides secure remote login shell and file "
15742
"transfer capabilities; and the <emphasis>Internet Message Access Protocol "
15743
"Daemon</emphasis> (imapd), which provides E-Mail services."
15744
msgstr ""
15745
"Daemons are special system applications which typically execute continuously "
15746
"in the background and await requests for the functions they provide from "
15747
"other applications. Many daemons are network-centric; that is, a large "
15748
"number of daemons executing in the background on an Ubuntu system may "
15749
"provide network-related functionality. Some examples of such network daemons "
15750
"include the <emphasis>Hyper Text Transport Protocol Daemon</emphasis> "
15751
"(httpd), which provides Web server functionality; the <emphasis>Secure SHell "
15752
"Daemon</emphasis> (sshd), which provides secure remote login shell and file "
15753
"transfer capabilities; and the <emphasis>Internet Message Access Protocol "
15754
"Daemon</emphasis> (imapd), which provides E-Mail services."
15755
15756
#: serverguide/C/network-config.xml:828(para)
15757
msgid ""
15758
"There are man pages for <ulink "
15759
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man7/tcp.7.html\">TCP</"
15760
"ulink> and <ulink "
15761
"url=\"http://manpages.ubuntu.com/manpages/maverick/man7/ip.7.html\">IP</ulink"
15762
"> that contain more useful information."
15763
msgstr ""
15764
15765
#: serverguide/C/network-config.xml:834(para)
15766
msgid ""
15767
"Also, see the <ulink "
15768
"url=\"http://www.redbooks.ibm.com/abstracts/gg243376.html\">TCP/IP Tutorial "
15769
"and Technical Overview</ulink> IBM Redbook."
15770
msgstr ""
15771
"Also, see the <ulink "
15772
"url=\"http://www.redbooks.ibm.com/abstracts/gg243376.html\">TCP/IP Tutorial "
15773
"and Technical Overview</ulink> IBM Redbook."
15774
15775
#: serverguide/C/network-config.xml:840(para)
15776
msgid ""
15777
"Another resource is O'Reilly's <ulink "
15778
"url=\"http://oreilly.com/catalog/9780596002978/\">TCP/IP Network "
15779
"Administration</ulink>."
15780
msgstr ""
15781
"Another resource is O'Reilly's <ulink "
15782
"url=\"http://oreilly.com/catalog/9780596002978/\">TCP/IP Network "
15783
"Administration</ulink>."
15784
15785
#: serverguide/C/network-config.xml:849(title)
15786
msgid "Dynamic Host Configuration Protocol (DHCP)"
15787
msgstr "Dynamic Host Configuration Protocol (DHCP)"
15788
15789
#: serverguide/C/network-config.xml:850(para)
15790
msgid ""
15791
"The Dynamic Host Configuration Protocol (DHCP) is a network service that "
15792
"enables host computers to be automatically assigned settings from a server "
15793
"as opposed to manually configuring each network host. Computers configured "
15794
"to be DHCP clients have no control over the settings they receive from the "
15795
"DHCP server, and the configuration is transparent to the computer's user."
15796
msgstr ""
15797
"The Dynamic Host Configuration Protocol (DHCP) is a network service that "
15798
"enables host computers to be automatically assigned settings from a server "
15799
"as opposed to manually configuring each network host. Computers configured "
15800
"to be DHCP clients have no control over the settings they receive from the "
15801
"DHCP server, and the configuration is transparent to the computer's user."
15802
15803
#: serverguide/C/network-config.xml:857(para)
15804
msgid ""
15805
"The most common settings provided by a DHCP server to DHCP clients include:"
15806
msgstr ""
15807
"The most common settings provided by a DHCP server to DHCP clients include:"
15808
15809
#: serverguide/C/network-config.xml:862(para)
15810
msgid "IP-Address and Netmask"
15811
msgstr "IP-Address and Netmask"
15812
15813
#: serverguide/C/network-config.xml:865(para)
15814
msgid "DNS"
15815
msgstr "DNS"
15816
15817
#: serverguide/C/network-config.xml:868(para)
15818
msgid "WINS"
15819
msgstr "WINS"
15820
15821
#: serverguide/C/network-config.xml:871(para)
15822
msgid ""
15823
"However, a DHCP server can also supply configuration properties such as:"
15824
msgstr ""
15825
"However, a DHCP server can also supply configuration properties such as:"
15826
15827
#: serverguide/C/network-config.xml:876(para)
15828
msgid "Host Name"
15829
msgstr "Host Name"
15830
15831
#: serverguide/C/network-config.xml:879(para)
15832
msgid "Domain Name"
15833
msgstr "Domain Name"
15834
15835
#: serverguide/C/network-config.xml:882(para)
15836
msgid "Default Gateway"
15837
msgstr "Default Gateway"
15838
15839
#: serverguide/C/network-config.xml:885(para)
15840
msgid "Time Server"
15841
msgstr "Time Server"
15842
15843
#: serverguide/C/network-config.xml:888(para)
15844
msgid "Print Server"
15845
msgstr "Print Server"
15846
15847
#: serverguide/C/network-config.xml:891(para)
15848
msgid ""
15849
"The advantage of using DHCP is that changes to the network, for example a "
15850
"change in the address of the DNS server, need only be changed at the DHCP "
15851
"server, and all network hosts will be reconfigured the next time their DHCP "
15852
"clients poll the DHCP server. As an added advantage, it is also easier to "
15853
"integrate new computers into the network, as there is no need to check for "
15854
"the availability of an IP address. Conflicts in IP address allocation are "
15855
"also reduced."
15856
msgstr ""
15857
"The advantage of using DHCP is that changes to the network, for example a "
15858
"change in the address of the DNS server, need only be changed at the DHCP "
15859
"server, and all network hosts will be reconfigured the next time their DHCP "
15860
"clients poll the DHCP server. As an added advantage, it is also easier to "
15861
"integrate new computers into the network, as there is no need to check for "
15862
"the availability of an IP address. Conflicts in IP address allocation are "
15863
"also reduced."
15864
15865
#: serverguide/C/network-config.xml:899(para)
15866
msgid "A DHCP server can provide configuration settings using two methods:"
15867
msgstr "A DHCP server can provide configuration settings using two methods:"
15868
15869
#: serverguide/C/network-config.xml:904(term)
15870
msgid "MAC Address"
15871
msgstr "MAC Address"
15872
15873
#: serverguide/C/network-config.xml:906(para)
15874
msgid ""
15875
"This method entails using DHCP to identify the unique hardware address of "
15876
"each network card connected to the network and then continually supplying a "
15877
"constant configuration each time the DHCP client makes a request to the DHCP "
15878
"server using that network device."
15879
msgstr ""
15880
"This method entails using DHCP to identify the unique hardware address of "
15881
"each network card connected to the network and then continually supplying a "
15882
"constant configuration each time the DHCP client makes a request to the DHCP "
15883
"server using that network device."
15884
15885
#: serverguide/C/network-config.xml:915(term)
15886
msgid "Address Pool"
15887
msgstr "Address Pool"
15888
15889
#: serverguide/C/network-config.xml:917(para)
15890
msgid ""
15891
"This method entails defining a pool (sometimes also called a range or scope) "
15892
"of IP addresses from which DHCP clients are supplied their configuration "
15893
"properties dynamically and on a \"first come, first served\" basis. When a "
15894
"DHCP client is no longer on the network for a specified period, the "
15895
"configuration is expired and released back to the address pool for use by "
15896
"other DHCP Clients."
15897
msgstr ""
15898
"This method entails defining a pool (sometimes also called a range or scope) "
15899
"of IP addresses from which DHCP clients are supplied their configuration "
15900
"properties dynamically and on a \"first come, first served\" basis. When a "
15901
"DHCP client is no longer on the network for a specified period, the "
15902
"configuration is expired and released back to the address pool for use by "
15903
"other DHCP Clients."
15904
15905
#: serverguide/C/network-config.xml:928(para)
15906
msgid ""
15907
"Ubuntu is shipped with both DHCP server and client. The server is "
15908
"<application>dhcpd</application> (dynamic host configuration protocol "
15909
"daemon). The client provided with Ubuntu is "
15910
"<application>dhclient</application> and should be installed on all computers "
15911
"required to be automatically configured. Both programs are easy to install "
15912
"and configure and will be automatically started at system boot."
15913
msgstr ""
15914
"Ubuntu is shipped with both DHCP server and client. The server is "
15915
"<application>dhcpd</application> (dynamic host configuration protocol "
15916
"daemon). The client provided with Ubuntu is "
15917
"<application>dhclient</application> and should be installed on all computers "
15918
"required to be automatically configured. Both programs are easy to install "
15919
"and configure and will be automatically started at system boot."
15920
15921
#: serverguide/C/network-config.xml:938(para)
15922
msgid ""
15923
"At a terminal prompt, enter the following command to install "
15924
"<application>dhcpd</application>:"
15925
msgstr ""
15926
"At a terminal prompt, enter the following command to install "
15927
"<application>dhcpd</application>:"
15928
15929
#: serverguide/C/network-config.xml:943(command)
15930
msgid "sudo apt-get install dhcp3-server"
15931
msgstr "sudo apt-get install dhcp3-server"
15932
15933
#: serverguide/C/network-config.xml:945(para)
15934
msgid ""
15935
"You will probably need to change the default configuration by editing "
15936
"/etc/dhcp3/dhcpd.conf to suit your needs and particular configuration."
15937
msgstr ""
15938
"You will probably need to change the default configuration by editing "
15939
"/etc/dhcp3/dhcpd.conf to suit your needs and particular configuration."
15940
15941
#: serverguide/C/network-config.xml:949(para)
15942
msgid ""
15943
"You also need to edit /etc/default/dhcp3-server to specify the interfaces "
15944
"dhcpd should listen to. By default it listens to eth0."
15945
msgstr ""
15946
"You also need to edit /etc/default/dhcp3-server to specify the interfaces "
15947
"dhcpd should listen to. By default it listens to eth0."
15948
15949
#: serverguide/C/network-config.xml:953(para)
15950
msgid ""
15951
"NOTE: dhcpd's messages are being sent to syslog. Look there for diagnostics "
15952
"messages."
15953
msgstr ""
15954
"NOTE: dhcpd's messages are being sent to syslog. Look there for diagnostics "
15955
"messages."
15956
15957
#: serverguide/C/network-config.xml:960(para)
15958
msgid ""
15959
"The error message the installation ends with might be a little confusing, "
15960
"but the following steps will help you configure the service:"
15961
msgstr ""
15962
"The error message the installation ends with might be a little confusing, "
15963
"but the following steps will help you configure the service:"
15964
15965
#: serverguide/C/network-config.xml:964(para)
15966
msgid ""
15967
"Most commonly, what you want to do is assign an IP address randomly. This "
15968
"can be done with settings as follows:"
15969
msgstr ""
15970
"Most commonly, what you want to do is assign an IP address randomly. This "
15971
"can be done with settings as follows:"
15972
15973
#: serverguide/C/network-config.xml:968(programlisting)
15974
#, no-wrap
15975
msgid ""
15976
"\n"
15977
"# Sample /etc/dhcpd.conf\n"
15978
"# (add your comments here) \n"
15979
"default-lease-time 600;\n"
15980
"max-lease-time 7200;\n"
15981
"option subnet-mask 255.255.255.0;\n"
15982
"option broadcast-address 192.168.1.255;\n"
15983
"option routers 192.168.1.254;\n"
15984
"option domain-name-servers 192.168.1.1, 192.168.1.2;\n"
15985
"option domain-name \"mydomain.example\";\n"
15986
"\n"
15987
"subnet 192.168.1.0 netmask 255.255.255.0 {\n"
15988
"range 192.168.1.10 192.168.1.100;\n"
15989
"range 192.168.1.150 192.168.1.200;\n"
15990
"} \n"
15991
msgstr ""
15992
"\n"
15993
"# Sample /etc/dhcpd.conf\n"
15994
"# (add your comments here) \n"
15995
"default-lease-time 600;\n"
15996
"max-lease-time 7200;\n"
15997
"option subnet-mask 255.255.255.0;\n"
15998
"option broadcast-address 192.168.1.255;\n"
15999
"option routers 192.168.1.254;\n"
16000
"option domain-name-servers 192.168.1.1, 192.168.1.2;\n"
16001
"option domain-name \"mydomain.example\";\n"
16002
"\n"
16003
"subnet 192.168.1.0 netmask 255.255.255.0 {\n"
16004
"range 192.168.1.10 192.168.1.100;\n"
16005
"range 192.168.1.150 192.168.1.200;\n"
16006
"} \n"
16007
16008
#: serverguide/C/network-config.xml:984(para)
16009
msgid ""
16010
"This will result in the DHCP server giving a client an IP address from the "
16011
"range 192.168.1.10-192.168.1.100 or 192.168.1.150-192.168.1.200. It will "
16012
"lease an IP address for 600 seconds if the client doesn't ask for a specific "
16013
"time frame. Otherwise the maximum (allowed) lease will be 7200 seconds. The "
16014
"server will also \"advise\" the client that it should use 255.255.255.0 as "
16015
"its subnet mask, 192.168.1.255 as its broadcast address, 192.168.1.254 as "
16016
"the router/gateway and 192.168.1.1 and 192.168.1.2 as its DNS servers."
16017
msgstr ""
16018
"This will result in the DHCP server giving a client an IP address from the "
16019
"range 192.168.1.10-192.168.1.100 or 192.168.1.150-192.168.1.200. It will "
16020
"lease an IP address for 600 seconds if the client doesn't ask for a specific "
16021
"time frame. Otherwise the maximum (allowed) lease will be 7200 seconds. The "
16022
"server will also \"advise\" the client that it should use 255.255.255.0 as "
16023
"its subnet mask, 192.168.1.255 as its broadcast address, 192.168.1.254 as "
16024
"the router/gateway and 192.168.1.1 and 192.168.1.2 as its DNS servers."
16025
16026
#: serverguide/C/network-config.xml:993(para)
16027
msgid ""
16028
"If you need to specify a WINS server for your Windows clients, you will need "
16029
"to include the netbios-name-servers option, e.g."
16030
msgstr ""
16031
"If you need to specify a WINS server for your Windows clients, you will need "
16032
"to include the netbios-name-servers option, e.g."
16033
16034
#: serverguide/C/network-config.xml:997(programlisting)
16035
#, no-wrap
16036
msgid ""
16037
"\n"
16038
"option netbios-name-servers 192.168.1.1; \n"
16039
msgstr ""
16040
"\n"
16041
"option netbios-name-servers 192.168.1.1; \n"
16042
16043
#: serverguide/C/network-config.xml:1000(para)
16044
msgid ""
16045
"Dhcpd configuration settings are taken from the DHCP mini-HOWTO, which can "
16046
"be found <ulink "
16047
"url=\"http://www.tldp.org/HOWTO/DHCP/index.html\">here</ulink>."
16048
msgstr ""
16049
"Dhcpd configuration settings are taken from the DHCP mini-HOWTO, which can "
16050
"be found <ulink "
16051
"url=\"http://www.tldp.org/HOWTO/DHCP/index.html\">here</ulink>."
16052
16053
#: serverguide/C/network-config.xml:1010(para)
16054
msgid ""
16055
"The <ulink url=\"https://help.ubuntu.com/community/dhcp3-server\">dhcp3-"
16056
"server Ubuntu Wiki</ulink> page has more information."
16057
msgstr ""
16058
16059
#: serverguide/C/network-config.xml:1015(para)
16060
msgid ""
16061
"For more <filename>/etc/dhcp3/dhcpd.conf</filename> options see the <ulink "
16062
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man5/dhcpd.conf.5.html"
16063
"\">dhcpd.conf man page</ulink>."
16064
msgstr ""
16065
16066
#: serverguide/C/network-config.xml:1021(para)
16067
msgid ""
16068
"Also see the <ulink url=\"http://www.dhcp-handbook.com/dhcp_faq.html\">DHCP "
16069
"FAQ</ulink>"
16070
msgstr ""
16071
"Also see the <ulink url=\"http://www.dhcp-handbook.com/dhcp_faq.html\">DHCP "
16072
"FAQ</ulink>"
16073
16074
#: serverguide/C/network-config.xml:1031(title)
16075
msgid "Time Synchronisation with NTP"
16076
msgstr "Time Synchronisation with NTP"
16077
16078
#: serverguide/C/network-config.xml:1032(para)
16079
msgid ""
16080
"This page describes methods for keeping your computer's time accurate. This "
16081
"is useful for servers, but is not necessary (or desirable) for desktop "
16082
"machines."
16083
msgstr ""
16084
"This page describes methods for keeping your computer's time accurate. This "
16085
"is useful for servers, but is not necessary (or desirable) for desktop "
16086
"machines."
16087
16088
#: serverguide/C/network-config.xml:1035(para)
16089
msgid ""
16090
"NTP is a TCP/IP protocol for synchronising time over a network. Basically a "
16091
"client requests the current time from a server, and uses it to set its own "
16092
"clock."
16093
msgstr ""
16094
"NTP is a TCP/IP protocol for synchronising time over a network. Basically a "
16095
"client requests the current time from a server, and uses it to set its own "
16096
"clock."
16097
16098
#: serverguide/C/network-config.xml:1038(para)
16099
msgid ""
16100
"Behind this simple description, there is a lot of complexity - there are "
16101
"tiers of NTP servers, with the tier one NTP servers connected to atomic "
16102
"clocks (often via GPS), and tier two and three servers spreading the load of "
16103
"actually handling requests across the Internet. Also the client software is "
16104
"a lot more complex than you might think - it has to factor out communication "
16105
"delays, and adjust the time in a way that does not upset all the other "
16106
"processes that run on the server. But luckily all that complexity is hidden "
16107
"from you!"
16108
msgstr ""
16109
"Behind this simple description, there is a lot of complexity - there are "
16110
"tiers of NTP servers, with the tier one NTP servers connected to atomic "
16111
"clocks (often via GPS), and tier two and three servers spreading the load of "
16112
"actually handling requests across the Internet. Also the client software is "
16113
"a lot more complex than you might think - it has to factor out communication "
16114
"delays, and adjust the time in a way that does not upset all the other "
16115
"processes that run on the server. But luckily all that complexity is hidden "
16116
"from you!"
16117
16118
#: serverguide/C/network-config.xml:1041(para)
16119
msgid ""
16120
"Ubuntu has two ways of automatically setting your time: ntpdate and ntpd."
16121
msgstr ""
16122
"Ubuntu has two ways of automatically setting your time: ntpdate and ntpd."
16123
16124
#: serverguide/C/network-config.xml:1046(title)
16125
msgid "ntpdate"
16126
msgstr "ntpdate"
16127
16128
#: serverguide/C/network-config.xml:1047(para)
16129
msgid ""
16130
"Ubuntu comes with ntpdate as standard, and will run it once at boot time to "
16131
"set up your time according to Ubuntu's NTP server. However, a server's clock "
16132
"is likely to drift considerably between reboots, so it makes sense to "
16133
"correct the time occasionally. The easiest way to do this is to get cron to "
16134
"run ntpdate every day. With your favorite editor, as root, create a file "
16135
"<code>/etc/cron.daily/ntpdate</code> containing:"
16136
msgstr ""
16137
"Ubuntu comes with ntpdate as standard, and will run it once at boot time to "
16138
"set up your time according to Ubuntu's NTP server. However, a server's clock "
16139
"is likely to drift considerably between reboots, so it makes sense to "
16140
"correct the time occasionally. The easiest way to do this is to get cron to "
16141
"run ntpdate every day. With your favourite editor, as root, create a file "
16142
"<code>/etc/cron.daily/ntpdate</code> containing:"
16143
16144
#: serverguide/C/network-config.xml:1052(screen)
16145
#, no-wrap
16146
msgid "ntpdate ntp.ubuntu.com\n"
16147
msgstr "ntpdate ntp.ubuntu.com\n"
16148
16149
#: serverguide/C/network-config.xml:1054(para)
16150
msgid ""
16151
"The file <code>/etc/cron.daily/ntpdate</code> must also be executable."
16152
msgstr ""
16153
"The file <code>/etc/cron.daily/ntpdate</code> must also be executable."
16154
16155
#: serverguide/C/network-config.xml:1057(screen)
16156
#, no-wrap
16157
msgid "sudo chmod 755 /etc/cron.daily/ntpdate\n"
16158
msgstr "sudo chmod 755 /etc/cron.daily/ntpdate\n"
16159
16160
#: serverguide/C/network-config.xml:1061(title)
16161
msgid "ntpd"
16162
msgstr "ntpd"
16163
16164
#: serverguide/C/network-config.xml:1062(para)
16165
msgid ""
16166
"ntpdate is a bit of a blunt instrument - it can only adjust the time once a "
16167
"day, in one big correction. The ntp daemon ntpd is far more subtle. It "
16168
"calculates the drift of your system clock and continuously adjusts it, so "
16169
"there are no large corrections that could lead to inconsistent logs for "
16170
"instance. The cost is a little processing power and memory, but for a modern "
16171
"server this is negligible."
16172
msgstr ""
16173
"ntpdate is a bit of a blunt instrument - it can only adjust the time once a "
16174
"day, in one big correction. The ntp daemon ntpd is far more subtle. It "
16175
"calculates the drift of your system clock and continuously adjusts it, so "
16176
"there are no large corrections that could lead to inconsistent logs for "
16177
"instance. The cost is a little processing power and memory, but for a modern "
16178
"server this is negligible."
16179
16180
#: serverguide/C/network-config.xml:1065(para)
16181
msgid "To set up ntpd:"
16182
msgstr "To set up ntpd:"
16183
16184
#: serverguide/C/network-config.xml:1066(screen)
16185
#, no-wrap
16186
msgid "sudo apt-get install ntp\n"
16187
msgstr "sudo apt-get install ntp\n"
16188
16189
#: serverguide/C/network-config.xml:1071(title)
16190
msgid "Changing Time Servers"
16191
msgstr "Changing Time Servers"
16192
16193
#: serverguide/C/network-config.xml:1072(para)
16194
msgid ""
16195
"In both cases above, your system will use Ubuntu's NTP server at "
16196
"<code>ntp.ubuntu.com</code> by default. This is OK, but you might want to "
16197
"use several servers to increase accuracy and resilience, and you may want to "
16198
"use time servers that are geographically closer to you. to do this for "
16199
"ntpdate, change the contents of <code>/etc/cron.daily/ntpdate</code> to:"
16200
msgstr ""
16201
"In both cases above, your system will use Ubuntu's NTP server at "
16202
"<code>ntp.ubuntu.com</code> by default. This is OK, but you might want to "
16203
"use several servers to increase accuracy and resilience, and you may want to "
16204
"use time servers that are geographically closer to you. to do this for "
16205
"ntpdate, change the contents of <code>/etc/cron.daily/ntpdate</code> to:"
16206
16207
#: serverguide/C/network-config.xml:1079(screen)
16208
#, no-wrap
16209
msgid "ntpdate ntp.ubuntu.com pool.ntp.org \n"
16210
msgstr "ntpdate ntp.ubuntu.com pool.ntp.org \n"
16211
16212
#: serverguide/C/network-config.xml:1081(para)
16213
msgid ""
16214
"And for ntpd edit <code>/etc/ntp.conf</code> to include additional server "
16215
"lines:"
16216
msgstr ""
16217
"And for ntpd edit <code>/etc/ntp.conf</code> to include additional server "
16218
"lines:"
16219
16220
#: serverguide/C/network-config.xml:1086(screen)
16221
#, no-wrap
16222
msgid ""
16223
"server ntp.ubuntu.com\n"
16224
"server pool.ntp.org\n"
16225
msgstr ""
16226
"server ntp.ubuntu.com\n"
16227
"server pool.ntp.org\n"
16228
16229
#: serverguide/C/network-config.xml:1089(para)
16230
msgid ""
16231
"You may notice <code>pool.ntp.org</code> in the examples above. This is a "
16232
"really good idea which uses round-robin DNS to return an NTP server from a "
16233
"pool, spreading the load between several different servers. Even better, "
16234
"they have pools for different regions - for instance, if you are in New "
16235
"Zealand, so you could use <code>nz.pool.ntp.org</code> instead of "
16236
"<code>pool.ntp.org</code> . Look at <ulink "
16237
"url=\"http://www.pool.ntp.org/\">http://www.pool.ntp.org/</ulink> for more "
16238
"details."
16239
msgstr ""
16240
"You may notice <code>pool.ntp.org</code> in the examples above. This is a "
16241
"really good idea which uses round-robin DNS to return an NTP server from a "
16242
"pool, spreading the load between several different servers. Even better, "
16243
"they have pools for different regions - for instance, if you are in New "
16244
"Zealand, so you could use <code>nz.pool.ntp.org</code> instead of "
16245
"<code>pool.ntp.org</code> . Look at <ulink "
16246
"url=\"http://www.pool.ntp.org/\">http://www.pool.ntp.org/</ulink> for more "
16247
"details."
16248
16249
#: serverguide/C/network-config.xml:1100(para)
16250
msgid ""
16251
"You can also Google for NTP servers in your region, and add these to your "
16252
"configuration. To test that a server works, just type <code>sudo ntpdate "
16253
"ntp.server.name</code> and see what happens."
16254
msgstr ""
16255
"You can also Google for NTP servers in your region, and add these to your "
16256
"configuration. To test that a server works, just type <code>sudo ntpdate "
16257
"ntp.server.name</code> and see what happens."
16258
16259
#: serverguide/C/network-config.xml:1111(para)
16260
msgid ""
16261
"See the <ulink url=\"https://help.ubuntu.com/community/UbuntuTime\">Ubuntu "
16262
"Time</ulink> wiki page for more information."
16263
msgstr ""
16264
16265
#: serverguide/C/network-config.xml:1117(ulink)
16266
msgid "NTP Support"
16267
msgstr "NTP Support"
16268
16269
#: serverguide/C/network-config.xml:1122(ulink)
16270
msgid "The NTP FAQ and HOWTO"
16271
msgstr "The NTP FAQ and HOWTO"
16272
16273
#: serverguide/C/network-auth.xml:13(title)
16274
msgid "Network Authentication"
16275
msgstr "Network Authentication"
16276
16277
#: serverguide/C/network-auth.xml:15(para)
16278
msgid "This section explains various Network Authentication protocols."
16279
msgstr "This section explains various Network Authentication protocols."
16280
16281
#: serverguide/C/network-auth.xml:19(title)
16282
msgid "OpenLDAP Server"
16283
msgstr "OpenLDAP Server"
16284
16285
#: serverguide/C/network-auth.xml:20(para)
16286
msgid ""
16287
"LDAP is an acronym for Lightweight Directory Access Protocol, it is a "
16288
"simplified version of the X.500 protocol. The directory setup in this "
16289
"section will be used for authentication. Nevertheless, LDAP can be used in "
16290
"numerous ways: authentication, shared directory (for mail clients), address "
16291
"book, etc."
16292
msgstr ""
16293
"LDAP is an acronym for Lightweight Directory Access Protocol, it is a "
16294
"simplified version of the X.500 protocol. The directory setup in this "
16295
"section will be used for authentication. Nevertheless, LDAP can be used in "
16296
"numerous ways: authentication, shared directory (for mail clients), address "
16297
"book, etc."
16298
16299
#: serverguide/C/network-auth.xml:28(para)
16300
msgid ""
16301
"To describe LDAP quickly, all information is stored in a tree structure. "
16302
"With <application>OpenLDAP</application> you have freedom to determine the "
16303
"directory arborescence (the Directory Information Tree: the DIT) yourself. "
16304
"We will begin with a basic tree containing two nodes below the root:"
16305
msgstr ""
16306
"To describe LDAP quickly, all information is stored in a tree structure. "
16307
"With <application>OpenLDAP</application> you have freedom to determine the "
16308
"directory arborescence (the Directory Information Tree: the DIT) yourself. "
16309
"We will begin with a basic tree containing two nodes below the root:"
16310
16311
#: serverguide/C/network-auth.xml:37(para)
16312
msgid "\"People\" node where your users will be stored"
16313
msgstr "\"People\" node where your users will be stored"
16314
16315
#: serverguide/C/network-auth.xml:40(para)
16316
msgid "\"Groups\" node where your groups will be stored"
16317
msgstr "\"Groups\" node where your groups will be stored"
16318
16319
#: serverguide/C/network-auth.xml:44(para)
16320
msgid ""
16321
"Before beginning, you should determine what the root of your LDAP directory "
16322
"will be. By default, your tree will be determined by your Fully Qualified "
16323
"Domain Name (FQDN). If your domain is example.com (which we will use in this "
16324
"example), your root node will be dc=example,dc=com."
16325
msgstr ""
16326
"Before beginning, you should determine what the root of your LDAP directory "
16327
"will be. By default, your tree will be determined by your Fully Qualified "
16328
"Domain Name (FQDN). If your domain is example.com (which we will use in this "
16329
"example), your root node will be dc=example,dc=com."
16330
16331
#: serverguide/C/network-auth.xml:54(para)
16332
msgid ""
16333
"First, install the <application>OpenLDAP</application> server daemon "
16334
"<application>slapd</application> and <application>ldap-utils</application>, "
16335
"a package containing LDAP management utilities:"
16336
msgstr ""
16337
"First, install the <application>OpenLDAP</application> server daemon "
16338
"<application>slapd</application> and <application>ldap-utils</application>, "
16339
"a package containing LDAP management utilities:"
16340
16341
#: serverguide/C/network-auth.xml:60(command)
16342
msgid "sudo apt-get install slapd ldap-utils"
16343
msgstr "sudo apt-get install slapd ldap-utils"
16344
16345
#: serverguide/C/network-auth.xml:63(para)
16346
msgid ""
16347
"By default <application>slapd</application> is configured with minimal "
16348
"options needed to run the <application>slapd</application> daemon."
16349
msgstr ""
16350
"By default <application>slapd</application> is configured with minimal "
16351
"options needed to run the <application>slapd</application> daemon."
16352
16353
#: serverguide/C/network-auth.xml:68(para)
16354
msgid ""
16355
"The configuration example in the following sections will match the domain "
16356
"name of the server. For example, if the machine's Fully Qualified Domain "
16357
"Name (FQDN) is ldap.example.com, the default suffix will be "
16358
"<emphasis>dc=example,dc=com</emphasis>."
16359
msgstr ""
16360
"The configuration example in the following sections will match the domain "
16361
"name of the server. For example, if the machine's Fully Qualified Domain "
16362
"Name (FQDN) is ldap.example.com, the default suffix will be "
16363
"<emphasis>dc=example,dc=com</emphasis>."
16364
16365
#: serverguide/C/network-auth.xml:76(title)
16366
msgid "Populating LDAP"
16367
msgstr "Populating LDAP"
16368
16369
#: serverguide/C/network-auth.xml:78(para)
16370
msgid ""
16371
"<application>OpenLDAP</application> uses a separate directory which contains "
16372
"the <emphasis>cn=config</emphasis> Directory Information Tree (DIT). The "
16373
"<emphasis>cn=config</emphasis> DIT is used to dynamically configure the "
16374
"<application>slapd</application> daemon, allowing the modification of schema "
16375
"definitions, indexes, ACLs, etc without stopping the service."
16376
msgstr ""
16377
"<application>OpenLDAP</application> uses a separate directory which contains "
16378
"the <emphasis>cn=config</emphasis> Directory Information Tree (DIT). The "
16379
"<emphasis>cn=config</emphasis> DIT is used to dynamically configure the "
16380
"<application>slapd</application> daemon, allowing the modification of schema "
16381
"definitions, indexes, ACLs, etc without stopping the service."
16382
16383
#: serverguide/C/network-auth.xml:86(para)
16384
msgid ""
16385
"The backend <emphasis>cn=config</emphasis> directory has only a minimal "
16386
"configuration and will need additional configuration options in order to "
16387
"populate the frontend directory. The frontend will be populated with a "
16388
"\"classical\" scheme that will be compatible with address book applications "
16389
"and with Unix Posix accounts. Posix accounts will allow authentication to "
16390
"various applications, such as web applications, email Mail Transfer Agent "
16391
"(MTA) applications, etc."
16392
msgstr ""
16393
16394
#: serverguide/C/network-auth.xml:95(para)
16395
msgid ""
16396
"For external applications to authenticate using LDAP they will each need to "
16397
"be specifically configured to do so. Refer to the individual application "
16398
"documentation for details."
16399
msgstr ""
16400
"For external applications to authenticate using LDAP they will each need to "
16401
"be specifically configured to do so. Refer to the individual application "
16402
"documentation for details."
16403
16404
#: serverguide/C/network-auth.xml:103(para)
16405
msgid ""
16406
"Remember to change <emphasis>dc=example,dc=com</emphasis> in the following "
16407
"examples to match your LDAP configuration."
16408
msgstr ""
16409
"Remember to change <emphasis>dc=example,dc=com</emphasis> in the following "
16410
"examples to match your LDAP configuration."
16411
16412
#: serverguide/C/network-auth.xml:108(para)
16413
msgid ""
16414
"First, some additional schema files need to be loaded. In a terminal enter:"
16415
msgstr ""
16416
"First, some additional schema files need to be loaded. In a terminal enter:"
16417
16418
#: serverguide/C/network-auth.xml:113(command) serverguide/C/network-auth.xml:702(command)
16419
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif"
16420
msgstr ""
16421
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif"
16422
16423
#: serverguide/C/network-auth.xml:114(command) serverguide/C/network-auth.xml:703(command)
16424
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif"
16425
msgstr "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif"
16426
16427
#: serverguide/C/network-auth.xml:115(command) serverguide/C/network-auth.xml:704(command)
16428
msgid ""
16429
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif"
16430
msgstr ""
16431
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif"
16432
16433
#: serverguide/C/network-auth.xml:118(para)
16434
msgid ""
16435
"Next, copy the following example LDIF file, naming it "
16436
"<filename>backend.example.com.ldif</filename>, somewhere on your system:"
16437
msgstr ""
16438
"Next, copy the following example LDIF file, naming it "
16439
"<filename>backend.example.com.ldif</filename>, somewhere on your system:"
16440
16441
#: serverguide/C/network-auth.xml:123(programlisting)
16442
#, no-wrap
16443
msgid ""
16444
"\n"
16445
"# Load dynamic backend modules\n"
16446
"dn: cn=module,cn=config\n"
16447
"objectClass: olcModuleList\n"
16448
"cn: module\n"
16449
"olcModulepath: /usr/lib/ldap\n"
16450
"olcModuleload: back_hdb\n"
16451
"\n"
16452
"# Database settings\n"
16453
"dn: olcDatabase=hdb,cn=config\n"
16454
"objectClass: olcDatabaseConfig\n"
16455
"objectClass: olcHdbConfig\n"
16456
"olcDatabase: {1}hdb\n"
16457
"olcSuffix: dc=example,dc=com\n"
16458
"olcDbDirectory: /var/lib/ldap\n"
16459
"olcRootDN: cn=admin,dc=example,dc=com\n"
16460
"olcRootPW: secret\n"
16461
"olcDbConfig: set_cachesize 0 2097152 0\n"
16462
"olcDbConfig: set_lk_max_objects 1500\n"
16463
"olcDbConfig: set_lk_max_locks 1500\n"
16464
"olcDbConfig: set_lk_max_lockers 1500\n"
16465
"olcDbIndex: objectClass eq\n"
16466
"olcLastMod: TRUE\n"
16467
"olcDbCheckpoint: 512 30\n"
16468
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
16469
"by anonymous auth by self write by * none\n"
16470
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
16471
"olcAccess: to dn.base=\"\" by * read\n"
16472
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
16473
"\n"
16474
msgstr ""
16475
16476
#: serverguide/C/network-auth.xml:155(para)
16477
msgid ""
16478
"Change <emphasis>olcRootPW: secret</emphasis> to a password of your choosing."
16479
msgstr ""
16480
"Change <emphasis>olcRootPW: secret</emphasis> to a password of your choosing."
16481
16482
#: serverguide/C/network-auth.xml:160(para)
16483
msgid "Now add the LDIF to the directory:"
16484
msgstr "Now add the LDIF to the directory:"
16485
16486
#: serverguide/C/network-auth.xml:165(command) serverguide/C/network-auth.xml:746(command)
16487
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif"
16488
msgstr "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif"
16489
16490
#: serverguide/C/network-auth.xml:168(para)
16491
msgid ""
16492
"The frontend directory is now ready to be populated. Create a "
16493
"<filename>frontend.example.com.ldif</filename> with the following contents:"
16494
msgstr ""
16495
"The frontend directory is now ready to be populated. Create a "
16496
"<filename>frontend.example.com.ldif</filename> with the following contents:"
16497
16498
#: serverguide/C/network-auth.xml:173(programlisting)
16499
#, no-wrap
16500
msgid ""
16501
"\n"
16502
"# Create top-level object in domain\n"
16503
"dn: dc=example,dc=com\n"
16504
"objectClass: top\n"
16505
"objectClass: dcObject\n"
16506
"objectclass: organization\n"
16507
"o: Example Organization\n"
16508
"dc: Example\n"
16509
"description: LDAP Example \n"
16510
"\n"
16511
"# Admin user.\n"
16512
"dn: cn=admin,dc=example,dc=com\n"
16513
"objectClass: simpleSecurityObject\n"
16514
"objectClass: organizationalRole\n"
16515
"cn: admin\n"
16516
"description: LDAP administrator\n"
16517
"userPassword: secret\n"
16518
"\n"
16519
"dn: ou=people,dc=example,dc=com\n"
16520
"objectClass: organizationalUnit\n"
16521
"ou: people\n"
16522
"\n"
16523
"dn: ou=groups,dc=example,dc=com\n"
16524
"objectClass: organizationalUnit\n"
16525
"ou: groups\n"
16526
"\n"
16527
"dn: uid=john,ou=people,dc=example,dc=com\n"
16528
"objectClass: inetOrgPerson\n"
16529
"objectClass: posixAccount\n"
16530
"objectClass: shadowAccount\n"
16531
"uid: john\n"
16532
"sn: Doe\n"
16533
"givenName: John\n"
16534
"cn: John Doe\n"
16535
"displayName: John Doe\n"
16536
"uidNumber: 1000\n"
16537
"gidNumber: 10000\n"
16538
"userPassword: password\n"
16539
"gecos: John Doe\n"
16540
"loginShell: /bin/bash\n"
16541
"homeDirectory: /home/john\n"
16542
"shadowExpire: -1\n"
16543
"shadowFlag: 0\n"
16544
"shadowWarning: 7\n"
16545
"shadowMin: 8\n"
16546
"shadowMax: 999999\n"
16547
"shadowLastChange: 10877\n"
16548
"mail: john.doe@example.com\n"
16549
"postalCode: 31000\n"
16550
"l: Toulouse\n"
16551
"o: Example\n"
16552
"mobile: +33 (0)6 xx xx xx xx\n"
16553
"homePhone: +33 (0)5 xx xx xx xx\n"
16554
"title: System Administrator\n"
16555
"postalAddress: \n"
16556
"initials: JD\n"
16557
"\n"
16558
"dn: cn=example,ou=groups,dc=example,dc=com\n"
16559
"objectClass: posixGroup\n"
16560
"cn: example\n"
16561
"gidNumber: 10000\n"
16562
msgstr ""
16563
"\n"
16564
"# Create top-level object in domain\n"
16565
"dn: dc=example,dc=com\n"
16566
"objectClass: top\n"
16567
"objectClass: dcObject\n"
16568
"objectclass: organisation\n"
16569
"o: Example Organisation\n"
16570
"dc: Example\n"
16571
"description: LDAP Example \n"
16572
"\n"
16573
"# Admin user.\n"
16574
"dn: cn=admin,dc=example,dc=com\n"
16575
"objectClass: simpleSecurityObject\n"
16576
"objectClass: organisationalRole\n"
16577
"cn: admin\n"
16578
"description: LDAP administrator\n"
16579
"userPassword: secret\n"
16580
"\n"
16581
"dn: ou=people,dc=example,dc=com\n"
16582
"objectClass: organisationalUnit\n"
16583
"ou: people\n"
16584
"\n"
16585
"dn: ou=groups,dc=example,dc=com\n"
16586
"objectClass: organisationalUnit\n"
16587
"ou: groups\n"
16588
"\n"
16589
"dn: uid=john,ou=people,dc=example,dc=com\n"
16590
"objectClass: inetOrgPerson\n"
16591
"objectClass: posixAccount\n"
16592
"objectClass: shadowAccount\n"
16593
"uid: john\n"
16594
"sn: Doe\n"
16595
"givenName: John\n"
16596
"cn: John Doe\n"
16597
"displayName: John Doe\n"
16598
"uidNumber: 1000\n"
16599
"gidNumber: 10000\n"
16600
"userPassword: password\n"
16601
"gecos: John Doe\n"
16602
"loginShell: /bin/bash\n"
16603
"homeDirectory: /home/john\n"
16604
"shadowExpire: -1\n"
16605
"shadowFlag: 0\n"
16606
"shadowWarning: 7\n"
16607
"shadowMin: 8\n"
16608
"shadowMax: 999999\n"
16609
"shadowLastChange: 10877\n"
16610
"mail: john.doe@example.com\n"
16611
"postalCode: 31000\n"
16612
"l: Toulouse\n"
16613
"o: Example\n"
16614
"mobile: +33 (0)6 xx xx xx xx\n"
16615
"homePhone: +33 (0)5 xx xx xx xx\n"
16616
"title: System Administrator\n"
16617
"postalAddress: \n"
16618
"initials: JD\n"
16619
"\n"
16620
"dn: cn=example,ou=groups,dc=example,dc=com\n"
16621
"objectClass: posixGroup\n"
16622
"cn: example\n"
16623
"gidNumber: 10000\n"
16624
16625
#: serverguide/C/network-auth.xml:236(para)
16626
msgid ""
16627
"In this example the directory structure, a user, and a group have been "
16628
"setup. In other examples you might see the <emphasis>objectClass: "
16629
"top</emphasis> added in every entry, but that is the default behaviour so "
16630
"you do not have to add it explicitly."
16631
msgstr ""
16632
"In this example the directory structure, a user, and a group have been "
16633
"setup. In other examples you might see the <emphasis>objectClass: "
16634
"top</emphasis> added in every entry, but that is the default behaviour so "
16635
"you do not have to add it explicitly."
16636
16637
#: serverguide/C/network-auth.xml:243(para)
16638
msgid "Add the entries to the LDAP directory:"
16639
msgstr "Add the entries to the LDAP directory:"
16640
16641
#: serverguide/C/network-auth.xml:249(command) serverguide/C/network-auth.xml:757(command)
16642
msgid ""
16643
"sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif"
16644
msgstr ""
16645
"sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif"
16646
16647
#: serverguide/C/network-auth.xml:252(para)
16648
msgid ""
16649
"We can check that the content has been correctly added with the "
16650
"<application>ldapsearch</application> utility. Execute a search of the LDAP "
16651
"directory:"
16652
msgstr ""
16653
"We can check that the content has been correctly added with the "
16654
"<application>ldapsearch</application> utility. Execute a search of the LDAP "
16655
"directory:"
16656
16657
#: serverguide/C/network-auth.xml:258(command)
16658
msgid "ldapsearch -xLLL -b \"dc=example,dc=com\" uid=john sn givenName cn"
16659
msgstr "ldapsearch -xLLL -b \"dc=example,dc=com\" uid=john sn givenName cn"
16660
16661
#: serverguide/C/network-auth.xml:259(computeroutput)
16662
#, no-wrap
16663
msgid ""
16664
"\n"
16665
"dn: uid=john,ou=people,dc=example,dc=com\n"
16666
"cn: John Doe\n"
16667
"sn: Doe\n"
16668
"givenName: John\n"
16669
msgstr ""
16670
"\n"
16671
"dn: uid=john,ou=people,dc=example,dc=com\n"
16672
"cn: John Doe\n"
16673
"sn: Doe\n"
16674
"givenName: John\n"
16675
16676
#: serverguide/C/network-auth.xml:267(para)
16677
msgid "Just a quick explanation:"
16678
msgstr "Just a quick explanation:"
16679
16680
#: serverguide/C/network-auth.xml:273(para)
16681
msgid ""
16682
"<emphasis>-x:</emphasis> will not use SASL authentication method, which is "
16683
"the default."
16684
msgstr ""
16685
"<emphasis>-x:</emphasis> will not use SASL authentication method, which is "
16686
"the default."
16687
16688
#: serverguide/C/network-auth.xml:279(para)
16689
msgid "<emphasis>-LLL:</emphasis> disable printing LDIF schema information."
16690
msgstr "<emphasis>-LLL:</emphasis> disable printing LDIF schema information."
16691
16692
#: serverguide/C/network-auth.xml:287(title)
16693
msgid "Further Configuration"
16694
msgstr "Further Configuration"
16695
16696
#: serverguide/C/network-auth.xml:290(para)
16697
msgid ""
16698
"The <emphasis>cn=config</emphasis> tree can be manipulated using the "
16699
"utilities in the <application>ldap-utils</application> package. For example:"
16700
msgstr ""
16701
"The <emphasis>cn=config</emphasis> tree can be manipulated using the "
16702
"utilities in the <application>ldap-utils</application> package. For example:"
16703
16704
#: serverguide/C/network-auth.xml:298(para)
16705
msgid ""
16706
"Use <application>ldapsearch</application> to view the tree, entering the "
16707
"admin password set during installation or reconfiguration:"
16708
msgstr ""
16709
"Use <application>ldapsearch</application> to view the tree, entering the "
16710
"admin password set during installation or reconfiguration:"
16711
16712
#: serverguide/C/network-auth.xml:304(command)
16713
msgid "sudo ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn"
16714
msgstr "sudo ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn"
16715
16716
#: serverguide/C/network-auth.xml:308(computeroutput)
16717
#, no-wrap
16718
msgid ""
16719
"\n"
16720
"SASL/EXTERNAL authentication started\n"
16721
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
16722
"SASL SSF: 0\n"
16723
"dn: cn=config\n"
16724
"\n"
16725
"dn: cn=module{0},cn=config\n"
16726
"\n"
16727
"dn: cn=schema,cn=config\n"
16728
"\n"
16729
"dn: cn={0}core,cn=schema,cn=config\n"
16730
"\n"
16731
"dn: cn={1}cosine,cn=schema,cn=config\n"
16732
"\n"
16733
"dn: cn={2}nis,cn=schema,cn=config\n"
16734
"\n"
16735
"dn: cn={3}inetorgperson,cn=schema,cn=config\n"
16736
"\n"
16737
"dn: olcDatabase={-1}frontend,cn=config\n"
16738
"\n"
16739
"dn: olcDatabase={0}config,cn=config\n"
16740
"\n"
16741
"dn: olcDatabase={1}hdb,cn=config\n"
16742
msgstr ""
16743
"\n"
16744
"SASL/EXTERNAL authentication started\n"
16745
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
16746
"SASL SSF: 0\n"
16747
"dn: cn=config\n"
16748
"\n"
16749
"dn: cn=module{0},cn=config\n"
16750
"\n"
16751
"dn: cn=schema,cn=config\n"
16752
"\n"
16753
"dn: cn={0}core,cn=schema,cn=config\n"
16754
"\n"
16755
"dn: cn={1}cosine,cn=schema,cn=config\n"
16756
"\n"
16757
"dn: cn={2}nis,cn=schema,cn=config\n"
16758
"\n"
16759
"dn: cn={3}inetorgperson,cn=schema,cn=config\n"
16760
"\n"
16761
"dn: olcDatabase={-1}frontend,cn=config\n"
16762
"\n"
16763
"dn: olcDatabase={0}config,cn=config\n"
16764
"\n"
16765
"dn: olcDatabase={1}hdb,cn=config\n"
16766
16767
#: serverguide/C/network-auth.xml:334(para)
16768
msgid ""
16769
"The output above is the current configuration options for the "
16770
"<emphasis>cn=config</emphasis> backend database. Your output may be vary."
16771
msgstr ""
16772
"The output above is the current configuration options for the "
16773
"<emphasis>cn=config</emphasis> backend database. Your output may be vary."
16774
16775
#: serverguide/C/network-auth.xml:342(para)
16776
msgid ""
16777
"As an example of modifying the <emphasis>cn=config</emphasis> tree, add "
16778
"another attribute to the index list using "
16779
"<application>ldapmodify</application>:"
16780
msgstr ""
16781
"As an example of modifying the <emphasis>cn=config</emphasis> tree, add "
16782
"another attribute to the index list using "
16783
"<application>ldapmodify</application>:"
16784
16785
#: serverguide/C/network-auth.xml:348(command) serverguide/C/network-auth.xml:993(command) serverguide/C/network-auth.xml:1164(command) serverguide/C/network-auth.xml:1200(command)
16786
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:///"
16787
msgstr "sudo ldapmodify -Y EXTERNAL -H ldapi:///"
16788
16789
#: serverguide/C/network-auth.xml:356(userinput)
16790
#, no-wrap
16791
msgid ""
16792
"dn: olcDatabase={1}hdb,cn=config\n"
16793
"add: olcDbIndex\n"
16794
"olcDbIndex: uidNumber eq"
16795
msgstr ""
16796
16797
#: serverguide/C/network-auth.xml:352(computeroutput)
16798
#, no-wrap
16799
msgid ""
16800
"\n"
16801
"SASL/EXTERNAL authentication started\n"
16802
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
16803
"SASL SSF: 0\n"
16804
"<placeholder-1/>\n"
16805
"\n"
16806
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
16807
msgstr ""
16808
"\n"
16809
"SASL/EXTERNAL authentication started\n"
16810
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
16811
"SASL SSF: 0\n"
16812
"<placeholder-1/>\n"
16813
"\n"
16814
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
16815
16816
#: serverguide/C/network-auth.xml:364(para)
16817
msgid ""
16818
"Once the modification has completed, press <emphasis>Ctrl+D</emphasis> to "
16819
"exit the utility."
16820
msgstr ""
16821
"Once the modification has completed, press <emphasis>Ctrl+D</emphasis> to "
16822
"exit the utility."
16823
16824
#: serverguide/C/network-auth.xml:371(para)
16825
msgid ""
16826
"<application>ldapmodify</application> can also read the changes from a file. "
16827
"Copy and paste the following into a file named "
16828
"<filename>uid_index.ldif</filename>:"
16829
msgstr ""
16830
"<application>ldapmodify</application> can also read the changes from a file. "
16831
"Copy and paste the following into a file named "
16832
"<filename>uid_index.ldif</filename>:"
16833
16834
#: serverguide/C/network-auth.xml:376(programlisting)
16835
#, no-wrap
16836
msgid ""
16837
"\n"
16838
"dn: olcDatabase={1}hdb,cn=config\n"
16839
"add: olcDbIndex\n"
16840
"olcDbIndex: uid eq,pres,sub\n"
16841
msgstr ""
16842
"\n"
16843
"dn: olcDatabase={1}hdb,cn=config\n"
16844
"add: olcDbIndex\n"
16845
"olcDbIndex: uid eq,pres,sub\n"
16846
16847
#: serverguide/C/network-auth.xml:382(para)
16848
msgid "Then execute <application>ldapmodify</application>:"
16849
msgstr "Then execute <application>ldapmodify</application>:"
16850
16851
#: serverguide/C/network-auth.xml:387(command)
16852
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f uid_index.ldif"
16853
msgstr "sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f uid_index.ldif"
16854
16855
#: serverguide/C/network-auth.xml:391(computeroutput)
16856
#, no-wrap
16857
msgid ""
16858
"\n"
16859
"SASL/EXTERNAL authentication started\n"
16860
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
16861
"SASL SSF: 0\n"
16862
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
16863
msgstr ""
16864
"\n"
16865
"SASL/EXTERNAL authentication started\n"
16866
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
16867
"SASL SSF: 0\n"
16868
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
16869
16870
#: serverguide/C/network-auth.xml:399(para)
16871
msgid "The file method is very useful for large changes."
16872
msgstr "The file method is very useful for large changes."
16873
16874
#: serverguide/C/network-auth.xml:406(para)
16875
msgid ""
16876
"Adding additional <emphasis>schemas</emphasis> to "
16877
"<application>slapd</application> requires the schema to be converted to LDIF "
16878
"format. The <filename role=\"directory\">/etc/ldap/schema</filename> "
16879
"directory contains some schema files already converted to LDIF format as "
16880
"demonstrated in the previous section. Fortunately, the "
16881
"<application>slapd</application> program can be used to automate the "
16882
"conversion. The following example will add the "
16883
"<emphasis>dyngroup.schema</emphasis>:"
16884
msgstr ""
16885
16886
#: serverguide/C/network-auth.xml:416(para)
16887
msgid ""
16888
"First, create a conversion <filename>schema_convert.conf</filename> file "
16889
"containing the following lines:"
16890
msgstr ""
16891
"First, create a conversion <filename>schema_convert.conf</filename> file "
16892
"containing the following lines:"
16893
16894
#: serverguide/C/network-auth.xml:421(programlisting)
16895
#, no-wrap
16896
msgid ""
16897
"\n"
16898
"include /etc/ldap/schema/core.schema\n"
16899
"include /etc/ldap/schema/collective.schema\n"
16900
"include /etc/ldap/schema/corba.schema\n"
16901
"include /etc/ldap/schema/cosine.schema\n"
16902
"include /etc/ldap/schema/duaconf.schema\n"
16903
"include /etc/ldap/schema/dyngroup.schema\n"
16904
"include /etc/ldap/schema/inetorgperson.schema\n"
16905
"include /etc/ldap/schema/java.schema\n"
16906
"include /etc/ldap/schema/misc.schema\n"
16907
"include /etc/ldap/schema/nis.schema\n"
16908
"include /etc/ldap/schema/openldap.schema\n"
16909
"include /etc/ldap/schema/ppolicy.schema\n"
16910
msgstr ""
16911
"\n"
16912
"include /etc/ldap/schema/core.schema\n"
16913
"include /etc/ldap/schema/collective.schema\n"
16914
"include /etc/ldap/schema/corba.schema\n"
16915
"include /etc/ldap/schema/cosine.schema\n"
16916
"include /etc/ldap/schema/duaconf.schema\n"
16917
"include /etc/ldap/schema/dyngroup.schema\n"
16918
"include /etc/ldap/schema/inetorgperson.schema\n"
16919
"include /etc/ldap/schema/java.schema\n"
16920
"include /etc/ldap/schema/misc.schema\n"
16921
"include /etc/ldap/schema/nis.schema\n"
16922
"include /etc/ldap/schema/openldap.schema\n"
16923
"include /etc/ldap/schema/ppolicy.schema\n"
16924
16925
#: serverguide/C/network-auth.xml:439(para) serverguide/C/network-auth.xml:1664(para)
16926
msgid "Next, create a temporary directory to hold the output:"
16927
msgstr "Next, create a temporary directory to hold the output:"
16928
16929
#: serverguide/C/network-auth.xml:444(command) serverguide/C/network-auth.xml:1669(command) serverguide/C/network-auth.xml:2705(command)
16930
msgid "mkdir /tmp/ldif_output"
16931
msgstr "mkdir /tmp/ldif_output"
16932
16933
#: serverguide/C/network-auth.xml:450(para)
16934
msgid ""
16935
"Now using <application>slapcat</application> convert the schema files to "
16936
"LDIF:"
16937
msgstr ""
16938
"Now using <application>slapcat</application> convert the schema files to "
16939
"LDIF:"
16940
16941
#: serverguide/C/network-auth.xml:455(command)
16942
msgid ""
16943
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
16944
"\"cn={5}dyngroup,cn=schema,cn=config\" > /tmp/cn=dyngroup.ldif"
16945
msgstr ""
16946
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
16947
"\"cn={5}dyngroup,cn=schema,cn=config\" > /tmp/cn=dyngroup.ldif"
16948
16949
#: serverguide/C/network-auth.xml:458(para)
16950
msgid ""
16951
"Adjust the configuration file name and temporary directory names if yours "
16952
"are different. Also, it may be worthwhile to keep the "
16953
"<filename>ldif_output</filename> directory around in case you want to add "
16954
"additional schemas in the future."
16955
msgstr ""
16956
"Adjust the configuration file name and temporary directory names if yours "
16957
"are different. Also, it may be worthwhile to keep the "
16958
"<filename>ldif_output</filename> directory around in case you want to add "
16959
"additional schemas in the future."
16960
16961
#: serverguide/C/network-auth.xml:467(para)
16962
msgid ""
16963
"Edit the <filename>/tmp/cn\\=dyngroup.ldif</filename> file, changing the "
16964
"following attributes:"
16965
msgstr ""
16966
"Edit the <filename>/tmp/cn\\=dyngroup.ldif</filename> file, changing the "
16967
"following attributes:"
16968
16969
#: serverguide/C/network-auth.xml:471(programlisting)
16970
#, no-wrap
16971
msgid ""
16972
"\n"
16973
"dn: cn=dyngroup,cn=schema,cn=config\n"
16974
"...\n"
16975
"cn: dyngroup\n"
16976
msgstr ""
16977
"\n"
16978
"dn: cn=dyngroup,cn=schema,cn=config\n"
16979
"...\n"
16980
"cn: dyngroup\n"
16981
16982
#: serverguide/C/network-auth.xml:477(para) serverguide/C/network-auth.xml:1700(para)
16983
msgid "And remove the following lines from the bottom of the file:"
16984
msgstr "And remove the following lines from the bottom of the file:"
16985
16986
#: serverguide/C/network-auth.xml:481(programlisting)
16987
#, no-wrap
16988
msgid ""
16989
"\n"
16990
"structuralObjectClass: olcSchemaConfig\n"
16991
"entryUUID: 10dae0ea-0760-102d-80d3-f9366b7f7757\n"
16992
"creatorsName: cn=config\n"
16993
"createTimestamp: 20080826021140Z\n"
16994
"entryCSN: 20080826021140.791425Z#000000#000#000000\n"
16995
"modifiersName: cn=config\n"
16996
"modifyTimestamp: 20080826021140Z\n"
16997
msgstr ""
16998
"\n"
16999
"structuralObjectClass: olcSchemaConfig\n"
17000
"entryUUID: 10dae0ea-0760-102d-80d3-f9366b7f7757\n"
17001
"creatorsName: cn=config\n"
17002
"createTimestamp: 20080826021140Z\n"
17003
"entryCSN: 20080826021140.791425Z#000000#000#000000\n"
17004
"modifiersName: cn=config\n"
17005
"modifyTimestamp: 20080826021140Z\n"
17006
17007
#: serverguide/C/network-auth.xml:492(para) serverguide/C/network-auth.xml:1715(para) serverguide/C/network-auth.xml:2751(para)
17008
msgid ""
17009
"The attribute values will vary, just be sure the attributes are removed."
17010
msgstr ""
17011
"The attribute values will vary, just be sure the attributes are removed."
17012
17013
#: serverguide/C/network-auth.xml:500(para) serverguide/C/network-auth.xml:1723(para)
17014
msgid ""
17015
"Finally, using the <application>ldapadd</application> utility, add the new "
17016
"schema to the directory:"
17017
msgstr ""
17018
"Finally, using the <application>ldapadd</application> utility, add the new "
17019
"schema to the directory:"
17020
17021
#: serverguide/C/network-auth.xml:506(command)
17022
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /tmp/cn\\=dyngroup.ldif"
17023
msgstr "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /tmp/cn\\=dyngroup.ldif"
17024
17025
#: serverguide/C/network-auth.xml:512(para)
17026
msgid ""
17027
"There should now be a <emphasis>dn: "
17028
"cn={4}dyngroup,cn=schema,cn=config</emphasis> entry in the cn=config tree."
17029
msgstr ""
17030
"There should now be a <emphasis>dn: "
17031
"cn={4}dyngroup,cn=schema,cn=config</emphasis> entry in the cn=config tree."
17032
17033
#: serverguide/C/network-auth.xml:522(title)
17034
msgid "LDAP Replication"
17035
msgstr ""
17036
17037
#: serverguide/C/network-auth.xml:524(para)
17038
msgid ""
17039
"LDAP often quickly becomes a highly critical service to the network. "
17040
"Multiple systems will come to depend on LDAP for authentication, "
17041
"authorization, configuration, etc. It is a good idea to setup a redundant "
17042
"system through replication."
17043
msgstr ""
17044
"LDAP often quickly becomes a highly critical service to the network. "
17045
"Multiple systems will come to depend on LDAP for authentication, "
17046
"authorisation, configuration, etc. It is a good idea to setup a redundant "
17047
"system through replication."
17048
17049
#: serverguide/C/network-auth.xml:530(para)
17050
msgid ""
17051
"Replication is achieved using the <emphasis>Syncrepl</emphasis> engine. "
17052
"Syncrepl allows the changes to be synced using a "
17053
"<emphasis>consumer</emphasis>, <emphasis>provider</emphasis> model. A "
17054
"provider sends directory changes to consumers."
17055
msgstr ""
17056
17057
#: serverguide/C/network-auth.xml:537(title)
17058
msgid "Provider Configuration"
17059
msgstr ""
17060
17061
#: serverguide/C/network-auth.xml:539(para)
17062
msgid ""
17063
"The following is an example of a <emphasis>Single-Master</emphasis> "
17064
"configuration. In this configuration one OpenLDAP server is configured as a "
17065
"<emphasis>provider</emphasis> and another as a <emphasis>consumer</emphasis>."
17066
msgstr ""
17067
17068
#: serverguide/C/network-auth.xml:547(para)
17069
msgid ""
17070
"First, configure the provider server. Copy the following to a file named "
17071
"<filename>provider_sync.ldif</filename>:"
17072
msgstr ""
17073
17074
#: serverguide/C/network-auth.xml:552(programlisting)
17075
#, no-wrap
17076
msgid ""
17077
"\n"
17078
"# Add indexes to the frontend db.\n"
17079
"dn: olcDatabase={1}hdb,cn=config\n"
17080
"changetype: modify\n"
17081
"add: olcDbIndex\n"
17082
"olcDbIndex: entryCSN eq\n"
17083
"-\n"
17084
"add: olcDbIndex\n"
17085
"olcDbIndex: entryUUID eq\n"
17086
"\n"
17087
"#Load the syncprov and accesslog modules.\n"
17088
"dn: cn=module{0},cn=config\n"
17089
"changetype: modify\n"
17090
"add: olcModuleLoad\n"
17091
"olcModuleLoad: syncprov\n"
17092
"-\n"
17093
"add: olcModuleLoad\n"
17094
"olcModuleLoad: accesslog\n"
17095
"\n"
17096
"# Accesslog database definitions\n"
17097
"dn: olcDatabase={2}hdb,cn=config\n"
17098
"objectClass: olcDatabaseConfig\n"
17099
"objectClass: olcHdbConfig\n"
17100
"olcDatabase: {2}hdb\n"
17101
"olcDbDirectory: /var/lib/ldap/accesslog\n"
17102
"olcSuffix: cn=accesslog\n"
17103
"olcRootDN: cn=admin,dc=example,dc=com\n"
17104
"olcDbIndex: default eq\n"
17105
"olcDbIndex: entryCSN,objectClass,reqEnd,reqResult,reqStart\n"
17106
"\n"
17107
"# Accesslog db syncprov.\n"
17108
"dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config\n"
17109
"changetype: add\n"
17110
"objectClass: olcOverlayConfig\n"
17111
"objectClass: olcSyncProvConfig\n"
17112
"olcOverlay: syncprov\n"
17113
"olcSpNoPresent: TRUE\n"
17114
"olcSpReloadHint: TRUE\n"
17115
"\n"
17116
"# syncrepl Provider for primary db\n"
17117
"dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config\n"
17118
"changetype: add\n"
17119
"objectClass: olcOverlayConfig\n"
17120
"objectClass: olcSyncProvConfig\n"
17121
"olcOverlay: syncprov\n"
17122
"olcSpNoPresent: TRUE\n"
17123
"\n"
17124
"# accesslog overlay definitions for primary db\n"
17125
"dn: olcOverlay=accesslog,olcDatabase={1}hdb,cn=config\n"
17126
"objectClass: olcOverlayConfig\n"
17127
"objectClass: olcAccessLogConfig\n"
17128
"olcOverlay: accesslog\n"
17129
"olcAccessLogDB: cn=accesslog\n"
17130
"olcAccessLogOps: writes\n"
17131
"olcAccessLogSuccess: TRUE\n"
17132
"# scan the accesslog DB every day, and purge entries older than 7 days\n"
17133
"olcAccessLogPurge: 07+00:00 01+00:00\n"
17134
msgstr ""
17135
17136
#: serverguide/C/network-auth.xml:614(para)
17137
msgid ""
17138
"The <application>AppArmor</application> profile for "
17139
"<application>slapd</application> will need to be adjusted for the accesslog "
17140
"database location. Edit <filename>/etc/apparmor.d/usr.sbin.slapd</filename> "
17141
"adding:"
17142
msgstr ""
17143
17144
#: serverguide/C/network-auth.xml:619(programlisting)
17145
#, no-wrap
17146
msgid ""
17147
"\n"
17148
" /var/lib/ldap/accesslog/ r,\n"
17149
" /var/lib/ldap/accesslog/** rwk,\n"
17150
msgstr ""
17151
17152
#: serverguide/C/network-auth.xml:624(para)
17153
msgid ""
17154
"Then create the directory, reload the <application>apparmor</application> "
17155
"profile, and copy the <filename>DB_CONFIG</filename> file:"
17156
msgstr ""
17157
17158
#: serverguide/C/network-auth.xml:630(command)
17159
msgid "sudo -u openldap mkdir /var/lib/ldap/accesslog"
17160
msgstr ""
17161
17162
#: serverguide/C/network-auth.xml:631(command)
17163
msgid "sudo -u openldap cp /var/lib/ldap/DB_CONFIG /var/lib/ldap/accesslog/"
17164
msgstr ""
17165
17166
#: serverguide/C/network-auth.xml:636(para)
17167
msgid ""
17168
"Using the <emphasis>-u openldap</emphasis> option with the "
17169
"<application>sudo</application> commands above removes the need to adjust "
17170
"permissions for the new directory later."
17171
msgstr ""
17172
17173
#: serverguide/C/network-auth.xml:645(para)
17174
msgid ""
17175
"Edit the file and change the <emphasis>olcRootDN</emphasis> to match your "
17176
"directory:"
17177
msgstr ""
17178
17179
#: serverguide/C/network-auth.xml:649(programlisting)
17180
#, no-wrap
17181
msgid ""
17182
"\n"
17183
"olcRootDN: cn=admin,dc=example,dc=com\n"
17184
msgstr ""
17185
17186
#: serverguide/C/network-auth.xml:657(para)
17187
msgid ""
17188
"Next, add the LDIF file using the <application>ldapadd</application> utility:"
17189
msgstr ""
17190
17191
#: serverguide/C/network-auth.xml:662(command)
17192
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f provider_sync.ldif"
17193
msgstr ""
17194
17195
#: serverguide/C/network-auth.xml:669(para)
17196
msgid "Restart <application>slapd</application>:"
17197
msgstr ""
17198
17199
#: serverguide/C/network-auth.xml:674(command) serverguide/C/network-auth.xml:1049(command) serverguide/C/network-auth.xml:1236(command)
17200
msgid "sudo /etc/init.d/slapd restart"
17201
msgstr "sudo /etc/init.d/slapd restart"
17202
17203
#: serverguide/C/network-auth.xml:680(para)
17204
msgid ""
17205
"The <emphasis>Provider</emphasis> server is now configured, and it is time "
17206
"to configure a <emphasis>Consumer</emphasis> server."
17207
msgstr ""
17208
17209
#: serverguide/C/network-auth.xml:687(title)
17210
msgid "Consumer Configuration"
17211
msgstr ""
17212
17213
#: serverguide/C/network-auth.xml:692(para)
17214
msgid ""
17215
"On the <emphasis>Consumer</emphasis> server configure it the same as the "
17216
"<emphasis>Provider</emphasis> except for the <emphasis>Syncrepl</emphasis> "
17217
"configuration steps."
17218
msgstr ""
17219
17220
#: serverguide/C/network-auth.xml:697(para)
17221
msgid "Add the additional schema files:"
17222
msgstr ""
17223
17224
#: serverguide/C/network-auth.xml:707(para)
17225
msgid ""
17226
"Also, create, or copy from the provider server, the "
17227
"<filename>backend.example.com.ldif</filename>"
17228
msgstr ""
17229
17230
#: serverguide/C/network-auth.xml:711(programlisting)
17231
#, no-wrap
17232
msgid ""
17233
"\n"
17234
"# Load dynamic backend modules\n"
17235
"dn: cn=module,cn=config\n"
17236
"objectClass: olcModuleList\n"
17237
"cn: module\n"
17238
"olcModulepath: /usr/lib/ldap\n"
17239
"olcModuleload: back_hdb\n"
17240
"\n"
17241
"# Database settings\n"
17242
"dn: olcDatabase=hdb,cn=config\n"
17243
"objectClass: olcDatabaseConfig\n"
17244
"objectClass: olcHdbConfig\n"
17245
"olcDatabase: {1}hdb\n"
17246
"olcSuffix: dc=example,dc=com\n"
17247
"olcDbDirectory: /var/lib/ldap\n"
17248
"olcRootDN: cn=admin,dc=example,dc=com\n"
17249
"olcRootPW: secret\n"
17250
"olcDbConfig: set_cachesize 0 2097152 0\n"
17251
"olcDbConfig: set_lk_max_objects 1500\n"
17252
"olcDbConfig: set_lk_max_locks 1500\n"
17253
"olcDbConfig: set_lk_max_lockers 1500\n"
17254
"olcDbIndex: objectClass eq\n"
17255
"olcLastMod: TRUE\n"
17256
"olcDbCheckpoint: 512 30\n"
17257
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
17258
"by anonymous auth by self write by * none\n"
17259
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
17260
"olcAccess: to dn.base=\"\" by * read\n"
17261
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
17262
msgstr ""
17263
17264
#: serverguide/C/network-auth.xml:741(para)
17265
msgid "And add the LDIF by entering:"
17266
msgstr "And add the LDIF by entering:"
17267
17268
#: serverguide/C/network-auth.xml:752(para)
17269
msgid ""
17270
"Do the same with the <filename>frontend.example.com.ldif</filename> file "
17271
"listed above, and add it:"
17272
msgstr ""
17273
17274
#: serverguide/C/network-auth.xml:760(para)
17275
msgid ""
17276
"The two severs should now have the same configuration except for the "
17277
"<emphasis>Syncrepl</emphasis> options."
17278
msgstr ""
17279
17280
#: serverguide/C/network-auth.xml:768(para)
17281
msgid ""
17282
"Now create a file named <filename>consumer_sync.ldif</filename> containing:"
17283
msgstr ""
17284
17285
#: serverguide/C/network-auth.xml:772(programlisting)
17286
#, no-wrap
17287
msgid ""
17288
"\n"
17289
"#Load the syncprov module.\n"
17290
"dn: cn=module{0},cn=config\n"
17291
"changetype: modify\n"
17292
"add: olcModuleLoad\n"
17293
"olcModuleLoad: syncprov\n"
17294
"\n"
17295
"# syncrepl specific indices\n"
17296
"dn: olcDatabase={1}hdb,cn=config\n"
17297
"changetype: modify\n"
17298
"add: olcDbIndex\n"
17299
"olcDbIndex: entryUUID eq\n"
17300
"-\n"
17301
"add: olcSyncRepl\n"
17302
"olcSyncRepl: rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
17303
"binddn=\"cn=admin,dc=example,dc=com\" \n"
17304
" credentials=secret searchbase=\"dc=example,dc=com\" "
17305
"logbase=\"cn=accesslog\" \n"
17306
" logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" "
17307
"schemachecking=on \n"
17308
" type=refreshAndPersist retry=\"60 +\" syncdata=accesslog\n"
17309
"-\n"
17310
"add: olcUpdateRef\n"
17311
"olcUpdateRef: ldap://ldap01.example.com\n"
17312
msgstr ""
17313
17314
#: serverguide/C/network-auth.xml:795(para)
17315
msgid "You will probably want to change the following attributes:"
17316
msgstr ""
17317
17318
#: serverguide/C/network-auth.xml:800(para)
17319
msgid "<emphasis>ldap01.example.com</emphasis> to your server's hostname."
17320
msgstr ""
17321
17322
#: serverguide/C/network-auth.xml:801(emphasis)
17323
msgid "binddn"
17324
msgstr ""
17325
17326
#: serverguide/C/network-auth.xml:802(emphasis)
17327
msgid "credentials"
17328
msgstr ""
17329
17330
#: serverguide/C/network-auth.xml:803(emphasis)
17331
msgid "searchbase"
17332
msgstr ""
17333
17334
#: serverguide/C/network-auth.xml:804(emphasis)
17335
msgid "olcUpdateRef:"
17336
msgstr ""
17337
17338
#: serverguide/C/network-auth.xml:810(para)
17339
msgid "Add the LDIF file to the configuration tree:"
17340
msgstr ""
17341
17342
#: serverguide/C/network-auth.xml:815(command)
17343
msgid "sudo ldapadd -c -Y EXTERNAL -H ldapi:/// -f consumer_sync.ldif"
17344
msgstr ""
17345
17346
#: serverguide/C/network-auth.xml:821(para)
17347
msgid ""
17348
"The frontend database should now sync between servers. You can add "
17349
"additional servers using the steps above as the need arises."
17350
msgstr ""
17351
17352
#: serverguide/C/network-auth.xml:831(programlisting)
17353
#, no-wrap
17354
msgid "127.0.0.1\tldap01.example.com ldap01"
17355
msgstr "127.0.0.1\tldap01.example.com ldap01"
17356
17357
#: serverguide/C/network-auth.xml:827(para)
17358
msgid ""
17359
"The <application>slapd</application> daemon will send log information to "
17360
"<filename>/var/log/syslog</filename> by default. So if all does "
17361
"<emphasis>not</emphasis> go well check there for errors and other "
17362
"troubleshooting information. Also, be sure that each server knows it's Fully "
17363
"Qualified Domain Name (FQDN). This is configured in "
17364
"<filename>/etc/hosts</filename> with a line similar to: <placeholder-1/>."
17365
msgstr ""
17366
"The <application>slapd</application> daemon will send log information to "
17367
"<filename>/var/log/syslog</filename> by default. So if all does "
17368
"<emphasis>not</emphasis> go well check there for errors and other "
17369
"troubleshooting information. Also, be sure that each server knows it's Fully "
17370
"Qualified Domain Name (FQDN). This is configured in "
17371
"<filename>/etc/hosts</filename> with a line similar to: <placeholder-1/>."
17372
17373
#: serverguide/C/network-auth.xml:839(title)
17374
msgid "Setting up ACL"
17375
msgstr "Setting up ACL"
17376
17377
#: serverguide/C/network-auth.xml:841(para)
17378
msgid ""
17379
"Authentication requires access to the password field, that should be not "
17380
"accessible by default. Also, in order for users to change their own "
17381
"password, using <command>passwd</command> or other utilities, "
17382
"<emphasis>shadowLastChange</emphasis> needs to be accessible once a user has "
17383
"authenticated."
17384
msgstr ""
17385
"Authentication requires access to the password field, that should be not "
17386
"accessible by default. Also, in order for users to change their own "
17387
"password, using <command>passwd</command> or other utilities, "
17388
"<emphasis>shadowLastChange</emphasis> needs to be accessible once a user has "
17389
"authenticated."
17390
17391
#: serverguide/C/network-auth.xml:848(para)
17392
msgid ""
17393
"To view the Access Control List (ACL) for the <emphasis>cn=config</emphasis> "
17394
"tree, use the <application>ldapsearch</application> utility:"
17395
msgstr ""
17396
17397
#: serverguide/C/network-auth.xml:854(command)
17398
msgid ""
17399
"sudo ldapsearch -c -Y EXTERNAL -H ldapi:/// -LLL -b cn=config "
17400
"olcDatabase=config olcAccess"
17401
msgstr ""
17402
17403
#: serverguide/C/network-auth.xml:858(computeroutput)
17404
#, no-wrap
17405
msgid ""
17406
"SASL/EXTERNAL authentication started\n"
17407
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
17408
"SASL SSF: 0\n"
17409
"dn: olcDatabase={0}config,cn=config\n"
17410
"olcAccess: {0}to * by "
17411
"dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external\n"
17412
" ,cn=auth manage by * break\n"
17413
msgstr ""
17414
17415
#: serverguide/C/network-auth.xml:867(para)
17416
msgid "To see the ACL for the frontend tree enter:"
17417
msgstr ""
17418
17419
#: serverguide/C/network-auth.xml:872(command)
17420
msgid ""
17421
"sudo ldapsearch -c -Y EXTERNAL -H ldapi:/// -LLL -b cn=config "
17422
"olcDatabase={1}hdb olcAccess"
17423
msgstr ""
17424
17425
#: serverguide/C/network-auth.xml:878(title)
17426
msgid "TLS and SSL"
17427
msgstr "TLS and SSL"
17428
17429
#: serverguide/C/network-auth.xml:880(para)
17430
msgid ""
17431
"When authenticating to an OpenLDAP server it is best to do so using an "
17432
"encrypted session. This can be accomplished using Transport Layer Security "
17433
"(TLS) and/or Secure Sockets Layer (SSL)."
17434
msgstr ""
17435
"When authenticating to an OpenLDAP server it is best to do so using an "
17436
"encrypted session. This can be accomplished using Transport Layer Security "
17437
"(TLS) and/or Secure Sockets Layer (SSL)."
17438
17439
#: serverguide/C/network-auth.xml:885(para)
17440
msgid ""
17441
"The first step in the process is to obtain or create a "
17442
"<emphasis>certificate</emphasis>. Because <application>slapd</application> "
17443
"is compiled using the <application>gnutls</application> library, the "
17444
"<application>certtool</application> utility will be used to create "
17445
"certificates."
17446
msgstr ""
17447
17448
#: serverguide/C/network-auth.xml:894(para)
17449
msgid ""
17450
"First, install <application>gnutls-bin</application> by entering the "
17451
"following in a terminal:"
17452
msgstr ""
17453
17454
#: serverguide/C/network-auth.xml:899(command)
17455
msgid "sudo apt-get install gnutls-bin"
17456
msgstr ""
17457
17458
#: serverguide/C/network-auth.xml:905(para)
17459
msgid ""
17460
"Next, create a private key for the <emphasis>Certificate "
17461
"Authority</emphasis> (CA):"
17462
msgstr ""
17463
17464
#: serverguide/C/network-auth.xml:910(command)
17465
msgid ""
17466
"sudo sh -c \"certtool --generate-privkey > /etc/ssl/private/cakey.pem\""
17467
msgstr ""
17468
17469
#: serverguide/C/network-auth.xml:916(para)
17470
msgid ""
17471
"Create a <filename>/etc/ssl/ca.info</filename> details file to self-sign the "
17472
"CA certificate containing:"
17473
msgstr ""
17474
17475
#: serverguide/C/network-auth.xml:920(programlisting)
17476
#, no-wrap
17477
msgid ""
17478
"\n"
17479
"cn = Example Company\n"
17480
"ca\n"
17481
"cert_signing_key\n"
17482
msgstr ""
17483
17484
#: serverguide/C/network-auth.xml:929(para)
17485
msgid "Now create the self-signed CA certificate:"
17486
msgstr ""
17487
17488
#: serverguide/C/network-auth.xml:934(command)
17489
msgid ""
17490
"sudo certtool --generate-self-signed --load-privkey "
17491
"/etc/ssl/private/cakey.pem \\ --template /etc/ssl/ca.info --outfile "
17492
"/etc/ssl/certs/cacert.pem"
17493
msgstr ""
17494
17495
#: serverguide/C/network-auth.xml:941(para)
17496
msgid "Make a private key for the server:"
17497
msgstr ""
17498
17499
#: serverguide/C/network-auth.xml:946(command)
17500
msgid ""
17501
"sudo sh -c \"certtool --generate-privkey > "
17502
"/etc/ssl/private/ldap01_slapd_key.pem\""
17503
msgstr ""
17504
17505
#: serverguide/C/network-auth.xml:950(para)
17506
msgid ""
17507
"Replace <emphasis>ldap01</emphasis> in the filename with your server's "
17508
"hostname. Naming the certificate and key for the host and service that will "
17509
"be using them will help keep filenames and paths straight."
17510
msgstr ""
17511
17512
#: serverguide/C/network-auth.xml:959(para)
17513
msgid ""
17514
"To sign the server's certificate with the CA, create the "
17515
"<filename>/etc/ssl/ldap01.info</filename> info file containing:"
17516
msgstr ""
17517
17518
#: serverguide/C/network-auth.xml:963(programlisting)
17519
#, no-wrap
17520
msgid ""
17521
"\n"
17522
"organization = Example Company\n"
17523
"cn = ldap01.example.com\n"
17524
"tls_www_server\n"
17525
"encryption_key\n"
17526
"signing_key\n"
17527
msgstr ""
17528
17529
#: serverguide/C/network-auth.xml:974(para)
17530
msgid "Create the server's certificate:"
17531
msgstr ""
17532
17533
#: serverguide/C/network-auth.xml:979(command)
17534
msgid ""
17535
"sudo certtool --generate-certificate --load-privkey /etc/ssl/private/x01-"
17536
"test_slapd_key.pem \\ --load-ca-certificate /etc/ssl/certs/cacert.pem --load-"
17537
"ca-privkey /etc/ssl/private/cakey.pem \\ --template /etc/ssl/x01-test.info --"
17538
"outfile /etc/ssl/certs/x01-test_slapd_cert.pem"
17539
msgstr ""
17540
17541
#: serverguide/C/network-auth.xml:987(para)
17542
msgid ""
17543
"Once you have a certificate, key, and CA cert installed, use "
17544
"<application>ldapmodify</application> to add the new configuration options:"
17545
msgstr ""
17546
"Once you have a certificate, key, and CA cert installed, use "
17547
"<application>ldapmodify</application> to add the new configuration options:"
17548
17549
#: serverguide/C/network-auth.xml:998(userinput)
17550
#, no-wrap
17551
msgid ""
17552
"dn: cn=config\n"
17553
"add: olcTLSCACertificateFile\n"
17554
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
17555
"-\n"
17556
"add: olcTLSCertificateFile\n"
17557
"olcTLSCertificateFile: /etc/ssl/certs/ldap01_slapd_cert.pem\n"
17558
"-\n"
17559
"add: olcTLSCertificateKeyFile\n"
17560
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap01_slapd_key.pem"
17561
msgstr ""
17562
17563
#: serverguide/C/network-auth.xml:997(computeroutput) serverguide/C/network-auth.xml:1168(computeroutput)
17564
#, no-wrap
17565
msgid ""
17566
"Enter LDAP Password:\n"
17567
"<placeholder-1/>\n"
17568
"\n"
17569
"modifying entry \"cn=config\"\n"
17570
msgstr ""
17571
"Enter LDAP Password:\n"
17572
"<placeholder-1/>\n"
17573
"\n"
17574
"modifying entry \"cn=config\"\n"
17575
17576
#: serverguide/C/network-auth.xml:1013(para)
17577
msgid ""
17578
"Adjust the <filename>ldap01_slapd_cert.pem</filename>, "
17579
"<filename>ldap01_slapd_key.pem</filename>, and "
17580
"<filename>cacert.pem</filename> names if yours are different."
17581
msgstr ""
17582
17583
#: serverguide/C/network-auth.xml:1019(para)
17584
msgid ""
17585
"Next, edit <filename>/etc/default/slapd</filename> uncomment the "
17586
"<emphasis>SLAPD_SERVICES</emphasis> option:"
17587
msgstr ""
17588
"Next, edit <filename>/etc/default/slapd</filename> uncomment the "
17589
"<emphasis>SLAPD_SERVICES</emphasis> option:"
17590
17591
#: serverguide/C/network-auth.xml:1023(programlisting)
17592
#, no-wrap
17593
msgid ""
17594
"\n"
17595
"SLAPD_SERVICES=\"ldap:/// ldapi:/// ldaps:///\"\n"
17596
msgstr ""
17597
"\n"
17598
"SLAPD_SERVICES=\"ldap:/// ldapi:/// ldaps:///\"\n"
17599
17600
#: serverguide/C/network-auth.xml:1027(para)
17601
msgid ""
17602
"Now the <emphasis>openldap</emphasis> user needs access to the certificate:"
17603
msgstr ""
17604
"Now the <emphasis>openldap</emphasis> user needs access to the certificate:"
17605
17606
#: serverguide/C/network-auth.xml:1032(command)
17607
msgid "sudo adduser openldap ssl-cert"
17608
msgstr "sudo adduser openldap ssl-cert"
17609
17610
#: serverguide/C/network-auth.xml:1033(command)
17611
msgid "sudo chgrp ssl-cert /etc/ssl/private/ldap01_slapd_key.pem"
17612
msgstr ""
17613
17614
#: serverguide/C/network-auth.xml:1034(command)
17615
msgid "sudo chmod g+r /etc/ssl/private/ldap01_slapd_key.pem"
17616
msgstr ""
17617
17618
#: serverguide/C/network-auth.xml:1038(para)
17619
msgid ""
17620
"If the <filename role=\"directory\">/etc/ssl/private</filename> and "
17621
"<filename>/etc/ssl/private/server.key</filename> have different permissions, "
17622
"adjust the commands appropriately."
17623
msgstr ""
17624
"If the <filename role=\"directory\">/etc/ssl/private</filename> and "
17625
"<filename>/etc/ssl/private/server.key</filename> have different permissions, "
17626
"adjust the commands appropriately."
17627
17628
#: serverguide/C/network-auth.xml:1044(para)
17629
msgid "Finally, restart <application>slapd</application>:"
17630
msgstr "Finally, restart <application>slapd</application>:"
17631
17632
#: serverguide/C/network-auth.xml:1052(para)
17633
msgid ""
17634
"The <application>slapd</application> daemon should now be listening for "
17635
"LDAPS connections and be able to use STARTTLS during authentication."
17636
msgstr ""
17637
"The <application>slapd</application> daemon should now be listening for "
17638
"LDAPS connections and be able to use STARTTLS during authentication."
17639
17640
#: serverguide/C/network-auth.xml:1058(para)
17641
msgid ""
17642
"If you run into troubles with the server not starting, check the "
17643
"/var/log/syslog. If you see errors like main: TLS init def ctx failed: -1, "
17644
"it is likely there is a configuration problem. Check that the certificate is "
17645
"signed by the authority from in the files configured, and that the ssl-cert "
17646
"group has read permissions on the private key."
17647
msgstr ""
17648
"If you run into troubles with the server not starting, check the "
17649
"/var/log/syslog. If you see errors like main: TLS init def ctx failed: -1, "
17650
"it is likely there is a configuration problem. Check that the certificate is "
17651
"signed by the authority from in the files configured, and that the ssl-cert "
17652
"group has read permissions on the private key."
17653
17654
#: serverguide/C/network-auth.xml:1070(title)
17655
msgid "TLS Replication"
17656
msgstr "TLS Replication"
17657
17658
#: serverguide/C/network-auth.xml:1072(para)
17659
msgid ""
17660
"If you have setup <application>Syncrepl</application> between servers, it is "
17661
"prudent to encrypt the replication traffic using <emphasis>Transport Layer "
17662
"Security (TLS)</emphasis>. For details on setting up replication see <xref "
17663
"linkend=\"openldap-server-replication\"/>."
17664
msgstr ""
17665
"If you have setup <application>Syncrepl</application> between servers, it is "
17666
"prudent to encrypt the replication traffic using <emphasis>Transport Layer "
17667
"Security (TLS)</emphasis>. For details on setting up replication see <xref "
17668
"linkend=\"openldap-server-replication\"/>."
17669
17670
#: serverguide/C/network-auth.xml:1078(para)
17671
msgid ""
17672
"Assuming you have followed the above instructions and created a CA "
17673
"certificate and server certificate on the <emphasis>Provider</emphasis> "
17674
"server. Follow the following instructions to create a certificate and key "
17675
"for the <emphasis>Consumer</emphasis> server."
17676
msgstr ""
17677
17678
#: serverguide/C/network-auth.xml:1087(para)
17679
msgid "Create a new key for the Consumer server:"
17680
msgstr ""
17681
17682
#: serverguide/C/network-auth.xml:1092(command)
17683
msgid "mkdir ldap02-ssl"
17684
msgstr ""
17685
17686
#: serverguide/C/network-auth.xml:1093(command)
17687
msgid "cd ldap02-ssl"
17688
msgstr ""
17689
17690
#: serverguide/C/network-auth.xml:1094(command)
17691
msgid "certtool --generate-privkey > ldap02_slapd_key.pem"
17692
msgstr ""
17693
17694
#: serverguide/C/network-auth.xml:1098(para)
17695
msgid ""
17696
"Creating a new directory is not strictly necessary, but it will help keep "
17697
"things organized and make it easier to copy the files to the Consumer server."
17698
msgstr ""
17699
17700
#: serverguide/C/network-auth.xml:1107(para)
17701
msgid ""
17702
"Next, create an info file, <filename>ldap02.info</filename> for the Consumer "
17703
"server, changing the attributes to match your locality and server:"
17704
msgstr ""
17705
17706
#: serverguide/C/network-auth.xml:1112(programlisting)
17707
#, no-wrap
17708
msgid ""
17709
"\n"
17710
"country = US\n"
17711
"state = North Carolina\n"
17712
"locality = Winston-Salem\n"
17713
"organization = Example Company\n"
17714
"cn = ldap02.salem.edu\n"
17715
"tls_www_client\n"
17716
"encryption_key\n"
17717
"signing_key\n"
17718
msgstr ""
17719
17720
#: serverguide/C/network-auth.xml:1126(para)
17721
msgid "Create the certificate:"
17722
msgstr ""
17723
17724
#: serverguide/C/network-auth.xml:1131(command)
17725
msgid ""
17726
"sudo certtool --generate-certificate --load-privkey ldap02_slapd_key.pem \\ -"
17727
"-load-ca-certificate /etc/ssl/certs/cacert.pem --load-ca-privkey "
17728
"/etc/ssl/private/cakey.pem \\ --template ldap02.info --outfile "
17729
"ldap02_slapd_cert.pem"
17730
msgstr ""
17731
17732
#: serverguide/C/network-auth.xml:1139(para)
17733
msgid "Copy the <filename>cacert.pem</filename> to the directory:"
17734
msgstr ""
17735
17736
#: serverguide/C/network-auth.xml:1144(command)
17737
msgid "cp /etc/ssl/certs/cacert.pem ."
17738
msgstr ""
17739
17740
#: serverguide/C/network-auth.xml:1150(para)
17741
msgid ""
17742
"The only thing left is to copy the <filename>ldap02-ssl</filename> directory "
17743
"to the Consumer server, then copy <filename>ldap02_slapd_cert.pem</filename> "
17744
"and <filename>cacert.pem</filename> to <filename>/etc/ssl/certs</filename>, "
17745
"and copy <filename>ldap02_slapd_key.pem</filename> to "
17746
"<filename>/etc/ssl/private</filename>."
17747
msgstr ""
17748
17749
#: serverguide/C/network-auth.xml:1159(para)
17750
msgid ""
17751
"Once the files are in place adjust the <emphasis>cn=config</emphasis> tree "
17752
"by entering:"
17753
msgstr ""
17754
17755
#: serverguide/C/network-auth.xml:1169(userinput)
17756
#, no-wrap
17757
msgid ""
17758
"dn: cn=config\n"
17759
"add: olcTLSCACertificateFile\n"
17760
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
17761
"-\n"
17762
"add: olcTLSCertificateFile\n"
17763
"olcTLSCertificateFile: /etc/ssl/certs/ldap02_slapd_cert.pem\n"
17764
"-\n"
17765
"add: olcTLSCertificateKeyFile\n"
17766
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap02_slapd_key.pem"
17767
msgstr ""
17768
17769
#: serverguide/C/network-auth.xml:1186(para)
17770
msgid ""
17771
"As with the Provider you can now edit "
17772
"<filename>/etc/default/slapd</filename> and add the "
17773
"<emphasis>ldaps:///</emphasis> parameter to the "
17774
"<emphasis>SLAPD_SERVICES</emphasis> option."
17775
msgstr ""
17776
17777
#: serverguide/C/network-auth.xml:1194(para)
17778
msgid ""
17779
"Now that <emphasis>TLS</emphasis> has been setup on each server, once again "
17780
"modify the <emphasis>Consumer</emphasis> server's "
17781
"<emphasis>cn=config</emphasis> tree by entering the following in a terminal:"
17782
msgstr ""
17783
17784
#: serverguide/C/network-auth.xml:1207(userinput)
17785
#, no-wrap
17786
msgid ""
17787
"\n"
17788
"dn: olcDatabase={1}hdb,cn=config\n"
17789
"replace: olcSyncrepl\n"
17790
"olcSyncrepl: {0}rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
17791
"binddn=\"cn=ad\n"
17792
" min,dc=example,dc=com\" credentials=secret searchbase=\"dc=example,dc=com\" "
17793
"logbas\n"
17794
" e=\"cn=accesslog\" "
17795
"logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" s\n"
17796
" chemachecking=on type=refreshAndPersist retry=\"60 +\" syncdata=accesslog "
17797
"starttls=yes"
17798
msgstr ""
17799
17800
#: serverguide/C/network-auth.xml:1204(computeroutput)
17801
#, no-wrap
17802
msgid ""
17803
"SASL/EXTERNAL authentication started\n"
17804
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
17805
"SASL SSF: 0\n"
17806
"<placeholder-1/>\n"
17807
"\n"
17808
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
17809
msgstr ""
17810
17811
#: serverguide/C/network-auth.xml:1219(para)
17812
msgid ""
17813
"If the LDAP server hostname does not match the Fully Qualified Domain Name "
17814
"(FQDN) in the certificate, you may have to edit "
17815
"<filename>/etc/ldap/ldap.conf</filename> and add the following TLS options:"
17816
msgstr ""
17817
"If the LDAP server hostname does not match the Fully Qualified Domain Name "
17818
"(FQDN) in the certificate, you may have to edit "
17819
"<filename>/etc/ldap/ldap.conf</filename> and add the following TLS options:"
17820
17821
#: serverguide/C/network-auth.xml:1224(programlisting)
17822
#, no-wrap
17823
msgid ""
17824
"\n"
17825
"TLS_CERT /etc/ssl/certs/ldap02_slapd_cert.pem\n"
17826
"TLS_KEY /etc/ssl/private/ldap02_slapd_key.pem\n"
17827
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
17828
msgstr ""
17829
17830
#: serverguide/C/network-auth.xml:1231(para)
17831
msgid ""
17832
"Finally, restart <application>slapd</application> on each of the servers:"
17833
msgstr ""
17834
"Finally, restart <application>slapd</application> on each of the servers:"
17835
17836
#: serverguide/C/network-auth.xml:1244(title)
17837
msgid "LDAP Authentication"
17838
msgstr "LDAP Authentication"
17839
17840
#: serverguide/C/network-auth.xml:1246(para)
17841
msgid ""
17842
"Once you have a working LDAP server, the <application>auth-client-"
17843
"config</application> and <application>libnss-ldap</application> packages "
17844
"take the pain out of configuring an Ubuntu client to authenticate using "
17845
"LDAP. To install the packages from, a terminal prompt enter:"
17846
msgstr ""
17847
"Once you have a working LDAP server, the <application>auth-client-"
17848
"config</application> and <application>libnss-ldap</application> packages "
17849
"take the pain out of configuring an Ubuntu client to authenticate using "
17850
"LDAP. To install the packages from, a terminal prompt enter:"
17851
17852
#: serverguide/C/network-auth.xml:1253(command)
17853
msgid "sudo apt-get install libnss-ldap"
17854
msgstr "sudo apt-get install libnss-ldap"
17855
17856
#: serverguide/C/network-auth.xml:1256(para)
17857
msgid ""
17858
"During the install a menu dialog will ask you connection details about your "
17859
"LDAP server."
17860
msgstr ""
17861
"During the install a menu dialogue will ask you connection details about "
17862
"your LDAP server."
17863
17864
#: serverguide/C/network-auth.xml:1260(para)
17865
msgid ""
17866
"If you make a mistake when entering your information you can execute the "
17867
"dialog again using:"
17868
msgstr ""
17869
"If you make a mistake when entering your information you can execute the "
17870
"dialogue again using:"
17871
17872
#: serverguide/C/network-auth.xml:1265(command)
17873
msgid "sudo dpkg-reconfigure ldap-auth-config"
17874
msgstr "sudo dpkg-reconfigure ldap-auth-config"
17875
17876
#: serverguide/C/network-auth.xml:1268(para)
17877
msgid ""
17878
"The results of the dialog can be seen in "
17879
"<filename>/etc/ldap.conf</filename>. If your server requires options not "
17880
"covered in the menu edit this file accordingly."
17881
msgstr ""
17882
"The results of the dialogue can be seen in "
17883
"<filename>/etc/ldap.conf</filename>. If your server requires options not "
17884
"covered in the menu edit this file accordingly."
17885
17886
#: serverguide/C/network-auth.xml:1273(para)
17887
msgid ""
17888
"Now that <application>libnss-ldap</application> is configured enable the "
17889
"<application>auth-client-config</application> LDAP profile by entering:"
17890
msgstr ""
17891
"Now that <application>libnss-ldap</application> is configured enable the "
17892
"<application>auth-client-config</application> LDAP profile by entering:"
17893
17894
#: serverguide/C/network-auth.xml:1279(command)
17895
msgid "sudo auth-client-config -t nss -p lac_ldap"
17896
msgstr "sudo auth-client-config -t nss -p lac_ldap"
17897
17898
#: serverguide/C/network-auth.xml:1284(para)
17899
msgid ""
17900
"<emphasis>-t:</emphasis> only modifies "
17901
"<filename>/etc/nsswitch.conf</filename>."
17902
msgstr ""
17903
"<emphasis>-t:</emphasis> only modifies "
17904
"<filename>/etc/nsswitch.conf</filename>."
17905
17906
#: serverguide/C/network-auth.xml:1289(para)
17907
msgid "<emphasis>-p:</emphasis> name of the profile to enable, disable, etc."
17908
msgstr ""
17909
"<emphasis>-p:</emphasis> name of the profile to enable, disable, etc."
