« back to all changes in this revision
Viewing changes to serverguide/po/en_AU.po
- browse files at revision 94
- compare with another revision
- download diff
- download tarball
- view history from revision 94
- Committer: Bazaar Package Importer
- Author(s): Matthew East
- Date: 2010-09-19 11:35:42 UTC
- Revision ID: james.westby@ubuntu.com-20100919113542-mbxqe7yuo4ggnrw3
Tags: 10.10.3
* Amend font-family for browser startpage (LP: #195590)
* Add translations from Launchpad
* Add translations from Launchpad
- files added:
- internet/po/nn.po
- files removed:
- serverguide
- serverguide/C
- serverguide/po
- serverguide/sample
- files modified:
- about-ubuntu/po/ace.po
added
removed
serverguide/po/en_AU.po
1
# English (Australia) translation for ubuntu-docs
2
# Copyright (c) 2009 Rosetta Contributors and Canonical Ltd 2009
3
# This file is distributed under the same license as the ubuntu-docs package.
4
# FIRST AUTHOR <EMAIL@ADDRESS>, 2009.
5
#
6
msgid ""
7
msgstr ""
8
"Project-Id-Version: ubuntu-docs\n"
9
"Report-Msgid-Bugs-To: FULL NAME <EMAIL@ADDRESS>\n"
10
"POT-Creation-Date: 2010-03-29 08:26+0100\n"
11
"PO-Revision-Date: 2010-03-29 17:32+0000\n"
12
"Last-Translator: Matthew East <matt@mdke.org>\n"
13
"Language-Team: English (Australia) <en_AU@li.org>\n"
14
"MIME-Version: 1.0\n"
15
"Content-Type: text/plain; charset=UTF-8\n"
16
"Content-Transfer-Encoding: 8bit\n"
17
"X-Launchpad-Export-Date: 2010-04-17 14:53+0000\n"
18
"X-Generator: Launchpad (build Unknown)\n"
19
20
#: serverguide/C/serverguide-C.omf:6(creator) serverguide/C/serverguide-C.omf:7(maintainer)
21
msgid "ubuntu-doc@lists.ubuntu.com (Ubuntu Documentation Project)"
22
msgstr "ubuntu-doc@lists.ubuntu.com (Ubuntu Documentation Project)"
23
24
#: serverguide/C/serverguide-C.omf:8(title) serverguide/C/serverguide-C.omf:11(description) serverguide/C/serverguide.xml:14(title) serverguide/C/bookinfo.xml:13(title)
25
msgid "Ubuntu Server Guide"
26
msgstr "Ubuntu Server Guide"
27
28
#: serverguide/C/serverguide-C.omf:9(date)
29
msgid "2007-09-30"
30
msgstr "30/09/2007"
31
32
#: serverguide/C/windows-networking.xml:13(title)
33
msgid "Windows Networking"
34
msgstr "Windows Networking"
35
36
#: serverguide/C/windows-networking.xml:15(para)
37
msgid ""
38
"Computer networks are often comprised of diverse systems, and while "
39
"operating a network made up entirely of Ubuntu desktop and server computers "
40
"would certainly be fun, some network environments must consist of both "
41
"Ubuntu and <trademark class=\"registered\">Microsoft</trademark><trademark "
42
"class=\"registered\">Windows</trademark> systems working together in "
43
"harmony. This section of the <phrase>Ubuntu</phrase> Server Guide introduces "
44
"principles and tools used in configuring your Ubuntu Server for sharing "
45
"network resources with Windows computers."
46
msgstr ""
47
"Computer networks are often comprised of diverse systems, and while "
48
"operating a network made up entirely of Ubuntu desktop and server computers "
49
"would certainly be fun, some network environments must consist of both "
50
"Ubuntu and <trademark class=\"registered\">Microsoft</trademark><trademark "
51
"class=\"registered\">Windows</trademark> systems working together in "
52
"harmony. This section of the <phrase>Ubuntu</phrase> Server Guide introduces "
53
"principles and tools used in configuring your Ubuntu Server for sharing "
54
"network resources with Windows computers."
55
56
#: serverguide/C/windows-networking.xml:25(title) serverguide/C/virtualization.xml:402(title) serverguide/C/security.xml:354(title) serverguide/C/remote-administration.xml:22(title) serverguide/C/package-management.xml:20(title) serverguide/C/introduction.xml:13(title)
57
msgid "Introduction"
58
msgstr "Introduction"
59
60
#: serverguide/C/windows-networking.xml:27(para)
61
msgid ""
62
"Successfully networking your Ubuntu system with Windows clients involves "
63
"providing and integrating with services common to Windows environments. Such "
64
"services assist the sharing of data and information about the computers and "
65
"users involved in the network, and may be classified under three major "
66
"categories of functionality:"
67
msgstr ""
68
"Successfully networking your Ubuntu system with Windows clients involves "
69
"providing and integrating with services common to Windows environments. Such "
70
"services assist the sharing of data and information about the computers and "
71
"users involved in the network, and may be classified under three major "
72
"categories of functionality:"
73
74
#: serverguide/C/windows-networking.xml:35(para)
75
msgid ""
76
"<emphasis role=\"bold\">File and Printer Sharing Services</emphasis>. Using "
77
"the Server Message Block (SMB) protocol to facilitate the sharing of files, "
78
"folders, volumes, and the sharing of printers throughout the network."
79
msgstr ""
80
"<emphasis role=\"bold\">File and Printer Sharing Services</emphasis>. Using "
81
"the Server Message Block (SMB) protocol to facilitate the sharing of files, "
82
"folders, volumes, and the sharing of printers throughout the network."
83
84
#: serverguide/C/windows-networking.xml:41(para)
85
msgid ""
86
"<emphasis role=\"bold\">Directory Services</emphasis>. Sharing vital "
87
"information about the computers and users of the network with such "
88
"technologies as the Lightweight Directory Access Protocol (LDAP) and "
89
"Microsoft <trademark class=\"registered\">Active Directory</trademark>."
90
msgstr ""
91
"<emphasis role=\"bold\">Directory Services</emphasis>. Sharing vital "
92
"information about the computers and users of the network with such "
93
"technologies as the Lightweight Directory Access Protocol (LDAP) and "
94
"Microsoft <trademark class=\"registered\">Active Directory</trademark>."
95
96
#: serverguide/C/windows-networking.xml:48(para)
97
msgid ""
98
"<emphasis role=\"bold\">Authentication and Access</emphasis>. Establishing "
99
"the identity of a computer or user of the network and determining the "
100
"information the computer or user is authorized to access using such "
101
"principles and technologies as file permissions, group policies, and the "
102
"Kerberos authentication service."
103
msgstr ""
104
"<emphasis role=\"bold\">Authentication and Access</emphasis>. Establishing "
105
"the identity of a computer or user of the network and determining the "
106
"information the computer or user is authorised to access using such "
107
"principles and technologies as file permissions, group policies, and the "
108
"Kerberos authentication service."
109
110
#: serverguide/C/windows-networking.xml:56(para)
111
msgid ""
112
"Fortunately, your Ubuntu system may provide all such facilities to Windows "
113
"clients and share network resources among them. One of the principal pieces "
114
"of software your Ubuntu system includes for Windows networking is the Samba "
115
"suite of SMB server applications and tools."
116
msgstr ""
117
"Fortunately, your Ubuntu system may provide all such facilities to Windows "
118
"clients and share network resources among them. One of the principal pieces "
119
"of software your Ubuntu system includes for Windows networking is the Samba "
120
"suite of SMB server applications and tools."
121
122
#: serverguide/C/windows-networking.xml:62(para)
123
msgid ""
124
"This section of the <phrase>Ubuntu</phrase> Server Guide will introduce some "
125
"of the common Samba use cases, and how to install and configure the "
126
"necessary packages. Additional detailed documentation and information on "
127
"Samba can be found on the <ulink url=\"http://www.samba.org\">Samba "
128
"website</ulink>."
129
msgstr ""
130
"This section of the <phrase>Ubuntu</phrase> Server Guide will introduce some "
131
"of the common Samba use cases, and how to install and configure the "
132
"necessary packages. Additional detailed documentation and information on "
133
"Samba can be found on the <ulink url=\"http://www.samba.org\">Samba "
134
"website</ulink>."
135
136
#: serverguide/C/windows-networking.xml:70(title)
137
msgid "Samba File Server"
138
msgstr "Samba File Server"
139
140
#: serverguide/C/windows-networking.xml:72(para)
141
msgid ""
142
"One of the most common ways to network Ubuntu and Windows computers is to "
143
"configure Samba as a File Server. This section covers setting up a "
144
"<application>Samba</application> server to share files with Windows clients."
145
msgstr ""
146
"One of the most common ways to network Ubuntu and Windows computers is to "
147
"configure Samba as a File Server. This section covers setting up a "
148
"<application>Samba</application> server to share files with Windows clients."
149
150
#: serverguide/C/windows-networking.xml:77(para)
151
msgid ""
152
"The server will be configured to share files with any client on the network "
153
"without prompting for a password. If your environment requires stricter "
154
"Access Controls see <xref linkend=\"samba-fileprint-security\"/>"
155
msgstr ""
156
"The server will be configured to share files with any client on the network "
157
"without prompting for a password. If your environment requires stricter "
158
"Access Controls see <xref linkend=\"samba-fileprint-security\"/>"
159
160
#: serverguide/C/windows-networking.xml:83(title) serverguide/C/windows-networking.xml:287(title) serverguide/C/windows-networking.xml:1302(title) serverguide/C/web-servers.xml:41(title) serverguide/C/web-servers.xml:675(title) serverguide/C/web-servers.xml:816(title) serverguide/C/web-servers.xml:940(title) serverguide/C/vpn.xml:33(title) serverguide/C/virtualization.xml:62(title) serverguide/C/virtualization.xml:2014(title) serverguide/C/vcs.xml:28(title) serverguide/C/vcs.xml:86(title) serverguide/C/vcs.xml:405(title) serverguide/C/remote-administration.xml:52(title) serverguide/C/remote-administration.xml:233(title) serverguide/C/network-config.xml:937(title) serverguide/C/network-auth.xml:52(title) serverguide/C/network-auth.xml:1581(title) serverguide/C/network-auth.xml:2092(title) serverguide/C/network-auth.xml:2483(title) serverguide/C/monitoring.xml:42(title) serverguide/C/monitoring.xml:428(title) serverguide/C/mail.xml:40(title) serverguide/C/mail.xml:496(title) serverguide/C/mail.xml:674(title) serverguide/C/mail.xml:823(title) serverguide/C/mail.xml:1315(title) serverguide/C/lamp-applications.xml:108(title) serverguide/C/lamp-applications.xml:287(title) serverguide/C/lamp-applications.xml:423(title) serverguide/C/installation.xml:13(title) serverguide/C/installation.xml:957(title) serverguide/C/file-server.xml:347(title) serverguide/C/file-server.xml:462(title) serverguide/C/dns.xml:23(title) serverguide/C/databases.xml:40(title) serverguide/C/databases.xml:164(title) serverguide/C/chat.xml:37(title) serverguide/C/chat.xml:141(title) serverguide/C/backups.xml:593(title)
161
msgid "Installation"
162
msgstr "Installation"
163
164
#: serverguide/C/windows-networking.xml:85(para)
165
msgid ""
166
"The first step is to install the <application>samba</application> package. "
167
"From a terminal prompt enter:"
168
msgstr ""
169
"The first step is to install the <application>samba</application> package. "
170
"From a terminal prompt enter:"
171
172
#: serverguide/C/windows-networking.xml:90(command) serverguide/C/windows-networking.xml:299(command)
173
msgid "sudo apt-get install samba"
174
msgstr "sudo apt-get install samba"
175
176
#: serverguide/C/windows-networking.xml:93(para)
177
msgid ""
178
"That's all there is to it; you are now ready to configure Samba to share "
179
"files."
180
msgstr ""
181
"That's all there is to it; you are now ready to configure Samba to share "
182
"files."
183
184
#: serverguide/C/windows-networking.xml:99(title) serverguide/C/windows-networking.xml:304(title) serverguide/C/web-servers.xml:61(title) serverguide/C/web-servers.xml:726(title) serverguide/C/web-servers.xml:827(title) serverguide/C/web-servers.xml:967(title) serverguide/C/web-servers.xml:1067(title) serverguide/C/vpn.xml:138(title) serverguide/C/virtualization.xml:2088(title) serverguide/C/vcs.xml:39(title) serverguide/C/vcs.xml:423(title) serverguide/C/remote-administration.xml:74(title) serverguide/C/remote-administration.xml:258(title) serverguide/C/package-management.xml:387(title) serverguide/C/network-config.xml:959(title) serverguide/C/network-auth.xml:2131(title) serverguide/C/network-auth.xml:2504(title) serverguide/C/monitoring.xml:187(title) serverguide/C/monitoring.xml:454(title) serverguide/C/mail.xml:505(title) serverguide/C/mail.xml:684(title) serverguide/C/mail.xml:908(title) serverguide/C/mail.xml:1344(title) serverguide/C/lamp-applications.xml:128(title) serverguide/C/lamp-applications.xml:314(title) serverguide/C/lamp-applications.xml:453(title) serverguide/C/file-server.xml:360(title) serverguide/C/file-server.xml:488(title) serverguide/C/dns.xml:39(title) serverguide/C/databases.xml:84(title) serverguide/C/databases.xml:183(title) serverguide/C/clustering.xml:47(title) serverguide/C/chat.xml:57(title) serverguide/C/chat.xml:153(title) serverguide/C/backups.xml:616(title)
185
msgid "Configuration"
186
msgstr "Configuration"
187
188
#: serverguide/C/windows-networking.xml:101(para)
189
msgid ""
190
"The main Samba configuration file is located in "
191
"<filename>/etc/samba/smb.conf</filename>. The default configuration file has "
192
"a significant amount of comments in order to document various configuration "
193
"directives."
194
msgstr ""
195
"The main Samba configuration file is located in "
196
"<filename>/etc/samba/smb.conf</filename>. The default configuration file has "
197
"a significant amount of comments in order to document various configuration "
198
"directives."
199
200
#: serverguide/C/windows-networking.xml:106(para)
201
msgid ""
202
"Not all the available options are included in the default configuration "
203
"file. See the <filename>smb.conf</filename><application>man</application> "
204
"page or the <ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
205
"Collection/\">Samba HOWTO Collection</ulink> for more details."
206
msgstr ""
207
"Not all the available options are included in the default configuration "
208
"file. See the <filename>smb.conf</filename><application>man</application> "
209
"page or the <ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
210
"Collection/\">Samba HOWTO Collection</ulink> for more details."
211
212
#: serverguide/C/windows-networking.xml:116(para)
213
msgid ""
214
"First, edit the following key/value pairs in the "
215
"<emphasis>[global]</emphasis> section of "
216
"<filename>/etc/samba/smb.conf</filename>:"
217
msgstr ""
218
"First, edit the following key/value pairs in the "
219
"<emphasis>[global]</emphasis> section of "
220
"<filename>/etc/samba/smb.conf</filename>:"
221
222
#: serverguide/C/windows-networking.xml:121(programlisting) serverguide/C/windows-networking.xml:311(programlisting) serverguide/C/windows-networking.xml:776(programlisting) serverguide/C/windows-networking.xml:990(programlisting)
223
#, no-wrap
224
msgid ""
225
"\n"
226
" workgroup = EXAMPLE\n"
227
" ...\n"
228
" security = user\n"
229
msgstr ""
230
"\n"
231
" workgroup = EXAMPLE\n"
232
" ...\n"
233
" security = user\n"
234
235
#: serverguide/C/windows-networking.xml:127(para)
236
msgid ""
237
"The <emphasis>security</emphasis> parameter is farther down in the [global] "
238
"section, and is commented by default. Also, change "
239
"<emphasis>EXAMPLE</emphasis> to better match your environment."
240
msgstr ""
241
"The <emphasis>security</emphasis> parameter is farther down in the [global] "
242
"section, and is commented by default. Also, change "
243
"<emphasis>EXAMPLE</emphasis> to better match your environment."
244
245
#: serverguide/C/windows-networking.xml:135(para)
246
msgid ""
247
"Create a new section at the bottom of the file, or uncomment one of the "
248
"examples, for the directory to be shared:"
249
msgstr ""
250
"Create a new section at the bottom of the file, or uncomment one of the "
251
"examples, for the directory to be shared:"
252
253
#: serverguide/C/windows-networking.xml:139(programlisting)
254
#, no-wrap
255
msgid ""
256
"\n"
257
"[share]\n"
258
" comment = Ubuntu File Server Share\n"
259
" path = /srv/samba/share\n"
260
" browsable = yes\n"
261
" guest ok = yes\n"
262
" read only = no\n"
263
" create mask = 0755\n"
264
msgstr ""
265
"\n"
266
"[share]\n"
267
" comment = Ubuntu File Server Share\n"
268
" path = /srv/samba/share\n"
269
" browsable = yes\n"
270
" guest ok = yes\n"
271
" read only = no\n"
272
" create mask = 0755\n"
273
274
#: serverguide/C/windows-networking.xml:151(para)
275
msgid ""
276
"<emphasis>comment:</emphasis> a short description of the share. Adjust to "
277
"fit your needs."
278
msgstr ""
279
"<emphasis>comment:</emphasis> a short description of the share. Adjust to "
280
"fit your needs."
281
282
#: serverguide/C/windows-networking.xml:156(para)
283
msgid "<emphasis>path:</emphasis> the path to the directory to share."
284
msgstr "<emphasis>path:</emphasis> the path to the directory to share."
285
286
#: serverguide/C/windows-networking.xml:159(para)
287
msgid ""
288
"This example uses <filename>/srv/samba/sharename</filename> because, "
289
"according to the <emphasis>Filesystem Hierarchy Standard (FHS)</emphasis>, "
290
"<ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
291
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is where site-"
292
"specific data should be served. Technically Samba shares can be placed "
293
"anywhere on the filesystem as long as the permissions are correct, but "
294
"adhering to standards is recommended."
295
msgstr ""
296
"This example uses <filename>/srv/samba/sharename</filename> because, "
297
"according to the <emphasis>File system Hierarchy Standard (FHS)</emphasis>, "
298
"<ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
299
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is where site-"
300
"specific data should be served. Technically Samba shares can be placed "
301
"anywhere on the file system as long as the permissions are correct, but "
302
"adhering to standards is recommended."
303
304
#: serverguide/C/windows-networking.xml:168(para)
305
msgid ""
306
"<emphasis>browsable:</emphasis> enables Windows clients to browse the shared "
307
"directory using <application>Windows Explorer</application>."
308
msgstr ""
309
"<emphasis>browsable:</emphasis> enables Windows clients to browse the shared "
310
"directory using <application>Windows Explorer</application>."
311
312
#: serverguide/C/windows-networking.xml:174(para)
313
msgid ""
314
"<emphasis>guest ok:</emphasis> allows clients to connect to the share "
315
"without supplying a password."
316
msgstr ""
317
"<emphasis>guest ok:</emphasis> allows clients to connect to the share "
318
"without supplying a password."
319
320
#: serverguide/C/windows-networking.xml:179(para)
321
msgid ""
322
"<emphasis>read only:</emphasis> determines if the share is read only or if "
323
"write privileges are granted. Write privileges are allowed only when the "
324
"value is <emphasis>no</emphasis>, as is seen in this example. If the value "
325
"is <emphasis>yes</emphasis>, then access to the share is read only."
326
msgstr ""
327
"<emphasis>read only:</emphasis> determines if the share is read only or if "
328
"write privileges are granted. Write privileges are allowed only when the "
329
"value is <emphasis>no</emphasis>, as is seen in this example. If the value "
330
"is <emphasis>yes</emphasis>, then access to the share is read only."
331
332
#: serverguide/C/windows-networking.xml:184(para)
333
msgid ""
334
"<emphasis>create mask:</emphasis> determines the permissions new files will "
335
"have when created."
336
msgstr ""
337
"<emphasis>create mask:</emphasis> determines the permissions new files will "
338
"have when created."
339
340
#: serverguide/C/windows-networking.xml:193(para)
341
msgid ""
342
"Now that <application>Samba</application> is configured, the directory needs "
343
"to be created and the permissions changed. From a terminal enter:"
344
msgstr ""
345
"Now that <application>Samba</application> is configured, the directory needs "
346
"to be created and the permissions changed. From a terminal enter:"
347
348
#: serverguide/C/windows-networking.xml:199(command)
349
msgid "sudo mkdir -p /srv/samba/share"
350
msgstr "sudo mkdir -p /srv/samba/share"
351
352
#: serverguide/C/windows-networking.xml:200(command)
353
msgid "sudo chown nobody.nogroup /srv/samba/share/"
354
msgstr "sudo chown nobody.nogroup /srv/samba/share/"
355
356
#: serverguide/C/windows-networking.xml:204(para)
357
msgid ""
358
"The <emphasis>-p</emphasis> switch tells mkdir to create the entire "
359
"directory tree if it doesn't exist. Change the share name to fit your "
360
"environment."
361
msgstr ""
362
"The <emphasis>-p</emphasis> switch tells mkdir to create the entire "
363
"directory tree if it doesn't exist. Change the share name to fit your "
364
"environment."
365
366
#: serverguide/C/windows-networking.xml:213(para)
367
msgid ""
368
"Finally, restart the <application>samba</application> services to enable the "
369
"new configuration:"
370
msgstr ""
371
"Finally, restart the <application>samba</application> services to enable the "
372
"new configuration:"
373
374
#: serverguide/C/windows-networking.xml:218(command) serverguide/C/windows-networking.xml:331(command) serverguide/C/windows-networking.xml:468(command) serverguide/C/windows-networking.xml:567(command) serverguide/C/windows-networking.xml:937(command) serverguide/C/windows-networking.xml:1047(command) serverguide/C/windows-networking.xml:1162(command) serverguide/C/network-auth.xml:1860(command)
375
msgid "sudo /etc/init.d/samba restart"
376
msgstr "sudo /etc/init.d/samba restart"
377
378
#: serverguide/C/windows-networking.xml:225(para)
379
msgid ""
380
"Once again, the above configuration gives all access to any client on the "
381
"local network. For a more secure configuration see <xref linkend=\"samba-"
382
"fileprint-security\"/>."
383
msgstr ""
384
"Once again, the above configuration gives all access to any client on the "
385
"local network. For a more secure configuration see <xref linkend=\"samba-"
386
"fileprint-security\"/>."
387
388
#: serverguide/C/windows-networking.xml:231(para)
389
msgid ""
390
"From a Windows client you should now be able to browse to the Ubuntu file "
391
"server and see the shared directory. To check that everything is working try "
392
"creating a directory from Windows."
393
msgstr ""
394
"From a Windows client you should now be able to browse to the Ubuntu file "
395
"server and see the shared directory. To check that everything is working try "
396
"creating a directory from Windows."
397
398
#: serverguide/C/windows-networking.xml:236(para)
399
msgid ""
400
"To create additional shares simply create new <emphasis>[dir]</emphasis> "
401
"sections in <filename>/etc/samba/smb.conf</filename>, and restart "
402
"<emphasis>Samba</emphasis>. Just make sure that the directory you want to "
403
"share actually exists and the permissions are correct."
404
msgstr ""
405
"To create additional shares simply create new <emphasis>[dir]</emphasis> "
406
"sections in <filename>/etc/samba/smb.conf</filename>, and restart "
407
"<emphasis>Samba</emphasis>. Just make sure that the directory you want to "
408
"share actually exists and the permissions are correct."
409
410
#: serverguide/C/windows-networking.xml:243(title) serverguide/C/windows-networking.xml:341(title) serverguide/C/windows-networking.xml:696(title) serverguide/C/windows-networking.xml:1066(title) serverguide/C/windows-networking.xml:1273(title) serverguide/C/virtualization.xml:366(title) serverguide/C/virtualization.xml:1168(title) serverguide/C/reporting-bugs.xml:304(title) serverguide/C/remote-administration.xml:491(title) serverguide/C/network-config.xml:569(title) serverguide/C/network-config.xml:824(title) serverguide/C/network-auth.xml:1531(title) serverguide/C/network-auth.xml:1975(title) serverguide/C/network-auth.xml:2579(title) serverguide/C/network-auth.xml:3087(title) serverguide/C/installation.xml:892(title) serverguide/C/installation.xml:1173(title) serverguide/C/databases.xml:122(title) serverguide/C/databases.xml:273(title) serverguide/C/backups.xml:855(title)
411
msgid "Resources"
412
msgstr "Resources"
413
414
#: serverguide/C/windows-networking.xml:247(para) serverguide/C/windows-networking.xml:345(para) serverguide/C/windows-networking.xml:700(para) serverguide/C/windows-networking.xml:1070(para)
415
msgid ""
416
"For in depth Samba configurations see the <ulink "
417
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
418
"Collection</ulink>"
419
msgstr ""
420
"For in depth Samba configurations see the <ulink "
421
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
422
"Collection</ulink>"
423
424
#: serverguide/C/windows-networking.xml:253(para) serverguide/C/windows-networking.xml:351(para) serverguide/C/windows-networking.xml:706(para) serverguide/C/windows-networking.xml:1076(para)
425
msgid ""
426
"The guide is also available in <ulink "
427
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">printed "
428
"format</ulink>."
429
msgstr ""
430
"The guide is also available in <ulink "
431
"url=\"http://www.amazon.com/exec/obidos/tg/detail/-/0131882228\">printed "
432
"format</ulink>."
433
434
#: serverguide/C/windows-networking.xml:259(para) serverguide/C/windows-networking.xml:357(para)
435
msgid ""
436
"O'Reilly's <ulink "
437
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
438
"another good reference."
439
msgstr ""
440
"O'Reilly's <ulink "
441
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
442
"another good reference."
443
444
#: serverguide/C/windows-networking.xml:265(para) serverguide/C/windows-networking.xml:368(para) serverguide/C/windows-networking.xml:731(para) serverguide/C/windows-networking.xml:1100(para) serverguide/C/windows-networking.xml:1286(para)
445
msgid ""
446
"The <ulink url=\"https://help.ubuntu.com/community/Samba\">Ubuntu Wiki Samba "
447
"</ulink> page."
448
msgstr ""
449
450
#: serverguide/C/windows-networking.xml:274(title)
451
msgid "Samba Print Server"
452
msgstr "Samba Print Server"
453
454
#: serverguide/C/windows-networking.xml:276(para)
455
msgid ""
456
"Another common use of Samba is to configure it to share printers installed, "
457
"either locally or over the network, on an Ubuntu server. Similar to <xref "
458
"linkend=\"samba-fileserver\"/> this section will configure Samba to allow "
459
"any client on the local network to use the installed printers without "
460
"prompting for a username and password."
461
msgstr ""
462
"Another common use of Samba is to configure it to share printers installed, "
463
"either locally or over the network, on an Ubuntu server. Similar to <xref "
464
"linkend=\"samba-fileserver\"/> this section will configure Samba to allow "
465
"any client on the local network to use the installed printers without "
466
"prompting for a user name and password."
467
468
#: serverguide/C/windows-networking.xml:282(para)
469
msgid ""
470
"For a more secure configuration see <xref linkend=\"samba-fileprint-"
471
"security\"/>."
472
msgstr ""
473
"For a more secure configuration see <xref linkend=\"samba-fileprint-"
474
"security\"/>."
475
476
#: serverguide/C/windows-networking.xml:289(para)
477
msgid ""
478
"Before installing and configuring Samba it is best to already have a working "
479
"<application>CUPS</application> installation. See <xref linkend=\"cups\"/> "
480
"for details."
481
msgstr ""
482
"Before installing and configuring Samba it is best to already have a working "
483
"<application>CUPS</application> installation. See <xref linkend=\"cups\"/> "
484
"for details."
485
486
#: serverguide/C/windows-networking.xml:294(para)
487
msgid ""
488
"To install the <application>samba</application> package, from a terminal "
489
"enter:"
490
msgstr ""
491
"To install the <application>samba</application> package, from a terminal "
492
"enter:"
493
494
#: serverguide/C/windows-networking.xml:305(para)
495
msgid ""
496
"After installing samba edit <filename>/etc/samba/smb.conf</filename>. Change "
497
"the <emphasis>workgroup</emphasis> attribute to what is appropriate for your "
498
"network, and change <emphasis>security</emphasis> to <emphasis "
499
"role=\"italic\">share</emphasis>:"
500
msgstr ""
501
"After installing samba edit <filename>/etc/samba/smb.conf</filename>. Change "
502
"the <emphasis>workgroup</emphasis> attribute to what is appropriate for your "
503
"network, and change <emphasis>security</emphasis> to <emphasis "
504
"role=\"italic\">share</emphasis>:"
505
506
#: serverguide/C/windows-networking.xml:317(para)
507
msgid ""
508
"In the <emphasis>[printers]</emphasis> section change the <emphasis>guest "
509
"ok</emphasis> option to <emphasis role=\"italic\">yes</emphasis>:"
510
msgstr ""
511
"In the <emphasis>[printers]</emphasis> section change the <emphasis>guest "
512
"ok</emphasis> option to <emphasis role=\"italic\">yes</emphasis>:"
513
514
#: serverguide/C/windows-networking.xml:321(programlisting)
515
#, no-wrap
516
msgid ""
517
"\n"
518
" browsable = yes\n"
519
" guest ok = yes\n"
520
msgstr ""
521
"\n"
522
" browsable = yes\n"
523
" guest ok = yes\n"
524
525
#: serverguide/C/windows-networking.xml:326(para)
526
msgid "After editing <filename>smb.conf</filename> restart Samba:"
527
msgstr "After editing <filename>smb.conf</filename> restart Samba:"
528
529
#: serverguide/C/windows-networking.xml:334(para)
530
msgid ""
531
"The default Samba configuration will automatically share any printers "
532
"installed. Simply install the printer locally on your Windows clients."
533
msgstr ""
534
"The default Samba configuration will automatically share any printers "
535
"installed. Simply install the printer locally on your Windows clients."
536
537
#: serverguide/C/windows-networking.xml:363(para)
538
msgid ""
539
"Also, see the <ulink url=\"http://www.cups.org/\">CUPS Website</ulink> for "
540
"more information on configuring CUPS."
541
msgstr ""
542
"Also, see the <ulink url=\"http://www.cups.org/\">CUPS Website</ulink> for "
543
"more information on configuring CUPS."
544
545
#: serverguide/C/windows-networking.xml:377(title)
546
msgid "Securing a Samba File and Print Server"
547
msgstr "Securing a Samba File and Print Server"
548
549
#: serverguide/C/windows-networking.xml:380(title)
550
msgid "Samba Security Modes"
551
msgstr "Samba Security Modes"
552
553
#: serverguide/C/windows-networking.xml:382(para)
554
msgid ""
555
"There are two security levels available to the Common Internet Filesystem "
556
"(CIFS) network protocol <emphasis>user-level</emphasis> and <emphasis>share-"
557
"level</emphasis>. Samba's <emphasis>security mode</emphasis> implementation "
558
"allows more flexibility, providing four ways of implementing user-level "
559
"security and one way to implement share-level:"
560
msgstr ""
561
"There are two security levels available to the Common Internet Filesystem "
562
"(CIFS) network protocol <emphasis>user-level</emphasis> and <emphasis>share-"
563
"level</emphasis>. Samba's <emphasis>security mode</emphasis> implementation "
564
"allows more flexibility, providing four ways of implementing user-level "
565
"security and one way to implement share-level:"
566
567
#: serverguide/C/windows-networking.xml:391(para)
568
msgid ""
569
"<emphasis>security = user:</emphasis> requires clients to supply a username "
570
"and password to connect to shares. Samba user accounts are separate from "
571
"system accounts, but the <application>libpam-smbpass</application> package "
572
"will sync system users and passwords with the Samba user database."
573
msgstr ""
574
"<emphasis>security = user:</emphasis> requires clients to supply a user name "
575
"and password to connect to shares. Samba user accounts are separate from "
576
"system accounts, but the <application>libpam-smbpass</application> package "
577
"will sync system users and passwords with the Samba user database."
578
579
#: serverguide/C/windows-networking.xml:398(para)
580
msgid ""
581
"<emphasis>security = domain:</emphasis> this mode allows the Samba server to "
582
"appear to Windows clients as a Primary Domain Controller (PDC), Backup "
583
"Domain Controller (BDC), or a Domain Member Server (DMS). See <xref "
584
"linkend=\"samba-dc\"/> for further information."
585
msgstr ""
586
"<emphasis>security = domain:</emphasis> this mode allows the Samba server to "
587
"appear to Windows clients as a Primary Domain Controller (PDC), Backup "
588
"Domain Controller (BDC), or a Domain Member Server (DMS). See <xref "
589
"linkend=\"samba-dc\"/> for further information."
590
591
#: serverguide/C/windows-networking.xml:405(para)
592
msgid ""
593
"<emphasis>security = ADS:</emphasis> allows the Samba server to join an "
594
"Active Directory domain as a native member. See <xref linkend=\"samba-ad-"
595
"integration\"/> for details."
596
msgstr ""
597
"<emphasis>security = ADS:</emphasis> allows the Samba server to join an "
598
"Active Directory domain as a native member. See <xref linkend=\"samba-ad-"
599
"integration\"/> for details."
600
601
#: serverguide/C/windows-networking.xml:411(para)
602
msgid ""
603
"<emphasis>security = server:</emphasis> this mode is left over from before "
604
"Samba could become a member server, and due to some security issues should "
605
"not be used. See the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
606
"HOWTO-Collection/ServerType.html#id349531\">Server Security</ulink> section "
607
"of the Samba guide for more details."
608
msgstr ""
609
"<emphasis>security = server:</emphasis> this mode is left over from before "
610
"Samba could become a member server, and due to some security issues should "
611
"not be used. See the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
612
"HOWTO-Collection/ServerType.html#id349531\">Server Security</ulink> section "
613
"of the Samba guide for more details."
614
615
#: serverguide/C/windows-networking.xml:419(para)
616
msgid ""
617
"<emphasis>security = share:</emphasis> allows clients to connect to shares "
618
"without supplying a username and password."
619
msgstr ""
620
"<emphasis>security = share:</emphasis> allows clients to connect to shares "
621
"without supplying a user name and password."
622
623
#: serverguide/C/windows-networking.xml:426(para)
624
msgid ""
625
"The security mode you choose will depend on your environment and what you "
626
"need the Samba server to accomplish."
627
msgstr ""
628
"The security mode you choose will depend on your environment and what you "
629
"need the Samba server to accomplish."
630
631
#: serverguide/C/windows-networking.xml:432(title)
632
msgid "Security = User"
633
msgstr "Security = User"
634
635
#: serverguide/C/windows-networking.xml:434(para)
636
msgid ""
637
"This section will reconfigure the Samba file and print server, from <xref "
638
"linkend=\"samba-fileserver\"/> and <xref linkend=\"samba-printserver\"/>, to "
639
"require authentication."
640
msgstr ""
641
"This section will reconfigure the Samba file and print server, from <xref "
642
"linkend=\"samba-fileserver\"/> and <xref linkend=\"samba-printserver\"/>, to "
643
"require authentication."
644
645
#: serverguide/C/windows-networking.xml:439(para)
646
msgid ""
647
"First, install the <application>libpam-smbpass</application> package which "
648
"will sync the system users to the Samba user database:"
649
msgstr ""
650
"First, install the <application>libpam-smbpass</application> package which "
651
"will sync the system users to the Samba user database:"
652
653
#: serverguide/C/windows-networking.xml:445(command)
654
msgid "sudo apt-get install libpam-smbpass"
655
msgstr "sudo apt-get install libpam-smbpass"
656
657
#: serverguide/C/windows-networking.xml:449(para)
658
msgid ""
659
"If you chose the <emphasis>Samba Server</emphasis> task during installation "
660
"<application>libpam-smbpass</application> is already installed."
661
msgstr ""
662
"If you chose the <emphasis>Samba Server</emphasis> task during installation "
663
"<application>libpam-smbpass</application> is already installed."
664
665
#: serverguide/C/windows-networking.xml:455(para)
666
msgid ""
667
"Edit <filename>/etc/samba/smb.conf</filename>, and in the "
668
"<emphasis>[share]</emphasis> section change:"
669
msgstr ""
670
"Edit <filename>/etc/samba/smb.conf</filename>, and in the "
671
"<emphasis>[share]</emphasis> section change:"
672
673
#: serverguide/C/windows-networking.xml:459(programlisting)
674
#, no-wrap
675
msgid ""
676
"\n"
677
" guest ok = no\n"
678
msgstr ""
679
"\n"
680
" guest ok = no\n"
681
682
#: serverguide/C/windows-networking.xml:463(para)
683
msgid "Finally, restart Samba for the new settings to take effect:"
684
msgstr "Finally, restart Samba for the new settings to take effect:"
685
686
#: serverguide/C/windows-networking.xml:471(para)
687
msgid ""
688
"Now when connecting to the shared directories or printers you should be "
689
"prompted for a username and password."
690
msgstr ""
691
"Now when connecting to the shared directories or printers you should be "
692
"prompted for a user name and password."
693
694
#: serverguide/C/windows-networking.xml:476(para)
695
msgid ""
696
"If you choose to map a network drive to the share you can check the "
697
"<quote>Reconnect at Logon</quote> check box, which will require you to only "
698
"enter the username and password once, at least until the password changes."
699
msgstr ""
700
"If you choose to map a network drive to the share you can tick the "
701
"<quote>Reconnect at Logon</quote> tick box, which will require you to only "
702
"enter the user name and password once, at least until the password changes."
703
704
#: serverguide/C/windows-networking.xml:484(title)
705
msgid "Share Security"
706
msgstr "Share Security"
707
708
#: serverguide/C/windows-networking.xml:486(para)
709
msgid ""
710
"There are several options available to increase the security for each "
711
"individual shared directory. Using the <emphasis>[share]</emphasis> example, "
712
"this section will cover some common options."
713
msgstr ""
714
"There are several options available to increase the security for each "
715
"individual shared directory. Using the <emphasis>[share]</emphasis> example, "
716
"this section will cover some common options."
717
718
#: serverguide/C/windows-networking.xml:492(title)
719
msgid "Groups"
720
msgstr "Groups"
721
722
#: serverguide/C/windows-networking.xml:494(para)
723
msgid ""
724
"Groups define a collection of computers or users which have a common level "
725
"of access to particular network resources and offer a level of granularity "
726
"in controlling access to such resources. For example, if a group <emphasis "
727
"role=\"italic\">qa</emphasis> is defined and contains the users <emphasis "
728
"role=\"italic\">freda</emphasis>, <emphasis "
729
"role=\"italic\">danika</emphasis>, and <emphasis "
730
"role=\"italic\">rob</emphasis> and a second group <emphasis "
731
"role=\"italic\">support</emphasis> is defined and consists of users "
732
"<emphasis role=\"italic\">danika</emphasis>, <emphasis "
733
"role=\"italic\">jeremy</emphasis>, and <emphasis "
734
"role=\"italic\">vincent</emphasis> then certain network resources configured "
735
"to allow access by the <emphasis role=\"italic\">qa</emphasis> group will "
736
"subsequently enable access by freda, danika, and rob, but not jeremy or "
737
"vincent. Since the user <emphasis role=\"italic\">danika</emphasis> belongs "
738
"to both the <emphasis role=\"italic\">qa</emphasis> and <emphasis "
739
"role=\"italic\">support</emphasis> groups, she will be able to access "
740
"resources configured for access by both groups, whereas all other users will "
741
"have only access to resources explicitly allowing the group they are part of."
742
msgstr ""
743
"Groups define a collection of computers or users which have a common level "
744
"of access to particular network resources and offer a level of granularity "
745
"in controlling access to such resources. For example, if a group <emphasis "
746
"role=\"italic\">qa</emphasis> is defined and contains the users <emphasis "
747
"role=\"italic\">freda</emphasis>, <emphasis "
748
"role=\"italic\">danika</emphasis>, and <emphasis "
749
"role=\"italic\">rob</emphasis> and a second group <emphasis "
750
"role=\"italic\">support</emphasis> is defined and consists of users "
751
"<emphasis role=\"italic\">danika</emphasis>, <emphasis "
752
"role=\"italic\">jeremy</emphasis>, and <emphasis "
753
"role=\"italic\">vincent</emphasis> then certain network resources configured "
754
"to allow access by the <emphasis role=\"italic\">qa</emphasis> group will "
755
"subsequently enable access by freda, danika, and rob, but not jeremy or "
756
"vincent. Since the user <emphasis role=\"italic\">danika</emphasis> belongs "
757
"to both the <emphasis role=\"italic\">qa</emphasis> and <emphasis "
758
"role=\"italic\">support</emphasis> groups, she will be able to access "
759
"resources configured for access by both groups, whereas all other users will "
760
"have only access to resources explicitly allowing the group they are part of."
761
762
#: serverguide/C/windows-networking.xml:508(para)
763
msgid ""
764
"By default Samba looks for the local system groups defined in "
765
"<filename>/etc/group</filename> to determine which users belong to which "
766
"groups. For more information on adding and removing users from groups see "
767
"<xref linkend=\"adding-deleting-users\"/>."
768
msgstr ""
769
"By default Samba looks for the local system groups defined in "
770
"<filename>/etc/group</filename> to determine which users belong to which "
771
"groups. For more information on adding and removing users from groups see "
772
"<xref linkend=\"adding-deleting-users\"/>."
773
774
#: serverguide/C/windows-networking.xml:514(para)
775
msgid ""
776
"When defining groups in the Samba configuration file, "
777
"<filename>/etc/samba/smb.conf</filename>, the recognized syntax is to "
778
"preface the group name with an \"@\" symbol. For example, if you wished to "
779
"define a group named <emphasis role=\"italic\">sysadmin</emphasis> in a "
780
"certain section of the <filename>/etc/samba/smb.conf</filename>, you would "
781
"do so by entering the group name as <emphasis "
782
"role=\"bold\">@sysadmin</emphasis>."
783
msgstr ""
784
"When defining groups in the Samba configuration file, "
785
"<filename>/etc/samba/smb.conf</filename>, the recognised syntax is to "
786
"preface the group name with an \"@\" symbol. For example, if you wished to "
787
"define a group named <emphasis role=\"italic\">sysadmin</emphasis> in a "
788
"certain section of the <filename>/etc/samba/smb.conf</filename>, you would "
789
"do so by entering the group name as <emphasis "
790
"role=\"bold\">@sysadmin</emphasis>."
791
792
#: serverguide/C/windows-networking.xml:523(title)
793
msgid "File Permissions"
794
msgstr "File Permissions"
795
796
#: serverguide/C/windows-networking.xml:525(para)
797
msgid ""
798
"File Permissions define the explicit rights a computer or user has to a "
799
"particular directory, file, or set of files. Such permissions may be defined "
800
"by editing the <filename>/etc/samba/smb.conf</filename> file and specifying "
801
"the explicit permissions of a defined file share."
802
msgstr ""
803
"File Permissions define the explicit rights a computer or user has to a "
804
"particular directory, file, or set of files. Such permissions may be defined "
805
"by editing the <filename>/etc/samba/smb.conf</filename> file and specifying "
806
"the explicit permissions of a defined file share."
807
808
#: serverguide/C/windows-networking.xml:531(para)
809
msgid ""
810
"For example, if you have defined a Samba share called "
811
"<emphasis>share</emphasis> and wish to give <emphasis role=\"italic\">read-"
812
"only</emphasis> permissions to the group of users known as <emphasis "
813
"role=\"italic\">qa</emphasis>, but wanted to allow writing to the share by "
814
"the group called <emphasis role=\"italic\">sysadmin</emphasis> and the user "
815
"named <emphasis role=\"italic\">vincent</emphasis>, then you could edit the "
816
"<filename>/etc/samba/smb.conf</filename> file, and add the following entries "
817
"under the <emphasis>[share]</emphasis> entry:"
818
msgstr ""
819
"For example, if you have defined a Samba share called "
820
"<emphasis>share</emphasis> and wish to give <emphasis role=\"italic\">read-"
821
"only</emphasis> permissions to the group of users known as <emphasis "
822
"role=\"italic\">qa</emphasis>, but wanted to allow writing to the share by "
823
"the group called <emphasis role=\"italic\">sysadmin</emphasis> and the user "
824
"named <emphasis role=\"italic\">vincent</emphasis>, then you could edit the "
825
"<filename>/etc/samba/smb.conf</filename> file, and add the following entries "
826
"under the <emphasis>[share]</emphasis> entry:"
827
828
#: serverguide/C/windows-networking.xml:540(programlisting)
829
#, no-wrap
830
msgid ""
831
"\n"
832
" read list = @qa\n"
833
" write list = @sysadmin, vincent\n"
834
msgstr ""
835
"\n"
836
" read list = @qa\n"
837
" write list = @sysadmin, vincent\n"
838
839
#: serverguide/C/windows-networking.xml:545(para)
840
msgid ""
841
"Another possible Samba permission is to declare "
842
"<emphasis>administrative</emphasis> permissions to a particular shared "
843
"resource. Users having administrative permissions may read, write, or modify "
844
"any information contained in the resource the user has been given explicit "
845
"administrative permissions to."
846
msgstr ""
847
"Another possible Samba permission is to declare "
848
"<emphasis>administrative</emphasis> permissions to a particular shared "
849
"resource. Users having administrative permissions may read, write, or modify "
850
"any information contained in the resource the user has been given explicit "
851
"administrative permissions to."
852
853
#: serverguide/C/windows-networking.xml:551(para)
854
msgid ""
855
"For example, if you wanted to give the user <emphasis "
856
"role=\"italic\">melissa</emphasis> administrative permissions to the "
857
"<emphasis role=\"italic\">share</emphasis> example, you would edit the "
858
"<filename>/etc/samba/smb.conf</filename> file, and add the following line "
859
"under the <emphasis>[share]</emphasis> entry:"
860
msgstr ""
861
"For example, if you wanted to give the user <emphasis "
862
"role=\"italic\">melissa</emphasis> administrative permissions to the "
863
"<emphasis role=\"italic\">share</emphasis> example, you would edit the "
864
"<filename>/etc/samba/smb.conf</filename> file, and add the following line "
865
"under the <emphasis>[share]</emphasis> entry:"
866
867
#: serverguide/C/windows-networking.xml:558(programlisting)
868
#, no-wrap
869
msgid ""
870
"\n"
871
" admin users = melissa\n"
872
msgstr ""
873
"\n"
874
" admin users = melissa\n"
875
876
#: serverguide/C/windows-networking.xml:562(para)
877
msgid ""
878
"After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for "
879
"the changes to take effect:"
880
msgstr ""
881
"After editing <filename>/etc/samba/smb.conf</filename>, restart Samba for "
882
"the changes to take effect:"
883
884
#: serverguide/C/windows-networking.xml:571(para)
885
msgid ""
886
"For the <emphasis>read list</emphasis> and <emphasis>write list</emphasis> "
887
"to work the Samba security mode must <emphasis>not</emphasis> be set to "
888
"<emphasis role=\"italic\">security = share</emphasis>"
889
msgstr ""
890
"For the <emphasis>read list</emphasis> and <emphasis>write list</emphasis> "
891
"to work the Samba security mode must <emphasis>not</emphasis> be set to "
892
"<emphasis role=\"italic\">security = share</emphasis>"
893
894
#: serverguide/C/windows-networking.xml:577(para)
895
msgid ""
896
"Now that Samba has been configured to limit which groups have access to the "
897
"shared directory, the filesystem permissions need to be updated."
898
msgstr ""
899
"Now that Samba has been configured to limit which groups have access to the "
900
"shared directory, the filesystem permissions need to be updated."
901
902
#: serverguide/C/windows-networking.xml:582(para)
903
msgid ""
904
"Traditional Linux file permissions do not map well to Windows NT Access "
905
"Control Lists (ACLs). Fortunately POSIX ACLs are available on Ubuntu servers "
906
"providing more fine grained control. For example, to enable ACLs on "
907
"<filename>/srv</filename> an EXT3 filesystem, edit "
908
"<filename>/etc/fstab</filename> adding the <emphasis>acl</emphasis> option:"
909
msgstr ""
910
"Traditional Linux file permissions do not map well to Windows NT Access "
911
"Control Lists (ACLs). Fortunately POSIX ACLs are available on Ubuntu servers "
912
"providing more fine grained control. For example, to enable ACLs on "
913
"<filename>/srv</filename> an EXT3 filesystem, edit "
914
"<filename>/etc/fstab</filename> adding the <emphasis>acl</emphasis> option:"
915
916
#: serverguide/C/windows-networking.xml:589(programlisting)
917
#, no-wrap
918
msgid ""
919
"\n"
920
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
921
"0 1\n"
922
msgstr ""
923
"\n"
924
"UUID=66bcdd2e-8861-4fb0-b7e4-e61c569fe17d /srv ext3 noatime,relatime,acl "
925
"0 1\n"
926
927
#: serverguide/C/windows-networking.xml:593(para)
928
msgid "Then remount the partition:"
929
msgstr "Then remount the partition:"
930
931
#: serverguide/C/windows-networking.xml:598(command)
932
msgid "sudo mount -v -o remount /srv"
933
msgstr "sudo mount -v -o remount /srv"
934
935
#: serverguide/C/windows-networking.xml:602(para)
936
msgid ""
937
"The above example assumes <filename>/srv</filename> on a separate partition. "
938
"If <filename>/srv</filename>, or wherever you have configured your share "
939
"path, is part of the <filename>/</filename> partition a reboot may be "
940
"required."
941
msgstr ""
942
"The above example assumes <filename>/srv</filename> on a separate partition. "
943
"If <filename>/srv</filename>, or wherever you have configured your share "
944
"path, is part of the <filename>/</filename> partition a reboot may be "
945
"required."
946
947
#: serverguide/C/windows-networking.xml:609(para)
948
msgid ""
949
"To match the Samba configuration above the <emphasis>sysadmin</emphasis> "
950
"group will be given read, write, and execute permissions to "
951
"<filename>/srv/samba/share</filename>, the <emphasis>qa</emphasis> group "
952
"will be given read and execute permissions, and the files will be owned by "
953
"the username <emphasis>melissa</emphasis>. Enter the following in a terminal:"
954
msgstr ""
955
"To match the Samba configuration above the <emphasis>sysadmin</emphasis> "
956
"group will be given read, write, and execute permissions to "
957
"<filename>/srv/samba/share</filename>, the <emphasis>qa</emphasis> group "
958
"will be given read and execute permissions, and the files will be owned by "
959
"the user name <emphasis>melissa</emphasis>. Enter the following in a "
960
"terminal:"
961
962
#: serverguide/C/windows-networking.xml:617(command)
963
msgid "sudo chown -R melissa /srv/samba/share/"
964
msgstr "sudo chown -R melissa /srv/samba/share/"
965
966
#: serverguide/C/windows-networking.xml:618(command)
967
msgid "sudo chgrp -R sysadmin /srv/samba/share/"
968
msgstr "sudo chgrp -R sysadmin /srv/samba/share/"
969
970
#: serverguide/C/windows-networking.xml:619(command)
971
msgid "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
972
msgstr "sudo setfacl -R -m g:qa:rx /srv/samba/share/"
973
974
#: serverguide/C/windows-networking.xml:623(para)
975
msgid ""
976
"The <application>setfacl</application> command above gives "
977
"<emphasis>execute</emphasis> permissions to all files in the "
978
"<filename>/srv/samba/share</filename> directory, which you may or may not "
979
"want."
980
msgstr ""
981
"The <application>setfacl</application> command above gives "
982
"<emphasis>execute</emphasis> permissions to all files in the "
983
"<filename>/srv/samba/share</filename> directory, which you may or may not "
984
"want."
985
986
#: serverguide/C/windows-networking.xml:629(para)
987
msgid ""
988
"Now from a Windows client you should notice the new file permissions are "
989
"implemented. See the <application>acl</application> and "
990
"<application>setfacl</application> man pages for more information on POSIX "
991
"ACLs."
992
msgstr ""
993
"Now from a Windows client you should notice the new file permissions are "
994
"implemented. See the <application>acl</application> and "
995
"<application>setfacl</application> man pages for more information on POSIX "
996
"ACLs."
997
998
#: serverguide/C/windows-networking.xml:637(title)
999
msgid "Samba AppArmor Profile"
1000
msgstr "Samba AppArmor Profile"
1001
1002
#: serverguide/C/windows-networking.xml:639(para)
1003
msgid ""
1004
"Ubuntu comes with the <application>AppArmor</application> security module, "
1005
"which provides mandatory access controls. The default AppArmor profile for "
1006
"Samba will need to be adapted to your configuration. For more details on "
1007
"using AppArmor see <xref linkend=\"apparmor\"/>."
1008
msgstr ""
1009
"Ubuntu comes with the <application>AppArmor</application> security module, "
1010
"which provides mandatory access controls. The default AppArmor profile for "
1011
"Samba will need to be adapted to your configuration. For more details on "
1012
"using AppArmor see <xref linkend=\"apparmor\"/>."
1013
1014
#: serverguide/C/windows-networking.xml:645(para)
1015
msgid ""
1016
"There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> "
1017
"and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part "
1018
"of the <application>apparmor-profiles</application> packages. To install the "
1019
"package, from a terminal prompt enter:"
1020
msgstr ""
1021
"There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> "
1022
"and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part "
1023
"of the <application>apparmor-profiles</application> packages. To install the "
1024
"package, from a terminal prompt enter:"
1025
1026
#: serverguide/C/windows-networking.xml:652(command) serverguide/C/security.xml:925(command)
1027
msgid "sudo apt-get install apparmor-profiles"
1028
msgstr "sudo apt-get install apparmor-profiles"
1029
1030
#: serverguide/C/windows-networking.xml:656(para)
1031
msgid "This package contains profiles for several other binaries."
1032
msgstr "This package contains profiles for several other binaries."
1033
1034
#: serverguide/C/windows-networking.xml:661(para)
1035
msgid ""
1036
"By default the profiles for <application>smbd</application> and "
1037
"<application>nmbd</application> are in <emphasis>complain</emphasis> mode "
1038
"allowing Samba to work without modifying the profile, and only logging "
1039
"errors. To place the <application>smbd</application> profile into "
1040
"<emphasis>enforce</emphasis> mode, and have Samba work as expected, the "
1041
"profile will need to be modified to reflect any directories that are shared."
1042
msgstr ""
1043
"By default the profiles for <application>smbd</application> and "
1044
"<application>nmbd</application> are in <emphasis>complain</emphasis> mode "
1045
"allowing Samba to work without modifying the profile, and only logging "
1046
"errors. To place the <application>smbd</application> profile into "
1047
"<emphasis>enforce</emphasis> mode, and have Samba work as expected, the "
1048
"profile will need to be modified to reflect any directories that are shared."
1049
1050
#: serverguide/C/windows-networking.xml:668(para)
1051
msgid ""
1052
"Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information "
1053
"for <emphasis>[share]</emphasis> from the file server example:"
1054
msgstr ""
1055
"Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information "
1056
"for <emphasis>[share]</emphasis> from the file server example:"
1057
1058
#: serverguide/C/windows-networking.xml:673(programlisting)
1059
#, no-wrap
1060
msgid ""
1061
"\n"
1062
" /srv/samba/share/ r,\n"
1063
" /srv/samba/share/** rwkix,\n"
1064
msgstr ""
1065
"\n"
1066
" /srv/samba/share/ r,\n"
1067
" /srv/samba/share/** rwkix,\n"
1068
1069
#: serverguide/C/windows-networking.xml:678(para)
1070
msgid ""
1071
"Now place the profile into <emphasis>enforce</emphasis> and reload it:"
1072
msgstr ""
1073
"Now place the profile into <emphasis>enforce</emphasis> and reload it:"
1074
1075
#: serverguide/C/windows-networking.xml:683(command)
1076
msgid "sudo aa-enforce /usr/sbin/smbd"
1077
msgstr "sudo aa-enforce /usr/sbin/smbd"
1078
1079
#: serverguide/C/windows-networking.xml:684(command)
1080
msgid "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
1081
msgstr "cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r"
1082
1083
#: serverguide/C/windows-networking.xml:687(para)
1084
msgid ""
1085
"You should now be able to read, write, and execute files in the shared "
1086
"directory as normal, and the <application>smbd</application> binary will "
1087
"have access to only the configured files and directories. Be sure to add "
1088
"entries for each directory you configure Samba to share. Also, any errors "
1089
"will be logged to <filename>/var/log/syslog</filename>."
1090
msgstr ""
1091
"You should now be able to read, write, and execute files in the shared "
1092
"directory as normal, and the <application>smbd</application> binary will "
1093
"have access to only the configured files and directories. Be sure to add "
1094
"entries for each directory you configure Samba to share. Also, any errors "
1095
"will be logged to <filename>/var/log/syslog</filename>."
1096
1097
#: serverguide/C/windows-networking.xml:712(para) serverguide/C/windows-networking.xml:1082(para)
1098
msgid ""
1099
"O'Reilly's <ulink "
1100
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
1101
"also a good reference."
1102
msgstr ""
1103
"O'Reilly's <ulink "
1104
"url=\"http://www.oreilly.com/catalog/9780596007690/\">Using Samba</ulink> is "
1105
"also a good reference."
1106
1107
#: serverguide/C/windows-networking.xml:718(para)
1108
msgid ""
1109
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-"
1110
"samba.html\">Chapter 18</ulink> of the Samba HOWTO Collection is devoted to "
1111
"security."
1112
msgstr ""
1113
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-"
1114
"samba.html\">Chapter 18</ulink> of the Samba HOWTO Collection is devoted to "
1115
"security."
1116
1117
#: serverguide/C/windows-networking.xml:724(para)
1118
msgid ""
1119
"For more information on Samba and ACLs see the <ulink "
1120
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
1121
"Collection/AccessControls.html#id397568\">Samba ACLs page </ulink>."
1122
msgstr ""
1123
"For more information on Samba and ACLs see the <ulink "
1124
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-"
1125
"Collection/AccessControls.html#id397568\">Samba ACLs page </ulink>."
1126
1127
#: serverguide/C/windows-networking.xml:740(title)
1128
msgid "Samba as a Domain Controller"
1129
msgstr "Samba as a Domain Controller"
1130
1131
#: serverguide/C/windows-networking.xml:742(para)
1132
msgid ""
1133
"Although it cannot act as an Active Directory Primary Domain Controller "
1134
"(PDC), a Samba server can be configured to appear as a Windows NT4-style "
1135
"domain controller. A major advantage of this configuration is the ability to "
1136
"centralize user and machine credentials. Samba can also use multiple "
1137
"backends to store the user information."
1138
msgstr ""
1139
"Although it cannot act as an Active Directory Primary Domain Controller "
1140
"(PDC), a Samba server can be configured to appear as a Windows NT4-style "
1141
"domain controller. A major advantage of this configuration is the ability to "
1142
"centralise user and machine credentials. Samba can also use multiple "
1143
"backends to store the user information."
1144
1145
#: serverguide/C/windows-networking.xml:749(title)
1146
msgid "Primary Domain Controller"
1147
msgstr "Primary Domain Controller"
1148
1149
#: serverguide/C/windows-networking.xml:751(para)
1150
msgid ""
1151
"This section covers configuring Samba as a Primary Domain Controller (PDC) "
1152
"using the default smbpasswd backend."
1153
msgstr ""
1154
"This section covers configuring Samba as a Primary Domain Controller (PDC) "
1155
"using the default smbpasswd backend."
1156
1157
#: serverguide/C/windows-networking.xml:758(para)
1158
msgid ""
1159
"First, install Samba, and <application>libpam-smbpass</application> to sync "
1160
"the user accounts, by entering the following in a terminal prompt:"
1161
msgstr ""
1162
"First, install Samba, and <application>libpam-smbpass</application> to sync "
1163
"the user accounts, by entering the following in a terminal prompt:"
1164
1165
#: serverguide/C/windows-networking.xml:764(command) serverguide/C/windows-networking.xml:980(command)
1166
msgid "sudo apt-get install samba libpam-smbpass"
1167
msgstr "sudo apt-get install samba libpam-smbpass"
1168
1169
#: serverguide/C/windows-networking.xml:770(para)
1170
msgid ""
1171
"Next, configure Samba by editing <filename>/etc/samba/smb.conf</filename>. "
1172
"The <emphasis>security</emphasis> mode should be set to <emphasis "
1173
"role=\"italic\">user</emphasis>, and the <emphasis>workgroup</emphasis> "
1174
"should relate to your organization:"
1175
msgstr ""
1176
"Next, configure Samba by editing <filename>/etc/samba/smb.conf</filename>. "
1177
"The <emphasis>security</emphasis> mode should be set to <emphasis "
1178
"role=\"italic\">user</emphasis>, and the <emphasis>workgroup</emphasis> "
1179
"should relate to your organisation:"
1180
1181
#: serverguide/C/windows-networking.xml:785(para)
1182
msgid ""
1183
"In the commented <quote>Domains</quote> section add or uncomment the "
1184
"following:"
1185
msgstr ""
1186
"In the commented <quote>Domains</quote> section add or uncomment the "
1187
"following:"
1188
1189
#: serverguide/C/windows-networking.xml:789(programlisting)
1190
#, no-wrap
1191
msgid ""
1192
"\n"
1193
" domain logons = yes\n"
1194
" logon path = \\\\%N\\%U\\profile\n"
1195
" logon drive = H:\n"
1196
" logon home = \\\\%N\\%U\n"
1197
" logon script = logon.cmd\n"
1198
" add machine script = sudo /usr/sbin/useradd -N -g machines -c Machine -d "
1199
"/var/lib/samba -s /bin/false %u\n"
1200
msgstr ""
1201
"\n"
1202
" domain logons = yes\n"
1203
" logon path = \\\\%N\\%U\\profile\n"
1204
" logon drive = H:\n"
1205
" logon home = \\\\%N\\%U\n"
1206
" logon script = logon.cmd\n"
1207
" add machine script = sudo /usr/sbin/useradd -N -g machines -c Machine -d "
1208
"/var/lib/samba -s /bin/false %u\n"
1209
1210
#: serverguide/C/windows-networking.xml:800(para)
1211
msgid ""
1212
"<emphasis>domain logons:</emphasis> provides the netlogon service causing "
1213
"Samba to act as a domain controller."
1214
msgstr ""
1215
"<emphasis>domain logons:</emphasis> provides the netlogon service causing "
1216
"Samba to act as a domain controller."
1217
1218
#: serverguide/C/windows-networking.xml:805(para)
1219
msgid ""
1220
"<emphasis>logon path:</emphasis> places the user's Windows profile into "
1221
"their home directory. It is also possible to configure a "
1222
"<emphasis>[profiles]</emphasis> share placing all profiles under a single "
1223
"directory."
1224
msgstr ""
1225
"<emphasis>logon path:</emphasis> places the user's Windows profile into "
1226
"their home directory. It is also possible to configure a "
1227
"<emphasis>[profiles]</emphasis> share placing all profiles under a single "
1228
"directory."
1229
1230
#: serverguide/C/windows-networking.xml:811(para)
1231
msgid ""
1232
"<emphasis>logon drive:</emphasis> specifies the home directory local path."
1233
msgstr ""
1234
"<emphasis>logon drive:</emphasis> specifies the home directory local path."
1235
1236
#: serverguide/C/windows-networking.xml:816(para)
1237
msgid ""
1238
"<emphasis>logon home:</emphasis> specifies the home directory location."
1239
msgstr ""
1240
"<emphasis>logon home:</emphasis> specifies the home directory location."
1241
1242
#: serverguide/C/windows-networking.xml:821(para)
1243
msgid ""
1244
"<emphasis>logon script:</emphasis> determines the script to be run locally "
1245
"once a user has logged in. The script needs to be placed in the "
1246
"<emphasis>[netlogon]</emphasis> share."
1247
msgstr ""
1248
"<emphasis>logon script:</emphasis> determines the script to be run locally "
1249
"once a user has logged in. The script needs to be placed in the "
1250
"<emphasis>[netlogon]</emphasis> share."
1251
1252
#: serverguide/C/windows-networking.xml:827(para)
1253
msgid ""
1254
"<emphasis>add machine script:</emphasis> a script that will automatically "
1255
"create the <emphasis>Machine Trust Account</emphasis> needed for a "
1256
"workstation to join the domain."
1257
msgstr ""
1258
"<emphasis>add machine script:</emphasis> a script that will automatically "
1259
"create the <emphasis>Machine Trust Account</emphasis> needed for a "
1260
"workstation to join the domain."
1261
1262
#: serverguide/C/windows-networking.xml:831(para)
1263
msgid ""
1264
"In this example the <emphasis>machines</emphasis> group will need to be "
1265
"created using the <application>addgroup</application> utility see <xref "
1266
"linkend=\"adding-deleting-users\"/> for details."
1267
msgstr ""
1268
"In this example the <emphasis>machines</emphasis> group will need to be "
1269
"created using the <application>addgroup</application> utility see <xref "
1270
"linkend=\"adding-deleting-users\"/> for details."
1271
1272
#: serverguide/C/windows-networking.xml:839(para)
1273
msgid ""
1274
"If you wish to not use <emphasis>Roaming Profiles</emphasis> leave the "
1275
"<emphasis>logon home</emphasis> and <emphasis>logon path</emphasis> options "
1276
"commented."
1277
msgstr ""
1278
"If you wish to not use <emphasis>Roaming Profiles</emphasis> leave the "
1279
"<emphasis>logon home</emphasis> and <emphasis>logon path</emphasis> options "
1280
"commented."
1281
1282
#: serverguide/C/windows-networking.xml:848(para)
1283
msgid ""
1284
"Uncomment the <emphasis>[homes]</emphasis> share to allow the <emphasis "
1285
"role=\"italic\">logon home</emphasis> to be mapped:"
1286
msgstr ""
1287
"Uncomment the <emphasis>[homes]</emphasis> share to allow the <emphasis "
1288
"role=\"italic\">logon home</emphasis> to be mapped:"
1289
1290
#: serverguide/C/windows-networking.xml:853(programlisting)
1291
#, no-wrap
1292
msgid ""
1293
"\n"
1294
"[homes]\n"
1295
" comment = Home Directories\n"
1296
" browseable = no\n"
1297
" read only = no\n"
1298
" create mask = 0700\n"
1299
" directory mask = 0700\n"
1300
" valid users = %S\n"
1301
msgstr ""
1302
"\n"
1303
"[homes]\n"
1304
" comment = Home Directories\n"
1305
" browseable = no\n"
1306
" read only = no\n"
1307
" create mask = 0700\n"
1308
" directory mask = 0700\n"
1309
" valid users = %S\n"
1310
1311
#: serverguide/C/windows-networking.xml:866(para)
1312
msgid ""
1313
"When configured as a domain controller a <emphasis>[netlogon]</emphasis> "
1314
"share needs to be configured. To enable the share, uncomment:"
1315
msgstr ""
1316
"When configured as a domain controller a <emphasis>[netlogon]</emphasis> "
1317
"share needs to be configured. To enable the share, uncomment:"
1318
1319
#: serverguide/C/windows-networking.xml:871(programlisting)
1320
#, no-wrap
1321
msgid ""
1322
"\n"
1323
"[netlogon]\n"
1324
" comment = Network Logon Service\n"
1325
" path = /srv/samba/netlogon\n"
1326
" guest ok = yes\n"
1327
" read only = yes\n"
1328
" share modes = no\n"
1329
msgstr ""
1330
"\n"
1331
"[netlogon]\n"
1332
" comment = Network Logon Service\n"
1333
" path = /srv/samba/netlogon\n"
1334
" guest ok = yes\n"
1335
" read only = yes\n"
1336
" share modes = no\n"
1337
1338
#: serverguide/C/windows-networking.xml:881(para)
1339
msgid ""
1340
"The original <emphasis>netlogon</emphasis> share path is "
1341
"<filename>/home/samba/netlogon</filename>, but according to the Filesystem "
1342
"Hierarchy Standard (FHS), <ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
1343
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is the correct "
1344
"location for site-specific data provided by the system."
1345
msgstr ""
1346
"The original <emphasis>netlogon</emphasis> share path is "
1347
"<filename>/home/samba/netlogon</filename>, but according to the Filesystem "
1348
"Hierarchy Standard (FHS), <ulink url=\"http://www.pathname.com/fhs/pub/fhs-"
1349
"2.3.html#SRVDATAFORSERVICESPROVIDEDBYSYSTEM\">/srv</ulink> is the correct "
1350
"location for site-specific data provided by the system."
1351
1352
#: serverguide/C/windows-networking.xml:892(para)
1353
msgid ""
1354
"Now create the <filename role=\"directory\">netlogon</filename> directory, "
1355
"and an empty (for now) <filename>logon.cmd</filename> script file:"
1356
msgstr ""
1357
"Now create the <filename role=\"directory\">netlogon</filename> directory, "
1358
"and an empty (for now) <filename>logon.cmd</filename> script file:"
1359
1360
#: serverguide/C/windows-networking.xml:898(command)
1361
msgid "sudo mkdir -p /srv/samba/netlogon"
1362
msgstr "sudo mkdir -p /srv/samba/netlogon"
1363
1364
#: serverguide/C/windows-networking.xml:899(command)
1365
msgid "sudo touch /srv/samba/netlogon/logon.cmd"
1366
msgstr "sudo touch /srv/samba/netlogon/logon.cmd"
1367
1368
#: serverguide/C/windows-networking.xml:902(para)
1369
msgid ""
1370
"You can enter any normal Windows logon script commands in "
1371
"<filename>logon.cmd</filename> to customize the client's environment."
1372
msgstr ""
1373
"You can enter any normal Windows logon script commands in "
1374
"<filename>logon.cmd</filename> to customise the client's environment."
1375
1376
#: serverguide/C/windows-networking.xml:910(para)
1377
msgid ""
1378
"With <emphasis>root</emphasis> being disabled by default, in order to join a "
1379
"workstation to the domain, a system group needs to be mapped to the Windows "
1380
"<emphasis>Domain Admins</emphasis> group. Using the "
1381
"<application>net</application> utility, from a terminal enter:"
1382
msgstr ""
1383
"With <emphasis>root</emphasis> being disabled by default, in order to join a "
1384
"workstation to the domain, a system group needs to be mapped to the Windows "
1385
"<emphasis>Domain Admins</emphasis> group. Using the "
1386
"<application>net</application> utility, from a terminal enter:"
1387
1388
#: serverguide/C/windows-networking.xml:917(command)
1389
msgid ""
1390
"sudo net groupmap add ntgroup=\"Domain Admins\" unixgroup=sysadmin rid=512 "
1391
"type=d"
1392
msgstr ""
1393
"sudo net groupmap add ntgroup=\"Domain Admins\" unixgroup=sysadmin rid=512 "
1394
"type=d"
1395
1396
#: serverguide/C/windows-networking.xml:921(para)
1397
msgid ""
1398
"Change <emphasis role=\"italic\">sysadmin</emphasis> to whichever group you "
1399
"prefer. Also, the user used to join the domain needs to be a member of the "
1400
"<emphasis>sysadmin</emphasis> group, as well as a member of the system "
1401
"<emphasis>admin</emphasis> group. The <emphasis>admin</emphasis> group "
1402
"allows <application>sudo</application> use."
1403
msgstr ""
1404
"Change <emphasis role=\"italic\">sysadmin</emphasis> to whichever group you "
1405
"prefer. Also, the user used to join the domain needs to be a member of the "
1406
"<emphasis>sysadmin</emphasis> group, as well as a member of the system "
1407
"<emphasis>admin</emphasis> group. The <emphasis>admin</emphasis> group "
1408
"allows <application>sudo</application> use."
1409
1410
#: serverguide/C/windows-networking.xml:932(para)
1411
msgid "Finally, restart Samba to enable the new domain controller:"
1412
msgstr "Finally, restart Samba to enable the new domain controller:"
1413
1414
#: serverguide/C/windows-networking.xml:943(para)
1415
msgid ""
1416
"You should now be able to join Windows clients to the Domain in the same "
1417
"manner as joining them to an NT4 domain running on a Windows server."
1418
msgstr ""
1419
"You should now be able to join Windows clients to the Domain in the same "
1420
"manner as joining them to an NT4 domain running on a Windows server."
1421
1422
#: serverguide/C/windows-networking.xml:953(title)
1423
msgid "Backup Domain Controller"
1424
msgstr "Backup Domain Controller"
1425
1426
#: serverguide/C/windows-networking.xml:955(para)
1427
msgid ""
1428
"With a Primary Domain Controller (PDC) on the network it is best to have a "
1429
"Backup Domain Controller (BDC) as well. This will allow clients to "
1430
"authenticate in case the PDC becomes unavailable."
1431
msgstr ""
1432
"With a Primary Domain Controller (PDC) on the network it is best to have a "
1433
"Backup Domain Controller (BDC) as well. This will allow clients to "
1434
"authenticate in case the PDC becomes unavailable."
1435
1436
#: serverguide/C/windows-networking.xml:960(para)
1437
msgid ""
1438
"When configuring Samba as a BDC you need a way to sync account information "
1439
"with the PDC. There are multiple ways of accomplishing this "
1440
"<application>scp</application>, <application>rsync</application>, or by "
1441
"using <application>LDAP</application> as the <emphasis>passdb "
1442
"backend</emphasis>."
1443
msgstr ""
1444
"When configuring Samba as a BDC you need a way to sync account information "
1445
"with the PDC. There are multiple ways of accomplishing this "
1446
"<application>scp</application>, <application>rsync</application>, or by "
1447
"using <application>LDAP</application> as the <emphasis>passdb "
1448
"backend</emphasis>."
1449
1450
#: serverguide/C/windows-networking.xml:966(para)
1451
msgid ""
1452
"Using LDAP is the most robust way to sync account information, because both "
1453
"domain controllers can use the same information in real time. However, "
1454
"setting up a LDAP server may be overly complicated for a small number of "
1455
"user and computer accounts. See <xref linkend=\"samba-ldap\"/> for details."
1456
msgstr ""
1457
"Using LDAP is the most robust way to sync account information, because both "
1458
"domain controllers can use the same information in real time. However, "
1459
"setting up a LDAP server may be overly complicated for a small number of "
1460
"user and computer accounts. See <xref linkend=\"samba-ldap\"/> for details."
1461
1462
#: serverguide/C/windows-networking.xml:975(para)
1463
msgid ""
1464
"First, install <application>samba</application> and <application>libpam-"
1465
"smbpass</application>. From a terminal enter:"
1466
msgstr ""
1467
"First, install <application>samba</application> and <application>libpam-"
1468
"smbpass</application>. From a terminal enter:"
1469
1470
#: serverguide/C/windows-networking.xml:986(para)
1471
msgid ""
1472
"Now, edit <filename>/etc/samba/smb.conf</filename> and uncomment the "
1473
"following in the <emphasis>[global]</emphasis>:"
1474
msgstr ""
1475
"Now, edit <filename>/etc/samba/smb.conf</filename> and uncomment the "
1476
"following in the <emphasis>[global]</emphasis>:"
1477
1478
#: serverguide/C/windows-networking.xml:999(para)
1479
msgid "In the commented <emphasis>Domains</emphasis> uncomment or add:"
1480
msgstr "In the commented <emphasis>Domains</emphasis> uncomment or add:"
1481
1482
#: serverguide/C/windows-networking.xml:1003(programlisting)
1483
#, no-wrap
1484
msgid ""
1485
"\n"
1486
" domain logons = yes\n"
1487
" domain master = no\n"
1488
msgstr ""
1489
"\n"
1490
" domain logons = yes\n"
1491
" domain master = no\n"
1492
1493
#: serverguide/C/windows-networking.xml:1011(para)
1494
msgid ""
1495
"Make sure a user has rights to read the files in "
1496
"<filename>/var/lib/samba</filename>. For example, to allow users in the "
1497
"<emphasis>admin</emphasis> group to <application>scp</application> the "
1498
"files, enter:"
1499
msgstr ""
1500
"Make sure a user has rights to read the files in "
1501
"<filename>/var/lib/samba</filename>. For example, to allow users in the "
1502
"<emphasis>admin</emphasis> group to <application>scp</application> the "
1503
"files, enter:"
1504
1505
#: serverguide/C/windows-networking.xml:1017(command)
1506
msgid "sudo chgrp -R admin /var/lib/samba"
1507
msgstr "sudo chgrp -R admin /var/lib/samba"
1508
1509
#: serverguide/C/windows-networking.xml:1023(para)
1510
msgid ""
1511
"Next, sync the user accounts, using <application>scp</application> to copy "
1512
"the <filename>/var/lib/samba</filename> directory from the PDC:"
1513
msgstr ""
1514
"Next, sync the user accounts, using <application>scp</application> to copy "
1515
"the <filename>/var/lib/samba</filename> directory from the PDC:"
1516
1517
#: serverguide/C/windows-networking.xml:1029(command)
1518
msgid "sudo scp -r username@pdc:/var/lib/samba /var/lib"
1519
msgstr "sudo scp -r username@pdc:/var/lib/samba /var/lib"
1520
1521
#: serverguide/C/windows-networking.xml:1033(para)
1522
msgid ""
1523
"Replace <emphasis>username</emphasis> with a valid username and "
1524
"<emphasis>pdc</emphasis> with the hostname or IP Address of your actual PDC."
1525
msgstr ""
1526
"Replace <emphasis>username</emphasis> with a valid username and "
1527
"<emphasis>pdc</emphasis> with the hostname or IP Address of your actual PDC."
1528
1529
#: serverguide/C/windows-networking.xml:1042(para)
1530
msgid "Finally, restart <application>samba</application>:"
1531
msgstr "Finally, restart <application>samba</application>:"
1532
1533
#: serverguide/C/windows-networking.xml:1053(para)
1534
msgid ""
1535
"You can test that your Backup Domain controller is working by stopping the "
1536
"Samba daemon on the PDC, then trying to login to a Windows client joined to "
1537
"the domain."
1538
msgstr ""
1539
"You can test that your Backup Domain controller is working by stopping the "
1540
"Samba daemon on the PDC, then trying to login to a Windows client joined to "
1541
"the domain."
1542
1543
#: serverguide/C/windows-networking.xml:1058(para)
1544
msgid ""
1545
"Another thing to keep in mind is if you have configured the <emphasis>logon "
1546
"home</emphasis> option as a directory on the PDC, and the PDC becomes "
1547
"unavailable, access to the user's <emphasis>Home</emphasis> drive will also "
1548
"be unavailable. For this reason it is best to configure the <emphasis>logon "
1549
"home</emphasis> to reside on a separate file server from the PDC and BDC."
1550
msgstr ""
1551
"Another thing to keep in mind is if you have configured the <emphasis>logon "
1552
"home</emphasis> option as a directory on the PDC, and the PDC becomes "
1553
"unavailable, access to the user's <emphasis>Home</emphasis> drive will also "
1554
"be unavailable. For this reason it is best to configure the <emphasis>logon "
1555
"home</emphasis> to reside on a separate file server from the PDC and BDC."
1556
1557
#: serverguide/C/windows-networking.xml:1088(para)
1558
msgid ""
1559
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-"
1560
"pdc.html\">Chapter 4</ulink> of the Samba HOWTO Collection explains setting "
1561
"up a Primary Domain Controller."
1562
msgstr ""
1563
"<ulink url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-"
1564
"pdc.html\">Chapter 4</ulink> of the Samba HOWTO Collection explains setting "
1565
"up a Primary Domain Controller."
1566
1567
#: serverguide/C/windows-networking.xml:1094(para)
1568
msgid ""
1569
"<ulink url=\"http://us3.samba.org/samba/docs/man/Samba-HOWTO-"
1570
"Collection/samba-bdc.html\">Chapter 5</ulink> of the Samba HOWTO Collection "
1571
"explains setting up a Backup Domain Controller."
1572
msgstr ""
1573
"<ulink url=\"http://us3.samba.org/samba/docs/man/Samba-HOWTO-"
1574
"Collection/samba-bdc.html\">Chapter 5</ulink> of the Samba HOWTO Collection "
1575
"explains setting up a Backup Domain Controller."
1576
1577
#: serverguide/C/windows-networking.xml:1109(title)
1578
msgid "Samba Active Directory Integration"
1579
msgstr "Samba Active Directory Integration"
1580
1581
#: serverguide/C/windows-networking.xml:1112(title)
1582
msgid "Accessing a Samba Share"
1583
msgstr "Accessing a Samba Share"
1584
1585
#: serverguide/C/windows-networking.xml:1114(para)
1586
msgid ""
1587
"Another, use for Samba is to integrate into an existing Windows network. "
1588
"Once part of an Active Directory domain, Samba can provide file and print "
1589
"services to AD users."
1590
msgstr ""
1591
"Another, use for Samba is to integrate into an existing Windows network. "
1592
"Once part of an Active Directory domain, Samba can provide file and print "
1593
"services to AD users."
1594
1595
#: serverguide/C/windows-networking.xml:1119(para)
1596
msgid ""
1597
"The simplest way to join an AD domain is to use <application>Likewise-"
1598
"open</application>. For detailed instructions see <xref linkend=\"likewise-"
1599
"open\"/>."
1600
msgstr ""
1601
"The simplest way to join an AD domain is to use <application>Likewise-"
1602
"open</application>. For detailed instructions see <xref linkend=\"likewise-"
1603
"open\"/>."
1604
1605
#: serverguide/C/windows-networking.xml:1124(para)
1606
msgid ""
1607
"Once part of the domain, enter the following command in the terminal prompt:"
1608
msgstr ""
1609
"Once part of the domain, enter the following command in the terminal prompt:"
1610
1611
#: serverguide/C/windows-networking.xml:1129(command)
1612
msgid "sudo apt-get install samba smbfs smbclient"
1613
msgstr "sudo apt-get install samba smbfs smbclient"
1614
1615
#: serverguide/C/windows-networking.xml:1132(para)
1616
msgid ""
1617
"Since the <application>likewise-open</application> and "
1618
"<application>samba</application> packages use separate "
1619
"<filename>secrets.tdb</filename> files, a symlink will need to be created in "
1620
"<filename role=\"directory\">/var/lib/samba</filename>:"
1621
msgstr ""
1622
"Since the <application>likewise-open</application> and "
1623
"<application>samba</application> packages use separate "
1624
"<filename>secrets.tdb</filename> files, a symlink will need to be created in "
1625
"<filename role=\"directory\">/var/lib/samba</filename>:"
1626
1627
#: serverguide/C/windows-networking.xml:1138(command)
1628
msgid "sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig"
1629
msgstr "sudo mv /var/lib/samba/secrets.tdb /var/lib/samba/secrets.tdb.orig"
1630
1631
#: serverguide/C/windows-networking.xml:1139(command)
1632
msgid "sudo ln -s /etc/samba/secrets.tdb /var/lib/samba"
1633
msgstr "sudo ln -s /etc/samba/secrets.tdb /var/lib/samba"
1634
1635
#: serverguide/C/windows-networking.xml:1142(para)
1636
msgid "Next, edit <filename>/etc/samba/smb.conf</filename> changing:"
1637
msgstr "Next, edit <filename>/etc/samba/smb.conf</filename> changing:"
1638
1639
#: serverguide/C/windows-networking.xml:1146(programlisting)
1640
#, no-wrap
1641
msgid ""
1642
"\n"
1643
" workgroup = EXAMPLE\n"
1644
" ...\n"
1645
" security = ads\n"
1646
" realm = EXAMPLE.COM\n"
1647
" ...\n"
1648
" idmap backend = lwopen\n"
1649
" idmap uid = 50-9999999999\n"
1650
" idmap gid = 50-9999999999\n"
1651
msgstr ""
1652
"\n"
1653
" workgroup = EXAMPLE\n"
1654
" ...\n"
1655
" security = ads\n"
1656
" realm = EXAMPLE.COM\n"
1657
" ...\n"
1658
" idmap backend = lwopen\n"
1659
" idmap uid = 50-9999999999\n"
1660
" idmap gid = 50-9999999999\n"
1661
1662
#: serverguide/C/windows-networking.xml:1157(para)
1663
msgid ""
1664
"Restart <application>samba</application> for the new settings to take effect:"
1665
msgstr ""
1666
"Restart <application>samba</application> for the new settings to take effect:"
1667
1668
#: serverguide/C/windows-networking.xml:1165(para)
1669
msgid ""
1670
"You should now be able to access any <application>Samba</application> shares "
1671
"from a Windows client. However, be sure to give the appropriate AD users or "
1672
"groups access to the share directory. See <xref linkend=\"samba-fileprint-"
1673
"security\"/> for more details."
1674
msgstr ""
1675
"You should now be able to access any <application>Samba</application> shares "
1676
"from a Windows client. However, be sure to give the appropriate AD users or "
1677
"groups access to the share directory. See <xref linkend=\"samba-fileprint-"
1678
"security\"/> for more details."
1679
1680
#: serverguide/C/windows-networking.xml:1173(title)
1681
msgid "Accessing a Windows Share"
1682
msgstr "Accessing a Windows Share"
1683
1684
#: serverguide/C/windows-networking.xml:1175(para)
1685
msgid ""
1686
"Now that the Samba server is part of the Active Directory domain you can "
1687
"access any Windows server shares:"
1688
msgstr ""
1689
"Now that the Samba server is part of the Active Directory domain you can "
1690
"access any Windows server shares:"
1691
1692
#: serverguide/C/windows-networking.xml:1182(para)
1693
msgid ""
1694
"To mount a Windows file share enter the following in a terminal prompt:"
1695
msgstr ""
1696
"To mount a Windows file share enter the following in a terminal prompt:"
1697
1698
#: serverguide/C/windows-networking.xml:1186(command)
1699
msgid "mount.cifs //fs01.example.com/share mount_point"
1700
msgstr "mount.cifs //fs01.example.com/share mount_point"
1701
1702
#: serverguide/C/windows-networking.xml:1189(para)
1703
msgid ""
1704
"It is also possible to access shares on computers not part of an AD domain, "
1705
"but a username and password will need to be provided."
1706
msgstr ""
1707
"It is also possible to access shares on computers not part of an AD domain, "
1708
"but a username and password will need to be provided."
1709
1710
#: serverguide/C/windows-networking.xml:1197(para)
1711
msgid ""
1712
"To mount the share during boot place an entry in "
1713
"<filename>/etc/fstab</filename>, for example:"
1714
msgstr ""
1715
"To mount the share during boot place an entry in "
1716
"<filename>/etc/fstab</filename>, for example:"
1717
1718
#: serverguide/C/windows-networking.xml:1201(programlisting)
1719
#, no-wrap
1720
msgid ""
1721
"\n"
1722
"//192.168.0.5/share /mnt/windows cifs auto,username=steve,password=secret,rw "
1723
"0 0\n"
1724
msgstr ""
1725
"\n"
1726
"//192.168.0.5/share /mnt/windows cifs auto,username=steve,password=secret,rw "
1727
"0 0\n"
1728
1729
#: serverguide/C/windows-networking.xml:1208(para)
1730
msgid ""
1731
"Another way to copy files from a Windows server is to use the "
1732
"<application>smbclient</application> utility. To list the files in a Windows "
1733
"share:"
1734
msgstr ""
1735
"Another way to copy files from a Windows server is to use the "
1736
"<application>smbclient</application> utility. To list the files in a Windows "
1737
"share:"
1738
1739
#: serverguide/C/windows-networking.xml:1214(command)
1740
msgid "smbclient //fs01.example.com/share -k -c \"ls\""
1741
msgstr "smbclient //fs01.example.com/share -k -c \"ls\""
1742
1743
#: serverguide/C/windows-networking.xml:1220(para)
1744
msgid "To copy a file from the share, enter:"
1745
msgstr "To copy a file from the share, enter:"
1746
1747
#: serverguide/C/windows-networking.xml:1225(command)
1748
msgid "smbclient //fs01.example.com/share -k -c \"get file.txt\""
1749
msgstr "smbclient //fs01.example.com/share -k -c \"get file.txt\""
1750
1751
#: serverguide/C/windows-networking.xml:1228(para)
1752
msgid ""
1753
"This will copy the <filename>file.txt</filename> into the current directory."
1754
msgstr ""
1755
"This will copy the <filename>file.txt</filename> into the current directory."
1756
1757
#: serverguide/C/windows-networking.xml:1235(para)
1758
msgid "And to copy a file to the share:"
1759
msgstr "And to copy a file to the share:"
1760
1761
#: serverguide/C/windows-networking.xml:1240(command)
1762
msgid "smbclient //fs01.example.com/share -k -c \"put /etc/hosts hosts\""
1763
msgstr "smbclient //fs01.example.com/share -k -c \"put /etc/hosts hosts\""
1764
1765
#: serverguide/C/windows-networking.xml:1243(para)
1766
msgid ""
1767
"This will copy the <filename>/etc/hosts</filename> to "
1768
"<filename>//fs01.example.com/share/hosts</filename>."
1769
msgstr ""
1770
"This will copy the <filename>/etc/hosts</filename> to "
1771
"<filename>//fs01.example.com/share/hosts</filename>."
1772
1773
#: serverguide/C/windows-networking.xml:1250(para)
1774
msgid ""
1775
"The <emphasis>-c</emphasis> option used above allows you to execute the "
1776
"<application>smbclient</application> command all at once. This is useful for "
1777
"scripting and minor file operations. To enter the <emphasis>smb: \\"
1778
"></emphasis> prompt, a FTP like prompt where you can execute normal file "
1779
"and directory commands, simply execute:"
1780
msgstr ""
1781
"The <emphasis>-c</emphasis> option used above allows you to execute the "
1782
"<application>smbclient</application> command all at once. This is useful for "
1783
"scripting and minor file operations. To enter the <emphasis>smb: \\"
1784
"></emphasis> prompt, a FTP like prompt where you can execute normal file "
1785
"and directory commands, simply execute:"
1786
1787
#: serverguide/C/windows-networking.xml:1257(command)
1788
msgid "smbclient //fs01.example.com/share -k"
1789
msgstr "smbclient //fs01.example.com/share -k"
1790
1791
#: serverguide/C/windows-networking.xml:1264(para)
1792
msgid ""
1793
"Replace all instances of <emphasis>fs01.example.com/share</emphasis>, "
1794
"<emphasis>//192.168.0.5/share</emphasis>, "
1795
"<emphasis>username=steve,password=secret</emphasis>, and "
1796
"<emphasis>file.txt</emphasis> with your server's IP, hostname, share name, "
1797
"file name, and an actual username and password with rights to the share."
1798
msgstr ""
1799
"Replace all instances of <emphasis>fs01.example.com/share</emphasis>, "
1800
"<emphasis>//192.168.0.5/share</emphasis>, "
1801
"<emphasis>username=steve,password=secret</emphasis>, and "
1802
"<emphasis>file.txt</emphasis> with your server's IP, hostname, share name, "
1803
"file name, and an actual username and password with rights to the share."
1804
1805
#: serverguide/C/windows-networking.xml:1275(para)
1806
msgid ""
1807
"For more <application>smbclient</application> options see the man page: "
1808
"<command>man smbclient</command>, also available <ulink "
1809
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/smbclient.1.html\">on"
1810
"line</ulink>."
1811
msgstr ""
1812
1813
#: serverguide/C/windows-networking.xml:1280(para)
1814
msgid ""
1815
"The <application>mount.cifs</application><ulink "
1816
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/mount.cifs.8.html\">m"
1817
"an page</ulink> is also useful for more detailed information."
1818
msgstr ""
1819
1820
#: serverguide/C/windows-networking.xml:1293(title)
1821
msgid "Likewise Open"
1822
msgstr "Likewise Open"
1823
1824
#: serverguide/C/windows-networking.xml:1295(para)
1825
msgid ""
1826
"<application>Likewise Open</application> simplifies the necessary "
1827
"configuration needed to authenticate a Linux machine to an Active Directory "
1828
"domain. Based on <application>winbind</application>, the "
1829
"<application>likewise-open</application> package takes the pain out of "
1830
"integrating Ubuntu authentication into an existing Windows network."
1831
msgstr ""
1832
"<application>Likewise Open</application> simplifies the necessary "
1833
"configuration needed to authenticate a Linux machine to an Active Directory "
1834
"domain. Based on <application>winbind</application>, the "
1835
"<application>likewise-open</application> package takes the pain out of "
1836
"integrating Ubuntu authentication into an existing Windows network."
1837
1838
#: serverguide/C/windows-networking.xml:1304(para)
1839
msgid ""
1840
"There are two ways to use Likewise Open, <application>likewise-"
1841
"open</application> the command line utility and <application>likewise-open-"
1842
"gui</application>. This section focuses on the command line utility."
1843
msgstr ""
1844
"There are two ways to use Likewise Open, <application>likewise-"
1845
"open</application> the command line utility and <application>likewise-open-"
1846
"gui</application>. This section focuses on the command line utility."
1847
1848
#: serverguide/C/windows-networking.xml:1309(para)
1849
msgid ""
1850
"To install the <application>likewise-open</application> package, open a "
1851
"terminal prompt and enter:"
1852
msgstr ""
1853
"To install the <application>likewise-open</application> package, open a "
1854
"terminal prompt and enter:"
1855
1856
#: serverguide/C/windows-networking.xml:1314(command)
1857
msgid "sudo apt-get install likewise-open"
1858
msgstr "sudo apt-get install likewise-open"
1859
1860
#: serverguide/C/windows-networking.xml:1319(title)
1861
msgid "Joining a Domain"
1862
msgstr "Joining a Domain"
1863
1864
#: serverguide/C/windows-networking.xml:1321(para)
1865
msgid ""
1866
"The main executable file of the <application>likewise-open</application> "
1867
"package is <filename>/usr/bin/domainjoin-cli</filename>, which is used to "
1868
"join your computer to the domain. Before you join a domain you will need to "
1869
"make sure you have:"
1870
msgstr ""
1871
"The main executable file of the <application>likewise-open</application> "
1872
"package is <filename>/usr/bin/domainjoin-cli</filename>, which is used to "
1873
"join your computer to the domain. Before you join a domain you will need to "
1874
"make sure you have:"
1875
1876
#: serverguide/C/windows-networking.xml:1329(para)
1877
msgid ""
1878
"Access to an Active Directory user with appropriate rights to join the "
1879
"domain."
1880
msgstr ""
1881
"Access to an Active Directory user with appropriate rights to join the "
1882
"domain."
1883
1884
#: serverguide/C/windows-networking.xml:1334(para)
1885
msgid ""
1886
"The <emphasis>Fully Qualified Domain Name</emphasis> (FQDN) of the domain "
1887
"you want to join. If your AD domain does not match a valid domain such as "
1888
"<emphasis role=\"italic\">example.com</emphasis>, it is likely that it has "
1889
"the form of <emphasis>domainname.local</emphasis>."
1890
msgstr ""
1891
"The <emphasis>Fully Qualified Domain Name</emphasis> (FQDN) of the domain "
1892
"you want to join. If your AD domain does not match a valid domain such as "
1893
"<emphasis role=\"italic\">example.com</emphasis>, it is likely that it has "
1894
"the form of <emphasis>domainname.local</emphasis>."
1895
1896
#: serverguide/C/windows-networking.xml:1341(para)
1897
msgid ""
1898
"DNS for the domain setup properly. In a production AD environment this "
1899
"should be the case. Proper Microsoft DNS is needed so that client "
1900
"workstations can determine the Active Directory domain is available."
1901
msgstr ""
1902
"DNS for the domain setup properly. In a production AD environment this "
1903
"should be the case. Proper Microsoft DNS is needed so that client "
1904
"workstations can determine the Active Directory domain is available."
1905
1906
#: serverguide/C/windows-networking.xml:1345(para)
1907
msgid ""
1908
"If you don't have a Windows DNS server on your network, see <xref "
1909
"linkend=\"likewise-open-ms-dns\"/> for details."
1910
msgstr ""
1911
"If you don't have a Windows DNS server on your network, see <xref "
1912
"linkend=\"likewise-open-ms-dns\"/> for details."
1913
1914
#: serverguide/C/windows-networking.xml:1352(para)
1915
msgid "To join a domain, from a terminal prompt enter:"
1916
msgstr "To join a domain, from a terminal prompt enter:"
1917
1918
#: serverguide/C/windows-networking.xml:1357(command)
1919
msgid "sudo domainjoin-cli join example.com Administrator"
1920
msgstr "sudo domainjoin-cli join example.com Administrator"
1921
1922
#: serverguide/C/windows-networking.xml:1361(para)
1923
msgid ""
1924
"Replace <emphasis>example.com</emphasis> with your domain name, and "
1925
"<emphasis>Administrator</emphasis> with the appropriate user name."
1926
msgstr ""
1927
"Replace <emphasis>example.com</emphasis> with your domain name, and "
1928
"<emphasis>Administrator</emphasis> with the appropriate user name."
1929
1930
#: serverguide/C/windows-networking.xml:1367(para)
1931
msgid ""
1932
"You will then be prompted for the user's password. If all goes well a "
1933
"<emphasis>SUCCESS</emphasis> message should be printed to the console."
1934
msgstr ""
1935
"You will then be prompted for the user's password. If all goes well a "
1936
"<emphasis>SUCCESS</emphasis> message should be printed to the console."
1937
1938
#: serverguide/C/windows-networking.xml:1373(para)
1939
msgid ""
1940
"After joining the domain, it is necessary to reboot before attempting to "
1941
"authenticate against the domain."
1942
msgstr ""
1943
"After joining the domain, it is necessary to reboot before attempting to "
1944
"authenticate against the domain."
1945
1946
#: serverguide/C/windows-networking.xml:1379(para)
1947
msgid ""
1948
"After successfully joining an Ubuntu machine to an Active Directory domain "
1949
"you can authenticate using any valid AD user. To login you will need to "
1950
"enter the user name as 'domain\\username'. For example to ssh to a server "
1951
"joined to the domain enter:"
1952
msgstr ""
1953
"After successfully joining an Ubuntu machine to an Active Directory domain "
1954
"you can authenticate using any valid AD user. To login you will need to "
1955
"enter the user name as 'domain\\username'. For example to ssh to a server "
1956
"joined to the domain enter:"
1957
1958
#: serverguide/C/windows-networking.xml:1386(command)
1959
msgid "ssh 'example\\steve'@hostname"
1960
msgstr "ssh 'example\\steve'@hostname"
1961
1962
#: serverguide/C/windows-networking.xml:1390(para)
1963
msgid ""
1964
"If configuring a Desktop the user name will need to be prefixed with "
1965
"<emphasis role=\"italic\">domain\\</emphasis> in the graphical logon as well."
1966
msgstr ""
1967
"If configuring a Desktop the user name will need to be prefixed with "
1968
"<emphasis role=\"italic\">domain\\</emphasis> in the graphical logon as well."
1969
1970
#: serverguide/C/windows-networking.xml:1396(para)
1971
msgid ""
1972
"To make likewise-open use a default domain, you can add the following "
1973
"statement to <filename>/etc/samba/lwiauthd.conf</filename>:"
1974
msgstr ""
1975
"To make likewise-open use a default domain, you can add the following "
1976
"statement to <filename>/etc/samba/lwiauthd.conf</filename>:"
1977
1978
#: serverguide/C/windows-networking.xml:1400(programlisting)
1979
#, no-wrap
1980
msgid ""
1981
"\n"
1982
"winbind use default domain = yes\n"
1983
msgstr ""
1984
"\n"
1985
"winbind use default domain = yes\n"
1986
1987
#: serverguide/C/windows-networking.xml:1404(para)
1988
msgid "Then restart the <application>likewise-open</application> daemons:"
1989
msgstr "Then restart the <application>likewise-open</application> daemons:"
1990
1991
#: serverguide/C/windows-networking.xml:1409(command)
1992
msgid "sudo /etc/init.d/likewise-open restart"
1993
msgstr "sudo /etc/init.d/likewise-open restart"
1994
1995
#: serverguide/C/windows-networking.xml:1413(para)
1996
msgid ""
1997
"Once configured for a <emphasis>default domain</emphasis> the <emphasis "
1998
"role=\"italic\">'domain\\'</emphasis> is no longer required, users can login "
1999
"using only their username."
2000
msgstr ""
2001
"Once configured for a <emphasis>default domain</emphasis> the <emphasis "
2002
"role=\"italic\">'domain\\'</emphasis> is no longer required, users can login "
2003
"using only their username."
2004
2005
#: serverguide/C/windows-networking.xml:1419(para)
2006
msgid ""
2007
"The <application>domainjoin-cli</application> utility can also be used to "
2008
"leave the domain. From a terminal:"
2009
msgstr ""
2010
"The <application>domainjoin-cli</application> utility can also be used to "
2011
"leave the domain. From a terminal:"
2012
2013
#: serverguide/C/windows-networking.xml:1424(command)
2014
msgid "sudo domainjoin-cli leave"
2015
msgstr "sudo domainjoin-cli leave"
2016
2017
#: serverguide/C/windows-networking.xml:1429(title) serverguide/C/security.xml:1777(title)
2018
msgid "Other Utilities"
2019
msgstr "Other Utilities"
2020
2021
#: serverguide/C/windows-networking.xml:1431(para)
2022
msgid ""
2023
"The <application>likewise-open</application> package comes with a few other "
2024
"utilities that may be useful for gathering information about the Active "
2025
"Directory environment. These utilities are used to join the machine to the "
2026
"domain, and are the same as those available in the <application>samba-"
2027
"common</application> and <application>winbind</application> packages:"
2028
msgstr ""
2029
"The <application>likewise-open</application> package comes with a few other "
2030
"utilities that may be useful for gathering information about the Active "
2031
"Directory environment. These utilities are used to join the machine to the "
2032
"domain, and are the same as those available in the <application>samba-"
2033
"common</application> and <application>winbind</application> packages:"
2034
2035
#: serverguide/C/windows-networking.xml:1440(para)
2036
msgid ""
2037
"<application>lwinet</application>: Returns information about the network and "
2038
"the domain."
2039
msgstr ""
2040
"<application>lwinet</application>: Returns information about the network and "
2041
"the domain."
2042
2043
#: serverguide/C/windows-networking.xml:1445(para)
2044
msgid ""
2045
"<application>lwimsg</application>: Allows interaction with the "
2046
"<application>likewise-winbindd</application> daemon."
2047
msgstr ""
2048
"<application>lwimsg</application>: Allows interaction with the "
2049
"<application>likewise-winbindd</application> daemon."
2050
2051
#: serverguide/C/windows-networking.xml:1450(para)
2052
msgid ""
2053
"<application>lwiinfo</application>: Displays information about various parts "
2054
"of the Domain."
2055
msgstr ""
2056
"<application>lwiinfo</application>: Displays information about various parts "
2057
"of the Domain."
2058
2059
#: serverguide/C/windows-networking.xml:1456(para)
2060
msgid "Please refer to each utility's man page specific for details."
2061
msgstr "Please refer to each utility's man page specific for details."
2062
2063
#: serverguide/C/windows-networking.xml:1462(title) serverguide/C/mail.xml:351(title) serverguide/C/mail.xml:1598(title) serverguide/C/dns.xml:338(title)
2064
msgid "Troubleshooting"
2065
msgstr "Troubleshooting"
2066
2067
#: serverguide/C/windows-networking.xml:1466(para)
2068
msgid ""
2069
"If the client has trouble joining the domain, double check that the "
2070
"Microsoft DNS is listed first in <filename>/etc/resolv.conf</filename>. For "
2071
"example:"
2072
msgstr ""
2073
"If the client has trouble joining the domain, double check that the "
2074
"Microsoft DNS is listed first in <filename>/etc/resolv.conf</filename>. For "
2075
"example:"
2076
2077
#: serverguide/C/windows-networking.xml:1471(programlisting)
2078
#, no-wrap
2079
msgid ""
2080
"\n"
2081
"nameserver 192.168.0.1\n"
2082
msgstr ""
2083
"\n"
2084
"nameserver 192.168.0.1\n"
2085
2086
#: serverguide/C/windows-networking.xml:1476(para)
2087
msgid ""
2088
"For more information when joining a domain, use the <emphasis>--loglevel "
2089
"verbose</emphasis> or <emphasis>--advanced</emphasis> option of the "
2090
"<application>domainjoin-cli</application> utility:"
2091
msgstr ""
2092
"For more information when joining a domain, use the <emphasis>--loglevel "
2093
"verbose</emphasis> or <emphasis>--advanced</emphasis> option of the "
2094
"<application>domainjoin-cli</application> utility:"
2095
2096
#: serverguide/C/windows-networking.xml:1482(command)
2097
msgid "sudo domainjoin-cli --loglevel verbose join example.com Administrator"
2098
msgstr ""
2099
"sudo domainjoin-cli --loglevel verbose join example.com Administrator"
2100
2101
#: serverguide/C/windows-networking.xml:1486(para)
2102
msgid ""
2103
"If an Active Directory user has trouble logging in, check the "
2104
"<filename>/var/log/auth.log</filename> for details."
2105
msgstr ""
2106
"If an Active Directory user has trouble logging in, check the "
2107
"<filename>/var/log/auth.log</filename> for details."
2108
2109
#: serverguide/C/windows-networking.xml:1491(para)
2110
msgid ""
2111
"When joining an Ubuntu Desktop workstation to a domain, you may need to edit "
2112
"<filename>/etc/nsswitch.conf</filename> if your AD domain uses the <emphasis "
2113
"role=\"italic\">.local</emphasis> syntax. In order to join the domain the "
2114
"<emphasis>\"mdns4\"</emphasis> entry should be removed from the "
2115
"<emphasis>hosts</emphasis> option. For example:"
2116
msgstr ""
2117
"When joining an Ubuntu Desktop workstation to a domain, you may need to edit "
2118
"<filename>/etc/nsswitch.conf</filename> if your AD domain uses the <emphasis "
2119
"role=\"italic\">.local</emphasis> syntax. In order to join the domain the "
2120
"<emphasis>\"mdns4\"</emphasis> entry should be removed from the "
2121
"<emphasis>hosts</emphasis> option. For example:"
2122
2123
#: serverguide/C/windows-networking.xml:1497(programlisting)
2124
#, no-wrap
2125
msgid ""
2126
"\n"
2127
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
2128
msgstr ""
2129
"\n"
2130
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
2131
2132
#: serverguide/C/windows-networking.xml:1501(para)
2133
msgid "Change the above to:"
2134
msgstr "Change the above to:"
2135
2136
#: serverguide/C/windows-networking.xml:1505(programlisting)
2137
#, no-wrap
2138
msgid ""
2139
"\n"
2140
"hosts: files dns [NOTFOUND=return]\n"
2141
msgstr ""
2142
"\n"
2143
"hosts: files dns [NOTFOUND=return]\n"
2144
2145
#: serverguide/C/windows-networking.xml:1509(para)
2146
msgid "Then restart networking by entering:"
2147
msgstr "Then restart networking by entering:"
2148
2149
#: serverguide/C/windows-networking.xml:1514(command) serverguide/C/network-config.xml:559(command)
2150
msgid "sudo /etc/init.d/networking restart"
2151
msgstr "sudo /etc/init.d/networking restart"
2152
2153
#: serverguide/C/windows-networking.xml:1517(para)
2154
msgid "You should now be able to join the Active Directory domain."
2155
msgstr "You should now be able to join the Active Directory domain."
2156
2157
#: serverguide/C/windows-networking.xml:1525(title)
2158
msgid "Microsoft DNS"
2159
msgstr "Microsoft DNS"
2160
2161
#: serverguide/C/windows-networking.xml:1527(para)
2162
msgid ""
2163
"The following are instructions for installing DNS on an Active Directory "
2164
"domain controller running Windows Server 2003, but the instructions should "
2165
"be similar for other versions:"
2166
msgstr ""
2167
"The following are instructions for installing DNS on an Active Directory "
2168
"domain controller running Windows Server 2003, but the instructions should "
2169
"be similar for other versions:"
2170
2171
#: serverguide/C/windows-networking.xml:1536(para)
2172
msgid ""
2173
"Click "
2174
"<menuchoice><guimenuitem>Start</guimenuitem><guimenuitem>Administrative Tools"
2175
"</guimenuitem><guimenuitem>Manage Your Server</guimenuitem></menuchoice>. "
2176
"This will open the <application>Server Role Mangement</application> utility."
2177
msgstr ""
2178
"Click "
2179
"<menuchoice><guimenuitem>Start</guimenuitem><guimenuitem>Administrative Tools"
2180
"</guimenuitem><guimenuitem>Manage Your Server</guimenuitem></menuchoice>. "
2181
"This will open the <application>Server Role Mangement</application> utility."
2182
2183
#: serverguide/C/windows-networking.xml:1544(para)
2184
msgid "Click <guilabel>Add or remove a role</guilabel>"
2185
msgstr "Click <guilabel>Add or remove a role</guilabel>"
2186
2187
#: serverguide/C/windows-networking.xml:1545(para) serverguide/C/windows-networking.xml:1547(para) serverguide/C/windows-networking.xml:1550(para)
2188
msgid "Click Next"
2189
msgstr "Click Next"
2190
2191
#: serverguide/C/windows-networking.xml:1546(para)
2192
msgid "Select \"DNS Server\""
2193
msgstr "Select \"DNS Server\""
2194
2195
#: serverguide/C/windows-networking.xml:1548(para)
2196
msgid "Click Next again to proceed"
2197
msgstr "Click Next again to proceed"
2198
2199
#: serverguide/C/windows-networking.xml:1549(para)
2200
msgid "Select \"Create a forward lookup zone\" if it is not selected."
2201
msgstr "Select \"Create a forward lookup zone\" if it is not selected."
2202
2203
#: serverguide/C/windows-networking.xml:1551(para)
2204
msgid ""
2205
"Make sure \"This server maintains the zone\" is selected and click Next."
2206
msgstr ""
2207
"Make sure \"This server maintains the zone\" is selected and click Next."
2208
2209
#: serverguide/C/windows-networking.xml:1552(para)
2210
msgid "Enter your domain name and click Next"
2211
msgstr "Enter your domain name and click Next"
2212
2213
#: serverguide/C/windows-networking.xml:1553(para)
2214
msgid "Click Next to \"Allow only secure dynamic updates\""
2215
msgstr "Click Next to \"Allow only secure dynamic updates\""
2216
2217
#: serverguide/C/windows-networking.xml:1555(para)
2218
msgid ""
2219
"Enter the IP for DNS servers to forward queries to, or Select \"No, it "
2220
"should not forward queries\" and click Next."
2221
msgstr ""
2222
"Enter the IP for DNS servers to forward queries to, or Select \"No, it "
2223
"should not forward queries\" and click Next."
2224
2225
#: serverguide/C/windows-networking.xml:1559(para) serverguide/C/windows-networking.xml:1560(para)
2226
msgid "Click Finish"
2227
msgstr "Click Finish"
2228
2229
#: serverguide/C/windows-networking.xml:1562(para)
2230
msgid ""
2231
"DNS is now installed and can be further configured using the "
2232
"<application>Microsoft Management Console</application> DNS snap-in."
2233
msgstr ""
2234
"DNS is now installed and can be further configured using the "
2235
"<application>Microsoft Management Console</application> DNS snap-in."
2236
2237
#: serverguide/C/windows-networking.xml:1570(para)
2238
msgid "Click Start"
2239
msgstr "Click Start"
2240
2241
#: serverguide/C/windows-networking.xml:1571(para)
2242
msgid "Control Panel"
2243
msgstr "Control Panel"
2244
2245
#: serverguide/C/windows-networking.xml:1572(para)
2246
msgid "Network Connections"
2247
msgstr "Network Connections"
2248
2249
#: serverguide/C/windows-networking.xml:1573(para)
2250
msgid "Right Click \"Local Area Connection\""
2251
msgstr "Right Click \"Local Area Connection\""
2252
2253
#: serverguide/C/windows-networking.xml:1574(para)
2254
msgid "Click Properties"
2255
msgstr "Click Properties"
2256
2257
#: serverguide/C/windows-networking.xml:1575(para)
2258
msgid "Double click \"Internet Protocol (TCP/IP)\""
2259
msgstr "Double click \"Internet Protocol (TCP/IP)\""
2260
2261
#: serverguide/C/windows-networking.xml:1576(para)
2262
msgid "Enter the Server's IP Address as the \"Preferred DNS server\""
2263
msgstr "Enter the Server's IP Address as the \"Preferred DNS server\""
2264
2265
#: serverguide/C/windows-networking.xml:1577(para)
2266
msgid "Click Ok"
2267
msgstr "Click Ok"
2268
2269
#: serverguide/C/windows-networking.xml:1578(para)
2270
msgid "Click Ok again to save the settings"
2271
msgstr "Click Ok again to save the settings"
2272
2273
#: serverguide/C/windows-networking.xml:1567(para)
2274
msgid ""
2275
"Next, configure the Server to use itself for DNS queries: <placeholder-1/>"
2276
msgstr ""
2277
"Next, configure the Server to use itself for DNS queries: <placeholder-1/>"
2278
2279
#: serverguide/C/windows-networking.xml:1585(title) serverguide/C/web-servers.xml:624(title) serverguide/C/web-servers.xml:772(title) serverguide/C/web-servers.xml:922(title) serverguide/C/web-servers.xml:1017(title) serverguide/C/web-servers.xml:1239(title) serverguide/C/vpn.xml:303(title) serverguide/C/virtualization.xml:1840(title) serverguide/C/virtualization.xml:2165(title) serverguide/C/vcs.xml:539(title) serverguide/C/security.xml:877(title) serverguide/C/security.xml:1211(title) serverguide/C/security.xml:1626(title) serverguide/C/security.xml:1817(title) serverguide/C/remote-administration.xml:203(title) serverguide/C/package-management.xml:454(title) serverguide/C/other-apps.xml:330(title) serverguide/C/network-config.xml:1006(title) serverguide/C/network-config.xml:1107(title) serverguide/C/monitoring.xml:391(title) serverguide/C/monitoring.xml:527(title) serverguide/C/mail.xml:459(title) serverguide/C/mail.xml:643(title) serverguide/C/mail.xml:795(title) serverguide/C/mail.xml:1217(title) serverguide/C/mail.xml:1646(title) serverguide/C/lamp-applications.xml:259(title) serverguide/C/lamp-applications.xml:388(title) serverguide/C/lamp-applications.xml:496(title) serverguide/C/file-server.xml:284(title) serverguide/C/file-server.xml:436(title) serverguide/C/file-server.xml:619(title) serverguide/C/dns.xml:572(title) serverguide/C/clustering.xml:234(title) serverguide/C/chat.xml:107(title) serverguide/C/chat.xml:221(title) serverguide/C/backups.xml:297(title)
2280
msgid "References"
2281
msgstr "References"
2282
2283
#: serverguide/C/windows-networking.xml:1587(para)
2284
msgid ""
2285
"Please refer to the <ulink "
2286
"url=\"http://www.likewisesoftware.com/\">Likewise</ulink> home page for "
2287
"further information."
2288
msgstr ""
2289
"Please refer to the <ulink "
2290
"url=\"http://www.likewisesoftware.com/\">Likewise</ulink> home page for "
2291
"further information."
2292
2293
#: serverguide/C/windows-networking.xml:1591(para)
2294
msgid ""
2295
"For more <application>domainjoin-cli</application> options see the man page: "
2296
"<command>man domainjoin-cli</command>."
2297
msgstr ""
2298
"For more <application>domainjoin-cli</application> options see the man page: "
2299
"<command>man domainjoin-cli</command>."
2300
2301
#: serverguide/C/windows-networking.xml:1595(para)
2302
msgid ""
2303
"Also, see the <ulink "
2304
"url=\"https://help.ubuntu.com/community/LikewiseOpen\">Ubuntu Wiki "
2305
"LikewiseOpen</ulink> page."
2306
msgstr ""
2307
2308
#: serverguide/C/web-servers.xml:13(title)
2309
msgid "Web Servers"
2310
msgstr "Web Servers"
2311
2312
#: serverguide/C/web-servers.xml:14(para)
2313
msgid ""
2314
"A Web server is a software responsible for accepting HTTP requests from "
2315
"clients, which are known as Web browsers, and serving them HTTP responses "
2316
"along with optional data contents, which usually are Web pages such as HTML "
2317
"documents and linked objects (images, etc.)."
2318
msgstr ""
2319
"A Web server is a software responsible for accepting HTTP requests from "
2320
"clients, which are known as Web browsers, and serving them HTTP responses "
2321
"along with optional data contents, which usually are Web pages such as HTML "
2322
"documents and linked objects (images, etc.)."
2323
2324
#: serverguide/C/web-servers.xml:19(title)
2325
msgid "HTTPD - Apache2 Web Server"
2326
msgstr "HTTPD - Apache2 Web Server"
2327
2328
#: serverguide/C/web-servers.xml:20(para)
2329
msgid ""
2330
"Apache is the most commonly used Web Server on Linux systems. Web Servers "
2331
"are used to serve Web Pages requested by client computers. Clients typically "
2332
"request and view Web Pages using Web Browser applications such as "
2333
"<application>Firefox</application>, <application>Opera</application>, or "
2334
"<application>Mozilla</application>."
2335
msgstr ""
2336
"Apache is the most commonly used Web Server on Linux systems. Web Servers "
2337
"are used to serve Web Pages requested by client computers. Clients typically "
2338
"request and view Web Pages using Web Browser applications such as "
2339
"<application>Firefox</application>, <application>Opera</application>, or "
2340
"<application>Mozilla</application>."
2341
2342
#: serverguide/C/web-servers.xml:24(para)
2343
msgid ""
2344
"Users enter a Uniform Resource Locator (URL) to point to a Web server by "
2345
"means of its Fully Qualified Domain Name (FQDN) and a path to the required "
2346
"resource. For example, to view the home page of the <ulink "
2347
"url=\"http://www.ubuntu.com\">Ubuntu Web site</ulink> a user will enter only "
2348
"the FQDN. To request specific information about <ulink "
2349
"url=\"http://www.ubuntu.com/support/paid\">paid support</ulink>, a user will "
2350
"enter the FQDN followed by a path."
2351
msgstr ""
2352
"Users enter a Uniform Resource Locator (URL) to point to a Web server by "
2353
"means of its Fully Qualified Domain Name (FQDN) and a path to the required "
2354
"resource. For example, to view the home page of the <ulink "
2355
"url=\"http://www.ubuntu.com\">Ubuntu Web site</ulink> a user will enter only "
2356
"the FQDN. To request specific information about <ulink "
2357
"url=\"http://www.ubuntu.com/support/paid\">paid support</ulink>, a user will "
2358
"enter the FQDN followed by a path."
2359
2360
#: serverguide/C/web-servers.xml:29(para)
2361
msgid ""
2362
"The most common protocol used to transfer Web pages is the Hyper Text "
2363
"Transfer Protocol (HTTP). Protocols such as Hyper Text Transfer Protocol "
2364
"over Secure Sockets Layer (HTTPS), and File Transfer Protocol (FTP), a "
2365
"protocol for uploading and downloading files, are also supported."
2366
msgstr ""
2367
"The most common protocol used to transfer Web pages is the Hyper Text "
2368
"Transfer Protocol (HTTP). Protocols such as Hyper Text Transfer Protocol "
2369
"over Secure Sockets Layer (HTTPS), and File Transfer Protocol (FTP), a "
2370
"protocol for uploading and downloading files, are also supported."
2371
2372
#: serverguide/C/web-servers.xml:33(para)
2373
msgid ""
2374
"Apache Web Servers are often used in combination with the "
2375
"<application>MySQL</application> database engine, the HyperText Preprocessor "
2376
"(<application>PHP</application>) scripting language, and other popular "
2377
"scripting languages such as <application>Python</application> and "
2378
"<application>Perl</application>. This configuration is termed LAMP (Linux, "
2379
"Apache, MySQL and Perl/Python/PHP) and forms a powerful and robust platform "
2380
"for the development and deployment of Web-based applications."
2381
msgstr ""
2382
"Apache Web Servers are often used in combination with the "
2383
"<application>MySQL</application> database engine, the HyperText Preprocessor "
2384
"(<application>PHP</application>) scripting language, and other popular "
2385
"scripting languages such as <application>Python</application> and "
2386
"<application>Perl</application>. This configuration is termed LAMP (Linux, "
2387
"Apache, MySQL and Perl/Python/PHP) and forms a powerful and robust platform "
2388
"for the development and deployment of Web-based applications."
2389
2390
#: serverguide/C/web-servers.xml:42(para)
2391
msgid ""
2392
"The <application>Apache2</application> web server is available in Ubuntu "
2393
"Linux. To install Apache2:"
2394
msgstr ""
2395
"The <application>Apache2</application> web server is available in Ubuntu "
2396
"Linux. To install Apache2:"
2397
2398
#: serverguide/C/web-servers.xml:48(para)
2399
msgid "At a terminal prompt enter the following command:"
2400
msgstr "At a terminal prompt enter the following command:"
2401
2402
#: serverguide/C/web-servers.xml:53(command)
2403
msgid "sudo apt-get install apache2"
2404
msgstr "sudo apt-get install apache2"
2405
2406
#: serverguide/C/web-servers.xml:63(para)
2407
msgid ""
2408
"Apache2 is configured by placing <emphasis>directives</emphasis> in plain "
2409
"text configuration files. These <emphasis>directives</emphasis> are "
2410
"separated between the following files and directories:"
2411
msgstr ""
2412
"Apache2 is configured by placing <emphasis>directives</emphasis> in plain "
2413
"text configuration files. These <emphasis>directives</emphasis> are "
2414
"separated between the following files and directories:"
2415
2416
#: serverguide/C/web-servers.xml:71(para)
2417
msgid ""
2418
"<emphasis>apache2.conf:</emphasis> the main Apache2 configuration file. "
2419
"Contains settings that are <emphasis>global</emphasis> to Apache2."
2420
msgstr ""
2421
"<emphasis>apache2.conf:</emphasis> the main Apache2 configuration file. "
2422
"Contains settings that are <emphasis>global</emphasis> to Apache2."
2423
2424
#: serverguide/C/web-servers.xml:77(para)
2425
msgid ""
2426
"<emphasis>conf.d:</emphasis> contains configuration files which apply "
2427
"<emphasis>globally</emphasis> to Apache2. Other packages that use Apache2 to "
2428
"serve content may add files, or symlinks, to this directory."
2429
msgstr ""
2430
"<emphasis>conf.d:</emphasis> contains configuration files which apply "
2431
"<emphasis>globally</emphasis> to Apache2. Other packages that use Apache2 to "
2432
"serve content may add files, or symlinks, to this directory."
2433
2434
#: serverguide/C/web-servers.xml:83(para)
2435
msgid ""
2436
"<emphasis>envvars:</emphasis> file where Apache2 "
2437
"<emphasis>environment</emphasis> variables are set."
2438
msgstr ""
2439
"<emphasis>envvars:</emphasis> file where Apache2 "
2440
"<emphasis>environment</emphasis> variables are set."
2441
2442
#: serverguide/C/web-servers.xml:88(para)
2443
msgid ""
2444
"<emphasis>httpd.conf:</emphasis> historically the main Apache2 configuration "
2445
"file, named after the <application>httpd</application> daemon. The file can "
2446
"be used for <emphasis>user specific</emphasis> configuration options that "
2447
"globally effect Apache2."
2448
msgstr ""
2449
"<emphasis>httpd.conf:</emphasis> historically the main Apache2 configuration "
2450
"file, named after the <application>httpd</application> daemon. The file can "
2451
"be used for <emphasis>user specific</emphasis> configuration options that "
2452
"globally effect Apache2."
2453
2454
#: serverguide/C/web-servers.xml:95(para)
2455
msgid ""
2456
"<emphasis>mods-available:</emphasis> this directory contains configuration "
2457
"files to both load <emphasis>modules</emphasis> and configure them. Not all "
2458
"modules will have specific configuration files, however."
2459
msgstr ""
2460
"<emphasis>mods-available:</emphasis> this directory contains configuration "
2461
"files to both load <emphasis>modules</emphasis> and configure them. Not all "
2462
"modules will have specific configuration files, however."
2463
2464
#: serverguide/C/web-servers.xml:101(para)
2465
msgid ""
2466
"<emphasis>mods-enabled:</emphasis> holds <emphasis>symlinks</emphasis> to "
2467
"the files in <filename>/etc/apache2/mods-available</filename>. When a module "
2468
"configuration file is symlinked it will be enabled the next time "
2469
"<application>apache2</application> is restarted."
2470
msgstr ""
2471
"<emphasis>mods-enabled:</emphasis> holds <emphasis>symlinks</emphasis> to "
2472
"the files in <filename>/etc/apache2/mods-available</filename>. When a module "
2473
"configuration file is symlinked it will be enabled the next time "
2474
"<application>apache2</application> is restarted."
2475
2476
#: serverguide/C/web-servers.xml:108(para)
2477
msgid ""
2478
"<emphasis>ports.conf:</emphasis> houses the directives that determine which "
2479
"TCP ports Apache2 is listening on."
2480
msgstr ""
2481
"<emphasis>ports.conf:</emphasis> houses the directives that determine which "
2482
"TCP ports Apache2 is listening on."
2483
2484
#: serverguide/C/web-servers.xml:113(para)
2485
msgid ""
2486
"<emphasis>sites-available:</emphasis> this directory has configuration files "
2487
"for Apache2 <emphasis>Virtual Hosts</emphasis>. Virtual Hosts allow Apache2 "
2488
"to be configured for multiple sites that have separate configurations."
2489
msgstr ""
2490
"<emphasis>sites-available:</emphasis> this directory has configuration files "
2491
"for Apache2 <emphasis>Virtual Hosts</emphasis>. Virtual Hosts allow Apache2 "
2492
"to be configured for multiple sites that have separate configurations."
2493
2494
#: serverguide/C/web-servers.xml:119(para)
2495
msgid ""
2496
"<emphasis>sites-enabled:</emphasis> like mods-enabled, <filename "
2497
"role=\"directory\">sites-enabled</filename> contains symlinks to the "
2498
"<filename>/etc/apache2/sites-available</filename> directory. Similarly when "
2499
"a configuration file in sites-available is symlinked, the site configured by "
2500
"it will be active once Apache2 is restarted."
2501
msgstr ""
2502
"<emphasis>sites-enabled:</emphasis> like mods-enabled, <filename "
2503
"role=\"directory\">sites-enabled</filename> contains symlinks to the "
2504
"<filename>/etc/apache2/sites-available</filename> directory. Similarly when "
2505
"a configuration file in sites-available is symlinked, the site configured by "
2506
"it will be active once Apache2 is restarted."
2507
2508
#: serverguide/C/web-servers.xml:127(para)
2509
msgid ""
2510
"In addition, other configuration files may be added using the "
2511
"<emphasis>Include</emphasis> directive, and wildcards can be used to include "
2512
"many configuration files. Any directive may be placed in any of these "
2513
"configuration files. Changes to the main configuration files are only "
2514
"recognized by Apache2 when it is started or restarted."
2515
msgstr ""
2516
"In addition, other configuration files may be added using the "
2517
"<emphasis>Include</emphasis> directive, and wildcards can be used to include "
2518
"many configuration files. Any directive may be placed in any of these "
2519
"configuration files. Changes to the main configuration files are only "
2520
"recognised by Apache2 when it is started or restarted."
2521
2522
#: serverguide/C/web-servers.xml:136(para)
2523
msgid ""
2524
"The server also reads a file containing mime document types; the filename is "
2525
"set by the <emphasis>TypesConfig</emphasis> directive, and is "
2526
"<filename>/etc/mime.types</filename> by default."
2527
msgstr ""
2528
"The server also reads a file containing mime document types; the filename is "
2529
"set by the <emphasis>TypesConfig</emphasis> directive, and is "
2530
"<filename>/etc/mime.types</filename> by default."
2531
2532
#: serverguide/C/web-servers.xml:141(title)
2533
msgid "Basic Settings"
2534
msgstr "Basic Settings"
2535
2536
#: serverguide/C/web-servers.xml:142(para)
2537
msgid ""
2538
"This section explains Apache2 server essential configuration parameters. "
2539
"Refer to the <ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2540
"Documentation</ulink> for more details."
2541
msgstr ""
2542
"This section explains Apache2 server essential configuration parameters. "
2543
"Refer to the <ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
2544
"Documentation</ulink> for more details."
2545
2546
#: serverguide/C/web-servers.xml:150(para)
2547
msgid ""
2548
"Apache2 ships with a virtual-host-friendly default configuration. That is, "
2549
"it is configured with a single default virtual host (using the "
2550
"<emphasis>VirtualHost</emphasis> directive) which can modified or used as-is "
2551
"if you have a single site, or used as a template for additional virtual "
2552
"hosts if you have multiple sites. If left alone, the default virtual host "
2553
"will serve as your default site, or the site users will see if the URL they "
2554
"enter does not match the <emphasis>ServerName</emphasis> directive of any of "
2555
"your custom sites. To modify the default virtual host, edit the file "
2556
"<filename>/etc/apache2/sites-available/default</filename>."
2557
msgstr ""
2558
"Apache2 ships with a virtual-host-friendly default configuration. That is, "
2559
"it is configured with a single default virtual host (using the "
2560
"<emphasis>VirtualHost</emphasis> directive) which can modified or used as-is "
2561
"if you have a single site, or used as a template for additional virtual "
2562
"hosts if you have multiple sites. If left alone, the default virtual host "
2563
"will serve as your default site, or the site users will see if the URL they "
2564
"enter does not match the <emphasis>ServerName</emphasis> directive of any of "
2565
"your custom sites. To modify the default virtual host, edit the file "
2566
"<filename>/etc/apache2/sites-available/default</filename>."
2567
2568
#: serverguide/C/web-servers.xml:163(para)
2569
msgid ""
2570
"The directives set for a virtual host only apply to that particular virtual "
2571
"host. If a directive is set server-wide and not defined within the virtual "
2572
"host settings, the default setting is used. For example, you can define a "
2573
"Webmaster email address and not define individual email addresses for each "
2574
"virtual host."
2575
msgstr ""
2576
"The directives set for a virtual host only apply to that particular virtual "
2577
"host. If a directive is set server-wide and not defined within the virtual "
2578
"host settings, the default setting is used. For example, you can define a "
2579
"Webmaster e-mail address and not define individual e-mail addresses for each "
2580
"virtual host."
2581
2582
#: serverguide/C/web-servers.xml:171(para)
2583
msgid ""
2584
"If you wish to configure a new virtual host or site, copy that file into the "
2585
"same directory with a name you choose. For example:"
2586
msgstr ""
2587
"If you wish to configure a new virtual host or site, copy that file into the "
2588
"same directory with a name you choose. For example:"
2589
2590
#: serverguide/C/web-servers.xml:177(command)
2591
msgid ""
2592
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
2593
"available/mynewsite"
2594
msgstr ""
2595
"sudo cp /etc/apache2/sites-available/default /etc/apache2/sites-"
2596
"available/mynewsite"
2597
2598
#: serverguide/C/web-servers.xml:180(para)
2599
msgid ""
2600
"Edit the new file to configure the new site using some of the directives "
2601
"described below."
2602
msgstr ""
2603
"Edit the new file to configure the new site using some of the directives "
2604
"described below."
2605
2606
#: serverguide/C/web-servers.xml:187(para)
2607
msgid ""
2608
"The <emphasis>ServerAdmin</emphasis> directive specifies the email address "
2609
"to be advertised for the server's administrator. The default value is "
2610
"webmaster@localhost. This should be changed to an email address that is "
2611
"delivered to you (if you are the server's administrator). If your website "
2612
"has a problem, Apache2 will display an error message containing this email "
2613
"address to report the problem to. Find this directive in your site's "
2614
"configuration file in /etc/apache2/sites-available."
2615
msgstr ""
2616
"The <emphasis>ServerAdmin</emphasis> directive specifies the e-mail address "
2617
"to be advertised for the server's administrator. The default value is "
2618
"webmaster@localhost. This should be changed to an e-mail address that is "
2619
"delivered to you (if you are the server's administrator). If your website "
2620
"has a problem, Apache2 will display an error message containing this e-mail "
2621
"address to report the problem to. Find this directive in your site's "
2622
"configuration file in /etc/apache2/sites-available."
2623
2624
#: serverguide/C/web-servers.xml:198(para)
2625
msgid ""
2626
"The <emphasis>Listen</emphasis> directive specifies the port, and optionally "
2627
"the IP address, Apache2 should listen on. If the IP address is not "
2628
"specified, Apache2 will listen on all IP addresses assigned to the machine "
2629
"it runs on. The default value for the Listen directive is 80. Change this to "
2630
"127.0.0.1:80 to cause Apache2 to listen only on your loopback interface so "
2631
"that it will not be available to the Internet, to (for example) 81 to change "
2632
"the port that it listens on, or leave it as is for normal operation. This "
2633
"directive can be found and changed in its own file, "
2634
"<filename>/etc/apache2/ports.conf</filename>"
2635
msgstr ""
2636
"The <emphasis>Listen</emphasis> directive specifies the port, and optionally "
2637
"the IP address, Apache2 should listen on. If the IP address is not "
2638
"specified, Apache2 will listen on all IP addresses assigned to the machine "
2639
"it runs on. The default value for the Listen directive is 80. Change this to "
2640
"127.0.0.1:80 to cause Apache2 to listen only on your loopback interface so "
2641
"that it will not be available to the Internet, to (for example) 81 to change "
2642
"the port that it listens on, or leave it as is for normal operation. This "
2643
"directive can be found and changed in its own file, "
2644
"<filename>/etc/apache2/ports.conf</filename>"
2645
2646
#: serverguide/C/web-servers.xml:211(para)
2647
msgid ""
2648
"The <emphasis>ServerName</emphasis> directive is optional and specifies what "
2649
"FQDN your site should answer to. The default virtual host has no ServerName "
2650
"directive specified, so it will respond to all requests that do not match a "
2651
"ServerName directive in another virtual host. If you have just acquired the "
2652
"domain name ubunturocks.com and wish to host it on your Ubuntu server, the "
2653
"value of the ServerName directive in your virtual host configuration file "
2654
"should be ubunturocks.com. Add this directive to the new virtual host file "
2655
"you created earlier (<filename>/etc/apache2/sites-"
2656
"available/mynewsite</filename>)."
2657
msgstr ""
2658
"The <emphasis>ServerName</emphasis> directive is optional and specifies what "
2659
"FQDN your site should answer to. The default virtual host has no ServerName "
2660
"directive specified, so it will respond to all requests that do not match a "
2661
"ServerName directive in another virtual host. If you have just acquired the "
2662
"domain name ubunturocks.com and wish to host it on your Ubuntu server, the "
2663
"value of the ServerName directive in your virtual host configuration file "
2664
"should be ubunturocks.com. Add this directive to the new virtual host file "
2665
"you created earlier (<filename>/etc/apache2/sites-"
2666
"available/mynewsite</filename>)."
2667
2668
#: serverguide/C/web-servers.xml:223(para)
2669
msgid ""
2670
"You may also want your site to respond to www.ubunturocks.com, since many "
2671
"users will assume the www prefix is appropriate. Use the "
2672
"<emphasis>ServerAlias</emphasis> directive for this. You may also use "
2673
"wildcards in the ServerAlias directive."
2674
msgstr ""
2675
"You may also want your site to respond to www.ubunturocks.com, since many "
2676
"users will assume the www prefix is appropriate. Use the "
2677
"<emphasis>ServerAlias</emphasis> directive for this. You may also use "
2678
"wildcards in the ServerAlias directive."
2679
2680
#: serverguide/C/web-servers.xml:230(para)
2681
msgid ""
2682
"For example, the following configuration will cause your site to respond to "
2683
"any domain request ending in <emphasis>.ubunturocks.com</emphasis>."
2684
msgstr ""
2685
"For example, the following configuration will cause your site to respond to "
2686
"any domain request ending in <emphasis>.ubunturocks.com</emphasis>."
2687
2688
#: serverguide/C/web-servers.xml:236(programlisting)
2689
#, no-wrap
2690
msgid ""
2691
"\n"
2692
"ServerAlias *.ubunturocks.com\n"
2693
msgstr ""
2694
"\n"
2695
"ServerAlias *.ubunturocks.com\n"
2696
2697
#: serverguide/C/web-servers.xml:242(para)
2698
msgid ""
2699
"The <emphasis>DocumentRoot</emphasis> directive specifies where Apache2 "
2700
"should look for the files that make up the site. The default value is "
2701
"/var/www. No site is configured there, but if you uncomment the "
2702
"<emphasis>RedirectMatch</emphasis> directive in "
2703
"<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
2704
"to /var/www/apache2-default where the default Apache2 site awaits. Change "
2705
"this value in your site's virtual host file, and remember to create that "
2706
"directory if necessary!"
2707
msgstr ""
2708
"The <emphasis>DocumentRoot</emphasis> directive specifies where Apache2 "
2709
"should look for the files that make up the site. The default value is "
2710
"/var/www. No site is configured there, but if you uncomment the "
2711
"<emphasis>RedirectMatch</emphasis> directive in "
2712
"<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
2713
"to /var/www/apache2-default where the default Apache2 site awaits. Change "
2714
"this value in your site's virtual host file, and remember to create that "
2715
"directory if necessary!"
2716
2717
#: serverguide/C/web-servers.xml:254(para)
2718
msgid ""
2719
"The /etc/apache2/sites-available directory is <emphasis role=\"bold\"> "
2720
"not</emphasis> parsed by Apache2. Symbolic links in /etc/apache2/sites-"
2721
"enabled point to \"available\" sites."
2722
msgstr ""
2723
"The /etc/apache2/sites-available directory is <emphasis role=\"bold\"> "
2724
"not</emphasis> parsed by Apache2. Symbolic links in /etc/apache2/sites-"
2725
"enabled point to \"available\" sites."
2726
2727
#: serverguide/C/web-servers.xml:260(para)
2728
msgid ""
2729
"Enable the new <emphasis>VirtualHost</emphasis> using the "
2730
"<application>a2ensite</application> utility and restart Apache2:"
2731
msgstr ""
2732
"Enable the new <emphasis>VirtualHost</emphasis> using the "
2733
"<application>a2ensite</application> utility and restart Apache2:"
2734
2735
#: serverguide/C/web-servers.xml:266(command)
2736
msgid "sudo a2ensite mynewsite"
2737
msgstr "sudo a2ensite mynewsite"
2738
2739
#: serverguide/C/web-servers.xml:267(command) serverguide/C/web-servers.xml:285(command) serverguide/C/web-servers.xml:538(command) serverguide/C/web-servers.xml:547(command) serverguide/C/web-servers.xml:606(command) serverguide/C/mail.xml:932(command) serverguide/C/lamp-applications.xml:228(command)
2740
msgid "sudo /etc/init.d/apache2 restart"
2741
msgstr "sudo /etc/init.d/apache2 restart"
2742
2743
#: serverguide/C/web-servers.xml:271(para)
2744
msgid ""
2745
"Be sure to replace <emphasis>mynewsite</emphasis> with a more descriptive "
2746
"name for the VirtualHost. One method is to name the file after the "
2747
"<emphasis>ServerName</emphasis> directive of the VirtualHost."
2748
msgstr ""
2749
"Be sure to replace <emphasis>mynewsite</emphasis> with a more descriptive "
2750
"name for the VirtualHost. One method is to name the file after the "
2751
"<emphasis>ServerName</emphasis> directive of the VirtualHost."
2752
2753
#: serverguide/C/web-servers.xml:278(para)
2754
msgid ""
2755
"Similarly, use the <application>a2dissite</application> utility to disable "
2756
"sites. This is can be useful when troubleshooting configuration problems "
2757
"with multiple VirtualHosts:"
2758
msgstr ""
2759
"Similarly, use the <application>a2dissite</application> utility to disable "
2760
"sites. This is can be useful when troubleshooting configuration problems "
2761
"with multiple VirtualHosts:"
2762
2763
#: serverguide/C/web-servers.xml:284(command)
2764
msgid "sudo a2dissite mynewsite"
2765
msgstr "sudo a2dissite mynewsite"
2766
2767
#: serverguide/C/web-servers.xml:290(title)
2768
msgid "Default Settings"
2769
msgstr "Default Settings"
2770
2771
#: serverguide/C/web-servers.xml:292(para)
2772
msgid ""
2773
"This section explains configuration of the Apache2 server default settings. "
2774
"For example, if you add a virtual host, the settings you configure for the "
2775
"virtual host take precedence for that virtual host. For a directive not "
2776
"defined within the virtual host settings, the default value is used."
2777
msgstr ""
2778
"This section explains configuration of the Apache2 server default settings. "
2779
"For example, if you add a virtual host, the settings you configure for the "
2780
"virtual host take precedence for that virtual host. For a directive not "
2781
"defined within the virtual host settings, the default value is used."
2782
2783
#: serverguide/C/web-servers.xml:304(para)
2784
msgid ""
2785
"The <emphasis>DirectoryIndex</emphasis> is the default page served by the "
2786
"server when a user requests an index of a directory by specifying a forward "
2787
"slash (/) at the end of the directory name."
2788
msgstr ""
2789
"The <emphasis>DirectoryIndex</emphasis> is the default page served by the "
2790
"server when a user requests an index of a directory by specifying a forward "
2791
"slash (/) at the end of the directory name."
2792
2793
#: serverguide/C/web-servers.xml:311(para)
2794
msgid ""
2795
"For example, when a user requests the page "
2796
"http://www.example.com/this_directory/, he or she will get either the "
2797
"DirectoryIndex page if it exists, a server-generated directory list if it "
2798
"does not and the Indexes option is specified, or a Permission Denied page if "
2799
"neither is true. The server will try to find one of the files listed in the "
2800
"DirectoryIndex directive and will return the first one it finds. If it does "
2801
"not find any of these files and if <emphasis>Options Indexes</emphasis> is "
2802
"set for that directory, the server will generate and return a list, in HTML "
2803
"format, of the subdirectories and files in the directory. The default value, "
2804
"found in <filename>/etc/apache2/mods-available/dir.conf</filename> is "
2805
"\"index.html index.cgi index.pl index.php index.xhtml index.htm\". Thus, if "
2806
"Apache2 finds a file in a requested directory matching any of these names, "
2807
"the first will be displayed."
2808
msgstr ""
2809
"For example, when a user requests the page "
2810
"http://www.example.com/this_directory/, he or she will get either the "
2811
"DirectoryIndex page if it exists, a server-generated directory list if it "
2812
"does not and the Indexes option is specified, or a Permission Denied page if "
2813
"neither is true. The server will try to find one of the files listed in the "
2814
"DirectoryIndex directive and will return the first one it finds. If it does "
2815
"not find any of these files and if <emphasis>Options Indexes</emphasis> is "
2816
"set for that directory, the server will generate and return a list, in HTML "
2817
"format, of the subdirectories and files in the directory. The default value, "
2818
"found in <filename>/etc/apache2/mods-available/dir.conf</filename> is "
2819
"\"index.html index.cgi index.pl index.php index.xhtml index.htm\". Thus, if "
2820
"Apache2 finds a file in a requested directory matching any of these names, "
2821
"the first will be displayed."
2822
2823
#: serverguide/C/web-servers.xml:332(para)
2824
msgid ""
2825
"The <emphasis>ErrorDocument</emphasis> directive allows you to specify a "
2826
"file for Apache2 to use for specific error events. For example, if a user "
2827
"requests a resource that does not exist, a 404 error will occur, and per "
2828
"Apache2's default configuration, the file "
2829
"<filename>/usr/share/apache2/error/HTTP_NOT_FOUND.html.var </filename> will "
2830
"be displayed. That file is not in the server's DocumentRoot, but there is an "
2831
"Alias directive in <filename>/etc/apache2/apache2.conf</filename> that "
2832
"redirects requests to the /error directory to "
2833
"<filename>/usr/share/apache2/error/</filename>."
2834
msgstr ""
2835
"The <emphasis>ErrorDocument</emphasis> directive allows you to specify a "
2836
"file for Apache2 to use for specific error events. For example, if a user "
2837
"requests a resource that does not exist, a 404 error will occur, and per "
2838
"Apache2's default configuration, the file "
2839
"<filename>/usr/share/apache2/error/HTTP_NOT_FOUND.html.var </filename> will "
2840
"be displayed. That file is not in the server's DocumentRoot, but there is an "
2841
"Alias directive in <filename>/etc/apache2/apache2.conf</filename> that "
2842
"redirects requests to the /error directory to "
2843
"<filename>/usr/share/apache2/error/</filename>."
2844
2845
#: serverguide/C/web-servers.xml:344(para)
2846
msgid ""
2847
"To see a list of the default ErrorDocument directives, use this command:"
2848
msgstr ""
2849
"To see a list of the default ErrorDocument directives, use this command:"
2850
2851
#: serverguide/C/web-servers.xml:350(command)
2852
msgid "grep ErrorDocument /etc/apache2/apache2.conf"
2853
msgstr "grep ErrorDocument /etc/apache2/apache2.conf"
2854
2855
#: serverguide/C/web-servers.xml:355(para)
2856
msgid ""
2857
"By default, the server writes the transfer log to the file "
2858
"<filename>/var/log/apache2/access.log</filename>. You can change this on a "
2859
"per-site basis in your virtual host configuration files with the "
2860
"<emphasis>CustomLog</emphasis> directive, or omit it to accept the default, "
2861
"specified in <filename> /etc/apache2/apache2.conf</filename>. You may also "
2862
"specify the file to which errors are logged, via the "
2863
"<emphasis>ErrorLog</emphasis> directive, whose default is "
2864
"<filename>/var/log/apache2/error.log</filename>. These are kept separate "
2865
"from the transfer logs to aid in troubleshooting problems with your Apache2 "
2866
"server. You may also specify the <emphasis>LogLevel</emphasis> (the default "
2867
"value is \"warn\") and the <emphasis>LogFormat</emphasis> (see <filename> "
2868
"/etc/apache2/apache2.conf</filename> for the default value)."
2869
msgstr ""
2870
"By default, the server writes the transfer log to the file "
2871
"<filename>/var/log/apache2/access.log</filename>. You can change this on a "
2872
"per-site basis in your virtual host configuration files with the "
2873
"<emphasis>CustomLog</emphasis> directive, or omit it to accept the default, "
2874
"specified in <filename> /etc/apache2/apache2.conf</filename>. You may also "
2875
"specify the file to which errors are logged, via the "
2876
"<emphasis>ErrorLog</emphasis> directive, whose default is "
2877
"<filename>/var/log/apache2/error.log</filename>. These are kept separate "
2878
"from the transfer logs to aid in troubleshooting problems with your Apache2 "
2879
"server. You may also specify the <emphasis>LogLevel</emphasis> (the default "
2880
"value is \"warn\") and the <emphasis>LogFormat</emphasis> (see <filename> "
2881
"/etc/apache2/apache2.conf</filename> for the default value)."
2882
2883
#: serverguide/C/web-servers.xml:370(para)
2884
msgid ""
2885
"Some options are specified on a per-directory basis rather than per-server. "
2886
"<emphasis>Options</emphasis> is one of these directives. A Directory stanza "
2887
"is enclosed in XML-like tags, like so:"
2888
msgstr ""
2889
"Some options are specified on a per-directory basis rather than per-server. "
2890
"<emphasis>Options</emphasis> is one of these directives. A Directory stanza "
2891
"is enclosed in XML-like tags, like so:"
2892
2893
#: serverguide/C/web-servers.xml:376(programlisting)
2894
#, no-wrap
2895
msgid ""
2896
"\n"
2897
"<Directory /var/www/mynewsite>\n"
2898
"...\n"
2899
"</Directory>\n"
2900
msgstr ""
2901
"\n"
2902
"<Directory /var/www/mynewsite>\n"
2903
"...\n"
2904
"</Directory>\n"
2905
2906
#: serverguide/C/web-servers.xml:382(para)
2907
msgid ""
2908
"The <emphasis>Options</emphasis> directive within a Directory stanza accepts "
2909
"one or more of the following values (among others), separated by spaces:"
2910
msgstr ""
2911
"The <emphasis>Options</emphasis> directive within a Directory stanza accepts "
2912
"one or more of the following values (among others), separated by spaces:"
2913
2914
#: serverguide/C/web-servers.xml:394(para)
2915
msgid ""
2916
"Most files should not be executed as CGI scripts. This would be very "
2917
"dangerous. CGI scripts should kept in a directory separate from and outside "
2918
"your DocumentRoot, and only this directory should have the ExecCGI option "
2919
"set. This is the default, and the default location for CGI scripts is "
2920
"<filename>/usr/lib/cgi-bin</filename>."
2921
msgstr ""
2922
"Most files should not be executed as CGI scripts. This would be very "
2923
"dangerous. CGI scripts should kept in a directory separate from and outside "
2924
"your DocumentRoot, and only this directory should have the ExecCGI option "
2925
"set. This is the default, and the default location for CGI scripts is "
2926
"<filename>/usr/lib/cgi-bin</filename>."
2927
2928
#: serverguide/C/web-servers.xml:389(para)
2929
msgid ""
2930
"<emphasis role=\"bold\">ExecCGI</emphasis> - Allow execution of CGI scripts. "
2931
"CGI scripts are not executed if this option is not chosen. <placeholder-1/>"
2932
msgstr ""
2933
"<emphasis role=\"bold\">ExecCGI</emphasis> - Allow execution of CGI scripts. "
2934
"CGI scripts are not executed if this option is not chosen. <placeholder-1/>"
2935
2936
#: serverguide/C/web-servers.xml:405(para)
2937
msgid ""
2938
"<emphasis role=\"bold\">Includes</emphasis> - Allow server-side includes. "
2939
"Server-side includes allow an HTML file to <emphasis> include</emphasis> "
2940
"other files. This is not a common option. See <ulink "
2941
"url=\"http://httpd.apache.org/docs/2.2/howto/ssi.html\">the Apache2 SSI "
2942
"HOWTO</ulink> for more information."
2943
msgstr ""
2944
"<emphasis role=\"bold\">Includes</emphasis> - Allow server-side includes. "
2945
"Server-side includes allow an HTML file to <emphasis> include</emphasis> "
2946
"other files. This is not a common option. See <ulink "
2947
"url=\"http://httpd.apache.org/docs/2.2/howto/ssi.html\">the Apache2 SSI "
2948
"HOWTO</ulink> for more information."
2949
2950
#: serverguide/C/web-servers.xml:414(para)
2951
msgid ""
2952
"<emphasis role=\"bold\">IncludesNOEXEC</emphasis> - Allow server-side "
2953
"includes, but disable the <emphasis>#exec</emphasis> and "
2954
"<emphasis>#include</emphasis> commands in CGI scripts."
2955
msgstr ""
2956
"<emphasis role=\"bold\">IncludesNOEXEC</emphasis> - Allow server-side "
2957
"includes, but disable the <emphasis>#exec</emphasis> and "
2958
"<emphasis>#include</emphasis> commands in CGI scripts."
2959
2960
#: serverguide/C/web-servers.xml:426(para)
2961
msgid ""
2962
"For security reasons, this should usually not be set, and certainly should "
2963
"not be set on your DocumentRoot directory. Enable this option carefully on a "
2964
"per-directory basis only if you are certain you want users to see the entire "
2965
"contents of the directory."
2966
msgstr ""
2967
"For security reasons, this should usually not be set, and certainly should "
2968
"not be set on your DocumentRoot directory. Enable this option carefully on a "
2969
"per-directory basis only if you are certain you want users to see the entire "
2970
"contents of the directory."
2971
2972
#: serverguide/C/web-servers.xml:421(para)
2973
msgid ""
2974
"<emphasis role=\"bold\">Indexes</emphasis> - Display a formatted list of the "
2975
"directory's contents, if no <emphasis>DirectoryIndex</emphasis> (such as "
2976
"index.html) exists in the requested directory. <placeholder-1/>"
2977
msgstr ""
2978
"<emphasis role=\"bold\">Indexes</emphasis> - Display a formatted list of the "
2979
"directory's contents, if no <emphasis>DirectoryIndex</emphasis> (such as "
2980
"index.html) exists in the requested directory. <placeholder-1/>"
2981
2982
#: serverguide/C/web-servers.xml:436(para)
2983
msgid ""
2984
"<emphasis role=\"bold\">Multiview</emphasis> - Support content-negotiated "
2985
"multiviews; this option is disabled by default for security reasons. See the "
2986
"<ulink "
2987
"url=\"http://httpd.apache.org/docs/2.2/mod/mod_negotiation.html#multiviews\">"
2988
"Apache2 documentation on this option</ulink>."
2989
msgstr ""
2990
"<emphasis role=\"bold\">Multiview</emphasis> - Support content-negotiated "
2991
"multiviews; this option is disabled by default for security reasons. See the "
2992
"<ulink "
2993
"url=\"http://httpd.apache.org/docs/2.2/mod/mod_negotiation.html#multiviews\">"
2994
"Apache2 documentation on this option</ulink>."
2995
2996
#: serverguide/C/web-servers.xml:444(para)
2997
msgid ""
2998
"<emphasis role=\"bold\">SymLinksIfOwnerMatch</emphasis> - Only follow "
2999
"symbolic links if the target file or directory has the same owner as the "
3000
"link."
3001
msgstr ""
3002
"<emphasis role=\"bold\">SymLinksIfOwnerMatch</emphasis> - Only follow "
3003
"symbolic links if the target file or directory has the same owner as the "
3004
"link."
3005
3006
#: serverguide/C/web-servers.xml:456(title)
3007
msgid "httpd Settings"
3008
msgstr "httpd Settings"
3009
3010
#: serverguide/C/web-servers.xml:458(para)
3011
msgid ""
3012
"This section explains some basic <application>httpd</application> daemon "
3013
"configuration settings."
3014
msgstr ""
3015
"This section explains some basic <application>httpd</application> daemon "
3016
"configuration settings."
3017
3018
#: serverguide/C/web-servers.xml:462(para)
3019
msgid ""
3020
"<emphasis role=\"bold\">LockFile</emphasis> - The LockFile directive sets "
3021
"the path to the lockfile used when the server is compiled with either "
3022
"USE_FCNTL_SERIALIZED_ACCEPT or USE_FLOCK_SERIALIZED_ACCEPT. It must be "
3023
"stored on the local disk. It should be left to the default value unless the "
3024
"logs directory is located on an NFS share. If this is the case, the default "
3025
"value should be changed to a location on the local disk and to a directory "
3026
"that is readable only by root."
3027
msgstr ""
3028
"<emphasis role=\"bold\">LockFile</emphasis> - The LockFile directive sets "
3029
"the path to the lockfile used when the server is compiled with either "
3030
"USE_FCNTL_SERIALIZED_ACCEPT or USE_FLOCK_SERIALIZED_ACCEPT. It must be "
3031
"stored on the local disk. It should be left to the default value unless the "
3032
"logs directory is located on an NFS share. If this is the case, the default "
3033
"value should be changed to a location on the local disk and to a directory "
3034
"that is readable only by root."
3035
3036
#: serverguide/C/web-servers.xml:471(para)
3037
msgid ""
3038
"<emphasis role=\"bold\">PidFile</emphasis> - The PidFile directive sets the "
3039
"file in which the server records its process ID (pid). This file should only "
3040
"be readable by root. In most cases, it should be left to the default value."
3041
msgstr ""
3042
"<emphasis role=\"bold\">PidFile</emphasis> - The PidFile directive sets the "
3043
"file in which the server records its process ID (pid). This file should only "
3044
"be readable by root. In most cases, it should be left to the default value."
3045
3046
#: serverguide/C/web-servers.xml:477(para)
3047
msgid ""
3048
"<emphasis role=\"bold\">User</emphasis> - The User directive sets the userid "
3049
"used by the server to answer requests. This setting determines the server's "
3050
"access. Any files inaccessible to this user will also be inaccessible to "
3051
"your website's visitors. The default value for User is www-data."
3052
msgstr ""
3053
"<emphasis role=\"bold\">User</emphasis> - The User directive sets the userid "
3054
"used by the server to answer requests. This setting determines the server's "
3055
"access. Any files inaccessible to this user will also be inaccessible to "
3056
"your website's visitors. The default value for User is www-data."
3057
3058
#: serverguide/C/web-servers.xml:484(para)
3059
msgid ""
3060
"Unless you know exactly what you are doing, do not set the User directive to "
3061
"root. Using root as the User will create large security holes for your Web "
3062
"server."
3063
msgstr ""
3064
"Unless you know exactly what you are doing, do not set the User directive to "
3065
"root. Using root as the User will create large security holes for your Web "
3066
"server."
3067
3068
#: serverguide/C/web-servers.xml:490(para)
3069
msgid ""
3070
"The Group directive is similar to the User directive. Group sets the group "
3071
"under which the server will answer requests. The default group is also www-"
3072
"data."
3073
msgstr ""
3074
"The Group directive is similar to the User directive. Group sets the group "
3075
"under which the server will answer requests. The default group is also www-"
3076
"data."
3077
3078
#: serverguide/C/web-servers.xml:496(title)
3079
msgid "Apache2 Modules"
3080
msgstr "Apache2 Modules"
3081
3082
#: serverguide/C/web-servers.xml:498(para)
3083
msgid ""
3084
"Apache2 is a modular server. This implies that only the most basic "
3085
"functionality is included in the core server. Extended features are "
3086
"available through modules which can be loaded into Apache2. By default, a "
3087
"base set of modules is included in the server at compile-time. If the server "
3088
"is compiled to use dynamically loaded modules, then modules can be compiled "
3089
"separately, and added at any time using the LoadModule directive. Otherwise, "
3090
"Apache2 must be recompiled to add or remove modules."
3091
msgstr ""
3092
"Apache2 is a modular server. This implies that only the most basic "
3093
"functionality is included in the core server. Extended features are "
3094
"available through modules which can be loaded into Apache2. By default, a "
3095
"base set of modules is included in the server at compile-time. If the server "
3096
"is compiled to use dynamically loaded modules, then modules can be compiled "
3097
"separately, and added at any time using the LoadModule directive. Otherwise, "
3098
"Apache2 must be recompiled to add or remove modules."
3099
3100
#: serverguide/C/web-servers.xml:510(para)
3101
msgid ""
3102
"Ubuntu compiles Apache2 to allow the dynamic loading of modules. "
3103
"Configuration directives may be conditionally included on the presence of a "
3104
"particular module by enclosing them in an "
3105
"<emphasis><IfModule></emphasis> block."
3106
msgstr ""
3107
"Ubuntu compiles Apache2 to allow the dynamic loading of modules. "
3108
"Configuration directives may be conditionally included on the presence of a "
3109
"particular module by enclosing them in an "
3110
"<emphasis><IfModule></emphasis> block."
3111
3112
#: serverguide/C/web-servers.xml:517(para)
3113
msgid ""
3114
"You can install additional Apache2 modules and use them with your Web "
3115
"server. For example, run the following command from a terminal prompt to "
3116
"install the <emphasis>MySQL Authentication</emphasis> module:"
3117
msgstr ""
3118
"You can install additional Apache2 modules and use them with your Web "
3119
"server. For example, run the following command from a terminal prompt to "
3120
"install the <emphasis>MySQL Authentication</emphasis> module:"
3121
3122
#: serverguide/C/web-servers.xml:524(command)
3123
msgid "sudo apt-get install libapache2-mod-auth-mysql"
3124
msgstr "sudo apt-get install libapache2-mod-auth-mysql"
3125
3126
#: serverguide/C/web-servers.xml:527(para)
3127
msgid ""
3128
"See the <filename>/etc/apache2/mods-available</filename> directory, for "
3129
"additional modules."
3130
msgstr ""
3131
"See the <filename>/etc/apache2/mods-available</filename> directory, for "
3132
"additional modules."
3133
3134
#: serverguide/C/web-servers.xml:531(para)
3135
msgid ""
3136
"Use the <application>a2enmod</application> utility to enable a module:"
3137
msgstr ""
3138
"Use the <application>a2enmod</application> utility to enable a module:"
3139
3140
#: serverguide/C/web-servers.xml:537(command)
3141
msgid "sudo a2enmod auth_mysql"
3142
msgstr "sudo a2enmod auth_mysql"
3143
3144
#: serverguide/C/web-servers.xml:541(para)
3145
msgid "Similarly, <application>a2dismod</application> will disable a module:"
3146
msgstr ""
3147
"Similarly, <application>a2dismod</application> will disable a module:"
3148
3149
#: serverguide/C/web-servers.xml:546(command)
3150
msgid "sudo a2dismod auth_mysql"
3151
msgstr "sudo a2dismod auth_mysql"
3152
3153
#: serverguide/C/web-servers.xml:553(title)
3154
msgid "HTTPS Configuration"
3155
msgstr "HTTPS Configuration"
3156
3157
#: serverguide/C/web-servers.xml:555(para)
3158
msgid ""
3159
"The <application>mod_ssl</application> module adds an important feature to "
3160
"the Apache2 server - the ability to encrypt communications. Thus, when your "
3161
"browser is communicating using SSL, the https:// prefix is used at the "
3162
"beginning of the Uniform Resource Locator (URL) in the browser navigation "
3163
"bar."
3164
msgstr ""
3165
"The <application>mod_ssl</application> module adds an important feature to "
3166
"the Apache2 server - the ability to encrypt communications. Thus, when your "
3167
"browser is communicating using SSL, the https:// prefix is used at the "
3168
"beginning of the Uniform Resource Locator (URL) in the browser navigation "
3169
"bar."
3170
3171
#: serverguide/C/web-servers.xml:564(para)
3172
msgid ""
3173
"The <application>mod_ssl</application> module is available in "
3174
"<application>apache2-common</application> package. Execute the following "
3175
"command from a terminal prompt to enable the "
3176
"<application>mod_ssl</application> module:"
3177
msgstr ""
3178
"The <application>mod_ssl</application> module is available in "
3179
"<application>apache2-common</application> package. Execute the following "
3180
"command from a terminal prompt to enable the "
3181
"<application>mod_ssl</application> module:"
3182
3183
#: serverguide/C/web-servers.xml:571(command)
3184
msgid "sudo a2enmod ssl"
3185
msgstr "sudo a2enmod ssl"
3186
3187
#: serverguide/C/web-servers.xml:574(para)
3188
msgid ""
3189
"There is a default HTTPS configuration file in <filename>/etc/apache2/sites-"
3190
"available/default-ssl</filename>. In order for "
3191
"<application>Apache2</application> to provide HTTPS, a "
3192
"<emphasis>certificate</emphasis> and <emphasis>key</emphasis> file are also "
3193
"needed. The default HTTPS configuration will use a certificate and key "
3194
"generated by the <application>ssl-cert</application> package. They are good "
3195
"for testing, but the auto-generated certificate and key should be replaced "
3196
"by a certificate specific to the site or server. For information on "
3197
"generating a key and obtaining a certificate see <xref "
3198
"linkend=\"certificates-and-security\"/>"
3199
msgstr ""
3200
"There is a default HTTPS configuration file in <filename>/etc/apache2/sites-"
3201
"available/default-ssl</filename>. In order for "
3202
"<application>Apache2</application> to provide HTTPS, a "
3203
"<emphasis>certificate</emphasis> and <emphasis>key</emphasis> file are also "
3204
"needed. The default HTTPS configuration will use a certificate and key "
3205
"generated by the <application>ssl-cert</application> package. They are good "
3206
"for testing, but the auto-generated certificate and key should be replaced "
3207
"by a certificate specific to the site or server. For information on "
3208
"generating a key and obtaining a certificate see <xref "
3209
"linkend=\"certificates-and-security\"/>"
3210
3211
#: serverguide/C/web-servers.xml:584(para)
3212
msgid ""
3213
"To configure <application>Apache2</application> for HTTPS, enter the "
3214
"following:"
3215
msgstr ""
3216
"To configure <application>Apache2</application> for HTTPS, enter the "
3217
"following:"
3218
3219
#: serverguide/C/web-servers.xml:589(command)
3220
msgid "sudo a2ensite default-ssl"
3221
msgstr "sudo a2ensite default-ssl"
3222
3223
#: serverguide/C/web-servers.xml:593(para)
3224
msgid ""
3225
"The directories <filename>/etc/ssl/certs</filename> and "
3226
"<filename>/etc/ssl/private</filename> are the default locations. If you "
3227
"install the certificate and key in another directory make sure to change "
3228
"<emphasis>SSLCertificateFile</emphasis> and "
3229
"<emphasis>SSLCertificateKeyFile</emphasis> appropriately."
3230
msgstr ""
3231
"The directories <filename>/etc/ssl/certs</filename> and "
3232
"<filename>/etc/ssl/private</filename> are the default locations. If you "
3233
"install the certificate and key in another directory make sure to change "
3234
"<emphasis>SSLCertificateFile</emphasis> and "
3235
"<emphasis>SSLCertificateKeyFile</emphasis> appropriately."
3236
3237
#: serverguide/C/web-servers.xml:600(para)
3238
msgid ""
3239
"With Apache2 now configured for HTTPS, restart the service to enable the new "
3240
"settings:"
3241
msgstr ""
3242
"With Apache2 now configured for HTTPS, restart the service to enable the new "
3243
"settings:"
3244
3245
#: serverguide/C/web-servers.xml:611(para)
3246
msgid ""
3247
"Depending on how you obtained your certificate you may need to enter a "
3248
"passphrase when <application>Apache2</application> starts."
3249
msgstr ""
3250
"Depending on how you obtained your certificate you may need to enter a "
3251
"passphrase when <application>Apache2</application> starts."
3252
3253
#: serverguide/C/web-servers.xml:617(para)
3254
msgid ""
3255
"You can access the secure server pages by typing https://your_hostname/url/ "
3256
"in your browser address bar."
3257
msgstr ""
3258
"You can access the secure server pages by typing https://your_hostname/url/ "
3259
"in your browser address bar."
3260
3261
#: serverguide/C/web-servers.xml:628(para)
3262
msgid ""
3263
"<ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
3264
"Documentation</ulink> contains in depth information on Apache2 configuration "
3265
"directives. Also, see the <application>apache2-doc</application> package for "
3266
"the official Apache2 docs."
3267
msgstr ""
3268
"<ulink url=\"http://httpd.apache.org/docs/2.2/\">Apache2 "
3269
"Documentation</ulink> contains in depth information on Apache2 configuration "
3270
"directives. Also, see the <application>apache2-doc</application> package for "
3271
"the official Apache2 docs."
3272
3273
#: serverguide/C/web-servers.xml:635(para)
3274
msgid ""
3275
"See the <ulink url=\"http://www.modssl.org/docs/\">Mod SSL "
3276
"Documentation</ulink> site for more SSL related information."
3277
msgstr ""
3278
"See the <ulink url=\"http://www.modssl.org/docs/\">Mod SSL "
3279
"Documentation</ulink> site for more SSL related information."
3280
3281
#: serverguide/C/web-servers.xml:641(para)
3282
msgid ""
3283
"O'Reilly's <ulink url=\"http://oreilly.com/catalog/9780596001919/\">Apache "
3284
"Cookbook</ulink> is a good resource for accomplishing specific Apache2 "
3285
"configurations."
3286
msgstr ""
3287
"O'Reilly's <ulink url=\"http://oreilly.com/catalog/9780596001919/\">Apache "
3288
"Cookbook</ulink> is a good resource for accomplishing specific Apache2 "
3289
"configurations."
3290
3291
#: serverguide/C/web-servers.xml:647(para)
3292
msgid ""
3293
"For Ubuntu specific Apache2 questions, ask in the <emphasis>#ubuntu-"
3294
"server</emphasis> IRC channel on <ulink "
3295
"url=\"http://freenode.net/\">freenode.net</ulink>."
3296
msgstr ""
3297
"For Ubuntu specific Apache2 questions, ask in the <emphasis>#ubuntu-"
3298
"server</emphasis> IRC channel on <ulink "
3299
"url=\"http://freenode.net/\">freenode.net</ulink>."
3300
3301
#: serverguide/C/web-servers.xml:653(para)
3302
msgid ""
3303
"Usually integrated with PHP and MySQL the <ulink "
3304
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
3305
"Ubuntu Wiki </ulink> page is a good resource."
3306
msgstr ""
3307
3308
#: serverguide/C/web-servers.xml:664(title)
3309
msgid "PHP5 - Scripting Language"
3310
msgstr "PHP5 - Scripting Language"
3311
3312
#: serverguide/C/web-servers.xml:665(para)
3313
msgid ""
3314
"PHP is a general-purpose scripting language suited for Web development. The "
3315
"PHP script can be embedded into HTML. This section explains how to install "
3316
"and configure PHP5 in Ubuntu System with Apache2 and MySQL."
3317
msgstr ""
3318
"PHP is a general-purpose scripting language suited for Web development. The "
3319
"PHP script can be embedded into HTML. This section explains how to install "
3320
"and configure PHP5 in Ubuntu System with Apache2 and MySQL."
3321
3322
#: serverguide/C/web-servers.xml:669(para)
3323
msgid ""
3324
"This section assumes you have installed and configured Apache2 Web Server "
3325
"and MySQL Database Server. You can refer to Apache2 section and MySQL "
3326
"sections in this document to install and configure Apache2 and MySQL "
3327
"respectively."
3328
msgstr ""
3329
"This section assumes you have installed and configured Apache2 Web Server "
3330
"and MySQL Database Server. You can refer to Apache2 section and MySQL "
3331
"sections in this document to install and configure Apache2 and MySQL "
3332
"respectively."
3333
3334
#: serverguide/C/web-servers.xml:676(para)
3335
msgid "The PHP5 is available in Ubuntu Linux."
3336
msgstr "The PHP5 is available in Ubuntu Linux."
3337
3338
#: serverguide/C/web-servers.xml:678(para)
3339
msgid ""
3340
"To install PHP5 you can enter the following command in the terminal prompt: "
3341
"<screen>\n"
3342
"<command>sudo apt-get install php5 libapache2-mod-php5</command>\n"
3343
"</screen>"
3344
msgstr ""
3345
"To install PHP5 you can enter the following command in the terminal prompt: "
3346
"<screen>\n"
3347
"<command>sudo apt-get install php5 libapache2-mod-php5</command>\n"
3348
"</screen>"
3349
3350
#: serverguide/C/web-servers.xml:687(para)
3351
msgid ""
3352
"You can run PHP5 scripts from command line. To run PHP5 scripts from command "
3353
"line you should install <application>php5-cli</application> package. To "
3354
"install <application>php5-cli</application> you can enter the following "
3355
"command in the terminal prompt: <screen>\n"
3356
"<command>sudo apt-get install php5-cli</command>\n"
3357
"</screen>"
3358
msgstr ""
3359
"You can run PHP5 scripts from command line. To run PHP5 scripts from command "
3360
"line you should install <application>php5-cli</application> package. To "
3361
"install <application>php5-cli</application> you can enter the following "
3362
"command in the terminal prompt: <screen>\n"
3363
"<command>sudo apt-get install php5-cli</command>\n"
3364
"</screen>"
3365
3366
#: serverguide/C/web-servers.xml:696(para)
3367
msgid ""
3368
"You can also execute PHP5 scripts without installing PHP5 Apache module. To "
3369
"accomplish this, you should install <application>php5-cgi</application> "
3370
"package. You can run the following command in a terminal prompt to install "
3371
"<application>php5-cgi</application> package: <screen>\n"
3372
"<command>sudo apt-get install php5-cgi</command>\n"
3373
"</screen>"
3374
msgstr ""
3375
"You can also execute PHP5 scripts without installing PHP5 Apache module. To "
3376
"accomplish this, you should install <application>php5-cgi</application> "
3377
"package. You can run the following command in a terminal prompt to install "
3378
"<application>php5-cgi</application> package: <screen>\n"
3379
"<command>sudo apt-get install php5-cgi</command>\n"
3380
"</screen>"
3381
3382
#: serverguide/C/web-servers.xml:706(para)
3383
msgid ""
3384
"To use <application>MySQL</application> with PHP5 you should install "
3385
"<application>php5-mysql</application> package. To install <application>php5-"
3386
"mysql</application> you can enter the following command in the terminal "
3387
"prompt: <screen>\n"
3388
"<command>sudo apt-get install php5-mysql</command>\n"
3389
"</screen>"
3390
msgstr ""
3391
"To use <application>MySQL</application> with PHP5 you should install "
3392
"<application>php5-mysql</application> package. To install <application>php5-"
3393
"mysql</application> you can enter the following command in the terminal "
3394
"prompt: <screen>\n"
3395
"<command>sudo apt-get install php5-mysql</command>\n"
3396
"</screen>"
3397
3398
#: serverguide/C/web-servers.xml:714(para)
3399
msgid ""
3400
"Similarly, to use <application>PostgreSQL</application> with PHP5 you should "
3401
"install <application>php5-pgsql</application> package. To install "
3402
"<application>php5-pgsql</application> you can enter the following command in "
3403
"the terminal prompt: <screen>\n"
3404
"<command>sudo apt-get install php5-pgsql</command>\n"
3405
"</screen>"
3406
msgstr ""
3407
"Similarly, to use <application>PostgreSQL</application> with PHP5 you should "
3408
"install <application>php5-pgsql</application> package. To install "
3409
"<application>php5-pgsql</application> you can enter the following command in "
3410
"the terminal prompt: <screen>\n"
3411
"<command>sudo apt-get install php5-pgsql</command>\n"
3412
"</screen>"
3413
3414
#: serverguide/C/web-servers.xml:727(para)
3415
msgid ""
3416
"Once you install PHP5, you can run PHP5 scripts from your web browser. If "
3417
"you have installed <application>php5-cli</application> package, you can run "
3418
"PHP5 scripts from your command prompt."
3419
msgstr ""
3420
"Once you install PHP5, you can run PHP5 scripts from your web browser. If "
3421
"you have installed <application>php5-cli</application> package, you can run "
3422
"PHP5 scripts from your command prompt."
3423
3424
#: serverguide/C/web-servers.xml:734(para)
3425
msgid ""
3426
"By default, the Apache 2 Web server is configured to run PHP5 scripts. In "
3427
"other words, the PHP5 module is enabled in Apache2 Web server automatically "
3428
"when you install the module. Please verify if the files "
3429
"<filename>/etc/apache2/mods-enabled/php5.conf</filename> and "
3430
"<filename>/etc/apache2/mods-enabled/php5.load</filename> exist. If they do "
3431
"not exists, you can enable the module using <command>a2enmod</command> "
3432
"command."
3433
msgstr ""
3434
"By default, the Apache 2 Web server is configured to run PHP5 scripts. In "
3435
"other words, the PHP5 module is enabled in Apache2 Web server automatically "
3436
"when you install the module. Please verify if the files "
3437
"<filename>/etc/apache2/mods-enabled/php5.conf</filename> and "
3438
"<filename>/etc/apache2/mods-enabled/php5.load</filename> exist. If they do "
3439
"not exists, you can enable the module using <command>a2enmod</command> "
3440
"command."
3441
3442
#: serverguide/C/web-servers.xml:745(para)
3443
msgid ""
3444
"Once you install PHP5 related packages and enabled PHP5 Apache 2 module, you "
3445
"should restart Apache2 Web server to run PHP5 scripts. You can run the "
3446
"following command at a terminal prompt to restart your web server: "
3447
"<screen><command>sudo /etc/init.d/apache2 restart</command> </screen>"
3448
msgstr ""
3449
"Once you install PHP5 related packages and enabled PHP5 Apache 2 module, you "
3450
"should restart Apache2 Web server to run PHP5 scripts. You can run the "
3451
"following command at a terminal prompt to restart your Web server: "
3452
"<screen><command>sudo /etc/init.d/apache2 restart</command> </screen>"
3453
3454
#: serverguide/C/web-servers.xml:753(title) serverguide/C/mail.xml:320(title) serverguide/C/mail.xml:1569(title) serverguide/C/dns.xml:343(title) serverguide/C/clustering.xml:184(title)
3455
msgid "Testing"
3456
msgstr "Testing"
3457
3458
#: serverguide/C/web-servers.xml:754(para)
3459
msgid ""
3460
"To verify your installation, you can run following PHP5 phpinfo script:"
3461
msgstr ""
3462
"To verify your installation, you can run following PHP5 phpinfo script:"
3463
3464
#: serverguide/C/web-servers.xml:757(programlisting)
3465
#, no-wrap
3466
msgid ""
3467
"\n"
3468
"<?php\n"
3469
" phpinfo();\n"
3470
"?>\n"
3471
msgstr ""
3472
"\n"
3473
"<?php\n"
3474
" phpinfo();\n"
3475
"?>\n"
3476
3477
#: serverguide/C/web-servers.xml:762(para)
3478
msgid ""
3479
"You can save the content in a file <filename>phpinfo.php</filename> and "
3480
"place it under <command>DocumentRoot</command> directory of Apache2 Web "
3481
"server. When point your browser to "
3482
"<filename>http://hostname/phpinfo.php</filename>, it would display values of "
3483
"various PHP5 configuration parameters."
3484
msgstr ""
3485
"You can save the content in a file <filename>phpinfo.php</filename> and "
3486
"place it under <command>DocumentRoot</command> directory of Apache2 Web "
3487
"server. When point your browser to "
3488
"<filename>http://hostname/phpinfo.php</filename>, it would display values of "
3489
"various PHP5 configuration parameters."
3490
3491
#: serverguide/C/web-servers.xml:776(para)
3492
msgid ""
3493
"For more in depth information see <ulink "
3494
"url=\"http://www.php.net/docs.php\">php.net</ulink> documentation."
3495
msgstr ""
3496
"For more in depth information see <ulink "
3497
"url=\"http://www.php.net/docs.php\">php.net</ulink> documentation."
3498
3499
#: serverguide/C/web-servers.xml:781(para)
3500
msgid ""
3501
"There are a plethora of books on PHP. Two good books from O'Reilly are "
3502
"<ulink url=\"http://oreilly.com/catalog/9780596005603/\">Learning PHP "
3503
"5</ulink> and the <ulink "
3504
"url=\"http://oreilly.com/catalog/9781565926813/\">PHP Cook Book</ulink>."
3505
msgstr ""
3506
"There are a plethora of books on PHP. Two good books from O'Reilly are "
3507
"<ulink url=\"http://oreilly.com/catalog/9780596005603/\">Learning PHP "
3508
"5</ulink> and the <ulink "
3509
"url=\"http://oreilly.com/catalog/9781565926813/\">PHP Cook Book</ulink>."
3510
3511
#: serverguide/C/web-servers.xml:788(para)
3512
msgid ""
3513
"Also, see the <ulink "
3514
"url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache MySQL PHP "
3515
"Ubuntu Wiki</ulink> page for more information."
3516
msgstr ""
3517
3518
#: serverguide/C/web-servers.xml:799(title)
3519
msgid "Squid - Proxy Server"
3520
msgstr "Squid - Proxy Server"
3521
3522
#: serverguide/C/web-servers.xml:800(para)
3523
msgid ""
3524
"Squid is a full-featured web proxy cache server application which provides "
3525
"proxy and cache services for Hyper Text Transport Protocol (HTTP), File "
3526
"Transfer Protocol (FTP), and other popular network protocols. Squid can "
3527
"implement caching and proxying of Secure Sockets Layer (SSL) requests and "
3528
"caching of Domain Name Server (DNS) lookups, and perform transparent "
3529
"caching. Squid also supports a wide variety of caching protocols, such as "
3530
"Internet Cache Protocol, (ICP) the Hyper Text Caching Protocol, (HTCP) the "
3531
"Cache Array Routing Protocol (CARP), and the Web Cache Coordination "
3532
"Protocol. (WCCP)"
3533
msgstr ""
3534
"Squid is a full-featured Web proxy cache server application which provides "
3535
"proxy and cache services for Hyper Text Transport Protocol (HTTP), File "
3536
"Transfer Protocol (FTP), and other popular network protocols. Squid can "
3537
"implement caching and proxying of Secure Sockets Layer (SSL) requests and "
3538
"caching of Domain Name Server (DNS) lookups, and perform transparent "
3539
"caching. Squid also supports a wide variety of caching protocols, such as "
3540
"Internet Cache Protocol, (ICP) the Hyper Text Caching Protocol, (HTCP) the "
3541
"Cache Array Routing Protocol (CARP), and the Web Cache Coordination "
3542
"Protocol. (WCCP)"
3543
3544
#: serverguide/C/web-servers.xml:808(para)
3545
msgid ""
3546
"The Squid proxy cache server is an excellent solution to a variety of proxy "
3547
"and caching server needs, and scales from the branch office to enterprise "
3548
"level networks while providing extensive, granular access control mechanisms "
3549
"and monitoring of critical parameters via the Simple Network Management "
3550
"Protocol (SNMP). When selecting a computer system for use as a dedicated "
3551
"Squid proxy, or caching servers, ensure your system is configured with a "
3552
"large amount of physical memory, as Squid maintains an in-memory cache for "
3553
"increased performance."
3554
msgstr ""
3555
"The Squid proxy cache server is an excellent solution to a variety of proxy "
3556
"and caching server needs, and scales from the branch office to enterprise "
3557
"level networks while providing extensive, granular access control mechanisms "
3558
"and monitoring of critical parameters via the Simple Network Management "
3559
"Protocol (SNMP). When selecting a computer system for use as a dedicated "
3560
"Squid proxy, or caching servers, ensure your system is configured with a "
3561
"large amount of physical memory, as Squid maintains an in-memory cache for "
3562
"increased performance."
3563
3564
#: serverguide/C/web-servers.xml:817(para)
3565
msgid ""
3566
"At a terminal prompt, enter the following command to install the Squid "
3567
"server:"
3568
msgstr ""
3569
"At a terminal prompt, enter the following command to install the Squid "
3570
"server:"
3571
3572
#: serverguide/C/web-servers.xml:822(command)
3573
msgid "sudo apt-get install squid"
3574
msgstr "sudo apt-get install squid"
3575
3576
#: serverguide/C/web-servers.xml:828(para)
3577
msgid ""
3578
"Squid is configured by editing the directives contained within the "
3579
"<filename>/etc/squid/squid.conf</filename> configuration file. The following "
3580
"examples illustrate some of the directives which may be modified to affect "
3581
"the behavior of the Squid server. For more in-depth configuration of Squid, "
3582
"see the References section."
3583
msgstr ""
3584
"Squid is configured by editing the directives contained within the "
3585
"<filename>/etc/squid/squid.conf</filename> configuration file. The following "
3586
"examples illustrate some of the directives which may be modified to affect "
3587
"the behaviour of the Squid server. For more in-depth configuration of Squid, "
3588
"see the References section."
3589
3590
#: serverguide/C/web-servers.xml:834(para)
3591
msgid ""
3592
"Prior to editing the configuration file, you should make a copy of the "
3593
"original file and protect it from writing so you will have the original "
3594
"settings as a reference, and to re-use as necessary."
3595
msgstr ""
3596
"Prior to editing the configuration file, you should make a copy of the "
3597
"original file and protect it from writing so you will have the original "
3598
"settings as a reference, and to re-use as necessary."
3599
3600
#: serverguide/C/web-servers.xml:837(para)
3601
msgid ""
3602
"Copy the <filename>/etc/squid/squid.conf</filename> file and protect it from "
3603
"writing with the following commands entered at a terminal prompt:"
3604
msgstr ""
3605
"Copy the <filename>/etc/squid/squid.conf</filename> file and protect it from "
3606
"writing with the following commands entered at a terminal prompt:"
3607
3608
#: serverguide/C/web-servers.xml:842(command)
3609
msgid "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"
3610
msgstr "sudo cp /etc/squid/squid.conf /etc/squid/squid.conf.original"
3611
3612
#: serverguide/C/web-servers.xml:843(command)
3613
msgid "sudo chmod a-w /etc/squid/squid.conf.original"
3614
msgstr "sudo chmod a-w /etc/squid/squid.conf.original"
3615
3616
#: serverguide/C/web-servers.xml:849(para)
3617
msgid ""
3618
"To set your Squid server to listen on TCP port 8888 instead of the default "
3619
"TCP port 3128, change the http_port directive as such:"
3620
msgstr ""
3621
"To set your Squid server to listen on TCP port 8888 instead of the default "
3622
"TCP port 3128, change the http_port directive as such:"
3623
3624
#: serverguide/C/web-servers.xml:853(programlisting)
3625
#, no-wrap
3626
msgid ""
3627
"\n"
3628
"http_port 8888\n"
3629
msgstr ""
3630
"\n"
3631
"http_port 8888\n"
3632
3633
#: serverguide/C/web-servers.xml:858(para)
3634
msgid ""
3635
"Change the visible_hostname directive in order to give the Squid server a "
3636
"specific hostname. This hostname does not necessarily need to be the "
3637
"computer's hostname. In this example it is set to <emphasis>weezie</emphasis>"
3638
msgstr ""
3639
"Change the visible_hostname directive in order to give the Squid server a "
3640
"specific hostname. This hostname does not necessarily need to be the "
3641
"computer's hostname. In this example it is set to <emphasis>weezie</emphasis>"
3642
3643
#: serverguide/C/web-servers.xml:862(programlisting)
3644
#, no-wrap
3645
msgid ""
3646
"\n"
3647
"visible_hostname weezie\n"
3648
msgstr ""
3649
"\n"
3650
"visible_hostname weezie\n"
3651
3652
#: serverguide/C/web-servers.xml:867(para)
3653
msgid ""
3654
"Using Squid's access control, you may configure use of Internet services "
3655
"proxied by Squid to be available only users with certain Internet Protocol "
3656
"(IP) addresses. For example, we will illustrate access by users of the "
3657
"192.168.42.0/24 subnetwork only:"
3658
msgstr ""
3659
"Using Squid's access control, you may configure use of Internet services "
3660
"proxied by Squid to be available only users with certain Internet Protocol "
3661
"(IP) addresses. For example, we will illustrate access by users of the "
3662
"192.168.42.0/24 subnetwork only:"
3663
3664
#: serverguide/C/web-servers.xml:872(para) serverguide/C/web-servers.xml:892(para)
3665
msgid ""
3666
"Add the following to the <emphasis role=\"bold\">bottom</emphasis> of the "
3667
"ACL section of your <filename>/etc/squid/squid.conf</filename> file:"
3668
msgstr ""
3669
"Add the following to the <emphasis role=\"bold\">bottom</emphasis> of the "
3670
"ACL section of your <filename>/etc/squid/squid.conf</filename> file:"
3671
3672
#: serverguide/C/web-servers.xml:875(programlisting)
3673
#, no-wrap
3674
msgid ""
3675
"\n"
3676
"acl fortytwo_network src 192.168.42.0/24\n"
3677
msgstr ""
3678
"\n"
3679
"acl fortytwo_network src 192.168.42.0/24\n"
3680
3681
#: serverguide/C/web-servers.xml:878(para) serverguide/C/web-servers.xml:899(para)
3682
msgid ""
3683
"Then, add the following to the <emphasis role=\"bold\">top</emphasis> of the "
3684
"http_access section of your <filename>/etc/squid/squid.conf</filename> file:"
3685
msgstr ""
3686
"Then, add the following to the <emphasis role=\"bold\">top</emphasis> of the "
3687
"http_access section of your <filename>/etc/squid/squid.conf</filename> file:"
3688
3689
#: serverguide/C/web-servers.xml:882(programlisting)
3690
#, no-wrap
3691
msgid ""
3692
"\n"
3693
"http_access allow fortytwo_network\n"
3694
msgstr ""
3695
"\n"
3696
"http_access allow fortytwo_network\n"
3697
3698
#: serverguide/C/web-servers.xml:887(para)
3699
msgid ""
3700
"Using the excellent access control features of Squid, you may configure use "
3701
"of Internet services proxied by Squid to be available only during normal "
3702
"business hours. For example, we'll illustrate access by employees of a "
3703
"business which is operating between 9:00AM and 5:00PM, Monday through "
3704
"Friday, and which uses the 10.1.42.0/42 subnetwork:"
3705
msgstr ""
3706
"Using the excellent access control features of Squid, you may configure use "
3707
"of Internet services proxied by Squid to be available only during normal "
3708
"business hours. For example, we'll illustrate access by employees of a "
3709
"business which is operating between 9:00AM and 5:00PM, Monday through "
3710
"Friday, and which uses the 10.1.42.0/42 subnetwork:"
3711
3712
#: serverguide/C/web-servers.xml:895(programlisting)
3713
#, no-wrap
3714
msgid ""
3715
"\n"
3716
"acl biz_network src 10.1.42.0/24\n"
3717
"acl biz_hours time M T W T F 9:00-17:00\n"
3718
msgstr ""
3719
"\n"
3720
"acl biz_network src 10.1.42.0/24\n"
3721
"acl biz_hours time M T W T F 9:00-17:00\n"
3722
3723
#: serverguide/C/web-servers.xml:903(programlisting)
3724
#, no-wrap
3725
msgid ""
3726
"\n"
3727
"http_access allow biz_network biz_hours\n"
3728
msgstr ""
3729
"\n"
3730
"http_access allow biz_network biz_hours\n"
3731
3732
#: serverguide/C/web-servers.xml:910(para)
3733
msgid ""
3734
"After making changes to the <filename>/etc/squid/squid.conf</filename> file, "
3735
"save the file and restart the <application>squid</application> server "
3736
"application to effect the changes using the following command entered at a "
3737
"terminal prompt:"
3738
msgstr ""
3739
"After making changes to the <filename>/etc/squid/squid.conf</filename> file, "
3740
"save the file and restart the <application>squid</application> server "
3741
"application to effect the changes using the following command entered at a "
3742
"terminal prompt:"
3743
3744
#: serverguide/C/web-servers.xml:917(command)
3745
msgid "sudo /etc/init.d/squid restart"
3746
msgstr "sudo /etc/init.d/squid restart"
3747
3748
#: serverguide/C/web-servers.xml:924(ulink)
3749
msgid "Squid Website"
3750
msgstr "Squid Website"
3751
3752
#: serverguide/C/web-servers.xml:926(para)
3753
msgid ""
3754
"<ulink url=\"https://help.ubuntu.com/community/Squid\">Ubuntu Wiki "
3755
"Squid</ulink> page."