17910
17911
#: serverguide/C/network-auth.xml:1294(para)
17912
msgid ""
17913
"<emphasis>lac_ldap:</emphasis> the <application>auth-client-"
17914
"config</application> profile that is part of the <application>ldap-auth-"
17915
"config</application> package."
17916
msgstr ""
17917
"<emphasis>lac_ldap:</emphasis> the <application>auth-client-"
17918
"config</application> profile that is part of the <application>ldap-auth-"
17919
"config</application> package."
17920
17921
#: serverguide/C/network-auth.xml:1301(para)
17922
msgid ""
17923
"Using the <application>pam-auth-update</application> utility, configure the "
17924
"system to use LDAP for authentication:"
17925
msgstr ""
17926
"Using the <application>pam-auth-update</application> utility, configure the "
17927
"system to use LDAP for authentication:"
17928
17929
#: serverguide/C/network-auth.xml:1306(command)
17930
msgid "sudo pam-auth-update"
17931
msgstr "sudo pam-auth-update"
17932
17933
#: serverguide/C/network-auth.xml:1309(para)
17934
msgid ""
17935
"From the <application>pam-auth-update</application> menu, choose LDAP and "
17936
"any other authentication mechanisms you need."
17937
msgstr ""
17938
"From the <application>pam-auth-update</application> menu, choose LDAP and "
17939
"any other authentication mechanisms you need."
17940
17941
#: serverguide/C/network-auth.xml:1313(para)
17942
msgid ""
17943
"You should now be able to login using user credentials stored in the LDAP "
17944
"directory."
17945
msgstr ""
17946
"You should now be able to login using user credentials stored in the LDAP "
17947
"directory."
17948
17949
#: serverguide/C/network-auth.xml:1318(para)
17950
msgid ""
17951
"If you are going to use LDAP to store Samba users you will need to configure "
17952
"the server to authenticate using LDAP. See <xref linkend=\"samba-ldap\"/> "
17953
"for details."
17954
msgstr ""
17955
"If you are going to use LDAP to store Samba users you will need to configure "
17956
"the server to authenticate using LDAP. See <xref linkend=\"samba-ldap\"/> "
17957
"for details."
17958
17959
#: serverguide/C/network-auth.xml:1326(title)
17960
msgid "User and Group Management"
17961
msgstr "User and Group Management"
17962
17963
#: serverguide/C/network-auth.xml:1328(para)
17964
msgid ""
17965
"The <application>ldap-utils</application> package comes with multiple "
17966
"utilities to manage the directory, but the long string of options needed, "
17967
"can make them a burden to use. The <application>ldapscripts</application> "
17968
"package contains configurable scripts to easily manage LDAP users and groups."
17969
msgstr ""
17970
"The <application>ldap-utils</application> package comes with multiple "
17971
"utilities to manage the directory, but the long string of options needed, "
17972
"can make them a burden to use. The <application>ldapscripts</application> "
17973
"package contains configurable scripts to easily manage LDAP users and groups."
17974
17975
#: serverguide/C/network-auth.xml:1334(para)
17976
msgid "To install the package, from a terminal enter:"
17977
msgstr "To install the package, from a terminal enter:"
17978
17979
#: serverguide/C/network-auth.xml:1339(command)
17980
msgid "sudo apt-get install ldapscripts"
17981
msgstr "sudo apt-get install ldapscripts"
17982
17983
#: serverguide/C/network-auth.xml:1342(para)
17984
msgid ""
17985
"Next, edit the config file "
17986
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> uncommenting and "
17987
"changing the following to match your environment:"
17988
msgstr ""
17989
"Next, edit the config file "
17990
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> uncommenting and "
17991
"changing the following to match your environment:"
17992
17993
#: serverguide/C/network-auth.xml:1347(programlisting)
17994
#, no-wrap
17995
msgid ""
17996
"\n"
17997
"SERVER=localhost\n"
17998
"BINDDN='cn=admin,dc=example,dc=com'\n"
17999
"BINDPWDFILE=\"/etc/ldapscripts/ldapscripts.passwd\"\n"
18000
"SUFFIX='dc=example,dc=com'\n"
18001
"GSUFFIX='ou=Groups'\n"
18002
"USUFFIX='ou=People'\n"
18003
"MSUFFIX='ou=Computers'\n"
18004
"GIDSTART=10000\n"
18005
"UIDSTART=10000\n"
18006
"MIDSTART=10000\n"
18007
msgstr ""
18008
"\n"
18009
"SERVER=localhost\n"
18010
"BINDDN='cn=admin,dc=example,dc=com'\n"
18011
"BINDPWDFILE=\"/etc/ldapscripts/ldapscripts.passwd\"\n"
18012
"SUFFIX='dc=example,dc=com'\n"
18013
"GSUFFIX='ou=Groups'\n"
18014
"USUFFIX='ou=People'\n"
18015
"MSUFFIX='ou=Computers'\n"
18016
"GIDSTART=10000\n"
18017
"UIDSTART=10000\n"
18018
"MIDSTART=10000\n"
18019
18020
#: serverguide/C/network-auth.xml:1360(para)
18021
msgid ""
18022
"Now, create the <filename>ldapscripts.passwd</filename> file to allow "
18023
"authenticated access to the directory:"
18024
msgstr ""
18025
"Now, create the <filename>ldapscripts.passwd</filename> file to allow "
18026
"authenticated access to the directory:"
18027
18028
#: serverguide/C/network-auth.xml:1365(command)
18029
msgid ""
18030
"sudo sh -c \"echo -n 'secret' > /etc/ldapscripts/ldapscripts.passwd\""
18031
msgstr ""
18032
"sudo sh -c \"echo -n 'secret' > /etc/ldapscripts/ldapscripts.passwd\""
18033
18034
#: serverguide/C/network-auth.xml:1366(command)
18035
msgid "sudo chmod 400 /etc/ldapscripts/ldapscripts.passwd"
18036
msgstr "sudo chmod 400 /etc/ldapscripts/ldapscripts.passwd"
18037
18038
#: serverguide/C/network-auth.xml:1370(para)
18039
msgid ""
18040
"Replace <quote>secret</quote> with the actual password for your LDAP admin "
18041
"user."
18042
msgstr ""
18043
"Replace <quote>secret</quote> with the actual password for your LDAP admin "
18044
"user."
18045
18046
#: serverguide/C/network-auth.xml:1375(para)
18047
msgid ""
18048
"The <application>ldapscripts</application> are now ready to help manage your "
18049
"directory. The following are some examples of how to use the scripts:"
18050
msgstr ""
18051
"The <application>ldapscripts</application> are now ready to help manage your "
18052
"directory. The following are some examples of how to use the scripts:"
18053
18054
#: serverguide/C/network-auth.xml:1382(para)
18055
msgid "Create a new user:"
18056
msgstr "Create a new user:"
18057
18058
#: serverguide/C/network-auth.xml:1386(command)
18059
msgid "sudo ldapadduser george example"
18060
msgstr "sudo ldapadduser george example"
18061
18062
#: serverguide/C/network-auth.xml:1388(para)
18063
msgid ""
18064
"This will create a user with uid <emphasis role=\"italic\">george</emphasis> "
18065
"and set the user's primary group (gid) to <emphasis "
18066
"role=\"italic\">example</emphasis>"
18067
msgstr ""
18068
"This will create a user with uid <emphasis role=\"italic\">george</emphasis> "
18069
"and set the user's primary group (gid) to <emphasis "
18070
"role=\"italic\">example</emphasis>"
18071
18072
#: serverguide/C/network-auth.xml:1394(para)
18073
msgid "Change a user's password:"
18074
msgstr "Change a user's password:"
18075
18076
#: serverguide/C/network-auth.xml:1398(command)
18077
msgid "sudo ldapsetpasswd george"
18078
msgstr "sudo ldapsetpasswd george"
18079
18080
#: serverguide/C/network-auth.xml:1399(computeroutput)
18081
#, no-wrap
18082
msgid "Changing password for user uid=george,ou=People,dc=example,dc=com"
18083
msgstr "Changing password for user uid=george,ou=People,dc=example,dc=com"
18084
18085
#: serverguide/C/network-auth.xml:1400(userinput)
18086
#, no-wrap
18087
msgid "New Password: "
18088
msgstr "New Password: "
18089
18090
#: serverguide/C/network-auth.xml:1401(userinput)
18091
#, no-wrap
18092
msgid "New Password (verify): "
18093
msgstr "New Password (verify): "
18094
18095
#: serverguide/C/network-auth.xml:1405(para)
18096
msgid "Delete a user:"
18097
msgstr "Delete a user:"
18098
18099
#: serverguide/C/network-auth.xml:1409(command)
18100
msgid "sudo ldapdeleteuser george"
18101
msgstr "sudo ldapdeleteuser george"
18102
18103
#: serverguide/C/network-auth.xml:1414(para)
18104
msgid "Add a group:"
18105
msgstr "Add a group:"
18106
18107
#: serverguide/C/network-auth.xml:1418(command)
18108
msgid "sudo ldapaddgroup qa"
18109
msgstr "sudo ldapaddgroup qa"
18110
18111
#: serverguide/C/network-auth.xml:1422(para)
18112
msgid "Delete a group:"
18113
msgstr "Delete a group:"
18114
18115
#: serverguide/C/network-auth.xml:1426(command)
18116
msgid "sudo ldapdeletegroup qa"
18117
msgstr "sudo ldapdeletegroup qa"
18118
18119
#: serverguide/C/network-auth.xml:1430(para)
18120
msgid "Add a user to a group:"
18121
msgstr "Add a user to a group:"
18122
18123
#: serverguide/C/network-auth.xml:1434(command)
18124
msgid "sudo ldapaddusertogroup george qa"
18125
msgstr "sudo ldapaddusertogroup george qa"
18126
18127
#: serverguide/C/network-auth.xml:1436(para)
18128
msgid ""
18129
"You should now see a <emphasis>memberUid</emphasis> attribute for the "
18130
"<emphasis role=\"italic\">qa</emphasis> group with a value of <emphasis "
18131
"role=\"italic\">george</emphasis>."
18132
msgstr ""
18133
"You should now see a <emphasis>memberUid</emphasis> attribute for the "
18134
"<emphasis role=\"italic\">qa</emphasis> group with a value of <emphasis "
18135
"role=\"italic\">george</emphasis>."
18136
18137
#: serverguide/C/network-auth.xml:1442(para)
18138
msgid "Remove a user from a group:"
18139
msgstr "Remove a user from a group:"
18140
18141
#: serverguide/C/network-auth.xml:1446(command)
18142
msgid "sudo ldapdeleteuserfromgroup george qa"
18143
msgstr "sudo ldapdeleteuserfromgroup george qa"
18144
18145
#: serverguide/C/network-auth.xml:1448(para)
18146
msgid ""
18147
"The <emphasis>memberUid</emphasis> attribute should now be removed from the "
18148
"<emphasis role=\"italic\">qa</emphasis> group."
18149
msgstr ""
18150
"The <emphasis>memberUid</emphasis> attribute should now be removed from the "
18151
"<emphasis role=\"italic\">qa</emphasis> group."
18152
18153
#: serverguide/C/network-auth.xml:1454(para)
18154
msgid ""
18155
"The <application>ldapmodifyuser</application> script allows you to add, "
18156
"remove, or replace a user's attributes. The script uses the same syntax as "
18157
"the <application>ldapmodify</application> utility. For example:"
18158
msgstr ""
18159
"The <application>ldapmodifyuser</application> script allows you to add, "
18160
"remove, or replace a user's attributes. The script uses the same syntax as "
18161
"the <application>ldapmodify</application> utility. For example:"
18162
18163
#: serverguide/C/network-auth.xml:1459(command)
18164
msgid "sudo ldapmodifyuser george"
18165
msgstr "sudo ldapmodifyuser george"
18166
18167
#: serverguide/C/network-auth.xml:1460(computeroutput)
18168
#, no-wrap
18169
msgid ""
18170
"# About to modify the following entry :\n"
18171
"dn: uid=george,ou=People,dc=example,dc=com\n"
18172
"objectClass: account\n"
18173
"objectClass: posixAccount\n"
18174
"cn: george\n"
18175
"uid: george\n"
18176
"uidNumber: 1001\n"
18177
"gidNumber: 1001\n"
18178
"homeDirectory: /home/george\n"
18179
"loginShell: /bin/bash\n"
18180
"gecos: george\n"
18181
"description: User account\n"
18182
"userPassword:: e1NTSEF9eXFsTFcyWlhwWkF1eGUybVdFWHZKRzJVMjFTSG9vcHk=\n"
18183
"\n"
18184
"# Enter your modifications here, end with CTRL-D.\n"
18185
"dn: uid=george,ou=People,dc=example,dc=com"
18186
msgstr ""
18187
"# About to modify the following entry :\n"
18188
"dn: uid=george,ou=People,dc=example,dc=com\n"
18189
"objectClass: account\n"
18190
"objectClass: posixAccount\n"
18191
"cn: george\n"
18192
"uid: george\n"
18193
"uidNumber: 1001\n"
18194
"gidNumber: 1001\n"
18195
"homeDirectory: /home/george\n"
18196
"loginShell: /bin/bash\n"
18197
"gecos: george\n"
18198
"description: User account\n"
18199
"userPassword:: e1NTSEF9eXFsTFcyWlhwWkF1eGUybVdFWHZKRzJVMjFTSG9vcHk=\n"
18200
"\n"
18201
"# Enter your modifications here, end with CTRL-D.\n"
18202
"dn: uid=george,ou=People,dc=example,dc=com"
18203
18204
#: serverguide/C/network-auth.xml:1476(userinput)
18205
#, no-wrap
18206
msgid ""
18207
"replace: gecos\n"
18208
"gecos: George Carlin"
18209
msgstr ""
18210
"replace: gecos\n"
18211
"gecos: George Carlin"
18212
18213
#: serverguide/C/network-auth.xml:1479(para)
18214
msgid ""
18215
"The user's <emphasis>gecos</emphasis> should now be <quote>George "
18216
"Carlin</quote>."
18217
msgstr ""
18218
"The user's <emphasis>gecos</emphasis> should now be <quote>George "
18219
"Carlin</quote>."
18220
18221
#: serverguide/C/network-auth.xml:1484(para)
18222
msgid ""
18223
"Another great feature of <application>ldapscripts</application>, is the "
18224
"template system. Templates allow you to customize the attributes of user, "
18225
"group, and machine objectes. For example, to enable the "
18226
"<emphasis>user</emphasis> template edit "
18227
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> changing:"
18228
msgstr ""
18229
"Another great feature of <application>ldapscripts</application>, is the "
18230
"template system. Templates allow you to customise the attributes of user, "
18231
"group, and machine objectes. For example, to enable the "
18232
"<emphasis>user</emphasis> template edit "
18233
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> changing:"
18234
18235
#: serverguide/C/network-auth.xml:1491(programlisting)
18236
#, no-wrap
18237
msgid ""
18238
"\n"
18239
"UTEMPLATE=\"/etc/ldapscripts/ldapadduser.template\"\n"
18240
msgstr ""
18241
"\n"
18242
"UTEMPLATE=\"/etc/ldapscripts/ldapadduser.template\"\n"
18243
18244
#: serverguide/C/network-auth.xml:1495(para)
18245
msgid ""
18246
"There are <emphasis role=\"italic\">sample</emphasis> templates in the "
18247
"<filename>/etc/ldapscripts</filename> directory. Copy or rename the "
18248
"<filename>ldapadduser.template.sample</filename> file to "
18249
"<filename>/etc/ldapscripts/ldapadduser.template</filename>:"
18250
msgstr ""
18251
"There are <emphasis role=\"italic\">sample</emphasis> templates in the "
18252
"<filename>/etc/ldapscripts</filename> directory. Copy or rename the "
18253
"<filename>ldapadduser.template.sample</filename> file to "
18254
"<filename>/etc/ldapscripts/ldapadduser.template</filename>:"
18255
18256
#: serverguide/C/network-auth.xml:1502(command)
18257
msgid ""
18258
"sudo cp /usr/share/doc/ldapscripts/examples/ldapadduser.template.sample "
18259
"/etc/ldapscripts/ldapadduser.template"
18260
msgstr ""
18261
18262
#: serverguide/C/network-auth.xml:1505(para)
18263
msgid ""
18264
"Edit the new template to add the desired attributes. The following will "
18265
"create new user's as with an <emphasis>objectClass</emphasis> of "
18266
"<emphasis>inetOrgPerson</emphasis>:"
18267
msgstr ""
18268
"Edit the new template to add the desired attributes. The following will "
18269
"create new user's as with an <emphasis>objectClass</emphasis> of "
18270
"<emphasis>inetOrgPerson</emphasis>:"
18271
18272
#: serverguide/C/network-auth.xml:1510(programlisting)
18273
#, no-wrap
18274
msgid ""
18275
"\n"
18276
"dn: uid=<user>,<usuffix>,<suffix>\n"
18277
"objectClass: inetOrgPerson\n"
18278
"objectClass: posixAccount\n"
18279
"cn: <user>\n"
18280
"sn: <ask>\n"
18281
"uid: <user>\n"
18282
"uidNumber: <uid>\n"
18283
"gidNumber: <gid>\n"
18284
"homeDirectory: <home>\n"
18285
"loginShell: <shell>\n"
18286
"gecos: <user>\n"
18287
"description: User account\n"
18288
"title: Employee\n"
18289
msgstr ""
18290
"\n"
18291
"dn: uid=<user>,<usuffix>,<suffix>\n"
18292
"objectClass: inetOrgPerson\n"
18293
"objectClass: posixAccount\n"
18294
"cn: <user>\n"
18295
"sn: <ask>\n"
18296
"uid: <user>\n"
18297
"uidNumber: <uid>\n"
18298
"gidNumber: <gid>\n"
18299
"homeDirectory: <home>\n"
18300
"loginShell: <shell>\n"
18301
"gecos: <user>\n"
18302
"description: User account\n"
18303
"title: Employee\n"
18304
18305
#: serverguide/C/network-auth.xml:1526(para)
18306
msgid ""
18307
"Notice the <emphasis><ask></emphasis> option used for the "
18308
"<emphasis>ssn</emphasis> value. Using <ask> will configure "
18309
"<application>ldapadduser</application> to prompt you for the attribute value "
18310
"during user creation."
18311
msgstr ""
18312
18313
#: serverguide/C/network-auth.xml:1534(para)
18314
msgid ""
18315
"There are more useful scripts in the package, to see a full list enter: "
18316
"<command>dpkg -L ldapscripts | grep bin</command>"
18317
msgstr ""
18318
"There are more useful scripts in the package, to see a full list enter: "
18319
"<command>dpkg -L ldapscripts | grep bin</command>"
18320
18321
#: serverguide/C/network-auth.xml:1543(para)
18322
msgid ""
18323
"The <ulink url=\"https://help.ubuntu.com/community/OpenLDAPServer\">OpenLDAP "
18324
"Ubuntu Wiki</ulink> page has more details."
18325
msgstr ""
18326
18327
#: serverguide/C/network-auth.xml:1548(para)
18328
msgid ""
18329
"For more information see <ulink url=\"http://www.openldap.org/\">OpenLDAP "
18330
"Home Page</ulink>"
18331
msgstr ""
18332
"For more information see <ulink url=\"http://www.openldap.org/\">OpenLDAP "
18333
"Home Page</ulink>"
18334
18335
#: serverguide/C/network-auth.xml:1553(para)
18336
msgid ""
18337
"Though starting to show it's age, a great source for in depth LDAP "
18338
"information is O'Reilly's <ulink "
18339
"url=\"http://www.oreilly.com/catalog/ldapsa/\">LDAP System "
18340
"Administration</ulink>"
18341
msgstr ""
18342
"Though starting to show it's age, a great source for in depth LDAP "
18343
"information is O'Reilly's <ulink "
18344
"url=\"http://www.oreilly.com/catalog/ldapsa/\">LDAP System "
18345
"Administration</ulink>"
18346
18347
#: serverguide/C/network-auth.xml:1559(para)
18348
msgid ""
18349
"Packt's <ulink url=\"http://www.packtpub.com/OpenLDAP-Developers-Server-Open-"
18350
"Source-Linux/book\">Mastering OpenLDAP</ulink> is a great reference covering "
18351
"newer versions of OpenLDAP."
18352
msgstr ""
18353
"Packt's <ulink url=\"http://www.packtpub.com/OpenLDAP-Developers-Server-Open-"
18354
"Source-Linux/book\">Mastering OpenLDAP</ulink> is a great reference covering "
18355
"newer versions of OpenLDAP."
18356
18357
#: serverguide/C/network-auth.xml:1565(para)
18358
msgid ""
18359
"For more information on <application>auth-client-config</application> see "
18360
"the man page: <command>man auth-client-config</command>."
18361
msgstr ""
18362
"For more information on <application>auth-client-config</application> see "
18363
"the man page: <command>man auth-client-config</command>."
18364
18365
#: serverguide/C/network-auth.xml:1570(para)
18366
msgid ""
18367
"For more details regarding the <application>ldapscripts</application> "
18368
"package see the man pages: <command>man ldapscripts</command>, <command>man "
18369
"ldapadduser</command>, <command>man ldapaddgroup</command>, etc."
18370
msgstr ""
18371
"For more details regarding the <application>ldapscripts</application> "
18372
"package see the man pages: <command>man ldapscripts</command>, <command>man "
18373
"ldapadduser</command>, <command>man ldapaddgroup</command>, etc."
18374
18375
#: serverguide/C/network-auth.xml:1580(title)
18376
msgid "Samba and LDAP"
18377
msgstr "Samba and LDAP"
18378
18379
#: serverguide/C/network-auth.xml:1582(para)
18380
msgid ""
18381
"This section covers configuring Samba to use LDAP for user, group, and "
18382
"machine account information and authentication. The assumption is, you "
18383
"already have a working OpenLDAP directory installed and the server is "
18384
"configured to use it for authentication. See <xref linkend=\"openldap-"
18385
"server\"/> and <xref linkend=\"openldap-auth-config\"/> for details on "
18386
"setting up OpenLDAP. For more information on installing and configuring "
18387
"Samba see <xref linkend=\"windows-networking\"/>."
18388
msgstr ""
18389
"This section covers configuring Samba to use LDAP for user, group, and "
18390
"machine account information and authentication. The assumption is, you "
18391
"already have a working OpenLDAP directory installed and the server is "
18392
"configured to use it for authentication. See <xref linkend=\"openldap-"
18393
"server\"/> and <xref linkend=\"openldap-auth-config\"/> for details on "
18394
"setting up OpenLDAP. For more information on installing and configuring "
18395
"Samba see <xref linkend=\"windows-networking\"/>."
18396
18397
#: serverguide/C/network-auth.xml:1592(para)
18398
msgid ""
18399
"There are three packages needed when integrating Samba with LDAP. "
18400
"<application>samba</application>, <application>samba-doc</application>, and "
18401
"<application>smbldap-tools</application> packages . To install the packages, "
18402
"from a terminal enter:"
18403
msgstr ""
18404
"There are three packages needed when integrating Samba with LDAP. "
18405
"<application>samba</application>, <application>samba-doc</application>, and "
18406
"<application>smbldap-tools</application> packages . To install the packages, "
18407
"from a terminal enter:"
18408
18409
#: serverguide/C/network-auth.xml:1598(command)
18410
msgid "sudo apt-get install samba samba-doc smbldap-tools"
18411
msgstr "sudo apt-get install samba samba-doc smbldap-tools"
18412
18413
#: serverguide/C/network-auth.xml:1601(para)
18414
msgid ""
18415
"Strictly speaking the <application>smbldap-tools</application> package isn't "
18416
"needed, but unless you have another package or custom scripts, a method of "
18417
"managing users, groups, and computer accounts is needed."
18418
msgstr ""
18419
"Strictly speaking the <application>smbldap-tools</application> package isn't "
18420
"needed, but unless you have another package or custom scripts, a method of "
18421
"managing users, groups, and computer accounts is needed."
18422
18423
#: serverguide/C/network-auth.xml:1608(title)
18424
msgid "OpenLDAP Configuration"
18425
msgstr "OpenLDAP Configuration"
18426
18427
#: serverguide/C/network-auth.xml:1610(para)
18428
msgid ""
18429
"In order for Samba to use OpenLDAP as a <emphasis>passdb backend</emphasis>, "
18430
"the user objects in the directory will need additional attributes. This "
18431
"section assumes you want Samba to be configured as a Windows NT domain "
18432
"controller, and will add the necessary LDAP objects and attributes."
18433
msgstr ""
18434
"In order for Samba to use OpenLDAP as a <emphasis>passdb backend</emphasis>, "
18435
"the user objects in the directory will need additional attributes. This "
18436
"section assumes you want Samba to be configured as a Windows NT domain "
18437
"controller, and will add the necessary LDAP objects and attributes."
18438
18439
#: serverguide/C/network-auth.xml:1618(para)
18440
msgid ""
18441
"The Samba attributes are defined in the <filename>samba.schema</filename> "
18442
"file which is part of the <application>samba-doc</application> package. The "
18443
"schema file needs to be unzipped and copied to "
18444
"<filename>/etc/ldap/schema</filename>. From a terminal prompt enter:"
18445
msgstr ""
18446
"The Samba attributes are defined in the <filename>samba.schema</filename> "
18447
"file which is part of the <application>samba-doc</application> package. The "
18448
"schema file needs to be unzipped and copied to "
18449
"<filename>/etc/ldap/schema</filename>. From a terminal prompt enter:"
18450
18451
#: serverguide/C/network-auth.xml:1625(command)
18452
msgid ""
18453
"sudo cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz "
18454
"/etc/ldap/schema/"
18455
msgstr ""
18456
"sudo cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz "
18457
"/etc/ldap/schema/"
18458
18459
#: serverguide/C/network-auth.xml:1626(command)
18460
msgid "sudo gzip -d /etc/ldap/schema/samba.schema.gz"
18461
msgstr "sudo gzip -d /etc/ldap/schema/samba.schema.gz"
18462
18463
#: serverguide/C/network-auth.xml:1632(para)
18464
msgid ""
18465
"The <emphasis>samba</emphasis> schema needs to be added to the "
18466
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
18467
"<application>slapd</application> is also detailed in <xref "
18468
"linkend=\"openldap-configuration\"/>."
18469
msgstr ""
18470
"The <emphasis>samba</emphasis> schema needs to be added to the "
18471
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
18472
"<application>slapd</application> is also detailed in <xref "
18473
"linkend=\"openldap-configuration\"/>."
18474
18475
#: serverguide/C/network-auth.xml:1640(para) serverguide/C/network-auth.xml:2676(para)
18476
msgid ""
18477
"First, create a configuration file named "
18478
"<filename>schema_convert.conf</filename>, or a similar descriptive name, "
18479
"containing the following lines:"
18480
msgstr ""
18481
"First, create a configuration file named "
18482
"<filename>schema_convert.conf</filename>, or a similar descriptive name, "
18483
"containing the following lines:"
18484
18485
#: serverguide/C/network-auth.xml:1645(programlisting)
18486
#, no-wrap
18487
msgid ""
18488
"\n"
18489
"include /etc/ldap/schema/core.schema\n"
18490
"include /etc/ldap/schema/collective.schema\n"
18491
"include /etc/ldap/schema/corba.schema\n"
18492
"include /etc/ldap/schema/cosine.schema\n"
18493
"include /etc/ldap/schema/duaconf.schema\n"
18494
"include /etc/ldap/schema/dyngroup.schema\n"
18495
"include /etc/ldap/schema/inetorgperson.schema\n"
18496
"include /etc/ldap/schema/java.schema\n"
18497
"include /etc/ldap/schema/misc.schema\n"
18498
"include /etc/ldap/schema/nis.schema\n"
18499
"include /etc/ldap/schema/openldap.schema\n"
18500
"include /etc/ldap/schema/ppolicy.schema\n"
18501
"include /etc/ldap/schema/samba.schema\n"
18502
msgstr ""
18503
"\n"
18504
"include /etc/ldap/schema/core.schema\n"
18505
"include /etc/ldap/schema/collective.schema\n"
18506
"include /etc/ldap/schema/corba.schema\n"
18507
"include /etc/ldap/schema/cosine.schema\n"
18508
"include /etc/ldap/schema/duaconf.schema\n"
18509
"include /etc/ldap/schema/dyngroup.schema\n"
18510
"include /etc/ldap/schema/inetorgperson.schema\n"
18511
"include /etc/ldap/schema/java.schema\n"
18512
"include /etc/ldap/schema/misc.schema\n"
18513
"include /etc/ldap/schema/nis.schema\n"
18514
"include /etc/ldap/schema/openldap.schema\n"
18515
"include /etc/ldap/schema/ppolicy.schema\n"
18516
"include /etc/ldap/schema/samba.schema\n"
18517
18518
#: serverguide/C/network-auth.xml:1675(para) serverguide/C/network-auth.xml:2711(para)
18519
msgid ""
18520
"Now use <application>slapcat</application> to convert the schema files:"
18521
msgstr ""
18522
"Now use <application>slapcat</application> to convert the schema files:"
18523
18524
#: serverguide/C/network-auth.xml:1680(command)
18525
msgid ""
18526
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
18527
"\"cn={12}samba,cn=schema,cn=config\" > /tmp/cn=samba.ldif"
18528
msgstr ""
18529
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
18530
"\"cn={12}samba,cn=schema,cn=config\" > /tmp/cn=samba.ldif"
18531
18532
#: serverguide/C/network-auth.xml:1683(para) serverguide/C/network-auth.xml:2719(para)
18533
msgid ""
18534
"Change the above file and path names to match your own if they are different."
18535
msgstr ""
18536
"Change the above file and path names to match your own if they are different."
18537
18538
#: serverguide/C/network-auth.xml:1690(para)
18539
msgid ""
18540
"Edit the generated <filename>/tmp/cn\\=samba.ldif</filename> file, changing "
18541
"the following attributes:"
18542
msgstr ""
18543
"Edit the generated <filename>/tmp/cn\\=samba.ldif</filename> file, changing "
18544
"the following attributes:"
18545
18546
#: serverguide/C/network-auth.xml:1694(programlisting)
18547
#, no-wrap
18548
msgid ""
18549
"\n"
18550
"dn: cn=samba,cn=schema,cn=config\n"
18551
"...\n"
18552
"cn: samba\n"
18553
msgstr ""
18554
"\n"
18555
"dn: cn=samba,cn=schema,cn=config\n"
18556
"...\n"
18557
"cn: samba\n"
18558
18559
#: serverguide/C/network-auth.xml:1704(programlisting)
18560
#, no-wrap
18561
msgid ""
18562
"\n"
18563
"structuralObjectClass: olcSchemaConfig\n"
18564
"entryUUID: b53b75ca-083f-102d-9fff-2f64fd123c95\n"
18565
"creatorsName: cn=config\n"
18566
"createTimestamp: 20080827045234Z\n"
18567
"entryCSN: 20080827045234.341425Z#000000#000#000000\n"
18568
"modifiersName: cn=config\n"
18569
"modifyTimestamp: 20080827045234Z\n"
18570
msgstr ""
18571
"\n"
18572
"structuralObjectClass: olcSchemaConfig\n"
18573
"entryUUID: b53b75ca-083f-102d-9fff-2f64fd123c95\n"
18574
"creatorsName: cn=config\n"
18575
"createTimestamp: 20080827045234Z\n"
18576
"entryCSN: 20080827045234.341425Z#000000#000#000000\n"
18577
"modifiersName: cn=config\n"
18578
"modifyTimestamp: 20080827045234Z\n"
18579
18580
#: serverguide/C/network-auth.xml:1729(command)
18581
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=samba.ldif"
18582
msgstr "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=samba.ldif"
18583
18584
#: serverguide/C/network-auth.xml:1735(para)
18585
msgid ""
18586
"There should now be a <emphasis>dn: "
18587
"cn={X}misc,cn=schema,cn=config</emphasis>, where \"X\" is the next "
18588
"sequential schema, entry in the cn=config tree."
18589
msgstr ""
18590
"There should now be a <emphasis>dn: "
18591
"cn={X}misc,cn=schema,cn=config</emphasis>, where \"X\" is the next "
18592
"sequential schema, entry in the cn=config tree."
18593
18594
#: serverguide/C/network-auth.xml:1743(para)
18595
msgid ""
18596
"Copy and paste the following into a file named "
18597
"<filename>samba_indexes.ldif</filename>:"
18598
msgstr ""
18599
"Copy and paste the following into a file named "
18600
"<filename>samba_indexes.ldif</filename>:"
18601
18602
#: serverguide/C/network-auth.xml:1747(programlisting)
18603
#, no-wrap
18604
msgid ""
18605
"\n"
18606
"dn: olcDatabase={1}hdb,cn=config\n"
18607
"changetype: modify\n"
18608
"add: olcDbIndex\n"
18609
"olcDbIndex: uidNumber eq\n"
18610
"olcDbIndex: gidNumber eq\n"
18611
"olcDbIndex: loginShell eq\n"
18612
"olcDbIndex: uid eq,pres,sub\n"
18613
"olcDbIndex: memberUid eq,pres,sub\n"
18614
"olcDbIndex: uniqueMember eq,pres\n"
18615
"olcDbIndex: sambaSID eq\n"
18616
"olcDbIndex: sambaPrimaryGroupSID eq\n"
18617
"olcDbIndex: sambaGroupType eq\n"
18618
"olcDbIndex: sambaSIDList eq\n"
18619
"olcDbIndex: sambaDomainName eq\n"
18620
"olcDbIndex: default sub\n"
18621
msgstr ""
18622
"\n"
18623
"dn: olcDatabase={1}hdb,cn=config\n"
18624
"changetype: modify\n"
18625
"add: olcDbIndex\n"
18626
"olcDbIndex: uidNumber eq\n"
18627
"olcDbIndex: gidNumber eq\n"
18628
"olcDbIndex: loginShell eq\n"
18629
"olcDbIndex: uid eq,pres,sub\n"
18630
"olcDbIndex: memberUid eq,pres,sub\n"
18631
"olcDbIndex: uniqueMember eq,pres\n"
18632
"olcDbIndex: sambaSID eq\n"
18633
"olcDbIndex: sambaPrimaryGroupSID eq\n"
18634
"olcDbIndex: sambaGroupType eq\n"
18635
"olcDbIndex: sambaSIDList eq\n"
18636
"olcDbIndex: sambaDomainName eq\n"
18637
"olcDbIndex: default sub\n"
18638
18639
#: serverguide/C/network-auth.xml:1765(para)
18640
msgid ""
18641
"Using the <application>ldapmodify</application> utility load the new indexes:"
18642
msgstr ""
18643
"Using the <application>ldapmodify</application> utility load the new indexes:"
18644
18645
#: serverguide/C/network-auth.xml:1770(command)
18646
msgid "ldapmodify -x -D cn=admin,cn=config -W -f samba_indexes.ldif"
18647
msgstr "ldapmodify -x -D cn=admin,cn=config -W -f samba_indexes.ldif"
18648
18649
#: serverguide/C/network-auth.xml:1772(para)
18650
msgid ""
18651
"If all went well you should see the new indexes using "
18652
"<application>ldapsearch</application>:"
18653
msgstr ""
18654
"If all went well you should see the new indexes using "
18655
"<application>ldapsearch</application>:"
18656
18657
#: serverguide/C/network-auth.xml:1777(command)
18658
msgid ""
18659
"ldapsearch -xLLL -D cn=admin,cn=config -x -b cn=config -W olcDatabase={1}hdb"
18660
msgstr ""
18661
"ldapsearch -xLLL -D cn=admin,cn=config -x -b cn=config -W olcDatabase={1}hdb"
18662
18663
#: serverguide/C/network-auth.xml:1783(para)
18664
msgid ""
18665
"Next, configure the <application>smbldap-tools</application> package to "
18666
"match your environment. The package comes with a configuration script that "
18667
"will ask questions about the needed options. To run the script enter:"
18668
msgstr ""
18669
"Next, configure the <application>smbldap-tools</application> package to "
18670
"match your environment. The package comes with a configuration script that "
18671
"will ask questions about the needed options. To run the script enter:"
18672
18673
#: serverguide/C/network-auth.xml:1789(command)
18674
msgid "sudo gzip -d /usr/share/doc/smbldap-tools/configure.pl.gz"
18675
msgstr "sudo gzip -d /usr/share/doc/smbldap-tools/configure.pl.gz"
18676
18677
#: serverguide/C/network-auth.xml:1790(command)
18678
msgid "sudo perl /usr/share/doc/smbldap-tools/configure.pl"
18679
msgstr "sudo perl /usr/share/doc/smbldap-tools/configure.pl"
18680
18681
#: serverguide/C/network-auth.xml:1793(para)
18682
msgid ""
18683
"Once you have answered the questions, there should be <filename>/etc/smbldap-"
18684
"tools/smbldap.conf</filename> and <filename>/etc/smbldap-"
18685
"tools/smbldap_bind.conf</filename> files. These files are generated by the "
18686
"configure script, so if you made any mistakes while executing the script it "
18687
"may be simpler to edit the file appropriately."
18688
msgstr ""
18689
"Once you have answered the questions, there should be <filename>/etc/smbldap-"
18690
"tools/smbldap.conf</filename> and <filename>/etc/smbldap-"
18691
"tools/smbldap_bind.conf</filename> files. These files are generated by the "
18692
"configure script, so if you made any mistakes while executing the script it "
18693
"may be simpler to edit the file appropriately."
18694
18695
#: serverguide/C/network-auth.xml:1803(para)
18696
msgid ""
18697
"The <application>smbldap-populate</application> script will add the "
18698
"necessary users, groups, and LDAP objects required for Samba. It is a good "
18699
"idea to make a backup LDAP Data Interchange Format (LDIF) file with "
18700
"<application>slapcat</application> before executing the command:"
18701
msgstr ""
18702
"The <application>smbldap-populate</application> script will add the "
18703
"necessary users, groups, and LDAP objects required for Samba. It is a good "
18704
"idea to make a backup LDAP Data Interchange Format (LDIF) file with "
18705
"<application>slapcat</application> before executing the command:"
18706
18707
#: serverguide/C/network-auth.xml:1810(command)
18708
msgid "sudo slapcat -l backup.ldif"
18709
msgstr "sudo slapcat -l backup.ldif"
18710
18711
#: serverguide/C/network-auth.xml:1816(para)
18712
msgid ""
18713
"Once you have a current backup execute <application>smbldap-"
18714
"populate</application> by entering:"
18715
msgstr ""
18716
"Once you have a current backup execute <application>smbldap-"
18717
"populate</application> by entering:"
18718
18719
#: serverguide/C/network-auth.xml:1821(command)
18720
msgid "sudo smbldap-populate"
18721
msgstr "sudo smbldap-populate"
18722
18723
#: serverguide/C/network-auth.xml:1825(para)
18724
msgid ""
18725
"You can create an LDIF file containing the new Samba objects by executing "
18726
"<command>sudo smbldap-populate -e samba.ldif</command>. This allows you to "
18727
"look over the changes making sure everything is correct."
18728
msgstr ""
18729
"You can create an LDIF file containing the new Samba objects by executing "
18730
"<command>sudo smbldap-populate -e samba.ldif</command>. This allows you to "
18731
"look over the changes making sure everything is correct."
18732
18733
#: serverguide/C/network-auth.xml:1833(para)
18734
msgid ""
18735
"Your LDAP directory now has the necessary domain information to authenticate "
18736
"Samba users."
18737
msgstr ""
18738
"Your LDAP directory now has the necessary domain information to authenticate "
18739
"Samba users."
18740
18741
#: serverguide/C/network-auth.xml:1839(title)
18742
msgid "Samba Configuration"
18743
msgstr "Samba Configuration"
18744
18745
#: serverguide/C/network-auth.xml:1841(para)
18746
msgid ""
18747
"There a multiple ways to configure Samba for details on some common "
18748
"configurations see <xref linkend=\"windows-networking\"/>. To configure "
18749
"Samba to use LDAP, edit the main Samba configuration file "
18750
"<filename>/etc/samba/smb.conf</filename> commenting the <emphasis>passdb "
18751
"backend</emphasis> option and adding the following:"
18752
msgstr ""
18753
"There a multiple ways to configure Samba for details on some common "
18754
"configurations see <xref linkend=\"windows-networking\"/>. To configure "
18755
"Samba to use LDAP, edit the main Samba configuration file "
18756
"<filename>/etc/samba/smb.conf</filename> commenting the <emphasis>passdb "
18757
"backend</emphasis> option and adding the following:"
18758
18759
#: serverguide/C/network-auth.xml:1847(programlisting)
18760
#, no-wrap
18761
msgid ""
18762
"\n"
18763
"# passdb backend = tdbsam\n"
18764
"\n"
18765
"# LDAP Settings\n"
18766
" passdb backend = ldapsam:ldap://hostname\n"
18767
" ldap suffix = dc=example,dc=com\n"
18768
" ldap user suffix = ou=People\n"
18769
" ldap group suffix = ou=Groups\n"
18770
" ldap machine suffix = ou=Computers\n"
18771
" ldap idmap suffix = ou=Idmap\n"
18772
" ldap admin dn = cn=admin,dc=example,dc=com\n"
18773
" ldap ssl = start tls\n"
18774
" ldap passwd sync = yes\n"
18775
"...\n"
18776
" add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w \"%u\"\n"
18777
msgstr ""
18778
"\n"
18779
"# passdb backend = tdbsam\n"
18780
"\n"
18781
"# LDAP Settings\n"
18782
" passdb backend = ldapsam:ldap://hostname\n"
18783
" ldap suffix = dc=example,dc=com\n"
18784
" ldap user suffix = ou=People\n"
18785
" ldap group suffix = ou=Groups\n"
18786
" ldap machine suffix = ou=Computers\n"
18787
" ldap idmap suffix = ou=Idmap\n"
18788
" ldap admin dn = cn=admin,dc=example,dc=com\n"
18789
" ldap ssl = start tls\n"
18790
" ldap passwd sync = yes\n"
18791
"...\n"
18792
" add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w \"%u\"\n"
18793
18794
#: serverguide/C/network-auth.xml:1864(para)
18795
msgid "Restart <application>samba</application> to enable the new settings:"
18796
msgstr "Restart <application>samba</application> to enable the new settings:"
18797
18798
#: serverguide/C/network-auth.xml:1873(para)
18799
msgid ""
18800
"Now Samba needs to know the LDAP admin password. From a terminal prompt "
18801
"enter:"
18802
msgstr ""
18803
"Now Samba needs to know the LDAP admin password. From a terminal prompt "
18804
"enter:"
18805
18806
#: serverguide/C/network-auth.xml:1878(command)
18807
msgid "sudo smbpasswd -w secret"
18808
msgstr "sudo smbpasswd -w secret"
18809
18810
#: serverguide/C/network-auth.xml:1882(para)
18811
msgid ""
18812
"Replacing <emphasis role=\"italic\">secret</emphasis> with your LDAP admin "
18813
"password."
18814
msgstr ""
18815
"Replacing <emphasis role=\"italic\">secret</emphasis> with your LDAP admin "
18816
"password."
18817
18818
#: serverguide/C/network-auth.xml:1887(para)
18819
msgid ""
18820
"If you currently have users in LDAP, and you want them to authenticate using "
18821
"Samba, they will need some Samba attributes defined in the "
18822
"<filename>samba.schema</filename> file. Add the Samba attributes to existing "
18823
"users using the <application>smbpasswd</application> utility, replacing "
18824
"<emphasis role=\"italic\">username</emphasis> with an actual user:"
18825
msgstr ""
18826
"If you currently have users in LDAP, and you want them to authenticate using "
18827
"Samba, they will need some Samba attributes defined in the "
18828
"<filename>samba.schema</filename> file. Add the Samba attributes to existing "
18829
"users using the <application>smbpasswd</application> utility, replacing "
18830
"<emphasis role=\"italic\">username</emphasis> with an actual user:"
18831
18832
#: serverguide/C/network-auth.xml:1895(command)
18833
msgid "sudo smbpasswd -a username"
18834
msgstr "sudo smbpasswd -a username"
18835
18836
#: serverguide/C/network-auth.xml:1898(para)
18837
msgid "You will then be asked to enter the user's password."
18838
msgstr "You will then be asked to enter the user's password."
18839
18840
#: serverguide/C/network-auth.xml:1902(para)
18841
msgid ""
18842
"To add new user, group, and machine accounts use the utilities from the "
18843
"<application>smbldap-tools</application> package. Here are some examples:"
18844
msgstr ""
18845
"To add new user, group, and machine accounts use the utilities from the "
18846
"<application>smbldap-tools</application> package. Here are some examples:"
18847
18848
#: serverguide/C/network-auth.xml:1909(para)
18849
msgid ""
18850
"To add a new user to LDAP with Samba attributes enter the following, "
18851
"replacing username with an actual username:"
18852
msgstr ""
18853
"To add a new user to LDAP with Samba attributes enter the following, "
18854
"replacing username with an actual username:"
18855
18856
#: serverguide/C/network-auth.xml:1913(command)
18857
msgid "sudo smbldap-useradd -a -P username"
18858
msgstr "sudo smbldap-useradd -a -P username"
18859
18860
#: serverguide/C/network-auth.xml:1915(para)
18861
msgid ""
18862
"The <emphasis>-a</emphasis> option adds the Samba attributes, and the "
18863
"<emphasis>-P</emphasis> options calls the <application>smbldap-"
18864
"passwd</application> utility after the user is created allowing you to enter "
18865
"a password for the user."
18866
msgstr ""
18867
"The <emphasis>-a</emphasis> option adds the Samba attributes, and the "
18868
"<emphasis>-P</emphasis> options calls the <application>smbldap-"
18869
"passwd</application> utility after the user is created allowing you to enter "
18870
"a password for the user."
18871
18872
#: serverguide/C/network-auth.xml:1921(para)
18873
msgid "To remove a user from the directory enter:"
18874
msgstr "To remove a user from the directory enter:"
18875
18876
#: serverguide/C/network-auth.xml:1925(command)
18877
msgid "sudo smbldap-userdel username"
18878
msgstr "sudo smbldap-userdel username"
18879
18880
#: serverguide/C/network-auth.xml:1927(para)
18881
msgid ""
18882
"The <application>smbldap-userdel</application> utility also has a <emphasis>-"
18883
"r</emphasis> option to remove the user's home directory."
18884
msgstr ""
18885
"The <application>smbldap-userdel</application> utility also has a <emphasis>-"
18886
"r</emphasis> option to remove the user's home directory."
18887
18888
#: serverguide/C/network-auth.xml:1932(para)
18889
msgid ""
18890
"Use <application>smbldap-groupadd</application> to add a group, replacing "
18891
"groupname with an appropriate group:"
18892
msgstr ""
18893
"Use <application>smbldap-groupadd</application> to add a group, replacing "
18894
"groupname with an appropriate group:"
18895
18896
#: serverguide/C/network-auth.xml:1936(command)
18897
msgid "sudo smbldap-groupadd -a groupname"
18898
msgstr "sudo smbldap-groupadd -a groupname"
18899
18900
#: serverguide/C/network-auth.xml:1938(para)
18901
msgid ""
18902
"Similar to <application>smbldap-useradd</application>, the <emphasis>-"
18903
"a</emphasis> adds the Samba attributes."
18904
msgstr ""
18905
"Similar to <application>smbldap-useradd</application>, the <emphasis>-"
18906
"a</emphasis> adds the Samba attributes."
18907
18908
#: serverguide/C/network-auth.xml:1943(para)
18909
msgid ""
18910
"To add a user to a group use <application>smbldap-groupmod</application>:"
18911
msgstr ""
18912
"To add a user to a group use <application>smbldap-groupmod</application>:"
18913
18914
#: serverguide/C/network-auth.xml:1947(command)
18915
msgid "sudo smbldap-groupmod -m username groupname"
18916
msgstr "sudo smbldap-groupmod -m username groupname"
18917
18918
#: serverguide/C/network-auth.xml:1949(para)
18919
msgid ""
18920
"Be sure to replace <emphasis>username</emphasis> with a real user. Also, the "
18921
"<emphasis>-m</emphasis> option can add more than one user at a time by "
18922
"listing them in <emphasis>comma separated</emphasis> format."
18923
msgstr ""
18924
"Be sure to replace <emphasis>username</emphasis> with a real user. Also, the "
18925
"<emphasis>-m</emphasis> option can add more than one user at a time by "
18926
"listing them in <emphasis>comma separated</emphasis> format."
18927
18928
#: serverguide/C/network-auth.xml:1955(para)
18929
msgid ""
18930
"<application>smbldap-groupmod</application> can also be used to remove a "
18931
"user from a group:"
18932
msgstr ""
18933
"<application>smbldap-groupmod</application> can also be used to remove a "
18934
"user from a group:"
18935
18936
#: serverguide/C/network-auth.xml:1959(command)
18937
msgid "sudo smbldap-groupmod -x username groupname"
18938
msgstr "sudo smbldap-groupmod -x username groupname"
18939
18940
#: serverguide/C/network-auth.xml:1963(para)
18941
msgid ""
18942
"Additionally, the <application>smbldap-useradd</application> utility can add "
18943
"Samba machine accounts:"
18944
msgstr ""
18945
"Additionally, the <application>smbldap-useradd</application> utility can add "
18946
"Samba machine accounts:"
18947
18948
#: serverguide/C/network-auth.xml:1967(command)
18949
msgid "sudo smbldap-useradd -t 0 -w username"
18950
msgstr "sudo smbldap-useradd -t 0 -w username"
18951
18952
#: serverguide/C/network-auth.xml:1969(para)
18953
msgid ""
18954
"Replace <emphasis>username</emphasis> with the name of the workstation. The "
18955
"<emphasis>-t 0</emphasis> option creates the machine account without a "
18956
"delay, while the <emphasis>-w</emphasis> option specifies the user as a "
18957
"machine account. Also, note the <emphasis>add machine script</emphasis> "
18958
"option in <filename>/etc/samba/smb.conf</filename> was changed to use "
18959
"<application>smbldap-useradd</application>."
18960
msgstr ""
18961
"Replace <emphasis>username</emphasis> with the name of the workstation. The "
18962
"<emphasis>-t 0</emphasis> option creates the machine account without a "
18963
"delay, while the <emphasis>-w</emphasis> option specifies the user as a "
18964
"machine account. Also, note the <emphasis>add machine script</emphasis> "
18965
"option in <filename>/etc/samba/smb.conf</filename> was changed to use "
18966
"<application>smbldap-useradd</application>."
18967
18968
#: serverguide/C/network-auth.xml:1978(para)
18969
msgid ""
18970
"There are more useful utilities and options in the <application>smbldap-"
18971
"tools</application> package. The man page for each utility provides more "
18972
"details."
18973
msgstr ""
18974
"There are more useful utilities and options in the <application>smbldap-"
18975
"tools</application> package. The man page for each utility provides more "
18976
"details."
18977
18978
#: serverguide/C/network-auth.xml:1989(para)
18979
msgid ""
18980
"There are multiple places where LDAP and Samba is documented in the <ulink "
18981
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
18982
"Collection</ulink>."
18983
msgstr ""
18984
"There are multiple places where LDAP and Samba is documented in the <ulink "
18985
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
18986
"Collection</ulink>."
18987
18988
#: serverguide/C/network-auth.xml:1995(para)
18989
msgid ""
18990
"Specifically see the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
18991
"HOWTO-Collection/passdb.html\">passdb section</ulink>."
18992
msgstr ""
18993
"Specifically see the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
18994
"HOWTO-Collection/passdb.html\">passdb section</ulink>."
18995
18996
#: serverguide/C/network-auth.xml:2001(para)
18997
msgid ""
18998
"Another good site is <ulink url=\"http://download.gna.org/smbldap-"
18999
"tools/docs/samba-ldap-howto/\">Samba OpenLDAP HOWTO</ulink>."
19000
msgstr ""
19001
19002
#: serverguide/C/network-auth.xml:2007(para)
19003
msgid ""
19004
"Again, for more information on <application>smbldap-tools</application> see "
19005
"the man pages: <command>man smbldap-useradd</command>, <command>man smbldap-"
19006
"groupadd</command>, <command>man smbldap-populate</command>, etc."
19007
msgstr ""
19008
"Again, for more information on <application>smbldap-tools</application> see "
19009
"the man pages: <command>man smbldap-useradd</command>, <command>man smbldap-"
19010
"groupadd</command>, <command>man smbldap-populate</command>, etc."
19011
19012
#: serverguide/C/network-auth.xml:2014(para)
19013
msgid ""
19014
"Also, there is a list of <ulink "
19015
"url=\"https://help.ubuntu.com/community/Samba#samba-ldap\">Ubuntu "
19016
"wiki</ulink> articles with more information."
19017
msgstr ""
19018
19019
#: serverguide/C/network-auth.xml:2023(title)
19020
msgid "Kerberos"
19021
msgstr "Kerberos"
19022
19023
#: serverguide/C/network-auth.xml:2025(para)
19024
msgid ""
19025
"<application>Kerberos</application> is a network authentication system based "
19026
"on the principal of a trusted third party. The other two parties being the "
19027
"user and the service the user wishes to authenticate to. Not all services "
19028
"and applications can use Kerberos, but for those that can, it brings the "
19029
"network environment one step closer to being Single Sign On (SSO)."
19030
msgstr ""
19031
"<application>Kerberos</application> is a network authentication system based "
19032
"on the principal of a trusted third party. The other two parties being the "
19033
"user and the service the user wishes to authenticate to. Not all services "
19034
"and applications can use Kerberos, but for those that can, it brings the "
19035
"network environment one step closer to being Single Sign On (SSO)."
19036
19037
#: serverguide/C/network-auth.xml:2031(para)
19038
msgid ""
19039
"This section covers installation and configuration of a Kerberos server, and "
19040
"some example client configurations."
19041
msgstr ""
19042
"This section covers installation and configuration of a Kerberos server, and "
19043
"some example client configurations."
19044
19045
#: serverguide/C/network-auth.xml:2038(para)
19046
msgid ""
19047
"If you are new to Kerberos there are a few terms that are good to understand "
19048
"before setting up a Kerberos server. Most of the terms will relate to things "
19049
"you may be familiar with in other environments:"
19050
msgstr ""
19051
"If you are new to Kerberos there are a few terms that are good to understand "
19052
"before setting up a Kerberos server. Most of the terms will relate to things "
19053
"you may be familiar with in other environments:"
19054
19055
#: serverguide/C/network-auth.xml:2045(para)
19056
msgid ""
19057
"<emphasis>Principal:</emphasis> any users, computers, and services provided "
19058
"by servers need to be defined as Kerberos Principals."
19059
msgstr ""
19060
"<emphasis>Principal:</emphasis> any users, computers, and services provided "
19061
"by servers need to be defined as Kerberos Principals."
19062
19063
#: serverguide/C/network-auth.xml:2050(para)
19064
msgid ""
19065
"<emphasis>Instances:</emphasis> are used for service principals and special "
19066
"administrative principals."
19067
msgstr ""
19068
"<emphasis>Instances:</emphasis> are used for service principals and special "
19069
"administrative principals."
19070
19071
#: serverguide/C/network-auth.xml:2055(para)
19072
msgid ""
19073
"<emphasis>Realms:</emphasis> the unique realm of control provided by the "
19074
"Kerberos installation. Usually the DNS domain converted to uppercase "
19075
"(EXAMPLE.COM)."
19076
msgstr ""
19077
"<emphasis>Realms:</emphasis> the unique realm of control provided by the "
19078
"Kerberos installation. Usually the DNS domain converted to uppercase "
19079
"(EXAMPLE.COM)."
19080
19081
#: serverguide/C/network-auth.xml:2061(para)
19082
msgid ""
19083
"<emphasis>Key Distribution Center:</emphasis> (KDC) consist of three parts, "
19084
"a database of all principals, the authentication server, and the ticket "
19085
"granting server. For each realm there must be at least one KDC."
19086
msgstr ""
19087
"<emphasis>Key Distribution Centre:</emphasis> (KDC) consist of three parts, "
19088
"a database of all principals, the authentication server, and the ticket "
19089
"granting server. For each realm there must be at least one KDC."
19090
19091
#: serverguide/C/network-auth.xml:2067(para)
19092
msgid ""
19093
"<emphasis>Ticket Granting Ticket:</emphasis> issued by the Authentication "
19094
"Server (AS), the Ticket Granting Ticket (TGT) is encrypted in the user's "
19095
"password which is known only to the user and the KDC."
19096
msgstr ""
19097
"<emphasis>Ticket Granting Ticket:</emphasis> issued by the Authentication "
19098
"Server (AS), the Ticket Granting Ticket (TGT) is encrypted in the user's "
19099
"password which is known only to the user and the KDC."
19100
19101
#: serverguide/C/network-auth.xml:2073(para)
19102
msgid ""
19103
"<emphasis>Ticket Granting Server:</emphasis> (TGS) issues service tickets to "
19104
"clients upon request."
19105
msgstr ""
19106
"<emphasis>Ticket Granting Server:</emphasis> (TGS) issues service tickets to "
19107
"clients upon request."
19108
19109
#: serverguide/C/network-auth.xml:2078(para)
19110
msgid ""
19111
"<emphasis>Tickets:</emphasis> confirm the identity of the two principals. "
19112
"One principal being a user and the other a service requested by the user. "
19113
"Tickets establish an encryption key used for secure communication during the "
19114
"authenticated session."
19115
msgstr ""
19116
"<emphasis>Tickets:</emphasis> confirm the identity of the two principals. "
19117
"One principal being a user and the other a service requested by the user. "
19118
"Tickets establish an encryption key used for secure communication during the "
19119
"authenticated session."
19120
19121
#: serverguide/C/network-auth.xml:2084(para)
19122
msgid ""
19123
"<emphasis>Keytab Files:</emphasis> are files extracted from the KDC "
19124
"principal database and contain the encryption key for a service or host."
19125
msgstr ""
19126
"<emphasis>Keytab Files:</emphasis> are files extracted from the KDC "
19127
"principal database and contain the encryption key for a service or host."
19128
19129
#: serverguide/C/network-auth.xml:2091(para)
19130
msgid ""
19131
"To put the pieces together, a Realm has at least one KDC, preferably two for "
19132
"redundancy, which contains a database of Principals. When a user principal "
19133
"logs into a workstation, configured for Kerberos authentication, the KDC "
19134
"issues a Ticket Granting Ticket (TGT). If the user supplied credentials "
19135
"match, the user is authenticated and can then request tickets for Kerberized "
19136
"services from the Ticket Granting Server (TGS). The service tickets allow "
19137
"the user to authenticate to the service without entering another username "
19138
"and password."
19139
msgstr ""
19140
"To put the pieces together, a Realm has at least one KDC, preferably two for "
19141
"redundancy, which contains a database of Principals. When a user principal "
19142
"logs into a workstation, configured for Kerberos authentication, the KDC "
19143
"issues a Ticket Granting Ticket (TGT). If the user supplied credentials "
19144
"match, the user is authenticated and can then request tickets for Kerberised "
19145
"services from the Ticket Granting Server (TGS). The service tickets allow "
19146
"the user to authenticate to the service without entering another username "
19147
"and password."
19148
19149
#: serverguide/C/network-auth.xml:2100(title)
19150
msgid "Kerberos Server"
19151
msgstr "Kerberos Server"
19152
19153
#: serverguide/C/network-auth.xml:2104(para)
19154
msgid ""
19155
"Before installing the Kerberos server a properly configured DNS server is "
19156
"needed for your domain. Since the Kerberos Realm by convention matches the "
19157
"domain name, this section uses the <emphasis>example.com</emphasis> domain "
19158
"configured in <xref linkend=\"dns-primarymaster-configuration\"/>."
19159
msgstr ""
19160
"Before installing the Kerberos server a properly configured DNS server is "
19161
"needed for your domain. Since the Kerberos Realm by convention matches the "
19162
"domain name, this section uses the <emphasis>example.com</emphasis> domain "
19163
"configured in <xref linkend=\"dns-primarymaster-configuration\"/>."
19164
19165
#: serverguide/C/network-auth.xml:2110(para)
19166
msgid ""
19167
"Also, Kerberos is a time sensitive protocol. So if the local system time "
19168
"between a client machine and the server differs by more than five minutes "
19169
"(by default), the workstation will not be able to authenticate. To correct "
19170
"the problem all hosts should have their time synchronized using the "
19171
"<emphasis>Network Time Protocol (NTP)</emphasis>. For details on setting up "
19172
"NTP see <xref linkend=\"NTP\"/>."
19173
msgstr ""
19174
"Also, Kerberos is a time sensitive protocol. So if the local system time "
19175
"between a client machine and the server differs by more than five minutes "
19176
"(by default), the workstation will not be able to authenticate. To correct "
19177
"the problem all hosts should have their time synchronised using the "
19178
"<emphasis>Network Time Protocol (NTP)</emphasis>. For details on setting up "
19179
"NTP see <xref linkend=\"NTP\"/>."
19180
19181
#: serverguide/C/network-auth.xml:2117(para)
19182
msgid ""
19183
"The first step in installing a Kerberos Realm is to install the "
19184
"<application>krb5-kdc</application> and <application>krb5-admin-"
19185
"server</application> packages. From a terminal enter:"
19186
msgstr ""
19187
"The first step in installing a Kerberos Realm is to install the "
19188
"<application>krb5-kdc</application> and <application>krb5-admin-"
19189
"server</application> packages. From a terminal enter:"
19190
19191
#: serverguide/C/network-auth.xml:2123(command) serverguide/C/network-auth.xml:2298(command)
19192
msgid "sudo apt-get install krb5-kdc krb5-admin-server"
19193
msgstr "sudo apt-get install krb5-kdc krb5-admin-server"
19194
19195
#: serverguide/C/network-auth.xml:2126(para)
19196
msgid ""
19197
"You will be asked at the end of the install to supply a name for the "
19198
"Kerberos and Admin servers, which may or may not be the same server, for the "
19199
"realm."
19200
msgstr ""
19201
"You will be asked at the end of the install to supply a name for the "
19202
"Kerberos and Admin servers, which may or may not be the same server, for the "
19203
"realm."
19204
19205
#: serverguide/C/network-auth.xml:2131(para)
19206
msgid ""
19207
"Next, create the new realm with the <application>kdb5_newrealm</application> "
19208
"utility:"
19209
msgstr ""
19210
"Next, create the new realm with the <application>kdb5_newrealm</application> "
19211
"utility:"
19212
19213
#: serverguide/C/network-auth.xml:2136(command)
19214
msgid "sudo krb5_newrealm"
19215
msgstr "sudo krb5_newrealm"
19216
19217
#: serverguide/C/network-auth.xml:2143(para)
19218
msgid ""
19219
"The questions asked during installation are used to configure the "
19220
"<filename>/etc/krb5.conf</filename> file. If you need to adjust the Key "
19221
"Distribution Center (KDC) settings simply edit the file and restart the "
19222
"<application>krb5-kdc</application> daemon."
19223
msgstr ""
19224
"The questions asked during installation are used to configure the "
19225
"<filename>/etc/krb5.conf</filename> file. If you need to adjust the Key "
19226
"Distribution Centre (KDC) settings simply edit the file and restart the "
19227
"<application>krb5-kdc</application> daemon."
19228
19229
#: serverguide/C/network-auth.xml:2151(para)
19230
msgid ""
19231
"Now that the KDC running an admin user is needed. It is recommended to use a "
19232
"different username from your everyday username. Using the "
19233
"<application>kadmin.local</application> utility in a terminal prompt enter:"
19234
msgstr ""
19235
"Now that the KDC running an admin user is needed. It is recommended to use a "
19236
"different username from your everyday username. Using the "
19237
"<application>kadmin.local</application> utility in a terminal prompt enter:"
19238
19239
#: serverguide/C/network-auth.xml:2157(command) serverguide/C/network-auth.xml:2953(command)
19240
msgid "sudo kadmin.local"
19241
msgstr "sudo kadmin.local"
19242
19243
#: serverguide/C/network-auth.xml:2158(computeroutput)
19244
#, no-wrap
19245
msgid ""
19246
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
19247
"kadmin.local:"
19248
msgstr ""
19249
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
19250
"kadmin.local:"
19251
19252
#: serverguide/C/network-auth.xml:2159(userinput)
19253
#, no-wrap
19254
msgid " addprinc steve/admin"
19255
msgstr " addprinc steve/admin"
19256
19257
#: serverguide/C/network-auth.xml:2160(computeroutput)
19258
#, no-wrap
19259
msgid ""
19260
"WARNING: no policy specified for steve/admin@EXAMPLE.COM; defaulting to no "
19261
"policy\n"
19262
"Enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
19263
"Re-enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
19264
"Principal \"steve/admin@EXAMPLE.COM\" created.\n"
19265
"kadmin.local:"
19266
msgstr ""
19267
"WARNING: no policy specified for steve/admin@EXAMPLE.COM; defaulting to no "
19268
"policy\n"
19269
"Enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
19270
"Re-enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
19271
"Principal \"steve/admin@EXAMPLE.COM\" created.\n"
19272
"kadmin.local:"
19273
19274
#: serverguide/C/network-auth.xml:2164(userinput)
19275
#, no-wrap
19276
msgid " quit"
19277
msgstr " quit"
19278
19279
#: serverguide/C/network-auth.xml:2167(para)
19280
msgid ""
19281
"In the above example <emphasis role=\"italic\">steve</emphasis> is the "
19282
"<emphasis>Principal</emphasis>, <emphasis role=\"italic\">/admin</emphasis> "
19283
"is an <emphasis>Instance</emphasis>, and <emphasis "
19284
"role=\"italic\">@EXAMPLE.COM</emphasis> signifies the realm. The <emphasis "
19285
"role=\"italic\">\"every day\"</emphasis> Principal would be "
19286
"<emphasis>steve@EXAMPLE.COM</emphasis>, and should have only normal user "
19287
"rights."
19288
msgstr ""
19289
"In the above example <emphasis role=\"italic\">steve</emphasis> is the "
19290
"<emphasis>Principal</emphasis>, <emphasis role=\"italic\">/admin</emphasis> "
19291
"is an <emphasis>Instance</emphasis>, and <emphasis "
19292
"role=\"italic\">@EXAMPLE.COM</emphasis> signifies the realm. The <emphasis "
19293
"role=\"italic\">\"every day\"</emphasis> Principal would be "
19294
"<emphasis>steve@EXAMPLE.COM</emphasis>, and should have only normal user "
19295
"rights."
19296
19297
#: serverguide/C/network-auth.xml:2175(para)
19298
msgid ""
19299
"Replace <emphasis>EXAMPLE.COM</emphasis> and <emphasis>steve</emphasis> with "
19300
"your Realm and admin username."
19301
msgstr ""
19302
"Replace <emphasis>EXAMPLE.COM</emphasis> and <emphasis>steve</emphasis> with "
19303
"your Realm and admin username."
19304
19305
#: serverguide/C/network-auth.xml:2183(para)
19306
msgid ""
19307
"Next, the new admin user needs to have the appropriate Access Control List "
19308
"(ACL) permissions. The permissions are configured in the "
19309
"<filename>/etc/krb5kdc/kadm5.acl</filename> file:"
19310
msgstr ""
19311
"Next, the new admin user needs to have the appropriate Access Control List "
19312
"(ACL) permissions. The permissions are configured in the "
19313
"<filename>/etc/krb5kdc/kadm5.acl</filename> file:"
19314
19315
#: serverguide/C/network-auth.xml:2188(programlisting)
19316
#, no-wrap
19317
msgid ""
19318
"\n"
19319
"steve/admin@EXAMPLE.COM *\n"
19320
msgstr ""
19321
"\n"
19322
"steve/admin@EXAMPLE.COM *\n"
19323
19324
#: serverguide/C/network-auth.xml:2192(para)
19325
msgid ""
19326
"This entry grants <emphasis>steve/admin</emphasis> the ability to perform "
19327
"any operation on all principals in the realm."
19328
msgstr ""
19329
"This entry grants <emphasis>steve/admin</emphasis> the ability to perform "
19330
"any operation on all principals in the realm."
19331
19332
#: serverguide/C/network-auth.xml:2199(para)
19333
msgid ""
19334
"Now restart the <application>krb5-admin-server</application> for the new ACL "
19335
"to take affect:"
19336
msgstr ""
19337
"Now restart the <application>krb5-admin-server</application> for the new ACL "
19338
"to take affect:"
19339
19340
#: serverguide/C/network-auth.xml:2204(command)
19341
msgid "sudo /etc/init.d/krb5-admin-server restart"
19342
msgstr "sudo /etc/init.d/krb5-admin-server restart"
19343
19344
#: serverguide/C/network-auth.xml:2210(para)
19345
msgid ""
19346
"The new user principal can be tested using the <application>kinit "
19347
"utility</application>:"
19348
msgstr ""
19349
"The new user principal can be tested using the <application>kinit "
19350
"utility</application>:"
19351
19352
#: serverguide/C/network-auth.xml:2215(command)
19353
msgid "kinit steve/admin"
19354
msgstr "kinit steve/admin"
19355
19356
#: serverguide/C/network-auth.xml:2216(computeroutput)
19357
#, no-wrap
19358
msgid "steve/admin@EXAMPLE.COM's Password:"
19359
msgstr "steve/admin@EXAMPLE.COM's Password:"
19360
19361
#: serverguide/C/network-auth.xml:2219(para)
19362
msgid ""
19363
"After entering the password, use the <application>klist</application> "
19364
"utility to view information about the Ticket Granting Ticket (TGT):"
19365
msgstr ""
19366
"After entering the password, use the <application>klist</application> "
19367
"utility to view information about the Ticket Granting Ticket (TGT):"
19368
19369
#: serverguide/C/network-auth.xml:2225(command) serverguide/C/network-auth.xml:2560(command)
19370
msgid "klist"
19371
msgstr "klist"
19372
19373
#: serverguide/C/network-auth.xml:2226(computeroutput)
19374
#, no-wrap
19375
msgid ""
19376
"Credentials cache: FILE:/tmp/krb5cc_1000\n"
19377
" Principal: steve/admin@EXAMPLE.COM\n"
19378
"\n"
19379
" Issued Expires Principal\n"
19380
"Jul 13 17:53:34 Jul 14 03:53:34 krbtgt/EXAMPLE.COM@EXAMPLE.COM"
19381
msgstr ""
19382
"Credentials cache: FILE:/tmp/krb5cc_1000\n"
19383
" Principal: steve/admin@EXAMPLE.COM\n"
19384
"\n"
19385
" Issued Expires Principal\n"
19386
"Jul 13 17:53:34 Jul 14 03:53:34 krbtgt/EXAMPLE.COM@EXAMPLE.COM"
19387
19388
#: serverguide/C/network-auth.xml:2233(para)
19389
msgid ""
19390
"You may need to add an entry into the <filename>/etc/hosts</filename> for "
19391
"the KDC. For example:"
19392
msgstr ""
19393
"You may need to add an entry into the <filename>/etc/hosts</filename> for "
19394
"the KDC. For example:"
19395
19396
#: serverguide/C/network-auth.xml:2237(programlisting)
19397
#, no-wrap
19398
msgid ""
19399
"\n"
19400
"192.168.0.1 kdc01.example.com kdc01\n"
19401
msgstr ""
19402
"\n"
19403
"192.168.0.1 kdc01.example.com kdc01\n"
19404
19405
#: serverguide/C/network-auth.xml:2241(para)
19406
msgid ""
19407
"Replacing <emphasis>192.168.0.1</emphasis> with the IP address of your KDC."
19408
msgstr ""
19409
"Replacing <emphasis>192.168.0.1</emphasis> with the IP address of your KDC."
19410
19411
#: serverguide/C/network-auth.xml:2248(para)
19412
msgid ""
19413
"In order for clients to determine the KDC for the Realm some DNS SRV records "
19414
"are needed. Add the following to "
19415
"<filename>/etc/named/db.example.com</filename>:"
19416
msgstr ""
19417
"In order for clients to determine the KDC for the Realm some DNS SRV records "
19418
"are needed. Add the following to "
19419
"<filename>/etc/named/db.example.com</filename>:"
19420
19421
#: serverguide/C/network-auth.xml:2253(programlisting)
19422
#, no-wrap
19423
msgid ""
19424
"\n"
19425
"_kerberos._udp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
19426
"_kerberos._tcp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
19427
"_kerberos._udp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
19428
"_kerberos._tcp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
19429
"_kerberos-adm._tcp.EXAMPLE.COM. IN SRV 1 0 749 kdc01.example.com.\n"
19430
"_kpasswd._udp.EXAMPLE.COM. IN SRV 1 0 464 kdc01.example.com.\n"
19431
msgstr ""
19432
"\n"
19433
"_kerberos._udp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
19434
"_kerberos._tcp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
19435
"_kerberos._udp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
19436
"_kerberos._tcp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
19437
"_kerberos-adm._tcp.EXAMPLE.COM. IN SRV 1 0 749 kdc01.example.com.\n"
19438
"_kpasswd._udp.EXAMPLE.COM. IN SRV 1 0 464 kdc01.example.com.\n"
19439
19440
#: serverguide/C/network-auth.xml:2263(para)
19441
msgid ""
19442
"Replace <emphasis>EXAMPLE.COM</emphasis>, <emphasis>kdc01</emphasis>, and "
19443
"<emphasis>kdc02</emphasis> with your domain name, primary KDC, and secondary "
19444
"KDC."
19445
msgstr ""
19446
"Replace <emphasis>EXAMPLE.COM</emphasis>, <emphasis>kdc01</emphasis>, and "
19447
"<emphasis>kdc02</emphasis> with your domain name, primary KDC, and secondary "
19448
"KDC."
19449
19450
#: serverguide/C/network-auth.xml:2269(para)
19451
msgid ""
19452
"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."
19453
msgstr ""
19454
"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."
19455
19456
#: serverguide/C/network-auth.xml:2276(para)
19457
msgid "Your new Kerberos Realm is now ready to authenticate clients."
19458
msgstr "Your new Kerberos Realm is now ready to authenticate clients."
19459
19460
#: serverguide/C/network-auth.xml:2283(title)
19461
msgid "Secondary KDC"
19462
msgstr "Secondary KDC"
19463
19464
#: serverguide/C/network-auth.xml:2285(para)
19465
msgid ""
19466
"Once you have one Key Distribution Center (KDC) on your network, it is good "
19467
"practice to have a Secondary KDC in case the primary becomes unavailable."
19468
msgstr ""
19469
"Once you have one Key Distribution Centre (KDC) on your network, it is good "
19470
"practice to have a Secondary KDC in case the primary becomes unavailable."
19471
19472
#: serverguide/C/network-auth.xml:2293(para)
19473
msgid ""
19474
"First, install the packages, and when asked for the Kerberos and Admin "
19475
"server names enter the name of the Primary KDC:"
19476
msgstr ""
19477
"First, install the packages, and when asked for the Kerberos and Admin "
19478
"server names enter the name of the Primary KDC:"
19479
19480
#: serverguide/C/network-auth.xml:2304(para)
19481
msgid ""
19482
"Once you have the packages installed, create the Secondary KDC's host "
19483
"principal. From a terminal prompt, enter:"
19484
msgstr ""
19485
"Once you have the packages installed, create the Secondary KDC's host "
19486
"principal. From a terminal prompt, enter:"
19487
19488
#: serverguide/C/network-auth.xml:2309(command)
19489
msgid "kadmin -q \"addprinc -randkey host/kdc02.example.com\""
19490
msgstr "kadmin -q \"addprinc -randkey host/kdc02.example.com\""
19491
19492
#: serverguide/C/network-auth.xml:2313(para)
19493
msgid ""
19494
"After, issuing any <application>kadmin</application> commands you will be "
19495
"prompted for your <emphasis>username/admin@EXAMPLE.COM</emphasis> principal "
19496
"password."
19497
msgstr ""
19498
"After, issuing any <application>kadmin</application> commands you will be "
19499
"prompted for your <emphasis>username/admin@EXAMPLE.COM</emphasis> principal "
19500
"password."
19501
19502
#: serverguide/C/network-auth.xml:2322(para)
19503
msgid "Extract the <emphasis>keytab</emphasis> file:"
19504
msgstr "Extract the <emphasis>keytab</emphasis> file:"
19505
19506
#: serverguide/C/network-auth.xml:2327(command)
19507
msgid "kadmin -q \"ktadd -k keytab.kdc02 host/kdc02.example.com\""
19508
msgstr "kadmin -q \"ktadd -k keytab.kdc02 host/kdc02.example.com\""
19509
19510
#: serverguide/C/network-auth.xml:2333(para)
19511
msgid ""
19512
"There should now be a <filename>keytab.kdc02</filename> in the current "
19513
"directory, move the file to <filename>/etc/krb5.keytab</filename>:"
19514
msgstr ""
19515
"There should now be a <filename>keytab.kdc02</filename> in the current "
19516
"directory, move the file to <filename>/etc/krb5.keytab</filename>:"
19517
19518
#: serverguide/C/network-auth.xml:2339(command)
19519
msgid "sudo mv keytab.kdc02 /etc/krb5.keytab"
19520
msgstr "sudo mv keytab.kdc02 /etc/krb5.keytab"
19521
19522
#: serverguide/C/network-auth.xml:2343(para)
19523
msgid ""
19524
"If the path to the <filename>keytab.kdc02</filename> file is different "
19525
"adjust accordingly."
19526
msgstr ""
19527
"If the path to the <filename>keytab.kdc02</filename> file is different "
19528
"adjust accordingly."
19529
19530
#: serverguide/C/network-auth.xml:2348(para)
19531
msgid ""
19532
"Also, you can list the principals in a Keytab file, which can be useful when "
19533
"troubleshooting, using the <application>klist</application> utility:"
19534
msgstr ""
19535
"Also, you can list the principals in a Keytab file, which can be useful when "
19536
"troubleshooting, using the <application>klist</application> utility:"
19537
19538
#: serverguide/C/network-auth.xml:2354(command)
19539
msgid "sudo klist -k /etc/krb5.keytab"
19540
msgstr "sudo klist -k /etc/krb5.keytab"
19541
19542
#: serverguide/C/network-auth.xml:2360(para)
19543
msgid ""
19544
"Next, there needs to be a <filename>kpropd.acl</filename> file on each KDC "
19545
"that lists all KDCs for the Realm. For example, on both primary and "
19546
"secondary KDC, create <filename>/etc/krb5kdc/kpropd.acl</filename>:"
19547
msgstr ""
19548
"Next, there needs to be a <filename>kpropd.acl</filename> file on each KDC "
19549
"that lists all KDCs for the Realm. For example, on both primary and "
19550
"secondary KDC, create <filename>/etc/krb5kdc/kpropd.acl</filename>:"
19551
19552
#: serverguide/C/network-auth.xml:2365(programlisting)
19553
#, no-wrap
19554
msgid ""
19555
"\n"
19556
"host/kdc01.example.com@EXAMPLE.COM\n"
19557
"host/kdc02.example.com@EXAMPLE.COM\n"
19558
msgstr ""
19559
"\n"
19560
"host/kdc01.example.com@EXAMPLE.COM\n"
19561
"host/kdc02.example.com@EXAMPLE.COM\n"
19562
19563
#: serverguide/C/network-auth.xml:2373(para)
19564
msgid "Create an empty database on the <emphasis>Secondary KDC</emphasis>:"
19565
msgstr "Create an empty database on the <emphasis>Secondary KDC</emphasis>:"
19566
19567
#: serverguide/C/network-auth.xml:2378(command)
19568
msgid "sudo kdb5_util -s create"
19569
msgstr "sudo kdb5_util -s create"
19570
19571
#: serverguide/C/network-auth.xml:2384(para)
19572
msgid ""
19573
"Now start the <application>kpropd</application> daemon, which listens for "
19574
"connections from the <application>kprop</application> utility. "
19575
"<application>kprop</application> is used to transfer dump files:"
19576
msgstr ""
19577
"Now start the <application>kpropd</application> daemon, which listens for "
19578
"connections from the <application>kprop</application> utility. "
19579
"<application>kprop</application> is used to transfer dump files:"
19580
19581
#: serverguide/C/network-auth.xml:2391(command)
19582
msgid "sudo kpropd -S"
19583
msgstr "sudo kpropd -S"
19584
19585
#: serverguide/C/network-auth.xml:2397(para)
19586
msgid ""
19587
"From a terminal on the <emphasis>Primary KDC</emphasis>, create a dump file "
19588
"of the principal database:"
19589
msgstr ""
19590
"From a terminal on the <emphasis>Primary KDC</emphasis>, create a dump file "
19591
"of the principal database:"
19592
19593
#: serverguide/C/network-auth.xml:2402(command)
19594
msgid "sudo kdb5_util dump /var/lib/krb5kdc/dump"
19595
msgstr "sudo kdb5_util dump /var/lib/krb5kdc/dump"
19596
19597
#: serverguide/C/network-auth.xml:2408(para)
19598
msgid ""
19599
"Extract the Primary KDC's <emphasis>keytab</emphasis> file and copy it to "
19600
"<filename>/etc/krb5.keytab</filename>:"
19601
msgstr ""
19602
"Extract the Primary KDC's <emphasis>keytab</emphasis> file and copy it to "
19603
"<filename>/etc/krb5.keytab</filename>:"
19604
19605
#: serverguide/C/network-auth.xml:2413(command)
19606
msgid "kadmin -q \"ktadd -k keytab.kdc01 host/kdc01.example.com\""
19607
msgstr "kadmin -q \"ktadd -k keytab.kdc01 host/kdc01.example.com\""
19608
19609
#: serverguide/C/network-auth.xml:2414(command)
19610
msgid "sudo mv keytab.kdc01 /etc/krb5.keytab"
19611
msgstr ""
19612
19613
#: serverguide/C/network-auth.xml:2418(para)
19614
msgid ""
19615
"Make sure there is a <emphasis>host</emphasis> for "
19616
"<emphasis>kdc01.example.com</emphasis> before extracting the Keytab."
19617
msgstr ""
19618
"Make sure there is a <emphasis>host</emphasis> for "
19619
"<emphasis>kdc01.example.com</emphasis> before extracting the Keytab."
19620
19621
#: serverguide/C/network-auth.xml:2426(para)
19622
msgid ""
19623
"Using the <application>kprop</application> utility push the database to the "
19624
"Secondary KDC:"
19625
msgstr ""
19626
"Using the <application>kprop</application> utility push the database to the "
19627
"Secondary KDC:"
19628
19629
#: serverguide/C/network-auth.xml:2431(command)
19630
msgid "sudo kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com"
19631
msgstr "sudo kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com"
19632
19633
#: serverguide/C/network-auth.xml:2435(para)
19634
msgid ""
19635
"There should be a <emphasis>SUCCEEDED</emphasis> message if the propagation "
19636
"worked. If there is an error message check "
19637
"<filename>/var/log/syslog</filename> on the secondary KDC for more "
19638
"information."
19639
msgstr ""
19640
"There should be a <emphasis>SUCCEEDED</emphasis> message if the propagation "
19641
"worked. If there is an error message check "
19642
"<filename>/var/log/syslog</filename> on the secondary KDC for more "
19643
"information."
19644
19645
#: serverguide/C/network-auth.xml:2441(para)
19646
msgid ""
19647
"You may also want to create a <application>cron</application> job to "
19648
"periodically update the database on the Secondary KDC. For example, the "
19649
"following will push the database every hour:"
19650
msgstr ""
19651
"You may also want to create a <application>cron</application> job to "
19652
"periodically update the database on the Secondary KDC. For example, the "
19653
"following will push the database every hour:"
19654
19655
#: serverguide/C/network-auth.xml:2446(programlisting)
19656
#, no-wrap
19657
msgid ""
19658
"\n"
19659
"# m h dom mon dow command\n"
19660
"0 * * * * /usr/sbin/kdb5_util dump /var/lib/krb5kdc/dump && "
19661
"/usr/sbin/kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com\n"
19662
msgstr ""
19663
"\n"
19664
"# m h dom mon dow command\n"
19665
"0 * * * * /usr/sbin/kdb5_util dump /var/lib/krb5kdc/dump && "
19666
"/usr/sbin/kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com\n"
19667
19668
#: serverguide/C/network-auth.xml:2454(para)
19669
msgid ""
19670
"Back on the <emphasis>Secondary KDC</emphasis>, create a "
19671
"<emphasis>stash</emphasis> file to hold the Kerberos master key:"
19672
msgstr ""
19673
"Back on the <emphasis>Secondary KDC</emphasis>, create a "
19674
"<emphasis>stash</emphasis> file to hold the Kerberos master key:"
19675
19676
#: serverguide/C/network-auth.xml:2460(command)
19677
msgid "sudo kdb5_util stash"
19678
msgstr "sudo kdb5_util stash"
19679
19680
#: serverguide/C/network-auth.xml:2466(para)
19681
msgid ""
19682
"Finally, start the <application>krb5-kdc</application> daemon on the "
19683
"Secondary KDC:"
19684
msgstr ""
19685
"Finally, start the <application>krb5-kdc</application> daemon on the "
19686
"Secondary KDC:"
19687
19688
#: serverguide/C/network-auth.xml:2471(command) serverguide/C/network-auth.xml:3083(command)
19689
msgid "sudo /etc/init.d/krb5-kdc start"
19690
msgstr "sudo /etc/init.d/krb5-kdc start"
19691
19692
#: serverguide/C/network-auth.xml:2477(para)
19693
msgid ""
19694
"The <emphasis>Secondary KDC</emphasis> should now be able to issue tickets "
19695
"for the Realm. You can test this by stopping the <application>krb5-"
19696
"kdc</application> daemon on the Primary KDC, then use "
19697
"<application>kinit</application> to request a ticket. If all goes well you "
19698
"should receive a ticket from the Secondary KDC."
19699
msgstr ""
19700
"The <emphasis>Secondary KDC</emphasis> should now be able to issue tickets "
19701
"for the Realm. You can test this by stopping the <application>krb5-"
19702
"kdc</application> daemon on the Primary KDC, then use "
19703
"<application>kinit</application> to request a ticket. If all goes well you "
19704
"should receive a ticket from the Secondary KDC."
19705
19706
#: serverguide/C/network-auth.xml:2485(title)
19707
msgid "Kerberos Linux Client"
19708
msgstr "Kerberos Linux Client"
19709
19710
#: serverguide/C/network-auth.xml:2487(para)
19711
msgid ""
19712
"This section covers configuring a Linux system as a "
19713
"<application>Kerberos</application> client. This will allow access to any "
19714
"kerberized services once a user has successfully logged into the system."
19715
msgstr ""
19716
"This section covers configuring a Linux system as a "
19717
"<application>Kerberos</application> client. This will allow access to any "
19718
"kerberised services once a user has successfully logged into the system."
19719
19720
#: serverguide/C/network-auth.xml:2495(para)
19721
msgid ""
19722
"In order to authenticate to a Kerberos Realm, the <application>krb5-"
19723
"user</application> and <application>libpam-krb5</application> packages are "
19724
"needed, along with a few others that are not strictly necessary but make "
19725
"life easier. To install the packages enter the following in a terminal "
19726
"prompt:"
19727
msgstr ""
19728
"In order to authenticate to a Kerberos Realm, the <application>krb5-"
19729
"user</application> and <application>libpam-krb5</application> packages are "
19730
"needed, along with a few others that are not strictly necessary but make "
19731
"life easier. To install the packages enter the following in a terminal "
19732
"prompt:"
19733
19734
#: serverguide/C/network-auth.xml:2502(command)
19735
msgid ""
19736
"sudo apt-get install krb5-user libpam-krb5 libpam-ccreds auth-client-config"
19737
msgstr ""
19738
"sudo apt-get install krb5-user libpam-krb5 libpam-ccreds auth-client-config"
19739
19740
#: serverguide/C/network-auth.xml:2505(para)
19741
msgid ""
19742
"The <application>auth-client-config</application> package allows simple "
19743
"configuration of PAM for authentication from multiple sources, and the "
19744
"<application>libpam-ccreds</application> will cache authentication "
19745
"credentials allowing you to login in case the Key Distribution Center (KDC) "
19746
"is unavailable. This package is also useful for laptops that may "
19747
"authenticate using Kerberos while on the corporate network, but will need to "
19748
"be accessed off the network as well."
19749
msgstr ""
19750
"The <application>auth-client-config</application> package allows simple "
19751
"configuration of PAM for authentication from multiple sources, and the "
19752
"<application>libpam-ccreds</application> will cache authentication "
19753
"credentials allowing you to login in case the Key Distribution Centre (KDC) "
19754
"is unavailable. This package is also useful for laptops that may "
19755
"authenticate using Kerberos while on the corporate network, but will need to "
19756
"be accessed off the network as well."
19757
19758
#: serverguide/C/network-auth.xml:2516(para)
19759
msgid "To configure the client in a terminal enter:"
19760
msgstr "To configure the client in a terminal enter:"
19761
19762
#: serverguide/C/network-auth.xml:2521(command)
19763
msgid "sudo dpkg-reconfigure krb5-config"
19764
msgstr "sudo dpkg-reconfigure krb5-config"
19765
19766
#: serverguide/C/network-auth.xml:2524(para)
19767
msgid ""
19768
"You will then be prompted to enter the name of the Kerberos Realm. Also, if "
19769
"you don't have DNS configured with Kerberos <emphasis>SRV</emphasis> "
19770
"records, the menu will prompt you for the hostname of the Key Distribution "
19771
"Center (KDC) and Realm Administration server."
19772
msgstr ""
19773
"You will then be prompted to enter the name of the Kerberos Realm. Also, if "
19774
"you don't have DNS configured with Kerberos <emphasis>SRV</emphasis> "
19775
"records, the menu will prompt you for the hostname of the Key Distribution "
19776
"Centre (KDC) and Realm Administration server."
19777
19778
#: serverguide/C/network-auth.xml:2530(para)
19779
msgid ""
19780
"The <application>dpkg-reconfigure</application> adds entries to the "
19781
"<filename>/etc/krb5.conf</filename> file for your Realm. You should have "
19782
"entries similar to the following:"
19783
msgstr ""
19784
"The <application>dpkg-reconfigure</application> adds entries to the "
19785
"<filename>/etc/krb5.conf</filename> file for your Realm. You should have "
19786
"entries similar to the following:"
19787
19788
#: serverguide/C/network-auth.xml:2535(programlisting)
19789
#, no-wrap
19790
msgid ""
19791
"\n"
19792
"[libdefaults]\n"
19793
" default_realm = EXAMPLE.COM\n"
19794
"...\n"
19795
"[realms]\n"
19796
" EXAMPLE.COM = } \n"
19797
" kdc = 192.168.0.1 \n"
19798
" admin_server = 192.168.0.1\n"
19799
" }\n"
19800
msgstr ""
19801
"\n"
19802
"[libdefaults]\n"
19803
" default_realm = EXAMPLE.COM\n"
19804
"...\n"
19805
"[realms]\n"
19806
" EXAMPLE.COM = } \n"
19807
" kdc = 192.168.0.1 \n"
19808
" admin_server = 192.168.0.1\n"
19809
" }\n"
19810
19811
#: serverguide/C/network-auth.xml:2546(para)
19812
msgid ""
19813
"You can test the configuration by requesting a ticket using the "
19814
"<application>kinit</application> utility. For example:"
19815
msgstr ""
19816
"You can test the configuration by requesting a ticket using the "
19817
"<application>kinit</application> utility. For example:"
19818
19819
#: serverguide/C/network-auth.xml:2551(command)
19820
msgid "kinit steve@EXAMPLE.COM"
19821
msgstr "kinit steve@EXAMPLE.COM"
19822
19823
#: serverguide/C/network-auth.xml:2552(computeroutput)
19824
#, no-wrap
19825
msgid "Password for steve@EXAMPLE.COM:"
19826
msgstr "Password for steve@EXAMPLE.COM:"
19827
19828
#: serverguide/C/network-auth.xml:2555(para)
19829
msgid ""
19830
"When a ticket has been granted, the details can be viewed using "
19831
"<application>klist</application>:"
19832
msgstr ""
19833
"When a ticket has been granted, the details can be viewed using "
19834
"<application>klist</application>:"
19835
19836
#: serverguide/C/network-auth.xml:2561(computeroutput)
19837
#, no-wrap
19838
msgid ""
19839
"Ticket cache: FILE:/tmp/krb5cc_1000\n"
19840
"Default principal: steve@EXAMPLE.COM\n"
19841
"\n"
19842
"Valid starting Expires Service principal\n"
19843
"07/24/08 05:18:56 07/24/08 15:18:56 krbtgt/EXAMPLE.COM@EXAMPLE.COM\n"
19844
" renew until 07/25/08 05:18:57\n"
19845
"\n"
19846
"\n"
19847
"Kerberos 4 ticket cache: /tmp/tkt1000\n"
19848
"klist: You have no tickets cached"
19849
msgstr ""
19850
"Ticket cache: FILE:/tmp/krb5cc_1000\n"
19851
"Default principal: steve@EXAMPLE.COM\n"
19852
"\n"
19853
"Valid starting Expires Service principal\n"
19854
"07/24/08 05:18:56 07/24/08 15:18:56 krbtgt/EXAMPLE.COM@EXAMPLE.COM\n"
19855
" renew until 07/25/08 05:18:57\n"
19856
"\n"
19857
"\n"
19858
"Kerberos 4 ticket cache: /tmp/tkt1000\n"
19859
"klist: You have no tickets cached"
19860
19861
#: serverguide/C/network-auth.xml:2573(para)
19862
msgid ""
19863
"Next, use the <application>auth-client-config</application> to configure the "
19864
"<application>libpam-krb5</application> module to request a ticket during "
19865
"login:"
19866
msgstr ""
19867
"Next, use the <application>auth-client-config</application> to configure the "
19868
"<application>libpam-krb5</application> module to request a ticket during "
19869
"login:"
19870
19871
#: serverguide/C/network-auth.xml:2579(command)
19872
msgid "sudo auth-client-config -a -p kerberos_example"
19873
msgstr "sudo auth-client-config -a -p kerberos_example"
19874
19875
#: serverguide/C/network-auth.xml:2582(para)
19876
msgid ""
19877
"You will should now receive a ticket upon successful login authentication."
19878
msgstr ""
19879
"You will should now receive a ticket upon successful login authentication."
19880
19881
#: serverguide/C/network-auth.xml:2593(para)
19882
msgid ""
19883
"For more information on Kerberos see the <ulink "
19884
"url=\"http://web.mit.edu/Kerberos/\">MIT Kerberos</ulink> site."
19885
msgstr ""
19886
"For more information on Kerberos see the <ulink "
19887
"url=\"http://web.mit.edu/Kerberos/\">MIT Kerberos</ulink> site."
19888
19889
#: serverguide/C/network-auth.xml:2598(para)
19890
msgid ""
19891
"The <ulink url=\"https://help.ubuntu.com/community/Kerberos\">Ubuntu Wiki "
19892
"Kerberos</ulink> page has more details."
19893
msgstr ""
19894
19895
#: serverguide/C/network-auth.xml:2603(para)
19896
msgid ""
19897
"O'Reilly's <ulink "
19898
"url=\"http://oreilly.com/catalog/9780596004033/\">Kerberos: The Definitive "
19899
"Guide</ulink> is a great reference when setting up Kerberos."
19900
msgstr ""
19901
"O'Reilly's <ulink "
19902
"url=\"http://oreilly.com/catalog/9780596004033/\">Kerberos: The Definitive "
19903
"Guide</ulink> is a great reference when setting up Kerberos."
19904
19905
#: serverguide/C/network-auth.xml:2609(para)
19906
msgid ""
19907
"Also, feel free to stop by the <emphasis>#ubuntu-server</emphasis> IRC "
19908
"channel on <ulink url=\"http://freenode.net/\">Freenode</ulink> if you have "
19909
"Kerberos questions."
19910
msgstr ""
19911
"Also, feel free to stop by the <emphasis>#ubuntu-server</emphasis> IRC "
19912
"channel on <ulink url=\"http://freenode.net/\">Freenode</ulink> if you have "
19913
"Kerberos questions."
19914
19915
#: serverguide/C/network-auth.xml:2619(title)
19916
msgid "Kerberos and LDAP"
19917
msgstr "Kerberos and LDAP"
19918
19919
#: serverguide/C/network-auth.xml:2621(para)
19920
msgid ""
19921
"Replicating a Kerberos principal database between two servers can be "
19922
"complicated, and adds an additional user database to your network. "
19923
"Fortunately, MIT Kerberos can be configured to use an "
19924
"<application>LDAP</application> directory as a principal database. This "
19925
"section covers configuring a primary and secondary kerberos server to use "
19926
"<application>OpenLDAP</application> for the principal database."
19927
msgstr ""
19928
"Replicating a Kerberos principal database between two servers can be "
19929
"complicated, and adds an additional user database to your network. "
19930
"Fortunately, MIT Kerberos can be configured to use an "
19931
"<application>LDAP</application> directory as a principal database. This "
19932
"section covers configuring a primary and secondary kerberos server to use "
19933
"<application>OpenLDAP</application> for the principal database."
19934
19935
#: serverguide/C/network-auth.xml:2629(title)
19936
msgid "Configuring OpenLDAP"
19937
msgstr "Configuring OpenLDAP"
19938
19939
#: serverguide/C/network-auth.xml:2631(para)
19940
msgid ""
19941
"First, the necessary <emphasis>schema</emphasis> needs to be loaded on an "
19942
"<application>OpenLDAP</application> server that has network connectivity to "
19943
"the Primary and Secondary KDCs. The rest of this section assumes that you "
19944
"also have LDAP replication configured between at least two servers. For "
19945
"information on setting up OpenLDAP see <xref linkend=\"openldap-server\"/>."
19946
msgstr ""
19947
"First, the necessary <emphasis>schema</emphasis> needs to be loaded on an "
19948
"<application>OpenLDAP</application> server that has network connectivity to "
19949
"the Primary and Secondary KDCs. The rest of this section assumes that you "
19950
"also have LDAP replication configured between at least two servers. For "
19951
"information on setting up OpenLDAP see <xref linkend=\"openldap-server\"/>."
19952
19953
#: serverguide/C/network-auth.xml:2638(para)
19954
msgid ""
19955
"It is also required to configure OpenLDAP for TLS and SSL connections, so "
19956
"that traffic between the KDC and LDAP server is encrypted. See <xref "
19957
"linkend=\"openldap-tls\"/> for details."
19958
msgstr ""
19959
"It is also required to configure OpenLDAP for TLS and SSL connections, so "
19960
"that traffic between the KDC and LDAP server is encrypted. See <xref "
19961
"linkend=\"openldap-tls\"/> for details."
19962
19963
#: serverguide/C/network-auth.xml:2645(para)
19964
msgid ""
19965
"To load the schema into LDAP, on the LDAP server install the "
19966
"<application>krb5-kdc-ldap</application> package. From a terminal enter:"
19967
msgstr ""
19968
"To load the schema into LDAP, on the LDAP server install the "
19969
"<application>krb5-kdc-ldap</application> package. From a terminal enter:"
19970
19971
#: serverguide/C/network-auth.xml:2651(command)
19972
msgid "sudo apt-get install krb5-kdc-ldap"
19973
msgstr "sudo apt-get install krb5-kdc-ldap"
19974
19975
#: serverguide/C/network-auth.xml:2656(para)
19976
msgid "Next, extract the <filename>kerberos.schema.gz</filename> file:"
19977
msgstr "Next, extract the <filename>kerberos.schema.gz</filename> file:"
19978
19979
#: serverguide/C/network-auth.xml:2661(command)
19980
msgid "sudo gzip -d /usr/share/doc/krb5-kdc-ldap/kerberos.schema.gz"
19981
msgstr "sudo gzip -d /usr/share/doc/krb5-kdc-ldap/kerberos.schema.gz"
19982
19983
#: serverguide/C/network-auth.xml:2662(command)
19984
msgid ""
19985
"sudo cp /usr/share/doc/krb5-kdc-ldap/kerberos.schema /etc/ldap/schema/"
19986
msgstr ""
19987
"sudo cp /usr/share/doc/krb5-kdc-ldap/kerberos.schema /etc/ldap/schema/"
19988
19989
#: serverguide/C/network-auth.xml:2668(para)
19990
msgid ""
19991
"The <emphasis>kerberos</emphasis> schema needs to be added to the "
19992
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
19993
"<application>slapd</application> is also detailed in <xref "
19994
"linkend=\"openldap-configuration\"/>."
19995
msgstr ""
19996
"The <emphasis>kerberos</emphasis> schema needs to be added to the "
19997
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
19998
"<application>slapd</application> is also detailed in <xref "
19999
"linkend=\"openldap-configuration\"/>."
20000
20001
#: serverguide/C/network-auth.xml:2681(programlisting)
20002
#, no-wrap
20003
msgid ""
20004
"\n"
20005
"include /etc/ldap/schema/core.schema\n"
20006
"include /etc/ldap/schema/collective.schema\n"
20007
"include /etc/ldap/schema/corba.schema\n"
20008
"include /etc/ldap/schema/cosine.schema\n"
20009
"include /etc/ldap/schema/duaconf.schema\n"
20010
"include /etc/ldap/schema/dyngroup.schema\n"
20011
"include /etc/ldap/schema/inetorgperson.schema\n"
20012
"include /etc/ldap/schema/java.schema\n"
20013
"include /etc/ldap/schema/misc.schema\n"
20014
"include /etc/ldap/schema/nis.schema\n"
20015
"include /etc/ldap/schema/openldap.schema\n"
20016
"include /etc/ldap/schema/ppolicy.schema\n"
20017
"include /etc/ldap/schema/kerberos.schema\n"
20018
msgstr ""
20019
"\n"
20020
"include /etc/ldap/schema/core.schema\n"
20021
"include /etc/ldap/schema/collective.schema\n"
20022
"include /etc/ldap/schema/corba.schema\n"
20023
"include /etc/ldap/schema/cosine.schema\n"
20024
"include /etc/ldap/schema/duaconf.schema\n"
20025
"include /etc/ldap/schema/dyngroup.schema\n"
20026
"include /etc/ldap/schema/inetorgperson.schema\n"
20027
"include /etc/ldap/schema/java.schema\n"
20028
"include /etc/ldap/schema/misc.schema\n"
20029
"include /etc/ldap/schema/nis.schema\n"
20030
"include /etc/ldap/schema/openldap.schema\n"
20031
"include /etc/ldap/schema/ppolicy.schema\n"
20032
"include /etc/ldap/schema/kerberos.schema\n"
20033
20034
#: serverguide/C/network-auth.xml:2701(para)
20035
msgid "Create a temporary directory to hold the LDIF files:"
20036
msgstr "Create a temporary directory to hold the LDIF files:"
20037
20038
#: serverguide/C/network-auth.xml:2716(command)
20039
msgid ""
20040
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
20041
"\"cn={12}kerberos,cn=schema,cn=config\" > /tmp/cn=kerberos.ldif"
20042
msgstr ""
20043
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
20044
"\"cn={12}kerberos,cn=schema,cn=config\" > /tmp/cn=kerberos.ldif"
20045
20046
#: serverguide/C/network-auth.xml:2726(para)
20047
msgid ""
20048
"Edit the generated <filename>/tmp/cn\\=kerberos.ldif</filename> file, "
20049
"changing the following attributes:"
20050
msgstr ""
20051
"Edit the generated <filename>/tmp/cn\\=kerberos.ldif</filename> file, "
20052
"changing the following attributes:"
20053
20054
#: serverguide/C/network-auth.xml:2730(programlisting)
20055
#, no-wrap
20056
msgid ""
20057
"\n"
20058
"dn: cn=kerberos,cn=schema,cn=config\n"
20059
"...\n"
20060
"cn: kerberos\n"
20061
msgstr ""
20062
"\n"
20063
"dn: cn=kerberos,cn=schema,cn=config\n"
20064
"...\n"
20065
"cn: kerberos\n"
20066
20067
#: serverguide/C/network-auth.xml:2736(para)
20068
msgid "And remove the following lines from the end of the file:"
20069
msgstr "And remove the following lines from the end of the file:"
20070
20071
#: serverguide/C/network-auth.xml:2740(programlisting)
20072
#, no-wrap
20073
msgid ""
20074
"\n"
20075
"structuralObjectClass: olcSchemaConfig\n"
20076
"entryUUID: 18ccd010-746b-102d-9fbe-3760cca765dc\n"
20077
"creatorsName: cn=config\n"
20078
"createTimestamp: 20090111203515Z\n"
20079
"entryCSN: 20090111203515.326445Z#000000#000#000000\n"
20080
"modifiersName: cn=config\n"
20081
"modifyTimestamp: 20090111203515Z\n"
20082
msgstr ""
20083
"\n"
20084
"structuralObjectClass: olcSchemaConfig\n"
20085
"entryUUID: 18ccd010-746b-102d-9fbe-3760cca765dc\n"
20086
"creatorsName: cn=config\n"
20087
"createTimestamp: 20090111203515Z\n"
20088
"entryCSN: 20090111203515.326445Z#000000#000#000000\n"
20089
"modifiersName: cn=config\n"
20090
"modifyTimestamp: 20090111203515Z\n"
20091
20092
#: serverguide/C/network-auth.xml:2759(para)
20093
msgid "Load the new schema with <application>ldapadd</application>:"
20094
msgstr "Load the new schema with <application>ldapadd</application>:"
20095
20096
#: serverguide/C/network-auth.xml:2764(command)
20097
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=kerberos.ldif"
20098
msgstr "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=kerberos.ldif"
20099
20100
#: serverguide/C/network-auth.xml:2770(para)
20101
msgid ""
20102
"Add an index for the <emphasis>krb5principalname</emphasis> attribute:"
20103
msgstr ""
20104
"Add an index for the <emphasis>krb5principalname</emphasis> attribute:"
20105
20106
#: serverguide/C/network-auth.xml:2775(command) serverguide/C/network-auth.xml:2792(command)
20107
msgid "ldapmodify -x -D cn=admin,cn=config -W"
20108
msgstr "ldapmodify -x -D cn=admin,cn=config -W"
20109
20110
#: serverguide/C/network-auth.xml:2777(userinput)
20111
#, no-wrap
20112
msgid ""
20113
"dn: olcDatabase={1}hdb,cn=config\n"
20114
"add: olcDbIndex\n"
20115
"olcDbIndex: krbPrincipalName eq,pres,sub"
20116
msgstr ""
20117
"dn: olcDatabase={1}hdb,cn=config\n"
20118
"add: olcDbIndex\n"
20119
"olcDbIndex: krbPrincipalName eq,pres,sub"
20120
20121
#: serverguide/C/network-auth.xml:2776(computeroutput)
20122
#, no-wrap
20123
msgid ""
20124
"Enter LDAP Password:\n"
20125
"<placeholder-1/>\n"
20126
"\n"
20127
"modifying entry \"olcDatabase={1}hdb,cn=config\""
20128
msgstr ""
20129
"Enter LDAP Password:\n"
20130
"<placeholder-1/>\n"
20131
"\n"
20132
"modifying entry \"olcDatabase={1}hdb,cn=config\""
20133
20134
#: serverguide/C/network-auth.xml:2787(para)
20135
msgid "Finally, update the Access Control Lists (ACL):"
20136
msgstr "Finally, update the Access Control Lists (ACL):"
20137
20138
#: serverguide/C/network-auth.xml:2794(userinput)
20139
#, no-wrap
20140
msgid ""
20141
"dn: olcDatabase={1}hdb,cn=config\n"
20142
"replace: olcAccess\n"
20143
"olcAccess: to attrs=userPassword,shadowLastChange,krbPrincipalKey by "
20144
"dn=\"cn=admin,dc=exampl\n"
20145
" e,dc=com\" write by anonymous auth by self write by * none\n"
20146
"-\n"
20147
"add: olcAccess\n"
20148
"olcAccess: to dn.base=\"\" by * read\n"
20149
"-\n"
20150
"add: olcAccess\n"
20151
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read"
20152
msgstr ""
20153
"dn: olcDatabase={1}hdb,cn=config\n"
20154
"replace: olcAccess\n"
20155
"olcAccess: to attrs=userPassword,shadowLastChange,krbPrincipalKey by "
20156
"dn=\"cn=admin,dc=exampl\n"
20157
" e,dc=com\" write by anonymous auth by self write by * none\n"
20158
"-\n"
20159
"add: olcAccess\n"
20160
"olcAccess: to dn.base=\"\" by * read\n"
20161
"-\n"
20162
"add: olcAccess\n"
20163
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read"
20164
20165
#: serverguide/C/network-auth.xml:2793(computeroutput)
20166
#, no-wrap
20167
msgid ""
20168
"Enter LDAP Password: \n"
20169
"<placeholder-1/>\n"
20170
"\n"
20171
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
20172
msgstr ""
20173
"Enter LDAP Password: \n"
20174
"<placeholder-1/>\n"
20175
"\n"
20176
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
20177
20178
#: serverguide/C/network-auth.xml:2814(para)
20179
msgid ""
20180
"That's it, your LDAP directory is now ready to serve as a Kerberos principal "
20181
"database."
20182
msgstr ""
20183
"That's it, your LDAP directory is now ready to serve as a Kerberos principal "
20184
"database."
20185
20186
#: serverguide/C/network-auth.xml:2820(title)
20187
msgid "Primary KDC Configuration"
20188
msgstr "Primary KDC Configuration"
20189
20190
#: serverguide/C/network-auth.xml:2822(para)
20191
msgid ""
20192
"With <application>OpenLDAP</application> configured it is time to configure "
20193
"the KDC."
20194
msgstr ""
20195
"With <application>OpenLDAP</application> configured it is time to configure "
20196
"the KDC."
20197
20198
#: serverguide/C/network-auth.xml:2828(para)
20199
msgid "First, install the necessary packages, from a terminal enter:"
20200
msgstr "First, install the necessary packages, from a terminal enter:"
20201
20202
#: serverguide/C/network-auth.xml:2833(command) serverguide/C/network-auth.xml:2990(command)
20203
msgid "sudo apt-get install krb5-kdc krb5-admin-server krb5-kdc-ldap"
20204
msgstr "sudo apt-get install krb5-kdc krb5-admin-server krb5-kdc-ldap"
20205
20206
#: serverguide/C/network-auth.xml:2839(para)
20207
msgid ""
20208
"Now edit <filename>/etc/krb5.conf</filename> adding the following options to "
20209
"under the appropriate sections:"
20210
msgstr ""
20211
"Now edit <filename>/etc/krb5.conf</filename> adding the following options to "
20212
"under the appropriate sections:"
20213
20214
#: serverguide/C/network-auth.xml:2843(programlisting)
20215
#, no-wrap
20216
msgid ""
20217
"\n"
20218
"[libdefaults]\n"
20219
" default_realm = EXAMPLE.COM\n"
20220
"\n"
20221
"...\n"
20222
"\n"
20223
"[realms]\n"
20224
" EXAMPLE.COM = {\n"
20225
" kdc = kdc01.example.com\n"
20226
" kdc = kdc02.example.com\n"
20227
" admin_server = kdc01.example.com\n"
20228
" admin_server = kdc02.example.com\n"
20229
" default_domain = example.com\n"
20230
" database_module = openldap_ldapconf\n"
20231
" }\n"
20232
"\n"
20233
"...\n"
20234
"\n"
20235
"[domain_realm]\n"
20236
" .example.com = EXAMPLE.COM\n"
20237
"\n"
20238
"\n"
20239
"...\n"
20240
"\n"
20241
"[dbdefaults]\n"
20242
" ldap_kerberos_container_dn = dc=example,dc=com\n"
20243
"\n"
20244
"[dbmodules]\n"
20245
" openldap_ldapconf = {\n"
20246
" db_library = kldap\n"
20247
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
20248
"\n"
20249
" # this object needs to have read rights on\n"
20250
" # the realm container, principal container and realm sub-"
20251
"trees\n"
20252
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
20253
"\n"
20254
" # this object needs to have read and write rights on\n"
20255
" # the realm container, principal container and realm sub-"
20256
"trees\n"
20257
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
20258
" ldap_servers = ldaps://ldap01.example.com "
20259
"ldaps://ldap02.example.com\n"
20260
" ldap_conns_per_server = 5\n"
20261
" }\n"
20262
msgstr ""
20263
"\n"
20264
"[libdefaults]\n"
20265
" default_realm = EXAMPLE.COM\n"
20266
"\n"
20267
"...\n"
20268
"\n"
20269
"[realms]\n"
20270
" EXAMPLE.COM = {\n"
20271
" kdc = kdc01.example.com\n"
20272
" kdc = kdc02.example.com\n"
20273
" admin_server = kdc01.example.com\n"
20274
" admin_server = kdc02.example.com\n"
20275
" default_domain = example.com\n"
20276
" database_module = openldap_ldapconf\n"
20277
" }\n"
20278
"\n"
20279
"...\n"
20280
"\n"
20281
"[domain_realm]\n"
20282
" .example.com = EXAMPLE.COM\n"
20283
"\n"
20284
"\n"
20285
"...\n"
20286
"\n"
20287
"[dbdefaults]\n"
20288
" ldap_kerberos_container_dn = dc=example,dc=com\n"
20289
"\n"
20290
"[dbmodules]\n"
20291
" openldap_ldapconf = {\n"
20292
" db_library = kldap\n"
20293
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
20294
"\n"
20295
" # this object needs to have read rights on\n"
20296
" # the realm container, principal container and realm sub-"
20297
"trees\n"
20298
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
20299
"\n"
20300
" # this object needs to have read and write rights on\n"
20301
" # the realm container, principal container and realm sub-"
20302
"trees\n"
20303
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
20304
" ldap_servers = ldaps://ldap01.example.com "
20305
"ldaps://ldap02.example.com\n"
20306
" ldap_conns_per_server = 5\n"
20307
" }\n"
20308
20309
#: serverguide/C/network-auth.xml:2888(para)
20310
msgid ""
20311
"Change <emphasis>example.com</emphasis>, "
20312
"<emphasis>dc=example,dc=com</emphasis>, "
20313
"<emphasis>cn=admin,dc=example,dc=com</emphasis>, and "
20314
"<emphasis>ldap01.example.com</emphasis> to the appropriate domain, LDAP "
20315
"object, and LDAP server for your network."
20316
msgstr ""
20317
"Change <emphasis>example.com</emphasis>, "
20318
"<emphasis>dc=example,dc=com</emphasis>, "
20319
"<emphasis>cn=admin,dc=example,dc=com</emphasis>, and "
20320
"<emphasis>ldap01.example.com</emphasis> to the appropriate domain, LDAP "
20321
"object, and LDAP server for your network."
20322
20323
#: serverguide/C/network-auth.xml:2897(para)
20324
msgid ""
20325
"Next, use the <application>kdb5_ldap_util</application> utility to create "
20326
"the realm:"
20327
msgstr ""
20328
"Next, use the <application>kdb5_ldap_util</application> utility to create "
20329
"the realm:"
20330
20331
#: serverguide/C/network-auth.xml:2902(command)
20332
msgid ""
20333
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees "
20334
"dc=example,dc=com -r EXAMPLE.COM -s -H ldap://ldap01.example.com"
20335
msgstr ""
20336
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees "
20337
"dc=example,dc=com -r EXAMPLE.COM -s -H ldap://ldap01.example.com"
20338
20339
#: serverguide/C/network-auth.xml:2908(para)
20340
msgid ""
20341
"Create a stash of the password used to bind to the LDAP server. This "
20342
"password is used by the <emphasis>ldap_kdc_dn</emphasis> and "
20343
"<emphasis>ldap_kadmin_dn</emphasis> options in "
20344
"<filename>/etc/krb5.conf</filename>:"
20345
msgstr ""
20346
"Create a stash of the password used to bind to the LDAP server. This "
20347
"password is used by the <emphasis>ldap_kdc_dn</emphasis> and "
20348
"<emphasis>ldap_kadmin_dn</emphasis> options in "
20349
"<filename>/etc/krb5.conf</filename>:"
20350
20351
#: serverguide/C/network-auth.xml:2914(command) serverguide/C/network-auth.xml:3052(command)
20352
msgid ""
20353
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com stashsrvpw -f "
20354
"/etc/krb5kdc/service.keyfile cn=admin,dc=example,dc=com"
20355
msgstr ""
20356
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com stashsrvpw -f "
20357
"/etc/krb5kdc/service.keyfile cn=admin,dc=example,dc=com"
20358
20359
#: serverguide/C/network-auth.xml:2920(para)
20360
msgid "Copy the CA certificate from the LDAP server:"
20361
msgstr "Copy the CA certificate from the LDAP server:"
20362
20363
#: serverguide/C/network-auth.xml:2925(command)
20364
msgid "scp ldap01:/etc/ssl/certs/cacert.pem ."
20365
msgstr "scp ldap01:/etc/ssl/certs/cacert.pem ."
20366
20367
#: serverguide/C/network-auth.xml:2926(command)
20368
msgid "sudo cp cacert.pem /etc/ssl/certs"
20369
msgstr "sudo cp cacert.pem /etc/ssl/certs"
20370
20371
#: serverguide/C/network-auth.xml:2929(para)
20372
msgid ""
20373
"And edit <filename>/etc/ldap/ldap.conf</filename> to use the certificate:"
20374
msgstr ""
20375
"And edit <filename>/etc/ldap/ldap.conf</filename> to use the certificate:"
20376
20377
#: serverguide/C/network-auth.xml:2933(programlisting)
20378
#, no-wrap
20379
msgid ""
20380
"\n"
20381
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
20382
msgstr ""
20383
"\n"
20384
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
20385
20386
#: serverguide/C/network-auth.xml:2938(para)
20387
msgid ""
20388
"The certificate will also need to be copied to the Secondary KDC, to allow "
20389
"the connection to the LDAP servers using LDAPS."
20390
msgstr ""
20391
"The certificate will also need to be copied to the Secondary KDC, to allow "
20392
"the connection to the LDAP servers using LDAPS."
20393
20394
#: serverguide/C/network-auth.xml:2947(para)
20395
msgid ""
20396
"You can now add Kerberos principals to the LDAP database, and they will be "
20397
"copied to any other LDAP servers configured for replication. To add a "
20398
"principal using the <application>kadmin.local</application> utility enter:"
20399
msgstr ""
20400
"You can now add Kerberos principals to the LDAP database, and they will be "
20401
"copied to any other LDAP servers configured for replication. To add a "
20402
"principal using the <application>kadmin.local</application> utility enter:"
20403
20404
#: serverguide/C/network-auth.xml:2955(userinput)
20405
#, no-wrap
20406
msgid "addprinc -x dn=\"uid=steve,ou=people,dc=example,dc=com\" steve"
20407
msgstr "addprinc -x dn=\"uid=steve,ou=people,dc=example,dc=com\" steve"
20408
20409
#: serverguide/C/network-auth.xml:2954(computeroutput)
20410
#, no-wrap
20411
msgid ""
20412
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
20413
"kadmin.local: <placeholder-1/>\n"
20414
"WARNING: no policy specified for steve@EXAMPLE.COM; defaulting to no policy\n"
20415
"Enter password for principal \"steve@EXAMPLE.COM\": \n"
20416
"Re-enter password for principal \"steve@EXAMPLE.COM\": \n"
20417
"Principal \"steve@EXAMPLE.COM\" created."
20418
msgstr ""
20419
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
20420
"kadmin.local: <placeholder-1/>\n"
20421
"WARNING: no policy specified for steve@EXAMPLE.COM; defaulting to no policy\n"
20422
"Enter password for principal \"steve@EXAMPLE.COM\": \n"
20423
"Re-enter password for principal \"steve@EXAMPLE.COM\": \n"
20424
"Principal \"steve@EXAMPLE.COM\" created."
20425
20426
#: serverguide/C/network-auth.xml:2962(para)
20427
msgid ""
20428
"There should now be krbPrincipalName, krbPrincipalKey, krbLastPwdChange, and "
20429
"krbExtraData attributes added to the "
20430
"<emphasis>uid=steve,ou=people,dc=example,dc=com</emphasis> user object. Use "
20431
"the <application>kinit</application> and <application>klist</application> "
20432
"utilities to test that the user is indeed issued a ticket."
20433
msgstr ""
20434
"There should now be krbPrincipalName, krbPrincipalKey, krbLastPwdChange, and "
20435
"krbExtraData attributes added to the "
20436
"<emphasis>uid=steve,ou=people,dc=example,dc=com</emphasis> user object. Use "
20437
"the <application>kinit</application> and <application>klist</application> "
20438
"utilities to test that the user is indeed issued a ticket."
20439
20440
#: serverguide/C/network-auth.xml:2969(para)
20441
msgid ""
20442
"If the user object is already created the <emphasis>-x dn=\"...\"</emphasis> "
20443
"option is needed to add the Kerberos attributes. Otherwise a new "
20444
"<emphasis>principal</emphasis> object will be created in the realm subtree."
20445
msgstr ""
20446
"If the user object is already created the <emphasis>-x dn=\"...\"</emphasis> "
20447
"option is needed to add the Kerberos attributes. Otherwise a new "
20448
"<emphasis>principal</emphasis> object will be created in the realm subtree."
20449
20450
#: serverguide/C/network-auth.xml:2977(title)
20451
msgid "Secondary KDC Configuration"
20452
msgstr "Secondary KDC Configuration"
20453
20454
#: serverguide/C/network-auth.xml:2979(para)
20455
msgid ""
20456
"Configuring a Secondary KDC using the LDAP backend is similar to configuring "
20457
"one using the normal Kerberos database."
20458
msgstr ""
20459
"Configuring a Secondary KDC using the LDAP backend is similar to configuring "
20460
"one using the normal Kerberos database."
20461
20462
#: serverguide/C/network-auth.xml:2985(para)
20463
msgid "First, install the necessary packages. In a terminal enter:"
20464
msgstr "First, install the necessary packages. In a terminal enter:"
20465
20466
#: serverguide/C/network-auth.xml:2996(para)
20467
msgid ""
20468
"Next, edit <filename>/etc/krb5.conf</filename> to use the LDAP backend:"
20469
msgstr ""
20470
"Next, edit <filename>/etc/krb5.conf</filename> to use the LDAP backend:"
20471
20472
#: serverguide/C/network-auth.xml:3000(programlisting)
20473
#, no-wrap
20474
msgid ""
20475
"\n"
20476
"[libdefaults]\n"
20477
" default_realm = EXAMPLE.COM\n"
20478
"\n"
20479
"...\n"
20480
"\n"
20481
"[realms]\n"
20482
" EXAMPLE.COM = {\n"
20483
" kdc = kdc01.example.com\n"
20484
" kdc = kdc02.example.com\n"
20485
" admin_server = kdc01.example.com\n"
20486
" admin_server = kdc02.example.com\n"
20487
" default_domain = example.com\n"
20488
" database_module = openldap_ldapconf\n"
20489
" }\n"
20490
"\n"
20491
"...\n"
20492
"\n"
20493
"[domain_realm]\n"
20494
" .example.com = EXAMPLE.COM\n"
20495
"\n"
20496
"...\n"
20497
"\n"
20498
"[dbdefaults]\n"
20499
" ldap_kerberos_container_dn = dc=example,dc=com\n"
20500
"\n"
20501
"[dbmodules]\n"
20502
" openldap_ldapconf = {\n"
20503
" db_library = kldap\n"
20504
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
20505
"\n"
20506
" # this object needs to have read rights on\n"
20507
" # the realm container, principal container and realm sub-"
20508
"trees\n"
20509
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
20510
"\n"
20511
" # this object needs to have read and write rights on\n"
20512
" # the realm container, principal container and realm sub-"
20513
"trees\n"
20514
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
20515
" ldap_servers = ldaps://ldap01.example.com "
20516
"ldaps://ldap02.example.com\n"
20517
" ldap_conns_per_server = 5\n"
20518
" }\n"
20519
msgstr ""
20520
"\n"
20521
"[libdefaults]\n"
20522
" default_realm = EXAMPLE.COM\n"
20523
"\n"
20524
"...\n"
20525
"\n"
20526
"[realms]\n"
20527
" EXAMPLE.COM = {\n"
20528
" kdc = kdc01.example.com\n"
20529
" kdc = kdc02.example.com\n"
20530
" admin_server = kdc01.example.com\n"
20531
" admin_server = kdc02.example.com\n"
20532
" default_domain = example.com\n"
20533
" database_module = openldap_ldapconf\n"
20534
" }\n"
20535
"\n"
20536
"...\n"
20537
"\n"
20538
"[domain_realm]\n"
20539
" .example.com = EXAMPLE.COM\n"
20540
"\n"
20541
"...\n"
20542
"\n"
20543
"[dbdefaults]\n"
20544
" ldap_kerberos_container_dn = dc=example,dc=com\n"
20545
"\n"
20546
"[dbmodules]\n"
20547
" openldap_ldapconf = {\n"
20548
" db_library = kldap\n"
20549
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
20550
"\n"
20551
" # this object needs to have read rights on\n"
20552
" # the realm container, principal container and realm sub-"
20553
"trees\n"
20554
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
20555
"\n"
20556
" # this object needs to have read and write rights on\n"
20557
" # the realm container, principal container and realm sub-"
20558
"trees\n"
20559
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
20560
" ldap_servers = ldaps://ldap01.example.com "
20561
"ldaps://ldap02.example.com\n"
20562
" ldap_conns_per_server = 5\n"
20563
" }\n"
20564
20565
#: serverguide/C/network-auth.xml:3047(para)
20566
msgid "Create the stash for the LDAP bind password:"
20567
msgstr "Create the stash for the LDAP bind password:"
20568
20569
#: serverguide/C/network-auth.xml:3058(para)
20570
msgid ""
20571
"Now, on the <emphasis>Primary KDC</emphasis> copy the "
20572
"<filename>/etc/krb5kdc/.k5.EXAMPLE.COM</filename><emphasis>Master "
20573
"Key</emphasis> stash to the Secondary KDC. Be sure to copy the file over an "
20574
"encrypted connection such as <application>scp</application>, or on physical "
20575
"media."
20576
msgstr ""
20577
"Now, on the <emphasis>Primary KDC</emphasis> copy the "
20578
"<filename>/etc/krb5kdc/.k5.EXAMPLE.COM</filename><emphasis>Master "
20579
"Key</emphasis> stash to the Secondary KDC. Be sure to copy the file over an "
20580
"encrypted connection such as <application>scp</application>, or on physical "
20581
"media."
20582
20583
#: serverguide/C/network-auth.xml:3065(command)
20584
msgid "sudo scp /etc/krb5kdc/.k5.EXAMPLE.COM steve@kdc02.example.com:~"
20585
msgstr "sudo scp /etc/krb5kdc/.k5.EXAMPLE.COM steve@kdc02.example.com:~"
20586
20587
#: serverguide/C/network-auth.xml:3066(command)
20588
msgid "sudo mv .k5.EXAMPLE.COM /etc/krb5kdc/"
20589
msgstr "sudo mv .k5.EXAMPLE.COM /etc/krb5kdc/"
20590
20591
#: serverguide/C/network-auth.xml:3070(para)
20592
msgid ""
20593
"Again, replace <emphasis>EXAMPLE.COM</emphasis> with your actual realm."
20594
msgstr ""
20595
"Again, replace <emphasis>EXAMPLE.COM</emphasis> with your actual realm."
20596
20597
#: serverguide/C/network-auth.xml:3078(para)
20598
msgid "Finally, start the <application>krb5-kdc</application> daemon:"
20599
msgstr "Finally, start the <application>krb5-kdc</application> daemon:"
20600
20601
#: serverguide/C/network-auth.xml:3089(para)
20602
msgid ""
20603
"You now have redundant KDCs on your network, and with redundant LDAP servers "
20604
"you should be able to continue to authenticate users if one LDAP server, one "
20605
"Kerberos server, or one LDAP and one Kerberos server become unavailable."
20606
msgstr ""
20607
"You now have redundant KDCs on your network, and with redundant LDAP servers "
20608
"you should be able to continue to authenticate users if one LDAP server, one "
20609
"Kerberos server, or one LDAP and one Kerberos server become unavailable."
20610
20611
#: serverguide/C/network-auth.xml:3101(para)
20612
msgid ""
20613
"The <ulink url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
20614
"admin.html#Configuring-Kerberos-with-OpenLDAP-back_002dend\"> Kerberos Admin "
20615
"Guide</ulink> has some additional details."
20616
msgstr ""
20617
"The <ulink url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
20618
"admin.html#Configuring-Kerberos-with-OpenLDAP-back_002dend\"> Kerberos Admin "
20619
"Guide</ulink> has some additional details."
20620
20621
#: serverguide/C/network-auth.xml:3107(para)
20622
msgid ""
20623
"For more information on <application>kdb5_ldap_util</application> see <ulink "
20624
"url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
20625
"admin.html#Global-Operations-on-the-Kerberos-LDAP-Database\"> Section "
20626
"5.6</ulink> and the <ulink "
20627
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man8/kdb5_ldap_util.8.h"
20628
"tml\">kdb5_ldap_util man page</ulink>."
20629
msgstr ""
20630
20631
#: serverguide/C/network-auth.xml:3115(para)
20632
msgid ""
20633
"Another useful link is the <ulink "
20634
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man5/krb5.conf.5.html\""
20635
">krb5.conf man page</ulink>."
20636
msgstr ""
20637
20638
#: serverguide/C/network-auth.xml:3120(para)
20639
msgid ""
20640
"Also, see the <ulink "
20641
"url=\"https://help.ubuntu.com/community/Kerberos#kerberos-ldap\">Kerberos "
20642
"and LDAP</ulink> Ubuntu wiki page."
20643
msgstr ""
20644
20645
#: serverguide/C/monitoring.xml:13(title)
20646
msgid "Monitoring"
20647
msgstr "Monitoring"
20648
20649
#: serverguide/C/monitoring.xml:17(para)
20650
msgid ""
20651
"The monitoring of essential servers and services is an important part of "
20652
"system administration. Most network services are monitored for performance, "
20653
"availability, or both. This section will cover installation and "
20654
"configuration of <application>Nagios</application> for availability "
20655
"monitoring, and <application>Munin</application> for performance monitoring."
20656
msgstr ""
20657
"The monitoring of essential servers and services is an important part of "
20658
"system administration. Most network services are monitored for performance, "
20659
"availability, or both. This section will cover installation and "
20660
"configuration of <application>Nagios</application> for availability "
20661
"monitoring, and <application>Munin</application> for performance monitoring."
20662
20663
#: serverguide/C/monitoring.xml:24(para)
20664
msgid ""
20665
"The examples in this section will use two servers with hostnames "
20666
"<emphasis>server01</emphasis> and <emphasis>server02</emphasis>. "
20667
"<emphasis>Server01</emphasis> will be configured with "
20668
"<application>Nagios</application> to monitor services on itself and "
20669
"<emphasis>server02</emphasis>. Server01 will also be setup with the "
20670
"<application>munin</application> package to gather information from the "
20671
"network. Using the <application>munin-node</application> package, "
20672
"<emphasis>server02</emphasis> will be configured to send information to "
20673
"<emphasis>server01</emphasis>."
20674
msgstr ""
20675
"The examples in this section will use two servers with hostnames "
20676
"<emphasis>server01</emphasis> and <emphasis>server02</emphasis>. "
20677
"<emphasis>Server01</emphasis> will be configured with "
20678
"<application>Nagios</application> to monitor services on itself and "
20679
"<emphasis>server02</emphasis>. Server01 will also be setup with the "
20680
"<application>munin</application> package to gather information from the "
20681
"network. Using the <application>munin-node</application> package, "
20682
"<emphasis>server02</emphasis> will be configured to send information to "
20683
"<emphasis>server01</emphasis>."
20684
20685
#: serverguide/C/monitoring.xml:33(para)
20686
msgid ""
20687
"Hopefully these simple examples will allow you to monitor additional servers "
20688
"and services on your network."
20689
msgstr ""
20690
"Hopefully these simple examples will allow you to monitor additional servers "
20691
"and services on your network."
20692
20693
#: serverguide/C/monitoring.xml:39(title)
20694
msgid "Nagios"
20695
msgstr "Nagios"
20696
20697
#: serverguide/C/monitoring.xml:44(para)
20698
msgid ""
20699
"First, on <emphasis>server01</emphasis> install the "
20700
"<application>nagios</application> package. In a terminal enter:"
20701
msgstr ""
20702
"First, on <emphasis>server01</emphasis> install the "
20703
"<application>nagios</application> package. In a terminal enter:"
20704
20705
#: serverguide/C/monitoring.xml:50(command)
20706
msgid "sudo apt-get install nagios3 nagios-nrpe-plugin"
20707
msgstr "sudo apt-get install nagios3 nagios-nrpe-plugin"
20708
20709
#: serverguide/C/monitoring.xml:53(para)
20710
msgid ""
20711
"You will be asked to enter a password for the "
20712
"<emphasis>nagiosadmin</emphasis> user. The user's credentials are stored in "
20713
"<filename>/etc/nagios3/htpasswd.users</filename>. To change the "
20714
"<emphasis>nagiosadmin</emphasis> password, or add additional users to the "
20715
"Nagios CGI scripts, use the <application>htpasswd</application> that is part "
20716
"of the <application>apache2-utils</application> package."
20717
msgstr ""
20718
"You will be asked to enter a password for the "
20719
"<emphasis>nagiosadmin</emphasis> user. The user's credentials are stored in "
20720
"<filename>/etc/nagios3/htpasswd.users</filename>. To change the "
20721
"<emphasis>nagiosadmin</emphasis> password, or add additional users to the "
20722
"Nagios CGI scripts, use the <application>htpasswd</application> that is part "
20723
"of the <application>apache2-utils</application> package."
20724
20725
#: serverguide/C/monitoring.xml:60(para)
20726
msgid ""
20727
"For example, to change the password for the <emphasis>nagiosadmin</emphasis> "
20728
"user enter:"
20729
msgstr ""
20730
"For example, to change the password for the <emphasis>nagiosadmin</emphasis> "
20731
"user enter:"
20732
20733
#: serverguide/C/monitoring.xml:65(command)
20734
msgid "sudo htpasswd /etc/nagios3/htpasswd.users nagiosadmin"
20735
msgstr "sudo htpasswd /etc/nagios3/htpasswd.users nagiosadmin"
20736
20737
#: serverguide/C/monitoring.xml:68(para)
20738
msgid "To add a user:"
20739
msgstr "To add a user:"
20740
20741
#: serverguide/C/monitoring.xml:73(command)
20742
msgid "sudo htpasswd /etc/nagios3/htpasswd.users steve"
20743
msgstr "sudo htpasswd /etc/nagios3/htpasswd.users steve"
20744
20745
#: serverguide/C/monitoring.xml:76(para)
20746
msgid ""
20747
"Next, on <emphasis>server02</emphasis> install the <application>nagios-nrpe-"
20748
"server</application> package. From a terminal on server02 enter:"
20749
msgstr ""
20750
"Next, on <emphasis>server02</emphasis> install the <application>nagios-nrpe-"
20751
"server</application> package. From a terminal on server02 enter:"
20752
20753
#: serverguide/C/monitoring.xml:82(command)
20754
msgid "sudo apt-get install nagios-nrpe-server"
20755
msgstr "sudo apt-get install nagios-nrpe-server"
20756
20757
#: serverguide/C/monitoring.xml:86(para)
20758
msgid ""
20759
"<application>NRPE</application> allows you to execute local checks on remote "
20760
"hosts. There are other ways of accomplishing this through other Nagios "
20761
"plugins as well as other checks."
20762
msgstr ""
20763
"<application>NRPE</application> allows you to execute local checks on remote "
20764
"hosts. There are other ways of accomplishing this through other Nagios plug-"
20765
"ins as well as other checks."
20766
20767
#: serverguide/C/monitoring.xml:94(title)
20768
msgid "Configuration Overview"
20769
msgstr "Configuration Overview"
20770
20771
#: serverguide/C/monitoring.xml:96(para)
20772
msgid ""
20773
"There are a couple of directories containing "
20774
"<application>Nagios</application> configuration and check files."
20775
msgstr ""
20776
"There are a couple of directories containing "
20777
"<application>Nagios</application> configuration and check files."
20778
20779
#: serverguide/C/monitoring.xml:102(para)
20780
msgid ""
20781
"<filename>/etc/nagios3</filename>: contains configuration files for the "
20782
"operation of the <application>nagios</application> daemon, CGI files, hosts, "
20783
"etc."
20784
msgstr ""
20785
"<filename>/etc/nagios3</filename>: contains configuration files for the "
20786
"operation of the <application>nagios</application> daemon, CGI files, hosts, "
20787
"etc."
20788
20789
#: serverguide/C/monitoring.xml:108(para)
20790
msgid ""
20791
"<filename>/etc/nagios-plugins</filename>: houses configuration files for the "
20792
"service checks."
20793
msgstr ""
20794
"<filename>/etc/nagios-plugins</filename>: houses configuration files for the "
20795
"service checks."
20796
20797
#: serverguide/C/monitoring.xml:113(para)
20798
msgid ""
20799
"<filename>/etc/nagios</filename>: on the remote host contains the "
20800
"<application>nagios-nrpe-server</application> configuration files."
20801
msgstr ""
20802
"<filename>/etc/nagios</filename>: on the remote host contains the "
20803
"<application>nagios-nrpe-server</application> configuration files."
20804
20805
#: serverguide/C/monitoring.xml:118(para)
20806
msgid ""
20807
"<filename>/usr/lib/nagios/plugins/</filename>: where the check binaries are "
20808
"stored. To see the options of a check use the <emphasis>-h</emphasis> option."
20809
msgstr ""
20810
"<filename>/usr/lib/nagios/plugins/</filename>: where the check binaries are "
20811
"stored. To see the options of a check use the <emphasis>-h</emphasis> option."
20812
20813
#: serverguide/C/monitoring.xml:123(para)
20814
msgid "For example: <command>/usr/lib/nagios/plugins/check_dhcp -h</command>"
20815
msgstr ""
20816
"For example: <command>/usr/lib/nagios/plugins/check_dhcp -h</command>"
20817
20818
#: serverguide/C/monitoring.xml:129(para)
20819
msgid ""
20820
"There are a plethora of checks <application>Nagios</application> can be "
20821
"configured to execute for any given host. For this example Nagios will be "
20822
"configured to check disk space, DNS, and a MySQL hostgroup. The DNS check "
20823
"will be on <emphasis>server02</emphasis>, and the MySQL hostgroup will "
20824
"include both <emphasis>server01</emphasis> and <emphasis>server02</emphasis>."
20825
msgstr ""
20826
"There are a plethora of checks <application>Nagios</application> can be "
20827
"configured to execute for any given host. For this example Nagios will be "
20828
"configured to check disk space, DNS, and a MySQL hostgroup. The DNS check "
20829
"will be on <emphasis>server02</emphasis>, and the MySQL hostgroup will "
20830
"include both <emphasis>server01</emphasis> and <emphasis>server02</emphasis>."
20831
20832
#: serverguide/C/monitoring.xml:136(para)
20833
msgid ""
20834
"See <xref linkend=\"httpd\"/> for details on setting up Apache, <xref "
20835
"linkend=\"dns\"/> for DNS, and <xref linkend=\"mysql\"/> for MySQL."
20836
msgstr ""
20837
"See <xref linkend=\"httpd\"/> for details on setting up Apache, <xref "
20838
"linkend=\"dns\"/> for DNS, and <xref linkend=\"mysql\"/> for MySQL."
20839
20840
#: serverguide/C/monitoring.xml:141(para)
20841
msgid ""
20842
"Additionally, there are some terms that once explained will hopefully make "
20843
"understanding Nagios configuration easier:"
20844
msgstr ""
20845
"Additionally, there are some terms that once explained will hopefully make "
20846
"understanding Nagios configuration easier:"
20847
20848
#: serverguide/C/monitoring.xml:147(para)
20849
msgid ""
20850
"<emphasis>Host</emphasis>: a server, workstation, network device, etc that "
20851
"is being monitored."
20852
msgstr ""
20853
"<emphasis>Host</emphasis>: a server, workstation, network device, etc that "
20854
"is being monitored."
20855
20856
#: serverguide/C/monitoring.xml:152(para)
20857
msgid ""
20858
"<emphasis>Host Group</emphasis>: a group of similar hosts. For example, you "
20859
"could group all web servers, file server, etc."
20860
msgstr ""
20861
"<emphasis>Host Group</emphasis>: a group of similar hosts. For example, you "
20862
"could group all web servers, file server, etc."
20863
20864
#: serverguide/C/monitoring.xml:157(para)
20865
msgid ""
20866
"<emphasis>Service</emphasis>: the service being monitored on the host. Such "
20867
"as HTTP, DNS, NFS, etc."
20868
msgstr ""
20869
"<emphasis>Service</emphasis>: the service being monitored on the host. Such "
20870
"as HTTP, DNS, NFS, etc."
20871
20872
#: serverguide/C/monitoring.xml:162(para)
20873
msgid ""
20874
"<emphasis>Service Group</emphasis>: allows you to group multiple services "
20875
"together. This is useful for grouping multiple HTTP for example."
20876
msgstr ""
20877
"<emphasis>Service Group</emphasis>: allows you to group multiple services "
20878
"together. This is useful for grouping multiple HTTP for example."
20879
20880
#: serverguide/C/monitoring.xml:168(para)
20881
msgid ""
20882
"<emphasis>Contact</emphasis>: person to be notified when an event takes "
20883
"place. Nagios can be configured to send emails, SMS messages, etc."
20884
msgstr ""
20885
"<emphasis>Contact</emphasis>: person to be notified when an event takes "
20886
"place. Nagios can be configured to send e-mails, SMS messages, etc."
20887
20888
#: serverguide/C/monitoring.xml:174(para)
20889
msgid ""
20890
"By default Nagios is configured to check HTTP, disk space, SSH, current "
20891
"users, processes, and load on the <emphasis>localhost</emphasis>. Nagios "
20892
"will also <application>ping</application> check the "
20893
"<emphasis>gateway</emphasis>."
20894
msgstr ""
20895
"By default Nagios is configured to check HTTP, disk space, SSH, current "
20896
"users, processes, and load on the <emphasis>localhost</emphasis>. Nagios "
20897
"will also <application>ping</application> check the "
20898
"<emphasis>gateway</emphasis>."
20899
20900
#: serverguide/C/monitoring.xml:179(para)
20901
msgid ""
20902
"Large Nagios installations can be quite complex to configure. It is usually "
20903
"best to start small, one or two hosts, get things configured the way you "
20904
"like then expand."
20905
msgstr ""
20906
"Large Nagios installations can be quite complex to configure. It is usually "
20907
"best to start small, one or two hosts, get things configured the way you "
20908
"like then expand."
20909
20910
#: serverguide/C/monitoring.xml:194(para)
20911
msgid ""
20912
"First, create a <emphasis>host</emphasis> configuration file for "
20913
"<emphasis>server02</emphasis>. In a terminal enter:"
20914
msgstr ""
20915
"First, create a <emphasis>host</emphasis> configuration file for "
20916
"<emphasis>server02</emphasis>. In a terminal enter:"
20917
20918
#: serverguide/C/monitoring.xml:199(command)
20919
msgid ""
20920
"sudo cp /etc/nagios3/conf.d/localhost_nagios2.cfg "
20921
"/etc/nagios3/conf.d/server02.cfg"
20922
msgstr ""
20923
"sudo cp /etc/nagios3/conf.d/localhost_nagios2.cfg "
20924
"/etc/nagios3/conf.d/server02.cfg"
20925
20926
#: serverguide/C/monitoring.xml:203(para)
20927
msgid ""
20928
"In the above and following command examples, replace "
20929
"<emphasis>\"server01\"</emphasis>, "
20930
"<emphasis>\"server02\"</emphasis><emphasis>172.18.100.100</emphasis>, and "
20931
"<emphasis>172.18.100.101</emphasis> with the host names and IP addresses of "
20932
"your servers."
20933
msgstr ""
20934
"In the above and following command examples, replace "
20935
"<emphasis>\"server01\"</emphasis>, "
20936
"<emphasis>\"server02\"</emphasis><emphasis>172.18.100.100</emphasis>, and "
20937
"<emphasis>172.18.100.101</emphasis> with the host names and IP addresses of "
20938
"your servers."
20939
20940
#: serverguide/C/monitoring.xml:212(para)
20941
msgid "Next, edit <filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
20942
msgstr "Next, edit <filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
20943
20944
#: serverguide/C/monitoring.xml:216(programlisting)
20945
#, no-wrap
20946
msgid ""
20947
"\n"
20948
"define host{\n"
20949
" use generic-host ; Name of host "
20950
"template to use\n"
20951
" host_name server02\n"
20952
" alias Server 02\n"
20953
" address 172.18.100.101\n"
20954
"}\n"
20955
"\n"
20956
"# check DNS service.\n"
20957
"define service {\n"
20958
" use generic-service\n"
20959
" host_name server02\n"
20960
" service_description DNS\n"
20961
" check_command check_dns!172.18.100.101\n"
20962
"}\n"
20963
msgstr ""
20964
"\n"
20965
"define host{\n"
20966
" use generic-host ; Name of host "
20967
"template to use\n"
20968
" host_name server02\n"
20969
" alias Server 02\n"
20970
" address 172.18.100.101\n"
20971
"}\n"
20972
"\n"
20973
"# check DNS service.\n"
20974
"define service {\n"
20975
" use generic-service\n"
20976
" host_name server02\n"
20977
" service_description DNS\n"
20978
" check_command check_dns!172.18.100.101\n"
20979
"}\n"
20980
20981
#: serverguide/C/monitoring.xml:236(para)
20982
msgid ""
20983
"Restart the <application>nagios</application> daemon to enable the new "
20984
"configuration:"
20985
msgstr ""
20986
"Restart the <application>nagios</application> daemon to enable the new "
20987
"configuration:"
20988
20989
#: serverguide/C/monitoring.xml:241(command) serverguide/C/monitoring.xml:308(command) serverguide/C/monitoring.xml:375(command)
20990
msgid "sudo /etc/init.d/nagios3 restart"
20991
msgstr "sudo /etc/init.d/nagios3 restart"
20992
20993
#: serverguide/C/monitoring.xml:251(para)
20994
msgid ""
20995
"Now add a service definition for the MySQL check by adding the following to "
20996
"<filename>/etc/nagios3/conf.d/services_nagios2.cfg</filename>:"
20997
msgstr ""
20998
"Now add a service definition for the MySQL check by adding the following to "
20999
"<filename>/etc/nagios3/conf.d/services_nagios2.cfg</filename>:"
21000
21001
#: serverguide/C/monitoring.xml:255(programlisting)
21002
#, no-wrap
21003
msgid ""
21004
"\n"
21005
"# check MySQL servers.\n"
21006
"define service {\n"
21007
" hostgroup_name mysql-servers\n"
21008
" service_description MySQL\n"
21009
" check_command "
21010
"check_mysql_cmdlinecred!nagios!secret!$HOSTADDRESS\n"
21011
" use generic-service\n"
21012
" notification_interval 0 ; set > 0 if you want to be "
21013
"renotified\n"
21014
"}\n"
21015
msgstr ""
21016
"\n"
21017
"# check MySQL servers.\n"
21018
"define service {\n"
21019
" hostgroup_name mysql-servers\n"
21020
" service_description MySQL\n"
21021
" check_command "
21022
"check_mysql_cmdlinecred!nagios!secret!$HOSTADDRESS\n"
21023
" use generic-service\n"
21024
" notification_interval 0 ; set > 0 if you want to be "
21025
"renotified\n"
21026
"}\n"
21027
21028
#: serverguide/C/monitoring.xml:269(para)
21029
msgid ""
21030
"A <emphasis>mysql-servers</emphasis> hostgroup now needs to be defined. Edit "
21031
"<filename>/etc/nagios3/conf.d/hostgroups_nagios2.cfg</filename> adding:"
21032
msgstr ""
21033
21034
#: serverguide/C/monitoring.xml:274(programlisting)
21035
#, no-wrap
21036
msgid ""
21037
"\n"
21038
"# MySQL hostgroup.\n"
21039
"define hostgroup {\n"
21040
" hostgroup_name mysql-servers\n"
21041
" alias MySQL servers\n"
21042
" members localhost, server02\n"
21043
" }\n"
21044
msgstr ""
21045
"\n"
21046
"# MySQL hostgroup.\n"
21047
"define hostgroup {\n"
21048
" hostgroup_name mysql-servers\n"
21049
" alias MySQL servers\n"
21050
" members localhost, server02\n"
21051
" }\n"
21052
21053
#: serverguide/C/monitoring.xml:286(para)
21054
msgid ""
21055
"The Nagios check needs to authenticate to MySQL. To add a "
21056
"<emphasis>nagios</emphasis> user to MySQL enter:"
21057
msgstr ""
21058
"The Nagios check needs to authenticate to MySQL. To add a "
21059
"<emphasis>nagios</emphasis> user to MySQL enter:"
21060
21061
#: serverguide/C/monitoring.xml:291(command)
21062
msgid "mysql -u root -p -e \"create user nagios identified by 'secret';\""
21063
msgstr "mysql -u root -p -e \"create user nagios identified by 'secret';\""
21064
21065
#: serverguide/C/monitoring.xml:295(para)
21066
msgid ""
21067
"The <emphasis>nagios</emphasis> user will need to be added all hosts in the "
21068
"<emphasis>mysql-servers</emphasis> hostgroup."
21069
msgstr ""
21070
"The <emphasis>nagios</emphasis> user will need to be added all hosts in the "
21071
"<emphasis>mysql-servers</emphasis> hostgroup."
21072
21073
#: serverguide/C/monitoring.xml:303(para)
21074
msgid ""
21075
"Restart <application>nagios</application> to start checking the MySQL "
21076
"servers."
21077
msgstr ""
21078
"Restart <application>nagios</application> to start checking the MySQL "
21079
"servers."
21080
21081
#: serverguide/C/monitoring.xml:318(para)
21082
msgid ""
21083
"Lastly configure NRPE to check the disk space on "
21084
"<emphasis>server02</emphasis>."
21085
msgstr ""
21086
"Lastly configure NRPE to check the disk space on "
21087
"<emphasis>server02</emphasis>."
21088
21089
#: serverguide/C/monitoring.xml:322(para)
21090
msgid ""
21091
"On <emphasis>server01</emphasis> add the service check to "
21092
"<filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
21093
msgstr ""
21094
"On <emphasis>server01</emphasis> add the service check to "
21095
"<filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
21096
21097
#: serverguide/C/monitoring.xml:327(programlisting)
21098
#, no-wrap
21099
msgid ""
21100
"\n"
21101
"# NRPE disk check.\n"
21102
"define service {\n"
21103
" use generic-service\n"
21104
" host_name server02\n"
21105
" service_description nrpe-disk\n"
21106
" check_command "
21107
"check_nrpe_1arg!check_all_disks!172.18.100.101\n"
21108
"}\n"
21109
msgstr ""
21110
"\n"
21111
"# NRPE disk check.\n"
21112
"define service {\n"
21113
" use generic-service\n"
21114
" host_name server02\n"
21115
" service_description nrpe-disk\n"
21116
" check_command "
21117
"check_nrpe_1arg!check_all_disks!172.18.100.101\n"
21118
"}\n"
21119
21120
#: serverguide/C/monitoring.xml:340(para)
21121
msgid ""
21122
"Now on <emphasis>server02</emphasis> edit "
21123
"<filename>/etc/nagios/nrpe.cfg</filename> changing:"
21124
msgstr ""
21125
"Now on <emphasis>server02</emphasis> edit "
21126
"<filename>/etc/nagios/nrpe.cfg</filename> changing:"
21127
21128
#: serverguide/C/monitoring.xml:344(programlisting)
21129
#, no-wrap
21130
msgid ""
21131
"\n"
21132
"allowed_hosts=172.18.100.100\n"
21133
msgstr ""
21134
"\n"
21135
"allowed_hosts=172.18.100.100\n"
21136
21137
#: serverguide/C/monitoring.xml:348(para)
21138
msgid "And below in the command definition area add:"
21139
msgstr "And below in the command definition area add:"
21140
21141
#: serverguide/C/monitoring.xml:352(programlisting)
21142
#, no-wrap
21143
msgid ""
21144
"\n"
21145
"command[check_all_disks]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -"
21146
"e\n"
21147
msgstr ""
21148
"\n"
21149
"command[check_all_disks]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -"
21150
"e\n"
21151
21152
#: serverguide/C/monitoring.xml:359(para)
21153
msgid "Finally, restart <application>nagios-nrpe-server</application>:"
21154
msgstr "Finally, restart <application>nagios-nrpe-server</application>:"
21155
21156
#: serverguide/C/monitoring.xml:364(command)
21157
msgid "sudo /etc/init.d/nagios-nrpe-server restart"
21158
msgstr "sudo /etc/init.d/nagios-nrpe-server restart"
21159
21160
#: serverguide/C/monitoring.xml:370(para)
21161
msgid ""
21162
"Also, on <emphasis>server01</emphasis> restart "
21163
"<application>nagios</application>:"
21164
msgstr ""
21165
"Also, on <emphasis>server01</emphasis> restart "
21166
"<application>nagios</application>:"
21167
21168
#: serverguide/C/monitoring.xml:383(para)
21169
msgid ""
21170
"You should now be able to see the host and service checks in the Nagios CGI "
21171
"files. To access them point a browser to http://server01/nagios3. You will "
21172
"then be prompted for the <emphasis>nagiosadmin</emphasis> username and "
21173
"password."
21174
msgstr ""
21175
"You should now be able to see the host and service checks in the Nagios CGI "
21176
"files. To access them point a browser to http://server01/nagios3. You will "
21177
"then be prompted for the <emphasis>nagiosadmin</emphasis> username and "
21178
"password."
21179
21180
#: serverguide/C/monitoring.xml:393(para)
21181
msgid ""
21182
"This section has just scratched the surface of Nagios' features. The "
21183
"<application>nagios-plugins-extra</application> and <application>nagios-snmp-"
21184
"plugins</application> contain many more service checks."
21185
msgstr ""
21186
"This section has just scratched the surface of Nagios' features. The "
21187
"<application>nagios-plugins-extra</application> and <application>nagios-snmp-"
21188
"plugins</application> contain many more service checks."
21189
21190
#: serverguide/C/monitoring.xml:400(para)
21191
msgid ""
21192
"For more information see <ulink "
21193
"url=\"http://www.nagios.org/\">Nagios</ulink> website."
21194
msgstr ""
21195
"For more information see <ulink "
21196
"url=\"http://www.nagios.org/\">Nagios</ulink> website."
21197
21198
#: serverguide/C/monitoring.xml:405(para)
21199
msgid ""
21200
"Specifically the <ulink "
21201
"url=\"http://nagios.sourceforge.net/docs/3_0/\">Online Documentation</ulink> "
21202
"site."
21203
msgstr ""
21204
"Specifically the <ulink "
21205
"url=\"http://nagios.sourceforge.net/docs/3_0/\">Online Documentation</ulink> "
21206
"site."
21207
21208
#: serverguide/C/monitoring.xml:410(para)
21209
msgid ""
21210
"There is also a list of <ulink "
21211
"url=\"http://www.nagios.org/propaganda/books/\">books</ulink> related to "
21212
"Nagios and network monitoring:"
21213
msgstr ""
21214
"There is also a list of <ulink "
21215
"url=\"http://www.nagios.org/propaganda/books/\">books</ulink> related to "
21216
"Nagios and network monitoring:"
21217
21218
#: serverguide/C/monitoring.xml:416(para)
21219
msgid ""
21220
"The <ulink url=\"https://help.ubuntu.com/community/Nagios\">Nagios Ubuntu "
21221
"Wiki</ulink> page also has more details."
21222
msgstr ""
21223
21224
#: serverguide/C/monitoring.xml:425(title)
21225
msgid "Munin"
21226
msgstr "Munin"
21227
21228
#: serverguide/C/monitoring.xml:430(para)
21229
msgid ""
21230
"Before installing <application>Munin</application> on "
21231
"<emphasis>server01</emphasis><application>apache2</application> will need to "
21232
"be installed. The default configuration is fine for running a "
21233
"<application>munin</application> server. For more information see <xref "
21234
"linkend=\"httpd\"/>."
21235
msgstr ""
21236
"Before installing <application>Munin</application> on "
21237
"<emphasis>server01</emphasis><application>apache2</application> will need to "
21238
"be installed. The default configuration is fine for running a "
21239
"<application>munin</application> server. For more information see <xref "
21240
"linkend=\"httpd\"/>."
21241
21242
#: serverguide/C/monitoring.xml:436(para)
21243
msgid ""
21244
"First, on <emphasis>server01</emphasis> install "
21245
"<application>munin</application>. In a terminal enter:"
21246
msgstr ""
21247
"First, on <emphasis>server01</emphasis> install "
21248
"<application>munin</application>. In a terminal enter:"
21249
21250
#: serverguide/C/monitoring.xml:441(command)
21251
msgid "sudo apt-get install munin"
21252
msgstr "sudo apt-get install munin"
21253
21254
#: serverguide/C/monitoring.xml:444(para)
21255
msgid ""
21256
"Now on <emphasis>server02</emphasis> install the <application>munin-"
21257
"node</application> package:"
21258
msgstr ""
21259
"Now on <emphasis>server02</emphasis> install the <application>munin-"
21260
"node</application> package:"
21261
21262
#: serverguide/C/monitoring.xml:449(command)
21263
msgid "sudo apt-get install munin-node"
21264
msgstr "sudo apt-get install munin-node"
21265
21266
#: serverguide/C/monitoring.xml:456(para)
21267
msgid ""
21268
"On <emphasis>server01</emphasis> edit the "
21269
"<filename>/etc/munin/munin.conf</filename> adding the IP address for "
21270
"<emphasis>server02</emphasis>:"
21271
msgstr ""
21272
"On <emphasis>server01</emphasis> edit the "
21273
"<filename>/etc/munin/munin.conf</filename> adding the IP address for "
21274
"<emphasis>server02</emphasis>:"
21275
21276
#: serverguide/C/monitoring.xml:461(programlisting)
21277
#, no-wrap
21278
msgid ""
21279
"\n"
21280
"## First our \"normal\" host.\n"
21281
"[server02]\n"
21282
" address 172.18.100.101\n"
21283
msgstr ""
21284
"\n"
21285
"## First our \"normal\" host.\n"
21286
"[server02]\n"
21287
" address 172.18.100.101\n"
21288
21289
#: serverguide/C/monitoring.xml:468(para)
21290
msgid ""
21291
"Replace <emphasis>server02</emphasis> and "
21292
"<emphasis>172.18.100.101</emphasis> with the actual hostname and IP address "
21293
"for your server."
21294
msgstr ""
21295
"Replace <emphasis>server02</emphasis> and "
21296
"<emphasis>172.18.100.101</emphasis> with the actual hostname and IP address "
21297
"for your server."
21298
21299
#: serverguide/C/monitoring.xml:474(para)
21300
msgid ""
21301
"Next, configure <application>munin-node</application> on "
21302
"<emphasis>server02</emphasis>. Edit <filename>/etc/munin/munin-"
21303
"node.conf</filename> to allow access by <emphasis>server01</emphasis>:"
21304
msgstr ""
21305
"Next, configure <application>munin-node</application> on "
21306
"<emphasis>server02</emphasis>. Edit <filename>/etc/munin/munin-"
21307
"node.conf</filename> to allow access by <emphasis>server01</emphasis>:"
21308
21309
#: serverguide/C/monitoring.xml:479(programlisting)
21310
#, no-wrap
21311
msgid ""
21312
"\n"
21313
"allow ^172\\.18\\.100\\.100$\n"
21314
msgstr ""
21315
"\n"
21316
"allow ^172\\.18\\.100\\.100$\n"
21317
21318
#: serverguide/C/monitoring.xml:484(para)
21319
msgid ""
21320
"Replace <emphasis>^172\\.18\\.100\\.100$</emphasis> with IP address for your "
21321
"<application>munin</application> server."
21322
msgstr ""
21323
"Replace <emphasis>^172\\.18\\.100\\.100$</emphasis> with IP address for your "
21324
"<application>munin</application> server."
21325
21326
#: serverguide/C/monitoring.xml:489(para)
21327
msgid ""
21328
"Now restart <application>munin-node</application> on "
21329
"<emphasis>server02</emphasis> for the changes to take effect:"
21330
msgstr ""
21331
"Now restart <application>munin-node</application> on "
21332
"<emphasis>server02</emphasis> for the changes to take effect:"
21333
21334
#: serverguide/C/monitoring.xml:494(command)
21335
msgid "sudo /etc/init.d/munin-node restart"
21336
msgstr "sudo /etc/init.d/munin-node restart"
21337
21338
#: serverguide/C/monitoring.xml:497(para)
21339
msgid ""
21340
"Finally, in a browser go to <emphasis>http://server01/munin</emphasis>, and "
21341
"you should see links to nice graphs displaying information from the standard "
21342
"<emphasis>munin-plugins</emphasis> for disk, network, processes, and system."
21343
msgstr ""
21344
"Finally, in a browser go to <emphasis>http://server01/munin</emphasis>, and "
21345
"you should see links to nice graphs displaying information from the standard "
21346
"<emphasis>munin-plugins</emphasis> for disk, network, processes, and system."
21347
21348
#: serverguide/C/monitoring.xml:503(para)
21349
msgid ""
21350
"Since this is a new install it may take some time for the graphs to display "
21351
"anything useful."
21352
msgstr ""
21353
"Since this is a new install it may take some time for the graphs to display "
21354
"anything useful."
21355
21356
#: serverguide/C/monitoring.xml:510(title)
21357
msgid "Additional Plugins"
21358
msgstr "Additional Plug-ins"
21359
21360
#: serverguide/C/monitoring.xml:512(para)
21361
msgid ""
21362
"The <application>munin-plugins-extra</application> package contains "
21363
"performance checks additional services such as DNS, DHCP, Samba, etc. To "
21364
"install the package, from a terminal enter:"
21365
msgstr ""
21366
"The <application>munin-plugins-extra</application> package contains "
21367
"performance checks additional services such as DNS, DHCP, Samba, etc. To "
21368
"install the package, from a terminal enter:"
21369
21370
#: serverguide/C/monitoring.xml:518(command)
21371
msgid "sudo apt-get install munin-plugins-extra"
21372
msgstr "sudo apt-get install munin-plugins-extra"
21373
21374
#: serverguide/C/monitoring.xml:521(para)
21375
msgid "Be sure to install the package on both the server and node machines."
21376
msgstr "Be sure to install the package on both the server and node machines."
21377
21378
#: serverguide/C/monitoring.xml:531(para)
21379
msgid ""
21380
"See the <ulink url=\"http://munin.projects.linpro.no/\">Munin</ulink> "
21381
"website for more details."
21382
msgstr ""
21383
"See the <ulink url=\"http://munin.projects.linpro.no/\">Munin</ulink> "
21384
"website for more details."
21385
21386
#: serverguide/C/monitoring.xml:536(para)
21387
msgid ""
21388
"Specifically the <ulink "
21389
"url=\"http://munin.projects.linpro.no/wiki/Documentation\">Munin "
21390
"Documentation</ulink> page includes information on additional plugins, "
21391
"writing plugins, etc."
21392
msgstr ""
21393
"Specifically the <ulink "
21394
"url=\"http://munin.projects.linpro.no/wiki/Documentation\">Munin "
21395
"Documentation</ulink> page includes information on additional plug-ins, "
21396
"writing plug-ins, etc."
21397
21398
#: serverguide/C/monitoring.xml:542(para)
21399
msgid ""
21400
"Also, there is a book in German by Open Source Press: <ulink "
21401
"url=\"https://www.opensourcepress.de/index.php?26&backPID=178&tt_prod"
21402
"ucts=152\">Munin Graphisches Netzwerk- und System-Monitoring</ulink>."
21403
msgstr ""
21404
"Also, there is a book in German by Open Source Press: <ulink "
21405
"url=\"https://www.opensourcepress.de/index.php?26&backPID=178&tt_prod"
21406
"ucts=152\">Munin Graphisches Netzwerk- und System-Monitoring</ulink>."
21407
21408
#: serverguide/C/monitoring.xml:548(para)
21409
msgid ""
21410
"Another resource is the <ulink "
21411
"url=\"https://help.ubuntu.com/community/Munin\">Munin Ubuntu Wiki</ulink> "
21412
"page."
21413
msgstr ""
21414
21415
#: serverguide/C/mail.xml:13(title)
21416
msgid "Email Services"
21417
msgstr "E-mail Services"
21418
21419
#: serverguide/C/mail.xml:14(para)
21420
msgid ""
21421
"The process of getting an email from one person to another over a network or "
21422
"the Internet involves many systems working together. Each of these systems "
21423
"must be correctly configured for the process to work. The sender uses a "
21424
"<emphasis>Mail User Agent</emphasis> (MUA), or email client, to send the "
21425
"message through one or more <emphasis>Mail Transfer Agents</emphasis> (MTA), "
21426
"the last of which will hand it off to a <emphasis>Mail Delivery "
21427
"Agent</emphasis> (MDA) for delivery to the recipient's mailbox, from which "
21428
"it will be retrieved by the recipient's email client, usually via a POP3 or "
21429
"IMAP server."
21430
msgstr ""
21431
"The process of getting an e-mail from one person to another over a network "
21432
"or the Internet involves many systems working together. Each of these "
21433
"systems must be correctly configured for the process to work. The sender "
21434
"uses a <emphasis>Mail User Agent</emphasis> (MUA), or e-mail client, to send "
21435
"the message through one or more <emphasis>Mail Transfer Agents</emphasis> "
21436
"(MTA), the last of which will hand it off to a <emphasis>Mail Delivery "
21437
"Agent</emphasis> (MDA) for delivery to the recipient's mailbox, from which "
21438
"it will be retrieved by the recipient's e-mail client, usually via a POP3 or "
21439
"IMAP server."
21440
21441
#: serverguide/C/mail.xml:24(title) serverguide/C/mail.xml:832(application) serverguide/C/mail.xml:866(title) serverguide/C/mail.xml:944(title) serverguide/C/mail.xml:1510(title)
21442
msgid "Postfix"
21443
msgstr "Postfix"
21444
21445
#: serverguide/C/mail.xml:25(para)
21446
msgid ""
21447
"<application>Postfix</application> is the default Mail Transfer Agent (MTA) "
21448
"in Ubuntu. It attempts to be fast and easy to administer and secure. It is "
21449
"compatible with the MTA <application>sendmail</application>. This section "
21450
"explains how to install and configure <application>postfix</application>. It "
21451
"also explains how to set it up as an SMTP server using a secure connection "
21452
"(for sending emails securely)."
21453
msgstr ""
21454
"<application>Postfix</application> is the default Mail Transfer Agent (MTA) "
21455
"in Ubuntu. It attempts to be fast and easy to administer and secure. It is "
21456
"compatible with the MTA <application>sendmail</application>. This section "
21457
"explains how to install and configure <application>postfix</application>. It "
21458
"also explains how to set it up as an SMTP server using a secure connection "
21459
"(for sending e-mails securely)."
21460
21461
#: serverguide/C/mail.xml:34(para)
21462
msgid ""
21463
"This guide does not cover setting up Postfix <emphasis>Virtual "
21464
"Domains</emphasis>, for information on Virtual Domains and other advanced "
21465
"configurations see <xref linkend=\"postfix-references\"/>."
21466
msgstr ""
21467
"This guide does not cover setting up Postfix <emphasis>Virtual "
21468
"Domains</emphasis>, for information on Virtual Domains and other advanced "
21469
"configurations see <xref linkend=\"postfix-references\"/>."
21470
21471
#: serverguide/C/mail.xml:41(para)
21472
msgid ""
21473
"To install <application>postfix</application> run the following command:"
21474
msgstr ""
21475
"To install <application>postfix</application> run the following command:"
21476
21477
#: serverguide/C/mail.xml:47(para)
21478
msgid ""
21479
"Simply press return when the installation process asks questions, the "
21480
"configuration will be done in greater detail in the next stage."
21481
msgstr ""
21482
"Simply press return when the installation process asks questions, the "
21483
"configuration will be done in greater detail in the next stage."
21484
21485
#: serverguide/C/mail.xml:52(title)
21486
msgid "Basic Configuration"
21487
msgstr "Basic Configuration"
21488
21489
#: serverguide/C/mail.xml:53(para)
21490
msgid ""
21491
"To configure <application>postfix</application>, run the following command:"
21492
msgstr ""
21493
"To configure <application>postfix</application>, run the following command:"
21494
21495
#: serverguide/C/mail.xml:57(command)
21496
msgid "sudo dpkg-reconfigure postfix"
21497
msgstr "sudo dpkg-reconfigure postfix"
21498
21499
#: serverguide/C/mail.xml:63(para)
21500
msgid "Internet Site"
21501
msgstr "Internet Site"
21502
21503
#: serverguide/C/mail.xml:64(para)
21504
msgid "mail.example.com"
21505
msgstr "mail.example.com"
21506
21507
#: serverguide/C/mail.xml:65(para)
21508
msgid "steve"
21509
msgstr "steve"
21510
21511
#: serverguide/C/mail.xml:66(para)
21512
msgid "mail.example.com, localhost.localdomain, localhost"
21513
msgstr "mail.example.com, localhost.localdomain, localhost"
21514
21515
#: serverguide/C/mail.xml:67(para)
21516
msgid "No"
21517
msgstr "No"
21518
21519
#: serverguide/C/mail.xml:68(para)
21520
msgid "127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.0.0/24"
21521
msgstr "127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.0.0/24"
21522
21523
#: serverguide/C/mail.xml:69(para)
21524
msgid "0"
21525
msgstr "0"
21526
21527
#: serverguide/C/mail.xml:70(para)
21528
msgid "+"
21529
msgstr "+"
21530
21531
#: serverguide/C/mail.xml:71(para)
21532
msgid "all"
21533
msgstr "all"
21534
21535
#: serverguide/C/mail.xml:59(para)
21536
msgid ""
21537
"The user interface will be displayed. On each screen, select the following "
21538
"values: <placeholder-1/>"
21539
msgstr ""
21540
"The user interface will be displayed. On each screen, select the following "
21541
"values: <placeholder-1/>"
21542
21543
#: serverguide/C/mail.xml:75(para)
21544
msgid ""
21545
"Replace mail.example.com with the domain for which you'll accept email, "
21546
"192.168.0.0/24 with the actual network and class range of your mail server, "
21547
"and steve with the appropriate username."
21548
msgstr ""
21549
"Replace mail.example.com with the domain for which you'll accept e-mail, "
21550
"192.168.0.0/24 with the actual network and class range of your mail server, "
21551
"and steve with the appropriate username."
21552
21553
#: serverguide/C/mail.xml:81(para)
21554
msgid ""
21555
"Now is a good time to decide which mailbox format you want to use. By "
21556
"default Postfix will use <emphasis role=\"strong\">mbox</emphasis> for the "
21557
"mailbox format. Rather than editing the configuration file directly, you can "
21558
"use the <command>postconf</command> command to configure all "
21559
"<application>postfix</application> parameters. The configuration parameters "
21560
"will be stored in <filename>/etc/postfix/main.cf</filename> file. Later if "
21561
"you wish to re-configure a particular parameter, you can either run the "
21562
"command or change it manually in the file."
21563
msgstr ""
21564
"Now is a good time to decide which mailbox format you want to use. By "
21565
"default Postfix will use <emphasis role=\"strong\">mbox</emphasis> for the "
21566
"mailbox format. Rather than editing the configuration file directly, you can "
21567
"use the <command>postconf</command> command to configure all "
21568
"<application>postfix</application> parameters. The configuration parameters "
21569
"will be stored in <filename>/etc/postfix/main.cf</filename> file. Later if "
21570
"you wish to re-configure a particular parameter, you can either run the "
21571
"command or change it manually in the file."
21572
21573
#: serverguide/C/mail.xml:92(para)
21574
msgid ""
21575
"To configure the mailbox format for <emphasis "
21576
"role=\"strong\">Maildir:</emphasis>"
21577
msgstr ""
21578
"To configure the mailbox format for <emphasis "
21579
"role=\"strong\">Maildir:</emphasis>"
21580
21581
#: serverguide/C/mail.xml:97(command)
21582
msgid "sudo postconf -e 'home_mailbox = Maildir/'"
21583
msgstr "sudo postconf -e 'home_mailbox = Maildir/'"
21584
21585
#: serverguide/C/mail.xml:100(para)
21586
msgid ""
21587
"This will place new mail in /home/<emphasis "
21588
"role=\"italic\">username</emphasis>/Maildir so you will need to configure "
21589
"your Mail Delivery Agent (MDA) to use the same path."
21590
msgstr ""
21591
"This will place new mail in /home/<emphasis "
21592
"role=\"italic\">username</emphasis>/Maildir so you will need to configure "
21593
"your Mail Delivery Agent (MDA) to use the same path."
21594
21595
#: serverguide/C/mail.xml:108(title) serverguide/C/mail.xml:556(title)
21596
msgid "SMTP Authentication"
21597
msgstr "SMTP Authentication"
21598
21599
#: serverguide/C/mail.xml:110(para)
21600
msgid ""
21601
"SMTP-AUTH allows a client to identify itself through an authentication "
21602
"mechanism (SASL). Transport Layer Security (TLS) should be used to encrypt "
21603
"the authentication process. Once authenticated the SMTP server will allow "
21604
"the client to relay mail."
21605
msgstr ""
21606
"SMTP-AUTH allows a client to identify itself through an authentication "
21607
"mechanism (SASL). Transport Layer Security (TLS) should be used to encrypt "
21608
"the authentication process. Once authenticated the SMTP server will allow "
21609
"the client to relay mail."
21610
21611
#: serverguide/C/mail.xml:117(para)
21612
msgid "Configure Postfix for SMTP-AUTH using SASL (Dovecot SASL):"
21613
msgstr "Configure Postfix for SMTP-AUTH using SASL (Dovecot SASL):"
21614
21615
#: serverguide/C/mail.xml:120(screen)
21616
#, no-wrap
21617
msgid ""
21618
"\n"
21619
"sudo postconf -e 'smtpd_sasl_type = dovecot'\n"
21620
"sudo postconf -e 'smtpd_sasl_path = private/auth-client'\n"
21621
"sudo postconf -e 'smtpd_sasl_local_domain ='\n"
21622
"sudo postconf -e 'smtpd_sasl_security_options = noanonymous'\n"
21623
"sudo postconf -e 'broken_sasl_auth_clients = yes'\n"
21624
"sudo postconf -e 'smtpd_sasl_auth_enable = yes'\n"
21625
"sudo postconf -e 'smtpd_recipient_restrictions = "
21626
"permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\n"
21627
"sudo postconf -e 'inet_interfaces = all'\n"
21628
msgstr ""
21629
"\n"
21630
"sudo postconf -e 'smtpd_sasl_type = dovecot'\n"
21631
"sudo postconf -e 'smtpd_sasl_path = private/auth-client'\n"
21632
"sudo postconf -e 'smtpd_sasl_local_domain ='\n"
21633
"sudo postconf -e 'smtpd_sasl_security_options = noanonymous'\n"
21634
"sudo postconf -e 'broken_sasl_auth_clients = yes'\n"
21635
"sudo postconf -e 'smtpd_sasl_auth_enable = yes'\n"
21636
"sudo postconf -e 'smtpd_recipient_restrictions = "
21637
"permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\n"
21638
"sudo postconf -e 'inet_interfaces = all'\n"
21639
21640
#: serverguide/C/mail.xml:131(para)
21641
msgid ""
21642
"The <emphasis>smtpd_sasl_path</emphasis> configuration is a path relative to "
21643
"the Postfix queue directory."
21644
msgstr ""
21645
"The <emphasis>smtpd_sasl_path</emphasis> configuration is a path relative to "
21646
"the Postfix queue directory."
21647
21648
#: serverguide/C/mail.xml:137(para)
21649
msgid ""
21650
"Next, obtain a digital certificate for TLS. See <xref linkend=\"certificates-"
21651
"and-security\"/> for details. This example also uses a Certificate Authority "
21652
"(CA). For information on generating a CA certificate see <xref "
21653
"linkend=\"certificate-authority\"/>."
21654
msgstr ""
21655
"Next, obtain a digital certificate for TLS. See <xref linkend=\"certificates-"
21656
"and-security\"/> for details. This example also uses a Certificate Authority "
21657
"(CA). For information on generating a CA certificate see <xref "
21658
"linkend=\"certificate-authority\"/>."
21659
21660
#: serverguide/C/mail.xml:143(para)
21661
msgid ""
21662
"You can get the digital certificate from a certificate authority. But unlike "
21663
"web clients, SMTP clients rarely complain about \"self-signed "
21664
"certificates\", so alternatively, you can create the certificate yourself. "
21665
"Refer to <xref linkend=\"creating-a-self-signed-certificate\"/> for more "
21666
"details."
21667
msgstr ""
21668
"You can get the digital certificate from a certificate authority. But unlike "
21669
"web clients, SMTP clients rarely complain about \"self-signed "
21670
"certificates\", so alternatively, you can create the certificate yourself. "
21671
"Refer to <xref linkend=\"creating-a-self-signed-certificate\"/> for more "
21672
"details."
21673
21674
#: serverguide/C/mail.xml:155(para)
21675
msgid ""
21676
"Once you have a certificate, configure Postfix to provide TLS encryption for "
21677
"both incoming and outgoing mail:"
21678
msgstr ""
21679
"Once you have a certificate, configure Postfix to provide TLS encryption for "
21680
"both incoming and outgoing mail:"
21681
21682
#: serverguide/C/mail.xml:158(screen)
21683
#, no-wrap
21684
msgid ""
21685
"\n"
21686
"sudo postconf -e 'smtpd_tls_auth_only = no'\n"
21687
"sudo postconf -e 'smtp_use_tls = yes'\n"
21688
"sudo postconf -e 'smtpd_use_tls = yes'\n"
21689
"sudo postconf -e 'smtp_tls_note_starttls_offer = yes'\n"
21690
"sudo postconf -e 'smtpd_tls_key_file = /etc/ssl/private/server.key'\n"
21691
"sudo postconf -e 'smtpd_tls_cert_file = /etc/ssl/certs/server.crt'\n"
21692
"sudo postconf -e 'smtpd_tls_loglevel = 1'\n"
21693
"sudo postconf -e 'smtpd_tls_received_header = yes'\n"
21694
"sudo postconf -e 'smtpd_tls_session_cache_timeout = 3600s'\n"
21695
"sudo postconf -e 'tls_random_source = dev:/dev/urandom'\n"
21696
"sudo postconf -e 'myhostname = mail.example.com'\n"
21697
msgstr ""
21698
21699
#: serverguide/C/mail.xml:173(para)
21700
msgid ""
21701
"If you are using your own <emphasis>Certificate Authority</emphasis> to sign "
21702
"the certificate enter:"
21703
msgstr ""
21704
21705
#: serverguide/C/mail.xml:177(command)
21706
msgid "sudo postconf -e 'smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem'"
21707
msgstr ""
21708
21709
#: serverguide/C/mail.xml:180(para)
21710
msgid ""
21711
"Again, for more details about certificates see <xref linkend=\"certificates-"
21712
"and-security\"/>."
21713
msgstr ""
21714
21715
#: serverguide/C/mail.xml:186(para)
21716
msgid ""
21717
"After running all the commands, <application>Postfix</application> is "
21718
"configured for SMTP-AUTH and a self-signed certificate has been created for "
21719
"TLS encryption."
21720
msgstr ""
21721
"After running all the commands, <application>Postfix</application> is "
21722
"configured for SMTP-AUTH and a self-signed certificate has been created for "
21723
"TLS encryption."
21724
21725
#: serverguide/C/mail.xml:191(para)
21726
msgid ""
21727
"Now, the file <filename>/etc/postfix/main.cf</filename> should look like "
21728
"<ulink url=\"../sample/postfix_configuration\">this</ulink>."
21729
msgstr ""
21730
"Now, the file <filename>/etc/postfix/main.cf</filename> should look like "
21731
"<ulink url=\"../sample/postfix_configuration\">this</ulink>."
21732
21733
#: serverguide/C/mail.xml:195(para)
21734
msgid ""
21735
"The postfix initial configuration is complete. Run the following command to "
21736
"restart the postfix daemon:"
21737
msgstr ""
21738
"The postfix initial configuration is complete. Run the following command to "
21739
"restart the postfix daemon:"
21740
21741
#: serverguide/C/mail.xml:201(command) serverguide/C/mail.xml:315(command) serverguide/C/mail.xml:378(command) serverguide/C/mail.xml:984(command) serverguide/C/mail.xml:1561(command)
21742
msgid "sudo /etc/init.d/postfix restart"
21743
msgstr "sudo /etc/init.d/postfix restart"
21744
21745
#: serverguide/C/mail.xml:204(para)
21746
msgid ""
21747
"<application>Postfix</application> supports SMTP-AUTH as defined in <ulink "
21748
"url=\"ftp://ftp.isi.edu/in-notes/rfc2554.txt\">RFC2554</ulink>. It is based "
21749
"on <ulink url=\"ftp://ftp.isi.edu/in-notes/rfc2222.txt\">SASL</ulink>. "
21750
"However it is still necessary to set up SASL authentication before you can "
21751
"use SMTP-AUTH."
21752
msgstr ""
21753
"<application>Postfix</application> supports SMTP-AUTH as defined in <ulink "
21754
"url=\"ftp://ftp.isi.edu/in-notes/rfc2554.txt\">RFC2554</ulink>. It is based "
21755
"on <ulink url=\"ftp://ftp.isi.edu/in-notes/rfc2222.txt\">SASL</ulink>. "
21756
"However it is still necessary to set up SASL authentication before you can "
21757
"use SMTP-AUTH."
21758
21759
#: serverguide/C/mail.xml:214(title) serverguide/C/mail.xml:609(title)
21760
msgid "Configuring SASL"
21761
msgstr "Configuring SASL"
21762
21763
#: serverguide/C/mail.xml:215(para)
21764
msgid ""
21765
"Postfix supports two SASL implementations Cyrus SASL and Dovecot SASL. To "
21766
"enable Dovecot SASL the <application>dovecot-common</application> package "
21767
"will need to be installed. From a terminal prompt enter the following:"
21768
msgstr ""
21769
"Postfix supports two SASL implementations Cyrus SASL and Dovecot SASL. To "
21770
"enable Dovecot SASL the <application>dovecot-common</application> package "
21771
"will need to be installed. From a terminal prompt enter the following:"
21772
21773
#: serverguide/C/mail.xml:221(command)
21774
msgid "sudo apt-get install dovecot-common"
21775
msgstr "sudo apt-get install dovecot-common"
21776
21777
#: serverguide/C/mail.xml:223(para)
21778
msgid ""
21779
"Next you will need to edit <filename>/etc/dovecot/dovecot.conf</filename>. "
21780
"In the <emphasis>auth default</emphasis> section uncomment the "
21781
"<emphasis>socket listen</emphasis> option and change the following:"
21782
msgstr ""
21783
"Next you will need to edit <filename>/etc/dovecot/dovecot.conf</filename>. "
21784
"In the <emphasis>auth default</emphasis> section uncomment the "
21785
"<emphasis>socket listen</emphasis> option and change the following:"
21786
21787
#: serverguide/C/mail.xml:227(programlisting)
21788
#, no-wrap
21789
msgid ""
21790
"\n"
21791
" socket listen {\n"
21792
" #master {\n"
21793
" # Master socket provides access to userdb information. It's typically\n"
21794
" # used to give Dovecot's local delivery agent access to userdb so it\n"
21795
" # can find mailbox locations.\n"
21796
" #path = /var/run/dovecot/auth-master\n"
21797
" #mode = 0600\n"
21798
" # Default user/group is the one who started dovecot-auth (root)\n"
21799
" #user = \n"
21800
" #group = \n"
21801
" #}\n"
21802
" client {\n"
21803
" # The client socket is generally safe to export to everyone. Typical "
21804
"use\n"
21805
" # is to export it to your SMTP server so it can do SMTP AUTH lookups\n"
21806
" # using it.\n"
21807
" path = /var/spool/postfix/private/auth-client\n"
21808
" mode = 0660\n"
21809
" user = postfix\n"
21810
" group = postfix\n"
21811
" }\n"
21812
" }\n"
21813
msgstr ""
21814
"\n"
21815
" socket listen {\n"
21816
" #master {\n"
21817
" # Master socket provides access to userdb information. It's typically\n"
21818
" # used to give Dovecot's local delivery agent access to userdb so it\n"
21819
" # can find mailbox locations.\n"
21820
" #path = /var/run/dovecot/auth-master\n"
21821
" #mode = 0600\n"
21822
" # Default user/group is the one who started dovecot-auth (root)\n"
21823
" #user = \n"
21824
" #group = \n"
21825
" #}\n"
21826
" client {\n"
21827
" # The client socket is generally safe to export to everyone. Typical "
21828
"use\n"
21829
" # is to export it to your SMTP server so it can do SMTP AUTH lookups\n"
21830
" # using it.\n"
21831
" path = /var/spool/postfix/private/auth-client\n"
21832
" mode = 0660\n"
21833
" user = postfix\n"
21834
" group = postfix\n"
21835
" }\n"
21836
" }\n"
21837
21838
#: serverguide/C/mail.xml:251(para)
21839
msgid ""
21840
"In order to let <application>Outlook</application> clients use SMTPAUTH, in "
21841
"the <emphasis>auth default</emphasis> section of /etc/dovecot/dovecot.conf "
21842
"add <emphasis>\"login\"</emphasis>:"
21843
msgstr ""
21844
"In order to let <application>Outlook</application> clients use SMTPAUTH, in "
21845
"the <emphasis>auth default</emphasis> section of /etc/dovecot/dovecot.conf "
21846
"add <emphasis>\"login\"</emphasis>:"
21847
21848
#: serverguide/C/mail.xml:256(programlisting)
21849
#, no-wrap
21850
msgid ""
21851
"\n"
21852
" mechanisms = plain login\n"
21853
msgstr ""
21854
"\n"
21855
" mechanisms = plain login\n"
21856
21857
#: serverguide/C/mail.xml:260(para)
21858
msgid ""
21859
"Once you have <application>Dovecot</application> configured restart it with:"
21860
msgstr ""
21861
"Once you have <application>Dovecot</application> configured restart it with:"
21862
21863
#: serverguide/C/mail.xml:264(command) serverguide/C/mail.xml:735(command)
21864
msgid "sudo /etc/init.d/dovecot restart"
21865
msgstr "sudo /etc/init.d/dovecot restart"
21866
21867
#: serverguide/C/mail.xml:269(title)
21868
msgid "Postfix-Dovecot"
21869
msgstr "Postfix-Dovecot"
21870
21871
#: serverguide/C/mail.xml:271(para)
21872
msgid ""
21873
"Another option for configuring <application>Postfix</application> for SMTP-"
21874
"AUTH is using the <application>dovecot-postfix</application> package. This "
21875
"package will install <application>Dovecot</application> and configure "
21876
"<application>Postfix</application> to use it for both SASL authentication "
21877
"and as a Mail Delivery Agent (MDA). The package also configures "
21878
"<application>Dovecot</application> for IMAP, IMAPS, POP3, and POP3S."
21879
msgstr ""
21880
"Another option for configuring <application>Postfix</application> for SMTP-"
21881
"AUTH is using the <application>dovecot-postfix</application> package. This "
21882
"package will install <application>Dovecot</application> and configure "
21883
"<application>Postfix</application> to use it for both SASL authentication "
21884
"and as a Mail Delivery Agent (MDA). The package also configures "
21885
"<application>Dovecot</application> for IMAP, IMAPS, POP3, and POP3S."
21886
21887
#: serverguide/C/mail.xml:280(para)
21888
msgid ""
21889
"You may or may not want to run IMAP, IMAPS, POP3, or POP3S on your mail "
21890
"server. For example, if you are configuring your server to be a mail "
21891
"gateway, spam/virus filter, etc. If this is the case it may be easier to use "
21892
"the above commands to configure Postfix for SMTPAUTH."
21893
msgstr ""
21894
"You may or may not want to run IMAP, IMAPS, POP3, or POP3S on your mail "
21895
"server. For example, if you are configuring your server to be a mail "
21896
"gateway, spam/virus filter, etc. If this is the case it may be easier to use "
21897
"the above commands to configure Postfix for SMTPAUTH."
21898
21899
#: serverguide/C/mail.xml:287(para)
21900
msgid "To install the package, from a terminal prompt enter:"
21901
msgstr "To install the package, from a terminal prompt enter:"
21902
21903
#: serverguide/C/mail.xml:292(command)
21904
msgid "sudo apt-get install dovecot-postfix"
21905
msgstr "sudo apt-get install dovecot-postfix"
21906
21907
#: serverguide/C/mail.xml:295(para)
21908
msgid ""
21909
"You should now have a working mail server, but there are a few options that "
21910
"you may wish to further customize. For example, the package uses the "
21911
"certificate and key from the <application>ssl-cert</application> package, "
21912
"and in a production environment you should use a certificate and key "
21913
"generated for the host. See <xref linkend=\"certificates-and-security\"/> "
21914
"for more details."
21915
msgstr ""
21916
"You should now have a working mail server, but there are a few options that "
21917
"you may wish to further customise. For example, the package uses the "
21918
"certificate and key from the <application>ssl-cert</application> package, "
21919
"and in a production environment you should use a certificate and key "
21920
"generated for the host. See <xref linkend=\"certificates-and-security\"/> "
21921
"for more details."
21922
21923
#: serverguide/C/mail.xml:301(para)
21924
msgid ""
21925
"Once you have a customized certificate and key for the host, change the "
21926
"following options in <filename>/etc/postfix/main.cf</filename>:"
21927
msgstr ""
21928
"Once you have a customised certificate and key for the host, change the "
21929
"following options in <filename>/etc/postfix/main.cf</filename>:"
21930
21931
#: serverguide/C/mail.xml:305(programlisting)
21932
#, no-wrap
21933
msgid ""
21934
"\n"
21935
"smtpd_tls_cert_file = /etc/ssl/certs/ssl-mail.pem\n"
21936
"smtpd_tls_key_file = /etc/ssl/private/ssl-mail.key\n"
21937
msgstr ""
21938
"\n"
21939
"smtpd_tls_cert_file = /etc/ssl/certs/ssl-mail.pem\n"
21940
"smtpd_tls_key_file = /etc/ssl/private/ssl-mail.key\n"
21941
21942
#: serverguide/C/mail.xml:310(para)
21943
msgid "Then restart Postfix:"
21944
msgstr "Then restart Postfix:"
21945
21946
#: serverguide/C/mail.xml:321(para)
21947
msgid ""
21948
"SMTP-AUTH configuration is complete. Now it is time to test the setup."
21949
msgstr ""
21950
"SMTP-AUTH configuration is complete. Now it is time to test the setup."
21951
21952
#: serverguide/C/mail.xml:324(para)
21953
msgid "To see if SMTP-AUTH and TLS work properly, run the following command:"
21954
msgstr ""
21955
"To see if SMTP-AUTH and TLS work properly, run the following command:"
21956
21957
#: serverguide/C/mail.xml:329(command)
21958
msgid "telnet mail.example.com 25"
21959
msgstr "telnet mail.example.com 25"
21960
21961
#: serverguide/C/mail.xml:331(para)
21962
msgid ""
21963
"After you have established the connection to the postfix mail server, type:"
21964
msgstr ""
21965
"After you have established the connection to the postfix mail server, type:"
21966
21967
#: serverguide/C/mail.xml:335(screen)
21968
#, no-wrap
21969
msgid ""
21970
"\n"
21971
"ehlo mail.example.com\n"
21972
msgstr ""
21973
"\n"
21974
"ehlo mail.example.com\n"
21975
21976
#: serverguide/C/mail.xml:338(para)
21977
msgid ""
21978
"If you see the following lines among others, then everything is working "
21979
"perfectly. Type <command>quit</command> to exit."
21980
msgstr ""
21981
"If you see the following lines among others, then everything is working "
21982
"perfectly. Type <command>quit</command> to exit."
21983
21984
#: serverguide/C/mail.xml:342(programlisting)
21985
#, no-wrap
21986
msgid ""
21987
"\n"
21988
"250-STARTTLS\n"
21989
"250-AUTH LOGIN PLAIN\n"
21990
"250-AUTH=LOGIN PLAIN\n"
21991
"250 8BITMIME\n"
21992
msgstr ""
21993
"\n"
21994
"250-STARTTLS\n"
21995
"250-AUTH LOGIN PLAIN\n"
21996
"250-AUTH=LOGIN PLAIN\n"
21997
"250 8BITMIME\n"
21998
21999
#: serverguide/C/mail.xml:352(para)
22000
msgid ""
22001
"This section introduces some common ways to determine the cause if problems "
22002
"arise."
22003
msgstr ""
22004
"This section introduces some common ways to determine the cause if problems "
22005
"arise."
22006
22007
#: serverguide/C/mail.xml:356(title)
22008
msgid "Escaping chroot"
22009
msgstr "Escaping chroot"
22010
22011
#: serverguide/C/mail.xml:357(para)
22012
msgid ""
22013
"The Ubuntu <application>postfix</application> package will by default "
22014
"install into a <emphasis>chroot</emphasis> environment for security reasons. "
22015
"This can add greater complexity when troubleshooting problems."
22016
msgstr ""
22017
"The Ubuntu <application>postfix</application> package will by default "
22018
"install into a <emphasis>chroot</emphasis> environment for security reasons. "
22019
"This can add greater complexity when troubleshooting problems."
22020
22021
#: serverguide/C/mail.xml:361(para)
22022
msgid ""
22023
"To turn off the chroot operation locate for the following line in the "
22024
"<filename>/etc/postfix/master.cf</filename> configuration file:"
22025
msgstr ""
22026
"To turn off the chroot operation locate for the following line in the "
22027
"<filename>/etc/postfix/master.cf</filename> configuration file:"
22028
22029
#: serverguide/C/mail.xml:365(screen)
22030
#, no-wrap
22031
msgid ""
22032
"\n"
22033
"smtp inet n - - - - smtpd\n"
22034
msgstr ""
22035
"\n"
22036
"smtp inet n - - - - smtpd\n"
22037
22038
#: serverguide/C/mail.xml:368(para)
22039
msgid "and modify it as follows:"
22040
msgstr "and modify it as follows:"
22041
22042
#: serverguide/C/mail.xml:371(screen)
22043
#, no-wrap
22044
msgid ""
22045
"\n"
22046
"smtp inet n - n - - smtpd\n"
22047
msgstr ""
22048
"\n"
22049
"smtp inet n - n - - smtpd\n"
22050
22051
#: serverguide/C/mail.xml:374(para)
22052
msgid ""
22053
"You will then need to restart Postfix to use the new configuration. From a "
22054
"terminal prompt enter:"
22055
msgstr ""
22056
"You will then need to restart Postfix to use the new configuration. From a "
22057
"terminal prompt enter:"
22058
22059
#: serverguide/C/mail.xml:382(title)
22060
msgid "Log Files"
22061
msgstr "Log Files"
22062
22063
#: serverguide/C/mail.xml:383(para)
22064
msgid ""
22065
"<application>Postfix</application> sends all log messages to "
22066
"<filename>/var/log/mail.log</filename>. However error and warning messages "
22067
"can sometimes get lost in the normal log output so they are also logged to "
22068
"<filename>/var/log/mail.err</filename> and "
22069
"<filename>/var/log/mail.warn</filename> respectively."
22070
msgstr ""
22071
"<application>Postfix</application> sends all log messages to "
22072
"<filename>/var/log/mail.log</filename>. However error and warning messages "
22073
"can sometimes get lost in the normal log output so they are also logged to "
22074
"<filename>/var/log/mail.err</filename> and "
22075
"<filename>/var/log/mail.warn</filename> respectively."