3756
msgstr ""
3757
3758
#: serverguide/C/web-servers.xml:933(title)
3759
msgid "Ruby on Rails"
3760
msgstr "Ruby on Rails"
3761
3762
#: serverguide/C/web-servers.xml:934(para)
3763
msgid ""
3764
"Ruby on Rails is an open source web framework for developing database backed "
3765
"web applications. It is optimized for sustainable productivity of the "
3766
"programmer since it lets the programmer to write code by favouring "
3767
"convention over configuration."
3768
msgstr ""
3769
"Ruby on Rails is an open source Web framework for developing database backed "
3770
"Web applications. It is optimised for sustainable productivity of the "
3771
"programmer since it lets the programmer to write code by favouring "
3772
"convention over configuration."
3773
3774
#: serverguide/C/web-servers.xml:941(para)
3775
msgid ""
3776
"Before installing <application>Rails</application> you should install "
3777
"<application>Apache</application> and <application>MySQL</application>. To "
3778
"install the <application>Apache</application> package, please refer to <xref "
3779
"linkend=\"httpd\"/>. For instructions on installing "
3780
"<application>MySQL</application> refer to <xref linkend=\"mysql\"/>."
3781
msgstr ""
3782
"Before installing <application>Rails</application> you should install "
3783
"<application>Apache</application> and <application>MySQL</application>. To "
3784
"install the <application>Apache</application> package, please refer to <xref "
3785
"linkend=\"httpd\"/>. For instructions on installing "
3786
"<application>MySQL</application> refer to <xref linkend=\"mysql\"/>."
3787
3788
#: serverguide/C/web-servers.xml:949(para)
3789
msgid ""
3790
"Once you have <application>Apache</application> and "
3791
"<application>MySQL</application> packages installed, you are ready to "
3792
"install <application>Ruby on Rails</application> package."
3793
msgstr ""
3794
"Once you have <application>Apache</application> and "
3795
"<application>MySQL</application> packages installed, you are ready to "
3796
"install <application>Ruby on Rails</application> package."
3797
3798
#: serverguide/C/web-servers.xml:956(para)
3799
msgid ""
3800
"To install the <application>Ruby</application> base packages and "
3801
"<application>Ruby on Rails</application>, you can enter the following "
3802
"command in the terminal prompt:"
3803
msgstr ""
3804
"To install the <application>Ruby</application> base packages and "
3805
"<application>Ruby on Rails</application>, you can enter the following "
3806
"command in the terminal prompt:"
3807
3808
#: serverguide/C/web-servers.xml:962(command)
3809
msgid "sudo apt-get install rails"
3810
msgstr "sudo apt-get install rails"
3811
3812
#: serverguide/C/web-servers.xml:968(para)
3813
msgid ""
3814
"Modify the <filename>/etc/apache2/sites-available/default</filename> "
3815
"configuration file to setup your domains."
3816
msgstr ""
3817
"Modify the <filename>/etc/apache2/sites-available/default</filename> "
3818
"configuration file to setup your domains."
3819
3820
#: serverguide/C/web-servers.xml:972(para)
3821
msgid ""
3822
"The first thing to change is the <emphasis>DocumentRoot</emphasis> directive:"
3823
msgstr ""
3824
"The first thing to change is the <emphasis>DocumentRoot</emphasis> directive:"
3825
3826
#: serverguide/C/web-servers.xml:976(programlisting)
3827
#, no-wrap
3828
msgid ""
3829
"\n"
3830
"DocumentRoot /path/to/rails/application/public\n"
3831
msgstr ""
3832
"\n"
3833
"DocumentRoot /path/to/rails/application/public\n"
3834
3835
#: serverguide/C/web-servers.xml:979(para)
3836
msgid ""
3837
"Next, change the <Directory \"/path/to/rails/application/public\"> "
3838
"directive:"
3839
msgstr ""
3840
"Next, change the <Directory \"/path/to/rails/application/public\"> "
3841
"directive:"
3842
3843
#: serverguide/C/web-servers.xml:983(programlisting)
3844
#, no-wrap
3845
msgid ""
3846
"\n"
3847
"<Directory \"/path/to/rails/application/public\">\n"
3848
" Options Indexes FollowSymLinks MultiViews ExecCGI\n"
3849
" AllowOverride All\n"
3850
" Order allow,deny\n"
3851
" allow from all\n"
3852
" AddHandler cgi-script .cgi\n"
3853
"</Directory>\n"
3854
msgstr ""
3855
"\n"
3856
"<Directory \"/path/to/rails/application/public\">\n"
3857
" Options Indexes FollowSymLinks MultiViews ExecCGI\n"
3858
" AllowOverride All\n"
3859
" Order allow,deny\n"
3860
" allow from all\n"
3861
" AddHandler cgi-script .cgi\n"
3862
"</Directory>\n"
3863
3864
#: serverguide/C/web-servers.xml:993(para)
3865
msgid ""
3866
"You should also enable the <application>mod_rewrite</application> module for "
3867
"Apache. To enable <application>mod_rewrite</application> module, please "
3868
"enter the following command in a terminal prompt:"
3869
msgstr ""
3870
"You should also enable the <application>mod_rewrite</application> module for "
3871
"Apache. To enable <application>mod_rewrite</application> module, please "
3872
"enter the following command in a terminal prompt:"
3873
3874
#: serverguide/C/web-servers.xml:999(command)
3875
msgid "sudo a2enmod rewrite"
3876
msgstr "sudo a2enmod rewrite"
3877
3878
#: serverguide/C/web-servers.xml:1002(para)
3879
msgid ""
3880
"Finally you will need to change the ownership of the "
3881
"<filename>/path/to/rails/application/public</filename> and "
3882
"<filename>/path/to/rails/application/tmp</filename> directories to the user "
3883
"used to run the <application>Apache</application> process:"
3884
msgstr ""
3885
"Finally you will need to change the ownership of the "
3886
"<filename>/path/to/rails/application/public</filename> and "
3887
"<filename>/path/to/rails/application/tmp</filename> directories to the user "
3888
"used to run the <application>Apache</application> process:"
3889
3890
#: serverguide/C/web-servers.xml:1008(command)
3891
msgid "sudo chown -R www-data:www-data /path/to/rails/application/public"
3892
msgstr "sudo chown -R www-data:www-data /path/to/rails/application/public"
3893
3894
#: serverguide/C/web-servers.xml:1009(command)
3895
msgid "sudo chown -R www-data:www-data /path/to/rails/application/tmp"
3896
msgstr "sudo chown -R www-data:www-data /path/to/rails/application/tmp"
3897
3898
#: serverguide/C/web-servers.xml:1012(para)
3899
msgid ""
3900
"That's it! Now you have your Server ready for your <application>Ruby on "
3901
"Rails</application> applications."
3902
msgstr ""
3903
"That's it! Now you have your Server ready for your <application>Ruby on "
3904
"Rails</application> applications."
3905
3906
#: serverguide/C/web-servers.xml:1021(para)
3907
msgid ""
3908
"See the <ulink url=\"http://rubyonrails.org/\">Ruby on Rails</ulink> website "
3909
"for more information."
3910
msgstr ""
3911
"See the <ulink url=\"http://rubyonrails.org/\">Ruby on Rails</ulink> website "
3912
"for more information."
3913
3914
#: serverguide/C/web-servers.xml:1026(para)
3915
msgid ""
3916
"Also <ulink url=\"http://pragprog.com/titles/rails3/agile-web-development-"
3917
"with-rails-third-edition\">Agile Development with Rails</ulink> is a great "
3918
"resource."
3919
msgstr ""
3920
"Also <ulink url=\"http://pragprog.com/titles/rails3/agile-web-development-"
3921
"with-rails-third-edition\">Agile Development with Rails</ulink> is a great "
3922
"resource."
3923
3924
#: serverguide/C/web-servers.xml:1032(para)
3925
msgid ""
3926
"Another place for more information is the <ulink "
3927
"url=\"https://help.ubuntu.com/community/RubyOnRails\">Ruby on Rails Ubuntu "
3928
"Wiki</ulink> page."
3929
msgstr ""
3930
3931
#: serverguide/C/web-servers.xml:1043(title)
3932
msgid "Apache Tomcat"
3933
msgstr "Apache Tomcat"
3934
3935
#: serverguide/C/web-servers.xml:1044(para)
3936
msgid ""
3937
"Apache Tomcat is a web container that allows you to serve Java Servlets and "
3938
"JSP (Java Server Pages) web applications."
3939
msgstr ""
3940
"Apache Tomcat is a web container that allows you to serve Java Servlets and "
3941
"JSP (Java Server Pages) web applications."
3942
3943
#: serverguide/C/web-servers.xml:1046(para)
3944
msgid ""
3945
"The <application>Tomcat 6.0</application> packages in Ubuntu support two "
3946
"different ways of running Tomcat. You can install them as a classic unique "
3947
"system-wide instance, that will be started at boot time and will run as the "
3948
"tomcat6 unpriviledged user. But you can also deploy private instances that "
3949
"will run with your own user rights, and that you should start and stop by "
3950
"yourself. This second way is particularly useful in a development server "
3951
"context where multiple users need to test on their own private Tomcat "
3952
"instances."
3953
msgstr ""
3954
"The <application>Tomcat 6.0</application> packages in Ubuntu support two "
3955
"different ways of running Tomcat. You can install them as a classic unique "
3956
"system-wide instance, that will be started at boot time and will run as the "
3957
"tomcat6 unpriviledged user. But you can also deploy private instances that "
3958
"will run with your own user rights, and that you should start and stop by "
3959
"yourself. This second way is particularly useful in a development server "
3960
"context where multiple users need to test on their own private Tomcat "
3961
"instances."
3962
3963
#: serverguide/C/web-servers.xml:1056(title)
3964
msgid "System-wide installation"
3965
msgstr "System-wide installation"
3966
3967
#: serverguide/C/web-servers.xml:1057(para)
3968
msgid ""
3969
"To install the <application>Tomcat</application> server, you can enter the "
3970
"following command in the terminal prompt:"
3971
msgstr ""
3972
"To install the <application>Tomcat</application> server, you can enter the "
3973
"following command in the terminal prompt:"
3974
3975
#: serverguide/C/web-servers.xml:1060(command)
3976
msgid "sudo apt-get install tomcat6"
3977
msgstr "sudo apt-get install tomcat6"
3978
3979
#: serverguide/C/web-servers.xml:1062(para)
3980
msgid ""
3981
"This will install a Tomcat server with just a default ROOT webapp that "
3982
"displays a minimal \"It works\" page by default."
3983
msgstr ""
3984
"This will install a Tomcat server with just a default ROOT webapp that "
3985
"displays a minimal \"It works\" page by default."
3986
3987
#: serverguide/C/web-servers.xml:1068(para)
3988
msgid ""
3989
"Tomcat configuration files can be found in "
3990
"<filename>/etc/tomcat6</filename>. Only a few common configuration tweaks "
3991
"will be described here, please see <ulink "
3992
"url=\"http://tomcat.apache.org/tomcat-6.0-doc/index.html\">Tomcat 6.0 "
3993
"documentation</ulink> for more."
3994
msgstr ""
3995
"Tomcat configuration files can be found in "
3996
"<filename>/etc/tomcat6</filename>. Only a few common configuration tweaks "
3997
"will be described here, please see <ulink "
3998
"url=\"http://tomcat.apache.org/tomcat-6.0-doc/index.html\">Tomcat 6.0 "
3999
"documentation</ulink> for more."
4000
4001
#: serverguide/C/web-servers.xml:1074(title)
4002
msgid "Changing default ports"
4003
msgstr "Changing default ports"
4004
4005
#: serverguide/C/web-servers.xml:1075(para)
4006
msgid ""
4007
"By default Tomcat 6.0 runs a HTTP connector on port 8080 and an AJP "
4008
"connector on port 8009. You might want to change those default ports to "
4009
"avoid conflict with another server on the system. This is done by changing "
4010
"the following lines in <filename>/etc/tomcat6/server.xml</filename>:"
4011
msgstr ""
4012
"By default Tomcat 6.0 runs a HTTP connector on port 8080 and an AJP "
4013
"connector on port 8009. You might want to change those default ports to "
4014
"avoid conflict with another server on the system. This is done by changing "
4015
"the following lines in <filename>/etc/tomcat6/server.xml</filename>:"
4016
4017
#: serverguide/C/web-servers.xml:1080(programlisting)
4018
#, no-wrap
4019
msgid ""
4020
"\n"
4021
"<Connector port=\"8080\" protocol=\"HTTP/1.1\" \n"
4022
" connectionTimeout=\"20000\" \n"
4023
" redirectPort=\"8443\" />\n"
4024
"...\n"
4025
"<Connector port=\"8009\" protocol=\"AJP/1.3\" redirectPort=\"8443\" "
4026
"/>\n"
4027
msgstr ""
4028
"\n"
4029
"<Connector port=\"8080\" protocol=\"HTTP/1.1\" \n"
4030
" connectionTimeout=\"20000\" \n"
4031
" redirectPort=\"8443\" />\n"
4032
"...\n"
4033
"<Connector port=\"8009\" protocol=\"AJP/1.3\" redirectPort=\"8443\" "
4034
"/>\n"
4035
4036
#: serverguide/C/web-servers.xml:1089(title)
4037
msgid "Changing JVM used"
4038
msgstr "Changing JVM used"
4039
4040
#: serverguide/C/web-servers.xml:1090(para)
4041
msgid ""
4042
"By default Tomcat will run preferably with OpenJDK-6, then try Sun's JVM, "
4043
"then try some other JVMs. If you have various JVMs installed, you can set "
4044
"which should be used by setting JAVA_HOME in "
4045
"<filename>/etc/default/tomcat6</filename>:"
4046
msgstr ""
4047
"By default Tomcat will run preferably with OpenJDK-6, then try Sun's JVM, "
4048
"then try some other JVMs. If you have various JVMs installed, you can set "
4049
"which should be used by setting JAVA_HOME in "
4050
"<filename>/etc/default/tomcat6</filename>:"
4051
4052
#: serverguide/C/web-servers.xml:1094(programlisting)
4053
#, no-wrap
4054
msgid ""
4055
"\n"
4056
"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"
4057
msgstr ""
4058
"\n"
4059
"JAVA_HOME=/usr/lib/jvm/java-6-sun\n"
4060
4061
#: serverguide/C/web-servers.xml:1099(title)
4062
msgid "Declaring users and roles"
4063
msgstr "Declaring users and roles"
4064
4065
#: serverguide/C/web-servers.xml:1100(para)
4066
msgid ""
4067
"Usernames, passwords and roles (groups) can be defined centrally in a "
4068
"Servlet container. In Tomcat 6.0 this is done in the "
4069
"<filename>/etc/tomcat6/tomcat-users.xml</filename> file:"
4070
msgstr ""
4071
"Usernames, passwords and roles (groups) can be defined centrally in a "
4072
"Servlet container. In Tomcat 6.0 this is done in the "
4073
"<filename>/etc/tomcat6/tomcat-users.xml</filename> file:"
4074
4075
#: serverguide/C/web-servers.xml:1103(programlisting)
4076
#, no-wrap
4077
msgid ""
4078
"\n"
4079
"<role rolename=\"admin\"/>\n"
4080
"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"
4081
msgstr ""
4082
"\n"
4083
"<role rolename=\"admin\"/>\n"
4084
"<user username=\"tomcat\" password=\"s3cret\" roles=\"admin\"/>\n"
4085
4086
#: serverguide/C/web-servers.xml:1111(title)
4087
msgid "Using Tomcat standard webapps"
4088
msgstr "Using Tomcat standard webapps"
4089
4090
#: serverguide/C/web-servers.xml:1112(para)
4091
msgid ""
4092
"Tomcat is shipped with webapps that you can install for documentation, "
4093
"administration or demo purposes."
4094
msgstr ""
4095
"Tomcat is shipped with webapps that you can install for documentation, "
4096
"administration or demo purposes."
4097
4098
#: serverguide/C/web-servers.xml:1115(title)
4099
msgid "Tomcat documentation"
4100
msgstr "Tomcat documentation"
4101
4102
#: serverguide/C/web-servers.xml:1116(para)
4103
msgid ""
4104
"The <application>tomcat6-docs</application> package contains Tomcat 6.0 "
4105
"documentation, packaged as a webapp that you can access by default at "
4106
"http://yourserver:8080/docs. You can install it by entering the following "
4107
"command in the terminal prompt:"
4108
msgstr ""
4109
"The <application>tomcat6-docs</application> package contains Tomcat 6.0 "
4110
"documentation, packaged as a webapp that you can access by default at "
4111
"http://yourserver:8080/docs. You can install it by entering the following "
4112
"command in the terminal prompt:"
4113
4114
#: serverguide/C/web-servers.xml:1121(command)
4115
msgid "sudo apt-get install tomcat6-docs"
4116
msgstr "sudo apt-get install tomcat6-docs"
4117
4118
#: serverguide/C/web-servers.xml:1125(title)
4119
msgid "Tomcat administration webapps"
4120
msgstr "Tomcat administration webapps"
4121
4122
#: serverguide/C/web-servers.xml:1126(para)
4123
msgid ""
4124
"The <application>tomcat6-admin</application> package contains two webapps "
4125
"that can be used to administer the Tomcat server using a web interface. You "
4126
"can install them by entering the following command in the terminal prompt:"
4127
msgstr ""
4128
"The <application>tomcat6-admin</application> package contains two webapps "
4129
"that can be used to administer the Tomcat server using a web interface. You "
4130
"can install them by entering the following command in the terminal prompt:"
4131
4132
#: serverguide/C/web-servers.xml:1131(command)
4133
msgid "sudo apt-get install tomcat6-admin"
4134
msgstr "sudo apt-get install tomcat6-admin"
4135
4136
#: serverguide/C/web-servers.xml:1133(para)
4137
msgid ""
4138
"The first one is the <emphasis>manager</emphasis> webapp, which you can "
4139
"access by default at http://yourserver:8080/manager/html. It is primarily "
4140
"used to get server status and restart webapps."
4141
msgstr ""
4142
"The first one is the <emphasis>manager</emphasis> webapp, which you can "
4143
"access by default at http://yourserver:8080/manager/html. It is primarily "
4144
"used to get server status and restart webapps."
4145
4146
#: serverguide/C/web-servers.xml:1136(para)
4147
msgid ""
4148
"Access to the <emphasis>manager</emphasis> application is protected by "
4149
"default: you need to define a user with the role \"manager\" in "
4150
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
4151
msgstr ""
4152
"Access to the <emphasis>manager</emphasis> application is protected by "
4153
"default: you need to define a user with the role \"manager\" in "
4154
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
4155
4156
#: serverguide/C/web-servers.xml:1140(para)
4157
msgid ""
4158
"The second one is the <emphasis>host-manager</emphasis> webapp, which you "
4159
"can access by default at http://yourserver:8080/host-manager/html. It can be "
4160
"used to create virtual hosts dynamically."
4161
msgstr ""
4162
"The second one is the <emphasis>host-manager</emphasis> webapp, which you "
4163
"can access by default at http://yourserver:8080/host-manager/html. It can be "
4164
"used to create virtual hosts dynamically."
4165
4166
#: serverguide/C/web-servers.xml:1144(para)
4167
msgid ""
4168
"Access to the <emphasis>host-manager</emphasis> application is also "
4169
"protected by default: you need to define a user with the role \"admin\" in "
4170
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
4171
msgstr ""
4172
"Access to the <emphasis>host-manager</emphasis> application is also "
4173
"protected by default: you need to define a user with the role \"admin\" in "
4174
"<filename>/etc/tomcat6/tomcat-users.xml</filename> before you can access it."
4175
4176
#: serverguide/C/web-servers.xml:1149(para)
4177
msgid ""
4178
"For security reasons, the tomcat6 user cannot write to the "
4179
"<filename>/etc/tomcat6</filename> directory by default. Some features in "
4180
"these admin webapps (application deployment, virtual host creation) need "
4181
"write access to that directory. If you want to use these features execute "
4182
"the following, to give users in the tomcat6 group the necessary rights:"
4183
msgstr ""
4184
"For security reasons, the tomcat6 user cannot write to the "
4185
"<filename>/etc/tomcat6</filename> directory by default. Some features in "
4186
"these admin webapps (application deployment, virtual host creation) need "
4187
"write access to that directory. If you want to use these features execute "
4188
"the following, to give users in the tomcat6 group the necessary rights:"
4189
4190
#: serverguide/C/web-servers.xml:1156(command)
4191
msgid "sudo chgrp -R tomcat6 /etc/tomcat6"
4192
msgstr "sudo chgrp -R tomcat6 /etc/tomcat6"
4193
4194
#: serverguide/C/web-servers.xml:1157(command)
4195
msgid "sudo chmod -R g+w /etc/tomcat6"
4196
msgstr "sudo chmod -R g+w /etc/tomcat6"
4197
4198
#: serverguide/C/web-servers.xml:1162(title)
4199
msgid "Tomcat examples webapps"
4200
msgstr "Tomcat examples webapps"
4201
4202
#: serverguide/C/web-servers.xml:1163(para)
4203
msgid ""
4204
"The <application>tomcat6-examples</application> package contains two webapps "
4205
"that can be used to test or demonstrate Servlets and JSP features, which you "
4206
"can access them by default at http://yourserver:8080/examples. You can "
4207
"install them by entering the following command in the terminal prompt:"
4208
msgstr ""
4209
"The <application>tomcat6-examples</application> package contains two webapps "
4210
"that can be used to test or demonstrate Servlets and JSP features, which you "
4211
"can access them by default at http://yourserver:8080/examples. You can "
4212
"install them by entering the following command in the terminal prompt:"
4213
4214
#: serverguide/C/web-servers.xml:1169(command)
4215
msgid "sudo apt-get install tomcat6-examples"
4216
msgstr "sudo apt-get install tomcat6-examples"
4217
4218
#: serverguide/C/web-servers.xml:1175(title)
4219
msgid "Using private instances"
4220
msgstr "Using private instances"
4221
4222
#: serverguide/C/web-servers.xml:1176(para)
4223
msgid ""
4224
"Tomcat is heavily used in development and testing scenarios where using a "
4225
"single system-wide instance doesn't meet the requirements of multiple users "
4226
"on a single system. The Tomcat 6.0 packages in Ubuntu come with tools to "
4227
"help deploy your own user-oriented instances, allowing every user on a "
4228
"system to run (without root rights) separate private instances while still "
4229
"using the system-installed libraries."
4230
msgstr ""
4231
"Tomcat is heavily used in development and testing scenarios where using a "
4232
"single system-wide instance doesn't meet the requirements of multiple users "
4233
"on a single system. The Tomcat 6.0 packages in Ubuntu come with tools to "
4234
"help deploy your own user-oriented instances, allowing every user on a "
4235
"system to run (without root rights) separate private instances while still "
4236
"using the system-installed libraries."
4237
4238
#: serverguide/C/web-servers.xml:1183(para)
4239
msgid ""
4240
"It is possible to run the system-wide instance and the private instances in "
4241
"parallel, as long as they do not use the same TCP ports."
4242
msgstr ""
4243
"It is possible to run the system-wide instance and the private instances in "
4244
"parallel, as long as they do not use the same TCP ports."
4245
4246
#: serverguide/C/web-servers.xml:1187(title)
4247
msgid "Installing private instance support"
4248
msgstr "Installing private instance support"
4249
4250
#: serverguide/C/web-servers.xml:1188(para)
4251
msgid ""
4252
"You can install everything necessary to run private instances by entering "
4253
"the following command in the terminal prompt:"
4254
msgstr ""
4255
"You can install everything necessary to run private instances by entering "
4256
"the following command in the terminal prompt:"
4257
4258
#: serverguide/C/web-servers.xml:1191(command)
4259
msgid "sudo apt-get install tomcat6-user"
4260
msgstr "sudo apt-get install tomcat6-user"
4261
4262
#: serverguide/C/web-servers.xml:1195(title)
4263
msgid "Creating a private instance"
4264
msgstr "Creating a private instance"
4265
4266
#: serverguide/C/web-servers.xml:1196(para)
4267
msgid ""
4268
"You can create a private instance directory by entering the following "
4269
"command in the terminal prompt:"
4270
msgstr ""
4271
"You can create a private instance directory by entering the following "
4272
"command in the terminal prompt:"
4273
4274
#: serverguide/C/web-servers.xml:1199(command)
4275
msgid "tomcat6-instance-create my-instance"
4276
msgstr "tomcat6-instance-create my-instance"
4277
4278
#: serverguide/C/web-servers.xml:1201(para)
4279
msgid ""
4280
"This will create a new <filename>my-instance</filename> directory with all "
4281
"the necessary subdirectories and scripts. You can for example install your "
4282
"common libraries in the <filename>lib/</filename> subdirectory and deploy "
4283
"your webapps in the <filename>webapps/</filename> subdirectory. No webapps "
4284
"are deployed by default."
4285
msgstr ""
4286
"This will create a new <filename>my-instance</filename> directory with all "
4287
"the necessary subdirectories and scripts. You can for example install your "
4288
"common libraries in the <filename>lib/</filename> subdirectory and deploy "
4289
"your webapps in the <filename>webapps/</filename> subdirectory. No webapps "
4290
"are deployed by default."
4291
4292
#: serverguide/C/web-servers.xml:1209(title)
4293
msgid "Configuring your private instance"
4294
msgstr "Configuring your private instance"
4295
4296
#: serverguide/C/web-servers.xml:1210(para)
4297
msgid ""
4298
"You will find the classic Tomcat configuration files for your private "
4299
"instance in the <filename>conf/</filename> subdirectory. You should for "
4300
"example certainly edit the <filename>conf/server.xml</filename> file to "
4301
"change the default ports used by your private Tomcat instance to avoid "
4302
"conflict with other instances that might be running."
4303
msgstr ""
4304
"You will find the classic Tomcat configuration files for your private "
4305
"instance in the <filename>conf/</filename> subdirectory. You should for "
4306
"example certainly edit the <filename>conf/server.xml</filename> file to "
4307
"change the default ports used by your private Tomcat instance to avoid "
4308
"conflict with other instances that might be running."
4309
4310
#: serverguide/C/web-servers.xml:1218(title)
4311
msgid "Starting/stopping your private instance"
4312
msgstr "Starting/stopping your private instance"
4313
4314
#: serverguide/C/web-servers.xml:1219(para)
4315
msgid ""
4316
"You can start your private instance by entering the following command in the "
4317
"terminal prompt (supposing your instance is located in the <filename>my-"
4318
"instance</filename> directory):"
4319
msgstr ""
4320
"You can start your private instance by entering the following command in the "
4321
"terminal prompt (supposing your instance is located in the <filename>my-"
4322
"instance</filename> directory):"
4323
4324
#: serverguide/C/web-servers.xml:1223(command)
4325
msgid "my-instance/bin/startup.sh"
4326
msgstr "my-instance/bin/startup.sh"
4327
4328
#: serverguide/C/web-servers.xml:1225(para)
4329
msgid ""
4330
"You should check the <filename>logs/</filename> subdirectory for any error. "
4331
"If you have a <emphasis>java.net.BindException: Address already in "
4332
"use<null>:8080</emphasis> error, it means that the port you're using "
4333
"is already taken and that you should change it."
4334
msgstr ""
4335
"You should check the <filename>logs/</filename> subdirectory for any error. "
4336
"If you have a <emphasis>java.net.BindException: Address already in "
4337
"use<null>:8080</emphasis> error, it means that the port you're using "
4338
"is already taken and that you should change it."
4339
4340
#: serverguide/C/web-servers.xml:1230(para)
4341
msgid ""
4342
"You can stop your instance by entering the following command in the terminal "
4343
"prompt (supposing your instance is located in the <filename>my-"
4344
"instance</filename> directory):"
4345
msgstr ""
4346
"You can stop your instance by entering the following command in the terminal "
4347
"prompt (supposing your instance is located in the <filename>my-"
4348
"instance</filename> directory):"
4349
4350
#: serverguide/C/web-servers.xml:1234(command)
4351
msgid "my-instance/bin/shutdown.sh"
4352
msgstr "my-instance/bin/shutdown.sh"
4353
4354
#: serverguide/C/web-servers.xml:1243(para)
4355
msgid ""
4356
"See the <ulink url=\"http://tomcat.apache.org/\">Apache Tomcat</ulink> "
4357
"website for more information."
4358
msgstr ""
4359
"See the <ulink url=\"http://tomcat.apache.org/\">Apache Tomcat</ulink> "
4360
"website for more information."
4361
4362
#: serverguide/C/web-servers.xml:1248(para)
4363
msgid ""
4364
"<ulink url=\"http://oreilly.com/catalog/9780596003180/\">Tomcat: The "
4365
"Definitive Guide</ulink> is a good resource for building web applications "
4366
"with Tomcat."
4367
msgstr ""
4368
"<ulink url=\"http://oreilly.com/catalog/9780596003180/\">Tomcat: The "
4369
"Definitive Guide</ulink> is a good resource for building web applications "
4370
"with Tomcat."
4371
4372
#: serverguide/C/web-servers.xml:1254(para)
4373
msgid ""
4374
"For additional books see the <ulink "
4375
"url=\"http://wiki.apache.org/tomcat/Tomcat/Books\">Tomcat Books</ulink> list "
4376
"page."
4377
msgstr ""
4378
"For additional books see the <ulink "
4379
"url=\"http://wiki.apache.org/tomcat/Tomcat/Books\">Tomcat Books</ulink> list "
4380
"page."
4381
4382
#: serverguide/C/web-servers.xml:1259(para)
4383
msgid ""
4384
"Also, see the<ulink "
4385
"url=\"https://help.ubuntu.com/community/ApacheTomcat5\">Ubuntu Wiki Apache "
4386
"Tomcat</ulink> page."
4387
msgstr ""
4388
4389
#: serverguide/C/vpn.xml:13(title)
4390
msgid "VPN"
4391
msgstr "VPN"
4392
4393
#: serverguide/C/vpn.xml:15(para)
4394
msgid ""
4395
"A Virtual Private Network, or <emphasis>VPN</emphasis>, is an encrypted "
4396
"network connection between two or more networks. There are several ways to "
4397
"create a VPN using software as well as dedicated hardware appliances. This "
4398
"chapter will cover installing and configuring "
4399
"<application>OpenVPN</application> to create a VPN between two servers."
4400
msgstr ""
4401
"A Virtual Private Network, or <emphasis>VPN</emphasis>, is an encrypted "
4402
"network connection between two or more networks. There are several ways to "
4403
"create a VPN using software as well as dedicated hardware appliances. This "
4404
"chapter will cover installing and configuring "
4405
"<application>OpenVPN</application> to create a VPN between two servers."
4406
4407
#: serverguide/C/vpn.xml:23(title)
4408
msgid "OpenVPN"
4409
msgstr "OpenVPN"
4410
4411
#: serverguide/C/vpn.xml:25(para)
4412
msgid ""
4413
"OpenVPN uses Public Key Infrastructure (PKI) to encrypt VPN traffic between "
4414
"nodes. A simple way of setting up a VPN with OpenVPN is to connect the "
4415
"clients through a bridge interface on the VPN server. This guide will assume "
4416
"that one VPN node, the server in this case, has a bridge interface "
4417
"configured. For more information on setting up a bridge see <xref "
4418
"linkend=\"bridging\"/>."
4419
msgstr ""
4420
"OpenVPN uses Public Key Infrastructure (PKI) to encrypt VPN traffic between "
4421
"nodes. A simple way of setting up a VPN with OpenVPN is to connect the "
4422
"clients through a bridge interface on the VPN server. This guide will assume "
4423
"that one VPN node, the server in this case, has a bridge interface "
4424
"configured. For more information on setting up a bridge see <xref "
4425
"linkend=\"bridging\"/>."
4426
4427
#: serverguide/C/vpn.xml:35(para)
4428
msgid "To install <application>openvpn</application> in a terminal enter:"
4429
msgstr "To install <application>openvpn</application> in a terminal enter:"
4430
4431
#: serverguide/C/vpn.xml:41(command) serverguide/C/vpn.xml:257(command)
4432
msgid "sudo apt-get install openvpn"
4433
msgstr "sudo apt-get install openvpn"
4434
4435
#: serverguide/C/vpn.xml:45(title)
4436
msgid "Server Certificates"
4437
msgstr "Server Certificates"
4438
4439
#: serverguide/C/vpn.xml:47(para)
4440
msgid ""
4441
"Now that the <application>openvpn</application> package is installed, the "
4442
"certificates for the VPN server need to be created."
4443
msgstr ""
4444
"Now that the <application>openvpn</application> package is installed, the "
4445
"certificates for the VPN server need to be created."
4446
4447
#: serverguide/C/vpn.xml:52(para)
4448
msgid ""
4449
"First, copy the <filename>easy-rsa</filename> directory to "
4450
"<filename>/etc/openvpn</filename>. This will ensure that any changes to the "
4451
"scripts will not be lost when the package is updated. You will also need to "
4452
"adjust permissions in the <filename>easy-rsa</filename> directory to allow "
4453
"the current user permission to create files. From a terminal enter:"
4454
msgstr ""
4455
4456
#: serverguide/C/vpn.xml:59(command)
4457
msgid "sudo mkdir /etc/openvpn/easy-rsa/"
4458
msgstr "sudo mkdir /etc/openvpn/easy-rsa/"
4459
4460
#: serverguide/C/vpn.xml:60(command)
4461
msgid ""
4462
"sudo cp -r /usr/share/doc/openvpn/examples/easy-rsa/2.0/* /etc/openvpn/easy-"
4463
"rsa/"
4464
msgstr ""
4465
4466
#: serverguide/C/vpn.xml:61(command)
4467
msgid "sudo chown -R $USER /etc/openvpn/easy-rsa/"
4468
msgstr ""
4469
4470
#: serverguide/C/vpn.xml:64(para)
4471
msgid ""
4472
"Next, edit <filename>/etc/openvpn/easy-rsa/vars</filename> adjusting the "
4473
"following to your environment:"
4474
msgstr ""
4475
"Next, edit <filename>/etc/openvpn/easy-rsa/vars</filename> adjusting the "
4476
"following to your environment:"
4477
4478
#: serverguide/C/vpn.xml:68(programlisting)
4479
#, no-wrap
4480
msgid ""
4481
"\n"
4482
"export KEY_COUNTRY=\"US\"\n"
4483
"export KEY_PROVINCE=\"NC\"\n"
4484
"export KEY_CITY=\"Winston-Salem\"\n"
4485
"export KEY_ORG=\"Example Company\"\n"
4486
"export KEY_EMAIL=\"steve@example.com\"\n"
4487
msgstr ""
4488
"\n"
4489
"export KEY_COUNTRY=\"US\"\n"
4490
"export KEY_PROVINCE=\"NC\"\n"
4491
"export KEY_CITY=\"Winston-Salem\"\n"
4492
"export KEY_ORG=\"Example Company\"\n"
4493
"export KEY_EMAIL=\"steve@example.com\"\n"
4494
4495
#: serverguide/C/vpn.xml:76(para)
4496
msgid "Enter the following to create the server certificates:"
4497
msgstr "Enter the following to create the server certificates:"
4498
4499
#: serverguide/C/vpn.xml:81(command) serverguide/C/vpn.xml:102(command)
4500
msgid "cd /etc/openvpn/easy-rsa/"
4501
msgstr "cd /etc/openvpn/easy-rsa/"
4502
4503
#: serverguide/C/vpn.xml:82(command) serverguide/C/vpn.xml:103(command)
4504
msgid "source vars"
4505
msgstr "source vars"
4506
4507
#: serverguide/C/vpn.xml:83(command)
4508
msgid "./clean-all"
4509
msgstr "./clean-all"
4510
4511
#: serverguide/C/vpn.xml:84(command)
4512
msgid "./build-dh"
4513
msgstr "./build-dh"
4514
4515
#: serverguide/C/vpn.xml:85(command)
4516
msgid "./pkitool --initca"
4517
msgstr "./pkitool --initca"
4518
4519
#: serverguide/C/vpn.xml:86(command)
4520
msgid "./pkitool --server server"
4521
msgstr "./pkitool --server server"
4522
4523
#: serverguide/C/vpn.xml:87(command)
4524
msgid "cd keys"
4525
msgstr "cd keys"
4526
4527
#: serverguide/C/vpn.xml:88(command)
4528
msgid "openvpn --genkey --secret ta.key"
4529
msgstr "openvpn --genkey --secret ta.key"
4530
4531
#: serverguide/C/vpn.xml:89(command)
4532
msgid "sudo cp server.crt server.key ca.crt dh1024.pem ta.key /etc/openvpn/"
4533
msgstr "sudo cp server.crt server.key ca.crt dh1024.pem ta.key /etc/openvpn/"
4534
4535
#: serverguide/C/vpn.xml:94(title)
4536
msgid "Client Certificates"
4537
msgstr "Client Certificates"
4538
4539
#: serverguide/C/vpn.xml:96(para)
4540
msgid ""
4541
"The VPN client will also need a certificate to authenticate itself to the "
4542
"server. To create the certificate, enter the following in a terminal:"
4543
msgstr ""
4544
"The VPN client will also need a certificate to authenticate itself to the "
4545
"server. To create the certificate, enter the following in a terminal:"
4546
4547
#: serverguide/C/vpn.xml:104(command)
4548
msgid "./pkitool hostname"
4549
msgstr "./pkitool hostname"
4550
4551
#: serverguide/C/vpn.xml:108(para)
4552
msgid ""
4553
"Replace <emphasis>hostname</emphasis> with the actual hostname of the "
4554
"machine connecting to the VPN."
4555
msgstr ""
4556
"Replace <emphasis>hostname</emphasis> with the actual hostname of the "
4557
"machine connecting to the VPN."
4558
4559
#: serverguide/C/vpn.xml:113(para)
4560
msgid "Copy the following files to the client:"
4561
msgstr "Copy the following files to the client:"
4562
4563
#: serverguide/C/vpn.xml:118(para)
4564
msgid "/etc/openvpn/ca.crt"
4565
msgstr ""
4566
4567
#: serverguide/C/vpn.xml:119(para)
4568
msgid "/etc/openvpn/easy-rsa/keys/hostname.crt"
4569
msgstr ""
4570
4571
#: serverguide/C/vpn.xml:120(para)
4572
msgid "/etc/openvpn/easy-rsa/keys/hostname.key"
4573
msgstr ""
4574
4575
#: serverguide/C/vpn.xml:121(para)
4576
msgid "/etc/openvpn/ta.key"
4577
msgstr ""
4578
4579
#: serverguide/C/vpn.xml:125(para)
4580
msgid ""
4581
"Remember to adjust the above file names for your client machine's "
4582
"<emphasis>hostname</emphasis>."
4583
msgstr ""
4584
"Remember to adjust the above file names for your client machine's "
4585
"<emphasis>hostname</emphasis>."
4586
4587
#: serverguide/C/vpn.xml:130(para)
4588
msgid ""
4589
"It is best to use a secure method to copy the certificate and key files. The "
4590
"<application>scp</application> utility is a good choice, but copying the "
4591
"files to removable media then to the client, also works well."
4592
msgstr ""
4593
"It is best to use a secure method to copy the certificate and key files. The "
4594
"<application>scp</application> utility is a good choice, but copying the "
4595
"files to removable media then to the client, also works well."
4596
4597
#: serverguide/C/vpn.xml:141(title) serverguide/C/vcs.xml:107(title)
4598
msgid "Server Configuration"
4599
msgstr "Server Configuration"
4600
4601
#: serverguide/C/vpn.xml:143(para)
4602
msgid ""
4603
"Now configure the <application>openvpn</application> server by creating "
4604
"<filename>/etc/openvpn/server.conf</filename> from the example file. In a "
4605
"terminal enter:"
4606
msgstr ""
4607
"Now configure the <application>openvpn</application> server by creating "
4608
"<filename>/etc/openvpn/server.conf</filename> from the example file. In a "
4609
"terminal enter:"
4610
4611
#: serverguide/C/vpn.xml:149(command)
4612
msgid ""
4613
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz "
4614
"/etc/openvpn/"
4615
msgstr ""
4616
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz "
4617
"/etc/openvpn/"
4618
4619
#: serverguide/C/vpn.xml:150(command)
4620
msgid "sudo gzip -d /etc/openvpn/server.conf.gz"
4621
msgstr "sudo gzip -d /etc/openvpn/server.conf.gz"
4622
4623
#: serverguide/C/vpn.xml:153(para)
4624
msgid ""
4625
"Edit <filename>/etc/openvpn/server.conf</filename> changing the following "
4626
"options to:"
4627
msgstr ""
4628
4629
#: serverguide/C/vpn.xml:157(programlisting)
4630
#, no-wrap
4631
msgid ""
4632
"\n"
4633
"local 172.18.100.101\n"
4634
"dev tap0\n"
4635
"up \"/etc/openvpn/up.sh br0\"\n"
4636
"down \"/etc/openvpn/down.sh br0\"\n"
4637
";server 10.8.0.0 255.255.255.0\n"
4638
"server-bridge 172.18.100.101 255.255.255.0 172.18.100.105 172.18.100.200\n"
4639
"push \"route 172.18.100.1 255.255.255.0\"\n"
4640
"push \"dhcp-option DNS 172.18.100.20\"\n"
4641
"push \"dhcp-option DOMAIN example.com\"\n"
4642
"tls-auth ta.key 0 # This file is secret\n"
4643
"user nobody\n"
4644
"group nogroup\n"
4645
msgstr ""
4646
4647
#: serverguide/C/vpn.xml:174(para)
4648
msgid ""
4649
"<emphasis>local</emphasis>: is the IP address of the bridge interface."
4650
msgstr ""
4651
"<emphasis>local</emphasis>: is the IP address of the bridge interface."
4652
4653
#: serverguide/C/vpn.xml:179(para)
4654
msgid ""
4655
"<emphasis>server-bridge</emphasis>: needed when the configuration uses "
4656
"bridging. The <emphasis>172.18.100.101 255.255.255.0</emphasis> portion is "
4657
"the bridge interface and mask. The IP range <emphasis>172.18.100.105 "
4658
"172.18.100.200</emphasis> is the range of IP addresses that will be assigned "
4659
"to clients."
4660
msgstr ""
4661
"<emphasis>server-bridge</emphasis>: needed when the configuration uses "
4662
"bridging. The <emphasis>172.18.100.101 255.255.255.0</emphasis> portion is "
4663
"the bridge interface and mask. The IP range <emphasis>172.18.100.105 "
4664
"172.18.100.200</emphasis> is the range of IP addresses that will be assigned "
4665
"to clients."
4666
4667
#: serverguide/C/vpn.xml:186(para)
4668
msgid ""
4669
"<emphasis>push</emphasis>: are directives to add networking options for "
4670
"clients."
4671
msgstr ""
4672
"<emphasis>push</emphasis>: are directives to add networking options for "
4673
"clients."
4674
4675
#: serverguide/C/vpn.xml:191(para)
4676
msgid ""
4677
"<emphasis>user and group</emphasis>: configure which user and group the "
4678
"<application>openvpn</application> daemon executes as."
4679
msgstr ""
4680
"<emphasis>user and group</emphasis>: configure which user and group the "
4681
"<application>openvpn</application> daemon executes as."
4682
4683
#: serverguide/C/vpn.xml:198(para)
4684
msgid ""
4685
"Replace all IP addresses and domain names above with those of your network."
4686
msgstr ""
4687
"Replace all IP addresses and domain names above with those of your network."
4688
4689
#: serverguide/C/vpn.xml:203(para)
4690
msgid ""
4691
"Next, create a couple of helper scripts to add the <emphasis>tap</emphasis> "
4692
"interface to the bridge. Create <filename>/etc/openvpn/up.sh</filename>:"
4693
msgstr ""
4694
"Next, create a couple of helper scripts to add the <emphasis>tap</emphasis> "
4695
"interface to the bridge. Create <filename>/etc/openvpn/up.sh</filename>:"
4696
4697
#: serverguide/C/vpn.xml:207(programlisting)
4698
#, no-wrap
4699
msgid ""
4700
"\n"
4701
"#!/bin/sh\n"
4702
"\n"
4703
"BR=$1\n"
4704
"DEV=$2\n"
4705
"MTU=$3\n"
4706
"/sbin/ifconfig $DEV mtu $MTU promisc up\n"
4707
"/usr/sbin/brctl addif $BR $DEV\n"
4708
msgstr ""
4709
"\n"
4710
"#!/bin/sh\n"
4711
"\n"
4712
"BR=$1\n"
4713
"DEV=$2\n"
4714
"MTU=$3\n"
4715
"/sbin/ifconfig $DEV mtu $MTU promisc up\n"
4716
"/usr/sbin/brctl addif $BR $DEV\n"
4717
4718
#: serverguide/C/vpn.xml:217(para)
4719
msgid "And <filename>/etc/openvpn/down.sh</filename>:"
4720
msgstr "And <filename>/etc/openvpn/down.sh</filename>:"
4721
4722
#: serverguide/C/vpn.xml:221(programlisting)
4723
#, no-wrap
4724
msgid ""
4725
"\n"
4726
"#!/bin/sh\n"
4727
"\n"
4728
"BR=$1\n"
4729
"DEV=$2\n"
4730
"\n"
4731
"/usr/sbin/brctl delif $BR $DEV\n"
4732
"/sbin/ifconfig $DEV down\n"
4733
msgstr ""
4734
"\n"
4735
"#!/bin/sh\n"
4736
"\n"
4737
"BR=$1\n"
4738
"DEV=$2\n"
4739
"\n"
4740
"/usr/sbin/brctl delif $BR $DEV\n"
4741
"/sbin/ifconfig $DEV down\n"
4742
4743
#: serverguide/C/vpn.xml:231(para)
4744
msgid "Then make them executable:"
4745
msgstr "Then make them executable:"
4746
4747
#: serverguide/C/vpn.xml:236(command)
4748
msgid "sudo chmod 755 /etc/openvpn/down.sh"
4749
msgstr "sudo chmod 755 /etc/openvpn/down.sh"
4750
4751
#: serverguide/C/vpn.xml:237(command)
4752
msgid "sudo chmod 755 /etc/openvpn/up.sh"
4753
msgstr "sudo chmod 755 /etc/openvpn/up.sh"
4754
4755
#: serverguide/C/vpn.xml:240(para)
4756
msgid ""
4757
"After configuring the server, restart <application>openvpn</application> by "
4758
"entering:"
4759
msgstr ""
4760
"After configuring the server, restart <application>openvpn</application> by "
4761
"entering:"
4762
4763
#: serverguide/C/vpn.xml:245(command) serverguide/C/vpn.xml:293(command)
4764
msgid "sudo /etc/init.d/openvpn restart"
4765
msgstr "sudo /etc/init.d/openvpn restart"
4766
4767
#: serverguide/C/vpn.xml:250(title)
4768
msgid "Client Configuration"
4769
msgstr "Client Configuration"
4770
4771
#: serverguide/C/vpn.xml:252(para)
4772
msgid "First, install <application>openvpn</application> on the client:"
4773
msgstr ""
4774
4775
#: serverguide/C/vpn.xml:260(para)
4776
msgid ""
4777
"Then with the server configured and the client certificates copied to the "
4778
"<filename>/etc/openvpn/</filename> directory, create a client configuration "
4779
"file by copying the example. In a terminal on the client machine enter:"
4780
msgstr ""
4781
4782
#: serverguide/C/vpn.xml:266(command)
4783
msgid ""
4784
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf "
4785
"/etc/openvpn"
4786
msgstr ""
4787
"sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf "
4788
"/etc/openvpn"
4789
4790
#: serverguide/C/vpn.xml:269(para)
4791
msgid ""
4792
"Now edit <filename>/etc/openvpn/client.conf</filename> changing the "
4793
"following options:"
4794
msgstr ""
4795
"Now edit <filename>/etc/openvpn/client.conf</filename> changing the "
4796
"following options:"
4797
4798
#: serverguide/C/vpn.xml:273(programlisting)
4799
#, no-wrap
4800
msgid ""
4801
"\n"
4802
"dev tap\n"
4803
"remote vpn.example.com 1194\n"
4804
"cert hostname.crt\n"
4805
"key hostname.key\n"
4806
"tls-auth ta.key 1\n"
4807
msgstr ""
4808
"\n"
4809
"dev tap\n"
4810
"remote vpn.example.com 1194\n"
4811
"cert hostname.crt\n"
4812
"key hostname.key\n"
4813
"tls-auth ta.key 1\n"
4814
4815
#: serverguide/C/vpn.xml:282(para)
4816
msgid ""
4817
"Replace <emphasis>vpn.example.com</emphasis> with the hostname of your VPN "
4818
"server, and <emphasis>hostname.*</emphasis> with the actual certificate and "
4819
"key filenames."
4820
msgstr ""
4821
"Replace <emphasis>vpn.example.com</emphasis> with the hostname of your VPN "
4822
"server, and <emphasis>hostname.*</emphasis> with the actual certificate and "
4823
"key filenames."
4824
4825
#: serverguide/C/vpn.xml:288(para)
4826
msgid "Finally, restart <application>openvpn</application>:"
4827
msgstr "Finally, restart <application>openvpn</application>:"
4828
4829
#: serverguide/C/vpn.xml:296(para)
4830
msgid "You should now be able to connect to the remote LAN through the VPN."
4831
msgstr "You should now be able to connect to the remote LAN through the VPN."
4832
4833
#: serverguide/C/vpn.xml:307(para)
4834
msgid ""
4835
"See the <ulink url=\"http://openvpn.net/\">OpenVPN</ulink> website for "
4836
"additional information."
4837
msgstr ""
4838
"See the <ulink url=\"http://openvpn.net/\">OpenVPN</ulink> website for "
4839
"additional information."
4840
4841
#: serverguide/C/vpn.xml:312(para)
4842
msgid ""
4843
"Also, Pakt's <ulink url=\"http://www.packtpub.com/openvpn/book\">OpenVPN: "
4844
"Building and Integrating Virtual Private Networks</ulink> is a good resource."
4845
msgstr ""
4846
"Also, Pakt's <ulink url=\"http://www.packtpub.com/openvpn/book\">OpenVPN: "
4847
"Building and Integrating Virtual Private Networks</ulink> is a good resource."
4848
4849
#: serverguide/C/vpn.xml:318(para)
4850
msgid ""
4851
"Another source of further information is the <ulink "
4852
"url=\"https://help.ubuntu.com/community/OpenVPN\">Ubuntu Wiki "
4853
"OpenVPN</ulink> page."
4854
msgstr ""
4855
4856
#: serverguide/C/virtualization.xml:13(title)
4857
msgid "Virtualization"
4858
msgstr "Virtualisation"
4859
4860
#: serverguide/C/virtualization.xml:14(para)
4861
msgid ""
4862
"Virtualization is being adopted in many different environments and "
4863
"situations. If you are a developer, virtualization can provide you with a "
4864
"contained environment where you can safely do almost any sort of development "
4865
"safe from messing up your main working environment. If you are a systems "
4866
"administrator, you can use virtualization to more easily separate your "
4867
"services and move them around based on demand."
4868
msgstr ""
4869
"Virtualisation is being adopted in many different environments and "
4870
"situations. If you are a developer, virtualisation can provide you with a "
4871
"contained environment where you can safely do almost any sort of development "
4872
"safe from messing up your main working environment. If you are a systems "
4873
"administrator, you can use virtualisation to more easily separate your "
4874
"services and move them around based on demand."
4875
4876
#: serverguide/C/virtualization.xml:20(para)
4877
msgid ""
4878
"The default virtualization technology supported in Ubuntu is "
4879
"<application>KVM</application>, a technology that takes advantage of "
4880
"virtualization extensions built into Intel and AMD hardware. For hardware "
4881
"without virtualization extensions <application>Xen</application> and "
4882
"<application>Qemu</application> are popular solutions."
4883
msgstr ""
4884
"The default virtualisation technology supported in Ubuntu is "
4885
"<application>KVM</application>, a technology that takes advantage of "
4886
"virtualisation extensions built into Intel and AMD hardware. For hardware "
4887
"without virtualisation extensions <application>Xen</application> and "
4888
"<application>Qemu</application> are popular solutions."
4889
4890
#: serverguide/C/virtualization.xml:27(title)
4891
msgid "libvirt"
4892
msgstr "libvirt"
4893
4894
#: serverguide/C/virtualization.xml:28(para)
4895
msgid ""
4896
"The <application>libvirt</application> library is used to interface with "
4897
"different virtualization technologies. Before getting started with "
4898
"<application>libvirt</application> it is best to make sure your hardware "
4899
"supports the necessary virtualization extensions for "
4900
"<application>KVM</application>. Enter the following from a terminal prompt:"
4901
msgstr ""
4902
"The <application>libvirt</application> library is used to interface with "
4903
"different virtualisation technologies. Before getting started with "
4904
"<application>libvirt</application> it is best to make sure your hardware "
4905
"supports the necessary virtualisation extensions for "
4906
"<application>KVM</application>. Enter the following from a terminal prompt:"
4907
4908
#: serverguide/C/virtualization.xml:35(command)
4909
msgid "kvm-ok"
4910
msgstr ""
4911
4912
#: serverguide/C/virtualization.xml:37(para)
4913
msgid ""
4914
"A message will be printed informing you if your CPU "
4915
"<emphasis>does</emphasis> or <emphasis>does not</emphasis> support hardware "
4916
"virtualization."
4917
msgstr ""
4918
4919
#: serverguide/C/virtualization.xml:41(para)
4920
msgid ""
4921
"On most computer whose processor supports virtualization, it is necessary to "
4922
"activate an option in the BIOS to enable it."
4923
msgstr ""
4924
4925
#: serverguide/C/virtualization.xml:47(title)
4926
msgid "Virtual Networking"
4927
msgstr "Virtual Networking"
4928
4929
#: serverguide/C/virtualization.xml:49(para)
4930
msgid ""
4931
"There are a few different ways to allow a virtual machine access to the "
4932
"external network. The default virtual network configuration is "
4933
"<emphasis>usermode</emphasis> networking, which uses the SLIRP protocol and "
4934
"traffic is NATed through the host interface to the outside network."
4935
msgstr ""
4936
"There are a few different ways to allow a virtual machine access to the "
4937
"external network. The default virtual network configuration is "
4938
"<emphasis>usermode</emphasis> networking, which uses the SLIRP protocol and "
4939
"traffic is NATed through the host interface to the outside network."
4940
4941
#: serverguide/C/virtualization.xml:54(para)
4942
msgid ""
4943
"To enable external hosts to directly access services on virtual machines a "
4944
"<emphasis>bridge</emphasis> needs to be configured. This allows the virtual "
4945
"interfaces to connect to the outside network through the physical interface, "
4946
"making them appear as normal hosts to the rest of the network. For "
4947
"information on setting up a bridge see <xref linkend=\"bridging\"/>."
4948
msgstr ""
4949
"To enable external hosts to directly access services on virtual machines a "
4950
"<emphasis>bridge</emphasis> needs to be configured. This allows the virtual "
4951
"interfaces to connect to the outside network through the physical interface, "
4952
"making them appear as normal hosts to the rest of the network. For "
4953
"information on setting up a bridge see <xref linkend=\"bridging\"/>."
4954
4955
#: serverguide/C/virtualization.xml:63(para)
4956
msgid "To install the necessary packages, from a terminal prompt enter:"
4957
msgstr "To install the necessary packages, from a terminal prompt enter:"
4958
4959
#: serverguide/C/virtualization.xml:67(command)
4960
msgid "sudo apt-get install kvm libvirt-bin"
4961
msgstr "sudo apt-get install kvm libvirt-bin"
4962
4963
#: serverguide/C/virtualization.xml:69(para)
4964
msgid ""
4965
"After installing <application>libvirt-bin</application>, the user used to "
4966
"manage virtual machines will need to be added to the "
4967
"<emphasis>libvirtd</emphasis> group. Doing so will grant the user access to "
4968
"the advanced networking options."
4969
msgstr ""
4970
"After installing <application>libvirt-bin</application>, the user used to "
4971
"manage virtual machines will need to be added to the "
4972
"<emphasis>libvirtd</emphasis> group. Doing so will grant the user access to "
4973
"the advanced networking options."
4974
4975
#: serverguide/C/virtualization.xml:73(para)
4976
msgid "In a terminal enter:"
4977
msgstr "In a terminal enter:"
4978
4979
#: serverguide/C/virtualization.xml:77(command)
4980
msgid "sudo adduser $USER libvirtd"
4981
msgstr "sudo adduser $USER libvirtd"
4982
4983
#: serverguide/C/virtualization.xml:80(para)
4984
msgid ""
4985
"If the user chosen is the current user, you will need to log out and back in "
4986
"for the new group membership to take effect."
4987
msgstr ""
4988
"If the user chosen is the current user, you will need to log out and back in "
4989
"for the new group membership to take effect."
4990
4991
#: serverguide/C/virtualization.xml:84(para)
4992
msgid ""
4993
"You are now ready to install a <emphasis>Guest</emphasis> operating system. "
4994
"Installing a virtual machine follows the same process as installing the "
4995
"operating system directly on the hardware. You either need a way to automate "
4996
"the installation, or a keyboard and monitor will need to be attached to the "
4997
"physical machine."
4998
msgstr ""
4999
"You are now ready to install a <emphasis>Guest</emphasis> operating system. "
5000
"Installing a virtual machine follows the same process as installing the "
5001
"operating system directly on the hardware. You either need a way to automate "
5002
"the installation, or a keyboard and monitor will need to be attached to the "
5003
"physical machine."
5004
5005
#: serverguide/C/virtualization.xml:89(para)
5006
msgid ""
5007
"In the case of virtual machines a Graphical User Interface (GUI) is "
5008
"analogous to using a physical keyboard and mouse. Instead of installing a "
5009
"GUI the <application>virt-viewer</application> application can be used to "
5010
"connect to a virtual machine's console using <application>VNC</application>. "
5011
"See <xref linkend=\"libvirt-virt-viewer\"/> for more information."
5012
msgstr ""
5013
"In the case of virtual machines a Graphical User Interface (GUI) is "
5014
"analogous to using a physical keyboard and mouse. Instead of installing a "
5015
"GUI the <application>virt-viewer</application> application can be used to "
5016
"connect to a virtual machine's console using <application>VNC</application>. "
5017
"See <xref linkend=\"libvirt-virt-viewer\"/> for more information."
5018
5019
#: serverguide/C/virtualization.xml:94(para)
5020
msgid ""
5021
"There are several ways to automate the Ubuntu installation process, for "
5022
"example using preseeds, kickstart, etc. Refer to the <ulink "
5023
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
5024
"Installation Guide</ulink> for details."
5025
msgstr ""
5026
"There are several ways to automate the Ubuntu installation process, for "
5027
"example using preseeds, kickstart, etc. Refer to the <ulink "
5028
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
5029
"Installation Guide</ulink> for details."
5030
5031
#: serverguide/C/virtualization.xml:98(para)
5032
msgid ""
5033
"Yet another way to install an Ubuntu virtual machine is to use "
5034
"<application>ubuntu-vm-builder</application>. <application>ubuntu-vm-"
5035
"builder</application> allows you to setup advanced partitions, execute "
5036
"custom post-install scripts, etc. For details see <xref linkend=\"jeos-and-"
5037
"vmbuilder\"/>"
5038
msgstr ""
5039
"Yet another way to install an Ubuntu virtual machine is to use "
5040
"<application>ubuntu-vm-builder</application>. <application>ubuntu-vm-"
5041
"builder</application> allows you to setup advanced partitions, execute "
5042
"custom post-install scripts, etc. For details see <xref linkend=\"jeos-and-"
5043
"vmbuilder\"/>"
5044
5045
#: serverguide/C/virtualization.xml:104(title)
5046
msgid "virt-install"
5047
msgstr "virt-install"
5048
5049
#: serverguide/C/virtualization.xml:105(para)
5050
msgid ""
5051
"<application>virt-install</application> is part of the <application>python-"
5052
"virtinst</application> package. To install it, from a terminal prompt enter:"
5053
msgstr ""
5054
"<application>virt-install</application> is part of the <application>python-"
5055
"virtinst</application> package. To install it, from a terminal prompt enter:"
5056
5057
#: serverguide/C/virtualization.xml:109(command)
5058
msgid "sudo apt-get install python-virtinst"
5059
msgstr "sudo apt-get install python-virtinst"
5060
5061
#: serverguide/C/virtualization.xml:111(para)
5062
msgid ""
5063
"There are several options available when using <application>virt-"
5064
"install</application>. For example:"
5065
msgstr ""
5066
"There are several options available when using <application>virt-"
5067
"install</application>. For example:"
5068
5069
#: serverguide/C/virtualization.xml:115(command)
5070
msgid ""
5071
"sudo virt-install -n web_devel -r 256 -f web_devel.img \\ -s 4 -c jeos.iso --"
5072
"accelerate \\ --connect=qemu:///system --vnc \\ --noautoconsole -v"
5073
msgstr ""
5074
"sudo virt-install -n web_devel -r 256 -f web_devel.img \\ -s 4 -c jeos.iso --"
5075
"accelerate \\ --connect=qemu:///system --vnc \\ --noautoconsole -v"
5076
5077
#: serverguide/C/virtualization.xml:122(para)
5078
msgid ""
5079
"<emphasis>-n web_devel:</emphasis> the name of the new virtual machine will "
5080
"be <emphasis>web_devel</emphasis> in this example."
5081
msgstr ""
5082
"<emphasis>-n web_devel:</emphasis> the name of the new virtual machine will "
5083
"be <emphasis>web_devel</emphasis> in this example."
5084
5085
#: serverguide/C/virtualization.xml:127(para)
5086
msgid ""
5087
"<emphasis>-r 256:</emphasis> specifies the amount of memory the virtual "
5088
"machine will use."
5089
msgstr ""
5090
"<emphasis>-r 256:</emphasis> specifies the amount of memory the virtual "
5091
"machine will use."
5092
5093
#: serverguide/C/virtualization.xml:132(para)
5094
msgid ""
5095
"<emphasis>-f web_devel.img:</emphasis> indicates the path to the virtual "
5096
"disk which can be a file, partition, or logical volume. In this example a "
5097
"file named <filename>web_devel.img</filename>."
5098
msgstr ""
5099
"<emphasis>-f web_devel.img:</emphasis> indicates the path to the virtual "
5100
"disk which can be a file, partition, or logical volume. In this example a "
5101
"file named <filename>web_devel.img</filename>."
5102
5103
#: serverguide/C/virtualization.xml:138(para)
5104
msgid "<emphasis>-s 4:</emphasis> the size of the virtual disk."
5105
msgstr "<emphasis>-s 4:</emphasis> the size of the virtual disk."
5106
5107
#: serverguide/C/virtualization.xml:143(para)
5108
msgid ""
5109
"<emphasis>-c jeos.iso:</emphasis> file to be used as a virtual CDROM. The "
5110
"file can be either an ISO file or the path to the host's CDROM device."
5111
msgstr ""
5112
"<emphasis>-c jeos.iso:</emphasis> file to be used as a virtual CDROM. The "
5113
"file can be either an ISO file or the path to the host's CDROM device."
5114
5115
#: serverguide/C/virtualization.xml:149(para)
5116
msgid ""
5117
"<emphasis>--accelerate:</emphasis> enables the kernel's acceleration "
5118
"technologies."
5119
msgstr ""
5120
"<emphasis>--accelerate:</emphasis> enables the kernel's acceleration "
5121
"technologies."
5122
5123
#: serverguide/C/virtualization.xml:154(para)
5124
msgid ""
5125
"<emphasis>--vnc:</emphasis> exports the guest's virtual console using VNC."
5126
msgstr ""
5127
"<emphasis>--vnc:</emphasis> exports the guest's virtual console using VNC."
5128
5129
#: serverguide/C/virtualization.xml:159(para)
5130
msgid ""
5131
"<emphasis>--noautoconsole:</emphasis> will not automatically connect to the "
5132
"virtual machine's console."
5133
msgstr ""
5134
"<emphasis>--noautoconsole:</emphasis> will not automatically connect to the "
5135
"virtual machine's console."
5136
5137
#: serverguide/C/virtualization.xml:164(para)
5138
msgid "<emphasis>-v:</emphasis> creates a fully virtualized guest."
5139
msgstr "<emphasis>-v:</emphasis> creates a fully virtualised guest."
5140
5141
#: serverguide/C/virtualization.xml:169(para)
5142
msgid ""
5143
"After launching <application>virt-install</application> you can connect to "
5144
"the virtual machine's console either locally using a GUI or with the "
5145
"<application>virt-viewer</application> utility."
5146
msgstr ""
5147
"After launching <application>virt-install</application> you can connect to "
5148
"the virtual machine's console either locally using a GUI or with the "
5149
"<application>virt-viewer</application> utility."
5150
5151
#: serverguide/C/virtualization.xml:175(title)
5152
msgid "virt-clone"
5153
msgstr "virt-clone"
5154
5155
#: serverguide/C/virtualization.xml:176(para)
5156
msgid ""
5157
"The <application>virt-clone</application> application can be used to copy "
5158
"one virtual machine to another. For example:"
5159
msgstr ""
5160
"The <application>virt-clone</application> application can be used to copy "
5161
"one virtual machine to another. For example:"
5162
5163
#: serverguide/C/virtualization.xml:180(command)
5164
msgid ""
5165
"sudo virt-clone -o web_devel -n database_devel -f "
5166
"/path/to/database_devel.img --connect=qemu:///system"
5167
msgstr ""
5168
"sudo virt-clone -o web_devel -n database_devel -f "
5169
"/path/to/database_devel.img --connect=qemu:///system"
5170
5171
#: serverguide/C/virtualization.xml:184(para)
5172
msgid "<emphasis>-o:</emphasis> original virtual machine."
5173
msgstr "<emphasis>-o:</emphasis> original virtual machine."
5174
5175
#: serverguide/C/virtualization.xml:189(para)
5176
msgid "<emphasis>-n:</emphasis> name of the new virtual machine."
5177
msgstr "<emphasis>-n:</emphasis> name of the new virtual machine."
5178
5179
#: serverguide/C/virtualization.xml:194(para)
5180
msgid ""
5181
"<emphasis>-f:</emphasis> path to the file, logical volume, or partition to "
5182
"be used by the new virtual machine."
5183
msgstr ""
5184
"<emphasis>-f:</emphasis> path to the file, logical volume, or partition to "
5185
"be used by the new virtual machine."
5186
5187
#: serverguide/C/virtualization.xml:199(para)
5188
msgid ""
5189
"<emphasis>--connect:</emphasis> specifies which hypervisor to connect to."
5190
msgstr ""
5191
"<emphasis>--connect:</emphasis> specifies which hypervisor to connect to."
5192
5193
#: serverguide/C/virtualization.xml:204(para)
5194
msgid ""
5195
"Also, use <emphasis>-d</emphasis> or <emphasis>--debug</emphasis> option to "
5196
"help troubleshoot problems with <application>virt-clone</application>."
5197
msgstr ""
5198
"Also, use <emphasis>-d</emphasis> or <emphasis>--debug</emphasis> option to "
5199
"help troubleshoot problems with <application>virt-clone</application>."
5200
5201
#: serverguide/C/virtualization.xml:209(para)
5202
msgid ""
5203
"Replace <emphasis>web_devel</emphasis> and "
5204
"<emphasis>database_devel</emphasis> with appropriate virtual machine names."
5205
msgstr ""
5206
"Replace <emphasis>web_devel</emphasis> and "
5207
"<emphasis>database_devel</emphasis> with appropriate virtual machine names."
5208
5209
#: serverguide/C/virtualization.xml:215(title)
5210
msgid "Virtual Machine Management"
5211
msgstr "Virtual Machine Management"
5212
5213
#: serverguide/C/virtualization.xml:217(title)
5214
msgid "virsh"
5215
msgstr "virsh"
5216
5217
#: serverguide/C/virtualization.xml:218(para)
5218
msgid ""
5219
"There are several utilities available to manage virtual machines and "
5220
"<application>libvirt</application>. The <application>virsh</application> "
5221
"utility can be used from the command line. Some examples:"
5222
msgstr ""
5223
"There are several utilities available to manage virtual machines and "
5224
"<application>libvirt</application>. The <application>virsh</application> "
5225
"utility can be used from the command line. Some examples:"
5226
5227
#: serverguide/C/virtualization.xml:224(para)
5228
msgid "To list running virtual machines:"
5229
msgstr "To list running virtual machines:"
5230
5231
#: serverguide/C/virtualization.xml:228(command)
5232
msgid "virsh -c qemu:///system list"
5233
msgstr "virsh -c qemu:///system list"
5234
5235
#: serverguide/C/virtualization.xml:232(para)
5236
msgid "To start a virtual machine:"
5237
msgstr "To start a virtual machine:"
5238
5239
#: serverguide/C/virtualization.xml:236(command)
5240
msgid "virsh -c qemu:///system start web_devel"
5241
msgstr "virsh -c qemu:///system start web_devel"
5242
5243
#: serverguide/C/virtualization.xml:240(para)
5244
msgid "Similarly, to start a virtual machine at boot:"
5245
msgstr "Similarly, to start a virtual machine at boot:"
5246
5247
#: serverguide/C/virtualization.xml:244(command)
5248
msgid "virsh -c qemu:///system autostart web_devel"
5249
msgstr "virsh -c qemu:///system autostart web_devel"
5250
5251
#: serverguide/C/virtualization.xml:248(para)
5252
msgid "Reboot a virtual machine with:"
5253
msgstr "Reboot a virtual machine with:"
5254
5255
#: serverguide/C/virtualization.xml:252(command)
5256
msgid "virsh -c qemu:///system reboot web_devel"
5257
msgstr "virsh -c qemu:///system reboot web_devel"
5258
5259
#: serverguide/C/virtualization.xml:256(para)
5260
msgid ""
5261
"The <emphasis>state</emphasis> of virtual machines can be saved to a file in "
5262
"order to be restored later. The following will save the virtual machine "
5263
"state into a file named according to the date:"
5264
msgstr ""
5265
"The <emphasis>state</emphasis> of virtual machines can be saved to a file in "
5266
"order to be restored later. The following will save the virtual machine "
5267
"state into a file named according to the date:"
5268
5269
#: serverguide/C/virtualization.xml:261(command)
5270
msgid "virsh -c qemu:///system save web_devel web_devel-022708.state"
5271
msgstr "virsh -c qemu:///system save web_devel web_devel-022708.state"
5272
5273
#: serverguide/C/virtualization.xml:263(para)
5274
msgid "Once saved the virtual machine will no longer be running."
5275
msgstr "Once saved the virtual machine will no longer be running."
5276
5277
#: serverguide/C/virtualization.xml:268(para)
5278
msgid "A saved virtual machine can be restored using:"
5279
msgstr "A saved virtual machine can be restored using:"
5280
5281
#: serverguide/C/virtualization.xml:272(command)
5282
msgid "virsh -c qemu:///system restore web_devel-022708.state"
5283
msgstr "virsh -c qemu:///system restore web_devel-022708.state"
5284
5285
#: serverguide/C/virtualization.xml:276(para)
5286
msgid "To shutdown a virtual machine do:"
5287
msgstr "To shutdown a virtual machine do:"
5288
5289
#: serverguide/C/virtualization.xml:280(command)
5290
msgid "virsh -c qemu:///system shutdown web_devel"
5291
msgstr "virsh -c qemu:///system shutdown web_devel"
5292
5293
#: serverguide/C/virtualization.xml:284(para)
5294
msgid "A CDROM device can be mounted in a virtual machine by entering:"
5295
msgstr "A CDROM device can be mounted in a virtual machine by entering:"
5296
5297
#: serverguide/C/virtualization.xml:288(command)
5298
msgid "virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"
5299
msgstr ""
5300
"virsh -c qemu:///system attach-disk web_devel /dev/cdrom /media/cdrom"
5301
5302
#: serverguide/C/virtualization.xml:293(para)
5303
msgid ""
5304
"In the above examples replace <emphasis>web_devel</emphasis> with the "
5305
"appropriate virtual machine name, and <filename>web_devel-"
5306
"022708.state</filename> with a descriptive file name."
5307
msgstr ""
5308
"In the above examples replace <emphasis>web_devel</emphasis> with the "
5309
"appropriate virtual machine name, and <filename>web_devel-"
5310
"022708.state</filename> with a descriptive file name."
5311
5312
#: serverguide/C/virtualization.xml:300(title)
5313
msgid "Virtual Machine Manager"
5314
msgstr "Virtual Machine Manager"
5315
5316
#: serverguide/C/virtualization.xml:301(para)
5317
msgid ""
5318
"The <application>virt-manager</application> package contains a graphical "
5319
"utility to manage local and remote virtual machines. To install virt-manager "
5320
"enter:"
5321
msgstr ""
5322
"The <application>virt-manager</application> package contains a graphical "
5323
"utility to manage local and remote virtual machines. To install virt-manager "
5324
"enter:"
5325
5326
#: serverguide/C/virtualization.xml:306(command)
5327
msgid "sudo apt-get install virt-manager"
5328
msgstr "sudo apt-get install virt-manager"
5329
5330
#: serverguide/C/virtualization.xml:308(para)
5331
msgid ""
5332
"Since <application>virt-manager</application> requires a Graphical User "
5333
"Interface (GUI) environment it is recommended to be installed on a "
5334
"workstation or test machine instead of a production server. To connect to "
5335
"the local <application>libvirt</application> service enter:"
5336
msgstr ""
5337
"Since <application>virt-manager</application> requires a Graphical User "
5338
"Interface (GUI) environment it is recommended to be installed on a "
5339
"workstation or test machine instead of a production server. To connect to "
5340
"the local <application>libvirt</application> service enter:"
5341
5342
#: serverguide/C/virtualization.xml:314(command)
5343
msgid "virt-manager -c qemu:///system"
5344
msgstr "virt-manager -c qemu:///system"
5345
5346
#: serverguide/C/virtualization.xml:316(para)
5347
msgid ""
5348
"You can connect to the <application>libvirt</application> service running on "
5349
"another host by entering the following in a terminal prompt:"
5350
msgstr ""
5351
"You can connect to the <application>libvirt</application> service running on "
5352
"another host by entering the following in a terminal prompt:"
5353
5354
#: serverguide/C/virtualization.xml:320(command)
5355
msgid "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"
5356
msgstr "virt-manager -c qemu+ssh://virtnode1.mydomain.com/system"
5357
5358
#: serverguide/C/virtualization.xml:323(para)
5359
msgid ""
5360
"The above example assumes that <application>SSH</application> connectivity "
5361
"between the management system and virtnode1.mydomain.com has already been "
5362
"configured, and uses SSH keys for authentication. SSH "
5363
"<emphasis>keys</emphasis> are needed because "
5364
"<application>libvirt</application> sends the password prompt to another "
5365
"process. For details on configuring <application>SSH</application> see <xref "
5366
"linkend=\"openssh-server\"/>"
5367
msgstr ""
5368
"The above example assumes that <application>SSH</application> connectivity "
5369
"between the management system and virtnode1.mydomain.com has already been "
5370
"configured, and uses SSH keys for authentication. SSH "
5371
"<emphasis>keys</emphasis> are needed because "
5372
"<application>libvirt</application> sends the password prompt to another "
5373
"process. For details on configuring <application>SSH</application> see <xref "
5374
"linkend=\"openssh-server\"/>"
5375
5376
#: serverguide/C/virtualization.xml:333(title)
5377
msgid "Virtual Machine Viewer"
5378
msgstr "Virtual Machine Viewer"
5379
5380
#: serverguide/C/virtualization.xml:334(para)
5381
msgid ""
5382
"The <application>virt-viewer</application> application allows you to connect "
5383
"to a virtual machine's console. <application>virt-viewer</application> does "
5384
"require a Graphical User Interface (GUI) to interface with the virtual "
5385
"machine."
5386
msgstr ""
5387
"The <application>virt-viewer</application> application allows you to connect "
5388
"to a virtual machine's console. <application>virt-viewer</application> does "
5389
"require a Graphical User Interface (GUI) to interface with the virtual "
5390
"machine."
5391
5392
#: serverguide/C/virtualization.xml:338(para)
5393
msgid ""
5394
"To install <application>virt-viewer</application> from a terminal enter:"
5395
msgstr ""
5396
"To install <application>virt-viewer</application> from a terminal enter:"
5397
5398
#: serverguide/C/virtualization.xml:342(command)
5399
msgid "sudo apt-get install virt-viewer"
5400
msgstr "sudo apt-get install virt-viewer"
5401
5402
#: serverguide/C/virtualization.xml:344(para)
5403
msgid ""
5404
"Once a virtual machine is installed and running you can connect to the "
5405
"virtual machine's console by using:"
5406
msgstr ""
5407
"Once a virtual machine is installed and running you can connect to the "
5408
"virtual machine's console by using:"
5409
5410
#: serverguide/C/virtualization.xml:348(command)
5411
msgid "virt-viewer -c qemu:///system web_devel"
5412
msgstr "virt-viewer -c qemu:///system web_devel"
5413
5414
#: serverguide/C/virtualization.xml:350(para)
5415
msgid ""
5416
"Similar to <application>virt-manager</application>, <application>virt-"
5417
"viewer</application> can connect to a remote host using "
5418
"<emphasis>SSH</emphasis> with key authentication, as well:"
5419
msgstr ""
5420
"Similar to <application>virt-manager</application>, <application>virt-"
5421
"viewer</application> can connect to a remote host using "
5422
"<emphasis>SSH</emphasis> with key authentication, as well:"
5423
5424
#: serverguide/C/virtualization.xml:355(command)
5425
msgid "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"
5426
msgstr "virt-viewer -c qemu+ssh://virtnode1.mydomain.com/system web_devel"
5427
5428
#: serverguide/C/virtualization.xml:357(para)
5429
msgid ""
5430
"Be sure to replace <emphasis role=\"italic\">web_devel</emphasis> with the "
5431
"appropriate virtual machine name."
5432
msgstr ""
5433
"Be sure to replace <emphasis role=\"italic\">web_devel</emphasis> with the "
5434
"appropriate virtual machine name."
5435
5436
#: serverguide/C/virtualization.xml:360(para)
5437
msgid ""
5438
"If configured to use a <emphasis>bridged</emphasis> network interface you "
5439
"can also setup <application>SSH</application> access to the virtual machine. "
5440
"See <xref linkend=\"openssh-server\"/> and <xref linkend=\"bridging\"/> for "
5441
"more details."
5442
msgstr ""
5443
"If configured to use a <emphasis>bridged</emphasis> network interface you "
5444
"can also setup <application>SSH</application> access to the virtual machine. "
5445
"See <xref linkend=\"openssh-server\"/> and <xref linkend=\"bridging\"/> for "
5446
"more details."
5447
5448
#: serverguide/C/virtualization.xml:369(para)
5449
msgid ""
5450
"See the <ulink url=\"http://kvm.qumranet.com/kvmwiki\">KVM</ulink> home page "
5451
"for more details."
5452
msgstr ""
5453
"See the <ulink url=\"http://kvm.qumranet.com/kvmwiki\">KVM</ulink> home page "
5454
"for more details."
5455
5456
#: serverguide/C/virtualization.xml:374(para)
5457
msgid ""
5458
"For more information on <application>libvirt</application> see the <ulink "
5459
"url=\"http://libvirt.org/\">libvirt home page</ulink>"
5460
msgstr ""
5461
"For more information on <application>libvirt</application> see the <ulink "
5462
"url=\"http://libvirt.org/\">libvirt home page</ulink>"
5463
5464
#: serverguide/C/virtualization.xml:379(para)
5465
msgid ""
5466
"The <ulink url=\"http://virt-manager.et.redhat.com/\">Virtual Machine "
5467
"Manager</ulink> site has more information on <application>virt-"
5468
"manager</application> development."
5469
msgstr ""
5470
"The <ulink url=\"http://virt-manager.et.redhat.com/\">Virtual Machine "
5471
"Manager</ulink> site has more information on <application>virt-"
5472
"manager</application> development."
5473
5474
#: serverguide/C/virtualization.xml:385(para)
5475
msgid ""
5476
"Also, stop by the <emphasis>#ubuntu-virt</emphasis> IRC channel on <ulink "
5477
"url=\"http://freenode.net/\">freenode</ulink> to discuss virtualization "
5478
"technology in Ubuntu."
5479
msgstr ""
5480
"Also, stop by the <emphasis>#ubuntu-virt</emphasis> IRC channel on <ulink "
5481
"url=\"http://freenode.net/\">freenode</ulink> to discuss virtualisation "
5482
"technology in Ubuntu."
5483
5484
#: serverguide/C/virtualization.xml:391(para)
5485
msgid ""
5486
"Another good resource is the <ulink "
5487
"url=\"https://help.ubuntu.com/community/KVM\">Ubuntu Wiki KVM</ulink> page."
5488
msgstr ""
5489
5490
#: serverguide/C/virtualization.xml:399(title)
5491
msgid "JeOS and vmbuilder"
5492
msgstr "JeOS and vmbuilder"
5493
5494
#: serverguide/C/virtualization.xml:405(title)
5495
msgid "What is JeOS"
5496
msgstr "What is JeOS"
5497
5498
#: serverguide/C/virtualization.xml:407(para)
5499
msgid ""
5500
"Ubuntu <emphasis>JeOS</emphasis> (pronounced \"Juice\") is an efficient "
5501
"variant of the Ubuntu Server operating system, configured specifically for "
5502
"virtual appliances. No longer available as a CD-ROM ISO for download, but "
5503
"only as an option either:"
5504
msgstr ""
5505
"Ubuntu <emphasis>JeOS</emphasis> (pronounced \"Juice\") is an efficient "
5506
"variant of the Ubuntu Server operating system, configured specifically for "
5507
"virtual appliances. No longer available as a CD-ROM ISO for download, but "
5508
"only as an option either:"
5509
5510
#: serverguide/C/virtualization.xml:414(para)
5511
msgid ""
5512
"While installing from the Server Edition ISO (pressing "
5513
"<emphasis>F4</emphasis> on the first screen will allow you to pick \"Minimal "
5514
"installation\", which is the package selection equivalent to JeOS)."
5515
msgstr ""
5516
"While installing from the Server Edition ISO (pressing "
5517
"<emphasis>F4</emphasis> on the first screen will allow you to pick \"Minimal "
5518
"installation\", which is the package selection equivalent to JeOS)."
5519
5520
#: serverguide/C/virtualization.xml:420(para)
5521
msgid "Or to be built using Ubuntu's vmbuilder, which is described here."
5522
msgstr "Or to be built using Ubuntu's vmbuilder, which is described here."
5523
5524
#: serverguide/C/virtualization.xml:426(para)
5525
msgid ""
5526
"JeOS is a specialized installation of Ubuntu Server Edition with a tuned "
5527
"kernel that only contains the base elements needed to run within a "
5528
"virtualized environment."
5529
msgstr ""
5530
"JeOS is a specialised installation of Ubuntu Server Edition with a tuned "
5531
"kernel that only contains the base elements needed to run within a "
5532
"virtualised environment."
5533
5534
#: serverguide/C/virtualization.xml:431(para)
5535
msgid ""
5536
"Ubuntu JeOS has been tuned to take advantage of key performance technologies "
5537
"in the latest virtualization products from VMware. This combination of "
5538
"reduced size and optimized performance ensures that Ubuntu JeOS Edition "
5539
"delivers a highly efficient use of server resources in large virtual "
5540
"deployments."
5541
msgstr ""
5542
"Ubuntu JeOS has been tuned to take advantage of key performance technologies "
5543
"in the latest virtualisation products from VMware. This combination of "
5544
"reduced size and optimised performance ensures that Ubuntu JeOS Edition "
5545
"delivers a highly efficient use of server resources in large virtual "
5546
"deployments."
5547
5548
#: serverguide/C/virtualization.xml:437(para)
5549
msgid ""
5550
"Without unnecessary drivers, and only the minimal required packages, ISVs "
5551
"can configure their supporting OS exactly as they require. They have the "
5552
"peace of mind that updates, whether for security or enhancement reasons, "
5553
"will be limited to the bare minimum of what is required in their specific "
5554
"environment. In turn, users deploying virtual appliances built on top of "
5555
"JeOS will have to go through fewer updates and therefore less maintenance "
5556
"than they would have had to with a standard full installation of a server."
5557
msgstr ""
5558
"Without unnecessary drivers, and only the minimal required packages, ISVs "
5559
"can configure their supporting OS exactly as they require. They have the "
5560
"peace of mind that updates, whether for security or enhancement reasons, "
5561
"will be limited to the bare minimum of what is required in their specific "
5562
"environment. In turn, users deploying virtual appliances built on top of "
5563
"JeOS will have to go through fewer updates and therefore less maintenance "
5564
"than they would have had to with a standard full installation of a server."
5565
5566
#: serverguide/C/virtualization.xml:446(title)
5567
msgid "What is vmbuilder"
5568
msgstr "What is vmbuilder"
5569
5570
#: serverguide/C/virtualization.xml:448(para)
5571
msgid ""
5572
"With vmbuilder, there is no need to download a JeOS ISO anymore. vmbuilder "
5573
"will fetch the various package and build a virtual machine tailored for your "
5574
"needs in about a minute. vmbuilder is a script that automates the process of "
5575
"creating a ready to use Linux based VM. The currently supported hypervisors "
5576
"are KVM and Xen."
5577
msgstr ""
5578
5579
#: serverguide/C/virtualization.xml:454(para)
5580
msgid ""
5581
"You can pass command line options to add extra packages, remove packages, "
5582
"choose which version of Ubuntu, which mirror etc. On recent hardware with "
5583
"plenty of RAM, tmpdir in <filename>/dev/shm</filename> or using a tmpfs, and "
5584
"a local mirror, you can bootstrap a VM in less than a minute."
5585
msgstr ""
5586
"You can pass command line options to add extra packages, remove packages, "
5587
"choose which version of Ubuntu, which mirror etc. On recent hardware with "
5588
"plenty of RAM, tmpdir in <filename>/dev/shm</filename> or using a tmpfs, and "
5589
"a local mirror, you can bootstrap a VM in less than a minute."
5590
5591
#: serverguide/C/virtualization.xml:460(para)
5592
msgid ""
5593
"First introduced as a shell script in Ubuntu 8.04 LTS, <application>ubuntu-"
5594
"vm-builder</application> started with little emphasis as a hack to help "
5595
"developers test their new code in a virtual machine without having to "
5596
"restart from scratch each time. As a few Ubuntu administrators started to "
5597
"notice this script, a few of them went on improving it and adapting it for "
5598
"so many use case that Soren Hansen (the author of the script and Ubuntu "
5599
"virtualization specialist, not the golf player) decided to rewrite it from "
5600
"scratch for Intrepid as a python script with a few new design goals:"
5601
msgstr ""
5602
5603
#: serverguide/C/virtualization.xml:470(para)
5604
msgid "Develop it so that it can be reused by other distributions."
5605
msgstr "Develop it so that it can be reused by other distributions."
5606
5607
#: serverguide/C/virtualization.xml:475(para)
5608
msgid ""
5609
"Use a plugin mechanisms for all virtualization interactions so that others "
5610
"can easily add logic for other virtualization environments."
5611
msgstr ""
5612
"Use a plug-in mechanisms for all virtualisation interactions so that others "
5613
"can easily add logic for other virtualisation environments."
5614
5615
#: serverguide/C/virtualization.xml:480(para)
5616
msgid ""
5617
"Provide an easy to maintain web interface as an option to the command line "
5618
"interface."
5619
msgstr ""
5620
"Provide an easy to maintain web interface as an option to the command line "
5621
"interface."
5622
5623
#: serverguide/C/virtualization.xml:486(para)
5624
msgid "But the general principles and commands remain the same."
5625
msgstr "But the general principles and commands remain the same."
5626
5627
#: serverguide/C/virtualization.xml:493(title)
5628
msgid "Initial Setup"
5629
msgstr "Initial Setup"
5630
5631
#: serverguide/C/virtualization.xml:495(para)
5632
msgid ""
5633
"It is assumed that you have installed and configured "
5634
"<application>libvirt</application> and <application>KVM</application> "
5635
"locally on the machine you are using. For details on how to perform this, "
5636
"please refer to:"
5637
msgstr ""
5638
"It is assumed that you have installed and configured "
5639
"<application>libvirt</application> and <application>KVM</application> "
5640
"locally on the machine you are using. For details on how to perform this, "
5641
"please refer to:"
5642
5643
#: serverguide/C/virtualization.xml:507(para)
5644
msgid ""
5645
"The <ulink url=\"https://help.ubuntu.com/community/KVM\">KVM</ulink> Wiki "
5646
"page."
5647
msgstr ""
5648
"The <ulink url=\"https://help.ubuntu.com/community/KVM\">KVM</ulink> Wiki "
5649
"page."
5650
5651
#: serverguide/C/virtualization.xml:513(para)
5652
msgid ""
5653
"We also assume that you know how to use a text based text editor such as "
5654
"nano or vi. If you have not used any of them before, you can get an overview "
5655
"of the various text editors available by reading the <ulink "
5656
"url=\"https://help.ubuntu.com/community/PowerUsersTextEditors\">PowerUsersTex"
5657
"tEditors</ulink> page. This tutorial has been done on KVM, but the general "
5658
"principle should remain on other virtualization technologies."
5659
msgstr ""
5660
"We also assume that you know how to use a text based text editor such as "
5661
"nano or vi. If you have not used any of them before, you can get an overview "
5662
"of the various text editors available by reading the <ulink "
5663
"url=\"https://help.ubuntu.com/community/PowerUsersTextEditors\">PowerUsersTex"
5664
"tEditors</ulink> page. This tutorial has been done on KVM, but the general "
5665
"principle should remain on other virtualisation technologies."
5666
5667
#: serverguide/C/virtualization.xml:521(title)
5668
msgid "Install vmbuilder"
5669
msgstr "Install vmbuilder"
5670
5671
#: serverguide/C/virtualization.xml:523(para)
5672
msgid ""
5673
"The name of the package that we need to install is <application>python-vm-"
5674
"builder</application>. In a terminal prompt enter:"
5675
msgstr ""
5676
"The name of the package that we need to install is <application>python-vm-"
5677
"builder</application>. In a terminal prompt enter:"
5678
5679
#: serverguide/C/virtualization.xml:528(command)
5680
msgid "sudo apt-get install python-vm-builder"
5681
msgstr "sudo apt-get install python-vm-builder"
5682
5683
#: serverguide/C/virtualization.xml:532(para)
5684
msgid ""
5685
"If you are running Hardy, you can still perform most of this using the older "
5686
"version of the package named <application>ubuntu-vm-builder</application>, "
5687
"there are only a few changes to the syntax of the tool."
5688
msgstr ""
5689
"If you are running Hardy, you can still perform most of this using the older "
5690
"version of the package named <application>ubuntu-vm-builder</application>, "
5691
"there are only a few changes to the syntax of the tool."
5692
5693
#: serverguide/C/virtualization.xml:541(title)
5694
msgid "Defining Your Virtual Machine"
5695
msgstr "Defining Your Virtual Machine"
5696
5697
#: serverguide/C/virtualization.xml:543(para)
5698
msgid ""
5699
"Defining a virtual machine with Ubuntu's vmbuilder is quite simple, but here "
5700
"are a few thing to consider:"
5701
msgstr ""
5702
"Defining a virtual machine with Ubuntu's vmbuilder is quite simple, but here "
5703
"are a few thing to consider:"
5704
5705
#: serverguide/C/virtualization.xml:549(para)
5706
msgid ""
5707
"If you plan on shipping a virtual appliance, do not assume that the end-user "
5708
"will know how to extend disk size to fit their need, so either plan for a "
5709
"large virtual disk to allow for your appliance to grow, or explain fairly "
5710
"well in your documentation how to allocate more space. It might actually be "
5711
"a good idea to store data on some separate external storage."
5712
msgstr ""
5713
"If you plan on shipping a virtual appliance, do not assume that the end-user "
5714
"will know how to extend disk size to fit their need, so either plan for a "
5715
"large virtual disk to allow for your appliance to grow, or explain fairly "
5716
"well in your documentation how to allocate more space. It might actually be "
5717
"a good idea to store data on some separate external storage."
5718
5719
#: serverguide/C/virtualization.xml:556(para)
5720
msgid ""
5721
"Given that RAM is much easier to allocate in a VM, RAM size should be set to "
5722
"whatever you think is a safe minimum for your appliance."
5723
msgstr ""
5724
"Given that RAM is much easier to allocate in a VM, RAM size should be set to "
5725
"whatever you think is a safe minimum for your appliance."
5726
5727
#: serverguide/C/virtualization.xml:562(para)
5728
msgid ""
5729
"The <application>vmbuilder</application> command has 2 main parameters: the "
5730
"<emphasis>virtualization technology (hypervisor)</emphasis> and the targeted "
5731
"<emphasis>distribution</emphasis>. Optional parameters are quite numerous "
5732
"and can be found using the following command:"
5733
msgstr ""
5734
"The <application>vmbuilder</application> command has 2 main parameters: the "
5735
"<emphasis>virtualisation technology (hypervisor)</emphasis> and the targeted "
5736
"<emphasis>distribution</emphasis>. Optional parameters are quite numerous "
5737
"and can be found using the following command:"
5738
5739
#: serverguide/C/virtualization.xml:568(command)
5740
msgid "vmbuilder --help"
5741
msgstr "vmbuilder --help"
5742
5743
#: serverguide/C/virtualization.xml:572(title)
5744
msgid "Base Parameters"
5745
msgstr "Base Parameters"
5746
5747
#: serverguide/C/virtualization.xml:574(para)
5748
msgid ""
5749
"As this example is based on <application>KVM</application> and Ubuntu 10.04 "
5750
"LTS (Lucid Lynx), and we are likely to rebuild the same virtual machine "
5751
"multiple time, we'll invoke vmbuilder with the following first parameters:"
5752
msgstr ""
5753
"As this example is based on <application>KVM</application> and Ubuntu 10.04 "
5754
"LTS (Lucid Lynx), and we are likely to rebuild the same virtual machine "
5755
"multiple time, we'll invoke vmbuilder with the following first parameters:"
5756
5757
#: serverguide/C/virtualization.xml:580(command)
5758
msgid ""
5759
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
5760
"libvirt qemu:///system"
5761
msgstr ""
5762
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
5763
"libvirt qemu:///system"
5764
5765
#: serverguide/C/virtualization.xml:583(para)
5766
msgid ""
5767
"The <emphasis>--suite</emphasis> defines the Ubuntu release, the <emphasis>--"
5768
"flavour</emphasis> specifies that we want to use the virtual kernel (that's "
5769
"the one used to build a JeOS image), the <emphasis>--arch</emphasis> tells "
5770
"that we want to use a 32 bit machine, the <emphasis>-o</emphasis> tells "
5771
"vmbuilder to overwrite the previous version of the VM and the <emphasis>--"
5772
"libvirt</emphasis> tells to inform the local virtualization environment to "
5773
"add the resulting VM to the list of available machines."
5774
msgstr ""
5775
"The <emphasis>--suite</emphasis> defines the Ubuntu release, the <emphasis>--"
5776
"flavour</emphasis> specifies that we want to use the virtual kernel (that's "
5777
"the one used to build a JeOS image), the <emphasis>--arch</emphasis> tells "
5778
"that we want to use a 32 bit machine, the <emphasis>-o</emphasis> tells "
5779
"vmbuilder to overwrite the previous version of the VM and the <emphasis>--"
5780
"libvirt</emphasis> tells to inform the local virtualisation environment to "
5781
"add the resulting VM to the list of available machines."
5782
5783
#: serverguide/C/virtualization.xml:591(para)
5784
msgid "Notes:"
5785
msgstr "Notes:"
5786
5787
#: serverguide/C/virtualization.xml:597(para)
5788
msgid ""
5789
"Because of the nature of operations performed by vmbuilder, it needs to have "
5790
"root privilege, hence the use of sudo."
5791
msgstr ""
5792
"Because of the nature of operations performed by vmbuilder, it needs to have "
5793
"root privilege, hence the use of sudo."
5794
5795
#: serverguide/C/virtualization.xml:602(para)
5796
msgid ""
5797
"If your virtual machine needs to use more than 3Gb of ram, you should build "
5798
"a 64 bit machine (--arch amd64)."
5799
msgstr ""
5800
"If your virtual machine needs to use more than 3Gb of ram, you should build "
5801
"a 64 bit machine (--arch amd64)."
5802
5803
#: serverguide/C/virtualization.xml:607(para)
5804
msgid ""
5805
"Until Ubuntu 8.10, the virtual kernel was only built for 32 bit "
5806
"architecture, so if you want to define an amd64 machine on Hardy, you should "
5807
"use <emphasis>--flavour</emphasis> server instead."
5808
msgstr ""
5809
"Until Ubuntu 8.10, the virtual kernel was only built for 32 bit "
5810
"architecture, so if you want to define an amd64 machine on Hardy, you should "
5811
"use <emphasis>--flavour</emphasis> server instead."
5812
5813
#: serverguide/C/virtualization.xml:615(title)
5814
msgid "JeOS Installation Parameters"
5815
msgstr "JeOS Installation Parameters"
5816
5817
#: serverguide/C/virtualization.xml:618(title)
5818
msgid "JeOS Networking"
5819
msgstr "JeOS Networking"
5820
5821
#: serverguide/C/virtualization.xml:621(title)
5822
msgid "Assigning a fixed IP address"
5823
msgstr "Assigning a fixed IP address"
5824
5825
#: serverguide/C/virtualization.xml:623(para)
5826
msgid ""
5827
"As a virtual appliance that may be deployed on various very different "
5828
"networks, it is very difficult to know what the actual network will look "
5829
"like. In order to simplify configuration, it is a good idea to take an "
5830
"approach similar to what network hardware vendors usually do, namely "
5831
"assigning an initial fixed IP address to the appliance in a private class "
5832
"network that you will provide in your documentation. An address in the range "
5833
"192.168.0.0/255 is usually a good choice."
5834
msgstr ""
5835
"As a virtual appliance that may be deployed on various very different "
5836
"networks, it is very difficult to know what the actual network will look "
5837
"like. In order to simplify configuration, it is a good idea to take an "
5838
"approach similar to what network hardware vendors usually do, namely "
5839
"assigning an initial fixed IP address to the appliance in a private class "
5840
"network that you will provide in your documentation. An address in the range "
5841
"192.168.0.0/255 is usually a good choice."
5842
5843
#: serverguide/C/virtualization.xml:630(para)
5844
msgid "To do this we'll use the following parameters:"
5845
msgstr "To do this we'll use the following parameters:"
5846
5847
#: serverguide/C/virtualization.xml:636(para)
5848
msgid ""
5849
"<emphasis>--ip ADDRESS</emphasis>: IP address in dotted form (defaults to "
5850
"dhcp if not specified)"
5851
msgstr ""
5852
"<emphasis>--ip ADDRESS</emphasis>: IP address in dotted form (defaults to "
5853
"dhcp if not specified)"
5854
5855
#: serverguide/C/virtualization.xml:641(para)
5856
msgid ""
5857
"<emphasis>--mask VALUE</emphasis>: IP mask in dotted form (default: "
5858
"255.255.255.0)"
5859
msgstr ""
5860
"<emphasis>--mask VALUE</emphasis>: IP mask in dotted form (default: "
5861
"255.255.255.0)"
5862
5863
#: serverguide/C/virtualization.xml:646(para)
5864
msgid "<emphasis>--net VALUE</emphasis>: IP net address (default: X.X.X.0)"
5865
msgstr "<emphasis>--net VALUE</emphasis>: IP net address (default: X.X.X.0)"
5866
5867
#: serverguide/C/virtualization.xml:651(para)
5868
msgid "<emphasis>--bcast VALUE</emphasis>: IP broadcast (default: X.X.X.255)"
5869
msgstr ""
5870
"<emphasis>--bcast VALUE</emphasis>: IP broadcast (default: X.X.X.255)"
5871
5872
#: serverguide/C/virtualization.xml:656(para)
5873
msgid "<emphasis>--gw ADDRESS</emphasis>: Gateway address (default: X.X.X.1)"
5874
msgstr ""
5875
"<emphasis>--gw ADDRESS</emphasis>: Gateway address (default: X.X.X.1)"
5876
5877
#: serverguide/C/virtualization.xml:661(para)
5878
msgid ""
5879
"<emphasis>--dns ADDRESS</emphasis>: Name server address (default: X.X.X.1)"
5880
msgstr ""
5881
"<emphasis>--dns ADDRESS</emphasis>: Name server address (default: X.X.X.1)"
5882
5883
#: serverguide/C/virtualization.xml:667(para)
5884
msgid ""
5885
"We assume for now that default values are good enough, so the resulting "
5886
"invocation becomes:"
5887
msgstr ""
5888
"We assume for now that default values are good enough, so the resulting "
5889
"invocation becomes:"
5890
5891
#: serverguide/C/virtualization.xml:672(command)
5892
msgid ""
5893
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
5894
"libvirt qemu:///system --ip 192.168.0.100"
5895
msgstr ""
5896
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o --"
5897
"libvirt qemu:///system --ip 192.168.0.100"
5898
5899
#: serverguide/C/virtualization.xml:677(title)
5900
msgid "Modifying the libvirt Template to use Bridging"
5901
msgstr "Modifying the libvirt Template to use Bridging"
5902
5903
#: serverguide/C/virtualization.xml:679(para)
5904
msgid ""
5905
"Because our appliance will be likely to need to be accessed by remote hosts, "
5906
"we need to configure libvirt so that the appliance uses bridge networking. "
5907
"To do this we use vmbuilder template mechanism to modify the default one."
5908
msgstr ""
5909
"Because our appliance will be likely to need to be accessed by remote hosts, "
5910
"we need to configure libvirt so that the appliance uses bridge networking. "
5911
"To do this we use vmbuilder template mechanism to modify the default one."
5912
5913
#: serverguide/C/virtualization.xml:684(para)
5914
msgid ""
5915
"In our working directory we create the template hierarchy and copy the "
5916
"default template:"
5917
msgstr ""
5918
"In our working directory we create the template hierarchy and copy the "
5919
"default template:"
5920
5921
#: serverguide/C/virtualization.xml:689(command)
5922
msgid "mkdir -p VMBuilder/plugins/libvirt/templates"
5923
msgstr "mkdir -p VMBuilder/plugins/libvirt/templates"
5924
5925
#: serverguide/C/virtualization.xml:690(command)
5926
msgid "cp /etc/vmbuilder/libvirt/* VMBuilder/plugins/libvirt/templates/"
5927
msgstr "cp /etc/vmbuilder/libvirt/* VMBuilder/plugins/libvirt/templates/"
5928
5929
#: serverguide/C/virtualization.xml:693(para)
5930
msgid ""
5931
"We can then edit "
5932
"<filename>VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl</filename> to "
5933
"change:"
5934
msgstr ""
5935
"We can then edit "
5936
"<filename>VMBuilder/plugins/libvirt/templates/libvirtxml.tmpl</filename> to "
5937
"change:"
5938
5939
#: serverguide/C/virtualization.xml:697(programlisting)
5940
#, no-wrap
5941
msgid ""
5942
"\n"
5943
" <interface type='network'>\n"
5944
" <source network='default'/>\n"
5945
" </interface>\n"
5946
msgstr ""
5947
"\n"
5948
" <interface type='network'>\n"
5949
" <source network='default'/>\n"
5950
" </interface>\n"
5951
5952
#: serverguide/C/virtualization.xml:703(para)
5953
msgid "To:"
5954
msgstr "To:"
5955
5956
#: serverguide/C/virtualization.xml:707(programlisting)
5957
#, no-wrap
5958
msgid ""
5959
"\n"
5960
" <interface type='bridge'>\n"
5961
" <source bridge='br0'/>\n"
5962
" </interface>\n"
5963
msgstr ""
5964
"\n"
5965
" <interface type='bridge'>\n"
5966
" <source bridge='br0'/>\n"
5967
" </interface>\n"
5968
5969
#: serverguide/C/virtualization.xml:717(title) serverguide/C/installation.xml:459(title)
5970
msgid "Partitioning"
5971
msgstr "Partitioning"
5972
5973
#: serverguide/C/virtualization.xml:719(para)
5974
msgid ""
5975
"Partitioning of the virtual appliance will have to take into consideration "
5976
"what you are planning to do with is. Because most appliances want to have a "
5977
"separate storage for data, having a separate <filename>/var</filename> would "
5978
"make sense."
5979
msgstr ""
5980
"Partitioning of the virtual appliance will have to take into consideration "
5981
"what you are planning to do with is. Because most appliances want to have a "
5982
"separate storage for data, having a separate <filename>/var</filename> would "
5983
"make sense."
5984
5985
#: serverguide/C/virtualization.xml:724(para)
5986
msgid ""
5987
"In order to do this vmbuilder provides us with <emphasis>--part</emphasis>:"
5988
msgstr ""
5989
"In order to do this vmbuilder provides us with <emphasis>--part</emphasis>:"
5990
5991
#: serverguide/C/virtualization.xml:728(programlisting)
5992
#, no-wrap
5993
msgid ""
5994
"\n"
5995
"--part PATH\n"
5996
" Allows you to specify a partition table in a partition file, located at "
5997
"PATH. Each line of the partition file should specify\n"
5998
" (root first):\n"
5999
" mountpoint size\n"
6000
" where size is in megabytes. You can have up to 4 virtual disks, a new "
6001
"disk starts on a\n"
6002
" line with ’---’. ie :\n"
6003
" root 1000\n"
6004
" /opt 1000\n"
6005
" swap 256\n"
6006
" ---\n"
6007
" /var 2000\n"
6008
" /log 1500\n"
6009
msgstr ""
6010
6011
#: serverguide/C/virtualization.xml:743(para)
6012
msgid ""
6013
"In our case we will define a text file name "
6014
"<filename>vmbuilder.partition</filename> which will contain the following:"
6015
msgstr ""
6016
"In our case we will define a text file name "
6017
"<filename>vmbuilder.partition</filename> which will contain the following:"
6018
6019
#: serverguide/C/virtualization.xml:747(programlisting)
6020
#, no-wrap
6021
msgid ""
6022
"\n"
6023
"root 8000\n"
6024
"swap 4000\n"
6025
"---\n"
6026
"/var 20000\n"
6027
msgstr ""
6028
"\n"
6029
"root 8000\n"
6030
"swap 4000\n"
6031
"---\n"
6032
"/var 20000\n"
6033
6034
#: serverguide/C/virtualization.xml:755(para)
6035
msgid ""
6036
"Note that as we are using virtual disk images, the actual sizes that we put "
6037
"here are maximum sizes for these volumes."
6038
msgstr ""
6039
"Note that as we are using virtual disk images, the actual sizes that we put "
6040
"here are maximum sizes for these volumes."
6041
6042
#: serverguide/C/virtualization.xml:760(para)
6043
msgid "Our command line now looks like:"
6044
msgstr "Our command line now looks like:"
6045
6046
#: serverguide/C/virtualization.xml:765(command)
6047
msgid ""
6048
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
6049
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition"
6050
msgstr ""
6051
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
6052
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition"
6053
6054
#: serverguide/C/virtualization.xml:770(para)
6055
msgid ""
6056
"Using a \"\\\" in a command will allow long command strings to wrap to the "
6057
"next line."
6058
msgstr ""
6059
"Using a \"\\\" in a command will allow long command strings to wrap to the "
6060
"next line."
6061
6062
#: serverguide/C/virtualization.xml:777(title)
6063
msgid "User and Password"
6064
msgstr "User and Password"
6065
6066
#: serverguide/C/virtualization.xml:779(para)
6067
msgid ""
6068
"Again setting up a virtual appliance, you will need to provide a default "
6069
"user and password that is generic so that you can include it in your "
6070
"documentation. We will see later on in this tutorial how we will provide "
6071
"some security by defining a script that will be run the first time a user "
6072
"actually logs in the appliance, that will, among other things, ask him to "
6073
"change his password. In this example I will use <emphasis>'user'</emphasis> "
6074
"as my user name, and <emphasis>'default'</emphasis> as the password."
6075
msgstr ""
6076
"Again setting up a virtual appliance, you will need to provide a default "
6077
"user and password that is generic so that you can include it in your "
6078
"documentation. We will see later on in this tutorial how we will provide "
6079
"some security by defining a script that will be run the first time a user "
6080
"actually logs in the appliance, that will, among other things, ask him to "
6081
"change his password. In this example I will use <emphasis>'user'</emphasis> "
6082
"as my user name, and <emphasis>'default'</emphasis> as the password."
6083
6084
#: serverguide/C/virtualization.xml:787(para)
6085
msgid "To do this we use the following optional parameters:"
6086
msgstr "To do this we use the following optional parameters:"
6087
6088
#: serverguide/C/virtualization.xml:793(para)
6089
msgid ""
6090
"<emphasis>--user USERNAME:</emphasis> Sets the name of the user to be added. "
6091
"Default: ubuntu."
6092
msgstr ""
6093
"<emphasis>--user USERNAME:</emphasis> Sets the name of the user to be added. "
6094
"Default: ubuntu."
6095
6096
#: serverguide/C/virtualization.xml:798(para)
6097
msgid ""
6098
"<emphasis>--name FULLNAME:</emphasis> Sets the full name of the user to be "
6099
"added. Default: Ubuntu."
6100
msgstr ""
6101
"<emphasis>--name FULLNAME:</emphasis> Sets the full name of the user to be "
6102
"added. Default: Ubuntu."
6103
6104
#: serverguide/C/virtualization.xml:803(para)
6105
msgid ""
6106
"<emphasis>--pass PASSWORD:</emphasis> Sets the password for the user. "
6107
"Default: ubuntu."
6108
msgstr ""
6109
"<emphasis>--pass PASSWORD:</emphasis> Sets the password for the user. "
6110
"Default: ubuntu."
6111
6112
#: serverguide/C/virtualization.xml:809(para)
6113
msgid "Our resulting command line becomes:"
6114
msgstr "Our resulting command line becomes:"
6115
6116
#: serverguide/C/virtualization.xml:814(command)
6117
msgid ""
6118
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 \\ -o -"
6119
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition \\ --"
6120
"user user --name user --pass default"
6121
msgstr ""
6122
6123
#: serverguide/C/virtualization.xml:822(title)
6124
msgid "Installing Required Packages"
6125
msgstr "Installing Required Packages"
6126
6127
#: serverguide/C/virtualization.xml:824(para)
6128
msgid ""
6129
"In this example we will be installing a package "
6130
"<application>(Limesurvey)</application> that accesses a "
6131
"<application>MySQL</application> database and has a web interface. We will "
6132
"therefore require our OS to provide us with:"
6133
msgstr ""
6134
"In this example we will be installing a package "
6135
"<application>(Limesurvey)</application> that accesses a "
6136
"<application>MySQL</application> database and has a web interface. We will "
6137
"therefore require our OS to provide us with:"
6138
6139
#: serverguide/C/virtualization.xml:831(para)
6140
msgid "Apache"
6141
msgstr "Apache"
6142
6143
#: serverguide/C/virtualization.xml:832(para)
6144
msgid "PHP"
6145
msgstr "PHP"
6146
6147
#: serverguide/C/virtualization.xml:833(para) serverguide/C/databases.xml:19(trademark) serverguide/C/databases.xml:31(title)
6148
msgid "MySQL"
6149
msgstr "MySQL"
6150
6151
#: serverguide/C/virtualization.xml:834(para) serverguide/C/remote-administration.xml:20(title)
6152
msgid "OpenSSH Server"
6153
msgstr "OpenSSH Server"
6154
6155
#: serverguide/C/virtualization.xml:835(para)
6156
msgid "Limesurvey (as an example application that we have packaged)"
6157
msgstr "Limesurvey (as an example application that we have packaged)"
6158
6159
#: serverguide/C/virtualization.xml:838(para)
6160
msgid ""
6161
"This is done using vmbuilder by specifying the --addpkg option multiple "
6162
"times:"
6163
msgstr ""
6164
6165
#: serverguide/C/virtualization.xml:842(programlisting)
6166
#, no-wrap
6167
msgid ""
6168
"\n"
6169
"--addpkg PKG\n"
6170
" Install PKG into the guest (can be specfied multiple times)\n"
6171
msgstr ""
6172
"\n"
6173
"--addpkg PKG\n"
6174
" Install PKG into the guest (can be specfied multiple times)\n"
6175
6176
#: serverguide/C/virtualization.xml:847(para)
6177
msgid ""
6178
"However, due to the way vmbuilder operates, packages that have to ask "
6179
"questions to the user during the post install phase are not supported and "
6180
"should instead be installed while interactivity can occur. This is the case "
6181
"of Limesurvey, which we will have to install later, once the user logs in."
6182
msgstr ""
6183
"However, due to the way vmbuilder operates, packages that have to ask "
6184
"questions to the user during the post install phase are not supported and "
6185
"should instead be installed while interactivity can occur. This is the case "
6186
"of Limesurvey, which we will have to install later, once the user logs in."
6187
6188
#: serverguide/C/virtualization.xml:853(para)
6189
msgid ""
6190
"Other packages that ask simple debconf question, such as <application>mysql-"
6191
"server</application> asking to set a password, the package can be installed "
6192
"immediately, but we will have to reconfigure it the first time the user logs "
6193
"in."
6194
msgstr ""
6195
"Other packages that ask simple debconf question, such as <application>mysql-"
6196
"server</application> asking to set a password, the package can be installed "
6197
"immediately, but we will have to reconfigure it the first time the user logs "
6198
"in."
6199
6200
#: serverguide/C/virtualization.xml:859(para)
6201
msgid ""
6202
"If some packages that we need to install are not in main, we need to enable "
6203
"the additional repositories using --comp and --ppa:"
6204
msgstr ""
6205
"If some packages that we need to install are not in main, we need to enable "
6206
"the additional repositories using --comp and --ppa:"
6207
6208
#: serverguide/C/virtualization.xml:863(programlisting)
6209
#, no-wrap
6210
msgid ""
6211
"\n"
6212
"--components COMP1,COMP2,...,COMPN\n"
6213
" A comma separated list of distro components to include (e.g. "
6214
"main,universe). This defaults\n"
6215
" to \"main\"\n"
6216
"--ppa=PPA Add ppa belonging to PPA to the vm's sources.list.\n"
6217
msgstr ""
6218
"\n"
6219
"--components COMP1,COMP2,...,COMPN\n"
6220
" A comma separated list of distro components to include (e.g. "
6221
"main,universe). This defaults\n"
6222
" to \"main\"\n"
6223
"--ppa=PPA Add ppa belonging to PPA to the vm's sources.list.\n"
6224
6225
#: serverguide/C/virtualization.xml:870(para)
6226
msgid ""
6227
"Limesurvey not being part of the archive at the moment, we'll specify it's "
6228
"PPA (personal package archive) address so that it is added to the VM "
6229
"<filename>/etc/apt/source.list</filename>, so we add the following options "
6230
"to the command line:"
6231
msgstr ""
6232
"Limesurvey not being part of the archive at the moment, we'll specify it's "
6233
"PPA (personal package archive) address so that it is added to the VM "
6234
"<filename>/etc/apt/source.list</filename>, so we add the following options "
6235
"to the command line:"
6236
6237
#: serverguide/C/virtualization.xml:876(command)
6238
msgid ""
6239
"--addpkg apache2 --addpkg apache2-mpm-prefork --addpkg apache2-utils --"
6240
"addpkg apache2.2-common \\ --addpkg dbconfig-common --addpkg libapache2-mod-"
6241
"php5 --addpkg mysql-client --addpkg php5-cli \\ --addpkg php5-gd --addpkg "
6242
"php5-ldap --addpkg php5-mysql --addpkg wwwconfig-common \\ --addpkg mysql-"
6243
"server --ppa nijaba"
6244
msgstr ""
6245
"--addpkg apache2 --addpkg apache2-mpm-prefork --addpkg apache2-utils --"
6246
"addpkg apache2.2-common \\ --addpkg dbconfig-common --addpkg libapache2-mod-"
6247
"php5 --addpkg mysql-client --addpkg php5-cli \\ --addpkg php5-gd --addpkg "
6248
"php5-ldap --addpkg php5-mysql --addpkg wwwconfig-common \\ --addpkg mysql-"
6249
"server --ppa nijaba"
6250
6251
#: serverguide/C/virtualization.xml:883(title)
6252
msgid "OpenSSH"
6253
msgstr "OpenSSH"
6254
6255
#: serverguide/C/virtualization.xml:885(para)
6256
msgid ""
6257
"Another convenient tool that we want to have on our appliance is OpenSSH, as "
6258
"it will allow our admins to access the appliance remotely. However, pushing "
6259
"in the wild an appliance with a pre-installed OpenSSH server is a big "
6260
"security risk as all these server will share the same secret key, making it "
6261
"very easy for hackers to target our appliance with all the tools they need "
6262
"to crack it open in a breeze. As for the user password, we will instead rely "
6263
"on a script that will install OpenSSH the first time a user logs in so that "
6264
"the key generated will be different for each appliance. For this we'll use a "
6265
"<emphasis>--firstboot</emphasis> script, as it does not need any user "
6266
"interaction."
6267
msgstr ""
6268
"Another convenient tool that we want to have on our appliance is OpenSSH, as "
6269
"it will allow our admins to access the appliance remotely. However, pushing "
6270
"in the wild an appliance with a pre-installed OpenSSH server is a big "
6271
"security risk as all these server will share the same secret key, making it "
6272
"very easy for hackers to target our appliance with all the tools they need "
6273
"to crack it open in a breeze. As for the user password, we will instead rely "
6274
"on a script that will install OpenSSH the first time a user logs in so that "
6275
"the key generated will be different for each appliance. For this we'll use a "
6276
"<emphasis>--firstboot</emphasis> script, as it does not need any user "
6277
"interaction."
6278
6279
#: serverguide/C/virtualization.xml:897(title)
6280
msgid "Speed Considerations"
6281
msgstr "Speed Considerations"
6282
6283
#: serverguide/C/virtualization.xml:900(title)
6284
msgid "Package Caching"
6285
msgstr "Package Caching"
6286
6287
#: serverguide/C/virtualization.xml:902(para)
6288
msgid ""
6289
"When vmbuilder creates builds your system, it has to go fetch each one of "
6290
"the packages that composes it over the network to one of the official "
6291
"repositories, which, depending on your internet connection speed and the "
6292
"load of the mirror, can have a big impact on the actual build time. In order "
6293
"to reduce this, it is recommended to either have a local repository (which "
6294
"can be created using <application>apt-mirror</application>) or using a "
6295
"caching proxy such as <application>apt-proxy</application>. The later option "
6296
"being much simpler to implement and requiring less disk space, it is the one "
6297
"we will pick in this tutorial. To install it, simply type:"
6298
msgstr ""
6299
6300
#: serverguide/C/virtualization.xml:912(command)
6301
msgid "sudo apt-get install apt-proxy"
6302
msgstr "sudo apt-get install apt-proxy"
6303
6304
#: serverguide/C/virtualization.xml:915(para)
6305
msgid ""
6306
"Once this is complete, your (empty) proxy is ready for use on "
6307
"http://mirroraddress:9999 and will find ubuntu repository under /ubuntu. For "
6308
"vmbuilder to use it, we'll have to use the <emphasis>--mirror</emphasis> "
6309
"option:"
6310
msgstr ""
6311
"Once this is complete, your (empty) proxy is ready for use on "
6312
"http://mirroraddress:9999 and will find ubuntu repository under /ubuntu. For "
6313
"vmbuilder to use it, we'll have to use the <emphasis>--mirror</emphasis> "
6314
"option:"
6315
6316
#: serverguide/C/virtualization.xml:920(programlisting)
6317
#, no-wrap
6318
msgid ""
6319
"\n"
6320
"--mirror=URL Use Ubuntu mirror at URL instead of the default, which\n"
6321
" is http://archive.ubuntu.com/ubuntu for official\n"
6322
" arches and http://ports.ubuntu.com/ubuntu-ports\n"
6323
" otherwise\n"
6324
msgstr ""
6325
"\n"
6326
"--mirror=URL Use Ubuntu mirror at URL instead of the default, which\n"
6327
" is http://archive.ubuntu.com/ubuntu for official\n"
6328
" arches and http://ports.ubuntu.com/ubuntu-ports\n"
6329
" otherwise\n"
6330
6331
#: serverguide/C/virtualization.xml:927(para)
6332
msgid "So we add to the command line:"
6333
msgstr "So we add to the command line:"
6334
6335
#: serverguide/C/virtualization.xml:932(command)
6336
msgid "--mirror http://mirroraddress:9999/ubuntu"
6337
msgstr "--mirror http://mirroraddress:9999/ubuntu"
6338
6339
#: serverguide/C/virtualization.xml:936(para)
6340
msgid ""
6341
"The mirror address specified here will also be used in the "
6342
"<filename>/etc/apt/sources.list</filename> of the newly created guest, so it "
6343
"is useful to specify here an address that can be resolved by the guest or to "
6344
"plan on reseting this address later on, such as in a <emphasis>--"
6345
"firstboot</emphasis> script."
6346
msgstr ""
6347
6348
#: serverguide/C/virtualization.xml:945(title)
6349
msgid "Install a Local Mirror"
6350
msgstr "Install a Local Mirror"
6351
6352
#: serverguide/C/virtualization.xml:947(para)
6353
msgid ""
6354
"If we are in a larger environment, it may make sense to setup a local mirror "
6355
"of the Ubuntu repositories. The package apt-mirror provides you with a "
6356
"script that will handle the mirroring for you. You should plan on having "
6357
"about 20 gigabyte of free space per supported release and architecture."
6358
msgstr ""
6359
"If we are in a larger environment, it may make sense to setup a local mirror "
6360
"of the Ubuntu repositories. The package apt-mirror provides you with a "
6361
"script that will handle the mirroring for you. You should plan on having "
6362
"about 20 gigabyte of free space per supported release and architecture."
6363
6364
#: serverguide/C/virtualization.xml:953(para)
6365
msgid ""
6366
"By default, <application>apt-mirror</application> uses the configuration "
6367
"file in <filename>/etc/apt/mirror.list</filename>. As it is set up, it will "
6368
"replicate only the architecture of the local machine. If you would like to "
6369
"support other architectures on your mirror, simply duplicate the lines "
6370
"starting with “deb”, replacing the deb keyword by /deb-{arch} where arch can "
6371
"be i386, amd64, etc... For example, on an amd64 machine, to have the i386 "
6372
"archives as well, you will have:"
6373
msgstr ""
6374
"By default, <application>apt-mirror</application> uses the configuration "
6375
"file in <filename>/etc/apt/mirror.list</filename>. As it is set up, it will "
6376
"replicate only the architecture of the local machine. If you would like to "
6377
"support other architectures on your mirror, simply duplicate the lines "
6378
"starting with “deb”, replacing the deb keyword by /deb-{arch} where arch can "
6379
"be i386, amd64, etc... For example, on an amd64 machine, to have the i386 "
6380
"archives as well, you will have:"
6381
6382
#: serverguide/C/virtualization.xml:960(programlisting)
6383
#, no-wrap
6384
msgid ""
6385
"\n"
6386
"deb http://archive.ubuntu.com/ubuntu lucid main restricted universe "
6387
"multiverse \n"
6388
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main restricted universe "
6389
"multiverse\n"
6390
"\n"
6391
"deb http://archive.ubuntu.com/ubuntu lucid-updates main restricted universe "
6392
"multiverse \n"
6393
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-updates main restricted "
6394
"universe multiverse \n"
6395
"\n"
6396
"deb http://archive.ubuntu.com/ubuntu/ lucid-backports main restricted "
6397
"universe multiverse \n"
6398
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-backports main restricted "
6399
"universe multiverse \n"
6400
"\n"
6401
"deb http://security.ubuntu.com/ubuntu lucid-security main restricted "
6402
"universe multiverse \n"
6403
"/deb-i386 http://security.ubuntu.com/ubuntu lucid-security main restricted "
6404
"universe multiverse \n"
6405
"\n"
6406
"deb http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
6407
"restricted/debian-installer universe/debian-installer multiverse/debian-"
6408
"installer \n"
6409
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
6410
"restricted/debian-installer universe/debian-installer multiverse/debian-"
6411
"installer \n"
6412
msgstr ""
6413
"\n"
6414
"deb http://archive.ubuntu.com/ubuntu lucid main restricted universe "
6415
"multiverse \n"
6416
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main restricted universe "
6417
"multiverse\n"
6418
"\n"
6419
"deb http://archive.ubuntu.com/ubuntu lucid-updates main restricted universe "
6420
"multiverse \n"
6421
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-updates main restricted "
6422
"universe multiverse \n"
6423
"\n"
6424
"deb http://archive.ubuntu.com/ubuntu/ lucid-backports main restricted "
6425
"universe multiverse \n"
6426
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid-backports main restricted "
6427
"universe multiverse \n"
6428
"\n"
6429
"deb http://security.ubuntu.com/ubuntu lucid-security main restricted "
6430
"universe multiverse \n"
6431
"/deb-i386 http://security.ubuntu.com/ubuntu lucid-security main restricted "
6432
"universe multiverse \n"
6433
"\n"
6434
"deb http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
6435
"restricted/debian-installer universe/debian-installer multiverse/debian-"
6436
"installer \n"
6437
"/deb-i386 http://archive.ubuntu.com/ubuntu lucid main/debian-installer "
6438
"restricted/debian-installer universe/debian-installer multiverse/debian-"
6439
"installer \n"
6440
6441
#: serverguide/C/virtualization.xml:977(para)
6442
msgid ""
6443
"Notice that the source packages are not mirrored as they are seldom used "
6444
"compared to the binaries and they do take a lot more space, but they can be "
6445
"easily added to the list."
6446
msgstr ""
6447
"Notice that the source packages are not mirrored as they are seldom used "
6448
"compared to the binaries and they do take a lot more space, but they can be "
6449
"easily added to the list."
6450
6451
#: serverguide/C/virtualization.xml:982(para)
6452
msgid ""
6453
"Once the mirror has finished replicating (and this can be quite long), you "
6454
"need to configure Apache so that your mirror files (in "
6455
"<filename>/var/spool/apt-mirror</filename> if you did not change the "
6456
"default), are published by your Apache server. For more information on "
6457
"Apache see <xref linkend=\"httpd\"/>."
6458
msgstr ""
6459
"Once the mirror has finished replicating (and this can be quite long), you "
6460
"need to configure Apache so that your mirror files (in "
6461
"<filename>/var/spool/apt-mirror</filename> if you did not change the "
6462
"default), are published by your Apache server. For more information on "
6463
"Apache see <xref linkend=\"httpd\"/>."
6464
6465
#: serverguide/C/virtualization.xml:991(title)
6466
msgid "Installing in a RAM Disk"
6467
msgstr "Installing in a RAM Disk"
6468
6469
#: serverguide/C/virtualization.xml:993(para)
6470
msgid ""
6471
"As you can easily imagine, writing to RAM is a <emphasis>LOT</emphasis> "
6472
"faster than writing to disk. If you have some free memory, letting vmbuilder "
6473
"perform its operation in a RAMdisk will help a lot and the option <emphasis>-"
6474
"-tmpfs</emphasis> will help you do just that:"
6475
msgstr ""
6476
"As you can easily imagine, writing to RAM is a <emphasis>LOT</emphasis> "
6477
"faster than writing to disk. If you have some free memory, letting vmbuilder "
6478
"perform its operation in a RAMdisk will help a lot and the option <emphasis>-"
6479
"-tmpfs</emphasis> will help you do just that:"
6480
6481
#: serverguide/C/virtualization.xml:999(programlisting)
6482
#, no-wrap
6483
msgid ""
6484
"\n"
6485
"--tmpfs OPTS Use a tmpfs as the working directory, specifying its\n"
6486
" size or \"-\" to use tmpfs default (suid,dev,size=1G).\n"
6487
msgstr ""
6488
"\n"
6489
"--tmpfs OPTS Use a tmpfs as the working directory, specifying its\n"
6490
" size or \"-\" to use tmpfs default (suid,dev,size=1G).\n"
6491
6492
#: serverguide/C/virtualization.xml:1004(para)
6493
msgid ""
6494
"So adding <command>--tmpfs -</command> sounds like a very good idea if you "
6495
"have 1G of free ram."
6496
msgstr ""
6497
"So adding <command>--tmpfs -</command> sounds like a very good idea if you "
6498
"have 1G of free ram."
6499
6500
#: serverguide/C/virtualization.xml:1011(title)
6501
msgid "Package the Application"
6502
msgstr "Package the Application"
6503
6504
#: serverguide/C/virtualization.xml:1013(para)
6505
msgid "Two option are available to us:"
6506
msgstr "Two option are available to us:"
6507
6508
#: serverguide/C/virtualization.xml:1019(para)
6509
msgid ""
6510
"The recommended method to do so is to make a <emphasis>Debian</emphasis> "
6511
"package. Since this is outside of the scope of this tutorial, we will not "
6512
"perform this here and invite the reader to read the documentation on how to "
6513
"do this in the <ulink url=\"https://wiki.ubuntu.com/PackagingGuide\">Ubuntu "
6514
"Packaging Guide</ulink>. In this case it is also a good idea to setup a "
6515
"repository for your package so that updates can be conveniently pulled from "
6516
"it. See the <ulink url=\"http://www.debian-"
6517
"administration.org/articles/286\">Debian Administration</ulink> article for "
6518
"a tutorial on this."
6519
msgstr ""
6520
"The recommended method to do so is to make a <emphasis>Debian</emphasis> "
6521
"package. Since this is outside of the scope of this tutorial, we will not "
6522
"perform this here and invite the reader to read the documentation on how to "
6523
"do this in the <ulink url=\"https://wiki.ubuntu.com/PackagingGuide\">Ubuntu "
6524
"Packaging Guide</ulink>. In this case it is also a good idea to setup a "
6525
"repository for your package so that updates can be conveniently pulled from "
6526
"it. See the <ulink url=\"http://www.debian-"
6527
"administration.org/articles/286\">Debian Administration</ulink> article for "
6528
"a tutorial on this."
6529
6530
#: serverguide/C/virtualization.xml:1028(para)
6531
msgid ""
6532
"Manually install the application under <filename>/opt</filename> as "
6533
"recommended by the <ulink url=\"http://www.pathname.com/fhs/\">FHS "
6534
"guidelines</ulink>."
6535
msgstr ""
6536
"Manually install the application under <filename>/opt</filename> as "
6537
"recommended by the <ulink url=\"http://www.pathname.com/fhs/\">FHS "
6538
"guidelines</ulink>."
6539
6540
#: serverguide/C/virtualization.xml:1035(para)
6541
msgid ""
6542
"In our case we'll use <application>Limesurvey</application> as example web "
6543
"application for which we wish to provide a virtual appliance. As noted "
6544
"before, we've made a version of the package available in a PPA (Personal "
6545
"Package Archive)."
6546
msgstr ""
6547
"In our case we'll use <application>Limesurvey</application> as example web "
6548
"application for which we wish to provide a virtual appliance. As noted "
6549
"before, we've made a version of the package available in a PPA (Personal "
6550
"Package Archive)."
6551
6552
#: serverguide/C/virtualization.xml:1042(title)
6553
msgid "Finishing Install"
6554
msgstr "Finishing Install"
6555
6556
#: serverguide/C/virtualization.xml:1045(title)
6557
msgid "First Boot"
6558
msgstr "First Boot"
6559
6560
#: serverguide/C/virtualization.xml:1047(para)
6561
msgid ""
6562
"As we mentioned earlier, the first time the machine boots we'll need to "
6563
"install <application>openssh-server</application> so that the key generated "
6564
"for it is unique for each machine. To do this, we'll write a script called "
6565
"<filename>boot.sh</filename> as follows:"
6566
msgstr ""
6567
"As we mentioned earlier, the first time the machine boots we'll need to "
6568
"install <application>openssh-server</application> so that the key generated "
6569
"for it is unique for each machine. To do this, we'll write a script called "
6570
"<filename>boot.sh</filename> as follows:"
6571
6572
#: serverguide/C/virtualization.xml:1053(programlisting)
6573
#, no-wrap
6574
msgid ""
6575
"\n"
6576
"# This script will run the first time the virtual machine boots\n"
6577
"# It is ran as root.\n"
6578
"\n"
6579
"apt-get update\n"
6580
"apt-get install -qqy --force-yes openssh-server\n"
6581
msgstr ""
6582
"\n"
6583
"# This script will run the first time the virtual machine boots\n"
6584
"# It is ran as root.\n"
6585
"\n"
6586
"apt-get update\n"
6587
"apt-get install -qqy --force-yes openssh-server\n"
6588
6589
#: serverguide/C/virtualization.xml:1061(para)
6590
msgid ""
6591
"And we add the <command>--firstboot boot.sh</command> option to our command "
6592
"line."
6593
msgstr ""
6594
"And we add the <command>--firstboot boot.sh</command> option to our command "
6595
"line."
6596
6597
#: serverguide/C/virtualization.xml:1067(title)
6598
msgid "First Login"
6599
msgstr "First Login"
6600
6601
#: serverguide/C/virtualization.xml:1069(para)
6602
msgid ""
6603
"Mysql and Limesurvey needing some user interaction during their setup, we'll "
6604
"set them up the first time a user logs in using a script named login.sh. "
6605
"We'll also use this script to let the user specify:"
6606
msgstr ""
6607
"Mysql and Limesurvey needing some user interaction during their setup, we'll "
6608
"set them up the first time a user logs in using a script named login.sh. "
6609
"We'll also use this script to let the user specify:"
6610
6611
#: serverguide/C/virtualization.xml:1075(para)
6612
msgid "His own password"
6613
msgstr "His own password"
6614
6615
#: serverguide/C/virtualization.xml:1076(para)
6616
msgid "Define the keyboard and other locale info he wants to use"
6617
msgstr "Define the keyboard and other locale info he wants to use"
6618
6619
#: serverguide/C/virtualization.xml:1079(para)
6620
msgid "So we'll define <filename>login.sh</filename> as follows:"
6621
msgstr "So we'll define <filename>login.sh</filename> as follows:"
6622
6623
#: serverguide/C/virtualization.xml:1083(programlisting)
6624
#, no-wrap
6625
msgid ""
6626
"\n"
6627
"# This script is ran the first time a user logs in\n"
6628
"\n"
6629
"echo \"Your appliance is about to be finished to be set up.\"\n"
6630
"echo \"In order to do it, we'll need to ask you a few questions,\"\n"
6631
"echo \"starting by changing your user password.\"\n"
6632
"\n"
6633
"passwd\n"
6634
"\n"
6635
"#give the opportunity to change the keyboard\n"
6636
"sudo dpkg-reconfigure console-setup\n"
6637
"\n"
6638
"#configure the mysql server root password\n"
6639
"sudo dpkg-reconfigure mysql-server-5.0\n"
6640
"\n"
6641
"#install limesurvey\n"
6642
"sudo apt-get install -qqy --force-yes limesurvey\n"
6643
"\n"
6644
"echo \"Your appliance is now configured. To use it point your\"\n"
6645
"echo \"browser to http://serverip/limesurvey/admin\"\n"
6646
msgstr ""
6647
"\n"
6648
"# This script is ran the first time a user logs in\n"
6649
"\n"
6650
"echo \"Your appliance is about to be finished to be set up.\"\n"
6651
"echo \"In order to do it, we'll need to ask you a few questions,\"\n"
6652
"echo \"starting by changing your user password.\"\n"
6653
"\n"
6654
"passwd\n"
6655
"\n"
6656
"#give the opportunity to change the keyboard\n"
6657
"sudo dpkg-reconfigure console-setup\n"
6658
"\n"
6659
"#configure the mysql server root password\n"
6660
"sudo dpkg-reconfigure mysql-server-5.0\n"
6661
"\n"
6662
"#install limesurvey\n"
6663
"sudo apt-get install -qqy --force-yes limesurvey\n"
6664
"\n"
6665
"echo \"Your appliance is now configured. To use it point your\"\n"
6666
"echo \"browser to http://serverip/limesurvey/admin\"\n"
6667
6668
#: serverguide/C/virtualization.xml:1105(para)
6669
msgid ""
6670
"And we add the <command>--firstlogin login.sh</command> option to our "
6671
"command line."
6672
msgstr ""
6673
"And we add the <command>--firstlogin login.sh</command> option to our "
6674
"command line."
6675
6676
#: serverguide/C/virtualization.xml:1112(title)
6677
msgid "Useful Additions"
6678
msgstr "Useful Additions"
6679
6680
#: serverguide/C/virtualization.xml:1115(title)
6681
msgid "Configuring Automatic Updates"
6682
msgstr "Configuring Automatic Updates"
6683
6684
#: serverguide/C/virtualization.xml:1117(para)
6685
msgid ""
6686
"To have your system be configured to update itself on a regular basis, we "
6687
"will just install <application>unattended-upgrades</application>, so we add "
6688
"the following option to our command line:"
6689
msgstr ""
6690
"To have your system be configured to update itself on a regular basis, we "
6691
"will just install <application>unattended-upgrades</application>, so we add "
6692
"the following option to our command line:"
6693
6694
#: serverguide/C/virtualization.xml:1123(command)
6695
msgid "--addpkg unattended-upgrades"
6696
msgstr "--addpkg unattended-upgrades"
6697
6698
#: serverguide/C/virtualization.xml:1126(para)
6699
msgid ""
6700
"As we have put our application package in a PPA, the process will update not "
6701
"only the system, but also the application each time we update the version in "
6702
"the PPA."
6703
msgstr ""
6704
"As we have put our application package in a PPA, the process will update not "
6705
"only the system, but also the application each time we update the version in "
6706
"the PPA."
6707
6708
#: serverguide/C/virtualization.xml:1133(title)
6709
msgid "ACPI Event Handling"
6710
msgstr "ACPI Event Handling"
6711
6712
#: serverguide/C/virtualization.xml:1135(para)
6713
msgid ""
6714
"For your virtual machine to be able to handle restart and shutdown events it "
6715
"is being sent, it is a good idea to install the acpid package as well. To do "
6716
"this we just add the following option:"
6717
msgstr ""
6718
"For your virtual machine to be able to handle restart and shutdown events it "
6719
"is being sent, it is a good idea to install the acpid package as well. To do "
6720
"this we just add the following option:"
6721
6722
#: serverguide/C/virtualization.xml:1141(command)
6723
msgid "--addpkg acpid"
6724
msgstr "--addpkg acpid"
6725
6726
#: serverguide/C/virtualization.xml:1147(title)
6727
msgid "Final Command"
6728
msgstr "Final Command"
6729
6730
#: serverguide/C/virtualization.xml:1149(para)
6731
msgid "Here is the command with all the options discussed above:"
6732
msgstr "Here is the command with all the options discussed above:"
6733
6734
#: serverguide/C/virtualization.xml:1154(command)
6735
msgid ""
6736
"sudo vmbuilder kvm ubuntu --suite lucid --flavour virtual --arch i386 -o \\ -"
6737
"-libvirt qemu:///system --ip 192.168.0.100 --part vmbuilder.partition --user "
6738
"user \\ --name user --pass default --addpkg apache2 --addpkg apache2-mpm-"
6739
"prefork \\ --addpkg apache2-utils --addpkg apache2.2-common --addpkg "
6740
"dbconfig-common \\ --addpkg libapache2-mod-php5 --addpkg mysql-client --"
6741
"addpkg php5-cli \\ --addpkg php5-gd --addpkg php5-ldap --addpkg php5-mysql --"
6742
"addpkg wwwconfig-common \\ --addpkg mysql-server --addpkg unattended-"
6743
"upgrades --addpkg acpid --ppa nijaba \\ --mirror "
6744
"http://mirroraddress:9999/ubuntu --tmpfs - --firstboot boot.sh \\ --"
6745
"firstlogin login.sh es"
6746
msgstr ""
6747
6748
#: serverguide/C/virtualization.xml:1169(para)
6749
msgid ""
6750
"If you are interested in learning more, have questions or suggestions, "
6751
"please contact the Ubuntu Server Team at:"
6752
msgstr ""
6753
"If you are interested in learning more, have questions or suggestions, "
6754
"please contact the Ubuntu Server Team at:"
6755
6756
#: serverguide/C/virtualization.xml:1174(para)
6757
msgid "IRC: #ubuntu-server on freenode"
6758
msgstr "IRC: #ubuntu-server on freenode"
6759
6760
#: serverguide/C/virtualization.xml:1179(para)
6761
msgid ""
6762
"Mailing list: <ulink url=\"https://lists.ubuntu.com/mailman/listinfo/ubuntu-"
6763
"server\">ubuntu-server at lists.ubuntu.com</ulink>"
6764
msgstr ""
6765
"Mailing list: <ulink url=\"https://lists.ubuntu.com/mailman/listinfo/ubuntu-"
6766
"server\">ubuntu-server at lists.ubuntu.com</ulink>"
6767
6768
#: serverguide/C/virtualization.xml:1184(para)
6769
msgid ""
6770
"Also, see the <ulink "
6771
"url=\"https://help.ubuntu.com/community/JeOSVMBuilder\">JeOSVMBuilder Ubuntu "
6772
"Wiki</ulink> page."
6773
msgstr ""
6774
6775
#: serverguide/C/virtualization.xml:1192(title)
6776
msgid "UEC"
6777
msgstr ""
6778
6779
#: serverguide/C/virtualization.xml:1195(title) serverguide/C/network-auth.xml:2026(title) serverguide/C/monitoring.xml:15(title) serverguide/C/lamp-applications.xml:17(title) serverguide/C/installation.xml:928(title) serverguide/C/dns.xml:64(title) serverguide/C/chat.xml:17(title) serverguide/C/backups.xml:541(title)
6780
msgid "Overview"
6781
msgstr "Overview"
6782
6783
#: serverguide/C/virtualization.xml:1197(para)
6784
msgid ""
6785
"This tutorial covers <application>UEC</application> installation from the "
6786
"Ubuntu 10.04 LTS Server Edition CD, and assumes a basic network topology, "
6787
"with a single system serving as the <emphasis>\"all-in-one "
6788
"controller\"</emphasis>, and one or more nodes attached."
6789
msgstr ""
6790
6791
#: serverguide/C/virtualization.xml:1202(para)
6792
msgid ""
6793
"From this Tutorial you will learn how to install, configure, register and "
6794
"perform several operations on a basic <application>UEC</application> setup "
6795
"that results in a cloud with a one controller <emphasis>\"front-"
6796
"end\"</emphasis> and one or several node(s) for running Virtual Machine (VM) "
6797
"instances. You will also use examples to help get you started using your own "
6798
"private compute cloud."
6799
msgstr ""
6800
6801
#: serverguide/C/virtualization.xml:1210(title)
6802
msgid "Prerequisites"
6803
msgstr ""
6804
6805
#: serverguide/C/virtualization.xml:1212(para)
6806
msgid ""
6807
"To deploy a minimal cloud infrastructure, you’ll need at least "
6808
"<emphasis>two</emphasis> dedicated systems:"
6809
msgstr ""
6810
6811
#: serverguide/C/virtualization.xml:1218(para)
6812
msgid "A front end."
6813
msgstr ""
6814
6815
#: serverguide/C/virtualization.xml:1223(para)
6816
msgid "One or more node(s)."
6817
msgstr ""
6818
6819
#: serverguide/C/virtualization.xml:1229(para)
6820
msgid ""
6821
"The following are recommendations, rather than fixed requirements. However, "
6822
"our experience in developing this documentation indicated the following "
6823
"suggestions."
6824
msgstr ""
6825
6826
#: serverguide/C/virtualization.xml:1234(title)
6827
msgid "Front End Requirements"
6828
msgstr ""
6829
6830
#: serverguide/C/virtualization.xml:1236(para)
6831
msgid "Use the following table for a system that will run one or more of:"
6832
msgstr ""
6833
6834
#: serverguide/C/virtualization.xml:1241(para)
6835
msgid "Cloud Controller (CLC)"
6836
msgstr ""
6837
6838
#: serverguide/C/virtualization.xml:1242(para)
6839
msgid "Cluster Controller (CC)"
6840
msgstr ""
6841
6842
#: serverguide/C/virtualization.xml:1243(para)
6843
msgid "Walrus (the S3-like storage service)"
6844
msgstr ""
6845
6846
#: serverguide/C/virtualization.xml:1244(para)
6847
msgid "Storage Controller (SC)"
6848
msgstr ""
6849
6850
#: serverguide/C/virtualization.xml:1248(title)
6851
msgid "UEC Front End Requirements"
6852
msgstr ""
6853
6854
#: serverguide/C/virtualization.xml:1256(para) serverguide/C/virtualization.xml:1318(para)
6855
msgid "Hardware"
6856
msgstr ""
6857
6858
#: serverguide/C/virtualization.xml:1257(para) serverguide/C/virtualization.xml:1319(para)
6859
msgid "Minimum"
6860
msgstr ""
6861
6862
#: serverguide/C/virtualization.xml:1258(para) serverguide/C/virtualization.xml:1320(para)
6863
msgid "Suggested"
6864
msgstr ""
6865
6866
#: serverguide/C/virtualization.xml:1259(para) serverguide/C/virtualization.xml:1321(para)
6867
msgid "Notes"
6868
msgstr ""
6869
6870
#: serverguide/C/virtualization.xml:1264(para) serverguide/C/virtualization.xml:1326(para)
6871
msgid "CPU"
6872
msgstr ""
6873
6874
#: serverguide/C/virtualization.xml:1265(para)
6875
msgid "1 GHz"
6876
msgstr ""
6877
6878
#: serverguide/C/virtualization.xml:1266(para)
6879
msgid "2 x 2 GHz"
6880
msgstr ""
6881
6882
#: serverguide/C/virtualization.xml:1267(para)
6883
msgid ""
6884
"For an <emphasis>all-in-one</emphasis> front end, it helps to have at least "
6885
"a dual core processor."
6886
msgstr ""
6887
6888
#: serverguide/C/virtualization.xml:1270(para) serverguide/C/virtualization.xml:1332(para)
6889
msgid "Memory"
6890
msgstr ""
6891
6892
#: serverguide/C/virtualization.xml:1271(para)
6893
msgid "512 MB"
6894
msgstr ""
6895
6896
#: serverguide/C/virtualization.xml:1272(para)
6897
msgid "2 GB"
6898
msgstr ""
6899
6900
#: serverguide/C/virtualization.xml:1273(para)
6901
msgid "The Java web front end benefits from lots of available memory."
6902
msgstr ""
6903
6904
#: serverguide/C/virtualization.xml:1276(para) serverguide/C/virtualization.xml:1338(para)
6905
msgid "Disk"
6906
msgstr ""
6907
6908
#: serverguide/C/virtualization.xml:1277(para) serverguide/C/virtualization.xml:1339(para)
6909
msgid "5400 RPM IDE"
6910
msgstr ""
6911
6912
#: serverguide/C/virtualization.xml:1278(para)
6913
msgid "7200 RPM SATA"
6914
msgstr ""
6915
6916
#: serverguide/C/virtualization.xml:1279(para)
6917
msgid ""
6918
"Slower disks will work, but will yield much longer instance startup times."
6919
msgstr ""
6920
6921
#: serverguide/C/virtualization.xml:1282(para) serverguide/C/virtualization.xml:1344(para)
6922
msgid "Disk Space"
6923
msgstr ""
6924
6925
#: serverguide/C/virtualization.xml:1283(para) serverguide/C/virtualization.xml:1345(para)
6926
msgid "40 GB"
6927
msgstr ""
6928
6929
#: serverguide/C/virtualization.xml:1284(para)
6930
msgid "200 GB"
6931
msgstr ""
6932
6933
#: serverguide/C/virtualization.xml:1285(para)
6934
msgid ""
6935
"40GB is only enough space for only a single image, cache, etc., Eucalyptus "
6936
"does not like to run out of disk space."
6937
msgstr ""
6938
6939
#: serverguide/C/virtualization.xml:1288(para) serverguide/C/virtualization.xml:1350(para) serverguide/C/network-config.xml:13(title)
6940
msgid "Networking"
6941
msgstr "Networking"
6942
6943
#: serverguide/C/virtualization.xml:1289(para) serverguide/C/virtualization.xml:1351(para)
6944
msgid "100 Mbps"
6945
msgstr ""
6946
6947
#: serverguide/C/virtualization.xml:1290(para) serverguide/C/virtualization.xml:1352(para)
6948
msgid "1000 Mbps"
6949
msgstr ""
6950
6951
#: serverguide/C/virtualization.xml:1291(para) serverguide/C/virtualization.xml:1353(para)
6952
msgid ""
6953
"Machine images are hundreds of MB, and need to be copied over the network to "
6954
"nodes."
6955
msgstr ""
6956
6957
#: serverguide/C/virtualization.xml:1299(title)
6958
msgid "Node Requirements"
6959
msgstr ""
6960
6961
#: serverguide/C/virtualization.xml:1301(para)
6962
msgid "The other system(s) are <emphasis>nodes</emphasis>, which will run::"
6963
msgstr ""
6964
6965
#: serverguide/C/virtualization.xml:1306(para)
6966
msgid "the Node Controller (NC)"
6967
msgstr ""
6968
6969
#: serverguide/C/virtualization.xml:1310(title)
6970
msgid "UEC Node Requirements"
6971
msgstr ""
6972
6973
#: serverguide/C/virtualization.xml:1327(para)
6974
msgid "VT Extensions"
6975
msgstr ""
6976
6977
#: serverguide/C/virtualization.xml:1328(para)
6978
msgid "VT, 64-bit, Multicore"
6979
msgstr ""
6980
6981
#: serverguide/C/virtualization.xml:1329(para)
6982
msgid ""
6983
"64-bit can run both i386, and amd64 instances; by default, Eucalyptus will "
6984
"only run 1 VM per CPU core on a Node."
6985
msgstr ""
6986
6987
#: serverguide/C/virtualization.xml:1333(para)
6988
msgid "1 GB"
6989
msgstr ""
6990
6991
#: serverguide/C/virtualization.xml:1334(para)
6992
msgid "4 GB"
6993
msgstr ""
6994
6995
#: serverguide/C/virtualization.xml:1335(para)
6996
msgid "Additional memory means more, and larger guests."
6997
msgstr ""
6998
6999
#: serverguide/C/virtualization.xml:1340(para)
7000
msgid "7200 RPM SATA or SCSI"
7001
msgstr ""
7002
7003
#: serverguide/C/virtualization.xml:1341(para)
7004
msgid ""
7005
"Eucalyptus nodes are disk-intensive; I/O wait will likely be the performance "
7006
"bottleneck."
7007
msgstr ""
7008
7009
#: serverguide/C/virtualization.xml:1346(para)
7010
msgid "100 GB"
7011
msgstr ""
7012
7013
#: serverguide/C/virtualization.xml:1347(para)
7014
msgid ""
7015
"Images will be cached locally, Eucalyptus does not like to run out of disk "
7016
"space."
7017
msgstr ""
7018
7019
#: serverguide/C/virtualization.xml:1363(title)
7020
msgid "Installing the Cloud/Cluster/Storage/Walrus Front End Server"
7021
msgstr ""
7022
7023
#: serverguide/C/virtualization.xml:1367(para)
7024
msgid "Download the Ubuntu 10.04 LTS Server ISO file, and burn it to a CD."
7025
msgstr ""
7026
7027
#: serverguide/C/virtualization.xml:1372(para) serverguide/C/virtualization.xml:1418(para)
7028
msgid ""
7029
"When you boot, select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
7030
msgstr ""
7031
7032
#: serverguide/C/virtualization.xml:1377(para)
7033
msgid ""
7034
"When asked whether you want a <emphasis>“Cluster”</emphasis> or a "
7035
"<emphasis>“Node”</emphasis> install, select <emphasis>“Cluster”</emphasis>."
7036
msgstr ""
7037
7038
#: serverguide/C/virtualization.xml:1383(para)
7039
msgid ""
7040
"It will ask two other cloud-specific questions during the course of the "
7041
"install:"
7042
msgstr ""
7043
7044
#: serverguide/C/virtualization.xml:1388(para)
7045
msgid "Name of your cluster."
7046
msgstr ""
7047
7048
#: serverguide/C/virtualization.xml:1391(para)
7049
msgid "e.g. <emphasis>cluster1</emphasis>."
7050
msgstr ""
7051
7052
#: serverguide/C/virtualization.xml:1394(para)
7053
msgid ""
7054
"A range of public IP addresses on the LAN that the cloud can allocate to "
7055
"instances."
7056
msgstr ""
7057
7058
#: serverguide/C/virtualization.xml:1397(para)
7059
msgid "e.g. <emphasis>192.168.1.200-192.168.1.249</emphasis>."
7060
msgstr ""
7061
7062
#: serverguide/C/virtualization.xml:1405(title)
7063
msgid "Installing the Node Controller(s)"
7064
msgstr ""
7065
7066
#: serverguide/C/virtualization.xml:1407(para)
7067
msgid ""
7068
"The node controller install is even simpler. Just make sure that you are "
7069
"connected to the network on which the cloud/cluster controller is already "
7070
"running."
7071
msgstr ""
7072
7073
#: serverguide/C/virtualization.xml:1413(para)
7074
msgid "Boot from the same ISO on the node(s)."
7075
msgstr ""
7076
7077
#: serverguide/C/virtualization.xml:1423(para)
7078
msgid "Select <emphasis>“Install Ubuntu Enterprise Cloud”</emphasis>."
7079
msgstr ""
7080
7081
#: serverguide/C/virtualization.xml:1428(para)
7082
msgid ""
7083
"It should detect the Cluster and preselect <emphasis>“Node”</emphasis> "
7084
"install for you."
7085
msgstr ""
7086
7087
#: serverguide/C/virtualization.xml:1433(para)
7088
msgid "Confirm the partitioning scheme."
7089
msgstr ""
7090
7091
#: serverguide/C/virtualization.xml:1438(para)
7092
msgid ""
7093
"The rest of the installation should proceed uninterrupted; complete the "
7094
"installation and reboot the node."
7095
msgstr ""
7096
7097
#: serverguide/C/virtualization.xml:1446(title)
7098
msgid "Register the Node(s)"
7099
msgstr ""
7100
7101
#: serverguide/C/virtualization.xml:1448(para)
7102
msgid ""
7103
"Nodes are the physical systems within <application>UEC</application> that "
7104
"actually run the virtual machine instances of the cloud."
7105
msgstr ""
7106
7107
#: serverguide/C/virtualization.xml:1452(para)
7108
msgid ""
7109
"Once one or more Ubuntu Server node(s) are installed and running the "
7110
"<application>eucalyptus-nc</application> service, log onto the "
7111
"<emphasis>Cloud Controller (CLC)</emphasis> and run:"
7112
msgstr ""
7113
7114
#: serverguide/C/virtualization.xml:1458(command)
7115
msgid "sudo euca_conf --no-rsync --discover-nodes"
7116
msgstr ""
7117
7118
#: serverguide/C/virtualization.xml:1461(para)
7119
msgid ""
7120
"This will discover the systems on the network running the "
7121
"<application>eucalyptus-nc</application> service, and the administrator can "
7122
"confirm the registration of each node by its IP address."
7123
msgstr ""
7124
7125
#: serverguide/C/virtualization.xml:1467(para)
7126
msgid ""
7127
"If you get prompted for passwords, or receive errors from scp, you may need "
7128
"to revisit the key synchronization instructions at <ulink "
7129
"url=\"https://help.ubuntu.com/community/UEC/NodeInstallation\">UEC/NodeInstal"
7130
"lation</ulink>."
7131
msgstr ""
7132
7133
#: serverguide/C/virtualization.xml:1475(title)
7134
msgid "Obtain Credentials"
7135
msgstr ""
7136
7137
#: serverguide/C/virtualization.xml:1477(para)
7138
msgid ""
7139
"After installing and booting the <emphasis>Cloud Controller</emphasis>, "
7140
"users of the cloud will need to retrieve their credentials. This can be done "
7141
"either through a web browser, or at the command line."
7142
msgstr ""
7143
7144
#: serverguide/C/virtualization.xml:1483(title)
7145
msgid "From a Web Browser"
7146
msgstr ""
7147
7148
#: serverguide/C/virtualization.xml:1487(para)
7149
msgid ""
7150
"From your web browser (either remotely or on your Ubuntu server) access the "
7151
"following URL:"
7152
msgstr ""
7153
7154
#: serverguide/C/virtualization.xml:1490(programlisting) serverguide/C/virtualization.xml:1743(programlisting)
7155
#, no-wrap
7156
msgid ""
7157
"\n"
7158
"https://<cloud-controller-ip-address>:8443/\n"
7159
msgstr ""
7160
7161
#: serverguide/C/virtualization.xml:1495(para)
7162
msgid ""
7163
"You must use a secure connection, so make sure you use \"https\" not "
7164
"\"http\" in your URL. You will get a security certificate warning. You will "
7165
"have to add an exception to view the page. If you do not accept it you will "
7166
"not be able to view the Eucalyptus configuration page."
7167
msgstr ""
7168
7169
#: serverguide/C/virtualization.xml:1503(para)
7170
msgid ""
7171
"Use username <emphasis>'admin'</emphasis> and password "
7172
"<emphasis>'admin'</emphasis> for the first time login (you will be prompted "
7173
"to change your password)."
7174
msgstr ""
7175
7176
#: serverguide/C/virtualization.xml:1509(para)
7177
msgid ""
7178
"Then follow the on-screen instructions to update the admin password and "
7179
"email address."
7180
msgstr ""
7181
7182
#: serverguide/C/virtualization.xml:1514(para)
7183
msgid ""
7184
"Once the first time configuration process is completed, click the "
7185
"<emphasis>'credentials'</emphasis> tab located in the top-left portion of "
7186
"the screen."
7187
msgstr ""
7188
7189
#: serverguide/C/virtualization.xml:1520(para)
7190
msgid ""
7191
"Click the <emphasis>'Download Credentials'</emphasis> button to get your "
7192
"certificates."
7193
msgstr ""
7194
7195
#: serverguide/C/virtualization.xml:1525(para)
7196
msgid "Save them to <filename>~/.euca</filename>."
7197
msgstr ""
7198
7199
#: serverguide/C/virtualization.xml:1530(para)
7200
msgid ""
7201
"Unzip the downloaded zip file into a safe location "
7202
"(<filename>~/.euca</filename>)."
7203
msgstr ""
7204
7205
#: serverguide/C/virtualization.xml:1534(command)
7206
msgid "unzip -d ~/.euca mycreds.zip"
7207
msgstr ""
7208
7209
#: serverguide/C/virtualization.xml:1541(title)
7210
msgid "From a Command Line"
7211
msgstr ""
7212
7213
#: serverguide/C/virtualization.xml:1545(para)
7214
msgid ""
7215
"Alternatively, if you are on the command line of the <emphasis>Cloud "
7216
"Controller</emphasis>, you can run:"
7217
msgstr ""
7218
7219
#: serverguide/C/virtualization.xml:1549(command)
7220
msgid "mkdir -p ~/.euca"
7221
msgstr ""
7222
7223
#: serverguide/C/virtualization.xml:1550(command)
7224
msgid "chmod 700 ~/.euca"
7225
msgstr ""
7226
7227
#: serverguide/C/virtualization.xml:1551(command)
7228
msgid "cd ~/.euca"
7229
msgstr ""
7230
7231
#: serverguide/C/virtualization.xml:1552(command)
7232
msgid "sudo euca_conf --get-credentials mycreds.zip"
7233
msgstr ""
7234
7235
#: serverguide/C/virtualization.xml:1553(command)
7236
msgid "unzip mycreds.zip"
7237
msgstr ""
7238
7239
#: serverguide/C/virtualization.xml:1554(command)
7240
msgid "cd -"
7241
msgstr ""
7242
7243
#: serverguide/C/virtualization.xml:1561(title)
7244
msgid "Extracting and Using Your Credentials"
7245
msgstr ""
7246
7247
#: serverguide/C/virtualization.xml:1563(para)
7248
msgid ""
7249
"Now you will need to setup EC2 API and AMI tools on your server using X.509 "
7250
"certificates."
7251
msgstr ""
7252
7253
#: serverguide/C/virtualization.xml:1569(para)
7254
msgid ""
7255
"Source the included <emphasis>\"eucarc\"</emphasis> file to set up your "
7256
"Eucalyptus environment:"
7257
msgstr ""
7258
7259
#: serverguide/C/virtualization.xml:1573(command) serverguide/C/virtualization.xml:1600(command)
7260
msgid ". ~/.euca/eucarc"
7261
msgstr ""
7262
7263
#: serverguide/C/virtualization.xml:1577(para)
7264
msgid ""
7265
"You may additionally wish to add this command to your "
7266
"<filename>~/.bashrc</filename> file so that your Eucalyptus environment is "
7267
"set up automatically when you log in. Eucalyptus treats this set of "
7268
"credentials as <emphasis>'administrator'</emphasis> credentials that allow "
7269
"the holder global privileges across the cloud. As such, they should be "
7270
"protected in the same way that other elevated-priority access is protected "
7271
"(e.g. should not be made visible to the general user population)."
7272
msgstr ""
7273
7274
#: serverguide/C/virtualization.xml:1584(command)
7275
msgid ""
7276
"echo \"[ -r ~/.euca/eucarc ] && . ~/.euca/eucarc\" >> ~/.bashrc"
7277
msgstr ""
7278
7279
#: serverguide/C/virtualization.xml:1588(para)
7280
msgid "Install the required cloud user tools:"
7281
msgstr ""
7282
7283
#: serverguide/C/virtualization.xml:1592(command)
7284
msgid "sudo apt-get install euca2ools"
7285
msgstr ""
7286
7287
#: serverguide/C/virtualization.xml:1596(para)
7288
msgid ""
7289
"To validate that everything is working correctly, get the local cluster "
7290
"availability details:"
7291
msgstr ""
7292
7293
#: serverguide/C/virtualization.xml:1601(command)
7294
msgid "euca-describe-availability-zones verbose"
7295
msgstr ""
7296
7297
#: serverguide/C/virtualization.xml:1602(computeroutput)
7298
#, no-wrap
7299
msgid ""
7300
"AVAILABILITYZONE myowncloud 192.168.1.1\n"
7301
"AVAILABILITYZONE |- vm types free / max cpu ram disk\n"
7302
"AVAILABILITYZONE |- m1.small 0004 / 0004 1 128 2\n"
7303
"AVAILABILITYZONE |- c1.medium 0004 / 0004 1 256 5\n"
7304
"AVAILABILITYZONE |- m1.large 0002 / 0002 2 512 10\n"
7305
"AVAILABILITYZONE |- m1.xlarge 0002 / 0002 2 1024 20\n"
7306
"AVAILABILITYZONE |- c1.xlarge 0001 / 0001 4 2048 20"
7307
msgstr ""
7308
7309
#: serverguide/C/virtualization.xml:1612(para)
7310
msgid "Your output from the above command will vary."
7311
msgstr ""
7312
7313
#: serverguide/C/virtualization.xml:1622(title)
7314
msgid "Running an Image"
7315
msgstr ""
7316
7317
#: serverguide/C/virtualization.xml:1624(para)
7318
msgid "There are multiple ways to instantiate an image in UEC:"
7319
msgstr ""
7320
7321
#: serverguide/C/virtualization.xml:1629(para)
7322
msgid "Use the command line."
7323
msgstr ""
7324
7325
#: serverguide/C/virtualization.xml:1630(para)
7326
msgid ""
7327
"Use one of the UEC compatible management tools such as "
7328
"<emphasis>Landscape</emphasis>."
7329
msgstr ""
7330
7331
#: serverguide/C/virtualization.xml:1632(para)
7332
msgid ""
7333
"Use the <ulink "
7334
"url=\"https://help.ubuntu.com/community/UEC/ElasticFox\">ElasticFox</ulink> "
7335
"extension to Firefox."
7336
msgstr ""
7337
7338
#: serverguide/C/virtualization.xml:1638(para)
7339
msgid "Here we will describe the process from the command line:"
7340
msgstr ""
7341
7342
#: serverguide/C/virtualization.xml:1644(para)
7343
msgid ""
7344
"Before running an instance of your image, you should first create a "
7345
"<emphasis>keypair</emphasis> (ssh key) that you can use to log into your "
7346
"instance as root, once it boots. The key is stored, so you will only have to "
7347
"do this once."
7348
msgstr ""
7349
7350
#: serverguide/C/virtualization.xml:1648(para)
7351
msgid "Run the following command:"
7352
msgstr ""
7353
7354
#: serverguide/C/virtualization.xml:1651(programlisting)
7355
#, no-wrap
7356
msgid ""
7357
"\n"
7358
"if [ ! -e ~/.euca/mykey.priv ]; then\n"
7359
" touch ~/.euca/mykey.priv\n"
7360
" chmod 0600 ~/.euca/mykey.priv\n"
7361
" euca-add-keypair mykey > ~/.euca/mykey.priv\n"
7362
"fi\n"
7363
msgstr ""
7364
7365
#: serverguide/C/virtualization.xml:1659(para)
7366
msgid ""
7367
"You can call your key whatever you like (in this example, the key is called "
7368
"<emphasis>'mykey'</emphasis>), but remember what it is called. If you "
7369
"forget, you can always run <command>euca-describe-keypairs</command> to get "
7370
"a list of created keys stored in the system."
7371
msgstr ""
7372
7373
#: serverguide/C/virtualization.xml:1666(para)
7374
msgid "You must also allow access to port 22 in your instances:"
7375
msgstr ""
7376
7377
#: serverguide/C/virtualization.xml:1670(command)
7378
msgid "euca-describe-groups"
7379
msgstr ""
7380
7381
#: serverguide/C/virtualization.xml:1671(command)
7382
msgid "euca-authorize default -P tcp -p 22 -s 0.0.0.0/0"
7383
msgstr ""
7384
7385
#: serverguide/C/virtualization.xml:1675(para)
7386
msgid "Next, you can create instances of your registered image:"
7387
msgstr ""
7388
7389
#: serverguide/C/virtualization.xml:1679(command)
7390
msgid "euca-run-instances $EMI -k mykey -t c1.medium"
7391
msgstr ""
7392
7393
#: serverguide/C/virtualization.xml:1682(para)
7394
msgid ""
7395
"If you receive an error regarding <emphasis>image_id</emphasis>, you may "
7396
"find it by viewing Images page or click <emphasis>\"How to Run\"</emphasis> "
7397
"on the <emphasis>Store</emphasis> page to see the sample command."
7398
msgstr ""
7399
7400
#: serverguide/C/virtualization.xml:1689(para)
7401
msgid ""
7402
"The first time you run an instance, the system will be setting up caches for "
7403
"the image from which it will be created. This can often take some time the "
7404
"first time an instance is run given that VM images are usually quite large."
7405
msgstr ""
7406
7407
#: serverguide/C/virtualization.xml:1693(para)
7408
msgid "To monitor the state of your instance, run:"
7409
msgstr ""
7410
7411
#: serverguide/C/virtualization.xml:1697(command)
7412
msgid "watch -n5 euca-describe-instances"
7413
msgstr ""
7414
7415
#: serverguide/C/virtualization.xml:1699(para)
7416
msgid ""
7417
"In the output, you should see information about the instance, including its "
7418
"state. While first-time caching is being performed, the instance's state "
7419
"will be <emphasis>'pending'</emphasis>."
7420
msgstr ""
7421
7422
#: serverguide/C/virtualization.xml:1705(para)
7423
msgid ""
7424
"When the instance is fully started, the above state will become "
7425
"<emphasis>'running'</emphasis>. Look at the IP address assigned to your "
7426
"instance in the output, then connect to it:"
7427
msgstr ""
7428
7429
#: serverguide/C/virtualization.xml:1710(command)
7430
msgid ""
7431
"IPADDR=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | awk "
7432
"'{print $4}')"
7433
msgstr ""
7434
7435
#: serverguide/C/virtualization.xml:1711(command)
7436
msgid "ssh -i ~/.euca/mykey.priv ubuntu@$IPADDR"
7437
msgstr ""
7438
7439
#: serverguide/C/virtualization.xml:1715(para)
7440
msgid ""
7441
"And when you are done with this instance, exit your SSH connection, then "
7442
"terminate your instance:"
7443
msgstr ""
7444
7445
#: serverguide/C/virtualization.xml:1719(command)
7446
msgid ""
7447
"INSTANCEID=$(euca-describe-instances | grep $EMI | grep running | tail -n1 | "
7448
"awk '{print $2}')"
7449
msgstr ""
7450
7451
#: serverguide/C/virtualization.xml:1720(command)
7452
msgid "euca-terminate-instances $INSTANCEID"
7453
msgstr ""
7454
7455
#: serverguide/C/virtualization.xml:1727(title)
7456
msgid "Install an Image from the Store"
7457
msgstr ""
7458
7459
#: serverguide/C/virtualization.xml:1729(para)
7460
msgid ""
7461
"The following is by far the simplest way to install an image. However, "
7462
"advanced users may be interested in learning how to <ulink "
7463
"url=\"https://help.ubuntu.com/community/UEC/BundlingImages\">Bundle their "
7464
"own image</ulink>."
7465
msgstr ""
7466
7467
#: serverguide/C/virtualization.xml:1734(para)
7468
msgid ""
7469
"The simplest way to add an image to <application>UEC</application> is to "
7470
"install it from the Image Store on the UEC web interface."
7471
msgstr ""
7472
7473
#: serverguide/C/virtualization.xml:1740(para)
7474
msgid ""
7475
"Access the web interface at the following URL (Make sure you specify https):"
7476
msgstr ""
7477
7478
#: serverguide/C/virtualization.xml:1748(para)
7479
msgid ""
7480
"Enter your login and password (if requested, as you may still be logged in "
7481
"from earlier)."
7482
msgstr ""
7483
7484
#: serverguide/C/virtualization.xml:1753(para)
7485
msgid "Click on the <emphasis>Store</emphasis> tab."
7486
msgstr ""
7487
7488
#: serverguide/C/virtualization.xml:1758(para)
7489
msgid "Browse available images."
7490
msgstr ""
7491
7492
#: serverguide/C/virtualization.xml:1763(para)
7493
msgid "Click on <emphasis>install</emphasis> for the image you want."
7494
msgstr ""
7495
7496
#: serverguide/C/virtualization.xml:1769(para)
7497
msgid ""
7498
"Once the image has been downloaded and installed, you can click on "
7499
"<emphasis>\"How to run?\"</emphasis> that will be displayed below the image "
7500
"button to view the command to execute to instantiate (start) this image. The "
7501
"image will also appear on the list given on the <emphasis>Image</emphasis> "
7502
"tab."
7503
msgstr ""
7504
7505
#: serverguide/C/virtualization.xml:1777(title) serverguide/C/dns.xml:619(title)
7506
msgid "More Information"
7507
msgstr "More Information"
7508
7509
#: serverguide/C/virtualization.xml:1779(para)
7510
msgid ""
7511
"How to use the <ulink "
7512
"url=\"https://help.ubuntu.com/community/UEC/StorageController\">Storage "
7513
"Controller</ulink>"
7514
msgstr ""
7515
7516
#: serverguide/C/virtualization.xml:1783(para)
7517
msgid "Controlling eucalyptus services:"
7518
msgstr ""
7519
7520
#: serverguide/C/virtualization.xml:1788(para)
7521
msgid ""
7522
"sudo service eucalyptus [start|stop|restart] (on the CLC/CC/SC/Walrus side)"
7523
msgstr ""
7524
7525
#: serverguide/C/virtualization.xml:1789(para)
7526
msgid "sudo service eucalyptus-nc [start|stop|restart] (on the Node side)"
7527
msgstr ""
7528
7529
#: serverguide/C/virtualization.xml:1792(para)
7530
msgid "Locations of some important files:"
7531
msgstr ""
7532
7533
#: serverguide/C/virtualization.xml:1799(emphasis)
7534
msgid "Log files:"
7535
msgstr ""
7536
7537
#: serverguide/C/virtualization.xml:1802(para)
7538
msgid "/var/log/eucalyptus"
7539
msgstr ""
7540
7541
#: serverguide/C/virtualization.xml:1807(emphasis)
7542
msgid "Configuration files:"
7543
msgstr ""
7544
7545
#: serverguide/C/virtualization.xml:1810(para)
7546
msgid "/etc/eucalyptus"
7547
msgstr ""
7548
7549
#: serverguide/C/virtualization.xml:1815(emphasis)
7550
msgid "Database:"
7551
msgstr ""
7552
7553
#: serverguide/C/virtualization.xml:1818(para)
7554
msgid "/var/lib/eucalyptus/db"
7555
msgstr ""
7556
7557
#: serverguide/C/virtualization.xml:1823(emphasis)
7558
msgid "Keys:"
7559
msgstr ""
7560
7561
#: serverguide/C/virtualization.xml:1826(para)
7562
msgid "/var/lib/eucalyptus"
7563
msgstr ""
7564
7565
#: serverguide/C/virtualization.xml:1827(para)
7566
msgid "/var/lib/eucalyptus/.ssh"
7567
msgstr ""
7568
7569
#: serverguide/C/virtualization.xml:1833(para)
7570
msgid ""
7571
"Don't forget to source your <filename>~/.euca/eucarc</filename> before "
7572
"running the client tools."
7573
msgstr ""
7574
7575
#: serverguide/C/virtualization.xml:1844(para)
7576
msgid ""
7577
"For information on loading instances see the <ulink "
7578
"url=\"https://help.ubuntu.com/community/Eucalyptus\">Eucalyptus Wiki</ulink> "
7579
"page."
7580
msgstr ""
7581
"For information on loading instances see the <ulink "
7582
"url=\"https://help.ubuntu.com/community/Eucalyptus\">Eucalyptus Wiki</ulink> "
7583
"page."
7584
7585
#: serverguide/C/virtualization.xml:1849(para)
7586
msgid ""
7587
"<ulink url=\"http://open.eucalyptus.com/\">Eucalyptus Project Site (forums, "
7588
"documentation, downloads)</ulink>."
7589
msgstr ""
7590
7591
#: serverguide/C/virtualization.xml:1854(para)
7592
msgid ""
7593
"<ulink url=\"https://launchpad.net/eucalyptus/\">Eucalyptus on Launchpad "
7594
"(bugs, code)</ulink>."
7595
msgstr ""
7596
7597
#: serverguide/C/virtualization.xml:1859(para)
7598
msgid ""
7599
"<ulink "
7600
"url=\"http://open.eucalyptus.com/wiki/EucalyptusTroubleshooting_v1.5\">Eucaly"
7601
"ptus Troubleshooting (1.5)</ulink>."
7602
msgstr ""
7603
7604
#: serverguide/C/virtualization.xml:1864(para)
7605
msgid ""
7606
"<ulink url=\"http://support.rightscale.com/2._References/02-"
7607
"Cloud_Infrastructures/Eucalyptus/03-"
7608
"Administration_Guide/Register_with_RightScale\"> Register your cloud with "
7609
"RightScale</ulink>."
7610
msgstr ""
7611
7612
#: serverguide/C/virtualization.xml:1870(para)
7613
msgid ""
7614
"You can also find help in the <emphasis>#ubuntu-virt</emphasis>, "
7615
"<emphasis>#eucalyptus</emphasis>, and <emphasis>#ubuntu-server</emphasis> "
7616
"IRC channels on <ulink url=\"http://freenode.net\">Freenode</ulink>."
7617
msgstr ""
7618
"You can also find help in the <emphasis>#ubuntu-virt</emphasis>, "
7619
"<emphasis>#eucalyptus</emphasis>, and <emphasis>#ubuntu-server</emphasis> "
7620
"IRC channels on <ulink url=\"http://freenode.net\">Freenode</ulink>."
7621
7622
#: serverguide/C/virtualization.xml:1879(title)
7623
msgid "Glossary"
7624
msgstr ""
7625
7626
#: serverguide/C/virtualization.xml:1881(para)
7627
msgid ""
7628
"The Ubuntu Enterprise Cloud documentation uses terminology that might be "
7629
"unfamiliar to some readers. This page is intended to provide a glossary of "
7630
"such terms and acronyms."
7631
msgstr ""
7632
7633
#: serverguide/C/virtualization.xml:1888(para)
7634
msgid ""
7635
"<emphasis>Cloud</emphasis> - A federated set of physical machines that offer "
7636
"computing resources through virtual machines, provisioned and recollected "
7637
"dynamically."
7638
msgstr ""
7639
7640
#: serverguide/C/virtualization.xml:1894(para)
7641
msgid ""
7642
"<emphasis>Cloud Controller (CLC)</emphasis> - Eucalyptus component that "
7643
"provides the web UI (an https server on port 8443), and implements the "
7644
"Amazon EC2 API. There should be only one Cloud Controller in an installation "
7645
"of UEC. This service is provided by the Ubuntu <application>eucalyptus-"
7646
"cloud</application> package."
7647
msgstr ""
7648
7649
#: serverguide/C/virtualization.xml:1901(para)
7650
msgid ""
7651
"<emphasis>Cluster</emphasis> - A collection of nodes, associated with a "
7652
"Cluster Controller. There can be more than one Cluster in an installation of "
7653
"UEC. Clusters are sometimes physically separate sets of nodes. (e.g. floor1, "
7654
"floor2, floor2)."
7655
msgstr ""
7656
7657
#: serverguide/C/virtualization.xml:1907(para)
7658
msgid ""
7659
"<emphasis>Cluster Controller (CC)</emphasis> - Eucalyptus component that "
7660
"manages collections of node resources. This service is provided by the "
7661
"Ubuntu <application>eucalyptus-cc</application> package."
7662
msgstr ""
7663
7664
#: serverguide/C/virtualization.xml:1913(para)
7665
msgid "<emphasis>EBS</emphasis> - Elastic Block Storage."
7666
msgstr ""
7667
7668
#: serverguide/C/virtualization.xml:1918(para)
7669
msgid ""
7670
"<emphasis>EC2</emphasis> - Elastic Compute Cloud. Amazon's pay-by-the-hour, "
7671
"pay-by-the-gigabyte public cloud computing offering."
7672
msgstr ""
7673
7674
#: serverguide/C/virtualization.xml:1923(para)
7675
msgid "<emphasis>EKI</emphasis> - Eucalyptus Kernel Image."
7676
msgstr ""
7677
7678
#: serverguide/C/virtualization.xml:1928(para)
7679
msgid "<emphasis>EMI</emphasis> - Eucalyptus Machine Image."
7680
msgstr ""
7681
7682
#: serverguide/C/virtualization.xml:1933(para)
7683
msgid "<emphasis>ERI</emphasis> - Eucalyptus Ramdisk Image."
7684
msgstr ""
7685
7686
#: serverguide/C/virtualization.xml:1938(para)
7687
msgid ""
7688
"<emphasis>Eucalyptus</emphasis> - Elastic Utility Computing Architecture for "
7689
"Linking Your Programs To Useful Systems. An open source project originally "
7690
"from the University of California at Santa Barbara, now supported by "
7691
"Eucalyptus Systems, a Canonical Partner."
7692
msgstr ""
7693
7694
#: serverguide/C/virtualization.xml:1945(para)
7695
msgid ""
7696
"<emphasis>Front-end</emphasis> - Physical machine hosting one (or more) of "
7697
"the high level Eucalyptus components (cloud, walrus, storage controller, "
7698
"cluster controller)."
7699
msgstr ""
7700
7701
#: serverguide/C/virtualization.xml:1951(para)
7702
msgid ""
7703
"<emphasis>Node</emphasis> - A node is a physical machine that's capable of "
7704
"running virtual machines, running a node controller. Within Ubuntu, this "
7705
"generally means that the CPU has VT extensions, and can run the KVM "
7706
"hypervisor."
7707
msgstr ""
7708
7709
#: serverguide/C/virtualization.xml:1957(para)
7710
msgid ""
7711
"<emphasis>Node Controller (NC)</emphasis> - Eucalyptus component that runs "
7712
"on nodes which host the virtual machines that comprise the cloud. This "
7713
"service is provided by the Ubuntu package <application>eucalyptus-"
7714
"nc</application>."
7715
msgstr ""
7716
7717
#: serverguide/C/virtualization.xml:1963(para)
7718
msgid ""
7719
"<emphasis>S3</emphasis> - Simple Storage Service. Amazon's pay-by-the-"
7720
"gigabyte persistent storage solution for EC2."
7721
msgstr ""
7722
7723
#: serverguide/C/virtualization.xml:1968(para)
7724
msgid ""
7725
"<emphasis>Storage Controller (SC)</emphasis> - Eucalyptus component that "
7726
"manages dynamic block storage services (EBS). Each 'cluster' in a Eucalyptus "
7727
"installation can have its own Storage Controller. This component is provided "
7728
"by the <application>eucalyptus-sc</application> package."
7729
msgstr ""
7730
7731
#: serverguide/C/virtualization.xml:1975(para)
7732
msgid ""
7733
"<emphasis>UEC</emphasis> - Ubuntu Enterprise Cloud. Ubuntu's cloud computing "
7734
"solution, based on Eucalyptus."
7735
msgstr ""
7736
7737
#: serverguide/C/virtualization.xml:1980(para)
7738
msgid "<emphasis>VM</emphasis> - Virtual Machine."
7739
msgstr ""
7740
7741
#: serverguide/C/virtualization.xml:1985(para)
7742
msgid ""
7743
"<emphasis>VT</emphasis> - Virtualization Technology. An optional feature of "
7744
"some modern CPUs, allowing for accelerated virtual machine hosting."
7745
msgstr ""
7746
7747
#: serverguide/C/virtualization.xml:1990(para)
7748
msgid ""
7749
"<emphasis>Walrus</emphasis> - Eucalyptus component that implements the "
7750
"Amazon S3 API, used for storing VM images and user storage using S3 bucket "
7751
"put/get abstractions."
7752
msgstr ""
7753
7754
#: serverguide/C/virtualization.xml:2000(title)
7755
msgid "OpenNebula"
7756
msgstr "OpenNebula"
7757
7758
#: serverguide/C/virtualization.xml:2002(para)
7759
msgid ""
7760
"<application>OpenNebula</application> allows virtual machines to be placed "
7761
"and re-placed dynamically on a pool of physical resources. This allows a "
7762
"virtual machine to be hosted from any location available."
7763
msgstr ""
7764
"<application>OpenNebula</application> allows virtual machines to be placed "
7765
"and re-placed dynamically on a pool of physical resources. This allows a "
7766
"virtual machine to be hosted from any location available."
7767
7768
#: serverguide/C/virtualization.xml:2007(para)
7769
msgid ""
7770
"This section will detail configuring an OpenNebula cluster using three "
7771
"machines: one <emphasis>Front-End</emphasis> host, and two <emphasis>Compute "
7772
"Nodes</emphasis> used to run the virtual machines. The Compute Nodes will "
7773
"also need a bridge configured to allow the virtual machines access to the "
7774
"local network. For details see <xref linkend=\"bridging\"/>."
7775
msgstr ""
7776
"This section will detail configuring an OpenNebula cluster using three "
7777
"machines: one <emphasis>Front-End</emphasis> host, and two <emphasis>Compute "
7778
"Nodes</emphasis> used to run the virtual machines. The Compute Nodes will "
7779
"also need a bridge configured to allow the virtual machines access to the "
7780
"local network. For details see <xref linkend=\"bridging\"/>."
7781
7782
#: serverguide/C/virtualization.xml:2016(para)
7783
msgid "First, from a terminal on the Front-End enter:"
7784
msgstr "First, from a terminal on the Front-End enter:"
7785
7786
#: serverguide/C/virtualization.xml:2021(command)
7787
msgid "sudo apt-get install opennebula"
7788
msgstr "sudo apt-get install opennebula"
7789
7790
#: serverguide/C/virtualization.xml:2024(para)
7791
msgid "On each Compute Node install:"
7792
msgstr "On each Compute Node install:"
7793
7794
#: serverguide/C/virtualization.xml:2029(command)
7795
msgid "sudo apt-get install opennebula-node"
7796
msgstr "sudo apt-get install opennebula-node"
7797
7798
#: serverguide/C/virtualization.xml:2032(para)
7799
msgid ""
7800
"In order to copy SSH keys, the <emphasis>oneadmin</emphasis> user will need "
7801
"to have a password. On each machine execute:"
7802
msgstr ""
7803
"In order to copy SSH keys, the <emphasis>oneadmin</emphasis> user will need "
7804
"to have a password. On each machine execute:"
7805
7806
#: serverguide/C/virtualization.xml:2037(command)
7807
msgid "sudo passwd oneadmin"
7808
msgstr "sudo passwd oneadmin"
7809
7810
#: serverguide/C/virtualization.xml:2040(para)
7811
msgid ""
7812
"Next, copy the <emphasis>oneadmin</emphasis> user's SSH key to the Compute "
7813
"Nodes, and to the Front-End's <filename>authorized_keys</filename> file:"
7814
msgstr ""
7815
"Next, copy the <emphasis>oneadmin</emphasis> user's SSH key to the Compute "
7816
"Nodes, and to the Front-End's <filename>authorized_keys</filename> file:"
7817
7818
#: serverguide/C/virtualization.xml:2045(command)
7819
msgid ""
7820
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
7821
"oneadmin@node01:/var/lib/one/.ssh/authorized_keys"
7822
msgstr ""
7823
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
7824
"oneadmin@node01:/var/lib/one/.ssh/authorized_keys"
7825
7826
#: serverguide/C/virtualization.xml:2046(command)
7827
msgid ""
7828
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
7829
"oneadmin@node02:/var/lib/one/.ssh/authorized_keys"
7830
msgstr ""
7831
"sudo scp /var/lib/one/.ssh/id_rsa.pub "
7832
"oneadmin@node02:/var/lib/one/.ssh/authorized_keys"
7833
7834
#: serverguide/C/virtualization.xml:2047(command)
7835
msgid ""
7836
"sudo sh -c \"cat /var/lib/one/.ssh/id_rsa.pub >> "
7837
"/var/lib/one/.ssh/authorized_keys\""
7838
msgstr ""
7839
"sudo sh -c \"cat /var/lib/one/.ssh/id_rsa.pub >> "
7840
"/var/lib/one/.ssh/authorized_keys\""
7841
7842
#: serverguide/C/virtualization.xml:2050(para)
7843
msgid ""
7844
"The SSH key for the Compute Nodes needs to be added to the "
7845
"<filename>/etc/ssh/ssh_known_hosts</filename> file on the Front-End host. To "
7846
"accomplish this <application>ssh</application> to each Compute Node as a "
7847
"user other than <emphasis>oneadmin</emphasis>. Then exit from the SSH "
7848
"session, and execute the following to copy the SSH key from "
7849
"<filename>~/.ssh/known_hosts</filename> to "
7850
"<filename>/etc/ssh/ssh_known_hosts</filename>:"
7851
msgstr ""
7852
"The SSH key for the Compute Nodes needs to be added to the "
7853
"<filename>/etc/ssh/ssh_known_hosts</filename> file on the Front-End host. To "
7854
"accomplish this <application>ssh</application> to each Compute Node as a "
7855
"user other than <emphasis>oneadmin</emphasis>. Then exit from the SSH "
7856
"session, and execute the following to copy the SSH key from "
7857
"<filename>~/.ssh/known_hosts</filename> to "
7858
"<filename>/etc/ssh/ssh_known_hosts</filename>:"
7859
7860
#: serverguide/C/virtualization.xml:2057(command)
7861
msgid ""
7862
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node01 1>> "
7863
"/etc/ssh/ssh_known_hosts\""
7864
msgstr ""
7865
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node01 1>> "
7866
"/etc/ssh/ssh_known_hosts\""
7867
7868
#: serverguide/C/virtualization.xml:2058(command)
7869
msgid ""
7870
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node02 1>> "
7871
"/etc/ssh/ssh_known_hosts\""
7872
msgstr ""
7873
"sudo sh -c \"ssh-keygen -f .ssh/known_hosts -F node02 1>> "
7874
"/etc/ssh/ssh_known_hosts\""
7875
7876
#: serverguide/C/virtualization.xml:2062(para)
7877
msgid ""
7878
"Replace <emphasis>node01</emphasis> and <emphasis>node02</emphasis> with the "
7879
"appropriate host names."
7880
msgstr ""
7881
"Replace <emphasis>node01</emphasis> and <emphasis>node02</emphasis> with the "
7882
"appropriate host names."
7883
7884
#: serverguide/C/virtualization.xml:2067(para)
7885
msgid ""
7886
"This allows the <emphasis>oneadmin</emphasis> to use "
7887
"<application>scp</application>, without a password or manual intervention, "
7888
"to deploy an image to the Compute Nodes."