22076
22077
#: serverguide/C/mail.xml:388(para)
22078
msgid ""
22079
"To see messages entered into the logs in real time you can use the "
22080
"<application>tail -f</application> command:"
22081
msgstr ""
22082
"To see messages entered into the logs in real time you can use the "
22083
"<application>tail -f</application> command:"
22084
22085
#: serverguide/C/mail.xml:393(command)
22086
msgid "tail -f /var/log/mail.err"
22087
msgstr "tail -f /var/log/mail.err"
22088
22089
#: serverguide/C/mail.xml:395(para)
22090
msgid ""
22091
"The amount of detail that is recorded in the logs can be increased. Below "
22092
"are some configuration options for increasing the log level for some of the "
22093
"areas covered above."
22094
msgstr ""
22095
"The amount of detail that is recorded in the logs can be increased. Below "
22096
"are some configuration options for increasing the log level for some of the "
22097
"areas covered above."
22098
22099
#: serverguide/C/mail.xml:401(para)
22100
msgid ""
22101
"To increase <emphasis>TLS</emphasis> activity logging set the "
22102
"<emphasis>smtpd_tls_loglevel</emphasis> option to a value from 1 to 4."
22103
msgstr ""
22104
"To increase <emphasis>TLS</emphasis> activity logging set the "
22105
"<emphasis>smtpd_tls_loglevel</emphasis> option to a value from 1 to 4."
22106
22107
#: serverguide/C/mail.xml:405(command)
22108
msgid "sudo postconf -e 'smtpd_tls_loglevel = 4'"
22109
msgstr "sudo postconf -e 'smtpd_tls_loglevel = 4'"
22110
22111
#: serverguide/C/mail.xml:409(para)
22112
msgid ""
22113
"If you are having trouble sending or receiving mail from a specific domain "
22114
"you can add the domain to the <emphasis>debug_peer_list</emphasis> parameter."
22115
msgstr ""
22116
"If you are having trouble sending or receiving mail from a specific domain "
22117
"you can add the domain to the <emphasis>debug_peer_list</emphasis> parameter."
22118
22119
#: serverguide/C/mail.xml:414(command)
22120
msgid "sudo postconf -e 'debug_peer_list = problem.domain'"
22121
msgstr "sudo postconf -e 'debug_peer_list = problem.domain'"
22122
22123
#: serverguide/C/mail.xml:418(para)
22124
msgid ""
22125
"You can increase the verbosity of any <application>Postfix</application> "
22126
"daemon process by editing the <filename>/etc/postfix/master.cf</filename> "
22127
"and adding a <emphasis>-v</emphasis> after the entry. For example edit the "
22128
"<emphasis>smtp</emphasis> entry:"
22129
msgstr ""
22130
"You can increase the verbosity of any <application>Postfix</application> "
22131
"daemon process by editing the <filename>/etc/postfix/master.cf</filename> "
22132
"and adding a <emphasis>-v</emphasis> after the entry. For example edit the "
22133
"<emphasis>smtp</emphasis> entry:"
22134
22135
#: serverguide/C/mail.xml:422(programlisting)
22136
#, no-wrap
22137
msgid ""
22138
"\n"
22139
"smtp unix - - - - - smtp -v\n"
22140
msgstr ""
22141
"\n"
22142
"smtp unix - - - - - smtp -v\n"
22143
22144
#: serverguide/C/mail.xml:428(para)
22145
msgid ""
22146
"It is important to note that after making one of the logging changes above "
22147
"the <application>Postfix</application> process will need to be reloaded in "
22148
"order to recognize the new configuration: <command>sudo /etc/init.d/postfix "
22149
"reload</command>"
22150
msgstr ""
22151
"It is important to note that after making one of the logging changes above "
22152
"the <application>Postfix</application> process will need to be reloaded in "
22153
"order to recognise the new configuration: <command>sudo /etc/init.d/postfix "
22154
"reload</command>"
22155
22156
#: serverguide/C/mail.xml:435(para)
22157
msgid ""
22158
"To increase the amount of information logged when troubleshooting "
22159
"<emphasis>SASL</emphasis> issues you can set the following options in "
22160
"<filename>/etc/dovecot/dovecot.conf</filename>"
22161
msgstr ""
22162
"To increase the amount of information logged when troubleshooting "
22163
"<emphasis>SASL</emphasis> issues you can set the following options in "
22164
"<filename>/etc/dovecot/dovecot.conf</filename>"
22165
22166
#: serverguide/C/mail.xml:439(programlisting)
22167
#, no-wrap
22168
msgid ""
22169
"\n"
22170
"auth_debug=yes\n"
22171
"auth_debug_passwords=yes\n"
22172
msgstr ""
22173
"\n"
22174
"auth_debug=yes\n"
22175
"auth_debug_passwords=yes\n"
22176
22177
#: serverguide/C/mail.xml:446(para)
22178
msgid ""
22179
"Just like <application>Postfix</application> if you change a "
22180
"<application>Dovecot</application> configuration the process will need to be "
22181
"reloaded: <command>sudo /etc/init.d/dovecot reload</command>."
22182
msgstr ""
22183
"Just like <application>Postfix</application> if you change a "
22184
"<application>Dovecot</application> configuration the process will need to be "
22185
"reloaded: <command>sudo /etc/init.d/dovecot reload</command>."
22186
22187
#: serverguide/C/mail.xml:452(para)
22188
msgid ""
22189
"Some of the options above can drastically increase the amount of information "
22190
"sent to the log files. Remember to return the log level back to normal after "
22191
"you have corrected the problem. Then reload the appropriate daemon for the "
22192
"new configuration to take affect."
22193
msgstr ""
22194
"Some of the options above can drastically increase the amount of information "
22195
"sent to the log files. Remember to return the log level back to normal after "
22196
"you have corrected the problem. Then reload the appropriate daemon for the "
22197
"new configuration to take affect."
22198
22199
#: serverguide/C/mail.xml:460(para)
22200
msgid ""
22201
"Administering a <application>Postfix</application> server can be a very "
22202
"complicated task. At some point you may need to turn to the Ubuntu community "
22203
"for more experienced help."
22204
msgstr ""
22205
"Administering a <application>Postfix</application> server can be a very "
22206
"complicated task. At some point you may need to turn to the Ubuntu community "
22207
"for more experienced help."
22208
22209
#: serverguide/C/mail.xml:464(para)
22210
msgid ""
22211
"A great place to ask for <application>Postfix</application> assistance, and "
22212
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
22213
"server</emphasis> IRC channel on <ulink "
22214
"url=\"http://freenode.net\">freenode</ulink>. You can also post a message to "
22215
"one of the <ulink "
22216
"url=\"http://www.ubuntu.com/support/community/webforums\">Web Forums</ulink>."
22217
msgstr ""
22218
"A great place to ask for <application>Postfix</application> assistance, and "
22219
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
22220
"server</emphasis> IRC channel on <ulink "
22221
"url=\"http://freenode.net\">freenode</ulink>. You can also post a message to "
22222
"one of the <ulink "
22223
"url=\"http://www.ubuntu.com/support/community/webforums\">Web Forums</ulink>."
22224
22225
#: serverguide/C/mail.xml:469(para)
22226
msgid ""
22227
"For in depth <application>Postfix</application> information Ubuntu "
22228
"developers highly recommend: <ulink url=\"http://www.postfix-book.com/\">The "
22229
"Book of Postfix</ulink>."
22230
msgstr ""
22231
"For in depth <application>Postfix</application> information Ubuntu "
22232
"developers highly recommend: <ulink url=\"http://www.postfix-book.com/\">The "
22233
"Book of Postfix</ulink>."
22234
22235
#: serverguide/C/mail.xml:473(para)
22236
msgid ""
22237
"Finally, the <ulink "
22238
"url=\"http://www.postfix.org/documentation.html\">Postfix</ulink> website "
22239
"also has great documentation on all the different configuration options "
22240
"available."
22241
msgstr ""
22242
"Finally, the <ulink "
22243
"url=\"http://www.postfix.org/documentation.html\">Postfix</ulink> website "
22244
"also has great documentation on all the different configuration options "
22245
"available."
22246
22247
#: serverguide/C/mail.xml:477(para)
22248
msgid ""
22249
"Also, the <ulink url=\"https://help.ubuntu.com/community/Postfix\">Ubuntu "
22250
"Wiki Postifx</ulink> page has more information."
22251
msgstr ""
22252
22253
#: serverguide/C/mail.xml:485(title) serverguide/C/mail.xml:872(title) serverguide/C/mail.xml:988(title)
22254
msgid "Exim4"
22255
msgstr "Exim4"
22256
22257
#: serverguide/C/mail.xml:486(para)
22258
msgid ""
22259
"<application>Exim4</application> is another Message Transfer Agent (MTA) "
22260
"developed at the University of Cambridge for use on Unix systems connected "
22261
"to the Internet. Exim can be installed in place of "
22262
"<application>sendmail</application>, although the configuration of "
22263
"<application>exim</application> is quite different to that of "
22264
"<application>sendmail</application>."
22265
msgstr ""
22266
"<application>Exim4</application> is another Message Transfer Agent (MTA) "
22267
"developed at the University of Cambridge for use on Unix systems connected "
22268
"to the Internet. Exim can be installed in place of "
22269
"<application>sendmail</application>, although the configuration of "
22270
"<application>exim</application> is quite different to that of "
22271
"<application>sendmail</application>."
22272
22273
#: serverguide/C/mail.xml:497(para)
22274
msgid ""
22275
"To install <application>exim4</application>, run the following command: "
22276
"<screen>\n"
22277
"<command>sudo apt-get install exim4</command>\n"
22278
"</screen>"
22279
msgstr ""
22280
"To install <application>exim4</application>, run the following command: "
22281
"<screen>\n"
22282
"<command>sudo apt-get install exim4</command>\n"
22283
"</screen>"
22284
22285
#: serverguide/C/mail.xml:506(para)
22286
msgid ""
22287
"To configure <application>Exim4</application>, run the following command:"
22288
msgstr ""
22289
"To configure <application>Exim4</application>, run the following command:"
22290
22291
#: serverguide/C/mail.xml:510(command)
22292
msgid "sudo dpkg-reconfigure exim4-config"
22293
msgstr "sudo dpkg-reconfigure exim4-config"
22294
22295
#: serverguide/C/mail.xml:512(para)
22296
msgid ""
22297
"The user interface will be displayed. The user interface lets you configure "
22298
"many parameters. For example, In <application>Exim4</application> the "
22299
"configuration files are split among multiple files. If you wish to have them "
22300
"in one file you can configure accordingly in this user interface."
22301
msgstr ""
22302
"The user interface will be displayed. The user interface lets you configure "
22303
"many parameters. For example, In <application>Exim4</application> the "
22304
"configuration files are split among multiple files. If you wish to have them "
22305
"in one file you can configure accordingly in this user interface."
22306
22307
#: serverguide/C/mail.xml:520(para)
22308
msgid ""
22309
"All the parameters you configure in the user interface are stored in "
22310
"<filename>/etc/exim4/update-exim4.conf.conf</filename> file. If you wish to "
22311
"re-configure, either you re-run the configuration wizard or manually edit "
22312
"this file using your favorite editor. Once you configure, you can run the "
22313
"following command to generate the master configuration file:"
22314
msgstr ""
22315
"All the parameters you configure in the user interface are stored in "
22316
"<filename>/etc/exim4/update-exim4.conf.conf</filename> file. If you wish to "
22317
"re-configure, either you re-run the configuration wizard or manually edit "
22318
"this file using your favourite editor. Once you configure, you can run the "
22319
"following command to generate the master configuration file:"
22320
22321
#: serverguide/C/mail.xml:531(command) serverguide/C/mail.xml:604(command)
22322
msgid "sudo update-exim4.conf"
22323
msgstr "sudo update-exim4.conf"
22324
22325
#: serverguide/C/mail.xml:533(para)
22326
msgid ""
22327
"The master configuration file, is generated and it is stored in "
22328
"<filename>/var/lib/exim4/config.autogenerated</filename>."
22329
msgstr ""
22330
"The master configuration file, is generated and it is stored in "
22331
"<filename>/var/lib/exim4/config.autogenerated</filename>."
22332
22333
#: serverguide/C/mail.xml:539(para)
22334
msgid ""
22335
"At any time, you should not edit the master configuration file, "
22336
"<filename>/var/lib/exim4/config.autogenerated</filename> manually. It is "
22337
"updated automatically every time you run <command>update-exim4.conf</command>"
22338
msgstr ""
22339
"At any time, you should not edit the master configuration file, "
22340
"<filename>/var/lib/exim4/config.autogenerated</filename> manually. It is "
22341
"updated automatically every time you run <command>update-exim4.conf</command>"
22342
22343
#: serverguide/C/mail.xml:547(para)
22344
msgid ""
22345
"You can run the following command to start <application>Exim4</application> "
22346
"daemon."
22347
msgstr ""
22348
"You can run the following command to start <application>Exim4</application> "
22349
"daemon."
22350
22351
#: serverguide/C/mail.xml:552(command) serverguide/C/mail.xml:994(command)
22352
msgid "sudo /etc/init.d/exim4 start"
22353
msgstr "sudo /etc/init.d/exim4 start"
22354
22355
#: serverguide/C/mail.xml:557(para)
22356
msgid ""
22357
"This section covers configuring Exim4 to use SMTP-AUTH with TLS and SASL."
22358
msgstr ""
22359
"This section covers configuring Exim4 to use SMTP-AUTH with TLS and SASL."
22360
22361
#: serverguide/C/mail.xml:560(para)
22362
msgid ""
22363
"The first step is to create a certificate for use with TLS. Enter the "
22364
"following into a terminal prompt:"
22365
msgstr ""
22366
"The first step is to create a certificate for use with TLS. Enter the "
22367
"following into a terminal prompt:"
22368
22369
#: serverguide/C/mail.xml:564(command)
22370
msgid "sudo /usr/share/doc/exim4-base/examples/exim-gencert"
22371
msgstr "sudo /usr/share/doc/exim4-base/examples/exim-gencert"
22372
22373
#: serverguide/C/mail.xml:566(para)
22374
msgid ""
22375
"Now Exim4 needs to be configured for TLS by editing "
22376
"<filename>/etc/exim4/conf.d/main/03_exim4-config_tlsoptions</filename> add "
22377
"the following:"
22378
msgstr ""
22379
"Now Exim4 needs to be configured for TLS by editing "
22380
"<filename>/etc/exim4/conf.d/main/03_exim4-config_tlsoptions</filename> add "
22381
"the following:"
22382
22383
#: serverguide/C/mail.xml:570(programlisting)
22384
#, no-wrap
22385
msgid ""
22386
"\n"
22387
"MAIN_TLS_ENABLE = yes\n"
22388
msgstr ""
22389
"\n"
22390
"MAIN_TLS_ENABLE = yes\n"
22391
22392
#: serverguide/C/mail.xml:573(para)
22393
msgid ""
22394
"Next you need to configure <application>Exim4</application> to use the "
22395
"<application>saslauthd</application> for authentication. Edit "
22396
"<filename>/etc/exim4/conf.d/auth/30_exim4-config_examples</filename> and "
22397
"uncomment the <emphasis>plain_saslauthd_server</emphasis> and "
22398
"<emphasis>login_saslauthd_server</emphasis> sections:"
22399
msgstr ""
22400
"Next you need to configure <application>Exim4</application> to use the "
22401
"<application>saslauthd</application> for authentication. Edit "
22402
"<filename>/etc/exim4/conf.d/auth/30_exim4-config_examples</filename> and "
22403
"uncomment the <emphasis>plain_saslauthd_server</emphasis> and "
22404
"<emphasis>login_saslauthd_server</emphasis> sections:"
22405
22406
#: serverguide/C/mail.xml:578(programlisting)
22407
#, no-wrap
22408
msgid ""
22409
"\n"
22410
" plain_saslauthd_server:\n"
22411
" driver = plaintext\n"
22412
" public_name = PLAIN\n"
22413
" server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}\n"
22414
" server_set_id = $auth2\n"
22415
" server_prompts = :\n"
22416
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
22417
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
22418
" .endif\n"
22419
"#\n"
22420
" login_saslauthd_server:\n"
22421
" driver = plaintext\n"
22422
" public_name = LOGIN\n"
22423
" server_prompts = \"Username:: : Password::\"\n"
22424
" # don't send system passwords over unencrypted connections\n"
22425
" server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}}\n"
22426
" server_set_id = $auth1\n"
22427
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
22428
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
22429
" .endif\n"
22430
msgstr ""
22431
"\n"
22432
" plain_saslauthd_server:\n"
22433
" driver = plaintext\n"
22434
" public_name = PLAIN\n"
22435
" server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}\n"
22436
" server_set_id = $auth2\n"
22437
" server_prompts = :\n"
22438
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
22439
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
22440
" .endif\n"
22441
"#\n"
22442
" login_saslauthd_server:\n"
22443
" driver = plaintext\n"
22444
" public_name = LOGIN\n"
22445
" server_prompts = \"Username:: : Password::\"\n"
22446
" # don't send system passwords over unencrypted connections\n"
22447
" server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}}\n"
22448
" server_set_id = $auth1\n"
22449
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
22450
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
22451
" .endif\n"
22452
22453
#: serverguide/C/mail.xml:600(para)
22454
msgid "Finally, update the Exim4 configuration and restart the service:"
22455
msgstr "Finally, update the Exim4 configuration and restart the service:"
22456
22457
#: serverguide/C/mail.xml:605(command)
22458
msgid "sudo /etc/init.d/exim4 restart"
22459
msgstr "sudo /etc/init.d/exim4 restart"
22460
22461
#: serverguide/C/mail.xml:610(para)
22462
msgid ""
22463
"This section provides details on configuring the saslauthd to provide "
22464
"authentication for <application>Exim4</application>."
22465
msgstr ""
22466
"This section provides details on configuring the saslauthd to provide "
22467
"authentication for <application>Exim4</application>."
22468
22469
#: serverguide/C/mail.xml:613(para)
22470
msgid ""
22471
"The first step is to install the sasl2-bin package. From a terminal prompt "
22472
"enter the following:"
22473
msgstr ""
22474
"The first step is to install the sasl2-bin package. From a terminal prompt "
22475
"enter the following:"
22476
22477
#: serverguide/C/mail.xml:617(command)
22478
msgid "sudo apt-get install sasl2-bin"
22479
msgstr "sudo apt-get install sasl2-bin"
22480
22481
#: serverguide/C/mail.xml:619(para)
22482
msgid ""
22483
"To configure saslauthd edit the /etc/default/saslauthd configuration file "
22484
"and set START=no to:"
22485
msgstr ""
22486
"To configure saslauthd edit the /etc/default/saslauthd configuration file "
22487
"and set START=no to:"
22488
22489
#: serverguide/C/mail.xml:622(programlisting)
22490
#, no-wrap
22491
msgid ""
22492
"\n"
22493
"START=yes\n"
22494
msgstr ""
22495
"\n"
22496
"START=yes\n"
22497
22498
#: serverguide/C/mail.xml:625(para)
22499
msgid ""
22500
"Next the <emphasis>Debian-exim</emphasis> user needs to be part of the "
22501
"<emphasis>sasl</emphasis> group in order for Exim4 to use the saslauthd "
22502
"service:"
22503
msgstr ""
22504
"Next the <emphasis>Debian-exim</emphasis> user needs to be part of the "
22505
"<emphasis>sasl</emphasis> group in order for Exim4 to use the saslauthd "
22506
"service:"
22507
22508
#: serverguide/C/mail.xml:630(command)
22509
msgid "sudo adduser Debian-exim sasl"
22510
msgstr "sudo adduser Debian-exim sasl"
22511
22512
#: serverguide/C/mail.xml:632(para)
22513
msgid "Now start the <application>saslauthd</application> service:"
22514
msgstr "Now start the <application>saslauthd</application> service:"
22515
22516
#: serverguide/C/mail.xml:636(command)
22517
msgid "sudo /etc/init.d/saslauthd start"
22518
msgstr "sudo /etc/init.d/saslauthd start"
22519
22520
#: serverguide/C/mail.xml:638(para)
22521
msgid ""
22522
"<application>Exim4</application> is now configured with SMTP-AUTH using TLS "
22523
"and SASL authentication."
22524
msgstr ""
22525
"<application>Exim4</application> is now configured with SMTP-AUTH using TLS "
22526
"and SASL authentication."
22527
22528
#: serverguide/C/mail.xml:647(para)
22529
msgid ""
22530
"See <ulink url=\"http://www.exim.org/\">exim.org</ulink> for more "
22531
"information."
22532
msgstr ""
22533
"See <ulink url=\"http://www.exim.org/\">exim.org</ulink> for more "
22534
"information."
22535
22536
#: serverguide/C/mail.xml:652(para)
22537
msgid ""
22538
"There is also an <ulink url=\"http://www.uit.co.uk/content/exim-smtp-mail-"
22539
"server\">Exim4 Book</ulink> available."
22540
msgstr ""
22541
"There is also an <ulink url=\"http://www.uit.co.uk/content/exim-smtp-mail-"
22542
"server\">Exim4 Book</ulink> available."
22543
22544
#: serverguide/C/mail.xml:657(para)
22545
msgid ""
22546
"Another resource is the <ulink "
22547
"url=\"https://help.ubuntu.com/community/Exim4\">Exim4 Ubuntu Wiki </ulink> "
22548
"page."
22549
msgstr ""
22550
22551
#: serverguide/C/mail.xml:666(title)
22552
msgid "Dovecot Server"
22553
msgstr "Dovecot Server"
22554
22555
#: serverguide/C/mail.xml:667(para)
22556
msgid ""
22557
"<application>Dovecot</application> is a Mail Delivery Agent, written with "
22558
"security primarily in mind. It supports the major mailbox formats: mbox or "
22559
"Maildir. This section explain how to set it up as an imap or pop3 server."
22560
msgstr ""
22561
"<application>Dovecot</application> is a Mail Delivery Agent, written with "
22562
"security primarily in mind. It supports the major mailbox formats: mbox or "
22563
"Maildir. This section explain how to set it up as an IMAP or POP3 server."
22564
22565
#: serverguide/C/mail.xml:675(para)
22566
msgid ""
22567
"To install <application>dovecot</application>, run the following command in "
22568
"the command prompt:"
22569
msgstr ""
22570
"To install <application>dovecot</application>, run the following command in "
22571
"the command prompt:"
22572
22573
#: serverguide/C/mail.xml:680(command)
22574
msgid "sudo apt-get install dovecot-imapd dovecot-pop3d"
22575
msgstr "sudo apt-get install dovecot-imapd dovecot-pop3d"
22576
22577
#: serverguide/C/mail.xml:685(para)
22578
msgid ""
22579
"To configure <application>dovecot</application>, you can edit the file "
22580
"<filename>/etc/dovecot/dovecot.conf</filename>. You can choose the protocol "
22581
"you use. It could be pop3, pop3s (pop3 secure), imap and imaps (imap "
22582
"secure). A description of these protocols is beyond the scope of this guide. "
22583
"For further information, refer to the Wikipedia articles on <ulink "
22584
"url=\"http://en.wikipedia.org/wiki/POP3\">POP3</ulink> and <ulink "
22585
"url=\"http://en.wikipedia.org/wiki/Internet_Message_Access_Protocol\">IMAP</u"
22586
"link>."
22587
msgstr ""
22588
"To configure <application>dovecot</application>, you can edit the file "
22589
"<filename>/etc/dovecot/dovecot.conf</filename>. You can choose the protocol "
22590
"you use. It could be pop3, pop3s (pop3 secure), imap and imaps (imap "
22591
"secure). A description of these protocols is beyond the scope of this guide. "
22592
"For further information, refer to the Wikipedia articles on <ulink "
22593
"url=\"http://en.wikipedia.org/wiki/POP3\">POP3</ulink> and <ulink "
22594
"url=\"http://en.wikipedia.org/wiki/Internet_Message_Access_Protocol\">IMAP</u"
22595
"link>."
22596
22597
#: serverguide/C/mail.xml:695(para)
22598
msgid ""
22599
"IMAPS and POP3S are more secure that the simple IMAP and POP3 because they "
22600
"use SSL encryption to connect. Once you have chosen the protocol, amend the "
22601
"following line in the file <filename>/etc/dovecot/dovecot.conf</filename>:"
22602
msgstr ""
22603
"IMAPS and POP3S are more secure that the simple IMAP and POP3 because they "
22604
"use SSL encryption to connect. Once you have chosen the protocol, amend the "
22605
"following line in the file <filename>/etc/dovecot/dovecot.conf</filename>:"
22606
22607
#: serverguide/C/mail.xml:701(programlisting)
22608
#, no-wrap
22609
msgid ""
22610
"\n"
22611
"protocols = pop3 pop3s imap imaps\n"
22612
msgstr ""
22613
"\n"
22614
"protocols = pop3 pop3s imap imaps\n"
22615
22616
#: serverguide/C/mail.xml:704(para)
22617
msgid ""
22618
"Next, choose the mailbox you would like to use. "
22619
"<application>Dovecot</application> supports <emphasis "
22620
"role=\"strong\">maildir</emphasis> and <emphasis "
22621
"role=\"strong\">mbox</emphasis> formats. These are the most commonly used "
22622
"mailbox formats. They both have their own benefits and are discussed on "
22623
"<ulink url=\"http://wiki.dovecot.org/MailboxFormat\">the Dovecot web "
22624
"site</ulink>."
22625
msgstr ""
22626
"Next, choose the mailbox you would like to use. "
22627
"<application>Dovecot</application> supports <emphasis "
22628
"role=\"strong\">maildir</emphasis> and <emphasis "
22629
"role=\"strong\">mbox</emphasis> formats. These are the most commonly used "
22630
"mailbox formats. They both have their own benefits and are discussed on "
22631
"<ulink url=\"http://wiki.dovecot.org/MailboxFormat\">the Dovecot web "
22632
"site</ulink>."
22633
22634
#: serverguide/C/mail.xml:712(para)
22635
msgid ""
22636
"Once you have chosen your mailbox type, edit the file "
22637
"<filename>/etc/dovecot/dovecot.conf</filename> and change the following line:"
22638
msgstr ""
22639
"Once you have chosen your mailbox type, edit the file "
22640
"<filename>/etc/dovecot/dovecot.conf</filename> and change the following line:"
22641
22642
#: serverguide/C/mail.xml:717(programlisting)
22643
#, no-wrap
22644
msgid ""
22645
"\n"
22646
"mail_location = maildir:~/Maildir # (for maildir)\n"
22647
"or\n"
22648
"mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u # (for mbox)\n"
22649
msgstr ""
22650
"\n"
22651
"mail_location = maildir:~/Maildir # (for maildir)\n"
22652
"or\n"
22653
"mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u # (for mbox)\n"
22654
22655
#: serverguide/C/mail.xml:723(para)
22656
msgid ""
22657
"You should configure your Mail Transport Agent (MTA) to transfer the "
22658
"incoming mail to this type of mailbox if it is different from the one you "
22659
"have configured."
22660
msgstr ""
22661
"You should configure your Mail Transport Agent (MTA) to transfer the "
22662
"incoming mail to this type of mailbox if it is different from the one you "
22663
"have configured."
22664
22665
#: serverguide/C/mail.xml:729(para)
22666
msgid ""
22667
"Once you have configured dovecot, restart the "
22668
"<application>dovecot</application> daemon in order to test your setup:"
22669
msgstr ""
22670
"Once you have configured dovecot, restart the "
22671
"<application>dovecot</application> daemon in order to test your setup:"
22672
22673
#: serverguide/C/mail.xml:738(para)
22674
msgid ""
22675
"If you have enabled imap, or pop3, you can also try to log in with the "
22676
"commands <command>telnet localhost pop3</command> or <command>telnet "
22677
"localhost imap2</command>. If you see something like the following, the "
22678
"installation has been successful:"
22679
msgstr ""
22680
"If you have enabled imap, or pop3, you can also try to log in with the "
22681
"commands <command>telnet localhost pop3</command> or <command>telnet "
22682
"localhost imap2</command>. If you see something like the following, the "
22683
"installation has been successful:"
22684
22685
#: serverguide/C/mail.xml:745(programlisting)
22686
#, no-wrap
22687
msgid ""
22688
"\n"
22689
"bhuvan@rainbow:~$ telnet localhost pop3\n"
22690
"Trying 127.0.0.1...\n"
22691
"Connected to localhost.localdomain.\n"
22692
"Escape character is '^]'.\n"
22693
"+OK Dovecot ready.\n"
22694
msgstr ""
22695
"\n"
22696
"bhuvan@rainbow:~$ telnet localhost pop3\n"
22697
"Trying 127.0.0.1...\n"
22698
"Connected to localhost.localdomain.\n"
22699
"Escape character is '^]'.\n"
22700
"+OK Dovecot ready.\n"
22701
22702
#: serverguide/C/mail.xml:754(title)
22703
msgid "Dovecot SSL Configuration"
22704
msgstr "Dovecot SSL Configuration"
22705
22706
#: serverguide/C/mail.xml:755(para)
22707
msgid ""
22708
"To configure <application>dovecot</application> to use SSL, you can edit the "
22709
"file <filename>/etc/dovecot/dovecot.conf</filename> and amend following "
22710
"lines:"
22711
msgstr ""
22712
"To configure <application>dovecot</application> to use SSL, you can edit the "
22713
"file <filename>/etc/dovecot/dovecot.conf</filename> and amend following "
22714
"lines:"
22715
22716
#: serverguide/C/mail.xml:760(programlisting)
22717
#, no-wrap
22718
msgid ""
22719
"\n"
22720
"ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem\n"
22721
"ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key\n"
22722
"ssl_disable = no\n"
22723
"disable_plaintext_auth = no\n"
22724
msgstr ""
22725
"\n"
22726
"ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem\n"
22727
"ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key\n"
22728
"ssl_disable = no\n"
22729
"disable_plaintext_auth = no\n"
22730
22731
#: serverguide/C/mail.xml:766(para)
22732
msgid ""
22733
"You can get the SSL certificate from a Certificate Issuing Authority or you "
22734
"can create self signed SSL certificate. The latter is a good option for "
22735
"email, because SMTP clients rarely complain about \"self-signed "
22736
"certificates\". Please refer to <xref linkend=\"certificates-and-"
22737
"security\"/> for details about how to create self signed SSL certificate. "
22738
"Once you create the certificate, you will have a key file and a certificate "
22739
"file. Please copy them to the location pointed in the "
22740
"<filename>/etc/dovecot/dovecot.conf</filename> configuration file."
22741
msgstr ""
22742
"You can get the SSL certificate from a Certificate Issuing Authority or you "
22743
"can create self signed SSL certificate. The latter is a good option for e-"
22744
"mail, because SMTP clients rarely complain about \"self-signed "
22745
"certificates\". Please refer to <xref linkend=\"certificates-and-"
22746
"security\"/> for details about how to create self signed SSL certificate. "
22747
"Once you create the certificate, you will have a key file and a certificate "
22748
"file. Please copy them to the location pointed in the "
22749
"<filename>/etc/dovecot/dovecot.conf</filename> configuration file."
22750
22751
#: serverguide/C/mail.xml:781(title)
22752
msgid "Firewall Configuration for an Email Server"
22753
msgstr "Firewall Configuration for an E-mail Server"
22754
22755
#: serverguide/C/mail.xml:787(para)
22756
msgid "IMAP - 143"
22757
msgstr "IMAP - 143"
22758
22759
#: serverguide/C/mail.xml:788(para)
22760
msgid "IMAPS - 993"
22761
msgstr "IMAPS - 993"
22762
22763
#: serverguide/C/mail.xml:789(para)
22764
msgid "POP3 - 110"
22765
msgstr "POP3 - 110"
22766
22767
#: serverguide/C/mail.xml:790(para)
22768
msgid "POP3S - 995"
22769
msgstr "POP3S - 995"
22770
22771
#: serverguide/C/mail.xml:782(para)
22772
msgid ""
22773
"To access your mail server from another computer, you must configure your "
22774
"firewall to allow connections to the server on the necessary ports. "
22775
"<placeholder-1/>"
22776
msgstr ""
22777
"To access your mail server from another computer, you must configure your "
22778
"firewall to allow connections to the server on the necessary ports. "
22779
"<placeholder-1/>"
22780
22781
#: serverguide/C/mail.xml:799(para)
22782
msgid ""
22783
"See the <ulink url=\"http://www.dovecot.org/\">Dovecot website</ulink> for "
22784
"more information."
22785
msgstr ""
22786
"See the <ulink url=\"http://www.dovecot.org/\">Dovecot website</ulink> for "
22787
"more information."
22788
22789
#: serverguide/C/mail.xml:804(para)
22790
msgid ""
22791
"Also, the <ulink url=\"https://help.ubuntu.com/community/Dovecot\">Dovecot "
22792
"Ubuntu Wiki</ulink> page has more details."
22793
msgstr ""
22794
22795
#: serverguide/C/mail.xml:813(title) serverguide/C/mail.xml:890(title) serverguide/C/mail.xml:1113(title)
22796
msgid "Mailman"
22797
msgstr "Mailman"
22798
22799
#: serverguide/C/mail.xml:814(para)
22800
msgid ""
22801
"Mailman is an open source program for managing electronic mail discussions "
22802
"and e-newsletter lists. Many open source mailing lists (including all the "
22803
"<ulink url=\"http://lists.ubuntu.com\">Ubuntu mailing lists</ulink>) use "
22804
"Mailman as their mailing list software. It is powerful and easy to install "
22805
"and maintain."
22806
msgstr ""
22807
"Mailman is an open source program for managing electronic mail discussions "
22808
"and e-newsletter lists. Many open source mailing lists (including all the "
22809
"<ulink url=\"http://lists.ubuntu.com\">Ubuntu mailing lists</ulink>) use "
22810
"Mailman as their mailing list software. It is powerful and easy to install "
22811
"and maintain."
22812
22813
#: serverguide/C/mail.xml:824(para)
22814
msgid ""
22815
"Mailman provides a web interface for the administrators and users, using an "
22816
"external mail server to send and receive emails. It works perfectly with the "
22817
"following mail servers:"
22818
msgstr ""
22819
"Mailman provides a web interface for the administrators and users, using an "
22820
"external mail server to send and receive e-mails. It works perfectly with "
22821
"the following mail servers:"
22822
22823
#: serverguide/C/mail.xml:835(application)
22824
msgid "Exim"
22825
msgstr "Exim"
22826
22827
#: serverguide/C/mail.xml:838(application)
22828
msgid "Sendmail"
22829
msgstr "Sendmail"
22830
22831
#: serverguide/C/mail.xml:841(application)
22832
msgid "Qmail"
22833
msgstr "Qmail"
22834
22835
#: serverguide/C/mail.xml:846(para)
22836
msgid ""
22837
"We will see how to install and configure Mailman with, the Apache web "
22838
"server, and either the Postfix or Exim mail server. If you wish to install "
22839
"Mailman with a different mail server, please refer to the references section."
22840
msgstr ""
22841
"We will see how to install and configure Mailman with, the Apache web "
22842
"server, and either the Postfix or Exim mail server. If you wish to install "
22843
"Mailman with a different mail server, please refer to the references section."
22844
22845
#: serverguide/C/mail.xml:853(para)
22846
msgid ""
22847
"You only need to install one mail server and "
22848
"<application>Postfix</application> is the default Ubuntu Mail Transfer Agent."
22849
msgstr ""
22850
"You only need to install one mail server and "
22851
"<application>Postfix</application> is the default Ubuntu Mail Transfer Agent."
22852
22853
#: serverguide/C/mail.xml:858(title) serverguide/C/mail.xml:917(title)
22854
msgid "Apache2"
22855
msgstr "Apache2"
22856
22857
#: serverguide/C/mail.xml:859(para)
22858
msgid ""
22859
"To install apache2 you refer to <ulink url=\"./web-servers.xml#http-"
22860
"installation\">HTTPD Installation</ulink> section for details."
22861
msgstr ""
22862
"To install apache2 you refer to <ulink url=\"./web-servers.xml#http-"
22863
"installation\">HTTPD Installation</ulink> section for details."
22864
22865
#: serverguide/C/mail.xml:867(para)
22866
msgid ""
22867
"For instructions on installing and configuring Postfix refer to <xref "
22868
"linkend=\"postfix\"/>"
22869
msgstr ""
22870
"For instructions on installing and configuring Postfix refer to <xref "
22871
"linkend=\"postfix\"/>"
22872
22873
#: serverguide/C/mail.xml:873(para)
22874
msgid "To install Exim4 refer to <xref linkend=\"exim4\"/>."
22875
msgstr "To install Exim4 refer to <xref linkend=\"exim4\"/>."
22876
22877
#: serverguide/C/mail.xml:884(application)
22878
msgid "dc_use_split_config='true'"
22879
msgstr "dc_use_split_config='true'"
22880
22881
#: serverguide/C/mail.xml:876(para)
22882
msgid ""
22883
"Once exim4 is installed, the configuration files are stored in the "
22884
"<filename>/etc/exim4</filename> directory. In Ubuntu, by default, the exim4 "
22885
"configuration files are split across different files. You can change this "
22886
"behavior by changing the following variable in the "
22887
"<filename>/etc/exim4/update-exim4.conf</filename> file: <placeholder-1/>"
22888
msgstr ""
22889
"Once exim4 is installed, the configuration files are stored in the "
22890
"<filename>/etc/exim4</filename> directory. In Ubuntu, by default, the exim4 "
22891
"configuration files are split across different files. You can change this "
22892
"behaviour by changing the following variable in the "
22893
"<filename>/etc/exim4/update-exim4.conf</filename> file: <placeholder-1/>"
22894
22895
#: serverguide/C/mail.xml:891(para)
22896
msgid ""
22897
"To install <application>Mailman</application>, run following command at a "
22898
"terminal prompt:"
22899
msgstr ""
22900
"To install <application>Mailman</application>, run following command at a "
22901
"terminal prompt:"
22902
22903
#: serverguide/C/mail.xml:895(command)
22904
msgid "sudo apt-get install mailman"
22905
msgstr "sudo apt-get install mailman"
22906
22907
#: serverguide/C/mail.xml:897(para)
22908
msgid ""
22909
"It copies the installation files in "
22910
"<application>/var/lib/mailman</application> directory. It installs the CGI "
22911
"scripts in <application>/usr/lib/cgi-bin/mailman</application> directory. It "
22912
"creates <emphasis>list</emphasis> linux user. It creates the "
22913
"<emphasis>list</emphasis> linux group. The mailman process will be owned by "
22914
"this user."
22915
msgstr ""
22916
"It copies the installation files in "
22917
"<application>/var/lib/mailman</application> directory. It installs the CGI "
22918
"scripts in <application>/usr/lib/cgi-bin/mailman</application> directory. It "
22919
"creates <emphasis>list</emphasis> linux user. It creates the "
22920
"<emphasis>list</emphasis> linux group. The mailman process will be owned by "
22921
"this user."
22922
22923
#: serverguide/C/mail.xml:909(para)
22924
msgid ""
22925
"This section assumes you have successfully installed "
22926
"<application>mailman</application>, <application>apache2</application>, and "
22927
"<application>postfix</application> or <application>exim4</application>. Now "
22928
"you just need to configure them."
22929
msgstr ""
22930
"This section assumes you have successfully installed "
22931
"<application>mailman</application>, <application>apache2</application>, and "
22932
"<application>postfix</application> or <application>exim4</application>. Now "
22933
"you just need to configure them."
22934
22935
#: serverguide/C/mail.xml:918(para)
22936
msgid ""
22937
"An example Apache configuration file comes with "
22938
"<application>Mailman</application> and is placed in "
22939
"<filename>/etc/mailman/apache.conf</filename>. In order for Apache to use "
22940
"the config file it needs to be copied to <filename>/etc/apache2/sites-"
22941
"available</filename>:"
22942
msgstr ""
22943
"An example Apache configuration file comes with "
22944
"<application>Mailman</application> and is placed in "
22945
"<filename>/etc/mailman/apache.conf</filename>. In order for Apache to use "
22946
"the config file it needs to be copied to <filename>/etc/apache2/sites-"
22947
"available</filename>:"
22948
22949
#: serverguide/C/mail.xml:924(command)
22950
msgid ""
22951
"sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf"
22952
msgstr ""
22953
"sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf"
22954
22955
#: serverguide/C/mail.xml:926(para)
22956
msgid ""
22957
"This will setup a new Apache <emphasis>VirtualHost</emphasis> for the "
22958
"Mailman administration site. Now enable the new configuration and restart "
22959
"Apache:"
22960
msgstr ""
22961
"This will setup a new Apache <emphasis>VirtualHost</emphasis> for the "
22962
"Mailman administration site. Now enable the new configuration and restart "
22963
"Apache:"
22964
22965
#: serverguide/C/mail.xml:931(command)
22966
msgid "sudo a2ensite mailman.conf"
22967
msgstr "sudo a2ensite mailman.conf"
22968
22969
#: serverguide/C/mail.xml:934(para)
22970
msgid ""
22971
"Mailman uses apache2 to render its CGI scripts. The mailman CGI scripts are "
22972
"installed in the <application>/usr/lib/cgi-bin/mailman</application> "
22973
"directory. So, the mailman url will be http://hostname/cgi-bin/mailman/. You "
22974
"can make changes to the <filename>/etc/apache2/sites-"
22975
"available/mailman.conf</filename> file if you wish to change this behavior."
22976
msgstr ""
22977
"Mailman uses apache2 to render its CGI scripts. The mailman CGI scripts are "
22978
"installed in the <application>/usr/lib/cgi-bin/mailman</application> "
22979
"directory. So, the mailman url will be http://hostname/cgi-bin/mailman/. You "
22980
"can make changes to the <filename>/etc/apache2/sites-"
22981
"available/mailman.conf</filename> file if you wish to change this behaviour."
22982
22983
#: serverguide/C/mail.xml:945(para)
22984
msgid ""
22985
"For <application>Postfix</application> integration, we will associate the "
22986
"domain lists.example.com with the mailing lists. Please replace "
22987
"<emphasis>lists.example.com</emphasis> with the domain of your choosing."
22988
msgstr ""
22989
"For <application>Postfix</application> integration, we will associate the "
22990
"domain lists.example.com with the mailing lists. Please replace "
22991
"<emphasis>lists.example.com</emphasis> with the domain of your choosing."
22992
22993
#: serverguide/C/mail.xml:949(para)
22994
msgid ""
22995
"You can use the postconf command to add the necessary configuration to "
22996
"<filename>/etc/postfix/main.cf</filename>:"
22997
msgstr ""
22998
"You can use the postconf command to add the necessary configuration to "
22999
"<filename>/etc/postfix/main.cf</filename>:"
23000
23001
#: serverguide/C/mail.xml:953(command)
23002
msgid "sudo postconf -e 'relay_domains = lists.example.com'"
23003
msgstr "sudo postconf -e 'relay_domains = lists.example.com'"
23004
23005
#: serverguide/C/mail.xml:954(command)
23006
msgid "sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'"
23007
msgstr "sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'"
23008
23009
#: serverguide/C/mail.xml:955(command)
23010
msgid "sudo postconf -e 'mailman_destination_recipient_limit = 1'"
23011
msgstr "sudo postconf -e 'mailman_destination_recipient_limit = 1'"
23012
23013
#: serverguide/C/mail.xml:957(para)
23014
msgid ""
23015
"In <filename>/etc/postfix/master.cf</filename> double check that you have "
23016
"the following transport:"
23017
msgstr ""
23018
"In <filename>/etc/postfix/master.cf</filename> double check that you have "
23019
"the following transport:"
23020
23021
#: serverguide/C/mail.xml:960(programlisting)
23022
#, no-wrap
23023
msgid ""
23024
"\n"
23025
"mailman unix - n n - - pipe\n"
23026
" flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py\n"
23027
" ${nexthop} ${user}\n"
23028
msgstr ""
23029
"\n"
23030
"mailman unix - n n - - pipe\n"
23031
" flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py\n"
23032
" ${nexthop} ${user}\n"
23033
23034
#: serverguide/C/mail.xml:965(para)
23035
msgid ""
23036
"It calls the <emphasis>postfix-to-mailman.py</emphasis> script when a mail "
23037
"is delivered to a list."
23038
msgstr ""
23039
"It calls the <emphasis>postfix-to-mailman.py</emphasis> script when a mail "
23040
"is delivered to a list."
23041
23042
#: serverguide/C/mail.xml:968(para)
23043
msgid ""
23044
"Associate the domain lists.example.com to the Mailman transport with the "
23045
"transport map. Edit the file <filename>/etc/postfix/transport</filename>:"
23046
msgstr ""
23047
"Associate the domain lists.example.com to the Mailman transport with the "
23048
"transport map. Edit the file <filename>/etc/postfix/transport</filename>:"
23049
23050
#: serverguide/C/mail.xml:971(programlisting)
23051
#, no-wrap
23052
msgid ""
23053
"\n"
23054
"lists.example.com mailman:\n"
23055
msgstr ""
23056
"\n"
23057
"lists.example.com mailman:\n"
23058
23059
#: serverguide/C/mail.xml:974(para)
23060
msgid ""
23061
"Now have <application>Postfix</application> build the transport map by "
23062
"entering the following from a terminal prompt:"
23063
msgstr ""
23064
"Now have <application>Postfix</application> build the transport map by "
23065
"entering the following from a terminal prompt:"
23066
23067
#: serverguide/C/mail.xml:978(command)
23068
msgid "sudo postmap -v /etc/postfix/transport"
23069
msgstr "sudo postmap -v /etc/postfix/transport"
23070
23071
#: serverguide/C/mail.xml:980(para)
23072
msgid "Then restart Postfix to enable the new configurations:"
23073
msgstr "Then restart Postfix to enable the new configurations:"
23074
23075
#: serverguide/C/mail.xml:989(para)
23076
msgid ""
23077
"Once Exim4 is installed, you can start the Exim server using the following "
23078
"command from a terminal prompt:"
23079
msgstr ""
23080
"Once Exim4 is installed, you can start the Exim server using the following "
23081
"command from a terminal prompt:"
23082
23083
#: serverguide/C/mail.xml:1005(para) serverguide/C/mail.xml:1020(title)
23084
msgid "Main"
23085
msgstr "Main"
23086
23087
#: serverguide/C/mail.xml:1008(para) serverguide/C/mail.xml:1060(title)
23088
msgid "Transport"
23089
msgstr "Transport"
23090
23091
#: serverguide/C/mail.xml:1011(para) serverguide/C/mail.xml:1083(title)
23092
msgid "Router"
23093
msgstr "Router"
23094
23095
#: serverguide/C/mail.xml:996(para)
23096
msgid ""
23097
"In order to make mailman work with Exim4, you need to configure Exim4. As "
23098
"mentioned earlier, by default, Exim4 uses multiple configuration files of "
23099
"different types. For details, please refer to the <ulink "
23100
"url=\"http://www.exim.org\">Exim</ulink> web site. To run mailman, we should "
23101
"add new a configuration file to the following configuration types: "
23102
"<placeholder-1/> Exim creates a master configuration file by sorting all "
23103
"these mini configuration files. So, the order of these configuration files "
23104
"is very important."
23105
msgstr ""
23106
"In order to make mailman work with Exim4, you need to configure Exim4. As "
23107
"mentioned earlier, by default, Exim4 uses multiple configuration files of "
23108
"different types. For details, please refer to the <ulink "
23109
"url=\"http://www.exim.org\">Exim</ulink> web site. To run mailman, we should "
23110
"add new a configuration file to the following configuration types: "
23111
"<placeholder-1/> Exim creates a master configuration file by sorting all "
23112
"these mini configuration files. So, the order of these configuration files "
23113
"is very important."
23114
23115
#: serverguide/C/mail.xml:1027(programlisting)
23116
#, no-wrap
23117
msgid ""
23118
"\n"
23119
"# start\n"
23120
"# Home dir for your Mailman installation -- aka Mailman's prefix\n"
23121
"# directory.\n"
23122
"# On Ubuntu this should be \"/var/lib/mailman\"\n"
23123
"# This is normally the same as ~mailman\n"
23124
"MM_HOME=/var/lib/mailman\n"
23125
"#\n"
23126
"# User and group for Mailman, should match your --with-mail-gid\n"
23127
"# switch to Mailman's configure script. Value is normally \"mailman\"\n"
23128
"MM_UID=list\n"
23129
"MM_GID=list\n"
23130
"#\n"
23131
"# Domains that your lists are in - colon separated list\n"
23132
"# you may wish to add these into local_domains as well\n"
23133
"domainlist mm_domains=hostname.com\n"
23134
"#\n"
23135
"# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n"
23136
"#\n"
23137
"# These values are derived from the ones above and should not need\n"
23138
"# editing unless you have munged your mailman installation\n"
23139
"#\n"
23140
"# The path of the Mailman mail wrapper script\n"
23141
"MM_WRAP=MM_HOME/mail/mailman\n"
23142
"#\n"
23143
"# The path of the list config file (used as a required file when\n"
23144
"# verifying list addresses)\n"
23145
"MM_LISTCHK=MM_HOME/lists/${lc::$local_part}/config.pck\n"
23146
"# end\n"
23147
msgstr ""
23148
"\n"
23149
"# start\n"
23150
"# Home dir for your Mailman installation -- aka Mailman's prefix\n"
23151
"# directory.\n"
23152
"# On Ubuntu this should be \"/var/lib/mailman\"\n"
23153
"# This is normally the same as ~mailman\n"
23154
"MM_HOME=/var/lib/mailman\n"
23155
"#\n"
23156
"# User and group for Mailman, should match your --with-mail-gid\n"
23157
"# switch to Mailman's configure script. Value is normally \"mailman\"\n"
23158
"MM_UID=list\n"
23159
"MM_GID=list\n"
23160
"#\n"
23161
"# Domains that your lists are in - colon separated list\n"
23162
"# you may wish to add these into local_domains as well\n"
23163
"domainlist mm_domains=hostname.com\n"
23164
"#\n"
23165
"# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n"
23166
"#\n"
23167
"# These values are derived from the ones above and should not need\n"
23168
"# editing unless you have munged your mailman installation\n"
23169
"#\n"
23170
"# The path of the Mailman mail wrapper script\n"
23171
"MM_WRAP=MM_HOME/mail/mailman\n"
23172
"#\n"
23173
"# The path of the list config file (used as a required file when\n"
23174
"# verifying list addresses)\n"
23175
"MM_LISTCHK=MM_HOME/lists/${lc::$local_part}/config.pck\n"
23176
"# end\n"
23177
23178
#: serverguide/C/mail.xml:1021(para)
23179
msgid ""
23180
"All the configuration files belonging to the main type are stored in the "
23181
"<filename>/etc/exim4/conf.d/main/</filename> directory. You can add the "
23182
"following content to a new file, named <filename>04_exim4-"
23183
"config_mailman</filename>: <placeholder-1/>"
23184
msgstr ""
23185
"All the configuration files belonging to the main type are stored in the "
23186
"<filename>/etc/exim4/conf.d/main/</filename> directory. You can add the "
23187
"following content to a new file, named <filename>04_exim4-"
23188
"config_mailman</filename>: <placeholder-1/>"
23189
23190
#: serverguide/C/mail.xml:1067(programlisting)
23191
#, no-wrap
23192
msgid ""
23193
"\n"
23194
" mailman_transport:\n"
23195
" driver = pipe\n"
23196
" command = MM_WRAP \\\n"
23197
" '${if def:local_part_suffix \\\n"
23198
" {${sg{$local_part_suffix}{-(\\\\w+)(\\\\+.*)?}{\\$1}}} "
23199
"\\\n"
23200
" {post}}' \\\n"
23201
" $local_part\n"
23202
" current_directory = MM_HOME\n"
23203
" home_directory = MM_HOME\n"
23204
" user = MM_UID\n"
23205
" group = MM_GID\n"
23206
msgstr ""
23207
"\n"
23208
" mailman_transport:\n"
23209
" driver = pipe\n"
23210
" command = MM_WRAP \\\n"
23211
" '${if def:local_part_suffix \\\n"
23212
" {${sg{$local_part_suffix}{-(\\\\w+)(\\\\+.*)?}{\\$1}}} "
23213
"\\\n"
23214
" {post}}' \\\n"
23215
" $local_part\n"
23216
" current_directory = MM_HOME\n"
23217
" home_directory = MM_HOME\n"
23218
" user = MM_UID\n"
23219
" group = MM_GID\n"
23220
23221
#: serverguide/C/mail.xml:1061(para)
23222
msgid ""
23223
"All the configuration files belonging to transport type are stored in the "
23224
"<filename>/etc/exim4/conf.d/transport/</filename> directory. You can add the "
23225
"following content to a new file named <filename> 40_exim4-"
23226
"config_mailman</filename>: <placeholder-1/>"
23227
msgstr ""
23228
"All the configuration files belonging to transport type are stored in the "
23229
"<filename>/etc/exim4/conf.d/transport/</filename> directory. You can add the "
23230
"following content to a new file named <filename> 40_exim4-"
23231
"config_mailman</filename>: <placeholder-1/>"
23232
23233
#: serverguide/C/mail.xml:1088(programlisting)
23234
#, no-wrap
23235
msgid ""
23236
"\n"
23237
" mailman_router:\n"
23238
" driver = accept\n"
23239
" require_files = MM_HOME/lists/$local_part/config.pck\n"
23240
" local_part_suffix_optional\n"
23241
" local_part_suffix = -bounces : -bounces+* : \\\n"
23242
" -confirm+* : -join : -leave : \\\n"
23243
" -owner : -request : -admin\n"
23244
" transport = mailman_transport\n"
23245
msgstr ""
23246
"\n"
23247
" mailman_router:\n"
23248
" driver = accept\n"
23249
" require_files = MM_HOME/lists/$local_part/config.pck\n"
23250
" local_part_suffix_optional\n"
23251
" local_part_suffix = -bounces : -bounces+* : \\\n"
23252
" -confirm+* : -join : -leave : \\\n"
23253
" -owner : -request : -admin\n"
23254
" transport = mailman_transport\n"
23255
23256
#: serverguide/C/mail.xml:1084(para)
23257
msgid ""
23258
"All the configuration files belonging to router type are stored in the "
23259
"<filename>/etc/exim4/conf.d/router/</filename> directory. You can add the "
23260
"following content in to a new file named <filename>101_exim4-"
23261
"config_mailman</filename>: <placeholder-1/>"
23262
msgstr ""
23263
"All the configuration files belonging to router type are stored in the "
23264
"<filename>/etc/exim4/conf.d/router/</filename> directory. You can add the "
23265
"following content in to a new file named <filename>101_exim4-"
23266
"config_mailman</filename>: <placeholder-1/>"
23267
23268
#: serverguide/C/mail.xml:1101(para)
23269
msgid ""
23270
"The order of main and transport configuration files can be in any order. "
23271
"But, the order of router configuration files must be the same. This "
23272
"particular file must appear before the <application>200_exim4-"
23273
"config_primary</application> file. These two configuration files contain "
23274
"same type of information. The first file takes the precedence. For more "
23275
"details, please refer to the references section."
23276
msgstr ""
23277
"The order of main and transport configuration files can be in any order. "
23278
"But, the order of router configuration files must be the same. This "
23279
"particular file must appear before the <application>200_exim4-"
23280
"config_primary</application> file. These two configuration files contain "
23281
"same type of information. The first file takes the precedence. For more "
23282
"details, please refer to the references section."
23283
23284
#: serverguide/C/mail.xml:1114(para)
23285
msgid ""
23286
"Once mailman is installed, you can run it using the following command:"
23287
msgstr ""
23288
"Once mailman is installed, you can run it using the following command:"
23289
23290
#: serverguide/C/mail.xml:1118(command)
23291
msgid "sudo /etc/init.d/mailman start"
23292
msgstr "sudo /etc/init.d/mailman start"
23293
23294
#: serverguide/C/mail.xml:1120(para)
23295
msgid ""
23296
"Once mailman is installed, you should create the default mailing list. Run "
23297
"the following command to create the mailing list:"
23298
msgstr ""
23299
"Once mailman is installed, you should create the default mailing list. Run "
23300
"the following command to create the mailing list:"
23301
23302
#: serverguide/C/mail.xml:1126(command)
23303
msgid "sudo /usr/sbin/newlist mailman"
23304
msgstr "sudo /usr/sbin/newlist mailman"
23305
23306
#: serverguide/C/mail.xml:1129(programlisting)
23307
#, no-wrap
23308
msgid ""
23309
"\n"
23310
" Enter the email address of the person running the list: bhuvan at "
23311
"ubuntu.com\n"
23312
" Initial mailman password:\n"
23313
" To finish creating your mailing list, you must edit your "
23314
"<filename>/etc/aliases</filename> (or\n"
23315
" equivalent) file by adding the following lines, and possibly running the\n"
23316
" `newaliases' program:\n"
23317
"\n"
23318
" ## mailman mailing list\n"
23319
" mailman: \"|/var/lib/mailman/mail/mailman post mailman\"\n"
23320
" mailman-admin: \"|/var/lib/mailman/mail/mailman admin mailman\"\n"
23321
" mailman-bounces: \"|/var/lib/mailman/mail/mailman bounces mailman\"\n"
23322
" mailman-confirm: \"|/var/lib/mailman/mail/mailman confirm mailman\"\n"
23323
" mailman-join: \"|/var/lib/mailman/mail/mailman join mailman\"\n"
23324
" mailman-leave: \"|/var/lib/mailman/mail/mailman leave mailman\"\n"
23325
" mailman-owner: \"|/var/lib/mailman/mail/mailman owner mailman\"\n"
23326
" mailman-request: \"|/var/lib/mailman/mail/mailman request mailman\"\n"
23327
" mailman-subscribe: \"|/var/lib/mailman/mail/mailman subscribe "
23328
"mailman\"\n"
23329
" mailman-unsubscribe: \"|/var/lib/mailman/mail/mailman unsubscribe "
23330
"mailman\"\n"
23331
"\n"
23332
" Hit enter to notify mailman owner...\n"
23333
"\n"
23334
" # \n"
23335
msgstr ""
23336
"\n"
23337
" Enter the e-mail address of the person running the list: bhuvan at "
23338
"ubuntu.com\n"
23339
" Initial mailman password:\n"
23340
" To finish creating your mailing list, you must edit your "
23341
"<filename>/etc/aliases</filename> (or\n"
23342
" equivalent) file by adding the following lines, and possibly running the\n"
23343
" `newaliases' program:\n"
23344
"\n"
23345
" ## mailman mailing list\n"
23346
" mailman: \"|/var/lib/mailman/mail/mailman post mailman\"\n"
23347
" mailman-admin: \"|/var/lib/mailman/mail/mailman admin mailman\"\n"
23348
" mailman-bounces: \"|/var/lib/mailman/mail/mailman bounces mailman\"\n"
23349
" mailman-confirm: \"|/var/lib/mailman/mail/mailman confirm mailman\"\n"
23350
" mailman-join: \"|/var/lib/mailman/mail/mailman join mailman\"\n"
23351
" mailman-leave: \"|/var/lib/mailman/mail/mailman leave mailman\"\n"
23352
" mailman-owner: \"|/var/lib/mailman/mail/mailman owner mailman\"\n"
23353
" mailman-request: \"|/var/lib/mailman/mail/mailman request mailman\"\n"
23354
" mailman-subscribe: \"|/var/lib/mailman/mail/mailman subscribe "
23355
"mailman\"\n"
23356
" mailman-unsubscribe: \"|/var/lib/mailman/mail/mailman unsubscribe "
23357
"mailman\"\n"
23358
"\n"
23359
" Hit enter to notify mailman owner...\n"
23360
"\n"
23361
" # \n"
23362
23363
#: serverguide/C/mail.xml:1152(para)
23364
msgid ""
23365
"We have configured either Postfix or Exim4 to recognize all emails from "
23366
"mailman. So, it is not mandatory to make any new entries in "
23367
"<filename>/etc/aliases</filename>. If you have made any changes to the "
23368
"configuration files, please ensure that you restart those services before "
23369
"continuing to next section."
23370
msgstr ""
23371
"We have configured either Postfix or Exim4 to recognise all e-mails from "
23372
"mailman. So, it is not mandatory to make any new entries in "
23373
"<filename>/etc/aliases</filename>. If you have made any changes to the "
23374
"configuration files, please ensure that you restart those services before "
23375
"continuing to next section."
23376
23377
#: serverguide/C/mail.xml:1160(para)
23378
msgid ""
23379
"The Exim4 does not use the above aliases to forward mails to Mailman, as it "
23380
"uses a <emphasis>discover</emphasis> approach. To suppress the aliases while "
23381
"creating the list, you can add <emphasis>MTA=None</emphasis> line in Mailman "
23382
"configuration file, <filename>/etc/mailman/mm_cfg.py</filename>."
23383
msgstr ""
23384
"The Exim4 does not use the above aliases to forward mails to Mailman, as it "
23385
"uses a <emphasis>discover</emphasis> approach. To suppress the aliases while "
23386
"creating the list, you can add <emphasis>MTA=None</emphasis> line in Mailman "
23387
"configuration file, <filename>/etc/mailman/mm_cfg.py</filename>."
23388
23389
#: serverguide/C/mail.xml:1171(title)
23390
msgid "Administration"
23391
msgstr "Administration"
23392
23393
#: serverguide/C/mail.xml:1172(para)
23394
msgid ""
23395
"We assume you have a default installation. The mailman cgi scripts are still "
23396
"in the <application>/usr/lib/cgi-bin/mailman/</application> directory. "
23397
"Mailman provides a web based administration facility. To access this page, "
23398
"point your browser to the following url:"
23399
msgstr ""
23400
"We assume you have a default installation. The mailman CGI scripts are still "
23401
"in the <application>/usr/lib/cgi-bin/mailman/</application> directory. "
23402
"Mailman provides a Web based administration facility. To access this page, "
23403
"point your browser to the following URL:"
23404
23405
#: serverguide/C/mail.xml:1180(para)
23406
msgid "http://hostname/cgi-bin/mailman/admin"
23407
msgstr "http://hostname/cgi-bin/mailman/admin"
23408
23409
#: serverguide/C/mail.xml:1184(para)
23410
msgid ""
23411
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
23412
"screen. If you click the mailing list name, it will ask for your "
23413
"authentication password. If you enter the correct password, you will be able "
23414
"to change administrative settings of this mailing list. You can create a new "
23415
"mailing list using the command line utility "
23416
"(<command>/usr/sbin/newlist</command>). Alternatively, you can create a new "
23417
"mailing list using the web interface."
23418
msgstr ""
23419
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
23420
"screen. If you click the mailing list name, it will ask for your "
23421
"authentication password. If you enter the correct password, you will be able "
23422
"to change administrative settings of this mailing list. You can create a new "
23423
"mailing list using the command line utility "
23424
"(<command>/usr/sbin/newlist</command>). Alternatively, you can create a new "
23425
"mailing list using the Web interface."
23426
23427
#: serverguide/C/mail.xml:1197(title)
23428
msgid "Users"
23429
msgstr "Users"
23430
23431
#: serverguide/C/mail.xml:1198(para)
23432
msgid ""
23433
"Mailman provides a web based interface for users. To access this page, point "
23434
"your browser to the following url:"
23435
msgstr ""
23436
"Mailman provides a Web based interface for users. To access this page, point "
23437
"your browser to the following URL:"
23438
23439
#: serverguide/C/mail.xml:1203(para)
23440
msgid "http://hostname/cgi-bin/mailman/listinfo"
23441
msgstr "http://hostname/cgi-bin/mailman/listinfo"
23442
23443
#: serverguide/C/mail.xml:1207(para)
23444
msgid ""
23445
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
23446
"screen. If you click the mailing list name, it will display the subscription "
23447
"form. You can enter your email address, name (optional), and password to "
23448
"subscribe. An email invitation will be sent to you. You can follow the "
23449
"instructions in the email to subscribe."
23450
msgstr ""
23451
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
23452
"screen. If you click the mailing list name, it will display the subscription "
23453
"form. You can enter your e-mail address, name (optional), and password to "
23454
"subscribe. An e-mail invitation will be sent to you. You can follow the "
23455
"instructions in the e-mail to subscribe."
23456
23457
#: serverguide/C/mail.xml:1219(ulink)
23458
msgid "GNU Mailman - Installation Manual"
23459
msgstr "GNU Mailman - Installation Manual"
23460
23461
#: serverguide/C/mail.xml:1223(ulink)
23462
msgid "HOWTO - Using Exim 4 and Mailman 2.1 together"
23463
msgstr "HOWTO - Using Exim 4 and Mailman 2.1 together"
23464
23465
#: serverguide/C/mail.xml:1226(para)
23466
msgid ""
23467
"Also, see the <ulink "
23468
"url=\"https://help.ubuntu.com/community/Mailman\">Mailman Ubuntu "
23469
"Wiki</ulink> page."
23470
msgstr ""
23471
23472
#: serverguide/C/mail.xml:1232(title)
23473
msgid "Mail Filtering"
23474
msgstr "Mail Filtering"
23475
23476
#: serverguide/C/mail.xml:1233(para)
23477
msgid ""
23478
"One of the largest issues with email today is the problem of Unsolicited "
23479
"Bulk Email (UBE). Also known as SPAM, such messages may also carry viruses "
23480
"and other forms of malware. According to some reports these messages make up "
23481
"the bulk of all email traffic on the Internet."
23482
msgstr ""
23483
"One of the largest issues with e-mail today is the problem of Unsolicited "
23484
"Bulk E-mail (UBE). Also known as SPAM, such messages may also carry viruses "
23485
"and other forms of malware. According to some reports these messages make up "
23486
"the bulk of all e-mail traffic on the Internet."
23487
23488
#: serverguide/C/mail.xml:1238(para)
23489
msgid ""
23490
"This section will cover integrating <application>Amavisd-new</application>, "
23491
"<application>Spamassassin</application>, and "
23492
"<application>ClamAV</application> with the "
23493
"<application>Postfix</application> Mail Transport Agent (MTA). "
23494
"<application>Postfix</application> can also check email validity by passing "
23495
"it through external content filters. These filters can sometimes determine "
23496
"if a message is spam without needing to process it with more resource "
23497
"intensive applications. Two common filters are "
23498
"<application>opendkim</application> and <application>python-policyd-"
23499
"spf</application>."
23500
msgstr ""
23501
23502
#: serverguide/C/mail.xml:1248(para)
23503
msgid ""
23504
"<application>Amavisd-new</application> is a wrapper program that can call "
23505
"any number of content filtering programs for spam detection, antivirus, etc."
23506
msgstr ""
23507
"<application>Amavisd-new</application> is a wrapper program that can call "
23508
"any number of content filtering programs for spam detection, antivirus, etc."
23509
23510
#: serverguide/C/mail.xml:1254(para)
23511
msgid ""
23512
"<application>Spamassassin</application> uses a variety of mechanisms to "
23513
"filter email based on the message content."
23514
msgstr ""
23515
"<application>Spamassassin</application> uses a variety of mechanisms to "
23516
"filter e-mail based on the message content."
23517
23518
#: serverguide/C/mail.xml:1259(para)
23519
msgid ""
23520
"<application>ClamAV</application> is an open source antivirus application."
23521
msgstr ""
23522
"<application>ClamAV</application> is an open source antivirus application."
23523
23524
#: serverguide/C/mail.xml:1264(para)
23525
msgid ""
23526
"<application>opendkim</application> implements a Sendmail Mail Filter "
23527
"(Milter) for the DomainKeys Identified Mail (DKIM) standard."
23528
msgstr ""
23529
23530
#: serverguide/C/mail.xml:1270(para)
23531
msgid ""
23532
"<application>python-policyd-spf</application> enables Sender Policy "
23533
"Framework (SPF) checking with <application>Postfix</application>."
23534
msgstr ""
23535
"<application>python-policyd-spf</application> enables Sender Policy "
23536
"Framework (SPF) checking with <application>Postfix</application>."
23537
23538
#: serverguide/C/mail.xml:1275(para)
23539
msgid "This is how the pieces fit together:"
23540
msgstr "This is how the pieces fit together:"
23541
23542
#: serverguide/C/mail.xml:1280(para)
23543
msgid "An email message is accepted by <application>Postfix</application>."
23544
msgstr "An e-mail message is accepted by <application>Postfix</application>."
23545
23546
#: serverguide/C/mail.xml:1285(para)
23547
msgid ""
23548
"The message is passed through any external filters "
23549
"<application>opendkim</application> and <application>python-policyd-"
23550
"spf</application> in this case."
23551
msgstr ""
23552
23553
#: serverguide/C/mail.xml:1291(para)
23554
msgid "<application>Amavisd-new</application> then processes the message."
23555
msgstr "<application>Amavisd-new</application> then processes the message."
23556
23557
#: serverguide/C/mail.xml:1296(para)
23558
msgid ""
23559
"<application>ClamAV</application> is used to scan the message. If the "
23560
"message contains a virus <application>Postfix</application> will reject the "
23561
"message."
23562
msgstr ""
23563
"<application>ClamAV</application> is used to scan the message. If the "
23564
"message contains a virus <application>Postfix</application> will reject the "
23565
"message."
23566
23567
#: serverguide/C/mail.xml:1302(para)
23568
msgid ""
23569
"Clean messages will then be analyzed by "
23570
"<application>Spamassassin</application> to find out if the message is spam. "
23571
"<application>Spamassassin</application> will then add X-Header lines "
23572
"allowing <application>Amavisd-new</application> to further manipulate the "
23573
"message."
23574
msgstr ""
23575
"Clean messages will then be analysed by "
23576
"<application>Spamassassin</application> to find out if the message is spam. "
23577
"<application>Spamassassin</application> will then add X-Header lines "
23578
"allowing <application>Amavisd-new</application> to further manipulate the "
23579
"message."
23580
23581
#: serverguide/C/mail.xml:1309(para)
23582
msgid ""
23583
"For example, if a message has a Spam score of over fifty the message could "
23584
"be automatically dropped from the queue without the recipient ever having to "
23585
"be bothered. Another, way to handle flagged messages is to deliver them to "
23586
"the Mail User Agent (MUA) allowing the user to deal with the message as they "
23587
"see fit."
23588
msgstr ""
23589
"For example, if a message has a Spam score of over fifty the message could "
23590
"be automatically dropped from the queue without the recipient ever having to "
23591
"be bothered. Another, way to handle flagged messages is to deliver them to "
23592
"the Mail User Agent (MUA) allowing the user to deal with the message as they "
23593
"see fit."
23594
23595
#: serverguide/C/mail.xml:1316(para)
23596
msgid ""
23597
"See <xref linkend=\"postfix\"/> for instructions on installing and "
23598
"configuring Postfix."
23599
msgstr ""
23600
"See <xref linkend=\"postfix\"/> for instructions on installing and "
23601
"configuring Postfix."
23602
23603
#: serverguide/C/mail.xml:1319(para)
23604
msgid ""
23605
"To install the rest of the applications enter the following from a terminal "
23606
"prompt:"
23607
msgstr ""
23608
"To install the rest of the applications enter the following from a terminal "
23609
"prompt:"
23610
23611
#: serverguide/C/mail.xml:1323(command)
23612
msgid "sudo apt-get install amavisd-new spamassassin clamav-daemon"
23613
msgstr "sudo apt-get install amavisd-new spamassassin clamav-daemon"
23614
23615
#: serverguide/C/mail.xml:1324(command)
23616
msgid "sudo apt-get install opendkim python-policyd-spf"
23617
msgstr ""
23618
23619
#: serverguide/C/mail.xml:1326(para)
23620
msgid ""
23621
"There are some optional packages that integrate with "
23622
"<application>Spamassassin</application> for better spam detection:"
23623
msgstr ""
23624
"There are some optional packages that integrate with "
23625
"<application>Spamassassin</application> for better spam detection:"
23626
23627
#: serverguide/C/mail.xml:1330(command)
23628
msgid "sudo apt-get install pyzor razor"
23629
msgstr "sudo apt-get install pyzor razor"
23630
23631
#: serverguide/C/mail.xml:1332(para)
23632
msgid ""
23633
"Along with the main filtering applications compression utilities are needed "
23634
"to process some email attachments:"
23635
msgstr ""
23636
"Along with the main filtering applications compression utilities are needed "
23637
"to process some e-mail attachments:"
23638
23639
#: serverguide/C/mail.xml:1336(command)
23640
msgid ""
23641
"sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip zip"
23642
msgstr ""
23643
"sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip zip"
23644
23645
#: serverguide/C/mail.xml:1339(para)
23646
msgid ""
23647
"If some packages are not found, check that the "
23648
"<emphasis>multiverse</emphasis> repository is enabled in "
23649
"<filename>/etc/apt/sources.list</filename>"
23650
msgstr ""
23651
23652
#: serverguide/C/mail.xml:1340(para)
23653
msgid ""
23654
"If you make changes to the file, be sure to run <command>sudo apt-get "
23655
"update</command> before trying to install again."
23656
msgstr ""
23657
23658
#: serverguide/C/mail.xml:1345(para)
23659
msgid "Now configure everything to work together and filter email."
23660
msgstr "Now configure everything to work together and filter e-mail."
23661
23662
#: serverguide/C/mail.xml:1349(title)
23663
msgid "ClamAV"
23664
msgstr "ClamAV"
23665
23666
#: serverguide/C/mail.xml:1350(para)
23667
msgid ""
23668
"The default behaviour of <application>ClamAV</application> will fit our "
23669
"needs. For more ClamAV configuration options, check the configuration files "
23670
"in <filename>/etc/clamav</filename>."
23671
msgstr ""
23672
"The default behaviour of <application>ClamAV</application> will fit our "
23673
"needs. For more ClamAV configuration options, check the configuration files "
23674
"in <filename>/etc/clamav</filename>."
23675
23676
#: serverguide/C/mail.xml:1355(para)
23677
msgid ""
23678
"Add the <emphasis>clamav</emphasis> user to the <emphasis>amavis</emphasis> "
23679
"group in order for <application>Amavisd-new</application> to have the "
23680
"appropriate access to scan files:"
23681
msgstr ""
23682
"Add the <emphasis>clamav</emphasis> user to the <emphasis>amavis</emphasis> "
23683
"group in order for <application>Amavisd-new</application> to have the "
23684
"appropriate access to scan files:"
23685
23686
#: serverguide/C/mail.xml:1360(command)
23687
msgid "sudo adduser clamav amavis"
23688
msgstr "sudo adduser clamav amavis"
23689
23690
#: serverguide/C/mail.xml:1364(title)
23691
msgid "Spamassassin"
23692
msgstr "Spamassassin"
23693
23694
#: serverguide/C/mail.xml:1365(para)
23695
msgid ""
23696
"Spamassassin automatically detects optional components and will use them if "
23697
"they are present. This means that there is no need to configure "
23698
"<application>pyzor</application> and <application>razor</application>."
23699
msgstr ""
23700
"Spamassassin automatically detects optional components and will use them if "
23701
"they are present. This means that there is no need to configure "
23702
"<application>pyzor</application> and <application>razor</application>."
23703
23704
#: serverguide/C/mail.xml:1369(para)
23705
msgid ""
23706
"Edit <filename>/etc/default/spamassassin</filename> to activate the "
23707
"<application>Spamassassin</application> daemon. Change "
23708
"<emphasis>ENABLED=0</emphasis> to:"
23709
msgstr ""
23710
"Edit <filename>/etc/default/spamassassin</filename> to activate the "
23711
"<application>Spamassassin</application> daemon. Change "
23712
"<emphasis>ENABLED=0</emphasis> to:"
23713
23714
#: serverguide/C/mail.xml:1373(programlisting)
23715
#, no-wrap
23716
msgid ""
23717
"\n"
23718
"ENABLED=1\n"
23719
msgstr ""
23720
"\n"
23721
"ENABLED=1\n"
23722
23723
#: serverguide/C/mail.xml:1376(para)
23724
msgid "Now start the daemon:"
23725
msgstr "Now start the daemon:"
23726
23727
#: serverguide/C/mail.xml:1380(command)
23728
msgid "sudo /etc/init.d/spamassassin start"
23729
msgstr "sudo /etc/init.d/spamassassin start"
23730
23731
#: serverguide/C/mail.xml:1384(title)
23732
msgid "Amavisd-new"
23733
msgstr "Amavisd-new"
23734
23735
#: serverguide/C/mail.xml:1385(para)
23736
msgid ""
23737
"First activate spam and antivirus detection in <application>Amavisd-"
23738
"new</application> by editing <filename>/etc/amavis/conf.d/15-"
23739
"content_filter_mode</filename>:"
23740
msgstr ""
23741
"First activate spam and antivirus detection in <application>Amavisd-"
23742
"new</application> by editing <filename>/etc/amavis/conf.d/15-"
23743
"content_filter_mode</filename>:"
23744
23745
#: serverguide/C/mail.xml:1389(programlisting)
23746
#, no-wrap
23747
msgid ""
23748
"\n"
23749
"use strict;\n"
23750
"\n"
23751
"# You can modify this file to re-enable SPAM checking through spamassassin\n"
23752
"# and to re-enable antivirus checking.\n"
23753
"\n"
23754
"#\n"
23755
"# Default antivirus checking mode\n"
23756
"# Uncomment the two lines below to enable it\n"
23757
"#\n"
23758
"\n"
23759
"@bypass_virus_checks_maps = (\n"
23760
" \\%bypass_virus_checks, \\@bypass_virus_checks_acl, \\"
23761
"$bypass_virus_checks_re);\n"
23762
"\n"
23763
"\n"
23764
"#\n"
23765
"# Default SPAM checking mode\n"
23766
"# Uncomment the two lines below to enable it\n"
23767
"#\n"
23768
"\n"
23769
"@bypass_spam_checks_maps = (\n"
23770
" \\%bypass_spam_checks, \\@bypass_spam_checks_acl, \\"
23771
"$bypass_spam_checks_re);\n"
23772
"\n"
23773
"1; # insure a defined return\n"
23774
msgstr ""
23775
"\n"
23776
"use strict;\n"
23777
"\n"
23778
"# You can modify this file to re-enable SPAM checking through spamassassin\n"
23779
"# and to re-enable antivirus checking.\n"
23780
"\n"
23781
"#\n"
23782
"# Default antivirus checking mode\n"
23783
"# Uncomment the two lines below to enable it\n"
23784
"#\n"
23785
"\n"
23786
"@bypass_virus_checks_maps = (\n"
23787
" \\%bypass_virus_checks, \\@bypass_virus_checks_acl, \\"
23788
"$bypass_virus_checks_re);\n"
23789
"\n"
23790
"\n"
23791
"#\n"
23792
"# Default SPAM checking mode\n"
23793
"# Uncomment the two lines below to enable it\n"
23794
"#\n"
23795
"\n"
23796
"@bypass_spam_checks_maps = (\n"
23797
" \\%bypass_spam_checks, \\@bypass_spam_checks_acl, \\"
23798
"$bypass_spam_checks_re);\n"
23799
"\n"
23800
"1; # insure a defined return\n"
23801
23802
#: serverguide/C/mail.xml:1414(para)
23803
msgid ""
23804
"Bouncing spam can be a bad idea as the return address is often faked. "
23805
"Consider editing <filename>/etc/amavis/conf.d/20-debian_defaults</filename> "
23806
"to set <emphasis>$final_spam_destiny</emphasis> to D_DISCARD rather than "
23807
"D_BOUNCE, as follows:"
23808
msgstr ""
23809
"Bouncing spam can be a bad idea as the return address is often faked. "
23810
"Consider editing <filename>/etc/amavis/conf.d/20-debian_defaults</filename> "
23811
"to set <emphasis>$final_spam_destiny</emphasis> to D_DISCARD rather than "
23812
"D_BOUNCE, as follows:"
23813
23814
#: serverguide/C/mail.xml:1420(programlisting)
23815
#, no-wrap
23816
msgid ""
23817
"\n"
23818
"$final_spam_destiny = D_DISCARD;\n"
23819
msgstr ""
23820
"\n"
23821
"$final_spam_destiny = D_DISCARD;\n"
23822
23823
#: serverguide/C/mail.xml:1424(para)
23824
msgid ""
23825
"Additionally, you may want to adjust the following options to flag more "
23826
"messages as spam:"
23827
msgstr ""
23828
"Additionally, you may want to adjust the following options to flag more "
23829
"messages as spam:"
23830
23831
#: serverguide/C/mail.xml:1428(programlisting)
23832
#, no-wrap
23833
msgid ""
23834
"\n"
23835
"$sa_tag_level_deflt = -999; # add spam info headers if at, or above that "
23836
"level\n"
23837
"$sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level\n"
23838
"$sa_kill_level_deflt = 21.0; # triggers spam evasive actions\n"
23839
"$sa_dsn_cutoff_level = 4; # spam level beyond which a DSN is not sent\n"
23840
msgstr ""
23841
"\n"
23842
"$sa_tag_level_deflt = -999; # add spam info headers if at, or above that "
23843
"level\n"
23844
"$sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level\n"
23845
"$sa_kill_level_deflt = 21.0; # triggers spam evasive actions\n"
23846
"$sa_dsn_cutoff_level = 4; # spam level beyond which a DSN is not sent\n"
23847
23848
#: serverguide/C/mail.xml:1435(para)
23849
msgid ""
23850
"If the server's <emphasis>hostname</emphasis> is different from the domain's "
23851
"MX record you may need to manually set the <emphasis>$myhostname</emphasis> "
23852
"option. Also, if the server receives mail for multiple domains the "
23853
"<emphasis>@local_domains_acl</emphasis> option will need to be customized. "
23854
"Edit the <filename>/etc/amavis/conf.d/50-user</filename> file:"
23855
msgstr ""
23856
"If the server's <emphasis>hostname</emphasis> is different from the domain's "
23857
"MX record you may need to manually set the <emphasis>$myhostname</emphasis> "
23858
"option. Also, if the server receives mail for multiple domains the "
23859
"<emphasis>@local_domains_acl</emphasis> option will need to be customised. "
23860
"Edit the <filename>/etc/amavis/conf.d/50-user</filename> file:"
23861
23862
#: serverguide/C/mail.xml:1442(programlisting)
23863
#, no-wrap
23864
msgid ""
23865
"\n"
23866
"$myhostname = 'mail.example.com';\n"
23867
"@local_domains_acl = ( \"example.com\", \"example.org\" );\n"
23868
msgstr ""
23869
"\n"
23870
"$myhostname = 'mail.example.com';\n"
23871
"@local_domains_acl = ( \"example.com\", \"example.org\" );\n"
23872
23873
#: serverguide/C/mail.xml:1447(para)
23874
msgid ""
23875
"After configuration <application>Amavisd-new</application> needs to be "
23876
"restarted:"
23877
msgstr ""
23878
"After configuration <application>Amavisd-new</application> needs to be "
23879
"restarted:"
23880
23881
#: serverguide/C/mail.xml:1451(command) serverguide/C/mail.xml:1497(command)
23882
msgid "sudo /etc/init.d/amavis restart"
23883
msgstr "sudo /etc/init.d/amavis restart"
23884
23885
#: serverguide/C/mail.xml:1454(title)
23886
msgid "DKIM Whitelist"
23887
msgstr "DKIM Whitelist"
23888
23889
#: serverguide/C/mail.xml:1456(para)
23890
msgid ""
23891
"<application>Amavisd-new</application> can be configured to automatically "
23892
"<emphasis>Whitelist</emphasis> addresses from domains with valid Domain "
23893
"Keys. There are some pre-configured domains in the "
23894
"<filename>/etc/amavis/conf.d/40-policy_banks</filename>."
23895
msgstr ""
23896
"<application>Amavisd-new</application> can be configured to automatically "
23897
"<emphasis>Whitelist</emphasis> addresses from domains with valid Domain "
23898
"Keys. There are some pre-configured domains in the "
23899
"<filename>/etc/amavis/conf.d/40-policy_banks</filename>."
23900
23901
#: serverguide/C/mail.xml:1462(para)
23902
msgid "There are multiple ways to configure the Whitelist for a domain:"
23903
msgstr "There are multiple ways to configure the Whitelist for a domain:"
23904
23905
#: serverguide/C/mail.xml:1468(para)
23906
msgid ""
23907
"<emphasis>'example.com' => 'WHITELIST',</emphasis>: will whitelist any "
23908
"address from the \"example.com\" domain."
23909
msgstr ""
23910
"<emphasis>'example.com' => 'WHITELIST',</emphasis>: will whitelist any "
23911
"address from the \"example.com\" domain."
23912
23913
#: serverguide/C/mail.xml:1473(para)
23914
msgid ""
23915
"<emphasis>'.example.com' => 'WHITELIST',</emphasis>: will whitelist any "
23916
"address from any <emphasis>subdomains</emphasis> of \"example.com\" that "
23917
"have a valid signature."
23918
msgstr ""
23919
"<emphasis>'.example.com' => 'WHITELIST',</emphasis>: will whitelist any "
23920
"address from any <emphasis>subdomains</emphasis> of \"example.com\" that "
23921
"have a valid signature."
23922
23923
#: serverguide/C/mail.xml:1479(para)
23924
msgid ""
23925
"<emphasis>'.example.com/@example.com' => 'WHITELIST',</emphasis>: will "
23926
"whitelist subdomains of \"example.com\" that use the signature of <emphasis "
23927
"role=\"italic\">example.com</emphasis> the parent domain."
23928
msgstr ""
23929
"<emphasis>'.example.com/@example.com' => 'WHITELIST',</emphasis>: will "
23930
"whitelist subdomains of \"example.com\" that use the signature of <emphasis "
23931
"role=\"italic\">example.com</emphasis> the parent domain."
23932
23933
#: serverguide/C/mail.xml:1485(para)
23934
msgid ""
23935
"<emphasis>'./@example.com' => 'WHITELIST',</emphasis>: adds addresses "
23936
"that have a valid signature from \"example.com\". This is usually used for "
23937
"discussion groups that sign their messages."
23938
msgstr ""
23939
23940
#: serverguide/C/mail.xml:1492(para)
23941
msgid ""
23942
"A domain can also have multiple Whitelist configurations. After, editing the "
23943
"file restart <application>amaisd-new</application>:"
23944
msgstr ""
23945
"A domain can also have multiple Whitelist configurations. After, editing the "
23946
"file restart <application>amaisd-new</application>:"
23947
23948
#: serverguide/C/mail.xml:1501(para)
23949
msgid ""
23950
"In this context, once a domain has been added to the Whitelist the message "
23951
"will not receive any anti-virus or spam filtering. This may or may not be "
23952
"the intended behavior you wish for a domain."
23953
msgstr ""
23954
"In this context, once a domain has been added to the Whitelist the message "
23955
"will not receive any anti-virus or spam filtering. This may or may not be "
23956
"the intended behaviour you wish for a domain."
23957
23958
#: serverguide/C/mail.xml:1511(para)
23959
msgid ""
23960
"For <application>Postfix</application> integration, enter the following from "
23961
"a terminal prompt:"
23962
msgstr ""
23963
"For <application>Postfix</application> integration, enter the following from "
23964
"a terminal prompt:"
23965
23966
#: serverguide/C/mail.xml:1515(command)
23967
msgid "sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'"
23968
msgstr "sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'"
23969
23970
#: serverguide/C/mail.xml:1517(para)
23971
msgid ""
23972
"Next edit <filename>/etc/postfix/master.cf</filename> and add the following "
23973
"to the end of the file:"
23974
msgstr ""
23975
"Next edit <filename>/etc/postfix/master.cf</filename> and add the following "
23976
"to the end of the file:"
23977
23978
#: serverguide/C/mail.xml:1520(programlisting)
23979
#, no-wrap
23980
msgid ""
23981
"\n"
23982
"smtp-amavis unix - - - - 2 smtp\n"
23983
" -o smtp_data_done_timeout=1200\n"
23984
" -o smtp_send_xforward_command=yes\n"
23985
" -o disable_dns_lookups=yes\n"
23986
" -o max_use=20\n"
23987
"\n"
23988
"127.0.0.1:10025 inet n - - - - smtpd\n"
23989
" -o content_filter=\n"
23990
" -o local_recipient_maps=\n"
23991
" -o relay_recipient_maps=\n"
23992
" -o smtpd_restriction_classes=\n"
23993
" -o smtpd_delay_reject=no\n"
23994
" -o smtpd_client_restrictions=permit_mynetworks,reject\n"
23995
" -o smtpd_helo_restrictions=\n"
23996
" -o smtpd_sender_restrictions=\n"
23997
" -o smtpd_recipient_restrictions=permit_mynetworks,reject\n"
23998
" -o smtpd_data_restrictions=reject_unauth_pipelining\n"
23999
" -o smtpd_end_of_data_restrictions=\n"
24000
" -o mynetworks=127.0.0.0/8\n"
24001
" -o smtpd_error_sleep_time=0\n"
24002
" -o smtpd_soft_error_limit=1001\n"
24003
" -o smtpd_hard_error_limit=1000\n"
24004
" -o smtpd_client_connection_count_limit=0\n"
24005
" -o smtpd_client_connection_rate_limit=0\n"
24006
" -o "
24007
"receive_override_options=no_header_body_checks,no_unknown_recipient_checks\n"
24008
msgstr ""
24009
"\n"
24010
"smtp-amavis unix - - - - 2 smtp\n"
24011
" -o smtp_data_done_timeout=1200\n"
24012
" -o smtp_send_xforward_command=yes\n"
24013
" -o disable_dns_lookups=yes\n"
24014
" -o max_use=20\n"
24015
"\n"
24016
"127.0.0.1:10025 inet n - - - - smtpd\n"
24017
" -o content_filter=\n"
24018
" -o local_recipient_maps=\n"
24019
" -o relay_recipient_maps=\n"
24020
" -o smtpd_restriction_classes=\n"
24021
" -o smtpd_delay_reject=no\n"
24022
" -o smtpd_client_restrictions=permit_mynetworks,reject\n"
24023
" -o smtpd_helo_restrictions=\n"
24024
" -o smtpd_sender_restrictions=\n"
24025
" -o smtpd_recipient_restrictions=permit_mynetworks,reject\n"
24026
" -o smtpd_data_restrictions=reject_unauth_pipelining\n"
24027
" -o smtpd_end_of_data_restrictions=\n"
24028
" -o mynetworks=127.0.0.0/8\n"
24029
" -o smtpd_error_sleep_time=0\n"
24030
" -o smtpd_soft_error_limit=1001\n"
24031
" -o smtpd_hard_error_limit=1000\n"
24032
" -o smtpd_client_connection_count_limit=0\n"
24033
" -o smtpd_client_connection_rate_limit=0\n"
24034
" -o "
24035
"receive_override_options=no_header_body_checks,no_unknown_recipient_checks\n"
24036
24037
#: serverguide/C/mail.xml:1547(para)
24038
msgid ""
24039
"Also add the following two lines immediately below the "
24040
"<emphasis>\"pickup\"</emphasis> transport service:"
24041
msgstr ""
24042
"Also add the following two lines immediately below the "
24043
"<emphasis>\"pickup\"</emphasis> transport service:"
24044
24045
#: serverguide/C/mail.xml:1550(programlisting)
24046
#, no-wrap
24047
msgid ""
24048
"\n"
24049
" -o content_filter=\n"
24050
" -o receive_override_options=no_header_body_checks\n"
24051
msgstr ""
24052
"\n"
24053
" -o content_filter=\n"
24054
" -o receive_override_options=no_header_body_checks\n"
24055
24056
#: serverguide/C/mail.xml:1554(para)
24057
msgid ""
24058
"This will prevent messages that are generated to report on spam from being "
24059
"classified as spam."
24060
msgstr ""
24061
"This will prevent messages that are generated to report on spam from being "
24062
"classified as spam."
24063
24064
#: serverguide/C/mail.xml:1557(para)
24065
msgid "Now restart <application>Postfix</application>:"
24066
msgstr "Now restart <application>Postfix</application>:"
24067
24068
#: serverguide/C/mail.xml:1563(para)
24069
msgid "Content filtering with spam and virus detection is now enabled."
24070
msgstr "Content filtering with spam and virus detection is now enabled."
24071
24072
#: serverguide/C/mail.xml:1569(title)
24073
msgid "Amavisd-new and Spamassassin"
24074
msgstr ""
24075
24076
#: serverguide/C/mail.xml:1571(para)
24077
msgid ""
24078
"When integrating <application>Amavisd-new</application> with "
24079
"<application>Spamassassin</application>, if you choose to disable the bayes "
24080
"filtering by editing <filename>/etc/spamassassin/local.cf</filename> and use "
24081
"<application>cron</application> to update the nightly rules, the result can "
24082
"cause a situation where a large amount of error messages are sent to the "
24083
"<emphasis>amavis</emphasis> user via the amavisd-new "
24084
"<application>cron</application> job."
24085
msgstr ""
24086
24087
#: serverguide/C/mail.xml:1578(para)
24088
msgid "There are several ways to handle this situation:"
24089
msgstr ""
24090
24091
#: serverguide/C/mail.xml:1584(para)
24092
msgid "Configure your MDA to filter messages you do not wish to see."
24093
msgstr ""
24094
24095
#: serverguide/C/mail.xml:1589(para)
24096
msgid ""
24097
"Change <filename>/usr/sbin/amavisd-new-cronjob</filename> to check for "
24098
"<emphasis>use_bayes 0</emphasis>. For example, edit "
24099
"<filename>/usr/sbin/amavisd-new-cronjob</filename> and add the following to "
24100
"the top before the <emphasis>test</emphasis> statements:"
24101
msgstr ""
24102
24103
#: serverguide/C/mail.xml:1593(programlisting)
24104
#, no-wrap
24105
msgid ""
24106
"\n"
24107
"egrep -q \"^[ \\t]*use_bayes[ \\t]*0\" /etc/spamassassin/local.cf && "
24108
"exit 0\n"
24109
msgstr ""
24110
24111
#: serverguide/C/mail.xml:1603(para)
24112
msgid ""
24113
"First, test that the <application>Amavisd-new</application> SMTP is "
24114
"listening:"
24115
msgstr ""
24116
"First, test that the <application>Amavisd-new</application> SMTP is "
24117
"listening:"
24118
24119
#: serverguide/C/mail.xml:1606(programlisting)
24120
#, no-wrap
24121
msgid ""
24122
"\n"
24123
"telnet localhost 10024\n"
24124
"Trying 127.0.0.1...\n"
24125
"Connected to localhost.\n"
24126
"Escape character is '^]'.\n"
24127
"220 [127.0.0.1] ESMTP amavisd-new service ready\n"
24128
"^]\n"
24129
msgstr ""
24130
"\n"
24131
"telnet localhost 10024\n"
24132
"Trying 127.0.0.1...\n"
24133
"Connected to localhost.\n"
24134
"Escape character is '^]'.\n"
24135
"220 [127.0.0.1] ESMTP amavisd-new service ready\n"
24136
"^]\n"
24137
24138
#: serverguide/C/mail.xml:1614(para)
24139
msgid ""
24140
"In the Header of messages that go through the content filter you should see:"
24141
msgstr ""
24142
"In the Header of messages that go through the content filter you should see:"
24143
24144
#: serverguide/C/mail.xml:1617(programlisting)
24145
#, no-wrap
24146
msgid ""
24147
"\n"
24148
"X-Spam-Level: \n"
24149
"X-Virus-Scanned: Debian amavisd-new at example.com\n"
24150
"X-Spam-Status: No, hits=-2.3 tagged_above=-1000.0 required=5.0 tests=AWL, "
24151
"BAYES_00\n"
24152
"X-Spam-Level: \n"
24153
msgstr ""
24154
"\n"
24155
"X-Spam-Level: \n"
24156
"X-Virus-Scanned: Debian amavisd-new at example.com\n"
24157
"X-Spam-Status: No, hits=-2.3 tagged_above=-1000.0 required=5.0 tests=AWL, "
24158
"BAYES_00\n"
24159
"X-Spam-Level: \n"
24160
24161
#: serverguide/C/mail.xml:1624(para)
24162
msgid ""
24163
"Your output will vary, but the important thing is that there are <emphasis>X-"
24164
"Virus-Scanned</emphasis> and <emphasis>X-Spam-Status</emphasis> entries."
24165
msgstr ""
24166
"Your output will vary, but the important thing is that there are <emphasis>X-"
24167
"Virus-Scanned</emphasis> and <emphasis>X-Spam-Status</emphasis> entries."
24168
24169
#: serverguide/C/mail.xml:1632(para)
24170
msgid ""
24171
"The best way to figure out why something is going wrong is to check the log "
24172
"files."
24173
msgstr ""
24174
"The best way to figure out why something is going wrong is to check the log "
24175
"files."
24176
24177
#: serverguide/C/mail.xml:1637(para)
24178
msgid ""
24179
"For instructions on <application>Postfix</application> logging see the <xref "
24180
"linkend=\"postfix-troubleshooting\"/> section."
24181
msgstr ""
24182
"For instructions on <application>Postfix</application> logging see the <xref "
24183
"linkend=\"postfix-troubleshooting\"/> section."
24184
24185
#: serverguide/C/mail.xml:1643(para)
24186
msgid ""
24187
"<application>Amavisd-new</application> uses "
24188
"<application>Syslog</application> to send messages to "
24189
"<filename>/var/log/mail.log</filename>. The amount of detail can be "
24190
"increased by adding the <emphasis>$log_level</emphasis> option to "
24191
"<filename>/etc/amavis/conf.d/50-user</filename>, and setting the value from "
24192
"1 to 5."
24193
msgstr ""
24194
"<application>Amavisd-new</application> uses "
24195
"<application>Syslog</application> to send messages to "
24196
"<filename>/var/log/mail.log</filename>. The amount of detail can be "
24197
"increased by adding the <emphasis>$log_level</emphasis> option to "
24198
"<filename>/etc/amavis/conf.d/50-user</filename>, and setting the value from "
24199
"1 to 5."
24200
24201
#: serverguide/C/mail.xml:1648(programlisting)
24202
#, no-wrap
24203
msgid ""
24204
"\n"
24205
"$log_level = 2;\n"
24206
msgstr ""
24207
"\n"
24208
"$log_level = 2;\n"
24209
24210
#: serverguide/C/mail.xml:1652(para)
24211
msgid ""
24212
"When the <application>Amavisd-new</application> log output is increased "
24213
"<application>Spamassassin</application> log output is also increased."
24214
msgstr ""
24215
"When the <application>Amavisd-new</application> log output is increased "
24216
"<application>Spamassassin</application> log output is also increased."
24217
24218
#: serverguide/C/mail.xml:1659(para)
24219
msgid ""
24220
"The <application>ClamAV</application> log level can be increased by editing "
24221
"<filename>/etc/clamav/clamd.conf</filename> and setting the following option:"
24222
msgstr ""
24223
"The <application>ClamAV</application> log level can be increased by editing "
24224
"<filename>/etc/clamav/clamd.conf</filename> and setting the following option:"
24225
24226
#: serverguide/C/mail.xml:1663(programlisting)
24227
#, no-wrap
24228
msgid ""
24229
"\n"
24230
"LogVerbose true\n"
24231
msgstr ""
24232
"\n"
24233
"LogVerbose true\n"
24234
24235
#: serverguide/C/mail.xml:1666(para)
24236
msgid ""
24237
"By default <application>ClamAV</application> will send log messages to "
24238
"<filename>/var/log/clamav/clamav.log</filename>."
24239
msgstr ""
24240
"By default <application>ClamAV</application> will send log messages to "
24241
"<filename>/var/log/clamav/clamav.log</filename>."
24242
24243
#: serverguide/C/mail.xml:1672(para)
24244
msgid ""
24245
"After changing an applications log settings remember to restart the service "
24246
"for the new settings to take affect. Also, once the issue you are "
24247
"troubleshooting is resolved it is a good idea to change the log settings "
24248
"back to normal."
24249
msgstr ""
24250
"After changing an applications log settings remember to restart the service "
24251
"for the new settings to take affect. Also, once the issue you are "
24252
"troubleshooting is resolved it is a good idea to change the log settings "
24253
"back to normal."
24254
24255
#: serverguide/C/mail.xml:1680(para)
24256
msgid "For more information on filtering mail see the following links:"
24257
msgstr "For more information on filtering mail see the following links:"
24258
24259
#: serverguide/C/mail.xml:1686(ulink)
24260
msgid "Amavisd-new Documentation"
24261
msgstr "Amavisd-new Documentation"
24262
24263
#: serverguide/C/mail.xml:1690(para)
24264
msgid ""
24265
"<ulink url=\"http://www.clamav.org/doc/latest/html/\">ClamAV "
24266
"Documentation</ulink> and <ulink "
24267
"url=\"http://wiki.clamav.net/Main/WebHome\">ClamAV Wiki</ulink>"
24268
msgstr ""
24269
"<ulink url=\"http://www.clamav.org/doc/latest/html/\">ClamAV "
24270
"Documentation</ulink> and <ulink "
24271
"url=\"http://wiki.clamav.net/Main/WebHome\">ClamAV Wiki</ulink>"
24272
24273
#: serverguide/C/mail.xml:1697(ulink)
24274
msgid "Spamassassin Wiki"
24275
msgstr "Spamassassin Wiki"
24276
24277
#: serverguide/C/mail.xml:1702(ulink)
24278
msgid "Pyzor Homepage"
24279
msgstr "Pyzor Homepage"
24280
24281
#: serverguide/C/mail.xml:1707(ulink)
24282
msgid "Razor Homepage"
24283
msgstr "Razor Homepage"
24284
24285
#: serverguide/C/mail.xml:1712(ulink)
24286
msgid "DKIM.org"
24287
msgstr "DKIM.org"
24288
24289
#: serverguide/C/mail.xml:1717(ulink)
24290
msgid "Postfix Amavis New"
24291
msgstr ""
24292
24293
#: serverguide/C/mail.xml:1721(para)
24294
msgid ""
24295
"Also, feel free to ask questions in the <emphasis>#ubuntu-server</emphasis> "
24296
"IRC channel on <ulink url=\"http://freenode.net\">freenode</ulink>."
24297
msgstr ""
24298
"Also, feel free to ask questions in the <emphasis>#ubuntu-server</emphasis> "
24299
"IRC channel on <ulink url=\"http://freenode.net\">freenode</ulink>."
24300
24301
#: serverguide/C/lamp-applications.xml:13(title)
24302
msgid "LAMP Applications"
24303
msgstr "LAMP Applications"
24304
24305
#: serverguide/C/lamp-applications.xml:19(para)
24306
msgid ""
24307
"LAMP installations (Linux + Apache + MySQL + PHP) are a popular setup for "
24308
"Ubuntu servers. There is a plethora of Open Source applications written "
24309
"using the LAMP application stack. Some popular LAMP applications are Wiki's, "
24310
"Content Management Systems, and Management Software such as phpMyAdmin."
24311
msgstr ""
24312
"LAMP installations (Linux + Apache + MySQL + PHP) are a popular setup for "
24313
"Ubuntu servers. There is a plethora of Open Source applications written "
24314
"using the LAMP application stack. Some popular LAMP applications are Wiki's, "
24315
"Content Management Systems, and Management Software such as phpMyAdmin."
24316
24317
#: serverguide/C/lamp-applications.xml:26(para)
24318
msgid ""
24319
"One advantage of LAMP is the substantial flexibility for different database, "
24320
"web server, and scripting languages. Popular substitutes for MySQL include "
24321
"Posgresql and SQLite. Python, Perl, and Ruby are also frequently used "
24322
"instead of PHP."
24323
msgstr ""
24324
"One advantage of LAMP is the substantial flexibility for different database, "
24325
"web server, and scripting languages. Popular substitutes for MySQL include "
24326
"Posgresql and SQLite. Python, Perl, and Ruby are also frequently used "
24327
"instead of PHP."
24328
24329
#: serverguide/C/lamp-applications.xml:32(para)
24330
msgid ""
24331
"The traditional way to install most <emphasis>LAMP</emphasis> applications "
24332
"is:"
24333
msgstr ""
24334
"The traditional way to install most <emphasis>LAMP</emphasis> applications "
24335
"is:"
24336
24337
#: serverguide/C/lamp-applications.xml:38(para)
24338
msgid "Download an archive containing the application source files."
24339
msgstr "Download an archive containing the application source files."
24340
24341
#: serverguide/C/lamp-applications.xml:43(para)
24342
msgid ""
24343
"Unpack the archive, usually in a directory accessible to a web server."
24344
msgstr ""
24345
"Unpack the archive, usually in a directory accessible to a web server."
24346
24347
#: serverguide/C/lamp-applications.xml:48(para)
24348
msgid ""
24349
"Depending on where the source was extracted, configure a web server to serve "
24350
"the files."
24351
msgstr ""
24352
24353
#: serverguide/C/lamp-applications.xml:53(para)
24354
msgid "Configure the application to connect to the database."
24355
msgstr "Configure the application to connect to the database."
24356
24357
#: serverguide/C/lamp-applications.xml:58(para)
24358
msgid ""
24359
"Run a script, or browse to a page of the application, to install the "
24360
"database needed by the application."
24361
msgstr ""
24362
"Run a script, or browse to a page of the application, to install the "
24363
"database needed by the application."
24364
24365
#: serverguide/C/lamp-applications.xml:63(para)
24366
msgid ""
24367
"Once the steps above, or similar steps, are completed you are ready to begin "
24368
"using the application."
24369
msgstr ""
24370
"Once the steps above, or similar steps, are completed you are ready to begin "
24371
"using the application."
24372
24373
#: serverguide/C/lamp-applications.xml:69(para)
24374
msgid ""
24375
"A disadvantage of using this approach is that the application files are not "
24376
"placed in the file system in a standard way, which can cause confusion as to "
24377
"where the application is installed. Another larger disadvantage is updating "
24378
"the application. When a new version is released, the same process used to "
24379
"install the application is needed to apply updates."
24380
msgstr ""
24381
"A disadvantage of using this approach is that the application files are not "
24382
"placed in the file system in a standard way, which can cause confusion as to "
24383
"where the application is installed. Another larger disadvantage is updating "
24384
"the application. When a new version is released, the same process used to "
24385
"install the application is needed to apply updates."
24386
24387
#: serverguide/C/lamp-applications.xml:76(para)
24388
msgid ""
24389
"Fortunately, a number of <emphasis>LAMP</emphasis> applications are already "
24390
"packaged for Ubuntu, and are available for installation in the same way as "
24391
"non-LAMP applications. Depending on the application some extra configuration "
24392
"and setup steps may be needed, however."
24393
msgstr ""
24394
"Fortunately, a number of <emphasis>LAMP</emphasis> applications are already "
24395
"packaged for Ubuntu, and are available for installation in the same way as "
24396
"non-LAMP applications. Depending on the application some extra configuration "
24397
"and setup steps may be needed, however."
24398
24399
#: serverguide/C/lamp-applications.xml:82(para)
24400
msgid ""
24401
"This section covers howto install and configure the Wiki applications "
24402
"<application>MoinMoin</application>, <application>MediaWiki</application>, "
24403
"and the MySQL management application <application>phpMyAdmin</application>."
24404
msgstr ""
24405
"This section covers howto install and configure the Wiki applications "
24406
"<application>MoinMoin</application>, <application>MediaWiki</application>, "
24407
"and the MySQL management application <application>phpMyAdmin</application>."
24408
24409
#: serverguide/C/lamp-applications.xml:88(para)
24410
msgid ""
24411
"A Wiki is a website that allows the visitors to easily add, remove and "
24412
"modify available content easily. The ease of interaction and operation makes "
24413
"Wiki an effective tool for mass collaborative authoring. The term Wiki is "
24414
"also referred to the collaborative software."
24415
msgstr ""
24416
"A Wiki is a Website that allows the visitors to easily add, remove and "
24417
"modify available content easily. The ease of interaction and operation makes "
24418
"Wiki an effective tool for mass collaborative authoring. The term Wiki is "
24419
"also referred to the collaborative software."
24420
24421
#: serverguide/C/lamp-applications.xml:100(title)
24422
msgid "Moin Moin"
24423
msgstr "Moin Moin"
24424
24425
#: serverguide/C/lamp-applications.xml:102(para)
24426
msgid ""
24427
"MoinMoin is a Wiki engine implemented in Python, based on the PikiPiki Wiki "
24428
"engine, and licensed under the GNU GPL."
24429
msgstr ""
24430
"MoinMoin is a Wiki engine implemented in Python, based on the PikiPiki Wiki "
24431
"engine, and licensed under the GNU GPL."
24432
24433
#: serverguide/C/lamp-applications.xml:110(para)
24434
msgid ""
24435
"To install <application>MoinMoin</application>, run the following command in "
24436
"the command prompt:"
24437
msgstr ""
24438
"To install <application>MoinMoin</application>, run the following command in "
24439
"the command prompt:"
24440
24441
#: serverguide/C/lamp-applications.xml:116(command)
24442
msgid "sudo apt-get install python-moinmoin"
24443
msgstr "sudo apt-get install python-moinmoin"
24444
24445
#: serverguide/C/lamp-applications.xml:119(para)
24446
msgid ""
24447
"You should also install <application>apache2</application> web server. For "
24448
"installing <application>apache2</application> web server, please refer to "
24449
"<xref linkend=\"http-installation\"/> sub-section in <xref "
24450
"linkend=\"httpd\"/> section."
24451
msgstr ""
24452
"You should also install <application>apache2</application> web server. For "
24453
"installing <application>apache2</application> web server, please refer to "
24454
"<xref linkend=\"http-installation\"/> sub-section in <xref "
24455
"linkend=\"httpd\"/> section."
24456
24457
#: serverguide/C/lamp-applications.xml:130(para)
24458
msgid ""
24459
"For configuring your first Wiki application, please run the following set of "
24460
"commands. Let us assume that you are creating a Wiki named "
24461
"<emphasis>mywiki</emphasis>:"
24462
msgstr ""
24463
"For configuring your first Wiki application, please run the following set of "
24464
"commands. Let us assume that you are creating a Wiki named "
24465
"<emphasis>mywiki</emphasis>:"
24466
24467
#: serverguide/C/lamp-applications.xml:137(command)
24468
msgid "cd /usr/share/moin"
24469
msgstr "cd /usr/share/moin"
24470
24471
#: serverguide/C/lamp-applications.xml:138(command)
24472
msgid "sudo mkdir mywiki"
24473
msgstr "sudo mkdir mywiki"
24474
24475
#: serverguide/C/lamp-applications.xml:139(command)
24476
msgid "sudo cp -R data mywiki"
24477
msgstr "sudo cp -R data mywiki"
24478
24479
#: serverguide/C/lamp-applications.xml:140(command)
24480
msgid "sudo cp -R underlay mywiki"
24481
msgstr "sudo cp -R underlay mywiki"
24482
24483
#: serverguide/C/lamp-applications.xml:141(command)
24484
msgid "sudo cp server/moin.cgi mywiki"
24485
msgstr "sudo cp server/moin.cgi mywiki"
24486
24487
#: serverguide/C/lamp-applications.xml:142(command)
24488
msgid "sudo chown -R www-data.www-data mywiki"
24489
msgstr "sudo chown -R www-data.www-data mywiki"
24490
24491
#: serverguide/C/lamp-applications.xml:143(command)
24492
msgid "sudo chmod -R ug+rwX mywiki"
24493
msgstr "sudo chmod -R ug+rwX mywiki"
24494
24495
#: serverguide/C/lamp-applications.xml:144(command)
24496
msgid "sudo chmod -R o-rwx mywiki"
24497
msgstr "sudo chmod -R o-rwx mywiki"
24498
24499
#: serverguide/C/lamp-applications.xml:147(para)
24500
msgid ""
24501
"Now you should configure <application>MoinMoin</application> to find your "
24502
"new Wiki <emphasis>mywiki</emphasis>. To configure "
24503
"<application>MoinMoin</application>, open "
24504
"<filename>/etc/moin/mywiki.py</filename> file and change the following line:"
24505
msgstr ""
24506
"Now you should configure <application>MoinMoin</application> to find your "
24507
"new Wiki <emphasis>mywiki</emphasis>. To configure "
24508
"<application>MoinMoin</application>, open "
24509
"<filename>/etc/moin/mywiki.py</filename> file and change the following line:"
24510
24511
#: serverguide/C/lamp-applications.xml:155(programlisting)
24512
#, no-wrap
24513
msgid "data_dir = '/org/mywiki/data'"
24514
msgstr "data_dir = '/org/mywiki/data'"
24515
24516
#: serverguide/C/lamp-applications.xml:157(para)
24517
msgid "to"
24518
msgstr "to"
24519
24520
#: serverguide/C/lamp-applications.xml:161(programlisting)
24521
#, no-wrap
24522
msgid "data_dir = '/usr/share/moin/mywiki/data'"
24523
msgstr "data_dir = '/usr/share/moin/mywiki/data'"
24524
24525
#: serverguide/C/lamp-applications.xml:163(para)
24526
msgid ""
24527
"Also, below the <emphasis>data_dir</emphasis> option add the "
24528
"<emphasis>data_underlay_dir</emphasis>:"
24529
msgstr ""
24530
"Also, below the <emphasis>data_dir</emphasis> option add the "
24531
"<emphasis>data_underlay_dir</emphasis>:"
24532
24533
#: serverguide/C/lamp-applications.xml:167(programlisting)
24534
#, no-wrap
24535
msgid ""
24536
"\n"
24537
"data_underlay_dir='/usr/share/moin/mywiki/underlay'\n"
24538
msgstr ""
24539
"\n"
24540
"data_underlay_dir='/usr/share/moin/mywiki/underlay'\n"
24541
24542
#: serverguide/C/lamp-applications.xml:172(para)
24543
msgid ""
24544
"If the <filename>/etc/moin/mywiki.py</filename> file does not exists, you "
24545
"should copy <filename>/etc/moin/moinmaster.py</filename> file to "
24546
"<filename>/etc/moin/mywiki.py</filename> file and do the above mentioned "
24547
"change."
24548
msgstr ""
24549
"If the <filename>/etc/moin/mywiki.py</filename> file does not exists, you "
24550
"should copy <filename>/etc/moin/moinmaster.py</filename> file to "
24551
"<filename>/etc/moin/mywiki.py</filename> file and do the above mentioned "
24552
"change."
24553
24554
#: serverguide/C/lamp-applications.xml:181(para)
24555
msgid ""
24556
"If you have named your Wiki as <emphasis>my_wiki_name</emphasis> you should "
24557
"insert a line <quote>(\"my_wiki_name\", r\".*\")</quote> in "
24558
"<filename>/etc/moin/farmconfig.py</filename> file after the line "
24559
"<quote>(\"mywiki\", r\".*\")</quote>."
24560
msgstr ""
24561
"If you have named your Wiki as <emphasis>my_wiki_name</emphasis> you should "
24562
"insert a line <quote>(\"my_wiki_name\", r\".*\")</quote> in "
24563
"<filename>/etc/moin/farmconfig.py</filename> file after the line "
24564
"<quote>(\"mywiki\", r\".*\")</quote>."
24565
24566
#: serverguide/C/lamp-applications.xml:189(para)
24567
msgid ""
24568
"Once you have configured <application>MoinMoin</application> to find your "
24569
"first Wiki application <emphasis>mywiki</emphasis>, you should configure "
24570
"<application>apache2</application> and make it ready for your Wiki "
24571
"application."
24572
msgstr ""
24573
"Once you have configured <application>MoinMoin</application> to find your "
24574
"first Wiki application <emphasis>mywiki</emphasis>, you should configure "
24575
"<application>apache2</application> and make it ready for your Wiki "
24576
"application."
24577
24578
#: serverguide/C/lamp-applications.xml:196(para)
24579
msgid ""
24580
"You should add the following lines in <filename>/etc/apache2/sites-"
24581
"available/default</filename> file inside the <quote><VirtualHost "
24582
"*></quote> tag:"
24583
msgstr ""
24584
"You should add the following lines in <filename>/etc/apache2/sites-"
24585
"available/default</filename> file inside the <quote><VirtualHost "
24586
"*></quote> tag:"
24587
24588
#: serverguide/C/lamp-applications.xml:202(programlisting)
24589
#, no-wrap
24590
msgid ""
24591
"\n"
24592
"### moin\n"
24593
" ScriptAlias /mywiki \"/usr/share/moin/mywiki/moin.cgi\"\n"
24594
" alias /moin_static184 \"/usr/share/moin/htdocs\"\n"
24595
" <Directory /usr/share/moin/htdocs>\n"
24596
" Order allow,deny\n"
24597
" allow from all\n"
24598
" </Directory>\n"
24599
"### end moin\n"
24600
msgstr ""
24601
"\n"
24602
"### moin\n"
24603
" ScriptAlias /mywiki \"/usr/share/moin/mywiki/moin.cgi\"\n"
24604
" alias /moin_static184 \"/usr/share/moin/htdocs\"\n"
24605
" <Directory /usr/share/moin/htdocs>\n"
24606
" Order allow,deny\n"
24607
" allow from all\n"
24608
" </Directory>\n"
24609
"### end moin\n"
24610
24611
#: serverguide/C/lamp-applications.xml:214(para)
24612
msgid ""
24613
"Adjust the <emphasis>\"moin_static184\"</emphasis> in the "
24614
"<emphasis>alias</emphasis> line above, to the "
24615
"<application>moinmoin</application> version installed."
24616
msgstr ""
24617
"Adjust the <emphasis>\"moin_static184\"</emphasis> in the "
24618
"<emphasis>alias</emphasis> line above, to the "
24619
"<application>moinmoin</application> version installed."
24620
24621
#: serverguide/C/lamp-applications.xml:220(para)
24622
msgid ""
24623
"Once you configure the <application>apache2</application> web server and "
24624
"make it ready for your Wiki application, you should restart it. You can run "
24625
"the following command to restart the <application>apache2</application> web "
24626
"server:"
24627
msgstr ""
24628
"Once you configure the <application>apache2</application> Web server and "
24629
"make it ready for your Wiki application, you should restart it. You can run "
24630
"the following command to restart the <application>apache2</application> Web "
24631
"server:"
24632
24633
#: serverguide/C/lamp-applications.xml:233(title)
24634
msgid "Verification"
24635
msgstr "Verification"
24636
24637
#: serverguide/C/lamp-applications.xml:235(para)
24638
msgid ""
24639
"You can verify the Wiki application and see if it works by pointing your web "
24640
"browser to the following URL:"
24641
msgstr ""
24642
"You can verify the Wiki application and see if it works by pointing your Web "
24643
"browser to the following URL:"
24644
24645
#: serverguide/C/lamp-applications.xml:239(programlisting)
24646
#, no-wrap
24647
msgid ""
24648
"\n"
24649
"http://localhost/mywiki\n"
24650
msgstr ""
24651
"\n"
24652
"http://localhost/mywiki\n"
24653
24654
#: serverguide/C/lamp-applications.xml:243(para)
24655
msgid ""
24656
"You can also run the test command by pointing your web browser to the "
24657
"following URL:"
24658
msgstr ""
24659
"You can also run the test command by pointing your Web browser to the "
24660
"following URL:"
24661
24662
#: serverguide/C/lamp-applications.xml:248(programlisting)
24663
#, no-wrap
24664
msgid ""
24665
"\n"
24666
"http://localhost/mywiki?action=test\n"
24667
msgstr ""
24668
"\n"
24669
"http://localhost/mywiki?action=test\n"
24670
24671
#: serverguide/C/lamp-applications.xml:252(para)
24672
msgid ""
24673
"For more details, please refer to the <ulink "
24674
"url=\"http://moinmo.in/\">MoinMoin</ulink> web site."
24675
msgstr ""
24676
"For more details, please refer to the <ulink "
24677
"url=\"http://moinmo.in/\">MoinMoin</ulink> web site."
24678
24679
#: serverguide/C/lamp-applications.xml:263(para)
24680
msgid ""
24681
"For more information see the <ulink url=\"http://moinmo.in/\">moinmoin "
24682
"Wiki</ulink>."
24683
msgstr ""
24684
"For more information see the <ulink url=\"http://moinmo.in/\">moinmoin "
24685
"Wiki</ulink>."
24686
24687
#: serverguide/C/lamp-applications.xml:268(para)
24688
msgid ""
24689
"Also, see the <ulink "
24690
"url=\"https://help.ubuntu.com/community/MoinMoin\">Ubuntu Wiki "
24691
"MoinMoin</ulink> page."
24692
msgstr ""
24693
24694
#: serverguide/C/lamp-applications.xml:277(title)
24695
msgid "MediaWiki"
24696
msgstr "MediaWiki"
24697
24698
#: serverguide/C/lamp-applications.xml:279(para)
24699
msgid ""
24700
"MediaWiki is an web based Wiki software written in the PHP language. It can "
24701
"either use <application>MySQL</application> or "
24702
"<application>PostgreSQL</application> Database Management System."
24703
msgstr ""
24704
"MediaWiki is an web based Wiki software written in the PHP language. It can "
24705
"either use <application>MySQL</application> or "
24706
"<application>PostgreSQL</application> Database Management System."
24707
24708
#: serverguide/C/lamp-applications.xml:289(para)
24709
msgid ""
24710
"Before installing <application>MediaWiki</application> you should also "
24711
"install <application>Apache2</application>, the "
24712
"<application>PHP5</application> scripting language and Database a Management "
24713
"System. <application>MySQL</application> or "
24714
"<application>PostgreSQL</application> are the most common, choose one "
24715
"depending on your need. Please refer to those sections in this manual for "
24716
"installation instructions."
24717
msgstr ""
24718
"Before installing <application>MediaWiki</application> you should also "
24719
"install <application>Apache2</application>, the "
24720
"<application>PHP5</application> scripting language and Database a Management "
24721
"System. <application>MySQL</application> or "
24722
"<application>PostgreSQL</application> are the most common, choose one "
24723
"depending on your need. Please refer to those sections in this manual for "
24724
"installation instructions."
24725
24726
#: serverguide/C/lamp-applications.xml:297(para)
24727
msgid ""
24728
"To install <application>MediaWiki</application>, run the following command "
24729
"in the command prompt:"
24730
msgstr ""
24731
"To install <application>MediaWiki</application>, run the following command "
24732
"in the command prompt:"
24733
24734
#: serverguide/C/lamp-applications.xml:303(command)
24735
msgid "sudo apt-get install mediawiki php5-gd"
24736
msgstr "sudo apt-get install mediawiki php5-gd"
24737
24738
#: serverguide/C/lamp-applications.xml:306(para)
24739
msgid ""
24740
"For additional <application>MediaWiki</application> functionality see the "
24741
"<application>mediawiki-extensions</application> package."
24742
msgstr ""
24743
"For additional <application>MediaWiki</application> functionality see the "
24744
"<application>mediawiki-extensions</application> package."
24745
24746
#: serverguide/C/lamp-applications.xml:316(para)
24747
msgid ""
24748
"The Apache configuration file <filename>mediawiki.conf</filename> for "
24749
"MediaWiki is installed in <filename>/etc/apache2/conf.d/</filename> "
24750
"directory. You should uncomment the following line in this file to access "
24751
"MediaWiki application."
24752
msgstr ""
24753
"The Apache configuration file <filename>mediawiki.conf</filename> for "
24754
"MediaWiki is installed in <filename>/etc/apache2/conf.d/</filename> "
24755
"directory. You should uncomment the following line in this file to access "
24756
"MediaWiki application."
24757
24758
#: serverguide/C/lamp-applications.xml:324(screen)
24759
#, no-wrap
24760
msgid ""
24761
"\n"
24762
"# Alias /mediawiki /var/lib/mediawiki\n"
24763
msgstr ""
24764
"\n"
24765
"# Alias /mediawiki /var/lib/mediawiki\n"
24766
24767
#: serverguide/C/lamp-applications.xml:328(para)
24768
msgid ""
24769
"After you uncomment the above line, restart Apache server and access "
24770
"MediaWiki using the following url:"
24771
msgstr ""
24772
"After you uncomment the above line, restart Apache server and access "
24773
"MediaWiki using the following url:"
24774
24775
#: serverguide/C/lamp-applications.xml:333(programlisting)
24776
#, no-wrap
24777
msgid ""
24778
"\n"
24779
"http://localhost/mediawiki/config/index.php\n"
24780
msgstr ""
24781
"\n"
24782
"http://localhost/mediawiki/config/index.php\n"
24783
24784
#: serverguide/C/lamp-applications.xml:338(para)
24785
msgid ""
24786
"Please read the <quote>Checking environment...</quote> section in this page. "
24787
"You should be able to fix many issues by carefully reading this section."
24788
msgstr ""
24789
"Please read the <quote>Checking environment...</quote> section in this page. "
24790
"You should be able to fix many issues by carefully reading this section."
24791
24792
#: serverguide/C/lamp-applications.xml:345(para)
24793
msgid ""
24794
"Once the configuration is complete, you should copy the "
24795
"<filename>LocalSettings.php</filename> file to "
24796
"<filename>/etc/mediawiki</filename> directory:"
24797
msgstr ""
24798
24799
#: serverguide/C/lamp-applications.xml:352(command)
24800
msgid "sudo mv /var/lib/mediawiki/config/LocalSettings.php /etc/mediawiki/"
24801
msgstr ""
24802
24803
#: serverguide/C/lamp-applications.xml:355(para)
24804
msgid ""
24805
"You may also want to edit "
24806
"<filename>/etc/mediawiki/LocalSettings.php</filename> adjusting:"
24807
msgstr ""
24808
24809
#: serverguide/C/lamp-applications.xml:360(programlisting)
24810
#, no-wrap
24811
msgid ""
24812
"\n"
24813
"ini_set( 'memory_limit', '64M' );\n"
24814
msgstr ""
24815
24816
#: serverguide/C/lamp-applications.xml:367(title)
24817
msgid "Extensions"
24818
msgstr "Extensions"
24819
24820
#: serverguide/C/lamp-applications.xml:368(para)
24821
msgid ""
24822
"The extensions add new features and enhancements for the MediaWiki "
24823
"application. The extensions give wiki administrators and end users the "
24824
"ability to customize MediaWiki to their requirements."
24825
msgstr ""
24826
"The extensions add new features and enhancements for the MediaWiki "
24827
"application. The extensions give wiki administrators and end users the "
24828
"ability to customise MediaWiki to their requirements."
24829
24830
#: serverguide/C/lamp-applications.xml:374(para)
24831
msgid ""
24832
"You can download MediaWiki extensions as an archive file or checkout from "
24833
"the Subversion repository. You should copy it to "
24834
"<filename>/var/lib/mediawiki/extensions</filename> directory. You should "
24835
"also add the following line at the end of file: "
24836
"<filename>/etc/mediawiki/LocalSettings.php</filename>."
24837
msgstr ""
24838
"You can download MediaWiki extensions as an archive file or checkout from "
24839
"the Subversion repository. You should copy it to "
24840
"<filename>/var/lib/mediawiki/extensions</filename> directory. You should "
24841
"also add the following line at the end of file: "
24842
"<filename>/etc/mediawiki/LocalSettings.php</filename>."
24843
24844
#: serverguide/C/lamp-applications.xml:382(programlisting)
24845
#, no-wrap
24846
msgid ""
24847
"\n"
24848
"require_once \"$IP/extensions/ExtentionName/ExtentionName.php\";\n"
24849
msgstr ""
24850
"\n"
24851
"require_once \"$IP/extensions/ExtentionName/ExtentionName.php\";\n"
24852
24853
#: serverguide/C/lamp-applications.xml:392(para)
24854
msgid ""
24855
"For more details, please refer to the <ulink "
24856
"url=\"http://www.mediawiki.org\">MediaWiki</ulink> web site."
24857
msgstr ""
24858
"For more details, please refer to the <ulink "
24859
"url=\"http://www.mediawiki.org\">MediaWiki</ulink> Web site."
24860
24861
#: serverguide/C/lamp-applications.xml:398(para)
24862
msgid ""
24863
"The <ulink url=\"http://www.packtpub.com/Mediawiki/book\">MediaWiki "
24864
"Administrators’ Tutorial Guide</ulink> contains a wealth of information for "
24865
"new MediaWiki administrators."
24866
msgstr ""
24867
"The <ulink url=\"http://www.packtpub.com/Mediawiki/book\">MediaWiki "
24868
"Administrators’ Tutorial Guide</ulink> contains a wealth of information for "
24869
"new MediaWiki administrators."
24870
24871
#: serverguide/C/lamp-applications.xml:404(para)
24872
msgid ""
24873
"Also, the <ulink url=\"https://help.ubuntu.com/community/MediaWiki\">Ubuntu "
24874
"Wiki MediaWiki</ulink> page is a good resource."
24875
msgstr ""
24876
24877
#: serverguide/C/lamp-applications.xml:414(title)
24878
msgid "phpMyAdmin"
24879
msgstr "phpMyAdmin"
24880
24881
#: serverguide/C/lamp-applications.xml:416(para)
24882
msgid ""
24883
"<application>phpMyAdmin</application> is a LAMP application specifically "
24884
"written for administering <application>MySQL</application> servers. Written "
24885
"in <application>PHP</application>, and accessed through a web browser, "
24886
"phpMyAdmin provides a graphical interface for database administration tasks."
24887
msgstr ""
24888
"<application>phpMyAdmin</application> is a LAMP application specifically "
24889
"written for administering <application>MySQL</application> servers. Written "
24890
"in <application>PHP</application>, and accessed through a web browser, "
24891
"phpMyAdmin provides a graphical interface for database administration tasks."
24892
24893
#: serverguide/C/lamp-applications.xml:425(para)
24894
msgid ""
24895
"Before installing <application>phpMyAdmin</application> you will need access "
24896
"to a <application>MySQL</application> database either on the same host as "
24897
"that phpMyAdmin is installed on, or on a host accessible over the network. "
24898
"For more information see <xref linkend=\"mysql\"/>. From a terminal prompt "
24899
"enter:"
24900
msgstr ""
24901
"Before installing <application>phpMyAdmin</application> you will need access "
24902
"to a <application>MySQL</application> database either on the same host as "
24903
"that phpMyAdmin is installed on, or on a host accessible over the network. "
24904
"For more information see <xref linkend=\"mysql\"/>. From a terminal prompt "
24905
"enter:"
24906
24907
#: serverguide/C/lamp-applications.xml:432(command)
24908
msgid "sudo apt-get install phpmyadmin"
24909
msgstr "sudo apt-get install phpmyadmin"
24910
24911
#: serverguide/C/lamp-applications.xml:435(para)
24912
msgid ""
24913
"At the prompt choose which web server to be configured for "
24914
"<application>phpMyAdmin</application>. The rest of this section will use "
24915
"<application>Apache2</application> for the web server."
24916
msgstr ""
24917
"At the prompt choose which web server to be configured for "
24918
"<application>phpMyAdmin</application>. The rest of this section will use "
24919
"<application>Apache2</application> for the web server."
24920
24921
#: serverguide/C/lamp-applications.xml:440(para)
24922
msgid ""
24923
"In a browser go to <emphasis>http://servername/phpmyadmin</emphasis>, "
24924
"replacing <emphasis role=\"italic\">serveranme</emphasis> with the server's "
24925
"actual hostname. At the login, page enter <emphasis>root</emphasis> for the "
24926
"<emphasis>username</emphasis>, or another <application>MySQL</application> "
24927
"user if you any setup, and enter the <application>MySQL</application> user's "
24928
"password."
24929
msgstr ""
24930
"In a browser go to <emphasis>http://servername/phpmyadmin</emphasis>, "
24931
"replacing <emphasis role=\"italic\">serveranme</emphasis> with the server's "
24932
"actual hostname. At the login, page enter <emphasis>root</emphasis> for the "
24933
"<emphasis>username</emphasis>, or another <application>MySQL</application> "
24934
"user if you any setup, and enter the <application>MySQL</application> user's "
24935
"password."
24936
24937
#: serverguide/C/lamp-applications.xml:447(para)
24938
msgid ""
24939
"Once logged in you can reset the <emphasis>root</emphasis> password if "
24940
"needed, create users, create/destroy databases and tables, etc."
24941
msgstr ""
24942
"Once logged in you can reset the <emphasis>root</emphasis> password if "
24943
"needed, create users, create/destroy databases and tables, etc."
24944
24945
#: serverguide/C/lamp-applications.xml:455(para)
24946
msgid ""
24947
"The configuration files for <application>phpMyAdmin</application> are "
24948
"located in <filename>/etc/phpmyadmin</filename>. The main configuration file "
24949
"is <filename>/etc/phpmyadmin/config.inc.php</filename>. This file contains "
24950
"configuration options that apply globally to "
24951
"<application>phpMyAdmin</application>."
24952
msgstr ""
24953
"The configuration files for <application>phpMyAdmin</application> are "
24954
"located in <filename>/etc/phpmyadmin</filename>. The main configuration file "
24955
"is <filename>/etc/phpmyadmin/config.inc.php</filename>. This file contains "
24956
"configuration options that apply globally to "
24957
"<application>phpMyAdmin</application>."
24958
24959
#: serverguide/C/lamp-applications.xml:461(para)
24960
msgid ""
24961
"To use <application>phpMyAdmin</application> to administer a MySQL database "
24962
"hosted on another server, adjust the following in "
24963
"<filename>/etc/phpmyadmin/config.inc.php</filename>:"
24964
msgstr ""
24965
"To use <application>phpMyAdmin</application> to administer a MySQL database "
24966
"hosted on another server, adjust the following in "
24967
"<filename>/etc/phpmyadmin/config.inc.php</filename>:"
24968
24969
#: serverguide/C/lamp-applications.xml:466(programlisting)
24970
#, no-wrap
24971
msgid ""
24972
"\n"
24973
"$cfg['Servers'][$i]['host'] = 'db_server';\n"
24974
msgstr ""
24975
"\n"
24976
"$cfg['Servers'][$i]['host'] = 'db_server';\n"
24977
24978
#: serverguide/C/lamp-applications.xml:471(para)
24979
msgid ""
24980
"Replace <emphasis role=\"italic\">db_server</emphasis> with the actual "
24981
"remote database server name or IP address. Also, be sure that the "
24982
"<application>phpMyAdmin</application> host has permissions to access the "
24983
"remote database."
24984
msgstr ""
24985
"Replace <emphasis role=\"italic\">db_server</emphasis> with the actual "
24986
"remote database server name or IP address. Also, be sure that the "
24987
"<application>phpMyAdmin</application> host has permissions to access the "
24988
"remote database."
24989
24990
#: serverguide/C/lamp-applications.xml:477(para)
24991
msgid ""
24992
"Once configured, log out of <application>phpMyAdmin</application> and back "
24993
"in, and you should be accessing the new server."
24994
msgstr ""
24995
"Once configured, log out of <application>phpMyAdmin</application> and back "
24996
"in, and you should be accessing the new server."
24997
24998
#: serverguide/C/lamp-applications.xml:481(para)
24999
msgid ""
25000
"The <filename>config.header.inc.php</filename> and "
25001
"<filename>config.footer.inc.php</filename> files are used to add a HTML "
25002
"header and footer to <application>phpMyAdmin</application>."
25003
msgstr ""
25004
"The <filename>config.header.inc.php</filename> and "
25005
"<filename>config.footer.inc.php</filename> files are used to add a HTML "
25006
"header and footer to <application>phpMyAdmin</application>."
25007
25008
#: serverguide/C/lamp-applications.xml:486(para)
25009
msgid ""
25010
"Another important configuration file is "
25011
"<filename>/etc/phpmyadmin/apache.conf</filename>, this file is symlinked to "
25012
"<filename>/etc/apache2/conf.d/phpmyadmin.conf</filename>, and is used to "
25013
"configure <application>Apache2</application> to serve the "
25014
"<application>phpMyAdmin</application> site. The file contains directives for "
25015
"loading <application>PHP</application>, directory permissions, etc. For more "
25016
"information on configuring <application>Apache2</application> see <xref "
25017
"linkend=\"httpd\"/>."
25018
msgstr ""
25019
"Another important configuration file is "
25020
"<filename>/etc/phpmyadmin/apache.conf</filename>, this file is symlinked to "
25021
"<filename>/etc/apache2/conf.d/phpmyadmin.conf</filename>, and is used to "
25022
"configure <application>Apache2</application> to serve the "
25023
"<application>phpMyAdmin</application> site. The file contains directives for "
25024
"loading <application>PHP</application>, directory permissions, etc. For more "
25025
"information on configuring <application>Apache2</application> see <xref "
25026
"linkend=\"httpd\"/>."
25027
25028
#: serverguide/C/lamp-applications.xml:500(para)
25029
msgid ""
25030
"The <application>phpMyAdmin</application> documentation comes installed with "
25031
"the package and can be accessed from the <emphasis>phpMyAdmin "
25032
"Documentation</emphasis> link (a question mark with a box around it) under "
25033
"the phpMyAdmin logo. The official docs can also be access on the <ulink "
25034
"url=\"http://www.phpmyadmin.net/home_page/docs.php\">phpMyAdmin</ulink> site."
25035
msgstr ""
25036
"The <application>phpMyAdmin</application> documentation comes installed with "
25037
"the package and can be accessed from the <emphasis>phpMyAdmin "
25038
"Documentation</emphasis> link (a question mark with a box around it) under "
25039
"the phpMyAdmin logo. The official docs can also be access on the <ulink "
25040
"url=\"http://www.phpmyadmin.net/home_page/docs.php\">phpMyAdmin</ulink> site."
25041
25042
#: serverguide/C/lamp-applications.xml:507(para)
25043
msgid ""
25044
"Also, <ulink url=\"http://www.packtpub.com/phpmyadmin-3rd-"
25045
"edition/book\">Mastering phpMyAdmin</ulink> is a great resource."
25046
msgstr ""
25047
"Also, <ulink url=\"http://www.packtpub.com/phpmyadmin-3rd-"
25048
"edition/book\">Mastering phpMyAdmin</ulink> is a great resource."
25049
25050
#: serverguide/C/lamp-applications.xml:512(para)
25051
msgid ""
25052
"A third resource is the <ulink "
25053
"url=\"https://help.ubuntu.com/community/phpMyAdmin\">phpMyAdmin Ubuntu "
25054
"Wiki</ulink> page."
25055
msgstr ""
25056
25057
#: serverguide/C/introduction.xml:14(para)
25058
msgid "Welcome to the <emphasis>Ubuntu Server Guide</emphasis>!"
25059
msgstr "Welcome to the <emphasis>Ubuntu Server Guide</emphasis>!"
25060
25061
#: serverguide/C/introduction.xml:15(para)
25062
msgid ""
25063
"Here you can find information on how to install and configure various server "
25064
"applications. It is a step-by-step, task-oriented guide for configuring and "
25065
"customizing your system."
25066
msgstr ""
25067
"Here you can find information on how to install and configure various server "
25068
"applications. It is a step-by-step, task-oriented guide for configuring and "
25069
"customising your system."
25070
25071
#: serverguide/C/introduction.xml:19(para)
25072
msgid ""
25073
"This guide assumes you have a basic understanding of your Ubuntu system. "
25074
"Some installation details are covered in <xref linkend=\"installation\"/>, "
25075
"but if you need detailed instructions installing Ubuntu please refer to the "
25076
"<ulink url=\"https://help.ubuntu.com/10.04/installation-guide/\">Ubuntu "
25077
"Installation Guide</ulink>."
25078
msgstr ""
25079
25080
#: serverguide/C/introduction.xml:25(para)
25081
msgid ""
25082
"A HTML version of the manual is available online at <ulink "
25083
"url=\"http://help.ubuntu.com\">the Ubuntu Documentation website</ulink>. The "
25084
"HTML files are also available in the <application>ubuntu-"
25085
"serverguide</application> package. See <xref linkend=\"package-"
25086
"management\"/> for details on installing packages."
25087
msgstr ""
25088
"A HTML version of the manual is available online at <ulink "
25089
"url=\"http://help.ubuntu.com\">the Ubuntu Documentation website</ulink>. The "
25090
"HTML files are also available in the <application>ubuntu-"
25091
"serverguide</application> package. See <xref linkend=\"package-"
25092
"management\"/> for details on installing packages."
25093
25094
#: serverguide/C/introduction.xml:32(para)
25095
msgid ""
25096
"If you choose to install the <application>ubuntu-serverguide</application> "
25097
"you can view this document from a console by:"
25098
msgstr ""
25099
"If you choose to install the <application>ubuntu-serverguide</application> "
25100
"you can view this document from a console by:"
25101
25102
#: serverguide/C/introduction.xml:36(command)
25103
msgid "w3m /usr/share/ubuntu-serverguide/html/C/index.html"
25104
msgstr ""
25105
25106
#: serverguide/C/introduction.xml:39(para)
25107
msgid ""
25108
"If you are using a localized version of Ubuntu, replace "
25109
"<emphasis>C</emphasis> with your language localization (e.g. "
25110
"<emphasis>en_GB</emphasis>)."
25111
msgstr ""
25112
25113
#: serverguide/C/introduction.xml:53(title)
25114
msgid "Support"
25115
msgstr "Support"
25116
25117
#: serverguide/C/introduction.xml:55(para)
25118
msgid ""
25119
"There are a couple of different ways that Ubuntu Server Edition is "
25120
"supported, commercial support and community support. The main commercial "
25121
"support (and development funding) is available from Canonical Ltd. They "
25122
"supply reasonably priced support contracts on a per desktop or per server "
25123
"basis. For more information see the <ulink "
25124
"url=\"http://www.canonical.com/services/support\">Canonical Services</ulink> "
25125
"page."
25126
msgstr ""
25127
25128
#: serverguide/C/introduction.xml:62(para)
25129
msgid ""
25130
"Community support is also provided by dedicated individuals, and companies, "
25131
"that wish to make Ubuntu the best distribution possible. Support is provided "
25132
"through multiple mailing lists, IRC channels, forums, blogs, wikis, etc. The "
25133
"large amount of information available can be overwhelming, but a good search "
25134
"engine query can usually provide an answer to your questions. See the <ulink "
25135
"url=\"http://www.ubuntu.com/support\">Ubuntu Support</ulink> page for more "
25136
"information."
25137
msgstr ""
25138
"Community support is also provided by dedicated individuals, and companies, "
25139
"that wish to make Ubuntu the best distribution possible. Support is provided "
25140
"through multiple mailing lists, IRC channels, forums, blogs, wikis, etc. The "
25141
"large amount of information available can be overwhelming, but a good search "
25142
"engine query can usually provide an answer to your questions. See the <ulink "
25143
"url=\"http://www.ubuntu.com/support\">Ubuntu Support</ulink> page for more "
25144
"information."
25145
25146
#: serverguide/C/installation.xml:14(para)
25147
msgid ""
25148
"This chapter provides a quick overview of installing Ubuntu 10.10 Server "
25149
"Edition. For more detailed instructions, please refer to the <ulink "
25150
"url=\"https://help.ubuntu.com/10.04/installation-guide/\">Ubuntu "
25151
"Installation Guide</ulink>."
25152
msgstr ""
25153
25154
#: serverguide/C/installation.xml:19(title)
25155
msgid "Preparing to Install"
25156
msgstr "Preparing to Install"
25157
25158
#: serverguide/C/installation.xml:20(para)
25159
msgid ""
25160
"This section explains various aspects to consider before starting the "
25161
"installation."
25162
msgstr ""
25163
"This section explains various aspects to consider before starting the "
25164
"installation."
25165
25166
#: serverguide/C/installation.xml:24(title)
25167
msgid "System Requirements"
25168
msgstr "System Requirements"
25169
25170
#: serverguide/C/installation.xml:25(para)
25171
msgid ""
25172
"Ubuntu 10.10 Server Edition supports two (2) major architectures: Intel x86 "
25173
"and AMD64. The table below lists recommended hardware specifications. "
25174
"Depending on your needs, you might manage with less than this. However, most "
25175
"users risk being frustrated if they ignore these suggestions."
25176
msgstr ""
25177
25178
#: serverguide/C/installation.xml:27(title)
25179
msgid "Recommended Minimum Requirements"
25180
msgstr "Recommended Minimum Requirements"
25181
25182
#: serverguide/C/installation.xml:35(para)
25183
msgid "Install Type"
25184
msgstr "Install Type"
25185
25186
#: serverguide/C/installation.xml:36(para)
25187
msgid "RAM"
25188
msgstr "RAM"
25189
25190
#: serverguide/C/installation.xml:37(para)
25191
msgid "Hard Drive Space"
25192
msgstr "Hard Drive Space"
25193
25194
#: serverguide/C/installation.xml:40(para)
25195
msgid "Base System"
25196
msgstr "Base System"
25197
25198
#: serverguide/C/installation.xml:41(para)
25199
msgid "All Tasks Installed"
25200
msgstr "All Tasks Installed"
25201
25202
#: serverguide/C/installation.xml:46(para)
25203
msgid "Server"
25204
msgstr "Server"
25205
25206
#: serverguide/C/installation.xml:47(para)
25207
msgid "128 megabytes"
25208
msgstr "128 megabytes"
25209
25210
#: serverguide/C/installation.xml:48(para)
25211
msgid "500 megabytes"
25212
msgstr "500 megabytes"
25213
25214
#: serverguide/C/installation.xml:49(para)
25215
msgid "1 gigabyte"
25216
msgstr "1 gigabyte"
25217
25218
#: serverguide/C/installation.xml:54(para)
25219
msgid ""
25220
"The Server Edition provides a common base for all sorts of server "
25221
"applications. It is a minimalist design providing a platform for the desired "
25222
"services, such as file/print services, web hosting, email hosting, etc."
25223
msgstr ""
25224
"The Server Edition provides a common base for all sorts of server "
25225
"applications. It is a minimalist design providing a platform for the desired "
25226
"services, such as file/print services, web hosting, e-mail hosting, etc."
25227
25228
#: serverguide/C/installation.xml:60(para)
25229
msgid ""
25230
"The requirements for UEC are slightly different for Front End requirements "
25231
"see <xref linkend=\"uec-frontend-requirements\"/> and for UEC Node "
25232
"requirements see <xref linkend=\"uec-node-requirements\"/>."
25233
msgstr ""
25234
25235
#: serverguide/C/installation.xml:68(title)
25236
msgid "Server and Desktop Differences"
25237
msgstr "Server and Desktop Differences"
25238
25239
#: serverguide/C/installation.xml:69(para)
25240
msgid ""
25241
"There are a few differences between the <emphasis>Ubuntu Server "
25242
"Edition</emphasis> and the <emphasis>Ubuntu Desktop Edition</emphasis>. It "
25243
"should be noted that both editions use the same "
25244
"<application>apt</application> repositories. Making it just as easy to "
25245
"install a <emphasis role=\"italic\">server</emphasis> application on the "
25246
"Desktop Edition as it is on the Server Edition."
25247
msgstr ""
25248
"There are a few differences between the <emphasis>Ubuntu Server "
25249
"Edition</emphasis> and the <emphasis>Ubuntu Desktop Edition</emphasis>. It "
25250
"should be noted that both editions use the same "
25251
"<application>apt</application> repositories. Making it just as easy to "
25252
"install a <emphasis role=\"italic\">server</emphasis> application on the "
25253
"Desktop Edition as it is on the Server Edition."
25254
25255
#: serverguide/C/installation.xml:75(para)
25256
msgid ""
25257
"The differences between the two editions are the lack of an X window "
25258
"environment in the Server Edition, the installation process, and different "
25259
"Kernel options."
25260
msgstr ""
25261
"The differences between the two editions are the lack of an X window "
25262
"environment in the Server Edition, the installation process, and different "
25263
"Kernel options."
25264
25265
#: serverguide/C/installation.xml:82(title)
25266
msgid "Kernel Differences:"
25267
msgstr "Kernel Differences:"
25268
25269
#: serverguide/C/installation.xml:85(para)
25270
msgid ""
25271
"The Server Edition uses the <emphasis>Deadline</emphasis> I/O scheduler "
25272
"instead of the <emphasis>CFQ</emphasis> scheduler used by the Desktop "
25273
"Edition."
25274
msgstr ""
25275
"The Server Edition uses the <emphasis>Deadline</emphasis> I/O scheduler "
25276
"instead of the <emphasis>CFQ</emphasis> scheduler used by the Desktop "
25277
"Edition."
25278
25279
#: serverguide/C/installation.xml:91(para)
25280
msgid "<emphasis>Preemption</emphasis> is turned off in the Server Edition."
25281
msgstr "<emphasis>Preemption</emphasis> is turned off in the Server Edition."
25282
25283
#: serverguide/C/installation.xml:96(para)
25284
msgid ""
25285
"The timer interrupt is 100 Hz in the Server Edition and 250 Hz in the "
25286
"Desktop Edition."
25287
msgstr ""
25288
"The timer interrupt is 100 Hz in the Server Edition and 250 Hz in the "
25289
"Desktop Edition."
25290
25291
#: serverguide/C/installation.xml:102(para)
25292
msgid ""
25293
"When running a 64-bit version of Ubuntu on 64-bit processors you are not "
25294
"limited by memory addressing space."
25295
msgstr ""
25296
"When running a 64-bit version of Ubuntu on 64-bit processors you are not "
25297
"limited by memory addressing space."
25298
25299
#: serverguide/C/installation.xml:107(para)
25300
msgid ""
25301
"To see all kernel configuration options you can look through "
25302
"<filename>/boot/config-&linux-kernel-version;-server</filename>. Also, "
25303
"<ulink url=\"http://www.kroah.com/lkn/\">Linux Kernel in a Nutshell</ulink> "
25304
"is a great resource on the options available."
25305
msgstr ""
25306
25307
#: serverguide/C/installation.xml:116(title)
25308
msgid "Backing Up"
25309
msgstr "Backing Up"
25310
25311
#: serverguide/C/installation.xml:119(para)
25312
msgid ""
25313
"Before installing <application>Ubuntu Server Edition</application> you "
25314
"should make sure all data on the system is backed up. See <xref "
25315
"linkend=\"backups\"/> for backup options."
25316
msgstr ""
25317
"Before installing <application>Ubuntu Server Edition</application> you "
25318
"should make sure all data on the system is backed up. See <xref "
25319
"linkend=\"backups\"/> for backup options."
25320
25321
#: serverguide/C/installation.xml:123(para)
25322
msgid ""
25323
"If this is not the first time an operating system has been installed on your "
25324
"computer, it is likely you will need to re-partition your disk to make room "
25325
"for Ubuntu."
25326
msgstr ""
25327
"If this is not the first time an operating system has been installed on your "
25328
"computer, it is likely you will need to re-partition your disk to make room "
25329
"for Ubuntu."
25330
25331
#: serverguide/C/installation.xml:127(para)
25332
msgid ""
25333
"Any time you partition your disk, you should be prepared to lose everything "
25334
"on the disk should you make a mistake or something goes wrong during "
25335
"partitioning. The programs used in installation are quite reliable, most "
25336
"have seen years of use, but they also perform destructive actions."
25337
msgstr ""
25338
"Any time you partition your disk, you should be prepared to lose everything "
25339
"on the disk should you make a mistake or something goes wrong during "
25340
"partitioning. The programs used in installation are quite reliable, most "
25341
"have seen years of use, but they also perform destructive actions."
25342
25343
#: serverguide/C/installation.xml:139(title)
25344
msgid "Installing from CD"
25345
msgstr "Installing from CD"
25346
25347
#: serverguide/C/installation.xml:140(para)
25348
msgid ""
25349
"The basic steps to install Ubuntu Server Edition from CD are the same for "
25350
"installing any operating system from CD. Unlike the <emphasis>Desktop "
25351
"Edition</emphasis> the <emphasis>Server Edition</emphasis> does not include "
25352
"a graphical installation program. Instead the Server Edition uses a console "
25353
"menu based process."
25354
msgstr ""
25355
"The basic steps to install Ubuntu Server Edition from CD are the same for "
25356
"installing any operating system from CD. Unlike the <emphasis>Desktop "
25357
"Edition</emphasis> the <emphasis>Server Edition</emphasis> does not include "
25358
"a graphical installation program. Instead the Server Edition uses a console "
25359
"menu based process."
25360
25361
#: serverguide/C/installation.xml:147(para)
25362
msgid ""
25363
"First, download and burn the appropriate ISO file from the <ulink "
25364
"url=\"http://www.ubuntu.com/getubuntu/download\"> Ubuntu web site</ulink>."
25365
msgstr ""
25366
"First, download and burn the appropriate ISO file from the <ulink "
25367
"url=\"http://www.ubuntu.com/getubuntu/download\"> Ubuntu web site</ulink>."
25368
25369
#: serverguide/C/installation.xml:153(para)
25370
msgid "Boot the system from the CD-ROM drive."
25371
msgstr "Boot the system from the CD-ROM drive."
25372
25373
#: serverguide/C/installation.xml:158(para)
25374
msgid ""
25375
"At the boot prompt you will be asked to select the language. Afterwards the "
25376
"installation process begins by asking for your keyboard layout."
25377
msgstr ""
25378
"At the boot prompt you will be asked to select the language. Afterwards the "
25379
"installation process begins by asking for your keyboard layout."
25380
25381
#: serverguide/C/installation.xml:164(para)
25382
msgid ""
25383
"From the main boot menu there are some additional options to install Ubuntu "
25384
"Server Edition. You can install a basic Ubuntu Server, or install Ubuntu "
25385
"Server as part of a <emphasis>Ubuntu Enterprise Cloud</emphasis>. For more "
25386
"information on UEC see <xref linkend=\"uec\"/>. The rest of this section "
25387
"will cover the basic Ubuntu Server install."
25388
msgstr ""
25389
25390
#: serverguide/C/installation.xml:172(para)
25391
msgid ""
25392
"The installer then discovers your hardware configuration, and configures the "
25393
"network settings using DHCP. If you do not wish to use DHCP at the next "
25394
"screen choose \"Go Back\", and you have the option to \"Configure the "
25395
"network manually\"."
25396
msgstr ""
25397
"The installer then discovers your hardware configuration, and configures the "
25398
"network settings using DHCP. If you do not wish to use DHCP at the next "
25399
"screen choose \"Go Back\", and you have the option to \"Configure the "
25400
"network manually\"."
25401
25402
#: serverguide/C/installation.xml:179(para)
25403
msgid "Next, the installer asks for the system's hostname and Time Zone."
25404
msgstr "Next, the installer asks for the system's hostname and Time Zone."
25405
25406
#: serverguide/C/installation.xml:184(para)
25407
msgid ""
25408
"You can then choose from several options to configure the hard drive layout. "
25409
"For advanced disk options see <xref linkend=\"advanced-installation\"/>."
25410
msgstr ""
25411
"You can then choose from several options to configure the hard drive layout. "
25412
"For advanced disk options see <xref linkend=\"advanced-installation\"/>."
25413
25414
#: serverguide/C/installation.xml:190(para)
25415
msgid "The Ubuntu base system is then installed."
25416
msgstr "The Ubuntu base system is then installed."
25417
25418
#: serverguide/C/installation.xml:195(para)
25419
msgid ""
25420
"A new user is setup, this user will have <emphasis>root</emphasis> access "
25421
"through the <application>sudo</application> utility."
25422
msgstr ""
25423
"A new user is setup, this user will have <emphasis>root</emphasis> access "
25424
"through the <application>sudo</application> utility."
25425
25426
#: serverguide/C/installation.xml:201(para)
25427
msgid ""
25428
"After the user is setup, you will be asked to encrypt your <filename "
25429
"role=\"directory\">home</filename> directory."
25430
msgstr ""
25431
"After the user is setup, you will be asked to encrypt your <filename "
25432
"role=\"directory\">home</filename> directory."
25433
25434
#: serverguide/C/installation.xml:207(para)
25435
msgid ""
25436
"The next step in the installation process is to decide how you want to "
25437
"update the system. There are three options:"
25438
msgstr ""
25439
"The next step in the installation process is to decide how you want to "
25440
"update the system. There are three options:"
25441
25442
#: serverguide/C/installation.xml:213(para)
25443
msgid ""
25444
"<emphasis>No automatic updates</emphasis>: this requires an administrator to "
25445
"log into the machine and manually install updates."
25446
msgstr ""
25447
"<emphasis>No automatic updates</emphasis>: this requires an administrator to "
25448
"log into the machine and manually install updates."
25449
25450
#: serverguide/C/installation.xml:219(para)
25451
msgid ""
25452
"<emphasis>Install security updates Automatically</emphasis>: will install "
25453
"the <application>unattended-upgrades</application> package, which will "
25454
"install security updates without the intervention of an administrator. For "
25455
"more details see <xref linkend=\"automatic-updates\"/>."
25456
msgstr ""
25457
"<emphasis>Install security updates Automatically</emphasis>: will install "
25458
"the <application>unattended-upgrades</application> package, which will "
25459
"install security updates without the intervention of an administrator. For "
25460
"more details see <xref linkend=\"automatic-updates\"/>."
25461
25462
#: serverguide/C/installation.xml:226(para)
25463
msgid ""
25464
"<emphasis>Manage the system with Landscape</emphasis>: Landscape is a paid "
25465
"service provided by Canonical to help manage your Ubuntu machines. See the "
25466
"<ulink url=\"http://www.canonical.com/projects/landscape\">Landscape</ulink> "
25467
"site for details."
25468
msgstr ""
25469
"<emphasis>Manage the system with Landscape</emphasis>: Landscape is a paid "
25470
"service provided by Canonical to help manage your Ubuntu machines. See the "
25471
"<ulink url=\"http://www.canonical.com/projects/landscape\">Landscape</ulink> "
25472
"site for details."
25473
25474
#: serverguide/C/installation.xml:235(para)
25475
msgid ""
25476
"You now have the option to install, or not install, several package tasks. "
25477
"See <xref linkend=\"install-tasks\"/> for details. Also, there is an option "
25478
"to launch <application>aptitude</application> to choose specific packages to "
25479
"install. For more information see <xref linkend=\"aptitude\"/>."
25480
msgstr ""
25481
"You now have the option to install, or not install, several package tasks. "
25482
"See <xref linkend=\"install-tasks\"/> for details. Also, there is an option "
25483
"to launch <application>aptitude</application> to choose specific packages to "
25484
"install. For more information see <xref linkend=\"aptitude\"/>."
25485
25486
#: serverguide/C/installation.xml:243(para)
25487
msgid "Finally, the last step before rebooting is to set the clock to UTC."
25488
msgstr "Finally, the last step before rebooting is to set the clock to UTC."
25489
25490
#: serverguide/C/installation.xml:249(para)
25491
msgid ""
25492
"If at any point during installation you are not satisfied by the default "
25493
"setting, use the \"Go Back\" function at any prompt to be brought to a "
25494
"detailed installation menu that will allow you to modify the default "
25495
"settings."
25496
msgstr ""
25497
"If at any point during installation you are not satisfied by the default "
25498
"setting, use the \"Go Back\" function at any prompt to be brought to a "
25499
"detailed installation menu that will allow you to modify the default "
25500
"settings."
25501
25502
#: serverguide/C/installation.xml:254(para)
25503
msgid ""
25504
"At some point during the installation process you may want to read the help "
25505
"screen provided by the installation system. To do this, press F1."
25506
msgstr ""
25507
"At some point during the installation process you may want to read the help "
25508
"screen provided by the installation system. To do this, press F1."
25509
25510
#: serverguide/C/installation.xml:259(para)
25511
msgid ""
25512
"Once again, for detailed instructions see the <ulink "
25513
"url=\"https://help.ubuntu.com/10.04/installation-guide/\"> Ubuntu "
25514
"Installation Guide</ulink>."
25515
msgstr ""
25516
25517
#: serverguide/C/installation.xml:265(title)
25518
msgid "Package Tasks"
25519
msgstr "Package Tasks"
25520
25521
#: serverguide/C/installation.xml:266(para)
25522
msgid ""
25523
"During the Server Edition installation you have the option of installing "
25524
"additional packages from the CD. The packages are grouped by the type of "
25525
"service they provide."
25526
msgstr ""
25527
"During the Server Edition installation you have the option of installing "
25528
"additional packages from the CD. The packages are grouped by the type of "
25529
"service they provide."
25530
25531
#: serverguide/C/installation.xml:272(para)
25532
msgid "Cloud computing: Walrus storage service"
25533
msgstr ""
25534
25535
#: serverguide/C/installation.xml:277(para)
25536
msgid "Cloud computing: all-in-one cluster"
25537
msgstr ""
25538
25539
#: serverguide/C/installation.xml:282(para)
25540
msgid "Cloud computing: Cluster controller"
25541
msgstr ""
25542
25543
#: serverguide/C/installation.xml:287(para)
25544
msgid "Cloud computing: Node controller"
25545
msgstr ""
25546
25547
#: serverguide/C/installation.xml:292(para)
25548
msgid "Cloud computing: Storage controller"
25549
msgstr ""
25550
25551
#: serverguide/C/installation.xml:297(para)
25552
msgid "Cloud computing: top-level cloud controller"
25553
msgstr ""
25554
25555
#: serverguide/C/installation.xml:302(para)
25556
msgid "DNS server: Selects the BIND DNS server and its documentation."
25557
msgstr "DNS server: Selects the BIND DNS server and its documentation."
25558
25559
#: serverguide/C/installation.xml:307(para)
25560
msgid "LAMP server: Selects a ready-made Linux/Apache/MySQL/PHP server."
25561
msgstr "LAMP server: Selects a ready-made Linux/Apache/MySQL/PHP server."
25562
25563
#: serverguide/C/installation.xml:312(para)
25564
msgid ""
25565
"Mail server: This task selects a variety of package useful for a general "
25566
"purpose mail server system."
25567
msgstr ""
25568
"Mail server: This task selects a variety of package useful for a general "
25569
"purpose mail server system."
25570
25571
#: serverguide/C/installation.xml:317(para)
25572
msgid "OpenSSH server: Selects packages needed for an OpenSSH server."
25573
msgstr "OpenSSH server: Selects packages needed for an OpenSSH server."
25574
25575
#: serverguide/C/installation.xml:322(para)
25576
msgid ""
25577
"PostgreSQL database: This task selects client and server packages for the "
25578
"PostgreSQL database."
25579
msgstr ""
25580
"PostgreSQL database: This task selects client and server packages for the "
25581
"PostgreSQL database."
25582
25583
#: serverguide/C/installation.xml:327(para)
25584
msgid "Print server: This task sets up your system to be a print server."
25585
msgstr "Print server: This task sets up your system to be a print server."
25586
25587
#: serverguide/C/installation.xml:332(para)
25588
msgid ""
25589
"Samba File server: This task sets up your system to be a Samba file server, "
25590
"which is especially suitable in networks with both Windows and Linux systems."
25591
msgstr ""
25592
"Samba File server: This task sets up your system to be a Samba file server, "
25593
"which is especially suitable in networks with both Windows and Linux systems."
25594
25595
#: serverguide/C/installation.xml:338(para)
25596
msgid ""
25597
"Tomcat server: Installs the Apache Tomcat and needed dependencies Java, gcj, "
25598
"etc."
25599
msgstr ""
25600
"Tomcat server: Installs the Apache Tomcat and needed dependencies Java, gcj, "
25601
"etc."
25602
25603
#: serverguide/C/installation.xml:343(para)
25604
msgid ""
25605
"Virtual machine host: Includes packages needed to run KVM virtual machines."
25606
msgstr ""
25607
"Virtual machine host: Includes packages needed to run KVM virtual machines."
25608
25609
#: serverguide/C/installation.xml:348(para)
25610
msgid ""
25611
"Manually select packages: Executes <application>apptitude</application> "
25612
"allowing you to individually select packages."
25613
msgstr ""
25614
25615
#: serverguide/C/installation.xml:353(para)
25616
msgid ""
25617
"Installing the package groups is accomplished using the "
25618
"<application>tasksel</application> utility. One of the important difference "
25619
"between Ubuntu (or Debian) and other GNU/Linux distribution is that, when "
25620
"installed, a package is also configured to reasonable defaults, eventually "
25621
"prompting you for additional required information. Likewise, when installing "
25622
"a task, the packages are not only installed, but also configured to provided "
25623
"a fully integrated service."
25624
msgstr ""
25625
"Installing the package groups is accomplished using the "
25626
"<application>tasksel</application> utility. One of the important difference "
25627
"between Ubuntu (or Debian) and other GNU/Linux distribution is that, when "
25628
"installed, a package is also configured to reasonable defaults, eventually "
25629
"prompting you for additional required information. Likewise, when installing "
25630
"a task, the packages are not only installed, but also configured to provided "
25631
"a fully integrated service."
25632
25633
#: serverguide/C/installation.xml:360(para)
25634
msgid ""
25635
"For more information on the <emphasis>Cloud Computing</emphasis> tasks see "
25636
"<xref linkend=\"uec\"/>."
25637
msgstr ""
25638
25639
#: serverguide/C/installation.xml:363(para)
25640
msgid ""
25641
"Once the installation process has finished you can view a list of available "
25642
"tasks by entering the following from a terminal prompt:"
25643
msgstr ""
25644
"Once the installation process has finished you can view a list of available "
25645
"tasks by entering the following from a terminal prompt:"
25646
25647
#: serverguide/C/installation.xml:368(command)
25648
msgid "tasksel --list-tasks"
25649
msgstr "tasksel --list-tasks"
25650
25651
#: serverguide/C/installation.xml:371(para)
25652
msgid ""
25653
"The output will list tasks from other Ubuntu based distributions such as "
25654
"Kubuntu and Edubuntu. Note that you can also invoke the "
25655
"<command>tasksel</command> command by itself, which will bring up a menu of "
25656
"the different tasks available."
25657
msgstr ""
25658
"The output will list tasks from other Ubuntu based distributions such as "
25659
"Kubuntu and Edubuntu. Note that you can also invoke the "
25660
"<command>tasksel</command> command by itself, which will bring up a menu of "
25661
"the different tasks available."
25662
25663
#: serverguide/C/installation.xml:377(para)
25664
msgid ""
25665
"You can view a list of which packages are installed with each task using the "
25666
"<emphasis>--task-packages</emphasis> option. For example, to list the "
25667
"packages installed with the <emphasis>DNS Server</emphasis> task enter the "
25668
"following:"
25669
msgstr ""
25670
"You can view a list of which packages are installed with each task using the "
25671
"<emphasis>--task-packages</emphasis> option. For example, to list the "
25672
"packages installed with the <emphasis>DNS Server</emphasis> task enter the "
25673
"following:"
25674
25675
#: serverguide/C/installation.xml:382(command)
25676
msgid "tasksel --task-packages dns-server"
25677
msgstr "tasksel --task-packages dns-server"
25678
25679
#: serverguide/C/installation.xml:384(para)
25680
msgid "The output of the command should list:"
25681
msgstr "The output of the command should list:"
25682
25683
#: serverguide/C/installation.xml:387(programlisting)
25684
#, no-wrap
25685
msgid ""
25686
"\n"
25687
"bind9-doc \n"
25688
"bind9utils \n"
25689
"bind9\n"
25690
msgstr ""
25691
"\n"
25692
"bind9-doc \n"
25693
"bind9utils \n"
25694
"bind9\n"
25695
25696
#: serverguide/C/installation.xml:392(para)
25697
msgid ""
25698
"Also, if you did not install one of the tasks during the installation "
25699
"process, but for example you decide to make your new LAMP server a DNS "
25700
"server as well. Simply insert the installation CD and from a terminal:"
25701
msgstr ""
25702
"Also, if you did not install one of the tasks during the installation "
25703
"process, but for example you decide to make your new LAMP server a DNS "
25704
"server as well. Simply insert the installation CD and from a terminal:"
25705
25706
#: serverguide/C/installation.xml:397(command)
25707
msgid "sudo tasksel install dns-server"
25708
msgstr "sudo tasksel install dns-server"
25709
25710
#: serverguide/C/installation.xml:402(title)
25711
msgid "Upgrading"
25712
msgstr "Upgrading"
25713
25714
#: serverguide/C/installation.xml:403(para)
25715
msgid ""
25716
"There are several ways to upgrade from one Ubuntu release to another. This "
25717
"section gives an overview of the recommended upgrade method."
25718
msgstr ""
25719
"There are several ways to upgrade from one Ubuntu release to another. This "
25720
"section gives an overview of the recommended upgrade method."
25721
25722
#: serverguide/C/installation.xml:407(title) serverguide/C/installation.xml:422(command)
25723
msgid "do-release-upgrade"
25724
msgstr "do-release-upgrade"
25725
25726
#: serverguide/C/installation.xml:408(para)
25727
msgid ""
25728
"The recommended way to upgrade a Server Edition installation is to use the "
25729
"<application>do-release-upgrade</application> utility. Part of the "
25730
"<emphasis>update-manager-core</emphasis> package, it does not have any "
25731
"graphical dependencies and is installed by default."
25732
msgstr ""
25733
"The recommended way to upgrade a Server Edition installation is to use the "
25734
"<application>do-release-upgrade</application> utility. Part of the "
25735
"<emphasis>update-manager-core</emphasis> package, it does not have any "
25736
"graphical dependencies and is installed by default."
25737
25738
#: serverguide/C/installation.xml:413(para)
25739
msgid ""
25740
"Debian based systems can also be upgraded by using <command>apt-get dist-"
25741
"upgrade</command>. However, using <application>do-release-"
25742
"upgrade</application> is recommended because it has the ability to handle "
25743
"system configuration changes sometimes needed between releases."
25744
msgstr ""
25745
"Debian based systems can also be upgraded by using <command>apt-get dist-"
25746
"upgrade</command>. However, using <application>do-release-"
25747
"upgrade</application> is recommended because it has the ability to handle "
25748
"system configuration changes sometimes needed between releases."
25749
25750
#: serverguide/C/installation.xml:418(para)
25751
msgid "To upgrade to a newer release, from a terminal prompt enter:"
25752
msgstr "To upgrade to a newer release, from a terminal prompt enter:"
25753
25754
#: serverguide/C/installation.xml:424(para)
25755
msgid ""
25756
"It is also possible to use <application>do-release-upgrade</application> to "
25757
"upgrade to a development version of Ubuntu. To accomplish this use the "
25758
"<emphasis>-d</emphasis> switch:"
25759
msgstr ""
25760
"It is also possible to use <application>do-release-upgrade</application> to "
25761
"upgrade to a development version of Ubuntu. To accomplish this use the "
25762
"<emphasis>-d</emphasis> switch:"
25763
25764
#: serverguide/C/installation.xml:429(command)
25765
msgid "do-release-upgrade -d"
25766
msgstr "do-release-upgrade -d"
25767
25768
#: serverguide/C/installation.xml:432(para)
25769
msgid ""
25770
"Upgrading to a development release is <emphasis>not</emphasis> recommended "
25771
"for production environments."
25772
msgstr ""
25773
"Upgrading to a development release is <emphasis>not</emphasis> recommended "
25774
"for production environments."
25775
25776
#: serverguide/C/installation.xml:439(title)
25777
msgid "Advanced Installation"
25778
msgstr "Advanced Installation"
25779
25780
#: serverguide/C/installation.xml:442(title)
25781
msgid "Software RAID"
25782
msgstr "Software RAID"
25783
25784
#: serverguide/C/installation.xml:444(para)
25785
msgid ""
25786
"RAID is a method of configuring multiple hard drives to act as one, reducing "
25787
"the probability of catastrophic data loss in case of drive failure. RAID is "
25788
"implemented in either software (where the operating system knows about both "
25789
"drives and actively maintains both of them) or hardware (where a special "
25790
"controller makes the OS think there's only one drive and maintains the "
25791
"drives 'invisibly')."
25792
msgstr ""
25793
"RAID is a method of configuring multiple hard drives to act as one, reducing "
25794
"the probability of catastrophic data loss in case of drive failure. RAID is "
25795
"implemented in either software (where the operating system knows about both "
25796
"drives and actively maintains both of them) or hardware (where a special "
25797
"controller makes the OS think there's only one drive and maintains the "
25798
"drives 'invisibly')."
25799
25800
#: serverguide/C/installation.xml:451(para)
25801
msgid ""
25802
"The RAID software included with current versions of Linux (and Ubuntu) is "
25803
"based on the <application>'mdadm'</application> driver and works very well, "
25804
"better even than many so-called 'hardware' RAID controllers. This section "
25805
"will guide you through installing Ubuntu Server Edition using two RAID1 "
25806
"partitions on two physical hard drives, one for <emphasis>/</emphasis> and "
25807
"another for <emphasis>swap</emphasis>."
25808
msgstr ""
25809
"The RAID software included with current versions of Linux (and Ubuntu) is "
25810
"based on the <application>'mdadm'</application> driver and works very well, "
25811
"better even than many so-called 'hardware' RAID controllers. This section "
25812
"will guide you through installing Ubuntu Server Edition using two RAID1 "
25813
"partitions on two physical hard drives, one for <emphasis>/</emphasis> and "
25814
"another for <emphasis>swap</emphasis>."
25815
25816
#: serverguide/C/installation.xml:461(para) serverguide/C/installation.xml:975(para)
25817
msgid ""
25818
"Follow the installation steps until you get to the <emphasis>Partition "
25819
"disks</emphasis> step, then:"
25820
msgstr ""
25821
"Follow the installation steps until you get to the <emphasis>Partition "
25822
"disks</emphasis> step, then:"
25823
25824
#: serverguide/C/installation.xml:468(para)
25825
msgid "Select <emphasis>Manual</emphasis> as the partition method."
25826
msgstr "Select <emphasis>Manual</emphasis> as the partition method."
25827
25828
#: serverguide/C/installation.xml:475(para)
25829
msgid ""
25830
"Select the first hard drive, and agree to <emphasis>\"Create a new empty "
25831
"partition table on this device?\"</emphasis>."
25832
msgstr ""
25833
"Select the first hard drive, and agree to <emphasis>\"Create a new empty "
25834
"partition table on this device?\"</emphasis>."
25835
25836
#: serverguide/C/installation.xml:479(para)
25837
msgid ""
25838
"Repeat this step for each drive you wish to be part of the RAID array."
25839
msgstr ""
25840
"Repeat this step for each drive you wish to be part of the RAID array."
25841
25842
#: serverguide/C/installation.xml:486(para)
25843
msgid ""
25844
"Select the <emphasis>\"FREE SPACE\"</emphasis> on the first drive then "
25845
"select <emphasis>\"Create a new partition\"</emphasis>."
25846
msgstr ""
25847
"Select the <emphasis>\"FREE SPACE\"</emphasis> on the first drive then "
25848
"select <emphasis>\"Create a new partition\"</emphasis>."
25849
25850
#: serverguide/C/installation.xml:493(para)
25851
msgid ""
25852
"Next, select the <emphasis>Size</emphasis> of the partition. This partition "
25853
"will be the <emphasis>swap</emphasis> partition, and a general rule for swap "
25854
"size is twice that of RAM. Enter the partition size, then choose "
25855
"<emphasis>Primary</emphasis>, then <emphasis>Beginning</emphasis>."
25856
msgstr ""
25857
"Next, select the <emphasis>Size</emphasis> of the partition. This partition "
25858
"will be the <emphasis>swap</emphasis> partition, and a general rule for swap "
25859
"size is twice that of RAM. Enter the partition size, then choose "
25860
"<emphasis>Primary</emphasis>, then <emphasis>Beginning</emphasis>."
25861
25862
#: serverguide/C/installation.xml:502(para)
25863
msgid ""
25864
"Select the <emphasis>\"Use as:\"</emphasis> line at the top. By default this "
25865
"is <emphasis role=\"italic\">\"Ext4 journaling file system\"</emphasis>, "
25866
"change that to <emphasis>\"physical volume for RAID\"</emphasis> then "
25867
"<emphasis>\"Done setting up partition\"</emphasis>."
25868
msgstr ""
25869
"Select the <emphasis>\"Use as:\"</emphasis> line at the top. By default this "
25870
"is <emphasis role=\"italic\">\"Ext4 journaling file system\"</emphasis>, "
25871
"change that to <emphasis>\"physical volume for RAID\"</emphasis> then "
25872
"<emphasis>\"Done setting up partition\"</emphasis>."
25873
25874
#: serverguide/C/installation.xml:511(para)
25875
msgid ""
25876
"For the <emphasis>/</emphasis> partition once again select <emphasis>\"Free "
25877
"Space\"</emphasis> on the first drive then <emphasis>\"Create a new "
25878
"partition\"</emphasis>."
25879
msgstr ""
25880
"For the <emphasis>/</emphasis> partition once again select <emphasis>\"Free "
25881
"Space\"</emphasis> on the first drive then <emphasis>\"Create a new "
25882
"partition\"</emphasis>."
25883
25884
#: serverguide/C/installation.xml:519(para)
25885
msgid ""
25886
"Use the rest of the free space on the drive and choose "
25887
"<emphasis>Continue</emphasis>, then <emphasis>Primary</emphasis>."
25888
msgstr ""
25889
"Use the rest of the free space on the drive and choose "
25890
"<emphasis>Continue</emphasis>, then <emphasis>Primary</emphasis>."
25891
25892
#: serverguide/C/installation.xml:526(para)
25893
msgid ""
25894
"As with the swap partition, select the <emphasis>\"Use as:\"</emphasis> line "
25895
"at the top, changing it to <emphasis>\"physical volume for "
25896
"RAID\"</emphasis>. Also select the <emphasis>\"Bootable flag:\"</emphasis> "
25897
"line to change the value to <emphasis>\"on\"</emphasis>. Then choose "
25898
"<emphasis>\"Done setting up partition\"</emphasis>."
25899
msgstr ""
25900
"As with the swap partition, select the <emphasis>\"Use as:\"</emphasis> line "
25901
"at the top, changing it to <emphasis>\"physical volume for "
25902
"RAID\"</emphasis>. Also select the <emphasis>\"Bootable flag:\"</emphasis> "
25903
"line to change the value to <emphasis>\"on\"</emphasis>. Then choose "
25904
"<emphasis>\"Done setting up partition\"</emphasis>."
25905
25906
#: serverguide/C/installation.xml:536(para)
25907
msgid "Repeat steps three through eight for the other disk and partitions."
25908
msgstr "Repeat steps three through eight for the other disk and partitions."
25909
25910
#: serverguide/C/installation.xml:545(title)
25911
msgid "RAID Configuration"
25912
msgstr "RAID Configuration"
25913
25914
#: serverguide/C/installation.xml:547(para)
25915
msgid "With the partitions setup the arrays are ready to be configured:"
25916
msgstr "With the partitions setup the arrays are ready to be configured:"
25917
25918
#: serverguide/C/installation.xml:554(para)
25919
msgid ""
25920
"Back in the main \"Partition Disks\" page, select <emphasis>\"Configure "
25921
"Software RAID\"</emphasis> at the top."
25922
msgstr ""
25923
"Back in the main \"Partition Disks\" page, select <emphasis>\"Configure "
25924
"Software RAID\"</emphasis> at the top."
25925
25926
#: serverguide/C/installation.xml:561(para)
25927
msgid "Select <emphasis>\"yes\"</emphasis> to write the changes to disk."
25928
msgstr "Select <emphasis>\"yes\"</emphasis> to write the changes to disk."
25929
25930
#: serverguide/C/installation.xml:568(para)
25931
msgid "Choose <emphasis>\"Create MD device\"</emphasis>."
25932
msgstr "Choose <emphasis>\"Create MD device\"</emphasis>."
25933
25934
#: serverguide/C/installation.xml:575(para)
25935
msgid ""
25936
"For this example, select <emphasis>\"RAID1\"</emphasis>, but if you are "
25937
"using a different setup choose the appropriate type (RAID0 RAID1 RAID5)."
25938
msgstr ""
25939
"For this example, select <emphasis>\"RAID1\"</emphasis>, but if you are "
25940
"using a different setup choose the appropriate type (RAID0 RAID1 RAID5)."
25941
25942
#: serverguide/C/installation.xml:581(para)
25943
msgid ""
25944
"In order to use <emphasis>RAID5</emphasis> you need at least "
25945
"<emphasis>three</emphasis> drives. Using RAID0 or RAID1 only "
25946
"<emphasis>two</emphasis> drives are required."
25947
msgstr ""
25948
"In order to use <emphasis>RAID5</emphasis> you need at least "
25949
"<emphasis>three</emphasis> drives. Using RAID0 or RAID1 only "
25950
"<emphasis>two</emphasis> drives are required."
25951
25952
#: serverguide/C/installation.xml:590(para)
25953
msgid ""
25954
"Enter the number of active devices <emphasis>\"2\"</emphasis>, or the amount "
25955
"of hard drives you have, for the array. Then select "
25956
"<emphasis>\"Continue\"</emphasis>."
25957
msgstr ""
25958
"Enter the number of active devices <emphasis>\"2\"</emphasis>, or the amount "
25959
"of hard drives you have, for the array. Then select "
25960
"<emphasis>\"Continue\"</emphasis>."
25961
25962
#: serverguide/C/installation.xml:598(para)
25963
msgid ""
25964
"Next, enter the number of spare devices <emphasis>\"0\"</emphasis> by "
25965
"default, then choose <emphasis>\"Continue\"</emphasis>."
25966
msgstr ""
25967
"Next, enter the number of spare devices <emphasis>\"0\"</emphasis> by "
25968
"default, then choose <emphasis>\"Continue\"</emphasis>."
25969
25970
#: serverguide/C/installation.xml:605(para)
25971
msgid ""
25972
"Choose which partitions to use. Generally they will be sda1, sdb1, sdc1, "
25973
"etc. The numbers will usually match and the different letters correspond to "
25974
"different hard drives."
25975
msgstr ""
25976
"Choose which partitions to use. Generally they will be sda1, sdb1, sdc1, "
25977
"etc. The numbers will usually match and the different letters correspond to "
25978
"different hard drives."
25979
25980
#: serverguide/C/installation.xml:610(para)
25981
msgid ""
25982
"For the <emphasis>swap</emphasis> partition choose <emphasis>sda1</emphasis> "
25983
"and <emphasis>sdb1</emphasis>. Select <emphasis>\"Continue\"</emphasis> to "
25984
"go to the next step."
25985
msgstr ""
25986
"For the <emphasis>swap</emphasis> partition choose <emphasis>sda1</emphasis> "
25987
"and <emphasis>sdb1</emphasis>. Select <emphasis>\"Continue\"</emphasis> to "
25988
"go to the next step."
25989
25990
#: serverguide/C/installation.xml:618(para)
25991
msgid ""
25992
"Repeat steps <emphasis>three</emphasis> through <emphasis>seven</emphasis> "
25993
"for the <emphasis>/</emphasis> partition choosing <emphasis>sda2</emphasis> "
25994
"and <emphasis>sdb2</emphasis>."
25995
msgstr ""
25996
"Repeat steps <emphasis>three</emphasis> through <emphasis>seven</emphasis> "
25997
"for the <emphasis>/</emphasis> partition choosing <emphasis>sda2</emphasis> "
25998
"and <emphasis>sdb2</emphasis>."
25999
26000
#: serverguide/C/installation.xml:626(para)
26001
msgid "Once done select <emphasis>\"Finish\"</emphasis>."
26002
msgstr "Once done select <emphasis>\"Finish\"</emphasis>."
26003
26004
#: serverguide/C/installation.xml:636(title)
26005
msgid "Formatting"
26006
msgstr "Formatting"
26007
26008
#: serverguide/C/installation.xml:638(para)
26009
msgid ""
26010
"There should now be a list of hard drives and RAID devices. The next step is "
26011
"to format and set the mount point for the RAID devices. Treat the RAID "
26012
"device as a local hard drive, format and mount accordingly."
26013
msgstr ""
26014
"There should now be a list of hard drives and RAID devices. The next step is "
26015
"to format and set the mount point for the RAID devices. Treat the RAID "
26016
"device as a local hard drive, format and mount accordingly."
26017
26018
#: serverguide/C/installation.xml:646(para)
26019
msgid ""
26020
"Select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
26021
"#0\"</emphasis> partition."
26022
msgstr ""
26023
"Select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
26024
"#0\"</emphasis> partition."
26025
26026
#: serverguide/C/installation.xml:653(para)
26027
msgid ""
26028
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"swap "
26029
"area\"</emphasis>, then <emphasis>\"Done setting up partition\"</emphasis>."
26030
msgstr ""
26031
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"swap "
26032
"area\"</emphasis>, then <emphasis>\"Done setting up partition\"</emphasis>."
26033
26034
#: serverguide/C/installation.xml:661(para)
26035
msgid ""
26036
"Next, select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
26037
"#1\"</emphasis> partition."
26038
msgstr ""
26039
"Next, select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
26040
"#1\"</emphasis> partition."
26041
26042
#: serverguide/C/installation.xml:668(para)
26043
msgid ""
26044
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"Ext4 "
26045
"journaling file system\"</emphasis>."
26046
msgstr ""
26047
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"Ext4 "
26048
"journaling file system\"</emphasis>."
26049
26050
#: serverguide/C/installation.xml:675(para)
26051
msgid ""
26052
"Then select the <emphasis>\"Mount point\"</emphasis> and choose "
26053
"<emphasis>\"/ - the root file system\"</emphasis>. Change any of the other "
26054
"options as appropriate, then select <emphasis>\"Done setting up "
26055
"partition\"</emphasis>."
26056
msgstr ""
26057
"Then select the <emphasis>\"Mount point\"</emphasis> and choose "
26058
"<emphasis>\"/ - the root file system\"</emphasis>. Change any of the other "
26059
"options as appropriate, then select <emphasis>\"Done setting up "
26060
"partition\"</emphasis>."
26061
26062
#: serverguide/C/installation.xml:683(para)
26063
msgid ""
26064
"Finally, select <emphasis>\"Finish partitioning and write changes to "
26065
"disk\"</emphasis>."
26066
msgstr ""
26067
"Finally, select <emphasis>\"Finish partitioning and write changes to "
26068
"disk\"</emphasis>."
26069
26070
#: serverguide/C/installation.xml:690(para)
26071
msgid ""
26072
"If you choose to place the root partition on a RAID array, the installer "
26073
"will then ask if you would like to boot in a <emphasis>degraded</emphasis> "
26074
"state. See <xref linkend=\"raid-degraded\"/> for further details."
26075
msgstr ""
26076
"If you choose to place the root partition on a RAID array, the installer "
26077
"will then ask if you would like to boot in a <emphasis>degraded</emphasis> "
26078
"state. See <xref linkend=\"raid-degraded\"/> for further details."
26079
26080
#: serverguide/C/installation.xml:695(para)
26081
msgid "The installation process will then continue normally."
26082
msgstr "The installation process will then continue normally."
26083
26084
#: serverguide/C/installation.xml:701(title)
26085
msgid "Degraded RAID"
26086
msgstr "Degraded RAID"
26087
26088
#: serverguide/C/installation.xml:703(para)
26089
msgid ""
26090
"At some point in the life of the computer a disk failure event may occur. "
26091
"When this happens, using Software RAID, the operating system will place the "
26092
"array into what is known as a <emphasis>degraded</emphasis> state."
26093
msgstr ""
26094
"At some point in the life of the computer a disk failure event may occur. "
26095
"When this happens, using Software RAID, the operating system will place the "
26096
"array into what is known as a <emphasis>degraded</emphasis> state."
26097
26098
#: serverguide/C/installation.xml:708(para)
26099
msgid ""
26100
"If the array has become degraded, due to the chance of data corruption, by "
26101
"default Ubuntu Server Edition will boot to <emphasis>initramfs</emphasis> "
26102
"after thirty seconds. Once the initramfs has booted there is a fifteen "
26103
"second prompt giving you the option to go ahead and boot the system, or "
26104
"attempt manual recover. Booting to the initramfs prompt may or may not be "
26105
"the desired behavior, especially if the machine is in a remote location. "
26106
"Booting to a degraded array can be configured several ways:"
26107
msgstr ""
26108
"If the array has become degraded, due to the chance of data corruption, by "
26109
"default Ubuntu Server Edition will boot to <emphasis>initramfs</emphasis> "
26110
"after thirty seconds. Once the initramfs has booted there is a fifteen "
26111
"second prompt giving you the option to go ahead and boot the system, or "
26112
"attempt manual recover. Booting to the initramfs prompt may or may not be "
26113
"the desired behaviour, especially if the machine is in a remote location. "
26114
"Booting to a degraded array can be configured several ways:"
26115
26116
#: serverguide/C/installation.xml:719(para)
26117
msgid ""
26118
"The <application>dpkg-reconfigure</application> utility can be used to "
26119
"configure the default behavior, and during the process you will be queried "
26120
"about additional settings related to the array. Such as monitoring, email "
26121
"alerts, etc. To reconfigure <application>mdadm</application> enter the "
26122
"following:"
26123
msgstr ""
26124
"The <application>dpkg-reconfigure</application> utility can be used to "
26125
"configure the default behaviour, and during the process you will be queried "
26126
"about additional settings related to the array. Such as monitoring, e-mail "
26127
"alerts, etc. To reconfigure <application>mdadm</application> enter the "
26128
"following:"
26129
26130
#: serverguide/C/installation.xml:726(command)
26131
msgid "sudo dpkg-reconfigure mdadm"
26132
msgstr "sudo dpkg-reconfigure mdadm"
26133
26134
#: serverguide/C/installation.xml:732(para)
26135
msgid ""
26136
"The <command>dpkg-reconfigure mdadm</command> process will change the "
26137
"<filename>/etc/initramfs-tools/conf.d/mdadm</filename> configuration file. "
26138
"The file has the advantage of being able to pre-configure the system's "
26139
"behavior, and can also be manually edited:"
26140
msgstr ""
26141
"The <command>dpkg-reconfigure mdadm</command> process will change the "
26142
"<filename>/etc/initramfs-tools/conf.d/mdadm</filename> configuration file. "
26143
"The file has the advantage of being able to pre-configure the system's "
26144
"behaviour, and can also be manually edited:"
26145
26146
#: serverguide/C/installation.xml:738(programlisting)
26147
#, no-wrap
26148
msgid ""
26149
"\n"
26150
"BOOT_DEGRADED=true\n"
26151
msgstr ""
26152
"\n"
26153
"BOOT_DEGRADED=true\n"
26154
26155
#: serverguide/C/installation.xml:743(para)
26156
msgid "The configuration file can be overridden by using a Kernel argument."
26157
msgstr "The configuration file can be overridden by using a Kernel argument."
26158
26159
#: serverguide/C/installation.xml:751(para)
26160
msgid ""
26161
"Using a Kernel argument will allow the system to boot to a degraded array as "
26162
"well:"
26163
msgstr ""
26164
"Using a Kernel argument will allow the system to boot to a degraded array as "
26165
"well:"
26166
26167
#: serverguide/C/installation.xml:757(para)
26168
msgid ""
26169
"When the server is booting press <keycap>Shift</keycap> to open the "
26170
"<application>Grub</application> menu."
26171
msgstr ""
26172
26173
#: serverguide/C/installation.xml:762(para)
26174
msgid "Press <keycap>e</keycap> to edit your kernel command options."
26175
msgstr ""
26176
26177
#: serverguide/C/installation.xml:767(para)
26178
msgid "Press the <keycap>down</keycap> arrow to highlight the kernel line."
26179
msgstr ""
26180
26181
#: serverguide/C/installation.xml:772(para)
26182
msgid ""
26183
"Add <emphasis>\"bootdegraded=true\"</emphasis> (without the quotes) to the "
26184
"end of the line."
26185
msgstr ""
26186
"Add <emphasis>\"bootdegraded=true\"</emphasis> (without the quotes) to the "
26187
"end of the line."
26188
26189
#: serverguide/C/installation.xml:777(para)
26190
msgid ""
26191
"Press <keycombo><keycap>Ctrl</keycap><keycap>x</keycap></keycombo> to boot "
26192
"the system."
26193
msgstr ""
26194
26195
#: serverguide/C/installation.xml:786(para)
26196
msgid ""
26197
"Once the system has booted you can either repair the array see <xref "
26198
"linkend=\"raid-maintenance\"/> for details, or copy important data to "
26199
"another machine due to major hardware failure."
26200
msgstr ""
26201
"Once the system has booted you can either repair the array see <xref "
26202
"linkend=\"raid-maintenance\"/> for details, or copy important data to "
26203
"another machine due to major hardware failure."
26204
26205
#: serverguide/C/installation.xml:793(title)
26206
msgid "RAID Maintenance"
26207
msgstr "RAID Maintenance"
26208
26209
#: serverguide/C/installation.xml:795(para)
26210
msgid ""
26211
"The <application>mdadm</application> utility can be used to view the status "
26212
"of an array, add disks to an array, remove disks, etc:"
26213
msgstr ""
26214
"The <application>mdadm</application> utility can be used to view the status "
26215
"of an array, add disks to an array, remove disks, etc:"
26216
26217
#: serverguide/C/installation.xml:802(para)
26218
msgid "To view the status of an array, from a terminal prompt enter:"
26219
msgstr "To view the status of an array, from a terminal prompt enter:"
26220
26221
#: serverguide/C/installation.xml:806(command)
26222
msgid "sudo mdadm -D /dev/md0"
26223
msgstr "sudo mdadm -D /dev/md0"
26224
26225
#: serverguide/C/installation.xml:809(para)
26226
msgid ""
26227
"The <emphasis>-D</emphasis> tells <application>mdadm</application> to "
26228
"display <emphasis>detailed</emphasis> information about the "
26229
"<filename>/dev/md0</filename> device. Replace <filename>/dev/md0</filename> "
26230
"with the appropriate RAID device."
26231
msgstr ""
26232
"The <emphasis>-D</emphasis> tells <application>mdadm</application> to "
26233
"display <emphasis>detailed</emphasis> information about the "
26234
"<filename>/dev/md0</filename> device. Replace <filename>/dev/md0</filename> "
26235
"with the appropriate RAID device."
26236
26237
#: serverguide/C/installation.xml:815(para)
26238
msgid "To view the status of a disk in an array:"
26239
msgstr "To view the status of a disk in an array:"
26240
26241
#: serverguide/C/installation.xml:819(command)
26242
msgid "sudo mdadm -E /dev/sda1"
26243
msgstr "sudo mdadm -E /dev/sda1"
26244
26245
#: serverguide/C/installation.xml:821(para)
26246
msgid ""
26247
"The output if very similar to the <command>mdadm -D</command> command, "
26248
"adjust <filename>/dev/sda1</filename> for each disk."
26249
msgstr ""
26250
"The output if very similar to the <command>mdadm -D</command> command, "
26251
"adjust <filename>/dev/sda1</filename> for each disk."
26252
26253
#: serverguide/C/installation.xml:826(para)
26254
msgid "If a disk fails and needs to be removed from an array enter:"
26255
msgstr "If a disk fails and needs to be removed from an array enter:"
26256
26257
#: serverguide/C/installation.xml:830(command)
26258
msgid "sudo mdadm --remove /dev/md0 /dev/sda1"
26259
msgstr "sudo mdadm --remove /dev/md0 /dev/sda1"
26260
26261
#: serverguide/C/installation.xml:832(para)
26262
msgid ""
26263
"Change <filename>/dev/md0</filename> and <filename>/dev/sda1</filename> to "
26264
"the appropriate RAID device and disk."
26265
msgstr ""
26266
"Change <filename>/dev/md0</filename> and <filename>/dev/sda1</filename> to "
26267
"the appropriate RAID device and disk."
26268
26269
#: serverguide/C/installation.xml:837(para)
26270
msgid "Similarly, to add a new disk:"
26271
msgstr "Similarly, to add a new disk:"
26272
26273
#: serverguide/C/installation.xml:841(command)
26274
msgid "sudo mdadm --add /dev/md0 /dev/sda1"
26275
msgstr "sudo mdadm --add /dev/md0 /dev/sda1"
26276
26277
#: serverguide/C/installation.xml:846(para)
26278
msgid ""
26279
"Sometimes a disk can change to a <emphasis>faulty</emphasis> state even "
26280
"though there is nothing physically wrong with the drive. It is usually "
26281
"worthwhile to remove the drive from the array then re-add it. This will "
26282
"cause the drive to re-sync with the array. If the drive will not sync with "
26283
"the array, it is a good indication of hardware failure."
26284
msgstr ""
26285
"Sometimes a disk can change to a <emphasis>faulty</emphasis> state even "
26286
"though there is nothing physically wrong with the drive. It is usually "
26287
"worthwhile to remove the drive from the array then re-add it. This will "
26288
"cause the drive to re-sync with the array. If the drive will not sync with "
26289
"the array, it is a good indication of hardware failure."