7889
msgstr ""
7890
"This allows the <emphasis>oneadmin</emphasis> to use "
7891
"<application>scp</application>, without a password or manual intervention, "
7892
"to deploy an image to the Compute Nodes."
7893
7894
#: serverguide/C/virtualization.xml:2072(para)
7895
msgid ""
7896
"On the Front-End create a directory to store the VM images, giving the "
7897
"<emphasis>oneadmin</emphasis> user access to the directory:"
7898
msgstr ""
7899
"On the Front-End create a directory to store the VM images, giving the "
7900
"<emphasis>oneadmin</emphasis> user access to the directory:"
7901
7902
#: serverguide/C/virtualization.xml:2077(command)
7903
msgid "sudo mkdir /var/lib/one/images"
7904
msgstr "sudo mkdir /var/lib/one/images"
7905
7906
#: serverguide/C/virtualization.xml:2078(command)
7907
msgid "sudo chown oneadmin /var/lib/one/images/"
7908
msgstr "sudo chown oneadmin /var/lib/one/images/"
7909
7910
#: serverguide/C/virtualization.xml:2081(para)
7911
msgid ""
7912
"Finally, copy a virtual machine disk file into "
7913
"<filename>/var/lib/one/images</filename>. You can create an Ubuntu virtual "
7914
"machine using <application>vmbuilder</application>, see <xref linkend=\"jeos-"
7915
"and-vmbuilder\"/> for details."
7916
msgstr ""
7917
"Finally, copy a virtual machine disk file into "
7918
"<filename>/var/lib/one/images</filename>. You can create an Ubuntu virtual "
7919
"machine using <application>vmbuilder</application>, see <xref linkend=\"jeos-"
7920
"and-vmbuilder\"/> for details."
7921
7922
#: serverguide/C/virtualization.xml:2090(para)
7923
msgid ""
7924
"The <emphasis>OpenNebula Cluster</emphasis> is now ready to be configured, "
7925
"and virtual machines added to the cluster."
7926
msgstr ""
7927
"The <emphasis>OpenNebula Cluster</emphasis> is now ready to be configured, "
7928
"and virtual machines added to the cluster."
7929
7930
#: serverguide/C/virtualization.xml:2094(para)
7931
msgid "From a terminal prompt enter:"
7932
msgstr "From a terminal prompt enter:"
7933
7934
#: serverguide/C/virtualization.xml:2099(command)
7935
msgid "onehost create node01 im_kvm vmm_kvm tm_ssh"
7936
msgstr "onehost create node01 im_kvm vmm_kvm tm_ssh"
7937
7938
#: serverguide/C/virtualization.xml:2100(command)
7939
msgid "onehost create node02 im_kvm vmm_kvm tm_ssh"
7940
msgstr "onehost create node02 im_kvm vmm_kvm tm_ssh"
7941
7942
#: serverguide/C/virtualization.xml:2103(para)
7943
msgid ""
7944
"Next, create a <emphasis>Virtual Network</emphasis> template file named "
7945
"<filename>vnet01.template</filename>:"
7946
msgstr ""
7947
"Next, create a <emphasis>Virtual Network</emphasis> template file named "
7948
"<filename>vnet01.template</filename>:"
7949
7950
#: serverguide/C/virtualization.xml:2107(programlisting)
7951
#, no-wrap
7952
msgid ""
7953
"\n"
7954
"NAME = \"LAN\"\n"
7955
"TYPE = RANGED\n"
7956
"BRIDGE = br0\n"
7957
"NETWORK_SIZE = C\n"
7958
"NETWORK_ADDRESS = 192.168.0.0\n"
7959
msgstr ""
7960
"\n"
7961
"NAME = \"LAN\"\n"
7962
"TYPE = RANGED\n"
7963
"BRIDGE = br0\n"
7964
"NETWORK_SIZE = C\n"
7965
"NETWORK_ADDRESS = 192.168.0.0\n"
7966
7967
#: serverguide/C/virtualization.xml:2116(para)
7968
msgid ""
7969
"Be sure to change <emphasis>192.168.0.0</emphasis> to your local network."
7970
msgstr ""
7971
"Be sure to change <emphasis>192.168.0.0</emphasis> to your local network."
7972
7973
#: serverguide/C/virtualization.xml:2121(para)
7974
msgid ""
7975
"Using the <application>onevnet</application> utility, add the virtual "
7976
"network to OpenNebula:"
7977
msgstr ""
7978
"Using the <application>onevnet</application> utility, add the virtual "
7979
"network to OpenNebula:"
7980
7981
#: serverguide/C/virtualization.xml:2126(command)
7982
msgid "onevnet create vnet01.template"
7983
msgstr "onevnet create vnet01.template"
7984
7985
#: serverguide/C/virtualization.xml:2129(para)
7986
msgid ""
7987
"Now create a <emphasis>VM Template</emphasis> file named "
7988
"<filename>vm01.template</filename>:"
7989
msgstr ""
7990
"Now create a <emphasis>VM Template</emphasis> file named "
7991
"<filename>vm01.template</filename>:"
7992
7993
#: serverguide/C/virtualization.xml:2133(programlisting)
7994
#, no-wrap
7995
msgid ""
7996
"\n"
7997
"NAME = vm01\n"
7998
"CPU = 0.5\n"
7999
"MEMORY = 512\n"
8000
"\n"
8001
"OS = [ BOOT = hd ]\n"
8002
"\n"
8003
"DISK = [\n"
8004
" source = \"/var/lib/one/images/vm01.qcow2\",\n"
8005
" target = \"hda\",\n"
8006
" readonly = \"no\" ]\n"
8007
"\n"
8008
"NIC = [ NETWORK=\"LAN\" ]\n"
8009
"\n"
8010
"GRAPHICS = [type=\"vnc\",listen=\"127.0.0.1\",port=\"-1\"]\n"
8011
msgstr ""
8012
"\n"
8013
"NAME = vm01\n"
8014
"CPU = 0.5\n"
8015
"MEMORY = 512\n"
8016
"\n"
8017
"OS = [ BOOT = hd ]\n"
8018
"\n"
8019
"DISK = [\n"
8020
" source = \"/var/lib/one/images/vm01.qcow2\",\n"
8021
" target = \"hda\",\n"
8022
" readonly = \"no\" ]\n"
8023
"\n"
8024
"NIC = [ NETWORK=\"LAN\" ]\n"
8025
"\n"
8026
"GRAPHICS = [type=\"vnc\",listen=\"127.0.0.1\",port=\"-1\"]\n"
8027
8028
#: serverguide/C/virtualization.xml:2150(para)
8029
msgid "Start the virtual machine using <application>onevm</application>:"
8030
msgstr "Start the virtual machine using <application>onevm</application>:"
8031
8032
#: serverguide/C/virtualization.xml:2155(command)
8033
msgid "onevm submit vm01.template"
8034
msgstr "onevm submit vm01.template"
8035
8036
#: serverguide/C/virtualization.xml:2158(para)
8037
msgid ""
8038
"Use the <application>onevm list</application> option to view information "
8039
"about virtual machines. Also, the <application>onevm show vm01</application> "
8040
"option will display more details about a specific virtual machine."
8041
msgstr ""
8042
"Use the <application>onevm list</application> option to view information "
8043
"about virtual machines. Also, the <application>onevm show vm01</application> "
8044
"option will display more details about a specific virtual machine."
8045
8046
#: serverguide/C/virtualization.xml:2169(para)
8047
msgid ""
8048
"See the <ulink "
8049
"url=\"http://www.opennebula.org/doku.php?id=start\">OpenNebula website</ulink"
8050
"> for more information."
8051
msgstr ""
8052
"See the <ulink "
8053
"url=\"http://www.opennebula.org/doku.php?id=start\">OpenNebula website</ulink"
8054
"> for more information."
8055
8056
#: serverguide/C/virtualization.xml:2174(para)
8057
msgid ""
8058
"You can also find help in the <emphasis>#ubuntu-virt</emphasis> and "
8059
"<emphasis>#ubuntu-server</emphasis> IRC channels on <ulink "
8060
"url=\"http://freenode.net\">Freenode</ulink>."
8061
msgstr ""
8062
"You can also find help in the <emphasis>#ubuntu-virt</emphasis> and "
8063
"<emphasis>#ubuntu-server</emphasis> IRC channels on <ulink "
8064
"url=\"http://freenode.net\">Freenode</ulink>."
8065
8066
#: serverguide/C/virtualization.xml:2180(para)
8067
msgid ""
8068
"Also, the <ulink "
8069
"url=\"https://help.ubuntu.com/community/OpenNebula\">OpenNebula Ubuntu "
8070
"Wiki</ulink> page has more details."
8071
msgstr ""
8072
8073
#: serverguide/C/vcs.xml:13(title)
8074
msgid "Version Control System"
8075
msgstr "Version Control System"
8076
8077
#: serverguide/C/vcs.xml:14(para)
8078
msgid ""
8079
"Version control is the art of managing changes to information. It has long "
8080
"been a critical tool for programmers, who typically spend their time making "
8081
"small changes to software and then undoing those changes the next day. But "
8082
"the usefulness of version control software extends far beyond the bounds of "
8083
"the software development world. Anywhere you can find people using computers "
8084
"to manage information that changes often, there is room for version control."
8085
msgstr ""
8086
"Version control is the art of managing changes to information. It has long "
8087
"been a critical tool for programmers, who typically spend their time making "
8088
"small changes to software and then undoing those changes the next day. But "
8089
"the usefulness of version control software extends far beyond the bounds of "
8090
"the software development world. Anywhere you can find people using computers "
8091
"to manage information that changes often, there is room for version control."
8092
8093
#: serverguide/C/vcs.xml:17(title)
8094
msgid "Bazaar"
8095
msgstr "Bazaar"
8096
8097
#: serverguide/C/vcs.xml:18(para)
8098
msgid ""
8099
"Bazaar is a new version control system sponsored by Canonical, the "
8100
"commercial company behind Ubuntu. Unlike Subversion and CVS that only "
8101
"support a central repository model, Bazaar also supports "
8102
"<emphasis>distributed version control</emphasis>, giving people the ability "
8103
"to collaborate more efficiently. In particular, Bazaar is designed to "
8104
"maximize the level of community participation in open source projects."
8105
msgstr ""
8106
"Bazaar is a new version control system sponsored by Canonical, the "
8107
"commercial company behind Ubuntu. Unlike Subversion and CVS that only "
8108
"support a central repository model, Bazaar also supports "
8109
"<emphasis>distributed version control</emphasis>, giving people the ability "
8110
"to collaborate more efficiently. In particular, Bazaar is designed to "
8111
"maximise the level of community participation in open source projects."
8112
8113
#: serverguide/C/vcs.xml:29(para)
8114
msgid ""
8115
"At a terminal prompt, enter the following command to install "
8116
"<application>bzr</application>: <screen>\n"
8117
"<command>sudo apt-get install bzr</command>\n"
8118
"</screen>"
8119
msgstr ""
8120
"At a terminal prompt, enter the following command to install "
8121
"<application>bzr</application>: <screen>\n"
8122
"<command>sudo apt-get install bzr</command>\n"
8123
"</screen>"
8124
8125
#: serverguide/C/vcs.xml:40(para)
8126
msgid ""
8127
"To introduce yourself to <application>bzr</application>, use the "
8128
"<emphasis>whoami</emphasis> command like this: <screen>\n"
8129
"<command>$ bzr whoami 'Joe Doe <joe.doe@gmail.com>'</command>\n"
8130
"</screen>"
8131
msgstr ""
8132
"To introduce yourself to <application>bzr</application>, use the "
8133
"<emphasis>whoami</emphasis> command like this: <screen>\n"
8134
"<command>$ bzr whoami 'Joe Doe <joe.doe@gmail.com>'</command>\n"
8135
"</screen>"
8136
8137
#: serverguide/C/vcs.xml:49(title)
8138
msgid "Learning Bazaar"
8139
msgstr "Learning Bazaar"
8140
8141
#: serverguide/C/vcs.xml:50(para)
8142
msgid ""
8143
"Bazaar comes with bundled documentation installed into "
8144
"<application>/usr/share/doc/bzr/html</application> by default. The tutorial "
8145
"is a good place to start. The <application>bzr</application> command also "
8146
"comes with built-in help: <screen>\n"
8147
"<command>$ bzr help</command>\n"
8148
"</screen>"
8149
msgstr ""
8150
"Bazaar comes with bundled documentation installed into "
8151
"<application>/usr/share/doc/bzr/html</application> by default. The tutorial "
8152
"is a good place to start. The <application>bzr</application> command also "
8153
"comes with built-in help: <screen>\n"
8154
"<command>$ bzr help</command>\n"
8155
"</screen>"
8156
8157
#: serverguide/C/vcs.xml:60(para)
8158
msgid ""
8159
"To learn more about the <emphasis>foo</emphasis> command: <screen>\n"
8160
"<command>$ bzr help foo</command>\n"
8161
"</screen>"
8162
msgstr ""
8163
"To learn more about the <emphasis>foo</emphasis> command: <screen>\n"
8164
"<command>$ bzr help foo</command>\n"
8165
"</screen>"
8166
8167
#: serverguide/C/vcs.xml:68(title)
8168
msgid "Launchpad Integration"
8169
msgstr "Launchpad Integration"
8170
8171
#: serverguide/C/vcs.xml:69(para)
8172
msgid ""
8173
"While highly useful as a stand-alone system, Bazaar has good, optional "
8174
"integration with <ulink url=\"https://launchpad.net/\">Launchpad</ulink>, "
8175
"the collaborative development system used by Canonical and the broader open "
8176
"source community to manage and extend Ubuntu itself. For information on how "
8177
"Bazaar can be used with Launchpad to collaborate on open source projects, "
8178
"see <ulink url=\"http://bazaar-vcs.org/LaunchpadIntegration/\"> "
8179
"http://bazaar-vcs.org/LaunchpadIntegration</ulink>."
8180
msgstr ""
8181
"While highly useful as a stand-alone system, Bazaar has good, optional "
8182
"integration with <ulink url=\"https://launchpad.net/\">Launchpad</ulink>, "
8183
"the collaborative development system used by Canonical and the broader open "
8184
"source community to manage and extend Ubuntu itself. For information on how "
8185
"Bazaar can be used with Launchpad to collaborate on open source projects, "
8186
"see <ulink url=\"http://bazaar-vcs.org/LaunchpadIntegration/\"> "
8187
"http://bazaar-vcs.org/LaunchpadIntegration</ulink>."
8188
8189
#: serverguide/C/vcs.xml:81(title)
8190
msgid "Subversion"
8191
msgstr "Subversion"
8192
8193
#: serverguide/C/vcs.xml:82(para)
8194
msgid ""
8195
"Subversion is an open source version control system. Using Subversion, you "
8196
"can record the history of source files and documents. It manages files and "
8197
"directories over time. A tree of files is placed into a central repository. "
8198
"The repository is much like an ordinary file server, except that it "
8199
"remembers every change ever made to files and directories."
8200
msgstr ""
8201
"Subversion is an open source version control system. Using Subversion, you "
8202
"can record the history of source files and documents. It manages files and "
8203
"directories over time. A tree of files is placed into a central repository. "
8204
"The repository is much like an ordinary file server, except that it "
8205
"remembers every change ever made to files and directories."
8206
8207
#: serverguide/C/vcs.xml:87(para)
8208
msgid ""
8209
"To access Subversion repository using the HTTP protocol, you must install "
8210
"and configure a web server. Apache2 is proven to work with Subversion. "
8211
"Please refer to the HTTP subsection in the Apache2 section to install and "
8212
"configure Apache2. To access the Subversion repository using the HTTPS "
8213
"protocol, you must install and configure a digital certificate in your "
8214
"Apache 2 web server. Please refer to the HTTPS subsection in the Apache2 "
8215
"section to install and configure the digital certificate."
8216
msgstr ""
8217
"To access Subversion repository using the HTTP protocol, you must install "
8218
"and configure a web server. Apache2 is proven to work with Subversion. "
8219
"Please refer to the HTTP subsection in the Apache2 section to install and "
8220
"configure Apache2. To access the Subversion repository using the HTTPS "
8221
"protocol, you must install and configure a digital certificate in your "
8222
"Apache 2 Web server. Please refer to the HTTPS subsection in the Apache2 "
8223
"section to install and configure the digital certificate."
8224
8225
#: serverguide/C/vcs.xml:96(para)
8226
msgid ""
8227
"To install Subversion, run the following command from a terminal prompt:"
8228
msgstr ""
8229
"To install Subversion, run the following command from a terminal prompt:"
8230
8231
#: serverguide/C/vcs.xml:101(command)
8232
msgid "sudo apt-get install subversion libapache2-svn"
8233
msgstr "sudo apt-get install subversion libapache2-svn"
8234
8235
#: serverguide/C/vcs.xml:108(para)
8236
msgid ""
8237
"This step assumes you have installed above mentioned packages on your "
8238
"system. This section explains how to create a Subversion repository and "
8239
"access the project."
8240
msgstr ""
8241
"This step assumes you have installed above mentioned packages on your "
8242
"system. This section explains how to create a Subversion repository and "
8243
"access the project."
8244
8245
#: serverguide/C/vcs.xml:111(title)
8246
msgid "Create Subversion Repository"
8247
msgstr "Create Subversion Repository"
8248
8249
#: serverguide/C/vcs.xml:112(para)
8250
msgid ""
8251
"The Subversion repository can be created using the following command from a "
8252
"terminal prompt:"
8253
msgstr ""
8254
"The Subversion repository can be created using the following command from a "
8255
"terminal prompt:"
8256
8257
#: serverguide/C/vcs.xml:116(command)
8258
msgid "svnadmin create /path/to/repos/project"
8259
msgstr "svnadmin create /path/to/repos/project"
8260
8261
#: serverguide/C/vcs.xml:121(title)
8262
msgid "Importing Files"
8263
msgstr "Importing Files"
8264
8265
#: serverguide/C/vcs.xml:122(para)
8266
msgid ""
8267
"Once you create the repository you can <emphasis>import</emphasis> files "
8268
"into the repository. To import a directory, enter the following from a "
8269
"terminal prompt: <screen>\n"
8270
"<command>svn import /path/to/import/directory "
8271
"file:///path/to/repos/project</command>\n"
8272
"</screen>"
8273
msgstr ""
8274
"Once you create the repository you can <emphasis>import</emphasis> files "
8275
"into the repository. To import a directory, enter the following from a "
8276
"terminal prompt: <screen>\n"
8277
"<command>svn import /path/to/import/directory "
8278
"file:///path/to/repos/project</command>\n"
8279
"</screen>"
8280
8281
#: serverguide/C/vcs.xml:134(title) serverguide/C/vcs.xml:139(title)
8282
msgid "Access Methods"
8283
msgstr "Access Methods"
8284
8285
#: serverguide/C/vcs.xml:135(para)
8286
msgid ""
8287
"Subversion repositories can be accessed (checked out) through many different "
8288
"methods --on local disk, or through various network protocols. A repository "
8289
"location, however, is always a URL. The table describes how different URL "
8290
"schemes map to the available access methods."
8291
msgstr ""
8292
"Subversion repositories can be accessed (checked out) through many different "
8293
"methods --on local disk, or through various network protocols. A repository "
8294
"location, however, is always a URL. The table describes how different URL "
8295
"schemes map to the available access methods."
8296
8297
#: serverguide/C/vcs.xml:146(para)
8298
msgid "Schema"
8299
msgstr "Schema"
8300
8301
#: serverguide/C/vcs.xml:147(para)
8302
msgid "Access Method"
8303
msgstr "Access Method"
8304
8305
#: serverguide/C/vcs.xml:152(para)
8306
msgid "file://"
8307
msgstr "file://"
8308
8309
#: serverguide/C/vcs.xml:153(para)
8310
msgid "direct repository access (on local disk)"
8311
msgstr "direct repository access (on local disk)"
8312
8313
#: serverguide/C/vcs.xml:156(para)
8314
msgid "http://"
8315
msgstr "http://"
8316
8317
#: serverguide/C/vcs.xml:157(para)
8318
msgid "Access via WebDAV protocol to Subversion-aware Apache2 web server"
8319
msgstr "Access via WebDAV protocol to Subversion-aware Apache2 Web server"
8320
8321
#: serverguide/C/vcs.xml:160(para)
8322
msgid "https://"
8323
msgstr "https://"
8324
8325
#: serverguide/C/vcs.xml:161(para)
8326
msgid "Same as http://, but with SSL encryption"
8327
msgstr "Same as http://, but with SSL encryption"
8328
8329
#: serverguide/C/vcs.xml:164(para)
8330
msgid "svn://"
8331
msgstr "svn://"
8332
8333
#: serverguide/C/vcs.xml:165(para)
8334
msgid "Access via custom protocol to an svnserve server"
8335
msgstr "Access via custom protocol to an svnserve server"
8336
8337
#: serverguide/C/vcs.xml:168(para)
8338
msgid "svn+ssh://"
8339
msgstr "svn+ssh://"
8340
8341
#: serverguide/C/vcs.xml:169(para)
8342
msgid "Same as svn://, but through an SSH tunnel"
8343
msgstr "Same as svn://, but through an SSH tunnel"
8344
8345
#: serverguide/C/vcs.xml:175(para)
8346
msgid ""
8347
"In this section, we will see how to configure Subversion for all these "
8348
"access methods. Here, we cover the basics. For more advanced usage details, "
8349
"refer to the <ulink url=\"http://svnbook.red-bean.com/\">svn book</ulink>."
8350
msgstr ""
8351
"In this section, we will see how to configure Subversion for all these "
8352
"access methods. Here, we cover the basics. For more advanced usage details, "
8353
"refer to the <ulink url=\"http://svnbook.red-bean.com/\">svn book</ulink>."
8354
8355
#: serverguide/C/vcs.xml:182(title)
8356
msgid "Direct repository access (file://)"
8357
msgstr "Direct repository access (file://)"
8358
8359
#: serverguide/C/vcs.xml:183(para)
8360
msgid ""
8361
"This is the simplest of all access methods. It does not require any "
8362
"Subversion server process to be running. This access method is used to "
8363
"access Subversion from the same machine. The syntax of the command, entered "
8364
"at a terminal prompt, is as follows:"
8365
msgstr ""
8366
"This is the simplest of all access methods. It does not require any "
8367
"Subversion server process to be running. This access method is used to "
8368
"access Subversion from the same machine. The syntax of the command, entered "
8369
"at a terminal prompt, is as follows:"
8370
8371
#: serverguide/C/vcs.xml:190(command)
8372
msgid "svn co file:///path/to/repos/project"
8373
msgstr "svn co file:///path/to/repos/project"
8374
8375
#: serverguide/C/vcs.xml:193(para)
8376
msgid "or"
8377
msgstr "or"
8378
8379
#: serverguide/C/vcs.xml:196(command)
8380
msgid "svn co file://localhost/path/to/repos/project"
8381
msgstr "svn co file://localhost/path/to/repos/project"
8382
8383
#: serverguide/C/vcs.xml:200(para)
8384
msgid ""
8385
"If you do not specify the hostname, there are three forward slashes (///) -- "
8386
"two for the protocol (file, in this case) plus the leading slash in the "
8387
"path. If you specify the hostname, you must use two forward slashes (//)."
8388
msgstr ""
8389
"If you do not specify the hostname, there are three forward slashes (///) -- "
8390
"two for the protocol (file, in this case) plus the leading slash in the "
8391
"path. If you specify the hostname, you must use two forward slashes (//)."
8392
8393
#: serverguide/C/vcs.xml:202(para)
8394
msgid ""
8395
"The repository permissions depend on filesystem permissions. If the user has "
8396
"read/write permission, he can checkout from and commit to the repository."
8397
msgstr ""
8398
"The repository permissions depend on filesystem permissions. If the user has "
8399
"read/write permission, he can checkout from and commit to the repository."
8400
8401
#: serverguide/C/vcs.xml:205(title)
8402
msgid "Access via WebDAV protocol (http://)"
8403
msgstr "Access via WebDAV protocol (http://)"
8404
8405
#: serverguide/C/vcs.xml:206(para)
8406
msgid ""
8407
"To access the Subversion repository via WebDAV protocol, you must configure "
8408
"your Apache 2 web server. Add the following snippet between the "
8409
"<emphasis><VirtualHost></emphasis> and "
8410
"<emphasis></VirtualHost></emphasis> elements in "
8411
"<filename>/etc/apache2/sites-available/default</filename>, or another "
8412
"VirtualHost file:"
8413
msgstr ""
8414
8415
#: serverguide/C/vcs.xml:212(programlisting)
8416
#, no-wrap
8417
msgid ""
8418
"\n"
8419
" <Location /svn>\n"
8420
" DAV svn\n"
8421
" SVNPath /home/svn\n"
8422
" AuthType Basic\n"
8423
" AuthName \"Your repository name\"\n"
8424
" AuthUserFile /etc/subversion/passwd\n"
8425
" Require valid-user\n"
8426
" </Location> \n"
8427
msgstr ""
8428
8429
#: serverguide/C/vcs.xml:223(para)
8430
msgid ""
8431
"The above configuration snippet assumes that Subversion repositories are "
8432
"created under <filename>/home/svn/</filename> directory using "
8433
"<command>svnadmin</command> command. They can be accessible using "
8434
"<command>http://hostname/svn/repos_name</command> url."
8435
msgstr ""
8436
"The above configuration snippet assumes that Subversion repositories are "
8437
"created under <filename>/home/svn/</filename> directory using "
8438
"<command>svnadmin</command> command. They can be accessible using "
8439
"<command>http://hostname/svn/repos_name</command> url."
8440
8441
#: serverguide/C/vcs.xml:229(para)
8442
msgid ""
8443
"To import or commit files to your Subversion repository over HTTP, the "
8444
"repository should be owned by the HTTP user. In Ubuntu systems, normally the "
8445
"HTTP user is <command>www-data</command>. To change the ownership of the "
8446
"repository files enter the following command from terminal prompt:"
8447
msgstr ""
8448
"To import or commit files to your Subversion repository over HTTP, the "
8449
"repository should be owned by the HTTP user. In Ubuntu systems, normally the "
8450
"HTTP user is <command>www-data</command>. To change the ownership of the "
8451
"repository files enter the following command from terminal prompt:"
8452
8453
#: serverguide/C/vcs.xml:238(command)
8454
msgid "sudo chown -R www-data:www-data /path/to/repos"
8455
msgstr "sudo chown -R www-data:www-data /path/to/repos"
8456
8457
#: serverguide/C/vcs.xml:241(para)
8458
msgid ""
8459
"By changing the ownership of repository as <command>www-data</command> you "
8460
"will not be able to import or commit files into the repository by running "
8461
"<command>svn import file:///</command> command as any user other than "
8462
"<command>www-data</command>."
8463
msgstr ""
8464
"By changing the ownership of repository as <command>www-data</command> you "
8465
"will not be able to import or commit files into the repository by running "
8466
"<command>svn import file:///</command> command as any user other than "
8467
"<command>www-data</command>."
8468
8469
#: serverguide/C/vcs.xml:250(para)
8470
msgid ""
8471
"Next, you must create the <filename>/etc/subversion/passwd</filename> file "
8472
"that will contain user authentication details. To create a file issue the "
8473
"following command at a command prompt (which will create the file and add "
8474
"the first user):"
8475
msgstr ""
8476
"Next, you must create the <filename>/etc/subversion/passwd</filename> file "
8477
"that will contain user authentication details. To create a file issue the "
8478
"following command at a command prompt (which will create the file and add "
8479
"the first user):"
8480
8481
#: serverguide/C/vcs.xml:256(command)
8482
msgid "sudo htpasswd -c /etc/subversion/passwd user_name"
8483
msgstr "sudo htpasswd -c /etc/subversion/passwd user_name"
8484
8485
#: serverguide/C/vcs.xml:259(para)
8486
msgid ""
8487
"To add additional users omit the <emphasis>\"-c\"</emphasis> option as this "
8488
"option replaces the old file. Instead use this form:"
8489
msgstr ""
8490
"To add additional users omit the <emphasis>\"-c\"</emphasis> option as this "
8491
"option replaces the old file. Instead use this form:"
8492
8493
#: serverguide/C/vcs.xml:264(command)
8494
msgid "sudo htpasswd /etc/subversion/password user_name"
8495
msgstr "sudo htpasswd /etc/subversion/password user_name"
8496
8497
#: serverguide/C/vcs.xml:268(para)
8498
msgid ""
8499
"This command will prompt you to enter the password. Once you enter the "
8500
"password, the user is added. Now, to access the repository you can run the "
8501
"following command:"
8502
msgstr ""
8503
"This command will prompt you to enter the password. Once you enter the "
8504
"password, the user is added. Now, to access the repository you can run the "
8505
"following command:"
8506
8507
#: serverguide/C/vcs.xml:269(command)
8508
msgid "svn co http://servername/svn"
8509
msgstr "svn co http://servername/svn"
8510
8511
#: serverguide/C/vcs.xml:271(para)
8512
msgid ""
8513
"The password is transmitted as plain text. If you are worried about password "
8514
"snooping, you are advised to use SSL encryption. For details, please refer "
8515
"next section."
8516
msgstr ""
8517
"The password is transmitted as plain text. If you are worried about password "
8518
"snooping, you are advised to use SSL encryption. For details, please refer "
8519
"next section."
8520
8521
#: serverguide/C/vcs.xml:277(title)
8522
msgid "Access via WebDAV protocol with SSL encryption (https://)"
8523
msgstr "Access via WebDAV protocol with SSL encryption (https://)"
8524
8525
#: serverguide/C/vcs.xml:278(para)
8526
msgid ""
8527
"Accessing Subversion repository via WebDAV protocol with SSL encryption "
8528
"(https://) is similar to http:// except that you must install and configure "
8529
"the digital certificate in your Apache2 web server. To use SSL with "
8530
"Subversion add the above Apache2 configuration to "
8531
"<filename>/etc/apache2/sites-available/default-ssl</filename>. For more "
8532
"information on setting up Apache2 with SSL see <xref linkend=\"https-"
8533
"configuration\"/>."
8534
msgstr ""
8535
"Accessing Subversion repository via WebDAV protocol with SSL encryption "
8536
"(https://) is similar to http:// except that you must install and configure "
8537
"the digital certificate in your Apache2 web server. To use SSL with "
8538
"Subversion add the above Apache2 configuration to "
8539
"<filename>/etc/apache2/sites-available/default-ssl</filename>. For more "
8540
"information on setting up Apache2 with SSL see <xref linkend=\"https-"
8541
"configuration\"/>."
8542
8543
#: serverguide/C/vcs.xml:287(para)
8544
msgid ""
8545
"You can install a digital certificate issued by a signing authority. "
8546
"Alternatively, you can install your own self-signed certificate."
8547
msgstr ""
8548
"You can install a digital certificate issued by a signing authority. "
8549
"Alternatively, you can install your own self-signed certificate."
8550
8551
#: serverguide/C/vcs.xml:292(para)
8552
msgid ""
8553
"This step assumes you have installed and configured a digital certificate in "
8554
"your Apache 2 web server. Now, to access the Subversion repository, please "
8555
"refer to the above section! The access methods are exactly the same, except "
8556
"the protocol. You must use https:// to access the Subversion repository."
8557
msgstr ""
8558
"This step assumes you have installed and configured a digital certificate in "
8559
"your Apache 2 Web server. Now, to access the Subversion repository, please "
8560
"refer to the above section! The access methods are exactly the same, except "
8561
"the protocol. You must use https:// to access the Subversion repository."
8562
8563
#: serverguide/C/vcs.xml:302(title)
8564
msgid "Access via custom protocol (svn://)"
8565
msgstr "Access via custom protocol (svn://)"
8566
8567
#: serverguide/C/vcs.xml:303(para)
8568
msgid ""
8569
"Once the Subversion repository is created, you can configure the access "
8570
"control. You can edit the <filename> "
8571
"/path/to/repos/project/conf/svnserve.conf</filename> file to configure the "
8572
"access control. For example, to set up authentication, you can uncomment the "
8573
"following lines in the configuration file:"
8574
msgstr ""
8575
"Once the Subversion repository is created, you can configure the access "
8576
"control. You can edit the <filename> "
8577
"/path/to/repos/project/conf/svnserve.conf</filename> file to configure the "
8578
"access control. For example, to set up authentication, you can uncomment the "
8579
"following lines in the configuration file:"
8580
8581
#: serverguide/C/vcs.xml:310(programlisting)
8582
#, no-wrap
8583
msgid ""
8584
"# [general]\n"
8585
"# password-db = passwd"
8586
msgstr ""
8587
"# [general]\n"
8588
"# password-db = passwd"
8589
8590
#: serverguide/C/vcs.xml:313(para)
8591
msgid ""
8592
"After uncommenting the above lines, you can maintain the user list in the "
8593
"passwd file. So, edit the file <filename>passwd </filename> in the same "
8594
"directory and add the new user. The syntax is as follows:"
8595
msgstr ""
8596
"After uncommenting the above lines, you can maintain the user list in the "
8597
"passwd file. So, edit the file <filename>passwd </filename> in the same "
8598
"directory and add the new user. The syntax is as follows:"
8599
8600
#: serverguide/C/vcs.xml:319(programlisting)
8601
#, no-wrap
8602
msgid "username = password"
8603
msgstr "username = password"
8604
8605
#: serverguide/C/vcs.xml:320(para)
8606
msgid "For more details, please refer to the file."
8607
msgstr "For more details, please refer to the file."
8608
8609
#: serverguide/C/vcs.xml:324(para)
8610
msgid ""
8611
"Now, to access Subversion via the svn:// custom protocol, either from the "
8612
"same machine or a different machine, you can run svnserver using svnserve "
8613
"command. The syntax is as follows:"
8614
msgstr ""
8615
"Now, to access Subversion via the svn:// custom protocol, either from the "
8616
"same machine or a different machine, you can run svnserver using svnserve "
8617
"command. The syntax is as follows:"
8618
8619
#: serverguide/C/vcs.xml:329(programlisting)
8620
#, no-wrap
8621
msgid ""
8622
"$ svnserve -d --foreground -r /path/to/repos\n"
8623
"# -d -- daemon mode\n"
8624
"# --foreground -- run in foreground (useful for debugging)\n"
8625
"# -r -- root of directory to serve\n"
8626
"\n"
8627
"For more usage details, please refer to:\n"
8628
"$ svnserve --help"
8629
msgstr ""
8630
"$ svnserve -d --foreground -r /path/to/repos\n"
8631
"# -d -- daemon mode\n"
8632
"# --foreground -- run in foreground (useful for debugging)\n"
8633
"# -r -- root of directory to serve\n"
8634
"\n"
8635
"For more usage details, please refer to:\n"
8636
"$ svnserve --help"
8637
8638
#: serverguide/C/vcs.xml:337(para)
8639
msgid ""
8640
"Once you run this command, Subversion starts listening on default port "
8641
"(3690). To access the project repository, you must run the following command "
8642
"from a terminal prompt:"
8643
msgstr ""
8644
"Once you run this command, Subversion starts listening on default port "
8645
"(3690). To access the project repository, you must run the following command "
8646
"from a terminal prompt:"
8647
8648
#: serverguide/C/vcs.xml:340(command)
8649
msgid "svn co svn://hostname/project project --username user_name"
8650
msgstr "svn co svn://hostname/project project --username user_name"
8651
8652
#: serverguide/C/vcs.xml:343(para)
8653
msgid ""
8654
"Based on server configuration, it prompts for password. Once you are "
8655
"authenticated, it checks out the code from Subversion repository. To "
8656
"synchronize the project repository with the local copy, you can run the "
8657
"<command>update</command> sub-command. The syntax of the command, entered at "
8658
"a terminal prompt, is as follows:"
8659
msgstr ""
8660
"Based on server configuration, it prompts for password. Once you are "
8661
"authenticated, it checks out the code from Subversion repository. To "
8662
"synchronise the project repository with the local copy, you can run the "
8663
"<command>update</command> sub-command. The syntax of the command, entered at "
8664
"a terminal prompt, is as follows:"
8665
8666
#: serverguide/C/vcs.xml:351(command)
8667
msgid "cd project_dir ; svn update"
8668
msgstr "cd project_dir ; svn update"
8669
8670
#: serverguide/C/vcs.xml:354(para)
8671
msgid ""
8672
"For more details about using each Subversion sub-command, you can refer to "
8673
"the manual. For example, to learn more about the co (checkout) command, "
8674
"please run the following command from a terminal prompt:"
8675
msgstr ""
8676
"For more details about using each Subversion sub-command, you can refer to "
8677
"the manual. For example, to learn more about the co (checkout) command, "
8678
"please run the following command from a terminal prompt:"
8679
8680
#: serverguide/C/vcs.xml:358(command)
8681
msgid "svn co help"
8682
msgstr "svn co help"
8683
8684
#: serverguide/C/vcs.xml:362(title)
8685
msgid "Access via custom protocol with SSL encryption (svn+ssh://)"
8686
msgstr "Access via custom protocol with SSL encryption (svn+ssh://)"
8687
8688
#: serverguide/C/vcs.xml:363(para)
8689
msgid ""
8690
"The configuration and server process is same as in the svn:// method. For "
8691
"details, please refer to the above section. This step assumes you have "
8692
"followed the above step and started the Subversion server using "
8693
"<application>svnserve</application> command."
8694
msgstr ""
8695
"The configuration and server process is same as in the svn:// method. For "
8696
"details, please refer to the above section. This step assumes you have "
8697
"followed the above step and started the Subversion server using "
8698
"<application>svnserve</application> command."
8699
8700
#: serverguide/C/vcs.xml:369(para)
8701
msgid ""
8702
"It is also assumed that the ssh server is running on that machine and that "
8703
"it is allowing incoming connections. To confirm, please try to login to that "
8704
"machine using ssh. If you can login, everything is perfect. If you cannot "
8705
"login, please address it before continuing further."
8706
msgstr ""
8707
"It is also assumed that the ssh server is running on that machine and that "
8708
"it is allowing incoming connections. To confirm, please try to login to that "
8709
"machine using ssh. If you can login, everything is perfect. If you cannot "
8710
"login, please address it before continuing further."
8711
8712
#: serverguide/C/vcs.xml:375(para)
8713
msgid ""
8714
"The svn+ssh:// protocol is used to access the Subversion repository using "
8715
"SSL encryption. The data transfer is encrypted using this method. To access "
8716
"the project repository (for example with a checkout), you must use the "
8717
"following command syntax:"
8718
msgstr ""
8719
"The svn+ssh:// protocol is used to access the Subversion repository using "
8720
"SSL encryption. The data transfer is encrypted using this method. To access "
8721
"the project repository (for example with a checkout), you must use the "
8722
"following command syntax:"
8723
8724
#: serverguide/C/vcs.xml:382(command)
8725
msgid "svn co svn+ssh://hostname/var/svn/repos/project"
8726
msgstr "svn co svn+ssh://hostname/var/svn/repos/project"
8727
8728
#: serverguide/C/vcs.xml:386(para)
8729
msgid ""
8730
"You must use the full path (/path/to/repos/project) to access the Subversion "
8731
"repository using this access method."
8732
msgstr ""
8733
"You must use the full path (/path/to/repos/project) to access the Subversion "
8734
"repository using this access method."
8735
8736
#: serverguide/C/vcs.xml:389(para)
8737
msgid ""
8738
"Based on server configuration, it prompts for password. You must enter the "
8739
"password you use to login via ssh. Once you are authenticated, it checks out "
8740
"the code from the Subversion repository."
8741
msgstr ""
8742
"Based on server configuration, it prompts for password. You must enter the "
8743
"password you use to login via ssh. Once you are authenticated, it checks out "
8744
"the code from the Subversion repository."
8745
8746
#: serverguide/C/vcs.xml:399(title)
8747
msgid "CVS Server"
8748
msgstr "CVS Server"
8749
8750
#: serverguide/C/vcs.xml:400(para)
8751
msgid ""
8752
"CVS is a version control system. You can use it to record the history of "
8753
"source files."
8754
msgstr ""
8755
"CVS is a version control system. You can use it to record the history of "
8756
"source files."
8757
8758
#: serverguide/C/vcs.xml:406(para)
8759
msgid ""
8760
"To install <application>CVS</application>, run the following command from a "
8761
"terminal prompt: <screen>\n"
8762
"<command>sudo apt-get install cvs</command>\n"
8763
"</screen> After you install <application>cvs</application>, you should "
8764
"install <application>xinetd</application> to start/stop the cvs server. At "
8765
"the prompt, enter the following command to install "
8766
"<application>xinetd</application>: <screen>\n"
8767
"<command>sudo apt-get install xinetd</command>\n"
8768
"</screen>"
8769
msgstr ""
8770
"To install <application>CVS</application>, run the following command from a "
8771
"terminal prompt: <screen>\n"
8772
"<command>sudo apt-get install cvs</command>\n"
8773
"</screen> After you install <application>cvs</application>, you should "
8774
"install <application>xinetd</application> to start/stop the cvs server. At "
8775
"the prompt, enter the following command to install "
8776
"<application>xinetd</application>: <screen>\n"
8777
"<command>sudo apt-get install xinetd</command>\n"
8778
"</screen>"
8779
8780
#: serverguide/C/vcs.xml:439(programlisting)
8781
#, no-wrap
8782
msgid ""
8783
"\n"
8784
"service cvspserver\n"
8785
"{\n"
8786
" port = 2401\n"
8787
" socket_type = stream\n"
8788
" protocol = tcp\n"
8789
" user = root\n"
8790
" wait = no\n"
8791
" type = UNLISTED\n"
8792
" server = /usr/bin/cvs\n"
8793
" server_args = -f --allow-root /var/lib/cvs pserver\n"
8794
" disable = no\n"
8795
"}\n"
8796
msgstr ""
8797
"\n"
8798
"service cvspserver\n"
8799
"{\n"
8800
" port = 2401\n"
8801
" socket_type = stream\n"
8802
" protocol = tcp\n"
8803
" user = root\n"
8804
" wait = no\n"
8805
" type = UNLISTED\n"
8806
" server = /usr/bin/cvs\n"
8807
" server_args = -f --allow-root /var/lib/cvs pserver\n"
8808
" disable = no\n"
8809
"}\n"
8810
8811
#: serverguide/C/vcs.xml:455(para)
8812
msgid ""
8813
"Be sure to edit the repository if you have changed the default repository "
8814
"(<application>/var/lib/cvs</application>) directory."
8815
msgstr ""
8816
"Be sure to edit the repository if you have changed the default repository "
8817
"(<application>/var/lib/cvs</application>) directory."
8818
8819
#: serverguide/C/vcs.xml:424(para)
8820
msgid ""
8821
"Once you install cvs, the repository will be automatically initialized. By "
8822
"default, the repository resides under the "
8823
"<application>/var/lib/cvs</application> directory. You can change this path "
8824
"by running following command: <screen>\n"
8825
"<command>cvs -d /your/new/cvs/repo init</command>\n"
8826
"</screen> Once the initial repository is set up, you can configure "
8827
"<application>xinetd</application> to start the CVS server. You can copy the "
8828
"following lines to the <filename> /etc/xinetd.d/cvspserver</filename> file. "
8829
"<placeholder-1/><placeholder-2/> Once you have configured "
8830
"<application>xinetd</application> you can start the cvs server by running "
8831
"following command: <screen>\n"
8832
"<command>sudo /etc/init.d/xinetd restart</command>\n"
8833
"</screen>"
8834
msgstr ""
8835
"Once you install cvs, the repository will be automatically initialised. By "
8836
"default, the repository resides under the "
8837
"<application>/var/lib/cvs</application> directory. You can change this path "
8838
"by running following command: <screen>\n"
8839
"<command>cvs -d /your/new/cvs/repo init</command>\n"
8840
"</screen> Once the initial repository is set up, you can configure "
8841
"<application>xinetd</application> to start the CVS server. You can copy the "
8842
"following lines to the <filename> /etc/xinetd.d/cvspserver</filename> file. "
8843
"<placeholder-1/><placeholder-2/> Once you have configured "
8844
"<application>xinetd</application> you can start the cvs server by running "
8845
"following command: <screen>\n"
8846
"<command>sudo /etc/init.d/xinetd restart</command>\n"
8847
"</screen>"
8848
8849
#: serverguide/C/vcs.xml:468(para)
8850
msgid ""
8851
"You can confirm that the CVS server is running by issuing the following "
8852
"command:"
8853
msgstr ""
8854
"You can confirm that the CVS server is running by issuing the following "
8855
"command:"
8856
8857
#: serverguide/C/vcs.xml:475(command)
8858
msgid "sudo netstat -tap | grep cvs"
8859
msgstr "sudo netstat -tap | grep cvs"
8860
8861
#: serverguide/C/vcs.xml:479(para) serverguide/C/databases.xml:65(para)
8862
msgid ""
8863
"When you run this command, you should see the following line or something "
8864
"similar:"
8865
msgstr ""
8866
"When you run this command, you should see the following line or something "
8867
"similar:"
8868
8869
#: serverguide/C/vcs.xml:484(programlisting)
8870
#, no-wrap
8871
msgid ""
8872
"\n"
8873
"tcp 0 0 *:cvspserver *:* LISTEN \n"
8874
msgstr ""
8875
"\n"
8876
"tcp 0 0 *:cvspserver *:* LISTEN \n"
8877
8878
#: serverguide/C/vcs.xml:488(para)
8879
msgid ""
8880
"From here you can continue to add users, add new projects, and manage the "
8881
"CVS server."
8882
msgstr ""
8883
"From here you can continue to add users, add new projects, and manage the "
8884
"CVS server."
8885
8886
#: serverguide/C/vcs.xml:493(para)
8887
msgid ""
8888
"CVS allows the user to add users independently of the underlying OS "
8889
"installation. Probably the easiest way is to use the Linux Users for CVS, "
8890
"although it has potential security issues. Please refer to the CVS manual "
8891
"for details."
8892
msgstr ""
8893
"CVS allows the user to add users independently of the underlying OS "
8894
"installation. Probably the easiest way is to use the Linux Users for CVS, "
8895
"although it has potential security issues. Please refer to the CVS manual "
8896
"for details."
8897
8898
#: serverguide/C/vcs.xml:503(title)
8899
msgid "Add Projects"
8900
msgstr "Add Projects"
8901
8902
#: serverguide/C/vcs.xml:515(para)
8903
msgid ""
8904
"You can use the CVSROOT environment variable to store the CVS root "
8905
"directory. Once you export the CVSROOT environment variable, you can avoid "
8906
"using -d option in the above cvs command."
8907
msgstr ""
8908
"You can use the CVSROOT environment variable to store the CVS root "
8909
"directory. Once you export the CVSROOT environment variable, you can avoid "
8910
"using -d option in the above cvs command."
8911
8912
#: serverguide/C/vcs.xml:527(para)
8913
msgid ""
8914
"When you add a new project, the CVS user you use must have write access to "
8915
"the CVS repository (<application>/var/lib/cvs</application>). By default, "
8916
"the <application>src</application> group has write access to the CVS "
8917
"repository. So, you can add the user to this group, and he can then add and "
8918
"manage projects in the CVS repository."
8919
msgstr ""
8920
"When you add a new project, the CVS user you use must have write access to "
8921
"the CVS repository (<application>/var/lib/cvs</application>). By default, "
8922
"the <application>src</application> group has write access to the CVS "
8923
"repository. So, you can add the user to this group, and he can then add and "
8924
"manage projects in the CVS repository."
8925
8926
#: serverguide/C/vcs.xml:504(para)
8927
msgid ""
8928
"This section explains how to add new project to the CVS repository. Create "
8929
"the directory and add necessary document and source files to the directory. "
8930
"Now, run the following command to add this project to CVS repository: "
8931
"<screen>\n"
8932
"<command>cd your/project</command>\n"
8933
"<command>cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "
8934
"\"Importing my project to CVS repository\" . new_project start</command>\n"
8935
"</screen><placeholder-1/> The string <emphasis>new_project</emphasis> is a "
8936
"vendor tag, and <emphasis>start</emphasis> is a release tag. They serve no "
8937
"purpose in this context, but since CVS requires them, they must be present. "
8938
"<placeholder-2/>"
8939
msgstr ""
8940
"This section explains how to add new project to the CVS repository. Create "
8941
"the directory and add necessary document and source files to the directory. "
8942
"Now, run the following command to add this project to CVS repository: "
8943
"<screen>\n"
8944
"<command>cd your/project</command>\n"
8945
"<command>cvs -d :pserver:username@hostname.com:/var/lib/cvs import -m "
8946
"\"Importing my project to CVS repository\" . new_project start</command>\n"
8947
"</screen><placeholder-1/> The string <emphasis>new_project</emphasis> is a "
8948
"vendor tag, and <emphasis>start</emphasis> is a release tag. They serve no "
8949
"purpose in this context, but since CVS requires them, they must be present. "
8950
"<placeholder-2/>"
8951
8952
#: serverguide/C/vcs.xml:540(ulink)
8953
msgid "Bazaar Home Page"
8954
msgstr "Bazaar Home Page"
8955
8956
#: serverguide/C/vcs.xml:541(ulink)
8957
msgid "Launchpad"
8958
msgstr "Launchpad"
8959
8960
#: serverguide/C/vcs.xml:542(ulink)
8961
msgid "Subversion Home Page"
8962
msgstr "Subversion Home Page"
8963
8964
#: serverguide/C/vcs.xml:543(ulink)
8965
msgid "Subversion Book"
8966
msgstr "Subversion Book"
8967
8968
#: serverguide/C/vcs.xml:545(ulink)
8969
msgid "CVS Manual"
8970
msgstr "CVS Manual"
8971
8972
#: serverguide/C/vcs.xml:546(ulink)
8973
msgid "Easy Bazaar Ubuntu Wiki page"
8974
msgstr ""
8975
8976
#: serverguide/C/vcs.xml:547(ulink)
8977
msgid "Ubuntu Wiki Subversion page"
8978
msgstr ""
8979
8980
#: serverguide/C/serverguide.xml:3(title) serverguide/C/bookinfo.xml:3(title)
8981
msgid "Credits and License"
8982
msgstr "Credits and Licence"
8983
8984
#: serverguide/C/serverguide.xml:4(para) serverguide/C/bookinfo.xml:4(para)
8985
msgid ""
8986
"This document is maintained by the Ubuntu documentation team "
8987
"(https://wiki.ubuntu.com/DocumentationTeam). For a list of contributors, see "
8988
"the <ulink url=\"../../libs/C/contributors.xml\">contributors page</ulink>"
8989
msgstr ""
8990
"This document is maintained by the Ubuntu documentation team "
8991
"(https://wiki.ubuntu.com/DocumentationTeam). For a list of contributors, see "
8992
"the <ulink url=\"../../libs/C/contributors.xml\">contributors page</ulink>"
8993
8994
#: serverguide/C/serverguide.xml:5(para) serverguide/C/bookinfo.xml:5(para)
8995
msgid ""
8996
"This document is made available under the Creative Commons ShareAlike 2.5 "
8997
"License (CC-BY-SA)."
8998
msgstr ""
8999
"This document is made available under the Creative Commons ShareAlike 2.5 "
9000
"Licence (CC-BY-SA)."
9001
9002
#: serverguide/C/serverguide.xml:6(para) serverguide/C/bookinfo.xml:6(para)
9003
msgid ""
9004
"You are free to modify, extend, and improve the Ubuntu documentation source "
9005
"code under the terms of this license. All derivative works must be released "
9006
"under this license."
9007
msgstr ""
9008
"You are free to modify, extend, and improve the Ubuntu documentation source "
9009
"code under the terms of this licence. All derivative works must be released "
9010
"under this licence."
9011
9012
#: serverguide/C/serverguide.xml:8(para) serverguide/C/bookinfo.xml:8(para)
9013
msgid ""
9014
"This documentation is distributed in the hope that it will be useful, but "
9015
"WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY "
9016
"or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER."
9017
msgstr ""
9018
"This documentation is distributed in the hope that it will be useful, but "
9019
"WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY "
9020
"or FITNESS FOR A PARTICULAR PURPOSE AS DESCRIBED IN THE DISCLAIMER."
9021
9022
#: serverguide/C/serverguide.xml:11(para) serverguide/C/bookinfo.xml:11(para)
9023
msgid ""
9024
"A copy of the license is available here: <ulink url=\"/usr/share/ubuntu-"
9025
"docs/libs/C/ccbysa.xml\">Creative Commons ShareAlike License</ulink>."
9026
msgstr ""
9027
"A copy of the license is available here: <ulink url=\"/usr/share/ubuntu-"
9028
"docs/libs/C/ccbysa.xml\">Creative Commons ShareAlike License</ulink>."
9029
9030
#: serverguide/C/serverguide.xml:14(year) serverguide/C/bookinfo.xml:14(year)
9031
msgid "2008"
9032
msgstr "2008"
9033
9034
#: serverguide/C/serverguide.xml:15(ulink) serverguide/C/bookinfo.xml:15(ulink)
9035
msgid "Ubuntu Documentation Project"
9036
msgstr "Ubuntu Documentation Project"
9037
9038
#: serverguide/C/serverguide.xml:15(holder) serverguide/C/bookinfo.xml:15(holder)
9039
msgid "Canonical Ltd. and members of the <placeholder-1/>"
9040
msgstr "Canonical Ltd. and members of the <placeholder-1/>"
9041
9042
#: serverguide/C/serverguide.xml:18(publishername) serverguide/C/bookinfo.xml:18(publishername)
9043
msgid "The Ubuntu Documentation Project"
9044
msgstr "The Ubuntu Documentation Project"
9045
9046
#: serverguide/C/serverguide.xml:17(para)
9047
msgid ""
9048
"Welcome to the <emphasis>Ubuntu Server Guide</emphasis>! It contains "
9049
"information on how to install and configure various server applications on "
9050
"your Ubuntu system to fit your needs. It is a step-by-step, task-oriented "
9051
"guide for configuring and customizing your system."
9052
msgstr ""
9053
"Welcome to the <emphasis>Ubuntu Server Guide</emphasis>! It contains "
9054
"information on how to install and configure various server applications on "
9055
"your Ubuntu system to fit your needs. It is a step-by-step, task-oriented "
9056
"guide for configuring and customising your system."
9057
9058
#: serverguide/C/security.xml:13(title)
9059
msgid "Security"
9060
msgstr "Security"
9061
9062
#: serverguide/C/security.xml:14(para)
9063
msgid ""
9064
"Security should always be considered when installing, deploying, and using "
9065
"any type of computer system. Although a fresh installation of Ubuntu is "
9066
"relatively safe for immediate use on the Internet, it is important to have a "
9067
"balanced understanding of your systems security posture based on how it will "
9068
"be used after deployment."
9069
msgstr ""
9070
"Security should always be considered when installing, deploying, and using "
9071
"any type of computer system. Although a fresh installation of Ubuntu is "
9072
"relatively safe for immediate use on the Internet, it is important to have a "
9073
"balanced understanding of your systems security posture based on how it will "
9074
"be used after deployment."
9075
9076
#: serverguide/C/security.xml:17(para)
9077
msgid ""
9078
"This chapter provides an overview of security related topics as they pertain "
9079
"to Ubuntu 10.04 LTS Server Edition, and outlines simple measures you may use "
9080
"to protect your server and network from any number of potential security "
9081
"threats."
9082
msgstr ""
9083
"This chapter provides an overview of security related topics as they pertain "
9084
"to Ubuntu 10.04 LTS Server Edition, and outlines simple measures you may use "
9085
"to protect your server and network from any number of potential security "
9086
"threats."
9087
9088
#: serverguide/C/security.xml:21(title)
9089
msgid "User Management"
9090
msgstr "User Management"
9091
9092
#: serverguide/C/security.xml:22(para)
9093
msgid ""
9094
"User management is a critical part of maintaining a secure system. "
9095
"Ineffective user and privilege management often lead many systems into being "
9096
"compromised. Therefore, it is important that you understand how you can "
9097
"protect your server through simple and effective user account management "
9098
"techniques."
9099
msgstr ""
9100
"User management is a critical part of maintaining a secure system. "
9101
"Ineffective user and privilege management often lead many systems into being "
9102
"compromised. Therefore, it is important that you understand how you can "
9103
"protect your server through simple and effective user account management "
9104
"techniques."
9105
9106
#: serverguide/C/security.xml:26(title)
9107
msgid "Where is root?"
9108
msgstr "Where is root?"
9109
9110
#: serverguide/C/security.xml:27(para)
9111
msgid ""
9112
"Ubuntu developers made a conscientious decision to disable the "
9113
"administrative root account by default in all Ubuntu installations. This "
9114
"does not mean that the root account has been deleted or that it may not be "
9115
"accessed. It merely has been given a password which matches no possible "
9116
"encrypted value, therefore may not log in directly by itself."
9117
msgstr ""
9118
"Ubuntu developers made a conscientious decision to disable the "
9119
"administrative root account by default in all Ubuntu installations. This "
9120
"does not mean that the root account has been deleted or that it may not be "
9121
"accessed. It merely has been given a password which matches no possible "
9122
"encrypted value, therefore may not log in directly by itself."
9123
9124
#: serverguide/C/security.xml:30(para)
9125
msgid ""
9126
"Instead, users are encouraged to make use of a tool by the name of "
9127
"<application>sudo</application> to carry out system administrative duties. "
9128
"<application>Sudo</application> allows an authorized user to temporarily "
9129
"elevate their privileges using their own password instead of having to know "
9130
"the password belonging to the root account. This simple yet effective "
9131
"methodology provides accountability for all user actions, and gives the "
9132
"administrator granular control over which actions a user can perform with "
9133
"said privileges."
9134
msgstr ""
9135
"Instead, users are encouraged to make use of a tool by the name of "
9136
"<application>sudo</application> to carry out system administrative duties. "
9137
"<application>Sudo</application> allows an authorised user to temporarily "
9138
"elevate their privileges using their own password instead of having to know "
9139
"the password belonging to the root account. This simple yet effective "
9140
"methodology provides accountability for all user actions, and gives the "
9141
"administrator granular control over which actions a user can perform with "
9142
"said privileges."
9143
9144
#: serverguide/C/security.xml:35(para)
9145
msgid ""
9146
"If for some reason you wish to enable the root account, simply give it a "
9147
"password:"
9148
msgstr ""
9149
"If for some reason you wish to enable the root account, simply give it a "
9150
"password:"
9151
9152
#: serverguide/C/security.xml:39(command)
9153
msgid "sudo passwd"
9154
msgstr "sudo passwd"
9155
9156
#: serverguide/C/security.xml:41(para)
9157
msgid ""
9158
"Sudo will prompt you for your password, and then ask you to supply a new "
9159
"password for root as shown below:"
9160
msgstr ""
9161
"Sudo will prompt you for your password, and then ask you to supply a new "
9162
"password for root as shown below:"
9163
9164
#: serverguide/C/security.xml:44(userinput)
9165
#, no-wrap
9166
msgid "(enter your own password)"
9167
msgstr "(enter your own password)"
9168
9169
#: serverguide/C/security.xml:45(userinput)
9170
#, no-wrap
9171
msgid "(enter a new password for root)"
9172
msgstr "(enter a new password for root)"
9173
9174
#: serverguide/C/security.xml:46(userinput)
9175
#, no-wrap
9176
msgid "(repeat new password for root)"
9177
msgstr "(repeat new password for root)"
9178
9179
#: serverguide/C/security.xml:44(computeroutput)
9180
#, no-wrap
9181
msgid ""
9182
"[sudo] password for username: <placeholder-1/>\n"
9183
"Enter new UNIX password: <placeholder-2/>\n"
9184
"Retype new UNIX password: <placeholder-3/>\n"
9185
"passwd: password updated successfully"
9186
msgstr ""
9187
"[sudo] password for username: <placeholder-1/>\n"
9188
"Enter new UNIX password: <placeholder-2/>\n"
9189
"Retype new UNIX password: <placeholder-3/>\n"
9190
"passwd: password updated successfully"
9191
9192
#: serverguide/C/security.xml:51(para)
9193
msgid "To disable the root account, use the following passwd syntax:"
9194
msgstr "To disable the root account, use the following passwd syntax:"
9195
9196
#: serverguide/C/security.xml:55(command)
9197
msgid "sudo passwd -l root"
9198
msgstr "sudo passwd -l root"
9199
9200
#: serverguide/C/security.xml:59(para)
9201
msgid ""
9202
"You should read more on <application>Sudo</application> by checking out it's "
9203
"man page:"
9204
msgstr ""
9205
"You should read more on <application>Sudo</application> by checking out it's "
9206
"man page:"
9207
9208
#: serverguide/C/security.xml:63(command)
9209
msgid "man sudo"
9210
msgstr "man sudo"
9211
9212
#: serverguide/C/security.xml:67(para)
9213
msgid ""
9214
"By default, the initial user created by the Ubuntu installer is a member of "
9215
"the group \"admin\" which is added to the file "
9216
"<filename>/etc/sudoers</filename> as an authorized sudo user. If you wish to "
9217
"give any other account full root access through "
9218
"<application>sudo</application>, simply add them to the admin group."
9219
msgstr ""
9220
"By default, the initial user created by the Ubuntu installer is a member of "
9221
"the group \"admin\" which is added to the file "
9222
"<filename>/etc/sudoers</filename> as an authorised sudo user. If you wish to "
9223
"give any other account full root access through "
9224
"<application>sudo</application>, simply add them to the admin group."
9225
9226
#: serverguide/C/security.xml:73(title)
9227
msgid "Adding and Deleting Users"
9228
msgstr "Adding and Deleting Users"
9229
9230
#: serverguide/C/security.xml:74(para)
9231
msgid ""
9232
"The process for managing local users and groups is straight forward and "
9233
"differs very little from most other GNU/Linux operating systems. Ubuntu and "
9234
"other Debian based distributions, encourage the use of the \"adduser\" "
9235
"package for account management."
9236
msgstr ""
9237
"The process for managing local users and groups is straight forward and "
9238
"differs very little from most other GNU/Linux operating systems. Ubuntu and "
9239
"other Debian based distributions, encourage the use of the \"adduser\" "
9240
"package for account management."
9241
9242
#: serverguide/C/security.xml:79(para)
9243
msgid ""
9244
"To add a user account, use the following syntax, and follow the prompts to "
9245
"give the account a password and identifiable characteristics such as a full "
9246
"name, phone number, etc."
9247
msgstr ""
9248
"To add a user account, use the following syntax, and follow the prompts to "
9249
"give the account a password and identifiable characteristics such as a full "
9250
"name, phone number, etc."
9251
9252
#: serverguide/C/security.xml:83(command)
9253
msgid "sudo adduser username"
9254
msgstr "sudo adduser username"
9255
9256
#: serverguide/C/security.xml:87(para)
9257
msgid ""
9258
"To delete a user account and its primary group, use the following syntax:"
9259
msgstr ""
9260
"To delete a user account and its primary group, use the following syntax:"
9261
9262
#: serverguide/C/security.xml:91(command)
9263
msgid "sudo deluser username"
9264
msgstr "sudo deluser username"
9265
9266
#: serverguide/C/security.xml:93(para)
9267
msgid ""
9268
"Deleting an account does not remove their respective home folder. It is up "
9269
"to you whether or not you wish to delete the folder manually or keep it "
9270
"according to your desired retention policies."
9271
msgstr ""
9272
"Deleting an account does not remove their respective home folder. It is up "
9273
"to you whether or not you wish to delete the folder manually or keep it "
9274
"according to your desired retention policies."
9275
9276
#: serverguide/C/security.xml:96(para)
9277
msgid ""
9278
"Remember, any user added later on with the same UID/GID as the previous "
9279
"owner will now have access to this folder if you have not taken the "
9280
"necessary precautions."
9281
msgstr ""
9282
"Remember, any user added later on with the same UID/GID as the previous "
9283
"owner will now have access to this folder if you have not taken the "
9284
"necessary precautions."
9285
9286
#: serverguide/C/security.xml:99(para)
9287
msgid ""
9288
"You may want to change these UID/GID values to something more appropriate, "
9289
"such as the root account, and perhaps even relocate the folder to avoid "
9290
"future conflicts:"
9291
msgstr ""
9292
"You may want to change these UID/GID values to something more appropriate, "
9293
"such as the root account, and perhaps even relocate the folder to avoid "
9294
"future conflicts:"
9295
9296
#: serverguide/C/security.xml:103(command)
9297
msgid "sudo chown -R root:root /home/username/"
9298
msgstr "sudo chown -R root:root /home/username/"
9299
9300
#: serverguide/C/security.xml:104(command)
9301
msgid "sudo mkdir /home/archived_users/"
9302
msgstr "sudo mkdir /home/archived_users/"
9303
9304
#: serverguide/C/security.xml:105(command)
9305
msgid "sudo mv /home/username /home/archived_users/"
9306
msgstr "sudo mv /home/username /home/archived_users/"
9307
9308
#: serverguide/C/security.xml:109(para)
9309
msgid ""
9310
"To temporarily lock or unlock a user account, use the following syntax, "
9311
"respectively:"
9312
msgstr ""
9313
"To temporarily lock or unlock a user account, use the following syntax, "
9314
"respectively:"
9315
9316
#: serverguide/C/security.xml:113(command)
9317
msgid "sudo passwd -l username"
9318
msgstr "sudo passwd -l username"
9319
9320
#: serverguide/C/security.xml:114(command)
9321
msgid "sudo passwd -u username"
9322
msgstr "sudo passwd -u username"
9323
9324
#: serverguide/C/security.xml:118(para)
9325
msgid ""
9326
"To add or delete a personalized group, use the following syntax, "
9327
"respectively:"
9328
msgstr ""
9329
"To add or delete a personalised group, use the following syntax, "
9330
"respectively:"
9331
9332
#: serverguide/C/security.xml:122(command)
9333
msgid "sudo addgroup groupname"
9334
msgstr "sudo addgroup groupname"
9335
9336
#: serverguide/C/security.xml:123(command)
9337
msgid "sudo delgroup groupname"
9338
msgstr "sudo delgroup groupname"
9339
9340
#: serverguide/C/security.xml:127(para)
9341
msgid "To add a user to a group, use the following syntax:"
9342
msgstr "To add a user to a group, use the following syntax:"
9343
9344
#: serverguide/C/security.xml:131(command)
9345
msgid "sudo adduser username groupname"
9346
msgstr "sudo adduser username groupname"
9347
9348
#: serverguide/C/security.xml:138(title)
9349
msgid "User Profile Security"
9350
msgstr "User Profile Security"
9351
9352
#: serverguide/C/security.xml:139(para)
9353
msgid ""
9354
"When a new user is created, the adduser utility creates a brand new home "
9355
"directory named <filename class=\"directory\">/home/username</filename>, "
9356
"respectively. The default profile is modeled after the contents found in the "
9357
"directory of <filename class=\"directory\">/etc/skel</filename>, which "
9358
"includes all profile basics."
9359
msgstr ""
9360
"When a new user is created, the adduser utility creates a brand new home "
9361
"directory named <filename class=\"directory\">/home/username</filename>, "
9362
"respectively. The default profile is modelled after the contents found in "
9363
"the directory of <filename class=\"directory\">/etc/skel</filename>, which "
9364
"includes all profile basics."
9365
9366
#: serverguide/C/security.xml:142(para)
9367
msgid ""
9368
"If your server will be home to multiple users, you should pay close "
9369
"attention to the user home directory permissions to ensure confidentiality. "
9370
"By default, user home directories in Ubuntu are created with world "
9371
"read/execute permissions. This means that all users can browse and access "
9372
"the contents of other users home directories. This may not be suitable for "
9373
"your environment."
9374
msgstr ""
9375
"If your server will be home to multiple users, you should pay close "
9376
"attention to the user home directory permissions to ensure confidentiality. "
9377
"By default, user home directories in Ubuntu are created with world "
9378
"read/execute permissions. This means that all users can browse and access "
9379
"the contents of other users home directories. This may not be suitable for "
9380
"your environment."
9381
9382
#: serverguide/C/security.xml:147(para)
9383
msgid ""
9384
"To verify your current users home directory permissions, use the following "
9385
"syntax:"
9386
msgstr ""
9387
"To verify your current users home directory permissions, use the following "
9388
"syntax:"
9389
9390
#: serverguide/C/security.xml:151(command) serverguide/C/security.xml:183(command)
9391
msgid "ls -ld /home/username"
9392
msgstr "ls -ld /home/username"
9393
9394
#: serverguide/C/security.xml:153(para)
9395
msgid ""
9396
"The following output shows that the directory <filename "
9397
"class=\"directory\">/home/username</filename> has world readable permissions:"
9398
msgstr ""
9399
"The following output shows that the directory <filename "
9400
"class=\"directory\">/home/username</filename> has world readable permissions:"
9401
9402
#: serverguide/C/security.xml:156(computeroutput)
9403
#, no-wrap
9404
msgid "drwxr-xr-x 2 username username 4096 2007-10-02 20:03 username"
9405
msgstr "drwxr-xr-x 2 username username 4096 2007-10-02 20:03 username"
9406
9407
#: serverguide/C/security.xml:160(para)
9408
msgid ""
9409
"You can remove the world readable permissions using the following syntax:"
9410
msgstr ""
9411
"You can remove the world readable permissions using the following syntax:"
9412
9413
#: serverguide/C/security.xml:164(command)
9414
msgid "sudo chmod 0750 /home/username"
9415
msgstr "sudo chmod 0750 /home/username"
9416
9417
#: serverguide/C/security.xml:167(para)
9418
msgid ""
9419
"Some people tend to use the recursive option (-R) indiscriminately which "
9420
"modifies all child folders and files, but this is not necessary, and may "
9421
"yield other undesirable results. The parent directory alone is sufficient "
9422
"for preventing unauthorized access to anything below the parent."
9423
msgstr ""
9424
"Some people tend to use the recursive option (-R) indiscriminately which "
9425
"modifies all child folders and files, but this is not necessary, and may "
9426
"yield other undesirable results. The parent directory alone is sufficient "
9427
"for preventing unauthorised access to anything below the parent."
9428
9429
#: serverguide/C/security.xml:171(para)
9430
msgid ""
9431
"A much more efficient approach to the matter would be to modify the "
9432
"<application>adduser</application> global default permissions when creating "
9433
"user home folders. Simply edit the file "
9434
"<filename>/etc/adduser.conf</filename> and modify the "
9435
"<varname>DIR_MODE</varname> variable to something appropriate, so that all "
9436
"new home directories will receive the correct permissions."
9437
msgstr ""
9438
"A much more efficient approach to the matter would be to modify the "
9439
"<application>adduser</application> global default permissions when creating "
9440
"user home folders. Simply edit the file "
9441
"<filename>/etc/adduser.conf</filename> and modify the "
9442
"<varname>DIR_MODE</varname> variable to something appropriate, so that all "
9443
"new home directories will receive the correct permissions."
9444
9445
#: serverguide/C/security.xml:174(programlisting)
9446
#, no-wrap
9447
msgid ""
9448
"\n"
9449
"DIR_MODE=0750\n"
9450
msgstr ""
9451
"\n"
9452
"DIR_MODE=0750\n"
9453
9454
#: serverguide/C/security.xml:179(para)
9455
msgid ""
9456
"After correcting the directory permissions using any of the previously "
9457
"mentioned techniques, verify the results using the following syntax:"
9458
msgstr ""
9459
"After correcting the directory permissions using any of the previously "
9460
"mentioned techniques, verify the results using the following syntax:"
9461
9462
#: serverguide/C/security.xml:185(para)
9463
msgid ""
9464
"The results below show that world readable permissions have been removed:"
9465
msgstr ""
9466
"The results below show that world readable permissions have been removed:"
9467
9468
#: serverguide/C/security.xml:188(computeroutput)
9469
#, no-wrap
9470
msgid "drwxr-x--- 2 username username 4096 2007-10-02 20:03 username"
9471
msgstr "drwxr-x--- 2 username username 4096 2007-10-02 20:03 username"
9472
9473
#: serverguide/C/security.xml:195(title)
9474
msgid "Password Policy"
9475
msgstr "Password Policy"
9476
9477
#: serverguide/C/security.xml:196(para)
9478
msgid ""
9479
"A strong password policy is one of the most important aspects of your "
9480
"security posture. Many successful security breaches involve simple brute "
9481
"force and dictionary attacks against weak passwords. If you intend to offer "
9482
"any form of remote access involving your local password system, make sure "
9483
"you adequately address minimum password complexity requirements, maximum "
9484
"password lifetimes, and frequent audits of your authentication systems."
9485
msgstr ""
9486
"A strong password policy is one of the most important aspects of your "
9487
"security posture. Many successful security breaches involve simple brute "
9488
"force and dictionary attacks against weak passwords. If you intend to offer "
9489
"any form of remote access involving your local password system, make sure "
9490
"you adequately address minimum password complexity requirements, maximum "
9491
"password lifetimes, and frequent audits of your authentication systems."
9492
9493
#: serverguide/C/security.xml:200(title)
9494
msgid "Minimum Password Length"
9495
msgstr "Minimum Password Length"
9496
9497
#: serverguide/C/security.xml:201(para)
9498
msgid ""
9499
"By default, Ubuntu requires a minimum password length of 4 characters, as "
9500
"well as some basic entropy checks. These values are controlled in the file "
9501
"<filename>/etc/pam.d/common-password</filename>, which is outlined below."
9502
msgstr ""
9503
"By default, Ubuntu requires a minimum password length of 4 characters, as "
9504
"well as some basic entropy checks. These values are controlled in the file "
9505
"<filename>/etc/pam.d/common-password</filename>, which is outlined below."
9506
9507
#: serverguide/C/security.xml:204(programlisting)
9508
#, no-wrap
9509
msgid ""
9510
"\n"
9511
"password required pam_unix.so nullok obscure min=4 max=8 md5\n"
9512
msgstr ""
9513
"\n"
9514
"password required pam_unix.so nullok obscure min=4 max=8 md5\n"
9515
9516
#: serverguide/C/security.xml:207(para)
9517
msgid ""
9518
"If you would like to adjust the minimum length to 6 characters, change the "
9519
"appropriate variable to min=6. The modification is outlined below."
9520
msgstr ""
9521
"If you would like to adjust the minimum length to 6 characters, change the "
9522
"appropriate variable to min=6. The modification is outlined below."
9523
9524
#: serverguide/C/security.xml:210(programlisting)
9525
#, no-wrap
9526
msgid ""
9527
"\n"
9528
"password required pam_unix.so nullok obscure min=6 max=8 md5\n"
9529
msgstr ""
9530
"\n"
9531
"password required pam_unix.so nullok obscure min=6 max=8 md5\n"
9532
9533
#: serverguide/C/security.xml:214(para)
9534
msgid ""
9535
"The <varname>max=8</varname> variable does not represent the maximum length "
9536
"of a password. It only means that complexity requirements will not be "
9537
"checked on passwords over 8 characters. You may want to look at the "
9538
"<application>libpam-cracklib</application> package for additional password "
9539
"entropy assistance."
9540
msgstr ""
9541
"The <varname>max=8</varname> variable does not represent the maximum length "
9542
"of a password. It only means that complexity requirements will not be "
9543
"checked on passwords over 8 characters. You may want to look at the "
9544
"<application>libpam-cracklib</application> package for additional password "
9545
"entropy assistance."
9546
9547
#: serverguide/C/security.xml:220(title)
9548
msgid "Password Expiration"
9549
msgstr "Password Expiration"
9550
9551
#: serverguide/C/security.xml:221(para)
9552
msgid ""
9553
"When creating user accounts, you should make it a policy to have a minimum "
9554
"and maximum password age forcing users to change their passwords when they "
9555
"expire."
9556
msgstr ""
9557
"When creating user accounts, you should make it a policy to have a minimum "
9558
"and maximum password age forcing users to change their passwords when they "
9559
"expire."
9560
9561
#: serverguide/C/security.xml:226(para)
9562
msgid ""
9563
"To easily view the current status of a user account, use the following "
9564
"syntax:"
9565
msgstr ""
9566
"To easily view the current status of a user account, use the following "
9567
"syntax:"
9568
9569
#: serverguide/C/security.xml:230(command) serverguide/C/security.xml:263(command)
9570
msgid "sudo chage -l username"
9571
msgstr "sudo chage -l username"
9572
9573
#: serverguide/C/security.xml:232(para)
9574
msgid ""
9575
"The output below shows interesting facts about the user account, namely that "
9576
"there are no policies applied:"
9577
msgstr ""
9578
"The output below shows interesting facts about the user account, namely that "
9579
"there are no policies applied:"
9580
9581
#: serverguide/C/security.xml:235(computeroutput)
9582
#, no-wrap
9583
msgid ""
9584
"Last password change : Jan 20, 2008\n"
9585
"Password expires : never\n"
9586
"Password inactive : never\n"
9587
"Account expires : never\n"
9588
"Minimum number of days between password change : 0\n"
9589
"Maximum number of days between password change : 99999\n"
9590
"Number of days of warning before password expires : 7"
9591
msgstr ""
9592
"Last password change : Jan 20, 2008\n"
9593
"Password expires : never\n"
9594
"Password inactive : never\n"
9595
"Account expires : never\n"
9596
"Minimum number of days between password change : 0\n"
9597
"Maximum number of days between password change : 99999\n"
9598
"Number of days of warning before password expires : 7"
9599
9600
#: serverguide/C/security.xml:245(para)
9601
msgid ""
9602
"To set any of these values, simply use the following syntax, and follow the "
9603
"interactive prompts:"
9604
msgstr ""
9605
"To set any of these values, simply use the following syntax, and follow the "
9606
"interactive prompts:"
9607
9608
#: serverguide/C/security.xml:249(command)
9609
msgid "sudo chage username"
9610
msgstr "sudo chage username"
9611
9612
#: serverguide/C/security.xml:251(para)
9613
msgid ""
9614
"The following is also an example of how you can manually change the explicit "
9615
"expiration date (-E) to 01/31/2008, minimum password age (-m) of 5 days, "
9616
"maximum password age (-M) of 90 days, inactivity period (-I) of 5 days after "
9617
"password expiration, and a warning time period (-W) of 14 days before "
9618
"password expiration."
9619
msgstr ""
9620
"The following is also an example of how you can manually change the explicit "
9621
"expiration date (-E) to 01/31/2008, minimum password age (-m) of 5 days, "
9622
"maximum password age (-M) of 90 days, inactivity period (-I) of 5 days after "
9623
"password expiration, and a warning time period (-W) of 14 days before "
9624
"password expiration."
9625
9626
#: serverguide/C/security.xml:255(command)
9627
msgid "sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username"
9628
msgstr "sudo chage -E 01/31/2008 -m 5 -M 90 -I 30 -W 14 username"
9629
9630
#: serverguide/C/security.xml:259(para)
9631
msgid "To verify changes, use the same syntax as mentioned previously:"
9632
msgstr "To verify changes, use the same syntax as mentioned previously:"
9633
9634
#: serverguide/C/security.xml:265(para)
9635
msgid ""
9636
"The output below shows the new policies that have been established for the "
9637
"account:"
9638
msgstr ""
9639
"The output below shows the new policies that have been established for the "
9640
"account:"
9641
9642
#: serverguide/C/security.xml:268(computeroutput)
9643
#, no-wrap
9644
msgid ""
9645
"Last password change : Jan 20, 2008\n"
9646
"Password expires : Apr 19, 2008\n"
9647
"Password inactive : May 19, 2008\n"
9648
"Account expires : Jan 31, 2008\n"
9649
"Minimum number of days between password change : 5\n"
9650
"Maximum number of days between password change : 90\n"
9651
"Number of days of warning before password expires : 14"
9652
msgstr ""
9653
"Last password change : Jan 20, 2008\n"
9654
"Password expires : Apr 19, 2008\n"
9655
"Password inactive : May 19, 2008\n"
9656
"Account expires : Jan 31, 2008\n"
9657
"Minimum number of days between password change : 5\n"
9658
"Maximum number of days between password change : 90\n"
9659
"Number of days of warning before password expires : 14"
9660
9661
#: serverguide/C/security.xml:284(title)
9662
msgid "Other Security Considerations"
9663
msgstr "Other Security Considerations"
9664
9665
#: serverguide/C/security.xml:285(para)
9666
msgid ""
9667
"Many applications use alternate authentication mechanisms that can be easily "
9668
"overlooked by even experienced system administrators. Therefore, it is "
9669
"important to understand and control how users authenticate and gain access "
9670
"to services and applications on your server."
9671
msgstr ""
9672
"Many applications use alternate authentication mechanisms that can be easily "
9673
"overlooked by even experienced system administrators. Therefore, it is "
9674
"important to understand and control how users authenticate and gain access "
9675
"to services and applications on your server."
9676
9677
#: serverguide/C/security.xml:290(title)
9678
msgid "SSH Access by Disabled Users"
9679
msgstr "SSH Access by Disabled Users"
9680
9681
#: serverguide/C/security.xml:291(para)
9682
msgid ""
9683
"Simply disabling/locking a user account will not prevent a user from logging "
9684
"into your server remotely if they have previously set up RSA public key "
9685
"authentication. They will still be able to gain shell access to the server, "
9686
"without the need for any password. Remember to check the users home "
9687
"directory for files that will allow for this type of authenticated SSH "
9688
"access. e.g. <filename>/home/username/.ssh/authorized_keys</filename>."
9689
msgstr ""
9690
"Simply disabling/locking a user account will not prevent a user from logging "
9691
"into your server remotely if they have previously set up RSA public key "
9692
"authentication. They will still be able to gain shell access to the server, "
9693
"without the need for any password. Remember to check the users home "
9694
"directory for files that will allow for this type of authenticated SSH "
9695
"access. e.g. <filename>/home/username/.ssh/authorized_keys</filename>."
9696
9697
#: serverguide/C/security.xml:294(para)
9698
msgid ""
9699
"Remove or rename the directory <filename "
9700
"class=\"directory\">.ssh/</filename> in the user's home folder to prevent "
9701
"further SSH authentication capabilities."
9702
msgstr ""
9703
"Remove or rename the directory <filename "
9704
"class=\"directory\">.ssh/</filename> in the user's home folder to prevent "
9705
"further SSH authentication capabilities."
9706
9707
#: serverguide/C/security.xml:297(para)
9708
msgid ""
9709
"Be sure to check for any established SSH connections by the disabled user, "
9710
"as it is possible they may have existing inbound or outbound connections. "
9711
"Kill any that are found."
9712
msgstr ""
9713
"Be sure to check for any established SSH connections by the disabled user, "
9714
"as it is possible they may have existing inbound or outbound connections. "
9715
"Kill any that are found."
9716
9717
#: serverguide/C/security.xml:300(para)
9718
msgid ""
9719
"Restrict SSH access to only user accounts that should have it. For example, "
9720
"you may create a group called \"sshlogin\" and add the group name as the "
9721
"value associated with the <varname>AllowGroups</varname> variable located in "
9722
"the file <filename>/etc/ssh/sshd_config</filename>."
9723
msgstr ""
9724
"Restrict SSH access to only user accounts that should have it. For example, "
9725
"you may create a group called \"sshlogin\" and add the group name as the "
9726
"value associated with the <varname>AllowGroups</varname> variable located in "
9727
"the file <filename>/etc/ssh/sshd_config</filename>."
9728
9729
#: serverguide/C/security.xml:303(programlisting)
9730
#, no-wrap
9731
msgid ""
9732
"\n"
9733
"AllowGroups sshlogin\n"
9734
msgstr ""
9735
"\n"
9736
"AllowGroups sshlogin\n"
9737
9738
#: serverguide/C/security.xml:306(para)
9739
msgid ""
9740
"Then add your permitted SSH users to the group \"sshlogin\", and restart the "
9741
"SSH service."
9742
msgstr ""
9743
"Then add your permitted SSH users to the group \"sshlogin\", and restart the "
9744
"SSH service."
9745
9746
#: serverguide/C/security.xml:310(command)
9747
msgid "sudo adduser username sshlogin"
9748
msgstr "sudo adduser username sshlogin"
9749
9750
#: serverguide/C/security.xml:311(command) serverguide/C/remote-administration.xml:150(command)
9751
msgid "sudo /etc/init.d/ssh restart"
9752
msgstr "sudo /etc/init.d/ssh restart"
9753
9754
#: serverguide/C/security.xml:315(title)
9755
msgid "External User Database Authentication"
9756
msgstr "External User Database Authentication"
9757
9758
#: serverguide/C/security.xml:316(para)
9759
msgid ""
9760
"Most enterprise networks require centralized authentication and access "
9761
"controls for all system resources. If you have configured your server to "
9762
"authenticate users against external databases, be sure to disable the user "
9763
"accounts both externally and locally, this way you ensure that local "
9764
"fallback authentication is not possible."
9765
msgstr ""
9766
"Most enterprise networks require centralised authentication and access "
9767
"controls for all system resources. If you have configured your server to "
9768
"authenticate users against external databases, be sure to disable the user "
9769
"accounts both externally and locally, this way you ensure that local "
9770
"fallback authentication is not possible."
9771
9772
#: serverguide/C/security.xml:325(title)
9773
msgid "Console Security"
9774
msgstr "Console Security"
9775
9776
#: serverguide/C/security.xml:326(para)
9777
msgid ""
9778
"As with any other security barrier you put in place to protect your server, "
9779
"it is pretty tough to defend against untold damage caused by someone with "
9780
"physical access to your environment, for example, theft of hard drives, "
9781
"power or service disruption and so on. Therefore, console security should be "
9782
"addressed merely as one component of your overall physical security "
9783
"strategy. A locked \"screen door\" may deter a casual criminal, or at the "
9784
"very least slow down a determined one, so it is still advisable to perform "
9785
"basic precautions with regard to console security."
9786
msgstr ""
9787
"As with any other security barrier you put in place to protect your server, "
9788
"it is pretty tough to defend against untold damage caused by someone with "
9789
"physical access to your environment, for example, theft of hard drives, "
9790
"power or service disruption and so on. Therefore, console security should be "
9791
"addressed merely as one component of your overall physical security "
9792
"strategy. A locked \"screen door\" may deter a casual criminal, or at the "
9793
"very least slow down a determined one, so it is still advisable to perform "
9794
"basic precautions with regard to console security."
9795
9796
#: serverguide/C/security.xml:329(para)
9797
msgid ""
9798
"The following instructions will help defend your server against issues that "
9799
"could otherwise yield very serious consequences."
9800
msgstr ""
9801
"The following instructions will help defend your server against issues that "
9802
"could otherwise yield very serious consequences."
9803
9804
#: serverguide/C/security.xml:334(title)
9805
msgid "Disable Ctrl+Alt+Delete"
9806
msgstr "Disable Ctrl+Alt+Delete"
9807
9808
#: serverguide/C/security.xml:335(para)
9809
msgid ""
9810
"First and foremost, anyone that has physical access to the keyboard can "
9811
"simply use the "
9812
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
9813
"eycombo> key combination to reboot the server without having to log on. "
9814
"Sure, someone could simply unplug the power source, but you should still "
9815
"prevent the use of this key combination on a production server. This forces "
9816
"an attacker to take more drastic measures to reboot the server, and will "
9817
"prevent accidental reboots at the same time."
9818
msgstr ""
9819
"First and foremost, anyone that has physical access to the keyboard can "
9820
"simply use the "
9821
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
9822
"eycombo> key combination to reboot the server without having to log on. "
9823
"Sure, someone could simply unplug the power source, but you should still "
9824
"prevent the use of this key combination on a production server. This forces "
9825
"an attacker to take more drastic measures to reboot the server, and will "
9826
"prevent accidental reboots at the same time."
9827
9828
#: serverguide/C/security.xml:340(para)
9829
msgid ""
9830
"To disable the reboot action taken by pressing the "
9831
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
9832
"eycombo> key combination, comment out the following line in the file "
9833
"<filename>/etc/init/control-alt-delete.conf</filename>."
9834
msgstr ""
9835
"To disable the reboot action taken by pressing the "
9836
"<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
9837
"eycombo> key combination, comment out the following line in the file "
9838
"<filename>/etc/init/control-alt-delete.conf</filename>."
9839
9840
#: serverguide/C/security.xml:343(programlisting)
9841
#, no-wrap
9842
msgid ""
9843
"\n"
9844
"#exec shutdown -r now \"Control-Alt-Delete pressed\"\n"
9845
msgstr ""
9846
"\n"
9847
"#exec shutdown -r now \"Control-Alt-Delete pressed\"\n"
9848
9849
#: serverguide/C/security.xml:352(title)
9850
msgid "Firewall"
9851
msgstr "Firewall"
9852
9853
#: serverguide/C/security.xml:355(para)
9854
msgid ""
9855
"The Linux kernel includes the <emphasis>Netfilter</emphasis> subsystem, "
9856
"which is used to manipulate or decide the fate of network traffic headed "
9857
"into or through your server. All modern Linux firewall solutions use this "
9858
"system for packet filtering."
9859
msgstr ""
9860
"The Linux kernel includes the <emphasis>Netfilter</emphasis> subsystem, "
9861
"which is used to manipulate or decide the fate of network traffic headed "
9862
"into or through your server. All modern Linux firewall solutions use this "
9863
"system for packet filtering."
9864
9865
#: serverguide/C/security.xml:360(para)
9866
msgid ""
9867
"The kernel's packet filtering system would be of little use to "
9868
"administrators without a userspace interface to manage it. This is the "
9869
"purpose of iptables. When a packet reaches your server, it will be handed "
9870
"off to the Netfilter subsystem for acceptance, manipulation, or rejection "
9871
"based on the rules supplied to it from userspace via iptables. Thus, "
9872
"iptables is all you need to manage your firewall if you're familiar with it, "
9873
"but many frontends are available to simplify the task."
9874
msgstr ""
9875
"The kernel's packet filtering system would be of little use to "
9876
"administrators without a userspace interface to manage it. This is the "
9877
"purpose of iptables. When a packet reaches your server, it will be handed "
9878
"off to the Netfilter subsystem for acceptance, manipulation, or rejection "
9879
"based on the rules supplied to it from userspace via iptables. Thus, "
9880
"iptables is all you need to manage your firewall if you're familiar with it, "
9881
"but many frontends are available to simplify the task."
9882
9883
#: serverguide/C/security.xml:370(title)
9884
msgid "ufw - Uncomplicated Firewall"
9885
msgstr "ufw - Uncomplicated Firewall"
9886
9887
#: serverguide/C/security.xml:371(para)
9888
msgid ""
9889
"The default firewall configuration tool for Ubuntu is "
9890
"<application>ufw</application>. Developed to ease iptables firewall "
9891
"configuration, <application>ufw</application> provides a user friendly way "
9892
"to create an IPv4 or IPv6 host-based firewall."
9893
msgstr ""
9894
"The default firewall configuration tool for Ubuntu is "
9895
"<application>ufw</application>. Developed to ease iptables firewall "
9896
"configuration, <application>ufw</application> provides a user friendly way "
9897
"to create an IPv4 or IPv6 host-based firewall."
9898
9899
#: serverguide/C/security.xml:375(para)
9900
msgid ""
9901
"<application>ufw</application> by default is initially disabled. From the "
9902
"<application>ufw</application> man page:"
9903
msgstr ""
9904
"<application>ufw</application> by default is initially disabled. From the "
9905
"<application>ufw</application> man page:"
9906
9907
#: serverguide/C/security.xml:379(quote)
9908
msgid ""
9909
"ufw is not intended to provide complete firewall functionality via its "
9910
"command interface, but instead provides an easy way to add or remove simple "
9911
"rules. It is currently mainly used for host-based firewalls."
9912
msgstr ""
9913
"ufw is not intended to provide complete firewall functionality via its "
9914
"command interface, but instead provides an easy way to add or remove simple "
9915
"rules. It is currently mainly used for host-based firewalls."
9916
9917
#: serverguide/C/security.xml:383(para)
9918
msgid ""
9919
"The following are some examples of how to use <application>ufw</application>:"
9920
msgstr ""
9921
"The following are some examples of how to use <application>ufw</application>:"
9922
9923
#: serverguide/C/security.xml:388(para)
9924
msgid ""
9925
"First, <application>ufw</application> needs to be enabled. From a terminal "
9926
"prompt enter:"
9927
msgstr ""
9928
"First, <application>ufw</application> needs to be enabled. From a terminal "
9929
"prompt enter:"
9930
9931
#: serverguide/C/security.xml:392(command)
9932
msgid "sudo ufw enable"
9933
msgstr "sudo ufw enable"
9934
9935
#: serverguide/C/security.xml:396(para)
9936
msgid "To open a port (ssh in this example):"
9937
msgstr "To open a port (ssh in this example):"
9938
9939
#: serverguide/C/security.xml:400(command)
9940
msgid "sudo ufw allow 22"
9941
msgstr "sudo ufw allow 22"
9942
9943
#: serverguide/C/security.xml:404(para)
9944
msgid "Rules can also be added using a <emphasis>numbered</emphasis> format:"
9945
msgstr ""
9946
"Rules can also be added using a <emphasis>numbered</emphasis> format:"
9947
9948
#: serverguide/C/security.xml:408(command)
9949
msgid "sudo ufw insert 1 allow 80"
9950
msgstr "sudo ufw insert 1 allow 80"
9951
9952
#: serverguide/C/security.xml:412(para)
9953
msgid "Similarly, to close an opened port:"
9954
msgstr "Similarly, to close an opened port:"
9955
9956
#: serverguide/C/security.xml:416(command)
9957
msgid "sudo ufw deny 22"
9958
msgstr "sudo ufw deny 22"
9959
9960
#: serverguide/C/security.xml:420(para)
9961
msgid "To remove a rule, use delete followed by the rule:"
9962
msgstr "To remove a rule, use delete followed by the rule:"
9963
9964
#: serverguide/C/security.xml:424(command)
9965
msgid "sudo ufw delete deny 22"
9966
msgstr "sudo ufw delete deny 22"
9967
9968
#: serverguide/C/security.xml:428(para)
9969
msgid ""
9970
"It is also possible to allow access from specific hosts or networks to a "
9971
"port. The following example allows ssh access from host 192.168.0.2 to any "
9972
"ip address on this host:"
9973
msgstr ""
9974
"It is also possible to allow access from specific hosts or networks to a "
9975
"port. The following example allows ssh access from host 192.168.0.2 to any "
9976
"ip address on this host:"
9977
9978
#: serverguide/C/security.xml:433(command)
9979
msgid "sudo ufw allow proto tcp from 192.168.0.2 to any port 22"
9980
msgstr "sudo ufw allow proto tcp from 192.168.0.2 to any port 22"
9981
9982
#: serverguide/C/security.xml:435(para)
9983
msgid ""
9984
"Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh access from the entire "
9985
"subnet."
9986
msgstr ""
9987
"Replace 192.168.0.2 with 192.168.0.0/24 to allow ssh access from the entire "
9988
"subnet."
9989
9990
#: serverguide/C/security.xml:441(para)
9991
msgid ""
9992
"Adding the <emphasis>--dry-run</emphasis> option to a "
9993
"<emphasis>ufw</emphasis> command will output the resulting rules, but not "
9994
"apply them. For example, the following is what would be applied if opening "
9995
"the HTTP port:"
9996
msgstr ""
9997
"Adding the <emphasis>--dry-run</emphasis> option to a "
9998
"<emphasis>ufw</emphasis> command will output the resulting rules, but not "
9999
"apply them. For example, the following is what would be applied if opening "
10000
"the HTTP port:"
10001
10002
#: serverguide/C/security.xml:447(command)
10003
msgid "sudo ufw --dry-run allow http"
10004
msgstr "sudo ufw --dry-run allow http"
10005
10006
#: serverguide/C/security.xml:451(computeroutput)
10007
#, no-wrap
10008
msgid ""
10009
"*filter\n"
10010
":ufw-user-input - [0:0]\n"
10011
":ufw-user-output - [0:0]\n"
10012
":ufw-user-forward - [0:0]\n"
10013
":ufw-user-limit - [0:0]\n"
10014
":ufw-user-limit-accept - [0:0]\n"
10015
"### RULES ###\n"
10016
"\n"
10017
"### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0\n"
10018
"-A ufw-user-input -p tcp --dport 80 -j ACCEPT\n"
10019
"\n"
10020
"### END RULES ###\n"
10021
"-A ufw-user-input -j RETURN\n"
10022
"-A ufw-user-output -j RETURN\n"
10023
"-A ufw-user-forward -j RETURN\n"
10024
"-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix \"[UFW "
10025
"LIMIT]: \"\n"
10026
"-A ufw-user-limit -j REJECT\n"
10027
"-A ufw-user-limit-accept -j ACCEPT\n"
10028
"COMMIT\n"
10029
"Rules updated"
10030
msgstr ""
10031
"*filter\n"
10032
":ufw-user-input - [0:0]\n"
10033
":ufw-user-output - [0:0]\n"
10034
":ufw-user-forward - [0:0]\n"
10035
":ufw-user-limit - [0:0]\n"
10036
":ufw-user-limit-accept - [0:0]\n"
10037
"### RULES ###\n"
10038
"\n"
10039
"### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0\n"
10040
"-A ufw-user-input -p tcp --dport 80 -j ACCEPT\n"
10041
"\n"
10042
"### END RULES ###\n"
10043
"-A ufw-user-input -j RETURN\n"
10044
"-A ufw-user-output -j RETURN\n"
10045
"-A ufw-user-forward -j RETURN\n"
10046
"-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix \"[UFW "
10047
"LIMIT]: \"\n"
10048
"-A ufw-user-limit -j REJECT\n"
10049
"-A ufw-user-limit-accept -j ACCEPT\n"
10050
"COMMIT\n"
10051
"Rules updated"
10052
10053
#: serverguide/C/security.xml:475(para)
10054
msgid "<application>ufw</application> can be disabled by:"
10055
msgstr "<application>ufw</application> can be disabled by:"
10056
10057
#: serverguide/C/security.xml:479(command)
10058
msgid "sudo ufw disable"
10059
msgstr "sudo ufw disable"
10060
10061
#: serverguide/C/security.xml:483(para)
10062
msgid "To see the firewall status, enter:"
10063
msgstr "To see the firewall status, enter:"
10064
10065
#: serverguide/C/security.xml:487(command)
10066
msgid "sudo ufw status"
10067
msgstr "sudo ufw status"
10068
10069
#: serverguide/C/security.xml:491(para)
10070
msgid "And for more verbose status information use:"
10071
msgstr "And for more verbose status information use:"
10072
10073
#: serverguide/C/security.xml:495(command)
10074
msgid "sudo ufw status verbose"
10075
msgstr "sudo ufw status verbose"
10076
10077
#: serverguide/C/security.xml:499(para)
10078
msgid "To view the <emphasis>numbered</emphasis> format:"
10079
msgstr "To view the <emphasis>numbered</emphasis> format:"
10080
10081
#: serverguide/C/security.xml:503(command)
10082
msgid "sudo ufw status numbered"
10083
msgstr "sudo ufw status numbered"
10084
10085
#: serverguide/C/security.xml:508(para)
10086
msgid ""
10087
"If the port you want to open or close is defined in "
10088
"<filename>/etc/services</filename>, you can use the port name instead of the "
10089
"number. In the above examples, replace <emphasis>22</emphasis> with "
10090
"<emphasis>ssh</emphasis>."
10091
msgstr ""
10092
"If the port you want to open or close is defined in "
10093
"<filename>/etc/services</filename>, you can use the port name instead of the "
10094
"number. In the above examples, replace <emphasis>22</emphasis> with "
10095
"<emphasis>ssh</emphasis>."
10096
10097
#: serverguide/C/security.xml:514(para)
10098
msgid ""
10099
"This is a quick introduction to using <application>ufw</application>. Please "
10100
"refer to the <application>ufw</application> man page for more information."
10101
msgstr ""
10102
"This is a quick introduction to using <application>ufw</application>. Please "
10103
"refer to the <application>ufw</application> man page for more information."
10104
10105
#: serverguide/C/security.xml:520(title)
10106
msgid "ufw Application Integration"
10107
msgstr "ufw Application Integration"
10108
10109
#: serverguide/C/security.xml:522(para)
10110
msgid ""
10111
"Applications that open ports can include an <application>ufw</application> "
10112
"profile, which details the ports needed for the application to function "
10113
"properly. The profiles are kept in <filename "
10114
"role=\"directory\">/etc/ufw/applications.d</filename>, and can be edited if "
10115
"the default ports have been changed."
10116
msgstr ""
10117
"Applications that open ports can include an <application>ufw</application> "
10118
"profile, which details the ports needed for the application to function "
10119
"properly. The profiles are kept in <filename "
10120
"role=\"directory\">/etc/ufw/applications.d</filename>, and can be edited if "
10121
"the default ports have been changed."
10122
10123
#: serverguide/C/security.xml:531(para)
10124
msgid ""
10125
"To view which applications have installed a profile, enter the following in "
10126
"a terminal:"
10127
msgstr ""
10128
"To view which applications have installed a profile, enter the following in "
10129
"a terminal:"
10130
10131
#: serverguide/C/security.xml:536(command)
10132
msgid "sudo ufw app list"
10133
msgstr "sudo ufw app list"
10134
10135
#: serverguide/C/security.xml:542(para)
10136
msgid ""
10137
"Similar to allowing traffic to a port, using an application profile is "
10138
"accomplished by entering:"
10139
msgstr ""
10140
"Similar to allowing traffic to a port, using an application profile is "
10141
"accomplished by entering:"
10142
10143
#: serverguide/C/security.xml:547(command)
10144
msgid "sudo ufw allow Samba"
10145
msgstr "sudo ufw allow Samba"
10146
10147
#: serverguide/C/security.xml:553(para)
10148
msgid "An extended syntax is available as well:"
10149
msgstr "An extended syntax is available as well:"
10150
10151
#: serverguide/C/security.xml:558(command)
10152
msgid "ufw allow from 192.168.0.0/24 to any app Samba"
10153
msgstr "ufw allow from 192.168.0.0/24 to any app Samba"
10154
10155
#: serverguide/C/security.xml:561(para)
10156
msgid ""
10157
"Replace <emphasis>Samba</emphasis> and <emphasis>192.168.0.0/24</emphasis> "
10158
"with the application profile you are using and the IP range for your network."
10159
msgstr ""
10160
"Replace <emphasis>Samba</emphasis> and <emphasis>192.168.0.0/24</emphasis> "
10161
"with the application profile you are using and the IP range for your network."
10162
10163
#: serverguide/C/security.xml:567(para)
10164
msgid ""
10165
"There is no need to specify the <emphasis>protocol</emphasis> for the "
10166
"application, because that information is detailed in the profile. Also, note "
10167
"that the <emphasis>app</emphasis> name replaces the "
10168
"<emphasis>port</emphasis> number."
10169
msgstr ""
10170
"There is no need to specify the <emphasis>protocol</emphasis> for the "
10171
"application, because that information is detailed in the profile. Also, note "
10172
"that the <emphasis>app</emphasis> name replaces the "
10173
"<emphasis>port</emphasis> number."
10174
10175
#: serverguide/C/security.xml:576(para)
10176
msgid ""
10177
"To view details about which ports, protocols, etc are defined for an "
10178
"application, enter:"
10179
msgstr ""
10180
"To view details about which ports, protocols, etc are defined for an "
10181
"application, enter:"
10182
10183
#: serverguide/C/security.xml:581(command)
10184
msgid "sudo ufw app info Samba"
10185
msgstr "sudo ufw app info Samba"
10186
10187
#: serverguide/C/security.xml:587(para)
10188
msgid ""
10189
"Not all applications that require opening a network port come with "
10190
"<application>ufw</application> profiles, but if you have profiled an "
10191
"application and want the file to be included with the package, please file a "
10192
"bug against the package in <ulink "
10193
"url=\"https://launchpad.net/\">Launchpad</ulink>."
10194
msgstr ""
10195
"Not all applications that require opening a network port come with "
10196
"<application>ufw</application> profiles, but if you have profiled an "
10197
"application and want the file to be included with the package, please file a "
10198
"bug against the package in <ulink "
10199
"url=\"https://launchpad.net/\">Launchpad</ulink>."
10200
10201
#: serverguide/C/security.xml:596(title)
10202
msgid "IP Masquerading"
10203
msgstr "IP Masquerading"
10204
10205
#: serverguide/C/security.xml:597(para)
10206
msgid ""
10207
"The purpose of IP Masquerading is to allow machines with private, non-"
10208
"routable IP addresses on your network to access the Internet through the "
10209
"machine doing the masquerading. Traffic from your private network destined "
10210
"for the Internet must be manipulated for replies to be routable back to the "
10211
"machine that made the request. To do this, the kernel must modify the "
10212
"<emphasis>source</emphasis> IP address of each packet so that replies will "
10213
"be routed back to it, rather than to the private IP address that made the "
10214
"request, which is impossible over the Internet. Linux uses "
10215
"<emphasis>Connection Tracking</emphasis> (conntrack) to keep track of which "
10216
"connections belong to which machines and reroute each return packet "
10217
"accordingly. Traffic leaving your private network is thus \"masqueraded\" as "
10218
"having originated from your Ubuntu gateway machine. This process is referred "
10219
"to in Microsoft documentation as Internet Connection Sharing."
10220
msgstr ""
10221
"The purpose of IP Masquerading is to allow machines with private, non-"
10222
"routable IP addresses on your network to access the Internet through the "
10223
"machine doing the masquerading. Traffic from your private network destined "
10224
"for the Internet must be manipulated for replies to be routable back to the "
10225
"machine that made the request. To do this, the kernel must modify the "
10226
"<emphasis>source</emphasis> IP address of each packet so that replies will "
10227
"be routed back to it, rather than to the private IP address that made the "
10228
"request, which is impossible over the Internet. Linux uses "
10229
"<emphasis>Connection Tracking</emphasis> (conntrack) to keep track of which "
10230
"connections belong to which machines and reroute each return packet "
10231
"accordingly. Traffic leaving your private network is thus \"masqueraded\" as "
10232
"having originated from your Ubuntu gateway machine. This process is referred "
10233
"to in Microsoft documentation as Internet Connection Sharing."
10234
10235
#: serverguide/C/security.xml:613(title)
10236
msgid "ufw Masquerading"
10237
msgstr "ufw Masquerading"
10238
10239
#: serverguide/C/security.xml:614(para)
10240
msgid ""
10241
"IP Masquerading can be achieved using custom <application>ufw</application> "
10242
"rules. This is possible because the current back-end for "
10243
"<application>ufw</application> is <application>iptables-"
10244
"restore</application> with the rules files located in "
10245
"<filename>/etc/ufw/*.rules</filename>. These files are a great place to add "
10246
"legacy iptables rules used without <application>ufw</application>, and rules "
10247
"that are more network gateway or bridge related."
10248
msgstr ""
10249
"IP Masquerading can be achieved using custom <application>ufw</application> "
10250
"rules. This is possible because the current back-end for "
10251
"<application>ufw</application> is <application>iptables-"
10252
"restore</application> with the rules files located in "
10253
"<filename>/etc/ufw/*.rules</filename>. These files are a great place to add "
10254
"legacy iptables rules used without <application>ufw</application>, and rules "
10255
"that are more network gateway or bridge related."
10256
10257
#: serverguide/C/security.xml:620(para)
10258
msgid ""
10259
"The rules are split into two different files, rules that should be executed "
10260
"before <application>ufw</application> command line rules, and rules that are "
10261
"executed after <application>ufw</application> command line rules."
10262
msgstr ""
10263
"The rules are split into two different files, rules that should be executed "
10264
"before <application>ufw</application> command line rules, and rules that are "
10265
"executed after <application>ufw</application> command line rules."
10266
10267
#: serverguide/C/security.xml:626(para)
10268
msgid ""
10269
"First, packet forwarding needs to be enabled in "
10270
"<application>ufw</application>. Two configuration files will need to be "
10271
"adjusted, in <filename>/etc/default/ufw</filename> change the "
10272
"<emphasis>DEFAULT_FORWARD_POLICY</emphasis> to <quote>ACCEPT</quote>:"
10273
msgstr ""
10274
"First, packet forwarding needs to be enabled in "
10275
"<application>ufw</application>. Two configuration files will need to be "
10276
"adjusted, in <filename>/etc/default/ufw</filename> change the "
10277
"<emphasis>DEFAULT_FORWARD_POLICY</emphasis> to <quote>ACCEPT</quote>:"
10278
10279
#: serverguide/C/security.xml:630(programlisting)
10280
#, no-wrap
10281
msgid ""
10282
"\n"
10283
"DEFAULT_FORWARD_POLICY=\"ACCEPT\"\n"
10284
msgstr ""
10285
"\n"
10286
"DEFAULT_FORWARD_POLICY=\"ACCEPT\"\n"
10287
10288
#: serverguide/C/security.xml:633(para)
10289
msgid "Then edit <filename>/etc/ufw/sysctl.conf</filename> and uncomment:"
10290
msgstr "Then edit <filename>/etc/ufw/sysctl.conf</filename> and uncomment:"
10291
10292
#: serverguide/C/security.xml:636(programlisting)
10293
#, no-wrap
10294
msgid ""
10295
"\n"
10296
"net/ipv4/ip_forward=1\n"
10297
msgstr ""
10298
"\n"
10299
"net/ipv4/ip_forward=1\n"
10300
10301
#: serverguide/C/security.xml:639(para)
10302
msgid "Similarly, for IPv6 forwarding uncomment:"
10303
msgstr "Similarly, for IPv6 forwarding uncomment:"
10304
10305
#: serverguide/C/security.xml:642(programlisting)
10306
#, no-wrap
10307
msgid ""
10308
"\n"
10309
"net/ipv6/conf/default/forwarding=1\n"
10310
msgstr ""
10311
"\n"
10312
"net/ipv6/conf/default/forwarding=1\n"
10313
10314
#: serverguide/C/security.xml:647(para)
10315
msgid ""
10316
"Now we will add rules to the <filename>/etc/ufw/before.rules</filename> "
10317
"file. The default rules only configure the <emphasis>filter</emphasis> "
10318
"table, and to enable masquerading the <emphasis>nat</emphasis> table will "
10319
"need to be configured. Add the following to the top of the file just after "
10320
"the header comments:"
10321
msgstr ""
10322
"Now we will add rules to the <filename>/etc/ufw/before.rules</filename> "
10323
"file. The default rules only configure the <emphasis>filter</emphasis> "
10324
"table, and to enable masquerading the <emphasis>nat</emphasis> table will "
10325
"need to be configured. Add the following to the top of the file just after "
10326
"the header comments:"
10327
10328
#: serverguide/C/security.xml:652(programlisting)
10329
#, no-wrap
10330
msgid ""
10331
"\n"
10332
"# nat Table rules\n"
10333
"*nat\n"
10334
":POSTROUTING ACCEPT [0:0]\n"
10335
"\n"
10336
"# Forward traffic from eth1 through eth0.\n"
10337
"-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE\n"
10338
"\n"
10339
"# don't delete the 'COMMIT' line or these nat table rules won't be "
10340
"processed\n"
10341
"COMMIT\n"
10342
msgstr ""
10343
"\n"
10344
"# nat Table rules\n"
10345
"*nat\n"
10346
":POSTROUTING ACCEPT [0:0]\n"
10347
"\n"
10348
"# Forward traffic from eth1 through eth0.\n"
10349
"-A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE\n"
10350
"\n"
10351
"# don't delete the 'COMMIT' line or these nat table rules won't be "
10352
"processed\n"
10353
"COMMIT\n"
10354
10355
#: serverguide/C/security.xml:663(para)
10356
msgid ""
10357
"The comments are not strictly necessary, but it is considered good practice "
10358
"to document your configuration. Also, when modifying any of the "
10359
"<emphasis>rules</emphasis> files in <filename "
10360
"class=\"directory\">/etc/ufw</filename>, make sure these lines are the last "
10361
"line for each table modified:"
10362
msgstr ""
10363
"The comments are not strictly necessary, but it is considered good practice "
10364
"to document your configuration. Also, when modifying any of the "
10365
"<emphasis>rules</emphasis> files in <filename "
10366
"class=\"directory\">/etc/ufw</filename>, make sure these lines are the last "
10367
"line for each table modified:"
10368
10369
#: serverguide/C/security.xml:669(programlisting)
10370
#, no-wrap
10371
msgid ""
10372
"\n"
10373
"# don't delete the 'COMMIT' line or these rules won't be processed\n"
10374
"COMMIT\n"
10375
msgstr ""
10376
"\n"
10377
"# don't delete the 'COMMIT' line or these rules won't be processed\n"
10378
"COMMIT\n"
10379
10380
#: serverguide/C/security.xml:674(para)
10381
msgid ""
10382
"For each <emphasis>Table</emphasis> a corresponding "
10383
"<emphasis>COMMIT</emphasis> statement is required. In these examples only "
10384
"the <emphasis>nat</emphasis> and <emphasis>filter</emphasis> tables are "
10385
"shown, but you can also add rules for the <emphasis>raw</emphasis> and "
10386
"<emphasis>mangle</emphasis> tables."
10387
msgstr ""
10388
"For each <emphasis>Table</emphasis> a corresponding "
10389
"<emphasis>COMMIT</emphasis> statement is required. In these examples only "
10390
"the <emphasis>nat</emphasis> and <emphasis>filter</emphasis> tables are "
10391
"shown, but you can also add rules for the <emphasis>raw</emphasis> and "
10392
"<emphasis>mangle</emphasis> tables."
10393
10394
#: serverguide/C/security.xml:681(para)
10395
msgid ""
10396
"In the above example replace <emphasis>eth0</emphasis>, "
10397
"<emphasis>eth1</emphasis>, and <emphasis>192.168.0.0/24</emphasis> with the "
10398
"appropriate interfaces and IP range for your network."
10399
msgstr ""
10400
"In the above example replace <emphasis>eth0</emphasis>, "
10401
"<emphasis>eth1</emphasis>, and <emphasis>192.168.0.0/24</emphasis> with the "
10402
"appropriate interfaces and IP range for your network."
10403
10404
#: serverguide/C/security.xml:689(para)
10405
msgid ""
10406
"Finally, disable and re-enable <application>ufw</application> to apply the "
10407
"changes:"
10408
msgstr ""
10409
"Finally, disable and re-enable <application>ufw</application> to apply the "
10410
"changes:"
10411
10412
#: serverguide/C/security.xml:693(command)
10413
msgid "sudo ufw disable && sudo ufw enable"
10414
msgstr "sudo ufw disable && sudo ufw enable"
10415
10416
#: serverguide/C/security.xml:697(para)
10417
msgid ""
10418
"IP Masquerading should now be enabled. You can also add any additional "
10419
"FORWARD rules to the <filename>/etc/ufw/before.rules</filename>. It is "
10420
"recommended that these additional rules be added to the <emphasis>ufw-before-"
10421
"forward</emphasis> chain."
10422
msgstr ""
10423
"IP Masquerading should now be enabled. You can also add any additional "
10424
"FORWARD rules to the <filename>/etc/ufw/before.rules</filename>. It is "
10425
"recommended that these additional rules be added to the <emphasis>ufw-before-"
10426
"forward</emphasis> chain."
10427
10428
#: serverguide/C/security.xml:704(title)
10429
msgid "iptables Masquerading"
10430
msgstr "iptables Masquerading"
10431
10432
#: serverguide/C/security.xml:705(para)
10433
msgid ""
10434
"<application>iptables</application> can also be used to enable masquerading."
10435
msgstr ""
10436
"<application>iptables</application> can also be used to enable masquerading."
10437
10438
#: serverguide/C/security.xml:710(para)
10439
msgid ""
10440
"Similar to <application>ufw</application>, the first step is to enable IPv4 "
10441
"packet forwarding by editing <filename>/etc/sysctl.conf</filename> and "
10442
"uncomment the following line"
10443
msgstr ""
10444
"Similar to <application>ufw</application>, the first step is to enable IPv4 "
10445
"packet forwarding by editing <filename>/etc/sysctl.conf</filename> and "
10446
"uncomment the following line"
10447
10448
#: serverguide/C/security.xml:714(programlisting)
10449
#, no-wrap
10450
msgid ""
10451
"\n"
10452
"net.ipv4.ip_forward=1\n"
10453
msgstr ""
10454
"\n"
10455
"net.ipv4.ip_forward=1\n"
10456
10457
#: serverguide/C/security.xml:717(para)
10458
msgid "If you wish to enable IPv6 forwarding also uncomment:"
10459
msgstr "If you wish to enable IPv6 forwarding also uncomment:"
10460
10461
#: serverguide/C/security.xml:720(programlisting)
10462
#, no-wrap
10463
msgid ""
10464
"\n"
10465
"net.ipv6.conf.default.forwarding=1\n"
10466
msgstr ""
10467
"\n"
10468
"net.ipv6.conf.default.forwarding=1\n"
10469
10470
#: serverguide/C/security.xml:725(para)
10471
msgid ""
10472
"Next, execute the <application>sysctl</application> command to enable the "
10473
"new settings in the configuration file:"
10474
msgstr ""
10475
"Next, execute the <application>sysctl</application> command to enable the "
10476
"new settings in the configuration file:"
10477
10478
#: serverguide/C/security.xml:729(command)
10479
msgid "sudo sysctl -p"
10480
msgstr "sudo sysctl -p"
10481
10482
#: serverguide/C/security.xml:733(para)
10483
msgid ""
10484
"IP Masquerading can now be accomplished with a single iptables rule, which "
10485
"may differ slightly based on your network configuration:"
10486
msgstr ""
10487
"IP Masquerading can now be accomplished with a single iptables rule, which "
10488
"may differ slightly based on your network configuration:"
10489
10490
#: serverguide/C/security.xml:736(screen)
10491
#, no-wrap
10492
msgid ""
10493
"\n"
10494
"sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
10495
msgstr ""
10496
"\n"
10497
"sudo iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
10498
10499
#: serverguide/C/security.xml:739(para)
10500
msgid ""
10501
"The above command assumes that your private address space is 192.168.0.0/16 "
10502
"and that your Internet-facing device is ppp0. The syntax is broken down as "
10503
"follows:"
10504
msgstr ""
10505
"The above command assumes that your private address space is 192.168.0.0/16 "
10506
"and that your Internet-facing device is ppp0. The syntax is broken down as "
10507
"follows:"
10508
10509
#: serverguide/C/security.xml:744(para)
10510
msgid "-t nat -- the rule is to go into the nat table"
10511
msgstr "-t nat -- the rule is to go into the nat table"
10512
10513
#: serverguide/C/security.xml:745(para)
10514
msgid ""
10515
"-A POSTROUTING -- the rule is to be appended (-A) to the POSTROUTING chain"
10516
msgstr ""
10517
"-A POSTROUTING -- the rule is to be appended (-A) to the POSTROUTING chain"
10518
10519
#: serverguide/C/security.xml:746(para)
10520
msgid ""
10521
"-s 192.168.0.0/16 -- the rule applies to traffic originating from the "
10522
"specified address space"
10523
msgstr ""
10524
"-s 192.168.0.0/16 -- the rule applies to traffic originating from the "
10525
"specified address space"
10526
10527
#: serverguide/C/security.xml:747(para)
10528
msgid ""
10529
"-o ppp0 -- the rule applies to traffic scheduled to be routed through the "
10530
"specified network device"
10531
msgstr ""
10532
"-o ppp0 -- the rule applies to traffic scheduled to be routed through the "
10533
"specified network device"
10534
10535
#: serverguide/C/security.xml:749(para)
10536
msgid ""
10537
"-j MASQUERADE -- traffic matching this rule is to \"jump\" (-j) to the "
10538
"MASQUERADE target to be manipulated as described above"
10539
msgstr ""
10540
"-j MASQUERADE -- traffic matching this rule is to \"jump\" (-j) to the "
10541
"MASQUERADE target to be manipulated as described above"
10542
10543
#: serverguide/C/security.xml:757(para)
10544
msgid ""
10545
"Also, each chain in the filter table (the default table, and where most or "
10546
"all packet filtering occurs) has a default <emphasis>policy</emphasis> of "
10547
"ACCEPT, but if you are creating a firewall in addition to a gateway device, "
10548
"you may have set the policies to DROP or REJECT, in which case your "
10549
"masqueraded traffic needs to be allowed through the FORWARD chain for the "
10550
"above rule to work:"
10551
msgstr ""
10552
"Also, each chain in the filter table (the default table, and where most or "
10553
"all packet filtering occurs) has a default <emphasis>policy</emphasis> of "
10554
"ACCEPT, but if you are creating a firewall in addition to a gateway device, "
10555
"you may have set the policies to DROP or REJECT, in which case your "
10556
"masqueraded traffic needs to be allowed through the FORWARD chain for the "
10557
"above rule to work:"
10558
10559
#: serverguide/C/security.xml:764(screen)
10560
#, no-wrap
10561
msgid ""
10562
"\n"
10563
"sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT\n"
10564
"sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state "
10565
"ESTABLISHED,RELATED -i ppp0 -j ACCEPT\n"
10566
msgstr ""
10567
"\n"
10568
"sudo iptables -A FORWARD -s 192.168.0.0/16 -o ppp0 -j ACCEPT\n"
10569
"sudo iptables -A FORWARD -d 192.168.0.0/16 -m state --state "
10570
"ESTABLISHED,RELATED -i ppp0 -j ACCEPT\n"
10571
10572
#: serverguide/C/security.xml:768(para)
10573
msgid ""
10574
"The above commands will allow all connections from your local network to the "
10575
"Internet and all traffic related to those connections to return to the "
10576
"machine that initiated them."
10577
msgstr ""
10578
"The above commands will allow all connections from your local network to the "
10579
"Internet and all traffic related to those connections to return to the "
10580
"machine that initiated them."
10581
10582
#: serverguide/C/security.xml:775(para)
10583
msgid ""
10584
"If you want masquerading to be enabled on reboot, which you probably do, "
10585
"edit <filename>/etc/rc.local</filename> and add any commands used above. For "
10586
"example add the first command with no filtering:"
10587
msgstr ""
10588
"If you want masquerading to be enabled on reboot, which you probably do, "
10589
"edit <filename>/etc/rc.local</filename> and add any commands used above. For "
10590
"example add the first command with no filtering:"
10591
10592
#: serverguide/C/security.xml:779(screen)
10593
#, no-wrap
10594
msgid ""
10595
"\n"
10596
"iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
10597
msgstr ""
10598
"\n"
10599
"iptables -t nat -A POSTROUTING -s 192.168.0.0/16 -o ppp0 -j MASQUERADE\n"
10600
10601
#: serverguide/C/security.xml:787(title)
10602
msgid "Logs"
10603
msgstr "Logs"
10604
10605
#: serverguide/C/security.xml:788(para)
10606
msgid ""
10607
"Firewall logs are essential for recognizing attacks, troubleshooting your "
10608
"firewall rules, and noticing unusual activity on your network. You must "
10609
"include logging rules in your firewall for them to be generated, though, and "
10610
"logging rules must come before any applicable terminating rule (a rule with "
10611
"a target that decides the fate of the packet, such as ACCEPT, DROP, or "
10612
"REJECT)."
10613
msgstr ""
10614
"Firewall logs are essential for recognising attacks, troubleshooting your "
10615
"firewall rules, and noticing unusual activity on your network. You must "
10616
"include logging rules in your firewall for them to be generated, though, and "
10617
"logging rules must come before any applicable terminating rule (a rule with "
10618
"a target that decides the fate of the packet, such as ACCEPT, DROP, or "
10619
"REJECT)."
10620
10621
#: serverguide/C/security.xml:795(para)
10622
msgid ""
10623
"If you are using <application>ufw</application>, you can turn on logging by "
10624
"entering the following in a terminal:"
10625
msgstr ""
10626
"If you are using <application>ufw</application>, you can turn on logging by "
10627
"entering the following in a terminal:"
10628
10629
#: serverguide/C/security.xml:799(command)
10630
msgid "sudo ufw logging on"
10631
msgstr "sudo ufw logging on"
10632
10633
#: serverguide/C/security.xml:801(para)
10634
msgid ""
10635
"To turn logging off in <application>ufw</application>, simply replace "
10636
"<emphasis role=\"italic\">on</emphasis> with <emphasis "
10637
"role=\"italic\">off</emphasis> in the above command."
10638
msgstr ""
10639
"To turn logging off in <application>ufw</application>, simply replace "
10640
"<emphasis role=\"italic\">on</emphasis> with <emphasis "
10641
"role=\"italic\">off</emphasis> in the above command."
10642
10643
#: serverguide/C/security.xml:804(para)
10644
msgid ""
10645
"If using <application>iptables</application> instead of "
10646
"<application>ufw</application>, enter:"
10647
msgstr ""
10648
"If using <application>iptables</application> instead of "
10649
"<application>ufw</application>, enter:"
10650
10651
#: serverguide/C/security.xml:807(screen)
10652
#, no-wrap
10653
msgid ""
10654
"\n"
10655
"sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-"
10656
"prefix \"NEW_HTTP_CONN: \"\n"
10657
msgstr ""
10658
"\n"
10659
"sudo iptables -A INPUT -m state --state NEW -p tcp --dport 80 -j LOG --log-"
10660
"prefix \"NEW_HTTP_CONN: \"\n"
10661
10662
#: serverguide/C/security.xml:810(para)
10663
msgid ""
10664
"A request on port 80 from the local machine, then, would generate a log in "
10665
"dmesg that looks like this:"
10666
msgstr ""
10667
"A request on port 80 from the local machine, then, would generate a log in "
10668
"dmesg that looks like this:"
10669
10670
#: serverguide/C/security.xml:815(programlisting)
10671
#, no-wrap
10672
msgid ""
10673
"[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= "
10674
"MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 "
10675
"LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 "
10676
"WINDOW=32767 RES=0x00 SYN URGP=0"
10677
msgstr ""
10678
"[4304885.870000] NEW_HTTP_CONN: IN=lo OUT= "
10679
"MAC=00:00:00:00:00:00:00:00:00:00:00:00:08:00 SRC=127.0.0.1 DST=127.0.0.1 "
10680
"LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=58288 DF PROTO=TCP SPT=53981 DPT=80 "
10681
"WINDOW=32767 RES=0x00 SYN URGP=0"
10682
10683
#: serverguide/C/security.xml:817(para)
10684
msgid ""
10685
"The above log will also appear in <filename>/var/log/messages</filename>, "
10686
"<filename>/var/log/syslog</filename>, and "
10687
"<filename>/var/log/kern.log</filename>. This behavior can be modified by "
10688
"editing <filename>/etc/syslog.conf</filename> appropriately or by installing "
10689
"and configuring <application>ulogd</application> and using the ULOG target "
10690
"instead of LOG. The <application>ulogd</application> daemon is a userspace "
10691
"server that listens for logging instructions from the kernel specifically "
10692
"for firewalls, and can log to any file you like, or even to a "
10693
"<application>PostgreSQL</application> or <application>MySQL</application> "
10694
"database. Making sense of your firewall logs can be simplified by using a "
10695
"log analyzing tool such as <application>fwanalog</application>, "
10696
"<application> fwlogwatch</application>, or <application>lire</application>."
10697
msgstr ""
10698
"The above log will also appear in <filename>/var/log/messages</filename>, "
10699
"<filename>/var/log/syslog</filename>, and "
10700
"<filename>/var/log/kern.log</filename>. This behaviour can be modified by "
10701
"editing <filename>/etc/syslog.conf</filename> appropriately or by installing "
10702
"and configuring <application>ulogd</application> and using the ULOG target "
10703
"instead of LOG. The <application>ulogd</application> daemon is a userspace "
10704
"server that listens for logging instructions from the kernel specifically "
10705
"for firewalls, and can log to any file you like, or even to a "
10706
"<application>PostgreSQL</application> or <application>MySQL</application> "
10707
"database. Making sense of your firewall logs can be simplified by using a "
10708
"log analysing tool such as <application>fwanalog</application>, "
10709
"<application> fwlogwatch</application>, or <application>lire</application>."
10710
10711
#: serverguide/C/security.xml:832(title)
10712
msgid "Other Tools"
10713
msgstr "Other Tools"
10714
10715
#: serverguide/C/security.xml:833(para)
10716
msgid ""
10717
"There are many tools available to help you construct a complete firewall "
10718
"without intimate knowledge of iptables. For the GUI-inclined:"
10719
msgstr ""
10720
"There are many tools available to help you construct a complete firewall "
10721
"without intimate knowledge of iptables. For the GUI-inclined:"
10722
10723
#: serverguide/C/security.xml:839(para)
10724
msgid ""
10725
"<ulink url=\"http://www.fs-security.com/\">Firestarter</ulink> is quite "
10726
"popular and easy to use."
10727
msgstr ""
10728
"<ulink url=\"http://www.fs-security.com/\">Firestarter</ulink> is quite "
10729
"popular and easy to use."
10730
10731
#: serverguide/C/security.xml:844(para)
10732
msgid ""
10733
"<ulink url=\"http://www.fwbuilder.org/\">fwbuilder</ulink> is very powerful "
10734
"and will look familiar to an administrator who has used a commercial "
10735
"firewall utility such as <application>Checkpoint FireWall-1</application>."
10736
msgstr ""
10737
"<ulink url=\"http://www.fwbuilder.org/\">fwbuilder</ulink> is very powerful "
10738
"and will look familiar to an administrator who has used a commercial "
10739
"firewall utility such as <application>Checkpoint FireWall-1</application>."
10740
10741
#: serverguide/C/security.xml:850(para)
10742
msgid ""
10743
"If you prefer a command-line tool with plain-text configuration files:"
10744
msgstr ""
10745
"If you prefer a command-line tool with plain-text configuration files:"
10746
10747
#: serverguide/C/security.xml:855(para)
10748
msgid ""
10749
"<ulink url=\"http://www.shorewall.net/\">Shorewall</ulink> is a very "
10750
"powerful solution to help you configure an advanced firewall for any network."
10751
msgstr ""
10752
"<ulink url=\"http://www.shorewall.net/\">Shorewall</ulink> is a very "
10753
"powerful solution to help you configure an advanced firewall for any network."
10754
10755
#: serverguide/C/security.xml:861(para)
10756
msgid ""
10757
"<ulink url=\"http://www.linuxkungfu.org/\">ipkungfu</ulink> should give you "
10758
"a working firewall \"out of the box\" with zero configuration, and will "
10759
"allow you to easily set up a more advanced firewall by editing simple, well-"
10760
"documented configuration files."
10761
msgstr ""
10762
"<ulink url=\"http://www.linuxkungfu.org/\">ipkungfu</ulink> should give you "
10763
"a working firewall \"out of the box\" with zero configuration, and will "
10764
"allow you to easily set up a more advanced firewall by editing simple, well-"
10765
"documented configuration files."
10766
10767
#: serverguide/C/security.xml:868(para)
10768
msgid ""
10769
"<ulink url=\"http://fireflier.sourceforge.net/\">fireflier</ulink> is "
10770
"designed to be a desktop firewall application. It is made up of a server "
10771
"(fireflier-server) and your choice of GUI clients (GTK or QT), and behaves "
10772
"like many popular interactive firewall applications for Windows."
10773
msgstr ""
10774
"<ulink url=\"http://fireflier.sourceforge.net/\">fireflier</ulink> is "
10775
"designed to be a desktop firewall application. It is made up of a server "
10776
"(fireflier-server) and your choice of GUI clients (GTK or QT), and behaves "
10777
"like many popular interactive firewall applications for Windows."
10778
10779
#: serverguide/C/security.xml:880(para)
10780
msgid ""
10781
"The <ulink url=\"https://wiki.ubuntu.com/UbuntuFirewall\">Ubuntu "
10782
"Firewall</ulink> wiki page contains information on the development of "
10783
"<application>ufw</application>."
10784
msgstr ""
10785
"The <ulink url=\"https://wiki.ubuntu.com/UbuntuFirewall\">Ubuntu "
10786
"Firewall</ulink> wiki page contains information on the development of "
10787
"<application>ufw</application>."
10788
10789
#: serverguide/C/security.xml:886(para)
10790
msgid ""
10791
"Also, the <application>ufw</application> manual page contains some very "
10792
"useful information: <command>man ufw</command>."
10793
msgstr ""
10794
"Also, the <application>ufw</application> manual page contains some very "
10795
"useful information: <command>man ufw</command>."
10796
10797
#: serverguide/C/security.xml:891(para)
10798
msgid ""
10799
"See the <ulink url=\"http://www.netfilter.org/documentation/HOWTO/packet-"
10800
"filtering-HOWTO.html\">packet-filtering-HOWTO</ulink> for more information "
10801
"on using <application>iptables</application>."
10802
msgstr ""
10803
"See the <ulink url=\"http://www.netfilter.org/documentation/HOWTO/packet-"
10804
"filtering-HOWTO.html\">packet-filtering-HOWTO</ulink> for more information "
10805
"on using <application>iptables</application>."
10806
10807
#: serverguide/C/security.xml:897(para)
10808
msgid ""
10809
"The <ulink url=\"http://www.netfilter.org/documentation/HOWTO/NAT-"
10810
"HOWTO.html\">nat-HOWTO</ulink> contains further details on masquerading."
10811
msgstr ""
10812
"The <ulink url=\"http://www.netfilter.org/documentation/HOWTO/NAT-"
10813
"HOWTO.html\">nat-HOWTO</ulink> contains further details on masquerading."
10814
10815
#: serverguide/C/security.xml:903(para)
10816
msgid ""
10817
"The <ulink url=\"https://help.ubuntu.com/community/IptablesHowTo\">IPTables "
10818
"HowTo</ulink> in the Ubuntu wiki is a great resource."
10819
msgstr ""
10820
10821
#: serverguide/C/security.xml:911(title)
10822
msgid "AppArmor"
10823
msgstr "AppArmor"
10824
10825
#: serverguide/C/security.xml:912(para)
10826
msgid ""
10827
"<application>AppArmor</application> is a Linux Security Module "
10828
"implementation of name-based mandatory access controls. AppArmor confines "
10829
"individual programs to a set of listed files and posix 1003.1e draft "
10830
"capabilities."
10831
msgstr ""
10832
"<application>AppArmor</application> is a Linux Security Module "
10833
"implementation of name-based mandatory access controls. AppArmor confines "
10834
"individual programs to a set of listed files and POSIX 1003.1e draft "
10835
"capabilities."
10836
10837
#: serverguide/C/security.xml:916(para)
10838
msgid ""
10839
"<application>AppArmor</application> is installed and loaded by default. It "
10840
"uses <emphasis>profiles</emphasis> of an application to determine what files "
10841
"and permissions the application requires. Some packages will install their "
10842
"own profiles, and additional profiles can be found in the "
10843
"<application>apparmor-profiles</application> package."
10844
msgstr ""
10845
"<application>AppArmor</application> is installed and loaded by default. It "
10846
"uses <emphasis>profiles</emphasis> of an application to determine what files "
10847
"and permissions the application requires. Some packages will install their "
10848
"own profiles, and additional profiles can be found in the "
10849
"<application>apparmor-profiles</application> package."
10850
10851
#: serverguide/C/security.xml:921(para)
10852
msgid ""
10853
"To install the <application>apparmor-profiles</application> package from a "
10854
"terminal prompt:"
10855
msgstr ""
10856
"To install the <application>apparmor-profiles</application> package from a "
10857
"terminal prompt:"
10858
10859
#: serverguide/C/security.xml:927(para)
10860
msgid "AppArmor profiles have two modes of execution:"
10861
msgstr "AppArmor profiles have two modes of execution:"
10862
10863
#: serverguide/C/security.xml:932(para)
10864
msgid ""
10865
"Complaining/Learning: profile violations are permitted and logged. Useful "
10866
"for testing and developing new profiles."
10867
msgstr ""
10868
"Complaining/Learning: profile violations are permitted and logged. Useful "
10869
"for testing and developing new profiles."
10870
10871
#: serverguide/C/security.xml:937(para)
10872
msgid ""
10873
"Enforced/Confined: enforces profile policy as well as logging the violation."
10874
msgstr ""
10875
"Enforced/Confined: enforces profile policy as well as logging the violation."
10876
10877
#: serverguide/C/security.xml:943(title)
10878
msgid "Using AppArmor"
10879
msgstr "Using AppArmor"
10880
10881
#: serverguide/C/security.xml:944(para)
10882
msgid ""
10883
"The <application>apparmor-utils</application> package contains command line "
10884
"utilities that you can use to change the <application>AppArmor</application> "
10885
"execution mode, find the status of a profile, create new profiles, etc."
10886
msgstr ""
10887
"The <application>apparmor-utils</application> package contains command line "
10888
"utilities that you can use to change the <application>AppArmor</application> "
10889
"execution mode, find the status of a profile, create new profiles, etc."
10890
10891
#: serverguide/C/security.xml:950(para)
10892
msgid ""
10893
"<application>apparmor_status</application> is used to view the current "
10894
"status of AppArmor profiles."
10895
msgstr ""
10896
"<application>apparmor_status</application> is used to view the current "
10897
"status of AppArmor profiles."
10898
10899
#: serverguide/C/security.xml:954(command)
10900
msgid "sudo apparmor_status"
10901
msgstr "sudo apparmor_status"
10902
10903
#: serverguide/C/security.xml:958(para)
10904
msgid ""
10905
"<application>aa-complain</application> places a profile into "
10906
"<emphasis>complain</emphasis> mode."
10907
msgstr ""
10908
"<application>aa-complain</application> places a profile into "
10909
"<emphasis>complain</emphasis> mode."
10910
10911
#: serverguide/C/security.xml:962(command)
10912
msgid "sudo aa-complain /path/to/bin"
10913
msgstr "sudo aa-complain /path/to/bin"
10914
10915
#: serverguide/C/security.xml:966(para)
10916
msgid ""
10917
"<application>aa-enforce</application> places a profile into "
10918
"<emphasis>enforce</emphasis> mode."
10919
msgstr ""
10920
"<application>aa-enforce</application> places a profile into "
10921
"<emphasis>enforce</emphasis> mode."
10922
10923
#: serverguide/C/security.xml:970(command)
10924
msgid "sudo aa-enforce /path/to/bin"
10925
msgstr "sudo aa-enforce /path/to/bin"
10926
10927
#: serverguide/C/security.xml:974(para)
10928
msgid ""
10929
"The <filename>/etc/apparmor.d</filename> directory is where the AppArmor "
10930
"profiles are located. It can be used to manipulate the "
10931
"<emphasis>mode</emphasis> of all profiles."
10932
msgstr ""
10933
"The <filename>/etc/apparmor.d</filename> directory is where the AppArmor "
10934
"profiles are located. It can be used to manipulate the "
10935
"<emphasis>mode</emphasis> of all profiles."
10936
10937
#: serverguide/C/security.xml:978(para)
10938
msgid "Enter the following to place all profiles into complain mode:"
10939
msgstr "Enter the following to place all profiles into complain mode:"
10940
10941
#: serverguide/C/security.xml:982(command)
10942
msgid "sudo aa-complain /etc/apparmor.d/*"
10943
msgstr "sudo aa-complain /etc/apparmor.d/*"
10944
10945
#: serverguide/C/security.xml:984(para)
10946
msgid "To place all profiles in enforce mode:"
10947
msgstr "To place all profiles in enforce mode:"
10948
10949
#: serverguide/C/security.xml:988(command)
10950
msgid "sudo aa-enforce /etc/apparmor.d/*"
10951
msgstr "sudo aa-enforce /etc/apparmor.d/*"
10952
10953
#: serverguide/C/security.xml:992(para)
10954
msgid ""
10955
"<application>apparmor_parser</application> is used to load a profile into "
10956
"the kernel. It can also be used to reload a currently loaded profile using "
10957
"the <emphasis>-r</emphasis> option. To load a profile:"
10958
msgstr ""
10959
"<application>apparmor_parser</application> is used to load a profile into "
10960
"the kernel. It can also be used to reload a currently loaded profile using "
10961
"the <emphasis>-r</emphasis> option. To load a profile:"
10962
10963
#: serverguide/C/security.xml:997(command) serverguide/C/security.xml:1029(command)
10964
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a"
10965
msgstr "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -a"
10966
10967
#: serverguide/C/security.xml:999(para)
10968
msgid "To reload a profile:"
10969
msgstr "To reload a profile:"
10970
10971
#: serverguide/C/security.xml:1003(command)
10972
msgid "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r"
10973
msgstr "cat /etc/apparmor.d/profile.name | sudo apparmor_parser -r"
10974
10975
#: serverguide/C/security.xml:1007(para)
10976
msgid ""
10977
"<filename>/etc/init.d/apparmor</filename> can be used to "
10978
"<emphasis>reload</emphasis> all profiles:"
10979
msgstr ""
10980
"<filename>/etc/init.d/apparmor</filename> can be used to "
10981
"<emphasis>reload</emphasis> all profiles:"
10982
10983
#: serverguide/C/security.xml:1011(command) serverguide/C/network-auth.xml:632(command)
10984
msgid "sudo /etc/init.d/apparmor reload"
10985
msgstr "sudo /etc/init.d/apparmor reload"
10986
10987
#: serverguide/C/security.xml:1015(para)
10988
msgid ""
10989
"The <filename>/etc/apparmor.d/disable</filename> directory can be used along "
10990
"with the <application>apparmor_parser -R</application> option to "
10991
"<emphasis>disable</emphasis> a profile."
10992
msgstr ""
10993
"The <filename>/etc/apparmor.d/disable</filename> directory can be used along "
10994
"with the <application>apparmor_parser -R</application> option to "
10995
"<emphasis>disable</emphasis> a profile."
10996
10997
#: serverguide/C/security.xml:1020(command)
10998
msgid "sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/"
10999
msgstr "sudo ln -s /etc/apparmor.d/profile.name /etc/apparmor.d/disable/"
11000
11001
#: serverguide/C/security.xml:1021(command)
11002
msgid "sudo apparmor_parser -R /etc/apparmor.d/profile.name"
11003
msgstr "sudo apparmor_parser -R /etc/apparmor.d/profile.name"
11004
11005
#: serverguide/C/security.xml:1023(para)
11006
msgid ""
11007
"To <emphasis>re-enable</emphasis> a disabled profile remove the symbolic "
11008
"link to the profile in <filename>/etc/apparmor.d/disable/</filename>. Then "
11009
"load the profile using the <emphasis>-a</emphasis> option."
11010
msgstr ""
11011
"To <emphasis>re-enable</emphasis> a disabled profile remove the symbolic "
11012
"link to the profile in <filename>/etc/apparmor.d/disable/</filename>. Then "
11013
"load the profile using the <emphasis>-a</emphasis> option."
11014
11015
#: serverguide/C/security.xml:1028(command)
11016
msgid "sudo rm /etc/apparmor.d/disable/profile.name"
11017
msgstr "sudo rm /etc/apparmor.d/disable/profile.name"
11018
11019
#: serverguide/C/security.xml:1033(para)
11020
msgid ""
11021
"<application>AppArmor</application> can be disabled, and the kernel module "
11022
"unloaded by entering the following:"
11023
msgstr ""
11024
"<application>AppArmor</application> can be disabled, and the kernel module "
11025
"unloaded by entering the following:"
11026
11027
#: serverguide/C/security.xml:1037(command)
11028
msgid "sudo /etc/init.d/apparmor stop"
11029
msgstr "sudo /etc/init.d/apparmor stop"
11030
11031
#: serverguide/C/security.xml:1038(command)
11032
msgid "sudo update-rc.d -f apparmor remove"
11033
msgstr "sudo update-rc.d -f apparmor remove"
11034
11035
#: serverguide/C/security.xml:1042(para)
11036
msgid "To re-enable <application>AppArmor</application> enter:"
11037
msgstr "To re-enable <application>AppArmor</application> enter:"
11038
11039
#: serverguide/C/security.xml:1046(command)
11040
msgid "sudo /etc/init.d/apparmor start"
11041
msgstr "sudo /etc/init.d/apparmor start"
11042
11043
#: serverguide/C/security.xml:1047(command)
11044
msgid "sudo update-rc.d apparmor defaults"
11045
msgstr "sudo update-rc.d apparmor defaults"
11046
11047
#: serverguide/C/security.xml:1052(para)
11048
msgid ""
11049
"Replace <emphasis>profile.name</emphasis> with the name of the profile you "
11050
"want to manipulate. Also, replace <filename>/path/to/bin/</filename> with "
11051
"the actual executable file path. For example for the "
11052
"<application>ping</application> command use <filename>/bin/ping</filename>"
11053
msgstr ""
11054
"Replace <emphasis>profile.name</emphasis> with the name of the profile you "
11055
"want to manipulate. Also, replace <filename>/path/to/bin/</filename> with "
11056
"the actual executable file path. For example for the "
11057
"<application>ping</application> command use <filename>/bin/ping</filename>"
11058
11059
#: serverguide/C/security.xml:1060(title)
11060
msgid "Profiles"
11061
msgstr "Profiles"
11062
11063
#: serverguide/C/security.xml:1061(para)
11064
msgid ""
11065
"<application>AppArmor</application> profiles are simple text files located "
11066
"in <filename>/etc/apparmor.d/</filename>. The files are named after the full "
11067
"path to the executable they profile replacing the \"/\" with \".\". For "
11068
"example <filename>/etc/apparmor.d/bin.ping</filename> is the AppArmor "
11069
"profile for the <filename>/bin/ping</filename> command."
11070
msgstr ""
11071
"<application>AppArmor</application> profiles are simple text files located "
11072
"in <filename>/etc/apparmor.d/</filename>. The files are named after the full "
11073
"path to the executable they profile replacing the \"/\" with \".\". For "
11074
"example <filename>/etc/apparmor.d/bin.ping</filename> is the AppArmor "
11075
"profile for the <filename>/bin/ping</filename> command."
11076
11077
#: serverguide/C/security.xml:1067(para)
11078
msgid "There are two main type of rules used in profiles:"
11079
msgstr "There are two main type of rules used in profiles:"
11080
11081
#: serverguide/C/security.xml:1072(para)
11082
msgid ""
11083
"<emphasis>Path entries:</emphasis> which detail which files an application "
11084
"can access in the file system."
11085
msgstr ""
11086
"<emphasis>Path entries:</emphasis> which detail which files an application "
11087
"can access in the file system."
11088
11089
#: serverguide/C/security.xml:1077(para)
11090
msgid ""
11091
"<emphasis>Capability entries:</emphasis> determine what privileges a "
11092
"confined process is allowed to use."
11093
msgstr ""
11094
"<emphasis>Capability entries:</emphasis> determine what privileges a "
11095
"confined process is allowed to use."
11096
11097
#: serverguide/C/security.xml:1082(para)
11098
msgid ""
11099
"As an example take a look at <filename>/etc/apparmor.d/bin.ping</filename>:"
11100
msgstr ""
11101
"As an example take a look at <filename>/etc/apparmor.d/bin.ping</filename>:"
11102
11103
#: serverguide/C/security.xml:1085(programlisting)
11104
#, no-wrap
11105
msgid ""
11106
"\n"
11107
"#include <tunables/global>\n"
11108
"/bin/ping flags=(complain) {\n"
11109
" #include <abstractions/base>\n"
11110
" #include <abstractions/consoles>\n"
11111
" #include <abstractions/nameservice>\n"
11112
"\n"
11113
" capability net_raw,\n"
11114
" capability setuid,\n"
11115
" network inet raw,\n"
11116
" \n"
11117
" /bin/ping mixr,\n"
11118
" /etc/modules.conf r,\n"
11119
"}\n"
11120
msgstr ""
11121
"\n"
11122
"#include <tunables/global>\n"
11123
"/bin/ping flags=(complain) {\n"
11124
" #include <abstractions/base>\n"
11125
" #include <abstractions/consoles>\n"
11126
" #include <abstractions/nameservice>\n"
11127
"\n"
11128
" capability net_raw,\n"
11129
" capability setuid,\n"
11130
" network inet raw,\n"
11131
" \n"
11132
" /bin/ping mixr,\n"
11133
" /etc/modules.conf r,\n"
11134
"}\n"
11135
11136
#: serverguide/C/security.xml:1102(para)
11137
msgid ""
11138
"<emphasis>#include <tunables/global>:</emphasis> include statements "
11139
"from other files. This allows statements pertaining to multiple applications "
11140
"to be placed in a common file."
11141
msgstr ""
11142
"<emphasis>#include <tunables/global>:</emphasis> include statements "
11143
"from other files. This allows statements pertaining to multiple applications "
11144
"to be placed in a common file."
11145
11146
#: serverguide/C/security.xml:1108(para)
11147
msgid ""
11148
"<emphasis>/bin/ping flags=(complain):</emphasis> path to the profiled "
11149
"program, also setting the mode to <emphasis>complain</emphasis>."
11150
msgstr ""
11151
"<emphasis>/bin/ping flags=(complain):</emphasis> path to the profiled "
11152
"program, also setting the mode to <emphasis>complain</emphasis>."
11153
11154
#: serverguide/C/security.xml:1114(para)
11155
msgid ""
11156
"<emphasis>capability net_raw,:</emphasis> allows the application access to "
11157
"the CAP_NET_RAW Posix.1e capability."
11158
msgstr ""
11159
"<emphasis>capability net_raw,:</emphasis> allows the application access to "
11160
"the CAP_NET_RAW Posix.1e capability."
11161
11162
#: serverguide/C/security.xml:1119(para)
11163
msgid ""
11164
"<emphasis>/bin/ping mixr,:</emphasis> allows the application read and "
11165
"execute access to the file."
11166
msgstr ""
11167
"<emphasis>/bin/ping mixr,:</emphasis> allows the application read and "
11168
"execute access to the file."
11169
11170
#: serverguide/C/security.xml:1125(para)
11171
msgid ""
11172
"After editing a profile file the profile must be reloaded. See <xref "
11173
"linkend=\"apparmor-usage\"/> for details."
11174
msgstr ""
11175
"After editing a profile file the profile must be reloaded. See <xref "
11176
"linkend=\"apparmor-usage\"/> for details."
11177
11178
#: serverguide/C/security.xml:1130(title)
11179
msgid "Creating a Profile"
11180
msgstr "Creating a Profile"
11181
11182
#: serverguide/C/security.xml:1133(para)
11183
msgid ""
11184
"<emphasis>Design a test plan:</emphasis> Try to think about how the "
11185
"application should be exercised. The test plan should be divided into small "
11186
"test cases. Each test case should have a small description and list the "
11187
"steps to follow."
11188
msgstr ""
11189
"<emphasis>Design a test plan:</emphasis> Try to think about how the "
11190
"application should be exercised. The test plan should be divided into small "
11191
"test cases. Each test case should have a small description and list the "
11192
"steps to follow."
11193
11194
#: serverguide/C/security.xml:1137(para)
11195
msgid "Some standard test cases are:"
11196
msgstr "Some standard test cases are:"
11197
11198
#: serverguide/C/security.xml:1142(para)
11199
msgid "Starting the program."
11200
msgstr "Starting the program."
11201
11202
#: serverguide/C/security.xml:1147(para)
11203
msgid "Stopping the program."
11204
msgstr "Stopping the program."
11205
11206
#: serverguide/C/security.xml:1152(para)
11207
msgid "Reloading the program."
11208
msgstr "Reloading the program."
11209
11210
#: serverguide/C/security.xml:1157(para)
11211
msgid "Testing all the commands supported by the init script."
11212
msgstr "Testing all the commands supported by the init script."
11213
11214
#: serverguide/C/security.xml:1164(para)
11215
msgid ""
11216
"<emphasis>Generate the new profile:</emphasis> Use <application>aa-"
11217
"genprof</application> to generate a new profile. From a terminal:"
11218
msgstr ""
11219
"<emphasis>Generate the new profile:</emphasis> Use <application>aa-"
11220
"genprof</application> to generate a new profile. From a terminal:"
11221
11222
#: serverguide/C/security.xml:1169(command)
11223
msgid "sudo aa-genprof executable"
11224
msgstr "sudo aa-genprof executable"
11225
11226
#: serverguide/C/security.xml:1171(para)
11227
msgid "For example:"
11228
msgstr "For example:"
11229
11230
#: serverguide/C/security.xml:1175(command)
11231
msgid "sudo aa-genprof slapd"
11232
msgstr "sudo aa-genprof slapd"
11233
11234
#: serverguide/C/security.xml:1179(para)
11235
msgid ""
11236
"To get your new profile included in the <application>apparmor-"
11237
"profiles</application> package, file a bug in <emphasis>Launchpad</emphasis> "
11238
"against the <ulink "
11239
"url=\"https://bugs.launchpad.net/ubuntu/+source/apparmor/+filebug\">AppArmor<"
11240
"/ulink> package:"
11241
msgstr ""
11242
"To get your new profile included in the <application>apparmor-"
11243
"profiles</application> package, file a bug in <emphasis>Launchpad</emphasis> "
11244
"against the <ulink "
11245
"url=\"https://bugs.launchpad.net/ubuntu/+source/apparmor/+filebug\">AppArmor<"
11246
"/ulink> package:"
11247
11248
#: serverguide/C/security.xml:1186(para)
11249
msgid "Include your test plan and test cases."
11250
msgstr "Include your test plan and test cases."
11251
11252
#: serverguide/C/security.xml:1191(para)
11253
msgid "Attach your new profile to the bug."
11254
msgstr "Attach your new profile to the bug."
11255
11256
#: serverguide/C/security.xml:1200(title)
11257
msgid "Updating Profiles"
11258
msgstr "Updating Profiles"
11259
11260
#: serverguide/C/security.xml:1201(para)
11261
msgid ""
11262
"When the program is misbehaving, audit messages are sent to the log files. "
11263
"The program <application>aa-logprof</application> can be used to scan log "
11264
"files for <application>AppArmor</application> audit messages, review them "
11265
"and update the profiles. From a terminal:"
11266
msgstr ""
11267
"When the program is misbehaving, audit messages are sent to the log files. "
11268
"The program <application>aa-logprof</application> can be used to scan log "
11269
"files for <application>AppArmor</application> audit messages, review them "
11270
"and update the profiles. From a terminal:"
11271
11272
#: serverguide/C/security.xml:1206(command)
11273
msgid "sudo aa-logprof"
11274
msgstr "sudo aa-logprof"
11275
11276
#: serverguide/C/security.xml:1214(para)
11277
msgid ""
11278
"See the <ulink "
11279
"url=\"http://www.novell.com/documentation/apparmor/apparmor201_sp10_admin/ind"
11280
"ex.html?page=/documentation/apparmor/apparmor201_sp10_admin/data/book_apparmo"
11281
"r_admin.html\">AppArmor Administration Guide</ulink> for advanced "
11282
"configuration options."
11283
msgstr ""
11284
"See the <ulink "
11285
"url=\"http://www.novell.com/documentation/apparmor/apparmor201_sp10_admin/ind"
11286
"ex.html?page=/documentation/apparmor/apparmor201_sp10_admin/data/book_apparmo"
11287
"r_admin.html\">AppArmor Administration Guide</ulink> for advanced "
11288
"configuration options."
11289
11290
#: serverguide/C/security.xml:1221(para)
11291
msgid ""
11292
"For details using AppArmor with other Ubuntu releases see the <ulink "
11293
"url=\"https://help.ubuntu.com/community/AppArmor\"> AppArmor Community "
11294
"Wiki</ulink> page."
11295
msgstr ""
11296
"For details using AppArmor with other Ubuntu releases see the <ulink "
11297
"url=\"https://help.ubuntu.com/community/AppArmor\"> AppArmor Community "
11298
"Wiki</ulink> page."
11299
11300
#: serverguide/C/security.xml:1229(para)
11301
msgid ""
11302
"The <ulink url=\"http://en.opensuse.org/AppArmor\">OpenSUSE AppArmor</ulink> "
11303
"page is another introduction to AppArmor."
11304
msgstr ""
11305
"The <ulink url=\"http://en.opensuse.org/AppArmor\">OpenSUSE AppArmor</ulink> "
11306
"page is another introduction to AppArmor."
11307
11308
#: serverguide/C/security.xml:1236(para)
11309
msgid ""
11310
"A great place to ask for <application>AppArmor</application> assistance, and "
11311
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
11312
"server</emphasis> IRC channel on <ulink "
11313
"url=\"http://freenode.net\">freenode</ulink>."
11314
msgstr ""
11315
"A great place to ask for <application>AppArmor</application> assistance, and "
11316
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
11317
"server</emphasis> IRC channel on <ulink "
11318
"url=\"http://freenode.net\">freenode</ulink>."
11319
11320
#: serverguide/C/security.xml:1246(title)
11321
msgid "Certificates"
11322
msgstr "Certificates"
11323
11324
#: serverguide/C/security.xml:1247(para)
11325
msgid ""
11326
"One of the most common forms of cryptography today is <emphasis>public-"
11327
"key</emphasis> cryptography. Public-key cryptography utilizes a "
11328
"<emphasis>public key</emphasis> and a <emphasis>private key</emphasis>. The "
11329
"system works by <emphasis>encrypting</emphasis> information using the public "
11330
"key. The information can then only be <emphasis>decrypted</emphasis> using "
11331
"the private key."
11332
msgstr ""
11333
"One of the most common forms of cryptography today is <emphasis>public-"
11334
"key</emphasis> cryptography. Public-key cryptography utilises a "
11335
"<emphasis>public key</emphasis> and a <emphasis>private key</emphasis>. The "
11336
"system works by <emphasis>encrypting</emphasis> information using the public "
11337
"key. The information can then only be <emphasis>decrypted</emphasis> using "
11338
"the private key."
11339
11340
#: serverguide/C/security.xml:1253(para)
11341
msgid ""
11342
"A common use for public-key cryptography is encrypting application traffic "
11343
"using a Secure Socket Layer (SSL) or Transport Layer Security (TLS) "
11344
"connection. For example, configuring Apache to provide "
11345
"<emphasis>HTTPS</emphasis>, the HTTP protocol over SSL. This allows a way to "
11346
"encrypt traffic using a protocol that does not itself provide encryption."
11347
msgstr ""
11348
"A common use for public-key cryptography is encrypting application traffic "
11349
"using a Secure Socket Layer (SSL) or Transport Layer Security (TLS) "
11350
"connection. For example, configuring Apache to provide "
11351
"<emphasis>HTTPS</emphasis>, the HTTP protocol over SSL. This allows a way to "
11352
"encrypt traffic using a protocol that does not itself provide encryption."
11353
11354
#: serverguide/C/security.xml:1258(para)
11355
msgid ""
11356
"A <emphasis>Certificate</emphasis> is a method used to distribute a "
11357
"<emphasis>public key</emphasis> and other information about a server and the "
11358
"organization who is responsible for it. Certificates can be digitally signed "
11359
"by a <emphasis>Certification Authority</emphasis> or CA. A CA is a trusted "
11360
"third party that has confirmed that the information contained in the "
11361
"certificate is accurate."
11362
msgstr ""
11363
"A <emphasis>Certificate</emphasis> is a method used to distribute a "
11364
"<emphasis>public key</emphasis> and other information about a server and the "
11365
"organisation who is responsible for it. Certificates can be digitally signed "
11366
"by a <emphasis>Certification Authority</emphasis> or CA. A CA is a trusted "
11367
"third party that has confirmed that the information contained in the "
11368
"certificate is accurate."
11369
11370
#: serverguide/C/security.xml:1265(title)
11371
msgid "Types of Certificates"
11372
msgstr "Types of Certificates"
11373
11374
#: serverguide/C/security.xml:1266(para)
11375
msgid ""
11376
"To set up a secure server using public-key cryptography, in most cases, you "
11377
"send your certificate request (including your public key), proof of your "
11378
"company's identity, and payment to a CA. The CA verifies the certificate "
11379
"request and your identity, and then sends back a certificate for your secure "
11380
"server. Alternatively, you can create your own <emphasis>self-"
11381
"signed</emphasis> certificate."
11382
msgstr ""
11383
"To set up a secure server using public-key cryptography, in most cases, you "
11384
"send your certificate request (including your public key), proof of your "
11385
"company's identity, and payment to a CA. The CA verifies the certificate "
11386
"request and your identity, and then sends back a certificate for your secure "
11387
"server. Alternatively, you can create your own <emphasis>self-"
11388
"signed</emphasis> certificate."
11389
11390
#: serverguide/C/security.xml:1276(para)
11391
msgid ""
11392
"Note, that self-signed certificates should not be used in most production "
11393
"environments."
11394
msgstr ""
11395
"Note, that self-signed certificates should not be used in most production "
11396
"environments."
11397
11398
#: serverguide/C/security.xml:1280(para)
11399
msgid ""
11400
"Continuing the HTTPS example, a CA-signed certificate provides two important "
11401
"capabilities that a self-signed certificate does not:"
11402
msgstr ""
11403
"Continuing the HTTPS example, a CA-signed certificate provides two important "
11404
"capabilities that a self-signed certificate does not:"
11405
11406
#: serverguide/C/security.xml:1287(para)
11407
msgid ""
11408
"Browsers (usually) automatically recognize the certificate and allow a "
11409
"secure connection to be made without prompting the user."
11410
msgstr ""
11411
"Browsers (usually) automatically recognise the certificate and allow a "
11412
"secure connection to be made without prompting the user."
11413
11414
#: serverguide/C/security.xml:1294(para)
11415
msgid ""
11416
"When a CA issues a signed certificate, it is guaranteeing the identity of "
11417
"the organization that is providing the web pages to the browser."
11418
msgstr ""
11419
"When a CA issues a signed certificate, it is guaranteeing the identity of "
11420
"the organisation that is providing the web pages to the browser."
11421
11422
#: serverguide/C/security.xml:1302(para)
11423
msgid ""
11424
"Most Web browsers, and computers, that support SSL have a list of CAs whose "
11425
"certificates they automatically accept. If a browser encounters a "
11426
"certificate whose authorizing CA is not in the list, the browser asks the "
11427
"user to either accept or decline the connection. Also, other applications "
11428
"may generate an error message when using a self-singed certificate."
11429
msgstr ""
11430
"Most Web browsers, and computers, that support SSL have a list of CAs whose "
11431
"certificates they automatically accept. If a browser encounters a "
11432
"certificate whose authorising CA is not in the list, the browser asks the "
11433
"user to either accept or decline the connection. Also, other applications "
11434
"may generate an error message when using a self-signed certificate."
11435
11436
#: serverguide/C/security.xml:1310(para)
11437
msgid ""
11438
"The process of getting a certificate from a CA is fairly easy. A quick "
11439
"overview is as follows:"
11440
msgstr ""
11441
"The process of getting a certificate from a CA is fairly easy. A quick "
11442
"overview is as follows:"
11443
11444
#: serverguide/C/security.xml:1317(para)
11445
msgid "Create a private and public encryption key pair."
11446
msgstr "Create a private and public encryption key pair."
11447
11448
#: serverguide/C/security.xml:1320(para)
11449
msgid ""
11450
"Create a certificate request based on the public key. The certificate "
11451
"request contains information about your server and the company hosting it."
11452
msgstr ""
11453
"Create a certificate request based on the public key. The certificate "
11454
"request contains information about your server and the company hosting it."
11455
11456
#: serverguide/C/security.xml:1325(para)
11457
msgid ""
11458
"Send the certificate request, along with documents proving your identity, to "
11459
"a CA. We cannot tell you which certificate authority to choose. Your "
11460
"decision may be based on your past experiences, or on the experiences of "
11461
"your friends or colleagues, or purely on monetary factors."
11462
msgstr ""
11463
"Send the certificate request, along with documents proving your identity, to "
11464
"a CA. We cannot tell you which certificate authority to choose. Your "
11465
"decision may be based on your past experiences, or on the experiences of "
11466
"your friends or colleagues, or purely on monetary factors."
11467
11468
#: serverguide/C/security.xml:1331(para)
11469
msgid ""
11470
"Once you have decided upon a CA, you need to follow the instructions they "
11471
"provide on how to obtain a certificate from them."
11472
msgstr ""
11473
"Once you have decided upon a CA, you need to follow the instructions they "
11474
"provide on how to obtain a certificate from them."
11475
11476
#: serverguide/C/security.xml:1336(para)
11477
msgid ""
11478
"When the CA is satisfied that you are indeed who you claim to be, they send "
11479
"you a digital certificate."
11480
msgstr ""
11481
"When the CA is satisfied that you are indeed who you claim to be, they send "
11482
"you a digital certificate."
11483
11484
#: serverguide/C/security.xml:1340(para)
11485
msgid ""
11486
"Install this certificate on your secure server, and configure the "
11487
"appropriate applications to use the certificate."
11488
msgstr ""
11489
"Install this certificate on your secure server, and configure the "
11490
"appropriate applications to use the certificate."
11491
11492
#: serverguide/C/security.xml:1349(title)
11493
msgid "Generating a Certificate Signing Request (CSR)"
11494
msgstr "Generating a Certificate Signing Request (CSR)"
11495
11496
#: serverguide/C/security.xml:1351(para)
11497
msgid ""
11498
"Whether you are getting a certificate from a CA or generating your own self-"
11499
"signed certificate, the first step is to generate a key."
11500
msgstr ""
11501
"Whether you are getting a certificate from a CA or generating your own self-"
11502
"signed certificate, the first step is to generate a key."
11503
11504
#: serverguide/C/security.xml:1356(para)
11505
msgid ""
11506
"If the certificate will be used by service daemons, such as Apache, Postfix, "
11507
"Dovecot, etc, a key without a passphrase is often appropriate. Not having a "
11508
"passphrase allows the services to start without manual intervention, usually "
11509
"the preferred way to start a daemon."
11510
msgstr ""
11511
"If the certificate will be used by service daemons, such as Apache, Postfix, "
11512
"Dovecot, etc, a key without a passphrase is often appropriate. Not having a "
11513
"passphrase allows the services to start without manual intervention, usually "
11514
"the preferred way to start a daemon."
11515
11516
#: serverguide/C/security.xml:1362(para)
11517
msgid ""
11518
"This section will cover generating a key with a passphrase, and one without. "
11519
"The non-passphrase key will then be used to generate a certificate that can "
11520
"be used with various service daemons."
11521
msgstr ""
11522
"This section will cover generating a key with a passphrase, and one without. "
11523
"The non-passphrase key will then be used to generate a certificate that can "
11524
"be used with various service daemons."
11525
11526
#: serverguide/C/security.xml:1368(para)
11527
msgid ""
11528
"Running your secure service without a passphrase is convenient because you "
11529
"will not need to enter the passphrase every time you start your secure "
11530
"service. But it is insecure and a compromise of the key means a compromise "
11531
"of the server as well."
11532
msgstr ""
11533
"Running your secure service without a passphrase is convenient because you "
11534
"will not need to enter the passphrase every time you start your secure "
11535
"service. But it is insecure and a compromise of the key means a compromise "
11536
"of the server as well."
11537
11538
#: serverguide/C/security.xml:1375(para)
11539
msgid ""
11540
"To generate the <emphasis>keys</emphasis> for the Certificate Signing "
11541
"Request (CSR) run the following command from a terminal prompt:"
11542
msgstr ""
11543
"To generate the <emphasis>keys</emphasis> for the Certificate Signing "
11544
"Request (CSR) run the following command from a terminal prompt:"
11545
11546
#: serverguide/C/security.xml:1381(command)
11547
msgid "openssl genrsa -des3 -out server.key 1024"
11548
msgstr "openssl genrsa -des3 -out server.key 1024"
11549
11550
#: serverguide/C/security.xml:1384(programlisting)
11551
#, no-wrap
11552
msgid ""
11553
"\n"
11554
"Generating RSA private key, 1024 bit long modulus\n"
11555
".....................++++++\n"
11556
".................++++++\n"
11557
"unable to write 'random state'\n"
11558
"e is 65537 (0x10001)\n"
11559
"Enter pass phrase for server.key:\n"
11560
msgstr ""
11561
"\n"
11562
"Generating RSA private key, 1024 bit long modulus\n"
11563
".....................++++++\n"
11564
".................++++++\n"
11565
"unable to write 'random state'\n"
11566
"e is 65537 (0x10001)\n"
11567
"Enter pass phrase for server.key:\n"
11568
11569
#: serverguide/C/security.xml:1393(para)
11570
msgid ""
11571
"You can now enter your passphrase. For best security, it should at least "
11572
"contain eight characters. The minimum length when specifying -des3 is four "
11573
"characters. It should include numbers and/or punctuation and not be a word "
11574
"in a dictionary. Also remember that your passphrase is case-sensitive."
11575
msgstr ""
11576
"You can now enter your passphrase. For best security, it should at least "
11577
"contain eight characters. The minimum length when specifying -des3 is four "
11578
"characters. It should include numbers and/or punctuation and not be a word "
11579
"in a dictionary. Also remember that your passphrase is case-sensitive."
11580
11581
#: serverguide/C/security.xml:1401(para)
11582
msgid ""
11583
"Re-type the passphrase to verify. Once you have re-typed it correctly, the "
11584
"server key is generated and stored in the <filename>server.key</filename> "
11585
"file."
11586
msgstr ""
11587
"Re-type the passphrase to verify. Once you have re-typed it correctly, the "
11588
"server key is generated and stored in the <filename>server.key</filename> "
11589
"file."
11590
11591
#: serverguide/C/security.xml:1407(para)
11592
msgid ""
11593
"Now create the insecure key, the one without a passphrase, and shuffle the "
11594
"key names:"
11595
msgstr ""
11596
"Now create the insecure key, the one without a passphrase, and shuffle the "
11597
"key names:"
11598
11599
#: serverguide/C/security.xml:1413(command)
11600
msgid "openssl rsa -in server.key -out server.key.insecure"
11601
msgstr "openssl rsa -in server.key -out server.key.insecure"
11602
11603
#: serverguide/C/security.xml:1414(command)
11604
msgid "mv server.key server.key.secure"
11605
msgstr "mv server.key server.key.secure"
11606
11607
#: serverguide/C/security.xml:1415(command)
11608
msgid "mv server.key.insecure server.key"
11609
msgstr "mv server.key.insecure server.key"
11610
11611
#: serverguide/C/security.xml:1418(para)
11612
msgid ""
11613
"The insecure key is now named <filename>server.key</filename>, and you can "
11614
"use this file to generate the CSR without passphrase."
11615
msgstr ""
11616
"The insecure key is now named <filename>server.key</filename>, and you can "
11617
"use this file to generate the CSR without passphrase."
11618
11619
#: serverguide/C/security.xml:1423(para)
11620
msgid "To create the CSR, run the following command at a terminal prompt:"
11621
msgstr "To create the CSR, run the following command at a terminal prompt:"
11622
11623
#: serverguide/C/security.xml:1428(command)
11624
msgid "openssl req -new -key server.key -out server.csr"
11625
msgstr "openssl req -new -key server.key -out server.csr"
11626
11627
#: serverguide/C/security.xml:1431(para)
11628
msgid ""
11629
"It will prompt you enter the passphrase. If you enter the correct "
11630
"passphrase, it will prompt you to enter Company Name, Site Name, Email Id, "
11631
"etc. Once you enter all these details, your CSR will be created and it will "
11632
"be stored in the <filename>server.csr</filename> file."
11633
msgstr ""
11634
11635
#: serverguide/C/security.xml:1439(para)
11636
msgid ""
11637
"You can now submit this CSR file to a CA for processing. The CA will use "
11638
"this CSR file and issue the certificate. On the other hand, you can create "
11639
"self-signed certificate using this CSR."
11640
msgstr ""
11641
"You can now submit this CSR file to a CA for processing. The CA will use "
11642
"this CSR file and issue the certificate. On the other hand, you can create "
11643
"self-signed certificate using this CSR."
11644
11645
#: serverguide/C/security.xml:1447(title)
11646
msgid "Creating a Self-Signed Certificate"
11647
msgstr "Creating a Self-Signed Certificate"
11648
11649
#: serverguide/C/security.xml:1448(para)
11650
msgid ""
11651
"To create the self-signed certificate, run the following command at a "
11652
"terminal prompt:"
11653
msgstr ""
11654
"To create the self-signed certificate, run the following command at a "
11655
"terminal prompt:"
11656
11657
#: serverguide/C/security.xml:1453(command)
11658
msgid ""
11659
"openssl x509 -req -days 365 -in server.csr -signkey server.key -out "
11660
"server.crt"
11661
msgstr ""
11662
"openssl x509 -req -days 365 -in server.csr -signkey server.key -out "
11663
"server.crt"
11664
11665
#: serverguide/C/security.xml:1456(para)
11666
msgid ""
11667
"The above command will prompt you to enter the passphrase. Once you enter "
11668
"the correct passphrase, your certificate will be created and it will be "
11669
"stored in the <filename>server.crt</filename> file."
11670
msgstr ""
11671
"The above command will prompt you to enter the passphrase. Once you enter "
11672
"the correct passphrase, your certificate will be created and it will be "
11673
"stored in the <filename>server.crt</filename> file."
11674
11675
#: serverguide/C/security.xml:1461(para)
11676
msgid ""
11677
"If your secure server is to be used in a production environment, you "
11678
"probably need a CA-signed certificate. It is not recommended to use self-"
11679
"signed certificate."
11680
msgstr ""
11681
"If your secure server is to be used in a production environment, you "
11682
"probably need a CA-signed certificate. It is not recommended to use self-"
11683
"signed certificate."
11684
11685
#: serverguide/C/security.xml:1469(title)
11686
msgid "Installing the Certificate"
11687
msgstr "Installing the Certificate"
11688
11689
#: serverguide/C/security.xml:1471(para)
11690
msgid ""
11691
"You can install the key file <filename>server.key</filename> and certificate "
11692
"file <filename>server.crt</filename>, or the certificate file issued by your "
11693
"CA, by running following commands at a terminal prompt:"
11694
msgstr ""
11695
"You can install the key file <filename>server.key</filename> and certificate "
11696
"file <filename>server.crt</filename>, or the certificate file issued by your "
11697
"CA, by running following commands at a terminal prompt:"
11698
11699
#: serverguide/C/security.xml:1477(command)
11700
msgid "sudo cp server.crt /etc/ssl/certs"
11701
msgstr "sudo cp server.crt /etc/ssl/certs"
11702
11703
#: serverguide/C/security.xml:1478(command)
11704
msgid "sudo cp server.key /etc/ssl/private"
11705
msgstr "sudo cp server.key /etc/ssl/private"
11706
11707
#: serverguide/C/security.xml:1480(para)
11708
msgid ""
11709
"Now simply configure any applications, with the ability to use public-key "
11710
"cryptography, to use the <emphasis>certificate</emphasis> and "
11711
"<emphasis>key</emphasis> files. For example, "
11712
"<application>Apache</application> can provide HTTPS, "
11713
"<application>Dovecot</application> can provide IMAPS and POP3S, etc."
11714
msgstr ""
11715
"Now simply configure any applications, with the ability to use public-key "
11716
"cryptography, to use the <emphasis>certificate</emphasis> and "
11717
"<emphasis>key</emphasis> files. For example, "
11718
"<application>Apache</application> can provide HTTPS, "
11719
"<application>Dovecot</application> can provide IMAPS and POP3S, etc."
11720
11721
#: serverguide/C/security.xml:1487(title)
11722
msgid "Certification Authority"
11723
msgstr "Certification Authority"
11724
11725
#: serverguide/C/security.xml:1489(para)
11726
msgid ""
11727
"If the services on your network require more than a few self-signed "
11728
"certificates it may be worth the additional effort to setup your own "
11729
"internal <emphasis>Certification Authority (CA)</emphasis>. Using "
11730
"certificates signed by your own CA, allows the various services using the "
11731
"certificates to easily trust other services using certificates issued from "
11732
"the same CA."
11733
msgstr ""
11734
"If the services on your network require more than a few self-signed "
11735
"certificates it may be worth the additional effort to setup your own "
11736
"internal <emphasis>Certification Authority (CA)</emphasis>. Using "
11737
"certificates signed by your own CA, allows the various services using the "
11738
"certificates to easily trust other services using certificates issued from "
11739
"the same CA."
11740
11741
#: serverguide/C/security.xml:1499(para)
11742
msgid ""
11743
"First, create the directories to hold the CA certificate and related files:"
11744
msgstr ""
11745
"First, create the directories to hold the CA certificate and related files:"
11746
11747
#: serverguide/C/security.xml:1504(command)
11748
msgid "sudo mkdir /etc/ssl/CA"
11749
msgstr "sudo mkdir /etc/ssl/CA"
11750
11751
#: serverguide/C/security.xml:1505(command)
11752
msgid "sudo mkdir /etc/ssl/newcerts"
11753
msgstr "sudo mkdir /etc/ssl/newcerts"
11754
11755
#: serverguide/C/security.xml:1511(para)
11756
msgid ""
11757
"The CA needs a few additional files to operate, one to keep track of the "
11758
"last serial number used by the CA, each certificate must have a unique "
11759
"serial number, and another file to record which certificates have been "
11760
"issued:"
11761
msgstr ""
11762
"The CA needs a few additional files to operate, one to keep track of the "
11763
"last serial number used by the CA, each certificate must have a unique "
11764
"serial number, and another file to record which certificates have been "
11765
"issued:"
11766
11767
#: serverguide/C/security.xml:1518(command)
11768
msgid "sudo sh -c \"echo '01' > /etc/ssl/CA/serial\""
11769
msgstr "sudo sh -c \"echo '01' > /etc/ssl/CA/serial\""
11770
11771
#: serverguide/C/security.xml:1519(command)
11772
msgid "sudo touch /etc/ssl/CA/index.txt"
11773
msgstr "sudo touch /etc/ssl/CA/index.txt"
11774
11775
#: serverguide/C/security.xml:1525(para)
11776
msgid ""
11777
"The third file is a CA configuration file. Though not strictly necessary, it "
11778
"is very convenient when issuing multiple certificates. Edit "
11779
"<filename>/etc/ssl/openssl.cnf</filename>, and in the <emphasis>[ CA_default "
11780
"]</emphasis> change:"
11781
msgstr ""
11782
"The third file is a CA configuration file. Though not strictly necessary, it "
11783
"is very convenient when issuing multiple certificates. Edit "
11784
"<filename>/etc/ssl/openssl.cnf</filename>, and in the <emphasis>[ CA_default "
11785
"]</emphasis> change:"
11786
11787
#: serverguide/C/security.xml:1531(programlisting)
11788
#, no-wrap
11789
msgid ""
11790
"\n"
11791
"dir = /etc/ssl/ # Where everything is kept\n"
11792
"database = $dir/CA/index.txt # database index file.\n"
11793
"certificate = $dir/certs/cacert.pem # The CA certificate\n"
11794
"serial = $dir/CA/serial # The current serial number\n"
11795
"private_key = $dir/private/cakey.pem# The private key\n"
11796
msgstr ""
11797
"\n"
11798
"dir = /etc/ssl/ # Where everything is kept\n"
11799
"database = $dir/CA/index.txt # database index file.\n"
11800
"certificate = $dir/certs/cacert.pem # The CA certificate\n"
11801
"serial = $dir/CA/serial # The current serial number\n"
11802
"private_key = $dir/private/cakey.pem# The private key\n"
11803
11804
#: serverguide/C/security.xml:1542(para)
11805
msgid "Next, create the self-singed root certificate:"
11806
msgstr "Next, create the self-singed root certificate:"
11807
11808
#: serverguide/C/security.xml:1547(command)
11809
msgid ""
11810
"openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -"
11811
"days 3650"
11812
msgstr ""
11813
"openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -"
11814
"days 3650"
11815
11816
#: serverguide/C/security.xml:1550(para)
11817
msgid "You will then be asked to enter the details about the certificate."
11818
msgstr "You will then be asked to enter the details about the certificate."
11819
11820
#: serverguide/C/security.xml:1557(para)
11821
msgid "Now install the root certificate and key:"
11822
msgstr "Now install the root certificate and key:"
11823
11824
#: serverguide/C/security.xml:1562(command)
11825
msgid "sudo mv cakey.pem /etc/ssl/private/"
11826
msgstr "sudo mv cakey.pem /etc/ssl/private/"
11827
11828
#: serverguide/C/security.xml:1563(command)
11829
msgid "sudo mv cacert.pem /etc/ssl/certs/"
11830
msgstr "sudo mv cacert.pem /etc/ssl/certs/"
11831
11832
#: serverguide/C/security.xml:1569(para)
11833
msgid ""
11834
"You are now ready to start signing certificates. The first item needed is a "
11835
"Certificate Signing Request (CSR), see <xref linkend=\"generating-a-csr\"/> "
11836
"for details. Once you have a CSR, enter the following to generate a "
11837
"certificate signed by the CA:"
11838
msgstr ""
11839
"You are now ready to start signing certificates. The first item needed is a "
11840
"Certificate Signing Request (CSR), see <xref linkend=\"generating-a-csr\"/> "
11841
"for details. Once you have a CSR, enter the following to generate a "
11842
"certificate signed by the CA:"
11843
11844
#: serverguide/C/security.xml:1576(command)
11845
msgid "sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf"
11846
msgstr "sudo openssl ca -in server.csr -config /etc/ssl/openssl.cnf"
11847
11848
#: serverguide/C/security.xml:1579(para)
11849
msgid ""
11850
"After entering the password for the CA key, you will be prompted to sign the "
11851
"certificate, and again to commit the new certificate. You should then see a "
11852
"somewhat large amount of output related to the certificate creation."
11853
msgstr ""
11854
"After entering the password for the CA key, you will be prompted to sign the "
11855
"certificate, and again to commit the new certificate. You should then see a "
11856
"somewhat large amount of output related to the certificate creation."
11857
11858
#: serverguide/C/security.xml:1588(para)
11859
msgid ""
11860
"There should now be a new file, "
11861
"<filename>/etc/ssl/newcerts/01.pem</filename>, containing the same output. "
11862
"Copy and paste everything between the <emphasis>-----BEGIN CERTIFICATE-----"
11863
"</emphasis> and <emphasis>----END CERTIFICATE-----</emphasis> lines to a "
11864
"file named after the hostname of the server where the certificate will be "
11865
"installed. For example <filename>mail.example.com.crt</filename>, is a nice "
11866
"descriptive name."
11867
msgstr ""
11868
"There should now be a new file, "
11869
"<filename>/etc/ssl/newcerts/01.pem</filename>, containing the same output. "
11870
"Copy and paste everything between the <emphasis>-----BEGIN CERTIFICATE-----"
11871
"</emphasis> and <emphasis>----END CERTIFICATE-----</emphasis> lines to a "
11872
"file named after the hostname of the server where the certificate will be "
11873
"installed. For example <filename>mail.example.com.crt</filename>, is a nice "
11874
"descriptive name."
11875
11876
#: serverguide/C/security.xml:1596(para)
11877
msgid ""
11878
"Subsequent certificates will be named <filename>02.pem</filename>, "
11879
"<filename>03.pem</filename>, etc."
11880
msgstr ""
11881
"Subsequent certificates will be named <filename>02.pem</filename>, "
11882
"<filename>03.pem</filename>, etc."
11883
11884
#: serverguide/C/security.xml:1601(para)
11885
msgid ""
11886
"Replace <emphasis>mail.example.com.crt</emphasis> with your own descriptive "
11887
"name."
11888
msgstr ""
11889
"Replace <emphasis>mail.example.com.crt</emphasis> with your own descriptive "
11890
"name."
11891
11892
#: serverguide/C/security.xml:1609(para)
11893
msgid ""
11894
"Finally, copy the new certificate to the host that needs it, and configure "
11895
"the appropriate applications to use it. The default location to install "
11896
"certificates is <filename role=\"directory\">/etc/ssl/certs</filename>. This "
11897
"enables multiple services to use the same certificate without overly "
11898
"complicated file permissions."
11899
msgstr ""
11900
"Finally, copy the new certificate to the host that needs it, and configure "
11901
"the appropriate applications to use it. The default location to install "
11902
"certificates is <filename role=\"directory\">/etc/ssl/certs</filename>. This "
11903
"enables multiple services to use the same certificate without overly "
11904
"complicated file permissions."
11905
11906
#: serverguide/C/security.xml:1615(para)
11907
msgid ""
11908
"For applications that can be configured to use a CA certificate, you should "
11909
"also copy the <filename>/etc/ssl/certs/cacert.pem</filename> file to the "
11910
"<filename role=\"directory\">/etc/ssl/certs/</filename> directory on each "
11911
"server."
11912
msgstr ""
11913
"For applications that can be configured to use a CA certificate, you should "
11914
"also copy the <filename>/etc/ssl/certs/cacert.pem</filename> file to the "
11915
"<filename role=\"directory\">/etc/ssl/certs/</filename> directory on each "
11916
"server."
11917
11918
#: serverguide/C/security.xml:1629(para)
11919
msgid ""
11920
"For more detailed instructions on using cryptography see the <ulink "
11921
"url=\"http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html\">SSL "
11922
"Certificates HOWTO</ulink> by tlpd.org"
11923
msgstr ""
11924
"For more detailed instructions on using cryptography see the <ulink "
11925
"url=\"http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html\">SSL "
11926
"Certificates HOWTO</ulink> by tlpd.org"
11927
11928
#: serverguide/C/security.xml:1635(para)
11929
msgid ""
11930
"<ulink url=\"http://www.pki-page.org/\">The PKI Page</ulink> contains a list "
11931
"of Certificate Authorities."
11932
msgstr ""
11933
"<ulink url=\"http://www.pki-page.org/\">The PKI Page</ulink> contains a list "
11934
"of Certificate Authorities."
11935
11936
#: serverguide/C/security.xml:1640(para)
11937
msgid ""
11938
"The Wikipedia <ulink "
11939
"url=\"http://en.wikipedia.org/wiki/Https\">HTTPS</ulink> page has more "
11940
"information regarding HTTPS."
11941
msgstr ""
11942
"The Wikipedia <ulink "
11943
"url=\"http://en.wikipedia.org/wiki/Https\">HTTPS</ulink> page has more "
11944
"information regarding HTTPS."
11945
11946
#: serverguide/C/security.xml:1645(para)
11947
msgid ""
11948
"For more information on <emphasis>OpenSSL</emphasis> see the <ulink "
11949
"url=\"http://www.openssl.org/\">OpenSSL Home Page</ulink>."
11950
msgstr ""
11951
"For more information on <emphasis>OpenSSL</emphasis> see the <ulink "
11952
"url=\"http://www.openssl.org/\">OpenSSL Home Page</ulink>."
11953
11954
#: serverguide/C/security.xml:1650(para)
11955
msgid ""
11956
"Also, O'Reilly's <ulink "
11957
"url=\"http://oreilly.com/catalog/9780596002701/\">Network Security with "
11958
"OpenSSL</ulink> is a good in depth reference."
11959
msgstr ""
11960
"Also, O'Reilly's <ulink "
11961
"url=\"http://oreilly.com/catalog/9780596002701/\">Network Security with "
11962
"OpenSSL</ulink> is a good in depth reference."
11963
11964
#: serverguide/C/security.xml:1659(title)
11965
msgid "eCryptfs"
11966
msgstr "eCryptfs"
11967
11968
#: serverguide/C/security.xml:1661(para)
11969
msgid ""
11970
"<emphasis>eCryptfs</emphasis> is a POSIX-compliant enterprise-class stacked "
11971
"cryptographic filesystem for Linux. Layering on top of the filesystem layer "
11972
"<emphasis>eCryptfs</emphasis> protects files no matter the underlying "
11973
"filesystem, partition type, etc."
11974
msgstr ""
11975
"<emphasis>eCryptfs</emphasis> is a POSIX-compliant enterprise-class stacked "
11976
"cryptographic filesystem for Linux. Layering on top of the filesystem layer "
11977
"<emphasis>eCryptfs</emphasis> protects files no matter the underlying "
11978
"filesystem, partition type, etc."
11979
11980
#: serverguide/C/security.xml:1667(para)
11981
msgid ""
11982
"During installation there is an option to encrypt the <filename "
11983
"role=\"directory\">/home</filename> partition. This will automatically "
11984
"configure everything needed to encrypt and mount the partition."
11985
msgstr ""
11986
"During installation there is an option to encrypt the <filename "
11987
"role=\"directory\">/home</filename> partition. This will automatically "
11988
"configure everything needed to encrypt and mount the partition."
11989
11990
#: serverguide/C/security.xml:1672(para)
11991
msgid ""
11992
"As an example, this section will cover configuring <filename "
11993
"role=\"directory\">/srv</filename> to be encrypted using eCryptfs."
11994
msgstr ""
11995
"As an example, this section will cover configuring <filename "
11996
"role=\"directory\">/srv</filename> to be encrypted using eCryptfs."
11997
11998
#: serverguide/C/security.xml:1677(title)
11999
msgid "Using eCryptfs"
12000
msgstr "Using eCryptfs"
12001
12002
#: serverguide/C/security.xml:1679(para)
12003
msgid "First, install the necessary packages. From a terminal prompt enter:"
12004
msgstr "First, install the necessary packages. From a terminal prompt enter:"
12005
12006
#: serverguide/C/security.xml:1684(command)
12007
msgid "sudo apt-get install ecryptfs-utils"
12008
msgstr "sudo apt-get install ecryptfs-utils"
12009
12010
#: serverguide/C/security.xml:1687(para)
12011
msgid "Now mount the partition to be encrypted:"
12012
msgstr "Now mount the partition to be encrypted:"
12013
12014
#: serverguide/C/security.xml:1692(command)
12015
msgid "sudo mount -t ecryptfs /srv /srv"
12016
msgstr "sudo mount -t ecryptfs /srv /srv"
12017
12018
#: serverguide/C/security.xml:1695(para)
12019
msgid ""
12020
"You will then be prompted for some details on how "
12021
"<application>ecryptfs</application> should encrypt the data."