26290
26291
#: serverguide/C/installation.xml:852(para)
26292
msgid ""
26293
"The <filename>/proc/mdstat</filename> file also contains useful information "
26294
"about the system's RAID devices:"
26295
msgstr ""
26296
"The <filename>/proc/mdstat</filename> file also contains useful information "
26297
"about the system's RAID devices:"
26298
26299
#: serverguide/C/installation.xml:857(command)
26300
msgid "cat /proc/mdstat"
26301
msgstr "cat /proc/mdstat"
26302
26303
#: serverguide/C/installation.xml:858(computeroutput)
26304
#, no-wrap
26305
msgid ""
26306
"Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] "
26307
"[raid10] \n"
26308
"md0 : active raid1 sda1[0] sdb1[1]\n"
26309
" 10016384 blocks [2/2] [UU]\n"
26310
" \n"
26311
"unused devices: <none>"
26312
msgstr ""
26313
"Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] "
26314
"[raid10] \n"
26315
"md0 : active raid1 sda1[0] sdb1[1]\n"
26316
" 10016384 blocks [2/2] [UU]\n"
26317
" \n"
26318
"unused devices: <none>"
26319
26320
#: serverguide/C/installation.xml:865(para)
26321
msgid ""
26322
"The following command is great for watching the status of a syncing drive:"
26323
msgstr ""
26324
"The following command is great for watching the status of a syncing drive:"
26325
26326
#: serverguide/C/installation.xml:870(command)
26327
msgid "watch -n1 cat /proc/mdstat"
26328
msgstr "watch -n1 cat /proc/mdstat"
26329
26330
#: serverguide/C/installation.xml:873(para)
26331
msgid ""
26332
"Press <emphasis>Ctrl+c</emphasis> to stop the "
26333
"<application>watch</application> command."
26334
msgstr ""
26335
"Press <emphasis>Ctrl+c</emphasis> to stop the "
26336
"<application>watch</application> command."
26337
26338
#: serverguide/C/installation.xml:877(para)
26339
msgid ""
26340
"If you do need to replace a faulty drive, after the drive has been replaced "
26341
"and synced, <application>grub</application> will need to be installed. To "
26342
"install <application>grub</application> on the new drive, enter the "
26343
"following:"
26344
msgstr ""
26345
"If you do need to replace a faulty drive, after the drive has been replaced "
26346
"and synced, <application>grub</application> will need to be installed. To "
26347
"install <application>grub</application> on the new drive, enter the "
26348
"following:"
26349
26350
#: serverguide/C/installation.xml:883(command)
26351
msgid "sudo grub-install /dev/md0"
26352
msgstr "sudo grub-install /dev/md0"
26353
26354
#: serverguide/C/installation.xml:886(para)
26355
msgid ""
26356
"Replace <filename>/dev/md0</filename> with the appropriate array device name."
26357
msgstr ""
26358
"Replace <filename>/dev/md0</filename> with the appropriate array device name."
26359
26360
#: serverguide/C/installation.xml:894(para)
26361
msgid ""
26362
"The topic of RAID arrays is a complex one due to the plethora of ways RAID "
26363
"can be configured. Please see the following links for more information:"
26364
msgstr ""
26365
"The topic of RAID arrays is a complex one due to the plethora of ways RAID "
26366
"can be configured. Please see the following links for more information:"
26367
26368
#: serverguide/C/installation.xml:901(para)
26369
msgid ""
26370
"<ulink url=\"https://help.ubuntu.com/community/Installation#raid\">Ubuntu "
26371
"Wiki Articles on RAID</ulink>."
26372
msgstr ""
26373
26374
#: serverguide/C/installation.xml:907(ulink)
26375
msgid "Software RAID HOWTO"
26376
msgstr "Software RAID HOWTO"
26377
26378
#: serverguide/C/installation.xml:912(ulink)
26379
msgid "Managing RAID on Linux"
26380
msgstr "Managing RAID on Linux"
26381
26382
#: serverguide/C/installation.xml:919(title)
26383
msgid "Logical Volume Manager (LVM)"
26384
msgstr "Logical Volume Manager (LVM)"
26385
26386
#: serverguide/C/installation.xml:921(para)
26387
msgid ""
26388
"Logical Volume Manger, or <emphasis>LVM</emphasis>, allows administrators to "
26389
"create <emphasis>logical</emphasis> volumes out of one or multiple physical "
26390
"hard disks. LVM volumes can be created on both software RAID partitions and "
26391
"standard partitions residing on a single disk. Volumes can also be extended, "
26392
"giving greater flexibility to systems as requirements change."
26393
msgstr ""
26394
"Logical Volume Manger, or <emphasis>LVM</emphasis>, allows administrators to "
26395
"create <emphasis>logical</emphasis> volumes out of one or multiple physical "
26396
"hard disks. LVM volumes can be created on both software RAID partitions and "
26397
"standard partitions residing on a single disk. Volumes can also be extended, "
26398
"giving greater flexibility to systems as requirements change."
26399
26400
#: serverguide/C/installation.xml:930(para)
26401
msgid ""
26402
"A side effect of LVM's power and flexibility is a greater degree of "
26403
"complication. Before diving into the LVM installation process, it is best to "
26404
"get familiar with some terms."
26405
msgstr ""
26406
"A side effect of LVM's power and flexibility is a greater degree of "
26407
"complication. Before diving into the LVM installation process, it is best to "
26408
"get familiar with some terms."
26409
26410
#: serverguide/C/installation.xml:937(para)
26411
msgid ""
26412
"<emphasis>Volume Group (VG):</emphasis> contains one or several Logical "
26413
"Volumes (LV)."
26414
msgstr ""
26415
"<emphasis>Volume Group (VG):</emphasis> contains one or several Logical "
26416
"Volumes (LV)."
26417
26418
#: serverguide/C/installation.xml:942(para)
26419
msgid ""
26420
"<emphasis>Logical Volume (LV):</emphasis> is similar to a partition in a non-"
26421
"LVM system. Multiple Physical Volumes (PV) can make up one LV, on top of "
26422
"which resides the actual EXT3, XFS, JFS, etc filesystem."
26423
msgstr ""
26424
"<emphasis>Logical Volume (LV):</emphasis> is similar to a partition in a non-"
26425
"LVM system. Multiple Physical Volumes (PV) can make up one LV, on top of "
26426
"which resides the actual EXT3, XFS, JFS, etc filesystem."
26427
26428
#: serverguide/C/installation.xml:948(para)
26429
msgid ""
26430
"<emphasis>Physical Volume (PV):</emphasis> physical hard disk or software "
26431
"RAID partition. The Volume Group can be extended by adding more PVs."
26432
msgstr ""
26433
"<emphasis>Physical Volume (PV):</emphasis> physical hard disk or software "
26434
"RAID partition. The Volume Group can be extended by adding more PVs."
26435
26436
#: serverguide/C/installation.xml:959(para)
26437
msgid ""
26438
"As an example this section covers installing Ubuntu Server Edition with "
26439
"<filename role=\"directory\">/srv</filename> mounted on a LVM volume. During "
26440
"the initial install only one Physical Volume (PV) will be part of the Volume "
26441
"Group (VG). Another PV will be added after install to demonstrate how a VG "
26442
"can be extended."
26443
msgstr ""
26444
"As an example this section covers installing Ubuntu Server Edition with "
26445
"<filename role=\"directory\">/srv</filename> mounted on a LVM volume. During "
26446
"the initial install only one Physical Volume (PV) will be part of the Volume "
26447
"Group (VG). Another PV will be added after install to demonstrate how a VG "
26448
"can be extended."
26449
26450
#: serverguide/C/installation.xml:965(para)
26451
msgid ""
26452
"There are several installation options for LVM, <emphasis>\"Guided - use the "
26453
"entire disk and setup LVM\"</emphasis> which will also allow you to assign a "
26454
"portion of the available space to LVM, <emphasis>\"Guided - use entire and "
26455
"setup encrypted LVM\"</emphasis>, or <emphasis>Manually</emphasis> setup the "
26456
"partitions and configure LVM. At this time the only way to configure a "
26457
"system with both LVM and standard partitions, during installation, is to use "
26458
"the Manual approach."
26459
msgstr ""
26460
"There are several installation options for LVM, <emphasis>\"Guided - use the "
26461
"entire disk and setup LVM\"</emphasis> which will also allow you to assign a "
26462
"portion of the available space to LVM, <emphasis>\"Guided - use entire and "
26463
"setup encrypted LVM\"</emphasis>, or <emphasis>Manually</emphasis> setup the "
26464
"partitions and configure LVM. At this time the only way to configure a "
26465
"system with both LVM and standard partitions, during installation, is to use "
26466
"the Manual approach."
26467
26468
#: serverguide/C/installation.xml:982(para)
26469
msgid ""
26470
"At the <emphasis>\"Partition Disks</emphasis> screen choose "
26471
"<emphasis>\"Manual\"</emphasis>."
26472
msgstr ""
26473
"At the <emphasis>\"Partition Disks</emphasis> screen choose "
26474
"<emphasis>\"Manual\"</emphasis>."
26475
26476
#: serverguide/C/installation.xml:989(para)
26477
msgid ""
26478
"Select the hard disk and on the next screen choose \"yes\" to "
26479
"<emphasis>\"Create a new empty partition table on this device\"</emphasis>."
26480
msgstr ""
26481
"Select the hard disk and on the next screen choose \"yes\" to "
26482
"<emphasis>\"Create a new empty partition table on this device\"</emphasis>."
26483
26484
#: serverguide/C/installation.xml:996(para)
26485
msgid ""
26486
"Next, create standard <emphasis>/boot</emphasis>, <emphasis>swap</emphasis>, "
26487
"and <emphasis>/</emphasis> partitions with whichever filesystem you prefer."
26488
msgstr ""
26489
"Next, create standard <emphasis>/boot</emphasis>, <emphasis>swap</emphasis>, "
26490
"and <emphasis>/</emphasis> partitions with whichever filesystem you prefer."
26491
26492
#: serverguide/C/installation.xml:1004(para)
26493
msgid ""
26494
"For the LVM <emphasis>/srv</emphasis>, create a new "
26495
"<emphasis>Logical</emphasis> partition. Then change <emphasis>\"Use "
26496
"as\"</emphasis> to <emphasis>\"physical volume for LVM\"</emphasis> then "
26497
"<emphasis>\"Done setting up the partition\"</emphasis>."
26498
msgstr ""
26499
"For the LVM <emphasis>/srv</emphasis>, create a new "
26500
"<emphasis>Logical</emphasis> partition. Then change <emphasis>\"Use "
26501
"as\"</emphasis> to <emphasis>\"physical volume for LVM\"</emphasis> then "
26502
"<emphasis>\"Done setting up the partition\"</emphasis>."
26503
26504
#: serverguide/C/installation.xml:1012(para)
26505
msgid ""
26506
"Now select <emphasis>\"Configure the Logical Volume Manager\"</emphasis> at "
26507
"the top, and choose <emphasis>\"Yes\"</emphasis> to write the changes to "
26508
"disk."
26509
msgstr ""
26510
"Now select <emphasis>\"Configure the Logical Volume Manager\"</emphasis> at "
26511
"the top, and choose <emphasis>\"Yes\"</emphasis> to write the changes to "
26512
"disk."
26513
26514
#: serverguide/C/installation.xml:1020(para)
26515
msgid ""
26516
"For the <emphasis>\"LVM configuration action\"</emphasis> on the next "
26517
"screen, choose <emphasis>\"Create volume group\"</emphasis>. Enter a name "
26518
"for the VG such as <emphasis>vg01</emphasis>, or something more descriptive. "
26519
"After entering a name, select the partition configured for LVM, and choose "
26520
"<emphasis>\"Continue\"</emphasis>."
26521
msgstr ""
26522
"For the <emphasis>\"LVM configuration action\"</emphasis> on the next "
26523
"screen, choose <emphasis>\"Create volume group\"</emphasis>. Enter a name "
26524
"for the VG such as <emphasis>vg01</emphasis>, or something more descriptive. "
26525
"After entering a name, select the partition configured for LVM, and choose "
26526
"<emphasis>\"Continue\"</emphasis>."
26527
26528
#: serverguide/C/installation.xml:1029(para)
26529
msgid ""
26530
"Back at the <emphasis>\"LVM configuration action\"</emphasis> screen, select "
26531
"<emphasis>\"Create logical volume\"</emphasis>. Select the newly created "
26532
"volume group, and enter a name for the new LV, for example "
26533
"<emphasis>srv</emphasis> since that is the intended mount point. Then choose "
26534
"a size, which may be the full partition because it can always be extended "
26535
"later. Choose <emphasis>\"Finish\"</emphasis> and you should be back at the "
26536
"main <emphasis>\"Partition Disks\"</emphasis> screen."
26537
msgstr ""
26538
"Back at the <emphasis>\"LVM configuration action\"</emphasis> screen, select "
26539
"<emphasis>\"Create logical volume\"</emphasis>. Select the newly created "
26540
"volume group, and enter a name for the new LV, for example "
26541
"<emphasis>srv</emphasis> since that is the intended mount point. Then choose "
26542
"a size, which may be the full partition because it can always be extended "
26543
"later. Choose <emphasis>\"Finish\"</emphasis> and you should be back at the "
26544
"main <emphasis>\"Partition Disks\"</emphasis> screen."
26545
26546
#: serverguide/C/installation.xml:1039(para)
26547
msgid ""
26548
"Now add a filesystem to the new LVM. Select the partition under "
26549
"<emphasis>\"LVM VG vg01, LV srv\"</emphasis>, or whatever name you have "
26550
"chosen, the choose <emphasis>Use as</emphasis>. Setup a file system as "
26551
"normal selecting <emphasis>/srv</emphasis> as the mount point. Once done, "
26552
"select <emphasis>\"Done setting up the partition\"</emphasis>."
26553
msgstr ""
26554
"Now add a filesystem to the new LVM. Select the partition under "
26555
"<emphasis>\"LVM VG vg01, LV srv\"</emphasis>, or whatever name you have "
26556
"chosen, the choose <emphasis>Use as</emphasis>. Setup a file system as "
26557
"normal selecting <emphasis>/srv</emphasis> as the mount point. Once done, "
26558
"select <emphasis>\"Done setting up the partition\"</emphasis>."
26559
26560
#: serverguide/C/installation.xml:1048(para)
26561
msgid ""
26562
"Finally, select <emphasis>\"Finish partitioning and write changes to "
26563
"disk\"</emphasis>. Then confirm the changes and continue with the rest of "
26564
"the installation."
26565
msgstr ""
26566
"Finally, select <emphasis>\"Finish partitioning and write changes to "
26567
"disk\"</emphasis>. Then confirm the changes and continue with the rest of "
26568
"the installation."
26569
26570
#: serverguide/C/installation.xml:1056(para)
26571
msgid "There are some useful utilities to view information about LVM:"
26572
msgstr "There are some useful utilities to view information about LVM:"
26573
26574
#: serverguide/C/installation.xml:1061(para)
26575
msgid ""
26576
"<emphasis>vgdisplay:</emphasis> shows information about Volume Groups."
26577
msgstr ""
26578
"<emphasis>vgdisplay:</emphasis> shows information about Volume Groups."
26579
26580
#: serverguide/C/installation.xml:1062(para)
26581
msgid ""
26582
"<emphasis>lvdisplay:</emphasis> has information about Logical Volumes."
26583
msgstr ""
26584
"<emphasis>lvdisplay:</emphasis> has information about Logical Volumes."
26585
26586
#: serverguide/C/installation.xml:1063(para)
26587
msgid ""
26588
"<emphasis>pvdisplay:</emphasis> similarly displays information about "
26589
"Physical Volumes."
26590
msgstr ""
26591
"<emphasis>pvdisplay:</emphasis> similarly displays information about "
26592
"Physical Volumes."
26593
26594
#: serverguide/C/installation.xml:1068(title)
26595
msgid "Extending Volume Groups"
26596
msgstr "Extending Volume Groups"
26597
26598
#: serverguide/C/installation.xml:1070(para)
26599
msgid ""
26600
"Continuing with <emphasis>srv</emphasis> as an LVM volume example, this "
26601
"section covers adding a second hard disk, creating a Physical Volume (PV), "
26602
"adding it to the volume group (VG), extending the logical volume <filename "
26603
"role=\"directory\">srv</filename> and finally extending the filesystem. This "
26604
"example assumes a second hard disk has been added to the system. This hard "
26605
"disk will be named <filename>/dev/sdb</filename> in our example. BEWARE: "
26606
"make sure you don't already have an existing <filename>/dev/sdb</filename> "
26607
"before issuing the commands below. You could lose some data if you issue "
26608
"those commands on a non-empty disk. In our example we will use the entire "
26609
"disk as a physical volume (you could choose to create partitions and use "
26610
"them as different physical volumes)"
26611
msgstr ""
26612
"Continuing with <emphasis>srv</emphasis> as an LVM volume example, this "
26613
"section covers adding a second hard disk, creating a Physical Volume (PV), "
26614
"adding it to the volume group (VG), extending the logical volume <filename "
26615
"role=\"directory\">srv</filename> and finally extending the filesystem. This "
26616
"example assumes a second hard disk has been added to the system. This hard "
26617
"disk will be named <filename>/dev/sdb</filename> in our example. BEWARE: "
26618
"make sure you don't already have an existing <filename>/dev/sdb</filename> "
26619
"before issuing the commands below. You could lose some data if you issue "
26620
"those commands on a non-empty disk. In our example we will use the entire "
26621
"disk as a physical volume (you could choose to create partitions and use "
26622
"them as different physical volumes)"
26623
26624
#: serverguide/C/installation.xml:1082(para)
26625
msgid "First, create the physical volume, in a terminal execute:"
26626
msgstr "First, create the physical volume, in a terminal execute:"
26627
26628
#: serverguide/C/installation.xml:1087(command)
26629
msgid "sudo pvcreate /dev/sdb"
26630
msgstr "sudo pvcreate /dev/sdb"
26631
26632
#: serverguide/C/installation.xml:1093(para)
26633
msgid "Now extend the Volume Group (VG):"
26634
msgstr "Now extend the Volume Group (VG):"
26635
26636
#: serverguide/C/installation.xml:1098(command)
26637
msgid "sudo vgextend vg01 /dev/sdb"
26638
msgstr "sudo vgextend vg01 /dev/sdb"
26639
26640
#: serverguide/C/installation.xml:1104(para)
26641
msgid ""
26642
"Use <application>vgdisplay</application> to find out the free physical "
26643
"extents - Free PE / size (the size you can allocate). We will assume a free "
26644
"size of 511 PE (equivalent to 2GB with a PE size of 4MB) and we will use the "
26645
"whole free space available. Use your own PE and/or free space."
26646
msgstr ""
26647
"Use <application>vgdisplay</application> to find out the free physical "
26648
"extents - Free PE / size (the size you can allocate). We will assume a free "
26649
"size of 511 PE (equivalent to 2GB with a PE size of 4MB) and we will use the "
26650
"whole free space available. Use your own PE and/or free space."
26651
26652
#: serverguide/C/installation.xml:1110(para)
26653
msgid ""
26654
"The Logical Volume (LV) can now be extended by different methods, we will "
26655
"only see how to use the PE to extend the LV:"
26656
msgstr ""
26657
"The Logical Volume (LV) can now be extended by different methods, we will "
26658
"only see how to use the PE to extend the LV:"
26659
26660
#: serverguide/C/installation.xml:1115(command)
26661
msgid "sudo lvextend /dev/vg01/srv -l +511"
26662
msgstr "sudo lvextend /dev/vg01/srv -l +511"
26663
26664
#: serverguide/C/installation.xml:1118(para)
26665
msgid ""
26666
"The <emphasis>-l</emphasis> option allows the LV to be extended using PE. "
26667
"The <emphasis>-L</emphasis> option allows the LV to be extended using Meg, "
26668
"Gig, Tera, etc bytes."
26669
msgstr ""
26670
"The <emphasis>-l</emphasis> option allows the LV to be extended using PE. "
26671
"The <emphasis>-L</emphasis> option allows the LV to be extended using Meg, "
26672
"Gig, Tera, etc bytes."
26673
26674
#: serverguide/C/installation.xml:1126(para)
26675
msgid ""
26676
"Even though you are supposed to be able to <emphasis>expand</emphasis> an "
26677
"ext3 or ext4 filesystem without unmounting it first, it may be a good "
26678
"practice to unmount it anyway and check the filesystem, so that you don't "
26679
"mess up the day you want to reduce a logical volume (in that case unmounting "
26680
"first is compulsory)."
26681
msgstr ""
26682
26683
#: serverguide/C/installation.xml:1132(para)
26684
msgid ""
26685
"The following commands are for an <emphasis>EXT3</emphasis> or "
26686
"<emphasis>EXT4</emphasis> filesystem. If you are using another filesystem "
26687
"there may be other utilities available."
26688
msgstr ""
26689
"The following commands are for an <emphasis>EXT3</emphasis> or "
26690
"<emphasis>EXT4</emphasis> filesystem. If you are using another filesystem "
26691
"there may be other utilities available."
26692
26693
#: serverguide/C/installation.xml:1139(command)
26694
msgid "sudo e2fsck -f /dev/vg01/srv"
26695
msgstr "sudo e2fsck -f /dev/vg01/srv"
26696
26697
#: serverguide/C/installation.xml:1142(para)
26698
msgid ""
26699
"The <emphasis>-f</emphasis> option of <application>e2fsck</application> "
26700
"forces checking even if the system seems clean."
26701
msgstr ""
26702
"The <emphasis>-f</emphasis> option of <application>e2fsck</application> "
26703
"forces checking even if the system seems clean."
26704
26705
#: serverguide/C/installation.xml:1149(para)
26706
msgid "Finally, resize the filesystem:"
26707
msgstr "Finally, resize the filesystem:"
26708
26709
#: serverguide/C/installation.xml:1154(command)
26710
msgid "sudo resize2fs /dev/vg01/srv"
26711
msgstr "sudo resize2fs /dev/vg01/srv"
26712
26713
#: serverguide/C/installation.xml:1160(para)
26714
msgid "Now mount the partition and check its size."
26715
msgstr "Now mount the partition and check its size."
26716
26717
#: serverguide/C/installation.xml:1165(command)
26718
msgid "mount /dev/vg01/srv /srv && df -h /srv"
26719
msgstr "mount /dev/vg01/srv /srv && df -h /srv"
26720
26721
#: serverguide/C/installation.xml:1177(para)
26722
msgid ""
26723
"See the <ulink "
26724
"url=\"https://help.ubuntu.com/community/Installation#lvm\">Ubuntu Wiki LVM "
26725
"Articles</ulink>."
26726
msgstr ""
26727
26728
#: serverguide/C/installation.xml:1182(para)
26729
msgid ""
26730
"See the <ulink url=\"http://tldp.org/HOWTO/LVM-HOWTO/index.html\">LVM "
26731
"HOWTO</ulink> for more information."
26732
msgstr ""
26733
"See the <ulink url=\"http://tldp.org/HOWTO/LVM-HOWTO/index.html\">LVM "
26734
"HOWTO</ulink> for more information."
26735
26736
#: serverguide/C/installation.xml:1187(para)
26737
msgid ""
26738
"Another good article is <ulink "
26739
"url=\"http://www.linuxdevcenter.com/pub/a/linux/2006/04/27/managing-disk-"
26740
"space-with-lvm.html\">Managing Disk Space with LVM</ulink> on O'Reilly's "
26741
"linuxdevcenter.com site."
26742
msgstr ""
26743
"Another good article is <ulink "
26744
"url=\"http://www.linuxdevcenter.com/pub/a/linux/2006/04/27/managing-disk-"
26745
"space-with-lvm.html\">Managing Disk Space with LVM</ulink> on O'Reilly's "
26746
"linuxdevcenter.com site."
26747
26748
#: serverguide/C/installation.xml:1194(para)
26749
msgid ""
26750
"For more information on <application>fdisk</application> see the <ulink "
26751
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man8/fdisk.8.html\">fdi"
26752
"sk man page</ulink>."
26753
msgstr ""
26754
26755
#: serverguide/C/file-server.xml:13(title)
26756
msgid "File Servers"
26757
msgstr "File Servers"
26758
26759
#: serverguide/C/file-server.xml:15(para)
26760
msgid ""
26761
"If you have more than one computer on a single network. At some point you "
26762
"will probably need to share files between them. In this section we cover "
26763
"installing and configuring FTP, NFS, and CUPS."
26764
msgstr ""
26765
"If you have more than one computer on a single network, at some point you "
26766
"will probably need to share files between them. In this section we cover "
26767
"installing and configuring FTP, NFS, and CUPS."
26768
26769
#: serverguide/C/file-server.xml:22(title)
26770
msgid "FTP Server"
26771
msgstr "FTP Server"
26772
26773
#: serverguide/C/file-server.xml:24(para)
26774
msgid ""
26775
"File Transfer Protocol (FTP) is a TCP protocol for uploading and downloading "
26776
"files between computers. FTP works on a client/server model. The server "
26777
"component is called an <emphasis>FTP daemon</emphasis>. It continuously "
26778
"listens for FTP requests from remote clients. When a request is received, it "
26779
"manages the login and sets up the connection. For the duration of the "
26780
"session it executes any of commands sent by the FTP client."
26781
msgstr ""
26782
"File Transfer Protocol (FTP) is a TCP protocol for uploading and downloading "
26783
"files between computers. FTP works on a client/server model. The server "
26784
"component is called an <emphasis>FTP daemon</emphasis>. It continuously "
26785
"listens for FTP requests from remote clients. When a request is received, it "
26786
"manages the login and sets up the connection. For the duration of the "
26787
"session it executes any of commands sent by the FTP client."
26788
26789
#: serverguide/C/file-server.xml:33(para)
26790
msgid "Access to an FTP server can be managed in two ways:"
26791
msgstr "Access to an FTP server can be managed in two ways:"
26792
26793
#: serverguide/C/file-server.xml:37(para)
26794
msgid "Anonymous"
26795
msgstr "Anonymous"
26796
26797
#: serverguide/C/file-server.xml:40(para)
26798
msgid "Authenticated"
26799
msgstr "Authenticated"
26800
26801
#: serverguide/C/file-server.xml:43(para)
26802
msgid ""
26803
"In the Anonymous mode, remote clients can access the FTP server by using the "
26804
"default user account called \"anonymous\" or \"ftp\" and sending an email "
26805
"address as the password. In the Authenticated mode a user must have an "
26806
"account and a password. User access to the FTP server directories and files "
26807
"is dependent on the permissions defined for the account used at login. As a "
26808
"general rule, the FTP daemon will hide the root directory of the FTP server "
26809
"and change it to the FTP Home directory. This hides the rest of the file "
26810
"system from remote sessions."
26811
msgstr ""
26812
"In the Anonymous mode, remote clients can access the FTP server by using the "
26813
"default user account called \"anonymous\" or \"ftp\" and sending an e-mail "
26814
"address as the password. In the Authenticated mode a user must have an "
26815
"account and a password. User access to the FTP server directories and files "
26816
"is dependent on the permissions defined for the account used at login. As a "
26817
"general rule, the FTP daemon will hide the root directory of the FTP server "
26818
"and change it to the FTP Home directory. This hides the rest of the file "
26819
"system from remote sessions."
26820
26821
#: serverguide/C/file-server.xml:55(title)
26822
msgid "vsftpd - FTP Server Installation"
26823
msgstr "vsftpd - FTP Server Installation"
26824
26825
#: serverguide/C/file-server.xml:57(para)
26826
msgid ""
26827
"vsftpd is an FTP daemon available in Ubuntu. It is easy to install, set up, "
26828
"and maintain. To install <application>vsftpd</application> you can run the "
26829
"following command:"
26830
msgstr ""
26831
"vsftpd is an FTP daemon available in Ubuntu. It is easy to install, set up, "
26832
"and maintain. To install <application>vsftpd</application> you can run the "
26833
"following command:"
26834
26835
#: serverguide/C/file-server.xml:65(command)
26836
msgid "sudo apt-get install vsftpd"
26837
msgstr "sudo apt-get install vsftpd"
26838
26839
#: serverguide/C/file-server.xml:71(title)
26840
msgid "Anonymous FTP Configuration"
26841
msgstr "Anonymous FTP Configuration"
26842
26843
#: serverguide/C/file-server.xml:73(para)
26844
msgid ""
26845
"By default <application>vsftpd</application> is configured to only allow "
26846
"anonymous download. During installation a <emphasis>ftp</emphasis> user is "
26847
"created with a home directory of <filename>/home/ftp</filename>. This is the "
26848
"default FTP directory."
26849
msgstr ""
26850
"By default <application>vsftpd</application> is configured to only allow "
26851
"anonymous download. During installation a <emphasis>ftp</emphasis> user is "
26852
"created with a home directory of <filename>/home/ftp</filename>. This is the "
26853
"default FTP directory."
26854
26855
#: serverguide/C/file-server.xml:80(para)
26856
msgid ""
26857
"If you wish to change this location, to <filename>/srv/ftp</filename> for "
26858
"example, simply create a directory in another location and change the "
26859
"<emphasis>ftp</emphasis> user's home directory:"
26860
msgstr ""
26861
"If you wish to change this location, to <filename>/srv/ftp</filename> for "
26862
"example, simply create a directory in another location and change the "
26863
"<emphasis>ftp</emphasis> user's home directory:"
26864
26865
#: serverguide/C/file-server.xml:87(command)
26866
msgid "sudo mkdir /srv/ftp"
26867
msgstr "sudo mkdir /srv/ftp"
26868
26869
#: serverguide/C/file-server.xml:88(command)
26870
msgid "sudo usermod -d /srv/ftp ftp"
26871
msgstr "sudo usermod -d /srv/ftp ftp"
26872
26873
#: serverguide/C/file-server.xml:91(para)
26874
msgid "After making the change restart <application>vsftpd</application>:"
26875
msgstr "After making the change restart <application>vsftpd</application>:"
26876
26877
#: serverguide/C/file-server.xml:96(command) serverguide/C/file-server.xml:124(command) serverguide/C/file-server.xml:189(command) serverguide/C/file-server.xml:237(command)
26878
msgid "sudo /etc/init.d/vsftpd restart"
26879
msgstr "sudo /etc/init.d/vsftpd restart"
26880
26881
#: serverguide/C/file-server.xml:99(para)
26882
msgid ""
26883
"Finally, copy any files and directories you would like to make available "
26884
"through anonymous FTP to <filename>/srv/ftp</filename>."
26885
msgstr ""
26886
"Finally, copy any files and directories you would like to make available "
26887
"through anonymous FTP to <filename>/srv/ftp</filename>."
26888
26889
#: serverguide/C/file-server.xml:106(title)
26890
msgid "User Authenticated FTP Configuration"
26891
msgstr "User Authenticated FTP Configuration"
26892
26893
#: serverguide/C/file-server.xml:108(para)
26894
msgid ""
26895
"To configure <application>vsftpd</application> to authenticate system users "
26896
"and allow them to upload files edit <filename>/etc/vsftpd.conf</filename>:"
26897
msgstr ""
26898
"To configure <application>vsftpd</application> to authenticate system users "
26899
"and allow them to upload files edit <filename>/etc/vsftpd.conf</filename>:"
26900
26901
#: serverguide/C/file-server.xml:114(programlisting)
26902
#, no-wrap
26903
msgid ""
26904
"\n"
26905
"local_enable=YES\n"
26906
"write_enable=YES\n"
26907
msgstr ""
26908
"\n"
26909
"local_enable=YES\n"
26910
"write_enable=YES\n"
26911
26912
#: serverguide/C/file-server.xml:119(para)
26913
msgid "Now restart <application>vsftpd</application>:"
26914
msgstr "Now restart <application>vsftpd</application>:"
26915
26916
#: serverguide/C/file-server.xml:127(para)
26917
msgid ""
26918
"Now when system users login to FTP they will start in their "
26919
"<emphasis>home</emphasis> directories where they can download, upload, "
26920
"create directories, etc."
26921
msgstr ""
26922
"Now when system users login to FTP they will start in their "
26923
"<emphasis>home</emphasis> directories where they can download, upload, "
26924
"create directories, etc."
26925
26926
#: serverguide/C/file-server.xml:133(para)
26927
msgid ""
26928
"Similarly, by default, the anonymous users are not allowed to upload files "
26929
"to FTP server. To change this setting, you should uncomment the following "
26930
"line, and restart <application>vsftpd</application>:"
26931
msgstr ""
26932
"Similarly, by default, the anonymous users are not allowed to upload files "
26933
"to FTP server. To change this setting, you should uncomment the following "
26934
"line, and restart <application>vsftpd</application>:"
26935
26936
#: serverguide/C/file-server.xml:140(programlisting)
26937
#, no-wrap
26938
msgid ""
26939
"\n"
26940
"anon_upload_enable=YES\n"
26941
msgstr ""
26942
"\n"
26943
"anon_upload_enable=YES\n"
26944
26945
#: serverguide/C/file-server.xml:145(para)
26946
msgid ""
26947
"Enabling anonymous FTP upload can be an extreme security risk. It is best to "
26948
"not enable anonymous upload on servers accessed directly from the Internet."
26949
msgstr ""
26950
"Enabling anonymous FTP upload can be an extreme security risk. It is best to "
26951
"not enable anonymous upload on servers accessed directly from the Internet."
26952
26953
#: serverguide/C/file-server.xml:151(para)
26954
msgid ""
26955
"The configuration file consists of many configuration parameters. The "
26956
"information about each parameter is available in the configuration file. "
26957
"Alternatively, you can refer to the man page, <command>man 5 "
26958
"vsftpd.conf</command> for details of each parameter."
26959
msgstr ""
26960
"The configuration file consists of many configuration parameters. The "
26961
"information about each parameter is available in the configuration file. "
26962
"Alternatively, you can refer to the man page, <command>man 5 "
26963
"vsftpd.conf</command> for details of each parameter."
26964
26965
#: serverguide/C/file-server.xml:162(title)
26966
msgid "Securing FTP"
26967
msgstr "Securing FTP"
26968
26969
#: serverguide/C/file-server.xml:164(para)
26970
msgid ""
26971
"There are options in <filename>/etc/vsftpd.conf</filename> to help make "
26972
"<application>vsftpd</application> more secure. For example users can be "
26973
"limited to their home directories by uncommenting:"
26974
msgstr ""
26975
"There are options in <filename>/etc/vsftpd.conf</filename> to help make "
26976
"<application>vsftpd</application> more secure. For example users can be "
26977
"limited to their home directories by uncommenting:"
26978
26979
#: serverguide/C/file-server.xml:170(programlisting)
26980
#, no-wrap
26981
msgid ""
26982
"\n"
26983
"chroot_local_user=YES\n"
26984
msgstr ""
26985
"\n"
26986
"chroot_local_user=YES\n"
26987
26988
#: serverguide/C/file-server.xml:174(para)
26989
msgid ""
26990
"You can also limit a specific list of users to just their home directories:"
26991
msgstr ""
26992
"You can also limit a specific list of users to just their home directories:"
26993
26994
#: serverguide/C/file-server.xml:178(programlisting)
26995
#, no-wrap
26996
msgid ""
26997
"\n"
26998
"chroot_list_enable=YES\n"
26999
"chroot_list_file=/etc/vsftpd.chroot_list\n"
27000
msgstr ""
27001
"\n"
27002
"chroot_list_enable=YES\n"
27003
"chroot_list_file=/etc/vsftpd.chroot_list\n"
27004
27005
#: serverguide/C/file-server.xml:183(para)
27006
msgid ""
27007
"After uncommenting the above options, create a "
27008
"<filename>/etc/vsftpd.chroot_list</filename> containing a list of users one "
27009
"per line. Then restart <application>vsftpd</application>:"
27010
msgstr ""
27011
"After uncommenting the above options, create a "
27012
"<filename>/etc/vsftpd.chroot_list</filename> containing a list of users one "
27013
"per line. Then restart <application>vsftpd</application>:"
27014
27015
#: serverguide/C/file-server.xml:192(para)
27016
msgid ""
27017
"Also, the <filename>/etc/ftpusers</filename> file is a list of users that "
27018
"are <emphasis>disallowed</emphasis> FTP access. The default list includes "
27019
"root, daemon, nobody, etc. To disable FTP access for additional users simply "
27020
"add them to the list."
27021
msgstr ""
27022
"Also, the <filename>/etc/ftpusers</filename> file is a list of users that "
27023
"are <emphasis>disallowed</emphasis> FTP access. The default list includes "
27024
"root, daemon, nobody, etc. To disable FTP access for additional users simply "
27025
"add them to the list."
27026
27027
#: serverguide/C/file-server.xml:199(para)
27028
msgid ""
27029
"FTP can also be encrypted using <emphasis>FTPS</emphasis>. Different from "
27030
"<emphasis>SFTP</emphasis>, <emphasis>FTPS</emphasis> is FTP over Secure "
27031
"Socket Layer (SSL). <emphasis>SFTP</emphasis> is a FTP like session over an "
27032
"encrypted <emphasis>SSH</emphasis> connection. A major difference is that "
27033
"users of SFTP need to have a <emphasis>shell</emphasis> account on the "
27034
"system, instead of a <emphasis>nologin</emphasis> shell. Providing all users "
27035
"with a shell may not be ideal for some environments, such as a shared web "
27036
"host."
27037
msgstr ""
27038
"FTP can also be encrypted using <emphasis>FTPS</emphasis>. Different from "
27039
"<emphasis>SFTP</emphasis>, <emphasis>FTPS</emphasis> is FTP over Secure "
27040
"Socket Layer (SSL). <emphasis>SFTP</emphasis> is a FTP like session over an "
27041
"encrypted <emphasis>SSH</emphasis> connection. A major difference is that "
27042
"users of SFTP need to have a <emphasis>shell</emphasis> account on the "
27043
"system, instead of a <emphasis>nologin</emphasis> shell. Providing all users "
27044
"with a shell may not be ideal for some environments, such as a shared web "
27045
"host."
27046
27047
#: serverguide/C/file-server.xml:208(para)
27048
msgid ""
27049
"To configure <emphasis>FTPS</emphasis>, edit "
27050
"<filename>/etc/vsftpd.conf</filename> and at the bottom add:"
27051
msgstr ""
27052
"To configure <emphasis>FTPS</emphasis>, edit "
27053
"<filename>/etc/vsftpd.conf</filename> and at the bottom add:"
27054
27055
#: serverguide/C/file-server.xml:212(programlisting)
27056
#, no-wrap
27057
msgid ""
27058
"\n"
27059
"ssl_enable=Yes\n"
27060
msgstr ""
27061
"\n"
27062
"ssl_enable=Yes\n"
27063
27064
#: serverguide/C/file-server.xml:216(para)
27065
msgid "Also, notice the certificate and key related options:"
27066
msgstr "Also, notice the certificate and key related options:"
27067
27068
#: serverguide/C/file-server.xml:220(programlisting)
27069
#, no-wrap
27070
msgid ""
27071
"\n"
27072
"rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem\n"
27073
"rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key\n"
27074
msgstr ""
27075
"\n"
27076
"rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem\n"
27077
"rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key\n"
27078
27079
#: serverguide/C/file-server.xml:225(para)
27080
msgid ""
27081
"By default these options are set the certificate and key provided by the "
27082
"<application>ssl-cert</application> package. In a production environment "
27083
"these should be replaced with a certificate and key generated for the "
27084
"specific host. For more information on certificates see <xref "
27085
"linkend=\"certificates-and-security\"/>."
27086
msgstr ""
27087
"By default these options are set the certificate and key provided by the "
27088
"<application>ssl-cert</application> package. In a production environment "
27089
"these should be replaced with a certificate and key generated for the "
27090
"specific host. For more information on certificates see <xref "
27091
"linkend=\"certificates-and-security\"/>."
27092
27093
#: serverguide/C/file-server.xml:231(para)
27094
msgid ""
27095
"Now restart <application>vsftpd</application>, and non-anonymous users will "
27096
"be forced to use <emphasis>FTPS</emphasis>:"
27097
msgstr ""
27098
"Now restart <application>vsftpd</application>, and non-anonymous users will "
27099
"be forced to use <emphasis>FTPS</emphasis>:"
27100
27101
#: serverguide/C/file-server.xml:240(para)
27102
msgid ""
27103
"To allow users with a shell of <filename>/usr/sbin/nologin</filename> access "
27104
"to FTP, but have no shell access, edit <filename>/etc/shells</filename> "
27105
"adding the <emphasis>nologin</emphasis> shell:"
27106
msgstr ""
27107
"To allow users with a shell of <filename>/usr/sbin/nologin</filename> access "
27108
"to FTP, but have no shell access, edit <filename>/etc/shells</filename> "
27109
"adding the <emphasis>nologin</emphasis> shell:"
27110
27111
#: serverguide/C/file-server.xml:245(programlisting)
27112
#, no-wrap
27113
msgid ""
27114
"\n"
27115
"# /etc/shells: valid login shells\n"
27116
"/bin/csh\n"
27117
"/bin/sh\n"
27118
"/usr/bin/es\n"
27119
"/usr/bin/ksh\n"
27120
"/bin/ksh\n"
27121
"/usr/bin/rc\n"
27122
"/usr/bin/tcsh\n"
27123
"/bin/tcsh\n"
27124
"/usr/bin/esh\n"
27125
"/bin/dash\n"
27126
"/bin/bash\n"
27127
"/bin/rbash\n"
27128
"/usr/bin/screen\n"
27129
"/usr/sbin/nologin\n"
27130
msgstr ""
27131
"\n"
27132
"# /etc/shells: valid login shells\n"
27133
"/bin/csh\n"
27134
"/bin/sh\n"
27135
"/usr/bin/es\n"
27136
"/usr/bin/ksh\n"
27137
"/bin/ksh\n"
27138
"/usr/bin/rc\n"
27139
"/usr/bin/tcsh\n"
27140
"/bin/tcsh\n"
27141
"/usr/bin/esh\n"
27142
"/bin/dash\n"
27143
"/bin/bash\n"
27144
"/bin/rbash\n"
27145
"/usr/bin/screen\n"
27146
"/usr/sbin/nologin\n"
27147
27148
#: serverguide/C/file-server.xml:263(para)
27149
msgid ""
27150
"This is necessary because, by default <application>vsftpd</application> uses "
27151
"PAM for authentication, and the <filename>/etc/pam.d/vsftpd</filename> "
27152
"configuration file contains:"
27153
msgstr ""
27154
"This is necessary because, by default <application>vsftpd</application> uses "
27155
"PAM for authentication, and the <filename>/etc/pam.d/vsftpd</filename> "
27156
"configuration file contains:"
27157
27158
#: serverguide/C/file-server.xml:268(programlisting)
27159
#, no-wrap
27160
msgid ""
27161
"\n"
27162
"auth required pam_shells.so\n"
27163
msgstr ""
27164
"\n"
27165
"auth required pam_shells.so\n"
27166
27167
#: serverguide/C/file-server.xml:272(para)
27168
msgid ""
27169
"The <emphasis>shells</emphasis> PAM module restricts access to shells listed "
27170
"in the <filename>/etc/shells</filename> file."
27171
msgstr ""
27172
"The <emphasis>shells</emphasis> PAM module restricts access to shells listed "
27173
"in the <filename>/etc/shells</filename> file."
27174
27175
#: serverguide/C/file-server.xml:277(para)
27176
msgid ""
27177
"Most popular FTP clients can be configured connect using FTPS. The "
27178
"<application>lftp</application> command line FTP client has the ability to "
27179
"use FTPS as well."
27180
msgstr ""
27181
"Most popular FTP clients can be configured connect using FTPS. The "
27182
"<application>lftp</application> command line FTP client has the ability to "
27183
"use FTPS as well."
27184
27185
#: serverguide/C/file-server.xml:288(para)
27186
msgid ""
27187
"See the <ulink url=\"http://vsftpd.beasts.org/vsftpd_conf.html\">vsftpd "
27188
"website</ulink> for more information."
27189
msgstr ""
27190
"See the <ulink url=\"http://vsftpd.beasts.org/vsftpd_conf.html\">vsftpd "
27191
"website</ulink> for more information."
27192
27193
#: serverguide/C/file-server.xml:293(para)
27194
msgid ""
27195
"For detailed <filename>/etc/vsftpd.conf</filename> options see the <ulink "
27196
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man5/vsftpd.conf.5.html"
27197
"\">vsftpd.conf man page</ulink>."
27198
msgstr ""
27199
27200
#: serverguide/C/file-server.xml:299(para)
27201
msgid ""
27202
"The CodeGurus article <ulink "
27203
"url=\"http://www.codeguru.com/csharp/.net/net_general/internet/article.php/c1"
27204
"4329\"> FTPS vs. SFTP: What to Choose</ulink> has useful information "
27205
"contrasting FTPS and SFTP."
27206
msgstr ""
27207
"The CodeGurus article <ulink "
27208
"url=\"http://www.codeguru.com/csharp/.net/net_general/internet/article.php/c1"
27209
"4329\"> FTPS vs. SFTP: What to Choose</ulink> has useful information "
27210
"contrasting FTPS and SFTP."
27211
27212
#: serverguide/C/file-server.xml:305(para)
27213
msgid ""
27214
"Also, for more information see the <ulink "
27215
"url=\"https://help.ubuntu.com/community/vsftpd\">Ubuntu Wiki vsftpd</ulink> "
27216
"page."
27217
msgstr ""
27218
27219
#: serverguide/C/file-server.xml:315(title)
27220
msgid "Network File System (NFS)"
27221
msgstr "Network File System (NFS)"
27222
27223
#: serverguide/C/file-server.xml:316(para)
27224
msgid ""
27225
"NFS allows a system to share directories and files with others over a "
27226
"network. By using NFS, users and programs can access files on remote systems "
27227
"almost as if they were local files."
27228
msgstr ""
27229
"NFS allows a system to share directories and files with others over a "
27230
"network. By using NFS, users and programs can access files on remote systems "
27231
"almost as if they were local files."
27232
27233
#: serverguide/C/file-server.xml:322(para)
27234
msgid "Some of the most notable benefits that NFS can provide are:"
27235
msgstr "Some of the most notable benefits that NFS can provide are:"
27236
27237
#: serverguide/C/file-server.xml:328(para)
27238
msgid ""
27239
"Local workstations use less disk space because commonly used data can be "
27240
"stored on a single machine and still remain accessible to others over the "
27241
"network."
27242
msgstr ""
27243
"Local workstations use less disk space because commonly used data can be "
27244
"stored on a single machine and still remain accessible to others over the "
27245
"network."
27246
27247
#: serverguide/C/file-server.xml:333(para)
27248
msgid ""
27249
"There is no need for users to have separate home directories on every "
27250
"network machine. Home directories could be set up on the NFS server and made "
27251
"available throughout the network."
27252
msgstr ""
27253
"There is no need for users to have separate home directories on every "
27254
"network machine. Home directories could be set up on the NFS server and made "
27255
"available throughout the network."
27256
27257
#: serverguide/C/file-server.xml:339(para)
27258
msgid ""
27259
"Storage devices such as floppy disks, CDROM drives, and USB Thumb drives can "
27260
"be used by other machines on the network. This may reduce the number of "
27261
"removable media drives throughout the network."
27262
msgstr ""
27263
"Storage devices such as floppy disks, CDROM drives, and USB Thumb drives can "
27264
"be used by other machines on the network. This may reduce the number of "
27265
"removable media drives throughout the network."
27266
27267
#: serverguide/C/file-server.xml:349(para)
27268
msgid ""
27269
"At a terminal prompt enter the following command to install the NFS Server:"
27270
msgstr ""
27271
"At a terminal prompt enter the following command to install the NFS Server:"
27272
27273
#: serverguide/C/file-server.xml:355(command)
27274
msgid "sudo apt-get install nfs-kernel-server"
27275
msgstr "sudo apt-get install nfs-kernel-server"
27276
27277
#: serverguide/C/file-server.xml:361(para)
27278
msgid ""
27279
"You can configure the directories to be exported by adding them to the "
27280
"<filename>/etc/exports</filename> file. For example:"
27281
msgstr ""
27282
"You can configure the directories to be exported by adding them to the "
27283
"<filename>/etc/exports</filename> file. For example:"
27284
27285
#: serverguide/C/file-server.xml:366(screen)
27286
#, no-wrap
27287
msgid ""
27288
"\n"
27289
"/ubuntu *(ro,sync,no_root_squash)\n"
27290
"/home *(rw,sync,no_root_squash)\n"
27291
msgstr ""
27292
"\n"
27293
"/ubuntu *(ro,sync,no_root_squash)\n"
27294
"/home *(rw,sync,no_root_squash)\n"
27295
27296
#: serverguide/C/file-server.xml:372(para)
27297
msgid ""
27298
"You can replace * with one of the hostname formats. Make the hostname "
27299
"declaration as specific as possible so unwanted systems cannot access the "
27300
"NFS mount."
27301
msgstr ""
27302
"You can replace * with one of the hostname formats. Make the hostname "
27303
"declaration as specific as possible so unwanted systems cannot access the "
27304
"NFS mount."
27305
27306
#: serverguide/C/file-server.xml:378(para)
27307
msgid ""
27308
"To start the NFS server, you can run the following command at a terminal "
27309
"prompt:"
27310
msgstr ""
27311
"To start the NFS server, you can run the following command at a terminal "
27312
"prompt:"
27313
27314
#: serverguide/C/file-server.xml:383(command)
27315
msgid "sudo /etc/init.d/nfs-kernel-server start"
27316
msgstr "sudo /etc/init.d/nfs-kernel-server start"
27317
27318
#: serverguide/C/file-server.xml:388(title)
27319
msgid "NFS Client Configuration"
27320
msgstr "NFS Client Configuration"
27321
27322
#: serverguide/C/file-server.xml:389(para)
27323
msgid ""
27324
"Use the <application>mount</application> command to mount a shared NFS "
27325
"directory from another machine, by typing a command line similar to the "
27326
"following at a terminal prompt:"
27327
msgstr ""
27328
"Use the <application>mount</application> command to mount a shared NFS "
27329
"directory from another machine, by typing a command line similar to the "
27330
"following at a terminal prompt:"
27331
27332
#: serverguide/C/file-server.xml:395(command)
27333
msgid "sudo mount example.hostname.com:/ubuntu /local/ubuntu"
27334
msgstr "sudo mount example.hostname.com:/ubuntu /local/ubuntu"
27335
27336
#: serverguide/C/file-server.xml:399(para)
27337
msgid ""
27338
"The mount point directory <filename>/local/ubuntu</filename> must exist. "
27339
"There should be no files or subdirectories in the "
27340
"<filename>/local/ubuntu</filename> directory."
27341
msgstr ""
27342
"The mount point directory <filename>/local/ubuntu</filename> must exist. "
27343
"There should be no files or subdirectories in the "
27344
"<filename>/local/ubuntu</filename> directory."
27345
27346
#: serverguide/C/file-server.xml:406(para)
27347
msgid ""
27348
"An alternate way to mount an NFS share from another machine is to add a line "
27349
"to the <filename>/etc/fstab</filename> file. The line must state the "
27350
"hostname of the NFS server, the directory on the server being exported, and "
27351
"the directory on the local machine where the NFS share is to be mounted."
27352
msgstr ""
27353
"An alternate way to mount an NFS share from another machine is to add a line "
27354
"to the <filename>/etc/fstab</filename> file. The line must state the "
27355
"hostname of the NFS server, the directory on the server being exported, and "
27356
"the directory on the local machine where the NFS share is to be mounted."
27357
27358
#: serverguide/C/file-server.xml:414(para)
27359
msgid ""
27360
"The general syntax for the line in <filename>/etc/fstab</filename> file is "
27361
"as follows:"
27362
msgstr ""
27363
"The general syntax for the line in <filename>/etc/fstab</filename> file is "
27364
"as follows:"
27365
27366
#: serverguide/C/file-server.xml:420(programlisting)
27367
#, no-wrap
27368
msgid ""
27369
"\n"
27370
"example.hostname.com:/ubuntu /local/ubuntu nfs "
27371
"rsize=8192,wsize=8192,timeo=14,intr\n"
27372
msgstr ""
27373
"\n"
27374
"example.hostname.com:/ubuntu /local/ubuntu nfs "
27375
"rsize=8192,wsize=8192,timeo=14,intr\n"
27376
27377
#: serverguide/C/file-server.xml:424(para)
27378
msgid ""
27379
"If you have trouble mounting an NFS share, make sure the <application>nfs-"
27380
"common</application> package is installed on your client. To install "
27381
"<application>nfs-common</application> enter the following command at the "
27382
"terminal prompt: <screen>\n"
27383
"<command>sudo apt-get install nfs-common</command>\n"
27384
"</screen>"
27385
msgstr ""
27386
"If you have trouble mounting an NFS share, make sure the <application>nfs-"
27387
"common</application> package is installed on your client. To install "
27388
"<application>nfs-common</application> enter the following command at the "
27389
"terminal prompt: <screen>\n"
27390
"<command>sudo apt-get install nfs-common</command>\n"
27391
"</screen>"
27392
27393
#: serverguide/C/file-server.xml:437(ulink)
27394
msgid "Linux NFS faq"
27395
msgstr "Linux NFS faq"
27396
27397
#: serverguide/C/file-server.xml:439(ulink)
27398
msgid "Ubuntu Wiki NFS Howto"
27399
msgstr ""
27400
27401
#: serverguide/C/file-server.xml:445(title)
27402
msgid "CUPS - Print Server"
27403
msgstr "CUPS - Print Server"
27404
27405
#: serverguide/C/file-server.xml:446(para)
27406
msgid ""
27407
"The primary mechanism for Ubuntu printing and print services is the "
27408
"<emphasis role=\"bold\">Common UNIX Printing System</emphasis> (CUPS). This "
27409
"printing system is a freely available, portable printing layer which has "
27410
"become the new standard for printing in most Linux distributions."
27411
msgstr ""
27412
"The primary mechanism for Ubuntu printing and print services is the "
27413
"<emphasis role=\"bold\">Common UNIX Printing System</emphasis> (CUPS). This "
27414
"printing system is a freely available, portable printing layer which has "
27415
"become the new standard for printing in most Linux distributions."
27416
27417
#: serverguide/C/file-server.xml:453(para)
27418
msgid ""
27419
"CUPS manages print jobs and queues and provides network printing using the "
27420
"standard Internet Printing Protocol (IPP), while offering support for a very "
27421
"large range of printers, from dot-matrix to laser and many in between. CUPS "
27422
"also supports PostScript Printer Description (PPD) and auto-detection of "
27423
"network printers, and features a simple web-based configuration and "
27424
"administration tool."
27425
msgstr ""
27426
"CUPS manages print jobs and queues and provides network printing using the "
27427
"standard Internet Printing Protocol (IPP), while offering support for a very "
27428
"large range of printers, from dot-matrix to laser and many in between. CUPS "
27429
"also supports PostScript Printer Description (PPD) and auto-detection of "
27430
"network printers, and features a simple Web-based configuration and "
27431
"administration tool."
27432
27433
#: serverguide/C/file-server.xml:463(para)
27434
msgid ""
27435
"To install CUPS on your Ubuntu computer, simply use "
27436
"<application>sudo</application> with the <application>apt-get</application> "
27437
"command and give the packages to install as the first parameter. A complete "
27438
"CUPS install has many package dependencies, but they may all be specified on "
27439
"the same command line. Enter the following at a terminal prompt to install "
27440
"CUPS:"
27441
msgstr ""
27442
"To install CUPS on your Ubuntu computer, simply use "
27443
"<application>sudo</application> with the <application>apt-get</application> "
27444
"command and give the packages to install as the first parameter. A complete "
27445
"CUPS install has many package dependencies, but they may all be specified on "
27446
"the same command line. Enter the following at a terminal prompt to install "
27447
"CUPS:"
27448
27449
#: serverguide/C/file-server.xml:468(command)
27450
msgid "sudo apt-get install cups"
27451
msgstr "sudo apt-get install cups"
27452
27453
#: serverguide/C/file-server.xml:471(para)
27454
msgid ""
27455
"Upon authenticating with your user password, the packages should be "
27456
"downloaded and installed without error. Upon the conclusion of installation, "
27457
"the CUPS server will be started automatically."
27458
msgstr ""
27459
"Upon authenticating with your user password, the packages should be "
27460
"downloaded and installed without error. Upon the conclusion of installation, "
27461
"the CUPS server will be started automatically."
27462
27463
#: serverguide/C/file-server.xml:476(para)
27464
msgid ""
27465
"For troubleshooting purposes, you can access CUPS server errors via the "
27466
"error log file at: <filename>/var/log/cups/error_log</filename>. If the "
27467
"error log does not show enough information to troubleshoot any problems you "
27468
"encounter, the verbosity of the CUPS log can be increased by changing the "
27469
"<emphasis role=\"bold\">LogLevel</emphasis> directive in the configuration "
27470
"file (discussed below) to \"debug\" or even \"debug2\", which logs "
27471
"everything, from the default of \"info\". If you make this change, remember "
27472
"to change it back once you've solved your problem, to prevent the log file "
27473
"from becoming overly large."
27474
msgstr ""
27475
"For troubleshooting purposes, you can access CUPS server errors via the "
27476
"error log file at: <filename>/var/log/cups/error_log</filename>. If the "
27477
"error log does not show enough information to troubleshoot any problems you "
27478
"encounter, the verbosity of the CUPS log can be increased by changing the "
27479
"<emphasis role=\"bold\">LogLevel</emphasis> directive in the configuration "
27480
"file (discussed below) to \"debug\" or even \"debug2\", which logs "
27481
"everything, from the default of \"info\". If you make this change, remember "
27482
"to change it back once you've solved your problem, to prevent the log file "
27483
"from becoming overly large."
27484
27485
#: serverguide/C/file-server.xml:489(para)
27486
msgid ""
27487
"The Common UNIX Printing System server's behavior is configured through the "
27488
"directives contained in the file <filename>/etc/cups/cupsd.conf</filename>. "
27489
"The CUPS configuration file follows the same syntax as the primary "
27490
"configuration file for the Apache HTTP server, so users familiar with "
27491
"editing Apache's configuration file should feel at ease when editing the "
27492
"CUPS configuration file. Some examples of settings you may wish to change "
27493
"initially will be presented here."
27494
msgstr ""
27495
"The Common UNIX Printing System server's behaviour is configured through the "
27496
"directives contained in the file <filename>/etc/cups/cupsd.conf</filename>. "
27497
"The CUPS configuration file follows the same syntax as the primary "
27498
"configuration file for the Apache HTTP server, so users familiar with "
27499
"editing Apache's configuration file should feel at ease when editing the "
27500
"CUPS configuration file. Some examples of settings you may wish to change "
27501
"initially will be presented here."
27502
27503
#: serverguide/C/file-server.xml:499(para)
27504
msgid ""
27505
"Prior to editing the configuration file, you should make a copy of the "
27506
"original file and protect it from writing, so you will have the original "
27507
"settings as a reference, and to reuse as necessary."
27508
msgstr ""
27509
"Prior to editing the configuration file, you should make a copy of the "
27510
"original file and protect it from writing, so you will have the original "
27511
"settings as a reference, and to reuse as necessary."
27512
27513
#: serverguide/C/file-server.xml:503(para)
27514
msgid ""
27515
"Copy the <filename>/etc/cups/cupsd.conf</filename> file and protect it from "
27516
"writing with the following commands, issued at a terminal prompt:"
27517
msgstr ""
27518
"Copy the <filename>/etc/cups/cupsd.conf</filename> file and protect it from "
27519
"writing with the following commands, issued at a terminal prompt:"
27520
27521
#: serverguide/C/file-server.xml:509(command)
27522
msgid "sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.original"
27523
msgstr "sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.original"
27524
27525
#: serverguide/C/file-server.xml:510(command)
27526
msgid "sudo chmod a-w /etc/cups/cupsd.conf.original"
27527
msgstr "sudo chmod a-w /etc/cups/cupsd.conf.original"
27528
27529
#: serverguide/C/file-server.xml:515(para)
27530
msgid ""
27531
"<emphasis role=\"bold\">ServerAdmin</emphasis>: To configure the email "
27532
"address of the designated administrator of the CUPS server, simply edit the "
27533
"<filename>/etc/cups/cupsd.conf</filename> configuration file with your "
27534
"preferred text editor, and add or modify the <emphasis "
27535
"role=\"italics\">ServerAdmin</emphasis> line accordingly. For example, if "
27536
"you are the Administrator for the CUPS server, and your e-mail address is "
27537
"'bjoy@somebigco.com', then you would modify the ServerAdmin line to appear "
27538
"as such:"
27539
msgstr ""
27540
"<emphasis role=\"bold\">ServerAdmin</emphasis>: To configure the e-mail "
27541
"address of the designated administrator of the CUPS server, simply edit the "
27542
"<filename>/etc/cups/cupsd.conf</filename> configuration file with your "
27543
"preferred text editor, and add or modify the <emphasis "
27544
"role=\"italics\">ServerAdmin</emphasis> line accordingly. For example, if "
27545
"you are the Administrator for the CUPS server, and your e-mail address is "
27546
"'bjoy@somebigco.com', then you would modify the ServerAdmin line to appear "
27547
"as such:"
27548
27549
#: serverguide/C/file-server.xml:526(screen)
27550
#, no-wrap
27551
msgid ""
27552
"\n"
27553
"ServerAdmin bjoy@somebigco.com\n"
27554
msgstr ""
27555
"\n"
27556
"ServerAdmin bjoy@somebigco.com\n"
27557
27558
#: serverguide/C/file-server.xml:532(para)
27559
msgid ""
27560
"<emphasis role=\"bold\">Listen</emphasis>: By default on Ubuntu, the CUPS "
27561
"server installation listens only on the loopback interface at IP address "
27562
"<emphasis>127.0.0.1</emphasis>. In order to instruct the CUPS server to "
27563
"listen on an actual network adapter's IP address, you must specify either a "
27564
"hostname, the IP address, or optionally, an IP address/port pairing via the "
27565
"addition of a Listen directive. For example, if your CUPS server resides on "
27566
"a local network at the IP address <emphasis "
27567
"role=\"italics\">192.168.10.250</emphasis> and you'd like to make it "
27568
"accessible to the other systems on this subnetwork, you would edit the "
27569
"<filename>/etc/cups/cupsd.conf</filename> and add a Listen directive, as "
27570
"such:"
27571
msgstr ""
27572
"<emphasis role=\"bold\">Listen</emphasis>: By default on Ubuntu, the CUPS "
27573
"server installation listens only on the loopback interface at IP address "
27574
"<emphasis>127.0.0.1</emphasis>. In order to instruct the CUPS server to "
27575
"listen on an actual network adapter's IP address, you must specify either a "
27576
"hostname, the IP address, or optionally, an IP address/port pairing via the "
27577
"addition of a Listen directive. For example, if your CUPS server resides on "
27578
"a local network at the IP address <emphasis "
27579
"role=\"italics\">192.168.10.250</emphasis> and you'd like to make it "
27580
"accessible to the other systems on this subnetwork, you would edit the "
27581
"<filename>/etc/cups/cupsd.conf</filename> and add a Listen directive, as "
27582
"such:"
27583
27584
#: serverguide/C/file-server.xml:546(screen)
27585
#, no-wrap
27586
msgid ""
27587
"\n"
27588
"Listen 127.0.0.1:631 # existing loopback Listen\n"
27589
"Listen /var/run/cups/cups.sock # existing socket Listen\n"
27590
"Listen 192.168.10.250:631 # Listen on the LAN interface, Port 631 "
27591
"(IPP)\n"
27592
msgstr ""
27593
"\n"
27594
"Listen 127.0.0.1:631 # existing loopback Listen\n"
27595
"Listen /var/run/cups/cups.sock # existing socket Listen\n"
27596
"Listen 192.168.10.250:631 # Listen on the LAN interface, Port 631 "
27597
"(IPP)\n"
27598
27599
#: serverguide/C/file-server.xml:552(para)
27600
msgid ""
27601
"In the example above, you may comment out or remove the reference to the "
27602
"Loopback address (127.0.0.1) if you do not wish <application>cupsd "
27603
"</application> to listen on that interface, but would rather have it only "
27604
"listen on the Ethernet interfaces of the Local Area Network (LAN). To enable "
27605
"listening for all network interfaces for which a certain hostname is bound, "
27606
"including the Loopback, you could create a Listen entry for the hostname "
27607
"<emphasis>socrates</emphasis> as such:"
27608
msgstr ""
27609
"In the example above, you may comment out or remove the reference to the "
27610
"Loopback address (127.0.0.1) if you do not wish <application>cupsd "
27611
"</application> to listen on that interface, but would rather have it only "
27612
"listen on the Ethernet interfaces of the Local Area Network (LAN). To enable "
27613
"listening for all network interfaces for which a certain hostname is bound, "
27614
"including the Loopback, you could create a Listen entry for the hostname "
27615
"<emphasis>socrates</emphasis> as such:"
27616
27617
#: serverguide/C/file-server.xml:562(screen)
27618
#, no-wrap
27619
msgid ""
27620
"\n"
27621
"Listen socrates:631 # Listen on all interfaces for the hostname 'socrates'\n"
27622
msgstr ""
27623
"\n"
27624
"Listen socrates:631 # Listen on all interfaces for the hostname 'socrates'\n"
27625
27626
#: serverguide/C/file-server.xml:566(para)
27627
msgid ""
27628
"or by omitting the Listen directive and using <emphasis>Port</emphasis> "
27629
"instead, as in:"
27630
msgstr ""
27631
"or by omitting the Listen directive and using <emphasis>Port</emphasis> "
27632
"instead, as in:"
27633
27634
#: serverguide/C/file-server.xml:568(screen)
27635
#, no-wrap
27636
msgid ""
27637
"\n"
27638
"Port 631 # Listen on port 631 on all interfaces\n"
27639
msgstr ""
27640
"\n"
27641
"Port 631 # Listen on port 631 on all interfaces\n"
27642
27643
#: serverguide/C/file-server.xml:575(para)
27644
msgid ""
27645
"For more examples of configuration directives in the CUPS server "
27646
"configuration file, view the associated system manual page by entering the "
27647
"following command at a terminal prompt:"
27648
msgstr ""
27649
"For more examples of configuration directives in the CUPS server "
27650
"configuration file, view the associated system manual page by entering the "
27651
"following command at a terminal prompt:"
27652
27653
#: serverguide/C/file-server.xml:582(command)
27654
msgid "man cupsd.conf"
27655
msgstr "man cupsd.conf"
27656
27657
#: serverguide/C/file-server.xml:586(para)
27658
msgid ""
27659
"Whenever you make changes to the <filename>/etc/cups/cupsd.conf</filename> "
27660
"configuration file, you'll need to restart the CUPS server by typing the "
27661
"following command at a terminal prompt:"
27662
msgstr ""
27663
"Whenever you make changes to the <filename>/etc/cups/cupsd.conf</filename> "
27664
"configuration file, you'll need to restart the CUPS server by typing the "
27665
"following command at a terminal prompt:"
27666
27667
#: serverguide/C/file-server.xml:592(command)
27668
msgid "sudo /etc/init.d/cups restart"
27669
msgstr "sudo /etc/init.d/cups restart"
27670
27671
#: serverguide/C/file-server.xml:598(title)
27672
msgid "Web Interface"
27673
msgstr "Web Interface"
27674
27675
#: serverguide/C/file-server.xml:600(para)
27676
msgid ""
27677
"CUPS can be configured and monitored using a web interface, which by default "
27678
"is available at <ulink "
27679
"url=\"http://localhost:631/admin\">http://localhost:631/admin</ulink>. The "
27680
"web interface can be used to perform all printer management tasks."
27681
msgstr ""
27682
"CUPS can be configured and monitored using a web interface, which by default "
27683
"is available at <ulink "
27684
"url=\"http://localhost:631/admin\">http://localhost:631/admin</ulink>. The "
27685
"web interface can be used to perform all printer management tasks."
27686
27687
#: serverguide/C/file-server.xml:604(para)
27688
msgid ""
27689
"In order to perform administrative tasks via the web interface, you must "
27690
"either have the root account enabled on your server, or authenticate as a "
27691
"user in the <emphasis role=\"italic\">lpadmin</emphasis> group. For security "
27692
"reasons, CUPS won't authenticate a user that doesn't have a password."
27693
msgstr ""
27694
"In order to perform administrative tasks via the web interface, you must "
27695
"either have the root account enabled on your server, or authenticate as a "
27696
"user in the <emphasis role=\"italic\">lpadmin</emphasis> group. For security "
27697
"reasons, CUPS won't authenticate a user that doesn't have a password."
27698
27699
#: serverguide/C/file-server.xml:607(para)
27700
msgid ""
27701
"To add a user to the <emphasis role=\"italic\">lpadmin</emphasis> group, run "
27702
"at the terminal prompt: <screen>\n"
27703
"<command>sudo usermod -aG lpadmin username</command>\n"
27704
"</screen>"
27705
msgstr ""
27706
"To add a user to the <emphasis role=\"italic\">lpadmin</emphasis> group, run "
27707
"at the terminal prompt: <screen>\n"
27708
"<command>sudo usermod -aG lpadmin username</command>\n"
27709
"</screen>"
27710
27711
#: serverguide/C/file-server.xml:613(para)
27712
msgid ""
27713
"Further documentation is available in the <emphasis "
27714
"role=\"italic\">Documentation/Help</emphasis> tab of the web interface."
27715
msgstr ""
27716
"Further documentation is available in the <emphasis "
27717
"role=\"italic\">Documentation/Help</emphasis> tab of the web interface."
27718
27719
#: serverguide/C/file-server.xml:621(ulink)
27720
msgid "CUPS Website"
27721
msgstr "CUPS Website"
27722
27723
#: serverguide/C/file-server.xml:624(ulink)
27724
msgid "Ubuntu Wiki CUPS page"
27725
msgstr ""
27726
27727
#: serverguide/C/dns.xml:13(title)
27728
msgid "Domain Name Service (DNS)"
27729
msgstr "Domain Name Service (DNS)"
27730
27731
#: serverguide/C/dns.xml:14(para)
27732
msgid ""
27733
"Domain Name Service (DNS) is an Internet service that maps IP addresses and "
27734
"fully qualified domain names (FQDN) to one another. In this way, DNS "
27735
"alleviates the need to remember IP addresses. Computers that run DNS are "
27736
"called <emphasis>name servers</emphasis>. Ubuntu ships with "
27737
"<application>BIND</application> (Berkley Internet Naming Daemon), the most "
27738
"common program used for maintaining a name server on Linux."
27739
msgstr ""
27740
"Domain Name Service (DNS) is an Internet service that maps IP addresses and "
27741
"fully qualified domain names (FQDN) to one another. In this way, DNS "
27742
"alleviates the need to remember IP addresses. Computers that run DNS are "
27743
"called <emphasis>name servers</emphasis>. Ubuntu ships with "
27744
"<application>BIND</application> (Berkley Internet Naming Daemon), the most "
27745
"common program used for maintaining a name server on Linux."
27746
27747
#: serverguide/C/dns.xml:24(para)
27748
msgid ""
27749
"At a terminal prompt, enter the following command to install "
27750
"<application>dns</application>:"
27751
msgstr ""
27752
"At a terminal prompt, enter the following command to install "
27753
"<application>dns</application>:"
27754
27755
#: serverguide/C/dns.xml:28(command)
27756
msgid "sudo apt-get install bind9"
27757
msgstr "sudo apt-get install bind9"
27758
27759
#: serverguide/C/dns.xml:30(para)
27760
msgid ""
27761
"A very useful package for testing and troubleshooting DNS issues is the "
27762
"dnsutils package. To install <application>dnsutils</application> enter the "
27763
"following:"
27764
msgstr ""
27765
"A very useful package for testing and troubleshooting DNS issues is the "
27766
"dnsutils package. To install <application>dnsutils</application> enter the "
27767
"following:"
27768
27769
#: serverguide/C/dns.xml:35(command)
27770
msgid "sudo apt-get install dnsutils"
27771
msgstr "sudo apt-get install dnsutils"
27772
27773
#: serverguide/C/dns.xml:40(para)
27774
msgid ""
27775
"There are many ways to configure <application>BIND9</application>. Some of "
27776
"the most common configurations are a caching nameserver, primary master, and "
27777
"as a secondary master."
27778
msgstr ""
27779
27780
#: serverguide/C/dns.xml:46(para)
27781
msgid ""
27782
"When configured as a caching nameserver BIND9 will find the answer to name "
27783
"queries and remember the answer when the domain is queried again."
27784
msgstr ""
27785
"When configured as a caching nameserver BIND9 will find the answer to name "
27786
"queries and remember the answer when the domain is queried again."
27787
27788
#: serverguide/C/dns.xml:52(para)
27789
msgid ""
27790
"As a primary master server BIND9 reads the data for a zone from a file on "
27791
"it's host and is authoritative for that zone."
27792
msgstr ""
27793
"As a primary master server BIND9 reads the data for a zone from a file on "
27794
"it's host and is authoritative for that zone."
27795
27796
#: serverguide/C/dns.xml:57(para)
27797
msgid ""
27798
"In a secondary master configuration BIND9 gets the zone data from another "
27799
"nameserver authoritative for the zone."
27800
msgstr ""
27801
"In a secondary master configuration BIND9 gets the zone data from another "
27802
"nameserver authoritative for the zone."
27803
27804
#: serverguide/C/dns.xml:65(para)
27805
msgid ""
27806
"The DNS configuration files are stored in the <filename>/etc/bind</filename> "
27807
"directory. The primary configuration file is "
27808
"<filename>/etc/bind/named.conf</filename>."
27809
msgstr ""
27810
"The DNS configuration files are stored in the <filename>/etc/bind</filename> "
27811
"directory. The primary configuration file is "
27812
"<filename>/etc/bind/named.conf</filename>."
27813
27814
#: serverguide/C/dns.xml:72(para)
27815
msgid ""
27816
"The <emphasis>include</emphasis> line specifies the filename which contains "
27817
"the DNS options. The <emphasis>directory</emphasis> line in the "
27818
"<filename>/etc/bind/named.conf.options</filename> file tells DNS where to "
27819
"look for files. All files BIND uses will be relative to this directory."
27820
msgstr ""
27821
"The <emphasis>include</emphasis> line specifies the filename which contains "
27822
"the DNS options. The <emphasis>directory</emphasis> line in the "
27823
"<filename>/etc/bind/named.conf.options</filename> file tells DNS where to "
27824
"look for files. All files BIND uses will be relative to this directory."
27825
27826
#: serverguide/C/dns.xml:80(para)
27827
msgid ""
27828
"The file named <filename>/etc/bind/db.root</filename> describes the root "
27829
"nameservers in the world. The servers change over time, so the "
27830
"<filename>/etc/bind/db.root</filename> file must be maintained now and then. "
27831
"This is usually done as updates to the <application>bind9</application> "
27832
"package. The <emphasis>zone</emphasis> section defines a master server, and "
27833
"it is stored in a file mentioned in the <emphasis>file</emphasis> option."
27834
msgstr ""
27835
"The file named <filename>/etc/bind/db.root</filename> describes the root "
27836
"nameservers in the world. The servers change over time, so the "
27837
"<filename>/etc/bind/db.root</filename> file must be maintained now and then. "
27838
"This is usually done as updates to the <application>bind9</application> "
27839
"package. The <emphasis>zone</emphasis> section defines a master server, and "
27840
"it is stored in a file mentioned in the <emphasis>file</emphasis> option."
27841
27842
#: serverguide/C/dns.xml:90(para)
27843
msgid ""
27844
"It is possible to configure the same server to be a caching name server, "
27845
"primary master, and secondary master. A server can be the Start of Authority "
27846
"(SOA) for one zone, while providing secondary service for another zone. All "
27847
"the while providing caching services for hosts on the local LAN."
27848
msgstr ""
27849
"It is possible to configure the same server to be a caching name server, "
27850
"primary master, and secondary master. A server can be the Start of Authority "
27851
"(SOA) for one zone, while providing secondary service for another zone. All "
27852
"the while providing caching services for hosts on the local LAN."
27853
27854
#: serverguide/C/dns.xml:98(title)
27855
msgid "Caching Nameserver"
27856
msgstr "Caching Nameserver"
27857
27858
#: serverguide/C/dns.xml:99(para)
27859
msgid ""
27860
"The default configuration is setup to act as a caching server. All that is "
27861
"required is simply adding the IP Addresses of your ISP's DNS servers. Simply "
27862
"uncomment and edit the following in "
27863
"<filename>/etc/bind/named.conf.options</filename>:"
27864
msgstr ""
27865
"The default configuration is setup to act as a caching server. All that is "
27866
"required is simply adding the IP Addresses of your ISP's DNS servers. Simply "
27867
"uncomment and edit the following in "
27868
"<filename>/etc/bind/named.conf.options</filename>:"
27869
27870
#: serverguide/C/dns.xml:103(programlisting)
27871
#, no-wrap
27872
msgid ""
27873
"\n"
27874
"forwarders {\n"
27875
" 1.2.3.4;\n"
27876
" 5.6.7.8;\n"
27877
" };\n"
27878
msgstr ""
27879
"\n"
27880
"forwarders {\n"
27881
" 1.2.3.4;\n"
27882
" 5.6.7.8;\n"
27883
" };\n"
27884
27885
#: serverguide/C/dns.xml:110(para)
27886
msgid ""
27887
"Replace <emphasis>1.2.3.4</emphasis> and <emphasis>5.6.7.8</emphasis> with "
27888
"the IP Adresses of actual nameservers."
27889
msgstr ""
27890
"Replace <emphasis>1.2.3.4</emphasis> and <emphasis>5.6.7.8</emphasis> with "
27891
"the IP Adresses of actual nameservers."
27892
27893
#: serverguide/C/dns.xml:114(para)
27894
msgid ""
27895
"Now restart the DNS server, to enable the new configuration. From a terminal "
27896
"prompt:"
27897
msgstr ""
27898
"Now restart the DNS server, to enable the new configuration. From a terminal "
27899
"prompt:"
27900
27901
#: serverguide/C/dns.xml:118(command) serverguide/C/dns.xml:194(command) serverguide/C/dns.xml:253(command) serverguide/C/dns.xml:312(command) serverguide/C/dns.xml:561(command)
27902
msgid "sudo /etc/init.d/bind9 restart"
27903
msgstr "sudo /etc/init.d/bind9 restart"
27904
27905
#: serverguide/C/dns.xml:120(para)
27906
msgid ""
27907
"See <xref linkend=\"dns-testing-dig\"/> for information on testing a caching "
27908
"DNS server."
27909
msgstr ""
27910
"See <xref linkend=\"dns-testing-dig\"/> for information on testing a caching "
27911
"DNS server."
27912
27913
#: serverguide/C/dns.xml:125(title)
27914
msgid "Primary Master"
27915
msgstr "Primary Master"
27916
27917
#: serverguide/C/dns.xml:126(para)
27918
msgid ""
27919
"In this section <application>BIND9</application> will be configured as the "
27920
"Primary Master for the domain <emphasis>example.com</emphasis>. Simply "
27921
"replace <emphasis role=\"italic\">example.com</emphasis> with your FQDN "
27922
"(Fully Qualified Domain Name)."
27923
msgstr ""
27924
"In this section <application>BIND9</application> will be configured as the "
27925
"Primary Master for the domain <emphasis>example.com</emphasis>. Simply "
27926
"replace <emphasis role=\"italic\">example.com</emphasis> with your FQDN "
27927
"(Fully Qualified Domain Name)."
27928
27929
#: serverguide/C/dns.xml:132(title)
27930
msgid "Forward Zone File"
27931
msgstr "Forward Zone File"
27932
27933
#: serverguide/C/dns.xml:133(para)
27934
msgid ""
27935
"To add a DNS zone to BIND9, turning BIND9 into a Primary Master server, the "
27936
"first step is to edit <filename>/etc/bind/named.conf.local</filename>:"
27937
msgstr ""
27938
"To add a DNS zone to BIND9, turning BIND9 into a Primary Master server, the "
27939
"first step is to edit <filename>/etc/bind/named.conf.local</filename>:"
27940
27941
#: serverguide/C/dns.xml:137(programlisting)
27942
#, no-wrap
27943
msgid ""
27944
"\n"
27945
"zone \"example.com\" {\n"
27946
"\ttype master;\n"
27947
" file \"/etc/bind/db.example.com\";\n"
27948
"};\n"
27949
msgstr ""
27950
"\n"
27951
"zone \"example.com\" {\n"
27952
"\ttype master;\n"
27953
" file \"/etc/bind/db.example.com\";\n"
27954
"};\n"
27955
27956
#: serverguide/C/dns.xml:143(para)
27957
msgid ""
27958
"Now use an existing zone file as a template to create the "
27959
"<filename>/etc/bind/db.example.com</filename> file:"
27960
msgstr ""
27961
"Now use an existing zone file as a template to create the "
27962
"<filename>/etc/bind/db.example.com</filename> file:"
27963
27964
#: serverguide/C/dns.xml:147(command)
27965
msgid "sudo cp /etc/bind/db.local /etc/bind/db.example.com"
27966
msgstr "sudo cp /etc/bind/db.local /etc/bind/db.example.com"
27967
27968
#: serverguide/C/dns.xml:149(para)
27969
msgid ""
27970
"Edit the new zone file <filename>/etc/bind/db.example.com</filename> change "
27971
"<emphasis>localhost.</emphasis> to the FQDN of your server, leaving the "
27972
"additional \".\" at the end. Change <emphasis>127.0.0.1</emphasis> to the "
27973
"nameserver's IP Address and <emphasis>root.localhost</emphasis> to a valid "
27974
"email address, but with a \".\" instead of the usual \"@\" symbol, again "
27975
"leaving the \".\" at the end."
27976
msgstr ""
27977
"Edit the new zone file <filename>/etc/bind/db.example.com</filename> change "
27978
"<emphasis>localhost.</emphasis> to the FQDN of your server, leaving the "
27979
"additional \".\" at the end. Change <emphasis>127.0.0.1</emphasis> to the "
27980
"nameserver's IP Address and <emphasis>root.localhost</emphasis> to a valid e-"
27981
"mail address, but with a \".\" instead of the usual \"@\" symbol, again "
27982
"leaving the \".\" at the end."
27983
27984
#: serverguide/C/dns.xml:155(para)
27985
msgid ""
27986
"Also, create an <emphasis>A record</emphasis> for <emphasis "
27987
"role=\"italic\">ns.example.com</emphasis>. The name server in this example:"
27988
msgstr ""
27989
"Also, create an <emphasis>A record</emphasis> for <emphasis "
27990
"role=\"italic\">ns.example.com</emphasis>. The name server in this example:"
27991
27992
#: serverguide/C/dns.xml:159(programlisting)
27993
#, no-wrap
27994
msgid ""
27995
"\n"
27996
";\n"
27997
"; BIND data file for local loopback interface\n"
27998
";\n"
27999
"$TTL 604800\n"
28000
"@ IN SOA ns.example.com. root.example.com. (\n"
28001
" 2 ; Serial\n"
28002
" 604800 ; Refresh\n"
28003
" 86400 ; Retry\n"
28004
" 2419200 ; Expire\n"
28005
" 604800 ) ; Negative Cache TTL\n"
28006
";\n"
28007
"@ IN NS ns.example.com.\n"
28008
"@ IN A 127.0.0.1\n"
28009
"@ IN AAAA ::1\n"
28010
"ns IN A 192.168.1.10\n"
28011
msgstr ""
28012
"\n"
28013
";\n"
28014
"; BIND data file for local loopback interface\n"
28015
";\n"
28016
"$TTL 604800\n"
28017
"@ IN SOA ns.example.com. root.example.com. (\n"
28018
" 2 ; Serial\n"
28019
" 604800 ; Refresh\n"
28020
" 86400 ; Retry\n"
28021
" 2419200 ; Expire\n"
28022
" 604800 ) ; Negative Cache TTL\n"
28023
";\n"
28024
"@ IN NS ns.example.com.\n"
28025
"@ IN A 127.0.0.1\n"
28026
"@ IN AAAA ::1\n"
28027
"ns IN A 192.168.1.10\n"
28028
28029
#: serverguide/C/dns.xml:176(para)
28030
msgid ""
28031
"You must increment the <emphasis>Serial Number</emphasis> every time you "
28032
"make changes to the zone file. If you make multiple changes before "
28033
"restarting BIND9, simply increment the Serial once."
28034
msgstr ""
28035
"You must increment the <emphasis>Serial Number</emphasis> every time you "
28036
"make changes to the zone file. If you make multiple changes before "
28037
"restarting BIND9, simply increment the Serial once."
28038
28039
#: serverguide/C/dns.xml:180(para)
28040
msgid ""
28041
"Now, you can add DNS records to the bottom of the zone file. See <xref "
28042
"linkend=\"dns-record-types\"/> for details."
28043
msgstr ""
28044
"Now, you can add DNS records to the bottom of the zone file. See <xref "
28045
"linkend=\"dns-record-types\"/> for details."
28046
28047
#: serverguide/C/dns.xml:184(para)
28048
msgid ""
28049
"Many admins like to use the last date edited as the serial of a zone, such "
28050
"as <emphasis>2007010100</emphasis> which is yyyymmddss (where "
28051
"<emphasis>ss</emphasis> is the Serial Number)"
28052
msgstr ""
28053
"Many admins like to use the last date edited as the serial of a zone, such "
28054
"as <emphasis>2007010100</emphasis> which is yyyymmddss (where "
28055
"<emphasis>ss</emphasis> is the Serial Number)"
28056
28057
#: serverguide/C/dns.xml:189(para)
28058
msgid ""
28059
"Once you have made a change to the zone file "
28060
"<application>BIND9</application> will need to be restarted for the changes "
28061
"to take effect:"
28062
msgstr ""
28063
"Once you have made a change to the zone file "
28064
"<application>BIND9</application> will need to be restarted for the changes "
28065
"to take effect:"
28066
28067
#: serverguide/C/dns.xml:198(title)
28068
msgid "Reverse Zone File"
28069
msgstr "Reverse Zone File"
28070
28071
#: serverguide/C/dns.xml:199(para)
28072
msgid ""
28073
"Now that the zone is setup and resolving names to IP Adresses a "
28074
"<emphasis>Reverse zone</emphasis> is also required. A Reverse zone allows "
28075
"DNS to resolve an address to a name."
28076
msgstr ""
28077
"Now that the zone is setup and resolving names to IP Adresses a "
28078
"<emphasis>Reverse zone</emphasis> is also required. A Reverse zone allows "
28079
"DNS to resolve an address to a name."
28080
28081
#: serverguide/C/dns.xml:203(para)
28082
msgid "Edit /etc/bind/named.conf.local and add the following:"
28083
msgstr "Edit /etc/bind/named.conf.local and add the following:"
28084
28085
#: serverguide/C/dns.xml:206(programlisting)
28086
#, no-wrap
28087
msgid ""
28088
"\n"
28089
"zone \"1.168.192.in-addr.arpa\" {\n"
28090
" type master;\n"
28091
" notify no;\n"
28092
" file \"/etc/bind/db.192\";\n"
28093
"};\n"
28094
msgstr ""
28095
"\n"
28096
"zone \"1.168.192.in-addr.arpa\" {\n"
28097
" type master;\n"
28098
" notify no;\n"
28099
" file \"/etc/bind/db.192\";\n"
28100
"};\n"
28101
28102
#: serverguide/C/dns.xml:214(para)
28103
msgid ""
28104
"Replace <emphasis>1.168.192</emphasis> with the first three octets of "
28105
"whatever network you are using. Also, name the zone file "
28106
"<filename>/etc/bind/db.192</filename> appropriately. It should match the "
28107
"first octet of your network."
28108
msgstr ""
28109
"Replace <emphasis>1.168.192</emphasis> with the first three octets of "
28110
"whatever network you are using. Also, name the zone file "
28111
"<filename>/etc/bind/db.192</filename> appropriately. It should match the "
28112
"first octet of your network."
28113
28114
#: serverguide/C/dns.xml:219(para)
28115
msgid "Now create the <filename>/etc/bind/db.192</filename> file:"
28116
msgstr "Now create the <filename>/etc/bind/db.192</filename> file:"
28117
28118
#: serverguide/C/dns.xml:223(command)
28119
msgid "sudo cp /etc/bind/db.127 /etc/bind/db.192"
28120
msgstr "sudo cp /etc/bind/db.127 /etc/bind/db.192"
28121
28122
#: serverguide/C/dns.xml:225(para)
28123
msgid ""
28124
"Next edit <filename>/etc/bind/db.192</filename> changing the basically the "
28125
"same options as <filename>/etc/bind/db.example.com</filename>:"
28126
msgstr ""
28127
"Next edit <filename>/etc/bind/db.192</filename> changing the basically the "
28128
"same options as <filename>/etc/bind/db.example.com</filename>:"
28129
28130
#: serverguide/C/dns.xml:229(programlisting)
28131
#, no-wrap
28132
msgid ""
28133
"\n"
28134
";\n"
28135
"; BIND reverse data file for local loopback interface\n"
28136
";\n"
28137
"$TTL 604800\n"
28138
"@ IN SOA ns.example.com. root.example.com. (\n"
28139
" 2 ; Serial\n"
28140
" 604800 ; Refresh\n"
28141
" 86400 ; Retry\n"
28142
" 2419200 ; Expire\n"
28143
" 604800 ) ; Negative Cache TTL\n"
28144
";\n"
28145
"@ IN NS ns.\n"
28146
"10 IN PTR ns.example.com.\n"
28147
msgstr ""
28148
"\n"
28149
";\n"
28150
"; BIND reverse data file for local loopback interface\n"
28151
";\n"
28152
"$TTL 604800\n"
28153
"@ IN SOA ns.example.com. root.example.com. (\n"
28154
" 2 ; Serial\n"
28155
" 604800 ; Refresh\n"
28156
" 86400 ; Retry\n"
28157
" 2419200 ; Expire\n"
28158
" 604800 ) ; Negative Cache TTL\n"
28159
";\n"
28160
"@ IN NS ns.\n"
28161
"10 IN PTR ns.example.com.\n"
28162
28163
#: serverguide/C/dns.xml:244(para)
28164
msgid ""
28165
"The <emphasis>Serial Number</emphasis> in the Reverse zone needs to be "
28166
"incremented on each change as well. For each <emphasis>A record</emphasis> "
28167
"you configure in <filename>/etc/bind/db.example.com</filename> you need to "
28168
"create a <emphasis>PTR record</emphasis> in "
28169
"<filename>/etc/bind/db.192</filename>."
28170
msgstr ""
28171
28172
#: serverguide/C/dns.xml:249(para)
28173
msgid ""
28174
"After creating the reverse zone file restart "
28175
"<application>BIND9</application>:"
28176
msgstr ""
28177
"After creating the reverse zone file restart "
28178
"<application>BIND9</application>:"
28179
28180
#: serverguide/C/dns.xml:258(title)
28181
msgid "Secondary Master"
28182
msgstr "Secondary Master"
28183
28184
#: serverguide/C/dns.xml:259(para)
28185
msgid ""
28186
"Once a <emphasis>Primary Master</emphasis> has been configured a "
28187
"<emphasis>Secondary Master</emphasis> is needed in order to maintain the "
28188
"availability of the domain should the Primary become unavailable."
28189
msgstr ""
28190
"Once a <emphasis>Primary Master</emphasis> has been configured a "
28191
"<emphasis>Secondary Master</emphasis> is needed in order to maintain the "
28192
"availability of the domain should the Primary become unavailable."
28193
28194
#: serverguide/C/dns.xml:263(para)
28195
msgid ""
28196
"First, on the Primary Master server, the zone transfer needs to be allowed. "
28197
"Add the <emphasis>allow-transfer</emphasis> option to the example Forward "
28198
"and Reverse zone definitions in "
28199
"<filename>/etc/bind/named.conf.local</filename>:"
28200
msgstr ""
28201
"First, on the Primary Master server, the zone transfer needs to be allowed. "
28202
"Add the <emphasis>allow-transfer</emphasis> option to the example Forward "
28203
"and Reverse zone definitions in "
28204
"<filename>/etc/bind/named.conf.local</filename>:"
28205
28206
#: serverguide/C/dns.xml:267(programlisting)
28207
#, no-wrap
28208
msgid ""
28209
"\n"
28210
"zone \"example.com\" {\n"
28211
" type master;\n"
28212
"\tfile \"/etc/bind/db.example.com\";\n"
28213
" allow-transfer { 192.168.1.11; };\n"
28214
"};\n"
28215
"\n"
28216
"zone \"1.168.192.in-addr.arpa\" {\n"
28217
" type master;\n"
28218
" notify no;\n"
28219
" file \"/etc/bind/db.192\";\n"
28220
"\tallow-transfer { 192.168.1.11; };\n"
28221
"};\n"
28222
msgstr ""
28223
"\n"
28224
"zone \"example.com\" {\n"
28225
" type master;\n"
28226
"\tfile \"/etc/bind/db.example.com\";\n"
28227
" allow-transfer { 192.168.1.11; };\n"
28228
"};\n"
28229
"\n"
28230
"zone \"1.168.192.in-addr.arpa\" {\n"
28231
" type master;\n"
28232
" notify no;\n"
28233
" file \"/etc/bind/db.192\";\n"
28234
"\tallow-transfer { 192.168.1.11; };\n"
28235
"};\n"
28236
28237
#: serverguide/C/dns.xml:282(para)
28238
msgid ""
28239
"Replace <emphasis>192.168.1.11</emphasis> with the IP Address of your "
28240
"Secondary nameserver."
28241
msgstr ""
28242
"Replace <emphasis>192.168.1.11</emphasis> with the IP Address of your "
28243
"Secondary nameserver."
28244
28245
#: serverguide/C/dns.xml:286(para)
28246
msgid ""
28247
"Next, on the Secondary Master, install the <application>bind9</application> "
28248
"package the same way as on the Primary. Then edit the "
28249
"<filename>/etc/bind/named.conf.local</filename> and add the following "
28250
"declarations for the Forward and Reverse zones:"
28251
msgstr ""
28252
"Next, on the Secondary Master, install the <application>bind9</application> "
28253
"package the same way as on the Primary. Then edit the "
28254
"<filename>/etc/bind/named.conf.local</filename> and add the following "
28255
"declarations for the Forward and Reverse zones:"
28256
28257
#: serverguide/C/dns.xml:290(programlisting)
28258
#, no-wrap
28259
msgid ""
28260
"\n"
28261
"zone \"example.com\" {\n"
28262
"\ttype slave;\n"
28263
" file \"/var/cache/bind/db.example.com\";\n"
28264
" masters { 192.168.1.10; };\n"
28265
"}; \n"
28266
" \n"
28267
"zone \"1.168.192.in-addr.arpa\" {\n"
28268
"\ttype slave;\n"
28269
" file \"/var/cache/bind/db.192\";\n"
28270
" masters { 192.168.1.10; };\n"
28271
"};\n"
28272
msgstr ""
28273
"\n"
28274
"zone \"example.com\" {\n"
28275
"\ttype slave;\n"
28276
" file \"/var/cache/bind/db.example.com\";\n"
28277
" masters { 192.168.1.10; };\n"
28278
"}; \n"
28279
" \n"
28280
"zone \"1.168.192.in-addr.arpa\" {\n"
28281
"\ttype slave;\n"
28282
" file \"/var/cache/bind/db.192\";\n"
28283
" masters { 192.168.1.10; };\n"
28284
"};\n"
28285
28286
#: serverguide/C/dns.xml:304(para)
28287
msgid ""
28288
"Replace <emphasis>192.168.1.10</emphasis> with the IP Address of your "
28289
"Primary nameserver."
28290
msgstr ""
28291
"Replace <emphasis>192.168.1.10</emphasis> with the IP Address of your "
28292
"Primary nameserver."
28293
28294
#: serverguide/C/dns.xml:308(para)
28295
msgid "Restart <application>BIND9</application> on the Secondary Master:"
28296
msgstr "Restart <application>BIND9</application> on the Secondary Master:"
28297
28298
#: serverguide/C/dns.xml:314(para)
28299
msgid ""
28300
"In <filename>/var/log/syslog</filename> you should see something similar to:"
28301
msgstr ""
28302
"In <filename>/var/log/syslog</filename> you should see something similar to:"
28303
28304
#: serverguide/C/dns.xml:317(programlisting)
28305
#, no-wrap
28306
msgid ""
28307
"\n"
28308
"slave zone \"example.com\" (IN) loaded (serial 6)\n"
28309
"slave zone \"100.18.172.in-addr.arpa\" (IN) loaded (serial 3)\n"
28310
msgstr ""
28311
"\n"
28312
"slave zone \"example.com\" (IN) loaded (serial 6)\n"
28313
"slave zone \"100.18.172.in-addr.arpa\" (IN) loaded (serial 3)\n"
28314
28315
#: serverguide/C/dns.xml:322(para)
28316
msgid ""
28317
"Note: A zone is only transferred if the <emphasis>Serial Number</emphasis> "
28318
"on the Primary is larger than the one on the Secondary."
28319
msgstr ""
28320
"Note: A zone is only transferred if the <emphasis>Serial Number</emphasis> "
28321
"on the Primary is larger than the one on the Secondary."
28322
28323
#: serverguide/C/dns.xml:328(para)
28324
msgid ""
28325
"The default directory for non-authoritative zone files is "
28326
"<filename>/var/cache/bind/</filename>. This directory is also configured in "
28327
"<application>AppArmor</application> to allow the "
28328
"<application>named</application> daemon to write to it. For more information "
28329
"on AppArmor see <xref linkend=\"apparmor\"/>."
28330
msgstr ""
28331
28332
#: serverguide/C/dns.xml:339(para)
28333
msgid ""
28334
"This section covers ways to help determine the cause when problems happen "
28335
"with DNS and <application>BIND9</application>."
28336
msgstr ""
28337
"This section covers ways to help determine the cause when problems happen "
28338
"with DNS and <application>BIND9</application>."