12022
msgstr ""
12023
"You will then be prompted for some details on how "
12024
"<application>ecryptfs</application> should encrypt the data."
12025
12026
#: serverguide/C/security.xml:1699(para)
12027
msgid ""
12028
"To test that files placed in <filename>/srv</filename> are indeed encrypted "
12029
"copy the <filename>/etc/default</filename> folder to "
12030
"<filename>/srv</filename>:"
12031
msgstr ""
12032
"To test that files placed in <filename>/srv</filename> are indeed encrypted "
12033
"copy the <filename>/etc/default</filename> folder to "
12034
"<filename>/srv</filename>:"
12035
12036
#: serverguide/C/security.xml:1705(command) serverguide/C/clustering.xml:192(command)
12037
msgid "sudo cp -r /etc/default /srv"
12038
msgstr "sudo cp -r /etc/default /srv"
12039
12040
#: serverguide/C/security.xml:1708(para)
12041
msgid "Now unmount <filename>/srv</filename>, and try to view a file:"
12042
msgstr "Now unmount <filename>/srv</filename>, and try to view a file:"
12043
12044
#: serverguide/C/security.xml:1713(command) serverguide/C/installation.xml:1138(command) serverguide/C/clustering.xml:200(command)
12045
msgid "sudo umount /srv"
12046
msgstr "sudo umount /srv"
12047
12048
#: serverguide/C/security.xml:1714(command)
12049
msgid "cat /srv/default/cron"
12050
msgstr "cat /srv/default/cron"
12051
12052
#: serverguide/C/security.xml:1717(para)
12053
msgid ""
12054
"Remounting <filename>/srv</filename> using "
12055
"<application>ecryptfs</application> will make the data viewable once again."
12056
msgstr ""
12057
"Remounting <filename>/srv</filename> using "
12058
"<application>ecryptfs</application> will make the data viewable once again."
12059
12060
#: serverguide/C/security.xml:1723(title)
12061
msgid "Automatically Mounting Encrypted Partitions"
12062
msgstr "Automatically Mounting Encrypted Partitions"
12063
12064
#: serverguide/C/security.xml:1725(para)
12065
msgid ""
12066
"There are a couple of ways to automatically mount an "
12067
"<application>ecryptfs</application> encrypted filesystem at boot. This "
12068
"example will use a <filename>/root/.ecryptfsrc</filename> file containing "
12069
"mount options, along with a passphrase file residing on a USB key."
12070
msgstr ""
12071
"There are a couple of ways to automatically mount an "
12072
"<application>ecryptfs</application> encrypted filesystem at boot. This "
12073
"example will use a <filename>/root/.ecryptfsrc</filename> file containing "
12074
"mount options, along with a passphrase file residing on a USB key."
12075
12076
#: serverguide/C/security.xml:1731(para)
12077
msgid "First, create <filename>/root/.ecryptfsrc</filename> containing:"
12078
msgstr "First, create <filename>/root/.ecryptfsrc</filename> containing:"
12079
12080
#: serverguide/C/security.xml:1735(programlisting)
12081
#, no-wrap
12082
msgid ""
12083
"\n"
12084
"key=passphrase:passphrase_passwd_file=/mnt/usb/passwd_file.txt\n"
12085
"ecryptfs_sig=5826dd62cf81c615\n"
12086
"ecryptfs_cipher=aes\n"
12087
"ecryptfs_key_bytes=16\n"
12088
"ecryptfs_passthrough=n\n"
12089
"ecryptfs_enable_filename_crypto=n\n"
12090
msgstr ""
12091
"\n"
12092
"key=passphrase:passphrase_passwd_file=/mnt/usb/passwd_file.txt\n"
12093
"ecryptfs_sig=5826dd62cf81c615\n"
12094
"ecryptfs_cipher=aes\n"
12095
"ecryptfs_key_bytes=16\n"
12096
"ecryptfs_passthrough=n\n"
12097
"ecryptfs_enable_filename_crypto=n\n"
12098
12099
#: serverguide/C/security.xml:1745(para)
12100
msgid ""
12101
"Adjust the <emphasis>ecryptfs_sig</emphasis> to the signature in "
12102
"<filename>/root/.ecryptfs/sig-cache.txt</filename>."
12103
msgstr ""
12104
"Adjust the <emphasis>ecryptfs_sig</emphasis> to the signature in "
12105
"<filename>/root/.ecryptfs/sig-cache.txt</filename>."
12106
12107
#: serverguide/C/security.xml:1750(para)
12108
msgid ""
12109
"Next, create the <filename>/mnt/usb/passwd_file.txt</filename> passphrase "
12110
"file:"
12111
msgstr ""
12112
"Next, create the <filename>/mnt/usb/passwd_file.txt</filename> passphrase "
12113
"file:"
12114
12115
#: serverguide/C/security.xml:1754(programlisting)
12116
#, no-wrap
12117
msgid ""
12118
"\n"
12119
"passphrase_passwd=[secrets]\n"
12120
msgstr ""
12121
"\n"
12122
"passphrase_passwd=[secrets]\n"
12123
12124
#: serverguide/C/security.xml:1758(para)
12125
msgid "Now add the necessary lines to <filename>/etc/fstab</filename>:"
12126
msgstr "Now add the necessary lines to <filename>/etc/fstab</filename>:"
12127
12128
#: serverguide/C/security.xml:1762(programlisting)
12129
#, no-wrap
12130
msgid ""
12131
"\n"
12132
"/dev/sdb1 /mnt/usb ext3 ro 0 0\n"
12133
"/srv /srv ecryptfs defaults 0 0\n"
12134
msgstr ""
12135
"\n"
12136
"/dev/sdb1 /mnt/usb ext3 ro 0 0\n"
12137
"/srv /srv ecryptfs defaults 0 0\n"
12138
12139
#: serverguide/C/security.xml:1767(para)
12140
msgid "Make sure the USB drive is mounted before the encrypted partition."
12141
msgstr "Make sure the USB drive is mounted before the encrypted partition."
12142
12143
#: serverguide/C/security.xml:1771(para)
12144
msgid ""
12145
"Finally, reboot and the <filename>/srv</filename> should be mounted using "
12146
"ecryptfs."
12147
msgstr ""
12148
"Finally, reboot and the <filename>/srv</filename> should be mounted using "
12149
"ecryptfs."
12150
12151
#: serverguide/C/security.xml:1779(para)
12152
msgid ""
12153
"The <application>ecryptfs-utils</application> package includes several other "
12154
"useful utilities:"
12155
msgstr ""
12156
"The <application>ecryptfs-utils</application> package includes several other "
12157
"useful utilities:"
12158
12159
#: serverguide/C/security.xml:1785(para)
12160
msgid ""
12161
"<emphasis>ecryptfs-setup-private:</emphasis> creates a "
12162
"<filename>~/Private</filename> directory to contain encrypted information. "
12163
"This utility can be run by unprivileged users to keep data private from "
12164
"other users on the system."
12165
msgstr ""
12166
"<emphasis>ecryptfs-setup-private:</emphasis> creates a "
12167
"<filename>~/Private</filename> directory to contain encrypted information. "
12168
"This utility can be run by unprivileged users to keep data private from "
12169
"other users on the system."
12170
12171
#: serverguide/C/security.xml:1792(para)
12172
msgid ""
12173
"<emphasis>ecryptfs-mount-private and ecryptfs-umount-private:</emphasis> "
12174
"will mount and unmount respectively, a users <filename>~/Private</filename> "
12175
"directory."
12176
msgstr ""
12177
"<emphasis>ecryptfs-mount-private and ecryptfs-umount-private:</emphasis> "
12178
"will mount and unmount respectively, a users <filename>~/Private</filename> "
12179
"directory."
12180
12181
#: serverguide/C/security.xml:1798(para)
12182
msgid ""
12183
"<emphasis>ecryptfs-add-passphrase:</emphasis> adds a new passphrase to the "
12184
"kernel keyring."
12185
msgstr ""
12186
"<emphasis>ecryptfs-add-passphrase:</emphasis> adds a new passphrase to the "
12187
"kernel keyring."
12188
12189
#: serverguide/C/security.xml:1803(para)
12190
msgid ""
12191
"<emphasis>ecryptfs-manager:</emphasis> manages "
12192
"<application>eCryptfs</application> objects such as keys."
12193
msgstr ""
12194
"<emphasis>ecryptfs-manager:</emphasis> manages "
12195
"<application>eCryptfs</application> objects such as keys."
12196
12197
#: serverguide/C/security.xml:1808(para)
12198
msgid ""
12199
"<emphasis>ecryptfs-stat:</emphasis> allows you to view the "
12200
"<application>ecryptfs</application> meta information for a file."
12201
msgstr ""
12202
"<emphasis>ecryptfs-stat:</emphasis> allows you to view the "
12203
"<application>ecryptfs</application> meta information for a file."
12204
12205
#: serverguide/C/security.xml:1821(para)
12206
msgid ""
12207
"For more information on eCryptfs see the <ulink "
12208
"url=\"https://launchpad.net/ecryptfs\">Launchpad project page</ulink>."
12209
msgstr ""
12210
12211
#: serverguide/C/security.xml:1826(para)
12212
msgid ""
12213
"There is also a <ulink "
12214
"url=\"http://www.linuxjournal.com/article/9400\">Linux Journal</ulink> "
12215
"article covering eCryptfs."
12216
msgstr ""
12217
"There is also a <ulink "
12218
"url=\"http://www.linuxjournal.com/article/9400\">Linux Journal</ulink> "
12219
"article covering eCryptfs."
12220
12221
#: serverguide/C/security.xml:1831(para)
12222
msgid ""
12223
"Also, for more <application>ecryptfs</application> options see the <ulink "
12224
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/ecryptfs.7.html\">ecr"
12225
"yptfs man page</ulink>."
12226
msgstr ""
12227
12228
#: serverguide/C/security.xml:1837(para)
12229
msgid ""
12230
"The <ulink url=\"https://help.ubuntu.com/community/eCryptfs\">eCryptfs "
12231
"Ubuntu Wiki</ulink> page also has more details."
12232
msgstr ""
12233
12234
#: serverguide/C/reporting-bugs.xml:13(title)
12235
msgid "Appendix"
12236
msgstr ""
12237
12238
#: serverguide/C/reporting-bugs.xml:16(title)
12239
msgid "Reporting Bugs in Ubuntu Server Edition"
12240
msgstr ""
12241
12242
#: serverguide/C/reporting-bugs.xml:18(para)
12243
msgid ""
12244
"While the Ubuntu Project attempts to release software with as few bugs as "
12245
"possible, they do occur. You can help fix these bugs by reporting ones that "
12246
"you find to the project. The Ubuntu Project uses <ulink "
12247
"url=\"https://launchpad.net/\">Launchpad</ulink> to track its bug reports. "
12248
"In order to file a bug about Ubuntu Server on Launchpad, you will need to "
12249
"<ulink url=\"https://help.launchpad.net/YourAccount/NewAccount\">create an "
12250
"account</ulink>."
12251
msgstr ""
12252
12253
#: serverguide/C/reporting-bugs.xml:30(title)
12254
msgid "Reporting Bugs With ubuntu-bug"
12255
msgstr ""
12256
12257
#: serverguide/C/reporting-bugs.xml:32(para)
12258
msgid ""
12259
"The preferred way to report a bug is with the <application>ubuntu-"
12260
"bug</application> command. The ubuntu-bug tool gathers information about the "
12261
"system useful to developers in diagnosing the reported problem that will "
12262
"then be included in the bug report filed on Launchpad. Bug reports in Ubuntu "
12263
"need to be filed against a specific software package, thus the name of the "
12264
"package that the bug occurs in needs to be given to ubuntu-bug:"
12265
msgstr ""
12266
12267
#: serverguide/C/reporting-bugs.xml:43(command)
12268
msgid "ubuntu-bug PACKAGENAME"
12269
msgstr ""
12270
12271
#: serverguide/C/reporting-bugs.xml:46(para)
12272
msgid ""
12273
"For example, to file a bug against the openssh-server package, you would do:"
12274
msgstr ""
12275
12276
#: serverguide/C/reporting-bugs.xml:51(command)
12277
msgid "ubuntu-bug openssh-server"
12278
msgstr ""
12279
12280
#: serverguide/C/reporting-bugs.xml:54(para)
12281
msgid ""
12282
"You can specify either a binary package or the source package for ubuntu-"
12283
"bug. Again using openssh-server as an example, you could also generate the "
12284
"report against the source package for openssh-server, openssh:"
12285
msgstr ""
12286
12287
#: serverguide/C/reporting-bugs.xml:62(command)
12288
msgid "ubuntu-bug openssh"
12289
msgstr ""
12290
12291
#: serverguide/C/reporting-bugs.xml:66(para)
12292
msgid ""
12293
"See <xref linkend=\"package-management\"/> for more information about "
12294
"packages in Ubuntu."
12295
msgstr ""
12296
12297
#: serverguide/C/reporting-bugs.xml:72(para)
12298
msgid ""
12299
"The ubuntu-bug command will gather information about the system in question, "
12300
"possibly including information specific to the specified package, and then "
12301
"ask you what you would like to do with collected information:"
12302
msgstr ""
12303
12304
#: serverguide/C/reporting-bugs.xml:80(command)
12305
msgid "ubuntu-bug postgresql"
12306
msgstr ""
12307
12308
#: serverguide/C/reporting-bugs.xml:79(screen)
12309
#, no-wrap
12310
msgid ""
12311
"\n"
12312
"<placeholder-1/>\n"
12313
"\n"
12314
"*** Collecting problem information\n"
12315
"\n"
12316
"The collected information can be sent to the developers to improve the\n"
12317
"application. This might take a few minutes.\n"
12318
"..........\n"
12319
"\n"
12320
"*** Send problem report to the developers?\n"
12321
"\n"
12322
"After the problem report has been sent, please fill out the form in the\n"
12323
"automatically opened web browser.\n"
12324
"\n"
12325
"What would you like to do? Your options are:\n"
12326
" S: Send report (1.7 KiB)\n"
12327
" V: View report\n"
12328
" K: Keep report file for sending later or copying to somewhere else\n"
12329
" C: Cancel\n"
12330
"Please choose (S/V/K/C):\n"
12331
msgstr ""
12332
12333
#: serverguide/C/reporting-bugs.xml:101(para)
12334
msgid "The options available are:"
12335
msgstr ""
12336
12337
#: serverguide/C/reporting-bugs.xml:108(para)
12338
msgid ""
12339
"<emphasis role=\"bold\">Send Report</emphasis> Selecting Send Report submits "
12340
"the collected information to Launchpad as part of the the process of filing "
12341
"a bug report. You will be given the opportunity to describe the situation "
12342
"that led up to the occurrance of the bug."
12343
msgstr ""
12344
12345
#: serverguide/C/reporting-bugs.xml:115(screen)
12346
#, no-wrap
12347
msgid ""
12348
"\n"
12349
"*** Uploading problem information\n"
12350
"\n"
12351
"The collected information is being sent to the bug tracking system.\n"
12352
"This might take a few minutes.\n"
12353
"91%\n"
12354
"\n"
12355
"*** To continue, you must visit the following URL:\n"
12356
"\n"
12357
" https://bugs.launchpad.net/ubuntu/+source/postgresql-"
12358
"8.4/+filebug/kc6eSnTLnLxF8u0t3e56EukFeqJ?\n"
12359
"\n"
12360
"You can launch a browser now, or copy this URL into a browser on another\n"
12361
"computer.\n"
12362
"\n"
12363
"Choices:\n"
12364
" 1: Launch a browser now\n"
12365
" C: Cancel\n"
12366
"Please choose (1/C):\n"
12367
msgstr ""
12368
12369
#: serverguide/C/reporting-bugs.xml:135(para)
12370
msgid ""
12371
"If you choose to start a browser, by default the text based web browser "
12372
"<application>w3m</application> will be used to finish filing the bug report. "
12373
"Alternately, you can copy the given URL to a currently running web browser."
12374
msgstr ""
12375
12376
#: serverguide/C/reporting-bugs.xml:144(para)
12377
msgid ""
12378
"<emphasis role=\"bold\">View Report</emphasis> Selecting View Report causes "
12379
"the collected information to be displayed to the terminal for review."
12380
msgstr ""
12381
12382
#: serverguide/C/reporting-bugs.xml:150(screen)
12383
#, no-wrap
12384
msgid ""
12385
"\n"
12386
"Package: postgresql 8.4.2-2\n"
12387
"PackageArchitecture: all\n"
12388
"Tags: lucid\n"
12389
"ProblemType: Bug\n"
12390
"ProcEnviron:\n"
12391
" LANG=en_US.UTF-8\n"
12392
" SHELL=/bin/bash\n"
12393
"Uname: Linux 2.6.32-16-server x86_64\n"
12394
"Dependencies:\n"
12395
" adduser 3.112ubuntu1\n"
12396
" base-files 5.0.0ubuntu10\n"
12397
" base-passwd 3.5.22\n"
12398
" coreutils 7.4-2ubuntu2\n"
12399
"...\n"
12400
msgstr ""
12401
12402
#: serverguide/C/reporting-bugs.xml:167(para)
12403
msgid ""
12404
"After viewing the report, you will be brought back to the same menu asking "
12405
"what you would like to do with the report."
12406
msgstr ""
12407
12408
#: serverguide/C/reporting-bugs.xml:174(para)
12409
msgid ""
12410
"<emphasis role=\"bold\">Keep Report File</emphasis> Selecting Keep Report "
12411
"File causes the gathered information to be written to a file. This file can "
12412
"then be used to later file a bug report or transferred to a different Ubuntu "
12413
"system for reporting. To submit the report file, simply give it as an "
12414
"argument to the ubuntu-bug command:"
12415
msgstr ""
12416
12417
#: serverguide/C/reporting-bugs.xml:189(userinput)
12418
#, no-wrap
12419
msgid "k"
12420
msgstr ""
12421
12422
#: serverguide/C/reporting-bugs.xml:192(command)
12423
msgid "ubuntu-bug /tmp/apport.postgresql.v4MQas.apport"
12424
msgstr ""
12425
12426
#: serverguide/C/reporting-bugs.xml:183(screen)
12427
#, no-wrap
12428
msgid ""
12429
"\n"
12430
"What would you like to do? Your options are:\n"
12431
" S: Send report (1.7 KiB)\n"
12432
" V: View report\n"
12433
" K: Keep report file for sending later or copying to somewhere else\n"
12434
" C: Cancel\n"
12435
"Please choose (S/V/K/C): <placeholder-1/>\n"
12436
"Problem report file: /tmp/apport.postgresql.v4MQas.apport\n"
12437
"\n"
12438
"<placeholder-2/>\n"
12439
"\n"
12440
"*** Send problem report to the developers?\n"
12441
"...\n"
12442
msgstr ""
12443
12444
#: serverguide/C/reporting-bugs.xml:200(para)
12445
msgid ""
12446
"<emphasis role=\"bold\">Cancel</emphasis> Selecting Cancel causes the "
12447
"collected information to be discarded."
12448
msgstr ""
12449
12450
#: serverguide/C/reporting-bugs.xml:210(title)
12451
msgid "Reporting Application Crashes"
12452
msgstr ""
12453
12454
#: serverguide/C/reporting-bugs.xml:212(para)
12455
msgid ""
12456
"The software package that provides the ubuntu-bug utility, "
12457
"<application>apport</application>, can be configured to trigger when "
12458
"applications crash. This is disabled by default, as capturing a crash can be "
12459
"resource intensive depending on how much memory the application that crashed "
12460
"was using as apport captures and processes the core dump."
12461
msgstr ""
12462
12463
#: serverguide/C/reporting-bugs.xml:221(para)
12464
msgid ""
12465
"Configuring apport to capture information about crashing applications "
12466
"requires a couple of steps. First, <application>gdb</application> needs to "
12467
"be installed; it is not installed by default in Ubuntu Server Edition."
12468
msgstr ""
12469
12470
#: serverguide/C/reporting-bugs.xml:229(command)
12471
msgid "sudo apt-get install gdb"
12472
msgstr ""
12473
12474
#: serverguide/C/reporting-bugs.xml:232(para)
12475
msgid ""
12476
"See <xref linkend=\"package-management\"/> for more information about "
12477
"managing packages in Ubuntu."
12478
msgstr ""
12479
12480
#: serverguide/C/reporting-bugs.xml:237(para)
12481
msgid ""
12482
"Once you have ensured that gdb is installed, open the file "
12483
"<filename>/etc/default/apport</filename> in your text editor, and change the "
12484
"<emphasis>enabled</emphasis> setting to be <emphasis "
12485
"role=\"bold\">1</emphasis> like so:"
12486
msgstr ""
12487
12488
#: serverguide/C/reporting-bugs.xml:244(programlisting)
12489
#, no-wrap
12490
msgid ""
12491
"\n"
12492
"# set this to 0 to disable apport, or to 1 to enable it\n"
12493
"# you can temporarily override this with\n"
12494
"# sudo service apport start force_start=1\n"
12495
"enabled=<userinput>1</userinput>\n"
12496
"\n"
12497
"# set maximum core dump file size (default: 209715200 bytes == 200 MB)\n"
12498
"maxsize=209715200\n"
12499
msgstr ""
12500
12501
#: serverguide/C/reporting-bugs.xml:254(para)
12502
msgid ""
12503
"Once you have completed editing <filename>/etc/default/apport</filename>, "
12504
"start the apport service:"
12505
msgstr ""
12506
12507
#: serverguide/C/reporting-bugs.xml:261(command)
12508
msgid "sudo start apport"
12509
msgstr ""
12510
12511
#: serverguide/C/reporting-bugs.xml:264(para)
12512
msgid ""
12513
"After an application crashes, use the <application>apport-cli</application> "
12514
"command to search for the existing saved crash report information:"
12515
msgstr ""
12516
12517
#: serverguide/C/reporting-bugs.xml:271(command)
12518
msgid "apport-cli"
12519
msgstr ""
12520
12521
#: serverguide/C/reporting-bugs.xml:270(screen)
12522
#, no-wrap
12523
msgid ""
12524
"\n"
12525
"<placeholder-1/>\n"
12526
"\n"
12527
"*** dash closed unexpectedly on 2010-03-11 at 21:40:59.\n"
12528
"\n"
12529
"If you were not doing anything confidential (entering passwords or other\n"
12530
"private information), you can help to improve the application by\n"
12531
"reporting\n"
12532
"the problem.\n"
12533
"\n"
12534
"What would you like to do? Your options are:\n"
12535
" R: Report Problem...\n"
12536
" I: Cancel and ignore future crashes of this program version\n"
12537
" C: Cancel\n"
12538
"Please choose (R/I/C):\n"
12539
msgstr ""
12540
12541
#: serverguide/C/reporting-bugs.xml:287(para)
12542
msgid ""
12543
"Selecting <emphasis>Report Problem</emphasis> will walk you through similar "
12544
"steps as when using ubuntu-bug. One important difference is that a crash "
12545
"report will be marked as private when filed on Launchpad, meaning that it "
12546
"will be visible to only a limited set of bug triagers. These triagers will "
12547
"review the gathered data for private information before making the bug "
12548
"report publicly visible."
12549
msgstr ""
12550
12551
#: serverguide/C/reporting-bugs.xml:307(para)
12552
msgid ""
12553
"See the <ulink "
12554
"url=\"https://help.ubuntu.com/community/ReportingBugs\">Reporting "
12555
"Bugs</ulink> Ubuntu wiki page."
12556
msgstr ""
12557
12558
#: serverguide/C/reporting-bugs.xml:313(para)
12559
msgid ""
12560
"Also, the <ulink url=\"https://wiki.ubuntu.com/Apport\">Apport</ulink> page "
12561
"has some useful information. Though some of it pertains to using a GUI."
12562
msgstr ""
12563
12564
#: serverguide/C/remote-administration.xml:13(title)
12565
msgid "Remote Administration"
12566
msgstr "Remote Administration"
12567
12568
#: serverguide/C/remote-administration.xml:14(para)
12569
msgid ""
12570
"There are many ways to remotely administer a Linux server. This chapter will "
12571
"cover one of the most popular <application>SSH</application> as well as "
12572
"<application>eBox</application>, a web based administration framework."
12573
msgstr ""
12574
"There are many ways to remotely administer a Linux server. This chapter will "
12575
"cover one of the most popular <application>SSH</application> as well as "
12576
"<application>eBox</application>, a Web based administration framework."
12577
12578
#: serverguide/C/remote-administration.xml:23(para)
12579
msgid ""
12580
"This section of the Ubuntu Server Guide introduces a powerful collection of "
12581
"tools for the remote control of networked computers and transfer of data "
12582
"between networked computers, called <emphasis>OpenSSH</emphasis>. You will "
12583
"also learn about some of the configuration settings possible with the "
12584
"OpenSSH server application and how to change them on your Ubuntu system."
12585
msgstr ""
12586
"This section of the Ubuntu Server Guide introduces a powerful collection of "
12587
"tools for the remote control of networked computers and transfer of data "
12588
"between networked computers, called <emphasis>OpenSSH</emphasis>. You will "
12589
"also learn about some of the configuration settings possible with the "
12590
"OpenSSH server application and how to change them on your Ubuntu system."
12591
12592
#: serverguide/C/remote-administration.xml:30(para)
12593
msgid ""
12594
"OpenSSH is a freely available version of the Secure Shell (SSH) protocol "
12595
"family of tools for remotely controlling a computer or transferring files "
12596
"between computers. Traditional tools used to accomplish these functions, "
12597
"such as <application>telnet</application> or <application>rcp</application>, "
12598
"are insecure and transmit the user's password in cleartext when used. "
12599
"OpenSSH provides a server daemon and client tools to facilitate secure, "
12600
"encrypted remote control and file transfer operations, effectively replacing "
12601
"the legacy tools."
12602
msgstr ""
12603
"OpenSSH is a freely available version of the Secure Shell (SSH) protocol "
12604
"family of tools for remotely controlling a computer or transferring files "
12605
"between computers. Traditional tools used to accomplish these functions, "
12606
"such as <application>telnet</application> or <application>rcp</application>, "
12607
"are insecure and transmit the user's password in cleartext when used. "
12608
"OpenSSH provides a server daemon and client tools to facilitate secure, "
12609
"encrypted remote control and file transfer operations, effectively replacing "
12610
"the legacy tools."
12611
12612
#: serverguide/C/remote-administration.xml:39(para)
12613
msgid ""
12614
"The OpenSSH server component, <application>sshd</application>, listens "
12615
"continuously for client connections from any of the client tools. When a "
12616
"connection request occurs, <application>sshd</application> sets up the "
12617
"correct connection depending on the type of client tool connecting. For "
12618
"example, if the remote computer is connecting with the "
12619
"<application>ssh</application> client application, the OpenSSH server sets "
12620
"up a remote control session after authentication. If a remote user connects "
12621
"to an OpenSSH server with <application>scp</application>, the OpenSSH server "
12622
"daemon initiates a secure copy of files between the server and client after "
12623
"authentication. OpenSSH can use many authentication methods, including plain "
12624
"password, public key, and <application>Kerberos</application> tickets."
12625
msgstr ""
12626
"The OpenSSH server component, <application>sshd</application>, listens "
12627
"continuously for client connections from any of the client tools. When a "
12628
"connection request occurs, <application>sshd</application> sets up the "
12629
"correct connection depending on the type of client tool connecting. For "
12630
"example, if the remote computer is connecting with the "
12631
"<application>ssh</application> client application, the OpenSSH server sets "
12632
"up a remote control session after authentication. If a remote user connects "
12633
"to an OpenSSH server with <application>scp</application>, the OpenSSH server "
12634
"daemon initiates a secure copy of files between the server and client after "
12635
"authentication. OpenSSH can use many authentication methods, including plain "
12636
"password, public key, and <application>Kerberos</application> tickets."
12637
12638
#: serverguide/C/remote-administration.xml:53(para)
12639
msgid ""
12640
"Installation of the OpenSSH client and server applications is simple. To "
12641
"install the OpenSSH client applications on your Ubuntu system, use this "
12642
"command at a terminal prompt:"
12643
msgstr ""
12644
"Installation of the OpenSSH client and server applications is simple. To "
12645
"install the OpenSSH client applications on your Ubuntu system, use this "
12646
"command at a terminal prompt:"
12647
12648
#: serverguide/C/remote-administration.xml:59(command)
12649
msgid "sudo apt-get install openssh-client"
12650
msgstr "sudo apt-get install openssh-client"
12651
12652
#: serverguide/C/remote-administration.xml:61(para)
12653
msgid ""
12654
"To install the OpenSSH server application, and related support files, use "
12655
"this command at a terminal prompt:"
12656
msgstr ""
12657
"To install the OpenSSH server application, and related support files, use "
12658
"this command at a terminal prompt:"
12659
12660
#: serverguide/C/remote-administration.xml:66(command)
12661
msgid "sudo apt-get install openssh-server"
12662
msgstr "sudo apt-get install openssh-server"
12663
12664
#: serverguide/C/remote-administration.xml:68(para)
12665
msgid ""
12666
"The <application>openssh-server</application> package can also be selected "
12667
"to install during the Server Edition installation process."
12668
msgstr ""
12669
"The <application>openssh-server</application> package can also be selected "
12670
"to install during the Server Edition installation process."
12671
12672
#: serverguide/C/remote-administration.xml:75(para)
12673
msgid ""
12674
"You may configure the default behavior of the OpenSSH server application, "
12675
"<application>sshd</application>, by editing the file "
12676
"<filename>/etc/ssh/sshd_config</filename>. For information about the "
12677
"configuration directives used in this file, you may view the appropriate "
12678
"manual page with the following command, issued at a terminal prompt:"
12679
msgstr ""
12680
"You may configure the default behaviour of the OpenSSH server application, "
12681
"<application>sshd</application>, by editing the file "
12682
"<filename>/etc/ssh/sshd_config</filename>. For information about the "
12683
"configuration directives used in this file, you may view the appropriate "
12684
"manual page with the following command, issued at a terminal prompt:"
12685
12686
#: serverguide/C/remote-administration.xml:83(command)
12687
msgid "man sshd_config"
12688
msgstr "man sshd_config"
12689
12690
#: serverguide/C/remote-administration.xml:85(para)
12691
msgid ""
12692
"There are many directives in the <application>sshd</application> "
12693
"configuration file controlling such things as communication settings and "
12694
"authentication modes. The following are examples of configuration directives "
12695
"that can be changed by editing the <filename>/etc/ssh/sshd_config</filename> "
12696
"file."
12697
msgstr ""
12698
"There are many directives in the <application>sshd</application> "
12699
"configuration file controlling such things as communication settings and "
12700
"authentication modes. The following are examples of configuration directives "
12701
"that can be changed by editing the <filename>/etc/ssh/sshd_config</filename> "
12702
"file."
12703
12704
#: serverguide/C/remote-administration.xml:92(para)
12705
msgid ""
12706
"Prior to editing the configuration file, you should make a copy of the "
12707
"original file and protect it from writing so you will have the original "
12708
"settings as a reference and to reuse as necessary."
12709
msgstr ""
12710
"Prior to editing the configuration file, you should make a copy of the "
12711
"original file and protect it from writing so you will have the original "
12712
"settings as a reference and to reuse as necessary."
12713
12714
#: serverguide/C/remote-administration.xml:96(para)
12715
msgid ""
12716
"Copy the <filename>/etc/ssh/sshd_config</filename> file and protect it from "
12717
"writing with the following commands, issued at a terminal prompt:"
12718
msgstr ""
12719
"Copy the <filename>/etc/ssh/sshd_config</filename> file and protect it from "
12720
"writing with the following commands, issued at a terminal prompt:"
12721
12722
#: serverguide/C/remote-administration.xml:101(command)
12723
msgid "sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original"
12724
msgstr "sudo cp /etc/ssh/sshd_config /etc/ssh/sshd_config.original"
12725
12726
#: serverguide/C/remote-administration.xml:102(command)
12727
msgid "sudo chmod a-w /etc/ssh/sshd_config.original"
12728
msgstr "sudo chmod a-w /etc/ssh/sshd_config.original"
12729
12730
#: serverguide/C/remote-administration.xml:104(para)
12731
msgid ""
12732
"The following are examples of configuration directives you may change:"
12733
msgstr ""
12734
"The following are examples of configuration directives you may change:"
12735
12736
#: serverguide/C/remote-administration.xml:109(para)
12737
msgid ""
12738
"To set your OpenSSH to listen on TCP port 2222 instead of the default TCP "
12739
"port 22, change the Port directive as such:"
12740
msgstr ""
12741
"To set your OpenSSH to listen on TCP port 2222 instead of the default TCP "
12742
"port 22, change the Port directive as such:"
12743
12744
#: serverguide/C/remote-administration.xml:113(para)
12745
msgid "Port 2222"
12746
msgstr "Port 2222"
12747
12748
#: serverguide/C/remote-administration.xml:118(para)
12749
msgid ""
12750
"To have <application>sshd</application> allow public key-based login "
12751
"credentials, simply add or modify the line:"
12752
msgstr ""
12753
"To have <application>sshd</application> allow public key-based login "
12754
"credentials, simply add or modify the line:"
12755
12756
#: serverguide/C/remote-administration.xml:122(para)
12757
msgid "PubkeyAuthentication yes"
12758
msgstr "PubkeyAuthentication yes"
12759
12760
#: serverguide/C/remote-administration.xml:125(para)
12761
msgid ""
12762
"In the <filename>/etc/ssh/sshd_config</filename> file, or if already "
12763
"present, ensure the line is not commented out."
12764
msgstr ""
12765
"In the <filename>/etc/ssh/sshd_config</filename> file, or if already "
12766
"present, ensure the line is not commented out."
12767
12768
#: serverguide/C/remote-administration.xml:131(para)
12769
msgid ""
12770
"To make your OpenSSH server display the contents of the "
12771
"<filename>/etc/issue.net</filename> file as a pre-login banner, simply add "
12772
"or modify the line:"
12773
msgstr ""
12774
"To make your OpenSSH server display the contents of the "
12775
"<filename>/etc/issue.net</filename> file as a pre-login banner, simply add "
12776
"or modify the line:"
12777
12778
#: serverguide/C/remote-administration.xml:136(para)
12779
msgid "Banner /etc/issue.net"
12780
msgstr "Banner /etc/issue.net"
12781
12782
#: serverguide/C/remote-administration.xml:139(para)
12783
msgid "In the <filename>/etc/ssh/sshd_config</filename> file."
12784
msgstr "In the <filename>/etc/ssh/sshd_config</filename> file."
12785
12786
#: serverguide/C/remote-administration.xml:144(para)
12787
msgid ""
12788
"After making changes to the <filename>/etc/ssh/sshd_config</filename> file, "
12789
"save the file, and restart the <application>sshd</application> server "
12790
"application to effect the changes using the following command at a terminal "
12791
"prompt:"
12792
msgstr ""
12793
"After making changes to the <filename>/etc/ssh/sshd_config</filename> file, "
12794
"save the file, and restart the <application>sshd</application> server "
12795
"application to effect the changes using the following command at a terminal "
12796
"prompt:"
12797
12798
#: serverguide/C/remote-administration.xml:153(para)
12799
msgid ""
12800
"Many other configuration directives for <application>sshd</application> are "
12801
"available for changing the server application's behavior to fit your needs. "
12802
"Be advised, however, if your only method of access to a server is "
12803
"<application>ssh</application>, and you make a mistake in configuring "
12804
"<application>sshd</application> via the "
12805
"<filename>/etc/ssh/sshd_config</filename> file, you may find you are locked "
12806
"out of the server upon restarting it, or that the "
12807
"<application>sshd</application> server refuses to start due to an incorrect "
12808
"configuration directive, so be extra careful when editing this file on a "
12809
"remote server."
12810
msgstr ""
12811
"Many other configuration directives for <application>sshd</application> are "
12812
"available for changing the server application's behaviour to fit your needs. "
12813
"Be advised, however, if your only method of access to a server is "
12814
"<application>ssh</application>, and you make a mistake in configuring "
12815
"<application>sshd</application> via the "
12816
"<filename>/etc/ssh/sshd_config</filename> file, you may find you are locked "
12817
"out of the server upon restarting it, or that the "
12818
"<application>sshd</application> server refuses to start due to an incorrect "
12819
"configuration directive, so be extra careful when editing this file on a "
12820
"remote server."
12821
12822
#: serverguide/C/remote-administration.xml:168(title)
12823
msgid "SSH Keys"
12824
msgstr "SSH Keys"
12825
12826
#: serverguide/C/remote-administration.xml:169(para)
12827
msgid ""
12828
"SSH <emphasis>keys</emphasis> allow authentication between two hosts without "
12829
"the need of a password. SSH key authentication uses two keys a "
12830
"<emphasis>private</emphasis> key and a <emphasis>public</emphasis> key."
12831
msgstr ""
12832
"SSH <emphasis>keys</emphasis> allow authentication between two hosts without "
12833
"the need of a password. SSH key authentication uses two keys a "
12834
"<emphasis>private</emphasis> key and a <emphasis>public</emphasis> key."
12835
12836
#: serverguide/C/remote-administration.xml:173(para)
12837
msgid "To generate the keys, from a terminal prompt enter:"
12838
msgstr "To generate the keys, from a terminal prompt enter:"
12839
12840
#: serverguide/C/remote-administration.xml:177(command)
12841
msgid "ssh-keygen -t dsa"
12842
msgstr "ssh-keygen -t dsa"
12843
12844
#: serverguide/C/remote-administration.xml:179(para)
12845
msgid ""
12846
"This will generate the keys using a <emphasis>DSA</emphasis> authentication "
12847
"identity of the user. During the process you will be prompted for a "
12848
"password. Simply hit <emphasis>Enter</emphasis> when prompted to create the "
12849
"key."
12850
msgstr ""
12851
"This will generate the keys using a <emphasis>DSA</emphasis> authentication "
12852
"identity of the user. During the process you will be prompted for a "
12853
"password. Simply hit <emphasis>Enter</emphasis> when prompted to create the "
12854
"key."
12855
12856
#: serverguide/C/remote-administration.xml:183(para)
12857
msgid ""
12858
"By default the <emphasis>public</emphasis> key is saved in the file "
12859
"<filename>~/.ssh/id_dsa.pub</filename>, while "
12860
"<filename>~/.ssh/id_dsa</filename> is the <emphasis>private</emphasis> key. "
12861
"Now copy the <filename>id_dsa.pub</filename> file to the remote host and "
12862
"append it to <filename>~/.ssh/authorized_keys</filename> by entering:"
12863
msgstr ""
12864
"By default the <emphasis>public</emphasis> key is saved in the file "
12865
"<filename>~/.ssh/id_dsa.pub</filename>, while "
12866
"<filename>~/.ssh/id_dsa</filename> is the <emphasis>private</emphasis> key. "
12867
"Now copy the <filename>id_dsa.pub</filename> file to the remote host and "
12868
"append it to <filename>~/.ssh/authorized_keys</filename> by entering:"
12869
12870
#: serverguide/C/remote-administration.xml:189(command)
12871
msgid "ssh-copy-id username@remotehost"
12872
msgstr "ssh-copy-id username@remotehost"
12873
12874
#: serverguide/C/remote-administration.xml:191(para)
12875
msgid ""
12876
"Finally, double check the permissions on the "
12877
"<filename>authorized_keys</filename> file, only the authenticated user "
12878
"should have read and write permissions. If the permissions are not correct "
12879
"change them by:"
12880
msgstr ""
12881
"Finally, double check the permissions on the "
12882
"<filename>authorized_keys</filename> file, only the authenticated user "
12883
"should have read and write permissions. If the permissions are not correct "
12884
"change them by:"
12885
12886
#: serverguide/C/remote-administration.xml:196(command)
12887
msgid "chmod 600 .ssh/authorized_keys"
12888
msgstr "chmod 600 .ssh/authorized_keys"
12889
12890
#: serverguide/C/remote-administration.xml:198(para)
12891
msgid ""
12892
"You should now be able to SSH to the host without being prompted for a "
12893
"password."
12894
msgstr ""
12895
"You should now be able to SSH to the host without being prompted for a "
12896
"password."
12897
12898
#: serverguide/C/remote-administration.xml:207(para)
12899
msgid ""
12900
"<ulink url=\"https://help.ubuntu.com/community/SSH\">Ubuntu Wiki SSH</ulink> "
12901
"page."
12902
msgstr ""
12903
12904
#: serverguide/C/remote-administration.xml:213(ulink)
12905
msgid "OpenSSH Website"
12906
msgstr "OpenSSH Website"
12907
12908
#: serverguide/C/remote-administration.xml:218(ulink)
12909
msgid "Advanced OpenSSH Wiki Page"
12910
msgstr "Advanced OpenSSH Wiki Page"
12911
12912
#: serverguide/C/remote-administration.xml:226(title)
12913
msgid "eBox"
12914
msgstr "eBox"
12915
12916
#: serverguide/C/remote-administration.xml:227(para)
12917
msgid ""
12918
"<application>eBox</application> is a web framework used to manage server "
12919
"application configuration. The modular design of eBox allows you to pick and "
12920
"choose which services you want to configure using eBox."
12921
msgstr ""
12922
"<application>eBox</application> is a web framework used to manage server "
12923
"application configuration. The modular design of eBox allows you to pick and "
12924
"choose which services you want to configure using eBox."
12925
12926
#: serverguide/C/remote-administration.xml:234(para)
12927
msgid ""
12928
"The different <application>eBox</application> modules are split into "
12929
"different packages, allowing you to only install those necessary. One way to "
12930
"view the available packages is to enter the following from a terminal:"
12931
msgstr ""
12932
"The different <application>eBox</application> modules are split into "
12933
"different packages, allowing you to only install those necessary. One way to "
12934
"view the available packages is to enter the following from a terminal:"
12935
12936
#: serverguide/C/remote-administration.xml:240(command)
12937
msgid "apt-cache rdepends ebox | uniq"
12938
msgstr "apt-cache rdepends ebox | uniq"
12939
12940
#: serverguide/C/remote-administration.xml:242(para)
12941
msgid ""
12942
"To install the <application>ebox</application> package, which contains the "
12943
"default modules, enter the following:"
12944
msgstr ""
12945
"To install the <application>ebox</application> package, which contains the "
12946
"default modules, enter the following:"
12947
12948
#: serverguide/C/remote-administration.xml:247(command)
12949
msgid "sudo apt-get install ebox"
12950
msgstr "sudo apt-get install ebox"
12951
12952
#: serverguide/C/remote-administration.xml:250(para)
12953
msgid ""
12954
"During the installation you will be asked to supply a password for the ebox "
12955
"user. After installing eBox the web interface can be accessed from: "
12956
"<emphasis>https://yourserver/ebox</emphasis>."
12957
msgstr ""
12958
"During the installation you will be asked to supply a password for the ebox "
12959
"user. After installing eBox the Web interface can be accessed from: "
12960
"<emphasis>https://yourserver/ebox</emphasis>."
12961
12962
#: serverguide/C/remote-administration.xml:259(para)
12963
msgid ""
12964
"An important thing to remember when using <application>eBox</application> is "
12965
"that when configuring most modules there is a <emphasis>Change</emphasis> "
12966
"button that implements the new configuration. After clicking the Change "
12967
"button most, but not all, modules will then need to be "
12968
"<emphasis>Saved</emphasis>. To save the new configuration click on the "
12969
"<quote>Save changes</quote> link in the top right hand corner."
12970
msgstr ""
12971
"An important thing to remember when using <application>eBox</application> is "
12972
"that when configuring most modules there is a <emphasis>Change</emphasis> "
12973
"button that implements the new configuration. After clicking the Change "
12974
"button most, but not all, modules will then need to be "
12975
"<emphasis>Saved</emphasis>. To save the new configuration click on the "
12976
"<quote>Save changes</quote> link in the top right hand corner."
12977
12978
#: serverguide/C/remote-administration.xml:267(para)
12979
msgid ""
12980
"Once you make a change that requires a Save, the link will change from green "
12981
"to red."
12982
msgstr ""
12983
"Once you make a change that requires a Save, the link will change from green "
12984
"to red."
12985
12986
#: serverguide/C/remote-administration.xml:273(title)
12987
msgid "eBox Modules"
12988
msgstr "eBox Modules"
12989
12990
#: serverguide/C/remote-administration.xml:274(para)
12991
msgid ""
12992
"By default all eBox <emphasis>Modules</emphasis> are not enabled, and when a "
12993
"new module is installed it will not be automatically enabled."
12994
msgstr ""
12995
"By default all eBox <emphasis>Modules</emphasis> are not enabled, and when a "
12996
"new module is installed it will not be automatically enabled."
12997
12998
#: serverguide/C/remote-administration.xml:278(para)
12999
msgid ""
13000
"To enable a disabled module click on the <emphasis>Module status</emphasis> "
13001
"link in the left hand menu. Then <emphasis role=\"italic\">check</emphasis> "
13002
"which modules you would like to enable and click the <quote>Save</quote> "
13003
"link."
13004
msgstr ""
13005
"To enable a disabled module click on the <emphasis>Module status</emphasis> "
13006
"link in the left hand menu. Then <emphasis role=\"italic\">check</emphasis> "
13007
"which modules you would like to enable and click the <quote>Save</quote> "
13008
"link."
13009
13010
#: serverguide/C/remote-administration.xml:284(title)
13011
msgid "Default Modules"
13012
msgstr "Default Modules"
13013
13014
#: serverguide/C/remote-administration.xml:285(para)
13015
msgid ""
13016
"This section provides a quick summary of the default "
13017
"<application>eBox</application> modules."
13018
msgstr ""
13019
"This section provides a quick summary of the default "
13020
"<application>eBox</application> modules."
13021
13022
#: serverguide/C/remote-administration.xml:291(para)
13023
msgid ""
13024
"<emphasis>System:</emphasis> contains options allowing configuration of "
13025
"general eBox items."
13026
msgstr ""
13027
"<emphasis>System:</emphasis> contains options allowing configuration of "
13028
"general eBox items."
13029
13030
#: serverguide/C/remote-administration.xml:297(para)
13031
msgid ""
13032
"<emphasis>General:</emphasis> allows you to set the language, port number, "
13033
"and contains a change password form."
13034
msgstr ""
13035
"<emphasis>General:</emphasis> allows you to set the language, port number, "
13036
"and contains a change password form."
13037
13038
#: serverguide/C/remote-administration.xml:303(para)
13039
msgid ""
13040
"<emphasis>Disk Usage:</emphasis> displays a graph detailing information "
13041
"about disk usage."
13042
msgstr ""
13043
"<emphasis>Disk Usage:</emphasis> displays a graph detailing information "
13044
"about disk usage."
13045
13046
#: serverguide/C/remote-administration.xml:309(para)
13047
msgid ""
13048
"<emphasis>Backup:</emphasis> is used to backup "
13049
"<application>eBox</application> configuration information, and the "
13050
"<emphasis>Full Backup</emphasis> option allows you to save all eBox "
13051
"information not included in the <emphasis>Configuration</emphasis> option "
13052
"such as log files."
13053
msgstr ""
13054
"<emphasis>Backup:</emphasis> is used to backup "
13055
"<application>eBox</application> configuration information, and the "
13056
"<emphasis>Full Backup</emphasis> option allows you to save all eBox "
13057
"information not included in the <emphasis>Configuration</emphasis> option "
13058
"such as log files."
13059
13060
#: serverguide/C/remote-administration.xml:317(para)
13061
msgid ""
13062
"<emphasis>Halt/Reboot:</emphasis> will shutdown the system or reboot it."
13063
msgstr ""
13064
"<emphasis>Halt/Reboot:</emphasis> will shutdown the system or reboot it."
13065
13066
#: serverguide/C/remote-administration.xml:322(para)
13067
msgid ""
13068
"<emphasis>Bug Report:</emphasis> creates a file containing details helpful "
13069
"when reporting bugs to the eBox developers."
13070
msgstr ""
13071
"<emphasis>Bug Report:</emphasis> creates a file containing details helpful "
13072
"when reporting bugs to the eBox developers."
13073
13074
#: serverguide/C/remote-administration.xml:330(para)
13075
msgid ""
13076
"<emphasis>Logs:</emphasis> allows <application>eBox</application> logs to be "
13077
"queried depending on the purge time configured."
13078
msgstr ""
13079
"<emphasis>Logs:</emphasis> allows <application>eBox</application> logs to be "
13080
"queried depending on the purge time configured."
13081
13082
#: serverguide/C/remote-administration.xml:336(para)
13083
msgid ""
13084
"<emphasis>Events:</emphasis> this module has the ability to send alerts "
13085
"through rss, jabber, and log file."
13086
msgstr ""
13087
"<emphasis>Events:</emphasis> this module has the ability to send alerts "
13088
"through rss, jabber, and log file."
13089
13090
#: serverguide/C/remote-administration.xml:343(emphasis)
13091
msgid "Available Events:"
13092
msgstr "Available Events:"
13093
13094
#: serverguide/C/remote-administration.xml:347(para)
13095
msgid ""
13096
"<emphasis>Free Storage Space:</emphasis> will send alert if free disk space "
13097
"drops below a configured percentage, 10% by default."
13098
msgstr ""
13099
"<emphasis>Free Storage Space:</emphasis> will send alert if free disk space "
13100
"drops below a configured percentage, 10% by default."
13101
13102
#: serverguide/C/remote-administration.xml:353(para)
13103
msgid ""
13104
"<emphasis>Log Observer:</emphasis> sends an alert when a configured logger "
13105
"has logged something."
13106
msgstr ""
13107
"<emphasis>Log Observer:</emphasis> sends an alert when a configured logger "
13108
"has logged something."
13109
13110
#: serverguide/C/remote-administration.xml:359(para)
13111
msgid ""
13112
"<emphasis>RAID:</emphasis> will monitor the RAID system and send alerts if "
13113
"any issues arise."
13114
msgstr ""
13115
"<emphasis>RAID:</emphasis> will monitor the RAID system and send alerts if "
13116
"any issues arise."
13117
13118
#: serverguide/C/remote-administration.xml:365(para)
13119
msgid ""
13120
"<emphasis>Service:</emphasis> sends alerts if a service restarts multiple "
13121
"times in a short time period."
13122
msgstr ""
13123
"<emphasis>Service:</emphasis> sends alerts if a service restarts multiple "
13124
"times in a short time period."
13125
13126
#: serverguide/C/remote-administration.xml:371(para)
13127
msgid ""
13128
"<emphasis>State:</emphasis> alerts on the state of "
13129
"<application>eBox</application>, either up or down."
13130
msgstr ""
13131
"<emphasis>State:</emphasis> alerts on the state of "
13132
"<application>eBox</application>, either up or down."
13133
13134
#: serverguide/C/remote-administration.xml:380(emphasis)
13135
msgid "Dispatchers:"
13136
msgstr "Dispatchers:"
13137
13138
#: serverguide/C/remote-administration.xml:384(para)
13139
msgid ""
13140
"<emphasis>Log:</emphasis> this dispatcher will send event messages to the "
13141
"<application>eBox</application> log file "
13142
"<filename>/var/log/ebox/ebox.log</filename>."
13143
msgstr ""
13144
"<emphasis>Log:</emphasis> this dispatcher will send event messages to the "
13145
"<application>eBox</application> log file "
13146
"<filename>/var/log/ebox/ebox.log</filename>."
13147
13148
#: serverguide/C/remote-administration.xml:391(para)
13149
msgid ""
13150
"<emphasis>Jabber:</emphasis> before enabling this dispatcher you must first "
13151
"configure it by clicking on the <quote>Configure</quote> icon."
13152
msgstr ""
13153
"<emphasis>Jabber:</emphasis> before enabling this dispatcher you must first "
13154
"configure it by clicking on the <quote>Configure</quote> icon."
13155
13156
#: serverguide/C/remote-administration.xml:397(para)
13157
msgid ""
13158
"<emphasis>RSS:</emphasis> once this dispatcher is configured you can "
13159
"subscribe to the link in order to view event alerts."
13160
msgstr ""
13161
"<emphasis>RSS:</emphasis> once this dispatcher is configured you can "
13162
"subscribe to the link in order to view event alerts."
13163
13164
#: serverguide/C/remote-administration.xml:410(title)
13165
msgid "Additional Modules"
13166
msgstr "Additional Modules"
13167
13168
#: serverguide/C/remote-administration.xml:411(para)
13169
msgid ""
13170
"Here is a quick description of other available "
13171
"<application>eBox</application> modules:"
13172
msgstr ""
13173
"Here is a quick description of other available "
13174
"<application>eBox</application> modules:"
13175
13176
#: serverguide/C/remote-administration.xml:416(para)
13177
msgid ""
13178
"<emphasis>Network:</emphasis> allows configuration of the server's network "
13179
"options through eBox."
13180
msgstr ""
13181
"<emphasis>Network:</emphasis> allows configuration of the server's network "
13182
"options through eBox."
13183
13184
#: serverguide/C/remote-administration.xml:422(para)
13185
msgid ""
13186
"<emphasis>Firewall:</emphasis> configures firewall options for the eBox host."
13187
msgstr ""
13188
"<emphasis>Firewall:</emphasis> configures firewall options for the eBox host."
13189
13190
#: serverguide/C/remote-administration.xml:427(para)
13191
msgid ""
13192
"<emphasis>UsersandGroups:</emphasis> this module will manage users and "
13193
"groups contained in an <application>OpenLDAP</application> LDAP directory."
13194
msgstr ""
13195
"<emphasis>UsersandGroups:</emphasis> this module will manage users and "
13196
"groups contained in an <application>OpenLDAP</application> LDAP directory."
13197
13198
#: serverguide/C/remote-administration.xml:433(para)
13199
msgid ""
13200
"<emphasis>DHCP:</emphasis> provides an interface for configuring a DHCP "
13201
"server."
13202
msgstr ""
13203
"<emphasis>DHCP:</emphasis> provides an interface for configuring a DHCP "
13204
"server."
13205
13206
#: serverguide/C/remote-administration.xml:438(para)
13207
msgid ""
13208
"<emphasis>DNS:</emphasis> provides <application>BIND9</application> DNS "
13209
"server configuration options."
13210
msgstr ""
13211
"<emphasis>DNS:</emphasis> provides <application>BIND9</application> DNS "
13212
"server configuration options."
13213
13214
#: serverguide/C/remote-administration.xml:444(para)
13215
msgid ""
13216
"<emphasis>Objects:</emphasis> allow configuration of eBox <emphasis>Network "
13217
"Objects</emphasis>, which allow you to assign a name to an IP address or "
13218
"group of IPs."
13219
msgstr ""
13220
"<emphasis>Objects:</emphasis> allow configuration of eBox <emphasis>Network "
13221
"Objects</emphasis>, which allow you to assign a name to an IP address or "
13222
"group of IPs."
13223
13224
#: serverguide/C/remote-administration.xml:451(para)
13225
msgid ""
13226
"<emphasis>Services:</emphasis> displays configuration information for "
13227
"services that are available to the network."
13228
msgstr ""
13229
"<emphasis>Services:</emphasis> displays configuration information for "
13230
"services that are available to the network."
13231
13232
#: serverguide/C/remote-administration.xml:457(para)
13233
msgid ""
13234
"<emphasis>Squid:</emphasis> configuration options for the "
13235
"<application>Squid</application> proxy server."
13236
msgstr ""
13237
"<emphasis>Squid:</emphasis> configuration options for the "
13238
"<application>Squid</application> proxy server."
13239
13240
#: serverguide/C/remote-administration.xml:463(para)
13241
msgid ""
13242
"<emphasis>CA:</emphasis> configures a Certificate Authority for the server."
13243
msgstr ""
13244
"<emphasis>CA:</emphasis> configures a Certificate Authority for the server."
13245
13246
#: serverguide/C/remote-administration.xml:468(para)
13247
msgid "<emphasis>NTP:</emphasis> set Network Time Protocol options."
13248
msgstr "<emphasis>NTP:</emphasis> set Network Time Protocol options."
13249
13250
#: serverguide/C/remote-administration.xml:473(para)
13251
msgid "<emphasis>Printers:</emphasis> allows the configuration of printers."
13252
msgstr "<emphasis>Printers:</emphasis> allows the configuration of printers."
13253
13254
#: serverguide/C/remote-administration.xml:478(para)
13255
msgid "<emphasis>Samba:</emphasis> configuration options for Samba."
13256
msgstr "<emphasis>Samba:</emphasis> configuration options for Samba."
13257
13258
#: serverguide/C/remote-administration.xml:483(para)
13259
msgid ""
13260
"<emphasis>OpenVPN:</emphasis> setup options for OpenVPN Virtual Private "
13261
"Network application."
13262
msgstr ""
13263
"<emphasis>OpenVPN:</emphasis> setup options for OpenVPN Virtual Private "
13264
"Network application."
13265
13266
#: serverguide/C/remote-administration.xml:494(para)
13267
msgid ""
13268
"The <ulink url=\"https://help.ubuntu.com/community/eBox\">eBox Ubuntu "
13269
"Wiki</ulink> page has more details."
13270
msgstr ""
13271
13272
#: serverguide/C/remote-administration.xml:499(para)
13273
msgid ""
13274
"For more information also see the <ulink url=\"http://ebox-"
13275
"platform.com/\">eBox Home Page</ulink>."
13276
msgstr ""
13277
13278
#: serverguide/C/package-management.xml:13(title)
13279
msgid "Package Management"
13280
msgstr "Package Management"
13281
13282
#: serverguide/C/package-management.xml:14(para)
13283
msgid ""
13284
"Ubuntu features a comprehensive package management system for the "
13285
"installation, upgrade, configuration, and removal of software. In addition "
13286
"to providing access to an organized base of over 24,000 software packages "
13287
"for your Ubuntu computer, the package management facilities also feature "
13288
"dependency resolution capabilities and software update checking."
13289
msgstr ""
13290
"Ubuntu features a comprehensive package management system for the "
13291
"installation, upgrade, configuration, and removal of software. In addition "
13292
"to providing access to an organised base of over 24,000 software packages "
13293
"for your Ubuntu computer, the package management facilities also feature "
13294
"dependency resolution capabilities and software update checking."
13295
13296
#: serverguide/C/package-management.xml:16(para)
13297
msgid ""
13298
"Several tools are available for interacting with Ubuntu's package management "
13299
"system, from simple command-line utilities which may be easily automated by "
13300
"system administrators, to a simple graphical interface which is easy to use "
13301
"by those new to Ubuntu."
13302
msgstr ""
13303
"Several tools are available for interacting with Ubuntu's package management "
13304
"system, from simple command-line utilities which may be easily automated by "
13305
"system administrators, to a simple graphical interface which is easy to use "
13306
"by those new to Ubuntu."
13307
13308
#: serverguide/C/package-management.xml:21(para)
13309
msgid ""
13310
"Ubuntu's package management system is derived from the same system used by "
13311
"the Debian GNU/Linux distribution. The package files contain all of the "
13312
"necessary files, meta-data, and instructions to implement a particular "
13313
"functionality or software application on your Ubuntu computer."
13314
msgstr ""
13315
"Ubuntu's package management system is derived from the same system used by "
13316
"the Debian GNU/Linux distribution. The package files contain all of the "
13317
"necessary files, meta-data, and instructions to implement a particular "
13318
"functionality or software application on your Ubuntu computer."
13319
13320
#: serverguide/C/package-management.xml:24(para)
13321
msgid ""
13322
"Debian package files typically have the extension '.deb', and typically "
13323
"exist in <emphasis role=\"italics\">repositories</emphasis> which are "
13324
"collections of packages found on various media, such as CD-ROM discs, or "
13325
"online. Packages are normally of the pre-compiled binary format; thus "
13326
"installation is quick and requires no compiling of software."
13327
msgstr ""
13328
"Debian package files typically have the extension '.deb', and typically "
13329
"exist in <emphasis role=\"italics\">repositories</emphasis> which are "
13330
"collections of packages found on various media, such as CD-ROM discs, or "
13331
"online. Packages are normally of the pre-compiled binary format; thus "
13332
"installation is quick and requires no compiling of software."
13333
13334
#: serverguide/C/package-management.xml:27(para)
13335
msgid ""
13336
"Many complex packages use the concept of <emphasis "
13337
"role=\"italics\">dependencies</emphasis>. Dependencies are additional "
13338
"packages required by the principal package in order to function properly. "
13339
"For example, the speech synthesis package "
13340
"<application>Festival</application> depends upon the package "
13341
"<application>libasound2</application>, which is a package supplying the "
13342
"<application>ALSA</application> sound library needed for audio playback. In "
13343
"order for <application>Festival</application> to function, it and all of its "
13344
"dependencies must be installed. The software management tools in Ubuntu will "
13345
"do this automatically."
13346
msgstr ""
13347
"Many complex packages use the concept of <emphasis "
13348
"role=\"italics\">dependencies</emphasis>. Dependencies are additional "
13349
"packages required by the principal package in order to function properly. "
13350
"For example, the speech synthesis package "
13351
"<application>Festival</application> depends upon the package "
13352
"<application>libasound2</application>, which is a package supplying the "
13353
"<application>ALSA</application> sound library needed for audio playback. In "
13354
"order for <application>Festival</application> to function, it and all of its "
13355
"dependencies must be installed. The software management tools in Ubuntu will "
13356
"do this automatically."
13357
13358
#: serverguide/C/package-management.xml:32(title)
13359
msgid "dpkg"
13360
msgstr "dpkg"
13361
13362
#: serverguide/C/package-management.xml:34(para)
13363
msgid ""
13364
"<application>dpkg</application> is a package manager for "
13365
"<emphasis>Debian</emphasis> based systems. It can install, remove, and build "
13366
"packages, but unlike other package management system's it can not "
13367
"automatically download and install packages and their dependencies. This "
13368
"section covers using <application>dpkg</application> to manage locally "
13369
"installed packages:"
13370
msgstr ""
13371
"<application>dpkg</application> is a package manager for "
13372
"<emphasis>Debian</emphasis> based systems. It can install, remove, and build "
13373
"packages, but unlike other package management system's it can not "
13374
"automatically download and install packages and their dependencies. This "
13375
"section covers using <application>dpkg</application> to manage locally "
13376
"installed packages:"
13377
13378
#: serverguide/C/package-management.xml:43(para)
13379
msgid ""
13380
"To list all packages installed on the system, from a terminal prompt enter:"
13381
msgstr ""
13382
"To list all packages installed on the system, from a terminal prompt enter:"
13383
13384
#: serverguide/C/package-management.xml:48(command)
13385
msgid "dpkg -l"
13386
msgstr "dpkg -l"
13387
13388
#: serverguide/C/package-management.xml:54(para)
13389
msgid ""
13390
"Depending on the amount of packages on your system, this can generate a "
13391
"large amount of output. Pipe the output through "
13392
"<application>grep</application> to see if a specific package is installed:"
13393
msgstr ""
13394
"Depending on the amount of packages on your system, this can generate a "
13395
"large amount of output. Pipe the output through "
13396
"<application>grep</application> to see if a specific package is installed:"
13397
13398
#: serverguide/C/package-management.xml:60(command)
13399
msgid "dpkg -l | grep apache2"
13400
msgstr "dpkg -l | grep apache2"
13401
13402
#: serverguide/C/package-management.xml:63(para)
13403
msgid ""
13404
"Replace <emphasis>apache2</emphasis> with any package name, part of a "
13405
"package name, or other regular expression."
13406
msgstr ""
13407
"Replace <emphasis>apache2</emphasis> with any package name, part of a "
13408
"package name, or other regular expression."
13409
13410
#: serverguide/C/package-management.xml:70(para)
13411
msgid ""
13412
"To list the files installed by a package, in this case the "
13413
"<application>ufw</application> package, enter:"
13414
msgstr ""
13415
"To list the files installed by a package, in this case the "
13416
"<application>ufw</application> package, enter:"
13417
13418
#: serverguide/C/package-management.xml:75(command)
13419
msgid "dpkg -L ufw"
13420
msgstr "dpkg -L ufw"
13421
13422
#: serverguide/C/package-management.xml:81(para)
13423
msgid ""
13424
"If you are not sure which package installed a file, <application>dpkg -"
13425
"S</application> may be able to tell you. For example:"
13426
msgstr ""
13427
"If you are not sure which package installed a file, <application>dpkg -"
13428
"S</application> may be able to tell you. For example:"
13429
13430
#: serverguide/C/package-management.xml:87(command)
13431
msgid "dpkg -S /etc/host.conf"
13432
msgstr "dpkg -S /etc/host.conf"
13433
13434
#: serverguide/C/package-management.xml:88(computeroutput)
13435
#, no-wrap
13436
msgid "base-files: /etc/host.conf"
13437
msgstr "base-files: /etc/host.conf"
13438
13439
#: serverguide/C/package-management.xml:91(para)
13440
msgid ""
13441
"The output shows that the <filename>/etc/host.conf</filename> belongs to the "
13442
"<application>base-files</application> package."
13443
msgstr ""
13444
"The output shows that the <filename>/etc/host.conf</filename> belongs to the "
13445
"<application>base-files</application> package."
13446
13447
#: serverguide/C/package-management.xml:96(para)
13448
msgid ""
13449
"Many files are automatically generated during the package install process, "
13450
"and even though they are on the filesystem <command>dpkg -S</command> may "
13451
"not know which package they belong to."
13452
msgstr ""
13453
"Many files are automatically generated during the package install process, "
13454
"and even though they are on the filesystem <command>dpkg -S</command> may "
13455
"not know which package they belong to."
13456
13457
#: serverguide/C/package-management.xml:105(para)
13458
msgid "You can install a local <emphasis>.deb</emphasis> file by entering:"
13459
msgstr "You can install a local <emphasis>.deb</emphasis> file by entering:"
13460
13461
#: serverguide/C/package-management.xml:110(command)
13462
msgid "sudo dpkg -i zip_2.32-1_i386.deb"
13463
msgstr "sudo dpkg -i zip_2.32-1_i386.deb"
13464
13465
#: serverguide/C/package-management.xml:113(para)
13466
msgid ""
13467
"Change <filename>zip_2.32-1_i386.deb</filename> to the actual file name of "
13468
"the local .deb file."
13469
msgstr ""
13470
"Change <filename>zip_2.32-1_i386.deb</filename> to the actual file name of "
13471
"the local .deb file."
13472
13473
#: serverguide/C/package-management.xml:120(para)
13474
msgid "Uninstalling a package can be accomplished by:"
13475
msgstr "Uninstalling a package can be accomplished by:"
13476
13477
#: serverguide/C/package-management.xml:125(command)
13478
msgid "sudo dpkg -r zip"
13479
msgstr "sudo dpkg -r zip"
13480
13481
#: serverguide/C/package-management.xml:129(para)
13482
msgid ""
13483
"Uninstalling packages using <application>dpkg</application>, in most cases, "
13484
"is <emphasis>NOT</emphasis> recommended. It is better to use a package "
13485
"manager that handles dependencies, to ensure that the system is in a "
13486
"consistent state. For example using <command>dpkg -r</command> you can "
13487
"remove the <application>zip</application> package, but any packages that "
13488
"depend on it will still be installed and may no longer function correctly."
13489
msgstr ""
13490
"Uninstalling packages using <application>dpkg</application>, in most cases, "
13491
"is <emphasis>NOT</emphasis> recommended. It is better to use a package "
13492
"manager that handles dependencies, to ensure that the system is in a "
13493
"consistent state. For example using <command>dpkg -r</command> you can "
13494
"remove the <application>zip</application> package, but any packages that "
13495
"depend on it will still be installed and may no longer function correctly."
13496
13497
#: serverguide/C/package-management.xml:140(para)
13498
msgid ""
13499
"For more <application>dpkg</application> options see the man page: "
13500
"<command>man dpkg</command>."
13501
msgstr ""
13502
"For more <application>dpkg</application> options see the man page: "
13503
"<command>man dpkg</command>."
13504
13505
#: serverguide/C/package-management.xml:146(title)
13506
msgid "Apt-Get"
13507
msgstr "Apt-Get"
13508
13509
#: serverguide/C/package-management.xml:147(para)
13510
msgid ""
13511
"The <application>apt-get</application> command is a powerful command-line "
13512
"tool used to work with Ubuntu's <emphasis>Advanced Packaging Tool</emphasis> "
13513
"(APT) performing such functions as installation of new software packages, "
13514
"upgrade of existing software packages, updating of the package list index, "
13515
"and even upgrading the entire Ubuntu system."
13516
msgstr ""
13517
"The <application>apt-get</application> command is a powerful command-line "
13518
"tool used to work with Ubuntu's <emphasis>Advanced Packaging Tool</emphasis> "
13519
"(APT) performing such functions as installation of new software packages, "
13520
"upgrade of existing software packages, updating of the package list index, "
13521
"and even upgrading the entire Ubuntu system."
13522
13523
#: serverguide/C/package-management.xml:150(para)
13524
msgid ""
13525
"Being a simple command-line tool, <application>apt-get</application> has "
13526
"numerous advantages over other package management tools available in Ubuntu "
13527
"for server administrators. Some of these advantages include ease of use over "
13528
"simple terminal connections (SSH) and the ability to be used in system "
13529
"administration scripts, which can in turn be automated by the "
13530
"<application>cron</application> scheduling utility."
13531
msgstr ""
13532
"Being a simple command-line tool, <application>apt-get</application> has "
13533
"numerous advantages over other package management tools available in Ubuntu "
13534
"for server administrators. Some of these advantages include ease of use over "
13535
"simple terminal connections (SSH) and the ability to be used in system "
13536
"administration scripts, which can in turn be automated by the "
13537
"<application>cron</application> scheduling utility."
13538
13539
#: serverguide/C/package-management.xml:157(para)
13540
msgid ""
13541
"<emphasis role=\"bold\">Install a Package</emphasis>: Installation of "
13542
"packages using the <application>apt-get</application> tool is quite simple. "
13543
"For example, to install the network scanner <emphasis "
13544
"role=\"italics\">nmap</emphasis>, type the following: <screen>\n"
13545
"<command>sudo apt-get install nmap</command>\n"
13546
"</screen>"
13547
msgstr ""
13548
"<emphasis role=\"bold\">Install a Package</emphasis>: Installation of "
13549
"packages using the <application>apt-get</application> tool is quite simple. "
13550
"For example, to install the network scanner <emphasis "
13551
"role=\"italics\">nmap</emphasis>, type the following: <screen>\n"
13552
"<command>sudo apt-get install nmap</command>\n"
13553
"</screen>"
13554
13555
#: serverguide/C/package-management.xml:165(para)
13556
msgid ""
13557
"<emphasis role=\"bold\">Remove a Package</emphasis>: Removal of a package or "
13558
"packages is also a straightforward and simple process. To remove the nmap "
13559
"package installed in the previous example, type the following: <screen>\n"
13560
"<command>sudo apt-get remove nmap</command>\n"
13561
"</screen>"
13562
msgstr ""
13563
"<emphasis role=\"bold\">Remove a Package</emphasis>: Removal of a package or "
13564
"packages is also a straightforward and simple process. To remove the nmap "
13565
"package installed in the previous example, type the following: <screen>\n"
13566
"<command>sudo apt-get remove nmap</command>\n"
13567
"</screen>"
13568
13569
#: serverguide/C/package-management.xml:172(para)
13570
msgid ""
13571
"<emphasis role=\"bold\">Multiple Packages</emphasis>: You may specify "
13572
"multiple packages to be installed or removed, separated by spaces."
13573
msgstr ""
13574
"<emphasis role=\"bold\">Multiple Packages</emphasis>: You may specify "
13575
"multiple packages to be installed or removed, separated by spaces."
13576
13577
#: serverguide/C/package-management.xml:175(para)
13578
msgid ""
13579
"Also, adding the <emphasis>--purge</emphasis> options to <command>apt-get "
13580
"remove</command> will remove the package configuration files as well. This "
13581
"may or may not be the desired effect so use with caution."
13582
msgstr ""
13583
"Also, adding the <emphasis>--purge</emphasis> options to <command>apt-get "
13584
"remove</command> will remove the package configuration files as well. This "
13585
"may or may not be the desired effect so use with caution."
13586
13587
#: serverguide/C/package-management.xml:181(para)
13588
msgid ""
13589
"<emphasis role=\"bold\">Update the Package Index</emphasis>: The APT package "
13590
"index is essentially a database of available packages from the repositories "
13591
"defined in the <filename>/etc/apt/sources.list</filename> file. To update "
13592
"the local package index with the latest changes made in repositories, type "
13593
"the following: <screen>\n"
13594
"<command>sudo apt-get update</command>\n"
13595
"</screen>"
13596
msgstr ""
13597
"<emphasis role=\"bold\">Update the Package Index</emphasis>: The APT package "
13598
"index is essentially a database of available packages from the repositories "
13599
"defined in the <filename>/etc/apt/sources.list</filename> file. To update "
13600
"the local package index with the latest changes made in repositories, type "
13601
"the following: <screen>\n"
13602
"<command>sudo apt-get update</command>\n"
13603
"</screen>"
13604
13605
#: serverguide/C/package-management.xml:189(para)
13606
msgid ""
13607
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: Over time, updated "
13608
"versions of packages currently installed on your computer may become "
13609
"available from the package repositories (for example security updates). To "
13610
"upgrade your system, first update your package index as outlined above, and "
13611
"then type: <screen>\n"
13612
"<command>sudo apt-get upgrade</command>\n"
13613
"</screen>"
13614
msgstr ""
13615
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: Over time, updated "
13616
"versions of packages currently installed on your computer may become "
13617
"available from the package repositories (for example security updates). To "
13618
"upgrade your system, first update your package index as outlined above, and "
13619
"then type: <screen>\n"
13620
"<command>sudo apt-get upgrade</command>\n"
13621
"</screen>"
13622
13623
#: serverguide/C/package-management.xml:195(para)
13624
msgid ""
13625
"For information on upgrading to a new Ubuntu release see <xref "
13626
"linkend=\"installing-upgrading\"/>."
13627
msgstr ""
13628
"For information on upgrading to a new Ubuntu release see <xref "
13629
"linkend=\"installing-upgrading\"/>."
13630
13631
#: serverguide/C/package-management.xml:153(para)
13632
msgid ""
13633
"Some examples of popular uses for the <application>apt-get</application> "
13634
"utility: <placeholder-1/>"
13635
msgstr ""
13636
"Some examples of popular uses for the <application>apt-get</application> "
13637
"utility: <placeholder-1/>"
13638
13639
#: serverguide/C/package-management.xml:201(para)
13640
msgid ""
13641
"Actions of the <application>apt-get</application> command, such as "
13642
"installation and removal of packages, are logged in the /var/log/dpkg.log "
13643
"log file."
13644
msgstr ""
13645
"Actions of the <application>apt-get</application> command, such as "
13646
"installation and removal of packages, are logged in the /var/log/dpkg.log "
13647
"log file."
13648
13649
#: serverguide/C/package-management.xml:204(para)
13650
msgid ""
13651
"For further information about the use of <application>APT</application>, "
13652
"read the comprehensive <ulink url=\"http://www.debian.org/doc/user-"
13653
"manuals#apt-howto\">Debian APT User Manual</ulink> or type: <screen>apt-get "
13654
"help</screen>"
13655
msgstr ""
13656
"For further information about the use of <application>APT</application>, "
13657
"read the comprehensive <ulink url=\"http://www.debian.org/doc/user-"
13658
"manuals#apt-howto\">Debian APT User Manual</ulink> or type: <screen>apt-get "
13659
"help</screen>"
13660
13661
#: serverguide/C/package-management.xml:208(title)
13662
msgid "Aptitude"
13663
msgstr "Aptitude"
13664
13665
#: serverguide/C/package-management.xml:209(para)
13666
msgid ""
13667
"<application>Aptitude</application> is a menu-driven, text-based front-end "
13668
"to the <emphasis>Advanced Packaging Tool</emphasis> (APT) system. Many of "
13669
"the common package management functions, such as installation, removal, and "
13670
"upgrade, are performed in <application>Aptitude</application> with single-"
13671
"key commands, which are typically lowercase letters."
13672
msgstr ""
13673
"<application>Aptitude</application> is a menu-driven, text-based front-end "
13674
"to the <emphasis>Advanced Packaging Tool</emphasis> (APT) system. Many of "
13675
"the common package management functions, such as installation, removal, and "
13676
"upgrade, are performed in <application>Aptitude</application> with single-"
13677
"key commands, which are typically lowercase letters."
13678
13679
#: serverguide/C/package-management.xml:212(para)
13680
msgid ""
13681
"<application>Aptitude</application> is best suited for use in a non-"
13682
"graphical terminal environment to ensure proper functioning of the command "
13683
"keys. You may start <application>Aptitude</application> as a normal user "
13684
"with the following command at a terminal prompt: <screen>\n"
13685
"<command>sudo aptitude</command>\n"
13686
"</screen>"
13687
msgstr ""
13688
"<application>Aptitude</application> is best suited for use in a non-"
13689
"graphical terminal environment to ensure proper functioning of the command "
13690
"keys. You may start <application>Aptitude</application> as a normal user "
13691
"with the following command at a terminal prompt: <screen>\n"
13692
"<command>sudo aptitude</command>\n"
13693
"</screen>"
13694
13695
#: serverguide/C/package-management.xml:219(para)
13696
msgid ""
13697
"When <application>Aptitude</application> starts, you will see a menu bar at "
13698
"the top of the screen and two panes below the menu bar. The top pane "
13699
"contains package categories, such as <emphasis role=\"italics\">New "
13700
"Packages</emphasis> and <emphasis role=\"italics\">Not Installed "
13701
"Packages</emphasis>. The bottom pane contains information related to the "
13702
"packages and package categories."
13703
msgstr ""
13704
"When <application>Aptitude</application> starts, you will see a menu bar at "
13705
"the top of the screen and two panes below the menu bar. The top pane "
13706
"contains package categories, such as <emphasis role=\"italics\">New "
13707
"Packages</emphasis> and <emphasis role=\"italics\">Not Installed "
13708
"Packages</emphasis>. The bottom pane contains information related to the "
13709
"packages and package categories."
13710
13711
#: serverguide/C/package-management.xml:222(para)
13712
msgid ""
13713
"Using <application>Aptitude</application> for package management is "
13714
"relatively straightforward, and the user interface makes common tasks simple "
13715
"to perform. The following are examples of common package management "
13716
"functions as performed in <application>Aptitude</application>:"
13717
msgstr ""
13718
"Using <application>Aptitude</application> for package management is "
13719
"relatively straightforward, and the user interface makes common tasks simple "
13720
"to perform. The following are examples of common package management "
13721
"functions as performed in <application>Aptitude</application>:"
13722
13723
#: serverguide/C/package-management.xml:226(para)
13724
msgid ""
13725
"<emphasis role=\"bold\">Install Packages</emphasis>: To install a package, "
13726
"locate the package via the Not Installed Packages package category, for "
13727
"example, by using the keyboard arrow keys and the <keycap>ENTER</keycap> "
13728
"key, and highlight the package you wish to install. After highlighting the "
13729
"package you wish to install, press the <keycap>+</keycap> key, and the "
13730
"package entry should turn <emphasis role=\"italics\">green</emphasis>, "
13731
"indicating it has been marked for installation. Now press <keycap>g</keycap> "
13732
"to be presented with a summary of package actions. Press <keycap>g</keycap> "
13733
"again, and you will be prompted to become root to complete the installation. "
13734
"Press <keycap>ENTER</keycap> which will result in a Password: prompt. Enter "
13735
"your user password to become root. Finally, press <keycap>g</keycap> once "
13736
"more and you'll be prompted to download the package. Press "
13737
"<keycap>ENTER</keycap> on the <emphasis role=\"italics\">Continue</emphasis> "
13738
"prompt, and downloading and installation of the package will commence."
13739
msgstr ""
13740
"<emphasis role=\"bold\">Install Packages</emphasis>: To install a package, "
13741
"locate the package via the Not Installed Packages package category, for "
13742
"example, by using the keyboard arrow keys and the <keycap>ENTER</keycap> "
13743
"key, and highlight the package you wish to install. After highlighting the "
13744
"package you wish to install, press the <keycap>+</keycap> key, and the "
13745
"package entry should turn <emphasis role=\"italics\">green</emphasis>, "
13746
"indicating it has been marked for installation. Now press <keycap>g</keycap> "
13747
"to be presented with a summary of package actions. Press <keycap>g</keycap> "
13748
"again, and you will be prompted to become root to complete the installation. "
13749
"Press <keycap>ENTER</keycap> which will result in a Password: prompt. Enter "
13750
"your user password to become root. Finally, press <keycap>g</keycap> once "
13751
"more and you'll be prompted to download the package. Press "
13752
"<keycap>ENTER</keycap> on the <emphasis role=\"italics\">Continue</emphasis> "
13753
"prompt, and downloading and installation of the package will commence."
13754
13755
#: serverguide/C/package-management.xml:230(para)
13756
msgid ""
13757
"<emphasis role=\"bold\">Remove Packages</emphasis>: To remove a package, "
13758
"locate the package via the Installed Packages package category, for example, "
13759
"by using the keyboard arrow keys and the <keycap>ENTER</keycap> key, and "
13760
"highlight the package you wish to remove. After highlighting the package you "
13761
"wish to install, press the <keycap>-</keycap> key, and the package entry "
13762
"should turn <emphasis role=\"italics\">pink</emphasis>, indicating it has "
13763
"been marked for removal. Now press <keycap>g</keycap> to be presented with a "
13764
"summary of package actions. Press <keycap>g</keycap> again, and you will be "
13765
"prompted to become root to complete the installation. Press "
13766
"<keycap>ENTER</keycap> which will result in a Password: prompt. Enter your "
13767
"user password to become root. Finally, press <keycap>g</keycap> once more, "
13768
"and you'll be prompted to download the package. Press <keycap>ENTER</keycap> "
13769
"on the <emphasis role=\"italics\">Continue</emphasis> prompt, and removal of "
13770
"the package will commence."
13771
msgstr ""
13772
"<emphasis role=\"bold\">Remove Packages</emphasis>: To remove a package, "
13773
"locate the package via the Installed Packages package category, for example, "
13774
"by using the keyboard arrow keys and the <keycap>ENTER</keycap> key, and "
13775
"highlight the package you wish to remove. After highlighting the package you "
13776
"wish to install, press the <keycap>-</keycap> key, and the package entry "
13777
"should turn <emphasis role=\"italics\">pink</emphasis>, indicating it has "
13778
"been marked for removal. Now press <keycap>g</keycap> to be presented with a "
13779
"summary of package actions. Press <keycap>g</keycap> again, and you will be "
13780
"prompted to become root to complete the installation. Press "
13781
"<keycap>ENTER</keycap> which will result in a Password: prompt. Enter your "
13782
"user password to become root. Finally, press <keycap>g</keycap> once more, "
13783
"and you'll be prompted to download the package. Press <keycap>ENTER</keycap> "
13784
"on the <emphasis role=\"italics\">Continue</emphasis> prompt, and removal of "
13785
"the package will commence."
13786
13787
#: serverguide/C/package-management.xml:234(para)
13788
msgid ""
13789
"<emphasis role=\"bold\">Update Package Index</emphasis>: To update the "
13790
"package index, simply press the <keycap>u</keycap> key and you will be "
13791
"prompted to become root to complete the update. Press <keycap>ENTER</keycap> "
13792
"which will result in a Password: prompt. Enter your user password to become "
13793
"root. Updating of the package index will commence. Press "
13794
"<keycap>ENTER</keycap> on the OK prompt when the download dialog is "
13795
"presented to complete the process."
13796
msgstr ""
13797
"<emphasis role=\"bold\">Update Package Index</emphasis>: To update the "
13798
"package index, simply press the <keycap>u</keycap> key and you will be "
13799
"prompted to become root to complete the update. Press <keycap>ENTER</keycap> "
13800
"which will result in a Password: prompt. Enter your user password to become "
13801
"root. Updating of the package index will commence. Press "
13802
"<keycap>ENTER</keycap> on the OK prompt when the download dialogue is "
13803
"presented to complete the process."
13804
13805
#: serverguide/C/package-management.xml:238(para)
13806
msgid ""
13807
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: To upgrade packages, "
13808
"perform the update of the package index as detailed above, and then press "
13809
"the <keycap>U</keycap> key to mark all packages with updates. Now press "
13810
"<keycap>g</keycap> whereby you'll be presented with a summary of package "
13811
"actions. Press <keycap>g</keycap> again, and you will be prompted to become "
13812
"root to complete the installation. Press <keycap>ENTER</keycap> which will "
13813
"result in a Password: prompt. Enter your user password to become root. "
13814
"Finally, press <keycap>g</keycap> once more, and you'll be prompted to "
13815
"download the packages. Press <keycap>ENTER</keycap> on the <emphasis "
13816
"role=\"italics\">Continue</emphasis> prompt, and upgrade of the packages "
13817
"will commence."
13818
msgstr ""
13819
"<emphasis role=\"bold\">Upgrade Packages</emphasis>: To upgrade packages, "
13820
"perform the update of the package index as detailed above, and then press "
13821
"the <keycap>U</keycap> key to mark all packages with updates. Now press "
13822
"<keycap>g</keycap> whereby you'll be presented with a summary of package "
13823
"actions. Press <keycap>g</keycap> again, and you will be prompted to become "
13824
"root to complete the installation. Press <keycap>ENTER</keycap> which will "
13825
"result in a Password: prompt. Enter your user password to become root. "
13826
"Finally, press <keycap>g</keycap> once more, and you'll be prompted to "
13827
"download the packages. Press <keycap>ENTER</keycap> on the <emphasis "
13828
"role=\"italics\">Continue</emphasis> prompt, and upgrade of the packages "
13829
"will commence."
13830
13831
#: serverguide/C/package-management.xml:245(para)
13832
msgid "<emphasis role=\"bold\">i</emphasis>: Installed package"
13833
msgstr "<emphasis role=\"bold\">i</emphasis>: Installed package"
13834
13835
#: serverguide/C/package-management.xml:250(para)
13836
msgid ""
13837
"<emphasis role=\"bold\">c</emphasis>: Package not installed, but package "
13838
"configuration remains on system"
13839
msgstr ""
13840
"<emphasis role=\"bold\">c</emphasis>: Package not installed, but package "
13841
"configuration remains on system"
13842
13843
#: serverguide/C/package-management.xml:254(para)
13844
msgid "<emphasis role=\"bold\">p</emphasis>: Purged from system"
13845
msgstr "<emphasis role=\"bold\">p</emphasis>: Purged from system"
13846
13847
#: serverguide/C/package-management.xml:258(para)
13848
msgid "<emphasis role=\"bold\">v</emphasis>: Virtual package"
13849
msgstr "<emphasis role=\"bold\">v</emphasis>: Virtual package"
13850
13851
#: serverguide/C/package-management.xml:262(para)
13852
msgid "<emphasis role=\"bold\">B</emphasis>: Broken package"
13853
msgstr "<emphasis role=\"bold\">B</emphasis>: Broken package"
13854
13855
#: serverguide/C/package-management.xml:266(para)
13856
msgid ""
13857
"<emphasis role=\"bold\">u</emphasis>: Unpacked files, but package not yet "
13858
"configured"
13859
msgstr ""
13860
"<emphasis role=\"bold\">u</emphasis>: Unpacked files, but package not yet "
13861
"configured"
13862
13863
#: serverguide/C/package-management.xml:270(para)
13864
msgid ""
13865
"<emphasis role=\"bold\">C</emphasis>: Half-configured - Configuration failed "
13866
"and requires fix"
13867
msgstr ""
13868
"<emphasis role=\"bold\">C</emphasis>: Half-configured - Configuration failed "
13869
"and requires fix"
13870
13871
#: serverguide/C/package-management.xml:274(para)
13872
msgid ""
13873
"<emphasis role=\"bold\">H</emphasis>: Half-installed - Removal failed and "
13874
"requires fix"
13875
msgstr ""
13876
"<emphasis role=\"bold\">H</emphasis>: Half-installed - Removal failed and "
13877
"requires fix"
13878
13879
#: serverguide/C/package-management.xml:242(para)
13880
msgid ""
13881
"The first column of information displayed in the package list in the top "
13882
"pane, when actually viewing packages lists the current state of the package, "
13883
"and uses the following key to describe the state of the package: "
13884
"<placeholder-1/>"
13885
msgstr ""
13886
"The first column of information displayed in the package list in the top "
13887
"pane, when actually viewing packages lists the current state of the package, "
13888
"and uses the following key to describe the state of the package: "
13889
"<placeholder-1/>"
13890
13891
#: serverguide/C/package-management.xml:280(para)
13892
msgid ""
13893
"To exit Aptitude, simply press the <keycap>q</keycap> key and confirm you "
13894
"wish to exit. Many other functions are available from the Aptitude menu by "
13895
"pressing the <keycap>F10</keycap> key."
13896
msgstr ""
13897
"To exit Aptitude, simply press the <keycap>q</keycap> key and confirm you "
13898
"wish to exit. Many other functions are available from the Aptitude menu by "
13899
"pressing the <keycap>F10</keycap> key."
13900
13901
#: serverguide/C/package-management.xml:285(title)
13902
msgid "Automatic Updates"
13903
msgstr "Automatic Updates"
13904
13905
#: serverguide/C/package-management.xml:287(para)
13906
msgid ""
13907
"The <application>unattended-upgrades</application> package can be used to "
13908
"automatically install updated packages, and can be configured to update all "
13909
"packages or just install security updates. First, install the package by "
13910
"entering the following in a terminal:"
13911
msgstr ""
13912
"The <application>unattended-upgrades</application> package can be used to "
13913
"automatically install updated packages, and can be configured to update all "
13914
"packages or just install security updates. First, install the package by "
13915
"entering the following in a terminal:"
13916
13917
#: serverguide/C/package-management.xml:293(command)
13918
msgid "sudo apt-get install unattended-upgrades"
13919
msgstr "sudo apt-get install unattended-upgrades"
13920
13921
#: serverguide/C/package-management.xml:296(para)
13922
msgid ""
13923
"To configure <application>unattended-upgrades</application>, edit "
13924
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> and adjust "
13925
"the following to fit your needs:"
13926
msgstr ""
13927
"To configure <application>unattended-upgrades</application>, edit "
13928
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> and adjust "
13929
"the following to fit your needs:"
13930
13931
#: serverguide/C/package-management.xml:301(programlisting)
13932
#, no-wrap
13933
msgid ""
13934
"\n"
13935
"Unattended-Upgrade::Allowed-Origins {\n"
13936
" \"Ubuntu lucid-security\";\n"
13937
"// \"Ubuntu lucid-updates\";\n"
13938
"};\n"
13939
msgstr ""
13940
"\n"
13941
"Unattended-Upgrade::Allowed-Origins {\n"
13942
" \"Ubuntu lucid-security\";\n"
13943
"// \"Ubuntu lucid-updates\";\n"
13944
"};\n"
13945
13946
#: serverguide/C/package-management.xml:308(para)
13947
msgid ""
13948
"Certain packages can also be <emphasis>blacklisted</emphasis> and therefore "
13949
"will not be automatically updated. To blacklist a package, add it to the "
13950
"list:"
13951
msgstr ""
13952
"Certain packages can also be <emphasis>blacklisted</emphasis> and therefore "
13953
"will not be automatically updated. To blacklist a package, add it to the "
13954
"list:"
13955
13956
#: serverguide/C/package-management.xml:313(programlisting)
13957
#, no-wrap
13958
msgid ""
13959
"\n"
13960
"Unattended-Upgrade::Package-Blacklist {\n"
13961
"// \"vim\";\n"
13962
"// \"libc6\";\n"
13963
"// \"libc6-dev\";\n"
13964
"// \"libc6-i686\";\n"
13965
"};\n"
13966
msgstr ""
13967
"\n"
13968
"Unattended-Upgrade::Package-Blacklist {\n"
13969
"// \"vim\";\n"
13970
"// \"libc6\";\n"
13971
"// \"libc6-dev\";\n"
13972
"// \"libc6-i686\";\n"
13973
"};\n"
13974
13975
#: serverguide/C/package-management.xml:323(para)
13976
msgid ""
13977
"The double <emphasis><quote>//</quote></emphasis> serve as comments, so "
13978
"whatever follows \"//\" will not be evaluated."
13979
msgstr ""
13980
"The double <emphasis><quote>//</quote></emphasis> serve as comments, so "
13981
"whatever follows \"//\" will not be evaluated."
13982
13983
#: serverguide/C/package-management.xml:328(para)
13984
msgid ""
13985
"To enable automatic updates, edit "
13986
"<filename>/etc/apt/apt.conf.d/10periodic</filename> and set the appropriate "
13987
"<application>apt</application> configuration options:"
13988
msgstr ""
13989
13990
#: serverguide/C/package-management.xml:332(programlisting)
13991
#, no-wrap
13992
msgid ""
13993
"\n"
13994
"APT::Periodic::Update-Package-Lists \"1\";\n"
13995
"APT::Periodic::Download-Upgradeable-Packages \"1\";\n"
13996
"APT::Periodic::AutocleanInterval \"7\";\n"
13997
"APT::Periodic::Unattended-Upgrade \"1\";\n"
13998
msgstr ""
13999
14000
#: serverguide/C/package-management.xml:339(para)
14001
msgid ""
14002
"The above configuration updates the package list, downloads, and installs "
14003
"available upgrades every day. The local download archive is cleaned every "
14004
"week."
14005
msgstr ""
14006
14007
#: serverguide/C/package-management.xml:345(para)
14008
msgid ""
14009
"You can read more about <application>apt</application> Periodic "
14010
"configuration options in the <filename>/etc/cron.daily/apt</filename> script "
14011
"header."
14012
msgstr ""
14013
14014
#: serverguide/C/package-management.xml:350(para)
14015
msgid ""
14016
"The results of <application>unattended-upgrades</application> will be logged "
14017
"to <filename>/var/log/unattended-upgrades</filename>."
14018
msgstr ""
14019
"The results of <application>unattended-upgrades</application> will be logged "
14020
"to <filename>/var/log/unattended-upgrades</filename>."
14021
14022
#: serverguide/C/package-management.xml:355(title)
14023
msgid "Notifications"
14024
msgstr "Notifications"
14025
14026
#: serverguide/C/package-management.xml:357(para)
14027
msgid ""
14028
"Configuring <emphasis>Unattended-Upgrade::Mail</emphasis> in "
14029
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> will enable "
14030
"<application>unattended-upgrades</application> to email an administrator "
14031
"detailing any packages that need upgrading or have problems."
14032
msgstr ""
14033
"Configuring <emphasis>Unattended-Upgrade::Mail</emphasis> in "
14034
"<filename>/etc/apt/apt.conf.d/50unattended-upgrades</filename> will enable "
14035
"<application>unattended-upgrades</application> to e-mail an administrator "
14036
"detailing any packages that need upgrading or have problems."
14037
14038
#: serverguide/C/package-management.xml:362(para)
14039
msgid ""
14040
"Another useful package is <application>apticron</application>. "
14041
"<application>apticron</application> will configure a "
14042
"<application>cron</application> job to email an administrator information "
14043
"about any packages on the system that have updates available, as well as a "
14044
"summary of changes in each package."
14045
msgstr ""
14046
"Another useful package is <application>apticron</application>. "
14047
"<application>apticron</application> will configure a "
14048
"<application>cron</application> job to e-mail an administrator information "
14049
"about any packages on the system that have updates available, as well as a "
14050
"summary of changes in each package."
14051
14052
#: serverguide/C/package-management.xml:368(para)
14053
msgid ""
14054
"To install the <application>apticron</application> package, in a terminal "
14055
"enter:"
14056
msgstr ""
14057
"To install the <application>apticron</application> package, in a terminal "
14058
"enter:"
14059
14060
#: serverguide/C/package-management.xml:373(command)
14061
msgid "sudo apt-get install apticron"
14062
msgstr "sudo apt-get install apticron"
14063
14064
#: serverguide/C/package-management.xml:376(para)
14065
msgid ""
14066
"Once the package is installed edit "
14067
"<filename>/etc/apticron/apticron.conf</filename>, to set the email address "
14068
"and other options:"
14069
msgstr ""
14070
"Once the package is installed edit "
14071
"<filename>/etc/apticron/apticron.conf</filename>, to set the e-mail address "
14072
"and other options:"
14073
14074
#: serverguide/C/package-management.xml:380(programlisting)
14075
#, no-wrap
14076
msgid ""
14077
"\n"
14078
"EMAIL=\"root@example.com\"\n"
14079
msgstr ""
14080
"\n"
14081
"EMAIL=\"root@example.com\"\n"
14082
14083
#: serverguide/C/package-management.xml:389(para)
14084
msgid ""
14085
"Configuration of the <emphasis>Advanced Packaging Tool</emphasis> (APT) "
14086
"system repositories is stored in the /etc/apt/sources.list configuration "
14087
"file. An example of this file is referenced here, along with information on "
14088
"adding or removing repository references from the file."
14089
msgstr ""
14090
"Configuration of the <emphasis>Advanced Packaging Tool</emphasis> (APT) "
14091
"system repositories is stored in the /etc/apt/sources.list configuration "
14092
"file. An example of this file is referenced here, along with information on "
14093
"adding or removing repository references from the file."
14094
14095
#: serverguide/C/package-management.xml:395(para)
14096
msgid ""
14097
"<ulink url=\"../sample/sources.list\">Here</ulink> is a simple example of a "
14098
"typical <filename>/etc/apt/sources.list</filename> file."
14099
msgstr ""
14100
"<ulink url=\"../sample/sources.list\">Here</ulink> is a simple example of a "
14101
"typical <filename>/etc/apt/sources.list</filename> file."
14102
14103
#: serverguide/C/package-management.xml:399(para)
14104
msgid ""
14105
"You may edit the file to enable repositories or disable them. For example, "
14106
"to disable the requirement of inserting the Ubuntu CD-ROM whenever package "
14107
"operations occur, simply comment out the appropriate line for the CD-ROM, "
14108
"which appears at the top of the file:"
14109
msgstr ""
14110
"You may edit the file to enable repositories or disable them. For example, "
14111
"to disable the requirement of inserting the Ubuntu CD-ROM whenever package "
14112
"operations occur, simply comment out the appropriate line for the CD-ROM, "
14113
"which appears at the top of the file:"
14114
14115
#: serverguide/C/package-management.xml:404(screen)
14116
#, no-wrap
14117
msgid ""
14118
"\n"
14119
"# no more prompting for CD-ROM please\n"
14120
"# deb cdrom:[Ubuntu 10.04_Lucid_Lynx - Release i386 (20070419.1)]/ lucid "
14121
"main restricted\n"
14122
msgstr ""
14123
"\n"
14124
"# no more prompting for CD-ROM please\n"
14125
"# deb cdrom:[Ubuntu 10.04_Lucid_Lynx - Release i386 (20070419.1)]/ lucid "
14126
"main restricted\n"
14127
14128
#: serverguide/C/package-management.xml:410(title)
14129
msgid "Extra Repositories"
14130
msgstr "Extra Repositories"
14131
14132
#: serverguide/C/package-management.xml:411(para)
14133
msgid ""
14134
"In addition to the officially supported package repositories available for "
14135
"Ubuntu, there exist additional community-maintained repositories which add "
14136
"thousands more potential packages for installation. Two of the most popular "
14137
"are the <emphasis>Universe</emphasis> and <emphasis>Multiverse</emphasis> "
14138
"repositories. These repositories are not officially supported by Ubuntu, but "
14139
"because they are maintained by the community they generally provide packages "
14140
"which are safe for use with your Ubuntu computer."
14141
msgstr ""
14142
"In addition to the officially supported package repositories available for "
14143
"Ubuntu, there exists additional community-maintained repositories which add "
14144
"thousands more potential packages for installation. Two of the most popular "
14145
"are the <emphasis>Universe</emphasis> and <emphasis>Multiverse</emphasis> "
14146
"repositories. These repositories are not officially supported by Ubuntu, but "
14147
"because they are maintained by the community they generally provide packages "
14148
"which are safe for use with your Ubuntu computer."
14149
14150
#: serverguide/C/package-management.xml:414(para)
14151
msgid ""
14152
"Packages in the <emphasis>Multiverse</emphasis> repository often have "
14153
"licensing issues that prevent them from being distributed with a free "
14154
"operating system, and they may be illegal in your locality."
14155
msgstr ""
14156
"Packages in the <emphasis>Multiverse</emphasis> repository often have "
14157
"licensing issues that prevent them from being distributed with a free "
14158
"operating system, and they may be illegal in your locality."
14159
14160
#: serverguide/C/package-management.xml:416(para)
14161
msgid ""
14162
"Be advised that neither the <emphasis>Universe</emphasis> or "
14163
"<emphasis>Multiverse</emphasis> repositories contain officially supported "
14164
"packages. In particular, there may not be security updates for these "
14165
"packages."
14166
msgstr ""
14167
"Be advised that neither the <emphasis>Universe</emphasis> or "
14168
"<emphasis>Multiverse</emphasis> repositories contain officially supported "
14169
"packages. In particular, there may not be security updates for these "
14170
"packages."
14171
14172
#: serverguide/C/package-management.xml:420(para)
14173
msgid ""
14174
"Many other package sources are available, sometimes even offering only one "
14175
"package, as in the case of package sources provided by the developer of a "
14176
"single application. You should always be very careful and cautious when "
14177
"using non-standard package sources, however. Research the source and "
14178
"packages carefully before performing any installation, as some package "
14179
"sources and their packages could render your system unstable or non-"
14180
"functional in some respects."
14181
msgstr ""
14182
"Many other package sources are available, sometimes even offering only one "
14183
"package, as in the case of package sources provided by the developer of a "
14184
"single application. You should always be very careful and cautious when "
14185
"using non-standard package sources, however. Research the source and "
14186
"packages carefully before performing any installation, as some package "
14187
"sources and their packages could render your system unstable or non-"
14188
"functional in some respects."
14189
14190
#: serverguide/C/package-management.xml:423(para)
14191
msgid ""
14192
"By default, the <emphasis>Universe</emphasis> and "
14193
"<emphasis>Multiverse</emphasis> repositories are enabled but if you would "
14194
"like to disable them edit <filename>/etc/apt/sources.list</filename> and "
14195
"comment the following lines:"
14196
msgstr ""
14197
"By default, the <emphasis>Universe</emphasis> and "
14198
"<emphasis>Multiverse</emphasis> repositories are enabled but if you would "
14199
"like to disable them edit <filename>/etc/apt/sources.list</filename> and "
14200
"comment the following lines:"
14201
14202
#: serverguide/C/package-management.xml:430(programlisting)
14203
#, no-wrap
14204
msgid ""
14205
"\n"
14206
"deb http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
14207
"deb-src http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
14208
"\n"
14209
"deb http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
14210
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
14211
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
14212
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
14213
"\n"
14214
"deb http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
14215
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
14216
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
14217
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
14218
"\n"
14219
"deb http://security.ubuntu.com/ubuntu lucid-security universe\n"
14220
"deb-src http://security.ubuntu.com/ubuntu lucid-security universe\n"
14221
"deb http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
14222
"deb-src http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
14223
msgstr ""
14224
"\n"
14225
"deb http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
14226
"deb-src http://archive.ubuntu.com/ubuntu lucid universe multiverse\n"
14227
"\n"
14228
"deb http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
14229
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid universe\n"
14230
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
14231
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates universe\n"
14232
"\n"
14233
"deb http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
14234
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid multiverse\n"
14235
"deb http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
14236
"deb-src http://us.archive.ubuntu.com/ubuntu/ lucid-updates multiverse\n"
14237
"\n"
14238
"deb http://security.ubuntu.com/ubuntu lucid-security universe\n"
14239
"deb-src http://security.ubuntu.com/ubuntu lucid-security universe\n"
14240
"deb http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
14241
"deb-src http://security.ubuntu.com/ubuntu lucid-security multiverse\n"
14242
14243
#: serverguide/C/package-management.xml:456(para)
14244
msgid ""
14245
"Most of the material covered in this chapter is available in "
14246
"<application>man</application> pages, many of which are available online."
14247
msgstr ""
14248
"Most of the material covered in this chapter is available in "
14249
"<application>man</application> pages, many of which are available online."
14250
14251
#: serverguide/C/package-management.xml:463(para)
14252
msgid ""
14253
"The <ulink "
14254
"url=\"https://help.ubuntu.com/community/InstallingSoftware\">InstallingSoftwa"
14255
"re</ulink> Ubuntu wiki page has more information."
14256
msgstr ""
14257
14258
#: serverguide/C/package-management.xml:468(para)
14259
msgid ""
14260
"For more <application>dpkg</application> details see the <ulink "
14261
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/dpkg.1.html\">dpkg "
14262
"man page</ulink>."
14263
msgstr ""
14264
14265
#: serverguide/C/package-management.xml:474(para)
14266
msgid ""
14267
"The <ulink url=\"http://www.debian.org/doc/manuals/apt-howto/\">APT "
14268
"HOWTO</ulink> and <ulink "
14269
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/apt-get.8.html\">apt-"
14270
"get man page</ulink> contain useful information regarding <application>apt-"
14271
"get</application> usage."
14272
msgstr ""
14273
14274
#: serverguide/C/package-management.xml:481(para)
14275
msgid ""
14276
"See the <ulink "
14277
"url=\"http://manpages.ubuntu.com/manpages/lucid/man8/aptitude.8.html\">aptitu"
14278
"de man page</ulink> for more <application>aptitude</application> options."
14279
msgstr ""
14280
14281
#: serverguide/C/package-management.xml:487(para)
14282
msgid ""
14283
"The <ulink "
14284
"url=\"https://help.ubuntu.com/community/Repositories/Ubuntu\">Adding "
14285
"Repositories HOWTO (Ubuntu Wiki)</ulink> page contains more details on "
14286
"adding repositories."
14287
msgstr ""
14288
"The <ulink "
14289
"url=\"https://help.ubuntu.com/community/Repositories/Ubuntu\">Adding "
14290
"Repositories HOWTO (Ubuntu Wiki)</ulink> page contains more details on "
14291
"adding repositories."
14292
14293
#: serverguide/C/other-apps.xml:13(title)
14294
msgid "Other Useful Applications"
14295
msgstr "Other Useful Applications"
14296
14297
#: serverguide/C/other-apps.xml:15(para)
14298
msgid ""
14299
"There are many very useful applications developed by the Ubuntu Server Team, "
14300
"and others that are well integrated with Ubuntu Server Edition, that might "
14301
"not be well known. This chapter will showcase some useful applications that "
14302
"can make administering an Ubuntu server, or many Ubuntu servers, that much "
14303
"easier."
14304
msgstr ""
14305
"There are many very useful applications developed by the Ubuntu Server Team, "
14306
"and others that are well integrated with Ubuntu Server Edition, that might "
14307
"not be well known. This chapter will showcase some useful applications that "
14308
"can make administering an Ubuntu server, or many Ubuntu servers, that much "
14309
"easier."
14310
14311
#: serverguide/C/other-apps.xml:23(title)
14312
msgid "pam_motd"
14313
msgstr ""
14314
14315
#: serverguide/C/other-apps.xml:25(para)
14316
msgid ""
14317
"When logging into an Ubuntu server you may have noticed the informative "
14318
"Message Of The Day (MOTD). This information is obtained and displayed using "
14319
"a couple of packages:"
14320
msgstr ""
14321
"When logging into an Ubuntu server you may have noticed the informative "
14322
"Message Of The Day (MOTD). This information is obtained and displayed using "
14323
"a couple of packages:"
14324
14325
#: serverguide/C/other-apps.xml:32(para)
14326
msgid ""
14327
"<emphasis>landscape-common:</emphasis> provides the core libraries of "
14328
"<application>landscape-client</application>, which can be used to manage "
14329
"systems using the web based <emphasis>Landscape</emphasis> application. The "
14330
"package includes the <application>/usr/bin/landscape-sysinfo</application> "
14331
"utility which is used to gather the information displayed in the MOTD."
14332
msgstr ""
14333
"<emphasis>landscape-common:</emphasis> provides the core libraries of "
14334
"<application>landscape-client</application>, which can be used to manage "
14335
"systems using the web based <emphasis>Landscape</emphasis> application. The "
14336
"package includes the <application>/usr/bin/landscape-sysinfo</application> "
14337
"utility which is used to gather the information displayed in the MOTD."
14338
14339
#: serverguide/C/other-apps.xml:40(para)
14340
msgid ""
14341
"<emphasis>update-notifier-common:</emphasis> is used to automatically update "
14342
"the MOTD via <application>pam_motd</application> module."
14343
msgstr ""
14344
14345
#: serverguide/C/other-apps.xml:46(para)
14346
msgid ""
14347
"<application>pam_motd</application> executes the scripts in "
14348
"<filename>/etc/update-motd.d</filename> in order based on the number "
14349
"prepended to the script. The output of the scripts is written to "
14350
"<filename>/var/run/motd</filename>, keeping the numerical order, then "
14351
"concatenated with <filename>/etc/motd.tail</filename>."
14352
msgstr ""
14353
14354
#: serverguide/C/other-apps.xml:52(para)
14355
msgid ""
14356
"You can add your own dynamic information to the MOTD. For example, to add "
14357
"local weather information:"
14358
msgstr ""
14359
"You can add your own dynamic information to the MOTD. For example, to add "
14360
"local weather information:"
14361
14362
#: serverguide/C/other-apps.xml:58(para)
14363
msgid "First, install the <application>weather-util</application> package:"
14364
msgstr "First, install the <application>weather-util</application> package:"
14365
14366
#: serverguide/C/other-apps.xml:63(command)
14367
msgid "sudo apt-get install weather-util"
14368
msgstr "sudo apt-get install weather-util"
14369
14370
#: serverguide/C/other-apps.xml:68(para)
14371
msgid ""
14372
"The <application>weather</application> utility uses METAR data from the "
14373
"National Oceanic and Atmospheric Administration and forecasts from the "
14374
"National Weather Service. In order to find local information you will need "
14375
"the 4-character ICAO location indicator. This can be determined by browsing "
14376
"to the <ulink url=\"http://www.weather.gov/tg/siteloc.shtml\">National "
14377
"Weather Service</ulink> site."
14378
msgstr ""
14379
"The <application>weather</application> utility uses METAR data from the "
14380
"National Oceanic and Atmospheric Administration and forecasts from the "
14381
"National Weather Service. In order to find local information you will need "
14382
"the 4-character ICAO location indicator. This can be determined by browsing "
14383
"to the <ulink url=\"http://www.weather.gov/tg/siteloc.shtml\">National "
14384
"Weather Service</ulink> site."
14385
14386
#: serverguide/C/other-apps.xml:75(para)
14387
msgid ""
14388
"Although the National Weather Service is a United States government agency "
14389
"there are weather stations available world wide. However, local weather "
14390
"information for all locations outside the U.S. may not be available."
14391
msgstr ""
14392
"Although the National Weather Service is a United States government agency "
14393
"there are weather stations available world wide. However, local weather "
14394
"information for all locations outside the U.S. may not be available."
14395
14396
#: serverguide/C/other-apps.xml:81(para)
14397
msgid ""
14398
"Create <filename>/usr/local/bin/local-weather</filename>, a simple shell "
14399
"script to use <application>weather</application> with your local ICAO "
14400
"indicator:"
14401
msgstr ""
14402
"Create <filename>/usr/local/bin/local-weather</filename>, a simple shell "
14403
"script to use <application>weather</application> with your local ICAO "
14404
"indicator:"
14405
14406
#: serverguide/C/other-apps.xml:86(programlisting)
14407
#, no-wrap
14408
msgid ""
14409
"\n"
14410
"#!/bin/sh\n"
14411
"#\n"
14412
"#\n"
14413
"# Prints the local weather information for the MOTD.\n"
14414
"#\n"
14415
"#\n"
14416
"\n"
14417
"# Replace KINT with your local weather station.\n"
14418
"# Local stations can be found here: http://www.weather.gov/tg/siteloc.shtml\n"
14419
"\n"
14420
"echo\n"
14421
"weather -i KINT\n"
14422
"echo\n"
14423
"\n"
14424
msgstr ""
14425
14426
#: serverguide/C/other-apps.xml:104(para)
14427
msgid "Make the script executable:"
14428
msgstr "Make the script executable:"
14429
14430
#: serverguide/C/other-apps.xml:109(command)
14431
msgid "sudo chmod 755 /usr/local/bin/local-weather"
14432
msgstr "sudo chmod 755 /usr/local/bin/local-weather"
14433
14434
#: serverguide/C/other-apps.xml:113(para)
14435
msgid ""
14436
"Next, create a symlink to <filename>/etc/update-motd.d/98-local-"
14437
"weather</filename>:"
14438
msgstr ""
14439
14440
#: serverguide/C/other-apps.xml:118(command)
14441
msgid ""
14442
"sudo ln -s /usr/local/bin/local-weather /etc/update-motd.d/98-local-weather"
14443
msgstr ""
14444
14445
#: serverguide/C/other-apps.xml:122(para)
14446
msgid "Finally, exit the server and re-login to view the new MOTD."
14447
msgstr ""
14448
14449
#: serverguide/C/other-apps.xml:128(para)
14450
msgid ""
14451
"You should now be greeted with some useful information, and some information "
14452
"about the local weather that may not be quite so useful. Hopefully the "
14453
"<application>local-weather</application> example demonstrates the "
14454
"flexibility of <application>pam_motd</application>."
14455
msgstr ""
14456
14457
#: serverguide/C/other-apps.xml:136(title)
14458
msgid "etckeeper"
14459
msgstr "etckeeper"
14460
14461
#: serverguide/C/other-apps.xml:138(para)
14462
msgid ""
14463
"<application>etckeeper</application> allows the contents of <filename "
14464
"role=\"directory\">/etc</filename> be easily stored in Version Control "
14465
"System (VCS) repository. It hooks into <application>apt</application> to "
14466
"automatically commit changes to <filename>/etc</filename> when packages are "
14467
"installed or upgraded. Placing <filename>/etc</filename> under version "
14468
"control is considered an industry best practice, and the goal of "
14469
"<application>etckeeper</application> is to make this process as painless as "
14470
"possible."
14471
msgstr ""
14472
"<application>etckeeper</application> allows the contents of <filename "
14473
"role=\"directory\">/etc</filename> be easily stored in Version Control "
14474
"System (VCS) repository. It hooks into <application>apt</application> to "
14475
"automatically commit changes to <filename>/etc</filename> when packages are "
14476
"installed or upgraded. Placing <filename>/etc</filename> under version "
14477
"control is considered an industry best practice, and the goal of "
14478
"<application>etckeeper</application> is to make this process as painless as "
14479
"possible."
14480
14481
#: serverguide/C/other-apps.xml:146(para)
14482
msgid ""
14483
"Install <application>etckeeper</application> by entering the following in a "
14484
"terminal:"
14485
msgstr ""
14486
"Install <application>etckeeper</application> by entering the following in a "
14487
"terminal:"
14488
14489
#: serverguide/C/other-apps.xml:151(command)
14490
msgid "sudo apt-get install etckeeper"
14491
msgstr "sudo apt-get install etckeeper"
14492
14493
#: serverguide/C/other-apps.xml:154(para)
14494
msgid ""
14495
"The main configuration file, "
14496
"<filename>/etc/etckeeper/etckeeper.conf</filename>, is fairly simple. The "
14497
"main option is which VCS to use. By default "
14498
"<application>etckeeper</application> is configured to use "
14499
"<application>bzr</application> for version control. The repository is "
14500
"automatically initialized (and committed for the first time) during package "
14501
"installation. It is possible to undo this by entering the following command:"
14502
msgstr ""
14503
"The main configuration file, "
14504
"<filename>/etc/etckeeper/etckeeper.conf</filename>, is fairly simple. The "
14505
"main option is which VCS to use. By default "
14506
"<application>etckeeper</application> is configured to use "
14507
"<application>bzr</application> for version control. The repository is "
14508
"automatically initialised (and committed for the first time) during package "
14509
"installation. It is possible to undo this by entering the following command:"
14510
14511
#: serverguide/C/other-apps.xml:164(command)
14512
msgid "sudo etckeeper uninit"
14513
msgstr "sudo etckeeper uninit"
14514
14515
#: serverguide/C/other-apps.xml:167(para)
14516
msgid ""
14517
"By default, etckeeper will commit uncommitted changes made to /etc daily. "
14518
"This can be disabled using the AVOID_DAILY_AUTOCOMMITS configuration option. "
14519
"It will also automatically commit changes before and after package "
14520
"installation. For a more precise tracking of changes, it is recommended to "
14521
"commit your changes manually, together with a commit message, using:"
14522
msgstr ""
14523
"By default, etckeeper will commit uncommitted changes made to /etc daily. "
14524
"This can be disabled using the AVOID_DAILY_AUTOCOMMITS configuration option. "
14525
"It will also automatically commit changes before and after package "
14526
"installation. For a more precise tracking of changes, it is recommended to "
14527
"commit your changes manually, together with a commit message, using:"
14528
14529
#: serverguide/C/other-apps.xml:176(command)
14530
msgid "sudo etckeeper commit \"..Reason for configuration change..\""
14531
msgstr "sudo etckeeper commit \"..Reason for configuration change..\""
14532
14533
#: serverguide/C/other-apps.xml:179(para)
14534
msgid ""
14535
"Using the VCS commands you can view log information about files in "
14536
"<filename>/etc</filename>:"
14537
msgstr ""
14538
"Using the VCS commands you can view log information about files in "
14539
"<filename>/etc</filename>:"
14540
14541
#: serverguide/C/other-apps.xml:184(command)
14542
msgid "sudo bzr log /etc/passwd"
14543
msgstr "sudo bzr log /etc/passwd"
14544
14545
#: serverguide/C/other-apps.xml:187(para)
14546
msgid ""
14547
"To demonstrate the integration with the package management system, install "
14548
"<application>postfix</application>:"
14549
msgstr ""
14550
"To demonstrate the integration with the package management system, install "
14551
"<application>postfix</application>:"
14552
14553
#: serverguide/C/other-apps.xml:192(command) serverguide/C/mail.xml:45(command)
14554
msgid "sudo apt-get install postfix"
14555
msgstr "sudo apt-get install postfix"
14556
14557
#: serverguide/C/other-apps.xml:195(para)
14558
msgid ""
14559
"When the installation is finished, all the "
14560
"<application>postfix</application> configuration files should be committed "
14561
"to the repository:"
14562
msgstr ""
14563
"When the installation is finished, all the "
14564
"<application>postfix</application> configuration files should be committed "
14565
"to the repository:"
14566
14567
#: serverguide/C/other-apps.xml:201(computeroutput)
14568
#, no-wrap
14569
msgid ""
14570
"Committing to: /etc/\n"
14571
"added aliases.db\n"
14572
"modified group\n"
14573
"modified group-\n"
14574
"modified gshadow\n"
14575
"modified gshadow-\n"
14576
"modified passwd\n"
14577
"modified passwd-\n"
14578
"added postfix\n"
14579
"added resolvconf\n"
14580
"added rsyslog.d\n"
14581
"modified shadow\n"
14582
"modified shadow-\n"
14583
"added init.d/postfix\n"
14584
"added network/if-down.d/postfix\n"
14585
"added network/if-up.d/postfix\n"
14586
"added postfix/dynamicmaps.cf\n"
14587
"added postfix/main.cf\n"
14588
"added postfix/master.cf\n"
14589
"added postfix/post-install\n"
14590
"added postfix/postfix-files\n"
14591
"added postfix/postfix-script\n"
14592
"added postfix/sasl\n"
14593
"added ppp/ip-down.d\n"
14594
"added ppp/ip-down.d/postfix\n"
14595
"added ppp/ip-up.d/postfix\n"
14596
"added rc0.d/K20postfix\n"
14597
"added rc1.d/K20postfix\n"
14598
"added rc2.d/S20postfix\n"
14599
"added rc3.d/S20postfix\n"
14600
"added rc4.d/S20postfix\n"
14601
"added rc5.d/S20postfix\n"
14602
"added rc6.d/K20postfix\n"
14603
"added resolvconf/update-libc.d\n"
14604
"added resolvconf/update-libc.d/postfix\n"
14605
"added rsyslog.d/postfix.conf\n"
14606
"added ufw/applications.d/postfix\n"
14607
"Committed revision 2."
14608
msgstr ""
14609
"Committing to: /etc/\n"
14610
"added aliases.db\n"
14611
"modified group\n"
14612
"modified group-\n"
14613
"modified gshadow\n"
14614
"modified gshadow-\n"
14615
"modified passwd\n"
14616
"modified passwd-\n"
14617
"added postfix\n"
14618
"added resolvconf\n"
14619
"added rsyslog.d\n"
14620
"modified shadow\n"
14621
"modified shadow-\n"
14622
"added init.d/postfix\n"
14623
"added network/if-down.d/postfix\n"
14624
"added network/if-up.d/postfix\n"
14625
"added postfix/dynamicmaps.cf\n"
14626
"added postfix/main.cf\n"
14627
"added postfix/master.cf\n"
14628
"added postfix/post-install\n"
14629
"added postfix/postfix-files\n"
14630
"added postfix/postfix-script\n"
14631
"added postfix/sasl\n"
14632
"added ppp/ip-down.d\n"
14633
"added ppp/ip-down.d/postfix\n"
14634
"added ppp/ip-up.d/postfix\n"
14635
"added rc0.d/K20postfix\n"
14636
"added rc1.d/K20postfix\n"
14637
"added rc2.d/S20postfix\n"
14638
"added rc3.d/S20postfix\n"
14639
"added rc4.d/S20postfix\n"
14640
"added rc5.d/S20postfix\n"
14641
"added rc6.d/K20postfix\n"
14642
"added resolvconf/update-libc.d\n"
14643
"added resolvconf/update-libc.d/postfix\n"
14644
"added rsyslog.d/postfix.conf\n"
14645
"added ufw/applications.d/postfix\n"
14646
"Committed revision 2."
14647
14648
#: serverguide/C/other-apps.xml:241(para)
14649
msgid ""
14650
"For an example of how <application>etckeeper</application> tracks manual "
14651
"changes, add new a host to <filename>/etc/hosts</filename>. Using "
14652
"<application>bzr</application> you can see which files have been modified:"
14653
msgstr ""
14654
"For an example of how <application>etckeeper</application> tracks manual "
14655
"changes, add new a host to <filename>/etc/hosts</filename>. Using "
14656
"<application>bzr</application> you can see which files have been modified:"
14657
14658
#: serverguide/C/other-apps.xml:247(command)
14659
msgid "sudo bzr status /etc/"
14660
msgstr "sudo bzr status /etc/"
14661
14662
#: serverguide/C/other-apps.xml:248(computeroutput)
14663
#, no-wrap
14664
msgid ""
14665
"modified:\n"
14666
" hosts"
14667
msgstr ""
14668
"modified:\n"
14669
" hosts"
14670
14671
#: serverguide/C/other-apps.xml:252(para)
14672
msgid "Now commit the changes:"
14673
msgstr "Now commit the changes:"
14674
14675
#: serverguide/C/other-apps.xml:257(command)
14676
msgid "sudo etckeeper commit \"new host\""
14677
msgstr "sudo etckeeper commit \"new host\""
14678
14679
#: serverguide/C/other-apps.xml:260(para)
14680
msgid ""
14681
"For more information on <application>bzr</application> see <xref "
14682
"linkend=\"bazaar\"/>."
14683
msgstr ""
14684
"For more information on <application>bzr</application> see <xref "
14685
"linkend=\"bazaar\"/>."
14686
14687
#: serverguide/C/other-apps.xml:266(title)
14688
msgid "Byobu"
14689
msgstr ""
14690
14691
#: serverguide/C/other-apps.xml:268(para)
14692
msgid ""
14693
"One of the most useful applications for any system administrator is "
14694
"<application>screen</application>. It allows the execution of multiple "
14695
"shells in one terminal. To make some of the advanced "
14696
"<application>screen</application> features more user friendly, and provide "
14697
"some useful information about the system, the "
14698
"<application>byobu</application> package was created."
14699
msgstr ""
14700
14701
#: serverguide/C/other-apps.xml:275(para)
14702
msgid ""
14703
"When executing <application>byobu</application> pressing the "
14704
"<emphasis>F9</emphasis> key will bring up the "
14705
"<application>Configuration</application> menu. This menu will allow you to:"
14706
msgstr ""
14707
14708
#: serverguide/C/other-apps.xml:281(para)
14709
msgid "View the Help menu"
14710
msgstr "View the Help menu"
14711
14712
#: serverguide/C/other-apps.xml:282(para)
14713
msgid "Change Byobu's background color"
14714
msgstr ""
14715
14716
#: serverguide/C/other-apps.xml:283(para)
14717
msgid "Change Byobu's foreground color"
14718
msgstr ""
14719
14720
#: serverguide/C/other-apps.xml:284(para)
14721
msgid "Toggle status notifications"
14722
msgstr ""
14723
14724
#: serverguide/C/other-apps.xml:285(para)
14725
msgid "Change the key binding set"
14726
msgstr "Change the key binding set"
14727
14728
#: serverguide/C/other-apps.xml:286(para)
14729
msgid "Change the escape sequence"
14730
msgstr "Change the escape sequence"
14731
14732
#: serverguide/C/other-apps.xml:287(para)
14733
msgid "Create new windows"
14734
msgstr ""
14735
14736
#: serverguide/C/other-apps.xml:288(para)
14737
msgid "Manage the default windows"
14738
msgstr "Manage the default windows"
14739
14740
#: serverguide/C/other-apps.xml:289(para)
14741
msgid "Byobu currently does not launch at login (toggle on)"
14742
msgstr ""
14743
14744
#: serverguide/C/other-apps.xml:292(para)
14745
msgid ""
14746
"The <emphasis>key bindings</emphasis> determine such things as the escape "
14747
"sequence, new window, change window, etc. There are two key binding sets to "
14748
"choose from <emphasis>f-keys</emphasis> and <emphasis>screen-escape-"
14749
"keys</emphasis>. If you wish to use the original key bindings choose the "
14750
"<emphasis>none</emphasis> set."
14751
msgstr ""
14752
14753
#: serverguide/C/other-apps.xml:298(para)
14754
msgid ""
14755
"<application>byobu</application> provides a menu which displays the Ubuntu "
14756
"release, processor information, memory information, and the time and date. "
14757
"The effect is similar to a desktop menu."
14758
msgstr ""
14759
14760
#: serverguide/C/other-apps.xml:303(para)
14761
msgid ""
14762
"Using the <emphasis>\"Byobu currently does not launch at login (toggle "
14763
"on)\"</emphasis> option will cause <application>byobu</application> to be "
14764
"executed any time a terminal is opened. Changes made to "
14765
"<application>byobu</application> are on a per user basis, and will not "
14766
"affect other users on the system."
14767
msgstr ""
14768
14769
#: serverguide/C/other-apps.xml:309(para)
14770
msgid ""
14771
"One difference when using byobu is the <emphasis>scrollback</emphasis> mode. "
14772
"Press the <emphasis>F7</emphasis> key to enter scrollback mode. Scrollback "
14773
"mode allows you to navigate past output using <emphasis>vi</emphasis> like "
14774
"commands. Here is a quick list of movement commands:"
14775
msgstr ""
14776
14777
#: serverguide/C/other-apps.xml:316(para)
14778
msgid "<emphasis>h</emphasis> - Move the cursor left by one character"
14779
msgstr "<emphasis>h</emphasis> - Move the cursor left by one character"
14780
14781
#: serverguide/C/other-apps.xml:317(para)
14782
msgid "<emphasis>j</emphasis> - Move the cursor down by one line"
14783
msgstr "<emphasis>j</emphasis> - Move the cursor down by one line"
14784
14785
#: serverguide/C/other-apps.xml:318(para)
14786
msgid "<emphasis>k</emphasis> - Move the cursor up by one line"
14787
msgstr "<emphasis>k</emphasis> - Move the cursor up by one line"
14788
14789
#: serverguide/C/other-apps.xml:319(para)
14790
msgid "<emphasis>l</emphasis> - Move the cursor right by one character"
14791
msgstr "<emphasis>l</emphasis> - Move the cursor right by one character"
14792
14793
#: serverguide/C/other-apps.xml:320(para)
14794
msgid "<emphasis>0</emphasis> - Move to the beginning of the current line"
14795
msgstr "<emphasis>0</emphasis> - Move to the beginning of the current line"
14796
14797
#: serverguide/C/other-apps.xml:321(para)
14798
msgid "<emphasis>$</emphasis> - Move to the end of the current line"
14799
msgstr "<emphasis>$</emphasis> - Move to the end of the current line"
14800
14801
#: serverguide/C/other-apps.xml:322(para)
14802
msgid ""
14803
"<emphasis>G</emphasis> - Moves to the specified line (defaults to the end of "
14804
"the buffer)"
14805
msgstr ""
14806
"<emphasis>G</emphasis> - Moves to the specified line (defaults to the end of "
14807
"the buffer)"
14808
14809
#: serverguide/C/other-apps.xml:323(para)
14810
msgid "<emphasis>/</emphasis> - Search forward"
14811
msgstr "<emphasis>/</emphasis> - Search forward"
14812
14813
#: serverguide/C/other-apps.xml:324(para)
14814
msgid "<emphasis>?</emphasis> - Search backward"
14815
msgstr "<emphasis>?</emphasis> - Search backward"
14816
14817
#: serverguide/C/other-apps.xml:325(para)
14818
msgid ""
14819
"<emphasis>n</emphasis> - Moves to the next match, either forward or backword"
14820
msgstr ""
14821
"<emphasis>n</emphasis> - Moves to the next match, either forward or backword"
14822
14823
#: serverguide/C/other-apps.xml:334(para)
14824
msgid ""
14825
"See the <ulink "
14826
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man1/update-motd.1.html\">"
14827
"update-motd man page</ulink> for more options available to "
14828
"<application>update-motd</application>."
14829
msgstr ""
14830
14831
#: serverguide/C/other-apps.xml:340(para)
14832
msgid ""
14833
"The Debian Package of the Day <ulink "
14834
"url=\"http://debaday.debian.net/2007/10/04/weather-check-weather-conditions-"
14835
"and-forecasts-on-the-command-line/\">weather</ulink> article has more "
14836
"details about using the <application>weather</application>utility."
14837
msgstr ""
14838
"The Debian Package of the Day <ulink "
14839
"url=\"http://debaday.debian.net/2007/10/04/weather-check-weather-conditions-"
14840
"and-forecasts-on-the-command-line/\">weather</ulink> article has more "
14841
"details about using the <application>weather</application>utility."
14842
14843
#: serverguide/C/other-apps.xml:347(para)
14844
msgid ""
14845
"See the <ulink "
14846
"url=\"http://kitenet.net/~joey/code/etckeeper/\">etckeeper</ulink> site for "
14847
"more details on using <application>etckeeper</application>."
14848
msgstr ""
14849
"See the <ulink "
14850
"url=\"http://kitenet.net/~joey/code/etckeeper/\">etckeeper</ulink> site for "
14851
"more details on using <application>etckeeper</application>."
14852
14853
#: serverguide/C/other-apps.xml:353(para)
14854
msgid ""
14855
"The <ulink url=\"https://help.ubuntu.com/community/etckeeper\">etckeeper "
14856
"Ubuntu Wiki</ulink> page."
14857
msgstr ""
14858
14859
#: serverguide/C/other-apps.xml:358(para)
14860
msgid ""
14861
"For the latest news and information about <application>bzr</application> see "
14862
"the <ulink url=\"http://bazaar-vcs.org/\">bzr</ulink> web site."
14863
msgstr ""
14864
"For the latest news and information about <application>bzr</application> see "
14865
"the <ulink url=\"http://bazaar-vcs.org/\">bzr</ulink> web site."
14866
14867
#: serverguide/C/other-apps.xml:363(para)
14868
msgid ""
14869
"For more information on <application>screen</application> see the <ulink "
14870
"url=\"http://www.gnu.org/software/screen/\">screen web site</ulink>."
14871
msgstr ""
14872
"For more information on <application>screen</application> see the <ulink "
14873
"url=\"http://www.gnu.org/software/screen/\">screen web site</ulink>."
14874
14875
#: serverguide/C/other-apps.xml:368(para)
14876
msgid ""
14877
"And the <ulink url=\"https://help.ubuntu.com/community/Screen\">Ubuntu Wiki "
14878
"screen</ulink> page."
14879
msgstr ""
14880
14881
#: serverguide/C/other-apps.xml:373(para)
14882
msgid ""
14883
"Also, see the <application>byobu</application><ulink "
14884
"url=\"https://launchpad.net/byobu\">project page</ulink> for more "
14885
"information."
14886
msgstr ""
14887
14888
#: serverguide/C/network-config.xml:14(para)
14889
msgid ""
14890
"Networks consist of two or more devices, such as computer systems, printers, "
14891
"and related equipment which are connected by either physical cabling or "
14892
"wireless links for the purpose of sharing and distributing information among "
14893
"the connected devices."
14894
msgstr ""
14895
"Networks consist of two or more devices, such as computer systems, printers, "
14896
"and related equipment which are connected by either physical cabling or "
14897
"wireless links for the purpose of sharing and distributing information among "
14898
"the connected devices."
14899
14900
#: serverguide/C/network-config.xml:20(para)
14901
msgid ""
14902
"This section provides general and specific information pertaining to "
14903
"networking, including an overview of network concepts and detailed "
14904
"discussion of popular network protocols."
14905
msgstr ""
14906
"This section provides general and specific information pertaining to "
14907
"networking, including an overview of network concepts and detailed "
14908
"discussion of popular network protocols."
14909
14910
#: serverguide/C/network-config.xml:27(title)
14911
msgid "Network Configuration"
14912
msgstr "Network Configuration"
14913
14914
#: serverguide/C/network-config.xml:28(para)
14915
msgid ""
14916
"Ubuntu ships with a number of graphical utilities to configure your network "
14917
"devices. This document is geared toward server administrators and will focus "
14918
"on managing your network on the command line."
14919
msgstr ""
14920
"Ubuntu ships with a number of graphical utilities to configure your network "
14921
"devices. This document is geared towards server administrators and will "
14922
"focus on managing your network on the command line."
14923
14924
#: serverguide/C/network-config.xml:35(title)
14925
msgid "Ethernet Interfaces"
14926
msgstr ""
14927
14928
#: serverguide/C/network-config.xml:36(para)
14929
msgid ""
14930
"Ethernet interfaces are identified by the system using the naming convention "
14931
"of <emphasis role=\"italix\">ethX</emphasis>, where <emphasis "
14932
"role=\"italic\">X</emphasis> represents a numeric value. The first Ethernet "
14933
"interface is typically identified as <emphasis "
14934
"role=\"italic\">eth0</emphasis>, the second as <emphasis "
14935
"role=\"italic\">eth1</emphasis>, and all others should move up in numerical "
14936
"order."
14937
msgstr ""
14938
14939
#: serverguide/C/network-config.xml:46(title)
14940
msgid "Identify Ethernet Interfaces"
14941
msgstr ""
14942
14943
#: serverguide/C/network-config.xml:47(para)
14944
msgid ""
14945
"To quickly identify all available Ethernet interfaces, you can use the "
14946
"<application>ifconfig</application> command as shown below."
14947
msgstr ""
14948
14949
#: serverguide/C/network-config.xml:52(userinput)
14950
#, no-wrap
14951
msgid "ifconfig -a | grep eth"
14952
msgstr ""
14953
14954
#: serverguide/C/network-config.xml:51(screen)
14955
#, no-wrap
14956
msgid ""
14957
"\n"
14958
"<placeholder-1/>\n"
14959
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a\n"
14960
msgstr ""
14961
14962
#: serverguide/C/network-config.xml:55(para)
14963
msgid ""
14964
"Another application that can help identify all network interfaces available "
14965
"to your system is the <application>lshw</application> command. In the "
14966
"example below, <application>lshw</application> shows a single Ethernet "
14967
"interface with the logical name of <emphasis role=\"italic\">eth0</emphasis> "
14968
"along with bus information, driver details and all supported capabilities."
14969
msgstr ""
14970
14971
#: serverguide/C/network-config.xml:62(userinput)
14972
#, no-wrap
14973
msgid "sudo lshw -class network"
14974
msgstr ""
14975
14976
#: serverguide/C/network-config.xml:61(screen)
14977
#, no-wrap
14978
msgid ""
14979
"\n"
14980
"<placeholder-1/>\n"
14981
" *-network\n"
14982
" description: Ethernet interface\n"
14983
" product: BCM4401-B0 100Base-TX\n"
14984
" vendor: Broadcom Corporation\n"
14985
" physical id: 0\n"
14986
" bus info: pci@0000:03:00.0\n"
14987
" logical name: eth0\n"
14988
" version: 02\n"
14989
" serial: 00:15:c5:4a:16:5a\n"
14990
" size: 10MB/s\n"
14991
" capacity: 100MB/s\n"
14992
" width: 32 bits\n"
14993
" clock: 33MHz\n"
14994
" capabilities: (snipped for brevity)\n"
14995
" configuration: (snipped for brevity)\n"
14996
" resources: irq:17 memory:ef9fe000-ef9fffff\n"
14997
msgstr ""
14998
14999
#: serverguide/C/network-config.xml:83(title)
15000
msgid "Ethernet Interface Logical Names"
15001
msgstr ""
15002
15003
#: serverguide/C/network-config.xml:84(para)
15004
msgid ""
15005
"Interface logical names are configured in the file "
15006
"<filename>/etc/udev/rules.d/70-persistent-net.rules.</filename> If you would "
15007
"like control which interface receives a particular logical name, find the "
15008
"line matching the interfaces physical MAC address and modify the value of "
15009
"<emphasis role=\"italic\">NAME=ethX</emphasis> to the desired logical name. "
15010
"Reboot the system to commit your changes."
15011
msgstr ""
15012
15013
#: serverguide/C/network-config.xml:92(programlisting)
15014
#, no-wrap
15015
msgid ""
15016
"\n"
15017
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
15018
"ATTR{address}==\"00:15:c5:4a:16:5a\", ATTR{dev_id}==\"0x0\", "
15019
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth0\"\n"
15020
"SUBSYSTEM==\"net\", ACTION==\"add\", DRIVERS==\"?*\", "
15021
"ATTR{address}==\"00:15:c5:4a:16:5b\", ATTR{dev_id}==\"0x0\", "
15022
"ATTR{type}==\"1\", KERNEL==\"eth*\", NAME=\"eth1\"\n"
15023
msgstr ""
15024
15025
#: serverguide/C/network-config.xml:99(title)
15026
msgid "Ethernet Interface Settings"
15027
msgstr ""
15028
15029
#: serverguide/C/network-config.xml:100(para)
15030
msgid ""
15031
"<application>ethtool</application> is a program that displays and changes "
15032
"Ethernet card settings such as auto-negotiation, port speed, duplex mode, "
15033
"and Wake-on-LAN. It is not installed by default, but is available for "
15034
"installation in the repositories."
15035
msgstr ""
15036
15037
#: serverguide/C/network-config.xml:106(userinput)
15038
#, no-wrap
15039
msgid "sudo apt-get install ethtool"
15040
msgstr ""
15041
15042
#: serverguide/C/network-config.xml:108(para)
15043
msgid ""
15044
"The following is an example of how to view supported features and configured "
15045
"settings of an Ethernet interface."
15046
msgstr ""
15047
15048
#: serverguide/C/network-config.xml:113(userinput)
15049
#, no-wrap
15050
msgid "sudo ethtool eth0"
15051
msgstr ""
15052
15053
#: serverguide/C/network-config.xml:112(screen)
15054
#, no-wrap
15055
msgid ""
15056
"\n"
15057
"<placeholder-1/>\n"
15058
"Settings for eth0:\n"
15059
" Supported ports: [ TP ]\n"
15060
" Supported link modes: 10baseT/Half 10baseT/Full \n"
15061
" 100baseT/Half 100baseT/Full \n"
15062
" 1000baseT/Half 1000baseT/Full \n"
15063
" Supports auto-negotiation: Yes\n"
15064
" Advertised link modes: 10baseT/Half 10baseT/Full \n"
15065
" 100baseT/Half 100baseT/Full \n"
15066
" 1000baseT/Half 1000baseT/Full \n"
15067
" Advertised auto-negotiation: Yes\n"
15068
" Speed: 1000Mb/s\n"
15069
" Duplex: Full\n"
15070
" Port: Twisted Pair\n"
15071
" PHYAD: 1\n"
15072
" Transceiver: internal\n"
15073
" Auto-negotiation: on\n"
15074
" Supports Wake-on: g\n"
15075
" Wake-on: d\n"
15076
" Current message level: 0x000000ff (255)\n"
15077
" Link detected: yes\n"
15078
msgstr ""
15079
15080
#: serverguide/C/network-config.xml:135(para)
15081
msgid ""
15082
"Changes made with the <application>ethtool</application> command are "
15083
"temporary and will be lost after a reboot. If you would like to retain "
15084
"settings, simply add the desired <application>ethtool</application> command "
15085
"to a <emphasis role=\"italic\">pre-up</emphasis> statement in the interface "
15086
"configuration file <filename>/etc/network/interfaces</filename>."
15087
msgstr ""
15088
15089
#: serverguide/C/network-config.xml:141(para)
15090
msgid ""
15091
"The following is an example of how the interface identified as <emphasis "
15092
"role=\"italic\">eth0</emphasis> could be permanently configured with a port "
15093
"speed of 1000Mb/s running in full duplex mode."
15094
msgstr ""
15095
15096
#: serverguide/C/network-config.xml:145(programlisting)
15097
#, no-wrap
15098
msgid ""
15099
"\n"
15100
"auto eth0\n"
15101
"iface eth0 inet static\n"
15102
"pre-up /usr/sbin/ethtool -s eth0 speed 1000 duplex full\n"
15103
msgstr ""
15104
15105
#: serverguide/C/network-config.xml:151(para)
15106
msgid ""
15107
"Although the example above shows the interface configured to use the "
15108
"<emphasis role=\"italic\">static</emphasis> method, it actually works with "
15109
"other methods as well, such as DHCP. The example is meant to demonstrate "
15110
"only proper placement of the <emphasis role=\"italic\">pre-up</emphasis> "
15111
"statement in relation to the rest of the interface configuration."
15112
msgstr ""
15113
15114
#: serverguide/C/network-config.xml:163(title)
15115
msgid "IP Addressing"
15116
msgstr ""
15117
15118
#: serverguide/C/network-config.xml:164(para)
15119
msgid ""
15120
"The following section describes the process of configuring your systems IP "
15121
"address and default gateway needed for communicating on a local area network "
15122
"and the Internet."
15123
msgstr ""
15124
15125
#: serverguide/C/network-config.xml:171(title)
15126
msgid "Temporary IP Address Assignment"
15127
msgstr ""
15128
15129
#: serverguide/C/network-config.xml:172(para)
15130
msgid ""
15131
"For temporary network configurations, you can use standard commands such as "
15132
"<application>ip</application>, <application>ifconfig</application> and "
15133
"<application>route</application>, which are also found on most other "
15134
"GNU/Linux operating systems. These commands allow you to configure settings "
15135
"which take effect immediately, however they are not persistent and will be "
15136
"lost after a reboot."
15137
msgstr ""
15138
15139
#: serverguide/C/network-config.xml:180(para)
15140
msgid ""
15141
"To temporarily configure an IP address, you can use the "
15142
"<application>ifconfig</application> command in the following manner. Just "
15143
"modify the IP address and subnet mask to match your network requirements."
15144
msgstr ""
15145
15146
#: serverguide/C/network-config.xml:186(userinput)
15147
#, no-wrap
15148
msgid "sudo ifconfig eth0 10.0.0.100 netmask 255.255.255.0"
15149
msgstr ""
15150
15151
#: serverguide/C/network-config.xml:188(para)
15152
msgid ""
15153
"To verify the IP address configuration of <application>eth0</application>, "
15154
"you can use the <application>ifconfig</application> command in the following "
15155
"manner."
15156
msgstr ""
15157
15158
#: serverguide/C/network-config.xml:193(userinput)
15159
#, no-wrap
15160
msgid "ifconfig eth0"
15161
msgstr ""
15162
15163
#: serverguide/C/network-config.xml:192(screen)
15164
#, no-wrap
15165
msgid ""
15166
"\n"
15167
"<placeholder-1/>\n"
15168
"eth0 Link encap:Ethernet HWaddr 00:15:c5:4a:16:5a \n"
15169
" inet addr:10.0.0.100 Bcast:10.0.0.255 Mask:255.255.255.0\n"
15170
" inet6 addr: fe80::215:c5ff:fe4a:165a/64 Scope:Link\n"
15171
" UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1\n"
15172
" RX packets:466475604 errors:0 dropped:0 overruns:0 frame:0\n"
15173
" TX packets:403172654 errors:0 dropped:0 overruns:0 carrier:0\n"
15174
" collisions:0 txqueuelen:1000 \n"
15175
" RX bytes:2574778386 (2.5 GB) TX bytes:1618367329 (1.6 GB)\n"
15176
" Interrupt:16 \n"
15177
msgstr ""
15178
15179
#: serverguide/C/network-config.xml:204(para)
15180
msgid ""
15181
"To configure a default gateway, you can use the "
15182
"<application>route</application> command in the following manner. Modify the "
15183
"default gateway address to match your network requirements."
15184
msgstr ""
15185
15186
#: serverguide/C/network-config.xml:210(userinput)
15187
#, no-wrap
15188
msgid "sudo route add default gw 10.0.0.1 eth0"
15189
msgstr ""
15190
15191
#: serverguide/C/network-config.xml:212(para)
15192
msgid ""
15193
"To verify your default gateway configuration, you can use the "
15194
"<application>route</application> command in the following manner."
15195
msgstr ""
15196
15197
#: serverguide/C/network-config.xml:217(userinput)
15198
#, no-wrap
15199
msgid "route -n"
15200
msgstr ""
15201
15202
#: serverguide/C/network-config.xml:216(screen)
15203
#, no-wrap
15204
msgid ""
15205
"\n"
15206
"<placeholder-1/>\n"
15207
"Kernel IP routing table\n"
15208
"Destination Gateway Genmask Flags Metric Ref Use "
15209
"Iface\n"
15210
"10.0.0.0 0.0.0.0 255.255.255.0 U 1 0 0 "
15211
"eth0\n"
15212
"0.0.0.0 10.0.0.1 0.0.0.0 UG 0 0 0 "
15213
"eth0\n"
15214
msgstr ""
15215
15216
#: serverguide/C/network-config.xml:223(para)
15217
msgid ""
15218
"If you require DNS for your temporary network configuration, you can add DNS "
15219
"server IP addresses in the file <filename>/etc/resolv.conf</filename>. The "
15220
"example below shows how to enter two DNS servers to "
15221
"<filename>/etc/resolv.conf</filename>, which should be changed to servers "
15222
"appropriate for your network. A more lengthy description of DNS client "
15223
"configuration is in a following section."
15224
msgstr ""
15225
15226
#: serverguide/C/network-config.xml:230(programlisting)
15227
#, no-wrap
15228
msgid ""
15229
"\n"
15230
"nameserver 8.8.8.8\n"
15231
"nameserver 8.8.4.4\n"
15232
msgstr ""
15233
15234
#: serverguide/C/network-config.xml:234(para)
15235
msgid ""
15236
"If you no longer need this configuration and wish to purge all IP "
15237
"configuration from an interface, you can use the "
15238
"<application>ip</application> command with the flush option as shown below."
15239
msgstr ""
15240
15241
#: serverguide/C/network-config.xml:240(userinput)
15242
#, no-wrap
15243
msgid "ip addr flush eth0"
15244
msgstr ""
15245
15246
#: serverguide/C/network-config.xml:243(para)
15247
msgid ""
15248
"Flushing the IP configuration using the <application>ip</application> "
15249
"command does not clear the contents of "
15250
"<filename>/etc/resolv.conf</filename>. You must remove or modify those "
15251
"entries manually."
15252
msgstr ""
15253
15254
#: serverguide/C/network-config.xml:251(title)
15255
msgid "Dynamic IP Address Assignment (DHCP Client)"
15256
msgstr ""
15257
15258
#: serverguide/C/network-config.xml:252(para)
15259
msgid ""
15260
"To configure your server to use DHCP for dynamic address assignment, add the "
15261
"<emphasis role=\"italic\">dhcp</emphasis> method to the inet address family "
15262
"statement for the appropriate interface in the file "
15263
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
15264
"are configuring your first Ethernet interface identified as <emphasis "
15265
"role=\"italic\">eth0</emphasis>."
15266
msgstr ""
15267
15268
#: serverguide/C/network-config.xml:259(programlisting)
15269
#, no-wrap
15270
msgid ""
15271
"\n"
15272
"auto eth0\n"
15273
"iface eth0 inet dhcp\n"
15274
msgstr ""
15275
"\n"
15276
"auto eth0\n"
15277
"iface eth0 inet dhcp\n"
15278
15279
#: serverguide/C/network-config.xml:263(para)
15280
msgid ""
15281
"By adding an interface configuration as shown above, you can manually enable "
15282
"the interface through the <application>ifup</application> command which "
15283
"initiates the DHCP process via <application>dhclient</application>."
15284
msgstr ""
15285
15286
#: serverguide/C/network-config.xml:269(userinput) serverguide/C/network-config.xml:304(userinput)
15287
#, no-wrap
15288
msgid "sudo ifup eth0"
15289
msgstr ""
15290
15291
#: serverguide/C/network-config.xml:271(para)
15292
msgid ""
15293
"To manually disable the interface, you can use the "
15294
"<application>ifdown</application> command, which in turn will initiate the "
15295
"DHCP release process and shut down the interface."
15296
msgstr ""
15297
15298
#: serverguide/C/network-config.xml:277(userinput) serverguide/C/network-config.xml:311(userinput)
15299
#, no-wrap
15300
msgid "sudo ifdown eth0"
15301
msgstr ""
15302
15303
#: serverguide/C/network-config.xml:282(title)
15304
msgid "Static IP Address Assignment"
15305
msgstr ""
15306
15307
#: serverguide/C/network-config.xml:283(para)
15308
msgid ""
15309
"To configure your system to use a static IP address assignment, add the "
15310
"<emphasis role=\"italic\">static</emphasis> method to the inet address "
15311
"family statement for the appropriate interface in the file "
15312
"<filename>/etc/network/interfaces</filename>. The example below assumes you "
15313
"are configuring your first Ethernet interface identified as <emphasis "
15314
"role=\"italic\">eth0</emphasis>. Change the <emphasis "
15315
"role=\"italic\">address</emphasis>, <emphasis "
15316
"role=\"italic\">netmask</emphasis>, and <emphasis "
15317
"role=\"italic\">gateway</emphasis> values to meet the requirements of your "
15318
"network."
15319
msgstr ""
15320
15321
#: serverguide/C/network-config.xml:292(programlisting)
15322
#, no-wrap
15323
msgid ""
15324
"\n"
15325
"auto eth0\n"
15326
"iface eth0 inet static\n"
15327
"address 10.0.0.100\n"
15328
"netmask 255.255.255.0\n"
15329
"gateway 10.0.0.1\n"
15330
msgstr ""
15331
15332
#: serverguide/C/network-config.xml:299(para)
15333
msgid ""
15334
"By adding an interface configuration as shown above, you can manually enable "
15335
"the interface through the <application>ifup</application> command."
15336
msgstr ""
15337
15338
#: serverguide/C/network-config.xml:306(para)
15339
msgid ""
15340
"To manually disable the interface, you can use the "
15341
"<application>ifdown</application> command."
15342
msgstr ""
15343
15344
#: serverguide/C/network-config.xml:316(title)
15345
msgid "Loopback Interface"
15346
msgstr ""
15347
15348
#: serverguide/C/network-config.xml:317(para)
15349
msgid ""
15350
"The loopback interface is identified by the system as <emphasis "
15351
"role=\"italic\">lo</emphasis> and has a default IP address of 127.0.0.1. It "
15352
"can be viewed using the ifconfig command."
15353
msgstr ""
15354
15355
#: serverguide/C/network-config.xml:322(userinput)
15356
#, no-wrap
15357
msgid "ifconfig lo"
15358
msgstr ""
15359
15360
#: serverguide/C/network-config.xml:321(screen)
15361
#, no-wrap
15362
msgid ""
15363
"\n"
15364
"<placeholder-1/>\n"
15365
"lo Link encap:Local Loopback \n"
15366
" inet addr:127.0.0.1 Mask:255.0.0.0\n"
15367
" inet6 addr: ::1/128 Scope:Host\n"
15368
" UP LOOPBACK RUNNING MTU:16436 Metric:1\n"
15369
" RX packets:2718 errors:0 dropped:0 overruns:0 frame:0\n"
15370
" TX packets:2718 errors:0 dropped:0 overruns:0 carrier:0\n"
15371
" collisions:0 txqueuelen:0 \n"
15372
" RX bytes:183308 (183.3 KB) TX bytes:183308 (183.3 KB)\n"
15373
msgstr ""
15374
15375
#: serverguide/C/network-config.xml:332(para)
15376
msgid ""
15377
"By default, there should be two lines in "
15378
"<filename>/etc/network/interfaces</filename> responsible for automatically "
15379
"configuring your loopback interface. It is recommended that you keep the "
15380
"default settings unless you have a specific purpose for changing them. An "
15381
"example of the two default lines are shown below."
15382
msgstr ""
15383
15384
#: serverguide/C/network-config.xml:338(programlisting)
15385
#, no-wrap
15386
msgid ""
15387
"\n"
15388
"auto lo\n"
15389
"iface lo inet loopback\n"
15390
msgstr ""
15391
15392
#: serverguide/C/network-config.xml:347(title)
15393
msgid "Name Resolution"
15394
msgstr ""
15395
15396
#: serverguide/C/network-config.xml:348(para)
15397
msgid ""
15398
"Name resolution as it relates to IP networking is the process of mapping IP "
15399
"addresses to hostnames, making it easier to identify resources on a network. "
15400
"The following section will explain how to properly configure your system for "
15401
"name resolution using DNS and static hostname records."
15402
msgstr ""
15403
15404
#: serverguide/C/network-config.xml:356(title)
15405
msgid "DNS Client Configuration"
15406
msgstr ""
15407
15408
#: serverguide/C/network-config.xml:357(para)
15409
msgid ""
15410
"To configure your system to use DNS for name resolution, add the IP "
15411
"addresses of the DNS servers that are appropriate for your network in the "
15412
"file <filename>/etc/resolv.conf</filename>. You can also add an optional DNS "
15413
"suffix search-lists to match your network domain names."
15414
msgstr ""
15415
15416
#: serverguide/C/network-config.xml:362(para)
15417
msgid ""
15418
"Below is an example of a typical configuration of "
15419
"<filename>/etc/resolv.conf</filename> for a server on the domain \"<emphasis "
15420
"role=\"italic\">example.com</emphasis>\" and using two public DNS servers."
15421
msgstr ""
15422
15423
#: serverguide/C/network-config.xml:367(programlisting)
15424
#, no-wrap
15425
msgid ""
15426
"\n"
15427
"search example.com\n"
15428
"nameserver 8.8.8.8\n"
15429
"nameserver 8.8.4.4\n"
15430
msgstr ""
15431
15432
#: serverguide/C/network-config.xml:372(para)
15433
msgid ""
15434
"The <emphasis role=\"italic\">search</emphasis> option can also be used with "
15435
"multiple domain names so that DNS queries will be appended in the order in "
15436
"which they are entered. For example, your network may have multiple sub-"
15437
"domains to search; a parent domain of <emphasis "
15438
"role=\"italic\">example.com</emphasis>, and two sub-domains, <emphasis "
15439
"role=\"italic\">sales.example.com</emphasis> and <emphasis "
15440
"role=\"italic\">dev.example.com</emphasis>."
15441
msgstr ""
15442
15443
#: serverguide/C/network-config.xml:380(para)
15444
msgid ""
15445
"If you have multiple domains you wish to search, your configuration might "
15446
"look like the following."
15447
msgstr ""
15448
15449
#: serverguide/C/network-config.xml:383(programlisting)
15450
#, no-wrap
15451
msgid ""
15452
"\n"
15453
"search example.com sales.example.com dev.example.com\n"
15454
"nameserver 8.8.8.8\n"
15455
"nameserver 8.8.4.4\n"
15456
msgstr ""
15457
15458
#: serverguide/C/network-config.xml:388(para)
15459
msgid ""
15460
"If you try to ping a host with the name of <emphasis "
15461
"role=\"italic\">server1</emphasis>, your system will automatically query DNS "
15462
"for its Fully Qualified Domain Name (FQDN) in the following order:"
15463
msgstr ""
15464
15465
#: serverguide/C/network-config.xml:394(para)
15466
msgid "server1<emphasis role=\"bold\">.example.com</emphasis>"
15467
msgstr ""
15468
15469
#: serverguide/C/network-config.xml:399(para)
15470
msgid "server1<emphasis role=\"bold\">.sales.example.com</emphasis>"
15471
msgstr ""
15472
15473
#: serverguide/C/network-config.xml:404(para)
15474
msgid "server1<emphasis role=\"bold\">.dev.example.com</emphasis>"
15475
msgstr ""
15476
15477
#: serverguide/C/network-config.xml:409(para)
15478
msgid ""
15479
"If no matches are found, the DNS server will provide a result of <emphasis "
15480
"role=\"italic\">notfound</emphasis> and the DNS query will fail."
15481
msgstr ""
15482
15483
#: serverguide/C/network-config.xml:416(title)
15484
msgid "Static Hostnames"
15485
msgstr ""
15486
15487
#: serverguide/C/network-config.xml:417(para)
15488
msgid ""
15489
"Static hostnames are locally defined hostname-to-IP mappings located in the "
15490
"file <filename>/etc/hosts</filename>. Entries in the "
15491
"<filename>hosts</filename> file will have precedence over DNS by default. "
15492
"This means that if your system tries to resolve a hostname and it matches an "
15493
"entry in /etc/hosts, it will not attempt to look up the record in DNS. In "
15494
"some configurations, especially when Internet access is not required, "
15495
"servers that communicate with a limited number of resources can be "
15496
"conveniently set to use static hostnames instead of DNS."
15497
msgstr ""
15498
15499
#: serverguide/C/network-config.xml:424(para)
15500
msgid ""
15501
"The following is an example of a <filename>hosts</filename> file where a "
15502
"number of local servers have been identified by simple hostnames, aliases "
15503
"and their equivalent Fully Qualified Domain Names (FQDN's)."
15504
msgstr ""
15505
15506
#: serverguide/C/network-config.xml:428(programlisting)
15507
#, no-wrap
15508
msgid ""
15509
"\n"
15510
"127.0.0.1\tlocalhost\n"
15511
"127.0.1.1\tubuntu-server\n"
15512
"10.0.0.11\tserver1 vpn server1.example.com\n"
15513
"10.0.0.12\tserver2 mail server2.example.com\n"
15514
"10.0.0.13\tserver3 www server3.example.com\n"
15515
"10.0.0.14\tserver4 file server4.example.com\n"
15516
msgstr ""
15517
15518
#: serverguide/C/network-config.xml:437(para)
15519
msgid ""
15520
"In the above example, notice that each of the servers have been given "
15521
"aliases in addition to their proper names and FQDN's. <emphasis "
15522
"role=\"italic\">Server1</emphasis> has been mapped to the name <emphasis "
15523
"role=\"italic\">vpn</emphasis>, <emphasis role=\"italic\">server2</emphasis> "
15524
"is referred to as <emphasis role=\"italic\">mail</emphasis>, <emphasis "
15525
"role=\"italic\">server3</emphasis> as <emphasis "
15526
"role=\"italic\">www</emphasis>, and <emphasis "
15527
"role=\"italic\">server4</emphasis> as <emphasis "
15528
"role=\"italic\">file</emphasis>."
15529
msgstr ""
15530
15531
#: serverguide/C/network-config.xml:449(title)
15532
msgid "Name Service Switch Configuration"
15533
msgstr ""
15534
15535
#: serverguide/C/network-config.xml:450(para)
15536
msgid ""
15537
"The order in which your system selects a method of resolving hostnames to IP "
15538
"addresses is controlled by the Name Service Switch (NSS) configuration file "
15539
"<filename>/etc/nsswitch.conf</filename>. As mentioned in the previous "
15540
"section, typically static hostnames defined in the systems "
15541
"<filename>/etc/hosts</filename> file have precedence over names resolved "
15542
"from DNS. The following is an example of the line responsible for this order "
15543
"of hostname lookups in the file <filename>/etc/nsswitch.conf</filename>."
15544
msgstr ""
15545
15546
#: serverguide/C/network-config.xml:458(programlisting)
15547
#, no-wrap
15548
msgid ""
15549
"\n"
15550
"hosts: files mdns4_minimal [NOTFOUND=return] dns mdns4\n"
15551
msgstr ""
15552
15553
#: serverguide/C/network-config.xml:464(para)
15554
msgid ""
15555
"<emphasis role=\"bold\">files</emphasis> first tries to resolve static "
15556
"hostnames located in <filename>/etc/hosts</filename>."
15557
msgstr ""
15558
15559
#: serverguide/C/network-config.xml:470(para)
15560
msgid ""
15561
"<emphasis role=\"bold\">mdns4_minimal</emphasis> attempts to resolve the "
15562
"name using Multicast DNS."
15563
msgstr ""
15564
15565
#: serverguide/C/network-config.xml:475(para)
15566
msgid ""
15567
"<emphasis role=\"bold\">[NOTFOUND=return]</emphasis> means that any response "
15568
"of <emphasis role=\"italic\">notfound</emphasis> by the preceeding <emphasis "
15569
"role=\"italic\">mdns4_minimal</emphasis> process should be treated as "
15570
"authoritative and that the system should not try to continue hunting for an "
15571
"answer."
15572
msgstr ""
15573
15574
#: serverguide/C/network-config.xml:483(para)
15575
msgid ""
15576
"<emphasis role=\"bold\">dns</emphasis> represents a legacy unicast DNS query."
15577
msgstr ""
15578
15579
#: serverguide/C/network-config.xml:488(para)
15580
msgid ""
15581
"<emphasis role=\"bold\">mdns4</emphasis> represents a Multicast DNS query."
15582
msgstr ""
15583
15584
#: serverguide/C/network-config.xml:494(para)
15585
msgid ""
15586
"To modify the order of the above mentioned name resolution methods, you can "
15587
"simply change the <emphasis role=\"italic\">hosts:</emphasis> string to the "
15588
"value of your choosing. For example, if you prefer to use legacy Unicast DNS "
15589
"versus Multicast DNS, you can change the string in "
15590
"<filename>/etc/nsswitch.conf</filename> as shown below."
15591
msgstr ""
15592
15593
#: serverguide/C/network-config.xml:501(programlisting)
15594
#, no-wrap
15595
msgid ""
15596
"\n"
15597
"hosts: files dns [NOTFOUND=return] mdns4_minimal mdns4\n"
15598
msgstr ""
15599
15600
#: serverguide/C/network-config.xml:508(title)
15601
msgid "Bridging"
15602
msgstr "Bridging"
15603
15604
#: serverguide/C/network-config.xml:510(para)
15605
msgid ""
15606
"Bridging multiple interfaces is a more advanced configuration, but is very "
15607
"useful in multiple scenarios. One scenario is setting up a bridge with "
15608
"multiple network interfaces, then using a firewall to filter traffic between "
15609
"two network segments. Another scenario is using bridge on a system with one "
15610
"interface to allow virtual machines direct access to the outside network. "
15611
"The following example covers the latter scenario."
15612
msgstr ""
15613
"Bridging multiple interfaces is a more advanced configuration, but is very "
15614
"useful in multiple scenarios. One scenario is setting up a bridge with "
15615
"multiple network interfaces, then using a firewall to filter traffic between "
15616
"two network segments. Another scenario is using bridge on a system with one "
15617
"interface to allow virtual machines direct access to the outside network. "
15618
"The following example covers the latter scenario."
15619
15620
#: serverguide/C/network-config.xml:517(para)
15621
msgid ""
15622
"Before configuring a bridge you will need to install the <application>bridge-"
15623
"utils</application> package. To install the package, in a terminal enter:"
15624
msgstr ""
15625
"Before configuring a bridge you will need to install the <application>bridge-"
15626
"utils</application> package. To install the package, in a terminal enter:"
15627
15628
#: serverguide/C/network-config.xml:523(command)
15629
msgid "sudo apt-get install bridge-utils"
15630
msgstr "sudo apt-get install bridge-utils"
15631
15632
#: serverguide/C/network-config.xml:526(para)
15633
msgid ""
15634
"Next, configure the bridge by editing "
15635
"<filename>/etc/network/interfaces</filename>:"
15636
msgstr ""
15637
"Next, configure the bridge by editing "
15638
"<filename>/etc/network/interfaces</filename>:"
15639
15640
#: serverguide/C/network-config.xml:530(programlisting)
15641
#, no-wrap
15642
msgid ""
15643
"\n"
15644
"auto lo\n"
15645
"iface lo inet loopback\n"
15646
"\n"
15647
"auto br0\n"
15648
"iface br0 inet static\n"
15649
" address 192.168.0.10\n"
15650
" network 192.168.0.0\n"
15651
" netmask 255.255.255.0\n"
15652
" broadcast 192.168.0.255\n"
15653
" gateway 192.168.0.1\n"
15654
" bridge_ports eth0\n"
15655
" bridge_fd 9\n"
15656
" bridge_hello 2\n"
15657
" bridge_maxage 12\n"
15658
" bridge_stp off\n"
15659
msgstr ""
15660
"\n"
15661
"auto lo\n"
15662
"iface lo inet loopback\n"
15663
"\n"
15664
"auto br0\n"
15665
"iface br0 inet static\n"
15666
" address 192.168.0.10\n"
15667
" network 192.168.0.0\n"
15668
" netmask 255.255.255.0\n"
15669
" broadcast 192.168.0.255\n"
15670
" gateway 192.168.0.1\n"
15671
" bridge_ports eth0\n"
15672
" bridge_fd 9\n"
15673
" bridge_hello 2\n"
15674
" bridge_maxage 12\n"
15675
" bridge_stp off\n"
15676
15677
#: serverguide/C/network-config.xml:549(para)
15678
msgid "Enter the appropriate values for your physical interface and network."
15679
msgstr ""
15680
"Enter the appropriate values for your physical interface and network."
15681
15682
#: serverguide/C/network-config.xml:554(para)
15683
msgid "Now restart networking to enable the bridge interface:"
15684
msgstr "Now restart networking to enable the bridge interface:"
15685
15686
#: serverguide/C/network-config.xml:561(para)
15687
msgid ""
15688
"The new bridge interface should now be up and running. The "
15689
"<application>brctl</application> provides useful information about the state "
15690
"of the bridge, controls which interfaces are part of the bridge, etc. See "
15691
"<command>man brctl</command> for more information."
15692
msgstr ""
15693
"The new bridge interface should now be up and running. The "
15694
"<application>brctl</application> provides useful information about the state "
15695
"of the bridge, controls which interfaces are part of the bridge, etc. See "
15696
"<command>man brctl</command> for more information."
15697
15698
#: serverguide/C/network-config.xml:577(para)
15699
msgid ""
15700
"The <ulink url=\"https://help.ubuntu.com/community/Network\">Ubuntu Wiki "
15701
"Network page</ulink> has links to articles covering more advanced network "
15702
"configuration."
15703
msgstr ""
15704
15705
#: serverguide/C/network-config.xml:583(para)
15706
msgid ""
15707
"The <ulink "
15708
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/interfaces.5.html\">i"
15709
"nterfaces man page</ulink> has details on more options for "
15710
"<filename>/etc/network/interfaces</filename>."
15711
msgstr ""
15712
"The <ulink "
15713
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/interfaces.5.html\">i"
15714
"nterfaces man page</ulink> has details on more options for "
15715
"<filename>/etc/network/interfaces</filename>."
15716
15717
#: serverguide/C/network-config.xml:589(para)
15718
msgid ""
15719
"The <ulink "
15720
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/dhclient.8.html\">dhc"
15721
"lient man page</ulink> has details on more options for configuring DHCP "
15722
"client settings."
15723
msgstr ""
15724
15725
#: serverguide/C/network-config.xml:595(para)
15726
msgid ""
15727
"For more information on DNS client configuration see the <ulink "
15728
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/resolver.5.html\">res"
15729
"olver man page</ulink>. Also, Chapter 6 of O'Reilly's <ulink "
15730
"url=\"http://oreilly.com/catalog/linag2/book/ch06.html\">Linux Network "
15731
"Administrator's Guide</ulink> is a good source of resolver and name service "
15732
"configuration information."
15733
msgstr ""
15734
15735
#: serverguide/C/network-config.xml:603(para)
15736
msgid ""
15737
"For more information on <emphasis>bridging</emphasis> see the <ulink "
15738
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/brctl.8.html\">brctl "
15739
"man page</ulink> and the Linux Foundation's <ulink "
15740
"url=\"http://www.linuxfoundation.org/en/Net:Bridge\">Net:Bridge</ulink> page."
15741
msgstr ""
15742
15743
#: serverguide/C/network-config.xml:614(title)
15744
msgid "TCP/IP"
15745
msgstr "TCP/IP"
15746
15747
#: serverguide/C/network-config.xml:615(para)
15748
msgid ""
15749
"The Transmission Control Protocol and Internet Protocol (TCP/IP) is a "
15750
"standard set of protocols developed in the late 1970s by the Defense "
15751
"Advanced Research Projects Agency (DARPA) as a means of communication "
15752
"between different types of computers and computer networks. TCP/IP is the "
15753
"driving force of the Internet, and thus it is the most popular set of "
15754
"network protocols on Earth."
15755
msgstr ""
15756
"The Transmission Control Protocol and Internet Protocol (TCP/IP) is a "
15757
"standard set of protocols developed in the late 1970s by the Defense "
15758
"Advanced Research Projects Agency (DARPA) as a means of communication "
15759
"between different types of computers and computer networks. TCP/IP is the "
15760
"driving force of the Internet, and thus it is the most popular set of "
15761
"network protocols on Earth."
15762
15763
#: serverguide/C/network-config.xml:623(title)
15764
msgid "TCP/IP Introduction"
15765
msgstr "TCP/IP Introduction"
15766
15767
#: serverguide/C/network-config.xml:624(para)
15768
msgid ""
15769
"The two protocol components of TCP/IP deal with different aspects of "
15770
"computer networking. <emphasis>Internet Protocol</emphasis>, the \"IP\" of "
15771
"TCP/IP is a connectionless protocol which deals only with network packet "
15772
"routing using the <emphasis role=\"italics\">IP Datagram</emphasis> as the "
15773
"basic unit of networking information. The IP Datagram consists of a header "
15774
"followed by a message. The <emphasis> Transmission Control "
15775
"Protocol</emphasis> is the \"TCP\" of TCP/IP and enables network hosts to "
15776
"establish connections which may be used to exchange data streams. TCP also "
15777
"guarantees that the data between connections is delivered and that it "
15778
"arrives at one network host in the same order as sent from another network "
15779
"host."
15780
msgstr ""
15781
"The two protocol components of TCP/IP deal with different aspects of "
15782
"computer networking. <emphasis>Internet Protocol</emphasis>, the \"IP\" of "
15783
"TCP/IP is a connectionless protocol which deals only with network packet "
15784
"routing using the <emphasis role=\"italics\">IP Datagram</emphasis> as the "
15785
"basic unit of networking information. The IP Datagram consists of a header "
15786
"followed by a message. The <emphasis> Transmission Control "
15787
"Protocol</emphasis> is the \"TCP\" of TCP/IP and enables network hosts to "
15788
"establish connections which may be used to exchange data streams. TCP also "
15789
"guarantees that the data between connections is delivered and that it "
15790
"arrives at one network host in the same order as sent from another network "
15791
"host."
15792
15793
#: serverguide/C/network-config.xml:637(title)
15794
msgid "TCP/IP Configuration"
15795
msgstr "TCP/IP Configuration"
15796
15797
#: serverguide/C/network-config.xml:638(para)
15798
msgid ""
15799
"The TCP/IP protocol configuration consists of several elements which must be "
15800
"set by editing the appropriate configuration files, or deploying solutions "
15801
"such as the Dynamic Host Configuration Protocol (DHCP) server which in turn, "
15802
"can be configured to provide the proper TCP/IP configuration settings to "
15803
"network clients automatically. These configuration values must be set "
15804
"correctly in order to facilitate the proper network operation of your Ubuntu "
15805
"system."
15806
msgstr ""
15807
"The TCP/IP protocol configuration consists of several elements which must be "
15808
"set by editing the appropriate configuration files, or deploying solutions "
15809
"such as the Dynamic Host Configuration Protocol (DHCP) server which in turn, "
15810
"can be configured to provide the proper TCP/IP configuration settings to "
15811
"network clients automatically. These configuration values must be set "
15812
"correctly in order to facilitate the proper network operation of your Ubuntu "
15813
"system."
15814
15815
#: serverguide/C/network-config.xml:650(para)
15816
msgid ""
15817
"<emphasis role=\"bold\">IP address</emphasis> The IP address is a unique "
15818
"identifying string expressed as four decimal numbers ranging from zero (0) "
15819
"to two-hundred and fifty-five (255), separated by periods, with each of the "
15820
"four numbers representing eight (8) bits of the address for a total length "
15821
"of thirty-two (32) bits for the whole address. This format is called "
15822
"<emphasis>dotted quad notation</emphasis>."
15823
msgstr ""
15824
"<emphasis role=\"bold\">IP address</emphasis> The IP address is a unique "
15825
"identifying string expressed as four decimal numbers ranging from zero (0) "
15826
"to two-hundred and fifty-five (255), separated by full stops, with each of "
15827
"the four numbers representing eight (8) bits of the address for a total "
15828
"length of thirty-two (32) bits for the whole address. This format is called "
15829
"<emphasis>dotted quad notation</emphasis>."
15830
15831
#: serverguide/C/network-config.xml:660(para)
15832
msgid ""
15833
"<emphasis role=\"bold\">Netmask</emphasis> The Subnet Mask (or simply, "
15834
"<emphasis>netmask</emphasis>) is a local bit mask, or set of flags which "
15835
"separate the portions of an IP address significant to the network from the "
15836
"bits significant to the <emphasis>subnetwork</emphasis>. For example, in a "
15837
"Class C network, the standard netmask is 255.255.255.0 which masks the first "
15838
"three bytes of the IP address and allows the last byte of the IP address to "
15839
"remain available for specifying hosts on the subnetwork."
15840
msgstr ""
15841
"<emphasis role=\"bold\">Netmask</emphasis> The Subnet Mask (or simply, "
15842
"<emphasis>netmask</emphasis>) is a local bit mask, or set of flags which "
15843
"separate the portions of an IP address significant to the network from the "
15844
"bits significant to the <emphasis>subnetwork</emphasis>. For example, in a "
15845
"Class C network, the standard netmask is 255.255.255.0 which masks the first "
15846
"three bytes of the IP address and allows the last byte of the IP address to "
15847
"remain available for specifying hosts on the subnetwork."
15848
15849
#: serverguide/C/network-config.xml:671(para)
15850
msgid ""
15851
"<emphasis role=\"bold\">Network Address</emphasis> The Network Address "
15852
"represents the bytes comprising the network portion of an IP address. For "
15853
"example, the host 12.128.1.2 in a Class A network would use 12.0.0.0 as the "
15854
"network address, where twelve (12) represents the first byte of the IP "
15855
"address, (the network part) and zeroes (0) in all of the remaining three "
15856
"bytes to represent the potential host values. A network host using the "
15857
"private IP address 192.168.1.100 would in turn use a Network Address of "
15858
"192.168.1.0, which specifies the first three bytes of the Class C 192.168.1 "
15859
"network and a zero (0) for all the possible hosts on the network."
15860
msgstr ""
15861
"<emphasis role=\"bold\">Network Address</emphasis> The Network Address "
15862
"represents the bytes comprising the network portion of an IP address. For "
15863
"example, the host 12.128.1.2 in a Class A network would use 12.0.0.0 as the "
15864
"network address, where twelve (12) represents the first byte of the IP "
15865
"address, (the network part) and zeroes (0) in all of the remaining three "
15866
"bytes to represent the potential host values. A network host using the "
15867
"private IP address 192.168.1.100 would in turn use a Network Address of "
15868
"192.168.1.0, which specifies the first three bytes of the Class C 192.168.1 "
15869
"network and a zero (0) for all the possible hosts on the network."
15870
15871
#: serverguide/C/network-config.xml:684(para)
15872
msgid ""
15873
"<emphasis role=\"bold\">Broadcast Address</emphasis> The Broadcast Address "
15874
"is an IP address which allows network data to be sent simultaneously to all "
15875
"hosts on a given subnetwork rather than specifying a particular host. The "
15876
"standard general broadcast address for IP networks is 255.255.255.255, but "
15877
"this broadcast address cannot be used to send a broadcast message to every "
15878
"host on the Internet because routers block it. A more appropriate broadcast "
15879
"address is set to match a specific subnetwork. For example, on the private "
15880
"Class C IP network, 192.168.1.0, the broadcast address is 192.168.1.255. "
15881
"Broadcast messages are typically produced by network protocols such as the "
15882
"Address Resolution Protocol (ARP) and the Routing Information Protocol (RIP)."
15883
msgstr ""
15884
"<emphasis role=\"bold\">Broadcast Address</emphasis> The Broadcast Address "
15885
"is an IP address which allows network data to be sent simultaneously to all "
15886
"hosts on a given subnetwork rather than specifying a particular host. The "
15887
"standard general broadcast address for IP networks is 255.255.255.255, but "
15888
"this broadcast address cannot be used to send a broadcast message to every "
15889
"host on the Internet because routers block it. A more appropriate broadcast "
15890
"address is set to match a specific subnetwork. For example, on the private "
15891
"Class C IP network, 192.168.1.0, the broadcast address is 192.168.1.255. "
15892
"Broadcast messages are typically produced by network protocols such as the "
15893
"Address Resolution Protocol (ARP) and the Routing Information Protocol (RIP)."
15894
15895
#: serverguide/C/network-config.xml:697(para)
15896
msgid ""
15897
"<emphasis role=\"bold\">Gateway Address</emphasis> A Gateway Address is the "
15898
"IP address through which a particular network, or host on a network, may be "
15899
"reached. If one network host wishes to communicate with another network "
15900
"host, and that host is not located on the same network, then a "
15901
"<emphasis>gateway</emphasis> must be used. In many cases, the Gateway "
15902
"Address will be that of a router on the same network, which will in turn "
15903
"pass traffic on to other networks or hosts, such as Internet hosts. The "
15904
"value of the Gateway Address setting must be correct, or your system will "
15905
"not be able to reach any hosts beyond those on the same network."
15906
msgstr ""
15907
"<emphasis role=\"bold\">Gateway Address</emphasis> A Gateway Address is the "
15908
"IP address through which a particular network, or host on a network, may be "
15909
"reached. If one network host wishes to communicate with another network "
15910
"host, and that host is not located on the same network, then a "
15911
"<emphasis>gateway</emphasis> must be used. In many cases, the Gateway "
15912
"Address will be that of a router on the same network, which will in turn "
15913
"pass traffic on to other networks or hosts, such as Internet hosts. The "
15914
"value of the Gateway Address setting must be correct, or your system will "
15915
"not be able to reach any hosts beyond those on the same network."
15916
15917
#: serverguide/C/network-config.xml:708(para)
15918
msgid ""
15919
"<emphasis role=\"bold\">Nameserver Address</emphasis> Nameserver Addresses "
15920
"represent the IP addresses of Domain Name Service (DNS) systems, which "
15921
"resolve network hostnames into IP addresses. There are three levels of "
15922
"Nameserver Addresses, which may be specified in order of precedence: The "
15923
"<emphasis>Primary</emphasis> Nameserver, the <emphasis>Secondary</emphasis> "
15924
"Nameserver, and the <emphasis>Tertiary</emphasis> Nameserver. In order for "
15925
"your system to be able to resolve network hostnames into their corresponding "
15926
"IP addresses, you must specify valid Nameserver Addresses which you are "
15927
"authorized to use in your system's TCP/IP configuration. In many cases these "
15928
"addresses can and will be provided by your network service provider, but "
15929
"many free and publicly accessible nameservers are available for use, such as "
15930
"the Level3 (Verizon) servers with IP addresses from 4.2.2.1 to 4.2.2.6."
15931
msgstr ""
15932
"<emphasis role=\"bold\">Nameserver Address</emphasis> Nameserver Addresses "
15933
"represent the IP addresses of Domain Name Service (DNS) systems, which "
15934
"resolve network hostnames into IP addresses. There are three levels of "
15935
"Nameserver Addresses, which may be specified in order of precedence: The "
15936
"<emphasis>Primary</emphasis> Nameserver, the <emphasis>Secondary</emphasis> "
15937
"Nameserver, and the <emphasis>Tertiary</emphasis> Nameserver. In order for "
15938
"your system to be able to resolve network hostnames into their corresponding "
15939
"IP addresses, you must specify valid Nameserver Addresses which you are "
15940
"authorised to use in your system's TCP/IP configuration. In many cases these "
15941
"addresses can and will be provided by your network service provider, but "
15942
"many free and publicly accessible nameservers are available for use, such as "
15943
"the Level3 (Verizon) servers with IP addresses from 4.2.2.1 to 4.2.2.6."
15944
15945
#: serverguide/C/network-config.xml:722(para)
15946
msgid ""
15947
"The IP address, Netmask, Network Address, Broadcast Address, and Gateway "
15948
"Address are typically specified via the appropriate directives in the file "
15949
"<filename>/etc/network/interfaces</filename>. The Nameserver Addresses are "
15950
"typically specified via <emphasis>nameserver</emphasis> directives in the "
15951
"file <filename>/etc/resolv.conf</filename>. For more information, view the "
15952
"system manual page for <filename>interfaces</filename> or "
15953
"<filename>resolv.conf</filename> respectively, with the following commands "
15954
"typed at a terminal prompt:"
15955
msgstr ""
15956
"The IP address, Netmask, Network Address, Broadcast Address, and Gateway "
15957
"Address are typically specified via the appropriate directives in the file "
15958
"<filename>/etc/network/interfaces</filename>. The Nameserver Addresses are "
15959
"typically specified via <emphasis>nameserver</emphasis> directives in the "
15960
"file <filename>/etc/resolv.conf</filename>. For more information, view the "
15961
"system manual page for <filename>interfaces</filename> or "
15962
"<filename>resolv.conf</filename> respectively, with the following commands "
15963
"typed at a terminal prompt:"
15964
15965
#: serverguide/C/network-config.xml:729(para)
15966
msgid ""
15967
"Access the system manual page for <filename>interfaces</filename> with the "
15968
"following command:"
15969
msgstr ""
15970
"Access the system manual page for <filename>interfaces</filename> with the "
15971
"following command:"
15972
15973
#: serverguide/C/network-config.xml:734(command)
15974
msgid "man interfaces"
15975
msgstr "man interfaces"
15976
15977
#: serverguide/C/network-config.xml:737(para)
15978
msgid ""
15979
"Access the system manual page for <filename>resolv.conf</filename> with the "
15980
"following command:"
15981
msgstr ""
15982
"Access the system manual page for <filename>resolv.conf</filename> with the "
15983
"following command:"
15984
15985
#: serverguide/C/network-config.xml:741(command)
15986
msgid "man resolv.conf"
15987
msgstr "man resolv.conf"
15988
15989
#: serverguide/C/network-config.xml:646(para)
15990
msgid ""
15991
"The common configuration elements of TCP/IP and their purposes are as "
15992
"follows: <placeholder-1/>"
15993
msgstr ""
15994
"The common configuration elements of TCP/IP and their purposes are as "
15995
"follows: <placeholder-1/>"
15996
15997
#: serverguide/C/network-config.xml:748(title)
15998
msgid "IP Routing"
15999
msgstr "IP Routeing"
16000
16001
#: serverguide/C/network-config.xml:749(para)
16002
msgid ""
16003
"IP routing is a means of specifying and discovering paths in a TCP/IP "
16004
"network along which network data may be sent. Routing uses a set of "
16005
"<emphasis>routing tables</emphasis> to direct the forwarding of network data "
16006
"packets from their source to the destination, often via many intermediary "
16007
"network nodes known as <emphasis>routers</emphasis>. There are two primary "
16008
"forms of IP routing: <emphasis>Static Routing</emphasis> and "
16009
"<emphasis>Dynamic Routing.</emphasis>"
16010
msgstr ""
16011
"IP routing is a means of specifying and discovering paths in a TCP/IP "
16012
"network along which network data may be sent. Routing uses a set of "
16013
"<emphasis>routing tables</emphasis> to direct the forwarding of network data "
16014
"packets from their source to the destination, often via many intermediary "
16015
"network nodes known as <emphasis>routers</emphasis>. There are two primary "
16016
"forms of IP routing: <emphasis>Static Routing</emphasis> and "
16017
"<emphasis>Dynamic Routing.</emphasis>"
16018
16019
#: serverguide/C/network-config.xml:758(para)
16020
msgid ""
16021
"Static routing involves manually adding IP routes to the system's routing "
16022
"table, and this is usually done by manipulating the routing table with the "
16023
"<application>route</application> command. Static routing enjoys many "
16024
"advantages over dynamic routing, such as simplicity of implementation on "
16025
"smaller networks, predictability (the routing table is always computed in "
16026
"advance, and thus the route is precisely the same each time it is used), and "
16027
"low overhead on other routers and network links due to the lack of a dynamic "
16028
"routing protocol. However, static routing does present some disadvantages as "
16029
"well. For example, static routing is limited to small networks and does not "
16030
"scale well. Static routing also fails completely to adapt to network outages "
16031
"and failures along the route due to the fixed nature of the route."
16032
msgstr ""
16033
"Static routeing involves manually adding IP routes to the system's routeing "
16034
"table, and this is usually done by manipulating the routeing table with the "
16035
"<application>route</application> command. Static routeing enjoys many "
16036
"advantages over dynamic routeing, such as simplicity of implementation on "
16037
"smaller networks, predictability (the routeing table is always computed in "
16038
"advance, and thus the route is precisely the same each time it is used), and "
16039
"low overhead on other routers and network links due to the lack of a dynamic "
16040
"routing protocol. However, static routeing does present some disadvantages "
16041
"as well. For example, static routeing is limited to small networks and does "
16042
"not scale well. Static routeing also fails completely to adapt to network "
16043
"outages and failures along the route due to the fixed nature of the route."
16044
16045
#: serverguide/C/network-config.xml:768(para)
16046
msgid ""
16047
"Dynamic routing depends on large networks with multiple possible IP routes "
16048
"from a source to a destination and makes use of special routing protocols, "
16049
"such as the Router Information Protocol (RIP), which handle the automatic "
16050
"adjustments in routing tables that make dynamic routing possible. Dynamic "
16051
"routing has several advantages over static routing, such as superior "
16052
"scalability and the ability to adapt to failures and outages along network "
16053
"routes. Additionally, there is less manual configuration of the routing "
16054
"tables, since routers learn from one another about their existence and "
16055
"available routes. This trait also eliminates the possibility of introducing "
16056
"mistakes in the routing tables via human error. Dynamic routing is not "
16057
"perfect, however, and presents disadvantages such as heightened complexity "
16058
"and additional network overhead from router communications, which does not "
16059
"immediately benefit the end users, but still consumes network bandwidth."
16060
msgstr ""
16061
"Dynamic routing depends on large networks with multiple possible IP routes "
16062
"from a source to a destination and makes use of special routing protocols, "
16063
"such as the Router Information Protocol (RIP), which handle the automatic "
16064
"adjustments in routing tables that make dynamic routing possible. Dynamic "
16065
"routing has several advantages over static routing, such as superior "
16066
"scalability and the ability to adapt to failures and outages along network "
16067
"routes. Additionally, there is less manual configuration of the routing "
16068
"tables, since routers learn from one another about their existence and "
16069
"available routes. This trait also eliminates the possibility of introducing "
16070
"mistakes in the routing tables via human error. Dynamic routing is not "
16071
"perfect, however, and presents disadvantages such as heightened complexity "
16072
"and additional network overhead from router communications, which does not "
16073
"immediately benefit the end users, but still consumes network bandwidth."
16074
16075
#: serverguide/C/network-config.xml:782(title)
16076
msgid "TCP and UDP"
16077
msgstr "TCP and UDP"
16078
16079
#: serverguide/C/network-config.xml:783(para)
16080
msgid ""
16081
"TCP is a connection-based protocol, offering error correction and guaranteed "
16082
"delivery of data via what is known as <emphasis>flow control</emphasis>. "
16083
"Flow control determines when the flow of a data stream needs to be stopped, "
16084
"and previously sent data packets should to be re-sent due to problems such "
16085
"as <emphasis>collisions</emphasis>, for example, thus ensuring complete and "
16086
"accurate delivery of the data. TCP is typically used in the exchange of "
16087
"important information such as database transactions."