28339
28340
#: serverguide/C/dns.xml:345(title)
28341
msgid "resolv.conf"
28342
msgstr "resolv.conf"
28343
28344
#: serverguide/C/dns.xml:346(para)
28345
msgid ""
28346
"The first step in testing <application>BIND9</application> is to add the "
28347
"nameserver's IP Address to a hosts resolver. The Primary nameserver should "
28348
"be configured as well as another host to double check things. Simply edit "
28349
"<filename>/etc/resolv.conf</filename> and add the following:"
28350
msgstr ""
28351
"The first step in testing <application>BIND9</application> is to add the "
28352
"nameserver's IP Address to a hosts resolver. The Primary nameserver should "
28353
"be configured as well as another host to double check things. Simply edit "
28354
"<filename>/etc/resolv.conf</filename> and add the following:"
28355
28356
#: serverguide/C/dns.xml:351(programlisting)
28357
#, no-wrap
28358
msgid ""
28359
"\n"
28360
"nameserver\t192.168.1.10\n"
28361
"nameserver\t192.168.1.11\n"
28362
msgstr ""
28363
"\n"
28364
"nameserver\t192.168.1.10\n"
28365
"nameserver\t192.168.1.11\n"
28366
28367
#: serverguide/C/dns.xml:356(para)
28368
msgid ""
28369
"You should also add the IP Address of the Secondary nameserver in case the "
28370
"Primary becomes unavailable."
28371
msgstr ""
28372
"You should also add the IP Address of the Secondary nameserver in case the "
28373
"Primary becomes unavailable."
28374
28375
#: serverguide/C/dns.xml:362(title)
28376
msgid "dig"
28377
msgstr "dig"
28378
28379
#: serverguide/C/dns.xml:363(para)
28380
msgid ""
28381
"If you installed the <application>dnsutils</application> package you can "
28382
"test your setup using the DNS lookup utility <application>dig</application>:"
28383
msgstr ""
28384
"If you installed the <application>dnsutils</application> package you can "
28385
"test your setup using the DNS lookup utility <application>dig</application>:"
28386
28387
#: serverguide/C/dns.xml:369(para)
28388
msgid ""
28389
"After installing <application>BIND9</application> use "
28390
"<application>dig</application> against the loopback interface to make sure "
28391
"it is listening on port 53. From a terminal prompt:"
28392
msgstr ""
28393
"After installing <application>BIND9</application> use "
28394
"<application>dig</application> against the loopback interface to make sure "
28395
"it is listening on port 53. From a terminal prompt:"
28396
28397
#: serverguide/C/dns.xml:374(command)
28398
msgid "dig -x 127.0.0.1"
28399
msgstr "dig -x 127.0.0.1"
28400
28401
#: serverguide/C/dns.xml:376(para)
28402
msgid "You should see lines similar to the following in the command output:"
28403
msgstr "You should see lines similar to the following in the command output:"
28404
28405
#: serverguide/C/dns.xml:379(programlisting)
28406
#, no-wrap
28407
msgid ""
28408
"\n"
28409
";; Query time: 1 msec\n"
28410
";; SERVER: 192.168.1.10#53(192.168.1.10)\n"
28411
msgstr ""
28412
"\n"
28413
";; Query time: 1 msec\n"
28414
";; SERVER: 192.168.1.10#53(192.168.1.10)\n"
28415
28416
#: serverguide/C/dns.xml:385(para)
28417
msgid ""
28418
"If you have configured <application>BIND9</application> as a "
28419
"<emphasis>Caching</emphasis> nameserver \"dig\" an outside domain to check "
28420
"the query time:"
28421
msgstr ""
28422
"If you have configured <application>BIND9</application> as a "
28423
"<emphasis>Caching</emphasis> nameserver \"dig\" an outside domain to check "
28424
"the query time:"
28425
28426
#: serverguide/C/dns.xml:390(command)
28427
msgid "dig ubuntu.com"
28428
msgstr "dig ubuntu.com"
28429
28430
#: serverguide/C/dns.xml:392(para)
28431
msgid "Note the query time toward the end of the command output:"
28432
msgstr "Note the query time toward the end of the command output:"
28433
28434
#: serverguide/C/dns.xml:395(programlisting)
28435
#, no-wrap
28436
msgid ""
28437
"\n"
28438
";; Query time: 49 msec\n"
28439
msgstr ""
28440
"\n"
28441
";; Query time: 49 msec\n"
28442
28443
#: serverguide/C/dns.xml:398(para)
28444
msgid "After a second dig there should be improvement:"
28445
msgstr "After a second dig there should be improvement:"
28446
28447
#: serverguide/C/dns.xml:401(programlisting)
28448
#, no-wrap
28449
msgid ""
28450
"\n"
28451
";; Query time: 1 msec\n"
28452
msgstr ""
28453
"\n"
28454
";; Query time: 1 msec\n"
28455
28456
#: serverguide/C/dns.xml:408(title)
28457
msgid "ping"
28458
msgstr "ping"
28459
28460
#: serverguide/C/dns.xml:410(para)
28461
msgid ""
28462
"Now to demonstrate how applications make use of DNS to resolve a host name "
28463
"use the <application>ping</application> utility to send an ICMP echo "
28464
"request. From a terminal prompt enter:"
28465
msgstr ""
28466
"Now to demonstrate how applications make use of DNS to resolve a host name "
28467
"use the <application>ping</application> utility to send an ICMP echo "
28468
"request. From a terminal prompt enter:"
28469
28470
#: serverguide/C/dns.xml:416(command)
28471
msgid "ping example.com"
28472
msgstr "ping example.com"
28473
28474
#: serverguide/C/dns.xml:418(para)
28475
msgid ""
28476
"This tests if the nameserver can resolve the name "
28477
"<emphasis>ns.example.com</emphasis> to an IP Address. The command output "
28478
"should resemble:"
28479
msgstr ""
28480
"This tests if the nameserver can resolve the name "
28481
"<emphasis>ns.example.com</emphasis> to an IP Address. The command output "
28482
"should resemble:"
28483
28484
#: serverguide/C/dns.xml:422(programlisting)
28485
#, no-wrap
28486
msgid ""
28487
"\n"
28488
"PING ns.example.com (192.168.1.10) 56(84) bytes of data.\n"
28489
"64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=0.800 ms\n"
28490
"64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=0.813 ms\n"
28491
msgstr ""
28492
"\n"
28493
"PING ns.example.com (192.168.1.10) 56(84) bytes of data.\n"
28494
"64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=0.800 ms\n"
28495
"64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=0.813 ms\n"
28496
28497
#: serverguide/C/dns.xml:429(title)
28498
msgid "named-checkzone"
28499
msgstr "named-checkzone"
28500
28501
#: serverguide/C/dns.xml:430(para)
28502
msgid ""
28503
"A great way to test your zone files is by using the <application>named-"
28504
"checkzone</application> utility installed with the "
28505
"<application>bind9</application> package. This utility allows you to make "
28506
"sure the configuration is correct before restarting "
28507
"<application>BIND9</application> and making the changes live."
28508
msgstr ""
28509
"A great way to test your zone files is by using the <application>named-"
28510
"checkzone</application> utility installed with the "
28511
"<application>bind9</application> package. This utility allows you to make "
28512
"sure the configuration is correct before restarting "
28513
"<application>BIND9</application> and making the changes live."
28514
28515
#: serverguide/C/dns.xml:437(para)
28516
msgid ""
28517
"To test our example Forward zone file enter the following from a command "
28518
"prompt:"
28519
msgstr ""
28520
"To test our example Forward zone file enter the following from a command "
28521
"prompt:"
28522
28523
#: serverguide/C/dns.xml:441(command)
28524
msgid "named-checkzone example.com /etc/bind/db.example.com"
28525
msgstr "named-checkzone example.com /etc/bind/db.example.com"
28526
28527
#: serverguide/C/dns.xml:443(para)
28528
msgid ""
28529
"If everything is configured correctly you should see output similar to:"
28530
msgstr ""
28531
"If everything is configured correctly you should see output similar to:"
28532
28533
#: serverguide/C/dns.xml:446(programlisting)
28534
#, no-wrap
28535
msgid ""
28536
"\n"
28537
"zone example.com/IN: loaded serial 6\n"
28538
"OK\n"
28539
msgstr ""
28540
"\n"
28541
"zone example.com/IN: loaded serial 6\n"
28542
"OK\n"
28543
28544
#: serverguide/C/dns.xml:452(para)
28545
msgid "Similarly, to test the Reverse zone file enter the following:"
28546
msgstr "Similarly, to test the Reverse zone file enter the following:"
28547
28548
#: serverguide/C/dns.xml:456(command)
28549
msgid "named-checkzone example.com /etc/bind/db.192"
28550
msgstr "named-checkzone example.com /etc/bind/db.192"
28551
28552
#: serverguide/C/dns.xml:458(para)
28553
msgid "The output should be similar to:"
28554
msgstr "The output should be similar to:"
28555
28556
#: serverguide/C/dns.xml:461(programlisting)
28557
#, no-wrap
28558
msgid ""
28559
"\n"
28560
"zone example.com/IN: loaded serial 3\n"
28561
"OK\n"
28562
msgstr ""
28563
"\n"
28564
"zone example.com/IN: loaded serial 3\n"
28565
"OK\n"
28566
28567
#: serverguide/C/dns.xml:468(para)
28568
msgid ""
28569
"The <emphasis>Serial Number</emphasis> of your zone file will probably be "
28570
"different."
28571
msgstr ""
28572
"The <emphasis>Serial Number</emphasis> of your zone file will probably be "
28573
"different."
28574
28575
#: serverguide/C/dns.xml:475(title)
28576
msgid "Logging"
28577
msgstr "Logging"
28578
28579
#: serverguide/C/dns.xml:476(para)
28580
msgid ""
28581
"<application>BIND9</application> has a wide variety of logging configuration "
28582
"options available. There are two main options. The "
28583
"<emphasis>channel</emphasis> option configures where logs go, and the "
28584
"<emphasis>category</emphasis> option determines what information to log."
28585
msgstr ""
28586
"<application>BIND9</application> has a wide variety of logging configuration "
28587
"options available. There are two main options. The "
28588
"<emphasis>channel</emphasis> option configures where logs go, and the "
28589
"<emphasis>category</emphasis> option determines what information to log."
28590
28591
#: serverguide/C/dns.xml:480(para)
28592
msgid "If no logging option is configured the default option is:"
28593
msgstr "If no logging option is configured the default option is:"
28594
28595
#: serverguide/C/dns.xml:483(programlisting)
28596
#, no-wrap
28597
msgid ""
28598
"\n"
28599
"logging {\n"
28600
" category default { default_syslog; default_debug; };\n"
28601
" category unmatched { null; };\n"
28602
"};\n"
28603
msgstr ""
28604
"\n"
28605
"logging {\n"
28606
" category default { default_syslog; default_debug; };\n"
28607
" category unmatched { null; };\n"
28608
"};\n"
28609
28610
#: serverguide/C/dns.xml:489(para)
28611
msgid ""
28612
"This section covers configuring <application>BIND9</application> to send "
28613
"<emphasis>debug</emphasis> messages related to DNS queries to a separate "
28614
"file."
28615
msgstr ""
28616
"This section covers configuring <application>BIND9</application> to send "
28617
"<emphasis>debug</emphasis> messages related to DNS queries to a separate "
28618
"file."
28619
28620
#: serverguide/C/dns.xml:494(para)
28621
msgid ""
28622
"First, we need to configure a channel to specify which file to send the "
28623
"messages to. Edit <filename>/etc/bind/named.conf.local</filename> and add "
28624
"the following:"
28625
msgstr ""
28626
"First, we need to configure a channel to specify which file to send the "
28627
"messages to. Edit <filename>/etc/bind/named.conf.local</filename> and add "
28628
"the following:"
28629
28630
#: serverguide/C/dns.xml:498(programlisting)
28631
#, no-wrap
28632
msgid ""
28633
"\n"
28634
"logging {\n"
28635
" channel query.log { \n"
28636
" file \"/var/log/query.log\";\n"
28637
" severity debug 3; \n"
28638
" }; \n"
28639
"};\n"
28640
msgstr ""
28641
"\n"
28642
"logging {\n"
28643
" channel query.log { \n"
28644
" file \"/var/log/query.log\";\n"
28645
" severity debug 3; \n"
28646
" }; \n"
28647
"};\n"
28648
28649
#: serverguide/C/dns.xml:508(para)
28650
msgid "Next, configure a category to send all DNS queries to the query file:"
28651
msgstr ""
28652
"Next, configure a category to send all DNS queries to the query file:"
28653
28654
#: serverguide/C/dns.xml:511(programlisting)
28655
#, no-wrap
28656
msgid ""
28657
"\n"
28658
"logging {\n"
28659
" channel query.log { \n"
28660
" file \"/var/log/query.log\"; \n"
28661
" severity debug 3; \n"
28662
" }; \n"
28663
" <emphasis>category queries { query.log; };</emphasis> \n"
28664
"};\n"
28665
msgstr ""
28666
"\n"
28667
"logging {\n"
28668
" channel query.log { \n"
28669
" file \"/var/log/query.log\"; \n"
28670
" severity debug 3; \n"
28671
" }; \n"
28672
" <emphasis>category queries { query.log; };</emphasis> \n"
28673
"};\n"
28674
28675
#: serverguide/C/dns.xml:523(para)
28676
msgid ""
28677
"Note: the <emphasis>debug</emphasis> option can be set from 1 to 3. If a "
28678
"level isn't specified level 1 is the default."
28679
msgstr ""
28680
"Note: the <emphasis>debug</emphasis> option can be set from 1 to 3. If a "
28681
"level isn't specified level 1 is the default."
28682
28683
#: serverguide/C/dns.xml:529(para)
28684
msgid ""
28685
"Since the <emphasis>named daemon</emphasis> runs as the "
28686
"<emphasis>bind</emphasis> user the <filename>/var/log/query.log</filename> "
28687
"file must be created and the ownership changed:"
28688
msgstr ""
28689
"Since the <emphasis>named daemon</emphasis> runs as the "
28690
"<emphasis>bind</emphasis> user the <filename>/var/log/query.log</filename> "
28691
"file must be created and the ownership changed:"
28692
28693
#: serverguide/C/dns.xml:534(command)
28694
msgid "sudo touch /var/log/query.log"
28695
msgstr "sudo touch /var/log/query.log"
28696
28697
#: serverguide/C/dns.xml:535(command)
28698
msgid "sudo chown bind /var/log/query.log"
28699
msgstr "sudo chown bind /var/log/query.log"
28700
28701
#: serverguide/C/dns.xml:539(para)
28702
msgid ""
28703
"Before <application>named</application> daemon can write to the new log file "
28704
"the <application>AppArmor</application> profile must be updated. First, edit "
28705
"<filename>/etc/apparmor.d/usr.sbin.named</filename> and add:"
28706
msgstr ""
28707
"Before <application>named</application> daemon can write to the new log file "
28708
"the <application>AppArmor</application> profile must be updated. First, edit "
28709
"<filename>/etc/apparmor.d/usr.sbin.named</filename> and add:"
28710
28711
#: serverguide/C/dns.xml:543(programlisting)
28712
#, no-wrap
28713
msgid ""
28714
"\n"
28715
"/var/log/query.log w,\n"
28716
msgstr ""
28717
"\n"
28718
"/var/log/query.log w,\n"
28719
28720
#: serverguide/C/dns.xml:546(para)
28721
msgid "Next, reload the profile:"
28722
msgstr "Next, reload the profile:"
28723
28724
#: serverguide/C/dns.xml:550(command)
28725
msgid "cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r"
28726
msgstr "cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r"
28727
28728
#: serverguide/C/dns.xml:552(para)
28729
msgid ""
28730
"For more information on <application>AppArmor</application> see <xref "
28731
"linkend=\"apparmor\"/>"
28732
msgstr ""
28733
"For more information on <application>AppArmor</application> see <xref "
28734
"linkend=\"apparmor\"/>"
28735
28736
#: serverguide/C/dns.xml:557(para)
28737
msgid ""
28738
"Now restart <application>BIND9</application> for the changes to take effect:"
28739
msgstr ""
28740
"Now restart <application>BIND9</application> for the changes to take effect:"
28741
28742
#: serverguide/C/dns.xml:565(para)
28743
msgid ""
28744
"You should see the file <filename>/var/log/query.log</filename> fill with "
28745
"query information. This is a simple example of the "
28746
"<application>BIND9</application> logging options. For coverage of advanced "
28747
"options see <xref linkend=\"dns-more-info\"/>."
28748
msgstr ""
28749
"You should see the file <filename>/var/log/query.log</filename> fill with "
28750
"query information. This is a simple example of the "
28751
"<application>BIND9</application> logging options. For coverage of advanced "
28752
"options see <xref linkend=\"dns-more-info\"/>."
28753
28754
#: serverguide/C/dns.xml:574(title)
28755
msgid "Common Record Types"
28756
msgstr "Common Record Types"
28757
28758
#: serverguide/C/dns.xml:575(para)
28759
msgid "This section covers some of the most common DNS record types."
28760
msgstr "This section covers some of the most common DNS record types."
28761
28762
#: serverguide/C/dns.xml:580(para)
28763
msgid ""
28764
"<emphasis>A</emphasis> record: This record maps an IP Address to a hostname."
28765
msgstr ""
28766
"<emphasis>A</emphasis> record: This record maps an IP Address to a hostname."
28767
28768
#: serverguide/C/dns.xml:583(programlisting)
28769
#, no-wrap
28770
msgid ""
28771
"\n"
28772
"www IN A 192.168.1.12\n"
28773
msgstr ""
28774
"\n"
28775
"www IN A 192.168.1.12\n"
28776
28777
#: serverguide/C/dns.xml:588(para)
28778
msgid ""
28779
"<emphasis>CNAME</emphasis> record: Used to create an alias to an existing A "
28780
"record. You cannot create a CNAME record pointing to another CNAME record."
28781
msgstr ""
28782
"<emphasis>CNAME</emphasis> record: Used to create an alias to an existing A "
28783
"record. You cannot create a CNAME record pointing to another CNAME record."
28784
28785
#: serverguide/C/dns.xml:591(programlisting)
28786
#, no-wrap
28787
msgid ""
28788
"\n"
28789
"web IN CNAME www\n"
28790
msgstr ""
28791
"\n"
28792
"web IN CNAME www\n"
28793
28794
#: serverguide/C/dns.xml:596(para)
28795
msgid ""
28796
"<emphasis>MX</emphasis> record: Used to define where email should be sent "
28797
"to. Must point to an A record, not a CNAME."
28798
msgstr ""
28799
"<emphasis>MX</emphasis> record: Used to define where e-mail should be sent "
28800
"to. Must point to an A record, not a CNAME."
28801
28802
#: serverguide/C/dns.xml:599(programlisting)
28803
#, no-wrap
28804
msgid ""
28805
"\n"
28806
" IN MX 1 mail.example.com.\n"
28807
"mail IN A 192.168.1.13\n"
28808
msgstr ""
28809
"\n"
28810
" IN MX 1 mail.example.com.\n"
28811
"mail IN A 192.168.1.13\n"
28812
28813
#: serverguide/C/dns.xml:605(para)
28814
msgid ""
28815
"<emphasis>NS</emphasis> record: Used to define which servers serve copies of "
28816
"a zone. It must point to an A record, not a CNAME. This is where Primary and "
28817
"Secondary servers are defined."
28818
msgstr ""
28819
"<emphasis>NS</emphasis> record: Used to define which servers serve copies of "
28820
"a zone. It must point to an A record, not a CNAME. This is where Primary and "
28821
"Secondary servers are defined."
28822
28823
#: serverguide/C/dns.xml:609(programlisting)
28824
#, no-wrap
28825
msgid ""
28826
"\n"
28827
" IN NS ns.example.com.\n"
28828
"\tIN NS ns2.example.com.\n"
28829
"ns IN A 192.168.1.10\n"
28830
"ns2\tIN A\t 192.168.1.11\n"
28831
msgstr ""
28832
"\n"
28833
" IN NS ns.example.com.\n"
28834
"\tIN NS ns2.example.com.\n"
28835
"ns IN A 192.168.1.10\n"
28836
"ns2\tIN A\t 192.168.1.11\n"
28837
28838
#: serverguide/C/dns.xml:622(para)
28839
msgid ""
28840
"The <ulink url=\"http://www.tldp.org/HOWTO/DNS-HOWTO.html\">DNS "
28841
"HOWTO</ulink> explains more advanced options for configuring BIND9."
28842
msgstr ""
28843
"The <ulink url=\"http://www.tldp.org/HOWTO/DNS-HOWTO.html\">DNS "
28844
"HOWTO</ulink> explains more advanced options for configuring BIND9."
28845
28846
#: serverguide/C/dns.xml:627(para)
28847
msgid ""
28848
"For in depth coverage of <emphasis>DNS</emphasis> and "
28849
"<application>BIND9</application> see <ulink "
28850
"url=\"http://www.bind9.net/\">Bind9.net</ulink>."
28851
msgstr ""
28852
"For in depth coverage of <emphasis>DNS</emphasis> and "
28853
"<application>BIND9</application> see <ulink "
28854
"url=\"http://www.bind9.net/\">Bind9.net</ulink>."
28855
28856
#: serverguide/C/dns.xml:632(para)
28857
msgid ""
28858
"<ulink url=\"http://www.oreilly.com/catalog/dns5/index.html\">DNS and "
28859
"BIND</ulink> is a popular book now in it's fifth edition."
28860
msgstr ""
28861
"<ulink url=\"http://www.oreilly.com/catalog/dns5/index.html\">DNS and "
28862
"BIND</ulink> is a popular book now in it's fifth edition."
28863
28864
#: serverguide/C/dns.xml:637(para)
28865
msgid ""
28866
"A great place to ask for <application>BIND9</application> assistance, and "
28867
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
28868
"server</emphasis> IRC channel on <ulink "
28869
"url=\"http://freenode.net\">freenode</ulink>."
28870
msgstr ""
28871
"A great place to ask for <application>BIND9</application> assistance, and "
28872
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
28873
"server</emphasis> IRC channel on <ulink "
28874
"url=\"http://freenode.net\">freenode</ulink>."
28875
28876
#: serverguide/C/dns.xml:643(para)
28877
msgid ""
28878
"Also, see the <ulink "
28879
"url=\"https://help.ubuntu.com/community/BIND9ServerHowto\">BIND9 Server "
28880
"HOWTO</ulink> in the Ubuntu Wiki."
28881
msgstr ""
28882
28883
#: serverguide/C/databases.xml:13(title)
28884
msgid "Databases"
28885
msgstr "Databases"
28886
28887
#: serverguide/C/databases.xml:14(para)
28888
msgid "Ubuntu provides two popular database servers. They are:"
28889
msgstr "Ubuntu provides two popular database servers. They are:"
28890
28891
#: serverguide/C/databases.xml:22(application) serverguide/C/databases.xml:157(title)
28892
msgid "PostgreSQL"
28893
msgstr "PostgreSQL"
28894
28895
#: serverguide/C/databases.xml:25(para)
28896
msgid ""
28897
"They are available in the main repository. This section explains how to "
28898
"install and configure these database servers."
28899
msgstr ""
28900
"They are available in the main repository. This section explains how to "
28901
"install and configure these database servers."
28902
28903
#: serverguide/C/databases.xml:32(para)
28904
msgid ""
28905
"MySQL is a fast, multi-threaded, multi-user, and robust SQL database server. "
28906
"It is intended for mission-critical, heavy-load production systems as well "
28907
"as for embedding into mass-deployed software."
28908
msgstr ""
28909
"MySQL is a fast, multi-threaded, multi-user, and robust SQL database server. "
28910
"It is intended for mission-critical, heavy-load production systems as well "
28911
"as for embedding into mass-deployed software."
28912
28913
#: serverguide/C/databases.xml:41(para)
28914
msgid "To install MySQL, run the following command from a terminal prompt:"
28915
msgstr "To install MySQL, run the following command from a terminal prompt:"
28916
28917
#: serverguide/C/databases.xml:46(command)
28918
msgid "sudo apt-get install mysql-server"
28919
msgstr "sudo apt-get install mysql-server"
28920
28921
#: serverguide/C/databases.xml:48(para)
28922
msgid ""
28923
"During the installation process you will be prompted to enter a password for "
28924
"the <application>MySQL</application> root user."
28925
msgstr ""
28926
"During the installation process you will be prompted to enter a password for "
28927
"the <application>MySQL</application> root user."
28928
28929
#: serverguide/C/databases.xml:53(para)
28930
msgid ""
28931
"Once the installation is complete, the MySQL server should be started "
28932
"automatically. You can run the following command from a terminal prompt to "
28933
"check whether the MySQL server is running:"
28934
msgstr ""
28935
"Once the installation is complete, the MySQL server should be started "
28936
"automatically. You can run the following command from a terminal prompt to "
28937
"check whether the MySQL server is running:"
28938
28939
#: serverguide/C/databases.xml:61(command)
28940
msgid "sudo netstat -tap | grep mysql"
28941
msgstr "sudo netstat -tap | grep mysql"
28942
28943
#: serverguide/C/databases.xml:70(programlisting)
28944
#, no-wrap
28945
msgid ""
28946
"\n"
28947
"tcp 0 0 localhost:mysql *:* LISTEN "
28948
" 2556/mysqld\n"
28949
msgstr ""
28950
"\n"
28951
"tcp 0 0 localhost:mysql *:* LISTEN "
28952
" 2556/mysqld\n"
28953
28954
#: serverguide/C/databases.xml:74(para)
28955
msgid ""
28956
"If the server is not running correctly, you can type the following command "
28957
"to start it:"
28958
msgstr ""
28959
"If the server is not running correctly, you can type the following command "
28960
"to start it:"
28961
28962
#: serverguide/C/databases.xml:79(command) serverguide/C/databases.xml:104(command)
28963
msgid "sudo /etc/init.d/mysql restart"
28964
msgstr "sudo /etc/init.d/mysql restart"
28965
28966
#: serverguide/C/databases.xml:85(para)
28967
msgid ""
28968
"You can edit the <filename>/etc/mysql/my.cnf</filename> file to configure "
28969
"the basic settings -- log file, port number, etc. For example, to configure "
28970
"<application>MySQL</application> to listen for connections from network "
28971
"hosts, change the <emphasis>bind-address</emphasis> directive to the "
28972
"server's IP address:"
28973
msgstr ""
28974
28975
#: serverguide/C/databases.xml:91(programlisting)
28976
#, no-wrap
28977
msgid ""
28978
"\n"
28979
"bind-address = 192.168.0.5\n"
28980
msgstr ""
28981
"\n"
28982
"bind-address = 192.168.0.5\n"
28983
28984
#: serverguide/C/databases.xml:95(para)
28985
msgid "Replace 192.168.0.5 with the appropriate address."
28986
msgstr "Replace 192.168.0.5 with the appropriate address."
28987
28988
#: serverguide/C/databases.xml:99(para)
28989
msgid ""
28990
"After making a change to <filename>/etc/mysql/my.cnf</filename> the "
28991
"<application>mysql</application> daemon will need to be restarted:"
28992
msgstr ""
28993
"After making a change to <filename>/etc/mysql/my.cnf</filename> the "
28994
"<application>mysql</application> daemon will need to be restarted:"
28995
28996
#: serverguide/C/databases.xml:107(para)
28997
msgid ""
28998
"If you would like to change the "
28999
"<application>MySQL</application><emphasis>root</emphasis> password, in a "
29000
"terminal enter:"
29001
msgstr ""
29002
"If you would like to change the "
29003
"<application>MySQL</application><emphasis>root</emphasis> password, in a "
29004
"terminal enter:"
29005
29006
#: serverguide/C/databases.xml:113(command)
29007
msgid "sudo dpkg-reconfigure mysql-server-5.1"
29008
msgstr ""
29009
29010
#: serverguide/C/databases.xml:116(para)
29011
msgid ""
29012
"The <application>mysql</application> daemon will be stopped, and you will be "
29013
"prompted to enter a new password."
29014
msgstr ""
29015
"The <application>mysql</application> daemon will be stopped, and you will be "
29016
"prompted to enter a new password."
29017
29018
#: serverguide/C/databases.xml:125(para)
29019
msgid ""
29020
"See the <ulink url=\"http://www.mysql.com/\">MySQL Home Page</ulink> for "
29021
"more information."
29022
msgstr ""
29023
"See the <ulink url=\"http://www.mysql.com/\">MySQL Home Page</ulink> for "
29024
"more information."
29025
29026
#: serverguide/C/databases.xml:130(para)
29027
msgid ""
29028
"The <emphasis>MySQL Handbook</emphasis> is also available in the "
29029
"<application>mysql-doc-5.0</application> package. To install the package "
29030
"enter the following in a terminal:"
29031
msgstr ""
29032
"The <emphasis>MySQL Handbook</emphasis> is also available in the "
29033
"<application>mysql-doc-5.0</application> package. To install the package "
29034
"enter the following in a terminal:"
29035
29036
#: serverguide/C/databases.xml:135(command)
29037
msgid "sudo apt-get install mysql-doc-5.0"
29038
msgstr "sudo apt-get install mysql-doc-5.0"
29039
29040
#: serverguide/C/databases.xml:137(para)
29041
msgid ""
29042
"The documentation is in HTML format, to view them enter "
29043
"<command>file:///usr/share/doc/mysql-doc-5.0/refman-5.0-en.html-"
29044
"chapter/index.html</command> in your browser's address bar."
29045
msgstr ""
29046
"The documentation is in HTML format, to view them enter "
29047
"<command>file:///usr/share/doc/mysql-doc-5.0/refman-5.0-en.html-"
29048
"chapter/index.html</command> in your browser's address bar."
29049
29050
#: serverguide/C/databases.xml:143(para) serverguide/C/databases.xml:290(para)
29051
msgid ""
29052
"For general SQL information see <ulink "
29053
"url=\"http://www.informit.com/store/product.aspx?isbn=0768664128\">Using SQL "
29054
"Special Edition</ulink> by Rafe Colburn."
29055
msgstr ""
29056
"For general SQL information see <ulink "
29057
"url=\"http://www.informit.com/store/product.aspx?isbn=0768664128\">Using SQL "
29058
"Special Edition</ulink> by Rafe Colburn."
29059
29060
#: serverguide/C/databases.xml:149(para)
29061
msgid ""
29062
"The <ulink url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache "
29063
"MySQL PHP Ubuntu Wiki</ulink> page also has useful information."
29064
msgstr ""
29065
29066
#: serverguide/C/databases.xml:158(para)
29067
msgid ""
29068
"PostgreSQL is an object-relational database system that has the features of "
29069
"traditional commercial database systems with enhancements to be found in "
29070
"next-generation DBMS systems."
29071
msgstr ""
29072
"PostgreSQL is an object-relational database system that has the features of "
29073
"traditional commercial database systems with enhancements to be found in "
29074
"next-generation DBMS systems."
29075
29076
#: serverguide/C/databases.xml:165(para)
29077
msgid ""
29078
"To install PostgreSQL, run the following command in the command prompt:"
29079
msgstr ""
29080
"To install PostgreSQL, run the following command in the command prompt:"
29081
29082
#: serverguide/C/databases.xml:172(command)
29083
msgid "sudo apt-get install postgresql"
29084
msgstr "sudo apt-get install postgresql"
29085
29086
#: serverguide/C/databases.xml:176(para)
29087
msgid ""
29088
"Once the installation is complete, you should configure the PostgreSQL "
29089
"server based on your needs, although the default configuration is viable."
29090
msgstr ""
29091
"Once the installation is complete, you should configure the PostgreSQL "
29092
"server based on your needs, although the default configuration is viable."
29093
29094
#: serverguide/C/databases.xml:184(para)
29095
msgid ""
29096
"By default, connection via TCP/IP is disabled. PostgreSQL supports multiple "
29097
"client authentication methods. By default, IDENT authentication method is "
29098
"used for <application>postgres</application> and local users. Please refer "
29099
"<ulink url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the "
29100
"PostgreSQL Administrator's Guide</ulink>."
29101
msgstr ""
29102
"By default, connection via TCP/IP is disabled. PostgreSQL supports multiple "
29103
"client authentication methods. By default, IDENT authentication method is "
29104
"used for <application>postgres</application> and local users. Please refer "
29105
"<ulink url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the "
29106
"PostgreSQL Administrator's Guide</ulink>."
29107
29108
#: serverguide/C/databases.xml:191(para)
29109
msgid ""
29110
"The following discussion assumes that you wish to enable TCP/IP connections "
29111
"and use the MD5 method for client authentication. PostgreSQL configuration "
29112
"files are stored in the "
29113
"<filename>/etc/postgresql/<version>/main</filename> directory. For "
29114
"example, if you install PostgreSQL 8.4, the configuration files are stored "
29115
"in the <filename>/etc/postgresql/8.4/main</filename> directory."
29116
msgstr ""
29117
"The following discussion assumes that you wish to enable TCP/IP connections "
29118
"and use the MD5 method for client authentication. PostgreSQL configuration "
29119
"files are stored in the "
29120
"<filename>/etc/postgresql/<version>/main</filename> directory. For "
29121
"example, if you install PostgreSQL 8.4, the configuration files are stored "
29122
"in the <filename>/etc/postgresql/8.4/main</filename> directory."
29123
29124
#: serverguide/C/databases.xml:201(para)
29125
msgid ""
29126
"To configure <emphasis>ident</emphasis> authentication, add entries to the "
29127
"<filename>/etc/postgresql/8.4/main/pg_ident.conf</filename> file."
29128
msgstr ""
29129
"To configure <emphasis>ident</emphasis> authentication, add entries to the "
29130
"<filename>/etc/postgresql/8.4/main/pg_ident.conf</filename> file."
29131
29132
#: serverguide/C/databases.xml:208(para)
29133
msgid ""
29134
"To enable TCP/IP connections, edit the file "
29135
"<filename>/etc/postgresql/8.4/main/postgresql.conf</filename>"
29136
msgstr ""
29137
"To enable TCP/IP connections, edit the file "
29138
"<filename>/etc/postgresql/8.4/main/postgresql.conf</filename>"
29139
29140
#: serverguide/C/databases.xml:210(para)
29141
msgid ""
29142
"Locate the line <emphasis>#listen_addresses = 'localhost'</emphasis> and "
29143
"change it to:"
29144
msgstr ""
29145
"Locate the line <emphasis>#listen_addresses = 'localhost'</emphasis> and "
29146
"change it to:"
29147
29148
#: serverguide/C/databases.xml:213(programlisting)
29149
#, no-wrap
29150
msgid ""
29151
"\n"
29152
"listen_addresses = 'localhost'\n"
29153
msgstr ""
29154
"\n"
29155
"listen_addresses = 'localhost'\n"
29156
29157
#: serverguide/C/databases.xml:217(para)
29158
msgid ""
29159
"To allow other computers to connect to your "
29160
"<application>PostgreSQL</application> server replace 'localhost' with the "
29161
"<emphasis>IP Address</emphasis> of your server."
29162
msgstr ""
29163
"To allow other computers to connect to your "
29164
"<application>PostgreSQL</application> server replace 'localhost' with the "
29165
"<emphasis>IP Address</emphasis> of your server."
29166
29167
#: serverguide/C/databases.xml:222(para)
29168
msgid ""
29169
"You may also edit all other parameters, if you know what you are doing! For "
29170
"details, refer to the configuration file or to the PostgreSQL documentation."
29171
msgstr ""
29172
"You may also edit all other parameters, if you know what you are doing! For "
29173
"details, refer to the configuration file or to the PostgreSQL documentation."
29174
29175
#: serverguide/C/databases.xml:227(para)
29176
msgid ""
29177
"Now that we can connect to our <application>PostgreSQL</application> server, "
29178
"the next step is to set a password for the <emphasis>postgres</emphasis> "
29179
"user. Run the following command at a terminal prompt to connect to the "
29180
"default PostgreSQL template database:"
29181
msgstr ""
29182
"Now that we can connect to our <application>PostgreSQL</application> server, "
29183
"the next step is to set a password for the <emphasis>postgres</emphasis> "
29184
"user. Run the following command at a terminal prompt to connect to the "
29185
"default PostgreSQL template database:"
29186
29187
#: serverguide/C/databases.xml:234(command)
29188
msgid "sudo -u postgres psql template1"
29189
msgstr "sudo -u postgres psql template1"
29190
29191
#: serverguide/C/databases.xml:236(para)
29192
msgid ""
29193
"The above command connects to PostgreSQL database "
29194
"<emphasis>template1</emphasis> as user <emphasis>postgres</emphasis>. Once "
29195
"you connect to the PostgreSQL server, you will be at a SQL prompt. You can "
29196
"run the following SQL command at the <application>psql</application> prompt "
29197
"to configure the password for the user <emphasis "
29198
"role=\"italics\">postgres</emphasis>."
29199
msgstr ""
29200
"The above command connects to PostgreSQL database "
29201
"<emphasis>template1</emphasis> as user <emphasis>postgres</emphasis>. Once "
29202
"you connect to the PostgreSQL server, you will be at a SQL prompt. You can "
29203
"run the following SQL command at the <application>psql</application> prompt "
29204
"to configure the password for the user <emphasis "
29205
"role=\"italics\">postgres</emphasis>."
29206
29207
#: serverguide/C/databases.xml:244(command)
29208
msgid "ALTER USER postgres with encrypted password 'your_password';"
29209
msgstr "ALTER USER postgres with encrypted password 'your_password';"
29210
29211
#: serverguide/C/databases.xml:246(para)
29212
msgid ""
29213
"After configuring the password, edit the file "
29214
"<filename>/etc/postgresql/8.4/main/pg_hba.conf</filename> to use "
29215
"<emphasis>MD5</emphasis> authentication with the "
29216
"<emphasis>postgres</emphasis> user:"
29217
msgstr ""
29218
"After configuring the password, edit the file "
29219
"<filename>/etc/postgresql/8.4/main/pg_hba.conf</filename> to use "
29220
"<emphasis>MD5</emphasis> authentication with the "
29221
"<emphasis>postgres</emphasis> user:"
29222
29223
#: serverguide/C/databases.xml:252(programlisting)
29224
#, no-wrap
29225
msgid ""
29226
"\n"
29227
"local all postgres md5\n"
29228
msgstr ""
29229
"\n"
29230
"local all postgres md5\n"
29231
29232
#: serverguide/C/databases.xml:256(para)
29233
msgid ""
29234
"Finally, you should restart the <application>PostgreSQL</application> "
29235
"service to initialize the new configuration. From a terminal prompt enter "
29236
"the following to restart <application>PostgreSQL</application>:"
29237
msgstr ""
29238
"Finally, you should restart the <application>PostgreSQL</application> "
29239
"service to initialise the new configuration. From a terminal prompt enter "
29240
"the following to restart <application>PostgreSQL</application>:"
29241
29242
#: serverguide/C/databases.xml:262(command)
29243
msgid "sudo /etc/init.d/postgresql-8.4 restart"
29244
msgstr "sudo /etc/init.d/postgresql-8.4 restart"
29245
29246
#: serverguide/C/databases.xml:265(para)
29247
msgid ""
29248
"The above configuration is not complete by any means. Please refer <ulink "
29249
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the PostgreSQL "
29250
"Administrator's Guide</ulink> to configure more parameters."
29251
msgstr ""
29252
"The above configuration is not complete by any means. Please refer <ulink "
29253
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the PostgreSQL "
29254
"Administrator's Guide</ulink> to configure more parameters."
29255
29256
#: serverguide/C/databases.xml:276(para)
29257
msgid ""
29258
"As mentioned above the <ulink "
29259
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\">Administrator's "
29260
"Guide</ulink> is an excellent resource. The guide is also available in the "
29261
"<application>postgresql-doc-8.4</application> package. Execute the following "
29262
"in a terminal to install the package:"
29263
msgstr ""
29264
"As mentioned above the <ulink "
29265
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\">Administrator's "
29266
"Guide</ulink> is an excellent resource. The guide is also available in the "
29267
"<application>postgresql-doc-8.4</application> package. Execute the following "
29268
"in a terminal to install the package:"
29269
29270
#: serverguide/C/databases.xml:282(command)
29271
msgid "sudo apt-get install postgresql-doc-8.4"
29272
msgstr "sudo apt-get install postgresql-doc-8.4"
29273
29274
#: serverguide/C/databases.xml:284(para)
29275
msgid ""
29276
"To view the guide enter <command>file:///usr/share/doc/postgresql-doc-"
29277
"8.4/html/index.html</command> into the address bar of your browser."
29278
msgstr ""
29279
"To view the guide enter <command>file:///usr/share/doc/postgresql-doc-"
29280
"8.4/html/index.html</command> into the address bar of your browser."
29281
29282
#: serverguide/C/databases.xml:296(para)
29283
msgid ""
29284
"Also, see the <ulink "
29285
"url=\"https://help.ubuntu.com/community/PostgreSQL\">PostgreSQL Ubuntu "
29286
"Wiki</ulink> page for more information."
29287
msgstr ""
29288
29289
#: serverguide/C/clustering.xml:13(title)
29290
msgid "Clustering"
29291
msgstr "Clustering"
29292
29293
#: serverguide/C/clustering.xml:16(title)
29294
msgid "DRBD"
29295
msgstr "DRBD"
29296
29297
#: serverguide/C/clustering.xml:18(para)
29298
msgid ""
29299
"Distributed Replicated Block Device (DRBD) mirrors block devices between "
29300
"multiple hosts. The replication is transparent to other applications on the "
29301
"host systems. Any block device hard disks, partitions, RAID devices, logical "
29302
"volumes, etc can be mirrored."
29303
msgstr ""
29304
"Distributed Replicated Block Device (DRBD) mirrors block devices between "
29305
"multiple hosts. The replication is transparent to other applications on the "
29306
"host systems. Any block device hard disks, partitions, RAID devices, logical "
29307
"volumes, etc can be mirrored."
29308
29309
#: serverguide/C/clustering.xml:24(para)
29310
msgid ""
29311
"To get started using <application>drbd</application>, first install the "
29312
"necessary packages. From a terminal enter:"
29313
msgstr ""
29314
"To get started using <application>drbd</application>, first install the "
29315
"necessary packages. From a terminal enter:"
29316
29317
#: serverguide/C/clustering.xml:29(command)
29318
msgid "sudo apt-get install drbd8-utils"
29319
msgstr "sudo apt-get install drbd8-utils"
29320
29321
#: serverguide/C/clustering.xml:33(para)
29322
msgid ""
29323
"If you are using the <emphasis>virtual kernel</emphasis> as part of a "
29324
"virtual machine you will need to manually compile the "
29325
"<application>drbd</application> module. It may be easier to install the "
29326
"<application>linux-server</application> package inside the virtual machine."
29327
msgstr ""
29328
"If you are using the <emphasis>virtual kernel</emphasis> as part of a "
29329
"virtual machine you will need to manually compile the "
29330
"<application>drbd</application> module. It may be easier to install the "
29331
"<application>linux-server</application> package inside the virtual machine."
29332
29333
#: serverguide/C/clustering.xml:40(para)
29334
msgid ""
29335
"This section covers setting up a <application>drbd</application> to "
29336
"replicate a separate <filename>/srv</filename> partition, with an "
29337
"<application>ext3</application> filesystem between two hosts. The partition "
29338
"size is not particularly relevant, but both partitions need to be the same "
29339
"size."
29340
msgstr ""
29341
"This section covers setting up a <application>drbd</application> to "
29342
"replicate a separate <filename>/srv</filename> partition, with an "
29343
"<application>ext3</application> filesystem between two hosts. The partition "
29344
"size is not particularly relevant, but both partitions need to be the same "
29345
"size."
29346
29347
#: serverguide/C/clustering.xml:49(para)
29348
msgid ""
29349
"The two hosts in this example will be called <emphasis>drbd01</emphasis> and "
29350
"<emphasis>drbd02</emphasis>. They will need to have name resolution "
29351
"configured either through DNS or the <filename>/etc/hosts</filename> file. "
29352
"See <xref linkend=\"dns\"/> for details."
29353
msgstr ""
29354
"The two hosts in this example will be called <emphasis>drbd01</emphasis> and "
29355
"<emphasis>drbd02</emphasis>. They will need to have name resolution "
29356
"configured either through DNS or the <filename>/etc/hosts</filename> file. "
29357
"See <xref linkend=\"dns\"/> for details."
29358
29359
#: serverguide/C/clustering.xml:57(para)
29360
msgid ""
29361
"To configure <application>drbd</application>, on the first host edit "
29362
"<filename>/etc/drbd.conf</filename>:"
29363
msgstr ""
29364
"To configure <application>drbd</application>, on the first host edit "
29365
"<filename>/etc/drbd.conf</filename>:"
29366
29367
#: serverguide/C/clustering.xml:61(programlisting)
29368
#, no-wrap
29369
msgid ""
29370
"\n"
29371
"global { usage-count no; }\n"
29372
"common { syncer { rate 100M; } }\n"
29373
"resource r0 {\n"
29374
" protocol C;\n"
29375
" startup {\n"
29376
" wfc-timeout 15;\n"
29377
" degr-wfc-timeout 60;\n"
29378
" }\n"
29379
" net {\n"
29380
" cram-hmac-alg sha1;\n"
29381
" shared-secret \"secret\";\n"
29382
" }\n"
29383
" on drbd01 {\n"
29384
" device /dev/drbd0;\n"
29385
" disk /dev/sdb1;\n"
29386
" address 192.168.0.1:7788;\n"
29387
" meta-disk internal;\n"
29388
" }\n"
29389
" on drbd02 {\n"
29390
" device /dev/drbd0;\n"
29391
" disk /dev/sdb1;\n"
29392
" address 192.168.0.2:7788;\n"
29393
" meta-disk internal;\n"
29394
" }\n"
29395
"} \n"
29396
msgstr ""
29397
"\n"
29398
"global { usage-count no; }\n"
29399
"common { syncer { rate 100M; } }\n"
29400
"resource r0 {\n"
29401
" protocol C;\n"
29402
" startup {\n"
29403
" wfc-timeout 15;\n"
29404
" degr-wfc-timeout 60;\n"
29405
" }\n"
29406
" net {\n"
29407
" cram-hmac-alg sha1;\n"
29408
" shared-secret \"secret\";\n"
29409
" }\n"
29410
" on drbd01 {\n"
29411
" device /dev/drbd0;\n"
29412
" disk /dev/sdb1;\n"
29413
" address 192.168.0.1:7788;\n"
29414
" meta-disk internal;\n"
29415
" }\n"
29416
" on drbd02 {\n"
29417
" device /dev/drbd0;\n"
29418
" disk /dev/sdb1;\n"
29419
" address 192.168.0.2:7788;\n"
29420
" meta-disk internal;\n"
29421
" }\n"
29422
"} \n"
29423
29424
#: serverguide/C/clustering.xml:90(para)
29425
msgid ""
29426
"There are many other options in <filename>/etc/drbd.conf</filename>, but for "
29427
"this example their default values are fine."
29428
msgstr ""
29429
"There are many other options in <filename>/etc/drbd.conf</filename>, but for "
29430
"this example their default values are fine."
29431
29432
#: serverguide/C/clustering.xml:98(para)
29433
msgid "Now copy <filename>/etc/drbd.conf</filename> to the second host:"
29434
msgstr "Now copy <filename>/etc/drbd.conf</filename> to the second host:"
29435
29436
#: serverguide/C/clustering.xml:103(command)
29437
msgid "scp /etc/drbd.conf drbd02:~"
29438
msgstr "scp /etc/drbd.conf drbd02:~"
29439
29440
#: serverguide/C/clustering.xml:109(para)
29441
msgid ""
29442
"And, on <emphasis>drbd02</emphasis> move the file to "
29443
"<filename>/etc</filename>:"
29444
msgstr ""
29445
"And, on <emphasis>drbd02</emphasis> move the file to "
29446
"<filename>/etc</filename>:"
29447
29448
#: serverguide/C/clustering.xml:114(command)
29449
msgid "sudo mv drbd.conf /etc/"
29450
msgstr "sudo mv drbd.conf /etc/"
29451
29452
#: serverguide/C/clustering.xml:120(para)
29453
msgid ""
29454
"Next, on both hosts, start the <application>drbd</application> daemon:"
29455
msgstr ""
29456
"Next, on both hosts, start the <application>drbd</application> daemon:"
29457
29458
#: serverguide/C/clustering.xml:125(command)
29459
msgid "sudo /etc/init.d/drbd start"
29460
msgstr "sudo /etc/init.d/drbd start"
29461
29462
#: serverguide/C/clustering.xml:131(para)
29463
msgid ""
29464
"Now using the <application>drbdadm</application> utility initialize the meta "
29465
"data storage. On each server execute:"
29466
msgstr ""
29467
"Now using the <application>drbdadm</application> utility initialise the meta "
29468
"data storage. On each server execute:"
29469
29470
#: serverguide/C/clustering.xml:137(command)
29471
msgid "sudo drbdadm create-md r0"
29472
msgstr "sudo drbdadm create-md r0"
29473
29474
#: serverguide/C/clustering.xml:143(para)
29475
msgid ""
29476
"On the <emphasis>drbd01</emphasis>, or whichever host you wish to be the "
29477
"primary, enter the following:"
29478
msgstr ""
29479
"On the <emphasis>drbd01</emphasis>, or whichever host you wish to be the "
29480
"primary, enter the following:"
29481
29482
#: serverguide/C/clustering.xml:148(command)
29483
msgid "sudo drbdadm -- --overwrite-data-of-peer primary all"
29484
msgstr "sudo drbdadm -- --overwrite-data-of-peer primary all"
29485
29486
#: serverguide/C/clustering.xml:154(para)
29487
msgid ""
29488
"After executing the above command, the data will start syncing with the "
29489
"secondary host. To watch the progress, on <emphasis>drbd02</emphasis> enter "
29490
"the following:"
29491
msgstr ""
29492
29493
#: serverguide/C/clustering.xml:160(command)
29494
msgid "watch -n1 cat /proc/drbd"
29495
msgstr "watch -n1 cat /proc/drbd"
29496
29497
#: serverguide/C/clustering.xml:163(para)
29498
msgid "To stop watching the output press <emphasis>Ctrl+c</emphasis>."
29499
msgstr "To stop watching the output press <emphasis>Ctrl+c</emphasis>."
29500
29501
#: serverguide/C/clustering.xml:170(para)
29502
msgid ""
29503
"Finally, add a filesystem to <filename>/dev/drbd0</filename> and mount it:"
29504
msgstr ""
29505
"Finally, add a filesystem to <filename>/dev/drbd0</filename> and mount it:"
29506
29507
#: serverguide/C/clustering.xml:175(command)
29508
msgid "sudo mkfs.ext3 /dev/drbd0"
29509
msgstr "sudo mkfs.ext3 /dev/drbd0"
29510
29511
#: serverguide/C/clustering.xml:176(command) serverguide/C/clustering.xml:224(command)
29512
msgid "sudo mount /dev/drbd0 /srv"
29513
msgstr "sudo mount /dev/drbd0 /srv"
29514
29515
#: serverguide/C/clustering.xml:186(para)
29516
msgid ""
29517
"To test that the data is actually syncing between the hosts copy some files "
29518
"on the <emphasis>drbd01</emphasis>, the primary, to "
29519
"<filename>/srv</filename>:"
29520
msgstr ""
29521
"To test that the data is actually syncing between the hosts copy some files "
29522
"on the <emphasis>drbd01</emphasis>, the primary, to "
29523
"<filename>/srv</filename>:"
29524
29525
#: serverguide/C/clustering.xml:195(para)
29526
msgid "Next, unmount <filename>/srv</filename>:"
29527
msgstr "Next, unmount <filename>/srv</filename>:"
29528
29529
#: serverguide/C/clustering.xml:203(para)
29530
msgid ""
29531
"<emphasis>Demote</emphasis> the <emphasis>primary</emphasis> server to the "
29532
"<emphasis>secondary</emphasis> role:"
29533
msgstr ""
29534
"<emphasis>Demote</emphasis> the <emphasis>primary</emphasis> server to the "
29535
"<emphasis>secondary</emphasis> role:"
29536
29537
#: serverguide/C/clustering.xml:208(command)
29538
msgid "sudo drbdadm secondary r0"
29539
msgstr "sudo drbdadm secondary r0"
29540
29541
#: serverguide/C/clustering.xml:211(para)
29542
msgid ""
29543
"Now on the <emphasis>secondary</emphasis> server "
29544
"<emphasis>promote</emphasis> it to the <emphasis>primary</emphasis> role:"
29545
msgstr ""
29546
"Now on the <emphasis>secondary</emphasis> server "
29547
"<emphasis>promote</emphasis> it to the <emphasis>primary</emphasis> role:"
29548
29549
#: serverguide/C/clustering.xml:216(command)
29550
msgid "sudo drbdadm primary r0"
29551
msgstr "sudo drbdadm primary r0"
29552
29553
#: serverguide/C/clustering.xml:219(para)
29554
msgid "Lastly, mount the partition:"
29555
msgstr "Lastly, mount the partition:"
29556
29557
#: serverguide/C/clustering.xml:227(para)
29558
msgid ""
29559
"Using <emphasis>ls</emphasis> you should see "
29560
"<filename>/srv/default</filename> copied from the former "
29561
"<emphasis>primary</emphasis> host <emphasis>drbd01</emphasis>."
29562
msgstr ""
29563
"Using <emphasis>ls</emphasis> you should see "
29564
"<filename>/srv/default</filename> copied from the former "
29565
"<emphasis>primary</emphasis> host <emphasis>drbd01</emphasis>."
29566
29567
#: serverguide/C/clustering.xml:238(para)
29568
msgid ""
29569
"For more information on <application>DRBD</application> see the <ulink "
29570
"url=\"http://www.drbd.org/\">DRBD web site</ulink>."
29571
msgstr ""
29572
"For more information on <application>DRBD</application> see the <ulink "
29573
"url=\"http://www.drbd.org/\">DRBD web site</ulink>."
29574
29575
#: serverguide/C/clustering.xml:243(para)
29576
msgid ""
29577
"The <ulink "
29578
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man5/drbd.conf.5.html\""
29579
">drbd.conf man page</ulink> contains details on the options not covered in "
29580
"this guide."
29581
msgstr ""
29582
29583
#: serverguide/C/clustering.xml:249(para)
29584
msgid ""
29585
"Also, see the <ulink "
29586
"url=\"http://manpages.ubuntu.com/manpages/maverick/en/man8/drbdadm.8.html\">d"
29587
"rbdadm man page</ulink>."
29588
msgstr ""
29589
29590
#: serverguide/C/clustering.xml:254(para)
29591
msgid ""
29592
"The <ulink url=\"https://help.ubuntu.com/community/DRBD\">DRBD Ubuntu "
29593
"Wiki</ulink> page also has more information."
29594
msgstr ""
29595
29596
#: serverguide/C/chat.xml:13(title)
29597
msgid "Chat Applications"
29598
msgstr "Chat Applications"
29599
29600
#: serverguide/C/chat.xml:19(para)
29601
msgid ""
29602
"In this section, we will discuss how to install and configure a IRC server, "
29603
"<application>ircd-irc2</application>. We will also discuss how to install "
29604
"and configure Jabber, an instance messaging server."
29605
msgstr ""
29606
"In this section, we will discuss how to install and configure a IRC server, "
29607
"<application>ircd-irc2</application>. We will also discuss how to install "
29608
"and configure Jabber, an instance messaging server."
29609
29610
#: serverguide/C/chat.xml:28(title)
29611
msgid "IRC Server"
29612
msgstr "IRC Server"
29613
29614
#: serverguide/C/chat.xml:30(para)
29615
msgid ""
29616
"The Ubuntu repository has many Internet Relay Chat servers. This section "
29617
"explains how to install and configure the original IRC server "
29618
"<application>ircd-irc2</application>."
29619
msgstr ""
29620
"The Ubuntu repository has many Internet Relay Chat servers. This section "
29621
"explains how to install and configure the original IRC server "
29622
"<application>ircd-irc2</application>."
29623
29624
#: serverguide/C/chat.xml:39(para)
29625
msgid ""
29626
"To install <application>ircd-irc2</application>, run the following command "
29627
"in the command prompt:"
29628
msgstr ""
29629
"To install <application>ircd-irc2</application>, run the following command "
29630
"in the command prompt:"
29631
29632
#: serverguide/C/chat.xml:45(command)
29633
msgid "sudo apt-get install ircd-irc2"
29634
msgstr "sudo apt-get install ircd-irc2"
29635
29636
#: serverguide/C/chat.xml:48(para)
29637
msgid ""
29638
"The configuration files are stored in <filename>/etc/ircd</filename> "
29639
"directory. The documents are available in <filename>/usr/share/doc/ircd-"
29640
"irc2</filename> directory."
29641
msgstr ""
29642
"The configuration files are stored in <filename>/etc/ircd</filename> "
29643
"directory. The documents are available in <filename>/usr/share/doc/ircd-"
29644
"irc2</filename> directory."
29645
29646
#: serverguide/C/chat.xml:59(para)
29647
msgid ""
29648
"The IRC settings can be done in the configuration file "
29649
"<filename>/etc/ircd/ircd.conf</filename>. You can set the IRC host name in "
29650
"this file by editing the following line:"
29651
msgstr ""
29652
"The IRC settings can be done in the configuration file "
29653
"<filename>/etc/ircd/ircd.conf</filename>. You can set the IRC host name in "
29654
"this file by editing the following line:"
29655
29656
#: serverguide/C/chat.xml:64(programlisting)
29657
#, no-wrap
29658
msgid ""
29659
"\n"
29660
"M:irc.localhost::Debian ircd default configuration::000A\n"
29661
msgstr ""
29662
"\n"
29663
"M:irc.localhost::Debian ircd default configuration::000A\n"
29664
29665
#: serverguide/C/chat.xml:68(para)
29666
msgid ""
29667
"Please make sure you add DNS aliases for the IRC host name. For instance, if "
29668
"you set irc.livecipher.com as IRC host name, please make sure "
29669
"irc.livecipher.com is resolvable in your Domain Name Server. The IRC host "
29670
"name should not be same as the host name."
29671
msgstr ""
29672
"Please make sure you add DNS aliases for the IRC host name. For instance, if "
29673
"you set irc.livecipher.com as IRC host name, please make sure "
29674
"irc.livecipher.com is resolvable in your Domain Name Server. The IRC host "
29675
"name should not be same as the host name."
29676
29677
#: serverguide/C/chat.xml:75(para)
29678
msgid ""
29679
"The IRC admin details can be configured by editing the following line:"
29680
msgstr ""
29681
29682
#: serverguide/C/chat.xml:80(programlisting)
29683
#, no-wrap
29684
msgid ""
29685
"\n"
29686
"A:Organization, IRC dept.:Daemon <ircd@example.irc.org>:Client "
29687
"Server::IRCnet:\n"
29688
msgstr ""
29689
"\n"
29690
"A:Organisation, IRC dept.:Daemon <ircd@example.irc.org>:Client "
29691
"Server::IRCnet:\n"
29692
29693
#: serverguide/C/chat.xml:84(para)
29694
msgid ""
29695
"You should add specific lines to configure the list of IRC ports to listen "
29696
"on, to configure Operator credentials, to configure client authentication, "
29697
"etc. For details, please refer to the example configuration file "
29698
"<filename>/usr/share/doc/ircd-irc2/ircd.conf.example.gz</filename>."
29699
msgstr ""
29700
"You should add specific lines to configure the list of IRC ports to listen "
29701
"on, to configure Operator credentials, to configure client authentication, "
29702
"etc. For details, please refer to the example configuration file "
29703
"<filename>/usr/share/doc/ircd-irc2/ircd.conf.example.gz</filename>."
29704
29705
#: serverguide/C/chat.xml:92(para)
29706
msgid ""
29707
"The IRC banner to be displayed in the IRC client, when the user connects to "
29708
"the server can be set in <filename>/etc/ircd/ircd.motd</filename> file."
29709
msgstr ""
29710
"The IRC banner to be displayed in the IRC client, when the user connects to "
29711
"the server can be set in <filename>/etc/ircd/ircd.motd</filename> file."
29712
29713
#: serverguide/C/chat.xml:97(para)
29714
msgid ""
29715
"After making necessary changes to the configuration file, you can restart "
29716
"the IRC server using following command:"
29717
msgstr ""
29718
"After making necessary changes to the configuration file, you can restart "
29719
"the IRC server using following command:"
29720
29721
#: serverguide/C/chat.xml:101(programlisting)
29722
#, no-wrap
29723
msgid ""
29724
"\n"
29725
"sudo /etc/init.d/ircd-irc2 restart\n"
29726
msgstr ""
29727
"\n"
29728
"sudo /etc/init.d/ircd-irc2 restart\n"
29729
29730
#: serverguide/C/chat.xml:109(para)
29731
msgid ""
29732
"You may also be interested to take a look at other IRC servers available in "
29733
"Ubuntu Repository. It includes, <application>ircd-ircu</application> and "
29734
"<application>ircd-hybrid</application>."
29735
msgstr ""
29736
"You may also be interested to take a look at other IRC servers available in "
29737
"Ubuntu Repository. It includes, <application>ircd-ircu</application> and "
29738
"<application>ircd-hybrid</application>."
29739
29740
#: serverguide/C/chat.xml:117(para)
29741
msgid ""
29742
"Refer to <ulink url=\"http://www.irc.org/tech_docs/ircnet/faq.html\">IRCD "
29743
"FAQ</ulink> for more details about the IRC Server."
29744
msgstr ""
29745
"Refer to <ulink url=\"http://www.irc.org/tech_docs/ircnet/faq.html\">IRCD "
29746
"FAQ</ulink> for more details about the IRC Server."
29747
29748
#: serverguide/C/chat.xml:124(para)
29749
msgid ""
29750
"Also, the <ulink url=\"https://help.ubuntu.com/community/ircd\">Ubuntu Wiki "
29751
"IRCD</ulink> page has more information."
29752
msgstr ""
29753
29754
#: serverguide/C/chat.xml:132(title)
29755
msgid "Jabber Instant Messaging Server"
29756
msgstr "Jabber Instant Messaging Server"
29757
29758
#: serverguide/C/chat.xml:134(para)
29759
msgid ""
29760
"<emphasis>Jabber</emphasis> a popular instant message protocol is based on "
29761
"XMPP, an open standard for instant messaging, and used by many popular "
29762
"applications. This section covers setting up a <emphasis>Jabberd "
29763
"2</emphasis> server on a local LAN. This configuration can also be adapted "
29764
"to providing messaging services to users over the Internet."
29765
msgstr ""
29766
"<emphasis>Jabber</emphasis> a popular instant message protocol is based on "
29767
"XMPP, an open standard for instant messaging, and used by many popular "
29768
"applications. This section covers setting up a <emphasis>Jabberd "
29769
"2</emphasis> server on a local LAN. This configuration can also be adapted "
29770
"to providing messaging services to users over the Internet."
29771
29772
#: serverguide/C/chat.xml:143(para)
29773
msgid "To install <application>jabberd2</application>, in a terminal enter:"
29774
msgstr "To install <application>jabberd2</application>, in a terminal enter:"
29775
29776
#: serverguide/C/chat.xml:148(command)
29777
msgid "sudo apt-get install jabberd2"
29778
msgstr "sudo apt-get install jabberd2"
29779
29780
#: serverguide/C/chat.xml:155(para)
29781
msgid ""
29782
"A couple of XML configuration files will be used to configure "
29783
"<application>jabberd2</application> for <emphasis>Berkely DB</emphasis> user "
29784
"authentication. This is a very simple form of authentication. However, "
29785
"<application>jabberd2</application> can be configured to use LDAP, MySQL, "
29786
"Postgresql, etc for for user authentication."
29787
msgstr ""
29788
"A couple of XML configuration files will be used to configure "
29789
"<application>jabberd2</application> for <emphasis>Berkely DB</emphasis> user "
29790
"authentication. This is a very simple form of authentication. However, "
29791
"<application>jabberd2</application> can be configured to use LDAP, MySQL, "
29792
"Postgresql, etc for for user authentication."
29793
29794
#: serverguide/C/chat.xml:162(para)
29795
msgid "First, edit <filename>/etc/jabberd2/sm.xml</filename> changing:"
29796
msgstr "First, edit <filename>/etc/jabberd2/sm.xml</filename> changing:"
29797
29798
#: serverguide/C/chat.xml:166(programlisting)
29799
#, no-wrap
29800
msgid ""
29801
"\n"
29802
" <id>jabber.example.com</id>\n"
29803
msgstr ""
29804
"\n"
29805
" <id>jabber.example.com</id>\n"
29806
29807
#: serverguide/C/chat.xml:171(para)
29808
msgid ""
29809
"Replace <emphasis>jabber.example.com</emphasis> with the hostname, or other "
29810
"id, of your server."
29811
msgstr ""
29812
"Replace <emphasis>jabber.example.com</emphasis> with the hostname, or other "
29813
"id, of your server."
29814
29815
#: serverguide/C/chat.xml:176(para)
29816
msgid "Now in the <storage> section change the <driver> to:"
29817
msgstr "Now in the <storage> section change the <driver> to:"
29818
29819
#: serverguide/C/chat.xml:180(programlisting)
29820
#, no-wrap
29821
msgid ""
29822
"\n"
29823
" <driver>db</driver>\n"
29824
msgstr ""
29825
"\n"
29826
" <driver>db</driver>\n"
29827
29828
#: serverguide/C/chat.xml:184(para)
29829
msgid ""
29830
"Next, edit <filename>/etc/jabberd2/c2s.xml</filename> in the "
29831
"<emphasis><local></emphasis> section change:"
29832
msgstr ""
29833
"Next, edit <filename>/etc/jabberd2/c2s.xml</filename> in the "
29834
"<emphasis><local></emphasis> section change:"
29835
29836
#: serverguide/C/chat.xml:188(programlisting)
29837
#, no-wrap
29838
msgid ""
29839
"\n"
29840
" <id>jabber.example.com</id>\n"
29841
msgstr ""
29842
"\n"
29843
" <id>jabber.example.com</id>\n"
29844
29845
#: serverguide/C/chat.xml:192(para)
29846
msgid ""
29847
"And in the <authreg> section adjust the <module> section to:"
29848
msgstr ""
29849
"And in the <authreg> section adjust the <module> section to:"
29850
29851
#: serverguide/C/chat.xml:196(programlisting)
29852
#, no-wrap
29853
msgid ""
29854
"\n"
29855
" <module>db</module>\n"
29856
msgstr ""
29857
"\n"
29858
" <module>db</module>\n"
29859
29860
#: serverguide/C/chat.xml:200(para)
29861
msgid ""
29862
"Finally, restart <application>jabberd2</application> to enable the new "
29863
"settings:"
29864
msgstr ""
29865
"Finally, restart <application>jabberd2</application> to enable the new "
29866
"settings:"
29867
29868
#: serverguide/C/chat.xml:205(command)
29869
msgid "sudo /etc/init.d/jabberd2 restart"
29870
msgstr "sudo /etc/init.d/jabberd2 restart"
29871
29872
#: serverguide/C/chat.xml:208(para)
29873
msgid ""
29874
"You should now be able to connect to the server using a Jabber client like "
29875
"<application>Pidgin</application> for example."
29876
msgstr ""
29877
"You should now be able to connect to the server using a Jabber client like "
29878
"<application>Pidgin</application> for example."
29879
29880
#: serverguide/C/chat.xml:213(para)
29881
msgid ""
29882
"The advantage of using Berkeley DB for user data is that after being "
29883
"configured no additional maintenance is required. If you need more control "
29884
"over user accounts and credentials another authentication method is "
29885
"recommended."
29886
msgstr ""
29887
"The advantage of using Berkeley DB for user data is that after being "
29888
"configured no additional maintenance is required. If you need more control "
29889
"over user accounts and credentials another authentication method is "
29890
"recommended."
29891
29892
#: serverguide/C/chat.xml:225(para)
29893
msgid ""
29894
"The <ulink url=\"http://codex.xiaoka.com/wiki/jabberd2:start\">Jabberd2 Web "
29895
"Site</ulink> contains more details on configuring "
29896
"<application>Jabberd2</application>."
29897
msgstr ""
29898
"The <ulink url=\"http://codex.xiaoka.com/wiki/jabberd2:start\">Jabberd2 Web "
29899
"Site</ulink> contains more details on configuring "
29900
"<application>Jabberd2</application>."
29901
29902
#: serverguide/C/chat.xml:231(para)
29903
msgid ""
29904
"For more authentication options see the <ulink "
29905
"url=\"http://jabberd2.xiaoka.com/wiki/InstallGuide\">Jabberd2 Install "
29906
"Guide</ulink>."
29907
msgstr ""
29908
"For more authentication options see the <ulink "
29909
"url=\"http://jabberd2.xiaoka.com/wiki/InstallGuide\">Jabberd2 Install "
29910
"Guide</ulink>."
29911
29912
#: serverguide/C/chat.xml:236(para)
29913
msgid ""
29914
"Also, the <ulink "
29915
"url=\"https://help.ubuntu.com/community/SettingUpJabberServer\">Setting Up "
29916
"Jabber Server Ubuntu Wiki</ulink> page has more information."
29917
msgstr ""
29918
29919
#: serverguide/C/backups.xml:13(title)
29920
msgid "Backups"
29921
msgstr "Backups"
29922
29923
#: serverguide/C/backups.xml:14(para)
29924
msgid ""
29925
"There are many ways to backup an Ubuntu installation. The most important "
29926
"thing about backups is to develop a <emphasis>backup plan</emphasis> "
29927
"consisting of what to backup, where to back it up to, and how to restore it."
29928
msgstr ""
29929
"There are many ways to backup an Ubuntu installation. The most important "
29930
"thing about backups is to develop a <emphasis>backup plan</emphasis> "
29931
"consisting of what to backup, where to back it up to, and how to restore it."
29932
29933
#: serverguide/C/backups.xml:18(para)
29934
msgid ""
29935
"The following sections discuss various ways of accomplishing these tasks."
29936
msgstr ""
29937
"The following sections discuss various ways of accomplishing these tasks."
29938
29939
#: serverguide/C/backups.xml:22(title)
29940
msgid "Shell Scripts"
29941
msgstr "Shell Scripts"
29942
29943
#: serverguide/C/backups.xml:23(para)
29944
msgid ""
29945
"One of the simplest ways to backup a system is using a <emphasis>shell "
29946
"script</emphasis>. For example, a script can be used to configure which "
29947
"directories to backup, and use those directories as arguments to the "
29948
"<application>tar</application> utility creating an archive file. The archive "
29949
"file can then be moved or copied to another location. The archive can also "
29950
"be created on a remote file system such as an <emphasis>NFS</emphasis> mount."
29951
msgstr ""
29952
"One of the simplest ways to backup a system is using a <emphasis>shell "
29953
"script</emphasis>. For example, a script can be used to configure which "
29954
"directories to backup, and use those directories as arguments to the "
29955
"<application>tar</application> utility creating an archive file. The archive "
29956
"file can then be moved or copied to another location. The archive can also "
29957
"be created on a remote file system such as an <emphasis>NFS</emphasis> mount."
29958
29959
#: serverguide/C/backups.xml:29(para)
29960
msgid ""
29961
"The <application>tar</application> utility creates one archive file out of "
29962
"many files or directories. <application>tar</application> can also filter "
29963
"the files through compression utilities reducing the size of the archive "
29964
"file."
29965
msgstr ""
29966
"The <application>tar</application> utility creates one archive file out of "
29967
"many files or directories. <application>tar</application> can also filter "
29968
"the files through compression utilities reducing the size of the archive "
29969
"file."
29970
29971
#: serverguide/C/backups.xml:35(title)
29972
msgid "Simple Shell Script"
29973
msgstr "Simple Shell Script"
29974
29975
#: serverguide/C/backups.xml:36(para)
29976
msgid ""
29977
"The following shell script uses <application>tar</application> to create an "
29978
"archive file on a remotely mounted NFS file system. The archive filename is "
29979
"determined using additional command line utilities."
29980
msgstr ""
29981
"The following shell script uses <application>tar</application> to create an "
29982
"archive file on a remotely mounted NFS file system. The archive filename is "
29983
"determined using additional command line utilities."
29984
29985
#: serverguide/C/backups.xml:40(programlisting)
29986
#, no-wrap
29987
msgid ""
29988
"\n"
29989
"#!/bin/sh\n"
29990
"####################################\n"
29991
"#\n"
29992
"# Backup to NFS mount script.\n"
29993
"#\n"
29994
"####################################\n"
29995
"\n"
29996
"# What to backup. \n"
29997
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
29998
"\n"
29999
"# Where to backup to.\n"
30000
"dest=\"/mnt/backup\"\n"
30001
"\n"
30002
"# Create archive filename.\n"
30003
"day=$(date +%A)\n"
30004
"hostname=$(hostname -s)\n"
30005
"archive_file=\"$hostname-$day.tgz\"\n"
30006
"\n"
30007
"# Print start status message.\n"
30008
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
30009
"date\n"
30010
"echo\n"
30011
"\n"
30012
"# Backup the files using tar.\n"
30013
"tar czf $dest/$archive_file $backup_files\n"
30014
"\n"
30015
"# Print end status message.\n"
30016
"echo\n"
30017
"echo \"Backup finished\"\n"
30018
"date\n"
30019
"\n"
30020
"# Long listing of files in $dest to check file sizes.\n"
30021
"ls -lh $dest\n"
30022
msgstr ""
30023
"\n"
30024
"#!/bin/sh\n"
30025
"####################################\n"
30026
"#\n"
30027
"# Backup to NFS mount script.\n"
30028
"#\n"
30029
"####################################\n"
30030
"\n"
30031
"# What to backup. \n"
30032
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
30033
"\n"
30034
"# Where to backup to.\n"
30035
"dest=\"/mnt/backup\"\n"
30036
"\n"
30037
"# Create archive filename.\n"
30038
"day=$(date +%A)\n"
30039
"hostname=$(hostname -s)\n"
30040
"archive_file=\"$hostname-$day.tgz\"\n"
30041
"\n"
30042
"# Print start status message.\n"
30043
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
30044
"date\n"
30045
"echo\n"
30046
"\n"
30047
"# Backup the files using tar.\n"
30048
"tar czf $dest/$archive_file $backup_files\n"
30049
"\n"
30050
"# Print end status message.\n"
30051
"echo\n"
30052
"echo \"Backup finished\"\n"
30053
"date\n"
30054
"\n"
30055
"# Long listing of files in $dest to check file sizes.\n"
30056
"ls -lh $dest\n"
30057
30058
#: serverguide/C/backups.xml:77(para)
30059
msgid ""
30060
"<emphasis>$backup_files:</emphasis> a variable listing which directories you "
30061
"would like to backup. The list should be customized to fit your needs."
30062
msgstr ""
30063
"<emphasis>$backup_files:</emphasis> a variable listing which directories you "
30064
"would like to backup. The list should be customised to fit your needs."
30065
30066
#: serverguide/C/backups.xml:83(para)
30067
msgid ""
30068
"<emphasis>$day:</emphasis> a variable holding the day of the week (Monday, "
30069
"Tuesday, Wednesday, etc). This is used to create an archive file for each "
30070
"day of the week, giving a backup history of seven days. There are other ways "
30071
"to accomplish this including other ways using the "
30072
"<application>date</application> utility."
30073
msgstr ""
30074
"<emphasis>$day:</emphasis> a variable holding the day of the week (Monday, "
30075
"Tuesday, Wednesday, etc). This is used to create an archive file for each "
30076
"day of the week, giving a backup history of seven days. There are other ways "
30077
"to accomplish this including other ways using the "
30078
"<application>date</application> utility."
30079
30080
#: serverguide/C/backups.xml:90(para)
30081
msgid ""
30082
"<emphasis>$hostname:</emphasis> variable containing the "
30083
"<emphasis>short</emphasis> hostname of the system. Using the hostname in the "
30084
"archive filename gives you the option of placing daily archive files from "
30085
"multiple systems in the same directory."
30086
msgstr ""
30087
"<emphasis>$hostname:</emphasis> variable containing the "
30088
"<emphasis>short</emphasis> hostname of the system. Using the hostname in the "
30089
"archive filename gives you the option of placing daily archive files from "
30090
"multiple systems in the same directory."
30091
30092
#: serverguide/C/backups.xml:97(para)
30093
msgid "<emphasis>$archive_file:</emphasis> the full archive filename."
30094
msgstr "<emphasis>$archive_file:</emphasis> the full archive filename."
30095
30096
#: serverguide/C/backups.xml:102(para)
30097
msgid ""
30098
"<emphasis>$dest:</emphasis> destination of the archive file. The directory "
30099
"needs to be created and in this case <emphasis>mounted</emphasis> before "
30100
"executing the backup script. See <xref linkend=\"network-file-system\"/> for "
30101
"details using <emphasis>NFS</emphasis>."
30102
msgstr ""
30103
"<emphasis>$dest:</emphasis> destination of the archive file. The directory "
30104
"needs to be created and in this case <emphasis>mounted</emphasis> before "
30105
"executing the backup script. See <xref linkend=\"network-file-system\"/> for "
30106
"details using <emphasis>NFS</emphasis>."
30107
30108
#: serverguide/C/backups.xml:109(para)
30109
msgid ""
30110
"<emphasis>status messages:</emphasis> optional messages printed to the "
30111
"console using the <application>echo</application> utility."
30112
msgstr ""
30113
"<emphasis>status messages:</emphasis> optional messages printed to the "
30114
"console using the <application>echo</application> utility."
30115
30116
#: serverguide/C/backups.xml:115(para)
30117
msgid ""
30118
"<emphasis>tar czf $dest/$archive_file $backup_files:</emphasis> the "
30119
"<application>tar</application> command used to create the archive file."
30120
msgstr ""
30121
"<emphasis>tar czf $dest/$archive_file $backup_files:</emphasis> the "
30122
"<application>tar</application> command used to create the archive file."
30123
30124
#: serverguide/C/backups.xml:121(para)
30125
msgid "<emphasis>c:</emphasis> creates an archive."
30126
msgstr "<emphasis>c:</emphasis> creates an archive."
30127
30128
#: serverguide/C/backups.xml:126(para)
30129
msgid ""
30130
"<emphasis>z:</emphasis> filter the archive through the "
30131
"<application>gzip</application> utility compressing the archive."
30132
msgstr ""
30133
"<emphasis>z:</emphasis> filter the archive through the "
30134
"<application>gzip</application> utility compressing the archive."
30135
30136
#: serverguide/C/backups.xml:131(para)
30137
msgid ""
30138
"<emphasis>f:</emphasis> use archive file. Otherwise the "
30139
"<application>tar</application> output will be sent to STDOUT."
30140
msgstr ""
30141
"<emphasis>f:</emphasis> use archive file. Otherwise the "
30142
"<application>tar</application> output will be sent to STDOUT."
30143
30144
#: serverguide/C/backups.xml:138(para)
30145
msgid ""
30146
"<emphasis>ls -lh $dest:</emphasis> optional statement prints a <emphasis>-"
30147
"l</emphasis> long listing in <emphasis>-h</emphasis> human readable format "
30148
"of the destination directory. This is useful for a quick file size check of "
30149
"the archive file. This check should not replace testing the archive file."
30150
msgstr ""
30151
"<emphasis>ls -lh $dest:</emphasis> optional statement prints a <emphasis>-"
30152
"l</emphasis> long listing in <emphasis>-h</emphasis> human readable format "
30153
"of the destination directory. This is useful for a quick file size check of "
30154
"the archive file. This check should not replace testing the archive file."
30155
30156
#: serverguide/C/backups.xml:145(para)
30157
msgid ""
30158
"This is a simple example of a backup shell script. There are large amount of "
30159
"options that can be included in a backup script. See <xref linkend=\"backup-"
30160
"shellscript-references\"/> for links to resources providing more in depth "
30161
"shell scripting information."
30162
msgstr ""
30163
"This is a simple example of a backup shell script. There are large amount of "
30164
"options that can be included in a backup script. See <xref linkend=\"backup-"
30165
"shellscript-references\"/> for links to resources providing more in depth "
30166
"shell scripting information."
30167
30168
#: serverguide/C/backups.xml:152(title)
30169
msgid "Executing the Script"
30170
msgstr "Executing the Script"
30171
30172
#: serverguide/C/backups.xml:154(title)
30173
msgid "Executing from a Terminal"
30174
msgstr "Executing from a Terminal"
30175
30176
#: serverguide/C/backups.xml:155(para)
30177
msgid ""
30178
"The simplest way of executing the above backup script is to copy and paste "
30179
"the contents into a file. <filename>backup.sh</filename> for example. Then "
30180
"from a terminal prompt:"
30181
msgstr ""
30182
"The simplest way of executing the above backup script is to copy and paste "
30183
"the contents into a file. <filename>backup.sh</filename> for example. Then "
30184
"from a terminal prompt:"
30185
30186
#: serverguide/C/backups.xml:160(command)
30187
msgid "sudo bash backup.sh"
30188
msgstr "sudo bash backup.sh"
30189
30190
#: serverguide/C/backups.xml:162(para)
30191
msgid ""
30192
"This is a great way to test the script to make sure everything works as "
30193
"expected."
30194
msgstr ""
30195
"This is a great way to test the script to make sure everything works as "
30196
"expected."
30197
30198
#: serverguide/C/backups.xml:167(title)
30199
msgid "Executing with cron"
30200
msgstr "Executing with cron"
30201
30202
#: serverguide/C/backups.xml:168(para)
30203
msgid ""
30204
"The <application>cron</application> utility can be used to automate the "
30205
"script execution. The <application>cron</application> daemon allows the "
30206
"execution of scripts, or commands, at a specified time and date."
30207
msgstr ""
30208
"The <application>cron</application> utility can be used to automate the "
30209
"script execution. The <application>cron</application> daemon allows the "
30210
"execution of scripts, or commands, at a specified time and date."
30211
30212
#: serverguide/C/backups.xml:172(para)
30213
msgid ""
30214
"<application>cron</application> is configured through entries in a "
30215
"<filename>crontab</filename> file. <filename>crontab</filename> files are "
30216
"separated into fields:"
30217
msgstr ""
30218
"<application>cron</application> is configured through entries in a "
30219
"<filename>crontab</filename> file. <filename>crontab</filename> files are "
30220
"separated into fields:"
30221
30222
#: serverguide/C/backups.xml:176(programlisting)
30223
#, no-wrap
30224
msgid ""
30225
"\n"
30226
"# m h dom mon dow command\n"
30227
msgstr ""
30228
"\n"
30229
"# m h dom mon dow command\n"
30230
30231
#: serverguide/C/backups.xml:181(para)
30232
msgid ""
30233
"<emphasis>m:</emphasis> minute the command executes on between 0 and 59."
30234
msgstr ""
30235
"<emphasis>m:</emphasis> minute the command executes on between 0 and 59."
30236
30237
#: serverguide/C/backups.xml:186(para)
30238
msgid ""
30239
"<emphasis>h:</emphasis> hour the command executes on between 0 and 23."
30240
msgstr ""
30241
"<emphasis>h:</emphasis> hour the command executes on between 0 and 23."
30242
30243
#: serverguide/C/backups.xml:191(para)
30244
msgid "<emphasis>dom:</emphasis> day of month the command executes on."
30245
msgstr "<emphasis>dom:</emphasis> day of month the command executes on."
30246
30247
#: serverguide/C/backups.xml:196(para)
30248
msgid ""
30249
"<emphasis>mon:</emphasis> the month the command executes on between 1 and 12."
30250
msgstr ""
30251
"<emphasis>mon:</emphasis> the month the command executes on between 1 and 12."
30252
30253
#: serverguide/C/backups.xml:201(para)
30254
msgid ""
30255
"<emphasis>dow:</emphasis> the day of the week the command executes on "
30256
"between 0 and 7. Sunday may be specified by using 0 or 7, both values are "
30257
"valid."
30258
msgstr ""
30259
"<emphasis>dow:</emphasis> the day of the week the command executes on "
30260
"between 0 and 7. Sunday may be specified by using 0 or 7, both values are "
30261
"valid."
30262
30263
#: serverguide/C/backups.xml:206(para)
30264
msgid "<emphasis>command:</emphasis> the command to execute."
30265
msgstr "<emphasis>command:</emphasis> the command to execute."
30266
30267
#: serverguide/C/backups.xml:211(para)
30268
msgid ""
30269
"To add or change entries in a <filename>crontab</filename> file the "
30270
"<application>crontab -e</application> command should be used. Also, the "
30271
"contents of a <filename>crontab</filename> file can be viewed using the "
30272
"<application>crontab -l</application> command."
30273
msgstr ""
30274
"To add or change entries in a <filename>crontab</filename> file the "
30275
"<application>crontab -e</application> command should be used. Also, the "
30276
"contents of a <filename>crontab</filename> file can be viewed using the "
30277
"<application>crontab -l</application> command."
30278
30279
#: serverguide/C/backups.xml:215(para)
30280
msgid ""
30281
"To execute the <application>backup.sh</application> script listed above "
30282
"using <application>cron</application>. Enter the following from a terminal "
30283
"prompt:"
30284
msgstr ""
30285
"To execute the <application>backup.sh</application> script listed above "
30286
"using <application>cron</application>. Enter the following from a terminal "
30287
"prompt:"
30288
30289
#: serverguide/C/backups.xml:220(command)
30290
msgid "sudo crontab -e"
30291
msgstr "sudo crontab -e"
30292
30293
#: serverguide/C/backups.xml:223(para)
30294
msgid ""
30295
"Using <application>sudo</application> with the <application>crontab -"
30296
"e</application> command edits the <emphasis>root</emphasis> user's crontab. "
30297
"This is necessary if you are backing up directories only the root user has "
30298
"access to."
30299
msgstr ""
30300
"Using <application>sudo</application> with the <application>crontab -"
30301
"e</application> command edits the <emphasis>root</emphasis> user's crontab. "
30302
"This is necessary if you are backing up directories only the root user has "
30303
"access to."
30304
30305
#: serverguide/C/backups.xml:228(para)
30306
msgid "Add the following entry to the <filename>crontab</filename> file:"
30307
msgstr "Add the following entry to the <filename>crontab</filename> file:"
30308
30309
#: serverguide/C/backups.xml:231(programlisting)
30310
#, no-wrap
30311
msgid ""
30312
"\n"
30313
"# m h dom mon dow command\n"
30314
"0 0 * * * bash /usr/local/bin/backup.sh\n"
30315
msgstr ""
30316
"\n"
30317
"# m h dom mon dow command\n"
30318
"0 0 * * * bash /usr/local/bin/backup.sh\n"
30319
30320
#: serverguide/C/backups.xml:235(para)
30321
msgid ""
30322
"The <application>backup.sh</application> script will now be executed every "
30323
"day at 12:00 am."
30324
msgstr ""
30325
"The <application>backup.sh</application> script will now be executed every "
30326
"day at 12:00 am."
30327
30328
#: serverguide/C/backups.xml:239(para)
30329
msgid ""
30330
"The <application>backup.sh</application> script will need to be copied to "
30331
"the <filename>/usr/local/bin/</filename> directory in order for this entry "
30332
"to execute properly. The script can reside anywhere on the file system "
30333
"simply change the script path appropriately."
30334
msgstr ""
30335
"The <application>backup.sh</application> script will need to be copied to "
30336
"the <filename>/usr/local/bin/</filename> directory in order for this entry "
30337
"to execute properly. The script can reside anywhere on the file system "
30338
"simply change the script path appropriately."
30339
30340
#: serverguide/C/backups.xml:244(para)
30341
msgid ""
30342
"For more in depth <application>crontab</application> options see <xref "
30343
"linkend=\"backup-shellscript-references\"/>."
30344
msgstr ""
30345
"For more in depth <application>crontab</application> options see <xref "
30346
"linkend=\"backup-shellscript-references\"/>."
30347
30348
#: serverguide/C/backups.xml:250(title)
30349
msgid "Restoring from the Archive"
30350
msgstr "Restoring from the Archive"
30351
30352
#: serverguide/C/backups.xml:251(para)
30353
msgid ""
30354
"Once an archive has been created it is important to test the archive. The "
30355
"archive can be tested by listing the files it contains, but the best test is "
30356
"to <emphasis>restore</emphasis> a file from the archive."
30357
msgstr ""
30358
"Once an archive has been created it is important to test the archive. The "
30359
"archive can be tested by listing the files it contains, but the best test is "
30360
"to <emphasis>restore</emphasis> a file from the archive."
30361
30362
#: serverguide/C/backups.xml:257(para)
30363
msgid "To see a listing of the archive contents. From a terminal prompt:"
30364
msgstr "To see a listing of the archive contents. From a terminal prompt:"
30365
30366
#: serverguide/C/backups.xml:261(command)
30367
msgid "tar -tzvf /mnt/backup/host-Monday.tgz"
30368
msgstr "tar -tzvf /mnt/backup/host-Monday.tgz"
30369
30370
#: serverguide/C/backups.xml:265(para)
30371
msgid "To restore a file from the archive to a different directory enter:"
30372
msgstr "To restore a file from the archive to a different directory enter:"
30373
30374
#: serverguide/C/backups.xml:269(command)
30375
msgid "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
30376
msgstr "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
30377
30378
#: serverguide/C/backups.xml:271(para)
30379
msgid ""
30380
"The <emphasis>-C</emphasis> option to <application>tar</application> "
30381
"redirects the extracted files to the specified directory. The above example "
30382
"will extract the <filename>/etc/hosts</filename> file to "
30383
"<filename>/tmp/etc/hosts</filename>. <application>tar</application> "
30384
"recreates the directory structure that it contains."
30385
msgstr ""
30386
"The <emphasis>-C</emphasis> option to <application>tar</application> "
30387
"redirects the extracted files to the specified directory. The above example "
30388
"will extract the <filename>/etc/hosts</filename> file to "
30389
"<filename>/tmp/etc/hosts</filename>. <application>tar</application> "
30390
"recreates the directory structure that it contains."
30391
30392
#: serverguide/C/backups.xml:276(para)
30393
msgid ""
30394
"Also, notice the leading <emphasis>\"/\"</emphasis> is left off the path of "
30395
"the file to restore."
30396
msgstr ""
30397
"Also, notice the leading <emphasis>\"/\"</emphasis> is left off the path of "
30398
"the file to restore."
30399
30400
#: serverguide/C/backups.xml:281(para)
30401
msgid "To restore all files in the archive enter the following:"
30402
msgstr "To restore all files in the archive enter the following:"
30403
30404
#: serverguide/C/backups.xml:285(command)
30405
msgid "cd /"
30406
msgstr "cd /"
30407
30408
#: serverguide/C/backups.xml:286(command)
30409
msgid "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
30410
msgstr "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
30411
30412
#: serverguide/C/backups.xml:291(para)
30413
msgid "This will overwrite the files currently on the file system."
30414
msgstr "This will overwrite the files currently on the file system."
30415
30416
#: serverguide/C/backups.xml:300(para)
30417
msgid ""
30418
"For more information on shell scripting see the <ulink "
30419
"url=\"http://tldp.org/LDP/abs/html/\">Advanced Bash-Scripting Guide</ulink>"
30420
msgstr ""
30421
"For more information on shell scripting see the <ulink "
30422
"url=\"http://tldp.org/LDP/abs/html/\">Advanced Bash-Scripting Guide</ulink>"
30423
30424
#: serverguide/C/backups.xml:305(para)
30425
msgid ""
30426
"The book <ulink url=\"http://safari.samspublishing.com/0672323583\">Teach "
30427
"Yourself Shell Programming in 24 Hours</ulink> is available online and a "
30428
"great resource for shell scripting."
30429
msgstr ""
30430
"The book <ulink url=\"http://safari.samspublishing.com/0672323583\">Teach "
30431
"Yourself Shell Programming in 24 Hours</ulink> is available online and a "
30432
"great resource for shell scripting."
30433
30434
#: serverguide/C/backups.xml:311(para)
30435
msgid ""
30436
"The <ulink url=\"https://help.ubuntu.com/community/CronHowto\">CronHowto "
30437
"Wiki Page</ulink> contains details on advanced "
30438
"<application>cron</application> options."
30439
msgstr ""
30440
"The <ulink url=\"https://help.ubuntu.com/community/CronHowto\">CronHowto "
30441
"Wiki Page</ulink> contains details on advanced "
30442
"<application>cron</application> options."
30443
30444
#: serverguide/C/backups.xml:318(para)
30445
msgid ""
30446
"See the <ulink url=\"http://www.gnu.org/software/tar/manual/index.html\">GNU "
30447
"tar Manual</ulink> for more <application>tar</application> options."
30448
msgstr ""
30449
"See the <ulink url=\"http://www.gnu.org/software/tar/manual/index.html\">GNU "
30450
"tar Manual</ulink> for more <application>tar</application> options."
30451
30452
#: serverguide/C/backups.xml:324(para)
30453
msgid ""
30454
"The Wikipedia <ulink "
30455
"url=\"http://en.wikipedia.org/wiki/Backup_rotation_scheme\">Backup Rotation "
30456
"Scheme</ulink> article contains information on other backup rotation schemes."
30457
msgstr ""
30458
"The Wikipedia <ulink "
30459
"url=\"http://en.wikipedia.org/wiki/Backup_rotation_scheme\">Backup Rotation "
30460
"Scheme</ulink> article contains information on other backup rotation schemes."
30461
30462
#: serverguide/C/backups.xml:330(para)
30463
msgid ""
30464
"The shell script uses <application>tar</application> to create the archive, "
30465
"but there many other command line utilities that can be used. For example:"
30466
msgstr ""
30467
"The shell script uses <application>tar</application> to create the archive, "
30468
"but there many other command line utilities that can be used. For example:"
30469
30470
#: serverguide/C/backups.xml:336(para)
30471
msgid ""
30472
"<ulink url=\"http://www.gnu.org/software/cpio/\">cpio</ulink>: used to copy "
30473
"files to and from archives."
30474
msgstr ""
30475
"<ulink url=\"http://www.gnu.org/software/cpio/\">cpio</ulink>: used to copy "
30476
"files to and from archives."
30477
30478
#: serverguide/C/backups.xml:341(para)
30479
msgid ""
30480
"<ulink url=\"http://www.gnu.org/software/coreutils/\">dd</ulink>: part of "
30481
"the <application>coreutils</application> package. A low level utility that "
30482
"can copy data from one format to another"
30483
msgstr ""
30484
"<ulink url=\"http://www.gnu.org/software/coreutils/\">dd</ulink>: part of "
30485
"the <application>coreutils</application> package. A low level utility that "
30486
"can copy data from one format to another"
30487
30488
#: serverguide/C/backups.xml:347(para)
30489
msgid ""
30490
"<ulink url=\"http://www.rsnapshot.org/\">rsnapshot</ulink>: a file system "
30491
"snap shot utility used to create copies of an entire file system."
30492
msgstr ""
30493
"<ulink url=\"http://www.rsnapshot.org/\">rsnapshot</ulink>: a file system "
30494
"snap shot utility used to create copies of an entire file system."
30495
30496
#: serverguide/C/backups.xml:358(title)
30497
msgid "Archive Rotation"
30498
msgstr "Archive Rotation"
30499
30500
#: serverguide/C/backups.xml:359(para)
30501
msgid ""
30502
"The shell script in section <xref linkend=\"backup-shellscripts\"/> only "
30503
"allows for seven different archives. For a server whose data doesn't change "
30504
"often this may be enough. If the server has a large amount of data a more "
30505
"robust rotation scheme should be used."
30506
msgstr ""
30507
"The shell script in section <xref linkend=\"backup-shellscripts\"/> only "
30508
"allows for seven different archives. For a server whose data doesn't change "
30509
"often this may be enough. If the server has a large amount of data a more "
30510
"robust rotation scheme should be used."
30511
30512
#: serverguide/C/backups.xml:365(title)
30513
msgid "Rotating NFS Archives"
30514
msgstr "Rotating NFS Archives"
30515
30516
#: serverguide/C/backups.xml:366(para)
30517
msgid ""
30518
"In this section the shell script will be slightly modified to implement a "
30519
"grandfather-father-son rotation scheme (monthly-weekly-daily):"
30520
msgstr ""
30521
"In this section the shell script will be slightly modified to implement a "
30522
"grandfather-father-son rotation scheme (monthly-weekly-daily):"
30523
30524
#: serverguide/C/backups.xml:372(para)
30525
msgid ""
30526
"The rotation will do a <emphasis>daily</emphasis> backup Sunday through "
30527
"Friday."
30528
msgstr ""
30529
"The rotation will do a <emphasis>daily</emphasis> backup Sunday through "
30530
"Friday."
30531
30532
#: serverguide/C/backups.xml:377(para)
30533
msgid ""
30534
"On Saturday a <emphasis>weekly</emphasis> backup is done giving you four "
30535
"weekly backups a month."
30536
msgstr ""
30537
"On Saturday a <emphasis>weekly</emphasis> backup is done giving you four "
30538
"weekly backups a month."
30539
30540
#: serverguide/C/backups.xml:382(para)
30541
msgid ""
30542
"The <emphasis>monthly</emphasis> backup is done on the first of the month "
30543
"rotating two monthly backups based on if the month is odd or even."
30544
msgstr ""
30545
"The <emphasis>monthly</emphasis> backup is done on the first of the month "
30546
"rotating two monthly backups based on if the month is odd or even."