16088
msgstr ""
16089
"TCP is a connection-based protocol, offering error correction and guaranteed "
16090
"delivery of data via what is known as <emphasis>flow control</emphasis>. "
16091
"Flow control determines when the flow of a data stream needs to be stopped, "
16092
"and previously sent data packets should to be re-sent due to problems such "
16093
"as <emphasis>collisions</emphasis>, for example, thus ensuring complete and "
16094
"accurate delivery of the data. TCP is typically used in the exchange of "
16095
"important information such as database transactions."
16096
16097
#: serverguide/C/network-config.xml:791(para)
16098
msgid ""
16099
"The User Datagram Protocol (UDP), on the other hand, is a "
16100
"<emphasis>connectionless</emphasis> protocol which seldom deals with the "
16101
"transmission of important data because it lacks flow control or any other "
16102
"method to ensure reliable delivery of the data. UDP is commonly used in such "
16103
"applications as audio and video streaming, where it is considerably faster "
16104
"than TCP due to the lack of error correction and flow control, and where the "
16105
"loss of a few packets is not generally catastrophic."
16106
msgstr ""
16107
"The User Datagram Protocol (UDP), on the other hand, is a "
16108
"<emphasis>connectionless</emphasis> protocol which seldom deals with the "
16109
"transmission of important data because it lacks flow control or any other "
16110
"method to ensure reliable delivery of the data. UDP is commonly used in such "
16111
"applications as audio and video streaming, where it is considerably faster "
16112
"than TCP due to the lack of error correction and flow control, and where the "
16113
"loss of a few packets is not generally catastrophic."
16114
16115
#: serverguide/C/network-config.xml:801(title)
16116
msgid "ICMP"
16117
msgstr "ICMP"
16118
16119
#: serverguide/C/network-config.xml:802(para)
16120
msgid ""
16121
"The Internet Control Messaging Protocol (ICMP) is an extension to the "
16122
"Internet Protocol (IP) as defined in the Request For Comments (RFC) #792 and "
16123
"supports network packets containing control, error, and informational "
16124
"messages. ICMP is used by such network applications as the "
16125
"<application>ping</application> utility, which can determine the "
16126
"availability of a network host or device. Examples of some error messages "
16127
"returned by ICMP which are useful to both network hosts and devices such as "
16128
"routers, include <emphasis>Destination Unreachable</emphasis> and "
16129
"<emphasis>Time Exceeded</emphasis>."
16130
msgstr ""
16131
"The Internet Control Messaging Protocol (ICMP) is an extension to the "
16132
"Internet Protocol (IP) as defined in the Request For Comments (RFC) #792 and "
16133
"supports network packets containing control, error, and informational "
16134
"messages. ICMP is used by such network applications as the "
16135
"<application>ping</application> utility, which can determine the "
16136
"availability of a network host or device. Examples of some error messages "
16137
"returned by ICMP which are useful to both network hosts and devices such as "
16138
"routers, include <emphasis>Destination Unreachable</emphasis> and "
16139
"<emphasis>Time Exceeded</emphasis>."
16140
16141
#: serverguide/C/network-config.xml:812(title)
16142
msgid "Daemons"
16143
msgstr "Daemons"
16144
16145
#: serverguide/C/network-config.xml:813(para)
16146
msgid ""
16147
"Daemons are special system applications which typically execute continuously "
16148
"in the background and await requests for the functions they provide from "
16149
"other applications. Many daemons are network-centric; that is, a large "
16150
"number of daemons executing in the background on an Ubuntu system may "
16151
"provide network-related functionality. Some examples of such network daemons "
16152
"include the <emphasis>Hyper Text Transport Protocol Daemon</emphasis> "
16153
"(httpd), which provides web server functionality; the <emphasis>Secure SHell "
16154
"Daemon</emphasis> (sshd), which provides secure remote login shell and file "
16155
"transfer capabilities; and the <emphasis>Internet Message Access Protocol "
16156
"Daemon</emphasis> (imapd), which provides E-Mail services."
16157
msgstr ""
16158
"Daemons are special system applications which typically execute continuously "
16159
"in the background and await requests for the functions they provide from "
16160
"other applications. Many daemons are network-centric; that is, a large "
16161
"number of daemons executing in the background on an Ubuntu system may "
16162
"provide network-related functionality. Some examples of such network daemons "
16163
"include the <emphasis>Hyper Text Transport Protocol Daemon</emphasis> "
16164
"(httpd), which provides Web server functionality; the <emphasis>Secure SHell "
16165
"Daemon</emphasis> (sshd), which provides secure remote login shell and file "
16166
"transfer capabilities; and the <emphasis>Internet Message Access Protocol "
16167
"Daemon</emphasis> (imapd), which provides E-Mail services."
16168
16169
#: serverguide/C/network-config.xml:828(para)
16170
msgid ""
16171
"There are man pages for <ulink "
16172
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man7/tcp.7.html\">TCP</uli"
16173
"nk> and <ulink "
16174
"url=\"http://manpages.ubuntu.com/manpages/lucid/man7/ip.7.html\">IP</ulink> "
16175
"that contain more useful information."
16176
msgstr ""
16177
16178
#: serverguide/C/network-config.xml:834(para)
16179
msgid ""
16180
"Also, see the <ulink "
16181
"url=\"http://www.redbooks.ibm.com/abstracts/gg243376.html\">TCP/IP Tutorial "
16182
"and Technical Overview</ulink> IBM Redbook."
16183
msgstr ""
16184
"Also, see the <ulink "
16185
"url=\"http://www.redbooks.ibm.com/abstracts/gg243376.html\">TCP/IP Tutorial "
16186
"and Technical Overview</ulink> IBM Redbook."
16187
16188
#: serverguide/C/network-config.xml:840(para)
16189
msgid ""
16190
"Another resource is O'Reilly's <ulink "
16191
"url=\"http://oreilly.com/catalog/9780596002978/\">TCP/IP Network "
16192
"Administration</ulink>."
16193
msgstr ""
16194
"Another resource is O'Reilly's <ulink "
16195
"url=\"http://oreilly.com/catalog/9780596002978/\">TCP/IP Network "
16196
"Administration</ulink>."
16197
16198
#: serverguide/C/network-config.xml:849(title)
16199
msgid "Dynamic Host Configuration Protocol (DHCP)"
16200
msgstr "Dynamic Host Configuration Protocol (DHCP)"
16201
16202
#: serverguide/C/network-config.xml:850(para)
16203
msgid ""
16204
"The Dynamic Host Configuration Protocol (DHCP) is a network service that "
16205
"enables host computers to be automatically assigned settings from a server "
16206
"as opposed to manually configuring each network host. Computers configured "
16207
"to be DHCP clients have no control over the settings they receive from the "
16208
"DHCP server, and the configuration is transparent to the computer's user."
16209
msgstr ""
16210
"The Dynamic Host Configuration Protocol (DHCP) is a network service that "
16211
"enables host computers to be automatically assigned settings from a server "
16212
"as opposed to manually configuring each network host. Computers configured "
16213
"to be DHCP clients have no control over the settings they receive from the "
16214
"DHCP server, and the configuration is transparent to the computer's user."
16215
16216
#: serverguide/C/network-config.xml:857(para)
16217
msgid ""
16218
"The most common settings provided by a DHCP server to DHCP clients include:"
16219
msgstr ""
16220
"The most common settings provided by a DHCP server to DHCP clients include:"
16221
16222
#: serverguide/C/network-config.xml:862(para)
16223
msgid "IP-Address and Netmask"
16224
msgstr "IP-Address and Netmask"
16225
16226
#: serverguide/C/network-config.xml:865(para)
16227
msgid "DNS"
16228
msgstr "DNS"
16229
16230
#: serverguide/C/network-config.xml:868(para)
16231
msgid "WINS"
16232
msgstr "WINS"
16233
16234
#: serverguide/C/network-config.xml:871(para)
16235
msgid ""
16236
"However, a DHCP server can also supply configuration properties such as:"
16237
msgstr ""
16238
"However, a DHCP server can also supply configuration properties such as:"
16239
16240
#: serverguide/C/network-config.xml:876(para)
16241
msgid "Host Name"
16242
msgstr "Host Name"
16243
16244
#: serverguide/C/network-config.xml:879(para)
16245
msgid "Domain Name"
16246
msgstr "Domain Name"
16247
16248
#: serverguide/C/network-config.xml:882(para)
16249
msgid "Default Gateway"
16250
msgstr "Default Gateway"
16251
16252
#: serverguide/C/network-config.xml:885(para)
16253
msgid "Time Server"
16254
msgstr "Time Server"
16255
16256
#: serverguide/C/network-config.xml:888(para)
16257
msgid "Print Server"
16258
msgstr "Print Server"
16259
16260
#: serverguide/C/network-config.xml:891(para)
16261
msgid ""
16262
"The advantage of using DHCP is that changes to the network, for example a "
16263
"change in the address of the DNS server, need only be changed at the DHCP "
16264
"server, and all network hosts will be reconfigured the next time their DHCP "
16265
"clients poll the DHCP server. As an added advantage, it is also easier to "
16266
"integrate new computers into the network, as there is no need to check for "
16267
"the availability of an IP address. Conflicts in IP address allocation are "
16268
"also reduced."
16269
msgstr ""
16270
"The advantage of using DHCP is that changes to the network, for example a "
16271
"change in the address of the DNS server, need only be changed at the DHCP "
16272
"server, and all network hosts will be reconfigured the next time their DHCP "
16273
"clients poll the DHCP server. As an added advantage, it is also easier to "
16274
"integrate new computers into the network, as there is no need to check for "
16275
"the availability of an IP address. Conflicts in IP address allocation are "
16276
"also reduced."
16277
16278
#: serverguide/C/network-config.xml:899(para)
16279
msgid "A DHCP server can provide configuration settings using two methods:"
16280
msgstr "A DHCP server can provide configuration settings using two methods:"
16281
16282
#: serverguide/C/network-config.xml:904(term)
16283
msgid "MAC Address"
16284
msgstr "MAC Address"
16285
16286
#: serverguide/C/network-config.xml:906(para)
16287
msgid ""
16288
"This method entails using DHCP to identify the unique hardware address of "
16289
"each network card connected to the network and then continually supplying a "
16290
"constant configuration each time the DHCP client makes a request to the DHCP "
16291
"server using that network device."
16292
msgstr ""
16293
"This method entails using DHCP to identify the unique hardware address of "
16294
"each network card connected to the network and then continually supplying a "
16295
"constant configuration each time the DHCP client makes a request to the DHCP "
16296
"server using that network device."
16297
16298
#: serverguide/C/network-config.xml:915(term)
16299
msgid "Address Pool"
16300
msgstr "Address Pool"
16301
16302
#: serverguide/C/network-config.xml:917(para)
16303
msgid ""
16304
"This method entails defining a pool (sometimes also called a range or scope) "
16305
"of IP addresses from which DHCP clients are supplied their configuration "
16306
"properties dynamically and on a \"first come, first served\" basis. When a "
16307
"DHCP client is no longer on the network for a specified period, the "
16308
"configuration is expired and released back to the address pool for use by "
16309
"other DHCP Clients."
16310
msgstr ""
16311
"This method entails defining a pool (sometimes also called a range or scope) "
16312
"of IP addresses from which DHCP clients are supplied their configuration "
16313
"properties dynamically and on a \"first come, first served\" basis. When a "
16314
"DHCP client is no longer on the network for a specified period, the "
16315
"configuration is expired and released back to the address pool for use by "
16316
"other DHCP Clients."
16317
16318
#: serverguide/C/network-config.xml:928(para)
16319
msgid ""
16320
"Ubuntu is shipped with both DHCP server and client. The server is "
16321
"<application>dhcpd</application> (dynamic host configuration protocol "
16322
"daemon). The client provided with Ubuntu is "
16323
"<application>dhclient</application> and should be installed on all computers "
16324
"required to be automatically configured. Both programs are easy to install "
16325
"and configure and will be automatically started at system boot."
16326
msgstr ""
16327
"Ubuntu is shipped with both DHCP server and client. The server is "
16328
"<application>dhcpd</application> (dynamic host configuration protocol "
16329
"daemon). The client provided with Ubuntu is "
16330
"<application>dhclient</application> and should be installed on all computers "
16331
"required to be automatically configured. Both programs are easy to install "
16332
"and configure and will be automatically started at system boot."
16333
16334
#: serverguide/C/network-config.xml:938(para)
16335
msgid ""
16336
"At a terminal prompt, enter the following command to install "
16337
"<application>dhcpd</application>:"
16338
msgstr ""
16339
"At a terminal prompt, enter the following command to install "
16340
"<application>dhcpd</application>:"
16341
16342
#: serverguide/C/network-config.xml:943(command)
16343
msgid "sudo apt-get install dhcp3-server"
16344
msgstr "sudo apt-get install dhcp3-server"
16345
16346
#: serverguide/C/network-config.xml:945(para)
16347
msgid ""
16348
"You will probably need to change the default configuration by editing "
16349
"/etc/dhcp3/dhcpd.conf to suit your needs and particular configuration."
16350
msgstr ""
16351
"You will probably need to change the default configuration by editing "
16352
"/etc/dhcp3/dhcpd.conf to suit your needs and particular configuration."
16353
16354
#: serverguide/C/network-config.xml:949(para)
16355
msgid ""
16356
"You also need to edit /etc/default/dhcp3-server to specify the interfaces "
16357
"dhcpd should listen to. By default it listens to eth0."
16358
msgstr ""
16359
"You also need to edit /etc/default/dhcp3-server to specify the interfaces "
16360
"dhcpd should listen to. By default it listens to eth0."
16361
16362
#: serverguide/C/network-config.xml:953(para)
16363
msgid ""
16364
"NOTE: dhcpd's messages are being sent to syslog. Look there for diagnostics "
16365
"messages."
16366
msgstr ""
16367
"NOTE: dhcpd's messages are being sent to syslog. Look there for diagnostics "
16368
"messages."
16369
16370
#: serverguide/C/network-config.xml:960(para)
16371
msgid ""
16372
"The error message the installation ends with might be a little confusing, "
16373
"but the following steps will help you configure the service:"
16374
msgstr ""
16375
"The error message the installation ends with might be a little confusing, "
16376
"but the following steps will help you configure the service:"
16377
16378
#: serverguide/C/network-config.xml:964(para)
16379
msgid ""
16380
"Most commonly, what you want to do is assign an IP address randomly. This "
16381
"can be done with settings as follows:"
16382
msgstr ""
16383
"Most commonly, what you want to do is assign an IP address randomly. This "
16384
"can be done with settings as follows:"
16385
16386
#: serverguide/C/network-config.xml:968(programlisting)
16387
#, no-wrap
16388
msgid ""
16389
"\n"
16390
"# Sample /etc/dhcpd.conf\n"
16391
"# (add your comments here) \n"
16392
"default-lease-time 600;\n"
16393
"max-lease-time 7200;\n"
16394
"option subnet-mask 255.255.255.0;\n"
16395
"option broadcast-address 192.168.1.255;\n"
16396
"option routers 192.168.1.254;\n"
16397
"option domain-name-servers 192.168.1.1, 192.168.1.2;\n"
16398
"option domain-name \"mydomain.example\";\n"
16399
"\n"
16400
"subnet 192.168.1.0 netmask 255.255.255.0 {\n"
16401
"range 192.168.1.10 192.168.1.100;\n"
16402
"range 192.168.1.150 192.168.1.200;\n"
16403
"} \n"
16404
msgstr ""
16405
"\n"
16406
"# Sample /etc/dhcpd.conf\n"
16407
"# (add your comments here) \n"
16408
"default-lease-time 600;\n"
16409
"max-lease-time 7200;\n"
16410
"option subnet-mask 255.255.255.0;\n"
16411
"option broadcast-address 192.168.1.255;\n"
16412
"option routers 192.168.1.254;\n"
16413
"option domain-name-servers 192.168.1.1, 192.168.1.2;\n"
16414
"option domain-name \"mydomain.example\";\n"
16415
"\n"
16416
"subnet 192.168.1.0 netmask 255.255.255.0 {\n"
16417
"range 192.168.1.10 192.168.1.100;\n"
16418
"range 192.168.1.150 192.168.1.200;\n"
16419
"} \n"
16420
16421
#: serverguide/C/network-config.xml:984(para)
16422
msgid ""
16423
"This will result in the DHCP server giving a client an IP address from the "
16424
"range 192.168.1.10-192.168.1.100 or 192.168.1.150-192.168.1.200. It will "
16425
"lease an IP address for 600 seconds if the client doesn't ask for a specific "
16426
"time frame. Otherwise the maximum (allowed) lease will be 7200 seconds. The "
16427
"server will also \"advise\" the client that it should use 255.255.255.0 as "
16428
"its subnet mask, 192.168.1.255 as its broadcast address, 192.168.1.254 as "
16429
"the router/gateway and 192.168.1.1 and 192.168.1.2 as its DNS servers."
16430
msgstr ""
16431
"This will result in the DHCP server giving a client an IP address from the "
16432
"range 192.168.1.10-192.168.1.100 or 192.168.1.150-192.168.1.200. It will "
16433
"lease an IP address for 600 seconds if the client doesn't ask for a specific "
16434
"time frame. Otherwise the maximum (allowed) lease will be 7200 seconds. The "
16435
"server will also \"advise\" the client that it should use 255.255.255.0 as "
16436
"its subnet mask, 192.168.1.255 as its broadcast address, 192.168.1.254 as "
16437
"the router/gateway and 192.168.1.1 and 192.168.1.2 as its DNS servers."
16438
16439
#: serverguide/C/network-config.xml:993(para)
16440
msgid ""
16441
"If you need to specify a WINS server for your Windows clients, you will need "
16442
"to include the netbios-name-servers option, e.g."
16443
msgstr ""
16444
"If you need to specify a WINS server for your Windows clients, you will need "
16445
"to include the netbios-name-servers option, e.g."
16446
16447
#: serverguide/C/network-config.xml:997(programlisting)
16448
#, no-wrap
16449
msgid ""
16450
"\n"
16451
"option netbios-name-servers 192.168.1.1; \n"
16452
msgstr ""
16453
"\n"
16454
"option netbios-name-servers 192.168.1.1; \n"
16455
16456
#: serverguide/C/network-config.xml:1000(para)
16457
msgid ""
16458
"Dhcpd configuration settings are taken from the DHCP mini-HOWTO, which can "
16459
"be found <ulink "
16460
"url=\"http://www.tldp.org/HOWTO/DHCP/index.html\">here</ulink>."
16461
msgstr ""
16462
"Dhcpd configuration settings are taken from the DHCP mini-HOWTO, which can "
16463
"be found <ulink "
16464
"url=\"http://www.tldp.org/HOWTO/DHCP/index.html\">here</ulink>."
16465
16466
#: serverguide/C/network-config.xml:1010(para)
16467
msgid ""
16468
"The <ulink url=\"https://help.ubuntu.com/community/dhcp3-server\">dhcp3-"
16469
"server Ubuntu Wiki</ulink> page has more information."
16470
msgstr ""
16471
16472
#: serverguide/C/network-config.xml:1015(para)
16473
msgid ""
16474
"For more <filename>/etc/dhcp3/dchpd.conf</filename> options see the <ulink "
16475
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/dhcpd.conf.5.html\">d"
16476
"hcpd.conf man page</ulink>."
16477
msgstr ""
16478
16479
#: serverguide/C/network-config.xml:1021(para)
16480
msgid ""
16481
"Also see the <ulink url=\"http://www.dhcp-handbook.com/dhcp_faq.html\">DHCP "
16482
"FAQ</ulink>"
16483
msgstr ""
16484
"Also see the <ulink url=\"http://www.dhcp-handbook.com/dhcp_faq.html\">DHCP "
16485
"FAQ</ulink>"
16486
16487
#: serverguide/C/network-config.xml:1031(title)
16488
msgid "Time Synchronisation with NTP"
16489
msgstr "Time Synchronisation with NTP"
16490
16491
#: serverguide/C/network-config.xml:1032(para)
16492
msgid ""
16493
"This page describes methods for keeping your computer's time accurate. This "
16494
"is useful for servers, but is not necessary (or desirable) for desktop "
16495
"machines."
16496
msgstr ""
16497
"This page describes methods for keeping your computer's time accurate. This "
16498
"is useful for servers, but is not necessary (or desirable) for desktop "
16499
"machines."
16500
16501
#: serverguide/C/network-config.xml:1035(para)
16502
msgid ""
16503
"NTP is a TCP/IP protocol for synchronising time over a network. Basically a "
16504
"client requests the current time from a server, and uses it to set its own "
16505
"clock."
16506
msgstr ""
16507
"NTP is a TCP/IP protocol for synchronising time over a network. Basically a "
16508
"client requests the current time from a server, and uses it to set its own "
16509
"clock."
16510
16511
#: serverguide/C/network-config.xml:1038(para)
16512
msgid ""
16513
"Behind this simple description, there is a lot of complexity - there are "
16514
"tiers of NTP servers, with the tier one NTP servers connected to atomic "
16515
"clocks (often via GPS), and tier two and three servers spreading the load of "
16516
"actually handling requests across the Internet. Also the client software is "
16517
"a lot more complex than you might think - it has to factor out communication "
16518
"delays, and adjust the time in a way that does not upset all the other "
16519
"processes that run on the server. But luckily all that complexity is hidden "
16520
"from you!"
16521
msgstr ""
16522
"Behind this simple description, there is a lot of complexity - there are "
16523
"tiers of NTP servers, with the tier one NTP servers connected to atomic "
16524
"clocks (often via GPS), and tier two and three servers spreading the load of "
16525
"actually handling requests across the Internet. Also the client software is "
16526
"a lot more complex than you might think - it has to factor out communication "
16527
"delays, and adjust the time in a way that does not upset all the other "
16528
"processes that run on the server. But luckily all that complexity is hidden "
16529
"from you!"
16530
16531
#: serverguide/C/network-config.xml:1041(para)
16532
msgid ""
16533
"Ubuntu has two ways of automatically setting your time: ntpdate and ntpd."
16534
msgstr ""
16535
"Ubuntu has two ways of automatically setting your time: ntpdate and ntpd."
16536
16537
#: serverguide/C/network-config.xml:1046(title)
16538
msgid "ntpdate"
16539
msgstr "ntpdate"
16540
16541
#: serverguide/C/network-config.xml:1047(para)
16542
msgid ""
16543
"Ubuntu comes with ntpdate as standard, and will run it once at boot time to "
16544
"set up your time according to Ubuntu's NTP server. However, a server's clock "
16545
"is likely to drift considerably between reboots, so it makes sense to "
16546
"correct the time occasionally. The easiest way to do this is to get cron to "
16547
"run ntpdate every day. With your favorite editor, as root, create a file "
16548
"<code>/etc/cron.daily/ntpdate</code> containing:"
16549
msgstr ""
16550
"Ubuntu comes with ntpdate as standard, and will run it once at boot time to "
16551
"set up your time according to Ubuntu's NTP server. However, a server's clock "
16552
"is likely to drift considerably between reboots, so it makes sense to "
16553
"correct the time occasionally. The easiest way to do this is to get cron to "
16554
"run ntpdate every day. With your favourite editor, as root, create a file "
16555
"<code>/etc/cron.daily/ntpdate</code> containing:"
16556
16557
#: serverguide/C/network-config.xml:1052(screen)
16558
#, no-wrap
16559
msgid "ntpdate ntp.ubuntu.com\n"
16560
msgstr "ntpdate ntp.ubuntu.com\n"
16561
16562
#: serverguide/C/network-config.xml:1054(para)
16563
msgid ""
16564
"The file <code>/etc/cron.daily/ntpdate</code> must also be executable."
16565
msgstr ""
16566
"The file <code>/etc/cron.daily/ntpdate</code> must also be executable."
16567
16568
#: serverguide/C/network-config.xml:1057(screen)
16569
#, no-wrap
16570
msgid "sudo chmod 755 /etc/cron.daily/ntpdate\n"
16571
msgstr "sudo chmod 755 /etc/cron.daily/ntpdate\n"
16572
16573
#: serverguide/C/network-config.xml:1061(title)
16574
msgid "ntpd"
16575
msgstr "ntpd"
16576
16577
#: serverguide/C/network-config.xml:1062(para)
16578
msgid ""
16579
"ntpdate is a bit of a blunt instrument - it can only adjust the time once a "
16580
"day, in one big correction. The ntp daemon ntpd is far more subtle. It "
16581
"calculates the drift of your system clock and continuously adjusts it, so "
16582
"there are no large corrections that could lead to inconsistent logs for "
16583
"instance. The cost is a little processing power and memory, but for a modern "
16584
"server this is negligible."
16585
msgstr ""
16586
"ntpdate is a bit of a blunt instrument - it can only adjust the time once a "
16587
"day, in one big correction. The ntp daemon ntpd is far more subtle. It "
16588
"calculates the drift of your system clock and continuously adjusts it, so "
16589
"there are no large corrections that could lead to inconsistent logs for "
16590
"instance. The cost is a little processing power and memory, but for a modern "
16591
"server this is negligible."
16592
16593
#: serverguide/C/network-config.xml:1065(para)
16594
msgid "To set up ntpd:"
16595
msgstr "To set up ntpd:"
16596
16597
#: serverguide/C/network-config.xml:1066(screen)
16598
#, no-wrap
16599
msgid "sudo apt-get install ntp\n"
16600
msgstr "sudo apt-get install ntp\n"
16601
16602
#: serverguide/C/network-config.xml:1071(title)
16603
msgid "Changing Time Servers"
16604
msgstr "Changing Time Servers"
16605
16606
#: serverguide/C/network-config.xml:1072(para)
16607
msgid ""
16608
"In both cases above, your system will use Ubuntu's NTP server at "
16609
"<code>ntp.ubuntu.com</code> by default. This is OK, but you might want to "
16610
"use several servers to increase accuracy and resilience, and you may want to "
16611
"use time servers that are geographically closer to you. to do this for "
16612
"ntpdate, change the contents of <code>/etc/cron.daily/ntpdate</code> to:"
16613
msgstr ""
16614
"In both cases above, your system will use Ubuntu's NTP server at "
16615
"<code>ntp.ubuntu.com</code> by default. This is OK, but you might want to "
16616
"use several servers to increase accuracy and resilience, and you may want to "
16617
"use time servers that are geographically closer to you. to do this for "
16618
"ntpdate, change the contents of <code>/etc/cron.daily/ntpdate</code> to:"
16619
16620
#: serverguide/C/network-config.xml:1079(screen)
16621
#, no-wrap
16622
msgid "ntpdate ntp.ubuntu.com pool.ntp.org \n"
16623
msgstr "ntpdate ntp.ubuntu.com pool.ntp.org \n"
16624
16625
#: serverguide/C/network-config.xml:1081(para)
16626
msgid ""
16627
"And for ntpd edit <code>/etc/ntp.conf</code> to include additional server "
16628
"lines:"
16629
msgstr ""
16630
"And for ntpd edit <code>/etc/ntp.conf</code> to include additional server "
16631
"lines:"
16632
16633
#: serverguide/C/network-config.xml:1086(screen)
16634
#, no-wrap
16635
msgid ""
16636
"server ntp.ubuntu.com\n"
16637
"server pool.ntp.org\n"
16638
msgstr ""
16639
"server ntp.ubuntu.com\n"
16640
"server pool.ntp.org\n"
16641
16642
#: serverguide/C/network-config.xml:1089(para)
16643
msgid ""
16644
"You may notice <code>pool.ntp.org</code> in the examples above. This is a "
16645
"really good idea which uses round-robin DNS to return an NTP server from a "
16646
"pool, spreading the load between several different servers. Even better, "
16647
"they have pools for different regions - for instance, if you are in New "
16648
"Zealand, so you could use <code>nz.pool.ntp.org</code> instead of "
16649
"<code>pool.ntp.org</code> . Look at <ulink "
16650
"url=\"http://www.pool.ntp.org/\">http://www.pool.ntp.org/</ulink> for more "
16651
"details."
16652
msgstr ""
16653
"You may notice <code>pool.ntp.org</code> in the examples above. This is a "
16654
"really good idea which uses round-robin DNS to return an NTP server from a "
16655
"pool, spreading the load between several different servers. Even better, "
16656
"they have pools for different regions - for instance, if you are in New "
16657
"Zealand, so you could use <code>nz.pool.ntp.org</code> instead of "
16658
"<code>pool.ntp.org</code> . Look at <ulink "
16659
"url=\"http://www.pool.ntp.org/\">http://www.pool.ntp.org/</ulink> for more "
16660
"details."
16661
16662
#: serverguide/C/network-config.xml:1100(para)
16663
msgid ""
16664
"You can also Google for NTP servers in your region, and add these to your "
16665
"configuration. To test that a server works, just type <code>sudo ntpdate "
16666
"ntp.server.name</code> and see what happens."
16667
msgstr ""
16668
"You can also Google for NTP servers in your region, and add these to your "
16669
"configuration. To test that a server works, just type <code>sudo ntpdate "
16670
"ntp.server.name</code> and see what happens."
16671
16672
#: serverguide/C/network-config.xml:1111(para)
16673
msgid ""
16674
"See the <ulink url=\"https://help.ubuntu.com/community/UbuntuTime\">Ubuntu "
16675
"Time</ulink> wiki page for more information."
16676
msgstr ""
16677
16678
#: serverguide/C/network-config.xml:1117(ulink)
16679
msgid "NTP Support"
16680
msgstr "NTP Support"
16681
16682
#: serverguide/C/network-config.xml:1122(ulink)
16683
msgid "The NTP FAQ and HOWTO"
16684
msgstr "The NTP FAQ and HOWTO"
16685
16686
#: serverguide/C/network-auth.xml:13(title)
16687
msgid "Network Authentication"
16688
msgstr "Network Authentication"
16689
16690
#: serverguide/C/network-auth.xml:15(para)
16691
msgid "This section explains various Network Authentication protocols."
16692
msgstr "This section explains various Network Authentication protocols."
16693
16694
#: serverguide/C/network-auth.xml:19(title)
16695
msgid "OpenLDAP Server"
16696
msgstr "OpenLDAP Server"
16697
16698
#: serverguide/C/network-auth.xml:20(para)
16699
msgid ""
16700
"LDAP is an acronym for Lightweight Directory Access Protocol, it is a "
16701
"simplified version of the X.500 protocol. The directory setup in this "
16702
"section will be used for authentication. Nevertheless, LDAP can be used in "
16703
"numerous ways: authentication, shared directory (for mail clients), address "
16704
"book, etc."
16705
msgstr ""
16706
"LDAP is an acronym for Lightweight Directory Access Protocol, it is a "
16707
"simplified version of the X.500 protocol. The directory setup in this "
16708
"section will be used for authentication. Nevertheless, LDAP can be used in "
16709
"numerous ways: authentication, shared directory (for mail clients), address "
16710
"book, etc."
16711
16712
#: serverguide/C/network-auth.xml:28(para)
16713
msgid ""
16714
"To describe LDAP quickly, all information is stored in a tree structure. "
16715
"With <application>OpenLDAP</application> you have freedom to determine the "
16716
"directory arborescence (the Directory Information Tree: the DIT) yourself. "
16717
"We will begin with a basic tree containing two nodes below the root:"
16718
msgstr ""
16719
"To describe LDAP quickly, all information is stored in a tree structure. "
16720
"With <application>OpenLDAP</application> you have freedom to determine the "
16721
"directory arborescence (the Directory Information Tree: the DIT) yourself. "
16722
"We will begin with a basic tree containing two nodes below the root:"
16723
16724
#: serverguide/C/network-auth.xml:37(para)
16725
msgid "\"People\" node where your users will be stored"
16726
msgstr "\"People\" node where your users will be stored"
16727
16728
#: serverguide/C/network-auth.xml:40(para)
16729
msgid "\"Groups\" node where your groups will be stored"
16730
msgstr "\"Groups\" node where your groups will be stored"
16731
16732
#: serverguide/C/network-auth.xml:44(para)
16733
msgid ""
16734
"Before beginning, you should determine what the root of your LDAP directory "
16735
"will be. By default, your tree will be determined by your Fully Qualified "
16736
"Domain Name (FQDN). If your domain is example.com (which we will use in this "
16737
"example), your root node will be dc=example,dc=com."
16738
msgstr ""
16739
"Before beginning, you should determine what the root of your LDAP directory "
16740
"will be. By default, your tree will be determined by your Fully Qualified "
16741
"Domain Name (FQDN). If your domain is example.com (which we will use in this "
16742
"example), your root node will be dc=example,dc=com."
16743
16744
#: serverguide/C/network-auth.xml:54(para)
16745
msgid ""
16746
"First, install the <application>OpenLDAP</application> server daemon "
16747
"<application>slapd</application> and <application>ldap-utils</application>, "
16748
"a package containing LDAP management utilities:"
16749
msgstr ""
16750
"First, install the <application>OpenLDAP</application> server daemon "
16751
"<application>slapd</application> and <application>ldap-utils</application>, "
16752
"a package containing LDAP management utilities:"
16753
16754
#: serverguide/C/network-auth.xml:60(command)
16755
msgid "sudo apt-get install slapd ldap-utils"
16756
msgstr "sudo apt-get install slapd ldap-utils"
16757
16758
#: serverguide/C/network-auth.xml:63(para)
16759
msgid ""
16760
"By default <application>slapd</application> is configured with minimal "
16761
"options needed to run the <application>slapd</application> daemon."
16762
msgstr ""
16763
"By default <application>slapd</application> is configured with minimal "
16764
"options needed to run the <application>slapd</application> daemon."
16765
16766
#: serverguide/C/network-auth.xml:68(para)
16767
msgid ""
16768
"The configuration example in the following sections will match the domain "
16769
"name of the server. For example, if the machine's Fully Qualified Domain "
16770
"Name (FQDN) is ldap.example.com, the default suffix will be "
16771
"<emphasis>dc=example,dc=com</emphasis>."
16772
msgstr ""
16773
"The configuration example in the following sections will match the domain "
16774
"name of the server. For example, if the machine's Fully Qualified Domain "
16775
"Name (FQDN) is ldap.example.com, the default suffix will be "
16776
"<emphasis>dc=example,dc=com</emphasis>."
16777
16778
#: serverguide/C/network-auth.xml:76(title)
16779
msgid "Populating LDAP"
16780
msgstr "Populating LDAP"
16781
16782
#: serverguide/C/network-auth.xml:78(para)
16783
msgid ""
16784
"<application>OpenLDAP</application> uses a separate directory which contains "
16785
"the <emphasis>cn=config</emphasis> Directory Information Tree (DIT). The "
16786
"<emphasis>cn=config</emphasis> DIT is used to dynamically configure the "
16787
"<application>slapd</application> daemon, allowing the modification of schema "
16788
"definitions, indexes, ACLs, etc without stopping the service."
16789
msgstr ""
16790
"<application>OpenLDAP</application> uses a separate directory which contains "
16791
"the <emphasis>cn=config</emphasis> Directory Information Tree (DIT). The "
16792
"<emphasis>cn=config</emphasis> DIT is used to dynamically configure the "
16793
"<application>slapd</application> daemon, allowing the modification of schema "
16794
"definitions, indexes, ACLs, etc without stopping the service."
16795
16796
#: serverguide/C/network-auth.xml:86(para)
16797
msgid ""
16798
"The backend <emphasis>cn=config</emphasis> directory has only a minimal "
16799
"configuration and will need additional configuration options in order to "
16800
"populate the frontend directory. The frontend will be populated with a "
16801
"\"classical\" scheme that will be compatible with address book applications "
16802
"and with Unix Posix accounts. Posix accounts will allow authentication to "
16803
"various applications, such as web applications, email Mail Transfer Agent "
16804
"(MTA) applications, etc."
16805
msgstr ""
16806
16807
#: serverguide/C/network-auth.xml:95(para)
16808
msgid ""
16809
"For external applications to authenticate using LDAP they will each need to "
16810
"be specifically configured to do so. Refer to the individual application "
16811
"documentation for details."
16812
msgstr ""
16813
"For external applications to authenticate using LDAP they will each need to "
16814
"be specifically configured to do so. Refer to the individual application "
16815
"documentation for details."
16816
16817
#: serverguide/C/network-auth.xml:103(para)
16818
msgid ""
16819
"Remember to change <emphasis>dc=example,dc=com</emphasis> in the following "
16820
"examples to match your LDAP configuration."
16821
msgstr ""
16822
"Remember to change <emphasis>dc=example,dc=com</emphasis> in the following "
16823
"examples to match your LDAP configuration."
16824
16825
#: serverguide/C/network-auth.xml:108(para)
16826
msgid ""
16827
"First, some additional schema files need to be loaded. In a terminal enter:"
16828
msgstr ""
16829
"First, some additional schema files need to be loaded. In a terminal enter:"
16830
16831
#: serverguide/C/network-auth.xml:113(command) serverguide/C/network-auth.xml:702(command)
16832
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif"
16833
msgstr ""
16834
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/cosine.ldif"
16835
16836
#: serverguide/C/network-auth.xml:114(command) serverguide/C/network-auth.xml:703(command)
16837
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif"
16838
msgstr "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/nis.ldif"
16839
16840
#: serverguide/C/network-auth.xml:115(command) serverguide/C/network-auth.xml:704(command)
16841
msgid ""
16842
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif"
16843
msgstr ""
16844
"sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /etc/ldap/schema/inetorgperson.ldif"
16845
16846
#: serverguide/C/network-auth.xml:118(para)
16847
msgid ""
16848
"Next, copy the following example LDIF file, naming it "
16849
"<filename>backend.example.com.ldif</filename>, somewhere on your system:"
16850
msgstr ""
16851
"Next, copy the following example LDIF file, naming it "
16852
"<filename>backend.example.com.ldif</filename>, somewhere on your system:"
16853
16854
#: serverguide/C/network-auth.xml:123(programlisting)
16855
#, no-wrap
16856
msgid ""
16857
"\n"
16858
"# Load dynamic backend modules\n"
16859
"dn: cn=module,cn=config\n"
16860
"objectClass: olcModuleList\n"
16861
"cn: module\n"
16862
"olcModulepath: /usr/lib/ldap\n"
16863
"olcModuleload: back_hdb\n"
16864
"\n"
16865
"# Database settings\n"
16866
"dn: olcDatabase=hdb,cn=config\n"
16867
"objectClass: olcDatabaseConfig\n"
16868
"objectClass: olcHdbConfig\n"
16869
"olcDatabase: {1}hdb\n"
16870
"olcSuffix: dc=example,dc=com\n"
16871
"olcDbDirectory: /var/lib/ldap\n"
16872
"olcRootDN: cn=admin,dc=example,dc=com\n"
16873
"olcRootPW: secret\n"
16874
"olcDbConfig: set_cachesize 0 2097152 0\n"
16875
"olcDbConfig: set_lk_max_objects 1500\n"
16876
"olcDbConfig: set_lk_max_locks 1500\n"
16877
"olcDbConfig: set_lk_max_lockers 1500\n"
16878
"olcDbIndex: objectClass eq\n"
16879
"olcLastMod: TRUE\n"
16880
"olcDbCheckpoint: 512 30\n"
16881
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
16882
"by anonymous auth by self write by * none\n"
16883
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
16884
"olcAccess: to dn.base=\"\" by * read\n"
16885
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
16886
"\n"
16887
msgstr ""
16888
16889
#: serverguide/C/network-auth.xml:155(para)
16890
msgid ""
16891
"Change <emphasis>olcRootPW: secret</emphasis> to a password of your choosing."
16892
msgstr ""
16893
"Change <emphasis>olcRootPW: secret</emphasis> to a password of your choosing."
16894
16895
#: serverguide/C/network-auth.xml:160(para)
16896
msgid "Now add the LDIF to the directory:"
16897
msgstr "Now add the LDIF to the directory:"
16898
16899
#: serverguide/C/network-auth.xml:165(command) serverguide/C/network-auth.xml:746(command)
16900
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif"
16901
msgstr "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f backend.example.com.ldif"
16902
16903
#: serverguide/C/network-auth.xml:168(para)
16904
msgid ""
16905
"The frontend directory is now ready to be populated. Create a "
16906
"<filename>frontend.example.com.ldif</filename> with the following contents:"
16907
msgstr ""
16908
"The frontend directory is now ready to be populated. Create a "
16909
"<filename>frontend.example.com.ldif</filename> with the following contents:"
16910
16911
#: serverguide/C/network-auth.xml:173(programlisting)
16912
#, no-wrap
16913
msgid ""
16914
"\n"
16915
"# Create top-level object in domain\n"
16916
"dn: dc=example,dc=com\n"
16917
"objectClass: top\n"
16918
"objectClass: dcObject\n"
16919
"objectclass: organization\n"
16920
"o: Example Organization\n"
16921
"dc: Example\n"
16922
"description: LDAP Example \n"
16923
"\n"
16924
"# Admin user.\n"
16925
"dn: cn=admin,dc=example,dc=com\n"
16926
"objectClass: simpleSecurityObject\n"
16927
"objectClass: organizationalRole\n"
16928
"cn: admin\n"
16929
"description: LDAP administrator\n"
16930
"userPassword: secret\n"
16931
"\n"
16932
"dn: ou=people,dc=example,dc=com\n"
16933
"objectClass: organizationalUnit\n"
16934
"ou: people\n"
16935
"\n"
16936
"dn: ou=groups,dc=example,dc=com\n"
16937
"objectClass: organizationalUnit\n"
16938
"ou: groups\n"
16939
"\n"
16940
"dn: uid=john,ou=people,dc=example,dc=com\n"
16941
"objectClass: inetOrgPerson\n"
16942
"objectClass: posixAccount\n"
16943
"objectClass: shadowAccount\n"
16944
"uid: john\n"
16945
"sn: Doe\n"
16946
"givenName: John\n"
16947
"cn: John Doe\n"
16948
"displayName: John Doe\n"
16949
"uidNumber: 1000\n"
16950
"gidNumber: 10000\n"
16951
"userPassword: password\n"
16952
"gecos: John Doe\n"
16953
"loginShell: /bin/bash\n"
16954
"homeDirectory: /home/john\n"
16955
"shadowExpire: -1\n"
16956
"shadowFlag: 0\n"
16957
"shadowWarning: 7\n"
16958
"shadowMin: 8\n"
16959
"shadowMax: 999999\n"
16960
"shadowLastChange: 10877\n"
16961
"mail: john.doe@example.com\n"
16962
"postalCode: 31000\n"
16963
"l: Toulouse\n"
16964
"o: Example\n"
16965
"mobile: +33 (0)6 xx xx xx xx\n"
16966
"homePhone: +33 (0)5 xx xx xx xx\n"
16967
"title: System Administrator\n"
16968
"postalAddress: \n"
16969
"initials: JD\n"
16970
"\n"
16971
"dn: cn=example,ou=groups,dc=example,dc=com\n"
16972
"objectClass: posixGroup\n"
16973
"cn: example\n"
16974
"gidNumber: 10000\n"
16975
msgstr ""
16976
"\n"
16977
"# Create top-level object in domain\n"
16978
"dn: dc=example,dc=com\n"
16979
"objectClass: top\n"
16980
"objectClass: dcObject\n"
16981
"objectclass: organisation\n"
16982
"o: Example Organisation\n"
16983
"dc: Example\n"
16984
"description: LDAP Example \n"
16985
"\n"
16986
"# Admin user.\n"
16987
"dn: cn=admin,dc=example,dc=com\n"
16988
"objectClass: simpleSecurityObject\n"
16989
"objectClass: organisationalRole\n"
16990
"cn: admin\n"
16991
"description: LDAP administrator\n"
16992
"userPassword: secret\n"
16993
"\n"
16994
"dn: ou=people,dc=example,dc=com\n"
16995
"objectClass: organisationalUnit\n"
16996
"ou: people\n"
16997
"\n"
16998
"dn: ou=groups,dc=example,dc=com\n"
16999
"objectClass: organisationalUnit\n"
17000
"ou: groups\n"
17001
"\n"
17002
"dn: uid=john,ou=people,dc=example,dc=com\n"
17003
"objectClass: inetOrgPerson\n"
17004
"objectClass: posixAccount\n"
17005
"objectClass: shadowAccount\n"
17006
"uid: john\n"
17007
"sn: Doe\n"
17008
"givenName: John\n"
17009
"cn: John Doe\n"
17010
"displayName: John Doe\n"
17011
"uidNumber: 1000\n"
17012
"gidNumber: 10000\n"
17013
"userPassword: password\n"
17014
"gecos: John Doe\n"
17015
"loginShell: /bin/bash\n"
17016
"homeDirectory: /home/john\n"
17017
"shadowExpire: -1\n"
17018
"shadowFlag: 0\n"
17019
"shadowWarning: 7\n"
17020
"shadowMin: 8\n"
17021
"shadowMax: 999999\n"
17022
"shadowLastChange: 10877\n"
17023
"mail: john.doe@example.com\n"
17024
"postalCode: 31000\n"
17025
"l: Toulouse\n"
17026
"o: Example\n"
17027
"mobile: +33 (0)6 xx xx xx xx\n"
17028
"homePhone: +33 (0)5 xx xx xx xx\n"
17029
"title: System Administrator\n"
17030
"postalAddress: \n"
17031
"initials: JD\n"
17032
"\n"
17033
"dn: cn=example,ou=groups,dc=example,dc=com\n"
17034
"objectClass: posixGroup\n"
17035
"cn: example\n"
17036
"gidNumber: 10000\n"
17037
17038
#: serverguide/C/network-auth.xml:236(para)
17039
msgid ""
17040
"In this example the directory structure, a user, and a group have been "
17041
"setup. In other examples you might see the <emphasis>objectClass: "
17042
"top</emphasis> added in every entry, but that is the default behaviour so "
17043
"you do not have to add it explicitly."
17044
msgstr ""
17045
"In this example the directory structure, a user, and a group have been "
17046
"setup. In other examples you might see the <emphasis>objectClass: "
17047
"top</emphasis> added in every entry, but that is the default behaviour so "
17048
"you do not have to add it explicitly."
17049
17050
#: serverguide/C/network-auth.xml:243(para)
17051
msgid "Add the entries to the LDAP directory:"
17052
msgstr "Add the entries to the LDAP directory:"
17053
17054
#: serverguide/C/network-auth.xml:249(command) serverguide/C/network-auth.xml:757(command)
17055
msgid ""
17056
"sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif"
17057
msgstr ""
17058
"sudo ldapadd -x -D cn=admin,dc=example,dc=com -W -f frontend.example.com.ldif"
17059
17060
#: serverguide/C/network-auth.xml:252(para)
17061
msgid ""
17062
"We can check that the content has been correctly added with the "
17063
"<application>ldapsearch</application> utility. Execute a search of the LDAP "
17064
"directory:"
17065
msgstr ""
17066
"We can check that the content has been correctly added with the "
17067
"<application>ldapsearch</application> utility. Execute a search of the LDAP "
17068
"directory:"
17069
17070
#: serverguide/C/network-auth.xml:258(command)
17071
msgid "ldapsearch -xLLL -b \"dc=example,dc=com\" uid=john sn givenName cn"
17072
msgstr "ldapsearch -xLLL -b \"dc=example,dc=com\" uid=john sn givenName cn"
17073
17074
#: serverguide/C/network-auth.xml:259(computeroutput)
17075
#, no-wrap
17076
msgid ""
17077
"\n"
17078
"dn: uid=john,ou=people,dc=example,dc=com\n"
17079
"cn: John Doe\n"
17080
"sn: Doe\n"
17081
"givenName: John\n"
17082
msgstr ""
17083
"\n"
17084
"dn: uid=john,ou=people,dc=example,dc=com\n"
17085
"cn: John Doe\n"
17086
"sn: Doe\n"
17087
"givenName: John\n"
17088
17089
#: serverguide/C/network-auth.xml:267(para)
17090
msgid "Just a quick explanation:"
17091
msgstr "Just a quick explanation:"
17092
17093
#: serverguide/C/network-auth.xml:273(para)
17094
msgid ""
17095
"<emphasis>-x:</emphasis> will not use SASL authentication method, which is "
17096
"the default."
17097
msgstr ""
17098
"<emphasis>-x:</emphasis> will not use SASL authentication method, which is "
17099
"the default."
17100
17101
#: serverguide/C/network-auth.xml:279(para)
17102
msgid "<emphasis>-LLL:</emphasis> disable printing LDIF schema information."
17103
msgstr "<emphasis>-LLL:</emphasis> disable printing LDIF schema information."
17104
17105
#: serverguide/C/network-auth.xml:287(title)
17106
msgid "Further Configuration"
17107
msgstr "Further Configuration"
17108
17109
#: serverguide/C/network-auth.xml:290(para)
17110
msgid ""
17111
"The <emphasis>cn=config</emphasis> tree can be manipulated using the "
17112
"utilities in the <application>ldap-utils</application> package. For example:"
17113
msgstr ""
17114
"The <emphasis>cn=config</emphasis> tree can be manipulated using the "
17115
"utilities in the <application>ldap-utils</application> package. For example:"
17116
17117
#: serverguide/C/network-auth.xml:298(para)
17118
msgid ""
17119
"Use <application>ldapsearch</application> to view the tree, entering the "
17120
"admin password set during installation or reconfiguration:"
17121
msgstr ""
17122
"Use <application>ldapsearch</application> to view the tree, entering the "
17123
"admin password set during installation or reconfiguration:"
17124
17125
#: serverguide/C/network-auth.xml:304(command)
17126
msgid "sudo ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn"
17127
msgstr "sudo ldapsearch -LLL -Y EXTERNAL -H ldapi:/// -b cn=config dn"
17128
17129
#: serverguide/C/network-auth.xml:308(computeroutput)
17130
#, no-wrap
17131
msgid ""
17132
"\n"
17133
"SASL/EXTERNAL authentication started\n"
17134
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
17135
"SASL SSF: 0\n"
17136
"dn: cn=config\n"
17137
"\n"
17138
"dn: cn=module{0},cn=config\n"
17139
"\n"
17140
"dn: cn=schema,cn=config\n"
17141
"\n"
17142
"dn: cn={0}core,cn=schema,cn=config\n"
17143
"\n"
17144
"dn: cn={1}cosine,cn=schema,cn=config\n"
17145
"\n"
17146
"dn: cn={2}nis,cn=schema,cn=config\n"
17147
"\n"
17148
"dn: cn={3}inetorgperson,cn=schema,cn=config\n"
17149
"\n"
17150
"dn: olcDatabase={-1}frontend,cn=config\n"
17151
"\n"
17152
"dn: olcDatabase={0}config,cn=config\n"
17153
"\n"
17154
"dn: olcDatabase={1}hdb,cn=config\n"
17155
msgstr ""
17156
"\n"
17157
"SASL/EXTERNAL authentication started\n"
17158
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
17159
"SASL SSF: 0\n"
17160
"dn: cn=config\n"
17161
"\n"
17162
"dn: cn=module{0},cn=config\n"
17163
"\n"
17164
"dn: cn=schema,cn=config\n"
17165
"\n"
17166
"dn: cn={0}core,cn=schema,cn=config\n"
17167
"\n"
17168
"dn: cn={1}cosine,cn=schema,cn=config\n"
17169
"\n"
17170
"dn: cn={2}nis,cn=schema,cn=config\n"
17171
"\n"
17172
"dn: cn={3}inetorgperson,cn=schema,cn=config\n"
17173
"\n"
17174
"dn: olcDatabase={-1}frontend,cn=config\n"
17175
"\n"
17176
"dn: olcDatabase={0}config,cn=config\n"
17177
"\n"
17178
"dn: olcDatabase={1}hdb,cn=config\n"
17179
17180
#: serverguide/C/network-auth.xml:334(para)
17181
msgid ""
17182
"The output above is the current configuration options for the "
17183
"<emphasis>cn=config</emphasis> backend database. Your output may be vary."
17184
msgstr ""
17185
"The output above is the current configuration options for the "
17186
"<emphasis>cn=config</emphasis> backend database. Your output may be vary."
17187
17188
#: serverguide/C/network-auth.xml:342(para)
17189
msgid ""
17190
"As an example of modifying the <emphasis>cn=config</emphasis> tree, add "
17191
"another attribute to the index list using "
17192
"<application>ldapmodify</application>:"
17193
msgstr ""
17194
"As an example of modifying the <emphasis>cn=config</emphasis> tree, add "
17195
"another attribute to the index list using "
17196
"<application>ldapmodify</application>:"
17197
17198
#: serverguide/C/network-auth.xml:348(command) serverguide/C/network-auth.xml:984(command) serverguide/C/network-auth.xml:1155(command) serverguide/C/network-auth.xml:1191(command)
17199
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:///"
17200
msgstr "sudo ldapmodify -Y EXTERNAL -H ldapi:///"
17201
17202
#: serverguide/C/network-auth.xml:356(userinput)
17203
#, no-wrap
17204
msgid ""
17205
"dn: olcDatabase={1}hdb,cn=config\n"
17206
"add: olcDbIndex\n"
17207
"olcDbIndex: uidNumber eq"
17208
msgstr ""
17209
17210
#: serverguide/C/network-auth.xml:352(computeroutput)
17211
#, no-wrap
17212
msgid ""
17213
"\n"
17214
"SASL/EXTERNAL authentication started\n"
17215
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
17216
"SASL SSF: 0\n"
17217
"<placeholder-1/>\n"
17218
"\n"
17219
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
17220
msgstr ""
17221
"\n"
17222
"SASL/EXTERNAL authentication started\n"
17223
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
17224
"SASL SSF: 0\n"
17225
"<placeholder-1/>\n"
17226
"\n"
17227
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
17228
17229
#: serverguide/C/network-auth.xml:364(para)
17230
msgid ""
17231
"Once the modification has completed, press <emphasis>Ctrl+D</emphasis> to "
17232
"exit the utility."
17233
msgstr ""
17234
"Once the modification has completed, press <emphasis>Ctrl+D</emphasis> to "
17235
"exit the utility."
17236
17237
#: serverguide/C/network-auth.xml:371(para)
17238
msgid ""
17239
"<application>ldapmodify</application> can also read the changes from a file. "
17240
"Copy and paste the following into a file named "
17241
"<filename>uid_index.ldif</filename>:"
17242
msgstr ""
17243
"<application>ldapmodify</application> can also read the changes from a file. "
17244
"Copy and paste the following into a file named "
17245
"<filename>uid_index.ldif</filename>:"
17246
17247
#: serverguide/C/network-auth.xml:376(programlisting)
17248
#, no-wrap
17249
msgid ""
17250
"\n"
17251
"dn: olcDatabase={1}hdb,cn=config\n"
17252
"add: olcDbIndex\n"
17253
"olcDbIndex: uid eq,pres,sub\n"
17254
msgstr ""
17255
"\n"
17256
"dn: olcDatabase={1}hdb,cn=config\n"
17257
"add: olcDbIndex\n"
17258
"olcDbIndex: uid eq,pres,sub\n"
17259
17260
#: serverguide/C/network-auth.xml:382(para)
17261
msgid "Then execute <application>ldapmodify</application>:"
17262
msgstr "Then execute <application>ldapmodify</application>:"
17263
17264
#: serverguide/C/network-auth.xml:387(command)
17265
msgid "sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f uid_index.ldif"
17266
msgstr "sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f uid_index.ldif"
17267
17268
#: serverguide/C/network-auth.xml:391(computeroutput)
17269
#, no-wrap
17270
msgid ""
17271
"\n"
17272
"SASL/EXTERNAL authentication started\n"
17273
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
17274
"SASL SSF: 0\n"
17275
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
17276
msgstr ""
17277
"\n"
17278
"SASL/EXTERNAL authentication started\n"
17279
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
17280
"SASL SSF: 0\n"
17281
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
17282
17283
#: serverguide/C/network-auth.xml:399(para)
17284
msgid "The file method is very useful for large changes."
17285
msgstr "The file method is very useful for large changes."
17286
17287
#: serverguide/C/network-auth.xml:406(para)
17288
msgid ""
17289
"Adding additional <emphasis>schemas</emphasis> to "
17290
"<application>slapd</application> requires the schema to be converted to LDIF "
17291
"format. The <filename role=\"directory\">/etc/ldap/schema</filename> "
17292
"directory contains some schema files already converted to LDIF format as "
17293
"demonstrated in the previous section. Fortunately, the "
17294
"<application>slapd</application> program can be used to automate the "
17295
"conversion. The following example will add the "
17296
"<emphasis>dyngoup.schema</emphasis>:"
17297
msgstr ""
17298
"Adding additional <emphasis>schemas</emphasis> to "
17299
"<application>slapd</application> requires the schema to be converted to LDIF "
17300
"format. The <filename role=\"directory\">/etc/ldap/schema</filename> "
17301
"directory contains some schema files already converted to LDIF format as "
17302
"demonstrated in the previous section. Fortunately, the "
17303
"<application>slapd</application> program can be used to automate the "
17304
"conversion. The following example will add the "
17305
"<emphasis>dyngoup.schema</emphasis>:"
17306
17307
#: serverguide/C/network-auth.xml:416(para)
17308
msgid ""
17309
"First, create a conversion <filename>schema_convert.conf</filename> file "
17310
"containing the following lines:"
17311
msgstr ""
17312
"First, create a conversion <filename>schema_convert.conf</filename> file "
17313
"containing the following lines:"
17314
17315
#: serverguide/C/network-auth.xml:421(programlisting)
17316
#, no-wrap
17317
msgid ""
17318
"\n"
17319
"include /etc/ldap/schema/core.schema\n"
17320
"include /etc/ldap/schema/collective.schema\n"
17321
"include /etc/ldap/schema/corba.schema\n"
17322
"include /etc/ldap/schema/cosine.schema\n"
17323
"include /etc/ldap/schema/duaconf.schema\n"
17324
"include /etc/ldap/schema/dyngroup.schema\n"
17325
"include /etc/ldap/schema/inetorgperson.schema\n"
17326
"include /etc/ldap/schema/java.schema\n"
17327
"include /etc/ldap/schema/misc.schema\n"
17328
"include /etc/ldap/schema/nis.schema\n"
17329
"include /etc/ldap/schema/openldap.schema\n"
17330
"include /etc/ldap/schema/ppolicy.schema\n"
17331
msgstr ""
17332
"\n"
17333
"include /etc/ldap/schema/core.schema\n"
17334
"include /etc/ldap/schema/collective.schema\n"
17335
"include /etc/ldap/schema/corba.schema\n"
17336
"include /etc/ldap/schema/cosine.schema\n"
17337
"include /etc/ldap/schema/duaconf.schema\n"
17338
"include /etc/ldap/schema/dyngroup.schema\n"
17339
"include /etc/ldap/schema/inetorgperson.schema\n"
17340
"include /etc/ldap/schema/java.schema\n"
17341
"include /etc/ldap/schema/misc.schema\n"
17342
"include /etc/ldap/schema/nis.schema\n"
17343
"include /etc/ldap/schema/openldap.schema\n"
17344
"include /etc/ldap/schema/ppolicy.schema\n"
17345
17346
#: serverguide/C/network-auth.xml:439(para) serverguide/C/network-auth.xml:1655(para)
17347
msgid "Next, create a temporary directory to hold the output:"
17348
msgstr "Next, create a temporary directory to hold the output:"
17349
17350
#: serverguide/C/network-auth.xml:444(command) serverguide/C/network-auth.xml:1660(command) serverguide/C/network-auth.xml:2695(command)
17351
msgid "mkdir /tmp/ldif_output"
17352
msgstr "mkdir /tmp/ldif_output"
17353
17354
#: serverguide/C/network-auth.xml:450(para)
17355
msgid ""
17356
"Now using <application>slapcat</application> convert the schema files to "
17357
"LDIF:"
17358
msgstr ""
17359
"Now using <application>slapcat</application> convert the schema files to "
17360
"LDIF:"
17361
17362
#: serverguide/C/network-auth.xml:455(command)
17363
msgid ""
17364
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
17365
"\"cn={5}dyngroup,cn=schema,cn=config\" > /tmp/cn=dyngroup.ldif"
17366
msgstr ""
17367
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
17368
"\"cn={5}dyngroup,cn=schema,cn=config\" > /tmp/cn=dyngroup.ldif"
17369
17370
#: serverguide/C/network-auth.xml:458(para)
17371
msgid ""
17372
"Adjust the configuration file name and temporary directory names if yours "
17373
"are different. Also, it may be worthwhile to keep the "
17374
"<filename>ldif_output</filename> directory around in case you want to add "
17375
"additional schemas in the future."
17376
msgstr ""
17377
"Adjust the configuration file name and temporary directory names if yours "
17378
"are different. Also, it may be worthwhile to keep the "
17379
"<filename>ldif_output</filename> directory around in case you want to add "
17380
"additional schemas in the future."
17381
17382
#: serverguide/C/network-auth.xml:467(para)
17383
msgid ""
17384
"Edit the <filename>/tmp/cn\\=dyngroup.ldif</filename> file, changing the "
17385
"following attributes:"
17386
msgstr ""
17387
"Edit the <filename>/tmp/cn\\=dyngroup.ldif</filename> file, changing the "
17388
"following attributes:"
17389
17390
#: serverguide/C/network-auth.xml:471(programlisting)
17391
#, no-wrap
17392
msgid ""
17393
"\n"
17394
"dn: cn=dyngroup,cn=schema,cn=config\n"
17395
"...\n"
17396
"cn: dyngroup\n"
17397
msgstr ""
17398
"\n"
17399
"dn: cn=dyngroup,cn=schema,cn=config\n"
17400
"...\n"
17401
"cn: dyngroup\n"
17402
17403
#: serverguide/C/network-auth.xml:477(para) serverguide/C/network-auth.xml:1691(para)
17404
msgid "And remove the following lines from the bottom of the file:"
17405
msgstr "And remove the following lines from the bottom of the file:"
17406
17407
#: serverguide/C/network-auth.xml:481(programlisting)
17408
#, no-wrap
17409
msgid ""
17410
"\n"
17411
"structuralObjectClass: olcSchemaConfig\n"
17412
"entryUUID: 10dae0ea-0760-102d-80d3-f9366b7f7757\n"
17413
"creatorsName: cn=config\n"
17414
"createTimestamp: 20080826021140Z\n"
17415
"entryCSN: 20080826021140.791425Z#000000#000#000000\n"
17416
"modifiersName: cn=config\n"
17417
"modifyTimestamp: 20080826021140Z\n"
17418
msgstr ""
17419
"\n"
17420
"structuralObjectClass: olcSchemaConfig\n"
17421
"entryUUID: 10dae0ea-0760-102d-80d3-f9366b7f7757\n"
17422
"creatorsName: cn=config\n"
17423
"createTimestamp: 20080826021140Z\n"
17424
"entryCSN: 20080826021140.791425Z#000000#000#000000\n"
17425
"modifiersName: cn=config\n"
17426
"modifyTimestamp: 20080826021140Z\n"
17427
17428
#: serverguide/C/network-auth.xml:492(para) serverguide/C/network-auth.xml:1706(para) serverguide/C/network-auth.xml:2741(para)
17429
msgid ""
17430
"The attribute values will vary, just be sure the attributes are removed."
17431
msgstr ""
17432
"The attribute values will vary, just be sure the attributes are removed."
17433
17434
#: serverguide/C/network-auth.xml:500(para) serverguide/C/network-auth.xml:1714(para)
17435
msgid ""
17436
"Finally, using the <application>ldapadd</application> utility, add the new "
17437
"schema to the directory:"
17438
msgstr ""
17439
"Finally, using the <application>ldapadd</application> utility, add the new "
17440
"schema to the directory:"
17441
17442
#: serverguide/C/network-auth.xml:506(command)
17443
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /tmp/cn\\=dyngroup.ldif"
17444
msgstr "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f /tmp/cn\\=dyngroup.ldif"
17445
17446
#: serverguide/C/network-auth.xml:512(para)
17447
msgid ""
17448
"There should now be a <emphasis>dn: "
17449
"cn={4}dyngroup,cn=schema,cn=config</emphasis> entry in the cn=config tree."
17450
msgstr ""
17451
"There should now be a <emphasis>dn: "
17452
"cn={4}dyngroup,cn=schema,cn=config</emphasis> entry in the cn=config tree."
17453
17454
#: serverguide/C/network-auth.xml:522(title)
17455
msgid "LDAP Replication"
17456
msgstr ""
17457
17458
#: serverguide/C/network-auth.xml:524(para)
17459
msgid ""
17460
"LDAP often quickly becomes a highly critical service to the network. "
17461
"Multiple systems will come to depend on LDAP for authentication, "
17462
"authorization, configuration, etc. It is a good idea to setup a redundant "
17463
"system through replication."
17464
msgstr ""
17465
"LDAP often quickly becomes a highly critical service to the network. "
17466
"Multiple systems will come to depend on LDAP for authentication, "
17467
"authorisation, configuration, etc. It is a good idea to setup a redundant "
17468
"system through replication."
17469
17470
#: serverguide/C/network-auth.xml:530(para)
17471
msgid ""
17472
"Replication is achieved using the <emphasis>Syncrepl</emphasis> engine. "
17473
"Syncrepl allows the changes to be synced using a "
17474
"<emphasis>consumer</emphasis>, <emphasis>provider</emphasis> model. A "
17475
"provider sends directory changes to consumers."
17476
msgstr ""
17477
17478
#: serverguide/C/network-auth.xml:537(title)
17479
msgid "Provider Configuration"
17480
msgstr ""
17481
17482
#: serverguide/C/network-auth.xml:539(para)
17483
msgid ""
17484
"The following is an example of a <emphasis>Single-Master</emphasis> "
17485
"configuration. In this configuration one OpenLDAP server is configured as a "
17486
"<emphasis>provider</emphasis> and another as a <emphasis>consumer</emphasis>."
17487
msgstr ""
17488
17489
#: serverguide/C/network-auth.xml:547(para)
17490
msgid ""
17491
"First, configure the provider server. Copy the following to a file named "
17492
"<filename>provider_sync.ldif</filename>:"
17493
msgstr ""
17494
17495
#: serverguide/C/network-auth.xml:552(programlisting)
17496
#, no-wrap
17497
msgid ""
17498
"\n"
17499
"# Add indexes to the frontend db.\n"
17500
"dn: olcDatabase={1}hdb,cn=config\n"
17501
"changetype: modify\n"
17502
"add: olcDbIndex\n"
17503
"olcDbIndex: entryCSN eq\n"
17504
"-\n"
17505
"add: olcDbIndex\n"
17506
"olcDbIndex: entryUUID eq\n"
17507
"\n"
17508
"#Load the syncprov and accesslog modules.\n"
17509
"dn: cn=module{0},cn=config\n"
17510
"changetype: modify\n"
17511
"add: olcModuleLoad\n"
17512
"olcModuleLoad: syncprov\n"
17513
"-\n"
17514
"add: olcModuleLoad\n"
17515
"olcModuleLoad: accesslog\n"
17516
"\n"
17517
"# Accesslog database definitions\n"
17518
"dn: olcDatabase={2}hdb,cn=config\n"
17519
"objectClass: olcDatabaseConfig\n"
17520
"objectClass: olcHdbConfig\n"
17521
"olcDatabase: {2}hdb\n"
17522
"olcDbDirectory: /var/lib/ldap/accesslog\n"
17523
"olcSuffix: cn=accesslog\n"
17524
"olcRootDN: cn=admin,dc=example,dc=com\n"
17525
"olcDbIndex: default eq\n"
17526
"olcDbIndex: entryCSN,objectClass,reqEnd,reqResult,reqStart\n"
17527
"\n"
17528
"# Accesslog db syncprov.\n"
17529
"dn: olcOverlay=syncprov,olcDatabase={2}hdb,cn=config\n"
17530
"changetype: add\n"
17531
"objectClass: olcOverlayConfig\n"
17532
"objectClass: olcSyncProvConfig\n"
17533
"olcOverlay: syncprov\n"
17534
"olcSpNoPresent: TRUE\n"
17535
"olcSpReloadHint: TRUE\n"
17536
"\n"
17537
"# syncrepl Provider for primary db\n"
17538
"dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config\n"
17539
"changetype: add\n"
17540
"objectClass: olcOverlayConfig\n"
17541
"objectClass: olcSyncProvConfig\n"
17542
"olcOverlay: syncprov\n"
17543
"olcSpNoPresent: TRUE\n"
17544
"\n"
17545
"# accesslog overlay definitions for primary db\n"
17546
"dn: olcOverlay=accesslog,olcDatabase={1}hdb,cn=config\n"
17547
"objectClass: olcOverlayConfig\n"
17548
"objectClass: olcAccessLogConfig\n"
17549
"olcOverlay: accesslog\n"
17550
"olcAccessLogDB: cn=accesslog\n"
17551
"olcAccessLogOps: writes\n"
17552
"olcAccessLogSuccess: TRUE\n"
17553
"# scan the accesslog DB every day, and purge entries older than 7 days\n"
17554
"olcAccessLogPurge: 07+00:00 01+00:00\n"
17555
msgstr ""
17556
17557
#: serverguide/C/network-auth.xml:614(para)
17558
msgid ""
17559
"The <application>AppArmor</application> profile for "
17560
"<application>slapd</application> will need to be adjusted for the accesslog "
17561
"database location. Edit <filename>/etc/apparmor.d/usr.sbin.slapd</filename> "
17562
"adding:"
17563
msgstr ""
17564
17565
#: serverguide/C/network-auth.xml:619(programlisting)
17566
#, no-wrap
17567
msgid ""
17568
"\n"
17569
" /var/lib/ldap/accesslog/ r,\n"
17570
" /var/lib/ldap/accesslog/** rwk,\n"
17571
msgstr ""
17572
17573
#: serverguide/C/network-auth.xml:624(para)
17574
msgid ""
17575
"Then create the directory, reload the <application>apparmor</application> "
17576
"profile, and copy the <filename>DB_CONFIG</filename> file:"
17577
msgstr ""
17578
17579
#: serverguide/C/network-auth.xml:630(command)
17580
msgid "sudo -u openldap mkdir /var/lib/ldap/accesslog"
17581
msgstr ""
17582
17583
#: serverguide/C/network-auth.xml:631(command)
17584
msgid "sudo -u openldap cp /var/lib/ldap/DB_CONFIG /var/lib/ldap/accesslog/"
17585
msgstr ""
17586
17587
#: serverguide/C/network-auth.xml:636(para)
17588
msgid ""
17589
"Using the <emphasis>-u openldap</emphasis> option with the "
17590
"<application>sudo</application> commands above removes the need to adjust "
17591
"permissions for the new directory later."
17592
msgstr ""
17593
17594
#: serverguide/C/network-auth.xml:645(para)
17595
msgid ""
17596
"Edit the file and change the <emphasis>olcRootDN</emphasis> to match your "
17597
"directory:"
17598
msgstr ""
17599
17600
#: serverguide/C/network-auth.xml:649(programlisting)
17601
#, no-wrap
17602
msgid ""
17603
"\n"
17604
"olcRootDN: cn=admin,dc=example,dc=com\n"
17605
msgstr ""
17606
17607
#: serverguide/C/network-auth.xml:657(para)
17608
msgid ""
17609
"Next, add the LDIF file using the <application>ldapadd</application> utility:"
17610
msgstr ""
17611
17612
#: serverguide/C/network-auth.xml:662(command)
17613
msgid "sudo ldapadd -Y EXTERNAL -H ldapi:/// -f provider_sync.ldif"
17614
msgstr ""
17615
17616
#: serverguide/C/network-auth.xml:669(para)
17617
msgid "Restart <application>slapd</application>:"
17618
msgstr ""
17619
17620
#: serverguide/C/network-auth.xml:674(command) serverguide/C/network-auth.xml:1040(command) serverguide/C/network-auth.xml:1227(command)
17621
msgid "sudo /etc/init.d/slapd restart"
17622
msgstr "sudo /etc/init.d/slapd restart"
17623
17624
#: serverguide/C/network-auth.xml:680(para)
17625
msgid ""
17626
"The <emphasis>Provider</emphasis> server is now configured, and it is time "
17627
"to configure a <emphasis>Consumer</emphasis> server."
17628
msgstr ""
17629
17630
#: serverguide/C/network-auth.xml:687(title)
17631
msgid "Consumer Configuration"
17632
msgstr ""
17633
17634
#: serverguide/C/network-auth.xml:692(para)
17635
msgid ""
17636
"On the <emphasis>Consumer</emphasis> server configure it the same as the "
17637
"<emphasis>Provider</emphasis> except for the <emphasis>Syncrepl</emphasis> "
17638
"configuration steps."
17639
msgstr ""
17640
17641
#: serverguide/C/network-auth.xml:697(para)
17642
msgid "Add the additional schema files:"
17643
msgstr ""
17644
17645
#: serverguide/C/network-auth.xml:707(para)
17646
msgid ""
17647
"Also, create, or copy from the provider server, the "
17648
"<filename>backend.example.com.ldif</filename>"
17649
msgstr ""
17650
17651
#: serverguide/C/network-auth.xml:711(programlisting)
17652
#, no-wrap
17653
msgid ""
17654
"\n"
17655
"# Load dynamic backend modules\n"
17656
"dn: cn=module,cn=config\n"
17657
"objectClass: olcModuleList\n"
17658
"cn: module\n"
17659
"olcModulepath: /usr/lib/ldap\n"
17660
"olcModuleload: back_hdb\n"
17661
"\n"
17662
"# Database settings\n"
17663
"dn: olcDatabase=hdb,cn=config\n"
17664
"objectClass: olcDatabaseConfig\n"
17665
"objectClass: olcHdbConfig\n"
17666
"olcDatabase: {1}hdb\n"
17667
"olcSuffix: dc=example,dc=com\n"
17668
"olcDbDirectory: /var/lib/ldap\n"
17669
"olcRootDN: cn=admin,dc=example,dc=com\n"
17670
"olcRootPW: secret\n"
17671
"olcDbConfig: set_cachesize 0 2097152 0\n"
17672
"olcDbConfig: set_lk_max_objects 1500\n"
17673
"olcDbConfig: set_lk_max_locks 1500\n"
17674
"olcDbConfig: set_lk_max_lockers 1500\n"
17675
"olcDbIndex: objectClass eq\n"
17676
"olcLastMod: TRUE\n"
17677
"olcDbCheckpoint: 512 30\n"
17678
"olcAccess: to attrs=userPassword by dn=\"cn=admin,dc=example,dc=com\" write "
17679
"by anonymous auth by self write by * none\n"
17680
"olcAccess: to attrs=shadowLastChange by self write by * read\n"
17681
"olcAccess: to dn.base=\"\" by * read\n"
17682
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
17683
msgstr ""
17684
17685
#: serverguide/C/network-auth.xml:741(para)
17686
msgid "And add the LDIF by entering:"
17687
msgstr "And add the LDIF by entering:"
17688
17689
#: serverguide/C/network-auth.xml:752(para)
17690
msgid ""
17691
"Do the same with the <filename>frontend.example.com.ldif</filename> file "
17692
"listed above, and add it:"
17693
msgstr ""
17694
17695
#: serverguide/C/network-auth.xml:760(para)
17696
msgid ""
17697
"The two severs should now have the same configuration except for the "
17698
"<emphasis>Syncrepl</emphasis> options."
17699
msgstr ""
17700
17701
#: serverguide/C/network-auth.xml:768(para)
17702
msgid ""
17703
"Now create a file named <filename>consumer_sync.ldif</filename> containing:"
17704
msgstr ""
17705
17706
#: serverguide/C/network-auth.xml:772(programlisting)
17707
#, no-wrap
17708
msgid ""
17709
"\n"
17710
"#Load the syncprov module.\n"
17711
"dn: cn=module{0},cn=config\n"
17712
"changetype: modify\n"
17713
"add: olcModuleLoad\n"
17714
"olcModuleLoad: syncprov\n"
17715
"\n"
17716
"# syncrepl specific indices\n"
17717
"dn: olcDatabase={1}hdb,cn=config\n"
17718
"changetype: modify\n"
17719
"add: olcDbIndex\n"
17720
"olcDbIndex: entryUUID eq\n"
17721
"-\n"
17722
"add: olcSyncRepl\n"
17723
"olcSyncRepl: rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
17724
"binddn=\"cn=admin,dc=example,dc=com\" \n"
17725
" credentials=secret searchbase=\"dc=example,dc=com\" "
17726
"logbase=\"cn=accesslog\" \n"
17727
" logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" "
17728
"schemachecking=on \n"
17729
" type=refreshAndPersist retry=\"60 +\" syncdata=accesslog\n"
17730
"-\n"
17731
"add: olcUpdateRef\n"
17732
"olcUpdateRef: ldap://ldap01.example.com\n"
17733
msgstr ""
17734
17735
#: serverguide/C/network-auth.xml:795(para)
17736
msgid "You will probably want to change the following attributes:"
17737
msgstr ""
17738
17739
#: serverguide/C/network-auth.xml:800(para)
17740
msgid "<emphasis>ldap01.example.com</emphasis> to your server's hostname."
17741
msgstr ""
17742
17743
#: serverguide/C/network-auth.xml:801(emphasis)
17744
msgid "binddn"
17745
msgstr ""
17746
17747
#: serverguide/C/network-auth.xml:802(emphasis)
17748
msgid "credentials"
17749
msgstr ""
17750
17751
#: serverguide/C/network-auth.xml:803(emphasis)
17752
msgid "searchbase"
17753
msgstr ""
17754
17755
#: serverguide/C/network-auth.xml:804(emphasis)
17756
msgid "olcUpdateRef:"
17757
msgstr ""
17758
17759
#: serverguide/C/network-auth.xml:810(para)
17760
msgid "Add the LDIF file to the configuration tree:"
17761
msgstr ""
17762
17763
#: serverguide/C/network-auth.xml:815(command)
17764
msgid "sudo ldapadd -c -Y EXTERNAL -H ldapi:/// -f consumer_sync.ldif"
17765
msgstr ""
17766
17767
#: serverguide/C/network-auth.xml:821(para)
17768
msgid ""
17769
"The frontend database should now sync between servers. You can add "
17770
"additional servers using the steps above as the need arises."
17771
msgstr ""
17772
17773
#: serverguide/C/network-auth.xml:831(programlisting)
17774
#, no-wrap
17775
msgid "127.0.0.1\tldap01.example.com ldap01"
17776
msgstr "127.0.0.1\tldap01.example.com ldap01"
17777
17778
#: serverguide/C/network-auth.xml:827(para)
17779
msgid ""
17780
"The <application>slapd</application> daemon will send log information to "
17781
"<filename>/var/log/syslog</filename> by default. So if all does "
17782
"<emphasis>not</emphasis> go well check there for errors and other "
17783
"troubleshooting information. Also, be sure that each server knows it's Fully "
17784
"Qualified Domain Name (FQDN). This is configured in "
17785
"<filename>/etc/hosts</filename> with a line similar to: <placeholder-1/>."
17786
msgstr ""
17787
"The <application>slapd</application> daemon will send log information to "
17788
"<filename>/var/log/syslog</filename> by default. So if all does "
17789
"<emphasis>not</emphasis> go well check there for errors and other "
17790
"troubleshooting information. Also, be sure that each server knows it's Fully "
17791
"Qualified Domain Name (FQDN). This is configured in "
17792
"<filename>/etc/hosts</filename> with a line similar to: <placeholder-1/>."
17793
17794
#: serverguide/C/network-auth.xml:839(title)
17795
msgid "Setting up ACL"
17796
msgstr "Setting up ACL"
17797
17798
#: serverguide/C/network-auth.xml:841(para)
17799
msgid ""
17800
"Authentication requires access to the password field, that should be not "
17801
"accessible by default. Also, in order for users to change their own "
17802
"password, using <command>passwd</command> or other utilities, "
17803
"<emphasis>shadowLastChange</emphasis> needs to be accessible once a user has "
17804
"authenticated."
17805
msgstr ""
17806
"Authentication requires access to the password field, that should be not "
17807
"accessible by default. Also, in order for users to change their own "
17808
"password, using <command>passwd</command> or other utilities, "
17809
"<emphasis>shadowLastChange</emphasis> needs to be accessible once a user has "
17810
"authenticated."
17811
17812
#: serverguide/C/network-auth.xml:848(para)
17813
msgid ""
17814
"To view the Access Control List (ACL), use the "
17815
"<application>ldapsearch</application> utility:"
17816
msgstr ""
17817
"To view the Access Control List (ACL), use the "
17818
"<application>ldapsearch</application> utility:"
17819
17820
#: serverguide/C/network-auth.xml:853(command)
17821
msgid ""
17822
"ldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase=hdb "
17823
"olcAccess"
17824
msgstr ""
17825
"ldapsearch -xLLL -b cn=config -D cn=admin,cn=config -W olcDatabase=hdb "
17826
"olcAccess"
17827
17828
#: serverguide/C/network-auth.xml:857(computeroutput)
17829
#, no-wrap
17830
msgid ""
17831
"Enter LDAP Password: \n"
17832
"dn: olcDatabase={1}hdb,cn=config\n"
17833
"olcAccess: {0}to attrs=userPassword,shadowLastChange by "
17834
"dn=\"cn=admin,dc=exampl\n"
17835
" e,dc=com\" write by anonymous auth by self write by * none\n"
17836
"olcAccess: {1}to dn.base=\"\" by * read\n"
17837
"olcAccess: {2}to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
17838
msgstr ""
17839
"Enter LDAP Password: \n"
17840
"dn: olcDatabase={1}hdb,cn=config\n"
17841
"olcAccess: {0}to attrs=userPassword,shadowLastChange by "
17842
"dn=\"cn=admin,dc=exampl\n"
17843
" e,dc=com\" write by anonymous auth by self write by * none\n"
17844
"olcAccess: {1}to dn.base=\"\" by * read\n"
17845
"olcAccess: {2}to * by dn=\"cn=admin,dc=example,dc=com\" write by * read\n"
17846
17847
#: serverguide/C/network-auth.xml:869(title)
17848
msgid "TLS and SSL"
17849
msgstr "TLS and SSL"
17850
17851
#: serverguide/C/network-auth.xml:871(para)
17852
msgid ""
17853
"When authenticating to an OpenLDAP server it is best to do so using an "
17854
"encrypted session. This can be accomplished using Transport Layer Security "
17855
"(TLS) and/or Secure Sockets Layer (SSL)."
17856
msgstr ""
17857
"When authenticating to an OpenLDAP server it is best to do so using an "
17858
"encrypted session. This can be accomplished using Transport Layer Security "
17859
"(TLS) and/or Secure Sockets Layer (SSL)."
17860
17861
#: serverguide/C/network-auth.xml:876(para)
17862
msgid ""
17863
"The first step in the process is to obtain or create a "
17864
"<emphasis>certificate</emphasis>. Because <application>slapd</application> "
17865
"is compiled using the <application>gnutls</application> library, the "
17866
"<application>certtool</application> utility will be used to create "
17867
"certificates."
17868
msgstr ""
17869
17870
#: serverguide/C/network-auth.xml:885(para)
17871
msgid ""
17872
"First, install <application>gnutls-bin</application> by entering the "
17873
"following in a terminal:"
17874
msgstr ""
17875
17876
#: serverguide/C/network-auth.xml:890(command)
17877
msgid "sudo apt-get install gnutls-bin"
17878
msgstr ""
17879
17880
#: serverguide/C/network-auth.xml:896(para)
17881
msgid ""
17882
"Next, create a private key for the <emphasis>Certificate "
17883
"Authority</emphasis> (CA):"
17884
msgstr ""
17885
17886
#: serverguide/C/network-auth.xml:901(command)
17887
msgid ""
17888
"sudo sh -c \"certtool --generate-privkey > /etc/ssl/private/cakey.pem\""
17889
msgstr ""
17890
17891
#: serverguide/C/network-auth.xml:907(para)
17892
msgid ""
17893
"Create a <filename>/etc/ssl/ca.info</filename> details file to self-sign the "
17894
"CA certificate containing:"
17895
msgstr ""
17896
17897
#: serverguide/C/network-auth.xml:911(programlisting)
17898
#, no-wrap
17899
msgid ""
17900
"\n"
17901
"cn = Example Company\n"
17902
"ca\n"
17903
"cert_signing_key\n"
17904
msgstr ""
17905
17906
#: serverguide/C/network-auth.xml:920(para)
17907
msgid "Now create the self-signed CA certificate:"
17908
msgstr ""
17909
17910
#: serverguide/C/network-auth.xml:925(command)
17911
msgid ""
17912
"sudo certtool --generate-self-signed --load-privkey "
17913
"/etc/ssl/private/cakey.pem \\ --template /etc/ssl/ca.info --outfile "
17914
"/etc/ssl/certs/cacert.pem"
17915
msgstr ""
17916
17917
#: serverguide/C/network-auth.xml:932(para)
17918
msgid "Make a private key for the server:"
17919
msgstr ""
17920
17921
#: serverguide/C/network-auth.xml:937(command)
17922
msgid ""
17923
"sudo sh -c \"certtool --generate-privkey > "
17924
"/etc/ssl/private/ldap01_slapd_key.pem\""
17925
msgstr ""
17926
17927
#: serverguide/C/network-auth.xml:941(para)
17928
msgid ""
17929
"Replace <emphasis>ldap01</emphasis> in the filename with your server's "
17930
"hostname. Naming the certificate and key for the host and service that will "
17931
"be using them will help keep filenames and paths straight."
17932
msgstr ""
17933
17934
#: serverguide/C/network-auth.xml:950(para)
17935
msgid ""
17936
"To sign the server's certificate with the CA, create the "
17937
"<filename>/etc/ssl/ldap01.info</filename> info file containing:"
17938
msgstr ""
17939
17940
#: serverguide/C/network-auth.xml:954(programlisting)
17941
#, no-wrap
17942
msgid ""
17943
"\n"
17944
"organization = Example Company\n"
17945
"cn = ldap01.example.com\n"
17946
"tls_www_server\n"
17947
"encryption_key\n"
17948
"signing_key\n"
17949
msgstr ""
17950
17951
#: serverguide/C/network-auth.xml:965(para)
17952
msgid "Create the server's certificate:"
17953
msgstr ""
17954
17955
#: serverguide/C/network-auth.xml:970(command)
17956
msgid ""
17957
"sudo certtool --generate-certificate --load-privkey /etc/ssl/private/x01-"
17958
"test_slapd_key.pem \\ --load-ca-certificate /etc/ssl/certs/cacert.pem --load-"
17959
"ca-privkey /etc/ssl/private/cakey.pem \\ --template /etc/ssl/x01-test.info --"
17960
"outfile /etc/ssl/certs/x01-test_slapd_cert.pem"
17961
msgstr ""
17962
17963
#: serverguide/C/network-auth.xml:978(para)
17964
msgid ""
17965
"Once you have a certificate, key, and CA cert installed, use "
17966
"<application>ldapmodify</application> to add the new configuration options:"
17967
msgstr ""
17968
"Once you have a certificate, key, and CA cert installed, use "
17969
"<application>ldapmodify</application> to add the new configuration options:"
17970
17971
#: serverguide/C/network-auth.xml:989(userinput)
17972
#, no-wrap
17973
msgid ""
17974
"dn: cn=config\n"
17975
"add: olcTLSCACertificateFile\n"
17976
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
17977
"-\n"
17978
"add: olcTLSCertificateFile\n"
17979
"olcTLSCertificateFile: /etc/ssl/certs/ldap01_slapd_cert.pem\n"
17980
"-\n"
17981
"add: olcTLSCertificateKeyFile\n"
17982
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap01_slapd_key.pem"
17983
msgstr ""
17984
17985
#: serverguide/C/network-auth.xml:988(computeroutput) serverguide/C/network-auth.xml:1159(computeroutput)
17986
#, no-wrap
17987
msgid ""
17988
"Enter LDAP Password:\n"
17989
"<placeholder-1/>\n"
17990
"\n"
17991
"modifying entry \"cn=config\"\n"
17992
msgstr ""
17993
"Enter LDAP Password:\n"
17994
"<placeholder-1/>\n"
17995
"\n"
17996
"modifying entry \"cn=config\"\n"
17997
17998
#: serverguide/C/network-auth.xml:1004(para)
17999
msgid ""
18000
"Adjust the <filename>ldap01_slapd_cert.pem</filename>, "
18001
"<filename>ldap01_slapd_key.pem</filename>, and "
18002
"<filename>cacert.pem</filename> names if yours are different."
18003
msgstr ""
18004
18005
#: serverguide/C/network-auth.xml:1010(para)
18006
msgid ""
18007
"Next, edit <filename>/etc/default/slapd</filename> uncomment the "
18008
"<emphasis>SLAPD_SERVICES</emphasis> option:"
18009
msgstr ""
18010
"Next, edit <filename>/etc/default/slapd</filename> uncomment the "
18011
"<emphasis>SLAPD_SERVICES</emphasis> option:"
18012
18013
#: serverguide/C/network-auth.xml:1014(programlisting)
18014
#, no-wrap
18015
msgid ""
18016
"\n"
18017
"SLAPD_SERVICES=\"ldap:/// ldapi:/// ldaps:///\"\n"
18018
msgstr ""
18019
"\n"
18020
"SLAPD_SERVICES=\"ldap:/// ldapi:/// ldaps:///\"\n"
18021
18022
#: serverguide/C/network-auth.xml:1018(para)
18023
msgid ""
18024
"Now the <emphasis>openldap</emphasis> user needs access to the certificate:"
18025
msgstr ""
18026
"Now the <emphasis>openldap</emphasis> user needs access to the certificate:"
18027
18028
#: serverguide/C/network-auth.xml:1023(command)
18029
msgid "sudo adduser openldap ssl-cert"
18030
msgstr "sudo adduser openldap ssl-cert"
18031
18032
#: serverguide/C/network-auth.xml:1024(command)
18033
msgid "sudo chgrp ssl-cert /etc/ssl/private/ldap01_slapd_key.pem"
18034
msgstr ""
18035
18036
#: serverguide/C/network-auth.xml:1025(command)
18037
msgid "sudo chmod g+r /etc/ssl/private/ldap01_slapd_key.pem"
18038
msgstr ""
18039
18040
#: serverguide/C/network-auth.xml:1029(para)
18041
msgid ""
18042
"If the <filename role=\"directory\">/etc/ssl/private</filename> and "
18043
"<filename>/etc/ssl/private/server.key</filename> have different permissions, "
18044
"adjust the commands appropriately."
18045
msgstr ""
18046
"If the <filename role=\"directory\">/etc/ssl/private</filename> and "
18047
"<filename>/etc/ssl/private/server.key</filename> have different permissions, "
18048
"adjust the commands appropriately."
18049
18050
#: serverguide/C/network-auth.xml:1035(para)
18051
msgid "Finally, restart <application>slapd</application>:"
18052
msgstr "Finally, restart <application>slapd</application>:"
18053
18054
#: serverguide/C/network-auth.xml:1043(para)
18055
msgid ""
18056
"The <application>slapd</application> daemon should now be listening for "
18057
"LDAPS connections and be able to use STARTTLS during authentication."
18058
msgstr ""
18059
"The <application>slapd</application> daemon should now be listening for "
18060
"LDAPS connections and be able to use STARTTLS during authentication."
18061
18062
#: serverguide/C/network-auth.xml:1049(para)
18063
msgid ""
18064
"If you run into troubles with the server not starting, check the "
18065
"/var/log/syslog. If you see errors like main: TLS init def ctx failed: -1, "
18066
"it is likely there is a configuration problem. Check that the certificate is "
18067
"signed by the authority from in the files configured, and that the ssl-cert "
18068
"group has read permissions on the private key."
18069
msgstr ""
18070
"If you run into troubles with the server not starting, check the "
18071
"/var/log/syslog. If you see errors like main: TLS init def ctx failed: -1, "
18072
"it is likely there is a configuration problem. Check that the certificate is "
18073
"signed by the authority from in the files configured, and that the ssl-cert "
18074
"group has read permissions on the private key."
18075
18076
#: serverguide/C/network-auth.xml:1061(title)
18077
msgid "TLS Replication"
18078
msgstr "TLS Replication"
18079
18080
#: serverguide/C/network-auth.xml:1063(para)
18081
msgid ""
18082
"If you have setup <application>Syncrepl</application> between servers, it is "
18083
"prudent to encrypt the replication traffic using <emphasis>Transport Layer "
18084
"Security (TLS)</emphasis>. For details on setting up replication see <xref "
18085
"linkend=\"openldap-server-replication\"/>."
18086
msgstr ""
18087
"If you have setup <application>Syncrepl</application> between servers, it is "
18088
"prudent to encrypt the replication traffic using <emphasis>Transport Layer "
18089
"Security (TLS)</emphasis>. For details on setting up replication see <xref "
18090
"linkend=\"openldap-server-replication\"/>."
18091
18092
#: serverguide/C/network-auth.xml:1069(para)
18093
msgid ""
18094
"Assuming you have followed the above instructions and created a CA "
18095
"certificate and server certificate on the <emphasis>Provider</emphasis> "
18096
"server. Follow the following instructions to create a certificate and key "
18097
"for the <emphasis>Consumer</emphasis> server."
18098
msgstr ""
18099
18100
#: serverguide/C/network-auth.xml:1078(para)
18101
msgid "Create a new key for the Consumer server:"
18102
msgstr ""
18103
18104
#: serverguide/C/network-auth.xml:1083(command)
18105
msgid "mkdir ldap02-ssl"
18106
msgstr ""
18107
18108
#: serverguide/C/network-auth.xml:1084(command)
18109
msgid "cd ldap02-ssl"
18110
msgstr ""
18111
18112
#: serverguide/C/network-auth.xml:1085(command)
18113
msgid "certtool --generate-privkey > ldap02_slapd_key.pem"
18114
msgstr ""
18115
18116
#: serverguide/C/network-auth.xml:1089(para)
18117
msgid ""
18118
"Creating a new directory is not strictly necessary, but it will help keep "
18119
"things organized and make it easier to copy the files to the Consumer server."
18120
msgstr ""
18121
18122
#: serverguide/C/network-auth.xml:1098(para)
18123
msgid ""
18124
"Next, create an info file, <filename>ldap02.info</filename> for the Consumer "
18125
"server, changing the attributes to match your locality and server:"
18126
msgstr ""
18127
18128
#: serverguide/C/network-auth.xml:1103(programlisting)
18129
#, no-wrap
18130
msgid ""
18131
"\n"
18132
"country = US\n"
18133
"state = North Carolina\n"
18134
"locality = Winston-Salem\n"
18135
"organization = Example Company\n"
18136
"cn = ldap02.salem.edu\n"
18137
"tls_www_client\n"
18138
"encryption_key\n"
18139
"signing_key\n"
18140
msgstr ""
18141
18142
#: serverguide/C/network-auth.xml:1117(para)
18143
msgid "Create the certificate:"
18144
msgstr ""
18145
18146
#: serverguide/C/network-auth.xml:1122(command)
18147
msgid ""
18148
"sudo certtool --generate-certificate --load-privkey ldap02_slapd_key.pem \\ -"
18149
"-load-ca-certificate /etc/ssl/certs/cacert.pem --load-ca-privkey "
18150
"/etc/ssl/private/cakey.pem \\ --template ldap02.info --outfile "
18151
"ldap02_slapd_cert.pem"
18152
msgstr ""
18153
18154
#: serverguide/C/network-auth.xml:1130(para)
18155
msgid "Copy the <filename>cacert.pem</filename> to the dicretory:"
18156
msgstr ""
18157
18158
#: serverguide/C/network-auth.xml:1135(command)
18159
msgid "cp /etc/ssl/certs/cacert.pem ."
18160
msgstr ""
18161
18162
#: serverguide/C/network-auth.xml:1141(para)
18163
msgid ""
18164
"The only thing left is to copy the <filename>ldap02-ssl</filename> directory "
18165
"to the Consumer server, then copy <filename>ldap02_slapd_cert.pem</filename> "
18166
"and <filename>cacert.pem</filename> to <filename>/etc/ssl/certs</filename>, "
18167
"and copy <filename>ldap02_slapd_key.pem</filename> to "
18168
"<filename>/etc/ssl/private</filename>."
18169
msgstr ""
18170
18171
#: serverguide/C/network-auth.xml:1150(para)
18172
msgid ""
18173
"Once the files are in place adjust the <emphasis>cn=config</emphasis> tree "
18174
"by entering:"
18175
msgstr ""
18176
18177
#: serverguide/C/network-auth.xml:1160(userinput)
18178
#, no-wrap
18179
msgid ""
18180
"dn: cn=config\n"
18181
"add: olcTLSCACertificateFile\n"
18182
"olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem\n"
18183
"-\n"
18184
"add: olcTLSCertificateFile\n"
18185
"olcTLSCertificateFile: /etc/ssl/certs/ldap02_slapd_cert.pem\n"
18186
"-\n"
18187
"add: olcTLSCertificateKeyFile\n"
18188
"olcTLSCertificateKeyFile: /etc/ssl/private/ldap02_slapd_key.pem"
18189
msgstr ""
18190
18191
#: serverguide/C/network-auth.xml:1177(para)
18192
msgid ""
18193
"As with the Provider you can now edit "
18194
"<filename>/etc/default/slapd</filename> and add the "
18195
"<emphasis>ldaps:///</emphasis> parameter to the "
18196
"<emphasis>SLAPD_SERVICES</emphasis> option."
18197
msgstr ""
18198
18199
#: serverguide/C/network-auth.xml:1185(para)
18200
msgid ""
18201
"Now that <emphasis>TLS</emphasis> has been setup on each server, once again "
18202
"modify the <emphasis>Consumer</emphasis> server's "
18203
"<emphasis>cn=config</emphasis> tree by entering the following in a terminal:"
18204
msgstr ""
18205
18206
#: serverguide/C/network-auth.xml:1198(userinput)
18207
#, no-wrap
18208
msgid ""
18209
"\n"
18210
"dn: olcDatabase={1}hdb,cn=config\n"
18211
"replace: olcSyncrepl\n"
18212
"olcSyncrepl: {0}rid=0 provider=ldap://ldap01.example.com bindmethod=simple "
18213
"binddn=\"cn=ad\n"
18214
" min,dc=example,dc=com\" credentials=secret searchbase=\"dc=example,dc=com\" "
18215
"logbas\n"
18216
" e=\"cn=accesslog\" "
18217
"logfilter=\"(&(objectClass=auditWriteObject)(reqResult=0))\" s\n"
18218
" chemachecking=on type=refreshAndPersist retry=\"60 +\" syncdata=accesslog "
18219
"starttls=yes"
18220
msgstr ""
18221
18222
#: serverguide/C/network-auth.xml:1195(computeroutput)
18223
#, no-wrap
18224
msgid ""
18225
"SASL/EXTERNAL authentication started\n"
18226
"SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth\n"
18227
"SASL SSF: 0\n"
18228
"<placeholder-1/>\n"
18229
"\n"
18230
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
18231
msgstr ""
18232
18233
#: serverguide/C/network-auth.xml:1210(para)
18234
msgid ""
18235
"If the LDAP server hostname does not match the Fully Qualified Domain Name "
18236
"(FQDN) in the certificate, you may have to edit "
18237
"<filename>/etc/ldap/ldap.conf</filename> and add the following TLS options:"
18238
msgstr ""
18239
"If the LDAP server hostname does not match the Fully Qualified Domain Name "
18240
"(FQDN) in the certificate, you may have to edit "
18241
"<filename>/etc/ldap/ldap.conf</filename> and add the following TLS options:"
18242
18243
#: serverguide/C/network-auth.xml:1215(programlisting)
18244
#, no-wrap
18245
msgid ""
18246
"\n"
18247
"TLS_CERT /etc/ssl/certs/ldap02_slapd_cert.pem\n"
18248
"TLS_KEY /etc/ssl/private/ldap02_slapd_key.pem\n"
18249
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
18250
msgstr ""
18251
18252
#: serverguide/C/network-auth.xml:1222(para)
18253
msgid ""
18254
"Finally, restart <application>slapd</application> on each of the servers:"
18255
msgstr ""
18256
"Finally, restart <application>slapd</application> on each of the servers:"
18257
18258
#: serverguide/C/network-auth.xml:1235(title)
18259
msgid "LDAP Authentication"
18260
msgstr "LDAP Authentication"
18261
18262
#: serverguide/C/network-auth.xml:1237(para)
18263
msgid ""
18264
"Once you have a working LDAP server, the <application>auth-client-"
18265
"config</application> and <application>libnss-ldap</application> packages "
18266
"take the pain out of configuring an Ubuntu client to authenticate using "
18267
"LDAP. To install the packages from, a terminal prompt enter:"
18268
msgstr ""
18269
"Once you have a working LDAP server, the <application>auth-client-"
18270
"config</application> and <application>libnss-ldap</application> packages "
18271
"take the pain out of configuring an Ubuntu client to authenticate using "
18272
"LDAP. To install the packages from, a terminal prompt enter:"
18273
18274
#: serverguide/C/network-auth.xml:1244(command)
18275
msgid "sudo apt-get install libnss-ldap"
18276
msgstr "sudo apt-get install libnss-ldap"
18277
18278
#: serverguide/C/network-auth.xml:1247(para)
18279
msgid ""
18280
"During the install a menu dialog will ask you connection details about your "
18281
"LDAP server."
18282
msgstr ""
18283
"During the install a menu dialogue will ask you connection details about "
18284
"your LDAP server."
18285
18286
#: serverguide/C/network-auth.xml:1251(para)
18287
msgid ""
18288
"If you make a mistake when entering your information you can execute the "
18289
"dialog again using:"
18290
msgstr ""
18291
"If you make a mistake when entering your information you can execute the "
18292
"dialogue again using:"
18293
18294
#: serverguide/C/network-auth.xml:1256(command)
18295
msgid "sudo dpkg-reconfigure ldap-auth-config"
18296
msgstr "sudo dpkg-reconfigure ldap-auth-config"
18297
18298
#: serverguide/C/network-auth.xml:1259(para)
18299
msgid ""
18300
"The results of the dialog can be seen in "
18301
"<filename>/etc/ldap.conf</filename>. If your server requires options not "
18302
"covered in the menu edit this file accordingly."
18303
msgstr ""
18304
"The results of the dialogue can be seen in "
18305
"<filename>/etc/ldap.conf</filename>. If your server requires options not "
18306
"covered in the menu edit this file accordingly."
18307
18308
#: serverguide/C/network-auth.xml:1264(para)
18309
msgid ""
18310
"Now that <application>libnss-ldap</application> is configured enable the "
18311
"<application>auth-client-config</application> LDAP profile by entering:"
18312
msgstr ""
18313
"Now that <application>libnss-ldap</application> is configured enable the "
18314
"<application>auth-client-config</application> LDAP profile by entering:"
18315
18316
#: serverguide/C/network-auth.xml:1270(command)
18317
msgid "sudo auth-client-config -t nss -p lac_ldap"
18318
msgstr "sudo auth-client-config -t nss -p lac_ldap"
18319
18320
#: serverguide/C/network-auth.xml:1275(para)
18321
msgid ""
18322
"<emphasis>-t:</emphasis> only modifies "
18323
"<filename>/etc/nsswitch.conf</filename>."
18324
msgstr ""
18325
"<emphasis>-t:</emphasis> only modifies "
18326
"<filename>/etc/nsswitch.conf</filename>."
18327
18328
#: serverguide/C/network-auth.xml:1280(para)
18329
msgid "<emphasis>-p:</emphasis> name of the profile to enable, disable, etc."
18330
msgstr ""
18331
"<emphasis>-p:</emphasis> name of the profile to enable, disable, etc."
18332
18333
#: serverguide/C/network-auth.xml:1285(para)
18334
msgid ""
18335
"<emphasis>lac_ldap:</emphasis> the <application>auth-client-"
18336
"config</application> profile that is part of the <application>ldap-auth-"
18337
"config</application> package."
18338
msgstr ""
18339
"<emphasis>lac_ldap:</emphasis> the <application>auth-client-"
18340
"config</application> profile that is part of the <application>ldap-auth-"
18341
"config</application> package."
18342
18343
#: serverguide/C/network-auth.xml:1292(para)
18344
msgid ""
18345
"Using the <application>pam-auth-update</application> utility, configure the "
18346
"system to use LDAP for authentication:"
18347
msgstr ""
18348
"Using the <application>pam-auth-update</application> utility, configure the "
18349
"system to use LDAP for authentication:"
18350
18351
#: serverguide/C/network-auth.xml:1297(command)
18352
msgid "sudo pam-auth-update"
18353
msgstr "sudo pam-auth-update"
18354
18355
#: serverguide/C/network-auth.xml:1300(para)
18356
msgid ""
18357
"From the <application>pam-auth-update</application> menu, choose LDAP and "
18358
"any other authentication mechanisms you need."
18359
msgstr ""
18360
"From the <application>pam-auth-update</application> menu, choose LDAP and "
18361
"any other authentication mechanisms you need."
18362
18363
#: serverguide/C/network-auth.xml:1304(para)
18364
msgid ""
18365
"You should now be able to login using user credentials stored in the LDAP "
18366
"directory."
18367
msgstr ""
18368
"You should now be able to login using user credentials stored in the LDAP "
18369
"directory."
18370
18371
#: serverguide/C/network-auth.xml:1309(para)
18372
msgid ""
18373
"If you are going to use LDAP to store Samba users you will need to configure "
18374
"the server to authenticate using LDAP. See <xref linkend=\"samba-ldap\"/> "
18375
"for details."
18376
msgstr ""
18377
"If you are going to use LDAP to store Samba users you will need to configure "
18378
"the server to authenticate using LDAP. See <xref linkend=\"samba-ldap\"/> "
18379
"for details."
18380
18381
#: serverguide/C/network-auth.xml:1317(title)
18382
msgid "User and Group Management"
18383
msgstr "User and Group Management"
18384
18385
#: serverguide/C/network-auth.xml:1319(para)
18386
msgid ""
18387
"The <application>ldap-utils</application> package comes with multiple "
18388
"utilities to manage the directory, but the long string of options needed, "
18389
"can make them a burden to use. The <application>ldapscripts</application> "
18390
"package contains configurable scripts to easily manage LDAP users and groups."
18391
msgstr ""
18392
"The <application>ldap-utils</application> package comes with multiple "
18393
"utilities to manage the directory, but the long string of options needed, "
18394
"can make them a burden to use. The <application>ldapscripts</application> "
18395
"package contains configurable scripts to easily manage LDAP users and groups."
18396
18397
#: serverguide/C/network-auth.xml:1325(para)
18398
msgid "To install the package, from a terminal enter:"
18399
msgstr "To install the package, from a terminal enter:"
18400
18401
#: serverguide/C/network-auth.xml:1330(command)
18402
msgid "sudo apt-get install ldapscripts"
18403
msgstr "sudo apt-get install ldapscripts"
18404
18405
#: serverguide/C/network-auth.xml:1333(para)
18406
msgid ""
18407
"Next, edit the config file "
18408
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> uncommenting and "
18409
"changing the following to match your environment:"
18410
msgstr ""
18411
"Next, edit the config file "
18412
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> uncommenting and "
18413
"changing the following to match your environment:"
18414
18415
#: serverguide/C/network-auth.xml:1338(programlisting)
18416
#, no-wrap
18417
msgid ""
18418
"\n"
18419
"SERVER=localhost\n"
18420
"BINDDN='cn=admin,dc=example,dc=com'\n"
18421
"BINDPWDFILE=\"/etc/ldapscripts/ldapscripts.passwd\"\n"
18422
"SUFFIX='dc=example,dc=com'\n"
18423
"GSUFFIX='ou=Groups'\n"
18424
"USUFFIX='ou=People'\n"
18425
"MSUFFIX='ou=Computers'\n"
18426
"GIDSTART=10000\n"
18427
"UIDSTART=10000\n"
18428
"MIDSTART=10000\n"
18429
msgstr ""
18430
"\n"
18431
"SERVER=localhost\n"
18432
"BINDDN='cn=admin,dc=example,dc=com'\n"
18433
"BINDPWDFILE=\"/etc/ldapscripts/ldapscripts.passwd\"\n"
18434
"SUFFIX='dc=example,dc=com'\n"
18435
"GSUFFIX='ou=Groups'\n"
18436
"USUFFIX='ou=People'\n"
18437
"MSUFFIX='ou=Computers'\n"
18438
"GIDSTART=10000\n"
18439
"UIDSTART=10000\n"
18440
"MIDSTART=10000\n"
18441
18442
#: serverguide/C/network-auth.xml:1351(para)
18443
msgid ""
18444
"Now, create the <filename>ldapscripts.passwd</filename> file to allow "
18445
"authenticated access to the directory:"
18446
msgstr ""
18447
"Now, create the <filename>ldapscripts.passwd</filename> file to allow "
18448
"authenticated access to the directory:"
18449
18450
#: serverguide/C/network-auth.xml:1356(command)
18451
msgid ""
18452
"sudo sh -c \"echo -n 'secret' > /etc/ldapscripts/ldapscripts.passwd\""
18453
msgstr ""
18454
"sudo sh -c \"echo -n 'secret' > /etc/ldapscripts/ldapscripts.passwd\""
18455
18456
#: serverguide/C/network-auth.xml:1357(command)
18457
msgid "sudo chmod 400 /etc/ldapscripts/ldapscripts.passwd"
18458
msgstr "sudo chmod 400 /etc/ldapscripts/ldapscripts.passwd"
18459
18460
#: serverguide/C/network-auth.xml:1361(para)
18461
msgid ""
18462
"Replace <quote>secret</quote> with the actual password for your LDAP admin "
18463
"user."
18464
msgstr ""
18465
"Replace <quote>secret</quote> with the actual password for your LDAP admin "
18466
"user."
18467
18468
#: serverguide/C/network-auth.xml:1366(para)
18469
msgid ""
18470
"The <application>ldapscripts</application> are now ready to help manage your "
18471
"directory. The following are some examples of how to use the scripts:"
18472
msgstr ""
18473
"The <application>ldapscripts</application> are now ready to help manage your "
18474
"directory. The following are some examples of how to use the scripts:"
18475
18476
#: serverguide/C/network-auth.xml:1373(para)
18477
msgid "Create a new user:"
18478
msgstr "Create a new user:"
18479
18480
#: serverguide/C/network-auth.xml:1377(command)
18481
msgid "sudo ldapadduser george example"
18482
msgstr "sudo ldapadduser george example"
18483
18484
#: serverguide/C/network-auth.xml:1379(para)
18485
msgid ""
18486
"This will create a user with uid <emphasis role=\"italic\">george</emphasis> "
18487
"and set the user's primary group (gid) to <emphasis "
18488
"role=\"italic\">example</emphasis>"
18489
msgstr ""
18490
"This will create a user with uid <emphasis role=\"italic\">george</emphasis> "
18491
"and set the user's primary group (gid) to <emphasis "
18492
"role=\"italic\">example</emphasis>"
18493
18494
#: serverguide/C/network-auth.xml:1385(para)
18495
msgid "Change a user's password:"
18496
msgstr "Change a user's password:"
18497
18498
#: serverguide/C/network-auth.xml:1389(command)
18499
msgid "sudo ldapsetpasswd george"
18500
msgstr "sudo ldapsetpasswd george"
18501
18502
#: serverguide/C/network-auth.xml:1390(computeroutput)
18503
#, no-wrap
18504
msgid "Changing password for user uid=george,ou=People,dc=example,dc=com"
18505
msgstr "Changing password for user uid=george,ou=People,dc=example,dc=com"
18506
18507
#: serverguide/C/network-auth.xml:1391(userinput)
18508
#, no-wrap
18509
msgid "New Password: "
18510
msgstr "New Password: "
18511
18512
#: serverguide/C/network-auth.xml:1392(userinput)
18513
#, no-wrap
18514
msgid "New Password (verify): "
18515
msgstr "New Password (verify): "
18516
18517
#: serverguide/C/network-auth.xml:1396(para)
18518
msgid "Delete a user:"
18519
msgstr "Delete a user:"
18520
18521
#: serverguide/C/network-auth.xml:1400(command)
18522
msgid "sudo ldapdeleteuser george"
18523
msgstr "sudo ldapdeleteuser george"
18524
18525
#: serverguide/C/network-auth.xml:1405(para)
18526
msgid "Add a group:"
18527
msgstr "Add a group:"
18528
18529
#: serverguide/C/network-auth.xml:1409(command)
18530
msgid "sudo ldapaddgroup qa"
18531
msgstr "sudo ldapaddgroup qa"
18532
18533
#: serverguide/C/network-auth.xml:1413(para)
18534
msgid "Delete a group:"
18535
msgstr "Delete a group:"
18536
18537
#: serverguide/C/network-auth.xml:1417(command)
18538
msgid "sudo ldapdeletegroup qa"
18539
msgstr "sudo ldapdeletegroup qa"
18540
18541
#: serverguide/C/network-auth.xml:1421(para)
18542
msgid "Add a user to a group:"
18543
msgstr "Add a user to a group:"
18544
18545
#: serverguide/C/network-auth.xml:1425(command)
18546
msgid "sudo ldapaddusertogroup george qa"
18547
msgstr "sudo ldapaddusertogroup george qa"
18548
18549
#: serverguide/C/network-auth.xml:1427(para)
18550
msgid ""
18551
"You should now see a <emphasis>memberUid</emphasis> attribute for the "
18552
"<emphasis role=\"italic\">qa</emphasis> group with a value of <emphasis "
18553
"role=\"italic\">george</emphasis>."
18554
msgstr ""
18555
"You should now see a <emphasis>memberUid</emphasis> attribute for the "
18556
"<emphasis role=\"italic\">qa</emphasis> group with a value of <emphasis "
18557
"role=\"italic\">george</emphasis>."
18558
18559
#: serverguide/C/network-auth.xml:1433(para)
18560
msgid "Remove a user from a group:"
18561
msgstr "Remove a user from a group:"
18562
18563
#: serverguide/C/network-auth.xml:1437(command)
18564
msgid "sudo ldapdeleteuserfromgroup george qa"
18565
msgstr "sudo ldapdeleteuserfromgroup george qa"
18566
18567
#: serverguide/C/network-auth.xml:1439(para)
18568
msgid ""
18569
"The <emphasis>memberUid</emphasis> attribute should now be removed from the "
18570
"<emphasis role=\"italic\">qa</emphasis> group."
18571
msgstr ""
18572
"The <emphasis>memberUid</emphasis> attribute should now be removed from the "
18573
"<emphasis role=\"italic\">qa</emphasis> group."
18574
18575
#: serverguide/C/network-auth.xml:1445(para)
18576
msgid ""
18577
"The <application>ldapmodifyuser</application> script allows you to add, "
18578
"remove, or replace a user's attributes. The script uses the same syntax as "
18579
"the <application>ldapmodify</application> utility. For example:"
18580
msgstr ""
18581
"The <application>ldapmodifyuser</application> script allows you to add, "
18582
"remove, or replace a user's attributes. The script uses the same syntax as "
18583
"the <application>ldapmodify</application> utility. For example:"
18584
18585
#: serverguide/C/network-auth.xml:1450(command)
18586
msgid "sudo ldapmodifyuser george"
18587
msgstr "sudo ldapmodifyuser george"
18588
18589
#: serverguide/C/network-auth.xml:1451(computeroutput)
18590
#, no-wrap
18591
msgid ""
18592
"# About to modify the following entry :\n"
18593
"dn: uid=george,ou=People,dc=example,dc=com\n"
18594
"objectClass: account\n"
18595
"objectClass: posixAccount\n"
18596
"cn: george\n"
18597
"uid: george\n"
18598
"uidNumber: 1001\n"
18599
"gidNumber: 1001\n"
18600
"homeDirectory: /home/george\n"
18601
"loginShell: /bin/bash\n"
18602
"gecos: george\n"
18603
"description: User account\n"
18604
"userPassword:: e1NTSEF9eXFsTFcyWlhwWkF1eGUybVdFWHZKRzJVMjFTSG9vcHk=\n"
18605
"\n"
18606
"# Enter your modifications here, end with CTRL-D.\n"
18607
"dn: uid=george,ou=People,dc=example,dc=com"
18608
msgstr ""
18609
"# About to modify the following entry :\n"
18610
"dn: uid=george,ou=People,dc=example,dc=com\n"
18611
"objectClass: account\n"
18612
"objectClass: posixAccount\n"
18613
"cn: george\n"
18614
"uid: george\n"
18615
"uidNumber: 1001\n"
18616
"gidNumber: 1001\n"
18617
"homeDirectory: /home/george\n"
18618
"loginShell: /bin/bash\n"
18619
"gecos: george\n"
18620
"description: User account\n"
18621
"userPassword:: e1NTSEF9eXFsTFcyWlhwWkF1eGUybVdFWHZKRzJVMjFTSG9vcHk=\n"
18622
"\n"
18623
"# Enter your modifications here, end with CTRL-D.\n"
18624
"dn: uid=george,ou=People,dc=example,dc=com"
18625
18626
#: serverguide/C/network-auth.xml:1467(userinput)
18627
#, no-wrap
18628
msgid ""
18629
"replace: gecos\n"
18630
"gecos: George Carlin"
18631
msgstr ""
18632
"replace: gecos\n"
18633
"gecos: George Carlin"
18634
18635
#: serverguide/C/network-auth.xml:1470(para)
18636
msgid ""
18637
"The user's <emphasis>gecos</emphasis> should now be <quote>George "
18638
"Carlin</quote>."
18639
msgstr ""
18640
"The user's <emphasis>gecos</emphasis> should now be <quote>George "
18641
"Carlin</quote>."
18642
18643
#: serverguide/C/network-auth.xml:1475(para)
18644
msgid ""
18645
"Another great feature of <application>ldapscripts</application>, is the "
18646
"template system. Templates allow you to customize the attributes of user, "
18647
"group, and machine objectes. For example, to enable the "
18648
"<emphasis>user</emphasis> template edit "
18649
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> changing:"
18650
msgstr ""
18651
"Another great feature of <application>ldapscripts</application>, is the "
18652
"template system. Templates allow you to customise the attributes of user, "
18653
"group, and machine objectes. For example, to enable the "
18654
"<emphasis>user</emphasis> template edit "
18655
"<filename>/etc/ldapscripts/ldapscripts.conf</filename> changing:"
18656
18657
#: serverguide/C/network-auth.xml:1482(programlisting)
18658
#, no-wrap
18659
msgid ""
18660
"\n"
18661
"UTEMPLATE=\"/etc/ldapscripts/ldapadduser.template\"\n"
18662
msgstr ""
18663
"\n"
18664
"UTEMPLATE=\"/etc/ldapscripts/ldapadduser.template\"\n"
18665
18666
#: serverguide/C/network-auth.xml:1486(para)
18667
msgid ""
18668
"There are <emphasis role=\"italic\">sample</emphasis> templates in the "
18669
"<filename>/etc/ldapscripts</filename> directory. Copy or rename the "
18670
"<filename>ldapadduser.template.sample</filename> file to "
18671
"<filename>/etc/ldapscripts/ldapadduser.template</filename>:"
18672
msgstr ""
18673
"There are <emphasis role=\"italic\">sample</emphasis> templates in the "
18674
"<filename>/etc/ldapscripts</filename> directory. Copy or rename the "
18675
"<filename>ldapadduser.template.sample</filename> file to "
18676
"<filename>/etc/ldapscripts/ldapadduser.template</filename>:"
18677
18678
#: serverguide/C/network-auth.xml:1493(command)
18679
msgid ""
18680
"sudo cp /etc/ldapscripts/ldapadduser.template.sample "
18681
"/etc/ldapscripts/ldapadduser.template"
18682
msgstr ""
18683
"sudo cp /etc/ldapscripts/ldapadduser.template.sample "
18684
"/etc/ldapscripts/ldapadduser.template"
18685
18686
#: serverguide/C/network-auth.xml:1496(para)
18687
msgid ""
18688
"Edit the new template to add the desired attributes. The following will "
18689
"create new user's as with an <emphasis>objectClass</emphasis> of "
18690
"<emphasis>inetOrgPerson</emphasis>:"
18691
msgstr ""
18692
"Edit the new template to add the desired attributes. The following will "
18693
"create new user's as with an <emphasis>objectClass</emphasis> of "
18694
"<emphasis>inetOrgPerson</emphasis>:"
18695
18696
#: serverguide/C/network-auth.xml:1501(programlisting)
18697
#, no-wrap
18698
msgid ""
18699
"\n"
18700
"dn: uid=<user>,<usuffix>,<suffix>\n"
18701
"objectClass: inetOrgPerson\n"
18702
"objectClass: posixAccount\n"
18703
"cn: <user>\n"
18704
"sn: <ask>\n"
18705
"uid: <user>\n"
18706
"uidNumber: <uid>\n"
18707
"gidNumber: <gid>\n"
18708
"homeDirectory: <home>\n"
18709
"loginShell: <shell>\n"
18710
"gecos: <user>\n"
18711
"description: User account\n"
18712
"title: Employee\n"
18713
msgstr ""
18714
"\n"
18715
"dn: uid=<user>,<usuffix>,<suffix>\n"
18716
"objectClass: inetOrgPerson\n"
18717
"objectClass: posixAccount\n"
18718
"cn: <user>\n"
18719
"sn: <ask>\n"
18720
"uid: <user>\n"
18721
"uidNumber: <uid>\n"
18722
"gidNumber: <gid>\n"
18723
"homeDirectory: <home>\n"
18724
"loginShell: <shell>\n"
18725
"gecos: <user>\n"
18726
"description: User account\n"
18727
"title: Employee\n"
18728
18729
#: serverguide/C/network-auth.xml:1517(para)
18730
msgid ""
18731
"Notice the <emphasis><ask></emphasis> option used for the "
18732
"<emphasis>cn</emphasis> value. Using <ask> will configure "
18733
"<application>ldapadduser</application> to prompt you for the attribute value "
18734
"during user creation."
18735
msgstr ""
18736
"Notice the <emphasis><ask></emphasis> option used for the "
18737
"<emphasis>cn</emphasis> value. Using <ask> will configure "
18738
"<application>ldapadduser</application> to prompt you for the attribute value "
18739
"during user creation."
18740
18741
#: serverguide/C/network-auth.xml:1525(para)
18742
msgid ""
18743
"There are more useful scripts in the package, to see a full list enter: "
18744
"<command>dpkg -L ldapscripts | grep bin</command>"
18745
msgstr ""
18746
"There are more useful scripts in the package, to see a full list enter: "
18747
"<command>dpkg -L ldapscripts | grep bin</command>"
18748
18749
#: serverguide/C/network-auth.xml:1534(para)
18750
msgid ""
18751
"The <ulink url=\"https://help.ubuntu.com/community/OpenLDAPServer\">OpenLDAP "
18752
"Ubuntu Wiki</ulink> page has more details."
18753
msgstr ""
18754
18755
#: serverguide/C/network-auth.xml:1539(para)
18756
msgid ""
18757
"For more information see <ulink url=\"http://www.openldap.org/\">OpenLDAP "
18758
"Home Page</ulink>"
18759
msgstr ""
18760
"For more information see <ulink url=\"http://www.openldap.org/\">OpenLDAP "
18761
"Home Page</ulink>"
18762
18763
#: serverguide/C/network-auth.xml:1544(para)
18764
msgid ""
18765
"Though starting to show it's age, a great source for in depth LDAP "
18766
"information is O'Reilly's <ulink "
18767
"url=\"http://www.oreilly.com/catalog/ldapsa/\">LDAP System "
18768
"Administration</ulink>"
18769
msgstr ""
18770
"Though starting to show it's age, a great source for in depth LDAP "
18771
"information is O'Reilly's <ulink "
18772
"url=\"http://www.oreilly.com/catalog/ldapsa/\">LDAP System "
18773
"Administration</ulink>"
18774
18775
#: serverguide/C/network-auth.xml:1550(para)
18776
msgid ""
18777
"Packt's <ulink url=\"http://www.packtpub.com/OpenLDAP-Developers-Server-Open-"
18778
"Source-Linux/book\">Mastering OpenLDAP</ulink> is a great reference covering "
18779
"newer versions of OpenLDAP."
18780
msgstr ""
18781
"Packt's <ulink url=\"http://www.packtpub.com/OpenLDAP-Developers-Server-Open-"
18782
"Source-Linux/book\">Mastering OpenLDAP</ulink> is a great reference covering "
18783
"newer versions of OpenLDAP."
18784
18785
#: serverguide/C/network-auth.xml:1556(para)
18786
msgid ""
18787
"For more information on <application>auth-client-config</application> see "
18788
"the man page: <command>man auth-client-config</command>."
18789
msgstr ""
18790
"For more information on <application>auth-client-config</application> see "
18791
"the man page: <command>man auth-client-config</command>."
18792
18793
#: serverguide/C/network-auth.xml:1561(para)
18794
msgid ""
18795
"For more details regarding the <application>ldapscripts</application> "
18796
"package see the man pages: <command>man ldapscripts</command>, <command>man "
18797
"ldapadduser</command>, <command>man ldapaddgroup</command>, etc."
18798
msgstr ""
18799
"For more details regarding the <application>ldapscripts</application> "
18800
"package see the man pages: <command>man ldapscripts</command>, <command>man "
18801
"ldapadduser</command>, <command>man ldapaddgroup</command>, etc."
18802
18803
#: serverguide/C/network-auth.xml:1571(title)
18804
msgid "Samba and LDAP"
18805
msgstr "Samba and LDAP"
18806
18807
#: serverguide/C/network-auth.xml:1573(para)
18808
msgid ""
18809
"This section covers configuring Samba to use LDAP for user, group, and "
18810
"machine account information and authentication. The assumption is, you "
18811
"already have a working OpenLDAP directory installed and the server is "
18812
"configured to use it for authentication. See <xref linkend=\"openldap-"
18813
"server\"/> and <xref linkend=\"openldap-auth-config\"/> for details on "
18814
"setting up OpenLDAP. For more information on installing and configuring "
18815
"Samba see <xref linkend=\"windows-networking\"/>."
18816
msgstr ""
18817
"This section covers configuring Samba to use LDAP for user, group, and "
18818
"machine account information and authentication. The assumption is, you "
18819
"already have a working OpenLDAP directory installed and the server is "
18820
"configured to use it for authentication. See <xref linkend=\"openldap-"
18821
"server\"/> and <xref linkend=\"openldap-auth-config\"/> for details on "
18822
"setting up OpenLDAP. For more information on installing and configuring "
18823
"Samba see <xref linkend=\"windows-networking\"/>."
18824
18825
#: serverguide/C/network-auth.xml:1583(para)
18826
msgid ""
18827
"There are three packages needed when integrating Samba with LDAP. "
18828
"<application>samba</application>, <application>samba-doc</application>, and "
18829
"<application>smbldap-tools</application> packages . To install the packages, "
18830
"from a terminal enter:"
18831
msgstr ""
18832
"There are three packages needed when integrating Samba with LDAP. "
18833
"<application>samba</application>, <application>samba-doc</application>, and "
18834
"<application>smbldap-tools</application> packages . To install the packages, "
18835
"from a terminal enter:"
18836
18837
#: serverguide/C/network-auth.xml:1589(command)
18838
msgid "sudo apt-get install samba samba-doc smbldap-tools"
18839
msgstr "sudo apt-get install samba samba-doc smbldap-tools"
18840
18841
#: serverguide/C/network-auth.xml:1592(para)
18842
msgid ""
18843
"Strictly speaking the <application>smbldap-tools</application> package isn't "
18844
"needed, but unless you have another package or custom scripts, a method of "
18845
"managing users, groups, and computer accounts is needed."
18846
msgstr ""
18847
"Strictly speaking the <application>smbldap-tools</application> package isn't "
18848
"needed, but unless you have another package or custom scripts, a method of "
18849
"managing users, groups, and computer accounts is needed."
18850
18851
#: serverguide/C/network-auth.xml:1599(title)
18852
msgid "OpenLDAP Configuration"
18853
msgstr "OpenLDAP Configuration"
18854
18855
#: serverguide/C/network-auth.xml:1601(para)
18856
msgid ""
18857
"In order for Samba to use OpenLDAP as a <emphasis>passdb backend</emphasis>, "
18858
"the user objects in the directory will need additional attributes. This "
18859
"section assumes you want Samba to be configured as a Windows NT domain "
18860
"controller, and will add the necessary LDAP objects and attributes."
18861
msgstr ""
18862
"In order for Samba to use OpenLDAP as a <emphasis>passdb backend</emphasis>, "
18863
"the user objects in the directory will need additional attributes. This "
18864
"section assumes you want Samba to be configured as a Windows NT domain "
18865
"controller, and will add the necessary LDAP objects and attributes."
18866
18867
#: serverguide/C/network-auth.xml:1609(para)
18868
msgid ""
18869
"The Samba attributes are defined in the <filename>samba.schema</filename> "
18870
"file which is part of the <application>samba-doc</application> package. The "
18871
"schema file needs to be unzipped and copied to "
18872
"<filename>/etc/ldap/schema</filename>. From a terminal prompt enter:"
18873
msgstr ""
18874
"The Samba attributes are defined in the <filename>samba.schema</filename> "
18875
"file which is part of the <application>samba-doc</application> package. The "
18876
"schema file needs to be unzipped and copied to "
18877
"<filename>/etc/ldap/schema</filename>. From a terminal prompt enter:"
18878
18879
#: serverguide/C/network-auth.xml:1616(command)
18880
msgid ""
18881
"sudo cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz "
18882
"/etc/ldap/schema/"
18883
msgstr ""
18884
"sudo cp /usr/share/doc/samba-doc/examples/LDAP/samba.schema.gz "
18885
"/etc/ldap/schema/"
18886
18887
#: serverguide/C/network-auth.xml:1617(command)
18888
msgid "sudo gzip -d /etc/ldap/schema/samba.schema.gz"
18889
msgstr "sudo gzip -d /etc/ldap/schema/samba.schema.gz"
18890
18891
#: serverguide/C/network-auth.xml:1623(para)
18892
msgid ""
18893
"The <emphasis>samba</emphasis> schema needs to be added to the "
18894
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
18895
"<application>slapd</application> is also detailed in <xref "
18896
"linkend=\"openldap-configuration\"/>."
18897
msgstr ""
18898
"The <emphasis>samba</emphasis> schema needs to be added to the "
18899
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
18900
"<application>slapd</application> is also detailed in <xref "
18901
"linkend=\"openldap-configuration\"/>."
18902
18903
#: serverguide/C/network-auth.xml:1631(para) serverguide/C/network-auth.xml:2666(para)
18904
msgid ""
18905
"First, create a configuration file named "
18906
"<filename>schema_convert.conf</filename>, or a similar descriptive name, "
18907
"containing the following lines:"
18908
msgstr ""
18909
"First, create a configuration file named "
18910
"<filename>schema_convert.conf</filename>, or a similar descriptive name, "
18911
"containing the following lines:"
18912
18913
#: serverguide/C/network-auth.xml:1636(programlisting)
18914
#, no-wrap
18915
msgid ""
18916
"\n"
18917
"include /etc/ldap/schema/core.schema\n"
18918
"include /etc/ldap/schema/collective.schema\n"
18919
"include /etc/ldap/schema/corba.schema\n"
18920
"include /etc/ldap/schema/cosine.schema\n"
18921
"include /etc/ldap/schema/duaconf.schema\n"
18922
"include /etc/ldap/schema/dyngroup.schema\n"
18923
"include /etc/ldap/schema/inetorgperson.schema\n"
18924
"include /etc/ldap/schema/java.schema\n"
18925
"include /etc/ldap/schema/misc.schema\n"
18926
"include /etc/ldap/schema/nis.schema\n"
18927
"include /etc/ldap/schema/openldap.schema\n"
18928
"include /etc/ldap/schema/ppolicy.schema\n"
18929
"include /etc/ldap/schema/samba.schema\n"
18930
msgstr ""
18931
"\n"
18932
"include /etc/ldap/schema/core.schema\n"
18933
"include /etc/ldap/schema/collective.schema\n"
18934
"include /etc/ldap/schema/corba.schema\n"
18935
"include /etc/ldap/schema/cosine.schema\n"
18936
"include /etc/ldap/schema/duaconf.schema\n"
18937
"include /etc/ldap/schema/dyngroup.schema\n"
18938
"include /etc/ldap/schema/inetorgperson.schema\n"
18939
"include /etc/ldap/schema/java.schema\n"
18940
"include /etc/ldap/schema/misc.schema\n"
18941
"include /etc/ldap/schema/nis.schema\n"
18942
"include /etc/ldap/schema/openldap.schema\n"
18943
"include /etc/ldap/schema/ppolicy.schema\n"
18944
"include /etc/ldap/schema/samba.schema\n"
18945
18946
#: serverguide/C/network-auth.xml:1666(para) serverguide/C/network-auth.xml:2701(para)
18947
msgid ""
18948
"Now use <application>slapcat</application> to convert the schema files:"
18949
msgstr ""
18950
"Now use <application>slapcat</application> to convert the schema files:"
18951
18952
#: serverguide/C/network-auth.xml:1671(command)
18953
msgid ""
18954
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
18955
"\"cn={12}samba,cn=schema,cn=config\" > /tmp/cn=samba.ldif"
18956
msgstr ""
18957
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
18958
"\"cn={12}samba,cn=schema,cn=config\" > /tmp/cn=samba.ldif"
18959
18960
#: serverguide/C/network-auth.xml:1674(para) serverguide/C/network-auth.xml:2709(para)
18961
msgid ""
18962
"Change the above file and path names to match your own if they are different."
18963
msgstr ""
18964
"Change the above file and path names to match your own if they are different."
18965
18966
#: serverguide/C/network-auth.xml:1681(para)
18967
msgid ""
18968
"Edit the generated <filename>/tmp/cn\\=samba.ldif</filename> file, changing "
18969
"the following attributes:"
18970
msgstr ""
18971
"Edit the generated <filename>/tmp/cn\\=samba.ldif</filename> file, changing "
18972
"the following attributes:"
18973
18974
#: serverguide/C/network-auth.xml:1685(programlisting)
18975
#, no-wrap
18976
msgid ""
18977
"\n"
18978
"dn: cn=samba,cn=schema,cn=config\n"
18979
"...\n"
18980
"cn: samba\n"
18981
msgstr ""
18982
"\n"
18983
"dn: cn=samba,cn=schema,cn=config\n"
18984
"...\n"
18985
"cn: samba\n"
18986
18987
#: serverguide/C/network-auth.xml:1695(programlisting)
18988
#, no-wrap
18989
msgid ""
18990
"\n"
18991
"structuralObjectClass: olcSchemaConfig\n"
18992
"entryUUID: b53b75ca-083f-102d-9fff-2f64fd123c95\n"
18993
"creatorsName: cn=config\n"
18994
"createTimestamp: 20080827045234Z\n"
18995
"entryCSN: 20080827045234.341425Z#000000#000#000000\n"
18996
"modifiersName: cn=config\n"
18997
"modifyTimestamp: 20080827045234Z\n"
18998
msgstr ""
18999
"\n"
19000
"structuralObjectClass: olcSchemaConfig\n"
19001
"entryUUID: b53b75ca-083f-102d-9fff-2f64fd123c95\n"
19002
"creatorsName: cn=config\n"
19003
"createTimestamp: 20080827045234Z\n"
19004
"entryCSN: 20080827045234.341425Z#000000#000#000000\n"
19005
"modifiersName: cn=config\n"
19006
"modifyTimestamp: 20080827045234Z\n"
19007
19008
#: serverguide/C/network-auth.xml:1720(command)
19009
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=samba.ldif"
19010
msgstr "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=samba.ldif"
19011
19012
#: serverguide/C/network-auth.xml:1726(para)
19013
msgid ""
19014
"There should now be a <emphasis>dn: "
19015
"cn={X}misc,cn=schema,cn=config</emphasis>, where \"X\" is the next "
19016
"sequential schema, entry in the cn=config tree."
19017
msgstr ""
19018
"There should now be a <emphasis>dn: "
19019
"cn={X}misc,cn=schema,cn=config</emphasis>, where \"X\" is the next "
19020
"sequential schema, entry in the cn=config tree."
19021
19022
#: serverguide/C/network-auth.xml:1734(para)
19023
msgid ""
19024
"Copy and paste the following into a file named "
19025
"<filename>samba_indexes.ldif</filename>:"
19026
msgstr ""
19027
"Copy and paste the following into a file named "
19028
"<filename>samba_indexes.ldif</filename>:"
19029
19030
#: serverguide/C/network-auth.xml:1738(programlisting)
19031
#, no-wrap
19032
msgid ""
19033
"\n"
19034
"dn: olcDatabase={1}hdb,cn=config\n"
19035
"changetype: modify\n"
19036
"add: olcDbIndex\n"
19037
"olcDbIndex: uidNumber eq\n"
19038
"olcDbIndex: gidNumber eq\n"
19039
"olcDbIndex: loginShell eq\n"
19040
"olcDbIndex: uid eq,pres,sub\n"
19041
"olcDbIndex: memberUid eq,pres,sub\n"
19042
"olcDbIndex: uniqueMember eq,pres\n"
19043
"olcDbIndex: sambaSID eq\n"
19044
"olcDbIndex: sambaPrimaryGroupSID eq\n"
19045
"olcDbIndex: sambaGroupType eq\n"
19046
"olcDbIndex: sambaSIDList eq\n"
19047
"olcDbIndex: sambaDomainName eq\n"
19048
"olcDbIndex: default sub\n"
19049
msgstr ""
19050
"\n"
19051
"dn: olcDatabase={1}hdb,cn=config\n"
19052
"changetype: modify\n"
19053
"add: olcDbIndex\n"
19054
"olcDbIndex: uidNumber eq\n"
19055
"olcDbIndex: gidNumber eq\n"
19056
"olcDbIndex: loginShell eq\n"
19057
"olcDbIndex: uid eq,pres,sub\n"
19058
"olcDbIndex: memberUid eq,pres,sub\n"
19059
"olcDbIndex: uniqueMember eq,pres\n"
19060
"olcDbIndex: sambaSID eq\n"
19061
"olcDbIndex: sambaPrimaryGroupSID eq\n"
19062
"olcDbIndex: sambaGroupType eq\n"
19063
"olcDbIndex: sambaSIDList eq\n"
19064
"olcDbIndex: sambaDomainName eq\n"
19065
"olcDbIndex: default sub\n"
19066
19067
#: serverguide/C/network-auth.xml:1756(para)
19068
msgid ""
19069
"Using the <application>ldapmodify</application> utility load the new indexes:"
19070
msgstr ""
19071
"Using the <application>ldapmodify</application> utility load the new indexes:"
19072
19073
#: serverguide/C/network-auth.xml:1761(command)
19074
msgid "ldapmodify -x -D cn=admin,cn=config -W -f samba_indexes.ldif"
19075
msgstr "ldapmodify -x -D cn=admin,cn=config -W -f samba_indexes.ldif"
19076
19077
#: serverguide/C/network-auth.xml:1763(para)
19078
msgid ""
19079
"If all went well you should see the new indexes using "
19080
"<application>ldapsearch</application>:"
19081
msgstr ""
19082
"If all went well you should see the new indexes using "
19083
"<application>ldapsearch</application>:"
19084
19085
#: serverguide/C/network-auth.xml:1768(command)
19086
msgid ""
19087
"ldapsearch -xLLL -D cn=admin,cn=config -x -b cn=config -W olcDatabase={1}hdb"
19088
msgstr ""
19089
"ldapsearch -xLLL -D cn=admin,cn=config -x -b cn=config -W olcDatabase={1}hdb"
19090
19091
#: serverguide/C/network-auth.xml:1774(para)
19092
msgid ""
19093
"Next, configure the <application>smbldap-tools</application> package to "
19094
"match your environment. The package comes with a configuration script that "
19095
"will ask questions about the needed options. To run the script enter:"
19096
msgstr ""
19097
"Next, configure the <application>smbldap-tools</application> package to "
19098
"match your environment. The package comes with a configuration script that "
19099
"will ask questions about the needed options. To run the script enter:"
19100
19101
#: serverguide/C/network-auth.xml:1780(command)
19102
msgid "sudo gzip -d /usr/share/doc/smbldap-tools/configure.pl.gz"
19103
msgstr "sudo gzip -d /usr/share/doc/smbldap-tools/configure.pl.gz"
19104
19105
#: serverguide/C/network-auth.xml:1781(command)
19106
msgid "sudo perl /usr/share/doc/smbldap-tools/configure.pl"
19107
msgstr "sudo perl /usr/share/doc/smbldap-tools/configure.pl"
19108
19109
#: serverguide/C/network-auth.xml:1784(para)
19110
msgid ""
19111
"Once you have answered the questions, there should be <filename>/etc/smbldap-"
19112
"tools/smbldap.conf</filename> and <filename>/etc/smbldap-"
19113
"tools/smbldap_bind.conf</filename> files. These files are generated by the "
19114
"configure script, so if you made any mistakes while executing the script it "
19115
"may be simpler to edit the file appropriately."
19116
msgstr ""
19117
"Once you have answered the questions, there should be <filename>/etc/smbldap-"
19118
"tools/smbldap.conf</filename> and <filename>/etc/smbldap-"
19119
"tools/smbldap_bind.conf</filename> files. These files are generated by the "
19120
"configure script, so if you made any mistakes while executing the script it "
19121
"may be simpler to edit the file appropriately."
19122
19123
#: serverguide/C/network-auth.xml:1794(para)
19124
msgid ""
19125
"The <application>smbldap-populate</application> script will add the "
19126
"necessary users, groups, and LDAP objects required for Samba. It is a good "
19127
"idea to make a backup LDAP Data Interchange Format (LDIF) file with "
19128
"<application>slapcat</application> before executing the command:"
19129
msgstr ""
19130
"The <application>smbldap-populate</application> script will add the "
19131
"necessary users, groups, and LDAP objects required for Samba. It is a good "
19132
"idea to make a backup LDAP Data Interchange Format (LDIF) file with "
19133
"<application>slapcat</application> before executing the command:"
19134
19135
#: serverguide/C/network-auth.xml:1801(command)
19136
msgid "sudo slapcat -l backup.ldif"
19137
msgstr "sudo slapcat -l backup.ldif"
19138
19139
#: serverguide/C/network-auth.xml:1807(para)
19140
msgid ""
19141
"Once you have a current backup execute <application>smbldap-"
19142
"populate</application> by entering:"
19143
msgstr ""
19144
"Once you have a current backup execute <application>smbldap-"
19145
"populate</application> by entering:"
19146
19147
#: serverguide/C/network-auth.xml:1812(command)
19148
msgid "sudo smbldap-populate"
19149
msgstr "sudo smbldap-populate"
19150
19151
#: serverguide/C/network-auth.xml:1816(para)
19152
msgid ""
19153
"You can create an LDIF file containing the new Samba objects by executing "
19154
"<command>sudo smbldap-populate -e samba.ldif</command>. This allows you to "
19155
"look over the changes making sure everything is correct."
19156
msgstr ""
19157
"You can create an LDIF file containing the new Samba objects by executing "
19158
"<command>sudo smbldap-populate -e samba.ldif</command>. This allows you to "
19159
"look over the changes making sure everything is correct."
19160
19161
#: serverguide/C/network-auth.xml:1824(para)
19162
msgid ""
19163
"Your LDAP directory now has the necessary domain information to authenticate "
19164
"Samba users."
19165
msgstr ""
19166
"Your LDAP directory now has the necessary domain information to authenticate "
19167
"Samba users."
19168
19169
#: serverguide/C/network-auth.xml:1830(title)
19170
msgid "Samba Configuration"
19171
msgstr "Samba Configuration"
19172
19173
#: serverguide/C/network-auth.xml:1832(para)
19174
msgid ""
19175
"There a multiple ways to configure Samba for details on some common "
19176
"configurations see <xref linkend=\"windows-networking\"/>. To configure "
19177
"Samba to use LDAP, edit the main Samba configuration file "
19178
"<filename>/etc/samba/smb.conf</filename> commenting the <emphasis>passdb "
19179
"backend</emphasis> option and adding the following:"
19180
msgstr ""
19181
"There a multiple ways to configure Samba for details on some common "
19182
"configurations see <xref linkend=\"windows-networking\"/>. To configure "
19183
"Samba to use LDAP, edit the main Samba configuration file "
19184
"<filename>/etc/samba/smb.conf</filename> commenting the <emphasis>passdb "
19185
"backend</emphasis> option and adding the following:"
19186
19187
#: serverguide/C/network-auth.xml:1838(programlisting)
19188
#, no-wrap
19189
msgid ""
19190
"\n"
19191
"# passdb backend = tdbsam\n"
19192
"\n"
19193
"# LDAP Settings\n"
19194
" passdb backend = ldapsam:ldap://hostname\n"
19195
" ldap suffix = dc=example,dc=com\n"
19196
" ldap user suffix = ou=People\n"
19197
" ldap group suffix = ou=Groups\n"
19198
" ldap machine suffix = ou=Computers\n"
19199
" ldap idmap suffix = ou=Idmap\n"
19200
" ldap admin dn = cn=admin,dc=example,dc=com\n"
19201
" ldap ssl = start tls\n"
19202
" ldap passwd sync = yes\n"
19203
"...\n"
19204
" add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w \"%u\"\n"
19205
msgstr ""
19206
"\n"
19207
"# passdb backend = tdbsam\n"
19208
"\n"
19209
"# LDAP Settings\n"
19210
" passdb backend = ldapsam:ldap://hostname\n"
19211
" ldap suffix = dc=example,dc=com\n"
19212
" ldap user suffix = ou=People\n"
19213
" ldap group suffix = ou=Groups\n"
19214
" ldap machine suffix = ou=Computers\n"
19215
" ldap idmap suffix = ou=Idmap\n"
19216
" ldap admin dn = cn=admin,dc=example,dc=com\n"
19217
" ldap ssl = start tls\n"
19218
" ldap passwd sync = yes\n"
19219
"...\n"
19220
" add machine script = sudo /usr/sbin/smbldap-useradd -t 0 -w \"%u\"\n"
19221
19222
#: serverguide/C/network-auth.xml:1855(para)
19223
msgid "Restart <application>samba</application> to enable the new settings:"
19224
msgstr "Restart <application>samba</application> to enable the new settings:"
19225
19226
#: serverguide/C/network-auth.xml:1863(para)
19227
msgid ""
19228
"Now Samba needs to know the LDAP admin password. From a terminal prompt "
19229
"enter:"
19230
msgstr ""
19231
"Now Samba needs to know the LDAP admin password. From a terminal prompt "
19232
"enter:"
19233
19234
#: serverguide/C/network-auth.xml:1868(command)
19235
msgid "sudo smbpasswd -w secret"
19236
msgstr "sudo smbpasswd -w secret"
19237
19238
#: serverguide/C/network-auth.xml:1872(para)
19239
msgid ""
19240
"Replacing <emphasis role=\"italic\">secret</emphasis> with your LDAP admin "
19241
"password."
19242
msgstr ""
19243
"Replacing <emphasis role=\"italic\">secret</emphasis> with your LDAP admin "
19244
"password."
19245
19246
#: serverguide/C/network-auth.xml:1877(para)
19247
msgid ""
19248
"If you currently have users in LDAP, and you want them to authenticate using "
19249
"Samba, they will need some Samba attributes defined in the "
19250
"<filename>samba.schema</filename> file. Add the Samba attributes to existing "
19251
"users using the <application>smbpasswd</application> utility, replacing "
19252
"<emphasis role=\"italic\">username</emphasis> with an actual user:"
19253
msgstr ""
19254
"If you currently have users in LDAP, and you want them to authenticate using "
19255
"Samba, they will need some Samba attributes defined in the "
19256
"<filename>samba.schema</filename> file. Add the Samba attributes to existing "
19257
"users using the <application>smbpasswd</application> utility, replacing "
19258
"<emphasis role=\"italic\">username</emphasis> with an actual user:"
19259
19260
#: serverguide/C/network-auth.xml:1885(command)
19261
msgid "sudo smbpasswd -a username"
19262
msgstr "sudo smbpasswd -a username"
19263
19264
#: serverguide/C/network-auth.xml:1888(para)
19265
msgid "You will then be asked to enter the user's password."
19266
msgstr "You will then be asked to enter the user's password."
19267
19268
#: serverguide/C/network-auth.xml:1892(para)
19269
msgid ""
19270
"To add new user, group, and machine accounts use the utilities from the "
19271
"<application>smbldap-tools</application> package. Here are some examples:"
19272
msgstr ""
19273
"To add new user, group, and machine accounts use the utilities from the "
19274
"<application>smbldap-tools</application> package. Here are some examples:"
19275
19276
#: serverguide/C/network-auth.xml:1899(para)
19277
msgid ""
19278
"To add a new user to LDAP with Samba attributes enter the following, "
19279
"replacing username with an actual username:"
19280
msgstr ""
19281
"To add a new user to LDAP with Samba attributes enter the following, "
19282
"replacing username with an actual username:"
19283
19284
#: serverguide/C/network-auth.xml:1903(command)
19285
msgid "sudo smbldap-useradd -a -P username"
19286
msgstr "sudo smbldap-useradd -a -P username"
19287
19288
#: serverguide/C/network-auth.xml:1905(para)
19289
msgid ""
19290
"The <emphasis>-a</emphasis> option adds the Samba attributes, and the "
19291
"<emphasis>-P</emphasis> options calls the <application>smbldap-"
19292
"passwd</application> utility after the user is created allowing you to enter "
19293
"a password for the user."
19294
msgstr ""
19295
"The <emphasis>-a</emphasis> option adds the Samba attributes, and the "
19296
"<emphasis>-P</emphasis> options calls the <application>smbldap-"
19297
"passwd</application> utility after the user is created allowing you to enter "
19298
"a password for the user."
19299
19300
#: serverguide/C/network-auth.xml:1911(para)
19301
msgid "To remove a user from the directory enter:"
19302
msgstr "To remove a user from the directory enter:"
19303
19304
#: serverguide/C/network-auth.xml:1915(command)
19305
msgid "sudo smbldap-userdel username"
19306
msgstr "sudo smbldap-userdel username"
19307
19308
#: serverguide/C/network-auth.xml:1917(para)
19309
msgid ""
19310
"The <application>smbldap-userdel</application> utility also has a <emphasis>-"
19311
"r</emphasis> option to remove the user's home directory."
19312
msgstr ""
19313
"The <application>smbldap-userdel</application> utility also has a <emphasis>-"
19314
"r</emphasis> option to remove the user's home directory."
19315
19316
#: serverguide/C/network-auth.xml:1922(para)
19317
msgid ""
19318
"Use <application>smbldap-groupadd</application> to add a group, replacing "
19319
"groupname with an appropriate group:"
19320
msgstr ""
19321
"Use <application>smbldap-groupadd</application> to add a group, replacing "
19322
"groupname with an appropriate group:"
19323
19324
#: serverguide/C/network-auth.xml:1926(command)
19325
msgid "sudo smbldap-groupadd -a groupname"
19326
msgstr "sudo smbldap-groupadd -a groupname"
19327
19328
#: serverguide/C/network-auth.xml:1928(para)
19329
msgid ""
19330
"Similar to <application>smbldap-useradd</application>, the <emphasis>-"
19331
"a</emphasis> adds the Samba attributes."
19332
msgstr ""
19333
"Similar to <application>smbldap-useradd</application>, the <emphasis>-"
19334
"a</emphasis> adds the Samba attributes."
19335
19336
#: serverguide/C/network-auth.xml:1933(para)
19337
msgid ""
19338
"To add a user to a group use <application>smbldap-groupmod</application>:"
19339
msgstr ""
19340
"To add a user to a group use <application>smbldap-groupmod</application>:"
19341
19342
#: serverguide/C/network-auth.xml:1937(command)
19343
msgid "sudo smbldap-groupmod -m username groupname"
19344
msgstr "sudo smbldap-groupmod -m username groupname"
19345
19346
#: serverguide/C/network-auth.xml:1939(para)
19347
msgid ""
19348
"Be sure to replace <emphasis>username</emphasis> with a real user. Also, the "
19349
"<emphasis>-m</emphasis> option can add more than one user at a time by "
19350
"listing them in <emphasis>comma separated</emphasis> format."
19351
msgstr ""
19352
"Be sure to replace <emphasis>username</emphasis> with a real user. Also, the "
19353
"<emphasis>-m</emphasis> option can add more than one user at a time by "
19354
"listing them in <emphasis>comma separated</emphasis> format."
19355
19356
#: serverguide/C/network-auth.xml:1945(para)
19357
msgid ""
19358
"<application>smbldap-groupmod</application> can also be used to remove a "
19359
"user from a group:"
19360
msgstr ""
19361
"<application>smbldap-groupmod</application> can also be used to remove a "
19362
"user from a group:"
19363
19364
#: serverguide/C/network-auth.xml:1949(command)
19365
msgid "sudo smbldap-groupmod -x username groupname"
19366
msgstr "sudo smbldap-groupmod -x username groupname"
19367
19368
#: serverguide/C/network-auth.xml:1953(para)
19369
msgid ""
19370
"Additionally, the <application>smbldap-useradd</application> utility can add "
19371
"Samba machine accounts:"
19372
msgstr ""
19373
"Additionally, the <application>smbldap-useradd</application> utility can add "
19374
"Samba machine accounts:"
19375
19376
#: serverguide/C/network-auth.xml:1957(command)
19377
msgid "sudo smbldap-useradd -t 0 -w username"
19378
msgstr "sudo smbldap-useradd -t 0 -w username"
19379
19380
#: serverguide/C/network-auth.xml:1959(para)
19381
msgid ""
19382
"Replace <emphasis>username</emphasis> with the name of the workstation. The "
19383
"<emphasis>-t 0</emphasis> option creates the machine account without a "
19384
"delay, while the <emphasis>-w</emphasis> option specifies the user as a "
19385
"machine account. Also, note the <emphasis>add machine script</emphasis> "
19386
"option in <filename>/etc/samba/smb.conf</filename> was changed to use "
19387
"<application>smbldap-useradd</application>."
19388
msgstr ""
19389
"Replace <emphasis>username</emphasis> with the name of the workstation. The "
19390
"<emphasis>-t 0</emphasis> option creates the machine account without a "
19391
"delay, while the <emphasis>-w</emphasis> option specifies the user as a "
19392
"machine account. Also, note the <emphasis>add machine script</emphasis> "
19393
"option in <filename>/etc/samba/smb.conf</filename> was changed to use "
19394
"<application>smbldap-useradd</application>."
19395
19396
#: serverguide/C/network-auth.xml:1968(para)
19397
msgid ""
19398
"There are more useful utilities and options in the <application>smbldap-"
19399
"tools</application> package. The man page for each utility provides more "
19400
"details."
19401
msgstr ""
19402
"There are more useful utilities and options in the <application>smbldap-"
19403
"tools</application> package. The man page for each utility provides more "
19404
"details."
19405
19406
#: serverguide/C/network-auth.xml:1979(para)
19407
msgid ""
19408
"There are multiple places where LDAP and Samba is documented in the <ulink "
19409
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
19410
"Collection</ulink>."
19411
msgstr ""
19412
"There are multiple places where LDAP and Samba is documented in the <ulink "
19413
"url=\"http://samba.org/samba/docs/man/Samba-HOWTO-Collection/\">Samba HOWTO "
19414
"Collection</ulink>."
19415
19416
#: serverguide/C/network-auth.xml:1985(para)
19417
msgid ""
19418
"Specifically see the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
19419
"HOWTO-Collection/passdb.html\">passdb section</ulink>."
19420
msgstr ""
19421
"Specifically see the <ulink url=\"http://samba.org/samba/docs/man/Samba-"
19422
"HOWTO-Collection/passdb.html\">passdb section</ulink>."
19423
19424
#: serverguide/C/network-auth.xml:1991(para)
19425
msgid ""
19426
"Another good site is <ulink url=\"http://www.iallanis.info/smbldap-"
19427
"tools/docs/samba-ldap-howto/\">Samba OpenLDAP HOWTO</ulink>."
19428
msgstr ""
19429
"Another good site is <ulink url=\"http://www.iallanis.info/smbldap-"
19430
"tools/docs/samba-ldap-howto/\">Samba OpenLDAP HOWTO</ulink>."
19431
19432
#: serverguide/C/network-auth.xml:1997(para)
19433
msgid ""
19434
"Again, for more information on <application>smbldap-tools</application> see "
19435
"the man pages: <command>man smbldap-useradd</command>, <command>man smbldap-"
19436
"groupadd</command>, <command>man smbldap-populate</command>, etc."
19437
msgstr ""
19438
"Again, for more information on <application>smbldap-tools</application> see "
19439
"the man pages: <command>man smbldap-useradd</command>, <command>man smbldap-"
19440
"groupadd</command>, <command>man smbldap-populate</command>, etc."
19441
19442
#: serverguide/C/network-auth.xml:2004(para)
19443
msgid ""
19444
"Also, there is a list of <ulink "
19445
"url=\"https://help.ubuntu.com/community/Samba#samba-ldap\">Ubuntu "
19446
"wiki</ulink> articles with more information."
19447
msgstr ""
19448
19449
#: serverguide/C/network-auth.xml:2013(title)
19450
msgid "Kerberos"
19451
msgstr "Kerberos"
19452
19453
#: serverguide/C/network-auth.xml:2015(para)
19454
msgid ""
19455
"<application>Kerberos</application> is a network authentication system based "
19456
"on the principal of a trusted third party. The other two parties being the "
19457
"user and the service the user wishes to authenticate to. Not all services "
19458
"and applications can use Kerberos, but for those that can, it brings the "
19459
"network environment one step closer to being Single Sign On (SSO)."
19460
msgstr ""
19461
"<application>Kerberos</application> is a network authentication system based "
19462
"on the principal of a trusted third party. The other two parties being the "
19463
"user and the service the user wishes to authenticate to. Not all services "
19464
"and applications can use Kerberos, but for those that can, it brings the "
19465
"network environment one step closer to being Single Sign On (SSO)."
19466
19467
#: serverguide/C/network-auth.xml:2021(para)
19468
msgid ""
19469
"This section covers installation and configuration of a Kerberos server, and "
19470
"some example client configurations."
19471
msgstr ""
19472
"This section covers installation and configuration of a Kerberos server, and "
19473
"some example client configurations."
19474
19475
#: serverguide/C/network-auth.xml:2028(para)
19476
msgid ""
19477
"If you are new to Kerberos there are a few terms that are good to understand "
19478
"before setting up a Kerberos server. Most of the terms will relate to things "
19479
"you may be familiar with in other environments:"
19480
msgstr ""
19481
"If you are new to Kerberos there are a few terms that are good to understand "
19482
"before setting up a Kerberos server. Most of the terms will relate to things "
19483
"you may be familiar with in other environments:"
19484
19485
#: serverguide/C/network-auth.xml:2035(para)
19486
msgid ""
19487
"<emphasis>Principal:</emphasis> any users, computers, and services provided "
19488
"by servers need to be defined as Kerberos Principals."
19489
msgstr ""
19490
"<emphasis>Principal:</emphasis> any users, computers, and services provided "
19491
"by servers need to be defined as Kerberos Principals."
19492
19493
#: serverguide/C/network-auth.xml:2040(para)
19494
msgid ""
19495
"<emphasis>Instances:</emphasis> are used for service principals and special "
19496
"administrative principals."
19497
msgstr ""
19498
"<emphasis>Instances:</emphasis> are used for service principals and special "
19499
"administrative principals."
19500
19501
#: serverguide/C/network-auth.xml:2045(para)
19502
msgid ""
19503
"<emphasis>Realms:</emphasis> the unique realm of control provided by the "
19504
"Kerberos installation. Usually the DNS domain converted to uppercase "
19505
"(EXAMPLE.COM)."
19506
msgstr ""
19507
"<emphasis>Realms:</emphasis> the unique realm of control provided by the "
19508
"Kerberos installation. Usually the DNS domain converted to uppercase "
19509
"(EXAMPLE.COM)."
19510
19511
#: serverguide/C/network-auth.xml:2051(para)
19512
msgid ""
19513
"<emphasis>Key Distribution Center:</emphasis> (KDC) consist of three parts, "
19514
"a database of all principals, the authentication server, and the ticket "
19515
"granting server. For each realm there must be at least one KDC."
19516
msgstr ""
19517
"<emphasis>Key Distribution Centre:</emphasis> (KDC) consist of three parts, "
19518
"a database of all principals, the authentication server, and the ticket "
19519
"granting server. For each realm there must be at least one KDC."
19520
19521
#: serverguide/C/network-auth.xml:2057(para)
19522
msgid ""
19523
"<emphasis>Ticket Granting Ticket:</emphasis> issued by the Authentication "
19524
"Server (AS), the Ticket Granting Ticket (TGT) is encrypted in the user's "
19525
"password which is known only to the user and the KDC."
19526
msgstr ""
19527
"<emphasis>Ticket Granting Ticket:</emphasis> issued by the Authentication "
19528
"Server (AS), the Ticket Granting Ticket (TGT) is encrypted in the user's "
19529
"password which is known only to the user and the KDC."
19530
19531
#: serverguide/C/network-auth.xml:2063(para)
19532
msgid ""
19533
"<emphasis>Ticket Granting Server:</emphasis> (TGS) issues service tickets to "
19534
"clients upon request."
19535
msgstr ""
19536
"<emphasis>Ticket Granting Server:</emphasis> (TGS) issues service tickets to "
19537
"clients upon request."
19538
19539
#: serverguide/C/network-auth.xml:2068(para)
19540
msgid ""
19541
"<emphasis>Tickets:</emphasis> confirm the identity of the two principals. "
19542
"One principal being a user and the other a service requested by the user. "
19543
"Tickets establish an encryption key used for secure communication during the "
19544
"authenticated session."
19545
msgstr ""
19546
"<emphasis>Tickets:</emphasis> confirm the identity of the two principals. "
19547
"One principal being a user and the other a service requested by the user. "
19548
"Tickets establish an encryption key used for secure communication during the "
19549
"authenticated session."
19550
19551
#: serverguide/C/network-auth.xml:2074(para)
19552
msgid ""
19553
"<emphasis>Keytab Files:</emphasis> are files extracted from the KDC "
19554
"principal database and contain the encryption key for a service or host."
19555
msgstr ""
19556
"<emphasis>Keytab Files:</emphasis> are files extracted from the KDC "
19557
"principal database and contain the encryption key for a service or host."
19558
19559
#: serverguide/C/network-auth.xml:2081(para)
19560
msgid ""
19561
"To put the pieces together, a Realm has at least one KDC, preferably two for "
19562
"redundancy, which contains a database of Principals. When a user principal "
19563
"logs into a workstation, configured for Kerberos authentication, the KDC "
19564
"issues a Ticket Granting Ticket (TGT). If the user supplied credentials "
19565
"match, the user is authenticated and can then request tickets for Kerberized "
19566
"services from the Ticket Granting Server (TGS). The service tickets allow "
19567
"the user to authenticate to the service without entering another username "
19568
"and password."
19569
msgstr ""
19570
"To put the pieces together, a Realm has at least one KDC, preferably two for "
19571
"redundancy, which contains a database of Principals. When a user principal "
19572
"logs into a workstation, configured for Kerberos authentication, the KDC "
19573
"issues a Ticket Granting Ticket (TGT). If the user supplied credentials "
19574
"match, the user is authenticated and can then request tickets for Kerberised "
19575
"services from the Ticket Granting Server (TGS). The service tickets allow "
19576
"the user to authenticate to the service without entering another username "
19577
"and password."
19578
19579
#: serverguide/C/network-auth.xml:2090(title)
19580
msgid "Kerberos Server"
19581
msgstr "Kerberos Server"
19582
19583
#: serverguide/C/network-auth.xml:2094(para)
19584
msgid ""
19585
"Before installing the Kerberos server a properly configured DNS server is "
19586
"needed for your domain. Since the Kerberos Realm by convention matches the "
19587
"domain name, this section uses the <emphasis>example.com</emphasis> domain "
19588
"configured in <xref linkend=\"dns-primarymaster-configuration\"/>."
19589
msgstr ""
19590
"Before installing the Kerberos server a properly configured DNS server is "
19591
"needed for your domain. Since the Kerberos Realm by convention matches the "
19592
"domain name, this section uses the <emphasis>example.com</emphasis> domain "
19593
"configured in <xref linkend=\"dns-primarymaster-configuration\"/>."
19594
19595
#: serverguide/C/network-auth.xml:2100(para)
19596
msgid ""
19597
"Also, Kerberos is a time sensitive protocol. So if the local system time "
19598
"between a client machine and the server differs by more than five minutes "
19599
"(by default), the workstation will not be able to authenticate. To correct "
19600
"the problem all hosts should have their time synchronized using the "
19601
"<emphasis>Network Time Protocol (NTP)</emphasis>. For details on setting up "
19602
"NTP see <xref linkend=\"NTP\"/>."
19603
msgstr ""
19604
"Also, Kerberos is a time sensitive protocol. So if the local system time "
19605
"between a client machine and the server differs by more than five minutes "
19606
"(by default), the workstation will not be able to authenticate. To correct "
19607
"the problem all hosts should have their time synchronised using the "
19608
"<emphasis>Network Time Protocol (NTP)</emphasis>. For details on setting up "
19609
"NTP see <xref linkend=\"NTP\"/>."
19610
19611
#: serverguide/C/network-auth.xml:2107(para)
19612
msgid ""
19613
"The first step in installing a Kerberos Realm is to install the "
19614
"<application>krb5-kdc</application> and <application>krb5-admin-"
19615
"server</application> packages. From a terminal enter:"
19616
msgstr ""
19617
"The first step in installing a Kerberos Realm is to install the "
19618
"<application>krb5-kdc</application> and <application>krb5-admin-"
19619
"server</application> packages. From a terminal enter:"
19620
19621
#: serverguide/C/network-auth.xml:2113(command) serverguide/C/network-auth.xml:2288(command)
19622
msgid "sudo apt-get install krb5-kdc krb5-admin-server"
19623
msgstr "sudo apt-get install krb5-kdc krb5-admin-server"
19624
19625
#: serverguide/C/network-auth.xml:2116(para)
19626
msgid ""
19627
"You will be asked at the end of the install to supply a name for the "
19628
"Kerberos and Admin servers, which may or may not be the same server, for the "
19629
"realm."
19630
msgstr ""
19631
"You will be asked at the end of the install to supply a name for the "
19632
"Kerberos and Admin servers, which may or may not be the same server, for the "
19633
"realm."
19634
19635
#: serverguide/C/network-auth.xml:2121(para)
19636
msgid ""
19637
"Next, create the new realm with the <application>kdb5_newrealm</application> "
19638
"utility:"
19639
msgstr ""
19640
"Next, create the new realm with the <application>kdb5_newrealm</application> "
19641
"utility:"
19642
19643
#: serverguide/C/network-auth.xml:2126(command)
19644
msgid "sudo krb5_newrealm"
19645
msgstr "sudo krb5_newrealm"
19646
19647
#: serverguide/C/network-auth.xml:2133(para)
19648
msgid ""
19649
"The questions asked during installation are used to configure the "
19650
"<filename>/etc/krb5.conf</filename> file. If you need to adjust the Key "
19651
"Distribution Center (KDC) settings simply edit the file and restart the "
19652
"<application>krb5-kdc</application> daemon."
19653
msgstr ""
19654
"The questions asked during installation are used to configure the "
19655
"<filename>/etc/krb5.conf</filename> file. If you need to adjust the Key "
19656
"Distribution Centre (KDC) settings simply edit the file and restart the "
19657
"<application>krb5-kdc</application> daemon."
19658
19659
#: serverguide/C/network-auth.xml:2141(para)
19660
msgid ""
19661
"Now that the KDC running an admin user is needed. It is recommended to use a "
19662
"different username from your everyday username. Using the "
19663
"<application>kadmin.local</application> utility in a terminal prompt enter:"
19664
msgstr ""
19665
"Now that the KDC running an admin user is needed. It is recommended to use a "
19666
"different username from your everyday username. Using the "
19667
"<application>kadmin.local</application> utility in a terminal prompt enter:"
19668
19669
#: serverguide/C/network-auth.xml:2147(command) serverguide/C/network-auth.xml:2943(command)
19670
msgid "sudo kadmin.local"
19671
msgstr "sudo kadmin.local"
19672
19673
#: serverguide/C/network-auth.xml:2148(computeroutput)
19674
#, no-wrap
19675
msgid ""
19676
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
19677
"kadmin.local:"
19678
msgstr ""
19679
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
19680
"kadmin.local:"
19681
19682
#: serverguide/C/network-auth.xml:2149(userinput)
19683
#, no-wrap
19684
msgid " addprinc steve/admin"
19685
msgstr " addprinc steve/admin"
19686
19687
#: serverguide/C/network-auth.xml:2150(computeroutput)
19688
#, no-wrap
19689
msgid ""
19690
"WARNING: no policy specified for steve/admin@EXAMPLE.COM; defaulting to no "
19691
"policy\n"
19692
"Enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
19693
"Re-enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
19694
"Principal \"steve/admin@EXAMPLE.COM\" created.\n"
19695
"kadmin.local:"
19696
msgstr ""
19697
"WARNING: no policy specified for steve/admin@EXAMPLE.COM; defaulting to no "
19698
"policy\n"
19699
"Enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
19700
"Re-enter password for principal \"steve/admin@EXAMPLE.COM\": \n"
19701
"Principal \"steve/admin@EXAMPLE.COM\" created.\n"
19702
"kadmin.local:"
19703
19704
#: serverguide/C/network-auth.xml:2154(userinput)
19705
#, no-wrap
19706
msgid " quit"
19707
msgstr " quit"
19708
19709
#: serverguide/C/network-auth.xml:2157(para)
19710
msgid ""
19711
"In the above example <emphasis role=\"italic\">steve</emphasis> is the "
19712
"<emphasis>Principal</emphasis>, <emphasis role=\"italic\">/admin</emphasis> "
19713
"is an <emphasis>Instance</emphasis>, and <emphasis "
19714
"role=\"italic\">@EXAMPLE.COM</emphasis> signifies the realm. The <emphasis "
19715
"role=\"italic\">\"every day\"</emphasis> Principal would be "
19716
"<emphasis>steve@EXAMPLE.COM</emphasis>, and should have only normal user "
19717
"rights."
19718
msgstr ""
19719
"In the above example <emphasis role=\"italic\">steve</emphasis> is the "
19720
"<emphasis>Principal</emphasis>, <emphasis role=\"italic\">/admin</emphasis> "
19721
"is an <emphasis>Instance</emphasis>, and <emphasis "
19722
"role=\"italic\">@EXAMPLE.COM</emphasis> signifies the realm. The <emphasis "
19723
"role=\"italic\">\"every day\"</emphasis> Principal would be "
19724
"<emphasis>steve@EXAMPLE.COM</emphasis>, and should have only normal user "
19725
"rights."
19726
19727
#: serverguide/C/network-auth.xml:2165(para)
19728
msgid ""
19729
"Replace <emphasis>EXAMPLE.COM</emphasis> and <emphasis>steve</emphasis> with "
19730
"your Realm and admin username."
19731
msgstr ""
19732
"Replace <emphasis>EXAMPLE.COM</emphasis> and <emphasis>steve</emphasis> with "
19733
"your Realm and admin username."
19734
19735
#: serverguide/C/network-auth.xml:2173(para)
19736
msgid ""
19737
"Next, the new admin user needs to have the appropriate Access Control List "
19738
"(ACL) permissions. The permissions are configured in the "
19739
"<filename>/etc/krb5kdc/kadm5.acl</filename> file:"
19740
msgstr ""
19741
"Next, the new admin user needs to have the appropriate Access Control List "
19742
"(ACL) permissions. The permissions are configured in the "
19743
"<filename>/etc/krb5kdc/kadm5.acl</filename> file:"
19744
19745
#: serverguide/C/network-auth.xml:2178(programlisting)
19746
#, no-wrap
19747
msgid ""
19748
"\n"
19749
"steve/admin@EXAMPLE.COM *\n"
19750
msgstr ""
19751
"\n"
19752
"steve/admin@EXAMPLE.COM *\n"
19753
19754
#: serverguide/C/network-auth.xml:2182(para)
19755
msgid ""
19756
"This entry grants <emphasis>steve/admin</emphasis> the ability to perform "
19757
"any operation on all principals in the realm."
19758
msgstr ""
19759
"This entry grants <emphasis>steve/admin</emphasis> the ability to perform "
19760
"any operation on all principals in the realm."
19761
19762
#: serverguide/C/network-auth.xml:2189(para)
19763
msgid ""
19764
"Now restart the <application>krb5-admin-server</application> for the new ACL "
19765
"to take affect:"
19766
msgstr ""
19767
"Now restart the <application>krb5-admin-server</application> for the new ACL "
19768
"to take affect:"
19769
19770
#: serverguide/C/network-auth.xml:2194(command)
19771
msgid "sudo /etc/init.d/krb5-admin-server restart"
19772
msgstr "sudo /etc/init.d/krb5-admin-server restart"
19773
19774
#: serverguide/C/network-auth.xml:2200(para)
19775
msgid ""
19776
"The new user principal can be tested using the <application>kinit "
19777
"utility</application>:"
19778
msgstr ""
19779
"The new user principal can be tested using the <application>kinit "
19780
"utility</application>:"
19781
19782
#: serverguide/C/network-auth.xml:2205(command)
19783
msgid "kinit steve/admin"
19784
msgstr "kinit steve/admin"
19785
19786
#: serverguide/C/network-auth.xml:2206(computeroutput)
19787
#, no-wrap
19788
msgid "steve/admin@EXAMPLE.COM's Password:"
19789
msgstr "steve/admin@EXAMPLE.COM's Password:"
19790
19791
#: serverguide/C/network-auth.xml:2209(para)
19792
msgid ""
19793
"After entering the password, use the <application>klist</application> "
19794
"utility to view information about the Ticket Granting Ticket (TGT):"
19795
msgstr ""
19796
"After entering the password, use the <application>klist</application> "
19797
"utility to view information about the Ticket Granting Ticket (TGT):"
19798
19799
#: serverguide/C/network-auth.xml:2215(command) serverguide/C/network-auth.xml:2550(command)
19800
msgid "klist"
19801
msgstr "klist"
19802
19803
#: serverguide/C/network-auth.xml:2216(computeroutput)
19804
#, no-wrap
19805
msgid ""
19806
"Credentials cache: FILE:/tmp/krb5cc_1000\n"
19807
" Principal: steve/admin@EXAMPLE.COM\n"
19808
"\n"
19809
" Issued Expires Principal\n"
19810
"Jul 13 17:53:34 Jul 14 03:53:34 krbtgt/EXAMPLE.COM@EXAMPLE.COM"
19811
msgstr ""
19812
"Credentials cache: FILE:/tmp/krb5cc_1000\n"
19813
" Principal: steve/admin@EXAMPLE.COM\n"
19814
"\n"
19815
" Issued Expires Principal\n"
19816
"Jul 13 17:53:34 Jul 14 03:53:34 krbtgt/EXAMPLE.COM@EXAMPLE.COM"
19817
19818
#: serverguide/C/network-auth.xml:2223(para)
19819
msgid ""
19820
"You may need to add an entry into the <filename>/etc/hosts</filename> for "
19821
"the KDC. For example:"
19822
msgstr ""
19823
"You may need to add an entry into the <filename>/etc/hosts</filename> for "
19824
"the KDC. For example:"
19825
19826
#: serverguide/C/network-auth.xml:2227(programlisting)
19827
#, no-wrap
19828
msgid ""
19829
"\n"
19830
"192.168.0.1 kdc01.example.com kdc01\n"
19831
msgstr ""
19832
"\n"
19833
"192.168.0.1 kdc01.example.com kdc01\n"
19834
19835
#: serverguide/C/network-auth.xml:2231(para)
19836
msgid ""
19837
"Replacing <emphasis>192.168.0.1</emphasis> with the IP address of your KDC."
19838
msgstr ""
19839
"Replacing <emphasis>192.168.0.1</emphasis> with the IP address of your KDC."
19840
19841
#: serverguide/C/network-auth.xml:2238(para)
19842
msgid ""
19843
"In order for clients to determine the KDC for the Realm some DNS SRV records "
19844
"are needed. Add the following to "
19845
"<filename>/etc/named/db.example.com</filename>:"
19846
msgstr ""
19847
"In order for clients to determine the KDC for the Realm some DNS SRV records "
19848
"are needed. Add the following to "
19849
"<filename>/etc/named/db.example.com</filename>:"
19850
19851
#: serverguide/C/network-auth.xml:2243(programlisting)
19852
#, no-wrap
19853
msgid ""
19854
"\n"
19855
"_kerberos._udp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
19856
"_kerberos._tcp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
19857
"_kerberos._udp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
19858
"_kerberos._tcp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
19859
"_kerberos-adm._tcp.EXAMPLE.COM. IN SRV 1 0 749 kdc01.example.com.\n"
19860
"_kpasswd._udp.EXAMPLE.COM. IN SRV 1 0 464 kdc01.example.com.\n"
19861
msgstr ""
19862
"\n"
19863
"_kerberos._udp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
19864
"_kerberos._tcp.EXAMPLE.COM. IN SRV 1 0 88 kdc01.example.com.\n"
19865
"_kerberos._udp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
19866
"_kerberos._tcp.EXAMPLE.COM. IN SRV 10 0 88 kdc02.example.com. \n"
19867
"_kerberos-adm._tcp.EXAMPLE.COM. IN SRV 1 0 749 kdc01.example.com.\n"
19868
"_kpasswd._udp.EXAMPLE.COM. IN SRV 1 0 464 kdc01.example.com.\n"
19869
19870
#: serverguide/C/network-auth.xml:2253(para)
19871
msgid ""
19872
"Replace <emphasis>EXAMPLE.COM</emphasis>, <emphasis>kdc01</emphasis>, and "
19873
"<emphasis>kdc02</emphasis> with your domain name, primary KDC, and secondary "
19874
"KDC."
19875
msgstr ""
19876
"Replace <emphasis>EXAMPLE.COM</emphasis>, <emphasis>kdc01</emphasis>, and "
19877
"<emphasis>kdc02</emphasis> with your domain name, primary KDC, and secondary "
19878
"KDC."
19879
19880
#: serverguide/C/network-auth.xml:2259(para)
19881
msgid ""
19882
"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."
19883
msgstr ""
19884
"See <xref linkend=\"dns\"/> for detailed instructions on setting up DNS."
19885
19886
#: serverguide/C/network-auth.xml:2266(para)
19887
msgid "Your new Kerberos Realm is now ready to authenticate clients."
19888
msgstr "Your new Kerberos Realm is now ready to authenticate clients."
19889
19890
#: serverguide/C/network-auth.xml:2273(title)
19891
msgid "Secondary KDC"
19892
msgstr "Secondary KDC"
19893
19894
#: serverguide/C/network-auth.xml:2275(para)
19895
msgid ""
19896
"Once you have one Key Distribution Center (KDC) on your network, it is good "
19897
"practice to have a Secondary KDC in case the primary becomes unavailable."
19898
msgstr ""
19899
"Once you have one Key Distribution Centre (KDC) on your network, it is good "
19900
"practice to have a Secondary KDC in case the primary becomes unavailable."
19901
19902
#: serverguide/C/network-auth.xml:2283(para)
19903
msgid ""
19904
"First, install the packages, and when asked for the Kerberos and Admin "
19905
"server names enter the name of the Primary KDC:"
19906
msgstr ""
19907
"First, install the packages, and when asked for the Kerberos and Admin "
19908
"server names enter the name of the Primary KDC:"
19909
19910
#: serverguide/C/network-auth.xml:2294(para)
19911
msgid ""
19912
"Once you have the packages installed, create the Secondary KDC's host "
19913
"principal. From a terminal prompt, enter:"
19914
msgstr ""
19915
"Once you have the packages installed, create the Secondary KDC's host "
19916
"principal. From a terminal prompt, enter:"
19917
19918
#: serverguide/C/network-auth.xml:2299(command)
19919
msgid "kadmin -q \"addprinc -randkey host/kdc02.example.com\""
19920
msgstr "kadmin -q \"addprinc -randkey host/kdc02.example.com\""
19921
19922
#: serverguide/C/network-auth.xml:2303(para)
19923
msgid ""
19924
"After, issuing any <application>kadmin</application> commands you will be "
19925
"prompted for your <emphasis>username/admin@EXAMPLE.COM</emphasis> principal "
19926
"password."
19927
msgstr ""
19928
"After, issuing any <application>kadmin</application> commands you will be "
19929
"prompted for your <emphasis>username/admin@EXAMPLE.COM</emphasis> principal "
19930
"password."
19931
19932
#: serverguide/C/network-auth.xml:2312(para)
19933
msgid "Extract the <emphasis>keytab</emphasis> file:"
19934
msgstr "Extract the <emphasis>keytab</emphasis> file:"
19935
19936
#: serverguide/C/network-auth.xml:2317(command)
19937
msgid "kadmin -q \"ktadd -k keytab.kdc02 host/kdc02.example.com\""
19938
msgstr "kadmin -q \"ktadd -k keytab.kdc02 host/kdc02.example.com\""
19939
19940
#: serverguide/C/network-auth.xml:2323(para)
19941
msgid ""
19942
"There should now be a <filename>keytab.kdc02</filename> in the current "
19943
"directory, move the file to <filename>/etc/krb5.keytab</filename>:"
19944
msgstr ""
19945
"There should now be a <filename>keytab.kdc02</filename> in the current "
19946
"directory, move the file to <filename>/etc/krb5.keytab</filename>:"
19947
19948
#: serverguide/C/network-auth.xml:2329(command)
19949
msgid "sudo mv keytab.kdc02 /etc/krb5.keytab"
19950
msgstr "sudo mv keytab.kdc02 /etc/krb5.keytab"
19951
19952
#: serverguide/C/network-auth.xml:2333(para)
19953
msgid ""
19954
"If the path to the <filename>keytab.kdc02</filename> file is different "
19955
"adjust accordingly."
19956
msgstr ""
19957
"If the path to the <filename>keytab.kdc02</filename> file is different "
19958
"adjust accordingly."
19959
19960
#: serverguide/C/network-auth.xml:2338(para)
19961
msgid ""
19962
"Also, you can list the principals in a Keytab file, which can be useful when "
19963
"troubleshooting, using the <application>klist</application> utility:"
19964
msgstr ""
19965
"Also, you can list the principals in a Keytab file, which can be useful when "
19966
"troubleshooting, using the <application>klist</application> utility:"
19967
19968
#: serverguide/C/network-auth.xml:2344(command)
19969
msgid "sudo klist -k /etc/krb5.keytab"
19970
msgstr "sudo klist -k /etc/krb5.keytab"
19971
19972
#: serverguide/C/network-auth.xml:2350(para)
19973
msgid ""
19974
"Next, there needs to be a <filename>kpropd.acl</filename> file on each KDC "
19975
"that lists all KDCs for the Realm. For example, on both primary and "
19976
"secondary KDC, create <filename>/etc/krb5kdc/kpropd.acl</filename>:"
19977
msgstr ""
19978
"Next, there needs to be a <filename>kpropd.acl</filename> file on each KDC "
19979
"that lists all KDCs for the Realm. For example, on both primary and "
19980
"secondary KDC, create <filename>/etc/krb5kdc/kpropd.acl</filename>:"
19981
19982
#: serverguide/C/network-auth.xml:2355(programlisting)
19983
#, no-wrap
19984
msgid ""
19985
"\n"
19986
"host/kdc01.example.com@EXAMPLE.COM\n"
19987
"host/kdc02.example.com@EXAMPLE.COM\n"
19988
msgstr ""
19989
"\n"
19990
"host/kdc01.example.com@EXAMPLE.COM\n"
19991
"host/kdc02.example.com@EXAMPLE.COM\n"
19992
19993
#: serverguide/C/network-auth.xml:2363(para)
19994
msgid "Create an empty database on the <emphasis>Secondary KDC</emphasis>:"
19995
msgstr "Create an empty database on the <emphasis>Secondary KDC</emphasis>:"
19996
19997
#: serverguide/C/network-auth.xml:2368(command)
19998
msgid "sudo kdb5_util -s create"
19999
msgstr "sudo kdb5_util -s create"
20000
20001
#: serverguide/C/network-auth.xml:2374(para)
20002
msgid ""
20003
"Now start the <application>kpropd</application> daemon, which listens for "
20004
"connections from the <application>kprop</application> utility. "
20005
"<application>kprop</application> is used to transfer dump files:"
20006
msgstr ""
20007
"Now start the <application>kpropd</application> daemon, which listens for "
20008
"connections from the <application>kprop</application> utility. "
20009
"<application>kprop</application> is used to transfer dump files:"
20010
20011
#: serverguide/C/network-auth.xml:2381(command)
20012
msgid "sudo kpropd -S"
20013
msgstr "sudo kpropd -S"
20014
20015
#: serverguide/C/network-auth.xml:2387(para)
20016
msgid ""
20017
"From a terminal on the <emphasis>Primary KDC</emphasis>, create a dump file "
20018
"of the principal database:"
20019
msgstr ""
20020
"From a terminal on the <emphasis>Primary KDC</emphasis>, create a dump file "
20021
"of the principal database:"
20022
20023
#: serverguide/C/network-auth.xml:2392(command)
20024
msgid "sudo kdb5_util dump /var/lib/krb5kdc/dump"
20025
msgstr "sudo kdb5_util dump /var/lib/krb5kdc/dump"
20026
20027
#: serverguide/C/network-auth.xml:2398(para)
20028
msgid ""
20029
"Extract the Primary KDC's <emphasis>keytab</emphasis> file and copy it to "
20030
"<filename>/etc/krb5.keytab</filename>:"
20031
msgstr ""
20032
"Extract the Primary KDC's <emphasis>keytab</emphasis> file and copy it to "
20033
"<filename>/etc/krb5.keytab</filename>:"
20034
20035
#: serverguide/C/network-auth.xml:2403(command)
20036
msgid "kadmin -q \"ktadd -k keytab.kdc01 host/kdc01.example.com\""
20037
msgstr "kadmin -q \"ktadd -k keytab.kdc01 host/kdc01.example.com\""
20038
20039
#: serverguide/C/network-auth.xml:2404(command)
20040
msgid "sudo mv keytab.kdc01 /etc/kr5b.keytab"
20041
msgstr "sudo mv keytab.kdc01 /etc/kr5b.keytab"
20042
20043
#: serverguide/C/network-auth.xml:2408(para)
20044
msgid ""
20045
"Make sure there is a <emphasis>host</emphasis> for "
20046
"<emphasis>kdc01.example.com</emphasis> before extracting the Keytab."
20047
msgstr ""
20048
"Make sure there is a <emphasis>host</emphasis> for "
20049
"<emphasis>kdc01.example.com</emphasis> before extracting the Keytab."
20050
20051
#: serverguide/C/network-auth.xml:2416(para)
20052
msgid ""
20053
"Using the <application>kprop</application> utility push the database to the "
20054
"Secondary KDC:"
20055
msgstr ""
20056
"Using the <application>kprop</application> utility push the database to the "
20057
"Secondary KDC:"
20058
20059
#: serverguide/C/network-auth.xml:2421(command)
20060
msgid "sudo kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com"
20061
msgstr "sudo kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com"
20062
20063
#: serverguide/C/network-auth.xml:2425(para)
20064
msgid ""
20065
"There should be a <emphasis>SUCCEEDED</emphasis> message if the propagation "
20066
"worked. If there is an error message check "
20067
"<filename>/var/log/syslog</filename> on the secondary KDC for more "
20068
"information."
20069
msgstr ""
20070
"There should be a <emphasis>SUCCEEDED</emphasis> message if the propagation "
20071
"worked. If there is an error message check "
20072
"<filename>/var/log/syslog</filename> on the secondary KDC for more "
20073
"information."
20074
20075
#: serverguide/C/network-auth.xml:2431(para)
20076
msgid ""
20077
"You may also want to create a <application>cron</application> job to "
20078
"periodically update the database on the Secondary KDC. For example, the "
20079
"following will push the database every hour:"
20080
msgstr ""
20081
"You may also want to create a <application>cron</application> job to "
20082
"periodically update the database on the Secondary KDC. For example, the "
20083
"following will push the database every hour:"
20084
20085
#: serverguide/C/network-auth.xml:2436(programlisting)
20086
#, no-wrap
20087
msgid ""
20088
"\n"
20089
"# m h dom mon dow command\n"
20090
"0 * * * * /usr/sbin/kdb5_util dump /var/lib/krb5kdc/dump && "
20091
"/usr/sbin/kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com\n"
20092
msgstr ""
20093
"\n"
20094
"# m h dom mon dow command\n"
20095
"0 * * * * /usr/sbin/kdb5_util dump /var/lib/krb5kdc/dump && "
20096
"/usr/sbin/kprop -r EXAMPLE.COM -f /var/lib/krb5kdc/dump kdc02.example.com\n"
20097
20098
#: serverguide/C/network-auth.xml:2444(para)
20099
msgid ""
20100
"Back on the <emphasis>Secondary KDC</emphasis>, create a "
20101
"<emphasis>stash</emphasis> file to hold the Kerberos master key:"
20102
msgstr ""
20103
"Back on the <emphasis>Secondary KDC</emphasis>, create a "
20104
"<emphasis>stash</emphasis> file to hold the Kerberos master key:"
20105
20106
#: serverguide/C/network-auth.xml:2450(command)
20107
msgid "sudo kdb5_util stash"
20108
msgstr "sudo kdb5_util stash"
20109
20110
#: serverguide/C/network-auth.xml:2456(para)
20111
msgid ""
20112
"Finally, start the <application>krb5-kdc</application> daemon on the "
20113
"Secondary KDC:"
20114
msgstr ""
20115
"Finally, start the <application>krb5-kdc</application> daemon on the "
20116
"Secondary KDC:"
20117
20118
#: serverguide/C/network-auth.xml:2461(command) serverguide/C/network-auth.xml:3073(command)
20119
msgid "sudo /etc/init.d/krb5-kdc start"
20120
msgstr "sudo /etc/init.d/krb5-kdc start"
20121
20122
#: serverguide/C/network-auth.xml:2467(para)
20123
msgid ""
20124
"The <emphasis>Secondary KDC</emphasis> should now be able to issue tickets "
20125
"for the Realm. You can test this by stopping the <application>krb5-"
20126
"kdc</application> daemon on the Primary KDC, then use "
20127
"<application>kinit</application> to request a ticket. If all goes well you "
20128
"should receive a ticket from the Secondary KDC."
20129
msgstr ""
20130
"The <emphasis>Secondary KDC</emphasis> should now be able to issue tickets "
20131
"for the Realm. You can test this by stopping the <application>krb5-"
20132
"kdc</application> daemon on the Primary KDC, then use "
20133
"<application>kinit</application> to request a ticket. If all goes well you "
20134
"should receive a ticket from the Secondary KDC."
20135
20136
#: serverguide/C/network-auth.xml:2475(title)
20137
msgid "Kerberos Linux Client"
20138
msgstr "Kerberos Linux Client"
20139
20140
#: serverguide/C/network-auth.xml:2477(para)
20141
msgid ""
20142
"This section covers configuring a Linux system as a "
20143
"<application>Kerberos</application> client. This will allow access to any "
20144
"kerberized services once a user has successfully logged into the system."
20145
msgstr ""
20146
"This section covers configuring a Linux system as a "
20147
"<application>Kerberos</application> client. This will allow access to any "
20148
"kerberised services once a user has successfully logged into the system."
20149
20150
#: serverguide/C/network-auth.xml:2485(para)
20151
msgid ""
20152
"In order to authenticate to a Kerberos Realm, the <application>krb5-"
20153
"user</application> and <application>libpam-krb5</application> packages are "
20154
"needed, along with a few others that are not strictly necessary but make "
20155
"life easier. To install the packages enter the following in a terminal "
20156
"prompt:"
20157
msgstr ""
20158
"In order to authenticate to a Kerberos Realm, the <application>krb5-"
20159
"user</application> and <application>libpam-krb5</application> packages are "
20160
"needed, along with a few others that are not strictly necessary but make "
20161
"life easier. To install the packages enter the following in a terminal "
20162
"prompt:"
20163
20164
#: serverguide/C/network-auth.xml:2492(command)
20165
msgid ""
20166
"sudo apt-get install krb5-user libpam-krb5 libpam-ccreds auth-client-config"
20167
msgstr ""
20168
"sudo apt-get install krb5-user libpam-krb5 libpam-ccreds auth-client-config"
20169
20170
#: serverguide/C/network-auth.xml:2495(para)
20171
msgid ""
20172
"The <application>auth-client-config</application> package allows simple "
20173
"configuration of PAM for authentication from multiple sources, and the "
20174
"<application>libpam-ccreds</application> will cache authentication "
20175
"credentials allowing you to login in case the Key Distribution Center (KDC) "
20176
"is unavailable. This package is also useful for laptops that may "
20177
"authenticate using Kerberos while on the corporate network, but will need to "
20178
"be accessed off the network as well."
20179
msgstr ""
20180
"The <application>auth-client-config</application> package allows simple "
20181
"configuration of PAM for authentication from multiple sources, and the "
20182
"<application>libpam-ccreds</application> will cache authentication "
20183
"credentials allowing you to login in case the Key Distribution Centre (KDC) "
20184
"is unavailable. This package is also useful for laptops that may "
20185
"authenticate using Kerberos while on the corporate network, but will need to "
20186
"be accessed off the network as well."
20187
20188
#: serverguide/C/network-auth.xml:2506(para)
20189
msgid "To configure the client in a terminal enter:"
20190
msgstr "To configure the client in a terminal enter:"
20191
20192
#: serverguide/C/network-auth.xml:2511(command)
20193
msgid "sudo dpkg-reconfigure krb5-config"
20194
msgstr "sudo dpkg-reconfigure krb5-config"
20195
20196
#: serverguide/C/network-auth.xml:2514(para)
20197
msgid ""
20198
"You will then be prompted to enter the name of the Kerberos Realm. Also, if "
20199
"you don't have DNS configured with Kerberos <emphasis>SRV</emphasis> "
20200
"records, the menu will prompt you for the hostname of the Key Distribution "
20201
"Center (KDC) and Realm Administration server."
20202
msgstr ""
20203
"You will then be prompted to enter the name of the Kerberos Realm. Also, if "
20204
"you don't have DNS configured with Kerberos <emphasis>SRV</emphasis> "
20205
"records, the menu will prompt you for the hostname of the Key Distribution "
20206
"Centre (KDC) and Realm Administration server."
20207
20208
#: serverguide/C/network-auth.xml:2520(para)
20209
msgid ""
20210
"The <application>dpkg-reconfigure</application> adds entries to the "
20211
"<filename>/etc/krb5.conf</filename> file for your Realm. You should have "
20212
"entries similar to the following:"
20213
msgstr ""
20214
"The <application>dpkg-reconfigure</application> adds entries to the "
20215
"<filename>/etc/krb5.conf</filename> file for your Realm. You should have "
20216
"entries similar to the following:"
20217
20218
#: serverguide/C/network-auth.xml:2525(programlisting)
20219
#, no-wrap
20220
msgid ""
20221
"\n"
20222
"[libdefaults]\n"
20223
" default_realm = EXAMPLE.COM\n"
20224
"...\n"
20225
"[realms]\n"
20226
" EXAMPLE.COM = } \n"
20227
" kdc = 192.168.0.1 \n"
20228
" admin_server = 192.168.0.1\n"
20229
" }\n"
20230
msgstr ""
20231
"\n"
20232
"[libdefaults]\n"
20233
" default_realm = EXAMPLE.COM\n"
20234
"...\n"
20235
"[realms]\n"
20236
" EXAMPLE.COM = } \n"
20237
" kdc = 192.168.0.1 \n"
20238
" admin_server = 192.168.0.1\n"
20239
" }\n"
20240
20241
#: serverguide/C/network-auth.xml:2536(para)
20242
msgid ""
20243
"You can test the configuration by requesting a ticket using the "
20244
"<application>kinit</application> utility. For example:"
20245
msgstr ""
20246
"You can test the configuration by requesting a ticket using the "
20247
"<application>kinit</application> utility. For example:"
20248
20249
#: serverguide/C/network-auth.xml:2541(command)
20250
msgid "kinit steve@EXAMPLE.COM"
20251
msgstr "kinit steve@EXAMPLE.COM"
20252
20253
#: serverguide/C/network-auth.xml:2542(computeroutput)
20254
#, no-wrap
20255
msgid "Password for steve@EXAMPLE.COM:"
20256
msgstr "Password for steve@EXAMPLE.COM:"
20257
20258
#: serverguide/C/network-auth.xml:2545(para)
20259
msgid ""
20260
"When a ticket has been granted, the details can be viewed using "
20261
"<application>klist</application>:"
20262
msgstr ""
20263
"When a ticket has been granted, the details can be viewed using "
20264
"<application>klist</application>:"
20265
20266
#: serverguide/C/network-auth.xml:2551(computeroutput)
20267
#, no-wrap
20268
msgid ""
20269
"Ticket cache: FILE:/tmp/krb5cc_1000\n"
20270
"Default principal: steve@EXAMPLE.COM\n"
20271
"\n"
20272
"Valid starting Expires Service principal\n"
20273
"07/24/08 05:18:56 07/24/08 15:18:56 krbtgt/EXAMPLE.COM@EXAMPLE.COM\n"
20274
" renew until 07/25/08 05:18:57\n"
20275
"\n"
20276
"\n"
20277
"Kerberos 4 ticket cache: /tmp/tkt1000\n"
20278
"klist: You have no tickets cached"
20279
msgstr ""
20280
"Ticket cache: FILE:/tmp/krb5cc_1000\n"
20281
"Default principal: steve@EXAMPLE.COM\n"
20282
"\n"
20283
"Valid starting Expires Service principal\n"
20284
"07/24/08 05:18:56 07/24/08 15:18:56 krbtgt/EXAMPLE.COM@EXAMPLE.COM\n"
20285
" renew until 07/25/08 05:18:57\n"
20286
"\n"
20287
"\n"
20288
"Kerberos 4 ticket cache: /tmp/tkt1000\n"
20289
"klist: You have no tickets cached"
20290
20291
#: serverguide/C/network-auth.xml:2563(para)
20292
msgid ""
20293
"Next, use the <application>auth-client-config</application> to configure the "
20294
"<application>libpam-krb5</application> module to request a ticket during "
20295
"login:"
20296
msgstr ""
20297
"Next, use the <application>auth-client-config</application> to configure the "
20298
"<application>libpam-krb5</application> module to request a ticket during "
20299
"login:"
20300
20301
#: serverguide/C/network-auth.xml:2569(command)
20302
msgid "sudo auth-client-config -a -p kerberos_example"
20303
msgstr "sudo auth-client-config -a -p kerberos_example"
20304
20305
#: serverguide/C/network-auth.xml:2572(para)
20306
msgid ""
20307
"You will should now receive a ticket upon successful login authentication."
20308
msgstr ""
20309
"You will should now receive a ticket upon successful login authentication."
20310
20311
#: serverguide/C/network-auth.xml:2583(para)
20312
msgid ""
20313
"For more information on Kerberos see the <ulink "
20314
"url=\"http://web.mit.edu/Kerberos/\">MIT Kerberos</ulink> site."
20315
msgstr ""
20316
"For more information on Kerberos see the <ulink "
20317
"url=\"http://web.mit.edu/Kerberos/\">MIT Kerberos</ulink> site."
20318
20319
#: serverguide/C/network-auth.xml:2588(para)
20320
msgid ""
20321
"The <ulink url=\"https://help.ubuntu.com/community/Kerberos\">Ubuntu Wiki "
20322
"Kerberos</ulink> page has more details."
20323
msgstr ""
20324
20325
#: serverguide/C/network-auth.xml:2593(para)
20326
msgid ""
20327
"O'Reilly's <ulink "
20328
"url=\"http://oreilly.com/catalog/9780596004033/\">Kerberos: The Definitive "
20329
"Guide</ulink> is a great reference when setting up Kerberos."
20330
msgstr ""
20331
"O'Reilly's <ulink "
20332
"url=\"http://oreilly.com/catalog/9780596004033/\">Kerberos: The Definitive "
20333
"Guide</ulink> is a great reference when setting up Kerberos."
20334
20335
#: serverguide/C/network-auth.xml:2599(para)
20336
msgid ""
20337
"Also, feel free to stop by the <emphasis>#ubuntu-server</emphasis> IRC "
20338
"channel on <ulink url=\"http://freenode.net/\">Freenode</ulink> if you have "
20339
"Kerberos questions."
20340
msgstr ""
20341
"Also, feel free to stop by the <emphasis>#ubuntu-server</emphasis> IRC "
20342
"channel on <ulink url=\"http://freenode.net/\">Freenode</ulink> if you have "
20343
"Kerberos questions."
20344
20345
#: serverguide/C/network-auth.xml:2609(title)
20346
msgid "Kerberos and LDAP"
20347
msgstr "Kerberos and LDAP"
20348
20349
#: serverguide/C/network-auth.xml:2611(para)
20350
msgid ""
20351
"Replicating a Kerberos principal database between two servers can be "
20352
"complicated, and adds an additional user database to your network. "
20353
"Fortunately, MIT Kerberos can be configured to use an "
20354
"<application>LDAP</application> directory as a principal database. This "
20355
"section covers configuring a primary and secondary kerberos server to use "
20356
"<application>OpenLDAP</application> for the principal database."
20357
msgstr ""
20358
"Replicating a Kerberos principal database between two servers can be "
20359
"complicated, and adds an additional user database to your network. "
20360
"Fortunately, MIT Kerberos can be configured to use an "
20361
"<application>LDAP</application> directory as a principal database. This "
20362
"section covers configuring a primary and secondary kerberos server to use "
20363
"<application>OpenLDAP</application> for the principal database."
20364
20365
#: serverguide/C/network-auth.xml:2619(title)
20366
msgid "Configuring OpenLDAP"
20367
msgstr "Configuring OpenLDAP"
20368
20369
#: serverguide/C/network-auth.xml:2621(para)
20370
msgid ""
20371
"First, the necessary <emphasis>schema</emphasis> needs to be loaded on an "
20372
"<application>OpenLDAP</application> server that has network connectivity to "
20373
"the Primary and Secondary KDCs. The rest of this section assumes that you "
20374
"also have LDAP replication configured between at least two servers. For "
20375
"information on setting up OpenLDAP see <xref linkend=\"openldap-server\"/>."
20376
msgstr ""
20377
"First, the necessary <emphasis>schema</emphasis> needs to be loaded on an "
20378
"<application>OpenLDAP</application> server that has network connectivity to "
20379
"the Primary and Secondary KDCs. The rest of this section assumes that you "
20380
"also have LDAP replication configured between at least two servers. For "
20381
"information on setting up OpenLDAP see <xref linkend=\"openldap-server\"/>."
20382
20383
#: serverguide/C/network-auth.xml:2628(para)
20384
msgid ""
20385
"It is also required to configure OpenLDAP for TLS and SSL connections, so "
20386
"that traffic between the KDC and LDAP server is encrypted. See <xref "
20387
"linkend=\"openldap-tls\"/> for details."
20388
msgstr ""
20389
"It is also required to configure OpenLDAP for TLS and SSL connections, so "
20390
"that traffic between the KDC and LDAP server is encrypted. See <xref "
20391
"linkend=\"openldap-tls\"/> for details."
20392
20393
#: serverguide/C/network-auth.xml:2635(para)
20394
msgid ""
20395
"To load the schema into LDAP, on the LDAP server install the "
20396
"<application>krb5-kdc-ldap</application> package. From a terminal enter:"
20397
msgstr ""
20398
"To load the schema into LDAP, on the LDAP server install the "
20399
"<application>krb5-kdc-ldap</application> package. From a terminal enter:"
20400
20401
#: serverguide/C/network-auth.xml:2641(command)
20402
msgid "sudo apt-get install krb5-kdc-ldap"
20403
msgstr "sudo apt-get install krb5-kdc-ldap"
20404
20405
#: serverguide/C/network-auth.xml:2646(para)
20406
msgid "Next, extract the <filename>kerberos.schema.gz</filename> file:"
20407
msgstr "Next, extract the <filename>kerberos.schema.gz</filename> file:"
20408
20409
#: serverguide/C/network-auth.xml:2651(command)
20410
msgid "sudo gzip -d /usr/share/doc/krb5-kdc-ldap/kerberos.schema.gz"
20411
msgstr "sudo gzip -d /usr/share/doc/krb5-kdc-ldap/kerberos.schema.gz"
20412
20413
#: serverguide/C/network-auth.xml:2652(command)
20414
msgid ""
20415
"sudo cp /usr/share/doc/krb5-kdc-ldap/kerberos.schema /etc/ldap/schema/"
20416
msgstr ""
20417
"sudo cp /usr/share/doc/krb5-kdc-ldap/kerberos.schema /etc/ldap/schema/"
20418
20419
#: serverguide/C/network-auth.xml:2658(para)
20420
msgid ""
20421
"The <emphasis>kerberos</emphasis> schema needs to be added to the "
20422
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
20423
"<application>slapd</application> is also detailed in <xref "
20424
"linkend=\"openldap-configuration\"/>."
20425
msgstr ""
20426
"The <emphasis>kerberos</emphasis> schema needs to be added to the "
20427
"<emphasis>cn=config</emphasis> tree. The procedure to add a new schema to "
20428
"<application>slapd</application> is also detailed in <xref "
20429
"linkend=\"openldap-configuration\"/>."
20430
20431
#: serverguide/C/network-auth.xml:2671(programlisting)
20432
#, no-wrap
20433
msgid ""
20434
"\n"
20435
"include /etc/ldap/schema/core.schema\n"
20436
"include /etc/ldap/schema/collective.schema\n"
20437
"include /etc/ldap/schema/corba.schema\n"
20438
"include /etc/ldap/schema/cosine.schema\n"
20439
"include /etc/ldap/schema/duaconf.schema\n"
20440
"include /etc/ldap/schema/dyngroup.schema\n"
20441
"include /etc/ldap/schema/inetorgperson.schema\n"
20442
"include /etc/ldap/schema/java.schema\n"
20443
"include /etc/ldap/schema/misc.schema\n"
20444
"include /etc/ldap/schema/nis.schema\n"
20445
"include /etc/ldap/schema/openldap.schema\n"
20446
"include /etc/ldap/schema/ppolicy.schema\n"
20447
"include /etc/ldap/schema/kerberos.schema\n"
20448
msgstr ""
20449
"\n"
20450
"include /etc/ldap/schema/core.schema\n"
20451
"include /etc/ldap/schema/collective.schema\n"
20452
"include /etc/ldap/schema/corba.schema\n"
20453
"include /etc/ldap/schema/cosine.schema\n"
20454
"include /etc/ldap/schema/duaconf.schema\n"
20455
"include /etc/ldap/schema/dyngroup.schema\n"
20456
"include /etc/ldap/schema/inetorgperson.schema\n"
20457
"include /etc/ldap/schema/java.schema\n"
20458
"include /etc/ldap/schema/misc.schema\n"
20459
"include /etc/ldap/schema/nis.schema\n"
20460
"include /etc/ldap/schema/openldap.schema\n"
20461
"include /etc/ldap/schema/ppolicy.schema\n"
20462
"include /etc/ldap/schema/kerberos.schema\n"
20463
20464
#: serverguide/C/network-auth.xml:2691(para)
20465
msgid "Create a temporary directory to hold the LDIF files:"
20466
msgstr "Create a temporary directory to hold the LDIF files:"
20467
20468
#: serverguide/C/network-auth.xml:2706(command)
20469
msgid ""
20470
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
20471
"\"cn={12}kerberos,cn=schema,cn=config\" > /tmp/cn=kerberos.ldif"
20472
msgstr ""
20473
"slapcat -f schema_convert.conf -F /tmp/ldif_output -n0 -s "
20474
"\"cn={12}kerberos,cn=schema,cn=config\" > /tmp/cn=kerberos.ldif"
20475
20476
#: serverguide/C/network-auth.xml:2716(para)
20477
msgid ""
20478
"Edit the generated <filename>/tmp/cn\\=kerberos.ldif</filename> file, "
20479
"changing the following attributes:"
20480
msgstr ""
20481
"Edit the generated <filename>/tmp/cn\\=kerberos.ldif</filename> file, "
20482
"changing the following attributes:"
20483
20484
#: serverguide/C/network-auth.xml:2720(programlisting)
20485
#, no-wrap
20486
msgid ""
20487
"\n"
20488
"dn: cn=kerberos,cn=schema,cn=config\n"
20489
"...\n"
20490
"cn: kerberos\n"
20491
msgstr ""
20492
"\n"
20493
"dn: cn=kerberos,cn=schema,cn=config\n"
20494
"...\n"
20495
"cn: kerberos\n"
20496
20497
#: serverguide/C/network-auth.xml:2726(para)
20498
msgid "And remove the following lines from the end of the file:"
20499
msgstr "And remove the following lines from the end of the file:"
20500
20501
#: serverguide/C/network-auth.xml:2730(programlisting)
20502
#, no-wrap
20503
msgid ""
20504
"\n"
20505
"structuralObjectClass: olcSchemaConfig\n"
20506
"entryUUID: 18ccd010-746b-102d-9fbe-3760cca765dc\n"
20507
"creatorsName: cn=config\n"
20508
"createTimestamp: 20090111203515Z\n"
20509
"entryCSN: 20090111203515.326445Z#000000#000#000000\n"
20510
"modifiersName: cn=config\n"
20511
"modifyTimestamp: 20090111203515Z\n"
20512
msgstr ""
20513
"\n"
20514
"structuralObjectClass: olcSchemaConfig\n"
20515
"entryUUID: 18ccd010-746b-102d-9fbe-3760cca765dc\n"
20516
"creatorsName: cn=config\n"
20517
"createTimestamp: 20090111203515Z\n"
20518
"entryCSN: 20090111203515.326445Z#000000#000#000000\n"
20519
"modifiersName: cn=config\n"
20520
"modifyTimestamp: 20090111203515Z\n"
20521
20522
#: serverguide/C/network-auth.xml:2749(para)
20523
msgid "Load the new schema with <application>ldapadd</application>:"
20524
msgstr "Load the new schema with <application>ldapadd</application>:"
20525
20526
#: serverguide/C/network-auth.xml:2754(command)
20527
msgid "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=kerberos.ldif"
20528
msgstr "ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\\=kerberos.ldif"
20529
20530
#: serverguide/C/network-auth.xml:2760(para)
20531
msgid ""
20532
"Add an index for the <emphasis>krb5principalname</emphasis> attribute:"
20533
msgstr ""
20534
"Add an index for the <emphasis>krb5principalname</emphasis> attribute:"
20535
20536
#: serverguide/C/network-auth.xml:2765(command) serverguide/C/network-auth.xml:2782(command)
20537
msgid "ldapmodify -x -D cn=admin,cn=config -W"
20538
msgstr "ldapmodify -x -D cn=admin,cn=config -W"
20539
20540
#: serverguide/C/network-auth.xml:2767(userinput)
20541
#, no-wrap
20542
msgid ""
20543
"dn: olcDatabase={1}hdb,cn=config\n"
20544
"add: olcDbIndex\n"
20545
"olcDbIndex: krbPrincipalName eq,pres,sub"
20546
msgstr ""
20547
"dn: olcDatabase={1}hdb,cn=config\n"
20548
"add: olcDbIndex\n"
20549
"olcDbIndex: krbPrincipalName eq,pres,sub"
20550
20551
#: serverguide/C/network-auth.xml:2766(computeroutput)
20552
#, no-wrap
20553
msgid ""
20554
"Enter LDAP Password:\n"
20555
"<placeholder-1/>\n"
20556
"\n"
20557
"modifying entry \"olcDatabase={1}hdb,cn=config\""
20558
msgstr ""
20559
"Enter LDAP Password:\n"
20560
"<placeholder-1/>\n"
20561
"\n"
20562
"modifying entry \"olcDatabase={1}hdb,cn=config\""
20563
20564
#: serverguide/C/network-auth.xml:2777(para)
20565
msgid "Finally, update the Access Control Lists (ACL):"
20566
msgstr "Finally, update the Access Control Lists (ACL):"
20567
20568
#: serverguide/C/network-auth.xml:2784(userinput)
20569
#, no-wrap
20570
msgid ""
20571
"dn: olcDatabase={1}hdb,cn=config\n"
20572
"replace: olcAccess\n"
20573
"olcAccess: to attrs=userPassword,shadowLastChange,krbPrincipalKey by "
20574
"dn=\"cn=admin,dc=exampl\n"
20575
" e,dc=com\" write by anonymous auth by self write by * none\n"
20576
"-\n"
20577
"add: olcAccess\n"
20578
"olcAccess: to dn.base=\"\" by * read\n"
20579
"-\n"
20580
"add: olcAccess\n"
20581
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read"
20582
msgstr ""
20583
"dn: olcDatabase={1}hdb,cn=config\n"
20584
"replace: olcAccess\n"
20585
"olcAccess: to attrs=userPassword,shadowLastChange,krbPrincipalKey by "
20586
"dn=\"cn=admin,dc=exampl\n"
20587
" e,dc=com\" write by anonymous auth by self write by * none\n"
20588
"-\n"
20589
"add: olcAccess\n"
20590
"olcAccess: to dn.base=\"\" by * read\n"
20591
"-\n"
20592
"add: olcAccess\n"
20593
"olcAccess: to * by dn=\"cn=admin,dc=example,dc=com\" write by * read"
20594
20595
#: serverguide/C/network-auth.xml:2783(computeroutput)
20596
#, no-wrap
20597
msgid ""
20598
"Enter LDAP Password: \n"
20599
"<placeholder-1/>\n"
20600
"\n"
20601
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
20602
msgstr ""
20603
"Enter LDAP Password: \n"
20604
"<placeholder-1/>\n"
20605
"\n"
20606
"modifying entry \"olcDatabase={1}hdb,cn=config\"\n"
20607
20608
#: serverguide/C/network-auth.xml:2804(para)
20609
msgid ""
20610
"That's it, your LDAP directory is now ready to serve as a Kerberos principal "
20611
"database."
20612
msgstr ""
20613
"That's it, your LDAP directory is now ready to serve as a Kerberos principal "
20614
"database."
20615
20616
#: serverguide/C/network-auth.xml:2810(title)
20617
msgid "Primary KDC Configuration"
20618
msgstr "Primary KDC Configuration"
20619
20620
#: serverguide/C/network-auth.xml:2812(para)
20621
msgid ""
20622
"With <application>OpenLDAP</application> configured it is time to configure "
20623
"the KDC."
20624
msgstr ""
20625
"With <application>OpenLDAP</application> configured it is time to configure "
20626
"the KDC."
20627
20628
#: serverguide/C/network-auth.xml:2818(para)
20629
msgid "First, install the necessary packages, from a terminal enter:"
20630
msgstr "First, install the necessary packages, from a terminal enter:"
20631
20632
#: serverguide/C/network-auth.xml:2823(command) serverguide/C/network-auth.xml:2980(command)
20633
msgid "sudo apt-get install krb5-kdc krb5-admin-server krb5-kdc-ldap"
20634
msgstr "sudo apt-get install krb5-kdc krb5-admin-server krb5-kdc-ldap"
20635
20636
#: serverguide/C/network-auth.xml:2829(para)
20637
msgid ""
20638
"Now edit <filename>/etc/krb5.conf</filename> adding the following options to "
20639
"under the appropriate sections:"
20640
msgstr ""
20641
"Now edit <filename>/etc/krb5.conf</filename> adding the following options to "
20642
"under the appropriate sections:"
20643
20644
#: serverguide/C/network-auth.xml:2833(programlisting)
20645
#, no-wrap
20646
msgid ""
20647
"\n"
20648
"[libdefaults]\n"
20649
" default_realm = EXAMPLE.COM\n"
20650
"\n"
20651
"...\n"
20652
"\n"
20653
"[realms]\n"
20654
" EXAMPLE.COM = {\n"
20655
" kdc = kdc01.example.com\n"
20656
" kdc = kdc02.example.com\n"
20657
" admin_server = kdc01.example.com\n"
20658
" admin_server = kdc02.example.com\n"
20659
" default_domain = example.com\n"
20660
" database_module = openldap_ldapconf\n"
20661
" }\n"
20662
"\n"
20663
"...\n"
20664
"\n"
20665
"[domain_realm]\n"
20666
" .example.com = EXAMPLE.COM\n"
20667
"\n"
20668
"\n"
20669
"...\n"
20670
"\n"
20671
"[dbdefaults]\n"
20672
" ldap_kerberos_container_dn = dc=example,dc=com\n"
20673
"\n"
20674
"[dbmodules]\n"
20675
" openldap_ldapconf = {\n"
20676
" db_library = kldap\n"
20677
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
20678
"\n"
20679
" # this object needs to have read rights on\n"
20680
" # the realm container, principal container and realm sub-"
20681
"trees\n"
20682
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
20683
"\n"
20684
" # this object needs to have read and write rights on\n"
20685
" # the realm container, principal container and realm sub-"
20686
"trees\n"
20687
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
20688
" ldap_servers = ldaps://ldap01.example.com "
20689
"ldaps://ldap02.example.com\n"
20690
" ldap_conns_per_server = 5\n"
20691
" }\n"
20692
msgstr ""
20693
"\n"
20694
"[libdefaults]\n"
20695
" default_realm = EXAMPLE.COM\n"
20696
"\n"
20697
"...\n"
20698
"\n"
20699
"[realms]\n"
20700
" EXAMPLE.COM = {\n"
20701
" kdc = kdc01.example.com\n"
20702
" kdc = kdc02.example.com\n"
20703
" admin_server = kdc01.example.com\n"
20704
" admin_server = kdc02.example.com\n"
20705
" default_domain = example.com\n"
20706
" database_module = openldap_ldapconf\n"
20707
" }\n"
20708
"\n"
20709
"...\n"
20710
"\n"
20711
"[domain_realm]\n"
20712
" .example.com = EXAMPLE.COM\n"
20713
"\n"
20714
"\n"
20715
"...\n"
20716
"\n"
20717
"[dbdefaults]\n"
20718
" ldap_kerberos_container_dn = dc=example,dc=com\n"
20719
"\n"
20720
"[dbmodules]\n"
20721
" openldap_ldapconf = {\n"
20722
" db_library = kldap\n"
20723
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
20724
"\n"
20725
" # this object needs to have read rights on\n"
20726
" # the realm container, principal container and realm sub-"
20727
"trees\n"
20728
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
20729
"\n"
20730
" # this object needs to have read and write rights on\n"
20731
" # the realm container, principal container and realm sub-"
20732
"trees\n"
20733
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
20734
" ldap_servers = ldaps://ldap01.example.com "
20735
"ldaps://ldap02.example.com\n"
20736
" ldap_conns_per_server = 5\n"
20737
" }\n"
20738
20739
#: serverguide/C/network-auth.xml:2878(para)
20740
msgid ""
20741
"Change <emphasis>example.com</emphasis>, "
20742
"<emphasis>dc=example,dc=com</emphasis>, "
20743
"<emphasis>cn=admin,dc=example,dc=com</emphasis>, and "
20744
"<emphasis>ldap01.example.com</emphasis> to the appropriate domain, LDAP "
20745
"object, and LDAP server for your network."
20746
msgstr ""
20747
"Change <emphasis>example.com</emphasis>, "
20748
"<emphasis>dc=example,dc=com</emphasis>, "
20749
"<emphasis>cn=admin,dc=example,dc=com</emphasis>, and "
20750
"<emphasis>ldap01.example.com</emphasis> to the appropriate domain, LDAP "
20751
"object, and LDAP server for your network."
20752
20753
#: serverguide/C/network-auth.xml:2887(para)
20754
msgid ""
20755
"Next, use the <application>kdb5_ldap_util</application> utility to create "
20756
"the realm:"
20757
msgstr ""
20758
"Next, use the <application>kdb5_ldap_util</application> utility to create "
20759
"the realm:"
20760
20761
#: serverguide/C/network-auth.xml:2892(command)
20762
msgid ""
20763
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees "
20764
"dc=example,dc=com -r EXAMPLE.COM -s -H ldap://ldap01.example.com"
20765
msgstr ""
20766
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com create -subtrees "
20767
"dc=example,dc=com -r EXAMPLE.COM -s -H ldap://ldap01.example.com"
20768
20769
#: serverguide/C/network-auth.xml:2898(para)
20770
msgid ""
20771
"Create a stash of the password used to bind to the LDAP server. This "
20772
"password is used by the <emphasis>ldap_kdc_dn</emphasis> and "
20773
"<emphasis>ldap_kadmin_dn</emphasis> options in "
20774
"<filename>/etc/krb5.conf</filename>:"
20775
msgstr ""
20776
"Create a stash of the password used to bind to the LDAP server. This "
20777
"password is used by the <emphasis>ldap_kdc_dn</emphasis> and "
20778
"<emphasis>ldap_kadmin_dn</emphasis> options in "
20779
"<filename>/etc/krb5.conf</filename>:"
20780
20781
#: serverguide/C/network-auth.xml:2904(command) serverguide/C/network-auth.xml:3042(command)
20782
msgid ""
20783
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com stashsrvpw -f "
20784
"/etc/krb5kdc/service.keyfile cn=admin,dc=example,dc=com"
20785
msgstr ""
20786
"sudo kdb5_ldap_util -D cn=admin,dc=example,dc=com stashsrvpw -f "
20787
"/etc/krb5kdc/service.keyfile cn=admin,dc=example,dc=com"
20788
20789
#: serverguide/C/network-auth.xml:2910(para)
20790
msgid "Copy the CA certificate from the LDAP server:"
20791
msgstr "Copy the CA certificate from the LDAP server:"
20792
20793
#: serverguide/C/network-auth.xml:2915(command)
20794
msgid "scp ldap01:/etc/ssl/certs/cacert.pem ."
20795
msgstr "scp ldap01:/etc/ssl/certs/cacert.pem ."
20796
20797
#: serverguide/C/network-auth.xml:2916(command)
20798
msgid "sudo cp cacert.pem /etc/ssl/certs"
20799
msgstr "sudo cp cacert.pem /etc/ssl/certs"
20800
20801
#: serverguide/C/network-auth.xml:2919(para)
20802
msgid ""
20803
"And edit <filename>/etc/ldap/ldap.conf</filename> to use the certificate:"
20804
msgstr ""
20805
"And edit <filename>/etc/ldap/ldap.conf</filename> to use the certificate:"
20806
20807
#: serverguide/C/network-auth.xml:2923(programlisting)
20808
#, no-wrap
20809
msgid ""
20810
"\n"
20811
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
20812
msgstr ""
20813
"\n"
20814
"TLS_CACERT /etc/ssl/certs/cacert.pem\n"
20815
20816
#: serverguide/C/network-auth.xml:2928(para)
20817
msgid ""
20818
"The certificate will also need to be copied to the Secondary KDC, to allow "
20819
"the connection to the LDAP servers using LDAPS."
20820
msgstr ""
20821
"The certificate will also need to be copied to the Secondary KDC, to allow "
20822
"the connection to the LDAP servers using LDAPS."
20823
20824
#: serverguide/C/network-auth.xml:2937(para)
20825
msgid ""
20826
"You can now add Kerberos principals to the LDAP database, and they will be "
20827
"copied to any other LDAP servers configured for replication. To add a "
20828
"principal using the <application>kadmin.local</application> utility enter:"
20829
msgstr ""
20830
"You can now add Kerberos principals to the LDAP database, and they will be "
20831
"copied to any other LDAP servers configured for replication. To add a "
20832
"principal using the <application>kadmin.local</application> utility enter:"
20833
20834
#: serverguide/C/network-auth.xml:2945(userinput)
20835
#, no-wrap
20836
msgid "addprinc -x dn=\"uid=steve,ou=people,dc=example,dc=com\" steve"
20837
msgstr "addprinc -x dn=\"uid=steve,ou=people,dc=example,dc=com\" steve"
20838
20839
#: serverguide/C/network-auth.xml:2944(computeroutput)
20840
#, no-wrap
20841
msgid ""
20842
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
20843
"kadmin.local: <placeholder-1/>\n"
20844
"WARNING: no policy specified for steve@EXAMPLE.COM; defaulting to no policy\n"
20845
"Enter password for principal \"steve@EXAMPLE.COM\": \n"
20846
"Re-enter password for principal \"steve@EXAMPLE.COM\": \n"
20847
"Principal \"steve@EXAMPLE.COM\" created."
20848
msgstr ""
20849
"Authenticating as principal root/admin@EXAMPLE.COM with password.\n"
20850
"kadmin.local: <placeholder-1/>\n"
20851
"WARNING: no policy specified for steve@EXAMPLE.COM; defaulting to no policy\n"
20852
"Enter password for principal \"steve@EXAMPLE.COM\": \n"
20853
"Re-enter password for principal \"steve@EXAMPLE.COM\": \n"
20854
"Principal \"steve@EXAMPLE.COM\" created."
20855
20856
#: serverguide/C/network-auth.xml:2952(para)
20857
msgid ""
20858
"There should now be krbPrincipalName, krbPrincipalKey, krbLastPwdChange, and "
20859
"krbExtraData attributes added to the "
20860
"<emphasis>uid=steve,ou=people,dc=example,dc=com</emphasis> user object. Use "
20861
"the <application>kinit</application> and <application>klist</application> "
20862
"utilities to test that the user is indeed issued a ticket."
20863
msgstr ""
20864
"There should now be krbPrincipalName, krbPrincipalKey, krbLastPwdChange, and "
20865
"krbExtraData attributes added to the "
20866
"<emphasis>uid=steve,ou=people,dc=example,dc=com</emphasis> user object. Use "
20867
"the <application>kinit</application> and <application>klist</application> "
20868
"utilities to test that the user is indeed issued a ticket."
20869
20870
#: serverguide/C/network-auth.xml:2959(para)
20871
msgid ""
20872
"If the user object is already created the <emphasis>-x dn=\"...\"</emphasis> "
20873
"option is needed to add the Kerberos attributes. Otherwise a new "
20874
"<emphasis>principal</emphasis> object will be created in the realm subtree."
20875
msgstr ""
20876
"If the user object is already created the <emphasis>-x dn=\"...\"</emphasis> "
20877
"option is needed to add the Kerberos attributes. Otherwise a new "
20878
"<emphasis>principal</emphasis> object will be created in the realm subtree."
20879
20880
#: serverguide/C/network-auth.xml:2967(title)
20881
msgid "Secondary KDC Configuration"
20882
msgstr "Secondary KDC Configuration"
20883
20884
#: serverguide/C/network-auth.xml:2969(para)
20885
msgid ""
20886
"Configuring a Secondary KDC using the LDAP backend is similar to configuring "
20887
"one using the normal Kerberos database."
20888
msgstr ""
20889
"Configuring a Secondary KDC using the LDAP backend is similar to configuring "
20890
"one using the normal Kerberos database."
20891
20892
#: serverguide/C/network-auth.xml:2975(para)
20893
msgid "First, install the necessary packages. In a terminal enter:"
20894
msgstr "First, install the necessary packages. In a terminal enter:"
20895
20896
#: serverguide/C/network-auth.xml:2986(para)
20897
msgid ""
20898
"Next, edit <filename>/etc/krb5.conf</filename> to use the LDAP backend:"
20899
msgstr ""
20900
"Next, edit <filename>/etc/krb5.conf</filename> to use the LDAP backend:"
20901
20902
#: serverguide/C/network-auth.xml:2990(programlisting)
20903
#, no-wrap
20904
msgid ""
20905
"\n"
20906
"[libdefaults]\n"
20907
" default_realm = EXAMPLE.COM\n"
20908
"\n"
20909
"...\n"
20910
"\n"
20911
"[realms]\n"
20912
" EXAMPLE.COM = {\n"
20913
" kdc = kdc01.example.com\n"
20914
" kdc = kdc02.example.com\n"
20915
" admin_server = kdc01.example.com\n"
20916
" admin_server = kdc02.example.com\n"
20917
" default_domain = example.com\n"
20918
" database_module = openldap_ldapconf\n"
20919
" }\n"
20920
"\n"
20921
"...\n"
20922
"\n"
20923
"[domain_realm]\n"
20924
" .example.com = EXAMPLE.COM\n"
20925
"\n"
20926
"...\n"
20927
"\n"
20928
"[dbdefaults]\n"
20929
" ldap_kerberos_container_dn = dc=example,dc=com\n"
20930
"\n"
20931
"[dbmodules]\n"
20932
" openldap_ldapconf = {\n"
20933
" db_library = kldap\n"
20934
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
20935
"\n"
20936
" # this object needs to have read rights on\n"
20937
" # the realm container, principal container and realm sub-"
20938
"trees\n"
20939
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
20940
"\n"
20941
" # this object needs to have read and write rights on\n"
20942
" # the realm container, principal container and realm sub-"
20943
"trees\n"
20944
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
20945
" ldap_servers = ldaps://ldap01.example.com "
20946
"ldaps://ldap02.example.com\n"
20947
" ldap_conns_per_server = 5\n"
20948
" }\n"
20949
msgstr ""
20950
"\n"
20951
"[libdefaults]\n"
20952
" default_realm = EXAMPLE.COM\n"
20953
"\n"
20954
"...\n"
20955
"\n"
20956
"[realms]\n"
20957
" EXAMPLE.COM = {\n"
20958
" kdc = kdc01.example.com\n"
20959
" kdc = kdc02.example.com\n"
20960
" admin_server = kdc01.example.com\n"
20961
" admin_server = kdc02.example.com\n"
20962
" default_domain = example.com\n"
20963
" database_module = openldap_ldapconf\n"
20964
" }\n"
20965
"\n"
20966
"...\n"
20967
"\n"
20968
"[domain_realm]\n"
20969
" .example.com = EXAMPLE.COM\n"
20970
"\n"
20971
"...\n"
20972
"\n"
20973
"[dbdefaults]\n"
20974
" ldap_kerberos_container_dn = dc=example,dc=com\n"
20975
"\n"
20976
"[dbmodules]\n"
20977
" openldap_ldapconf = {\n"
20978
" db_library = kldap\n"
20979
" ldap_kdc_dn = \"cn=admin,dc=example,dc=com\"\n"
20980
"\n"
20981
" # this object needs to have read rights on\n"
20982
" # the realm container, principal container and realm sub-"
20983
"trees\n"
20984
" ldap_kadmind_dn = \"cn=admin,dc=example,dc=com\"\n"
20985
"\n"
20986
" # this object needs to have read and write rights on\n"
20987
" # the realm container, principal container and realm sub-"
20988
"trees\n"
20989
" ldap_service_password_file = /etc/krb5kdc/service.keyfile\n"
20990
" ldap_servers = ldaps://ldap01.example.com "
20991
"ldaps://ldap02.example.com\n"
20992
" ldap_conns_per_server = 5\n"
20993
" }\n"
20994
20995
#: serverguide/C/network-auth.xml:3037(para)
20996
msgid "Create the stash for the LDAP bind password:"
20997
msgstr "Create the stash for the LDAP bind password:"
20998
20999
#: serverguide/C/network-auth.xml:3048(para)
21000
msgid ""
21001
"Now, on the <emphasis>Primary KDC</emphasis> copy the "
21002
"<filename>/etc/krb5kdc/.k5.EXAMPLE.COM</filename><emphasis>Master "
21003
"Key</emphasis> stash to the Secondary KDC. Be sure to copy the file over an "
21004
"encrypted connection such as <application>scp</application>, or on physical "
21005
"media."
21006
msgstr ""
21007
"Now, on the <emphasis>Primary KDC</emphasis> copy the "
21008
"<filename>/etc/krb5kdc/.k5.EXAMPLE.COM</filename><emphasis>Master "
21009
"Key</emphasis> stash to the Secondary KDC. Be sure to copy the file over an "
21010
"encrypted connection such as <application>scp</application>, or on physical "
21011
"media."
21012
21013
#: serverguide/C/network-auth.xml:3055(command)
21014
msgid "sudo scp /etc/krb5kdc/.k5.EXAMPLE.COM steve@kdc02.example.com:~"
21015
msgstr "sudo scp /etc/krb5kdc/.k5.EXAMPLE.COM steve@kdc02.example.com:~"
21016
21017
#: serverguide/C/network-auth.xml:3056(command)
21018
msgid "sudo mv .k5.EXAMPLE.COM /etc/krb5kdc/"
21019
msgstr "sudo mv .k5.EXAMPLE.COM /etc/krb5kdc/"
21020
21021
#: serverguide/C/network-auth.xml:3060(para)
21022
msgid ""
21023
"Again, replace <emphasis>EXAMPLE.COM</emphasis> with your actual realm."
21024
msgstr ""
21025
"Again, replace <emphasis>EXAMPLE.COM</emphasis> with your actual realm."
21026
21027
#: serverguide/C/network-auth.xml:3068(para)
21028
msgid "Finally, start the <application>krb5-kdc</application> daemon:"
21029
msgstr "Finally, start the <application>krb5-kdc</application> daemon:"
21030
21031
#: serverguide/C/network-auth.xml:3079(para)
21032
msgid ""
21033
"You now have redundant KDCs on your network, and with redundant LDAP servers "
21034
"you should be able to continue to authenticate users if one LDAP server, one "
21035
"Kerberos server, or one LDAP and one Kerberos server become unavailable."
21036
msgstr ""
21037
"You now have redundant KDCs on your network, and with redundant LDAP servers "
21038
"you should be able to continue to authenticate users if one LDAP server, one "
21039
"Kerberos server, or one LDAP and one Kerberos server become unavailable."
21040
21041
#: serverguide/C/network-auth.xml:3091(para)
21042
msgid ""
21043
"The <ulink url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
21044
"admin.html#Configuring-Kerberos-with-OpenLDAP-back_002dend\"> Kerberos Admin "
21045
"Guide</ulink> has some additional details."
21046
msgstr ""
21047
"The <ulink url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
21048
"admin.html#Configuring-Kerberos-with-OpenLDAP-back_002dend\"> Kerberos Admin "
21049
"Guide</ulink> has some additional details."
21050
21051
#: serverguide/C/network-auth.xml:3097(para)
21052
msgid ""
21053
"For more information on <application>kdb5_ldap_util</application> see <ulink "
21054
"url=\"http://web.mit.edu/Kerberos/krb5-1.6/krb5-1.6.3/doc/krb5-"
21055
"admin.html#Global-Operations-on-the-Kerberos-LDAP-Database\"> Section "
21056
"5.6</ulink> and the <ulink "
21057
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/kdb5_ldap_util.8.html"
21058
"\">kdb5_ldap_util man page</ulink>."
21059
msgstr ""
21060
21061
#: serverguide/C/network-auth.xml:3105(para)
21062
msgid ""
21063
"Another useful link is the <ulink "
21064
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/krb5.conf.5.html\">kr"
21065
"b5.conf man page</ulink>."
21066
msgstr ""
21067
21068
#: serverguide/C/network-auth.xml:3110(para)
21069
msgid ""
21070
"Also, see the <ulink "
21071
"url=\"https://help.ubuntu.com/community/Kerberos#kerberos-ldap\">Kerberos "
21072
"and LDAP</ulink> Ubuntu wiki page."
21073
msgstr ""
21074
21075
#: serverguide/C/monitoring.xml:13(title)
21076
msgid "Monitoring"
21077
msgstr "Monitoring"
21078
21079
#: serverguide/C/monitoring.xml:17(para)
21080
msgid ""
21081
"The monitoring of essential servers and services is an important part of "
21082
"system administration. Most network services are monitored for performance, "
21083
"availability, or both. This section will cover installation and "
21084
"configuration of <application>Nagios</application> for availability "
21085
"monitoring, and <application>Munin</application> for performance monitoring."
21086
msgstr ""
21087
"The monitoring of essential servers and services is an important part of "
21088
"system administration. Most network services are monitored for performance, "
21089
"availability, or both. This section will cover installation and "
21090
"configuration of <application>Nagios</application> for availability "
21091
"monitoring, and <application>Munin</application> for performance monitoring."
21092
21093
#: serverguide/C/monitoring.xml:24(para)
21094
msgid ""
21095
"The examples in this section will use two servers with hostnames "
21096
"<emphasis>server01</emphasis> and <emphasis>server02</emphasis>. "
21097
"<emphasis>Server01</emphasis> will be configured with "
21098
"<application>Nagios</application> to monitor services on itself and "
21099
"<emphasis>server02</emphasis>. Server01 will also be setup with the "
21100
"<application>munin</application> package to gather information from the "
21101
"network. Using the <application>munin-node</application> package, "
21102
"<emphasis>server02</emphasis> will be configured to send information to "
21103
"<emphasis>server01</emphasis>."
21104
msgstr ""
21105
"The examples in this section will use two servers with hostnames "
21106
"<emphasis>server01</emphasis> and <emphasis>server02</emphasis>. "
21107
"<emphasis>Server01</emphasis> will be configured with "
21108
"<application>Nagios</application> to monitor services on itself and "
21109
"<emphasis>server02</emphasis>. Server01 will also be setup with the "
21110
"<application>munin</application> package to gather information from the "
21111
"network. Using the <application>munin-node</application> package, "
21112
"<emphasis>server02</emphasis> will be configured to send information to "
21113
"<emphasis>server01</emphasis>."
21114
21115
#: serverguide/C/monitoring.xml:33(para)
21116
msgid ""
21117
"Hopefully these simple examples will allow you to monitor additional servers "
21118
"and services on your network."
21119
msgstr ""
21120
"Hopefully these simple examples will allow you to monitor additional servers "
21121
"and services on your network."
21122
21123
#: serverguide/C/monitoring.xml:39(title)
21124
msgid "Nagios"
21125
msgstr "Nagios"
21126
21127
#: serverguide/C/monitoring.xml:44(para)
21128
msgid ""
21129
"First, on <emphasis>server01</emphasis> install the "
21130
"<application>nagios</application> package. In a terminal enter:"
21131
msgstr ""
21132
"First, on <emphasis>server01</emphasis> install the "
21133
"<application>nagios</application> package. In a terminal enter:"
21134
21135
#: serverguide/C/monitoring.xml:50(command)
21136
msgid "sudo apt-get install nagios3 nagios-nrpe-plugin"
21137
msgstr "sudo apt-get install nagios3 nagios-nrpe-plugin"
21138
21139
#: serverguide/C/monitoring.xml:53(para)
21140
msgid ""
21141
"You will be asked to enter a password for the "
21142
"<emphasis>nagiosadmin</emphasis> user. The user's credentials are stored in "
21143
"<filename>/etc/nagios3/htpasswd.users</filename>. To change the "
21144
"<emphasis>nagiosadmin</emphasis> password, or add additional users to the "
21145
"Nagios CGI scripts, use the <application>htpasswd</application> that is part "
21146
"of the <application>apache2-utils</application> package."
21147
msgstr ""
21148
"You will be asked to enter a password for the "
21149
"<emphasis>nagiosadmin</emphasis> user. The user's credentials are stored in "
21150
"<filename>/etc/nagios3/htpasswd.users</filename>. To change the "
21151
"<emphasis>nagiosadmin</emphasis> password, or add additional users to the "
21152
"Nagios CGI scripts, use the <application>htpasswd</application> that is part "
21153
"of the <application>apache2-utils</application> package."
21154
21155
#: serverguide/C/monitoring.xml:60(para)
21156
msgid ""
21157
"For example, to change the password for the <emphasis>nagiosadmin</emphasis> "
21158
"user enter:"
21159
msgstr ""
21160
"For example, to change the password for the <emphasis>nagiosadmin</emphasis> "
21161
"user enter:"
21162
21163
#: serverguide/C/monitoring.xml:65(command)
21164
msgid "sudo htpasswd /etc/nagios3/htpasswd.users nagiosadmin"
21165
msgstr "sudo htpasswd /etc/nagios3/htpasswd.users nagiosadmin"
21166
21167
#: serverguide/C/monitoring.xml:68(para)
21168
msgid "To add a user:"
21169
msgstr "To add a user:"
21170
21171
#: serverguide/C/monitoring.xml:73(command)
21172
msgid "sudo htpasswd /etc/nagios3/htpasswd.users steve"
21173
msgstr "sudo htpasswd /etc/nagios3/htpasswd.users steve"
21174
21175
#: serverguide/C/monitoring.xml:76(para)
21176
msgid ""
21177
"Next, on <emphasis>server02</emphasis> install the <application>nagios-nrpe-"
21178
"server</application> package. From a terminal on server02 enter:"
21179
msgstr ""
21180
"Next, on <emphasis>server02</emphasis> install the <application>nagios-nrpe-"
21181
"server</application> package. From a terminal on server02 enter:"
21182
21183
#: serverguide/C/monitoring.xml:82(command)
21184
msgid "sudo apt-get install nagios-nrpe-server"
21185
msgstr "sudo apt-get install nagios-nrpe-server"
21186
21187
#: serverguide/C/monitoring.xml:86(para)
21188
msgid ""
21189
"<application>NRPE</application> allows you to execute local checks on remote "
21190
"hosts. There are other ways of accomplishing this through other Nagios "
21191
"plugins as well as other checks."
21192
msgstr ""
21193
"<application>NRPE</application> allows you to execute local checks on remote "
21194
"hosts. There are other ways of accomplishing this through other Nagios plug-"
21195
"ins as well as other checks."
21196
21197
#: serverguide/C/monitoring.xml:94(title)
21198
msgid "Configuration Overview"
21199
msgstr "Configuration Overview"
21200
21201
#: serverguide/C/monitoring.xml:96(para)
21202
msgid ""
21203
"There are a couple of directories containing "
21204
"<application>Nagios</application> configuration and check files."
21205
msgstr ""
21206
"There are a couple of directories containing "
21207
"<application>Nagios</application> configuration and check files."
21208
21209
#: serverguide/C/monitoring.xml:102(para)
21210
msgid ""
21211
"<filename>/etc/nagios3</filename>: contains configuration files for the "
21212
"operation of the <application>nagios</application> daemon, CGI files, hosts, "
21213
"etc."
21214
msgstr ""
21215
"<filename>/etc/nagios3</filename>: contains configuration files for the "
21216
"operation of the <application>nagios</application> daemon, CGI files, hosts, "
21217
"etc."
21218
21219
#: serverguide/C/monitoring.xml:108(para)
21220
msgid ""
21221
"<filename>/etc/nagios-plugins</filename>: houses configuration files for the "
21222
"service checks."
21223
msgstr ""
21224
"<filename>/etc/nagios-plugins</filename>: houses configuration files for the "
21225
"service checks."
21226
21227
#: serverguide/C/monitoring.xml:113(para)
21228
msgid ""
21229
"<filename>/etc/nagios</filename>: on the remote host contains the "
21230
"<application>nagios-nrpe-server</application> configuration files."
21231
msgstr ""
21232
"<filename>/etc/nagios</filename>: on the remote host contains the "
21233
"<application>nagios-nrpe-server</application> configuration files."
21234
21235
#: serverguide/C/monitoring.xml:118(para)
21236
msgid ""
21237
"<filename>/usr/lib/nagios/plugins/</filename>: where the check binaries are "
21238
"stored. To see the options of a check use the <emphasis>-h</emphasis> option."
21239
msgstr ""
21240
"<filename>/usr/lib/nagios/plugins/</filename>: where the check binaries are "
21241
"stored. To see the options of a check use the <emphasis>-h</emphasis> option."
21242
21243
#: serverguide/C/monitoring.xml:123(para)
21244
msgid "For example: <command>/usr/lib/nagios/plugins/check_dhcp -h</command>"
21245
msgstr ""
21246
"For example: <command>/usr/lib/nagios/plugins/check_dhcp -h</command>"
21247
21248
#: serverguide/C/monitoring.xml:129(para)
21249
msgid ""
21250
"There are a plethora of checks <application>Nagios</application> can be "
21251
"configured to execute for any given host. For this example Nagios will be "
21252
"configured to check disk space, DNS, and a MySQL hostgroup. The DNS check "
21253
"will be on <emphasis>server02</emphasis>, and the MySQL hostgroup will "
21254
"include both <emphasis>server01</emphasis> and <emphasis>server02</emphasis>."
21255
msgstr ""
21256
"There are a plethora of checks <application>Nagios</application> can be "
21257
"configured to execute for any given host. For this example Nagios will be "
21258
"configured to check disk space, DNS, and a MySQL hostgroup. The DNS check "
21259
"will be on <emphasis>server02</emphasis>, and the MySQL hostgroup will "
21260
"include both <emphasis>server01</emphasis> and <emphasis>server02</emphasis>."
21261
21262
#: serverguide/C/monitoring.xml:136(para)
21263
msgid ""
21264
"See <xref linkend=\"httpd\"/> for details on setting up Apache, <xref "
21265
"linkend=\"dns\"/> for DNS, and <xref linkend=\"mysql\"/> for MySQL."
21266
msgstr ""
21267
"See <xref linkend=\"httpd\"/> for details on setting up Apache, <xref "
21268
"linkend=\"dns\"/> for DNS, and <xref linkend=\"mysql\"/> for MySQL."
21269
21270
#: serverguide/C/monitoring.xml:141(para)
21271
msgid ""
21272
"Additionally, there are some terms that once explained will hopefully make "
21273
"understanding Nagios configuration easier:"
21274
msgstr ""
21275
"Additionally, there are some terms that once explained will hopefully make "
21276
"understanding Nagios configuration easier:"
21277
21278
#: serverguide/C/monitoring.xml:147(para)
21279
msgid ""
21280
"<emphasis>Host</emphasis>: a server, workstation, network device, etc that "
21281
"is being monitored."
21282
msgstr ""
21283
"<emphasis>Host</emphasis>: a server, workstation, network device, etc that "
21284
"is being monitored."
21285
21286
#: serverguide/C/monitoring.xml:152(para)
21287
msgid ""
21288
"<emphasis>Host Group</emphasis>: a group of similar hosts. For example, you "
21289
"could group all web servers, file server, etc."
21290
msgstr ""
21291
"<emphasis>Host Group</emphasis>: a group of similar hosts. For example, you "
21292
"could group all web servers, file server, etc."
21293
21294
#: serverguide/C/monitoring.xml:157(para)
21295
msgid ""
21296
"<emphasis>Service</emphasis>: the service being monitored on the host. Such "
21297
"as HTTP, DNS, NFS, etc."
21298
msgstr ""
21299
"<emphasis>Service</emphasis>: the service being monitored on the host. Such "
21300
"as HTTP, DNS, NFS, etc."
21301
21302
#: serverguide/C/monitoring.xml:162(para)
21303
msgid ""
21304
"<emphasis>Service Group</emphasis>: allows you to group multiple services "
21305
"together. This is useful for grouping multiple HTTP for example."
21306
msgstr ""
21307
"<emphasis>Service Group</emphasis>: allows you to group multiple services "
21308
"together. This is useful for grouping multiple HTTP for example."
21309
21310
#: serverguide/C/monitoring.xml:168(para)
21311
msgid ""
21312
"<emphasis>Contact</emphasis>: person to be notified when an event takes "
21313
"place. Nagios can be configured to send emails, SMS messages, etc."
21314
msgstr ""
21315
"<emphasis>Contact</emphasis>: person to be notified when an event takes "
21316
"place. Nagios can be configured to send e-mails, SMS messages, etc."
21317
21318
#: serverguide/C/monitoring.xml:174(para)
21319
msgid ""
21320
"By default Nagios is configured to check HTTP, disk space, SSH, current "
21321
"users, processes, and load on the <emphasis>localhost</emphasis>. Nagios "
21322
"will also <application>ping</application> check the "
21323
"<emphasis>gateway</emphasis>."
21324
msgstr ""
21325
"By default Nagios is configured to check HTTP, disk space, SSH, current "
21326
"users, processes, and load on the <emphasis>localhost</emphasis>. Nagios "
21327
"will also <application>ping</application> check the "
21328
"<emphasis>gateway</emphasis>."
21329
21330
#: serverguide/C/monitoring.xml:179(para)
21331
msgid ""
21332
"Large Nagios installations can be quite complex to configure. It is usually "
21333
"best to start small, one or two hosts, get things configured the way you "
21334
"like then expand."
21335
msgstr ""
21336
"Large Nagios installations can be quite complex to configure. It is usually "
21337
"best to start small, one or two hosts, get things configured the way you "
21338
"like then expand."
21339
21340
#: serverguide/C/monitoring.xml:194(para)
21341
msgid ""
21342
"First, create a <emphasis>host</emphasis> configuration file for "
21343
"<emphasis>server02</emphasis>. In a terminal enter:"
21344
msgstr ""
21345
"First, create a <emphasis>host</emphasis> configuration file for "
21346
"<emphasis>server02</emphasis>. In a terminal enter:"
21347
21348
#: serverguide/C/monitoring.xml:199(command)
21349
msgid ""
21350
"sudo cp /etc/nagios3/conf.d/localhost_nagios2.cfg "
21351
"/etc/nagios3/conf.d/server02.cfg"
21352
msgstr ""
21353
"sudo cp /etc/nagios3/conf.d/localhost_nagios2.cfg "
21354
"/etc/nagios3/conf.d/server02.cfg"
21355
21356
#: serverguide/C/monitoring.xml:203(para)
21357
msgid ""
21358
"In the above and following command examples, replace "
21359
"<emphasis>\"server01\"</emphasis>, "
21360
"<emphasis>\"server02\"</emphasis><emphasis>172.18.100.100</emphasis>, and "
21361
"<emphasis>172.18.100.101</emphasis> with the host names and IP addresses of "
21362
"your servers."
21363
msgstr ""
21364
"In the above and following command examples, replace "
21365
"<emphasis>\"server01\"</emphasis>, "
21366
"<emphasis>\"server02\"</emphasis><emphasis>172.18.100.100</emphasis>, and "
21367
"<emphasis>172.18.100.101</emphasis> with the host names and IP addresses of "
21368
"your servers."
21369
21370
#: serverguide/C/monitoring.xml:212(para)
21371
msgid "Next, edit <filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
21372
msgstr "Next, edit <filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
21373
21374
#: serverguide/C/monitoring.xml:216(programlisting)
21375
#, no-wrap
21376
msgid ""
21377
"\n"
21378
"define host{\n"
21379
" use generic-host ; Name of host "
21380
"template to use\n"
21381
" host_name server02\n"
21382
" alias Server 02\n"
21383
" address 172.18.100.101\n"
21384
"}\n"
21385
"\n"
21386
"# check DNS service.\n"
21387
"define service {\n"
21388
" use generic-service\n"
21389
" host_name server02\n"
21390
" service_description DNS\n"
21391
" check_command check_dns!172.18.100.101\n"
21392
"}\n"
21393
msgstr ""
21394
"\n"
21395
"define host{\n"
21396
" use generic-host ; Name of host "
21397
"template to use\n"
21398
" host_name server02\n"
21399
" alias Server 02\n"
21400
" address 172.18.100.101\n"
21401
"}\n"
21402
"\n"
21403
"# check DNS service.\n"
21404
"define service {\n"
21405
" use generic-service\n"
21406
" host_name server02\n"
21407
" service_description DNS\n"
21408
" check_command check_dns!172.18.100.101\n"
21409
"}\n"
21410
21411
#: serverguide/C/monitoring.xml:236(para)
21412
msgid ""
21413
"Restart the <application>nagios</application> daemon to enable the new "
21414
"configuration:"
21415
msgstr ""
21416
"Restart the <application>nagios</application> daemon to enable the new "
21417
"configuration:"
21418
21419
#: serverguide/C/monitoring.xml:241(command) serverguide/C/monitoring.xml:308(command) serverguide/C/monitoring.xml:375(command)
21420
msgid "sudo /etc/init.d/nagios3 restart"
21421
msgstr "sudo /etc/init.d/nagios3 restart"
21422
21423
#: serverguide/C/monitoring.xml:251(para)
21424
msgid ""
21425
"Now add a service definition for the MySQL check by adding the following to "
21426
"<filename>/etc/nagios3/conf.d/services_nagios2.cfg</filename>:"
21427
msgstr ""
21428
"Now add a service definition for the MySQL check by adding the following to "
21429
"<filename>/etc/nagios3/conf.d/services_nagios2.cfg</filename>:"
21430
21431
#: serverguide/C/monitoring.xml:255(programlisting)
21432
#, no-wrap
21433
msgid ""
21434
"\n"
21435
"# check MySQL servers.\n"
21436
"define service {\n"
21437
" hostgroup_name mysql-servers\n"
21438
" service_description MySQL\n"
21439
" check_command "
21440
"check_mysql_cmdlinecred!nagios!secret!$HOSTADDRESS\n"
21441
" use generic-service\n"
21442
" notification_interval 0 ; set > 0 if you want to be "
21443
"renotified\n"
21444
"}\n"
21445
msgstr ""
21446
"\n"
21447
"# check MySQL servers.\n"
21448
"define service {\n"
21449
" hostgroup_name mysql-servers\n"
21450
" service_description MySQL\n"
21451
" check_command "
21452
"check_mysql_cmdlinecred!nagios!secret!$HOSTADDRESS\n"
21453
" use generic-service\n"
21454
" notification_interval 0 ; set > 0 if you want to be "
21455
"renotified\n"
21456
"}\n"
21457
21458
#: serverguide/C/monitoring.xml:269(para)
21459
msgid ""
21460
"A <emphasis>mysqsl-servers</emphasis> hostgroup now needs to be defined. "
21461
"Edit <filename>/etc/nagios3/conf.d/hostgroups_nagios2.cfg</filename> adding:"
21462
msgstr ""
21463
"A <emphasis>mysqsl-servers</emphasis> hostgroup now needs to be defined. "
21464
"Edit <filename>/etc/nagios3/conf.d/hostgroups_nagios2.cfg</filename> adding:"
21465
21466
#: serverguide/C/monitoring.xml:274(programlisting)
21467
#, no-wrap
21468
msgid ""
21469
"\n"
21470
"# MySQL hostgroup.\n"
21471
"define hostgroup {\n"
21472
" hostgroup_name mysql-servers\n"
21473
" alias MySQL servers\n"
21474
" members localhost, server02\n"
21475
" }\n"
21476
msgstr ""
21477
"\n"
21478
"# MySQL hostgroup.\n"
21479
"define hostgroup {\n"
21480
" hostgroup_name mysql-servers\n"
21481
" alias MySQL servers\n"
21482
" members localhost, server02\n"
21483
" }\n"
21484
21485
#: serverguide/C/monitoring.xml:286(para)
21486
msgid ""
21487
"The Nagios check needs to authenticate to MySQL. To add a "
21488
"<emphasis>nagios</emphasis> user to MySQL enter:"
21489
msgstr ""
21490
"The Nagios check needs to authenticate to MySQL. To add a "
21491
"<emphasis>nagios</emphasis> user to MySQL enter:"
21492
21493
#: serverguide/C/monitoring.xml:291(command)
21494
msgid "mysql -u root -p -e \"create user nagios identified by 'secret';\""
21495
msgstr "mysql -u root -p -e \"create user nagios identified by 'secret';\""
21496
21497
#: serverguide/C/monitoring.xml:295(para)
21498
msgid ""
21499
"The <emphasis>nagios</emphasis> user will need to be added all hosts in the "
21500
"<emphasis>mysql-servers</emphasis> hostgroup."
21501
msgstr ""
21502
"The <emphasis>nagios</emphasis> user will need to be added all hosts in the "
21503
"<emphasis>mysql-servers</emphasis> hostgroup."
21504
21505
#: serverguide/C/monitoring.xml:303(para)
21506
msgid ""
21507
"Restart <application>nagios</application> to start checking the MySQL "
21508
"servers."
21509
msgstr ""
21510
"Restart <application>nagios</application> to start checking the MySQL "
21511
"servers."
21512
21513
#: serverguide/C/monitoring.xml:318(para)
21514
msgid ""
21515
"Lastly configure NRPE to check the disk space on "
21516
"<emphasis>server02</emphasis>."
21517
msgstr ""
21518
"Lastly configure NRPE to check the disk space on "
21519
"<emphasis>server02</emphasis>."
21520
21521
#: serverguide/C/monitoring.xml:322(para)
21522
msgid ""
21523
"On <emphasis>server01</emphasis> add the service check to "
21524
"<filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
21525
msgstr ""
21526
"On <emphasis>server01</emphasis> add the service check to "
21527
"<filename>/etc/nagios3/conf.d/server02.cfg</filename>:"
21528
21529
#: serverguide/C/monitoring.xml:327(programlisting)
21530
#, no-wrap
21531
msgid ""
21532
"\n"
21533
"# NRPE disk check.\n"
21534
"define service {\n"
21535
" use generic-service\n"
21536
" host_name server02\n"
21537
" service_description nrpe-disk\n"
21538
" check_command "
21539
"check_nrpe_1arg!check_all_disks!172.18.100.101\n"
21540
"}\n"
21541
msgstr ""
21542
"\n"
21543
"# NRPE disk check.\n"
21544
"define service {\n"
21545
" use generic-service\n"
21546
" host_name server02\n"
21547
" service_description nrpe-disk\n"
21548
" check_command "
21549
"check_nrpe_1arg!check_all_disks!172.18.100.101\n"
21550
"}\n"
21551
21552
#: serverguide/C/monitoring.xml:340(para)
21553
msgid ""
21554
"Now on <emphasis>server02</emphasis> edit "
21555
"<filename>/etc/nagios/nrpe.cfg</filename> changing:"
21556
msgstr ""
21557
"Now on <emphasis>server02</emphasis> edit "
21558
"<filename>/etc/nagios/nrpe.cfg</filename> changing:"
21559
21560
#: serverguide/C/monitoring.xml:344(programlisting)
21561
#, no-wrap
21562
msgid ""
21563
"\n"
21564
"allowed_hosts=172.18.100.100\n"
21565
msgstr ""
21566
"\n"
21567
"allowed_hosts=172.18.100.100\n"
21568
21569
#: serverguide/C/monitoring.xml:348(para)
21570
msgid "And below in the command definition area add:"
21571
msgstr "And below in the command definition area add:"
21572
21573
#: serverguide/C/monitoring.xml:352(programlisting)
21574
#, no-wrap
21575
msgid ""
21576
"\n"
21577
"command[check_all_disks]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -"
21578
"e\n"
21579
msgstr ""
21580
"\n"
21581
"command[check_all_disks]=/usr/lib/nagios/plugins/check_disk -w 20% -c 10% -"
21582
"e\n"
21583
21584
#: serverguide/C/monitoring.xml:359(para)
21585
msgid "Finally, restart <application>nagios-nrpe-server</application>:"
21586
msgstr "Finally, restart <application>nagios-nrpe-server</application>:"
21587
21588
#: serverguide/C/monitoring.xml:364(command)
21589
msgid "sudo /etc/init.d/nagios-nrpe-server restart"
21590
msgstr "sudo /etc/init.d/nagios-nrpe-server restart"
21591
21592
#: serverguide/C/monitoring.xml:370(para)
21593
msgid ""
21594
"Also, on <emphasis>server01</emphasis> restart "
21595
"<application>nagios</application>:"
21596
msgstr ""
21597
"Also, on <emphasis>server01</emphasis> restart "
21598
"<application>nagios</application>:"
21599
21600
#: serverguide/C/monitoring.xml:383(para)
21601
msgid ""
21602
"You should now be able to see the host and service checks in the Nagios CGI "
21603
"files. To access them point a browser to http://server01/nagios3. You will "
21604
"then be prompted for the <emphasis>nagiosadmin</emphasis> username and "
21605
"password."
21606
msgstr ""
21607
"You should now be able to see the host and service checks in the Nagios CGI "
21608
"files. To access them point a browser to http://server01/nagios3. You will "
21609
"then be prompted for the <emphasis>nagiosadmin</emphasis> username and "
21610
"password."
21611
21612
#: serverguide/C/monitoring.xml:393(para)
21613
msgid ""
21614
"This section has just scratched the surface of Nagios' features. The "
21615
"<application>nagios-plugins-extra</application> and <application>nagios-snmp-"
21616
"plugins</application> contain many more service checks."
21617
msgstr ""
21618
"This section has just scratched the surface of Nagios' features. The "
21619
"<application>nagios-plugins-extra</application> and <application>nagios-snmp-"
21620
"plugins</application> contain many more service checks."
21621
21622
#: serverguide/C/monitoring.xml:400(para)
21623
msgid ""
21624
"For more information see <ulink "
21625
"url=\"http://www.nagios.org/\">Nagios</ulink> website."
21626
msgstr ""
21627
"For more information see <ulink "
21628
"url=\"http://www.nagios.org/\">Nagios</ulink> website."
21629
21630
#: serverguide/C/monitoring.xml:405(para)
21631
msgid ""
21632
"Specifically the <ulink "
21633
"url=\"http://nagios.sourceforge.net/docs/3_0/\">Online Documentation</ulink> "
21634
"site."
21635
msgstr ""
21636
"Specifically the <ulink "
21637
"url=\"http://nagios.sourceforge.net/docs/3_0/\">Online Documentation</ulink> "
21638
"site."
21639
21640
#: serverguide/C/monitoring.xml:410(para)
21641
msgid ""
21642
"There is also a list of <ulink "
21643
"url=\"http://www.nagios.org/propaganda/books/\">books</ulink> related to "
21644
"Nagios and network monitoring:"
21645
msgstr ""
21646
"There is also a list of <ulink "
21647
"url=\"http://www.nagios.org/propaganda/books/\">books</ulink> related to "
21648
"Nagios and network monitoring:"
21649
21650
#: serverguide/C/monitoring.xml:416(para)
21651
msgid ""
21652
"The <ulink url=\"https://help.ubuntu.com/community/Nagios\">Nagios Ubuntu "
21653
"Wiki</ulink> page also has more details."
21654
msgstr ""
21655
21656
#: serverguide/C/monitoring.xml:425(title)
21657
msgid "Munin"
21658
msgstr "Munin"
21659
21660
#: serverguide/C/monitoring.xml:430(para)
21661
msgid ""
21662
"Before installing <application>Munin</application> on "
21663
"<emphasis>server01</emphasis><application>apache2</application> will need to "
21664
"be installed. The default configuration is fine for running a "
21665
"<application>munin</application> server. For more information see <xref "
21666
"linkend=\"httpd\"/>."
21667
msgstr ""
21668
"Before installing <application>Munin</application> on "
21669
"<emphasis>server01</emphasis><application>apache2</application> will need to "
21670
"be installed. The default configuration is fine for running a "
21671
"<application>munin</application> server. For more information see <xref "
21672
"linkend=\"httpd\"/>."
21673
21674
#: serverguide/C/monitoring.xml:436(para)
21675
msgid ""
21676
"First, on <emphasis>server01</emphasis> install "
21677
"<application>munin</application>. In a terminal enter:"
21678
msgstr ""
21679
"First, on <emphasis>server01</emphasis> install "
21680
"<application>munin</application>. In a terminal enter:"
21681
21682
#: serverguide/C/monitoring.xml:441(command)
21683
msgid "sudo apt-get install munin"
21684
msgstr "sudo apt-get install munin"
21685
21686
#: serverguide/C/monitoring.xml:444(para)
21687
msgid ""
21688
"Now on <emphasis>server02</emphasis> install the <application>munin-"
21689
"node</application> package:"
21690
msgstr ""
21691
"Now on <emphasis>server02</emphasis> install the <application>munin-"
21692
"node</application> package:"
21693
21694
#: serverguide/C/monitoring.xml:449(command)
21695
msgid "sudo apt-get install munin-node"
21696
msgstr "sudo apt-get install munin-node"
21697
21698
#: serverguide/C/monitoring.xml:456(para)
21699
msgid ""
21700
"On <emphasis>server01</emphasis> edit the "
21701
"<filename>/etc/munin/munin.conf</filename> adding the IP address for "
21702
"<emphasis>server02</emphasis>:"
21703
msgstr ""
21704
"On <emphasis>server01</emphasis> edit the "
21705
"<filename>/etc/munin/munin.conf</filename> adding the IP address for "
21706
"<emphasis>server02</emphasis>:"
21707
21708
#: serverguide/C/monitoring.xml:461(programlisting)
21709
#, no-wrap
21710
msgid ""
21711
"\n"
21712
"## First our \"normal\" host.\n"
21713
"[server02]\n"
21714
" address 172.18.100.101\n"
21715
msgstr ""
21716
"\n"
21717
"## First our \"normal\" host.\n"
21718
"[server02]\n"
21719
" address 172.18.100.101\n"
21720
21721
#: serverguide/C/monitoring.xml:468(para)
21722
msgid ""
21723
"Replace <emphasis>server02</emphasis> and "
21724
"<emphasis>172.18.100.101</emphasis> with the actual hostname and IP address "
21725
"for your server."
21726
msgstr ""
21727
"Replace <emphasis>server02</emphasis> and "
21728
"<emphasis>172.18.100.101</emphasis> with the actual hostname and IP address "
21729
"for your server."
21730
21731
#: serverguide/C/monitoring.xml:474(para)
21732
msgid ""
21733
"Next, configure <application>munin-node</application> on "
21734
"<emphasis>server02</emphasis>. Edit <filename>/etc/munin/munin-"
21735
"node.conf</filename> to allow access by <emphasis>server01</emphasis>:"
21736
msgstr ""
21737
"Next, configure <application>munin-node</application> on "
21738
"<emphasis>server02</emphasis>. Edit <filename>/etc/munin/munin-"
21739
"node.conf</filename> to allow access by <emphasis>server01</emphasis>:"
21740
21741
#: serverguide/C/monitoring.xml:479(programlisting)
21742
#, no-wrap
21743
msgid ""
21744
"\n"
21745
"allow ^172\\.18\\.100\\.100$\n"
21746
msgstr ""
21747
"\n"
21748
"allow ^172\\.18\\.100\\.100$\n"
21749
21750
#: serverguide/C/monitoring.xml:484(para)
21751
msgid ""
21752
"Replace <emphasis>^172\\.18\\.100\\.100$</emphasis> with IP address for your "
21753
"<application>munin</application> server."
21754
msgstr ""
21755
"Replace <emphasis>^172\\.18\\.100\\.100$</emphasis> with IP address for your "
21756
"<application>munin</application> server."
21757
21758
#: serverguide/C/monitoring.xml:489(para)
21759
msgid ""
21760
"Now restart <application>munin-node</application> on "
21761
"<emphasis>server02</emphasis> for the changes to take effect:"
21762
msgstr ""
21763
"Now restart <application>munin-node</application> on "
21764
"<emphasis>server02</emphasis> for the changes to take effect:"
21765
21766
#: serverguide/C/monitoring.xml:494(command)
21767
msgid "sudo /etc/init.d/munin-node restart"
21768
msgstr "sudo /etc/init.d/munin-node restart"
21769
21770
#: serverguide/C/monitoring.xml:497(para)
21771
msgid ""
21772
"Finally, in a browser go to <emphasis>http://server01/munin</emphasis>, and "
21773
"you should see links to nice graphs displaying information from the standard "
21774
"<emphasis>munin-plugins</emphasis> for disk, network, processes, and system."
21775
msgstr ""
21776
"Finally, in a browser go to <emphasis>http://server01/munin</emphasis>, and "
21777
"you should see links to nice graphs displaying information from the standard "
21778
"<emphasis>munin-plugins</emphasis> for disk, network, processes, and system."
21779
21780
#: serverguide/C/monitoring.xml:503(para)
21781
msgid ""
21782
"Since this is a new install it may take some time for the graphs to display "
21783
"anything useful."
21784
msgstr ""
21785
"Since this is a new install it may take some time for the graphs to display "
21786
"anything useful."
21787
21788
#: serverguide/C/monitoring.xml:510(title)
21789
msgid "Additional Plugins"
21790
msgstr "Additional Plug-ins"
21791
21792
#: serverguide/C/monitoring.xml:512(para)
21793
msgid ""
21794
"The <application>munin-plugins-extra</application> package contains "
21795
"performance checks additional services such as DNS, DHCP, Samba, etc. To "
21796
"install the package, from a terminal enter:"
21797
msgstr ""
21798
"The <application>munin-plugins-extra</application> package contains "
21799
"performance checks additional services such as DNS, DHCP, Samba, etc. To "
21800
"install the package, from a terminal enter:"
21801
21802
#: serverguide/C/monitoring.xml:518(command)
21803
msgid "sudo apt-get install munin-plugins-extra"
21804
msgstr "sudo apt-get install munin-plugins-extra"
21805
21806
#: serverguide/C/monitoring.xml:521(para)
21807
msgid "Be sure to install the package on both the server and node machines."
21808
msgstr "Be sure to install the package on both the server and node machines."
21809
21810
#: serverguide/C/monitoring.xml:531(para)
21811
msgid ""
21812
"See the <ulink url=\"http://munin.projects.linpro.no/\">Munin</ulink> "
21813
"website for more details."
21814
msgstr ""
21815
"See the <ulink url=\"http://munin.projects.linpro.no/\">Munin</ulink> "
21816
"website for more details."
21817
21818
#: serverguide/C/monitoring.xml:536(para)
21819
msgid ""
21820
"Specifically the <ulink "
21821
"url=\"http://munin.projects.linpro.no/wiki/Documentation\">Munin "
21822
"Documentation</ulink> page includes information on additional plugins, "
21823
"writing plugins, etc."
21824
msgstr ""
21825
"Specifically the <ulink "
21826
"url=\"http://munin.projects.linpro.no/wiki/Documentation\">Munin "
21827
"Documentation</ulink> page includes information on additional plug-ins, "
21828
"writing plug-ins, etc."
21829
21830
#: serverguide/C/monitoring.xml:542(para)
21831
msgid ""
21832
"Also, there is a book in German by Open Source Press: <ulink "
21833
"url=\"https://www.opensourcepress.de/index.php?26&backPID=178&tt_prod"
21834
"ucts=152\">Munin Graphisches Netzwerk- und System-Monitoring</ulink>."
21835
msgstr ""
21836
"Also, there is a book in German by Open Source Press: <ulink "
21837
"url=\"https://www.opensourcepress.de/index.php?26&backPID=178&tt_prod"
21838
"ucts=152\">Munin Graphisches Netzwerk- und System-Monitoring</ulink>."
21839
21840
#: serverguide/C/monitoring.xml:548(para)
21841
msgid ""
21842
"Another resource is the <ulink "
21843
"url=\"https://help.ubuntu.com/community/Munin\">Munin Ubuntu Wiki</ulink> "
21844
"page."
21845
msgstr ""
21846
21847
#: serverguide/C/mail.xml:13(title)
21848
msgid "Email Services"
21849
msgstr "E-mail Services"
21850
21851
#: serverguide/C/mail.xml:14(para)
21852
msgid ""
21853
"The process of getting an email from one person to another over a network or "
21854
"the Internet involves many systems working together. Each of these systems "
21855
"must be correctly configured for the process to work. The sender uses a "
21856
"<emphasis>Mail User Agent</emphasis> (MUA), or email client, to send the "
21857
"message through one or more <emphasis>Mail Transfer Agents</emphasis> (MTA), "
21858
"the last of which will hand it off to a <emphasis>Mail Delivery "
21859
"Agent</emphasis> (MDA) for delivery to the recipient's mailbox, from which "
21860
"it will be retrieved by the recipient's email client, usually via a POP3 or "
21861
"IMAP server."
21862
msgstr ""
21863
"The process of getting an e-mail from one person to another over a network "
21864
"or the Internet involves many systems working together. Each of these "
21865
"systems must be correctly configured for the process to work. The sender "
21866
"uses a <emphasis>Mail User Agent</emphasis> (MUA), or e-mail client, to send "
21867
"the message through one or more <emphasis>Mail Transfer Agents</emphasis> "
21868
"(MTA), the last of which will hand it off to a <emphasis>Mail Delivery "
21869
"Agent</emphasis> (MDA) for delivery to the recipient's mailbox, from which "
21870
"it will be retrieved by the recipient's e-mail client, usually via a POP3 or "
21871
"IMAP server."
21872
21873
#: serverguide/C/mail.xml:24(title) serverguide/C/mail.xml:832(application) serverguide/C/mail.xml:866(title) serverguide/C/mail.xml:944(title) serverguide/C/mail.xml:1510(title)
21874
msgid "Postfix"
21875
msgstr "Postfix"
21876
21877
#: serverguide/C/mail.xml:25(para)
21878
msgid ""
21879
"<application>Postfix</application> is the default Mail Transfer Agent (MTA) "
21880
"in Ubuntu. It attempts to be fast and easy to administer and secure. It is "
21881
"compatible with the MTA <application>sendmail</application>. This section "
21882
"explains how to install and configure <application>postfix</application>. It "
21883
"also explains how to set it up as an SMTP server using a secure connection "
21884
"(for sending emails securely)."
21885
msgstr ""
21886
"<application>Postfix</application> is the default Mail Transfer Agent (MTA) "
21887
"in Ubuntu. It attempts to be fast and easy to administer and secure. It is "
21888
"compatible with the MTA <application>sendmail</application>. This section "
21889
"explains how to install and configure <application>postfix</application>. It "
21890
"also explains how to set it up as an SMTP server using a secure connection "
21891
"(for sending e-mails securely)."
21892
21893
#: serverguide/C/mail.xml:34(para)
21894
msgid ""
21895
"This guide does not cover setting up Postfix <emphasis>Virtual "
21896
"Domains</emphasis>, for information on Virtual Domains and other advanced "
21897
"configurations see <xref linkend=\"postfix-references\"/>."
21898
msgstr ""
21899
"This guide does not cover setting up Postfix <emphasis>Virtual "
21900
"Domains</emphasis>, for information on Virtual Domains and other advanced "
21901
"configurations see <xref linkend=\"postfix-references\"/>."
21902
21903
#: serverguide/C/mail.xml:41(para)
21904
msgid ""
21905
"To install <application>postfix</application> run the following command:"
21906
msgstr ""
21907
"To install <application>postfix</application> run the following command:"
21908
21909
#: serverguide/C/mail.xml:47(para)
21910
msgid ""
21911
"Simply press return when the installation process asks questions, the "
21912
"configuration will be done in greater detail in the next stage."
21913
msgstr ""
21914
"Simply press return when the installation process asks questions, the "
21915
"configuration will be done in greater detail in the next stage."
21916
21917
#: serverguide/C/mail.xml:52(title)
21918
msgid "Basic Configuration"
21919
msgstr "Basic Configuration"
21920
21921
#: serverguide/C/mail.xml:53(para)
21922
msgid ""
21923
"To configure <application>postfix</application>, run the following command:"
21924
msgstr ""
21925
"To configure <application>postfix</application>, run the following command:"
21926
21927
#: serverguide/C/mail.xml:57(command)
21928
msgid "sudo dpkg-reconfigure postfix"
21929
msgstr "sudo dpkg-reconfigure postfix"
21930
21931
#: serverguide/C/mail.xml:63(para)
21932
msgid "Internet Site"
21933
msgstr "Internet Site"
21934
21935
#: serverguide/C/mail.xml:64(para)
21936
msgid "mail.example.com"
21937
msgstr "mail.example.com"
21938
21939
#: serverguide/C/mail.xml:65(para)
21940
msgid "steve"
21941
msgstr "steve"
21942
21943
#: serverguide/C/mail.xml:66(para)
21944
msgid "mail.example.com, localhost.localdomain, localhost"
21945
msgstr "mail.example.com, localhost.localdomain, localhost"
21946
21947
#: serverguide/C/mail.xml:67(para)
21948
msgid "No"
21949
msgstr "No"
21950
21951
#: serverguide/C/mail.xml:68(para)
21952
msgid "127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.0.0/24"
21953
msgstr "127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 192.168.0.0/24"
21954
21955
#: serverguide/C/mail.xml:69(para)
21956
msgid "0"
21957
msgstr "0"
21958
21959
#: serverguide/C/mail.xml:70(para)
21960
msgid "+"
21961
msgstr "+"
21962
21963
#: serverguide/C/mail.xml:71(para)
21964
msgid "all"
21965
msgstr "all"
21966
21967
#: serverguide/C/mail.xml:59(para)
21968
msgid ""
21969
"The user interface will be displayed. On each screen, select the following "
21970
"values: <placeholder-1/>"
21971
msgstr ""
21972
"The user interface will be displayed. On each screen, select the following "
21973
"values: <placeholder-1/>"
21974
21975
#: serverguide/C/mail.xml:75(para)
21976
msgid ""
21977
"Replace mail.example.com with the domain for which you'll accept email, "
21978
"192.168.0.0/24 with the actual network and class range of your mail server, "
21979
"and steve with the appropriate username."
21980
msgstr ""
21981
"Replace mail.example.com with the domain for which you'll accept e-mail, "
21982
"192.168.0.0/24 with the actual network and class range of your mail server, "
21983
"and steve with the appropriate username."
21984
21985
#: serverguide/C/mail.xml:81(para)
21986
msgid ""
21987
"Now is a good time to decide which mailbox format you want to use. By "
21988
"default Postfix will use <emphasis role=\"strong\">mbox</emphasis> for the "
21989
"mailbox format. Rather than editing the configuration file directly, you can "
21990
"use the <command>postconf</command> command to configure all "
21991
"<application>postfix</application> parameters. The configuration parameters "
21992
"will be stored in <filename>/etc/postfix/main.cf</filename> file. Later if "
21993
"you wish to re-configure a particular parameter, you can either run the "
21994
"command or change it manually in the file."
21995
msgstr ""
21996
"Now is a good time to decide which mailbox format you want to use. By "
21997
"default Postfix will use <emphasis role=\"strong\">mbox</emphasis> for the "
21998
"mailbox format. Rather than editing the configuration file directly, you can "
21999
"use the <command>postconf</command> command to configure all "
22000
"<application>postfix</application> parameters. The configuration parameters "
22001
"will be stored in <filename>/etc/postfix/main.cf</filename> file. Later if "
22002
"you wish to re-configure a particular parameter, you can either run the "
22003
"command or change it manually in the file."
22004
22005
#: serverguide/C/mail.xml:92(para)
22006
msgid ""
22007
"To configure the mailbox format for <emphasis "
22008
"role=\"strong\">Maildir:</emphasis>"
22009
msgstr ""
22010
"To configure the mailbox format for <emphasis "
22011
"role=\"strong\">Maildir:</emphasis>"
22012
22013
#: serverguide/C/mail.xml:97(command)
22014
msgid "sudo postconf -e 'home_mailbox = Maildir/'"
22015
msgstr "sudo postconf -e 'home_mailbox = Maildir/'"
22016
22017
#: serverguide/C/mail.xml:100(para)
22018
msgid ""
22019
"This will place new mail in /home/<emphasis "
22020
"role=\"italic\">username</emphasis>/Maildir so you will need to configure "
22021
"your Mail Delivery Agent (MDA) to use the same path."
22022
msgstr ""
22023
"This will place new mail in /home/<emphasis "
22024
"role=\"italic\">username</emphasis>/Maildir so you will need to configure "
22025
"your Mail Delivery Agent (MDA) to use the same path."
22026
22027
#: serverguide/C/mail.xml:108(title) serverguide/C/mail.xml:556(title)
22028
msgid "SMTP Authentication"
22029
msgstr "SMTP Authentication"
22030
22031
#: serverguide/C/mail.xml:110(para)
22032
msgid ""
22033
"SMTP-AUTH allows a client to identify itself through an authentication "
22034
"mechanism (SASL). Transport Layer Security (TLS) should be used to encrypt "
22035
"the authentication process. Once authenticated the SMTP server will allow "
22036
"the client to relay mail."
22037
msgstr ""
22038
"SMTP-AUTH allows a client to identify itself through an authentication "
22039
"mechanism (SASL). Transport Layer Security (TLS) should be used to encrypt "
22040
"the authentication process. Once authenticated the SMTP server will allow "
22041
"the client to relay mail."
22042
22043
#: serverguide/C/mail.xml:117(para)
22044
msgid "Configure Postfix for SMTP-AUTH using SASL (Dovecot SASL):"
22045
msgstr "Configure Postfix for SMTP-AUTH using SASL (Dovecot SASL):"
22046
22047
#: serverguide/C/mail.xml:120(screen)
22048
#, no-wrap
22049
msgid ""
22050
"\n"
22051
"sudo postconf -e 'smtpd_sasl_type = dovecot'\n"
22052
"sudo postconf -e 'smtpd_sasl_path = private/auth-client'\n"
22053
"sudo postconf -e 'smtpd_sasl_local_domain ='\n"
22054
"sudo postconf -e 'smtpd_sasl_security_options = noanonymous'\n"
22055
"sudo postconf -e 'broken_sasl_auth_clients = yes'\n"
22056
"sudo postconf -e 'smtpd_sasl_auth_enable = yes'\n"
22057
"sudo postconf -e 'smtpd_recipient_restrictions = "
22058
"permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\n"
22059
"sudo postconf -e 'inet_interfaces = all'\n"
22060
msgstr ""
22061
"\n"
22062
"sudo postconf -e 'smtpd_sasl_type = dovecot'\n"
22063
"sudo postconf -e 'smtpd_sasl_path = private/auth-client'\n"
22064
"sudo postconf -e 'smtpd_sasl_local_domain ='\n"
22065
"sudo postconf -e 'smtpd_sasl_security_options = noanonymous'\n"
22066
"sudo postconf -e 'broken_sasl_auth_clients = yes'\n"
22067
"sudo postconf -e 'smtpd_sasl_auth_enable = yes'\n"
22068
"sudo postconf -e 'smtpd_recipient_restrictions = "
22069
"permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination'\n"
22070
"sudo postconf -e 'inet_interfaces = all'\n"
22071
22072
#: serverguide/C/mail.xml:131(para)
22073
msgid ""
22074
"The <emphasis>smtpd_sasl_path</emphasis> configuration is a path relative to "
22075
"the Postfix queue directory."
22076
msgstr ""
22077
"The <emphasis>smtpd_sasl_path</emphasis> configuration is a path relative to "
22078
"the Postfix queue directory."
22079
22080
#: serverguide/C/mail.xml:137(para)
22081
msgid ""
22082
"Next, obtain a digital certificate for TLS. See <xref linkend=\"certificates-"
22083
"and-security\"/> for details. This example also uses a Certificate Authority "
22084
"(CA). For information on generating a CA certificate see <xref "
22085
"linkend=\"certificate-authority\"/>."
22086
msgstr ""
22087
"Next, obtain a digital certificate for TLS. See <xref linkend=\"certificates-"
22088
"and-security\"/> for details. This example also uses a Certificate Authority "
22089
"(CA). For information on generating a CA certificate see <xref "
22090
"linkend=\"certificate-authority\"/>."
22091
22092
#: serverguide/C/mail.xml:143(para)
22093
msgid ""
22094
"You can get the digital certificate from a certificate authority. But unlike "
22095
"web clients, SMTP clients rarely complain about \"self-signed "
22096
"certificates\", so alternatively, you can create the certificate yourself. "
22097
"Refer to <xref linkend=\"creating-a-self-signed-certificate\"/> for more "
22098
"details."
22099
msgstr ""
22100
"You can get the digital certificate from a certificate authority. But unlike "
22101
"web clients, SMTP clients rarely complain about \"self-signed "
22102
"certificates\", so alternatively, you can create the certificate yourself. "
22103
"Refer to <xref linkend=\"creating-a-self-signed-certificate\"/> for more "
22104
"details."
22105
22106
#: serverguide/C/mail.xml:155(para)
22107
msgid ""
22108
"Once you have a certificate, configure Postfix to provide TLS encryption for "
22109
"both incoming and outgoing mail:"
22110
msgstr ""
22111
"Once you have a certificate, configure Postfix to provide TLS encryption for "
22112
"both incoming and outgoing mail:"
22113
22114
#: serverguide/C/mail.xml:158(screen)
22115
#, no-wrap
22116
msgid ""
22117
"\n"
22118
"sudo postconf -e 'smtpd_tls_auth_only = no'\n"
22119
"sudo postconf -e 'smtp_use_tls = yes'\n"
22120
"sudo postconf -e 'smtpd_use_tls = yes'\n"
22121
"sudo postconf -e 'smtp_tls_note_starttls_offer = yes'\n"
22122
"sudo postconf -e 'smtpd_tls_key_file = /etc/ssl/private/server.key'\n"
22123
"sudo postconf -e 'smtpd_tls_cert_file = /etc/ssl/certs/server.crt'\n"
22124
"sudo postconf -e 'smtpd_tls_loglevel = 1'\n"
22125
"sudo postconf -e 'smtpd_tls_received_header = yes'\n"
22126
"sudo postconf -e 'smtpd_tls_session_cache_timeout = 3600s'\n"
22127
"sudo postconf -e 'tls_random_source = dev:/dev/urandom'\n"
22128
"sudo postconf -e 'myhostname = mail.example.com'\n"
22129
msgstr ""
22130
22131
#: serverguide/C/mail.xml:173(para)
22132
msgid ""
22133
"If you are using your own <emphasis>Certificate Authority</emphasis> to sign "
22134
"the certificate enter:"
22135
msgstr ""
22136
22137
#: serverguide/C/mail.xml:177(command)
22138
msgid "sudo postconf -e 'smtpd_tls_CAfile = /etc/ssl/certs/cacert.pem'"
22139
msgstr ""
22140
22141
#: serverguide/C/mail.xml:180(para)
22142
msgid ""
22143
"Again, for more details about certificates see <xref linkend=\"certificates-"
22144
"and-security\"/>."
22145
msgstr ""
22146
22147
#: serverguide/C/mail.xml:186(para)
22148
msgid ""
22149
"After running all the commands, <application>Postfix</application> is "
22150
"configured for SMTP-AUTH and a self-signed certificate has been created for "
22151
"TLS encryption."
22152
msgstr ""
22153
"After running all the commands, <application>Postfix</application> is "
22154
"configured for SMTP-AUTH and a self-signed certificate has been created for "
22155
"TLS encryption."
22156
22157
#: serverguide/C/mail.xml:191(para)
22158
msgid ""
22159
"Now, the file <filename>/etc/postfix/main.cf</filename> should look like "
22160
"<ulink url=\"../sample/postfix_configuration\">this</ulink>."
22161
msgstr ""
22162
"Now, the file <filename>/etc/postfix/main.cf</filename> should look like "
22163
"<ulink url=\"../sample/postfix_configuration\">this</ulink>."
22164
22165
#: serverguide/C/mail.xml:195(para)
22166
msgid ""
22167
"The postfix initial configuration is complete. Run the following command to "
22168
"restart the postfix daemon:"
22169
msgstr ""
22170
"The postfix initial configuration is complete. Run the following command to "
22171
"restart the postfix daemon:"
22172
22173
#: serverguide/C/mail.xml:201(command) serverguide/C/mail.xml:315(command) serverguide/C/mail.xml:378(command) serverguide/C/mail.xml:984(command) serverguide/C/mail.xml:1561(command)
22174
msgid "sudo /etc/init.d/postfix restart"
22175
msgstr "sudo /etc/init.d/postfix restart"
22176
22177
#: serverguide/C/mail.xml:204(para)
22178
msgid ""
22179
"<application>Postfix</application> supports SMTP-AUTH as defined in <ulink "
22180
"url=\"ftp://ftp.isi.edu/in-notes/rfc2554.txt\">RFC2554</ulink>. It is based "
22181
"on <ulink url=\"ftp://ftp.isi.edu/in-notes/rfc2222.txt\">SASL</ulink>. "
22182
"However it is still necessary to set up SASL authentication before you can "
22183
"use SMTP-AUTH."
22184
msgstr ""
22185
"<application>Postfix</application> supports SMTP-AUTH as defined in <ulink "
22186
"url=\"ftp://ftp.isi.edu/in-notes/rfc2554.txt\">RFC2554</ulink>. It is based "
22187
"on <ulink url=\"ftp://ftp.isi.edu/in-notes/rfc2222.txt\">SASL</ulink>. "
22188
"However it is still necessary to set up SASL authentication before you can "
22189
"use SMTP-AUTH."
22190
22191
#: serverguide/C/mail.xml:214(title) serverguide/C/mail.xml:609(title)
22192
msgid "Configuring SASL"
22193
msgstr "Configuring SASL"
22194
22195
#: serverguide/C/mail.xml:215(para)
22196
msgid ""
22197
"Postfix supports two SASL implementations Cyrus SASL and Dovecot SASL. To "
22198
"enable Dovecot SASL the <application>dovecot-common</application> package "
22199
"will need to be installed. From a terminal prompt enter the following:"
22200
msgstr ""
22201
"Postfix supports two SASL implementations Cyrus SASL and Dovecot SASL. To "
22202
"enable Dovecot SASL the <application>dovecot-common</application> package "
22203
"will need to be installed. From a terminal prompt enter the following:"
22204
22205
#: serverguide/C/mail.xml:221(command)
22206
msgid "sudo apt-get install dovecot-common"
22207
msgstr "sudo apt-get install dovecot-common"
22208
22209
#: serverguide/C/mail.xml:223(para)
22210
msgid ""
22211
"Next you will need to edit <filename>/etc/dovecot/dovecot.conf</filename>. "
22212
"In the <emphasis>auth default</emphasis> section uncomment the "
22213
"<emphasis>socket listen</emphasis> option and change the following:"
22214
msgstr ""
22215
"Next you will need to edit <filename>/etc/dovecot/dovecot.conf</filename>. "
22216
"In the <emphasis>auth default</emphasis> section uncomment the "
22217
"<emphasis>socket listen</emphasis> option and change the following:"
22218
22219
#: serverguide/C/mail.xml:227(programlisting)
22220
#, no-wrap
22221
msgid ""
22222
"\n"
22223
" socket listen {\n"
22224
" #master {\n"
22225
" # Master socket provides access to userdb information. It's typically\n"
22226
" # used to give Dovecot's local delivery agent access to userdb so it\n"
22227
" # can find mailbox locations.\n"
22228
" #path = /var/run/dovecot/auth-master\n"
22229
" #mode = 0600\n"
22230
" # Default user/group is the one who started dovecot-auth (root)\n"
22231
" #user = \n"
22232
" #group = \n"
22233
" #}\n"
22234
" client {\n"
22235
" # The client socket is generally safe to export to everyone. Typical "
22236
"use\n"
22237
" # is to export it to your SMTP server so it can do SMTP AUTH lookups\n"
22238
" # using it.\n"
22239
" path = /var/spool/postfix/private/auth-client\n"
22240
" mode = 0660\n"
22241
" user = postfix\n"
22242
" group = postfix\n"
22243
" }\n"
22244
" }\n"
22245
msgstr ""
22246
"\n"
22247
" socket listen {\n"
22248
" #master {\n"
22249
" # Master socket provides access to userdb information. It's typically\n"
22250
" # used to give Dovecot's local delivery agent access to userdb so it\n"
22251
" # can find mailbox locations.\n"
22252
" #path = /var/run/dovecot/auth-master\n"
22253
" #mode = 0600\n"
22254
" # Default user/group is the one who started dovecot-auth (root)\n"
22255
" #user = \n"
22256
" #group = \n"
22257
" #}\n"
22258
" client {\n"
22259
" # The client socket is generally safe to export to everyone. Typical "
22260
"use\n"
22261
" # is to export it to your SMTP server so it can do SMTP AUTH lookups\n"
22262
" # using it.\n"
22263
" path = /var/spool/postfix/private/auth-client\n"
22264
" mode = 0660\n"
22265
" user = postfix\n"
22266
" group = postfix\n"
22267
" }\n"
22268
" }\n"
22269
22270
#: serverguide/C/mail.xml:251(para)
22271
msgid ""
22272
"In order to let <application>Outlook</application> clients use SMTPAUTH, in "
22273
"the <emphasis>auth default</emphasis> section of /etc/dovecot/dovecot.conf "
22274
"add <emphasis>\"login\"</emphasis>:"
22275
msgstr ""
22276
"In order to let <application>Outlook</application> clients use SMTPAUTH, in "
22277
"the <emphasis>auth default</emphasis> section of /etc/dovecot/dovecot.conf "
22278
"add <emphasis>\"login\"</emphasis>:"
22279
22280
#: serverguide/C/mail.xml:256(programlisting)
22281
#, no-wrap
22282
msgid ""
22283
"\n"
22284
" mechanisms = plain login\n"
22285
msgstr ""
22286
"\n"
22287
" mechanisms = plain login\n"
22288
22289
#: serverguide/C/mail.xml:260(para)
22290
msgid ""
22291
"Once you have <application>Dovecot</application> configured restart it with:"
22292
msgstr ""
22293
"Once you have <application>Dovecot</application> configured restart it with:"
22294
22295
#: serverguide/C/mail.xml:264(command) serverguide/C/mail.xml:735(command)
22296
msgid "sudo /etc/init.d/dovecot restart"
22297
msgstr "sudo /etc/init.d/dovecot restart"
22298
22299
#: serverguide/C/mail.xml:269(title)
22300
msgid "Postfix-Dovecot"
22301
msgstr "Postfix-Dovecot"
22302
22303
#: serverguide/C/mail.xml:271(para)
22304
msgid ""
22305
"Another option for configuring <application>Postfix</application> for SMTP-"
22306
"AUTH is using the <application>dovecot-postfix</application> package. This "
22307
"package will install <application>Dovecot</application> and configure "
22308
"<application>Postfix</application> to use it for both SASL authentication "
22309
"and as a Mail Delivery Agent (MDA). The package also configures "
22310
"<application>Dovecot</application> for IMAP, IMAPS, POP3, and POP3S."
22311
msgstr ""
22312
"Another option for configuring <application>Postfix</application> for SMTP-"
22313
"AUTH is using the <application>dovecot-postfix</application> package. This "
22314
"package will install <application>Dovecot</application> and configure "
22315
"<application>Postfix</application> to use it for both SASL authentication "
22316
"and as a Mail Delivery Agent (MDA). The package also configures "
22317
"<application>Dovecot</application> for IMAP, IMAPS, POP3, and POP3S."
22318
22319
#: serverguide/C/mail.xml:280(para)
22320
msgid ""
22321
"You may or may not want to run IMAP, IMAPS, POP3, or POP3S on your mail "
22322
"server. For example, if you are configuring your server to be a mail "
22323
"gateway, spam/virus filter, etc. If this is the case it may be easier to use "
22324
"the above commands to configure Postfix for SMTPAUTH."
22325
msgstr ""
22326
"You may or may not want to run IMAP, IMAPS, POP3, or POP3S on your mail "
22327
"server. For example, if you are configuring your server to be a mail "
22328
"gateway, spam/virus filter, etc. If this is the case it may be easier to use "
22329
"the above commands to configure Postfix for SMTPAUTH."
22330
22331
#: serverguide/C/mail.xml:287(para)
22332
msgid "To install the package, from a terminal prompt enter:"
22333
msgstr "To install the package, from a terminal prompt enter:"
22334
22335
#: serverguide/C/mail.xml:292(command)
22336
msgid "sudo apt-get install dovecot-postfix"
22337
msgstr "sudo apt-get install dovecot-postfix"
22338
22339
#: serverguide/C/mail.xml:295(para)
22340
msgid ""
22341
"You should now have a working mail server, but there are a few options that "
22342
"you may wish to further customize. For example, the package uses the "
22343
"certificate and key from the <application>ssl-cert</application> package, "
22344
"and in a production environment you should use a certificate and key "
22345
"generated for the host. See <xref linkend=\"certificates-and-security\"/> "
22346
"for more details."
22347
msgstr ""
22348
"You should now have a working mail server, but there are a few options that "
22349
"you may wish to further customise. For example, the package uses the "
22350
"certificate and key from the <application>ssl-cert</application> package, "
22351
"and in a production environment you should use a certificate and key "
22352
"generated for the host. See <xref linkend=\"certificates-and-security\"/> "
22353
"for more details."
22354
22355
#: serverguide/C/mail.xml:301(para)
22356
msgid ""
22357
"Once you have a customized certificate and key for the host, change the "
22358
"following options in <filename>/etc/postfix/main.cf</filename>:"
22359
msgstr ""
22360
"Once you have a customised certificate and key for the host, change the "
22361
"following options in <filename>/etc/postfix/main.cf</filename>:"
22362
22363
#: serverguide/C/mail.xml:305(programlisting)
22364
#, no-wrap
22365
msgid ""
22366
"\n"
22367
"smtpd_tls_cert_file = /etc/ssl/certs/ssl-mail.pem\n"
22368
"smtpd_tls_key_file = /etc/ssl/private/ssl-mail.key\n"
22369
msgstr ""
22370
"\n"
22371
"smtpd_tls_cert_file = /etc/ssl/certs/ssl-mail.pem\n"
22372
"smtpd_tls_key_file = /etc/ssl/private/ssl-mail.key\n"
22373
22374
#: serverguide/C/mail.xml:310(para)
22375
msgid "Then restart Postfix:"
22376
msgstr "Then restart Postfix:"
22377
22378
#: serverguide/C/mail.xml:321(para)
22379
msgid ""
22380
"SMTP-AUTH configuration is complete. Now it is time to test the setup."
22381
msgstr ""
22382
"SMTP-AUTH configuration is complete. Now it is time to test the setup."
22383
22384
#: serverguide/C/mail.xml:324(para)
22385
msgid "To see if SMTP-AUTH and TLS work properly, run the following command:"
22386
msgstr ""
22387
"To see if SMTP-AUTH and TLS work properly, run the following command:"
22388
22389
#: serverguide/C/mail.xml:329(command)
22390
msgid "telnet mail.example.com 25"
22391
msgstr "telnet mail.example.com 25"
22392
22393
#: serverguide/C/mail.xml:331(para)
22394
msgid ""
22395
"After you have established the connection to the postfix mail server, type:"
22396
msgstr ""
22397
"After you have established the connection to the postfix mail server, type:"
22398
22399
#: serverguide/C/mail.xml:335(screen)
22400
#, no-wrap
22401
msgid ""
22402
"\n"
22403
"ehlo mail.example.com\n"
22404
msgstr ""
22405
"\n"
22406
"ehlo mail.example.com\n"
22407
22408
#: serverguide/C/mail.xml:338(para)
22409
msgid ""
22410
"If you see the following lines among others, then everything is working "
22411
"perfectly. Type <command>quit</command> to exit."
22412
msgstr ""
22413
"If you see the following lines among others, then everything is working "
22414
"perfectly. Type <command>quit</command> to exit."
22415
22416
#: serverguide/C/mail.xml:342(programlisting)
22417
#, no-wrap
22418
msgid ""
22419
"\n"
22420
"250-STARTTLS\n"
22421
"250-AUTH LOGIN PLAIN\n"
22422
"250-AUTH=LOGIN PLAIN\n"
22423
"250 8BITMIME\n"
22424
msgstr ""
22425
"\n"
22426
"250-STARTTLS\n"
22427
"250-AUTH LOGIN PLAIN\n"
22428
"250-AUTH=LOGIN PLAIN\n"
22429
"250 8BITMIME\n"
22430
22431
#: serverguide/C/mail.xml:352(para)
22432
msgid ""
22433
"This section introduces some common ways to determine the cause if problems "
22434
"arise."
22435
msgstr ""
22436
"This section introduces some common ways to determine the cause if problems "
22437
"arise."
22438
22439
#: serverguide/C/mail.xml:356(title)
22440
msgid "Escaping chroot"
22441
msgstr "Escaping chroot"
22442
22443
#: serverguide/C/mail.xml:357(para)
22444
msgid ""
22445
"The Ubuntu <application>postfix</application> package will by default "
22446
"install into a <emphasis>chroot</emphasis> environment for security reasons. "
22447
"This can add greater complexity when troubleshooting problems."
22448
msgstr ""
22449
"The Ubuntu <application>postfix</application> package will by default "
22450
"install into a <emphasis>chroot</emphasis> environment for security reasons. "
22451
"This can add greater complexity when troubleshooting problems."
22452
22453
#: serverguide/C/mail.xml:361(para)
22454
msgid ""
22455
"To turn off the chroot operation locate for the following line in the "
22456
"<filename>/etc/postfix/master.cf</filename> configuration file:"
22457
msgstr ""
22458
"To turn off the chroot operation locate for the following line in the "
22459
"<filename>/etc/postfix/master.cf</filename> configuration file:"
22460
22461
#: serverguide/C/mail.xml:365(screen)
22462
#, no-wrap
22463
msgid ""
22464
"\n"
22465
"smtp inet n - - - - smtpd\n"
22466
msgstr ""
22467
"\n"
22468
"smtp inet n - - - - smtpd\n"
22469
22470
#: serverguide/C/mail.xml:368(para)
22471
msgid "and modify it as follows:"
22472
msgstr "and modify it as follows:"
22473
22474
#: serverguide/C/mail.xml:371(screen)
22475
#, no-wrap
22476
msgid ""
22477
"\n"
22478
"smtp inet n - n - - smtpd\n"
22479
msgstr ""
22480
"\n"
22481
"smtp inet n - n - - smtpd\n"
22482
22483
#: serverguide/C/mail.xml:374(para)
22484
msgid ""
22485
"You will then need to restart Postfix to use the new configuration. From a "
22486
"terminal prompt enter:"
22487
msgstr ""
22488
"You will then need to restart Postfix to use the new configuration. From a "
22489
"terminal prompt enter:"
22490
22491
#: serverguide/C/mail.xml:382(title)
22492
msgid "Log Files"
22493
msgstr "Log Files"
22494
22495
#: serverguide/C/mail.xml:383(para)
22496
msgid ""
22497
"<application>Postfix</application> sends all log messages to "
22498
"<filename>/var/log/mail.log</filename>. However error and warning messages "
22499
"can sometimes get lost in the normal log output so they are also logged to "
22500
"<filename>/var/log/mail.err</filename> and "
22501
"<filename>/var/log/mail.warn</filename> respectively."
22502
msgstr ""
22503
"<application>Postfix</application> sends all log messages to "
22504
"<filename>/var/log/mail.log</filename>. However error and warning messages "
22505
"can sometimes get lost in the normal log output so they are also logged to "
22506
"<filename>/var/log/mail.err</filename> and "
22507
"<filename>/var/log/mail.warn</filename> respectively."
22508
22509
#: serverguide/C/mail.xml:388(para)
22510
msgid ""
22511
"To see messages entered into the logs in real time you can use the "
22512
"<application>tail -f</application> command:"
22513
msgstr ""
22514
"To see messages entered into the logs in real time you can use the "
22515
"<application>tail -f</application> command:"
22516
22517
#: serverguide/C/mail.xml:393(command)
22518
msgid "tail -f /var/log/mail.err"
22519
msgstr "tail -f /var/log/mail.err"
22520
22521
#: serverguide/C/mail.xml:395(para)
22522
msgid ""
22523
"The amount of detail that is recorded in the logs can be increased. Below "
22524
"are some configuration options for increasing the log level for some of the "
22525
"areas covered above."
22526
msgstr ""
22527
"The amount of detail that is recorded in the logs can be increased. Below "
22528
"are some configuration options for increasing the log level for some of the "
22529
"areas covered above."
22530
22531
#: serverguide/C/mail.xml:401(para)
22532
msgid ""
22533
"To increase <emphasis>TLS</emphasis> activity logging set the "
22534
"<emphasis>smtpd_tls_loglevel</emphasis> option to a value from 1 to 4."
22535
msgstr ""
22536
"To increase <emphasis>TLS</emphasis> activity logging set the "
22537
"<emphasis>smtpd_tls_loglevel</emphasis> option to a value from 1 to 4."
22538
22539
#: serverguide/C/mail.xml:405(command)
22540
msgid "sudo postconf -e 'smtpd_tls_loglevel = 4'"
22541
msgstr "sudo postconf -e 'smtpd_tls_loglevel = 4'"
22542
22543
#: serverguide/C/mail.xml:409(para)
22544
msgid ""
22545
"If you are having trouble sending or receiving mail from a specific domain "
22546
"you can add the domain to the <emphasis>debug_peer_list</emphasis> parameter."
22547
msgstr ""
22548
"If you are having trouble sending or receiving mail from a specific domain "
22549
"you can add the domain to the <emphasis>debug_peer_list</emphasis> parameter."
22550
22551
#: serverguide/C/mail.xml:414(command)
22552
msgid "sudo postconf -e 'debug_peer_list = problem.domain'"
22553
msgstr "sudo postconf -e 'debug_peer_list = problem.domain'"
22554
22555
#: serverguide/C/mail.xml:418(para)
22556
msgid ""
22557
"You can increase the verbosity of any <application>Postfix</application> "
22558
"daemon process by editing the <filename>/etc/postfix/master.cf</filename> "
22559
"and adding a <emphasis>-v</emphasis> after the entry. For example edit the "
22560
"<emphasis>smtp</emphasis> entry:"
22561
msgstr ""
22562
"You can increase the verbosity of any <application>Postfix</application> "
22563
"daemon process by editing the <filename>/etc/postfix/master.cf</filename> "
22564
"and adding a <emphasis>-v</emphasis> after the entry. For example edit the "
22565
"<emphasis>smtp</emphasis> entry:"
22566
22567
#: serverguide/C/mail.xml:422(programlisting)
22568
#, no-wrap
22569
msgid ""
22570
"\n"
22571
"smtp unix - - - - - smtp -v\n"
22572
msgstr ""
22573
"\n"
22574
"smtp unix - - - - - smtp -v\n"
22575
22576
#: serverguide/C/mail.xml:428(para)
22577
msgid ""
22578
"It is important to note that after making one of the logging changes above "
22579
"the <application>Postfix</application> process will need to be reloaded in "
22580
"order to recognize the new configuration: <command>sudo /etc/init.d/postfix "
22581
"reload</command>"
22582
msgstr ""
22583
"It is important to note that after making one of the logging changes above "
22584
"the <application>Postfix</application> process will need to be reloaded in "
22585
"order to recognise the new configuration: <command>sudo /etc/init.d/postfix "
22586
"reload</command>"
22587
22588
#: serverguide/C/mail.xml:435(para)
22589
msgid ""
22590
"To increase the amount of information logged when troubleshooting "
22591
"<emphasis>SASL</emphasis> issues you can set the following options in "
22592
"<filename>/etc/dovecot/dovecot.conf</filename>"
22593
msgstr ""
22594
"To increase the amount of information logged when troubleshooting "
22595
"<emphasis>SASL</emphasis> issues you can set the following options in "
22596
"<filename>/etc/dovecot/dovecot.conf</filename>"
22597
22598
#: serverguide/C/mail.xml:439(programlisting)
22599
#, no-wrap
22600
msgid ""
22601
"\n"
22602
"auth_debug=yes\n"
22603
"auth_debug_passwords=yes\n"
22604
msgstr ""
22605
"\n"
22606
"auth_debug=yes\n"
22607
"auth_debug_passwords=yes\n"
22608
22609
#: serverguide/C/mail.xml:446(para)
22610
msgid ""
22611
"Just like <application>Postfix</application> if you change a "
22612
"<application>Dovecot</application> configuration the process will need to be "
22613
"reloaded: <command>sudo /etc/init.d/dovecot reload</command>."
22614
msgstr ""
22615
"Just like <application>Postfix</application> if you change a "
22616
"<application>Dovecot</application> configuration the process will need to be "
22617
"reloaded: <command>sudo /etc/init.d/dovecot reload</command>."
22618
22619
#: serverguide/C/mail.xml:452(para)
22620
msgid ""
22621
"Some of the options above can drastically increase the amount of information "
22622
"sent to the log files. Remember to return the log level back to normal after "
22623
"you have corrected the problem. Then reload the appropriate daemon for the "
22624
"new configuration to take affect."
22625
msgstr ""
22626
"Some of the options above can drastically increase the amount of information "
22627
"sent to the log files. Remember to return the log level back to normal after "
22628
"you have corrected the problem. Then reload the appropriate daemon for the "
22629
"new configuration to take affect."
22630
22631
#: serverguide/C/mail.xml:460(para)
22632
msgid ""
22633
"Administering a <application>Postfix</application> server can be a very "
22634
"complicated task. At some point you may need to turn to the Ubuntu community "
22635
"for more experienced help."
22636
msgstr ""
22637
"Administering a <application>Postfix</application> server can be a very "
22638
"complicated task. At some point you may need to turn to the Ubuntu community "
22639
"for more experienced help."
22640
22641
#: serverguide/C/mail.xml:464(para)
22642
msgid ""
22643
"A great place to ask for <application>Postfix</application> assistance, and "
22644
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
22645
"server</emphasis> IRC channel on <ulink "
22646
"url=\"http://freenode.net\">freenode</ulink>. You can also post a message to "
22647
"one of the <ulink "
22648
"url=\"http://www.ubuntu.com/support/community/webforums\">Web Forums</ulink>."
22649
msgstr ""
22650
"A great place to ask for <application>Postfix</application> assistance, and "
22651
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
22652
"server</emphasis> IRC channel on <ulink "
22653
"url=\"http://freenode.net\">freenode</ulink>. You can also post a message to "
22654
"one of the <ulink "
22655
"url=\"http://www.ubuntu.com/support/community/webforums\">Web Forums</ulink>."
22656
22657
#: serverguide/C/mail.xml:469(para)
22658
msgid ""
22659
"For in depth <application>Postfix</application> information Ubuntu "
22660
"developers highly recommend: <ulink url=\"http://www.postfix-book.com/\">The "
22661
"Book of Postfix</ulink>."
22662
msgstr ""
22663
"For in depth <application>Postfix</application> information Ubuntu "
22664
"developers highly recommend: <ulink url=\"http://www.postfix-book.com/\">The "
22665
"Book of Postfix</ulink>."
22666
22667
#: serverguide/C/mail.xml:473(para)
22668
msgid ""
22669
"Finally, the <ulink "
22670
"url=\"http://www.postfix.org/documentation.html\">Postfix</ulink> website "
22671
"also has great documentation on all the different configuration options "
22672
"available."
22673
msgstr ""
22674
"Finally, the <ulink "
22675
"url=\"http://www.postfix.org/documentation.html\">Postfix</ulink> website "
22676
"also has great documentation on all the different configuration options "
22677
"available."
22678
22679
#: serverguide/C/mail.xml:477(para)
22680
msgid ""
22681
"Also, the <ulink url=\"https://help.ubuntu.com/community/Postfix\">Ubuntu "
22682
"Wiki Postifx</ulink> page has more information."
22683
msgstr ""
22684
22685
#: serverguide/C/mail.xml:485(title) serverguide/C/mail.xml:872(title) serverguide/C/mail.xml:988(title)
22686
msgid "Exim4"
22687
msgstr "Exim4"
22688
22689
#: serverguide/C/mail.xml:486(para)
22690
msgid ""
22691
"<application>Exim4</application> is another Message Transfer Agent (MTA) "
22692
"developed at the University of Cambridge for use on Unix systems connected "
22693
"to the Internet. Exim can be installed in place of "
22694
"<application>sendmail</application>, although the configuration of "
22695
"<application>exim</application> is quite different to that of "
22696
"<application>sendmail</application>."
22697
msgstr ""
22698
"<application>Exim4</application> is another Message Transfer Agent (MTA) "
22699
"developed at the University of Cambridge for use on Unix systems connected "
22700
"to the Internet. Exim can be installed in place of "
22701
"<application>sendmail</application>, although the configuration of "
22702
"<application>exim</application> is quite different to that of "
22703
"<application>sendmail</application>."
22704
22705
#: serverguide/C/mail.xml:497(para)
22706
msgid ""
22707
"To install <application>exim4</application>, run the following command: "
22708
"<screen>\n"
22709
"<command>sudo apt-get install exim4</command>\n"
22710
"</screen>"
22711
msgstr ""
22712
"To install <application>exim4</application>, run the following command: "
22713
"<screen>\n"
22714
"<command>sudo apt-get install exim4</command>\n"
22715
"</screen>"
22716
22717
#: serverguide/C/mail.xml:506(para)
22718
msgid ""
22719
"To configure <application>Exim4</application>, run the following command:"
22720
msgstr ""
22721
"To configure <application>Exim4</application>, run the following command:"
22722
22723
#: serverguide/C/mail.xml:510(command)
22724
msgid "sudo dpkg-reconfigure exim4-config"
22725
msgstr "sudo dpkg-reconfigure exim4-config"
22726
22727
#: serverguide/C/mail.xml:512(para)
22728
msgid ""
22729
"The user interface will be displayed. The user interface lets you configure "
22730
"many parameters. For example, In <application>Exim4</application> the "
22731
"configuration files are split among multiple files. If you wish to have them "
22732
"in one file you can configure accordingly in this user interface."
22733
msgstr ""
22734
"The user interface will be displayed. The user interface lets you configure "
22735
"many parameters. For example, In <application>Exim4</application> the "
22736
"configuration files are split among multiple files. If you wish to have them "
22737
"in one file you can configure accordingly in this user interface."
22738
22739
#: serverguide/C/mail.xml:520(para)
22740
msgid ""
22741
"All the parameters you configure in the user interface are stored in "
22742
"<filename>/etc/exim4/update-exim4.conf.conf</filename> file. If you wish to "
22743
"re-configure, either you re-run the configuration wizard or manually edit "
22744
"this file using your favorite editor. Once you configure, you can run the "
22745
"following command to generate the master configuration file:"
22746
msgstr ""
22747
"All the parameters you configure in the user interface are stored in "
22748
"<filename>/etc/exim4/update-exim4.conf.conf</filename> file. If you wish to "
22749
"re-configure, either you re-run the configuration wizard or manually edit "
22750
"this file using your favourite editor. Once you configure, you can run the "
22751
"following command to generate the master configuration file:"
22752
22753
#: serverguide/C/mail.xml:531(command) serverguide/C/mail.xml:604(command)
22754
msgid "sudo update-exim4.conf"
22755
msgstr "sudo update-exim4.conf"
22756
22757
#: serverguide/C/mail.xml:533(para)
22758
msgid ""
22759
"The master configuration file, is generated and it is stored in "
22760
"<filename>/var/lib/exim4/config.autogenerated</filename>."
22761
msgstr ""
22762
"The master configuration file, is generated and it is stored in "
22763
"<filename>/var/lib/exim4/config.autogenerated</filename>."
22764
22765
#: serverguide/C/mail.xml:539(para)
22766
msgid ""
22767
"At any time, you should not edit the master configuration file, "
22768
"<filename>/var/lib/exim4/config.autogenerated</filename> manually. It is "
22769
"updated automatically every time you run <command>update-exim4.conf</command>"
22770
msgstr ""
22771
"At any time, you should not edit the master configuration file, "
22772
"<filename>/var/lib/exim4/config.autogenerated</filename> manually. It is "
22773
"updated automatically every time you run <command>update-exim4.conf</command>"
22774
22775
#: serverguide/C/mail.xml:547(para)
22776
msgid ""
22777
"You can run the following command to start <application>Exim4</application> "
22778
"daemon."
22779
msgstr ""
22780
"You can run the following command to start <application>Exim4</application> "
22781
"daemon."
22782
22783
#: serverguide/C/mail.xml:552(command) serverguide/C/mail.xml:994(command)
22784
msgid "sudo /etc/init.d/exim4 start"
22785
msgstr "sudo /etc/init.d/exim4 start"
22786
22787
#: serverguide/C/mail.xml:557(para)
22788
msgid ""
22789
"This section covers configuring Exim4 to use SMTP-AUTH with TLS and SASL."
22790
msgstr ""
22791
"This section covers configuring Exim4 to use SMTP-AUTH with TLS and SASL."
22792
22793
#: serverguide/C/mail.xml:560(para)
22794
msgid ""
22795
"The first step is to create a certificate for use with TLS. Enter the "
22796
"following into a terminal prompt:"
22797
msgstr ""
22798
"The first step is to create a certificate for use with TLS. Enter the "
22799
"following into a terminal prompt:"
22800
22801
#: serverguide/C/mail.xml:564(command)
22802
msgid "sudo /usr/share/doc/exim4-base/examples/exim-gencert"
22803
msgstr "sudo /usr/share/doc/exim4-base/examples/exim-gencert"
22804
22805
#: serverguide/C/mail.xml:566(para)
22806
msgid ""
22807
"Now Exim4 needs to be configured for TLS by editing "
22808
"<filename>/etc/exim4/conf.d/main/03_exim4-config_tlsoptions</filename> add "
22809
"the following:"
22810
msgstr ""
22811
"Now Exim4 needs to be configured for TLS by editing "
22812
"<filename>/etc/exim4/conf.d/main/03_exim4-config_tlsoptions</filename> add "
22813
"the following:"
22814
22815
#: serverguide/C/mail.xml:570(programlisting)
22816
#, no-wrap
22817
msgid ""
22818
"\n"
22819
"MAIN_TLS_ENABLE = yes\n"
22820
msgstr ""
22821
"\n"
22822
"MAIN_TLS_ENABLE = yes\n"
22823
22824
#: serverguide/C/mail.xml:573(para)
22825
msgid ""
22826
"Next you need to configure <application>Exim4</application> to use the "
22827
"<application>saslauthd</application> for authentication. Edit "
22828
"<filename>/etc/exim4/conf.d/auth/30_exim4-config_examples</filename> and "
22829
"uncomment the <emphasis>plain_saslauthd_server</emphasis> and "
22830
"<emphasis>login_saslauthd_server</emphasis> sections:"
22831
msgstr ""
22832
"Next you need to configure <application>Exim4</application> to use the "
22833
"<application>saslauthd</application> for authentication. Edit "
22834
"<filename>/etc/exim4/conf.d/auth/30_exim4-config_examples</filename> and "
22835
"uncomment the <emphasis>plain_saslauthd_server</emphasis> and "
22836
"<emphasis>login_saslauthd_server</emphasis> sections:"
22837
22838
#: serverguide/C/mail.xml:578(programlisting)
22839
#, no-wrap
22840
msgid ""
22841
"\n"
22842
" plain_saslauthd_server:\n"
22843
" driver = plaintext\n"
22844
" public_name = PLAIN\n"
22845
" server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}\n"
22846
" server_set_id = $auth2\n"
22847
" server_prompts = :\n"
22848
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
22849
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
22850
" .endif\n"
22851
"#\n"
22852
" login_saslauthd_server:\n"
22853
" driver = plaintext\n"
22854
" public_name = LOGIN\n"
22855
" server_prompts = \"Username:: : Password::\"\n"
22856
" # don't send system passwords over unencrypted connections\n"
22857
" server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}}\n"
22858
" server_set_id = $auth1\n"
22859
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
22860
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
22861
" .endif\n"
22862
msgstr ""
22863
"\n"
22864
" plain_saslauthd_server:\n"
22865
" driver = plaintext\n"
22866
" public_name = PLAIN\n"
22867
" server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}\n"
22868
" server_set_id = $auth2\n"
22869
" server_prompts = :\n"
22870
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
22871
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
22872
" .endif\n"
22873
"#\n"
22874
" login_saslauthd_server:\n"
22875
" driver = plaintext\n"
22876
" public_name = LOGIN\n"
22877
" server_prompts = \"Username:: : Password::\"\n"
22878
" # don't send system passwords over unencrypted connections\n"
22879
" server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}}\n"
22880
" server_set_id = $auth1\n"
22881
" .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS\n"
22882
" server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}\n"
22883
" .endif\n"
22884
22885
#: serverguide/C/mail.xml:600(para)
22886
msgid "Finally, update the Exim4 configuration and restart the service:"
22887
msgstr "Finally, update the Exim4 configuration and restart the service:"
22888
22889
#: serverguide/C/mail.xml:605(command)
22890
msgid "sudo /etc/init.d/exim4 restart"
22891
msgstr "sudo /etc/init.d/exim4 restart"
22892
22893
#: serverguide/C/mail.xml:610(para)
22894
msgid ""
22895
"This section provides details on configuring the saslauthd to provide "
22896
"authentication for <application>Exim4</application>."
22897
msgstr ""
22898
"This section provides details on configuring the saslauthd to provide "
22899
"authentication for <application>Exim4</application>."
22900
22901
#: serverguide/C/mail.xml:613(para)
22902
msgid ""
22903
"The first step is to install the sasl2-bin package. From a terminal prompt "
22904
"enter the following:"
22905
msgstr ""
22906
"The first step is to install the sasl2-bin package. From a terminal prompt "
22907
"enter the following:"
22908
22909
#: serverguide/C/mail.xml:617(command)
22910
msgid "sudo apt-get install sasl2-bin"
22911
msgstr "sudo apt-get install sasl2-bin"
22912
22913
#: serverguide/C/mail.xml:619(para)
22914
msgid ""
22915
"To configure saslauthd edit the /etc/default/saslauthd configuration file "
22916
"and set START=no to:"
22917
msgstr ""
22918
"To configure saslauthd edit the /etc/default/saslauthd configuration file "
22919
"and set START=no to:"
22920
22921
#: serverguide/C/mail.xml:622(programlisting)
22922
#, no-wrap
22923
msgid ""
22924
"\n"
22925
"START=yes\n"
22926
msgstr ""
22927
"\n"
22928
"START=yes\n"
22929
22930
#: serverguide/C/mail.xml:625(para)
22931
msgid ""
22932
"Next the <emphasis>Debian-exim</emphasis> user needs to be part of the "
22933
"<emphasis>sasl</emphasis> group in order for Exim4 to use the saslauthd "
22934
"service:"
22935
msgstr ""
22936
"Next the <emphasis>Debian-exim</emphasis> user needs to be part of the "
22937
"<emphasis>sasl</emphasis> group in order for Exim4 to use the saslauthd "
22938
"service:"
22939
22940
#: serverguide/C/mail.xml:630(command)
22941
msgid "sudo adduser Debian-exim sasl"
22942
msgstr "sudo adduser Debian-exim sasl"
22943
22944
#: serverguide/C/mail.xml:632(para)
22945
msgid "Now start the <application>saslauthd</application> service:"
22946
msgstr "Now start the <application>saslauthd</application> service:"
22947
22948
#: serverguide/C/mail.xml:636(command)
22949
msgid "sudo /etc/init.d/saslauthd start"
22950
msgstr "sudo /etc/init.d/saslauthd start"
22951
22952
#: serverguide/C/mail.xml:638(para)
22953
msgid ""
22954
"<application>Exim4</application> is now configured with SMTP-AUTH using TLS "
22955
"and SASL authentication."
22956
msgstr ""
22957
"<application>Exim4</application> is now configured with SMTP-AUTH using TLS "
22958
"and SASL authentication."
22959
22960
#: serverguide/C/mail.xml:647(para)
22961
msgid ""
22962
"See <ulink url=\"http://www.exim.org/\">exim.org</ulink> for more "
22963
"information."
22964
msgstr ""
22965
"See <ulink url=\"http://www.exim.org/\">exim.org</ulink> for more "
22966
"information."
22967
22968
#: serverguide/C/mail.xml:652(para)
22969
msgid ""
22970
"There is also an <ulink url=\"http://www.uit.co.uk/content/exim-smtp-mail-"
22971
"server\">Exim4 Book</ulink> available."
22972
msgstr ""
22973
"There is also an <ulink url=\"http://www.uit.co.uk/content/exim-smtp-mail-"
22974
"server\">Exim4 Book</ulink> available."
22975
22976
#: serverguide/C/mail.xml:657(para)
22977
msgid ""
22978
"Another resource is the <ulink "
22979
"url=\"https://help.ubuntu.com/community/Exim4\">Exim4 Ubuntu Wiki </ulink> "
22980
"page."
22981
msgstr ""
22982
22983
#: serverguide/C/mail.xml:666(title)
22984
msgid "Dovecot Server"
22985
msgstr "Dovecot Server"
22986
22987
#: serverguide/C/mail.xml:667(para)
22988
msgid ""
22989
"<application>Dovecot</application> is a Mail Delivery Agent, written with "
22990
"security primarily in mind. It supports the major mailbox formats: mbox or "
22991
"Maildir. This section explain how to set it up as an imap or pop3 server."
22992
msgstr ""
22993
"<application>Dovecot</application> is a Mail Delivery Agent, written with "
22994
"security primarily in mind. It supports the major mailbox formats: mbox or "
22995
"Maildir. This section explain how to set it up as an IMAP or POP3 server."
22996
22997
#: serverguide/C/mail.xml:675(para)
22998
msgid ""
22999
"To install <application>dovecot</application>, run the following command in "
23000
"the command prompt:"
23001
msgstr ""
23002
"To install <application>dovecot</application>, run the following command in "
23003
"the command prompt:"
23004
23005
#: serverguide/C/mail.xml:680(command)
23006
msgid "sudo apt-get install dovecot-imapd dovecot-pop3d"
23007
msgstr "sudo apt-get install dovecot-imapd dovecot-pop3d"
23008
23009
#: serverguide/C/mail.xml:685(para)
23010
msgid ""
23011
"To configure <application>dovecot</application>, you can edit the file "
23012
"<filename>/etc/dovecot/dovecot.conf</filename>. You can choose the protocol "
23013
"you use. It could be pop3, pop3s (pop3 secure), imap and imaps (imap "
23014
"secure). A description of these protocols is beyond the scope of this guide. "
23015
"For further information, refer to the Wikipedia articles on <ulink "
23016
"url=\"http://en.wikipedia.org/wiki/POP3\">POP3</ulink> and <ulink "
23017
"url=\"http://en.wikipedia.org/wiki/Internet_Message_Access_Protocol\">IMAP</u"
23018
"link>."
23019
msgstr ""
23020
"To configure <application>dovecot</application>, you can edit the file "
23021
"<filename>/etc/dovecot/dovecot.conf</filename>. You can choose the protocol "
23022
"you use. It could be pop3, pop3s (pop3 secure), imap and imaps (imap "
23023
"secure). A description of these protocols is beyond the scope of this guide. "
23024
"For further information, refer to the Wikipedia articles on <ulink "
23025
"url=\"http://en.wikipedia.org/wiki/POP3\">POP3</ulink> and <ulink "
23026
"url=\"http://en.wikipedia.org/wiki/Internet_Message_Access_Protocol\">IMAP</u"
23027
"link>."
23028
23029
#: serverguide/C/mail.xml:695(para)
23030
msgid ""
23031
"IMAPS and POP3S are more secure that the simple IMAP and POP3 because they "
23032
"use SSL encryption to connect. Once you have chosen the protocol, amend the "
23033
"following line in the file <filename>/etc/dovecot/dovecot.conf</filename>:"
23034
msgstr ""
23035
"IMAPS and POP3S are more secure that the simple IMAP and POP3 because they "
23036
"use SSL encryption to connect. Once you have chosen the protocol, amend the "
23037
"following line in the file <filename>/etc/dovecot/dovecot.conf</filename>:"
23038
23039
#: serverguide/C/mail.xml:701(programlisting)
23040
#, no-wrap
23041
msgid ""
23042
"\n"
23043
"protocols = pop3 pop3s imap imaps\n"
23044
msgstr ""
23045
"\n"
23046
"protocols = pop3 pop3s imap imaps\n"
23047
23048
#: serverguide/C/mail.xml:704(para)
23049
msgid ""
23050
"Next, choose the mailbox you would like to use. "
23051
"<application>Dovecot</application> supports <emphasis "
23052
"role=\"strong\">maildir</emphasis> and <emphasis "
23053
"role=\"strong\">mbox</emphasis> formats. These are the most commonly used "
23054
"mailbox formats. They both have their own benefits and are discussed on "
23055
"<ulink url=\"http://wiki.dovecot.org/MailboxFormat\">the Dovecot web "
23056
"site</ulink>."
23057
msgstr ""
23058
"Next, choose the mailbox you would like to use. "
23059
"<application>Dovecot</application> supports <emphasis "
23060
"role=\"strong\">maildir</emphasis> and <emphasis "
23061
"role=\"strong\">mbox</emphasis> formats. These are the most commonly used "
23062
"mailbox formats. They both have their own benefits and are discussed on "
23063
"<ulink url=\"http://wiki.dovecot.org/MailboxFormat\">the Dovecot web "
23064
"site</ulink>."
23065
23066
#: serverguide/C/mail.xml:712(para)
23067
msgid ""
23068
"Once you have chosen your mailbox type, edit the file "
23069
"<filename>/etc/dovecot/dovecot.conf</filename> and change the following line:"
23070
msgstr ""
23071
"Once you have chosen your mailbox type, edit the file "
23072
"<filename>/etc/dovecot/dovecot.conf</filename> and change the following line:"
23073
23074
#: serverguide/C/mail.xml:717(programlisting)
23075
#, no-wrap
23076
msgid ""
23077
"\n"
23078
"mail_location = maildir:~/Maildir # (for maildir)\n"
23079
"or\n"
23080
"mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u # (for mbox)\n"
23081
msgstr ""
23082
"\n"
23083
"mail_location = maildir:~/Maildir # (for maildir)\n"
23084
"or\n"
23085
"mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u # (for mbox)\n"
23086
23087
#: serverguide/C/mail.xml:723(para)
23088
msgid ""
23089
"You should configure your Mail Transport Agent (MTA) to transfer the "
23090
"incoming mail to this type of mailbox if it is different from the one you "
23091
"have configured."
23092
msgstr ""
23093
"You should configure your Mail Transport Agent (MTA) to transfer the "
23094
"incoming mail to this type of mailbox if it is different from the one you "
23095
"have configured."
23096
23097
#: serverguide/C/mail.xml:729(para)
23098
msgid ""
23099
"Once you have configured dovecot, restart the "
23100
"<application>dovecot</application> daemon in order to test your setup:"
23101
msgstr ""
23102
"Once you have configured dovecot, restart the "
23103
"<application>dovecot</application> daemon in order to test your setup:"
23104
23105
#: serverguide/C/mail.xml:738(para)
23106
msgid ""
23107
"If you have enabled imap, or pop3, you can also try to log in with the "
23108
"commands <command>telnet localhost pop3</command> or <command>telnet "
23109
"localhost imap2</command>. If you see something like the following, the "
23110
"installation has been successful:"
23111
msgstr ""
23112
"If you have enabled imap, or pop3, you can also try to log in with the "
23113
"commands <command>telnet localhost pop3</command> or <command>telnet "
23114
"localhost imap2</command>. If you see something like the following, the "
23115
"installation has been successful:"
23116
23117
#: serverguide/C/mail.xml:745(programlisting)
23118
#, no-wrap
23119
msgid ""
23120
"\n"
23121
"bhuvan@rainbow:~$ telnet localhost pop3\n"
23122
"Trying 127.0.0.1...\n"
23123
"Connected to localhost.localdomain.\n"
23124
"Escape character is '^]'.\n"
23125
"+OK Dovecot ready.\n"
23126
msgstr ""
23127
"\n"
23128
"bhuvan@rainbow:~$ telnet localhost pop3\n"
23129
"Trying 127.0.0.1...\n"
23130
"Connected to localhost.localdomain.\n"
23131
"Escape character is '^]'.\n"
23132
"+OK Dovecot ready.\n"
23133
23134
#: serverguide/C/mail.xml:754(title)
23135
msgid "Dovecot SSL Configuration"
23136
msgstr "Dovecot SSL Configuration"
23137
23138
#: serverguide/C/mail.xml:755(para)
23139
msgid ""
23140
"To configure <application>dovecot</application> to use SSL, you can edit the "
23141
"file <filename>/etc/dovecot/dovecot.conf</filename> and amend following "
23142
"lines:"
23143
msgstr ""
23144
"To configure <application>dovecot</application> to use SSL, you can edit the "
23145
"file <filename>/etc/dovecot/dovecot.conf</filename> and amend following "
23146
"lines:"
23147
23148
#: serverguide/C/mail.xml:760(programlisting)
23149
#, no-wrap
23150
msgid ""
23151
"\n"
23152
"ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem\n"
23153
"ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key\n"
23154
"ssl_disable = no\n"
23155
"disable_plaintext_auth = no\n"
23156
msgstr ""
23157
"\n"
23158
"ssl_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem\n"
23159
"ssl_key_file = /etc/ssl/private/ssl-cert-snakeoil.key\n"
23160
"ssl_disable = no\n"
23161
"disable_plaintext_auth = no\n"
23162
23163
#: serverguide/C/mail.xml:766(para)
23164
msgid ""
23165
"You can get the SSL certificate from a Certificate Issuing Authority or you "
23166
"can create self signed SSL certificate. The latter is a good option for "
23167
"email, because SMTP clients rarely complain about \"self-signed "
23168
"certificates\". Please refer to <xref linkend=\"certificates-and-"
23169
"security\"/> for details about how to create self signed SSL certificate. "
23170
"Once you create the certificate, you will have a key file and a certificate "
23171
"file. Please copy them to the location pointed in the "
23172
"<filename>/etc/dovecot/dovecot.conf</filename> configuration file."
23173
msgstr ""
23174
"You can get the SSL certificate from a Certificate Issuing Authority or you "
23175
"can create self signed SSL certificate. The latter is a good option for e-"
23176
"mail, because SMTP clients rarely complain about \"self-signed "
23177
"certificates\". Please refer to <xref linkend=\"certificates-and-"
23178
"security\"/> for details about how to create self signed SSL certificate. "
23179
"Once you create the certificate, you will have a key file and a certificate "
23180
"file. Please copy them to the location pointed in the "
23181
"<filename>/etc/dovecot/dovecot.conf</filename> configuration file."
23182
23183
#: serverguide/C/mail.xml:781(title)
23184
msgid "Firewall Configuration for an Email Server"
23185
msgstr "Firewall Configuration for an E-mail Server"
23186
23187
#: serverguide/C/mail.xml:787(para)
23188
msgid "IMAP - 143"
23189
msgstr "IMAP - 143"
23190
23191
#: serverguide/C/mail.xml:788(para)
23192
msgid "IMAPS - 993"
23193
msgstr "IMAPS - 993"
23194
23195
#: serverguide/C/mail.xml:789(para)
23196
msgid "POP3 - 110"
23197
msgstr "POP3 - 110"
23198
23199
#: serverguide/C/mail.xml:790(para)
23200
msgid "POP3S - 995"
23201
msgstr "POP3S - 995"
23202
23203
#: serverguide/C/mail.xml:782(para)
23204
msgid ""
23205
"To access your mail server from another computer, you must configure your "
23206
"firewall to allow connections to the server on the necessary ports. "
23207
"<placeholder-1/>"
23208
msgstr ""
23209
"To access your mail server from another computer, you must configure your "
23210
"firewall to allow connections to the server on the necessary ports. "
23211
"<placeholder-1/>"
23212
23213
#: serverguide/C/mail.xml:799(para)
23214
msgid ""
23215
"See the <ulink url=\"http://www.dovecot.org/\">Dovecot website</ulink> for "
23216
"more information."
23217
msgstr ""
23218
"See the <ulink url=\"http://www.dovecot.org/\">Dovecot website</ulink> for "
23219
"more information."
23220
23221
#: serverguide/C/mail.xml:804(para)
23222
msgid ""
23223
"Also, the <ulink url=\"https://help.ubuntu.com/community/Dovecot\">Dovecot "
23224
"Ubuntu Wiki</ulink> page has more details."
23225
msgstr ""
23226
23227
#: serverguide/C/mail.xml:813(title) serverguide/C/mail.xml:890(title) serverguide/C/mail.xml:1113(title)
23228
msgid "Mailman"
23229
msgstr "Mailman"
23230
23231
#: serverguide/C/mail.xml:814(para)
23232
msgid ""
23233
"Mailman is an open source program for managing electronic mail discussions "
23234
"and e-newsletter lists. Many open source mailing lists (including all the "
23235
"<ulink url=\"http://lists.ubuntu.com\">Ubuntu mailing lists</ulink>) use "
23236
"Mailman as their mailing list software. It is powerful and easy to install "
23237
"and maintain."
23238
msgstr ""
23239
"Mailman is an open source program for managing electronic mail discussions "
23240
"and e-newsletter lists. Many open source mailing lists (including all the "
23241
"<ulink url=\"http://lists.ubuntu.com\">Ubuntu mailing lists</ulink>) use "
23242
"Mailman as their mailing list software. It is powerful and easy to install "
23243
"and maintain."
23244
23245
#: serverguide/C/mail.xml:824(para)
23246
msgid ""
23247
"Mailman provides a web interface for the administrators and users, using an "
23248
"external mail server to send and receive emails. It works perfectly with the "
23249
"following mail servers:"
23250
msgstr ""
23251
"Mailman provides a web interface for the administrators and users, using an "
23252
"external mail server to send and receive e-mails. It works perfectly with "
23253
"the following mail servers:"
23254
23255
#: serverguide/C/mail.xml:835(application)
23256
msgid "Exim"
23257
msgstr "Exim"
23258
23259
#: serverguide/C/mail.xml:838(application)
23260
msgid "Sendmail"
23261
msgstr "Sendmail"
23262
23263
#: serverguide/C/mail.xml:841(application)
23264
msgid "Qmail"
23265
msgstr "Qmail"
23266
23267
#: serverguide/C/mail.xml:846(para)
23268
msgid ""
23269
"We will see how to install and configure Mailman with, the Apache web "
23270
"server, and either the Postfix or Exim mail server. If you wish to install "
23271
"Mailman with a different mail server, please refer to the references section."
23272
msgstr ""
23273
"We will see how to install and configure Mailman with, the Apache web "
23274
"server, and either the Postfix or Exim mail server. If you wish to install "
23275
"Mailman with a different mail server, please refer to the references section."
23276
23277
#: serverguide/C/mail.xml:853(para)
23278
msgid ""
23279
"You only need to install one mail server and "
23280
"<application>Postfix</application> is the default Ubuntu Mail Transfer Agent."
23281
msgstr ""
23282
"You only need to install one mail server and "
23283
"<application>Postfix</application> is the default Ubuntu Mail Transfer Agent."
23284
23285
#: serverguide/C/mail.xml:858(title) serverguide/C/mail.xml:917(title)
23286
msgid "Apache2"
23287
msgstr "Apache2"
23288
23289
#: serverguide/C/mail.xml:859(para)
23290
msgid ""
23291
"To install apache2 you refer to <ulink url=\"./web-servers.xml#http-"
23292
"installation\">HTTPD Installation</ulink> section for details."
23293
msgstr ""
23294
"To install apache2 you refer to <ulink url=\"./web-servers.xml#http-"
23295
"installation\">HTTPD Installation</ulink> section for details."
23296
23297
#: serverguide/C/mail.xml:867(para)
23298
msgid ""
23299
"For instructions on installing and configuring Postfix refer to <xref "
23300
"linkend=\"postfix\"/>"
23301
msgstr ""
23302
"For instructions on installing and configuring Postfix refer to <xref "
23303
"linkend=\"postfix\"/>"
23304
23305
#: serverguide/C/mail.xml:873(para)
23306
msgid "To install Exim4 refer to <xref linkend=\"exim4\"/>."
23307
msgstr "To install Exim4 refer to <xref linkend=\"exim4\"/>."
23308
23309
#: serverguide/C/mail.xml:884(application)
23310
msgid "dc_use_split_config='true'"
23311
msgstr "dc_use_split_config='true'"
23312
23313
#: serverguide/C/mail.xml:876(para)
23314
msgid ""
23315
"Once exim4 is installed, the configuration files are stored in the "
23316
"<filename>/etc/exim4</filename> directory. In Ubuntu, by default, the exim4 "
23317
"configuration files are split across different files. You can change this "
23318
"behavior by changing the following variable in the "
23319
"<filename>/etc/exim4/update-exim4.conf</filename> file: <placeholder-1/>"
23320
msgstr ""
23321
"Once exim4 is installed, the configuration files are stored in the "
23322
"<filename>/etc/exim4</filename> directory. In Ubuntu, by default, the exim4 "
23323
"configuration files are split across different files. You can change this "
23324
"behaviour by changing the following variable in the "
23325
"<filename>/etc/exim4/update-exim4.conf</filename> file: <placeholder-1/>"
23326
23327
#: serverguide/C/mail.xml:891(para)
23328
msgid ""
23329
"To install <application>Mailman</application>, run following command at a "
23330
"terminal prompt:"
23331
msgstr ""
23332
"To install <application>Mailman</application>, run following command at a "
23333
"terminal prompt:"
23334
23335
#: serverguide/C/mail.xml:895(command)
23336
msgid "sudo apt-get install mailman"
23337
msgstr "sudo apt-get install mailman"
23338
23339
#: serverguide/C/mail.xml:897(para)
23340
msgid ""
23341
"It copies the installation files in "
23342
"<application>/var/lib/mailman</application> directory. It installs the CGI "
23343
"scripts in <application>/usr/lib/cgi-bin/mailman</application> directory. It "
23344
"creates <emphasis>list</emphasis> linux user. It creates the "
23345
"<emphasis>list</emphasis> linux group. The mailman process will be owned by "
23346
"this user."
23347
msgstr ""
23348
"It copies the installation files in "
23349
"<application>/var/lib/mailman</application> directory. It installs the CGI "
23350
"scripts in <application>/usr/lib/cgi-bin/mailman</application> directory. It "
23351
"creates <emphasis>list</emphasis> linux user. It creates the "
23352
"<emphasis>list</emphasis> linux group. The mailman process will be owned by "
23353
"this user."
23354
23355
#: serverguide/C/mail.xml:909(para)
23356
msgid ""
23357
"This section assumes you have successfully installed "
23358
"<application>mailman</application>, <application>apache2</application>, and "
23359
"<application>postfix</application> or <application>exim4</application>. Now "
23360
"you just need to configure them."
23361
msgstr ""
23362
"This section assumes you have successfully installed "
23363
"<application>mailman</application>, <application>apache2</application>, and "
23364
"<application>postfix</application> or <application>exim4</application>. Now "
23365
"you just need to configure them."
23366
23367
#: serverguide/C/mail.xml:918(para)
23368
msgid ""
23369
"An example Apache configuration file comes with "
23370
"<application>Mailman</application> and is placed in "
23371
"<filename>/etc/mailman/apache.conf</filename>. In order for Apache to use "
23372
"the config file it needs to be copied to <filename>/etc/apache2/sites-"
23373
"available</filename>:"
23374
msgstr ""
23375
"An example Apache configuration file comes with "
23376
"<application>Mailman</application> and is placed in "
23377
"<filename>/etc/mailman/apache.conf</filename>. In order for Apache to use "
23378
"the config file it needs to be copied to <filename>/etc/apache2/sites-"
23379
"available</filename>:"
23380
23381
#: serverguide/C/mail.xml:924(command)
23382
msgid ""
23383
"sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf"
23384
msgstr ""
23385
"sudo cp /etc/mailman/apache.conf /etc/apache2/sites-available/mailman.conf"
23386
23387
#: serverguide/C/mail.xml:926(para)
23388
msgid ""
23389
"This will setup a new Apache <emphasis>VirtualHost</emphasis> for the "
23390
"Mailman administration site. Now enable the new configuration and restart "
23391
"Apache:"
23392
msgstr ""
23393
"This will setup a new Apache <emphasis>VirtualHost</emphasis> for the "
23394
"Mailman administration site. Now enable the new configuration and restart "
23395
"Apache:"
23396
23397
#: serverguide/C/mail.xml:931(command)
23398
msgid "sudo a2ensite mailman.conf"
23399
msgstr "sudo a2ensite mailman.conf"
23400
23401
#: serverguide/C/mail.xml:934(para)
23402
msgid ""
23403
"Mailman uses apache2 to render its CGI scripts. The mailman CGI scripts are "
23404
"installed in the <application>/usr/lib/cgi-bin/mailman</application> "
23405
"directory. So, the mailman url will be http://hostname/cgi-bin/mailman/. You "
23406
"can make changes to the <filename>/etc/apache2/sites-"
23407
"available/mailman.conf</filename> file if you wish to change this behavior."
23408
msgstr ""
23409
"Mailman uses apache2 to render its CGI scripts. The mailman CGI scripts are "
23410
"installed in the <application>/usr/lib/cgi-bin/mailman</application> "
23411
"directory. So, the mailman url will be http://hostname/cgi-bin/mailman/. You "
23412
"can make changes to the <filename>/etc/apache2/sites-"
23413
"available/mailman.conf</filename> file if you wish to change this behaviour."
23414
23415
#: serverguide/C/mail.xml:945(para)
23416
msgid ""
23417
"For <application>Postfix</application> integration, we will associate the "
23418
"domain lists.example.com with the mailing lists. Please replace "
23419
"<emphasis>lists.example.com</emphasis> with the domain of your choosing."
23420
msgstr ""
23421
"For <application>Postfix</application> integration, we will associate the "
23422
"domain lists.example.com with the mailing lists. Please replace "
23423
"<emphasis>lists.example.com</emphasis> with the domain of your choosing."
23424
23425
#: serverguide/C/mail.xml:949(para)
23426
msgid ""
23427
"You can use the postconf command to add the necessary configuration to "
23428
"<filename>/etc/postfix/main.cf</filename>:"
23429
msgstr ""
23430
"You can use the postconf command to add the necessary configuration to "
23431
"<filename>/etc/postfix/main.cf</filename>:"
23432
23433
#: serverguide/C/mail.xml:953(command)
23434
msgid "sudo postconf -e 'relay_domains = lists.example.com'"
23435
msgstr "sudo postconf -e 'relay_domains = lists.example.com'"
23436
23437
#: serverguide/C/mail.xml:954(command)
23438
msgid "sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'"
23439
msgstr "sudo postconf -e 'transport_maps = hash:/etc/postfix/transport'"
23440
23441
#: serverguide/C/mail.xml:955(command)
23442
msgid "sudo postconf -e 'mailman_destination_recipient_limit = 1'"
23443
msgstr "sudo postconf -e 'mailman_destination_recipient_limit = 1'"
23444
23445
#: serverguide/C/mail.xml:957(para)
23446
msgid ""
23447
"In <filename>/etc/postfix/master.cf</filename> double check that you have "
23448
"the following transport:"
23449
msgstr ""
23450
"In <filename>/etc/postfix/master.cf</filename> double check that you have "
23451
"the following transport:"
23452
23453
#: serverguide/C/mail.xml:960(programlisting)
23454
#, no-wrap
23455
msgid ""
23456
"\n"
23457
"mailman unix - n n - - pipe\n"
23458
" flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py\n"
23459
" ${nexthop} ${user}\n"
23460
msgstr ""
23461
"\n"
23462
"mailman unix - n n - - pipe\n"
23463
" flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py\n"
23464
" ${nexthop} ${user}\n"
23465
23466
#: serverguide/C/mail.xml:965(para)
23467
msgid ""
23468
"It calls the <emphasis>postfix-to-mailman.py</emphasis> script when a mail "
23469
"is delivered to a list."
23470
msgstr ""
23471
"It calls the <emphasis>postfix-to-mailman.py</emphasis> script when a mail "
23472
"is delivered to a list."
23473
23474
#: serverguide/C/mail.xml:968(para)
23475
msgid ""
23476
"Associate the domain lists.example.com to the Mailman transport with the "
23477
"transport map. Edit the file <filename>/etc/postfix/transport</filename>:"
23478
msgstr ""
23479
"Associate the domain lists.example.com to the Mailman transport with the "
23480
"transport map. Edit the file <filename>/etc/postfix/transport</filename>:"
23481
23482
#: serverguide/C/mail.xml:971(programlisting)
23483
#, no-wrap
23484
msgid ""
23485
"\n"
23486
"lists.example.com mailman:\n"
23487
msgstr ""
23488
"\n"
23489
"lists.example.com mailman:\n"
23490
23491
#: serverguide/C/mail.xml:974(para)
23492
msgid ""
23493
"Now have <application>Postfix</application> build the transport map by "
23494
"entering the following from a terminal prompt:"
23495
msgstr ""
23496
"Now have <application>Postfix</application> build the transport map by "
23497
"entering the following from a terminal prompt:"
23498
23499
#: serverguide/C/mail.xml:978(command)
23500
msgid "sudo postmap -v /etc/postfix/transport"
23501
msgstr "sudo postmap -v /etc/postfix/transport"
23502
23503
#: serverguide/C/mail.xml:980(para)
23504
msgid "Then restart Postfix to enable the new configurations:"
23505
msgstr "Then restart Postfix to enable the new configurations:"
23506
23507
#: serverguide/C/mail.xml:989(para)
23508
msgid ""
23509
"Once Exim4 is installed, you can start the Exim server using the following "
23510
"command from a terminal prompt:"
23511
msgstr ""
23512
"Once Exim4 is installed, you can start the Exim server using the following "
23513
"command from a terminal prompt:"
23514
23515
#: serverguide/C/mail.xml:1005(para) serverguide/C/mail.xml:1020(title)
23516
msgid "Main"
23517
msgstr "Main"
23518
23519
#: serverguide/C/mail.xml:1008(para) serverguide/C/mail.xml:1060(title)
23520
msgid "Transport"
23521
msgstr "Transport"
23522
23523
#: serverguide/C/mail.xml:1011(para) serverguide/C/mail.xml:1083(title)
23524
msgid "Router"
23525
msgstr "Router"
23526
23527
#: serverguide/C/mail.xml:996(para)
23528
msgid ""
23529
"In order to make mailman work with Exim4, you need to configure Exim4. As "
23530
"mentioned earlier, by default, Exim4 uses multiple configuration files of "
23531
"different types. For details, please refer to the <ulink "
23532
"url=\"http://www.exim.org\">Exim</ulink> web site. To run mailman, we should "
23533
"add new a configuration file to the following configuration types: "
23534
"<placeholder-1/> Exim creates a master configuration file by sorting all "
23535
"these mini configuration files. So, the order of these configuration files "
23536
"is very important."
23537
msgstr ""
23538
"In order to make mailman work with Exim4, you need to configure Exim4. As "
23539
"mentioned earlier, by default, Exim4 uses multiple configuration files of "
23540
"different types. For details, please refer to the <ulink "
23541
"url=\"http://www.exim.org\">Exim</ulink> web site. To run mailman, we should "
23542
"add new a configuration file to the following configuration types: "
23543
"<placeholder-1/> Exim creates a master configuration file by sorting all "
23544
"these mini configuration files. So, the order of these configuration files "
23545
"is very important."
23546
23547
#: serverguide/C/mail.xml:1027(programlisting)
23548
#, no-wrap
23549
msgid ""
23550
"\n"
23551
"# start\n"
23552
"# Home dir for your Mailman installation -- aka Mailman's prefix\n"
23553
"# directory.\n"
23554
"# On Ubuntu this should be \"/var/lib/mailman\"\n"
23555
"# This is normally the same as ~mailman\n"
23556
"MM_HOME=/var/lib/mailman\n"
23557
"#\n"
23558
"# User and group for Mailman, should match your --with-mail-gid\n"
23559
"# switch to Mailman's configure script. Value is normally \"mailman\"\n"
23560
"MM_UID=list\n"
23561
"MM_GID=list\n"
23562
"#\n"
23563
"# Domains that your lists are in - colon separated list\n"
23564
"# you may wish to add these into local_domains as well\n"
23565
"domainlist mm_domains=hostname.com\n"
23566
"#\n"
23567
"# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n"
23568
"#\n"
23569
"# These values are derived from the ones above and should not need\n"
23570
"# editing unless you have munged your mailman installation\n"
23571
"#\n"
23572
"# The path of the Mailman mail wrapper script\n"
23573
"MM_WRAP=MM_HOME/mail/mailman\n"
23574
"#\n"
23575
"# The path of the list config file (used as a required file when\n"
23576
"# verifying list addresses)\n"
23577
"MM_LISTCHK=MM_HOME/lists/${lc::$local_part}/config.pck\n"
23578
"# end\n"
23579
msgstr ""
23580
"\n"
23581
"# start\n"
23582
"# Home dir for your Mailman installation -- aka Mailman's prefix\n"
23583
"# directory.\n"
23584
"# On Ubuntu this should be \"/var/lib/mailman\"\n"
23585
"# This is normally the same as ~mailman\n"
23586
"MM_HOME=/var/lib/mailman\n"
23587
"#\n"
23588
"# User and group for Mailman, should match your --with-mail-gid\n"
23589
"# switch to Mailman's configure script. Value is normally \"mailman\"\n"
23590
"MM_UID=list\n"
23591
"MM_GID=list\n"
23592
"#\n"
23593
"# Domains that your lists are in - colon separated list\n"
23594
"# you may wish to add these into local_domains as well\n"
23595
"domainlist mm_domains=hostname.com\n"
23596
"#\n"
23597
"# -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=\n"
23598
"#\n"
23599
"# These values are derived from the ones above and should not need\n"
23600
"# editing unless you have munged your mailman installation\n"
23601
"#\n"
23602
"# The path of the Mailman mail wrapper script\n"
23603
"MM_WRAP=MM_HOME/mail/mailman\n"
23604
"#\n"
23605
"# The path of the list config file (used as a required file when\n"
23606
"# verifying list addresses)\n"
23607
"MM_LISTCHK=MM_HOME/lists/${lc::$local_part}/config.pck\n"
23608
"# end\n"
23609
23610
#: serverguide/C/mail.xml:1021(para)
23611
msgid ""
23612
"All the configuration files belonging to the main type are stored in the "
23613
"<filename>/etc/exim4/conf.d/main/</filename> directory. You can add the "
23614
"following content to a new file, named <filename>04_exim4-"
23615
"config_mailman</filename>: <placeholder-1/>"
23616
msgstr ""
23617
"All the configuration files belonging to the main type are stored in the "
23618
"<filename>/etc/exim4/conf.d/main/</filename> directory. You can add the "
23619
"following content to a new file, named <filename>04_exim4-"
23620
"config_mailman</filename>: <placeholder-1/>"
23621
23622
#: serverguide/C/mail.xml:1067(programlisting)
23623
#, no-wrap
23624
msgid ""
23625
"\n"
23626
" mailman_transport:\n"
23627
" driver = pipe\n"
23628
" command = MM_WRAP \\\n"
23629
" '${if def:local_part_suffix \\\n"
23630
" {${sg{$local_part_suffix}{-(\\\\w+)(\\\\+.*)?}{\\$1}}} "
23631
"\\\n"
23632
" {post}}' \\\n"
23633
" $local_part\n"
23634
" current_directory = MM_HOME\n"
23635
" home_directory = MM_HOME\n"
23636
" user = MM_UID\n"
23637
" group = MM_GID\n"
23638
msgstr ""
23639
"\n"
23640
" mailman_transport:\n"
23641
" driver = pipe\n"
23642
" command = MM_WRAP \\\n"
23643
" '${if def:local_part_suffix \\\n"
23644
" {${sg{$local_part_suffix}{-(\\\\w+)(\\\\+.*)?}{\\$1}}} "
23645
"\\\n"
23646
" {post}}' \\\n"
23647
" $local_part\n"
23648
" current_directory = MM_HOME\n"
23649
" home_directory = MM_HOME\n"
23650
" user = MM_UID\n"
23651
" group = MM_GID\n"
23652
23653
#: serverguide/C/mail.xml:1061(para)
23654
msgid ""
23655
"All the configuration files belonging to transport type are stored in the "
23656
"<filename>/etc/exim4/conf.d/transport/</filename> directory. You can add the "
23657
"following content to a new file named <filename> 40_exim4-"
23658
"config_mailman</filename>: <placeholder-1/>"
23659
msgstr ""
23660
"All the configuration files belonging to transport type are stored in the "
23661
"<filename>/etc/exim4/conf.d/transport/</filename> directory. You can add the "
23662
"following content to a new file named <filename> 40_exim4-"
23663
"config_mailman</filename>: <placeholder-1/>"
23664
23665
#: serverguide/C/mail.xml:1088(programlisting)
23666
#, no-wrap
23667
msgid ""
23668
"\n"
23669
" mailman_router:\n"
23670
" driver = accept\n"
23671
" require_files = MM_HOME/lists/$local_part/config.pck\n"
23672
" local_part_suffix_optional\n"
23673
" local_part_suffix = -bounces : -bounces+* : \\\n"
23674
" -confirm+* : -join : -leave : \\\n"
23675
" -owner : -request : -admin\n"
23676
" transport = mailman_transport\n"
23677
msgstr ""
23678
"\n"
23679
" mailman_router:\n"
23680
" driver = accept\n"
23681
" require_files = MM_HOME/lists/$local_part/config.pck\n"
23682
" local_part_suffix_optional\n"
23683
" local_part_suffix = -bounces : -bounces+* : \\\n"
23684
" -confirm+* : -join : -leave : \\\n"
23685
" -owner : -request : -admin\n"
23686
" transport = mailman_transport\n"
23687
23688
#: serverguide/C/mail.xml:1084(para)
23689
msgid ""
23690
"All the configuration files belonging to router type are stored in the "
23691
"<filename>/etc/exim4/conf.d/router/</filename> directory. You can add the "
23692
"following content in to a new file named <filename>101_exim4-"
23693
"config_mailman</filename>: <placeholder-1/>"
23694
msgstr ""
23695
"All the configuration files belonging to router type are stored in the "
23696
"<filename>/etc/exim4/conf.d/router/</filename> directory. You can add the "
23697
"following content in to a new file named <filename>101_exim4-"
23698
"config_mailman</filename>: <placeholder-1/>"
23699
23700
#: serverguide/C/mail.xml:1101(para)
23701
msgid ""
23702
"The order of main and transport configuration files can be in any order. "
23703
"But, the order of router configuration files must be the same. This "
23704
"particular file must appear before the <application>200_exim4-"
23705
"config_primary</application> file. These two configuration files contain "
23706
"same type of information. The first file takes the precedence. For more "
23707
"details, please refer to the references section."
23708
msgstr ""
23709
"The order of main and transport configuration files can be in any order. "
23710
"But, the order of router configuration files must be the same. This "
23711
"particular file must appear before the <application>200_exim4-"
23712
"config_primary</application> file. These two configuration files contain "
23713
"same type of information. The first file takes the precedence. For more "
23714
"details, please refer to the references section."
23715
23716
#: serverguide/C/mail.xml:1114(para)
23717
msgid ""
23718
"Once mailman is installed, you can run it using the following command:"
23719
msgstr ""
23720
"Once mailman is installed, you can run it using the following command:"
23721
23722
#: serverguide/C/mail.xml:1118(command)
23723
msgid "sudo /etc/init.d/mailman start"
23724
msgstr "sudo /etc/init.d/mailman start"
23725
23726
#: serverguide/C/mail.xml:1120(para)
23727
msgid ""
23728
"Once mailman is installed, you should create the default mailing list. Run "
23729
"the following command to create the mailing list:"
23730
msgstr ""
23731
"Once mailman is installed, you should create the default mailing list. Run "
23732
"the following command to create the mailing list:"
23733
23734
#: serverguide/C/mail.xml:1126(command)
23735
msgid "sudo /usr/sbin/newlist mailman"
23736
msgstr "sudo /usr/sbin/newlist mailman"
23737
23738
#: serverguide/C/mail.xml:1129(programlisting)
23739
#, no-wrap
23740
msgid ""
23741
"\n"
23742
" Enter the email address of the person running the list: bhuvan at "
23743
"ubuntu.com\n"
23744
" Initial mailman password:\n"
23745
" To finish creating your mailing list, you must edit your "
23746
"<filename>/etc/aliases</filename> (or\n"
23747
" equivalent) file by adding the following lines, and possibly running the\n"
23748
" `newaliases' program:\n"
23749
"\n"
23750
" ## mailman mailing list\n"
23751
" mailman: \"|/var/lib/mailman/mail/mailman post mailman\"\n"
23752
" mailman-admin: \"|/var/lib/mailman/mail/mailman admin mailman\"\n"
23753
" mailman-bounces: \"|/var/lib/mailman/mail/mailman bounces mailman\"\n"
23754
" mailman-confirm: \"|/var/lib/mailman/mail/mailman confirm mailman\"\n"
23755
" mailman-join: \"|/var/lib/mailman/mail/mailman join mailman\"\n"
23756
" mailman-leave: \"|/var/lib/mailman/mail/mailman leave mailman\"\n"
23757
" mailman-owner: \"|/var/lib/mailman/mail/mailman owner mailman\"\n"
23758
" mailman-request: \"|/var/lib/mailman/mail/mailman request mailman\"\n"
23759
" mailman-subscribe: \"|/var/lib/mailman/mail/mailman subscribe "
23760
"mailman\"\n"
23761
" mailman-unsubscribe: \"|/var/lib/mailman/mail/mailman unsubscribe "
23762
"mailman\"\n"
23763
"\n"
23764
" Hit enter to notify mailman owner...\n"
23765
"\n"
23766
" # \n"
23767
msgstr ""
23768
"\n"
23769
" Enter the e-mail address of the person running the list: bhuvan at "
23770
"ubuntu.com\n"
23771
" Initial mailman password:\n"
23772
" To finish creating your mailing list, you must edit your "
23773
"<filename>/etc/aliases</filename> (or\n"
23774
" equivalent) file by adding the following lines, and possibly running the\n"
23775
" `newaliases' program:\n"
23776
"\n"
23777
" ## mailman mailing list\n"
23778
" mailman: \"|/var/lib/mailman/mail/mailman post mailman\"\n"
23779
" mailman-admin: \"|/var/lib/mailman/mail/mailman admin mailman\"\n"
23780
" mailman-bounces: \"|/var/lib/mailman/mail/mailman bounces mailman\"\n"
23781
" mailman-confirm: \"|/var/lib/mailman/mail/mailman confirm mailman\"\n"
23782
" mailman-join: \"|/var/lib/mailman/mail/mailman join mailman\"\n"
23783
" mailman-leave: \"|/var/lib/mailman/mail/mailman leave mailman\"\n"
23784
" mailman-owner: \"|/var/lib/mailman/mail/mailman owner mailman\"\n"
23785
" mailman-request: \"|/var/lib/mailman/mail/mailman request mailman\"\n"
23786
" mailman-subscribe: \"|/var/lib/mailman/mail/mailman subscribe "
23787
"mailman\"\n"
23788
" mailman-unsubscribe: \"|/var/lib/mailman/mail/mailman unsubscribe "
23789
"mailman\"\n"
23790
"\n"
23791
" Hit enter to notify mailman owner...\n"
23792
"\n"
23793
" # \n"
23794
23795
#: serverguide/C/mail.xml:1152(para)
23796
msgid ""
23797
"We have configured either Postfix or Exim4 to recognize all emails from "
23798
"mailman. So, it is not mandatory to make any new entries in "
23799
"<filename>/etc/aliases</filename>. If you have made any changes to the "
23800
"configuration files, please ensure that you restart those services before "
23801
"continuing to next section."
23802
msgstr ""
23803
"We have configured either Postfix or Exim4 to recognise all e-mails from "
23804
"mailman. So, it is not mandatory to make any new entries in "
23805
"<filename>/etc/aliases</filename>. If you have made any changes to the "
23806
"configuration files, please ensure that you restart those services before "
23807
"continuing to next section."
23808
23809
#: serverguide/C/mail.xml:1160(para)
23810
msgid ""
23811
"The Exim4 does not use the above aliases to forward mails to Mailman, as it "
23812
"uses a <emphasis>discover</emphasis> approach. To suppress the aliases while "
23813
"creating the list, you can add <emphasis>MTA=None</emphasis> line in Mailman "
23814
"configuration file, <filename>/etc/mailman/mm_cfg.py</filename>."
23815
msgstr ""
23816
"The Exim4 does not use the above aliases to forward mails to Mailman, as it "
23817
"uses a <emphasis>discover</emphasis> approach. To suppress the aliases while "
23818
"creating the list, you can add <emphasis>MTA=None</emphasis> line in Mailman "
23819
"configuration file, <filename>/etc/mailman/mm_cfg.py</filename>."
23820
23821
#: serverguide/C/mail.xml:1171(title)
23822
msgid "Administration"
23823
msgstr "Administration"
23824
23825
#: serverguide/C/mail.xml:1172(para)
23826
msgid ""
23827
"We assume you have a default installation. The mailman cgi scripts are still "
23828
"in the <application>/usr/lib/cgi-bin/mailman/</application> directory. "
23829
"Mailman provides a web based administration facility. To access this page, "
23830
"point your browser to the following url:"
23831
msgstr ""
23832
"We assume you have a default installation. The mailman CGI scripts are still "
23833
"in the <application>/usr/lib/cgi-bin/mailman/</application> directory. "
23834
"Mailman provides a Web based administration facility. To access this page, "
23835
"point your browser to the following URL:"
23836
23837
#: serverguide/C/mail.xml:1180(para)
23838
msgid "http://hostname/cgi-bin/mailman/admin"
23839
msgstr "http://hostname/cgi-bin/mailman/admin"
23840
23841
#: serverguide/C/mail.xml:1184(para)
23842
msgid ""
23843
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
23844
"screen. If you click the mailing list name, it will ask for your "
23845
"authentication password. If you enter the correct password, you will be able "
23846
"to change administrative settings of this mailing list. You can create a new "
23847
"mailing list using the command line utility "
23848
"(<command>/usr/sbin/newlist</command>). Alternatively, you can create a new "
23849
"mailing list using the web interface."
23850
msgstr ""
23851
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
23852
"screen. If you click the mailing list name, it will ask for your "
23853
"authentication password. If you enter the correct password, you will be able "
23854
"to change administrative settings of this mailing list. You can create a new "
23855
"mailing list using the command line utility "
23856
"(<command>/usr/sbin/newlist</command>). Alternatively, you can create a new "
23857
"mailing list using the Web interface."
23858
23859
#: serverguide/C/mail.xml:1197(title)
23860
msgid "Users"
23861
msgstr "Users"
23862
23863
#: serverguide/C/mail.xml:1198(para)
23864
msgid ""
23865
"Mailman provides a web based interface for users. To access this page, point "
23866
"your browser to the following url:"
23867
msgstr ""
23868
"Mailman provides a Web based interface for users. To access this page, point "
23869
"your browser to the following URL:"
23870
23871
#: serverguide/C/mail.xml:1203(para)
23872
msgid "http://hostname/cgi-bin/mailman/listinfo"
23873
msgstr "http://hostname/cgi-bin/mailman/listinfo"
23874
23875
#: serverguide/C/mail.xml:1207(para)
23876
msgid ""
23877
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
23878
"screen. If you click the mailing list name, it will display the subscription "
23879
"form. You can enter your email address, name (optional), and password to "
23880
"subscribe. An email invitation will be sent to you. You can follow the "
23881
"instructions in the email to subscribe."
23882
msgstr ""
23883
"The default mailing list, <emphasis>mailman</emphasis>, will appear in this "
23884
"screen. If you click the mailing list name, it will display the subscription "
23885
"form. You can enter your e-mail address, name (optional), and password to "
23886
"subscribe. An e-mail invitation will be sent to you. You can follow the "
23887
"instructions in the e-mail to subscribe."
23888
23889
#: serverguide/C/mail.xml:1219(ulink)
23890
msgid "GNU Mailman - Installation Manual"
23891
msgstr "GNU Mailman - Installation Manual"
23892
23893
#: serverguide/C/mail.xml:1223(ulink)
23894
msgid "HOWTO - Using Exim 4 and Mailman 2.1 together"
23895
msgstr "HOWTO - Using Exim 4 and Mailman 2.1 together"
23896
23897
#: serverguide/C/mail.xml:1226(para)
23898
msgid ""
23899
"Also, see the <ulink "
23900
"url=\"https://help.ubuntu.com/community/Mailman\">Mailman Ubuntu "
23901
"Wiki</ulink> page."
23902
msgstr ""
23903
23904
#: serverguide/C/mail.xml:1232(title)
23905
msgid "Mail Filtering"
23906
msgstr "Mail Filtering"
23907
23908
#: serverguide/C/mail.xml:1233(para)
23909
msgid ""
23910
"One of the largest issues with email today is the problem of Unsolicited "
23911
"Bulk Email (UBE). Also known as SPAM, such messages may also carry viruses "
23912
"and other forms of malware. According to some reports these messages make up "
23913
"the bulk of all email traffic on the Internet."
23914
msgstr ""
23915
"One of the largest issues with e-mail today is the problem of Unsolicited "
23916
"Bulk E-mail (UBE). Also known as SPAM, such messages may also carry viruses "
23917
"and other forms of malware. According to some reports these messages make up "
23918
"the bulk of all e-mail traffic on the Internet."
23919
23920
#: serverguide/C/mail.xml:1238(para)
23921
msgid ""
23922
"This section will cover integrating <application>Amavisd-new</application>, "
23923
"<application>Spamassassin</application>, and "
23924
"<application>ClamAV</application> with the "
23925
"<application>Postfix</application> Mail Transport Agent (MTA). "
23926
"<application>Postfix</application> can also check email validity by passing "
23927
"it through external content filters. These filters can sometimes determine "
23928
"if a message is spam without needing to process it with more resource "
23929
"intensive applications. Two common filters are <application>dkim-"
23930
"filter</application> and <application>python-policyd-spf</application>."
23931
msgstr ""
23932
"This section will cover integrating <application>Amavisd-new</application>, "
23933
"<application>Spamassassin</application>, and "
23934
"<application>ClamAV</application> with the "
23935
"<application>Postfix</application> Mail Transport Agent (MTA). "
23936
"<application>Postfix</application> can also check e-mail validity by passing "
23937
"it through external content filters. These filters can sometimes determine "
23938
"if a message is spam without needing to process it with more resource "
23939
"intensive applications. Two common filters are <application>dkim-"
23940
"filter</application> and <application>python-policyd-spf</application>."
23941
23942
#: serverguide/C/mail.xml:1248(para)
23943
msgid ""
23944
"<application>Amavisd-new</application> is a wrapper program that can call "
23945
"any number of content filtering programs for spam detection, antivirus, etc."
23946
msgstr ""
23947
"<application>Amavisd-new</application> is a wrapper program that can call "
23948
"any number of content filtering programs for spam detection, antivirus, etc."
23949
23950
#: serverguide/C/mail.xml:1254(para)
23951
msgid ""
23952
"<application>Spamassassin</application> uses a variety of mechanisms to "
23953
"filter email based on the message content."
23954
msgstr ""
23955
"<application>Spamassassin</application> uses a variety of mechanisms to "
23956
"filter e-mail based on the message content."
23957
23958
#: serverguide/C/mail.xml:1259(para)
23959
msgid ""
23960
"<application>ClamAV</application> is an open source antivirus application."
23961
msgstr ""
23962
"<application>ClamAV</application> is an open source antivirus application."
23963
23964
#: serverguide/C/mail.xml:1264(para)
23965
msgid ""
23966
"<application>dkim-filter</application> implements a Sendmail Mail Filter "
23967
"(Milter) for the DomainKeys Identified Mail (DKIM) standard."
23968
msgstr ""
23969
"<application>dkim-filter</application> implements a Sendmail Mail Filter "
23970
"(Milter) for the DomainKeys Identified Mail (DKIM) standard."
23971
23972
#: serverguide/C/mail.xml:1270(para)
23973
msgid ""
23974
"<application>python-policyd-spf</application> enables Sender Policy "
23975
"Framework (SPF) checking with <application>Postfix</application>."
23976
msgstr ""
23977
"<application>python-policyd-spf</application> enables Sender Policy "
23978
"Framework (SPF) checking with <application>Postfix</application>."
23979
23980
#: serverguide/C/mail.xml:1275(para)
23981
msgid "This is how the pieces fit together:"
23982
msgstr "This is how the pieces fit together:"
23983
23984
#: serverguide/C/mail.xml:1280(para)
23985
msgid "An email message is accepted by <application>Postfix</application>."
23986
msgstr "An e-mail message is accepted by <application>Postfix</application>."
23987
23988
#: serverguide/C/mail.xml:1285(para)
23989
msgid ""
23990
"The message is passed through any external filters <application>dkim-"
23991
"filter</application> and <application>python-policyd-spf</application> in "
23992
"this case."
23993
msgstr ""
23994
"The message is passed through any external filters <application>dkim-"
23995
"filter</application> and <application>python-policyd-spf</application> in "
23996
"this case."
23997
23998
#: serverguide/C/mail.xml:1291(para)
23999
msgid "<application>Amavisd-new</application> then processes the message."
24000
msgstr "<application>Amavisd-new</application> then processes the message."
24001
24002
#: serverguide/C/mail.xml:1296(para)
24003
msgid ""
24004
"<application>ClamAV</application> is used to scan the message. If the "
24005
"message contains a virus <application>Postfix</application> will reject the "
24006
"message."
24007
msgstr ""
24008
"<application>ClamAV</application> is used to scan the message. If the "
24009
"message contains a virus <application>Postfix</application> will reject the "
24010
"message."
24011
24012
#: serverguide/C/mail.xml:1302(para)
24013
msgid ""
24014
"Clean messages will then be analyzed by "
24015
"<application>Spamassassin</application> to find out if the message is spam. "
24016
"<application>Spamassassin</application> will then add X-Header lines "
24017
"allowing <application>Amavisd-new</application> to further manipulate the "
24018
"message."
24019
msgstr ""
24020
"Clean messages will then be analysed by "
24021
"<application>Spamassassin</application> to find out if the message is spam. "
24022
"<application>Spamassassin</application> will then add X-Header lines "
24023
"allowing <application>Amavisd-new</application> to further manipulate the "
24024
"message."
24025
24026
#: serverguide/C/mail.xml:1309(para)
24027
msgid ""
24028
"For example, if a message has a Spam score of over fifty the message could "
24029
"be automatically dropped from the queue without the recipient ever having to "
24030
"be bothered. Another, way to handle flagged messages is to deliver them to "
24031
"the Mail User Agent (MUA) allowing the user to deal with the message as they "
24032
"see fit."
24033
msgstr ""
24034
"For example, if a message has a Spam score of over fifty the message could "
24035
"be automatically dropped from the queue without the recipient ever having to "
24036
"be bothered. Another, way to handle flagged messages is to deliver them to "
24037
"the Mail User Agent (MUA) allowing the user to deal with the message as they "
24038
"see fit."
24039
24040
#: serverguide/C/mail.xml:1316(para)
24041
msgid ""
24042
"See <xref linkend=\"postfix\"/> for instructions on installing and "
24043
"configuring Postfix."
24044
msgstr ""
24045
"See <xref linkend=\"postfix\"/> for instructions on installing and "
24046
"configuring Postfix."
24047
24048
#: serverguide/C/mail.xml:1319(para)
24049
msgid ""
24050
"To install the rest of the applications enter the following from a terminal "
24051
"prompt:"
24052
msgstr ""
24053
"To install the rest of the applications enter the following from a terminal "
24054
"prompt:"
24055
24056
#: serverguide/C/mail.xml:1323(command)
24057
msgid "sudo apt-get install amavisd-new spamassassin clamav-daemon"
24058
msgstr "sudo apt-get install amavisd-new spamassassin clamav-daemon"
24059
24060
#: serverguide/C/mail.xml:1324(command)
24061
msgid "sudo apt-get install dkim-filter python-policyd-spf"
24062
msgstr "sudo apt-get install dkim-filter python-policyd-spf"
24063
24064
#: serverguide/C/mail.xml:1326(para)
24065
msgid ""
24066
"There are some optional packages that integrate with "
24067
"<application>Spamassassin</application> for better spam detection:"
24068
msgstr ""
24069
"There are some optional packages that integrate with "
24070
"<application>Spamassassin</application> for better spam detection:"
24071
24072
#: serverguide/C/mail.xml:1330(command)
24073
msgid "sudo apt-get install pyzor razor"
24074
msgstr "sudo apt-get install pyzor razor"
24075
24076
#: serverguide/C/mail.xml:1332(para)
24077
msgid ""
24078
"Along with the main filtering applications compression utilities are needed "
24079
"to process some email attachments:"
24080
msgstr ""
24081
"Along with the main filtering applications compression utilities are needed "
24082
"to process some e-mail attachments:"
24083
24084
#: serverguide/C/mail.xml:1336(command)
24085
msgid ""
24086
"sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip zip"
24087
msgstr ""
24088
"sudo apt-get install arj cabextract cpio lha nomarch pax rar unrar unzip zip"
24089
24090
#: serverguide/C/mail.xml:1339(para)
24091
msgid ""
24092
"If some packages are not found, check that the "
24093
"<emphasis>multiverse</emphasis> repository is enabled in "
24094
"<filename>/etc/apt/sources.list</filename>"
24095
msgstr ""
24096
24097
#: serverguide/C/mail.xml:1340(para)
24098
msgid ""
24099
"If you make changes to the file, be sure to run <command>sudo apt-get "
24100
"update</command> before trying to install again."
24101
msgstr ""
24102
24103
#: serverguide/C/mail.xml:1345(para)
24104
msgid "Now configure everything to work together and filter email."
24105
msgstr "Now configure everything to work together and filter e-mail."
24106
24107
#: serverguide/C/mail.xml:1349(title)
24108
msgid "ClamAV"
24109
msgstr "ClamAV"
24110
24111
#: serverguide/C/mail.xml:1350(para)
24112
msgid ""
24113
"The default behaviour of <application>ClamAV</application> will fit our "
24114
"needs. For more ClamAV configuration options, check the configuration files "
24115
"in <filename>/etc/clamav</filename>."
24116
msgstr ""
24117
"The default behaviour of <application>ClamAV</application> will fit our "
24118
"needs. For more ClamAV configuration options, check the configuration files "
24119
"in <filename>/etc/clamav</filename>."
24120
24121
#: serverguide/C/mail.xml:1355(para)
24122
msgid ""
24123
"Add the <emphasis>clamav</emphasis> user to the <emphasis>amavis</emphasis> "
24124
"group in order for <application>Amavisd-new</application> to have the "
24125
"appropriate access to scan files:"
24126
msgstr ""
24127
"Add the <emphasis>clamav</emphasis> user to the <emphasis>amavis</emphasis> "
24128
"group in order for <application>Amavisd-new</application> to have the "
24129
"appropriate access to scan files:"
24130
24131
#: serverguide/C/mail.xml:1360(command)
24132
msgid "sudo adduser clamav amavis"
24133
msgstr "sudo adduser clamav amavis"
24134
24135
#: serverguide/C/mail.xml:1364(title)
24136
msgid "Spamassassin"
24137
msgstr "Spamassassin"
24138
24139
#: serverguide/C/mail.xml:1365(para)
24140
msgid ""
24141
"Spamassassin automatically detects optional components and will use them if "
24142
"they are present. This means that there is no need to configure "
24143
"<application>pyzor</application> and <application>razor</application>."
24144
msgstr ""
24145
"Spamassassin automatically detects optional components and will use them if "
24146
"they are present. This means that there is no need to configure "
24147
"<application>pyzor</application> and <application>razor</application>."