30547
30548
#: serverguide/C/backups.xml:388(para)
30549
msgid "Here is the new script:"
30550
msgstr "Here is the new script:"
30551
30552
#: serverguide/C/backups.xml:391(programlisting)
30553
#, no-wrap
30554
msgid ""
30555
"\n"
30556
"#!/bin/bash\n"
30557
"####################################\n"
30558
"#\n"
30559
"# Backup to NFS mount script with\n"
30560
"# grandfather-father-son rotation.\n"
30561
"#\n"
30562
"####################################\n"
30563
"\n"
30564
"# What to backup. \n"
30565
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
30566
"\n"
30567
"# Where to backup to.\n"
30568
"dest=\"/mnt/backup\"\n"
30569
"\n"
30570
"# Setup variables for the archive filename.\n"
30571
"day=$(date +%A)\n"
30572
"hostname=$(hostname -s)\n"
30573
"\n"
30574
"# Find which week of the month 1-4 it is.\n"
30575
"day_num=$(date +%d)\n"
30576
"if (( $day_num <= 7 )); then\n"
30577
" week_file=\"$hostname-week1.tgz\"\n"
30578
"elif (( $day_num > 7 && $day_num <= 14 )); then\n"
30579
" week_file=\"$hostname-week2.tgz\"\n"
30580
"elif (( $day_num > 14 && $day_num <= 21 )); then\n"
30581
" week_file=\"$hostname-week3.tgz\"\n"
30582
"elif (( $day_num > 21 && $day_num < 32 )); then\n"
30583
" week_file=\"$hostname-week4.tgz\"\n"
30584
"fi\n"
30585
"\n"
30586
"# Find if the Month is odd or even.\n"
30587
"month_num=$(date +%m)\n"
30588
"month=$(expr $month_num % 2)\n"
30589
"if [ $month -eq 0 ]; then\n"
30590
" month_file=\"$hostname-month2.tgz\"\n"
30591
"else\n"
30592
" month_file=\"$hostname-month1.tgz\"\n"
30593
"fi\n"
30594
"\n"
30595
"# Create archive filename.\n"
30596
"if [ $day_num == 1 ]; then\n"
30597
"\tarchive_file=$month_file\n"
30598
"elif [ $day != \"Saturday\" ]; then\n"
30599
" archive_file=\"$hostname-$day.tgz\"\n"
30600
"else \n"
30601
"\tarchive_file=$week_file\n"
30602
"fi\n"
30603
"\n"
30604
"# Print start status message.\n"
30605
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
30606
"date\n"
30607
"echo\n"
30608
"\n"
30609
"# Backup the files using tar.\n"
30610
"tar czf $dest/$archive_file $backup_files\n"
30611
"\n"
30612
"# Print end status message.\n"
30613
"echo\n"
30614
"echo \"Backup finished\"\n"
30615
"date\n"
30616
"\n"
30617
"# Long listing of files in $dest to check file sizes.\n"
30618
"ls -lh $dest/\n"
30619
msgstr ""
30620
"\n"
30621
"#!/bin/bash\n"
30622
"####################################\n"
30623
"#\n"
30624
"# Backup to NFS mount script with\n"
30625
"# grandfather-father-son rotation.\n"
30626
"#\n"
30627
"####################################\n"
30628
"\n"
30629
"# What to backup. \n"
30630
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
30631
"\n"
30632
"# Where to backup to.\n"
30633
"dest=\"/mnt/backup\"\n"
30634
"\n"
30635
"# Setup variables for the archive filename.\n"
30636
"day=$(date +%A)\n"
30637
"hostname=$(hostname -s)\n"
30638
"\n"
30639
"# Find which week of the month 1-4 it is.\n"
30640
"day_num=$(date +%d)\n"
30641
"if (( $day_num <= 7 )); then\n"
30642
" week_file=\"$hostname-week1.tgz\"\n"
30643
"elif (( $day_num > 7 && $day_num <= 14 )); then\n"
30644
" week_file=\"$hostname-week2.tgz\"\n"
30645
"elif (( $day_num > 14 && $day_num <= 21 )); then\n"
30646
" week_file=\"$hostname-week3.tgz\"\n"
30647
"elif (( $day_num > 21 && $day_num < 32 )); then\n"
30648
" week_file=\"$hostname-week4.tgz\"\n"
30649
"fi\n"
30650
"\n"
30651
"# Find if the Month is odd or even.\n"
30652
"month_num=$(date +%m)\n"
30653
"month=$(expr $month_num % 2)\n"
30654
"if [ $month -eq 0 ]; then\n"
30655
" month_file=\"$hostname-month2.tgz\"\n"
30656
"else\n"
30657
" month_file=\"$hostname-month1.tgz\"\n"
30658
"fi\n"
30659
"\n"
30660
"# Create archive filename.\n"
30661
"if [ $day_num == 1 ]; then\n"
30662
"\tarchive_file=$month_file\n"
30663
"elif [ $day != \"Saturday\" ]; then\n"
30664
" archive_file=\"$hostname-$day.tgz\"\n"
30665
"else \n"
30666
"\tarchive_file=$week_file\n"
30667
"fi\n"
30668
"\n"
30669
"# Print start status message.\n"
30670
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
30671
"date\n"
30672
"echo\n"
30673
"\n"
30674
"# Backup the files using tar.\n"
30675
"tar czf $dest/$archive_file $backup_files\n"
30676
"\n"
30677
"# Print end status message.\n"
30678
"echo\n"
30679
"echo \"Backup finished\"\n"
30680
"date\n"
30681
"\n"
30682
"# Long listing of files in $dest to check file sizes.\n"
30683
"ls -lh $dest/\n"
30684
30685
#: serverguide/C/backups.xml:456(para)
30686
msgid ""
30687
"The script can be executed using the same methods as in <xref "
30688
"linkend=\"backup-executing-shellscript\"/>."
30689
msgstr ""
30690
"The script can be executed using the same methods as in <xref "
30691
"linkend=\"backup-executing-shellscript\"/>."
30692
30693
#: serverguide/C/backups.xml:459(para)
30694
msgid ""
30695
"It is good practice to take backup media off site in case of a disaster. In "
30696
"the shell script example the backup media is another server providing an NFS "
30697
"share. In all likelihood taking the NFS server to another location would not "
30698
"be practical. Depending upon connection speeds it may be an option to copy "
30699
"the archive file over a WAN link to a server in another location."
30700
msgstr ""
30701
"It is good practice to take backup media off site in case of a disaster. In "
30702
"the shell script example the backup media is another server providing an NFS "
30703
"share. In all likelihood taking the NFS server to another location would not "
30704
"be practical. Depending upon connection speeds it may be an option to copy "
30705
"the archive file over a WAN link to a server in another location."
30706
30707
#: serverguide/C/backups.xml:465(para)
30708
msgid ""
30709
"Another option is to copy the archive file to an external hard drive which "
30710
"can then be taken off site. Since the price of external hard drives continue "
30711
"to decrease it may be cost-effective to use two drives for each archive "
30712
"level. This would allow you to have one external drive attached to the "
30713
"backup server and one in another location."
30714
msgstr ""
30715
30716
#: serverguide/C/backups.xml:472(title)
30717
msgid "Tape Drives"
30718
msgstr "Tape Drives"
30719
30720
#: serverguide/C/backups.xml:473(para)
30721
msgid ""
30722
"A tape drive attached to the server can be used instead of a NFS share. "
30723
"Using a tape drive simplifies archive rotation, and taking the media off "
30724
"site as well."
30725
msgstr ""
30726
"A tape drive attached to the server can be used instead of a NFS share. "
30727
"Using a tape drive simplifies archive rotation, and taking the media off "
30728
"site as well."
30729
30730
#: serverguide/C/backups.xml:477(para)
30731
msgid ""
30732
"When using a tape drive the filename portions of the script aren't needed "
30733
"because the date is sent directly to the tape device. Some commands to "
30734
"manipulate the tape are needed. This is accomplished using "
30735
"<application>mt</application>, a magnetic tape control utility part of the "
30736
"<application>cpio</application> package."
30737
msgstr ""
30738
"When using a tape drive the filename portions of the script aren't needed "
30739
"because the date is sent directly to the tape device. Some commands to "
30740
"manipulate the tape are needed. This is accomplished using "
30741
"<application>mt</application>, a magnetic tape control utility part of the "
30742
"<application>cpio</application> package."
30743
30744
#: serverguide/C/backups.xml:482(para)
30745
msgid "Here is the shell script modified to use a tape drive:"
30746
msgstr "Here is the shell script modified to use a tape drive:"
30747
30748
#: serverguide/C/backups.xml:485(programlisting)
30749
#, no-wrap
30750
msgid ""
30751
"\n"
30752
"#!/bin/bash\n"
30753
"####################################\n"
30754
"#\n"
30755
"# Backup to tape drive script.\n"
30756
"#\n"
30757
"####################################\n"
30758
"\n"
30759
"# What to backup. \n"
30760
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
30761
"\n"
30762
"# Where to backup to.\n"
30763
"dest=\"/dev/st0\"\n"
30764
"\n"
30765
"# Print start status message.\n"
30766
"echo \"Backing up $backup_files to $dest\"\n"
30767
"date\n"
30768
"echo\n"
30769
"\n"
30770
"# Make sure the tape is rewound.\n"
30771
"mt -f $dest rewind\n"
30772
"\n"
30773
"# Backup the files using tar.\n"
30774
"tar czf $dest $backup_files\n"
30775
"\n"
30776
"# Rewind and eject the tape.\n"
30777
"mt -f $dest rewoffl\n"
30778
"\n"
30779
"# Print end status message.\n"
30780
"echo\n"
30781
"echo \"Backup finished\"\n"
30782
"date\n"
30783
msgstr ""
30784
"\n"
30785
"#!/bin/bash\n"
30786
"####################################\n"
30787
"#\n"
30788
"# Backup to tape drive script.\n"
30789
"#\n"
30790
"####################################\n"
30791
"\n"
30792
"# What to backup. \n"
30793
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
30794
"\n"
30795
"# Where to backup to.\n"
30796
"dest=\"/dev/st0\"\n"
30797
"\n"
30798
"# Print start status message.\n"
30799
"echo \"Backing up $backup_files to $dest\"\n"
30800
"date\n"
30801
"echo\n"
30802
"\n"
30803
"# Make sure the tape is rewound.\n"
30804
"mt -f $dest rewind\n"
30805
"\n"
30806
"# Backup the files using tar.\n"
30807
"tar czf $dest $backup_files\n"
30808
"\n"
30809
"# Rewind and eject the tape.\n"
30810
"mt -f $dest rewoffl\n"
30811
"\n"
30812
"# Print end status message.\n"
30813
"echo\n"
30814
"echo \"Backup finished\"\n"
30815
"date\n"
30816
30817
#: serverguide/C/backups.xml:519(para)
30818
msgid ""
30819
"The default device name for a SCSI tape drive is "
30820
"<filename>/dev/st0</filename>. Use the appropriate device path for your "
30821
"system."
30822
msgstr ""
30823
"The default device name for a SCSI tape drive is "
30824
"<filename>/dev/st0</filename>. Use the appropriate device path for your "
30825
"system."
30826
30827
#: serverguide/C/backups.xml:524(para)
30828
msgid ""
30829
"Restoring from a tape drive is basically the same as restoring from a file. "
30830
"Simply rewind the tape and use the device path instead of a file path. For "
30831
"example to restore the <filename>/etc/hosts</filename> file to "
30832
"<filename>/tmp/etc/hosts</filename>:"
30833
msgstr ""
30834
"Restoring from a tape drive is basically the same as restoring from a file. "
30835
"Simply rewind the tape and use the device path instead of a file path. For "
30836
"example to restore the <filename>/etc/hosts</filename> file to "
30837
"<filename>/tmp/etc/hosts</filename>:"
30838
30839
#: serverguide/C/backups.xml:529(command)
30840
msgid "mt -f /dev/st0 rewind"
30841
msgstr "mt -f /dev/st0 rewind"
30842
30843
#: serverguide/C/backups.xml:530(command)
30844
msgid "tar -xzf /dev/st0 -C /tmp etc/hosts"
30845
msgstr "tar -xzf /dev/st0 -C /tmp etc/hosts"
30846
30847
#: serverguide/C/backups.xml:535(title)
30848
msgid "Bacula"
30849
msgstr "Bacula"
30850
30851
#: serverguide/C/backups.xml:536(para)
30852
msgid ""
30853
"<application>Bacula</application> is a backup program enabling you to "
30854
"backup, restore, and verify data across your network. There are Bacula "
30855
"clients for Linux, Windows, and Mac OS X. Making it a cross platform network "
30856
"wide solution."
30857
msgstr ""
30858
30859
#: serverguide/C/backups.xml:542(para)
30860
msgid ""
30861
"<application>Bacula</application> is made up of several components and "
30862
"services used to manage which files to backup and where to back them up to:"
30863
msgstr ""
30864
"<application>Bacula</application> is made up of several components and "
30865
"services used to manage which files to backup and where to back them up to:"
30866
30867
#: serverguide/C/backups.xml:548(para)
30868
msgid ""
30869
"<application>Bacula Director:</application> a service that controls all "
30870
"backup, restore, verify, and archive operations."
30871
msgstr ""
30872
"<application>Bacula Director:</application> a service that controls all "
30873
"backup, restore, verify, and archive operations."
30874
30875
#: serverguide/C/backups.xml:553(para)
30876
msgid ""
30877
"<application>Bacula Console:</application> an application allowing "
30878
"communication with the Director. There are three versions of the Console:"
30879
msgstr ""
30880
"<application>Bacula Console:</application> an application allowing "
30881
"communication with the Director. There are three versions of the Console:"
30882
30883
#: serverguide/C/backups.xml:558(para)
30884
msgid "Text based command line version."
30885
msgstr "Text based command line version."
30886
30887
#: serverguide/C/backups.xml:559(para)
30888
msgid "Gnome based GTK+ Graphical User Interface (GUI) interface."
30889
msgstr "Gnome based GTK+ Graphical User Interface (GUI) interface."
30890
30891
#: serverguide/C/backups.xml:560(para)
30892
msgid "wxWidgets GUI interface."
30893
msgstr "wxWidgets GUI interface."
30894
30895
#: serverguide/C/backups.xml:564(para)
30896
msgid ""
30897
"<application>Bacula File:</application> also known as the "
30898
"<application>Bacula Client</application> program. This application is "
30899
"installed on machines to be backed up, and is responsible for the data "
30900
"requested by the Director."
30901
msgstr ""
30902
"<application>Bacula File:</application> also known as the "
30903
"<application>Bacula Client</application> program. This application is "
30904
"installed on machines to be backed up, and is responsible for the data "
30905
"requested by the Director."
30906
30907
#: serverguide/C/backups.xml:570(para)
30908
msgid ""
30909
"<application>Bacula Storage:</application> the programs that perform the "
30910
"storage and recovery of data to the physical media."
30911
msgstr ""
30912
"<application>Bacula Storage:</application> the programs that perform the "
30913
"storage and recovery of data to the physical media."
30914
30915
#: serverguide/C/backups.xml:575(para)
30916
msgid ""
30917
"<application>Bacula Catalog:</application> is responsible for maintaining "
30918
"the file indexes and volume databases for all files backed up, enabling "
30919
"quick location and restoration of archived files. The Catalog supports three "
30920
"different databases MySQL, PostgreSQL, and SQLite."
30921
msgstr ""
30922
"<application>Bacula Catalogue:</application> is responsible for maintaining "
30923
"the file indexes and volume databases for all files backed up, enabling "
30924
"quick location and restoration of archived files. The Catalogue supports "
30925
"three different databases MySQL, PostgreSQL, and SQLite."
30926
30927
#: serverguide/C/backups.xml:581(para)
30928
msgid ""
30929
"<application>Bacula Monitor:</application> allows the monitoring of the "
30930
"Director, File daemons, and Storage daemons. Currently the Monitor is only "
30931
"available as a GTK+ GUI application."
30932
msgstr ""
30933
"<application>Bacula Monitor:</application> allows the monitoring of the "
30934
"Director, File daemons, and Storage daemons. Currently the Monitor is only "
30935
"available as a GTK+ GUI application."
30936
30937
#: serverguide/C/backups.xml:587(para)
30938
msgid ""
30939
"These services and applications can be run on multiple servers and clients, "
30940
"or they can be installed on one machine if backing up a single disk or "
30941
"volume."
30942
msgstr ""
30943
"These services and applications can be run on multiple servers and clients, "
30944
"or they can be installed on one machine if backing up a single disk or "
30945
"volume."
30946
30947
#: serverguide/C/backups.xml:594(para)
30948
msgid ""
30949
"There are multiple packages containing the different "
30950
"<application>Bacula</application> components. To install Bacula, from a "
30951
"terminal prompt enter:"
30952
msgstr ""
30953
"There are multiple packages containing the different "
30954
"<application>Bacula</application> components. To install Bacula, from a "
30955
"terminal prompt enter:"
30956
30957
#: serverguide/C/backups.xml:599(command)
30958
msgid "sudo apt-get install bacula"
30959
msgstr "sudo apt-get install bacula"
30960
30961
#: serverguide/C/backups.xml:601(para)
30962
msgid ""
30963
"By default installing the <application>bacula</application> package will use "
30964
"a <application>MySQL</application> database for the Catalog. If you want to "
30965
"use SQLite or PostgreSQL, for the Catalog, install <application>bacula-"
30966
"director-sqlite3</application> or <application>bacula-director-"
30967
"pgsql</application> respectively."
30968
msgstr ""
30969
"By default installing the <application>bacula</application> package will use "
30970
"a <application>MySQL</application> database for the Catalogue. If you want "
30971
"to use SQLite or PostgreSQL, for the Catalogue, install <application>bacula-"
30972
"director-sqlite3</application> or <application>bacula-director-"
30973
"pgsql</application> respectively."
30974
30975
#: serverguide/C/backups.xml:607(para)
30976
msgid ""
30977
"During the install process you will be asked to supply credentials for the "
30978
"database <emphasis>administrator</emphasis> and the "
30979
"<emphasis>bacula</emphasis> database <emphasis>owner</emphasis>. The "
30980
"database administrator will need to have the appropriate rights to create a "
30981
"database, see <xref linkend=\"mysql\"/> for more information."
30982
msgstr ""
30983
"During the install process you will be asked to supply credentials for the "
30984
"database <emphasis>administrator</emphasis> and the "
30985
"<emphasis>bacula</emphasis> database <emphasis>owner</emphasis>. The "
30986
"database administrator will need to have the appropriate rights to create a "
30987
"database, see <xref linkend=\"mysql\"/> for more information."
30988
30989
#: serverguide/C/backups.xml:617(para)
30990
msgid ""
30991
"<application>Bacula</application> configuration files are formatted based on "
30992
"<emphasis>resources</emphasis> comprising of <emphasis>directives</emphasis> "
30993
"surrounded by <quote>{}</quote> braces. Each Bacula component has an "
30994
"individual file in the <filename role=\"directory\">/etc/bacula</filename> "
30995
"directory."
30996
msgstr ""
30997
"<application>Bacula</application> configuration files are formatted based on "
30998
"<emphasis>resources</emphasis> comprising of <emphasis>directives</emphasis> "
30999
"surrounded by <quote>{}</quote> braces. Each Bacula component has an "
31000
"individual file in the <filename role=\"directory\">/etc/bacula</filename> "
31001
"directory."
31002
31003
#: serverguide/C/backups.xml:622(para)
31004
msgid ""
31005
"The various <application>Bacula</application> components must authorize "
31006
"themselves to each other. This is accomplished using the "
31007
"<emphasis>password</emphasis> directive. For example, the "
31008
"<emphasis>Storage</emphasis> resource password in the "
31009
"<filename>/etc/bacula/bacula-dir.conf</filename> file must match the "
31010
"<emphasis>Director</emphasis> resource password in "
31011
"<filename>/etc/bacula/bacula-sd.conf</filename>."
31012
msgstr ""
31013
"The various <application>Bacula</application> components must authorise "
31014
"themselves to each other. This is accomplished using the "
31015
"<emphasis>password</emphasis> directive. For example, the "
31016
"<emphasis>Storage</emphasis> resource password in the "
31017
"<filename>/etc/bacula/bacula-dir.conf</filename> file must match the "
31018
"<emphasis>Director</emphasis> resource password in "
31019
"<filename>/etc/bacula/bacula-sd.conf</filename>."
31020
31021
#: serverguide/C/backups.xml:628(para)
31022
msgid ""
31023
"By default the backup job named <emphasis>Client1</emphasis> is configured "
31024
"to archive the <application>Bacula</application> Catalog. If you plan on "
31025
"using the server to backup more than one client you should change the name "
31026
"of this job to something more descriptive. To change the name edit "
31027
"<filename>/etc/bacula/bacula-dir.conf</filename>:"
31028
msgstr ""
31029
"By default the backup job named <emphasis>Client1</emphasis> is configured "
31030
"to archive the <application>Bacula</application> Catalogue. If you plan on "
31031
"using the server to backup more than one client you should change the name "
31032
"of this job to something more descriptive. To change the name edit "
31033
"<filename>/etc/bacula/bacula-dir.conf</filename>:"
31034
31035
#: serverguide/C/backups.xml:633(programlisting)
31036
#, no-wrap
31037
msgid ""
31038
"\n"
31039
"#\n"
31040
"# Define the main nightly save backup job\n"
31041
"# By default, this job will back up to disk in \n"
31042
"Job {\n"
31043
" Name = \"BackupServer\"\n"
31044
" JobDefs = \"DefaultJob\"\n"
31045
" Write Bootstrap = \"/var/lib/bacula/Client1.bsr\"\n"
31046
"}\n"
31047
msgstr ""
31048
"\n"
31049
"#\n"
31050
"# Define the main nightly save backup job\n"
31051
"# By default, this job will back up to disk in \n"
31052
"Job {\n"
31053
" Name = \"BackupServer\"\n"
31054
" JobDefs = \"DefaultJob\"\n"
31055
" Write Bootstrap = \"/var/lib/bacula/Client1.bsr\"\n"
31056
"}\n"
31057
31058
#: serverguide/C/backups.xml:644(para)
31059
msgid ""
31060
"The example above changes the job name to <emphasis>BackupServer</emphasis> "
31061
"matching the machine's host name. Replace <quote>BackupServer</quote> with "
31062
"your appropriate hostname, or other descriptive name."
31063
msgstr ""
31064
"The example above changes the job name to <emphasis>BackupServer</emphasis> "
31065
"matching the machine's host name. Replace <quote>BackupServer</quote> with "
31066
"your appropriate hostname, or other descriptive name."
31067
31068
#: serverguide/C/backups.xml:649(para)
31069
msgid ""
31070
"The <emphasis>Console</emphasis> can be used to query the "
31071
"<emphasis>Director</emphasis> about jobs, but to use the Console with a "
31072
"<emphasis>non-root</emphasis> user, the user needs to be in the "
31073
"<emphasis>bacula</emphasis> group. To add a user to the bacula group enter "
31074
"the following from a terminal:"
31075
msgstr ""
31076
"The <emphasis>Console</emphasis> can be used to query the "
31077
"<emphasis>Director</emphasis> about jobs, but to use the Console with a "
31078
"<emphasis>non-root</emphasis> user, the user needs to be in the "
31079
"<emphasis>bacula</emphasis> group. To add a user to the bacula group enter "
31080
"the following from a terminal:"
31081
31082
#: serverguide/C/backups.xml:655(command)
31083
msgid "sudo adduser $username bacula"
31084
msgstr "sudo adduser $username bacula"
31085
31086
#: serverguide/C/backups.xml:658(para)
31087
msgid ""
31088
"Replace <emphasis>$username</emphasis> with the actual username. Also, if "
31089
"you are adding the current user to the group you should log out and back in "
31090
"for the new permissions to take effect."
31091
msgstr ""
31092
"Replace <emphasis>$username</emphasis> with the actual username. Also, if "
31093
"you are adding the current user to the group you should log out and back in "
31094
"for the new permissions to take effect."
31095
31096
#: serverguide/C/backups.xml:665(title)
31097
msgid "Localhost Backup"
31098
msgstr "Localhost Backup"
31099
31100
#: serverguide/C/backups.xml:666(para)
31101
msgid ""
31102
"This section describes how to backup specified directories on a single host "
31103
"to a local tape drive."
31104
msgstr ""
31105
"This section describes how to backup specified directories on a single host "
31106
"to a local tape drive."
31107
31108
#: serverguide/C/backups.xml:671(para)
31109
msgid ""
31110
"First, the <emphasis>Storage</emphasis> device needs to be configured. Edit "
31111
"<filename>/etc/bacula/bacula-sd.conf</filename> add:"
31112
msgstr ""
31113
"First, the <emphasis>Storage</emphasis> device needs to be configured. Edit "
31114
"<filename>/etc/bacula/bacula-sd.conf</filename> add:"
31115
31116
#: serverguide/C/backups.xml:674(programlisting)
31117
#, no-wrap
31118
msgid ""
31119
"\n"
31120
"Device {\n"
31121
" Name = \"Tape Drive\"\n"
31122
" Device Type = tape\n"
31123
" Media Type = DDS-4\n"
31124
" Archive Device = /dev/st0\n"
31125
" Hardware end of medium = No;\n"
31126
" AutomaticMount = yes; # when device opened, read it\n"
31127
" AlwaysOpen = Yes;\n"
31128
" RemovableMedia = yes;\n"
31129
" RandomAccess = no;\n"
31130
" Alert Command = \"sh -c 'tapeinfo -f %c | grep TapeAlert'\"\n"
31131
"}\n"
31132
msgstr ""
31133
"\n"
31134
"Device {\n"
31135
" Name = \"Tape Drive\"\n"
31136
" Device Type = tape\n"
31137
" Media Type = DDS-4\n"
31138
" Archive Device = /dev/st0\n"
31139
" Hardware end of medium = No;\n"
31140
" AutomaticMount = yes; # when device opened, read it\n"
31141
" AlwaysOpen = Yes;\n"
31142
" RemovableMedia = yes;\n"
31143
" RandomAccess = no;\n"
31144
" Alert Command = \"sh -c 'tapeinfo -f %c | grep TapeAlert'\"\n"
31145
"}\n"
31146
31147
#: serverguide/C/backups.xml:688(para)
31148
msgid ""
31149
"The example is for a <emphasis>DDS-4</emphasis> tape drive. Adjust the Media "
31150
"Type and Archive Device to match your hardware."
31151
msgstr ""
31152
"The example is for a <emphasis>DDS-4</emphasis> tape drive. Adjust the Media "
31153
"Type and Archive Device to match your hardware."
31154
31155
#: serverguide/C/backups.xml:691(para)
31156
msgid "You could also uncomment one of the other examples in the file."
31157
msgstr "You could also uncomment one of the other examples in the file."
31158
31159
#: serverguide/C/backups.xml:696(para)
31160
msgid ""
31161
"After editing <filename>/etc/bacula/bacula-sd.conf</filename> the "
31162
"<application>Storage</application> daemon will need to be restarted:"
31163
msgstr ""
31164
"After editing <filename>/etc/bacula/bacula-sd.conf</filename> the "
31165
"<application>Storage</application> daemon will need to be restarted:"
31166
31167
#: serverguide/C/backups.xml:701(command)
31168
msgid "sudo /etc/init.d/bacula-sd restart"
31169
msgstr "sudo /etc/init.d/bacula-sd restart"
31170
31171
#: serverguide/C/backups.xml:705(para)
31172
msgid ""
31173
"Now add a <emphasis>Storage</emphasis> resource in "
31174
"<filename>/etc/bacula/bacula-dir.conf</filename> to use the new Device:"
31175
msgstr ""
31176
"Now add a <emphasis>Storage</emphasis> resource in "
31177
"<filename>/etc/bacula/bacula-dir.conf</filename> to use the new Device:"
31178
31179
#: serverguide/C/backups.xml:708(programlisting)
31180
#, no-wrap
31181
msgid ""
31182
"\n"
31183
"# Definition of \"Tape Drive\" storage device\n"
31184
"Storage {\n"
31185
" Name = TapeDrive\n"
31186
" # Do not use \"localhost\" here \n"
31187
" Address = backupserver # N.B. Use a fully qualified name "
31188
"here\n"
31189
" SDPort = 9103\n"
31190
" Password = \"Cv70F6pf1t6pBopT4vQOnigDrR0v3LT3Cgkiyj\"\n"
31191
" Device = \"Tape Drive\"\n"
31192
" Media Type = tape\n"
31193
"}\n"
31194
msgstr ""
31195
"\n"
31196
"# Definition of \"Tape Drive\" storage device\n"
31197
"Storage {\n"
31198
" Name = TapeDrive\n"
31199
" # Do not use \"localhost\" here \n"
31200
" Address = backupserver # N.B. Use a fully qualified name "
31201
"here\n"
31202
" SDPort = 9103\n"
31203
" Password = \"Cv70F6pf1t6pBopT4vQOnigDrR0v3LT3Cgkiyj\"\n"
31204
" Device = \"Tape Drive\"\n"
31205
" Media Type = tape\n"
31206
"}\n"
31207
31208
#: serverguide/C/backups.xml:720(para)
31209
msgid ""
31210
"The <emphasis>Address</emphasis> directive needs to be the Fully Qualified "
31211
"Domain Name (FQDN) of the server. Change <emphasis>backupserver</emphasis> "
31212
"to the actual host name."
31213
msgstr ""
31214
"The <emphasis>Address</emphasis> directive needs to be the Fully Qualified "
31215
"Domain Name (FQDN) of the server. Change <emphasis>backupserver</emphasis> "
31216
"to the actual host name."
31217
31218
#: serverguide/C/backups.xml:724(para)
31219
msgid ""
31220
"Also, make sure the <emphasis>Password</emphasis> directive matches the "
31221
"password string in <filename>/etc/bacula/bacula-sd.conf</filename>."
31222
msgstr ""
31223
"Also, make sure the <emphasis>Password</emphasis> directive matches the "
31224
"password string in <filename>/etc/bacula/bacula-sd.conf</filename>."
31225
31226
#: serverguide/C/backups.xml:730(para)
31227
msgid ""
31228
"Create a new <emphasis>FileSet</emphasis>, which will determine what "
31229
"directories to backup, by adding:"
31230
msgstr ""
31231
"Create a new <emphasis>FileSet</emphasis>, which will determine what "
31232
"directories to backup, by adding:"
31233
31234
#: serverguide/C/backups.xml:733(programlisting)
31235
#, no-wrap
31236
msgid ""
31237
"\n"
31238
"# LocalhostBacup FileSet.\n"
31239
"FileSet {\n"
31240
" Name = \"LocalhostFiles\"\n"
31241
" Include {\n"
31242
" Options {\n"
31243
" signature = MD5\n"
31244
" compression=GZIP\n"
31245
" }\n"
31246
" File = /etc\n"
31247
" File = /home\n"
31248
" }\n"
31249
"}\n"
31250
msgstr ""
31251
"\n"
31252
"# LocalhostBacup FileSet.\n"
31253
"FileSet {\n"
31254
" Name = \"LocalhostFiles\"\n"
31255
" Include {\n"
31256
" Options {\n"
31257
" signature = MD5\n"
31258
" compression=GZIP\n"
31259
" }\n"
31260
" File = /etc\n"
31261
" File = /home\n"
31262
" }\n"
31263
"}\n"
31264
31265
#: serverguide/C/backups.xml:747(para)
31266
msgid ""
31267
"This <emphasis>FileSet</emphasis> will backup the <filename "
31268
"role=\"directory\">/etc</filename> and <filename "
31269
"role=\"directory\">/home</filename> directories. The "
31270
"<emphasis>Options</emphasis> resource directives configure the FileSet to "
31271
"create a MD5 signature for each file backed up, and to compress the files "
31272
"using GZIP."
31273
msgstr ""
31274
"This <emphasis>FileSet</emphasis> will backup the <filename "
31275
"role=\"directory\">/etc</filename> and <filename "
31276
"role=\"directory\">/home</filename> directories. The "
31277
"<emphasis>Options</emphasis> resource directives configure the FileSet to "
31278
"create a MD5 signature for each file backed up, and to compress the files "
31279
"using GZIP."
31280
31281
#: serverguide/C/backups.xml:754(para)
31282
msgid "Next, create a new <emphasis>Schedule</emphasis> for the backup job:"
31283
msgstr "Next, create a new <emphasis>Schedule</emphasis> for the backup job:"
31284
31285
#: serverguide/C/backups.xml:757(programlisting)
31286
#, no-wrap
31287
msgid ""
31288
"\n"
31289
"# LocalhostBackup Schedule -- Daily.\n"
31290
"Schedule {\n"
31291
" Name = \"LocalhostDaily\"\n"
31292
" Run = Full daily at 00:01\n"
31293
"}\n"
31294
msgstr ""
31295
"\n"
31296
"# LocalhostBackup Schedule -- Daily.\n"
31297
"Schedule {\n"
31298
" Name = \"LocalhostDaily\"\n"
31299
" Run = Full daily at 00:01\n"
31300
"}\n"
31301
31302
#: serverguide/C/backups.xml:764(para)
31303
msgid ""
31304
"The job will run every day at 00:01 or 12:01 am. There are many other "
31305
"scheduling options available."
31306
msgstr ""
31307
"The job will run every day at 00:01 or 12:01 am. There are many other "
31308
"scheduling options available."
31309
31310
#: serverguide/C/backups.xml:769(para)
31311
msgid "Finally create the <emphasis>Job</emphasis>:"
31312
msgstr "Finally create the <emphasis>Job</emphasis>:"
31313
31314
#: serverguide/C/backups.xml:772(programlisting)
31315
#, no-wrap
31316
msgid ""
31317
"\n"
31318
"# Localhost backup.\n"
31319
"Job {\n"
31320
" Name = \"LocalhostBackup\"\n"
31321
" JobDefs = \"DefaultJob\"\n"
31322
" Enabled = yes\n"
31323
" Level = Full\n"
31324
" FileSet = \"LocalhostFiles\"\n"
31325
" Schedule = \"LocalhostDaily\"\n"
31326
" Storage = TapeDrive\n"
31327
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
31328
"} \n"
31329
msgstr ""
31330
"\n"
31331
"# Localhost backup.\n"
31332
"Job {\n"
31333
" Name = \"LocalhostBackup\"\n"
31334
" JobDefs = \"DefaultJob\"\n"
31335
" Enabled = yes\n"
31336
" Level = Full\n"
31337
" FileSet = \"LocalhostFiles\"\n"
31338
" Schedule = \"LocalhostDaily\"\n"
31339
" Storage = TapeDrive\n"
31340
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
31341
"} \n"
31342
31343
#: serverguide/C/backups.xml:785(para)
31344
msgid ""
31345
"The job will do a <emphasis>Full</emphasis> backup every day to the tape "
31346
"drive."
31347
msgstr ""
31348
"The job will do a <emphasis>Full</emphasis> backup every day to the tape "
31349
"drive."
31350
31351
#: serverguide/C/backups.xml:790(para)
31352
msgid ""
31353
"Each tape used will need to have a <emphasis>Label</emphasis>. If the "
31354
"current tape does not have a label <application>Bacula</application> will "
31355
"send an email letting you know. To label a tape using the "
31356
"<application>Console</application> enter the following from a terminal:"
31357
msgstr ""
31358
"Each tape used will need to have a <emphasis>Label</emphasis>. If the "
31359
"current tape does not have a label <application>Bacula</application> will "
31360
"send an e-mail letting you know. To label a tape using the "
31361
"<application>Console</application> enter the following from a terminal:"
31362
31363
#: serverguide/C/backups.xml:796(command)
31364
msgid "bconsole"
31365
msgstr "bconsole"
31366
31367
#: serverguide/C/backups.xml:800(para)
31368
msgid "At the Bacula Console prompt enter:"
31369
msgstr "At the Bacula Console prompt enter:"
31370
31371
#: serverguide/C/backups.xml:804(command)
31372
msgid "label"
31373
msgstr "label"
31374
31375
#: serverguide/C/backups.xml:808(para)
31376
msgid ""
31377
"You will then be prompted for the <emphasis>Storage</emphasis> resource:"
31378
msgstr ""
31379
"You will then be prompted for the <emphasis>Storage</emphasis> resource:"
31380
31381
#: serverguide/C/backups.xml:818(userinput)
31382
#, no-wrap
31383
msgid "2"
31384
msgstr "2"
31385
31386
#: serverguide/C/backups.xml:812(computeroutput)
31387
#, no-wrap
31388
msgid ""
31389
"\n"
31390
"Automatically selected Catalog: MyCatalog\n"
31391
"Using Catalog \"MyCatalog\"\n"
31392
"The defined Storage resources are:\n"
31393
" 1: File\n"
31394
" 2: TapeDrive\n"
31395
"Select Storage resource (1-2):<placeholder-1/>\n"
31396
msgstr ""
31397
"\n"
31398
"Automatically selected Catalogue: MyCatalogue\n"
31399
"Using Catalogue \"MyCatalogue\"\n"
31400
"The defined Storage resources are:\n"
31401
" 1: File\n"
31402
" 2: TapeDrive\n"
31403
"Select Storage resource (1-2):<placeholder-1/>\n"
31404
31405
#: serverguide/C/backups.xml:823(para)
31406
msgid "Enter the new <emphasis>Volume</emphasis> name:"
31407
msgstr "Enter the new <emphasis>Volume</emphasis> name:"
31408
31409
#: serverguide/C/backups.xml:828(userinput)
31410
#, no-wrap
31411
msgid "Sunday"
31412
msgstr "Sunday"
31413
31414
#: serverguide/C/backups.xml:827(computeroutput)
31415
#, no-wrap
31416
msgid ""
31417
"\n"
31418
"Enter new Volume name: <placeholder-1/>\n"
31419
"Defined Pools:\n"
31420
" 1: Default\n"
31421
" 2: Scratch"
31422
msgstr ""
31423
"\n"
31424
"Enter new Volume name: <placeholder-1/>\n"
31425
"Defined Pools:\n"
31426
" 1: Default\n"
31427
" 2: Scratch"
31428
31429
#: serverguide/C/backups.xml:833(para)
31430
msgid "Replace <emphasis>Sunday</emphasis> with the desired label."
31431
msgstr "Replace <emphasis>Sunday</emphasis> with the desired label."
31432
31433
#: serverguide/C/backups.xml:838(para)
31434
msgid "Now, select the <emphasis>Pool</emphasis>:"
31435
msgstr "Now, select the <emphasis>Pool</emphasis>:"
31436
31437
#: serverguide/C/backups.xml:843(userinput)
31438
#, no-wrap
31439
msgid "1"
31440
msgstr "1"
31441
31442
#: serverguide/C/backups.xml:842(computeroutput)
31443
#, no-wrap
31444
msgid ""
31445
"\n"
31446
"Select the Pool (1-2): <placeholder-1/>\n"
31447
"Connecting to Storage daemon TapeDrive at backupserver:9103 ...\n"
31448
"Sending label command for Volume \"Sunday\" Slot 0 ...\n"
31449
msgstr ""
31450
"\n"
31451
"Select the Pool (1-2): <placeholder-1/>\n"
31452
"Connecting to Storage daemon TapeDrive at backupserver:9103 ...\n"
31453
"Sending label command for Volume \"Sunday\" Slot 0 ...\n"
31454
31455
#: serverguide/C/backups.xml:850(para)
31456
msgid ""
31457
"Congratulations, you have now configured <emphasis>Bacula</emphasis> to "
31458
"backup the localhost to an attached tape drive."
31459
msgstr ""
31460
"Congratulations, you have now configured <emphasis>Bacula</emphasis> to "
31461
"backup the localhost to an attached tape drive."
31462
31463
#: serverguide/C/backups.xml:858(para)
31464
msgid ""
31465
"For more <emphasis>Bacula</emphasis> configuration options refer to the "
31466
"<ulink url=\"http://www.bacula.org/en/rel-manual/index.html\">Bacula User's "
31467
"Manual</ulink>"
31468
msgstr ""
31469
"For more <emphasis>Bacula</emphasis> configuration options refer to the "
31470
"<ulink url=\"http://www.bacula.org/en/rel-manual/index.html\">Bacula User's "
31471
"Manual</ulink>"
31472
31473
#: serverguide/C/backups.xml:864(para)
31474
msgid ""
31475
"The <ulink url=\"http://www.bacula.org/\">Bacula Home Page</ulink> contains "
31476
"the latest Bacula news and developments."
31477
msgstr ""
31478
"The <ulink url=\"http://www.bacula.org/\">Bacula Home Page</ulink> contains "
31479
"the latest Bacula news and developments."
31480
31481
#: serverguide/C/backups.xml:869(para)
31482
msgid ""
31483
"Also, see the <ulink url=\"https://help.ubuntu.com/community/Bacula\">Bacula "
31484
"Ubuntu Wiki</ulink> page."
31485
msgstr ""
31486
31487
#. Put one translator per line, in the form of NAME <EMAIL>, YEAR1, YEAR2
31488
#: serverguide/C/backups.xml:0(None)
31489
msgid "translator-credits"
31490
msgstr ""
31491
"Launchpad Contributions:\n"
31492
" Matthew East https://launchpad.net/~mdke\n"
31493
" Robert Readman https://launchpad.net/~robert-readman\n"
31494
" ZhongHan Cai https://launchpad.net/~caizhonghan"
31495
31496
#~ msgid "sudo /etc/init.d/samba restart"
31497
#~ msgstr "sudo /etc/init.d/samba restart"
31498
31499
#~ msgid ""
31500
#~ "By default, Ubuntu requires a minimum password length of 4 characters, as "
31501
#~ "well as some basic entropy checks. These values are controlled in the file "
31502
#~ "<filename>/etc/pam.d/common-password</filename>, which is outlined below."
31503
#~ msgstr ""
31504
#~ "By default, Ubuntu requires a minimum password length of 4 characters, as "
31505
#~ "well as some basic entropy checks. These values are controlled in the file "
31506
#~ "<filename>/etc/pam.d/common-password</filename>, which is outlined below."
31507
31508
#, no-wrap
31509
#~ msgid ""
31510
#~ "\n"
31511
#~ "password required pam_unix.so nullok obscure min=4 max=8 md5\n"
31512
#~ msgstr ""
31513
#~ "\n"
31514
#~ "password required pam_unix.so nullok obscure min=4 max=8 md5\n"
31515
31516
#~ msgid ""
31517
#~ "If you would like to adjust the minimum length to 6 characters, change the "
31518
#~ "appropriate variable to min=6. The modification is outlined below."
31519
#~ msgstr ""
31520
#~ "If you would like to adjust the minimum length to 6 characters, change the "
31521
#~ "appropriate variable to min=6. The modification is outlined below."
31522
31523
#, no-wrap
31524
#~ msgid ""
31525
#~ "\n"
31526
#~ "password required pam_unix.so nullok obscure min=6 max=8 md5\n"
31527
#~ msgstr ""
31528
#~ "\n"
31529
#~ "password required pam_unix.so nullok obscure min=6 max=8 md5\n"
31530
31531
#~ msgid ""
31532
#~ "The <varname>max=8</varname> variable does not represent the maximum length "
31533
#~ "of a password. It only means that complexity requirements will not be "
31534
#~ "checked on passwords over 8 characters. You may want to look at the "
31535
#~ "<application>libpam-cracklib</application> package for additional password "
31536
#~ "entropy assistance."
31537
#~ msgstr ""
31538
#~ "The <varname>max=8</varname> variable does not represent the maximum length "
31539
#~ "of a password. It only means that complexity requirements will not be "
31540
#~ "checked on passwords over 8 characters. You may want to look at the "
31541
#~ "<application>libpam-cracklib</application> package for additional password "
31542
#~ "entropy assistance."
31543
31544
#~ msgid "sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username"
31545
#~ msgstr "sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username"
31546
31547
#~ msgid ""
31548
#~ "There are many ways to remotely administer a Linux server. This chapter will "
31549
#~ "cover one of the most popular <application>SSH</application> as well as "
31550
#~ "<application>eBox</application>, a web based administration framework."
31551
#~ msgstr ""
31552
#~ "There are many ways to remotely administer a Linux server. This chapter will "
31553
#~ "cover one of the most popular <application>SSH</application> as well as "
31554
#~ "<application>eBox</application>, a Web based administration framework."
31555
31556
#~ msgid "eBox"
31557
#~ msgstr "eBox"
31558
31559
#~ msgid ""
31560
#~ "The different <application>eBox</application> modules are split into "
31561
#~ "different packages, allowing you to only install those necessary. One way to "
31562
#~ "view the available packages is to enter the following from a terminal:"
31563
#~ msgstr ""
31564
#~ "The different <application>eBox</application> modules are split into "
31565
#~ "different packages, allowing you to only install those necessary. One way to "
31566
#~ "view the available packages is to enter the following from a terminal:"
31567
31568
#~ msgid "apt-cache rdepends ebox | uniq"
31569
#~ msgstr "apt-cache rdepends ebox | uniq"
31570
31571
#~ msgid ""
31572
#~ "To install the <application>ebox</application> package, which contains the "
31573
#~ "default modules, enter the following:"
31574
#~ msgstr ""
31575
#~ "To install the <application>ebox</application> package, which contains the "
31576
#~ "default modules, enter the following:"
31577
31578
#~ msgid "sudo apt-get install ebox"
31579
#~ msgstr "sudo apt-get install ebox"
31580
31581
#~ msgid ""
31582
#~ "During the installation you will be asked to supply a password for the ebox "
31583
#~ "user. After installing eBox the web interface can be accessed from: "
31584
#~ "<emphasis>https://yourserver/ebox</emphasis>."
31585
#~ msgstr ""
31586
#~ "During the installation you will be asked to supply a password for the ebox "
31587
#~ "user. After installing eBox the Web interface can be accessed from: "
31588
#~ "<emphasis>https://yourserver/ebox</emphasis>."
31589
31590
#~ msgid ""
31591
#~ "An important thing to remember when using <application>eBox</application> is "
31592
#~ "that when configuring most modules there is a <emphasis>Change</emphasis> "
31593
#~ "button that implements the new configuration. After clicking the Change "
31594
#~ "button most, but not all, modules will then need to be "
31595
#~ "<emphasis>Saved</emphasis>. To save the new configuration click on the "
31596
#~ "<quote>Save changes</quote> link in the top right hand corner."
31597
#~ msgstr ""
31598
#~ "An important thing to remember when using <application>eBox</application> is "
31599
#~ "that when configuring most modules there is a <emphasis>Change</emphasis> "
31600
#~ "button that implements the new configuration. After clicking the Change "
31601
#~ "button most, but not all, modules will then need to be "
31602
#~ "<emphasis>Saved</emphasis>. To save the new configuration click on the "
31603
#~ "<quote>Save changes</quote> link in the top right hand corner."
31604
31605
#~ msgid ""
31606
#~ "Once you make a change that requires a Save, the link will change from green "
31607
#~ "to red."
31608
#~ msgstr ""
31609
#~ "Once you make a change that requires a Save, the link will change from green "
31610
#~ "to red."
31611
31612
#~ msgid "eBox Modules"
31613
#~ msgstr "eBox Modules"
31614
31615
#~ msgid ""
31616
#~ "By default all eBox <emphasis>Modules</emphasis> are not enabled, and when a "
31617
#~ "new module is installed it will not be automatically enabled."
31618
#~ msgstr ""
31619
#~ "By default all eBox <emphasis>Modules</emphasis> are not enabled, and when a "
31620
#~ "new module is installed it will not be automatically enabled."
31621
31622
#~ msgid "Default Modules"
31623
#~ msgstr "Default Modules"
31624
31625
#~ msgid ""
31626
#~ "This section provides a quick summary of the default "
31627
#~ "<application>eBox</application> modules."
31628
#~ msgstr ""
31629
#~ "This section provides a quick summary of the default "
31630
#~ "<application>eBox</application> modules."
31631
31632
#~ msgid ""
31633
#~ "<emphasis>System:</emphasis> contains options allowing configuration of "
31634
#~ "general eBox items."
31635
#~ msgstr ""
31636
#~ "<emphasis>System:</emphasis> contains options allowing configuration of "
31637
#~ "general eBox items."
31638
31639
#~ msgid ""
31640
#~ "<emphasis>General:</emphasis> allows you to set the language, port number, "
31641
#~ "and contains a change password form."
31642
#~ msgstr ""
31643
#~ "<emphasis>General:</emphasis> allows you to set the language, port number, "
31644
#~ "and contains a change password form."
31645
31646
#~ msgid ""
31647
#~ "<emphasis>Disk Usage:</emphasis> displays a graph detailing information "
31648
#~ "about disk usage."
31649
#~ msgstr ""
31650
#~ "<emphasis>Disk Usage:</emphasis> displays a graph detailing information "
31651
#~ "about disk usage."
31652
31653
#~ msgid ""
31654
#~ "<emphasis>Backup:</emphasis> is used to backup "
31655
#~ "<application>eBox</application> configuration information, and the "
31656
#~ "<emphasis>Full Backup</emphasis> option allows you to save all eBox "
31657
#~ "information not included in the <emphasis>Configuration</emphasis> option "
31658
#~ "such as log files."
31659
#~ msgstr ""
31660
#~ "<emphasis>Backup:</emphasis> is used to backup "
31661
#~ "<application>eBox</application> configuration information, and the "
31662
#~ "<emphasis>Full Backup</emphasis> option allows you to save all eBox "
31663
#~ "information not included in the <emphasis>Configuration</emphasis> option "
31664
#~ "such as log files."
31665
31666
#~ msgid ""
31667
#~ "<emphasis>Logs:</emphasis> allows <application>eBox</application> logs to be "
31668
#~ "queried depending on the purge time configured."
31669
#~ msgstr ""
31670
#~ "<emphasis>Logs:</emphasis> allows <application>eBox</application> logs to be "
31671
#~ "queried depending on the purge time configured."
31672
31673
#~ msgid ""
31674
#~ "<emphasis>Events:</emphasis> this module has the ability to send alerts "
31675
#~ "through rss, jabber, and log file."
31676
#~ msgstr ""
31677
#~ "<emphasis>Events:</emphasis> this module has the ability to send alerts "
31678
#~ "through rss, jabber, and log file."
31679
31680
#~ msgid "Available Events:"
31681
#~ msgstr "Available Events:"
31682
31683
#~ msgid ""
31684
#~ "<emphasis>Free Storage Space:</emphasis> will send alert if free disk space "
31685
#~ "drops below a configured percentage, 10% by default."
31686
#~ msgstr ""
31687
#~ "<emphasis>Free Storage Space:</emphasis> will send alert if free disk space "
31688
#~ "drops below a configured percentage, 10% by default."
31689
31690
#~ msgid ""
31691
#~ "<emphasis>RAID:</emphasis> will monitor the RAID system and send alerts if "
31692
#~ "any issues arise."
31693
#~ msgstr ""
31694
#~ "<emphasis>RAID:</emphasis> will monitor the RAID system and send alerts if "
31695
#~ "any issues arise."
31696
31697
#~ msgid ""
31698
#~ "<emphasis>Service:</emphasis> sends alerts if a service restarts multiple "
31699
#~ "times in a short time period."
31700
#~ msgstr ""
31701
#~ "<emphasis>Service:</emphasis> sends alerts if a service restarts multiple "
31702
#~ "times in a short time period."
31703
31704
#~ msgid ""
31705
#~ "<emphasis>State:</emphasis> alerts on the state of "
31706
#~ "<application>eBox</application>, either up or down."
31707
#~ msgstr ""
31708
#~ "<emphasis>State:</emphasis> alerts on the state of "
31709
#~ "<application>eBox</application>, either up or down."
31710
31711
#~ msgid "Dispatchers:"
31712
#~ msgstr "Dispatchers:"
31713
31714
#~ msgid ""
31715
#~ "<emphasis>Log:</emphasis> this dispatcher will send event messages to the "
31716
#~ "<application>eBox</application> log file "
31717
#~ "<filename>/var/log/ebox/ebox.log</filename>."
31718
#~ msgstr ""
31719
#~ "<emphasis>Log:</emphasis> this dispatcher will send event messages to the "
31720
#~ "<application>eBox</application> log file "
31721
#~ "<filename>/var/log/ebox/ebox.log</filename>."
31722
31723
#~ msgid ""
31724
#~ "<emphasis>Jabber:</emphasis> before enabling this dispatcher you must first "
31725
#~ "configure it by clicking on the <quote>Configure</quote> icon."
31726
#~ msgstr ""
31727
#~ "<emphasis>Jabber:</emphasis> before enabling this dispatcher you must first "
31728
#~ "configure it by clicking on the <quote>Configure</quote> icon."
31729
31730
#~ msgid ""
31731
#~ "There are several ways to automate the Ubuntu installation process, for "
31732
#~ "example using preseeds, kickstart, etc. Refer to the <ulink "
31733
#~ "url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
31734
#~ "Installation Guide</ulink> for details."
31735
#~ msgstr ""
31736
#~ "There are several ways to automate the Ubuntu installation process, for "
31737
#~ "example using preseeds, kickstart, etc. Refer to the <ulink "
31738
#~ "url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
31739
#~ "Installation Guide</ulink> for details."
31740
31741
#~ msgid ""
31742
#~ "As this example is based on <application>KVM</application> and Ubuntu 10.04 "
31743
#~ "LTS (Lucid Lynx), and we are likely to rebuild the same virtual machine "
31744
#~ "multiple time, we'll invoke vmbuilder with the following first parameters:"
31745
#~ msgstr ""
31746
#~ "As this example is based on <application>KVM</application> and Ubuntu 10.04 "
31747
#~ "LTS (Lucid Lynx), and we are likely to rebuild the same virtual machine "
31748
#~ "multiple time, we'll invoke vmbuilder with the following first parameters:"
31749
31750
#~ msgid ""
31751
#~ "sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
31752
#~ "libvirt qemu:///system"
31753
#~ msgstr ""
31754
#~ "sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
31755
#~ "libvirt qemu:///system"
31756
31757
#~ msgid ""
31758
#~ "sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
31759
#~ "libvirt qemu:///system --ip 192.168.0.100"
31760
#~ msgstr ""
31761
#~ "sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
31762
#~ "libvirt qemu:///system --ip 192.168.0.100"
31763
31764
#~ msgid ""
31765
#~ "sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
31766
#~ "-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition"
31767
#~ msgstr ""
31768
#~ "sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
31769
#~ "-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition"
31770
31771
#, no-wrap
31772
#~ msgid ""
31773
#~ "\n"
31774
#~ "deb http://archive.ubuntu.com/ubuntu lucid main restricted universe "
31775
#~ "multiverse \n"
31776
#~ "/deb-i386 http://archive.ubuntu.com/ubuntu lucid main restricted universe "
31777
#~ "multiverse\n"
31778
#~ "\n"
31779
#~ "deb http://archive.ubuntu.com/ubuntu lucid-updates main restricted universe "
31780
#~ "multiverse \n"
31781
#~ "/deb-i386 http://archive.ubuntu.com/ubuntu lucid-updates main restricted "
31782
#~ "universe multiverse \n"
31783
#~ "\n"
31784
#~ "deb http://archive.ubuntu.com/ubuntu/ lucid-backports main restricted "
31785
#~ "universe multiverse \n"
31786
#~ "/deb-i386 http://archive.ubuntu.com/ubuntu lucid-backports main restricted "
31787
#~ "universe multiverse \n"
31788
#~ "\n"
31789
#~ "deb http://security.ubuntu.com/ubuntu lucid-security main restricted "
31790
#~ "universe multiverse \n"
31791
#~ "/deb-i386 http://security.ubuntu.com/ubuntu lucid-security main restricted "
31792
#~ "universe multiverse \n"
31793
#~ "\n"
31794
#~ "deb http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
31795
#~ "restricted/debian-installer universe/debian-installer multiverse/debian-"
31796
#~ "installer \n"
31797
#~ "/deb-i386 http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
31798
#~ "restricted/debian-installer universe/debian-installer multiverse/debian-"
31799
#~ "installer \n"
31800
#~ msgstr ""
31801
#~ "\n"
31802
#~ "deb http://archive.ubuntu.com/ubuntu lucid main restricted universe "
31803
#~ "multiverse \n"
31804
#~ "/deb-i386 http://archive.ubuntu.com/ubuntu lucid main restricted universe "
31805
#~ "multiverse\n"
31806
#~ "\n"
31807
#~ "deb http://archive.ubuntu.com/ubuntu lucid-updates main restricted universe "
31808
#~ "multiverse \n"
31809
#~ "/deb-i386 http://archive.ubuntu.com/ubuntu lucid-updates main restricted "
31810
#~ "universe multiverse \n"
31811
#~ "\n"
31812
#~ "deb http://archive.ubuntu.com/ubuntu/ lucid-backports main restricted "
31813
#~ "universe multiverse \n"
31814
#~ "/deb-i386 http://archive.ubuntu.com/ubuntu lucid-backports main restricted "
31815
#~ "universe multiverse \n"
31816
#~ "\n"
31817
#~ "deb http://security.ubuntu.com/ubuntu lucid-security main restricted "
31818
#~ "universe multiverse \n"
31819
#~ "/deb-i386 http://security.ubuntu.com/ubuntu lucid-security main restricted "
31820
#~ "universe multiverse \n"
31821
#~ "\n"
31822
#~ "deb http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
31823
#~ "restricted/debian-installer universe/debian-installer multiverse/debian-"
31824
#~ "installer \n"
31825
#~ "/deb-i386 http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
31826
#~ "restricted/debian-installer universe/debian-installer multiverse/debian-"
31827
#~ "installer \n"
31828
31829
#~ msgid "OpenNebula"
31830
#~ msgstr "OpenNebula"
31831
31832
#~ msgid ""
31833
#~ "<application>OpenNebula</application> allows virtual machines to be placed "
31834
#~ "and re-placed dynamically on a pool of physical resources. This allows a "
31835
#~ "virtual machine to be hosted from any location available."
31836
#~ msgstr ""
31837
#~ "<application>OpenNebula</application> allows virtual machines to be placed "
31838
#~ "and re-placed dynamically on a pool of physical resources. This allows a "
31839
#~ "virtual machine to be hosted from any location available."
31840
31841
#~ msgid ""
31842
#~ "This section will detail configuring an OpenNebula cluster using three "
31843
#~ "machines: one <emphasis>Front-End</emphasis> host, and two <emphasis>Compute "
31844
#~ "Nodes</emphasis> used to run the virtual machines. The Compute Nodes will "
31845
#~ "also need a bridge configured to allow the virtual machines access to the "
31846
#~ "local network. For details see <xref linkend=\"bridging\"/>."
31847
#~ msgstr ""
31848
#~ "This section will detail configuring an OpenNebula cluster using three "
31849
#~ "machines: one <emphasis>Front-End</emphasis> host, and two <emphasis>Compute "
31850
#~ "Nodes</emphasis> used to run the virtual machines. The Compute Nodes will "
31851
#~ "also need a bridge configured to allow the virtual machines access to the "
31852
#~ "local network. For details see <xref linkend=\"bridging\"/>."
31853
31854
#~ msgid "First, from a terminal on the Front-End enter:"
31855
#~ msgstr "First, from a terminal on the Front-End enter:"
31856
31857
#~ msgid "sudo apt-get install opennebula"
31858
#~ msgstr "sudo apt-get install opennebula"
31859
31860
#~ msgid "On each Compute Node install:"
31861
#~ msgstr "On each Compute Node install:"
31862
31863
#~ msgid "sudo apt-get install opennebula-node"
31864
#~ msgstr "sudo apt-get install opennebula-node"
31865
31866
#~ msgid ""
31867
#~ "In order to copy SSH keys, the <emphasis>oneadmin</emphasis> user will need "
31868
#~ "to have a password. On each machine execute:"
31869
#~ msgstr ""
31870
#~ "In order to copy SSH keys, the <emphasis>oneadmin</emphasis> user will need "
31871
#~ "to have a password. On each machine execute:"
31872
31873
#~ msgid "sudo passwd oneadmin"
31874
#~ msgstr "sudo passwd oneadmin"
31875
31876
#~ msgid ""
31877
#~ "Next, copy the <emphasis>oneadmin</emphasis> user's SSH key to the Compute "
31878
#~ "Nodes, and to the Front-End's <filename>authorized_keys</filename> file:"
31879
#~ msgstr ""
31880
#~ "Next, copy the <emphasis>oneadmin</emphasis> user's SSH key to the Compute "
31881
#~ "Nodes, and to the Front-End's <filename>authorized_keys</filename> file:"
31882
31883
#~ msgid ""
31884
#~ "sudo scp /var/lib/one/.ssh/id_rsa.pub "
31885
#~ "oneadmin@node01:/var/lib/one/.ssh/authorized_keys"
31886
#~ msgstr ""
31887
#~ "sudo scp /var/lib/one/.ssh/id_rsa.pub "
31888
#~ "oneadmin@node01:/var/lib/one/.ssh/authorized_keys"
31889
31890
#~ msgid ""
31891
#~ "sudo scp /var/lib/one/.ssh/id_rsa.pub "
31892
#~ "oneadmin@node02:/var/lib/one/.ssh/authorized_keys"
31893
#~ msgstr ""
31894
#~ "sudo scp /var/lib/one/.ssh/id_rsa.pub "
31895
#~ "oneadmin@node02:/var/lib/one/.ssh/authorized_keys"
31896
31897
#~ msgid ""
31898
#~ "sudo sh -c \"cat /var/lib/one/.ssh/id_rsa.pub >> "
31899
#~ "/var/lib/one/.ssh/authorized_keys\""
31900
#~ msgstr ""
31901
#~ "sudo sh -c \"cat /var/lib/one/.ssh/id_rsa.pub >> "
31902
#~ "/var/lib/one/.ssh/authorized_keys\""
31903
31904
#~ msgid ""
31905
#~ "The SSH key for the Compute Nodes needs to be added to the "
31906
#~ "<filename>/etc/ssh/ssh_known_hosts</filename> file on the Front-End host. To "
31907
#~ "accomplish this <application>ssh</application> to each Compute Node as a "
31908
#~ "user other than <emphasis>oneadmin</emphasis>. Then exit from the SSH "
31909
#~ "session, and execute the following to copy the SSH key from "
31910
#~ "<filename>~/.ssh/known_hosts</filename> to "
31911
#~ "<filename>/etc/ssh/ssh_known_hosts</filename>:"
31912
#~ msgstr ""
31913
#~ "The SSH key for the Compute Nodes needs to be added to the "
31914
#~ "<filename>/etc/ssh/ssh_known_hosts</filename> file on the Front-End host. To "
31915
#~ "accomplish this <application>ssh</application> to each Compute Node as a "
31916
#~ "user other than <emphasis>oneadmin</emphasis>. Then exit from the SSH "
31917
#~ "session, and execute the following to copy the SSH key from "
31918
#~ "<filename>~/.ssh/known_hosts</filename> to "
31919
#~ "<filename>/etc/ssh/ssh_known_hosts</filename>:"
31920
31921
#~ msgid ""
31922
#~ "sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node01 1>> "
31923
#~ "/etc/ssh/ssh_known_hosts\""
31924
#~ msgstr ""
31925
#~ "sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node01 1>> "
31926
#~ "/etc/ssh/ssh_known_hosts\""
31927
31928
#~ msgid ""
31929
#~ "sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node02 1>> "
31930
#~ "/etc/ssh/ssh_known_hosts\""
31931
#~ msgstr ""
31932
#~ "sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node02 1>> "
31933
#~ "/etc/ssh/ssh_known_hosts\""
31934
31935
#~ msgid ""
31936
#~ "Replace <emphasis>node01</emphasis> and <emphasis>node02</emphasis> with the "
31937
#~ "appropriate host names."
31938
#~ msgstr ""
31939
#~ "Replace <emphasis>node01</emphasis> and <emphasis>node02</emphasis> with the "
31940
#~ "appropriate host names."
31941
31942
#~ msgid ""
31943
#~ "This allows the <emphasis>oneadmin</emphasis> to use "
31944
#~ "<application>scp</application>, without a password or manual intervention, "
31945
#~ "to deploy an image to the Compute Nodes."
31946
#~ msgstr ""
31947
#~ "This allows the <emphasis>oneadmin</emphasis> to use "
31948
#~ "<application>scp</application>, without a password or manual intervention, "
31949
#~ "to deploy an image to the Compute Nodes."
31950
31951
#~ msgid ""
31952
#~ "On the Front-End create a directory to store the VM images, giving the "
31953
#~ "<emphasis>oneadmin</emphasis> user access to the directory:"
31954
#~ msgstr ""
31955
#~ "On the Front-End create a directory to store the VM images, giving the "
31956
#~ "<emphasis>oneadmin</emphasis> user access to the directory:"
31957
31958
#~ msgid "sudo mkdir /var/lib/one/images"
31959
#~ msgstr "sudo mkdir /var/lib/one/images"
31960
31961
#~ msgid "sudo chown oneadmin /var/lib/one/images/"
31962
#~ msgstr "sudo chown oneadmin /var/lib/one/images/"
31963
31964
#~ msgid ""
31965
#~ "Finally, copy a virtual machine disk file into "
31966
#~ "<filename>/var/lib/one/images</filename>. You can create an Ubuntu virtual "
31967
#~ "machine using <application>vmbuilder</application>, see <xref linkend=\"jeos-"
31968
#~ "and-vmbuilder\"/> for details."
31969
#~ msgstr ""
31970
#~ "Finally, copy a virtual machine disk file into "
31971
#~ "<filename>/var/lib/one/images</filename>. You can create an Ubuntu virtual "
31972
#~ "machine using <application>vmbuilder</application>, see <xref linkend=\"jeos-"
31973
#~ "and-vmbuilder\"/> for details."
31974
31975
#~ msgid ""
31976
#~ "The <emphasis>OpenNebula Cluster</emphasis> is now ready to be configured, "
31977
#~ "and virtual machines added to the cluster."
31978
#~ msgstr ""
31979
#~ "The <emphasis>OpenNebula Cluster</emphasis> is now ready to be configured, "
31980
#~ "and virtual machines added to the cluster."
31981
31982
#~ msgid "From a terminal prompt enter:"
31983
#~ msgstr "From a terminal prompt enter:"
31984
31985
#~ msgid "onehost create node01 im_kvm vmm_kvm tm_ssh"
31986
#~ msgstr "onehost create node01 im_kvm vmm_kvm tm_ssh"
31987
31988
#~ msgid "onehost create node02 im_kvm vmm_kvm tm_ssh"
31989
#~ msgstr "onehost create node02 im_kvm vmm_kvm tm_ssh"
31990
31991
#~ msgid ""
31992
#~ "Next, create a <emphasis>Virtual Network</emphasis> template file named "
31993
#~ "<filename>vnet01.template</filename>:"
31994
#~ msgstr ""
31995
#~ "Next, create a <emphasis>Virtual Network</emphasis> template file named "
31996
#~ "<filename>vnet01.template</filename>:"
31997
31998
#, no-wrap
31999
#~ msgid ""
32000
#~ "\n"
32001
#~ "NAME = \"LAN\"\n"
32002
#~ "TYPE = RANGED\n"
32003
#~ "BRIDGE = br0\n"
32004
#~ "NETWORK_SIZE = C\n"
32005
#~ "NETWORK_ADDRESS = 192.168.0.0\n"
32006
#~ msgstr ""
32007
#~ "\n"
32008
#~ "NAME = \"LAN\"\n"
32009
#~ "TYPE = RANGED\n"
32010
#~ "BRIDGE = br0\n"
32011
#~ "NETWORK_SIZE = C\n"
32012
#~ "NETWORK_ADDRESS = 192.168.0.0\n"
32013
32014
#~ msgid ""
32015
#~ "Be sure to change <emphasis>192.168.0.0</emphasis> to your local network."
32016
#~ msgstr ""
32017
#~ "Be sure to change <emphasis>192.168.0.0</emphasis> to your local network."
32018
32019
#~ msgid ""
32020
#~ "Using the <application>onevnet</application> utility, add the virtual "
32021
#~ "network to OpenNebula:"
32022
#~ msgstr ""
32023
#~ "Using the <application>onevnet</application> utility, add the virtual "
32024
#~ "network to OpenNebula:"
32025
32026
#~ msgid "onevnet create vnet01.template"
32027
#~ msgstr "onevnet create vnet01.template"
32028
32029
#~ msgid ""
32030
#~ "Now create a <emphasis>VM Template</emphasis> file named "
32031
#~ "<filename>vm01.template</filename>:"
32032
#~ msgstr ""
32033
#~ "Now create a <emphasis>VM Template</emphasis> file named "
32034
#~ "<filename>vm01.template</filename>:"
32035
32036
#, no-wrap
32037
#~ msgid ""
32038
#~ "\n"
32039
#~ "NAME = vm01\n"
32040
#~ "CPU = 0.5\n"
32041
#~ "MEMORY = 512\n"
32042
#~ "\n"
32043
#~ "OS = [ BOOT = hd ]\n"
32044
#~ "\n"
32045
#~ "DISK = [\n"
32046
#~ " source = \"/var/lib/one/images/vm01.qcow2\",\n"
32047
#~ " target = \"hda\",\n"
32048
#~ " readonly = \"no\" ]\n"
32049
#~ "\n"
32050
#~ "NIC = [ NETWORK=\"LAN\" ]\n"
32051
#~ "\n"
32052
#~ "GRAPHICS = [type=\"vnc\",listen=\"127.0.0.1\",port=\"-1\"]\n"
32053
#~ msgstr ""
32054
#~ "\n"
32055
#~ "NAME = vm01\n"
32056
#~ "CPU = 0.5\n"
32057
#~ "MEMORY = 512\n"
32058
#~ "\n"
32059
#~ "OS = [ BOOT = hd ]\n"
32060
#~ "\n"
32061
#~ "DISK = [\n"
32062
#~ " source = \"/var/lib/one/images/vm01.qcow2\",\n"
32063
#~ " target = \"hda\",\n"
32064
#~ " readonly = \"no\" ]\n"
32065
#~ "\n"
32066
#~ "NIC = [ NETWORK=\"LAN\" ]\n"
32067
#~ "\n"
32068
#~ "GRAPHICS = [type=\"vnc\",listen=\"127.0.0.1\",port=\"-1\"]\n"
32069
32070
#~ msgid "Start the virtual machine using <application>onevm</application>:"
32071
#~ msgstr "Start the virtual machine using <application>onevm</application>:"
32072
32073
#~ msgid "onevm submit vm01.template"
32074
#~ msgstr "onevm submit vm01.template"
32075
32076
#~ msgid ""
32077
#~ "Use the <application>onevm list</application> option to view information "
32078
#~ "about virtual machines. Also, the <application>onevm show vm01</application> "
32079
#~ "option will display more details about a specific virtual machine."
32080
#~ msgstr ""
32081
#~ "Use the <application>onevm list</application> option to view information "
32082
#~ "about virtual machines. Also, the <application>onevm show vm01</application> "
32083
#~ "option will display more details about a specific virtual machine."
32084
32085
#~ msgid ""
32086
#~ "See the <ulink "
32087
#~ "url=\"http://www.opennebula.org/doku.php?id=start\">OpenNebula website</ulink"
32088
#~ "> for more information."
32089
#~ msgstr ""
32090
#~ "See the <ulink "
32091
#~ "url=\"http://www.opennebula.org/doku.php?id=start\">OpenNebula website</ulink"
32092
#~ "> for more information."
32093
32094
#~ msgid ""
32095
#~ "You can also find help in the <emphasis>#ubuntu-virt</emphasis> and "
32096
#~ "<emphasis>#ubuntu-server</emphasis> IRC channels on <ulink "
32097
#~ "url=\"http://freenode.net\">Freenode</ulink>."
32098
#~ msgstr ""
32099
#~ "You can also find help in the <emphasis>#ubuntu-virt</emphasis> and "
32100
#~ "<emphasis>#ubuntu-server</emphasis> IRC channels on <ulink "
32101
#~ "url=\"http://freenode.net\">Freenode</ulink>."
32102
32103
#~ msgid "2008"
32104
#~ msgstr "2008"
32105
32106
#~ msgid ""
32107
#~ "This chapter provides an overview of security related topics as they pertain "
32108
#~ "to Ubuntu 10.04 LTS Server Edition, and outlines simple measures you may use "
32109
#~ "to protect your server and network from any number of potential security "
32110
#~ "threats."
32111
#~ msgstr ""
32112
#~ "This chapter provides an overview of security related topics as they pertain "
32113
#~ "to Ubuntu 10.04 LTS Server Edition, and outlines simple measures you may use "
32114
#~ "to protect your server and network from any number of potential security "
32115
#~ "threats."
32116
32117
#~ msgid ""
32118
#~ "There should now be a new file, "
32119
#~ "<filename>/etc/ssl/newcerts/01.pem</filename>, containing the same output. "
32120
#~ "Copy and paste everything between the <emphasis>-----BEGIN CERTIFICATE-----"
32121
#~ "</emphasis> and <emphasis>----END CERTIFICATE-----</emphasis> lines to a "
32122
#~ "file named after the hostname of the server where the certificate will be "
32123
#~ "installed. For example <filename>mail.example.com.crt</filename>, is a nice "
32124
#~ "descriptive name."
32125
#~ msgstr ""
32126
#~ "There should now be a new file, "
32127
#~ "<filename>/etc/ssl/newcerts/01.pem</filename>, containing the same output. "
32128
#~ "Copy and paste everything between the <emphasis>-----BEGIN CERTIFICATE-----"
32129
#~ "</emphasis> and <emphasis>----END CERTIFICATE-----</emphasis> lines to a "
32130
#~ "file named after the hostname of the server where the certificate will be "
32131
#~ "installed. For example <filename>mail.example.com.crt</filename>, is a nice "
32132
#~ "descriptive name."
32133
32134
#~ msgid ""
32135
#~ "<application>eBox</application> is a web framework used to manage server "
32136
#~ "application configuration. The modular design of eBox allows you to pick and "
32137
#~ "choose which services you want to configure using eBox."
32138
#~ msgstr ""
32139
#~ "<application>eBox</application> is a web framework used to manage server "
32140
#~ "application configuration. The modular design of eBox allows you to pick and "
32141
#~ "choose which services you want to configure using eBox."
32142
32143
#~ msgid ""
32144
#~ "To enable a disabled module click on the <emphasis>Module status</emphasis> "
32145
#~ "link in the left hand menu. Then <emphasis role=\"italic\">check</emphasis> "
32146
#~ "which modules you would like to enable and click the <quote>Save</quote> "
32147
#~ "link."
32148
#~ msgstr ""
32149
#~ "To enable a disabled module click on the <emphasis>Module status</emphasis> "
32150
#~ "link in the left hand menu. Then <emphasis role=\"italic\">check</emphasis> "
32151
#~ "which modules you would like to enable and click the <quote>Save</quote> "
32152
#~ "link."
32153
32154
#~ msgid ""
32155
#~ "<emphasis>Halt/Reboot:</emphasis> will shutdown the system or reboot it."
32156
#~ msgstr ""
32157
#~ "<emphasis>Halt/Reboot:</emphasis> will shutdown the system or reboot it."
32158
32159
#~ msgid ""
32160
#~ "<emphasis>Bug Report:</emphasis> creates a file containing details helpful "
32161
#~ "when reporting bugs to the eBox developers."
32162
#~ msgstr ""
32163
#~ "<emphasis>Bug Report:</emphasis> creates a file containing details helpful "
32164
#~ "when reporting bugs to the eBox developers."
32165
32166
#~ msgid ""
32167
#~ "<emphasis>Log Observer:</emphasis> sends an alert when a configured logger "
32168
#~ "has logged something."
32169
#~ msgstr ""
32170
#~ "<emphasis>Log Observer:</emphasis> sends an alert when a configured logger "
32171
#~ "has logged something."
32172
32173
#~ msgid ""
32174
#~ "<emphasis>RSS:</emphasis> once this dispatcher is configured you can "
32175
#~ "subscribe to the link in order to view event alerts."
32176
#~ msgstr ""
32177
#~ "<emphasis>RSS:</emphasis> once this dispatcher is configured you can "
32178
#~ "subscribe to the link in order to view event alerts."
32179
32180
#~ msgid "Additional Modules"
32181
#~ msgstr "Additional Modules"
32182
32183
#~ msgid ""
32184
#~ "Here is a quick description of other available "
32185
#~ "<application>eBox</application> modules:"
32186
#~ msgstr ""
32187
#~ "Here is a quick description of other available "
32188
#~ "<application>eBox</application> modules:"
32189
32190
#~ msgid ""
32191
#~ "<emphasis>Network:</emphasis> allows configuration of the server's network "
32192
#~ "options through eBox."
32193
#~ msgstr ""
32194
#~ "<emphasis>Network:</emphasis> allows configuration of the server's network "
32195
#~ "options through eBox."
32196
32197
#~ msgid ""
32198
#~ "<emphasis>Firewall:</emphasis> configures firewall options for the eBox host."
32199
#~ msgstr ""
32200
#~ "<emphasis>Firewall:</emphasis> configures firewall options for the eBox host."
32201
32202
#~ msgid ""
32203
#~ "<emphasis>UsersandGroups:</emphasis> this module will manage users and "
32204
#~ "groups contained in an <application>OpenLDAP</application> LDAP directory."
32205
#~ msgstr ""
32206
#~ "<emphasis>UsersandGroups:</emphasis> this module will manage users and "
32207
#~ "groups contained in an <application>OpenLDAP</application> LDAP directory."
32208
32209
#~ msgid ""
32210
#~ "<emphasis>DHCP:</emphasis> provides an interface for configuring a DHCP "
32211
#~ "server."
32212
#~ msgstr ""
32213
#~ "<emphasis>DHCP:</emphasis> provides an interface for configuring a DHCP "
32214
#~ "server."
32215
32216
#~ msgid ""
32217
#~ "<emphasis>DNS:</emphasis> provides <application>BIND9</application> DNS "
32218
#~ "server configuration options."
32219
#~ msgstr ""
32220
#~ "<emphasis>DNS:</emphasis> provides <application>BIND9</application> DNS "
32221
#~ "server configuration options."
32222
32223
#~ msgid ""
32224
#~ "<emphasis>Objects:</emphasis> allow configuration of eBox <emphasis>Network "
32225
#~ "Objects</emphasis>, which allow you to assign a name to an IP address or "
32226
#~ "group of IPs."
32227
#~ msgstr ""
32228
#~ "<emphasis>Objects:</emphasis> allow configuration of eBox <emphasis>Network "
32229
#~ "Objects</emphasis>, which allow you to assign a name to an IP address or "
32230
#~ "group of IPs."
32231
32232
#~ msgid ""
32233
#~ "<emphasis>Services:</emphasis> displays configuration information for "
32234
#~ "services that are available to the network."
32235
#~ msgstr ""
32236
#~ "<emphasis>Services:</emphasis> displays configuration information for "
32237
#~ "services that are available to the network."
32238
32239
#~ msgid ""
32240
#~ "<emphasis>Squid:</emphasis> configuration options for the "
32241
#~ "<application>Squid</application> proxy server."
32242
#~ msgstr ""
32243
#~ "<emphasis>Squid:</emphasis> configuration options for the "
32244
#~ "<application>Squid</application> proxy server."
32245
32246
#~ msgid ""
32247
#~ "<emphasis>CA:</emphasis> configures a Certificate Authority for the server."
32248
#~ msgstr ""
32249
#~ "<emphasis>CA:</emphasis> configures a Certificate Authority for the server."
32250
32251
#~ msgid "<emphasis>NTP:</emphasis> set Network Time Protocol options."
32252
#~ msgstr "<emphasis>NTP:</emphasis> set Network Time Protocol options."
32253
32254
#~ msgid "<emphasis>Printers:</emphasis> allows the configuration of printers."
32255
#~ msgstr "<emphasis>Printers:</emphasis> allows the configuration of printers."
32256
32257
#~ msgid "<emphasis>Samba:</emphasis> configuration options for Samba."
32258
#~ msgstr "<emphasis>Samba:</emphasis> configuration options for Samba."
32259
32260
#~ msgid ""
32261
#~ "<emphasis>OpenVPN:</emphasis> setup options for OpenVPN Virtual Private "
32262
#~ "Network application."
32263
#~ msgstr ""
32264
#~ "<emphasis>OpenVPN:</emphasis> setup options for OpenVPN Virtual Private "
32265
#~ "Network application."
32266
32267
#, no-wrap
32268
#~ msgid ""
32269
#~ "\n"
32270
#~ "Unattended-Upgrade::Allowed-Origins {\n"
32271
#~ " \"Ubuntu lucid-security\";\n"
32272
#~ "// \"Ubuntu lucid-updates\";\n"
32273
#~ "};\n"
32274
#~ msgstr ""
32275
#~ "\n"
32276
#~ "Unattended-Upgrade::Allowed-Origins {\n"
32277
#~ " \"Ubuntu lucid-security\";\n"
32278
#~ "// \"Ubuntu lucid-updates\";\n"
32279
#~ "};\n"
32280
32281
#, no-wrap
32282
#~ msgid ""
32283
#~ "\n"
32284
#~ "# no more prompting for CD-ROM please\n"
32285
#~ "# deb cdrom:[Ubuntu 10.04_Lucid_Lynx - Release i386 (20070419.1)]/ lucid "
32286
#~ "main restricted\n"
32287
#~ msgstr ""
32288
#~ "\n"
32289
#~ "# no more prompting for CD-ROM please\n"
32290
#~ "# deb cdrom:[Ubuntu 10.04_Lucid_Lynx - Release i386 (20070419.1)]/ lucid "
32291
#~ "main restricted\n"
32292
32293
#, no-wrap
32294
#~ msgid ""
32295
#~ "\n"
32296
#~ "deb http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
32297
#~ "deb-src http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
32298
#~ "\n"
32299
#~ "deb http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
32300
#~ "deb-src http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
32301
#~ "deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
32302
#~ "deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
32303
#~ "\n"
32304
#~ "deb http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
32305
#~ "deb-src http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
32306
#~ "deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
32307
#~ "deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
32308
#~ "\n"
32309
#~ "deb http://security.ubuntu.com/ubuntu lucid-security universe\n"
32310
#~ "deb-src http://security.ubuntu.com/ubuntu lucid-security universe\n"
32311
#~ "deb http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
32312
#~ "deb-src http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
32313
#~ msgstr ""
32314
#~ "\n"
32315
#~ "deb http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
32316
#~ "deb-src http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
32317
#~ "\n"
32318
#~ "deb http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
32319
#~ "deb-src http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
32320
#~ "deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
32321
#~ "deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
32322
#~ "\n"
32323
#~ "deb http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
32324
#~ "deb-src http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
32325
#~ "deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
32326
#~ "deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
32327
#~ "\n"
32328
#~ "deb http://security.ubuntu.com/ubuntu lucid-security universe\n"
32329
#~ "deb-src http://security.ubuntu.com/ubuntu lucid-security universe\n"
32330
#~ "deb http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
32331
#~ "deb-src http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
32332
32333
#~ msgid ""
32334
#~ "The <ulink "
32335
#~ "url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/interfaces.5.html\">i"
32336
#~ "nterfaces man page</ulink> has details on more options for "
32337
#~ "<filename>/etc/network/interfaces</filename>."
32338
#~ msgstr ""
32339
#~ "The <ulink "
32340
#~ "url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/interfaces.5.html\">i"
32341
#~ "nterfaces man page</ulink> has details on more options for "
32342
#~ "<filename>/etc/network/interfaces</filename>."
32343
32344
#~ msgid ""
32345
#~ "Adding additional <emphasis>schemas</emphasis> to "
32346
#~ "<application>slapd</application> requires the schema to be converted to LDIF "
32347
#~ "format. The <filename role=\"directory\">/etc/ldap/schema</filename> "
32348
#~ "directory contains some schema files already converted to LDIF format as "
32349
#~ "demonstrated in the previous section. Fortunately, the "
32350
#~ "<application>slapd</application> program can be used to automate the "
32351
#~ "conversion. The following example will add the "
32352
#~ "<emphasis>dyngoup.schema</emphasis>:"
32353
#~ msgstr ""
32354
#~ "Adding additional <emphasis>schemas</emphasis> to "
32355
#~ "<application>slapd</application> requires the schema to be converted to LDIF "
32356
#~ "format. The <filename role=\"directory\">/etc/ldap/schema</filename> "
32357
#~ "directory contains some schema files already converted to LDIF format as "
32358
#~ "demonstrated in the previous section. Fortunately, the "
32359
#~ "<application>slapd</application> program can be used to automate the "
32360
#~ "conversion. The following example will add the "
32361
#~ "<emphasis>dyngoup.schema</emphasis>:"
32362
32363
#~ msgid ""
32364
#~ "To view the Access Control List (ACL), use the "
32365
#~ "<application>ldapsearch</application> utility:"
32366
#~ msgstr ""
32367
#~ "To view the Access Control List (ACL), use the "
32368
#~ "<application>ldapsearch</application> utility:"
32369
32370
#~ msgid ""
32371
#~ "ldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase=hdb "
32372
#~ "olcAccess"
32373
#~ msgstr ""
32374
#~ "ldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase=hdb "
32375
#~ "olcAccess"
32376
32377
#, no-wrap
32378
#~ msgid ""
32379
#~ "Enter LDAP Password: \n"
32380
#~ "dn: olcDatabase={1}hdb,cn=config\n"
32381
#~ "olcAccess: {0}to attrs=userPassword,shadowLastChange by "
32382
#~ "dn=\"cn=admin,dc=exampl\n"
32383
#~ " e,dc=com\" write by anonymous auth by self write by * none\n"
32384
#~ "olcAccess: {1}to dn.base=\"\" by * read\n"
32385
#~ "olcAccess: {2}to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
32386
#~ msgstr ""
32387
#~ "Enter LDAP Password: \n"
32388
#~ "dn: olcDatabase={1}hdb,cn=config\n"
32389
#~ "olcAccess: {0}to attrs=userPassword,shadowLastChange by "
32390
#~ "dn=\"cn=admin,dc=exampl\n"
32391
#~ " e,dc=com\" write by anonymous auth by self write by * none\n"
32392
#~ "olcAccess: {1}to dn.base=\"\" by * read\n"
32393
#~ "olcAccess: {2}to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
32394
32395
#~ msgid ""
32396
#~ "sudo cp /etc/ldapscripts/ldapadduser.template.sample "
32397
#~ "/etc/ldapscripts/ldapadduser.template"
32398
#~ msgstr ""
32399
#~ "sudo cp /etc/ldapscripts/ldapadduser.template.sample "
32400
#~ "/etc/ldapscripts/ldapadduser.template"
32401
32402
#~ msgid ""
32403
#~ "Notice the <emphasis><ask></emphasis> option used for the "
32404
#~ "<emphasis>cn</emphasis> value. Using <ask> will configure "
32405
#~ "<application>ldapadduser</application> to prompt you for the attribute value "
32406
#~ "during user creation."
32407
#~ msgstr ""
32408
#~ "Notice the <emphasis><ask></emphasis> option used for the "
32409
#~ "<emphasis>cn</emphasis> value. Using <ask> will configure "
32410
#~ "<application>ldapadduser</application> to prompt you for the attribute value "
32411
#~ "during user creation."
32412
32413
#~ msgid ""
32414
#~ "Another good site is <ulink url=\"http://www.iallanis.info/smbldap-"
32415
#~ "tools/docs/samba-ldap-howto/\">Samba OpenLDAP HOWTO</ulink>."
32416
#~ msgstr ""
32417
#~ "Another good site is <ulink url=\"http://www.iallanis.info/smbldap-"
32418
#~ "tools/docs/samba-ldap-howto/\">Samba OpenLDAP HOWTO</ulink>."
32419
32420
#~ msgid "sudo mv keytab.kdc01 /etc/kr5b.keytab"
32421
#~ msgstr "sudo mv keytab.kdc01 /etc/kr5b.keytab"
32422
32423
#~ msgid ""
32424
#~ "A <emphasis>mysqsl-servers</emphasis> hostgroup now needs to be defined. "
32425
#~ "Edit <filename>/etc/nagios3/conf.d/hostgroups_nagios2.cfg</filename> adding:"
32426
#~ msgstr ""
32427
#~ "A <emphasis>mysqsl-servers</emphasis> hostgroup now needs to be defined. "
32428
#~ "Edit <filename>/etc/nagios3/conf.d/hostgroups_nagios2.cfg</filename> adding:"
32429
32430
#~ msgid ""
32431
#~ "This section will cover integrating <application>Amavisd-new</application>, "
32432
#~ "<application>Spamassassin</application>, and "
32433
#~ "<application>ClamAV</application> with the "
32434
#~ "<application>Postfix</application> Mail Transport Agent (MTA). "
32435
#~ "<application>Postfix</application> can also check email validity by passing "
32436
#~ "it through external content filters. These filters can sometimes determine "
32437
#~ "if a message is spam without needing to process it with more resource "
32438
#~ "intensive applications. Two common filters are <application>dkim-"
32439
#~ "filter</application> and <application>python-policyd-spf</application>."
32440
#~ msgstr ""
32441
#~ "This section will cover integrating <application>Amavisd-new</application>, "
32442
#~ "<application>Spamassassin</application>, and "
32443
#~ "<application>ClamAV</application> with the "
32444
#~ "<application>Postfix</application> Mail Transport Agent (MTA). "
32445
#~ "<application>Postfix</application> can also check e-mail validity by passing "
32446
#~ "it through external content filters. These filters can sometimes determine "
32447
#~ "if a message is spam without needing to process it with more resource "
32448
#~ "intensive applications. Two common filters are <application>dkim-"
32449
#~ "filter</application> and <application>python-policyd-spf</application>."
32450
32451
#~ msgid ""
32452
#~ "<application>dkim-filter</application> implements a Sendmail Mail Filter "
32453
#~ "(Milter) for the DomainKeys Identified Mail (DKIM) standard."
32454
#~ msgstr ""
32455
#~ "<application>dkim-filter</application> implements a Sendmail Mail Filter "
32456
#~ "(Milter) for the DomainKeys Identified Mail (DKIM) standard."
32457
32458
#~ msgid ""
32459
#~ "The message is passed through any external filters <application>dkim-"
32460
#~ "filter</application> and <application>python-policyd-spf</application> in "
32461
#~ "this case."
32462
#~ msgstr ""
32463
#~ "The message is passed through any external filters <application>dkim-"
32464
#~ "filter</application> and <application>python-policyd-spf</application> in "
32465
#~ "this case."
32466
32467
#~ msgid "sudo apt-get install dkim-filter python-policyd-spf"
32468
#~ msgstr "sudo apt-get install dkim-filter python-policyd-spf"
32469
32470
#~ msgid ""
32471
#~ "<emphasis>'./@example.com' => 'WHITELIST',</emphasis>: adds addresses "
32472
#~ "that have a valid signature from \"example.com\". This is usually used for "
32473
#~ "discussion groups that sign thier messages."
32474
#~ msgstr ""
32475
#~ "<emphasis>'./@example.com' => 'WHITELIST',</emphasis>: adds addresses "
32476
#~ "that have a valid signature from \"example.com\". This is usually used for "
32477
#~ "discussion groups that sign thier messages."
32478
32479
#~ msgid ""
32480
#~ "Depending on where the source was extracted, configure a web browser to "
32481
#~ "serve the files."
32482
#~ msgstr ""
32483
#~ "Depending on where the source was extracted, configure a web browser to "
32484
#~ "serve the files."
32485
32486
#~ msgid ""
32487
#~ "This guide assumes you have a basic understanding of your Ubuntu system. "
32488
#~ "Some installation details are covered in <xref linkend=\"installation\"/>, "
32489
#~ "but if you need detailed instructions installing Ubuntu please refer to the "
32490
#~ "<ulink url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
32491
#~ "Installation Guide</ulink>."
32492
#~ msgstr ""
32493
#~ "This guide assumes you have a basic understanding of your Ubuntu system. "
32494
#~ "Some installation details are covered in <xref linkend=\"installation\"/>, "
32495
#~ "but if you need detailed instructions installing Ubuntu please refer to the "
32496
#~ "<ulink url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
32497
#~ "Installation Guide</ulink>."
32498
32499
#~ msgid ""
32500
#~ "This chapter provides a quick overview of installing Ubuntu 10.04 LTS Server "
32501
#~ "Edition. For more detailed instructions, please refer to the <ulink "
32502
#~ "url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
32503
#~ "Installation Guide</ulink>."
32504
#~ msgstr ""
32505
#~ "This chapter provides a quick overview of installing Ubuntu 10.04 LTS Server "
32506
#~ "Edition. For more detailed instructions, please refer to the <ulink "
32507
#~ "url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
32508
#~ "Installation Guide</ulink>."
32509
32510
#~ msgid ""
32511
#~ "Ubuntu 10.04 LTS Server Edition supports two (2) major architectures: Intel "
32512
#~ "x86 and AMD64. The table below lists recommended hardware specifications. "
32513
#~ "Depending on your needs, you might manage with less than this. However, most "
32514
#~ "users risk being frustrated if they ignore these suggestions."
32515
#~ msgstr ""
32516
#~ "Ubuntu 10.04 LTS Server Edition supports two (2) major architectures: Intel "
32517
#~ "x86 and AMD64. The table below lists recommended hardware specifications. "
32518
#~ "Depending on your needs, you might manage with less than this. However, most "
32519
#~ "users risk being frustrated if they ignore these suggestions."
32520
32521
#~ msgid ""
32522
#~ "To see all kernel configuration options you can look through "
32523
#~ "<filename>/boot/config-2.6.31-server</filename>. Also, <ulink "
32524
#~ "url=\"http://www.kroah.com/lkn/\">Linux Kernel in a Nutshell</ulink> is a "
32525
#~ "great resource on the options available."
32526
#~ msgstr ""
32527
#~ "To see all kernel configuration options you can look through "
32528
#~ "<filename>/boot/config-2.6.31-server</filename>. Also, <ulink "
32529
#~ "url=\"http://www.kroah.com/lkn/\">Linux Kernel in a Nutshell</ulink> is a "
32530
#~ "great resource on the options available."
32531
32532
#~ msgid ""
32533
#~ "Once again, for detailed instructions see the <ulink "
32534
#~ "url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\"> Ubuntu "
32535
#~ "Installation Guide</ulink>."
32536
#~ msgstr ""
32537
#~ "Once again, for detailed instructions see the <ulink "
32538
#~ "url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\"> Ubuntu "
32539
#~ "Installation Guide</ulink>."
32540
32541
#~ msgid ""
32542
#~ "Even though you are supposed to be able to <emphasis>expand</emphasis> an "
32543
#~ "ext3 or ext4 filesystem without unmounting it first, it may be a good "
32544
#~ "pratice to unmount it anyway and check the filesystem, so that you don't "
32545
#~ "mess up the day you want to reduce a logical volume (in that case unmounting "
32546
#~ "first is compulsory)."
32547
#~ msgstr ""
32548
#~ "Even though you are supposed to be able to <emphasis>expand</emphasis> an "
32549
#~ "ext3 or ext4 filesystem without unmounting it first, it may be a good "
32550
#~ "pratice to unmount it anyway and check the filesystem, so that you don't "
32551
#~ "mess up the day you want to reduce a logical volume (in that case unmounting "
32552
#~ "first is compulsory)."
32553
32554
#~ msgid ""
32555
#~ "There a many ways to configure <application>BIND9</application>. Some of the "
32556
#~ "most common configurations are a caching nameserver, primary master, and a "
32557
#~ "as a secondary master."
32558
#~ msgstr ""
32559
#~ "There a many ways to configure <application>BIND9</application>. Some of the "
32560
#~ "most common configurations are a caching nameserver, primary master, and a "
32561
#~ "as a secondary master."
32562
32563
#~ msgid ""
32564
#~ "The <emphasis>Serial Number</emphasis> in the Reverse zone needs to be "
32565
#~ "incremented on each changes as well. For each <emphasis>A record</emphasis> "
32566
#~ "you configure in <filename>/etc/bind/db.example.com</filename> you need to "
32567
#~ "create a <emphasis>PTR record</emphasis> in "
32568
#~ "<filename>/etc/bind/db.192</filename>."
32569
#~ msgstr ""
32570
#~ "The <emphasis>Serial Number</emphasis> in the Reverse zone needs to be "
32571
#~ "incremented on each changes as well. For each <emphasis>A record</emphasis> "
32572
#~ "you configure in <filename>/etc/bind/db.example.com</filename> you need to "
32573
#~ "create a <emphasis>PTR record</emphasis> in "
32574
#~ "<filename>/etc/bind/db.192</filename>."
32575
32576
#~ msgid ""
32577
#~ "The default directory for non-authoritative zone files is "
32578
#~ "<filename>/var/cache/bind/</filename>. This directory is also configured in "
32579
#~ "<application>AppArmor</application> to allow the "
32580
#~ "<application>named</application> daemon to write to. For more information on "
32581
#~ "AppArmor see <xref linkend=\"apparmor\"/>."
32582
#~ msgstr ""
32583
#~ "The default directory for non-authoritative zone files is "
32584
#~ "<filename>/var/cache/bind/</filename>. This directory is also configured in "
32585
#~ "<application>AppArmor</application> to allow the "
32586
#~ "<application>named</application> daemon to write to. For more information on "
32587
#~ "AppArmor see <xref linkend=\"apparmor\"/>."
32588
32589
#~ msgid ""
32590
#~ "After executing the above command, the data will start syncing with the "
32591
#~ "secondary host. To watch the progresss, on <emphasis>drbd02</emphasis> enter "
32592
#~ "the following:"
32593
#~ msgstr ""
32594
#~ "After executing the above command, the data will start syncing with the "
32595
#~ "secondary host. To watch the progresss, on <emphasis>drbd02</emphasis> enter "
32596
#~ "the following:"
32597
32598
#~ msgid ""
32599
#~ "The IRC admin details can be configured by editting the following line:"
32600
#~ msgstr ""
32601
#~ "The IRC admin details can be configured by editting the following line:"
32602
32603
#~ msgid ""
32604
#~ "Another option is to copy the archive file to an external hard drive which "
32605
#~ "can then be taken off site. Since the price of external hard drives continue "
32606
#~ "to decrease it may be cost affective to use two drives for each archive "
32607
#~ "level. This would allow you to have one external drive attached to the "
32608
#~ "backup server and one in another location."
32609
#~ msgstr ""
32610
#~ "Another option is to copy the archive file to an external hard drive which "
32611
#~ "can then be taken off site. Since the price of external hard drives continue "
32612
#~ "to decrease it may be cost affective to use two drives for each archive "
32613
#~ "level. This would allow you to have one external drive attached to the "
32614
#~ "backup server and one in another location."
32615
32616
#~ msgid ""
32617
#~ "<application>Bacula</application> is a backup program enabling you to "
32618
#~ "backup, restore, and verify data across your network. There are Bacula "
32619
#~ "clients for Linux, Windows, and Mac OSX. Making it a cross platform network "
32620
#~ "wide solution."
32621
#~ msgstr ""
32622
#~ "<application>Bacula</application> is a backup program enabling you to "
32623
#~ "backup, restore, and verify data across your network. There are Bacula "
32624
#~ "clients for Linux, Windows, and Mac OSX. Making it a cross platform network "
32625
#~ "wide solution."
Loggerhead is a web-based interface for Breezy
Version: 2.0.1