24148
24149
#: serverguide/C/mail.xml:1369(para)
24150
msgid ""
24151
"Edit <filename>/etc/default/spamassassin</filename> to activate the "
24152
"<application>Spamassassin</application> daemon. Change "
24153
"<emphasis>ENABLED=0</emphasis> to:"
24154
msgstr ""
24155
"Edit <filename>/etc/default/spamassassin</filename> to activate the "
24156
"<application>Spamassassin</application> daemon. Change "
24157
"<emphasis>ENABLED=0</emphasis> to:"
24158
24159
#: serverguide/C/mail.xml:1373(programlisting)
24160
#, no-wrap
24161
msgid ""
24162
"\n"
24163
"ENABLED=1\n"
24164
msgstr ""
24165
"\n"
24166
"ENABLED=1\n"
24167
24168
#: serverguide/C/mail.xml:1376(para)
24169
msgid "Now start the daemon:"
24170
msgstr "Now start the daemon:"
24171
24172
#: serverguide/C/mail.xml:1380(command)
24173
msgid "sudo /etc/init.d/spamassassin start"
24174
msgstr "sudo /etc/init.d/spamassassin start"
24175
24176
#: serverguide/C/mail.xml:1384(title)
24177
msgid "Amavisd-new"
24178
msgstr "Amavisd-new"
24179
24180
#: serverguide/C/mail.xml:1385(para)
24181
msgid ""
24182
"First activate spam and antivirus detection in <application>Amavisd-"
24183
"new</application> by editing <filename>/etc/amavis/conf.d/15-"
24184
"content_filter_mode</filename>:"
24185
msgstr ""
24186
"First activate spam and antivirus detection in <application>Amavisd-"
24187
"new</application> by editing <filename>/etc/amavis/conf.d/15-"
24188
"content_filter_mode</filename>:"
24189
24190
#: serverguide/C/mail.xml:1389(programlisting)
24191
#, no-wrap
24192
msgid ""
24193
"\n"
24194
"use strict;\n"
24195
"\n"
24196
"# You can modify this file to re-enable SPAM checking through spamassassin\n"
24197
"# and to re-enable antivirus checking.\n"
24198
"\n"
24199
"#\n"
24200
"# Default antivirus checking mode\n"
24201
"# Uncomment the two lines below to enable it\n"
24202
"#\n"
24203
"\n"
24204
"@bypass_virus_checks_maps = (\n"
24205
" \\%bypass_virus_checks, \\@bypass_virus_checks_acl, \\"
24206
"$bypass_virus_checks_re);\n"
24207
"\n"
24208
"\n"
24209
"#\n"
24210
"# Default SPAM checking mode\n"
24211
"# Uncomment the two lines below to enable it\n"
24212
"#\n"
24213
"\n"
24214
"@bypass_spam_checks_maps = (\n"
24215
" \\%bypass_spam_checks, \\@bypass_spam_checks_acl, \\"
24216
"$bypass_spam_checks_re);\n"
24217
"\n"
24218
"1; # insure a defined return\n"
24219
msgstr ""
24220
"\n"
24221
"use strict;\n"
24222
"\n"
24223
"# You can modify this file to re-enable SPAM checking through spamassassin\n"
24224
"# and to re-enable antivirus checking.\n"
24225
"\n"
24226
"#\n"
24227
"# Default antivirus checking mode\n"
24228
"# Uncomment the two lines below to enable it\n"
24229
"#\n"
24230
"\n"
24231
"@bypass_virus_checks_maps = (\n"
24232
" \\%bypass_virus_checks, \\@bypass_virus_checks_acl, \\"
24233
"$bypass_virus_checks_re);\n"
24234
"\n"
24235
"\n"
24236
"#\n"
24237
"# Default SPAM checking mode\n"
24238
"# Uncomment the two lines below to enable it\n"
24239
"#\n"
24240
"\n"
24241
"@bypass_spam_checks_maps = (\n"
24242
" \\%bypass_spam_checks, \\@bypass_spam_checks_acl, \\"
24243
"$bypass_spam_checks_re);\n"
24244
"\n"
24245
"1; # insure a defined return\n"
24246
24247
#: serverguide/C/mail.xml:1414(para)
24248
msgid ""
24249
"Bouncing spam can be a bad idea as the return address is often faked. "
24250
"Consider editing <filename>/etc/amavis/conf.d/20-debian_defaults</filename> "
24251
"to set <emphasis>$final_spam_destiny</emphasis> to D_DISCARD rather than "
24252
"D_BOUNCE, as follows:"
24253
msgstr ""
24254
"Bouncing spam can be a bad idea as the return address is often faked. "
24255
"Consider editing <filename>/etc/amavis/conf.d/20-debian_defaults</filename> "
24256
"to set <emphasis>$final_spam_destiny</emphasis> to D_DISCARD rather than "
24257
"D_BOUNCE, as follows:"
24258
24259
#: serverguide/C/mail.xml:1420(programlisting)
24260
#, no-wrap
24261
msgid ""
24262
"\n"
24263
"$final_spam_destiny = D_DISCARD;\n"
24264
msgstr ""
24265
"\n"
24266
"$final_spam_destiny = D_DISCARD;\n"
24267
24268
#: serverguide/C/mail.xml:1424(para)
24269
msgid ""
24270
"Additionally, you may want to adjust the following options to flag more "
24271
"messages as spam:"
24272
msgstr ""
24273
"Additionally, you may want to adjust the following options to flag more "
24274
"messages as spam:"
24275
24276
#: serverguide/C/mail.xml:1428(programlisting)
24277
#, no-wrap
24278
msgid ""
24279
"\n"
24280
"$sa_tag_level_deflt = -999; # add spam info headers if at, or above that "
24281
"level\n"
24282
"$sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level\n"
24283
"$sa_kill_level_deflt = 21.0; # triggers spam evasive actions\n"
24284
"$sa_dsn_cutoff_level = 4; # spam level beyond which a DSN is not sent\n"
24285
msgstr ""
24286
"\n"
24287
"$sa_tag_level_deflt = -999; # add spam info headers if at, or above that "
24288
"level\n"
24289
"$sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level\n"
24290
"$sa_kill_level_deflt = 21.0; # triggers spam evasive actions\n"
24291
"$sa_dsn_cutoff_level = 4; # spam level beyond which a DSN is not sent\n"
24292
24293
#: serverguide/C/mail.xml:1435(para)
24294
msgid ""
24295
"If the server's <emphasis>hostname</emphasis> is different from the domain's "
24296
"MX record you may need to manually set the <emphasis>$myhostname</emphasis> "
24297
"option. Also, if the server receives mail for multiple domains the "
24298
"<emphasis>@local_domains_acl</emphasis> option will need to be customized. "
24299
"Edit the <filename>/etc/amavis/conf.d/50-user</filename> file:"
24300
msgstr ""
24301
"If the server's <emphasis>hostname</emphasis> is different from the domain's "
24302
"MX record you may need to manually set the <emphasis>$myhostname</emphasis> "
24303
"option. Also, if the server receives mail for multiple domains the "
24304
"<emphasis>@local_domains_acl</emphasis> option will need to be customised. "
24305
"Edit the <filename>/etc/amavis/conf.d/50-user</filename> file:"
24306
24307
#: serverguide/C/mail.xml:1442(programlisting)
24308
#, no-wrap
24309
msgid ""
24310
"\n"
24311
"$myhostname = 'mail.example.com';\n"
24312
"@local_domains_acl = ( \"example.com\", \"example.org\" );\n"
24313
msgstr ""
24314
"\n"
24315
"$myhostname = 'mail.example.com';\n"
24316
"@local_domains_acl = ( \"example.com\", \"example.org\" );\n"
24317
24318
#: serverguide/C/mail.xml:1447(para)
24319
msgid ""
24320
"After configuration <application>Amavisd-new</application> needs to be "
24321
"restarted:"
24322
msgstr ""
24323
"After configuration <application>Amavisd-new</application> needs to be "
24324
"restarted:"
24325
24326
#: serverguide/C/mail.xml:1451(command) serverguide/C/mail.xml:1497(command)
24327
msgid "sudo /etc/init.d/amavis restart"
24328
msgstr "sudo /etc/init.d/amavis restart"
24329
24330
#: serverguide/C/mail.xml:1454(title)
24331
msgid "DKIM Whitelist"
24332
msgstr "DKIM Whitelist"
24333
24334
#: serverguide/C/mail.xml:1456(para)
24335
msgid ""
24336
"<application>Amavisd-new</application> can be configured to automatically "
24337
"<emphasis>Whitelist</emphasis> addresses from domains with valid Domain "
24338
"Keys. There are some pre-configured domains in the "
24339
"<filename>/etc/amavis/conf.d/40-policy_banks</filename>."
24340
msgstr ""
24341
"<application>Amavisd-new</application> can be configured to automatically "
24342
"<emphasis>Whitelist</emphasis> addresses from domains with valid Domain "
24343
"Keys. There are some pre-configured domains in the "
24344
"<filename>/etc/amavis/conf.d/40-policy_banks</filename>."
24345
24346
#: serverguide/C/mail.xml:1462(para)
24347
msgid "There are multiple ways to configure the Whitelist for a domain:"
24348
msgstr "There are multiple ways to configure the Whitelist for a domain:"
24349
24350
#: serverguide/C/mail.xml:1468(para)
24351
msgid ""
24352
"<emphasis>'example.com' => 'WHITELIST',</emphasis>: will whitelist any "
24353
"address from the \"example.com\" domain."
24354
msgstr ""
24355
"<emphasis>'example.com' => 'WHITELIST',</emphasis>: will whitelist any "
24356
"address from the \"example.com\" domain."
24357
24358
#: serverguide/C/mail.xml:1473(para)
24359
msgid ""
24360
"<emphasis>'.example.com' => 'WHITELIST',</emphasis>: will whitelist any "
24361
"address from any <emphasis>subdomains</emphasis> of \"example.com\" that "
24362
"have a valid signature."
24363
msgstr ""
24364
"<emphasis>'.example.com' => 'WHITELIST',</emphasis>: will whitelist any "
24365
"address from any <emphasis>subdomains</emphasis> of \"example.com\" that "
24366
"have a valid signature."
24367
24368
#: serverguide/C/mail.xml:1479(para)
24369
msgid ""
24370
"<emphasis>'.example.com/@example.com' => 'WHITELIST',</emphasis>: will "
24371
"whitelist subdomains of \"example.com\" that use the signature of <emphasis "
24372
"role=\"italic\">example.com</emphasis> the parent domain."
24373
msgstr ""
24374
"<emphasis>'.example.com/@example.com' => 'WHITELIST',</emphasis>: will "
24375
"whitelist subdomains of \"example.com\" that use the signature of <emphasis "
24376
"role=\"italic\">example.com</emphasis> the parent domain."
24377
24378
#: serverguide/C/mail.xml:1485(para)
24379
msgid ""
24380
"<emphasis>'./@example.com' => 'WHITELIST',</emphasis>: adds addresses "
24381
"that have a valid signature from \"example.com\". This is usually used for "
24382
"discussion groups that sign thier messages."
24383
msgstr ""
24384
"<emphasis>'./@example.com' => 'WHITELIST',</emphasis>: adds addresses "
24385
"that have a valid signature from \"example.com\". This is usually used for "
24386
"discussion groups that sign thier messages."
24387
24388
#: serverguide/C/mail.xml:1492(para)
24389
msgid ""
24390
"A domain can also have multiple Whitelist configurations. After, editing the "
24391
"file restart <application>amaisd-new</application>:"
24392
msgstr ""
24393
"A domain can also have multiple Whitelist configurations. After, editing the "
24394
"file restart <application>amaisd-new</application>:"
24395
24396
#: serverguide/C/mail.xml:1501(para)
24397
msgid ""
24398
"In this context, once a domain has been added to the Whitelist the message "
24399
"will not receive any anti-virus or spam filtering. This may or may not be "
24400
"the intended behavior you wish for a domain."
24401
msgstr ""
24402
"In this context, once a domain has been added to the Whitelist the message "
24403
"will not receive any anti-virus or spam filtering. This may or may not be "
24404
"the intended behaviour you wish for a domain."
24405
24406
#: serverguide/C/mail.xml:1511(para)
24407
msgid ""
24408
"For <application>Postfix</application> integration, enter the following from "
24409
"a terminal prompt:"
24410
msgstr ""
24411
"For <application>Postfix</application> integration, enter the following from "
24412
"a terminal prompt:"
24413
24414
#: serverguide/C/mail.xml:1515(command)
24415
msgid "sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'"
24416
msgstr "sudo postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'"
24417
24418
#: serverguide/C/mail.xml:1517(para)
24419
msgid ""
24420
"Next edit <filename>/etc/postfix/master.cf</filename> and add the following "
24421
"to the end of the file:"
24422
msgstr ""
24423
"Next edit <filename>/etc/postfix/master.cf</filename> and add the following "
24424
"to the end of the file:"
24425
24426
#: serverguide/C/mail.xml:1520(programlisting)
24427
#, no-wrap
24428
msgid ""
24429
"\n"
24430
"smtp-amavis unix - - - - 2 smtp\n"
24431
" -o smtp_data_done_timeout=1200\n"
24432
" -o smtp_send_xforward_command=yes\n"
24433
" -o disable_dns_lookups=yes\n"
24434
" -o max_use=20\n"
24435
"\n"
24436
"127.0.0.1:10025 inet n - - - - smtpd\n"
24437
" -o content_filter=\n"
24438
" -o local_recipient_maps=\n"
24439
" -o relay_recipient_maps=\n"
24440
" -o smtpd_restriction_classes=\n"
24441
" -o smtpd_delay_reject=no\n"
24442
" -o smtpd_client_restrictions=permit_mynetworks,reject\n"
24443
" -o smtpd_helo_restrictions=\n"
24444
" -o smtpd_sender_restrictions=\n"
24445
" -o smtpd_recipient_restrictions=permit_mynetworks,reject\n"
24446
" -o smtpd_data_restrictions=reject_unauth_pipelining\n"
24447
" -o smtpd_end_of_data_restrictions=\n"
24448
" -o mynetworks=127.0.0.0/8\n"
24449
" -o smtpd_error_sleep_time=0\n"
24450
" -o smtpd_soft_error_limit=1001\n"
24451
" -o smtpd_hard_error_limit=1000\n"
24452
" -o smtpd_client_connection_count_limit=0\n"
24453
" -o smtpd_client_connection_rate_limit=0\n"
24454
" -o "
24455
"receive_override_options=no_header_body_checks,no_unknown_recipient_checks\n"
24456
msgstr ""
24457
"\n"
24458
"smtp-amavis unix - - - - 2 smtp\n"
24459
" -o smtp_data_done_timeout=1200\n"
24460
" -o smtp_send_xforward_command=yes\n"
24461
" -o disable_dns_lookups=yes\n"
24462
" -o max_use=20\n"
24463
"\n"
24464
"127.0.0.1:10025 inet n - - - - smtpd\n"
24465
" -o content_filter=\n"
24466
" -o local_recipient_maps=\n"
24467
" -o relay_recipient_maps=\n"
24468
" -o smtpd_restriction_classes=\n"
24469
" -o smtpd_delay_reject=no\n"
24470
" -o smtpd_client_restrictions=permit_mynetworks,reject\n"
24471
" -o smtpd_helo_restrictions=\n"
24472
" -o smtpd_sender_restrictions=\n"
24473
" -o smtpd_recipient_restrictions=permit_mynetworks,reject\n"
24474
" -o smtpd_data_restrictions=reject_unauth_pipelining\n"
24475
" -o smtpd_end_of_data_restrictions=\n"
24476
" -o mynetworks=127.0.0.0/8\n"
24477
" -o smtpd_error_sleep_time=0\n"
24478
" -o smtpd_soft_error_limit=1001\n"
24479
" -o smtpd_hard_error_limit=1000\n"
24480
" -o smtpd_client_connection_count_limit=0\n"
24481
" -o smtpd_client_connection_rate_limit=0\n"
24482
" -o "
24483
"receive_override_options=no_header_body_checks,no_unknown_recipient_checks\n"
24484
24485
#: serverguide/C/mail.xml:1547(para)
24486
msgid ""
24487
"Also add the following two lines immediately below the "
24488
"<emphasis>\"pickup\"</emphasis> transport service:"
24489
msgstr ""
24490
"Also add the following two lines immediately below the "
24491
"<emphasis>\"pickup\"</emphasis> transport service:"
24492
24493
#: serverguide/C/mail.xml:1550(programlisting)
24494
#, no-wrap
24495
msgid ""
24496
"\n"
24497
" -o content_filter=\n"
24498
" -o receive_override_options=no_header_body_checks\n"
24499
msgstr ""
24500
"\n"
24501
" -o content_filter=\n"
24502
" -o receive_override_options=no_header_body_checks\n"
24503
24504
#: serverguide/C/mail.xml:1554(para)
24505
msgid ""
24506
"This will prevent messages that are generated to report on spam from being "
24507
"classified as spam."
24508
msgstr ""
24509
"This will prevent messages that are generated to report on spam from being "
24510
"classified as spam."
24511
24512
#: serverguide/C/mail.xml:1557(para)
24513
msgid "Now restart <application>Postfix</application>:"
24514
msgstr "Now restart <application>Postfix</application>:"
24515
24516
#: serverguide/C/mail.xml:1563(para)
24517
msgid "Content filtering with spam and virus detection is now enabled."
24518
msgstr "Content filtering with spam and virus detection is now enabled."
24519
24520
#: serverguide/C/mail.xml:1570(para)
24521
msgid ""
24522
"First, test that the <application>Amavisd-new</application> SMTP is "
24523
"listening:"
24524
msgstr ""
24525
"First, test that the <application>Amavisd-new</application> SMTP is "
24526
"listening:"
24527
24528
#: serverguide/C/mail.xml:1573(programlisting)
24529
#, no-wrap
24530
msgid ""
24531
"\n"
24532
"telnet localhost 10024\n"
24533
"Trying 127.0.0.1...\n"
24534
"Connected to localhost.\n"
24535
"Escape character is '^]'.\n"
24536
"220 [127.0.0.1] ESMTP amavisd-new service ready\n"
24537
"^]\n"
24538
msgstr ""
24539
"\n"
24540
"telnet localhost 10024\n"
24541
"Trying 127.0.0.1...\n"
24542
"Connected to localhost.\n"
24543
"Escape character is '^]'.\n"
24544
"220 [127.0.0.1] ESMTP amavisd-new service ready\n"
24545
"^]\n"
24546
24547
#: serverguide/C/mail.xml:1581(para)
24548
msgid ""
24549
"In the Header of messages that go through the content filter you should see:"
24550
msgstr ""
24551
"In the Header of messages that go through the content filter you should see:"
24552
24553
#: serverguide/C/mail.xml:1584(programlisting)
24554
#, no-wrap
24555
msgid ""
24556
"\n"
24557
"X-Spam-Level: \n"
24558
"X-Virus-Scanned: Debian amavisd-new at example.com\n"
24559
"X-Spam-Status: No, hits=-2.3 tagged_above=-1000.0 required=5.0 tests=AWL, "
24560
"BAYES_00\n"
24561
"X-Spam-Level: \n"
24562
msgstr ""
24563
"\n"
24564
"X-Spam-Level: \n"
24565
"X-Virus-Scanned: Debian amavisd-new at example.com\n"
24566
"X-Spam-Status: No, hits=-2.3 tagged_above=-1000.0 required=5.0 tests=AWL, "
24567
"BAYES_00\n"
24568
"X-Spam-Level: \n"
24569
24570
#: serverguide/C/mail.xml:1591(para)
24571
msgid ""
24572
"Your output will vary, but the important thing is that there are <emphasis>X-"
24573
"Virus-Scanned</emphasis> and <emphasis>X-Spam-Status</emphasis> entries."
24574
msgstr ""
24575
"Your output will vary, but the important thing is that there are <emphasis>X-"
24576
"Virus-Scanned</emphasis> and <emphasis>X-Spam-Status</emphasis> entries."
24577
24578
#: serverguide/C/mail.xml:1599(para)
24579
msgid ""
24580
"The best way to figure out why something is going wrong is to check the log "
24581
"files."
24582
msgstr ""
24583
"The best way to figure out why something is going wrong is to check the log "
24584
"files."
24585
24586
#: serverguide/C/mail.xml:1604(para)
24587
msgid ""
24588
"For instructions on <application>Postfix</application> logging see the <xref "
24589
"linkend=\"postfix-troubleshooting\"/> section."
24590
msgstr ""
24591
"For instructions on <application>Postfix</application> logging see the <xref "
24592
"linkend=\"postfix-troubleshooting\"/> section."
24593
24594
#: serverguide/C/mail.xml:1610(para)
24595
msgid ""
24596
"<application>Amavisd-new</application> uses "
24597
"<application>Syslog</application> to send messages to "
24598
"<filename>/var/log/mail.log</filename>. The amount of detail can be "
24599
"increased by adding the <emphasis>$log_level</emphasis> option to "
24600
"<filename>/etc/amavis/conf.d/50-user</filename>, and setting the value from "
24601
"1 to 5."
24602
msgstr ""
24603
"<application>Amavisd-new</application> uses "
24604
"<application>Syslog</application> to send messages to "
24605
"<filename>/var/log/mail.log</filename>. The amount of detail can be "
24606
"increased by adding the <emphasis>$log_level</emphasis> option to "
24607
"<filename>/etc/amavis/conf.d/50-user</filename>, and setting the value from "
24608
"1 to 5."
24609
24610
#: serverguide/C/mail.xml:1615(programlisting)
24611
#, no-wrap
24612
msgid ""
24613
"\n"
24614
"$log_level = 2;\n"
24615
msgstr ""
24616
"\n"
24617
"$log_level = 2;\n"
24618
24619
#: serverguide/C/mail.xml:1619(para)
24620
msgid ""
24621
"When the <application>Amavisd-new</application> log output is increased "
24622
"<application>Spamassassin</application> log output is also increased."
24623
msgstr ""
24624
"When the <application>Amavisd-new</application> log output is increased "
24625
"<application>Spamassassin</application> log output is also increased."
24626
24627
#: serverguide/C/mail.xml:1626(para)
24628
msgid ""
24629
"The <application>ClamAV</application> log level can be increased by editing "
24630
"<filename>/etc/clamav/clamd.conf</filename> and setting the following option:"
24631
msgstr ""
24632
"The <application>ClamAV</application> log level can be increased by editing "
24633
"<filename>/etc/clamav/clamd.conf</filename> and setting the following option:"
24634
24635
#: serverguide/C/mail.xml:1630(programlisting)
24636
#, no-wrap
24637
msgid ""
24638
"\n"
24639
"LogVerbose true\n"
24640
msgstr ""
24641
"\n"
24642
"LogVerbose true\n"
24643
24644
#: serverguide/C/mail.xml:1633(para)
24645
msgid ""
24646
"By default <application>ClamAV</application> will send log messages to "
24647
"<filename>/var/log/clamav/clamav.log</filename>."
24648
msgstr ""
24649
"By default <application>ClamAV</application> will send log messages to "
24650
"<filename>/var/log/clamav/clamav.log</filename>."
24651
24652
#: serverguide/C/mail.xml:1639(para)
24653
msgid ""
24654
"After changing an applications log settings remember to restart the service "
24655
"for the new settings to take affect. Also, once the issue you are "
24656
"troubleshooting is resolved it is a good idea to change the log settings "
24657
"back to normal."
24658
msgstr ""
24659
"After changing an applications log settings remember to restart the service "
24660
"for the new settings to take affect. Also, once the issue you are "
24661
"troubleshooting is resolved it is a good idea to change the log settings "
24662
"back to normal."
24663
24664
#: serverguide/C/mail.xml:1647(para)
24665
msgid "For more information on filtering mail see the following links:"
24666
msgstr "For more information on filtering mail see the following links:"
24667
24668
#: serverguide/C/mail.xml:1653(ulink)
24669
msgid "Amavisd-new Documentation"
24670
msgstr "Amavisd-new Documentation"
24671
24672
#: serverguide/C/mail.xml:1657(para)
24673
msgid ""
24674
"<ulink url=\"http://www.clamav.org/doc/latest/html/\">ClamAV "
24675
"Documentation</ulink> and <ulink "
24676
"url=\"http://wiki.clamav.net/Main/WebHome\">ClamAV Wiki</ulink>"
24677
msgstr ""
24678
"<ulink url=\"http://www.clamav.org/doc/latest/html/\">ClamAV "
24679
"Documentation</ulink> and <ulink "
24680
"url=\"http://wiki.clamav.net/Main/WebHome\">ClamAV Wiki</ulink>"
24681
24682
#: serverguide/C/mail.xml:1664(ulink)
24683
msgid "Spamassassin Wiki"
24684
msgstr "Spamassassin Wiki"
24685
24686
#: serverguide/C/mail.xml:1669(ulink)
24687
msgid "Pyzor Homepage"
24688
msgstr "Pyzor Homepage"
24689
24690
#: serverguide/C/mail.xml:1674(ulink)
24691
msgid "Razor Homepage"
24692
msgstr "Razor Homepage"
24693
24694
#: serverguide/C/mail.xml:1679(ulink)
24695
msgid "DKIM.org"
24696
msgstr "DKIM.org"
24697
24698
#: serverguide/C/mail.xml:1684(ulink)
24699
msgid "Postfix Amavis New"
24700
msgstr ""
24701
24702
#: serverguide/C/mail.xml:1688(para)
24703
msgid ""
24704
"Also, feel free to ask questions in the <emphasis>#ubuntu-server</emphasis> "
24705
"IRC channel on <ulink url=\"http://freenode.net\">freenode</ulink>."
24706
msgstr ""
24707
"Also, feel free to ask questions in the <emphasis>#ubuntu-server</emphasis> "
24708
"IRC channel on <ulink url=\"http://freenode.net\">freenode</ulink>."
24709
24710
#: serverguide/C/lamp-applications.xml:13(title)
24711
msgid "LAMP Applications"
24712
msgstr "LAMP Applications"
24713
24714
#: serverguide/C/lamp-applications.xml:19(para)
24715
msgid ""
24716
"LAMP installations (Linux + Apache + MySQL + PHP) are a popular setup for "
24717
"Ubuntu servers. There is a plethora of Open Source applications written "
24718
"using the LAMP application stack. Some popular LAMP applications are Wiki's, "
24719
"Content Management Systems, and Management Software such as phpMyAdmin."
24720
msgstr ""
24721
"LAMP installations (Linux + Apache + MySQL + PHP) are a popular setup for "
24722
"Ubuntu servers. There is a plethora of Open Source applications written "
24723
"using the LAMP application stack. Some popular LAMP applications are Wiki's, "
24724
"Content Management Systems, and Management Software such as phpMyAdmin."
24725
24726
#: serverguide/C/lamp-applications.xml:26(para)
24727
msgid ""
24728
"One advantage of LAMP is the substantial flexibility for different database, "
24729
"web server, and scripting languages. Popular substitutes for MySQL include "
24730
"Posgresql and SQLite. Python, Perl, and Ruby are also frequently used "
24731
"instead of PHP."
24732
msgstr ""
24733
"One advantage of LAMP is the substantial flexibility for different database, "
24734
"web server, and scripting languages. Popular substitutes for MySQL include "
24735
"Posgresql and SQLite. Python, Perl, and Ruby are also frequently used "
24736
"instead of PHP."
24737
24738
#: serverguide/C/lamp-applications.xml:32(para)
24739
msgid ""
24740
"The traditional way to install most <emphasis>LAMP</emphasis> applications "
24741
"is:"
24742
msgstr ""
24743
"The traditional way to install most <emphasis>LAMP</emphasis> applications "
24744
"is:"
24745
24746
#: serverguide/C/lamp-applications.xml:38(para)
24747
msgid "Download an archive containing the application source files."
24748
msgstr "Download an archive containing the application source files."
24749
24750
#: serverguide/C/lamp-applications.xml:43(para)
24751
msgid ""
24752
"Unpack the archive, usually in a directory accessible to a web server."
24753
msgstr ""
24754
"Unpack the archive, usually in a directory accessible to a web server."
24755
24756
#: serverguide/C/lamp-applications.xml:48(para)
24757
msgid ""
24758
"Depending on where the source was extracted, configure a web browser to "
24759
"serve the files."
24760
msgstr ""
24761
"Depending on where the source was extracted, configure a web browser to "
24762
"serve the files."
24763
24764
#: serverguide/C/lamp-applications.xml:53(para)
24765
msgid "Configure the application to connect to the database."
24766
msgstr "Configure the application to connect to the database."
24767
24768
#: serverguide/C/lamp-applications.xml:58(para)
24769
msgid ""
24770
"Run a script, or browse to a page of the application, to install the "
24771
"database needed by the application."
24772
msgstr ""
24773
"Run a script, or browse to a page of the application, to install the "
24774
"database needed by the application."
24775
24776
#: serverguide/C/lamp-applications.xml:63(para)
24777
msgid ""
24778
"Once the steps above, or similar steps, are completed you are ready to begin "
24779
"using the application."
24780
msgstr ""
24781
"Once the steps above, or similar steps, are completed you are ready to begin "
24782
"using the application."
24783
24784
#: serverguide/C/lamp-applications.xml:69(para)
24785
msgid ""
24786
"A disadvantage of using this approach is that the application files are not "
24787
"placed in the file system in a standard way, which can cause confusion as to "
24788
"where the application is installed. Another larger disadvantage is updating "
24789
"the application. When a new version is released, the same process used to "
24790
"install the application is needed to apply updates."
24791
msgstr ""
24792
"A disadvantage of using this approach is that the application files are not "
24793
"placed in the file system in a standard way, which can cause confusion as to "
24794
"where the application is installed. Another larger disadvantage is updating "
24795
"the application. When a new version is released, the same process used to "
24796
"install the application is needed to apply updates."
24797
24798
#: serverguide/C/lamp-applications.xml:76(para)
24799
msgid ""
24800
"Fortunately, a number of <emphasis>LAMP</emphasis> applications are already "
24801
"packaged for Ubuntu, and are available for installation in the same way as "
24802
"non-LAMP applications. Depending on the application some extra configuration "
24803
"and setup steps may be needed, however."
24804
msgstr ""
24805
"Fortunately, a number of <emphasis>LAMP</emphasis> applications are already "
24806
"packaged for Ubuntu, and are available for installation in the same way as "
24807
"non-LAMP applications. Depending on the application some extra configuration "
24808
"and setup steps may be needed, however."
24809
24810
#: serverguide/C/lamp-applications.xml:82(para)
24811
msgid ""
24812
"This section covers howto install and configure the Wiki applications "
24813
"<application>MoinMoin</application>, <application>MediaWiki</application>, "
24814
"and the MySQL management application <application>phpMyAdmin</application>."
24815
msgstr ""
24816
"This section covers howto install and configure the Wiki applications "
24817
"<application>MoinMoin</application>, <application>MediaWiki</application>, "
24818
"and the MySQL management application <application>phpMyAdmin</application>."
24819
24820
#: serverguide/C/lamp-applications.xml:88(para)
24821
msgid ""
24822
"A Wiki is a website that allows the visitors to easily add, remove and "
24823
"modify available content easily. The ease of interaction and operation makes "
24824
"Wiki an effective tool for mass collaborative authoring. The term Wiki is "
24825
"also referred to the collaborative software."
24826
msgstr ""
24827
"A Wiki is a Website that allows the visitors to easily add, remove and "
24828
"modify available content easily. The ease of interaction and operation makes "
24829
"Wiki an effective tool for mass collaborative authoring. The term Wiki is "
24830
"also referred to the collaborative software."
24831
24832
#: serverguide/C/lamp-applications.xml:100(title)
24833
msgid "Moin Moin"
24834
msgstr "Moin Moin"
24835
24836
#: serverguide/C/lamp-applications.xml:102(para)
24837
msgid ""
24838
"MoinMoin is a Wiki engine implemented in Python, based on the PikiPiki Wiki "
24839
"engine, and licensed under the GNU GPL."
24840
msgstr ""
24841
"MoinMoin is a Wiki engine implemented in Python, based on the PikiPiki Wiki "
24842
"engine, and licensed under the GNU GPL."
24843
24844
#: serverguide/C/lamp-applications.xml:110(para)
24845
msgid ""
24846
"To install <application>MoinMoin</application>, run the following command in "
24847
"the command prompt:"
24848
msgstr ""
24849
"To install <application>MoinMoin</application>, run the following command in "
24850
"the command prompt:"
24851
24852
#: serverguide/C/lamp-applications.xml:116(command)
24853
msgid "sudo apt-get install python-moinmoin"
24854
msgstr "sudo apt-get install python-moinmoin"
24855
24856
#: serverguide/C/lamp-applications.xml:119(para)
24857
msgid ""
24858
"You should also install <application>apache2</application> web server. For "
24859
"installing <application>apache2</application> web server, please refer to "
24860
"<xref linkend=\"http-installation\"/> sub-section in <xref "
24861
"linkend=\"httpd\"/> section."
24862
msgstr ""
24863
"You should also install <application>apache2</application> web server. For "
24864
"installing <application>apache2</application> web server, please refer to "
24865
"<xref linkend=\"http-installation\"/> sub-section in <xref "
24866
"linkend=\"httpd\"/> section."
24867
24868
#: serverguide/C/lamp-applications.xml:130(para)
24869
msgid ""
24870
"For configuring your first Wiki application, please run the following set of "
24871
"commands. Let us assume that you are creating a Wiki named "
24872
"<emphasis>mywiki</emphasis>:"
24873
msgstr ""
24874
"For configuring your first Wiki application, please run the following set of "
24875
"commands. Let us assume that you are creating a Wiki named "
24876
"<emphasis>mywiki</emphasis>:"
24877
24878
#: serverguide/C/lamp-applications.xml:137(command)
24879
msgid "cd /usr/share/moin"
24880
msgstr "cd /usr/share/moin"
24881
24882
#: serverguide/C/lamp-applications.xml:138(command)
24883
msgid "sudo mkdir mywiki"
24884
msgstr "sudo mkdir mywiki"
24885
24886
#: serverguide/C/lamp-applications.xml:139(command)
24887
msgid "sudo cp -R data mywiki"
24888
msgstr "sudo cp -R data mywiki"
24889
24890
#: serverguide/C/lamp-applications.xml:140(command)
24891
msgid "sudo cp -R underlay mywiki"
24892
msgstr "sudo cp -R underlay mywiki"
24893
24894
#: serverguide/C/lamp-applications.xml:141(command)
24895
msgid "sudo cp server/moin.cgi mywiki"
24896
msgstr "sudo cp server/moin.cgi mywiki"
24897
24898
#: serverguide/C/lamp-applications.xml:142(command)
24899
msgid "sudo chown -R www-data.www-data mywiki"
24900
msgstr "sudo chown -R www-data.www-data mywiki"
24901
24902
#: serverguide/C/lamp-applications.xml:143(command)
24903
msgid "sudo chmod -R ug+rwX mywiki"
24904
msgstr "sudo chmod -R ug+rwX mywiki"
24905
24906
#: serverguide/C/lamp-applications.xml:144(command)
24907
msgid "sudo chmod -R o-rwx mywiki"
24908
msgstr "sudo chmod -R o-rwx mywiki"
24909
24910
#: serverguide/C/lamp-applications.xml:147(para)
24911
msgid ""
24912
"Now you should configure <application>MoinMoin</application> to find your "
24913
"new Wiki <emphasis>mywiki</emphasis>. To configure "
24914
"<application>MoinMoin</application>, open "
24915
"<filename>/etc/moin/mywiki.py</filename> file and change the following line:"
24916
msgstr ""
24917
"Now you should configure <application>MoinMoin</application> to find your "
24918
"new Wiki <emphasis>mywiki</emphasis>. To configure "
24919
"<application>MoinMoin</application>, open "
24920
"<filename>/etc/moin/mywiki.py</filename> file and change the following line:"
24921
24922
#: serverguide/C/lamp-applications.xml:155(programlisting)
24923
#, no-wrap
24924
msgid "data_dir = '/org/mywiki/data'"
24925
msgstr "data_dir = '/org/mywiki/data'"
24926
24927
#: serverguide/C/lamp-applications.xml:157(para)
24928
msgid "to"
24929
msgstr "to"
24930
24931
#: serverguide/C/lamp-applications.xml:161(programlisting)
24932
#, no-wrap
24933
msgid "data_dir = '/usr/share/moin/mywiki/data'"
24934
msgstr "data_dir = '/usr/share/moin/mywiki/data'"
24935
24936
#: serverguide/C/lamp-applications.xml:163(para)
24937
msgid ""
24938
"Also, below the <emphasis>data_dir</emphasis> option add the "
24939
"<emphasis>data_underlay_dir</emphasis>:"
24940
msgstr ""
24941
"Also, below the <emphasis>data_dir</emphasis> option add the "
24942
"<emphasis>data_underlay_dir</emphasis>:"
24943
24944
#: serverguide/C/lamp-applications.xml:167(programlisting)
24945
#, no-wrap
24946
msgid ""
24947
"\n"
24948
"data_underlay_dir='/usr/share/moin/mywiki/underlay'\n"
24949
msgstr ""
24950
"\n"
24951
"data_underlay_dir='/usr/share/moin/mywiki/underlay'\n"
24952
24953
#: serverguide/C/lamp-applications.xml:172(para)
24954
msgid ""
24955
"If the <filename>/etc/moin/mywiki.py</filename> file does not exists, you "
24956
"should copy <filename>/etc/moin/moinmaster.py</filename> file to "
24957
"<filename>/etc/moin/mywiki.py</filename> file and do the above mentioned "
24958
"change."
24959
msgstr ""
24960
"If the <filename>/etc/moin/mywiki.py</filename> file does not exists, you "
24961
"should copy <filename>/etc/moin/moinmaster.py</filename> file to "
24962
"<filename>/etc/moin/mywiki.py</filename> file and do the above mentioned "
24963
"change."
24964
24965
#: serverguide/C/lamp-applications.xml:181(para)
24966
msgid ""
24967
"If you have named your Wiki as <emphasis>my_wiki_name</emphasis> you should "
24968
"insert a line <quote>(\"my_wiki_name\", r\".*\")</quote> in "
24969
"<filename>/etc/moin/farmconfig.py</filename> file after the line "
24970
"<quote>(\"mywiki\", r\".*\")</quote>."
24971
msgstr ""
24972
"If you have named your Wiki as <emphasis>my_wiki_name</emphasis> you should "
24973
"insert a line <quote>(\"my_wiki_name\", r\".*\")</quote> in "
24974
"<filename>/etc/moin/farmconfig.py</filename> file after the line "
24975
"<quote>(\"mywiki\", r\".*\")</quote>."
24976
24977
#: serverguide/C/lamp-applications.xml:189(para)
24978
msgid ""
24979
"Once you have configured <application>MoinMoin</application> to find your "
24980
"first Wiki application <emphasis>mywiki</emphasis>, you should configure "
24981
"<application>apache2</application> and make it ready for your Wiki "
24982
"application."
24983
msgstr ""
24984
"Once you have configured <application>MoinMoin</application> to find your "
24985
"first Wiki application <emphasis>mywiki</emphasis>, you should configure "
24986
"<application>apache2</application> and make it ready for your Wiki "
24987
"application."
24988
24989
#: serverguide/C/lamp-applications.xml:196(para)
24990
msgid ""
24991
"You should add the following lines in <filename>/etc/apache2/sites-"
24992
"available/default</filename> file inside the <quote><VirtualHost "
24993
"*></quote> tag:"
24994
msgstr ""
24995
"You should add the following lines in <filename>/etc/apache2/sites-"
24996
"available/default</filename> file inside the <quote><VirtualHost "
24997
"*></quote> tag:"
24998
24999
#: serverguide/C/lamp-applications.xml:202(programlisting)
25000
#, no-wrap
25001
msgid ""
25002
"\n"
25003
"### moin\n"
25004
" ScriptAlias /mywiki \"/usr/share/moin/mywiki/moin.cgi\"\n"
25005
" alias /moin_static184 \"/usr/share/moin/htdocs\"\n"
25006
" <Directory /usr/share/moin/htdocs>\n"
25007
" Order allow,deny\n"
25008
" allow from all\n"
25009
" </Directory>\n"
25010
"### end moin\n"
25011
msgstr ""
25012
"\n"
25013
"### moin\n"
25014
" ScriptAlias /mywiki \"/usr/share/moin/mywiki/moin.cgi\"\n"
25015
" alias /moin_static184 \"/usr/share/moin/htdocs\"\n"
25016
" <Directory /usr/share/moin/htdocs>\n"
25017
" Order allow,deny\n"
25018
" allow from all\n"
25019
" </Directory>\n"
25020
"### end moin\n"
25021
25022
#: serverguide/C/lamp-applications.xml:214(para)
25023
msgid ""
25024
"Adjust the <emphasis>\"moin_static184\"</emphasis> in the "
25025
"<emphasis>alias</emphasis> line above, to the "
25026
"<application>moinmoin</application> version installed."
25027
msgstr ""
25028
"Adjust the <emphasis>\"moin_static184\"</emphasis> in the "
25029
"<emphasis>alias</emphasis> line above, to the "
25030
"<application>moinmoin</application> version installed."
25031
25032
#: serverguide/C/lamp-applications.xml:220(para)
25033
msgid ""
25034
"Once you configure the <application>apache2</application> web server and "
25035
"make it ready for your Wiki application, you should restart it. You can run "
25036
"the following command to restart the <application>apache2</application> web "
25037
"server:"
25038
msgstr ""
25039
"Once you configure the <application>apache2</application> Web server and "
25040
"make it ready for your Wiki application, you should restart it. You can run "
25041
"the following command to restart the <application>apache2</application> Web "
25042
"server:"
25043
25044
#: serverguide/C/lamp-applications.xml:233(title)
25045
msgid "Verification"
25046
msgstr "Verification"
25047
25048
#: serverguide/C/lamp-applications.xml:235(para)
25049
msgid ""
25050
"You can verify the Wiki application and see if it works by pointing your web "
25051
"browser to the following URL:"
25052
msgstr ""
25053
"You can verify the Wiki application and see if it works by pointing your Web "
25054
"browser to the following URL:"
25055
25056
#: serverguide/C/lamp-applications.xml:239(programlisting)
25057
#, no-wrap
25058
msgid ""
25059
"\n"
25060
"http://localhost/mywiki\n"
25061
msgstr ""
25062
"\n"
25063
"http://localhost/mywiki\n"
25064
25065
#: serverguide/C/lamp-applications.xml:243(para)
25066
msgid ""
25067
"You can also run the test command by pointing your web browser to the "
25068
"following URL:"
25069
msgstr ""
25070
"You can also run the test command by pointing your Web browser to the "
25071
"following URL:"
25072
25073
#: serverguide/C/lamp-applications.xml:248(programlisting)
25074
#, no-wrap
25075
msgid ""
25076
"\n"
25077
"http://localhost/mywiki?action=test\n"
25078
msgstr ""
25079
"\n"
25080
"http://localhost/mywiki?action=test\n"
25081
25082
#: serverguide/C/lamp-applications.xml:252(para)
25083
msgid ""
25084
"For more details, please refer to the <ulink "
25085
"url=\"http://moinmo.in/\">MoinMoin</ulink> web site."
25086
msgstr ""
25087
"For more details, please refer to the <ulink "
25088
"url=\"http://moinmo.in/\">MoinMoin</ulink> web site."
25089
25090
#: serverguide/C/lamp-applications.xml:263(para)
25091
msgid ""
25092
"For more information see the <ulink url=\"http://moinmo.in/\">moinmoin "
25093
"Wiki</ulink>."
25094
msgstr ""
25095
"For more information see the <ulink url=\"http://moinmo.in/\">moinmoin "
25096
"Wiki</ulink>."
25097
25098
#: serverguide/C/lamp-applications.xml:268(para)
25099
msgid ""
25100
"Also, see the <ulink "
25101
"url=\"https://help.ubuntu.com/community/MoinMoin\">Ubuntu Wiki "
25102
"MoinMoin</ulink> page."
25103
msgstr ""
25104
25105
#: serverguide/C/lamp-applications.xml:277(title)
25106
msgid "MediaWiki"
25107
msgstr "MediaWiki"
25108
25109
#: serverguide/C/lamp-applications.xml:279(para)
25110
msgid ""
25111
"MediaWiki is an web based Wiki software written in the PHP language. It can "
25112
"either use <application>MySQL</application> or "
25113
"<application>PostgreSQL</application> Database Management System."
25114
msgstr ""
25115
"MediaWiki is an web based Wiki software written in the PHP language. It can "
25116
"either use <application>MySQL</application> or "
25117
"<application>PostgreSQL</application> Database Management System."
25118
25119
#: serverguide/C/lamp-applications.xml:289(para)
25120
msgid ""
25121
"Before installing <application>MediaWiki</application> you should also "
25122
"install <application>Apache2</application>, the "
25123
"<application>PHP5</application> scripting language and Database a Management "
25124
"System. <application>MySQL</application> or "
25125
"<application>PostgreSQL</application> are the most common, choose one "
25126
"depending on your need. Please refer to those sections in this manual for "
25127
"installation instructions."
25128
msgstr ""
25129
"Before installing <application>MediaWiki</application> you should also "
25130
"install <application>Apache2</application>, the "
25131
"<application>PHP5</application> scripting language and Database a Management "
25132
"System. <application>MySQL</application> or "
25133
"<application>PostgreSQL</application> are the most common, choose one "
25134
"depending on your need. Please refer to those sections in this manual for "
25135
"installation instructions."
25136
25137
#: serverguide/C/lamp-applications.xml:297(para)
25138
msgid ""
25139
"To install <application>MediaWiki</application>, run the following command "
25140
"in the command prompt:"
25141
msgstr ""
25142
"To install <application>MediaWiki</application>, run the following command "
25143
"in the command prompt:"
25144
25145
#: serverguide/C/lamp-applications.xml:303(command)
25146
msgid "sudo apt-get install mediawiki php5-gd"
25147
msgstr "sudo apt-get install mediawiki php5-gd"
25148
25149
#: serverguide/C/lamp-applications.xml:306(para)
25150
msgid ""
25151
"For additional <application>MediaWiki</application> functionality see the "
25152
"<application>mediawiki-extensions</application> package."
25153
msgstr ""
25154
"For additional <application>MediaWiki</application> functionality see the "
25155
"<application>mediawiki-extensions</application> package."
25156
25157
#: serverguide/C/lamp-applications.xml:316(para)
25158
msgid ""
25159
"The Apache configuration file <filename>mediawiki.conf</filename> for "
25160
"MediaWiki is installed in <filename>/etc/apache2/conf.d/</filename> "
25161
"directory. You should uncomment the following line in this file to access "
25162
"MediaWiki application."
25163
msgstr ""
25164
"The Apache configuration file <filename>mediawiki.conf</filename> for "
25165
"MediaWiki is installed in <filename>/etc/apache2/conf.d/</filename> "
25166
"directory. You should uncomment the following line in this file to access "
25167
"MediaWiki application."
25168
25169
#: serverguide/C/lamp-applications.xml:324(screen)
25170
#, no-wrap
25171
msgid ""
25172
"\n"
25173
"# Alias /mediawiki /var/lib/mediawiki\n"
25174
msgstr ""
25175
"\n"
25176
"# Alias /mediawiki /var/lib/mediawiki\n"
25177
25178
#: serverguide/C/lamp-applications.xml:328(para)
25179
msgid ""
25180
"After you uncomment the above line, restart Apache server and access "
25181
"MediaWiki using the following url:"
25182
msgstr ""
25183
"After you uncomment the above line, restart Apache server and access "
25184
"MediaWiki using the following url:"
25185
25186
#: serverguide/C/lamp-applications.xml:333(programlisting)
25187
#, no-wrap
25188
msgid ""
25189
"\n"
25190
"http://localhost/mediawiki/config/index.php\n"
25191
msgstr ""
25192
"\n"
25193
"http://localhost/mediawiki/config/index.php\n"
25194
25195
#: serverguide/C/lamp-applications.xml:338(para)
25196
msgid ""
25197
"Please read the <quote>Checking environment...</quote> section in this page. "
25198
"You should be able to fix many issues by carefully reading this section."
25199
msgstr ""
25200
"Please read the <quote>Checking environment...</quote> section in this page. "
25201
"You should be able to fix many issues by carefully reading this section."
25202
25203
#: serverguide/C/lamp-applications.xml:345(para)
25204
msgid ""
25205
"Once the configuration is complete, you should copy the "
25206
"<filename>LocalSettings.php</filename> file to "
25207
"<filename>/etc/mediawiki</filename> directory:"
25208
msgstr ""
25209
25210
#: serverguide/C/lamp-applications.xml:352(command)
25211
msgid "sudo mv /var/lib/mediawiki/config/LocalSettings.php /etc/mediawiki/"
25212
msgstr ""
25213
25214
#: serverguide/C/lamp-applications.xml:355(para)
25215
msgid ""
25216
"You may also want to edit "
25217
"<filename>/etc/mediawiki/LocalSettings.php</filename> adjusting:"
25218
msgstr ""
25219
25220
#: serverguide/C/lamp-applications.xml:360(programlisting)
25221
#, no-wrap
25222
msgid ""
25223
"\n"
25224
"ini_set( 'memory_limit', '64M' );\n"
25225
msgstr ""
25226
25227
#: serverguide/C/lamp-applications.xml:367(title)
25228
msgid "Extensions"
25229
msgstr "Extensions"
25230
25231
#: serverguide/C/lamp-applications.xml:368(para)
25232
msgid ""
25233
"The extensions add new features and enhancements for the MediaWiki "
25234
"application. The extensions give wiki administrators and end users the "
25235
"ability to customize MediaWiki to their requirements."
25236
msgstr ""
25237
"The extensions add new features and enhancements for the MediaWiki "
25238
"application. The extensions give wiki administrators and end users the "
25239
"ability to customise MediaWiki to their requirements."
25240
25241
#: serverguide/C/lamp-applications.xml:374(para)
25242
msgid ""
25243
"You can download MediaWiki extensions as an archive file or checkout from "
25244
"the Subversion repository. You should copy it to "
25245
"<filename>/var/lib/mediawiki/extensions</filename> directory. You should "
25246
"also add the following line at the end of file: "
25247
"<filename>/etc/mediawiki/LocalSettings.php</filename>."
25248
msgstr ""
25249
"You can download MediaWiki extensions as an archive file or checkout from "
25250
"the Subversion repository. You should copy it to "
25251
"<filename>/var/lib/mediawiki/extensions</filename> directory. You should "
25252
"also add the following line at the end of file: "
25253
"<filename>/etc/mediawiki/LocalSettings.php</filename>."
25254
25255
#: serverguide/C/lamp-applications.xml:382(programlisting)
25256
#, no-wrap
25257
msgid ""
25258
"\n"
25259
"require_once \"$IP/extensions/ExtentionName/ExtentionName.php\";\n"
25260
msgstr ""
25261
"\n"
25262
"require_once \"$IP/extensions/ExtentionName/ExtentionName.php\";\n"
25263
25264
#: serverguide/C/lamp-applications.xml:392(para)
25265
msgid ""
25266
"For more details, please refer to the <ulink "
25267
"url=\"http://www.mediawiki.org\">MediaWiki</ulink> web site."
25268
msgstr ""
25269
"For more details, please refer to the <ulink "
25270
"url=\"http://www.mediawiki.org\">MediaWiki</ulink> Web site."
25271
25272
#: serverguide/C/lamp-applications.xml:398(para)
25273
msgid ""
25274
"The <ulink url=\"http://www.packtpub.com/Mediawiki/book\">MediaWiki "
25275
"Administrators’ Tutorial Guide</ulink> contains a wealth of information for "
25276
"new MediaWiki administrators."
25277
msgstr ""
25278
"The <ulink url=\"http://www.packtpub.com/Mediawiki/book\">MediaWiki "
25279
"Administrators’ Tutorial Guide</ulink> contains a wealth of information for "
25280
"new MediaWiki administrators."
25281
25282
#: serverguide/C/lamp-applications.xml:404(para)
25283
msgid ""
25284
"Also, the <ulink url=\"https://help.ubuntu.com/community/MediaWiki\">Ubuntu "
25285
"Wiki MediaWiki</ulink> page is a good resource."
25286
msgstr ""
25287
25288
#: serverguide/C/lamp-applications.xml:414(title)
25289
msgid "phpMyAdmin"
25290
msgstr "phpMyAdmin"
25291
25292
#: serverguide/C/lamp-applications.xml:416(para)
25293
msgid ""
25294
"<application>phpMyAdmin</application> is a LAMP application specifically "
25295
"written for administering <application>MySQL</application> servers. Written "
25296
"in <application>PHP</application>, and accessed through a web browser, "
25297
"phpMyAdmin provides a graphical interface for database administration tasks."
25298
msgstr ""
25299
"<application>phpMyAdmin</application> is a LAMP application specifically "
25300
"written for administering <application>MySQL</application> servers. Written "
25301
"in <application>PHP</application>, and accessed through a web browser, "
25302
"phpMyAdmin provides a graphical interface for database administration tasks."
25303
25304
#: serverguide/C/lamp-applications.xml:425(para)
25305
msgid ""
25306
"Before installing <application>phpMyAdmin</application> you will need access "
25307
"to a <application>MySQL</application> database either on the same host as "
25308
"that phpMyAdmin is installed on, or on a host accessible over the network. "
25309
"For more information see <xref linkend=\"mysql\"/>. From a terminal prompt "
25310
"enter:"
25311
msgstr ""
25312
"Before installing <application>phpMyAdmin</application> you will need access "
25313
"to a <application>MySQL</application> database either on the same host as "
25314
"that phpMyAdmin is installed on, or on a host accessible over the network. "
25315
"For more information see <xref linkend=\"mysql\"/>. From a terminal prompt "
25316
"enter:"
25317
25318
#: serverguide/C/lamp-applications.xml:432(command)
25319
msgid "sudo apt-get install phpmyadmin"
25320
msgstr "sudo apt-get install phpmyadmin"
25321
25322
#: serverguide/C/lamp-applications.xml:435(para)
25323
msgid ""
25324
"At the prompt choose which web server to be configured for "
25325
"<application>phpMyAdmin</application>. The rest of this section will use "
25326
"<application>Apache2</application> for the web server."
25327
msgstr ""
25328
"At the prompt choose which web server to be configured for "
25329
"<application>phpMyAdmin</application>. The rest of this section will use "
25330
"<application>Apache2</application> for the web server."
25331
25332
#: serverguide/C/lamp-applications.xml:440(para)
25333
msgid ""
25334
"In a browser go to <emphasis>http://servername/phpmyadmin</emphasis>, "
25335
"replacing <emphasis role=\"italic\">serveranme</emphasis> with the server's "
25336
"actual hostname. At the login, page enter <emphasis>root</emphasis> for the "
25337
"<emphasis>username</emphasis>, or another <application>MySQL</application> "
25338
"user if you any setup, and enter the <application>MySQL</application> user's "
25339
"password."
25340
msgstr ""
25341
"In a browser go to <emphasis>http://servername/phpmyadmin</emphasis>, "
25342
"replacing <emphasis role=\"italic\">serveranme</emphasis> with the server's "
25343
"actual hostname. At the login, page enter <emphasis>root</emphasis> for the "
25344
"<emphasis>username</emphasis>, or another <application>MySQL</application> "
25345
"user if you any setup, and enter the <application>MySQL</application> user's "
25346
"password."
25347
25348
#: serverguide/C/lamp-applications.xml:447(para)
25349
msgid ""
25350
"Once logged in you can reset the <emphasis>root</emphasis> password if "
25351
"needed, create users, create/destroy databases and tables, etc."
25352
msgstr ""
25353
"Once logged in you can reset the <emphasis>root</emphasis> password if "
25354
"needed, create users, create/destroy databases and tables, etc."
25355
25356
#: serverguide/C/lamp-applications.xml:455(para)
25357
msgid ""
25358
"The configuration files for <application>phpMyAdmin</application> are "
25359
"located in <filename>/etc/phpmyadmin</filename>. The main configuration file "
25360
"is <filename>/etc/phpmyadmin/config.inc.php</filename>. This file contains "
25361
"configuration options that apply globally to "
25362
"<application>phpMyAdmin</application>."
25363
msgstr ""
25364
"The configuration files for <application>phpMyAdmin</application> are "
25365
"located in <filename>/etc/phpmyadmin</filename>. The main configuration file "
25366
"is <filename>/etc/phpmyadmin/config.inc.php</filename>. This file contains "
25367
"configuration options that apply globally to "
25368
"<application>phpMyAdmin</application>."
25369
25370
#: serverguide/C/lamp-applications.xml:461(para)
25371
msgid ""
25372
"To use <application>phpMyAdmin</application> to administer a MySQL database "
25373
"hosted on another server, adjust the following in "
25374
"<filename>/etc/phpmyadmin/config.inc.php</filename>:"
25375
msgstr ""
25376
"To use <application>phpMyAdmin</application> to administer a MySQL database "
25377
"hosted on another server, adjust the following in "
25378
"<filename>/etc/phpmyadmin/config.inc.php</filename>:"
25379
25380
#: serverguide/C/lamp-applications.xml:466(programlisting)
25381
#, no-wrap
25382
msgid ""
25383
"\n"
25384
"$cfg['Servers'][$i]['host'] = 'db_server';\n"
25385
msgstr ""
25386
"\n"
25387
"$cfg['Servers'][$i]['host'] = 'db_server';\n"
25388
25389
#: serverguide/C/lamp-applications.xml:471(para)
25390
msgid ""
25391
"Replace <emphasis role=\"italic\">db_server</emphasis> with the actual "
25392
"remote database server name or IP address. Also, be sure that the "
25393
"<application>phpMyAdmin</application> host has permissions to access the "
25394
"remote database."
25395
msgstr ""
25396
"Replace <emphasis role=\"italic\">db_server</emphasis> with the actual "
25397
"remote database server name or IP address. Also, be sure that the "
25398
"<application>phpMyAdmin</application> host has permissions to access the "
25399
"remote database."
25400
25401
#: serverguide/C/lamp-applications.xml:477(para)
25402
msgid ""
25403
"Once configured, log out of <application>phpMyAdmin</application> and back "
25404
"in, and you should be accessing the new server."
25405
msgstr ""
25406
"Once configured, log out of <application>phpMyAdmin</application> and back "
25407
"in, and you should be accessing the new server."
25408
25409
#: serverguide/C/lamp-applications.xml:481(para)
25410
msgid ""
25411
"The <filename>config.header.inc.php</filename> and "
25412
"<filename>config.footer.inc.php</filename> files are used to add a HTML "
25413
"header and footer to <application>phpMyAdmin</application>."
25414
msgstr ""
25415
"The <filename>config.header.inc.php</filename> and "
25416
"<filename>config.footer.inc.php</filename> files are used to add a HTML "
25417
"header and footer to <application>phpMyAdmin</application>."
25418
25419
#: serverguide/C/lamp-applications.xml:486(para)
25420
msgid ""
25421
"Another important configuration file is "
25422
"<filename>/etc/phpmyadmin/apache.conf</filename>, this file is symlinked to "
25423
"<filename>/etc/apache2/conf.d/phpmyadmin.conf</filename>, and is used to "
25424
"configure <application>Apache2</application> to serve the "
25425
"<application>phpMyAdmin</application> site. The file contains directives for "
25426
"loading <application>PHP</application>, directory permissions, etc. For more "
25427
"information on configuring <application>Apache2</application> see <xref "
25428
"linkend=\"httpd\"/>."
25429
msgstr ""
25430
"Another important configuration file is "
25431
"<filename>/etc/phpmyadmin/apache.conf</filename>, this file is symlinked to "
25432
"<filename>/etc/apache2/conf.d/phpmyadmin.conf</filename>, and is used to "
25433
"configure <application>Apache2</application> to serve the "
25434
"<application>phpMyAdmin</application> site. The file contains directives for "
25435
"loading <application>PHP</application>, directory permissions, etc. For more "
25436
"information on configuring <application>Apache2</application> see <xref "
25437
"linkend=\"httpd\"/>."
25438
25439
#: serverguide/C/lamp-applications.xml:500(para)
25440
msgid ""
25441
"The <application>phpMyAdmin</application> documentation comes installed with "
25442
"the package and can be accessed from the <emphasis>phpMyAdmin "
25443
"Documentation</emphasis> link (a question mark with a box around it) under "
25444
"the phpMyAdmin logo. The official docs can also be access on the <ulink "
25445
"url=\"http://www.phpmyadmin.net/home_page/docs.php\">phpMyAdmin</ulink> site."
25446
msgstr ""
25447
"The <application>phpMyAdmin</application> documentation comes installed with "
25448
"the package and can be accessed from the <emphasis>phpMyAdmin "
25449
"Documentation</emphasis> link (a question mark with a box around it) under "
25450
"the phpMyAdmin logo. The official docs can also be access on the <ulink "
25451
"url=\"http://www.phpmyadmin.net/home_page/docs.php\">phpMyAdmin</ulink> site."
25452
25453
#: serverguide/C/lamp-applications.xml:507(para)
25454
msgid ""
25455
"Also, <ulink url=\"http://www.packtpub.com/phpmyadmin-3rd-"
25456
"edition/book\">Mastering phpMyAdmin</ulink> is a great resource."
25457
msgstr ""
25458
"Also, <ulink url=\"http://www.packtpub.com/phpmyadmin-3rd-"
25459
"edition/book\">Mastering phpMyAdmin</ulink> is a great resource."
25460
25461
#: serverguide/C/lamp-applications.xml:512(para)
25462
msgid ""
25463
"A third resource is the <ulink "
25464
"url=\"https://help.ubuntu.com/community/phpMyAdmin\">phpMyAdmin Ubuntu "
25465
"Wiki</ulink> page."
25466
msgstr ""
25467
25468
#: serverguide/C/introduction.xml:14(para)
25469
msgid "Welcome to the <emphasis>Ubuntu Server Guide</emphasis>!"
25470
msgstr "Welcome to the <emphasis>Ubuntu Server Guide</emphasis>!"
25471
25472
#: serverguide/C/introduction.xml:15(para)
25473
msgid ""
25474
"Here you can find information on how to install and configure various server "
25475
"applications. It is a step-by-step, task-oriented guide for configuring and "
25476
"customizing your system."
25477
msgstr ""
25478
"Here you can find information on how to install and configure various server "
25479
"applications. It is a step-by-step, task-oriented guide for configuring and "
25480
"customising your system."
25481
25482
#: serverguide/C/introduction.xml:19(para)
25483
msgid ""
25484
"This guide assumes you have a basic understanding of your Ubuntu system. "
25485
"Some installation details are covered in <xref linkend=\"installation\"/>, "
25486
"but if you need detailed instructions installing Ubuntu please refer to the "
25487
"<ulink url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
25488
"Installation Guide</ulink>."
25489
msgstr ""
25490
"This guide assumes you have a basic understanding of your Ubuntu system. "
25491
"Some installation details are covered in <xref linkend=\"installation\"/>, "
25492
"but if you need detailed instructions installing Ubuntu please refer to the "
25493
"<ulink url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
25494
"Installation Guide</ulink>."
25495
25496
#: serverguide/C/introduction.xml:25(para)
25497
msgid ""
25498
"A HTML version of the manual is available online at <ulink "
25499
"url=\"http://help.ubuntu.com\">the Ubuntu Documentation website</ulink>. The "
25500
"HTML files are also available in the <application>ubuntu-"
25501
"serverguide</application> package. See <xref linkend=\"package-"
25502
"management\"/> for details on installing packages."
25503
msgstr ""
25504
"A HTML version of the manual is available online at <ulink "
25505
"url=\"http://help.ubuntu.com\">the Ubuntu Documentation website</ulink>. The "
25506
"HTML files are also available in the <application>ubuntu-"
25507
"serverguide</application> package. See <xref linkend=\"package-"
25508
"management\"/> for details on installing packages."
25509
25510
#: serverguide/C/introduction.xml:32(para)
25511
msgid ""
25512
"If you choose to install the <application>ubuntu-serverguide</application> "
25513
"you can view this document from a console by:"
25514
msgstr ""
25515
"If you choose to install the <application>ubuntu-serverguide</application> "
25516
"you can view this document from a console by:"
25517
25518
#: serverguide/C/introduction.xml:36(command)
25519
msgid "w3m /usr/share/ubuntu-serverguide/html/C/index.html"
25520
msgstr ""
25521
25522
#: serverguide/C/introduction.xml:39(para)
25523
msgid ""
25524
"If you are using a localized version of Ubuntu, replace "
25525
"<emphasis>C</emphasis> with your language localization (e.g. "
25526
"<emphasis>en_GB</emphasis>)."
25527
msgstr ""
25528
25529
#: serverguide/C/introduction.xml:53(title)
25530
msgid "Support"
25531
msgstr "Support"
25532
25533
#: serverguide/C/introduction.xml:55(para)
25534
msgid ""
25535
"There are a couple of different ways that Ubuntu Server Edition is "
25536
"supported, commercial support and community support. The main commercial "
25537
"support (and development funding) is available from Canonical Ltd. They "
25538
"supply reasonably priced support contracts on a per desktop or per server "
25539
"basis. For more information see the <ulink "
25540
"url=\"http://www.canonical.com/services/support\">Canonical Services</ulink> "
25541
"page."
25542
msgstr ""
25543
25544
#: serverguide/C/introduction.xml:62(para)
25545
msgid ""
25546
"Community support is also provided by dedicated individuals, and companies, "
25547
"that wish to make Ubuntu the best distribution possible. Support is provided "
25548
"through multiple mailing lists, IRC channels, forums, blogs, wikis, etc. The "
25549
"large amount of information available can be overwhelming, but a good search "
25550
"engine query can usually provide an answer to your questions. See the <ulink "
25551
"url=\"http://www.ubuntu.com/support\">Ubuntu Support</ulink> page for more "
25552
"information."
25553
msgstr ""
25554
"Community support is also provided by dedicated individuals, and companies, "
25555
"that wish to make Ubuntu the best distribution possible. Support is provided "
25556
"through multiple mailing lists, IRC channels, forums, blogs, wikis, etc. The "
25557
"large amount of information available can be overwhelming, but a good search "
25558
"engine query can usually provide an answer to your questions. See the <ulink "
25559
"url=\"http://www.ubuntu.com/support\">Ubuntu Support</ulink> page for more "
25560
"information."
25561
25562
#: serverguide/C/installation.xml:14(para)
25563
msgid ""
25564
"This chapter provides a quick overview of installing Ubuntu 10.04 LTS Server "
25565
"Edition. For more detailed instructions, please refer to the <ulink "
25566
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
25567
"Installation Guide</ulink>."
25568
msgstr ""
25569
"This chapter provides a quick overview of installing Ubuntu 10.04 LTS Server "
25570
"Edition. For more detailed instructions, please refer to the <ulink "
25571
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\">Ubuntu "
25572
"Installation Guide</ulink>."
25573
25574
#: serverguide/C/installation.xml:19(title)
25575
msgid "Preparing to Install"
25576
msgstr "Preparing to Install"
25577
25578
#: serverguide/C/installation.xml:20(para)
25579
msgid ""
25580
"This section explains various aspects to consider before starting the "
25581
"installation."
25582
msgstr ""
25583
"This section explains various aspects to consider before starting the "
25584
"installation."
25585
25586
#: serverguide/C/installation.xml:24(title)
25587
msgid "System Requirements"
25588
msgstr "System Requirements"
25589
25590
#: serverguide/C/installation.xml:25(para)
25591
msgid ""
25592
"Ubuntu 10.04 LTS Server Edition supports two (2) major architectures: Intel "
25593
"x86 and AMD64. The table below lists recommended hardware specifications. "
25594
"Depending on your needs, you might manage with less than this. However, most "
25595
"users risk being frustrated if they ignore these suggestions."
25596
msgstr ""
25597
"Ubuntu 10.04 LTS Server Edition supports two (2) major architectures: Intel "
25598
"x86 and AMD64. The table below lists recommended hardware specifications. "
25599
"Depending on your needs, you might manage with less than this. However, most "
25600
"users risk being frustrated if they ignore these suggestions."
25601
25602
#: serverguide/C/installation.xml:27(title)
25603
msgid "Recommended Minimum Requirements"
25604
msgstr "Recommended Minimum Requirements"
25605
25606
#: serverguide/C/installation.xml:35(para)
25607
msgid "Install Type"
25608
msgstr "Install Type"
25609
25610
#: serverguide/C/installation.xml:36(para)
25611
msgid "RAM"
25612
msgstr "RAM"
25613
25614
#: serverguide/C/installation.xml:37(para)
25615
msgid "Hard Drive Space"
25616
msgstr "Hard Drive Space"
25617
25618
#: serverguide/C/installation.xml:40(para)
25619
msgid "Base System"
25620
msgstr "Base System"
25621
25622
#: serverguide/C/installation.xml:41(para)
25623
msgid "All Tasks Installed"
25624
msgstr "All Tasks Installed"
25625
25626
#: serverguide/C/installation.xml:46(para)
25627
msgid "Server"
25628
msgstr "Server"
25629
25630
#: serverguide/C/installation.xml:47(para)
25631
msgid "128 megabytes"
25632
msgstr "128 megabytes"
25633
25634
#: serverguide/C/installation.xml:48(para)
25635
msgid "500 megabytes"
25636
msgstr "500 megabytes"
25637
25638
#: serverguide/C/installation.xml:49(para)
25639
msgid "1 gigabyte"
25640
msgstr "1 gigabyte"
25641
25642
#: serverguide/C/installation.xml:54(para)
25643
msgid ""
25644
"The Server Edition provides a common base for all sorts of server "
25645
"applications. It is a minimalist design providing a platform for the desired "
25646
"services, such as file/print services, web hosting, email hosting, etc."
25647
msgstr ""
25648
"The Server Edition provides a common base for all sorts of server "
25649
"applications. It is a minimalist design providing a platform for the desired "
25650
"services, such as file/print services, web hosting, e-mail hosting, etc."
25651
25652
#: serverguide/C/installation.xml:60(para)
25653
msgid ""
25654
"The requirements for UEC are slightly different for Front End requirements "
25655
"see <xref linkend=\"uec-frontend-requirements\"/> and for UEC Node "
25656
"requirements see <xref linkend=\"uec-node-requirements\"/>."
25657
msgstr ""
25658
25659
#: serverguide/C/installation.xml:68(title)
25660
msgid "Server and Desktop Differences"
25661
msgstr "Server and Desktop Differences"
25662
25663
#: serverguide/C/installation.xml:69(para)
25664
msgid ""
25665
"There are a few differences between the <emphasis>Ubuntu Server "
25666
"Edition</emphasis> and the <emphasis>Ubuntu Desktop Edition</emphasis>. It "
25667
"should be noted that both editions use the same "
25668
"<application>apt</application> repositories. Making it just as easy to "
25669
"install a <emphasis role=\"italic\">server</emphasis> application on the "
25670
"Desktop Edition as it is on the Server Edition."
25671
msgstr ""
25672
"There are a few differences between the <emphasis>Ubuntu Server "
25673
"Edition</emphasis> and the <emphasis>Ubuntu Desktop Edition</emphasis>. It "
25674
"should be noted that both editions use the same "
25675
"<application>apt</application> repositories. Making it just as easy to "
25676
"install a <emphasis role=\"italic\">server</emphasis> application on the "
25677
"Desktop Edition as it is on the Server Edition."
25678
25679
#: serverguide/C/installation.xml:75(para)
25680
msgid ""
25681
"The differences between the two editions are the lack of an X window "
25682
"environment in the Server Edition, the installation process, and different "
25683
"Kernel options."
25684
msgstr ""
25685
"The differences between the two editions are the lack of an X window "
25686
"environment in the Server Edition, the installation process, and different "
25687
"Kernel options."
25688
25689
#: serverguide/C/installation.xml:82(title)
25690
msgid "Kernel Differences:"
25691
msgstr "Kernel Differences:"
25692
25693
#: serverguide/C/installation.xml:85(para)
25694
msgid ""
25695
"The Server Edition uses the <emphasis>Deadline</emphasis> I/O scheduler "
25696
"instead of the <emphasis>CFQ</emphasis> scheduler used by the Desktop "
25697
"Edition."
25698
msgstr ""
25699
"The Server Edition uses the <emphasis>Deadline</emphasis> I/O scheduler "
25700
"instead of the <emphasis>CFQ</emphasis> scheduler used by the Desktop "
25701
"Edition."
25702
25703
#: serverguide/C/installation.xml:91(para)
25704
msgid "<emphasis>Preemption</emphasis> is turned off in the Server Edition."
25705
msgstr "<emphasis>Preemption</emphasis> is turned off in the Server Edition."
25706
25707
#: serverguide/C/installation.xml:96(para)
25708
msgid ""
25709
"The timer interrupt is 100 Hz in the Server Edition and 250 Hz in the "
25710
"Desktop Edition."
25711
msgstr ""
25712
"The timer interrupt is 100 Hz in the Server Edition and 250 Hz in the "
25713
"Desktop Edition."
25714
25715
#: serverguide/C/installation.xml:102(para)
25716
msgid ""
25717
"When running a 64-bit version of Ubuntu on 64-bit processors you are not "
25718
"limited by memory addressing space."
25719
msgstr ""
25720
"When running a 64-bit version of Ubuntu on 64-bit processors you are not "
25721
"limited by memory addressing space."
25722
25723
#: serverguide/C/installation.xml:107(para)
25724
msgid ""
25725
"To see all kernel configuration options you can look through "
25726
"<filename>/boot/config-2.6.31-server</filename>. Also, <ulink "
25727
"url=\"http://www.kroah.com/lkn/\">Linux Kernel in a Nutshell</ulink> is a "
25728
"great resource on the options available."
25729
msgstr ""
25730
"To see all kernel configuration options you can look through "
25731
"<filename>/boot/config-2.6.31-server</filename>. Also, <ulink "
25732
"url=\"http://www.kroah.com/lkn/\">Linux Kernel in a Nutshell</ulink> is a "
25733
"great resource on the options available."
25734
25735
#: serverguide/C/installation.xml:116(title)
25736
msgid "Backing Up"
25737
msgstr "Backing Up"
25738
25739
#: serverguide/C/installation.xml:119(para)
25740
msgid ""
25741
"Before installing <application>Ubuntu Server Edition</application> you "
25742
"should make sure all data on the system is backed up. See <xref "
25743
"linkend=\"backups\"/> for backup options."
25744
msgstr ""
25745
"Before installing <application>Ubuntu Server Edition</application> you "
25746
"should make sure all data on the system is backed up. See <xref "
25747
"linkend=\"backups\"/> for backup options."
25748
25749
#: serverguide/C/installation.xml:123(para)
25750
msgid ""
25751
"If this is not the first time an operating system has been installed on your "
25752
"computer, it is likely you will need to re-partition your disk to make room "
25753
"for Ubuntu."
25754
msgstr ""
25755
"If this is not the first time an operating system has been installed on your "
25756
"computer, it is likely you will need to re-partition your disk to make room "
25757
"for Ubuntu."
25758
25759
#: serverguide/C/installation.xml:127(para)
25760
msgid ""
25761
"Any time you partition your disk, you should be prepared to lose everything "
25762
"on the disk should you make a mistake or something goes wrong during "
25763
"partitioning. The programs used in installation are quite reliable, most "
25764
"have seen years of use, but they also perform destructive actions."
25765
msgstr ""
25766
"Any time you partition your disk, you should be prepared to lose everything "
25767
"on the disk should you make a mistake or something goes wrong during "
25768
"partitioning. The programs used in installation are quite reliable, most "
25769
"have seen years of use, but they also perform destructive actions."
25770
25771
#: serverguide/C/installation.xml:139(title)
25772
msgid "Installing from CD"
25773
msgstr "Installing from CD"
25774
25775
#: serverguide/C/installation.xml:140(para)
25776
msgid ""
25777
"The basic steps to install Ubuntu Server Edition from CD are the same for "
25778
"installing any operating system from CD. Unlike the <emphasis>Desktop "
25779
"Edition</emphasis> the <emphasis>Server Edition</emphasis> does not include "
25780
"a graphical installation program. Instead the Server Edition uses a console "
25781
"menu based process."
25782
msgstr ""
25783
"The basic steps to install Ubuntu Server Edition from CD are the same for "
25784
"installing any operating system from CD. Unlike the <emphasis>Desktop "
25785
"Edition</emphasis> the <emphasis>Server Edition</emphasis> does not include "
25786
"a graphical installation program. Instead the Server Edition uses a console "
25787
"menu based process."
25788
25789
#: serverguide/C/installation.xml:147(para)
25790
msgid ""
25791
"First, download and burn the appropriate ISO file from the <ulink "
25792
"url=\"http://www.ubuntu.com/getubuntu/download\"> Ubuntu web site</ulink>."
25793
msgstr ""
25794
"First, download and burn the appropriate ISO file from the <ulink "
25795
"url=\"http://www.ubuntu.com/getubuntu/download\"> Ubuntu web site</ulink>."
25796
25797
#: serverguide/C/installation.xml:153(para)
25798
msgid "Boot the system from the CD-ROM drive."
25799
msgstr "Boot the system from the CD-ROM drive."
25800
25801
#: serverguide/C/installation.xml:158(para)
25802
msgid ""
25803
"At the boot prompt you will be asked to select the language. Afterwards the "
25804
"installation process begins by asking for your keyboard layout."
25805
msgstr ""
25806
"At the boot prompt you will be asked to select the language. Afterwards the "
25807
"installation process begins by asking for your keyboard layout."
25808
25809
#: serverguide/C/installation.xml:164(para)
25810
msgid ""
25811
"From the main boot menu there are some additional options to install Ubuntu "
25812
"Server Edition. You can install a basic Ubuntu Server, or install Ubuntu "
25813
"Server as part of a <emphasis>Ubuntu Enterprise Cloud</emphasis>. For more "
25814
"information on UEC see <xref linkend=\"uec\"/>. The rest of this section "
25815
"will cover the basic Ubuntu Server install."
25816
msgstr ""
25817
25818
#: serverguide/C/installation.xml:172(para)
25819
msgid ""
25820
"The installer then discovers your hardware configuration, and configures the "
25821
"network settings using DHCP. If you do not wish to use DHCP at the next "
25822
"screen choose \"Go Back\", and you have the option to \"Configure the "
25823
"network manually\"."
25824
msgstr ""
25825
"The installer then discovers your hardware configuration, and configures the "
25826
"network settings using DHCP. If you do not wish to use DHCP at the next "
25827
"screen choose \"Go Back\", and you have the option to \"Configure the "
25828
"network manually\"."
25829
25830
#: serverguide/C/installation.xml:179(para)
25831
msgid "Next, the installer asks for the system's hostname and Time Zone."
25832
msgstr "Next, the installer asks for the system's hostname and Time Zone."
25833
25834
#: serverguide/C/installation.xml:184(para)
25835
msgid ""
25836
"You can then choose from several options to configure the hard drive layout. "
25837
"For advanced disk options see <xref linkend=\"advanced-installation\"/>."
25838
msgstr ""
25839
"You can then choose from several options to configure the hard drive layout. "
25840
"For advanced disk options see <xref linkend=\"advanced-installation\"/>."
25841
25842
#: serverguide/C/installation.xml:190(para)
25843
msgid "The Ubuntu base system is then installed."
25844
msgstr "The Ubuntu base system is then installed."
25845
25846
#: serverguide/C/installation.xml:195(para)
25847
msgid ""
25848
"A new user is setup, this user will have <emphasis>root</emphasis> access "
25849
"through the <application>sudo</application> utility."
25850
msgstr ""
25851
"A new user is setup, this user will have <emphasis>root</emphasis> access "
25852
"through the <application>sudo</application> utility."
25853
25854
#: serverguide/C/installation.xml:201(para)
25855
msgid ""
25856
"After the user is setup, you will be asked to encrypt your <filename "
25857
"role=\"directory\">home</filename> directory."
25858
msgstr ""
25859
"After the user is setup, you will be asked to encrypt your <filename "
25860
"role=\"directory\">home</filename> directory."
25861
25862
#: serverguide/C/installation.xml:207(para)
25863
msgid ""
25864
"The next step in the installation process is to decide how you want to "
25865
"update the system. There are three options:"
25866
msgstr ""
25867
"The next step in the installation process is to decide how you want to "
25868
"update the system. There are three options:"
25869
25870
#: serverguide/C/installation.xml:213(para)
25871
msgid ""
25872
"<emphasis>No automatic updates</emphasis>: this requires an administrator to "
25873
"log into the machine and manually install updates."
25874
msgstr ""
25875
"<emphasis>No automatic updates</emphasis>: this requires an administrator to "
25876
"log into the machine and manually install updates."
25877
25878
#: serverguide/C/installation.xml:219(para)
25879
msgid ""
25880
"<emphasis>Install security updates Automatically</emphasis>: will install "
25881
"the <application>unattended-upgrades</application> package, which will "
25882
"install security updates without the intervention of an administrator. For "
25883
"more details see <xref linkend=\"automatic-updates\"/>."
25884
msgstr ""
25885
"<emphasis>Install security updates Automatically</emphasis>: will install "
25886
"the <application>unattended-upgrades</application> package, which will "
25887
"install security updates without the intervention of an administrator. For "
25888
"more details see <xref linkend=\"automatic-updates\"/>."
25889
25890
#: serverguide/C/installation.xml:226(para)
25891
msgid ""
25892
"<emphasis>Manage the system with Landscape</emphasis>: Landscape is a paid "
25893
"service provided by Canonical to help manage your Ubuntu machines. See the "
25894
"<ulink url=\"http://www.canonical.com/projects/landscape\">Landscape</ulink> "
25895
"site for details."
25896
msgstr ""
25897
"<emphasis>Manage the system with Landscape</emphasis>: Landscape is a paid "
25898
"service provided by Canonical to help manage your Ubuntu machines. See the "
25899
"<ulink url=\"http://www.canonical.com/projects/landscape\">Landscape</ulink> "
25900
"site for details."
25901
25902
#: serverguide/C/installation.xml:235(para)
25903
msgid ""
25904
"You now have the option to install, or not install, several package tasks. "
25905
"See <xref linkend=\"install-tasks\"/> for details. Also, there is an option "
25906
"to launch <application>aptitude</application> to choose specific packages to "
25907
"install. For more information see <xref linkend=\"aptitude\"/>."
25908
msgstr ""
25909
"You now have the option to install, or not install, several package tasks. "
25910
"See <xref linkend=\"install-tasks\"/> for details. Also, there is an option "
25911
"to launch <application>aptitude</application> to choose specific packages to "
25912
"install. For more information see <xref linkend=\"aptitude\"/>."
25913
25914
#: serverguide/C/installation.xml:243(para)
25915
msgid "Finally, the last step before rebooting is to set the clock to UTC."
25916
msgstr "Finally, the last step before rebooting is to set the clock to UTC."
25917
25918
#: serverguide/C/installation.xml:249(para)
25919
msgid ""
25920
"If at any point during installation you are not satisfied by the default "
25921
"setting, use the \"Go Back\" function at any prompt to be brought to a "
25922
"detailed installation menu that will allow you to modify the default "
25923
"settings."
25924
msgstr ""
25925
"If at any point during installation you are not satisfied by the default "
25926
"setting, use the \"Go Back\" function at any prompt to be brought to a "
25927
"detailed installation menu that will allow you to modify the default "
25928
"settings."
25929
25930
#: serverguide/C/installation.xml:254(para)
25931
msgid ""
25932
"At some point during the installation process you may want to read the help "
25933
"screen provided by the installation system. To do this, press F1."
25934
msgstr ""
25935
"At some point during the installation process you may want to read the help "
25936
"screen provided by the installation system. To do this, press F1."
25937
25938
#: serverguide/C/installation.xml:259(para)
25939
msgid ""
25940
"Once again, for detailed instructions see the <ulink "
25941
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\"> Ubuntu "
25942
"Installation Guide</ulink>."
25943
msgstr ""
25944
"Once again, for detailed instructions see the <ulink "
25945
"url=\"https://help.ubuntu.com/10.04 LTS/installation-guide/\"> Ubuntu "
25946
"Installation Guide</ulink>."
25947
25948
#: serverguide/C/installation.xml:265(title)
25949
msgid "Package Tasks"
25950
msgstr "Package Tasks"
25951
25952
#: serverguide/C/installation.xml:266(para)
25953
msgid ""
25954
"During the Server Edition installation you have the option of installing "
25955
"additional packages from the CD. The packages are grouped by the type of "
25956
"service they provide."
25957
msgstr ""
25958
"During the Server Edition installation you have the option of installing "
25959
"additional packages from the CD. The packages are grouped by the type of "
25960
"service they provide."
25961
25962
#: serverguide/C/installation.xml:272(para)
25963
msgid "Cloud computing: Walrus storage service"
25964
msgstr ""
25965
25966
#: serverguide/C/installation.xml:277(para)
25967
msgid "Cloud computing: all-in-one cluster"
25968
msgstr ""
25969
25970
#: serverguide/C/installation.xml:282(para)
25971
msgid "Cloud computing: Cluster controller"
25972
msgstr ""
25973
25974
#: serverguide/C/installation.xml:287(para)
25975
msgid "Cloud computing: Node controller"
25976
msgstr ""
25977
25978
#: serverguide/C/installation.xml:292(para)
25979
msgid "Cloud computing: Storage controller"
25980
msgstr ""
25981
25982
#: serverguide/C/installation.xml:297(para)
25983
msgid "Cloud computing: top-level cloud controller"
25984
msgstr ""
25985
25986
#: serverguide/C/installation.xml:302(para)
25987
msgid "DNS server: Selects the BIND DNS server and its documentation."
25988
msgstr "DNS server: Selects the BIND DNS server and its documentation."
25989
25990
#: serverguide/C/installation.xml:307(para)
25991
msgid "LAMP server: Selects a ready-made Linux/Apache/MySQL/PHP server."
25992
msgstr "LAMP server: Selects a ready-made Linux/Apache/MySQL/PHP server."
25993
25994
#: serverguide/C/installation.xml:312(para)
25995
msgid ""
25996
"Mail server: This task selects a variety of package useful for a general "
25997
"purpose mail server system."
25998
msgstr ""
25999
"Mail server: This task selects a variety of package useful for a general "
26000
"purpose mail server system."
26001
26002
#: serverguide/C/installation.xml:317(para)
26003
msgid "OpenSSH server: Selects packages needed for an OpenSSH server."
26004
msgstr "OpenSSH server: Selects packages needed for an OpenSSH server."
26005
26006
#: serverguide/C/installation.xml:322(para)
26007
msgid ""
26008
"PostgreSQL database: This task selects client and server packages for the "
26009
"PostgreSQL database."
26010
msgstr ""
26011
"PostgreSQL database: This task selects client and server packages for the "
26012
"PostgreSQL database."
26013
26014
#: serverguide/C/installation.xml:327(para)
26015
msgid "Print server: This task sets up your system to be a print server."
26016
msgstr "Print server: This task sets up your system to be a print server."
26017
26018
#: serverguide/C/installation.xml:332(para)
26019
msgid ""
26020
"Samba File server: This task sets up your system to be a Samba file server, "
26021
"which is especially suitable in networks with both Windows and Linux systems."
26022
msgstr ""
26023
"Samba File server: This task sets up your system to be a Samba file server, "
26024
"which is especially suitable in networks with both Windows and Linux systems."
26025
26026
#: serverguide/C/installation.xml:338(para)
26027
msgid ""
26028
"Tomcat server: Installs the Apache Tomcat and needed dependencies Java, gcj, "
26029
"etc."
26030
msgstr ""
26031
"Tomcat server: Installs the Apache Tomcat and needed dependencies Java, gcj, "
26032
"etc."
26033
26034
#: serverguide/C/installation.xml:343(para)
26035
msgid ""
26036
"Virtual machine host: Includes packages needed to run KVM virtual machines."
26037
msgstr ""
26038
"Virtual machine host: Includes packages needed to run KVM virtual machines."
26039
26040
#: serverguide/C/installation.xml:348(para)
26041
msgid ""
26042
"Manually select packages: Executes <application>apptitude</application> "
26043
"allowing you to individually select packages."
26044
msgstr ""
26045
26046
#: serverguide/C/installation.xml:353(para)
26047
msgid ""
26048
"Installing the package groups is accomplished using the "
26049
"<application>tasksel</application> utility. One of the important difference "
26050
"between Ubuntu (or Debian) and other GNU/Linux distribution is that, when "
26051
"installed, a package is also configured to reasonable defaults, eventually "
26052
"prompting you for additional required information. Likewise, when installing "
26053
"a task, the packages are not only installed, but also configured to provided "
26054
"a fully integrated service."
26055
msgstr ""
26056
"Installing the package groups is accomplished using the "
26057
"<application>tasksel</application> utility. One of the important difference "
26058
"between Ubuntu (or Debian) and other GNU/Linux distribution is that, when "
26059
"installed, a package is also configured to reasonable defaults, eventually "
26060
"prompting you for additional required information. Likewise, when installing "
26061
"a task, the packages are not only installed, but also configured to provided "
26062
"a fully integrated service."
26063
26064
#: serverguide/C/installation.xml:360(para)
26065
msgid ""
26066
"For more information on the <emphasis>Cloud Computing</emphasis> tasks see "
26067
"<xref linkend=\"uec\"/>."
26068
msgstr ""
26069
26070
#: serverguide/C/installation.xml:363(para)
26071
msgid ""
26072
"Once the installation process has finished you can view a list of available "
26073
"tasks by entering the following from a terminal prompt:"
26074
msgstr ""
26075
"Once the installation process has finished you can view a list of available "
26076
"tasks by entering the following from a terminal prompt:"
26077
26078
#: serverguide/C/installation.xml:368(command)
26079
msgid "tasksel --list-tasks"
26080
msgstr "tasksel --list-tasks"
26081
26082
#: serverguide/C/installation.xml:371(para)
26083
msgid ""
26084
"The output will list tasks from other Ubuntu based distributions such as "
26085
"Kubuntu and Edubuntu. Note that you can also invoke the "
26086
"<command>tasksel</command> command by itself, which will bring up a menu of "
26087
"the different tasks available."
26088
msgstr ""
26089
"The output will list tasks from other Ubuntu based distributions such as "
26090
"Kubuntu and Edubuntu. Note that you can also invoke the "
26091
"<command>tasksel</command> command by itself, which will bring up a menu of "
26092
"the different tasks available."
26093
26094
#: serverguide/C/installation.xml:377(para)
26095
msgid ""
26096
"You can view a list of which packages are installed with each task using the "
26097
"<emphasis>--task-packages</emphasis> option. For example, to list the "
26098
"packages installed with the <emphasis>DNS Server</emphasis> task enter the "
26099
"following:"
26100
msgstr ""
26101
"You can view a list of which packages are installed with each task using the "
26102
"<emphasis>--task-packages</emphasis> option. For example, to list the "
26103
"packages installed with the <emphasis>DNS Server</emphasis> task enter the "
26104
"following:"
26105
26106
#: serverguide/C/installation.xml:382(command)
26107
msgid "tasksel --task-packages dns-server"
26108
msgstr "tasksel --task-packages dns-server"
26109
26110
#: serverguide/C/installation.xml:384(para)
26111
msgid "The output of the command should list:"
26112
msgstr "The output of the command should list:"
26113
26114
#: serverguide/C/installation.xml:387(programlisting)
26115
#, no-wrap
26116
msgid ""
26117
"\n"
26118
"bind9-doc \n"
26119
"bind9utils \n"
26120
"bind9\n"
26121
msgstr ""
26122
"\n"
26123
"bind9-doc \n"
26124
"bind9utils \n"
26125
"bind9\n"
26126
26127
#: serverguide/C/installation.xml:392(para)
26128
msgid ""
26129
"Also, if you did not install one of the tasks during the installation "
26130
"process, but for example you decide to make your new LAMP server a DNS "
26131
"server as well. Simply insert the installation CD and from a terminal:"
26132
msgstr ""
26133
"Also, if you did not install one of the tasks during the installation "
26134
"process, but for example you decide to make your new LAMP server a DNS "
26135
"server as well. Simply insert the installation CD and from a terminal:"
26136
26137
#: serverguide/C/installation.xml:397(command)
26138
msgid "sudo tasksel install dns-server"
26139
msgstr "sudo tasksel install dns-server"
26140
26141
#: serverguide/C/installation.xml:402(title)
26142
msgid "Upgrading"
26143
msgstr "Upgrading"
26144
26145
#: serverguide/C/installation.xml:403(para)
26146
msgid ""
26147
"There are several ways to upgrade from one Ubuntu release to another. This "
26148
"section gives an overview of the recommended upgrade method."
26149
msgstr ""
26150
"There are several ways to upgrade from one Ubuntu release to another. This "
26151
"section gives an overview of the recommended upgrade method."
26152
26153
#: serverguide/C/installation.xml:407(title) serverguide/C/installation.xml:422(command)
26154
msgid "do-release-upgrade"
26155
msgstr "do-release-upgrade"
26156
26157
#: serverguide/C/installation.xml:408(para)
26158
msgid ""
26159
"The recommended way to upgrade a Server Edition installation is to use the "
26160
"<application>do-release-upgrade</application> utility. Part of the "
26161
"<emphasis>update-manager-core</emphasis> package, it does not have any "
26162
"graphical dependencies and is installed by default."
26163
msgstr ""
26164
"The recommended way to upgrade a Server Edition installation is to use the "
26165
"<application>do-release-upgrade</application> utility. Part of the "
26166
"<emphasis>update-manager-core</emphasis> package, it does not have any "
26167
"graphical dependencies and is installed by default."
26168
26169
#: serverguide/C/installation.xml:413(para)
26170
msgid ""
26171
"Debian based systems can also be upgraded by using <command>apt-get dist-"
26172
"upgrade</command>. However, using <application>do-release-"
26173
"upgrade</application> is recommended because it has the ability to handle "
26174
"system configuration changes sometimes needed between releases."
26175
msgstr ""
26176
"Debian based systems can also be upgraded by using <command>apt-get dist-"
26177
"upgrade</command>. However, using <application>do-release-"
26178
"upgrade</application> is recommended because it has the ability to handle "
26179
"system configuration changes sometimes needed between releases."
26180
26181
#: serverguide/C/installation.xml:418(para)
26182
msgid "To upgrade to a newer release, from a terminal prompt enter:"
26183
msgstr "To upgrade to a newer release, from a terminal prompt enter:"
26184
26185
#: serverguide/C/installation.xml:424(para)
26186
msgid ""
26187
"It is also possible to use <application>do-release-upgrade</application> to "
26188
"upgrade to a development version of Ubuntu. To accomplish this use the "
26189
"<emphasis>-d</emphasis> switch:"
26190
msgstr ""
26191
"It is also possible to use <application>do-release-upgrade</application> to "
26192
"upgrade to a development version of Ubuntu. To accomplish this use the "
26193
"<emphasis>-d</emphasis> switch:"
26194
26195
#: serverguide/C/installation.xml:429(command)
26196
msgid "do-release-upgrade -d"
26197
msgstr "do-release-upgrade -d"
26198
26199
#: serverguide/C/installation.xml:432(para)
26200
msgid ""
26201
"Upgrading to a development release is <emphasis>not</emphasis> recommended "
26202
"for production environments."
26203
msgstr ""
26204
"Upgrading to a development release is <emphasis>not</emphasis> recommended "
26205
"for production environments."
26206
26207
#: serverguide/C/installation.xml:439(title)
26208
msgid "Advanced Installation"
26209
msgstr "Advanced Installation"
26210
26211
#: serverguide/C/installation.xml:442(title)
26212
msgid "Software RAID"
26213
msgstr "Software RAID"
26214
26215
#: serverguide/C/installation.xml:444(para)
26216
msgid ""
26217
"RAID is a method of configuring multiple hard drives to act as one, reducing "
26218
"the probability of catastrophic data loss in case of drive failure. RAID is "
26219
"implemented in either software (where the operating system knows about both "
26220
"drives and actively maintains both of them) or hardware (where a special "
26221
"controller makes the OS think there's only one drive and maintains the "
26222
"drives 'invisibly')."
26223
msgstr ""
26224
"RAID is a method of configuring multiple hard drives to act as one, reducing "
26225
"the probability of catastrophic data loss in case of drive failure. RAID is "
26226
"implemented in either software (where the operating system knows about both "
26227
"drives and actively maintains both of them) or hardware (where a special "
26228
"controller makes the OS think there's only one drive and maintains the "
26229
"drives 'invisibly')."
26230
26231
#: serverguide/C/installation.xml:451(para)
26232
msgid ""
26233
"The RAID software included with current versions of Linux (and Ubuntu) is "
26234
"based on the <application>'mdadm'</application> driver and works very well, "
26235
"better even than many so-called 'hardware' RAID controllers. This section "
26236
"will guide you through installing Ubuntu Server Edition using two RAID1 "
26237
"partitions on two physical hard drives, one for <emphasis>/</emphasis> and "
26238
"another for <emphasis>swap</emphasis>."
26239
msgstr ""
26240
"The RAID software included with current versions of Linux (and Ubuntu) is "
26241
"based on the <application>'mdadm'</application> driver and works very well, "
26242
"better even than many so-called 'hardware' RAID controllers. This section "
26243
"will guide you through installing Ubuntu Server Edition using two RAID1 "
26244
"partitions on two physical hard drives, one for <emphasis>/</emphasis> and "
26245
"another for <emphasis>swap</emphasis>."
26246
26247
#: serverguide/C/installation.xml:461(para) serverguide/C/installation.xml:975(para)
26248
msgid ""
26249
"Follow the installation steps until you get to the <emphasis>Partition "
26250
"disks</emphasis> step, then:"
26251
msgstr ""
26252
"Follow the installation steps until you get to the <emphasis>Partition "
26253
"disks</emphasis> step, then:"
26254
26255
#: serverguide/C/installation.xml:468(para)
26256
msgid "Select <emphasis>Manual</emphasis> as the partition method."
26257
msgstr "Select <emphasis>Manual</emphasis> as the partition method."
26258
26259
#: serverguide/C/installation.xml:475(para)
26260
msgid ""
26261
"Select the first hard drive, and agree to <emphasis>\"Create a new empty "
26262
"partition table on this device?\"</emphasis>."
26263
msgstr ""
26264
"Select the first hard drive, and agree to <emphasis>\"Create a new empty "
26265
"partition table on this device?\"</emphasis>."
26266
26267
#: serverguide/C/installation.xml:479(para)
26268
msgid ""
26269
"Repeat this step for each drive you wish to be part of the RAID array."
26270
msgstr ""
26271
"Repeat this step for each drive you wish to be part of the RAID array."
26272
26273
#: serverguide/C/installation.xml:486(para)
26274
msgid ""
26275
"Select the <emphasis>\"FREE SPACE\"</emphasis> on the first drive then "
26276
"select <emphasis>\"Create a new partition\"</emphasis>."
26277
msgstr ""
26278
"Select the <emphasis>\"FREE SPACE\"</emphasis> on the first drive then "
26279
"select <emphasis>\"Create a new partition\"</emphasis>."
26280
26281
#: serverguide/C/installation.xml:493(para)
26282
msgid ""
26283
"Next, select the <emphasis>Size</emphasis> of the partition. This partition "
26284
"will be the <emphasis>swap</emphasis> partition, and a general rule for swap "
26285
"size is twice that of RAM. Enter the partition size, then choose "
26286
"<emphasis>Primary</emphasis>, then <emphasis>Beginning</emphasis>."
26287
msgstr ""
26288
"Next, select the <emphasis>Size</emphasis> of the partition. This partition "
26289
"will be the <emphasis>swap</emphasis> partition, and a general rule for swap "
26290
"size is twice that of RAM. Enter the partition size, then choose "
26291
"<emphasis>Primary</emphasis>, then <emphasis>Beginning</emphasis>."
26292
26293
#: serverguide/C/installation.xml:502(para)
26294
msgid ""
26295
"Select the <emphasis>\"Use as:\"</emphasis> line at the top. By default this "
26296
"is <emphasis role=\"italic\">\"Ext4 journaling file system\"</emphasis>, "
26297
"change that to <emphasis>\"physical volume for RAID\"</emphasis> then "
26298
"<emphasis>\"Done setting up partition\"</emphasis>."
26299
msgstr ""
26300
"Select the <emphasis>\"Use as:\"</emphasis> line at the top. By default this "
26301
"is <emphasis role=\"italic\">\"Ext4 journaling file system\"</emphasis>, "
26302
"change that to <emphasis>\"physical volume for RAID\"</emphasis> then "
26303
"<emphasis>\"Done setting up partition\"</emphasis>."
26304
26305
#: serverguide/C/installation.xml:511(para)
26306
msgid ""
26307
"For the <emphasis>/</emphasis> partition once again select <emphasis>\"Free "
26308
"Space\"</emphasis> on the first drive then <emphasis>\"Create a new "
26309
"partition\"</emphasis>."
26310
msgstr ""
26311
"For the <emphasis>/</emphasis> partition once again select <emphasis>\"Free "
26312
"Space\"</emphasis> on the first drive then <emphasis>\"Create a new "
26313
"partition\"</emphasis>."
26314
26315
#: serverguide/C/installation.xml:519(para)
26316
msgid ""
26317
"Use the rest of the free space on the drive and choose "
26318
"<emphasis>Continue</emphasis>, then <emphasis>Primary</emphasis>."
26319
msgstr ""
26320
"Use the rest of the free space on the drive and choose "
26321
"<emphasis>Continue</emphasis>, then <emphasis>Primary</emphasis>."
26322
26323
#: serverguide/C/installation.xml:526(para)
26324
msgid ""
26325
"As with the swap partition, select the <emphasis>\"Use as:\"</emphasis> line "
26326
"at the top, changing it to <emphasis>\"physical volume for "
26327
"RAID\"</emphasis>. Also select the <emphasis>\"Bootable flag:\"</emphasis> "
26328
"line to change the value to <emphasis>\"on\"</emphasis>. Then choose "
26329
"<emphasis>\"Done setting up partition\"</emphasis>."
26330
msgstr ""
26331
"As with the swap partition, select the <emphasis>\"Use as:\"</emphasis> line "
26332
"at the top, changing it to <emphasis>\"physical volume for "
26333
"RAID\"</emphasis>. Also select the <emphasis>\"Bootable flag:\"</emphasis> "
26334
"line to change the value to <emphasis>\"on\"</emphasis>. Then choose "
26335
"<emphasis>\"Done setting up partition\"</emphasis>."
26336
26337
#: serverguide/C/installation.xml:536(para)
26338
msgid "Repeat steps three through eight for the other disk and partitions."
26339
msgstr "Repeat steps three through eight for the other disk and partitions."
26340
26341
#: serverguide/C/installation.xml:545(title)
26342
msgid "RAID Configuration"
26343
msgstr "RAID Configuration"
26344
26345
#: serverguide/C/installation.xml:547(para)
26346
msgid "With the partitions setup the arrays are ready to be configured:"
26347
msgstr "With the partitions setup the arrays are ready to be configured:"
26348
26349
#: serverguide/C/installation.xml:554(para)
26350
msgid ""
26351
"Back in the main \"Partition Disks\" page, select <emphasis>\"Configure "
26352
"Software RAID\"</emphasis> at the top."
26353
msgstr ""
26354
"Back in the main \"Partition Disks\" page, select <emphasis>\"Configure "
26355
"Software RAID\"</emphasis> at the top."
26356
26357
#: serverguide/C/installation.xml:561(para)
26358
msgid "Select <emphasis>\"yes\"</emphasis> to write the changes to disk."
26359
msgstr "Select <emphasis>\"yes\"</emphasis> to write the changes to disk."
26360
26361
#: serverguide/C/installation.xml:568(para)
26362
msgid "Choose <emphasis>\"Create MD device\"</emphasis>."
26363
msgstr "Choose <emphasis>\"Create MD device\"</emphasis>."
26364
26365
#: serverguide/C/installation.xml:575(para)
26366
msgid ""
26367
"For this example, select <emphasis>\"RAID1\"</emphasis>, but if you are "
26368
"using a different setup choose the appropriate type (RAID0 RAID1 RAID5)."
26369
msgstr ""
26370
"For this example, select <emphasis>\"RAID1\"</emphasis>, but if you are "
26371
"using a different setup choose the appropriate type (RAID0 RAID1 RAID5)."
26372
26373
#: serverguide/C/installation.xml:581(para)
26374
msgid ""
26375
"In order to use <emphasis>RAID5</emphasis> you need at least "
26376
"<emphasis>three</emphasis> drives. Using RAID0 or RAID1 only "
26377
"<emphasis>two</emphasis> drives are required."
26378
msgstr ""
26379
"In order to use <emphasis>RAID5</emphasis> you need at least "
26380
"<emphasis>three</emphasis> drives. Using RAID0 or RAID1 only "
26381
"<emphasis>two</emphasis> drives are required."
26382
26383
#: serverguide/C/installation.xml:590(para)
26384
msgid ""
26385
"Enter the number of active devices <emphasis>\"2\"</emphasis>, or the amount "
26386
"of hard drives you have, for the array. Then select "
26387
"<emphasis>\"Continue\"</emphasis>."
26388
msgstr ""
26389
"Enter the number of active devices <emphasis>\"2\"</emphasis>, or the amount "
26390
"of hard drives you have, for the array. Then select "
26391
"<emphasis>\"Continue\"</emphasis>."
26392
26393
#: serverguide/C/installation.xml:598(para)
26394
msgid ""
26395
"Next, enter the number of spare devices <emphasis>\"0\"</emphasis> by "
26396
"default, then choose <emphasis>\"Continue\"</emphasis>."
26397
msgstr ""
26398
"Next, enter the number of spare devices <emphasis>\"0\"</emphasis> by "
26399
"default, then choose <emphasis>\"Continue\"</emphasis>."
26400
26401
#: serverguide/C/installation.xml:605(para)
26402
msgid ""
26403
"Choose which partitions to use. Generally they will be sda1, sdb1, sdc1, "
26404
"etc. The numbers will usually match and the different letters correspond to "
26405
"different hard drives."
26406
msgstr ""
26407
"Choose which partitions to use. Generally they will be sda1, sdb1, sdc1, "
26408
"etc. The numbers will usually match and the different letters correspond to "
26409
"different hard drives."
26410
26411
#: serverguide/C/installation.xml:610(para)
26412
msgid ""
26413
"For the <emphasis>swap</emphasis> partition choose <emphasis>sda1</emphasis> "
26414
"and <emphasis>sdb1</emphasis>. Select <emphasis>\"Continue\"</emphasis> to "
26415
"go to the next step."
26416
msgstr ""
26417
"For the <emphasis>swap</emphasis> partition choose <emphasis>sda1</emphasis> "
26418
"and <emphasis>sdb1</emphasis>. Select <emphasis>\"Continue\"</emphasis> to "
26419
"go to the next step."
26420
26421
#: serverguide/C/installation.xml:618(para)
26422
msgid ""
26423
"Repeat steps <emphasis>three</emphasis> through <emphasis>seven</emphasis> "
26424
"for the <emphasis>/</emphasis> partition choosing <emphasis>sda2</emphasis> "
26425
"and <emphasis>sdb2</emphasis>."
26426
msgstr ""
26427
"Repeat steps <emphasis>three</emphasis> through <emphasis>seven</emphasis> "
26428
"for the <emphasis>/</emphasis> partition choosing <emphasis>sda2</emphasis> "
26429
"and <emphasis>sdb2</emphasis>."
26430
26431
#: serverguide/C/installation.xml:626(para)
26432
msgid "Once done select <emphasis>\"Finish\"</emphasis>."
26433
msgstr "Once done select <emphasis>\"Finish\"</emphasis>."
26434
26435
#: serverguide/C/installation.xml:636(title)
26436
msgid "Formatting"
26437
msgstr "Formatting"
26438
26439
#: serverguide/C/installation.xml:638(para)
26440
msgid ""
26441
"There should now be a list of hard drives and RAID devices. The next step is "
26442
"to format and set the mount point for the RAID devices. Treat the RAID "
26443
"device as a local hard drive, format and mount accordingly."
26444
msgstr ""
26445
"There should now be a list of hard drives and RAID devices. The next step is "
26446
"to format and set the mount point for the RAID devices. Treat the RAID "
26447
"device as a local hard drive, format and mount accordingly."
26448
26449
#: serverguide/C/installation.xml:646(para)
26450
msgid ""
26451
"Select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
26452
"#0\"</emphasis> partition."
26453
msgstr ""
26454
"Select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
26455
"#0\"</emphasis> partition."
26456
26457
#: serverguide/C/installation.xml:653(para)
26458
msgid ""
26459
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"swap "
26460
"area\"</emphasis>, then <emphasis>\"Done setting up partition\"</emphasis>."
26461
msgstr ""
26462
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"swap "
26463
"area\"</emphasis>, then <emphasis>\"Done setting up partition\"</emphasis>."
26464
26465
#: serverguide/C/installation.xml:661(para)
26466
msgid ""
26467
"Next, select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
26468
"#1\"</emphasis> partition."
26469
msgstr ""
26470
"Next, select <emphasis>\"#1\"</emphasis> under the <emphasis>\"RAID1 device "
26471
"#1\"</emphasis> partition."
26472
26473
#: serverguide/C/installation.xml:668(para)
26474
msgid ""
26475
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"Ext4 "
26476
"journaling file system\"</emphasis>."
26477
msgstr ""
26478
"Choose <emphasis>\"Use as:\"</emphasis>. Then select <emphasis>\"Ext4 "
26479
"journaling file system\"</emphasis>."
26480
26481
#: serverguide/C/installation.xml:675(para)
26482
msgid ""
26483
"Then select the <emphasis>\"Mount point\"</emphasis> and choose "
26484
"<emphasis>\"/ - the root file system\"</emphasis>. Change any of the other "
26485
"options as appropriate, then select <emphasis>\"Done setting up "
26486
"partition\"</emphasis>."
26487
msgstr ""
26488
"Then select the <emphasis>\"Mount point\"</emphasis> and choose "
26489
"<emphasis>\"/ - the root file system\"</emphasis>. Change any of the other "
26490
"options as appropriate, then select <emphasis>\"Done setting up "
26491
"partition\"</emphasis>."
26492
26493
#: serverguide/C/installation.xml:683(para)
26494
msgid ""
26495
"Finally, select <emphasis>\"Finish partitioning and write changes to "
26496
"disk\"</emphasis>."
26497
msgstr ""
26498
"Finally, select <emphasis>\"Finish partitioning and write changes to "
26499
"disk\"</emphasis>."
26500
26501
#: serverguide/C/installation.xml:690(para)
26502
msgid ""
26503
"If you choose to place the root partition on a RAID array, the installer "
26504
"will then ask if you would like to boot in a <emphasis>degraded</emphasis> "
26505
"state. See <xref linkend=\"raid-degraded\"/> for further details."
26506
msgstr ""
26507
"If you choose to place the root partition on a RAID array, the installer "
26508
"will then ask if you would like to boot in a <emphasis>degraded</emphasis> "
26509
"state. See <xref linkend=\"raid-degraded\"/> for further details."
26510
26511
#: serverguide/C/installation.xml:695(para)
26512
msgid "The installation process will then continue normally."
26513
msgstr "The installation process will then continue normally."
26514
26515
#: serverguide/C/installation.xml:701(title)
26516
msgid "Degraded RAID"
26517
msgstr "Degraded RAID"
26518
26519
#: serverguide/C/installation.xml:703(para)
26520
msgid ""
26521
"At some point in the life of the computer a disk failure event may occur. "
26522
"When this happens, using Software RAID, the operating system will place the "
26523
"array into what is known as a <emphasis>degraded</emphasis> state."
26524
msgstr ""
26525
"At some point in the life of the computer a disk failure event may occur. "
26526
"When this happens, using Software RAID, the operating system will place the "
26527
"array into what is known as a <emphasis>degraded</emphasis> state."
26528
26529
#: serverguide/C/installation.xml:708(para)
26530
msgid ""
26531
"If the array has become degraded, due to the chance of data corruption, by "
26532
"default Ubuntu Server Edition will boot to <emphasis>initramfs</emphasis> "
26533
"after thirty seconds. Once the initramfs has booted there is a fifteen "
26534
"second prompt giving you the option to go ahead and boot the system, or "
26535
"attempt manual recover. Booting to the initramfs prompt may or may not be "
26536
"the desired behavior, especially if the machine is in a remote location. "
26537
"Booting to a degraded array can be configured several ways:"
26538
msgstr ""
26539
"If the array has become degraded, due to the chance of data corruption, by "
26540
"default Ubuntu Server Edition will boot to <emphasis>initramfs</emphasis> "
26541
"after thirty seconds. Once the initramfs has booted there is a fifteen "
26542
"second prompt giving you the option to go ahead and boot the system, or "
26543
"attempt manual recover. Booting to the initramfs prompt may or may not be "
26544
"the desired behaviour, especially if the machine is in a remote location. "
26545
"Booting to a degraded array can be configured several ways:"
26546
26547
#: serverguide/C/installation.xml:719(para)
26548
msgid ""
26549
"The <application>dpkg-reconfigure</application> utility can be used to "
26550
"configure the default behavior, and during the process you will be queried "
26551
"about additional settings related to the array. Such as monitoring, email "
26552
"alerts, etc. To reconfigure <application>mdadm</application> enter the "
26553
"following:"
26554
msgstr ""
26555
"The <application>dpkg-reconfigure</application> utility can be used to "
26556
"configure the default behaviour, and during the process you will be queried "
26557
"about additional settings related to the array. Such as monitoring, e-mail "
26558
"alerts, etc. To reconfigure <application>mdadm</application> enter the "
26559
"following:"
26560
26561
#: serverguide/C/installation.xml:726(command)
26562
msgid "sudo dpkg-reconfigure mdadm"
26563
msgstr "sudo dpkg-reconfigure mdadm"
26564
26565
#: serverguide/C/installation.xml:732(para)
26566
msgid ""
26567
"The <command>dpkg-reconfigure mdadm</command> process will change the "
26568
"<filename>/etc/initramfs-tools/conf.d/mdadm</filename> configuration file. "
26569
"The file has the advantage of being able to pre-configure the system's "
26570
"behavior, and can also be manually edited:"
26571
msgstr ""
26572
"The <command>dpkg-reconfigure mdadm</command> process will change the "
26573
"<filename>/etc/initramfs-tools/conf.d/mdadm</filename> configuration file. "
26574
"The file has the advantage of being able to pre-configure the system's "
26575
"behaviour, and can also be manually edited:"
26576
26577
#: serverguide/C/installation.xml:738(programlisting)
26578
#, no-wrap
26579
msgid ""
26580
"\n"
26581
"BOOT_DEGRADED=true\n"
26582
msgstr ""
26583
"\n"
26584
"BOOT_DEGRADED=true\n"
26585
26586
#: serverguide/C/installation.xml:743(para)
26587
msgid "The configuration file can be overridden by using a Kernel argument."
26588
msgstr "The configuration file can be overridden by using a Kernel argument."
26589
26590
#: serverguide/C/installation.xml:751(para)
26591
msgid ""
26592
"Using a Kernel argument will allow the system to boot to a degraded array as "
26593
"well:"
26594
msgstr ""
26595
"Using a Kernel argument will allow the system to boot to a degraded array as "
26596
"well:"
26597
26598
#: serverguide/C/installation.xml:757(para)
26599
msgid ""
26600
"When the server is booting press <keycap>Shift</keycap> to open the "
26601
"<application>Grub</application> menu."
26602
msgstr ""
26603
26604
#: serverguide/C/installation.xml:762(para)
26605
msgid "Press <keycap>e</keycap> to edit your kernel command options."
26606
msgstr ""
26607
26608
#: serverguide/C/installation.xml:767(para)
26609
msgid "Press the <keycap>down</keycap> arrow to highlight the kernel line."
26610
msgstr ""
26611
26612
#: serverguide/C/installation.xml:772(para)
26613
msgid ""
26614
"Add <emphasis>\"bootdegraded=true\"</emphasis> (without the quotes) to the "
26615
"end of the line."
26616
msgstr ""
26617
"Add <emphasis>\"bootdegraded=true\"</emphasis> (without the quotes) to the "
26618
"end of the line."
26619
26620
#: serverguide/C/installation.xml:777(para)
26621
msgid ""
26622
"Press <keycombo><keycap>Ctrl</keycap><keycap>x</keycap></keycombo> to boot "
26623
"the system."
26624
msgstr ""
26625
26626
#: serverguide/C/installation.xml:786(para)
26627
msgid ""
26628
"Once the system has booted you can either repair the array see <xref "
26629
"linkend=\"raid-maintenance\"/> for details, or copy important data to "
26630
"another machine due to major hardware failure."
26631
msgstr ""
26632
"Once the system has booted you can either repair the array see <xref "
26633
"linkend=\"raid-maintenance\"/> for details, or copy important data to "
26634
"another machine due to major hardware failure."
26635
26636
#: serverguide/C/installation.xml:793(title)
26637
msgid "RAID Maintenance"
26638
msgstr "RAID Maintenance"
26639
26640
#: serverguide/C/installation.xml:795(para)
26641
msgid ""
26642
"The <application>mdadm</application> utility can be used to view the status "
26643
"of an array, add disks to an array, remove disks, etc:"
26644
msgstr ""
26645
"The <application>mdadm</application> utility can be used to view the status "
26646
"of an array, add disks to an array, remove disks, etc:"
26647
26648
#: serverguide/C/installation.xml:802(para)
26649
msgid "To view the status of an array, from a terminal prompt enter:"
26650
msgstr "To view the status of an array, from a terminal prompt enter:"
26651
26652
#: serverguide/C/installation.xml:806(command)
26653
msgid "sudo mdadm -D /dev/md0"
26654
msgstr "sudo mdadm -D /dev/md0"
26655
26656
#: serverguide/C/installation.xml:809(para)
26657
msgid ""
26658
"The <emphasis>-D</emphasis> tells <application>mdadm</application> to "
26659
"display <emphasis>detailed</emphasis> information about the "
26660
"<filename>/dev/md0</filename> device. Replace <filename>/dev/md0</filename> "
26661
"with the appropriate RAID device."
26662
msgstr ""
26663
"The <emphasis>-D</emphasis> tells <application>mdadm</application> to "
26664
"display <emphasis>detailed</emphasis> information about the "
26665
"<filename>/dev/md0</filename> device. Replace <filename>/dev/md0</filename> "
26666
"with the appropriate RAID device."
26667
26668
#: serverguide/C/installation.xml:815(para)
26669
msgid "To view the status of a disk in an array:"
26670
msgstr "To view the status of a disk in an array:"
26671
26672
#: serverguide/C/installation.xml:819(command)
26673
msgid "sudo mdadm -E /dev/sda1"
26674
msgstr "sudo mdadm -E /dev/sda1"
26675
26676
#: serverguide/C/installation.xml:821(para)
26677
msgid ""
26678
"The output if very similar to the <command>mdadm -D</command> command, "
26679
"adjust <filename>/dev/sda1</filename> for each disk."
26680
msgstr ""
26681
"The output if very similar to the <command>mdadm -D</command> command, "
26682
"adjust <filename>/dev/sda1</filename> for each disk."
26683
26684
#: serverguide/C/installation.xml:826(para)
26685
msgid "If a disk fails and needs to be removed from an array enter:"
26686
msgstr "If a disk fails and needs to be removed from an array enter:"
26687
26688
#: serverguide/C/installation.xml:830(command)
26689
msgid "sudo mdadm --remove /dev/md0 /dev/sda1"
26690
msgstr "sudo mdadm --remove /dev/md0 /dev/sda1"
26691
26692
#: serverguide/C/installation.xml:832(para)
26693
msgid ""
26694
"Change <filename>/dev/md0</filename> and <filename>/dev/sda1</filename> to "
26695
"the appropriate RAID device and disk."
26696
msgstr ""
26697
"Change <filename>/dev/md0</filename> and <filename>/dev/sda1</filename> to "
26698
"the appropriate RAID device and disk."
26699
26700
#: serverguide/C/installation.xml:837(para)
26701
msgid "Similarly, to add a new disk:"
26702
msgstr "Similarly, to add a new disk:"
26703
26704
#: serverguide/C/installation.xml:841(command)
26705
msgid "sudo mdadm --add /dev/md0 /dev/sda1"
26706
msgstr "sudo mdadm --add /dev/md0 /dev/sda1"
26707
26708
#: serverguide/C/installation.xml:846(para)
26709
msgid ""
26710
"Sometimes a disk can change to a <emphasis>faulty</emphasis> state even "
26711
"though there is nothing physically wrong with the drive. It is usually "
26712
"worthwhile to remove the drive from the array then re-add it. This will "
26713
"cause the drive to re-sync with the array. If the drive will not sync with "
26714
"the array, it is a good indication of hardware failure."
26715
msgstr ""
26716
"Sometimes a disk can change to a <emphasis>faulty</emphasis> state even "
26717
"though there is nothing physically wrong with the drive. It is usually "
26718
"worthwhile to remove the drive from the array then re-add it. This will "
26719
"cause the drive to re-sync with the array. If the drive will not sync with "
26720
"the array, it is a good indication of hardware failure."
26721
26722
#: serverguide/C/installation.xml:852(para)
26723
msgid ""
26724
"The <filename>/proc/mdstat</filename> file also contains useful information "
26725
"about the system's RAID devices:"
26726
msgstr ""
26727
"The <filename>/proc/mdstat</filename> file also contains useful information "
26728
"about the system's RAID devices:"
26729
26730
#: serverguide/C/installation.xml:857(command)
26731
msgid "cat /proc/mdstat"
26732
msgstr "cat /proc/mdstat"
26733
26734
#: serverguide/C/installation.xml:858(computeroutput)
26735
#, no-wrap
26736
msgid ""
26737
"Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] "
26738
"[raid10] \n"
26739
"md0 : active raid1 sda1[0] sdb1[1]\n"
26740
" 10016384 blocks [2/2] [UU]\n"
26741
" \n"
26742
"unused devices: <none>"
26743
msgstr ""
26744
"Personalities : [linear] [multipath] [raid0] [raid1] [raid6] [raid5] [raid4] "
26745
"[raid10] \n"
26746
"md0 : active raid1 sda1[0] sdb1[1]\n"
26747
" 10016384 blocks [2/2] [UU]\n"
26748
" \n"
26749
"unused devices: <none>"
26750
26751
#: serverguide/C/installation.xml:865(para)
26752
msgid ""
26753
"The following command is great for watching the status of a syncing drive:"
26754
msgstr ""
26755
"The following command is great for watching the status of a syncing drive:"
26756
26757
#: serverguide/C/installation.xml:870(command)
26758
msgid "watch -n1 cat /proc/mdstat"
26759
msgstr "watch -n1 cat /proc/mdstat"
26760
26761
#: serverguide/C/installation.xml:873(para)
26762
msgid ""
26763
"Press <emphasis>Ctrl+c</emphasis> to stop the "
26764
"<application>watch</application> command."
26765
msgstr ""
26766
"Press <emphasis>Ctrl+c</emphasis> to stop the "
26767
"<application>watch</application> command."
26768
26769
#: serverguide/C/installation.xml:877(para)
26770
msgid ""
26771
"If you do need to replace a faulty drive, after the drive has been replaced "
26772
"and synced, <application>grub</application> will need to be installed. To "
26773
"install <application>grub</application> on the new drive, enter the "
26774
"following:"
26775
msgstr ""
26776
"If you do need to replace a faulty drive, after the drive has been replaced "
26777
"and synced, <application>grub</application> will need to be installed. To "
26778
"install <application>grub</application> on the new drive, enter the "
26779
"following:"
26780
26781
#: serverguide/C/installation.xml:883(command)
26782
msgid "sudo grub-install /dev/md0"
26783
msgstr "sudo grub-install /dev/md0"
26784
26785
#: serverguide/C/installation.xml:886(para)
26786
msgid ""
26787
"Replace <filename>/dev/md0</filename> with the appropriate array device name."
26788
msgstr ""
26789
"Replace <filename>/dev/md0</filename> with the appropriate array device name."
26790
26791
#: serverguide/C/installation.xml:894(para)
26792
msgid ""
26793
"The topic of RAID arrays is a complex one due to the plethora of ways RAID "
26794
"can be configured. Please see the following links for more information:"
26795
msgstr ""
26796
"The topic of RAID arrays is a complex one due to the plethora of ways RAID "
26797
"can be configured. Please see the following links for more information:"
26798
26799
#: serverguide/C/installation.xml:901(para)
26800
msgid ""
26801
"<ulink url=\"https://help.ubuntu.com/community/Installation#raid\">Ubuntu "
26802
"Wiki Articles on RAID</ulink>."
26803
msgstr ""
26804
26805
#: serverguide/C/installation.xml:907(ulink)
26806
msgid "Software RAID HOWTO"
26807
msgstr "Software RAID HOWTO"
26808
26809
#: serverguide/C/installation.xml:912(ulink)
26810
msgid "Managing RAID on Linux"
26811
msgstr "Managing RAID on Linux"
26812
26813
#: serverguide/C/installation.xml:919(title)
26814
msgid "Logical Volume Manager (LVM)"
26815
msgstr "Logical Volume Manager (LVM)"
26816
26817
#: serverguide/C/installation.xml:921(para)
26818
msgid ""
26819
"Logical Volume Manger, or <emphasis>LVM</emphasis>, allows administrators to "
26820
"create <emphasis>logical</emphasis> volumes out of one or multiple physical "
26821
"hard disks. LVM volumes can be created on both software RAID partitions and "
26822
"standard partitions residing on a single disk. Volumes can also be extended, "
26823
"giving greater flexibility to systems as requirements change."
26824
msgstr ""
26825
"Logical Volume Manger, or <emphasis>LVM</emphasis>, allows administrators to "
26826
"create <emphasis>logical</emphasis> volumes out of one or multiple physical "
26827
"hard disks. LVM volumes can be created on both software RAID partitions and "
26828
"standard partitions residing on a single disk. Volumes can also be extended, "
26829
"giving greater flexibility to systems as requirements change."
26830
26831
#: serverguide/C/installation.xml:930(para)
26832
msgid ""
26833
"A side effect of LVM's power and flexibility is a greater degree of "
26834
"complication. Before diving into the LVM installation process, it is best to "
26835
"get familiar with some terms."
26836
msgstr ""
26837
"A side effect of LVM's power and flexibility is a greater degree of "
26838
"complication. Before diving into the LVM installation process, it is best to "
26839
"get familiar with some terms."
26840
26841
#: serverguide/C/installation.xml:937(para)
26842
msgid ""
26843
"<emphasis>Volume Group (VG):</emphasis> contains one or several Logical "
26844
"Volumes (LV)."
26845
msgstr ""
26846
"<emphasis>Volume Group (VG):</emphasis> contains one or several Logical "
26847
"Volumes (LV)."
26848
26849
#: serverguide/C/installation.xml:942(para)
26850
msgid ""
26851
"<emphasis>Logical Volume (LV):</emphasis> is similar to a partition in a non-"
26852
"LVM system. Multiple Physical Volumes (PV) can make up one LV, on top of "
26853
"which resides the actual EXT3, XFS, JFS, etc filesystem."
26854
msgstr ""
26855
"<emphasis>Logical Volume (LV):</emphasis> is similar to a partition in a non-"
26856
"LVM system. Multiple Physical Volumes (PV) can make up one LV, on top of "
26857
"which resides the actual EXT3, XFS, JFS, etc filesystem."
26858
26859
#: serverguide/C/installation.xml:948(para)
26860
msgid ""
26861
"<emphasis>Physical Volume (PV):</emphasis> physical hard disk or software "
26862
"RAID partition. The Volume Group can be extended by adding more PVs."
26863
msgstr ""
26864
"<emphasis>Physical Volume (PV):</emphasis> physical hard disk or software "
26865
"RAID partition. The Volume Group can be extended by adding more PVs."
26866
26867
#: serverguide/C/installation.xml:959(para)
26868
msgid ""
26869
"As an example this section covers installing Ubuntu Server Edition with "
26870
"<filename role=\"directory\">/srv</filename> mounted on a LVM volume. During "
26871
"the initial install only one Physical Volume (PV) will be part of the Volume "
26872
"Group (VG). Another PV will be added after install to demonstrate how a VG "
26873
"can be extended."
26874
msgstr ""
26875
"As an example this section covers installing Ubuntu Server Edition with "
26876
"<filename role=\"directory\">/srv</filename> mounted on a LVM volume. During "
26877
"the initial install only one Physical Volume (PV) will be part of the Volume "
26878
"Group (VG). Another PV will be added after install to demonstrate how a VG "
26879
"can be extended."
26880
26881
#: serverguide/C/installation.xml:965(para)
26882
msgid ""
26883
"There are several installation options for LVM, <emphasis>\"Guided - use the "
26884
"entire disk and setup LVM\"</emphasis> which will also allow you to assign a "
26885
"portion of the available space to LVM, <emphasis>\"Guided - use entire and "
26886
"setup encrypted LVM\"</emphasis>, or <emphasis>Manually</emphasis> setup the "
26887
"partitions and configure LVM. At this time the only way to configure a "
26888
"system with both LVM and standard partitions, during installation, is to use "
26889
"the Manual approach."
26890
msgstr ""
26891
"There are several installation options for LVM, <emphasis>\"Guided - use the "
26892
"entire disk and setup LVM\"</emphasis> which will also allow you to assign a "
26893
"portion of the available space to LVM, <emphasis>\"Guided - use entire and "
26894
"setup encrypted LVM\"</emphasis>, or <emphasis>Manually</emphasis> setup the "
26895
"partitions and configure LVM. At this time the only way to configure a "
26896
"system with both LVM and standard partitions, during installation, is to use "
26897
"the Manual approach."
26898
26899
#: serverguide/C/installation.xml:982(para)
26900
msgid ""
26901
"At the <emphasis>\"Partition Disks</emphasis> screen choose "
26902
"<emphasis>\"Manual\"</emphasis>."
26903
msgstr ""
26904
"At the <emphasis>\"Partition Disks</emphasis> screen choose "
26905
"<emphasis>\"Manual\"</emphasis>."
26906
26907
#: serverguide/C/installation.xml:989(para)
26908
msgid ""
26909
"Select the hard disk and on the next screen choose \"yes\" to "
26910
"<emphasis>\"Create a new empty partition table on this device\"</emphasis>."
26911
msgstr ""
26912
"Select the hard disk and on the next screen choose \"yes\" to "
26913
"<emphasis>\"Create a new empty partition table on this device\"</emphasis>."
26914
26915
#: serverguide/C/installation.xml:996(para)
26916
msgid ""
26917
"Next, create standard <emphasis>/boot</emphasis>, <emphasis>swap</emphasis>, "
26918
"and <emphasis>/</emphasis> partitions with whichever filesystem you prefer."
26919
msgstr ""
26920
"Next, create standard <emphasis>/boot</emphasis>, <emphasis>swap</emphasis>, "
26921
"and <emphasis>/</emphasis> partitions with whichever filesystem you prefer."
26922
26923
#: serverguide/C/installation.xml:1004(para)
26924
msgid ""
26925
"For the LVM <emphasis>/srv</emphasis>, create a new "
26926
"<emphasis>Logical</emphasis> partition. Then change <emphasis>\"Use "
26927
"as\"</emphasis> to <emphasis>\"physical volume for LVM\"</emphasis> then "
26928
"<emphasis>\"Done setting up the partition\"</emphasis>."
26929
msgstr ""
26930
"For the LVM <emphasis>/srv</emphasis>, create a new "
26931
"<emphasis>Logical</emphasis> partition. Then change <emphasis>\"Use "
26932
"as\"</emphasis> to <emphasis>\"physical volume for LVM\"</emphasis> then "
26933
"<emphasis>\"Done setting up the partition\"</emphasis>."
26934
26935
#: serverguide/C/installation.xml:1012(para)
26936
msgid ""
26937
"Now select <emphasis>\"Configure the Logical Volume Manager\"</emphasis> at "
26938
"the top, and choose <emphasis>\"Yes\"</emphasis> to write the changes to "
26939
"disk."
26940
msgstr ""
26941
"Now select <emphasis>\"Configure the Logical Volume Manager\"</emphasis> at "
26942
"the top, and choose <emphasis>\"Yes\"</emphasis> to write the changes to "
26943
"disk."
26944
26945
#: serverguide/C/installation.xml:1020(para)
26946
msgid ""
26947
"For the <emphasis>\"LVM configuration action\"</emphasis> on the next "
26948
"screen, choose <emphasis>\"Create volume group\"</emphasis>. Enter a name "
26949
"for the VG such as <emphasis>vg01</emphasis>, or something more descriptive. "
26950
"After entering a name, select the partition configured for LVM, and choose "
26951
"<emphasis>\"Continue\"</emphasis>."
26952
msgstr ""
26953
"For the <emphasis>\"LVM configuration action\"</emphasis> on the next "
26954
"screen, choose <emphasis>\"Create volume group\"</emphasis>. Enter a name "
26955
"for the VG such as <emphasis>vg01</emphasis>, or something more descriptive. "
26956
"After entering a name, select the partition configured for LVM, and choose "
26957
"<emphasis>\"Continue\"</emphasis>."
26958
26959
#: serverguide/C/installation.xml:1029(para)
26960
msgid ""
26961
"Back at the <emphasis>\"LVM configuration action\"</emphasis> screen, select "
26962
"<emphasis>\"Create logical volume\"</emphasis>. Select the newly created "
26963
"volume group, and enter a name for the new LV, for example "
26964
"<emphasis>srv</emphasis> since that is the intended mount point. Then choose "
26965
"a size, which may be the full partition because it can always be extended "
26966
"later. Choose <emphasis>\"Finish\"</emphasis> and you should be back at the "
26967
"main <emphasis>\"Partition Disks\"</emphasis> screen."
26968
msgstr ""
26969
"Back at the <emphasis>\"LVM configuration action\"</emphasis> screen, select "
26970
"<emphasis>\"Create logical volume\"</emphasis>. Select the newly created "
26971
"volume group, and enter a name for the new LV, for example "
26972
"<emphasis>srv</emphasis> since that is the intended mount point. Then choose "
26973
"a size, which may be the full partition because it can always be extended "
26974
"later. Choose <emphasis>\"Finish\"</emphasis> and you should be back at the "
26975
"main <emphasis>\"Partition Disks\"</emphasis> screen."
26976
26977
#: serverguide/C/installation.xml:1039(para)
26978
msgid ""
26979
"Now add a filesystem to the new LVM. Select the partition under "
26980
"<emphasis>\"LVM VG vg01, LV srv\"</emphasis>, or whatever name you have "
26981
"chosen, the choose <emphasis>Use as</emphasis>. Setup a file system as "
26982
"normal selecting <emphasis>/srv</emphasis> as the mount point. Once done, "
26983
"select <emphasis>\"Done setting up the partition\"</emphasis>."
26984
msgstr ""
26985
"Now add a filesystem to the new LVM. Select the partition under "
26986
"<emphasis>\"LVM VG vg01, LV srv\"</emphasis>, or whatever name you have "
26987
"chosen, the choose <emphasis>Use as</emphasis>. Setup a file system as "
26988
"normal selecting <emphasis>/srv</emphasis> as the mount point. Once done, "
26989
"select <emphasis>\"Done setting up the partition\"</emphasis>."
26990
26991
#: serverguide/C/installation.xml:1048(para)
26992
msgid ""
26993
"Finally, select <emphasis>\"Finish partitioning and write changes to "
26994
"disk\"</emphasis>. Then confirm the changes and continue with the rest of "
26995
"the installation."
26996
msgstr ""
26997
"Finally, select <emphasis>\"Finish partitioning and write changes to "
26998
"disk\"</emphasis>. Then confirm the changes and continue with the rest of "
26999
"the installation."
27000
27001
#: serverguide/C/installation.xml:1056(para)
27002
msgid "There are some useful utilities to view information about LVM:"
27003
msgstr "There are some useful utilities to view information about LVM:"
27004
27005
#: serverguide/C/installation.xml:1061(para)
27006
msgid ""
27007
"<emphasis>vgdisplay:</emphasis> shows information about Volume Groups."
27008
msgstr ""
27009
"<emphasis>vgdisplay:</emphasis> shows information about Volume Groups."
27010
27011
#: serverguide/C/installation.xml:1062(para)
27012
msgid ""
27013
"<emphasis>lvdisplay:</emphasis> has information about Logical Volumes."
27014
msgstr ""
27015
"<emphasis>lvdisplay:</emphasis> has information about Logical Volumes."
27016
27017
#: serverguide/C/installation.xml:1063(para)
27018
msgid ""
27019
"<emphasis>pvdisplay:</emphasis> similarly displays information about "
27020
"Physical Volumes."
27021
msgstr ""
27022
"<emphasis>pvdisplay:</emphasis> similarly displays information about "
27023
"Physical Volumes."
27024
27025
#: serverguide/C/installation.xml:1068(title)
27026
msgid "Extending Volume Groups"
27027
msgstr "Extending Volume Groups"
27028
27029
#: serverguide/C/installation.xml:1070(para)
27030
msgid ""
27031
"Continuing with <emphasis>srv</emphasis> as an LVM volume example, this "
27032
"section covers adding a second hard disk, creating a Physical Volume (PV), "
27033
"adding it to the volume group (VG), extending the logical volume <filename "
27034
"role=\"directory\">srv</filename> and finally extending the filesystem. This "
27035
"example assumes a second hard disk has been added to the system. This hard "
27036
"disk will be named <filename>/dev/sdb</filename> in our example. BEWARE: "
27037
"make sure you don't already have an existing <filename>/dev/sdb</filename> "
27038
"before issuing the commands below. You could lose some data if you issue "
27039
"those commands on a non-empty disk. In our example we will use the entire "
27040
"disk as a physical volume (you could choose to create partitions and use "
27041
"them as different physical volumes)"
27042
msgstr ""
27043
"Continuing with <emphasis>srv</emphasis> as an LVM volume example, this "
27044
"section covers adding a second hard disk, creating a Physical Volume (PV), "
27045
"adding it to the volume group (VG), extending the logical volume <filename "
27046
"role=\"directory\">srv</filename> and finally extending the filesystem. This "
27047
"example assumes a second hard disk has been added to the system. This hard "
27048
"disk will be named <filename>/dev/sdb</filename> in our example. BEWARE: "
27049
"make sure you don't already have an existing <filename>/dev/sdb</filename> "
27050
"before issuing the commands below. You could lose some data if you issue "
27051
"those commands on a non-empty disk. In our example we will use the entire "
27052
"disk as a physical volume (you could choose to create partitions and use "
27053
"them as different physical volumes)"
27054
27055
#: serverguide/C/installation.xml:1082(para)
27056
msgid "First, create the physical volume, in a terminal execute:"
27057
msgstr "First, create the physical volume, in a terminal execute:"
27058
27059
#: serverguide/C/installation.xml:1087(command)
27060
msgid "sudo pvcreate /dev/sdb"
27061
msgstr "sudo pvcreate /dev/sdb"
27062
27063
#: serverguide/C/installation.xml:1093(para)
27064
msgid "Now extend the Volume Group (VG):"
27065
msgstr "Now extend the Volume Group (VG):"
27066
27067
#: serverguide/C/installation.xml:1098(command)
27068
msgid "sudo vgextend vg01 /dev/sdb"
27069
msgstr "sudo vgextend vg01 /dev/sdb"
27070
27071
#: serverguide/C/installation.xml:1104(para)
27072
msgid ""
27073
"Use <application>vgdisplay</application> to find out the free physical "
27074
"extents - Free PE / size (the size you can allocate). We will assume a free "
27075
"size of 511 PE (equivalent to 2GB with a PE size of 4MB) and we will use the "
27076
"whole free space available. Use your own PE and/or free space."
27077
msgstr ""
27078
"Use <application>vgdisplay</application> to find out the free physical "
27079
"extents - Free PE / size (the size you can allocate). We will assume a free "
27080
"size of 511 PE (equivalent to 2GB with a PE size of 4MB) and we will use the "
27081
"whole free space available. Use your own PE and/or free space."
27082
27083
#: serverguide/C/installation.xml:1110(para)
27084
msgid ""
27085
"The Logical Volume (LV) can now be extended by different methods, we will "
27086
"only see how to use the PE to extend the LV:"
27087
msgstr ""
27088
"The Logical Volume (LV) can now be extended by different methods, we will "
27089
"only see how to use the PE to extend the LV:"
27090
27091
#: serverguide/C/installation.xml:1115(command)
27092
msgid "sudo lvextend /dev/vg01/srv -l +511"
27093
msgstr "sudo lvextend /dev/vg01/srv -l +511"
27094
27095
#: serverguide/C/installation.xml:1118(para)
27096
msgid ""
27097
"The <emphasis>-l</emphasis> option allows the LV to be extended using PE. "
27098
"The <emphasis>-L</emphasis> option allows the LV to be extended using Meg, "
27099
"Gig, Tera, etc bytes."
27100
msgstr ""
27101
"The <emphasis>-l</emphasis> option allows the LV to be extended using PE. "
27102
"The <emphasis>-L</emphasis> option allows the LV to be extended using Meg, "
27103
"Gig, Tera, etc bytes."
27104
27105
#: serverguide/C/installation.xml:1126(para)
27106
msgid ""
27107
"Even though you are supposed to be able to <emphasis>expand</emphasis> an "
27108
"ext3 or ext4 filesystem without unmounting it first, it may be a good "
27109
"pratice to unmount it anyway and check the filesystem, so that you don't "
27110
"mess up the day you want to reduce a logical volume (in that case unmounting "
27111
"first is compulsory)."
27112
msgstr ""
27113
"Even though you are supposed to be able to <emphasis>expand</emphasis> an "
27114
"ext3 or ext4 filesystem without unmounting it first, it may be a good "
27115
"pratice to unmount it anyway and check the filesystem, so that you don't "
27116
"mess up the day you want to reduce a logical volume (in that case unmounting "
27117
"first is compulsory)."
27118
27119
#: serverguide/C/installation.xml:1132(para)
27120
msgid ""
27121
"The following commands are for an <emphasis>EXT3</emphasis> or "
27122
"<emphasis>EXT4</emphasis> filesystem. If you are using another filesystem "
27123
"there may be other utilities available."
27124
msgstr ""
27125
"The following commands are for an <emphasis>EXT3</emphasis> or "
27126
"<emphasis>EXT4</emphasis> filesystem. If you are using another filesystem "
27127
"there may be other utilities available."
27128
27129
#: serverguide/C/installation.xml:1139(command)
27130
msgid "sudo e2fsck -f /dev/vg01/srv"
27131
msgstr "sudo e2fsck -f /dev/vg01/srv"
27132
27133
#: serverguide/C/installation.xml:1142(para)
27134
msgid ""
27135
"The <emphasis>-f</emphasis> option of <application>e2fsck</application> "
27136
"forces checking even if the system seems clean."
27137
msgstr ""
27138
"The <emphasis>-f</emphasis> option of <application>e2fsck</application> "
27139
"forces checking even if the system seems clean."
27140
27141
#: serverguide/C/installation.xml:1149(para)
27142
msgid "Finally, resize the filesystem:"
27143
msgstr "Finally, resize the filesystem:"
27144
27145
#: serverguide/C/installation.xml:1154(command)
27146
msgid "sudo resize2fs /dev/vg01/srv"
27147
msgstr "sudo resize2fs /dev/vg01/srv"
27148
27149
#: serverguide/C/installation.xml:1160(para)
27150
msgid "Now mount the partition and check its size."
27151
msgstr "Now mount the partition and check its size."
27152
27153
#: serverguide/C/installation.xml:1165(command)
27154
msgid "mount /dev/vg01/srv /srv && df -h /srv"
27155
msgstr "mount /dev/vg01/srv /srv && df -h /srv"
27156
27157
#: serverguide/C/installation.xml:1177(para)
27158
msgid ""
27159
"See the <ulink "
27160
"url=\"https://help.ubuntu.com/community/Installation#lvm\">Ubuntu Wiki LVM "
27161
"Articles</ulink>."
27162
msgstr ""
27163
27164
#: serverguide/C/installation.xml:1182(para)
27165
msgid ""
27166
"See the <ulink url=\"http://tldp.org/HOWTO/LVM-HOWTO/index.html\">LVM "
27167
"HOWTO</ulink> for more information."
27168
msgstr ""
27169
"See the <ulink url=\"http://tldp.org/HOWTO/LVM-HOWTO/index.html\">LVM "
27170
"HOWTO</ulink> for more information."
27171
27172
#: serverguide/C/installation.xml:1187(para)
27173
msgid ""
27174
"Another good article is <ulink "
27175
"url=\"http://www.linuxdevcenter.com/pub/a/linux/2006/04/27/managing-disk-"
27176
"space-with-lvm.html\">Managing Disk Space with LVM</ulink> on O'Reilly's "
27177
"linuxdevcenter.com site."
27178
msgstr ""
27179
"Another good article is <ulink "
27180
"url=\"http://www.linuxdevcenter.com/pub/a/linux/2006/04/27/managing-disk-"
27181
"space-with-lvm.html\">Managing Disk Space with LVM</ulink> on O'Reilly's "
27182
"linuxdevcenter.com site."
27183
27184
#: serverguide/C/installation.xml:1194(para)
27185
msgid ""
27186
"For more information on <application>fdisk</application> see the <ulink "
27187
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/fdisk.8.html\">fdisk "
27188
"man page</ulink>."
27189
msgstr ""
27190
27191
#: serverguide/C/file-server.xml:13(title)
27192
msgid "File Servers"
27193
msgstr "File Servers"
27194
27195
#: serverguide/C/file-server.xml:15(para)
27196
msgid ""
27197
"If you have more than one computer on a single network. At some point you "
27198
"will probably need to share files between them. In this section we cover "
27199
"installing and configuring FTP, NFS, and CUPS."
27200
msgstr ""
27201
"If you have more than one computer on a single network, at some point you "
27202
"will probably need to share files between them. In this section we cover "
27203
"installing and configuring FTP, NFS, and CUPS."
27204
27205
#: serverguide/C/file-server.xml:22(title)
27206
msgid "FTP Server"
27207
msgstr "FTP Server"
27208
27209
#: serverguide/C/file-server.xml:24(para)
27210
msgid ""
27211
"File Transfer Protocol (FTP) is a TCP protocol for uploading and downloading "
27212
"files between computers. FTP works on a client/server model. The server "
27213
"component is called an <emphasis>FTP daemon</emphasis>. It continuously "
27214
"listens for FTP requests from remote clients. When a request is received, it "
27215
"manages the login and sets up the connection. For the duration of the "
27216
"session it executes any of commands sent by the FTP client."
27217
msgstr ""
27218
"File Transfer Protocol (FTP) is a TCP protocol for uploading and downloading "
27219
"files between computers. FTP works on a client/server model. The server "
27220
"component is called an <emphasis>FTP daemon</emphasis>. It continuously "
27221
"listens for FTP requests from remote clients. When a request is received, it "
27222
"manages the login and sets up the connection. For the duration of the "
27223
"session it executes any of commands sent by the FTP client."
27224
27225
#: serverguide/C/file-server.xml:33(para)
27226
msgid "Access to an FTP server can be managed in two ways:"
27227
msgstr "Access to an FTP server can be managed in two ways:"
27228
27229
#: serverguide/C/file-server.xml:37(para)
27230
msgid "Anonymous"
27231
msgstr "Anonymous"
27232
27233
#: serverguide/C/file-server.xml:40(para)
27234
msgid "Authenticated"
27235
msgstr "Authenticated"
27236
27237
#: serverguide/C/file-server.xml:43(para)
27238
msgid ""
27239
"In the Anonymous mode, remote clients can access the FTP server by using the "
27240
"default user account called \"anonymous\" or \"ftp\" and sending an email "
27241
"address as the password. In the Authenticated mode a user must have an "
27242
"account and a password. User access to the FTP server directories and files "
27243
"is dependent on the permissions defined for the account used at login. As a "
27244
"general rule, the FTP daemon will hide the root directory of the FTP server "
27245
"and change it to the FTP Home directory. This hides the rest of the file "
27246
"system from remote sessions."
27247
msgstr ""
27248
"In the Anonymous mode, remote clients can access the FTP server by using the "
27249
"default user account called \"anonymous\" or \"ftp\" and sending an e-mail "
27250
"address as the password. In the Authenticated mode a user must have an "
27251
"account and a password. User access to the FTP server directories and files "
27252
"is dependent on the permissions defined for the account used at login. As a "
27253
"general rule, the FTP daemon will hide the root directory of the FTP server "
27254
"and change it to the FTP Home directory. This hides the rest of the file "
27255
"system from remote sessions."
27256
27257
#: serverguide/C/file-server.xml:55(title)
27258
msgid "vsftpd - FTP Server Installation"
27259
msgstr "vsftpd - FTP Server Installation"
27260
27261
#: serverguide/C/file-server.xml:57(para)
27262
msgid ""
27263
"vsftpd is an FTP daemon available in Ubuntu. It is easy to install, set up, "
27264
"and maintain. To install <application>vsftpd</application> you can run the "
27265
"following command:"
27266
msgstr ""
27267
"vsftpd is an FTP daemon available in Ubuntu. It is easy to install, set up, "
27268
"and maintain. To install <application>vsftpd</application> you can run the "
27269
"following command:"
27270
27271
#: serverguide/C/file-server.xml:65(command)
27272
msgid "sudo apt-get install vsftpd"
27273
msgstr "sudo apt-get install vsftpd"
27274
27275
#: serverguide/C/file-server.xml:71(title)
27276
msgid "Anonymous FTP Configuration"
27277
msgstr "Anonymous FTP Configuration"
27278
27279
#: serverguide/C/file-server.xml:73(para)
27280
msgid ""
27281
"By default <application>vsftpd</application> is configured to only allow "
27282
"anonymous download. During installation a <emphasis>ftp</emphasis> user is "
27283
"created with a home directory of <filename>/home/ftp</filename>. This is the "
27284
"default FTP directory."
27285
msgstr ""
27286
"By default <application>vsftpd</application> is configured to only allow "
27287
"anonymous download. During installation a <emphasis>ftp</emphasis> user is "
27288
"created with a home directory of <filename>/home/ftp</filename>. This is the "
27289
"default FTP directory."
27290
27291
#: serverguide/C/file-server.xml:80(para)
27292
msgid ""
27293
"If you wish to change this location, to <filename>/srv/ftp</filename> for "
27294
"example, simply create a directory in another location and change the "
27295
"<emphasis>ftp</emphasis> user's home directory:"
27296
msgstr ""
27297
"If you wish to change this location, to <filename>/srv/ftp</filename> for "
27298
"example, simply create a directory in another location and change the "
27299
"<emphasis>ftp</emphasis> user's home directory:"
27300
27301
#: serverguide/C/file-server.xml:87(command)
27302
msgid "sudo mkdir /srv/ftp"
27303
msgstr "sudo mkdir /srv/ftp"
27304
27305
#: serverguide/C/file-server.xml:88(command)
27306
msgid "sudo usermod -d /srv/ftp ftp"
27307
msgstr "sudo usermod -d /srv/ftp ftp"
27308
27309
#: serverguide/C/file-server.xml:91(para)
27310
msgid "After making the change restart <application>vsftpd</application>:"
27311
msgstr "After making the change restart <application>vsftpd</application>:"
27312
27313
#: serverguide/C/file-server.xml:96(command) serverguide/C/file-server.xml:124(command) serverguide/C/file-server.xml:189(command) serverguide/C/file-server.xml:237(command)
27314
msgid "sudo /etc/init.d/vsftpd restart"
27315
msgstr "sudo /etc/init.d/vsftpd restart"
27316
27317
#: serverguide/C/file-server.xml:99(para)
27318
msgid ""
27319
"Finally, copy any files and directories you would like to make available "
27320
"through anonymous FTP to <filename>/srv/ftp</filename>."
27321
msgstr ""
27322
"Finally, copy any files and directories you would like to make available "
27323
"through anonymous FTP to <filename>/srv/ftp</filename>."
27324
27325
#: serverguide/C/file-server.xml:106(title)
27326
msgid "User Authenticated FTP Configuration"
27327
msgstr "User Authenticated FTP Configuration"
27328
27329
#: serverguide/C/file-server.xml:108(para)
27330
msgid ""
27331
"To configure <application>vsftpd</application> to authenticate system users "
27332
"and allow them to upload files edit <filename>/etc/vsftpd.conf</filename>:"
27333
msgstr ""
27334
"To configure <application>vsftpd</application> to authenticate system users "
27335
"and allow them to upload files edit <filename>/etc/vsftpd.conf</filename>:"
27336
27337
#: serverguide/C/file-server.xml:114(programlisting)
27338
#, no-wrap
27339
msgid ""
27340
"\n"
27341
"local_enable=YES\n"
27342
"write_enable=YES\n"
27343
msgstr ""
27344
"\n"
27345
"local_enable=YES\n"
27346
"write_enable=YES\n"
27347
27348
#: serverguide/C/file-server.xml:119(para)
27349
msgid "Now restart <application>vsftpd</application>:"
27350
msgstr "Now restart <application>vsftpd</application>:"
27351
27352
#: serverguide/C/file-server.xml:127(para)
27353
msgid ""
27354
"Now when system users login to FTP they will start in their "
27355
"<emphasis>home</emphasis> directories where they can download, upload, "
27356
"create directories, etc."
27357
msgstr ""
27358
"Now when system users login to FTP they will start in their "
27359
"<emphasis>home</emphasis> directories where they can download, upload, "
27360
"create directories, etc."
27361
27362
#: serverguide/C/file-server.xml:133(para)
27363
msgid ""
27364
"Similarly, by default, the anonymous users are not allowed to upload files "
27365
"to FTP server. To change this setting, you should uncomment the following "
27366
"line, and restart <application>vsftpd</application>:"
27367
msgstr ""
27368
"Similarly, by default, the anonymous users are not allowed to upload files "
27369
"to FTP server. To change this setting, you should uncomment the following "
27370
"line, and restart <application>vsftpd</application>:"
27371
27372
#: serverguide/C/file-server.xml:140(programlisting)
27373
#, no-wrap
27374
msgid ""
27375
"\n"
27376
"anon_upload_enable=YES\n"
27377
msgstr ""
27378
"\n"
27379
"anon_upload_enable=YES\n"
27380
27381
#: serverguide/C/file-server.xml:145(para)
27382
msgid ""
27383
"Enabling anonymous FTP upload can be an extreme security risk. It is best to "
27384
"not enable anonymous upload on servers accessed directly from the Internet."
27385
msgstr ""
27386
"Enabling anonymous FTP upload can be an extreme security risk. It is best to "
27387
"not enable anonymous upload on servers accessed directly from the Internet."
27388
27389
#: serverguide/C/file-server.xml:151(para)
27390
msgid ""
27391
"The configuration file consists of many configuration parameters. The "
27392
"information about each parameter is available in the configuration file. "
27393
"Alternatively, you can refer to the man page, <command>man 5 "
27394
"vsftpd.conf</command> for details of each parameter."
27395
msgstr ""
27396
"The configuration file consists of many configuration parameters. The "
27397
"information about each parameter is available in the configuration file. "
27398
"Alternatively, you can refer to the man page, <command>man 5 "
27399
"vsftpd.conf</command> for details of each parameter."
27400
27401
#: serverguide/C/file-server.xml:162(title)
27402
msgid "Securing FTP"
27403
msgstr "Securing FTP"
27404
27405
#: serverguide/C/file-server.xml:164(para)
27406
msgid ""
27407
"There are options in <filename>/etc/vsftpd.conf</filename> to help make "
27408
"<application>vsftpd</application> more secure. For example users can be "
27409
"limited to their home directories by uncommenting:"
27410
msgstr ""
27411
"There are options in <filename>/etc/vsftpd.conf</filename> to help make "
27412
"<application>vsftpd</application> more secure. For example users can be "
27413
"limited to their home directories by uncommenting:"
27414
27415
#: serverguide/C/file-server.xml:170(programlisting)
27416
#, no-wrap
27417
msgid ""
27418
"\n"
27419
"chroot_local_user=YES\n"
27420
msgstr ""
27421
"\n"
27422
"chroot_local_user=YES\n"
27423
27424
#: serverguide/C/file-server.xml:174(para)
27425
msgid ""
27426
"You can also limit a specific list of users to just their home directories:"
27427
msgstr ""
27428
"You can also limit a specific list of users to just their home directories:"
27429
27430
#: serverguide/C/file-server.xml:178(programlisting)
27431
#, no-wrap
27432
msgid ""
27433
"\n"
27434
"chroot_list_enable=YES\n"
27435
"chroot_list_file=/etc/vsftpd.chroot_list\n"
27436
msgstr ""
27437
"\n"
27438
"chroot_list_enable=YES\n"
27439
"chroot_list_file=/etc/vsftpd.chroot_list\n"
27440
27441
#: serverguide/C/file-server.xml:183(para)
27442
msgid ""
27443
"After uncommenting the above options, create a "
27444
"<filename>/etc/vsftpd.chroot_list</filename> containing a list of users one "
27445
"per line. Then restart <application>vsftpd</application>:"
27446
msgstr ""
27447
"After uncommenting the above options, create a "
27448
"<filename>/etc/vsftpd.chroot_list</filename> containing a list of users one "
27449
"per line. Then restart <application>vsftpd</application>:"
27450
27451
#: serverguide/C/file-server.xml:192(para)
27452
msgid ""
27453
"Also, the <filename>/etc/ftpusers</filename> file is a list of users that "
27454
"are <emphasis>disallowed</emphasis> FTP access. The default list includes "
27455
"root, daemon, nobody, etc. To disable FTP access for additional users simply "
27456
"add them to the list."
27457
msgstr ""
27458
"Also, the <filename>/etc/ftpusers</filename> file is a list of users that "
27459
"are <emphasis>disallowed</emphasis> FTP access. The default list includes "
27460
"root, daemon, nobody, etc. To disable FTP access for additional users simply "
27461
"add them to the list."
27462
27463
#: serverguide/C/file-server.xml:199(para)
27464
msgid ""
27465
"FTP can also be encrypted using <emphasis>FTPS</emphasis>. Different from "
27466
"<emphasis>SFTP</emphasis>, <emphasis>FTPS</emphasis> is FTP over Secure "
27467
"Socket Layer (SSL). <emphasis>SFTP</emphasis> is a FTP like session over an "
27468
"encrypted <emphasis>SSH</emphasis> connection. A major difference is that "
27469
"users of SFTP need to have a <emphasis>shell</emphasis> account on the "
27470
"system, instead of a <emphasis>nologin</emphasis> shell. Providing all users "
27471
"with a shell may not be ideal for some environments, such as a shared web "
27472
"host."
27473
msgstr ""
27474
"FTP can also be encrypted using <emphasis>FTPS</emphasis>. Different from "
27475
"<emphasis>SFTP</emphasis>, <emphasis>FTPS</emphasis> is FTP over Secure "
27476
"Socket Layer (SSL). <emphasis>SFTP</emphasis> is a FTP like session over an "
27477
"encrypted <emphasis>SSH</emphasis> connection. A major difference is that "
27478
"users of SFTP need to have a <emphasis>shell</emphasis> account on the "
27479
"system, instead of a <emphasis>nologin</emphasis> shell. Providing all users "
27480
"with a shell may not be ideal for some environments, such as a shared web "
27481
"host."
27482
27483
#: serverguide/C/file-server.xml:208(para)
27484
msgid ""
27485
"To configure <emphasis>FTPS</emphasis>, edit "
27486
"<filename>/etc/vsftpd.conf</filename> and at the bottom add:"
27487
msgstr ""
27488
"To configure <emphasis>FTPS</emphasis>, edit "
27489
"<filename>/etc/vsftpd.conf</filename> and at the bottom add:"
27490
27491
#: serverguide/C/file-server.xml:212(programlisting)
27492
#, no-wrap
27493
msgid ""
27494
"\n"
27495
"ssl_enable=Yes\n"
27496
msgstr ""
27497
"\n"
27498
"ssl_enable=Yes\n"
27499
27500
#: serverguide/C/file-server.xml:216(para)
27501
msgid "Also, notice the certificate and key related options:"
27502
msgstr "Also, notice the certificate and key related options:"
27503
27504
#: serverguide/C/file-server.xml:220(programlisting)
27505
#, no-wrap
27506
msgid ""
27507
"\n"
27508
"rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem\n"
27509
"rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key\n"
27510
msgstr ""
27511
"\n"
27512
"rsa_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem\n"
27513
"rsa_private_key_file=/etc/ssl/private/ssl-cert-snakeoil.key\n"
27514
27515
#: serverguide/C/file-server.xml:225(para)
27516
msgid ""
27517
"By default these options are set the certificate and key provided by the "
27518
"<application>ssl-cert</application> package. In a production environment "
27519
"these should be replaced with a certificate and key generated for the "
27520
"specific host. For more information on certificates see <xref "
27521
"linkend=\"certificates-and-security\"/>."
27522
msgstr ""
27523
"By default these options are set the certificate and key provided by the "
27524
"<application>ssl-cert</application> package. In a production environment "
27525
"these should be replaced with a certificate and key generated for the "
27526
"specific host. For more information on certificates see <xref "
27527
"linkend=\"certificates-and-security\"/>."
27528
27529
#: serverguide/C/file-server.xml:231(para)
27530
msgid ""
27531
"Now restart <application>vsftpd</application>, and non-anonymous users will "
27532
"be forced to use <emphasis>FTPS</emphasis>:"
27533
msgstr ""
27534
"Now restart <application>vsftpd</application>, and non-anonymous users will "
27535
"be forced to use <emphasis>FTPS</emphasis>:"
27536
27537
#: serverguide/C/file-server.xml:240(para)
27538
msgid ""
27539
"To allow users with a shell of <filename>/usr/sbin/nologin</filename> access "
27540
"to FTP, but have no shell access, edit <filename>/etc/shells</filename> "
27541
"adding the <emphasis>nologin</emphasis> shell:"
27542
msgstr ""
27543
"To allow users with a shell of <filename>/usr/sbin/nologin</filename> access "
27544
"to FTP, but have no shell access, edit <filename>/etc/shells</filename> "
27545
"adding the <emphasis>nologin</emphasis> shell:"
27546
27547
#: serverguide/C/file-server.xml:245(programlisting)
27548
#, no-wrap
27549
msgid ""
27550
"\n"
27551
"# /etc/shells: valid login shells\n"
27552
"/bin/csh\n"
27553
"/bin/sh\n"
27554
"/usr/bin/es\n"
27555
"/usr/bin/ksh\n"
27556
"/bin/ksh\n"
27557
"/usr/bin/rc\n"
27558
"/usr/bin/tcsh\n"
27559
"/bin/tcsh\n"
27560
"/usr/bin/esh\n"
27561
"/bin/dash\n"
27562
"/bin/bash\n"
27563
"/bin/rbash\n"
27564
"/usr/bin/screen\n"
27565
"/usr/sbin/nologin\n"
27566
msgstr ""
27567
"\n"
27568
"# /etc/shells: valid login shells\n"
27569
"/bin/csh\n"
27570
"/bin/sh\n"
27571
"/usr/bin/es\n"
27572
"/usr/bin/ksh\n"
27573
"/bin/ksh\n"
27574
"/usr/bin/rc\n"
27575
"/usr/bin/tcsh\n"
27576
"/bin/tcsh\n"
27577
"/usr/bin/esh\n"
27578
"/bin/dash\n"
27579
"/bin/bash\n"
27580
"/bin/rbash\n"
27581
"/usr/bin/screen\n"
27582
"/usr/sbin/nologin\n"
27583
27584
#: serverguide/C/file-server.xml:263(para)
27585
msgid ""
27586
"This is necessary because, by default <application>vsftpd</application> uses "
27587
"PAM for authentication, and the <filename>/etc/pam.d/vsftpd</filename> "
27588
"configuration file contains:"
27589
msgstr ""
27590
"This is necessary because, by default <application>vsftpd</application> uses "
27591
"PAM for authentication, and the <filename>/etc/pam.d/vsftpd</filename> "
27592
"configuration file contains:"
27593
27594
#: serverguide/C/file-server.xml:268(programlisting)
27595
#, no-wrap
27596
msgid ""
27597
"\n"
27598
"auth required pam_shells.so\n"
27599
msgstr ""
27600
"\n"
27601
"auth required pam_shells.so\n"
27602
27603
#: serverguide/C/file-server.xml:272(para)
27604
msgid ""
27605
"The <emphasis>shells</emphasis> PAM module restricts access to shells listed "
27606
"in the <filename>/etc/shells</filename> file."
27607
msgstr ""
27608
"The <emphasis>shells</emphasis> PAM module restricts access to shells listed "
27609
"in the <filename>/etc/shells</filename> file."
27610
27611
#: serverguide/C/file-server.xml:277(para)
27612
msgid ""
27613
"Most popular FTP clients can be configured connect using FTPS. The "
27614
"<application>lftp</application> command line FTP client has the ability to "
27615
"use FTPS as well."
27616
msgstr ""
27617
"Most popular FTP clients can be configured connect using FTPS. The "
27618
"<application>lftp</application> command line FTP client has the ability to "
27619
"use FTPS as well."
27620
27621
#: serverguide/C/file-server.xml:288(para)
27622
msgid ""
27623
"See the <ulink url=\"http://vsftpd.beasts.org/vsftpd_conf.html\">vsftpd "
27624
"website</ulink> for more information."
27625
msgstr ""
27626
"See the <ulink url=\"http://vsftpd.beasts.org/vsftpd_conf.html\">vsftpd "
27627
"website</ulink> for more information."
27628
27629
#: serverguide/C/file-server.xml:293(para)
27630
msgid ""
27631
"For detailed <filename>/etc/vsftpd.conf</filename> options see the <ulink "
27632
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/vsftpd.conf.5.html\">"
27633
"vsftpd.conf man page</ulink>."
27634
msgstr ""
27635
27636
#: serverguide/C/file-server.xml:299(para)
27637
msgid ""
27638
"The CodeGurus article <ulink "
27639
"url=\"http://www.codeguru.com/csharp/.net/net_general/internet/article.php/c1"
27640
"4329\"> FTPS vs. SFTP: What to Choose</ulink> has useful information "
27641
"contrasting FTPS and SFTP."
27642
msgstr ""
27643
"The CodeGurus article <ulink "
27644
"url=\"http://www.codeguru.com/csharp/.net/net_general/internet/article.php/c1"
27645
"4329\"> FTPS vs. SFTP: What to Choose</ulink> has useful information "
27646
"contrasting FTPS and SFTP."
27647
27648
#: serverguide/C/file-server.xml:305(para)
27649
msgid ""
27650
"Also, for more information see the <ulink "
27651
"url=\"https://help.ubuntu.com/community/vsftpd\">Ubuntu Wiki vsftpd</ulink> "
27652
"page."
27653
msgstr ""
27654
27655
#: serverguide/C/file-server.xml:315(title)
27656
msgid "Network File System (NFS)"
27657
msgstr "Network File System (NFS)"
27658
27659
#: serverguide/C/file-server.xml:316(para)
27660
msgid ""
27661
"NFS allows a system to share directories and files with others over a "
27662
"network. By using NFS, users and programs can access files on remote systems "
27663
"almost as if they were local files."
27664
msgstr ""
27665
"NFS allows a system to share directories and files with others over a "
27666
"network. By using NFS, users and programs can access files on remote systems "
27667
"almost as if they were local files."
27668
27669
#: serverguide/C/file-server.xml:322(para)
27670
msgid "Some of the most notable benefits that NFS can provide are:"
27671
msgstr "Some of the most notable benefits that NFS can provide are:"
27672
27673
#: serverguide/C/file-server.xml:328(para)
27674
msgid ""
27675
"Local workstations use less disk space because commonly used data can be "
27676
"stored on a single machine and still remain accessible to others over the "
27677
"network."
27678
msgstr ""
27679
"Local workstations use less disk space because commonly used data can be "
27680
"stored on a single machine and still remain accessible to others over the "
27681
"network."
27682
27683
#: serverguide/C/file-server.xml:333(para)
27684
msgid ""
27685
"There is no need for users to have separate home directories on every "
27686
"network machine. Home directories could be set up on the NFS server and made "
27687
"available throughout the network."
27688
msgstr ""
27689
"There is no need for users to have separate home directories on every "
27690
"network machine. Home directories could be set up on the NFS server and made "
27691
"available throughout the network."
27692
27693
#: serverguide/C/file-server.xml:339(para)
27694
msgid ""
27695
"Storage devices such as floppy disks, CDROM drives, and USB Thumb drives can "
27696
"be used by other machines on the network. This may reduce the number of "
27697
"removable media drives throughout the network."
27698
msgstr ""
27699
"Storage devices such as floppy disks, CDROM drives, and USB Thumb drives can "
27700
"be used by other machines on the network. This may reduce the number of "
27701
"removable media drives throughout the network."
27702
27703
#: serverguide/C/file-server.xml:349(para)
27704
msgid ""
27705
"At a terminal prompt enter the following command to install the NFS Server:"
27706
msgstr ""
27707
"At a terminal prompt enter the following command to install the NFS Server:"
27708
27709
#: serverguide/C/file-server.xml:355(command)
27710
msgid "sudo apt-get install nfs-kernel-server"
27711
msgstr "sudo apt-get install nfs-kernel-server"
27712
27713
#: serverguide/C/file-server.xml:361(para)
27714
msgid ""
27715
"You can configure the directories to be exported by adding them to the "
27716
"<filename>/etc/exports</filename> file. For example:"
27717
msgstr ""
27718
"You can configure the directories to be exported by adding them to the "
27719
"<filename>/etc/exports</filename> file. For example:"
27720
27721
#: serverguide/C/file-server.xml:366(screen)
27722
#, no-wrap
27723
msgid ""
27724
"\n"
27725
"/ubuntu *(ro,sync,no_root_squash)\n"
27726
"/home *(rw,sync,no_root_squash)\n"
27727
msgstr ""
27728
"\n"
27729
"/ubuntu *(ro,sync,no_root_squash)\n"
27730
"/home *(rw,sync,no_root_squash)\n"
27731
27732
#: serverguide/C/file-server.xml:372(para)
27733
msgid ""
27734
"You can replace * with one of the hostname formats. Make the hostname "
27735
"declaration as specific as possible so unwanted systems cannot access the "
27736
"NFS mount."
27737
msgstr ""
27738
"You can replace * with one of the hostname formats. Make the hostname "
27739
"declaration as specific as possible so unwanted systems cannot access the "
27740
"NFS mount."
27741
27742
#: serverguide/C/file-server.xml:378(para)
27743
msgid ""
27744
"To start the NFS server, you can run the following command at a terminal "
27745
"prompt:"
27746
msgstr ""
27747
"To start the NFS server, you can run the following command at a terminal "
27748
"prompt:"
27749
27750
#: serverguide/C/file-server.xml:383(command)
27751
msgid "sudo /etc/init.d/nfs-kernel-server start"
27752
msgstr "sudo /etc/init.d/nfs-kernel-server start"
27753
27754
#: serverguide/C/file-server.xml:388(title)
27755
msgid "NFS Client Configuration"
27756
msgstr "NFS Client Configuration"
27757
27758
#: serverguide/C/file-server.xml:389(para)
27759
msgid ""
27760
"Use the <application>mount</application> command to mount a shared NFS "
27761
"directory from another machine, by typing a command line similar to the "
27762
"following at a terminal prompt:"
27763
msgstr ""
27764
"Use the <application>mount</application> command to mount a shared NFS "
27765
"directory from another machine, by typing a command line similar to the "
27766
"following at a terminal prompt:"
27767
27768
#: serverguide/C/file-server.xml:395(command)
27769
msgid "sudo mount example.hostname.com:/ubuntu /local/ubuntu"
27770
msgstr "sudo mount example.hostname.com:/ubuntu /local/ubuntu"
27771
27772
#: serverguide/C/file-server.xml:399(para)
27773
msgid ""
27774
"The mount point directory <filename>/local/ubuntu</filename> must exist. "
27775
"There should be no files or subdirectories in the "
27776
"<filename>/local/ubuntu</filename> directory."
27777
msgstr ""
27778
"The mount point directory <filename>/local/ubuntu</filename> must exist. "
27779
"There should be no files or subdirectories in the "
27780
"<filename>/local/ubuntu</filename> directory."
27781
27782
#: serverguide/C/file-server.xml:406(para)
27783
msgid ""
27784
"An alternate way to mount an NFS share from another machine is to add a line "
27785
"to the <filename>/etc/fstab</filename> file. The line must state the "
27786
"hostname of the NFS server, the directory on the server being exported, and "
27787
"the directory on the local machine where the NFS share is to be mounted."
27788
msgstr ""
27789
"An alternate way to mount an NFS share from another machine is to add a line "
27790
"to the <filename>/etc/fstab</filename> file. The line must state the "
27791
"hostname of the NFS server, the directory on the server being exported, and "
27792
"the directory on the local machine where the NFS share is to be mounted."
27793
27794
#: serverguide/C/file-server.xml:414(para)
27795
msgid ""
27796
"The general syntax for the line in <filename>/etc/fstab</filename> file is "
27797
"as follows:"
27798
msgstr ""
27799
"The general syntax for the line in <filename>/etc/fstab</filename> file is "
27800
"as follows:"
27801
27802
#: serverguide/C/file-server.xml:420(programlisting)
27803
#, no-wrap
27804
msgid ""
27805
"\n"
27806
"example.hostname.com:/ubuntu /local/ubuntu nfs "
27807
"rsize=8192,wsize=8192,timeo=14,intr\n"
27808
msgstr ""
27809
"\n"
27810
"example.hostname.com:/ubuntu /local/ubuntu nfs "
27811
"rsize=8192,wsize=8192,timeo=14,intr\n"
27812
27813
#: serverguide/C/file-server.xml:424(para)
27814
msgid ""
27815
"If you have trouble mounting an NFS share, make sure the <application>nfs-"
27816
"common</application> package is installed on your client. To install "
27817
"<application>nfs-common</application> enter the following command at the "
27818
"terminal prompt: <screen>\n"
27819
"<command>sudo apt-get install nfs-common</command>\n"
27820
"</screen>"
27821
msgstr ""
27822
"If you have trouble mounting an NFS share, make sure the <application>nfs-"
27823
"common</application> package is installed on your client. To install "
27824
"<application>nfs-common</application> enter the following command at the "
27825
"terminal prompt: <screen>\n"
27826
"<command>sudo apt-get install nfs-common</command>\n"
27827
"</screen>"
27828
27829
#: serverguide/C/file-server.xml:437(ulink)
27830
msgid "Linux NFS faq"
27831
msgstr "Linux NFS faq"
27832
27833
#: serverguide/C/file-server.xml:439(ulink)
27834
msgid "Ubuntu Wiki NFS Howto"
27835
msgstr ""
27836
27837
#: serverguide/C/file-server.xml:445(title)
27838
msgid "CUPS - Print Server"
27839
msgstr "CUPS - Print Server"
27840
27841
#: serverguide/C/file-server.xml:446(para)
27842
msgid ""
27843
"The primary mechanism for Ubuntu printing and print services is the "
27844
"<emphasis role=\"bold\">Common UNIX Printing System</emphasis> (CUPS). This "
27845
"printing system is a freely available, portable printing layer which has "
27846
"become the new standard for printing in most Linux distributions."
27847
msgstr ""
27848
"The primary mechanism for Ubuntu printing and print services is the "
27849
"<emphasis role=\"bold\">Common UNIX Printing System</emphasis> (CUPS). This "
27850
"printing system is a freely available, portable printing layer which has "
27851
"become the new standard for printing in most Linux distributions."
27852
27853
#: serverguide/C/file-server.xml:453(para)
27854
msgid ""
27855
"CUPS manages print jobs and queues and provides network printing using the "
27856
"standard Internet Printing Protocol (IPP), while offering support for a very "
27857
"large range of printers, from dot-matrix to laser and many in between. CUPS "
27858
"also supports PostScript Printer Description (PPD) and auto-detection of "
27859
"network printers, and features a simple web-based configuration and "
27860
"administration tool."
27861
msgstr ""
27862
"CUPS manages print jobs and queues and provides network printing using the "
27863
"standard Internet Printing Protocol (IPP), while offering support for a very "
27864
"large range of printers, from dot-matrix to laser and many in between. CUPS "
27865
"also supports PostScript Printer Description (PPD) and auto-detection of "
27866
"network printers, and features a simple Web-based configuration and "
27867
"administration tool."
27868
27869
#: serverguide/C/file-server.xml:463(para)
27870
msgid ""
27871
"To install CUPS on your Ubuntu computer, simply use "
27872
"<application>sudo</application> with the <application>apt-get</application> "
27873
"command and give the packages to install as the first parameter. A complete "
27874
"CUPS install has many package dependencies, but they may all be specified on "
27875
"the same command line. Enter the following at a terminal prompt to install "
27876
"CUPS:"
27877
msgstr ""
27878
"To install CUPS on your Ubuntu computer, simply use "
27879
"<application>sudo</application> with the <application>apt-get</application> "
27880
"command and give the packages to install as the first parameter. A complete "
27881
"CUPS install has many package dependencies, but they may all be specified on "
27882
"the same command line. Enter the following at a terminal prompt to install "
27883
"CUPS:"
27884
27885
#: serverguide/C/file-server.xml:468(command)
27886
msgid "sudo apt-get install cups"
27887
msgstr "sudo apt-get install cups"
27888
27889
#: serverguide/C/file-server.xml:471(para)
27890
msgid ""
27891
"Upon authenticating with your user password, the packages should be "
27892
"downloaded and installed without error. Upon the conclusion of installation, "
27893
"the CUPS server will be started automatically."
27894
msgstr ""
27895
"Upon authenticating with your user password, the packages should be "
27896
"downloaded and installed without error. Upon the conclusion of installation, "
27897
"the CUPS server will be started automatically."
27898
27899
#: serverguide/C/file-server.xml:476(para)
27900
msgid ""
27901
"For troubleshooting purposes, you can access CUPS server errors via the "
27902
"error log file at: <filename>/var/log/cups/error_log</filename>. If the "
27903
"error log does not show enough information to troubleshoot any problems you "
27904
"encounter, the verbosity of the CUPS log can be increased by changing the "
27905
"<emphasis role=\"bold\">LogLevel</emphasis> directive in the configuration "
27906
"file (discussed below) to \"debug\" or even \"debug2\", which logs "
27907
"everything, from the default of \"info\". If you make this change, remember "
27908
"to change it back once you've solved your problem, to prevent the log file "
27909
"from becoming overly large."
27910
msgstr ""
27911
"For troubleshooting purposes, you can access CUPS server errors via the "
27912
"error log file at: <filename>/var/log/cups/error_log</filename>. If the "
27913
"error log does not show enough information to troubleshoot any problems you "
27914
"encounter, the verbosity of the CUPS log can be increased by changing the "
27915
"<emphasis role=\"bold\">LogLevel</emphasis> directive in the configuration "
27916
"file (discussed below) to \"debug\" or even \"debug2\", which logs "
27917
"everything, from the default of \"info\". If you make this change, remember "
27918
"to change it back once you've solved your problem, to prevent the log file "
27919
"from becoming overly large."
27920
27921
#: serverguide/C/file-server.xml:489(para)
27922
msgid ""
27923
"The Common UNIX Printing System server's behavior is configured through the "
27924
"directives contained in the file <filename>/etc/cups/cupsd.conf</filename>. "
27925
"The CUPS configuration file follows the same syntax as the primary "
27926
"configuration file for the Apache HTTP server, so users familiar with "
27927
"editing Apache's configuration file should feel at ease when editing the "
27928
"CUPS configuration file. Some examples of settings you may wish to change "
27929
"initially will be presented here."
27930
msgstr ""
27931
"The Common UNIX Printing System server's behaviour is configured through the "
27932
"directives contained in the file <filename>/etc/cups/cupsd.conf</filename>. "
27933
"The CUPS configuration file follows the same syntax as the primary "
27934
"configuration file for the Apache HTTP server, so users familiar with "
27935
"editing Apache's configuration file should feel at ease when editing the "
27936
"CUPS configuration file. Some examples of settings you may wish to change "
27937
"initially will be presented here."
27938
27939
#: serverguide/C/file-server.xml:499(para)
27940
msgid ""
27941
"Prior to editing the configuration file, you should make a copy of the "
27942
"original file and protect it from writing, so you will have the original "
27943
"settings as a reference, and to reuse as necessary."
27944
msgstr ""
27945
"Prior to editing the configuration file, you should make a copy of the "
27946
"original file and protect it from writing, so you will have the original "
27947
"settings as a reference, and to reuse as necessary."
27948
27949
#: serverguide/C/file-server.xml:503(para)
27950
msgid ""
27951
"Copy the <filename>/etc/cups/cupsd.conf</filename> file and protect it from "
27952
"writing with the following commands, issued at a terminal prompt:"
27953
msgstr ""
27954
"Copy the <filename>/etc/cups/cupsd.conf</filename> file and protect it from "
27955
"writing with the following commands, issued at a terminal prompt:"
27956
27957
#: serverguide/C/file-server.xml:509(command)
27958
msgid "sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.original"
27959
msgstr "sudo cp /etc/cups/cupsd.conf /etc/cups/cupsd.conf.original"
27960
27961
#: serverguide/C/file-server.xml:510(command)
27962
msgid "sudo chmod a-w /etc/cups/cupsd.conf.original"
27963
msgstr "sudo chmod a-w /etc/cups/cupsd.conf.original"
27964
27965
#: serverguide/C/file-server.xml:515(para)
27966
msgid ""
27967
"<emphasis role=\"bold\">ServerAdmin</emphasis>: To configure the email "
27968
"address of the designated administrator of the CUPS server, simply edit the "
27969
"<filename>/etc/cups/cupsd.conf</filename> configuration file with your "
27970
"preferred text editor, and add or modify the <emphasis "
27971
"role=\"italics\">ServerAdmin</emphasis> line accordingly. For example, if "
27972
"you are the Administrator for the CUPS server, and your e-mail address is "
27973
"'bjoy@somebigco.com', then you would modify the ServerAdmin line to appear "
27974
"as such:"
27975
msgstr ""
27976
"<emphasis role=\"bold\">ServerAdmin</emphasis>: To configure the e-mail "
27977
"address of the designated administrator of the CUPS server, simply edit the "
27978
"<filename>/etc/cups/cupsd.conf</filename> configuration file with your "
27979
"preferred text editor, and add or modify the <emphasis "
27980
"role=\"italics\">ServerAdmin</emphasis> line accordingly. For example, if "
27981
"you are the Administrator for the CUPS server, and your e-mail address is "
27982
"'bjoy@somebigco.com', then you would modify the ServerAdmin line to appear "
27983
"as such:"
27984
27985
#: serverguide/C/file-server.xml:526(screen)
27986
#, no-wrap
27987
msgid ""
27988
"\n"
27989
"ServerAdmin bjoy@somebigco.com\n"
27990
msgstr ""
27991
"\n"
27992
"ServerAdmin bjoy@somebigco.com\n"
27993
27994
#: serverguide/C/file-server.xml:532(para)
27995
msgid ""
27996
"<emphasis role=\"bold\">Listen</emphasis>: By default on Ubuntu, the CUPS "
27997
"server installation listens only on the loopback interface at IP address "
27998
"<emphasis>127.0.0.1</emphasis>. In order to instruct the CUPS server to "
27999
"listen on an actual network adapter's IP address, you must specify either a "
28000
"hostname, the IP address, or optionally, an IP address/port pairing via the "
28001
"addition of a Listen directive. For example, if your CUPS server resides on "
28002
"a local network at the IP address <emphasis "
28003
"role=\"italics\">192.168.10.250</emphasis> and you'd like to make it "
28004
"accessible to the other systems on this subnetwork, you would edit the "
28005
"<filename>/etc/cups/cupsd.conf</filename> and add a Listen directive, as "
28006
"such:"
28007
msgstr ""
28008
"<emphasis role=\"bold\">Listen</emphasis>: By default on Ubuntu, the CUPS "
28009
"server installation listens only on the loopback interface at IP address "
28010
"<emphasis>127.0.0.1</emphasis>. In order to instruct the CUPS server to "
28011
"listen on an actual network adapter's IP address, you must specify either a "
28012
"hostname, the IP address, or optionally, an IP address/port pairing via the "
28013
"addition of a Listen directive. For example, if your CUPS server resides on "
28014
"a local network at the IP address <emphasis "
28015
"role=\"italics\">192.168.10.250</emphasis> and you'd like to make it "
28016
"accessible to the other systems on this subnetwork, you would edit the "
28017
"<filename>/etc/cups/cupsd.conf</filename> and add a Listen directive, as "
28018
"such:"
28019
28020
#: serverguide/C/file-server.xml:546(screen)
28021
#, no-wrap
28022
msgid ""
28023
"\n"
28024
"Listen 127.0.0.1:631 # existing loopback Listen\n"
28025
"Listen /var/run/cups/cups.sock # existing socket Listen\n"
28026
"Listen 192.168.10.250:631 # Listen on the LAN interface, Port 631 "
28027
"(IPP)\n"
28028
msgstr ""
28029
"\n"
28030
"Listen 127.0.0.1:631 # existing loopback Listen\n"
28031
"Listen /var/run/cups/cups.sock # existing socket Listen\n"
28032
"Listen 192.168.10.250:631 # Listen on the LAN interface, Port 631 "
28033
"(IPP)\n"
28034
28035
#: serverguide/C/file-server.xml:552(para)
28036
msgid ""
28037
"In the example above, you may comment out or remove the reference to the "
28038
"Loopback address (127.0.0.1) if you do not wish <application>cupsd "
28039
"</application> to listen on that interface, but would rather have it only "
28040
"listen on the Ethernet interfaces of the Local Area Network (LAN). To enable "
28041
"listening for all network interfaces for which a certain hostname is bound, "
28042
"including the Loopback, you could create a Listen entry for the hostname "
28043
"<emphasis>socrates</emphasis> as such:"
28044
msgstr ""
28045
"In the example above, you may comment out or remove the reference to the "
28046
"Loopback address (127.0.0.1) if you do not wish <application>cupsd "
28047
"</application> to listen on that interface, but would rather have it only "
28048
"listen on the Ethernet interfaces of the Local Area Network (LAN). To enable "
28049
"listening for all network interfaces for which a certain hostname is bound, "
28050
"including the Loopback, you could create a Listen entry for the hostname "
28051
"<emphasis>socrates</emphasis> as such:"
28052
28053
#: serverguide/C/file-server.xml:562(screen)
28054
#, no-wrap
28055
msgid ""
28056
"\n"
28057
"Listen socrates:631 # Listen on all interfaces for the hostname 'socrates'\n"
28058
msgstr ""
28059
"\n"
28060
"Listen socrates:631 # Listen on all interfaces for the hostname 'socrates'\n"
28061
28062
#: serverguide/C/file-server.xml:566(para)
28063
msgid ""
28064
"or by omitting the Listen directive and using <emphasis>Port</emphasis> "
28065
"instead, as in:"
28066
msgstr ""
28067
"or by omitting the Listen directive and using <emphasis>Port</emphasis> "
28068
"instead, as in:"
28069
28070
#: serverguide/C/file-server.xml:568(screen)
28071
#, no-wrap
28072
msgid ""
28073
"\n"
28074
"Port 631 # Listen on port 631 on all interfaces\n"
28075
msgstr ""
28076
"\n"
28077
"Port 631 # Listen on port 631 on all interfaces\n"
28078
28079
#: serverguide/C/file-server.xml:575(para)
28080
msgid ""
28081
"For more examples of configuration directives in the CUPS server "
28082
"configuration file, view the associated system manual page by entering the "
28083
"following command at a terminal prompt:"
28084
msgstr ""
28085
"For more examples of configuration directives in the CUPS server "
28086
"configuration file, view the associated system manual page by entering the "
28087
"following command at a terminal prompt:"
28088
28089
#: serverguide/C/file-server.xml:582(command)
28090
msgid "man cupsd.conf"
28091
msgstr "man cupsd.conf"
28092
28093
#: serverguide/C/file-server.xml:586(para)
28094
msgid ""
28095
"Whenever you make changes to the <filename>/etc/cups/cupsd.conf</filename> "
28096
"configuration file, you'll need to restart the CUPS server by typing the "
28097
"following command at a terminal prompt:"
28098
msgstr ""
28099
"Whenever you make changes to the <filename>/etc/cups/cupsd.conf</filename> "
28100
"configuration file, you'll need to restart the CUPS server by typing the "
28101
"following command at a terminal prompt:"
28102
28103
#: serverguide/C/file-server.xml:592(command)
28104
msgid "sudo /etc/init.d/cups restart"
28105
msgstr "sudo /etc/init.d/cups restart"
28106
28107
#: serverguide/C/file-server.xml:598(title)
28108
msgid "Web Interface"
28109
msgstr "Web Interface"
28110
28111
#: serverguide/C/file-server.xml:600(para)
28112
msgid ""
28113
"CUPS can be configured and monitored using a web interface, which by default "
28114
"is available at <ulink "
28115
"url=\"http://localhost:631/admin\">http://localhost:631/admin</ulink>. The "
28116
"web interface can be used to perform all printer management tasks."
28117
msgstr ""
28118
"CUPS can be configured and monitored using a web interface, which by default "
28119
"is available at <ulink "
28120
"url=\"http://localhost:631/admin\">http://localhost:631/admin</ulink>. The "
28121
"web interface can be used to perform all printer management tasks."
28122
28123
#: serverguide/C/file-server.xml:604(para)
28124
msgid ""
28125
"In order to perform administrative tasks via the web interface, you must "
28126
"either have the root account enabled on your server, or authenticate as a "
28127
"user in the <emphasis role=\"italic\">lpadmin</emphasis> group. For security "
28128
"reasons, CUPS won't authenticate a user that doesn't have a password."
28129
msgstr ""
28130
"In order to perform administrative tasks via the web interface, you must "
28131
"either have the root account enabled on your server, or authenticate as a "
28132
"user in the <emphasis role=\"italic\">lpadmin</emphasis> group. For security "
28133
"reasons, CUPS won't authenticate a user that doesn't have a password."
28134
28135
#: serverguide/C/file-server.xml:607(para)
28136
msgid ""
28137
"To add a user to the <emphasis role=\"italic\">lpadmin</emphasis> group, run "
28138
"at the terminal prompt: <screen>\n"
28139
"<command>sudo usermod -aG lpadmin username</command>\n"
28140
"</screen>"
28141
msgstr ""
28142
"To add a user to the <emphasis role=\"italic\">lpadmin</emphasis> group, run "
28143
"at the terminal prompt: <screen>\n"
28144
"<command>sudo usermod -aG lpadmin username</command>\n"
28145
"</screen>"
28146
28147
#: serverguide/C/file-server.xml:613(para)
28148
msgid ""
28149
"Further documentation is available in the <emphasis "
28150
"role=\"italic\">Documentation/Help</emphasis> tab of the web interface."
28151
msgstr ""
28152
"Further documentation is available in the <emphasis "
28153
"role=\"italic\">Documentation/Help</emphasis> tab of the web interface."
28154
28155
#: serverguide/C/file-server.xml:621(ulink)
28156
msgid "CUPS Website"
28157
msgstr "CUPS Website"
28158
28159
#: serverguide/C/file-server.xml:624(ulink)
28160
msgid "Ubuntu Wiki CUPS page"
28161
msgstr ""
28162
28163
#: serverguide/C/dns.xml:13(title)
28164
msgid "Domain Name Service (DNS)"
28165
msgstr "Domain Name Service (DNS)"
28166
28167
#: serverguide/C/dns.xml:14(para)
28168
msgid ""
28169
"Domain Name Service (DNS) is an Internet service that maps IP addresses and "
28170
"fully qualified domain names (FQDN) to one another. In this way, DNS "
28171
"alleviates the need to remember IP addresses. Computers that run DNS are "
28172
"called <emphasis>name servers</emphasis>. Ubuntu ships with "
28173
"<application>BIND</application> (Berkley Internet Naming Daemon), the most "
28174
"common program used for maintaining a name server on Linux."
28175
msgstr ""
28176
"Domain Name Service (DNS) is an Internet service that maps IP addresses and "
28177
"fully qualified domain names (FQDN) to one another. In this way, DNS "
28178
"alleviates the need to remember IP addresses. Computers that run DNS are "
28179
"called <emphasis>name servers</emphasis>. Ubuntu ships with "
28180
"<application>BIND</application> (Berkley Internet Naming Daemon), the most "
28181
"common program used for maintaining a name server on Linux."
28182
28183
#: serverguide/C/dns.xml:24(para)
28184
msgid ""
28185
"At a terminal prompt, enter the following command to install "
28186
"<application>dns</application>:"
28187
msgstr ""
28188
"At a terminal prompt, enter the following command to install "
28189
"<application>dns</application>:"
28190
28191
#: serverguide/C/dns.xml:28(command)
28192
msgid "sudo apt-get install bind9"
28193
msgstr "sudo apt-get install bind9"
28194
28195
#: serverguide/C/dns.xml:30(para)
28196
msgid ""
28197
"A very useful package for testing and troubleshooting DNS issues is the "
28198
"dnsutils package. To install <application>dnsutils</application> enter the "
28199
"following:"
28200
msgstr ""
28201
"A very useful package for testing and troubleshooting DNS issues is the "
28202
"dnsutils package. To install <application>dnsutils</application> enter the "
28203
"following:"
28204
28205
#: serverguide/C/dns.xml:35(command)
28206
msgid "sudo apt-get install dnsutils"
28207
msgstr "sudo apt-get install dnsutils"
28208
28209
#: serverguide/C/dns.xml:40(para)
28210
msgid ""
28211
"There a many ways to configure <application>BIND9</application>. Some of the "
28212
"most common configurations are a caching nameserver, primary master, and a "
28213
"as a secondary master."
28214
msgstr ""
28215
"There a many ways to configure <application>BIND9</application>. Some of the "
28216
"most common configurations are a caching nameserver, primary master, and a "
28217
"as a secondary master."
28218
28219
#: serverguide/C/dns.xml:46(para)
28220
msgid ""
28221
"When configured as a caching nameserver BIND9 will find the answer to name "
28222
"queries and remember the answer when the domain is queried again."
28223
msgstr ""
28224
"When configured as a caching nameserver BIND9 will find the answer to name "
28225
"queries and remember the answer when the domain is queried again."
28226
28227
#: serverguide/C/dns.xml:52(para)
28228
msgid ""
28229
"As a primary master server BIND9 reads the data for a zone from a file on "
28230
"it's host and is authoritative for that zone."
28231
msgstr ""
28232
"As a primary master server BIND9 reads the data for a zone from a file on "
28233
"it's host and is authoritative for that zone."
28234
28235
#: serverguide/C/dns.xml:57(para)
28236
msgid ""
28237
"In a secondary master configuration BIND9 gets the zone data from another "
28238
"nameserver authoritative for the zone."
28239
msgstr ""
28240
"In a secondary master configuration BIND9 gets the zone data from another "
28241
"nameserver authoritative for the zone."
28242
28243
#: serverguide/C/dns.xml:65(para)
28244
msgid ""
28245
"The DNS configuration files are stored in the <filename>/etc/bind</filename> "
28246
"directory. The primary configuration file is "
28247
"<filename>/etc/bind/named.conf</filename>."
28248
msgstr ""
28249
"The DNS configuration files are stored in the <filename>/etc/bind</filename> "
28250
"directory. The primary configuration file is "
28251
"<filename>/etc/bind/named.conf</filename>."
28252
28253
#: serverguide/C/dns.xml:72(para)
28254
msgid ""
28255
"The <emphasis>include</emphasis> line specifies the filename which contains "
28256
"the DNS options. The <emphasis>directory</emphasis> line in the "
28257
"<filename>/etc/bind/named.conf.options</filename> file tells DNS where to "
28258
"look for files. All files BIND uses will be relative to this directory."
28259
msgstr ""
28260
"The <emphasis>include</emphasis> line specifies the filename which contains "
28261
"the DNS options. The <emphasis>directory</emphasis> line in the "
28262
"<filename>/etc/bind/named.conf.options</filename> file tells DNS where to "
28263
"look for files. All files BIND uses will be relative to this directory."
28264
28265
#: serverguide/C/dns.xml:80(para)
28266
msgid ""
28267
"The file named <filename>/etc/bind/db.root</filename> describes the root "
28268
"nameservers in the world. The servers change over time, so the "
28269
"<filename>/etc/bind/db.root</filename> file must be maintained now and then. "
28270
"This is usually done as updates to the <application>bind9</application> "
28271
"package. The <emphasis>zone</emphasis> section defines a master server, and "
28272
"it is stored in a file mentioned in the <emphasis>file</emphasis> option."
28273
msgstr ""
28274
"The file named <filename>/etc/bind/db.root</filename> describes the root "
28275
"nameservers in the world. The servers change over time, so the "
28276
"<filename>/etc/bind/db.root</filename> file must be maintained now and then. "
28277
"This is usually done as updates to the <application>bind9</application> "
28278
"package. The <emphasis>zone</emphasis> section defines a master server, and "
28279
"it is stored in a file mentioned in the <emphasis>file</emphasis> option."
28280
28281
#: serverguide/C/dns.xml:90(para)
28282
msgid ""
28283
"It is possible to configure the same server to be a caching name server, "
28284
"primary master, and secondary master. A server can be the Start of Authority "
28285
"(SOA) for one zone, while providing secondary service for another zone. All "
28286
"the while providing caching services for hosts on the local LAN."
28287
msgstr ""
28288
"It is possible to configure the same server to be a caching name server, "
28289
"primary master, and secondary master. A server can be the Start of Authority "
28290
"(SOA) for one zone, while providing secondary service for another zone. All "
28291
"the while providing caching services for hosts on the local LAN."
28292
28293
#: serverguide/C/dns.xml:98(title)
28294
msgid "Caching Nameserver"
28295
msgstr "Caching Nameserver"
28296
28297
#: serverguide/C/dns.xml:99(para)
28298
msgid ""
28299
"The default configuration is setup to act as a caching server. All that is "
28300
"required is simply adding the IP Addresses of your ISP's DNS servers. Simply "
28301
"uncomment and edit the following in "
28302
"<filename>/etc/bind/named.conf.options</filename>:"
28303
msgstr ""
28304
"The default configuration is setup to act as a caching server. All that is "
28305
"required is simply adding the IP Addresses of your ISP's DNS servers. Simply "
28306
"uncomment and edit the following in "
28307
"<filename>/etc/bind/named.conf.options</filename>:"
28308
28309
#: serverguide/C/dns.xml:103(programlisting)
28310
#, no-wrap
28311
msgid ""
28312
"\n"
28313
"forwarders {\n"
28314
" 1.2.3.4;\n"
28315
" 5.6.7.8;\n"
28316
" };\n"
28317
msgstr ""
28318
"\n"
28319
"forwarders {\n"
28320
" 1.2.3.4;\n"
28321
" 5.6.7.8;\n"
28322
" };\n"
28323
28324
#: serverguide/C/dns.xml:110(para)
28325
msgid ""
28326
"Replace <emphasis>1.2.3.4</emphasis> and <emphasis>5.6.7.8</emphasis> with "
28327
"the IP Adresses of actual nameservers."
28328
msgstr ""
28329
"Replace <emphasis>1.2.3.4</emphasis> and <emphasis>5.6.7.8</emphasis> with "
28330
"the IP Adresses of actual nameservers."
28331
28332
#: serverguide/C/dns.xml:114(para)
28333
msgid ""
28334
"Now restart the DNS server, to enable the new configuration. From a terminal "
28335
"prompt:"
28336
msgstr ""
28337
"Now restart the DNS server, to enable the new configuration. From a terminal "
28338
"prompt:"
28339
28340
#: serverguide/C/dns.xml:118(command) serverguide/C/dns.xml:194(command) serverguide/C/dns.xml:253(command) serverguide/C/dns.xml:312(command) serverguide/C/dns.xml:561(command)
28341
msgid "sudo /etc/init.d/bind9 restart"
28342
msgstr "sudo /etc/init.d/bind9 restart"
28343
28344
#: serverguide/C/dns.xml:120(para)
28345
msgid ""
28346
"See <xref linkend=\"dns-testing-dig\"/> for information on testing a caching "
28347
"DNS server."
28348
msgstr ""
28349
"See <xref linkend=\"dns-testing-dig\"/> for information on testing a caching "
28350
"DNS server."
28351
28352
#: serverguide/C/dns.xml:125(title)
28353
msgid "Primary Master"
28354
msgstr "Primary Master"
28355
28356
#: serverguide/C/dns.xml:126(para)
28357
msgid ""
28358
"In this section <application>BIND9</application> will be configured as the "
28359
"Primary Master for the domain <emphasis>example.com</emphasis>. Simply "
28360
"replace <emphasis role=\"italic\">example.com</emphasis> with your FQDN "
28361
"(Fully Qualified Domain Name)."
28362
msgstr ""
28363
"In this section <application>BIND9</application> will be configured as the "
28364
"Primary Master for the domain <emphasis>example.com</emphasis>. Simply "
28365
"replace <emphasis role=\"italic\">example.com</emphasis> with your FQDN "
28366
"(Fully Qualified Domain Name)."
28367
28368
#: serverguide/C/dns.xml:132(title)
28369
msgid "Forward Zone File"
28370
msgstr "Forward Zone File"
28371
28372
#: serverguide/C/dns.xml:133(para)
28373
msgid ""
28374
"To add a DNS zone to BIND9, turning BIND9 into a Primary Master server, the "
28375
"first step is to edit <filename>/etc/bind/named.conf.local</filename>:"
28376
msgstr ""
28377
"To add a DNS zone to BIND9, turning BIND9 into a Primary Master server, the "
28378
"first step is to edit <filename>/etc/bind/named.conf.local</filename>:"
28379
28380
#: serverguide/C/dns.xml:137(programlisting)
28381
#, no-wrap
28382
msgid ""
28383
"\n"
28384
"zone \"example.com\" {\n"
28385
"\ttype master;\n"
28386
" file \"/etc/bind/db.example.com\";\n"
28387
"};\n"
28388
msgstr ""
28389
"\n"
28390
"zone \"example.com\" {\n"
28391
"\ttype master;\n"
28392
" file \"/etc/bind/db.example.com\";\n"
28393
"};\n"
28394
28395
#: serverguide/C/dns.xml:143(para)
28396
msgid ""
28397
"Now use an existing zone file as a template to create the "
28398
"<filename>/etc/bind/db.example.com</filename> file:"
28399
msgstr ""
28400
"Now use an existing zone file as a template to create the "
28401
"<filename>/etc/bind/db.example.com</filename> file:"
28402
28403
#: serverguide/C/dns.xml:147(command)
28404
msgid "sudo cp /etc/bind/db.local /etc/bind/db.example.com"
28405
msgstr "sudo cp /etc/bind/db.local /etc/bind/db.example.com"
28406
28407
#: serverguide/C/dns.xml:149(para)
28408
msgid ""
28409
"Edit the new zone file <filename>/etc/bind/db.example.com</filename> change "
28410
"<emphasis>localhost.</emphasis> to the FQDN of your server, leaving the "
28411
"additional \".\" at the end. Change <emphasis>127.0.0.1</emphasis> to the "
28412
"nameserver's IP Address and <emphasis>root.localhost</emphasis> to a valid "
28413
"email address, but with a \".\" instead of the usual \"@\" symbol, again "
28414
"leaving the \".\" at the end."
28415
msgstr ""
28416
"Edit the new zone file <filename>/etc/bind/db.example.com</filename> change "
28417
"<emphasis>localhost.</emphasis> to the FQDN of your server, leaving the "
28418
"additional \".\" at the end. Change <emphasis>127.0.0.1</emphasis> to the "
28419
"nameserver's IP Address and <emphasis>root.localhost</emphasis> to a valid e-"
28420
"mail address, but with a \".\" instead of the usual \"@\" symbol, again "
28421
"leaving the \".\" at the end."
28422
28423
#: serverguide/C/dns.xml:155(para)
28424
msgid ""
28425
"Also, create an <emphasis>A record</emphasis> for <emphasis "
28426
"role=\"italic\">ns.example.com</emphasis>. The name server in this example:"
28427
msgstr ""
28428
"Also, create an <emphasis>A record</emphasis> for <emphasis "
28429
"role=\"italic\">ns.example.com</emphasis>. The name server in this example:"
28430
28431
#: serverguide/C/dns.xml:159(programlisting)
28432
#, no-wrap
28433
msgid ""
28434
"\n"
28435
";\n"
28436
"; BIND data file for local loopback interface\n"
28437
";\n"
28438
"$TTL 604800\n"
28439
"@ IN SOA ns.example.com. root.example.com. (\n"
28440
" 2 ; Serial\n"
28441
" 604800 ; Refresh\n"
28442
" 86400 ; Retry\n"
28443
" 2419200 ; Expire\n"
28444
" 604800 ) ; Negative Cache TTL\n"
28445
";\n"
28446
"@ IN NS ns.example.com.\n"
28447
"@ IN A 127.0.0.1\n"
28448
"@ IN AAAA ::1\n"
28449
"ns IN A 192.168.1.10\n"
28450
msgstr ""
28451
"\n"
28452
";\n"
28453
"; BIND data file for local loopback interface\n"
28454
";\n"
28455
"$TTL 604800\n"
28456
"@ IN SOA ns.example.com. root.example.com. (\n"
28457
" 2 ; Serial\n"
28458
" 604800 ; Refresh\n"
28459
" 86400 ; Retry\n"
28460
" 2419200 ; Expire\n"
28461
" 604800 ) ; Negative Cache TTL\n"
28462
";\n"
28463
"@ IN NS ns.example.com.\n"
28464
"@ IN A 127.0.0.1\n"
28465
"@ IN AAAA ::1\n"
28466
"ns IN A 192.168.1.10\n"
28467
28468
#: serverguide/C/dns.xml:176(para)
28469
msgid ""
28470
"You must increment the <emphasis>Serial Number</emphasis> every time you "
28471
"make changes to the zone file. If you make multiple changes before "
28472
"restarting BIND9, simply increment the Serial once."
28473
msgstr ""
28474
"You must increment the <emphasis>Serial Number</emphasis> every time you "
28475
"make changes to the zone file. If you make multiple changes before "
28476
"restarting BIND9, simply increment the Serial once."
28477
28478
#: serverguide/C/dns.xml:180(para)
28479
msgid ""
28480
"Now, you can add DNS records to the bottom of the zone file. See <xref "
28481
"linkend=\"dns-record-types\"/> for details."
28482
msgstr ""
28483
"Now, you can add DNS records to the bottom of the zone file. See <xref "
28484
"linkend=\"dns-record-types\"/> for details."
28485
28486
#: serverguide/C/dns.xml:184(para)
28487
msgid ""
28488
"Many admins like to use the last date edited as the serial of a zone, such "
28489
"as <emphasis>2007010100</emphasis> which is yyyymmddss (where "
28490
"<emphasis>ss</emphasis> is the Serial Number)"
28491
msgstr ""
28492
"Many admins like to use the last date edited as the serial of a zone, such "
28493
"as <emphasis>2007010100</emphasis> which is yyyymmddss (where "
28494
"<emphasis>ss</emphasis> is the Serial Number)"
28495
28496
#: serverguide/C/dns.xml:189(para)
28497
msgid ""
28498
"Once you have made a change to the zone file "
28499
"<application>BIND9</application> will need to be restarted for the changes "
28500
"to take effect:"
28501
msgstr ""
28502
"Once you have made a change to the zone file "
28503
"<application>BIND9</application> will need to be restarted for the changes "
28504
"to take effect:"
28505
28506
#: serverguide/C/dns.xml:198(title)
28507
msgid "Reverse Zone File"
28508
msgstr "Reverse Zone File"
28509
28510
#: serverguide/C/dns.xml:199(para)
28511
msgid ""
28512
"Now that the zone is setup and resolving names to IP Adresses a "
28513
"<emphasis>Reverse zone</emphasis> is also required. A Reverse zone allows "
28514
"DNS to resolve an address to a name."
28515
msgstr ""
28516
"Now that the zone is setup and resolving names to IP Adresses a "
28517
"<emphasis>Reverse zone</emphasis> is also required. A Reverse zone allows "
28518
"DNS to resolve an address to a name."
28519
28520
#: serverguide/C/dns.xml:203(para)
28521
msgid "Edit /etc/bind/named.conf.local and add the following:"
28522
msgstr "Edit /etc/bind/named.conf.local and add the following:"
28523
28524
#: serverguide/C/dns.xml:206(programlisting)
28525
#, no-wrap
28526
msgid ""
28527
"\n"
28528
"zone \"1.168.192.in-addr.arpa\" {\n"
28529
" type master;\n"
28530
" notify no;\n"
28531
" file \"/etc/bind/db.192\";\n"
28532
"};\n"
28533
msgstr ""
28534
"\n"
28535
"zone \"1.168.192.in-addr.arpa\" {\n"
28536
" type master;\n"
28537
" notify no;\n"
28538
" file \"/etc/bind/db.192\";\n"
28539
"};\n"
28540
28541
#: serverguide/C/dns.xml:214(para)
28542
msgid ""
28543
"Replace <emphasis>1.168.192</emphasis> with the first three octets of "
28544
"whatever network you are using. Also, name the zone file "
28545
"<filename>/etc/bind/db.192</filename> appropriately. It should match the "
28546
"first octet of your network."
28547
msgstr ""
28548
"Replace <emphasis>1.168.192</emphasis> with the first three octets of "
28549
"whatever network you are using. Also, name the zone file "
28550
"<filename>/etc/bind/db.192</filename> appropriately. It should match the "
28551
"first octet of your network."
28552
28553
#: serverguide/C/dns.xml:219(para)
28554
msgid "Now create the <filename>/etc/bind/db.192</filename> file:"
28555
msgstr "Now create the <filename>/etc/bind/db.192</filename> file:"
28556
28557
#: serverguide/C/dns.xml:223(command)
28558
msgid "sudo cp /etc/bind/db.127 /etc/bind/db.192"
28559
msgstr "sudo cp /etc/bind/db.127 /etc/bind/db.192"
28560
28561
#: serverguide/C/dns.xml:225(para)
28562
msgid ""
28563
"Next edit <filename>/etc/bind/db.192</filename> changing the basically the "
28564
"same options as <filename>/etc/bind/db.example.com</filename>:"
28565
msgstr ""
28566
"Next edit <filename>/etc/bind/db.192</filename> changing the basically the "
28567
"same options as <filename>/etc/bind/db.example.com</filename>:"
28568
28569
#: serverguide/C/dns.xml:229(programlisting)
28570
#, no-wrap
28571
msgid ""
28572
"\n"
28573
";\n"
28574
"; BIND reverse data file for local loopback interface\n"
28575
";\n"
28576
"$TTL 604800\n"
28577
"@ IN SOA ns.example.com. root.example.com. (\n"
28578
" 2 ; Serial\n"
28579
" 604800 ; Refresh\n"
28580
" 86400 ; Retry\n"
28581
" 2419200 ; Expire\n"
28582
" 604800 ) ; Negative Cache TTL\n"
28583
";\n"
28584
"@ IN NS ns.\n"
28585
"10 IN PTR ns.example.com.\n"
28586
msgstr ""
28587
"\n"
28588
";\n"
28589
"; BIND reverse data file for local loopback interface\n"
28590
";\n"
28591
"$TTL 604800\n"
28592
"@ IN SOA ns.example.com. root.example.com. (\n"
28593
" 2 ; Serial\n"
28594
" 604800 ; Refresh\n"
28595
" 86400 ; Retry\n"
28596
" 2419200 ; Expire\n"
28597
" 604800 ) ; Negative Cache TTL\n"
28598
";\n"
28599
"@ IN NS ns.\n"
28600
"10 IN PTR ns.example.com.\n"
28601
28602
#: serverguide/C/dns.xml:244(para)
28603
msgid ""
28604
"The <emphasis>Serial Number</emphasis> in the Reverse zone needs to be "
28605
"incremented on each changes as well. For each <emphasis>A record</emphasis> "
28606
"you configure in <filename>/etc/bind/db.example.com</filename> you need to "
28607
"create a <emphasis>PTR record</emphasis> in "
28608
"<filename>/etc/bind/db.192</filename>."
28609
msgstr ""
28610
"The <emphasis>Serial Number</emphasis> in the Reverse zone needs to be "
28611
"incremented on each changes as well. For each <emphasis>A record</emphasis> "
28612
"you configure in <filename>/etc/bind/db.example.com</filename> you need to "
28613
"create a <emphasis>PTR record</emphasis> in "
28614
"<filename>/etc/bind/db.192</filename>."
28615
28616
#: serverguide/C/dns.xml:249(para)
28617
msgid ""
28618
"After creating the reverse zone file restart "
28619
"<application>BIND9</application>:"
28620
msgstr ""
28621
"After creating the reverse zone file restart "
28622
"<application>BIND9</application>:"
28623
28624
#: serverguide/C/dns.xml:258(title)
28625
msgid "Secondary Master"
28626
msgstr "Secondary Master"
28627
28628
#: serverguide/C/dns.xml:259(para)
28629
msgid ""
28630
"Once a <emphasis>Primary Master</emphasis> has been configured a "
28631
"<emphasis>Secondary Master</emphasis> is needed in order to maintain the "
28632
"availability of the domain should the Primary become unavailable."
28633
msgstr ""
28634
"Once a <emphasis>Primary Master</emphasis> has been configured a "
28635
"<emphasis>Secondary Master</emphasis> is needed in order to maintain the "
28636
"availability of the domain should the Primary become unavailable."
28637
28638
#: serverguide/C/dns.xml:263(para)
28639
msgid ""
28640
"First, on the Primary Master server, the zone transfer needs to be allowed. "
28641
"Add the <emphasis>allow-transfer</emphasis> option to the example Forward "
28642
"and Reverse zone definitions in "
28643
"<filename>/etc/bind/named.conf.local</filename>:"
28644
msgstr ""
28645
"First, on the Primary Master server, the zone transfer needs to be allowed. "
28646
"Add the <emphasis>allow-transfer</emphasis> option to the example Forward "
28647
"and Reverse zone definitions in "
28648
"<filename>/etc/bind/named.conf.local</filename>:"
28649
28650
#: serverguide/C/dns.xml:267(programlisting)
28651
#, no-wrap
28652
msgid ""
28653
"\n"
28654
"zone \"example.com\" {\n"
28655
" type master;\n"
28656
"\tfile \"/etc/bind/db.example.com\";\n"
28657
" allow-transfer { 192.168.1.11; };\n"
28658
"};\n"
28659
"\n"
28660
"zone \"1.168.192.in-addr.arpa\" {\n"
28661
" type master;\n"
28662
" notify no;\n"
28663
" file \"/etc/bind/db.192\";\n"
28664
"\tallow-transfer { 192.168.1.11; };\n"
28665
"};\n"
28666
msgstr ""
28667
"\n"
28668
"zone \"example.com\" {\n"
28669
" type master;\n"
28670
"\tfile \"/etc/bind/db.example.com\";\n"
28671
" allow-transfer { 192.168.1.11; };\n"
28672
"};\n"
28673
"\n"
28674
"zone \"1.168.192.in-addr.arpa\" {\n"
28675
" type master;\n"
28676
" notify no;\n"
28677
" file \"/etc/bind/db.192\";\n"
28678
"\tallow-transfer { 192.168.1.11; };\n"
28679
"};\n"
28680
28681
#: serverguide/C/dns.xml:282(para)
28682
msgid ""
28683
"Replace <emphasis>192.168.1.11</emphasis> with the IP Address of your "
28684
"Secondary nameserver."
28685
msgstr ""
28686
"Replace <emphasis>192.168.1.11</emphasis> with the IP Address of your "
28687
"Secondary nameserver."
28688
28689
#: serverguide/C/dns.xml:286(para)
28690
msgid ""
28691
"Next, on the Secondary Master, install the <application>bind9</application> "
28692
"package the same way as on the Primary. Then edit the "
28693
"<filename>/etc/bind/named.conf.local</filename> and add the following "
28694
"declarations for the Forward and Reverse zones:"
28695
msgstr ""
28696
"Next, on the Secondary Master, install the <application>bind9</application> "
28697
"package the same way as on the Primary. Then edit the "
28698
"<filename>/etc/bind/named.conf.local</filename> and add the following "
28699
"declarations for the Forward and Reverse zones:"
28700
28701
#: serverguide/C/dns.xml:290(programlisting)
28702
#, no-wrap
28703
msgid ""
28704
"\n"
28705
"zone \"example.com\" {\n"
28706
"\ttype slave;\n"
28707
" file \"/var/cache/bind/db.example.com\";\n"
28708
" masters { 192.168.1.10; };\n"
28709
"}; \n"
28710
" \n"
28711
"zone \"1.168.192.in-addr.arpa\" {\n"
28712
"\ttype slave;\n"
28713
" file \"/var/cache/bind/db.192\";\n"
28714
" masters { 192.168.1.10; };\n"
28715
"};\n"
28716
msgstr ""
28717
"\n"
28718
"zone \"example.com\" {\n"
28719
"\ttype slave;\n"
28720
" file \"/var/cache/bind/db.example.com\";\n"
28721
" masters { 192.168.1.10; };\n"
28722
"}; \n"
28723
" \n"
28724
"zone \"1.168.192.in-addr.arpa\" {\n"
28725
"\ttype slave;\n"
28726
" file \"/var/cache/bind/db.192\";\n"
28727
" masters { 192.168.1.10; };\n"
28728
"};\n"
28729
28730
#: serverguide/C/dns.xml:304(para)
28731
msgid ""
28732
"Replace <emphasis>192.168.1.10</emphasis> with the IP Address of your "
28733
"Primary nameserver."
28734
msgstr ""
28735
"Replace <emphasis>192.168.1.10</emphasis> with the IP Address of your "
28736
"Primary nameserver."
28737
28738
#: serverguide/C/dns.xml:308(para)
28739
msgid "Restart <application>BIND9</application> on the Secondary Master:"
28740
msgstr "Restart <application>BIND9</application> on the Secondary Master:"
28741
28742
#: serverguide/C/dns.xml:314(para)
28743
msgid ""
28744
"In <filename>/var/log/syslog</filename> you should see something similar to:"
28745
msgstr ""
28746
"In <filename>/var/log/syslog</filename> you should see something similar to:"
28747
28748
#: serverguide/C/dns.xml:317(programlisting)
28749
#, no-wrap
28750
msgid ""
28751
"\n"
28752
"slave zone \"example.com\" (IN) loaded (serial 6)\n"
28753
"slave zone \"100.18.172.in-addr.arpa\" (IN) loaded (serial 3)\n"
28754
msgstr ""
28755
"\n"
28756
"slave zone \"example.com\" (IN) loaded (serial 6)\n"
28757
"slave zone \"100.18.172.in-addr.arpa\" (IN) loaded (serial 3)\n"
28758
28759
#: serverguide/C/dns.xml:322(para)
28760
msgid ""
28761
"Note: A zone is only transferred if the <emphasis>Serial Number</emphasis> "
28762
"on the Primary is larger than the one on the Secondary."
28763
msgstr ""
28764
"Note: A zone is only transferred if the <emphasis>Serial Number</emphasis> "
28765
"on the Primary is larger than the one on the Secondary."
28766
28767
#: serverguide/C/dns.xml:328(para)
28768
msgid ""
28769
"The default directory for non-authoritative zone files is "
28770
"<filename>/var/cache/bind/</filename>. This directory is also configured in "
28771
"<application>AppArmor</application> to allow the "
28772
"<application>named</application> daemon to write to. For more information on "
28773
"AppArmor see <xref linkend=\"apparmor\"/>."
28774
msgstr ""
28775
"The default directory for non-authoritative zone files is "
28776
"<filename>/var/cache/bind/</filename>. This directory is also configured in "
28777
"<application>AppArmor</application> to allow the "
28778
"<application>named</application> daemon to write to. For more information on "
28779
"AppArmor see <xref linkend=\"apparmor\"/>."
28780
28781
#: serverguide/C/dns.xml:339(para)
28782
msgid ""
28783
"This section covers ways to help determine the cause when problems happen "
28784
"with DNS and <application>BIND9</application>."
28785
msgstr ""
28786
"This section covers ways to help determine the cause when problems happen "
28787
"with DNS and <application>BIND9</application>."
28788
28789
#: serverguide/C/dns.xml:345(title)
28790
msgid "resolv.conf"
28791
msgstr "resolv.conf"
28792
28793
#: serverguide/C/dns.xml:346(para)
28794
msgid ""
28795
"The first step in testing <application>BIND9</application> is to add the "
28796
"nameserver's IP Address to a hosts resolver. The Primary nameserver should "
28797
"be configured as well as another host to double check things. Simply edit "
28798
"<filename>/etc/resolv.conf</filename> and add the following:"
28799
msgstr ""
28800
"The first step in testing <application>BIND9</application> is to add the "
28801
"nameserver's IP Address to a hosts resolver. The Primary nameserver should "
28802
"be configured as well as another host to double check things. Simply edit "
28803
"<filename>/etc/resolv.conf</filename> and add the following:"
28804
28805
#: serverguide/C/dns.xml:351(programlisting)
28806
#, no-wrap
28807
msgid ""
28808
"\n"
28809
"nameserver\t192.168.1.10\n"
28810
"nameserver\t192.168.1.11\n"
28811
msgstr ""
28812
"\n"
28813
"nameserver\t192.168.1.10\n"
28814
"nameserver\t192.168.1.11\n"
28815
28816
#: serverguide/C/dns.xml:356(para)
28817
msgid ""
28818
"You should also add the IP Address of the Secondary nameserver in case the "
28819
"Primary becomes unavailable."
28820
msgstr ""
28821
"You should also add the IP Address of the Secondary nameserver in case the "
28822
"Primary becomes unavailable."
28823
28824
#: serverguide/C/dns.xml:362(title)
28825
msgid "dig"
28826
msgstr "dig"
28827
28828
#: serverguide/C/dns.xml:363(para)
28829
msgid ""
28830
"If you installed the <application>dnsutils</application> package you can "
28831
"test your setup using the DNS lookup utility <application>dig</application>:"
28832
msgstr ""
28833
"If you installed the <application>dnsutils</application> package you can "
28834
"test your setup using the DNS lookup utility <application>dig</application>:"
28835
28836
#: serverguide/C/dns.xml:369(para)
28837
msgid ""
28838
"After installing <application>BIND9</application> use "
28839
"<application>dig</application> against the loopback interface to make sure "
28840
"it is listening on port 53. From a terminal prompt:"
28841
msgstr ""
28842
"After installing <application>BIND9</application> use "
28843
"<application>dig</application> against the loopback interface to make sure "
28844
"it is listening on port 53. From a terminal prompt:"
28845
28846
#: serverguide/C/dns.xml:374(command)
28847
msgid "dig -x 127.0.0.1"
28848
msgstr "dig -x 127.0.0.1"
28849
28850
#: serverguide/C/dns.xml:376(para)
28851
msgid "You should see lines similar to the following in the command output:"
28852
msgstr "You should see lines similar to the following in the command output:"
28853
28854
#: serverguide/C/dns.xml:379(programlisting)
28855
#, no-wrap
28856
msgid ""
28857
"\n"
28858
";; Query time: 1 msec\n"
28859
";; SERVER: 192.168.1.10#53(192.168.1.10)\n"
28860
msgstr ""
28861
"\n"
28862
";; Query time: 1 msec\n"
28863
";; SERVER: 192.168.1.10#53(192.168.1.10)\n"
28864
28865
#: serverguide/C/dns.xml:385(para)
28866
msgid ""
28867
"If you have configured <application>BIND9</application> as a "
28868
"<emphasis>Caching</emphasis> nameserver \"dig\" an outside domain to check "
28869
"the query time:"
28870
msgstr ""
28871
"If you have configured <application>BIND9</application> as a "
28872
"<emphasis>Caching</emphasis> nameserver \"dig\" an outside domain to check "
28873
"the query time:"
28874
28875
#: serverguide/C/dns.xml:390(command)
28876
msgid "dig ubuntu.com"
28877
msgstr "dig ubuntu.com"
28878
28879
#: serverguide/C/dns.xml:392(para)
28880
msgid "Note the query time toward the end of the command output:"
28881
msgstr "Note the query time toward the end of the command output:"
28882
28883
#: serverguide/C/dns.xml:395(programlisting)
28884
#, no-wrap
28885
msgid ""
28886
"\n"
28887
";; Query time: 49 msec\n"
28888
msgstr ""
28889
"\n"
28890
";; Query time: 49 msec\n"
28891
28892
#: serverguide/C/dns.xml:398(para)
28893
msgid "After a second dig there should be improvement:"
28894
msgstr "After a second dig there should be improvement:"
28895
28896
#: serverguide/C/dns.xml:401(programlisting)
28897
#, no-wrap
28898
msgid ""
28899
"\n"
28900
";; Query time: 1 msec\n"
28901
msgstr ""
28902
"\n"
28903
";; Query time: 1 msec\n"
28904
28905
#: serverguide/C/dns.xml:408(title)
28906
msgid "ping"
28907
msgstr "ping"
28908
28909
#: serverguide/C/dns.xml:410(para)
28910
msgid ""
28911
"Now to demonstrate how applications make use of DNS to resolve a host name "
28912
"use the <application>ping</application> utility to send an ICMP echo "
28913
"request. From a terminal prompt enter:"
28914
msgstr ""
28915
"Now to demonstrate how applications make use of DNS to resolve a host name "
28916
"use the <application>ping</application> utility to send an ICMP echo "
28917
"request. From a terminal prompt enter:"
28918
28919
#: serverguide/C/dns.xml:416(command)
28920
msgid "ping example.com"
28921
msgstr "ping example.com"
28922
28923
#: serverguide/C/dns.xml:418(para)
28924
msgid ""
28925
"This tests if the nameserver can resolve the name "
28926
"<emphasis>ns.example.com</emphasis> to an IP Address. The command output "
28927
"should resemble:"
28928
msgstr ""
28929
"This tests if the nameserver can resolve the name "
28930
"<emphasis>ns.example.com</emphasis> to an IP Address. The command output "
28931
"should resemble:"
28932
28933
#: serverguide/C/dns.xml:422(programlisting)
28934
#, no-wrap
28935
msgid ""
28936
"\n"
28937
"PING ns.example.com (192.168.1.10) 56(84) bytes of data.\n"
28938
"64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=0.800 ms\n"
28939
"64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=0.813 ms\n"
28940
msgstr ""
28941
"\n"
28942
"PING ns.example.com (192.168.1.10) 56(84) bytes of data.\n"
28943
"64 bytes from 192.168.1.10: icmp_seq=1 ttl=64 time=0.800 ms\n"
28944
"64 bytes from 192.168.1.10: icmp_seq=2 ttl=64 time=0.813 ms\n"
28945
28946
#: serverguide/C/dns.xml:429(title)
28947
msgid "named-checkzone"
28948
msgstr "named-checkzone"
28949
28950
#: serverguide/C/dns.xml:430(para)
28951
msgid ""
28952
"A great way to test your zone files is by using the <application>named-"
28953
"checkzone</application> utility installed with the "
28954
"<application>bind9</application> package. This utility allows you to make "
28955
"sure the configuration is correct before restarting "
28956
"<application>BIND9</application> and making the changes live."
28957
msgstr ""
28958
"A great way to test your zone files is by using the <application>named-"
28959
"checkzone</application> utility installed with the "
28960
"<application>bind9</application> package. This utility allows you to make "
28961
"sure the configuration is correct before restarting "
28962
"<application>BIND9</application> and making the changes live."
28963
28964
#: serverguide/C/dns.xml:437(para)
28965
msgid ""
28966
"To test our example Forward zone file enter the following from a command "
28967
"prompt:"
28968
msgstr ""
28969
"To test our example Forward zone file enter the following from a command "
28970
"prompt:"
28971
28972
#: serverguide/C/dns.xml:441(command)
28973
msgid "named-checkzone example.com /etc/bind/db.example.com"
28974
msgstr "named-checkzone example.com /etc/bind/db.example.com"
28975
28976
#: serverguide/C/dns.xml:443(para)
28977
msgid ""
28978
"If everything is configured correctly you should see output similar to:"
28979
msgstr ""
28980
"If everything is configured correctly you should see output similar to:"
28981
28982
#: serverguide/C/dns.xml:446(programlisting)
28983
#, no-wrap
28984
msgid ""
28985
"\n"
28986
"zone example.com/IN: loaded serial 6\n"
28987
"OK\n"
28988
msgstr ""
28989
"\n"
28990
"zone example.com/IN: loaded serial 6\n"
28991
"OK\n"
28992
28993
#: serverguide/C/dns.xml:452(para)
28994
msgid "Similarly, to test the Reverse zone file enter the following:"
28995
msgstr "Similarly, to test the Reverse zone file enter the following:"
28996
28997
#: serverguide/C/dns.xml:456(command)
28998
msgid "named-checkzone example.com /etc/bind/db.192"
28999
msgstr "named-checkzone example.com /etc/bind/db.192"
29000
29001
#: serverguide/C/dns.xml:458(para)
29002
msgid "The output should be similar to:"
29003
msgstr "The output should be similar to:"
29004
29005
#: serverguide/C/dns.xml:461(programlisting)
29006
#, no-wrap
29007
msgid ""
29008
"\n"
29009
"zone example.com/IN: loaded serial 3\n"
29010
"OK\n"
29011
msgstr ""
29012
"\n"
29013
"zone example.com/IN: loaded serial 3\n"
29014
"OK\n"
29015
29016
#: serverguide/C/dns.xml:468(para)
29017
msgid ""
29018
"The <emphasis>Serial Number</emphasis> of your zone file will probably be "
29019
"different."
29020
msgstr ""
29021
"The <emphasis>Serial Number</emphasis> of your zone file will probably be "
29022
"different."
29023
29024
#: serverguide/C/dns.xml:475(title)
29025
msgid "Logging"
29026
msgstr "Logging"
29027
29028
#: serverguide/C/dns.xml:476(para)
29029
msgid ""
29030
"<application>BIND9</application> has a wide variety of logging configuration "
29031
"options available. There are two main options. The "
29032
"<emphasis>channel</emphasis> option configures where logs go, and the "
29033
"<emphasis>category</emphasis> option determines what information to log."
29034
msgstr ""
29035
"<application>BIND9</application> has a wide variety of logging configuration "
29036
"options available. There are two main options. The "
29037
"<emphasis>channel</emphasis> option configures where logs go, and the "
29038
"<emphasis>category</emphasis> option determines what information to log."
29039
29040
#: serverguide/C/dns.xml:480(para)
29041
msgid "If no logging option is configured the default option is:"
29042
msgstr "If no logging option is configured the default option is:"
29043
29044
#: serverguide/C/dns.xml:483(programlisting)
29045
#, no-wrap
29046
msgid ""
29047
"\n"
29048
"logging {\n"
29049
" category default { default_syslog; default_debug; };\n"
29050
" category unmatched { null; };\n"
29051
"};\n"
29052
msgstr ""
29053
"\n"
29054
"logging {\n"
29055
" category default { default_syslog; default_debug; };\n"
29056
" category unmatched { null; };\n"
29057
"};\n"
29058
29059
#: serverguide/C/dns.xml:489(para)
29060
msgid ""
29061
"This section covers configuring <application>BIND9</application> to send "
29062
"<emphasis>debug</emphasis> messages related to DNS queries to a separate "
29063
"file."
29064
msgstr ""
29065
"This section covers configuring <application>BIND9</application> to send "
29066
"<emphasis>debug</emphasis> messages related to DNS queries to a separate "
29067
"file."
29068
29069
#: serverguide/C/dns.xml:494(para)
29070
msgid ""
29071
"First, we need to configure a channel to specify which file to send the "
29072
"messages to. Edit <filename>/etc/bind/named.conf.local</filename> and add "
29073
"the following:"
29074
msgstr ""
29075
"First, we need to configure a channel to specify which file to send the "
29076
"messages to. Edit <filename>/etc/bind/named.conf.local</filename> and add "
29077
"the following:"
29078
29079
#: serverguide/C/dns.xml:498(programlisting)
29080
#, no-wrap
29081
msgid ""
29082
"\n"
29083
"logging {\n"
29084
" channel query.log { \n"
29085
" file \"/var/log/query.log\";\n"
29086
" severity debug 3; \n"
29087
" }; \n"
29088
"};\n"
29089
msgstr ""
29090
"\n"
29091
"logging {\n"
29092
" channel query.log { \n"
29093
" file \"/var/log/query.log\";\n"
29094
" severity debug 3; \n"
29095
" }; \n"
29096
"};\n"
29097
29098
#: serverguide/C/dns.xml:508(para)
29099
msgid "Next, configure a category to send all DNS queries to the query file:"
29100
msgstr ""
29101
"Next, configure a category to send all DNS queries to the query file:"
29102
29103
#: serverguide/C/dns.xml:511(programlisting)
29104
#, no-wrap
29105
msgid ""
29106
"\n"
29107
"logging {\n"
29108
" channel query.log { \n"
29109
" file \"/var/log/query.log\"; \n"
29110
" severity debug 3; \n"
29111
" }; \n"
29112
" <emphasis>category queries { query.log; };</emphasis> \n"
29113
"};\n"
29114
msgstr ""
29115
"\n"
29116
"logging {\n"
29117
" channel query.log { \n"
29118
" file \"/var/log/query.log\"; \n"
29119
" severity debug 3; \n"
29120
" }; \n"
29121
" <emphasis>category queries { query.log; };</emphasis> \n"
29122
"};\n"
29123
29124
#: serverguide/C/dns.xml:523(para)
29125
msgid ""
29126
"Note: the <emphasis>debug</emphasis> option can be set from 1 to 3. If a "
29127
"level isn't specified level 1 is the default."
29128
msgstr ""
29129
"Note: the <emphasis>debug</emphasis> option can be set from 1 to 3. If a "
29130
"level isn't specified level 1 is the default."
29131
29132
#: serverguide/C/dns.xml:529(para)
29133
msgid ""
29134
"Since the <emphasis>named daemon</emphasis> runs as the "
29135
"<emphasis>bind</emphasis> user the <filename>/var/log/query.log</filename> "
29136
"file must be created and the ownership changed:"
29137
msgstr ""
29138
"Since the <emphasis>named daemon</emphasis> runs as the "
29139
"<emphasis>bind</emphasis> user the <filename>/var/log/query.log</filename> "
29140
"file must be created and the ownership changed:"
29141
29142
#: serverguide/C/dns.xml:534(command)
29143
msgid "sudo touch /var/log/query.log"
29144
msgstr "sudo touch /var/log/query.log"
29145
29146
#: serverguide/C/dns.xml:535(command)
29147
msgid "sudo chown bind /var/log/query.log"
29148
msgstr "sudo chown bind /var/log/query.log"
29149
29150
#: serverguide/C/dns.xml:539(para)
29151
msgid ""
29152
"Before <application>named</application> daemon can write to the new log file "
29153
"the <application>AppArmor</application> profile must be updated. First, edit "
29154
"<filename>/etc/apparmor.d/usr.sbin.named</filename> and add:"
29155
msgstr ""
29156
"Before <application>named</application> daemon can write to the new log file "
29157
"the <application>AppArmor</application> profile must be updated. First, edit "
29158
"<filename>/etc/apparmor.d/usr.sbin.named</filename> and add:"
29159
29160
#: serverguide/C/dns.xml:543(programlisting)
29161
#, no-wrap
29162
msgid ""
29163
"\n"
29164
"/var/log/query.log w,\n"
29165
msgstr ""
29166
"\n"
29167
"/var/log/query.log w,\n"
29168
29169
#: serverguide/C/dns.xml:546(para)
29170
msgid "Next, reload the profile:"
29171
msgstr "Next, reload the profile:"
29172
29173
#: serverguide/C/dns.xml:550(command)
29174
msgid "cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r"
29175
msgstr "cat /etc/apparmor.d/usr.sbin.named | sudo apparmor_parser -r"
29176
29177
#: serverguide/C/dns.xml:552(para)
29178
msgid ""
29179
"For more information on <application>AppArmor</application> see <xref "
29180
"linkend=\"apparmor\"/>"
29181
msgstr ""
29182
"For more information on <application>AppArmor</application> see <xref "
29183
"linkend=\"apparmor\"/>"
29184
29185
#: serverguide/C/dns.xml:557(para)
29186
msgid ""
29187
"Now restart <application>BIND9</application> for the changes to take effect:"
29188
msgstr ""
29189
"Now restart <application>BIND9</application> for the changes to take effect:"
29190
29191
#: serverguide/C/dns.xml:565(para)
29192
msgid ""
29193
"You should see the file <filename>/var/log/query.log</filename> fill with "
29194
"query information. This is a simple example of the "
29195
"<application>BIND9</application> logging options. For coverage of advanced "
29196
"options see <xref linkend=\"dns-more-info\"/>."
29197
msgstr ""
29198
"You should see the file <filename>/var/log/query.log</filename> fill with "
29199
"query information. This is a simple example of the "
29200
"<application>BIND9</application> logging options. For coverage of advanced "
29201
"options see <xref linkend=\"dns-more-info\"/>."
29202
29203
#: serverguide/C/dns.xml:574(title)
29204
msgid "Common Record Types"
29205
msgstr "Common Record Types"
29206
29207
#: serverguide/C/dns.xml:575(para)
29208
msgid "This section covers some of the most common DNS record types."
29209
msgstr "This section covers some of the most common DNS record types."
29210
29211
#: serverguide/C/dns.xml:580(para)
29212
msgid ""
29213
"<emphasis>A</emphasis> record: This record maps an IP Address to a hostname."
29214
msgstr ""
29215
"<emphasis>A</emphasis> record: This record maps an IP Address to a hostname."
29216
29217
#: serverguide/C/dns.xml:583(programlisting)
29218
#, no-wrap
29219
msgid ""
29220
"\n"
29221
"www IN A 192.168.1.12\n"
29222
msgstr ""
29223
"\n"
29224
"www IN A 192.168.1.12\n"
29225
29226
#: serverguide/C/dns.xml:588(para)
29227
msgid ""
29228
"<emphasis>CNAME</emphasis> record: Used to create an alias to an existing A "
29229
"record. You cannot create a CNAME record pointing to another CNAME record."
29230
msgstr ""
29231
"<emphasis>CNAME</emphasis> record: Used to create an alias to an existing A "
29232
"record. You cannot create a CNAME record pointing to another CNAME record."
29233
29234
#: serverguide/C/dns.xml:591(programlisting)
29235
#, no-wrap
29236
msgid ""
29237
"\n"
29238
"web IN CNAME www\n"
29239
msgstr ""
29240
"\n"
29241
"web IN CNAME www\n"
29242
29243
#: serverguide/C/dns.xml:596(para)
29244
msgid ""
29245
"<emphasis>MX</emphasis> record: Used to define where email should be sent "
29246
"to. Must point to an A record, not a CNAME."
29247
msgstr ""
29248
"<emphasis>MX</emphasis> record: Used to define where e-mail should be sent "
29249
"to. Must point to an A record, not a CNAME."
29250
29251
#: serverguide/C/dns.xml:599(programlisting)
29252
#, no-wrap
29253
msgid ""
29254
"\n"
29255
" IN MX 1 mail.example.com.\n"
29256
"mail IN A 192.168.1.13\n"
29257
msgstr ""
29258
"\n"
29259
" IN MX 1 mail.example.com.\n"
29260
"mail IN A 192.168.1.13\n"
29261
29262
#: serverguide/C/dns.xml:605(para)
29263
msgid ""
29264
"<emphasis>NS</emphasis> record: Used to define which servers serve copies of "
29265
"a zone. It must point to an A record, not a CNAME. This is where Primary and "
29266
"Secondary servers are defined."
29267
msgstr ""
29268
"<emphasis>NS</emphasis> record: Used to define which servers serve copies of "
29269
"a zone. It must point to an A record, not a CNAME. This is where Primary and "
29270
"Secondary servers are defined."
29271
29272
#: serverguide/C/dns.xml:609(programlisting)
29273
#, no-wrap
29274
msgid ""
29275
"\n"
29276
" IN NS ns.example.com.\n"
29277
"\tIN NS ns2.example.com.\n"
29278
"ns IN A 192.168.1.10\n"
29279
"ns2\tIN A\t 192.168.1.11\n"
29280
msgstr ""
29281
"\n"
29282
" IN NS ns.example.com.\n"
29283
"\tIN NS ns2.example.com.\n"
29284
"ns IN A 192.168.1.10\n"
29285
"ns2\tIN A\t 192.168.1.11\n"
29286
29287
#: serverguide/C/dns.xml:622(para)
29288
msgid ""
29289
"The <ulink url=\"http://www.tldp.org/HOWTO/DNS-HOWTO.html\">DNS "
29290
"HOWTO</ulink> explains more advanced options for configuring BIND9."
29291
msgstr ""
29292
"The <ulink url=\"http://www.tldp.org/HOWTO/DNS-HOWTO.html\">DNS "
29293
"HOWTO</ulink> explains more advanced options for configuring BIND9."
29294
29295
#: serverguide/C/dns.xml:627(para)
29296
msgid ""
29297
"For in depth coverage of <emphasis>DNS</emphasis> and "
29298
"<application>BIND9</application> see <ulink "
29299
"url=\"http://www.bind9.net/\">Bind9.net</ulink>."
29300
msgstr ""
29301
"For in depth coverage of <emphasis>DNS</emphasis> and "
29302
"<application>BIND9</application> see <ulink "
29303
"url=\"http://www.bind9.net/\">Bind9.net</ulink>."
29304
29305
#: serverguide/C/dns.xml:632(para)
29306
msgid ""
29307
"<ulink url=\"http://www.oreilly.com/catalog/dns5/index.html\">DNS and "
29308
"BIND</ulink> is a popular book now in it's fifth edition."
29309
msgstr ""
29310
"<ulink url=\"http://www.oreilly.com/catalog/dns5/index.html\">DNS and "
29311
"BIND</ulink> is a popular book now in it's fifth edition."
29312
29313
#: serverguide/C/dns.xml:637(para)
29314
msgid ""
29315
"A great place to ask for <application>BIND9</application> assistance, and "
29316
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
29317
"server</emphasis> IRC channel on <ulink "
29318
"url=\"http://freenode.net\">freenode</ulink>."
29319
msgstr ""
29320
"A great place to ask for <application>BIND9</application> assistance, and "
29321
"get involved with the Ubuntu Server community, is the <emphasis>#ubuntu-"
29322
"server</emphasis> IRC channel on <ulink "
29323
"url=\"http://freenode.net\">freenode</ulink>."
29324
29325
#: serverguide/C/dns.xml:643(para)
29326
msgid ""
29327
"Also, see the <ulink "
29328
"url=\"https://help.ubuntu.com/community/BIND9ServerHowto\">BIND9 Server "
29329
"HOWTO</ulink> in the Ubuntu Wiki."
29330
msgstr ""
29331
29332
#: serverguide/C/databases.xml:13(title)
29333
msgid "Databases"
29334
msgstr "Databases"
29335
29336
#: serverguide/C/databases.xml:14(para)
29337
msgid "Ubuntu provides two popular database servers. They are:"
29338
msgstr "Ubuntu provides two popular database servers. They are:"
29339
29340
#: serverguide/C/databases.xml:22(application) serverguide/C/databases.xml:157(title)
29341
msgid "PostgreSQL"
29342
msgstr "PostgreSQL"
29343
29344
#: serverguide/C/databases.xml:25(para)
29345
msgid ""
29346
"They are available in the main repository. This section explains how to "
29347
"install and configure these database servers."
29348
msgstr ""
29349
"They are available in the main repository. This section explains how to "
29350
"install and configure these database servers."
29351
29352
#: serverguide/C/databases.xml:32(para)
29353
msgid ""
29354
"MySQL is a fast, multi-threaded, multi-user, and robust SQL database server. "
29355
"It is intended for mission-critical, heavy-load production systems as well "
29356
"as for embedding into mass-deployed software."
29357
msgstr ""
29358
"MySQL is a fast, multi-threaded, multi-user, and robust SQL database server. "
29359
"It is intended for mission-critical, heavy-load production systems as well "
29360
"as for embedding into mass-deployed software."
29361
29362
#: serverguide/C/databases.xml:41(para)
29363
msgid "To install MySQL, run the following command from a terminal prompt:"
29364
msgstr "To install MySQL, run the following command from a terminal prompt:"
29365
29366
#: serverguide/C/databases.xml:46(command)
29367
msgid "sudo apt-get install mysql-server"
29368
msgstr "sudo apt-get install mysql-server"
29369
29370
#: serverguide/C/databases.xml:48(para)
29371
msgid ""
29372
"During the installation process you will be prompted to enter a password for "
29373
"the <application>MySQL</application> root user."
29374
msgstr ""
29375
"During the installation process you will be prompted to enter a password for "
29376
"the <application>MySQL</application> root user."
29377
29378
#: serverguide/C/databases.xml:53(para)
29379
msgid ""
29380
"Once the installation is complete, the MySQL server should be started "
29381
"automatically. You can run the following command from a terminal prompt to "
29382
"check whether the MySQL server is running:"
29383
msgstr ""
29384
"Once the installation is complete, the MySQL server should be started "
29385
"automatically. You can run the following command from a terminal prompt to "
29386
"check whether the MySQL server is running:"
29387
29388
#: serverguide/C/databases.xml:61(command)
29389
msgid "sudo netstat -tap | grep mysql"
29390
msgstr "sudo netstat -tap | grep mysql"
29391
29392
#: serverguide/C/databases.xml:70(programlisting)
29393
#, no-wrap
29394
msgid ""
29395
"\n"
29396
"tcp 0 0 localhost:mysql *:* LISTEN "
29397
" 2556/mysqld\n"
29398
msgstr ""
29399
"\n"
29400
"tcp 0 0 localhost:mysql *:* LISTEN "
29401
" 2556/mysqld\n"
29402
29403
#: serverguide/C/databases.xml:74(para)
29404
msgid ""
29405
"If the server is not running correctly, you can type the following command "
29406
"to start it:"
29407
msgstr ""
29408
"If the server is not running correctly, you can type the following command "
29409
"to start it:"
29410
29411
#: serverguide/C/databases.xml:79(command) serverguide/C/databases.xml:104(command)
29412
msgid "sudo /etc/init.d/mysql restart"
29413
msgstr "sudo /etc/init.d/mysql restart"
29414
29415
#: serverguide/C/databases.xml:85(para)
29416
msgid ""
29417
"You can edit the <filename>/etc/mysql/my.cnf</filename> file to configure "
29418
"the basic settings -- log file, port number, etc. For example, to configure "
29419
"<application>MySQL</application> to listen for connections from network "
29420
"hosts, change the <emphasis>bind-address</emphasis> directive to the "
29421
"server's IP address:"
29422
msgstr ""
29423
29424
#: serverguide/C/databases.xml:91(programlisting)
29425
#, no-wrap
29426
msgid ""
29427
"\n"
29428
"bind-address = 192.168.0.5\n"
29429
msgstr ""
29430
"\n"
29431
"bind-address = 192.168.0.5\n"
29432
29433
#: serverguide/C/databases.xml:95(para)
29434
msgid "Replace 192.168.0.5 with the appropriate address."
29435
msgstr "Replace 192.168.0.5 with the appropriate address."
29436
29437
#: serverguide/C/databases.xml:99(para)
29438
msgid ""
29439
"After making a change to <filename>/etc/mysql/my.cnf</filename> the "
29440
"<application>mysql</application> daemon will need to be restarted:"
29441
msgstr ""
29442
"After making a change to <filename>/etc/mysql/my.cnf</filename> the "
29443
"<application>mysql</application> daemon will need to be restarted:"
29444
29445
#: serverguide/C/databases.xml:107(para)
29446
msgid ""
29447
"If you would like to change the "
29448
"<application>MySQL</application><emphasis>root</emphasis> password, in a "
29449
"terminal enter:"
29450
msgstr ""
29451
"If you would like to change the "
29452
"<application>MySQL</application><emphasis>root</emphasis> password, in a "
29453
"terminal enter:"
29454
29455
#: serverguide/C/databases.xml:113(command)
29456
msgid "sudo dpkg-reconfigure mysql-server-5.1"
29457
msgstr ""
29458
29459
#: serverguide/C/databases.xml:116(para)
29460
msgid ""
29461
"The <application>mysql</application> daemon will be stopped, and you will be "
29462
"prompted to enter a new password."
29463
msgstr ""
29464
"The <application>mysql</application> daemon will be stopped, and you will be "
29465
"prompted to enter a new password."
29466
29467
#: serverguide/C/databases.xml:125(para)
29468
msgid ""
29469
"See the <ulink url=\"http://www.mysql.com/\">MySQL Home Page</ulink> for "
29470
"more information."
29471
msgstr ""
29472
"See the <ulink url=\"http://www.mysql.com/\">MySQL Home Page</ulink> for "
29473
"more information."
29474
29475
#: serverguide/C/databases.xml:130(para)
29476
msgid ""
29477
"The <emphasis>MySQL Handbook</emphasis> is also available in the "
29478
"<application>mysql-doc-5.0</application> package. To install the package "
29479
"enter the following in a terminal:"
29480
msgstr ""
29481
"The <emphasis>MySQL Handbook</emphasis> is also available in the "
29482
"<application>mysql-doc-5.0</application> package. To install the package "
29483
"enter the following in a terminal:"
29484
29485
#: serverguide/C/databases.xml:135(command)
29486
msgid "sudo apt-get install mysql-doc-5.0"
29487
msgstr "sudo apt-get install mysql-doc-5.0"
29488
29489
#: serverguide/C/databases.xml:137(para)
29490
msgid ""
29491
"The documentation is in HTML format, to view them enter "
29492
"<command>file:///usr/share/doc/mysql-doc-5.0/refman-5.0-en.html-"
29493
"chapter/index.html</command> in your browser's address bar."
29494
msgstr ""
29495
"The documentation is in HTML format, to view them enter "
29496
"<command>file:///usr/share/doc/mysql-doc-5.0/refman-5.0-en.html-"
29497
"chapter/index.html</command> in your browser's address bar."
29498
29499
#: serverguide/C/databases.xml:143(para) serverguide/C/databases.xml:290(para)
29500
msgid ""
29501
"For general SQL information see <ulink "
29502
"url=\"http://www.informit.com/store/product.aspx?isbn=0768664128\">Using SQL "
29503
"Special Edition</ulink> by Rafe Colburn."
29504
msgstr ""
29505
"For general SQL information see <ulink "
29506
"url=\"http://www.informit.com/store/product.aspx?isbn=0768664128\">Using SQL "
29507
"Special Edition</ulink> by Rafe Colburn."
29508
29509
#: serverguide/C/databases.xml:149(para)
29510
msgid ""
29511
"The <ulink url=\"https://help.ubuntu.com/community/ApacheMySQLPHP\">Apache "
29512
"MySQL PHP Ubuntu Wiki</ulink> page also has useful information."
29513
msgstr ""
29514
29515
#: serverguide/C/databases.xml:158(para)
29516
msgid ""
29517
"PostgreSQL is an object-relational database system that has the features of "
29518
"traditional commercial database systems with enhancements to be found in "
29519
"next-generation DBMS systems."
29520
msgstr ""
29521
"PostgreSQL is an object-relational database system that has the features of "
29522
"traditional commercial database systems with enhancements to be found in "
29523
"next-generation DBMS systems."
29524
29525
#: serverguide/C/databases.xml:165(para)
29526
msgid ""
29527
"To install PostgreSQL, run the following command in the command prompt:"
29528
msgstr ""
29529
"To install PostgreSQL, run the following command in the command prompt:"
29530
29531
#: serverguide/C/databases.xml:172(command)
29532
msgid "sudo apt-get install postgresql"
29533
msgstr "sudo apt-get install postgresql"
29534
29535
#: serverguide/C/databases.xml:176(para)
29536
msgid ""
29537
"Once the installation is complete, you should configure the PostgreSQL "
29538
"server based on your needs, although the default configuration is viable."
29539
msgstr ""
29540
"Once the installation is complete, you should configure the PostgreSQL "
29541
"server based on your needs, although the default configuration is viable."
29542
29543
#: serverguide/C/databases.xml:184(para)
29544
msgid ""
29545
"By default, connection via TCP/IP is disabled. PostgreSQL supports multiple "
29546
"client authentication methods. By default, IDENT authentication method is "
29547
"used for <application>postgres</application> and local users. Please refer "
29548
"<ulink url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the "
29549
"PostgreSQL Administrator's Guide</ulink>."
29550
msgstr ""
29551
"By default, connection via TCP/IP is disabled. PostgreSQL supports multiple "
29552
"client authentication methods. By default, IDENT authentication method is "
29553
"used for <application>postgres</application> and local users. Please refer "
29554
"<ulink url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the "
29555
"PostgreSQL Administrator's Guide</ulink>."
29556
29557
#: serverguide/C/databases.xml:191(para)
29558
msgid ""
29559
"The following discussion assumes that you wish to enable TCP/IP connections "
29560
"and use the MD5 method for client authentication. PostgreSQL configuration "
29561
"files are stored in the "
29562
"<filename>/etc/postgresql/<version>/main</filename> directory. For "
29563
"example, if you install PostgreSQL 8.4, the configuration files are stored "
29564
"in the <filename>/etc/postgresql/8.4/main</filename> directory."
29565
msgstr ""
29566
"The following discussion assumes that you wish to enable TCP/IP connections "
29567
"and use the MD5 method for client authentication. PostgreSQL configuration "
29568
"files are stored in the "
29569
"<filename>/etc/postgresql/<version>/main</filename> directory. For "
29570
"example, if you install PostgreSQL 8.4, the configuration files are stored "
29571
"in the <filename>/etc/postgresql/8.4/main</filename> directory."
29572
29573
#: serverguide/C/databases.xml:201(para)
29574
msgid ""
29575
"To configure <emphasis>ident</emphasis> authentication, add entries to the "
29576
"<filename>/etc/postgresql/8.4/main/pg_ident.conf</filename> file."
29577
msgstr ""
29578
"To configure <emphasis>ident</emphasis> authentication, add entries to the "
29579
"<filename>/etc/postgresql/8.4/main/pg_ident.conf</filename> file."
29580
29581
#: serverguide/C/databases.xml:208(para)
29582
msgid ""
29583
"To enable TCP/IP connections, edit the file "
29584
"<filename>/etc/postgresql/8.4/main/postgresql.conf</filename>"
29585
msgstr ""
29586
"To enable TCP/IP connections, edit the file "
29587
"<filename>/etc/postgresql/8.4/main/postgresql.conf</filename>"
29588
29589
#: serverguide/C/databases.xml:210(para)
29590
msgid ""
29591
"Locate the line <emphasis>#listen_addresses = 'localhost'</emphasis> and "
29592
"change it to:"
29593
msgstr ""
29594
"Locate the line <emphasis>#listen_addresses = 'localhost'</emphasis> and "
29595
"change it to:"
29596
29597
#: serverguide/C/databases.xml:213(programlisting)
29598
#, no-wrap
29599
msgid ""
29600
"\n"
29601
"listen_addresses = 'localhost'\n"
29602
msgstr ""
29603
"\n"
29604
"listen_addresses = 'localhost'\n"
29605
29606
#: serverguide/C/databases.xml:217(para)
29607
msgid ""
29608
"To allow other computers to connect to your "
29609
"<application>PostgreSQL</application> server replace 'localhost' with the "
29610
"<emphasis>IP Address</emphasis> of your server."
29611
msgstr ""
29612
"To allow other computers to connect to your "
29613
"<application>PostgreSQL</application> server replace 'localhost' with the "
29614
"<emphasis>IP Address</emphasis> of your server."
29615
29616
#: serverguide/C/databases.xml:222(para)
29617
msgid ""
29618
"You may also edit all other parameters, if you know what you are doing! For "
29619
"details, refer to the configuration file or to the PostgreSQL documentation."
29620
msgstr ""
29621
"You may also edit all other parameters, if you know what you are doing! For "
29622
"details, refer to the configuration file or to the PostgreSQL documentation."
29623
29624
#: serverguide/C/databases.xml:227(para)
29625
msgid ""
29626
"Now that we can connect to our <application>PostgreSQL</application> server, "
29627
"the next step is to set a password for the <emphasis>postgres</emphasis> "
29628
"user. Run the following command at a terminal prompt to connect to the "
29629
"default PostgreSQL template database:"
29630
msgstr ""
29631
"Now that we can connect to our <application>PostgreSQL</application> server, "
29632
"the next step is to set a password for the <emphasis>postgres</emphasis> "
29633
"user. Run the following command at a terminal prompt to connect to the "
29634
"default PostgreSQL template database:"
29635
29636
#: serverguide/C/databases.xml:234(command)
29637
msgid "sudo -u postgres psql template1"
29638
msgstr "sudo -u postgres psql template1"
29639
29640
#: serverguide/C/databases.xml:236(para)
29641
msgid ""
29642
"The above command connects to PostgreSQL database "
29643
"<emphasis>template1</emphasis> as user <emphasis>postgres</emphasis>. Once "
29644
"you connect to the PostgreSQL server, you will be at a SQL prompt. You can "
29645
"run the following SQL command at the <application>psql</application> prompt "
29646
"to configure the password for the user <emphasis "
29647
"role=\"italics\">postgres</emphasis>."
29648
msgstr ""
29649
"The above command connects to PostgreSQL database "
29650
"<emphasis>template1</emphasis> as user <emphasis>postgres</emphasis>. Once "
29651
"you connect to the PostgreSQL server, you will be at a SQL prompt. You can "
29652
"run the following SQL command at the <application>psql</application> prompt "
29653
"to configure the password for the user <emphasis "
29654
"role=\"italics\">postgres</emphasis>."
29655
29656
#: serverguide/C/databases.xml:244(command)
29657
msgid "ALTER USER postgres with encrypted password 'your_password';"
29658
msgstr "ALTER USER postgres with encrypted password 'your_password';"
29659
29660
#: serverguide/C/databases.xml:246(para)
29661
msgid ""
29662
"After configuring the password, edit the file "
29663
"<filename>/etc/postgresql/8.4/main/pg_hba.conf</filename> to use "
29664
"<emphasis>MD5</emphasis> authentication with the "
29665
"<emphasis>postgres</emphasis> user:"
29666
msgstr ""
29667
"After configuring the password, edit the file "
29668
"<filename>/etc/postgresql/8.4/main/pg_hba.conf</filename> to use "
29669
"<emphasis>MD5</emphasis> authentication with the "
29670
"<emphasis>postgres</emphasis> user:"
29671
29672
#: serverguide/C/databases.xml:252(programlisting)
29673
#, no-wrap
29674
msgid ""
29675
"\n"
29676
"local all postgres md5\n"
29677
msgstr ""
29678
"\n"
29679
"local all postgres md5\n"
29680
29681
#: serverguide/C/databases.xml:256(para)
29682
msgid ""
29683
"Finally, you should restart the <application>PostgreSQL</application> "
29684
"service to initialize the new configuration. From a terminal prompt enter "
29685
"the following to restart <application>PostgreSQL</application>:"
29686
msgstr ""
29687
"Finally, you should restart the <application>PostgreSQL</application> "
29688
"service to initialise the new configuration. From a terminal prompt enter "
29689
"the following to restart <application>PostgreSQL</application>:"
29690
29691
#: serverguide/C/databases.xml:262(command)
29692
msgid "sudo /etc/init.d/postgresql-8.4 restart"
29693
msgstr "sudo /etc/init.d/postgresql-8.4 restart"
29694
29695
#: serverguide/C/databases.xml:265(para)
29696
msgid ""
29697
"The above configuration is not complete by any means. Please refer <ulink "
29698
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the PostgreSQL "
29699
"Administrator's Guide</ulink> to configure more parameters."
29700
msgstr ""
29701
"The above configuration is not complete by any means. Please refer <ulink "
29702
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\"> the PostgreSQL "
29703
"Administrator's Guide</ulink> to configure more parameters."
29704
29705
#: serverguide/C/databases.xml:276(para)
29706
msgid ""
29707
"As mentioned above the <ulink "
29708
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\">Administrator's "
29709
"Guide</ulink> is an excellent resource. The guide is also available in the "
29710
"<application>postgresql-doc-8.4</application> package. Execute the following "
29711
"in a terminal to install the package:"
29712
msgstr ""
29713
"As mentioned above the <ulink "
29714
"url=\"http://www.postgresql.org/docs/8.4/static/admin.html\">Administrator's "
29715
"Guide</ulink> is an excellent resource. The guide is also available in the "
29716
"<application>postgresql-doc-8.4</application> package. Execute the following "
29717
"in a terminal to install the package:"
29718
29719
#: serverguide/C/databases.xml:282(command)
29720
msgid "sudo apt-get install postgresql-doc-8.4"
29721
msgstr "sudo apt-get install postgresql-doc-8.4"
29722
29723
#: serverguide/C/databases.xml:284(para)
29724
msgid ""
29725
"To view the guide enter <command>file:///usr/share/doc/postgresql-doc-"
29726
"8.4/html/index.html</command> into the address bar of your browser."
29727
msgstr ""
29728
"To view the guide enter <command>file:///usr/share/doc/postgresql-doc-"
29729
"8.4/html/index.html</command> into the address bar of your browser."
29730
29731
#: serverguide/C/databases.xml:296(para)
29732
msgid ""
29733
"Also, see the <ulink "
29734
"url=\"https://help.ubuntu.com/community/PostgreSQL\">PostgreSQL Ubuntu "
29735
"Wiki</ulink> page for more information."
29736
msgstr ""
29737
29738
#: serverguide/C/clustering.xml:13(title)
29739
msgid "Clustering"
29740
msgstr "Clustering"
29741
29742
#: serverguide/C/clustering.xml:16(title)
29743
msgid "DRBD"
29744
msgstr "DRBD"
29745
29746
#: serverguide/C/clustering.xml:18(para)
29747
msgid ""
29748
"Distributed Replicated Block Device (DRBD) mirrors block devices between "
29749
"multiple hosts. The replication is transparent to other applications on the "
29750
"host systems. Any block device hard disks, partitions, RAID devices, logical "
29751
"volumes, etc can be mirrored."
29752
msgstr ""
29753
"Distributed Replicated Block Device (DRBD) mirrors block devices between "
29754
"multiple hosts. The replication is transparent to other applications on the "
29755
"host systems. Any block device hard disks, partitions, RAID devices, logical "
29756
"volumes, etc can be mirrored."
29757
29758
#: serverguide/C/clustering.xml:24(para)
29759
msgid ""
29760
"To get started using <application>drbd</application>, first install the "
29761
"necessary packages. From a terminal enter:"
29762
msgstr ""
29763
"To get started using <application>drbd</application>, first install the "
29764
"necessary packages. From a terminal enter:"
29765
29766
#: serverguide/C/clustering.xml:29(command)
29767
msgid "sudo apt-get install drbd8-utils"
29768
msgstr "sudo apt-get install drbd8-utils"
29769
29770
#: serverguide/C/clustering.xml:33(para)
29771
msgid ""
29772
"If you are using the <emphasis>virtual kernel</emphasis> as part of a "
29773
"virtual machine you will need to manually compile the "
29774
"<application>drbd</application> module. It may be easier to install the "
29775
"<application>linux-server</application> package inside the virtual machine."
29776
msgstr ""
29777
"If you are using the <emphasis>virtual kernel</emphasis> as part of a "
29778
"virtual machine you will need to manually compile the "
29779
"<application>drbd</application> module. It may be easier to install the "
29780
"<application>linux-server</application> package inside the virtual machine."
29781
29782
#: serverguide/C/clustering.xml:40(para)
29783
msgid ""
29784
"This section covers setting up a <application>drbd</application> to "
29785
"replicate a separate <filename>/srv</filename> partition, with an "
29786
"<application>ext3</application> filesystem between two hosts. The partition "
29787
"size is not particularly relevant, but both partitions need to be the same "
29788
"size."
29789
msgstr ""
29790
"This section covers setting up a <application>drbd</application> to "
29791
"replicate a separate <filename>/srv</filename> partition, with an "
29792
"<application>ext3</application> filesystem between two hosts. The partition "
29793
"size is not particularly relevant, but both partitions need to be the same "
29794
"size."
29795
29796
#: serverguide/C/clustering.xml:49(para)
29797
msgid ""
29798
"The two hosts in this example will be called <emphasis>drbd01</emphasis> and "
29799
"<emphasis>drbd02</emphasis>. They will need to have name resolution "
29800
"configured either through DNS or the <filename>/etc/hosts</filename> file. "
29801
"See <xref linkend=\"dns\"/> for details."
29802
msgstr ""
29803
"The two hosts in this example will be called <emphasis>drbd01</emphasis> and "
29804
"<emphasis>drbd02</emphasis>. They will need to have name resolution "
29805
"configured either through DNS or the <filename>/etc/hosts</filename> file. "
29806
"See <xref linkend=\"dns\"/> for details."
29807
29808
#: serverguide/C/clustering.xml:57(para)
29809
msgid ""
29810
"To configure <application>drbd</application>, on the first host edit "
29811
"<filename>/etc/drbd.conf</filename>:"
29812
msgstr ""
29813
"To configure <application>drbd</application>, on the first host edit "
29814
"<filename>/etc/drbd.conf</filename>:"
29815
29816
#: serverguide/C/clustering.xml:61(programlisting)
29817
#, no-wrap
29818
msgid ""
29819
"\n"
29820
"global { usage-count no; }\n"
29821
"common { syncer { rate 100M; } }\n"
29822
"resource r0 {\n"
29823
" protocol C;\n"
29824
" startup {\n"
29825
" wfc-timeout 15;\n"
29826
" degr-wfc-timeout 60;\n"
29827
" }\n"
29828
" net {\n"
29829
" cram-hmac-alg sha1;\n"
29830
" shared-secret \"secret\";\n"
29831
" }\n"
29832
" on drbd01 {\n"
29833
" device /dev/drbd0;\n"
29834
" disk /dev/sdb1;\n"
29835
" address 192.168.0.1:7788;\n"
29836
" meta-disk internal;\n"
29837
" }\n"
29838
" on drbd02 {\n"
29839
" device /dev/drbd0;\n"
29840
" disk /dev/sdb1;\n"
29841
" address 192.168.0.2:7788;\n"
29842
" meta-disk internal;\n"
29843
" }\n"
29844
"} \n"
29845
msgstr ""
29846
"\n"
29847
"global { usage-count no; }\n"
29848
"common { syncer { rate 100M; } }\n"
29849
"resource r0 {\n"
29850
" protocol C;\n"
29851
" startup {\n"
29852
" wfc-timeout 15;\n"
29853
" degr-wfc-timeout 60;\n"
29854
" }\n"
29855
" net {\n"
29856
" cram-hmac-alg sha1;\n"
29857
" shared-secret \"secret\";\n"
29858
" }\n"
29859
" on drbd01 {\n"
29860
" device /dev/drbd0;\n"
29861
" disk /dev/sdb1;\n"
29862
" address 192.168.0.1:7788;\n"
29863
" meta-disk internal;\n"
29864
" }\n"
29865
" on drbd02 {\n"
29866
" device /dev/drbd0;\n"
29867
" disk /dev/sdb1;\n"
29868
" address 192.168.0.2:7788;\n"
29869
" meta-disk internal;\n"
29870
" }\n"
29871
"} \n"
29872
29873
#: serverguide/C/clustering.xml:90(para)
29874
msgid ""
29875
"There are many other options in <filename>/etc/drbd.conf</filename>, but for "
29876
"this example their default values are fine."
29877
msgstr ""
29878
"There are many other options in <filename>/etc/drbd.conf</filename>, but for "
29879
"this example their default values are fine."
29880
29881
#: serverguide/C/clustering.xml:98(para)
29882
msgid "Now copy <filename>/etc/drbd.conf</filename> to the second host:"
29883
msgstr "Now copy <filename>/etc/drbd.conf</filename> to the second host:"
29884
29885
#: serverguide/C/clustering.xml:103(command)
29886
msgid "scp /etc/drbd.conf drbd02:~"
29887
msgstr "scp /etc/drbd.conf drbd02:~"
29888
29889
#: serverguide/C/clustering.xml:109(para)
29890
msgid ""
29891
"And, on <emphasis>drbd02</emphasis> move the file to "
29892
"<filename>/etc</filename>:"
29893
msgstr ""
29894
"And, on <emphasis>drbd02</emphasis> move the file to "
29895
"<filename>/etc</filename>:"
29896
29897
#: serverguide/C/clustering.xml:114(command)
29898
msgid "sudo mv drbd.conf /etc/"
29899
msgstr "sudo mv drbd.conf /etc/"
29900
29901
#: serverguide/C/clustering.xml:120(para)
29902
msgid ""
29903
"Next, on both hosts, start the <application>drbd</application> daemon:"
29904
msgstr ""
29905
"Next, on both hosts, start the <application>drbd</application> daemon:"
29906
29907
#: serverguide/C/clustering.xml:125(command)
29908
msgid "sudo /etc/init.d/drbd start"
29909
msgstr "sudo /etc/init.d/drbd start"
29910
29911
#: serverguide/C/clustering.xml:131(para)
29912
msgid ""
29913
"Now using the <application>drbdadm</application> utility initialize the meta "
29914
"data storage. On each server execute:"
29915
msgstr ""
29916
"Now using the <application>drbdadm</application> utility initialise the meta "
29917
"data storage. On each server execute:"
29918
29919
#: serverguide/C/clustering.xml:137(command)
29920
msgid "sudo drbdadm create-md r0"
29921
msgstr "sudo drbdadm create-md r0"
29922
29923
#: serverguide/C/clustering.xml:143(para)
29924
msgid ""
29925
"On the <emphasis>drbd01</emphasis>, or whichever host you wish to be the "
29926
"primary, enter the following:"
29927
msgstr ""
29928
"On the <emphasis>drbd01</emphasis>, or whichever host you wish to be the "
29929
"primary, enter the following:"
29930
29931
#: serverguide/C/clustering.xml:148(command)
29932
msgid "sudo drbdadm -- --overwrite-data-of-peer primary all"
29933
msgstr "sudo drbdadm -- --overwrite-data-of-peer primary all"
29934
29935
#: serverguide/C/clustering.xml:154(para)
29936
msgid ""
29937
"After executing the above command, the data will start syncing with the "
29938
"secondary host. To watch the progresss, on <emphasis>drbd02</emphasis> enter "
29939
"the following:"
29940
msgstr ""
29941
"After executing the above command, the data will start syncing with the "
29942
"secondary host. To watch the progresss, on <emphasis>drbd02</emphasis> enter "
29943
"the following:"
29944
29945
#: serverguide/C/clustering.xml:160(command)
29946
msgid "watch -n1 cat /proc/drbd"
29947
msgstr "watch -n1 cat /proc/drbd"
29948
29949
#: serverguide/C/clustering.xml:163(para)
29950
msgid "To stop watching the output press <emphasis>Ctrl+c</emphasis>."
29951
msgstr "To stop watching the output press <emphasis>Ctrl+c</emphasis>."
29952
29953
#: serverguide/C/clustering.xml:170(para)
29954
msgid ""
29955
"Finally, add a filesystem to <filename>/dev/drbd0</filename> and mount it:"
29956
msgstr ""
29957
"Finally, add a filesystem to <filename>/dev/drbd0</filename> and mount it:"
29958
29959
#: serverguide/C/clustering.xml:175(command)
29960
msgid "sudo mkfs.ext3 /dev/drbd0"
29961
msgstr "sudo mkfs.ext3 /dev/drbd0"
29962
29963
#: serverguide/C/clustering.xml:176(command) serverguide/C/clustering.xml:224(command)
29964
msgid "sudo mount /dev/drbd0 /srv"
29965
msgstr "sudo mount /dev/drbd0 /srv"
29966
29967
#: serverguide/C/clustering.xml:186(para)
29968
msgid ""
29969
"To test that the data is actually syncing between the hosts copy some files "
29970
"on the <emphasis>drbd01</emphasis>, the primary, to "
29971
"<filename>/srv</filename>:"
29972
msgstr ""
29973
"To test that the data is actually syncing between the hosts copy some files "
29974
"on the <emphasis>drbd01</emphasis>, the primary, to "
29975
"<filename>/srv</filename>:"
29976
29977
#: serverguide/C/clustering.xml:195(para)
29978
msgid "Next, unmount <filename>/srv</filename>:"
29979
msgstr "Next, unmount <filename>/srv</filename>:"
29980
29981
#: serverguide/C/clustering.xml:203(para)
29982
msgid ""
29983
"<emphasis>Demote</emphasis> the <emphasis>primary</emphasis> server to the "
29984
"<emphasis>secondary</emphasis> role:"
29985
msgstr ""
29986
"<emphasis>Demote</emphasis> the <emphasis>primary</emphasis> server to the "
29987
"<emphasis>secondary</emphasis> role:"
29988
29989
#: serverguide/C/clustering.xml:208(command)
29990
msgid "sudo drbdadm secondary r0"
29991
msgstr "sudo drbdadm secondary r0"
29992
29993
#: serverguide/C/clustering.xml:211(para)
29994
msgid ""
29995
"Now on the <emphasis>secondary</emphasis> server "
29996
"<emphasis>promote</emphasis> it to the <emphasis>primary</emphasis> role:"
29997
msgstr ""
29998
"Now on the <emphasis>secondary</emphasis> server "
29999
"<emphasis>promote</emphasis> it to the <emphasis>primary</emphasis> role:"
30000
30001
#: serverguide/C/clustering.xml:216(command)
30002
msgid "sudo drbdadm primary r0"
30003
msgstr "sudo drbdadm primary r0"
30004
30005
#: serverguide/C/clustering.xml:219(para)
30006
msgid "Lastly, mount the partition:"
30007
msgstr "Lastly, mount the partition:"
30008
30009
#: serverguide/C/clustering.xml:227(para)
30010
msgid ""
30011
"Using <emphasis>ls</emphasis> you should see "
30012
"<filename>/srv/default</filename> copied from the former "
30013
"<emphasis>primary</emphasis> host <emphasis>drbd01</emphasis>."
30014
msgstr ""
30015
"Using <emphasis>ls</emphasis> you should see "
30016
"<filename>/srv/default</filename> copied from the former "
30017
"<emphasis>primary</emphasis> host <emphasis>drbd01</emphasis>."
30018
30019
#: serverguide/C/clustering.xml:238(para)
30020
msgid ""
30021
"For more information on <application>DRBD</application> see the <ulink "
30022
"url=\"http://www.drbd.org/\">DRBD web site</ulink>."
30023
msgstr ""
30024
"For more information on <application>DRBD</application> see the <ulink "
30025
"url=\"http://www.drbd.org/\">DRBD web site</ulink>."
30026
30027
#: serverguide/C/clustering.xml:243(para)
30028
msgid ""
30029
"The <ulink "
30030
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man5/drbd.conf.5.html\">dr"
30031
"bd.conf man page</ulink> contains details on the options not covered in this "
30032
"guide."
30033
msgstr ""
30034
30035
#: serverguide/C/clustering.xml:249(para)
30036
msgid ""
30037
"Also, see the <ulink "
30038
"url=\"http://manpages.ubuntu.com/manpages/lucid/en/man8/drbdadm.8.html\">drbd"
30039
"adm man page</ulink>."
30040
msgstr ""
30041
30042
#: serverguide/C/clustering.xml:254(para)
30043
msgid ""
30044
"The <ulink url=\"https://help.ubuntu.com/community/DRBD\">DRBD Ubuntu "
30045
"Wiki</ulink> page also has more information."
30046
msgstr ""
30047
30048
#: serverguide/C/chat.xml:13(title)
30049
msgid "Chat Applications"
30050
msgstr "Chat Applications"
30051
30052
#: serverguide/C/chat.xml:19(para)
30053
msgid ""
30054
"In this section, we will discuss how to install and configure a IRC server, "
30055
"<application>ircd-irc2</application>. We will also discuss how to install "
30056
"and configure Jabber, an instance messaging server."
30057
msgstr ""
30058
"In this section, we will discuss how to install and configure a IRC server, "
30059
"<application>ircd-irc2</application>. We will also discuss how to install "
30060
"and configure Jabber, an instance messaging server."
30061
30062
#: serverguide/C/chat.xml:28(title)
30063
msgid "IRC Server"
30064
msgstr "IRC Server"
30065
30066
#: serverguide/C/chat.xml:30(para)
30067
msgid ""
30068
"The Ubuntu repository has many Internet Relay Chat servers. This section "
30069
"explains how to install and configure the original IRC server "
30070
"<application>ircd-irc2</application>."
30071
msgstr ""
30072
"The Ubuntu repository has many Internet Relay Chat servers. This section "
30073
"explains how to install and configure the original IRC server "
30074
"<application>ircd-irc2</application>."
30075
30076
#: serverguide/C/chat.xml:39(para)
30077
msgid ""
30078
"To install <application>ircd-irc2</application>, run the following command "
30079
"in the command prompt:"
30080
msgstr ""
30081
"To install <application>ircd-irc2</application>, run the following command "
30082
"in the command prompt:"
30083
30084
#: serverguide/C/chat.xml:45(command)
30085
msgid "sudo apt-get install ircd-irc2"
30086
msgstr "sudo apt-get install ircd-irc2"
30087
30088
#: serverguide/C/chat.xml:48(para)
30089
msgid ""
30090
"The configuration files are stored in <filename>/etc/ircd</filename> "
30091
"directory. The documents are available in <filename>/usr/share/doc/ircd-"
30092
"irc2</filename> directory."
30093
msgstr ""
30094
"The configuration files are stored in <filename>/etc/ircd</filename> "
30095
"directory. The documents are available in <filename>/usr/share/doc/ircd-"
30096
"irc2</filename> directory."
30097
30098
#: serverguide/C/chat.xml:59(para)
30099
msgid ""
30100
"The IRC settings can be done in the configuration file "
30101
"<filename>/etc/ircd/ircd.conf</filename>. You can set the IRC host name in "
30102
"this file by editing the following line:"
30103
msgstr ""
30104
"The IRC settings can be done in the configuration file "
30105
"<filename>/etc/ircd/ircd.conf</filename>. You can set the IRC host name in "
30106
"this file by editing the following line:"
30107
30108
#: serverguide/C/chat.xml:64(programlisting)
30109
#, no-wrap
30110
msgid ""
30111
"\n"
30112
"M:irc.localhost::Debian ircd default configuration::000A\n"
30113
msgstr ""
30114
"\n"
30115
"M:irc.localhost::Debian ircd default configuration::000A\n"
30116
30117
#: serverguide/C/chat.xml:68(para)
30118
msgid ""
30119
"Please make sure you add DNS aliases for the IRC host name. For instance, if "
30120
"you set irc.livecipher.com as IRC host name, please make sure "
30121
"irc.livecipher.com is resolvable in your Domain Name Server. The IRC host "
30122
"name should not be same as the host name."
30123
msgstr ""
30124
"Please make sure you add DNS aliases for the IRC host name. For instance, if "
30125
"you set irc.livecipher.com as IRC host name, please make sure "
30126
"irc.livecipher.com is resolvable in your Domain Name Server. The IRC host "
30127
"name should not be same as the host name."
30128
30129
#: serverguide/C/chat.xml:75(para)
30130
msgid ""
30131
"The IRC admin details can be configured by editting the following line:"
30132
msgstr ""
30133
"The IRC admin details can be configured by editting the following line:"
30134
30135
#: serverguide/C/chat.xml:80(programlisting)
30136
#, no-wrap
30137
msgid ""
30138
"\n"
30139
"A:Organization, IRC dept.:Daemon <ircd@example.irc.org>:Client "
30140
"Server::IRCnet:\n"
30141
msgstr ""
30142
"\n"
30143
"A:Organisation, IRC dept.:Daemon <ircd@example.irc.org>:Client "
30144
"Server::IRCnet:\n"
30145
30146
#: serverguide/C/chat.xml:84(para)
30147
msgid ""
30148
"You should add specific lines to configure the list of IRC ports to listen "
30149
"on, to configure Operator credentials, to configure client authentication, "
30150
"etc. For details, please refer to the example configuration file "
30151
"<filename>/usr/share/doc/ircd-irc2/ircd.conf.example.gz</filename>."
30152
msgstr ""
30153
"You should add specific lines to configure the list of IRC ports to listen "
30154
"on, to configure Operator credentials, to configure client authentication, "
30155
"etc. For details, please refer to the example configuration file "
30156
"<filename>/usr/share/doc/ircd-irc2/ircd.conf.example.gz</filename>."
30157
30158
#: serverguide/C/chat.xml:92(para)
30159
msgid ""
30160
"The IRC banner to be displayed in the IRC client, when the user connects to "
30161
"the server can be set in <filename>/etc/ircd/ircd.motd</filename> file."
30162
msgstr ""
30163
"The IRC banner to be displayed in the IRC client, when the user connects to "
30164
"the server can be set in <filename>/etc/ircd/ircd.motd</filename> file."
30165
30166
#: serverguide/C/chat.xml:97(para)
30167
msgid ""
30168
"After making necessary changes to the configuration file, you can restart "
30169
"the IRC server using following command:"
30170
msgstr ""
30171
"After making necessary changes to the configuration file, you can restart "
30172
"the IRC server using following command:"
30173
30174
#: serverguide/C/chat.xml:101(programlisting)
30175
#, no-wrap
30176
msgid ""
30177
"\n"
30178
"sudo /etc/init.d/ircd-irc2 restart\n"
30179
msgstr ""
30180
"\n"
30181
"sudo /etc/init.d/ircd-irc2 restart\n"
30182
30183
#: serverguide/C/chat.xml:109(para)
30184
msgid ""
30185
"You may also be interested to take a look at other IRC servers available in "
30186
"Ubuntu Repository. It includes, <application>ircd-ircu</application> and "
30187
"<application>ircd-hybrid</application>."
30188
msgstr ""
30189
"You may also be interested to take a look at other IRC servers available in "
30190
"Ubuntu Repository. It includes, <application>ircd-ircu</application> and "
30191
"<application>ircd-hybrid</application>."
30192
30193
#: serverguide/C/chat.xml:117(para)
30194
msgid ""
30195
"Refer to <ulink url=\"http://www.irc.org/tech_docs/ircnet/faq.html\">IRCD "
30196
"FAQ</ulink> for more details about the IRC Server."
30197
msgstr ""
30198
"Refer to <ulink url=\"http://www.irc.org/tech_docs/ircnet/faq.html\">IRCD "
30199
"FAQ</ulink> for more details about the IRC Server."
30200
30201
#: serverguide/C/chat.xml:124(para)
30202
msgid ""
30203
"Also, the <ulink url=\"https://help.ubuntu.com/community/ircd\">Ubuntu Wiki "
30204
"IRCD</ulink> page has more information."
30205
msgstr ""
30206
30207
#: serverguide/C/chat.xml:132(title)
30208
msgid "Jabber Instant Messaging Server"
30209
msgstr "Jabber Instant Messaging Server"
30210
30211
#: serverguide/C/chat.xml:134(para)
30212
msgid ""
30213
"<emphasis>Jabber</emphasis> a popular instant message protocol is based on "
30214
"XMPP, an open standard for instant messaging, and used by many popular "
30215
"applications. This section covers setting up a <emphasis>Jabberd "
30216
"2</emphasis> server on a local LAN. This configuration can also be adapted "
30217
"to providing messaging services to users over the Internet."
30218
msgstr ""
30219
"<emphasis>Jabber</emphasis> a popular instant message protocol is based on "
30220
"XMPP, an open standard for instant messaging, and used by many popular "
30221
"applications. This section covers setting up a <emphasis>Jabberd "
30222
"2</emphasis> server on a local LAN. This configuration can also be adapted "
30223
"to providing messaging services to users over the Internet."
30224
30225
#: serverguide/C/chat.xml:143(para)
30226
msgid "To install <application>jabberd2</application>, in a terminal enter:"
30227
msgstr "To install <application>jabberd2</application>, in a terminal enter:"
30228
30229
#: serverguide/C/chat.xml:148(command)
30230
msgid "sudo apt-get install jabberd2"
30231
msgstr "sudo apt-get install jabberd2"
30232
30233
#: serverguide/C/chat.xml:155(para)
30234
msgid ""
30235
"A couple of XML configuration files will be used to configure "
30236
"<application>jabberd2</application> for <emphasis>Berkely DB</emphasis> user "
30237
"authentication. This is a very simple form of authentication. However, "
30238
"<application>jabberd2</application> can be configured to use LDAP, MySQL, "
30239
"Postgresql, etc for for user authentication."
30240
msgstr ""
30241
"A couple of XML configuration files will be used to configure "
30242
"<application>jabberd2</application> for <emphasis>Berkely DB</emphasis> user "
30243
"authentication. This is a very simple form of authentication. However, "
30244
"<application>jabberd2</application> can be configured to use LDAP, MySQL, "
30245
"Postgresql, etc for for user authentication."
30246
30247
#: serverguide/C/chat.xml:162(para)
30248
msgid "First, edit <filename>/etc/jabberd2/sm.xml</filename> changing:"
30249
msgstr "First, edit <filename>/etc/jabberd2/sm.xml</filename> changing:"
30250
30251
#: serverguide/C/chat.xml:166(programlisting)
30252
#, no-wrap
30253
msgid ""
30254
"\n"
30255
" <id>jabber.example.com</id>\n"
30256
msgstr ""
30257
"\n"
30258
" <id>jabber.example.com</id>\n"
30259
30260
#: serverguide/C/chat.xml:171(para)
30261
msgid ""
30262
"Replace <emphasis>jabber.example.com</emphasis> with the hostname, or other "
30263
"id, of your server."
30264
msgstr ""
30265
"Replace <emphasis>jabber.example.com</emphasis> with the hostname, or other "
30266
"id, of your server."
30267
30268
#: serverguide/C/chat.xml:176(para)
30269
msgid "Now in the <storage> section change the <driver> to:"
30270
msgstr "Now in the <storage> section change the <driver> to:"
30271
30272
#: serverguide/C/chat.xml:180(programlisting)
30273
#, no-wrap
30274
msgid ""
30275
"\n"
30276
" <driver>db</driver>\n"
30277
msgstr ""
30278
"\n"
30279
" <driver>db</driver>\n"
30280
30281
#: serverguide/C/chat.xml:184(para)
30282
msgid ""
30283
"Next, edit <filename>/etc/jabberd2/c2s.xml</filename> in the "
30284
"<emphasis><local></emphasis> section change:"
30285
msgstr ""
30286
"Next, edit <filename>/etc/jabberd2/c2s.xml</filename> in the "
30287
"<emphasis><local></emphasis> section change:"
30288
30289
#: serverguide/C/chat.xml:188(programlisting)
30290
#, no-wrap
30291
msgid ""
30292
"\n"
30293
" <id>jabber.example.com</id>\n"
30294
msgstr ""
30295
"\n"
30296
" <id>jabber.example.com</id>\n"
30297
30298
#: serverguide/C/chat.xml:192(para)
30299
msgid ""
30300
"And in the <authreg> section adjust the <module> section to:"
30301
msgstr ""
30302
"And in the <authreg> section adjust the <module> section to:"
30303
30304
#: serverguide/C/chat.xml:196(programlisting)
30305
#, no-wrap
30306
msgid ""
30307
"\n"
30308
" <module>db</module>\n"
30309
msgstr ""
30310
"\n"
30311
" <module>db</module>\n"
30312
30313
#: serverguide/C/chat.xml:200(para)
30314
msgid ""
30315
"Finally, restart <application>jabberd2</application> to enable the new "
30316
"settings:"
30317
msgstr ""
30318
"Finally, restart <application>jabberd2</application> to enable the new "
30319
"settings:"
30320
30321
#: serverguide/C/chat.xml:205(command)
30322
msgid "sudo /etc/init.d/jabberd2 restart"
30323
msgstr "sudo /etc/init.d/jabberd2 restart"
30324
30325
#: serverguide/C/chat.xml:208(para)
30326
msgid ""
30327
"You should now be able to connect to the server using a Jabber client like "
30328
"<application>Pidgin</application> for example."
30329
msgstr ""
30330
"You should now be able to connect to the server using a Jabber client like "
30331
"<application>Pidgin</application> for example."
30332
30333
#: serverguide/C/chat.xml:213(para)
30334
msgid ""
30335
"The advantage of using Berkeley DB for user data is that after being "
30336
"configured no additional maintenance is required. If you need more control "
30337
"over user accounts and credentials another authentication method is "
30338
"recommended."
30339
msgstr ""
30340
"The advantage of using Berkeley DB for user data is that after being "
30341
"configured no additional maintenance is required. If you need more control "
30342
"over user accounts and credentials another authentication method is "
30343
"recommended."
30344
30345
#: serverguide/C/chat.xml:225(para)
30346
msgid ""
30347
"The <ulink url=\"http://codex.xiaoka.com/wiki/jabberd2:start\">Jabberd2 Web "
30348
"Site</ulink> contains more details on configuring "
30349
"<application>Jabberd2</application>."
30350
msgstr ""
30351
"The <ulink url=\"http://codex.xiaoka.com/wiki/jabberd2:start\">Jabberd2 Web "
30352
"Site</ulink> contains more details on configuring "
30353
"<application>Jabberd2</application>."
30354
30355
#: serverguide/C/chat.xml:231(para)
30356
msgid ""
30357
"For more authentication options see the <ulink "
30358
"url=\"http://jabberd2.xiaoka.com/wiki/InstallGuide\">Jabberd2 Install "
30359
"Guide</ulink>."
30360
msgstr ""
30361
"For more authentication options see the <ulink "
30362
"url=\"http://jabberd2.xiaoka.com/wiki/InstallGuide\">Jabberd2 Install "
30363
"Guide</ulink>."
30364
30365
#: serverguide/C/chat.xml:236(para)
30366
msgid ""
30367
"Also, the <ulink "
30368
"url=\"https://help.ubuntu.com/community/SettingUpJabberServer\">Setting Up "
30369
"Jabber Server Ubuntu Wiki</ulink> page has more information."
30370
msgstr ""
30371
30372
#: serverguide/C/backups.xml:13(title)
30373
msgid "Backups"
30374
msgstr "Backups"
30375
30376
#: serverguide/C/backups.xml:14(para)
30377
msgid ""
30378
"There are many ways to backup an Ubuntu installation. The most important "
30379
"thing about backups is to develop a <emphasis>backup plan</emphasis> "
30380
"consisting of what to backup, where to back it up to, and how to restore it."
30381
msgstr ""
30382
"There are many ways to backup an Ubuntu installation. The most important "
30383
"thing about backups is to develop a <emphasis>backup plan</emphasis> "
30384
"consisting of what to backup, where to back it up to, and how to restore it."
30385
30386
#: serverguide/C/backups.xml:18(para)
30387
msgid ""
30388
"The following sections discuss various ways of accomplishing these tasks."
30389
msgstr ""
30390
"The following sections discuss various ways of accomplishing these tasks."
30391
30392
#: serverguide/C/backups.xml:22(title)
30393
msgid "Shell Scripts"
30394
msgstr "Shell Scripts"
30395
30396
#: serverguide/C/backups.xml:23(para)
30397
msgid ""
30398
"One of the simplest ways to backup a system is using a <emphasis>shell "
30399
"script</emphasis>. For example, a script can be used to configure which "
30400
"directories to backup, and use those directories as arguments to the "
30401
"<application>tar</application> utility creating an archive file. The archive "
30402
"file can then be moved or copied to another location. The archive can also "
30403
"be created on a remote file system such as an <emphasis>NFS</emphasis> mount."
30404
msgstr ""
30405
"One of the simplest ways to backup a system is using a <emphasis>shell "
30406
"script</emphasis>. For example, a script can be used to configure which "
30407
"directories to backup, and use those directories as arguments to the "
30408
"<application>tar</application> utility creating an archive file. The archive "
30409
"file can then be moved or copied to another location. The archive can also "
30410
"be created on a remote file system such as an <emphasis>NFS</emphasis> mount."
30411
30412
#: serverguide/C/backups.xml:29(para)
30413
msgid ""
30414
"The <application>tar</application> utility creates one archive file out of "
30415
"many files or directories. <application>tar</application> can also filter "
30416
"the files through compression utilities reducing the size of the archive "
30417
"file."
30418
msgstr ""
30419
"The <application>tar</application> utility creates one archive file out of "
30420
"many files or directories. <application>tar</application> can also filter "
30421
"the files through compression utilities reducing the size of the archive "
30422
"file."
30423
30424
#: serverguide/C/backups.xml:35(title)
30425
msgid "Simple Shell Script"
30426
msgstr "Simple Shell Script"
30427
30428
#: serverguide/C/backups.xml:36(para)
30429
msgid ""
30430
"The following shell script uses <application>tar</application> to create an "
30431
"archive file on a remotely mounted NFS file system. The archive filename is "
30432
"determined using additional command line utilities."
30433
msgstr ""
30434
"The following shell script uses <application>tar</application> to create an "
30435
"archive file on a remotely mounted NFS file system. The archive filename is "
30436
"determined using additional command line utilities."
30437
30438
#: serverguide/C/backups.xml:40(programlisting)
30439
#, no-wrap
30440
msgid ""
30441
"\n"
30442
"#!/bin/sh\n"
30443
"####################################\n"
30444
"#\n"
30445
"# Backup to NFS mount script.\n"
30446
"#\n"
30447
"####################################\n"
30448
"\n"
30449
"# What to backup. \n"
30450
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
30451
"\n"
30452
"# Where to backup to.\n"
30453
"dest=\"/mnt/backup\"\n"
30454
"\n"
30455
"# Create archive filename.\n"
30456
"day=$(date +%A)\n"
30457
"hostname=$(hostname -s)\n"
30458
"archive_file=\"$hostname-$day.tgz\"\n"
30459
"\n"
30460
"# Print start status message.\n"
30461
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
30462
"date\n"
30463
"echo\n"
30464
"\n"
30465
"# Backup the files using tar.\n"
30466
"tar czf $dest/$archive_file $backup_files\n"
30467
"\n"
30468
"# Print end status message.\n"
30469
"echo\n"
30470
"echo \"Backup finished\"\n"
30471
"date\n"
30472
"\n"
30473
"# Long listing of files in $dest to check file sizes.\n"
30474
"ls -lh $dest\n"
30475
msgstr ""
30476
"\n"
30477
"#!/bin/sh\n"
30478
"####################################\n"
30479
"#\n"
30480
"# Backup to NFS mount script.\n"
30481
"#\n"
30482
"####################################\n"
30483
"\n"
30484
"# What to backup. \n"
30485
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
30486
"\n"
30487
"# Where to backup to.\n"
30488
"dest=\"/mnt/backup\"\n"
30489
"\n"
30490
"# Create archive filename.\n"
30491
"day=$(date +%A)\n"
30492
"hostname=$(hostname -s)\n"
30493
"archive_file=\"$hostname-$day.tgz\"\n"
30494
"\n"
30495
"# Print start status message.\n"
30496
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
30497
"date\n"
30498
"echo\n"
30499
"\n"
30500
"# Backup the files using tar.\n"
30501
"tar czf $dest/$archive_file $backup_files\n"
30502
"\n"
30503
"# Print end status message.\n"
30504
"echo\n"
30505
"echo \"Backup finished\"\n"
30506
"date\n"
30507
"\n"
30508
"# Long listing of files in $dest to check file sizes.\n"
30509
"ls -lh $dest\n"
30510
30511
#: serverguide/C/backups.xml:77(para)
30512
msgid ""
30513
"<emphasis>$backup_files:</emphasis> a variable listing which directories you "
30514
"would like to backup. The list should be customized to fit your needs."
30515
msgstr ""
30516
"<emphasis>$backup_files:</emphasis> a variable listing which directories you "
30517
"would like to backup. The list should be customised to fit your needs."
30518
30519
#: serverguide/C/backups.xml:83(para)
30520
msgid ""
30521
"<emphasis>$day:</emphasis> a variable holding the day of the week (Monday, "
30522
"Tuesday, Wednesday, etc). This is used to create an archive file for each "
30523
"day of the week, giving a backup history of seven days. There are other ways "
30524
"to accomplish this including other ways using the "
30525
"<application>date</application> utility."
30526
msgstr ""
30527
"<emphasis>$day:</emphasis> a variable holding the day of the week (Monday, "
30528
"Tuesday, Wednesday, etc). This is used to create an archive file for each "
30529
"day of the week, giving a backup history of seven days. There are other ways "
30530
"to accomplish this including other ways using the "
30531
"<application>date</application> utility."
30532
30533
#: serverguide/C/backups.xml:90(para)
30534
msgid ""
30535
"<emphasis>$hostname:</emphasis> variable containing the "
30536
"<emphasis>short</emphasis> hostname of the system. Using the hostname in the "
30537
"archive filename gives you the option of placing daily archive files from "
30538
"multiple systems in the same directory."
30539
msgstr ""
30540
"<emphasis>$hostname:</emphasis> variable containing the "
30541
"<emphasis>short</emphasis> hostname of the system. Using the hostname in the "
30542
"archive filename gives you the option of placing daily archive files from "
30543
"multiple systems in the same directory."
30544
30545
#: serverguide/C/backups.xml:97(para)
30546
msgid "<emphasis>$archive_file:</emphasis> the full archive filename."
30547
msgstr "<emphasis>$archive_file:</emphasis> the full archive filename."
30548
30549
#: serverguide/C/backups.xml:102(para)
30550
msgid ""
30551
"<emphasis>$dest:</emphasis> destination of the archive file. The directory "
30552
"needs to be created and in this case <emphasis>mounted</emphasis> before "
30553
"executing the backup script. See <xref linkend=\"network-file-system\"/> for "
30554
"details using <emphasis>NFS</emphasis>."
30555
msgstr ""
30556
"<emphasis>$dest:</emphasis> destination of the archive file. The directory "
30557
"needs to be created and in this case <emphasis>mounted</emphasis> before "
30558
"executing the backup script. See <xref linkend=\"network-file-system\"/> for "
30559
"details using <emphasis>NFS</emphasis>."
30560
30561
#: serverguide/C/backups.xml:109(para)
30562
msgid ""
30563
"<emphasis>status messages:</emphasis> optional messages printed to the "
30564
"console using the <application>echo</application> utility."
30565
msgstr ""
30566
"<emphasis>status messages:</emphasis> optional messages printed to the "
30567
"console using the <application>echo</application> utility."
30568
30569
#: serverguide/C/backups.xml:115(para)
30570
msgid ""
30571
"<emphasis>tar czf $dest/$archive_file $backup_files:</emphasis> the "
30572
"<application>tar</application> command used to create the archive file."
30573
msgstr ""
30574
"<emphasis>tar czf $dest/$archive_file $backup_files:</emphasis> the "
30575
"<application>tar</application> command used to create the archive file."
30576
30577
#: serverguide/C/backups.xml:121(para)
30578
msgid "<emphasis>c:</emphasis> creates an archive."
30579
msgstr "<emphasis>c:</emphasis> creates an archive."
30580
30581
#: serverguide/C/backups.xml:126(para)
30582
msgid ""
30583
"<emphasis>z:</emphasis> filter the archive through the "
30584
"<application>gzip</application> utility compressing the archive."
30585
msgstr ""
30586
"<emphasis>z:</emphasis> filter the archive through the "
30587
"<application>gzip</application> utility compressing the archive."
30588
30589
#: serverguide/C/backups.xml:131(para)
30590
msgid ""
30591
"<emphasis>f:</emphasis> use archive file. Otherwise the "
30592
"<application>tar</application> output will be sent to STDOUT."
30593
msgstr ""
30594
"<emphasis>f:</emphasis> use archive file. Otherwise the "
30595
"<application>tar</application> output will be sent to STDOUT."
30596
30597
#: serverguide/C/backups.xml:138(para)
30598
msgid ""
30599
"<emphasis>ls -lh $dest:</emphasis> optional statement prints a <emphasis>-"
30600
"l</emphasis> long listing in <emphasis>-h</emphasis> human readable format "
30601
"of the destination directory. This is useful for a quick file size check of "
30602
"the archive file. This check should not replace testing the archive file."
30603
msgstr ""
30604
"<emphasis>ls -lh $dest:</emphasis> optional statement prints a <emphasis>-"
30605
"l</emphasis> long listing in <emphasis>-h</emphasis> human readable format "
30606
"of the destination directory. This is useful for a quick file size check of "
30607
"the archive file. This check should not replace testing the archive file."
30608
30609
#: serverguide/C/backups.xml:145(para)
30610
msgid ""
30611
"This is a simple example of a backup shell script. There are large amount of "
30612
"options that can be included in a backup script. See <xref linkend=\"backup-"
30613
"shellscript-references\"/> for links to resources providing more in depth "
30614
"shell scripting information."
30615
msgstr ""
30616
"This is a simple example of a backup shell script. There are large amount of "
30617
"options that can be included in a backup script. See <xref linkend=\"backup-"
30618
"shellscript-references\"/> for links to resources providing more in depth "
30619
"shell scripting information."
30620
30621
#: serverguide/C/backups.xml:152(title)
30622
msgid "Executing the Script"
30623
msgstr "Executing the Script"
30624
30625
#: serverguide/C/backups.xml:154(title)
30626
msgid "Executing from a Terminal"
30627
msgstr "Executing from a Terminal"
30628
30629
#: serverguide/C/backups.xml:155(para)
30630
msgid ""
30631
"The simplest way of executing the above backup script is to copy and paste "
30632
"the contents into a file. <filename>backup.sh</filename> for example. Then "
30633
"from a terminal prompt:"
30634
msgstr ""
30635
"The simplest way of executing the above backup script is to copy and paste "
30636
"the contents into a file. <filename>backup.sh</filename> for example. Then "
30637
"from a terminal prompt:"
30638
30639
#: serverguide/C/backups.xml:160(command)
30640
msgid "sudo bash backup.sh"
30641
msgstr "sudo bash backup.sh"
30642
30643
#: serverguide/C/backups.xml:162(para)
30644
msgid ""
30645
"This is a great way to test the script to make sure everything works as "
30646
"expected."
30647
msgstr ""
30648
"This is a great way to test the script to make sure everything works as "
30649
"expected."
30650
30651
#: serverguide/C/backups.xml:167(title)
30652
msgid "Executing with cron"
30653
msgstr "Executing with cron"
30654
30655
#: serverguide/C/backups.xml:168(para)
30656
msgid ""
30657
"The <application>cron</application> utility can be used to automate the "
30658
"script execution. The <application>cron</application> daemon allows the "
30659
"execution of scripts, or commands, at a specified time and date."
30660
msgstr ""
30661
"The <application>cron</application> utility can be used to automate the "
30662
"script execution. The <application>cron</application> daemon allows the "
30663
"execution of scripts, or commands, at a specified time and date."
30664
30665
#: serverguide/C/backups.xml:172(para)
30666
msgid ""
30667
"<application>cron</application> is configured through entries in a "
30668
"<filename>crontab</filename> file. <filename>crontab</filename> files are "
30669
"separated into fields:"
30670
msgstr ""
30671
"<application>cron</application> is configured through entries in a "
30672
"<filename>crontab</filename> file. <filename>crontab</filename> files are "
30673
"separated into fields:"
30674
30675
#: serverguide/C/backups.xml:176(programlisting)
30676
#, no-wrap
30677
msgid ""
30678
"\n"
30679
"# m h dom mon dow command\n"
30680
msgstr ""
30681
"\n"
30682
"# m h dom mon dow command\n"
30683
30684
#: serverguide/C/backups.xml:181(para)
30685
msgid ""
30686
"<emphasis>m:</emphasis> minute the command executes on between 0 and 59."
30687
msgstr ""
30688
"<emphasis>m:</emphasis> minute the command executes on between 0 and 59."
30689
30690
#: serverguide/C/backups.xml:186(para)
30691
msgid ""
30692
"<emphasis>h:</emphasis> hour the command executes on between 0 and 23."
30693
msgstr ""
30694
"<emphasis>h:</emphasis> hour the command executes on between 0 and 23."
30695
30696
#: serverguide/C/backups.xml:191(para)
30697
msgid "<emphasis>dom:</emphasis> day of month the command executes on."
30698
msgstr "<emphasis>dom:</emphasis> day of month the command executes on."
30699
30700
#: serverguide/C/backups.xml:196(para)
30701
msgid ""
30702
"<emphasis>mon:</emphasis> the month the command executes on between 1 and 12."
30703
msgstr ""
30704
"<emphasis>mon:</emphasis> the month the command executes on between 1 and 12."
30705
30706
#: serverguide/C/backups.xml:201(para)
30707
msgid ""
30708
"<emphasis>dow:</emphasis> the day of the week the command executes on "
30709
"between 0 and 7. Sunday may be specified by using 0 or 7, both values are "
30710
"valid."
30711
msgstr ""
30712
"<emphasis>dow:</emphasis> the day of the week the command executes on "
30713
"between 0 and 7. Sunday may be specified by using 0 or 7, both values are "
30714
"valid."
30715
30716
#: serverguide/C/backups.xml:206(para)
30717
msgid "<emphasis>command:</emphasis> the command to execute."
30718
msgstr "<emphasis>command:</emphasis> the command to execute."
30719
30720
#: serverguide/C/backups.xml:211(para)
30721
msgid ""
30722
"To add or change entries in a <filename>crontab</filename> file the "
30723
"<application>crontab -e</application> command should be used. Also, the "
30724
"contents of a <filename>crontab</filename> file can be viewed using the "
30725
"<application>crontab -l</application> command."
30726
msgstr ""
30727
"To add or change entries in a <filename>crontab</filename> file the "
30728
"<application>crontab -e</application> command should be used. Also, the "
30729
"contents of a <filename>crontab</filename> file can be viewed using the "
30730
"<application>crontab -l</application> command."
30731
30732
#: serverguide/C/backups.xml:215(para)
30733
msgid ""
30734
"To execute the <application>backup.sh</application> script listed above "
30735
"using <application>cron</application>. Enter the following from a terminal "
30736
"prompt:"
30737
msgstr ""
30738
"To execute the <application>backup.sh</application> script listed above "
30739
"using <application>cron</application>. Enter the following from a terminal "
30740
"prompt:"
30741
30742
#: serverguide/C/backups.xml:220(command)
30743
msgid "sudo crontab -e"
30744
msgstr "sudo crontab -e"
30745
30746
#: serverguide/C/backups.xml:223(para)
30747
msgid ""
30748
"Using <application>sudo</application> with the <application>crontab -"
30749
"e</application> command edits the <emphasis>root</emphasis> user's crontab. "
30750
"This is necessary if you are backing up directories only the root user has "
30751
"access to."
30752
msgstr ""
30753
"Using <application>sudo</application> with the <application>crontab -"
30754
"e</application> command edits the <emphasis>root</emphasis> user's crontab. "
30755
"This is necessary if you are backing up directories only the root user has "
30756
"access to."
30757
30758
#: serverguide/C/backups.xml:228(para)
30759
msgid "Add the following entry to the <filename>crontab</filename> file:"
30760
msgstr "Add the following entry to the <filename>crontab</filename> file:"
30761
30762
#: serverguide/C/backups.xml:231(programlisting)
30763
#, no-wrap
30764
msgid ""
30765
"\n"
30766
"# m h dom mon dow command\n"
30767
"0 0 * * * bash /usr/local/bin/backup.sh\n"
30768
msgstr ""
30769
"\n"
30770
"# m h dom mon dow command\n"
30771
"0 0 * * * bash /usr/local/bin/backup.sh\n"
30772
30773
#: serverguide/C/backups.xml:235(para)
30774
msgid ""
30775
"The <application>backup.sh</application> script will now be executed every "
30776
"day at 12:00 am."
30777
msgstr ""
30778
"The <application>backup.sh</application> script will now be executed every "
30779
"day at 12:00 am."
30780
30781
#: serverguide/C/backups.xml:239(para)
30782
msgid ""
30783
"The <application>backup.sh</application> script will need to be copied to "
30784
"the <filename>/usr/local/bin/</filename> directory in order for this entry "
30785
"to execute properly. The script can reside anywhere on the file system "
30786
"simply change the script path appropriately."
30787
msgstr ""
30788
"The <application>backup.sh</application> script will need to be copied to "
30789
"the <filename>/usr/local/bin/</filename> directory in order for this entry "
30790
"to execute properly. The script can reside anywhere on the file system "
30791
"simply change the script path appropriately."
30792
30793
#: serverguide/C/backups.xml:244(para)
30794
msgid ""
30795
"For more in depth <application>crontab</application> options see <xref "
30796
"linkend=\"backup-shellscript-references\"/>."
30797
msgstr ""
30798
"For more in depth <application>crontab</application> options see <xref "
30799
"linkend=\"backup-shellscript-references\"/>."
30800
30801
#: serverguide/C/backups.xml:250(title)
30802
msgid "Restoring from the Archive"
30803
msgstr "Restoring from the Archive"
30804
30805
#: serverguide/C/backups.xml:251(para)
30806
msgid ""
30807
"Once an archive has been created it is important to test the archive. The "
30808
"archive can be tested by listing the files it contains, but the best test is "
30809
"to <emphasis>restore</emphasis> a file from the archive."
30810
msgstr ""
30811
"Once an archive has been created it is important to test the archive. The "
30812
"archive can be tested by listing the files it contains, but the best test is "
30813
"to <emphasis>restore</emphasis> a file from the archive."
30814
30815
#: serverguide/C/backups.xml:257(para)
30816
msgid "To see a listing of the archive contents. From a terminal prompt:"
30817
msgstr "To see a listing of the archive contents. From a terminal prompt:"
30818
30819
#: serverguide/C/backups.xml:261(command)
30820
msgid "tar -tzvf /mnt/backup/host-Monday.tgz"
30821
msgstr "tar -tzvf /mnt/backup/host-Monday.tgz"
30822
30823
#: serverguide/C/backups.xml:265(para)
30824
msgid "To restore a file from the archive to a different directory enter:"
30825
msgstr "To restore a file from the archive to a different directory enter:"
30826
30827
#: serverguide/C/backups.xml:269(command)
30828
msgid "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
30829
msgstr "tar -xzvf /mnt/backup/host-Monday.tgz -C /tmp etc/hosts"
30830
30831
#: serverguide/C/backups.xml:271(para)
30832
msgid ""
30833
"The <emphasis>-C</emphasis> option to <application>tar</application> "
30834
"redirects the extracted files to the specified directory. The above example "
30835
"will extract the <filename>/etc/hosts</filename> file to "
30836
"<filename>/tmp/etc/hosts</filename>. <application>tar</application> "
30837
"recreates the directory structure that it contains."
30838
msgstr ""
30839
"The <emphasis>-C</emphasis> option to <application>tar</application> "
30840
"redirects the extracted files to the specified directory. The above example "
30841
"will extract the <filename>/etc/hosts</filename> file to "
30842
"<filename>/tmp/etc/hosts</filename>. <application>tar</application> "
30843
"recreates the directory structure that it contains."
30844
30845
#: serverguide/C/backups.xml:276(para)
30846
msgid ""
30847
"Also, notice the leading <emphasis>\"/\"</emphasis> is left off the path of "
30848
"the file to restore."
30849
msgstr ""
30850
"Also, notice the leading <emphasis>\"/\"</emphasis> is left off the path of "
30851
"the file to restore."
30852
30853
#: serverguide/C/backups.xml:281(para)
30854
msgid "To restore all files in the archive enter the following:"
30855
msgstr "To restore all files in the archive enter the following:"
30856
30857
#: serverguide/C/backups.xml:285(command)
30858
msgid "cd /"
30859
msgstr "cd /"
30860
30861
#: serverguide/C/backups.xml:286(command)
30862
msgid "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
30863
msgstr "sudo tar -xzvf /mnt/backup/host-Monday.tgz"
30864
30865
#: serverguide/C/backups.xml:291(para)
30866
msgid "This will overwrite the files currently on the file system."
30867
msgstr "This will overwrite the files currently on the file system."
30868
30869
#: serverguide/C/backups.xml:300(para)
30870
msgid ""
30871
"For more information on shell scripting see the <ulink "
30872
"url=\"http://tldp.org/LDP/abs/html/\">Advanced Bash-Scripting Guide</ulink>"
30873
msgstr ""
30874
"For more information on shell scripting see the <ulink "
30875
"url=\"http://tldp.org/LDP/abs/html/\">Advanced Bash-Scripting Guide</ulink>"
30876
30877
#: serverguide/C/backups.xml:305(para)
30878
msgid ""
30879
"The book <ulink url=\"http://safari.samspublishing.com/0672323583\">Teach "
30880
"Yourself Shell Programming in 24 Hours</ulink> is available online and a "
30881
"great resource for shell scripting."
30882
msgstr ""
30883
"The book <ulink url=\"http://safari.samspublishing.com/0672323583\">Teach "
30884
"Yourself Shell Programming in 24 Hours</ulink> is available online and a "
30885
"great resource for shell scripting."
30886
30887
#: serverguide/C/backups.xml:311(para)
30888
msgid ""
30889
"The <ulink url=\"https://help.ubuntu.com/community/CronHowto\">CronHowto "
30890
"Wiki Page</ulink> contains details on advanced "
30891
"<application>cron</application> options."
30892
msgstr ""
30893
"The <ulink url=\"https://help.ubuntu.com/community/CronHowto\">CronHowto "
30894
"Wiki Page</ulink> contains details on advanced "
30895
"<application>cron</application> options."
30896
30897
#: serverguide/C/backups.xml:318(para)
30898
msgid ""
30899
"See the <ulink url=\"http://www.gnu.org/software/tar/manual/index.html\">GNU "
30900
"tar Manual</ulink> for more <application>tar</application> options."
30901
msgstr ""
30902
"See the <ulink url=\"http://www.gnu.org/software/tar/manual/index.html\">GNU "
30903
"tar Manual</ulink> for more <application>tar</application> options."
30904
30905
#: serverguide/C/backups.xml:324(para)
30906
msgid ""
30907
"The Wikipedia <ulink "
30908
"url=\"http://en.wikipedia.org/wiki/Backup_rotation_scheme\">Backup Rotation "
30909
"Scheme</ulink> article contains information on other backup rotation schemes."
30910
msgstr ""
30911
"The Wikipedia <ulink "
30912
"url=\"http://en.wikipedia.org/wiki/Backup_rotation_scheme\">Backup Rotation "
30913
"Scheme</ulink> article contains information on other backup rotation schemes."
30914
30915
#: serverguide/C/backups.xml:330(para)
30916
msgid ""
30917
"The shell script uses <application>tar</application> to create the archive, "
30918
"but there many other command line utilities that can be used. For example:"
30919
msgstr ""
30920
"The shell script uses <application>tar</application> to create the archive, "
30921
"but there many other command line utilities that can be used. For example:"
30922
30923
#: serverguide/C/backups.xml:336(para)
30924
msgid ""
30925
"<ulink url=\"http://www.gnu.org/software/cpio/\">cpio</ulink>: used to copy "
30926
"files to and from archives."
30927
msgstr ""
30928
"<ulink url=\"http://www.gnu.org/software/cpio/\">cpio</ulink>: used to copy "
30929
"files to and from archives."
30930
30931
#: serverguide/C/backups.xml:341(para)
30932
msgid ""
30933
"<ulink url=\"http://www.gnu.org/software/coreutils/\">dd</ulink>: part of "
30934
"the <application>coreutils</application> package. A low level utility that "
30935
"can copy data from one format to another"
30936
msgstr ""
30937
"<ulink url=\"http://www.gnu.org/software/coreutils/\">dd</ulink>: part of "
30938
"the <application>coreutils</application> package. A low level utility that "
30939
"can copy data from one format to another"
30940
30941
#: serverguide/C/backups.xml:347(para)
30942
msgid ""
30943
"<ulink url=\"http://www.rsnapshot.org/\">rsnapshot</ulink>: a file system "
30944
"snap shot utility used to create copies of an entire file system."
30945
msgstr ""
30946
"<ulink url=\"http://www.rsnapshot.org/\">rsnapshot</ulink>: a file system "
30947
"snap shot utility used to create copies of an entire file system."
30948
30949
#: serverguide/C/backups.xml:358(title)
30950
msgid "Archive Rotation"
30951
msgstr "Archive Rotation"
30952
30953
#: serverguide/C/backups.xml:359(para)
30954
msgid ""
30955
"The shell script in section <xref linkend=\"backup-shellscripts\"/> only "
30956
"allows for seven different archives. For a server whose data doesn't change "
30957
"often this may be enough. If the server has a large amount of data a more "
30958
"robust rotation scheme should be used."
30959
msgstr ""
30960
"The shell script in section <xref linkend=\"backup-shellscripts\"/> only "
30961
"allows for seven different archives. For a server whose data doesn't change "
30962
"often this may be enough. If the server has a large amount of data a more "
30963
"robust rotation scheme should be used."
30964
30965
#: serverguide/C/backups.xml:365(title)
30966
msgid "Rotating NFS Archives"
30967
msgstr "Rotating NFS Archives"
30968
30969
#: serverguide/C/backups.xml:366(para)
30970
msgid ""
30971
"In this section the shell script will be slightly modified to implement a "
30972
"grandfather-father-son rotation scheme (monthly-weekly-daily):"
30973
msgstr ""
30974
"In this section the shell script will be slightly modified to implement a "
30975
"grandfather-father-son rotation scheme (monthly-weekly-daily):"
30976
30977
#: serverguide/C/backups.xml:372(para)
30978
msgid ""
30979
"The rotation will do a <emphasis>daily</emphasis> backup Sunday through "
30980
"Friday."
30981
msgstr ""
30982
"The rotation will do a <emphasis>daily</emphasis> backup Sunday through "
30983
"Friday."
30984
30985
#: serverguide/C/backups.xml:377(para)
30986
msgid ""
30987
"On Saturday a <emphasis>weekly</emphasis> backup is done giving you four "
30988
"weekly backups a month."
30989
msgstr ""
30990
"On Saturday a <emphasis>weekly</emphasis> backup is done giving you four "
30991
"weekly backups a month."
30992
30993
#: serverguide/C/backups.xml:382(para)
30994
msgid ""
30995
"The <emphasis>monthly</emphasis> backup is done on the first of the month "
30996
"rotating two monthly backups based on if the month is odd or even."
30997
msgstr ""
30998
"The <emphasis>monthly</emphasis> backup is done on the first of the month "
30999
"rotating two monthly backups based on if the month is odd or even."
31000
31001
#: serverguide/C/backups.xml:388(para)
31002
msgid "Here is the new script:"
31003
msgstr "Here is the new script:"
31004
31005
#: serverguide/C/backups.xml:391(programlisting)
31006
#, no-wrap
31007
msgid ""
31008
"\n"
31009
"#!/bin/bash\n"
31010
"####################################\n"
31011
"#\n"
31012
"# Backup to NFS mount script with\n"
31013
"# grandfather-father-son rotation.\n"
31014
"#\n"
31015
"####################################\n"
31016
"\n"
31017
"# What to backup. \n"
31018
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
31019
"\n"
31020
"# Where to backup to.\n"
31021
"dest=\"/mnt/backup\"\n"
31022
"\n"
31023
"# Setup variables for the archive filename.\n"
31024
"day=$(date +%A)\n"
31025
"hostname=$(hostname -s)\n"
31026
"\n"
31027
"# Find which week of the month 1-4 it is.\n"
31028
"day_num=$(date +%d)\n"
31029
"if (( $day_num <= 7 )); then\n"
31030
" week_file=\"$hostname-week1.tgz\"\n"
31031
"elif (( $day_num > 7 && $day_num <= 14 )); then\n"
31032
" week_file=\"$hostname-week2.tgz\"\n"
31033
"elif (( $day_num > 14 && $day_num <= 21 )); then\n"
31034
" week_file=\"$hostname-week3.tgz\"\n"
31035
"elif (( $day_num > 21 && $day_num < 32 )); then\n"
31036
" week_file=\"$hostname-week4.tgz\"\n"
31037
"fi\n"
31038
"\n"
31039
"# Find if the Month is odd or even.\n"
31040
"month_num=$(date +%m)\n"
31041
"month=$(expr $month_num % 2)\n"
31042
"if [ $month -eq 0 ]; then\n"
31043
" month_file=\"$hostname-month2.tgz\"\n"
31044
"else\n"
31045
" month_file=\"$hostname-month1.tgz\"\n"
31046
"fi\n"
31047
"\n"
31048
"# Create archive filename.\n"
31049
"if [ $day_num == 1 ]; then\n"
31050
"\tarchive_file=$month_file\n"
31051
"elif [ $day != \"Saturday\" ]; then\n"
31052
" archive_file=\"$hostname-$day.tgz\"\n"
31053
"else \n"
31054
"\tarchive_file=$week_file\n"
31055
"fi\n"
31056
"\n"
31057
"# Print start status message.\n"
31058
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
31059
"date\n"
31060
"echo\n"
31061
"\n"
31062
"# Backup the files using tar.\n"
31063
"tar czf $dest/$archive_file $backup_files\n"
31064
"\n"
31065
"# Print end status message.\n"
31066
"echo\n"
31067
"echo \"Backup finished\"\n"
31068
"date\n"
31069
"\n"
31070
"# Long listing of files in $dest to check file sizes.\n"
31071
"ls -lh $dest/\n"
31072
msgstr ""
31073
"\n"
31074
"#!/bin/bash\n"
31075
"####################################\n"
31076
"#\n"
31077
"# Backup to NFS mount script with\n"
31078
"# grandfather-father-son rotation.\n"
31079
"#\n"
31080
"####################################\n"
31081
"\n"
31082
"# What to backup. \n"
31083
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
31084
"\n"
31085
"# Where to backup to.\n"
31086
"dest=\"/mnt/backup\"\n"
31087
"\n"
31088
"# Setup variables for the archive filename.\n"
31089
"day=$(date +%A)\n"
31090
"hostname=$(hostname -s)\n"
31091
"\n"
31092
"# Find which week of the month 1-4 it is.\n"
31093
"day_num=$(date +%d)\n"
31094
"if (( $day_num <= 7 )); then\n"
31095
" week_file=\"$hostname-week1.tgz\"\n"
31096
"elif (( $day_num > 7 && $day_num <= 14 )); then\n"
31097
" week_file=\"$hostname-week2.tgz\"\n"
31098
"elif (( $day_num > 14 && $day_num <= 21 )); then\n"
31099
" week_file=\"$hostname-week3.tgz\"\n"
31100
"elif (( $day_num > 21 && $day_num < 32 )); then\n"
31101
" week_file=\"$hostname-week4.tgz\"\n"
31102
"fi\n"
31103
"\n"
31104
"# Find if the Month is odd or even.\n"
31105
"month_num=$(date +%m)\n"
31106
"month=$(expr $month_num % 2)\n"
31107
"if [ $month -eq 0 ]; then\n"
31108
" month_file=\"$hostname-month2.tgz\"\n"
31109
"else\n"
31110
" month_file=\"$hostname-month1.tgz\"\n"
31111
"fi\n"
31112
"\n"
31113
"# Create archive filename.\n"
31114
"if [ $day_num == 1 ]; then\n"
31115
"\tarchive_file=$month_file\n"
31116
"elif [ $day != \"Saturday\" ]; then\n"
31117
" archive_file=\"$hostname-$day.tgz\"\n"
31118
"else \n"
31119
"\tarchive_file=$week_file\n"
31120
"fi\n"
31121
"\n"
31122
"# Print start status message.\n"
31123
"echo \"Backing up $backup_files to $dest/$archive_file\"\n"
31124
"date\n"
31125
"echo\n"
31126
"\n"
31127
"# Backup the files using tar.\n"
31128
"tar czf $dest/$archive_file $backup_files\n"
31129
"\n"
31130
"# Print end status message.\n"
31131
"echo\n"
31132
"echo \"Backup finished\"\n"
31133
"date\n"
31134
"\n"
31135
"# Long listing of files in $dest to check file sizes.\n"
31136
"ls -lh $dest/\n"
31137
31138
#: serverguide/C/backups.xml:456(para)
31139
msgid ""
31140
"The script can be executed using the same methods as in <xref "
31141
"linkend=\"backup-executing-shellscript\"/>."
31142
msgstr ""
31143
"The script can be executed using the same methods as in <xref "
31144
"linkend=\"backup-executing-shellscript\"/>."
31145
31146
#: serverguide/C/backups.xml:459(para)
31147
msgid ""
31148
"It is good practice to take backup media off site in case of a disaster. In "
31149
"the shell script example the backup media is another server providing an NFS "
31150
"share. In all likelihood taking the NFS server to another location would not "
31151
"be practical. Depending upon connection speeds it may be an option to copy "
31152
"the archive file over a WAN link to a server in another location."
31153
msgstr ""
31154
"It is good practice to take backup media off site in case of a disaster. In "
31155
"the shell script example the backup media is another server providing an NFS "
31156
"share. In all likelihood taking the NFS server to another location would not "
31157
"be practical. Depending upon connection speeds it may be an option to copy "
31158
"the archive file over a WAN link to a server in another location."
31159
31160
#: serverguide/C/backups.xml:465(para)
31161
msgid ""
31162
"Another option is to copy the archive file to an external hard drive which "
31163
"can then be taken off site. Since the price of external hard drives continue "
31164
"to decrease it may be cost affective to use two drives for each archive "
31165
"level. This would allow you to have one external drive attached to the "
31166
"backup server and one in another location."
31167
msgstr ""
31168
"Another option is to copy the archive file to an external hard drive which "
31169
"can then be taken off site. Since the price of external hard drives continue "
31170
"to decrease it may be cost affective to use two drives for each archive "
31171
"level. This would allow you to have one external drive attached to the "
31172
"backup server and one in another location."
31173
31174
#: serverguide/C/backups.xml:472(title)
31175
msgid "Tape Drives"
31176
msgstr "Tape Drives"
31177
31178
#: serverguide/C/backups.xml:473(para)
31179
msgid ""
31180
"A tape drive attached to the server can be used instead of a NFS share. "
31181
"Using a tape drive simplifies archive rotation, and taking the media off "
31182
"site as well."
31183
msgstr ""
31184
"A tape drive attached to the server can be used instead of a NFS share. "
31185
"Using a tape drive simplifies archive rotation, and taking the media off "
31186
"site as well."
31187
31188
#: serverguide/C/backups.xml:477(para)
31189
msgid ""
31190
"When using a tape drive the filename portions of the script aren't needed "
31191
"because the date is sent directly to the tape device. Some commands to "
31192
"manipulate the tape are needed. This is accomplished using "
31193
"<application>mt</application>, a magnetic tape control utility part of the "
31194
"<application>cpio</application> package."
31195
msgstr ""
31196
"When using a tape drive the filename portions of the script aren't needed "
31197
"because the date is sent directly to the tape device. Some commands to "
31198
"manipulate the tape are needed. This is accomplished using "
31199
"<application>mt</application>, a magnetic tape control utility part of the "
31200
"<application>cpio</application> package."
31201
31202
#: serverguide/C/backups.xml:482(para)
31203
msgid "Here is the shell script modified to use a tape drive:"
31204
msgstr "Here is the shell script modified to use a tape drive:"
31205
31206
#: serverguide/C/backups.xml:485(programlisting)
31207
#, no-wrap
31208
msgid ""
31209
"\n"
31210
"#!/bin/bash\n"
31211
"####################################\n"
31212
"#\n"
31213
"# Backup to tape drive script.\n"
31214
"#\n"
31215
"####################################\n"
31216
"\n"
31217
"# What to backup. \n"
31218
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
31219
"\n"
31220
"# Where to backup to.\n"
31221
"dest=\"/dev/st0\"\n"
31222
"\n"
31223
"# Print start status message.\n"
31224
"echo \"Backing up $backup_files to $dest\"\n"
31225
"date\n"
31226
"echo\n"
31227
"\n"
31228
"# Make sure the tape is rewound.\n"
31229
"mt -f $dest rewind\n"
31230
"\n"
31231
"# Backup the files using tar.\n"
31232
"tar czf $dest $backup_files\n"
31233
"\n"
31234
"# Rewind and eject the tape.\n"
31235
"mt -f $dest rewoffl\n"
31236
"\n"
31237
"# Print end status message.\n"
31238
"echo\n"
31239
"echo \"Backup finished\"\n"
31240
"date\n"
31241
msgstr ""
31242
"\n"
31243
"#!/bin/bash\n"
31244
"####################################\n"
31245
"#\n"
31246
"# Backup to tape drive script.\n"
31247
"#\n"
31248
"####################################\n"
31249
"\n"
31250
"# What to backup. \n"
31251
"backup_files=\"/home /var/spool/mail /etc /root /boot /opt\"\n"
31252
"\n"
31253
"# Where to backup to.\n"
31254
"dest=\"/dev/st0\"\n"
31255
"\n"
31256
"# Print start status message.\n"
31257
"echo \"Backing up $backup_files to $dest\"\n"
31258
"date\n"
31259
"echo\n"
31260
"\n"
31261
"# Make sure the tape is rewound.\n"
31262
"mt -f $dest rewind\n"
31263
"\n"
31264
"# Backup the files using tar.\n"
31265
"tar czf $dest $backup_files\n"
31266
"\n"
31267
"# Rewind and eject the tape.\n"
31268
"mt -f $dest rewoffl\n"
31269
"\n"
31270
"# Print end status message.\n"
31271
"echo\n"
31272
"echo \"Backup finished\"\n"
31273
"date\n"
31274
31275
#: serverguide/C/backups.xml:519(para)
31276
msgid ""
31277
"The default device name for a SCSI tape drive is "
31278
"<filename>/dev/st0</filename>. Use the appropriate device path for your "
31279
"system."
31280
msgstr ""
31281
"The default device name for a SCSI tape drive is "
31282
"<filename>/dev/st0</filename>. Use the appropriate device path for your "
31283
"system."
31284
31285
#: serverguide/C/backups.xml:524(para)
31286
msgid ""
31287
"Restoring from a tape drive is basically the same as restoring from a file. "
31288
"Simply rewind the tape and use the device path instead of a file path. For "
31289
"example to restore the <filename>/etc/hosts</filename> file to "
31290
"<filename>/tmp/etc/hosts</filename>:"
31291
msgstr ""
31292
"Restoring from a tape drive is basically the same as restoring from a file. "
31293
"Simply rewind the tape and use the device path instead of a file path. For "
31294
"example to restore the <filename>/etc/hosts</filename> file to "
31295
"<filename>/tmp/etc/hosts</filename>:"
31296
31297
#: serverguide/C/backups.xml:529(command)
31298
msgid "mt -f /dev/st0 rewind"
31299
msgstr "mt -f /dev/st0 rewind"
31300
31301
#: serverguide/C/backups.xml:530(command)
31302
msgid "tar -xzf /dev/st0 -C /tmp etc/hosts"
31303
msgstr "tar -xzf /dev/st0 -C /tmp etc/hosts"
31304
31305
#: serverguide/C/backups.xml:535(title)
31306
msgid "Bacula"
31307
msgstr "Bacula"
31308
31309
#: serverguide/C/backups.xml:536(para)
31310
msgid ""
31311
"<application>Bacula</application> is a backup program enabling you to "
31312
"backup, restore, and verify data across your network. There are Bacula "
31313
"clients for Linux, Windows, and Mac OSX. Making it a cross platform network "
31314
"wide solution."
31315
msgstr ""
31316
"<application>Bacula</application> is a backup program enabling you to "
31317
"backup, restore, and verify data across your network. There are Bacula "
31318
"clients for Linux, Windows, and Mac OSX. Making it a cross platform network "
31319
"wide solution."
31320
31321
#: serverguide/C/backups.xml:542(para)
31322
msgid ""
31323
"<application>Bacula</application> is made up of several components and "
31324
"services used to manage which files to backup and where to back them up to:"
31325
msgstr ""
31326
"<application>Bacula</application> is made up of several components and "
31327
"services used to manage which files to backup and where to back them up to:"
31328
31329
#: serverguide/C/backups.xml:548(para)
31330
msgid ""
31331
"<application>Bacula Director:</application> a service that controls all "
31332
"backup, restore, verify, and archive operations."
31333
msgstr ""
31334
"<application>Bacula Director:</application> a service that controls all "
31335
"backup, restore, verify, and archive operations."
31336
31337
#: serverguide/C/backups.xml:553(para)
31338
msgid ""
31339
"<application>Bacula Console:</application> an application allowing "
31340
"communication with the Director. There are three versions of the Console:"
31341
msgstr ""
31342
"<application>Bacula Console:</application> an application allowing "
31343
"communication with the Director. There are three versions of the Console:"
31344
31345
#: serverguide/C/backups.xml:558(para)
31346
msgid "Text based command line version."
31347
msgstr "Text based command line version."
31348
31349
#: serverguide/C/backups.xml:559(para)
31350
msgid "Gnome based GTK+ Graphical User Interface (GUI) interface."
31351
msgstr "Gnome based GTK+ Graphical User Interface (GUI) interface."
31352
31353
#: serverguide/C/backups.xml:560(para)
31354
msgid "wxWidgets GUI interface."
31355
msgstr "wxWidgets GUI interface."
31356
31357
#: serverguide/C/backups.xml:564(para)
31358
msgid ""
31359
"<application>Bacula File:</application> also known as the "
31360
"<application>Bacula Client</application> program. This application is "
31361
"installed on machines to be backed up, and is responsible for the data "
31362
"requested by the Director."
31363
msgstr ""
31364
"<application>Bacula File:</application> also known as the "
31365
"<application>Bacula Client</application> program. This application is "
31366
"installed on machines to be backed up, and is responsible for the data "
31367
"requested by the Director."
31368
31369
#: serverguide/C/backups.xml:570(para)
31370
msgid ""
31371
"<application>Bacula Storage:</application> the programs that perform the "
31372
"storage and recovery of data to the physical media."
31373
msgstr ""
31374
"<application>Bacula Storage:</application> the programs that perform the "
31375
"storage and recovery of data to the physical media."
31376
31377
#: serverguide/C/backups.xml:575(para)
31378
msgid ""
31379
"<application>Bacula Catalog:</application> is responsible for maintaining "
31380
"the file indexes and volume databases for all files backed up, enabling "
31381
"quick location and restoration of archived files. The Catalog supports three "
31382
"different databases MySQL, PostgreSQL, and SQLite."
31383
msgstr ""
31384
"<application>Bacula Catalogue:</application> is responsible for maintaining "
31385
"the file indexes and volume databases for all files backed up, enabling "
31386
"quick location and restoration of archived files. The Catalogue supports "
31387
"three different databases MySQL, PostgreSQL, and SQLite."
31388
31389
#: serverguide/C/backups.xml:581(para)
31390
msgid ""
31391
"<application>Bacula Monitor:</application> allows the monitoring of the "
31392
"Director, File daemons, and Storage daemons. Currently the Monitor is only "
31393
"available as a GTK+ GUI application."
31394
msgstr ""
31395
"<application>Bacula Monitor:</application> allows the monitoring of the "
31396
"Director, File daemons, and Storage daemons. Currently the Monitor is only "
31397
"available as a GTK+ GUI application."
31398
31399
#: serverguide/C/backups.xml:587(para)
31400
msgid ""
31401
"These services and applications can be run on multiple servers and clients, "
31402
"or they can be installed on one machine if backing up a single disk or "
31403
"volume."
31404
msgstr ""
31405
"These services and applications can be run on multiple servers and clients, "
31406
"or they can be installed on one machine if backing up a single disk or "
31407
"volume."
31408
31409
#: serverguide/C/backups.xml:594(para)
31410
msgid ""
31411
"There are multiple packages containing the different "
31412
"<application>Bacula</application> components. To install Bacula, from a "
31413
"terminal prompt enter:"
31414
msgstr ""
31415
"There are multiple packages containing the different "
31416
"<application>Bacula</application> components. To install Bacula, from a "
31417
"terminal prompt enter:"
31418
31419
#: serverguide/C/backups.xml:599(command)
31420
msgid "sudo apt-get install bacula"
31421
msgstr "sudo apt-get install bacula"
31422
31423
#: serverguide/C/backups.xml:601(para)
31424
msgid ""
31425
"By default installing the <application>bacula</application> package will use "
31426
"a <application>MySQL</application> database for the Catalog. If you want to "
31427
"use SQLite or PostgreSQL, for the Catalog, install <application>bacula-"
31428
"director-sqlite3</application> or <application>bacula-director-"
31429
"pgsql</application> respectively."
31430
msgstr ""
31431
"By default installing the <application>bacula</application> package will use "
31432
"a <application>MySQL</application> database for the Catalogue. If you want "
31433
"to use SQLite or PostgreSQL, for the Catalogue, install <application>bacula-"
31434
"director-sqlite3</application> or <application>bacula-director-"
31435
"pgsql</application> respectively."
31436
31437
#: serverguide/C/backups.xml:607(para)
31438
msgid ""
31439
"During the install process you will be asked to supply credentials for the "
31440
"database <emphasis>administrator</emphasis> and the "
31441
"<emphasis>bacula</emphasis> database <emphasis>owner</emphasis>. The "
31442
"database administrator will need to have the appropriate rights to create a "
31443
"database, see <xref linkend=\"mysql\"/> for more information."
31444
msgstr ""
31445
"During the install process you will be asked to supply credentials for the "
31446
"database <emphasis>administrator</emphasis> and the "
31447
"<emphasis>bacula</emphasis> database <emphasis>owner</emphasis>. The "
31448
"database administrator will need to have the appropriate rights to create a "
31449
"database, see <xref linkend=\"mysql\"/> for more information."
31450
31451
#: serverguide/C/backups.xml:617(para)
31452
msgid ""
31453
"<application>Bacula</application> configuration files are formatted based on "
31454
"<emphasis>resources</emphasis> comprising of <emphasis>directives</emphasis> "
31455
"surrounded by <quote>{}</quote> braces. Each Bacula component has an "
31456
"individual file in the <filename role=\"directory\">/etc/bacula</filename> "
31457
"directory."
31458
msgstr ""
31459
"<application>Bacula</application> configuration files are formatted based on "
31460
"<emphasis>resources</emphasis> comprising of <emphasis>directives</emphasis> "
31461
"surrounded by <quote>{}</quote> braces. Each Bacula component has an "
31462
"individual file in the <filename role=\"directory\">/etc/bacula</filename> "
31463
"directory."
31464
31465
#: serverguide/C/backups.xml:622(para)
31466
msgid ""
31467
"The various <application>Bacula</application> components must authorize "
31468
"themselves to each other. This is accomplished using the "
31469
"<emphasis>password</emphasis> directive. For example, the "
31470
"<emphasis>Storage</emphasis> resource password in the "
31471
"<filename>/etc/bacula/bacula-dir.conf</filename> file must match the "
31472
"<emphasis>Director</emphasis> resource password in "
31473
"<filename>/etc/bacula/bacula-sd.conf</filename>."
31474
msgstr ""
31475
"The various <application>Bacula</application> components must authorise "
31476
"themselves to each other. This is accomplished using the "
31477
"<emphasis>password</emphasis> directive. For example, the "
31478
"<emphasis>Storage</emphasis> resource password in the "
31479
"<filename>/etc/bacula/bacula-dir.conf</filename> file must match the "
31480
"<emphasis>Director</emphasis> resource password in "
31481
"<filename>/etc/bacula/bacula-sd.conf</filename>."
31482
31483
#: serverguide/C/backups.xml:628(para)
31484
msgid ""
31485
"By default the backup job named <emphasis>Client1</emphasis> is configured "
31486
"to archive the <application>Bacula</application> Catalog. If you plan on "
31487
"using the server to backup more than one client you should change the name "
31488
"of this job to something more descriptive. To change the name edit "
31489
"<filename>/etc/bacula/bacula-dir.conf</filename>:"
31490
msgstr ""
31491
"By default the backup job named <emphasis>Client1</emphasis> is configured "
31492
"to archive the <application>Bacula</application> Catalogue. If you plan on "
31493
"using the server to backup more than one client you should change the name "
31494
"of this job to something more descriptive. To change the name edit "
31495
"<filename>/etc/bacula/bacula-dir.conf</filename>:"
31496
31497
#: serverguide/C/backups.xml:633(programlisting)
31498
#, no-wrap
31499
msgid ""
31500
"\n"
31501
"#\n"
31502
"# Define the main nightly save backup job\n"
31503
"# By default, this job will back up to disk in \n"
31504
"Job {\n"
31505
" Name = \"BackupServer\"\n"
31506
" JobDefs = \"DefaultJob\"\n"
31507
" Write Bootstrap = \"/var/lib/bacula/Client1.bsr\"\n"
31508
"}\n"
31509
msgstr ""
31510
"\n"
31511
"#\n"
31512
"# Define the main nightly save backup job\n"
31513
"# By default, this job will back up to disk in \n"
31514
"Job {\n"
31515
" Name = \"BackupServer\"\n"
31516
" JobDefs = \"DefaultJob\"\n"
31517
" Write Bootstrap = \"/var/lib/bacula/Client1.bsr\"\n"
31518
"}\n"
31519
31520
#: serverguide/C/backups.xml:644(para)
31521
msgid ""
31522
"The example above changes the job name to <emphasis>BackupServer</emphasis> "
31523
"matching the machine's host name. Replace <quote>BackupServer</quote> with "
31524
"your appropriate hostname, or other descriptive name."
31525
msgstr ""
31526
"The example above changes the job name to <emphasis>BackupServer</emphasis> "
31527
"matching the machine's host name. Replace <quote>BackupServer</quote> with "
31528
"your appropriate hostname, or other descriptive name."
31529
31530
#: serverguide/C/backups.xml:649(para)
31531
msgid ""
31532
"The <emphasis>Console</emphasis> can be used to query the "
31533
"<emphasis>Director</emphasis> about jobs, but to use the Console with a "
31534
"<emphasis>non-root</emphasis> user, the user needs to be in the "
31535
"<emphasis>bacula</emphasis> group. To add a user to the bacula group enter "
31536
"the following from a terminal:"
31537
msgstr ""
31538
"The <emphasis>Console</emphasis> can be used to query the "
31539
"<emphasis>Director</emphasis> about jobs, but to use the Console with a "
31540
"<emphasis>non-root</emphasis> user, the user needs to be in the "
31541
"<emphasis>bacula</emphasis> group. To add a user to the bacula group enter "
31542
"the following from a terminal:"
31543
31544
#: serverguide/C/backups.xml:655(command)
31545
msgid "sudo adduser $username bacula"
31546
msgstr "sudo adduser $username bacula"
31547
31548
#: serverguide/C/backups.xml:658(para)
31549
msgid ""
31550
"Replace <emphasis>$username</emphasis> with the actual username. Also, if "
31551
"you are adding the current user to the group you should log out and back in "
31552
"for the new permissions to take effect."
31553
msgstr ""
31554
"Replace <emphasis>$username</emphasis> with the actual username. Also, if "
31555
"you are adding the current user to the group you should log out and back in "
31556
"for the new permissions to take effect."
31557
31558
#: serverguide/C/backups.xml:665(title)
31559
msgid "Localhost Backup"
31560
msgstr "Localhost Backup"
31561
31562
#: serverguide/C/backups.xml:666(para)
31563
msgid ""
31564
"This section describes how to backup specified directories on a single host "
31565
"to a local tape drive."
31566
msgstr ""
31567
"This section describes how to backup specified directories on a single host "
31568
"to a local tape drive."
31569
31570
#: serverguide/C/backups.xml:671(para)
31571
msgid ""
31572
"First, the <emphasis>Storage</emphasis> device needs to be configured. Edit "
31573
"<filename>/etc/bacula/bacula-sd.conf</filename> add:"
31574
msgstr ""
31575
"First, the <emphasis>Storage</emphasis> device needs to be configured. Edit "
31576
"<filename>/etc/bacula/bacula-sd.conf</filename> add:"
31577
31578
#: serverguide/C/backups.xml:674(programlisting)
31579
#, no-wrap
31580
msgid ""
31581
"\n"
31582
"Device {\n"
31583
" Name = \"Tape Drive\"\n"
31584
" Device Type = tape\n"
31585
" Media Type = DDS-4\n"
31586
" Archive Device = /dev/st0\n"
31587
" Hardware end of medium = No;\n"
31588
" AutomaticMount = yes; # when device opened, read it\n"
31589
" AlwaysOpen = Yes;\n"
31590
" RemovableMedia = yes;\n"
31591
" RandomAccess = no;\n"
31592
" Alert Command = \"sh -c 'tapeinfo -f %c | grep TapeAlert'\"\n"
31593
"}\n"
31594
msgstr ""
31595
"\n"
31596
"Device {\n"
31597
" Name = \"Tape Drive\"\n"
31598
" Device Type = tape\n"
31599
" Media Type = DDS-4\n"
31600
" Archive Device = /dev/st0\n"
31601
" Hardware end of medium = No;\n"
31602
" AutomaticMount = yes; # when device opened, read it\n"
31603
" AlwaysOpen = Yes;\n"
31604
" RemovableMedia = yes;\n"
31605
" RandomAccess = no;\n"
31606
" Alert Command = \"sh -c 'tapeinfo -f %c | grep TapeAlert'\"\n"
31607
"}\n"
31608
31609
#: serverguide/C/backups.xml:688(para)
31610
msgid ""
31611
"The example is for a <emphasis>DDS-4</emphasis> tape drive. Adjust the Media "
31612
"Type and Archive Device to match your hardware."
31613
msgstr ""
31614
"The example is for a <emphasis>DDS-4</emphasis> tape drive. Adjust the Media "
31615
"Type and Archive Device to match your hardware."
31616
31617
#: serverguide/C/backups.xml:691(para)
31618
msgid "You could also uncomment one of the other examples in the file."
31619
msgstr "You could also uncomment one of the other examples in the file."
31620
31621
#: serverguide/C/backups.xml:696(para)
31622
msgid ""
31623
"After editing <filename>/etc/bacula/bacula-sd.conf</filename> the "
31624
"<application>Storage</application> daemon will need to be restarted:"
31625
msgstr ""
31626
"After editing <filename>/etc/bacula/bacula-sd.conf</filename> the "
31627
"<application>Storage</application> daemon will need to be restarted:"
31628
31629
#: serverguide/C/backups.xml:701(command)
31630
msgid "sudo /etc/init.d/bacula-sd restart"
31631
msgstr "sudo /etc/init.d/bacula-sd restart"
31632
31633
#: serverguide/C/backups.xml:705(para)
31634
msgid ""
31635
"Now add a <emphasis>Storage</emphasis> resource in "
31636
"<filename>/etc/bacula/bacula-dir.conf</filename> to use the new Device:"
31637
msgstr ""
31638
"Now add a <emphasis>Storage</emphasis> resource in "
31639
"<filename>/etc/bacula/bacula-dir.conf</filename> to use the new Device:"
31640
31641
#: serverguide/C/backups.xml:708(programlisting)
31642
#, no-wrap
31643
msgid ""
31644
"\n"
31645
"# Definition of \"Tape Drive\" storage device\n"
31646
"Storage {\n"
31647
" Name = TapeDrive\n"
31648
" # Do not use \"localhost\" here \n"
31649
" Address = backupserver # N.B. Use a fully qualified name "
31650
"here\n"
31651
" SDPort = 9103\n"
31652
" Password = \"Cv70F6pf1t6pBopT4vQOnigDrR0v3LT3Cgkiyj\"\n"
31653
" Device = \"Tape Drive\"\n"
31654
" Media Type = tape\n"
31655
"}\n"
31656
msgstr ""
31657
"\n"
31658
"# Definition of \"Tape Drive\" storage device\n"
31659
"Storage {\n"
31660
" Name = TapeDrive\n"
31661
" # Do not use \"localhost\" here \n"
31662
" Address = backupserver # N.B. Use a fully qualified name "
31663
"here\n"
31664
" SDPort = 9103\n"
31665
" Password = \"Cv70F6pf1t6pBopT4vQOnigDrR0v3LT3Cgkiyj\"\n"
31666
" Device = \"Tape Drive\"\n"
31667
" Media Type = tape\n"
31668
"}\n"
31669
31670
#: serverguide/C/backups.xml:720(para)
31671
msgid ""
31672
"The <emphasis>Address</emphasis> directive needs to be the Fully Qualified "
31673
"Domain Name (FQDN) of the server. Change <emphasis>backupserver</emphasis> "
31674
"to the actual host name."
31675
msgstr ""
31676
"The <emphasis>Address</emphasis> directive needs to be the Fully Qualified "
31677
"Domain Name (FQDN) of the server. Change <emphasis>backupserver</emphasis> "
31678
"to the actual host name."
31679
31680
#: serverguide/C/backups.xml:724(para)
31681
msgid ""
31682
"Also, make sure the <emphasis>Password</emphasis> directive matches the "
31683
"password string in <filename>/etc/bacula/bacula-sd.conf</filename>."
31684
msgstr ""
31685
"Also, make sure the <emphasis>Password</emphasis> directive matches the "
31686
"password string in <filename>/etc/bacula/bacula-sd.conf</filename>."
31687
31688
#: serverguide/C/backups.xml:730(para)
31689
msgid ""
31690
"Create a new <emphasis>FileSet</emphasis>, which will determine what "
31691
"directories to backup, by adding:"
31692
msgstr ""
31693
"Create a new <emphasis>FileSet</emphasis>, which will determine what "
31694
"directories to backup, by adding:"
31695
31696
#: serverguide/C/backups.xml:733(programlisting)
31697
#, no-wrap
31698
msgid ""
31699
"\n"
31700
"# LocalhostBacup FileSet.\n"
31701
"FileSet {\n"
31702
" Name = \"LocalhostFiles\"\n"
31703
" Include {\n"
31704
" Options {\n"
31705
" signature = MD5\n"
31706
" compression=GZIP\n"
31707
" }\n"
31708
" File = /etc\n"
31709
" File = /home\n"
31710
" }\n"
31711
"}\n"
31712
msgstr ""
31713
"\n"
31714
"# LocalhostBacup FileSet.\n"
31715
"FileSet {\n"
31716
" Name = \"LocalhostFiles\"\n"
31717
" Include {\n"
31718
" Options {\n"
31719
" signature = MD5\n"
31720
" compression=GZIP\n"
31721
" }\n"
31722
" File = /etc\n"
31723
" File = /home\n"
31724
" }\n"
31725
"}\n"
31726
31727
#: serverguide/C/backups.xml:747(para)
31728
msgid ""
31729
"This <emphasis>FileSet</emphasis> will backup the <filename "
31730
"role=\"directory\">/etc</filename> and <filename "
31731
"role=\"directory\">/home</filename> directories. The "
31732
"<emphasis>Options</emphasis> resource directives configure the FileSet to "
31733
"create a MD5 signature for each file backed up, and to compress the files "
31734
"using GZIP."
31735
msgstr ""
31736
"This <emphasis>FileSet</emphasis> will backup the <filename "
31737
"role=\"directory\">/etc</filename> and <filename "
31738
"role=\"directory\">/home</filename> directories. The "
31739
"<emphasis>Options</emphasis> resource directives configure the FileSet to "
31740
"create a MD5 signature for each file backed up, and to compress the files "
31741
"using GZIP."
31742
31743
#: serverguide/C/backups.xml:754(para)
31744
msgid "Next, create a new <emphasis>Schedule</emphasis> for the backup job:"
31745
msgstr "Next, create a new <emphasis>Schedule</emphasis> for the backup job:"
31746
31747
#: serverguide/C/backups.xml:757(programlisting)
31748
#, no-wrap
31749
msgid ""
31750
"\n"
31751
"# LocalhostBackup Schedule -- Daily.\n"
31752
"Schedule {\n"
31753
" Name = \"LocalhostDaily\"\n"
31754
" Run = Full daily at 00:01\n"
31755
"}\n"
31756
msgstr ""
31757
"\n"
31758
"# LocalhostBackup Schedule -- Daily.\n"
31759
"Schedule {\n"
31760
" Name = \"LocalhostDaily\"\n"
31761
" Run = Full daily at 00:01\n"
31762
"}\n"
31763
31764
#: serverguide/C/backups.xml:764(para)
31765
msgid ""
31766
"The job will run every day at 00:01 or 12:01 am. There are many other "
31767
"scheduling options available."
31768
msgstr ""
31769
"The job will run every day at 00:01 or 12:01 am. There are many other "
31770
"scheduling options available."
31771
31772
#: serverguide/C/backups.xml:769(para)
31773
msgid "Finally create the <emphasis>Job</emphasis>:"
31774
msgstr "Finally create the <emphasis>Job</emphasis>:"
31775
31776
#: serverguide/C/backups.xml:772(programlisting)
31777
#, no-wrap
31778
msgid ""
31779
"\n"
31780
"# Localhost backup.\n"
31781
"Job {\n"
31782
" Name = \"LocalhostBackup\"\n"
31783
" JobDefs = \"DefaultJob\"\n"
31784
" Enabled = yes\n"
31785
" Level = Full\n"
31786
" FileSet = \"LocalhostFiles\"\n"
31787
" Schedule = \"LocalhostDaily\"\n"
31788
" Storage = TapeDrive\n"
31789
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
31790
"} \n"
31791
msgstr ""
31792
"\n"
31793
"# Localhost backup.\n"
31794
"Job {\n"
31795
" Name = \"LocalhostBackup\"\n"
31796
" JobDefs = \"DefaultJob\"\n"
31797
" Enabled = yes\n"
31798
" Level = Full\n"
31799
" FileSet = \"LocalhostFiles\"\n"
31800
" Schedule = \"LocalhostDaily\"\n"
31801
" Storage = TapeDrive\n"
31802
" Write Bootstrap = \"/var/lib/bacula/LocalhostBackup.bsr\"\n"
31803
"} \n"
31804
31805
#: serverguide/C/backups.xml:785(para)
31806
msgid ""
31807
"The job will do a <emphasis>Full</emphasis> backup every day to the tape "
31808
"drive."
31809
msgstr ""
31810
"The job will do a <emphasis>Full</emphasis> backup every day to the tape "
31811
"drive."
31812
31813
#: serverguide/C/backups.xml:790(para)
31814
msgid ""
31815
"Each tape used will need to have a <emphasis>Label</emphasis>. If the "
31816
"current tape does not have a label <application>Bacula</application> will "
31817
"send an email letting you know. To label a tape using the "
31818
"<application>Console</application> enter the following from a terminal:"
31819
msgstr ""
31820
"Each tape used will need to have a <emphasis>Label</emphasis>. If the "
31821
"current tape does not have a label <application>Bacula</application> will "
31822
"send an e-mail letting you know. To label a tape using the "
31823
"<application>Console</application> enter the following from a terminal:"
31824
31825
#: serverguide/C/backups.xml:796(command)
31826
msgid "bconsole"
31827
msgstr "bconsole"
31828
31829
#: serverguide/C/backups.xml:800(para)
31830
msgid "At the Bacula Console prompt enter:"
31831
msgstr "At the Bacula Console prompt enter:"
31832
31833
#: serverguide/C/backups.xml:804(command)
31834
msgid "label"
31835
msgstr "label"
31836
31837
#: serverguide/C/backups.xml:808(para)
31838
msgid ""
31839
"You will then be prompted for the <emphasis>Storage</emphasis> resource:"
31840
msgstr ""
31841
"You will then be prompted for the <emphasis>Storage</emphasis> resource:"
31842
31843
#: serverguide/C/backups.xml:818(userinput)
31844
#, no-wrap
31845
msgid "2"
31846
msgstr "2"
31847
31848
#: serverguide/C/backups.xml:812(computeroutput)
31849
#, no-wrap
31850
msgid ""
31851
"\n"
31852
"Automatically selected Catalog: MyCatalog\n"
31853
"Using Catalog \"MyCatalog\"\n"
31854
"The defined Storage resources are:\n"
31855
" 1: File\n"
31856
" 2: TapeDrive\n"
31857
"Select Storage resource (1-2):<placeholder-1/>\n"
31858
msgstr ""
31859
"\n"
31860
"Automatically selected Catalogue: MyCatalogue\n"
31861
"Using Catalogue \"MyCatalogue\"\n"
31862
"The defined Storage resources are:\n"
31863
" 1: File\n"
31864
" 2: TapeDrive\n"
31865
"Select Storage resource (1-2):<placeholder-1/>\n"
31866
31867
#: serverguide/C/backups.xml:823(para)
31868
msgid "Enter the new <emphasis>Volume</emphasis> name:"
31869
msgstr "Enter the new <emphasis>Volume</emphasis> name:"
31870
31871
#: serverguide/C/backups.xml:828(userinput)
31872
#, no-wrap
31873
msgid "Sunday"
31874
msgstr "Sunday"
31875
31876
#: serverguide/C/backups.xml:827(computeroutput)
31877
#, no-wrap
31878
msgid ""
31879
"\n"
31880
"Enter new Volume name: <placeholder-1/>\n"
31881
"Defined Pools:\n"
31882
" 1: Default\n"
31883
" 2: Scratch"
31884
msgstr ""
31885
"\n"
31886
"Enter new Volume name: <placeholder-1/>\n"
31887
"Defined Pools:\n"
31888
" 1: Default\n"
31889
" 2: Scratch"
31890
31891
#: serverguide/C/backups.xml:833(para)
31892
msgid "Replace <emphasis>Sunday</emphasis> with the desired label."
31893
msgstr "Replace <emphasis>Sunday</emphasis> with the desired label."
31894
31895
#: serverguide/C/backups.xml:838(para)
31896
msgid "Now, select the <emphasis>Pool</emphasis>:"
31897
msgstr "Now, select the <emphasis>Pool</emphasis>:"
31898
31899
#: serverguide/C/backups.xml:843(userinput)
31900
#, no-wrap
31901
msgid "1"
31902
msgstr "1"
31903
31904
#: serverguide/C/backups.xml:842(computeroutput)
31905
#, no-wrap
31906
msgid ""
31907
"\n"
31908
"Select the Pool (1-2): <placeholder-1/>\n"
31909
"Connecting to Storage daemon TapeDrive at backupserver:9103 ...\n"
31910
"Sending label command for Volume \"Sunday\" Slot 0 ...\n"
31911
msgstr ""
31912
"\n"
31913
"Select the Pool (1-2): <placeholder-1/>\n"
31914
"Connecting to Storage daemon TapeDrive at backupserver:9103 ...\n"
31915
"Sending label command for Volume \"Sunday\" Slot 0 ...\n"
31916
31917
#: serverguide/C/backups.xml:850(para)
31918
msgid ""
31919
"Congratulations, you have now configured <emphasis>Bacula</emphasis> to "
31920
"backup the localhost to an attached tape drive."
31921
msgstr ""
31922
"Congratulations, you have now configured <emphasis>Bacula</emphasis> to "
31923
"backup the localhost to an attached tape drive."
31924
31925
#: serverguide/C/backups.xml:858(para)
31926
msgid ""
31927
"For more <emphasis>Bacula</emphasis> configuration options refer to the "
31928
"<ulink url=\"http://www.bacula.org/en/rel-manual/index.html\">Bacula User's "
31929
"Manual</ulink>"
31930
msgstr ""
31931
"For more <emphasis>Bacula</emphasis> configuration options refer to the "
31932
"<ulink url=\"http://www.bacula.org/en/rel-manual/index.html\">Bacula User's "
31933
"Manual</ulink>"
31934
31935
#: serverguide/C/backups.xml:864(para)
31936
msgid ""
31937
"The <ulink url=\"http://www.bacula.org/\">Bacula Home Page</ulink> contains "
31938
"the latest Bacula news and developments."
31939
msgstr ""
31940
"The <ulink url=\"http://www.bacula.org/\">Bacula Home Page</ulink> contains "
31941
"the latest Bacula news and developments."
31942
31943
#: serverguide/C/backups.xml:869(para)
31944
msgid ""
31945
"Also, see the <ulink url=\"https://help.ubuntu.com/community/Bacula\">Bacula "
31946
"Ubuntu Wiki</ulink> page."
31947
msgstr ""
31948
31949
#. Put one translator per line, in the form of NAME <EMAIL>, YEAR1, YEAR2
31950
#: serverguide/C/backups.xml:0(None)
31951
msgid "translator-credits"
31952
msgstr ""
31953
"Launchpad Contributions:\n"
31954
" Robert Readman https://launchpad.net/~robert-readman\n"
31955
" ZhongHan Cai https://launchpad.net/~caizhonghan"
31956
31957
#~ msgid ""
31958
#~ "The Apache2 web server is available in Ubuntu Linux. To install Apache2:"
31959
#~ msgstr ""
31960
#~ "The Apache2 Web server is available in Ubuntu Linux. To install Apache2:"
31961
31962
#~ msgid ""
31963
#~ "The <emphasis>DocumentRoot</emphasis> directive specifies where Apache "
31964
#~ "should look for the files that make up the site. The default value is "
31965
#~ "/var/www. No site is configured there, but if you uncomment the "
31966
#~ "<emphasis>RedirectMatch</emphasis> directive in "
31967
#~ "<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
31968
#~ "to /var/www/apache2-default where the default Apache2 site awaits. Change "
31969
#~ "this value in your site's virtual host file, and remember to create that "
31970
#~ "directory if necessary!"
31971
#~ msgstr ""
31972
#~ "The <emphasis>DocumentRoot</emphasis> directive specifies where Apache "
31973
#~ "should look for the files that make up the site. The default value is "
31974
#~ "/var/www. No site is configured there, but if you uncomment the "
31975
#~ "<emphasis>RedirectMatch</emphasis> directive in "
31976
#~ "<filename>/etc/apache2/apache2.conf</filename> requests will be redirected "
31977
#~ "to /var/www/apache2-default where the default Apache2 site awaits. Change "
31978
#~ "this value in your site's virtual host file, and remember to create that "
31979
#~ "directory if necessary!"
31980
31981
#~ msgid ""
31982
#~ "For example, when a user requests the page "
31983
#~ "http://www.example.com/this_directory/, he or she will get either the "
31984
#~ "DirectoryIndex page if it exists, a server-generated directory list if it "
31985
#~ "does not and the Indexes option is specified, or a Permission Denied page if "
31986
#~ "neither is true. The server will try to find one of the files listed in the "
31987
#~ "DirectoryIndex directive and will return the first one it finds. If it does "
31988
#~ "not find any of these files and if Options Indexes is set for that "
31989
#~ "directory, the server will generate and return a list, in HTML format, of "
31990
#~ "the subdirectories and files in the directory. The default value, found in "
31991
#~ "<filename>/etc/apache2/apache2.conf</filename> is \" index.html index.cgi "
31992
#~ "index.pl index.php index.xhtml\". Thus, if Apache2 finds a file in a "
31993
#~ "requested directory matching any of these names, the first will be displayed."
31994
#~ msgstr ""
31995
#~ "For example, when a user requests the page "
31996
#~ "http://www.example.com/this_directory/, he or she will get either the "
31997
#~ "DirectoryIndex page if it exists, a server-generated directory list if it "
31998
#~ "does not and the Indexes option is specified, or a Permission Denied page if "
31999
#~ "neither is true. The server will try to find one of the files listed in the "
32000
#~ "DirectoryIndex directive and will return the first one it finds. If it does "
32001
#~ "not find any of these files and if Options Indexes is set for that "
32002
#~ "directory, the server will generate and return a list, in HTML format, of "
32003
#~ "the subdirectories and files in the directory. The default value, found in "
32004
#~ "<filename>/etc/apache2/apache2.conf</filename> is \" index.html index.cgi "
32005
#~ "index.pl index.php index.xhtml\". Thus, if Apache2 finds a file in a "
32006
#~ "requested directory matching any of these names, the first will be displayed."
32007
32008
#~ msgid "Apache Modules"
32009
#~ msgstr "Apache Modules"
32010
32011
#~ msgid ""
32012
#~ "Depending on how you obtained your certificate you may need to enter a "
32013
#~ "passphrase when <application>Apache</application> starts."
32014
#~ msgstr ""
32015
#~ "Depending on how you obtained your certificate you may need to enter a "
32016
#~ "passphrase when <application>Apache</application> starts."
32017
32018
#~ msgid ""
32019
#~ "This section assumes you have installed and configured Apache 2 Web Server "
32020
#~ "and MySQL Database Server. You can refer to Apache 2 section and MySQL "
32021
#~ "sections in this document to install and configure Apache 2 and MySQL "
32022
#~ "respectively."
32023
#~ msgstr ""
32024
#~ "This section assumes you have installed and configured Apache 2 Web Server "
32025
#~ "and MySQL Database Server. You can refer to Apache 2 section and MySQL "
32026
#~ "sections in this document to install and configure Apache 2 and MySQL "
32027
#~ "respectively."
32028
32029
#~ msgid ""
32030
#~ "Again, Using Squid's access control, you may configure use of Internet "
32031
#~ "services proxied by Squid to be available only users with certain Internet "
32032
#~ "Protocol (IP) addresses. For example, we will illustrate access by users of "
32033
#~ "the 192.168.42.0/24 subnetwork only:"
32034
#~ msgstr ""
32035
#~ "Again, Using Squid's access control, you may configure use of Internet "
32036
#~ "services proxied by Squid to be available only users with certain Internet "
32037
#~ "Protocol (IP) addresses. For example, we will illustrate access by users of "
32038
#~ "the 192.168.42.0/24 subnetwork only:"
32039
32040
#~ msgid "egrep '(vmx|svm)' /proc/cpuinfo"
32041
#~ msgstr "egrep '(vmx|svm)' /proc/cpuinfo"
32042
32043
#~ msgid ""
32044
#~ "If nothing is printed, it means that your cpu does <emphasis>not</emphasis> "
32045
#~ "support hardware virtualization."
32046
#~ msgstr ""
32047
#~ "If nothing is printed, it means that your cpu does <emphasis>not</emphasis> "
32048
#~ "support hardware virtualisation."
32049
32050
#~ msgid ""
32051
#~ "On most computer whose processor supports virtualization, it is necessary to "
32052
#~ "activate an option in the bios to enable it. The method described above does "
32053
#~ "not show the status of it's activation."
32054
#~ msgstr ""
32055
#~ "On most computer whose processor supports virtualisation, it is necessary to "
32056
#~ "activate an option in the bios to enable it. The method described above does "
32057
#~ "not show the status of it's activation."
32058
32059
#~ msgid ""
32060
#~ "To access the Subversion repository via WebDAV protocol, you must configure "
32061
#~ "your Apache 2 web server. You must add the following snippet in your "
32062
#~ "<filename>/etc/apache2/apache2.conf</filename> file:"
32063
#~ msgstr ""
32064
#~ "To access the Subversion repository via WebDAV protocol, you must configure "
32065
#~ "your Apache 2 Web server. You must add the following snippet in your "
32066
#~ "<filename>/etc/apache2/apache2.conf</filename> file:"
32067
32068
#~ msgid ""
32069
#~ "To disable the reboot action taken by pressing the "
32070
#~ "<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
32071
#~ "eycombo> key combination, comment out the following line in the file "
32072
#~ "<filename>/etc/event.d/control-alt-delete</filename>."
32073
#~ msgstr ""
32074
#~ "To disable the reboot action taken by pressing the "
32075
#~ "<keycombo><keycap>Ctrl</keycap><keycap>Alt</keycap><keycap>Delete</keycap></k"
32076
#~ "eycombo> key combination, comment out the following line in the file "
32077
#~ "<filename>/etc/event.d/control-alt-delete</filename>."
32078
32079
#, no-wrap
32080
#~ msgid ""
32081
#~ "\n"
32082
#~ "#exec /sbin/shutdown -r now \"Control-Alt-Delete pressed\"\n"
32083
#~ msgstr ""
32084
#~ "\n"
32085
#~ "#exec /sbin/shutdown -r now \"Control-Alt-Delete pressed\"\n"
32086
32087
#~ msgid "GRUB Password Security"
32088
#~ msgstr "GRUB Password Security"
32089
32090
#~ msgid ""
32091
#~ "Ubuntu installs GNU GRUB as its default boot loader, which allows for great "
32092
#~ "flexibility and recovery options. For example, when you install additional "
32093
#~ "kernel images, these are automatically added as available boot options in "
32094
#~ "the <application>grub</application> menu. Also, by default, alternate boot "
32095
#~ "options are available for each kernel entry that may be used for system "
32096
#~ "recovery, aptly labeled (recovery mode). Recovery mode simply boots the "
32097
#~ "corresponding kernel image into single user mode (init 1), which lands the "
32098
#~ "administrator at a root prompt without the need for any password."
32099
#~ msgstr ""
32100
#~ "Ubuntu installs GNU GRUB as its default boot loader, which allows for great "
32101
#~ "flexibility and recovery options. For example, when you install additional "
32102
#~ "kernel images, these are automatically added as available boot options in "
32103
#~ "the <application>grub</application> menu. Also, by default, alternate boot "
32104
#~ "options are available for each kernel entry that may be used for system "
32105
#~ "recovery, aptly labeled (recovery mode). Recovery mode simply boots the "
32106
#~ "corresponding kernel image into single user mode (init 1), which lands the "
32107
#~ "administrator at a root prompt without the need for any password."
32108
32109
#~ msgid ""
32110
#~ "Therefore, it is important to control who may edit the "
32111
#~ "<application>grub</application> menu items which, would otherwise allow for "
32112
#~ "someone to perform the following dangerous actions:"
32113
#~ msgstr ""
32114
#~ "Therefore, it is important to control who may edit the "
32115
#~ "<application>grub</application> menu items which, would otherwise allow for "
32116
#~ "someone to perform the following dangerous actions:"
32117
32118
#~ msgid "Pass kernel options at boot up."
32119
#~ msgstr "Pass kernel options at boot up."
32120
32121
#~ msgid "Boot the server into single user mode."
32122
#~ msgstr "Boot the server into single user mode."
32123
32124
#~ msgid ""
32125
#~ "To add a password for use with <application>grub</application>, first you "
32126
#~ "must generate an md5 password hash using the <application>grub-md5-"
32127
#~ "crypt</application> utility:"
32128
#~ msgstr ""
32129
#~ "To add a password for use with <application>grub</application>, first you "
32130
#~ "must generate an md5 password hash using the <application>grub-md5-"
32131
#~ "crypt</application> utility:"
32132
32133
#~ msgid "grub-md5-crypt"
32134
#~ msgstr "grub-md5-crypt"
32135
32136
#~ msgid ""
32137
#~ "The command will ask you to enter a password and offer a resulting hash "
32138
#~ "value as shown below:"
32139
#~ msgstr ""
32140
#~ "The command will ask you to enter a password and offer a resulting hash "
32141
#~ "value as shown below:"
32142
32143
#, no-wrap
32144
#~ msgid "(enter new password)"
32145
#~ msgstr "(enter new password)"
32146
32147
#, no-wrap
32148
#~ msgid "(repeat password)"
32149
#~ msgstr "(repeat password)"
32150
32151
#, no-wrap
32152
#~ msgid ""
32153
#~ "Password: <placeholder-1/>\n"
32154
#~ "Retype password: <placeholder-2/>\n"
32155
#~ "$1$s3YiK$M3lxAbqA6JLm2FbDWnClQ0"
32156
#~ msgstr ""
32157
#~ "Password: <placeholder-1/>\n"
32158
#~ "Retype password: <placeholder-2/>\n"
32159
#~ "$1$s3YiK$M3lxAbqA6JLm2FbDWnClQ0"
32160
32161
#, no-wrap
32162
#~ msgid "password --md5 $1$s3YiK$M3lxAbqA6JLm2FbDWnClQ0"
32163
#~ msgstr "password --md5 $1$s3YiK$M3lxAbqA6JLm2FbDWnClQ0"
32164
32165
#~ msgid ""
32166
#~ "To require use of the password for entering single user mode, change the "
32167
#~ "value of the <varname>lockalternative</varname> variable in the file "
32168
#~ "<filename>/boot/grub/menu.lst</filename> to <varname>true</varname>, as "
32169
#~ "shown in the following example."
32170
#~ msgstr ""
32171
#~ "To require use of the password for entering single user mode, change the "
32172
#~ "value of the <varname>lockalternative</varname> variable in the file "
32173
#~ "<filename>/boot/grub/menu.lst</filename> to <varname>true</varname>, as "
32174
#~ "shown in the following example."
32175
32176
#, no-wrap
32177
#~ msgid "# lockalternative=true"
32178
#~ msgstr "# lockalternative=true"
32179
32180
#~ msgid ""
32181
#~ "This does not prevent someone from booting the server from alternate media. "
32182
#~ "A determined attacker would simply boot into an alternate environment, "
32183
#~ "overwrite your master boot record, mount or copy your physical volumes, "
32184
#~ "destroy your data, or anything else they can imagine. Please explore other "
32185
#~ "countermeasures that may help you with these types of attacks."
32186
#~ msgstr ""
32187
#~ "This does not prevent someone from booting the server from alternate media. "
32188
#~ "A determined attacker would simply boot into an alternate environment, "
32189
#~ "overwrite your master boot record, mount or copy your physical volumes, "
32190
#~ "destroy your data, or anything else they can imagine. Please explore other "
32191
#~ "countermeasures that may help you with these types of attacks."
32192
32193
#~ msgid "Ethernet"
32194
#~ msgstr "Ethernet"
32195
32196
#~ msgid ""
32197
#~ "Many more configurations are possible, including dialup PPP interfaces, IPv6 "
32198
#~ "networking, VPN devices, etc. Refer to <application>man 5 "
32199
#~ "interfaces</application> for more information and supported options. "
32200
#~ "Remember that <filename>/etc/network/interfaces</filename> is used by the "
32201
#~ "<application>ifup</application>/<application>ifdown</application> scripts as "
32202
#~ "a higher level configuration scheme than may be used in some other Linux "
32203
#~ "distributions, and that the traditional, lower level utilities such as "
32204
#~ "<application>ifconfig</application>, <application>route</application>, and "
32205
#~ "<application>dhclient</application> are still available to you for ad hoc "
32206
#~ "configurations."
32207
#~ msgstr ""
32208
#~ "Many more configurations are possible, including dialup PPP interfaces, IPv6 "
32209
#~ "networking, VPN devices, etc. Refer to <application>man 5 "
32210
#~ "interfaces</application> for more information and supported options. "
32211
#~ "Remember that <filename>/etc/network/interfaces</filename> is used by the "
32212
#~ "<application>ifup</application>/<application>ifdown</application> scripts as "
32213
#~ "a higher level configuration scheme than may be used in some other Linux "
32214
#~ "distributions, and that the traditional, lower level utilities such as "
32215
#~ "<application>ifconfig</application>, <application>route</application>, and "
32216
#~ "<application>dhclient</application> are still available to you for ad hoc "
32217
#~ "configurations."
32218
32219
#~ msgid "Managing DNS Entries"
32220
#~ msgstr "Managing DNS Entries"
32221
32222
#~ msgid ""
32223
#~ "This section explains how to configure which nameserver to use when "
32224
#~ "resolving IP addresses to hostnames and vice versa. It does not explain how "
32225
#~ "to configure the system as a name server."
32226
#~ msgstr ""
32227
#~ "This section explains how to configure which nameserver to use when "
32228
#~ "resolving IP addresses to hostnames and vice versa. It does not explain how "
32229
#~ "to configure the system as a name server."
32230
32231
#, no-wrap
32232
#~ msgid ""
32233
#~ "\n"
32234
#~ "search com\n"
32235
#~ "nameserver 204.11.126.131\n"
32236
#~ "nameserver 64.125.134.133\n"
32237
#~ "nameserver 64.125.134.132\n"
32238
#~ "nameserver 208.185.179.218\n"
32239
#~ msgstr ""
32240
#~ "\n"
32241
#~ "search com\n"
32242
#~ "nameserver 204.11.126.131\n"
32243
#~ "nameserver 64.125.134.133\n"
32244
#~ "nameserver 64.125.134.132\n"
32245
#~ "nameserver 208.185.179.218\n"
32246
32247
#~ msgid ""
32248
#~ "The <application>search</application> key specifies the string which will be "
32249
#~ "appended to an incomplete hostname. Here, we have configured it to "
32250
#~ "<application>com</application>. So, when we run: <command>ping "
32251
#~ "ubuntu</command> it would be interpreted as <command>ping "
32252
#~ "ubuntu.com</command>."
32253
#~ msgstr ""
32254
#~ "The <application>search</application> key specifies the string which will be "
32255
#~ "appended to an incomplete hostname. Here, we have configured it to "
32256
#~ "<application>com</application>. So, when we run: <command>ping "
32257
#~ "ubuntu</command> it would be interpreted as <command>ping "
32258
#~ "ubuntu.com</command>."
32259
32260
#~ msgid ""
32261
#~ "The <application>nameserver</application> key specifies the nameserver IP "
32262
#~ "address. It will be used to resolve a given IP address or hostname. This "
32263
#~ "file can have multiple nameserver entries. The nameservers will be used by "
32264
#~ "the network query in the same order."
32265
#~ msgstr ""
32266
#~ "The <application>nameserver</application> key specifies the nameserver IP "
32267
#~ "address. It will be used to resolve a given IP address or hostname. This "
32268
#~ "file can have multiple nameserver entries. The nameservers will be used by "
32269
#~ "the network query in the same order."
32270
32271
#~ msgid ""
32272
#~ "If the DNS server names are retrieved dynamically from DHCP or PPPoE "
32273
#~ "(retrieved from your ISP), do not add nameserver entries in this file. It "
32274
#~ "will be overwritten."
32275
#~ msgstr ""
32276
#~ "If the DNS server names are retrieved dynamically from DHCP or PPPoE "
32277
#~ "(retrieved from your ISP), do not add nameserver entries in this file. It "
32278
#~ "will be overwritten."
32279
32280
#~ msgid "Managing Hosts"
32281
#~ msgstr "Managing Hosts"
32282
32283
#~ msgid ""
32284
#~ "If your network contains computers whose IP addresses are not listed in DNS, "
32285
#~ "it is recommended that you add them to the <filename>/etc/hosts</filename> "
32286
#~ "file."
32287
#~ msgstr ""
32288
#~ "If your network contains computers whose IP addresses are not listed in DNS, "
32289
#~ "it is recommended that you add them to the <filename>/etc/hosts</filename> "
32290
#~ "file."
32291
32292
#~ msgid "Related Pages"
32293
#~ msgstr "Related Pages"
32294
32295
#~ msgid "LDAP replication"
32296
#~ msgstr "LDAP replication"
32297
32298
#, no-wrap
32299
#~ msgid ""
32300
#~ "\n"
32301
#~ "local all postgres md5 sameuser\n"
32302
#~ msgstr ""
32303
#~ "\n"
32304
#~ "local all postgres md5 sameuser\n"
Loggerhead is a web-based interface for Breezy
Version: 2.0.1